None b30a24e2fb feat: add TLS connection support for Redis and PostgreSQL (#950) ... - Add 10 env vars for Redis/PostgreSQL TLS (REDIS_SSL, REDIS_SSL_VERIFY, REDIS_SSL_CA_CERT, REDIS_SSL_CERT, REDIS_SSL_KEY, POSTGRES_SSL, POSTGRES_SSL_MODE, POSTGRES_SSL_CA_CERT, POSTGRES_SSL_CERT, POSTGRES_SSL_KEY) - Propagate SSL params to all Redis connection points: RedisClient, stream view, PubSub, client manager, Celery broker/result backend, Django Channels, and pre-Django startup scripts - Add Celery SSL config via URL query string params (required by Kombu's internal URL parsing) - Add PostgreSQL sslmode and certificate options to DATABASES config - Add startup validation: cert file existence, URL scheme conflict detection, TLS status logging - Add TLS error hints to Redis connection failure messages - Add Connection Security panel in System Settings (modular mode only) showing encryption, verification, and mTLS status - Add PG client key permission fix in web and celery entrypoints for Docker Desktop compatibility (0777 to 0600) - Add TLS env var passthrough in entrypoint for su - login shells - Document TLS env vars in modular docker-compose.yml - Change env_mode from dev/prod to actual DISPATCHARR_ENV value for modular mode detection		2026-03-21 17:24:09 -05:00
..
__init__.py	Initial commit	2025-02-18 11:14:09 -06:00
admin.py	Alpha v3	2025-02-21 15:31:59 -06:00
app_initialization.py	Enhancement: Refactored app initialization to prevent redundant execution across multiple worker processes. Created dispatcharr.app_initialization utility module with should_skip_initialization() function that prevents custom initialization tasks (backup scheduler sync, developer notifications sync) from running during management commands, in worker processes, or in development servers. This significantly reduces startup overhead in multi-worker deployments (e.g., uWSGI with 10 workers now syncs the scheduler once instead of 10 times). Applied to both CoreConfig and BackupsConfig apps.	2026-02-05 13:48:01 -06:00
asgi.py	websockets behind auth, cleaned up errors and bad state handling in websocket.jsx	2025-05-10 08:40:53 -04:00
celery.py	Bug Fix: Version update notification persisting after upgrading to the notified version (e.g. "v0.20.2 available" shown while already running v0.20.2). Root cause: check_for_version_update.delay() was called from AppConfig.ready(), which fires inside Celery prefork pool subprocesses before the broker connection is established, causing the dispatch to fail silently with no log output. Fixed by moving the startup dispatch to the worker_ready signal in celery.py (consistent with the existing recover_recordings_on_startup pattern), and deleting the stale version-{current_version} notification at the top of the production check path so it is cleared even when GitHub is unreachable. A WebSocket update is sent immediately on deletion so the frontend badge clears without waiting for the API response.	2026-03-08 13:38:18 -05:00
consumers.py	websockets behind auth, cleaned up errors and bad state handling in websocket.jsx	2025-05-10 08:40:53 -04:00
jwt_ws_auth.py	Enhance JWT authentication error handling and user redirection on token issues.	2025-05-15 14:12:31 -05:00
persistent_lock.py	feat: add TLS connection support for Redis and PostgreSQL (#950)	2026-03-21 17:24:09 -05:00
routing.py	Websockets, fixed channel name collision, added back in multi-stream per channel support	2025-03-05 17:04:43 -05:00
settings.py	feat: add TLS connection support for Redis and PostgreSQL (#950)	2026-03-21 17:24:09 -05:00
urls.py	Bug fix: Admin URL Conflict with XC Streams: Updated nginx configuration to only redirect exact /admin and /admin/ paths to login in production, preventing interference with stream URLs that use "admin" as a username (e.g., /admin/password/stream_id now properly routes to stream handling instead of being redirected).	2026-01-27 14:36:57 -06:00
utils.py	Enhancement: Updated default network access settings for M3U and EPG endpoints to only allow local/private networks by default (127.0.0.0/8, 10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16, ::1/128, fc00::/7, fe80::/10). This improves security by preventing public internet access to these endpoints unless explicitly configured. Other endpoints (Streams, XC API, UI) remain open by default.	2026-01-31 20:26:45 -06:00
wsgi.py	Revert "fix(wsgi): ensure gevent monkey-patching before Django import chain"	2026-03-03 15:33:55 -06:00