hermes-webui

mirror of https://github.com/nesquena/hermes-webui.git synced 2026-05-25 19:20:16 +00:00

Files

T

Cyprian Kowalczyk 011034dc71 feat: optional HTTPS/TLS support via cert and key env vars (#199 )

Add optional HTTPS support controlled by two env vars:
  HERMES_WEBUI_TLS_CERT=/path/to/cert.pem
  HERMES_WEBUI_TLS_KEY=/path/to/key.pem

- Wraps server socket with ssl.SSLContext (min TLSv1.2)
- Dynamic scheme detection for startup messages (http:// vs https://)
- Graceful fallback to HTTP if cert loading fails — server never crashes
  due to bad TLS config, just prints a warning and continues
- Auth cookie Secure flag already set when HTTPS is detected via getpeercert
- 6 end-to-end tests: config flags, HTTPS handshake, HTTP still works,
  fallback on bad paths

Addresses #191 (HTTPS support issue).

2026-04-09 18:08:29 -07:00

__init__.py

Hermes Web UI — Sprints 11-14: multi-provider models, settings, session QoL, alerts, polish

2026-03-31 07:02:47 +00:00

auth.py

fix(auth): prune expired sessions on every verify to prevent memory leak (#196 )

2026-04-09 18:05:23 -07:00

config.py

feat: optional HTTPS/TLS support via cert and key env vars (#199 )

2026-04-09 18:08:29 -07:00

helpers.py

fix: add Content-Security-Policy and Permissions-Policy headers (#197 )