@lamalibre/create-portlama 1.0.17 → 1.0.19

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lamalibre/create-portlama",
-  "version": "1.0.17",
+  "version": "1.0.19",
   "description": "One-command setup for secure reverse tunnels with a management dashboard",
   "type": "module",
   "license": "MIT",

package/src/lib/service-config.js

@@ -127,6 +127,13 @@ portlama ALL=(root) NOPASSWD: /usr/bin/chmod 600 /etc/portlama/pki/*
 portlama ALL=(root) NOPASSWD: /usr/bin/chmod 644 /etc/portlama/pki/*
 portlama ALL=(root) NOPASSWD: /usr/bin/rm -f /etc/portlama/pki/*
 
+# --- Agent certificates (portlama-owned directory under pki) ---
+portlama ALL=(root) NOPASSWD: /usr/bin/mkdir -p /etc/portlama/pki/agents
+portlama ALL=(root) NOPASSWD: /usr/bin/mkdir -p /etc/portlama/pki/agents/*
+portlama ALL=(root) NOPASSWD: /usr/bin/chown portlama\\:portlama /etc/portlama/pki/agents
+portlama ALL=(root) NOPASSWD: /usr/bin/chown -R portlama\\:portlama /etc/portlama/pki/agents/*
+portlama ALL=(root) NOPASSWD: /usr/bin/rm -rf /etc/portlama/pki/agents/*
+
 # --- nginx vhost file permissions and cleanup ---
 portlama ALL=(root) NOPASSWD: /usr/bin/chmod 644 /etc/nginx/sites-available/*
 portlama ALL=(root) NOPASSWD: /usr/bin/rm -f /etc/nginx/sites-available/*

package/src/tasks/nginx.js

@@ -90,6 +90,7 @@ ssl_verify_client on;
     # Pass client cert verification status to backend
     proxy_set_header X-SSL-Client-Verify $ssl_client_verify;
     proxy_set_header X-SSL-Client-DN $ssl_client_s_dn;
+    proxy_set_header X-SSL-Client-Serial $ssl_client_serial;
 
     # Standard proxy headers
     proxy_set_header Host $host;