Directories
¶
| Path | Synopsis |
|---|---|
|
Package cftunnel renders a cloudflared tunnel config.yml from a tunnel profile.
|
Package cftunnel renders a cloudflared tunnel config.yml from a tunnel profile. |
|
Package ddns publishes a node's public IP to DNS when it changes.
|
Package ddns publishes a node's public IP to DNS when it changes. |
|
Package georouting renders a geo-aware CoreDNS zone that answers one apex hostname with the nearest healthy node by client location.
|
Package georouting renders a geo-aware CoreDNS zone that answers one apex hostname with the nearest healthy node by client location. |
|
Package groups resolves fleet group membership.
|
Package groups resolves fleet group membership. |
|
Package logstore is the dedicated, bounded, append-only persistence layer for ingested node log lines.
|
Package logstore is the dedicated, bounded, append-only persistence layer for ingested node log lines. |
|
Package netguard implements the design-13 security-group firewall plane.
|
Package netguard implements the design-13 security-group firewall plane. |
|
Package notify delivers short operational messages (SSH login alerts, audit denials, task failures) to one or more user-configured channels.
|
Package notify delivers short operational messages (SSH login alerts, audit denials, task failures) to one or more user-configured channels. |
|
Package oidc wraps go-oidc + x/oauth2 into the small surface the server needs for SSO login: build an auth-code+PKCE URL, then exchange the code and verify the returned ID token.
|
Package oidc wraps go-oidc + x/oauth2 into the small surface the server needs for SSO login: build an auth-code+PKCE URL, then exchange the code and verify the returned ID token. |
|
Package proxycore renders reviewed proxy-core artifacts from server-owned intent models.
|
Package proxycore renders reviewed proxy-core artifacts from server-owned intent models. |
|
Package ratelimit provides a small, dependency-free per-key token-bucket rate limiter suitable for guarding authentication and agent endpoints.
|
Package ratelimit provides a small, dependency-free per-key token-bucket rate limiter suitable for guarding authentication and agent endpoints. |
|
Package secret provides authenticated envelope encryption for sensitive values that the server persists at rest (TOTP secrets, Cloudflare API tokens, notification credentials, ...).
|
Package secret provides authenticated envelope encryption for sensitive values that the server persists at rest (TOTP secrets, Cloudflare API tokens, notification credentials, ...). |
|
Package selfdns renders the reviewable artifacts for Lattice-owned DNS deployment intent.
|
Package selfdns renders the reviewable artifacts for Lattice-owned DNS deployment intent. |
|
Package sshguard renders the reviewable artifacts for one node's SSH hardening intent: an sshd drop-in, an independent nftables knock table, and an optional knockd sequence.
|
Package sshguard renders the reviewable artifacts for one node's SSH hardening intent: an sshd drop-in, an independent nftables knock table, and an optional knockd sequence. |
|
Package traceattr resolves the identity half of a sing-box connection record: which Lattice line an inbound tag belongs to, and which Lattice user a sing-box user name reverses to.
|
Package traceattr resolves the identity half of a sing-box connection record: which Lattice line an inbound tag belongs to, and which Lattice user a sing-box user name reverses to. |
|
Package tracestitch joins connection records that belong to one logical flow across machines, and states how confident that join is.
|
Package tracestitch joins connection records that belong to one logical flow across machines, and states how confident that join is. |
|
Package tracestore is the durable store for sing-box trace data: the assembled connection records, the raw log lines a trace session asked to keep, and the five-minute rollups the usage and failure views read.
|
Package tracestore is the durable store for sing-box trace data: the assembled connection records, the raw log lines a trace session asked to keep, and the five-minute rollups the usage and failure views read. |
|
Package websocketx adapts a gorilla *websocket.Conn into an io.ReadWriteCloser so two terminal WebSocket legs can be spliced with a plain io.Copy pair.
|
Package websocketx adapts a gorilla *websocket.Conn into an io.ReadWriteCloser so two terminal WebSocket legs can be spliced with a plain io.Copy pair. |
|
Package wireguard generates per-node WireGuard configuration for a cluster mesh.
|
Package wireguard generates per-node WireGuard configuration for a cluster mesh. |
Click to show internal directories.
Click to hide internal directories.