cli

Jul 30, 2026

Changes in this version

+ func OpsResetTOTP(configPath, username string, confirm bool) error

Jul 16, 2026

Changes in this version

+ func CAImport(serverURL, apiKey, name, certFile, keyFile, passphraseFile string) error

Jun 23, 2026 GO-2026-5985

  GO-2026-5985: Nebula-mesh allows non-admin operators to disable webhook SSRF protection via `allow_private` in github.com/forgekeep/nebula-mesh

Jun 15, 2026 GO-2026-5985 +1 more

  GO-2026-5985: Nebula-mesh allows non-admin operators to disable webhook SSRF protection via `allow_private` in github.com/forgekeep/nebula-mesh

  GO-2026-5986: nebula-mesh: Certificate revocation is never enforced at the mesh in github.com/forgekeep/nebula-mesh

Jun 13, 2026 GO-2026-5985 +1 more

  GO-2026-5985: Nebula-mesh allows non-admin operators to disable webhook SSRF protection via `allow_private` in github.com/forgekeep/nebula-mesh

  GO-2026-5986: nebula-mesh: Certificate revocation is never enforced at the mesh in github.com/forgekeep/nebula-mesh

Jun 13, 2026 GO-2026-5986

  GO-2026-5986: nebula-mesh: Certificate revocation is never enforced at the mesh in github.com/forgekeep/nebula-mesh

Changes in this version

+ func OpsBackup(configPath, outputPath, passphrase, appVersion string) error

+ func OpsRestore(configPath, inputPath, passphrase string, force bool) error

Jun 13, 2026 GO-2026-5986 +2 more

  GO-2026-5986: nebula-mesh: Certificate revocation is never enforced at the mesh in github.com/forgekeep/nebula-mesh

  GO-2026-5987: Insecure enrollment token TTL in nebula-mesh in github.com/forgekeep/nebula-mesh

  GO-2026-5989: Unauthenticated OIDC login in nebula-mesh allows unbounded memory allocation in github.com/forgekeep/nebula-mesh

Jun 4, 2026 GO-2026-5986

  GO-2026-5986: nebula-mesh: Certificate revocation is never enforced at the mesh in github.com/forgekeep/nebula-mesh

Jun 2, 2026 GO-2026-5984 +2 more

  GO-2026-5984: nebula-mesh: CA private key not zeroized on web mobile-bundle error paths in github.com/forgekeep/nebula-mesh

  GO-2026-5986: nebula-mesh: Certificate revocation is never enforced at the mesh in github.com/forgekeep/nebula-mesh

  GO-2026-5991: nebula-mesh: Operator session tokens stored in plaintext in the database in github.com/forgekeep/nebula-mesh

May 26, 2026 GO-2026-5255 +4 more

  GO-2026-5255: nebula-mesh: Decrypted CA private key persists in heap after signing in github.com/forgekeep/nebula-mesh

  GO-2026-5950: nebula-mesh: Host revocation is not durable - blocked/offboarded hosts can regain a valid certificate in github.com/forgekeep/nebula-mesh

  GO-2026-5984: nebula-mesh: CA private key not zeroized on web mobile-bundle error paths in github.com/forgekeep/nebula-mesh

  GO-2026-5986: nebula-mesh: Certificate revocation is never enforced at the mesh in github.com/forgekeep/nebula-mesh

  GO-2026-5991: nebula-mesh: Operator session tokens stored in plaintext in the database in github.com/forgekeep/nebula-mesh

Changes in this version

+ const DefaultAdminUsername

+ func APIKeyCreate(serverURL, apiKey, operatorID, name string) error

+ func APIKeyRevoke(serverURL, apiKey, operatorID, keyID string) error

+ func CACreate(serverURL, apiKey, name, duration string) error

+ func CADelete(serverURL, apiKey, id string) error

+ func CAList(serverURL, apiKey string) error

+ func CARotate(serverURL, apiKey, id string) error

+ func HashAPIKey(key string) string

+ func HostBlock(serverURL, apiKey, hostID string) error

+ func HostCreate(serverURL, apiKey, networkID, name, nebulaIP, role string, groups []string, ...) error

+ func HostDelete(serverURL, apiKey, hostID string) error

+ func HostList(serverURL, apiKey, networkID string) error

+ func HostUnblock(serverURL, apiKey, hostID string) error

+ func Init(configPath string) error

+ func NetworkCreate(serverURL, apiKey, name, cidr string) error

+ func NetworkList(serverURL, apiKey string) error

+ func OpsMintAdminKey(configPath string) error

+ func SeedAdminOperator(ctx context.Context, s store.Store, uiPassword, apiKey string) (bool, error)

+ func Serve(configPath string) error

+ func UserCreate(serverURL, apiKey, username, password, displayName, role string) error

+ func UserDisable(serverURL, apiKey, id string) error

+ func UserEnable(serverURL, apiKey, id string) error

+ func UserList(serverURL, apiKey string) error