Update reverse proxy modals (#661 )

* add multi-environment deployment options for reverse proxy setup * refactor reverse proxy modal to handle state updates more robustly
Group Networks and Routes under Network Routing (#660 )
2026-09-23 00:30:43 -07:00 · 2026-06-04 20:43:45 +02:00 · 2026-06-04 19:44:13 +02:00 · 2026-06-04 18:24:53 +02:00 · 2026-05-27 17:17:04 +02:00 · 2026-05-26 21:37:11 +02:00
190 changed files with 8828 additions and 5271 deletions
@@ -58,7 +58,6 @@
        "ip-address": "^10.1.0",
        "ip-cidr": "^3.1.0",
        "js-cookie": "^3.0.5",
-        "js-yaml": "^4.1.1",
        "lodash": "^4.17.23",
        "lucide-react": "^0.566.0",
        "next": "16.1.7",
@@ -86,7 +85,6 @@
        "@faker-js/faker": "^9.5.1",
        "@types/chroma-js": "^3.1.1",
        "@types/js-cookie": "^3.0.6",
-        "@types/js-yaml": "^4.0.9",
        "eslint": "^9.39.1",
        "eslint-config-next": "^16.1.6",
        "postcss": "^8",
@@ -170,6 +168,7 @@
      "integrity": "sha512-CGOfOJqWjg2qW/Mb6zNsDm+u5vFQ8DxXfbM09z69p5Z6+mE1ikP2jUXw+j42Pf1XTYED2Rni5f95npYeuwMDQA==",
      "dev": true,
      "license": "MIT",
+      "peer": true,
      "dependencies": {
        "@babel/code-frame": "^7.29.0",
        "@babel/generator": "^7.29.0",
@@ -2999,13 +2998,6 @@
      "dev": true,
      "license": "MIT"
    },
-    "node_modules/@types/js-yaml": {
-      "version": "4.0.9",
-      "resolved": "https://registry.npmjs.org/@types/js-yaml/-/js-yaml-4.0.9.tgz",
-      "integrity": "sha512-k4MGaQl5TGo/iipqb2UDG2UwjXziSWkh0uysQelTlJpX1qGlpUZYm8PnO4DxG1qBomtJUdYJ6qR6xdIah10JLg==",
-      "dev": true,
-      "license": "MIT"
-    },
    "node_modules/@types/json-schema": {
      "version": "7.0.15",
      "resolved": "https://registry.npmjs.org/@types/json-schema/-/json-schema-7.0.15.tgz",
@@ -3039,6 +3031,7 @@
      "resolved": "https://registry.npmjs.org/@types/react/-/react-19.2.10.tgz",
      "integrity": "sha512-WPigyYuGhgZ/cTPRXB2EwUw+XvsRA3GqHlsP4qteqrnnjDrApbS7MxcGr/hke5iUoeB7E/gQtrs9I37zAJ0Vjw==",
      "license": "MIT",
+      "peer": true,
      "dependencies": {
        "csstype": "^3.2.2"
      }
@@ -3048,6 +3041,7 @@
      "resolved": "https://registry.npmjs.org/@types/react-dom/-/react-dom-19.2.3.tgz",
      "integrity": "sha512-jp2L/eY6fn+KgVVQAOqYItbF0VY/YApe5Mz2F0aykSO8gx31bYCZyvSeYxCHKvzHG5eZjc+zyaS5BrBWya2+kQ==",
      "license": "MIT",
+      "peer": true,
      "peerDependencies": {
        "@types/react": "^19.2.0"
      }
@@ -3106,6 +3100,7 @@
      "integrity": "sha512-BtE0k6cjwjLZoZixN0t5AKP0kSzlGu7FctRXYuPAm//aaiZhmfq1JwdYpYr1brzEspYyFeF+8XF5j2VK6oalrA==",
      "dev": true,
      "license": "MIT",
+      "peer": true,
      "dependencies": {
        "@typescript-eslint/scope-manager": "8.54.0",
        "@typescript-eslint/types": "8.54.0",
@@ -3586,7 +3581,8 @@
      "version": "5.5.0",
      "resolved": "https://registry.npmjs.org/@xterm/xterm/-/xterm-5.5.0.tgz",
      "integrity": "sha512-hqJHYaQb5OptNunnyAnkHyM8aCjZ1MEIDTQu1iIbbTD/xops91NB5yq1ZK/dC2JDbVWtF23zUtl9JE2NqwT87A==",
-      "license": "MIT"
+      "license": "MIT",
+      "peer": true
    },
    "node_modules/@xyflow/react": {
      "version": "12.10.0",
@@ -3625,6 +3621,7 @@
      "resolved": "https://registry.npmjs.org/acorn/-/acorn-8.15.0.tgz",
      "integrity": "sha512-NZyJarBfL7nWwIq+FDL6Zp/yHEhePMNnnJ0y3qfieCrmNvYct8uvtiV41UvlSe6apAfk0fY1FbWx+NwfmpvtTg==",
      "license": "MIT",
+      "peer": true,
      "bin": {
        "acorn": "bin/acorn"
      },
@@ -4047,6 +4044,7 @@
        }
      ],
      "license": "MIT",
+      "peer": true,
      "dependencies": {
        "baseline-browser-mapping": "^2.9.0",
        "caniuse-lite": "^1.0.30001759",
@@ -4669,6 +4667,7 @@
      "resolved": "https://registry.npmjs.org/d3-selection/-/d3-selection-3.0.0.tgz",
      "integrity": "sha512-fmTRWbNMmsmWq6xJV8D19U/gw/bwrHfNXxrIN+HfZgnzqTHp9jOmKMhsTUjXOJnZOdZY9Q28y4yebKzqDKlxlQ==",
      "license": "ISC",
+      "peer": true,
      "engines": {
        "node": ">=12"
      }
@@ -5197,6 +5196,7 @@
      "resolved": "https://registry.npmjs.org/eslint/-/eslint-9.39.2.tgz",
      "integrity": "sha512-LEyamqS7W5HB3ujJyvi0HQK/dtVINZvd5mAAp9eT5S/ujByGjiZLCzPcHVzuXbpJDJF/cxwHlfceVUDZ2lnSTw==",
      "license": "MIT",
+      "peer": true,
      "dependencies": {
        "@eslint-community/eslint-utils": "^4.8.0",
        "@eslint-community/regexpp": "^4.12.1",
@@ -5394,6 +5394,7 @@
      "integrity": "sha512-whOE1HFo/qJDyX4SnXzP4N6zOWn79WhnCUY/iDR0mPfQZO8wcYE4JClzI2oZrhBnnMUCBCHZhO6VQyoBU95mZA==",
      "dev": true,
      "license": "MIT",
+      "peer": true,
      "dependencies": {
        "@rtsao/scc": "^1.1.0",
        "array-includes": "^3.1.9",
@@ -6687,6 +6688,7 @@
      "resolved": "https://registry.npmjs.org/jiti/-/jiti-1.21.7.tgz",
      "integrity": "sha512-/imKNG4EbWNrVjoNC/1H5/9GFy+tqjGBHCaSsN+P2RnPqjsLmv6UD3Ej+Kj8nBWaRAwyk7kK5ZUc+OEatnTR3A==",
      "license": "MIT",
+      "peer": true,
      "bin": {
        "jiti": "bin/jiti.js"
      }
@@ -7444,6 +7446,7 @@
        }
      ],
      "license": "MIT",
+      "peer": true,
      "dependencies": {
        "nanoid": "^3.3.11",
        "picocolors": "^1.1.1",
@@ -7651,6 +7654,7 @@
      "resolved": "https://registry.npmjs.org/react/-/react-19.2.4.tgz",
      "integrity": "sha512-9nfp2hYpCwOjAN+8TZFGhtWEwgvWHXqESH8qT89AT/lWklpLON22Lc8pEtnpsZz7VmawabSU0gCjnj8aC0euHQ==",
      "license": "MIT",
+      "peer": true,
      "engines": {
        "node": ">=0.10.0"
      }
@@ -7691,6 +7695,7 @@
      "resolved": "https://registry.npmjs.org/react-dom/-/react-dom-19.2.4.tgz",
      "integrity": "sha512-AXJdLo8kgMbimY95O2aKQqsz2iWi9jMgKJhRBAxECE4IFxfcazB2LmzloIoibJI3C12IlY20+KFaLv+71bUJeQ==",
      "license": "MIT",
+      "peer": true,
      "dependencies": {
        "scheduler": "^0.27.0"
      },
@@ -8585,6 +8590,7 @@
      "resolved": "https://registry.npmjs.org/tailwindcss/-/tailwindcss-3.4.19.tgz",
      "integrity": "sha512-3ofp+LL8E+pK/JuPLPggVAIaEuhvIz4qNcf3nA1Xn2o/7fb7s/TYpHhwGDv1ZU3PkBluUVaF8PyCHcm48cKLWQ==",
      "license": "MIT",
+      "peer": true,
      "dependencies": {
        "@alloc/quick-lru": "^5.2.0",
        "arg": "^5.0.2",
@@ -8751,6 +8757,7 @@
      "resolved": "https://registry.npmjs.org/picomatch/-/picomatch-4.0.4.tgz",
      "integrity": "sha512-QP88BAKvMam/3NxH6vj2o21R6MjxZUAd6nlwAS/pnGvN9IVLocLHxGYIzFhg6fUQ+5th6P4dv4eW9jX3DSIj7A==",
      "license": "MIT",
+      "peer": true,
      "engines": {
        "node": ">=12"
      },
@@ -8916,6 +8923,7 @@
      "resolved": "https://registry.npmjs.org/typescript/-/typescript-5.9.3.tgz",
      "integrity": "sha512-jl1vZzPDinLr9eUt3J/t7V6FgNEw9QjvBPdysz9KfQDD41fQrC2Y4vKQdiaUpFT4bXlb1RHhLpp8wtm6M5TgSw==",
      "license": "Apache-2.0",
+      "peer": true,
      "bin": {
        "tsc": "bin/tsc",
        "tsserver": "bin/tsserver"
@@ -9243,6 +9251,7 @@
      "integrity": "sha512-rftlrkhHZOcjDwkGlnUtZZkvaPHCsDATp4pGpuOOMDaTdDDXF91wuVDJoWoPsKX/3YPQ5fHuF3STjcYyKr+Qhg==",
      "dev": true,
      "license": "MIT",
+      "peer": true,
      "funding": {
        "url": "https://github.com/sponsors/colinhacks"
      }
@@ -66,7 +66,6 @@
    "ip-address": "^10.1.0",
    "ip-cidr": "^3.1.0",
    "js-cookie": "^3.0.5",
-    "js-yaml": "^4.1.1",
    "lodash": "^4.17.23",
    "lucide-react": "^0.566.0",
    "next": "16.1.7",
@@ -97,7 +96,6 @@
    "@faker-js/faker": "^9.5.1",
    "@types/chroma-js": "^3.1.1",
    "@types/js-cookie": "^3.0.6",
-    "@types/js-yaml": "^4.0.9",
    "eslint": "^9.39.1",
    "eslint-config-next": "^16.1.6",
    "postcss": "^8",
@@ -1,61 +0,0 @@
-"use client";
-
-import Breadcrumbs from "@components/Breadcrumbs";
-import InlineLink from "@components/InlineLink";
-import Paragraph from "@components/Paragraph";
-import SkeletonTable from "@components/skeletons/SkeletonTable";
-import { RestrictedAccess } from "@components/ui/RestrictedAccess";
-import useFetchApi from "@utils/api";
-import { ExternalLinkIcon, ShieldCheck } from "lucide-react";
-import React, { lazy, Suspense } from "react";
-import AccessControlIcon from "@/assets/icons/AccessControlIcon";
-import { usePermissions } from "@/contexts/PermissionsProvider";
-import PoliciesProvider from "@/contexts/PoliciesProvider";
-import { InspectionPolicy } from "@/interfaces/Network";
-import PageContainer from "@/layouts/PageContainer";
-
-const InspectionPoliciesTable = lazy(
-  () =>
-    import(
-      "@/modules/networks/inspection/InspectionPoliciesTable"
-    ),
-);
-
-export default function InspectionPoliciesPage() {
-  const { permission } = usePermissions();
-  const { data: policies, isLoading } =
-    useFetchApi<InspectionPolicy[]>("/inspection-policies");
-
-  return (
-    <PageContainer>
-      <div className={"p-default py-6"}>
-        <Breadcrumbs>
-          <Breadcrumbs.Item
-            href={"/access-control"}
-            label={"Access Control"}
-            icon={<AccessControlIcon size={14} />}
-          />
-          <Breadcrumbs.Item
-            href={"/access-control/inspection-policies"}
-            label={"Inspection Policies"}
-            icon={<ShieldCheck size={15} />}
-          />
-        </Breadcrumbs>
-        <h1>Inspection Policies</h1>
-        <Paragraph>
-          Create reusable inspection rule sets for transparent proxy traffic
-          inspection. Attach them to access control policies to inspect traffic
-          flowing through routing peers.
-        </Paragraph>
-      </div>
-      <PoliciesProvider>
-        <Suspense fallback={<SkeletonTable />}>
-          <InspectionPoliciesTable
-            policies={policies ?? []}
-            isLoading={isLoading}
-          />
-        </Suspense>
-      </PoliciesProvider>
-    </PageContainer>
-  );
-}
@@ -41,18 +41,14 @@ export default function AccessControlPage() {
          <h1 ref={headingRef}>Access Control Policies</h1>
          <Paragraph>
            Create rules to manage access in your network and define what peers
-            can connect.
-          </Paragraph>
-          <Paragraph>
-            Learn more about
+            can connect.{" "}
            <InlineLink
              href={"https://docs.netbird.io/how-to/manage-network-access"}
              target={"_blank"}
            >
-              Access Controls
+              Learn more
              <ExternalLinkIcon size={12} />
            </InlineLink>
-            in our documentation.
          </Paragraph>
        </div>

@@ -45,18 +45,14 @@ export default function NameServers() {
        </Breadcrumbs>
        <h1 ref={headingRef}>Nameservers</h1>
        <Paragraph>
-          Add nameservers for domain name resolution in your NetBird network.
-        </Paragraph>
-        <Paragraph>
-          Learn more about
+          Add nameservers for domain name resolution in your NetBird network.{" "}
          <InlineLink
            href={"https://docs.netbird.io/how-to/manage-dns-in-your-network"}
            target={"_blank"}
          >
-            DNS
+            Learn more
            <ExternalLinkIcon size={12} />
          </InlineLink>
-          in our documentation.
        </Paragraph>
      </div>

@@ -52,17 +52,15 @@ export default function NameServerSettings() {
          />
        </Breadcrumbs>
        <h1>DNS Settings</h1>
-        <Paragraph>{"Manage your account's DNS settings."}</Paragraph>
        <Paragraph>
-          Learn more about
+          {"Manage your account's DNS settings."}{" "}
          <InlineLink
            href={"https://docs.netbird.io/how-to/manage-dns-in-your-network"}
            target={"_blank"}
          >
-            DNS
+            Learn more
            <ExternalLinkIcon size={12} />
          </InlineLink>
-          in our documentation.
        </Paragraph>
        <RestrictedAccess page={"DNS Settings"} hasAccess={permission.dns.read}>
          {!isLoading && initialDNSGroups !== undefined ? (
@@ -42,15 +42,11 @@ export default function DNSZonePage() {
        </Breadcrumbs>
        <h1 ref={headingRef}>Zones</h1>
        <Paragraph>
-          Manage DNS zones to control domain name resolution for your network.
-        </Paragraph>
-        <Paragraph>
-          Learn more about
+          Manage DNS zones to control domain name resolution for your network.{" "}
          <InlineLink href={DNS_ZONE_DOCS_LINK} target={"_blank"}>
-            DNS Zones
+            Learn more
            <ExternalLinkIcon size={12} />
          </InlineLink>
-          in our documentation.
        </Paragraph>
      </div>

@@ -39,17 +39,16 @@ export default function Activity() {
          />
        </Breadcrumbs>
        <h1 ref={headingRef}>Audit Events</h1>
-        <Paragraph>Here you can see all the audit activity events.</Paragraph>
        <Paragraph>
-          Learn more about{" "}
+          Audit configuration changes, access policy updates, and peer
+          registration and login events across your network.{" "}
          <InlineLink
            href={"https://docs.netbird.io/how-to/audit-events-logging"}
            target={"_blank"}
          >
-            Audit Events
+            Learn more
            <ExternalLinkIcon size={12} />
          </InlineLink>
-          in our documentation.
        </Paragraph>
      </div>
      <RestrictedAccess page={"Activity"} hasAccess={permission.events.read}>
@@ -1,80 +1,5 @@
-"use client";
-
-import Breadcrumbs from "@components/Breadcrumbs";
-import InlineLink from "@components/InlineLink";
-import Paragraph from "@components/Paragraph";
-import { RestrictedAccess } from "@components/ui/RestrictedAccess";
-import dayjs from "dayjs";
-import { ExternalLinkIcon } from "lucide-react";
-import ReverseProxyIcon from "@/assets/icons/ReverseProxyIcon";
-import React, { useMemo } from "react";
-import ActivityIcon from "@/assets/icons/ActivityIcon";
-import { usePermissions } from "@/contexts/PermissionsProvider";
-import ServerPaginationProvider from "@/contexts/ServerPaginationProvider";
-import PageContainer from "@/layouts/PageContainer";
-import ReverseProxyEventsTable from "@/modules/reverse-proxy/events/ReverseProxyEventsTable";
-import { usePortalElement } from "@hooks/usePortalElement";
-import { REVERSE_PROXY_EVENTS_DOCS_LINK } from "@/interfaces/ReverseProxy";
+import { redirect } from "next/navigation";

 export default function ProxyEventsPage() {
-  const { permission } = usePermissions();
-  const { ref: headingRef, portalTarget } =
-    usePortalElement<HTMLHeadingElement>();
-
-  const defaultFilters = useMemo(
-    () => ({
-      start_date: dayjs().subtract(7, "day").startOf("day").toISOString(),
-      end_date: dayjs().endOf("day").toISOString(),
-      sort_by: "timestamp",
-      sort_order: "desc",
-    }),
-    [],
-  );
-
-  return (
-    <PageContainer>
-      <div className="p-default py-6">
-        <Breadcrumbs>
-          <Breadcrumbs.Item
-            label="Activity"
-            disabled
-            icon={<ActivityIcon size={13} />}
-          />
-          <Breadcrumbs.Item
-            href="/events/proxy"
-            label="Proxy Events"
-            icon={<ReverseProxyIcon size={15} />}
-          />
-        </Breadcrumbs>
-
-        <h1 ref={headingRef}>Proxy Events</h1>
-
-        <Paragraph>
-          View access logs for your reverse proxy services, including allowed
-          and denied requests.
-        </Paragraph>
-
-        <Paragraph>
-          Learn more about{" "}
-          <InlineLink href={REVERSE_PROXY_EVENTS_DOCS_LINK} target="_blank">
-            Proxy Events <ExternalLinkIcon size={12} />
-          </InlineLink>{" "}
-          in our documentation.
-        </Paragraph>
-      </div>
-
-      <RestrictedAccess
-        page="Proxy Events"
-        hasAccess={permission?.services?.read}
-      >
-        <ServerPaginationProvider
-          url="/events/proxy"
-          defaultPageSize={10}
-          defaultFilters={defaultFilters}
-        >
-          <ReverseProxyEventsTable headingTarget={portalTarget} />
-        </ServerPaginationProvider>
-      </RestrictedAccess>
-    </PageContainer>
-  );
+  redirect("/reverse-proxy/logs");
 }
@@ -31,19 +31,14 @@ export default function GroupsPage() {
        </Breadcrumbs>
        <h1 ref={headingRef}>Groups</h1>
        <Paragraph>
-          Here is the overview of the groups of your organization. You can
-          delete the unused ones.
-        </Paragraph>
-        <Paragraph>
-          Learn more about{" "}
+          Organize peers, users and resources into groups to manage access.{" "}
          <InlineLink
            href={"https://docs.netbird.io/how-to/manage-network-access"}
            target={"_blank"}
          >
-            Groups
+            Learn more
            <ExternalLinkIcon size={12} />
          </InlineLink>
-          in our documentation.
        </Paragraph>
      </div>
      <RestrictedAccess hasAccess={permission.groups.read} page={"Groups"}>
@@ -37,28 +37,27 @@ export default function NetworkRoutes() {
          <div className={"p-default py-6"}>
            <Breadcrumbs>
              <Breadcrumbs.Item
-                href={"/network-routes"}
-                label={"Network Routes"}
+                label={"Network Routing"}
                icon={<NetworkRoutesIcon size={13} />}
              />
+              <Breadcrumbs.Item href={"/network-routes"} label={"Routes"} />
            </Breadcrumbs>
-            <h1 ref={headingRef}>Network Routes</h1>
+            <h1 ref={headingRef}>Routes</h1>
            <Paragraph>
-              Network routes allow you to access other networks like LANs and
-              VPCs without installing NetBird on every resource.
-            </Paragraph>
-            <Paragraph>
-              Learn more about
+              Access other networks like LANs and VPCs without installing
+              NetBird on every resource.{" "}
              <InlineLink
                href={
                  "https://docs.netbird.io/how-to/routing-traffic-to-private-networks"
                }
                target={"_blank"}
+                aria-label={
+                  "Learn more about routing traffic to private networks"
+                }
              >
-                Network Routes
+                Learn more
                <ExternalLinkIcon size={12} />
              </InlineLink>
-              in our documentation.
            </Paragraph>

            <Callout className={"max-w-xl mt-5"} variant={"warning"}>
@@ -26,26 +26,22 @@ export default function Networks() {
      <div className={"p-default py-6"}>
        <Breadcrumbs>
          <Breadcrumbs.Item
-            href={"/networks"}
-            label={"Networks"}
+            label={"Network Routing"}
            icon={<NetworkRoutesIcon size={13} />}
          />
+          <Breadcrumbs.Item href={"/networks"} label={"Networks"} />
        </Breadcrumbs>
        <h1 ref={headingRef}>Networks</h1>
        <Paragraph>
-          Networks allow you to access internal resources in LANs and VPCs
-          without installing NetBird on every machine.
-        </Paragraph>
-        <Paragraph>
-          Learn more about
+          Access internal resources in LANs and VPCs without installing NetBird
+          on every machine.{" "}
          <InlineLink
            href={"https://docs.netbird.io/how-to/networks"}
            target={"_blank"}
          >
-            Networks
+            Learn more
            <ExternalLinkIcon size={12} />
          </InlineLink>
-          in our documentation.
        </Paragraph>
      </div>

@@ -61,6 +61,7 @@ import RoutesProvider from "@/contexts/RoutesProvider";
 import { useHasChanges } from "@/hooks/useHasChanges";
 import type { Group } from "@/interfaces/Group";
 import type { Peer } from "@/interfaces/Peer";
+import type { User } from "@/interfaces/User";
 import PageContainer from "@/layouts/PageContainer";
 import useGroupHelper from "@/modules/groups/useGroupHelper";
 import { AccessiblePeersSection } from "@/modules/peer/AccessiblePeersSection";
@@ -118,8 +119,17 @@ export default function PeerPage() {
  );
 }

+// Route the user back to the list view that matches the peer's kind
+// (a real user owner → /peers/users, otherwise /peers/servers). Used
+// for the breadcrumb and the Cancel back-button so they don't bounce
+// through the legacy /peers redirect.
+function peerListPath(user: User | undefined): string {
+  const hasRealUser = !!user && !user.is_service_user;
+  return hasRealUser ? "/peers/users" : "/peers/servers";
+}
+
 function PeerOverview() {
-  const { peer } = usePeer();
+  const { peer, user } = usePeer();

  return (
    <PageContainer>
@@ -128,7 +138,7 @@ function PeerOverview() {
          <div className={"p-default py-6 pb-0"}>
            <Breadcrumbs>
              <Breadcrumbs.Item
-                href={"/peers"}
+                href={peerListPath(user)}
                label={"Peers"}
                icon={<PeerIcon size={13} />}
              />
@@ -297,7 +307,7 @@ const PeerHeader = () => {
            <Button
              variant={"default"}
              className={"w-full"}
-              onClick={() => router.push("/peers")}
+              onClick={() => router.push(peerListPath(user))}
            >
              Cancel
            </Button>
@@ -526,7 +536,7 @@ function PeerInformationCard({ peer }: Readonly<{ peer: Peer }>) {
            copyText={"NetBird IP Address"}
            label={
              <>
-                <MapPin size={16} />
+                <MapPin size={16} className={"shrink-0"} />
                NetBird IP Address
              </>
            }
@@ -547,7 +557,7 @@ function PeerInformationCard({ peer }: Readonly<{ peer: Peer }>) {
              copyText={"NetBird IPv6 Address"}
              label={
                <>
-                  <MapPin size={16} />
+                  <MapPin size={16} className={"shrink-0"} />
                  NetBird IPv6 Address
                </>
              }
@@ -567,7 +577,7 @@ function PeerInformationCard({ peer }: Readonly<{ peer: Peer }>) {
            copyText={"Public IP Address"}
            label={
              <>
-                <NetworkIcon size={16} />
+                <NetworkIcon size={16} className={"shrink-0"} />
                Public IP Address
              </>
            }
@@ -579,7 +589,7 @@ function PeerInformationCard({ peer }: Readonly<{ peer: Peer }>) {
            copyText={"DNS label"}
            label={
              <>
-                <Globe size={16} />
+                <Globe size={16} className={"shrink-0"} />
                Domain Name
              </>
            }
@@ -597,7 +607,7 @@ function PeerInformationCard({ peer }: Readonly<{ peer: Peer }>) {
            copyText={"Hostname"}
            label={
              <>
-                <MonitorSmartphoneIcon size={16} />
+                <MonitorSmartphoneIcon size={16} className={"shrink-0"} />
                Hostname
              </>
            }
@@ -607,7 +617,7 @@ function PeerInformationCard({ peer }: Readonly<{ peer: Peer }>) {
          <Card.ListItem
            label={
              <>
-                <FlagIcon size={16} />
+                <FlagIcon size={16} className={"shrink-0"} />
                Region
              </>
            }
@@ -637,7 +647,7 @@ function PeerInformationCard({ peer }: Readonly<{ peer: Peer }>) {
          <Card.ListItem
            label={
              <>
-                <Cpu size={16} />
+                <Cpu size={16} className={"shrink-0"} />
                Operating System
              </>
            }
@@ -648,7 +658,7 @@ function PeerInformationCard({ peer }: Readonly<{ peer: Peer }>) {
            <Card.ListItem
              label={
                <>
-                  <Barcode size={16} />
+                  <Barcode size={16} className={"shrink-0"} />
                  Serial Number
                </>
              }
@@ -660,7 +670,7 @@ function PeerInformationCard({ peer }: Readonly<{ peer: Peer }>) {
            <Card.ListItem
              label={
                <>
-                  <CalendarDays size={16} />
+                  <CalendarDays size={16} className={"shrink-0"} />
                  Registered on
                </>
              }
@@ -676,7 +686,7 @@ function PeerInformationCard({ peer }: Readonly<{ peer: Peer }>) {
          <Card.ListItem
            label={
              <>
-                <History size={16} />
+                <History size={16} className={"shrink-0"} />
                Last seen
              </>
            }
@@ -693,7 +703,7 @@ function PeerInformationCard({ peer }: Readonly<{ peer: Peer }>) {
          <Card.ListItem
            label={
              <>
-                <NetBirdIcon size={16} />
+                <NetBirdIcon size={16} className={"shrink-0"} />
                Agent Version
              </>
            }
@@ -704,7 +714,7 @@ function PeerInformationCard({ peer }: Readonly<{ peer: Peer }>) {
            <Card.ListItem
              label={
                <>
-                  <NetBirdIcon size={16} />
+                  <NetBirdIcon size={16} className={"shrink-0"} />
                  UI Version
                </>
              }
@@ -1,116 +1,5 @@
-"use client";
+import { redirect } from "next/navigation";

-import Breadcrumbs from "@components/Breadcrumbs";
-import InlineLink from "@components/InlineLink";
-import Paragraph from "@components/Paragraph";
-import SkeletonTable from "@components/skeletons/SkeletonTable";
-import { usePortalElement } from "@hooks/usePortalElement";
-import { ExternalLinkIcon } from "lucide-react";
-import React, { lazy, Suspense } from "react";
-import PeerIcon from "@/assets/icons/PeerIcon";
-import PeersProvider, { usePeers } from "@/contexts/PeersProvider";
-import { usePermissions } from "@/contexts/PermissionsProvider";
-import { useUsers } from "@/contexts/UsersProvider";
-import PageContainer from "@/layouts/PageContainer";
-import { SetupModalContent } from "@/modules/setup-netbird-modal/SetupModal";
-
-const PeersTable = lazy(() => import("@/modules/peers/PeersTable"));
-
-export default function Peers() {
-  const { isRestricted } = usePermissions();
-
-  return (
-    <PageContainer>
-      {isRestricted ? (
-        <PeersBlockedView />
-      ) : (
-        <PeersProvider>
-          <PeersView />
-        </PeersProvider>
-      )}
-    </PageContainer>
-  );
-}
-
-function PeersView() {
-  const { peers, isLoading } = usePeers();
-  const { users } = useUsers();
-  const { ref: headingRef, portalTarget } =
-    usePortalElement<HTMLHeadingElement>();
-
-  const peersWithUser = peers?.map((peer) => {
-    if (!users) return peer;
-    return {
-      ...peer,
-      user: users?.find((user) => user.id === peer.user_id),
-    };
-  });
-
-  return (
-    <>
-      <div className={"p-default py-6"}>
-        <Breadcrumbs>
-          <Breadcrumbs.Item
-            href={"/peers"}
-            label={"Peers"}
-            icon={<PeerIcon size={13} />}
-          />
-        </Breadcrumbs>
-        <h1 ref={headingRef}>Peers</h1>
-        <Paragraph>
-          A list of all machines and devices connected to your private network.
-          Use this view to manage peers.
-        </Paragraph>
-        <Paragraph>
-          Learn more about{" "}
-          <InlineLink
-            href={"https://docs.netbird.io/how-to/add-machines-to-your-network"}
-            target={"_blank"}
-          >
-            Peers
-            <ExternalLinkIcon size={12} />
-          </InlineLink>
-          in our documentation.
-        </Paragraph>
-      </div>
-      <Suspense fallback={<SkeletonTable />}>
-        <PeersTable
-          isLoading={isLoading}
-          peers={peersWithUser}
-          headingTarget={portalTarget}
-        />
-      </Suspense>
-    </>
-  );
-}
-
-function PeersBlockedView() {
-  return (
-    <div className={"flex items-center justify-center flex-col"}>
-      <div className={"p-default py-6 max-w-3xl text-center"}>
-        <h1>Add new device to your network</h1>
-        <Paragraph className={"inline"}>
-          To get started, install NetBird and log in using your email account.
-          After that you should be connected. If you have further questions
-          check out our{" "}
-          <InlineLink
-            href={"https://docs.netbird.io/how-to/getting-started#installation"}
-            target={"_blank"}
-          >
-            Installation Guide
-            <ExternalLinkIcon size={12} />
-          </InlineLink>
-        </Paragraph>
-      </div>
-      <div className={"px-3 pt-1 pb-8 max-w-3xl w-full"}>
-        <div
-          className={
-            "rounded-md border border-nb-gray-900/70 grid w-full bg-nb-gray-930/40 stepper-bg-variant"
-          }
-        >
-          <SetupModalContent header={false} footer={false} />
-        </div>
-      </div>
-    </div>
-  );
+export default function PeersIndex() {
+  redirect("/peers/users");
 }
@@ -3,6 +3,6 @@ import type { Metadata } from "next";
 import BlankLayout from "@/layouts/BlankLayout";

 export const metadata: Metadata = {
-  title: `Inspection Policies - ${globalMetaTitle}`,
+  title: `Servers - ${globalMetaTitle}`,
 };
 export default BlankLayout;
@@ -0,0 +1,123 @@
+"use client";
+
+import Breadcrumbs from "@components/Breadcrumbs";
+import InlineLink from "@components/InlineLink";
+import Paragraph from "@components/Paragraph";
+import SkeletonTable from "@components/skeletons/SkeletonTable";
+import { usePortalElement } from "@hooks/usePortalElement";
+import { ExternalLinkIcon } from "lucide-react";
+import React, { lazy, Suspense, useMemo } from "react";
+import PeerIcon from "@/assets/icons/PeerIcon";
+import PeersProvider, { usePeers } from "@/contexts/PeersProvider";
+import { usePermissions } from "@/contexts/PermissionsProvider";
+import { useUsers } from "@/contexts/UsersProvider";
+import PageContainer from "@/layouts/PageContainer";
+import { SetupModalContent } from "@/modules/setup-netbird-modal/SetupModal";
+
+const PeersTable = lazy(() => import("@/modules/peers/PeersTable"));
+
+export default function ServersPage() {
+  const { isRestricted } = usePermissions();
+
+  return (
+    <PageContainer>
+      {isRestricted ? (
+        <ServersBlockedView />
+      ) : (
+        <PeersProvider>
+          <ServersView />
+        </PeersProvider>
+      )}
+    </PageContainer>
+  );
+}
+
+function ServersView() {
+  const { peers, isLoading: isPeersLoading } = usePeers();
+  const { users, isLoading: isUsersLoading } = useUsers();
+  const { ref: headingRef, portalTarget } =
+    usePortalElement<HTMLHeadingElement>();
+
+  // The kind filter classifies peers by whether their owner is a real
+  // user vs a service/no-user, so we must wait until both peers and
+  // users have loaded before joining them — otherwise peers temporarily
+  // render with peer.user === undefined and get misclassified.
+  const isLoading = isPeersLoading || isUsersLoading;
+  const peersWithUser = useMemo(() => {
+    if (!peers || !users) return undefined;
+    return peers.map((peer) => ({
+      ...peer,
+      user: users.find((u) => u.id === peer.user_id),
+    }));
+  }, [peers, users]);
+
+  return (
+    <>
+      <div className={"p-default py-6"}>
+        <Breadcrumbs>
+          <Breadcrumbs.Item
+            label={"Peers"}
+            icon={<PeerIcon size={13} />}
+          />
+          <Breadcrumbs.Item
+            href={"/peers/servers"}
+            label={"Servers"}
+            active
+          />
+        </Breadcrumbs>
+        <h1 ref={headingRef}>Servers</h1>
+        <Paragraph>
+          Servers, VMs, autonomous agents and other unattended machines with no
+          user behind them, typically enrolled with a setup key.{" "}
+          <InlineLink
+            href={
+              "https://docs.netbird.io/how-to/register-machines-using-setup-keys"
+            }
+            target={"_blank"}
+          >
+            Learn more
+            <ExternalLinkIcon size={12} />
+          </InlineLink>
+        </Paragraph>
+      </div>
+      <Suspense fallback={<SkeletonTable />}>
+        <PeersTable
+          isLoading={isLoading}
+          peers={peersWithUser}
+          headingTarget={portalTarget}
+          kind={"servers"}
+        />
+      </Suspense>
+    </>
+  );
+}
+
+function ServersBlockedView() {
+  return (
+    <div className={"flex items-center justify-center flex-col"}>
+      <div className={"p-default py-6 max-w-3xl text-center"}>
+        <h1>Add new server to your network</h1>
+        <Paragraph className={"inline"}>
+          To get started, install NetBird on the server and enroll it using a
+          setup key. If you have further questions check out our{" "}
+          <InlineLink
+            href={"https://docs.netbird.io/how-to/getting-started#installation"}
+            target={"_blank"}
+          >
+            Installation Guide
+            <ExternalLinkIcon size={12} />
+          </InlineLink>
+        </Paragraph>
+      </div>
+      <div className={"px-3 pt-1 pb-8 max-w-3xl w-full"}>
+        <div
+          className={
+            "rounded-md border border-nb-gray-900/70 grid w-full bg-nb-gray-930/40 stepper-bg-variant"
+          }
+        >
+          <SetupModalContent header={false} footer={false} isUserDevice={false} />
+        </div>
+      </div>
+    </div>
+  );
+}
@@ -0,0 +1,8 @@
+import { globalMetaTitle } from "@utils/meta";
+import type { Metadata } from "next";
+import BlankLayout from "@/layouts/BlankLayout";
+
+export const metadata: Metadata = {
+  title: `User Devices - ${globalMetaTitle}`,
+};
+export default BlankLayout;
@@ -0,0 +1,122 @@
+"use client";
+
+import Breadcrumbs from "@components/Breadcrumbs";
+import InlineLink from "@components/InlineLink";
+import Paragraph from "@components/Paragraph";
+import SkeletonTable from "@components/skeletons/SkeletonTable";
+import { usePortalElement } from "@hooks/usePortalElement";
+import { ExternalLinkIcon } from "lucide-react";
+import React, { lazy, Suspense, useMemo } from "react";
+import PeerIcon from "@/assets/icons/PeerIcon";
+import PeersProvider, { usePeers } from "@/contexts/PeersProvider";
+import { usePermissions } from "@/contexts/PermissionsProvider";
+import { useUsers } from "@/contexts/UsersProvider";
+import PageContainer from "@/layouts/PageContainer";
+import { SetupModalContent } from "@/modules/setup-netbird-modal/SetupModal";
+
+const PeersTable = lazy(() => import("@/modules/peers/PeersTable"));
+
+export default function UserDevicesPage() {
+  const { isRestricted } = usePermissions();
+
+  return (
+    <PageContainer>
+      {isRestricted ? (
+        <UserDevicesBlockedView />
+      ) : (
+        <PeersProvider>
+          <UserDevicesView />
+        </PeersProvider>
+      )}
+    </PageContainer>
+  );
+}
+
+function UserDevicesView() {
+  const { peers, isLoading: isPeersLoading } = usePeers();
+  const { users, isLoading: isUsersLoading } = useUsers();
+  const { ref: headingRef, portalTarget } =
+    usePortalElement<HTMLHeadingElement>();
+
+  // The kind filter classifies peers by whether their owner is a real
+  // user vs a service/no-user, so we must wait until both peers and
+  // users have loaded before joining them — otherwise peers temporarily
+  // render with peer.user === undefined and get misclassified.
+  const isLoading = isPeersLoading || isUsersLoading;
+  const peersWithUser = useMemo(() => {
+    if (!peers || !users) return undefined;
+    return peers.map((peer) => ({
+      ...peer,
+      user: users.find((u) => u.id === peer.user_id),
+    }));
+  }, [peers, users]);
+
+  return (
+    <>
+      <div className={"p-default py-6"}>
+        <Breadcrumbs>
+          <Breadcrumbs.Item
+            label={"Peers"}
+            icon={<PeerIcon size={13} />}
+          />
+          <Breadcrumbs.Item
+            href={"/peers/users"}
+            label={"User Devices"}
+            active
+          />
+        </Breadcrumbs>
+        <h1 ref={headingRef}>User Devices</h1>
+        <Paragraph>
+          Laptops, phones and other personal devices with a user behind them,
+          typically added when the user signs in with SSO.{" "}
+          <InlineLink
+            href={"https://docs.netbird.io/how-to/add-machines-to-your-network"}
+            target={"_blank"}
+          >
+            Learn more
+            <ExternalLinkIcon size={12} />
+          </InlineLink>
+        </Paragraph>
+      </div>
+      <Suspense fallback={<SkeletonTable />}>
+        <PeersTable
+          isLoading={isLoading}
+          peers={peersWithUser}
+          headingTarget={portalTarget}
+          kind={"users"}
+        />
+      </Suspense>
+    </>
+  );
+}
+
+function UserDevicesBlockedView() {
+  return (
+    <div className={"flex items-center justify-center flex-col"}>
+      <div className={"p-default py-6 max-w-3xl text-center"}>
+        <h1>Add new device to your network</h1>
+        <Paragraph className={"inline"}>
+          To get started, install NetBird and log in using your email account.
+          After that you should be connected. If you have further questions
+          check out our{" "}
+          <InlineLink
+            href={"https://docs.netbird.io/how-to/getting-started#installation"}
+            target={"_blank"}
+          >
+            Installation Guide
+            <ExternalLinkIcon size={12} />
+          </InlineLink>
+        </Paragraph>
+      </div>
+      <div className={"px-3 pt-1 pb-8 max-w-3xl w-full"}>
+        <div
+          className={
+            "rounded-md border border-nb-gray-900/70 grid w-full bg-nb-gray-930/40 stepper-bg-variant"
+          }
+        >
+          <SetupModalContent header={false} footer={false} isUserDevice />
+        </div>
+      </div>
+    </div>
+  );
+}
@@ -46,18 +46,14 @@ export default function PostureChecksPage() {
          </Breadcrumbs>
          <h1 ref={headingRef}>Posture Checks</h1>
          <Paragraph>
-            Use posture checks to further restrict access in your network.
-          </Paragraph>
-          <Paragraph>
-            Learn more about
+            Use posture checks to further restrict access in your network.{" "}
            <InlineLink
              href={"https://docs.netbird.io/how-to/manage-posture-checks"}
              target={"_blank"}
            >
-              Posture Checks
+              Learn more
              <ExternalLinkIcon size={12} />
            </InlineLink>
-            in our documentation.
          </Paragraph>
        </div>

@@ -0,0 +1,8 @@
+import { globalMetaTitle } from "@utils/meta";
+import type { Metadata } from "next";
+import BlankLayout from "@/layouts/BlankLayout";
+
+export const metadata: Metadata = {
+  title: `Clusters - Reverse Proxy - ${globalMetaTitle}`,
+};
+export default BlankLayout;
Author	SHA1	Message	Date
Maycon Santos	e8f0f20455	Update reverse proxy modals (#661 ) * add multi-environment deployment options for reverse proxy setup * refactor reverse proxy modal to handle state updates more robustly	2026-06-04 20:43:45 +02:00
Misha Bragin	8c94090e3d	Group Networks and Routes under Network Routing (#660 )	2026-06-04 19:44:13 +02:00
Misha Bragin	1917df6f60	Improve Table Filters Layout (#654 )	2026-06-04 18:24:53 +02:00
Misha Bragin	358b477ded	Move setup keys to Settings (#653 )	2026-05-27 17:17:04 +02:00
Maycon Santosandcoderabbitai[bot]	f535fe2667	Feature/private service expose (#646 ) * feat: private service expose Dashboard surface for the netbird private-service feature: the reverse-proxy modal gains a Private toggle and the target modal gains a Direct-upstream option with custom upstream host, both feeding the backend's Service.private + target.direct_upstream / target.host fields. The Proxy Events page wraps its table in PeersProvider so peer-name fallback resolution works for tunnel-peer callers. Reverse-proxy modal changes (ReverseProxyModal.tsx): - Private toggle that pivots the modal between standalone and cluster target types and auto-injects the cluster target. Reverse-proxy target modal changes: - Direct upstream toggle (target dials via the host stack instead of the embedded NetBird client). - Custom upstream host input revealed when Direct upstream is on. - New ReverseProxyClusterTargetSelector + ReverseProxyAddressInput. - useReverseProxyTargetOptions updated for the new option shape. Proxy Events table: - Reuses across the reverse-proxy events surface; UserCell falls back to the peer name when no user is attached to the call. * feat(reverse-proxy): move NetBird-only access to auth tab + access groups Restructures the Private (NetBird-only) flow so the auth model is clearer: - Removes the 'Private (NetBird-only)' toggle from the Service main page. Service mode is the only primary choice now. - Adds a 'NetBird-only access' toggle on the Authentication tab, gated on serviceMode=HTTP and selectedDomain.supports_private===true. When the cluster doesn't support it, the toggle is disabled with an inline note explaining why. - Adds an Access Groups picker (PeerGroupSelector) inline on the auth tab when NetBird-only is on. Replaces the previous bearer-auth distribution_groups overload — these groups go on the new service.access_groups field on the wire. - When NetBird-only is enabled, all other auth modes (SSO, password, PIN, headers, link) are hidden — the inbound peer's WireGuard identity is the only auth path. - Adds a 'Direct upstream' toggle to the Advanced settings tab, gated on isPrivate + cluster supports private. The toggle is service-level in the UI; on save it patches the (single) cluster target's options.direct_upstream. - togglePrivate now also clears bearer/password/pin/header/link state when entering private mode (strict mutual exclusivity). * fix(reverse-proxy): tighten NetBird-only flow per review Five fixes from the first cut: 1. Auth-tab design mismatch. The NetBird-only block was an inline FancyToggleSwitch + inline PeerGroupSelector. It now follows the same SettingCard.Item pattern as SSO/Password/PIN/Headers: a clickable row showing enabled state that opens a dedicated modal (AuthNetBirdOnlyModal) where the access groups are picked. 2. Trimmed wordy NetBird-only description down to one line. 3. Trimmed wordy Direct upstream help text. 4. Removed the per-target Direct upstream toggle from the target modal. Direct upstream now lives only at the service level (under Advanced settings) for private services. Cluster targets still imply direct_upstream via the existing sanitizeTargets path, so the wire stays correct. 5. togglePrivate no longer drops the user's existing targets when entering private mode. The previous behavior silently dropped any non-cluster targets the operator had configured, leaving the targets list empty and the Save button disabled. Now: targets stay put, canSaveService gates on 'all targets are cluster type' so the Save button accurately reflects what the backend will accept, and an inline warning explains what to fix when the constraint isn't met. The AuthNetBirdOnlyModal requires at least one access group before Enable becomes clickable, mirroring the SSO modal's pattern. * fix(reverse-proxy): allow any target type on private services The cluster-target restriction was a holdover from the previous auth-by-bearer-groups model where only cluster targets exposed a proxy peer that could host the ACL. With the new access_groups path the ACL is server-side and works regardless of how the proxy reaches the upstream. - Drop the inline 'Private services only support cluster targets' warning. - canSaveService no longer requires all targets to be cluster type. - Service-level Direct upstream now applies to every target (cluster, peer, host, domain) when private, so the operator can mix target types and still control the dial path globally. - Tightened NetBird-only description to '...connected peers in the selected NetBird groups.' (per review). - Tightened Direct upstream help to '...reachable without a Wireguard connection.' (per review). A future iteration may add a dedicated cluster-only mode with its own guided flow; for now the operator picks whatever target types suit their topology. * fix(reverse-proxy): count NetBird-only access as protection The 'No Protection Configured' popup fired even on private services because isUnprotected only checked the password/PIN/bearer/header/link auth modes. NetBird-only access is also a form of protection (tunnel identity + access groups), so include isPrivate in the gate. * fix(reverse-proxy): show NetBird-only auth and resolve access group names Two display bugs for private services: - ReverseProxyModal seeded accessGroups with {id}-only stubs, which made useGroupHelper skip its ID→Group resolution and render empty pills in the NetBird-only modal when editing an existing service. Pass the raw string[] so useGroupHelper resolves full Group objects with names against the GroupsProvider. - ReverseProxyAuthCell only inspected password/pin/bearer/headers auth flags, so a NetBird-only service displayed "No Auth" in the services table. Add a NetBird-only entry that counts toward the auth badge, renders as "NetBird Only" with the CircleUser icon when it's the single auth, and lists the access groups (name + user count) in the hover. * feat(reverse-proxy): unify proxy-cluster target into the peer/resource selector Operators picking a target for a service now see Proxy Clusters as a third tab alongside Peers and Resources, gated on at least one cluster advertising supports_private. When the service already has a proxy cluster the tab lists only that cluster; when it doesn't, picking a cluster commits it as the service's domain. The dedicated private-mode cluster picker is removed in favour of this unified flow. Selecting a cluster target now also auto-flips the service to NetBird-only, since cluster targets are only reachable over the WireGuard overlay and SSO/password/PIN advertise an auth path no public client could exercise. The Access Control tab carries a note explaining that an allow rule for the account's NetBird network range is applied automatically alongside any operator-configured rules. PeerGroupSelector gains opt-in showClusters/clusters/selectedCluster/ onClusterChange props plus a Proxy Clusters tab in its TabsList; the tabOrder union widens to include "clusters". All call sites that don't pass showClusters render unchanged. * fix(reverse-proxy): polish private-service copy and lock Direct Upstream for cluster targets Title-case NetBird-Only Access and Direct Upstream so the labels read consistently across the auth tab, the dedicated modal, and the services-table auth cell. Cluster targets are reached via the embedded proxy's host network stack and have no WireGuard endpoint to fall back to, so toggling Direct Upstream off would silently break them. When any target is a cluster the toggle is forced on, the FancyToggleSwitch is disabled, and the helper text explains why. The save path writes the locked-on value to every target's options.direct_upstream so the persisted state matches what the UI shows. * fix(reverse-proxy): support dynamic placeholder and restrict input to IPv4 or IPv6 when required * fix(reverse-proxy): rename "Agent" to "Peer" in events user cell tooltip * feat(reverse-proxy): gate NetBird-Only + Direct Upstream on cluster capability When the selected cluster doesn't have at least one connected embedded proxy (`netbird proxy`), the NetBird-Only Access and Direct Upstream controls are visually disabled with a tooltip explaining why, instead of silently no-op (NetBird-Only) or hidden (Direct Upstream). - ReverseProxyCluster interface gains the optional `private` flag that the management API now exposes on /api/reverse-proxies/clusters. - ClustersFeaturesCell renders a new "Private" badge for clusters whose `private === true`, matching the other capability badges. - SettingCard.Item gains a `disabled` prop: opacity-50 + cursor-not-allowed, click/keyboard guarded, Add/Edit button greyed out. No visual change for existing usages (default false). - ReverseProxyModal: - NetBird-Only Access card is now wrapped in a FullTooltip that activates only when the cluster lacks support; the SettingCard.Item is rendered with `disabled` in that case. Description text stops switching based on cluster state — the tooltip explains the gate. - Direct Upstream toggle is no longer hidden when supports_private is false; it stays visible and disabled (alongside the existing hasClusterTarget locked-on case), wrapped in a tooltip explaining the cluster requirement. Existing private services whose cluster lost the capability now show the control disabled rather than vanishing. * disable button when no group were selected Co-authored-by: coderabbitai[bot] <136622811+coderabbitai[bot]@users.noreply.github.com> * Feature/private service expose update (#651) * feat(reverse-proxy): refine UI state and copy for NetBird-Only and Direct Upstream controls - Default `Direct Upstream` to `false` for peer/resource targets; enhance tooltip descriptions. - Improve conditional rendering of `NetBird-Only Access` setting with appropriate tooltips for unsupported clusters. - Add cluster badge interaction in `PeerGroupSelector` and dynamic placeholder handling. - Simplify `ReverseProxyTargetSelector` messaging for proxy forwarding options. - Enhance `ClustersFeaturesCell` with richer description for the "Private" badge. * refactor(reverse-proxy): improve tooltip and modal text for clarity --------- Co-authored-by: coderabbitai[bot] <136622811+coderabbitai[bot]@users.noreply.github.com>	2026-05-26 21:37:11 +02:00
Misha Bragin	52f7020a0f	Fix broken SSH and RDP (#650 )	2026-05-26 20:14:36 +02:00
Misha Bragin	a604643f9a	Feature/simplified layout (#649 ) Splits the Peers sidebar entry into User Devices (/peers/users) and Servers (/peers/servers), with /peers redirecting to User Devices and a shared kind filter splitting peers by whether the owner is a real user vs a service/no-user. The Servers page description and an inline link replace what was the old "Setup Keys" sidebar item under Peers.	2026-05-25 13:09:30 +02:00
Maycon SantosandEduard Gert	42cd088c5d	rebuild self-hosted page as Clusters with type features (#641 ) * feat(reverse-proxy): rebuild self-hosted page as Clusters with type + features The Self-Hosted Proxies page was account-only by design but the underlying API already returned every cluster the account could see. Lifting that filter and renaming the page surfaces shared clusters too — operators can see what NetBird-deployed clusters are reachable alongside their own self-hosted ones, with online status and feature support visible per row. ReverseProxyCluster matches the new backend shape: `type` (account/shared), `online`, and the three capability flags. The `isSelfHostedCluster` provider hook now compares against `type === account` instead of a deprecated boolean. Page folder renamed self-hosted-proxies → clusters (history-preserving git mv). Table columns: Cluster (with an EphemeralPeerIndicator-style icon next to the name marking account vs shared and a colored dot for online status), Connected Proxies (plain numeric), Features (one tooltip-backed badge per supported capability), Actions (Delete only on account-owned rows; shared clusters render an empty action cell). Empty state shows when the list is fully empty with a doc link in the page header. Sidebar entry restored under Reverse Proxy. * Update record in modal, update doc link, update modal title * update reverse proxy documentation links to latest anchors * update cluster modal description to "proxy cluster" instead of "self-hosted cluster" --------- Co-authored-by: Eduard Gert <kontakt@eduardgert.de>	2026-05-20 11:48:38 +02:00
Maycon Santos	7400ac806e	remove self-hosted proxies menu item (#640 )	2026-05-14 17:50:07 +02:00
Viktor Liu	240ff5af9a	Fix IPv6 input across reverse proxy, routes and resources (#638 )	2026-05-14 16:43:02 +02:00
Eduard Gert	dc86c30463	Add self-hosted proxies (#636 ) * Add self-hosted proxies * fix selfhosted badge for domain	2026-05-12 15:22:12 +02:00
Nicolas Frati	e58f75ae3c	Enable MFA for local users toggle (#615 ) * implement enable mfa for local users toggle * fix visibility check * Added beta badge to MFA auth toggle	2026-05-08 16:51:17 +02:00
Viktor Liu	dc1adebd27	Add IPv6 overlay settings and peer display (#594 )	2026-05-07 15:20:12 +02:00
Bethuel Mmbaga	d76cbd1122	Add Microsoft AD FS support for embedded Dex identity providers (#625 )	2026-04-28 12:42:48 +03:00
Eduard Gert	01330e0f58	Fix missing peer context in group network routes tab (#620 )	2026-04-23 17:05:05 +02:00
Viktor Liu	e9ac1a1a23	Add CrowdSec IP reputation (#600 )	2026-04-21 12:29:37 +02:00