Bryan Frimin 64e1a813fb Accept CIDR ranges in proxy trusted-proxies configuration
The HTTP middleware and proxy-protocol listeners both pinned trust
to exact IPs, which forced re-applying terraform every time AWS
rotated an ALB or NLB ENI. Trusted-proxies entries now accept CIDR
ranges in addition to plain IPs, so callers can trust whole subnets
(where the load balancer ENIs always live) and stop chasing
rotating IPs.

The HTTP middleware splits parsed entries into IPs and IPNets and
checks both. The proxy-protocol listeners switch from
TrustProxyHeaderFrom (IP-only, REJECT) to ConnStrictWhiteListPolicy
(IP or CIDR, REJECT) which preserves the existing reject-on-unknown
semantics.

Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2026-05-05 10:51:51 +02:00
2026-05-04 14:13:42 +02:00
2026-04-15 16:42:56 +02:00
2025-04-09 21:19:53 -07:00
2025-11-25 11:29:54 +01:00
2026-05-05 11:42:03 +04:00
2026-04-22 22:30:23 +02:00
2026-04-21 18:51:34 +02:00
2025-12-24 08:46:21 +01:00
2026-05-04 14:46:01 +02:00
2026-03-13 16:55:23 +01:00
2026-04-15 16:42:56 +02:00
2025-01-13 12:56:14 +01:00
2026-05-04 14:16:30 +00:00
2026-05-04 14:46:01 +02:00
2025-04-10 21:04:27 -07:00
2026-04-27 18:39:58 +04:00
2025-01-10 16:31:34 +01:00
2025-12-26 17:33:03 +01:00

Probo - Open Source Compliance

Discord GitHub License GitHub Actions Workflow Status

Probo is an open-source compliance platform built for startups that helps you achieve SOC-2 compliance quickly and efficiently. Unlike traditional solutions, Probo is designed to be accessible, transparent, and community-driven.

🚀 Getting Started

📖 Official Documentation

Prerequisites

  • Go 1.21+
  • Node.js 22+
  • Docker
  • mkcert

Quick Start

  1. Clone the repository:

    git clone --recurse-submodules https://github.com/getprobo/probo.git
    cd probo
    
  2. Install dependencies:

    # Install Go dependencies
    go mod download
    
    # Install Node.js dependencies
    npm ci
    
  3. Start the development environment:

    # Start infrastructure services
    make stack-up
    
    # Build the project
    make build
    
    # Generate the local dev config (writes cfg/dev.yaml)
    make dev-config
    
    # Start the application using development settings
    bin/probod -cfg-file cfg/dev.yaml
    

The application will be available at:

Testing Custom Domains

To test the custom domains feature locally, add the CNAME target to your hosts file:

# Add this line to /etc/hosts (macOS/Linux) or C:\Windows\System32\drivers\etc\hosts (Windows)
127.0.0.1 custom.getprobo.com

This allows you to test custom trust center domains on your local machine. The generated cfg/dev.yaml sets the CNAME target via custom-domains.cname-target; change CUSTOM_DOMAINS_CNAME_TARGET before running make dev-config to override it.

For detailed setup instructions, see our Contributing Guide.

🏗️ Current Status

Probo is in early development, focusing on building a solid foundation for compliance management.

🛠️ Tech Stack

Backend

Frontend

Infrastructure

Observability

  • Grafana - Metrics visualization
  • Prometheus - Metrics collection
  • Loki - Log aggregation
  • Tempo - Distributed tracing

🤝 Contributing

We love contributions from our community! There are many ways to contribute:

  • 🌟 Star the repository to show your support
  • 🐛 Report bugs
  • 💡 Request features
  • 🔧 Submit pull requests
  • 📖 Improve documentation

Please read our Contributing Guide before making a pull request.

📚 Documentation

🌐 Community & Support

📄 License

Probo is MIT licensed.

Description
No description provided
Readme MIT 72 MiB
Languages
Go 67%
TypeScript 31.7%
Shell 0.5%
CSS 0.2%
Makefile 0.2%
Other 0.3%