feat: user roles - admins and users limited to the machines given to them, user editor with machines, password sign-in and its lock; direct address without Cloudflare as the agents' fallback and in the installer; version 0.1.2

internal/proto/proto.go

@@ -72,6 +72,11 @@ const (
 // answers.
 const TransportHeader = "X-Transport"
 
+// FallbackHeader carries the server's direct address (one not behind a
+// proxy like Cloudflare) on poll and config answers, for the agent to turn
+// to when the main one is out of reach.
+const FallbackHeader = "X-Fallback-Host"
+
 // WSMsg is one message on an agent's WebSocket, either way. Server to agent:
 // "ctrl" (Ctrl, as a control poll would answer), "cfg" (Tunnel and
 // Transport, also a keep-alive), "in" (Frames for session SID), "gone"
@@ -85,6 +90,7 @@ type WSMsg struct {
 	Out       *OutMessage     `json:"out,omitempty"`
 	Tunnel    string          `json:"tunnel,omitempty"`
 	Transport string          `json:"transport,omitempty"`
+	Fallback  string          `json:"fallback,omitempty"`
 }
 
 // Terminal / stream frame types on the session "in" channel (server -> agent).