From da35097041531bbfd44f25d69e42af6439639694 Mon Sep 17 00:00:00 2001
From: Debian <linux@myhorse.netcell-it.de>
Date: Mon, 11 May 2026 21:31:28 +0200
Subject: [PATCH] =?UTF-8?q?fix(haproxy):=20timeout=20tunnel=201h=20f=C3=BC?=
 =?UTF-8?q?r=20WebSocket/noVNC?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Proxmox-Console-Spinner-Bug — nach HTTP-Upgrade greift timeout tunnel
statt client/server. Default war fehlend → fiel auf timeout server 60s
zurück und kappte WS-Verbindungen. 1h hält Console-Sessions, SSH-WS-
Tunnel und ähnliche langlebige Streams stabil.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
---
 VERSION                                         | 2 +-
 cmd/edgeguard-api/main.go                       | 2 +-
 cmd/edgeguard-ctl/main.go                       | 2 +-
 cmd/edgeguard-scheduler/main.go                 | 2 +-
 internal/haproxy/haproxy.cfg.tpl                | 4 ++++
 management-ui/src/components/Layout/Sidebar.tsx | 2 +-
 6 files changed, 9 insertions(+), 5 deletions(-)

diff --git a/VERSION b/VERSION
index f133985..3e9c4a6 100644
--- a/VERSION
+++ b/VERSION
@@ -1 +1 @@
-1.0.49
+1.0.50
diff --git a/cmd/edgeguard-api/main.go b/cmd/edgeguard-api/main.go
index 2da3c32..7808ed1 100644
--- a/cmd/edgeguard-api/main.go
+++ b/cmd/edgeguard-api/main.go
@@ -48,7 +48,7 @@ import (
 	wgsvc "git.netcell-it.de/projekte/edgeguard-native/internal/services/wireguard"
 )
 
-var version = "1.0.49"
+var version = "1.0.50"
 
 func main() {
 	addr := os.Getenv("EDGEGUARD_API_ADDR")
diff --git a/cmd/edgeguard-ctl/main.go b/cmd/edgeguard-ctl/main.go
index 90adb34..b95fd04 100644
--- a/cmd/edgeguard-ctl/main.go
+++ b/cmd/edgeguard-ctl/main.go
@@ -9,7 +9,7 @@ import (
 	"os"
 )
 
-var version = "1.0.49"
+var version = "1.0.50"
 
 const usage = `edgeguard-ctl — EdgeGuard CLI
 
diff --git a/cmd/edgeguard-scheduler/main.go b/cmd/edgeguard-scheduler/main.go
index 200ee35..57d567b 100644
--- a/cmd/edgeguard-scheduler/main.go
+++ b/cmd/edgeguard-scheduler/main.go
@@ -24,7 +24,7 @@ import (
 	"git.netcell-it.de/projekte/edgeguard-native/internal/services/tlscerts"
 )
 
-var version = "1.0.49"
+var version = "1.0.50"
 
 const (
 	// renewTickInterval — how often we re-evaluate expiring certs.
diff --git a/internal/haproxy/haproxy.cfg.tpl b/internal/haproxy/haproxy.cfg.tpl
index f8996e0..aa728fb 100644
--- a/internal/haproxy/haproxy.cfg.tpl
+++ b/internal/haproxy/haproxy.cfg.tpl
@@ -21,6 +21,10 @@ defaults
     timeout client  60s
     timeout server  60s
     timeout http-request 10s
+    # WebSocket/long-poll: nach HTTP-Upgrade greift `timeout tunnel`
+    # statt client/server-timeout. 1h hält Proxmox-noVNC + VS-Code-
+    # SSH-Tunnel + andere langlebige Streams offen.
+    timeout tunnel  1h
 
 # ── Public :80 ─────────────────────────────────────────────────────────
 # ACME-01 challenges proxy to edgeguard-api which serves the webroot.
diff --git a/management-ui/src/components/Layout/Sidebar.tsx b/management-ui/src/components/Layout/Sidebar.tsx
index 8cee556..5ce9cc8 100644
--- a/management-ui/src/components/Layout/Sidebar.tsx
+++ b/management-ui/src/components/Layout/Sidebar.tsx
@@ -77,7 +77,7 @@ const NAV: NavSection[] = [
   },
 ]
 
-const VERSION = '1.0.49'
+const VERSION = '1.0.50'
 
 export default function Sidebar({ isOpen, onClose }: SidebarProps) {
   const { t } = useTranslation()