Merge pull request #3250 from fosrl/dev

1.19.1

.dockerignore

@@ -35,3 +35,4 @@ tsconfig.json
 Dockerfile*
 drizzle.config.ts
 allowedDevOrigins.json
+scratch/

messages/en-US.json

@@ -984,7 +984,7 @@
     "sharedPolicy": "Shared Policy",
     "sharedPolicyNoneDescription": "This resource has its own policy.",
     "resourceSharedPolicyOwnDescription": "This resource has its own authentication and access rules controls.",
-    "resourceSharedPolicyInheritedDescription": "This resource inherits authentication and access rules controls from <policyLink>{policyName}</policyLink>.",
+    "resourceSharedPolicyInheritedDescription": "This resource inherits from <policyLink>{policyName}</policyLink>.",
     "resourceSharedPolicyAuthenticationNotice": "This resource is using a shared policy. Some authentication settings can be edited on this resource to add to the policy. To change the underlying policy, you must edit to <policyLink>{policyName}</policyLink>.",
     "resourceSharedPolicyRulesNotice": "This resource is using a shared policy. Some access rules can be edited on this resource. To change the underlying policy, you must edit <policyLink>{policyName}</policyLink>.",
     "resourceUsersRoles": "Access Controls",

server/setup/migrationsSqlite.ts

@@ -44,6 +44,7 @@ import m38 from "./scriptsSqlite/1.18.0";
 import m39 from "./scriptsSqlite/1.18.3";
 import m40 from "./scriptsSqlite/1.18.4";
 import m41 from "./scriptsSqlite/1.19.0";
+import m42 from "./scriptsSqlite/1.19.1";
 
 // THIS CANNOT IMPORT ANYTHING FROM THE SERVER
 // EXCEPT FOR THE DATABASE AND THE SCHEMA
@@ -85,7 +86,8 @@ const migrations = [
     { version: "1.18.0", run: m38 },
     { version: "1.18.3", run: m39 },
     { version: "1.18.4", run: m40 },
-    { version: "1.19.0", run: m41 }
+    { version: "1.19.0", run: m41 },
+    { version: "1.19.1", run: m42 }
     // Add new migrations here as they are created
 ] as const;
 

server/setup/scriptsSqlite/1.19.0.ts

@@ -228,7 +228,7 @@ export default async function migration() {
             ).run();
             db.prepare(
                 `
-            UPDATE 'siteResources' SET 'destination2' = 'destination';
+            UPDATE 'siteResources' SET "destination2" = "destination";
                 `
             ).run();
             db.prepare(
@@ -349,9 +349,9 @@ export default async function migration() {
             db.prepare(
                 `
             UPDATE 'targets'
-            SET 'mode' = (
+            SET "mode" = (
-                SELECT 'mode' FROM 'resources'
+                SELECT "mode" FROM 'resources'
-                WHERE 'resources'.'resourceId' = 'targets'.'resourceId'
+                WHERE "resources"."resourceId" = "targets"."resourceId"
             );
                 `
             ).run();
@@ -680,25 +680,6 @@ export default async function migration() {
                     deleteResourceRules.run(resource.resourceId);
                     deleteResourceWhitelist.run(resource.resourceId);
                 }
-                // remove not null/default from sso, applyRules, and emailWhitelistEnabled in preparation for resource policies
-                db.prepare(`ALTER TABLE 'resources' DROP COLUMN 'sso';`).run();
-                db.prepare(
-                    `ALTER TABLE 'resources' ADD COLUMN 'sso' integer;`
-                ).run();
-
-                db.prepare(
-                    `ALTER TABLE 'resources' DROP COLUMN 'applyRules';`
-                ).run();
-                db.prepare(
-                    `ALTER TABLE 'resources' ADD COLUMN 'applyRules' integer;`
-                ).run();
-
-                db.prepare(
-                    `ALTER TABLE 'resources' DROP COLUMN 'emailWhitelistEnabled';`
-                ).run();
-                db.prepare(
-                    `ALTER TABLE 'resources' ADD COLUMN 'emailWhitelistEnabled' integer;`
-                ).run();
             });
 
             migrateInlinePolicies();
@@ -707,6 +688,29 @@ export default async function migration() {
             );
         }
 
+        // add one more transaction
+        db.transaction(() => {
+            // remove not null/default from sso, applyRules, and emailWhitelistEnabled in preparation for resource policies
+            db.prepare(`ALTER TABLE 'resources' DROP COLUMN 'sso';`).run();
+            db.prepare(
+                `ALTER TABLE 'resources' ADD COLUMN 'sso' integer;`
+            ).run();
+
+            db.prepare(
+                `ALTER TABLE 'resources' DROP COLUMN 'applyRules';`
+            ).run();
+            db.prepare(
+                `ALTER TABLE 'resources' ADD COLUMN 'applyRules' integer;`
+            ).run();
+
+            db.prepare(
+                `ALTER TABLE 'resources' DROP COLUMN 'emailWhitelistEnabled';`
+            ).run();
+            db.prepare(
+                `ALTER TABLE 'resources' ADD COLUMN 'emailWhitelistEnabled' integer;`
+            ).run();
+        })();
+
         console.log("Migrated database");
     } catch (e) {
         console.log("Failed to migrate db:", e);

server/setup/scriptsSqlite/1.19.1.ts

@@ -0,0 +1,59 @@
+import { APP_PATH, __DIRNAME } from "@server/lib/consts";
+import Database from "better-sqlite3";
+import path from "path";
+
+const version = "1.19.1";
+
+export default async function migration() {
+    console.log(`Running setup script ${version}...`);
+
+    const location = path.join(APP_PATH, "db", "db.sqlite");
+    const db = new Database(location);
+
+    try {
+        db.transaction(() => {
+            // remove not null/default from sso, applyRules, and emailWhitelistEnabled in preparation for resource policies
+            db.prepare(
+                `ALTER TABLE 'resources' ADD COLUMN 'sso2' integer;`
+            ).run();
+            db.prepare(`UPDATE 'resources' SET "sso2" = "sso";`).run();
+            db.prepare(`ALTER TABLE 'resources' DROP COLUMN 'sso';`).run();
+            db.prepare(
+                `ALTER TABLE 'resources' RENAME COLUMN 'sso2' TO 'sso';`
+            ).run();
+
+            db.prepare(
+                `ALTER TABLE 'resources' ADD COLUMN 'applyRules2' integer;`
+            ).run();
+            db.prepare(
+                `UPDATE 'resources' SET "applyRules2" = "applyRules";`
+            ).run();
+            db.prepare(
+                `ALTER TABLE 'resources' DROP COLUMN 'applyRules';`
+            ).run();
+            db.prepare(
+                `ALTER TABLE 'resources' RENAME COLUMN 'applyRules2' TO 'applyRules';`
+            ).run();
+
+            db.prepare(
+                `ALTER TABLE 'resources' ADD COLUMN 'emailWhitelistEnabled2' integer;`
+            ).run();
+            db.prepare(
+                `UPDATE 'resources' SET "emailWhitelistEnabled2" = "emailWhitelistEnabled";`
+            ).run();
+            db.prepare(
+                `ALTER TABLE 'resources' DROP COLUMN 'emailWhitelistEnabled';`
+            ).run();
+            db.prepare(
+                `ALTER TABLE 'resources' RENAME COLUMN 'emailWhitelistEnabled2' TO 'emailWhitelistEnabled';`
+            ).run();
+        })();
+
+        console.log("Migrated database");
+    } catch (e) {
+        console.log("Failed to migrate db:", e);
+        throw e;
+    }
+
+    console.log(`${version} migration complete`);
+}

src/app/[orgId]/settings/(private)/labels/page.tsx

@@ -3,7 +3,9 @@ import { authCookieHeader } from "@app/lib/api/cookies";
 import { ListOrgLabelsResponse } from "@server/routers/labels/types";
 import { AxiosResponse } from "axios";
 import OrgLabelsTable from "@app/components/OrgLabelsTable";
+import { PaidFeaturesAlert } from "@app/components/PaidFeaturesAlert";
 import SettingsSectionTitle from "@app/components/SettingsSectionTitle";
+import { tierMatrix } from "@server/lib/billing/tierMatrix";
 import type { Metadata } from "next";
 import { getTranslations } from "next-intl/server";
 
@@ -49,6 +51,8 @@ export default async function LabelsPage({ params, searchParams }: Props) {
                 description={t("orgLabelsDescription")}
             />
 
+            <PaidFeaturesAlert tiers={tierMatrix.labels} />
+
             <OrgLabelsTable
                 labels={labels}
                 orgId={orgId}

src/app/[orgId]/settings/general/page.tsx

@@ -43,6 +43,7 @@ import { usePaidStatus } from "@app/hooks/usePaidStatus";
 import { tierMatrix, TierFeature } from "@server/lib/billing/tierMatrix";
 import { PaidFeaturesAlert } from "@app/components/PaidFeaturesAlert";
 import { ExternalLink } from "lucide-react";
+import { env } from "process";
 
 // Schema for general organization settings
 const GeneralFormSchema = z.object({
@@ -165,6 +166,7 @@ function DeleteForm({ org }: SectionFormProps) {
 
 function GeneralSectionForm({ org }: SectionFormProps) {
     const { updateOrg } = useOrgContext();
+    const { env } = useEnvContext();
     const form = useForm({
         resolver: zodResolver(
             GeneralFormSchema.pick({
@@ -265,36 +267,42 @@ function GeneralSectionForm({ org }: SectionFormProps) {
                             <PaidFeaturesAlert
                                 tiers={tierMatrix.newtAutoUpdate}
                             />
-                            <FormField
+                            {!env.flags.disableEnterpriseFeatures && (
-                                control={form.control}
+                                <FormField
-                                name="settingsEnableGlobalNewtAutoUpdate"
+                                    control={form.control}
-                                render={({ field }) => (
+                                    name="settingsEnableGlobalNewtAutoUpdate"
-                                    <FormItem>
+                                    render={({ field }) => (
-                                        <FormControl>
+                                        <FormItem>
-                                            <SwitchInput
+                                            <FormControl>
-                                                id="settings-enable-global-newt-auto-update"
+                                                <SwitchInput
-                                                label={t("newtAutoUpdate")}
+                                                    id="settings-enable-global-newt-auto-update"
-                                                checked={field.value}
+                                                    label={t("newtAutoUpdate")}
-                                                onCheckedChange={field.onChange}
+                                                    checked={field.value}
-                                                disabled={!hasAutoUpdateFeature}
+                                                    onCheckedChange={
-                                            />
+                                                        field.onChange
-                                        </FormControl>
+                                                    }
-                                        <FormDescription>
+                                                    disabled={
-                                            {t("newtAutoUpdateDescription")}{" "}
+                                                        !hasAutoUpdateFeature
-                                            <a
+                                                    }
-                                                href="https://docs.pangolin.net/manage/sites/auto-update"
+                                                />
-                                                target="_blank"
+                                            </FormControl>
-                                                rel="noopener noreferrer"
+                                            <FormDescription>
-                                                className="text-primary hover:underline inline-flex items-center gap-1"
+                                                {t("newtAutoUpdateDescription")}{" "}
-                                            >
+                                                <a
-                                                {t("learnMore")}
+                                                    href="https://docs.pangolin.net/manage/sites/auto-update"
-                                                <ExternalLink className="size-3.5 shrink-0" />
+                                                    target="_blank"
-                                            </a>
+                                                    rel="noopener noreferrer"
-                                        </FormDescription>
+                                                    className="text-primary hover:underline inline-flex items-center gap-1"
-                                        <FormMessage />
+                                                >
-                                    </FormItem>
+                                                    {t("learnMore")}
-                                )}
+                                                    <ExternalLink className="size-3.5 shrink-0" />
-                            />
+                                                </a>
+                                            </FormDescription>
+                                            <FormMessage />
+                                        </FormItem>
+                                    )}
+                                />
+                            )}
                         </form>
                     </Form>
                 </SettingsSectionForm>

src/app/[orgId]/settings/resources/public/[niceId]/general/page.tsx

@@ -19,14 +19,14 @@ import {
     SettingsSectionBody,
     SettingsSectionDescription,
     SettingsSectionFooter,
-    SettingsFormCell,
     SettingsFormGrid,
     SettingsSectionForm,
     SettingsSectionHeader,
     SettingsSectionTitle,
     SettingsSubsectionDescription,
     SettingsSubsectionHeader,
-    SettingsSubsectionTitle
+    SettingsSubsectionTitle,
+    SettingsFormCell
 } from "@app/components/Settings";
 import { SwitchInput } from "@app/components/SwitchInput";
 import { useEnvContext } from "@app/hooks/useEnvContext";
@@ -70,7 +70,7 @@ export default function GeneralForm() {
 
     const api = createApiClient({ env });
 
-    const showResourcePolicy =
+    const hasResourcePolicies =
         build !== "oss" &&
         isPaidUser(tierMatrix[TierFeature.ResourcePolicies]);
 
@@ -86,7 +86,7 @@ export default function GeneralForm() {
         ...orgQueries.resourcePolicy({
             resourcePolicyId: selectedSharedPolicyId!
         }),
-        enabled: showResourcePolicy && selectedSharedPolicyId !== null
+        enabled: hasResourcePolicies && selectedSharedPolicyId !== null
     });
 
     const [resourceFullDomain, setResourceFullDomain] = useState(
@@ -153,11 +153,10 @@ export default function GeneralForm() {
 
         let resourcePolicyId: number | null | undefined;
 
-        if (
+        if (!["tcp", "udp"].includes(resource.mode)) {
-            showResourcePolicy &&
+            if (hasResourcePolicies || selectedSharedPolicyId === null) {
-            !["tcp", "udp"].includes(resource.mode)
+                resourcePolicyId = selectedSharedPolicyId;
-        ) {
+            }
-            resourcePolicyId = selectedSharedPolicyId;
         }
 
         const res = await api
@@ -297,28 +296,6 @@ export default function GeneralForm() {
                                             />
                                         </SettingsFormCell>
 
-                                        <SettingsFormCell span="full">
-                                            <SettingsSubsectionHeader>
-                                                <SettingsSubsectionTitle>
-                                                    {t(
-                                                        "resourceGeneralDetailsSubsection"
-                                                    )}
-                                                </SettingsSubsectionTitle>
-                                                <SettingsSubsectionDescription>
-                                                    {t(
-                                                        [
-                                                            "tcp",
-                                                            "udp",
-                                                        ].includes(
-                                                            resource.mode
-                                                        )
-                                                            ? "resourceGeneralDetailsSubsectionPortDescription"
-                                                            : "resourceGeneralDetailsSubsectionDescription"
-                                                    )}
-                                                </SettingsSubsectionDescription>
-                                            </SettingsSubsectionHeader>
-                                        </SettingsFormCell>
-
                                         <SettingsFormCell span="half">
                                             <FormField
                                                 control={form.control}
@@ -476,10 +453,9 @@ export default function GeneralForm() {
                                                 </div>
                                             </SettingsFormCell>
                                         )}
-                                        {showResourcePolicy &&
+                                        { !["tcp", "udp"].includes(
-                                            !["tcp", "udp"].includes(
                                                 resource.mode
-                                            ) && (
+                                            ) && !env.flags.disableEnterpriseFeatures && (
                                             <>
                                                 <SettingsFormCell span="full">
                                                     <SettingsSubsectionHeader>

src/app/[orgId]/settings/resources/public/[niceId]/maintenance/page.tsx

@@ -169,20 +169,27 @@ export default function ResourceMaintenancePage() {
         {
             id: "automatic",
             title: `${t("automatic")} (${t("recommended")})`,
-            description: t("automaticModeDescription"),
+            description: t("automaticModeDescription")
-            disabled: isMaintenanceDisabled
         },
         {
             id: "forced",
             title: t("forced"),
-            description: t("forcedModeDescription"),
+            description: t("forcedModeDescription")
-            disabled: isMaintenanceDisabled
         }
     ];
 
     return (
-        <SettingsContainer>
+        <>
-            <SettingsSection>
+            <PaidFeaturesAlert tiers={tierMatrix.maintencePage} />
+            <div
+                className={
+                    isMaintenanceDisabled
+                        ? "pointer-events-none opacity-50"
+                        : undefined
+                }
+            >
+                <SettingsContainer>
+                    <SettingsSection>
                 <SettingsSectionHeader>
                     <SettingsSectionTitle>
                         {t("maintenanceMode")}
@@ -193,7 +200,6 @@ export default function ResourceMaintenancePage() {
                 </SettingsSectionHeader>
 
                 <SettingsSectionBody>
-                    <PaidFeaturesAlert tiers={tierMatrix.maintencePage} />
                     <SettingsSectionForm variant="half">
                         <Form {...maintenanceForm}>
                             <form
@@ -205,46 +211,33 @@ export default function ResourceMaintenancePage() {
                                         <FormField
                                             control={maintenanceForm.control}
                                             name="maintenanceModeEnabled"
-                                            render={({ field }) => {
+                                            render={({ field }) => (
-                                                const isDisabled = !isPaidUser(
+                                                <FormItem>
-                                                    tierMatrix.maintencePage
+                                                    <FormControl>
-                                                );
+                                                        <SwitchInput
-
+                                                            id="enable-maintenance"
-                                                return (
+                                                            checked={
-                                                    <FormItem>
+                                                                field.value
-                                                        <FormControl>
+                                                            }
-                                                            <SwitchInput
+                                                            label={t(
-                                                                id="enable-maintenance"
+                                                                "enableMaintenanceMode"
-                                                                checked={
+                                                            )}
-                                                                    field.value
+                                                            description={t(
-                                                                }
+                                                                "enableMaintenanceModeDescription"
-                                                                label={t(
+                                                            )}
-                                                                    "enableMaintenanceMode"
+                                                            onCheckedChange={(
-                                                                )}
+                                                                val
-                                                                description={t(
+                                                            ) => {
-                                                                    "enableMaintenanceModeDescription"
+                                                                maintenanceForm.setValue(
-                                                                )}
+                                                                    "maintenanceModeEnabled",
-                                                                disabled={
-                                                                    isDisabled
-                                                                }
-                                                                onCheckedChange={(
                                                                     val
-                                                                ) => {
+                                                                );
-                                                                    if (
+                                                            }}
-                                                                        !isDisabled
+                                                        />
-                                                                    ) {
+                                                    </FormControl>
-                                                                        maintenanceForm.setValue(
+                                                    <FormMessage />
-                                                                            "maintenanceModeEnabled",
+                                                </FormItem>
-                                                                            val
+                                            )}
-                                                                        );
-                                                                    }
-                                                                }}
-                                                            />
-                                                        </FormControl>
-                                                        <FormMessage />
-                                                    </FormItem>
-                                                );
-                                            }}
                                         />
                                     </SettingsFormCell>
 
@@ -329,11 +322,6 @@ export default function ResourceMaintenancePage() {
                                                             <FormControl>
                                                                 <Input
                                                                     {...field}
-                                                                    disabled={
-                                                                        !isPaidUser(
-                                                                            tierMatrix.maintencePage
-                                                                        )
-                                                                    }
                                                                     placeholder="We'll be back soon!"
                                                                 />
                                                             </FormControl>
@@ -365,11 +353,6 @@ export default function ResourceMaintenancePage() {
                                                                 <Textarea
                                                                     {...field}
                                                                     rows={4}
-                                                                    disabled={
-                                                                        !isPaidUser(
-                                                                            tierMatrix.maintencePage
-                                                                        )
-                                                                    }
                                                                     placeholder={t(
                                                                         "maintenancePageMessagePlaceholder"
                                                                     )}
@@ -402,11 +385,6 @@ export default function ResourceMaintenancePage() {
                                                             <FormControl>
                                                                 <Input
                                                                     {...field}
-                                                                    disabled={
-                                                                        !isPaidUser(
-                                                                            tierMatrix.maintencePage
-                                                                        )
-                                                                    }
                                                                     placeholder={t(
                                                                         "maintenanceTime"
                                                                     )}
@@ -430,20 +408,19 @@ export default function ResourceMaintenancePage() {
                     </SettingsSectionForm>
                 </SettingsSectionBody>
 
-                <SettingsSectionFooter>
+                        <SettingsSectionFooter>
-                    <Button
+                            <Button
-                        type="submit"
+                                type="submit"
-                        loading={maintenanceSaveLoading}
+                                loading={maintenanceSaveLoading}
-                        disabled={
+                                disabled={maintenanceSaveLoading}
-                            maintenanceSaveLoading ||
+                                form="maintenance-settings-form"
-                            !isPaidUser(tierMatrix.maintencePage)
+                            >
-                        }
+                                {t("saveSettings")}
-                        form="maintenance-settings-form"
+                            </Button>
-                    >
+                        </SettingsSectionFooter>
-                        {t("saveSettings")}
+                    </SettingsSection>
-                    </Button>
+                </SettingsContainer>
-                </SettingsSectionFooter>
+            </div>
-            </SettingsSection>
+        </>
-        </SettingsContainer>
     );
 }

src/app/[orgId]/settings/sites/[niceId]/general/page.tsx

@@ -253,85 +253,87 @@ export default function GeneralPage() {
                                 <PaidFeaturesAlert
                                     tiers={tierMatrix.newtAutoUpdate}
                                 />
-                                {site && site.type === "newt" && (
+                                {site &&
-                                    <FormField
+                                    site.type === "newt" &&
-                                        control={form.control}
+                                    !env.flags.disableEnterpriseFeatures && (
-                                        name="autoUpdateEnabled"
+                                        <FormField
-                                        render={({ field }) => {
+                                            control={form.control}
-                                            const isOverriding = form.watch(
+                                            name="autoUpdateEnabled"
-                                                "autoUpdateOverrideOrg"
+                                            render={({ field }) => {
-                                            );
+                                                const isOverriding = form.watch(
-                                            return (
+                                                    "autoUpdateOverrideOrg"
-                                                <FormItem>
+                                                );
-                                                    <FormControl>
+                                                return (
-                                                        <div className="">
+                                                    <FormItem>
-                                                            <SwitchInput
+                                                        <FormControl>
-                                                                id="auto-update-enabled"
+                                                            <div className="">
-                                                                label={t(
+                                                                <SwitchInput
-                                                                    "siteAutoUpdateLabel"
+                                                                    id="auto-update-enabled"
-                                                                )}
+                                                                    label={t(
-                                                                checked={
+                                                                        "siteAutoUpdateLabel"
-                                                                    field.value
+                                                                    )}
-                                                                }
+                                                                    checked={
-                                                                onCheckedChange={(
+                                                                        field.value
-                                                                    checked
+                                                                    }
-                                                                ) => {
+                                                                    onCheckedChange={(
-                                                                    field.onChange(
                                                                         checked
-                                                                    );
+                                                                    ) => {
-                                                                    form.setValue(
+                                                                        field.onChange(
-                                                                        "autoUpdateOverrideOrg",
+                                                                            checked
-                                                                        true
+                                                                        );
-                                                                    );
-                                                                }}
-                                                                disabled={
-                                                                    !hasAutoUpdateFeature
-                                                                }
-                                                            />
-                                                            {isOverriding && (
-                                                                <ButtonUI
-                                                                    type="button"
-                                                                    variant="link"
-                                                                    size="sm"
-                                                                    className="text-sm text-muted-foreground px-0"
-                                                                    onClick={() => {
                                                                         form.setValue(
                                                                             "autoUpdateOverrideOrg",
-                                                                            false
+                                                                            true
-                                                                        );
-                                                                        form.setValue(
-                                                                            "autoUpdateEnabled",
-                                                                            orgAutoUpdate
                                                                         );
                                                                     }}
-                                                                >
+                                                                    disabled={
-                                                                    {t(
+                                                                        !hasAutoUpdateFeature
-                                                                        "siteAutoUpdateResetToOrg"
+                                                                    }
-                                                                    )}
+                                                                />
-                                                                </ButtonUI>
+                                                                {isOverriding && (
-                                                            )}
+                                                                    <ButtonUI
-                                                        </div>
+                                                                        type="button"
-                                                    </FormControl>
+                                                                        variant="link"
-                                                    <FormDescription>
+                                                                        size="sm"
-                                                        {t(
+                                                                        className="text-sm text-muted-foreground px-0"
-                                                            "siteAutoUpdateDescription"
+                                                                        onClick={() => {
-                                                        )}{" "}
+                                                                            form.setValue(
-                                                        <a
+                                                                                "autoUpdateOverrideOrg",
-                                                            href="https://docs.pangolin.net/manage/sites/auto-update"
+                                                                                false
-                                                            target="_blank"
+                                                                            );
-                                                            rel="noopener noreferrer"
+                                                                            form.setValue(
-                                                            className="text-primary hover:underline inline-flex items-center gap-1"
+                                                                                "autoUpdateEnabled",
-                                                        >
+                                                                                orgAutoUpdate
-                                                            {t("learnMore")}
+                                                                            );
-                                                            <ExternalLink className="size-3.5 shrink-0" />
+                                                                        }}
-                                                        </a>
+                                                                    >
-                                                    </FormDescription>
+                                                                        {t(
-                                                    <FormMessage />
+                                                                            "siteAutoUpdateResetToOrg"
-                                                </FormItem>
+                                                                        )}
-                                            );
+                                                                    </ButtonUI>
-                                        }}
+                                                                )}
-                                    />
+                                                            </div>
-                                )}
+                                                        </FormControl>
+                                                        <FormDescription>
+                                                            {t(
+                                                                "siteAutoUpdateDescription"
+                                                            )}{" "}
+                                                            <a
+                                                                href="https://docs.pangolin.net/manage/sites/auto-update"
+                                                                target="_blank"
+                                                                rel="noopener noreferrer"
+                                                                className="text-primary hover:underline inline-flex items-center gap-1"
+                                                            >
+                                                                {t("learnMore")}
+                                                                <ExternalLink className="size-3.5 shrink-0" />
+                                                            </a>
+                                                        </FormDescription>
+                                                        <FormMessage />
+                                                    </FormItem>
+                                                );
+                                            }}
+                                        />
+                                    )}
                             </form>
                         </Form>
                     </SettingsSectionForm>

src/app/[orgId]/settings/sites/create/page.tsx

@@ -23,7 +23,7 @@ import {
 } from "@app/components/ui/form";
 import HeaderTitle from "@app/components/SettingsSectionTitle";
 import { z } from "zod";
-import { createElement, useEffect, useState } from "react";
+import { useEffect, useState } from "react";
 import { useForm } from "react-hook-form";
 import { zodResolver } from "@hookform/resolvers/zod";
 import { Input } from "@app/components/ui/input";
@@ -37,15 +37,6 @@ import {
     InfoSections,
     InfoSectionTitle
 } from "@app/components/InfoSection";
-import {
-    FaApple,
-    FaCubes,
-    FaDocker,
-    FaFreebsd,
-    FaWindows
-} from "react-icons/fa";
-import { SiNixos, SiKubernetes } from "react-icons/si";
-import { Checkbox, CheckboxWithLabel } from "@app/components/ui/checkbox";
 import { Alert, AlertDescription, AlertTitle } from "@app/components/ui/alert";
 import { generateKeypair } from "../[niceId]/wireguardConfig";
 import { createApiClient, formatAxiosError } from "@app/lib/api";
@@ -570,7 +561,7 @@ export default function Page() {
                                                             </Button>
                                                         </SettingsFormCell>
                                                         {showAdvancedSettings && (
-                                                            <SettingsFormCell span="quarter">
+                                                            <SettingsFormCell span="half">
                                                                 <FormField
                                                                     control={
                                                                         form.control

src/app/navigation.tsx

@@ -156,10 +156,11 @@ export const orgNavSections = (
                   ]
                 : []),
             // PaidFeaturesAlert
-            ...((build === "oss" && !env?.flags.disableEnterpriseFeatures) ||
+            ...(!env?.flags.disableEnterpriseFeatures &&
-            build === "saas" ||
+            (build === "saas" ||
-            env?.app.identityProviderMode === "org" ||
+                env?.app.identityProviderMode === "org" ||
-            (env?.app.identityProviderMode === undefined && build !== "oss")
+                (env?.app.identityProviderMode === undefined &&
+                    build !== "oss"))
                 ? [
                       {
                           title: "sidebarIdentityProviders",
@@ -259,7 +260,7 @@ export const orgNavSections = (
                         href: "/{orgId}/settings/api-keys",
                         icon: <KeyRound className="size-4 flex-none" />
                     },
-                    ...(build !== "oss"
+                    ...(!env?.flags.disableEnterpriseFeatures
                         ? [
                               {
                                   title: "labels",

src/components/OrgLabelsTable.tsx

@@ -12,14 +12,7 @@ import { useNavigationContext } from "@app/hooks/useNavigationContext";
 import { toast } from "@app/hooks/useToast";
 import { createApiClient, formatAxiosError } from "@app/lib/api";
 import { type PaginationState } from "@tanstack/react-table";
-import {
+import { ArrowRight, MoreHorizontal } from "lucide-react";
-    ArrowDown01Icon,
-    ArrowUp10Icon,
-    ChevronsUpDownIcon,
-    MoreHorizontal,
-    PencilIcon,
-    PencilLineIcon
-} from "lucide-react";
 import { useTranslations } from "next-intl";
 import { usePathname, useRouter } from "next/navigation";
 import { useActionState, useMemo, useState, useTransition } from "react";
@@ -109,7 +102,7 @@ export default function OrgLabelsTable({
                 cell: ({ row }) => (
                     <div className="flex items-center gap-1.5 group">
                         <div
-                            className="size-2.5 rounded-full bg-(--color) flex-none"
+                            className="size-2 rounded-full bg-(--color) flex-none"
                             style={{
                                 // @ts-expect-error css color
                                 "--color": row.original.color
@@ -125,34 +118,40 @@ export default function OrgLabelsTable({
                 enableHiding: false,
                 header: () => <span className="p-3"></span>,
                 cell: ({ row }) => (
-                    <DropdownMenu>
+                    <div className="flex items-center gap-2 justify-end">
-                        <DropdownMenuTrigger asChild>
+                        <DropdownMenu>
-                            <Button variant="ghost" className="h-8 w-8 p-0">
+                            <DropdownMenuTrigger asChild>
-                                <span className="sr-only">{t("openMenu")}</span>
+                                <Button variant="ghost" className="h-8 w-8 p-0">
-                                <MoreHorizontal className="h-4 w-4" />
+                                    <span className="sr-only">
-                            </Button>
+                                        {t("openMenu")}
-                        </DropdownMenuTrigger>
+                                    </span>
-                        <DropdownMenuContent align="end">
+                                    <MoreHorizontal className="h-4 w-4" />
-                            <DropdownMenuItem
+                                </Button>
-                                onClick={() => {
+                            </DropdownMenuTrigger>
-                                    setSelectedLabel(row.original);
+                            <DropdownMenuContent align="end">
-                                    setIsEditModalOpen(true);
+                                <DropdownMenuItem
-                                }}
+                                    onClick={() => {
-                            >
+                                        setSelectedLabel(row.original);
-                                {t("edit")}
+                                        setIsDeleteModalOpen(true);
-                            </DropdownMenuItem>
+                                    }}
-                            <DropdownMenuItem
+                                >
-                                onClick={() => {
+                                    <span className="text-red-500">
-                                    setSelectedLabel(row.original);
+                                        {t("delete")}
-                                    setIsDeleteModalOpen(true);
+                                    </span>
-                                }}
+                                </DropdownMenuItem>
-                            >
+                            </DropdownMenuContent>
-                                <span className="text-red-500">
+                        </DropdownMenu>
-                                    {t("delete")}
+                        <Button
-                                </span>
+                            variant="outline"
-                            </DropdownMenuItem>
+                            onClick={() => {
-                        </DropdownMenuContent>
+                                setSelectedLabel(row.original);
-                    </DropdownMenu>
+                                setIsEditModalOpen(true);
+                            }}
+                        >
+                            {t("edit")}
+                            <ArrowRight className="ml-2 w-4 h-4" />
+                        </Button>
+                    </div>
                 )
             }
         ],

src/components/newt-install-commands.tsx

@@ -20,6 +20,7 @@ import {
 } from "react-icons/fa";
 import { ExternalLink } from "lucide-react";
 import { SiKubernetes, SiNixos } from "react-icons/si";
+import { useEnvContext } from "@app/hooks/useEnvContext";
 
 export type CommandItem = string | { title: string; command: string };
 
@@ -50,9 +51,12 @@ export function NewtSiteInstallCommands({
     version = "latest"
 }: NewtSiteInstallCommandsProps) {
     const t = useTranslations();
+    const { env } = useEnvContext();
 
     const [acceptClients, setAcceptClients] = useState(true);
-    const [allowPangolinSsh, setAllowPangolinSsh] = useState(true);
+    const [allowPangolinSsh, setAllowPangolinSsh] = useState(
+        !env.flags.disableEnterpriseFeatures
+    );
     const [platform, setPlatform] = useState<Platform>("linux");
     const [architecture, setArchitecture] = useState(
         () => getArchitectures(platform)[0]
@@ -71,7 +75,11 @@ export function NewtSiteInstallCommands({
         : "";
 
     const disableSshFlag =
-        supportsSshOption && !allowPangolinSsh ? " --disable-ssh" : "";
+        supportsSshOption &&
+        !allowPangolinSsh &&
+        !env.flags.disableEnterpriseFeatures
+            ? " --disable-ssh"
+            : "";
     const runAsRootPrefix =
         supportsSshOption && allowPangolinSsh ? "sudo " : "";
 
@@ -306,27 +314,29 @@ WantedBy=default.target`
                         >
                             {t("siteAcceptClientConnectionsDescription")}
                         </p>
-                        {supportsSshOption && (
+                        {supportsSshOption &&
-                            <>
+                            !env.flags.disableEnterpriseFeatures && (
-                                <div className="flex items-center space-x-2 mb-2 mt-2">
+                                <>
-                                    <CheckboxWithLabel
+                                    <div className="flex items-center space-x-2 mb-2 mt-2">
-                                        id="allowPangolinSsh"
+                                        <CheckboxWithLabel
-                                        checked={allowPangolinSsh}
+                                            id="allowPangolinSsh"
-                                        onCheckedChange={(checked) => {
+                                            checked={allowPangolinSsh}
-                                            const value = checked as boolean;
+                                            onCheckedChange={(checked) => {
-                                            setAllowPangolinSsh(value);
+                                                const value =
-                                        }}
+                                                    checked as boolean;
-                                        label="Allow Pangolin SSH"
+                                                setAllowPangolinSsh(value);
-                                    />
+                                            }}
-                                </div>
+                                            label="Allow Pangolin SSH"
-                                <p
+                                        />
-                                    id="allowPangolinSsh-desc"
+                                    </div>
-                                    className="text-sm text-muted-foreground"
+                                    <p
-                                >
+                                        id="allowPangolinSsh-desc"
-                                    {t("sitePangolinSshDescription")}
+                                        className="text-sm text-muted-foreground"
-                                </p>
+                                    >
-                            </>
+                                        {t("sitePangolinSshDescription")}
-                        )}
+                                    </p>
+                                </>
+                            )}
                     </div>
                 )}
 

src/components/resource-policy/EditPolicyForm.tsx

@@ -73,7 +73,9 @@ export function EditPolicyForm({
     }
 
     const policyTiers = tierMatrix[TierFeature.ResourcePolicies];
-    const isDisabled = !isPaidUser(policyTiers);
+    const isInlinePolicy = hidePolicyNameForm && resourceId === undefined;
+    const showPaidAlert = !isInlinePolicy;
+    const isDisabled = showPaidAlert && !isPaidUser(policyTiers);
     const effectiveReadonly = readonly || isDisabled;
 
     const authSection = (
@@ -100,7 +102,7 @@ export function EditPolicyForm({
     if (section === "general") {
         return (
             <>
-                <PaidFeaturesAlert tiers={policyTiers} />
+                {showPaidAlert && <PaidFeaturesAlert tiers={policyTiers} />}
                 <div
                     className={
                         isDisabled
@@ -117,7 +119,7 @@ export function EditPolicyForm({
     if (section === "authentication") {
         return (
             <>
-                <PaidFeaturesAlert tiers={policyTiers} />
+                {showPaidAlert && <PaidFeaturesAlert tiers={policyTiers} />}
                 <div
                     className={
                         isDisabled
@@ -134,7 +136,7 @@ export function EditPolicyForm({
     if (section === "rules") {
         return (
             <>
-                <PaidFeaturesAlert tiers={policyTiers} />
+                {showPaidAlert && <PaidFeaturesAlert tiers={policyTiers} />}
                 <div
                     className={
                         isDisabled
@@ -150,7 +152,7 @@ export function EditPolicyForm({
 
     return (
         <>
-            <PaidFeaturesAlert tiers={policyTiers} />
+            {showPaidAlert && <PaidFeaturesAlert tiers={policyTiers} />}
             <div
                 className={
                     isDisabled ? "pointer-events-none opacity-50" : undefined