jc21
1406e75c2c
Merge pull request #4254 from NginxProxyManager/postgres
...
Postgres
2024-12-24 17:24:05 +10:00
Jamie Curnow
ca3ee98c68
Postgres Support
...
- Combines #4086 and #4087 PRs
- Adds authentik in CI stack
2024-12-24 16:48:48 +10:00
Miguel Angel Nubla
7f9240dda7
Add custom configuration to dead_host.conf
2024-12-20 00:59:26 +01:00
jc21
61e2bde98f
Merge pull request #4184 from NginxProxyManager/dependabot/npm_and_yarn/backend/cross-spawn-7.0.6
...
Bump cross-spawn from 7.0.3 to 7.0.6 in /backend
2024-12-02 08:48:08 +10:00
jc21
53ed12bcf2
Merge pull request #4163 from Jasparigus/stream_error_correction
...
Fix Container Bootloop if Stream is used for http/https ports
2024-11-26 07:37:14 +10:00
dependabot[bot]
2075f98cad
Bump cross-spawn from 7.0.3 to 7.0.6 in /backend
...
Bumps [cross-spawn](https://github.com/moxystudio/node-cross-spawn ) from 7.0.3 to 7.0.6.
- [Changelog](https://github.com/moxystudio/node-cross-spawn/blob/master/CHANGELOG.md )
- [Commits](https://github.com/moxystudio/node-cross-spawn/compare/v7.0.3...v7.0.6 )
---
updated-dependencies:
- dependency-name: cross-spawn
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
2024-11-24 03:36:44 +00:00
tametsi
640a1eeb68
Return generic auth error to prevent user enumeration attacks
...
On invalid user/password error the error message "Invalid email or password" is returned.
Thereby, no information about the existence of the user is given.
2024-11-22 10:37:09 +01:00
Jasper Stubbe
87998a03ce
Fix bootloop if stream is used for http/https port
2024-11-14 11:39:48 -08:00
mitossoft-rd
f7d3ca0b07
Cleaning unused variable.
2024-10-28 15:18:54 +03:00
mitossoft-rd
a55de386e7
Fix URL format
2024-10-28 15:15:08 +03:00
mitossoft-rd
e9d4f5b827
Remove variable usage from proxy_pass directive to fix resolution issues
...
By using a static URL, the backend server can be accessed reliably, avoiding the common 404 errors or "no resolver defined" issues seen when variables are used.
2024-10-28 02:59:23 +03:00
jc21
eaf6335694
Merge pull request #4106 from dreik/develop
...
http2 directive migration
2024-10-25 08:53:08 +10:00
Chris Maffey
2e9a4f1aed
Update put.json
...
Password can be left blank for updates. Otherwise you have to reenter the password every time you save the auth list
2024-10-24 17:29:16 +13:00
Chris Maffey
dad8d0ca00
Update _access.conf
...
the pass_auth and satisfy_any properties and now boolean true/false, they do not == 1 so the switching in this template breaks
2024-10-24 14:04:17 +13:00
Sergey 'dreik' Kolesnik
d7e0558a35
http2 directive
...
to reduce warns in logs
2024-10-24 01:30:14 +03:00
Jamie Curnow
edbed1af90
Adds tests for settings endpoints
...
and reenables dns cert test
and fixes problems with schema
2024-10-17 08:48:47 +10:00
Nephiel
fa2c814fcb
Fix schema validation in Default Site
...
Should solve error `data/value must match exactly one schema in oneOf` when setting the Default Site to 404 or 444. #4074
2024-10-16 19:09:14 +00:00
Nephiel
d96a3987c0
Fix forward_scheme validation in Redirection Host
...
Should solve error `data/forward_scheme must be equal to one of the allowed values` when configuring a Redirection Host with scheme set to `auto`. #4074
2024-10-16 19:04:50 +00:00
Jamie Curnow
fe2d8895d6
Cypress test for http and dns cert provision
2024-10-16 14:53:57 +10:00
Jamie Curnow
5bdc05878f
Fix issues with certbot command when using LE_SERVER
2024-10-16 11:23:58 +10:00
Jamie Curnow
929ac3bd7c
Adds env var to set certbot acme server
...
this is required for test suite to use dns certbot request
without talking to live or staging letsencrypt servers or
production level dns providers. This is a backwards port
from the v3 branch and opens the door for a full certificate
cypress test
2024-10-16 11:06:29 +10:00
Jamie Curnow
351ba8dacd
More tests for certificates, fixed schema problems
2024-10-16 08:32:49 +10:00
jc21
78f3e7281b
Merge pull request #4015 from NginxProxyManager/dependabot/npm_and_yarn/backend/express-4.20.0
...
Bump express from 4.19.2 to 4.20.0 in /backend
2024-10-11 15:18:36 +10:00
jc21
0bfa6c9d4f
Merge pull request #3973 from ddshd/proxy-add-set
...
Add set directives for proxied paths to keep nginx from crashing if upstream is down
2024-10-11 14:08:39 +10:00
dependabot[bot]
f71de7474d
Bump express from 4.19.2 to 4.20.0 in /backend
...
Bumps [express](https://github.com/expressjs/express ) from 4.19.2 to 4.20.0.
- [Release notes](https://github.com/expressjs/express/releases )
- [Changelog](https://github.com/expressjs/express/blob/master/History.md )
- [Commits](https://github.com/expressjs/express/compare/4.19.2...4.20.0 )
---
updated-dependencies:
- dependency-name: express
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
2024-10-11 04:06:52 +00:00
jc21
02a7b43932
Merge pull request #3991 from nlynzaad/develop_mysql2
...
swap mysql library and knex client for mysql2
2024-10-11 14:05:26 +10:00
jc21
e0352ecc48
Merge pull request #4016 from NginxProxyManager/dependabot/npm_and_yarn/backend/body-parser-1.20.3
...
Bump body-parser from 1.20.2 to 1.20.3 in /backend
2024-10-11 13:27:14 +10:00
Jamie Curnow
c39d5433bc
Fix CVE-2024-46256 and CVE-2024-46257
...
- Schema validate against bad domain characters
- Integration test for CVE POC examples
- Cypress rewrite of plugins for file upload
2024-10-11 11:31:57 +10:00
Jamie Curnow
7c97516de6
Fix schema issue with cors
2024-10-10 16:31:19 +10:00
Jamie Curnow
4572b205c9
Openapi Schema improvements
...
- Return proper booleans in api responses
- Update jsonschemavalidation to latest draft
2024-10-10 15:53:11 +10:00
Jamie Curnow
dfe2588523
Refactor API Schema and validation
...
- /schema now returns full openapi/swagger schema
- That schema is used to validate incoming requests
- And used as a contract in future integration tests
- Moved route files up one level
- Fixed incorrect 404 reponses when getting objects
- Fixed saving new objects and passing jsonschemavalidation
2024-10-09 18:05:15 +10:00
dependabot[bot]
d69cb26157
Bump body-parser from 1.20.2 to 1.20.3 in /backend
...
Bumps [body-parser](https://github.com/expressjs/body-parser ) from 1.20.2 to 1.20.3.
- [Release notes](https://github.com/expressjs/body-parser/releases )
- [Changelog](https://github.com/expressjs/body-parser/blob/master/HISTORY.md )
- [Commits](https://github.com/expressjs/body-parser/compare/1.20.2...1.20.3 )
---
updated-dependencies:
- dependency-name: body-parser
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
2024-09-21 08:52:30 +00:00
Nico Lynzaad
48a9f5f9db
swop mysql library and knex client for mysql2
2024-09-10 23:08:02 +02:00
Dhrumil Shah
554d1ff2b6
Add set directives for proxies to keep from crashing if upstream is down
2024-09-04 00:07:43 -04:00
Jamie Curnow
99cce7e2b0
Fix command injection when passing bash commands into the dns provider configuration
...
- Use built in node functions to write the file
- And to delete the file
2024-07-01 16:08:01 +10:00
jc21
b33012705b
Merge pull request #3790 from DavidLievrouw/initial_admin
...
Read initial admin email and password from env vars
2024-07-01 15:22:15 +10:00
jc21
e948b60194
Merge pull request #3809 from NginxProxyManager/dependabot/npm_and_yarn/backend/braces-3.0.3
...
Bump braces from 3.0.2 to 3.0.3 in /backend
2024-07-01 15:20:48 +10:00
jc21
d1c23b6286
Merge pull request #3833 from NginxProxyManager/dependabot/npm_and_yarn/backend/glob-parent-5.1.2
...
Bump glob-parent from 5.1.1 to 5.1.2 in /backend
2024-07-01 15:19:39 +10:00
An Seongjin
001c77e686
Fix syntax that causes errors (generateKeys log)
2024-06-30 22:27:54 +09:00
dependabot[bot]
50aeae234f
Bump glob-parent from 5.1.1 to 5.1.2 in /backend
...
Bumps [glob-parent](https://github.com/gulpjs/glob-parent ) from 5.1.1 to 5.1.2.
- [Release notes](https://github.com/gulpjs/glob-parent/releases )
- [Changelog](https://github.com/gulpjs/glob-parent/blob/main/CHANGELOG.md )
- [Commits](https://github.com/gulpjs/glob-parent/compare/v5.1.1...v5.1.2 )
---
updated-dependencies:
- dependency-name: glob-parent
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
2024-06-27 18:24:09 +00:00
dependabot[bot]
6f9eed8a61
Bump braces from 3.0.2 to 3.0.3 in /backend
...
Bumps [braces](https://github.com/micromatch/braces ) from 3.0.2 to 3.0.3.
- [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md )
- [Commits](https://github.com/micromatch/braces/compare/3.0.2...3.0.3 )
---
updated-dependencies:
- dependency-name: braces
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
2024-06-16 10:41:32 +00:00
David Lievrouw
d66e4e03e6
#3790 Attempt to make ci happy.
2024-06-03 13:44:08 +02:00
David Lievrouw
1d19c29bb0
Read initial admin email and password from env vars.
2024-06-03 13:32:23 +02:00
jc21
3754a569ba
Merge pull request #3729 from clhey/custom_proxy
...
move advanced_config section of /app/templates/_location.conf to top of default config
2024-05-20 13:53:09 +10:00
jc21
35f0fe745d
Merge pull request #3569 from NginxProxyManager/dependabot/npm_and_yarn/backend/ip-2.0.1
...
Bump ip from 2.0.0 to 2.0.1 in /backend
2024-05-02 08:19:02 +10:00
clhey
280bac8b43
advanced config move to top of default confg
2024-04-28 18:18:38 +08:00
dependabot[bot]
5a761236c5
Bump express from 4.17.3 to 4.19.2 in /backend
...
Bumps [express](https://github.com/expressjs/express ) from 4.17.3 to 4.19.2.
- [Release notes](https://github.com/expressjs/express/releases )
- [Changelog](https://github.com/expressjs/express/blob/master/History.md )
- [Commits](https://github.com/expressjs/express/compare/4.17.3...4.19.2 )
---
updated-dependencies:
- dependency-name: express
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
2024-03-28 02:21:37 +00:00
jc21
63cd9ba08f
Merge pull request #3581 from davidindra/increase-max-domains-count
...
Fix: increase max number of domains to 100 (match with Let's Encrypt)
2024-02-27 11:36:04 +10:00
David Indra
10ece3548d
Fixing "the map directive is not allowed here" at the validation stage (see https://github.com/NginxProxyManager/nginx-proxy-manager/pull/3478 )
2024-02-27 00:42:58 +01:00
Tim
0503a6af75
Fix so that nginx config is loaded after configuration happens
...
M backend/internal/access-list.js
2024-02-26 10:04:25 +11:00