David Indra
1fb9a75a33
Fix: increase max number of domains to 100
2024-02-23 15:37:32 +01:00
dependabot[bot]
c55e47aacf
Bump ip from 2.0.0 to 2.0.1 in /backend
...
Bumps [ip](https://github.com/indutny/node-ip ) from 2.0.0 to 2.0.1.
- [Commits](https://github.com/indutny/node-ip/compare/v2.0.0...v2.0.1 )
---
updated-dependencies:
- dependency-name: ip
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
2024-02-20 21:49:54 +00:00
Jamie Curnow
da820db4e1
Fix startup hang due to unresolved promise
...
Affects instances where there are certs but none
of them are dns validated
2024-01-21 20:48:53 +10:00
Jamie Curnow
0353051436
Prevent installing same plugin over and over
2024-01-18 16:06:09 +10:00
Jamie Curnow
a3630a6286
Fix unused var
2024-01-18 15:17:27 +10:00
Jamie Curnow
10d9760242
Refactor certbot plugin install for setup
2024-01-18 15:13:16 +10:00
Jamie Curnow
db23c9a52f
Refactor certbot plugins install
...
- Added a script to install every single plugin, used in development and debugging
- Improved certbot plugin install commands
- Adjusted some version for plugins to install properly
- It's noted that some plugins require deps that do not match other plugins,
however these use cases should be extremely rare
2024-01-18 12:26:55 +10:00
Jamie Curnow
834fb1a361
Add missing args to certbot command, was causing failures in rovokation
2024-01-12 17:04:55 +10:00
jc21
1be87f48c1
Merge pull request #3392 from stevecrozz/auto-renew-uses-bulitin-renew
...
Make auto-renew use built-in renew function
2024-01-12 12:15:37 +10:00
Stephen Crosby
9c54d1b718
Provide the token model for certificate renewal
2024-01-10 20:08:36 -08:00
Stephen Crosby
f7d1c490b3
Run renews sequentially
2024-01-10 20:08:36 -08:00
Stephen Crosby
fe4bd9fed6
Make auto-renew use built-in renew function
2024-01-10 20:08:29 -08:00
Jamie Curnow
e69684919c
Use nginxproxymanager/nginx-full image base
...
which has been updated with bookworm, python 3.8, certbot 2.8.0 and node 20
Moved rootfs scripts as /bin is a symlink in bookworm
2024-01-10 12:59:51 +10:00
jc21
09d5e2c94f
Merge pull request #3360 from DarioViva42/hsts-only-with-https
...
only add hsts header with https.
2024-01-09 08:16:01 +10:00
jc21
965873adc5
Merge pull request #3377 from jlesage/http2-support-fix
...
Fixed issue where the HTTP2 support was always enabled in nginx config
2024-01-08 10:33:47 +10:00
jc21
5de95a8c90
Merge pull request #3382 from r3na/patch-1
...
fix: increasing maxOptions (amount of domains) to 30
2024-01-08 10:26:01 +10:00
Jocelyn Le Sage
388fff84f2
Fixes for the server reachability test.
...
- Do not apply HTTPs redirection for challenge used by the test.
- Set the `User-Agent` to avoid 403 answer from site24x7.com.
- Handle JSON parsing failure of the received body.
- Better handling of different error cases.
2023-12-19 17:22:33 -05:00
Renan Duarte
1975e4a151
fix: updating maxItems (schema/definitions) to 30
2023-12-12 12:45:35 +01:00
Jocelyn Le Sage
ccf9cce825
Fixed issue where the HTTP2 support was always enabled in nginx config, no matter what the user configured.
2023-12-09 11:16:37 -05:00
Dario Viva
289e438c59
only add hsts header with https.
...
fixes https://github.com/NginxProxyManager/nginx-proxy-manager/issues/1005
for more information look at: https://websistent.com/add-the-hsts-header-only-for-https-requests-nginx/
2023-12-02 03:26:34 +01:00
Devedse
6f8db95249
Added force renewal + --dns-duckdns-no-txt-restore
2023-08-24 13:21:01 +02:00
jc21
3333a32612
Merge pull request #2971 from wolviex/certbot-dnsplugin-user-site-fix
...
drop --user on pip install dns plugin
2023-07-31 07:21:18 +10:00
jc21
f38cb5b500
Merge pull request #2942 from wrouesnel/444_default_support
...
Add support for nginx 444 default response
2023-07-20 12:23:57 +10:00
jc21
a984a68065
Merge pull request #3051 from NginxProxyManager/dependabot/npm_and_yarn/backend/semver-5.7.2
...
Bump semver from 5.7.1 to 5.7.2 in /backend
2023-07-19 10:02:04 +10:00
dependabot[bot]
c8caaa56d9
Bump word-wrap from 1.2.3 to 1.2.4 in /backend
...
Bumps [word-wrap](https://github.com/jonschlinkert/word-wrap ) from 1.2.3 to 1.2.4.
- [Release notes](https://github.com/jonschlinkert/word-wrap/releases )
- [Commits](https://github.com/jonschlinkert/word-wrap/compare/1.2.3...1.2.4 )
---
updated-dependencies:
- dependency-name: word-wrap
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
2023-07-18 20:59:11 +00:00
dependabot[bot]
f458730d87
Bump semver from 5.7.1 to 5.7.2 in /backend
...
Bumps [semver](https://github.com/npm/node-semver ) from 5.7.1 to 5.7.2.
- [Release notes](https://github.com/npm/node-semver/releases )
- [Changelog](https://github.com/npm/node-semver/blob/v5.7.2/CHANGELOG.md )
- [Commits](https://github.com/npm/node-semver/compare/v5.7.1...v5.7.2 )
---
updated-dependencies:
- dependency-name: semver
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
2023-07-11 02:29:25 +00:00
Joe Manifold
f39e527680
drop --user on pip install dns plugin godaddy
...
Do not install dns_plugin into the user site because it will lack sys.path precedence to urllib3 in /opt/certbot/lib/python3.7/site-packages
2023-06-01 11:02:06 -07:00
Will Rouesnel
2dd4434ceb
Add support for nginx 444 default response
...
The default nginx 444 response drops the inbound connection without
sending any response to the client.
2023-05-22 11:59:50 +10:00
Jamie Curnow
05307aa253
Fix certbot plugins install when using PUID/PGID
2023-05-10 14:39:08 +10:00
Jamie Curnow
5d03ede100
Add test for creating a host
2023-03-30 12:44:28 +10:00
Jamie Curnow
124cb18e17
Fix renewing certs because of permission errors
2023-03-22 13:40:36 +10:00
Jamie Curnow
77eb618758
Fix pip installs running as non-root user
2023-03-22 09:41:59 +10:00
Jamie Curnow
4fdc80be01
Fix logical error with keys and mysql config
2023-03-21 17:59:27 +10:00
Jamie Curnow
c3469de61b
Linting fixes
2023-03-21 17:11:16 +10:00
Jamie Curnow
2a07445005
Refactor configuration
...
- No longer use config npm package
- Prefer config from env vars, though still has support for config file
- No longer writes a config file for database config
- Writes keys to a new file in /data folder
- Removes a lot of cruft and improves config understanding
2023-03-21 16:53:39 +10:00
Jamie Curnow
dad3e1da7c
Adds support to run processes as a user/group, defined
...
with PUID and PGID environment variables
- Detects if image is run with a user in docker command and fails if so
- Adds s6 prepare scripts for adding a 'npmuser'
- Split up and refactor the s6 prepare scripts
- Runs nginx and backend node as 'npmuser'
- Changes ownership of files required at startup
2023-03-20 16:56:52 +10:00
Jamie Curnow
fccbde1371
fix linting
2023-03-17 14:23:12 +10:00
Jamie Curnow
fec36834f7
- Updated objection, knex, liquidjs, signale and sqlite3 packages
...
- Changes for objection migration
- Moved common access template code to an include
- Fixed access rules configuration generation
2023-03-17 14:18:51 +10:00
Jamie Curnow
00aeef75b6
Refactor nginx config functions, some don't need to report errors, save error'd config files as .err for debugging later
2023-03-17 11:34:27 +10:00
Jamie Curnow
b30fcb50c8
Args weren't being passed to htpasswd command, fixes #2692
2023-03-17 08:49:18 +10:00
jc21
09d1d3744c
Merge pull request #2530 from jmerdich/jmerdich/fix-acl-edit-ssl
2023-03-08 21:08:52 +10:00
jc21
84e0b30f8d
Merge pull request #2411 from plantysnake/fix-certbot-plugins
...
Bugfix: Fix certbot plugin installation issues
2023-03-08 20:40:15 +10:00
jc21
30076a0e66
Merge pull request #2635 from skarlcf/security/CVE-2023-23596
...
Mitigate CVE-2023-23596
2023-03-08 08:25:38 +10:00
jc21
42bd39163a
Merge pull request #2638 from jlesage/case-insensitive-email-login
...
Make sure to lowercase email address entered by the user during login.
2023-03-08 08:25:09 +10:00
Kamil Skrzypinski
2ff66ee238
Add style required by linter
2023-03-07 17:15:03 +01:00
dependabot[bot]
7b48488c29
Bump express from 4.17.1 to 4.17.3 in /backend
...
Bumps [express](https://github.com/expressjs/express ) from 4.17.1 to 4.17.3.
- [Release notes](https://github.com/expressjs/express/releases )
- [Changelog](https://github.com/expressjs/express/blob/master/History.md )
- [Commits](https://github.com/expressjs/express/compare/4.17.1...4.17.3 )
---
updated-dependencies:
- dependency-name: express
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
2023-03-07 10:49:22 +00:00
jc21
edba369ae8
Merge pull request #2497 from NginxProxyManager/dependabot/npm_and_yarn/backend/jsonwebtoken-9.0.0
...
Bump jsonwebtoken from 8.5.1 to 9.0.0 in /backend
2023-03-07 20:48:45 +10:00
jc21
b77d916bdd
Merge pull request #2498 from NginxProxyManager/dependabot/npm_and_yarn/backend/liquidjs-10.0.0
...
Bump liquidjs from 9.15.0 to 10.0.0 in /backend
2023-03-07 20:48:36 +10:00
dependabot[bot]
e227f4177b
Bump minimist from 1.2.5 to 1.2.8 in /backend
...
Bumps [minimist](https://github.com/minimistjs/minimist ) from 1.2.5 to 1.2.8.
- [Release notes](https://github.com/minimistjs/minimist/releases )
- [Changelog](https://github.com/minimistjs/minimist/blob/main/CHANGELOG.md )
- [Commits](https://github.com/minimistjs/minimist/compare/v1.2.5...v1.2.8 )
---
updated-dependencies:
- dependency-name: minimist
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
2023-03-07 06:51:09 +00:00
dependabot[bot]
88fa7cdfff
Bump liquidjs from 9.15.0 to 10.0.0 in /backend
...
Bumps [liquidjs](https://github.com/harttle/liquidjs ) from 9.15.0 to 10.0.0.
- [Release notes](https://github.com/harttle/liquidjs/releases )
- [Changelog](https://github.com/harttle/liquidjs/blob/master/CHANGELOG.md )
- [Commits](https://github.com/harttle/liquidjs/compare/v9.15.0...v10.0.0 )
---
updated-dependencies:
- dependency-name: liquidjs
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
2023-03-07 06:51:08 +00:00
dependabot[bot]
cf6cc7dcc5
Bump jsonwebtoken from 8.5.1 to 9.0.0 in /backend
...
Bumps [jsonwebtoken](https://github.com/auth0/node-jsonwebtoken ) from 8.5.1 to 9.0.0.
- [Release notes](https://github.com/auth0/node-jsonwebtoken/releases )
- [Changelog](https://github.com/auth0/node-jsonwebtoken/blob/master/CHANGELOG.md )
- [Commits](https://github.com/auth0/node-jsonwebtoken/compare/v8.5.1...v9.0.0 )
---
updated-dependencies:
- dependency-name: jsonwebtoken
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
2023-03-07 06:50:55 +00:00
jc21
448c8a2dd5
Merge pull request #2523 from NginxProxyManager/dependabot/npm_and_yarn/backend/json5-2.2.3
...
Bump json5 from 2.1.3 to 2.2.3 in /backend
2023-03-07 16:50:37 +10:00
jc21
634cfe13f1
Merge pull request #2534 from NginxProxyManager/dependabot/npm_and_yarn/backend/knex-2.4.0
...
Bump knex from 0.20.15 to 2.4.0 in /backend
2023-03-07 16:50:30 +10:00
Jocelyn Le Sage
b0fd976b97
Make sure to lowercase email address entered by the user during login.
2023-02-26 22:24:58 -05:00
Kamil Skrzypinski
7fe7e94fbd
Mitigate CVE-2023-23596 by changing child_process.exec to child_process.execFile
2023-02-26 20:10:25 +01:00
dependabot[bot]
23326895b2
Bump http-cache-semantics from 4.1.0 to 4.1.1 in /backend
...
Bumps [http-cache-semantics](https://github.com/kornelski/http-cache-semantics ) from 4.1.0 to 4.1.1.
- [Release notes](https://github.com/kornelski/http-cache-semantics/releases )
- [Commits](https://github.com/kornelski/http-cache-semantics/compare/v4.1.0...v4.1.1 )
---
updated-dependencies:
- dependency-name: http-cache-semantics
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
2023-02-03 12:12:01 +00:00
dependabot[bot]
7ca3a9e7a6
Bump knex from 0.20.15 to 2.4.0 in /backend
...
Bumps [knex](https://github.com/knex/knex ) from 0.20.15 to 2.4.0.
- [Release notes](https://github.com/knex/knex/releases )
- [Changelog](https://github.com/knex/knex/blob/master/CHANGELOG.md )
- [Commits](https://github.com/knex/knex/compare/0.20.15...2.4.0 )
---
updated-dependencies:
- dependency-name: knex
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
2023-01-11 02:35:51 +00:00
Jake Merdich
c80d099193
ACL changes should not blow away cert config
...
When editing an access list, all affected sites get their config updated without certificates, functionally breaking https on those sites until they get a manual config change that rewrites the config properly. Properly fetch the certificate from the DB before `bulkGenerateConfigs` so it gets updated right.
I am not certain whether there are similar bugs in other places that use `bulkGenerateConfigs`.
Should fix #2254
2023-01-10 01:59:04 -05:00
dependabot[bot]
b69e493c54
Bump json5 from 2.1.3 to 2.2.3 in /backend
...
Bumps [json5](https://github.com/json5/json5 ) from 2.1.3 to 2.2.3.
- [Release notes](https://github.com/json5/json5/releases )
- [Changelog](https://github.com/json5/json5/blob/main/CHANGELOG.md )
- [Commits](https://github.com/json5/json5/compare/v2.1.3...v2.2.3 )
---
updated-dependencies:
- dependency-name: json5
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
2023-01-06 02:33:27 +00:00
plantysnake
8dee139810
Fix linter issues
2022-11-21 01:46:42 +03:00
plantysnake
6349cb6094
Fix cerbot plugin installation issues
2022-11-18 15:06:19 +03:00
Jamie Curnow
fd30cfe98b
Fix linting
2022-11-15 07:54:48 +10:00
Jamie Curnow
6f281fef42
Workaround for cloudflare plugin install ( #2381 )
2022-11-15 07:48:57 +10:00
jc21
b673ebe2ca
Merge pull request #2126 from NginxProxyManager/dependabot/npm_and_yarn/backend/async-3.2.4
...
Bump async from 3.2.1 to 3.2.4 in /backend
2022-08-23 20:44:21 +10:00
dependabot[bot]
e5966b54a8
Bump moment from 2.27.0 to 2.29.4 in /backend
...
Bumps [moment](https://github.com/moment/moment ) from 2.27.0 to 2.29.4.
- [Release notes](https://github.com/moment/moment/releases )
- [Changelog](https://github.com/moment/moment/blob/develop/CHANGELOG.md )
- [Commits](https://github.com/moment/moment/compare/2.27.0...2.29.4 )
---
updated-dependencies:
- dependency-name: moment
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
2022-07-07 16:43:24 +00:00
dependabot[bot]
1e5916db28
Bump async from 3.2.1 to 3.2.4 in /backend
...
Bumps [async](https://github.com/caolan/async ) from 3.2.1 to 3.2.4.
- [Release notes](https://github.com/caolan/async/releases )
- [Changelog](https://github.com/caolan/async/blob/master/CHANGELOG.md )
- [Commits](https://github.com/caolan/async/compare/v3.2.1...v3.2.4 )
---
updated-dependencies:
- dependency-name: async
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
2022-06-22 17:38:17 +00:00
Ivan Kristianto
366fcf0bed
Fix nginx/certificates search query
2022-02-12 12:46:06 +07:00
jc21
d7e0ae0fa0
Merge pull request #1701 from jc21/escape-credential-backslashes
...
Correctly escape backslashes in dns plugin credentials
2022-01-02 15:29:31 +10:00
jc21
29ee48530c
Merge pull request #1703 from luoweihua7/develop
...
fetch cloudflare ipv4/ipv6 fail #1405
2022-01-02 15:28:58 +10:00
chaptergy
c803ec7e26
Adds delay after reloading nginx before requesting ssl certificate using http challenge
2021-12-30 13:21:21 +01:00
Larify
7e67f33766
fetch cloudflare ipv4/ipv6 fail #1405
2021-12-30 11:50:21 +08:00
chaptergy
9dd5644183
Correctly escape backslashes in dns plugin credentials
2021-12-29 16:30:49 +01:00
jc21
adc5a2020a
Merge pull request #1666 from TobiasKneidl/patch-1
...
Update default.conf to follow the default site setting also for ipv6
2021-12-27 11:03:14 +10:00
Tobias Kneidl
bb422d4454
Update default.conf
2021-12-22 00:24:05 +01:00
jc21
d45f39aae3
Merge pull request #1538 from jc21/adds-http-challenge-test
...
Adds buttons to test availability of server from public internet
2021-11-10 09:15:26 +10:00
chaptergy
ddd538944a
Skip migration if setting does not exist
2021-11-09 14:03:39 +01:00
chaptergy
1f879f67a9
Reverts back to proxy_pass without variables
2021-11-09 13:57:39 +01:00
Chaptergy
ee89dedd0f
Adds migration to regenerate default host
2021-11-08 23:11:56 +01:00
jc21
432062e0f4
Merge pull request #1559 from jc21/variable-fix-custom-locations
...
Fixes custom location with capture groups
2021-11-08 12:29:43 +10:00
jc21
48e96c46d5
Merge pull request #1565 from jc21/removes-hsts-from-admin-ui
...
Removes HSTS from admin ui
2021-11-08 12:27:36 +10:00
jc21
25e9acf618
Merge pull request #1566 from jc21/cleans-dependencies
...
Removes unused dependencies
2021-11-08 12:27:04 +10:00
jc21
a517e80236
Merge pull request #1567 from jc21/removes-renew-delay
...
Removes random delay when renewing certificates with the renew now button
2021-11-08 12:26:34 +10:00
Julian Reinhardt
cf4d1f73fa
Uses letsencrypt config file everywhere
2021-11-06 22:31:13 +01:00
Julian Reinhardt
c203d1a0d8
Requires ~() in location to remove $request_uri and removes $request_uri if it is just a slash
2021-11-06 13:38:02 +01:00
Julian Reinhardt
5f29f6b039
Removes random delay when renewing certificates with the renew now button
2021-11-05 14:20:12 +01:00
Julian Reinhardt
f75b5b867b
Fixes formatting
2021-11-05 14:01:50 +01:00
Julian Reinhardt
67463ca136
Removes unused dependencies
2021-11-05 13:59:19 +01:00
Julian Reinhardt
8db541f37f
Removes HSTS from admin ui
2021-11-05 00:09:05 +01:00
Julian Reinhardt
38ec0f9f95
Adds logs to backend when testing http challenge
2021-11-04 11:16:23 +01:00
Julian Reinhardt
3d80759a21
Renames the $upstream variables and does not append $request_ui if capture group exists in location
2021-11-04 10:08:15 +01:00
Julian Reinhardt
ffe3db8c08
Falls back to SQLite if no environment variables are provided
2021-11-02 12:22:39 +01:00
Julian Reinhardt
9efe6cfb39
Minor fixes
2021-10-31 13:41:29 +01:00
Julian Reinhardt
c86a1a50bd
Fixes formatting
2021-10-31 00:28:43 +02:00
Julian Reinhardt
c55476b196
Adds buttons to test availability of server from public internet
2021-10-31 00:19:18 +02:00
Julian Reinhardt
bbde7a108a
Use variable with full uri in proxy pass
2021-10-25 14:48:22 +02:00
Julian Reinhardt
87731a8b5c
Revert "Utilise variable for custom locations proxy_pass"
...
This reverts commit 6c1ae77a2a
.
2021-10-25 14:27:37 +02:00
chaptergy
4e3c7749af
Removes sorting of domain names when creating a certificate
2021-10-12 16:18:11 +02:00
jc21
281906c0b5
Merge pull request #1476 from jc21/dependabot/npm_and_yarn/backend/objection-2.2.16
...
Bump objection from 2.2.2 to 2.2.16 in /backend
2021-10-12 10:36:34 +10:00
dependabot[bot]
6fa81b179b
Bump objection from 2.2.2 to 2.2.16 in /backend
...
Bumps [objection](https://github.com/vincit/objection.js ) from 2.2.2 to 2.2.16.
- [Release notes](https://github.com/vincit/objection.js/releases )
- [Commits](https://github.com/vincit/objection.js/commits/2.2.16 )
---
updated-dependencies:
- dependency-name: objection
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
2021-10-11 01:53:33 +00:00
chaptergy
6d8c4218f1
Replaces fixed certbot plugin version with optional version requirements
2021-10-07 17:13:48 +02:00