295 Commits

Author	SHA1	Message	Date
jc21	53ed12bcf2	Merge pull request #4163 from Jasparigus/stream_error_correction ... Fix Container Bootloop if Stream is used for http/https ports	2024-11-26 07:37:14 +10:00
tametsi	640a1eeb68	Return generic auth error to prevent user enumeration attacks ... On invalid user/password error the error message "Invalid email or password" is returned. Thereby, no information about the existence of the user is given.	2024-11-22 10:37:09 +01:00
Jasper Stubbe	87998a03ce	Fix bootloop if stream is used for http/https port	2024-11-14 11:39:48 -08:00
mitossoft-rd	f7d3ca0b07	Cleaning unused variable.	2024-10-28 15:18:54 +03:00
mitossoft-rd	a55de386e7	Fix URL format	2024-10-28 15:15:08 +03:00
mitossoft-rd	e9d4f5b827	Remove variable usage from proxy_pass directive to fix resolution issues ... By using a static URL, the backend server can be accessed reliably, avoiding the common 404 errors or "no resolver defined" issues seen when variables are used.	2024-10-28 02:59:23 +03:00
jc21	eaf6335694	Merge pull request #4106 from dreik/develop ... http2 directive migration	2024-10-25 08:53:08 +10:00
Chris Maffey	2e9a4f1aed	Update put.json ... Password can be left blank for updates. Otherwise you have to reenter the password every time you save the auth list	2024-10-24 17:29:16 +13:00
Chris Maffey	dad8d0ca00	Update _access.conf ... the pass_auth and satisfy_any properties and now boolean true/false, they do not == 1 so the switching in this template breaks	2024-10-24 14:04:17 +13:00
Sergey 'dreik' Kolesnik	d7e0558a35	http2 directive ... to reduce warns in logs	2024-10-24 01:30:14 +03:00
Jamie Curnow	edbed1af90	Adds tests for settings endpoints ... and reenables dns cert test and fixes problems with schema	2024-10-17 08:48:47 +10:00
Nephiel	fa2c814fcb	Fix schema validation in Default Site ... Should solve error `data/value must match exactly one schema in oneOf` when setting the Default Site to 404 or 444. #4074	2024-10-16 19:09:14 +00:00
Nephiel	d96a3987c0	Fix forward_scheme validation in Redirection Host ... Should solve error `data/forward_scheme must be equal to one of the allowed values` when configuring a Redirection Host with scheme set to `auto`. #4074	2024-10-16 19:04:50 +00:00
Jamie Curnow	fe2d8895d6	Cypress test for http and dns cert provision	2024-10-16 14:53:57 +10:00
Jamie Curnow	5bdc05878f	Fix issues with certbot command when using LE_SERVER	2024-10-16 11:23:58 +10:00
Jamie Curnow	929ac3bd7c	Adds env var to set certbot acme server ... this is required for test suite to use dns certbot request without talking to live or staging letsencrypt servers or production level dns providers. This is a backwards port from the v3 branch and opens the door for a full certificate cypress test	2024-10-16 11:06:29 +10:00
Jamie Curnow	351ba8dacd	More tests for certificates, fixed schema problems	2024-10-16 08:32:49 +10:00
jc21	78f3e7281b	Merge pull request #4015 from NginxProxyManager/dependabot/npm_and_yarn/backend/express-4.20.0 ... Bump express from 4.19.2 to 4.20.0 in /backend	2024-10-11 15:18:36 +10:00
jc21	0bfa6c9d4f	Merge pull request #3973 from ddshd/proxy-add-set ... Add set directives for proxied paths to keep nginx from crashing if upstream is down	2024-10-11 14:08:39 +10:00
dependabot[bot]	f71de7474d	Bump express from 4.19.2 to 4.20.0 in /backend ... Bumps [express](https://github.com/expressjs/express) from 4.19.2 to 4.20.0. - [Release notes](https://github.com/expressjs/express/releases) - [Changelog](https://github.com/expressjs/express/blob/master/History.md) - [Commits](https://github.com/expressjs/express/compare/4.19.2...4.20.0) --- updated-dependencies: - dependency-name: express dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>	2024-10-11 04:06:52 +00:00
jc21	02a7b43932	Merge pull request #3991 from nlynzaad/develop_mysql2 ... swap mysql library and knex client for mysql2	2024-10-11 14:05:26 +10:00
jc21	e0352ecc48	Merge pull request #4016 from NginxProxyManager/dependabot/npm_and_yarn/backend/body-parser-1.20.3 ... Bump body-parser from 1.20.2 to 1.20.3 in /backend	2024-10-11 13:27:14 +10:00
Jamie Curnow	c39d5433bc	Fix CVE-2024-46256 and CVE-2024-46257 ... - Schema validate against bad domain characters - Integration test for CVE POC examples - Cypress rewrite of plugins for file upload	2024-10-11 11:31:57 +10:00
Jamie Curnow	7c97516de6	Fix schema issue with cors	2024-10-10 16:31:19 +10:00
Jamie Curnow	4572b205c9	Openapi Schema improvements ... - Return proper booleans in api responses - Update jsonschemavalidation to latest draft	2024-10-10 15:53:11 +10:00
Jamie Curnow	dfe2588523	Refactor API Schema and validation ... - /schema now returns full openapi/swagger schema - That schema is used to validate incoming requests - And used as a contract in future integration tests - Moved route files up one level - Fixed incorrect 404 reponses when getting objects - Fixed saving new objects and passing jsonschemavalidation	2024-10-09 18:05:15 +10:00
dependabot[bot]	d69cb26157	Bump body-parser from 1.20.2 to 1.20.3 in /backend ... Bumps [body-parser](https://github.com/expressjs/body-parser) from 1.20.2 to 1.20.3. - [Release notes](https://github.com/expressjs/body-parser/releases) - [Changelog](https://github.com/expressjs/body-parser/blob/master/HISTORY.md) - [Commits](https://github.com/expressjs/body-parser/compare/1.20.2...1.20.3) --- updated-dependencies: - dependency-name: body-parser dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>	2024-09-21 08:52:30 +00:00
Nico Lynzaad	48a9f5f9db	swop mysql library and knex client for mysql2	2024-09-10 23:08:02 +02:00
Dhrumil Shah	554d1ff2b6	Add set directives for proxies to keep from crashing if upstream is down	2024-09-04 00:07:43 -04:00
Jamie Curnow	99cce7e2b0	Fix command injection when passing bash commands into the dns provider configuration ... - Use built in node functions to write the file - And to delete the file	2024-07-01 16:08:01 +10:00
jc21	b33012705b	Merge pull request #3790 from DavidLievrouw/initial_admin ... Read initial admin email and password from env vars	2024-07-01 15:22:15 +10:00
jc21	e948b60194	Merge pull request #3809 from NginxProxyManager/dependabot/npm_and_yarn/backend/braces-3.0.3 ... Bump braces from 3.0.2 to 3.0.3 in /backend	2024-07-01 15:20:48 +10:00
jc21	d1c23b6286	Merge pull request #3833 from NginxProxyManager/dependabot/npm_and_yarn/backend/glob-parent-5.1.2 ... Bump glob-parent from 5.1.1 to 5.1.2 in /backend	2024-07-01 15:19:39 +10:00
An Seongjin	001c77e686	Fix syntax that causes errors (generateKeys log)	2024-06-30 22:27:54 +09:00
dependabot[bot]	50aeae234f	Bump glob-parent from 5.1.1 to 5.1.2 in /backend ... Bumps [glob-parent](https://github.com/gulpjs/glob-parent) from 5.1.1 to 5.1.2. - [Release notes](https://github.com/gulpjs/glob-parent/releases) - [Changelog](https://github.com/gulpjs/glob-parent/blob/main/CHANGELOG.md) - [Commits](https://github.com/gulpjs/glob-parent/compare/v5.1.1...v5.1.2) --- updated-dependencies: - dependency-name: glob-parent dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>	2024-06-27 18:24:09 +00:00
dependabot[bot]	6f9eed8a61	Bump braces from 3.0.2 to 3.0.3 in /backend ... Bumps [braces](https://github.com/micromatch/braces) from 3.0.2 to 3.0.3. - [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md) - [Commits](https://github.com/micromatch/braces/compare/3.0.2...3.0.3) --- updated-dependencies: - dependency-name: braces dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>	2024-06-16 10:41:32 +00:00
David Lievrouw	d66e4e03e6	#3790 Attempt to make ci happy.	2024-06-03 13:44:08 +02:00
David Lievrouw	1d19c29bb0	Read initial admin email and password from env vars.	2024-06-03 13:32:23 +02:00
jc21	3754a569ba	Merge pull request #3729 from clhey/custom_proxy ... move advanced_config section of /app/templates/_location.conf to top of default config	2024-05-20 13:53:09 +10:00
jc21	35f0fe745d	Merge pull request #3569 from NginxProxyManager/dependabot/npm_and_yarn/backend/ip-2.0.1 ... Bump ip from 2.0.0 to 2.0.1 in /backend	2024-05-02 08:19:02 +10:00
clhey	280bac8b43	advanced config move to top of default confg	2024-04-28 18:18:38 +08:00
dependabot[bot]	5a761236c5	Bump express from 4.17.3 to 4.19.2 in /backend ... Bumps [express](https://github.com/expressjs/express) from 4.17.3 to 4.19.2. - [Release notes](https://github.com/expressjs/express/releases) - [Changelog](https://github.com/expressjs/express/blob/master/History.md) - [Commits](https://github.com/expressjs/express/compare/4.17.3...4.19.2) --- updated-dependencies: - dependency-name: express dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>	2024-03-28 02:21:37 +00:00
jc21	63cd9ba08f	Merge pull request #3581 from davidindra/increase-max-domains-count ... Fix: increase max number of domains to 100 (match with Let's Encrypt)	2024-02-27 11:36:04 +10:00
David Indra	10ece3548d	Fixing "the map directive is not allowed here" at the validation stage (see https://github.com/NginxProxyManager/nginx-proxy-manager/pull/3478)	2024-02-27 00:42:58 +01:00
Tim	0503a6af75	Fix so that nginx config is loaded after configuration happens ... M backend/internal/access-list.js	2024-02-26 10:04:25 +11:00
David Indra	1fb9a75a33	Fix: increase max number of domains to 100	2024-02-23 15:37:32 +01:00
dependabot[bot]	c55e47aacf	Bump ip from 2.0.0 to 2.0.1 in /backend ... Bumps [ip](https://github.com/indutny/node-ip) from 2.0.0 to 2.0.1. - [Commits](https://github.com/indutny/node-ip/compare/v2.0.0...v2.0.1) --- updated-dependencies: - dependency-name: ip dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>	2024-02-20 21:49:54 +00:00
Jamie Curnow	da820db4e1	Fix startup hang due to unresolved promise ... Affects instances where there are certs but none of them are dns validated	2024-01-21 20:48:53 +10:00
Jamie Curnow	0353051436	Prevent installing same plugin over and over	2024-01-18 16:06:09 +10:00
Jamie Curnow	a3630a6286	Fix unused var	2024-01-18 15:17:27 +10:00