Commit graph

407 commits

Author SHA1 Message Date
Zoey
baeef95a5f
alpine&dep updates/changing must-staple&acme server now also effect renewals/change default mime types to download 2024-12-14 18:13:49 +01:00
renovate[bot]
2bebb45baa
alpine update/dep updates/change default mime types to download instead of plain text
Signed-off-by: Zoey <zoey@z0ey.de>
2024-12-14 11:12:01 +01:00
Zoey
94288054d2
Merge remote-tracking branch 'upstream/develop' into develop 2024-11-25 23:39:34 +01:00
Zoey
c975e9bd7f
fix certbot args 2024-11-25 23:01:47 +01:00
jc21
53ed12bcf2
Merge pull request #4163 from Jasparigus/stream_error_correction
Fix Container Bootloop if Stream is used for http/https ports
2024-11-26 07:37:14 +10:00
Zoey
071692ab54 dep updates/fix updating streams/close #965/env option to disable must-taple
Signed-off-by: Zoey <zoey@z0ey.de>

close #965 by merging https://github.com/NginxProxyManager/nginx-proxy-manager/pull/4166/files and adding multi lang support

Co-Authored-By: Remco Kersten <55450744+kerstenremco@users.noreply.github.com>
2024-11-22 11:50:55 +01:00
tametsi
640a1eeb68
Return generic auth error to prevent user enumeration attacks
On invalid user/password error the error message "Invalid email or password" is returned.
Thereby, no information about the existence of the user is given.
2024-11-22 10:37:09 +01:00
Jasper Stubbe
87998a03ce Fix bootloop if stream is used for http/https port 2024-11-14 11:39:48 -08:00
Zoey
8846543007
lang fix/dep updates/improve goaccess
Signed-off-by: Zoey <zoey@z0ey.de>
2024-11-02 18:44:45 +01:00
Zoey
2de4d646f3
Merge remote-tracking branch 'upstream/develop' into develop 2024-10-30 08:08:54 +01:00
mitossoft-rd
f7d3ca0b07
Cleaning unused variable. 2024-10-28 15:18:54 +03:00
mitossoft-rd
a55de386e7
Fix URL format 2024-10-28 15:15:08 +03:00
mitossoft-rd
e9d4f5b827
Remove variable usage from proxy_pass directive to fix resolution issues
By using a static URL, the backend server can be accessed reliably, avoiding the common 404 errors or "no resolver defined" issues seen when variables are used.
2024-10-28 02:59:23 +03:00
Zoey
62b60827d3 fix https://github.com/ZoeyVid/NPMplus/discussions/1185#discussioncomment-11045890
Signed-off-by: Zoey <zoey@z0ey.de>
2024-10-25 08:30:18 +02:00
jc21
eaf6335694
Merge pull request #4106 from dreik/develop
http2 directive migration
2024-10-25 08:53:08 +10:00
Chris Maffey
2e9a4f1aed
Update put.json
Password can be left blank for updates.  Otherwise you have to reenter the password every time you save the auth list
2024-10-24 17:29:16 +13:00
Chris Maffey
dad8d0ca00
Update _access.conf
the pass_auth and satisfy_any properties and now boolean true/false, they do not == 1 so the switching in this template breaks
2024-10-24 14:04:17 +13:00
Sergey 'dreik' Kolesnik
d7e0558a35 http2 directive
to reduce warns in logs
2024-10-24 01:30:14 +03:00
renovate[bot]
a9277abcdf
doc and dep updates/improve ocsp script run/fix update from old versions/remove useless headers
Signed-off-by: Zoey <zoey@z0ey.de>
2024-10-23 23:32:52 +02:00
Zoey
90c3ec7335 fix nginx start/dep updates/merge upstream
Signed-off-by: Zoey <zoey@z0ey.de>
2024-10-22 11:15:16 +02:00
Zoey
927d5ca5cb
changes on custom acme server/change compression mime types
Signed-off-by: Zoey <zoey@z0ey.de>
2024-10-20 19:48:53 +02:00
Zoey
7c92e832cf Merge remote-tracking branch 'upstream/develop' into develop 2024-10-19 18:49:48 +02:00
Zoey
32fd41d82b prepare certbot changes/merge upstream 2024-10-19 18:46:46 +02:00
Zoey
1dbf57c2ba Merge remote-tracking branch 'upstream/develop' into develop 2024-10-19 18:18:26 +02:00
Jamie Curnow
edbed1af90
Adds tests for settings endpoints
and reenables dns cert test
and fixes problems with schema
2024-10-17 08:48:47 +10:00
Nephiel
fa2c814fcb
Fix schema validation in Default Site
Should solve error `data/value must match exactly one schema in oneOf` when setting the Default Site to 404 or 444. #4074
2024-10-16 19:09:14 +00:00
Nephiel
d96a3987c0
Fix forward_scheme validation in Redirection Host
Should solve error `data/forward_scheme must be equal to one of the allowed values` when configuring a Redirection Host with scheme set to `auto`. #4074
2024-10-16 19:04:50 +00:00
Zoey
a0e583dec3 merge upstream 2024-10-16 10:38:20 +02:00
Jamie Curnow
fe2d8895d6
Cypress test for http and dns cert provision 2024-10-16 14:53:57 +10:00
Jamie Curnow
5bdc05878f
Fix issues with certbot command when using LE_SERVER 2024-10-16 11:23:58 +10:00
Jamie Curnow
929ac3bd7c
Adds env var to set certbot acme server
this is required for test suite to use dns certbot request
without talking to live or staging letsencrypt servers or
production level dns providers. This is a backwards port
from the v3 branch and opens the door for a full certificate
cypress test
2024-10-16 11:06:29 +10:00
Jamie Curnow
351ba8dacd
More tests for certificates, fixed schema problems 2024-10-16 08:32:49 +10:00
Zoey
13f3f0d2f0
merge upstream
Signed-off-by: Zoey <zoey@z0ey.de>
2024-10-15 06:51:17 +02:00
Zoey
19c5fe2a87 Merge remote-tracking branch 'upstream/develop' into develop 2024-10-11 12:03:31 +02:00
renovate[bot]
131f0b9d09 fix(deps): update dependency @babel/core to v7.25.8
fix(deps): update dependency @apidevtools/json-schema-ref-parser to v11.7.2
2024-10-11 10:31:09 +02:00
jc21
78f3e7281b
Merge pull request #4015 from NginxProxyManager/dependabot/npm_and_yarn/backend/express-4.20.0
Bump express from 4.19.2 to 4.20.0 in /backend
2024-10-11 15:18:36 +10:00
jc21
0bfa6c9d4f
Merge pull request #3973 from ddshd/proxy-add-set
Add set directives for proxied paths to keep nginx from crashing if upstream is down
2024-10-11 14:08:39 +10:00
dependabot[bot]
f71de7474d
Bump express from 4.19.2 to 4.20.0 in /backend
Bumps [express](https://github.com/expressjs/express) from 4.19.2 to 4.20.0.
- [Release notes](https://github.com/expressjs/express/releases)
- [Changelog](https://github.com/expressjs/express/blob/master/History.md)
- [Commits](https://github.com/expressjs/express/compare/4.19.2...4.20.0)

---
updated-dependencies:
- dependency-name: express
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-10-11 04:06:52 +00:00
jc21
02a7b43932
Merge pull request #3991 from nlynzaad/develop_mysql2
swap mysql library and knex client for mysql2
2024-10-11 14:05:26 +10:00
jc21
e0352ecc48
Merge pull request #4016 from NginxProxyManager/dependabot/npm_and_yarn/backend/body-parser-1.20.3
Bump body-parser from 1.20.2 to 1.20.3 in /backend
2024-10-11 13:27:14 +10:00
Jamie Curnow
c39d5433bc
Fix CVE-2024-46256 and CVE-2024-46257
- Schema validate against bad domain characters
- Integration test for CVE POC examples
- Cypress rewrite of plugins for file upload
2024-10-11 11:31:57 +10:00
Jamie Curnow
7c97516de6
Fix schema issue with cors 2024-10-10 16:31:19 +10:00
Jamie Curnow
4572b205c9
Openapi Schema improvements
- Return proper booleans in api responses
- Update jsonschemavalidation to latest draft
2024-10-10 15:53:11 +10:00
Zoey
fa6ee87c40
Update certbot.js
Signed-off-by: Zoey <zoey@z0ey.de>
2024-10-09 20:15:10 +02:00
renovate[bot]
a14d394a07 chore(deps): update dependency globals to v15.11.0 2024-10-09 10:49:48 +02:00
Jamie Curnow
dfe2588523
Refactor API Schema and validation
- /schema now returns full openapi/swagger schema
- That schema is used to validate incoming requests
- And used as a contract in future integration tests
- Moved route files up one level
- Fixed incorrect 404 reponses when getting objects
- Fixed saving new objects and passing jsonschemavalidation
2024-10-09 18:05:15 +10:00
renovate[bot]
b688c92e9a fix(deps): update dependency express to v4.21.1 2024-10-09 06:31:09 +02:00
renovate[bot]
65854a3e8c chore(deps): update eslint monorepo to v9.12.0 2024-10-05 07:47:59 +02:00
renovate[bot]
bb09562f89
fixes/dep updates/improved tls
Signed-off-by: Zoey <zoey@z0ey.de>
2024-10-02 23:17:42 +02:00
dependabot[bot]
d69cb26157
Bump body-parser from 1.20.2 to 1.20.3 in /backend
Bumps [body-parser](https://github.com/expressjs/body-parser) from 1.20.2 to 1.20.3.
- [Release notes](https://github.com/expressjs/body-parser/releases)
- [Changelog](https://github.com/expressjs/body-parser/blob/master/HISTORY.md)
- [Commits](https://github.com/expressjs/body-parser/compare/1.20.2...1.20.3)

---
updated-dependencies:
- dependency-name: body-parser
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-09-21 08:52:30 +00:00