Commit graph

407 commits

Author SHA1 Message Date
Nico Lynzaad
48a9f5f9db swop mysql library and knex client for mysql2 2024-09-10 23:08:02 +02:00
Dhrumil Shah
554d1ff2b6
Add set directives for proxies to keep from crashing if upstream is down 2024-09-04 00:07:43 -04:00
renovate[bot]
a1f44c57d1
dep updates/fix healthcheck
Signed-off-by: Zoey <zoey@z0ey.de>
2024-08-15 18:29:44 +02:00
renovate[bot]
dbb0883dd7
dep updates
Signed-off-by: Zoey <zoey@z0ey.de>
2024-08-03 16:32:17 +02:00
Zoey
b9c4de0422
merge upstream 2024-07-11 16:06:32 +02:00
Zoey
603164791b
Merge remote-tracking branch 'upstream/develop' into develop 2024-07-11 16:03:39 +02:00
renovate[bot]
a039e7165d
dep updates/close #945 and #940/switch to better-sqlite3/allow to disable nginxbeautifier
Signed-off-by: Zoey <zoey@z0ey.de>
2024-07-11 15:44:23 +02:00
Jamie Curnow
99cce7e2b0
Fix command injection when passing bash commands into the dns provider configuration
- Use built in node functions to write the file
- And to delete the file
2024-07-01 16:08:01 +10:00
jc21
b33012705b
Merge pull request #3790 from DavidLievrouw/initial_admin
Read initial admin email and password from env vars
2024-07-01 15:22:15 +10:00
jc21
e948b60194
Merge pull request #3809 from NginxProxyManager/dependabot/npm_and_yarn/backend/braces-3.0.3
Bump braces from 3.0.2 to 3.0.3 in /backend
2024-07-01 15:20:48 +10:00
jc21
d1c23b6286
Merge pull request #3833 from NginxProxyManager/dependabot/npm_and_yarn/backend/glob-parent-5.1.2
Bump glob-parent from 5.1.1 to 5.1.2 in /backend
2024-07-01 15:19:39 +10:00
An Seongjin
001c77e686
Fix syntax that causes errors (generateKeys log) 2024-06-30 22:27:54 +09:00
renovate[bot]
0b388e0cf8
dep update/update prebuilt certbot
Signed-off-by: Zoey <zoey@z0ey.de>
2024-06-29 09:17:25 +02:00
dependabot[bot]
50aeae234f
Bump glob-parent from 5.1.1 to 5.1.2 in /backend
Bumps [glob-parent](https://github.com/gulpjs/glob-parent) from 5.1.1 to 5.1.2.
- [Release notes](https://github.com/gulpjs/glob-parent/releases)
- [Changelog](https://github.com/gulpjs/glob-parent/blob/main/CHANGELOG.md)
- [Commits](https://github.com/gulpjs/glob-parent/compare/v5.1.1...v5.1.2)

---
updated-dependencies:
- dependency-name: glob-parent
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-06-27 18:24:09 +00:00
Zoey
22fa2f04ab
dep updates/alpine 3.20.1
Signed-off-by: Zoey <zoey@z0ey.de>
2024-06-22 00:55:42 +02:00
dependabot[bot]
6f9eed8a61
Bump braces from 3.0.2 to 3.0.3 in /backend
Bumps [braces](https://github.com/micromatch/braces) from 3.0.2 to 3.0.3.
- [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md)
- [Commits](https://github.com/micromatch/braces/compare/3.0.2...3.0.3)

---
updated-dependencies:
- dependency-name: braces
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-06-16 10:41:32 +00:00
renovate[bot]
132623891a
dep updates/see description
little php design preview (dead host/default page/fancyindex)
improved "exploit blocking"
fancyindex now default off
block access to .git folders/files
change NGINX_404_REDIRECT default to false
2024-06-09 15:20:13 +02:00
renovate[bot]
941950ebbf
dep updates 2024-06-04 23:13:02 +02:00
David Lievrouw
d66e4e03e6 #3790 Attempt to make ci happy. 2024-06-03 13:44:08 +02:00
David Lievrouw
1d19c29bb0 Read initial admin email and password from env vars. 2024-06-03 13:32:23 +02:00
Zoey
55e6d9a82c
close #861
Signed-off-by: Zoey <zoey@z0ey.de>
2024-06-02 23:44:17 +02:00
renovate[bot]
71e8993503
disable watchtower/dep updates
Signed-off-by: Zoey <zoey@z0ey.de>
2024-06-02 11:15:58 +02:00
renovate[bot]
68768e256b
close #853 by fixing openssl regex/dep updates 2024-06-01 00:41:01 +02:00
Zoey
fa739b9e19
merge upstream 2024-05-23 15:30:23 +02:00
Zoey
daa0118905
dep updates
Signed-off-by: Zoey <zoey@z0ey.de>
2024-05-23 15:14:03 +02:00
jc21
3754a569ba
Merge pull request #3729 from clhey/custom_proxy
move advanced_config section of /app/templates/_location.conf to top of default config
2024-05-20 13:53:09 +10:00
renovate[bot]
7632bdcccc
dep updates 2024-05-12 16:38:06 +02:00
renovate[bot]
e0986c2bec
dep updates/use lts node/close https://github.com/ZoeyVid/NPMplus/discussions/800
Signed-off-by: Zoey <zoey@z0ey.de>
2024-05-02 22:32:35 +02:00
jc21
35f0fe745d
Merge pull request #3569 from NginxProxyManager/dependabot/npm_and_yarn/backend/ip-2.0.1
Bump ip from 2.0.0 to 2.0.1 in /backend
2024-05-02 08:19:02 +10:00
clhey
280bac8b43 advanced config move to top of default confg 2024-04-28 18:18:38 +08:00
renovate[bot]
5e9619beef
close #782/update coreruleset/switch to freenginx/dep updates/remove aws cloudfront ips/block apache files
Signed-off-by: Zoey <zoey@z0ey.de>
2024-04-27 11:04:44 +02:00
Zoey
906d7ce04a
update nginx/dep updates/fix eslint/change line endings
Signed-off-by: Zoey <zoey@z0ey.de>
2024-04-19 11:42:01 +02:00
dependabot[bot]
5a761236c5
Bump express from 4.17.3 to 4.19.2 in /backend
Bumps [express](https://github.com/expressjs/express) from 4.17.3 to 4.19.2.
- [Release notes](https://github.com/expressjs/express/releases)
- [Changelog](https://github.com/expressjs/express/blob/master/History.md)
- [Commits](https://github.com/expressjs/express/compare/4.17.3...4.19.2)

---
updated-dependencies:
- dependency-name: express
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-03-28 02:21:37 +00:00
renovate[bot]
d724439605
dep updates/close #656 2024-03-21 17:09:27 +01:00
renovate[bot]
dd038b690a
dep updates/try to close #704
Signed-off-by: Zoey <zoey@z0ey.de>
2024-03-20 18:24:22 +01:00
renovate[bot]
9d0574edb7
dep updates/fix #696 2024-03-11 22:43:29 +01:00
Zoey2936
727e776a47
small dep updates/fix logrotate 2024-03-09 08:37:37 +01:00
renovate[bot]
9e39ddb26b
dep updates/close #674 and parts of #673
Signed-off-by: Zoey <zoey@z0ey.de>
2024-03-03 20:02:44 +01:00
Zoey
714e7846f8
Merge remote-tracking branch 'upstream/develop' into develop 2024-02-27 22:43:55 +01:00
renovate[bot]
b31eeb30c9
dep updates
Update dependency archiver to v6.0.2
Update dependency nodemon to v3.1.0
Update dependency eslint to v8.57.0
2024-02-27 22:36:36 +01:00
jc21
63cd9ba08f
Merge pull request #3581 from davidindra/increase-max-domains-count
Fix: increase max number of domains to 100 (match with Let's Encrypt)
2024-02-27 11:36:04 +10:00
David Indra
10ece3548d Fixing "the map directive is not allowed here" at the validation stage (see https://github.com/NginxProxyManager/nginx-proxy-manager/pull/3478) 2024-02-27 00:42:58 +01:00
Tim
0503a6af75 Fix so that nginx config is loaded after configuration happens
M	backend/internal/access-list.js
2024-02-26 10:04:25 +11:00
David Indra
1fb9a75a33 Fix: increase max number of domains to 100 2024-02-23 15:37:32 +01:00
dependabot[bot]
c55e47aacf
Bump ip from 2.0.0 to 2.0.1 in /backend
Bumps [ip](https://github.com/indutny/node-ip) from 2.0.0 to 2.0.1.
- [Commits](https://github.com/indutny/node-ip/compare/v2.0.0...v2.0.1)

---
updated-dependencies:
- dependency-name: ip
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-02-20 21:49:54 +00:00
Zoey
875a9d2e91
close #655
Signed-off-by: Zoey <zoey@z0ey.de>
2024-02-19 21:07:58 +01:00
Zoey
bfcef965df
update security.txt/dep updates
Signed-off-by: Zoey <zoey@z0ey.de>
2024-02-18 21:46:57 +01:00
renovate[bot]
c07ecc3239
nginx/dep updates/allow adding crs plugins
Signed-off-by: Zoey <zoey@z0ey.de>
2024-02-15 00:34:31 +01:00
Zoey
e9421dd5f9
add SKIP_IP_RANGES/improve crowdsec docs/dep updates
Signed-off-by: Zoey <zoey@z0ey.de>
2024-02-11 02:49:36 +01:00
Zoey
4bfb9b799a
merge upstream and small changes
Signed-off-by: Zoey <zoey@z0ey.de>
2024-01-21 23:08:52 +01:00
Zoey
0620ced474
Merge remote-tracking branch 'upstream/develop' into develop 2024-01-21 12:56:22 +01:00
Jamie Curnow
da820db4e1
Fix startup hang due to unresolved promise
Affects instances where there are certs but none
of them are dns validated
2024-01-21 20:48:53 +10:00
Zoey
aeebd0841e
merge upstream 2024-01-20 14:42:28 +01:00
Zoey
04dd76f9eb
Merge remote-tracking branch 'upstream/develop' into develop 2024-01-20 14:31:51 +01:00
Jamie Curnow
0353051436
Prevent installing same plugin over and over 2024-01-18 16:06:09 +10:00
Jamie Curnow
a3630a6286
Fix unused var 2024-01-18 15:17:27 +10:00
Jamie Curnow
10d9760242
Refactor certbot plugin install for setup 2024-01-18 15:13:16 +10:00
Jamie Curnow
db23c9a52f
Refactor certbot plugins install
- Added a script to install every single plugin, used in development and debugging
- Improved certbot plugin install commands
- Adjusted some version for plugins to install properly
- It's noted that some plugins require deps that do not match other plugins,
  however these use cases should be extremely rare
2024-01-18 12:26:55 +10:00
Zoey
a6797c9f6b
add goaccess
Signed-off-by: Zoey <zoey@z0ey.de>
2024-01-14 00:08:36 +01:00
Zoey
f96a4d32a3
remove route53 until https://github.com/certbot/certbot/pull/5781 or similar is merged
Signed-off-by: Zoey <zoey@z0ey.de>
2024-01-12 20:30:18 +01:00
Jamie Curnow
834fb1a361
Add missing args to certbot command, was causing failures in rovokation 2024-01-12 17:04:55 +10:00
jc21
1be87f48c1
Merge pull request #3392 from stevecrozz/auto-renew-uses-bulitin-renew
Make auto-renew use built-in renew function
2024-01-12 12:15:37 +10:00
Zoey
3d7877a4a0
merge upstream
Signed-off-by: Zoey <zoey@z0ey.de>
2024-01-11 22:27:26 +01:00
Zoey
93216d93e4
Merge remote-tracking branch 'upstream/develop' into develop 2024-01-11 21:36:01 +01:00
Stephen Crosby
9c54d1b718 Provide the token model for certificate renewal 2024-01-10 20:08:36 -08:00
Stephen Crosby
f7d1c490b3 Run renews sequentially 2024-01-10 20:08:36 -08:00
Stephen Crosby
fe4bd9fed6 Make auto-renew use built-in renew function 2024-01-10 20:08:29 -08:00
Jamie Curnow
e69684919c
Use nginxproxymanager/nginx-full image base
which has been updated with bookworm, python 3.8, certbot 2.8.0 and node 20

Moved rootfs scripts as /bin is a symlink in bookworm
2024-01-10 12:59:51 +10:00
jc21
09d5e2c94f
Merge pull request #3360 from DarioViva42/hsts-only-with-https
only add hsts header with https.
2024-01-09 08:16:01 +10:00
jc21
965873adc5
Merge pull request #3377 from jlesage/http2-support-fix
Fixed issue where the HTTP2 support was always enabled in nginx config
2024-01-08 10:33:47 +10:00
jc21
5de95a8c90
Merge pull request #3382 from r3na/patch-1
fix: increasing maxOptions (amount of domains) to 30
2024-01-08 10:26:01 +10:00
Zoey
711d378baa
downgrade sqlite3 to fix arm64
Signed-off-by: Zoey <zoey@z0ey.de>
2024-01-07 14:37:53 +01:00
Zoey2936
fde4edec77
dep updates
Signed-off-by: Zoey <zoey@z0ey.de>
2024-01-07 13:10:38 +01:00
Zoey
d1c5808176
improve custom locations 2024-01-02 03:08:16 +01:00
Zoey
58d28b9867
remove domain_names.sort() and trailing spaces 2024-01-01 23:56:28 +01:00
Zoey2936
9baaef45dd
dep update and some small fixes
Signed-off-by: Zoey <zoey@z0ey.de>
2024-01-01 21:49:24 +01:00
Jocelyn Le Sage
388fff84f2 Fixes for the server reachability test.
- Do not apply HTTPs redirection for challenge used by the test.
- Set the `User-Agent` to avoid 403 answer from site24x7.com.
- Handle JSON parsing failure of the received body.
- Better handling of different error cases.
2023-12-19 17:22:33 -05:00
renovate[bot]
f7a2eb2f22
dep updates
Signed-off-by: Zoey <zoey@z0ey.de>
2023-12-19 17:39:49 +01:00
Renan Duarte
1975e4a151
fix: updating maxItems (schema/definitions) to 30 2023-12-12 12:45:35 +01:00
renovate[bot]
52b6566119
dep updates
Update zoeyvid/nginx-quic Docker tag to v229
Update zoeyvid/certbot-docker Docker tag to v17
Update zoeyvid/nginx-quic Docker tag to v228
Update alpine Docker tag to v3.19.0
Update caddy Docker tag to v2.7.6
Update dependency knex to v3.1.0
Update zoeyvid/nginx-quic Docker tag to v225
Update dependency sass-loader to v10.5.0
Update zoeyvid/certbot-docker Docker tag to v15
Update zoeyvid/nginx-quic Docker tag to v230
Signed-off-by: Zoey <zoey@z0ey.de>
2023-12-09 22:29:37 +01:00
Jocelyn Le Sage
ccf9cce825 Fixed issue where the HTTP2 support was always enabled in nginx config, no matter what the user configured. 2023-12-09 11:16:37 -05:00
renovate[bot]
36506eb2e3
dep updates/allow all custom confs
Signed-off-by: Zoey <zoey@z0ey.de>
2023-12-03 18:07:14 +01:00
Dario Viva
289e438c59 only add hsts header with https.
fixes https://github.com/NginxProxyManager/nginx-proxy-manager/issues/1005
for more information look at: https://websistent.com/add-the-hsts-header-only-for-https-requests-nginx/
2023-12-02 03:26:34 +01:00
Zoey
e89d41e463
dep updates
Update dependency objection to v3.1.3
Update dependency express-fileupload to v1.4.3
2023-11-26 14:24:44 +01:00
Zoey
c534fa150d
try reload again instead of quit and restart
Signed-off-by: Zoey <zoey@z0ey.de>
2023-11-19 18:13:15 +01:00
renovate[bot]
c425ff14c0 Update dependency eslint to v8.54.0 2023-11-17 23:32:53 +01:00
Zoey
334127494e
fix Alt-Svc header
Signed-off-by: Zoey <zoey@z0ey.de>
2023-11-12 15:11:16 +01:00
Zoey
6548a7aea6
fix stream/allow editing modsec conf/readme changes/dep updates
Signed-off-by: Zoey <zoey@z0ey.de>
2023-11-11 19:04:55 +01:00
renovate[bot]
8987ff9c6d
dep updates/header changes/tls changes
Signed-off-by: Zoey <zoey@z0ey.de>

- dep updates
- upodate nginx/certbot
- improve headers
- change NPM to NPMplus in launch.sh
- when using https backend, only TLSv1 to TLSv1.3 is now allowed, whith secure ciphers
2023-10-25 22:54:11 +02:00
Zoey
efcca74d67 fix security headers and sockets
Signed-off-by: Zoey <zoey@z0ey.de>
2023-10-10 19:55:42 +02:00
Zoey
dec9dc990f renewer certbot certs after launch/load env from file/listen on socket/disable http in AIO mode
Signed-off-by: Zoey <zoey@z0ey.de>
2023-10-10 15:52:14 +02:00
Zoey
fb0bb721f7 rebrand to NPMplus/improve security headers/upsteam changes/dockerlint
Signed-off-by: Zoey <zoey@z0ey.de>
2023-10-09 20:32:37 +02:00
renovate[bot]
6e62aa2ea1
dep updates/merge #3190 from upstream/fix #407
Signed-off-by: Zoey <zoey@z0ey.de>
2023-09-25 22:03:10 +02:00
Zoey
c943ccdd87
fix latest release
Signed-off-by: Zoey <zoey@z0ey.de>
2023-09-02 13:26:56 +02:00
GitHub
55b173a744
fix certbot run on launch/dep updates
Signed-off-by: Zoey <zoey@z0ey.de>

Update dependency jsonwebtoken to v9.0.2
Update dependency liquidjs to v10.9.2
Update dependency jquery to v3.7.1
2023-09-02 13:04:35 +02:00
renovate[bot]
f9971aa9d5
remove wait/dep updates
Update zoeyvid/nginx-quic Docker tag to v183
Update caddy Docker tag to v2.7.4

Update dependency archiver to v5.3.2

Update python Docker tag to v3.11.5

Update dependency eslint to v8.48.0

remove wait

Signed-off-by: Zoey <zoey@z0ey.de>

Update dependency @babel/core to v7.22.11

Update dependency liquidjs to v10.9.1

Update dependency liquidjs to v10.9.0

Update dependency archiver to v6
2023-08-26 13:14:13 +02:00
Devedse
6f8db95249 Added force renewal + --dns-duckdns-no-txt-restore 2023-08-24 13:21:01 +02:00
renovate[bot]
390b58d0ef
caddy/bcrypt/nginx update
Update caddy Docker tag to v2.7.3
Update dependency bcrypt to v5.1.1
Update zoeyvid/nginx-quic Docker tag to v181
2023-08-16 13:34:28 +02:00
renovate[bot]
e8fe12ae91
dep updates
Update zoeyvid/nginx-quic Docker tag to v180
Update dependency @babel/core to v7.22.10
Update dependency eslint to v8.47.0
Update alpine Docker tag to v3.18.3
2023-08-12 22:09:28 +02:00
Zoey
f3775aad21
merge upstream
Signed-off-by: Zoey <zoey@z0ey.de>
2023-08-02 15:02:30 +02:00