Commit Graph

91 Commits

Author SHA1 Message Date
Will Rouesnel
4d491b2d76 Fully support client CAs with access-lists
This commit changes access-list IP directives to be implemented using
the nginx "geo" directive.

This allows IP-based blocks to return 444 (drop connection) on
authorization failure when the "Drop Unauthorized" is enabled.

It also allows the implementation of "Satisfy Any" with the new
client CA certificate support - i.e. Satisfy Any can allow clients
from the local network to skip client certificate challenge, or drop
down to requesting basic authentication.

It should be noted that including basic authentication requirements
in Satisfy Any mode does prevent a 444 response from being sent, as
the basic auth challenge requires the server to respond.
2023-06-01 00:27:36 +10:00
Will Rouesnel
6cf91a2e70 Add drop_unauthorized parameter to proxy hosts
drop_unauthorized returns 444 when a client is not authorized as opposed
to 403. It can be used with Client Certificate authorization.
2023-05-31 01:43:57 +10:00
Will Rouesnel
34305e04e1 Add authority count to access-list drop down in proxy host 2023-05-30 00:49:42 +10:00
Will Rouesnel
fb766d14e9 Add support for writing client CAs when access-lists are updated
This commit adds the basic support necessary to produce the combined
client CA files when certificates are updated.
2023-05-30 00:49:36 +10:00
Will Rouesnel
e5bb50c164 Add support for adding Client Certificates to access-lists
Client certificate support is added as a new separate type of option for
access-lists.

This commit is the support code to enable access-lists to contain
Client Certificate references.
2023-05-29 14:48:02 +10:00
Will Rouesnel
d5b3e53140 Add frontend support for the new clientca type
The frontend is modified to filter certificates from selector lists
so only non-clientca certificate types can be set as server certificates.
2023-05-25 00:37:27 +10:00
Will Rouesnel
c664e864ce Add storing for Client CA certificates in the database
Add initial support for managing Client Certificate Authority public
certificates as certificate objects in the database. The new provider
type 'clientca' is defined to implement this.
2023-05-25 00:21:32 +10:00
Will Rouesnel
2dd4434ceb Add support for nginx 444 default response
The default nginx 444 response drops the inbound connection without
sending any response to the client.
2023-05-22 11:59:50 +10:00
Niklas Weinhart
84afec567c Added autofocus to email input on login screen 2022-08-28 19:54:50 +02:00
jc21
23c88f6955 Merge pull request #2090 from swazynski/patch-1
Add trailing slash to example
2022-08-23 20:57:04 +10:00
jc21
dd14207b63 Merge pull request #2110 from cfoellmann/footer-blank
open footer link "Fork me" in new tab/windows (_blank)
2022-08-23 20:44:56 +10:00
Peter Hulstaert
fb0ef08fd8 fix typo 2022-08-18 09:25:45 +02:00
Christian Foellmann
518b84b38b open footer link "Fork me" in new tab/windows (_blank) 2022-06-15 12:20:54 +02:00
swazynski
932dc4bf02 Add trailing slash to example 2022-06-03 15:20:26 +02:00
Jamie Curnow
feaafdc559 Fix #1950 attempt to encode hdomain values before render 2022-03-25 08:31:28 +10:00
jc21
14b889a85f Merge pull request #1822 from ivankristianto/add-search-feature-redirection
Add Search Feature To Backend Administration
2022-02-17 13:14:35 +10:00
Ivan Kristianto
8eb44c404d Add translation for search text 2022-02-12 13:28:16 +07:00
Ivan Kristianto
61b25e1213 Add search feature to Audit Logs 2022-02-12 13:10:23 +07:00
Ivan Kristianto
d3a5a3d0d6 Add search feature to Users 2022-02-12 12:52:22 +07:00
Ivan Kristianto
29c0fcbad6 Add search feature to SSL Certificates 2022-02-12 12:45:29 +07:00
Ivan Kristianto
de84d5d463 Add search feature to Access Lists 2022-02-12 12:17:45 +07:00
Ivan Kristianto
078114ee67 Fix search query for proxy 2022-02-12 11:52:47 +07:00
Ivan Kristianto
49f350fb00 Add search feature to 404 hosts 2022-02-12 11:48:47 +07:00
Ivan Kristianto
e141b5ff20 Add search feature to stream 2022-02-12 11:36:59 +07:00
Ivan Kristianto
181f163cb5 Move render showEmpty into function 2022-02-12 10:40:37 +07:00
Ivan Kristianto
30a9d3ae8d Add search feature to proxy host 2022-02-12 10:38:15 +07:00
lug-gh
83e09ad5a7 Update current year for footer
Update current year for footer
2022-02-05 20:59:21 +01:00
Ivan Kristianto
96e034aa75 Add search function for redirection 2022-01-30 22:47:42 +07:00
chaptergy
ac23c66659 Fixes custom certificate upload modal 2021-12-23 12:23:30 +01:00
jc21
d45f39aae3 Merge pull request #1538 from jc21/adds-http-challenge-test
Adds buttons to test availability of server from public internet
2021-11-10 09:15:26 +10:00
Julian Reinhardt
a5229d0e92 Adds advanced config header warning and replaces variable info with translation 2021-11-04 12:01:01 +01:00
Pius Walter
e17de6058e Fixed typo 2021-11-01 17:43:46 +01:00
Julian Reinhardt
9efe6cfb39 Minor fixes 2021-10-31 13:41:29 +01:00
Julian Reinhardt
c55476b196 Adds buttons to test availability of server from public internet 2021-10-31 00:19:18 +02:00
chaptergy
780759dc27 Adds toggle to header to display menu on mobile 2021-10-05 21:00:10 +02:00
nikhen
413ab50fc4 Change example IP: 0.0.0.0 -> 203.0.113.25 2021-09-12 12:28:25 +02:00
nikhen
c1880bd3ff 1.1.1.1 used as a placeholder, despite being real external website/address #686 2021-09-11 17:21:32 +02:00
Rahul Somasundaram
8944609b63 fixed linting 2021-08-24 07:28:17 +05:30
Rahul Somasundaram
1b1807c79a removed debug lines 2021-08-23 18:03:47 +05:30
Rahul Somasundaram
a8f4699816 [frontend] certificate download changes 2021-08-23 15:47:03 +05:30
jc21
ab40e4e2cf Merge pull request #1036 from BjoernAkAManf/master
Allows hostname instead of ip for streams
2021-08-16 13:40:40 +10:00
Björn Heinrichs
ba7bb57ca2 Incorporate feedback
- Empty function removed
- Placeholder and Maxlength restored
- Validation improved
- Typo fixed
2021-08-13 11:32:01 +02:00
jc21
4b8bdd22b3 Merge pull request #1181 from Theyooo/fix-wildcard-domains-regex
Fix wildcard domain regex
2021-07-18 19:05:23 +10:00
Théo Sallou
56c4f8a106 fix wildcard domains regex 2021-06-17 11:51:51 +02:00
Justin Peacock
99ef8bae4c Update messages.json
small change but updated the year in the footer. maybe there's a better way to grab the date with a function?
2021-06-16 09:29:55 -04:00
jc21
1a04863a08 Merge pull request #972 from psharma04/master
Add info about SSL
2021-05-20 08:14:28 +10:00
jc21
9f146b8fc3 Merge pull request #1099 from jc21/updates-dns-providers
Updates Porkbun, DuckDNS & Azure challenge providers
2021-05-20 08:12:12 +10:00
chaptergy
c8439b8429 Displays entity id for each entry in frontend
Displays this id inside the three-dot-menu on the right
2021-05-16 16:57:05 +02:00
chaptergy
4c3632d3e7 Automatically sort DNS challenge providers by display name on render 2021-05-15 19:16:28 +02:00
RBXII3
bf8d2672c8 Typo (used \m instead of \n) 2021-05-13 08:24:08 +10:00