Varun Gupta
3b0ff570d9
doc string update
2024-04-28 18:00:23 -07:00
Varun Gupta
7b09fefd17
Update configs for active hosts only on ddns update
...
Other changes:
- Fixed null property read error on clients (when switching to public access)
- Use separate `resolvedAddress` field for resolved IP instead of overwriting address
- Reduced ddns log verbosity
2024-04-28 18:00:23 -07:00
Varun Gupta
743cdd8b0b
Eliminate circular dependency
2024-04-28 18:00:23 -07:00
Varun Gupta
33f41f7e6f
Fix utils.js linter error
2024-04-28 18:00:23 -07:00
Varun Gupta
972d158161
fix linter warnings
2024-04-28 18:00:23 -07:00
Varun Gupta
ec9eb0dd60
Refactor and integrate ddns resolution with nginx module
...
Refactored ddns resolver so that no patching is done. nginx.js will automatically resolve ddns addresses if needed.
Added dedicated logger scope for ddns resovler.
2024-04-28 18:00:04 -07:00
Varun Gupta
5586709d03
Initial pass at DDNS support for client addresses
...
This is a first pass attempt at adding support for using ddns (really any resolvable domain name) as the address in access list clients.
This helps make it possible to restrict access to hosts using a dynamic public IP (e.g. allow access to a proxied host from your local network only via ddns address).
Current approach is hacky since it was developed by manually replacing files in an existing npm docker container. Future commits will integrate this better and avoid needing to patch/intercept existing APIs.
See associated PR for more details.
2024-04-28 17:58:58 -07:00
dependabot[bot]
5a761236c5
Bump express from 4.17.3 to 4.19.2 in /backend
...
Bumps [express](https://github.com/expressjs/express ) from 4.17.3 to 4.19.2.
- [Release notes](https://github.com/expressjs/express/releases )
- [Changelog](https://github.com/expressjs/express/blob/master/History.md )
- [Commits](https://github.com/expressjs/express/compare/4.17.3...4.19.2 )
---
updated-dependencies:
- dependency-name: express
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
2024-03-28 02:21:37 +00:00
jc21
63cd9ba08f
Merge pull request #3581 from davidindra/increase-max-domains-count
...
Fix: increase max number of domains to 100 (match with Let's Encrypt)
2024-02-27 11:36:04 +10:00
David Indra
10ece3548d
Fixing "the map directive is not allowed here" at the validation stage (see https://github.com/NginxProxyManager/nginx-proxy-manager/pull/3478 )
2024-02-27 00:42:58 +01:00
Tim
0503a6af75
Fix so that nginx config is loaded after configuration happens
...
M backend/internal/access-list.js
2024-02-26 10:04:25 +11:00
David Indra
1fb9a75a33
Fix: increase max number of domains to 100
2024-02-23 15:37:32 +01:00
Jamie Curnow
da820db4e1
Fix startup hang due to unresolved promise
...
Affects instances where there are certs but none
of them are dns validated
2024-01-21 20:48:53 +10:00
Jamie Curnow
0353051436
Prevent installing same plugin over and over
2024-01-18 16:06:09 +10:00
Jamie Curnow
a3630a6286
Fix unused var
2024-01-18 15:17:27 +10:00
Jamie Curnow
10d9760242
Refactor certbot plugin install for setup
2024-01-18 15:13:16 +10:00
Jamie Curnow
db23c9a52f
Refactor certbot plugins install
...
- Added a script to install every single plugin, used in development and debugging
- Improved certbot plugin install commands
- Adjusted some version for plugins to install properly
- It's noted that some plugins require deps that do not match other plugins,
however these use cases should be extremely rare
2024-01-18 12:26:55 +10:00
Jamie Curnow
834fb1a361
Add missing args to certbot command, was causing failures in rovokation
2024-01-12 17:04:55 +10:00
jc21
1be87f48c1
Merge pull request #3392 from stevecrozz/auto-renew-uses-bulitin-renew
...
Make auto-renew use built-in renew function
2024-01-12 12:15:37 +10:00
Stephen Crosby
9c54d1b718
Provide the token model for certificate renewal
2024-01-10 20:08:36 -08:00
Stephen Crosby
f7d1c490b3
Run renews sequentially
2024-01-10 20:08:36 -08:00
Stephen Crosby
fe4bd9fed6
Make auto-renew use built-in renew function
2024-01-10 20:08:29 -08:00
Jamie Curnow
e69684919c
Use nginxproxymanager/nginx-full image base
...
which has been updated with bookworm, python 3.8, certbot 2.8.0 and node 20
Moved rootfs scripts as /bin is a symlink in bookworm
2024-01-10 12:59:51 +10:00
jc21
09d5e2c94f
Merge pull request #3360 from DarioViva42/hsts-only-with-https
...
only add hsts header with https.
2024-01-09 08:16:01 +10:00
jc21
965873adc5
Merge pull request #3377 from jlesage/http2-support-fix
...
Fixed issue where the HTTP2 support was always enabled in nginx config
2024-01-08 10:33:47 +10:00
jc21
5de95a8c90
Merge pull request #3382 from r3na/patch-1
...
fix: increasing maxOptions (amount of domains) to 30
2024-01-08 10:26:01 +10:00
Jocelyn Le Sage
388fff84f2
Fixes for the server reachability test.
...
- Do not apply HTTPs redirection for challenge used by the test.
- Set the `User-Agent` to avoid 403 answer from site24x7.com.
- Handle JSON parsing failure of the received body.
- Better handling of different error cases.
2023-12-19 17:22:33 -05:00
Renan Duarte
1975e4a151
fix: updating maxItems (schema/definitions) to 30
2023-12-12 12:45:35 +01:00
Jocelyn Le Sage
ccf9cce825
Fixed issue where the HTTP2 support was always enabled in nginx config, no matter what the user configured.
2023-12-09 11:16:37 -05:00
Dario Viva
289e438c59
only add hsts header with https.
...
fixes https://github.com/NginxProxyManager/nginx-proxy-manager/issues/1005
for more information look at: https://websistent.com/add-the-hsts-header-only-for-https-requests-nginx/
2023-12-02 03:26:34 +01:00
Devedse
6f8db95249
Added force renewal + --dns-duckdns-no-txt-restore
2023-08-24 13:21:01 +02:00
jc21
3333a32612
Merge pull request #2971 from wolviex/certbot-dnsplugin-user-site-fix
...
drop --user on pip install dns plugin
2023-07-31 07:21:18 +10:00
jc21
f38cb5b500
Merge pull request #2942 from wrouesnel/444_default_support
...
Add support for nginx 444 default response
2023-07-20 12:23:57 +10:00
jc21
a984a68065
Merge pull request #3051 from NginxProxyManager/dependabot/npm_and_yarn/backend/semver-5.7.2
...
Bump semver from 5.7.1 to 5.7.2 in /backend
2023-07-19 10:02:04 +10:00
dependabot[bot]
c8caaa56d9
Bump word-wrap from 1.2.3 to 1.2.4 in /backend
...
Bumps [word-wrap](https://github.com/jonschlinkert/word-wrap ) from 1.2.3 to 1.2.4.
- [Release notes](https://github.com/jonschlinkert/word-wrap/releases )
- [Commits](https://github.com/jonschlinkert/word-wrap/compare/1.2.3...1.2.4 )
---
updated-dependencies:
- dependency-name: word-wrap
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
2023-07-18 20:59:11 +00:00
dependabot[bot]
f458730d87
Bump semver from 5.7.1 to 5.7.2 in /backend
...
Bumps [semver](https://github.com/npm/node-semver ) from 5.7.1 to 5.7.2.
- [Release notes](https://github.com/npm/node-semver/releases )
- [Changelog](https://github.com/npm/node-semver/blob/v5.7.2/CHANGELOG.md )
- [Commits](https://github.com/npm/node-semver/compare/v5.7.1...v5.7.2 )
---
updated-dependencies:
- dependency-name: semver
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
2023-07-11 02:29:25 +00:00
Joe Manifold
f39e527680
drop --user on pip install dns plugin godaddy
...
Do not install dns_plugin into the user site because it will lack sys.path precedence to urllib3 in /opt/certbot/lib/python3.7/site-packages
2023-06-01 11:02:06 -07:00
Will Rouesnel
2dd4434ceb
Add support for nginx 444 default response
...
The default nginx 444 response drops the inbound connection without
sending any response to the client.
2023-05-22 11:59:50 +10:00
Jamie Curnow
05307aa253
Fix certbot plugins install when using PUID/PGID
2023-05-10 14:39:08 +10:00
Jamie Curnow
5d03ede100
Add test for creating a host
2023-03-30 12:44:28 +10:00
Jamie Curnow
124cb18e17
Fix renewing certs because of permission errors
2023-03-22 13:40:36 +10:00
Jamie Curnow
77eb618758
Fix pip installs running as non-root user
2023-03-22 09:41:59 +10:00
Jamie Curnow
4fdc80be01
Fix logical error with keys and mysql config
2023-03-21 17:59:27 +10:00
Jamie Curnow
c3469de61b
Linting fixes
2023-03-21 17:11:16 +10:00
Jamie Curnow
2a07445005
Refactor configuration
...
- No longer use config npm package
- Prefer config from env vars, though still has support for config file
- No longer writes a config file for database config
- Writes keys to a new file in /data folder
- Removes a lot of cruft and improves config understanding
2023-03-21 16:53:39 +10:00
Jamie Curnow
dad3e1da7c
Adds support to run processes as a user/group, defined
...
with PUID and PGID environment variables
- Detects if image is run with a user in docker command and fails if so
- Adds s6 prepare scripts for adding a 'npmuser'
- Split up and refactor the s6 prepare scripts
- Runs nginx and backend node as 'npmuser'
- Changes ownership of files required at startup
2023-03-20 16:56:52 +10:00
Jamie Curnow
fccbde1371
fix linting
2023-03-17 14:23:12 +10:00
Jamie Curnow
fec36834f7
- Updated objection, knex, liquidjs, signale and sqlite3 packages
...
- Changes for objection migration
- Moved common access template code to an include
- Fixed access rules configuration generation
2023-03-17 14:18:51 +10:00
Jamie Curnow
00aeef75b6
Refactor nginx config functions, some don't need to report errors, save error'd config files as .err for debugging later
2023-03-17 11:34:27 +10:00
Jamie Curnow
b30fcb50c8
Args weren't being passed to htpasswd command, fixes #2692
2023-03-17 08:49:18 +10:00