milad nazari 
							
						 
					 
					
						
						
							
						
						891877afb6 
					 
					
						
						
							
							fix ssl key-type certificate  
						
						
						
						
					 
					
						2024-12-11 11:51:58 +03:30 
						 
				 
			
				
					
						
							
							
								milad nazari 
							
						 
					 
					
						
						
							
						
						e6ec74c2f7 
					 
					
						
						
							
							feat: add support for selecting SSL key type (ECDSA/RSA)  
						
						... 
						
						
						
						Added the ability to specify the SSL key type (ECDSA or RSA) for each site in the Nginx Proxy Manager. This enhancement is particularly useful for environments with IoT devices that have limitations with specific key types, such as RSA-only support. The implementation includes:
- Backend support for storing and validating the `ssl_key_type` field.
- Swagger schema updated to validate the new input.
- Frontend update to allow users to select the SSL key type via a dropdown menu.
This feature ensures greater flexibility and compatibility in managing SSL certificates for diverse setups. 
						
						
					 
					
						2024-12-09 11:27:52 +03:30 
						 
				 
			
				
					
						
							
							
								jc21 
							
						 
					 
					
						
						
							
						
						61e2bde98f 
					 
					
						
						
							
							Merge pull request  #4184  from NginxProxyManager/dependabot/npm_and_yarn/backend/cross-spawn-7.0.6  
						
						... 
						
						
						
						Bump cross-spawn from 7.0.3 to 7.0.6 in /backend 
						
						
					 
					
						2024-12-02 08:48:08 +10:00 
						 
				 
			
				
					
						
							
							
								jc21 
							
						 
					 
					
						
						
							
						
						53ed12bcf2 
					 
					
						
						
							
							Merge pull request  #4163  from Jasparigus/stream_error_correction  
						
						... 
						
						
						
						Fix Container Bootloop if Stream is used for http/https ports 
						
						
					 
					
						2024-11-26 07:37:14 +10:00 
						 
				 
			
				
					
						
							
							
								dependabot[bot] 
							
						 
					 
					
						
						
							
						
						2075f98cad 
					 
					
						
						
							
							Bump cross-spawn from 7.0.3 to 7.0.6 in /backend  
						
						... 
						
						
						
						Bumps [cross-spawn](https://github.com/moxystudio/node-cross-spawn ) from 7.0.3 to 7.0.6.
- [Changelog](https://github.com/moxystudio/node-cross-spawn/blob/master/CHANGELOG.md )
- [Commits](https://github.com/moxystudio/node-cross-spawn/compare/v7.0.3...v7.0.6 )
---
updated-dependencies:
- dependency-name: cross-spawn
  dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com > 
						
						
					 
					
						2024-11-24 03:36:44 +00:00 
						 
				 
			
				
					
						
							
							
								tametsi 
							
						 
					 
					
						
						
							
						
						640a1eeb68 
					 
					
						
						
							
							Return generic auth error to prevent user enumeration attacks  
						
						... 
						
						
						
						On invalid user/password error the error message "Invalid email or password" is returned.
Thereby, no information about the existence of the user is given. 
						
						
					 
					
						2024-11-22 10:37:09 +01:00 
						 
				 
			
				
					
						
							
							
								Jasper Stubbe 
							
						 
					 
					
						
						
							
						
						87998a03ce 
					 
					
						
						
							
							Fix bootloop if stream is used for http/https port  
						
						
						
						
					 
					
						2024-11-14 11:39:48 -08:00 
						 
				 
			
				
					
						
							
							
								mitossoft-rd 
							
						 
					 
					
						
						
							
						
						f7d3ca0b07 
					 
					
						
						
							
							Cleaning unused variable.  
						
						
						
						
					 
					
						2024-10-28 15:18:54 +03:00 
						 
				 
			
				
					
						
							
							
								mitossoft-rd 
							
						 
					 
					
						
						
							
						
						a55de386e7 
					 
					
						
						
							
							Fix URL format  
						
						
						
						
					 
					
						2024-10-28 15:15:08 +03:00 
						 
				 
			
				
					
						
							
							
								mitossoft-rd 
							
						 
					 
					
						
						
							
						
						e9d4f5b827 
					 
					
						
						
							
							Remove variable usage from proxy_pass directive to fix resolution issues  
						
						... 
						
						
						
						By using a static URL, the backend server can be accessed reliably, avoiding the common 404 errors or "no resolver defined" issues seen when variables are used. 
						
						
					 
					
						2024-10-28 02:59:23 +03:00 
						 
				 
			
				
					
						
							
							
								jc21 
							
						 
					 
					
						
						
							
						
						eaf6335694 
					 
					
						
						
							
							Merge pull request  #4106  from dreik/develop  
						
						... 
						
						
	
		
			
	 
	
	
		
	
	
		
			
				
	Close stale issues and PRs / stale (push) Successful in 4s 
				
			 
		
		
	 
 
	 
						
						http2 directive migration 
						
						
					 
					
						2024-10-25 08:53:08 +10:00 
						 
				 
			
				
					
						
							
							
								Chris Maffey 
							
						 
					 
					
						
						
							
						
						2e9a4f1aed 
					 
					
						
						
							
							Update put.json  
						
						... 
						
						
						
						Password can be left blank for updates.  Otherwise you have to reenter the password every time you save the auth list 
						
						
					 
					
						2024-10-24 17:29:16 +13:00 
						 
				 
			
				
					
						
							
							
								Chris Maffey 
							
						 
					 
					
						
						
							
						
						dad8d0ca00 
					 
					
						
						
							
							Update _access.conf  
						
						... 
						
						
						
						the pass_auth and satisfy_any properties and now boolean true/false, they do not == 1 so the switching in this template breaks 
						
						
					 
					
						2024-10-24 14:04:17 +13:00 
						 
				 
			
				
					
						
							
							
								Sergey 'dreik' Kolesnik 
							
						 
					 
					
						
						
							
						
						d7e0558a35 
					 
					
						
						
							
							http2 directive  
						
						... 
						
						
						
						to reduce warns in logs 
						
						
					 
					
						2024-10-24 01:30:14 +03:00 
						 
				 
			
				
					
						
							
							
								Jamie Curnow 
							
						 
					 
					
						
						
							
						
						edbed1af90 
					 
					
						
						
							
							Adds tests for settings endpoints  
						
						... 
						
						
						
						and reenables dns cert test
and fixes problems with schema 
						
						
					 
					
						2024-10-17 08:48:47 +10:00 
						 
				 
			
				
					
						
							
							
								Nephiel 
							
						 
					 
					
						
						
							
						
						fa2c814fcb 
					 
					
						
						
							
							Fix schema validation in Default Site  
						
						... 
						
						
						
						Should solve error `data/value must match exactly one schema in oneOf` when setting the Default Site to 404 or 444. #4074  
						
						
					 
					
						2024-10-16 19:09:14 +00:00 
						 
				 
			
				
					
						
							
							
								Nephiel 
							
						 
					 
					
						
						
							
						
						d96a3987c0 
					 
					
						
						
							
							Fix forward_scheme validation in Redirection Host  
						
						... 
						
						
						
						Should solve error `data/forward_scheme must be equal to one of the allowed values` when configuring a Redirection Host with scheme set to `auto`. #4074  
						
						
					 
					
						2024-10-16 19:04:50 +00:00 
						 
				 
			
				
					
						
							
							
								Jamie Curnow 
							
						 
					 
					
						
						
							
						
						fe2d8895d6 
					 
					
						
						
							
							Cypress test for http and dns cert provision  
						
						
						
						
					 
					
						2024-10-16 14:53:57 +10:00 
						 
				 
			
				
					
						
							
							
								Jamie Curnow 
							
						 
					 
					
						
						
							
						
						5bdc05878f 
					 
					
						
						
							
							Fix issues with certbot command when using LE_SERVER  
						
						
						
						
					 
					
						2024-10-16 11:23:58 +10:00 
						 
				 
			
				
					
						
							
							
								Jamie Curnow 
							
						 
					 
					
						
						
							
						
						929ac3bd7c 
					 
					
						
						
							
							Adds env var to set certbot acme server  
						
						... 
						
						
						
						this is required for test suite to use dns certbot request
without talking to live or staging letsencrypt servers or
production level dns providers. This is a backwards port
from the v3 branch and opens the door for a full certificate
cypress test 
						
						
					 
					
						2024-10-16 11:06:29 +10:00 
						 
				 
			
				
					
						
							
							
								Jamie Curnow 
							
						 
					 
					
						
						
							
						
						351ba8dacd 
					 
					
						
						
							
							More tests for certificates, fixed schema problems  
						
						
						
						
					 
					
						2024-10-16 08:32:49 +10:00 
						 
				 
			
				
					
						
							
							
								jc21 
							
						 
					 
					
						
						
							
						
						78f3e7281b 
					 
					
						
						
							
							Merge pull request  #4015  from NginxProxyManager/dependabot/npm_and_yarn/backend/express-4.20.0  
						
						... 
						
						
						
						Bump express from 4.19.2 to 4.20.0 in /backend 
						
						
					 
					
						2024-10-11 15:18:36 +10:00 
						 
				 
			
				
					
						
							
							
								jc21 
							
						 
					 
					
						
						
							
						
						0bfa6c9d4f 
					 
					
						
						
							
							Merge pull request  #3973  from ddshd/proxy-add-set  
						
						... 
						
						
						
						Add set directives for proxied paths to keep nginx from crashing if upstream is down 
						
						
					 
					
						2024-10-11 14:08:39 +10:00 
						 
				 
			
				
					
						
							
							
								dependabot[bot] 
							
						 
					 
					
						
						
							
						
						f71de7474d 
					 
					
						
						
							
							Bump express from 4.19.2 to 4.20.0 in /backend  
						
						... 
						
						
						
						Bumps [express](https://github.com/expressjs/express ) from 4.19.2 to 4.20.0.
- [Release notes](https://github.com/expressjs/express/releases )
- [Changelog](https://github.com/expressjs/express/blob/master/History.md )
- [Commits](https://github.com/expressjs/express/compare/4.19.2...4.20.0 )
---
updated-dependencies:
- dependency-name: express
  dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com > 
						
						
					 
					
						2024-10-11 04:06:52 +00:00 
						 
				 
			
				
					
						
							
							
								jc21 
							
						 
					 
					
						
						
							
						
						02a7b43932 
					 
					
						
						
							
							Merge pull request  #3991  from nlynzaad/develop_mysql2  
						
						... 
						
						
						
						swap mysql library and knex client for mysql2 
						
						
					 
					
						2024-10-11 14:05:26 +10:00 
						 
				 
			
				
					
						
							
							
								jc21 
							
						 
					 
					
						
						
							
						
						e0352ecc48 
					 
					
						
						
							
							Merge pull request  #4016  from NginxProxyManager/dependabot/npm_and_yarn/backend/body-parser-1.20.3  
						
						... 
						
						
						
						Bump body-parser from 1.20.2 to 1.20.3 in /backend 
						
						
					 
					
						2024-10-11 13:27:14 +10:00 
						 
				 
			
				
					
						
							
							
								Jamie Curnow 
							
						 
					 
					
						
						
							
						
						c39d5433bc 
					 
					
						
						
							
							Fix CVE-2024-46256 and CVE-2024-46257  
						
						... 
						
						
						
						- Schema validate against bad domain characters
- Integration test for CVE POC examples
- Cypress rewrite of plugins for file upload 
						
						
					 
					
						2024-10-11 11:31:57 +10:00 
						 
				 
			
				
					
						
							
							
								Jamie Curnow 
							
						 
					 
					
						
						
							
						
						7c97516de6 
					 
					
						
						
							
							Fix schema issue with cors  
						
						
						
						
					 
					
						2024-10-10 16:31:19 +10:00 
						 
				 
			
				
					
						
							
							
								Jamie Curnow 
							
						 
					 
					
						
						
							
						
						4572b205c9 
					 
					
						
						
							
							Openapi Schema improvements  
						
						... 
						
						
						
						- Return proper booleans in api responses
- Update jsonschemavalidation to latest draft 
						
						
					 
					
						2024-10-10 15:53:11 +10:00 
						 
				 
			
				
					
						
							
							
								Jamie Curnow 
							
						 
					 
					
						
						
							
						
						dfe2588523 
					 
					
						
						
							
							Refactor API Schema and validation  
						
						... 
						
						
						
						- /schema now returns full openapi/swagger schema
- That schema is used to validate incoming requests
- And used as a contract in future integration tests
- Moved route files up one level
- Fixed incorrect 404 reponses when getting objects
- Fixed saving new objects and passing jsonschemavalidation 
						
						
					 
					
						2024-10-09 18:05:15 +10:00 
						 
				 
			
				
					
						
							
							
								dependabot[bot] 
							
						 
					 
					
						
						
							
						
						d69cb26157 
					 
					
						
						
							
							Bump body-parser from 1.20.2 to 1.20.3 in /backend  
						
						... 
						
						
						
						Bumps [body-parser](https://github.com/expressjs/body-parser ) from 1.20.2 to 1.20.3.
- [Release notes](https://github.com/expressjs/body-parser/releases )
- [Changelog](https://github.com/expressjs/body-parser/blob/master/HISTORY.md )
- [Commits](https://github.com/expressjs/body-parser/compare/1.20.2...1.20.3 )
---
updated-dependencies:
- dependency-name: body-parser
  dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com > 
						
						
					 
					
						2024-09-21 08:52:30 +00:00 
						 
				 
			
				
					
						
							
							
								Nico Lynzaad 
							
						 
					 
					
						
						
							
						
						48a9f5f9db 
					 
					
						
						
							
							swop mysql library and knex client for mysql2  
						
						
						
						
					 
					
						2024-09-10 23:08:02 +02:00 
						 
				 
			
				
					
						
							
							
								Dhrumil Shah 
							
						 
					 
					
						
						
							
						
						554d1ff2b6 
					 
					
						
						
							
							Add set directives for proxies to keep from crashing if upstream is down  
						
						
						
						
					 
					
						2024-09-04 00:07:43 -04:00 
						 
				 
			
				
					
						
							
							
								Jamie Curnow 
							
						 
					 
					
						
						
							
						
						99cce7e2b0 
					 
					
						
						
							
							Fix command injection when passing bash commands into the dns provider configuration  
						
						... 
						
						
						
						- Use built in node functions to write the file
- And to delete the file 
						
						
					 
					
						2024-07-01 16:08:01 +10:00 
						 
				 
			
				
					
						
							
							
								jc21 
							
						 
					 
					
						
						
							
						
						b33012705b 
					 
					
						
						
							
							Merge pull request  #3790  from DavidLievrouw/initial_admin  
						
						... 
						
						
						
						Read initial admin email and password from env vars 
						
						
					 
					
						2024-07-01 15:22:15 +10:00 
						 
				 
			
				
					
						
							
							
								jc21 
							
						 
					 
					
						
						
							
						
						e948b60194 
					 
					
						
						
							
							Merge pull request  #3809  from NginxProxyManager/dependabot/npm_and_yarn/backend/braces-3.0.3  
						
						... 
						
						
						
						Bump braces from 3.0.2 to 3.0.3 in /backend 
						
						
					 
					
						2024-07-01 15:20:48 +10:00 
						 
				 
			
				
					
						
							
							
								jc21 
							
						 
					 
					
						
						
							
						
						d1c23b6286 
					 
					
						
						
							
							Merge pull request  #3833  from NginxProxyManager/dependabot/npm_and_yarn/backend/glob-parent-5.1.2  
						
						... 
						
						
						
						Bump glob-parent from 5.1.1 to 5.1.2 in /backend 
						
						
					 
					
						2024-07-01 15:19:39 +10:00 
						 
				 
			
				
					
						
							
							
								An Seongjin 
							
						 
					 
					
						
						
							
						
						001c77e686 
					 
					
						
						
							
							Fix syntax that causes errors (generateKeys log)  
						
						
						
						
					 
					
						2024-06-30 22:27:54 +09:00 
						 
				 
			
				
					
						
							
							
								dependabot[bot] 
							
						 
					 
					
						
						
							
						
						50aeae234f 
					 
					
						
						
							
							Bump glob-parent from 5.1.1 to 5.1.2 in /backend  
						
						... 
						
						
						
						Bumps [glob-parent](https://github.com/gulpjs/glob-parent ) from 5.1.1 to 5.1.2.
- [Release notes](https://github.com/gulpjs/glob-parent/releases )
- [Changelog](https://github.com/gulpjs/glob-parent/blob/main/CHANGELOG.md )
- [Commits](https://github.com/gulpjs/glob-parent/compare/v5.1.1...v5.1.2 )
---
updated-dependencies:
- dependency-name: glob-parent
  dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com > 
						
						
					 
					
						2024-06-27 18:24:09 +00:00 
						 
				 
			
				
					
						
							
							
								dependabot[bot] 
							
						 
					 
					
						
						
							
						
						6f9eed8a61 
					 
					
						
						
							
							Bump braces from 3.0.2 to 3.0.3 in /backend  
						
						... 
						
						
						
						Bumps [braces](https://github.com/micromatch/braces ) from 3.0.2 to 3.0.3.
- [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md )
- [Commits](https://github.com/micromatch/braces/compare/3.0.2...3.0.3 )
---
updated-dependencies:
- dependency-name: braces
  dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com > 
						
						
					 
					
						2024-06-16 10:41:32 +00:00 
						 
				 
			
				
					
						
							
							
								David Lievrouw 
							
						 
					 
					
						
						
							
						
						d66e4e03e6 
					 
					
						
						
							
							#3790  Attempt to make ci happy.  
						
						
						
						
					 
					
						2024-06-03 13:44:08 +02:00 
						 
				 
			
				
					
						
							
							
								David Lievrouw 
							
						 
					 
					
						
						
							
						
						1d19c29bb0 
					 
					
						
						
							
							Read initial admin email and password from env vars.  
						
						
						
						
					 
					
						2024-06-03 13:32:23 +02:00 
						 
				 
			
				
					
						
							
							
								jc21 
							
						 
					 
					
						
						
							
						
						3754a569ba 
					 
					
						
						
							
							Merge pull request  #3729  from clhey/custom_proxy  
						
						... 
						
						
						
						move advanced_config section of /app/templates/_location.conf to top of default config 
						
						
					 
					
						2024-05-20 13:53:09 +10:00 
						 
				 
			
				
					
						
							
							
								jc21 
							
						 
					 
					
						
						
							
						
						35f0fe745d 
					 
					
						
						
							
							Merge pull request  #3569  from NginxProxyManager/dependabot/npm_and_yarn/backend/ip-2.0.1  
						
						... 
						
						
						
						Bump ip from 2.0.0 to 2.0.1 in /backend 
						
						
					 
					
						2024-05-02 08:19:02 +10:00 
						 
				 
			
				
					
						
							
							
								clhey 
							
						 
					 
					
						
						
							
						
						280bac8b43 
					 
					
						
						
							
							advanced config  move to top of default confg  
						
						
						
						
					 
					
						2024-04-28 18:18:38 +08:00 
						 
				 
			
				
					
						
							
							
								dependabot[bot] 
							
						 
					 
					
						
						
							
						
						5a761236c5 
					 
					
						
						
							
							Bump express from 4.17.3 to 4.19.2 in /backend  
						
						... 
						
						
						
						Bumps [express](https://github.com/expressjs/express ) from 4.17.3 to 4.19.2.
- [Release notes](https://github.com/expressjs/express/releases )
- [Changelog](https://github.com/expressjs/express/blob/master/History.md )
- [Commits](https://github.com/expressjs/express/compare/4.17.3...4.19.2 )
---
updated-dependencies:
- dependency-name: express
  dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com > 
						
						
					 
					
						2024-03-28 02:21:37 +00:00 
						 
				 
			
				
					
						
							
							
								jc21 
							
						 
					 
					
						
						
							
						
						63cd9ba08f 
					 
					
						
						
							
							Merge pull request  #3581  from davidindra/increase-max-domains-count  
						
						... 
						
						
						
						Fix: increase max number of domains to 100 (match with Let's Encrypt) 
						
						
					 
					
						2024-02-27 11:36:04 +10:00 
						 
				 
			
				
					
						
							
							
								David Indra 
							
						 
					 
					
						
						
							
						
						10ece3548d 
					 
					
						
						
							
							Fixing "the map directive is not allowed here" at the validation stage (see  https://github.com/NginxProxyManager/nginx-proxy-manager/pull/3478 )  
						
						
						
						
					 
					
						2024-02-27 00:42:58 +01:00 
						 
				 
			
				
					
						
							
							
								Tim 
							
						 
					 
					
						
						
							
						
						0503a6af75 
					 
					
						
						
							
							Fix so that nginx config is loaded after configuration happens  
						
						... 
						
						
						
						M	backend/internal/access-list.js 
						
						
					 
					
						2024-02-26 10:04:25 +11:00 
						 
				 
			
				
					
						
							
							
								David Indra 
							
						 
					 
					
						
						
							
						
						1fb9a75a33 
					 
					
						
						
							
							Fix: increase max number of domains to 100  
						
						
						
						
					 
					
						2024-02-23 15:37:32 +01:00