Jamie Curnow 
							
						 
					 
					
						
						
							
						
						2a07445005 
					 
					
						
						
							
							Refactor configuration  
						
						... 
						
						
						
						- No longer use config npm package
- Prefer config from env vars, though still has support for config file
- No longer writes a config file for database config
- Writes keys to a new file in /data folder
- Removes a lot of cruft and improves config understanding 
						
						
					 
					
						2023-03-21 16:53:39 +10:00 
						 
				 
			
				
					
						
							
							
								Jamie Curnow 
							
						 
					 
					
						
						
							
						
						dad3e1da7c 
					 
					
						
						
							
							Adds support to run processes as a user/group, defined  
						
						... 
						
						
						
						with PUID and PGID environment variables
- Detects if image is run with a user in docker command and fails if so
- Adds s6 prepare scripts for adding a 'npmuser'
- Split up and refactor the s6 prepare scripts
- Runs nginx and backend node as 'npmuser'
- Changes ownership of files required at startup 
						
						
					 
					
						2023-03-20 16:56:52 +10:00 
						 
				 
			
				
					
						
							
							
								Jamie Curnow 
							
						 
					 
					
						
						
							
						
						fccbde1371 
					 
					
						
						
							
							fix linting  
						
						
						
						
					 
					
						2023-03-17 14:23:12 +10:00 
						 
				 
			
				
					
						
							
							
								Jamie Curnow 
							
						 
					 
					
						
						
							
						
						fec36834f7 
					 
					
						
						
							
							- Updated objection, knex, liquidjs, signale and sqlite3 packages  
						
						... 
						
						
						
						- Changes for objection migration
- Moved common access template code to an include
- Fixed access rules configuration generation 
						
						
					 
					
						2023-03-17 14:18:51 +10:00 
						 
				 
			
				
					
						
							
							
								Jamie Curnow 
							
						 
					 
					
						
						
							
						
						00aeef75b6 
					 
					
						
						
							
							Refactor nginx config functions, some don't need to report errors, save error'd config files as .err for debugging later  
						
						
						
						
					 
					
						2023-03-17 11:34:27 +10:00 
						 
				 
			
				
					
						
							
							
								Jamie Curnow 
							
						 
					 
					
						
						
							
						
						b30fcb50c8 
					 
					
						
						
							
							Args weren't being passed to htpasswd command,  fixes   #2692  
						
						
						
						
					 
					
						2023-03-17 08:49:18 +10:00 
						 
				 
			
				
					
						
							
							
								jc21 
							
						 
					 
					
						
						
							
						
						09d1d3744c 
					 
					
						
						
							
							Merge pull request  #2530  from jmerdich/jmerdich/fix-acl-edit-ssl  
						
						
						
						
					 
					
						2023-03-08 21:08:52 +10:00 
						 
				 
			
				
					
						
							
							
								jc21 
							
						 
					 
					
						
						
							
						
						84e0b30f8d 
					 
					
						
						
							
							Merge pull request  #2411  from plantysnake/fix-certbot-plugins  
						
						... 
						
						
						
						Bugfix: Fix certbot plugin installation issues 
						
						
					 
					
						2023-03-08 20:40:15 +10:00 
						 
				 
			
				
					
						
							
							
								jc21 
							
						 
					 
					
						
						
							
						
						30076a0e66 
					 
					
						
						
							
							Merge pull request  #2635  from skarlcf/security/CVE-2023-23596  
						
						... 
						
						
						
						Mitigate CVE-2023-23596 
						
						
					 
					
						2023-03-08 08:25:38 +10:00 
						 
				 
			
				
					
						
							
							
								jc21 
							
						 
					 
					
						
						
							
						
						42bd39163a 
					 
					
						
						
							
							Merge pull request  #2638  from jlesage/case-insensitive-email-login  
						
						... 
						
						
						
						Make sure to lowercase email address entered by the user during login. 
						
						
					 
					
						2023-03-08 08:25:09 +10:00 
						 
				 
			
				
					
						
							
							
								Kamil Skrzypinski 
							
						 
					 
					
						
						
							
						
						2ff66ee238 
					 
					
						
						
							
							Add style required by linter  
						
						
						
						
					 
					
						2023-03-07 17:15:03 +01:00 
						 
				 
			
				
					
						
							
							
								dependabot[bot] 
							
						 
					 
					
						
						
							
						
						7b48488c29 
					 
					
						
						
							
							Bump express from 4.17.1 to 4.17.3 in /backend  
						
						... 
						
						
						
						Bumps [express](https://github.com/expressjs/express ) from 4.17.1 to 4.17.3.
- [Release notes](https://github.com/expressjs/express/releases )
- [Changelog](https://github.com/expressjs/express/blob/master/History.md )
- [Commits](https://github.com/expressjs/express/compare/4.17.1...4.17.3 )
---
updated-dependencies:
- dependency-name: express
  dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com > 
						
						
					 
					
						2023-03-07 10:49:22 +00:00 
						 
				 
			
				
					
						
							
							
								jc21 
							
						 
					 
					
						
						
							
						
						edba369ae8 
					 
					
						
						
							
							Merge pull request  #2497  from NginxProxyManager/dependabot/npm_and_yarn/backend/jsonwebtoken-9.0.0  
						
						... 
						
						
						
						Bump jsonwebtoken from 8.5.1 to 9.0.0 in /backend 
						
						
					 
					
						2023-03-07 20:48:45 +10:00 
						 
				 
			
				
					
						
							
							
								jc21 
							
						 
					 
					
						
						
							
						
						b77d916bdd 
					 
					
						
						
							
							Merge pull request  #2498  from NginxProxyManager/dependabot/npm_and_yarn/backend/liquidjs-10.0.0  
						
						... 
						
						
						
						Bump liquidjs from 9.15.0 to 10.0.0 in /backend 
						
						
					 
					
						2023-03-07 20:48:36 +10:00 
						 
				 
			
				
					
						
							
							
								dependabot[bot] 
							
						 
					 
					
						
						
							
						
						e227f4177b 
					 
					
						
						
							
							Bump minimist from 1.2.5 to 1.2.8 in /backend  
						
						... 
						
						
						
						Bumps [minimist](https://github.com/minimistjs/minimist ) from 1.2.5 to 1.2.8.
- [Release notes](https://github.com/minimistjs/minimist/releases )
- [Changelog](https://github.com/minimistjs/minimist/blob/main/CHANGELOG.md )
- [Commits](https://github.com/minimistjs/minimist/compare/v1.2.5...v1.2.8 )
---
updated-dependencies:
- dependency-name: minimist
  dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com > 
						
						
					 
					
						2023-03-07 06:51:09 +00:00 
						 
				 
			
				
					
						
							
							
								dependabot[bot] 
							
						 
					 
					
						
						
							
						
						88fa7cdfff 
					 
					
						
						
							
							Bump liquidjs from 9.15.0 to 10.0.0 in /backend  
						
						... 
						
						
						
						Bumps [liquidjs](https://github.com/harttle/liquidjs ) from 9.15.0 to 10.0.0.
- [Release notes](https://github.com/harttle/liquidjs/releases )
- [Changelog](https://github.com/harttle/liquidjs/blob/master/CHANGELOG.md )
- [Commits](https://github.com/harttle/liquidjs/compare/v9.15.0...v10.0.0 )
---
updated-dependencies:
- dependency-name: liquidjs
  dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com > 
						
						
					 
					
						2023-03-07 06:51:08 +00:00 
						 
				 
			
				
					
						
							
							
								dependabot[bot] 
							
						 
					 
					
						
						
							
						
						cf6cc7dcc5 
					 
					
						
						
							
							Bump jsonwebtoken from 8.5.1 to 9.0.0 in /backend  
						
						... 
						
						
						
						Bumps [jsonwebtoken](https://github.com/auth0/node-jsonwebtoken ) from 8.5.1 to 9.0.0.
- [Release notes](https://github.com/auth0/node-jsonwebtoken/releases )
- [Changelog](https://github.com/auth0/node-jsonwebtoken/blob/master/CHANGELOG.md )
- [Commits](https://github.com/auth0/node-jsonwebtoken/compare/v8.5.1...v9.0.0 )
---
updated-dependencies:
- dependency-name: jsonwebtoken
  dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com > 
						
						
					 
					
						2023-03-07 06:50:55 +00:00 
						 
				 
			
				
					
						
							
							
								jc21 
							
						 
					 
					
						
						
							
						
						448c8a2dd5 
					 
					
						
						
							
							Merge pull request  #2523  from NginxProxyManager/dependabot/npm_and_yarn/backend/json5-2.2.3  
						
						... 
						
						
						
						Bump json5 from 2.1.3 to 2.2.3 in /backend 
						
						
					 
					
						2023-03-07 16:50:37 +10:00 
						 
				 
			
				
					
						
							
							
								jc21 
							
						 
					 
					
						
						
							
						
						634cfe13f1 
					 
					
						
						
							
							Merge pull request  #2534  from NginxProxyManager/dependabot/npm_and_yarn/backend/knex-2.4.0  
						
						... 
						
						
						
						Bump knex from 0.20.15 to 2.4.0 in /backend 
						
						
					 
					
						2023-03-07 16:50:30 +10:00 
						 
				 
			
				
					
						
							
							
								Jocelyn Le Sage 
							
						 
					 
					
						
						
							
						
						b0fd976b97 
					 
					
						
						
							
							Make sure to lowercase email address entered by the user during login.  
						
						
						
						
					 
					
						2023-02-26 22:24:58 -05:00 
						 
				 
			
				
					
						
							
							
								Kamil Skrzypinski 
							
						 
					 
					
						
						
							
						
						7fe7e94fbd 
					 
					
						
						
							
							Mitigate CVE-2023-23596 by changing child_process.exec to child_process.execFile  
						
						
						
						
					 
					
						2023-02-26 20:10:25 +01:00 
						 
				 
			
				
					
						
							
							
								dependabot[bot] 
							
						 
					 
					
						
						
							
						
						23326895b2 
					 
					
						
						
							
							Bump http-cache-semantics from 4.1.0 to 4.1.1 in /backend  
						
						... 
						
						
						
						Bumps [http-cache-semantics](https://github.com/kornelski/http-cache-semantics ) from 4.1.0 to 4.1.1.
- [Release notes](https://github.com/kornelski/http-cache-semantics/releases )
- [Commits](https://github.com/kornelski/http-cache-semantics/compare/v4.1.0...v4.1.1 )
---
updated-dependencies:
- dependency-name: http-cache-semantics
  dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com > 
						
						
					 
					
						2023-02-03 12:12:01 +00:00 
						 
				 
			
				
					
						
							
							
								dependabot[bot] 
							
						 
					 
					
						
						
							
						
						7ca3a9e7a6 
					 
					
						
						
							
							Bump knex from 0.20.15 to 2.4.0 in /backend  
						
						... 
						
						
						
						Bumps [knex](https://github.com/knex/knex ) from 0.20.15 to 2.4.0.
- [Release notes](https://github.com/knex/knex/releases )
- [Changelog](https://github.com/knex/knex/blob/master/CHANGELOG.md )
- [Commits](https://github.com/knex/knex/compare/0.20.15...2.4.0 )
---
updated-dependencies:
- dependency-name: knex
  dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com > 
						
						
					 
					
						2023-01-11 02:35:51 +00:00 
						 
				 
			
				
					
						
							
							
								Jake Merdich 
							
						 
					 
					
						
						
							
						
						c80d099193 
					 
					
						
						
							
							ACL changes should not blow away cert config  
						
						... 
						
						
						
						When editing an access list, all affected sites get their config updated without certificates, functionally breaking https on those sites until they get a manual config change that rewrites the config properly. Properly fetch the certificate from the DB before `bulkGenerateConfigs` so it gets updated right.
I am not certain whether there are similar bugs in other places that use `bulkGenerateConfigs`.
Should fix  #2254  
						
						
					 
					
						2023-01-10 01:59:04 -05:00 
						 
				 
			
				
					
						
							
							
								dependabot[bot] 
							
						 
					 
					
						
						
							
						
						b69e493c54 
					 
					
						
						
							
							Bump json5 from 2.1.3 to 2.2.3 in /backend  
						
						... 
						
						
						
						Bumps [json5](https://github.com/json5/json5 ) from 2.1.3 to 2.2.3.
- [Release notes](https://github.com/json5/json5/releases )
- [Changelog](https://github.com/json5/json5/blob/main/CHANGELOG.md )
- [Commits](https://github.com/json5/json5/compare/v2.1.3...v2.2.3 )
---
updated-dependencies:
- dependency-name: json5
  dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com > 
						
						
					 
					
						2023-01-06 02:33:27 +00:00 
						 
				 
			
				
					
						
							
							
								plantysnake 
							
						 
					 
					
						
						
							
						
						8dee139810 
					 
					
						
						
							
							Fix linter issues  
						
						
						
						
					 
					
						2022-11-21 01:46:42 +03:00 
						 
				 
			
				
					
						
							
							
								plantysnake 
							
						 
					 
					
						
						
							
						
						6349cb6094 
					 
					
						
						
							
							Fix cerbot plugin installation issues  
						
						
						
						
					 
					
						2022-11-18 15:06:19 +03:00 
						 
				 
			
				
					
						
							
							
								Jamie Curnow 
							
						 
					 
					
						
						
							
						
						fd30cfe98b 
					 
					
						
						
							
							Fix linting  
						
						
						
						
					 
					
						2022-11-15 07:54:48 +10:00 
						 
				 
			
				
					
						
							
							
								Jamie Curnow 
							
						 
					 
					
						
						
							
						
						6f281fef42 
					 
					
						
						
							
							Workaround for cloudflare plugin install ( #2381 )  
						
						
						
						
					 
					
						2022-11-15 07:48:57 +10:00 
						 
				 
			
				
					
						
							
							
								jc21 
							
						 
					 
					
						
						
							
						
						b673ebe2ca 
					 
					
						
						
							
							Merge pull request  #2126  from NginxProxyManager/dependabot/npm_and_yarn/backend/async-3.2.4  
						
						... 
						
						
						
						Bump async from 3.2.1 to 3.2.4 in /backend 
						
						
					 
					
						2022-08-23 20:44:21 +10:00 
						 
				 
			
				
					
						
							
							
								dependabot[bot] 
							
						 
					 
					
						
						
							
						
						e5966b54a8 
					 
					
						
						
							
							Bump moment from 2.27.0 to 2.29.4 in /backend  
						
						... 
						
						
						
						Bumps [moment](https://github.com/moment/moment ) from 2.27.0 to 2.29.4.
- [Release notes](https://github.com/moment/moment/releases )
- [Changelog](https://github.com/moment/moment/blob/develop/CHANGELOG.md )
- [Commits](https://github.com/moment/moment/compare/2.27.0...2.29.4 )
---
updated-dependencies:
- dependency-name: moment
  dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com > 
						
						
					 
					
						2022-07-07 16:43:24 +00:00 
						 
				 
			
				
					
						
							
							
								dependabot[bot] 
							
						 
					 
					
						
						
							
						
						1e5916db28 
					 
					
						
						
							
							Bump async from 3.2.1 to 3.2.4 in /backend  
						
						... 
						
						
						
						Bumps [async](https://github.com/caolan/async ) from 3.2.1 to 3.2.4.
- [Release notes](https://github.com/caolan/async/releases )
- [Changelog](https://github.com/caolan/async/blob/master/CHANGELOG.md )
- [Commits](https://github.com/caolan/async/compare/v3.2.1...v3.2.4 )
---
updated-dependencies:
- dependency-name: async
  dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com > 
						
						
					 
					
						2022-06-22 17:38:17 +00:00 
						 
				 
			
				
					
						
							
							
								Ivan Kristianto 
							
						 
					 
					
						
						
							
						
						366fcf0bed 
					 
					
						
						
							
							Fix nginx/certificates search query  
						
						
						
						
					 
					
						2022-02-12 12:46:06 +07:00 
						 
				 
			
				
					
						
							
							
								jc21 
							
						 
					 
					
						
						
							
						
						d7e0ae0fa0 
					 
					
						
						
							
							Merge pull request  #1701  from jc21/escape-credential-backslashes  
						
						... 
						
						
						
						Correctly escape backslashes in dns plugin credentials 
						
						
					 
					
						2022-01-02 15:29:31 +10:00 
						 
				 
			
				
					
						
							
							
								jc21 
							
						 
					 
					
						
						
							
						
						29ee48530c 
					 
					
						
						
							
							Merge pull request  #1703  from luoweihua7/develop  
						
						... 
						
						
						
						fetch cloudflare ipv4/ipv6 fail #1405  
						
						
					 
					
						2022-01-02 15:28:58 +10:00 
						 
				 
			
				
					
						
							
							
								chaptergy 
							
						 
					 
					
						
						
							
						
						c803ec7e26 
					 
					
						
						
							
							Adds delay after reloading nginx before requesting ssl certificate using http challenge  
						
						
						
						
					 
					
						2021-12-30 13:21:21 +01:00 
						 
				 
			
				
					
						
							
							
								Larify 
							
						 
					 
					
						
						
							
						
						7e67f33766 
					 
					
						
						
							
							fetch cloudflare ipv4/ipv6 fail  #1405  
						
						
						
						
					 
					
						2021-12-30 11:50:21 +08:00 
						 
				 
			
				
					
						
							
							
								chaptergy 
							
						 
					 
					
						
						
							
						
						9dd5644183 
					 
					
						
						
							
							Correctly escape backslashes in dns plugin credentials  
						
						
						
						
					 
					
						2021-12-29 16:30:49 +01:00 
						 
				 
			
				
					
						
							
							
								jc21 
							
						 
					 
					
						
						
							
						
						adc5a2020a 
					 
					
						
						
							
							Merge pull request  #1666  from TobiasKneidl/patch-1  
						
						... 
						
						
						
						Update default.conf to follow the default site setting also for ipv6 
						
						
					 
					
						2021-12-27 11:03:14 +10:00 
						 
				 
			
				
					
						
							
							
								Tobias Kneidl 
							
						 
					 
					
						
						
							
						
						bb422d4454 
					 
					
						
						
							
							Update default.conf  
						
						
						
						
					 
					
						2021-12-22 00:24:05 +01:00 
						 
				 
			
				
					
						
							
							
								jc21 
							
						 
					 
					
						
						
							
						
						d45f39aae3 
					 
					
						
						
							
							Merge pull request  #1538  from jc21/adds-http-challenge-test  
						
						... 
						
						
						
						Adds buttons to test availability of server from public internet 
						
						
					 
					
						2021-11-10 09:15:26 +10:00 
						 
				 
			
				
					
						
							
							
								chaptergy 
							
						 
					 
					
						
						
							
						
						ddd538944a 
					 
					
						
						
							
							Skip migration if setting does not exist  
						
						
						
						
					 
					
						2021-11-09 14:03:39 +01:00 
						 
				 
			
				
					
						
							
							
								chaptergy 
							
						 
					 
					
						
						
							
						
						1f879f67a9 
					 
					
						
						
							
							Reverts back to proxy_pass without variables  
						
						
						
						
					 
					
						2021-11-09 13:57:39 +01:00 
						 
				 
			
				
					
						
							
							
								Chaptergy 
							
						 
					 
					
						
						
							
						
						ee89dedd0f 
					 
					
						
						
							
							Adds migration to regenerate default host  
						
						
						
						
					 
					
						2021-11-08 23:11:56 +01:00 
						 
				 
			
				
					
						
							
							
								jc21 
							
						 
					 
					
						
						
							
						
						432062e0f4 
					 
					
						
						
							
							Merge pull request  #1559  from jc21/variable-fix-custom-locations  
						
						... 
						
						
						
						Fixes custom location with capture groups 
						
						
					 
					
						2021-11-08 12:29:43 +10:00 
						 
				 
			
				
					
						
							
							
								jc21 
							
						 
					 
					
						
						
							
						
						48e96c46d5 
					 
					
						
						
							
							Merge pull request  #1565  from jc21/removes-hsts-from-admin-ui  
						
						... 
						
						
						
						Removes HSTS from admin ui 
						
						
					 
					
						2021-11-08 12:27:36 +10:00 
						 
				 
			
				
					
						
							
							
								jc21 
							
						 
					 
					
						
						
							
						
						25e9acf618 
					 
					
						
						
							
							Merge pull request  #1566  from jc21/cleans-dependencies  
						
						... 
						
						
						
						Removes unused dependencies 
						
						
					 
					
						2021-11-08 12:27:04 +10:00 
						 
				 
			
				
					
						
							
							
								jc21 
							
						 
					 
					
						
						
							
						
						a517e80236 
					 
					
						
						
							
							Merge pull request  #1567  from jc21/removes-renew-delay  
						
						... 
						
						
						
						Removes random delay when renewing certificates with the renew now button 
						
						
					 
					
						2021-11-08 12:26:34 +10:00 
						 
				 
			
				
					
						
							
							
								Julian Reinhardt 
							
						 
					 
					
						
						
							
						
						cf4d1f73fa 
					 
					
						
						
							
							Uses letsencrypt config file everywhere  
						
						
						
						
					 
					
						2021-11-06 22:31:13 +01:00 
						 
				 
			
				
					
						
							
							
								Julian Reinhardt 
							
						 
					 
					
						
						
							
						
						c203d1a0d8 
					 
					
						
						
							
							Requires ~() in location to remove $request_uri and removes $request_uri if it is just a slash  
						
						
						
						
					 
					
						2021-11-06 13:38:02 +01:00