Commit Graph

267 Commits

Author SHA1 Message Date
Zoey
efcca74d67 fix security headers and sockets
Signed-off-by: Zoey <zoey@z0ey.de>
2023-10-10 19:55:42 +02:00
Zoey
dec9dc990f renewer certbot certs after launch/load env from file/listen on socket/disable http in AIO mode
Signed-off-by: Zoey <zoey@z0ey.de>
2023-10-10 15:52:14 +02:00
Zoey
fb0bb721f7 rebrand to NPMplus/improve security headers/upsteam changes/dockerlint
Signed-off-by: Zoey <zoey@z0ey.de>
2023-10-09 20:32:37 +02:00
renovate[bot]
6e62aa2ea1 dep updates/merge #3190 from upstream/fix #407
Signed-off-by: Zoey <zoey@z0ey.de>
2023-09-25 22:03:10 +02:00
Zoey
c943ccdd87 fix latest release
Signed-off-by: Zoey <zoey@z0ey.de>
2023-09-02 13:26:56 +02:00
GitHub
55b173a744 fix certbot run on launch/dep updates
Signed-off-by: Zoey <zoey@z0ey.de>

Update dependency jsonwebtoken to v9.0.2
Update dependency liquidjs to v10.9.2
Update dependency jquery to v3.7.1
2023-09-02 13:04:35 +02:00
renovate[bot]
f9971aa9d5 remove wait/dep updates
Update zoeyvid/nginx-quic Docker tag to v183
Update caddy Docker tag to v2.7.4

Update dependency archiver to v5.3.2

Update python Docker tag to v3.11.5

Update dependency eslint to v8.48.0

remove wait

Signed-off-by: Zoey <zoey@z0ey.de>

Update dependency @babel/core to v7.22.11

Update dependency liquidjs to v10.9.1

Update dependency liquidjs to v10.9.0

Update dependency archiver to v6
2023-08-26 13:14:13 +02:00
renovate[bot]
390b58d0ef caddy/bcrypt/nginx update
Update caddy Docker tag to v2.7.3
Update dependency bcrypt to v5.1.1
Update zoeyvid/nginx-quic Docker tag to v181
2023-08-16 13:34:28 +02:00
renovate[bot]
e8fe12ae91 dep updates
Update zoeyvid/nginx-quic Docker tag to v180
Update dependency @babel/core to v7.22.10
Update dependency eslint to v8.47.0
Update alpine Docker tag to v3.18.3
2023-08-12 22:09:28 +02:00
Zoey
f3775aad21 merge upstream
Signed-off-by: Zoey <zoey@z0ey.de>
2023-08-02 15:02:30 +02:00
Zoey
da025cedaa Merge branch 'develop-o' into develop 2023-08-02 10:40:13 +02:00
renovate[bot]
66bfcf8f6c improve many things/dep updates
Signed-off-by: Zoey <zoey@z0ey.de>
2023-08-02 10:26:01 +02:00
jc21
3333a32612 Merge pull request #2971 from wolviex/certbot-dnsplugin-user-site-fix
drop --user on pip install dns plugin
2023-07-31 07:21:18 +10:00
jc21
f38cb5b500 Merge pull request #2942 from wrouesnel/444_default_support
Add support for nginx 444 default response
2023-07-20 12:23:57 +10:00
jc21
a984a68065 Merge pull request #3051 from NginxProxyManager/dependabot/npm_and_yarn/backend/semver-5.7.2
Bump semver from 5.7.1 to 5.7.2 in /backend
2023-07-19 10:02:04 +10:00
dependabot[bot]
c8caaa56d9 Bump word-wrap from 1.2.3 to 1.2.4 in /backend
Bumps [word-wrap](https://github.com/jonschlinkert/word-wrap) from 1.2.3 to 1.2.4.
- [Release notes](https://github.com/jonschlinkert/word-wrap/releases)
- [Commits](https://github.com/jonschlinkert/word-wrap/compare/1.2.3...1.2.4)

---
updated-dependencies:
- dependency-name: word-wrap
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-07-18 20:59:11 +00:00
dependabot[bot]
f458730d87 Bump semver from 5.7.1 to 5.7.2 in /backend
Bumps [semver](https://github.com/npm/node-semver) from 5.7.1 to 5.7.2.
- [Release notes](https://github.com/npm/node-semver/releases)
- [Changelog](https://github.com/npm/node-semver/blob/v5.7.2/CHANGELOG.md)
- [Commits](https://github.com/npm/node-semver/compare/v5.7.1...v5.7.2)

---
updated-dependencies:
- dependency-name: semver
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-07-11 02:29:25 +00:00
renovate[bot]
c6ecb61c9b dep updates/enable ssl_dyn_rec_enable/fix nginx in background/remove tempwrite
Signed-off-by: Zoey <zoey@z0ey.de>
2023-07-08 20:22:17 +02:00
renovate[bot]
cd058f1382 dep updates/nginxbeautifier/fix quic/http3
Signed-off-by: Zoey <zoey@z0ey.de>
2023-06-15 22:27:17 +02:00
Joe Manifold
f39e527680 drop --user on pip install dns plugin godaddy
Do not install dns_plugin into the user site because it will lack sys.path precedence to urllib3 in /opt/certbot/lib/python3.7/site-packages
2023-06-01 11:02:06 -07:00
Zoey
cabf78faa8 support connection drop
Inspired by #2942 (original NPM)
2023-05-30 18:29:13 +02:00
Zoey
677b30d25e add new darkmode/enable hide_server_tokens/dep updates
Signed-off-by: Zoey <zoey@z0ey.de>
Signed-off-by: ƬHE ЯAW ☣ <daraw665@gmail.com>
Co-Authored-By: ƬHE ЯAW ☣ <raw@dopehosting.net>
2023-05-29 21:00:49 +02:00
Zoey
7e6612467f add modsec
Signed-off-by: Zoey <zoey@z0ey.de>

Update Dockerfile
2023-05-29 20:45:08 +02:00
Will Rouesnel
2dd4434ceb Add support for nginx 444 default response
The default nginx 444 response drops the inbound connection without
sending any response to the client.
2023-05-22 11:59:50 +10:00
Jamie Curnow
05307aa253 Fix certbot plugins install when using PUID/PGID 2023-05-10 14:39:08 +10:00
Zoey
57abc84f4a "new" versioning system/dep updates
Update zoeyvid/nginx-quic Docker tag to v114
Signed-off-by: Zoey <zoey@z0ey.de>
2023-05-08 23:01:56 +02:00
renovate[bot]
24db873c34 fix access list/dep updates
Update dependency @babel/core to v7.21.5
2023-04-30 15:04:07 +02:00
Zoey
9ca59b9a38 allow to run as non-root (#246)
Signed-off-by: Zoey <zoey@z0ey.de>
2023-04-24 23:12:44 +02:00
renovate[bot]
ec29d4ce8d dep updates/remove useless files/fix reachability test?
Update zoeyvid/nginx-quic Docker tag to v110
Update zoeyvid/nginx-quic Docker tag to v109
Update zoeyvid/nginx-quic Docker tag to v107
Update dependency liquidjs to v10.7.1
Update dependency eslint to v8.38.0
remove empty folder
Delete Hosts.spec.js

Fix for SSL certificate error #2011 by @S-T-3-V-3
 - Keepalive, User Agent + Accept headers
 - Catch added for failed JSON parsing
 - More accurate errors displayed to user

Signed-off-by: Zoey <zoey@z0ey.de>
2023-04-24 23:12:43 +02:00
Zoey
0d9da2b72a merge upstream 2023-04-06 19:07:38 +02:00
Zoey
395909c5cd Merge branch 'developo' into develop 2023-04-06 18:04:57 +02:00
renovate[bot]
80d49cd2a2 dep updates/fix quic
Update zoeyvid/nginx-quic Docker tag to v103
Update zoeyvid/nginx-quic Docker tag to v101
Update zoeyvid/nginx-quic Docker tag to v99
Update zoeyvid/nginx-quic Docker tag to v97
Update zoeyvid/nginx-quic Docker tag to v96
Update dependency @babel/core to v7.21.4
Update dependency nodemon to v2.0.22
Update dependency eslint to v8.37.0
Update alpine Docker tag to v3.17.3
Signed-off-by: Zoey <zoey@z0ey.de>
2023-04-04 11:47:50 +02:00
Jamie Curnow
5d03ede100 Add test for creating a host 2023-03-30 12:44:28 +10:00
Zoey
256a068791 merge upstream
Signed-off-by: Zoey <zoey@z0ey.de>
2023-03-22 12:30:58 +01:00
Jamie Curnow
124cb18e17 Fix renewing certs because of permission errors 2023-03-22 13:40:36 +10:00
Jamie Curnow
77eb618758 Fix pip installs running as non-root user 2023-03-22 09:41:59 +10:00
Jamie Curnow
4fdc80be01 Fix logical error with keys and mysql config 2023-03-21 17:59:27 +10:00
Jamie Curnow
c3469de61b Linting fixes 2023-03-21 17:11:16 +10:00
Jamie Curnow
2a07445005 Refactor configuration
- No longer use config npm package
- Prefer config from env vars, though still has support for config file
- No longer writes a config file for database config
- Writes keys to a new file in /data folder
- Removes a lot of cruft and improves config understanding
2023-03-21 16:53:39 +10:00
Jamie Curnow
dad3e1da7c Adds support to run processes as a user/group, defined
with PUID and PGID environment variables

- Detects if image is run with a user in docker command and fails if so
- Adds s6 prepare scripts for adding a 'npmuser'
- Split up and refactor the s6 prepare scripts
- Runs nginx and backend node as 'npmuser'
- Changes ownership of files required at startup
2023-03-20 16:56:52 +10:00
Zoey
1d9c7b0570 Merge branch 'developo' into develop 2023-03-18 11:30:42 +01:00
Zoey
4af50b7ef5 build everything inside dockerfile/add some scripts
Signed-off-by: Zoey <zoey@z0ey.de>
2023-03-18 03:14:56 +01:00
Jamie Curnow
fccbde1371 fix linting 2023-03-17 14:23:12 +10:00
Jamie Curnow
fec36834f7 - Updated objection, knex, liquidjs, signale and sqlite3 packages
- Changes for objection migration
- Moved common access template code to an include
- Fixed access rules configuration generation
2023-03-17 14:18:51 +10:00
Jamie Curnow
00aeef75b6 Refactor nginx config functions, some don't need to report errors, save error'd config files as .err for debugging later 2023-03-17 11:34:27 +10:00
Jamie Curnow
b30fcb50c8 Args weren't being passed to htpasswd command, fixes #2692 2023-03-17 08:49:18 +10:00
Zoey
bdae896baf rename ssl to tls/dep updates
Signed-off-by: Zoey <zoey@z0ey.de>
Update dependency sqlite3 to v5.1.6
Update dependency style-loader to v3.3.2
Update dependency @babel/core to v7.21.3
2023-03-15 18:41:19 +01:00
Zoey
7c32b466f6 docker hub changes/disable 0-rtt/enable request limits
Signed-off-by: Zoey <zoey@z0ey.de>
2023-03-13 20:55:53 +01:00
Zoey
309e81747e upstream changes (npm/nginx/dependencies) + add eslint
Signed-off-by: Zoey <zoey@z0ey.de>
2023-03-09 20:57:13 +01:00
jc21
09d1d3744c Merge pull request #2530 from jmerdich/jmerdich/fix-acl-edit-ssl 2023-03-08 21:08:52 +10:00