2305 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
Matthew Holt	0badb071ef	httpcaddyfile: Fix generated config related to ACME global options ... If global DNS provider is configured, it does not need to be repeated in the JSON. If acme_* options are used, base automation policies should populate their issuers accordingly. Global issuer settings like acme_* options don't need to specify subjects in the automation policy since they should apply as a global default.	2025-08-04 16:22:25 -06:00
joshuamcbeth	e4447c4ba7	core: Use KeepAliveConfig to pass keepalive_interval to listener's accepted sockets (#7151) ... Fix #7144	2025-08-02 09:43:34 -06:00
dependabot[bot]	5bc2afbbb6	build(deps): bump the actions-deps group with 6 updates (#7142) ... Bumps the actions-deps group with 6 updates: | Package | From | To | | --- | --- | --- | | [step-security/harden-runner](https://github.com/step-security/harden-runner) | `2.12.1` | `2.13.0` | | [actions/upload-artifact](https://github.com/actions/upload-artifact) | `4.6.1` | `4.6.2` | | [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer) | `e9a05e6d32d7ed22b5656cd874ef31af58d05bfa` | `d58896d6a1865668819e1d91763c7751a165e159` | | [anchore/sbom-action](https://github.com/anchore/sbom-action) | `0.20.1` | `0.20.4` | | [ossf/scorecard-action](https://github.com/ossf/scorecard-action) | `2.4.1` | `2.4.2` | | [github/codeql-action](https://github.com/github/codeql-action) | `3.29.0` | `3.29.4` | Updates `step-security/harden-runner` from 2.12.1 to 2.13.0 - [Release notes](https://github.com/step-security/harden-runner/releases) - [Commits](002fdce3c6...ec9f2d5744) Updates `actions/upload-artifact` from 4.6.1 to 4.6.2 - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](https://github.com/actions/upload-artifact/compare/v4.6.1...ea165f8d65b6e75b540449e92b4886f43607fa02) Updates `sigstore/cosign-installer` from e9a05e6d32d7ed22b5656cd874ef31af58d05bfa to d58896d6a1865668819e1d91763c7751a165e159 - [Release notes](https://github.com/sigstore/cosign-installer/releases) - [Commits](e9a05e6d32...d58896d6a1) Updates `anchore/sbom-action` from 0.20.1 to 0.20.4 - [Release notes](https://github.com/anchore/sbom-action/releases) - [Changelog](https://github.com/anchore/sbom-action/blob/main/RELEASE.md) - [Commits](9246b90769...7b36ad622f) Updates `ossf/scorecard-action` from 2.4.1 to 2.4.2 - [Release notes](https://github.com/ossf/scorecard-action/releases) - [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md) - [Commits](f49aabe0b5...05b42c6244) Updates `github/codeql-action` from 3.29.0 to 3.29.4 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](ce28f5bb42...4e828ff8d4) --- updated-dependencies: - dependency-name: step-security/harden-runner dependency-version: 2.13.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions-deps - dependency-name: actions/upload-artifact dependency-version: 4.6.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions-deps - dependency-name: sigstore/cosign-installer dependency-version: d58896d6a1865668819e1d91763c7751a165e159 dependency-type: direct:production dependency-group: actions-deps - dependency-name: anchore/sbom-action dependency-version: 0.20.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions-deps - dependency-name: ossf/scorecard-action dependency-version: 2.4.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions-deps - dependency-name: github/codeql-action dependency-version: 3.29.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions-deps ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2025-08-01 04:34:14 +03:00
Matthew Holt	4fd2acb5c9	Add test for 5b727bde2992e7cb9987208453db42ae6e1c6e1e	2025-07-30 14:43:20 -06:00
Matthew Holt	3bd413546b	go.mod: Upgrade dependencies	2025-07-29 11:59:43 -06:00
Matthew Holt	5b727bde29	httpcaddyfile: Allow naked acme_dns if dns is set (fix #7091)	2025-07-29 11:56:09 -06:00
Alexandre Daubois	fe41ff3c5b	core: Save app provisioning errors with context (#7070) ... * fix(provisioning): remove app from apps map when its provision failed * Clean up failed app provisioning with defer * fix(provisioning): record apps that failed to provision with their error * save the error when an app fails to initialize and return this error when this app is requested by a module --------- Co-authored-by: Matt Holt <mholt@users.noreply.github.com> Co-authored-by: WeidiDeng <weidi_deng@icloud.com>	2025-07-29 10:31:13 -06:00
Mohammed Al Sahaf	b7ae39e906	ci: reduce dependabot spam (#7078) ... * ci: reduce dependabot spam Signed-off-by: Mohammed Al Sahaf <msaa1990@gmail.com> * group actions deps Signed-off-by: Mohammed Al Sahaf <msaa1990@gmail.com> --------- Signed-off-by: Mohammed Al Sahaf <msaa1990@gmail.com>	2025-07-24 16:40:00 -06:00
minxinyi	ab3b2d64ba	refactor: use slices.Equal to simplify code (#7141) ... Signed-off-by: minxinyi <minxinyi6@outlook.com>	2025-07-23 14:07:46 +00:00
Ping Shuijie	6de2c9e135	chore: fix minor issue in comment (#7140) ... Signed-off-by: pingshuijie <pingshuijie@outlook.com>	2025-07-22 11:27:36 +00:00
Marten Seemann	8ba7eefd07	update quic-go to v0.54.0 (#7138)	2025-07-20 17:40:45 -04:00
emmmm	291987ac23	chore: fix dead link (#7136) ... * fix dead link * Update cmd/commands.go Co-authored-by: Mohammed Al Sahaf <mohammed@caffeinatedwonders.com> --------- Co-authored-by: Mohammed Al Sahaf <mohammed@caffeinatedwonders.com>	2025-07-20 12:52:28 +00:00
Cédric Félizard	790f3e0885	fileserver: denote license for embedded JavaScript for LibreJS (#7127) ... This commit adds support for LibreJS (https://en.wikipedia.org/wiki/GNU_LibreJS). LibreJS would block this embedded JavaScript because its license is not stated in a machine-readable format. Signed-off-by: Cédric Félizard <cedric@felizard.fr>	2025-07-16 11:49:49 -06:00
Zongze Wu	bbf1dfcea2	headers: Support placeholders in replacement search patterns (#7117) ... * fix: resolve http.request placeholders in header directive find operation - Skip regex compilation during provision when placeholders are detected - Compile regex at runtime after placeholder replacement - Preserves performance for static regexes while enabling dynamic placeholders - Fixes #7109 * test: add tests for placeholder detection in header replacements - Test containsPlaceholders function edge cases - Test provision skips compilation for dynamic regexes - Test end-to-end placeholder replacement functionality	2025-07-14 14:55:00 -06:00
bytesingsong	aff88d4b26	chore: fix function in comment (#7121) ... Signed-off-by: bytesingsong <bytesing@icloud.com>	2025-07-12 11:54:57 +00:00
WeidiDeng	1209b5c566	reverseproxy: validate versions in http transport (#7112)	2025-07-09 14:13:27 -06:00
bytetigers	a067fb1760	chore: fix struct name in comment (#7114) ... Signed-off-by: bytetigers <bytetiger@icloud.com>	2025-07-08 08:00:58 +00:00
Francis Lavoie	77dd12cc78	httpcaddyfile: Validates TLS DNS challenge options (#7099) ... * httpcaddyfile: Validates TLS DNS challenge options Adds validation to the TLS Caddyfile adapter to ensure that when DNS challenge options (such as propagation_delay or dns_ttl) are specified, a DNS provider is also configured. Adds new integration tests to verify this validation logic, and implements a new mechanism for adapt tests to assert a config adapt error. * Add some more AI-generated tests asserting config errors * Parallel doesn't work here, we use global variables * Windows fix	2025-06-30 23:58:16 +00:00
mountdisk	c712cfcd76	docs: fix some minor issues in the comments (#7101)	2025-06-30 06:50:00 +00:00
gopherorg	33c88bd2bb	refactor: replace HasPrefix+TrimPrefix with CutPrefix (#7095) ... Signed-off-by: gopherorg <gopherworld@icloud.com>	2025-06-27 22:04:09 +03:00
Marten Seemann	11c6daecd7	go.mod: update quic-go to v0.53.0 (#7094)	2025-06-26 10:13:08 -06:00
filipRatajczak	3b4d966fba	fileserver: Add sort buttons in grid mode (#7089) ... * [ADD] sort buttons in grid mode * [CHANGE] replace spaces with tabs	2025-06-23 13:26:45 -06:00
曹家巧	070d454c0d	Use the built-in max/min to simplify the code (#7081) ... Signed-off-by: xiaoxiangirl <caojiaqiao@outlook.com>	2025-06-19 16:39:48 -06:00
Mohammed Al Sahaf	2f0fc62b34	chore: apply security best practices for CI (#7066) ... * chore: apply security best practices for CI Signed-off-by: Mohammed Al Sahaf <msaa1990@gmail.com> * remove redundant codeql job Signed-off-by: Mohammed Al Sahaf <msaa1990@gmail.com> * run scorecard flow on PRs Signed-off-by: Mohammed Al Sahaf <msaa1990@gmail.com> --------- Signed-off-by: Mohammed Al Sahaf <msaa1990@gmail.com>	2025-06-16 20:14:09 +00:00
WeidiDeng	3d0b4fac5a	core: Clean up new config if it failed to run (#7068)	2025-06-16 13:15:41 -06:00
Mohammed Al Sahaf	1a0f168b6e	ci: add {base,head}-ref to dep review check (#7064) ... Signed-off-by: Mohammed Al Sahaf <msaa1990@gmail.com>	2025-06-13 08:13:17 +03:00
Mohammed Al Sahaf	7a33f481f1	ci: add dep review, OSSF scorecard actions (#7063) ... * ci: add dep review action Signed-off-by: Mohammed Al Sahaf <msaa1990@gmail.com> * sprinkle permissions on Actions jobs Signed-off-by: Mohammed Al Sahaf <msaa1990@gmail.com> * README: add OpenSSF best practices badge Signed-off-by: Mohammed Al Sahaf <msaa1990@gmail.com> * add draft OpenSSF Scorecard workflow Signed-off-by: Mohammed Al Sahaf <msaa1990@gmail.com> --------- Signed-off-by: Mohammed Al Sahaf <msaa1990@gmail.com>	2025-06-12 23:40:51 +00:00
Herman Slatman	e633d013f6	cmd: fix Commands function not returning all registered commands (#7059)	2025-06-12 17:17:51 -06:00
Matt Holt	fe26751491	Update SECURITY.md	2025-06-12 09:38:48 -06:00
dependabot[bot]	4b01d77b81	build(deps): bump github.com/cloudflare/circl from 1.6.0 to 1.6.1 (#7058) ... Bumps [github.com/cloudflare/circl](https://github.com/cloudflare/circl) from 1.6.0 to 1.6.1. - [Release notes](https://github.com/cloudflare/circl/releases) - [Commits](https://github.com/cloudflare/circl/compare/v1.6.0...v1.6.1) --- updated-dependencies: - dependency-name: github.com/cloudflare/circl dependency-version: 1.6.1 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2025-06-12 11:44:26 +03:00
Hina🐣 | Developer	0f209f62eb	httpcaddyfile: reject blocks in log_skip directive (#7056)	2025-06-09 21:56:21 -06:00
Mohammed Al Sahaf	1481c0411a	caddytls: wire up client_auth leaf verifier Caddyfile (#6772) ... * client_auth: wire up leaf verifier Caddyfile Signed-off-by: Mohammed Al Sahaf <msaa1990@gmail.com> * review feedback + tests Signed-off-by: Mohammed Al Sahaf <msaa1990@gmail.com> --------- Signed-off-by: Mohammed Al Sahaf <msaa1990@gmail.com>	2025-06-09 08:18:36 -06:00
Youness Farini	092913a7a5	httpcaddyfile: Prevent error handler from overriding sub-handler matchers (#6999) ... Fixes: #6957	2025-06-06 11:46:39 -06:00
Laurin	7099892958	core: Check for nil event origin (#7047) ... * fix: crash - null check on event origin * chore: use accessor instead of property	2025-06-05 19:10:08 +00:00
dependabot[bot]	45c9341deb	build(deps): bump golangci/golangci-lint-action from 6 to 8 (#7044) ... Bumps [golangci/golangci-lint-action](https://github.com/golangci/golangci-lint-action) from 6 to 8. - [Release notes](https://github.com/golangci/golangci-lint-action/releases) - [Commits](https://github.com/golangci/golangci-lint-action/compare/v6...v8) --- updated-dependencies: - dependency-name: golangci/golangci-lint-action dependency-version: '8' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2025-06-03 02:33:40 +03:00
Mohammed Al Sahaf	e039a5bb5c	chore: upgrade .golangci.yml and workflow to v2 (#6924) ... * chore: upgrade .golangci.yml and workflow to v2 run `golangci-lint fmt` Signed-off-by: Mohammed Al Sahaf <msaa1990@gmail.com> * run `golangci-lint run --fix` Signed-off-by: Mohammed Al Sahaf <msaa1990@gmail.com> * more lint fixes Signed-off-by: Mohammed Al Sahaf <msaa1990@gmail.com> * bring back comments to .golangci.yml Signed-off-by: Mohammed Al Sahaf <msaa1990@gmail.com> * appease the linter some more Signed-off-by: Mohammed Al Sahaf <msaa1990@gmail.com> * oops Signed-off-by: Mohammed Al Sahaf <msaa1990@gmail.com> * use embedded structs Signed-off-by: Mohammed Al Sahaf <msaa1990@gmail.com> * use embedded structs where they were used before Signed-off-by: Mohammed Al Sahaf <msaa1990@gmail.com> * disable rule `-QF1006` Signed-off-by: Mohammed Al Sahaf <msaa1990@gmail.com> * missed a spot Signed-off-by: Mohammed Al Sahaf <msaa1990@gmail.com> --------- Signed-off-by: Mohammed Al Sahaf <msaa1990@gmail.com>	2025-06-03 02:24:32 +03:00
tongjicoder	5b2eb66418	Use slices.Contains to simplify code (#7039) ... Signed-off-by: tongjicoder <tongjicoder@icloud.com>	2025-05-31 12:03:06 -06:00
eveneast	a76d005a94	Use maps.Copy for simpler map handling (#7009) ... Signed-off-by: eveneast <qcqs@foxmail.com>	2025-05-13 15:16:47 -06:00
WeidiDeng	8524386737	caddyhttp: Compare paths w/o wildcard if prefixes differ (#7015) ... * fix route sort by comparing paths without wildcard if they don't share the same prefix * sort lexically if paths have the same length	2025-05-13 13:17:52 -06:00
Jimmy Lipham	94147caf31	fileserver: map invalid path errors to fs.ErrInvalid, and return 400 for any invalid path errors. (close #7008) (#7017)	2025-05-13 07:43:27 -06:00
WeidiDeng	716d72e475	intercept: implement Unwrap for interceptedResponseHandler (#7016)	2025-05-12 12:15:34 -06:00
Mohammed Al Sahaf	44d078b670	acme_server: fix policy parsing in caddyfile (#7006) ... Signed-off-by: Mohammed Al Sahaf <msaa1990@gmail.com>	2025-05-08 11:54:07 -06:00
Jimmy Lipham	051e73aefc	core: Replace admin server later in provisionContext (#7004)	2025-05-08 11:52:55 -06:00
Mohammed Al Sahaf	9f7148392a	log: default logger should respect {in,ex}clude (#6995) ... * log: default logger should respect `{in,ex}clude` Signed-off-by: Mohammed Al Sahaf <msaa1990@gmail.com> * add tests Signed-off-by: Mohammed Al Sahaf <msaa1990@gmail.com> --------- Signed-off-by: Mohammed Al Sahaf <msaa1990@gmail.com>	2025-05-06 22:06:09 +00:00
Jimmy Lipham	320c57291d	admin: Make sure that any admin routers are provisioned when local/re… (#6997) ... * admin: Make sure that any admin routers are provisioned when local/remote admin servers are replaced at runtime. * admin: check for provisioning errors during admin server replacements	2025-05-06 15:28:38 -06:00
WeidiDeng	aa3d20be3e	reverseproxy: Use DialTLSContext if ServerName has placeholder (#6955) ... Co-authored-by: Matt Holt <mholt@users.noreply.github.com>	2025-04-28 09:14:09 -06:00
Steffen Busch	54d03ced48	fileserver: Add support for .avif image format (#6988)	2025-04-28 08:32:59 -06:00
Indra Gunawan	89ed5f44de	fix: Remove nil arg from zapslog.NewHandler call (#6984)	2025-04-28 08:31:10 -06:00
Matthew Holt	105eee671c	caddytls: Set local_ip, not remote_ip (#6952) ... Follow-up on 35c8c2d92d26208642cea0d1549c77a00124e154 where I was a dum-dum	2025-04-21 18:32:51 -06:00
Mohammed Al Sahaf	737936c06b	reverseproxy: reference correct field name in LoadModule (#6978) ... Signed-off-by: Mohammed Al Sahaf <msaa1990@gmail.com>	2025-04-21 08:43:27 -06:00