1441 Commits

Author	SHA1	Message	Date
WeidiDeng	8aca108d2c	reverseproxy: do not disable keepalive if proxy protocol is used (#7300)	2025-10-21 05:09:37 +00:00
WeidiDeng	a7885aabec	intercept: use already buffered response if possible when intercepting (#7028)	2025-10-21 04:48:07 +00:00
Bashayer Alrumahi	f5f25d845a	logging: fix multiple regexp filters on same field (fixes #7049) (#7061) ... * logging: fix multiple regexp filters on same field (fixes #7049) * fix: add proper error handling in MultiRegexpFilter tests * fix: resolve linter and test issues - Fix GCI import formatting issues - Fix MultiRegexpFilter input size limit test by ensuring output doesn't exceed max length after each operation - All tests now pass and linter issues resolved * fix: update integration test for proper JSON encoding - Fix expected JSON output to use Unicode escape sequence for ampersand character - Integration tests now pass	2025-10-16 05:08:53 +00:00
WeidiDeng	1ce2a13ad1	caddyhttp: wrap accepted connection to suppress tls.ConnectionState (#7247)	2025-10-16 03:13:40 +00:00
Chris Seufert	d7185fd002	caddyhttp: Add trusted_proxies_unix for trusting unix socket X-Forwarded-* headers (#7265)	2025-10-16 02:47:32 +00:00
Anthony Biondo	7fb39ec1e5	reverseproxy: Use http1.1 upgrade for websocket for extended connect of http2 and http3 (#7305) ... Co-authored-by: WeidiDeng <weidi_deng@icloud.com>	2025-10-16 02:20:20 +00:00
aeris	10ac7da037	logging: Switch from lumberjack to timberjack, add time-rolling options (#7244) ... Co-authored-by: Francis Lavoie <lavofr@gmail.com>	2025-10-15 17:11:10 -04:00
wyrapeseed	d115cd1042	chore: fix some comments (#7303)	2025-10-15 03:58:53 +00:00
joshuamcbeth	de6b78009b	caddyhttp: Add server options keepalive_idle and keepalive_count (#7298) ... * Add Server options KeepAliveIdle (keepalive_idle) and KeepAliveCount (keepalive_count) Signed-off-by: Joshua McBeth <joshua.mcbeth@gmail.com> * Add Server option KeepAliveDisable (keepalive_disable) Signed-off-by: Joshua McBeth <joshua.mcbeth@gmail.com> * Remove Server option KeepAliveDisable (keepalive_disable), disable when interval is negative Signed-off-by: Joshua McBeth <joshua.mcbeth@gmail.com> * Add keepalive parameters to caddyfiletest Signed-off-by: Joshua McBeth <joshua.mcbeth@gmail.com> --------- Signed-off-by: Joshua McBeth <joshua.mcbeth@gmail.com>	2025-10-14 12:03:23 -06:00
WeidiDeng	2ec28bca43	reverse_proxy: use http1 for outbound tls requests with placeholder that are likely websockets (#7296)	2025-10-09 10:36:49 -06:00
GreyXor	13a4ec7597	basicauth: Implement argon2id (#7186) ... * feat: add argon2id hash-password command * feat: ardon2id owasp safe value * feat: add argon2id compare method * chore: fmt argon2id * docs: more argon2id docs * chore: upgrade x/crypto dep * revert: remove golangci * refactor: argon2id decode * chore: update deps * refactor: simplify argon2id compare return * chore: upgrade dependencies * chore: upgrade dependencies	2025-10-06 17:27:06 -06:00
asttool	bc0e184130	caddyhttp: omit unnecessary reassignment (#7276) ... Signed-off-by: asttool <asttool@outlook.com>	2025-09-26 10:44:58 -06:00
Y.Horie	1e82f9652e	caddypki: check intermediate lifetime to actual root cert lifetime (#7272)	2025-09-26 10:24:52 -06:00
Mohammed Al Sahaf	25be2f26fc	chore: ugh, lint fix... (#7275) ... * chore: ugh, lint fix... Signed-off-by: Mohammed Al Sahaf <msaa1990@gmail.com> * more lint fixes Signed-off-by: Mohammed Al Sahaf <msaa1990@gmail.com> --------- Signed-off-by: Mohammed Al Sahaf <msaa1990@gmail.com>	2025-09-26 03:14:48 -04:00
Gilbert Gilb's	f5c3094050	cmd: prevent commas in header values from being split (#7268) ... `pflag.GetStringSlice` treats commas as delimiters, which causes issues when passing headers whose values contain commas (`X-Robots-Tag: noindex, nofollow`). These are incorrectly split into multiple headers and errors out: - `X-Robots-Tag: noindex` - ` nofollow` Switch to `pflag.GetStringArray`, which does not split on commas[1]. Note that this changes behavior for cases where multiple headers were provided in a single argument with commas (`--header-down "X-Foo: Bar,X-Bar: Foo"`). Such cases will now be treated as a single header value. If this breaking change is unacceptable, we will need a smarter fallback mechanism. [1] https://github.com/spf13/pflag/pull/90	2025-09-22 21:12:06 -06:00
WeidiDeng	b462615439	fileserver: set Content-Length for precompressed files (#7251) ... * set Content-Length for precompressed files * Update modules/caddyhttp/fileserver/staticfiles.go Co-authored-by: Matt Holt <mholt@users.noreply.github.com> --------- Co-authored-by: Matt Holt <mholt@users.noreply.github.com>	2025-09-10 22:48:03 -06:00
Pavel	d9cc24f3df	caddypki: Disable internal auto-CA when auto_https is disabled (fix #7211) (#7238) ... Co-authored-by: Matt Holt <mholt@users.noreply.github.com>	2025-09-05 09:41:06 -06:00
Matthew Holt	38848f7f25	caddytls: Allow disabling distributed solving (except http-01)	2025-09-04 08:51:36 -06:00
Siomachkin	5473eb95d8	encode: fix response corruption when handle_errors is used (#7235) ... * encode: fix response corruption when handle_errors is used * Move disabled check before hdr assignment	2025-09-02 15:34:56 -06:00
Max Celant	3553cfb6ad	caddyhttp: remove redundant middleware next copy (#7217)	2025-09-01 09:30:34 -06:00
aro-lew	806fef85be	encode: add graphql-response header to list (#7214)	2025-08-27 14:58:14 -06:00
Matthew Holt	e0a8f9541d	caddyhttp: Normalize (lowercase) {label.N} placeholders	2025-08-25 13:18:13 -06:00
Bang Lee	5e2953670e	caddyhttp: add replacer placeholders for escaped values (#7181)	2025-08-25 09:07:51 -06:00
Francis Lavoie	16fe83c7af	http: Make logger first, before TLS provisioning (#7198)	2025-08-22 14:24:08 -06:00
WeidiDeng	14a63a26b9	caddyhttp: use the new http.Protocols to handle h1, h2 and h2c requests (#6961) ... * use the new http.Protocols to handle h1, h2 and h2c requests * fix lint * keep ConnCtxKey for now * fix handling for h2c * check http version while reading the connection * check if connection implements connectionStater when it should * add comments about either h1 or h2 must be used in the listener * fix if check * return a net.Conn that implements connectionStater if applicable * remove http/1.1 from alpn if h1 is disabled * fix matching if only h1 is enabled --------- Co-authored-by: Matt Holt <mholt@users.noreply.github.com>	2025-08-22 14:30:42 +00:00
WeidiDeng	67debd0e11	fileserver: set Range header for precompressed static files to force Content Length header to appear (#7042) ... Co-authored-by: Matt Holt <mholt@users.noreply.github.com>	2025-08-22 08:23:13 -06:00
Luka T. Korošec	b9710c6af4	fileserver: Add a few doc lines about Etag file content (#7173) ... Co-authored-by: Matt Holt <mholt@users.noreply.github.com>	2025-08-21 16:02:10 -06:00
WeidiDeng	1c596e3c5a	reverse_proxy: use the new KeepAliveConfig to set probe interval (#7157) ... Co-authored-by: Matt Holt <mholt@users.noreply.github.com>	2025-08-21 14:36:54 -06:00
WeidiDeng	f11c780fdc	http: clean up listeners if some of the listeners fail to bind (#7176) ... * http: clean up listeners if some of the listeners fail to bind * check for nil server due to failure to start --------- Co-authored-by: Matt Holt <mholt@users.noreply.github.com>	2025-08-21 12:14:40 -06:00
WeidiDeng	fdf610850b	http: disable keepalive when KeepAliveInterval is negative (#7158) ... Co-authored-by: Matt Holt <mholt@users.noreply.github.com>	2025-08-20 17:31:15 -04:00
joemicky	5125fbed41	use a more modern writing style to simplify code (#7182) ... Signed-off-by: joemicky <joemickychang@outlook.com> Co-authored-by: Matt Holt <mholt@users.noreply.github.com>	2025-08-20 11:41:21 -06:00
cui	b15ed9b084	caddyhttp: refactor to use reflect.TypeFor (#7187)	2025-08-18 17:08:46 -06:00
WeidiDeng	7590c9ca1b	caddyhttp: Free up quic listener when stopping (#7177)	2025-08-13 12:35:06 -06:00
avery	b898873b90	caddytls: fix regression in external certificate manager support (#7179) ... revert changes to automation.go from e276994174983dbb190d4bb9acaab157ef14373b	2025-08-13 09:30:26 -06:00
youzichuan	09b53a753c	chore: fix inconsistent function name in comment (#7174) ... Signed-off-by: youzichuan <youzichuan6@outlook.com>	2025-08-13 07:05:54 +00:00
GreyXor	4bfc3b95b5	bcrypt: wrong cost flag name (#7168)	2025-08-11 15:46:32 +03:00
GreyXor	49dac61b07	bcrypt: add cost parameter to hash-password (#7149) ... * feat: add bcrypt cost parameter to hash-password * revert: typos * refactor: take the cost out of interface * fix: default bcrypt cost to 14 * fix: follow bcrypt library for min and max cost * doc: mention defaultBcryptCost in cost parameter description * chore: gci format * fix: more specific bcrypt cost algorithm flag * feat: bcrypt cost provisioning * Revert "feat: bcrypt cost provisioning" This reverts commit e09d4bd036e7657588ed7785afd2c5388b29fb2a. * chore: gci format * chore: gci format * chore: gci format * chore: golangcilint fmted --------- Co-authored-by: Mohammed Al Sahaf <msaa1990@gmail.com>	2025-08-11 14:26:18 +03:00
Matthew Holt	42c888ee1d	Ignore irrelevant linter warning	2025-08-04 16:28:13 -06:00
Matthew Holt	731e6c2482	caddytls: Improve ECH error logging (close #7152)	2025-08-04 16:22:25 -06:00
joshuamcbeth	e4447c4ba7	core: Use KeepAliveConfig to pass keepalive_interval to listener's accepted sockets (#7151) ... Fix #7144	2025-08-02 09:43:34 -06:00
minxinyi	ab3b2d64ba	refactor: use slices.Equal to simplify code (#7141) ... Signed-off-by: minxinyi <minxinyi6@outlook.com>	2025-07-23 14:07:46 +00:00
Cédric Félizard	790f3e0885	fileserver: denote license for embedded JavaScript for LibreJS (#7127) ... This commit adds support for LibreJS (https://en.wikipedia.org/wiki/GNU_LibreJS). LibreJS would block this embedded JavaScript because its license is not stated in a machine-readable format. Signed-off-by: Cédric Félizard <cedric@felizard.fr>	2025-07-16 11:49:49 -06:00
Zongze Wu	bbf1dfcea2	headers: Support placeholders in replacement search patterns (#7117) ... * fix: resolve http.request placeholders in header directive find operation - Skip regex compilation during provision when placeholders are detected - Compile regex at runtime after placeholder replacement - Preserves performance for static regexes while enabling dynamic placeholders - Fixes #7109 * test: add tests for placeholder detection in header replacements - Test containsPlaceholders function edge cases - Test provision skips compilation for dynamic regexes - Test end-to-end placeholder replacement functionality	2025-07-14 14:55:00 -06:00
bytesingsong	aff88d4b26	chore: fix function in comment (#7121) ... Signed-off-by: bytesingsong <bytesing@icloud.com>	2025-07-12 11:54:57 +00:00
WeidiDeng	1209b5c566	reverseproxy: validate versions in http transport (#7112)	2025-07-09 14:13:27 -06:00
mountdisk	c712cfcd76	docs: fix some minor issues in the comments (#7101)	2025-06-30 06:50:00 +00:00
gopherorg	33c88bd2bb	refactor: replace HasPrefix+TrimPrefix with CutPrefix (#7095) ... Signed-off-by: gopherorg <gopherworld@icloud.com>	2025-06-27 22:04:09 +03:00
filipRatajczak	3b4d966fba	fileserver: Add sort buttons in grid mode (#7089) ... * [ADD] sort buttons in grid mode * [CHANGE] replace spaces with tabs	2025-06-23 13:26:45 -06:00
曹家巧	070d454c0d	Use the built-in max/min to simplify the code (#7081) ... Signed-off-by: xiaoxiangirl <caojiaqiao@outlook.com>	2025-06-19 16:39:48 -06:00
Mohammed Al Sahaf	1481c0411a	caddytls: wire up client_auth leaf verifier Caddyfile (#6772) ... * client_auth: wire up leaf verifier Caddyfile Signed-off-by: Mohammed Al Sahaf <msaa1990@gmail.com> * review feedback + tests Signed-off-by: Mohammed Al Sahaf <msaa1990@gmail.com> --------- Signed-off-by: Mohammed Al Sahaf <msaa1990@gmail.com>	2025-06-09 08:18:36 -06:00