1415 Commits

Author	SHA1	Message	Date
Luka T. Korošec	b9710c6af4	fileserver: Add a few doc lines about Etag file content (#7173) ... Co-authored-by: Matt Holt <mholt@users.noreply.github.com>	2025-08-21 16:02:10 -06:00
WeidiDeng	1c596e3c5a	reverse_proxy: use the new KeepAliveConfig to set probe interval (#7157) ... Co-authored-by: Matt Holt <mholt@users.noreply.github.com>	2025-08-21 14:36:54 -06:00
WeidiDeng	f11c780fdc	http: clean up listeners if some of the listeners fail to bind (#7176) ... * http: clean up listeners if some of the listeners fail to bind * check for nil server due to failure to start --------- Co-authored-by: Matt Holt <mholt@users.noreply.github.com>	2025-08-21 12:14:40 -06:00
WeidiDeng	fdf610850b	http: disable keepalive when KeepAliveInterval is negative (#7158) ... Co-authored-by: Matt Holt <mholt@users.noreply.github.com>	2025-08-20 17:31:15 -04:00
joemicky	5125fbed41	use a more modern writing style to simplify code (#7182) ... Signed-off-by: joemicky <joemickychang@outlook.com> Co-authored-by: Matt Holt <mholt@users.noreply.github.com>	2025-08-20 11:41:21 -06:00
cui	b15ed9b084	caddyhttp: refactor to use reflect.TypeFor (#7187)	2025-08-18 17:08:46 -06:00
WeidiDeng	7590c9ca1b	caddyhttp: Free up quic listener when stopping (#7177)	2025-08-13 12:35:06 -06:00
avery	b898873b90	caddytls: fix regression in external certificate manager support (#7179) ... revert changes to automation.go from e276994174983dbb190d4bb9acaab157ef14373b	2025-08-13 09:30:26 -06:00
youzichuan	09b53a753c	chore: fix inconsistent function name in comment (#7174) ... Signed-off-by: youzichuan <youzichuan6@outlook.com>	2025-08-13 07:05:54 +00:00
GreyXor	4bfc3b95b5	bcrypt: wrong cost flag name (#7168)	2025-08-11 15:46:32 +03:00
GreyXor	49dac61b07	bcrypt: add cost parameter to hash-password (#7149) ... * feat: add bcrypt cost parameter to hash-password * revert: typos * refactor: take the cost out of interface * fix: default bcrypt cost to 14 * fix: follow bcrypt library for min and max cost * doc: mention defaultBcryptCost in cost parameter description * chore: gci format * fix: more specific bcrypt cost algorithm flag * feat: bcrypt cost provisioning * Revert "feat: bcrypt cost provisioning" This reverts commit e09d4bd036e7657588ed7785afd2c5388b29fb2a. * chore: gci format * chore: gci format * chore: gci format * chore: golangcilint fmted --------- Co-authored-by: Mohammed Al Sahaf <msaa1990@gmail.com>	2025-08-11 14:26:18 +03:00
Matthew Holt	42c888ee1d	Ignore irrelevant linter warning	2025-08-04 16:28:13 -06:00
Matthew Holt	731e6c2482	caddytls: Improve ECH error logging (close #7152)	2025-08-04 16:22:25 -06:00
joshuamcbeth	e4447c4ba7	core: Use KeepAliveConfig to pass keepalive_interval to listener's accepted sockets (#7151) ... Fix #7144	2025-08-02 09:43:34 -06:00
minxinyi	ab3b2d64ba	refactor: use slices.Equal to simplify code (#7141) ... Signed-off-by: minxinyi <minxinyi6@outlook.com>	2025-07-23 14:07:46 +00:00
Cédric Félizard	790f3e0885	fileserver: denote license for embedded JavaScript for LibreJS (#7127) ... This commit adds support for LibreJS (https://en.wikipedia.org/wiki/GNU_LibreJS). LibreJS would block this embedded JavaScript because its license is not stated in a machine-readable format. Signed-off-by: Cédric Félizard <cedric@felizard.fr>	2025-07-16 11:49:49 -06:00
Zongze Wu	bbf1dfcea2	headers: Support placeholders in replacement search patterns (#7117) ... * fix: resolve http.request placeholders in header directive find operation - Skip regex compilation during provision when placeholders are detected - Compile regex at runtime after placeholder replacement - Preserves performance for static regexes while enabling dynamic placeholders - Fixes #7109 * test: add tests for placeholder detection in header replacements - Test containsPlaceholders function edge cases - Test provision skips compilation for dynamic regexes - Test end-to-end placeholder replacement functionality	2025-07-14 14:55:00 -06:00
bytesingsong	aff88d4b26	chore: fix function in comment (#7121) ... Signed-off-by: bytesingsong <bytesing@icloud.com>	2025-07-12 11:54:57 +00:00
WeidiDeng	1209b5c566	reverseproxy: validate versions in http transport (#7112)	2025-07-09 14:13:27 -06:00
mountdisk	c712cfcd76	docs: fix some minor issues in the comments (#7101)	2025-06-30 06:50:00 +00:00
gopherorg	33c88bd2bb	refactor: replace HasPrefix+TrimPrefix with CutPrefix (#7095) ... Signed-off-by: gopherorg <gopherworld@icloud.com>	2025-06-27 22:04:09 +03:00
filipRatajczak	3b4d966fba	fileserver: Add sort buttons in grid mode (#7089) ... * [ADD] sort buttons in grid mode * [CHANGE] replace spaces with tabs	2025-06-23 13:26:45 -06:00
曹家巧	070d454c0d	Use the built-in max/min to simplify the code (#7081) ... Signed-off-by: xiaoxiangirl <caojiaqiao@outlook.com>	2025-06-19 16:39:48 -06:00
Mohammed Al Sahaf	1481c0411a	caddytls: wire up client_auth leaf verifier Caddyfile (#6772) ... * client_auth: wire up leaf verifier Caddyfile Signed-off-by: Mohammed Al Sahaf <msaa1990@gmail.com> * review feedback + tests Signed-off-by: Mohammed Al Sahaf <msaa1990@gmail.com> --------- Signed-off-by: Mohammed Al Sahaf <msaa1990@gmail.com>	2025-06-09 08:18:36 -06:00
Mohammed Al Sahaf	e039a5bb5c	chore: upgrade .golangci.yml and workflow to v2 (#6924) ... * chore: upgrade .golangci.yml and workflow to v2 run `golangci-lint fmt` Signed-off-by: Mohammed Al Sahaf <msaa1990@gmail.com> * run `golangci-lint run --fix` Signed-off-by: Mohammed Al Sahaf <msaa1990@gmail.com> * more lint fixes Signed-off-by: Mohammed Al Sahaf <msaa1990@gmail.com> * bring back comments to .golangci.yml Signed-off-by: Mohammed Al Sahaf <msaa1990@gmail.com> * appease the linter some more Signed-off-by: Mohammed Al Sahaf <msaa1990@gmail.com> * oops Signed-off-by: Mohammed Al Sahaf <msaa1990@gmail.com> * use embedded structs Signed-off-by: Mohammed Al Sahaf <msaa1990@gmail.com> * use embedded structs where they were used before Signed-off-by: Mohammed Al Sahaf <msaa1990@gmail.com> * disable rule `-QF1006` Signed-off-by: Mohammed Al Sahaf <msaa1990@gmail.com> * missed a spot Signed-off-by: Mohammed Al Sahaf <msaa1990@gmail.com> --------- Signed-off-by: Mohammed Al Sahaf <msaa1990@gmail.com>	2025-06-03 02:24:32 +03:00
tongjicoder	5b2eb66418	Use slices.Contains to simplify code (#7039) ... Signed-off-by: tongjicoder <tongjicoder@icloud.com>	2025-05-31 12:03:06 -06:00
Jimmy Lipham	94147caf31	fileserver: map invalid path errors to fs.ErrInvalid, and return 400 for any invalid path errors. (close #7008) (#7017)	2025-05-13 07:43:27 -06:00
WeidiDeng	716d72e475	intercept: implement Unwrap for interceptedResponseHandler (#7016)	2025-05-12 12:15:34 -06:00
Mohammed Al Sahaf	44d078b670	acme_server: fix policy parsing in caddyfile (#7006) ... Signed-off-by: Mohammed Al Sahaf <msaa1990@gmail.com>	2025-05-08 11:54:07 -06:00
WeidiDeng	aa3d20be3e	reverseproxy: Use DialTLSContext if ServerName has placeholder (#6955) ... Co-authored-by: Matt Holt <mholt@users.noreply.github.com>	2025-04-28 09:14:09 -06:00
Steffen Busch	54d03ced48	fileserver: Add support for .avif image format (#6988)	2025-04-28 08:32:59 -06:00
Matthew Holt	105eee671c	caddytls: Set local_ip, not remote_ip (#6952) ... Follow-up on 35c8c2d92d26208642cea0d1549c77a00124e154 where I was a dum-dum	2025-04-21 18:32:51 -06:00
Mohammed Al Sahaf	737936c06b	reverseproxy: reference correct field name in LoadModule (#6978) ... Signed-off-by: Mohammed Al Sahaf <msaa1990@gmail.com>	2025-04-21 08:43:27 -06:00
Matthew Holt	fb22a26b1a	caddytls: Allow missing ECH meta file	2025-04-18 12:20:21 -06:00
Matt Holt	1bfa111552	caddytls: Prefer managed wildcard certs over individual subdomain certs (#6959) ... * caddytls: Prefer managed wildcard certs over individual subdomain certs * Repurpose force_automate as no_wildcard * Fix a couple bugs * Restore force_automate and use automate loader as wildcard override	2025-04-18 11:44:23 -06:00
Matthew Holt	35c8c2d92d	caddytls: Add remote_ip to HTTP cert manager (close #6952)	2025-04-17 16:43:06 -06:00
Steffen Busch	5be77d07ab	caddyauth: Set authentication provider error in placeholder (#6932) ... * caddyauth: Set authentication provider error in placeholder for handle_errors directive * caddyauth: Simplify error placeholder setting for authentication provider	2025-04-15 22:32:08 +00:00
Jesper Brix Rosenkilde	6c38ae7381	reverseproxy: Add valid Upstream to DialInfo in active health checks (#6949) ... Currently if we extract the DialInfo from a Request Context during an active health check, then the Upstream in the DialInfo is nil. This PR attempts to set the Upstream to a sensible value, based on wether or not the Upstream has been overriden in the active health check's config.	2025-04-15 08:44:53 -06:00
Matthew Holt	b06a9496d1	caddyhttp: Document side effect of HTTP/3 early data (close #6936)	2025-04-08 13:59:02 -06:00
Matthew Holt	9becf61a9f	go.mod: Upgrade to libdns 1.0 beta APIs (requires upgraded DNS providers) ... This is the only way we can properly, reliably support ECH.	2025-04-07 12:43:11 -06:00
Matt Holt	5a6b2f8d1d	events: Refactor; move Event into core, so core can emit events (#6930) ... * events: Refactor; move Event into core, so core can emit events Requires some slight trickery to invert dependencies. We can't have the caddy package import the caddyevents package, because caddyevents imports caddy. Interface to the rescue! Also add two new events, experimentally: started, and stopping. At the request of a sponsor. Also rename "Filesystems" to "FileSystems" to match Go convention (unrelated to events, was just bugging me when I noticed it). * Coupla bug fixes * lol whoops	2025-03-29 08:15:43 -06:00
Matthew Holt	ea77a9ab67	caddytls: Temporarily treat "" and "@" as equivalent for DNS publication ... Fixes https://github.com/caddyserver/caddy/issues/6895#issuecomment-2750111096	2025-03-25 16:24:16 -06:00
Matthew Holt	782a3c7ac6	caddytls: Don't publish HTTPS record for CNAME'd domain (fix #6922)	2025-03-24 09:55:26 -06:00
Mohammed Al Sahaf	173573035c	core: add modular network_proxy support (#6399) ... * core: add modular `network_proxy` support Co-authored-by: @ImpostorKeanu Signed-off-by: Mohammed Al Sahaf <msaa1990@gmail.com> * move modules around Signed-off-by: Mohammed Al Sahaf <msaa1990@gmail.com> * add caddyfile implementation Signed-off-by: Mohammed Al Sahaf <msaa1990@gmail.com> * address feedbcak * Apply suggestions from code review Co-authored-by: Francis Lavoie <lavofr@gmail.com> * adapt ForwardProxyURL to use the NetworkProxyRaw Signed-off-by: Mohammed Al Sahaf <msaa1990@gmail.com> * remove redundant `url` in log Co-authored-by: Matt Holt <mholt@users.noreply.github.com> * code review Signed-off-by: Mohammed Al Sahaf <msaa1990@gmail.com> * remove `.source` from the module ID Signed-off-by: Mohammed Al Sahaf <msaa1990@gmail.com> --------- Signed-off-by: Mohammed Al Sahaf <msaa1990@gmail.com> Co-authored-by: Francis Lavoie <lavofr@gmail.com> Co-authored-by: Matt Holt <mholt@users.noreply.github.com>	2025-03-21 17:06:15 +00:00
Matthew Holt	e276994174	caddytls: Initialize permission module earlier (fix #6901) ... Bug introduced in 4ebcfed9c942c59f473f12f8108e1d0fa92e0855	2025-03-17 12:02:23 -06:00
Matthew Holt	55c89ccf2a	caddytls: Convert AP subjects to punycode ... Fixes bugs related to TLS automation	2025-03-14 15:44:20 -06:00
Matthew Holt	1f8dab572c	caddytls: Don't publish ECH configs if other records don't exist ... Publishing a DNS record for a name that doesn't have any could make wildcards ineffective, which would be surprising for site owners and could lead to downtime.	2025-03-12 16:33:14 -06:00
Steffen Busch	2ac09fdb20	requestbody: Fix ContentLength calculation after body replacement (#6896)	2025-03-12 22:18:02 +00:00
Adrien Pensart	dccf3d8982	requestbody: Add set option to replace request body (#5795) ... Co-authored-by: Matt Holt <mholt@users.noreply.github.com>	2025-03-12 19:38:51 +00:00
Matthew Holt	af2d33afbb	headers: Allow nil HeaderOps (fix #6893)	2025-03-11 08:52:15 -06:00