1173 Commits

Author	SHA1	Message	Date
Pavel	d9cc24f3df	caddypki: Disable internal auto-CA when auto_https is disabled (fix #7211) (#7238) ... Co-authored-by: Matt Holt <mholt@users.noreply.github.com>	2025-09-05 09:41:06 -06:00
Siomachkin	5473eb95d8	encode: fix response corruption when handle_errors is used (#7235) ... * encode: fix response corruption when handle_errors is used * Move disabled check before hdr assignment	2025-09-02 15:34:56 -06:00
Max Celant	3553cfb6ad	caddyhttp: remove redundant middleware next copy (#7217)	2025-09-01 09:30:34 -06:00
aro-lew	806fef85be	encode: add graphql-response header to list (#7214)	2025-08-27 14:58:14 -06:00
Matthew Holt	e0a8f9541d	caddyhttp: Normalize (lowercase) {label.N} placeholders	2025-08-25 13:18:13 -06:00
Bang Lee	5e2953670e	caddyhttp: add replacer placeholders for escaped values (#7181)	2025-08-25 09:07:51 -06:00
Francis Lavoie	16fe83c7af	http: Make logger first, before TLS provisioning (#7198)	2025-08-22 14:24:08 -06:00
WeidiDeng	14a63a26b9	caddyhttp: use the new http.Protocols to handle h1, h2 and h2c requests (#6961) ... * use the new http.Protocols to handle h1, h2 and h2c requests * fix lint * keep ConnCtxKey for now * fix handling for h2c * check http version while reading the connection * check if connection implements connectionStater when it should * add comments about either h1 or h2 must be used in the listener * fix if check * return a net.Conn that implements connectionStater if applicable * remove http/1.1 from alpn if h1 is disabled * fix matching if only h1 is enabled --------- Co-authored-by: Matt Holt <mholt@users.noreply.github.com>	2025-08-22 14:30:42 +00:00
WeidiDeng	67debd0e11	fileserver: set Range header for precompressed static files to force Content Length header to appear (#7042) ... Co-authored-by: Matt Holt <mholt@users.noreply.github.com>	2025-08-22 08:23:13 -06:00
Luka T. Korošec	b9710c6af4	fileserver: Add a few doc lines about Etag file content (#7173) ... Co-authored-by: Matt Holt <mholt@users.noreply.github.com>	2025-08-21 16:02:10 -06:00
WeidiDeng	1c596e3c5a	reverse_proxy: use the new KeepAliveConfig to set probe interval (#7157) ... Co-authored-by: Matt Holt <mholt@users.noreply.github.com>	2025-08-21 14:36:54 -06:00
WeidiDeng	f11c780fdc	http: clean up listeners if some of the listeners fail to bind (#7176) ... * http: clean up listeners if some of the listeners fail to bind * check for nil server due to failure to start --------- Co-authored-by: Matt Holt <mholt@users.noreply.github.com>	2025-08-21 12:14:40 -06:00
WeidiDeng	fdf610850b	http: disable keepalive when KeepAliveInterval is negative (#7158) ... Co-authored-by: Matt Holt <mholt@users.noreply.github.com>	2025-08-20 17:31:15 -04:00
joemicky	5125fbed41	use a more modern writing style to simplify code (#7182) ... Signed-off-by: joemicky <joemickychang@outlook.com> Co-authored-by: Matt Holt <mholt@users.noreply.github.com>	2025-08-20 11:41:21 -06:00
cui	b15ed9b084	caddyhttp: refactor to use reflect.TypeFor (#7187)	2025-08-18 17:08:46 -06:00
WeidiDeng	7590c9ca1b	caddyhttp: Free up quic listener when stopping (#7177)	2025-08-13 12:35:06 -06:00
youzichuan	09b53a753c	chore: fix inconsistent function name in comment (#7174) ... Signed-off-by: youzichuan <youzichuan6@outlook.com>	2025-08-13 07:05:54 +00:00
GreyXor	4bfc3b95b5	bcrypt: wrong cost flag name (#7168)	2025-08-11 15:46:32 +03:00
GreyXor	49dac61b07	bcrypt: add cost parameter to hash-password (#7149) ... * feat: add bcrypt cost parameter to hash-password * revert: typos * refactor: take the cost out of interface * fix: default bcrypt cost to 14 * fix: follow bcrypt library for min and max cost * doc: mention defaultBcryptCost in cost parameter description * chore: gci format * fix: more specific bcrypt cost algorithm flag * feat: bcrypt cost provisioning * Revert "feat: bcrypt cost provisioning" This reverts commit e09d4bd036e7657588ed7785afd2c5388b29fb2a. * chore: gci format * chore: gci format * chore: gci format * chore: golangcilint fmted --------- Co-authored-by: Mohammed Al Sahaf <msaa1990@gmail.com>	2025-08-11 14:26:18 +03:00
joshuamcbeth	e4447c4ba7	core: Use KeepAliveConfig to pass keepalive_interval to listener's accepted sockets (#7151) ... Fix #7144	2025-08-02 09:43:34 -06:00
minxinyi	ab3b2d64ba	refactor: use slices.Equal to simplify code (#7141) ... Signed-off-by: minxinyi <minxinyi6@outlook.com>	2025-07-23 14:07:46 +00:00
Cédric Félizard	790f3e0885	fileserver: denote license for embedded JavaScript for LibreJS (#7127) ... This commit adds support for LibreJS (https://en.wikipedia.org/wiki/GNU_LibreJS). LibreJS would block this embedded JavaScript because its license is not stated in a machine-readable format. Signed-off-by: Cédric Félizard <cedric@felizard.fr>	2025-07-16 11:49:49 -06:00
Zongze Wu	bbf1dfcea2	headers: Support placeholders in replacement search patterns (#7117) ... * fix: resolve http.request placeholders in header directive find operation - Skip regex compilation during provision when placeholders are detected - Compile regex at runtime after placeholder replacement - Preserves performance for static regexes while enabling dynamic placeholders - Fixes #7109 * test: add tests for placeholder detection in header replacements - Test containsPlaceholders function edge cases - Test provision skips compilation for dynamic regexes - Test end-to-end placeholder replacement functionality	2025-07-14 14:55:00 -06:00
bytesingsong	aff88d4b26	chore: fix function in comment (#7121) ... Signed-off-by: bytesingsong <bytesing@icloud.com>	2025-07-12 11:54:57 +00:00
WeidiDeng	1209b5c566	reverseproxy: validate versions in http transport (#7112)	2025-07-09 14:13:27 -06:00
mountdisk	c712cfcd76	docs: fix some minor issues in the comments (#7101)	2025-06-30 06:50:00 +00:00
gopherorg	33c88bd2bb	refactor: replace HasPrefix+TrimPrefix with CutPrefix (#7095) ... Signed-off-by: gopherorg <gopherworld@icloud.com>	2025-06-27 22:04:09 +03:00
filipRatajczak	3b4d966fba	fileserver: Add sort buttons in grid mode (#7089) ... * [ADD] sort buttons in grid mode * [CHANGE] replace spaces with tabs	2025-06-23 13:26:45 -06:00
曹家巧	070d454c0d	Use the built-in max/min to simplify the code (#7081) ... Signed-off-by: xiaoxiangirl <caojiaqiao@outlook.com>	2025-06-19 16:39:48 -06:00
Mohammed Al Sahaf	e039a5bb5c	chore: upgrade .golangci.yml and workflow to v2 (#6924) ... * chore: upgrade .golangci.yml and workflow to v2 run `golangci-lint fmt` Signed-off-by: Mohammed Al Sahaf <msaa1990@gmail.com> * run `golangci-lint run --fix` Signed-off-by: Mohammed Al Sahaf <msaa1990@gmail.com> * more lint fixes Signed-off-by: Mohammed Al Sahaf <msaa1990@gmail.com> * bring back comments to .golangci.yml Signed-off-by: Mohammed Al Sahaf <msaa1990@gmail.com> * appease the linter some more Signed-off-by: Mohammed Al Sahaf <msaa1990@gmail.com> * oops Signed-off-by: Mohammed Al Sahaf <msaa1990@gmail.com> * use embedded structs Signed-off-by: Mohammed Al Sahaf <msaa1990@gmail.com> * use embedded structs where they were used before Signed-off-by: Mohammed Al Sahaf <msaa1990@gmail.com> * disable rule `-QF1006` Signed-off-by: Mohammed Al Sahaf <msaa1990@gmail.com> * missed a spot Signed-off-by: Mohammed Al Sahaf <msaa1990@gmail.com> --------- Signed-off-by: Mohammed Al Sahaf <msaa1990@gmail.com>	2025-06-03 02:24:32 +03:00
tongjicoder	5b2eb66418	Use slices.Contains to simplify code (#7039) ... Signed-off-by: tongjicoder <tongjicoder@icloud.com>	2025-05-31 12:03:06 -06:00
Jimmy Lipham	94147caf31	fileserver: map invalid path errors to fs.ErrInvalid, and return 400 for any invalid path errors. (close #7008) (#7017)	2025-05-13 07:43:27 -06:00
WeidiDeng	716d72e475	intercept: implement Unwrap for interceptedResponseHandler (#7016)	2025-05-12 12:15:34 -06:00
WeidiDeng	aa3d20be3e	reverseproxy: Use DialTLSContext if ServerName has placeholder (#6955) ... Co-authored-by: Matt Holt <mholt@users.noreply.github.com>	2025-04-28 09:14:09 -06:00
Steffen Busch	54d03ced48	fileserver: Add support for .avif image format (#6988)	2025-04-28 08:32:59 -06:00
Mohammed Al Sahaf	737936c06b	reverseproxy: reference correct field name in LoadModule (#6978) ... Signed-off-by: Mohammed Al Sahaf <msaa1990@gmail.com>	2025-04-21 08:43:27 -06:00
Matt Holt	1bfa111552	caddytls: Prefer managed wildcard certs over individual subdomain certs (#6959) ... * caddytls: Prefer managed wildcard certs over individual subdomain certs * Repurpose force_automate as no_wildcard * Fix a couple bugs * Restore force_automate and use automate loader as wildcard override	2025-04-18 11:44:23 -06:00
Steffen Busch	5be77d07ab	caddyauth: Set authentication provider error in placeholder (#6932) ... * caddyauth: Set authentication provider error in placeholder for handle_errors directive * caddyauth: Simplify error placeholder setting for authentication provider	2025-04-15 22:32:08 +00:00
Jesper Brix Rosenkilde	6c38ae7381	reverseproxy: Add valid Upstream to DialInfo in active health checks (#6949) ... Currently if we extract the DialInfo from a Request Context during an active health check, then the Upstream in the DialInfo is nil. This PR attempts to set the Upstream to a sensible value, based on wether or not the Upstream has been overriden in the active health check's config.	2025-04-15 08:44:53 -06:00
Matthew Holt	b06a9496d1	caddyhttp: Document side effect of HTTP/3 early data (close #6936)	2025-04-08 13:59:02 -06:00
Matt Holt	5a6b2f8d1d	events: Refactor; move Event into core, so core can emit events (#6930) ... * events: Refactor; move Event into core, so core can emit events Requires some slight trickery to invert dependencies. We can't have the caddy package import the caddyevents package, because caddyevents imports caddy. Interface to the rescue! Also add two new events, experimentally: started, and stopping. At the request of a sponsor. Also rename "Filesystems" to "FileSystems" to match Go convention (unrelated to events, was just bugging me when I noticed it). * Coupla bug fixes * lol whoops	2025-03-29 08:15:43 -06:00
Mohammed Al Sahaf	173573035c	core: add modular network_proxy support (#6399) ... * core: add modular `network_proxy` support Co-authored-by: @ImpostorKeanu Signed-off-by: Mohammed Al Sahaf <msaa1990@gmail.com> * move modules around Signed-off-by: Mohammed Al Sahaf <msaa1990@gmail.com> * add caddyfile implementation Signed-off-by: Mohammed Al Sahaf <msaa1990@gmail.com> * address feedbcak * Apply suggestions from code review Co-authored-by: Francis Lavoie <lavofr@gmail.com> * adapt ForwardProxyURL to use the NetworkProxyRaw Signed-off-by: Mohammed Al Sahaf <msaa1990@gmail.com> * remove redundant `url` in log Co-authored-by: Matt Holt <mholt@users.noreply.github.com> * code review Signed-off-by: Mohammed Al Sahaf <msaa1990@gmail.com> * remove `.source` from the module ID Signed-off-by: Mohammed Al Sahaf <msaa1990@gmail.com> --------- Signed-off-by: Mohammed Al Sahaf <msaa1990@gmail.com> Co-authored-by: Francis Lavoie <lavofr@gmail.com> Co-authored-by: Matt Holt <mholt@users.noreply.github.com>	2025-03-21 17:06:15 +00:00
Matthew Holt	1f8dab572c	caddytls: Don't publish ECH configs if other records don't exist ... Publishing a DNS record for a name that doesn't have any could make wildcards ineffective, which would be surprising for site owners and could lead to downtime.	2025-03-12 16:33:14 -06:00
Steffen Busch	2ac09fdb20	requestbody: Fix ContentLength calculation after body replacement (#6896)	2025-03-12 22:18:02 +00:00
Adrien Pensart	dccf3d8982	requestbody: Add set option to replace request body (#5795) ... Co-authored-by: Matt Holt <mholt@users.noreply.github.com>	2025-03-12 19:38:51 +00:00
Matthew Holt	af2d33afbb	headers: Allow nil HeaderOps (fix #6893)	2025-03-11 08:52:15 -06:00
Steffen Busch	f4432a306a	caddyfile: add error handling for unrecognized subdirective/options in various modules (#6884)	2025-03-08 23:45:05 +03:00
WeidiDeng	220cd1c2bc	reverseproxy: more comments about buffering and add new tests (#6778) ... Co-authored-by: Matt Holt <mholt@users.noreply.github.com>	2025-03-07 11:22:43 -07:00
Matthew Holt	1975408d89	chore: Remove unnecessary explicit type parameters	2025-03-07 11:18:00 -07:00
Matt Holt	d7764dfdbb	caddytls: Encrypted ClientHello (ECH) (#6862) ... * caddytls: Initial commit of Encrypted ClientHello (ECH) * WIP Caddyfile * Fill out Caddyfile support * Enhance godoc comments * Augment, don't overwrite, HTTPS records * WIP * WIP: publication history * Fix republication logic * Apply global DNS module to ACME challenges This allows DNS challenges to be enabled without locally-configured DNS modules * Ignore false positive from prealloc linter * ci: Use only latest Go version (1.24 currently) We no longer support older Go versions, for security benefits. * Remove old commented code Static ECH keys for now * Implement SendAsRetry	2025-03-05 17:04:10 -07:00