Commit Graph

  • 41aee97386
    core: propagate ECH keys to the QUIC listener (#7670) master Zen Dodd 2026-04-24 05:33:41 +10:00
  • 441d5eb062
    caddyhttp: prefer port 443 in auto-HTTPS and add tests (#7666) Matt Holt 2026-04-23 01:29:03 -06:00
  • e75091f2d5
    build(deps): bump github.com/jackc/pgx/v5 from 5.9.0 to 5.9.2 dependabot/go_modules/github.com/jackc/pgx/v5-5.9.2 dependabot[bot] 2026-04-23 00:25:17 +00:00
  • 95254c2d26
    Add some godoc dynamic-upstreams-cache Matthew Holt 2026-04-21 14:29:11 -06:00
  • aed1af5976
    reverseproxy: add lb_retry_match condition on response status (#7569) Daniil Sivak 2026-04-21 21:59:31 +03:00
  • 12139f2f99
    Rename to stream_detached proxy-stream-detached Francis Lavoie 2026-04-21 08:38:38 -04:00
  • b0dc5d8bb8
    Add note about capturing h Francis Lavoie 2026-04-21 08:17:49 -04:00
  • 4ef0e8a9a5
    Rename to tunnelTracker, reflow some comments Francis Lavoie 2026-04-21 08:12:57 -04:00
  • 2fba548bae
    Move type and const down to the bottom Francis Lavoie 2026-04-21 07:29:23 -04:00
  • f04b77198e
    only clean up connections when stopped WeidiDeng 2026-04-21 17:09:40 +08:00
  • 050d137e76
    change the log level if hijacking without writing a status code first WeidiDeng 2026-04-21 14:55:56 +08:00
  • 44d453de3c
    fix tests WeidiDeng 2026-04-21 14:55:46 +08:00
  • 6d4190f4c7
    fix tests WeidiDeng 2026-04-21 11:54:36 +08:00
  • b15e3cd2fa
    make handleUpgradeTunnel a standalone func WeidiDeng 2026-04-21 11:48:00 +08:00
  • 040fa37add
    correctly close detached streams WeidiDeng 2026-04-21 11:46:28 +08:00
  • 3f257bbccc
    simplify streaming handling WeidiDeng 2026-04-21 10:07:13 +08:00
  • 4628aea894
    record bytes read and written for response writers unless detached WeidiDeng 2026-04-21 10:06:30 +08:00
  • 5609d12e5e
    reverseproxy: Add ability to clear dynamic upstreams cache during retries Matthew Holt 2026-04-20 16:55:16 -06:00
  • db86fdaba2
    Adjustments from Weidi's review Francis Lavoie 2026-04-18 14:16:20 -04:00
  • 710902ddc3
    http: centralise effective protocol resolution for HTTPS RR ALPN feat-https-rr-alpn Zen Dodd 2026-04-18 11:31:12 +10:00
  • 5a1ace3e91
    Improved logging facilities Francis Lavoie 2026-04-13 05:44:03 -04:00
  • de8e430015
    lint Francis Lavoie 2026-04-13 05:03:05 -04:00
  • 476fd0c077
    reverseproxy: Optionally detach stream (websockets) from config lifecycle Francis Lavoie 2026-04-13 04:23:23 -04:00
  • 4430756d5c
    admin: Redact sensitive request headers in API logs (#7578) Zen Dodd 2026-04-18 06:56:42 +10:00
  • af89c5ab02
    build(deps): bump github.com/jackc/pgx/v5 from 5.8.0 to 5.9.0 (#7655) dependabot[bot] 2026-04-17 14:50:53 -06:00
  • bd9f145321
    chore: add AGENTS.md (#7652) Mohammed Al Sahaf 2026-04-17 23:49:58 +03:00
  • 24bebd0a07
    caddyhttp: Document missing placeholders for escaped URI and prefixed query (#7659) Steffen Busch 2026-04-17 22:13:15 +02:00
  • e38228b5f1
    reverseproxy: Test that WebSockets + unix-sockets works test-proxy-unixsocket-ws Francis Lavoie 2026-04-17 11:45:16 -04:00
  • 904f9fddcc
    tls: centralise HTTPS RR ALPN defaults and registration Zen Dodd 2026-04-17 12:25:29 +10:00
  • 7dedd1486c
    fix(caddyfile): {block} in snippet (#7558) prettysunflower 2026-04-15 02:58:53 -04:00
  • aacb430d87
    tls: add alpn to managed HTTPS records Zen Dodd 2026-04-15 09:36:10 +10:00
  • 7586e68e27
    fileserver: show symlink targets verbatim (#7579) Max Truxa 2026-04-14 20:49:30 +02:00
  • 0c7c91a447
    logging: preserve ts for journald-wrapped JSON logs (#7644) Zen Dodd 2026-04-14 09:33:02 +10:00
  • 1a3e900b35
    chore: bump timberjack to v1.4.1 (#7618) Dean Ruina 2026-04-13 10:31:59 +03:00
  • 344bbbcd06
    Use atomic for shutdownAt use-atomics Francis Lavoie 2026-04-13 00:55:27 -04:00
  • cef419186f
    chore: Use atomics where appropriate Francis Lavoie 2026-04-13 00:37:11 -04:00
  • 0722cf6fd8
    chore: replace interface{} with any for modernization (#7571) tsinglua 2026-04-12 00:53:12 +08:00
  • 8e2dd5079c
    caddyfile: Improve import/global options UX for imports before global options (#7642) Zen Dodd 2026-04-11 09:17:55 +10:00
  • 5f44ea0748
    logging: add journald encoder wrapper (#7623) Zen Dodd 2026-04-11 09:09:12 +10:00
  • c8e4ac2c8c
    build(deps): bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4 (#7621) dependabot[bot] 2026-04-10 16:33:07 -06:00
  • 7dcc041eec
    vars: Add matcher placeholder handling tests (#7640) Zen Dodd 2026-04-11 08:27:52 +10:00
  • ca0ca67fbd
    reverseproxy: make stream copy buffer size configurable (#7627) Zen Dodd 2026-04-11 06:49:32 +10:00
  • 92b62004eb
    build(deps): bump the all-updates group across 1 directory with 11 updates (#7641) dependabot[bot] 2026-04-10 20:39:00 +00:00
  • 6c23ec2f3c
    build(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp (#7637) dependabot[bot] 2026-04-10 14:31:08 -06:00
  • 5de1565ff6
    vars: Don't expand placeholders in values (#7629) vnxme 2026-04-10 18:37:43 +03:00
  • d7834676aa
    tls: add system and combined CA pool modules (#7406) Harsh Patel 2026-04-06 03:43:34 +05:30
  • 967de13598
    build(deps): bump the actions-deps group with 6 updates dependabot/github_actions/actions-deps-557ca6a115 dependabot[bot] 2026-04-02 04:12:23 +00:00
  • 4f50458866
    tls: expand placeholders in dns_challenge override_domain (#7609) Pieter Berkel 2026-03-31 16:46:32 +11:00
  • ea4ee3ae5d
    reverseproxy: Fix check for header_up Host {upstream_hostport} redundancy (#7564) yubiuser 2026-03-30 18:56:10 +02:00
  • 30b80bece8
    notify: Always send "READY=1" even after an error (#7597) Francis Lavoie 2026-03-28 15:08:34 -04:00
  • 7a630f2910
    encode: make zstd checksum configurable (#7586) Sam Ottenhoff 2026-03-28 15:07:21 -04:00
  • 62e9c05264
    root: introduce down-propagating Helper.BlockState for other directives/plugins to use (#7594) Marc 2026-03-29 00:44:42 +07:00
  • 6f6771aa1d
    rewrite: skip query rename when source key is absent (#7599) Tao 2026-03-29 03:10:34 +10:00
  • acf8d6a1ae
    caddytls: Consolidate empty APs more smartly (#7567) Matt Holt 2026-03-26 14:41:34 -06:00
  • 2aca49d5f6
    http: use sync.Map for request-scoped vars concurrent-var-access Mohammed Al Sahaf 2026-03-26 19:50:33 +03:00
  • e98ed6232d
    chore: Resolve recent CI failures (#7593) Matt Holt 2026-03-25 23:21:27 -06:00
  • c35ba5588d
    Add missing return to handleError in admin server Matthew Holt 2026-03-25 16:33:24 -06:00
  • a4004467aa
    http: test vars add-tests Mohammed Al Sahaf 2026-03-21 04:22:55 +03:00
  • 41d8cea9e6
    http: test log marshallers Mohammed Al Sahaf 2026-03-21 04:22:40 +03:00
  • ef3158cac7
    storage: file_system Mohammed Al Sahaf 2026-03-20 20:53:10 +03:00
  • a5ef0600aa
    filesystems Mohammed Al Sahaf 2026-03-20 20:52:01 +03:00
  • 9236eacd35
    http: CIDR-to-prefix translation Mohammed Al Sahaf 2026-03-20 20:51:48 +03:00
  • 258a928d27
    http: static_error Mohammed Al Sahaf 2026-03-20 20:50:37 +03:00
  • e56b31e3ad
    config: marshalling and warnings Mohammed Al Sahaf 2026-03-20 20:49:55 +03:00
  • 435e521203
    internal: test package Mohammed Al Sahaf 2026-03-20 20:48:30 +03:00
  • 476d75219c
    caddyhttp: error handling Mohammed Al Sahaf 2026-03-20 20:46:32 +03:00
  • 719d879f3d
    caddyfile: shorthands tests Mohammed Al Sahaf 2026-03-20 20:44:15 +03:00
  • 5db80034a8
    caddyfile: import graph tests Mohammed Al Sahaf 2026-03-20 20:43:59 +03:00
  • 5d189aff40
    caddytls: Avoid default issuers for implicit tailscale policies (#7577) Tao 2026-03-21 01:36:03 +10:00
  • a2a7fd6671
    Merge branch 'master' into add-tests Mohammed Al Sahaf 2026-03-20 04:17:15 +03:00
  • df65455b1f
    caddyhttp: Sync placeholder expansion in vars and vars_regexp (#7573) vnxme 2026-03-17 22:08:47 +03:00
  • 8499e34e10
    caddytls: Ensure key list always gets set (fix #7555) Matthew Holt 2026-03-16 16:21:47 -06:00
  • 6cef20d257
    caddytls: Enable ECH on the "gotten" tls.Config instead of the "getter" fix-ech Matthew Holt 2026-03-12 15:42:47 -06:00
  • 1fbb28720b
    Fix lint errors Matthew Holt 2026-03-11 13:33:59 -06:00
  • ffb6ab0644
    Revert cosign (see #7536) v2.11.2 Matthew Holt 2026-03-05 08:41:54 -07:00
  • 9371ee67c6
    build(deps): bump the actions-deps group across 1 directory with 12 updates (#7536) dependabot[bot] 2026-03-04 21:29:44 -07:00
  • 5d20adc7a9
    build(deps): bump github.com/smallstep/certificates (#7535) dependabot[bot] 2026-03-04 21:26:18 -07:00
  • 6e5e08cf58
    Wire up Cause for most context cancels (#7538) Francis Lavoie 2026-03-04 19:14:52 -05:00
  • fbfb8fc517
    rewrite: Force recomputing path when escaped path matches rewrite target Matthew Holt 2026-03-04 16:18:33 -07:00
  • e06dfcf6ed
    Update SECURITY.md Matt Holt 2026-03-04 16:16:24 -07:00
  • 566e710991
    fileserver: document hide case-sensitivity (F-CADDY-FILESERVER-HIDE-CASE-001) (#7548) Oleh Konko | semantic verification for trust infra | LLM-augmented operations pipeline (precision-first, claim≤evidence, submit-human) | verify the payload, not the signer 2026-03-04 23:00:10 +01:00
  • a5e7c6e232
    reverseproxy: prevent body close on dial-error retries (#7547) Tom Paulus 2026-03-04 12:17:02 -08:00
  • db2986028f
    reverseproxy: Track dynamic upstreams, enable passive healthchecking (#7539) Francis Lavoie 2026-03-04 15:05:26 -05:00
  • 7e83775e3a
    Merge commit from fork Sam.An 2026-03-05 01:08:39 +09:00
  • 2dbcdefbbe
    forward_auth: copy_headers does not strip client-supplied identity headers (Fixes GHSA-7r4p-vjf4-gxv4) (#7545) newklei 2026-03-03 23:30:49 -05:00
  • dc36082859
    caddyhttp: Collect metrics once per route instead of per handler (#7492) Varun Chawla 2026-03-03 14:15:55 -08:00
  • 88616e86e6
    api: Add all in-flight requests /reverse_proxy/upstreams (Fixes #7277) (#7517) Paulo Henrique 2026-03-03 19:14:55 -03:00
  • 7b34e3107e
    core: Check whether @id is unique (#7002) Salent Olivick 2026-03-04 06:09:49 +08:00
  • a6acb3902c
    proxyproto: Generated test coverage (#7540) Francis Lavoie 2026-03-03 17:08:09 -05:00
  • 45cf61b127
    logging: Ensure slog error level logs don't print stack traces (#7512) Francis Lavoie 2026-03-03 16:44:42 -05:00
  • d935a6956c
    autohttps: Ensure CertMagic config is recreated after autohttps runs (#7510) Francis Lavoie 2026-03-03 16:44:06 -05:00
  • 2dd3852416
    fix(caddyfile): Prevent parser to panic when no token were added by empty {block} (#7543) prettysunflower 2026-03-03 13:16:21 -05:00
  • 11b56c6cfc
    reverseproxy: Fix health_port being ignored in health checks (#7533) Akın Demirci 2026-03-03 21:10:54 +03:00
  • f283062d37
    cmd: Custom binary names through CustomBinaryName and CustomLongDescription (#7513) Alexandre Daubois 2026-03-02 12:04:28 +01:00
  • 2ab043b890
    reverseproxy: query escape request urls when proxy protocol is enabled (#7537) WeidiDeng 2026-03-02 15:04:06 +08:00
  • 2ad19885b5
    rewrite: Add option to force modifying the query rewrite-modify-query Francis Lavoie 2023-03-16 17:17:12 -04:00
  • f145bce553
    tls: Add tls_resolvers global option for DNS challenge configuration (#7297) Pavel Siomachkin 2026-03-01 21:32:04 +01:00
  • 174fa2ddb9
    caddyhttp: Evaluate tls.client placeholders more accurately (fix #7530) (#7534) Matt Holt 2026-02-28 22:03:18 -07:00
  • cd9e1660aa
    cmd: Pass configFile, not configFlag, for reload command (#7532) Matt Holt 2026-02-27 15:24:05 -07:00
  • 06a05e383c
    Revert "encode: Implement Flush for legacy compatibility" Matthew Holt 2026-02-27 14:14:19 -07:00