NginxProxyManager/nginx-proxy-manager
1
0
Fork 0
mirror of https://github.com/NginxProxyManager/nginx-proxy-manager.git synced 2026-06-17 07:44:32 +00:00
Code Issues Packages Projects Releases Wiki Activity
2,473 Commits 13 Branches 89 Tags
develop
Commit Graph
539 Commits
Author SHA1 Message Date
jc21andGitHub a5db5ed156 Merge pull request #5498 from Yasha-ops/develop 
fix: Changed order of escape to prevent RCE
 2026-06-08 08:51:46 +10:00
Yassine DamiriandGitHub 45a3659ffd Change fs import to use fs/promises 2026-06-04 15:08:31 +02:00
Yassine DamiriandGitHub a457fe4d96 Merge branch 'develop' into develop 2026-06-04 15:06:42 +02:00
jc21andGitHub 258b522725 Merge branch 'develop' into dependabot/npm_and_yarn/backend/node-rsa-2.0.0 2026-06-04 07:17:53 +10:00
jc21andGitHub 179c27e382 Merge pull request #5275 from 7heMech/develop 
Add reuseport to improve performance and reduce packet drops
 2026-06-04 07:16:50 +10:00
dependabot[bot]andGitHub a08f821c54 Bump node-rsa from 1.1.1 to 2.0.0 in /backend 
Bumps [node-rsa](https://github.com/rzcoder/node-rsa) from 1.1.1 to 2.0.0.
- [Release notes](https://github.com/rzcoder/node-rsa/releases)
- [Changelog](https://github.com/rzcoder/node-rsa/blob/master/CHANGELOG.md)
- [Commits](https://github.com/rzcoder/node-rsa/compare/1.1.1...v2.0.0)

---
updated-dependencies:
- dependency-name: node-rsa
  dependency-version: 2.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-06-02 13:59:29 +00:00
Yassine DamiriandGitHub 6629abed32 Use fs module for credential file operations 
Refactor (from the review) credential file handling to use fs module for directory creation and file writing
 2026-06-01 17:02:19 +02:00
jc21andGitHub 79a4128b78 Merge branch 'develop' into develop 2026-05-31 22:04:14 +10:00
Jamie Curnow fc1adb64a3 Fix regression of null domains in db creates 2026-05-29 07:32:58 +10:00
Jamie Curnow a6b7a7dd9d Only clean domain names on cert save if given 2026-05-28 18:24:13 +10:00
jc21andGitHub e48695401e Merge branch 'develop' into dependabot/npm_and_yarn/backend/qs-6.15.2 2026-05-27 11:08:07 +10:00
dependabot[bot]andGitHub 6bb9a90103 Bump the prod-minor-updates group across 1 directory with 2 updates 
Bumps the prod-minor-updates group with 2 updates in the /backend directory: [liquidjs](https://github.com/harttle/liquidjs) and [pg](https://github.com/brianc/node-postgres/tree/HEAD/packages/pg).


Updates `liquidjs` from 10.25.7 to 10.27.0
- [Release notes](https://github.com/harttle/liquidjs/releases)
- [Changelog](https://github.com/harttle/liquidjs/blob/master/CHANGELOG.md)
- [Commits](https://github.com/harttle/liquidjs/compare/v10.25.7...v10.27.0)

Updates `pg` from 8.20.0 to 8.21.0
- [Changelog](https://github.com/brianc/node-postgres/blob/master/CHANGELOG.md)
- [Commits](https://github.com/brianc/node-postgres/commits/pg@8.21.0/packages/pg)

---
updated-dependencies:
- dependency-name: liquidjs
  dependency-version: 10.27.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-minor-updates
- dependency-name: pg
  dependency-version: 8.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-minor-updates
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-05-26 22:54:39 +00:00
dependabot[bot]andGitHub a47d401d86 Bump qs from 6.15.0 to 6.15.2 in /backend 
Bumps [qs](https://github.com/ljharb/qs) from 6.15.0 to 6.15.2.
- [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md)
- [Commits](https://github.com/ljharb/qs/compare/v6.15.0...v6.15.2)

---
updated-dependencies:
- dependency-name: qs
  dependency-version: 6.15.2
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-05-26 22:53:22 +00:00
Jamie Curnow 7e9cc32f97 Fix cypress suite 
- split out cypress tests for plugins to be isolated
- use updated testca image from proper location
 2026-05-27 07:25:24 +10:00
Jamie Curnow 03c70e3902 Fixes for upgraded debian trixie 
- Adds request logging in debug mode for some endpoints
- Moves certbot version determination to the startup scripts and removes
  bash script encapsulation when installing plugins
- Revert loose domain validation, which was there for a specific reason
  addressing CVE's
- Fix Cypress suite for cert generation
- Adds Cypress test that iterates over the entire certbot plugins list
  and installs each one, ensuring at the very least that the install
  works
- Fixed some plugins based on this
- (!) Still some work to do on this, hostinger is still broken at least
- Improved cypress tests for custom certs; they will generate on each
  run instead of being baked in. The baked ones were due to expire soon
 2026-05-25 07:37:24 +10:00
Jamie Curnow f53bf88f4d Update cypress docker version, generate custom certs each time 2026-05-19 08:04:49 +10:00
Jamie Curnow ee1f7ba551 Fall back to error code 500 when not set in error object 2026-05-18 16:55:41 +10:00
Jamie Curnow 586dfd36a9 Fix openssl3 formatting of subject cn 2026-05-18 16:12:02 +10:00
Jamie Curnow 2bf9e9b213 Support different cert info output in new version of debian 2026-05-18 15:52:52 +10:00
Jamie Curnow 7330d0441c Loose validation on certificate domain names 2026-05-18 15:34:29 +10:00
Jamie Curnow 84886383a7 Fix certificates getting null domain names whgen no cn exists 2026-05-18 15:21:55 +10:00
Jamie Curnow 1e22574000 Fix nulls showing in certificate rows 2026-05-18 15:04:27 +10:00
jc21andGitHub 32a74d9781 Merge pull request #5543 from Matthew-Kilpatrick/fix-deny-all-on-no-access-rules 
fix: omit "Access rules" directives if no rules configured
 2026-05-18 11:23:55 +10:00
jc21andGitHub 840a720d09 Merge pull request #5550 from rfos/develop 
Add Hostinger DNS plugin configuration
 2026-05-18 07:44:59 +10:00
Reinaldo FerroandGitHub ef0ec0b188 Add Hostinger DNS plugin configuration 2026-05-17 22:16:48 +02:00
Daan Selen 387f8d9424 cherry-pick requested changes 2026-05-17 20:23:22 +02:00
Matthew Kilpatrick 52c32b473d fix: omit "Access rules" directives if no rules configured 
When an access list was associated with a template which had users (items) but no rules (clients), a `deny all` directive was inserted to the config. This resulted in all requests, including those with valid credentials, being rejected due to the lack of any `allow` directive.

This commit wraps the access rule configuration inside of an if block, so the `deny all;` directive is only present when at least one rule is configured.
 2026-05-15 19:03:20 +00:00
jc21andGitHub ebcd2a209c Merge pull request #5415 from 12LuA/develop 
Fix typo in debug mode comment
 2026-05-14 11:43:08 +10:00
jc21andGitHub d099b00463 Merge pull request #5421 from edklesel/access-list-clients-ordered-insert 
Access list clients ordered insert
 2026-05-14 11:39:32 +10:00
jc21andGitHub 9875a7650d Merge pull request #5460 from barttran2k/contribai/fix/security/undefined-variable-next-referenced-in-ro 
Security: Undefined Variable `next` Referenced in Route Error Handler
 2026-05-14 11:11:12 +10:00
jc21andGitHub 6694df668e Merge pull request #5480 from MichaelJanssenNesai/patch-1 
Update dns plugin for deSec to 1.3.2
 2026-05-14 10:52:14 +10:00
jc21andGitHub d3ba40e066 Merge pull request #5485 from butalex11/add-hosterby-dns-provider 
Add hoster.by DNS provider
 2026-05-14 10:51:00 +10:00
jc21andGitHub 13cfa340de Merge pull request #5508 from Zoey2936/fix-5441 
Fix bug that allowed any authenticated user to modify their own roles field through the PUT
 2026-05-14 10:23:31 +10:00
jc21andGitHub a38fb8d311 Merge pull request #5530 from Ludo-code/new-dns-provider-RcodeZero 
Add RcodeZero DNS plugin to dns-plugins.json for #5512
 2026-05-14 08:36:37 +10:00
jc21andGitHub c8e6010ac3 Merge pull request #5531 from MBulli/patch-1 
Added PUT and DELETE method to Access-Control-Allow-Methods field
 2026-05-14 08:35:23 +10:00
dependabot[bot]andGitHub 982c16a86d Bump minimatch from 10.2.2 to 10.2.5 in /backend 
Bumps [minimatch](https://github.com/isaacs/minimatch) from 10.2.2 to 10.2.5.
- [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md)
- [Commits](https://github.com/isaacs/minimatch/compare/v10.2.2...v10.2.5)

---
updated-dependencies:
- dependency-name: minimatch
  dependency-version: 10.2.5
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-05-13 20:13:44 +00:00
jc21andGitHub 5af25c2d9c Merge pull request #5528 from NginxProxyManager/dependabot/npm_and_yarn/backend/fast-uri-3.1.2 
Bump fast-uri from 3.1.0 to 3.1.2 in /backend
 2026-05-13 20:26:20 +10:00
jc21andGitHub b29bc1a66e Merge pull request #5430 from NginxProxyManager/dependabot/npm_and_yarn/backend/picomatch-2.3.2 
Bump picomatch from 2.3.1 to 2.3.2 in /backend
 2026-05-13 19:13:59 +10:00
jc21andGitHub a68f993571 Merge pull request #5438 from NginxProxyManager/dependabot/npm_and_yarn/backend/path-to-regexp-8.4.0 
Bump path-to-regexp from 8.3.0 to 8.4.2 in /backend
 2026-05-13 19:13:23 +10:00
dependabot[bot]andGitHub 6ed6210a7b Bump picomatch from 2.3.1 to 2.3.2 in /backend 
Bumps [picomatch](https://github.com/micromatch/picomatch) from 2.3.1 to 2.3.2.
- [Release notes](https://github.com/micromatch/picomatch/releases)
- [Changelog](https://github.com/micromatch/picomatch/blob/master/CHANGELOG.md)
- [Commits](https://github.com/micromatch/picomatch/compare/2.3.1...2.3.2)

---
updated-dependencies:
- dependency-name: picomatch
  dependency-version: 2.3.2
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-05-13 03:49:18 +00:00
dependabot[bot]andGitHub 8b24059e3b Bump path-to-regexp from 8.3.0 to 8.4.2 in /backend 
Bumps [path-to-regexp](https://github.com/pillarjs/path-to-regexp) from 8.3.0 to 8.4.2.
- [Release notes](https://github.com/pillarjs/path-to-regexp/releases)
- [Changelog](https://github.com/pillarjs/path-to-regexp/blob/master/History.md)
- [Commits](https://github.com/pillarjs/path-to-regexp/compare/v8.3.0...v8.4.2)

---
updated-dependencies:
- dependency-name: path-to-regexp
  dependency-version: 8.4.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-05-13 03:49:03 +00:00
dependabot[bot]andGitHub dc84b4b94b Bump ip-address from 10.1.0 to 10.2.0 in /backend 
Bumps [ip-address](https://github.com/beaugunderson/ip-address) from 10.1.0 to 10.2.0.
- [Commits](https://github.com/beaugunderson/ip-address/commits)

---
updated-dependencies:
- dependency-name: ip-address
  dependency-version: 10.2.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-05-13 03:47:17 +00:00
dependabot[bot]andGitHub 41c32ebf0a Bump fast-uri from 3.1.0 to 3.1.2 in /backend 
Bumps [fast-uri](https://github.com/fastify/fast-uri) from 3.1.0 to 3.1.2.
- [Release notes](https://github.com/fastify/fast-uri/releases)
- [Commits](https://github.com/fastify/fast-uri/compare/v3.1.0...v3.1.2)

---
updated-dependencies:
- dependency-name: fast-uri
  dependency-version: 3.1.2
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-05-13 03:47:12 +00:00
Jamie Curnow 7d58c579fa Fix backend linting 2026-05-13 13:40:06 +10:00
Jamie Curnow 18b3404f46 Update all packages and fix related problems 2026-05-13 13:27:59 +10:00
MarkusandGitHub b66fd9d3ae Added PUT and DELETE method to Access-Control-Allow-Methods field 2026-05-12 09:24:28 +02:00
LudovicandGitHub c869d5a42b Add RcodeZero DNS plugin to dns-plugins.json 2026-05-12 01:56:05 +02:00
Zoey 1ad78af5a0 fix #5441 2026-04-26 14:14:30 +02:00
Yassine DAMIRI 46bf3274d8 fix: Changed order of escape to prevent RCE 2026-04-20 01:00:43 +02:00
Alexander GumiandGitHub cea69e4ba5 Add hoster.by DNS provider 2026-04-14 11:05:03 +03:00