starred/nginx-proxy-manager
1
0 Fork 0
mirror of https://github.com/NginxProxyManager/nginx-proxy-manager.git synced 2026-11-14 19:58:32 +00:00
Code Issues Packages Projects Releases 10 Wiki Activity
2,646 Commits 11 Branches 90 Tags
1c76fb76ea263b22221efd4e84e32fcf35f7b693
Commit Graph
2646 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Jamie Curnow 1c76fb76ea install yarn in cypress image 2026-11-04 22:08:48 +10:00
Jamie Curnow f915ca2462 Update all deps, and cypress 2026-11-04 20:54:23 +10:00
jc21 55481adede Merge pull request #6002 from mikeyhenein/frontend-deps 
Frontend: refresh dependencies, react-intl 12, vitest 5, happy-dom 21; fix Tabler 1.7 regressions
 2026-11-04 20:36:18 +10:00
jc21 7e240e4136 Merge pull request #6010 from NginxProxyManager/dependabot/npm_and_yarn/frontend/decode-uri-component-0.5.1 
build(deps): bump decode-uri-component from 0.5.0 to 0.5.1 in /frontend
 2026-11-04 14:42:39 +10:00
dependabot[bot] 3fb2f7261f build(deps): bump decode-uri-component from 0.5.0 to 0.5.1 in /frontend 
Bumps [decode-uri-component](https://github.com/SamVerschueren/decode-uri-component) from 0.5.0 to 0.5.1.
- [Release notes](https://github.com/SamVerschueren/decode-uri-component/releases)
- [Commits](https://github.com/SamVerschueren/decode-uri-component/compare/v0.5.0...v0.5.1)

---
updated-dependencies:
- dependency-name: decode-uri-component
  dependency-version: 0.5.1
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-11-04 04:42:08 +00:00
jc21 bea51343ef Merge pull request #5998 from mikeyhenein/vitest-node25 
Frontend tests: disable Node's built-in localStorage so vitest works on Node 25+
 2026-11-04 14:41:54 +10:00
jc21 42fbab8058 Merge pull request #5999 from mikeyhenein/gitattributes-lf 
Add .gitattributes to keep LF line endings
 2026-11-04 14:41:31 +10:00
jc21 dca46af3fc Merge pull request #6000 from mikeyhenein/s6-overlay-3.2.3.2 
s6-overlay 3.2.3.2
 2026-11-04 14:41:12 +10:00
jc21 4aab1f50a4 Merge pull request #6001 from mikeyhenein/backend-deps 
Backend: refresh yarn.lock within the declared ranges (fixes 15 of 16 advisories, incl. body-parser DoS)
 2026-11-04 14:40:53 +10:00
jc21 44ada6ad5a Merge pull request #6003 from mikeyhenein/permissions-schema 
Reject unknown keys in PUT /api/users/:id/permissions (an extra key crashes the backend)
 2026-11-04 14:34:24 +10:00
jc21 e3631e88c6 Merge pull request #6004 from mikeyhenein/certbot-errors 
Show certbot's failure reason in the UI instead of "Internal Error"
 2026-11-04 14:33:39 +10:00
jc21 fdf51a654c Merge pull request #6005 from mikeyhenein/certificate-delete-files 
Remove a certificate's certbot files on delete even when revoking fails
 2026-11-04 14:30:08 +10:00
jc21 0dc9933409 Merge pull request #6008 from wikrie/patch-2 
Update dns-multi plugin version to 5.6.0
 2026-11-04 08:28:49 +10:00
wikrie 044d093ec5 Update dns-multi plugin version to 5.6.0 
update needed as used version 4.9 did not exists anymore
 2026-11-03 21:27:47 +01:00
mikeyheneinandClaude Opus 5.5 d7a79a547f Remove a certificate's certbot files on delete even when revoking fails 
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
 2026-11-02 20:28:39 -08:00
mikeyheneinandClaude Opus 5.5 d131419907 Show certbot's failure reason in the UI instead of "Internal Error" 
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
 2026-11-02 20:28:38 -08:00
mikeyheneinandClaude Opus 5.5 c68456b205 Frontend: refresh dependencies, react-intl 12, vitest 5, happy-dom 21; fix Tabler 1.7 regressions 
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
 2026-11-02 20:28:37 -08:00
mikeyheneinandClaude Opus 5.5 5aed3a5539 Reject unknown keys in PUT /api/users/:id/permissions (an extra key crashes the backend) 
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
 2026-11-02 20:28:37 -08:00
mikeyheneinandClaude Opus 5.5 c214a49afb Backend: refresh yarn.lock within the declared ranges (fixes 15 of 16 advisories, incl. body-parser DoS) 
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
 2026-11-02 20:28:36 -08:00
mikeyheneinandClaude Opus 5.5 b28e0d5442 s6-overlay 3.2.3.2 
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
 2026-11-02 20:28:35 -08:00
mikeyheneinandClaude Opus 5.5 2a27e542e9 Add .gitattributes to keep LF line endings 
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
 2026-11-02 20:28:33 -08:00
mikeyheneinandClaude Opus 5.5 66fd49ee46 Frontend tests: disable Node's built-in localStorage so vitest works on Node 25+ 
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
 2026-11-02 20:28:31 -08:00
jc21 1aca775cb9 Merge pull request #5944 from jeezat/develop 
fix(certbot): update Akamai Edge DNS plugin and credentials for v0.3.0
 2026-10-14 07:10:53 +10:00
jc21 556738fd4d Merge pull request #5946 from Alexis-Loskoutoff/require-authentication-to-validate-certificates 
Require authentication to validate certificates
 2026-10-14 07:09:56 +10:00
Alexis Loskoutoff f1bd157438 Add test for certificate validation with view-only permission 2026-10-13 19:32:53 +02:00
Alexis Loskoutoff 6acf346262 Add test for unauthenticated certificate validation 2026-10-13 18:35:50 +02:00
Alexis Loskoutoff 82529d6402 Require certificates:create permission to validate certificates 2026-10-13 18:34:20 +02:00
jeezat 8c5b4d8ffd fix(certbot): update Akamai Edge DNS plugin and credentials for v0.3.0 2026-10-13 07:57:28 +02:00
jc21 d780474583 Merge pull request #5938 from Alexis-Loskoutoff/Update-FR-translations 
Update french translations
 2026-10-12 15:12:57 +10:00
Alexis Loskoutoff 41713715ca Improve existing french translations 2026-10-11 22:55:39 +02:00
Alexis Loskoutoff 06b02f7731 Add missing FR translations 2026-10-11 21:53:42 +02:00
jc21 56ab784117 Merge pull request #5935 from NginxProxyManager/fix/5919-access-list-render 
Fix access list rules and SSL missing from re-rendered host configs
 2026-10-09 22:56:56 +10:00
Jamie Curnow 717877db3f Fix flakey cypress test 2026-10-09 22:35:02 +10:00
jc21 1454252acd Merge branch 'develop' into fix/5919-access-list-render 2026-10-09 07:32:34 +10:00
jc21 1028e139e4 Merge pull request #5930 from Juice-de-Orange/i18n/de-it-missing 
Add missing German (de) and Italian (it) translations
 2026-10-07 08:35:10 +10:00
jc21 7d7ed25715 Merge pull request #5929 from NginxProxyManager/dependabot/npm_and_yarn/backend/proxy-addr-2.0.8 
build(deps): bump proxy-addr from 2.0.7 to 2.0.8 in /backend
 2026-10-07 08:31:37 +10:00
Juice-de-Orange 3270873cc8 Add missing German (de) and Italian (it) translations 2026-10-06 20:42:18 +02:00
dependabot[bot] 81e7044a17 build(deps): bump proxy-addr from 2.0.7 to 2.0.8 in /backend 
Bumps [proxy-addr](https://github.com/jshttp/proxy-addr) from 2.0.7 to 2.0.8.
- [Release notes](https://github.com/jshttp/proxy-addr/releases)
- [Changelog](https://github.com/jshttp/proxy-addr/blob/master/HISTORY.md)
- [Commits](https://github.com/jshttp/proxy-addr/compare/v2.0.7...v2.0.8)

---
updated-dependencies:
- dependency-name: proxy-addr
  dependency-version: 2.0.8
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-10-05 23:34:59 +00:00
jc21 3f1c0f27d3 Merge pull request #5925 from NginxProxyManager/dependabot/npm_and_yarn/backend/fast-uri-3.1.8 
build(deps): bump fast-uri from 3.1.7 to 3.1.8 in /backend
 2026-10-06 09:33:45 +10:00
Jamie CurnowandClaude Opus 5.5 2afd723cd8 Fix access list rules and SSL missing from re-rendered host configs 
Some paths rendered host configs without fully loading the relations
the templates depend on, silently dropping access rules (and SSL):

- Enabling a proxy host loaded the access list without its clients or
  auth items, so the host came back with no access restrictions.
- Requesting a Let's Encrypt certificate re-rendered every host sharing
  its domains from bare rows, dropping access rules and SSL.

generateConfig now loads any referenced certificate or access list that
isn't fully loaded, so no caller can render a partial config. The two
callers above also fetch the relations themselves, and a warning is
logged when a host's access list is missing or has no rules.

Adds integration tests covering access lists across disable/enable.

Fixes #5919, #4286, #5710

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
 2026-10-05 22:13:31 +10:00
dependabot[bot] f5e6dfecfb build(deps): bump fast-uri from 3.1.7 to 3.1.8 in /backend 
Bumps [fast-uri](https://github.com/fastify/fast-uri) from 3.1.7 to 3.1.8.
- [Release notes](https://github.com/fastify/fast-uri/releases)
- [Commits](https://github.com/fastify/fast-uri/compare/v3.1.7...v3.1.8)

---
updated-dependencies:
- dependency-name: fast-uri
  dependency-version: 3.1.8
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-10-05 09:34:18 +00:00
jc21 778ab6b375 Merge pull request #5921 from NginxProxyManager/dependabot/npm_and_yarn/test/serialize-javascript-7.1.2 
build(deps): bump serialize-javascript from 7.1.1 to 7.1.2 in /test
 2026-10-05 19:32:57 +10:00
dependabot[bot] 092d212ad7 build(deps): bump serialize-javascript from 7.1.1 to 7.1.2 in /test 
Bumps [serialize-javascript](https://github.com/yahoo/serialize-javascript) from 7.1.1 to 7.1.2.
- [Release notes](https://github.com/yahoo/serialize-javascript/releases)
- [Commits](https://github.com/yahoo/serialize-javascript/compare/v7.1.1...v7.1.2)

---
updated-dependencies:
- dependency-name: serialize-javascript
  dependency-version: 7.1.2
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-10-04 14:38:20 +00:00
jc21 f64d43b9ae Merge pull request #5913 from PrassanthVG/fix/ip-ranges-timer 
Don't start IP ranges renewal timer when fetching is disabled
 2026-10-02 08:48:48 +10:00
Prassanth 77dfc3d3c1 Don't start IP ranges renewal timer when fetching is disabled 
IP_RANGES_FETCH_ENABLED=false only skipped the initial fetch; the
renewal timer still fetched the ranges every 6 hours.

Fixes #5748
 2026-10-02 02:08:28 +05:30
jc21 2dfd691169 Merge pull request #5910 from NginxProxyManager/dependabot/npm_and_yarn/backend/ip-address-10.7.2 
build(deps): bump ip-address from 10.5.0 to 10.7.2 in /backend
 2026-09-30 07:01:24 +10:00
dependabot[bot] c699dc96d4 build(deps): bump ip-address from 10.5.0 to 10.7.2 in /backend 
Bumps [ip-address](https://github.com/beaugunderson/ip-address) from 10.5.0 to 10.7.2.
- [Release notes](https://github.com/beaugunderson/ip-address/releases)
- [Commits](https://github.com/beaugunderson/ip-address/compare/v10.5.0...v10.7.2)

---
updated-dependencies:
- dependency-name: ip-address
  dependency-version: 10.7.2
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-09-29 07:19:54 +00:00
jc21 5dcaf28d7c Merge pull request #5891 from Amitind/fix/5128-hide-certificate-key 
fix: omit certificate_key from certificate API responses
 2026-09-26 19:30:31 +10:00
jc21 de65105744 Merge pull request #5886 from xJayMorex/fix-chown 
fix: only chown /data/keys.json if necessary
 2026-09-26 19:18:14 +10:00
Amit Yadav a54b73f153 fix: omit certificate_key from certificate API responses 
The private key of custom certificates was returned in meta by GET /api/nginx/certificates and GET /api/nginx/certificates/{id}. Add meta.certificate_key to omissions(), the same way meta.dns_provider_credentials is hidden. The key stays in the database and is still written to /data/custom_ssl on upload.
 2026-09-25 20:35:32 +05:30