starred/nginx-proxy-manager
1
0 Fork 0
mirror of https://github.com/NginxProxyManager/nginx-proxy-manager.git synced 2026-11-15 15:28:04 +00:00
Code Issues Packages Projects Releases 10 Wiki Activity
2,690 Commits 11 Branches 90 Tags
bc8bbf3562ca6d48b9d663edf4a99db4df86f7a1
Commit Graph
2690 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Abdulhafiz Davlatov bc8bbf3562 feat: rate limit auth endpoints and scope user proxy host permissions 
- Add in-memory sliding window rate limiter for auth token endpoints with CI/test bypass and successful request exclusion
- Add user_permission meta column migration and Objection model configuration
- Support scoping allowed proxy hosts per user when in 'Created Items Only' visibility mode
- Restrict advanced nginx configuration editing on hosts to admin users only
- Fix user permissions route ID parsing and omit id from permission update payloads
- Add allowed proxy hosts selector in permissions modal and display permissions summary badges in users table
 2026-11-05 12:16:36 +05:00
Jamie Curnow cc46ce5ab6 Biome schema match to package 2026-11-05 16:43:28 +10:00
Jamie Curnow b5ee4f7b1b Update pull request template 2026-11-05 10:34:33 +10:00
jc21 9be1cb7818 Merge pull request #5917 from nglinh28/feat/vietnamese-locale-update 
i18n(vi): complete Vietnamese locale and add vi tests
 2026-11-05 10:30:02 +10:00
jc21 fe58b4eba0 Merge pull request #5889 from StopDragon/i18n/ko-missing-keys 
Update Korean translation
 2026-11-05 10:25:43 +10:00
jc21 18fc758b4f Merge pull request #5934 from lennondotw/fix/preserve-host-port 
fix(proxy): preserve client ports in forwarded Host headers
 2026-11-05 10:15:05 +10:00
jc21 5795699091 Merge pull request #5939 from hafizahmedzia/fix/http-certificate-result-keys 
fix: preserve hostname keys in HTTP certificate test results
 2026-11-05 10:05:11 +10:00
jc21 b88ca8e2e5 Merge pull request #5948 from Waterman1997/patch-1 
Fix nginx reload after certificate renewal
 2026-11-05 10:04:02 +10:00
jc21 d504c2bf25 Merge pull request #5951 from Alexis-Loskoutoff/fix/update-infomaniak-certbot-plugin 
Update infomaniak certbot plugin to 0.3.3
 2026-11-05 10:03:35 +10:00
jc21 49662bdc91 Merge pull request #5952 from lsr0/certbot-hetzner-fix-4.0.0 
Update Hetzner certbot plugin to v4.0.0
 2026-11-05 10:02:57 +10:00
jc21 f23dd9bff0 Merge pull request #5969 from capitain-schos/feature/add-dns-provider-ipp 
added ip-projects certbot definitions
 2026-11-05 09:59:23 +10:00
jc21 2a8b39bdef Merge pull request #5971 from Juice-de-Orange/fix/hsts-subdomains-per-host 
fix: apply the HSTS sub-domains setting per host
 2026-11-05 09:58:02 +10:00
jc21 23e56e9581 Merge pull request #5972 from junkerderprovinz/fix/route53-propagation 
Skip propagation seconds option for Route 53 DNS challenge
 2026-11-05 09:56:43 +10:00
jc21 3d09072ea7 Merge pull request #5976 from l1n-x/actualize-beget-package 
Changed target plugin for Beget
 2026-11-05 09:36:45 +10:00
jc21 4daa54c12e Merge pull request #5977 from mirfalltnixein/fix/unsaved-modal-changes 
Prevent data loss when dismissing unsaved forms
 2026-11-05 08:58:53 +10:00
jc21 5457ca0965 Merge pull request #5979 from seaeagle1/develop 
Add certbot plugin for Scaleway DNS
 2026-11-05 08:57:44 +10:00
jc21 1dd0b8fbe8 Merge pull request #5989 from Rip-07/fix/5964-stale-nginx-pid 
fix: remove stale nginx pid file before starting nginx
 2026-11-05 08:45:23 +10:00
jc21 5db7516f40 Merge pull request #5992 from chenghaopeng/patch-1 
Update package name and version for Baidu DNS plugin
 2026-11-05 08:44:51 +10:00
jc21 bd34c94222 Merge pull request #5993 from SebZar/feat/certificate-details-tooltip 
feat: show certificate details in host tables
 2026-11-05 08:42:57 +10:00
Jamie Curnow 9754c4c639 Bump mid version, as Tabler has changed the dark UI it's worth more than a revision change 2026-11-05 08:38:55 +10:00
Jamie Curnow db292e947d Bump version 2026-11-05 08:00:40 +10:00
Jamie Curnow ec0f30106d Migrate cypress to v16 2026-11-05 07:32:24 +10:00
Jamie Curnow 1c76fb76ea install yarn in cypress image 2026-11-04 22:08:48 +10:00
Jamie Curnow f915ca2462 Update all deps, and cypress 2026-11-04 20:54:23 +10:00
jc21 55481adede Merge pull request #6002 from mikeyhenein/frontend-deps 
Frontend: refresh dependencies, react-intl 12, vitest 5, happy-dom 21; fix Tabler 1.7 regressions
 2026-11-04 20:36:18 +10:00
jc21 7e240e4136 Merge pull request #6010 from NginxProxyManager/dependabot/npm_and_yarn/frontend/decode-uri-component-0.5.1 
build(deps): bump decode-uri-component from 0.5.0 to 0.5.1 in /frontend
 2026-11-04 14:42:39 +10:00
dependabot[bot] 3fb2f7261f build(deps): bump decode-uri-component from 0.5.0 to 0.5.1 in /frontend 
Bumps [decode-uri-component](https://github.com/SamVerschueren/decode-uri-component) from 0.5.0 to 0.5.1.
- [Release notes](https://github.com/SamVerschueren/decode-uri-component/releases)
- [Commits](https://github.com/SamVerschueren/decode-uri-component/compare/v0.5.0...v0.5.1)

---
updated-dependencies:
- dependency-name: decode-uri-component
  dependency-version: 0.5.1
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-11-04 04:42:08 +00:00
jc21 bea51343ef Merge pull request #5998 from mikeyhenein/vitest-node25 
Frontend tests: disable Node's built-in localStorage so vitest works on Node 25+
 2026-11-04 14:41:54 +10:00
jc21 42fbab8058 Merge pull request #5999 from mikeyhenein/gitattributes-lf 
Add .gitattributes to keep LF line endings
 2026-11-04 14:41:31 +10:00
jc21 dca46af3fc Merge pull request #6000 from mikeyhenein/s6-overlay-3.2.3.2 
s6-overlay 3.2.3.2
 2026-11-04 14:41:12 +10:00
jc21 4aab1f50a4 Merge pull request #6001 from mikeyhenein/backend-deps 
Backend: refresh yarn.lock within the declared ranges (fixes 15 of 16 advisories, incl. body-parser DoS)
 2026-11-04 14:40:53 +10:00
jc21 44ada6ad5a Merge pull request #6003 from mikeyhenein/permissions-schema 
Reject unknown keys in PUT /api/users/:id/permissions (an extra key crashes the backend)
 2026-11-04 14:34:24 +10:00
jc21 e3631e88c6 Merge pull request #6004 from mikeyhenein/certbot-errors 
Show certbot's failure reason in the UI instead of "Internal Error"
 2026-11-04 14:33:39 +10:00
jc21 fdf51a654c Merge pull request #6005 from mikeyhenein/certificate-delete-files 
Remove a certificate's certbot files on delete even when revoking fails
 2026-11-04 14:30:08 +10:00
jc21 0dc9933409 Merge pull request #6008 from wikrie/patch-2 
Update dns-multi plugin version to 5.6.0
 2026-11-04 08:28:49 +10:00
wikrie 044d093ec5 Update dns-multi plugin version to 5.6.0 
update needed as used version 4.9 did not exists anymore
 2026-11-03 21:27:47 +01:00
mikeyheneinandClaude Opus 5.5 d7a79a547f Remove a certificate's certbot files on delete even when revoking fails 
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
 2026-11-02 20:28:39 -08:00
mikeyheneinandClaude Opus 5.5 d131419907 Show certbot's failure reason in the UI instead of "Internal Error" 
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
 2026-11-02 20:28:38 -08:00
mikeyheneinandClaude Opus 5.5 c68456b205 Frontend: refresh dependencies, react-intl 12, vitest 5, happy-dom 21; fix Tabler 1.7 regressions 
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
 2026-11-02 20:28:37 -08:00
mikeyheneinandClaude Opus 5.5 5aed3a5539 Reject unknown keys in PUT /api/users/:id/permissions (an extra key crashes the backend) 
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
 2026-11-02 20:28:37 -08:00
mikeyheneinandClaude Opus 5.5 c214a49afb Backend: refresh yarn.lock within the declared ranges (fixes 15 of 16 advisories, incl. body-parser DoS) 
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
 2026-11-02 20:28:36 -08:00
mikeyheneinandClaude Opus 5.5 b28e0d5442 s6-overlay 3.2.3.2 
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
 2026-11-02 20:28:35 -08:00
mikeyheneinandClaude Opus 5.5 2a27e542e9 Add .gitattributes to keep LF line endings 
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
 2026-11-02 20:28:33 -08:00
mikeyheneinandClaude Opus 5.5 66fd49ee46 Frontend tests: disable Node's built-in localStorage so vitest works on Node 25+ 
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
 2026-11-02 20:28:31 -08:00
zarges.sandClaude Opus 5.5 d0739b7210 fix: drop DNS provider from certificate popover 
Host endpoints clear the certificate meta, so the DNS provider is never
available in the host tables.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
 2026-11-02 13:36:15 +01:00
zarges.sandClaude Opus 5.5 435ddeee34 feat: show certificate details in host tables 
The SSL column of the proxy, redirection, 404 and stream host tables
only showed the certificate type, so it was not possible to tell which
certificate a host uses.

- Popover on the SSL column with name, ID, provider (incl. DNS
  provider), domain names and expiry date
- SSL label turns red when the certificate is expired and yellow when
  it expires within 30 days
- Custom certificates show their name below the label

Refs #5705

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
 2026-11-02 13:16:22 +01:00
鹏鹏 c19ce19f90 Update package name and version for Baidu DNS plugin 
The previous PyPi package has stopped being updated and is unavailable, rewrite one
 2026-11-02 15:44:09 +08:00
Askhat AkhtanovandClaude Opus 5.5 c23a1cb343 fix: remove stale nginx pid file before starting nginx 
When /run/nginx is already owned by PUID:PGID, the ownership step skips
it, so a leftover nginx.pid owned by root stays in place and nginx,
running as PUID:PGID, fails with "Permission denied" on every start.

Nginx is not running yet during prepare, so remove the pid file there.

Fixes #5964

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
 2026-11-01 13:33:27 +05:00
seaeagle1 d2e8e5650a Add Scaleway DNS 2026-10-28 13:29:10 +01:00
mirfalltnixein 50d413f464 Protect partial location and auth drafts 2026-10-28 00:34:50 +01:00