starred/nginx-proxy-manager
1
0 Fork 0
mirror of https://github.com/NginxProxyManager/nginx-proxy-manager.git synced 2026-11-15 12:48:22 +00:00
Code Issues Packages Projects Releases 10 Wiki Activity
2,707 Commits 11 Branches 90 Tags
fff2b0d0974a55e28d9fbbbbfe5999e65db603ac
Commit Graph
2707 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Jamie Curnow fff2b0d097 Fix for changing the upstream Host from $host to $forward_host 
($http_host) forwards the raw client Host header, including the port and
any absolute-form URI mismatch, to every upstream and into the asset
cache key
 2026-11-09 22:09:34 +10:00
Jamie Curnow 99678969b3 Fix a proxy host whose access list can't be loaded is now denied to 
everyone instead of being served with no restrictions
 2026-11-09 22:04:32 +10:00
Jamie Curnow 0cde59a8ad Fix for rate limiter only trusts X-Forwarded-For when the socket is 
loopback, and the admin nginx sets that header to its own $remote_addr
 2026-11-09 22:00:26 +10:00
Jamie Curnow 36b3434b9c Fix for adding meta.certificate_key to omissions() 
means upload() now reads a row with no private key, so an upload that
leaves out certificate_key wipes the stored key and writeCustomCert
writes undefined to privkey.pem.
 2026-11-09 21:57:00 +10:00
jc21 71be654418 Merge branch 'master' into develop 2026-11-09 14:01:11 +10:00
Jamie Curnow 47c9bfba4f Update dependencies 2026-11-09 11:55:20 +10:00
jc21 7c767f43b0 Merge pull request #6028 from occultsound/zh-tw-locale 
Add Traditional Chinese (Taiwan) translation
 2026-11-09 07:42:44 +10:00
occultsound 15beff767d Add Traditional Chinese (Taiwan) translation 2026-11-09 02:16:59 +08:00
jc21 53ee436e35 Merge pull request #6026 from Stephan-P/patch-1 
Update nl.json
 2026-11-08 18:53:40 +10:00
Stephan Paternotteandgreptile-apps[bot] e824d353f0 Update frontend/src/locale/src/nl.json 
Co-authored-by: greptile-apps[bot] <165735046+greptile-apps[bot]@users.noreply.github.com>
 2026-11-07 15:55:09 +01:00
Stephan Paternotte 3f2c186771 Update nl.json 
Lang: Dutch translation file updated + some minor corrections
 2026-11-07 15:47:16 +01:00
jc21 ea7e7468df Merge pull request #6023 from Alexis-Loskoutoff/fix-authentication-oracle 
Fix authentication oracle
 2026-11-06 08:58:10 +10:00
Alexis Loskoutoff e93b771ff5 Check a dummy hash when a login names no account 
Without a password to check, a login for an unknown account skipped bcrypt
and answered far sooner than one with a wrong password, which still told
which emails have an account.
 2026-11-05 18:29:52 +01:00
Alexis Loskoutoff c08f2e65a8 Add test for the same error on every failed login 2026-11-05 17:29:48 +01:00
Alexis Loskoutoff 0d90542119 Give the same error for every failed login 
An unknown or passwordless account was rejected without the i18n key that
a wrong password gets, so the response told which emails have an account.
 2026-11-05 17:29:48 +01:00
jc21 2f5342b427 Merge pull request #5908 from auzcoder/fix/auth-rate-limit-and-permissions 
feat: rate limit auth endpoints and scope user proxy host permissions
 2026-11-05 23:05:08 +10:00
Abdulhafiz Davlatov bc8bbf3562 feat: rate limit auth endpoints and scope user proxy host permissions 
- Add in-memory sliding window rate limiter for auth token endpoints with CI/test bypass and successful request exclusion
- Add user_permission meta column migration and Objection model configuration
- Support scoping allowed proxy hosts per user when in 'Created Items Only' visibility mode
- Restrict advanced nginx configuration editing on hosts to admin users only
- Fix user permissions route ID parsing and omit id from permission update payloads
- Add allowed proxy hosts selector in permissions modal and display permissions summary badges in users table
 2026-11-05 12:16:36 +05:00
Jamie Curnow cc46ce5ab6 Biome schema match to package 2026-11-05 16:43:28 +10:00
Jamie Curnow b5ee4f7b1b Update pull request template 2026-11-05 10:34:33 +10:00
jc21 9be1cb7818 Merge pull request #5917 from nglinh28/feat/vietnamese-locale-update 
i18n(vi): complete Vietnamese locale and add vi tests
 2026-11-05 10:30:02 +10:00
jc21 fe58b4eba0 Merge pull request #5889 from StopDragon/i18n/ko-missing-keys 
Update Korean translation
 2026-11-05 10:25:43 +10:00
jc21 18fc758b4f Merge pull request #5934 from lennondotw/fix/preserve-host-port 
fix(proxy): preserve client ports in forwarded Host headers
 2026-11-05 10:15:05 +10:00
jc21 5795699091 Merge pull request #5939 from hafizahmedzia/fix/http-certificate-result-keys 
fix: preserve hostname keys in HTTP certificate test results
 2026-11-05 10:05:11 +10:00
jc21 b88ca8e2e5 Merge pull request #5948 from Waterman1997/patch-1 
Fix nginx reload after certificate renewal
 2026-11-05 10:04:02 +10:00
jc21 d504c2bf25 Merge pull request #5951 from Alexis-Loskoutoff/fix/update-infomaniak-certbot-plugin 
Update infomaniak certbot plugin to 0.3.3
 2026-11-05 10:03:35 +10:00
jc21 49662bdc91 Merge pull request #5952 from lsr0/certbot-hetzner-fix-4.0.0 
Update Hetzner certbot plugin to v4.0.0
 2026-11-05 10:02:57 +10:00
jc21 f23dd9bff0 Merge pull request #5969 from capitain-schos/feature/add-dns-provider-ipp 
added ip-projects certbot definitions
 2026-11-05 09:59:23 +10:00
jc21 2a8b39bdef Merge pull request #5971 from Juice-de-Orange/fix/hsts-subdomains-per-host 
fix: apply the HSTS sub-domains setting per host
 2026-11-05 09:58:02 +10:00
jc21 23e56e9581 Merge pull request #5972 from junkerderprovinz/fix/route53-propagation 
Skip propagation seconds option for Route 53 DNS challenge
 2026-11-05 09:56:43 +10:00
jc21 3d09072ea7 Merge pull request #5976 from l1n-x/actualize-beget-package 
Changed target plugin for Beget
 2026-11-05 09:36:45 +10:00
jc21 4daa54c12e Merge pull request #5977 from mirfalltnixein/fix/unsaved-modal-changes 
Prevent data loss when dismissing unsaved forms
 2026-11-05 08:58:53 +10:00
jc21 5457ca0965 Merge pull request #5979 from seaeagle1/develop 
Add certbot plugin for Scaleway DNS
 2026-11-05 08:57:44 +10:00
jc21 1dd0b8fbe8 Merge pull request #5989 from Rip-07/fix/5964-stale-nginx-pid 
fix: remove stale nginx pid file before starting nginx
 2026-11-05 08:45:23 +10:00
jc21 5db7516f40 Merge pull request #5992 from chenghaopeng/patch-1 
Update package name and version for Baidu DNS plugin
 2026-11-05 08:44:51 +10:00
jc21 bd34c94222 Merge pull request #5993 from SebZar/feat/certificate-details-tooltip 
feat: show certificate details in host tables
 2026-11-05 08:42:57 +10:00
Jamie Curnow 9754c4c639 Bump mid version, as Tabler has changed the dark UI it's worth more than a revision change 2026-11-05 08:38:55 +10:00
Jamie Curnow db292e947d Bump version 2026-11-05 08:00:40 +10:00
Jamie Curnow ec0f30106d Migrate cypress to v16 2026-11-05 07:32:24 +10:00
Jamie Curnow 1c76fb76ea install yarn in cypress image 2026-11-04 22:08:48 +10:00
Jamie Curnow f915ca2462 Update all deps, and cypress 2026-11-04 20:54:23 +10:00
jc21 55481adede Merge pull request #6002 from mikeyhenein/frontend-deps 
Frontend: refresh dependencies, react-intl 12, vitest 5, happy-dom 21; fix Tabler 1.7 regressions
 2026-11-04 20:36:18 +10:00
jc21 7e240e4136 Merge pull request #6010 from NginxProxyManager/dependabot/npm_and_yarn/frontend/decode-uri-component-0.5.1 
build(deps): bump decode-uri-component from 0.5.0 to 0.5.1 in /frontend
 2026-11-04 14:42:39 +10:00
dependabot[bot] 3fb2f7261f build(deps): bump decode-uri-component from 0.5.0 to 0.5.1 in /frontend 
Bumps [decode-uri-component](https://github.com/SamVerschueren/decode-uri-component) from 0.5.0 to 0.5.1.
- [Release notes](https://github.com/SamVerschueren/decode-uri-component/releases)
- [Commits](https://github.com/SamVerschueren/decode-uri-component/compare/v0.5.0...v0.5.1)

---
updated-dependencies:
- dependency-name: decode-uri-component
  dependency-version: 0.5.1
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-11-04 04:42:08 +00:00
jc21 bea51343ef Merge pull request #5998 from mikeyhenein/vitest-node25 
Frontend tests: disable Node's built-in localStorage so vitest works on Node 25+
 2026-11-04 14:41:54 +10:00
jc21 42fbab8058 Merge pull request #5999 from mikeyhenein/gitattributes-lf 
Add .gitattributes to keep LF line endings
 2026-11-04 14:41:31 +10:00
jc21 dca46af3fc Merge pull request #6000 from mikeyhenein/s6-overlay-3.2.3.2 
s6-overlay 3.2.3.2
 2026-11-04 14:41:12 +10:00
jc21 4aab1f50a4 Merge pull request #6001 from mikeyhenein/backend-deps 
Backend: refresh yarn.lock within the declared ranges (fixes 15 of 16 advisories, incl. body-parser DoS)
 2026-11-04 14:40:53 +10:00
jc21 44ada6ad5a Merge pull request #6003 from mikeyhenein/permissions-schema 
Reject unknown keys in PUT /api/users/:id/permissions (an extra key crashes the backend)
 2026-11-04 14:34:24 +10:00
jc21 e3631e88c6 Merge pull request #6004 from mikeyhenein/certbot-errors 
Show certbot's failure reason in the UI instead of "Internal Error"
 2026-11-04 14:33:39 +10:00
jc21 fdf51a654c Merge pull request #6005 from mikeyhenein/certificate-delete-files 
Remove a certificate's certbot files on delete even when revoking fails
 2026-11-04 14:30:08 +10:00