b3bff13f7d 
								
									
								
							
								 
							
						 
						
							
							
								
								reverseproxy: Close websocket conn if req context cancels  
							
							
 
							
							
							This is a recent patch in the Go standard library 
							
						 
						5 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								7211101c52 
								
									
								
							
								 
							
						 
						
							
							
								
								ci: Fix gemfury upload condition, move triggers to publish event ( #3483 )  
							
							
								
 
							
							
						 
						5 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								90dba172cb 
								
									
								
							
								 
							
						 
						
							
							
								
								ci: fix an oopsie in the release script ( #3482 )  
							
							
								
 
							
							
						 
						5 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								4b10ae5ce6 
								
									
								
							
								 
							
						 
						
							
							
								
								reverseproxy: Add Caddyfile support for ClientCertificateAutomate  
							
							
								
 
							
							
						 
						5 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								1dfb11486e 
								
									
								
							
								 
							
						 
						
							
							
								
								httpcaddyfile: Add client_auth options to tls directive ( #3335 )  
							
							
 
							
							
							* reading client certificate config from Caddyfile
Signed-off-by: NWHirschfeld <Niclas@NWHirschfeld.de>
* Update caddyconfig/httpcaddyfile/builtins.go
Co-authored-by: Francis Lavoie <lavofr@gmail.com>
* added adapt test for parsing client certificate configuration from Caddyfile
Signed-off-by: NWHirschfeld <Niclas@NWHirschfeld.de>
* read client ca and leaf certificates from file https://github.com/caddyserver/caddy/pull/3335#discussion_r421633844 
Signed-off-by: NWHirschfeld <Niclas@NWHirschfeld.de>
* Update modules/caddytls/connpolicy.go
* Make review adjustments
Co-authored-by: Francis Lavoie <lavofr@gmail.com>
Co-authored-by: Matt Holt <mholt@users.noreply.github.com> 
							
						 
						5 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								11a132d48b 
								
									
								
							
								 
							
						 
						
							
							
								
								caddytls: Configurable cache size limit  
							
							
								
 
							
							
						 
						5 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								9dafa63933 
								
									
								
							
								 
							
						 
						
							
							
								
								go.mod: Update dependencies  
							
							
								
 
							
							
						 
						5 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								21c1da101c 
								
									
								
							
								 
							
						 
						
							
							
								
								ci: Disable publishing .deb on beta tags ( #3473 )  
							
							
								
 
							
							
						 
						5 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								7a99835dab 
								
									
								
							
								 
							
						 
						
							
							
								
								reverseproxy: Enable changing only the status code ( close   #2920 )  
							
							
								
 
							
							
						 
						5 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								7b0962ba4d 
								
									
								
							
								 
							
						 
						
							
							
								
								caddyhttp: Default to error status if found in context  
							
							
 
							
							
							This is just a convenience if using a static_response handler in an
error route, by setting the default status code to the same one as
the error status. 
							
						 
						5 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								2d1f7b9da8 
								
									
								
							
								 
							
						 
						
							
							
								
								caddyhttp: Auto-redirects from all bind addresses ( fix   #3443 )  
							
							
								
 
							
							
						 
						5 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								a285fe4129 
								
									
								
							
								 
							
						 
						
							
							
								
								caddypki: Add 'acme_server' Caddyfile directive  
							
							
								
 
							
							
						 
						5 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								97e61c16a3 
								
									
								
							
								 
							
						 
						
							
							
								
								httpcaddyfile: Sort site blocks with wildcards last ( fix   #3410 )  
							
							
								
 
							
							
						 
						5 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								83551edf3e 
								
									
								
							
								 
							
						 
						
							
							
								
								cmd: Only stop admin server on signal if it exists ( fix   #3470 )  
							
							
								
 
							
							
						 
						5 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								e18c373064 
								
									
								
							
								 
							
						 
						
							
							
								
								caddytls: Actually use configured test CA  
							
							
								
 
							
							
						 
						5 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								9a7756c6e4 
								
									
								
							
								 
							
						 
						
							
							
								
								caddyauth: Cache basicauth results ( fixes   #3462 ) ( #3465 )  
							
							
 
							
							
							Cache capacity is currently hard-coded at 1000 with random eviction.
It is enabled by default from Caddyfile configurations because I assume
this is the most common preference. 
							
						 
						5 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								fdf2a77feb 
								
									
								
							
								 
							
						 
						
							
							
								
								caddyfile: Add args on imports ( #3423 )  
							
							
 
							
							
							* caddyfile: Add support for args on imports
* caddyfile: Add more import args tests 
							
						 
						5 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								a496308f6e 
								
									
								
							
								 
							
						 
						
							
							
								
								httpcaddyfile: Let modules add listener wrappers ( #3397 )  
							
							
 
							
							
							* httpcaddyfile: allow modules to customize listener wrappers
* Update caddyconfig/httpcaddyfile/httptype.go
Co-authored-by: Matt Holt <mholt@users.noreply.github.com>
* Update caddyconfig/httpcaddyfile/httptype.go
Co-authored-by: Matt Holt <mholt@users.noreply.github.com>
* Update caddyconfig/httpcaddyfile/httptype.go
Co-authored-by: Matt Holt <mholt@users.noreply.github.com>
* Update caddyconfig/httpcaddyfile/httptype.go
Co-authored-by: Matt Holt <mholt@users.noreply.github.com>
Co-authored-by: Matt Holt <mholt@users.noreply.github.com> 
							
						 
						5 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								d5d7fb5954 
								
									
								
							
								 
							
						 
						
							
							
								
								go.mod: Update dependencies  
							
							
								
 
							
							
						 
						5 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								996af0915d 
								
									
								
							
								 
							
						 
						
							
							
								
								cmd: Support admin endpoint on unix socket ( #3320 )  
							
							
								
 
							
							
						 
						6 years ago  
				
					
						
							
							
								 
						
							
							
							
								
							
								6c051cd27d 
								
							
								 
							
						 
						
							
							
								
								caddyconfig: Minor internal and godoc tweaks  
							
							
								
 
							
							
						 
						6 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								9415feca7c 
								
									
								
							
								 
							
						 
						
							
							
								
								logging: Net writer redials if write fails ( #3453 )  
							
							
 
							
							
							* logging: Net writer redials if write fails
https://caddy.community/t/v2-log-output-net-does-not-reconnect-after-lost-connection/8386?u=matt 
* Only replace connection if redial succeeds
* Fix error handling 
							
						 
						6 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								881b826fb5 
								
									
								
							
								 
							
						 
						
							
							
								
								reverseproxy: Pool copy buffers (minor optimization)  
							
							
								
 
							
							
						 
						6 years ago  
				
					
						
							
							
								 
						
							
							
							
								
							
								538ddb8587 
								
							
								 
							
						 
						
							
							
								
								reverseproxy: Enable response interception ( #1447 ,  #2920 )  
							
							
 
							
							
							It's a raw, low-level implementation for now, but it's very flexible.
More sugar-coating can be added after error handling is more developed. 
							
						 
						6 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								69b5643130 
								
									
								
							
								 
							
						 
						
							
							
								
								chore: Fix typo in dispenser.go ( #3456 )  
							
							
								
 
							
							
						 
						6 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								e5bbed1046 
								
									
								
							
								 
							
						 
						
							
							
								
								caddyhttp: Refactor header matching  
							
							
 
							
							
							This allows response matchers to benefit from the same matching logic
as the request header matchers (mainly prefix/suffix wildcards). 
							
						 
						6 years ago  
				
					
						
							
							
								 
						
							
							
							
								
							
								294910c68c 
								
							
								 
							
						 
						
							
							
								
								caddyhttp: Add client.public_key(_sha256) placeholders  
							
							
								
 
							
							
						 
						6 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								8c5d00b2bc 
								
									
								
							
								 
							
						 
						
							
							
								
								httpcaddyfile: New `handle_path` directive ( #3281 )  
							
							
 
							
							
							* caddyconfig: WIP implementation of handle_path
* caddyconfig: Complete the implementation - h.NewRoute was key
* caddyconfig: Add handle_path integration test
* caddyhttp: Use the path matcher as-is, strip the trailing *, update test 
							
						 
						6 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								aa20878887 
								
									
								
							
								 
							
						 
						
							
							
								
								cmd: file-server: add --access-log flag ( #3454 )  
							
							
								
 
							
							
						 
						6 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								c1e5c09294 
								
									
								
							
								 
							
						 
						
							
							
								
								reverseproxy: Improve error message when using scheme+placeholder ( #3393 )  
							
							
 
							
							
							* reverseproxy: Improve error message when using scheme+placeholder
* reverseproxy: Simplify error message
Co-authored-by: Matt Holt <mholt@users.noreply.github.com>
Co-authored-by: Matt Holt <mholt@users.noreply.github.com> 
							
						 
						6 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								ffc125d6f5 
								
									
								
							
								 
							
						 
						
							
							
								
								caddyfile: Move NewTestDispenser into non-test file ( #3439 )  
							
							
								
 
							
							
						 
						6 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								22055c5e0f 
								
									
								
							
								 
							
						 
						
							
							
								
								reverseproxy: Fix https active health checks  #3450  ( #3451 )  
							
							
								
 
							
							
						 
						6 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								dfe802aed3 
								
									
								
							
								 
							
						 
						
							
							
								
								chore: forego the use of deprecated cel func NewIdent in favor of NewVar ( #3444 )  
							
							
								
 
							
							
						 
						6 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								7a365af5df 
								
									
								
							
								 
							
						 
						
							
							
								
								chore: simplify goreleaser flow, add bash completions to .deb ( #3436 )  
							
							
								
 
							
							
						 
						6 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								0cbf467b3f 
								
									
								
							
								 
							
						 
						
							
							
								
								caddyhttp: Add time.now placeholder and update cel-go ( closes   #2594 )  
							
							
								
 
							
							
						 
						6 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								bb67e19d7b 
								
									
								
							
								 
							
						 
						
							
							
								
								cmd: hash-password: Fix broken terminal state on SIGINT ( #3416 )  
							
							
 
							
							
							* caddyauth: Fix hash-password broken terminal state on SIGINT
* caddycmd: Move TrapSignals calls to only subcommands that run long 
							
						 
						6 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								1dc4ec2d77 
								
									
								
							
								 
							
						 
						
							
							
								
								admin: Disallow websockets  
							
							
 
							
							
							No currently-known exploit here, just being conservative 
							
						 
						6 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								452d4726f7 
								
									
								
							
								 
							
						 
						
							
							
								
								Update SECURITY.md  
							
							
								
 
							
							
						 
						6 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								2a8a198568 
								
									
								
							
								 
							
						 
						
							
							
								
								reverseproxy: Don't overwrite existing X-Forwarded-Proto header  
							
							
 
							
							
							Correct behavior is not well defined because this is a non-standard
header field. This could be a "hop-by-hop" field much like
X-Forwarded-For is, but even our X-Forwarded-For implementation
preserves prior entries. Or, it could be best to preserve the original
value from the first hop, representing the protocol as facing the
client.
Let's try it the other way for a bit and see how it goes.
See https://caddy.community/t/caddy2-w-wordpress-behind-nginx-reverse-proxy/8174/3?u=matt  
							
						 
						6 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								cc8fb488d3 
								
									
								
							
								 
							
						 
						
							
							
								
								httpcaddyfile: Improve error on matcher declared outside site block ( #3431 )  
							
							
								
 
							
							
						 
						6 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								fae064262d 
								
									
								
							
								 
							
						 
						
							
							
								
								httpcaddyfile: Add `auto_https` global option ( #3284 )  
							
							
								
 
							
							
						 
						6 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								9ee01dceac 
								
									
								
							
								 
							
						 
						
							
							
								
								reverseproxy: Make debug log safe if error occurs  
							
							
								
 
							
							
						 
						6 years ago  
				
					
						
							
							
								 
						
							
							
							
								
							
								812278acd8 
								
							
								 
							
						 
						
							
							
								
								reverseproxy: Emit debug log before checking error ( #3425 )  
							
							
 
							
							
							This way the upstream request will always be available even if it failed 
							
						 
						6 years ago  
				
					
						
							
							
								 
						
							
							
							
								
							
								c47ddbeffb 
								
							
								 
							
						 
						
							
							
								
								pki: Add docs to some struct fields  
							
							
								
 
							
							
						 
						6 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								483e31b978 
								
									
								
							
								 
							
						 
						
							
							
								
								templates: trim windows whitespace in SplitFrontMatter;  fix   #3386  ( #3387 )  
							
							
 
							
							
							* add test case for SplitFrontMatter showing issue with windows newline
* fix issue with windows newline when using SplitFrontMatter
* Update modules/caddyhttp/templates/frontmatter.go
Co-authored-by: Francis Lavoie <lavofr@gmail.com>
* make it mere explicit what is trimmed from firstLine
* Update modules/caddyhttp/templates/frontmatter.go
Co-authored-by: Francis Lavoie <lavofr@gmail.com>
Co-authored-by: Matt Holt <mholt@users.noreply.github.com> 
							
						 
						6 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								41a682ddde 
								
									
								
							
								 
							
						 
						
							
							
								
								caddyauth: Add realm to basicauth Caddyfile directive ( #3315 )  
							
							
								
 
							
							
						 
						6 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								7243454a96 
								
									
								
							
								 
							
						 
						
							
							
								
								fastcgi: `php_fastcgi` subdirectives to override shortcut behaviour ( #3255 )  
							
							
 
							
							
							* fastcgi: Add new php_fastcgi subdirectives to override the shortcut
* fastcgi: Support "index off" to disable redir and try_files
* fastcgi: Remove whitespace to satisfy linter
* fastcgi: Run gofmt
* fastcgi: Make a new dispenser instead of using rewind
* fastcgi: Some fmt
* fastcgi: Add a couple adapt tests
* fastcgi: Clean up for loops
* fastcgi: Move adapt tests to separate files 
							
						 
						6 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								3fb2c394d1 
								
									
								
							
								 
							
						 
						
							
							
								
								go.mod: Update dependencies  
							
							
 
							
							
							Notably, this adds Caddyfile syntax highlighting in markdown rendering 
							
						 
						6 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								21de227fe9 
								
									
								
							
								 
							
						 
						
							
							
								
								httpcaddyfile: Be stricter about `log` syntax ( #3419 )  
							
							
								
 
							
							
						 
						6 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								62c9f2cf3e 
								
									
								
							
								 
							
						 
						
							
							
								
								cmd: Add --envfile flag to run command ( #3278 )  
							
							
 
							
							
							* run: Add the possibility to load an env file
* run: change envfile flag var
* run: do not ignore err values
* Apply suggestions from code review
Co-authored-by: Matt Holt <mholt@users.noreply.github.com>
Co-authored-by: Matt Holt <mholt@users.noreply.github.com> 
							
						 
						6 years ago