b4dce74e59 
								
									
								
							
								 
							
						 
						
							
							
								
								tls: Use Let's Encrypt production endpoint  
							
							
 
							
							
							We're done testing this in staging 
							
						 
						6 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								fe389fcbd7 
								
									
								
							
								 
							
						 
						
							
							
								
								http: Set Alt-Svc header if experimental HTTP3 server is enabled  
							
							
								
 
							
							
						 
						6 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								005a11cf4b 
								
									
								
							
								 
							
						 
						
							
							
								
								headers: New 'request_header' directive; handle Host header specially  
							
							
 
							
							
							Before this change, only response headers could be manipulated with the
Caddyfile's 'header' directive.
Also handle the request Host header specially, since the Go standard
library treats it separately from the other header fields... 
							
						 
						6 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								194df652eb 
								
									
								
							
								 
							
						 
						
							
							
								
								reverseproxy: Add 'tls' option to enable HTTPS with HTTP transport  
							
							
								
 
							
							
						 
						6 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								53bbdf1766 
								
									
								
							
								 
							
						 
						
							
							
								
								httpcaddyfile: Add 'experimental_http3' option  
							
							
								
 
							
							
						 
						6 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								e48d83452e 
								
									
								
							
								 
							
						 
						
							
							
								
								httpcaddyfile: Switch order; reverse_proxy comes before php_fastcgi  
							
							
								
 
							
							
						 
						6 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								2459c292a4 
								
									
								
							
								 
							
						 
						
							
							
								
								caddyfile: Improve Dispenser.NextBlock() to support nesting  
							
							
								
 
							
							
						 
						6 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								0cf592fa2e 
								
									
								
							
								 
							
						 
						
							
							
								
								New 'php_fastcgi' directive for convenient PHP+FastCGI reverse proxy  
							
							
								
 
							
							
						 
						6 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								d9136fb0a0 
								
									
								
							
								 
							
						 
						
							
							
								
								rewrite: Caddyfile directive should always invoke a rehandle  
							
							
 
							
							
							This is unless each route's matcher is dynamically executed after
previous handlers... 
							
						 
						6 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								c32b7e8865 
								
									
								
							
								 
							
						 
						
							
							
								
								fastcgi: Make EnvVars a map instead of a slice  
							
							
								
 
							
							
						 
						6 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								1ce10b453f 
								
									
								
							
								 
							
						 
						
							
							
								
								Require Go 1.13; use Go 1.13's default support for TLS 1.3  
							
							
								
 
							
							
						 
						6 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								0c8ad52be1 
								
									
								
							
								 
							
						 
						
							
							
								
								Experimental IETF-standard HTTP/3 support (known issue exists) ( #2727 )  
							
							
 
							
							
							* Begin WIP integration of HTTP/3 support
* http3: Set actual Handler, make fakeClosePacketConn type for UDP sockets
Also use latest quic-go for ALPN fix
* Manually keep track of and close HTTP/3 listeners
* Update quic-go after working through some http3 bugs
* Fix go mod
* Make http3 optional for now 
							
						 
						6 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								d67d8cf5a8 
								
									
								
							
								 
							
						 
						
							
							
								
								Fix build (sigh)  
							
							
								
 
							
							
						 
						6 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								44b7ce9850 
								
									
								
							
								 
							
						 
						
							
							
								
								Merge pull request  #2737  from caddyserver/fastcgi (reverse proxy!)  
							
							
 
							
							
							v2: Refactor reverse proxy and add FastCGI support 
							
						 
						6 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								b4f4fcd437 
								
									
								
							
								 
							
						 
						
							
							
								
								Migrate some selection policy tests over to v2  
							
							
								
 
							
							
						 
						6 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								50e62d06bc 
								
									
								
							
								 
							
						 
						
							
							
								
								reverse_proxy: Caddyfile integration (and fix blocks in Dispenser)  
							
							
								
 
							
							
						 
						6 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								9169cd43d4 
								
									
								
							
								 
							
						 
						
							
							
								
								Log when auto HTTPS or auto HTTP->HTTPS redirects are disabled  
							
							
								
 
							
							
						 
						6 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								e12c62e60b 
								
									
								
							
								 
							
						 
						
							
							
								
								file_server: Enforce URL canonicalization ( closes   #2741 )  
							
							
								
 
							
							
						 
						6 years ago  
				
					
						
							
							
								 
						
							
							
							
								
							
								3e9e7555ef 
								
							
								 
							
						 
						
							
							
								
								Fix build ( #2740 )  
							
							
 
							
							
							Build was broken with commit 50961ec 
							
						 
						6 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								f6126acf37 
								
									
								
							
								 
							
						 
						
							
							
								
								Header matchers: allow matching presence of header with empty list  
							
							
								
 
							
							
						 
						6 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								97ace2a39e 
								
									
								
							
								 
							
						 
						
							
							
								
								File matcher enforces trailing-slash convention to match dirs/files  
							
							
								
 
							
							
						 
						6 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								4bd9496525 
								
									
								
							
								 
							
						 
						
							
							
								
								Fix Schrodinger's file existence check in file matcher  
							
							
 
							
							
							See: https://stackoverflow.com/a/12518877/1048862 
For example, trying to check the existence of "/www/index.php/index.php"
fails but not with an os.IsNotExist()-type error. So we have to assume
that a file that cannot be successfully stat'ed at all does not exist. 
							
						 
						6 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								14f9662f9c 
								
									
								
							
								 
							
						 
						
							
							
								
								Various fixes/tweaks to HTTP placeholder variables and file matching  
							
							
 
							
							
							- Rename http.var.* -> http.vars.* to be more consistent
- Prefixing a path matcher with * now invokes simple suffix matching
- Handlers and matchers that need a root path default to {http.vars.root}
- Clean replacer output on the file matcher's file selection suffix 
							
						 
						6 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								21d7b662e7 
								
									
								
							
								 
							
						 
						
							
							
								
								fastcgi: Use request context as base, not a new one  
							
							
								
 
							
							
						 
						6 years ago  
				
					
						
							
							
								 
						
							
							
							
								
							
								3ba9e143a2 
								
							
								 
							
						 
						
							
							
								
								cli: Fix run and start when no config file is available  
							
							
								
 
							
							
						 
						6 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								d2e46c2be0 
								
									
								
							
								 
							
						 
						
							
							
								
								fastcgi: Set default root path; add interface guards  
							
							
								
 
							
							
						 
						6 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								80b54f3b9d 
								
									
								
							
								 
							
						 
						
							
							
								
								Add original URI to request context; implement into fastcgi env  
							
							
								
 
							
							
						 
						6 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								0830fbad03 
								
									
								
							
								 
							
						 
						
							
							
								
								Reconcile upstream dial addresses and request host/URL information  
							
							
 
							
							
							My goodness that was complicated
Blessed be request.Context
Sort of 
							
						 
						6 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								a60d54dbfd 
								
									
								
							
								 
							
						 
						
							
							
								
								reverse_proxy: Ignore context.Canceled errors  
							
							
 
							
							
							These happen when downstream clients cancel the request, but that's not
our problem nor a failure in our end 
							
						 
						6 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								acb8f0e0c2 
								
									
								
							
								 
							
						 
						
							
							
								
								Integrate circuit breaker modules with reverse proxy  
							
							
								
 
							
							
						 
						6 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								652460e03e 
								
									
								
							
								 
							
						 
						
							
							
								
								Some cleanup and godoc  
							
							
								
 
							
							
						 
						6 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								4a1e1649bc 
								
									
								
							
								 
							
						 
						
							
							
								
								reverse_proxy: Implement remaining TLS config for proxy to backend  
							
							
								
 
							
							
						 
						6 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								ccfb12347b 
								
									
								
							
								 
							
						 
						
							
							
								
								reverse_proxy: Implement active health checks  
							
							
								
 
							
							
						 
						6 years ago  
				
					
						
							
							
								 
						
							
							
							
								
							
								50961ecc77 
								
							
								 
							
						 
						
							
							
								
								Initial implementation of TLS client authentication ( #2731 )  
							
							
 
							
							
							* Add support for client TLS authentication
Signed-off-by: Alexandre Stein <alexandre_stein@interlab-net.com>
* make and use client authentication struct
* force StrictSNIHost if TLSConnPolicies is not empty
* Implement leafs verification
* Fixes issue when using multiple verification
* applies the comments from maintainers
* Apply comment
* Refactor/cleanup initial TLS client auth implementation 
							
						 
						6 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								026df7c5cb 
								
									
								
							
								 
							
						 
						
							
							
								
								reverse_proxy: WIP refactor and support for FastCGI  
							
							
								
 
							
							
						 
						6 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								8e821b5039 
								
									
								
							
								 
							
						 
						
							
							
								
								caddyconfig: Add JSON5 and JSON-C adapters ( closes   #2735 )  
							
							
								
 
							
							
						 
						6 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								9d8bff28c2 
								
									
								
							
								 
							
						 
						
							
							
								
								oops, also update the Caddyfile's {query} var to use query_string  
							
							
								
 
							
							
						 
						6 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								d242f10eda 
								
									
								
							
								 
							
						 
						
							
							
								
								Add query_string to HTTP replacer and use it for try_files  
							
							
								
 
							
							
						 
						6 years ago  
				
					
						
							
							
								 
						
							
							
							
								
							
								2dc4fcc62b 
								
							
								 
							
						 
						
							
							
								
								Fix caddyconfig import in admin.go ( #2725 )  
							
							
								
 
							
							
						 
						6 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								afd154119a 
								
									
								
							
								 
							
						 
						
							
							
								
								admin: Support config adapters at /load endpoint  
							
							
 
							
							
							Based on Content-Type 
							
						 
						6 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								e34ff21a71 
								
									
								
							
								 
							
						 
						
							
							
								
								caddyfile: Allow handler order to be customized  
							
							
								
 
							
							
						 
						6 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								af25f0254e 
								
									
								
							
								 
							
						 
						
							
							
								
								caddyfile: Support global config block; allow non-empty blocks w/ 0 keys  
							
							
								
 
							
							
						 
						6 years ago  
				
					
						
							
							
								 
						
							
							
							
								
							
								a0fd2b6c0a 
								
							
								 
							
						 
						
							
							
								
								Fix SIV where /v2 was missing from caddyfile adapter work ( #2721 )  
							
							
								
 
							
							
						 
						6 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								c0da7d487a 
								
									
								
							
								 
							
						 
						
							
							
								
								file_server: Automatically hide all involved Caddyfiles  
							
							
								
 
							
							
						 
						6 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								8420a2f250 
								
									
								
							
								 
							
						 
						
							
							
								
								Clean up Dispenser and filename handling a bit  
							
							
								
 
							
							
						 
						6 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								59910923d1 
								
									
								
							
								 
							
						 
						
							
							
								
								Update readme for v2 caddyfile and config adapters  
							
							
								
 
							
							
						 
						6 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								0544f0266a 
								
									
								
							
								 
							
						 
						
							
							
								
								Merge pull request  #2699  from caddyserver/cfadapter  
							
							
 
							
							
							v2: Implement config adapters and WIP Caddyfile adapter 
							
						 
						6 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								b2aa679c33 
								
									
								
							
								 
							
						 
						
							
							
								
								Fix snippet nesting bug  
							
							
								
 
							
							
						 
						6 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								fa334c4bdf 
								
									
								
							
								 
							
						 
						
							
							
								
								Implement some shorthand placeholders for Caddyfile  
							
							
								
 
							
							
						 
						6 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								d73b650c26 
								
									
								
							
								 
							
						 
						
							
							
								
								Update go.mod  
							
							
								
 
							
							
						 
						6 years ago