Matthew Holt
ebf07f853b
caddyhttp: Fix auto redirects for catch-all HTTPS sites
Prior logic was not setting up redirects for the case when domain names
are not known, but the server still clearly has TLS enabled.
5 years ago
Matthew Holt
1b061815b2
reverseproxy: Don't forget to provision embedded headers handler
https://caddy.community/t/set-cookie-manipulation-in-reverse-proxy/7666?u=matt
5 years ago
Matthew Holt
026937fab5
caddyhttp: Fix trailers when recording responses ( fixes #3236 )
5 years ago
Francis Lavoie
bacf50a59e
caddyhttp: Fix common_log format's user ID placeholder ( #3300 )
5 years ago
westwin
da8686c4b9
reverseproxy: always set req.URL.Host with upstream ( #3297 )
5 years ago
Matthew Holt
e3a8f72f1c
docs: Minor improvements
5 years ago
Matt Holt
76bbb473a5
reverseproxy: Set X-Forwarded-Proto ( closes #3275 ) ( #3276 )
5 years ago
Matthew Holt
829e36d535
httpcaddyfile: Don't lowercase placeholder contents ( fixes #3264 )
5 years ago
Matthew Holt
ec456811bb
core: Don't return error on RegisterModule() and RegisterAdapter()
These functions are called at init-time, and their inputs are hard-coded
so there are no environmental or user factors that could make it fail
or succeed; the error return values are often ignored, and when they're
not, they are usually a fatal error anyway. To ensure that a programmer
mistake is not missed, we now panic instead.
Last breaking change 🤞
5 years ago
Matthew Holt
68cebb28d0
Fix some godocs
5 years ago
Matthew Holt
999ab22b8c
caddyhttp: Add nil check ( fixes #3248 and fixes #3250 )
5 years ago
Matthew Holt
f29023bf8f
reverseproxy: Minor tweaks
We'll need that context in v2.1 when the transport can manage its own
client certificates; see #3198
5 years ago
Matthew Holt
85f5f47f31
caddytls: Don't initialize default internal issuer unless necessary
Otherwise, a password prompt can occur unnecessarily.
5 years ago
Matthew Holt
e5dc76b054
caddyhttp: CEL matcher checks return type; slight refactor
As per https://github.com/caddyserver/caddy/issues/3051#issuecomment-611200414
5 years ago
Mohammed Al Sahaf
7dfd69cdc5
chore: make the linter happier ( #3245 )
* chore: make the linter happier
* chore: remove reference to maligned linter in .golangci.yml
5 years ago
Matthew Holt
0fe98038b6
caddyhttp: Fix logging name associations by adding a default
5 years ago
Matthew Holt
4d9b63d909
cel: Leverage DefaultAdapter to extend CEL's type system
Thanks to @TristonianJones for the tip!
105acfa086 (r38358983)
5 years ago
Matthew Holt
e30deedcc1
caddyhttp: Return port placeholders as ints
5 years ago
Matt Holt
fbd9515d35
basicauth: Re-prompt after invalid credentials ( fix #3239 ) ( #3240 )
5 years ago
Matthew Holt
95f6bd7e5c
templates: Update docs
5 years ago
Matthew Holt
b1ce9d4db7
templates: Add env function ( closes #3237 )
5 years ago
Matthew Holt
2c1b663156
reverseproxy: Remove NTLM transport; refactor and improve docs
5 years ago
Matthew Holt
8b2dbc52ec
core: Rename ParsedAddress -> NetworkAddress
5 years ago
Matthew Holt
657f0cab17
docs: Clarify "not" matcher structure (see #3233 )
5 years ago
Francis Lavoie
7be747fbe9
caddyhttp: Add missing LB policy Caddyfile unmarshalers ( #3230 )
5 years ago
Francis Lavoie
5b355cbed0
caddyhttp: Strictly forbid unnecessary blocks on matchers ( #3229 )
5 years ago
Francis Lavoie
a3cfe437b1
caddyhttp: Support single-line not matcher ( #3228 )
* caddyhttp: Support single-line not matcher shortcut
* caddyhttp: Some tests, I guess
5 years ago
Matthew Holt
437d5095a6
templates: Use text/template; add experimental notice to docs
Using html/template.HTML like we were doing before caused nested include
to be HTML-escaped, which breaks sites. Now we do not escape any of the
output; template input is usually trusted, and if it's not, users should
employ escaping actions within their templates to keep it safe. The docs
already said this.
5 years ago
Matthew Holt
1e8af27329
fastcgi: Account for lack of split path configuration ( fix #3221 )
5 years ago
Matthew Holt
d322de6b42
gzip: Use klauspost/gzip, an optimized gzip implementation
5 years ago
Matthew Holt
ce3ca541d8
caddytls: Update cipher suite names and curve names
Now using IANA-compliant names and Go 1.14's CipherSuites() function so
we don't have to maintain our own mapping of currently-secure cipher
suites.
5 years ago
Matthew Holt
581f1defcb
caddyhttp: Print actual listener address in log message ( closes #2992 )
Needed if port is 0, thus chosen by OS
5 years ago
Matthew Holt
0d2a3511dc
caddyhttp: Update host matcher docs about wildcards
5 years ago
Matt Holt
73643ea736
caddyhttp: 'not' matcher now accepts multiple matcher sets and OR's them ( #3208 )
See https://caddy.community/t/v2-matcher-or-in-not/7355/
5 years ago
Matthew Holt
809e72792c
rewrite: Fix for rewrites with URI placeholders ( #3209 )
If a placeholder in the path component injects a query string such as
the {http.request.uri} placeholder is wont to do, we need to separate it
out from the path.
5 years ago
Matthew Holt
ac65f690ae
caddyhttp: Rename MatchNegate type to MatchNot type
This is more congruent with its module name. A change that affects only
code, not configurations.
5 years ago
Matthew Holt
37aa516a6e
headers: Trim any trailing colon from field names as a courtesy
5 years ago
Matthew Holt
105acfa086
Keep type information with placeholders until replacements happen
5 years ago
Matthew Holt
178ba024fe
httpcaddyfile: Put root directive first, before redir and rewrite
See https://caddy.community/t/v2-match-any-path-but-files/7326/8?u=matt
If rewrites (or redirects, for that matter) match on file existence,
the file matcher would need to know the root of the site.
Making this change implies that root directives that depend on rewritten
URIs will not work as expected. However, I think this is very uncommon,
and am not sure I have ever seen that. Usually, dynamic roots are based
on host, not paths or query strings.
I suspect that rewrites based on file existence will be more common than
roots based on rewritten URIs, so I am moving root to be the first in
the list.
Users can always override this ordering with the 'order' global option.
5 years ago
Matthew Holt
e207240f9a
reverse_proxy: Upstream.String() method returns either LookupSRV or Dial
Either Dial or LookupSRV will be set, but if we rely on Dial always
being set, we could run into bugs.
Note: Health checks don't support SRV upstreams.
5 years ago
Robin Lambertz
397e04ebd9
caddyauth: Add Metadata field to caddyauth.User ( #3174 )
* caddyauth: Add Metadata field to caddyauth.User
* Apply gofmt
* Tidy it up a bit
Co-authored-by: Matthew Holt <mholt@users.noreply.github.com>
5 years ago
Matthew Holt
673d3d00f2
file_server: Fix dumb error check I must have written at 1am
5 years ago
Matthew Holt
2acb208e32
caddyhttp: Specify default access log for a server ( fix #3185 )
5 years ago
Matt Holt
e02117cb8a
reverse_proxy: Add support for SRV backends ( #3180 )
* reverse_proxy: Begin SRV lookup support (WIP)
* reverse_proxy: Finish adding support for SRV-based backends (#3179 )
5 years ago
Matthew Holt
341d4fb805
Remove some non-essential plugins from this repo ( #2780 )
Brotli encoder, jsonc and json5 config adapters, and the unfinished
HTTP cache handler are removed.
They will be available in separate repos.
5 years ago
Matthew Holt
745cb0e9e6
fastcgi: Add debug log ( #3178 )
5 years ago
Matt Holt
2eede58b3a
fastcgi: Ensure root is always absolute (issue #3178 ) ( #3182 )
5 years ago
Matthew Holt
235357abc8
fastcgi: Fix PATH_INFO (issue #3178 )
5 years ago
Matthew Holt
4c43bf8cc8
caddyhttp: Always provision ACME issuers (fix terms agree error)
5 years ago
Matthew Holt
f2ce81cc8b
fastcgi: Support multiple path splitters ( close #1564 )
5 years ago