beenull/sftpgo-mirror

mirror of https://github.com/drakkan/sftpgo.git synced 2024-11-26 01:20:29 +00:00

Author	SHA1	Message	Date
Nicola Murino	d5946da1e2	OIDC: allow to enable only OIDC login for Web UIs Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-07-19 22:25:00 +02:00
Nicola Murino	55b47cf741	sftp realpath: resolve symlinks Fixes #890 Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-07-17 16:02:45 +02:00
Nicola Murino	e0ce2e2e8a	allow to customize the log level The old log-verbose flag is not appropriate anymore. You should now use the log-level flag to set your preferred log level. The default level is "debug" as before, you can also set "info", "warn", "error" Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-07-13 10:40:24 +02:00
Nicola Murino	20e8cb898a	always check root dir in multi node setups Fixes #920 Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-07-12 08:32:31 +02:00
Nicola Murino	b5894b257f	try to better highlight donations and sponsorships options ... ... and to better explain why they are required. Please don't say "someone else will help the project, I'll just use it" Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-07-11 16:14:44 +02:00
Nicola Murino	1b8f94c08f	add event manager auto backup removed from setting. You can now schedule backups with the event manager Fixes #762 Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-07-11 08:17:36 +02:00
Nicola Murino	9a6b1a1315	Fix issues found in PR #887 Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-06-25 10:42:17 +02:00
Andre Mainka	90009a649d	Allow OAuth Scope to be configured (#887 ) Signed-off-by: BobSilent <andre_1@gmx.net>	2022-06-25 10:40:39 +02:00
Nicola Murino	729f30aebf	allow to refuse an upload from a sync upload hook Fixes #880 Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-06-16 18:42:17 +02:00
Nicola Murino	6f4475ff72	httpfs: add support for UNIX domain sockets Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-06-12 18:29:49 +02:00
Nicola Murino	0b9a96ec6b	restore fast path for recursive permissions check and update some docs Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-06-12 12:04:48 +02:00
Nicola Murino	7ab30099dd	add httpfs Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-06-11 10:41:34 +02:00
Nicola Murino	118744a860	parse IP proxy header also if listening on UNIX domain socket Fixes #867 Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-06-09 08:37:37 +02:00
Nicola Murino	75efaa9741	APT and YUM repo are now available This is possible thanks to the Oregon State University's free mirroring service Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-06-09 07:30:09 +02:00
Nicola Murino	b774289c6d	change default value for naming_rules to 1 Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-06-03 16:09:02 +02:00
Nicola Murino	ecf715880f	update docs Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-06-03 14:36:38 +02:00
Nicola Murino	b2e28fe3a2	groups: apply placeholders to the fs config of virtual folders Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-06-02 09:45:01 +02:00
Nicola Murino	f6b11c2d01	httpd/webdav: allow to configure trusted proxy header and depth Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-05-28 19:47:23 +02:00
Nicola Murino	32da923dfe	httpd: add a setting to customize tokens validation Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-05-28 13:28:50 +02:00
Nicola Murino	91dfa501f8	improve some docs Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-05-27 10:09:53 +02:00
Nicola Murino	7c724e18fe	add support for ACME compliant certificate authorities Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-05-27 07:39:55 +02:00
Nicola Murino	90c21458b8	OIDC: add support for implicit roles Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-05-22 14:38:25 +02:00
Nicola Murino	1a33b5bb53	allow different TLS certificates for each binding Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-05-21 16:34:47 +02:00
Nicola Murino	0ecaa862bd	web UIs: allow to replace the default CSS Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-05-21 11:05:58 +02:00
Nicola Murino	751946f47a	allow to customize timeout and env vars for program based hooks Fixes #847 Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-05-20 19:30:54 +02:00
Nicola Murino	796ea1dde9	allow to store temporary sessions within the data provider so we can persist password reset codes, OIDC auth sessions and tokens. These features will also work in multi-node setups without sicky sessions now Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-05-19 19:49:51 +02:00
Nicola Murino	9abd186166	external auth http hook: properly serialize the user in the POST body For historical reasons we send the json serialized user as a string field. I Initially copied the code used in the script hook where it is appropriate to convert the JSON user to string. After some time I have noticed this error, I know that changing it now might break existing external authentication hooks but we cannot continue with this mistake, new users are surprised by this behavior, sorry Fixes #836 Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-05-15 18:26:07 +02:00
Nicola Murino	c9bd08cf9c	UI branding: use the short name on the login pages Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-05-15 07:30:36 +02:00
Nicola Murino	5d7f6960f3	web UIs: add branding support Fixes #829 Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-05-13 19:40:52 +02:00
Nicola Murino	4995cf1b02	defender: allow to load blocklist/safelist also from config/env vars Fixes #831 Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-05-13 14:46:07 +02:00
Dylan Legendre	4b099640de	Updating typos in openapi/swagger documentation as well as various markdown documentation files (#816 ) Signed-off-by: Dylan Legendre <dylanlegendre09@gmail.com>	2022-05-05 18:26:22 +02:00
Nicola Murino	80da2dc722	try to automatically find shared data dirs in system-wide paths Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-05-05 11:27:19 +02:00
Nicola Murino	14fb6c4038	always check recently updated users also fix the query to get users for quota check for sql based providers Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-04-30 11:59:36 +02:00
Nicola Murino	ecd488a840	data provider: remove prefer_database_credentials Google Cloud Storage credentials are now always stored within the data provider. Added a migration to read credentials from disk and store them inside the data provider. After v2.3 we can also remove credentials_path Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-04-28 12:55:01 +02:00
Nicola Murino	4a44a7dfe1	improved readlink handling Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-04-27 18:38:46 +02:00
Nicola Murino	504cd3efda	add groups support Using groups simplifies the administration of multiple accounts by letting you assign settings once to a group, instead of multiple times to each individual user. Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-04-25 15:49:11 +02:00
zemsten	857b6cc10a	Update full-configuration.md (#799 ) NGINX spelling Signed-off-by: Samuel Zarn <samz@localhost.localdomain>	2022-04-22 09:22:36 +02:00
Nicola Murino	cacfffc5bf	OIDC: add support for custom fields These fields can be used in the pre-login hook to implement custom logics Fixes #787 Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-04-12 19:31:25 +02:00
Nicola Murino	f9d8b83c2a	sshd: disable by default ssh-rsa host key algo Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-04-04 18:52:19 +02:00
Nicola Murino	254b2ae87f	add support for AWS container Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-04-03 08:52:36 +02:00
Nicola Murino	5a40f998ae	check and update the password hashing algorithm on user login also add ldap md5 variant as per-user request Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-04-02 22:20:21 +02:00
Nicola Murino	77f3400161	allow to mount virtual folders on root (/) path Fixes #783 Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-04-02 18:32:46 +02:00
Nicola Murino	55f8171dd1	sshd: add support for host key certificates Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-04-01 08:03:56 +02:00
Nicola Murino	a7b159aebb	ssh user certs: add a revoked list Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-03-31 21:49:06 +02:00
Nicola Murino	8fb256ac91	add link to an external Traefik tutorial update deps Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-03-29 18:13:43 +02:00
Nicola Murino	ca32cd5e0e	allow placeholders for add/update users and folders remove session token for S3, a temporary token is useless for our usage Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-03-27 16:32:21 +02:00
Nicola Murino	5cccb872bb	add support to redirect HTTP to HTTPS Fixes #777 Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-03-26 10:00:02 +01:00
Nicola Murino	a193089646	add jq to full docker image variants Fixes #767 Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-03-23 11:35:23 +01:00
Nicola Murino	b062b38ef4	docker: add rsync to "full" images there are better alternatives and rsync will only work on local filesystem, but it can still be useful to some people Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-03-22 17:29:14 +01:00
Nicola Murino	a31a9dc32c	update deps Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-03-21 17:52:18 +01:00
Pr0pHesyer	fa43791ea9	Optimized typography for better readability Signed-off-by: Pr0pHesyer <proskire@protonmail.com>	2022-03-21 15:05:43 +01:00
Nicola Murino	93b9c1617e	web UI: allow to load custom css Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-03-19 21:44:27 +01:00
Nicola Murino	4c710d731f	update to Go 1.18 temporarily disabled docker image for ppcle64 as alpine image is not yet available Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-03-18 21:52:00 +01:00
Nicola Murino	d9f30e7ac5	add a global whitelist if defined only the listed IPs/networks can access the configured services, all other client connections will be dropped before they even try to authenticate Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-03-17 22:10:52 +01:00
Nicola Murino	03da7f696c	SFTPGo is now listed on Azure Marketplace Fixes #684 Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-03-17 14:59:02 +01:00
Nicola Murino	7e7f662a23	ensure that defaults defined in code match the default config file Fixes #754 Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-03-14 10:42:14 +01:00
Nicola Murino	0bec1c6012	change the default value for prefer_database_credentials to true ... ... and deprecate this setting. In the future we'll remove prefer_database_credentials and credentials_path and we will not allow the credentials to be saved on the filesystem Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-03-13 14:29:11 +01:00
Nicola Murino	5582f5c811	data provider: add automatic backups Automatic backup are enabled by default, a new backup will be saved each day at midnight. The backups_path setting was moved from the httpd section to the data_provider one, please adjust your configuration file and or your env vars Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-03-13 13:45:07 +01:00
Nicola Murino	5c2fd8d52a	add support for a start directory Fixes #705 Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-03-03 12:44:56 +01:00
Nicola Murino	4519bffa39	S3: add support for assume role Fixes #736 Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-02-28 20:19:13 +01:00
Nicola Murino	dcc3292dbc	web setup: add an optional installation code The purpose of this code is to prevent anyone who can access to the initial setup screen from creating an admin user Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-02-27 13:08:47 +01:00
Nicola Murino	7fc5cb80d6	deb/rpm packages: attempt to set the `cap_net_bind_service` capability so the service can bind to privileged ports without running as root user Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-02-26 10:10:51 +01:00
Nicola Murino	e18ad55067	S3: add support for session tokens Fixes #736 Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-02-25 15:30:04 +01:00
Nicola Murino	4e9dae6fa4	allow to cache external authentications Fixes #733 Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-02-25 11:51:10 +01:00
Nicola Murino	8bbf54d2b6	azure blobs: add support for multipart downloads Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-02-21 19:01:31 +01:00
Nicola Murino	c19b03a3f7	shares: add permission to deny sharing without password Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-02-19 13:31:58 +01:00
Nicola Murino	c6b8644828	OIDC: execute pre-login hook after IDP authentication so the SFTPGo users can be auto-created using the hook Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-02-19 10:53:35 +01:00
Nicola Murino	f1a255aa6c	httpd: allow to restrict allowed hosts ... ... and to add security headers to the responses Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-02-17 18:22:27 +01:00
Nicola Murino	1fccd05e9e	allow to configure the minimum version of TLS to be enabled Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-02-13 15:56:07 +01:00
Nicola Murino	66945c0a02	Web UIs: add OpenID Connect support Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-02-13 14:30:20 +01:00
Nicola Murino	02db00d008	dataprovider: add naming rules naming rules allow to support case insensitive usernames, trim trailing and leading white spaces, and accept any valid UTF-8 characters in usernames. If you were enabling `skip_natural_keys_validation` now you need to set `naming_rules` to `1` Fixes #687 Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-01-31 18:01:37 +01:00
Nicola Murino	fb2d59ec92	data provider: add config options for certs validation/authentication Fixes #682 Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-01-30 18:04:03 +01:00
Nicola Murino	1df1225eed	add support for data transfer bandwidth limits with total limit or separate settings for uploads and downloads and overrides based on the client's IP address. Limits can be reset using the REST API Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-01-30 11:42:36 +01:00
Moroi	aca71bff7a	Fixed typo Signed-off-by: Moroi <4635854+Rango-dz@users.noreply.github.com>	2022-01-26 22:00:59 +01:00
Nicola Murino	ec1d20f46f	sshd: improve docs about supported ciphers, KEX and MACs also added a check to ensure that the configured values are valid Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-01-06 18:09:49 +01:00
Nicola Murino	1f619d5ea6	make the sdk a separate module The SFTPGo SDK now is at the following URL https://github.com/sftpgo/sdk Fixes #657 Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-01-06 11:54:43 +01:00
Nicola Murino	df86955f28	eventsearcher plugin: add support to search for provider, bucket, endpoint Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-01-03 17:02:52 +01:00
Nicola Murino	222db53410	notifiers plugin: replace params with a struct Fixes #658 Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-01-02 15:16:35 +01:00
Nicola Murino	c36217c654	improve some docs	2021-12-26 14:54:29 +01:00
Nicola Murino	7d8823307f	defender: add provider driver Fixes #616	2021-12-25 12:08:07 +01:00
Nicola Murino	00a02dc14d	howto: add two-factor authentication	2021-12-19 18:08:12 +01:00
Nicola Murino	a587228cf0	add support for metadata plugins	2021-12-16 18:18:36 +01:00
Nicola Murino	a7c0b07a2a	add session id to notifier plugins/hook	2021-12-04 17:27:24 +01:00
Nicola Murino	dc1cc88a46	keyboard interactive hooks: allow to validate passcode	2021-12-04 15:14:44 +01:00
Nicola Murino	bedc8e288b	web client: add support for integrating external viewers/editors	2021-12-03 18:33:08 +01:00
Nicola Murino	6ee51c5cc1	kms: remove support for compat secrets also document how to activate the deprecated builtin provider	2021-12-01 17:53:19 +01:00
Nicola Murino	0f8170c10f	improve some docs and disable telemetry server by default	2021-11-29 17:58:10 +01:00
Nicola Murino	f2480ce5c9	improve chtimes handling on open files	2021-11-26 19:00:44 +01:00
Nicola Murino	4652f9ede8	FTPD: allow to set different passive IPs based on the client's IP address	2021-11-25 12:45:09 +01:00
Nicola Murino	9fb43b2c46	docs: clarify how multi-step auth works with external authentication Fixes #617	2021-11-24 11:27:32 +01:00
Nicola Murino	3d6b09e949	REST API: expose OpenAPI schema and render it using Swagger UI Fixes #609	2021-11-21 09:32:51 +01:00
Nicola Murino	0833b4698e	httpd service: add CORS support	2021-11-13 23:14:50 +01:00
Nicola Murino	ee5c5e033d	S3: add ACL support Fixes #610	2021-11-13 16:05:40 +01:00
Nicola Murino	78233ff9a3	web UI/REST API: add password reset In order to reset the password from the admin/client user interface, an SMTP configuration must be added and the user/admin must have an email address. You can prohibit the reset functionality on a per-user basis by using a specific restriction. Fixes #597	2021-11-13 13:25:43 +01:00
Nicola Murino	dfcfcee208	Windows: fix UTC time logging	2021-11-06 16:27:01 +01:00
Nicola Murino	094ee1522e	logger: add a flag to use UTC time for logging	2021-11-06 15:18:16 +01:00
Nicola Murino	3bc58f5988	WebClient/REST API: add sharing support	2021-11-06 14:13:20 +01:00
Nicola Murino	570964deb3	add post-disconnect hook Fixes #587	2021-10-29 19:55:18 +02:00
Nicola Murino	31984ffec1	update logo and add it to windows exe and installer thanks to @asheroto for donating the new logo	2021-10-23 19:27:39 +02:00
Nicola Murino	74fc3aaf37	REST API: add events search	2021-10-23 15:47:21 +02:00

1 2 3 4 5 ...

392 commits