Mirrors/sftpgo
1
0
Fork 0
mirror of https://github.com/drakkan/sftpgo.git synced 2025-12-06 22:30:56 +03:00
Code Issues Packages Projects Releases Wiki Activity
1,368 Commits 9 Branches 53 Tags
ca3f28d2f53e44f3701b06d1430a5532c5eee28f
Commit Graph

200 Commits

Author SHA1 Message Date
Nicola Murino
b989cdabe5 set version to 2.4.2 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-11-25 15:06:12 +01:00
Nicola Murino
4e10275fd1 clarify that the PROXY protocol is supported for SFTP/FTP 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-11-07 09:17:12 +01:00
Nicola Murino
db0e58ae7e Add support for graceful shutdown 
Fixes #1014

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-10-22 11:56:41 +02:00
Nicola Murino
54f1946aba OIDC: allow to skip JWT signature validation 
It's intended for special cases where providers,such as Azure,
use the "none" algorithm

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-10-19 18:38:09 +02:00
Nicola Murino
47842ae614 script based hooks: don't propagate global env vars 
env vars must be explicitly set

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-10-19 09:29:40 +02:00
Nicola Murino
5a199acbb2 howto: add event manager 
add groups section in the getting started guide.
Suggest to prefer configuration with env vars instead of modifying
the default configuration file

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-10-16 08:26:03 +02:00
Nicola Murino
13ee236884 Allow to read env vars from files inside the "env.d" directory 
This makes it easier to set environment variables on some operating systems.
Setting configuration options from environment variables is recommended if
you want to avoid the time-consuming task of merging your changes with the
default configuration file after upgrading SFTPGo

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-10-13 18:43:58 +02:00
Nicola Murino
4b4edef0ad disable self connections by default 
now that the event manager can create files, self connections may create
even more issues than before

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-10-12 18:12:12 +02:00
Nicola Murino
8a43486730 postgres driver: add multi hosts support 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-10-02 12:43:26 +02:00
Nicola Murino
1e21aa9453 add support for checking sha256crypt passwords 
they will be converted to the configured password hashing algorithm after
the first user login

Fixes #1000

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-09-28 19:15:02 +02:00
Nicola Murino
76e89d07d4 add support for inter-node communications 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-09-25 19:48:55 +02:00
Nicola Murino
7ae9303c99 allow to disable REST API 
Fixes #987

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-09-22 17:27:00 +02:00
Nicola Murino
7349598b19 command hooks: allow to pass custom arguments 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-09-20 13:58:44 +02:00
Nicola Murino
63e3891808 WebClient/HTTP API: ensure to check home dir, when needed, in multi-node setups 
Behind a load balancer with no sticky sessions enabled is not enough to check
the home dir only when the client logs in

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-09-07 16:23:56 +02:00
Nicola Murino
3ebdfa9b2d data providers: allow to disable SNI for TLS connections 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-09-07 14:31:50 +02:00
Nicola Murino
a61211d32c OIDC: allow to get the role field from a sub-struct 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-08-10 21:42:58 +02:00
Nicola Murino
6bfdf941bc webdav: allow to disable the WWW-Authenticate header 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-08-02 19:06:49 +02:00
Nicola Murino
fdc10aa6c7 CORS: add support for more parameters 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-08-02 18:44:34 +02:00
Nicola Murino
e96ae5ca51 add folders to data provider actions 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-07-24 08:10:23 +02:00
Nicola Murino
a2e73228d2 initprovider: don't execute actions 
we are not running as service here

Fixes #932

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-07-23 19:38:15 +02:00
Nicola Murino
1470018054 web UI: allow to enable OIDC login and/or login forms 
any combination is now supported

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-07-22 20:55:33 +02:00
Nicola Murino
e6bfbcd489 OIDC: allow to debug the received id_token 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-07-22 11:11:35 +02:00
Nicola Murino
d5946da1e2 OIDC: allow to enable only OIDC login for Web UIs 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-07-19 22:25:00 +02:00
Nicola Murino
e0ce2e2e8a allow to customize the log level 
The old log-verbose flag is not appropriate anymore.
You should now use the log-level flag to set your preferred log level.
The default level is "debug" as before, you can also set "info", "warn",
"error"

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-07-13 10:40:24 +02:00
Nicola Murino
b5894b257f try to better highlight donations and sponsorships options ... 
... and to better explain why they are required.

Please don't say "someone else will help the project, I'll just use it"

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-07-11 16:14:44 +02:00
Nicola Murino
1b8f94c08f add event manager 
auto backup removed from setting. You can now schedule backups with
the event manager

Fixes #762

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-07-11 08:17:36 +02:00
Nicola Murino
9a6b1a1315 Fix issues found in PR #887 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-06-25 10:42:17 +02:00
Andre Mainka
90009a649d Allow OAuth Scope to be configured (#887) 
Signed-off-by: BobSilent <andre_1@gmx.net>
 2022-06-25 10:40:39 +02:00
Nicola Murino
b774289c6d change default value for naming_rules to 1 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-06-03 16:09:02 +02:00
Nicola Murino
ecf715880f update docs 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-06-03 14:36:38 +02:00
Nicola Murino
b2e28fe3a2 groups: apply placeholders to the fs config of virtual folders 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-06-02 09:45:01 +02:00
Nicola Murino
f6b11c2d01 httpd/webdav: allow to configure trusted proxy header and depth 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-05-28 19:47:23 +02:00
Nicola Murino
32da923dfe httpd: add a setting to customize tokens validation 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-05-28 13:28:50 +02:00
Nicola Murino
7c724e18fe add support for ACME compliant certificate authorities 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-05-27 07:39:55 +02:00
Nicola Murino
90c21458b8 OIDC: add support for implicit roles 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-05-22 14:38:25 +02:00
Nicola Murino
1a33b5bb53 allow different TLS certificates for each binding 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-05-21 16:34:47 +02:00
Nicola Murino
0ecaa862bd web UIs: allow to replace the default CSS 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-05-21 11:05:58 +02:00
Nicola Murino
751946f47a allow to customize timeout and env vars for program based hooks 
Fixes #847

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-05-20 19:30:54 +02:00
Nicola Murino
796ea1dde9 allow to store temporary sessions within the data provider 
so we can persist password reset codes, OIDC auth sessions and tokens.
These features will also work in multi-node setups without sicky
sessions now

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-05-19 19:49:51 +02:00
Nicola Murino
c9bd08cf9c UI branding: use the short name on the login pages 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-05-15 07:30:36 +02:00
Nicola Murino
5d7f6960f3 web UIs: add branding support 
Fixes #829

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-05-13 19:40:52 +02:00
Nicola Murino
4995cf1b02 defender: allow to load blocklist/safelist also from config/env vars 
Fixes #831

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-05-13 14:46:07 +02:00
Dylan Legendre
4b099640de Updating typos in openapi/swagger documentation as well as various markdown documentation files (#816) 
Signed-off-by: Dylan Legendre <dylanlegendre09@gmail.com>
 2022-05-05 18:26:22 +02:00
Nicola Murino
14fb6c4038 always check recently updated users 
also fix the query to get users for quota check for sql based providers

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-04-30 11:59:36 +02:00
Nicola Murino
ecd488a840 data provider: remove prefer_database_credentials 
Google Cloud Storage credentials are now always stored within the data
provider.

Added a migration to read credentials from disk and store them inside the
data provider.

After v2.3 we can also remove credentials_path

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-04-28 12:55:01 +02:00
zemsten
857b6cc10a Update full-configuration.md (#799) 
NGINX spelling

Signed-off-by: Samuel Zarn <samz@localhost.localdomain>
 2022-04-22 09:22:36 +02:00
Nicola Murino
cacfffc5bf OIDC: add support for custom fields 
These fields can be used in the pre-login hook to implement custom
logics

Fixes #787

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-04-12 19:31:25 +02:00
Nicola Murino
f9d8b83c2a sshd: disable by default ssh-rsa host key algo 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-04-04 18:52:19 +02:00
Nicola Murino
254b2ae87f add support for AWS container 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-04-03 08:52:36 +02:00
Nicola Murino
5a40f998ae check and update the password hashing algorithm on user login 
also add ldap md5 variant as per-user request

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-04-02 22:20:21 +02:00