Commit Graph

2262 Commits

Author SHA1 Message Date
Nicola Murino
b48a90bce9 update deps
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
2025-08-02 19:21:53 +02:00
Nicola Murino
75ad6346c3 removed some unused constants
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
2025-08-02 19:00:15 +02:00
Nicola Murino
b2948a5255 sshd: removed Git support
Git integration has been removed as it is out of scope for a file transfer
solution like SFTPGo.

Maintaining Git support introduces unnecessary complexity and potential
security risks due to reliance on system commands.

In particular, allowing Git operations could enable authorized users to
upload repositories containing hooks, which might then be executed and abused.

To reduce the attack surface and simplify the codebase, Git support has been
fully dropped.

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
2025-08-02 18:58:03 +02:00
Nicola Murino
ddbe40cefa HTTPD, WebDAV: use http.ResponseController
backport from Enterprise edition

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
2025-08-02 18:00:45 +02:00
Nicola Murino
9a0137befb config: redact master key string
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
2025-07-22 19:53:19 +02:00
Nicola Murino
0bac81816c WebClient: add an id field to files list to simplify UI logic
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
2025-07-22 18:59:20 +02:00
Nicola Murino
8ae6e5e486 WebUI: improve fileSizeIEC function and make it more readable
Fixes #1974

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
2025-07-21 18:26:09 +02:00
Nicola Murino
c49d76274d WebClient: translate "selected items" label also at bottom of page
Fixes #1979

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
2025-07-21 18:24:49 +02:00
Nicola Murino
ae11c81bf8 Improve issue templates
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
2025-07-20 13:18:25 +02:00
dependabot[bot]
166b87fa3c Bump azure/trusted-signing-action from 0.5.1 to 0.5.9
Bumps [azure/trusted-signing-action](https://github.com/azure/trusted-signing-action) from 0.5.1 to 0.5.9.
- [Release notes](https://github.com/azure/trusted-signing-action/releases)
- [Commits](https://github.com/azure/trusted-signing-action/compare/v0.5.1...v0.5.9)

---
updated-dependencies:
- dependency-name: azure/trusted-signing-action
  dependency-version: 0.5.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-07-20 10:52:22 +02:00
Nicola Murino
76f6dc06de Log output from command hooks
Re-adds #1208 now that the CLA has been signed.

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
2025-07-20 10:45:48 +02:00
Nicola Murino
c2835bc19d Enable setting password change requirements in user templates
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
2025-07-17 19:35:17 +02:00
Nicola Murino
fe78974b47 remove data retention hook
use the EventManager instead

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
2025-07-14 18:22:32 +02:00
Nicola Murino
9d20f1744a update deps
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
2025-07-12 23:05:07 +02:00
Nicola Murino
7317674b41 Remove legacy data retention API
Data retention is now managed via the EventManager, introduced in v2.4.0.
This allows scheduling retention checks and sending email or HTTP notifications,
making the old API redundant.

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
2025-07-12 22:20:54 +02:00
Nicola Murino
bdd097b1c7 s3: use multipart uploads only when multiple parts are needed
Fixes #2016

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
2025-07-11 18:45:30 +02:00
Nicola Murino
66a20f34f8 sysv script: set mode to 755
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
2025-07-04 11:32:07 +02:00
Nicola Murino
bb7891c196 Update and rename sftpgo to init/sftpgo
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
2025-07-03 16:18:06 +02:00
no-systemd
1bbc56c3b9 Init script for sysv-init based systems. (#1)
Init script for sysv-init based systems.

Signed-off-by: no-systemd <saman@whitebird.cc>
2025-07-03 16:18:06 +02:00
Nicola Murino
1b95468783 update deps
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
2025-07-03 11:53:20 +02:00
Nicola Murino
c9d361d93b OpenAPI: add missing event statuses to rule condition options
Fixes #2011

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
2025-07-03 11:44:06 +02:00
Nicola Murino
d0ad528135 update lint rules
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
2025-06-29 08:43:45 +02:00
Nicola Murino
4c5d9f3a25 OpenAPI: fix logs endpoint
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
2025-06-21 09:45:29 +02:00
Nicola Murino
fb46c28ff2 examples: update deps
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
2025-06-20 20:22:58 +02:00
Nicola Murino
e34c196532 update deps
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
2025-06-20 20:12:42 +02:00
Nicola Murino
5848289756 nfpm: update to 2.43.0
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
2025-06-16 19:09:07 +02:00
Nicola Murino
ff5ea7cd40 S3: don't use manager for uploads
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
2025-06-16 18:48:04 +02:00
Nicola Murino
cea5dd665e update deps
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
2025-06-14 11:40:47 +02:00
Nicola Murino
d05250923b Revert "GCS: allow a 10 seconds timeout for client creation"
This reverts commit b2e9935049.

Fixes #2000

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
2025-06-10 20:17:35 +02:00
Nicola Murino
5ca3522dc0 EventManager: avoid copying user struct when updating parameters
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
2025-06-10 20:04:59 +02:00
dependabot[bot]
d6fbe97e14 Bump alpine from 3.21 to 3.22 (#1994)
* Bump alpine from 3.21 to 3.22

Bumps alpine from 3.21 to 3.22.

---
updated-dependencies:
- dependency-name: alpine
  dependency-version: '3.22'
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* Update Dockerfile.alpine

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>

---------

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Nicola Murino <nicola.murino@gmail.com>
2025-06-02 20:53:16 +02:00
Nicola Murino
0265c4c4a1 update deps
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
2025-05-31 20:30:58 +02:00
Nicola Murino
b6873768b2 replace strings.Split with SplitSeq
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
2025-05-31 19:03:41 +02:00
Nicola Murino
60af36813b gcs: improve error checking
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
2025-05-23 19:56:21 +02:00
Nicola Murino
3f7533b86a update deps ...
... and adapt the code to the new constants I added to
golang.org/x/crypto/ssh

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
2025-05-19 19:42:36 +02:00
Nicola Murino
e275e8a142 WebClient: prevent uploads if no file is selected
Fixes #1980

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
2025-05-19 18:21:55 +02:00
Nicola Murino
6f9729f245 WebClient: clear file upload list on explicit cancel
Avoid clearing the file list every time the modal is opened, as
the modal might be closed unintentionally (e.g., by clicking
outside it)

Fixes #1981

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
2025-05-19 18:20:20 +02:00
Nicola Murino
f7273ce97e UI: add missing French and German localization for calendars
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
2025-05-19 18:18:52 +02:00
Nicola Murino
392b22219f Windows setup: fix copyright
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
2025-05-13 18:42:10 +02:00
Nicola Murino
fb97b9f539 WebClient: Fix multi-page selection
removed legacy workaround code that was likely introduced to mask
a bug in the DataTable component.
This underlying issue has since been resolved and this code cause
issues now.

Fixes #1971

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
2025-05-13 18:30:21 +02:00
Nicola Murino
c5a8d672d2 WebClient: increase contextual menu size
Some language translations may contain longer text, requiring
additional space in the menu

Fixes #1972

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
2025-05-13 18:28:24 +02:00
dependabot[bot]
e5d2d26636 Bump golangci/golangci-lint-action from 7 to 8 (#1967)
Bumps [golangci/golangci-lint-action](https://github.com/golangci/golangci-lint-action) from 7 to 8.
- [Release notes](https://github.com/golangci/golangci-lint-action/releases)
- [Commits](https://github.com/golangci/golangci-lint-action/compare/v7...v8)

---
updated-dependencies:
- dependency-name: golangci/golangci-lint-action
  dependency-version: '8'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-05-11 10:51:06 +02:00
Nicola Murino
09e65c8d9f update deps
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
2025-05-10 19:07:14 +02:00
Nicola Murino
9e2230cc33 Support leading and trailing spaces in user passwords
This improves compatibility with external authentication providers that
allow such characters in passwords.

Passwords created via the WebAdmin UI are still sanitized to prevent user
confusion.

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
2025-04-26 14:31:13 +02:00
Nicola Murino
a709b84eef update deps
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
2025-04-24 19:08:02 +02:00
Nicola Murino
1c48e51384 EventManager: escape email body when content type is text/html
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
2025-04-24 19:01:17 +02:00
Nicola Murino
5efd232809 CI: workflows improvements
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
2025-04-24 18:01:08 +02:00
Nicola Murino
683d00caec cmd: remove startsubsys command
SFTPGo is not designed to be used as an OpenSSH subsystem — many
features do not work correctly in subsystem mode. The functionality
was added after a user request in the pkg/sftp repository to
demonstrate that it was feasible, not for actual practical use.

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
2025-04-20 18:51:01 +02:00
Nicola Murino
c5e76f303a commands: initialize plugins if we have a KMS
this is necessary to be able to read KMS secrets stored within
the data provider

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
2025-04-20 18:48:19 +02:00
Nicola Murino
513cbe3a77 CI FreeBSD: switch to Go 1.24
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
2025-04-20 17:34:51 +02:00