Remzona54/nginx-proxy-manager
1
0
Fork 0
mirror of https://github.com/NginxProxyManager/nginx-proxy-manager.git synced 2026-10-21 11:11:40 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1
2624 commits 24 branches 90 tags 65 MiB
Commit graph

2624 commits

This branch
This branch
All branches
Author SHA1 Message Date
jc21
1aca775cb9
Merge pull request #5944 from jeezat/develop 
fix(certbot): update Akamai Edge DNS plugin and credentials for v0.3.0
 2026-10-14 07:10:53 +10:00
jc21
556738fd4d
Merge pull request #5946 from Alexis-Loskoutoff/require-authentication-to-validate-certificates 
Require authentication to validate certificates
 2026-10-14 07:09:56 +10:00
Alexis Loskoutoff
f1bd157438 Add test for certificate validation with view-only permission 2026-10-13 19:32:53 +02:00
Alexis Loskoutoff
6acf346262 Add test for unauthenticated certificate validation 2026-10-13 18:35:50 +02:00
Alexis Loskoutoff
82529d6402 Require certificates:create permission to validate certificates 2026-10-13 18:34:20 +02:00
jeezat
8c5b4d8ffd fix(certbot): update Akamai Edge DNS plugin and credentials for v0.3.0 2026-10-13 07:57:28 +02:00
jc21
d780474583
Merge pull request #5938 from Alexis-Loskoutoff/Update-FR-translations 
Update french translations
 2026-10-12 15:12:57 +10:00
Alexis Loskoutoff
41713715ca Improve existing french translations 2026-10-11 22:55:39 +02:00
Alexis Loskoutoff
06b02f7731 Add missing FR translations 2026-10-11 21:53:42 +02:00
jc21
56ab784117
Merge pull request #5935 from NginxProxyManager/fix/5919-access-list-render 
Fix access list rules and SSL missing from re-rendered host configs
 2026-10-09 22:56:56 +10:00
Jamie Curnow
717877db3f Fix flakey cypress test 2026-10-09 22:35:02 +10:00
jc21
1454252acd
Merge branch 'develop' into fix/5919-access-list-render 2026-10-09 07:32:34 +10:00
jc21
1028e139e4
Merge pull request #5930 from Juice-de-Orange/i18n/de-it-missing 
Add missing German (de) and Italian (it) translations
 2026-10-07 08:35:10 +10:00
jc21
7d7ed25715
Merge pull request #5929 from NginxProxyManager/dependabot/npm_and_yarn/backend/proxy-addr-2.0.8 
build(deps): bump proxy-addr from 2.0.7 to 2.0.8 in /backend
 2026-10-07 08:31:37 +10:00
Juice-de-Orange
3270873cc8 Add missing German (de) and Italian (it) translations 2026-10-06 20:42:18 +02:00
dependabot[bot]
81e7044a17
build(deps): bump proxy-addr from 2.0.7 to 2.0.8 in /backend 
Bumps [proxy-addr](https://github.com/jshttp/proxy-addr) from 2.0.7 to 2.0.8.
- [Release notes](https://github.com/jshttp/proxy-addr/releases)
- [Changelog](https://github.com/jshttp/proxy-addr/blob/master/HISTORY.md)
- [Commits](https://github.com/jshttp/proxy-addr/compare/v2.0.7...v2.0.8)

---
updated-dependencies:
- dependency-name: proxy-addr
  dependency-version: 2.0.8
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-10-05 23:34:59 +00:00
jc21
3f1c0f27d3
Merge pull request #5925 from NginxProxyManager/dependabot/npm_and_yarn/backend/fast-uri-3.1.8 
build(deps): bump fast-uri from 3.1.7 to 3.1.8 in /backend
 2026-10-06 09:33:45 +10:00
Jamie Curnow
2afd723cd8 Fix access list rules and SSL missing from re-rendered host configs 
Some paths rendered host configs without fully loading the relations
the templates depend on, silently dropping access rules (and SSL):

- Enabling a proxy host loaded the access list without its clients or
  auth items, so the host came back with no access restrictions.
- Requesting a Let's Encrypt certificate re-rendered every host sharing
  its domains from bare rows, dropping access rules and SSL.

generateConfig now loads any referenced certificate or access list that
isn't fully loaded, so no caller can render a partial config. The two
callers above also fetch the relations themselves, and a warning is
logged when a host's access list is missing or has no rules.

Adds integration tests covering access lists across disable/enable.

Fixes #5919, #4286, #5710

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
 2026-10-05 22:13:31 +10:00
dependabot[bot]
f5e6dfecfb
build(deps): bump fast-uri from 3.1.7 to 3.1.8 in /backend 
Bumps [fast-uri](https://github.com/fastify/fast-uri) from 3.1.7 to 3.1.8.
- [Release notes](https://github.com/fastify/fast-uri/releases)
- [Commits](https://github.com/fastify/fast-uri/compare/v3.1.7...v3.1.8)

---
updated-dependencies:
- dependency-name: fast-uri
  dependency-version: 3.1.8
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-10-05 09:34:18 +00:00
jc21
778ab6b375
Merge pull request #5921 from NginxProxyManager/dependabot/npm_and_yarn/test/serialize-javascript-7.1.2 
build(deps): bump serialize-javascript from 7.1.1 to 7.1.2 in /test
 2026-10-05 19:32:57 +10:00
dependabot[bot]
092d212ad7
build(deps): bump serialize-javascript from 7.1.1 to 7.1.2 in /test 
Bumps [serialize-javascript](https://github.com/yahoo/serialize-javascript) from 7.1.1 to 7.1.2.
- [Release notes](https://github.com/yahoo/serialize-javascript/releases)
- [Commits](https://github.com/yahoo/serialize-javascript/compare/v7.1.1...v7.1.2)

---
updated-dependencies:
- dependency-name: serialize-javascript
  dependency-version: 7.1.2
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-10-04 14:38:20 +00:00
jc21
f64d43b9ae
Merge pull request #5913 from PrassanthVG/fix/ip-ranges-timer 
Don't start IP ranges renewal timer when fetching is disabled
 2026-10-02 08:48:48 +10:00
Prassanth
77dfc3d3c1 Don't start IP ranges renewal timer when fetching is disabled 
IP_RANGES_FETCH_ENABLED=false only skipped the initial fetch; the
renewal timer still fetched the ranges every 6 hours.

Fixes #5748
 2026-10-02 02:08:28 +05:30
jc21
2dfd691169
Merge pull request #5910 from NginxProxyManager/dependabot/npm_and_yarn/backend/ip-address-10.7.2 
build(deps): bump ip-address from 10.5.0 to 10.7.2 in /backend
 2026-09-30 07:01:24 +10:00
dependabot[bot]
c699dc96d4
build(deps): bump ip-address from 10.5.0 to 10.7.2 in /backend 
Bumps [ip-address](https://github.com/beaugunderson/ip-address) from 10.5.0 to 10.7.2.
- [Release notes](https://github.com/beaugunderson/ip-address/releases)
- [Commits](https://github.com/beaugunderson/ip-address/compare/v10.5.0...v10.7.2)

---
updated-dependencies:
- dependency-name: ip-address
  dependency-version: 10.7.2
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-09-29 07:19:54 +00:00
jc21
5dcaf28d7c
Merge pull request #5891 from Amitind/fix/5128-hide-certificate-key 
fix: omit certificate_key from certificate API responses
 2026-09-26 19:30:31 +10:00
jc21
de65105744
Merge pull request #5886 from xJayMorex/fix-chown 
fix: only chown /data/keys.json if necessary
 2026-09-26 19:18:14 +10:00
Amit Yadav
a54b73f153 fix: omit certificate_key from certificate API responses 
The private key of custom certificates was returned in meta by GET /api/nginx/certificates and GET /api/nginx/certificates/{id}. Add meta.certificate_key to omissions(), the same way meta.dns_provider_credentials is hidden. The key stays in the database and is still written to /data/custom_ssl on upload.
 2026-09-25 20:35:32 +05:30
xJayMorex
4725153962 fix: only chown /data/keys.json if necessary 2026-09-25 11:49:17 +02:00
Jamie Curnow
2cfd3395cf Adds integration tests for per path access lists, fixes ipv6 jsv, 
and enforces host-wide access list when location access list is not set
 2026-09-24 12:21:49 +10:00
jc21
c41ec008bb
Merge pull request #5772 from drakhaw/develop 
feat: per-path access lists, host logs modal
 2026-09-24 08:38:14 +10:00
Dimas R. Wisnu
900bb1e480 fix: resolve merge conflicts breaking frontend CI 
- LocationsFields: remove duplicated conflict block, integrate AccessField
  into the Row-based layout (fixes JSX parse error)
- ProxyHosts/Table: migrate to updated @tanstack/react-table API (useTable,
  createColumnHelper<Features, ProxyHost>)
- Add missing Estonian translations (action.logs, column.error)
- Re-sort en.json locale keys
 2026-09-23 19:18:51 +07:00
Dimas Rakha Wisnu
633b653f79
Merge branch 'develop' into develop 2026-09-23 18:53:06 +07:00
jc21
58566c9d75
Merge branch 'master' into develop 2026-09-23 20:57:08 +10:00
jc21
c53f52ab51
Merge pull request #5878 from carlosalbertorg/feat/log-viewer 
feat: Add a Logs viewer to the admin UI
 2026-09-23 20:23:26 +10:00
carlosalbertorg
9445038b36 fix: Use forwarding_host instead of the renamed forward_ip column 
The stream table's forward_ip column was renamed to forwarding_host
back in migration 20210423103500_stream_domain.js, so the stream log
source labels were always showing "undefined" for the forwarding
target. Spotted by @jc21 in review.
 2026-09-23 07:00:19 -03:00
jc21
b1e0473a19
Merge pull request #5741 from addielaruee/fix/stream-ipv6-forward-host-brackets 
fix(stream): bracket IPv6 forward host for valid nginx upstream
 2026-09-23 14:29:27 +10:00
jc21
95f1b74757
Merge pull request #5862 from NginxProxyManager/dependabot/npm_and_yarn/frontend/dev-minor-updates-793a873af9 
build(deps-dev): bump the dev-minor-updates group across 1 directory with 5 updates
 2026-09-23 14:23:52 +10:00
jc21
8509e1b378
Merge pull request #5813 from vzagorovskiy/fix/regenerate-config-wrong-host-type 
Use the row's own model and host type in regenerate-config
 2026-09-23 14:11:52 +10:00
Jamie Curnow
5f35e4916f Bump version 2026-09-23 14:10:29 +10:00
jc21
da12ee5b0c
Merge pull request #5814 from shawnhank/fix/dns-credentials-lifetime 
Remove DNS provider credentials from disk after certbot runs
 2026-09-23 14:08:29 +10:00
jc21
61af8e23d8
Merge pull request #5829 from NginxProxyManager/dependabot/npm_and_yarn/backend/qs-6.16.0 
build(deps): bump qs from 6.15.3 to 6.16.0 in /backend
 2026-09-23 14:06:28 +10:00
jc21
c4e421e679
Merge pull request #5830 from NginxProxyManager/dependabot/npm_and_yarn/test/humanfs/node-0.16.8 
Bump @humanfs/node from 0.16.7 to 0.16.8 in /test
 2026-09-23 14:06:13 +10:00
jc21
1e18bf9212
Merge pull request #5831 from cloudchristoph/fix/certbot-dns-azure-modern 
fix(certbot): switch the Azure DNS plugin to certbot-dns-azure-modern
 2026-09-23 14:06:00 +10:00
jc21
af1d4dd60f
Merge pull request #5854 from hurole/patch-1 
feat: add Tencent Cloud EdgeOne DNS provider
 2026-09-23 13:59:16 +10:00
dependabot[bot]
f47d85da9e
build(deps-dev): bump the dev-minor-updates group across 1 directory with 5 updates 
Bumps the dev-minor-updates group with 5 updates in the /frontend directory:

| Package | From | To |
| --- | --- | --- |
| [@tanstack/react-query-devtools](https://github.com/TanStack/query/tree/HEAD/packages/react-query-devtools) | `5.101.4` | `5.103.1` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.2.0` | `26.6.2` |
| [happy-dom](https://github.com/capricorn86/happy-dom) | `20.11.6` | `20.14.5` |
| [sass](https://github.com/sass/dart-sass) | `1.103.1` | `1.104.1` |
| [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `8.2.2` | `8.3.0` |



Updates `@tanstack/react-query-devtools` from 5.101.4 to 5.103.1
- [Release notes](https://github.com/TanStack/query/releases)
- [Changelog](https://github.com/TanStack/query/blob/main/packages/react-query-devtools/CHANGELOG.md)
- [Commits](https://github.com/TanStack/query/commits/@tanstack/react-query-devtools@5.103.1/packages/react-query-devtools)

Updates `@types/node` from 26.2.0 to 26.6.2
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `happy-dom` from 20.11.6 to 20.14.5
- [Release notes](https://github.com/capricorn86/happy-dom/releases)
- [Commits](https://github.com/capricorn86/happy-dom/compare/v20.11.6...v20.14.5)

Updates `sass` from 1.103.1 to 1.104.1
- [Release notes](https://github.com/sass/dart-sass/releases)
- [Changelog](https://github.com/sass/dart-sass/blob/main/CHANGELOG.md)
- [Commits](https://github.com/sass/dart-sass/compare/1.103.1...1.104.1)

Updates `vite` from 8.2.2 to 8.3.0
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/create-vite@8.3.0/packages/vite)

---
updated-dependencies:
- dependency-name: "@tanstack/react-query-devtools"
  dependency-version: 5.102.8
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-minor-updates
- dependency-name: "@types/node"
  dependency-version: 26.5.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-minor-updates
- dependency-name: happy-dom
  dependency-version: 20.14.3
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-minor-updates
- dependency-name: sass
  dependency-version: 1.104.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-minor-updates
- dependency-name: vite
  dependency-version: 8.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-minor-updates
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-09-23 03:56:05 +00:00
jc21
ee33ecdfc2
Merge pull request #5874 from NginxProxyManager/dependabot/npm_and_yarn/frontend/prod-patch-updates-d144f49a8f 
build(deps): bump the prod-patch-updates group across 1 directory with 2 updates
 2026-09-23 13:52:39 +10:00
jc21
f48c3e583a
Merge pull request #5876 from NginxProxyManager/dependabot/npm_and_yarn/frontend/dev-patch-updates-846ffa5b48 
build(deps-dev): bump the dev-patch-updates group across 1 directory with 5 updates
 2026-09-23 13:52:21 +10:00
jc21
a1713b79e8
Merge pull request #5877 from hulkbig/fix/authenticated-login-redirect-5753 
fix(router): redirect authenticated login visits to dashboard
 2026-09-23 13:51:32 +10:00
carlosalbertorg
4282d6c6e9 feat: Add a Logs viewer to the admin UI 
Nginx Proxy Manager had no way to inspect application or nginx logs
from the web UI - admins had to shell into the container or read
`docker logs`. This adds an admin-only Logs page that can tail:

- the backend application log, now also mirrored to
  /data/logs/backend.log (in addition to stdout) and rotated by the
  logrotate timer that already runs every 2 days
- the Let's Encrypt/certbot log, which certbot already writes to
  /data/logs/letsencrypt.log via its existing --logs-dir flag
- per-host nginx access/error logs (proxy, redirection, 404 and
  stream hosts), with the file path always resolved server-side from
  a validated host_type enum + numeric host_id, never from client
  input

Reads use a reverse chunked scan (64KB chunks, capped at 5MB scanned
per request) instead of loading whole files into memory, and the
frontend polls every 5s only while the tab is focused and "Live" is
on, so this stays cheap on both CPU and memory. No new runtime
dependencies were added on either side.

Purely additive: two new admin-only endpoints
(GET /api/logs/sources, GET /api/logs/tail), no existing behaviour
changed.
 2026-09-22 13:11:38 -03:00