Jamie Curnow
2ed0c47de8
Fix #5802 404 hosts disable missing async/await paradigm
2026-08-26 08:02:52 +10:00
jc21
046d3e022f
Merge pull request #5798 from vgoer/develop
...
Fix: Insufficient private key permissions led to a leak and Effective fixing when setting PUID and PGid environment variables
2026-08-25 07:41:27 +10:00
vgoer
c98b1685bd
Merge pull request #1 from vgoer/private-key-permissions
...
Insufficient private key permissions led to a leak.
2026-08-24 17:49:40 +08:00
vgoer
b7772016ba
fix: Ensure JWT key file ownership matches PUID/PGID at startup
2026-08-24 09:30:36 +00:00
vgoer
29687987b2
fix: Restrict JWT key file permissions to 0600
2026-08-24 09:30:22 +00:00
jc21
ab893706da
Merge pull request #5796 from timothestoifl24/claude/nifty-neumann-83e87c
...
Fix missing `new` on PermissionError so denied requests return 403, not 404
2026-08-23 00:11:02 +10:00
Timothé Stoifl
246c54503e
Merge branch 'develop' into claude/nifty-neumann-83e87c
2026-08-22 15:40:15 +02:00
Jamie Curnow
4ecb047299
Update frontend packages
...
- Major update for react-table
- Fix Hosts menu staying around after selecting a menu item
2026-08-22 23:23:20 +10:00
Jamie Curnow
4e2b052b50
Updated backend packages
2026-08-22 23:10:26 +10:00
Timothé Stoifl
ce4e35a3d4
Fix missing new on PermissionError in access.can()
...
The catch block in `access.can()` constructed `errs.PermissionError`
without `new`. The error constructors in `backend/lib/error.js` are plain
constructor functions that assign to `this` and return nothing, so calling
one without `new` evaluates to `undefined`.
The statement therefore did `throw undefined`, the express error handler
in `backend/app.js` received undefined (and could not read `.status` or
`.public` off it), and the request fell through to the catch-all 404
handler in `backend/routes/main.js`.
Net effect: every authorization failure raised by `access.can(...)` was
reported to clients as `404 Not Found` instead of `403 Forbidden`.
Line 45 of the same file already used `new` correctly, which shows this
was an oversight rather than deliberate resource-existence hiding. A grep
over `backend/` confirms this was the only error constructor invoked
without `new`.
2026-08-22 13:07:09 +02:00
Jamie Curnow
a62c2a6dc3
Adds support for custom admin port via env var #3808
...
and documentation
2026-06-10 11:24:53 +10:00
jc21
a5db5ed156
Merge pull request #5498 from Yasha-ops/develop
...
fix: Changed order of escape to prevent RCE
2026-06-08 08:51:46 +10:00
jc21
101595b90b
Merge pull request #5616 from NginxProxyManager/dependabot/npm_and_yarn/backend/node-rsa-2.0.0
...
Bump node-rsa from 1.1.1 to 2.0.0 in /backend
2026-06-08 08:36:58 +10:00
Yassine Damiri
45a3659ffd
Change fs import to use fs/promises
2026-06-04 15:08:31 +02:00
Yassine Damiri
a457fe4d96
Merge branch 'develop' into develop
2026-06-04 15:06:42 +02:00
jc21
33ef7c859e
Merge pull request #5592 from NginxProxyManager/dependabot/npm_and_yarn/test/tmp-0.2.6
...
Bump tmp from 0.2.5 to 0.2.7 in /test
2026-06-04 14:22:00 +10:00
jc21
bfa2dca1b1
Merge pull request #5626 from NginxProxyManager/dependabot/npm_and_yarn/frontend/prod-minor-updates-d03944a3ba
...
Bump the prod-minor-updates group across 1 directory with 4 updates
2026-06-04 14:21:43 +10:00
jc21
32fc268edf
Merge pull request #5622 from fo5for/update-s6
...
Update s6 overlay to 3.2.3.0
2026-06-04 07:29:55 +10:00
dependabot[bot]
300d0653e0
Bump the prod-minor-updates group across 1 directory with 4 updates
...
Bumps the prod-minor-updates group with 4 updates in the /frontend directory: [@tanstack/react-query](https://github.com/TanStack/query/tree/HEAD/packages/react-query ), [date-fns](https://github.com/date-fns/date-fns ), [query-string](https://github.com/sindresorhus/query-string ) and [react-router-dom](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router-dom ).
Updates `@tanstack/react-query` from 5.100.14 to 5.101.0
- [Release notes](https://github.com/TanStack/query/releases )
- [Changelog](https://github.com/TanStack/query/blob/main/packages/react-query/CHANGELOG.md )
- [Commits](https://github.com/TanStack/query/commits/@tanstack/react-query@5.101.0/packages/react-query )
Updates `date-fns` from 4.3.0 to 4.4.0
- [Release notes](https://github.com/date-fns/date-fns/releases )
- [Commits](https://github.com/date-fns/date-fns/compare/v4.3.0...v4.4.0 )
Updates `query-string` from 9.3.1 to 9.4.0
- [Release notes](https://github.com/sindresorhus/query-string/releases )
- [Commits](https://github.com/sindresorhus/query-string/compare/v9.3.1...v9.4.0 )
Updates `react-router-dom` from 7.15.1 to 7.16.0
- [Release notes](https://github.com/remix-run/react-router/releases )
- [Changelog](https://github.com/remix-run/react-router/blob/main/packages/react-router-dom/CHANGELOG.md )
- [Commits](https://github.com/remix-run/react-router/commits/react-router-dom@7.16.0/packages/react-router-dom )
---
updated-dependencies:
- dependency-name: "@tanstack/react-query"
dependency-version: 5.101.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: prod-minor-updates
- dependency-name: date-fns
dependency-version: 4.4.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: prod-minor-updates
- dependency-name: query-string
dependency-version: 9.4.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: prod-minor-updates
- dependency-name: react-router-dom
dependency-version: 7.16.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: prod-minor-updates
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-06-03 21:22:00 +00:00
dependabot[bot]
06f060dc0f
Bump tmp from 0.2.5 to 0.2.7 in /test
...
Bumps [tmp](https://github.com/raszi/node-tmp ) from 0.2.5 to 0.2.7.
- [Changelog](https://github.com/raszi/node-tmp/blob/master/CHANGELOG.md )
- [Commits](https://github.com/raszi/node-tmp/compare/v0.2.5...v0.2.7 )
---
updated-dependencies:
- dependency-name: tmp
dependency-version: 0.2.6
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-06-03 21:21:13 +00:00
jc21
7e447acfcc
Merge pull request #5617 from NginxProxyManager/dependabot/npm_and_yarn/frontend/prod-patch-updates-509dafd62b
...
Bump the prod-patch-updates group in /frontend with 3 updates
2026-06-04 07:19:19 +10:00
jc21
acd26d7adb
Merge pull request #5612 from NginxProxyManager/dependabot/npm_and_yarn/test/prod-patch-updates-e5e2dd2d94
...
Bump the prod-patch-updates group in /test with 2 updates
2026-06-04 07:18:45 +10:00
jc21
1f5a56d0bd
Merge pull request #5615 from NginxProxyManager/dependabot/npm_and_yarn/frontend/dev-patch-updates-6b7b087425
...
Bump the dev-patch-updates group in /frontend with 4 updates
2026-06-04 07:18:24 +10:00
jc21
258b522725
Merge branch 'develop' into dependabot/npm_and_yarn/backend/node-rsa-2.0.0
2026-06-04 07:17:53 +10:00
jc21
179c27e382
Merge pull request #5275 from 7heMech/develop
...
Add reuseport to improve performance and reduce packet drops
2026-06-04 07:16:50 +10:00
Tony Chau
94176d2f9c
Update s6 overlay to 3.2.3.0
2026-06-03 20:03:29 +08:00
jc21
d51602b150
Merge branch 'master' into develop
2026-06-03 08:23:48 +10:00
Jamie Curnow
af2de98c41
Bump version
2026-06-03 08:22:27 +10:00
dependabot[bot]
6311329772
Bump the prod-patch-updates group in /frontend with 3 updates
...
Bumps the prod-patch-updates group in /frontend with 3 updates: [react](https://github.com/facebook/react/tree/HEAD/packages/react ), [react-dom](https://github.com/facebook/react/tree/HEAD/packages/react-dom ) and [react-intl](https://github.com/formatjs/formatjs ).
Updates `react` from 19.2.6 to 19.2.7
- [Release notes](https://github.com/facebook/react/releases )
- [Changelog](https://github.com/facebook/react/blob/main/CHANGELOG.md )
- [Commits](https://github.com/facebook/react/commits/v19.2.7/packages/react )
Updates `react-dom` from 19.2.6 to 19.2.7
- [Release notes](https://github.com/facebook/react/releases )
- [Changelog](https://github.com/facebook/react/blob/main/CHANGELOG.md )
- [Commits](https://github.com/facebook/react/commits/v19.2.7/packages/react-dom )
Updates `react-intl` from 10.1.9 to 10.1.11
- [Release notes](https://github.com/formatjs/formatjs/releases )
- [Commits](https://github.com/formatjs/formatjs/compare/react-intl@10.1.9...react-intl@10.1.11 )
---
updated-dependencies:
- dependency-name: react
dependency-version: 19.2.7
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: prod-patch-updates
- dependency-name: react-dom
dependency-version: 19.2.7
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: prod-patch-updates
- dependency-name: react-intl
dependency-version: 10.1.11
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: prod-patch-updates
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-06-02 14:00:10 +00:00
dependabot[bot]
a08f821c54
Bump node-rsa from 1.1.1 to 2.0.0 in /backend
...
Bumps [node-rsa](https://github.com/rzcoder/node-rsa ) from 1.1.1 to 2.0.0.
- [Release notes](https://github.com/rzcoder/node-rsa/releases )
- [Changelog](https://github.com/rzcoder/node-rsa/blob/master/CHANGELOG.md )
- [Commits](https://github.com/rzcoder/node-rsa/compare/1.1.1...v2.0.0 )
---
updated-dependencies:
- dependency-name: node-rsa
dependency-version: 2.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-06-02 13:59:29 +00:00
dependabot[bot]
fc4a409292
Bump the dev-patch-updates group in /frontend with 4 updates
...
Bumps the dev-patch-updates group in /frontend with 4 updates: [@formatjs/cli](https://github.com/formatjs/formatjs ), [tmp](https://github.com/raszi/node-tmp ), [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite ) and [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest ).
Updates `@formatjs/cli` from 6.16.3 to 6.16.6
- [Release notes](https://github.com/formatjs/formatjs/releases )
- [Commits](https://github.com/formatjs/formatjs/compare/@formatjs/cli@6.16.3...@formatjs/intl-datetimeformat@6.16.6 )
Updates `tmp` from 0.2.6 to 0.2.7
- [Changelog](https://github.com/raszi/node-tmp/blob/master/CHANGELOG.md )
- [Commits](https://github.com/raszi/node-tmp/compare/v0.2.6...v0.2.7 )
Updates `vite` from 8.0.14 to 8.0.16
- [Release notes](https://github.com/vitejs/vite/releases )
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md )
- [Commits](https://github.com/vitejs/vite/commits/v8.0.16/packages/vite )
Updates `vitest` from 4.1.7 to 4.1.8
- [Release notes](https://github.com/vitest-dev/vitest/releases )
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md )
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.8/packages/vitest )
---
updated-dependencies:
- dependency-name: "@formatjs/cli"
dependency-version: 6.16.6
dependency-type: direct:development
update-type: version-update:semver-patch
dependency-group: dev-patch-updates
- dependency-name: tmp
dependency-version: 0.2.7
dependency-type: direct:development
update-type: version-update:semver-patch
dependency-group: dev-patch-updates
- dependency-name: vite
dependency-version: 8.0.16
dependency-type: direct:development
update-type: version-update:semver-patch
dependency-group: dev-patch-updates
- dependency-name: vitest
dependency-version: 4.1.8
dependency-type: direct:development
update-type: version-update:semver-patch
dependency-group: dev-patch-updates
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-06-02 13:58:55 +00:00
dependabot[bot]
62ed330053
Bump the prod-patch-updates group in /test with 2 updates
...
Bumps the prod-patch-updates group in /test with 2 updates: [@cypress/grep](https://github.com/cypress-io/cypress ) and [eslint](https://github.com/eslint/eslint ).
Updates `@cypress/grep` from 6.0.0 to 6.0.1
- [Release notes](https://github.com/cypress-io/cypress/releases )
- [Changelog](https://github.com/cypress-io/cypress/blob/develop/CHANGELOG.md )
- [Commits](https://github.com/cypress-io/cypress/compare/@cypress/grep-v6.0.0...@cypress/grep-v6.0.1 )
Updates `eslint` from 10.4.0 to 10.4.1
- [Release notes](https://github.com/eslint/eslint/releases )
- [Commits](https://github.com/eslint/eslint/compare/v10.4.0...v10.4.1 )
---
updated-dependencies:
- dependency-name: "@cypress/grep"
dependency-version: 6.0.1
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: prod-patch-updates
- dependency-name: eslint
dependency-version: 10.4.1
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: prod-patch-updates
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-06-02 13:57:48 +00:00
Jamie Curnow
0d832092a5
Only modify files in startup when they aren't mounted
2026-06-02 22:09:21 +10:00
Yassine Damiri
6629abed32
Use fs module for credential file operations
...
Refactor (from the review) credential file handling to use fs module for directory creation and file writing
2026-06-01 17:02:19 +02:00
jc21
52a7b7dca1
Merge pull request #5593 from NginxProxyManager/develop
...
v2.15.0
v2.15.0
2026-06-01 08:28:34 +10:00
jc21
8e042ba79f
Merge pull request #5535 from DaanSelen/develop
...
chore(deps): bump EuroDNS plugin and fix endpoint url
2026-06-01 07:42:49 +10:00
jc21
79a4128b78
Merge branch 'develop' into develop
2026-05-31 22:04:14 +10:00
Jamie Curnow
fc1adb64a3
Fix regression of null domains in db creates
2026-05-29 07:32:58 +10:00
Jamie Curnow
a6b7a7dd9d
Only clean domain names on cert save if given
2026-05-28 18:24:13 +10:00
jc21
dc2c05aeb3
Merge pull request #5579 from NginxProxyManager/dependabot/npm_and_yarn/backend/qs-6.15.2
...
Bump qs from 6.15.0 to 6.15.2 in /backend
2026-05-27 11:32:57 +10:00
Jamie Curnow
0c15125830
Bump version
2026-05-27 11:30:25 +10:00
jc21
e48695401e
Merge branch 'develop' into dependabot/npm_and_yarn/backend/qs-6.15.2
2026-05-27 11:08:07 +10:00
jc21
7211bf3500
Merge pull request #5557 from NginxProxyManager/dependabot/npm_and_yarn/backend/prod-minor-updates-033d9d3f2b
...
Bump the prod-minor-updates group across 1 directory with 2 updates
2026-05-27 11:07:50 +10:00
jc21
f7516304cb
Merge pull request #5559 from NginxProxyManager/dependabot/npm_and_yarn/frontend/prod-patch-updates-6c65a517cd
...
Bump the prod-patch-updates group across 1 directory with 3 updates
2026-05-27 11:07:39 +10:00
jc21
a89410ddd7
Merge pull request #5560 from NginxProxyManager/dependabot/npm_and_yarn/frontend/prod-minor-updates-e3c98d2b5f
...
Bump date-fns from 4.1.0 to 4.3.0 in /frontend in the prod-minor-updates group across 1 directory
2026-05-27 11:07:24 +10:00
jc21
d08f1498c7
Merge pull request #5590 from NginxProxyManager/dependabot/npm_and_yarn/frontend/dev-patch-updates-0186d58a3a
...
Bump the dev-patch-updates group across 1 directory with 7 updates
2026-05-27 11:07:12 +10:00
dependabot[bot]
e703a9adc4
Bump the prod-patch-updates group across 1 directory with 3 updates
...
Bumps the prod-patch-updates group with 3 updates in the /frontend directory: [@tanstack/react-query](https://github.com/TanStack/query/tree/HEAD/packages/react-query ), [react-intl](https://github.com/formatjs/formatjs ) and [react-router-dom](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router-dom ).
Updates `@tanstack/react-query` from 5.100.10 to 5.100.14
- [Release notes](https://github.com/TanStack/query/releases )
- [Changelog](https://github.com/TanStack/query/blob/main/packages/react-query/CHANGELOG.md )
- [Commits](https://github.com/TanStack/query/commits/@tanstack/react-query@5.100.14/packages/react-query )
Updates `react-intl` from 10.1.6 to 10.1.9
- [Release notes](https://github.com/formatjs/formatjs/releases )
- [Commits](https://github.com/formatjs/formatjs/compare/react-intl@10.1.6...react-intl@10.1.9 )
Updates `react-router-dom` from 7.15.0 to 7.15.1
- [Release notes](https://github.com/remix-run/react-router/releases )
- [Changelog](https://github.com/remix-run/react-router/blob/main/packages/react-router-dom/CHANGELOG.md )
- [Commits](https://github.com/remix-run/react-router/commits/react-router-dom@7.15.1/packages/react-router-dom )
---
updated-dependencies:
- dependency-name: "@tanstack/react-query"
dependency-version: 5.100.11
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: prod-patch-updates
- dependency-name: react-intl
dependency-version: 10.1.7
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: prod-patch-updates
- dependency-name: react-router-dom
dependency-version: 7.15.1
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: prod-patch-updates
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-05-27 00:04:39 +00:00
dependabot[bot]
5fd8a30508
Bump the dev-patch-updates group across 1 directory with 7 updates
...
Bumps the dev-patch-updates group with 7 updates in the /frontend directory:
| Package | From | To |
| --- | --- | --- |
| [@tanstack/react-query-devtools](https://github.com/TanStack/query/tree/HEAD/packages/react-query-devtools ) | `5.100.10` | `5.100.14` |
| [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react ) | `19.2.14` | `19.2.15` |
| [@vitejs/plugin-react](https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react ) | `6.0.1` | `6.0.2` |
| [postcss](https://github.com/postcss/postcss ) | `8.5.14` | `8.5.15` |
| [tmp](https://github.com/raszi/node-tmp ) | `0.2.5` | `0.2.6` |
| [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite ) | `8.0.12` | `8.0.14` |
| [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest ) | `4.1.6` | `4.1.7` |
Updates `@tanstack/react-query-devtools` from 5.100.10 to 5.100.14
- [Release notes](https://github.com/TanStack/query/releases )
- [Changelog](https://github.com/TanStack/query/blob/main/packages/react-query-devtools/CHANGELOG.md )
- [Commits](https://github.com/TanStack/query/commits/@tanstack/react-query-devtools@5.100.14/packages/react-query-devtools )
Updates `@types/react` from 19.2.14 to 19.2.15
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases )
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react )
Updates `@vitejs/plugin-react` from 6.0.1 to 6.0.2
- [Release notes](https://github.com/vitejs/vite-plugin-react/releases )
- [Changelog](https://github.com/vitejs/vite-plugin-react/blob/main/packages/plugin-react/CHANGELOG.md )
- [Commits](https://github.com/vitejs/vite-plugin-react/commits/plugin-react@6.0.2/packages/plugin-react )
Updates `postcss` from 8.5.14 to 8.5.15
- [Release notes](https://github.com/postcss/postcss/releases )
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md )
- [Commits](https://github.com/postcss/postcss/compare/8.5.14...8.5.15 )
Updates `tmp` from 0.2.5 to 0.2.6
- [Changelog](https://github.com/raszi/node-tmp/blob/master/CHANGELOG.md )
- [Commits](https://github.com/raszi/node-tmp/compare/v0.2.5...v0.2.6 )
Updates `vite` from 8.0.12 to 8.0.14
- [Release notes](https://github.com/vitejs/vite/releases )
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md )
- [Commits](https://github.com/vitejs/vite/commits/v8.0.14/packages/vite )
Updates `vitest` from 4.1.6 to 4.1.7
- [Release notes](https://github.com/vitest-dev/vitest/releases )
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md )
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.7/packages/vitest )
---
updated-dependencies:
- dependency-name: "@tanstack/react-query-devtools"
dependency-version: 5.100.14
dependency-type: direct:development
update-type: version-update:semver-patch
dependency-group: dev-patch-updates
- dependency-name: "@types/react"
dependency-version: 19.2.15
dependency-type: direct:development
update-type: version-update:semver-patch
dependency-group: dev-patch-updates
- dependency-name: "@vitejs/plugin-react"
dependency-version: 6.0.2
dependency-type: direct:development
update-type: version-update:semver-patch
dependency-group: dev-patch-updates
- dependency-name: postcss
dependency-version: 8.5.15
dependency-type: direct:development
update-type: version-update:semver-patch
dependency-group: dev-patch-updates
- dependency-name: tmp
dependency-version: 0.2.6
dependency-type: direct:development
update-type: version-update:semver-patch
dependency-group: dev-patch-updates
- dependency-name: vite
dependency-version: 8.0.14
dependency-type: direct:development
update-type: version-update:semver-patch
dependency-group: dev-patch-updates
- dependency-name: vitest
dependency-version: 4.1.7
dependency-type: direct:development
update-type: version-update:semver-patch
dependency-group: dev-patch-updates
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-05-27 00:04:14 +00:00
jc21
b7ca25a574
Merge pull request #5583 from NginxProxyManager/dependabot/npm_and_yarn/test/prod-patch-updates-9acc5e4454
...
Bump the prod-patch-updates group across 1 directory with 3 updates
2026-05-27 10:01:13 +10:00
jc21
063950cbb4
Merge pull request #5589 from NginxProxyManager/dependabot/npm_and_yarn/frontend/dev-minor-updates-98f8d9c27e
...
Bump the dev-minor-updates group across 1 directory with 4 updates
2026-05-27 10:01:03 +10:00