17 Commits

Author SHA256 Message Date
Jeff Kowalczyk
5b2bfe8910 Accepting request 1102430 from home:elimat:branches:server:http
- Update to version 2.7.2:
  * reverseproxy: Fix hijack ordering which broke websockets ()
  * httpcaddyfile: Fix `string does not match ~[]E` error ()
  * encode: Fix infinite recursion ()
  * caddyhttp: Make use of `http.ResponseController` ()
  * go.mod: Upgrade dependencies esp. smallstep/certificates
  * core: Allow loopback hosts for admin endpoint (fix ) ()
  * httpcaddyfile: Allow `hostnames` & logger name overrides for log directive ()
  * reverseproxy: Connection termination cleanup ()
  * go.mod: Use quic-go 0.37.1
  * reverseproxy: Export ipVersions type ()
  * go.mod: Use latest CertMagic (v0.19.1)
  * caddyhttp: Preserve original error (fix )
  * fileserver: add lazy image loading ()
  * go.mod: Update quic-go to v0.37.0, bump to Go 1.20 minimum ()
  * core: Refine mutex during reloads (fix ) ()
  * go.mod: update quic-go to v0.36.2 ()
  * fileserver: Tweak grid view of browse template
  * fileserver: add `export-template` sub-command to `file-server` ()
  * caddyfile: Fix comparing if two tokens are on the same line ()
  * caddytls: Reuse certificate cache through reloads ()
  * Minor tweaks to security.md
  * reverseproxy: Pointer receiver
  * caddyhttp: Trim dot/space only on Windows (fix )
  * update quic-go to v0.36.1 ()
  * caddyconfig: Specify config adapter for HTTP loader (close )
  * core: Embed net.UDPConn to gain optimizations ()
  * chore: remove deprecated property `rlcp` in goreleaser config ()
  * core: Skip `chmod` for abstract unix sockets ()
  * core: Add optional unix socket file permissions ()
  * reverseproxy: Honor `tls_except_port` for active health checks ()
  * Appease linter
  * Fix compile on Windows, hopefully
  * core: Properly preserve unix sockets (fix  )
  * go.mod: Upgrade CertMagic for hotfix
  * go.mod: Upgrade some dependencies
  * chore: upgrade otel ()
  * go.mod: Update quic-go to v0.36.0 ()
  * reverseproxy: weighted_round_robin load balancing policy ()
  * reverseproxy: Experimental streaming timeouts ()
  * chore: remove refs of deprecated io/ioutil ()
  * headers: Allow `>` to defer shortcut for replacements ()
  * caddyhttp: Support custom network for HTTP/3 ()
  * reverseproxy: Fix parsing of source IP in case it's an ipv6 address ()
  * fileserver: browse: Better grid layout ()
  * caddytls: Clarify some JSON config docs
  * cmd: Implement storage import/export ()
  * go.mod: Upgrade quic-go to 0.35.1
  * update quic-go to v0.35.0 ()
  * templates: Add `readFile` action that does not evaluate templates ()
  * caddyfile: Track import name instead of modifying filename ()
  * core: Use SO_REUSEPORT_LB on FreeBSD ()
  * caddyfile: Do not replace import tokens if they are part of a snippet ()
  * fileserver: Don't set Etag if mtime is 0 or 1 (close ) ()
  * fileserver: browse: minor tweaks for grid view, dark mode ()
  * fileserver: Only set Etag if not already set (fix ) ()
  * fileserver: Fix file browser breadcrumb font ()
  * caddyhttp: Fix h3 shutdown ()
  * fileserver: More filetypes for browse icons
  * fileserver: Fix file browser footer in grid mode ()
  * cmd: Avoid spammy log messages (fix )
  * httpcaddyfile: Sort Caddyfile slice
  * caddyhttp: Implement named routes, `invoke` directive ()
  * rewrite: use escaped path, fix  ()
  * headers: Add > Caddyfile shortcut for enabling defer ()
  * go.mod: Upgrade several dependencies
  * reverseproxy: Expand port ranges to multiple upstreams in CLI + Caddyfile ()
  * fileserver: Use EscapedPath for browse ()
  * caddyhttp: Refactor cert Managers (fix ) ()
  * Slightly more helpful error message
  * caddytls: Check for nil ALPN; close  ()
  * cmd: Reduce spammy logs from --watch
  * caddyhttp: Add a getter for Server.name ()
  * caddytls: Configurable fallback SNI ()
  * caddyhttp: Update quic's TLS configs after reload () (fix )
  * Add doc comment about changing admin endpoint
  * feature: watch include directory ()
  * chore: remove deprecated linters ()
  * go.mod: Upgrade CertMagic again
  * go.mod: Upgrade CertMagic
  * reverseproxy: Optimize base case for least_conn and random_choose policies ()
  * reverseproxy: Fix active health check header canonicalization, refactor ()
  * reverseproxy: Add `fallback` for some policies, instead of always random ()
  * logging: Actually honor the SoftStart parameter
  * logging: Soft start for net writer (close )
  * fastcgi: Fix `capture_stderr` ()
  * acmeserver: Configurable `resolvers`, fix smallstep deprecations ()
  * go.mod: Update some dependencies
  * logging: Add traceID field to access logs when tracing is active ()
  * caddyhttp: Impl `ResponseWriter.Unwrap()`, prep for Go 1.20's `ResponseController` ()
  * reverseproxy: Fix reinitialize upstream healthy metrics ()
  * fix some comments ()
  * templates: Add `fileStat` function ()
  * caddyfile: Stricter parsing, error for brace on new line ()
  * core: Return default logger if no modules loaded
  * celmatcher: Implement `pkix.Name` conversion to string ()
  * chore: Adjustments to CI caching ()
  * reverseproxy: Remove deprecated `lookup_srv` ()
  * cmd: Support `'` quotes in envfile parsing ()
  * Update contributing guidelines ()
  * caddyhttp: Serve http2 when listener wrapper doesn't return *tls.Conn ()
  * reverseproxy: Add `query` and `client_ip_hash` lb policies ()
  * cmd: Create pidfile before config load (close )
  * fileserver: Add color-scheme meta tag ()
  * build(deps): bump actions/setup-go from 3 to 4 ()
  * proxyprotocol: Add PROXY protocol support to `reverse_proxy`, add HTTP listener wrapper ()
  * reverseproxy: Add mention of which half a copyBuffer err comes from ()
  * caddyhttp: Log request body bytes read ()
  * log: Make sink logs encodable ()
  * caddytls: Eval replacer on automation policy subjects ()
  * headers: Support deleting all headers as first op ()
  * replacer: Add HTTP time format ()
  * reverseproxy: Header up/down support for CLI command ()
  * caddyhttp: Determine real client IP if trusted proxies configured ()
  * httpcaddyfile: Adjust path matcher sorting to solve for specificity ()
  * caddytls: Zero out throttle window first ()
  * ci: add `--yes` to cosign arguments ()
  * reverseproxy: Reset Content-Length to prevent FastCGI from hanging ()
  * caddytls: Allow on-demand w/o ask for internal-only
  * caddytls: Require 'ask' endpoint for on-demand TLS
  * fileserver: New file browse template ()
  * go.mod: Upgrade dependencies
  * tracing: Support autoprop from OTEL_PROPAGATORS ()
  * caddyhttp: Enable 0-RTT QUIC ()
  * encode: flush status code when hijacked. ()
  * fileserver: Remove trailing slash on fs filenames ()
  * core: Eliminate unnecessary shutdown delay on Unix ()
  * caddyhttp: Fix `vars_regexp` matcher with placeholders ()
  * context: Rename func to `AppIfConfigured` ()
  * reverseproxy: allow specifying ip version for dynamic `a` upstream ()
  * ci/cd: ship tarballs with vendored deps ()
  * caddyfile: Fix heredoc fuzz crasher, drop trailing newline ()
  * caddyfile: Implement heredoc support ()
  * cmd: Expand cobra support, add short flags ()
  * ci: Update minimum Go version to 1.19
  * go.mod: Upgrade quic-go to v0.33.0 (Go 1.19 min)
  * reverseproxy: refactor HTTP transport layer ()
  * caddytls: Relax the warning for on-demand ()
  * cmd: Strict unmarshal for validate ()
  * caddyfile: Implement variadics for import args placeholders ()
  * cmd: make `caddy fmt` hints more clear ()
  * cmd: Adjust documentation for commands ()
- BuildRequires: golang(API) >= 1.20 for guic-go bump

OBS-URL: https://build.opensuse.org/request/show/1102430
OBS-URL: https://build.opensuse.org/package/show/server:http/caddy?expand=0&rev=28
2023-08-04 19:43:00 +00:00
95c727aa17 Accepting request 1083782 from home:jfkw:branches:server:http
- Update to version 2.6.4:
  * go.mod: Upgrade acmez and x/net
  * reverseproxy: Don't buffer chunked requests (fix ) ()
- Fix failing build on SLE-12 by defining _sharedstatedir /var/lib
  on SLE-12 consistent with SLE-15, openSUSE and upstream RPM docs.

OBS-URL: https://build.opensuse.org/request/show/1083782
OBS-URL: https://build.opensuse.org/package/show/server:http/caddy?expand=0&rev=26
2023-05-02 08:12:23 +00:00
febd84ebc0 Accepting request 1063988 from home:avicenzi:branches:server:http
Update to version 2.6.3

Fix CVE-2022-41721 (boo#1207207)

OBS-URL: https://build.opensuse.org/request/show/1063988
OBS-URL: https://build.opensuse.org/package/show/server:http/caddy?expand=0&rev=24
2023-02-09 11:16:56 +00:00
0638af3d06 Accepting request 1010537 from home:jfkw:branches:server:http
- Update to version 2.6.2:

OBS-URL: https://build.opensuse.org/request/show/1010537
OBS-URL: https://build.opensuse.org/package/show/server:http/caddy?expand=0&rev=22
2022-10-14 07:55:17 +00:00
d4e6ac210e Accepting request 1005667 from home:jfkw:branches:server:http
- Update to version 2.6.1:
  * core: Reuse unix sockets (UDS) and don't try to serve HTTP/3 over UDS ()
  * encode: don't WriteHeader unless called ()
  * fileserver: Reinstate --debug flag

OBS-URL: https://build.opensuse.org/request/show/1005667
OBS-URL: https://build.opensuse.org/package/show/server:http/caddy?expand=0&rev=20
2022-09-29 08:07:12 +00:00
659fec4f73 Accepting request 1005069 from home:jfkw:branches:server:http
- Update to version 2.6.0:
- BuildRequires: golang(API) >= 1.18 for new net/netip package

OBS-URL: https://build.opensuse.org/request/show/1005069
OBS-URL: https://build.opensuse.org/package/show/server:http/caddy?expand=0&rev=18
2022-09-21 10:02:44 +00:00
8c99dd1c76 Accepting request 992223 from home:avicenzi:branches:server:http
Add bsc#1201822 (CVE-2022-34037) mention in changelog

OBS-URL: https://build.opensuse.org/request/show/992223
OBS-URL: https://build.opensuse.org/package/show/server:http/caddy?expand=0&rev=16
2022-08-02 10:20:14 +00:00
cfa7c1a6a5 Accepting request 989489 from home:dirkmueller:Factory
- Update to version 2.5.2:
  * admin: expect quoted ETags ()
  * headers: Only replace known placeholders ()
  * reverseproxy: Err 503 if all upstreams unavailable
  * reverseproxy: Adjust new TLS Caddyfile directive names ()
  * fileserver: Use safe redirects in file browser
  * admin: support ETag on config endpoints ()
  * go.mod: Bump up quic-go to v0.28.0, fixes for BC breaks ()
  * caddytls: Reuse issuer between PreCheck and Issue ()
  * admin: Implement /adapt endpoint (close ) ()
  * forwardauth: Fix case when `copy_headers` is omitted ()
  * Expose several Caddy HTTP Matchers to the CEL Matcher ()
  * reverseproxy: Fix double headers in response handlers ()
  * reverseproxy: Fix panic when TLS is not configured ()
  * reverseproxy: Skip TLS for certain configured ports ()
  * go.mod: Update some dependencies
  * forwardauth: Support renaming copied headers, block support ()
  * Add comment about xcaddy to main
  * headers: Support wildcards for delete ops (close ) ()
  * reverseproxy: Dynamic ServerName for TLS upstreams ()
  * reverseproxy: Make TLS renegotiation optional
  * reverseproxy: Add renegotiation param in TLS client ()
  * caddyhttp: Log error from CEL evaluation (fix )
  * reverseproxy: Correct the `tls_server_name` docs ()
  * reverseproxy: HTTP 504 for upstream timeouts ()
  * caddytls: Make peer certificate verification pluggable ()
  * reverseproxy: api: Remove misleading 'healthy' value
  * go.mod: Update go-yaml to v3
  * Fix  and fix 
  * reverseproxy: Add --internal-certs CLI flag  ()

OBS-URL: https://build.opensuse.org/request/show/989489
OBS-URL: https://build.opensuse.org/package/show/server:http/caddy?expand=0&rev=14
2022-07-19 11:44:45 +00:00
697971ca6a Accepting request 981170 from home:avicenzi:branches:server:http
Add mention to CVE fixed in 2.5.0

OBS-URL: https://build.opensuse.org/request/show/981170
OBS-URL: https://build.opensuse.org/package/show/server:http/caddy?expand=0&rev=12
2022-06-07 15:34:49 +00:00
240c8da693 Accepting request 978655 from home:avicenzi:branches:server:http
Update to 2.5.1

OBS-URL: https://build.opensuse.org/request/show/978655
OBS-URL: https://build.opensuse.org/package/show/server:http/caddy?expand=0&rev=10
2022-05-23 08:58:48 +00:00
d35f043647 Accepting request 964918 from home:avicenzi:branches:server:http
Update to version 2.4.6

OBS-URL: https://build.opensuse.org/request/show/964918
OBS-URL: https://build.opensuse.org/package/show/server:http/caddy?expand=0&rev=8
2022-03-29 13:17:45 +00:00
5cea0efc8d Accepting request 926947 from home:susnux:branches:server:http
- Update to version 2.4.5:
  * Hotfix for a regression introduced in 2.4.4 related to
    combining the encode and reverse_proxy directives.

OBS-URL: https://build.opensuse.org/request/show/926947
OBS-URL: https://build.opensuse.org/package/show/server:http/caddy?expand=0&rev=7
2021-10-22 13:15:00 +00:00
922211390a Accepting request 915786 from home:avicenzi:branches:server:http
Update to version 2.4.4

OBS-URL: https://build.opensuse.org/request/show/915786
OBS-URL: https://build.opensuse.org/package/show/server:http/caddy?expand=0&rev=6
2021-09-07 09:33:23 +00:00
583b912711 Accepting request 914365 from home:jsegitz:branches:systemdhardening:server:http
Automatic systemd hardening effort by the security team. This has not been tested. For details please see https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort

OBS-URL: https://build.opensuse.org/request/show/914365
OBS-URL: https://build.opensuse.org/package/show/server:http/caddy?expand=0&rev=5
2021-09-02 14:38:26 +00:00
dca65c36eb Accepting request 895174 from home:avicenzi:branches:server:http
Update caddy to 2.4.1

OBS-URL: https://build.opensuse.org/request/show/895174
OBS-URL: https://build.opensuse.org/package/show/server:http/caddy?expand=0&rev=3
2021-06-08 08:31:32 +00:00
2042b97f6a Accepting request 895317 from server:http
Add Caddy package

OBS-URL: https://build.opensuse.org/request/show/895317
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/caddy?expand=0&rev=1
2021-06-01 08:35:28 +00:00
Marguerite Su
81a622221b Accepting request 889343 from home:avicenzi
Add Caddy

OBS-URL: https://build.opensuse.org/request/show/889343
OBS-URL: https://build.opensuse.org/package/show/server:http/caddy?expand=0&rev=1
2021-05-05 09:08:17 +00:00