deblan-mirror/sftpgo
1
0
Fork 0
mirror of https://github.com/drakkan/sftpgo.git synced 2026-03-14 14:25:52 +01:00
Code Issues Projects Releases Packages Wiki Activity
2,332 commits 9 branches 54 tags 41 MiB
Commit graph

2,332 commits

This branch
This branch
All branches
Author SHA1 Message Date
Nicola Murino
fb8a8cb791
 		back to development 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2026-03-13 21:58:54 +01:00
dependabot[bot]
5f072ad8ac
 		Bump golang from 1.25-trixie to 1.26-trixie (#2174) 
Bumps golang from 1.25-trixie to 1.26-trixie.

---
updated-dependencies:
- dependency-name: golang
  dependency-version: 1.26-trixie
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-03-13 18:38:32 +01:00
dependabot[bot]
01a6bf2851
 		Bump actions/upload-artifact from 6 to 7 (#2177) 
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 6 to 7.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](https://github.com/actions/upload-artifact/compare/v6...v7)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-03-13 18:38:13 +01:00
dependabot[bot]
c4c95d72b9
 		Bump actions/download-artifact from 7 to 8 (#2178) 
Bumps [actions/download-artifact](https://github.com/actions/download-artifact) from 7 to 8.
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](https://github.com/actions/download-artifact/compare/v7...v8)

---
updated-dependencies:
- dependency-name: actions/download-artifact
  dependency-version: '8'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-03-13 18:38:01 +01:00
Nicola Murino
6ad1f69b2c
 		CI: update go version 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2026-03-12 19:51:34 +01:00
Nicola Murino
baedf15e0e
 		update deps 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2026-03-12 19:50:41 +01:00
Nicola Murino
c9601a8976
 		fix new lint warnings 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2026-03-07 16:51:57 +01:00
Nicola Murino
2f092d1289
 		fix: prevent path traversal via edge-level path normalization 
Moved path sanitization (backslash conversion and path cleaning) to
the SFTP/FTP handlers before VFS routing and permission checks.

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2026-03-07 12:03:59 +01:00
Nicola Murino
6cef669b8d
 		portable mode: improve password generation and perms 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2026-02-16 20:17:06 +01:00
Nicola Murino
03ae0a1c84
 		initprovider cmd: initialize enabled commands before loading initial data 
Fixes #2166

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2026-02-16 19:32:22 +01:00
Nicola Murino
4c00f6061c
 		reply to stat calls also for ongoing transfers on atomic storage backends 
the check is performed only on the connection where the transfer is
initiated so it is inexpensive

Fixes #2162

Co-authored-by: Joel Studler <joel.studler@swisscom.com>
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2026-02-16 17:54:10 +01:00
Nicola Murino
2b4c1f32fd
 		sftpfs: remove a premature optimization 
this may also fix a potential race condition

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2026-02-15 11:54:45 +01:00
Nicola Murino
7071011a5e
 		update js deps 
include axios 1.13.5

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2026-02-14 18:11:13 +01:00
Nicola Murino
9b58744275
 		update security policy 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2026-02-14 18:10:55 +01:00
Nicola Murino
35d9242466
 		update css and js 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2026-02-08 09:15:17 +01:00
Nicola Murino
7a9f5eb50c
 		update deps 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2026-02-07 20:46:16 +01:00
Nicola Murino
fbbea4a1fa
 		vfs: fix S3 range off-by-one and part timeouts 
wait for all the goroutine before retruning from multipart uploads

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2026-02-07 20:39:54 +01:00
Nicola Murino
96cc3dcf52
 		update the logo also in the img folder 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2026-02-05 07:59:00 +01:00
Nicola Murino
e48954f05c
 		update deps 
replace deprecated WithCredentialsJSON with WithAuthCredentialsJSON.
This change explicitly enforces `option.ServiceAccount` as the
required credential type from JSON files

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2026-02-04 21:18:50 +01:00
Nicola Murino
c26cfa364f
 		log: remove uncessary dependency 
ftpserverlib use slog now

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2026-02-04 19:33:40 +01:00
Nicola Murino
906b0731f1
 		update logo 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2026-02-01 10:30:23 +01:00
mmtootmm
133d2692c4
 		Fix/ftp active connection closed (#2164) 
ftpd: avoid fresh ftp connection being closed
 2026-01-27 18:48:59 +01:00
Nicola Murino
e3b2780655
 		webdav: ignore port for unix domain sockets 
Fixes #2151

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2026-01-24 10:32:11 +01:00
Nicola Murino
e44ff487e5
 		httpd: add base URL configuration 
Allow overriding the browser URL when generating share links.

Fixes #1858

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2026-01-23 19:38:02 +01:00
Nicola Murino
ed0c1a01ab
 		micro optimization to the function keepConnectionAlive 
we don't need a goroutine

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2026-01-21 18:30:46 +01:00
Nicola Murino
f1022db5c1
 		Apply naming rules when validating user-associated folders 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2026-01-17 14:14:51 +01:00
Nicola Murino
e861f0f578
 		clean home dir after applying group replacement 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2026-01-16 19:49:06 +01:00
Nicola Murino
f90fbccb2c
 		ensure migration lock and transaction use the same connection 
Previously, locks were session-bound but executed on a pool,
allowing race conditions.

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2026-01-12 18:44:22 +01:00
Nicola Murino
1815a098b6
 		WebAdmin: update Azure upload and download part size to match backend limits 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2026-01-10 14:15:27 +01:00
Nicola Murino
3bf7a85325
 		Update README: clarify project status and edition differences 
- Add a comparison table between Community and Enterprise editions.
- Explicitly state the production-ready status of the Open Source version.
- Update feature descriptions (performance, compliance, automation).
- Refine Support and Documentation sections for better clarity.

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2026-01-01 12:14:47 +01:00
Nicola Murino
f06a2e8bd4
 		locales: add Spanish 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2025-12-31 17:10:34 +01:00
Nicola Murino
a73f8998a2
 		locales: add zh-CN 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2025-12-31 16:36:43 +01:00
Nicola Murino
0be7545d9b
 		docker: remove trailing whitespace from download script 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2025-12-29 08:55:46 +01:00
immanuwell
a8d74a311f refactor: improve script - add robust error handling for plugin downloads, make it easier to maintain, etc 2025-12-29 08:30:53 +01:00
Nicola Murino
4a091d6c24
 		logger: remove journald support 
It was only used by the removed startsubsys mode.

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2025-12-27 16:41:26 +01:00
Nicola Murino
891248e7c9
 		update deps 
added a slog/log adapter for ftpserverlib 0.28.0

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2025-12-27 11:48:06 +01:00
Nicola Murino
23d6e0dc3f
 		ftpd: add tls version, cipher and KEX to login log 
Fixes #2124

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2025-12-24 12:52:31 +01:00
Nicola Murino
44828629c5
 		update nfpm to 2.44.1 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2025-12-24 11:26:35 +01:00
Nicola Murino
9db27aa782
 		remove restoreTemplateVars as it is no longer used 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2025-12-24 11:23:40 +01:00
Nicola Murino
3d549ce702
 		squash database migrations 
also added shares_groups_mapping table, currently not used in the
open-source version

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2025-12-24 11:08:44 +01:00
Nicola Murino
1d9cc1e00f
 		ftpd: allow configuring a single passive port 
Fixes #2146

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2025-12-23 07:36:06 +01:00
Nicola Murino
babdee5be1
 		update deps 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2025-12-20 17:58:57 +01:00
Nicola Murino
a1e45277dd
 		fix TestMemoryOIDCManager test case 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2025-12-20 17:19:53 +01:00
dependabot[bot]
375650e9be Bump actions/download-artifact from 6 to 7 
Bumps [actions/download-artifact](https://github.com/actions/download-artifact) from 6 to 7.
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](https://github.com/actions/download-artifact/compare/v6...v7)

---
updated-dependencies:
- dependency-name: actions/download-artifact
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-12-20 17:03:24 +01:00
dependabot[bot]
2edd13aef6 Bump actions/upload-artifact from 5 to 6 
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 5 to 6.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](https://github.com/actions/upload-artifact/compare/v5...v6)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-12-20 17:03:05 +01:00
Nicola Murino
130fc8e0a2
 		OIDC/OAuth2: increase auth state validity to 2 minutes 
Updates #2091

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2025-12-20 16:58:46 +01:00
Nicola Murino
0add546be3
 		user: fix group validation 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2025-12-17 20:01:16 +01:00
Nicola Murino
d0f4c6423e
 		update deps 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2025-12-11 08:44:52 +01:00
Nicola Murino
decdb187cf
 		Dockerfile: bump Alpine from 3.22 to 3.23 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2025-12-11 08:44:45 +01:00
Nicola Murino
21639b963c
 		OAuth2: add PKCE 
Fixes #2134

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2025-12-11 08:44:38 +01:00