- 06 Jun, 2016 3 commits
-
-
Matthew Holt authored
-
Matthew Holt authored
-
Matthew Holt authored
-
- 05 Jun, 2016 2 commits
-
-
Matthew Holt authored
We now sneakily chain in the errors directive if gzip is present but not errors. This change fixes #616.
-
Matthew Holt authored
-
- 04 Jun, 2016 1 commit
-
-
Matthew Holt authored
These changes span work from the last ~4 months in an effort to make Caddy more extensible, reduce the coupling between its components, and lay a more robust foundation of code going forward into 1.0. A bunch of new features have been added, too, with even higher future potential. The most significant design change is an overall inversion of dependencies. Instead of the caddy package knowing about the server and the notion of middleware and config, the caddy package exposes an interface that other components plug into. This does introduce more indirection when reading the code, but every piece is very modular and pluggable. Even the HTTP server is pluggable. The caddy package has been moved to the top level, and main has been pushed into a subfolder called caddy. The actual logic of the main file has been pushed even further into caddy/caddymain/run.go so that custom builds of Caddy can be 'go get'able. The HTTPS logic was surgically separated into two parts to divide the TLS-specific code and the HTTPS-specific code. The caddytls package can now be used by any type of server that needs TLS, not just HTTP. I also added the ability to customize nearly every aspect of TLS at the site level rather than all sites sharing the same TLS configuration. Not all of this flexibility is exposed in the Caddyfile yet, but it may be in the future. Caddy can also generate self-signed certificates in memory for the convenience of a developer working on localhost who wants HTTPS. And Caddy now supports the DNS challenge, assuming at least one DNS provider is plugged in. Dozens, if not hundreds, of other minor changes swept through the code base as I literally started from an empty main function, copying over functions or files as needed, then adjusting them to fit in the new design. Most tests have been restored and adapted to the new API, but more work is needed there. A lot of what was "impossible" before is now possible, or can be made possible with minimal disruption of the code. For example, it's fairly easy to make plugins hook into another part of the code via callbacks. Plugins can do more than just be directives; we now have plugins that customize how the Caddyfile is loaded (useful when you need to get your configuration from a remote store). Site addresses no longer need be just a host and port. They can have a path, allowing you to scope a configuration to a specific path. There is no inheretance, however; each site configuration is distinct. Thanks to amazing work by Lucas Clemente, this commit adds experimental QUIC support. Turn it on using the -quic flag; your browser may have to be configured to enable it. Almost everything is here, but you will notice that most of the middle- ware are missing. After those are transferred over, we'll be ready for beta tests. I'm very excited to get this out. Thanks for everyone's help and patience these last few months. I hope you like it!!
-
- 03 Jun, 2016 5 commits
-
-
Matt Holt authored
Add upstream directive
-
Marc Guasch authored
-
Marc Guasch authored
-
Marc Guasch authored
-
Marc Guasch authored
-
- 02 Jun, 2016 2 commits
-
-
Matt Holt authored
Fix for cleaned URL.Path
-
Pieter Raubenheimer authored
-
- 29 May, 2016 2 commits
-
-
Abiola Ibrahim authored
Fix for #854
-
Abiola Ibrahim authored
-
- 27 May, 2016 2 commits
-
-
Matthew Holt authored
-
Matthew Holt authored
-
- 25 May, 2016 1 commit
-
-
Matthew Holt authored
-
- 24 May, 2016 2 commits
-
-
Matt Holt authored
Strip [] from IPv6 addresses for FastCGI.
-
Harrison Heck authored
Fixes #845.
-
- 21 May, 2016 1 commit
-
-
Matt Holt authored
systemd, README: Edit to account for the recent spike in reports
-
- 20 May, 2016 1 commit
-
-
W-Mark Kubacki authored
We have had three operators within a few days which ran into the same cause and had not been able to figure out what went wrong. addresses #833, #822
-
- 15 May, 2016 1 commit
-
-
Matthew Holt authored
-
- 14 May, 2016 2 commits
-
-
Matt Holt authored
fix typo
-
Leo Koppelkamm authored
-
- 12 May, 2016 3 commits
-
-
W. Mark Kubacki authored
Provides some more guidelines to operators on how to avoid running Caddy as root. Introduces an user www-data, which really is a placeholder. Such an user with the same UID/GID combination is created on the most popular Linux distribution. I trust any operator can spot the difference to his/her distro and adjust the unit file. User nobody is not used here to avoid two easy pitfalls: Such an user should not be able to access private keys (for TLS), and should not write private keys (we would do that with Letsencrypt).
-
W-Mark Kubacki authored
The exemplary unit file for systemd is intentionally redundant at times, for example dropping privileges which an unprivileged user "www-data" did not have in the first place: To aid as fallback in case the file gets copied and an operator setting UID to 0 (which reportedly happened in the past).
-
W-Mark Kubacki authored
-
- 07 May, 2016 4 commits
-
-
W. Mark Kubacki authored
browse: Decorate external links with: noopener noreferrer
-
W-Mark Kubacki authored
Setting these on external links prefents the target from manipulating this page by "window.opener" with some widely deployed browsers.
-
Matt Holt authored
Restart gracefully with in-process restart
-
Benny Ng authored
-
- 05 May, 2016 3 commits
- 04 May, 2016 1 commit
-
-
Tobias Weingartner authored
-
- 03 May, 2016 1 commit
-
-
Achim Vedam authored
-
- 01 May, 2016 3 commits
-
-
Tobias Weingartner authored
-
Tobias Weingartner authored
-
Tobias Weingartner authored
-