go/sftpgo
1
0
Fork 0
mirror of https://github.com/drakkan/sftpgo.git synced 2025-11-23 22:04:50 +02:00
Code Issues Releases Activity
2,255 Commits 9 Branches 53 Tags
f21c3d2af27a9d1bcdba45c2cbdce4fe166d33f1
Commit Graph

160 Commits

Author SHA1 Message Date
Nicola Murino
35525e22e9 remove rsync support 
rsync was executed as an external command, which means we have no insight
into or control over what it actually does.
From a security perspective, this is far from ideal.

To be clear, there's nothing inherently wrong with rsync itself. However,
if we were to support it properly within SFTPGo, we would need to implement
the low-level protocol internally rather than relying on launching an external
process. This would ensure it works seamlessly with any storage backend,
just as SFTP does, for example.
We recommend using one of the many alternatives that rely on the SFTP
protocol, such as rclone

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2025-09-28 18:15:15 +02:00
Nicola Murino
a469dd68a2 update theme and js deps 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2025-09-22 09:15:57 +02:00
Nicola Murino
7317674b41 Remove legacy data retention API 
Data retention is now managed via the EventManager, introduced in v2.4.0.
This allows scheduling retention checks and sending email or HTTP notifications,
making the old API redundant.

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2025-07-12 22:20:54 +02:00
Nicola Murino
c9d361d93b OpenAPI: add missing event statuses to rule condition options 
Fixes #2011

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2025-07-03 11:44:06 +02:00
Nicola Murino
4c5d9f3a25 OpenAPI: fix logs endpoint 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2025-06-21 09:45:29 +02:00
Nicola Murino
312902b5f5 update js deps 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2025-03-16 12:26:08 +01:00
Nicola Murino
83cfcde9cb OpenAPI: add email format to user's additional emails 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2025-02-16 18:02:45 +01:00
Nicola Murino
f30d6ad82a update css and js deps 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2024-11-10 12:34:10 +01:00
Nicola Murino
3dd412f6e3 WebAdmin and REST API: remove too granular permissions 
Our permissions system for admin users is too granular and some
permissions overlap. For example, you can define an administrator
with the "manage_system" permission and not with the "manage_admins"
or "manage_user" permission, but the "manage_system" permission
allows you to restore a backup and then create users and
administrators. The following permissions will be removed:
"manage_admins", "manage_apikeys", "manage_system", "retention_checks",
"manage_event_rules", "manage_roles", "manage_ip_lists". Now you
need to add the "*" permission to replace the removed granular
permissions because the removed permissions allow actions that
should only be allowed to super administrators.
There is no point in having separate, overlapping permissions.

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2024-11-10 10:46:28 +01:00
Nicola Murino
0c75d234b9 OpenAPI: document password_strength 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2024-10-26 21:19:28 +02:00
Nicola Murino
7feeec6941 update OpenAPI schema 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2024-10-16 20:51:51 +02:00
Nicola Murino
2fbf608895 S3: add SSE customer key 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2024-08-15 10:09:06 +02:00
Nicola Murino
81433e00d1 event action: add update modtime to fs rename 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2024-08-09 20:18:33 +02:00
Nicola Murino
9daf0ba767 update swagger UI to 5.17.14 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2024-06-18 20:47:39 +02:00
Nicola Murino
0cddcba5a7 EventManager: add an action to rotate the log file 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2024-06-04 19:51:52 +02:00
Nicola Murino
2bd3b46e3f update swagger ui 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2024-05-25 16:14:42 +02:00
Nicola Murino
61bc0065f9 back to development 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2024-05-16 04:54:46 +02:00
Nicola Murino
19e9857fea set version to 2.6.0 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2024-05-15 17:36:10 +02:00
Nicola Murino
a1af33c6aa WebClient: allow to set TLS certificates 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2024-05-03 18:30:03 +02:00
Nicola Murino
58a8b2b860 S3: add support for STS temporary credentials 
Fixes #1558

Co-authored-by: Nazarii Mediukh <nazar.medykh@gmail.com>
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2024-05-02 20:01:30 +02:00
Nicola Murino
de62be6f21 update swagger ui 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2024-05-02 19:01:32 +02:00
Nicola Murino
acfd4c3e55 ftpd: allow to ignore ASCII transfer types 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2024-05-02 19:00:29 +02:00
Nicola Murino
456517af87 notifier plugin: add support for login succeeded events 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2024-04-10 18:39:08 +02:00
Nicola Murino
cb3bc3f604 update OpenAPI definition 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2024-03-18 19:32:01 +01:00
Nicola Murino
4d357a6a57 EventManager: allow to check for inactive users 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2024-03-04 19:48:10 +01:00
Nicola Murino
a577d8b3cd WebAdmin: allow to disable 2FA 
Before it was only possible using REST API

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2024-02-23 18:24:07 +01:00
Nicola Murino
de089e51fd Web: allow to require password change and two-factor for admins 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2024-02-21 20:45:10 +01:00
Nicola Murino
51ae2d7301 add copy permission 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2024-02-20 18:19:09 +01:00
Nicola Murino
e61fb42cbc remove metadata plugin 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2024-02-17 12:30:47 +01:00
Nicola Murino
d939a82225 user: add TLS certificates 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2024-01-14 21:36:23 +01:00
Nicola Murino
ac309cf9a3 WebClient: remove data schema usage from mfa page 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-11-18 20:06:31 +01:00
Nicola Murino
c5c5860012 ssh: allow to configure public key auth algorithms 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-11-09 20:03:04 +01:00
Nicola Murino
5452c3c121 update swagger ui 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-11-05 17:29:06 +01:00
Nicola Murino
f05fe78737 ssh: refactor host key algorithm restriction 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-10-07 16:07:19 +02:00
Nicola Murino
6c482a248d portable mode: add WebClient 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-08-10 19:02:55 +02:00
Nicola Murino
830116bcf2 shares: allow to force an expiration date 
this is a soft requirement, users can reactivate expired shares by
updating the expiration date

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-08-07 19:07:20 +02:00
Nicola Murino
0413c0471c add a specific permission to manage folders 
creating/updating folders embedded in users is no longer supported.

Fixes #1349

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-07-23 18:48:49 +02:00
Nicola Murino
e88172dd7e back to development 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-07-15 12:35:30 +02:00
Nicola Murino
51d8f3b436 back to development 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-06-29 14:42:16 +02:00
Nicola Murino
66f360e66c back to development 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-06-18 07:15:39 +02:00
Nicola Murino
a38ce460bb WebClient: show user quota 
Also remove per-source data transfer limits. This was an
oversight

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-06-16 21:06:21 +02:00
Nicola Murino
80f21d1c91 WebAdmin: don't show hidden deny policy for allowed patterns 
The deny policy only applies to denied patterns, showing an allowed
pattern as hidden will confuse users

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-06-14 19:00:52 +02:00
Nicola Murino
8f934f7c82 email action: allow to configure Bcc 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-05-25 19:55:27 +02:00
Nicola Murino
b2781e0bfc WebAdmin: Set TLS username to empty string if disabled 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-05-25 18:24:51 +02:00
Nicola Murino
f8f8962ccb file patterns: evaluate allowed filters before the denied ones 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-05-24 19:56:53 +02:00
Nicola Murino
2b77709a04 back to development 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-05-21 09:23:24 +02:00
Nicola Murino
5b4a1bda2e set version to 2.5.1 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-05-20 17:39:23 +02:00
Nicola Murino
bbaca578cd EventManager: add content type option for email config 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-05-17 19:28:13 +02:00
Nicola Murino
da30389989 fix OpenAPI schema, update js deps 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-05-17 18:24:33 +02:00
Nicola Murino
adad8e658b osfs: add optional buffering 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-05-16 18:08:14 +02:00