github/sftpgo
4
0
Fork 0
mirror of https://github.com/drakkan/sftpgo.git synced 2026-10-20 08:17:37 +00:00
Code Issues Releases Wiki Activity
2,263 Commits 9 Branches 58 Tags
v2.7.0
Commit Graph
161 Commits
Author SHA1 Message Date
Nicola Murino 29c635a9a6 update version and deps 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2025-10-23 18:26:44 +02:00
Nicola Murino 35525e22e9 remove rsync support 
rsync was executed as an external command, which means we have no insight
into or control over what it actually does.
From a security perspective, this is far from ideal.

To be clear, there's nothing inherently wrong with rsync itself. However,
if we were to support it properly within SFTPGo, we would need to implement
the low-level protocol internally rather than relying on launching an external
process. This would ensure it works seamlessly with any storage backend,
just as SFTP does, for example.
We recommend using one of the many alternatives that rely on the SFTP
protocol, such as rclone

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2025-09-28 18:15:15 +02:00
Nicola Murino a469dd68a2 update theme and js deps 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2025-09-22 09:15:57 +02:00
Nicola Murino 7317674b41 Remove legacy data retention API 
Data retention is now managed via the EventManager, introduced in v2.4.0.
This allows scheduling retention checks and sending email or HTTP notifications,
making the old API redundant.

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2025-07-12 22:20:54 +02:00
Nicola Murino c9d361d93b OpenAPI: add missing event statuses to rule condition options 
Fixes #2011

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2025-07-03 11:44:06 +02:00
Nicola Murino 4c5d9f3a25 OpenAPI: fix logs endpoint 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2025-06-21 09:45:29 +02:00
Nicola Murino 312902b5f5 update js deps 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2025-03-16 12:26:08 +01:00
Nicola Murino 83cfcde9cb OpenAPI: add email format to user's additional emails 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2025-02-16 18:02:45 +01:00
Nicola Murino f30d6ad82a update css and js deps 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2024-11-10 12:34:10 +01:00
Nicola Murino 3dd412f6e3 WebAdmin and REST API: remove too granular permissions 
Our permissions system for admin users is too granular and some
permissions overlap. For example, you can define an administrator
with the "manage_system" permission and not with the "manage_admins"
or "manage_user" permission, but the "manage_system" permission
allows you to restore a backup and then create users and
administrators. The following permissions will be removed:
"manage_admins", "manage_apikeys", "manage_system", "retention_checks",
"manage_event_rules", "manage_roles", "manage_ip_lists". Now you
need to add the "*" permission to replace the removed granular
permissions because the removed permissions allow actions that
should only be allowed to super administrators.
There is no point in having separate, overlapping permissions.

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2024-11-10 10:46:28 +01:00
Nicola Murino 0c75d234b9 OpenAPI: document password_strength 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2024-10-26 21:19:28 +02:00
Nicola Murino 7feeec6941 update OpenAPI schema 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2024-10-16 20:51:51 +02:00
Nicola Murino 2fbf608895 S3: add SSE customer key 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2024-08-15 10:09:06 +02:00
Nicola Murino 81433e00d1 event action: add update modtime to fs rename 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2024-08-09 20:18:33 +02:00
Nicola Murino 9daf0ba767 update swagger UI to 5.17.14 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2024-06-18 20:47:39 +02:00
Nicola Murino 0cddcba5a7 EventManager: add an action to rotate the log file 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2024-06-04 19:51:52 +02:00
Nicola Murino 2bd3b46e3f update swagger ui 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2024-05-25 16:14:42 +02:00
Nicola Murino 61bc0065f9 back to development 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2024-05-16 04:54:46 +02:00
Nicola Murino 19e9857fea set version to 2.6.0 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2024-05-15 17:36:10 +02:00
Nicola Murino a1af33c6aa WebClient: allow to set TLS certificates 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2024-05-03 18:30:03 +02:00
Nicola MurinoandNazarii Mediukh 58a8b2b860 S3: add support for STS temporary credentials 
Fixes #1558

Co-authored-by: Nazarii Mediukh <nazar.medykh@gmail.com>
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2024-05-02 20:01:30 +02:00
Nicola Murino de62be6f21 update swagger ui 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2024-05-02 19:01:32 +02:00
Nicola Murino acfd4c3e55 ftpd: allow to ignore ASCII transfer types 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2024-05-02 19:00:29 +02:00
Nicola Murino 456517af87 notifier plugin: add support for login succeeded events 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2024-04-10 18:39:08 +02:00
Nicola Murino cb3bc3f604 update OpenAPI definition 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2024-03-18 19:32:01 +01:00
Nicola Murino 4d357a6a57 EventManager: allow to check for inactive users 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2024-03-04 19:48:10 +01:00
Nicola Murino a577d8b3cd WebAdmin: allow to disable 2FA 
Before it was only possible using REST API

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2024-02-23 18:24:07 +01:00
Nicola Murino de089e51fd Web: allow to require password change and two-factor for admins 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2024-02-21 20:45:10 +01:00
Nicola Murino 51ae2d7301 add copy permission 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2024-02-20 18:19:09 +01:00
Nicola Murino e61fb42cbc remove metadata plugin 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2024-02-17 12:30:47 +01:00
Nicola Murino d939a82225 user: add TLS certificates 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2024-01-14 21:36:23 +01:00
Nicola Murino ac309cf9a3 WebClient: remove data schema usage from mfa page 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-11-18 20:06:31 +01:00
Nicola Murino c5c5860012 ssh: allow to configure public key auth algorithms 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-11-09 20:03:04 +01:00
Nicola Murino 5452c3c121 update swagger ui 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-11-05 17:29:06 +01:00
Nicola Murino f05fe78737 ssh: refactor host key algorithm restriction 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-10-07 16:07:19 +02:00
Nicola Murino 6c482a248d portable mode: add WebClient 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-08-10 19:02:55 +02:00
Nicola Murino 830116bcf2 shares: allow to force an expiration date 
this is a soft requirement, users can reactivate expired shares by
updating the expiration date

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-08-07 19:07:20 +02:00
Nicola Murino 0413c0471c add a specific permission to manage folders 
creating/updating folders embedded in users is no longer supported.

Fixes #1349

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-07-23 18:48:49 +02:00
Nicola Murino e88172dd7e back to development 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-07-15 12:35:30 +02:00
Nicola Murino 51d8f3b436 back to development 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-06-29 14:42:16 +02:00
Nicola Murino 66f360e66c back to development 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-06-18 07:15:39 +02:00
Nicola Murino a38ce460bb WebClient: show user quota 
Also remove per-source data transfer limits. This was an
oversight

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-06-16 21:06:21 +02:00
Nicola Murino 80f21d1c91 WebAdmin: don't show hidden deny policy for allowed patterns 
The deny policy only applies to denied patterns, showing an allowed
pattern as hidden will confuse users

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-06-14 19:00:52 +02:00
Nicola Murino 8f934f7c82 email action: allow to configure Bcc 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-05-25 19:55:27 +02:00
Nicola Murino b2781e0bfc WebAdmin: Set TLS username to empty string if disabled 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-05-25 18:24:51 +02:00
Nicola Murino f8f8962ccb file patterns: evaluate allowed filters before the denied ones 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-05-24 19:56:53 +02:00
Nicola Murino 2b77709a04 back to development 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-05-21 09:23:24 +02:00
Nicola Murino 5b4a1bda2e set version to 2.5.1 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-05-20 17:39:23 +02:00
Nicola Murino bbaca578cd EventManager: add content type option for email config 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-05-17 19:28:13 +02:00
Nicola Murino da30389989 fix OpenAPI schema, update js deps 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-05-17 18:24:33 +02:00