Frédéric Guillot
b46b5dfb2a
Use r.RemoteAddr to check /metrics endpoint network access
...
HTTP headers like X-Forwarded-For or X-Real-Ip can be easily spoofed. As
such, it cannot be used to test if the client IP is allowed.
The recommendation is to use HTTP Basic authentication to protect the
metrics endpoint, or run Miniflux behind a trusted reverse-proxy.
2023-03-11 20:53:12 -08:00
Frédéric Guillot
877dbed5e8
Add HTTP Basic authentication for /metrics endpoint
2023-03-11 20:13:52 -08:00
Romain de Laage
2c2700a31d
Proxy support for several media types
...
closes #615
closes #635
2023-02-25 15:57:59 -08:00
mutantmonkey
b4643fd27f
Enable TLS-ALPN-01 challenge for ACME
...
This type of challenge works purely at the TLS layer and is compatible
with SNI proxies. The existing HTTP-01 challenge support has been left
as-is.
Fixes #1476 .
2022-11-16 20:41:55 -08:00
Gergan Penkov
4b6e46d9ab
Add Google Reader API implementation (experimental)
...
Co-authored-by: Sebastian Kempken <sebastian@kempken.io>
Co-authored-by: Gergan Penkov <gergan@gmail.com>
Co-authored-by: Dave Marquard <dave@marquard.org>
Co-authored-by: Moritz Fago <4459068+MoritzFago@users.noreply.github.com>
2022-01-02 19:45:12 -08:00
Frédéric Guillot
e3c28a6c96
Improve health check endpoint to test database connection
2021-02-19 19:32:13 -08:00
Frédéric Guillot
f29940d784
Rename storage certificate cache
...
This cache is used only for ACME certificates.
Being explicit is always better.
2021-02-13 14:16:30 -08:00
Dave Marquard
0bece2df7d
Database backed LetsEncrypt certificate cache ( #993 )
2021-01-29 18:44:40 -08:00
Frédéric Guillot
f0610bdd9c
Refactor feed creation to allow setting most fields via API
...
Allow API clients to create disabled feeds or define field like "ignore_http_cache".
2021-01-02 16:48:22 -08:00
Frédéric Guillot
c394a61a4e
Add Prometheus exporter
2020-09-27 20:04:48 -07:00
Frédéric Guillot
df7a6e18fd
Add option to enable maintenance mode
2020-09-12 18:42:28 -07:00
Frédéric Guillot
cc281f3533
Increase http server timeout values
2020-08-08 22:35:25 -07:00
Sebastian Wiesner
ae8e5c4dbc
Add /version endpoint
...
Closes #629
2020-04-17 18:39:53 -07:00
Dave Marquard
54602b55bb
Use secure TLS configuration for autocert server
...
This change lets Miniflux use the same secure TLS configuration options when using Let's Encrypt / Autocert as when using a manually specified certificate. It raises the server’s SSL Labs score from a B to an A+ with LetsEncrypt.
2020-03-02 21:30:48 -08:00
Aled Griffiths
7b32f59281
Add refreshAllFeeds to the API
...
Adds refreshAllFeeds to the API, following the suggestion given in the
comments of #359 .
2020-02-26 20:10:56 -08:00
Frédéric Guillot
228862fefa
Refactor config package
...
- Parse configuration only once during startup time
- Store configuration values in a global variable
2019-06-02 06:30:08 -07:00
Frédéric Guillot
a9fad093e6
Move healthcheck endpoint from ui package to httpd service
2018-12-28 13:41:26 -08:00
Frédéric Guillot
af4c68feac
Add support for Systemd Socket Activation
2018-11-25 17:41:23 -08:00
Frédéric Guillot
7838870a0c
Change Unix socket permission to make it accessible from other services
2018-11-25 16:13:52 -08:00
Frédéric Guillot
5cd7152ae7
Simplify application HTTP middlewares
2018-11-12 10:23:39 -08:00
Frédéric Guillot
1315282c7f
Add the possiblity to listen on Unix socket
2018-11-11 16:21:57 -08:00
Frédéric Guillot
487852f07e
Replace daemon and scheduler package with service package
2018-11-11 15:32:48 -08:00