Commit Graph

612 Commits (stable30)

Author SHA1 Message Date
provokateurin 9e0389058d
feat(CertificateManager): Add option to specify the default certificates bundle path
Signed-off-by: provokateurin <kate@provokateurin.de>
2025-12-01 11:59:50 +07:00
skjnldsv 2959854fe4 feat(config): add `maximum.supported.desktop.version`
Signed-off-by: skjnldsv <skjnldsv@protonmail.com>
2025-10-24 11:34:59 +07:00
Benjamin Gaussorgues 8fbd7633fe
feat(db): add SSL/TLS support for PostgreSQL
Signed-off-by: Benjamin Gaussorgues <benjamin.gaussorgues@nextcloud.com>
2025-09-22 15:03:46 +07:00
Johannes kingma 79266142e0 fix: adjust memcache config quote escape
Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>
2025-08-18 09:23:39 +07:00
Pawel Boguslawski 970851f30b fix: Hide "Create templates folder" option if templates are disabled in configuration
When both `skeletondirectory` and `templatedirectory` are set to empty
strings in configuration, templates folder creation should be disabled
and no Create templates folder option should be present
in new folder menu.

Related: https://github.com/nextcloud/server/issues/39266
Related: https://github.com/nextcloud/server/issues/46455
Author-Change-Id: IB#1156403

Signed-off-by: Pawel Boguslawski <pawel.boguslawski@ib.pl>
Signed-off-by: Andy Scherzinger <info@andy-scherzinger.de>
Signed-off-by: nextcloud-command <nextcloud-command@users.noreply.github.com>
2025-05-20 13:47:24 +07:00
Louis 1f6c10d3b5 Revert "[stable30] feat(bulk-upload): change the default to disabled as there are still some bugs present" 2025-04-24 14:54:06 +07:00
Benjamin Gaussorgues db71a2b2c9
feat(ip): add configurable IPv6 subnet for BFP and throttling
Signed-off-by: Benjamin Gaussorgues <benjamin.gaussorgues@nextcloud.com>
2025-04-24 09:41:32 +07:00
Simon L. 2b4a4556e4 feat(bulk-upload): change the default to disabled as there are still some bugs present
Signed-off-by: Simon L. <szaimen@e.mail.de>
2025-04-11 09:22:11 +07:00
Simon L 8cafed838d feat(theming): allow to disable standalone windows
Co-authored-by: Ferdinand Thiessen <opensource@fthiessen.de>

Signed-off-by: Simon L. <szaimen@e.mail.de>

Signed-off-by: Hamza Mahjoubi <hamzamahjoubi221@gmail.com>
2025-02-08 13:43:12 +07:00
Simon L. f3f3de1a0d docs: update overwrite.cli.url wording
Signed-off-by: Simon L. <szaimen@e.mail.de>
2024-11-04 10:48:20 +07:00
Christopher Ng 99a552c1c6 chore: Update trashbin retention documentation with exceeded quota details
Signed-off-by: Christopher Ng <chrng8@gmail.com>
2024-09-12 06:52:24 +07:00
Ferdinand Thiessen ec7675c047 docs: Add information how forbidden filenames are handled on existing files.
Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
2024-08-22 08:51:58 +07:00
Andy Scherzinger 3419edd697
Merge pull request #45193 from bahman026/update-config-sample-file
docs: added customclient_fdroid key to the config.sample.php file
2024-08-06 23:45:59 +07:00
Andy Scherzinger 203581efce
Merge pull request #46229 from nextcloud/jtr/fix-smtpdebug-cfg-sample
fix(config): Clarify smtp debugging config option usage
2024-08-06 23:33:15 +07:00
Git'Fellow 2ea6713504
fix: Max file size for metadata generation
Signed-off-by: Git'Fellow <12234510+solracsf@users.noreply.github.com>
Co-Authored-By: Louis <louis@chmn.me>
Signed-off-by: Richard Steinmetz <richard@steinmetz.cloud>
2024-08-05 08:48:15 +07:00
Josh de9c4716f9
fix: don't break doc builds / fix imaginary config sample formatting
Signed-off-by: Josh <josh.t.richards@gmail.com>
2024-07-31 08:56:35 +07:00
Joas Schilling 710a69b4b5
feat(log): Allow to combine log.conditions to only log (app&user)
Signed-off-by: Joas Schilling <coding@schilljs.com>
2024-07-30 13:18:09 +07:00
ernolf a8bdd4f99b
feat(preview): move previews for imaginary pdf to own class ImaginaryPDF
Signed-off-by: ernolf <raphael.gradenwitz@googlemail.com>

Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>
2024-07-25 17:01:01 +07:00
Benjamin Gaussorgues 202e5b1e95
feat(security): restrict admin actions to IP ranges
Signed-off-by: Benjamin Gaussorgues <benjamin.gaussorgues@nextcloud.com>
2024-07-19 16:28:03 +07:00
Ferdinand Thiessen bdbeabafa7
feat: Add `forbidden_filename_basenames` config option
This allows to configure forbidden filenames (the full filename like `.htaccess`)
and also forbidden basenames like `com0` where `com0`, `com0.txt` and `com0.tar.gz` will match.
We need this as only using basenames was too restrictive and will cause problems on some systems when updating.

Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
2024-07-15 19:39:18 +07:00
Ferdinand Thiessen 46f1efac41
feat: Add `IFilenameValidator` to have one consistent place for filename validation
Co-authored-by: Ferdinand Thiessen <opensource@fthiessen.de>
Co-authored-by: Côme Chilliet <91878298+come-nc@users.noreply.github.com>
Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
2024-07-09 15:04:34 +07:00
Bahman Jafarzadeh 15936040f9 docs: added customclient_fdroid config key to config.sample.php file
Co-authored-by: Josh <josh.t.richards@gmail.com>
Signed-off-by: Bahman Jafarzadeh <bahman026@gmail.com>
2024-07-09 13:20:06 +07:00
Josh 8e00fcb1c8
fix(config) : Clarity smtp debugging config option usage
Requires temporary `loglevel` adjustment "99%" (made up statistic) of the time as currently implemented.

Signed-off-by: Josh <josh.t.richards@gmail.com>
2024-07-01 13:29:23 +07:00
Misha M.-Kupriyanov aceb4d776c feat: reduce available languages per config value "reduce_to_languages"
Example: restrict to en, de, es, fr, it' languages

./occ config:system:set reduce_to_languages 0  --value  en
./occ config:system:set reduce_to_languages 1  --value  de
./occ config:system:set reduce_to_languages 2  --value  es
./occ config:system:set reduce_to_languages 3  --value  fr
./occ config:system:set reduce_to_languages 4  --value  it

Signed-off-by: Misha M.-Kupriyanov <kupriyanov@strato.de>
2024-07-01 09:34:11 +07:00
Christoph Wurst fe7217d2d3
Merge pull request #45026 from nextcloud/fix/token-update
Avoid updating the same oc_authtoken row twice
2024-05-16 12:00:32 +07:00
Simon L. 620d10c842 feat(exception-template): allow to link to specific documentation for how to retreive server log
Signed-off-by: Simon L <szaimen@e.mail.de>
2024-05-14 15:37:38 +07:00
Andy Scherzinger 1df96b0417
chore: Add SPDX header
Signed-off-by: Andy Scherzinger <info@andy-scherzinger.de>
2024-05-10 11:07:50 +07:00
Julius Härtl ac8f2e5592 docs: Update token_auth_activity_update default value to match implementation
Signed-off-by: Julius Härtl <jus@bitgrid.net>
2024-04-29 15:20:17 +07:00
Robin Appelman 8c10c78099
feat: add request id as comment to all queries
Signed-off-by: Robin Appelman <robin@icewind.nl>
2024-04-17 16:36:24 +07:00
Ferdinand Thiessen 5453c1d7fa
feat(settings): Allow to sort groups in the account management alphabetically
We can do this purly in the frontend - but when enforced from the backend using the existing system config,
we need to follow the requirement. We then show a warning about the configuration.

Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
2024-03-27 12:04:03 +07:00
Ferdinand Thiessen 7d51b6fff5
Merge pull request #44438 from nextcloud/feat/login-form-timeout
feat(login): Clear login form (password) after IDLE timeout
2024-03-25 21:03:42 +07:00
Ferdinand Thiessen 2525e73caa fix(DB): Sanitize `host` parameter for postgres databases when IPv6 address is passed
Doctrine is using `pg_connect` with the `host` parameter, this does not allow IPv6 addresses in URI notation.
So we need to extract the IP address and pass it directly

Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
2024-03-25 20:25:17 +07:00
Ferdinand Thiessen 3fede00732
feat(login): Clear login form (password) after IDLE timeout
For security reasons it is recommended to stop the login process at a defined time,
this could prevent password leaks by e.g. user forgetting that they entered their password on public devices.

Enforced e.g. by the BSI ORP.4.A13 rule.

Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
2024-03-25 12:22:53 +07:00
Josh 243ff7c976
docs(config.sample.php):
When setting a custom `updatedirectory` it's important that it not be located within the Server installation folder structure.

Partially addresses nextcloud/updater#463

Signed-off-by: Josh <josh.t.richards@gmail.com>
2024-03-11 19:22:20 +07:00
Maxence Lange 1d00d6c633 fix(config): deprecated enable_file_metadata
Signed-off-by: Maxence Lange <maxence@artificial-owl.com>
2024-03-11 10:20:32 +07:00
Alexander Müller 2f89a732fe
in text: "bruteforce" > "brute force"
In description text we should use correct spelling which is "brute force" or "brute-force", not "bruteforce".

In other parts of the documentation, "brute force" is used: https://docs.nextcloud.com/server/latest/admin_manual/configuration_server/bruteforce_configuration.html

See also https://en.wikipedia.org/wiki/Brute-force_attack

Signed-off-by: Alexander Müller <28591861+alexanderdd@users.noreply.github.com>
2024-03-03 09:10:29 +07:00
Ferdinand Thiessen 1017f4f34a fix: Also expose forbidden filename character in the capabilities
Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
2024-02-28 22:19:25 +07:00
Christoph Wurst 911ab393c0
feat(db): Make dirty query logging available in production
Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
2024-01-30 10:31:03 +07:00
Christoph Wurst 5dd7513390 fix(db): Fix replica password example config
Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
2024-01-23 08:17:26 +07:00
Daniel b9b0ca6dea
Merge pull request #41998 from nextcloud/enh/read-replica 2023-12-27 21:57:30 +07:00
Louis Chemineau a39b3a3d84
Add global accessibility switch
Signed-off-by: Louis Chemineau <louis@chmn.me>
2023-12-19 10:21:13 +07:00
Julius Härtl 79c4986354
enh: Implement PrimaryReadReplicaConnection
Signed-off-by: Julius Härtl <jus@bitgrid.net>
2023-12-16 20:27:37 +07:00
Richard Steinmetz 8191295f66
feat(dav): dispatch out-of-office started and ended events
Signed-off-by: Richard Steinmetz <richard@steinmetz.cloud>
2023-11-23 17:18:49 +07:00
Daniel Kesselberg b5241d5220
feat: allow multiple libreoffice invocations
LibreOffice only allows one invocation per user profile.[^1]

The office provider set the user profile to /tmp/owncloud-instanceid and therefore only one invocation per instance is allowed. This was introduced a while ago, yet it's unclear if this was intentionally or just a side effect.[^2]

The limitation on one invocation leads to the situation that the preview generation only works for a couple of files if you upload a whole folder of emf or word files.

This commit removes the limitation by using a new user profile for each preview. That's done by using instance id plus file id as postfix for getTemporaryFolder.

This has some drawbacks:

- Overload protection: If you upload 100 emf files, you may end up with 100 LibreOffice invocations. Though, you can use preview_concurrency_new to limit the number of previews that can be generated concurrently when php-sysvsem is available.
- New profile: I assume it takes a few bits to generate a fresh LibreOffice user profile. It appears that there is no way to ask LibreOffice to not create a profile and just work with the defaults. The profile will be cleaned after use by our temp manager.
- Remove the configuration option preview_office_cl_parameters:  This is not strictly necessary yet, but if you set the configuration option, the generated path for the user profile is also missing. The configuration option is not well documented (e.g., it's unclear that the last option needs to be --outdir) and actually, there should be no reason to change it after all.

[^1]: https://wiki.documentfoundation.org/UserProfile
[^2]: https://github.com/owncloud/core/pull/9784

Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>
2023-11-13 21:46:31 +07:00
Daniel Kesselberg aa48a5f94f
feat: add preview provider for emf files based on office
Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>
2023-11-13 12:35:54 +07:00
fenn-cs 13d03f45a3 Add unified search toggle in config
The new global search UI is new and might be unstable, hence
we are giving users the option to use the old unified search UI, if
the encounter signficant bottlenecks.

Signed-off-by: fenn-cs <fenn25.fn@gmail.com>
Signed-off-by: nextcloud-command <nextcloud-command@users.noreply.github.com>
2023-11-10 11:27:32 +07:00
Josh Richards 4a7f648d16
config.sample.php: fix incorrect theme name + add a missing one
Fixes #40908 

Signed-off-by: Josh Richards <josh.t.richards@gmail.com>
2023-10-15 13:27:40 +07:00
Simon L e5b11ced4a address review
Signed-off-by: Simon L <szaimen@e.mail.de>
2023-10-06 16:22:02 +07:00
John Molakvoæ (skjnldsv) dbeb526bba
fix(files): disallow illegal characters
Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>
2023-10-04 11:12:44 +07:00
Arthur Schiwon 825b65e2ef
Merge pull request #39978 from joshtrichards/jr-cfg-sample-trystack-remove
(config sample) Remove defunct trystack.org url
2023-08-29 21:13:30 +07:00