Commit Graph

623 Commits (6afe12593ea9339ea396c2710eda128fe79ca15c)

Author SHA1 Message Date
Elizabeth Danzberger fdfeb7f265
feat(api): File conversion API
Signed-off-by: Elizabeth Danzberger <lizzy7128@tutanota.de>
2025-01-15 16:38:18 +07:00
provokateurin 31c21c7797
feat(files_trashbin): Allow preventing trash to be deleted permanently
Signed-off-by: provokateurin <kate@provokateurin.de>
2025-01-13 15:19:19 +07:00
Josh 1304590d6c
Merge pull request #49977 from nextcloud/jtr-perf-checks-connectivity-https-proto
perf(settings): Speed up InternetConnectivity setup check
2025-01-09 12:09:33 +07:00
skjnldsv f753d2f773 fix(federation): comply to `sharing.federation.allowSelfSignedCertificates`
Signed-off-by: skjnldsv <skjnldsv@protonmail.com>
2025-01-09 12:54:51 +07:00
Josh e0fa2ac481
fix: Correct typo in accessibility toggle in config.sample.php
Signed-off-by: Josh <josh.t.richards@gmail.com>
2025-01-07 17:18:30 +07:00
Josh 35cb5d84ca perf(settings): Speed up InternetConnectivity setup check
Specify default protocol (https://) rather than let default handling test both http:// and https://

Signed-off-by: Josh <josh.t.richards@gmail.com>
2025-01-07 16:49:28 +07:00
Benjamin Gaussorgues 1fd19685f1
chore(bruteforce): allows to configure max attempts before request abort
Signed-off-by: Benjamin Gaussorgues <benjamin.gaussorgues@nextcloud.com>
2024-12-03 10:48:10 +07:00
John Molakvoæ 63b74dc506 chore(config): set min supported desktop to `2.7.0`
Signed-off-by: John Molakvoæ <skjnldsv@users.noreply.github.com>
Signed-off-by: skjnldsv <skjnldsv@protonmail.com>
2024-11-27 22:55:40 +07:00
skjnldsv 8c0f8db6ca feat(config): add `maximum.supported.desktop.version`
Signed-off-by: skjnldsv <skjnldsv@protonmail.com>
2024-11-27 11:39:49 +07:00
Thomas Lehmann e4c013d86d feat(Mailer): add "null" SMTP transport mode
== Goal

Allow disabling mail delivery altogether.

== Usecase

If mails ought to be send by other means than rendering messages from
templates and sending them via SMTP-like protocols.

Example: listening to specific Nextcloud events and pass parameters to
a centralized (i.e. REST-based) API that sends e-mails.

Signed-off-by: Thomas Lehmann <t.lehmann@strato.de>
2024-11-19 11:32:39 +07:00
John Molakvoæ c0c6581dd0
Merge pull request #45330 from nextcloud/remove-locking-config-sample 2024-11-15 14:14:39 +07:00
Simon L. 69bc13ab5a docs: update overwrite.cli.url wording
Signed-off-by: Simon L. <szaimen@e.mail.de>
2024-11-04 09:37:00 +07:00
John Molakvoæ 14ff0e49a6
Merge pull request #42610 from hellodarkness/patch-1 2024-10-30 07:51:20 +07:00
John Molakvoæ 261fa636fa
fix: adjust `compromized` British wording
Co-authored-by: Kate <26026535+provokateurin@users.noreply.github.com>
Signed-off-by: John Molakvoæ <skjnldsv@users.noreply.github.com>
2024-10-29 15:26:49 +07:00
Joas Schilling 6854af0cc4
feat(bruteforce): Allow forcing the database throttler
Using the database is most likely worse for performance, but makes investigating
issues a lot easier as it's possible to look directly at the table to see all
logged remote addresses and actions.

Signed-off-by: Joas Schilling <coding@schilljs.com>
2024-10-24 22:04:41 +07:00
provokateurin ba3d67d2a0
feat(files): Expose chunked upload config via capabilities
Signed-off-by: provokateurin <kate@provokateurin.de>
2024-10-21 12:03:33 +07:00
Pablo Zmdl 280adb3e94 feat: configurable request timeout for carddav sync
Big federated setups may need a longer timeout, which they now can
configure.

Signed-off-by: Pablo Zmdl <pablo@nextcloud.com>
Co-authored-by: Josh <josh.t.richards@gmail.com>
2024-10-17 22:27:10 +07:00
Reno Reckling ef7e857881
feat: make search path for BinaryFinder customizable.
This feature is important for nextcloud running on
distributions like NixOS, where all the standard
search paths do not exist.

Also added tests.

This fixes issue #43922

Co-authored-by: Daniel <mail@danielkesselberg.de>
Signed-off-by: Reno Reckling <e-github@wthack.de>
2024-09-20 17:00:06 +07:00
Robin Appelman 6791ecbc88 fix: remove mention of disabling file locking from config sample
Signed-off-by: Robin Appelman <robin@icewind.nl>
2024-09-19 21:28:18 +07:00
Christopher Ng a7f3bde2a7 chore: Update trashbin retention documentation with exceeded quota details
Signed-off-by: Christopher Ng <chrng8@gmail.com>
2024-09-11 11:57:31 +07:00
provokateurin c0ac27951b docs(config): Explain how to retrieve navigation entry IDs for 'defaultapp' option
Signed-off-by: provokateurin <kate@provokateurin.de>
Signed-off-by: nextcloud-command <nextcloud-command@users.noreply.github.com>
2024-09-09 15:05:46 +07:00
Ferdinand Thiessen 91573781df
docs: Add information how forbidden filenames are handled on existing files.
Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
2024-08-21 04:22:13 +07:00
Andy Scherzinger 3419edd697
Merge pull request #45193 from bahman026/update-config-sample-file
docs: added customclient_fdroid key to the config.sample.php file
2024-08-06 23:45:59 +07:00
Andy Scherzinger 203581efce
Merge pull request #46229 from nextcloud/jtr/fix-smtpdebug-cfg-sample
fix(config): Clarify smtp debugging config option usage
2024-08-06 23:33:15 +07:00
Git'Fellow 2ea6713504
fix: Max file size for metadata generation
Signed-off-by: Git'Fellow <12234510+solracsf@users.noreply.github.com>
Co-Authored-By: Louis <louis@chmn.me>
Signed-off-by: Richard Steinmetz <richard@steinmetz.cloud>
2024-08-05 08:48:15 +07:00
Josh de9c4716f9
fix: don't break doc builds / fix imaginary config sample formatting
Signed-off-by: Josh <josh.t.richards@gmail.com>
2024-07-31 08:56:35 +07:00
Joas Schilling 710a69b4b5
feat(log): Allow to combine log.conditions to only log (app&user)
Signed-off-by: Joas Schilling <coding@schilljs.com>
2024-07-30 13:18:09 +07:00
ernolf a8bdd4f99b
feat(preview): move previews for imaginary pdf to own class ImaginaryPDF
Signed-off-by: ernolf <raphael.gradenwitz@googlemail.com>

Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>
2024-07-25 17:01:01 +07:00
Benjamin Gaussorgues 202e5b1e95
feat(security): restrict admin actions to IP ranges
Signed-off-by: Benjamin Gaussorgues <benjamin.gaussorgues@nextcloud.com>
2024-07-19 16:28:03 +07:00
Ferdinand Thiessen bdbeabafa7
feat: Add `forbidden_filename_basenames` config option
This allows to configure forbidden filenames (the full filename like `.htaccess`)
and also forbidden basenames like `com0` where `com0`, `com0.txt` and `com0.tar.gz` will match.
We need this as only using basenames was too restrictive and will cause problems on some systems when updating.

Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
2024-07-15 19:39:18 +07:00
Ferdinand Thiessen 46f1efac41
feat: Add `IFilenameValidator` to have one consistent place for filename validation
Co-authored-by: Ferdinand Thiessen <opensource@fthiessen.de>
Co-authored-by: Côme Chilliet <91878298+come-nc@users.noreply.github.com>
Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
2024-07-09 15:04:34 +07:00
Bahman Jafarzadeh 15936040f9 docs: added customclient_fdroid config key to config.sample.php file
Co-authored-by: Josh <josh.t.richards@gmail.com>
Signed-off-by: Bahman Jafarzadeh <bahman026@gmail.com>
2024-07-09 13:20:06 +07:00
Josh 8e00fcb1c8
fix(config) : Clarity smtp debugging config option usage
Requires temporary `loglevel` adjustment "99%" (made up statistic) of the time as currently implemented.

Signed-off-by: Josh <josh.t.richards@gmail.com>
2024-07-01 13:29:23 +07:00
Misha M.-Kupriyanov aceb4d776c feat: reduce available languages per config value "reduce_to_languages"
Example: restrict to en, de, es, fr, it' languages

./occ config:system:set reduce_to_languages 0  --value  en
./occ config:system:set reduce_to_languages 1  --value  de
./occ config:system:set reduce_to_languages 2  --value  es
./occ config:system:set reduce_to_languages 3  --value  fr
./occ config:system:set reduce_to_languages 4  --value  it

Signed-off-by: Misha M.-Kupriyanov <kupriyanov@strato.de>
2024-07-01 09:34:11 +07:00
Christoph Wurst fe7217d2d3
Merge pull request #45026 from nextcloud/fix/token-update
Avoid updating the same oc_authtoken row twice
2024-05-16 12:00:32 +07:00
Simon L. 620d10c842 feat(exception-template): allow to link to specific documentation for how to retreive server log
Signed-off-by: Simon L <szaimen@e.mail.de>
2024-05-14 15:37:38 +07:00
Andy Scherzinger 1df96b0417
chore: Add SPDX header
Signed-off-by: Andy Scherzinger <info@andy-scherzinger.de>
2024-05-10 11:07:50 +07:00
Julius Härtl ac8f2e5592 docs: Update token_auth_activity_update default value to match implementation
Signed-off-by: Julius Härtl <jus@bitgrid.net>
2024-04-29 15:20:17 +07:00
Robin Appelman 8c10c78099
feat: add request id as comment to all queries
Signed-off-by: Robin Appelman <robin@icewind.nl>
2024-04-17 16:36:24 +07:00
Ferdinand Thiessen 5453c1d7fa
feat(settings): Allow to sort groups in the account management alphabetically
We can do this purly in the frontend - but when enforced from the backend using the existing system config,
we need to follow the requirement. We then show a warning about the configuration.

Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
2024-03-27 12:04:03 +07:00
Ferdinand Thiessen 7d51b6fff5
Merge pull request #44438 from nextcloud/feat/login-form-timeout
feat(login): Clear login form (password) after IDLE timeout
2024-03-25 21:03:42 +07:00
Ferdinand Thiessen 2525e73caa fix(DB): Sanitize `host` parameter for postgres databases when IPv6 address is passed
Doctrine is using `pg_connect` with the `host` parameter, this does not allow IPv6 addresses in URI notation.
So we need to extract the IP address and pass it directly

Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
2024-03-25 20:25:17 +07:00
Ferdinand Thiessen 3fede00732
feat(login): Clear login form (password) after IDLE timeout
For security reasons it is recommended to stop the login process at a defined time,
this could prevent password leaks by e.g. user forgetting that they entered their password on public devices.

Enforced e.g. by the BSI ORP.4.A13 rule.

Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
2024-03-25 12:22:53 +07:00
Josh 243ff7c976
docs(config.sample.php):
When setting a custom `updatedirectory` it's important that it not be located within the Server installation folder structure.

Partially addresses nextcloud/updater#463

Signed-off-by: Josh <josh.t.richards@gmail.com>
2024-03-11 19:22:20 +07:00
Maxence Lange 1d00d6c633 fix(config): deprecated enable_file_metadata
Signed-off-by: Maxence Lange <maxence@artificial-owl.com>
2024-03-11 10:20:32 +07:00
Alexander Müller 2f89a732fe
in text: "bruteforce" > "brute force"
In description text we should use correct spelling which is "brute force" or "brute-force", not "bruteforce".

In other parts of the documentation, "brute force" is used: https://docs.nextcloud.com/server/latest/admin_manual/configuration_server/bruteforce_configuration.html

See also https://en.wikipedia.org/wiki/Brute-force_attack

Signed-off-by: Alexander Müller <28591861+alexanderdd@users.noreply.github.com>
2024-03-03 09:10:29 +07:00
Ferdinand Thiessen 1017f4f34a fix: Also expose forbidden filename character in the capabilities
Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
2024-02-28 22:19:25 +07:00
Christoph Wurst 911ab393c0
feat(db): Make dirty query logging available in production
Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
2024-01-30 10:31:03 +07:00
Christoph Wurst 5dd7513390 fix(db): Fix replica password example config
Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
2024-01-23 08:17:26 +07:00
HelloDarkness 5d91487eae
Update config.sample.php
Comments to clarify the purpose of session_keepalive.
Fixes issue in Nextcloud Documentation (https://github.com/nextcloud/documentation/issues/7244)

Signed-off-by: HelloDarkness <111370255+hellodarkness@users.noreply.github.com>
2024-01-06 15:20:05 +07:00