Compare commits

..

5 Commits

Author SHA1 Message Date
Eric Nemchik
716b1237c5 Update default.conf.sample to deny dotfile access
Signed-off-by: Eric Nemchik <eric@nemchik.com>
2026-02-08 09:39:37 -06:00
LinuxServer-CI
6182a75998 Bot Updating Package Versions
Some checks failed
External Trigger Scheduler / external-trigger-scheduler (push) Has been cancelled
Mark stale issues and pull requests / stale (push) Has been cancelled
2026-02-07 04:43:17 +00:00
LinuxServer-CI
145c5d84f6 Bot Updating Package Versions
Some checks failed
External Trigger Scheduler / external-trigger-scheduler (push) Has been cancelled
Package Trigger Scheduler / package-trigger-scheduler (push) Has been cancelled
2026-02-06 14:17:14 +00:00
LinuxServer-CI
1039f2a04c Bot Updating Package Versions
Some checks failed
External Trigger Scheduler / external-trigger-scheduler (push) Has been cancelled
Mark stale issues and pull requests / stale (push) Has been cancelled
2026-02-03 19:48:04 +00:00
LinuxServer-CI
156e3ac160 Bot Updating Package Versions
Some checks failed
External Trigger Scheduler / external-trigger-scheduler (push) Has been cancelled
Mark stale issues and pull requests / stale (push) Has been cancelled
2026-01-31 04:29:28 +00:00
3 changed files with 66 additions and 57 deletions

View File

@@ -1,11 +1,11 @@
NAME VERSION TYPE NAME VERSION TYPE
Simple Launcher 1.1.0.14 binary (+5 duplicates) Simple Launcher 1.1.0.14 binary (+5 duplicates)
acl-libs 2.3.2-r1 apk acl-libs 2.3.2-r1 apk
acme 5.2.2 python acme 5.3.0 python
alpine-baselayout 3.7.0-r0 apk alpine-baselayout 3.7.0-r0 apk
alpine-baselayout-data 3.7.0-r0 apk alpine-baselayout-data 3.7.0-r0 apk
alpine-keys 2.5-r0 apk alpine-keys 2.5-r0 apk
alpine-release 3.22.2-r0 apk alpine-release 3.22.3-r0 apk
aom-libs 3.12.1-r0 apk aom-libs 3.12.1-r0 apk
apache2-utils 2.4.66-r0 apk apache2-utils 2.4.66-r0 apk
apk-tools 2.14.9-r3 apk apk-tools 2.14.9-r3 apk
@@ -22,8 +22,8 @@ azure-mgmt-dns 9.0.0 python
backports-tarfile 1.2.0 python backports-tarfile 1.2.0 python
bash 5.2.37-r0 apk bash 5.2.37-r0 apk
beautifulsoup4 4.14.3 python beautifulsoup4 4.14.3 python
boto3 1.42.34 python boto3 1.42.44 python
botocore 1.42.34 python botocore 1.42.44 python
brotli-libs 1.1.0-r2 apk brotli-libs 1.1.0-r2 apk
bs4 0.0.2 python bs4 0.0.2 python
busybox 1.37.0-r20 apk busybox 1.37.0-r20 apk
@@ -33,47 +33,47 @@ c-client 2007f-r15 apk
ca-certificates 20250911-r0 apk ca-certificates 20250911-r0 apk
ca-certificates-bundle 20250911-r0 apk ca-certificates-bundle 20250911-r0 apk
catatonit 0.2.1-r0 apk catatonit 0.2.1-r0 apk
certbot 5.2.2 python certbot 5.3.0 python
certbot-dns-acmedns 0.1.0 python certbot-dns-acmedns 0.1.0 python
certbot-dns-aliyun 2.0.0 python certbot-dns-aliyun 2.0.0 python
certbot-dns-azure 1.5.0 python certbot-dns-azure 1.5.0 python
certbot-dns-bunny 3.0.0 python certbot-dns-bunny 3.0.0 python
certbot-dns-cloudflare 5.2.2 python certbot-dns-cloudflare 5.3.0 python
certbot-dns-cpanel 0.4.0 python certbot-dns-cpanel 0.4.0 python
certbot-dns-desec 1.3.2 python certbot-dns-desec 1.3.2 python
certbot-dns-digitalocean 5.2.2 python certbot-dns-digitalocean 5.3.0 python
certbot-dns-directadmin 1.0.15 python certbot-dns-directadmin 1.0.15 python
certbot-dns-dnsimple 5.2.2 python certbot-dns-dnsimple 5.3.0 python
certbot-dns-dnsmadeeasy 5.2.2 python certbot-dns-dnsmadeeasy 5.3.0 python
certbot-dns-dnspod 0.1.0 python certbot-dns-dnspod 0.1.0 python
certbot-dns-do 0.31.0 python certbot-dns-do 0.31.0 python
certbot-dns-domeneshop 0.2.9 python certbot-dns-domeneshop 0.2.9 python
certbot-dns-dreamhost 1.0 python certbot-dns-dreamhost 1.0 python
certbot-dns-duckdns 1.7.1 python certbot-dns-duckdns 1.8.0 python
certbot-dns-dynudns 0.0.6 python certbot-dns-dynudns 0.0.6 python
certbot-dns-freedns 0.2.0 python certbot-dns-freedns 0.2.0 python
certbot-dns-gehirn 5.2.2 python certbot-dns-gehirn 5.3.0 python
certbot-dns-glesys 2.1.0 python certbot-dns-glesys 2.1.0 python
certbot-dns-godaddy 2.8.0 python certbot-dns-godaddy 2.8.0 python
certbot-dns-google 5.2.2 python certbot-dns-google 5.3.0 python
certbot-dns-he 1.0.0 python certbot-dns-he 1.0.0 python
certbot-dns-hetzner 3.0.0 python certbot-dns-hetzner 3.0.0 python
certbot-dns-hetzner-cloud 1.0.4 python certbot-dns-hetzner-cloud 1.0.5 python
certbot-dns-infomaniak 0.2.4 python certbot-dns-infomaniak 0.2.4 python
certbot-dns-inwx 3.0.3 python certbot-dns-inwx 3.0.3 python
certbot-dns-ionos 2024.11.9 python certbot-dns-ionos 2024.11.9 python
certbot-dns-linode 5.2.2 python certbot-dns-linode 5.3.0 python
certbot-dns-loopia 1.0.1 python certbot-dns-loopia 1.0.1 python
certbot-dns-luadns 5.2.2 python certbot-dns-luadns 5.3.0 python
certbot-dns-namecheap 1.0.0 python certbot-dns-namecheap 1.0.0 python
certbot-dns-netcup 2.0.0 python certbot-dns-netcup 2.0.0 python
certbot-dns-njalla 2.0.2 python certbot-dns-njalla 2.0.2 python
certbot-dns-nsone 5.2.2 python certbot-dns-nsone 5.3.0 python
certbot-dns-ovh 5.2.2 python certbot-dns-ovh 5.3.0 python
certbot-dns-porkbun 0.11.0 python certbot-dns-porkbun 0.11.0 python
certbot-dns-rfc2136 5.2.2 python certbot-dns-rfc2136 5.3.0 python
certbot-dns-route53 5.2.2 python certbot-dns-route53 5.3.0 python
certbot-dns-sakuracloud 5.2.2 python certbot-dns-sakuracloud 5.3.0 python
certbot-dns-standalone 1.2.1 python certbot-dns-standalone 1.2.1 python
certbot-dns-transip 0.5.2 python certbot-dns-transip 0.5.2 python
certbot-dns-vultr 1.1.0 python certbot-dns-vultr 1.1.0 python
@@ -86,14 +86,14 @@ cli-32 UNKNOWN binary
cli-64 UNKNOWN binary cli-64 UNKNOWN binary
cli-arm64 UNKNOWN binary cli-arm64 UNKNOWN binary
cloudflare 2.19.4 python cloudflare 2.19.4 python
composer 2.9.4 binary composer 2.9.5 binary
configargparse 1.7.1 python configargparse 1.7.1 python
configobj 5.0.9 python configobj 5.0.9 python
coreutils 9.7-r1 apk coreutils 9.7-r1 apk
coreutils-env 9.7-r1 apk coreutils-env 9.7-r1 apk
coreutils-fmt 9.7-r1 apk coreutils-fmt 9.7-r1 apk
coreutils-sha512sum 9.7-r1 apk coreutils-sha512sum 9.7-r1 apk
cryptography 46.0.3 python cryptography 46.0.4 python
curl 8.14.1-r2 apk curl 8.14.1-r2 apk
distro 1.9.0 python distro 1.9.0 python
dns-lexicon 3.23.2 python dns-lexicon 3.23.2 python
@@ -122,8 +122,8 @@ gnupg-utils 2.4.9-r0 apk
gnupg-wks-client 2.4.9-r0 apk gnupg-wks-client 2.4.9-r0 apk
gnutls 3.8.8-r0 apk gnutls 3.8.8-r0 apk
google-api-core 2.29.0 python google-api-core 2.29.0 python
google-api-python-client 2.188.0 python google-api-python-client 2.189.0 python
google-auth 2.47.0 python google-auth 2.48.0 python
google-auth-httplib2 0.3.0 python google-auth-httplib2 0.3.0 python
googleapis-common-protos 1.72.0 python googleapis-common-protos 1.72.0 python
gpg 2.4.9-r0 apk gpg 2.4.9-r0 apk
@@ -162,12 +162,12 @@ libattr 2.5.2-r2 apk
libavif 1.3.0-r0 apk libavif 1.3.0-r0 apk
libbsd 0.12.2-r0 apk libbsd 0.12.2-r0 apk
libbz2 1.0.8-r6 apk libbz2 1.0.8-r6 apk
libcrypto3 3.5.4-r0 apk libcrypto3 3.5.5-r0 apk
libcurl 8.14.1-r2 apk libcurl 8.14.1-r2 apk
libdav1d 1.5.1-r0 apk libdav1d 1.5.1-r0 apk
libedit 20250104.3.1-r1 apk libedit 20250104.3.1-r1 apk
libevent 2.1.12-r8 apk libevent 2.1.12-r8 apk
libexpat 2.7.3-r0 apk libexpat 2.7.4-r0 apk
libffi 3.4.8-r0 apk libffi 3.4.8-r0 apk
libgcc 14.2.0-r6 apk libgcc 14.2.0-r6 apk
libgcrypt 1.10.3-r1 apk libgcrypt 1.10.3-r1 apk
@@ -197,7 +197,7 @@ libseccomp 2.6.0-r0 apk
libsharpyuv 1.5.0-r0 apk libsharpyuv 1.5.0-r0 apk
libsm 1.2.5-r0 apk libsm 1.2.5-r0 apk
libsodium 1.0.20-r1 apk libsodium 1.0.20-r1 apk
libssl3 3.5.4-r0 apk libssl3 3.5.5-r0 apk
libstdc++ 14.2.0-r6 apk libstdc++ 14.2.0-r6 apk
libtasn1 4.21.0-r0 apk libtasn1 4.21.0-r0 apk
libunistring 1.3-r0 apk libunistring 1.3-r0 apk
@@ -235,28 +235,28 @@ ncurses-terminfo-base 6.5_p20250503-r0 apk
netcat-openbsd 1.229.1-r0 apk netcat-openbsd 1.229.1-r0 apk
nettle 3.10.1-r0 apk nettle 3.10.1-r0 apk
nghttp2-libs 1.65.0-r0 apk nghttp2-libs 1.65.0-r0 apk
nginx 1.28.0-r3 apk nginx 1.28.2-r0 apk
nginx-mod-devel-kit 1.28.0-r3 apk nginx-mod-devel-kit 1.28.2-r0 apk
nginx-mod-http-brotli 1.28.0-r3 apk nginx-mod-http-brotli 1.28.2-r0 apk
nginx-mod-http-dav-ext 1.28.0-r3 apk nginx-mod-http-dav-ext 1.28.2-r0 apk
nginx-mod-http-echo 1.28.0-r3 apk nginx-mod-http-echo 1.28.2-r0 apk
nginx-mod-http-fancyindex 1.28.0-r3 apk nginx-mod-http-fancyindex 1.28.2-r0 apk
nginx-mod-http-geoip2 1.28.0-r3 apk nginx-mod-http-geoip2 1.28.2-r0 apk
nginx-mod-http-headers-more 1.28.0-r3 apk nginx-mod-http-headers-more 1.28.2-r0 apk
nginx-mod-http-image-filter 1.28.0-r3 apk nginx-mod-http-image-filter 1.28.2-r0 apk
nginx-mod-http-perl 1.28.0-r3 apk nginx-mod-http-perl 1.28.2-r0 apk
nginx-mod-http-redis2 1.28.0-r3 apk nginx-mod-http-redis2 1.28.2-r0 apk
nginx-mod-http-set-misc 1.28.0-r3 apk nginx-mod-http-set-misc 1.28.2-r0 apk
nginx-mod-http-upload-progress 1.28.0-r3 apk nginx-mod-http-upload-progress 1.28.2-r0 apk
nginx-mod-http-xslt-filter 1.28.0-r3 apk nginx-mod-http-xslt-filter 1.28.2-r0 apk
nginx-mod-mail 1.28.0-r3 apk nginx-mod-mail 1.28.2-r0 apk
nginx-mod-rtmp 1.28.0-r3 apk nginx-mod-rtmp 1.28.2-r0 apk
nginx-mod-stream 1.28.0-r3 apk nginx-mod-stream 1.28.2-r0 apk
nginx-mod-stream-geoip2 1.28.0-r3 apk nginx-mod-stream-geoip2 1.28.2-r0 apk
nginx-vim 1.28.0-r3 apk nginx-vim 1.28.2-r0 apk
npth 1.8-r0 apk npth 1.8-r0 apk
oniguruma 6.9.10-r0 apk oniguruma 6.9.10-r0 apk
openssl 3.5.4-r0 apk openssl 3.5.5-r0 apk
p11-kit 0.25.5-r2 apk p11-kit 0.25.5-r2 apk
packaging 26.0 python (+1 duplicate) packaging 26.0 python (+1 duplicate)
parsedatetime 2.6 python parsedatetime 2.6 python
@@ -313,19 +313,19 @@ php84-xmlwriter 8.4.16-r0 apk
php84-xsl 8.4.16-r0 apk php84-xsl 8.4.16-r0 apk
php84-zip 8.4.16-r0 apk php84-zip 8.4.16-r0 apk
pinentry 1.3.1-r0 apk pinentry 1.3.1-r0 apk
pip 25.3 python pip 26.0.1 python
pkb-client 2.2.0 python pkb-client 2.2.0 python
platformdirs 4.4.0 python platformdirs 4.4.0 python
popt 1.19-r4 apk popt 1.19-r4 apk
procps-ng 4.0.4-r3 apk procps-ng 4.0.4-r3 apk
proto-plus 1.27.0 python proto-plus 1.27.1 python
protobuf 6.33.4 python protobuf 6.33.5 python
pyacmedns 0.4 python pyacmedns 0.4 python
pyasn1 0.6.2 python pyasn1 0.6.2 python
pyasn1-modules 0.4.2 python pyasn1-modules 0.4.2 python
pyc 3.12.12-r0 apk pyc 3.12.12-r0 apk
pycparser 3.0 python pycparser 3.0 python
pyjwt 2.10.1 python pyjwt 2.11.0 python
pynamecheap 0.0.3 python pynamecheap 0.0.3 python
pyopenssl 25.3.0 python pyopenssl 25.3.0 python
pyotp 2.9.0 python pyotp 2.9.0 python
@@ -345,7 +345,7 @@ requests-mock 1.12.1 python
rsa 4.9.1 python rsa 4.9.1 python
s3transfer 0.16.0 python s3transfer 0.16.0 python
scanelf 1.3.8-r1 apk scanelf 1.3.8-r1 apk
setuptools 80.10.2 python setuptools 81.0.0 python
shadow 4.17.3-r0 apk shadow 4.17.3-r0 apk
six 1.17.0 python six 1.17.0 python
skalibs-libs 2.14.4.0-r0 apk skalibs-libs 2.14.4.0-r0 apk

View File

@@ -219,6 +219,7 @@ init_diagram: |
"swag:latest" <- Base Images "swag:latest" <- Base Images
# changelog # changelog
changelogs: changelogs:
- {date: "08.02.26:", desc: "[Existing users should update:](https://github.com/linuxserver/docker-swag/blob/master/README.md#updating-configs) site-confs/default.conf - Deny access to all dotfiles."}
- {date: "23.01.26:", desc: "Reorder init to fix proxy conf version checks."} - {date: "23.01.26:", desc: "Reorder init to fix proxy conf version checks."}
- {date: "21.12.25:", desc: "Add support for hetzner-cloud dns validation."} - {date: "21.12.25:", desc: "Add support for hetzner-cloud dns validation."}
- {date: "04.11.25:", desc: "Switch default Gandi credentials from API Key to Token, allow DNS propagation time for Azure DNS plugin."} - {date: "04.11.25:", desc: "Switch default Gandi credentials from API Key to Token, allow DNS propagation time for Azure DNS plugin."}

View File

@@ -1,4 +1,4 @@
## Version 2025/07/18 - Changelog: https://github.com/linuxserver/docker-swag/commits/master/root/defaults/nginx/site-confs/default.conf.sample ## Version 2026/02/08 - Changelog: https://github.com/linuxserver/docker-swag/commits/master/root/defaults/nginx/site-confs/default.conf.sample
# redirect all traffic to https # redirect all traffic to https
server { server {
@@ -13,9 +13,9 @@ server {
# main server block # main server block
server { server {
listen 443 ssl default_server; listen 443 ssl default_server;
# listen 443 quic reuseport default_server;
listen [::]:443 ssl default_server; listen [::]:443 ssl default_server;
# listen [::]:443 quic reuseport default_server; #listen 443 quic reuseport default_server;
#listen [::]:443 quic reuseport default_server;
server_name _; server_name _;
@@ -74,9 +74,17 @@ server {
include /etc/nginx/fastcgi_params; include /etc/nginx/fastcgi_params;
} }
# deny access to .htaccess/.htpasswd files # deny access to all dotfiles
location ~ /\.ht { location ~ /\. {
deny all; deny all;
log_not_found off;
access_log off;
return 404;
}
# Allow access to the ".well-known" directory
location ^~ /.well-known {
allow all;
} }
} }