Will Norris
e307e617d6
bump go version in Dockerfile and tests for go1.16
2021-02-18 08:50:53 -08:00
Will Norris
c34c3dd593
readme: add statement about supported go versions
2021-02-11 15:01:55 -08:00
Will Norris
87f0c62a3e
actions: bump to actions/cache@v2
2021-02-11 14:45:05 -08:00
Will Norris
bb65766878
actions: only update test coverage on recent go version
2021-02-11 14:45:05 -08:00
Will Norris
f41a60b471
actions: update which go versions we test with
...
bump to 1.x and 1.14.x, the two most recent major go versions. Also add
go1.11 on linux, which should still work, but is not actually supported.
2021-02-11 14:45:05 -08:00
Will Norris
e72ae6fde5
go get -u ./...
2021-02-11 08:50:07 -08:00
Will Norris
3999c5bd80
run goimports
2021-01-24 13:44:39 -08:00
Alexandre Testu
5bb32547c9
updated heroku instructons / added eb instructions
2021-01-24 12:32:17 -08:00
Yassine ABOUKIR
2203979b9c
Add X-XSS-Protection HTTP response header to block potential XSS
2021-01-24 12:18:42 -08:00
Will Norris
dd798db002
dependabot: move to weekly updates
2021-01-20 11:43:59 -08:00
dependabot[bot]
2d534353f5
Bump github.com/prometheus/client_golang from 1.7.1 to 1.9.0
...
Bumps [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang ) from 1.7.1 to 1.9.0.
- [Release notes](https://github.com/prometheus/client_golang/releases )
- [Changelog](https://github.com/prometheus/client_golang/blob/master/CHANGELOG.md )
- [Commits](https://github.com/prometheus/client_golang/compare/v1.7.1...v1.9.0 )
Signed-off-by: dependabot[bot] <support@github.com>
2021-01-13 16:49:01 -08:00
dependabot[bot]
c2e0ac1208
Bump github.com/aws/aws-sdk-go from 1.34.20 to 1.36.26
...
Bumps [github.com/aws/aws-sdk-go](https://github.com/aws/aws-sdk-go ) from 1.34.20 to 1.36.26.
- [Release notes](https://github.com/aws/aws-sdk-go/releases )
- [Changelog](https://github.com/aws/aws-sdk-go/blob/master/CHANGELOG.md )
- [Commits](https://github.com/aws/aws-sdk-go/compare/v1.34.20...v1.36.26 )
Signed-off-by: dependabot[bot] <support@github.com>
2021-01-13 16:31:23 -08:00
dependabot[bot]
2afbc71f37
Bump cloud.google.com/go/storage from 1.11.0 to 1.12.0
...
Bumps [cloud.google.com/go/storage](https://github.com/googleapis/google-cloud-go ) from 1.11.0 to 1.12.0.
- [Release notes](https://github.com/googleapis/google-cloud-go/releases )
- [Changelog](https://github.com/googleapis/google-cloud-go/blob/master/CHANGES.md )
- [Commits](https://github.com/googleapis/google-cloud-go/compare/spanner/v1.11.0...spanner/v1.12.0 )
Signed-off-by: dependabot[bot] <support@github.com>
2021-01-13 13:12:07 -08:00
dependabot-preview[bot]
7c98d50e98
Create Dependabot config file
2021-01-13 10:37:49 -08:00
Will Norris
31e8faa098
codecov token not required for public repos
2021-01-13 09:10:47 -08:00
Blake Stoddard
c08b3c505a
Disable browser MIME confusion attacks via content-type sniffing
2020-10-16 07:11:59 -07:00
Blake Stoddard
c6206ea30c
Set a strict Content-Security-Policy
2020-10-16 07:11:59 -07:00
Will Norris
66c549e07b
Setup GitHub Action for code scanning ( #247 )
2020-09-16 12:39:41 -07:00
Blake Stoddard
fd43ff2198
Support proxying images with no provided intermediate cert ( #241 )
...
Replace http.DefaultTransport with aia-transport-go to properly handle missing intermediate certs
2020-09-10 01:52:43 -07:00
Blake Stoddard
52f4360543
Add option to disable following redirects ( #237 )
...
When redirects are followed, ensure that they are still allowed per AllowHosts/DenyHosts
2020-09-10 01:40:59 -07:00
Will Norris
32a8bea35f
switch to supported version of redigo package
...
fixes #244
2020-09-10 00:53:51 -07:00
Will Norris
6126c92bb5
cleanup unused module entries
2020-09-10 00:53:01 -07:00
Will Norris
067500cd7d
add more golangci-lint checks
2020-09-10 00:30:25 -07:00
Will Norris
80c7cb29a6
remove unecessary gitignore
2020-09-09 23:41:53 -07:00
Will Norris
84ae42bcde
golangci: enable additional checks
2020-09-09 23:28:59 -07:00
Will Norris
7e21abe7d1
remove ineffective break statement
2020-09-09 22:44:48 -07:00
Will Norris
9f2d0f0dbc
add github action for golangci
2020-09-09 22:44:48 -07:00
Will Norris
d6e0ad0f93
update go dependencies
2020-09-09 15:47:38 -07:00
Will Norris
0008657b77
dockerfile: change deprecated maintainer syntax
2020-09-09 15:44:09 -07:00
Will Norris
fc79b851b2
fix go lint warnings
...
- handle errors where possible
- explicitly ignore errors where it makes sense to
- fix deprecations and unused var
2020-09-09 15:44:09 -07:00
Will Norris
5600290c82
simplify shields.io URL
2020-06-23 23:52:41 +00:00
Will Norris
bfb3289bd5
update default branch to master
...
- fix URL for CI badge in README
- add actions workflow to push 'main' branch to 'latest' docker image
2020-06-21 17:50:32 +00:00
Blake Stoddard
0da684b81e
Switch to Hostname() for checking whether a host is allowed or not ( #238 )
...
Using .Host allows you to get around an allowHosts or denyHosts entry by adding a port
2020-06-20 21:44:01 -07:00
Blake Stoddard
f91e9cb508
Allow allowing/blocks hosts by IP range ( #236 )
2020-06-19 17:30:49 -07:00
Thom Wright
3c7d08f311
Fix dockerhub link
...
The current link goes to a blank page for me.
2020-05-05 07:51:15 -07:00
Will Norris
7de7100f6c
actions: set timeout for uploading to codecov
...
codecov is sometimes slow to respond, and it's not worth holding up the
test suite for.
2020-04-04 06:24:34 +00:00
Will Norris
8d8c59a928
bump go version
...
- build docker image with go1.14
- test with go1.14 and go1.13
- also run `go mod tidy` to pick up a missed go.sum record
2020-04-04 06:21:35 +00:00
Will Norris
65aeb787ac
actions: publish docker images on new git tags
2020-04-04 05:44:31 +00:00
Will Norris
72ba50b8ce
docs: update changelog in preparation for v0.10.0
2020-04-03 04:23:45 +00:00
Will Norris
3589510f2c
use gorilla/mux for routing requests
...
Thanks to @Fieldistor for the reminder that gorilla/mux allows you to
disable cleaning request URLs, which was causing problems with signature
verification for some URLs.
Fixes #215
Fixes #212
2020-04-02 22:29:10 +00:00
John Bolliger
00652fd9cb
Added signed options example into the documentation.
2020-02-24 08:31:06 -08:00
Will Norris
7f91379373
rename prometheus metrics and vars
...
Make names a little more consistent and align with naming docs at
https://prometheus.io/docs/practices/naming/
2020-02-24 08:27:30 -08:00
Will Norris
4e97a7ea8f
make 'cached' a bool
2020-02-24 08:27:30 -08:00
Ben Haan
8484518c93
add basic prometheus support
...
Fixes #121
2020-02-24 08:27:30 -08:00
Will Norris
2eb6dfcd05
remove my personal config from example systemd file
2020-02-24 00:20:43 +00:00
Will Norris
8c28dca762
include referer header in remote requests
...
this is an optional feature which is disabled by default, since it is
only needed in a few select cases and risks accidentally exposing
internal URLs.
Fixes #216
2020-02-21 08:24:23 +00:00
Will Norris
edd9dbac2d
allow space-separated list of signature keys
...
This is necessary when specifying options as environment variables.
Also add documentation for using multiple signature keys.
2020-02-02 18:45:39 +00:00
Will Norris
dec2089f0b
docker: use latest go1.13.x
2020-02-02 18:27:02 +00:00
Will Norris
403735c8e2
no need to export signatureKeyList type
2020-02-02 01:28:18 +00:00
Mauro Ciancio
ef09c1ba31
add support for multiple signature keys ( #209 )
2020-02-01 17:03:59 -08:00