summaryrefslogtreecommitdiff
AgeCommit message (Collapse)AuthorFiles
2023-09-11[chore]: Bump golang.org/x/crypto from 0.12.0 to 0.13.0 (#2190)Libravatar dependabot[bot]13
2023-09-11[docs] add fail2ban regex in the doc (#2189)Libravatar OniriCorpe1
2023-09-07[chore] much improved paging package (#2182)Libravatar kim15
2023-09-07[feature] Support OTLP HTTP, drop Jaeger (#2184)Libravatar Daenney199
* [feature] Add http trace exporter, drop Jaeger Jaeger supports ingesting traces using the OpenTelemetry gRPC or HTTP methods. The Jaeger project has deprecated the old jaeger transport. * Add support for submitting traces over HTTP * Drop support for the old Jaeger protocol * Upgrade the trace libraries to v1.17 Fixes: #2176 Fixes: #2179
2023-09-05[bugfix] fix checks for deref the same status descendants / ascendants (#2181)Libravatar kim1
2023-09-04[chore] Add script for downloading latest snapshot tar.gz (#2157)Libravatar tobi1
* [chore] Add script for downloading latest snapshot tar.gz * Update scripts/get_latest_snapshot.sh Co-authored-by: Daenney <daenney@users.noreply.github.com> * Update scripts/get_latest_snapshot.sh Co-authored-by: Daenney <daenney@users.noreply.github.com> * update comment --------- Co-authored-by: Daenney <daenney@users.noreply.github.com>
2023-09-04[feature] Don't trace non-existing routes (#2172)Libravatar Daenney1
c.FullPath() is the empty string if a request doesn't match any route on our mux. In those cases, there's no value in emitting a trace. The trace will be empty, containing no other information beyond the fact that we didn't match a route. Since Gin breaks off the processing early we don't need to trace this request as it won't do anything and consumes no further resources. The 404 will still be emitted by our logs and will be visible from a reverse proxy too.
2023-09-04[feature] Store admin actions in the db, prevent conflicting actions (#2167)Libravatar tobi23
2023-09-04[chore]: Bump golang.org/x/image from 0.11.0 to 0.12.0 (#2178)Libravatar dependabot[bot]3
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-09-04[chore]: Bump github.com/minio/minio-go/v7 from 7.0.62 to 7.0.63 (#2180)Libravatar dependabot[bot]8
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-09-04[chore]: Bump golang.org/x/text from 0.12.0 to 0.13.0 (#2177)Libravatar dependabot[bot]4
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-09-01[bugfix] move SQLite pragmas into connection string (#2171)Libravatar kim1
* move SQLite pragmas into connection string Signed-off-by: kim <grufwub@gmail.com> * use url.Values type for SQLite connection preferences Signed-off-by: kim <grufwub@gmail.com> * set SQLite URI prefs properly using _pragma query key Signed-off-by: kim <grufwub@gmail.com> * add notes on SQLite connection preferences Signed-off-by: kim <grufwub@gmail.com> * fix typo Signed-off-by: kim <grufwub@gmail.com> * add one extra line regarding connection pooling Signed-off-by: kim <grufwub@gmail.com> --------- Signed-off-by: kim <grufwub@gmail.com>
2023-08-31[bugfix] wrap bun.Tx to add our own error processing (#2169)Libravatar kim7
* wrap bun.Tx to add our own error processing Signed-off-by: kim <grufwub@gmail.com> * add compile-time check for updateRowError() compatibility with sql.Row, fix wrapTx() not being used properly Signed-off-by: kim <grufwub@gmail.com> --------- Signed-off-by: kim <grufwub@gmail.com>
2023-08-28[chore]: Bump github.com/google/uuid from 1.3.0 to 1.3.1 (#2166)Libravatar dependabot[bot]9
2023-08-28[chore]: Bump github.com/KimMachineGun/automemlimit from 0.2.6 to 0.3.0 (#2165)Libravatar dependabot[bot]7
2023-08-24[chore/frontend] Make line-height a wee little bit bigger (#2159)Libravatar tobi1
2023-08-23[docs] Update backup docs (#2153)Libravatar Daenney2
2023-08-23[bugfix/frontend] Normalize header sizes (#2152)Libravatar tobi1
* [bugfix/frontend] Normalize header sizes * ensmallen heading a little
2023-08-23[feature] list commands for both attachment and emojis (#2121)Libravatar rdelaage7
* [feature] list commands for both attachment and emojis * use fewer commands, provide `local-only` and `remote-only` as filters * envparsing --------- Co-authored-by: Romain de Laage <romain.delaage@rdelaage.ovh> Co-authored-by: tsmethurst <tobi.smethurst@protonmail.com>
2023-08-23[feature] Add rate limit exceptions option, use ISO8601 for rate limit reset ↵Libravatar tobi12
(#2151) * start updating rate limiting, add exceptions * tests, comments, tidying up * add rate limiting exceptions to example config * envparsing * nolint * apply kimbediff * add examples
2023-08-22[performance] Rework home timeline query to use cache more (#2148)Libravatar tobi2
2023-08-21[feature] Make log format configurable (#2130)Libravatar Daenney12
* [feature] Don't emit timestamp in log lines When running gotosocial with a service manager like systemd, or a container runtime, the associated log driver usually emits timestamps itself. In those cases, having the extra timestamp from our own log lines ends up being a bit noisy and when centrally ingesting logs is duplicate information. This introduces a configuration flag that allows disabling emitting the timestamp. It's only wired up for "daemonised" processes, meaning server and testrig. * [chore] Add docs for log-timestamp * [feature] Simplify timestamp handling Co-Authored-By: kim <89579420+NyaaaWhatsUpDoc@users.noreply.github.com> * [chore] Less escaped double-quotes * [chore] Fix help string --------- Co-authored-by: kim <89579420+NyaaaWhatsUpDoc@users.noreply.github.com>
2023-08-21[performance] Tweak media attachment cleanup; replace stale index (#2143)Libravatar tobi5
2023-08-21[chore]: Bump codeberg.org/gruf/go-kv from 1.6.3 to 1.6.4 (#2142)Libravatar dependabot[bot]5
2023-08-21[chore]: Bump github.com/minio/minio-go/v7 from 7.0.61 to 7.0.62 (#2141)Libravatar dependabot[bot]5
2023-08-21[chore]: Bump github.com/yuin/goldmark from 1.5.5 to 1.5.6 (#2140)Libravatar dependabot[bot]37
2023-08-20[feature/bugfix] Probe S3 storage for CSP uri, add config flag for extra ↵Libravatar tobi13
URIs (#2134) * [feature/bugfix] Probe S3 storage for CSP uri, add config flag for extra URIs * env parsing tests, my coy mistress
2023-08-19[feature] Instance rules (#2125)Libravatar f0x5249
* init instance rules database model, admin api * expose instance rules in public instance api * public /api/v1/instance/rules route * GET ruleById * createRule route * createRule auth check * updateRule * deleteRule * list rules on about page * ruleGet auth * add about page ids for anchors * process and store adding violated rules to reports * admin api models for instance rules * instance rule edit frontend * change rule inputs to textareas * database fixes after rebase (#2124) * remove unused imports * fix db migration column name * fix tests * fix more tests * fix postgres error with wrongly used Ident * add some tests, fiddle with rule model a bit, fix postgres migration * swagger docs --------- Co-authored-by: tsmethurst <tobi.smethurst@protonmail.com>
2023-08-17[bugfix] fix double firing bun.DB query hooks (#2124)Libravatar kim44
* improve bun.DB wrapping readability + comments, fix double-firing query hooks * fix incorrect code comment placement * fix linter issues * Update internal/db/basic.go * do as the linter commmands ... --------- Signed-off-by: kim <grufwub@gmail.com> Co-authored-by: Daenney <daenney@users.noreply.github.com>
2023-08-16[chore]: Bump github.com/jackc/pgx/v5 from 5.4.2 to 5.4.3 (#2112)Libravatar dependabot[bot]15
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-08-16[chore]: Bump github.com/abema/go-mp4 from 0.12.0 to 0.13.0 (#2113)Libravatar dependabot[bot]4
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-08-16[chore]: Bump modernc.org/sqlite from 1.24.0 to 1.25.0 (#2114)Libravatar dependabot[bot]122
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-08-15[feature] Add snapshot binary builds + uploads (#2119)Libravatar tobi4
* [feature] Add snapshot binary builds + uploads * Update docs to include info on snapshot builds * review comments * little tweaks
2023-08-15[chore] ensure worker contexts have request ID (#2120)Libravatar kim4
2023-08-14[bugfix] fix inconsistent calculated cache sizes (#2115)v0.11.0Libravatar kim5
* use calculated exampleTime instead of `time.Now()` to ensure no locale data, retweak cache ratios * update envparsing test * update default cache memory to 100MiB * fix envparsing with latest cache target default --------- Signed-off-by: kim <grufwub@gmail.com>
2023-08-14[fix] Update CSP header for blob images (upload preview) and dev livereload ↵v0.11.0-rc3Libravatar f0x522
(#2109) * update CSP header for blob images (upload preview) and dev livereload websocket * update csp for s3, update csp tests
2023-08-13[bugfix] bump go-kv version with logfmt quote fix (#2108)Libravatar kim8
2023-08-12[bugfix] CSP policy fixes for S3/object storage (#2104)Libravatar Daenney2
* [bugfix] CSP policy fixes for S3 in non-proxied mode * It should be img-src * In both img-src and media-src we still need to include 'self'
2023-08-11[bugfix] Add s3 endpoint as image-src and media-src for CSP (#2103)v0.11.0-rc2Libravatar tobi2
* [bugfix] Add s3 endpoint as image-src and media-src for CSP * use https if secure * reorder comment
2023-08-11[bugfix] Suppress 'errNoEntries' warnings from InboxForwarding function call ↵v0.11.0-rc1Libravatar tobi1
(#2102)
2023-08-11[bugfix] Fix using wrong key for clientID during oauth callback (#2101)Libravatar tobi1
2023-08-11[bugfix] Use custom bluemonday policy to disallow inline img tags (#2100)Libravatar tobi17
2023-08-11[feature] Set Content-Security-Policy header (#2095)Libravatar Daenney2
This adds the CSP header with a policy of only loading from the same domain. We don't make use of external media, CSS, JS, fonts, so we don't ever need external data loaded in our context. When building a DEBUG build, the policy gets extended to include localhost:*, i.e localhost on any port. This keeps the live-reloading flow for JS development working. localhost and 127.0.0.1 are considered to be the same so mixing and matching those doesn't result in a CSP violation.
2023-08-11[bugfix] Populate followReq before accessing targetaccount pointer (#2099)Libravatar tobi1
2023-08-10[bugfix] Use length in runes when trimming for RSS (#2094)Libravatar tobi2
2023-08-10[chore] Add test to ensure `show_reblogs` on follow works as expected (#2093)Libravatar tobi1
2023-08-10[performance] remove last of relational queries to instead rely on caches ↵Libravatar kim19
(#2091)
2023-08-09[feature] List replies policy, refactor async workers (#2087)Libravatar tobi49
* Add/update some DB functions. * move async workers into subprocessor * rename FromFederator -> FromFediAPI * update home timeline check to include check for current status first before moving to parent status * change streamMap to pointer to mollify linter * update followtoas func signature * fix merge * remove errant debug log * don't use separate errs.Combine() check to wrap errs * wrap parts of workers functionality in sub-structs * populate report using new db funcs * embed federator (tiny bit tidier) * flesh out error msg, add continue(!) * fix other error messages to be more specific * better, nicer * give parseURI util function a bit more util * missing headers * use pointers for subprocessors
2023-08-09[bugfix] Fix incorrect per-loop variable capture (#2092)Libravatar Daenney2
These should be per iteration, not per loop. This was caught by running a build with the loopvar experiment: go build -gcflags=-d=loopvar=2.
2023-08-09update coc (#2090)Libravatar kim2
* update coc * improve wording * point to coc doc in contributing doc * swap-out ancap for capitalist * fix git relative path * ACTUALLY fix the relative link * fix spelling of abhorrent