sa6anw/hedgedoc-hedgeagent
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
4,472 Commits 1 Branch 0 Tags
hedgeagent/1.10.5
Commit Graph

146 Commits

Author SHA1 Message Date
Erik Michelson
7185a44448 docs: update for release 1.10.5 
Signed-off-by: Erik Michelson <github@erik.michelson.eu>
 2025-12-06 17:45:55 +01:00
Philip Molares
f51e402a48 docs: update release-checklist 
The 1.10.4 release taught us a few new things. They are documented
now.

Signed-off-by: Philip Molares <philip.molares@udo.edu>
 2025-12-05 23:45:35 +01:00
Erik Michelson
0a5f4ccefd docs: update for release 1.10.4 
Co-authored-by: Philip Molares <philip.molares@udo.edu>
Signed-off-by: Philip Molares <philip.molares@udo.edu>
Signed-off-by: Erik Michelson <github@erik.michelson.eu>
 2025-12-05 23:36:12 +01:00
Erik Michelson
35f36fccba fix(auth): add state parameters and PKCE support 
Only the OAuth2 auth strategy was using the state parameter,
which should be used as described in the RFC. The other
auth strategies such as GitHub, GitLab or Google were lacking
the state parameter.
This change adds the required state parameter as well as
enabling PKCE support on providers where it's possible.

Signed-off-by: Erik Michelson <github@erik.michelson.eu>
 2025-12-05 22:06:30 +01:00
Philip Molares
bc2075ae9d refactor: use user-token for historyDelete too 
Previously, the user token was only used for the endpoint
to delete the user itself. This commit adds that token to
the history deletion as well.

Signed-off-by: Philip Molares <philip.molares@udo.edu>
 2025-11-26 19:28:53 +01:00
Thary
c449d3a815 docs(setup): add SelfPrivacy.org as a new community installation method (#6155) 2025-11-21 23:45:08 +01:00
Erik Michelson
6d970dbafd feat(config): allow restriction and disabling of uploads 
Previously, image uploads were always allowed, unless `CMD_ALLOW_ANONYMOUS=false` and `CMD_ALLOW_ANONYMOUS_EDITS=false`.
This PR adds a new config option `CMD_ENABLE_UPLOADS` to configure image uploads independently. There are three different modes: `all` (everyone can upload, guests too), `registered` (only registered and logged-in users can upload images), and `none` to completely disable image uploads.
The default value is non-breaking as it is `all`, unless the config `CMD_ALLOW_ANONYMOUS=false` and `CMD_ALLOW_ANONYMOUS_EDITS=false` is set, in which case the value is `registered`.
The UI will reflect the setting and either show or hide the upload button.

Signed-off-by: Erik Michelson <github@erik.michelson.eu>
 2025-11-15 22:54:57 +01:00
Andreas Boesen
78cac1526f docs: improve nginx config docs (#6138, #6149) 
Signed-off-by: Andreas Boesen <boesen@belwue.de>
 2025-11-12 08:25:21 +00:00
Andreas Boesen
b9ee0b4baa docs: update systemd example (#6147, #6148) 
Signed-off-by: Andreas Boesen <boesen@belwue.de>
 2025-11-12 09:07:04 +01:00
Achilleas Pipinellis
fd879d43f2 docs: add SQLite example in CMD_DB_URL config (#6119) 
Signed-off-by: Achilleas Pipinellis <axilleas@users.noreply.github.com>
 2025-09-08 10:25:01 +02:00
Lars Kiesow
eba0fc51f0 docs: fix Keycloak Integration Documentation (#6107) 2025-08-14 12:44:44 +00:00
Zachery Faria
8c4b60a13c docs: Cloudflare warning in Reverse Proxy guide (#6105) 2025-08-13 13:53:07 +00:00
Erik Michelson
f31e591c17 chore(release): bump version to 1.10.3 and add release notes 
Signed-off-by: Erik Michelson <github@erik.michelson.eu>
 2025-04-10 00:21:55 +02:00
Erik Michelson
cc74351846 feat(saml): add config options to set required signings 
Signed-off-by: Erik Michelson <github@erik.michelson.eu>
 2025-04-09 21:49:00 +02:00
Philip Molares
fd4c341924 docs: add release_checklist.md 
We should include the release checklist in the docs

Signed-off-by: Philip Molares <philip.molares@udo.edu>
 2025-02-14 23:01:15 +01:00
Philip Molares
38f25ec8cc chore: bump version to 1.10.2 
Signed-off-by: Philip Molares <philip.molares@udo.edu>
 2025-02-14 22:14:11 +01:00
Erik Michelson
fb6218ed82 fix(saml): change SAML attribute default, verify that a NameID is defined 
Signed-off-by: Erik Michelson <github@erik.michelson.eu>
Signed-off-by: Philip Molares <philip.molares@udo.edu>
 2025-02-14 21:09:03 +01:00
Erik Michelson
38578f2b4c docs(setup): list of supported docker architectures 
Signed-off-by: Erik Michelson <github@erik.michelson.eu>
 2025-02-04 13:38:23 +01:00
Philip Molares
e5be5d3f9d chore: bump version to 1.10.1 
Signed-off-by: Philip Molares <philip.molares@udo.edu>
 2025-02-02 23:12:33 +01:00
Erik Michelson
72c233b233 fix: set HSTS preload attribute to false by default 
See <https://hstspreload.org/#opt-in> for more information
why this is important.

Signed-off-by: Erik Michelson <github@erik.michelson.eu>
 2025-02-01 22:56:38 +01:00
Erik Michelson
876ebad1f3 feat: rate-limiting 
Signed-off-by: Erik Michelson <github@erik.michelson.eu>
 2025-02-01 21:12:08 +01:00
David Mehren
97972f77ec Bump version to 1.10.0 
Signed-off-by: David Mehren <git@herrmehren.de>
 2024-09-01 16:38:46 +02:00
Frank
ef91652515 docs: add google cloud storage bucket guide (#5557) 2024-08-28 21:41:26 +02:00
Erik Michelson
858d7bf5d1 feat: option to disable note creation 
The abuse of the demo instance required us to disallow note creation

Signed-off-by: Erik Michelson <github@erik.michelson.eu>
Signed-off-by: Tilman Vatteroth <git@tilmanvatteroth.de>
 2024-07-21 11:03:35 +02:00
Erik Michelson
c8618fe0a3 docs(auth-guides): update azure ad/entra id guide 
Signed-off-by: Erik Michelson <github@erik.michelson.eu>
 2024-04-03 23:43:44 +02:00
Sheogorath
ddf08cfb96 chore: Drop twitter from docs 
It seems except of the documentation for auth providers, this should be
everything regarding Twitter.

Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
 2023-12-22 23:00:00 +01:00
Philip Molares
35f8718b4d docs: fix azure active directory docs 
Signed-off-by: Philip Molares <philip.molares@udo.edu>
 2023-11-20 13:25:13 +01:00
Matt Fisher
74b573e414 Add a warning about an NGINX pitfall and its symptom in HedgeDoc 
Signed-off-by: Matt Fisher <matt.fisher@nsidc.org>
 2023-10-07 18:06:07 +02:00
David Mehren
f52475dc4f Bump version to 1.9.9 
Signed-off-by: David Mehren <git@herrmehren.de>
 2023-07-30 20:07:27 +02:00
Juned Khan
ceab037a8d doc: Added yaml-metadata file in hedgedoc docs 
Signed-off-by: Juned Khan <junedkhanc101@gmail.com>
 2023-07-10 14:42:39 +02:00
Gradience Team
adec78851c Docs: Authentication - Azure Active Directory 
Signed-off-by: Pramit Singh <pramitsingh0@gmail.com>
 2023-07-08 22:53:14 +02:00
David Mehren
57c2865224 Bump version to 1.9.8 
Signed-off-by: David Mehren <git@herrmehren.de>
 2023-06-04 21:35:20 +02:00
Erik Michelson
143864b8d9 enhancement(metrics): allow disabling via config option 
Signed-off-by: Erik Michelson <github@erik.michelson.eu>
 2023-06-04 21:03:46 +02:00
David Mehren
3542a0304c Update setup docs and setup script for Yarn 3 
Signed-off-by: David Mehren <git@herrmehren.de>
 2023-06-03 12:09:40 +02:00
David Mehren
7b3b6ad7ac Update supported node versions in docs 
Signed-off-by: David Mehren <git@herrmehren.de>
 2023-05-29 11:23:21 +02:00
Tilman Vatteroth
cd83499bc0 chore: drop support for node 14 
Signed-off-by: Tilman Vatteroth <git@tilmanvatteroth.de>
 2023-05-14 21:12:48 +02:00
Jordi Mallach
9bda8f2180 Allow setting documentMaxLength via CMD_DOCUMENT_MAX_LENGTH 
Signed-off-by: Jordi Mallach <jordi@igalia.com>
 2023-03-09 10:20:42 +01:00
David Mehren
d4f19e4e38 Bump version to 1.9.7 
Signed-off-by: David Mehren <git@herrmehren.de>
 2023-02-19 21:46:50 +01:00
Stéphane Maniaci
488e5f8a0a Revert "config: Add a flag to control the /metrics and /status endpoints" 
This reverts commit d10ead4c6c.

Signed-off-by: Stéphane Maniaci <stephane.maniaci@beta.gouv.fr>
 2023-02-05 20:39:13 +01:00
Stéphane Maniaci
d10ead4c6c config: Add a flag to control the /metrics and /status endpoints 
It can be a security concern in some environments to expose system
capabilities even though they don't expose any PII. Add some
flags (defaulted `true` to maintain existing behaviour) to control
whether the /metrics and /status (and anything in the StatusRouter)
are exposed.

Signed-off-by: Stéphane Maniaci <stephane.maniaci@beta.gouv.fr>
 2023-01-31 10:26:41 +01:00
Philip Molares
5b88437aa8 docs(setup): add freebsd ports to Community -> Distribution Packages 
Signed-off-by: Philip Molares <philip.molares@udo.edu>
 2023-01-23 22:49:55 +01:00
VaiTon
0dfe793b1c docs: fix keycloak documentation 
This PR https://github.com/hedgedoc/hedgedoc/pull/2810 introduced a bug when using some OIDC providers. 

The environment variabiles in the compose files are already escaped and the quoted text get sent to the OIDC provider, that fails to parse it.



Signed-off-by: VaiTon <eyadlorenzo@gmail.com>
 2022-12-04 20:59:33 +01:00
Vojtěch Káně
e6d6650d04 docs: fixed link to history writeup on index page 
Signed-off-by: Vojtěch Káně <vojtech.kane@gmail.com>
 2022-11-18 10:32:30 +01:00
David Mehren
6bad318c35 Bump version to 1.9.6 
Signed-off-by: David Mehren <git@herrmehren.de>
 2022-11-06 23:10:59 +01:00
Sheogorath
f98a96eaa6 docs: Fix keycloak guide 
Since Keycloak version 20.0.0 it's needed to explicitly request the
openid scope. Since we define it anyway, why not request all the scopes
hedgedoc needs to function.

This patch should help to fix people's HedgeDoc deployments.

References:
https://github.com/keycloak/keycloak/pull/14237
https://shivering-isles.com/fixing-hedgedoc-profile-info-keycloak-20

Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
 2022-11-06 21:38:27 +01:00
David Mehren
50cac714ce Bump version and update release notes 
Signed-off-by: David Mehren <git@herrmehren.de>
 2022-10-30 22:15:16 +01:00
Tilman Vatteroth
98e9616af8 fix(docs): Add a note that node 18 is not supported 
Node 18 is not supported because of dependency problems. It's already covered by the package.json but not by the docs.

Signed-off-by: Tilman Vatteroth <git@tilmanvatteroth.de>
 2022-09-30 08:53:43 +02:00
Philip Molares
fc99c98a9c docs: fixed link to history writeup on index page 
Signed-off-by: Philip Molares <philip.molares@udo.edu>
 2022-08-17 19:58:29 +02:00
David Mehren
90d5f3ab04 Bump version to 1.9.4 
Signed-off-by: David Mehren <git@herrmehren.de>
 2022-07-10 22:02:17 +02:00
Erik Michelson
8c15e961b2 fix(docs): deployment url for manual setup 
Signed-off-by: Erik Michelson <github@erik.michelson.eu>
 2022-07-10 22:02:16 +02:00