Requests rejected by Basic authentication currently return 401 without WWW-Authenticate, preventing HTTP clients from prompting for credentials. Advertise the Basic scheme on the server and metrics auth paths while leaving proxy authentication unchanged.
* handlers.go: Added parameter for TLS min version
rest-server/main.go: Added parameter handling for TLS min version
rest-server/main.go: Added crypto.tls, implemented and configured tlsConfig object
* tls min version parameter documentation
* Added changelog documentation
* README.md: Fixed typo
main.go: Added error for unknown TLS min versions
main.go: Changed CurvePreferences in TLS config to Go default
main.go: Removed handling for TLS min versions 1.0 and 1.1
Signed-off-by: darkspir <forgejo.darkspir@teemitmil.ch>
* main.go: Improved TLSMinVer parameter documentation
* README.md: Improved --tls-min-ver parameter documentation
* main.go: Changed --tls-min-ver parameter documentation again
* main.go: Added allowed versions in Error Unsupported TLS min version
* update rest-server help output in readme
---------
Signed-off-by: darkspir <forgejo.darkspir@teemitmil.ch>
Co-authored-by: Michael Eischer <michael.eischer@fau.de>
* Add group-accessible-repos option
The group-accessible-repos option will let filesystem group id
be able to access files and dir within the restic repo
Default stick with old behaviour to be owner restricted
While here make dirMode and fileMode within Options struct
private
---------
Co-authored-by: Michael Eischer <michael.eischer@fau.de>
This is useful when the server is started with an ephemeral port, e.g.:
./rest-server --no-auth --listen "127.0.0.1:0"
...
start server on 127.0.0.1:46015
The --log option accepts "-" as filename. This prevents rest-server from
opening the log file, it simply writes to the STDOUT stream provided by
the caller.
**BREAKING** in case use really used "-" to specify a file named "-"
you'll need to update your rest-server invocation to use "./-".