Skip to content

v0.5.5

Choose a tag to compare

View all tags
@github-actions github-actions released this 21 Oct 12:10
· 44 commits to main since this release
v0.5.5
e264d47

Highlights / 亮点

Import nginx configs / 导入 nginx 配置

  • Web Services → Import nginx accepts server blocks or the full output of nginx -T; include directives are expanded the way nginx does, and every site is previewed (type, backend or directory, source file and line, warnings, missing certificates) before anything is saved. / 「Web 服务 → 导入 nginx」可粘贴 server 块或 nginx -T 的完整输出，include 会像 nginx 一样展开；保存前先预览每个站点的类型、后端或目录、来源文件与行号、注意事项与缺少的证书。
  • Converts proxy_pass with upstream weights, backups and balancing policies, root / alias directories, redirects, fixed responses, headers, gzip, allow / deny, and per-location backends, access rules and redirects. / 可转换反向代理（含 upstream 权重、备用与负载均衡策略）、静态目录、跳转、固定内容、请求头与响应头、压缩、allow / deny，以及 location 级的分路径后端、访问控制与跳转。
  • auth_request becomes forward auth (common Authelia setups convert directly, including per-location auth); auth_basic becomes basic auth with shared users, so no imported site is left open. / auth_request 转换为转发认证，Authelia 的常见写法（含只对部分路径认证）可直接转换；auth_basic 转换为使用共享用户的基本认证，导入后不会出现没有保护的站点。
  • Sites join an existing listener on the same port or a new one, existing domains are skipped, and imports are disabled by default so they can run alongside nginx. Validated against a production config with 77 sites. / 相同端口合并到已有监听，已存在的域名跳过，默认以停用状态导入，便于与 nginx 并行核对。已用 77 个站点的生产配置验证。

Certificate auto deploy / 证书自动部署

  • After issuance, renewal or update, a certificate can be uploaded to an SSH host through an existing Web Terminal connection and a command run there (for example systemctl reload nginx, with $certName, $certDir, $certFile, $keyFile), or local Docker containers can be restarted. / 证书签发、续期或更新后，可经 Web 终端中的 SSH 连接上传到远程主机并执行命令（如 systemctl reload nginx，可用 $certName、$certDir、$certFile、$keyFile），或重启本机 Docker 容器。
  • Unknown hosts are never trusted; files are replaced atomically with a 0600 private key; failures retry hourly and raise the new “Certificate: deployment failed” event; Deploy now runs all targets at once. / 不信任未知主机；文件原子替换，私钥权限 0600；失败每小时重试并发出新的「证书：部署失败」通知；「立即部署」可马上执行。

WAF: large uploads and WebDAV / WAF：大文件上传与 WebDAV

  • Adjustable request body inspection limit (up to 1024 MB): reject larger bodies or inspect only the first part; skip body inspection on chosen paths. / 请求体检查上限可调（最大 1024 MB），超限时拒绝或只检查前面部分；可按路径跳过请求体检查。
  • New “WebDAV and upload compatible” switch allows WebDAV methods, the Lock-Token, If and Content-Range headers and any upload content type, so cloud drives and WebDAV work behind the WAF while attacks are still blocked. / 新增「兼容 WebDAV 与上传」开关，放行 WebDAV 方法、Lock-Token、If、Content-Range 请求头与任意上传内容类型，网盘与 WebDAV 挂上 WAF 也能正常使用，攻击照常拦截。
  • Every instance now allows Expect: 100-continue, which curl and rclone send with large uploads and OWASP CRS 4 used to block. / 所有实例放行 curl、rclone 上传大文件时带的 Expect: 100-continue，之前会被 OWASP CRS 4 拦截。

Subscribed IP lists / 订阅 IP 列表

  • Subscribe to IP lists by URL (for example province lists from metowolf/iplist) under Web Services → Global Settings; they refresh on a schedule, are cached locally, and can be referenced by site and path-rule allowlists and blocklists. / 在「Web 服务 → 全局设置」按地址订阅 IP 列表（如 metowolf/iplist 的省市 IP 段），定时刷新并缓存在本地，站点与路径规则的黑白名单可以引用。(#4)

Self-check / 网络自检

  • Reports HTTPS sites whose domains have no matching certificate, and frp proxy name, domain and remote port conflicts (typical when several devices share one frpc config). / 新增两项：HTTPS 站点缺少匹配证书的域名；frp 代理名、域名或远程端口冲突（常见于多台设备复制了同一份 frpc 配置）。

Other / 其他

  • Online upgrade understands four-part versions such as v0.5.4.1, and says so when versions cannot be compared instead of claiming the installation is up to date. / 在线升级支持 v0.5.4.1 这样的四段版本号；版本号无法比较时明确提示，不再显示“已是最新”。

Upgrading / 升级

  • From v0.5.4, Linux binary installs can upgrade from About → Check for Updates. Docker: pull the new image and recreate the container; fnOS: install the new .fpk; OpenWrt: install the new .ipk / .apk. / 从 v0.5.4 起，Linux 二进制部署可在「关于 → 检查更新」直接升级；Docker 拉取新镜像后重建容器；飞牛安装新版 .fpk；OpenWrt 安装新版 .ipk / .apk。
  • Cloud drive or WebDAV sites already behind a WAF: turn on “WebDAV and upload compatible” in that WAF instance after upgrading. / 已挂 WAF 的网盘、WebDAV 站点，升级后在对应 WAF 实例中开启「兼容 WebDAV 与上传」。

Release notes: https://gately.cn/en/news/v0.5.5 · 更新说明：https://gately.cn/news/v0.5.5

Assets 29
Loading