618 Commits

Author SHA1 Message Date
BillyOutlast
2f047ab27e Metadata for ThePornDB scenes is now saved 2025-08-31 22:10:43 -04:00
HDVinnie
4524d2fa87 update: bump unit3d config 2025-08-31 11:27:35 -04:00
HDVinnie
d06c82b31a update: composer dependencies 2025-07-19 19:47:09 -04:00
HDVinnie
43915d1ca3 update: composer dependencies
- https://github.com/advisories/GHSA-29cq-5w36-x7w3
2025-07-19 18:19:44 -04:00
HDVinnie
8b950dd459 update: bump unit3d config 2025-07-18 16:37:38 -04:00
Roardom
dad90c6c7b update: use only orderable meilisearch filters when necessary
Should improve indexing performance.

Depends on upstream meilisearch change scheduled for v1.14: https://www.github.com/meilisearch/meilisearch/issues/5163
2025-07-12 16:05:20 +00:00
HDVinnie
f2387c7a91 update: bump unit3d config 2025-07-05 14:48:33 -04:00
HDVinnie
ea36520af1 Merge pull request #4800 from Roardom/enum-strings 2025-06-29 13:32:57 -04:00
HDVinnie
3f5b275df4 Merge pull request #4801 from Roardom/two-factor-timeline
(Update) Require 24 hours after enabling 2fa before inviting
2025-06-26 11:46:16 -04:00
Roardom
da7a606d3a update: require 24 (configurable) hours after enabling 2fa before inviting
Previous (less secure) behavior can be restored by setting the config value to 0.
2025-06-23 06:33:03 +00:00
HDVinnie
c3cb6e6797 Merge pull request #4778 from Roardom/rss-auth-guard 2025-06-22 20:48:26 -04:00
Roardom
46bfccc8b7 refactor: use enums for auth guards, middleware groups, and rate limits 2025-06-22 20:00:02 +00:00
HDVinnie
ca504efaa1 refactor: create zips in-memory instead of on filesystem
Co-Authored-By: Roardom <78790963+Roardom@users.noreply.github.com>
2025-06-19 12:18:54 -04:00
HDVinnie
0a3e4a73db Merge pull request #4776 from EkoNesLeg/development-he 2025-06-17 09:44:23 -04:00
Roardom
21b89e5f26 refactor: use rss rsskey auth guard 2025-06-17 07:59:44 +00:00
HDVinnie
99800ce14e Revert "Merge pull request #4774 from Roardom/laravel11-app-structure-3"
This reverts commit d38964cbd7, reversing
changes made to 5c00b12e7c.
2025-06-16 22:41:15 -04:00
arch
1a25069460 add: Hebrew to language conf 2025-06-16 14:04:58 +00:00
Roardom
12b9a30b0c refactor: migrate to laravel 11 app structure 2025-06-13 22:31:20 +00:00
Roardom
436c8d96c9 refactor: rename password_resets table to password_reset_tokens
To match upstream Laravel and its documentation.
2025-06-13 15:59:32 +00:00
Roardom
ccc8955510 refactor: use laravel 10's new default service provider method in config 2025-06-11 06:41:36 +00:00
HDVinnie
7a11466f98 bump: unit3d config 2025-06-09 11:02:37 -04:00
HDVinnie
7f61227b2f Revert "Merge pull request #4687 from Roardom/strict-cookies"
This reverts commit d21fa46e27, reversing
changes made to fc02842062.
2025-06-05 20:20:00 -04:00
HDVinnie
fe633f580c bump: unit3d config 2025-05-30 09:36:45 -04:00
Roardom
777cab49fa fix: don't hardcode websockets port in csp config
Allows using websocket on other ports specified in the VITE_ECHO_ADDRESS env variable.
2025-05-27 20:44:39 +00:00
HDVinnie
9f58065d30 add: laravel 12 support 2025-05-26 21:08:06 -04:00
HDVinnie
9b7f116251 bump: unit3d config 2025-05-15 00:24:14 -04:00
HDVinnie
e19d40db9e Merge pull request #4693 from Roardom/sync-branches
(Chore) Sync master branch to development branch
2025-05-06 01:18:39 -04:00
Roardom
db55353fd5 update: bump unit3d config 2025-05-06 03:35:21 +00:00
HDVinnie
8f8f019bcb Merge pull request #4688 from Roardom/allow-data-images 2025-05-04 22:03:19 -04:00
Roardom
db3fc55606 fix: allow data: image links via csp
We use inline svg data links in a few places like quick search people fallback image when there's no still available from tmdb, as well as the icon for select dropdown. Some user scripts also use it. `data:` links for specifically images are relatively harmless security-wise, so let's allow them, but still keep them blocked at the bbcode level.
2025-05-04 21:22:20 +00:00
Roardom
631e674a67 update: use strict cookies by default
Tested and no breakage. This probably should have been done ages ago.
2025-05-04 21:04:22 +00:00
HDVinnie
ad1b66edcc update: bump unit3d config 2025-04-13 18:57:08 -04:00
HDVinnie
dd4a6e82ca update: bump unit3d config 2025-04-04 07:51:40 -04:00
HDVinnie
9c97d39eaf fix: secure-headers config csp schemes 2025-04-04 07:04:00 -04:00
HDVinnie
2a5c8239b7 Merge pull request #4615 from HDInnovations/filesystem
(Fix) Filesystem storage not throwing exception
2025-04-02 17:51:19 -04:00
HDVinnie
00284fd57b update: bump unit3d config 2025-04-02 17:44:30 -04:00
HDVinnie
d5ed6a1be9 fix: filesystem storage not throwing exception 2025-04-02 17:42:41 -04:00
HDVinnie
922653834d fix: backup config exclude directories 2025-03-30 23:42:10 -04:00
HDVinnie
49abe46589 update: bump unit3d config 2025-03-30 23:33:34 -04:00
HDVinnie
0a60f59c11 update: bump unit3d config 2025-03-27 08:08:51 -04:00
Roardom
6a301f6eae fix: mariadb requires ANSI mode enabled 2025-03-25 01:00:28 +00:00
Roardom
ae33c74f2b refactor: prefix tmdb metadata models with tmdb
Will help for when there exists other metadata sources available (such as already done for igdb)

Step 4 in cleaner meta fetching code.
2025-03-17 20:41:01 +00:00
Roardom
32cf8da4db refactor: split tmdb into movie_id and tv_id
Step 2 in cleaner meta fetching code.
2025-03-16 22:55:24 +00:00
HDVinnie
1099dfb57a update: bump unit3d config 2025-03-12 21:35:37 -04:00
HDVinnie
a364cf3954 Merge branch '8.x.x' into stream-sd 2025-03-09 00:14:06 -05:00
Roardom
5a6259cea7 remove: sd content and stream optimized flags
SD content is represented by the resolutions table now instead of this flag. Most people prefer web-dls over stream-optimized encodes these days.
2025-03-09 03:33:32 +00:00
HDVinnie
b11cf92dc1 update: bump unit3d config 2025-03-08 18:46:31 -05:00
HDVinnie
7879b437ec Merge pull request #4497 from Roardom/public-private
(Fix) Store user-uploaded files in private directories
2025-02-25 07:42:38 -05:00
Roardom
1af1862229 fix: store user-uploaded files in private directories
Filenames were randomized for a few of these to prevent public access, but it's still much better to put user-uploaded files behind auth.
2025-02-24 16:03:01 +00:00
Roardom
dcc0aea35c update: change meilisearch proximity precision to byAttribute
This setting is more useful for full text search inside paragraphs of content and we already have it at the bottom of our ranking rules. The docs (https://www.meilisearch.com/docs/reference/api/settings#proximity-precision) mention a significant indexing performance boost when this is switched to `byAttribute` so let's take advantage of that.

Requires running `php artisan scout:sync-index-settings`.
2025-02-22 13:18:40 +00:00