Awesome Privacy

Recent Commits

• Syncthing Release Automation (23 Feb 26)

  chore(gui, man, authors): update docs, translations, and contributors

• Syncthing Release Automation (16 Feb 26)

  chore(gui, man, authors): update docs, translations, and contributors

• Marcus B Spencer (12 Feb 26)

  chore(config, connections): use same reconnection interval for QUIC and TCP (fixes #10507) (#10573) Signed-off-by: Marcus B Spencer <marcus@marcusspencer.us>

• Jakob Borg (11 Feb 26)

  chore: build with Go 1.26; use Go 1.25 features (#10570) WaitGroup.Go and built-in gomaxprocs handling. Signed-off-by: Jakob Borg <jakob@kastelo.net>

• Val Markovic (11 Feb 26)

  chore(etc): add more comprehensive systemd sandboxing (#10421) Update the existing minimal service hardening with a comprehensive sandbox to minimize blast damage from service compromise. Please see the detailed code comments for an explanation of what is sandboxed. Roughly, we limit: /dev, /proc, /tmp, AF_UNIX, AF_PACKET, execution of _any_ binary other than "/usr/bin/syncthing" and "/usr/lib", uncommon syscalls plus io_uring, tons of kernel internals and more. We also enable a bunch of kernel namespaces for isolation. In short, pretty much everything is sandboxed and specifically tuned for syncthing's behavior. Sadly, we cannot use ProtectSystem=strict by default because we don't know the directories that the user will be sharing. There's a big comment block explaining how users can enable it for "extra credit". :) If the user did add the following options as the unit file recommends: - ProtectSystem=strict - ReadWritePaths=/my/shared/dir1 /my/shared/dir2 - ProtectHome=true Then the user would end up with a *far* more comprehensive sandbox than anything a container runtime (like Docker/Podman/whatever) would provide. Much (but not all) of these options could be ported to the user/syncthing.service file, BUT it would require work. Systemd does not allow all of these options to be used with the user service manager, although using PrivateUsers=true would help with most of it. I cannot justify the time investment to develop, audit and test the port to user/syncthing.service so I leave that for interested contributors. Tested on Debian Trixie (13) with the following versions: - v1.29.5, Linux (64-bit Intel/AMD) - latest HEAD (d3d3fc2d0 committed on Mon Oct 6 01:42:58 2025) Signed-off-by: Val Markovic <val@markovic.io>

• Michael Wang 汪東陽 (11 Feb 26)

  fix(gui): remove width limit for language select items (#10531) Signed-off-by: Michael Wang <michael19920327@gmail.com>

• Tao (11 Feb 26)

  fix(gui): show restarting modal during upgrade restart (fixes #1248) (#10566) Signed-off-by: steadytao <mail@steadytao.com> Signed-off-by: Jakob Borg <jakob@kastelo.net> Co-authored-by: Jakob Borg <jakob@kastelo.net>

• Tommy van der Vorst (11 Feb 26)

  chore(db): add ability to wait for programmatically started database maintenance, query last maintenance time (#10565) Also adds a method to query the last database maintenance time. Signed-off-by: Tommy van der Vorst <tommy@pixelspark.nl> Co-authored-by: Jakob Borg <jakob@kastelo.net>

• Syncthing Release Automation (09 Feb 26)

  chore(gui, man, authors): update docs, translations, and contributors

• Epifeny (05 Feb 26)

  chore(gui): add id and name to Stay logged in checkbox for password managers (#10558) gui: Add id and name to Stay logged in checkbox for password manager support Signed-off-by: epifeny <epifeny@users.noreply.github.com> Co-authored-by: epifeny <epifeny@users.noreply.github.com>

• Jakob Borg (04 Feb 26)

  Merge branch 'infrastructure' * infrastructure: refactor: remove unused support for Azure blob stores fix(stdiscosrv): must not modify database entries in-place

• Jakob Borg (04 Feb 26)

  refactor: remove unused support for Azure blob stores Signed-off-by: Jakob Borg <jakob@kastelo.net>

• Jakob Borg (04 Feb 26)

  fix(stdiscosrv): must not modify database entries in-place Signed-off-by: Jakob Borg <jakob@kastelo.net>

• Syncthing Release Automation (02 Feb 26)

  chore(gui, man, authors): update docs, translations, and contributors

• Jakob Borg (30 Jan 26)

  build: increase allowed permissions for nightly build Signed-off-by: Jakob Borg <jakob@kastelo.net>

• Syncthing Release Automation (26 Jan 26)

  chore(gui, man, authors): update docs, translations, and contributors

• Shivam Kumar (25 Jan 26)

  fix(stdiscosrv): log full device ID on startup (#10541) Signed-off-by: maishivamhoo123 <maishivamhoo@gmail.com>

• Shivam Kumar (24 Jan 26)

  fix(stdiscosrv): use fmt.Println for version output (fixes #10523) (#10527) Signed-off-by: Shivam <maishivamhoo@gmail.com>

• Jakob Borg (24 Jan 26)

  build: add build attestation step at release (#10540) Signed-off-by: Jakob Borg <jakob@kastelo.net>

• Maxwell G (23 Jan 26)

  chore(gui): include license files for fork-awesome assets (#10539) The css and svg files have license headers, but there were no separate license files like the other vendored assets in `gui/default/vendor/*`. This issue came up while we were working on updating and modernizing the syncthing package in Fedora Linux. This commit copies the existing license headers into separate files to make things easier for license scanning and SCA tools, such as [Go Vendor Tools](https://fedora.gitlab.io/sigs/go/go-vendor-tools/). * [...]/css/LICENSE.txt is copied from the license header in gui/default/vendor/fork-awesome/css/fork-awesome.css. * [...]/fonts/LICENSE.txt is copied from the license text in the <metadata> tag of gui/default/vendor/fork-awesome/fonts/forkawesome-webfont.svg. Relates: https://src.fedoraproject.org/rpms/syncthing/pull-request/4 Signed-off-by: Maxwell G <maxwell@gtmx.me>

• Syncthing Release Automation (19 Jan 26)

  chore(gui, man, authors): update docs, translations, and contributors

• Tommy van der Vorst (14 Jan 26)

  chore(sqlite): allow periodic database maintenance to be disabled (#10441) This change allows the periodic database maintenance to be disabled, while providing a way to programmatically start maintenance at a convenient moment. Signed-off-by: Tommy van der Vorst <tommy@pixelspark.nl>

• Syncthing Release Automation (12 Jan 26)

  chore(gui, man, authors): update docs, translations, and contributors

• Syncthing Release Automation (05 Jan 26)

  chore(gui, man, authors): update docs, translations, and contributors

• Prathik P Kulkarni (29 Dec 25)

  chore(api): remove charset declaration from JSON content-type (fixes #10500) (#10508) updated content-type to application/json (fixes #10500) Signed-off-by: prathik8794 <me20b030@iittp.ac.in>

• Syncthing Release Automation (29 Dec 25)

  chore(gui, man, authors): update docs, translations, and contributors

• Jakob Borg (28 Dec 25)

  fix(db): remove incorrect comment

• bt90 (23 Dec 25)

  fix(beacon): skip point-to-point interfaces on Android (#10504)

• Jakob Borg (23 Dec 25)

  build: handle (ignore) new docker artifacts

• Jakob Borg (23 Dec 25)

  chore: tweak pull retry logic (#10491) Signed-off-by: Jakob Borg <jakob@kastelo.net>