Commit Graph

9540 Commits

Author SHA1 Message Date
Girish Ramakrishnan ca31dc8d78 namecheap: fix TLD
continuation of 6cdb448f62
2024-01-09 09:44:24 +01:00
Girish Ramakrishnan 5b7667fa4d external ldap: ensure dashboard login does totp check 2024-01-08 11:55:35 +01:00
Girish Ramakrishnan 6cdb448f62 namecheap: pass the TLD correctly
this is safe because namecheap does not allow external domains to be hosted.
otherwise, we would have to use tldjs
2024-01-08 11:54:37 +01:00
Girish Ramakrishnan 053f81a53e externalldap: add tests 2024-01-07 22:04:22 +01:00
Girish Ramakrishnan c842d02d6f namecheap: slow down requests for rate limit
https://www.namecheap.com/support/knowledgebase/article.aspx/9739/63/api-faq/#z
2024-01-07 22:01:42 +01:00
Girish Ramakrishnan 4ddcd547ba directoryserver: leave it to client to decide totp check
initially, the idea was to make the server enforce it. this is more secure. however,
we have 3 kinds of clients - an external cloudron dashboard which needs totp,
an external cloudron app, which doesn't have totp and external apps that don't have totp either.

given that the directory server is IP restricted, this is a reasonable compromise until
we move wholesale to oidc.

a directoryserver setting like "enforce totp" also does not work since this policy will be
applied to all clients.
2024-01-07 20:38:36 +01:00
Girish Ramakrishnan 7bb68ea6b5 rename ldap.js to ldapserver.js
this makes it clearer it is server module and not some generic ldap thing
2024-01-06 13:31:32 +01:00
Girish Ramakrishnan e13f427267 directoryserver: 2fa validation tests 2024-01-06 13:25:12 +01:00
Girish Ramakrishnan c422e2d570 users: add tests for 2fa and relaxed 2fa 2024-01-06 13:15:55 +01:00
Johannes Zellner 29663a1229 Update sftp addon 2024-01-04 11:59:56 +01:00
Girish Ramakrishnan 1ca46a064c ldap: use proper error message instead of dn
the dn is already in lde_dn field of the error object.
lde_message is the message
2024-01-03 15:23:22 +01:00
Girish Ramakrishnan e42579521c Fix tests 2024-01-03 15:12:07 +01:00
Girish Ramakrishnan 96be06188b ldap: send proper error messages 2024-01-03 15:12:07 +01:00
Johannes Zellner 10172e0211 Add login busy indicator 2024-01-03 14:55:07 +01:00
Girish Ramakrishnan 70c8a5a6be directoryserver: totp check must be enforced 2024-01-03 14:40:51 +01:00
Johannes Zellner af42f150f2 Update sftp addon 2024-01-03 13:20:32 +01:00
Girish Ramakrishnan ba16fdaf60 domain: handle alias domain conflict during deletion 2024-01-02 17:18:37 +01:00
Girish Ramakrishnan c5480bfcc1 mail: update limit plugin 2024-01-02 15:50:34 +01:00
Girish Ramakrishnan 79448e9ff9 oidc: fix error message with correct username but bad password 2023-12-29 18:15:33 +01:00
Girish Ramakrishnan e49398eb47 Bump request timeout to a minute, some servers are just too slow 2023-12-29 16:19:52 +01:00
Girish Ramakrishnan fa842034ed update: continue to update apps if box update never starts
https://forum.cloudron.io/topic/10699/no-automatic-app-updates-with-pending-box-update
2023-12-28 12:16:03 +01:00
Girish Ramakrishnan 672b472359 hetzner: typo in error message 2023-12-27 20:41:34 +01:00
Girish Ramakrishnan 37ed87f9c1 route53: retry on rate limit
route53 has a limit of 5 req/sec/region - https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/DNSLimitations.html#limits-api-requests

see https://forum.cloudron.io/topic/10656/improve-dns-updates-to-avoid-rate-limits/
2023-12-27 12:23:09 +01:00
Johannes Zellner 25ba312636 Use postgres addon with pgvecto_rs extension 2023-12-22 22:45:41 +01:00
Johannes Zellner 340ea3fe9b Fix variable usage bug for noop backup provider 2023-12-18 13:23:40 +01:00
Johannes Zellner 5ac9a7f1ef Do not bind to ipv6 for port 53 apps (adguard) 2023-12-14 18:00:03 +01:00
Johannes Zellner 00268b1da9 Use postgresql addon 5.1.5 which fixes the search_path issue 2023-12-13 16:47:40 +01:00
Johannes Zellner c7b2e15d16 Use new postgres addon image with vectors extension enabled 2023-12-08 09:15:45 +01:00
Girish Ramakrishnan 48f0c75c57 network: increase maxelem of the ipsets 2023-12-07 23:20:24 +01:00
Girish Ramakrishnan 93d3b24300 firewall: max 65536 elements 2023-12-07 21:52:51 +01:00
Girish Ramakrishnan f7a53e1b15 also flush the ipv6 blocklist 2023-12-06 22:20:25 +01:00
Girish Ramakrishnan 759f3f29f0 hetzner: accomodate other nameservers 2023-12-05 18:13:34 +01:00
Girish Ramakrishnan be35926fd1 ovh: accomodate anycast.me servers 2023-12-05 14:04:16 +01:00
Girish Ramakrishnan 0e0199fc94 typo 2023-12-04 09:09:43 +01:00
Johannes Zellner 4d29592450 Do not invalidate session sudo but only for the command we want to test 2023-12-04 01:42:46 +01:00
Girish Ramakrishnan 44be454a1e system: return activation time if we have it 2023-12-04 01:41:56 +01:00
Girish Ramakrishnan cbf1b47332 system: merge info and dmi routes
also return uptimeSecs instead of abstract date
2023-12-04 01:11:26 +01:00
Girish Ramakrishnan eb64bd296a system: return uptime and reboot required 2023-12-04 00:46:12 +01:00
Girish Ramakrishnan 72083f59cd system: dmi information 2023-12-04 00:31:18 +01:00
Girish Ramakrishnan 8a20b603f5 system: cpu route 2023-12-04 00:23:25 +01:00
Girish Ramakrishnan d45c433bc7 fix dockerproxy test 2023-12-04 00:11:11 +01:00
Girish Ramakrishnan 470417fcbe more test fixing 2023-12-03 21:18:16 +01:00
Girish Ramakrishnan 8e28d2a5aa Fix support tests 2023-12-03 20:04:17 +01:00
Girish Ramakrishnan 344578006c make oidc test stable 2023-12-03 20:04:17 +01:00
Girish Ramakrishnan 943325baa3 better sudoers configuration check 2023-12-03 17:50:50 +01:00
Johannes Zellner 8927634636 Remove supportConfig route 2023-12-03 16:46:15 +01:00
Girish Ramakrishnan b9e584752b Fix system test 2023-12-03 15:52:31 +01:00
Johannes Zellner 5857c05e01 Remove noisy debug for applinks 2023-12-03 15:11:16 +01:00
Johannes Zellner 81eb4bdebb Improve jsdom usage for applink icons 2023-12-03 14:24:45 +01:00
Johannes Zellner 5971d3bf77 Better error handling for setupToken 2023-12-02 18:20:13 +01:00