Girish Ramakrishnan
b49d30b477
Add OVH Object Storage backend
2020-04-29 12:47:57 -07:00
Girish Ramakrishnan
73d83ec57e
Ensure stopped apps are getting backed up
2020-04-29 12:05:01 -07:00
Girish Ramakrishnan
efb39fb24b
refactor for addon/service/container consistency
...
addon - app manifest thing. part of app lifecycle
services - implementation of addon (may have containers assoc)
2020-04-28 15:32:02 -07:00
Girish Ramakrishnan
73623f2e92
add serviceConfig to appdb
...
part of #671
2020-04-28 15:31:58 -07:00
Girish Ramakrishnan
fbcc4cfa50
Rename KNOWN_ADDONS to ADDONS
2020-04-27 22:59:35 -07:00
Girish Ramakrishnan
474a3548e0
Rename KNOWN_SERVICES to SERVICES
2020-04-27 22:59:11 -07:00
Girish Ramakrishnan
2cdf68379b
Revert "add volume support"
...
This reverts commit b8bb69f730 .
Revert this for now, we will try a simpler non-object volume first
2020-04-27 22:55:43 -07:00
Girish Ramakrishnan
a520c1b1cb
Update all docker images to use base image 2.0.0
2020-04-26 17:09:31 -07:00
Girish Ramakrishnan
75fc2cbcfb
Update base image
2020-04-25 10:37:08 -07:00
Girish Ramakrishnan
b8bb69f730
add volume support
...
part of #668 , #569
2020-04-24 22:09:07 -07:00
Girish Ramakrishnan
b46d3e74d6
Fix crash in cloudflare error handling
2020-04-23 12:07:54 -07:00
Girish Ramakrishnan
77a1613107
test: fix alias routes
2020-04-22 18:16:33 -07:00
Girish Ramakrishnan
62fab7b09f
mail: allow alternate mx
2020-04-22 17:36:34 -07:00
Johannes Zellner
5d87352b28
backupId cannot be null during restore
2020-04-21 16:00:19 +02:00
Girish Ramakrishnan
ff60f5a381
move aliases route under mailbox
...
since aliases can now span domains
fixes #577
2020-04-20 19:17:55 -07:00
Girish Ramakrishnan
7f666d9369
mail: implement aliases across domains
...
part of #577
2020-04-20 15:19:48 -07:00
Girish Ramakrishnan
2dcab77ed1
Fix issue where app with oauth addon will not backup or uninstall
2020-04-18 10:08:20 -07:00
Girish Ramakrishnan
13be04a169
Deny non-member email immediately
2020-04-18 02:51:31 -07:00
Girish Ramakrishnan
e3767c3a54
remove obsolete isadmin flag
2020-04-18 02:32:17 -07:00
Girish Ramakrishnan
ce957c8dd5
update mail container
2020-04-18 02:31:59 -07:00
Girish Ramakrishnan
0606b2994c
add membersOnly flag to a mailing list
2020-04-17 17:44:14 -07:00
Girish Ramakrishnan
33acccbaaa
only check the p key for dkim
...
this less-strict DKIM check allows users to set a stronger DKIM key
2020-04-17 12:45:21 -07:00
Girish Ramakrishnan
1e097abe86
Add note on dkim key length
2020-04-17 10:29:14 -07:00
Girish Ramakrishnan
e51705c41d
acme: request ECC certs
2020-04-17 10:22:01 -07:00
Girish Ramakrishnan
7eafa661fe
check .well-known presence upstream
...
this is required for apps like nextcloud which have caldav/cardav
routes
2020-04-15 16:56:41 -07:00
Girish Ramakrishnan
2fe323e587
remove bogus internal route
2020-04-14 23:11:44 -07:00
Girish Ramakrishnan
531d314e25
Show error message if gpg failed
2020-04-11 17:11:55 -07:00
Girish Ramakrishnan
1ab23d2902
fix indexOf value comparison
2020-04-11 14:21:05 -07:00
Girish Ramakrishnan
b3496e1354
Add ECDHE-RSA-AES128-SHA256 to cipher list
...
one of our users had the site reverse proxied. it broke after the
5.1 cipher change and they nailed it down to using this cipher.
https://security.stackexchange.com/questions/72926/is-tls-ecdhe-rsa-with-aes-128-cbc-sha256-a-safe-cipher-suite-to-use
says this is safe
The following prints the cipher suite:
log_format combined2 '$remote_addr - [$time_local] '
'$ssl_protocol/$ssl_cipher '
'"$request" $status $body_bytes_sent $request_time '
'"$http_referer" "$host" "$http_user_agent"';
2020-04-10 09:49:06 -07:00
Girish Ramakrishnan
2efa0aaca4
serve custom well-known documents via nginx
2020-04-09 00:15:56 -07:00
Girish Ramakrishnan
ef9aeb0772
Bump default version for tests
2020-04-08 14:24:58 -07:00
Girish Ramakrishnan
c382fc375e
Set the resetTokenCreationTime in invitation links
2020-04-08 13:11:24 -07:00
Girish Ramakrishnan
2544acddfa
Fix crash with misconfigured reverse proxy
...
https://forum.cloudron.io/topic/2288/mastodon-terminal-not-starting
2020-04-08 09:43:43 -07:00
Johannes Zellner
85a897c78c
Remove console.log debug leftover
2020-04-08 11:48:12 +02:00
Girish Ramakrishnan
6adf5772d8
update turn config to prevent internal access
...
https://www.rtcsec.com/2020/04/01-slack-webrtc-turn-compromise/
2020-04-07 15:37:31 -07:00
Girish Ramakrishnan
5515324fd4
coturn -> turn in docker repo name
2020-04-02 19:51:14 -07:00
Girish Ramakrishnan
e72622ed4f
Fix crash during auto-update
2020-04-02 19:47:29 -07:00
Girish Ramakrishnan
e821733a58
add note on exposed ports
2020-04-02 18:09:26 -07:00
Girish Ramakrishnan
a03c0e4475
mail: disable hostname validation
2020-04-02 15:00:11 -07:00
Girish Ramakrishnan
e7dc77e6de
bump mail container for mailbox size fix
2020-04-01 16:31:07 -07:00
Girish Ramakrishnan
e240a8b58f
add comment on the struct
2020-04-01 16:26:16 -07:00
Johannes Zellner
ef64b2b945
Use coturn addon tag 1.0.0
2020-04-01 21:50:21 +02:00
Johannes Zellner
f6cd33ae24
Set turn secret for apps
2020-04-01 21:50:09 +02:00
Girish Ramakrishnan
dd109f149f
mail: fix eventlog db perms
2020-04-01 12:24:54 -07:00
Girish Ramakrishnan
5b62d63463
clear mailbox on update and restore
...
part of #669
2020-03-31 17:51:27 -07:00
Girish Ramakrishnan
3fec599c0c
remove mail domain add/remove API
...
merge this as a transaction into domains API
fixes #669
2020-03-31 14:48:19 -07:00
Girish Ramakrishnan
e30ea9f143
make mailbox domain nullable
...
for apps that do not use sendmail/recvmail addon, these are now null.
otherwise, there is no way to edit the mailbox in the UI
part of #669
2020-03-31 11:26:19 -07:00
Johannes Zellner
7cb0c31c59
Also restart turn server on dashboard domain change
2020-03-31 14:52:09 +02:00
Johannes Zellner
b00a7e3cbb
Update turn addon
2020-03-31 10:55:41 +02:00
Johannes Zellner
e63446ffa2
Support persistent turn secret
2020-03-31 09:28:57 +02:00