Commit Graph

9592 Commits

Author SHA1 Message Date
Girish Ramakrishnan 2040eb22a2 mail: update modules 2026-01-23 12:14:33 +01:00
Girish Ramakrishnan b6075a9765 redis: update to 8.4.0 2026-01-23 11:34:41 +01:00
Girish Ramakrishnan daacbcb89d mongodb: update to 8.2.3 2026-01-23 11:26:30 +01:00
Girish Ramakrishnan 6d622bbd14 postgres: pipework update 2026-01-23 11:18:06 +01:00
Girish Ramakrishnan 03fe72e0b1 services: fix usage of pipework 2026-01-22 18:09:41 +01:00
Girish Ramakrishnan b238443a9d services: switch to using @cloudron/pipework
also improve the error messages along the way
2026-01-21 21:32:02 +01:00
Girish Ramakrishnan 021a39a964 services: destroy the read/write stream on error 2026-01-21 17:23:27 +01:00
Girish Ramakrishnan 72c494e9dc backuptask: fix usage of upload API 2026-01-21 09:48:21 +01:00
Girish Ramakrishnan 42cefd56eb Fix uploader API to handle write stream errors
When the upload is aborted/abandoed because the source file is missing,
the write stream is never destroyed. This dangling write stream can
later error and cause a crash.

Instead, create the write stream on demand and nearer to pipeline() to
make sure we do 'error' handling.
2026-01-20 22:26:08 +01:00
Girish Ramakrishnan 472e513a9f postgresql: reindex fix
(cherry picked from commit 6b56efcf14)
2026-01-18 18:27:44 +01:00
Girish Ramakrishnan 23e0fe5791 postgres: fix hook that upgrades vectorchord 2026-01-18 11:36:48 +01:00
Girish Ramakrishnan 6877dfb772 acme: ARI support
ARI is a hint from the cert issuer about when to renew a cert. We will
use it when the API is available.

It provides a mechanim for CAs to revoke certs and signal to clients
that cert should be renewed.

https://www.rfc-editor.org/rfc/rfc9773.txt
https://letsencrypt.org/2024/04/25/guide-to-integrating-ari-into-existing-acme-clients
2026-01-17 23:28:47 +01:00
Girish Ramakrishnan f65b33f3fc Fix key type typo 2026-01-17 22:20:39 +01:00
Girish Ramakrishnan efccf2729b start moving openssl commands into openssl.js 2026-01-17 15:28:44 +01:00
Girish Ramakrishnan 3a1cd8f67f acme2: do not rely on db 2026-01-17 13:21:50 +01:00
Girish Ramakrishnan 53c90429d3 acme: rename variable 2026-01-17 10:26:04 +01:00
Girish Ramakrishnan 7b5384a7d5 acme2: add profile support
this adds acme profile support which was GA today.

https://letsencrypt.org/2026/01/15/6day-and-ip-general-availability
https://letsencrypt.org/docs/profiles/
2026-01-17 09:51:29 +01:00
Girish Ramakrishnan 2b362d8eaf users: add note about invitationToken
this is a one time token that is valid until the account is set up.
this is the reason it has no expiry time.
2026-01-17 09:44:43 +01:00
Johannes Zellner 908f7b8985 Remove wrong expiration note for invite links in email 2026-01-15 12:10:58 +01:00
Girish Ramakrishnan a1b4fdf624 csp: allow multiple lines and add presets 2026-01-13 17:39:00 +01:00
Girish Ramakrishnan 61f37e0260 mongodb: fix fcv update issue 2026-01-13 15:21:30 +01:00
Girish Ramakrishnan 692fb1a68c domains: add debug to print the error 2026-01-12 18:35:18 +01:00
Girish Ramakrishnan c71d915a4b typo 2026-01-12 18:33:22 +01:00
Girish Ramakrishnan e2f71b10ec mail: update haraka to 3.1.2 2026-01-12 11:25:48 +01:00
Elias Hackradt 743e4fce0b Fixed wrong URL for PTR doc issue url 2026-01-10 19:59:27 +01:00
Johannes Zellner 89baa3cabf Set the default locale to C.UTF-8 in 2026 2026-01-07 13:46:10 +01:00
Johannes Zellner 806309fc33 Apply mountoint vs mountpointS lsblk output fix also to mounts 2026-01-06 21:11:16 +01:00
Girish Ramakrishnan 84a10d4eb1 backups: add synology c2 2026-01-06 16:42:54 +01:00
Johannes Zellner e12f5e41ff Better error for invalid update versions 2026-01-06 15:54:55 +01:00
Girish Ramakrishnan da726ecd15 dockerregistry: do not use auth with explicit registry for appstore images 2026-01-02 10:24:51 +01:00
Girish Ramakrishnan a8f61878ca docker: add comments 2026-01-01 11:18:40 +01:00
Girish Ramakrishnan 73e929f0cf test: Happy new year! 2026-01-01 10:10:39 +01:00
Girish Ramakrishnan a02e933375 Upgrade mongodb to mongobleed 2025-12-29 12:53:02 +01:00
Johannes Zellner 8d85b521c8 Fix oidc profile avatar route 2025-12-24 10:51:38 +01:00
Girish Ramakrishnan c0ad75cc4d mailserver: typo where port was not used 2025-12-16 11:48:34 +01:00
Johannes Zellner 854fbe53be Use unique temporary ssh key file for each ssh remote operation
File operations may run in parallel so we cannot rely on a well defined
keyfilename
2025-12-12 15:50:32 +01:00
Johannes Zellner 1ef252fbc2 Revert "Rely on single private key file for optimized ssh remote fs operations"
This reverts commit aaebe01892.
2025-12-12 15:26:56 +01:00
Johannes Zellner aaebe01892 Rely on single private key file for optimized ssh remote fs operations 2025-12-12 14:44:19 +01:00
Johannes Zellner 83efffb7f9 Use new postgres addon for vectorchord 0.5.3 2025-12-12 12:00:46 +01:00
Girish Ramakrishnan b89aa4488c shell: add string fields for debugging 2025-12-12 11:59:41 +01:00
Girish Ramakrishnan 2029148e7c update postgres vectorchord ext 2025-12-11 18:59:43 +01:00
Girish Ramakrishnan bbefca71e5 profile: add hasAvatar 2025-12-10 18:57:02 +01:00
Johannes Zellner f421fd771f Prefix domain (un)register calls with the domain which failed
The info would also be in the extra error info, however we catch the
error in apptask and here we don't know if this is a domain error or
something else.
2025-12-09 14:36:38 +01:00
Girish Ramakrishnan 10f99673c5 oidc: filter oidc-provider module response instead 2025-12-09 12:52:37 +01:00
Girish Ramakrishnan aff5e8f44d oidc: add separate jwks key route for cloudflare access 2025-12-09 12:51:27 +01:00
Girish Ramakrishnan 9773c02e7d backupcleaner: remove integrity information 2025-12-08 19:19:23 +01:00
Girish Ramakrishnan 2f40eeb49f df: check if path exists 2025-12-08 18:57:41 +01:00
Girish Ramakrishnan c448322367 backups: fix download 2025-12-06 11:19:05 +01:00
Girish Ramakrishnan 620974217a restore: teardown pseudo backup site 2025-12-05 16:12:59 +01:00
Girish Ramakrishnan 392d47852d system: skip dataDir analysis if it is missing 2025-12-05 15:59:49 +01:00