Johannes Zellner
3552232e99
Support 2fa for proxy auth
2023-01-19 13:42:51 +01:00
Girish Ramakrishnan
093fc98ae5
s3: add listing check
...
This is needed for situations like in cloudflare where the endpoint can
be mistakenly configured with the bucket name like https://xx.r2.cloudflarestorage.com/cloudron-backups .
The upload and del calls work but list and copy does not.
2023-01-17 11:13:03 +01:00
Girish Ramakrishnan
40bcfdba76
s3: throw any copy errors
2023-01-17 11:00:03 +01:00
Johannes Zellner
41b03e3fef
Ensure ldap client always has an error handler
2023-01-12 14:39:58 +01:00
Girish Ramakrishnan
e9168092f7
remove broken link
2023-01-10 21:31:45 +01:00
Girish Ramakrishnan
0523960cc2
more changes
2023-01-10 11:09:51 +01:00
Girish Ramakrishnan
399388fe9a
backups: add idrive e2
2023-01-10 11:08:51 +01:00
Johannes Zellner
0a34ace16a
Allow proxy auth login pages to load the font from the dashboard
2023-01-09 22:53:35 +01:00
Johannes Zellner
183d4c026f
Support proxyAuth for proxy app
2023-01-09 21:51:32 +01:00
Johannes Zellner
829d53915d
Only use "kill" as done in the upstream docs
...
https://www.freedesktop.org/software/systemd/man/systemd.service.html#ExecReload=
2023-01-09 20:18:51 +01:00
Johannes Zellner
144fc7b7be
Ubuntu 18 does not have /usr/bin/kill
2023-01-09 20:12:30 +01:00
Johannes Zellner
20cec7d5ef
Fixup location conflict message for bare domain
2023-01-09 13:27:02 +01:00
Johannes Zellner
15e4ceeb76
Use new postgres addon 5.0.1
2022-12-29 16:15:00 +01:00
Girish Ramakrishnan
4d5d6c6eb4
Update mail image
2022-12-28 14:46:52 +01:00
Girish Ramakrishnan
68f4f1ba85
contabo: network can be real slow
2022-12-24 15:04:45 +01:00
Girish Ramakrishnan
3d2e9bd448
init-ubuntu: more logs
2022-12-24 11:54:30 +01:00
Girish Ramakrishnan
5ff10503ab
Update packages
2022-12-24 11:38:57 +01:00
Girish Ramakrishnan
7be0739141
registry log message
2022-12-23 17:19:52 +01:00
Girish Ramakrishnan
ae30fe25d7
unbound: disable controller interface explicitly
...
https://github.com/NLnetLabs/unbound/issues/806
2022-12-22 11:11:33 +01:00
Girish Ramakrishnan
d5793bc7c0
Fix crash in RBL check
2022-12-08 23:53:21 +01:00
Girish Ramakrishnan
2346a1c501
better error message when group not found
2022-12-08 10:29:02 +01:00
Girish Ramakrishnan
d7d43c73fe
reverseproxy: fix typo in regexp matching
2022-12-08 10:05:36 +01:00
Girish Ramakrishnan
a198d1ea8d
7.3.5 changes
2022-12-08 08:54:06 +01:00
Girish Ramakrishnan
67cde5a62c
du: fix crash when filesystem is cifs/nfs/sshfs
2022-12-08 08:52:50 +01:00
Girish Ramakrishnan
c26a3786fb
mail: update container base image
2022-12-06 13:50:41 +01:00
Girish Ramakrishnan
eedb239acf
postgresl: upgrade to 14
2022-12-06 11:52:09 +01:00
Girish Ramakrishnan
2bcd8e64aa
addons: update base images of addons
...
* mysql
* redis
* turn
2022-12-06 10:39:57 +01:00
Girish Ramakrishnan
38bf284806
Update base image to 4.0.0 (ubuntu jammy)
2022-12-05 12:27:04 +01:00
Johannes Zellner
d126f056fc
Start with a default to not fail if no swap is present
2022-12-05 12:20:42 +01:00
Johannes Zellner
db5e0b8fdf
Disallow jupyter hub on demo
2022-11-30 21:36:29 +01:00
Girish Ramakrishnan
d547bad17a
7.3.4 changes
v7.3.4
2022-11-30 21:19:03 +01:00
Girish Ramakrishnan
36ddb8c7c2
prune: normalize the tag
2022-11-30 21:12:00 +01:00
Girish Ramakrishnan
6c9aa1a77f
Revert "prune all images instead of parsing output"
...
This reverts commit d42c524a46 .
This caused a bug that all app images are getting removed since we remove
all containers on infra update!
2022-11-30 20:00:51 +01:00
Girish Ramakrishnan
27dec3f61e
bump test version
2022-11-30 19:56:51 +01:00
Girish Ramakrishnan
79cb8ef251
add route to get platform status
2022-11-30 19:54:32 +01:00
Girish Ramakrishnan
f27847950c
reverseproxy: notify cert change only in cron job
...
notifying this in ensureCertificate does not work if provider changed in the middle anyway.
might as well get them to be in sync in the cronjob.
this change also resulted in tls addon getting restarted non-stop if you change from wildcard
to non-wildcard since ensureCertificate notifies the change.
v7.3.3
2022-11-30 15:55:32 +01:00
Girish Ramakrishnan
69b46d82ab
Fix typo
2022-11-30 14:56:40 +01:00
Girish Ramakrishnan
2a660fa59d
change terminology to running and unresponsive
2022-11-30 14:41:48 +01:00
Girish Ramakrishnan
e942b8fe7e
better debugs
2022-11-30 13:08:05 +01:00
Girish Ramakrishnan
1c3ef36a47
typo in graphite version
2022-11-30 10:37:28 +01:00
Girish Ramakrishnan
d42c524a46
prune all images instead of parsing output
...
nothing is really lost since these are just unused images
2022-11-30 10:01:50 +01:00
Girish Ramakrishnan
15cc624fa5
do string compare in certs
2022-11-30 09:59:19 +01:00
Girish Ramakrishnan
7e1c56161d
reverseproxy: notify services immediately
...
there are 2 cases where certs change (in db):
* LE cert is new or renewed
* fallback cert changes with fallback provider
if something is off i.e we crashed midway of above, then user can click the
rebuild button.
2022-11-29 18:27:08 +01:00
Girish Ramakrishnan
77a5f01585
reverseproxy: rebuild only when needed
...
re-creating nginx configs is only needed in 3 cases:
* provider changes. we create a rebuild file for this
* nginx config is somehow corrupt by external changes. user can click ui button
on startup, dashboard also always creates the nginx configs. so it's always up to provide the button
2022-11-29 18:17:53 +01:00
Girish Ramakrishnan
3aa3cb6e39
tls: remove any old location certs
2022-11-29 17:58:51 +01:00
Girish Ramakrishnan
302f975d5c
handle type mismatch
2022-11-29 17:13:58 +01:00
Girish Ramakrishnan
d23c65a7e7
reverseproxy: cert/key/csr are all pem
...
just use strings instead of binary/string confusion
2022-11-29 14:33:52 +01:00
Girish Ramakrishnan
1cf613dca6
Fix name of wildcard alias domain cert and configs
2022-11-29 13:35:17 +01:00
Girish Ramakrishnan
89127e1df7
reverseproxy: rework cert logic
...
9c8f78a059 already fixed many of the cert issues.
However, some issues were caught in the CI:
* The TLS addon has to be rebuilt and not just restarted. For this reason, we now
move things to a directory instead of mounting files. This way the container is just restarted.
* Cleanups must be driven by the database and not the filesystem . Deleting files on disk or after a restore,
the certs are left dangling forever in the db.
* Separate the db cert logic and disk cert logic. This way we can sync as many times as we want and whenever we want.
2022-11-29 11:07:23 +01:00
Girish Ramakrishnan
c844be5be1
make validateLocations return error
2022-11-28 22:16:22 +01:00