Commit Graph

11431 Commits

Author SHA1 Message Date
Johannes Zellner
3552232e99 Support 2fa for proxy auth 2023-01-19 13:42:51 +01:00
Girish Ramakrishnan
093fc98ae5 s3: add listing check
This is needed for situations like in cloudflare where the endpoint can
be mistakenly configured with the bucket name like https://xx.r2.cloudflarestorage.com/cloudron-backups .
The upload and del calls work but list and copy does not.
2023-01-17 11:13:03 +01:00
Girish Ramakrishnan
40bcfdba76 s3: throw any copy errors 2023-01-17 11:00:03 +01:00
Johannes Zellner
41b03e3fef Ensure ldap client always has an error handler 2023-01-12 14:39:58 +01:00
Girish Ramakrishnan
e9168092f7 remove broken link 2023-01-10 21:31:45 +01:00
Girish Ramakrishnan
0523960cc2 more changes 2023-01-10 11:09:51 +01:00
Girish Ramakrishnan
399388fe9a backups: add idrive e2 2023-01-10 11:08:51 +01:00
Johannes Zellner
0a34ace16a Allow proxy auth login pages to load the font from the dashboard 2023-01-09 22:53:35 +01:00
Johannes Zellner
183d4c026f Support proxyAuth for proxy app 2023-01-09 21:51:32 +01:00
Johannes Zellner
829d53915d Only use "kill" as done in the upstream docs
https://www.freedesktop.org/software/systemd/man/systemd.service.html#ExecReload=
2023-01-09 20:18:51 +01:00
Johannes Zellner
144fc7b7be Ubuntu 18 does not have /usr/bin/kill 2023-01-09 20:12:30 +01:00
Johannes Zellner
20cec7d5ef Fixup location conflict message for bare domain 2023-01-09 13:27:02 +01:00
Johannes Zellner
15e4ceeb76 Use new postgres addon 5.0.1 2022-12-29 16:15:00 +01:00
Girish Ramakrishnan
4d5d6c6eb4 Update mail image 2022-12-28 14:46:52 +01:00
Girish Ramakrishnan
68f4f1ba85 contabo: network can be real slow 2022-12-24 15:04:45 +01:00
Girish Ramakrishnan
3d2e9bd448 init-ubuntu: more logs 2022-12-24 11:54:30 +01:00
Girish Ramakrishnan
5ff10503ab Update packages 2022-12-24 11:38:57 +01:00
Girish Ramakrishnan
7be0739141 registry log message 2022-12-23 17:19:52 +01:00
Girish Ramakrishnan
ae30fe25d7 unbound: disable controller interface explicitly
https://github.com/NLnetLabs/unbound/issues/806
2022-12-22 11:11:33 +01:00
Girish Ramakrishnan
d5793bc7c0 Fix crash in RBL check 2022-12-08 23:53:21 +01:00
Girish Ramakrishnan
2346a1c501 better error message when group not found 2022-12-08 10:29:02 +01:00
Girish Ramakrishnan
d7d43c73fe reverseproxy: fix typo in regexp matching 2022-12-08 10:05:36 +01:00
Girish Ramakrishnan
a198d1ea8d 7.3.5 changes 2022-12-08 08:54:06 +01:00
Girish Ramakrishnan
67cde5a62c du: fix crash when filesystem is cifs/nfs/sshfs 2022-12-08 08:52:50 +01:00
Girish Ramakrishnan
c26a3786fb mail: update container base image 2022-12-06 13:50:41 +01:00
Girish Ramakrishnan
eedb239acf postgresl: upgrade to 14 2022-12-06 11:52:09 +01:00
Girish Ramakrishnan
2bcd8e64aa addons: update base images of addons
* mysql
* redis
* turn
2022-12-06 10:39:57 +01:00
Girish Ramakrishnan
38bf284806 Update base image to 4.0.0 (ubuntu jammy) 2022-12-05 12:27:04 +01:00
Johannes Zellner
d126f056fc Start with a default to not fail if no swap is present 2022-12-05 12:20:42 +01:00
Johannes Zellner
db5e0b8fdf Disallow jupyter hub on demo 2022-11-30 21:36:29 +01:00
Girish Ramakrishnan
d547bad17a 7.3.4 changes v7.3.4 2022-11-30 21:19:03 +01:00
Girish Ramakrishnan
36ddb8c7c2 prune: normalize the tag 2022-11-30 21:12:00 +01:00
Girish Ramakrishnan
6c9aa1a77f Revert "prune all images instead of parsing output"
This reverts commit d42c524a46.

This caused a bug that all app images are getting removed since we remove
all containers on infra update!
2022-11-30 20:00:51 +01:00
Girish Ramakrishnan
27dec3f61e bump test version 2022-11-30 19:56:51 +01:00
Girish Ramakrishnan
79cb8ef251 add route to get platform status 2022-11-30 19:54:32 +01:00
Girish Ramakrishnan
f27847950c reverseproxy: notify cert change only in cron job
notifying this in ensureCertificate does not work if provider changed in the middle anyway.
might as well get them to be in sync in the cronjob.

this change also resulted in tls addon getting restarted non-stop if you change from wildcard
to non-wildcard since ensureCertificate notifies the change.
v7.3.3
2022-11-30 15:55:32 +01:00
Girish Ramakrishnan
69b46d82ab Fix typo 2022-11-30 14:56:40 +01:00
Girish Ramakrishnan
2a660fa59d change terminology to running and unresponsive 2022-11-30 14:41:48 +01:00
Girish Ramakrishnan
e942b8fe7e better debugs 2022-11-30 13:08:05 +01:00
Girish Ramakrishnan
1c3ef36a47 typo in graphite version 2022-11-30 10:37:28 +01:00
Girish Ramakrishnan
d42c524a46 prune all images instead of parsing output
nothing is really lost since these are just unused images
2022-11-30 10:01:50 +01:00
Girish Ramakrishnan
15cc624fa5 do string compare in certs 2022-11-30 09:59:19 +01:00
Girish Ramakrishnan
7e1c56161d reverseproxy: notify services immediately
there are 2 cases where certs change (in db):
* LE cert is new or renewed
* fallback cert changes with fallback provider

if something is off i.e we crashed midway of above, then user can click the
rebuild button.
2022-11-29 18:27:08 +01:00
Girish Ramakrishnan
77a5f01585 reverseproxy: rebuild only when needed
re-creating nginx configs is only needed in 3 cases:
* provider changes. we create a rebuild file for this
* nginx config is somehow corrupt by external changes. user can click ui button

on startup, dashboard also always creates the nginx configs. so it's always up to provide the button
2022-11-29 18:17:53 +01:00
Girish Ramakrishnan
3aa3cb6e39 tls: remove any old location certs 2022-11-29 17:58:51 +01:00
Girish Ramakrishnan
302f975d5c handle type mismatch 2022-11-29 17:13:58 +01:00
Girish Ramakrishnan
d23c65a7e7 reverseproxy: cert/key/csr are all pem
just use strings instead of binary/string confusion
2022-11-29 14:33:52 +01:00
Girish Ramakrishnan
1cf613dca6 Fix name of wildcard alias domain cert and configs 2022-11-29 13:35:17 +01:00
Girish Ramakrishnan
89127e1df7 reverseproxy: rework cert logic
9c8f78a059 already fixed many of the cert issues.

However, some issues were caught in the CI:

* The TLS addon has to be rebuilt and not just restarted. For this reason, we now
  move things to a directory instead of mounting files. This way the container is just restarted.

* Cleanups must be driven by the database and not the filesystem . Deleting files on disk or after a restore,
  the certs are left dangling forever in the db.

* Separate the db cert logic and disk cert logic. This way we can sync as many times as we want and whenever we want.
2022-11-29 11:07:23 +01:00
Girish Ramakrishnan
c844be5be1 make validateLocations return error 2022-11-28 22:16:22 +01:00