Johannes Zellner
549b2f2a6b
Improve new login location email
2021-04-30 16:20:50 +02:00
Johannes Zellner
fb5c2a5e52
Properly detect new user agents and location
2021-04-30 15:22:10 +02:00
Girish Ramakrishnan
af2c096975
branding: move logo into database
...
initially, i tried to put this in the current value field but that
is TEXT and has a size limit of 64K. TEXT also stores things with
character encoding, so we have to stash it as base64
2021-04-29 18:28:03 -07:00
Girish Ramakrishnan
3c09416e44
Use Buffer.isBuffer instead
2021-04-29 15:37:32 -07:00
Girish Ramakrishnan
6df5a4f79b
Remove unused FIREWALL_CONFIG_FILE
2021-04-29 15:35:42 -07:00
Girish Ramakrishnan
df0532714e
Fix various debugs
2021-04-29 15:25:19 -07:00
Girish Ramakrishnan
6a32291609
Move updatechecker.json into platform data
2021-04-29 14:01:24 -07:00
Girish Ramakrishnan
b8ea9de439
move profile icons into the database
2021-04-29 13:57:24 -07:00
Girish Ramakrishnan
7b8fd3596e
well known is now stored in the database
2021-04-29 12:17:44 -07:00
Girish Ramakrishnan
6a294f6cd6
Add 6.2.8 changes
2021-04-28 10:40:14 -07:00
Girish Ramakrishnan
fe6ee45645
typo
2021-04-27 15:25:11 -07:00
Girish Ramakrishnan
cd300bb6e2
graphite: carbon crash fix
...
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=923464
https://forum.cloudron.io/topic/4797/graphite-keeps-crashing-oom/34
2021-04-27 14:25:12 -07:00
Girish Ramakrishnan
cb573c0a37
reverseproxy: identify LE staging correctly
2021-04-27 12:55:11 -07:00
Girish Ramakrishnan
38425e75b5
tests: create firewall directory
2021-04-26 14:15:39 -07:00
Johannes Zellner
70f2337b09
Allow apps to override the Referrer-Policy header
2021-04-26 11:48:18 +02:00
Girish Ramakrishnan
f3d870978b
add tests for inactive mailbox and list
2021-04-21 12:39:18 -07:00
Girish Ramakrishnan
d437acebe2
notifications: can also mark it as unread
2021-04-21 12:20:58 -07:00
Girish Ramakrishnan
bb3f9744fb
notifications: fix pagination of listByUserIdPaged
...
we have to filter in sql query, otherwise we don't get consistent per page count
2021-04-21 10:55:31 -07:00
Girish Ramakrishnan
fbceb67df9
notifications: remove app up/down
2021-04-21 10:55:31 -07:00
Johannes Zellner
de8d861e56
Add basic .jshintrc
2021-04-21 16:15:01 +02:00
Johannes Zellner
61e51c7875
Send new login location notification mail
2021-04-21 16:14:49 +02:00
Girish Ramakrishnan
8b99af952a
turn: turn off verbose logging
2021-04-20 11:30:31 -07:00
Johannes Zellner
d74f2b8506
Stop using deprecated developer/login route in tests
2021-04-20 17:52:53 +02:00
Girish Ramakrishnan
727e6720e8
schema.sql: fix appPasswords constraint
2021-04-19 21:02:14 -07:00
Girish Ramakrishnan
142af8e700
Fix notifications schema
2021-04-19 21:00:31 -07:00
Girish Ramakrishnan
0c8e0c4715
notifications: send backup fail only to owner
...
only superadmin has access to server and can adjust backup config
2021-04-19 20:57:10 -07:00
Girish Ramakrishnan
613da5fff9
notifications: remove user add/edit/update notifications
...
these just clutter the real notifications. these are in the eventlog
anyways.
2021-04-19 20:44:35 -07:00
Girish Ramakrishnan
355de5b0a4
notifications: fix update notification
...
the notification wasn't working because this was in apptask and the apptask died
before it could send out the email. we now move the notification to box process
and also remove the email notification.
2021-04-19 15:14:04 -07:00
Girish Ramakrishnan
3ab0a25ec9
Update npm packages
2021-04-17 23:12:33 -07:00
Girish Ramakrishnan
482169c805
Remove superfluous brackets
2021-04-17 22:23:15 -07:00
Girish Ramakrishnan
bba9b7e24e
add weblate badge
2021-04-17 22:21:56 -07:00
Girish Ramakrishnan
7a7223a261
OCSP: do not set must-staple in certificate request
...
On first visit in firefox, must-staple certs (unlike chrome which ignores must-staple) always fail.
Investigating, it turns out, nginx does not fetch OCSP responses on reload or restart - https://trac.nginx.org/nginx/ticket/812 .
So, one has to prime the OCSP cache using curl requests. Alternately, one can use `openssl ocsp -noverify -no_nonce` and
then set `ssl_stapling_file`. Both approaches won't work if the OCSP servers are down and then we have to have some retry logic.
Also, the cache is per nginx worker, so I have no clue how many times one has to call curl. The `ssl_stapling_file` approach
requires some refresh logic as well. All very messy.
For the moment, do not set must-staple in the cert. Instead, check if the cert has a CSP URL and then enable
stapling in nginx accordingly.
2021-04-16 13:33:32 -07:00
Girish Ramakrishnan
4d919127a7
implement OCSP stapling
...
can verify stapling using openssl s_client -connect hostname:443 -status
status_request is RFC6066. there is also status_request_v2 (RFC6961) but this is
not implemented even in openssl libs yet
2021-04-16 12:13:54 -07:00
Girish Ramakrishnan
5d2fd81c0d
Add missing callback()
2021-04-15 16:33:21 -07:00
Girish Ramakrishnan
ef476f74bf
notifications: no email for app up/down/oom events
...
emails will not be used for self monitoring events. these are best done
from the outside. we just log everything in eventlog and raise notifications
as well.
2021-04-15 15:29:25 -07:00
Girish Ramakrishnan
d29d46d812
mail: add active flag to mailboxes and lists
2021-04-15 11:49:19 -07:00
Girish Ramakrishnan
00856b79dd
firewall: Set BOX_ENV
2021-04-14 23:01:08 -07:00
Girish Ramakrishnan
c3e14cd11f
user: return 2fa status for the UI
2021-04-14 21:46:35 -07:00
Girish Ramakrishnan
5833d6ed5d
Fix failing dns and network test
2021-04-14 21:43:51 -07:00
Girish Ramakrishnan
f15714182b
users: add route to disable 2fa
2021-04-14 20:45:35 -07:00
Girish Ramakrishnan
6d214cf0f2
2fa: fix routes to not have a slash
...
otherwise, it feels like it is some sort of resource
2021-04-14 19:59:46 -07:00
Girish Ramakrishnan
f9a72b530c
Fix coding style
2021-04-14 15:54:09 -07:00
Girish Ramakrishnan
e983b0d385
more changes
2021-04-14 15:54:01 -07:00
Girish Ramakrishnan
0712eb1250
namecheap: fix del
2021-04-13 22:27:38 -07:00
Girish Ramakrishnan
564409d8b7
namecheap: Send it as POST
2021-04-13 22:17:01 -07:00
Girish Ramakrishnan
1c9c8e8e2b
namecheap: refactor
2021-04-13 15:10:24 -07:00
Girish Ramakrishnan
04398c9b16
appstore: on dashboard domain change, update cloudron label
2021-04-13 14:19:45 -07:00
Girish Ramakrishnan
9a9c406fbe
appstore: remove track begin/end
...
we used these to track error rates which we don't need anymore since
it's quite reliable
2021-04-13 14:10:30 -07:00
Johannes Zellner
8757e5ba42
print dashboard domain on --owner-login
2021-04-13 15:49:42 +02:00
Girish Ramakrishnan
131711ef5c
mysql: bump connection limit to 200
2021-04-09 10:55:31 -07:00
