Commit Graph

734 Commits

Author SHA1 Message Date
Girish Ramakrishnan 7de94fff1b Merge container logic into start.sh
This whole container thinking is over-engineered and we will get to
it if and when we need to.
2016-12-29 12:01:59 -08:00
Girish Ramakrishnan bbd63b2c57 Prettify container.sh 2016-12-28 08:59:26 -08:00
Girish Ramakrishnan b1854f82f2 prettify init base image script 2016-12-28 08:59:25 -08:00
Girish Ramakrishnan 61789e3fda Use the installer.sh from the source tarball
This redesigns how update works. installer.sh now rebuild the package,
stops the old code and starts the new code. Importantly, it does not
download the new package, this is left to the caller. cloudron-setup
downloads the code and calls installer.sh of the downloaded code.
Same goes for updater.sh. This means that installer.sh itself is now
easily updatable.

Part of #152
2016-12-28 08:59:07 -08:00
Girish Ramakrishnan 691f6c7c5c Use docker 1.12.5
Docker uses an embedded DNS server (127.0.0.11) for user defined networks (UDN).

With the latest releases of docker, specifying 127.0.0.1 as --dns makes the
containers resolve 127.0.0.1 _inside_ the container's networking namespace
(not sure how it worked before this).

The next idea was to only specify --dns-search=. but this does not work.
This makes docker setup the containers to use 127.0.0.1 (or 127.0.0.11 for UDN).
In my mind, the UDN case should work but doesn't (not sure why).

So, the solution is to simply go with no --dns or --dns-search. Sadly,
setting dns-search just at container level does not work either :/ Strangely,

    docker run --network=cloudron --dns-search=. appimage  # does not work

    docker run --network=cloudron appimage # works if you manually remove search from /etc/resolv.conf

So clearly, something inside docker triggers when one of the dns* options is set.

This means that #130 has to be fixed at app level (For Go, this means to use the cgo resolver).
2016-12-28 08:57:48 -08:00
Girish Ramakrishnan 91e4f6fcec Add CLOUDRON chain first
This allows us to not issue an 'upgrade' yet.

Part of #152
2016-12-28 08:57:38 -08:00
Girish Ramakrishnan b759b12e90 Move cloudron-system-setup.sh out of installer
Part of #152
2016-12-28 08:57:30 -08:00
Girish Ramakrishnan 103019984b Move firewall setup to container.sh
Part of #152
2016-12-28 08:57:20 -08:00
Girish Ramakrishnan 01126aaeea move ssh configuration to container.sh
Note: appstore requires to be fixed to start the provisioning on port 22

Part of #152
2016-12-28 08:57:13 -08:00
Girish Ramakrishnan a6ab8ff02f Mount the btrfs user home data in container.sh
This allows it to be configurable easily at some point

Part of #152
2016-12-28 08:56:55 -08:00
Girish Ramakrishnan b89886a945 Move systemd service creation scripts to container.sh
Part of #152
2016-12-28 08:56:46 -08:00
Girish Ramakrishnan d12b71f69c move journald configuration to container.sh
Part of #152
2016-12-28 08:56:06 -08:00
Girish Ramakrishnan 53c2ed3c82 configure time in container.sh 2016-12-28 08:55:56 -08:00
Girish Ramakrishnan 148c8e6250 Give user access to system logs in container.sh
Part of #152
2016-12-28 08:55:43 -08:00
Johannes d39a84ea53 Do not redirect on app upstream error but show static error page
Fixes #4
2016-11-21 16:25:23 +01:00
Girish Ramakrishnan 94037e5266 remove oauth proxy backend logic 2016-11-19 17:13:08 +05:30
Johannes 4d360e3798 Allow update.sh to be run as root 2016-11-06 14:29:41 +01:00
Girish Ramakrishnan c8a04f8707 remove code that stops nginx 2016-10-24 14:41:26 -07:00
Johannes 595787a898 Add missing 'then' 2016-10-24 16:46:14 +02:00
Girish Ramakrishnan 86a31b8f5a start nginx properly 2016-10-21 16:43:40 -07:00
Girish Ramakrishnan 1244a73a19 run the install web ui on port 80 2016-10-21 16:04:08 -07:00
Johannes Zellner 723c7307d2 Set default provider to generic 2016-10-21 10:28:40 -07:00
Johannes Zellner db55a7ad3c Create fallback cert if not passed in via user data 2016-10-21 10:28:22 -07:00
Johannes Zellner 09b4325ecc Set some more fallbacks in argparser.sh 2016-10-21 10:26:32 -07:00
Johannes Zellner 66999f7454 custom domain is actually the default by now 2016-10-21 10:25:33 -07:00
Johannes Zellner f05a5226ba Add new sudo file rmbackup.sh as backups are owned by root currently 2016-10-10 16:25:43 +02:00
Girish Ramakrishnan 219bd69e63 parse and save isDemo provision parameter 2016-08-31 22:03:46 -07:00
Girish Ramakrishnan 3ba5bd836b use cloudron.conf to determine if this is an update
see also d60b386bca
2016-08-25 10:32:58 -07:00
Girish Ramakrishnan b932a9be10 Set X-Forwarded-Ssl to on
https://gitlab.com/gitlab-org/omnibus-gitlab/blob/master/doc/settings/nginx.md#supporting-proxied-ssl
http://stackoverflow.com/questions/16042647/whats-the-de-facto-standard-for-a-reverse-proxy-to-tell-the-backend-ssl-is-used
2016-08-17 17:46:36 -07:00
Girish Ramakrishnan 3bd9fcae6a fix dkim dir perms 2016-08-13 00:23:07 -07:00
Girish Ramakrishnan 020ad746a0 change ownership of box directory 2016-08-12 23:55:20 -07:00
Girish Ramakrishnan b049989eb1 do not change ownership of mail data when updating cloudron
the mail container is still running and changing the ownership behind it's
back causes the mail container to be very upset.
2016-08-12 23:36:41 -07:00
Johannes Zellner 8702b4320d Wait for all mysql jobs to be finished 2016-08-04 14:06:52 +02:00
Johannes Zellner 6b4675cca1 Remove the ec2 swappiness setting
This revealed mixed results, overall the burstmode ec2
instances are simply a bit underpowered
2016-08-04 10:56:26 +02:00
Girish Ramakrishnan 42fda25718 use systemctl instead of upstart service 2016-08-02 18:45:20 -07:00
Johannes Zellner 867e875707 Revert "Add basic 404 page"
This reverts commit 3793220dd48356d5fe421312915a8392fcccca0e.
2016-07-27 19:09:43 +02:00
Johannes Zellner dcdca52dbd Add basic 404 page 2016-07-27 17:52:54 +02:00
Girish Ramakrishnan b628e2a6c8 add hack for mysql server on ec2 2016-07-27 00:15:08 -07:00
Johannes Zellner 82e8c8cef2 Only adjust swapiness for ec2
On DO the disk I/O seems to be much better so this is not required
2016-07-17 18:54:27 +02:00
Johannes Zellner 3300c6b47a Make the system use swap only when needed
The default swappiness is 60 on ubuntu. This sets the tendency
to swap out memory pages to be more frequent, which in our case
means swapping out to networked disks and increase the cpu load
a lot, which is especially bad on EC2
2016-07-15 14:07:02 +02:00
Johannes Zellner 3331d1aa13 Ensure the X-Frame-Options header has a single string argument 2016-07-15 11:26:05 +02:00
Johannes Zellner 66049a9e2d Support x-frame-options in appconfig.ejs template 2016-07-14 16:28:59 +02:00
Girish Ramakrishnan 44e7d87aac setup apiServerOrigin for splash page 2016-07-06 16:26:26 -05:00
Girish Ramakrishnan dc78aab821 remove quoting of the json 2016-07-05 22:50:54 -05:00
Girish Ramakrishnan 9b4a400694 typo 2016-07-05 22:34:51 -05:00
Girish Ramakrishnan 2d01f2a0e9 pass migrate reason all the way to splash code 2016-07-05 22:04:24 -05:00
Johannes Zellner e422357670 Set the correct hostname in start.sh 2016-07-04 10:41:54 +02:00
Girish Ramakrishnan 9315e7eb65 read all params individually 2016-07-01 15:27:36 -05:00
Johannes Zellner 9182038d12 Revert "Do not wait for cloudron.target to stop"
This reverts commit dcfe2e4fdbcbd2acb98cefe9b50ef0bb1828eb48.
2016-06-30 15:01:32 +02:00
Johannes Zellner 14983861c0 Do not wait for cloudron.target to stop
This will allow the box code to respond properly to the retire request
2016-06-30 10:52:50 +02:00