Johannes Zellner
5e4e292b4d
oidc: Remove rpInitiatedLogout again
2023-03-19 16:01:16 +01:00
Johannes Zellner
05a1cc58eb
oidc: als add basic style for autorize page
2023-03-19 13:08:06 +01:00
Johannes Zellner
3b9336d3c9
oidc: Initial auth against our userdb is working
2023-03-19 13:08:06 +01:00
Johannes Zellner
57689ffdf4
oidc: apply basic style to login view
2023-03-19 13:08:06 +01:00
Johannes Zellner
36f8bfc229
Add oidc logout hooks
2023-03-19 13:08:06 +01:00
Johannes Zellner
d6adbf46e6
Add initial oidc interaction pages
2023-03-19 13:08:06 +01:00
Johannes Zellner
31e900cb9c
Add hooks for providing our own login UI
2023-03-19 13:08:06 +01:00
Johannes Zellner
bab3de137b
Fix typo
2023-03-19 13:08:06 +01:00
Johannes Zellner
4ac70d70f9
oidc: set interaction routes prefix to the same as the main oidc routes
2023-03-19 13:08:06 +01:00
Johannes Zellner
1ea76ebb60
oidc: add initial findAccount and fixup findByUid
2023-03-19 13:08:06 +01:00
Johannes Zellner
47e35d0b06
Support consume api
2023-03-19 13:08:06 +01:00
Johannes Zellner
5fcadcce9c
Add initial OpenID connect support
...
This currently uses a fake json file storage and does not yet verify
credentials
2023-03-19 13:08:06 +01:00
Girish Ramakrishnan
33ad0829ad
Add workaround for porkbun rate limit
2023-03-18 16:20:17 +01:00
Girish Ramakrishnan
e38341eb85
typo
2023-03-18 10:10:27 +01:00
Girish Ramakrishnan
f74e2cbee3
porkbun: cleanup implementation
2023-03-18 09:58:04 +01:00
Girish Ramakrishnan
3616fbb51c
dns: add porkbun
...
domain setup ui
2023-03-16 20:21:39 +01:00
Girish Ramakrishnan
489b598cd6
curl|pipe makes retrying pointless
...
save to a temporary file so that curl retry logic can work
2023-03-16 12:04:17 +01:00
Girish Ramakrishnan
45a1122889
Revert back infra version to match 7.3
...
The code is not smart enough to do both infra bump and database major upgrades.
The db upgrade logic relies on the container to be running to export and re-import.
2023-03-15 21:16:08 +01:00
Girish Ramakrishnan
abd6ab06de
mongodb: fix restart
2023-03-14 11:59:25 +01:00
Girish Ramakrishnan
e86a613d86
proxyauth: typo in basic auth validation
2023-03-14 11:35:24 +01:00
Girish Ramakrishnan
ef3d23ebd9
Fix error message
2023-03-14 11:35:10 +01:00
Girish Ramakrishnan
53e9eccf72
unify totp check
...
the totp check is done in several places causing errors like 3552232e99
2023-03-12 16:01:12 +01:00
Girish Ramakrishnan
8e0d1b61af
Make tests run again
2023-03-11 23:41:01 +01:00
Girish Ramakrishnan
3aa040bf01
apps: remove repository
2023-03-11 16:25:39 +01:00
Girish Ramakrishnan
d242afd9fc
pass debug object
2023-03-10 12:10:40 +01:00
Girish Ramakrishnan
5e606c50a4
docker: better error message when out of disk space
2023-03-10 12:09:23 +01:00
Johannes Zellner
c2b1350fa0
Ensure we handle item selection context menu in filemanager correctly
2023-03-10 12:07:11 +01:00
Girish Ramakrishnan
59a8b001b7
Fix tests
2023-03-09 19:50:14 +01:00
Girish Ramakrishnan
d144d6b273
Update test packages
2023-03-09 18:17:12 +01:00
Girish Ramakrishnan
d2f0bb2b44
sftp: ed25519 keys
2023-03-09 11:03:13 +01:00
Girish Ramakrishnan
d20958760b
rename constant to have RSA in it
2023-03-09 10:36:49 +01:00
Girish Ramakrishnan
d1398659a3
Move sftp to new base image
2023-03-09 09:18:26 +01:00
Girish Ramakrishnan
5d425fbce5
Update graphite
2023-03-09 01:55:12 +01:00
Girish Ramakrishnan
2402bf45f4
hold off on mongodb update because it needs avx
2023-03-09 00:44:58 +01:00
Girish Ramakrishnan
b9a484f72e
Update mongodb
2023-03-08 23:44:21 +01:00
Girish Ramakrishnan
8448d28f6f
Implement HSTS preload
...
This allows browsers to query https directly instead of the initial http redirect
https://hstspreload.org/#opt-in says it should be explicitly opt in
2023-03-06 11:46:05 +01:00
Girish Ramakrishnan
5bbeb1196a
add root as reserved name for gogs
2023-03-05 10:52:30 +01:00
Girish Ramakrishnan
9cd3874b57
mysql: set secure_file_priv
2023-03-02 21:20:46 +01:00
Girish Ramakrishnan
03a77ddf01
Fix validation of hostPath
...
When adding a volume, this comes in mountOptions. The hostPath in the
database is the computed host path.
2023-02-25 23:41:11 +01:00
Girish Ramakrishnan
5f6ae93106
Remove repository type from listing
...
we will build the community repo later, if need be
2023-02-25 20:22:09 +01:00
Girish Ramakrishnan
abacc60181
tls: fix wildcard alias cert file names
...
also, do not provision redirect certs. redirect domains can never
hit the server anyway.
2023-02-25 20:22:09 +01:00
Girish Ramakrishnan
dbbe93955c
acme2: add bare domain to altNames when requesting wildcard cert
...
this is primarily to support DoT + ClientID. the adguard package
can now use this cert when the DoT port is enabled.
we thought of adding a "dot: true" flag for the manifest. that flag
would request a special wildcard cert as well as setup the dns. setting
up the dns is complicated ux wise because it would be totally hidden
from the user. It's better they add an alias and thus we make things
a bit more explicit (what if user was using the wildcard domain for something
else etc).
2023-02-25 20:22:09 +01:00
Johannes Zellner
bfeea414d8
Use sftp 3.6.2
2023-02-25 15:38:41 +01:00
Girish Ramakrishnan
edf87739fc
eventlog: only prune login and logout events
2023-02-25 01:20:43 +01:00
Girish Ramakrishnan
6f9529fecd
only remove node_modules of dashboard
2023-02-25 00:55:50 +01:00
Girish Ramakrishnan
f807ba5dde
Fixup hotfix script after merge
2023-02-25 00:01:36 +01:00
Girish Ramakrishnan
af66cef6c2
Merge remote-tracking branch 'dashboard/master'
2023-02-24 23:40:15 +01:00
Girish Ramakrishnan
582994b9d6
addons: stable IPv4 addresses
...
give addons static IPv4 so one can reliably connect from outside via
SSH tunnel
2023-02-21 12:20:44 +01:00
Girish Ramakrishnan
8c59528cc2
eventlog: keep 3 months
2023-02-21 10:38:15 +01:00
Girish Ramakrishnan
3c09c4801e
Add danish translation
2023-02-11 10:26:53 +01:00
