Girish Ramakrishnan
4bda11edcf
Require admin for reboot, disk, graphs api
2017-04-18 14:31:55 -07:00
Johannes Zellner
7fdf491815
Add backuptask.js to work with new storage interface
2017-04-17 20:09:02 +02:00
Girish Ramakrishnan
588812a13a
Disable secure cookies for tests (since they use http)
2017-04-14 01:45:00 -07:00
Girish Ramakrishnan
f6a2406091
Use hat for secret instead of uuid
2017-04-13 11:05:46 -07:00
Johannes Zellner
c7134d2da3
Use a dynamic cookie secret
...
Fixes #300
2017-04-13 15:13:07 +02:00
Johannes Zellner
1692842bf0
Enable secure cookies
...
Fixes #299
2017-04-13 14:04:30 +02:00
Johannes Zellner
89bb690152
Only log failing REST requests
2017-04-10 14:17:26 +02:00
Johannes Zellner
f2312a6768
Add rest api to list disks where cloudron data is stored
2017-04-07 18:45:36 +02:00
Johannes Zellner
b9711d7b47
Move AMI instanceId verification to DNS setup
2017-04-03 22:19:01 +02:00
Girish Ramakrishnan
18e59c4754
Rate limit nginx routes that verify the password
...
Also remove rate-limit middleware
Test using something like:
ab -v 1 -n 1000 -c 10 -s 5 -m POST https://my .<doamain>/api/v1/developer/login
Part of #187
2017-03-27 00:06:42 -07:00
Johannes Zellner
39c39b861d
Require admins for authorized_keys route
2017-03-10 17:16:45 +01:00
Girish Ramakrishnan
7e44e7de82
Check outbound port 25
...
Fixes #243
2017-03-09 16:20:53 -08:00
Johannes Zellner
d49d76c1ee
add ssh route tests and fixup the code accordingly
2017-03-07 14:12:25 +01:00
Johannes Zellner
77ef212daa
Add SSH authorized_keys routes
2017-03-07 13:16:28 +01:00
Girish Ramakrishnan
ce31f56eb6
Keep configurePlainIP private
2017-01-17 10:32:46 -08:00
Girish Ramakrishnan
2eb5cab74b
enable route to set admin certificate
2017-01-17 10:01:05 -08:00
Girish Ramakrishnan
568a7f814d
rename func
2017-01-17 09:51:04 -08:00
Johannes Zellner
a0ef86f287
Remove now unused tutorial route and business logic
...
We can bring that back again if needed
2017-01-17 12:50:59 +01:00
Johannes Zellner
801367b68d
Use specific functions for configureAdmin (with domain) and configurePlainIp (always)
...
This prevents from double configuring on startup on caas cloudrons
2017-01-17 11:38:33 +01:00
Johannes Zellner
7f8db644d1
Use in-memory rate limit
...
Related to #187
2017-01-16 16:49:03 +01:00
Girish Ramakrishnan
2311107465
remove misleading comments
2017-01-09 12:35:39 -08:00
Girish Ramakrishnan
7811359b2f
Move cron.initialize to cloudron.js
2017-01-09 11:00:09 -08:00
Girish Ramakrishnan
21c66915a6
Refactor taskmanager resume flow
2017-01-09 10:49:34 -08:00
Girish Ramakrishnan
01f16659ac
remove unused requires
2017-01-09 10:33:23 -08:00
Girish Ramakrishnan
3b9b9a1629
ensure fallback cert exists before platform is started
2017-01-09 10:28:28 -08:00
Girish Ramakrishnan
9e2f43c3b1
initialize platform only when domain is available
2017-01-09 10:28:25 -08:00
Girish Ramakrishnan
a4bba37606
Call mailer.start on configured
2017-01-07 23:40:34 -08:00
Girish Ramakrishnan
5969b4825c
dns_ready is not required since it is part of status
2017-01-06 10:23:10 +01:00
Girish Ramakrishnan
09997398b1
Disallow dnsSetup if domain already set
2017-01-06 10:23:10 +01:00
Girish Ramakrishnan
0b68d1c9aa
Reconfigure admin when domain gets set
2017-01-06 10:23:10 +01:00
Girish Ramakrishnan
cc9904c8c7
Move nginx config and cert generation to box code
2017-01-06 10:23:10 +01:00
Johannes Zellner
38c542b05a
Add route to check dns and cert status
2017-01-05 20:37:26 +01:00
Johannes Zellner
4f1c7742ef
Add public route for dns setup
...
This route is only available until the Cloudron is activated and also
only in self-hosted ones
2017-01-05 11:52:38 +01:00
Johannes Zellner
8fe1f2fef1
Rename email dns records route
2016-12-15 16:57:29 +01:00
Dennis Schwerdel
1065b56380
Check dns records for generic dns providers
2016-12-15 16:57:29 +01:00
Johannes
c70c7462bf
hooks for installer are just local sysadmin webhooks
2016-11-06 14:29:41 +01:00
Girish Ramakrishnan
3ae7a514ef
Change the put route for setting group members
2016-10-01 17:33:50 -07:00
Girish Ramakrishnan
8e712da2c8
Add route and API to set members of a group
2016-09-29 14:48:14 -07:00
Girish Ramakrishnan
49baad349c
remove mailbox routes and move it to users
2016-09-23 15:45:40 -07:00
Johannes Zellner
b937a86426
Download backups is GET
2016-09-20 09:25:48 +02:00
Johannes Zellner
6352064e6c
Add backup download route if backend supports it
2016-09-20 09:25:48 +02:00
Girish Ramakrishnan
839b4b11ba
disable admin_certificate route for now
...
part of #47
2016-09-12 12:01:22 -07:00
Girish Ramakrishnan
5b52eeb573
add route to enable/disable mail
...
mail is disabled by default
Part of #16
2016-08-30 21:09:22 -07:00
Girish Ramakrishnan
86903183df
Fix routing TCP upgrades via express middleware
...
Currently, if there was a POST request with 'tcp' upgrade, the code just hangs and waits
till timeout.
Instead, let express code will give us a default 'finalhandler' which responds
appropriately - https://github.com/expressjs/express/blob/master/lib/application.js#L161
https://github.com/pillarjs/finalhandler/blob/master/index.js#L57 for future reference
on how to call this callback should socket.destroy need to be called.
2016-08-22 13:21:46 -07:00
Girish Ramakrishnan
e4c2483ae5
upgrade header value is already checked in the route handlers
...
also, req.end() crashes
2016-08-22 13:21:46 -07:00
Johannes Zellner
a8d04028f3
Fix typo
2016-07-27 11:20:15 +02:00
Johannes Zellner
8165227b0a
Keep same style in settings rest api
2016-07-27 11:20:15 +02:00
Johannes Zellner
41e1afaf68
Add settings/appstore routes
2016-07-27 11:20:15 +02:00
Johannes Zellner
982bfc313c
Do not allow so send cookies in cors use case
2016-07-01 20:31:43 +02:00
Johannes Zellner
e82c33b896
Revert "Increase sysadmin route timeout as stopping might take longer"
...
This reverts commit 900db217ddb84ab324187ab29bf61e593f824e4a.
2016-06-30 15:01:42 +02:00