d79206f978
mounts: volume -> mounts
...
this code is shared by volume code and backup code
2021-09-28 11:44:09 -07:00
13644624df
add crontab tests
2021-09-28 11:08:10 -07:00
74ce00d94d
cron -> crontab
2021-09-27 21:41:41 -07:00
b86d5ea0ea
apps: add crontab
...
crontab is a text field, so we can have comments
part of #793
2021-09-27 21:33:00 -07:00
04ff8dab1b
Fix progress message
2021-09-27 11:17:10 -07:00
fac48aa977
upcloud: add object storage integration
2021-09-27 10:05:38 -07:00
c568c142c0
Remove unused require
2021-09-27 13:07:11 +02:00
d390495608
provision: download mail backup during restore
2021-09-26 22:55:23 -07:00
7ea9252059
services: simplify startup logic
2021-09-26 22:48:14 -07:00
0415262305
backupcleaner: fix crash
2021-09-26 21:59:48 -07:00
ad3dbe8daa
mail: keep mail backups separately from box backups
...
part of #717
2021-09-26 21:47:24 -07:00
184fc70e97
pass debug for background promises
2021-09-26 21:24:37 -07:00
743597f91e
backuptask: better debugs
2021-09-26 18:45:28 -07:00
90482f0263
use realpath to resolve links
2021-09-26 18:36:33 -07:00
8255623874
mail: mount mail data directory into sftp container
...
fixes #794
2021-09-26 13:47:45 -07:00
d4edd771b5
sftp: prefix the id with app- and volume-
...
this helps the backend identify the type of mount
2021-09-25 23:35:44 -07:00
8553b57982
apptask: fix crash in configure
2021-09-25 21:39:54 -07:00
28f7fec44a
apptask: remove debugApp
2021-09-25 21:39:54 -07:00
54c6f33e5f
Fix broken invitation link
2021-09-25 17:36:56 -07:00
4523dd69c0
sftp: refactor
2021-09-25 17:12:38 -07:00
ddcafdec58
remove obsolete comment
2021-09-25 17:02:22 -07:00
d90beb18d4
eventlog: add service rebuild/restart/configure events
2021-09-24 10:22:45 -07:00
05e8339555
Fix typos in cert renewal
2021-09-23 17:54:54 -07:00
3090307c1d
tasks: remove superfluous update code
2021-09-23 17:44:41 -07:00
8644a63919
better debug
2021-09-23 17:38:55 -07:00
b135aec525
pass debug argument to background safe() calls
2021-09-23 17:28:22 -07:00
1aa96f7f76
demo: do not send login notification
2021-09-23 09:13:07 -07:00
6fbf7890cc
operator: mailbox route has to be protected
...
this is because operator cannot list domains
2021-09-22 12:45:13 -07:00
dff2275a9b
add a flag to disable ocsp globally
...
fixes #796
2021-09-22 09:13:16 -07:00
5b70c055cc
Fixup accessLevel tests
2021-09-22 12:07:31 +02:00
efa364414f
Fix viable app tests and disable currently broken ones
2021-09-22 11:37:27 +02:00
5883857e8c
sftp: remove requireAdmin setting. deprecated with operators
2021-09-21 22:43:04 -07:00
629908eb4c
operator: add a limits route to determine max app resource limits
2021-09-21 22:29:19 -07:00
214540ebfa
operator: add app task status route
2021-09-21 22:19:20 -07:00
d7bd3dfe7c
operator: add graphs route
2021-09-21 21:50:33 -07:00
0857378801
operator: add app update checker route
2021-09-21 19:58:38 -07:00
82d4fdf24e
operator: add route to get app event log
...
we cannot go via /cloudron/eventlog since that requires admin
2021-09-21 19:45:29 -07:00
06e5f9baa1
operators: make the terminal work
2021-09-21 18:27:54 -07:00
6c9b8c8fa8
apps: fix various operators issues
...
part of #791
2021-09-21 18:20:03 -07:00
fabd0323e1
Add missing await
2021-09-21 17:47:42 -07:00
bb2ad0e986
Implement operator role for apps
...
There are two main use cases:
* A consultant/contractor/external developer is given access to just an app.
* A "service" personnel (say upstream app author) is to be given access to single app
for debugging.
Since, this is an "app admin", they are also given access to apps to be consistent with
the idea that Cloudron admin has access to all apps.
part of #791
2021-09-21 12:30:02 -07:00
f44fa2cf47
apps: hasAccessTo -> canAccess
2021-09-21 10:13:06 -07:00
737412653f
Fix renamed function call
2021-09-21 18:58:18 +02:00
0cfc3e03bb
Use concrete resource name instead of generic "resource"
2021-09-20 22:42:34 -07:00
d1e8fded65
mail: expose 465 for mail submission
...
Port 465 is implicit TLS. rfc8314 is now pushing this as a standard
and some mail clients like outlook have already taken this to heart.
Note that this port is sometimes confused with SMTPS. Unlike SMTPS,
this is being used for "submissions" (by a client) as opposed to
server transfer protocol.
This is more secure than port 587+STARTTLS. We reject credentials
on insecure connections but it's too late.
See also:
https://www.fastmail.help/hc/en-us/articles/360058753834
https://www.agwa.name/blog/post/starttls_considered_harmful
https://linuxguideandhints.com/misc/port465.html
2021-09-20 15:42:16 -07:00
2a667cb985
attach debug object for background safe()
2021-09-20 10:36:49 -07:00
a36c51483c
no need to re-throw
2021-09-20 10:36:46 -07:00
e2fc785e80
rename getServiceIds to listServices
2021-09-20 09:15:49 -07:00
5a1a439224
Adjust comment about getAll
2021-09-20 18:04:01 +02:00
212d025579
Do not send new login notification if we have ghost user login
2021-09-20 17:56:37 +02:00
Girish Ramakrishnan