Johannes Zellner
59ae1ac012
Move fallback certificate api to domains
2017-11-20 19:59:40 +01:00
Johannes Zellner
4cf2978088
Remove dns related settings api
...
This is replaced with the multi domain aware api
2017-11-20 19:59:40 +01:00
Johannes Zellner
ca3b6e542a
Require password for domain deletion route
2017-11-20 19:59:40 +01:00
Johannes Zellner
9dba816711
Add domain routes
2017-11-20 19:59:26 +01:00
Girish Ramakrishnan
06f8aa8f29
Remove dead code
...
getNonApprovedCode code flow is ununsed (and broken by design on
the appstore side).
2017-11-02 10:36:30 -07:00
Girish Ramakrishnan
36534f6bb2
Fix indent
2017-10-31 12:12:02 -07:00
Johannes Zellner
e8a93dcb1b
Add button to send test email
...
Fixes #419
2017-09-15 14:42:12 +02:00
Girish Ramakrishnan
d233ee2a83
ask password only for destructive actions
2017-09-08 15:14:37 -07:00
Johannes Zellner
cb8dcbf3dd
Lift the password requirement for app configure/update/restore actions
2017-09-01 20:08:22 +02:00
Girish Ramakrishnan
6a0ef7a1c1
Allow larger files to be uploaded
...
Note that other upload APIs like avatar are still limited to 1m by
the nginx config
2017-08-20 19:15:54 -07:00
Girish Ramakrishnan
52832c881a
Add upload and download for the webterminal
2017-08-18 21:19:48 -07:00
Girish Ramakrishnan
537fbff4aa
Use ws directly to handle new exec ws route
2017-08-18 19:46:18 -07:00
Johannes Zellner
c85f5b15c6
Reenable custom tcp upgrade handling
2017-08-18 11:26:05 -07:00
Johannes Zellner
52db28e876
Verify the websocket request
2017-08-18 11:25:49 -07:00
Johannes Zellner
65bc3491f6
enable timeout middleware again and reset it for all upgrade requests
2017-08-18 11:25:45 -07:00
Johannes Zellner
50074b936a
Integrate the terminal with the logs ui
2017-08-18 11:24:48 -07:00
Johannes Zellner
b0444edf7e
Add platform logstream api
2017-08-07 17:09:39 +02:00
Girish Ramakrishnan
631b830f4c
Add setting to toggle from address validation check
...
part of #366
2017-07-18 16:33:42 -07:00
Girish Ramakrishnan
19d825db48
refactor code into email.js
2017-06-28 22:20:35 -05:00
Girish Ramakrishnan
c4d313a2c0
generate smtp_forward.ini
...
part of #188
2017-06-27 11:08:50 -05:00
Girish Ramakrishnan
0cc980f539
Add setting for catch all address
...
Note that this is not a flag on the mailboxes because we might theoretically
support forwarding to some other external domain in the future.
Part of #33
2017-06-15 07:48:46 -07:00
Johannes Zellner
a7d7935451
Remove backup download code
2017-04-22 22:17:29 +02:00
Girish Ramakrishnan
0c706cffc0
Add API to get cloudron logs
...
part of #304
2017-04-18 15:19:26 -07:00
Girish Ramakrishnan
5f888341ea
move eventlog api into /api/v1/cloudron
2017-04-18 15:18:00 -07:00
Girish Ramakrishnan
cf69a8c4ce
move feedback route into /api/v1/feedback
2017-04-18 14:49:28 -07:00
Girish Ramakrishnan
4bda11edcf
Require admin for reboot, disk, graphs api
2017-04-18 14:31:55 -07:00
Johannes Zellner
7fdf491815
Add backuptask.js to work with new storage interface
2017-04-17 20:09:02 +02:00
Girish Ramakrishnan
588812a13a
Disable secure cookies for tests (since they use http)
2017-04-14 01:45:00 -07:00
Girish Ramakrishnan
f6a2406091
Use hat for secret instead of uuid
2017-04-13 11:05:46 -07:00
Johannes Zellner
c7134d2da3
Use a dynamic cookie secret
...
Fixes #300
2017-04-13 15:13:07 +02:00
Johannes Zellner
1692842bf0
Enable secure cookies
...
Fixes #299
2017-04-13 14:04:30 +02:00
Johannes Zellner
89bb690152
Only log failing REST requests
2017-04-10 14:17:26 +02:00
Johannes Zellner
f2312a6768
Add rest api to list disks where cloudron data is stored
2017-04-07 18:45:36 +02:00
Johannes Zellner
b9711d7b47
Move AMI instanceId verification to DNS setup
2017-04-03 22:19:01 +02:00
Girish Ramakrishnan
18e59c4754
Rate limit nginx routes that verify the password
...
Also remove rate-limit middleware
Test using something like:
ab -v 1 -n 1000 -c 10 -s 5 -m POST https://my .<doamain>/api/v1/developer/login
Part of #187
2017-03-27 00:06:42 -07:00
Johannes Zellner
39c39b861d
Require admins for authorized_keys route
2017-03-10 17:16:45 +01:00
Girish Ramakrishnan
7e44e7de82
Check outbound port 25
...
Fixes #243
2017-03-09 16:20:53 -08:00
Johannes Zellner
d49d76c1ee
add ssh route tests and fixup the code accordingly
2017-03-07 14:12:25 +01:00
Johannes Zellner
77ef212daa
Add SSH authorized_keys routes
2017-03-07 13:16:28 +01:00
Girish Ramakrishnan
ce31f56eb6
Keep configurePlainIP private
2017-01-17 10:32:46 -08:00
Girish Ramakrishnan
2eb5cab74b
enable route to set admin certificate
2017-01-17 10:01:05 -08:00
Girish Ramakrishnan
568a7f814d
rename func
2017-01-17 09:51:04 -08:00
Johannes Zellner
a0ef86f287
Remove now unused tutorial route and business logic
...
We can bring that back again if needed
2017-01-17 12:50:59 +01:00
Johannes Zellner
801367b68d
Use specific functions for configureAdmin (with domain) and configurePlainIp (always)
...
This prevents from double configuring on startup on caas cloudrons
2017-01-17 11:38:33 +01:00
Johannes Zellner
7f8db644d1
Use in-memory rate limit
...
Related to #187
2017-01-16 16:49:03 +01:00
Girish Ramakrishnan
2311107465
remove misleading comments
2017-01-09 12:35:39 -08:00
Girish Ramakrishnan
7811359b2f
Move cron.initialize to cloudron.js
2017-01-09 11:00:09 -08:00
Girish Ramakrishnan
21c66915a6
Refactor taskmanager resume flow
2017-01-09 10:49:34 -08:00
Girish Ramakrishnan
01f16659ac
remove unused requires
2017-01-09 10:33:23 -08:00
Girish Ramakrishnan
3b9b9a1629
ensure fallback cert exists before platform is started
2017-01-09 10:28:28 -08:00