Commit Graph

15244 Commits

Author SHA1 Message Date
Johannes Zellner db3df9a3ea Move sftp login details to help dialog 2021-09-22 22:28:05 +02:00
Johannes Zellner ad7afe8646 Move sso indicator to the bottom and always show for non-admins 2021-09-22 21:59:37 +02:00
Girish Ramakrishnan c4a3240c22 operator: hide Email section
operator cannot list domains
2021-09-22 12:46:59 -07:00
Girish Ramakrishnan 6fbf7890cc operator: mailbox route has to be protected
this is because operator cannot list domains
2021-09-22 12:45:13 -07:00
Girish Ramakrishnan c37830697a move the sftp description to operator section 2021-09-22 10:58:12 -07:00
Girish Ramakrishnan dff2275a9b add a flag to disable ocsp globally
fixes #796
2021-09-22 09:13:16 -07:00
Girish Ramakrishnan 81fa792198 mail: port 465 (TLS) note 2021-09-22 08:48:45 -07:00
Johannes Zellner 5b70c055cc Fixup accessLevel tests 2021-09-22 12:07:31 +02:00
Johannes Zellner efa364414f Fix viable app tests and disable currently broken ones 2021-09-22 11:37:27 +02:00
Girish Ramakrishnan 5883857e8c sftp: remove requireAdmin setting. deprecated with operators 2021-09-21 22:43:04 -07:00
Girish Ramakrishnan 155baa346b sftp: remove the requireAdmin setting now that we have operators 2021-09-21 22:39:11 -07:00
Girish Ramakrishnan 629908eb4c operator: add a limits route to determine max app resource limits 2021-09-21 22:29:19 -07:00
Girish Ramakrishnan 26e9589842 operator: use limits route to get the max memory app can use 2021-09-21 22:29:05 -07:00
Girish Ramakrishnan b493355cbc operator: use the new app task status route 2021-09-21 22:19:34 -07:00
Girish Ramakrishnan 214540ebfa operator: add app task status route 2021-09-21 22:19:20 -07:00
Girish Ramakrishnan 4062872299 operator: use app graphs route 2021-09-21 21:52:59 -07:00
Girish Ramakrishnan d7bd3dfe7c operator: add graphs route 2021-09-21 21:50:33 -07:00
Girish Ramakrishnan 4d9af6651a operator: only show clone and config download button if cloudron admin 2021-09-21 20:01:16 -07:00
Girish Ramakrishnan 0857378801 operator: add app update checker route 2021-09-21 19:58:38 -07:00
Girish Ramakrishnan a8b50642f2 operator: use new app update check route 2021-09-21 19:55:48 -07:00
Girish Ramakrishnan f8ed17dd58 Use the new app eventlog route 2021-09-21 19:46:18 -07:00
Girish Ramakrishnan 82d4fdf24e operator: add route to get app event log
we cannot go via /cloudron/eventlog since that requires admin
2021-09-21 19:45:29 -07:00
Girish Ramakrishnan 06e5f9baa1 operators: make the terminal work 2021-09-21 18:27:54 -07:00
Girish Ramakrishnan aecba53de5 add operators UI 2021-09-21 18:20:18 -07:00
Girish Ramakrishnan 6c9b8c8fa8 apps: fix various operators issues
part of #791
2021-09-21 18:20:03 -07:00
Girish Ramakrishnan fabd0323e1 Add missing await 2021-09-21 17:47:42 -07:00
Girish Ramakrishnan bb2ad0e986 Implement operator role for apps
There are two main use cases:
* A consultant/contractor/external developer is given access to just an app.
* A "service" personnel (say upstream app author) is to be given access to single app
for debugging.

Since, this is an "app admin", they are also given access to apps to be consistent with
the idea that Cloudron admin has access to all apps.

part of #791
2021-09-21 12:30:02 -07:00
Girish Ramakrishnan f44fa2cf47 apps: hasAccessTo -> canAccess 2021-09-21 10:13:06 -07:00
Johannes Zellner 737412653f Fix renamed function call 2021-09-21 18:58:18 +02:00
Girish Ramakrishnan 0cfc3e03bb Use concrete resource name instead of generic "resource" 2021-09-20 22:42:34 -07:00
Girish Ramakrishnan d1e8fded65 mail: expose 465 for mail submission
Port 465 is implicit TLS. rfc8314 is now pushing this as a standard
and some mail clients like outlook have already taken this to heart.

Note that this port is sometimes confused with SMTPS. Unlike SMTPS,
this is being used for "submissions" (by a client) as opposed to
server transfer protocol.

This is more secure than port 587+STARTTLS. We reject credentials
on insecure connections but it's too late.

See also:

https://www.fastmail.help/hc/en-us/articles/360058753834
https://www.agwa.name/blog/post/starttls_considered_harmful
https://linuxguideandhints.com/misc/port465.html
2021-09-20 15:42:16 -07:00
Girish Ramakrishnan ee62e9c2e7 cloudflare: also show warning for SFTP access 2021-09-20 11:42:55 -07:00
Girish Ramakrishnan d4313fd6e5 show cloudflare port warning
fixes cloudron/box#802
2021-09-20 11:30:27 -07:00
Girish Ramakrishnan 398d9b0343 show manual warning for noop also 2021-09-20 11:13:29 -07:00
Girish Ramakrishnan 867d1dfcbe manual dns: show setup warning for bare domains as well 2021-09-20 11:06:28 -07:00
Girish Ramakrishnan d853598c5f clone: linode warning is obsolete 2021-09-20 10:52:20 -07:00
Girish Ramakrishnan 2a667cb985 attach debug object for background safe() 2021-09-20 10:36:49 -07:00
Girish Ramakrishnan a36c51483c no need to re-throw 2021-09-20 10:36:46 -07:00
Girish Ramakrishnan e2fc785e80 rename getServiceIds to listServices 2021-09-20 09:15:49 -07:00
Johannes Zellner 5a1a439224 Adjust comment about getAll 2021-09-20 18:04:01 +02:00
Johannes Zellner 212d025579 Do not send new login notification if we have ghost user login 2021-09-20 17:56:37 +02:00
Johannes Zellner f6a74731ba Create a separate section in the user edit dialog to reset 2fa 2021-09-20 17:25:58 +02:00
Johannes Zellner 7c70b9050d Fixup ghost tests 2021-09-20 14:59:26 +02:00
Johannes Zellner ca2cc0b86c Make cloudron-support --owner-login use the settings table 2021-09-20 13:20:41 +02:00
Johannes Zellner c6c62de68a Move ghosts into settings table 2021-09-20 13:05:42 +02:00
Girish Ramakrishnan f66af19458 page number starts from 1 2021-09-19 18:36:08 -07:00
Girish Ramakrishnan 50c68cd499 notifications: better oom message for redis
fixes #795
2021-09-19 17:34:41 -07:00
Girish Ramakrishnan 05b4f96854 eslint: bump ecmaVersion
we can now use the optional chaining operator ?. that is available
in node 14
2021-09-19 17:32:01 -07:00
Girish Ramakrishnan 8c66ec5d18 tokens: ID_CLI is never used 2021-09-17 15:21:56 -07:00
Girish Ramakrishnan 66a907ef48 Logout users without 2FA when mandatory 2fa is enabled
Fixes #803
2021-09-17 14:52:24 -07:00