jjkiers/cloudron-box
1
0
Fork 0
Code Issues Pull Requests 1 Actions Packages Projects Releases Wiki Activity
11,428 Commits 33 Branches 583 Tags
ce8f6c4c6bb8a8469ac90dc6a154beef4a1acdf3
Commit Graph

11428 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Girish Ramakrishnan
ce8f6c4c6b ubuntu 18: systemd kill ends up killing the script itself 
This is because KillMode=control-group by default

(cherry picked from commit c07c8b5bb8)
 2023-02-01 18:51:16 +01:00
Girish Ramakrishnan
0832ebf052 ubuntu 18: ExecReload does not work 
(cherry picked from commit 7bbc7c2306)
 2023-02-01 17:28:27 +01:00
Girish Ramakrishnan
7be176a3b5 reverseproxy: LE backdates certs by an hour 
https://community.letsencrypt.org/t/valid-from-date-on-cert-off-by-1-hour/103239
(cherry picked from commit 54add73d2a)
 2023-02-01 13:07:40 +01:00
Girish Ramakrishnan
4d9612889b print subject and fix notBefore parsing 
(cherry picked from commit 3f70edf3ec)
 2023-02-01 12:39:22 +01:00
Girish Ramakrishnan
29faa722ac typo 
(cherry picked from commit c63e0036cb)
 2023-02-01 12:39:16 +01:00
Girish Ramakrishnan
2442abf10b reverseproxy: force renewal only renews if not issued in last 5 mins 
otherwise, this leads to repeated renewals in checkCerts

(cherry picked from commit 3b9486596d)
 2023-02-01 12:05:11 +01:00
Girish Ramakrishnan
dcbec79b77 reverseproxy: get dates 
(cherry picked from commit eddfd20f24)
 2023-02-01 12:05:05 +01:00
Girish Ramakrishnan
f874acbeb9 reverseproxy: add option to force renewal for e2e 
(cherry picked from commit 690df0e5c4)
 2023-02-01 12:04:58 +01:00
Girish Ramakrishnan
3e01faeca3 7.3.6 changes 2023-01-31 18:06:25 +01:00
Girish Ramakrishnan
f7d7e36f10 reverseproxy: rebuild in 7.3 only 2023-01-31 18:02:13 +01:00
Girish Ramakrishnan
972f453535 reverseproxy: fix issue where renewed certs are not written to disk 
(cherry picked from commit ce9e78d23b)
 2023-01-31 17:59:30 +01:00
Girish Ramakrishnan
d441b9d926 backup cleaner: do not delete mail snapshot 
(cherry picked from commit 02b6aa93cb)
 2023-01-31 11:51:32 +01:00
Johannes Zellner
e0c996840d Use correct error object to avoid crash 
(cherry picked from commit 6f84fd3f71)
 2023-01-31 11:33:30 +01:00
Girish Ramakrishnan
3c5987cdad more 7.3.5 changes v7.3.5 2023-01-25 10:22:37 +01:00
Girish Ramakrishnan
e0673d78b9 dns: resolve cname records using unbound 
cname record can be external and the original NS may not respond to
recursive queries

(cherry picked from commit e4d9dbb558)
 2023-01-25 09:58:24 +01:00
Girish Ramakrishnan
08136a5347 More 7.3.4 changes 2023-01-17 11:18:31 +01:00
Girish Ramakrishnan
98b5c77177 s3: add listing check 
This is needed for situations like in cloudflare where the endpoint can
be mistakenly configured with the bucket name like https://xx.r2.cloudflarestorage.com/cloudron-backups .
The upload and del calls work but list and copy does not.

(cherry picked from commit 093fc98ae5)
 2023-01-17 11:18:05 +01:00
Girish Ramakrishnan
ea441d0b4b s3: throw any copy errors 
(cherry picked from commit 40bcfdba76)
 2023-01-17 11:18:00 +01:00
Girish Ramakrishnan
d8b5b49ffd Update manifest format for runtimeDirs change 2023-01-16 12:27:58 +01:00
Girish Ramakrishnan
13fd595e8b contabo: network can be real slow 
(cherry picked from commit 68f4f1ba85)
 2022-12-24 16:34:18 +01:00
Girish Ramakrishnan
5f11e430bd unbound: disable controller interface explicitly 
https://github.com/NLnetLabs/unbound/issues/806
(cherry picked from commit ae30fe25d7)
 2022-12-24 16:34:09 +01:00
Girish Ramakrishnan
cfa9f901c1 Fix crash in RBL check 
(cherry picked from commit d5793bc7c0)
 2022-12-09 00:00:46 +01:00
Girish Ramakrishnan
ce2c9d9ac5 reverseproxy: fix typo in regexp matching 
(cherry picked from commit d7d43c73fe)
 2022-12-08 10:06:48 +01:00
Girish Ramakrishnan
8d5039da35 7.3.5 changes 
(cherry picked from commit a198d1ea8d)
 2022-12-08 10:06:43 +01:00
Girish Ramakrishnan
c264ff32c2 du: fix crash when filesystem is cifs/nfs/sshfs 
(cherry picked from commit 67cde5a62c)
 2022-12-08 08:54:41 +01:00
Johannes Zellner
5e30bea155 Start with a default to not fail if no swap is present 
(cherry picked from commit d126f056fc)
 2022-12-08 08:54:33 +01:00
Johannes Zellner
2c63a89199 Disallow jupyter hub on demo 
(cherry picked from commit db5e0b8fdf)
 2022-12-08 08:54:27 +01:00
Girish Ramakrishnan
d547bad17a 7.3.4 changes v7.3.4 2022-11-30 21:19:03 +01:00
Girish Ramakrishnan
36ddb8c7c2 prune: normalize the tag 2022-11-30 21:12:00 +01:00
Girish Ramakrishnan
6c9aa1a77f Revert "prune all images instead of parsing output" 
This reverts commit d42c524a46.

This caused a bug that all app images are getting removed since we remove
all containers on infra update!
 2022-11-30 20:00:51 +01:00
Girish Ramakrishnan
27dec3f61e bump test version 2022-11-30 19:56:51 +01:00
Girish Ramakrishnan
79cb8ef251 add route to get platform status 2022-11-30 19:54:32 +01:00
Girish Ramakrishnan
f27847950c reverseproxy: notify cert change only in cron job 
notifying this in ensureCertificate does not work if provider changed in the middle anyway.
might as well get them to be in sync in the cronjob.

this change also resulted in tls addon getting restarted non-stop if you change from wildcard
to non-wildcard since ensureCertificate notifies the change.
v7.3.3 		2022-11-30 15:55:32 +01:00
Girish Ramakrishnan
69b46d82ab Fix typo 2022-11-30 14:56:40 +01:00
Girish Ramakrishnan
2a660fa59d change terminology to running and unresponsive 2022-11-30 14:41:48 +01:00
Girish Ramakrishnan
e942b8fe7e better debugs 2022-11-30 13:08:05 +01:00
Girish Ramakrishnan
1c3ef36a47 typo in graphite version 2022-11-30 10:37:28 +01:00
Girish Ramakrishnan
d42c524a46 prune all images instead of parsing output 
nothing is really lost since these are just unused images
 2022-11-30 10:01:50 +01:00
Girish Ramakrishnan
15cc624fa5 do string compare in certs 2022-11-30 09:59:19 +01:00
Girish Ramakrishnan
7e1c56161d reverseproxy: notify services immediately 
there are 2 cases where certs change (in db):
* LE cert is new or renewed
* fallback cert changes with fallback provider

if something is off i.e we crashed midway of above, then user can click the
rebuild button.
 2022-11-29 18:27:08 +01:00
Girish Ramakrishnan
77a5f01585 reverseproxy: rebuild only when needed 
re-creating nginx configs is only needed in 3 cases:
* provider changes. we create a rebuild file for this
* nginx config is somehow corrupt by external changes. user can click ui button

on startup, dashboard also always creates the nginx configs. so it's always up to provide the button
 2022-11-29 18:17:53 +01:00
Girish Ramakrishnan
3aa3cb6e39 tls: remove any old location certs 2022-11-29 17:58:51 +01:00
Girish Ramakrishnan
302f975d5c handle type mismatch 2022-11-29 17:13:58 +01:00
Girish Ramakrishnan
d23c65a7e7 reverseproxy: cert/key/csr are all pem 
just use strings instead of binary/string confusion
 2022-11-29 14:33:52 +01:00
Girish Ramakrishnan
1cf613dca6 Fix name of wildcard alias domain cert and configs 2022-11-29 13:35:17 +01:00
Girish Ramakrishnan
89127e1df7 reverseproxy: rework cert logic 
9c8f78a059 already fixed many of the cert issues.

However, some issues were caught in the CI:

* The TLS addon has to be rebuilt and not just restarted. For this reason, we now
  move things to a directory instead of mounting files. This way the container is just restarted.

* Cleanups must be driven by the database and not the filesystem . Deleting files on disk or after a restore,
  the certs are left dangling forever in the db.

* Separate the db cert logic and disk cert logic. This way we can sync as many times as we want and whenever we want.
 2022-11-29 11:07:23 +01:00
Girish Ramakrishnan
c844be5be1 make validateLocations return error 2022-11-28 22:16:22 +01:00
Girish Ramakrishnan
e15c6324e4 getDuplicateErrorDetails does not need domain map 2022-11-28 22:14:10 +01:00
Girish Ramakrishnan
b70572a6e9 dns: fqdn only needs domain string 
This is from the caas days, when we had hyphenated subdomains flag
 2022-11-28 21:56:25 +01:00
Girish Ramakrishnan
cab7409d85 mail: update haraka 2022-11-24 18:27:33 +01:00