Girish Ramakrishnan
db03053e05
cloudflare: remove async
2022-03-08 14:30:27 -08:00
Girish Ramakrishnan
193dff8c30
Better log
v7.1.3
2022-03-03 10:08:34 -08:00
Girish Ramakrishnan
59582d081a
port25check: log the error message
2022-03-03 09:58:58 -08:00
Girish Ramakrishnan
ef684d32a2
port25checker: Use random tick to not bombard our checker service
2022-03-03 09:57:41 -08:00
Girish Ramakrishnan
fc2a326332
mysql: Fix default collation
...
https://github.com/mattermost/mattermost-server/issues/19602#issuecomment-1057360142
> SELECT @@character_set_database, @@collation_database;
This will show utf8mb4 and utf8mb4_0900_ai_ci (was utf8mb4_unicode_ci)
To see the table schemas:
> SELECT table_schema, table_name, table_collation FROM information_schema.tables;
2022-03-02 22:34:30 -08:00
Girish Ramakrishnan
e66a804012
ufw may not be installed
2022-03-02 19:36:32 -08:00
Girish Ramakrishnan
5afa7345a5
route53: check permissions to perform route53:ListResourceRecordSets
...
otherwise, at install time we see "DNS credentials for xx are invalid. Update it in Domains & Certs view"
the exact error from route 53 is:
User: arn:aws:iam::xx:user/yy is not authorized to perform: route53:ListResourceRecordSets on resource: arn:aws:route53:::hostedzone/zz because no identity-based policy allows the route53:ListResourceRecordSets action
2022-03-02 10:44:52 -08:00
Girish Ramakrishnan
c100be4131
dns: filter out link local addresses
...
Unlike IPv4, IPv6 requires a link-local address on every network interface on which the IPv6 protocol is enabled, even when routable addresses are also assigned
2022-03-01 12:13:59 -08:00
Girish Ramakrishnan
d326d05ad6
sysinfo: add noop provider
2022-03-01 12:05:01 -08:00
Girish Ramakrishnan
eb0662b245
Up the json size to 2mb for block list route
...
https://forum.cloudron.io/topic/6575/cloudron-7-1-2-firewall-not-ipv6-ready
2022-03-01 11:57:50 -08:00
Johannes Zellner
b92641d1b8
Update ldapjs to 2.3.2
2022-03-01 17:36:09 +01:00
Girish Ramakrishnan
7912d521ca
7.1.3 changes
2022-02-28 14:26:37 -08:00
Johannes Zellner
71dac64c4c
Only allow impersonation for equal or less powerful roles
2022-02-28 20:42:33 +01:00
Girish Ramakrishnan
aab6f222b3
better log
2022-02-28 11:04:44 -08:00
Girish Ramakrishnan
1cb1be321c
remove usage of deprecated fs.rmdir
2022-02-25 16:43:20 -08:00
Girish Ramakrishnan
2434e81383
backups: fix incorrect mountpoint check with managed mounts
v7.1.2
2022-02-25 12:53:05 -08:00
Girish Ramakrishnan
62142c42ea
Fix crash
2022-02-25 11:03:16 -08:00
Girish Ramakrishnan
0ae30e6447
disable routes/test/apps-test for now
2022-02-24 20:50:35 -08:00
Girish Ramakrishnan
1a87856655
eventlog: log event on alias update
2022-02-24 20:30:42 -08:00
Girish Ramakrishnan
a3e097d541
add missing awaits for eventlog.add
2022-02-24 20:04:46 -08:00
Girish Ramakrishnan
9a6694286a
eventlog: event type typo
2022-02-24 19:59:29 -08:00
Girish Ramakrishnan
a662a60332
eventlog: add event for certificate cleanup
2022-02-24 19:55:43 -08:00
Girish Ramakrishnan
69f3b4e987
better debugs
2022-02-24 12:57:56 -08:00
Girish Ramakrishnan
481586d7b7
add missing return
2022-02-24 12:51:27 -08:00
Girish Ramakrishnan
34c3a2b42d
mail: increase pool_timeout
2022-02-24 12:25:38 -08:00
Johannes Zellner
c4a9295d3e
Fix typo
2022-02-24 19:10:04 +01:00
Girish Ramakrishnan
993ff50681
cloudron-firewall: fix crash when ports are whitelisted
...
it failed with:
Feb 22 08:52:30 strawberry cloudron-firewall.sh[14300]: /home/yellowtent/box/setup/start/cloudron-firewall.sh: line 14: iptables --wait 120 --wait-interval 1: command not found
the root cause was that IFS was getting set but not getting reset later.
the IFS=xx line is not line local as it seems to appear (just a bash statement)
2022-02-22 00:56:57 -08:00
Girish Ramakrishnan
ba5c2f623c
remove supererror, not really used
2022-02-21 17:34:51 -08:00
Girish Ramakrishnan
24a16cf8b4
redis: fix issue where protected mode was enabled with no password
v7.1.1
2022-02-21 12:21:37 -08:00
Girish Ramakrishnan
5d34460e7f
typo
2022-02-21 12:02:09 -08:00
Girish Ramakrishnan
64b6187a26
tests: make the network ipv6
2022-02-21 12:01:12 -08:00
Girish Ramakrishnan
c15913a1b2
add to changes
2022-02-20 17:46:37 -08:00
Girish Ramakrishnan
8ef5e35677
cloudron-firewall: add retry for xtables lock
...
cloudron-firewall.sh[30679]: ==> Setting up firewall
cloudron-firewall.sh[30693]: iptables: Chain already exists.
cloudron-firewall.sh[30694]: ip6tables: Chain already exists.
cloudron-firewall.sh[30699]: ipset v7.5: Set cannot be created: set with the same name already exists
cloudron-firewall.sh[30702]: ipset v7.5: Set cannot be created: set with the same name already exists
cloudron-firewall.sh[30740]: Another app is currently holding the xtables lock. Perhaps you want to use the -w option?
2022-02-20 17:42:20 -08:00
Girish Ramakrishnan
c55d1f6a22
Add to changes
2022-02-19 15:27:51 -08:00
Girish Ramakrishnan
8b5b13af4d
leave note on br0ken usage of async
2022-02-19 14:26:48 -08:00
Girish Ramakrishnan
dfd51aad62
ensure dkim keys
...
a previous migration moved dkim keys into the database but looks like
sometimes the domain has empty dkim keys. this could be because we do not
add mail domain and domain in a transaction, so it's possible dkim was not
generated?
2022-02-19 14:23:30 -08:00
Girish Ramakrishnan
2b81120d43
cloudron-setup: say that it is cloudron we are installing
2022-02-18 13:38:52 -08:00
Girish Ramakrishnan
91dc91a390
fix dns tests
2022-02-18 11:36:14 -08:00
Johannes Zellner
b886a35cff
Fixup gcdns calls. The api returns an array as result
...
https://github.com/googleapis/google-cloud-node/issues/2556
https://github.com/googleapis/google-cloud-node/issues/2896
v7.1.0
2022-02-18 19:46:03 +01:00
Girish Ramakrishnan
e59efc7e34
bump free space requirement to 2GB
2022-02-18 09:56:42 -08:00
Johannes Zellner
2160644124
Lets not stretch our luck
2022-02-18 18:40:49 +01:00
Johannes Zellner
b54c4bb399
Fixup cn attribute for ldap to be according to spec
2022-02-18 17:43:47 +01:00
Girish Ramakrishnan
feaa5585e1
mailbox: fix crash when domain not found
2022-02-17 18:03:56 -08:00
Girish Ramakrishnan
6f7bede7bd
listen on ipv6 as well for port 53
2022-02-17 11:56:08 -08:00
Girish Ramakrishnan
eb3e87c340
add debug
2022-02-17 11:08:22 -08:00
Girish Ramakrishnan
26a8738b21
make user listing return non-private fields
...
this was from a time when normal users could install apps
2022-02-16 21:22:38 -08:00
Girish Ramakrishnan
012a3e2984
ensure certificate of secondary domains
2022-02-16 20:32:04 -08:00
Girish Ramakrishnan
dfebda7170
Remove deprecated fs.rmdirSync
2022-02-16 20:30:33 -08:00
Girish Ramakrishnan
149f778652
wildcard: better error message
2022-02-16 20:22:50 -08:00
Girish Ramakrishnan
773dfd9a7b
ipv6 support in firewall allow and block lists
2022-02-16 13:39:35 -08:00