Commit Graph

8977 Commits

Author SHA1 Message Date
Johannes Zellner 21d7dd873e Adjust feature set 2025-05-06 18:49:56 +02:00
Girish Ramakrishnan dc49dd0a94 firewall: do not allow internal docker IPs 2025-05-06 16:37:36 +02:00
Girish Ramakrishnan a7c6e36ec3 replace ipaddr.js 2025-05-06 16:26:35 +02:00
Girish Ramakrishnan 86109127b8 test: fix domains test for dashboard at index0 2025-05-06 10:31:06 +02:00
Girish Ramakrishnan fde6e5f1fb add note on why we use ipaddr.process instead of ipaddr.parse 2025-05-05 17:34:55 +02:00
Johannes Zellner d5a8731850 replace proxy auth page with direct oidc redirect 2025-04-29 12:18:22 +02:00
Girish Ramakrishnan d8a9ef8187 constants: DOCKER_IPv6_SUBNET 2025-04-28 18:20:04 +02:00
Girish Ramakrishnan 475239bd02 constants: add some notes 2025-04-28 18:06:39 +02:00
Johannes Zellner 6e06e05f12 Push dashboard domain at index 0 of domain listing 2025-04-28 16:41:58 +02:00
Johannes Zellner aa46285b8f Bring back immich vectors hook in postgres addon 2025-04-28 15:43:15 +02:00
Johannes Zellner 5be2eb1c9a Fix superagent usage 2025-04-19 16:33:12 +02:00
Girish Ramakrishnan 06768833cc typo 2025-04-16 13:46:41 +02:00
Girish Ramakrishnan 51d1efead6 nginx: disable gzip for SSE endpoints
Gzip buffers output by default to optimize compression. This buffering delays the transmission of
events—breaking the “real-time” feel of SSE. Instead of seeing each event instantly, the client
might see a batch of events all at once after the gzip buffer flushes (which could take seconds or more).

gzip_types is a whitelist . But certain modules like proxies can not honor it.
2025-04-16 08:46:25 +02:00
Girish Ramakrishnan 04ff495066 underscore: handle null in isEqual 2025-04-15 14:39:49 +02:00
Johannes Zellner df408505e0 Ensure we include a much higher backups count for cleanup 2025-04-15 14:06:29 +02:00
Girish Ramakrishnan b391f4bc12 mounts: set encoding 2025-04-09 15:48:53 +02:00
Girish Ramakrishnan 65f066d391 sshfs: implement rm via ssh
this is similar to change we did for cp -r . sshfs is often flaky with lots
of concurrent operations
2025-04-09 15:48:53 +02:00
Girish Ramakrishnan 8cdae41051 update container for auth free healthcheck
this allows us to check status from cloudron-support script more easily
2025-04-08 13:25:29 +02:00
Girish Ramakrishnan b2bb29911c mail: fix crash in haraka
https://github.com/haraka/Haraka/issues/3455
2025-04-03 08:05:14 +02:00
Johannes Zellner f82f3fa858 Fix long standing Healthcheck typo 2025-04-02 11:47:16 +02:00
Girish Ramakrishnan 69d4514716 mysql: fix warning 2025-04-02 09:13:19 +02:00
Johannes Zellner 2a6544b794 We always require a language property when setting a users language 2025-03-29 21:15:48 +01:00
Johannes Zellner f0f04ce3ff Migrate openid error page to vuejs 2025-03-29 15:37:47 +01:00
Girish Ramakrishnan 16caeb5400 Update haraka to 3.1.0 2025-03-29 08:44:50 +01:00
Johannes Zellner 79093bf61c Update sftp addon to fix recursive chown 2025-03-28 11:15:01 +01:00
Girish Ramakrishnan 785db03650 unbound: increase tries, since it fails often 2025-03-26 14:47:46 +01:00
Girish Ramakrishnan de6837adb0 mail: fix warning about low client_limit 2025-03-25 15:27:26 +01:00
Girish Ramakrishnan d2de2c7093 postgres: fix illegal instruction issue
we have to disable -march=native when compiling as per
https://github.com/pgvector/pgvector?tab=readme-ov-file#portability

https://github.com/pgvector/pgvector/issues/143
https://github.com/pgvector/pgvector/issues/752
https://github.com/pgvector/pgvector/issues/389
(cherry picked from commit e3982e48ea)
2025-03-18 23:40:32 +01:00
Girish Ramakrishnan dca9266697 isValidHostname is gone 2025-03-17 15:54:24 +01:00
Girish Ramakrishnan 8f6656d657 superagent: can pass buffer to attach 2025-03-13 18:15:37 +01:00
Girish Ramakrishnan ba1636033e typo 2025-03-10 21:23:55 +01:00
Girish Ramakrishnan 8a51582d8a mail: restart apps using email addon
move this logic from frontend to backend
2025-03-10 21:15:06 +01:00
Girish Ramakrishnan 5d88e86462 sendmail: add requiresValidCertificate
some apps really want a valid certificate to send mail and upstream
authors won't add support to skip self-signed certs or skip host name
check in cert. In our case, the issue is that we use 'mail' as the
server name despite having valid certs.

this flag will set the server name to the full mail server fqdn and
also reconfigure the app as needed when the mail server name changes.

we also set up the mail server name to resolve to internal IP because
no mail port is exposed when we are not receiving emails!
2025-03-08 13:15:53 +01:00
Girish Ramakrishnan 5342dae5b3 tokens: add ip restriction 2025-03-07 17:50:50 +01:00
Girish Ramakrishnan 2b0fd17fbf directoryserver: init allowlist as empty string 2025-03-07 15:16:59 +01:00
Girish Ramakrishnan f0848e23c7 replace validator module 2025-03-07 12:32:50 +01:00
Girish Ramakrishnan 3dc6e274f0 use ipaddr.js for ip validation 2025-03-07 12:32:50 +01:00
Johannes Zellner b7b738c92b Add cron job to cleanup exired oidc objects 2025-03-05 11:48:33 +01:00
Girish Ramakrishnan a669144d16 graphite: static IP
this allows some predictible connectivity from apps to play around
2025-03-03 17:06:20 +01:00
Johannes Zellner da8a7041d1 Fix fs promise usage in sftp addon 2025-03-02 15:13:37 +01:00
Girish Ramakrishnan 6aca198428 domains: add option to set custom/vanity nameservers
this flag skips the NS name validation when a custom nameserver is set
i.e not to the provider's NS but uses the provider's API.
2025-03-02 09:52:08 +01:00
Girish Ramakrishnan 3f3bb4d3b7 base image 5.0.0 2025-02-28 22:52:05 +01:00
Girish Ramakrishnan 148e3dc65b boxerror: error must be string or Error 2025-02-27 16:55:12 +01:00
Girish Ramakrishnan 558620cdfa deprecate ubuntu 20.04 support 2025-02-26 16:38:04 +01:00
Girish Ramakrishnan 7b62c9e8a4 superagent: fix field() multipart generation 2025-02-26 15:08:39 +01:00
Girish Ramakrishnan b44d65d265 superagent: use private fields 2025-02-26 14:56:25 +01:00
Girish Ramakrishnan 1197693591 test: add root dn response 2025-02-26 14:14:42 +01:00
Girish Ramakrishnan 81f91f3324 lint 2025-02-26 14:03:30 +01:00
Girish Ramakrishnan f78f6634fa ldap: automatically detect if server supports pagination 2025-02-26 12:18:32 +01:00
Girish Ramakrishnan 28eee609de ldap: add pagination to supportedControl 2025-02-26 12:05:20 +01:00