Commit Graph

16964 Commits

Author SHA1 Message Date
Girish Ramakrishnan c6da8c8167 make ipv4 and ipv6 settings separate 2022-02-15 12:36:05 -08:00
Girish Ramakrishnan 7af69e080f network: hide IPv6 field as needed 2022-02-15 12:08:57 -08:00
Girish Ramakrishnan 1c32495f22 Show IPv6 address separately 2022-02-15 12:08:57 -08:00
Girish Ramakrishnan 0dbe8ee8f2 godaddy: invalid ipv6 2022-02-15 12:01:52 -08:00
Girish Ramakrishnan f8b124caa6 do not check if we have ipv6 to enable ipv6 2022-02-15 11:57:27 -08:00
Girish Ramakrishnan 125325721f add mail manager tests 2022-02-15 10:30:26 -08:00
Johannes Zellner d51d81cdfa Sort languages according to localeCompare() 2022-02-15 17:31:32 +01:00
Johannes Zellner aa17196120 Better integrate the app grid item action button 2022-02-15 15:26:03 +01:00
Johannes Zellner 262e06dc15 Do not overwrite the language set in localstorage 2022-02-14 18:16:50 +01:00
Johannes Zellner 9a148ab7f8 Fetch 5k users at once 2022-02-14 17:34:36 +01:00
Johannes Zellner 2ec4ad934d Add an explicit Client.getAllUsers function 2022-02-14 14:55:04 +01:00
Johannes Zellner ac57e433b1 Improve errorhandling in netcup dns 2022-02-14 10:57:06 +01:00
Johannes Zellner b4bbdda730 Fix user export based on client.js api change 2022-02-12 19:47:00 +01:00
Girish Ramakrishnan de84cbc977 add note on turn container host mode 2022-02-11 23:08:56 -08:00
Girish Ramakrishnan d6d7bc93e8 firewall: add ipxtables helper 2022-02-11 22:56:23 -08:00
Girish Ramakrishnan 8f4779ad2f Update addons to listen on ipv6
docker sets up the hostname DNS to be ipv4 and ipv6

Part of #264
2022-02-10 10:53:46 -08:00
Girish Ramakrishnan 6aa034ea41 platform: Only re-create docker network on version change 2022-02-10 09:32:22 -08:00
Johannes Zellner d0002eb7ca Fix bug when location is set without error 2022-02-10 15:41:41 +01:00
Girish Ramakrishnan ca83deb761 Docker IPv6 support
Docker's initial IPv6 support is based on allocating public IPv6 to containers.
This approach has many issues:
* The server may not get a block of IPv6 assigned to it
* It's complicated to allocate a block of IPv6 to cloudron server on home setups
* It's unclear how dynamic IPv6 is. If it's dynamic, then should containers be recreated?
* DNS setup is complicated
* Not a issue for Cloudron itself, but with -P, it just exposed the full container into the world

Given these issues, IPv6 NAT is being considered. Even though NAT is not a security mechanism as such,
it does offer benefits that we care about:
* We can allocate some private IPv6 to containers
* Have docker NAT66 the exposed ports
* Works similar to IPv4

Currently, the IPv6 ports are always mapped and exposed. The "Enable IPv6" config option is only whether
to automate AAAA records or not. This way, user can enable it and 'sync' dns and we don't need to
re-create containers etc. There is no inherent benefit is not exposing IPv6 at all everywhere unless we find
it unstable.

Fixes #264
2022-02-09 23:54:53 -08:00
Girish Ramakrishnan ff664486ff do not start if platform.start does not work 2022-02-09 23:15:37 -08:00
Girish Ramakrishnan c5f9c80f89 move comment to unbound.conf 2022-02-09 23:15:37 -08:00
Girish Ramakrishnan 852eebac4d move cloudron network creation to platform code
this gives us more control on re-creating the network with different
arguments/options when needed.
2022-02-09 23:15:37 -08:00
Girish Ramakrishnan f0f9ade972 sftp: listen on ipv6 2022-02-09 23:15:37 -08:00
Girish Ramakrishnan f3ba1a9702 unbound: always disable ip6 during install
this was br0ken anway because "-s" is always false here. this is because
/proc/net/if_inet6 which has 0 size (but has contents!).
2022-02-09 23:15:37 -08:00
Girish Ramakrishnan c2f2a70d7f vultr has ufw enabled by default 2022-02-09 23:15:37 -08:00
Girish Ramakrishnan f18d108467 nginx: add listen note 2022-02-09 23:15:37 -08:00
Girish Ramakrishnan 566def2b64 Disable IPv6 temporary address 2022-02-09 12:17:42 -08:00
Girish Ramakrishnan c9e3da22ab Revert "Disable userland proxy in new installations"
This reverts commit 430f5e939b.

Too early, apparently there is a bunch of issues and this is why
it's not disabled upstream - https://github.com/moby/moby/issues/14856
2022-02-09 09:45:04 -08:00
Johannes Zellner a764a8ad4a Expand the notification click area 2022-02-09 18:20:58 +01:00
Johannes Zellner 6552747290 Avoid showing incomplete loading state in support view 2022-02-09 17:04:20 +01:00
Johannes Zellner 15a4a7071e Remove now unsed translation strings 2022-02-09 17:00:12 +01:00
Johannes Zellner 219764923b Replace dyndns checkbox with toggle button 2022-02-09 16:55:36 +01:00
Johannes Zellner 8b35d01f68 Make the linter happy 2022-02-09 16:49:53 +01:00
Johannes Zellner 2afa13bd7c Replace checkbox with toggle button for ipv6 2022-02-09 16:48:38 +01:00
Johannes Zellner 23d34e59b2 Remove space 2022-02-09 16:31:38 +01:00
Johannes Zellner 2d999eae9c Update translations 2022-02-09 16:22:52 +01:00
Johannes Zellner 7fc92101d5 Avoid using unnecessary checkbox for solr config 2022-02-09 16:22:44 +01:00
Johannes Zellner 12fa9731b8 Make user filter translatable 2022-02-09 14:35:33 +01:00
Johannes Zellner c67a46e2a9 Actually send the overwriteDns for the clone api 2022-02-08 22:16:49 +01:00
Johannes Zellner 8a36e2c730 Half way fix for clone, we need to adjust the error reporting for the clone api from the backend 2022-02-08 22:11:41 +01:00
Johannes Zellner 7a66a104ad Update translations 2022-02-08 21:52:15 +01:00
Johannes Zellner 06d60d5aea Implement dns overwrite and pre-flight checks for multi domain clone 2022-02-08 21:52:03 +01:00
Girish Ramakrishnan 430f5e939b Disable userland proxy in new installations
https://github.com/moby/moby/issues/8356

The initial motivation for userland proxy is to enable localhost
connections since the linux kernel did not allow loopback connections
to be routed.

With hairpin NAT support (https://github.com/moby/moby/pull/6810), this
seems to be solved.
2022-02-08 11:51:37 -08:00
Girish Ramakrishnan 7bfa237d26 Update docker to 20.10.12 2022-02-08 10:57:24 -08:00
Johannes Zellner b4335f3d0d Fix angular expression typo 2022-02-08 18:05:53 +01:00
Johannes Zellner 0cc46a8dba Relayout userdirectory toolbar 2022-02-08 15:05:27 +01:00
Girish Ramakrishnan 2a2b509837 Fix error messages of clone UI 2022-02-07 23:02:31 -08:00
Girish Ramakrishnan 886515e444 clone UI now takes secondary domains 2022-02-07 22:56:34 -08:00
Girish Ramakrishnan d5640d45f7 do pre-flight dns check for secondary domains 2022-02-07 22:44:54 -08:00
Girish Ramakrishnan 27ec200fc0 main -> primary 2022-02-07 17:23:17 -08:00