Girish Ramakrishnan
44582bcd4b
download the certificate as binary
2015-12-10 11:07:10 -08:00
Girish Ramakrishnan
5c73aed953
remove unused require
2015-12-10 09:54:21 -08:00
Girish Ramakrishnan
e1ec48530e
acme: create cert file with the chain
2015-12-10 09:11:08 -08:00
Girish Ramakrishnan
54c4053728
add LE cross signed
...
https://letsencrypt.org/certs/lets-encrypt-x1-cross-signed.pem.txt
2015-12-10 09:06:36 -08:00
Girish Ramakrishnan
79ffb0df5c
acme: openssl does not play well with buffers. use files instead
2015-12-10 08:57:53 -08:00
Girish Ramakrishnan
c510952c88
s/privateKeyPem/accountKeyPem
2015-12-09 19:23:19 -08:00
Girish Ramakrishnan
6109da531d
acme: use safe
2015-12-09 19:22:53 -08:00
Girish Ramakrishnan
56877332db
pull in urlBase64Encode
2015-12-09 18:34:27 -08:00
Girish Ramakrishnan
6fc972d160
set default response type to text/plain
2015-12-09 18:34:13 -08:00
Girish Ramakrishnan
5346153d9b
add ursa
2015-12-09 18:33:35 -08:00
Girish Ramakrishnan
aaf266d272
convert cert to pem
2015-12-08 20:05:14 -08:00
Girish Ramakrishnan
0750db9aae
rename function
2015-12-08 19:54:37 -08:00
Girish Ramakrishnan
316976d295
generate the acme account key on first run
2015-12-08 19:42:33 -08:00
Girish Ramakrishnan
593b5d945b
use this fake email as the account owner for now
2015-12-08 19:15:17 -08:00
Girish Ramakrishnan
88f0240757
serve acme directory from nginx
2015-12-08 19:04:48 -08:00
Girish Ramakrishnan
f5c2f8849d
Add LE staging url for testing
2015-12-08 18:25:45 -08:00
Girish Ramakrishnan
5c4a8f7803
add acme support
...
this is not used anywhere since we want to wait for rate limits to be
fixed.
The current limits are :
Rate limit on registrations per IP is currently 10 per 3 hours
Rate limit on certificates per Domain is currently 5 per 7 days
The domains are counted based on https://publicsuffix.org/list/ (not TLD). Like appspot.com, herokuapp.com while not a TLD, it a public suffix. This list allows browser authors to limit how cookies can be manipulated by the subdomain of those domains. like app1.appspot.com cannot go and change things of app2.appspot.com.
This means
a) we cannot use LE for cloudron.me, cloudron.us (or we have to get on that list)
b) even for custom domains we get only 5 certs every 7 days. And one of them is taken for my.xx domain.
https://community.letsencrypt.org/t/public-beta-rate-limits/4772/38
2015-12-08 15:52:30 -08:00
Girish Ramakrishnan
5b8fdad5cb
Revert "remove targetBoxVersion checks since all apps are now ported"
...
This reverts commit d104f2a077
2015-12-05 02:29:06 -08:00
Girish Ramakrishnan
fe819f95ec
always return logs regardless of state
2015-12-04 13:13:54 -08:00
Girish Ramakrishnan
be6728f8cb
send support an email for app crashes
2015-12-02 16:50:00 -08:00
Girish Ramakrishnan
24d3a81bc8
remove targetBoxVersion checks since all apps are now ported
2015-12-02 15:02:16 -08:00
Girish Ramakrishnan
268c7b5bcf
always create an isolated network ns
2015-12-01 13:59:45 -08:00
Girish Ramakrishnan
64716a2de5
cloudron exec: disable links for subcontainers
...
Dec 01 08:36:53 girish.cloudron.us node[5431]: Error: HTTP code is 409 which indicates error: undefined - Conflicting options: --net=container can't be used with links. This would result in undefined behavior
2015-12-01 00:51:41 -08:00
Girish Ramakrishnan
d2c8457ab1
reset health when app is stopped
2015-11-30 15:41:56 -08:00
Johannes Zellner
667cb84af7
Protect from crash on shutdown
2015-11-27 10:05:57 +01:00
Girish Ramakrishnan
df8653cdd5
Do not set Hostname for subcontainers
2015-11-26 19:26:29 -08:00
Girish Ramakrishnan
32f677ca0d
make app subcontainers share network namespace with app
...
pid namespace sharing is coming in https://github.com/docker/docker/issues/10163
2015-11-26 19:18:31 -08:00
Johannes Zellner
6f5408f0d6
Make all json blobs in db TEXT fields
2015-11-26 12:17:02 +01:00
Johannes Zellner
23c04fb10b
Use console.error() to report update errors
2015-11-26 12:04:39 +01:00
Johannes Zellner
0c5d6b1045
Set app backup progress only after we check the error
2015-11-26 12:00:44 +01:00
Johannes Zellner
33f30decd1
Support redirectURIs which already contain query params
2015-11-25 17:50:39 +01:00
Johannes Zellner
9595b63939
Correctly encode the redirectURI in oauth callback
2015-11-25 17:45:18 +01:00
Johannes Zellner
b9695b09cd
Fix crash due to wrong AppsError usage
2015-11-25 13:49:20 +01:00
Girish Ramakrishnan
606885b23c
fix typo
2015-11-23 13:51:14 -08:00
Girish Ramakrishnan
bc7b8aadc4
vultr: fix waitForSnapshot call
2015-11-23 13:39:02 -08:00
Girish Ramakrishnan
d136b2065f
ignore vultr transfer image call
2015-11-23 13:35:36 -08:00
Girish Ramakrishnan
3b2683463d
localize transfer logic for DO
2015-11-23 13:35:05 -08:00
Girish Ramakrishnan
989730d402
wait for snapshot
2015-11-23 13:19:23 -08:00
Girish Ramakrishnan
50f7209ba2
print the provider
2015-11-23 12:46:08 -08:00
Girish Ramakrishnan
44b728c660
remove get_image_id api
2015-11-23 12:45:09 -08:00
Girish Ramakrishnan
9abc5bbf96
better error handling
2015-11-23 12:37:30 -08:00
Girish Ramakrishnan
56dd936e9c
create systemd log dir if needed
2015-11-23 12:33:45 -08:00
Girish Ramakrishnan
e982281cd4
install acl
2015-11-23 11:32:05 -08:00
Girish Ramakrishnan
a6b7b5fa94
complete vultr backend
2015-11-23 11:30:24 -08:00
Girish Ramakrishnan
ef00114aab
rename arg box to name
2015-11-23 11:20:21 -08:00
Girish Ramakrishnan
ba4edc5c0e
implement some vultr api
2015-11-23 11:01:52 -08:00
Girish Ramakrishnan
dae2d81764
remove image_region as well
2015-11-23 10:49:09 -08:00
Girish Ramakrishnan
cee9cd14c0
hardcode the box size to smallest
2015-11-23 10:46:16 -08:00
Girish Ramakrishnan
f1ec110673
vultr: getSshKeyId
2015-11-23 10:27:27 -08:00
Girish Ramakrishnan
7104a3b738
use debug to put messages in stderr
2015-11-23 10:14:40 -08:00
