Testing (#113)

* Stop auto updating for now

* Update manifest.json

* Update ynh_install_go

* Update ynh_install_go

* Update ldap.src

* Add feature to readme

* Auto-update README

* 0.6.2

* Auto-update README

* cleaning

* Auto-update README

* Auto-update README

* Update systemd.service

* Upgrade auto-updater (#106)

* [autopatch] Upgrade auto-updater

* Auto-update README

---------

Co-authored-by: tituspijean <titus@pijean.ovh>

* Galene v2 (#104)

* v2

* Fix

* Auto-update README

* Fix

* fix

* Fix

* Fix

* Auto-update README

* Fix

* Auto-update README

* Fix

* Auto-update README

* Update tests.toml

* Fix

* Update manifest.toml

* Update manifest.toml

* Update tests.toml

* Update tests.toml

* Update tests.toml

* Update tests.toml

* Update tests.toml

* Update restore

* Update install

* Update upgrade

* Update manifest.toml

* Update ynh_install_go

* Update change_url

* Auto-update README

* Update change_url

* fix

* Update change_url

* Update change_url

* Update manifest.toml

* fix

* Update systemd.service

* Update systemd.service

* Update systemd.service

* Update systemd.service

* Update systemd.service

* Update upgrade

* Update upgrade

* Update install

* Update upgrade

* Update manifest.toml

---------

Co-authored-by: yunohost-bot <yunohost@yunohost.org>

* Update manifest.toml

* Auto-update README

* Update manifest.toml

* Fix

* Update DESCRIPTION.md

* Auto-update README

* Create POST_INSTALL.md

* Auto-update README

* fix

* Auto-update README

* Create POST_INSTALL_fr.md

* Fix

* Fix

* Update change_url

* Update manifest.toml

* Delete app.src

* fix

* Update manifest.toml

* cleaning

* Update manifest.toml

* Update manifest.toml

* Update manifest.toml

* Update manifest.toml

* Update manifest.toml

* Update install

* Password generator (#109)

* fix

* Update install

* Update install

* Update install

* Update install

* Update manifest.toml

* Update install

* Update manifest.toml

* fix

* Update install

* fix

* fix

* Update config.json

* fix

* Update manifest.toml

* Auto-update README

* Update upgrade

* Update upgrade

* fix

* Update restore

* Update _common.sh

* hash password

* autoupdate

* Update manifest.toml

* Update manifest.toml

* Auto-update README

* Update manifest.toml

* 0.7.0

* Auto-update README

* Update ldap.service

* add invite user

* Auto-update README

---------

Co-authored-by: yunohost-bot <yunohost@yunohost.org>
Co-authored-by: YunoHost Bot <yunohost-bot@users.noreply.github.com>
Co-authored-by: tituspijean <titus@pijean.ovh>

README.md

@@ -27,9 +27,10 @@ Galène is a videoconference server (an “SFU”) that is easy to deploy and th
 - streaming video and audio from disk
 - activity detection
 - LDAP support
+- invite user
 
 
-**Shipped version:** 0.6.2~ynh4
+**Shipped version:** 0.7.0~ynh1
 
 **Demo:** https://galene.org:8443/
 

README_fr.md

@@ -27,9 +27,10 @@ Galène est un serveur de visioconférence (un « SFU ») facile à déployer et
 - streaming vidéo et audio à partir du disque
 - détection d'activité
 - prise en charge LDAP
+- inviter un utilisateur
 
 
-**Version incluse :** 0.6.2~ynh4
+**Version incluse :** 0.7.0~ynh1
 
 **Démo :** https://galene.org:8443/
 

conf/ldap.service

@@ -11,5 +11,39 @@ WorkingDirectory=__INSTALL_DIR__/live_ldap/
 ExecStart=__INSTALL_DIR__/live_ldap/galene-ldap -data __INSTALL_DIR__/live_ldap/data/
 LimitNOFILE=65536
 
+# Sandboxing options to harden security
+# Depending on specificities of your service/app, you may need to tweak these
+# .. but this should be a good baseline
+# Details for these options: https://www.freedesktop.org/software/systemd/man/systemd.exec.html
+NoNewPrivileges=yes
+PrivateTmp=yes
+PrivateDevices=yes
+RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6 AF_NETLINK
+RestrictNamespaces=yes
+RestrictRealtime=yes
+DevicePolicy=closed
+ProtectClock=yes
+ProtectHostname=yes
+ProtectProc=invisible
+ProtectSystem=full
+ProtectControlGroups=yes
+ProtectKernelModules=yes
+ProtectKernelTunables=yes
+LockPersonality=yes
+SystemCallArchitectures=native
+SystemCallFilter=~@clock @debug @module @mount @obsolete @reboot @setuid @swap @cpu-emulation @privileged
+
+# Denying access to capabilities that should not be relevant for webapps
+# Doc: https://man7.org/linux/man-pages/man7/capabilities.7.html
+CapabilityBoundingSet=~CAP_RAWIO CAP_MKNOD
+CapabilityBoundingSet=~CAP_AUDIT_CONTROL CAP_AUDIT_READ CAP_AUDIT_WRITE
+CapabilityBoundingSet=~CAP_SYS_BOOT CAP_SYS_TIME CAP_SYS_MODULE CAP_SYS_PACCT
+CapabilityBoundingSet=~CAP_LEASE CAP_LINUX_IMMUTABLE CAP_IPC_LOCK
+CapabilityBoundingSet=~CAP_BLOCK_SUSPEND CAP_WAKE_ALARM
+CapabilityBoundingSet=~CAP_SYS_TTY_CONFIG
+CapabilityBoundingSet=~CAP_MAC_ADMIN CAP_MAC_OVERRIDE
+CapabilityBoundingSet=~CAP_NET_ADMIN CAP_NET_BROADCAST CAP_NET_RAW
+CapabilityBoundingSet=~CAP_SYS_ADMIN CAP_SYS_PTRACE CAP_SYSLOG
+
 [Install]
 WantedBy=multi-user.target

doc/DESCRIPTION.md

@@ -9,3 +9,4 @@ Galène is a videoconference server (an “SFU”) that is easy to deploy and th
 - streaming video and audio from disk
 - activity detection
 - LDAP support
+- invite user

doc/DESCRIPTION_fr.md

@@ -9,3 +9,4 @@ Galène est un serveur de visioconférence (un « SFU ») facile à déployer et
 - streaming vidéo et audio à partir du disque
 - détection d'activité
 - prise en charge LDAP
+- inviter un utilisateur

manifest.toml

@@ -5,7 +5,7 @@ name = "Galène"
 description.en = "Videoconferencing server that is easy to deploy"
 description.fr = "Serveur de visioconférence facile à déployer"
 
-version = "0.6.2~ynh4"
+version = "0.7.0~ynh1"
 
 maintainers = ["eric_G"]
 
@@ -18,7 +18,7 @@ userdoc = "https://galene.org/faq.html"
 code = "https://github.com/jech/galene"
 
 [integration]
-yunohost = ">= 11.1.15"
+yunohost = ">= 11.1.17"
 architectures = "all"
 multi_instance = false
 ldap = true
@@ -65,8 +65,8 @@ ram.runtime = "50M"
 
 [resources.sources]
     [resources.sources.main]
-    url = "https://github.com/jech/galene/archive/refs/tags/galene-0.6.2.tar.gz"
+    url = "https://github.com/jech/galene/archive/refs/tags/galene-0.7.0.tar.gz"
-    sha256 = "7caedc1b2cb8cfeee0136e02c006d13d7b2b3cb9908685654c8cec020265428d"
+    sha256 = "b916e9df4ef289c6ffc529808c063b2fa6ef456b0fc66a0673129887f25b4f63"
     autoupdate.strategy = "latest_github_tag"
  
     [resources.sources.ldap]