diff --git a/ALL_README.md b/ALL_README.md index a01b345..152f2e7 100644 --- a/ALL_README.md +++ b/ALL_README.md @@ -1,6 +1,7 @@ # All available README files by language - [Read the README in English](README.md) +- [Lea el README en español](README_es.md) - [Irakurri README euskaraz](README_eu.md) - [Lire le README en français](README_fr.md) - [Le o README en galego](README_gl.md) diff --git a/README.md b/README.md index 41c2ee2..26e7f2d 100644 --- a/README.md +++ b/README.md @@ -18,7 +18,7 @@ It shall NOT be edited by hand. SimpleX - the first messaging platform operating without user identifiers of any kind - 100% private by design! iOS and Android apps are released. -**Shipped version:** 5.7.1~ynh1 +**Shipped version:** 5.7.5~ynh1 ## Screenshots diff --git a/README_es.md b/README_es.md new file mode 100644 index 0000000..2088b16 --- /dev/null +++ b/README_es.md @@ -0,0 +1,47 @@ + + +# SimpleX para Yunohost + +[![Nivel de integración](https://dash.yunohost.org/integration/simplex.svg)](https://dash.yunohost.org/appci/app/simplex) ![Estado funcional](https://ci-apps.yunohost.org/ci/badges/simplex.status.svg) ![Estado En Mantención](https://ci-apps.yunohost.org/ci/badges/simplex.maintain.svg) + +[![Instalar SimpleX con Yunhost](https://install-app.yunohost.org/install-with-yunohost.svg)](https://install-app.yunohost.org/?app=simplex) + +*[Leer este README en otros idiomas.](./ALL_README.md)* + +> *Este paquete le permite instalarSimpleX rapidamente y simplement en un servidor YunoHost.* +> *Si no tiene YunoHost, visita [the guide](https://yunohost.org/install) para aprender como instalarla.* + +## Descripción general + +SimpleX - the first messaging platform operating without user identifiers of any kind - 100% private by design! iOS and Android apps are released. + +**Versión actual:** 5.7.5~ynh1 + +## Capturas + +![Captura de SimpleX](./doc/screenshots/conversation.png) + +## Documentaciones y recursos + +- Sitio web oficial: +- Documentación administrador oficial: +- Repositorio del código fuente oficial de la aplicación : +- Catálogo YunoHost: +- Reportar un error: + +## Información para desarrolladores + +Por favor enviar sus correcciones a la [`branch testing`](https://github.com/YunoHost-Apps/simplex_ynh/tree/testing + +Para probar la rama `testing`, sigue asÍ: + +```bash +sudo yunohost app install https://github.com/YunoHost-Apps/simplex_ynh/tree/testing --debug +o +sudo yunohost app upgrade simplex -u https://github.com/YunoHost-Apps/simplex_ynh/tree/testing --debug +``` + +**Mas informaciones sobre el empaquetado de aplicaciones:** diff --git a/README_eu.md b/README_eu.md index 7ee47fd..3c9102b 100644 --- a/README_eu.md +++ b/README_eu.md @@ -18,7 +18,7 @@ EZ editatu eskuz. SimpleX - the first messaging platform operating without user identifiers of any kind - 100% private by design! iOS and Android apps are released. -**Paketatutako bertsioa:** 5.7.1~ynh1 +**Paketatutako bertsioa:** 5.7.5~ynh1 ## Pantaila-argazkiak diff --git a/README_fr.md b/README_fr.md index 90347f5..4148a6c 100644 --- a/README_fr.md +++ b/README_fr.md @@ -18,7 +18,7 @@ Il NE doit PAS être modifié à la main. SimpleX - la première plate-forme de messagerie qui n'a aucun identifiant d'utilisateur d'aucune sorte - 100 % privée de par sa conception ! -**Version incluse :** 5.7.1~ynh1 +**Version incluse :** 5.7.5~ynh1 ## Captures d’écran diff --git a/README_gl.md b/README_gl.md index 6ef4acb..a2ec650 100644 --- a/README_gl.md +++ b/README_gl.md @@ -18,7 +18,7 @@ NON debe editarse manualmente. SimpleX - the first messaging platform operating without user identifiers of any kind - 100% private by design! iOS and Android apps are released. -**Versión proporcionada:** 5.7.1~ynh1 +**Versión proporcionada:** 5.7.5~ynh1 ## Capturas de pantalla diff --git a/README_zh_Hans.md b/README_zh_Hans.md index 05545f1..8c9c9ff 100644 --- a/README_zh_Hans.md +++ b/README_zh_Hans.md @@ -18,7 +18,7 @@ SimpleX - the first messaging platform operating without user identifiers of any kind - 100% private by design! iOS and Android apps are released. -**分发版本:** 5.7.1~ynh1 +**分发版本:** 5.7.5~ynh1 ## 截图 diff --git a/conf/xftp.systemd.service b/conf/xftp.systemd.service index 12c0092..66f3256 100644 --- a/conf/xftp.systemd.service +++ b/conf/xftp.systemd.service @@ -14,5 +14,40 @@ KillSignal=SIGINT TimeoutStopSec=infinity AmbientCapabilities=CAP_NET_BIND_SERVICE + +# Sandboxing options to harden security +# Depending on specificities of your service/app, you may need to tweak these +# .. but this should be a good baseline +# Details for these options: https://www.freedesktop.org/software/systemd/man/systemd.exec.html +NoNewPrivileges=yes +PrivateTmp=yes +PrivateDevices=yes +RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6 AF_NETLINK +RestrictNamespaces=yes +RestrictRealtime=yes +DevicePolicy=closed +ProtectClock=yes +ProtectHostname=yes +ProtectProc=invisible +ProtectSystem=full +ProtectControlGroups=yes +ProtectKernelModules=yes +ProtectKernelTunables=yes +LockPersonality=yes +SystemCallArchitectures=native +SystemCallFilter=~@clock @debug @module @mount @obsolete @reboot @setuid @swap @cpu-emulation @privileged + +# Denying access to capabilities that should not be relevant for webapps +# Doc: https://man7.org/linux/man-pages/man7/capabilities.7.html +CapabilityBoundingSet=~CAP_RAWIO CAP_MKNOD +CapabilityBoundingSet=~CAP_AUDIT_CONTROL CAP_AUDIT_READ CAP_AUDIT_WRITE +CapabilityBoundingSet=~CAP_SYS_BOOT CAP_SYS_TIME CAP_SYS_MODULE CAP_SYS_PACCT +CapabilityBoundingSet=~CAP_LEASE CAP_LINUX_IMMUTABLE CAP_IPC_LOCK +CapabilityBoundingSet=~CAP_BLOCK_SUSPEND CAP_WAKE_ALARM +CapabilityBoundingSet=~CAP_SYS_TTY_CONFIG +CapabilityBoundingSet=~CAP_MAC_ADMIN CAP_MAC_OVERRIDE +CapabilityBoundingSet=~CAP_NET_ADMIN CAP_NET_BROADCAST CAP_NET_RAW +CapabilityBoundingSet=~CAP_SYS_ADMIN CAP_SYS_PTRACE CAP_SYSLOG + [Install] WantedBy=multi-user.target diff --git a/manifest.toml b/manifest.toml index 8fc163d..908bb74 100644 --- a/manifest.toml +++ b/manifest.toml @@ -5,7 +5,7 @@ name = "SimpleX" description.en = "Messaging platform operating without user identifiers" description.fr = "Plate-forme de messagerie fonctionnant sans identifiants d'utilisateurs" -version = "5.7.1~ynh1" +version = "5.7.5~ynh1" maintainers = [] @@ -36,19 +36,19 @@ ram.runtime = "50M" [resources.sources] [resources.sources.main] - amd64.url = "https://github.com/YunoHost-Apps/simplex_ynh/releases/download/v5.6.2/smp-server_amd64" - amd64.sha256 = "d711cc5bddddf4abd01d971d7d4cda879bc4d4d2beb455154031589ffcb0c891" - arm64.url = "https://github.com/skyuk3000/simplex_ynh/releases/download/5.2.0/smp-server_arm64" - arm64.sha256 = "2a5a6f34230443212d3166ec7c706440eb2748c6cd2b4e47526a4ccf45717584" + amd64.url = "https://github.com/YunoHost-Apps/simplex_ynh/releases/download/v5.7.5/smp-server_amd64" + amd64.sha256 = "b507e3b7c381eefa96ec1f9f7648ded78cc971827e90f5a137335045d67425e8" + arm64.url = "https://github.com/YunoHost-Apps/simplex_ynh/releases/download/v5.7.5/smp-server_arm64" + arm64.sha256 = "525a7f3d2a361cf3344cfff2358c615b827418eb98d6c390d183b7e40fb008d4" in_subdir = false extract = false rename = "smp-server" [resources.sources.xftp] - amd64.url = "https://github.com/YunoHost-Apps/simplex_ynh/releases/download/v5.6.2/xftp-server_amd64" - amd64.sha256 = "6febc49aa989a02ad8cfc27b657c30acc425878e88a995beca864afeaaff7b3e" - arm64.url = "https://github.com/skyuk3000/simplex_ynh/releases/download/5.2.0/xftp-server_arm64" - arm64.sha256 = "a8f4118610efca9bd7b2d687c04f95a9cf52114d1941c8f94441d80c1c04d92a" + amd64.url = "https://github.com/YunoHost-Apps/simplex_ynh/releases/download/v5.7.5/xftp-server_amd64" + amd64.sha256 = "f4182dd6ad65862705bc7fdd2c10f5e38a5483344e832ec84b7a2fc288c74ef6" + arm64.url = "https://github.com/YunoHost-Apps/simplex_ynh/releases/download/v5.7.5/xftp-server_arm64" + arm64.sha256 = "b406b793383b0dd202d6bd60f9d0054d2c4249ac34e4d87c731bb131019c1561" in_subdir = false extract = false rename = "xftp-server" diff --git a/scripts/install b/scripts/install index 3764039..bb41f98 100755 --- a/scripts/install +++ b/scripts/install @@ -61,7 +61,7 @@ chown -R $app:$app "/etc/opt/simplex-xftp" #================================================= #ynh_script_progression --message="Adding a configuration file..." --weight=1 -#ynh_add_config --template="../conf/file-server.ini" --destination="/etc/opt/simplex-xftp/file-server.ini" +#ynh_add_config --template="file-server.ini" --destination="/etc/opt/simplex-xftp/file-server.ini" #chmod 400 "/etc/opt/simplex-xftp/file-server.ini" #chown $app:$app "/etc/opt/simplex-xftp/file-server.ini"