Commit graph

74 commits

Author SHA1 Message Date
Josué Tille
2aae4d854a
Add main domain into hosts file
For apps which send mail (or receive) which need a valid TLS certificate the way to make it work is to pass a valid domain (and not localhost), so the target domain match with the provided certificate.
But postfix and dovecot refuse app authentication from external IP. So we need to force the request on local interface (with the public domain).
2024-02-22 22:17:10 +01:00
Chris Vogel
379b6922ad install file to redis configuration
ouch... Thanks @Tagadda!
2023-10-17 21:13:09 +02:00
Alexandre Aubin
961dc5a6ee
Merge pull request #815 from YunoHost/allow-system-user-to-auth-on-mail-stack
Allow system users to auth on the mail stack and send emails
2023-07-10 19:14:30 +02:00
Alexandre Aubin
af93524c36 regenconf: fix a stupid bug using chown instead of chmod ... 2023-07-10 17:55:21 +02:00
Alexandre Aubin
8242cab735 Get rid of previous tmp hack about /dev/null for people that went through the very first 11.1.21, because it's causing issue in unpriviledged LXC or similar context 2023-06-13 12:28:56 +02:00
Alexandre Aubin
84984ad89a Fix again /var/www/.well-known/ynh-diagnosis/ perms which are too broad and could be exploited to serve malicious files x_x 2023-06-12 17:41:18 +02:00
Alexandre Aubin
313a16476a Aleks loves xargs syntax >_> 2023-06-12 00:25:38 +02:00
Alexandre Aubin
e6f134bc91 Fix stupid issue with code that changes /dev/null perms... 2023-06-12 00:02:43 +02:00
Alexandre Aubin
e649c092a3 regenconf: force systemd, nginx, php and fail2ban conf to be owned by root 2023-05-26 21:44:39 +02:00
Alexandre Aubin
1552944fdd apps: fix auto-catalog update cron job which was broken because --apps doesnt exist anymore 2023-05-26 20:42:01 +02:00
Alexandre Aubin
c48d9ec483 appsv2/mail: add new 'allow_email' flag on app system users that will autogenerate a passwd-like file to be used by dovecot + map for postfix 2023-02-28 17:56:49 +01:00
Alexandre Aubin
b40c0de33c Fix pop3_enabled parsing returning 0/1 instead of True/False ... 2023-02-26 17:44:48 +01:00
Alexandre Aubin
97c0128c22 regenconf: sometimes ntp doesnt exist 2023-02-26 15:11:18 +01:00
Alexandre Aubin
20e8805e3b misc: automatic get rid of /etc/profile.d/check_yunohost_is_installed.sh when yunohost is postinstalled 2023-02-25 16:02:14 +01:00
Alexandre Aubin
343065eb5d regenconf: fix undefined var in apt regenconf 2023-02-19 21:38:53 +01:00
Alexandre Aubin
e6ae389297 postgresql: moar regenconf fixes 2023-02-19 19:38:48 +01:00
Alexandre Aubin
18e034df8a regenconf: in apt/php stuff, don't try to upgrade-alternatives if the default PHP version ain't available anymore (similar to commit e24ddd29) 2023-02-18 16:34:54 +01:00
Alexandre Aubin
8a43b04614 postgresql: fix regenconf hook, the arg format thingy changed a bit at some point ? 2023-02-18 16:33:50 +01:00
Alexandre Aubin
170eaf5d74 backup/multimedia: test that /home/yunohots.multimedia does exists to avoid boring warning later 2023-02-06 15:46:21 +01:00
Alexandre Aubin
c990cee630 metronome: Auto-enable/disable metronome if there's no/at least one domain configured for XMPP 2023-01-31 18:17:53 +01:00
selfhoster1312
82cb549daf Don't disable avahi-daemon by force in conf_regen 2023-01-01 16:50:55 +01:00
Alexandre Aubin
59405ef4c6
Merge pull request #1552 from Ddataa/patch-1
Add postfix SASL login failure to a fail2ban jail
2022-12-20 23:20:58 +01:00
DDATAA
c565c2f328
Update 52-fail2ban 2022-12-20 19:25:14 +00:00
Alexandre Aubin
47b9b8b520 configpanels: fix inconsistent return format for boolean, sometimes 1/0, sometimes True/False -> force normalization of values when calling get() for a single setting from a config panel 2022-12-20 19:51:21 +01:00
Alexandre Aubin
d2417c33de slapd: fix issue where sudo doesn't work because sudo-ldap doesn't create /etc/sudo-ldap.conf :/ 2022-12-08 18:33:03 +01:00
Alexandre Aubin
30a18a4ec0 domains: propagate mail/xmpp enable/disable toggle to actual system configurations 2022-11-27 15:51:20 +01:00
Alexandre Aubin
9bd981620c regenconf: fix yunohost hook incorectly tweaking mdns.yml ownership 2022-11-20 19:41:08 +01:00
Alexandre Aubin
5394790f91 postfix: fix permission issue preventing to properly create sasl_passwd.db 2022-10-31 14:53:34 +01:00
Alexandre Aubin
cd43c8bd0d postfix: fix relay conf not triggered because new setting system now returns '1' and not 'True' 2022-10-31 14:53:10 +01:00
Alexandre Aubin
d1d203726b Merge remote-tracking branch 'origin/enh-actions' into 11.1 2022-10-04 22:33:28 +02:00
ljf (zamentur)
b0411d5da9
[fix] Lidswitch if no reboot 2022-09-12 01:47:03 +02:00
Alexandre Aubin
1037508fb5
Merge branch '11.1' into admins 2022-09-04 20:28:59 +02:00
Alexandre Aubin
a2d0a1445d Merge branch 'dev' into admins 2022-09-04 20:25:42 +02:00
Alexandre Aubin
38234c9501
Merge branch 'dev' into enh-global-settings-configpanel 2022-09-03 22:33:46 +02:00
Alexandre Aubin
b77e811402 regenconf: add a timeout to curl inside dnsmasq regenconf to prevent being stuck too long when no network on the machine 2022-09-01 19:16:37 +02:00
Alexandre Aubin
503b90316f [fix] regenconf: fix a stupid issue with slapcat displaying an error message because grep -q breaks the pipe 2022-08-30 00:04:23 +02:00
Alexandre Aubin
87abbe678d Merge remote-tracking branch 'origin/dev' into admins 2022-08-09 18:29:59 +02:00
Alexandre Aubin
66901e4f73 global settings: drop the support old DSA hostkey support 2022-08-06 13:05:54 +02:00
Alexandre Aubin
133d8b60c1 global settings: misc naming/ui/ux/i18n improvements 2022-08-06 13:03:28 +02:00
Alexandre Aubin
cae7e5b5af Merge branch 'dev' into enh-global-settings-configpanel 2022-08-04 18:27:12 +02:00
Alexandre Aubin
9d39a2c0b4
regenconf dhclient/resolvconf: fix weird typo, probably meant 'search' (like in our rpi-image tweaking) 2022-08-03 16:09:47 +02:00
Tagadda
133ba3f14f settings: backup settings.yml 2022-04-26 17:26:48 +00:00
Tagadda
f0bf8dd1fd settings: use email.smtp.smtp_relay_enabled 2022-04-26 17:26:48 +00:00
Tagadda
eb747cc15e Search and replace old settings, first pass 2022-04-26 17:26:48 +00:00
Tagadda
a51738f1c3 fix: YNH_MAIN_DOMAINS env variable in regenconf
Also... `yunohost domain list --output-as plain` also print "#domain" and "#main"
so this used to create wierd files in /var/lib/metronome/
2022-02-16 12:34:22 +00:00
Alexandre Aubin
d6a6ca1db4 security: Enable proc-hidepid by default 2022-02-01 12:52:40 +01:00
Alexandre Aubin
345e50ae00 regenconf: make some systemctl enable/disable quiet² 2022-01-29 16:49:03 +01:00
Alexandre Aubin
bccff1b442 regenconf: make some systemctl enable/disable quiet 2022-01-29 15:52:20 +01:00
Tagadda
9ef3a1bfff [enh] Add SNI support to postfix and dovecot 2022-01-19 23:28:43 +00:00
Alexandre Aubin
1e61883b2f Merge branch 'dev' into bullseye 2022-01-18 00:16:49 +01:00