Alexandre Aubin
fb4693be39
apps: be able to customize the user-part and domain-part of email when using allow_email on system user
2023-06-20 17:59:09 +02:00
Yann Autissier
f9850a2264
keep fail2ban rules on firewall reload ( #1661 )
...
* keep fail2ban rules on firewall reload
reloading firewall flushes all iptables rules to create new ones,
dropping fail2ban rules in the same time.
* restart fail2ban instead of reload
Reloading fail2ban does not create f2b-* iptables rules.
2023-06-20 17:49:04 +02:00
Alexandre Aubin
d69c196fe4
Merge pull request #1670 from Salamandar/apt_packages_list
...
Allow passing a list in the manifest.toml for the apt resource packages
2023-06-20 17:29:26 +02:00
Alexandre Aubin
4da98e74ae
Merge pull request #1680 from npalix/dnsdiag
...
diagnosis: Support multiple TXT entries for TLD
2023-06-20 16:35:14 +02:00
Nicolas Palix
460e39a2f0
Support multiple TXT entries for TLD
...
The dig of TXT for @ can returns multiple entries.
In that case, the DNS diagnosis fails.
The modification preserves the handling of DMARC and the likes
which use a single entry and a specfic domain name.
For single entry list, the behavior is preserved.
If mutliple TXT entries are defined for @, only the v=spf1
one is returned.
Signed-off-by: Nicolas Palix <nicolas.palix@imag.fr>
2023-06-20 15:25:31 +02:00
Alexandre Aubin
19eb48b6e7
Update changelog for 11.1.21.4
2023-06-14 15:49:16 +02:00
Alexandre Aubin
29338f79bc
apps: don't attempt to del password key if it doesn't exist
2023-06-14 15:48:12 +02:00
Alexandre Aubin
48ee78afa2
fix tests: my_webapp is using manifest v2 now
2023-06-13 14:48:30 +02:00
Alexandre Aubin
8242cab735
Get rid of previous tmp hack about /dev/null for people that went through the very first 11.1.21, because it's causing issue in unpriviledged LXC or similar context
2023-06-13 12:28:56 +02:00
Alexandre Aubin
6278c68586
Update changelog for 11.1.21.3
2023-06-12 17:42:10 +02:00
Alexandre Aubin
84984ad89a
Fix again /var/www/.well-known/ynh-diagnosis/ perms which are too broad and could be exploited to serve malicious files x_x
2023-06-12 17:41:18 +02:00
Alexandre Aubin
18336b01dc
Merge pull request #1673 from YunoHost/ci-format-debian/11.1.21.2
...
[CI] Format code with Black
2023-06-12 17:35:10 +02:00
yunohost-bot
2f982e26a9
[CI] Format code with Black
2023-06-12 00:30:59 +00:00
Alexandre Aubin
e1569f962b
Update changelog for 11.1.21.2
2023-06-12 00:26:43 +02:00
Alexandre Aubin
313a16476a
Aleks loves xargs syntax >_>
2023-06-12 00:25:38 +02:00
Alexandre Aubin
1222c47620
Update changelog for 11.1.21.1
2023-06-12 00:03:10 +02:00
Alexandre Aubin
e6f134bc91
Fix stupid issue with code that changes /dev/null perms...
2023-06-12 00:02:43 +02:00
Alexandre Aubin
fcf263242e
Update changelog for 11.1.21
2023-06-11 19:35:49 +02:00
Alexandre Aubin
8a27045d78
Merge pull request #1669 from yunohost-bot/weblate-yunohost-core
...
Translations update from Weblate
2023-06-11 19:24:39 +02:00
ppr
bc42fd7ab2
Translated using Weblate (French)
...
Currently translated at 100.0% (768 of 768 strings)
Translation: YunoHost/core
Translate-URL: https://translate.yunohost.org/projects/yunohost/core/fr/
2023-06-11 12:41:28 +02:00
Tymofii-Lytvynenko
69339f8d0e
Translated using Weblate (Ukrainian)
...
Currently translated at 100.0% (768 of 768 strings)
Translation: YunoHost/core
Translate-URL: https://translate.yunohost.org/projects/yunohost/core/uk/
2023-06-11 02:30:11 +02:00
8caff6a9dc
Allow passing a list in the manifest.toml for the apt resource packages
2023-06-10 22:27:39 +02:00
Kuba Bazan
1087c800a6
Translated using Weblate (Polish)
...
Currently translated at 25.7% (197 of 764 strings)
Translation: YunoHost/core
Translate-URL: https://translate.yunohost.org/projects/yunohost/core/pl/
2023-06-09 22:30:59 +02:00
Alexandre Aubin
d42c99835a
nginx: use /var/www/.well-known folder for ynh diagnosis and acme challenge, because /tmp/ could be manipulated by user to serve maliciously crafted files
2023-06-09 22:30:32 +02:00
Alexandre Aubin
cec0dfe158
Merge pull request #1668 from YunoHost/enh-verbose-user_group_update
...
more verbose logs for user_group _update
2023-06-05 14:05:20 +02:00
Tagada
fee5375dc4
more verbose logs for user_group _update
...
fix YunoHost/issues#2193
2023-06-04 23:50:23 +02:00
tituspijean
9cebd2e3fe
Merge pull request #1656 from YunoHost/app_shell
2023-05-30 13:28:15 +02:00
tituspijean
f3faac87f8
Improve comments of ynh_spawn_app_shell
2023-05-30 11:27:33 +00:00
tituspijean
db7ab2a98b
Homogeneize command subtitutions in ynh_spawn_app_shell
2023-05-30 11:18:54 +00:00
Alexandre Aubin
e649c092a3
regenconf: force systemd, nginx, php and fail2ban conf to be owned by root
2023-05-26 21:44:39 +02:00
Alexandre Aubin
daf51e94bd
regeconf: fix security issue where apps' system conf would be owned by the app, which can enable priviledge escalation
2023-05-26 21:06:01 +02:00
Alexandre Aubin
1552944fdd
apps: fix auto-catalog update cron job which was broken because --apps doesnt exist anymore
2023-05-26 20:42:01 +02:00
tituspijean
1300585eda
Improve ynh_spawn_app_shell comments
...
Co-authored-by: Florent <florent.git@zeteo.me>
2023-05-25 09:48:55 +02:00
tituspijean
bb9db08e29
Improve ynh_spawn_app_shell documentation
2023-05-24 22:32:51 +00:00
tituspijean
cacd43e147
Fix error in ynh_spawn_app_shell
2023-05-24 22:21:35 +00:00
tituspijean
5fa58f19ce
Offer apps to set service name for ynh_spawn_app_shell
2023-05-24 22:19:10 +00:00
tituspijean
a47e491869
Cleanup ynh_spawn_app_shell
2023-05-24 22:08:51 +00:00
tituspijean
ed1b5e567b
Force php to its intended version in ynh_spawn_app_shell
2023-05-24 21:55:20 +00:00
tituspijean
4b4ce9aef6
Default to WorkingDirectory then install_dir for ynh_spawn_app_shell
...
Co-authored-by: Tagada <36127788+Tagadda@users.noreply.github.com>
2023-05-24 23:13:52 +02:00
tituspijean
cc167cd92c
Rename ynh_load_app_environment into ynh_spawn_app_shell
...
Co-authored-by: Florent <florent.git@zeteo.me>
2023-05-24 21:12:06 +00:00
tituspijean
21c7c41812
Extend ynh_load_app_environment usage examples
...
Co-authored-by: Florent <florent.git@zeteo.me>
2023-05-24 23:08:53 +02:00
Kay0u
f046c291e5
add missing args in tests
2023-05-22 19:32:53 +02:00
Alexandre Aubin
db9aa8e6c7
Update changelog for 11.1.20
2023-05-20 18:58:11 +02:00
Alexandre Aubin
b5068ad007
Merge pull request #1664 from aya/update-content-security-policy
...
Update "worker" Content-Security-Policy header when in experimental security mode
2023-05-20 18:47:44 +02:00
Alexandre Aubin
751930043f
Merge pull request #1665 from yunohost-bot/weblate-yunohost-core
...
Translations update from Weblate
2023-05-20 18:46:49 +02:00
Ilya
a508684740
Translated using Weblate (Russian)
...
Currently translated at 40.0% (306 of 764 strings)
Translation: YunoHost/core
Translate-URL: https://translate.yunohost.org/projects/yunohost/core/ru/
2023-05-20 04:15:24 +02:00
Éric Gaspar
df523cdbf0
Translated using Weblate (French)
...
Currently translated at 100.0% (764 of 764 strings)
Translation: YunoHost/core
Translate-URL: https://translate.yunohost.org/projects/yunohost/core/fr/
2023-05-20 04:15:24 +02:00
Yann Autissier
e8dd243218
update Content-Security-Policy header for chromium
...
Chromium fails to load a jitsi video conference, refusing to create a
worker because it violates the Content Security Policy directive:
"script-src https: data: 'unsafe-inline' 'unsafe-eval'".
2023-05-19 20:39:29 +00:00
tituspijean
2b65913b89
Launch app shell
2023-05-18 19:35:56 +00:00
tituspijean
072dabaf70
Fix Bash detection for ynh_load_app_environment
2023-05-18 16:45:17 +00:00