Alexandre Aubin
e54ca72068
On some weird setup, this folder and content ain't readable by group ... gotta make sure to make rx for group other slapd will explode
2020-03-27 21:40:22 +01:00
pitchum
ada95f8fca
http-upload only available on maindomain (for the moment).
2020-03-25 12:09:24 +01:00
Alexandre Aubin
af415e38e6
Factorize ciphers and headers configuration into a common file for all vhosts
2020-03-23 22:43:29 +01:00
Alexandre Aubin
27f6899b65
/var/www/xmpp-upload.{domain} -> /var/xmpp-upload/{domain}
2020-03-23 22:15:03 +01:00
pitchum
994f0ca1ef
nginx + metronome config for http_upload
2020-03-22 08:36:33 +01:00
Alexandre Aubin
97e5d3b992
Remove those random sudo which are useless yet triggers LDAP warning when LDAP is in bad state
2019-11-28 00:10:40 +01:00
Alexandre Aubin
615a164c06
Merge pull request #791 from decentral1se/add-pop3-setting
...
Add pop3.enabled setting
2019-11-25 16:19:36 +01:00
Alexandre Aubin
053d692319
Merge pull request #848 from mdeabreu/patch-1
...
[fix] metronome domain folder permissions
2019-11-25 16:09:18 +01:00
Matthew DeAbreu
3b9481ae2d
Update 12-metronome
...
simplify change by reordering operations
2019-11-22 09:02:01 -08:00
Alexandre Aubin
a416044376
Add diagnosis cron job to be ran every 12 hours, managed from the regenconf
2019-11-22 14:58:11 +01:00
Matthew DeAbreu
7c09982d3d
ensure metronome owns domain dir
...
When adding new domains to Yunohost a directory for each newly added domain is created in `/var/lib/metronome` unfortunately since the directory is created with `sudo mkdir` that means `root:root` owns the directory. Metronome will now fail to write to the directory.
2019-11-20 09:52:01 -08:00
Alexandre Aubin
bb8b1b052d
Using /var/log/daemon.log or /var/log/syslog is pointless, these files logs many different things. Instead, we shall always return the logs from journalctl
2019-11-17 16:39:12 +01:00
Luke Murphy
83b4be5345
Add setting to configure pop3 for dovecot
2019-11-10 20:57:46 +07:00
Alexandre Aubin
eb57a4ad9e
Get rid of etckeeper
2019-09-19 19:51:27 +02:00
Étienne Mollier
f0440fbd6b
Dynamically evaluate proper mariadb-server-<version>
2019-08-15 15:12:06 +02:00
Alexandre Aubin
2dc809548b
Fixing again the whole permission / cert situation for slapd ... for good this time hopefully
2019-08-13 17:32:55 +02:00
Alexandre Aubin
6f48d1d855
Get rid of those sudo's ... otherwise, because sudo is in fact sudo-ldap, might create weird errors or stuck situation where everything is broken because slapd is stopped and the regenconf can't restart it
2019-08-12 11:16:07 +02:00
Alexandre Aubin
0a2d1c7eb6
We need this also to have proper permissions on certs
2019-08-12 11:16:04 +02:00
Alexandre Aubin
dde3a19350
Fix some critical permissions issues with ssl / slapd configuration
2019-08-12 01:56:24 +02:00
Alexandre Aubin
10f1651022
Moving to the post-regen part because the pre-regen part should touch as little as possible of the actual system config
2019-08-03 21:00:44 +02:00
yalh76
bae6fe86f3
spelling
2019-08-01 22:28:55 +02:00
yalh76
577d8f477f
Add openldap user in the ssl-cert grou
2019-07-14 14:25:09 +02:00
Alexandre Aubin
59e2db99ba
Merge branch 'stretch-unstable' into group_permission
2019-07-05 20:59:10 +02:00
Alexandre Aubin
b9197b6269
Fix 'unable to write random state in SSL init (same patch as for yunohost-admin)
2019-06-27 00:57:28 +02:00
Alexandre Aubin
d8b086a06a
[fix] Running slapindex seems to fix the previous issues about LDAP indexing stuff
2019-06-06 19:26:49 +02:00
Alexandre Aubin
24cfc15536
Merge branch 'stretch-unstable' into group_permission
2019-05-31 18:15:09 +02:00
Alexandre Aubin
93d0fbc4cf
Merge pull request #696 from rds13/featurePostfixRemoveTLSv1Support
...
[enh] Propose a setting to remove support for TLSv1 and TLSv1.1 in Postfix
2019-05-14 19:19:25 +02:00
Josué Tille
fde8cafa4e
Merge remote-tracking branch 'upstream/stretch-unstable' into group_permission
2019-05-10 22:53:06 +02:00
Alexandre Aubin
1fc9f7ddad
Fix yunohost_admin.conf initialization
2019-04-11 14:27:09 +02:00
Romuald du Song
15ac51098d
propose a setting to remove support for TLSv1 and TLSv1.1
2019-03-28 22:03:25 +01:00
Alexandre Aubin
fefa44e062
Typo in previous commits
2019-03-22 17:14:48 +01:00
Alexandre Aubin
dcff10f6f8
Simplify setting usage in regenconf hooks
2019-03-22 16:31:45 +01:00
Alexandre Aubin
fee79820e0
Rename nginx and ssh compatibility setting for consistency
2019-03-22 16:15:11 +01:00
Alexandre Aubin
650232b1c3
Merge branch 'stretch-unstable' into group_permission
2019-03-05 02:59:05 +01:00
Alexandre Aubin
a1d85b6350
Merge branch 'stretch-unstable' into featureCipherStrategy
2019-02-25 00:56:20 +01:00
Alexandre Aubin
d495d315c0
[fix] Loading only one helper file leads to errors because missing getopts
2019-02-16 16:36:35 +01:00
Romuald du Song
aaf6dba8d7
fix yunhost admin config filename
2019-02-14 23:03:27 +01:00
Romuald du Song
a899102efc
don't share setting for nginx and ssh
2019-02-14 22:57:24 +01:00
Romuald du Song
12d0e0e1de
add instruction to rebuild yunohost-admin conf
2019-02-14 22:34:35 +01:00
Romuald du Song
e0aaf6f8a1
add trace for process check
2019-02-09 11:56:33 +01:00
Romuald du Song
8e1034771a
use setting security_ciphers_compatibility to define security configurations
2019-02-04 23:01:16 +01:00
Josué Tille
d975ed2689
Update LDAP config
2019-01-17 22:14:24 +01:00
Alexandre Aubin
6a7990d7fb
[fix] Weird duplicated code + fix missing key file triggering an error
2019-01-04 16:25:49 +01:00
Alexandre Aubin
4f05cd5b2b
Uh for some reason we need to return *0* explicitly
2018-12-03 16:56:28 +00:00
Alexandre Aubin
447372d07c
[enh] Clean + harden sshd config using Mozilla recommendation ( #590 )
...
* Clean sshd_config + harden using Mozilla recommendation
* Order of keys matter, ed25519 is recommended
2018-12-03 17:03:22 +01:00
Alexandre Aubin
0576b17442
Simplify code / indentation levels
2018-11-28 21:03:28 +00:00
Alexandre Aubin
4db65682eb
Fix IPv6 handling in ssh regen conf script
2018-11-28 20:42:39 +00:00
Alexandre Aubin
6a812190c5
Enforce permissions for /etc/ssh/sshd_config
2018-11-28 20:27:42 +00:00
Alexandre Aubin
f295c83fd3
Order of keys matter, ed25519 is recommended
2018-11-28 19:15:21 +00:00
Alexandre Aubin
3d81f032e9
Fixes following tests (some sshd_config options do not exists or are deprecated)
2018-11-28 17:50:20 +00:00
