244 commits

Author	SHA1	Message	Date
Alexandre Aubin	8533103788	Merge pull request #803 from YunoHost/burn-etckeeper ... Get rid of etckeeper	2019-10-08 18:33:12 +02:00
Alexandre Aubin	eb57a4ad9e	Get rid of etckeeper	2019-09-19 19:51:27 +02:00
Alexandre Aubin	ec5069b71c	Propagate changes on backup tests + fixes bugs found in the process	2019-09-13 16:33:25 +02:00
Étienne Mollier	f0440fbd6b	Dynamically evaluate proper mariadb-server-<version>	2019-08-15 15:12:06 +02:00
Alexandre Aubin	2dc809548b	Fixing again the whole permission / cert situation for slapd ... for good this time hopefully	2019-08-13 17:32:55 +02:00
Alexandre Aubin	6f48d1d855	Get rid of those sudo's ... otherwise, because sudo is in fact sudo-ldap, might create weird errors or stuck situation where everything is broken because slapd is stopped and the regenconf can't restart it	2019-08-12 11:16:07 +02:00
Alexandre Aubin	0a2d1c7eb6	We need this also to have proper permissions on certs	2019-08-12 11:16:04 +02:00
Alexandre Aubin	dde3a19350	Fix some critical permissions issues with ssl / slapd configuration	2019-08-12 01:56:24 +02:00
Alexandre Aubin	10f1651022	Moving to the post-regen part because the pre-regen part should touch as little as possible of the actual system config	2019-08-03 21:00:44 +02:00
yalh76	bae6fe86f3	spelling	2019-08-01 22:28:55 +02:00
yalh76	577d8f477f	Add openldap user in the ssl-cert grou	2019-07-14 14:25:09 +02:00
Alexandre Aubin	59e2db99ba	Merge branch 'stretch-unstable' into group_permission	2019-07-05 20:59:10 +02:00
Alexandre Aubin	b9197b6269	Fix 'unable to write random state in SSL init (same patch as for yunohost-admin)	2019-06-27 00:57:28 +02:00
Alexandre Aubin	d8b086a06a	[fix] Running slapindex seems to fix the previous issues about LDAP indexing stuff	2019-06-06 19:26:49 +02:00
Alexandre Aubin	24cfc15536	Merge branch 'stretch-unstable' into group_permission	2019-05-31 18:15:09 +02:00
Josué Tille	f839ec5153	Improve restoration mecanisme for LDAP integrity	2019-05-26 00:54:57 +02:00
Alexandre Aubin	93d0fbc4cf	Merge pull request #696 from rds13/featurePostfixRemoveTLSv1Support ... [enh] Propose a setting to remove support for TLSv1 and TLSv1.1 in Postfix	2019-05-14 19:19:25 +02:00
Josué Tille	fde8cafa4e	Merge remote-tracking branch 'upstream/stretch-unstable' into group_permission	2019-05-10 22:53:06 +02:00
Alexandre Aubin	ce465476f2	Merge pull request #704 from kay0u/patch-6 ... [FIX] Hook backup warning message	2019-04-25 13:51:38 +02:00
Alexandre Aubin	1fc9f7ddad	Fix yunohost_admin.conf initialization	2019-04-11 14:27:09 +02:00
Kayou	b7bf951538	Tired of seeing this warning message	2019-04-10 12:15:21 +02:00
Romuald du Song	15ac51098d	propose a setting to remove support for TLSv1 and TLSv1.1	2019-03-28 22:03:25 +01:00
Alexandre Aubin	fefa44e062	Typo in previous commits	2019-03-22 17:14:48 +01:00
Alexandre Aubin	dcff10f6f8	Simplify setting usage in regenconf hooks	2019-03-22 16:31:45 +01:00
Alexandre Aubin	fee79820e0	Rename nginx and ssh compatibility setting for consistency	2019-03-22 16:15:11 +01:00
Alexandre Aubin	650232b1c3	Merge branch 'stretch-unstable' into group_permission	2019-03-05 02:59:05 +01:00
Alexandre Aubin	a1d85b6350	Merge branch 'stretch-unstable' into featureCipherStrategy	2019-02-25 00:56:20 +01:00
Alexandre Aubin	d495d315c0	[fix] Loading only one helper file leads to errors because missing getopts	2019-02-16 16:36:35 +01:00
Romuald du Song	aaf6dba8d7	fix yunhost admin config filename	2019-02-14 23:03:27 +01:00
Romuald du Song	a899102efc	don't share setting for nginx and ssh	2019-02-14 22:57:24 +01:00
Romuald du Song	12d0e0e1de	add instruction to rebuild yunohost-admin conf	2019-02-14 22:34:35 +01:00
Romuald du Song	e0aaf6f8a1	add trace for process check	2019-02-09 11:56:33 +01:00
Romuald du Song	8e1034771a	use setting security_ciphers_compatibility to define security configurations	2019-02-04 23:01:16 +01:00
Josué Tille	b01e4b61f5	Implement backup - restore and update test	2019-01-17 22:15:13 +01:00
Josué Tille	d975ed2689	Update LDAP config	2019-01-17 22:14:24 +01:00
Alexandre Aubin	6a7990d7fb	[fix] Weird duplicated code + fix missing key file triggering an error	2019-01-04 16:25:49 +01:00
Alexandre Aubin	4f05cd5b2b	Uh for some reason we need to return *0* explicitly	2018-12-03 16:56:28 +00:00
Alexandre Aubin	447372d07c	[enh] Clean + harden sshd config using Mozilla recommendation (#590) ... * Clean sshd_config + harden using Mozilla recommendation * Order of keys matter, ed25519 is recommended	2018-12-03 17:03:22 +01:00
Alexandre Aubin	0576b17442	Simplify code / indentation levels	2018-11-28 21:03:28 +00:00
Alexandre Aubin	4db65682eb	Fix IPv6 handling in ssh regen conf script	2018-11-28 20:42:39 +00:00
Alexandre Aubin	6a812190c5	Enforce permissions for /etc/ssh/sshd_config	2018-11-28 20:27:42 +00:00
Alexandre Aubin	f295c83fd3	Order of keys matter, ed25519 is recommended	2018-11-28 19:15:21 +00:00
Alexandre Aubin	3d81f032e9	Fixes following tests (some sshd_config options do not exists or are deprecated)	2018-11-28 17:50:20 +00:00
Alexandre Aubin	fad4ff090a	Use templating for more robustness about which SSH keys are enabled	2018-11-28 00:26:25 +01:00
Alexandre Aubin	325678f541	More explicit name for setting	2018-11-28 00:04:25 +01:00
Alexandre Aubin	7b6bf6f4b8	Missing 'get'	2018-11-28 00:03:25 +01:00
ljf	8e0086d493	[fix] Allow user to trigger the moment when they remove dsa	2018-11-28 00:00:30 +01:00
ljf	8598d81bb1	[wip] Standardize ssh config	2018-11-27 23:58:29 +01:00
Alexandre Aubin	662666fb5a	Readability improvement	2018-11-18 17:56:19 +01:00
Alexandre Aubin	b5afd0abc4	We do need to use the serial file and to generate it ourselves	2018-11-18 17:56:19 +01:00