Commit graph

2641 commits

Author SHA1 Message Date
Alexandre Aubin
1ac97c46ad Explicit root password change each time admin password is changed 2018-12-07 19:13:43 +01:00
Josué Tille
df56cf90aa Ignore test directory 2018-12-07 18:28:43 +01:00
Alexandre Aubin
783ecf8f41 Manage migration of auto/manual and disclaimer on a per-migration basis 2018-12-06 23:01:19 +01:00
Alexandre Aubin
0fa374db40 This message should be info 2018-12-06 23:00:47 +01:00
Alexandre Aubin
791ac44037 Add success message after running migrations 2018-12-06 23:00:47 +01:00
Alexandre Aubin
3ca8c089e1 Have a function to initialize migrations 2018-12-06 23:00:47 +01:00
Alexandre Aubin
3a2464dfb4 Skip migrations one at a time 2018-12-06 23:00:47 +01:00
Alexandre Aubin
3949333599 We need to explicitly ask for the ssh conf to be generated 2018-12-03 19:03:58 +00:00
Alexandre Aubin
e871ff3b20 Semantics 2018-12-03 17:06:05 +00:00
Alexandre Aubin
4f05cd5b2b Uh for some reason we need to return *0* explicitly 2018-12-03 16:56:28 +00:00
Alexandre Aubin
447372d07c
[enh] Clean + harden sshd config using Mozilla recommendation (#590)
* Clean sshd_config + harden using Mozilla recommendation
* Order of keys matter, ed25519 is recommended
2018-12-03 17:03:22 +01:00
Maniack Crudelis
5338319890
Merge pull request #593 from YunoHost/fix-wait-dpkg-free
Return instead of break, otherwise warning is shown
2018-12-03 15:44:11 +01:00
Alexandre Aubin
0ac908326a Return instead of break, otherwise warning is shown 2018-12-03 14:02:12 +01:00
Alexandre Aubin
34a5006ea2 Merge branch 'stretch-testing' into stretch-unstable 2018-12-02 16:31:53 +00:00
Alexandre Aubin
db93aa6d5c Update changelog for 3.3.2 2018-12-02 16:23:11 +00:00
frju365
65dee220e3 [fix] Regen nginx conf to be sure it integrates OCSP Stapling (#588)
* [fix] Regen nginx conf to be sure it integrates OCSP Stapling
* Typo
* Regen nginx each time we enable a new cert
* add comment about the reason of the PR
2018-12-02 16:21:57 +00:00
frju365
48e20ca9bf [fix] Regen nginx conf to be sure it integrates OCSP Stapling (#588)
* [fix] Regen nginx conf to be sure it integrates OCSP Stapling
* Typo
* Regen nginx each time we enable a new cert
* add comment about the reason of the PR
2018-12-02 17:20:03 +01:00
Alexandre Aubin
fe0c127aa8 Log dyndns update only if we really update something (#591) 2018-12-02 16:15:05 +00:00
Alexandre Aubin
207c2516b5 Forgot to get the 'value' key here.. 2018-12-02 16:14:47 +00:00
Alexandre Aubin
02544f837c tools_adminpw was still checking the password strength despite --force-password 2018-12-02 16:14:41 +00:00
ljf (zamentur)
640bc494cb [enh] Improve upnp support (#542) 2018-12-02 02:43:39 +01:00
Maniack Crudelis
41c1a9ce13 Do not use a separate ini file for php pools (#548)
Have a look to https://github.com/YunoHost-Apps/nextcloud_ynh/issues/138 for more information.
2018-12-01 23:07:32 +01:00
Alexandre Aubin
09fcea1177
Add libpam-ldapd as dependency to be able to login through SSH with LDAP identities ? (#587) 2018-12-01 16:22:40 +01:00
Alexandre Aubin
c9fec565b5
Log dyndns update only if we really update something (#591) 2018-12-01 16:21:59 +01:00
Maniack Crudelis
e918836ab0 Fix multiple value for getopts (#592) 2018-12-01 16:21:31 +01:00
ljf (zamentur)
847d18293a
[enh] Add other private ip network and link local 2018-11-30 15:47:42 +01:00
Alexandre Aubin
fd142a0976
Merge pull request #589 from YunoHost/fix-force-password-during-postinstall
[fix] Password constrains and checks not behaving properly
2018-11-28 23:04:02 +01:00
Alexandre Aubin
69d0503ba5 Forgot to get the 'value' key here.. 2018-11-28 22:01:27 +00:00
Alexandre Aubin
90e542a931 Allow root login on local networks 2018-11-28 21:30:26 +00:00
Alexandre Aubin
0576b17442 Simplify code / indentation levels 2018-11-28 21:03:28 +00:00
Alexandre Aubin
4db65682eb Fix IPv6 handling in ssh regen conf script 2018-11-28 20:42:39 +00:00
Alexandre Aubin
6a812190c5 Enforce permissions for /etc/ssh/sshd_config 2018-11-28 20:27:42 +00:00
Alexandre Aubin
25efab7f2a We can't have include blocks in sshd_config :| 2018-11-28 19:45:19 +00:00
Alexandre Aubin
f295c83fd3 Order of keys matter, ed25519 is recommended 2018-11-28 19:15:21 +00:00
Alexandre Aubin
3d81f032e9 Fixes following tests (some sshd_config options do not exists or are deprecated) 2018-11-28 17:50:20 +00:00
Alexandre Aubin
5461025479 tools_adminpw was still checking the password strength despite --force-password 2018-11-28 16:16:24 +01:00
frju365
8cb029a55e Better Configuration of nginx (#564)
* path-traversal

* [fix] try a patch for path-traversal

* Use more_set_headers insta
2018-11-28 01:21:28 +01:00
Alexandre Aubin
fad4ff090a Use templating for more robustness about which SSH keys are enabled 2018-11-28 00:26:25 +01:00
Alexandre Aubin
23893c43b3 Increment migrations number 2018-11-28 00:08:53 +01:00
Alexandre Aubin
325678f541 More explicit name for setting 2018-11-28 00:04:25 +01:00
Alexandre Aubin
e596758184 Add a comment about /etc/ssh/sshd_config.to_restor 2018-11-28 00:03:58 +01:00
Alexandre Aubin
2aa0d2b55b Spooky warning is spooky 2018-11-28 00:03:58 +01:00
Alexandre Aubin
6145199564 Improve semantic / simplify a few things 2018-11-28 00:03:58 +01:00
Alexandre Aubin
e8393a3d26 Improve comments, naming and descriptions 2018-11-28 00:03:58 +01:00
Alexandre Aubin
7b6bf6f4b8 Missing 'get' 2018-11-28 00:03:25 +01:00
Alexandre Aubin
68906a1e98 Improve comments 2018-11-28 00:03:25 +01:00
Alexandre Aubin
31c8b88f44 Wordin 2018-11-28 00:03:25 +01:00
ljf (zamentur)
07e5ead038 [fix] Sometimes I need to sleep 2018-11-28 00:00:30 +01:00
ljf (zamentur)
b4e72173cd [fix] If some ssh keys are missing 2018-11-28 00:00:30 +01:00
ljf (zamentur)
b5896e88c3 [enh] Display only used fingerprint in bootprompt 2018-11-28 00:00:30 +01:00