245 commits

Author	SHA1	Message	Date
Alexandre Aubin	abe9440b1b	On some weird setup, this folder and content ain't readable by group ... gotta make sure to make rx for group other slapd will explode	2020-03-27 21:42:36 +01:00
Alexandre Aubin	8533103788	Merge pull request #803 from YunoHost/burn-etckeeper ... Get rid of etckeeper	2019-10-08 18:33:12 +02:00
Alexandre Aubin	eb57a4ad9e	Get rid of etckeeper	2019-09-19 19:51:27 +02:00
Alexandre Aubin	ec5069b71c	Propagate changes on backup tests + fixes bugs found in the process	2019-09-13 16:33:25 +02:00
Étienne Mollier	f0440fbd6b	Dynamically evaluate proper mariadb-server-<version>	2019-08-15 15:12:06 +02:00
Alexandre Aubin	2dc809548b	Fixing again the whole permission / cert situation for slapd ... for good this time hopefully	2019-08-13 17:32:55 +02:00
Alexandre Aubin	6f48d1d855	Get rid of those sudo's ... otherwise, because sudo is in fact sudo-ldap, might create weird errors or stuck situation where everything is broken because slapd is stopped and the regenconf can't restart it	2019-08-12 11:16:07 +02:00
Alexandre Aubin	0a2d1c7eb6	We need this also to have proper permissions on certs	2019-08-12 11:16:04 +02:00
Alexandre Aubin	dde3a19350	Fix some critical permissions issues with ssl / slapd configuration	2019-08-12 01:56:24 +02:00
Alexandre Aubin	10f1651022	Moving to the post-regen part because the pre-regen part should touch as little as possible of the actual system config	2019-08-03 21:00:44 +02:00
yalh76	bae6fe86f3	spelling	2019-08-01 22:28:55 +02:00
yalh76	577d8f477f	Add openldap user in the ssl-cert grou	2019-07-14 14:25:09 +02:00
Alexandre Aubin	59e2db99ba	Merge branch 'stretch-unstable' into group_permission	2019-07-05 20:59:10 +02:00
Alexandre Aubin	b9197b6269	Fix 'unable to write random state in SSL init (same patch as for yunohost-admin)	2019-06-27 00:57:28 +02:00
Alexandre Aubin	d8b086a06a	[fix] Running slapindex seems to fix the previous issues about LDAP indexing stuff	2019-06-06 19:26:49 +02:00
Alexandre Aubin	24cfc15536	Merge branch 'stretch-unstable' into group_permission	2019-05-31 18:15:09 +02:00
Josué Tille	f839ec5153	Improve restoration mecanisme for LDAP integrity	2019-05-26 00:54:57 +02:00
Alexandre Aubin	93d0fbc4cf	Merge pull request #696 from rds13/featurePostfixRemoveTLSv1Support ... [enh] Propose a setting to remove support for TLSv1 and TLSv1.1 in Postfix	2019-05-14 19:19:25 +02:00
Josué Tille	fde8cafa4e	Merge remote-tracking branch 'upstream/stretch-unstable' into group_permission	2019-05-10 22:53:06 +02:00
Alexandre Aubin	ce465476f2	Merge pull request #704 from kay0u/patch-6 ... [FIX] Hook backup warning message	2019-04-25 13:51:38 +02:00
Alexandre Aubin	1fc9f7ddad	Fix yunohost_admin.conf initialization	2019-04-11 14:27:09 +02:00
Kayou	b7bf951538	Tired of seeing this warning message	2019-04-10 12:15:21 +02:00
Romuald du Song	15ac51098d	propose a setting to remove support for TLSv1 and TLSv1.1	2019-03-28 22:03:25 +01:00
Alexandre Aubin	fefa44e062	Typo in previous commits	2019-03-22 17:14:48 +01:00
Alexandre Aubin	dcff10f6f8	Simplify setting usage in regenconf hooks	2019-03-22 16:31:45 +01:00
Alexandre Aubin	fee79820e0	Rename nginx and ssh compatibility setting for consistency	2019-03-22 16:15:11 +01:00
Alexandre Aubin	650232b1c3	Merge branch 'stretch-unstable' into group_permission	2019-03-05 02:59:05 +01:00
Alexandre Aubin	a1d85b6350	Merge branch 'stretch-unstable' into featureCipherStrategy	2019-02-25 00:56:20 +01:00
Alexandre Aubin	d495d315c0	[fix] Loading only one helper file leads to errors because missing getopts	2019-02-16 16:36:35 +01:00
Romuald du Song	aaf6dba8d7	fix yunhost admin config filename	2019-02-14 23:03:27 +01:00
Romuald du Song	a899102efc	don't share setting for nginx and ssh	2019-02-14 22:57:24 +01:00
Romuald du Song	12d0e0e1de	add instruction to rebuild yunohost-admin conf	2019-02-14 22:34:35 +01:00
Romuald du Song	e0aaf6f8a1	add trace for process check	2019-02-09 11:56:33 +01:00
Romuald du Song	8e1034771a	use setting security_ciphers_compatibility to define security configurations	2019-02-04 23:01:16 +01:00
Josué Tille	b01e4b61f5	Implement backup - restore and update test	2019-01-17 22:15:13 +01:00
Josué Tille	d975ed2689	Update LDAP config	2019-01-17 22:14:24 +01:00
Alexandre Aubin	6a7990d7fb	[fix] Weird duplicated code + fix missing key file triggering an error	2019-01-04 16:25:49 +01:00
Alexandre Aubin	4f05cd5b2b	Uh for some reason we need to return *0* explicitly	2018-12-03 16:56:28 +00:00
Alexandre Aubin	447372d07c	[enh] Clean + harden sshd config using Mozilla recommendation (#590) ... * Clean sshd_config + harden using Mozilla recommendation * Order of keys matter, ed25519 is recommended	2018-12-03 17:03:22 +01:00
Alexandre Aubin	0576b17442	Simplify code / indentation levels	2018-11-28 21:03:28 +00:00
Alexandre Aubin	4db65682eb	Fix IPv6 handling in ssh regen conf script	2018-11-28 20:42:39 +00:00
Alexandre Aubin	6a812190c5	Enforce permissions for /etc/ssh/sshd_config	2018-11-28 20:27:42 +00:00
Alexandre Aubin	f295c83fd3	Order of keys matter, ed25519 is recommended	2018-11-28 19:15:21 +00:00
Alexandre Aubin	3d81f032e9	Fixes following tests (some sshd_config options do not exists or are deprecated)	2018-11-28 17:50:20 +00:00
Alexandre Aubin	fad4ff090a	Use templating for more robustness about which SSH keys are enabled	2018-11-28 00:26:25 +01:00
Alexandre Aubin	325678f541	More explicit name for setting	2018-11-28 00:04:25 +01:00
Alexandre Aubin	7b6bf6f4b8	Missing 'get'	2018-11-28 00:03:25 +01:00
ljf	8e0086d493	[fix] Allow user to trigger the moment when they remove dsa	2018-11-28 00:00:30 +01:00
ljf	8598d81bb1	[wip] Standardize ssh config	2018-11-27 23:58:29 +01:00
Alexandre Aubin	662666fb5a	Readability improvement	2018-11-18 17:56:19 +01:00