Commit graph

108 commits

Author SHA1 Message Date
Alexandre Aubin
402327d6ef regenconf: factorize all the dirs/perm stuff in the yunohost hook 2024-02-03 19:43:13 +01:00
Alexandre Aubin
ceace620da regenconf: factorize nginx regenconf a bit 2024-02-03 18:58:34 +01:00
Alexandre Aubin
ce529107be regenconf: remove unecessary/inconsistent check that script is ran as root... 2024-02-03 18:42:08 +01:00
Alexandre Aubin
41da1daf02 nginx: remove old 'yunohost_panel.conf' stuff 2024-02-03 18:39:25 +01:00
Alexandre Aubin
98701ebdab regenconf: the 'plain' subfolder thing for nginx conf is annoying, flatten things up 2024-02-03 18:36:55 +01:00
Alexandre Aubin
2d42f59377 logs: remove the intermediate useless 'categories' directory, this is triggering me so much 2024-01-27 15:31:10 +01:00
Alexandre Aubin
862e66c17e regenconf/dovecot: make sure the home folder for vmail user is created to prevent a warning 2024-01-14 18:47:17 +01:00
Alexandre Aubin
3070e504ad Make rspamd an optional dependency, because rspamd is only necessary when you really care about incoming mail, is resource-heavy, and for some reason some setups cant install libhyperscan which is required by rspamd 2023-12-26 17:52:08 +01:00
Alexandre Aubin
3922ba9c68 Implement similar cookie mechanism for admin api (compared to portal) with static secret (cookies aint invalidated by api restart) and rolling session validity 2023-12-19 20:01:40 +01:00
Alexandre Aubin
16391d7374 perf: lazyloading settings_get + pass all the global settings as an env variable to the regenconf to prevent having to 'yunohost settings get' like ten times ... reduces the regenconf runtime from 35s to 23s on my machine 2023-11-28 21:12:03 +01:00
Alexandre Aubin
24741de4d9 portalapi: turns out ssowat (as www-data) needs to be able to validate that the session file exists 2023-11-28 19:15:33 +01:00
Alexandre Aubin
d7855fc9a7 portalapi: propagate changes to fail2ban config 2023-11-28 18:40:49 +01:00
Alexandre Aubin
356c081a4f portalapi: implement a proper expiration/prolong mechanism for session cookies 2023-11-28 18:40:49 +01:00
Alexandre Aubin
566f5d29a7 domain/portal: try to re-implement portal logo 2023-11-13 19:02:25 +01:00
axolotle
bfba939927 Merge remote-tracking branch 'origin/dev' into bookworm 2023-10-31 02:57:26 +01:00
Alexandre Aubin
8aee337d0f regenconf/portal: fix attempt to chown before the user is created 2023-10-30 17:04:58 +01:00
axolotle
6f085ad255 conf_regen:yunohost: repeat init portal setup in post hook 2023-10-19 14:33:52 +02:00
axolotle
827fbe337d conf_regen:yunohost: setup /etc/yunohost/portal 2023-10-18 18:21:03 +02:00
Chris Vogel
379b6922ad install file to redis configuration
ouch... Thanks @Tagadda!
2023-10-17 21:13:09 +02:00
Alexandre Aubin
385c131d0c regenconf: fix dummy warning 2023-09-29 16:53:18 +02:00
Alexandre Aubin
f617b97d80
portal/ssowat: fix conf initialization 2023-09-27 22:08:26 +02:00
Alexandre Aubin
b61a16421b portal-api: fix cookie secret initialization 2023-09-27 20:51:45 +02:00
Alexandre Aubin
db30b3acb8
Merge branch 'bookworm' into portal-api 2023-09-27 18:57:02 +02:00
Alexandre Aubin
f69f87fa65 Merge remote-tracking branch 'origin/dev' into portal-api 2023-07-17 18:56:05 +02:00
Alexandre Aubin
6c6dd318fb portalapi: implement encrypted password storage in the user's cookie using AES256 2023-07-11 22:39:22 +02:00
Alexandre Aubin
236e85eece apt: add signed-by clause to sury and yarn repo 2023-07-11 18:12:34 +02:00
Alexandre Aubin
f1200b81dc apt: always add yarn repo because it's annoying to have to deal with an extra repo in each nodejs app just to install a single package.. 2023-07-11 18:12:34 +02:00
Alexandre Aubin
a1cf770e1b Merge branch 'dev' into portal-api 2023-07-11 17:11:02 +02:00
Alexandre Aubin
7ba6c37eb8 Merge branch '11.2' into bookworm 2023-07-11 15:56:52 +02:00
Alexandre Aubin
961dc5a6ee
Merge pull request #815 from YunoHost/allow-system-user-to-auth-on-mail-stack
Allow system users to auth on the mail stack and send emails
2023-07-10 19:14:30 +02:00
Alexandre Aubin
af93524c36 regenconf: fix a stupid bug using chown instead of chmod ... 2023-07-10 17:55:21 +02:00
Alexandre Aubin
d1d6da8fcb Merge branch 'dev' into bookworm 2023-06-13 14:57:44 +02:00
Alexandre Aubin
8242cab735 Get rid of previous tmp hack about /dev/null for people that went through the very first 11.1.21, because it's causing issue in unpriviledged LXC or similar context 2023-06-13 12:28:56 +02:00
Alexandre Aubin
84984ad89a Fix again /var/www/.well-known/ynh-diagnosis/ perms which are too broad and could be exploited to serve malicious files x_x 2023-06-12 17:41:18 +02:00
Alexandre Aubin
313a16476a Aleks loves xargs syntax >_> 2023-06-12 00:25:38 +02:00
Alexandre Aubin
e6f134bc91 Fix stupid issue with code that changes /dev/null perms... 2023-06-12 00:02:43 +02:00
Tagada
5a2570a5d6 Merge branch 'dev' into bookworm 2023-06-11 00:00:38 +02:00
Alexandre Aubin
e649c092a3 regenconf: force systemd, nginx, php and fail2ban conf to be owned by root 2023-05-26 21:44:39 +02:00
Alexandre Aubin
1552944fdd apps: fix auto-catalog update cron job which was broken because --apps doesnt exist anymore 2023-05-26 20:42:01 +02:00
Alexandre Aubin
482f8f3443 backup: fix again backup hook for xmpp when data folder dont exist 2023-05-15 17:37:11 +02:00
Alexandre Aubin
7fc7d188ad Fix XMPP stuff that may not exists 2023-05-05 20:11:16 +02:00
Alexandre Aubin
c48d9ec483 appsv2/mail: add new 'allow_email' flag on app system users that will autogenerate a passwd-like file to be used by dovecot + map for postfix 2023-02-28 17:56:49 +01:00
Alexandre Aubin
b40c0de33c Fix pop3_enabled parsing returning 0/1 instead of True/False ... 2023-02-26 17:44:48 +01:00
Alexandre Aubin
97c0128c22 regenconf: sometimes ntp doesnt exist 2023-02-26 15:11:18 +01:00
Alexandre Aubin
20e8805e3b misc: automatic get rid of /etc/profile.d/check_yunohost_is_installed.sh when yunohost is postinstalled 2023-02-25 16:02:14 +01:00
Alexandre Aubin
343065eb5d regenconf: fix undefined var in apt regenconf 2023-02-19 21:38:53 +01:00
Alexandre Aubin
e6ae389297 postgresql: moar regenconf fixes 2023-02-19 19:38:48 +01:00
Alexandre Aubin
18e034df8a regenconf: in apt/php stuff, don't try to upgrade-alternatives if the default PHP version ain't available anymore (similar to commit e24ddd29) 2023-02-18 16:34:54 +01:00
Alexandre Aubin
8a43b04614 postgresql: fix regenconf hook, the arg format thingy changed a bit at some point ? 2023-02-18 16:33:50 +01:00
Alexandre Aubin
170eaf5d74 backup/multimedia: test that /home/yunohots.multimedia does exists to avoid boring warning later 2023-02-06 15:46:21 +01:00