Commit graph

404 commits

Author SHA1 Message Date
ljf
8829e2ccce [fix] Diagnosis dns query timeout 2021-05-24 15:30:08 +02:00
Alexandre Aubin
51478d14e2 ssh_config: add conf block for sftp apps 2021-05-07 19:48:22 +02:00
Alexandre Aubin
db3cc62bc7 Add ssh.app, sftp.app groups to cover my_webapp and borg needing ssh access 2021-04-24 17:26:03 +02:00
Alexandre Aubin
65759e978f
Merge pull request #1213 from YunoHost/app_manifest
Add route to fetch app manifest for custom app installs in a forge-agnostic way
2021-04-17 01:56:36 +02:00
Alexandre Aubin
eadca492f8
Merge branch 'dev' into sftp_permission 2021-04-16 17:55:54 +02:00
Alexandre Aubin
be6c39bf8c No need for Github CSP rule in the webadmin anymore 2021-04-16 00:45:54 +02:00
Laurent Peuch
a0b32d5f1b [enh] add header to disallow FLoC
https://diaspodon.fr/@etienne/106070042112522839
2021-04-15 17:56:50 +02:00
Alexandre Aubin
37c0825eed Also propagate ssh port on fail2ban config 2021-04-15 12:22:21 +02:00
Kay0u
ee31969be7
add ssh port setting 2021-04-12 18:07:36 +02:00
Alexandre Aubin
3a37262deb
Merge pull request #1159 from grenagit/enh-1725-support-smtps-relay
[enh] Support SMTPS Relay
2021-04-09 18:37:53 +02:00
Alexandre Aubin
f94a5f95a3
nginx conf: CSP rules for admin was blocking small images used for checkboxes, radio, pacman in the new webadmin 2021-04-09 00:00:40 +02:00
Alexandre Aubin
b40f21458f ssh config: indent, misc readabilty improvements 2021-03-25 16:19:40 +01:00
Alexandre Aubin
f0c4498c80
Merge branch 'dev' into sftp_permission 2021-03-25 14:42:30 +01:00
Alexandre Aubin
4476c968c0
Merge pull request #1154 from YunoHost/fix-upnp-closing-port
fix upnp closing port
2021-01-31 14:39:20 +01:00
grenagit
6273790a63
Update main.cf 2021-01-31 10:15:32 +01:00
Kayou
fea1ad474b
remove cache 2021-01-28 00:03:38 +01:00
Kay0u
a3f3f891e4
fix upnp closing port 2021-01-26 20:05:37 +01:00
Kay0u
0efd830743
fix can ynh-admin vuejs 2021-01-22 14:49:47 +01:00
Alexandre Aubin
dfeb05a8eb
Merge pull request #1074 from YunoHost/increase-ldap-size-limit
Increase ldap size limit?
2020-12-17 21:24:44 +01:00
ljf (zamentur)
11fe9d7e02
[fix] Accept all kind of relay even the unencrypted 2020-12-15 22:08:49 +01:00
Alexandre Aubin
c5d06af20e Guess what ... If people manually tweaked their nginx.conf to enable gzip globally, this will break cert renewal .. 2020-12-11 20:40:45 +01:00
Alexandre Aubin
379c6e435c
Merge pull request #1094 from YunoHost/fix-too-many-recipient
[fix] Avoid too many recipient
2020-12-11 14:22:30 +01:00
ljf (zamentur)
116a15f9f1
[fix] Avoid to define the ip on wildcard subdomains too 2020-12-10 18:18:09 +01:00
ljf (zamentur)
11fb2659c6
[fix] Avoid too many recipient 2020-12-04 14:13:21 +01:00
ljf
95eea93c4a [fix] Remove rebase conflict blank line 2020-12-03 18:27:09 +01:00
ljf
f79b0ff0a3 [enh] SFTP and SSH permissions 2020-12-03 18:20:45 +01:00
Josué Tille
5e6bcb2346 Add possibility to restrict the user allowed to access by sftp 2020-12-03 18:17:52 +01:00
Alexandre Aubin
1cb75497c4 Increase ldap size limit? 2020-11-17 15:29:24 +01:00
Alexandre Aubin
c45c182980
Merge pull request #861 from YunoHost/permission_protection
Extends permissions features
2020-10-30 14:51:52 +01:00
ljf (zamentur)
02105568f8
[fix] MySQL server has gone away in nextcloud
[Warning] Aborted connection 110060 to db: 'nextcloud' user: 'nextcloud' host: 'localhost' (Got a packet bigger than 'max_allowed_packet' bytes)
2020-10-12 14:39:03 +02:00
Alexandre Aubin
ba884d5b6d Get rid of yunohost.local in main domain nginx conf ... because this interfer with using yunohost.local for postinstall. Just let it be handled by the default vhost 2020-10-03 16:32:31 +02:00
Alexandre Aubin
2c6736df29 These fail2ban jails do not exists anymore (since buster I guess ?) 2020-10-03 11:19:44 +02:00
Alexandre Aubin
a7d105ace6 Merge branch 'dev' into permission_protection 2020-09-30 18:48:26 +02:00
Alexandre Aubin
6e69df3768 Add configuration tests for dnsmasq, fail2ban, slapd 2020-09-29 16:24:30 +02:00
ljf (zamentur)
5923114b20
[fix] Reduce right given to ynh users with ssh (#1050)
* [fix] Avoid ynh user to be able to use X11 forwarding

* [fix] Avoid some bad situations

* [fix] Remove chroot restrictions and x11 authorization

* Update comments

Co-authored-by: Alexandre Aubin <alex.aubin@mailoo.org>
2020-09-11 20:27:40 +02:00
Alexandre Aubin
0ad014ad1f
Merge branch 'dev' into enh-relay-smtp 2020-09-10 17:50:10 +02:00
ljf (zamentur)
bc2de62c7b
[fix] Typo in setting name 2020-09-10 03:29:09 +02:00
ljf (zamentur)
ce9689e0ef
[enh] Force encrypt if we are using an smtp relay
Thanks to @khimaros for this suggestion
2020-09-10 03:27:13 +02:00
Alexandre Aubin
83585b2375
Merge branch 'dev' into permission_protection 2020-09-08 17:06:49 +02:00
Alexandre Aubin
cc4db7a6f6
Add a comment explaining why the location is empty 2020-09-03 23:47:24 +02:00
ljf
f92b84bd94 [fix] SSO unavailable 2020-09-03 22:27:46 +02:00
Alexandre Aubin
f46e318374 [fix] Stupid syntax issue in dovecot conf 2020-09-01 01:59:49 +02:00
Alexandre Aubin
503e08b58b Add xmpp-upload stuff in dnsmasq conf 2020-08-31 16:41:54 +02:00
Alexandre Aubin
bc7344b636 Use proper templating for dnsmasq conf 2020-08-31 16:41:31 +02:00
Alexandre Aubin
ed528d43bf Fix stupid typo in postfix conf T_T 2020-08-28 17:55:02 +02:00
Alexandre Aubin
e5e26c2b81 Typo in postfix's conf template 2020-08-25 16:46:02 +02:00
Josué Tille
e6da35abd1
Merge branch 'dev' into permission_protection 2020-08-23 21:48:18 +02:00
Alexandre Aubin
2d661737b3 Update dovecot configuration now that we have a DH param 2020-08-18 13:29:02 +02:00
Alexandre Aubin
89bcf1ba6d Update postfix configuration now that we're on Buster + we have DH param 2020-08-18 13:25:38 +02:00
Alexandre Aubin
f3a4334a13 Upgrade nginx configuration according to Mozilla guidelines now that we're on Buster 2020-08-14 14:50:54 +02:00