Commit graph

9902 commits

Author SHA1 Message Date
tituspijean
f47d496183
Ensure that app_shell() does not lock the CLI 2023-06-20 16:35:42 +00:00
Alexandre Aubin
fb4693be39 apps: be able to customize the user-part and domain-part of email when using allow_email on system user 2023-06-20 17:59:09 +02:00
Yann Autissier
f9850a2264
keep fail2ban rules on firewall reload (#1661)
* keep fail2ban rules on firewall reload

reloading firewall flushes all iptables rules to create new ones,
dropping fail2ban rules in the same time.

* restart fail2ban instead of reload

Reloading fail2ban does not create f2b-* iptables rules.
2023-06-20 17:49:04 +02:00
Alexandre Aubin
d69c196fe4
Merge pull request #1670 from Salamandar/apt_packages_list
Allow passing a list in the manifest.toml for the apt resource packages
2023-06-20 17:29:26 +02:00
Alexandre Aubin
4da98e74ae
Merge pull request #1680 from npalix/dnsdiag
diagnosis: Support multiple TXT entries for TLD
2023-06-20 16:35:14 +02:00
Nicolas Palix
460e39a2f0 Support multiple TXT entries for TLD
The dig of TXT for @ can returns multiple entries.
In that case, the DNS diagnosis fails.

The modification preserves the handling of DMARC and the likes
which use a single entry and a specfic domain name.

For single entry list, the behavior is preserved.

If mutliple TXT entries are defined for @, only the v=spf1
one is returned.

Signed-off-by: Nicolas Palix <nicolas.palix@imag.fr>
2023-06-20 15:25:31 +02:00
Alexandre Aubin
8a865daddd apps: add YNH_DEFAULT_PHP_VERSION in app's dict as a boring workaround/fix for apps using YNH_DEFAULT_PHP_VERSION in _common.sh *before* sourcing helpers ... 2023-06-19 16:04:31 +02:00
Alexandre Aubin
ced6d5c975 apps: fix version.parse now refusing to parse legacy version numbers 2023-06-18 15:48:14 +02:00
Alexandre Aubin
19eb48b6e7 Update changelog for 11.1.21.4 2023-06-14 15:49:16 +02:00
Alexandre Aubin
29338f79bc apps: don't attempt to del password key if it doesn't exist 2023-06-14 15:48:12 +02:00
Alexandre Aubin
a673b3ed42 Postgresql is now version 15 2023-06-14 10:28:58 +02:00
Alexandre Aubin
8ac48ee09e Drop deprecated firstname/lastname in user_create/update + also drop old deprecated cert- commands 2023-06-14 08:04:16 +02:00
Alexandre Aubin
f6ab380730 helpers/php: Default PHP version in bookworm is now 8.2 2023-06-14 08:02:35 +02:00
Alexandre Aubin
efe3ace98d
Merge pull request #1619 from YunoHost/legacy_cleanup
WIP : Legacy cleanup (meant for Bookworm)
2023-06-13 21:36:37 +02:00
Alexandre Aubin
81b96ad6d4 tests: tmp tweaks to adapt for removed deprecated features 2023-06-13 21:30:20 +02:00
Alexandre Aubin
b4dcd0fb22 Merge branch 'bookworm' into legacy_cleanup 2023-06-13 21:30:01 +02:00
Alexandre Aubin
b6ae711dd7
Merge pull request #1666 from eldertek/fix-2090
[fix] Remove deprecated domain_dns_conf
2023-06-13 20:43:35 +02:00
Alexandre Aubin
194eb9c6c7 conf: Update ciphers for nginx, postfix, dovecot 2023-06-13 20:39:56 +02:00
Alexandre Aubin
c4c353843c Unused vars, unhappy linter gods 2023-06-13 14:57:55 +02:00
Alexandre Aubin
8728b2030c Remove migrations/0027_migrate_to_bookworm for now because it's triggering errors on the CI, at least half of it should be reworked, and it should be in a separated PR to target dev(=bullseye) 2023-06-13 14:57:55 +02:00
Alexandre Aubin
d1d6da8fcb Merge branch 'dev' into bookworm 2023-06-13 14:57:44 +02:00
Alexandre Aubin
48ee78afa2 fix tests: my_webapp is using manifest v2 now 2023-06-13 14:48:30 +02:00
Alexandre Aubin
8242cab735 Get rid of previous tmp hack about /dev/null for people that went through the very first 11.1.21, because it's causing issue in unpriviledged LXC or similar context 2023-06-13 12:28:56 +02:00
Alexandre Aubin
6278c68586 Update changelog for 11.1.21.3 2023-06-12 17:42:10 +02:00
Alexandre Aubin
84984ad89a Fix again /var/www/.well-known/ynh-diagnosis/ perms which are too broad and could be exploited to serve malicious files x_x 2023-06-12 17:41:18 +02:00
Alexandre Aubin
18336b01dc
Merge pull request #1673 from YunoHost/ci-format-debian/11.1.21.2
[CI] Format code with Black
2023-06-12 17:35:10 +02:00
yunohost-bot
2f982e26a9 [CI] Format code with Black 2023-06-12 00:30:59 +00:00
Alexandre Aubin
e1569f962b Update changelog for 11.1.21.2 2023-06-12 00:26:43 +02:00
Alexandre Aubin
313a16476a Aleks loves xargs syntax >_> 2023-06-12 00:25:38 +02:00
Alexandre Aubin
1222c47620 Update changelog for 11.1.21.1 2023-06-12 00:03:10 +02:00
Alexandre Aubin
e6f134bc91 Fix stupid issue with code that changes /dev/null perms... 2023-06-12 00:02:43 +02:00
Alexandre Aubin
fcf263242e Update changelog for 11.1.21 2023-06-11 19:35:49 +02:00
Alexandre Aubin
8a27045d78
Merge pull request #1669 from yunohost-bot/weblate-yunohost-core
Translations update from Weblate
2023-06-11 19:24:39 +02:00
ppr
bc42fd7ab2 Translated using Weblate (French)
Currently translated at 100.0% (768 of 768 strings)

Translation: YunoHost/core
Translate-URL: https://translate.yunohost.org/projects/yunohost/core/fr/
2023-06-11 12:41:28 +02:00
Tymofii-Lytvynenko
69339f8d0e Translated using Weblate (Ukrainian)
Currently translated at 100.0% (768 of 768 strings)

Translation: YunoHost/core
Translate-URL: https://translate.yunohost.org/projects/yunohost/core/uk/
2023-06-11 02:30:11 +02:00
Tagada
5a2570a5d6 Merge branch 'dev' into bookworm 2023-06-11 00:00:38 +02:00
8caff6a9dc Allow passing a list in the manifest.toml for the apt resource packages 2023-06-10 22:27:39 +02:00
Kuba Bazan
1087c800a6 Translated using Weblate (Polish)
Currently translated at 25.7% (197 of 764 strings)

Translation: YunoHost/core
Translate-URL: https://translate.yunohost.org/projects/yunohost/core/pl/
2023-06-09 22:30:59 +02:00
Alexandre Aubin
d42c99835a nginx: use /var/www/.well-known folder for ynh diagnosis and acme challenge, because /tmp/ could be manipulated by user to serve maliciously crafted files 2023-06-09 22:30:32 +02:00
Alexandre Aubin
cec0dfe158
Merge pull request #1668 from YunoHost/enh-verbose-user_group_update
more verbose logs for user_group _update
2023-06-05 14:05:20 +02:00
Kayou
78cd79ec48
Update debian/changelog 2023-06-05 10:11:50 +02:00
Tagada
fee5375dc4 more verbose logs for user_group _update
fix YunoHost/issues#2193
2023-06-04 23:50:23 +02:00
tituspijean
9cebd2e3fe
Merge pull request #1656 from YunoHost/app_shell 2023-05-30 13:28:15 +02:00
tituspijean
f3faac87f8
Improve comments of ynh_spawn_app_shell 2023-05-30 11:27:33 +00:00
tituspijean
db7ab2a98b
Homogeneize command subtitutions in ynh_spawn_app_shell 2023-05-30 11:18:54 +00:00
Alexandre Aubin
e649c092a3 regenconf: force systemd, nginx, php and fail2ban conf to be owned by root 2023-05-26 21:44:39 +02:00
Alexandre Aubin
daf51e94bd regeconf: fix security issue where apps' system conf would be owned by the app, which can enable priviledge escalation 2023-05-26 21:06:01 +02:00
Alexandre Aubin
1552944fdd apps: fix auto-catalog update cron job which was broken because --apps doesnt exist anymore 2023-05-26 20:42:01 +02:00
tituspijean
1300585eda
Improve ynh_spawn_app_shell comments
Co-authored-by: Florent <florent.git@zeteo.me>
2023-05-25 09:48:55 +02:00
tituspijean
bb9db08e29
Improve ynh_spawn_app_shell documentation 2023-05-24 22:32:51 +00:00