Alexandre Aubin
|
3922ba9c68
|
Implement similar cookie mechanism for admin api (compared to portal) with static secret (cookies aint invalidated by api restart) and rolling session validity
|
2023-12-19 20:01:40 +01:00 |
|
Alexandre Aubin
|
24741de4d9
|
portalapi: turns out ssowat (as www-data) needs to be able to validate that the session file exists
|
2023-11-28 19:15:33 +01:00 |
|
Alexandre Aubin
|
356c081a4f
|
portalapi: implement a proper expiration/prolong mechanism for session cookies
|
2023-11-28 18:40:49 +01:00 |
|
Alexandre Aubin
|
566f5d29a7
|
domain/portal: try to re-implement portal logo
|
2023-11-13 19:02:25 +01:00 |
|
Alexandre Aubin
|
8aee337d0f
|
regenconf/portal: fix attempt to chown before the user is created
|
2023-10-30 17:04:58 +01:00 |
|
axolotle
|
6f085ad255
|
conf_regen:yunohost: repeat init portal setup in post hook
|
2023-10-19 14:33:52 +02:00 |
|
axolotle
|
827fbe337d
|
conf_regen:yunohost: setup /etc/yunohost/portal
|
2023-10-18 18:21:03 +02:00 |
|
Alexandre Aubin
|
385c131d0c
|
regenconf: fix dummy warning
|
2023-09-29 16:53:18 +02:00 |
|
Alexandre Aubin
|
f617b97d80
|
portal/ssowat: fix conf initialization
|
2023-09-27 22:08:26 +02:00 |
|
Alexandre Aubin
|
b61a16421b
|
portal-api: fix cookie secret initialization
|
2023-09-27 20:51:45 +02:00 |
|
Alexandre Aubin
|
6c6dd318fb
|
portalapi: implement encrypted password storage in the user's cookie using AES256
|
2023-07-11 22:39:22 +02:00 |
|
Alexandre Aubin
|
a1cf770e1b
|
Merge branch 'dev' into portal-api
|
2023-07-11 17:11:02 +02:00 |
|
Alexandre Aubin
|
8242cab735
|
Get rid of previous tmp hack about /dev/null for people that went through the very first 11.1.21, because it's causing issue in unpriviledged LXC or similar context
|
2023-06-13 12:28:56 +02:00 |
|
Alexandre Aubin
|
84984ad89a
|
Fix again /var/www/.well-known/ynh-diagnosis/ perms which are too broad and could be exploited to serve malicious files x_x
|
2023-06-12 17:41:18 +02:00 |
|
Alexandre Aubin
|
313a16476a
|
Aleks loves xargs syntax >_>
|
2023-06-12 00:25:38 +02:00 |
|
Alexandre Aubin
|
e6f134bc91
|
Fix stupid issue with code that changes /dev/null perms...
|
2023-06-12 00:02:43 +02:00 |
|
Alexandre Aubin
|
e649c092a3
|
regenconf: force systemd, nginx, php and fail2ban conf to be owned by root
|
2023-05-26 21:44:39 +02:00 |
|
Alexandre Aubin
|
1552944fdd
|
apps: fix auto-catalog update cron job which was broken because --apps doesnt exist anymore
|
2023-05-26 20:42:01 +02:00 |
|
Alexandre Aubin
|
97c0128c22
|
regenconf: sometimes ntp doesnt exist
|
2023-02-26 15:11:18 +01:00 |
|
Alexandre Aubin
|
20e8805e3b
|
misc: automatic get rid of /etc/profile.d/check_yunohost_is_installed.sh when yunohost is postinstalled
|
2023-02-25 16:02:14 +01:00 |
|
Alexandre Aubin
|
9bd981620c
|
regenconf: fix yunohost hook incorectly tweaking mdns.yml ownership
|
2022-11-20 19:41:08 +01:00 |
|
Alexandre Aubin
|
d1d203726b
|
Merge remote-tracking branch 'origin/enh-actions' into 11.1
|
2022-10-04 22:33:28 +02:00 |
|
ljf (zamentur)
|
b0411d5da9
|
[fix] Lidswitch if no reboot
|
2022-09-12 01:47:03 +02:00 |
|
Alexandre Aubin
|
87abbe678d
|
Merge remote-tracking branch 'origin/dev' into admins
|
2022-08-09 18:29:59 +02:00 |
|
Alexandre Aubin
|
58ffff556c
|
Merge remote-tracking branch 'origin/dev' into portal-api
|
2022-08-09 18:22:32 +02:00 |
|
Alexandre Aubin
|
d6a6ca1db4
|
security: Enable proc-hidepid by default
|
2022-02-01 12:52:40 +01:00 |
|
Alexandre Aubin
|
bccff1b442
|
regenconf: make some systemctl enable/disable quiet
|
2022-01-29 15:52:20 +01:00 |
|
Alexandre Aubin
|
6cae524910
|
Drop the 'admin' user, have 'admins' be a group of Yunohost users instead
|
2022-01-11 14:53:04 +01:00 |
|
Alexandre Aubin
|
63a84f5398
|
dyndns: replace dnssec-keygen and nsupdate with python code, drop legacy md5 stuff, drop unecessary dyndns 'private' key
|
2022-01-03 20:02:56 +01:00 |
|
Alexandre Aubin
|
76eba6fc88
|
Fix log permission issue for yunohost-portal-api
|
2021-12-27 13:05:11 +01:00 |
|
Alexandre Aubin
|
bd564e6a53
|
Add systemd conf for new service yunohost-portal-api
|
2021-12-27 12:44:20 +01:00 |
|
Alexandre Aubin
|
00d535a620
|
Stop using /home/yunohost.conf for regenconf / confbackup, /var/cache is fine, prevent confusing /home/yunohost.* folder
|
2021-12-06 18:38:54 +01:00 |
|
Alexandre Aubin
|
8eaa701230
|
Fuckit I don't understand how to properly manage systemctl service with debian files while having flexibility on when the api restart happens, let's manage everything with the regen conf
|
2021-12-01 21:06:53 +01:00 |
|
Alexandre Aubin
|
76075909c9
|
Moar attempt to fix ssl cert generation + automigrate legacy + enforce sensible permissions
|
2021-11-30 21:29:11 +01:00 |
|
Alexandre Aubin
|
45584b44a6
|
Merge branch 'dev' into bullseye
|
2021-11-28 16:27:22 +01:00 |
|
Alexandre Aubin
|
10e00b3318
|
Fix old moulinette stuff not relevant anymore
|
2021-11-22 08:13:14 +01:00 |
|
Alexandre Aubin
|
9c28c07af4
|
Fix overly complex location for ssl workdir
|
2021-11-22 08:10:14 +01:00 |
|
Alexandre Aubin
|
05f25fa85f
|
Propagate dir structure change to scripts etc
|
2021-11-10 18:25:37 +01:00 |
|
Alexandre Aubin
|
5de9e4fe6a
|
Yolorework the repo dir structure
|
2021-11-10 17:56:02 +01:00 |
|