Commit graph

349 commits

Author SHA1 Message Date
Alexandre Aubin
3c0649f1e3
Merge branch 'dev' into folder-init-in-regenconf 2021-01-31 16:19:03 +01:00
Alexandre Aubin
68e24c986a
Merge pull request #1062 from YunoHost/move-local-ca-mangement-to-regenconf
Refactor local CA management for more consistency and simpler postinstall
2021-01-31 16:17:20 +01:00
Alexandre Aubin
46138e9e73 We need that file for the first domain_add during postinstall 2021-01-23 01:27:14 +01:00
Alexandre Aubin
ed35915e7f Move ldap initialization before the postinstall 2021-01-23 00:03:25 +01:00
Alexandre Aubin
f755259790 Initialize folders during .deb install instead of regen conf 2021-01-23 00:01:26 +01:00
Alexandre Aubin
25f2bdf83a Refactor local CA management for more consistency and simpler postinstall 2021-01-22 23:58:12 +01:00
Alexandre Aubin
148bfdac0d Also ban bind9 2021-01-21 23:59:22 +01:00
Alexandre Aubin
3e290d5c37 Prevent the installation of apache2 ... 2021-01-21 23:55:37 +01:00
Alexandre Aubin
c43a51ba30
Merge branch 'dev' into enh-python3 2021-01-10 18:31:19 +01:00
Alexandre Aubin
a665c702d0 Annnd of course we have references to python2 in bash stuff and other misc scripts 2021-01-10 02:07:24 +01:00
Alexandre Aubin
b25cde0b67
[fix] Make sure relay_user var exists in all cases (otherwise in the jinja template later, relay_user != "" is True if the var doesn't exists...) 2021-01-08 15:57:41 +01:00
ljf
95eea93c4a [fix] Remove rebase conflict blank line 2020-12-03 18:27:09 +01:00
ljf
f79b0ff0a3 [enh] SFTP and SSH permissions 2020-12-03 18:20:45 +01:00
Josué Tille
5e6bcb2346 Add possibility to restrict the user allowed to access by sftp 2020-12-03 18:17:52 +01:00
Alexandre Aubin
ba884d5b6d Get rid of yunohost.local in main domain nginx conf ... because this interfer with using yunohost.local for postinstall. Just let it be handled by the default vhost 2020-10-03 16:32:31 +02:00
Quentin Duchemin
6940ea1946
Fix redis hook (bash does not allow empty function
Add a dummy instruction equivalent to true
2020-10-03 11:24:47 +02:00
Alexandre Aubin
a1c1057ab4 Add redis hook to enforce permissions on /var/log/redis 2020-09-29 15:10:03 +02:00
Alexandre Aubin
a60cd4f559
Diagnose ssl libs installed from sury (#1053)
* Small fix / syntax improvement in apt conf regen hook

* Diagnose, report and add a tip if some ssl libs are installed from Sury (shouldnt happen with the new pinning strategy, but some user still encounter issues because of this because of legacy installs)
2020-09-16 16:18:10 +02:00
Alexandre Aubin
6a618b0f33 Use php7.3 by default in CLI 2020-09-16 15:24:28 +02:00
Alexandre Aubin
9156b1e56a Fix warnings and weird stuff >_> 2020-09-14 17:54:20 +02:00
Alexandre Aubin
0ad014ad1f
Merge branch 'dev' into enh-relay-smtp 2020-09-10 17:50:10 +02:00
Alexandre Aubin
bc7344b636 Use proper templating for dnsmasq conf 2020-08-31 16:41:31 +02:00
Alexandre Aubin
a23233ab0f Add apt regenconf hook to manage sury pinning policy on all 2020-08-28 22:30:20 +02:00
Alexandre Aubin
8454f2ec12 Recursively enforce ownership for rspamd 2020-08-21 20:40:55 +02:00
Alexandre Aubin
e28c618e67 Those single quotes were probably meant to be double quotes? 2020-07-27 19:26:18 +02:00
Alexandre Aubin
2bbff1d264 Factorize the actual slapd regeneration 2020-07-27 19:26:18 +02:00
Alexandre Aubin
a179e9107a Misc comment improvements? 2020-07-27 19:26:18 +02:00
Josue-T
c0d3a361e3 Update data/hooks/conf_regen/06-slapd
Co-authored-by: Alexandre Aubin <alex.aubin@mailoo.org>
2020-07-27 19:26:18 +02:00
Josué Tille
e6a52f09bd [fix] Clean old files 2020-07-27 19:26:18 +02:00
Josué Tille
9bb8c0437d Rewrite slapd regen-conf for new config file 2020-07-27 19:26:18 +02:00
Alexandre Aubin
ca20eda9ca [firewall] Let's not disable nftables that makes the script crash if it's not installed and we don't really need to disable it anyway since it's already configured to conflict 2020-07-27 19:26:18 +02:00
Alexandre Aubin
5914740957 [firewall] nftables is the new iptables-persistent and it should conflict with yunohost-firewall 2020-07-27 19:26:18 +02:00
Alexandre Aubin
fa59ad35a9 [conf] Automatically disable/stop systemd-resolved that conflicts with dnsmasq on fresh setups ... 2020-07-27 19:23:07 +02:00
Alexandre Aubin
d435889776 Make sure to validate/upgrade that we don't have any active weak certificate used by nginx at the beginning of the buster migration, otherwise nginx will later miserably fail to start 2020-06-29 22:04:04 +02:00
Alexandre Aubin
ac9182d69f Move redirect to /yunohost/admin to a separate nginx conf file to allow customizing it more easily 2020-06-25 21:42:46 +02:00
Alexandre Aubin
8f8be838b6 Enforce permissions on rspamd log directory 2020-06-21 19:57:51 +02:00
Alexandre Aubin
9d0c092481 Disable/skip ntp when inside a container 2020-06-05 02:50:51 +02:00
Alexandre Aubin
2d42480f7e Make sure to propagate change in slapd systemd conf during initial install 2020-06-04 19:24:50 +02:00
Alexandre Aubin
ca89607d9d Make sure to stop the old mysql and that mariadb is started 2020-06-03 23:38:59 +02:00
Alexandre Aubin
e24191ce64 Make sure mysql is an alias to mariadb 2020-06-02 17:00:52 +02:00
Alexandre Aubin
17eec25ed2 Buuuurn glances 2020-05-28 20:48:01 +02:00
Alexandre Aubin
5a3b382fc9 Flag old etckeeper.conf as 'should not exist' in regenconf 2020-05-26 00:11:16 +02:00
Alexandre Aubin
dc2214953d Bigger time window for auto diagnosis to avoid server overload 2020-05-25 00:22:28 +02:00
Kay0u
85f1802ec9
[fix] empty services.yml file 2020-05-22 21:05:19 +02:00
Alexandre Aubin
e140546092 Hmgn need to make sure to write this on a new line 2020-05-14 19:13:08 +02:00
Alexandre Aubin
e67dc79197 Add the damn short hostname to /etc/hosts automagically 2020-05-14 01:47:34 +02:00
Alexandre Aubin
aecbb14aa4 Add a --human-readable option to diagnosis_show() and a --email to diagnosis_run() to email issues found by cron job 2020-05-09 01:46:28 +02:00
Alexandre Aubin
ba709be534
Merge pull request #963 from YunoHost/enforce-permissions-in-etc-yunhost
[fix] Enforce permissions for stuff in /etc/yunohost/
2020-05-08 04:15:10 +02:00
ljf
a5ecf52c30 [fix] chown postfix to avoid warning 2020-05-04 14:45:47 +02:00
ljf
d51b126df8 [fix] postmap: warning: removing zero-length database file 2020-05-04 14:45:47 +02:00