Commit graph

424 commits

Author SHA1 Message Date
Alexandre Aubin
5818de3a82 Remove the whole monitoring / glances stuff 2019-10-14 04:48:56 +02:00
Alexandre Aubin
f050b3c5b8 First version of http exposure diagnosis 2019-10-10 16:13:13 +02:00
Alexandre Aubin
fe8fd1b2c5 Change from #802 was only about the yunohost jail ... this should be global >.> 2019-10-08 20:04:08 +02:00
Alexandre Aubin
8533103788
Merge pull request #803 from YunoHost/burn-etckeeper
Get rid of etckeeper
2019-10-08 18:33:12 +02:00
Alexandre Aubin
93d383b957
Merge branch 'stretch-unstable' into improve-permission-interface 2019-09-22 18:38:15 +02:00
Alexandre Aubin
eb57a4ad9e Get rid of etckeeper 2019-09-19 19:51:27 +02:00
J. Doe
f18cff9dba change maxretry of fail2ban from 6 to 10 2019-09-19 13:01:22 +02:00
Alexandre Aubin
0f688caccd Swap 'main' in permission namespace 2019-09-13 16:31:02 +02:00
Alexandre Aubin
51171b84bf main.metronome -> main.xmpp 2019-09-13 16:31:02 +02:00
Alexandre Aubin
2dc809548b Fixing again the whole permission / cert situation for slapd ... for good this time hopefully 2019-08-13 17:32:55 +02:00
Alexandre Aubin
dde3a19350 Fix some critical permissions issues with ssl / slapd configuration 2019-08-12 01:56:24 +02:00
yalh76
ca95035f72 Adding openldap TLS support 2019-07-14 12:26:59 +02:00
Alexandre Aubin
59e2db99ba
Merge branch 'stretch-unstable' into group_permission 2019-07-05 20:59:10 +02:00
Alexandre Aubin
fbfa249ff5 Remove binding to IPv6 ::1 as it makes ipv4-only instances crash... (unable to bind to ::1) 2019-07-05 20:50:13 +02:00
Alexandre Aubin
d8b086a06a [fix] Running slapindex seems to fix the previous issues about LDAP indexing stuff 2019-06-06 19:26:49 +02:00
Alexandre Aubin
e63d3986b2 [fix] This need quotes because this can be sourced by another program 2019-06-05 17:33:53 +02:00
Alexandre Aubin
7ecd606d04 [fix] Do not index cn,mail and virtualdomain as it's causing some weird issues in the mail stack ... 2019-06-05 16:25:25 +02:00
Alexandre Aubin
769ba5771d Indexing gidNumber / uidNumber trigger weird issues when logging in through SSH (or the 'I have no name' shell when loggin in as admin) 2019-06-04 15:09:09 +02:00
Alexandre Aubin
24cfc15536 Merge branch 'stretch-unstable' into group_permission 2019-05-31 18:15:09 +02:00
MCMic
a1ab50dcf1
Add indexes for fields listed by slapd in the logs
I get lots of suggestion of indexes by slapd in my logs:

 <= mdb_equality_candidates: (cn) not indexed
 <= mdb_equality_candidates: (gidNumber) not indexed
 <= mdb_equality_candidates: (mail) not indexed
 <= mdb_equality_candidates: (member) not indexed
 <= mdb_equality_candidates: (memberUid) not indexed
 <= mdb_equality_candidates: (sudoUser) not indexed
 <= mdb_equality_candidates: (uidNumber) not indexed
 <= mdb_equality_candidates: (uniqueMember) not indexed
 <= mdb_equality_candidates: (virtualdomain) not indexed
 <= mdb_substring_candidates: (sudoUser) not indexed

Since Yunohost makes it hard to edit LDAP server configuration (see https://github.com/YunoHost/issues/issues/1350), the default configuration should contain indexes for the fields used by Yunohost a lot.
2019-05-23 14:49:27 +00:00
Alexandre Aubin
b3d29238c4
Merge pull request #721 from YunoHost/authenticate-as-root
[enh] Simplify the whole LDAP interface thing
2019-05-22 17:51:04 +02:00
Maximilien Thiel
d31c81b18d [fix] Update censurfridns ipv6
Previous Unicast IPV6 for censurfridns,dk was out of date
2019-05-21 16:35:52 +01:00
Alexandre Aubin
53fa313c62
Merge branch 'stretch-unstable' into enh-email-rate-limit 2019-05-17 19:06:07 +02:00
Alexandre Aubin
f49b74f835
Merge pull request #722 from YunoHost/disable_vrfy_command_postfix
Disable VRFY command in Postfix command
2019-05-17 19:05:21 +02:00
Alexandre Aubin
331bdb53aa
Merge branch 'stretch-unstable' into authenticate-as-root 2019-05-16 17:08:48 +02:00
Alexandre Aubin
c077b8def3
5s rate delay instead of 12s 2019-05-14 19:31:47 +02:00
Alexandre Aubin
93d0fbc4cf
Merge pull request #696 from rds13/featurePostfixRemoveTLSv1Support
[enh] Propose a setting to remove support for TLSv1 and TLSv1.1 in Postfix
2019-05-14 19:19:25 +02:00
Josué Tille
fde8cafa4e
Merge remote-tracking branch 'upstream/stretch-unstable' into group_permission 2019-05-10 22:53:06 +02:00
Josue-T
ece153e8b1
Disable VRFY command in Postfix command 2019-05-10 15:44:59 +02:00
Josué Tille
9f28bfccad Use root UID to authenticate to LDAP 2019-05-02 15:30:44 +02:00
Alexandre Aubin
9b3c97000d
Merge pull request #701 from kay0u/patch-5
[enh] WebSocket proxying
2019-04-25 13:51:53 +02:00
Alexandre Aubin
923a92997e
Merge pull request #706 from rds13/enhOpenLDAPSocketOnLocalhostOnly
[enh] Bind OpenLDAP socket on localhost
2019-04-25 13:50:28 +02:00
Alexandre Aubin
63de414712
Merge pull request #709 from rds13/enhAllowSieveToHandleAddressDetail
[enh] Specify -a parameter on dovecot lda for Sieve
2019-04-25 13:50:04 +02:00
Alexandre Aubin
817c3cdd41 Merge branch 'stretch-unstable' into decouple-regenconf-from-services 2019-04-18 15:33:02 +02:00
Romuald du Song
7f040f25f6 specify -a parameter on dovecot lda for sieve 2019-04-13 16:35:36 +02:00
Romuald du Song
0ef7ebbba6 only open socket to localhost 2019-04-11 23:03:57 +02:00
Alexandre Aubin
1fc9f7ddad Fix yunohost_admin.conf initialization 2019-04-11 14:27:09 +02:00
Kayou
e9d399f7cd
Format 2019-04-04 12:29:23 +02:00
Kayou
1a1fc0bdff
Add connection_upgrade 2019-04-04 12:28:00 +02:00
Alexandre Aubin
bdc78530cf
Merge pull request #689 from YunoHost/tweaks_for_theme
[enh] Nginx conf tweaks for theme
2019-04-01 02:50:44 +02:00
Romuald du Song
15ac51098d propose a setting to remove support for TLSv1 and TLSv1.1 2019-03-28 22:03:25 +01:00
Alexandre Aubin
dbafa47f88
Merge branch 'stretch-unstable' into featureCipherStrategy 2019-03-23 18:19:04 +01:00
Alexandre Aubin
dcff10f6f8 Simplify setting usage in regenconf hooks 2019-03-22 16:31:45 +01:00
ljf (zamentur)
c8d8e0e272
[fix] Avoid potential conflict with some apps 2019-03-22 16:30:02 +01:00
ljf (zamentur)
2defd6ffa8
[fix] Keep user info in json format
Previously it was ynhpanel.json
2019-03-22 16:20:35 +01:00
ljf (zamentur)
73d42fd51a
[enh] Avoid to send simultaneously too much emails 2019-03-19 19:30:30 +01:00
Alexandre Aubin
b99b22bb03 Propagate file renaming for semantic 2019-03-19 01:17:45 +01:00
Alexandre Aubin
3af3c2b779 Directly inject standard css + custom css and js 2019-03-18 19:37:52 +01:00
Alexandre Aubin
a8f88e7232 [yolo] gzip off in global.conf breaks everything because conflict with gzip on; in nginx.conf ... Moving it to server blocs 2019-03-13 19:11:49 +01:00
Alexandre Aubin
2818abe500
Update global.conf 2019-03-09 16:45:53 +01:00