Alexandre Aubin
5818de3a82
Remove the whole monitoring / glances stuff
2019-10-14 04:48:56 +02:00
Alexandre Aubin
f050b3c5b8
First version of http exposure diagnosis
2019-10-10 16:13:13 +02:00
Alexandre Aubin
fe8fd1b2c5
Change from #802 was only about the yunohost jail ... this should be global >.>
2019-10-08 20:04:08 +02:00
Alexandre Aubin
8533103788
Merge pull request #803 from YunoHost/burn-etckeeper
...
Get rid of etckeeper
2019-10-08 18:33:12 +02:00
Alexandre Aubin
93d383b957
Merge branch 'stretch-unstable' into improve-permission-interface
2019-09-22 18:38:15 +02:00
Alexandre Aubin
eb57a4ad9e
Get rid of etckeeper
2019-09-19 19:51:27 +02:00
J. Doe
f18cff9dba
change maxretry of fail2ban from 6 to 10
2019-09-19 13:01:22 +02:00
Alexandre Aubin
0f688caccd
Swap 'main' in permission namespace
2019-09-13 16:31:02 +02:00
Alexandre Aubin
51171b84bf
main.metronome -> main.xmpp
2019-09-13 16:31:02 +02:00
Alexandre Aubin
2dc809548b
Fixing again the whole permission / cert situation for slapd ... for good this time hopefully
2019-08-13 17:32:55 +02:00
Alexandre Aubin
dde3a19350
Fix some critical permissions issues with ssl / slapd configuration
2019-08-12 01:56:24 +02:00
yalh76
ca95035f72
Adding openldap TLS support
2019-07-14 12:26:59 +02:00
Alexandre Aubin
59e2db99ba
Merge branch 'stretch-unstable' into group_permission
2019-07-05 20:59:10 +02:00
Alexandre Aubin
fbfa249ff5
Remove binding to IPv6 ::1 as it makes ipv4-only instances crash... (unable to bind to ::1)
2019-07-05 20:50:13 +02:00
Alexandre Aubin
d8b086a06a
[fix] Running slapindex seems to fix the previous issues about LDAP indexing stuff
2019-06-06 19:26:49 +02:00
Alexandre Aubin
e63d3986b2
[fix] This need quotes because this can be sourced by another program
2019-06-05 17:33:53 +02:00
Alexandre Aubin
7ecd606d04
[fix] Do not index cn,mail and virtualdomain as it's causing some weird issues in the mail stack ...
2019-06-05 16:25:25 +02:00
Alexandre Aubin
769ba5771d
Indexing gidNumber / uidNumber trigger weird issues when logging in through SSH (or the 'I have no name' shell when loggin in as admin)
2019-06-04 15:09:09 +02:00
Alexandre Aubin
24cfc15536
Merge branch 'stretch-unstable' into group_permission
2019-05-31 18:15:09 +02:00
MCMic
a1ab50dcf1
Add indexes for fields listed by slapd in the logs
...
I get lots of suggestion of indexes by slapd in my logs:
<= mdb_equality_candidates: (cn) not indexed
<= mdb_equality_candidates: (gidNumber) not indexed
<= mdb_equality_candidates: (mail) not indexed
<= mdb_equality_candidates: (member) not indexed
<= mdb_equality_candidates: (memberUid) not indexed
<= mdb_equality_candidates: (sudoUser) not indexed
<= mdb_equality_candidates: (uidNumber) not indexed
<= mdb_equality_candidates: (uniqueMember) not indexed
<= mdb_equality_candidates: (virtualdomain) not indexed
<= mdb_substring_candidates: (sudoUser) not indexed
Since Yunohost makes it hard to edit LDAP server configuration (see https://github.com/YunoHost/issues/issues/1350 ), the default configuration should contain indexes for the fields used by Yunohost a lot.
2019-05-23 14:49:27 +00:00
Alexandre Aubin
b3d29238c4
Merge pull request #721 from YunoHost/authenticate-as-root
...
[enh] Simplify the whole LDAP interface thing
2019-05-22 17:51:04 +02:00
Maximilien Thiel
d31c81b18d
[fix] Update censurfridns ipv6
...
Previous Unicast IPV6 for censurfridns,dk was out of date
2019-05-21 16:35:52 +01:00
Alexandre Aubin
53fa313c62
Merge branch 'stretch-unstable' into enh-email-rate-limit
2019-05-17 19:06:07 +02:00
Alexandre Aubin
f49b74f835
Merge pull request #722 from YunoHost/disable_vrfy_command_postfix
...
Disable VRFY command in Postfix command
2019-05-17 19:05:21 +02:00
Alexandre Aubin
331bdb53aa
Merge branch 'stretch-unstable' into authenticate-as-root
2019-05-16 17:08:48 +02:00
Alexandre Aubin
c077b8def3
5s rate delay instead of 12s
2019-05-14 19:31:47 +02:00
Alexandre Aubin
93d0fbc4cf
Merge pull request #696 from rds13/featurePostfixRemoveTLSv1Support
...
[enh] Propose a setting to remove support for TLSv1 and TLSv1.1 in Postfix
2019-05-14 19:19:25 +02:00
Josué Tille
fde8cafa4e
Merge remote-tracking branch 'upstream/stretch-unstable' into group_permission
2019-05-10 22:53:06 +02:00
Josue-T
ece153e8b1
Disable VRFY command in Postfix command
2019-05-10 15:44:59 +02:00
Josué Tille
9f28bfccad
Use root UID to authenticate to LDAP
2019-05-02 15:30:44 +02:00
Alexandre Aubin
9b3c97000d
Merge pull request #701 from kay0u/patch-5
...
[enh] WebSocket proxying
2019-04-25 13:51:53 +02:00
Alexandre Aubin
923a92997e
Merge pull request #706 from rds13/enhOpenLDAPSocketOnLocalhostOnly
...
[enh] Bind OpenLDAP socket on localhost
2019-04-25 13:50:28 +02:00
Alexandre Aubin
63de414712
Merge pull request #709 from rds13/enhAllowSieveToHandleAddressDetail
...
[enh] Specify -a parameter on dovecot lda for Sieve
2019-04-25 13:50:04 +02:00
Alexandre Aubin
817c3cdd41
Merge branch 'stretch-unstable' into decouple-regenconf-from-services
2019-04-18 15:33:02 +02:00
Romuald du Song
7f040f25f6
specify -a parameter on dovecot lda for sieve
2019-04-13 16:35:36 +02:00
Romuald du Song
0ef7ebbba6
only open socket to localhost
2019-04-11 23:03:57 +02:00
Alexandre Aubin
1fc9f7ddad
Fix yunohost_admin.conf initialization
2019-04-11 14:27:09 +02:00
Kayou
e9d399f7cd
Format
2019-04-04 12:29:23 +02:00
Kayou
1a1fc0bdff
Add connection_upgrade
2019-04-04 12:28:00 +02:00
Alexandre Aubin
bdc78530cf
Merge pull request #689 from YunoHost/tweaks_for_theme
...
[enh] Nginx conf tweaks for theme
2019-04-01 02:50:44 +02:00
Romuald du Song
15ac51098d
propose a setting to remove support for TLSv1 and TLSv1.1
2019-03-28 22:03:25 +01:00
Alexandre Aubin
dbafa47f88
Merge branch 'stretch-unstable' into featureCipherStrategy
2019-03-23 18:19:04 +01:00
Alexandre Aubin
dcff10f6f8
Simplify setting usage in regenconf hooks
2019-03-22 16:31:45 +01:00
ljf (zamentur)
c8d8e0e272
[fix] Avoid potential conflict with some apps
2019-03-22 16:30:02 +01:00
ljf (zamentur)
2defd6ffa8
[fix] Keep user info in json format
...
Previously it was ynhpanel.json
2019-03-22 16:20:35 +01:00
ljf (zamentur)
73d42fd51a
[enh] Avoid to send simultaneously too much emails
2019-03-19 19:30:30 +01:00
Alexandre Aubin
b99b22bb03
Propagate file renaming for semantic
2019-03-19 01:17:45 +01:00
Alexandre Aubin
3af3c2b779
Directly inject standard css + custom css and js
2019-03-18 19:37:52 +01:00
Alexandre Aubin
a8f88e7232
[yolo] gzip off in global.conf breaks everything because conflict with gzip on; in nginx.conf ... Moving it to server blocs
2019-03-13 19:11:49 +01:00
Alexandre Aubin
2818abe500
Update global.conf
2019-03-09 16:45:53 +01:00