Commit graph

214 commits

Author SHA1 Message Date
Romuald du Song
aaf6dba8d7 fix yunhost admin config filename 2019-02-14 23:03:27 +01:00
Romuald du Song
a899102efc don't share setting for nginx and ssh 2019-02-14 22:57:24 +01:00
Romuald du Song
12d0e0e1de add instruction to rebuild yunohost-admin conf 2019-02-14 22:34:35 +01:00
Romuald du Song
e0aaf6f8a1 add trace for process check 2019-02-09 11:56:33 +01:00
Romuald du Song
8e1034771a use setting security_ciphers_compatibility to define security configurations 2019-02-04 23:01:16 +01:00
Alexandre Aubin
6a7990d7fb [fix] Weird duplicated code + fix missing key file triggering an error 2019-01-04 16:25:49 +01:00
Alexandre Aubin
4f05cd5b2b Uh for some reason we need to return *0* explicitly 2018-12-03 16:56:28 +00:00
Alexandre Aubin
447372d07c
[enh] Clean + harden sshd config using Mozilla recommendation (#590)
* Clean sshd_config + harden using Mozilla recommendation
* Order of keys matter, ed25519 is recommended
2018-12-03 17:03:22 +01:00
Alexandre Aubin
0576b17442 Simplify code / indentation levels 2018-11-28 21:03:28 +00:00
Alexandre Aubin
4db65682eb Fix IPv6 handling in ssh regen conf script 2018-11-28 20:42:39 +00:00
Alexandre Aubin
6a812190c5 Enforce permissions for /etc/ssh/sshd_config 2018-11-28 20:27:42 +00:00
Alexandre Aubin
f295c83fd3 Order of keys matter, ed25519 is recommended 2018-11-28 19:15:21 +00:00
Alexandre Aubin
3d81f032e9 Fixes following tests (some sshd_config options do not exists or are deprecated) 2018-11-28 17:50:20 +00:00
Alexandre Aubin
fad4ff090a Use templating for more robustness about which SSH keys are enabled 2018-11-28 00:26:25 +01:00
Alexandre Aubin
325678f541 More explicit name for setting 2018-11-28 00:04:25 +01:00
Alexandre Aubin
7b6bf6f4b8 Missing 'get' 2018-11-28 00:03:25 +01:00
ljf
8e0086d493 [fix] Allow user to trigger the moment when they remove dsa 2018-11-28 00:00:30 +01:00
ljf
8598d81bb1 [wip] Standardize ssh config 2018-11-27 23:58:29 +01:00
Alexandre Aubin
662666fb5a Readability improvement 2018-11-18 17:56:19 +01:00
Alexandre Aubin
b5afd0abc4 We do need to use the serial file and to generate it ourselves 2018-11-18 17:56:19 +01:00
frju365
fa66a7b8c7 OCSP Stapling (#533)
* [enh] Jinja templating
* [enh] try to enable OCSP
* typo
* [mod] use jq (json parsing)
* typo
* well escaping "" :)
* [fix] if 2d part condition
* We need to include this for ynh_render_template to be available >.> ...
* Simplify code
* Gotta export domain too...
* Remove quotes in variable itself..
* Replace previous code blocks by new code
2018-10-27 16:38:25 +02:00
ljf (zamentur)
8e574d2b5f [fix] Error due to unwanted backslash ! (#541) 2018-09-13 15:36:18 +02:00
ljf (zamentur)
ff7942b246
[enh] Don't backp user home with .nobackup file 2018-09-03 13:15:31 +02:00
Alexandre Aubin
8e49f9db6d Fix after test 2018-07-25 19:16:14 +00:00
Alexandre Aubin
b1fdb39880 Tweaking postfix regen-conf to handle postsrsd conf 2018-07-25 19:16:14 +00:00
Alexandre Aubin
1de1b43e2f Avoid breaking the regen-conf if there's no .well-known mail autoconfig.xml to list 2018-07-25 19:14:51 +00:00
Bram
7ef1387d8f
Merge pull request #495 from pitchum/experiments-by-pitchum
[enh] Add MUA autoconfig.
2018-07-23 07:00:08 +02:00
Laurent Peuch
20d6c30503 [fix] sometime nginx is not running 2018-06-30 11:39:01 +02:00
pitchum
a7e85dbbba [enh] Add MUA autoconfig. 2018-06-25 09:45:13 +02:00
ljf (zamentur)
ff56535568
[fix] Mail permission issue after restore 2018-06-21 12:48:52 +02:00
Alexandre Aubin
dd8af083b3 Merge branch 'unstable' into stretch-unstable 2018-05-20 21:43:05 +02:00
Laurent Peuch
d32ab073ba [mod] removes status key from /etc/yunohost/service.yml for generic approach 2018-05-11 04:21:24 +02:00
Alexandre Aubin
2f0db53d8c We have mariadb-server-10.1 now 2018-05-08 19:01:25 +02:00
Alexandre Aubin
3f64374f9d Move DKIM from rmilter to rspamd 2018-05-02 18:04:15 +02:00
Alexandre Aubin
34451babe3 Fall back to 1024 for the DKIM key size because nsupdate is stupid 2018-05-02 18:04:15 +02:00
Alexandre Aubin
a05d7b1e20 Fixes in DKIM generation in rspamd regen-conf 2018-05-02 18:04:15 +02:00
root
291c8747f1 Adding DKIM key generation back from rmilter to rspamd 2018-05-02 18:04:15 +02:00
Alexandre Aubin
f25a487c19 nscd service is now unscd 2018-05-02 18:04:15 +02:00
Alexandre Aubin
efc201c9b0 Remove messy openssl output during package install 2018-05-02 18:04:15 +02:00
Alexandre Aubin
b2648584ab Updating fail2ban conf 2018-05-02 18:04:15 +02:00
Alexandre Aubin
bde8b02fef Removing some rmilter-related conf 2018-05-02 18:04:15 +02:00
Alexandre Aubin
da973e69a7 Getting rid of systematic error message during install 2018-05-02 18:04:15 +02:00
Alexandre Aubin
a1831ce0f8 Manage etckeeper.conf to make etckeeper quiet 2018-01-26 22:40:33 +01:00
ljf (zamentur)
d3eeb4bbc7 [enh] Refactor backup management to pave the way to borg (#275)
* [enh] Use a csv to list file to backup
* [enh] Use csv python module
* [wip] Backup refactoring
* [wip] Backup class refactoring
* [enh] Add archivemount dependencies
* [wip] Restore refactoring
* [fix] Some error in this refactoring
* [fix] Missing backup key translation
* [fix] Bad YNH_CWD in hook backup
* [fix] App backup part was broken
* [fix] Restore operation was broken
* [fix] No compressed backup
* [fix] Don't commit backup path into csv if app backup fail
* [fix] Default backup collect_dir should be in tmp subdir
* [enh] Simplify a copy code
* [enh] Build backup info from properties
* [enh] Improve comments presentation
* Adding first tests for backup/restore
* Adding more backup/restore app test scenario
* [enh] Separate BackupMethods in distinct class
* Adding test of restoring a wordpress archive from 2.4
* [fix] Be able to delete backup link too
* [fix] Bad internationalization key
* [fix] Edge case with empty mysql pwd restore
* [fix] Unset var in restore
* [fix] Edge case with empty mysql pwd restore
* Adding test for backup crash handling
* Cleaning tests + checking tmp dir is empty
* [fix] Missing tmp in backup path
* [fix] Error on reading backup csv
* Adding test of failed restore
* Adding tests when not enough space available
* Simplifying tests using markers
* [fix] ynh backup/restore helpers with only one arg
* [fix] Unmount subdir with python
* [enh] Improve backup size management
* [fix] None object in backup
* [enh] Remove dead code
* [fix] Missing locales
* [enh] Adapat test about needed space
* [fix] Pass some test
* [enh] Remove dead code
* [enh] Pass all test
* [enh] Adding test that backups contains what's expected
* Fix typo in tests
* [fix] Bad documentation
* [enh] Add comment
* [enh] Use len in place of implicit {} == False
* [enh] Add comment
* [enh] Add comment
* [enh] Refactoring on _collect_app_files
* Adding skeleton for remaining tests to write
* [enh] Use a csv to list file to backup
* [enh] Use csv python module
* [wip] Backup refactoring
* [wip] Backup class refactoring
* [enh] Add archivemount dependencies
* [wip] Restore refactoring
* [fix] Some error in this refactoring
* [fix] Missing backup key translation
* [fix] Bad YNH_CWD in hook backup
* [fix] App backup part was broken
* [fix] Restore operation was broken
* [fix] No compressed backup
* [fix] Don't commit backup path into csv if app backup fail
* [fix] Default backup collect_dir should be in tmp subdir
* [enh] Simplify a copy code
* [enh] Build backup info from properties
* [enh] Improve comments presentation
* Adding first tests for backup/restore
* Adding more backup/restore app test scenario
* [enh] Separate BackupMethods in distinct class
* Adding test of restoring a wordpress archive from 2.4
* [fix] Be able to delete backup link too
* [fix] Bad internationalization key
* [fix] Edge case with empty mysql pwd restore
* [fix] Unset var in restore
* [fix] Edge case with empty mysql pwd restore
* Adding test for backup crash handling
* Cleaning tests + checking tmp dir is empty
* [fix] Missing tmp in backup path
* [fix] Error on reading backup csv
* Adding test of failed restore
* Adding tests when not enough space available
* Simplifying tests using markers
* [fix] ynh backup/restore helpers with only one arg
* [fix] Unmount subdir with python
* [enh] Improve backup size management
* [fix] None object in backup
* [enh] Remove dead code
* [fix] Missing locales
* [enh] Adapat test about needed space
* [fix] Pass some test
* [enh] Remove dead code
* [enh] Pass all test
* [enh] Adding test that backups contains what's expected
* Fix typo in tests
* [fix] Bad documentation
* Adding skeleton for remaining tests to write
* [enh] Add comment
* [enh] Use len in place of implicit {} == False
* [enh] Add comment
* [enh] Add comment
* [enh] Refactoring on _collect_app_files
* [fix] Replay e1a507 deleted by rebase
* [fix] ynh_restore helper
* Renaming 'hooks' terminology to 'system' where it makes sense
* Propagating new --system/--ignore-system to actionmap
* Adding more tests + clarifying some functions and messages
* Factorize out the definition and validation of backup/restore targets
* Add missing key
* Use list comprehension instead of dirty loops
* [enh] Add docstring in BackupManager
* [enh] Add docstring on BackupMethod(s)
* [fix] Remove deadcode
* [fix] Remove debug message
* [enh] Add comments on RestoreManager
* [enh] Add comments on backup constants
* Adding a proper report/result for each backup target
* Skipping tests not implemented yet
* Fixing little mistake from merging
* [fix] Support different fs or archivemount error
* [enh] Backup helpers readability
* [fix] Copy backup method
* [fix] Deprecated warning always displayed
* [enh] Retrieve info.json file inside tar.gz
* Trying to reorganize methods with sections for readability
* [enh] Support archivemount failure
* [fix] Missing env var for system part restore helpers
* Clarifying disk usage / free space computation
* [enh] Refactoring around backup set_targets()
* Clarifying structure of backup_create and backup_restore
* Move RestoreManager between BackupManager and BackupMethods
* [fix] Missing locales
* [fix] System part restore if archivemount failure
* [enh] Extract all conf instead of specific code
* [fix] Other output directory (compressed archive)
* [enh] Add test for uncompressed backup
* [fix] Compressed backup in an existing output directory
* [fix] Return size for retro-compatibility
* [fix] Mountpoint check aborting script when called with -eu
* [fix] Avoid failure test with set -eu
* [fix] locale strings missing/bad arguments
* Check free space before mount
* [fix] ynh_restore_helpers with existing archive path
* Adding skeletons for moar tests
* Fixing some weird bug in _get_archive_path
* Adding a regen-conf at the end of system restore
* Adding tests of system restore from 2.4
* Have a class dedicated to target management
* Cleaning tests
* Misc formatting
* More meaningful variable names inside app restore
* [fix] can't call source ../settings/scripts/_common.sh in app backup
* [fix] ynh_install_app_dependencies is not compatible with readonly mount
* [fix] Remove temporary file
2017-06-02 13:41:16 +02:00
Alexandre Aubin
3f953699eb [fix] Unexpected comment line ending up in /etc/resolv.dnsmasq.conf (#312) 2017-05-14 16:51:29 +02:00
Alexandre Aubin
7718ed6000 [fix] Properly manage resolv.conf, dns resolvers and dnsmasq (#290)
* Adding resolvconf as dependency
* Adding new templates for dnsmasq
* Adding libnss-myhostname as dependency
* tableflip.gif
* Moar tableflip.gif :/
* Tweaking dns resolvers used by dnsmasq
* Adding Aquilenet + moving FDN back to top
* Clarifying how the resolv.dnsmasq.conf template is used
* Moving nsswitch force regen back to postinstall
2017-04-18 00:37:21 +02:00
opi
ce472696f5 [enh] ip6.yunohost is now served through HTTPS. 2017-03-22 08:31:47 +01:00
Laurent Peuch
50188ae265 [fix] only remove a service if it is setted to null 2017-03-20 01:49:27 +01:00
opi
1c2de37f63 [fix] Update Rmilter configuration to fix dkim signing. 2017-02-18 14:52:33 +01:00
ljf
2cf4768aa1 [fix] Postfix can't access rmilter socket due to chroot 2017-01-09 15:34:52 +01:00