Commit graph

305 commits

Author SHA1 Message Date
Alexandre Aubin
4db65682eb Fix IPv6 handling in ssh regen conf script 2018-11-28 20:42:39 +00:00
Alexandre Aubin
6a812190c5 Enforce permissions for /etc/ssh/sshd_config 2018-11-28 20:27:42 +00:00
Alexandre Aubin
f295c83fd3 Order of keys matter, ed25519 is recommended 2018-11-28 19:15:21 +00:00
Alexandre Aubin
3d81f032e9 Fixes following tests (some sshd_config options do not exists or are deprecated) 2018-11-28 17:50:20 +00:00
Alexandre Aubin
fad4ff090a Use templating for more robustness about which SSH keys are enabled 2018-11-28 00:26:25 +01:00
Alexandre Aubin
325678f541 More explicit name for setting 2018-11-28 00:04:25 +01:00
Alexandre Aubin
7b6bf6f4b8 Missing 'get' 2018-11-28 00:03:25 +01:00
ljf
8e0086d493 [fix] Allow user to trigger the moment when they remove dsa 2018-11-28 00:00:30 +01:00
ljf
8598d81bb1 [wip] Standardize ssh config 2018-11-27 23:58:29 +01:00
Alexandre Aubin
662666fb5a Readability improvement 2018-11-18 17:56:19 +01:00
Alexandre Aubin
b5afd0abc4 We do need to use the serial file and to generate it ourselves 2018-11-18 17:56:19 +01:00
frju365
fa66a7b8c7 OCSP Stapling (#533)
* [enh] Jinja templating
* [enh] try to enable OCSP
* typo
* [mod] use jq (json parsing)
* typo
* well escaping "" :)
* [fix] if 2d part condition
* We need to include this for ynh_render_template to be available >.> ...
* Simplify code
* Gotta export domain too...
* Remove quotes in variable itself..
* Replace previous code blocks by new code
2018-10-27 16:38:25 +02:00
ljf (zamentur)
8e574d2b5f [fix] Error due to unwanted backslash ! (#541) 2018-09-13 15:36:18 +02:00
ljf (zamentur)
ff7942b246
[enh] Don't backp user home with .nobackup file 2018-09-03 13:15:31 +02:00
Alexandre Aubin
8e49f9db6d Fix after test 2018-07-25 19:16:14 +00:00
Alexandre Aubin
b1fdb39880 Tweaking postfix regen-conf to handle postsrsd conf 2018-07-25 19:16:14 +00:00
Alexandre Aubin
1de1b43e2f Avoid breaking the regen-conf if there's no .well-known mail autoconfig.xml to list 2018-07-25 19:14:51 +00:00
Bram
7ef1387d8f
Merge pull request #495 from pitchum/experiments-by-pitchum
[enh] Add MUA autoconfig.
2018-07-23 07:00:08 +02:00
Laurent Peuch
20d6c30503 [fix] sometime nginx is not running 2018-06-30 11:39:01 +02:00
pitchum
a7e85dbbba [enh] Add MUA autoconfig. 2018-06-25 09:45:13 +02:00
ljf (zamentur)
ff56535568
[fix] Mail permission issue after restore 2018-06-21 12:48:52 +02:00
Alexandre Aubin
dd8af083b3 Merge branch 'unstable' into stretch-unstable 2018-05-20 21:43:05 +02:00
Laurent Peuch
d32ab073ba [mod] removes status key from /etc/yunohost/service.yml for generic approach 2018-05-11 04:21:24 +02:00
Alexandre Aubin
2f0db53d8c We have mariadb-server-10.1 now 2018-05-08 19:01:25 +02:00
Alexandre Aubin
3f64374f9d Move DKIM from rmilter to rspamd 2018-05-02 18:04:15 +02:00
Alexandre Aubin
34451babe3 Fall back to 1024 for the DKIM key size because nsupdate is stupid 2018-05-02 18:04:15 +02:00
Alexandre Aubin
a05d7b1e20 Fixes in DKIM generation in rspamd regen-conf 2018-05-02 18:04:15 +02:00
root
291c8747f1 Adding DKIM key generation back from rmilter to rspamd 2018-05-02 18:04:15 +02:00
Alexandre Aubin
f25a487c19 nscd service is now unscd 2018-05-02 18:04:15 +02:00
Alexandre Aubin
efc201c9b0 Remove messy openssl output during package install 2018-05-02 18:04:15 +02:00
Alexandre Aubin
b2648584ab Updating fail2ban conf 2018-05-02 18:04:15 +02:00
Alexandre Aubin
bde8b02fef Removing some rmilter-related conf 2018-05-02 18:04:15 +02:00
Alexandre Aubin
da973e69a7 Getting rid of systematic error message during install 2018-05-02 18:04:15 +02:00
Alexandre Aubin
a1831ce0f8 Manage etckeeper.conf to make etckeeper quiet 2018-01-26 22:40:33 +01:00
ljf (zamentur)
d3eeb4bbc7 [enh] Refactor backup management to pave the way to borg (#275)
* [enh] Use a csv to list file to backup
* [enh] Use csv python module
* [wip] Backup refactoring
* [wip] Backup class refactoring
* [enh] Add archivemount dependencies
* [wip] Restore refactoring
* [fix] Some error in this refactoring
* [fix] Missing backup key translation
* [fix] Bad YNH_CWD in hook backup
* [fix] App backup part was broken
* [fix] Restore operation was broken
* [fix] No compressed backup
* [fix] Don't commit backup path into csv if app backup fail
* [fix] Default backup collect_dir should be in tmp subdir
* [enh] Simplify a copy code
* [enh] Build backup info from properties
* [enh] Improve comments presentation
* Adding first tests for backup/restore
* Adding more backup/restore app test scenario
* [enh] Separate BackupMethods in distinct class
* Adding test of restoring a wordpress archive from 2.4
* [fix] Be able to delete backup link too
* [fix] Bad internationalization key
* [fix] Edge case with empty mysql pwd restore
* [fix] Unset var in restore
* [fix] Edge case with empty mysql pwd restore
* Adding test for backup crash handling
* Cleaning tests + checking tmp dir is empty
* [fix] Missing tmp in backup path
* [fix] Error on reading backup csv
* Adding test of failed restore
* Adding tests when not enough space available
* Simplifying tests using markers
* [fix] ynh backup/restore helpers with only one arg
* [fix] Unmount subdir with python
* [enh] Improve backup size management
* [fix] None object in backup
* [enh] Remove dead code
* [fix] Missing locales
* [enh] Adapat test about needed space
* [fix] Pass some test
* [enh] Remove dead code
* [enh] Pass all test
* [enh] Adding test that backups contains what's expected
* Fix typo in tests
* [fix] Bad documentation
* [enh] Add comment
* [enh] Use len in place of implicit {} == False
* [enh] Add comment
* [enh] Add comment
* [enh] Refactoring on _collect_app_files
* Adding skeleton for remaining tests to write
* [enh] Use a csv to list file to backup
* [enh] Use csv python module
* [wip] Backup refactoring
* [wip] Backup class refactoring
* [enh] Add archivemount dependencies
* [wip] Restore refactoring
* [fix] Some error in this refactoring
* [fix] Missing backup key translation
* [fix] Bad YNH_CWD in hook backup
* [fix] App backup part was broken
* [fix] Restore operation was broken
* [fix] No compressed backup
* [fix] Don't commit backup path into csv if app backup fail
* [fix] Default backup collect_dir should be in tmp subdir
* [enh] Simplify a copy code
* [enh] Build backup info from properties
* [enh] Improve comments presentation
* Adding first tests for backup/restore
* Adding more backup/restore app test scenario
* [enh] Separate BackupMethods in distinct class
* Adding test of restoring a wordpress archive from 2.4
* [fix] Be able to delete backup link too
* [fix] Bad internationalization key
* [fix] Edge case with empty mysql pwd restore
* [fix] Unset var in restore
* [fix] Edge case with empty mysql pwd restore
* Adding test for backup crash handling
* Cleaning tests + checking tmp dir is empty
* [fix] Missing tmp in backup path
* [fix] Error on reading backup csv
* Adding test of failed restore
* Adding tests when not enough space available
* Simplifying tests using markers
* [fix] ynh backup/restore helpers with only one arg
* [fix] Unmount subdir with python
* [enh] Improve backup size management
* [fix] None object in backup
* [enh] Remove dead code
* [fix] Missing locales
* [enh] Adapat test about needed space
* [fix] Pass some test
* [enh] Remove dead code
* [enh] Pass all test
* [enh] Adding test that backups contains what's expected
* Fix typo in tests
* [fix] Bad documentation
* Adding skeleton for remaining tests to write
* [enh] Add comment
* [enh] Use len in place of implicit {} == False
* [enh] Add comment
* [enh] Add comment
* [enh] Refactoring on _collect_app_files
* [fix] Replay e1a507 deleted by rebase
* [fix] ynh_restore helper
* Renaming 'hooks' terminology to 'system' where it makes sense
* Propagating new --system/--ignore-system to actionmap
* Adding more tests + clarifying some functions and messages
* Factorize out the definition and validation of backup/restore targets
* Add missing key
* Use list comprehension instead of dirty loops
* [enh] Add docstring in BackupManager
* [enh] Add docstring on BackupMethod(s)
* [fix] Remove deadcode
* [fix] Remove debug message
* [enh] Add comments on RestoreManager
* [enh] Add comments on backup constants
* Adding a proper report/result for each backup target
* Skipping tests not implemented yet
* Fixing little mistake from merging
* [fix] Support different fs or archivemount error
* [enh] Backup helpers readability
* [fix] Copy backup method
* [fix] Deprecated warning always displayed
* [enh] Retrieve info.json file inside tar.gz
* Trying to reorganize methods with sections for readability
* [enh] Support archivemount failure
* [fix] Missing env var for system part restore helpers
* Clarifying disk usage / free space computation
* [enh] Refactoring around backup set_targets()
* Clarifying structure of backup_create and backup_restore
* Move RestoreManager between BackupManager and BackupMethods
* [fix] Missing locales
* [fix] System part restore if archivemount failure
* [enh] Extract all conf instead of specific code
* [fix] Other output directory (compressed archive)
* [enh] Add test for uncompressed backup
* [fix] Compressed backup in an existing output directory
* [fix] Return size for retro-compatibility
* [fix] Mountpoint check aborting script when called with -eu
* [fix] Avoid failure test with set -eu
* [fix] locale strings missing/bad arguments
* Check free space before mount
* [fix] ynh_restore_helpers with existing archive path
* Adding skeletons for moar tests
* Fixing some weird bug in _get_archive_path
* Adding a regen-conf at the end of system restore
* Adding tests of system restore from 2.4
* Have a class dedicated to target management
* Cleaning tests
* Misc formatting
* More meaningful variable names inside app restore
* [fix] can't call source ../settings/scripts/_common.sh in app backup
* [fix] ynh_install_app_dependencies is not compatible with readonly mount
* [fix] Remove temporary file
2017-06-02 13:41:16 +02:00
Alexandre Aubin
3f953699eb [fix] Unexpected comment line ending up in /etc/resolv.dnsmasq.conf (#312) 2017-05-14 16:51:29 +02:00
Alexandre Aubin
7718ed6000 [fix] Properly manage resolv.conf, dns resolvers and dnsmasq (#290)
* Adding resolvconf as dependency
* Adding new templates for dnsmasq
* Adding libnss-myhostname as dependency
* tableflip.gif
* Moar tableflip.gif :/
* Tweaking dns resolvers used by dnsmasq
* Adding Aquilenet + moving FDN back to top
* Clarifying how the resolv.dnsmasq.conf template is used
* Moving nsswitch force regen back to postinstall
2017-04-18 00:37:21 +02:00
opi
ce472696f5 [enh] ip6.yunohost is now served through HTTPS. 2017-03-22 08:31:47 +01:00
Laurent Peuch
50188ae265 [fix] only remove a service if it is setted to null 2017-03-20 01:49:27 +01:00
opi
1c2de37f63 [fix] Update Rmilter configuration to fix dkim signing. 2017-02-18 14:52:33 +01:00
ljf
2cf4768aa1 [fix] Postfix can't access rmilter socket due to chroot 2017-01-09 15:34:52 +01:00
ljf
d4e4d01b4f [fix] Remove residual rmilter socket file 2017-01-09 13:37:34 +01:00
ljf
b419c8c564 [fix] new rspamd version replace rspamd.socket with rspamd.service 2017-01-04 13:06:13 +01:00
Laurent Peuch
92ec847496 Merge pull request #175 from YunoHost/dovecot_extensible_configuration
[enh] Dovecot extensible configuration
2016-12-11 23:43:07 +01:00
Julien Malik
ea17e9fa80 [enh] Allow for dovecot configuration extensions 2016-09-09 17:12:50 +02:00
Laurent Peuch
9a66a00278 [fix] wait for admin user to be available after a slapd regen-conf, this fix install on slow hardware/vps 2016-09-04 09:12:37 +02:00
Jérôme Lebleu
8351b8e23d [fix] Set /var/mail folder owners and permissions 2016-06-12 13:23:23 +02:00
opi
751e221406 [enh] Use 'source' instead of dot notation, more explicit. 2016-05-30 10:49:50 +02:00
opi
75b9cbc7f3 [enh] Comments will save us. 2016-05-30 09:17:25 +02:00
Jérôme Lebleu
185f29ba60 [fix] Harden backup hooks with set options and use ynh_backup 2016-05-29 23:33:28 +02:00