Commit graph

311 commits

Author SHA1 Message Date
Alexandre Aubin
f0c4498c80
Merge branch 'dev' into sftp_permission 2021-03-25 14:42:30 +01:00
Alexandre Aubin
87b0b10e0e Enforce permissions on /var/cache/yunohost 2021-03-24 20:28:42 +01:00
Alexandre Aubin
61feb39c96 Merge branch 'hotfixes-4.1.7.4' into dev 2021-03-11 03:10:54 +01:00
Alexandre Aubin
41b5a12393 Enforce permissions for /home/yunohost.backup and .conf 2021-03-11 03:07:16 +01:00
Alexandre Aubin
d763247df4
No need for mysql root password (#912)
* Get rid of /etc/yunohost/mysql

* Get rid of restore hook for mysql password

* Tab -> spaces

* declare->local lost while merging conflicts etc

* Gotta keep that var
2021-03-01 19:11:41 +01:00
Alexandre Aubin
7efc6dcd07 Handle the dyndns cron from the regenconf 2021-02-25 23:59:17 +01:00
Alexandre Aubin
cd4fdb2b61 Mysql is a fucking joke (... trying to fix the mysql issue on RPi ...) 2021-02-21 05:23:52 +01:00
Alexandre Aubin
c7c1eaca4e Mysql is a fucking joke (... trying to fix the mysql issue on RPi ...) 2021-02-21 05:04:06 +01:00
Kayou
ce1045a26a
fix the postinstall with double quotes 2021-02-02 11:10:52 +01:00
Alexandre Aubin
6500ac01ae Make sure that dir exists :/ 2021-02-02 05:55:19 +01:00
Alexandre Aubin
071d8c4cbe Misc fixes for cert / local CA management 2021-01-31 18:15:51 +01:00
Alexandre Aubin
29a3ad0484
Merge branch 'dev' into move-ldap-init-before-postinstall 2021-01-31 16:21:23 +01:00
Alexandre Aubin
3c0649f1e3
Merge branch 'dev' into folder-init-in-regenconf 2021-01-31 16:19:03 +01:00
Alexandre Aubin
68e24c986a
Merge pull request #1062 from YunoHost/move-local-ca-mangement-to-regenconf
Refactor local CA management for more consistency and simpler postinstall
2021-01-31 16:17:20 +01:00
Alexandre Aubin
46138e9e73 We need that file for the first domain_add during postinstall 2021-01-23 01:27:14 +01:00
Alexandre Aubin
ed35915e7f Move ldap initialization before the postinstall 2021-01-23 00:03:25 +01:00
Alexandre Aubin
f755259790 Initialize folders during .deb install instead of regen conf 2021-01-23 00:01:26 +01:00
Alexandre Aubin
25f2bdf83a Refactor local CA management for more consistency and simpler postinstall 2021-01-22 23:58:12 +01:00
Alexandre Aubin
148bfdac0d Also ban bind9 2021-01-21 23:59:22 +01:00
Alexandre Aubin
3e290d5c37 Prevent the installation of apache2 ... 2021-01-21 23:55:37 +01:00
Alexandre Aubin
c43a51ba30
Merge branch 'dev' into enh-python3 2021-01-10 18:31:19 +01:00
Alexandre Aubin
a665c702d0 Annnd of course we have references to python2 in bash stuff and other misc scripts 2021-01-10 02:07:24 +01:00
Alexandre Aubin
b25cde0b67
[fix] Make sure relay_user var exists in all cases (otherwise in the jinja template later, relay_user != "" is True if the var doesn't exists...) 2021-01-08 15:57:41 +01:00
ljf
95eea93c4a [fix] Remove rebase conflict blank line 2020-12-03 18:27:09 +01:00
ljf
f79b0ff0a3 [enh] SFTP and SSH permissions 2020-12-03 18:20:45 +01:00
Josué Tille
5e6bcb2346 Add possibility to restrict the user allowed to access by sftp 2020-12-03 18:17:52 +01:00
Alexandre Aubin
ba884d5b6d Get rid of yunohost.local in main domain nginx conf ... because this interfer with using yunohost.local for postinstall. Just let it be handled by the default vhost 2020-10-03 16:32:31 +02:00
Quentin Duchemin
6940ea1946
Fix redis hook (bash does not allow empty function
Add a dummy instruction equivalent to true
2020-10-03 11:24:47 +02:00
Alexandre Aubin
a1c1057ab4 Add redis hook to enforce permissions on /var/log/redis 2020-09-29 15:10:03 +02:00
Alexandre Aubin
a60cd4f559
Diagnose ssl libs installed from sury (#1053)
* Small fix / syntax improvement in apt conf regen hook

* Diagnose, report and add a tip if some ssl libs are installed from Sury (shouldnt happen with the new pinning strategy, but some user still encounter issues because of this because of legacy installs)
2020-09-16 16:18:10 +02:00
Alexandre Aubin
6a618b0f33 Use php7.3 by default in CLI 2020-09-16 15:24:28 +02:00
Alexandre Aubin
9156b1e56a Fix warnings and weird stuff >_> 2020-09-14 17:54:20 +02:00
Alexandre Aubin
0ad014ad1f
Merge branch 'dev' into enh-relay-smtp 2020-09-10 17:50:10 +02:00
Alexandre Aubin
bc7344b636 Use proper templating for dnsmasq conf 2020-08-31 16:41:31 +02:00
Alexandre Aubin
a23233ab0f Add apt regenconf hook to manage sury pinning policy on all 2020-08-28 22:30:20 +02:00
Alexandre Aubin
8454f2ec12 Recursively enforce ownership for rspamd 2020-08-21 20:40:55 +02:00
Alexandre Aubin
e28c618e67 Those single quotes were probably meant to be double quotes? 2020-07-27 19:26:18 +02:00
Alexandre Aubin
2bbff1d264 Factorize the actual slapd regeneration 2020-07-27 19:26:18 +02:00
Alexandre Aubin
a179e9107a Misc comment improvements? 2020-07-27 19:26:18 +02:00
Josue-T
c0d3a361e3 Update data/hooks/conf_regen/06-slapd
Co-authored-by: Alexandre Aubin <alex.aubin@mailoo.org>
2020-07-27 19:26:18 +02:00
Josué Tille
e6a52f09bd [fix] Clean old files 2020-07-27 19:26:18 +02:00
Josué Tille
9bb8c0437d Rewrite slapd regen-conf for new config file 2020-07-27 19:26:18 +02:00
Alexandre Aubin
ca20eda9ca [firewall] Let's not disable nftables that makes the script crash if it's not installed and we don't really need to disable it anyway since it's already configured to conflict 2020-07-27 19:26:18 +02:00
Alexandre Aubin
5914740957 [firewall] nftables is the new iptables-persistent and it should conflict with yunohost-firewall 2020-07-27 19:26:18 +02:00
Alexandre Aubin
fa59ad35a9 [conf] Automatically disable/stop systemd-resolved that conflicts with dnsmasq on fresh setups ... 2020-07-27 19:23:07 +02:00
Alexandre Aubin
d435889776 Make sure to validate/upgrade that we don't have any active weak certificate used by nginx at the beginning of the buster migration, otherwise nginx will later miserably fail to start 2020-06-29 22:04:04 +02:00
Alexandre Aubin
ac9182d69f Move redirect to /yunohost/admin to a separate nginx conf file to allow customizing it more easily 2020-06-25 21:42:46 +02:00
Alexandre Aubin
8f8be838b6 Enforce permissions on rspamd log directory 2020-06-21 19:57:51 +02:00
Alexandre Aubin
9d0c092481 Disable/skip ntp when inside a container 2020-06-05 02:50:51 +02:00
Alexandre Aubin
2d42480f7e Make sure to propagate change in slapd systemd conf during initial install 2020-06-04 19:24:50 +02:00