1575 commits

Author	SHA1	Message	Date
pitchum	22c88dc47e	Enable XMPP features only on "parent domains".	2020-04-06 20:43:32 +02:00
pitchum	cf3b98b523	Fix nginx config for xmpp-upload.	2020-04-06 20:43:32 +02:00
pitchum	748dcfd8c5	Setup XMPP components for each domain, not only the main domain.	2020-04-06 20:43:32 +02:00
Alexandre Aubin	3a7b93d8aa	Get rid of domain-specific acme-challenge snippet, use a single snippet including in every conf	2020-04-06 18:09:14 +02:00
Alexandre Aubin	22b9565eb7	Forgot to check that these headers are different from the default in security.conf ... maybe we want to keep them as is? Not clear why they have different values tan the domain configs...	2020-04-06 16:56:53 +02:00
Alexandre Aubin	4d99cbe870	Add ref for security headers	2020-04-06 16:55:20 +02:00
Maniack Crudelis	3234b14b78	Update data/helpers.d/php ... Co-Authored-By: Alexandre Aubin <alex.aubin@mailoo.org>	2020-04-06 12:54:05 +02:00
Alexandre Aubin	fdc0ecf6e5	Propagate change in RAM helper to php helper where it's used	2020-04-06 00:20:16 +02:00
Alexandre Aubin	cbf573c346	Try to improve the semantic of RAM helper	2020-04-05 23:57:43 +02:00
Maniack Crudelis	195214bdbf	Update data/helpers.d/php ... Co-Authored-By: Kayou <pierre.moltess@gmail.com>	2020-04-05 23:18:58 +02:00
Alexandre Aubin	810e5b0d09	no_swap -> ignore_swap	2020-04-05 22:53:56 +02:00
Alexandre Aubin	a4d28efa6c	less0 -> at_least_one	2020-04-05 22:37:24 +02:00
Alexandre Aubin	f032ba16cc	Only diagnose basic records for subdomains	2020-04-05 20:23:32 +02:00
Alexandre Aubin	151d9d3c6f	We in fact only have ssl 1.1.0l, not 1.1.1l on Stretch.	2020-04-05 18:31:33 +02:00
Alexandre Aubin	f7ac93b0b7	We in fact only have ssl 1.1.0l, not 1.1.1l on Stretch.	2020-04-05 18:31:16 +02:00
Maniack Crudelis	147b249007	Proper migration to new directory	2020-04-04 01:19:49 +02:00
Maniack Crudelis	b8a1687f88	Use a dedicated php service for each app	2020-04-03 20:30:00 +02:00
Alexandre Aubin	aaa5365fa6	Update postfix SSL conf according to Moz^Cla recommentation	2020-04-03 03:41:52 +02:00
Alexandre Aubin	23617a9386	Update dovecot SSL conf according to Mozilla recommentation	2020-04-03 03:41:37 +02:00
Alexandre Aubin	128577686a	Forgot to make yunohost_admin.conf to also use the common securit.conf.inc	2020-04-03 03:09:46 +02:00
Alexandre Aubin	fb5dac80d5	Force locale to C/en to avoid perl whining and flooding logs about the damn missing locale	2020-04-03 00:12:58 +02:00
Alexandre Aubin	83a1d6dec5	This is not needed	2020-04-02 23:14:40 +02:00
Alexandre Aubin	2c9f1f89e0	Simplify indentation in ynh_psql_test_if_first_run	2020-04-02 23:14:40 +02:00
Alexandre Aubin	6c9b537941	Drop unused helpers ynh_add_skipped/(un)protected_uris	2020-04-02 19:40:52 +02:00
Alexandre Aubin	be303f3e44	Fix ynh_find_port grep ... Co-Authored-By: Kayou <pierre.moltess@gmail.com>	2020-04-01 02:21:09 +02:00
Alexandre Aubin	97e83337d4	Update network	2020-04-01 02:21:09 +02:00
Kay0u	9dd6d799f4	fix example	2020-03-30 21:37:25 +02:00
Kay0u	15f97765b6	Merge branch 'add-permission-helpers' of https://github.com/YunoHost/yunohost into add-permission-helpers	2020-03-30 21:33:12 +02:00
Kay0u	90459e7ae6	Add legacy_args, fix the helper	2020-03-30 21:32:29 +02:00
Alexandre Aubin	14ff4c6725	Merge pull request #831 from pitchum/xmpp-http-upload ... XMPP http upload	2020-03-30 20:53:11 +02:00
Alexandre Aubin	ad22677994	Attempt to simplify permission migration	2020-03-30 20:09:26 +02:00
Maniack Crudelis	288a617975	Let's have a working helper	2020-03-30 19:58:06 +02:00
Kay0u	51a0502e91	add ynh_permission_has_user	2020-03-30 19:36:41 +02:00
Alexandre Aubin	ff4f644cd0	Fix possible security issue with these cookie files	2020-03-28 21:21:23 +01:00
Alexandre Aubin	abe9440b1b	On some weird setup, this folder and content ain't readable by group ... gotta make sure to make rx for group other slapd will explode	2020-03-27 21:42:36 +01:00
Alexandre Aubin	e54ca72068	On some weird setup, this folder and content ain't readable by group ... gotta make sure to make rx for group other slapd will explode	2020-03-27 21:40:22 +01:00
Alexandre Aubin	43739bf6f8	Merge pull request #895 from kay0u/fix-psql ... Revoke before drop	2020-03-27 04:11:01 +01:00
Alexandre Aubin	526a3a25c9	Remote diagnoser also returns code 400 or 418 when port / http ain't correctly exposed	2020-03-26 19:38:34 +01:00
pitchum	5e6e53142b	Improve nginx config for xmpp-upload subdomain.	2020-03-25 12:09:53 +01:00
pitchum	ada95f8fca	http-upload only available on maindomain (for the moment).	2020-03-25 12:09:24 +01:00
pitchum	1f09abfa51	Rationalize some nginx config into security.conf.inc.	2020-03-25 11:51:57 +01:00
Alexandre Aubin	aaa9805ff2	Add detection for virt + arch + board model in basesystem diagnosis	2020-03-25 04:01:33 +01:00
Alexandre Aubin	d9c09f4649	Add permission to stuff to be indexed by slapd to avoid it flooding complains in syslog	2020-03-24 20:23:09 +01:00
Alexandre Aubin	6ed3ba97ce	Add permission to stuff to be indexed by slapd to avoid it flooding complains in syslog	2020-03-24 20:22:47 +01:00
Kay0u	db0d748f62	Revoke before drop	2020-03-24 00:59:16 +01:00
Alexandre Aubin	af415e38e6	Factorize ciphers and headers configuration into a common file for all vhosts	2020-03-23 22:43:29 +01:00
Alexandre Aubin	27f6899b65	/var/www/xmpp-upload.{domain} -> /var/xmpp-upload/{domain}	2020-03-23 22:15:03 +01:00
pitchum	994f0ca1ef	nginx + metronome config for http_upload	2020-03-22 08:36:33 +01:00
pitchum	c6e8bb5d26	Always expect subdomain xmpp-upload.domain.net. ... This subdomain will be part of Letsencrypt certificate so it MUST be defined in DNS zone otherwise certificate renewal will fail.	2020-03-22 08:35:02 +01:00
Alexandre Aubin	de879e1d30	Merge branch 'fix-diagnosis-server-bad-response' into stretch-unstable	2020-03-22 01:46:06 +01:00