443 Commits

Author	SHA1	Message	Date
Joshua Tauberer	546d6f0026	merge #674 - Support munin's cgi dynazoom	2016-03-23 16:10:30 -04:00
Joshua Tauberer	bd86d44c8b	simplify the munin_cgi wrapper / add changelog entry	2016-03-23 16:09:19 -04:00
Joshua Tauberer	49ea9cddd1	ssl_certificates: also forgot to catch free_tls_certificates.client.RateLimited	2016-03-06 14:39:34 -05:00
Joshua Tauberer	3bbec18ac6	Merge pull request #734 from yodax/dynamicpool ... Create a temporary multiprocessing pool	2016-02-28 12:39:11 -05:00
Joshua Tauberer	2be373fd06	Merge pull request #727 from yodax/userlist ... Allow files in /home/user-data/mail/mailboxes	2016-02-28 12:33:38 -05:00
yodax	6c1357e16c	Merge branch 'master' into dynamicpool	2016-02-23 17:01:13 +01:00
Joshua Tauberer	5cabfd591b	(re-fix) mail sent from an address on a subdomain of a domain hosted by the box (a non-zone domain) would never be DKIM-signed because only zones were included in the openDKIM configuration, mistakenly ... This was originally fixed in 143bbf37f4 (February 16, 2015). Then I broke it in 7a93d219ef (November 2015) while doing some refactoring ahead of v0.15.	2016-02-23 10:16:04 -05:00
yodax	721730f0e8	Create a temporary multiprocessing pool	2016-02-23 06:32:01 +01:00
Joshua Tauberer	af80849857	Merge pull request #732 from yodax/memory ... Reduce percentages for required free memory checks	2016-02-22 15:02:50 -05:00
Joshua Tauberer	4b2e48f2c0	Merge pull request #726 from yodax/login ... When previous panel was login, move to system_status	2016-02-22 14:44:23 -05:00
yodax	1b24e2cbaf	Reduce percentages for required memory checks	2016-02-22 17:49:19 +01:00
yodax	0843159fb4	Reduce number of processes in the pool to 5	2016-02-22 17:38:30 +01:00
yodax	057903a303	Allow files in /home/user-data/mail/mailboxes	2016-02-21 13:49:07 +01:00
yodax	b8e99c30a2	When previous panel was login, move to system_status	2016-02-20 18:42:28 +01:00
Joshua Tauberer	23ecff04b8	the logic in 4ed23f44e6 for taking backups more often was partly backward	2016-02-18 07:50:59 -05:00
Joshua Tauberer	36cb2ef41d	missing elif	2016-02-16 09:11:54 -05:00
Joshua Tauberer	1ba44b02d4	forgot to catch free_tls_certificates.client.ChallengeFailed ... Provisioning could crash if, e.g., the DNS we see is different from the DNS Let's Encrypt sees. see #695, probably fixes it	2016-02-15 18:22:16 -05:00
Joshua Tauberer	2f24328608	before the user agrees to Let's Encrypt's ToS the admin could get a nightly email with weird interactive text ... Made a mistake refactoring the headless variable earlier. fixes #696	2016-02-13 12:38:16 -05:00
Joshua Tauberer	8ea42847da	nightly status checks could fail if any domains had non-ASCII characters ... https://discourse.mailinabox.email/t/status-check-emails-empty-after-upgrading-to-v0-16/1082/3 A user on that thread suggests an alternate solution, adding `PYTHONIOENCODING=utf-8` to `/etc/environment`. Python docs say that affects stdin/out/err. But we also use these environment variables elsewhere to ensure that config files we read/write are opened with UTF8 too. Maybe all that can be simplified too.	2016-02-13 11:51:06 -05:00
Joshua Tauberer	4ed23f44e6	take a full backup more often so we don't keep backups around for so long	2016-02-05 11:08:33 -05:00
Joshua Tauberer	178527dab1	convert the backup increment time to the local timezone, fixes #700 ... Duplicity gives times in UTC. We were assuming times were in local time.	2016-02-05 08:58:07 -05:00
Wolf-Bastian Pöttner	239eac662c	Fix: Correct IP is reported when using custom DNS ... Fix bug that reports wrong ip, when custom DNS is enabled	2016-02-04 21:32:11 +01:00
Joshua Tauberer	4e18f66db6	tls control panel: only show integral seconds while waiting the requested time from Lets Encrypt, in case we got back a non-integral number of seconds to wait	2016-02-03 08:21:22 -05:00
Joshua Tauberer	83ffc99b9c	change the public URL of bootstrap.sh to setup.sh	2016-01-30 11:19:51 -05:00
mike	6b408ef824	Use utils.shell instead of subprocess.Popen	2016-01-14 10:24:04 -05:00
Jeroen Jacobs	70111dafbc	Removes border and rounded corners from navbar	2016-01-14 15:48:39 +01:00
Joshua Tauberer	faaa74c3a7	tls: hide extra reasons why domains aren't getting a new certificate during setup	2016-01-14 07:21:08 -05:00
mike	8932aaf4ef	needed libcgi-fast-perl and chown log files	2016-01-13 23:55:45 -05:00
mike	6d6f3ea391	Added ability to use munin's dynazoom	2016-01-13 22:20:33 -05:00
Joshua Tauberer	2ad7d0830e	add exception handling for what_version_is_this, fixes #659	2016-01-09 09:23:07 -05:00
Joshua Tauberer	07f9228694	Merge branch 'letsencrypt' for automatic provisioning of TLS certificates from Let's Encrypt	2016-01-09 08:58:35 -05:00
baltoche	36e5772a8e	Update dns_update.py	2016-01-05 16:56:16 +01:00
Joshua Tauberer	2882e63dd8	second part of provisioning tls certificates from the control panel	2016-01-04 18:43:17 -05:00
Joshua Tauberer	812ef024ef	status checks: check that the non-primary domains also resolve over IPv6, if configured	2016-01-04 18:43:17 -05:00
Joshua Tauberer	40cdc5aa30	status checks: if a domain's DNS isnt working dont check the TLS certificate because we cant automatically provision one now anyway	2016-01-04 18:43:17 -05:00
Joshua Tauberer	b8d6226a9a	when provisioning tls certs from the command line, specify domain names as command line arguments to force getting certs for those domains	2016-01-04 18:43:17 -05:00
Joshua Tauberer	bac15d3919	provision tls certificates from the control panel	2016-01-04 18:43:16 -05:00
Joshua Tauberer	4b4f670adf	s/SSL/TLS/ in user-visible text throughout the project	2016-01-04 18:43:16 -05:00
Joshua Tauberer	b1b57f9bfd	don't try to get certs for IDNA domains and report all reasons for not fetching a certificate ... fixes #646	2016-01-04 18:43:16 -05:00
Joshua Tauberer	b6933a73fa	provision and install free SSL certificates from Let's Encrypt	2016-01-04 18:43:16 -05:00
Joshua Tauberer	5033042b8c	backups: email the administrator when there's a problem ... Refactor by moving the email-the-admin code out of the status checks and into a new separate tool. This is why I suppressed non-error output of the backups last commit - so it doesn't send a daily email.	2016-01-04 18:43:02 -05:00
Joshua Tauberer	89a46089ee	backups: suppress all output except errors	2016-01-04 18:43:02 -05:00
Joshua Tauberer	e288d7730b	backups: trap an error that occurs as early as getting the current backup status	2016-01-04 18:43:02 -05:00
Joshua Tauberer	06a0e7f3fe	merge #584 - Add checks to the management interface to report memory usage	2016-01-01 18:13:21 -05:00
Joshua Tauberer	a9cd72bbf9	tighten the status text strings for free memory, add changelog entry	2016-01-01 18:12:36 -05:00
Joshua Tauberer	682b1dea5e	changelog/status checks updated for opening the sieve port	2016-01-01 17:53:05 -05:00
Joshua Tauberer	8d19eade85	clarify the backup days option, fixes #570	2015-12-26 12:04:26 -05:00
Joshua Tauberer	d53332b7cf	drop the CSR_COUNTRY setting and ask within the control panel	2015-12-26 11:48:23 -05:00
Joshua Tauberer	392d33b902	change DANE TLSA record to hash the subject public key rather than the whole certificate, which means it is good for any certificate tied to the same private key ... Better for short-lived certificates. This is especially in preparation to using certificates from Let's Encrypt. see #268	2015-12-26 11:01:46 -05:00
Joshua Tauberer	4305a71916	merge #587 - move backup and nightly status checks to 3am in system time ... previously these were run in a cron.daily script which per crontab is run at 6:25 am local time	2015-12-26 08:42:58 -05:00