KiekerJan
67b806b326
merge upstream v62
2023-05-21 11:41:24 +02:00
KiekerJan
1334f094ab
Merge remote-tracking branch 'upstream/main' into mergeupstream
2023-05-19 15:40:40 +02:00
KiekerJan
4159de8b2c
add DANE TLSA records for all web serving domains
2023-05-18 12:38:21 +02:00
Joshua Tauberer
51ed030917
Allow setting the S3 region name in backup settings to pass to duplicity
...
It's stuffed inside the username portion of the target URL. We already mangle the target before passing it to duplicity so there wasn't a need for a new field.
Fixes the issue raised in #2200 , #2216 .
2023-05-13 07:00:29 -04:00
Joshua Tauberer
e828d63a85
Allow secondary DNS xfr: items to be hostnames that are resolved to IP addresses when generating the nsd configuration
2023-05-13 07:00:10 -04:00
Peter Tóth
6d43d24552
Improve control panel panel switching behaviour by using the URL fragment ( #2252 )
2023-05-13 06:49:34 -04:00
Peter Tóth
963fb9f2e6
email_administrator.py: fix report formatting ( #2249 )
2023-05-13 06:40:31 -04:00
KiekerJan
c9584148a0
Fix issue where sshkeygen fails when ipv6 is disabled ( #2248 )
2023-05-13 06:39:46 -04:00
Tomas P
9a33f9c5ff
Fix dynazoom due to change in handling su ( #2247 )
...
Seems that in Ubuntu 22.04 the behavior in su changed, making - ( alias for -l, --login ) mutually exclusive with --preserve-environment which is required for passing enviroment variables for cgi to work for dynazoom in munin.dropping - fixes the issue
2023-05-13 06:38:00 -04:00
Hugh Secker-Walker
f72be0be7c
feat(rsync-backup-ui): Add a Copy button to put public key on clipboard in rsync UI ( #2227 )
2023-05-13 06:36:31 -04:00
KiekerJan
9dfd83b3f9
keep existing dkim selector
2023-04-28 23:05:42 +02:00
KiekerJan
1c5eeac1d5
do not validate records that are requested to be removed
2023-04-12 21:08:47 +02:00
KiekerJan
547a75c25d
fix issue where sshkeyscan fails when ipv6 is disabled for sshd
2023-03-27 21:19:09 +02:00
KiekerJan
2d9aa20b36
softfail SPF
2023-03-10 21:29:05 +01:00
KiekerJan
95ac1387a3
commit upstream
2023-01-29 13:41:41 +01:00
Joshua Tauberer
c77d1697a7
Revert "Improve error messages in the management tools when external command-line tools are run"
...
Command line arguments have user secrets in some cases which should not be included in error messages.
This reverts commit 26709a3c1d
.
Reported by AK.
2023-01-28 11:24:38 -05:00
Hugh Secker-Walker
7af713592a
feat(status page): Add summary of ok/error/warning counts ( #2204 )
...
* feat(status page): Add summary of ok/error/warning counts
* simplify a bit
---------
Co-authored-by: Hugh Secker-Walker <hsw+miac@hodain.net>
Co-authored-by: Joshua Tauberer <jt@occams.info>
2023-01-28 11:11:17 -05:00
Hugh Secker-Walker
4408cb1fba
fix(rsync-backup): Provide default port 22 for rsync usage in backup.py ( #2226 )
...
Co-authored-by: Hugh Secker-Walker <hsw+miac@hodain.net>
2023-01-28 11:04:46 -05:00
Joshua Tauberer
b3743a31e9
Add a status checks check that fail2ban is running using fail2ban-client
2023-01-15 10:17:10 -05:00
Joshua Tauberer
26709a3c1d
Improve error messages in the management tools when external command-line tools are run
2023-01-15 10:17:10 -05:00
Steven Conaway
7a79153afe
Remove old darkmode background color ( #2218 )
...
Removing this old background color solves the problem of the bottom of short pages (like `/admin`'s login page) being white. The background was being set to black, which would be inverted, so it'd appear white. Since the `filter:` css has [~97% support](https://caniuse.com/?search=filter ), I think that this change should be made. Tested on latest versions of Chrome (mac and iOS), Firefox, and Safari (mac and iOS).
2023-01-15 10:05:13 -05:00
Hugh Secker-Walker
a2565227f2
feat(rsync-port): Add support for non-standard ssh port for rsync backup ( #2208 )
2023-01-15 10:03:05 -05:00
Hugh Secker-Walker
02b34ce699
fix(backup-display): Fix parsing of rsync target in system-backup.html, fixes #2206 ( #2207 )
2023-01-15 10:01:07 -05:00
Hugh Secker-Walker
820a39b865
chore(python open): Refactor open and gzip.open to use context manager ( #2203 )
...
Co-authored-by: Hugh Secker-Walker <hsw+miac@hodain.net>
2023-01-15 08:28:43 -05:00
KiekerJan
0fc5105da5
Fixes to DNS lookups during status checks when there are timeouts, enforce timeouts better ( #2191 )
...
* add dns query handling changes
* replace exception pass with error message
* simplify dns exception catching
* Add not set case to blacklist lookup result handling
2023-01-15 08:20:08 -05:00
kiekerjan
2921a77edc
Merge pull request #15 from hughsw/add-custom-rsync-port
...
feat(rsync-port): Add support for non-standard ssh port for rsync backup
2022-11-28 20:30:24 +01:00
kiekerjan
4e96509ef1
Merge pull request #14 from hughsw/fix-rsync-display
...
fix(backup-display): Fix parsing of rsync target in system-backup.htm…
2022-11-28 20:28:24 +01:00
Hugh Secker-Walker
142e9bd974
feat(rsync-port): Add support for non-standard ssh port for rsync backup
2022-11-22 12:16:31 +00:00
Hugh Secker-Walker
97e1f39aec
fix(backup-display): Fix parsing of rsync target in system-backup.html, fixes #2206
2022-11-21 18:39:23 +00:00
KiekerJan
210d9f08dc
simplify utils.py#shell method used by unbound-control call
2022-11-05 21:04:05 +01:00
KiekerJan
16728860f4
add not set case to blacklist lookup
2022-11-03 08:27:56 +01:00
KiekerJan
ebc5f06d61
merge upstream 60.1
2022-10-30 23:01:19 +01:00
alento-group
32c68874c5
Fix NSD not restarting ( #2182 )
...
A previous commit (0a970f4bb2
) broke nsd restarting. This fixes that change by reverting it.
Josh added: Use nsd-control with reconfig and reload if they succeed and only fall back to restarting nsd if they fail
Co-authored-by: Joshua Tauberer <jt@occams.info>
2022-10-30 08:16:03 -04:00
KiekerJan
fe52334288
merge upstream
2022-10-15 16:38:47 +02:00
KiekerJan
4914b0c423
add logging
2022-10-15 07:59:25 +02:00
Joshua Tauberer
ddf8e857fd
Support Ubuntu 22.04 Jammy Jellyfish ( #2083 )
2022-10-11 21:18:34 -04:00
Joshua Tauberer
0a970f4bb2
Use nsd-control to refresh nsd after zone files are rewritten rather than 'service nsd restart'
...
I am not sure if this was the problem but nsd didn't serve updated zonefiles on my box and 'service nsd restart' must have been used, so maybe it doesn't reload zones.
2022-10-08 07:24:57 -04:00
jvolkenant
b8feb77ef4
Move postgrey database under $STORAGE_ROOT ( #2077 )
2022-09-24 13:17:55 -04:00
Steve Hay
1e1a054686
BUGFIX: Correctly handle the multiprocessing for run_checks in the management daemon ( #2163 )
...
See discussion here: #2083
Co-authored-by: Steve Hay <hay.steve@gmail.com>
2022-09-24 09:56:27 -04:00
KiekerJan
9ee26d3ef1
merge upstream changes proposed for 2204
2022-09-17 16:41:35 +02:00
Joshua Tauberer
58ded74181
Restore the backup S3 host select box if an S3 target has been set
...
Also remove unnecessary import added in 7cda439c
. Was a mistake from edits during PR review.
2022-09-17 09:07:54 -04:00
Steve Hay
3fd2e3efa9
Replace Flask built-in WSGI server with gunicorn ( #2158 )
2022-09-17 08:03:16 -04:00
Steve Hay
7cda439c80
Port boto to boto3 and fix asyncio issue in the management daemon ( #2156 )
...
Co-authored-by: Steve Hay <hay.steve@gmail.com>
2022-09-17 07:57:12 -04:00
KiekerJan
9327a1df4f
merge proposed boto chagnes
2022-09-12 22:58:52 +02:00
KiekerJan
1ce9766204
merge upstream changes to update to ubuntu 2204
2022-09-04 20:52:56 +02:00
KiekerJan
197a142043
check returned nameserver values
2022-08-26 11:34:18 +02:00
KiekerJan
b051137f36
more resilient nameserver usage in query dns
2022-08-26 11:29:23 +02:00
Sudheesh Singanamalla
d7244ed920
Fixes #2149 Append ; in policy strings for DMARC settings ( #2151 )
...
Signed-off-by: Sudheesh Singanamalla <sudheesh@cloudflare.com>
2022-08-19 13:23:42 -04:00
Joshua Tauberer
ab71abbc7c
Update to latest cryptography Python package, add missing source at top of management.sh so it can run standalone (needs STORAGE_ROOT)
2022-07-28 14:42:51 -04:00
Joshua Tauberer
78d71498fa
Upgrade from PHP 7.2 to 8.0 for Ubuntu 22.04
...
* Add the PHP PPA.
* Specify the version when invoking the php CLI.
* Specify the version in package names.
* Update paths to 8.0 (using a variable in the setup scripts).
* Update z-push's php-xsl dependency to php8.0-xml.
* php-json is now built-into PHP.
Although PHP 8.1 is the stock version in Ubuntu 22.04, it's not supported by Nextcloud yet, and it likely will never be supported by the the version of Nextcloud that succeeds the last version of Nextcloud that supports PHP 7.2, and we have to install the next version so that an upgrade is permitted, so skipping to PHP 8.1 may not be easily possible.
2022-07-28 14:02:46 -04:00