433 Commits

Author	SHA1	Message	Date
Michael Kroes	8ea2f5a766	Allow a server to be rebooted when a reboot is required	2016-02-25 21:56:27 +01:00
Joshua Tauberer	5cabfd591b	(re-fix) mail sent from an address on a subdomain of a domain hosted by the box (a non-zone domain) would never be DKIM-signed because only zones were included in the openDKIM configuration, mistakenly ... This was originally fixed in 143bbf37f4 (February 16, 2015). Then I broke it in 7a93d219ef (November 2015) while doing some refactoring ahead of v0.15.	2016-02-23 10:16:04 -05:00
Joshua Tauberer	af80849857	Merge pull request #732 from yodax/memory ... Reduce percentages for required free memory checks	2016-02-22 15:02:50 -05:00
Joshua Tauberer	4b2e48f2c0	Merge pull request #726 from yodax/login ... When previous panel was login, move to system_status	2016-02-22 14:44:23 -05:00
yodax	1b24e2cbaf	Reduce percentages for required memory checks	2016-02-22 17:49:19 +01:00
yodax	0843159fb4	Reduce number of processes in the pool to 5	2016-02-22 17:38:30 +01:00
yodax	b8e99c30a2	When previous panel was login, move to system_status	2016-02-20 18:42:28 +01:00
Joshua Tauberer	23ecff04b8	the logic in 4ed23f44e6 for taking backups more often was partly backward	2016-02-18 07:50:59 -05:00
Joshua Tauberer	36cb2ef41d	missing elif	2016-02-16 09:11:54 -05:00
Joshua Tauberer	1ba44b02d4	forgot to catch free_tls_certificates.client.ChallengeFailed ... Provisioning could crash if, e.g., the DNS we see is different from the DNS Let's Encrypt sees. see #695, probably fixes it	2016-02-15 18:22:16 -05:00
Joshua Tauberer	2f24328608	before the user agrees to Let's Encrypt's ToS the admin could get a nightly email with weird interactive text ... Made a mistake refactoring the headless variable earlier. fixes #696	2016-02-13 12:38:16 -05:00
Joshua Tauberer	8ea42847da	nightly status checks could fail if any domains had non-ASCII characters ... https://discourse.mailinabox.email/t/status-check-emails-empty-after-upgrading-to-v0-16/1082/3 A user on that thread suggests an alternate solution, adding `PYTHONIOENCODING=utf-8` to `/etc/environment`. Python docs say that affects stdin/out/err. But we also use these environment variables elsewhere to ensure that config files we read/write are opened with UTF8 too. Maybe all that can be simplified too.	2016-02-13 11:51:06 -05:00
Joshua Tauberer	4ed23f44e6	take a full backup more often so we don't keep backups around for so long	2016-02-05 11:08:33 -05:00
Joshua Tauberer	178527dab1	convert the backup increment time to the local timezone, fixes #700 ... Duplicity gives times in UTC. We were assuming times were in local time.	2016-02-05 08:58:07 -05:00
Wolf-Bastian Pöttner	239eac662c	Fix: Correct IP is reported when using custom DNS ... Fix bug that reports wrong ip, when custom DNS is enabled	2016-02-04 21:32:11 +01:00
Joshua Tauberer	4e18f66db6	tls control panel: only show integral seconds while waiting the requested time from Lets Encrypt, in case we got back a non-integral number of seconds to wait	2016-02-03 08:21:22 -05:00
Joshua Tauberer	83ffc99b9c	change the public URL of bootstrap.sh to setup.sh	2016-01-30 11:19:51 -05:00
Jeroen Jacobs	70111dafbc	Removes border and rounded corners from navbar	2016-01-14 15:48:39 +01:00
Joshua Tauberer	faaa74c3a7	tls: hide extra reasons why domains aren't getting a new certificate during setup	2016-01-14 07:21:08 -05:00
Joshua Tauberer	2ad7d0830e	add exception handling for what_version_is_this, fixes #659	2016-01-09 09:23:07 -05:00
Joshua Tauberer	07f9228694	Merge branch 'letsencrypt' for automatic provisioning of TLS certificates from Let's Encrypt	2016-01-09 08:58:35 -05:00
baltoche	36e5772a8e	Update dns_update.py	2016-01-05 16:56:16 +01:00
Joshua Tauberer	2882e63dd8	second part of provisioning tls certificates from the control panel	2016-01-04 18:43:17 -05:00
Joshua Tauberer	812ef024ef	status checks: check that the non-primary domains also resolve over IPv6, if configured	2016-01-04 18:43:17 -05:00
Joshua Tauberer	40cdc5aa30	status checks: if a domain's DNS isnt working dont check the TLS certificate because we cant automatically provision one now anyway	2016-01-04 18:43:17 -05:00
Joshua Tauberer	b8d6226a9a	when provisioning tls certs from the command line, specify domain names as command line arguments to force getting certs for those domains	2016-01-04 18:43:17 -05:00
Joshua Tauberer	bac15d3919	provision tls certificates from the control panel	2016-01-04 18:43:16 -05:00
Joshua Tauberer	4b4f670adf	s/SSL/TLS/ in user-visible text throughout the project	2016-01-04 18:43:16 -05:00
Joshua Tauberer	b1b57f9bfd	don't try to get certs for IDNA domains and report all reasons for not fetching a certificate ... fixes #646	2016-01-04 18:43:16 -05:00
Joshua Tauberer	b6933a73fa	provision and install free SSL certificates from Let's Encrypt	2016-01-04 18:43:16 -05:00
Joshua Tauberer	5033042b8c	backups: email the administrator when there's a problem ... Refactor by moving the email-the-admin code out of the status checks and into a new separate tool. This is why I suppressed non-error output of the backups last commit - so it doesn't send a daily email.	2016-01-04 18:43:02 -05:00
Joshua Tauberer	89a46089ee	backups: suppress all output except errors	2016-01-04 18:43:02 -05:00
Joshua Tauberer	e288d7730b	backups: trap an error that occurs as early as getting the current backup status	2016-01-04 18:43:02 -05:00
Joshua Tauberer	06a0e7f3fe	merge #584 - Add checks to the management interface to report memory usage	2016-01-01 18:13:21 -05:00
Joshua Tauberer	a9cd72bbf9	tighten the status text strings for free memory, add changelog entry	2016-01-01 18:12:36 -05:00
Joshua Tauberer	682b1dea5e	changelog/status checks updated for opening the sieve port	2016-01-01 17:53:05 -05:00
Joshua Tauberer	8d19eade85	clarify the backup days option, fixes #570	2015-12-26 12:04:26 -05:00
Joshua Tauberer	d53332b7cf	drop the CSR_COUNTRY setting and ask within the control panel	2015-12-26 11:48:23 -05:00
Joshua Tauberer	392d33b902	change DANE TLSA record to hash the subject public key rather than the whole certificate, which means it is good for any certificate tied to the same private key ... Better for short-lived certificates. This is especially in preparation to using certificates from Let's Encrypt. see #268	2015-12-26 11:01:46 -05:00
Joshua Tauberer	4305a71916	merge #587 - move backup and nightly status checks to 3am in system time ... previously these were run in a cron.daily script which per crontab is run at 6:25 am local time	2015-12-26 08:42:58 -05:00
Joshua Tauberer	a4d8e12fd7	clean up the backup time patch: dont choose timezone here, move status checks into the same 3am script	2015-12-26 08:41:37 -05:00
Joshua Tauberer	dbf4729109	add management/backup.py --restore	2015-12-23 12:53:38 +00:00
Joshua Tauberer	6e6c993724	reword POP documentation, add to changelog/readme	2015-12-12 08:46:18 -05:00
Marius	f8b4e3775d	Update mail-guide.html (POP3)	2015-12-12 08:41:13 -05:00
Joshua Tauberer	fad69f85fa	Merge pull request #605 from ariejan/feature/604-add-rfc2142-mail-aliases ... Add alias for abuse@	2015-12-07 15:56:51 -05:00
Ariejan de Vroom	aedfe62bb0	Add alias for abuse@	2015-12-07 16:31:58 +01:00
Joshua Tauberer	c4f00626ef	status checks: check that PRIMARY_HOSTNAME's AAAA record is working	2015-12-07 09:08:00 -05:00
Joshua Tauberer	fdad83a1bb	status checks: check IPv6 reverse DNS	2015-12-07 08:58:48 -05:00
Joshua Tauberer	5bbe9f9a04	status checks: when ipv6 is enabled, check that services are accessible over ipv6 too	2015-12-07 08:37:04 -05:00
Joshua Tauberer	7a93d219ef	some cleanup in dns_update.py	2015-11-29 14:59:35 +00:00