David R. Andersen d53eabedf8 Add TLSA records for locally-hosted domains ...

This commit adds TLSA records for all locally-hosted (sub)domains
(those with A or AAAA records that match the local box).

TLSA records are computed using the build_tlsa_record() method
based on the default certificate (or key). Since the default
key is the same for all domains hosted on the box, and the TLSA
criteria used are 3 1 1, the TLSA record will be the same for all
domains.

At this point, there is no opt-out mechanism. I'm not sure if this
is necessary, nor what would be the best way to do it if it is
necessary.

2016-10-17 14:24:48 -05:00

..

templates

Correct typo of "PRIORITY" in the template (#965)

2016-10-05 18:43:50 -04:00

auth.py

the control panel auth hmac message should also include the user's password so that resetting a password in the database forces that user to log in to the control panel again; also use a sha256 hmac

2015-06-06 12:38:19 +00:00

backup.py

Added a pre-backup script to complement post-backup script.

2016-05-11 10:11:16 +02:00

csr_country_codes.tsv

drop the CSR_COUNTRY setting and ask within the control panel

2015-12-26 11:48:23 -05:00

daemon.py

simplify how munin-cgi-graph is called to reduce the attack surface area

2016-08-19 12:42:43 -04:00

daily_tasks.sh

nightly status checks could fail if any domains had non-ASCII characters

2016-02-13 11:51:06 -05:00

dns_update.py

Add TLSA records for locally-hosted domains

2016-10-17 14:24:48 -05:00

email_administrator.py

use "127.0.0.1" throughout rather than mixing use of an IP address and "localhost"

2016-05-06 09:10:38 -04:00

mail_log.py

Added received mail count to hourly activity overview in mail log management script

2016-06-10 13:08:57 +02:00

mailconfig.py

Allow files in /home/user-data/mail/mailboxes

2016-02-21 13:49:07 +01:00

ssl_certificates.py

more for dnspython exception with IPv6 addresses

2016-09-23 07:41:24 -04:00

status_checks.py

Fix status checks for ufw when the system doesn't support iptables (#961)

2016-10-08 14:35:19 -04:00

utils.py

merge functions get_web_domains and get_default_www_redirects

2015-11-29 14:46:08 +00:00

web_update.py

provision tls certificates from the control panel

2016-01-04 18:43:16 -05:00