Jamie Curnow
2a07445005
Refactor configuration
...
- No longer use config npm package
- Prefer config from env vars, though still has support for config file
- No longer writes a config file for database config
- Writes keys to a new file in /data folder
- Removes a lot of cruft and improves config understanding
2023-03-21 16:53:39 +10:00
Jamie Curnow
dad3e1da7c
Adds support to run processes as a user/group, defined
...
with PUID and PGID environment variables
- Detects if image is run with a user in docker command and fails if so
- Adds s6 prepare scripts for adding a 'npmuser'
- Split up and refactor the s6 prepare scripts
- Runs nginx and backend node as 'npmuser'
- Changes ownership of files required at startup
2023-03-20 16:56:52 +10:00
Jamie Curnow
fccbde1371
fix linting
2023-03-17 14:23:12 +10:00
Jamie Curnow
fec36834f7
- Updated objection, knex, liquidjs, signale and sqlite3 packages
...
- Changes for objection migration
- Moved common access template code to an include
- Fixed access rules configuration generation
2023-03-17 14:18:51 +10:00
Jamie Curnow
00aeef75b6
Refactor nginx config functions, some don't need to report errors, save error'd config files as .err for debugging later
2023-03-17 11:34:27 +10:00
jc21
09d1d3744c
Merge pull request #2530 from jmerdich/jmerdich/fix-acl-edit-ssl
2023-03-08 21:08:52 +10:00
jc21
84e0b30f8d
Merge pull request #2411 from plantysnake/fix-certbot-plugins
...
Bugfix: Fix certbot plugin installation issues
2023-03-08 20:40:15 +10:00
jc21
30076a0e66
Merge pull request #2635 from skarlcf/security/CVE-2023-23596
...
Mitigate CVE-2023-23596
2023-03-08 08:25:38 +10:00
Kamil Skrzypinski
2ff66ee238
Add style required by linter
2023-03-07 17:15:03 +01:00
Jocelyn Le Sage
b0fd976b97
Make sure to lowercase email address entered by the user during login.
2023-02-26 22:24:58 -05:00
Kamil Skrzypinski
7fe7e94fbd
Mitigate CVE-2023-23596 by changing child_process.exec to child_process.execFile
2023-02-26 20:10:25 +01:00
Jake Merdich
c80d099193
ACL changes should not blow away cert config
...
When editing an access list, all affected sites get their config updated without certificates, functionally breaking https on those sites until they get a manual config change that rewrites the config properly. Properly fetch the certificate from the DB before `bulkGenerateConfigs` so it gets updated right.
I am not certain whether there are similar bugs in other places that use `bulkGenerateConfigs`.
Should fix #2254
2023-01-10 01:59:04 -05:00
plantysnake
8dee139810
Fix linter issues
2022-11-21 01:46:42 +03:00
plantysnake
6349cb6094
Fix cerbot plugin installation issues
2022-11-18 15:06:19 +03:00
Jamie Curnow
fd30cfe98b
Fix linting
2022-11-15 07:54:48 +10:00
Jamie Curnow
6f281fef42
Workaround for cloudflare plugin install ( #2381 )
2022-11-15 07:48:57 +10:00
Ivan Kristianto
366fcf0bed
Fix nginx/certificates search query
2022-02-12 12:46:06 +07:00
jc21
d7e0ae0fa0
Merge pull request #1701 from jc21/escape-credential-backslashes
...
Correctly escape backslashes in dns plugin credentials
2022-01-02 15:29:31 +10:00
jc21
29ee48530c
Merge pull request #1703 from luoweihua7/develop
...
fetch cloudflare ipv4/ipv6 fail #1405
2022-01-02 15:28:58 +10:00
chaptergy
c803ec7e26
Adds delay after reloading nginx before requesting ssl certificate using http challenge
2021-12-30 13:21:21 +01:00
Larify
7e67f33766
fetch cloudflare ipv4/ipv6 fail #1405
2021-12-30 11:50:21 +08:00
chaptergy
9dd5644183
Correctly escape backslashes in dns plugin credentials
2021-12-29 16:30:49 +01:00
jc21
d45f39aae3
Merge pull request #1538 from jc21/adds-http-challenge-test
...
Adds buttons to test availability of server from public internet
2021-11-10 09:15:26 +10:00
jc21
a517e80236
Merge pull request #1567 from jc21/removes-renew-delay
...
Removes random delay when renewing certificates with the renew now button
2021-11-08 12:26:34 +10:00
Julian Reinhardt
cf4d1f73fa
Uses letsencrypt config file everywhere
2021-11-06 22:31:13 +01:00
Julian Reinhardt
5f29f6b039
Removes random delay when renewing certificates with the renew now button
2021-11-05 14:20:12 +01:00
Julian Reinhardt
38ec0f9f95
Adds logs to backend when testing http challenge
2021-11-04 11:16:23 +01:00
Julian Reinhardt
9efe6cfb39
Minor fixes
2021-10-31 13:41:29 +01:00
Julian Reinhardt
c86a1a50bd
Fixes formatting
2021-10-31 00:28:43 +02:00
Julian Reinhardt
c55476b196
Adds buttons to test availability of server from public internet
2021-10-31 00:19:18 +02:00
chaptergy
4e3c7749af
Removes sorting of domain names when creating a certificate
2021-10-12 16:18:11 +02:00
chaptergy
6d8c4218f1
Replaces fixed certbot plugin version with optional version requirements
2021-10-07 17:13:48 +02:00
Rahul Somasundaram
ca6561bf6c
updated debug statement
2021-09-01 11:50:51 +05:30
Rahul Somasundaram
273a81471d
Revert "updated debug statement"
...
This reverts commit 8b07a67133
2021-09-01 11:47:47 +05:30
Rahul Somasundaram
8b07a67133
updated debug statement
2021-09-01 11:46:10 +05:30
Rahul Somasundaram
32089ea272
deferenced symlinks and downloaded the certs from live directory
2021-09-01 11:41:27 +05:30
Rahul Somasundaram
658acd147c
updated certificate path
2021-09-01 07:38:11 +05:30
Rahul Somasundaram
f302ff71c9
corrected message
2021-08-30 16:36:13 +05:30
Rahul Somasundaram
8944609b63
fixed linting
2021-08-24 07:28:17 +05:30
Rahul Somasundaram
be87c45f27
thrown exception for non LE certificates
2021-08-24 06:01:08 +05:30
Rahul Somasundaram
7b67ef3015
fixed linting
2021-08-23 09:17:42 +05:30
Rahul Somasundaram
e5a3b5ee2f
added endpoint to download certificates
2021-08-23 09:03:24 +05:30
Jamie Curnow
4f10d129c2
Reload nginx after access list change. Fixes #1328
2021-08-19 08:55:53 +10:00
chaptergy
83c5c55f32
Fixes creation of certificates using the http challenge
2021-08-06 10:56:06 +02:00
Jamie Curnow
842cff130b
Re-add missing certbot force renewal flag
...
and cleaned up this horrible file a bit
2021-07-01 09:57:26 +10:00
chaptergy
3f1415dad1
Use the certbot command from the PATH variable
2021-06-18 09:22:42 +02:00
chaptergy
41ef35f0d0
Fixes duckdns certbot
2021-06-07 08:27:01 +02:00
jc21
f575400bc8
Merge pull request #1081 from vipergts450/vipergts450-custom_location-patch
...
Vipergts450 custom location patch
2021-06-07 12:46:23 +10:00
vipergts450
69ee6b1699
Update nginx.js
2021-05-07 23:38:32 -04:00
vipergts450
ca1ea042b2
Update nginx.js
2021-05-07 23:31:51 -04:00
