Commit Graph

3143 Commits

Author SHA1 Message Date
Kienan Stewart b9b0f6181b Indicate unknown for the HTTPS state of a sub-domain only when the type has an https option 2023-08-30 10:01:56 +02:00
Kienan Stewart a9f6e757cd Match type more broadly for vhost when searching subdomains 2023-08-21 13:22:23 +02:00
Kienan Stewart 4e4a2bd5bc Disable vhost SSL overload types for use in the interface, and set has_https_option for vhost 2023-08-21 13:21:35 +02:00
Sébastien Grenier 5a555d238a creation of domaines_type to support ssl apache template 2023-08-21 13:15:44 +02:00
Sébastien Grenier fc112ebee3 clean old conf for apache 2.2 2023-08-21 13:13:08 +02:00
Kienan Stewart 220b38e142 Issue #277: Symlink vhost.conf to vhost-http.conf to ensure existing sub_domaine entries do not break 2023-08-16 10:02:49 +02:00
Camille Lafitte 9e2345bc2b Merge pull request #253 from Koumbit/247_escape-mysql-passwords-at-install
Fix #247: escape mysql passwords at install

Backport from merge set in stable-3.1
Merge remote-tracking branch 'remotes/koumbit/247_escape-mysql-passwords-at-install'
2023-08-15 10:23:13 +02:00
Kienan Stewart d78a5026ab use string templating instead of sed for creating/updating mysql configuration during install 2023-08-15 10:14:44 +02:00
Kienan Stewart 4c180272ed Escape mysql passwords in alternc install 2023-08-15 10:14:07 +02:00
Km 937339befb
Merge pull request #414 from Koumbit/413-bind_reloads_every_minute
Fix #413: Add return values for bind update domains hooks
2022-09-23 21:53:18 +02:00
Camille Lafitte 13a9ad5c3d Require apache2 to use its scripts
* we need a2enmod and apache2-mpm-itk is no more provide since at least stretch
2021-11-30 19:50:12 +01:00
Km 811dce6370
Merge pull request #466 from AlternC/issue-424
add exit 1 to inotify scripts, goes around the serious incrond bug in debian
2021-11-30 19:31:54 +01:00
Camille Lafitte 05c581d206 Revert "Merge pull request #492 from thifranc/master"
This reverts commit 1ba7a2f475, reversing
changes made to a85ccd043b.

* If we want only IP from remote then we must disable Lookup option
* Prevent problem with remote_ip (is not installed by default) and it's better to set proxy allowed and return correctly %h value
2021-11-30 19:24:03 +01:00
Thibault Francois 1ba7a2f475
Merge pull request #492 from thifranc/master
[fix] rather log %a [IP addr] than %h [HOSTNAME]
2021-10-26 09:41:04 +02:00
Thibault François 3946039c86 [fix] rather log %a [IP addr] than %h [HOSTNAME] 2021-10-26 09:39:25 +02:00
Thibault Francois a85ccd043b
Merge pull request #455 from fulax/patch-1
proftpd.conf: Default to modern TLS protocols
2021-10-26 09:17:41 +02:00
Benjamin Sonntag 6add7e4a40 add exit 1 to inotify scripts, which goes around the serious incrond bug in Debian Buster... 2021-06-16 17:29:19 +02:00
Kienan Stewart 2e1fbd374d Fixes #441: Correct DMARC entry syntax 2021-06-16 17:08:54 +02:00
Benjamin Sonntag 7e02128159 sudo-ldap or sudo dependency. Fixes #443 2021-06-16 17:01:32 +02:00
Benjamin Sonntag 0c36883195 fixes #444 removing comment on awstats sql dump 2021-06-16 16:57:33 +02:00
Gabriel Filion 6448440101
alternc.install: PHP version comparison is broken for buster (#461)
The current comparison can only work on debian stretch, that ships php
7.0, but debian buster has a more recent version and bullseye will have
an even more recent version.

This change was suggested by @ulvida (Daniel Viñar Ulriksen) on Github.
Thanks!

Closes: #459

Co-authored-by: Gabriel Filion <gabriel@koumbit.org>
2021-05-17 14:02:27 -04:00
Cyprien Nicolas 8965df7640
proftpd.conf: Default to modern TLS protocols
# Rationale

TLSv1.2 has been out for more than 10 years, and is now widely available. TLSv1.0 and TLSv1.1 are known to be unsufficient for a few years and have been officially deprecated by the IETF recently.

TLSv1.3 is starting to be widely available, however it had implementation bugs, such as https://github.com/proftpd/proftpd/issues/959. This is fixed upstream, but fixed versions are not available in Debian 10 yet.

# Changes

* ProFTPd now defaults to TLSv1.2
* Add a comment for suggesting other values like TLSv1.3, but with a comment about buggy versions
* Add a comment for downgrading to deprecated TLSv1 TLSv1.1
2021-03-31 11:06:48 +02:00
Km 9fe5164405
Merge pull request #447 from Koumbit/api_fix_bootstrap
API: instantiate m_message for logging
2021-03-09 10:34:33 +01:00
Gabriel Filion a4486fcf88 API: instantiate m_message for logging
Without this global instance, nothing works during the bootstrap: all
calls to log() crash because the instance does not exist.

closes: #419
2021-02-25 16:48:45 -05:00
cam.lafit 3c83f33935 Fix #426 : Remove 2.2 authorization rule
* Use only 2.4 authorization rules
* Restore server-status protection with 2.4 rules only
* close #426
2020-08-18 12:38:31 +02:00
azerttyu 5d14fed7e4 Remove all alternc-ssl package
* finish #263
2020-08-18 12:36:12 +02:00
alban 78d3aeb60f [fix] There should be no <script> markup in tables headers #402 2020-07-02 22:54:26 +02:00
Kienan Stewart d373365d8f
Fix #413: Add return values for bind update domains hooks
hook_updatedomains_dns_{add,del} have their return values checked in
m_dom::update_domains() to set the dns_result column.

When no return value is specified, the value is actually NULL and doesn't
get mapped to an integer value that is expected by the dns_result column.

As a result, the query fails silently and the DNS_ACTION column is never
updated. This causes update_domains to retry the same modification on
every run.
2020-06-08 17:40:40 -04:00
Km b057544ba3
Merge pull request #372 from UdelaRInterior/fix-#326
Fix #326 - Minor detail in form
2020-01-28 18:39:31 +01:00
Km 8cea9323dd
Merge pull request #397 from Koumbit/bugs/374-document_upgrade_process
Add a notice in the README about upgrading from 3.3.11 to 3.5.x

Manual fix about ssl vhost support
2020-01-28 18:29:50 +01:00
Km 2fa12e7245
Merge pull request #398 from Koumbit/bugs/374-follow_debian_policy_on_replacing_packages_using_breaks
Use Breaks instead of Conflicts with alternc-ssl and alternc-admintools

@see https://www.debian.org/doc/debian-policy/ch-relationships.html#conflicting-binary-packages-conflicts
2020-01-28 18:28:34 +01:00
Kienan Stewart 047bed9d1f
Add a notice in the README about upgrading from 3.3.11 to 3.5.x 2019-12-17 16:12:26 -05:00
Kienan Stewart a6c0e8cf1b
Use Breaks instead of Conflicts with alternc-ssl and alternc-admintools
This follows the Debian policy on using Breaks when moving files from one
package to another.

@see https://www.debian.org/doc/debian-policy/ch-relationships.html#conflicting-binary-packages-conflicts

If apt/apt-get are used to install the new package, it will know to automatically
remove alternc-ssl (or alternc-admintools) instead of refusing to proceed at all.
2019-12-17 15:45:42 -05:00
kienanstewart bce334e75b
Merge pull request #379 from bleuchtang/fix-aws-doedit-rase
[fix] Ok is not allowed in level message
2019-10-03 17:25:38 -04:00
kienanstewart bc717c36d5
Merge branch 'master' into fix-aws-doedit-rase 2019-10-03 17:19:27 -04:00
Louis-Philippe Véronneau a10f67f299
fix minor typo 2019-09-09 15:39:50 -04:00
Émile f6046a2566 [fix] Ok is not allowed in level message 2019-08-09 08:38:40 +02:00
Km d1d410ed65
Allow certificates on autoconfig et autodiscover
Should be solve https://github.com/AlternC/alternc-certbot/issues/51
2019-07-23 20:56:56 +02:00
santiagomr 5ca85e7357 Fix #326 - Minor detail in form 2019-07-15 15:10:39 -03:00
Km 5e9fadd315
Merge pull request #329 from Koumbit/matomo_integration_fixes
Matomo integration fixes
2019-07-12 22:54:17 +02:00
Km 3744b0242a
Merge pull request #325 from tuxayo/patch-1
[fix] apache2 template: typo and rephrase comment
2019-07-12 21:37:06 +02:00
Km d770c70218
Merge branch 'master' into patch-1 2019-07-12 21:36:34 +02:00
Km db471afa79
Merge pull request #343 from Koumbit/336_domaine_deletions_stuck
Fix domain deletion query
2019-07-12 21:35:45 +02:00
Km 200f103adf
Merge pull request #347 from Koumbit/335_phpmyadmin_sso_broken
Fixes #335: Fix PHPMyAdmin Single-signon errors
2019-07-12 21:33:15 +02:00
Km ab73c9d6f9
Merge pull request #371 from Koumbit/370-import_cert_fails
Fixes #370: Fix insert query failure during import_cert
2019-07-12 21:27:03 +02:00
Kienan Stewart bb6d5c6863
Fix insert query failure during import_cert
The sslcsr is just set to an empty string so that the query works properly.
Without it, queries fail since sslcsr does not have a default value set.

Improved the detail of the messages logged during the failure of that query as well.
2019-07-12 14:46:36 -04:00
Kienan Stewart 53570e236a
Enter default db_server information before templating
Refs #335
2019-05-15 17:46:15 -04:00
Kienan Stewart caae003c60
Merge remote-tracking branch 'upstream/master' into 335_phpmyadmin_sso_broken 2019-05-14 12:19:39 -04:00
Kienan Stewart f3207ec2f1
Override owner and group for phpmyadmin lib files
Refs #335
2019-05-14 12:15:23 -04:00
Kienan Stewart 82c87c43e0
Increase blowfish secret length from 24 to 32
Refs #335
2019-05-14 12:15:00 -04:00