kienan
/
AlternC
mirror of https://github.com/kienanstewart/AlternC.git
1
0
Fork 0
Code Issues Releases Wiki Activity
3,139 Commits 25 Branches 26 Tags 14 MiB
Commit Graph

190 Commits

Author SHA1 Message Date
Sébastien Grenier fc112ebee3 clean old conf for apache 2.2 2023-08-21 13:13:08 +02:00
Kienan Stewart 220b38e142 Issue #277: Symlink vhost.conf to vhost-http.conf to ensure existing sub_domaine entries do not break 2023-08-16 10:02:49 +02:00
Camille Lafitte 05c581d206 Revert "Merge pull request #492 from thifranc/master" 
This reverts commit 1ba7a2f475, reversing
changes made to a85ccd043b.

* If we want only IP from remote then we must disable Lookup option
* Prevent problem with remote_ip (is not installed by default) and it's better to set proxy allowed and return correctly %h value
 2021-11-30 19:24:03 +01:00
Thibault François 3946039c86 [fix] rather log %a [IP addr] than %h [HOSTNAME] 2021-10-26 09:39:25 +02:00
Cyprien Nicolas 8965df7640
proftpd.conf: Default to modern TLS protocols 
# Rationale

TLSv1.2 has been out for more than 10 years, and is now widely available. TLSv1.0 and TLSv1.1 are known to be unsufficient for a few years and have been officially deprecated by the IETF recently.

TLSv1.3 is starting to be widely available, however it had implementation bugs, such as https://github.com/proftpd/proftpd/issues/959. This is fixed upstream, but fixed versions are not available in Debian 10 yet.

# Changes

* ProFTPd now defaults to TLSv1.2
* Add a comment for suggesting other values like TLSv1.3, but with a comment about buggy versions
* Add a comment for downgrading to deprecated TLSv1 TLSv1.1
 2021-03-31 11:06:48 +02:00
cam.lafit 3c83f33935 Fix #426 : Remove 2.2 authorization rule 
* Use only 2.4 authorization rules
* Restore server-status protection with 2.4 rules only
* close #426
 2020-08-18 12:38:31 +02:00
Km d1d410ed65
Allow certificates on autoconfig et autodiscover 
Should be solve https://github.com/AlternC/alternc-certbot/issues/51
 2019-07-23 20:56:56 +02:00
Km d770c70218
Merge branch 'master' into patch-1 2019-07-12 21:36:34 +02:00
John Soros ade7a3f29f allow override of MultiViews option in .htaccess also for vhosts hosted using http and http+https 2019-05-13 19:54:25 +01:00
John Soros 7e0e74375f allow override of MultiViews option in .htaccess 2019-05-05 03:47:13 +02:00
tuxayo 1fc21039f5
[fix] apache2 template: typo and rephrase comment 
"on hosting" seemed a francism
 2019-03-23 11:15:56 +01:00
alban 7a6d800e21 [fix] apache2.conf should Satisfy Any by default 2018-10-26 16:43:58 +02:00
Kienan Stewart 5a5fc801f8 Generate opendkim configuration in stretch when alternc.install is run 
The default configuration in stretch doesn't work very well and
needs a couple of tweaks. This will generate the service files and
make sure opendkim is run as the opendkim user instead of root.

The alternc opendkim.conf template is updated so that the connection
can be made locally through a socket.
 2018-10-25 14:59:33 +02:00
Benjamin Sonntag 70224f71d6 [fix] (for 3.5) fixing autodiscover template 2018-10-23 18:46:52 +02:00
Dominique Rousseau 1809cd67da add php config for sys_temp_dir in vhost templates (for PHP 5.4+) 2018-10-22 17:16:15 +02:00
Benjamin Sonntag b5b8bc3028 Merge branch 'feature-updatedomains-php' 2018-10-22 16:52:45 +02:00
Alexandru fdda4e95e8 Fix bind allow-transfer on internal ipv6 2018-10-22 15:59:55 +02:00
Benjamin Sonntag af3751742a [fix] autodiscover vhost had wrong filename 2018-07-18 10:56:35 +02:00
Benjamin Sonntag 49e81b55bf [fix] add ::1 to slaveip.conf template ... it's 2018 people ! 2018-07-17 18:10:39 +02:00
Benjamin Sonntag 5c32a54edb [fix] French vs. English in template name :/ + fixing case issue making zone empty 2018-07-17 17:20:39 +02:00
Benjamin Sonntag f898407d3d [enh] adding update_domains.php in cron, fixing panel to NOT include autodiscover from now 2018-07-08 22:19:58 +02:00
Benjamin Sonntag a194cd80d0 [fix] vhost http template missing SSLENGINE and CERT instructions in 443 Vhost 2018-07-07 13:13:28 +02:00
Benjamin Sonntag 2ad744ecc7 [fix] replacing /var/run by /run everywhere we can (not everywhere: postfix chroot or old compatibility is maintained 2018-07-04 17:42:42 +02:00
Benjamin Sonntag 5a8fd5db20 [fix] allow /lib /etc /usr in chrooted ftp accounts 2018-06-25 12:02:52 +02:00
Benjamin Sonntag b7235d33f0 [enh] not using apache.pem anymore: using /etc/ssl/*/alternc-*.pem|key 2018-06-24 18:23:39 +02:00
Benjamin Sonntag 178823a9f0 [merge] feature-ssl in master 2018-06-24 16:52:24 +02:00
Benjamin Sonntag 3137bc5aa0 [fix] allow 50MB upload in the panel (file manager, mostly) 2018-06-24 16:50:32 +02:00
Benjamin Sonntag f1026cb26e [enh] removing jquery ui (now a package) + fixing head.php, simpler unless you use bro_editor 2018-06-24 16:49:43 +02:00
Benjamin Sonntag 404ba2803b [enh] testing JS packages dependencies instead of including our own copy 2018-06-24 16:09:11 +02:00
cam.lafit 1db447bcec [fix] Provider a return carrier on template 
* As we use cat to generate vhosts_all we must provide all return
carrier
 2018-06-23 17:01:49 +02:00
cam.lafit 1bc8b59da9 Now apache.pem is always set 
* We can configure apache2, postfix, proftpd, dovevot with tls features
by default
 2018-06-23 17:01:49 +02:00
Benjamin Sonntag bafee6372a [fix] roundcube and squirrelmail are specific packages 2018-06-23 16:47:15 +02:00
Sébastien Grenier bf57ec3dc1 pour permettre la compatibilite avec apache2.4 2018-06-22 13:57:04 -03:00
azerttyu 4ee6ae395e [enh] Update template files 
* When a dommain type has an ssl support, template have as
suffixhttps,http, both* On each case we support each port with(out)
redirect*By default we support acme-challenge protocol
 2018-06-22 17:59:39 +02:00
Benjamin Sonntag 6762429c68 replacing allow from all by Require all granted 2018-06-21 18:29:49 +02:00
Benjamin Sonntag 88f6d04f89 [fix] options now force + or - everywhere 2018-06-21 18:28:10 +02:00
Kienan Stewart 5ba055cf7f Cherrypick apache2 configuration for jessie/stretch 
Sourced from ea3371ae34
 2018-06-21 17:52:54 +02:00
Benjamin Sonntag c88db87db3 Merge branch 'stable-3.1' 2018-06-21 17:36:34 +02:00
Benjamin Sonntag f930bde36d adding all patched from squeeze to wheezy then jessie. 2018-06-21 17:29:42 +02:00
cam.lafit c8d94d2a50 SSL massive backport 
* Now we integrate all alternc-feature in native alternc
* Files are backported as waiting by alternc
* Some files was renammed or moved to follow alternc installation
process
 2018-06-21 17:26:27 +02:00
Benjamin Sonntag 2c1cd988d5 [fix] STRETCH compatibility: opendkim default files bigger now + reSTART bind9 at alternc.install, not RELOAD 2017-10-08 14:02:15 +02:00
Benjamin Sonntag efe1c6c54a [fix] prevents postconf: fatal: missing attribute name: '' when doing alternc.install 2017-10-07 16:05:48 +02:00
km add27f014d Provide an alternc LogFormat in any case 
We must provide an apache log when any domain are set as an fresh
installaton
 2017-10-06 18:38:51 +02:00
quenenni 756993878b informations d'installation et mise à jour 2017-08-17 04:26:29 +02:00
John Soros 47e689adf6 14 days is recommended value for expiry value in zone SOA (rfc1912) 2017-06-07 15:28:23 +02:00
Remi 27af9078a8 fixes in postfix configuration to prevent some high load issues 2016-03-12 10:06:54 +01:00
Remi 28318a002c bug fix: use of deprecated smtp_use_tls to replace by smtp_tls_security_level 2016-03-12 09:39:07 +01:00
Remi 06a3e2537e specify nxdomain ttl in the comment of the zone template accordingly to RFC 2308 
see section 4 "SOA minimum Field" https://www.ietf.org/rfc/rfc2308.txt
By default we use the default TTL
 2016-03-02 16:55:36 +01:00
Remi ce3b86b24e see #67 : TTL was not updated in the SOA record 2016-03-02 16:32:08 +01:00
Benjamin Sonntag 72c0247809 adding proper TLS configuration for Postfix (in and out) 2016-02-24 16:15:16 +01:00