390 Commits

Author SHA1 Message Date
Sunil Mohan Adapa
7f948d1111
tor: Simplify upstream bridges action code
- There is no need for separate subcommand as arguments can be passed in
  even when they have special characters such as \n in them.

- Enable obfs3 and scramblesuit transports also.  Since it is easy to
  support them and bridges site still provides them.  scramblesuit is
  also a nice alternative to obfs4.

- Minor refactoring/fixes.
2017-01-29 11:21:03 +05:30
James Valleroy
31f95cfb12
tor: Support obfs4 for upstream bridges
Refactor augeas lens for readability.
2017-01-29 11:19:34 +05:30
James Valleroy
5483d30151
tor: Don't allow relay to be enabled while using upstream bridges 2017-01-29 11:19:01 +05:30
James Valleroy
165e880329
tor: Move restart logic into plinth module 2017-01-29 11:18:42 +05:30
James Valleroy
6430ebbc71
tor: Re-use loaded augeas 2017-01-29 11:18:31 +05:30
James Valleroy
09b58a8b99
tor: Add option to use upstream bridges 2017-01-29 11:17:41 +05:30
James Valleroy
1aa767e6bd
users: Move part of LDAP setup to first-run
LDAP admin and basic structure setup requires running slapd. Move this
to first-run so we don't have to start slapd during setup. This should
avoid issues when running setup in a chroot.
2017-01-18 18:40:03 -05:00
Sunil Mohan Adapa
fb8ac3b748
infinoted: Minor updates to action
- No need to have /etc/default/infinoted file.  It is not used in the
  systemd service.

- Enable directory sync plugin so that plaing text files are always
  available on server.

- Enable automatic save every 60 seconds with autosave plugin.

- Enhanced logging by enabling logging plugin.

- Remove double quotes in system user name.
2017-01-18 10:36:36 +05:30
James Valleroy
cd12f5d2b3
infinoted: Add new module for collaborative editing 2017-01-18 10:35:06 +05:30
Swapnil Gupta
bb70c43923
jsxc: Add setup
Fix routes.
2017-01-09 11:50:35 -05:00
James Valleroy
85b87268b4
tor: Fix various issues related to plinth instance
- Remove extra newlines added to torrc.
- Remove comments added in random places to torrc.
- Enable tor instance during setup.
- Fix restarts to use tor instance.
- Revert change to augeas lens to attempt handling +.
- Add support for hyphens in values to augeas lens.
- Increment module version so setup can run again.
2017-01-08 15:36:59 -05:00
mridulnagpal
658e52f6cd
tor: Remove +SocksPort line from instance torrc
Not supported by augeas tor lens.
2017-01-08 14:55:42 -05:00
mridulnagpal
7afd5dd32d
tor: Disable tor service (replaced by tor@plinth) 2017-01-08 14:55:40 -05:00
mridulnagpal
fdac901181
tor: Run tor-instance-create during setup 2017-01-08 14:55:37 -05:00
mridulnagpal
9f2521ce76
tor: Use plinth instance 2017-01-08 14:55:31 -05:00
James Valleroy
8f8d0e8901
bind: Minor fixes and style updates 2017-01-06 18:44:44 -05:00
mridulnagpal
d4b0809db0
bind: Replace config in setup 2017-01-06 18:17:29 -05:00
mridulnagpal
e0abdbd0e9
bind: Add validator 2017-01-06 18:17:27 -05:00
mridulnagpal
0312c41415
bind: Added DNS servers setting 2017-01-06 18:17:25 -05:00
mridulnagpal
d986d58250
bind: Add enable DNSSEC 2017-01-06 18:17:22 -05:00
mridulnagpal
8c0d8e9db2
bind: forwarding works fine now 2017-01-06 18:17:19 -05:00
mridulnagpal
95265426a9
bind: Move setup to action script 2017-01-06 18:17:17 -05:00
mridulnagpal
aded0f6be0
bind: Remove icon 2017-01-06 18:17:14 -05:00
mridulnagpal
4a73cbcf3c
bind: Run setup 2017-01-06 18:17:11 -05:00
mridulnagpal
da408d3381
bind: Add basic config 2017-01-06 18:17:06 -05:00
James Valleroy
533118c7f5
Refactor minetest server config
Only load augeas once to read the config.
2016-12-23 10:49:27 -05:00
mridulnagpal
7361f870b7
corrected script 2016-12-23 10:49:24 -05:00
mridulnagpal
df662e6899
form added for minetest 2016-12-23 10:49:22 -05:00
mridulnagpal
7c8b1235e7
minetest updated 2016-12-23 10:49:19 -05:00
mridulnagpal
a950e159a8
minetest config file updated 2016-12-23 10:49:16 -05:00
mridulnagpal
e0be8094aa
minetest update 2016-12-23 10:49:11 -05:00
Sunil Mohan Adapa
6bacd6bb04
config: Minor indentation fixes 2016-11-15 19:47:21 -05:00
James Valleroy
d220fa946a
Reverse logic for clearing domain name 2016-11-06 14:05:32 -05:00
mridulnagpal
4def7dfa7f
Handle clearing of domain name 2016-11-06 13:59:26 -05:00
Sunil Mohan Adapa
4db5a35ce0
repro: Open up RTP ports
- RTP ports used for voice and video communication can span a wide range
  of ports.  Some servers seem to restrict the range.  However, repro
  does not seem to do that.  So, open up the full range.
2016-10-01 08:19:57 -04:00
Sunil Mohan Adapa
305cc3218d
xmpp: Replace jwchat with jsxc
- Update action to not configure jwchat anymore.

- Update action to not disable jwchat apache configuration.  Since the
  package is no longer installed, this could cause failures.

- Update action to no refer to jwchat in comments.

- Update jwchat-plinth Apache configuration to not include jwchat
  anymore.  Keep this file name for now instead of renaming it to
  jsxc-plinth as this would introduce additional complexity with little
  benefit.

- Install package libjs-jsxc instead of jwchat during xmpp setup.

- Create jsxc front page shortcut instead of for jwchat.

- Perform diagnostics on /http-bind/ URL needed for jwchat instead of
  /jwchat.

- Update links that launch XMPP web client.
2016-09-19 19:51:26 -04:00
Daniel Steglich
8608bf6f07
dynamicdns: Fix permissions for all /etc files
The file which contains the credentials should not be readable for
"others".
2016-09-18 16:51:31 +05:30
Daniel Steglich
367b29c50f
dynamicdns: Fix file creation with update URL
The wget command to push the current IP via update URL will download the
update URL document without deleting the HTML document afterwards. This
will cause the script to flood "/root/" folder.
2016-09-07 22:14:57 +05:30
James Valleroy
ae0bd62b1e
monkeysphere: Use raw string for re match
Update changelog.
2016-09-02 14:40:28 -04:00
Sunil Mohan Adapa
3454abdc43
monkeysphere: Allow non-root cancel of publishing
Implement killing the publish process from within the action.  Don't let
the killing be too generic to avoid potential security issues.  Kill
process only if it appears as expected.
2016-09-02 12:00:08 -04:00
Sunil Mohan Adapa
4f9b271824
monkeysphere: Make sure show keys output is robust 2016-09-02 11:59:58 -04:00
Sunil Mohan Adapa
9b89fac9e1
monkeysphere: Handle new format of uids in output
Older format was:
uid ssh://host

Newer format is:
uid [ something] ssh://host

I believe this change happened due to migration from gpg to gpg2. Adopt
our code to handle both cases.
2016-09-02 11:59:55 -04:00
Sunil Mohan Adapa
b49a03f70b
monkeysphere: Adopt to using SHA256 fingerprints
Monkeysphere was using MD5 fingerprints (without the 'MD5:' prefix).
They seem to have switched to 'SHA256' recently and started prepending
the hash with the string 'SHA256:'.  Make the module work with this
change and hopefully for future hash algorithm fixes.
2016-09-02 11:59:30 -04:00
James Valleroy
dace07cdcb
xmpp: Don't disable starttls
Fix error introduced in edecd74ccf6cc98ec0962165e20f24ba0201ee91.
2016-09-02 20:27:12 +05:30
Sunil Mohan Adapa
d2800ab6ce
xmpp: Fix hacky quoted strings in ejabberd config
- Use a parser generated data type exposed by ruamel.yaml library to get
  the necessary double-quoted strings that we want in the output file.

- Simplify reading and writing to a YAML file.

- Fix incorrect dependency of ruamel.yaml Debian package.  The correct
  one is python3-ruamel.yaml.
2016-08-28 15:07:00 +05:30
James Valleroy
edecd74ccf
xmpp: Use ruamel.yaml to modify ejabberd config 2016-08-28 09:24:03 +05:30
Sunil Mohan Adapa
d9197111d8
users: Flush nscd cache after user operations
nscd monitors files in /etc and invalidates the cache automatically when
they change.  However, for other mechanisms it recommends issuing a
manual flush in its manual page.  Flush nscd passwd and group database
caches after all user operations (not just rename operation, just to be
sure).
2016-08-27 18:02:46 -04:00
Sunil Mohan Adapa
7025cf099e
letsencrypt: Fix spelling (Dietmar) 2016-08-26 21:52:01 -04:00
Sunil Mohan Adapa
7b68dd55f2
upgrades: Run status operations as non-root
Current check whether the package manager is busy and getting the
unattended upgrades log requires root.  This will not allow Plinth to
run as non-root.  Fix this by moving the operations to actions script.
2016-08-16 18:51:37 -04:00
Sunil Mohan Adapa
afdea208ec
transmission: Read configuration as super user
Due to permission restrictions on the configuration file (due to stored
password), it is not possible to read it as plinth user.  Read it using
sudo instead.
2016-08-16 18:39:38 -04:00