437 Commits

Author SHA1 Message Date
abilashr
81fde34254
Rename Disks and Snapshots in Configuration tab
- Rename Disks to Storage
- Rename Snapshot to Storage Snapshots

Reviewed-by: Joseph Nuthalapati <njoseph@thoughtworks.com>
2017-09-27 09:39:34 +05:30
Sunil Mohan Adapa
602ea6cf16
apache: New module to manage Apache configuration
Signed-off-by: Sunil Mohan Adapa <sunil@medhas.org>
Reviewed-by: James Valleroy <jvalleroy@mailbox.org>
2017-09-01 20:04:07 -04:00
Sunil Mohan Adapa
07c062aef3
ssh: New application to manage SSH server
Signed-off-by: Sunil Mohan Adapa <sunil@medhas.org>
Reviewed-by: James Valleroy <jvalleroy@mailbox.org>
2017-09-01 20:03:58 -04:00
Sunil Mohan Adapa
2e55acb465
firewall: Move remaining setup steps to Plinth
There is no need to restart firewalld after the setup steps run.

Signed-off-by: Sunil Mohan Adapa <sunil@medhas.org>
Reviewed-by: James Valleroy <jvalleroy@mailbox.org>
2017-09-01 20:03:51 -04:00
Sunil Mohan Adapa
1f0a878b2e
Minor styling fixes
Signed-off-by: Sunil Mohan Adapa <sunil@medhas.org>
2017-08-31 14:34:23 +05:30
Joseph Nuthalpati
32d17e6c93
sso: Safety check to make sure auth_pubtkt is enabled
Signed-off-by: Joseph Nuthalpati <njoseph@thoughtworks.com>
Reviewed-by: Sunil Mohan Adapa <sunil@medhas.org>
2017-08-31 14:34:11 +05:30
Sunil Mohan Adapa
e558cdc1e4
users: Keep safety check to start slapd during setup
Signed-off-by: Sunil Mohan Adapa <sunil@medhas.org>
2017-08-29 17:09:10 +05:30
James Valleroy
b19a9f972c
users: Move ldap structure config into normal setup
Signed-off-by: James Valleroy <jvalleroy@mailbox.org>
Reviewed-by: Sunil Mohan Adapa <sunil@medhas.org>
2017-08-29 17:08:09 +05:30
Joseph Nuthalpati
f9166f8e98
sso: Upgrade crypto
- using latest version of lib-apache2-mod-authpubtkt
- upgraded keys to 4096-bit RSA
- upgraded hashing algorithm to sha512

Plinth needs dependency on libapache2-mod-auth-pubtkt >= 0.11

Signed-off-by: Joseph Nuthalpati <njoseph@thoughtworks.com>
Reviewed-by: Sunil Mohan Adapa <sunil@medhas.org>
2017-08-28 16:07:27 +05:30
James Valleroy
9fabb7b903
diaspora: Don't enable service until domain name is set
- This avoids an issue where it would try to enable the apache conf
possibly before it is generated.

- Added an explicit enable statement since it was missing.

Reviewed-by: Joseph Nuthalpati <njoseph@thoughtworks.com>
2017-08-10 11:47:45 +05:30
Joseph Nuthalpati
4abb7cd885
Diaspora: Checkbox to enable or disable user registrations 2017-07-29 12:40:44 -04:00
Joseph Nuthalpati
f3860b197a
Diaspora: Generate apache configuration at setup
- Deleted static configuration file
- Generating configuration with the domain name set.
2017-07-29 10:45:57 -04:00
Joseph Nuthalpati
d1b8d8e811
Diaspora: Make config changes using augeas 2017-07-29 10:45:52 -04:00
Joseph Nuthalpati
b109507e0a
Diaspora: Update domain name in Apache config 2017-07-29 10:45:30 -04:00
nsaikiran
a8a5da996e
[#759] Add fail2ban to Plinth UI
Run sudo-required action via actions.superuser_run

Actions related to services those require `sudo` permissions need to
be executed via actions.superuser_run.

NOTE:
If plinth service is started via `sudo ./run --debug` (in dev mode)
all actions will be executed silently. But plinth in user machines
won't be executed with sudo permissions.
2017-07-29 09:42:31 -04:00
James Valleroy
3ea5868ec1
pylint and spelling fixes 2017-07-19 21:47:07 -04:00
Johannes Keyser
1069f84154
letsencrypt: Add option to let Plinth "manage" certbot's renewal hooks
- add action commands for managing and running hooks

- adding template, view and url for managing and running hooks

- disable Plinth hook management on domain change
2017-07-19 21:47:00 -04:00
Johannes Keyser
1a39ec0267
letsencrypt: add option to delete certificates 2017-07-06 22:30:10 -04:00
Johannes Keyser
57e96b298c
letsencrypt: show more info on cert validity status 2017-07-06 22:30:01 -04:00
Johannes Keyser
320b993c4d
letsencrypt: directly call certbot in action script 2017-06-24 11:34:33 -04:00
Joseph Nuthalpati
5ad180fcc9
Add Tahoe-LAFS module
- Created basic plinth app which starts an introducer and a storage
  node on the FreedomBox.
- Prompt user to set a domain name before creating Tahoe-LAFS nodes.
- Support adding and removing of introducers to the storage node.
- Serve Tahoe-LAFS from a different port.
- Start all nodes and introducers at system startup.
- Add utility class YAMLFile with test cases.
2017-06-10 09:38:57 -04:00
James Valleroy
70c06ec9c1
sso: Add comments to mark needed crypto upgrades. 2017-06-03 10:33:11 -04:00
Joseph Nuthalpati
995365f3df
Add SSO using auth_pubtkt for 3 web apps
- Install mod_auth_pubtkt and generate public/private key-pair.

- Redirect user to login page if no cookie is presented.

- Add check for authenticated user for login page.

- Temporarily switched to DSA because of a bug in mod_auth_pubtkt
  which causes it to accept only DSA and not RSA. Also had to use SHA1
  instead of SHA256.

- Enabled SSO for Syncthing, Repro and TT-RSS.

- Using tokens to authorize by user groups.

- Generate keys during first boot.
2017-06-03 10:29:42 -04:00
Johannes Keyser
ed0ab1ab64
ejabberd: add option to enable/disable Message Archive Management 2017-05-19 20:42:52 -04:00
Joseph Nuthalpati
3a6dc03ee9
Diaspora: Checking whether domain name is setup before certain actions 2017-05-06 07:25:47 -04:00
Joseph Nuthalpati
5ffcf42278
diaspora: Templates to setup domain name 2017-05-06 07:25:42 -04:00
Joseph Nuthalpati
742fe48a29
diaspora: Disabled SSL
Created a custom command in Plinth to disable ssl for the diaspora pod
on the freedombox.
2017-05-06 07:25:37 -04:00
Joseph Nuthalpati
d269a0a645
diaspora: Completed debconf configuration for Diaspora. 2017-05-06 07:25:34 -04:00
Joseph Nuthalpati
01e97e7369
diaspora: Initial setup
Completed initial setup of diaspora on Plinth. Default configuration pending.
2017-05-06 07:25:27 -04:00
Johannes Keyser
6b5698f673
datetime: Rewrote action timezone-change in Python
Reviewed-by: Sunil Mohan Adapa <sunil@medhas.org>
2017-04-30 09:23:59 +05:30
morrme
ad3420823d
owncloud: Remove module (Closes: #818)
It is believed that ownCloud is unlikely to return to Debian in near future.
Removing module to ease maintenance.

Reviewed-by: Sunil Mohan Adapa <sunil@medhas.org>
2017-04-25 18:06:56 +05:30
Johannes Keyser
76a63d102b
setup: Disable install/upgrade when dpkg/apt is running
Show a warning message that a package manager is running. This prevents users
from getting an installation error just because another installation/upgrade is
running.

Closes: #625.
2017-04-19 16:50:00 +05:30
Sunil Mohan Adapa
6a91945219
actions: Make subparsers mandatory for service action too
Signed-off-by: Sunil Mohan Adapa <sunil@medhas.org>
2017-04-10 11:54:32 +05:30
Johannes Keyser
634afef1c9
actions: Make subparsers mandatory, fixes calls without arguments
Signed-off-by: Sunil Mohan Adapa <sunil@medhas.org>
2017-04-10 11:54:23 +05:30
Sunil Mohan Adapa
c46cba8134
disks: Workaround issue in parted during resize
Currently, if parted is given --script option it still asks for
confirmation during resize when the partition is mounted.  Implement a
workaround to the problem by first trying the proper way and then
trying a workaround described in
https://bugs.launchpad.net/ubuntu/+source/parted/+bug/1270203

Signed-off-by: Sunil Mohan Adapa <sunil@medhas.org>
2017-04-08 14:51:39 -04:00
Sunil Mohan Adapa
93c151ab2b
matrixsynapse: Minor review changes
- Change the configuration minimally and more reliably.

- Rename the Apache configuration and add comments.

- Rename firewalld description file.

- Enable the matrixsynapse module by default.

- Improve category, description texts and warnings.

- Remove unused variable.

- Add missing docstrings.

- Minor styling updates.

- Fix i18n in templates.

- Fix showing description in main service view.

Signed-off-by: Sunil Mohan Adapa <sunil@medhas.org>
2017-04-05 12:58:45 +05:30
Rahul De
8b4cacd682
matrixsynapse: Add firewall rules to open port 8448
Signed-off-by: Sunil Mohan Adapa <sunil@medhas.org>
2017-04-05 12:58:03 +05:30
Rahul De
044df8352d
matrixsynapse: Add post install YAML edits
Signed-off-by: Sunil Mohan Adapa <sunil@medhas.org>
2017-04-05 12:57:46 +05:30
Rahul De
20ecdbf088
matrixsynapse: Add new plinth module
Signed-off-by: Sunil Mohan Adapa <sunil@medhas.org>
2017-04-05 12:55:51 +05:30
Sunil Mohan Adapa
dc0f3151b1
openvpn: Set unique subject property on each cert generation
Just to be sure of the ability to generate the certificate even on
modifications.
2017-03-29 21:49:50 +05:30
Hemanth Kumar Veeranki
04cadbc82f
openvpn: Prevent failures when regenerating user certificate
Set unique_subject attribute to no in index.txt.attr file.  This
allows regenerating a certificate for a user.

Signed-off-by: Hemanth Kumar Veeranki <hemanthveeranki@gmail.com>
2017-03-29 21:33:58 +05:30
Sunil Mohan Adapa
f9bd2542a7
openvpn: Apply empty file check to private key also
When downloading user's profile, if user's private key is empty,
regenerate user's key.

Minor styling fixes too.
2017-03-27 21:58:32 +05:30
Hemanth Kumar Veeranki
fcd2499092
openvpn: When user certificate is empty, regenerate it
Signed-off-by: Hemanth Kumar Veeranki <hemanthveeranki@gmail.com>
2017-03-27 21:57:56 +05:30
Sunil Mohan Adapa
4a3cf220c8
syncthing: Fixes issues with enabling and setup
- On enable, don't just run syncthing, actually enable it.

- Make setup step idempotent. Run setup during enable as it is
  idempotent.

- Perform user/group creation properly during setup.

- Provide better description.

- Modify the application label and icon for accuracy of the service
  provided.

- Fix problem with showing service in firewall.
2017-03-23 15:09:46 +05:30
Joseph Nuthalpati
a5147cfe16
syncthing: Run service as system user 'syncthing'
- Enabled Apache LDAP authentication for Syncthing.
2017-03-23 15:07:25 +05:30
Joseph Nuthalpati
53645deebf
syncthing: Made it a systemd service 2017-03-23 15:06:52 +05:30
Joseph Nuthalpati
2e28408f4b
syncthing: initial attempt at integrating Syncthing 2017-03-23 15:01:13 +05:30
Sunil Mohan Adapa
7f948d1111
tor: Simplify upstream bridges action code
- There is no need for separate subcommand as arguments can be passed in
  even when they have special characters such as \n in them.

- Enable obfs3 and scramblesuit transports also.  Since it is easy to
  support them and bridges site still provides them.  scramblesuit is
  also a nice alternative to obfs4.

- Minor refactoring/fixes.
2017-01-29 11:21:03 +05:30
James Valleroy
31f95cfb12
tor: Support obfs4 for upstream bridges
Refactor augeas lens for readability.
2017-01-29 11:19:34 +05:30
James Valleroy
5483d30151
tor: Don't allow relay to be enabled while using upstream bridges 2017-01-29 11:19:01 +05:30