Janos Muzsi
2c00f982d8
Change redirect host from main domain name to requested domain name
2016-11-24 22:55:57 +01:00
Michael Kaufmann (d00p)
9838ff4da5
fix hsts settings for lighttpd, fixes #1677
...
Signed-off-by: Michael Kaufmann (d00p) <d00p@froxlor.org >
2016-11-22 08:16:35 +01:00
Michael Kaufmann (d00p)
43ca4a28e4
add acme.conf alias also to froxlor vhost in case the acme-challenge path is not within the froxlor-docroot; fix empty redirect-code, fixes #1674
...
Signed-off-by: Michael Kaufmann (d00p) <d00p@froxlor.org >
2016-11-21 08:19:33 +01:00
Janos Muzsi
5f899a5510
Add support for http2 option to nginx
2016-11-17 22:50:11 +01:00
Michael Kaufmann (d00p)
432645431c
allow CIDR values in AXFR setting, fixes #1672
...
Signed-off-by: Michael Kaufmann (d00p) <d00p@froxlor.org >
2016-11-15 08:03:34 +01:00
Michael Kaufmann (d00p)
d6b56262ce
fix unnecessary idn encoding
...
Signed-off-by: Michael Kaufmann (d00p) <d00p@froxlor.org >
2016-11-04 18:28:32 +01:00
Michael Kaufmann (d00p)
60c1babd93
fix wrong protocol name for apache
...
Signed-off-by: Michael Kaufmann (d00p) <d00p@froxlor.org >
2016-10-31 20:44:31 +01:00
Michael Kaufmann (d00p)
76c200a56c
disable tlsv1.1 for ssl settings
...
Signed-off-by: Michael Kaufmann (d00p) <d00p@froxlor.org >
2016-10-31 11:17:56 +01:00
Michael Kaufmann (d00p)
462fca7328
do not add www.[froxlorfqdn] to SAN list of certificate request for Let's Encrypt froxlor-vhost certificate; fixes #1662
...
Signed-off-by: Michael Kaufmann (d00p) <d00p@froxlor.org >
2016-10-28 10:57:51 +02:00
Michael Kaufmann (d00p)
884b2ed913
various fixes for idn converted domains + fix undefined index alias when editing a domain with alias
...
Signed-off-by: Michael Kaufmann (d00p) <d00p@froxlor.org >
2016-10-25 12:24:57 +02:00
Michael Kaufmann (d00p)
af77453bfe
do not generate ssl-vhost-container without a certificate
...
Signed-off-by: Michael Kaufmann (d00p) <d00p@froxlor.org >
2016-10-20 09:23:44 +02:00
Michael Kaufmann (d00p)
ce31a0b3fd
enable custom redirect codes also for lighttpd
...
Signed-off-by: Michael Kaufmann (d00p) <d00p@froxlor.org >
2016-10-13 10:16:17 +02:00
Michael Kaufmann (d00p)
fc2ae594cb
enable custom redirect codes also for nginx
...
Signed-off-by: Michael Kaufmann (d00p) <d00p@froxlor.org >
2016-10-13 09:51:57 +02:00
Michael Kaufmann (d00p)
91c2d4efbe
do not redirect when requesting let's encrypt certificates in nginx (same as we do in apache)
...
Signed-off-by: Michael Kaufmann (d00p) <d00p@froxlor.org >
2016-10-11 07:49:52 +02:00
Florian Aders
75d8d0b397
Fix sslsettings in hsts for nginx
2016-10-07 19:08:32 +02:00
Michael Kaufmann (d00p)
4a3e02c1f0
add HSTS for domains (admin-side) and froxlor-vhost; fixes #1660
...
Signed-off-by: Michael Kaufmann (d00p) <d00p@froxlor.org >
2016-10-07 11:01:45 +02:00
Michael Kaufmann (d00p)
9799e05ce4
idna convert the whole URI for uri's in docroot as redirect, fixes #1654
...
Signed-off-by: Michael Kaufmann (d00p) <d00p@froxlor.org >
2016-09-22 07:46:50 +02:00
Michael Kaufmann (d00p)
6197a97dc1
Add settings to speficy smtp auth data for mails sent by froxlor
...
Signed-off-by: Michael Kaufmann (d00p) <d00p@froxlor.org >
2016-09-20 09:41:36 +02:00
Michael Kaufmann (d00p)
58835ef81f
Warning: Non-standard capitalization of includeSubDomains
...
Header contains the token . The recommended capitalization is .
Signed-off-by: Michael Kaufmann (d00p) <d00p@froxlor.org >
2016-09-19 10:03:44 +02:00
Daniel Reichelt
ec474e2b4c
fix "Could not find class 'System'" exceptions
2016-09-16 18:53:29 +02:00
Daniel Reichelt
84ee5a2192
cron/apache: remove echo'ed messages
...
they already get logged
2016-09-16 18:53:28 +02:00
Daniel Reichelt
41e769d681
cron/nginx: remove ssl_client_certificate
...
Adding the CA certificate to an nginx vhost via ssl_client_certificate is
outright wrong. Moreover, the CA certificate data is already written to
the certificate file itself (class.DomainSSL.php:83-85).
fixes #1650
2016-09-16 07:51:18 +02:00
Daniel Reichelt
d8b6d87ade
cron/nginx: remove echo'ed messages
...
they already get logged
2016-09-16 07:51:17 +02:00
Daniel Reichelt
c6ba9df18a
fix variable identifier in HttpConfigBase::getMyPath()
2016-09-13 12:01:09 +02:00
Michael Kaufmann (d00p)
4229d8dda4
make path to acme.conf global alias file customizable
...
Signed-off-by: Michael Kaufmann (d00p) <d00p@froxlor.org >
2016-09-12 11:49:07 +02:00
Michael Kaufmann (d00p)
b8c2047379
try to implement ssl-redirect for froxlor-vhost; combine various settings that are froxlor-vhost related into its own category, fixes #1480
...
Signed-off-by: Michael Kaufmann (d00p) <d00p@froxlor.org >
2016-09-11 17:48:08 +02:00
Michael Kaufmann
a21d19bdcd
Merge pull request #383 from nachtgeist/le-1652
...
LE: don't re-use old CSRs, always generate new ones; LE: change log level to LOG_INFO; fixes #1652
2016-09-11 08:13:03 +02:00
Daniel Reichelt
d56afda274
fix "undefined index" warnings
...
PHP Notice: Undefined index: parentdomainid in
[…]/froxlor/lib/classes/webserver/class.DomainSSL.php on line 49
2016-09-11 02:27:43 +02:00
Daniel Reichelt
b8bfd7ff4c
LE: don't re-use old CSRs, always generate new ones
...
fixes #1652
2016-09-11 00:51:42 +02:00
Daniel Reichelt
d1a3defef0
LE: change log level to LOG_INFO
2016-09-11 00:51:41 +02:00
Michael Kaufmann (d00p)
08f36243e9
only renew froxlor.panel LE cert if required
...
Signed-off-by: Michael Kaufmann (d00p) <d00p@froxlor.org >
2016-09-08 12:28:43 +02:00
Michael Kaufmann (d00p)
e4887362ec
added let's encrypt for froxlor vhost - untested for now, testers are welcome
...
Signed-off-by: Michael Kaufmann (d00p) <d00p@froxlor.org >
2016-09-05 17:01:10 +02:00
Michael Kaufmann (d00p)
a840905166
set version specific user-agent in lescript like we do in ajax stuff
...
Signed-off-by: Michael Kaufmann (d00p) <d00p@froxlor.org >
2016-08-28 14:07:13 +02:00
Michael Kaufmann (d00p)
2f6e34d878
do not ssl-redirect when let's encrypt tries to validate the domain, fixes #1649
...
Signed-off-by: Michael Kaufmann (d00p) <d00p@froxlor.org >
2016-08-25 22:08:32 +02:00
Michael Kaufmann (d00p)
2444158bbb
do not truncate pdns tables, instead just remove entries that are related to froxlor-managed domains; this allows the admin to create custom zones/records in pdns if needed/wanted
...
Signed-off-by: Michael Kaufmann (d00p) <d00p@froxlor.org >
2016-08-12 09:45:26 +02:00
Michael Kaufmann (d00p)
003005f295
keep compatibility and do not generate pdns records/zone when custom zonefile is set
...
Signed-off-by: Michael Kaufmann (d00p) <d00p@froxlor.org >
2016-08-07 17:56:03 +02:00
Michael Kaufmann (d00p)
731427255e
fix call to undefined method pdns::_generateDomainConfig() in PowerDNS cronjob when using custom zone-file in a domain
...
Signed-off-by: Michael Kaufmann (d00p) <d00p@froxlor.org >
2016-08-07 17:22:28 +02:00
Dominic
e31c828f35
Fixed formatting
...
Nothing added, just a formatting fix
2016-08-06 06:31:15 +02:00
Michael Kaufmann (d00p)
c3753478f2
add newline after custom options to avoid possible syntax error in apache-config, thx to J-BBB for testing
...
Signed-off-by: Michael Kaufmann (d00p) <d00p@froxlor.org >
2016-07-14 09:14:37 +02:00
Michael Kaufmann (d00p)
3d2cb879b0
actually use the new setting for custom directory options file content, refs #1638
...
Signed-off-by: Michael Kaufmann (d00p) <d00p@froxlor.org >
2016-07-14 08:36:14 +02:00
Michael Kaufmann (d00p)
1c369e5503
add possibility to disable web or traffic cron by setting the max-percentage value to 0, fixes #1639
...
Signed-off-by: Michael Kaufmann (d00p) <d00p@froxlor.org >
2016-07-14 07:58:56 +02:00
Michael Kaufmann (d00p)
83f40401be
fix change_date for PDNS records
...
Signed-off-by: Michael Kaufmann (d00p) <d00p@froxlor.org >
2016-07-11 09:15:21 +02:00
Michael Kaufmann (d00p)
7ec777c9dd
put index back in location-context; try_files not really necessary if not using PHP, also eases use of proxy_pass users; thx to karstenk
...
Signed-off-by: Michael Kaufmann (d00p) <d00p@froxlor.org >
2016-06-20 09:55:27 +02:00
Michael Kaufmann (d00p)
5e9e2996d7
avoid php-5.6 operator
...
Signed-off-by: Michael Kaufmann (d00p) <d00p@froxlor.org >
2016-06-19 22:08:17 +02:00
Daniel Reichelt
b4f90730cc
unify "reloading" the dns daemon
2016-06-18 02:33:03 +02:00
Daniel Reichelt
50317da185
dns: no separate zonefiles for ismainbutsubto domains 3/3
...
replace iteration over $domains array by recursive walkDomainList()
2016-06-18 02:33:02 +02:00
Daniel Reichelt
631e36f4d5
dns: no separate zonefiles for ismainbutsubto domains 2/3
...
rewrite getDomainList() to contain parent-relations
2016-06-18 01:47:16 +02:00
Daniel Reichelt
a400fc9c65
dns: no separate zonefiles for ismainbutsubto domains 1/3
...
move log message
2016-06-18 01:47:12 +02:00
Daniel Reichelt
bd36145ad6
cron_traffic: replace echo by log message
2016-06-15 16:15:34 +02:00
Michael Kaufmann (d00p)
88ccf5b869
don't generate unnecessary php-related vhost-entries when php is disabled, thx to karstenk
...
Signed-off-by: Michael Kaufmann (d00p) <d00p@froxlor.org >
2016-06-14 07:29:38 +02:00