Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[pull] main from hestiacp:main #504

Open
wants to merge 1,398 commits into
base: main
Choose a base branch
from
Open

[pull] main from hestiacp:main #504

wants to merge 1,398 commits into from

Conversation

pull[bot]
Copy link

@pull pull bot commented Nov 11, 2022

See Commits and Changes for more details.


Created by pull[bot]

Can you help keep this open source service alive? 💖 Please sponsor : )

AlecRust and others added 28 commits July 18, 2024 19:25
* Update CHANGELOG.md

* Update CHANGELOG.md

* Update CHANGELOG.md

---------

Co-authored-by: Jaap Marcus <[email protected]>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
* Minor enhancements to installer

* Run format

* Apply changes to upgrade script

---------

Co-authored-by: Jaap Marcus <[email protected]>
* Bugfix: Initial Node.js setup

* Cleanup tmp directory after app install

* Streamline Node.js installation when needed

* Run NPM run format

---------

Co-authored-by: Jaap Marcus <[email protected]>
* Bugfix: Node.js installation overwriting log

* Sync PHP packages for MultiPHP with default

* Use version variable for Node.js

* Remove quota package when service removed

* Remove quota package when service removed

* Improve checking whether Apache config exists

* Fix typos
…ick-install-app (#4475)

* Update BaseSetup.php

Fixes ‘Required PHP version is not supported’ message when using wordpress cli installer.

* Run NPM format

---------

Co-authored-by: Jaap Marcus <[email protected]>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
* feat: update os check to support Ubuntu 24.04
* check for systemd-timesyncd
* Add max connections per host for Exim, increase global limit

* Add xferlog to logrotate

* VSFTPD TLS 1.2 ciphers only

* Run NPM Format

* Apply changes to upgrade script

---------

Co-authored-by: Jaap Marcus <[email protected]>
Resolved an issue with calculating available disk space when mounting a backup filesystem on S3 storage, which caused integer overflow due to values exceeding the 32-bit integer limit.

This change addresses the problem of receiving a negative value (-16MB) due to integer overflow when handling large available space values from S3 storage. The use of bc ensures accurate calculations for large numbers, preventing overflow issues.
https://hestiacp.com/docs/server-administration/web-templates.html#available-variables
In table "Available variables" there is an incorrect variable:

%proxy_port_ssl%
it must be %proxy_ssl_port%
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
* Fix translation bug in edit / add package
* Update hestiacp.pot
* Update locales
* Use .mo instead .po files
…#4494)

* Fix #4491 Set correct permisions when copying over skeleton
* Check if this potensially works

* Remove duplicated code

* Source backup.sh
* Block . in new user name

* Fix test
andreydruz and others added 30 commits February 7, 2025 16:34
* Changed ubuntu supported version

* Update getting-started.md

* prettier changes

---------

Co-authored-by: Jaap Marcus <[email protected]>
Added v-quick-install-app CLI commands
To facilitate easier testing
* Make jail work with sftp by using the binary sftp-server

The internal-sftp server doesn't start a new process. This makes it
improssible jail the sftp process since it's running inside sshd.

By changing to the binary sftp-server the process is run inside the
bubblewrap jailbash container.

* Hide /usr/local/hestia and /usr/share in bubblewrap container
…-restart-job (#4818)

Replaced "echo" command with equivalent "sed" command as the "echo" resulted in "Permission denied".
…-letsencrypt-job (#4819)

Replaced "echo" command with equivalent "sed" command as the "echo" resulted in "Permission denied". From what I can tell, this file is no longer used anywhere, but it has previously been updated to use the new "hestiaweb" user, so for completeness, I believe it should be updated to correctly update the crontab file as well, instead of erroring with "Permission denied".
…te-dns-host (#4817)

Replaced "echo" command with equivalent "sed" command as the "echo" resulted in "Permission denied", preventing automatic updates from being resumed/enabled. Also observed that the "echo" command would have overwritten the entire crontab file anyway (used > where it should have used >>).
…-hestia-autoupdate (#4816)

Replaced "echo" command with equivalent "sed" command as the "echo" resulted in "Permission denied", preventing automatic updates from being resumed/enabled. Also observed that the "echo" command would have overwritten the entire crontab file anyway (used > where it should have used >>).
Added the command-line utility "at", which is used in several scripts including:

bin/v-dump-site
bin/v-dump-database
bin/v-add-user-sftp-key
bin/v-add-database-temp-user
bin/v-download-backup
bin/v-generate-ssl-cert

Not sure why it was missing but if it's not installed these scripts leave files and keys lying around and add vulnerability. "at" is persistent and will remember tasks even after a server reboot.
Added the command-line utility "at", which is used in several scripts including:

bin/v-dump-site
bin/v-dump-database
bin/v-add-user-sftp-key
bin/v-add-database-temp-user
bin/v-download-backup
bin/v-generate-ssl-cert

Not sure why it was missing but if it's not installed these scripts leave files and keys lying around and add vulnerability. "at" is persistent and will remember tasks even after a server reboot.
* Update configuration.php

Fix disparity between using File Manager as a user with SSH access enabled and with SSH access disabled. When disabled, user was presented with a "home" directory, and when enabled, user was taken straight into their "home/$username" directory. I think this is because of historical code that worked prior to the new sftp jail system, but now seems to result in this disparity. I don't see why any user, with or without SSH or SFTP access, would need to see outside of their own "home/$username" directory via the File Manager?

* Force update Filemanger conf

---------

Co-authored-by: Jaap Marcus <[email protected]>
* Remove duplicate echo

* Mute output
Check was incorrect
Bumps [esbuild](https://github.com/evanw/esbuild) from 0.24.2 to 0.25.0.
- [Release notes](https://github.com/evanw/esbuild/releases)
- [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG-2024.md)
- [Commits](evanw/esbuild@v0.24.2...v0.25.0)

---
updated-dependencies:
- dependency-name: esbuild
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* Upgrade info

* Update info regariding rest api

* Remove duplicate echo

* Mute output

* Make some more minor changes

* Update comment v-quick-install-app

* FIx error

* Check if it becomes more reabable

* Change order

* Include all missing commands

* Fix formatting error

* Update CLI info
* FIx bug in v-add-web-domain-ssl

* Change other locations

* Use single quotes
* Move v-update-letsencrypt-ssl cron to  /var/spool/cron

Instead /etc/cron.d/hestiaweb

* Use correct file

* Make suggested changes

* Update 1.9.3.sh

Make some extra changes
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.