Mart124
9bb6476f53
Typo ( #613 )
...
* Update logrotate.sh
* Update backup-db.sh
2019-11-25 10:36:06 -05:00
Mart124
8b5e37d349
Update .dockerignore ( #612 )
2019-11-25 10:08:14 -05:00
Kyle Spearrin
2cf8b88fbb
dont exec
2019-11-25 09:25:11 -05:00
Kyle Spearrin
980e19884d
exec gosu
2019-11-25 09:22:42 -05:00
Mart124
35a5dd95bb
DB backups without cron ( #608 )
...
* Update backup-db.sh
* Update entrypoint.sh
* Update Dockerfile
* Delete crontab
* Update backup-db.sh
* don't bother with log files
all is already in /var/opt/mssql/log/errorlog
* Use gosu
2019-11-25 08:35:52 -05:00
Mart124
47bda1e6d0
Rotate nginx logs ( #601 )
...
* Rotate nginx logs
* Create logrotate.sh
* Update Dockerfile
* Update entrypoint.sh
* Update Dockerfile
* Update logrotate.sh
* No reason to disable logrotate
* Update logrotate.sh
* Update entrypoint.sh
* typo
* Avoid useless output
* Use gosu
2019-11-25 08:34:47 -05:00
Mart124
6950dcae8b
Install tzdata package ( #606 )
2019-11-22 09:52:17 -05:00
Kyle Spearrin
8f3df46075
remove black hole for telemetry
2019-11-20 09:47:46 -05:00
Kyle Spearrin
fe3378b483
try internal network by default
2019-11-20 08:09:53 -05:00
Kyle Spearrin
c27b72e019
private network for some containers
2019-11-20 07:35:42 -05:00
Kyle Spearrin
63c3d5342c
undo admin host port header
2019-10-17 14:40:05 -04:00
Kyle Spearrin
0a7727dc27
port to host header for admin
2019-10-17 14:20:49 -04:00
Kyle Spearrin
dfeb2aad5c
no server port test
2019-10-17 14:04:22 -04:00
Kyle Spearrin
b040229933
add server_port to host proxy header
2019-10-17 13:30:41 -04:00
Mart124
6f91b693d9
Increase self-signed certs duration ( #570 )
2019-10-02 10:26:07 -04:00
Kyle Spearrin
c0bc5a0361
bitwarden update script without .sh suffix
2019-08-22 15:19:06 -04:00
Kyle Spearrin
5f4c7eb122
add q9 secondary dns resolver
2019-08-05 07:36:31 -04:00
h-town
d081d0fc4d
Revise hard-coded ssl resolver to Cloudflare & Quad9 ( #543 )
...
Google (terrible) and OpenDNS (questionable at best) are not ideal for privacy-minded users. Both Cloudflare DNS and Quad9 at least claim to drop logs, each of them have widely-reported response times, and they're sufficiently established with over a year of service.
2019-08-05 07:34:29 -04:00
Kyle Spearrin
8dabba984d
fix nginx healthcheck
2019-07-27 21:54:06 -04:00
Kyle Spearrin
0793cb6167
healthcheck for attachments server
2019-07-26 20:31:45 -04:00
Kyle Spearrin
310e0115d5
add port to health check
2019-07-26 14:24:39 -04:00
Kyle Spearrin
2ea244c723
healthcheck cmd
2019-07-26 14:04:45 -04:00
Kyle Spearrin
b7f3fa0087
try fixing curl install again
2019-07-26 13:21:46 -04:00
Kyle Spearrin
82a8249a69
fix curl error
2019-07-26 13:12:20 -04:00
Kyle Spearrin
d2bf308c10
fix sqlcmd path on healthcheck
2019-07-26 12:52:39 -04:00
Kyle Spearrin
bba0206bb7
alive check for nginx
2019-07-26 12:43:06 -04:00
Kyle Spearrin
29f0a2aa12
mssql healthcheck
2019-07-26 12:16:38 -04:00
Kyle Spearrin
a23e081397
update some libs
2019-07-23 16:58:40 -04:00
Kyle Spearrin
94188fa0b5
update to net core 2.2
2019-07-23 16:38:49 -04:00
Kyle Spearrin
3422df325b
HIBP api key in env variables
2019-07-22 21:24:04 -04:00
Kyle Spearrin
242e509b9d
set en-US as default current culture
2019-07-11 15:03:17 -04:00
Kyle Spearrin
f97539d558
build events container into docker deployment
2019-07-09 14:49:34 -04:00
Kyle Spearrin
35804e10cf
collection cipher query improvements
2019-05-28 23:55:47 -04:00
Kyle Spearrin
d34cde7579
group name fix
2019-05-15 22:38:52 -04:00
Kyle Spearrin
e6fc0f9548
real_ips uses this in template
2019-05-15 22:11:22 -04:00
Kyle Spearrin
6381634a92
update libs
2019-05-11 20:56:49 -04:00
Kyle Spearrin
33845d372f
bump dockerfile dep versions
2019-05-07 11:14:37 -04:00
Cédric Laubacher
afdf29da78
Update NGINX Dockerfile to latest stable version ( #490 )
2019-05-03 07:37:32 -04:00
Kyle Spearrin
b4148d3532
fix issues on cipher admin endpoints
2019-05-01 09:38:13 -04:00
Kyle Spearrin
044f21df29
indenting
2019-04-27 23:13:14 -04:00
Kyle Spearrin
b935b16cb8
more real_ip config values for nginx
2019-04-27 23:11:57 -04:00
Kyle Spearrin
d8204341a4
add semicolon
2019-04-26 12:44:44 -04:00
Kyle Spearrin
6dc2e1b328
real ips config
2019-04-26 12:26:54 -04:00
Kyle Spearrin
acfacf69a2
Revert "--with-http_realip_module"
...
This reverts commit f951304f11
.
2019-04-26 12:10:22 -04:00
Kyle Spearrin
f951304f11
--with-http_realip_module
2019-04-26 11:09:12 -04:00
Kyle Spearrin
bc94c36cfc
formatting
2019-04-14 22:46:11 -04:00
Robin van Boven
03bcce1e73
Support reading a file for the SA_PASSWORD for swarm security. ( #477 )
2019-04-14 22:41:59 -04:00
Kyle Spearrin
085c13f508
next step is just start
2019-03-25 16:24:16 -04:00
Kyle Spearrin
5da0edb412
include bit. namespace prefix
2019-03-25 15:59:12 -04:00
Kyle Spearrin
1bd4d39136
bypass log filter on migrator
2019-03-25 15:20:54 -04:00
Kyle Spearrin
b2045b92b4
update depends on
2019-03-25 14:48:06 -04:00
Kyle Spearrin
3a1e24976b
move migrator project to util
2019-03-25 13:23:50 -04:00
Kyle Spearrin
28884c3330
move migrations to migrator project
2019-03-25 13:21:05 -04:00
Kyle Spearrin
f7c6dcb067
depends on
2019-03-25 09:23:50 -04:00
Kyle Spearrin
ce9016acfb
log to console is not quiet
2019-03-25 09:03:30 -04:00
Kyle Spearrin
7724109caa
placeholders for random values
2019-03-15 11:19:52 -04:00
Kyle Spearrin
1adc6d04ed
db password for stub
2019-03-15 11:13:35 -04:00
Kyle Spearrin
ff163a2859
cleanup
2019-03-15 11:10:18 -04:00
Kyle Spearrin
0f7963f79c
stub install
2019-03-15 09:28:39 -04:00
Kyle Spearrin
b6f54324a5
quiet output for setup scripts
2019-03-12 10:26:14 -04:00
Kyle Spearrin
bae1884630
filter nulls from transaction gateway index
2019-03-08 16:57:14 -05:00
Kyle Spearrin
4bde147fc7
re-create UserCollectionDetails function
2019-03-08 07:56:25 -05:00
Kyle Spearrin
52e1ceace8
Revert "ignore xml comment warnings"
...
This reverts commit bca4f850a5
.
2019-03-07 22:57:24 -05:00
Kyle Spearrin
faf26ce84f
Revert "ignore xml comment warnings"
...
This reverts commit ec60be2f5d
.
2019-03-07 22:57:11 -05:00
Kyle Spearrin
ec60be2f5d
ignore xml comment warnings
2019-03-07 17:10:29 -05:00
Kyle Spearrin
bca4f850a5
ignore xml comment warnings
2019-03-07 17:09:29 -05:00
Kyle Spearrin
75f01a5774
collection externalId
2019-03-07 15:18:27 -05:00
Kyle Spearrin
00f3c476ae
apis for getting user details
2019-03-05 23:22:43 -05:00
Kyle Spearrin
c4ac86d4f4
db changes for org api
2019-03-01 23:44:45 -05:00
Kyle Spearrin
897d913e57
fix paths in motd
2019-02-21 14:12:35 -05:00
Kyle Spearrin
f180f080f9
fabric updates
2019-02-21 13:53:38 -05:00
Kyle Spearrin
49fab18d40
DO fabric fixes
2019-02-21 13:10:35 -05:00
Kyle Spearrin
fa60241c9c
do marketplace fabric scripts
2019-02-21 12:39:02 -05:00
Kyle Spearrin
3b951ce5cc
update some libs
2019-02-14 15:33:51 -05:00
Kyle Spearrin
f70ececa9d
get rid of premium renewal jobs for braintree
2019-02-14 10:18:27 -05:00
Kyle Spearrin
bc30f47331
is null, not =
2019-02-09 21:38:33 -05:00
Kyle Spearrin
44630e9728
handle transactions on paypal webhook
2019-02-01 22:22:08 -05:00
Kyle Spearrin
25f3b76e6b
added transactions table
2019-01-31 16:45:01 -05:00
Kyle Spearrin
a07f37e093
ssl override, deprecate defaultCreds and authType
2019-01-22 21:28:56 -05:00
Kyle Spearrin
411e8a67f9
core => server updates
2019-01-18 22:20:05 -05:00
Kyle Spearrin
1a932de925
no longer need hibp in connect csp
2019-01-18 22:04:10 -05:00
Kyle Spearrin
ca22a007f6
noindex,nofollow
2019-01-17 16:45:53 -05:00
Kyle Spearrin
bc3013b82b
robots noindex self-hosted web vault
2019-01-17 16:27:40 -05:00
Kyle Spearrin
4a38713c4b
return twofactor enabled property on org users api
2018-12-19 11:48:36 -05:00
Kyle Spearrin
9a48e6f29a
add twofactorauth.org to CSP
2018-12-12 10:16:02 -05:00
gruzilla
e83325dd09
adds EXPOSE 8080 to Dockerfile to be coherent to nginx default config ( #403 )
...
* adds EXPOSE 8080 to Dockerfile to be coherent to nginx default config
* adds EXPOSE 8443 to Dockerfile to be coherent to nginx default SSL config
2018-11-16 08:56:12 -05:00
Kyle Spearrin
32f686cba6
allow blobs in object-src CSP
2018-11-06 22:26:41 -05:00
Kyle Spearrin
f60d6d92f8
trim quotes from env file value
2018-11-06 16:31:11 -05:00
Kyle Spearrin
bb1860d861
read connection string from env file for migration
2018-10-31 23:32:22 -04:00
Kyle Spearrin
5136b191f1
com.bitwarden.project label to setup dockerfile
2018-10-31 10:00:18 -04:00
SoulSeekkor
8bd6d830e6
Updated to SQL CU12 and to use new Microsoft servers for docker image. ( #384 )
2018-10-25 16:19:30 -04:00
Kyle Spearrin
826f439618
fix org id in sproc
2018-10-22 14:39:42 -04:00
Kyle Spearrin
0b166a080e
limit collection scope option when creating cipher
2018-10-22 14:09:55 -04:00
Kyle Spearrin
c710226223
set cipher id to limit collection scope
2018-10-22 10:15:03 -04:00
Kyle Spearrin
4e8a313d3d
dont set userid on cipher if orgid is set
2018-10-22 10:06:05 -04:00
Kyle Spearrin
22033d075d
increase group name length to 100
2018-10-22 09:34:26 -04:00
Kyle Spearrin
96b492fa07
apis for creating ciphers with org & collections
2018-10-19 12:07:31 -04:00
SoulSeekkor
976869c968
Fixed various typos. ( #378 )
2018-10-18 11:41:49 -04:00
Kyle Spearrin
45a77c8903
manager group user apis
2018-10-18 08:38:22 -04:00
Kyle Spearrin
33bfd12b7d
apis for managing collection users
2018-10-17 22:18:03 -04:00
Kyle Spearrin
7db36e0005
api adjustments for manager role and collections
2018-10-17 14:58:45 -04:00
Kyle Spearrin
01d2306a07
update packages
2018-10-14 22:21:59 -04:00
Kyle Spearrin
5812915677
database maintenance jobs setup in admin
2018-10-09 10:12:27 -04:00
Kyle Spearrin
59279b4990
bump docker image version refs
2018-10-08 16:14:22 -04:00
Kyle Spearrin
7176e0ea22
update packages
2018-10-05 14:05:52 -04:00
Kyle Spearrin
c16825f8be
check if has port, resolves #365
2018-09-26 16:53:37 -04:00
Kyle Spearrin
7164f378fc
purge org vault
2018-09-25 09:12:50 -04:00
Kyle Spearrin
fd8f5be117
new line
2018-09-17 15:18:49 -04:00
Kyle Spearrin
5d9804bded
added more info to warning
2018-09-17 15:00:29 -04:00
Kyle Spearrin
ce309c27d4
update to aspnet 2.1.4
2018-09-11 13:29:34 -04:00
Kyle Spearrin
fceef7133e
touch more cron files to fix hardlinks
2018-09-05 11:47:57 -04:00
Kyle Spearrin
6a75a60a36
learn more about docker volumes
2018-09-04 08:21:49 -04:00
Kyle Spearrin
34a7bcdc1b
move config class out to its own file
2018-09-03 21:12:24 -04:00
Kyle Spearrin
6b8fdc1a98
add X-Frame-Options specifically
2018-08-31 22:37:49 -04:00
Kyle Spearrin
b2d63b2383
reassign security headers
2018-08-31 17:02:49 -04:00
Kyle Spearrin
9eae04a9c7
dont ignore new security header conf
2018-08-31 13:00:45 -04:00
Kyle Spearrin
aeca706302
include security headers
2018-08-31 12:55:54 -04:00
Kyle Spearrin
566471cae8
enabled X-Frame-Options header
2018-08-31 12:16:36 -04:00
Kyle Spearrin
d4c35a98b7
allow configurable ssl protocols and ciphersuites
2018-08-31 12:11:44 -04:00
Kyle Spearrin
7a6d09a28e
refs and installation complete message
2018-08-31 09:16:01 -04:00
Ndr
f0ca4450d7
Move nginx.pid to directory with write permission ( #350 )
...
* Moving nginx.pid in /var/run/nginx
/var/run/nginx is owned by our application user, allowing it to delete nginx.pid
* Update nginx.pid filepath
2018-08-31 08:10:56 -04:00
Kyle Spearrin
477d665104
compose version config variable
2018-08-30 23:32:18 -04:00
Kyle Spearrin
edac914ebd
update comments
2018-08-30 23:06:40 -04:00
Kyle Spearrin
053a89fdb0
cleanup comments
2018-08-30 22:46:51 -04:00
Kyle Spearrin
a3744facc7
remove install complete message
2018-08-30 22:36:45 -04:00
Kyle Spearrin
c87ce222eb
contains checks for nginx conf config.yml build
2018-08-30 22:30:31 -04:00
Kyle Spearrin
5a44ce4f0e
fix compose template indention
2018-08-30 16:40:06 -04:00
Kyle Spearrin
69605fab5b
rebuild instructions
2018-08-30 16:09:18 -04:00
Kyle Spearrin
310e6bcf61
convert setup to use config.yml
2018-08-30 11:35:44 -04:00
Kyle Spearrin
c41a1e0936
CanAccessPremium checks instead of User.Premium
2018-08-28 16:23:58 -04:00
Kyle Spearrin
816bf1546e
global.env for all aspnet containers
2018-08-24 16:28:49 -04:00
Kyle Spearrin
53caacb870
fix availablecollections queries for groups join
2018-08-23 23:46:18 -04:00
Kyle Spearrin
a275af6366
proxy_pass to /hub
2018-08-21 12:47:13 -04:00
Kyle Spearrin
43eaedeee4
proxy headers for websockets
2018-08-21 12:43:18 -04:00
Kyle Spearrin
7a5d3c3795
set connection header for signalr hub
2018-08-21 12:12:33 -04:00
Kyle Spearrin
fb92f67053
add websockets to CSP
2018-08-21 11:54:03 -04:00
Kyle Spearrin
ca3ecc0163
build and include notifications docker
2018-08-17 18:14:25 -04:00
Kyle Spearrin
1ffa712b75
more notification hub renames
2018-08-16 13:50:41 -04:00
Kyle Spearrin
28e6783a00
hub api notifications
2018-08-16 12:05:01 -04:00
Kyle Spearrin
ff01ce5ca7
internal identity authorization
2018-08-15 18:43:26 -04:00
Kyle Spearrin
580e9e51e5
remove mail and function projects
2018-08-14 22:09:41 -04:00
Kyle Spearrin
0932189ccb
support for user defined kdf parameters
2018-08-14 15:30:04 -04:00
Kyle Spearrin
20f45ca2de
update ssl ciphers to mozilla recommendations
2018-08-14 08:42:01 -04:00
Simon
f08ff966b0
Hardening nginx, allow TLSv1.2 with the most secure cipher suites only ( #340 )
...
* Hardening nginx, allow TLSv1.2 with the most secure cipher suites only
* Ciphers added to allow more browsers to connect
2018-08-14 08:37:24 -04:00
Kyle Spearrin
06d5b4af29
turn off database autoclose
2018-08-09 16:57:15 -04:00
Kyle Spearrin
5e0668077f
special config for webVault
2018-08-07 15:04:11 -04:00
Kyle Spearrin
68bd755dc5
remove console log
2018-08-07 14:27:32 -04:00
Kyle Spearrin
de80139851
write path to console
2018-08-07 14:05:40 -04:00
Kyle Spearrin
36cf628a63
add static files caching
2018-08-07 12:49:00 -04:00
Kyle Spearrin
e6aaddaed1
switch kestrel back to libuv til bugs are fixed
2018-08-06 16:42:55 -04:00