gruzilla
e83325dd09
adds EXPOSE 8080 to Dockerfile to be coherent to nginx default config ( #403 )
...
* adds EXPOSE 8080 to Dockerfile to be coherent to nginx default config
* adds EXPOSE 8443 to Dockerfile to be coherent to nginx default SSL config
2018-11-16 08:56:12 -05:00
Kyle Spearrin
32f686cba6
allow blobs in object-src CSP
2018-11-06 22:26:41 -05:00
Kyle Spearrin
f60d6d92f8
trim quotes from env file value
2018-11-06 16:31:11 -05:00
Kyle Spearrin
bb1860d861
read connection string from env file for migration
2018-10-31 23:32:22 -04:00
Kyle Spearrin
5136b191f1
com.bitwarden.project label to setup dockerfile
2018-10-31 10:00:18 -04:00
SoulSeekkor
8bd6d830e6
Updated to SQL CU12 and to use new Microsoft servers for docker image. ( #384 )
2018-10-25 16:19:30 -04:00
Kyle Spearrin
826f439618
fix org id in sproc
2018-10-22 14:39:42 -04:00
Kyle Spearrin
0b166a080e
limit collection scope option when creating cipher
2018-10-22 14:09:55 -04:00
Kyle Spearrin
c710226223
set cipher id to limit collection scope
2018-10-22 10:15:03 -04:00
Kyle Spearrin
4e8a313d3d
dont set userid on cipher if orgid is set
2018-10-22 10:06:05 -04:00
Kyle Spearrin
22033d075d
increase group name length to 100
2018-10-22 09:34:26 -04:00
Kyle Spearrin
96b492fa07
apis for creating ciphers with org & collections
2018-10-19 12:07:31 -04:00
SoulSeekkor
976869c968
Fixed various typos. ( #378 )
2018-10-18 11:41:49 -04:00
Kyle Spearrin
45a77c8903
manager group user apis
2018-10-18 08:38:22 -04:00
Kyle Spearrin
33bfd12b7d
apis for managing collection users
2018-10-17 22:18:03 -04:00
Kyle Spearrin
7db36e0005
api adjustments for manager role and collections
2018-10-17 14:58:45 -04:00
Kyle Spearrin
01d2306a07
update packages
2018-10-14 22:21:59 -04:00
Kyle Spearrin
5812915677
database maintenance jobs setup in admin
2018-10-09 10:12:27 -04:00
Kyle Spearrin
59279b4990
bump docker image version refs
2018-10-08 16:14:22 -04:00
Kyle Spearrin
7176e0ea22
update packages
2018-10-05 14:05:52 -04:00
Kyle Spearrin
c16825f8be
check if has port, resolves #365
2018-09-26 16:53:37 -04:00
Kyle Spearrin
7164f378fc
purge org vault
2018-09-25 09:12:50 -04:00
Kyle Spearrin
fd8f5be117
new line
2018-09-17 15:18:49 -04:00
Kyle Spearrin
5d9804bded
added more info to warning
2018-09-17 15:00:29 -04:00
Kyle Spearrin
ce309c27d4
update to aspnet 2.1.4
2018-09-11 13:29:34 -04:00
Kyle Spearrin
fceef7133e
touch more cron files to fix hardlinks
2018-09-05 11:47:57 -04:00
Kyle Spearrin
6a75a60a36
learn more about docker volumes
2018-09-04 08:21:49 -04:00
Kyle Spearrin
34a7bcdc1b
move config class out to its own file
2018-09-03 21:12:24 -04:00
Kyle Spearrin
6b8fdc1a98
add X-Frame-Options specifically
2018-08-31 22:37:49 -04:00
Kyle Spearrin
b2d63b2383
reassign security headers
2018-08-31 17:02:49 -04:00
Kyle Spearrin
9eae04a9c7
dont ignore new security header conf
2018-08-31 13:00:45 -04:00
Kyle Spearrin
aeca706302
include security headers
2018-08-31 12:55:54 -04:00
Kyle Spearrin
566471cae8
enabled X-Frame-Options header
2018-08-31 12:16:36 -04:00
Kyle Spearrin
d4c35a98b7
allow configurable ssl protocols and ciphersuites
2018-08-31 12:11:44 -04:00
Kyle Spearrin
7a6d09a28e
refs and installation complete message
2018-08-31 09:16:01 -04:00
Ndr
f0ca4450d7
Move nginx.pid to directory with write permission ( #350 )
...
* Moving nginx.pid in /var/run/nginx
/var/run/nginx is owned by our application user, allowing it to delete nginx.pid
* Update nginx.pid filepath
2018-08-31 08:10:56 -04:00
Kyle Spearrin
477d665104
compose version config variable
2018-08-30 23:32:18 -04:00
Kyle Spearrin
edac914ebd
update comments
2018-08-30 23:06:40 -04:00
Kyle Spearrin
053a89fdb0
cleanup comments
2018-08-30 22:46:51 -04:00
Kyle Spearrin
a3744facc7
remove install complete message
2018-08-30 22:36:45 -04:00
Kyle Spearrin
c87ce222eb
contains checks for nginx conf config.yml build
2018-08-30 22:30:31 -04:00
Kyle Spearrin
5a44ce4f0e
fix compose template indention
2018-08-30 16:40:06 -04:00
Kyle Spearrin
69605fab5b
rebuild instructions
2018-08-30 16:09:18 -04:00
Kyle Spearrin
310e6bcf61
convert setup to use config.yml
2018-08-30 11:35:44 -04:00
Kyle Spearrin
c41a1e0936
CanAccessPremium checks instead of User.Premium
2018-08-28 16:23:58 -04:00
Kyle Spearrin
816bf1546e
global.env for all aspnet containers
2018-08-24 16:28:49 -04:00
Kyle Spearrin
53caacb870
fix availablecollections queries for groups join
2018-08-23 23:46:18 -04:00
Kyle Spearrin
a275af6366
proxy_pass to /hub
2018-08-21 12:47:13 -04:00
Kyle Spearrin
43eaedeee4
proxy headers for websockets
2018-08-21 12:43:18 -04:00
Kyle Spearrin
7a5d3c3795
set connection header for signalr hub
2018-08-21 12:12:33 -04:00
Kyle Spearrin
fb92f67053
add websockets to CSP
2018-08-21 11:54:03 -04:00
Kyle Spearrin
ca3ecc0163
build and include notifications docker
2018-08-17 18:14:25 -04:00
Kyle Spearrin
1ffa712b75
more notification hub renames
2018-08-16 13:50:41 -04:00
Kyle Spearrin
28e6783a00
hub api notifications
2018-08-16 12:05:01 -04:00
Kyle Spearrin
ff01ce5ca7
internal identity authorization
2018-08-15 18:43:26 -04:00
Kyle Spearrin
580e9e51e5
remove mail and function projects
2018-08-14 22:09:41 -04:00
Kyle Spearrin
0932189ccb
support for user defined kdf parameters
2018-08-14 15:30:04 -04:00
Kyle Spearrin
20f45ca2de
update ssl ciphers to mozilla recommendations
2018-08-14 08:42:01 -04:00
Simon
f08ff966b0
Hardening nginx, allow TLSv1.2 with the most secure cipher suites only ( #340 )
...
* Hardening nginx, allow TLSv1.2 with the most secure cipher suites only
* Ciphers added to allow more browsers to connect
2018-08-14 08:37:24 -04:00
Kyle Spearrin
06d5b4af29
turn off database autoclose
2018-08-09 16:57:15 -04:00
Kyle Spearrin
5e0668077f
special config for webVault
2018-08-07 15:04:11 -04:00
Kyle Spearrin
68bd755dc5
remove console log
2018-08-07 14:27:32 -04:00
Kyle Spearrin
de80139851
write path to console
2018-08-07 14:05:40 -04:00
Kyle Spearrin
36cf628a63
add static files caching
2018-08-07 12:49:00 -04:00
Kyle Spearrin
e6aaddaed1
switch kestrel back to libuv til bugs are fixed
2018-08-06 16:42:55 -04:00
Kyle Spearrin
fb2ee6aaea
no longer need to provide netcoreapp flag
2018-08-06 09:11:27 -04:00
Kyle Spearrin
58d29cc4a8
consolidate some deps
2018-08-03 23:57:15 -04:00
Kyle Spearrin
3f0186f17a
update mssql and nginx deps
2018-08-01 10:38:12 -04:00
Kyle Spearrin
1052951a96
restore on build. remove ps1 build scripts
2018-08-01 10:32:58 -04:00
Kyle Spearrin
61cda87574
update to .net / asp.net 2.1
2018-08-01 10:07:20 -04:00
Kyle Spearrin
0685023e1d
update libs
2018-08-01 07:53:17 -04:00
Kyle Spearrin
6d22356caf
allow gravatar in CSP
2018-07-30 23:56:09 -04:00
Kyle Spearrin
98fc54881b
database tuning
2018-07-28 21:25:25 -04:00
Kyle Spearrin
545fb43dac
improvements to collection user sproc
2018-07-23 10:31:45 -04:00
Kyle Spearrin
94c7fdebf5
device index and updated folder delete sproc
2018-07-23 09:52:22 -04:00
Kyle Spearrin
24aa0dc026
delete null creationdates too
2018-07-21 08:58:16 -04:00
Kyle Spearrin
941792bdd8
u2f db updates
2018-07-21 08:44:21 -04:00
Kyle Spearrin
4c399aaf0d
new grant cleanup sproc
2018-07-20 23:08:10 -04:00
Mark Anthony Cianfrani
c227beb510
added basic constraints configuration for self signed certificates ( #327 )
2018-07-20 22:17:49 -04:00
Kyle Spearrin
05b1c1cf9b
move all security headers to web vault location
2018-07-20 14:13:24 -04:00
Kyle Spearrin
0070d23dab
csp is only for web vault
2018-07-20 14:11:20 -04:00
Kyle Spearrin
c4c0c81d14
null error output of cert copy
2018-07-19 17:33:53 -04:00
Kyle Spearrin
8c208d4d34
missing semicolon
2018-07-19 17:01:57 -04:00
Kyle Spearrin
dea76e8e01
wrap csp in quotes
2018-07-19 16:49:01 -04:00
Kyle Spearrin
511b1cbbb6
load ca certs on setup
2018-07-19 16:45:27 -04:00
Kyle Spearrin
b0aef93597
move script back and move userview update up
2018-07-19 16:22:30 -04:00
Kyle Spearrin
266fc579f2
cleanup installer. break apart update script
2018-07-19 16:01:54 -04:00
Kyle Spearrin
a66af41d2b
csp header on nginx
2018-07-18 23:06:25 -04:00
Kyle Spearrin
61806cd8ac
sql update script fixes
2018-07-17 21:41:16 -04:00
Kyle Spearrin
938b7f1230
premium renewal reminders job for braintree
2018-07-12 23:23:41 -04:00
Kyle Spearrin
476ee53931
add renewal reminder date prop to users
2018-07-12 17:35:01 -04:00
Kyle Spearrin
de552be25f
apis for bulk sharing
2018-06-13 14:03:44 -04:00
Kyle Spearrin
ebb1f9e1a8
use temp tables for better execution plans
2018-06-12 13:24:13 -04:00
Kyle Spearrin
74874a1c38
return collection readonly details
2018-06-11 14:25:53 -04:00
Mart124
b3c48fd3fa
Add a bitwarden label to docker images ( #305 )
...
* Add a bitwarden label to docker images
* Prefix label with reverse DNS
2018-06-09 08:17:16 -04:00
Kyle Spearrin
6f1f2305e3
sleep for 20 seconds between migrate re-tries
2018-05-31 22:11:08 -04:00
Mart124
92b08e6cf1
Rework service user ( #299 )
...
* Use user primary group if not root
* Do not run getent on MacOS
* Simplify UID/GID management
* Make uid.env backward compatible in run.sh
* Merge install.sh with run.sh to avoid duplicating code
Especially the UID/GID management one
* Generate correct OS name
* Be sure to keep old behavior for backward compatiblilty
* Get the colors back from install.sh
2018-05-31 12:05:26 -04:00
Kyle Spearrin
1ead0af77e
update mssql to CU7
2018-05-29 08:19:34 -04:00
Mart124
8471f558e3
Improve mssql backups ( #298 )
...
* Improve mssql backups
* Launch DB backup at 23:59
2018-05-29 08:17:43 -04:00
Mart124
1b1ec7629b
Workaround to disable mssql telemetry in DockerFile ( #294 )
2018-05-24 15:56:55 -04:00
Mart124
ffe5f37a64
Workaround to disable mssql telemetry ( #293 )
2018-05-24 15:36:46 -04:00
Kyle Spearrin
4dbea821a4
Revert "chown mssql.conf"
...
This reverts commit 3bd5a82afa
.
2018-05-21 15:42:37 -04:00
Kyle Spearrin
8f13361705
set nsubjectAltName od self signed certs
2018-05-21 15:41:15 -04:00
Kyle Spearrin
3bd5a82afa
chown mssql.conf
2018-05-21 14:09:04 -04:00
Kyle Spearrin
55afa2588a
turn off telemetry.customerfeedback for mssql
2018-05-21 13:37:46 -04:00
Kyle Spearrin
6390a15835
Revert "explicitly disable app insights telemetry"
...
This reverts commit 819a4e031d
.
2018-05-21 13:31:47 -04:00
Kyle Spearrin
819a4e031d
explicitly disable app insights telemetry
2018-05-21 12:49:57 -04:00
Kyle Spearrin
619a00637d
update location and state for generated certs
2018-05-17 10:41:22 -04:00
Kyle Spearrin
f5c9672370
get cipher by org id index
2018-05-11 08:31:29 -04:00
Kyle Spearrin
4e6e215d35
update more sprocs to use proper index
2018-04-25 13:55:47 -04:00
Kyle Spearrin
3a0622ca43
fix sproc
2018-04-24 21:56:58 -04:00
Kyle Spearrin
9067ac15de
collection index
2018-04-24 21:27:51 -04:00
Kyle Spearrin
165ee97d2f
refactor cipher queries by user. tuned indexing.
2018-04-24 12:48:43 -04:00
Kyle Spearrin
2c24e00bd7
update some libs
2018-04-17 22:36:30 -04:00
Kyle Spearrin
1fb3fbeacf
Revert "update libs"
...
This reverts commit e7453bc036
.
2018-04-17 08:11:08 -04:00
Kyle Spearrin
dead022e83
admin base uri setting, applied to login emails
2018-04-16 20:35:53 -04:00
Kyle Spearrin
ce92462041
fix uid comparisons
2018-04-16 16:26:08 -04:00
Kyle Spearrin
1dce0ccb83
fix if when no currentid
2018-04-16 16:09:08 -04:00
Kyle Spearrin
b7a2e47bd9
map host docker group id to containers
2018-04-16 15:30:07 -04:00
Kyle Spearrin
e7453bc036
update libs
2018-04-16 12:49:18 -04:00
Kyle Spearrin
0c7d969fcb
always map mssql logs
2018-04-16 10:42:56 -04:00
Kyle Spearrin
389512d51e
added org duo to 2fa flow
2018-04-03 14:31:33 -04:00
Kyle Spearrin
d1a47ba808
make user homedir with helper
2018-04-02 21:11:32 -04:00
Kyle Spearrin
a3b522a6b0
Revert "make bitwarden user home dir"
...
This reverts commit 40242a78e5
.
2018-04-02 21:08:54 -04:00
Kyle Spearrin
40242a78e5
make bitwarden user home dir
2018-04-02 19:58:37 -04:00
Kyle Spearrin
367d3f65a6
use2fa org response
2018-04-02 17:20:06 -04:00
Kyle Spearrin
6bc9cbd761
regenerate OrganizationView
2018-04-02 14:55:17 -04:00
Kyle Spearrin
bcc224c02d
stub out use2fa and twofactorproviders on orgs
2018-04-02 14:53:19 -04:00
Kyle Spearrin
efd6a89e34
Revert "lock windows at mssql cu2"
...
This reverts commit b703eeefdb
.
2018-03-30 16:07:01 -04:00
Kyle Spearrin
998de639c0
Revert "1.18.0-CU2 for windows"
...
This reverts commit 2a1fcbaf9d
.
2018-03-30 16:06:45 -04:00
Kyle Spearrin
2a1fcbaf9d
1.18.0-CU2 for windows
2018-03-30 14:41:02 -04:00
Kyle Spearrin
b703eeefdb
lock windows at mssql cu2
2018-03-30 14:10:00 -04:00
Kyle Spearrin
7878362a51
note message var
2018-03-30 13:50:51 -04:00
Kyle Spearrin
818a668e3c
move cert warnings to main
2018-03-30 13:48:26 -04:00
Kyle Spearrin
54aef8e8d3
self-signed ssl cert warning
2018-03-30 12:34:21 -04:00
Kyle Spearrin
a100d20cd7
add new apps to welcome email
2018-03-30 11:51:36 -04:00
Kyle Spearrin
617399c995
remove bottom !!!!
2018-03-30 10:29:24 -04:00
Kyle Spearrin
352b51dfb4
before running start
2018-03-30 10:27:31 -04:00
Kyle Spearrin
64cd0b8942
format long strings
2018-03-30 10:14:46 -04:00
Kyle Spearrin
5049f94d9b
helpers and banner
2018-03-30 09:40:14 -04:00
Kyle Spearrin
b048dbcb6b
trim question input
2018-03-30 09:25:54 -04:00
Kyle Spearrin
267aa020c6
input helpers
2018-03-30 09:23:33 -04:00
Kyle Spearrin
f2ecea0a17
update lib
2018-03-29 21:04:38 -04:00
Kyle Spearrin
6801da46e5
Comment capitalization
2018-03-29 15:41:27 -04:00
Kyle Spearrin
07fb676ded
ssl mapped to 8443
2018-03-29 13:53:39 -04:00
Kyle Spearrin
05d00517ee
move cert questions up
2018-03-29 13:43:52 -04:00
Kyle Spearrin
d2bdaa8baa
load ca-certs for api and identity
2018-03-29 08:59:50 -04:00
Kyle Spearrin
4ce69dac2b
internal api & vault urls. apply to version check
2018-03-29 08:45:04 -04:00
Kyle Spearrin
da970c2308
add ca-certificates
2018-03-28 23:47:43 -04:00
Kyle Spearrin
ec395ca0d2
only set https port if using ssl
2018-03-28 22:18:53 -04:00