Commit Graph

  • 6cd3146b29 Add $request_method to nginx cache key Daniel Winzen 2020-02-08 22:53:33 +01:00
  • 14c50d7c1e Allow nginx to write in postfix directory Daniel Winzen 2020-02-08 22:37:57 +01:00
  • 1549b7cc09 vfemail.net took down their .onion server... Daniel Winzen 2020-02-07 20:10:26 +01:00
  • 0d47c3a5be Updated composer version Daniel Winzen 2020-02-07 19:43:55 +01:00
  • aa22f7fbeb Added xz and zopfli to chroot Daniel Winzen 2020-02-06 07:01:33 +01:00
  • 21714d5c25 Added missing hardlink dependency Daniel Winzen 2020-02-06 06:42:42 +01:00
  • fcd1a37092 Add brotli to chroot Daniel Winzen 2020-02-06 06:33:15 +01:00
  • 9786372794 Remove no longer needed binaries Daniel Winzen 2020-02-05 21:14:32 +01:00
  • 78b11191ec Added note about initializing phpMyAdmin setting tables Daniel Winzen 2020-02-05 19:34:33 +01:00
  • 1b28fcac95 Fix vsftpd not starting Daniel Winzen 2020-02-05 19:26:35 +01:00
  • f814c67e3f Check path exists and create if not yet existing Daniel Winzen 2020-02-05 19:06:01 +01:00
  • 05cd5b0774 Rotate all php version logs Daniel Winzen 2020-02-05 17:59:34 +01:00
  • 6917ffcae0 Added clean_nginx_sockets.sh Daniel Winzen 2020-02-05 07:27:43 +01:00
  • 35e0a27774 Fix instance not always being enqueued for reloading Daniel Winzen 2020-02-02 11:42:51 +01:00
  • 3a53ea59f8 Hardlink chroot related files across all accounts to save disk space Daniel Winzen 2020-01-28 20:51:17 +01:00
  • 988ccef316 fix setup_chroot.sh not being executable Daniel Winzen 2020-01-26 21:09:12 +01:00
  • 26c4c3c75d set safe file permissions Daniel Winzen 2020-01-26 14:40:52 +01:00
  • 61d15297b7 Bugfix Daniel Winzen 2020-01-26 12:07:15 +01:00
  • 47fb983557 sanitize $system_account to protect against database modification exploits Daniel Winzen 2020-01-25 21:47:38 +01:00
  • 93dc5b10c4 Avoid passing password hash as parameter and write directly to /etc/shadow Daniel Winzen 2020-01-25 20:29:51 +01:00
  • fc244d3182 Move chroot creation/updating to new setup_chroot() function Daniel Winzen 2020-01-23 21:49:36 +01:00
  • cb90bc7508 Introduced HOME_MOUNT_PATH const Daniel Winzen 2020-01-23 20:59:44 +01:00
  • e6946ad1ce Introduced new const to easily change the sites name globally Daniel Winzen 2020-01-21 21:47:51 +01:00
  • 29b06199e6 Removed unused saslauthd config Daniel Winzen 2020-01-19 10:28:17 +01:00
  • 5215d7ab29 Fix heredoc pausing script execution Daniel Winzen 2020-01-19 10:23:53 +01:00
  • 566411df37 Integrate torproject repository instrictions in README Daniel Winzen 2020-01-18 20:42:26 +01:00
  • 739216f853 Tweaked nginx ressource limits Daniel Winzen 2020-01-16 06:22:35 +01:00
  • d54fa4535d Updated composer version Daniel Winzen 2020-01-14 17:08:42 +01:00
  • 24692da470 Fixed cache injection vulnerability using faked headers Daniel Winzen 2020-01-14 06:45:56 +01:00
  • cdbf8958b2 Improve unused account detection script Daniel Winzen 2020-01-13 06:55:27 +01:00
  • 68b4458c88 Improve inode/dnode caching under memory pressure Daniel Winzen 2020-01-13 06:53:22 +01:00
  • e9c4b798d5 Update php systemd service files Daniel Winzen 2020-01-11 13:33:34 +01:00
  • 5abb32402d Added options to enable/disable account upgrades and coinpayments Daniel Winzen 2020-01-11 13:18:50 +01:00
  • a69714bce8 Enable hidden service intro DoS defense Daniel Winzen 2020-01-11 12:56:20 +01:00
  • 0bb35ae263 chroot squirrelmail Daniel Winzen 2020-01-09 07:06:08 +01:00
  • 709e4fd1c5 Reduce priority of background deletion task Daniel Winzen 2020-01-08 06:32:40 +01:00
  • 9ba305da60 Removed old sendmail_wrapper.php script Daniel Winzen 2020-01-07 19:43:30 +01:00
  • b09aa25d88 \ at line ending in heredoc needs escaping Daniel Winzen 2020-01-05 20:33:29 +01:00
  • 3921c92388 Updated nginx patch Daniel Winzen 2020-01-05 19:49:11 +01:00
  • 930052fe1e BindPaths -> ReadWritePaths for all systemd services Daniel Winzen 2020-01-05 19:31:52 +01:00
  • d7c886bb54 Added support for mail() inside chroots Daniel Winzen 2020-01-05 15:50:08 +01:00
  • f573f79f6c Switch gnupg1 to gnupg2 and set env[HOME] for php correctly Daniel Winzen 2020-01-05 15:03:20 +01:00
  • 6d92ea99e0 Inreased mysql max_connections variable Daniel Winzen 2020-01-05 14:02:38 +01:00
  • b768d3f45f Enabled rar php extension Daniel Winzen 2019-12-21 12:42:24 +01:00
  • a527b2702a Added gnupg extension to php Daniel Winzen 2019-12-21 11:00:46 +01:00
  • 2de12162ce Enable upgrading number of files quota Daniel Winzen 2019-12-21 09:23:14 +01:00
  • 0b41932570 Use Dovecot SASL instead of running a seperate saslauthd Daniel Winzen 2019-12-16 22:23:25 +01:00
  • b2da71f9d2 Add "/.composer/vendor/bin" to PATH within chroot Daniel Winzen 2019-12-14 23:07:26 +01:00
  • 264eacc3f9 Added some empty dirs and files that may be used within a chroot Daniel Winzen 2019-12-14 22:55:45 +01:00
  • 0e0fb54eae Track quota usage and allow upgrading quotas Daniel Winzen 2019-12-14 20:59:04 +01:00
  • fee1c135c2 Updated composer version Daniel Winzen 2019-11-28 13:33:26 +01:00
  • da00e68dfb Add autoconf to build dependencies Daniel Winzen 2019-11-28 13:18:37 +01:00
  • 1f4c90edf7 image/x-icon (.ico files) can be compressed well Daniel Winzen 2019-11-10 20:55:54 +01:00
  • 6b19346b20 Various optimizations Daniel Winzen 2019-11-02 19:41:05 +01:00
  • f857083765 Enable HPACK nginx module and aio Daniel Winzen 2019-11-01 20:19:44 +01:00
  • 2bb94cf623 Add HTTP2 HPACK patch by CloudFlare Daniel Winzen 2019-11-01 20:12:45 +01:00
  • 1498c092cd Add dynamic TLS record patch by CloudFlare Daniel Winzen 2019-11-01 19:04:38 +01:00
  • 9b75e52985 Compile and install nginx and php with one script Daniel Winzen 2019-10-22 17:37:54 +02:00
  • dbbdce186a Add libonig-dev to build dependencies Daniel Winzen 2019-10-20 20:21:17 +02:00
  • 4cd17049f0 Run /tmp cleaner on all accounts + prevent deleting empty accounts recently modified Daniel Winzen 2019-10-20 18:39:31 +02:00
  • c31c909b7c Switch hosting script to PHP 7.4 Daniel Winzen 2019-10-20 18:38:08 +02:00
  • 079b771717 Define disable_symlinks nginx config rule globally Daniel Winzen 2019-10-20 13:17:08 +02:00
  • 724ef98c9b prevent deleting sockets of other php instances Daniel Winzen 2019-10-19 20:45:59 +02:00
  • 75408fa564 Moved build dependencies installing to the top Daniel Winzen 2019-10-17 19:20:09 +02:00
  • 9c04243f33 Simplify nginx systemd unit and add RuntimeDirectory option to php Daniel Winzen 2019-10-17 19:03:45 +02:00
  • b7be96b11f Enable nginx and fix systemd service Daniel Winzen 2019-10-16 21:29:55 +02:00
  • 985fd6245b Added missing libsodium-dev dependency Daniel Winzen 2019-10-16 20:37:19 +02:00
  • 486aeabfd1 Added libsystemd-dev dependency Daniel Winzen 2019-10-16 20:34:13 +02:00
  • 1137caefe1 Packages were renamed Daniel Winzen 2019-10-16 19:53:10 +02:00
  • 9595246119 Added make as dependency Daniel Winzen 2019-10-16 19:50:55 +02:00
  • c1dd567ab2 PHP and Composer need to be installed before we can install phpmyadmin with composer dependencies Daniel Winzen 2019-10-16 19:40:49 +02:00
  • b40afdf10b Mention new php instances to be enabled Daniel Winzen 2019-10-16 19:29:51 +02:00
  • 6052e57112 Switch to custom compiled php Daniel Winzen 2019-10-15 19:37:51 +02:00
  • ee4856e5fc Add noatime to fstab Daniel Winzen 2019-10-02 20:56:34 +02:00
  • b3289a7a77 Correctly define max opcache optimization level Daniel Winzen 2019-10-01 22:03:58 +02:00
  • b197767415 Updated nodejs signing key source Daniel Winzen 2019-09-30 18:54:05 +02:00
  • 2a592893eb Instances creation is now handled via setup.php Daniel Winzen 2019-09-28 17:57:43 +02:00
  • 4c28d7eddb Added missing libssl-dev dependency Daniel Winzen 2019-09-23 21:41:08 +02:00
  • 4096b66390 Install composer vai github instead of distro packages to include in chroot Daniel Winzen 2019-09-23 21:24:08 +02:00
  • 64930b4c5a Bumped db version Daniel Winzen 2019-09-23 19:41:29 +02:00
  • f9824e45a8 We run less instances now for less memory usage Daniel Winzen 2019-09-22 22:17:11 +02:00
  • dd00fde24d Update sodium_compat dependency Daniel Winzen 2019-09-22 22:00:36 +02:00
  • ae925a2000 Allow changing instances + add nginx_rewrites table + optimizations Daniel Winzen 2019-09-22 21:24:27 +02:00
  • 7ec0f76f35 Updated nginx logrotate Daniel Winzen 2019-09-07 12:21:00 +02:00
  • 1d71b06887 ngx_brotli repo moved to google Daniel Winzen 2019-09-06 23:14:20 +02:00
  • 0b61a38c26 Replace debian stock nginx with custom optimized nginx Daniel Winzen 2019-09-02 19:45:09 +02:00
  • df4c4275c7 Added vm.overcommit_ratio=100 to sysctl to use full memory capacity Daniel Winzen 2019-08-30 20:19:43 +02:00
  • 42ee1f65f7 Correctly set session path for adminer now running in chroot Daniel Winzen 2019-08-09 06:01:03 +02:00
  • e950e42f09 Debian packaging is slacking with adminer updates - fetch from git Daniel Winzen 2019-08-08 21:37:04 +02:00
  • 5252c01f2e libsasl2-modules might not be installed as dependency in some distributions Daniel Winzen 2019-07-21 15:24:07 +02:00
  • 37cf037a6c Added the new instances to rc.local and README Daniel Winzen 2019-07-21 12:43:56 +02:00
  • 2f97e826d4 Make only enabled onions clickable in admin + equal instance usage Daniel Winzen 2019-07-20 14:19:35 +02:00
  • 287eedf318 More tor instances + guard relays for stability and added disk quota Daniel Winzen 2019-06-30 16:20:06 +02:00
  • 47cf5edbca stripped bash-completion in chroot + added some useful binaries Daniel Winzen 2019-06-23 09:40:46 +02:00
  • 851a3103be Added canonical tag and store tor/php instance responsibility in db Daniel Winzen 2019-06-20 18:53:30 +02:00
  • 0462b9a440 Merge pull request #57 from NoahvdAa/patch-1 Daniel Winzen 2019-06-16 16:28:37 +02:00
  • 6fa9114352 Update common.php Noah van der Aa 2019-06-08 17:01:51 +02:00
  • e90eab05aa Merge pull request #52 from NoahvdAa/patch-7 Daniel Winzen 2019-05-27 21:59:22 +02:00
  • b8f4c9b808 Validate RSA keys for correctness which would otherwise crash tor Daniel Winzen 2019-05-27 21:56:59 +02:00
  • cfcfb075fe Update paragonie/sodium_compat dependency Daniel Winzen 2019-05-14 21:18:54 +02:00