Commit Graph

  • 11c05e8866 Added CloudFlare too many redirects section to FAQ Daniel Winzen 2019-05-12 09:20:44 +02:00
  • 678ad279ef Optimized admin panel Daniel Winzen 2019-05-11 22:09:49 +02:00
  • 401b87d3ea Add curve25519-sha256 to KexAlgorithms Daniel Winzen 2019-05-06 20:05:00 +02:00
  • 270d025e43 Disallow .onion as clearnet domain Daniel Winzen 2019-04-23 20:04:08 +02:00
  • 47c9490c8b Regularly clean up /var/www/tmp directory Daniel Winzen 2019-04-10 18:29:12 +02:00
  • bdc8b101d0 Update sodium_compat dependency Daniel Winzen 2019-04-10 18:27:56 +02:00
  • ac6c784b5c Remove "Happy new year" Noah van der Aa 2019-04-08 19:29:24 +02:00
  • b7b056badc Show clearnet domain section only if enabled Daniel Winzen 2019-04-06 21:55:28 +02:00
  • 84dff64e9e Fixed approval SQL query Daniel Winzen 2019-04-06 21:50:28 +02:00
  • 2b1592cd46 Use own phpmyadmin Daniel Winzen 2019-03-03 20:26:26 +01:00
  • 980f3e1214 Fixed form action links Daniel Winzen 2019-02-24 14:07:19 +01:00
  • 121a2a8ac2 Add clearnet domain support Daniel Winzen 2019-02-23 10:42:44 +01:00
  • 31c6020608 Fixed initial setup not creating config files Daniel Winzen 2019-02-23 07:11:19 +01:00
  • a520c987e6 Allow adding and removing onion domains Daniel Winzen 2019-02-22 07:19:27 +01:00
  • d1ea03ac15 Merge pull request #45 from NoahvdAa/patch-6 Daniel Winzen 2019-02-21 21:53:23 +01:00
  • f8b3748668 Allow users to delete their databases Daniel Winzen 2019-02-21 21:50:23 +01:00
  • d95311004e "Polished" the index page a bit. Noah van der Aa 2019-02-21 18:38:36 +01:00
  • c4cf9e7145 Set DOCUMENT_ROOT correctly to make .user.ini files work recursively Daniel Winzen 2019-02-15 20:05:45 +01:00
  • c219b65b53 Some software requires an IPv4 address and can't handle unix: addresses... Daniel Winzen 2019-02-12 19:38:21 +01:00
  • 4ff2fae6a5 Introduced second parameter to setup_chroot.sh to copy extra binaries Daniel Winzen 2019-02-11 07:16:12 +01:00
  • b1bf9eb42b Merge pull request #43 from NoahvdAa/patch-4 Daniel Winzen 2019-02-03 14:14:49 +01:00
  • 34cbd13d27 Merge pull request #44 from NoahvdAa/patch-5 Daniel Winzen 2019-02-03 14:14:17 +01:00
  • d53279a5f6 Fixed a typo, made a few sentences a bit nicer. Noah van der Aa 2019-01-29 18:46:26 +01:00
  • 86bb057688 Made link clickable. Noah van der Aa 2019-01-29 18:41:33 +01:00
  • c637c98510 Fixed typo in csrf token hidden input field Daniel Winzen 2019-01-28 05:46:29 +01:00
  • 22c687b0e0 Fixed syntax error Daniel Winzen 2019-01-27 18:31:21 +01:00
  • 4aa51f4371 Set default file manager path to /www/ Daniel Winzen 2019-01-27 17:41:24 +01:00
  • 9c5294e64e Add csrf tokens to all sensitive forms Daniel Winzen 2019-01-27 17:40:12 +01:00
  • cf83b9901a Merge pull request #42 from NoahvdAa/patch-3 Daniel Winzen 2019-01-27 16:22:20 +01:00
  • 7da6b8feed Install PHPMyAdmin locally as distributions ship outdated version Daniel Winzen 2019-01-26 16:48:38 +01:00
  • 7661c0ccdb With more than 10 crashes within 10 minutes we should restart php Daniel Winzen 2019-01-26 14:17:09 +01:00
  • 7eed4a05d7 hidden service dirs now contain authorized_clients folder Daniel Winzen 2019-01-25 20:31:04 +01:00
  • 6fc7ba7dae Merge pull request #1 from NoahvdAa/patch-4 Noah van der Aa 2019-01-23 17:50:12 +01:00
  • 769a05b682 Added CSRF protection to file manager. Noah van der Aa 2019-01-23 17:48:54 +01:00
  • bc4a8a4d7c Adding CSRF to file manager Noah van der Aa 2019-01-23 17:44:04 +01:00
  • e537e06118 Enable exec() related functions since we now have resource control in place Daniel Winzen 2019-01-22 21:15:32 +01:00
  • bdf26c8d00 Introduce CPU and Memory resource control for php and all child-processes Daniel Winzen 2019-01-22 21:01:27 +01:00
  • 98d6a46aff Merge pull request #41 from NoahvdAa/patch-2 Daniel Winzen 2019-01-20 11:50:31 +01:00
  • 7f7b228df6 Fixed a small typo Noah van der Aa 2019-01-18 18:54:46 +01:00
  • 11574e3e3f nproc seems to be a global limit, not per session - increased accoringly Daniel Winzen 2019-01-08 18:20:24 +01:00
  • 5eab397200 Randomise DB (user)names to reduce attack surface + allow multiple DBs per user Daniel Winzen 2019-01-07 22:24:21 +01:00
  • 838b6c3b6f disable systemd-resolver and tor@default apparmor profile Daniel Winzen 2019-01-06 20:35:04 +01:00
  • 74417d1d5b nginx default site is now managed by the script Daniel Winzen 2019-01-06 19:48:35 +01:00
  • 6a834142ba Fixed typo Daniel Winzen 2019-01-06 19:44:49 +01:00
  • dfe7f7d9e7 when shell access is enabled, we shouldn't use force-command in sshd_config Daniel Winzen 2019-01-06 19:35:49 +01:00
  • 09ca89029e apply security restrictions in limits.conf Daniel Winzen 2019-01-06 19:33:12 +01:00
  • c46a2584fa Add shell access and scp support Daniel Winzen 2019-01-06 18:20:02 +01:00
  • b5d8b79b8e Disabled STRICT_TRANS_TABLES for compatibility Daniel Winzen 2019-01-05 12:14:47 +01:00
  • ee7e1d11ca Merge pull request #40 from NoahvdAa/patch-1 Daniel Winzen 2019-01-04 21:29:44 +01:00
  • c306ea2518 Check-All checkmark fix NoahvdAa 2019-01-04 14:19:04 +01:00
  • cdd2b5b9be Added the "select all" option to the file manager. NoahvdAa 2019-01-04 14:16:51 +01:00
  • 899da11a56 Merge pull request #38 from NoahvdAa/patch-1 Daniel Winzen 2019-01-04 09:59:35 +01:00
  • ae2aa16f76 Fixed a typo NoahvdAa 2019-01-04 09:57:00 +01:00
  • 7e4ed95ba8 Additional direcotries would have to be included in chroots to be useful - removed Daniel Winzen 2019-01-03 07:20:54 +01:00
  • e536a5c544 Minor nginx config fix Daniel Winzen 2019-01-01 20:43:21 +01:00
  • cff617379d tmp is created by setup_chroot script already Daniel Winzen 2019-01-01 14:34:06 +01:00
  • 6b6efc2fc6 Logs are stored outside chroot - don't check existence and let nginx handle it Daniel Winzen 2019-01-01 13:54:36 +01:00
  • 55bc8cd757 Introduce mysqld socket stream forwarding with nginx for chroot jails Daniel Winzen 2019-01-01 13:47:30 +01:00
  • 0f38bd2449 Improved privilege separation Daniel Winzen 2019-01-01 02:24:22 +01:00
  • a5b0de4b07 Added setup_chroot.sh script Daniel Winzen 2018-12-27 22:32:37 +01:00
  • 91167d1f45 Fix systemd namespace issues taking effect after reboot Daniel Winzen 2018-12-24 06:27:33 +01:00
  • e0bfc5e633 Our hidden service should run on v3 by default Daniel Winzen 2018-12-10 16:58:50 +01:00
  • a901e25bb4 Instructions to prepare user disk quota Daniel Winzen 2018-12-09 12:25:25 +01:00
  • 08cc492b86 New imap.enable_insecure_rsh php.ini option protects against imap_open exploit Daniel Winzen 2018-12-08 11:01:06 +01:00
  • 11c055ebcf Remove commeted options Daniel Winzen 2018-12-07 22:18:49 +01:00
  • 4f6539b31d Introduce systemd.exec restrictions for better security Daniel Winzen 2018-12-07 21:54:44 +01:00
  • 8e155012a7 Suppress chatty dovecot messages Daniel Winzen 2018-12-07 21:48:22 +01:00
  • 4b25310396 Simplified sshd_config Daniel Winzen 2018-12-07 13:25:30 +01:00
  • 756e16b533 Fixed potential race condition pointed out in issue #31 Daniel Winzen 2018-12-06 16:54:35 +01:00
  • 5cd13e9269 Introduced selection between v2, v3 and custom hidden service Daniel Winzen 2018-12-06 16:24:35 +01:00
  • 305c8bc0c3 Fix mariadb 10.3 compatibility by adding default values Daniel Winzen 2018-12-05 22:19:46 +01:00
  • be005c3137 Renamed config file Daniel Winzen 2018-12-05 17:18:46 +01:00
  • aedd8a1e6a Update to latest mariadb version Daniel Winzen 2018-12-05 17:18:11 +01:00
  • 64163823a8 dnsmasq should only listen on lo interface Daniel Winzen 2018-12-05 07:59:46 +01:00
  • fd95a4e2e3 v3 hidden service export to disk + hostname file is auto generated by tor Daniel Winzen 2018-12-04 21:48:45 +01:00
  • c9cddc9f86 Username should be a prepared variable Daniel Winzen 2018-12-04 21:23:56 +01:00
  • d0710d3d20 Merge pull request #37 from DanWin/revert-35-patch-1 Daniel Winzen 2018-12-04 21:13:51 +01:00
  • 0fc4412404 Revert " Disabling emulated parameters" Daniel Winzen 2018-12-04 21:10:36 +01:00
  • ba71455ca5 Introduce DEFAULT_PHP_VERSION Daniel Winzen 2018-12-04 20:48:08 +01:00
  • 4e163a7e2d Fixed syntax error Daniel Winzen 2018-12-04 15:26:24 +01:00
  • c174251826 exim4 might interfere with postfix Daniel Winzen 2018-12-04 13:36:16 +01:00
  • 4f059e66f7 Droped php7.2 systemd.service files Daniel Winzen 2018-12-04 13:29:17 +01:00
  • c651bb65c7 Add jounald.conf Daniel Winzen 2018-12-03 17:22:23 +01:00
  • 6ee51f3d7e removed stray mention of php7.2 Daniel Winzen 2018-12-02 21:44:07 +01:00
  • 22066309d5 Add login.defs file Daniel Winzen 2018-12-02 21:41:31 +01:00
  • 363d1b31ad Debian sid dropped php7.2 support - move to 7.3 only Daniel Winzen 2018-12-02 21:17:11 +01:00
  • 2e0e69d605 We don't need apt repository translations Daniel Winzen 2018-12-02 19:31:26 +01:00
  • 2149bc9fd8 update paragonie/sodium_compat dependency Daniel Winzen 2018-12-02 10:45:51 +01:00
  • 7111fa3a65 Prevent httpoxy vulnerability in PHP applications Daniel Winzen 2018-11-29 20:56:28 +01:00
  • 921c43122c Merge pull request #35 from teikakki/patch-1 Daniel Winzen 2018-11-28 21:05:56 +01:00
  • cf8a6cde80 emulated params teikakki 2018-11-28 14:30:36 +00:00
  • 1fc180752f emulated params teikakki 2018-11-28 14:30:22 +00:00
  • 4475e3b277 emulated params teikakki 2018-11-28 14:30:05 +00:00
  • 6ffd291f12 emulated params teikakki 2018-11-28 14:29:46 +00:00
  • 79774b5a1d emualted params teikakki 2018-11-28 14:29:27 +00:00
  • b46d0c7ab0 emulated params teikakki 2018-11-28 14:29:13 +00:00
  • 01af3c367d emulated params teikakki 2018-11-28 14:28:49 +00:00
  • 7ab640ea4b emulated params teikakki 2018-11-28 14:28:36 +00:00
  • 5753ca2cee Disabling emulated parameters teikakki 2018-11-28 14:26:55 +00:00
  • 36fc7103cb Add hidden service v3 keygen and parser for base64 encoded secret keys Daniel Winzen 2018-11-25 14:36:28 +01:00