danwin1210/hosting
1
0 Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
636 Commits 1 Branch 0 Tags
master
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Daniel Winzen 9b75e52985 Compile and install nginx and php with one script 2019-10-22 17:38:15 +02:00
Daniel Winzen dbbdce186a Add libonig-dev to build dependencies 2019-10-20 20:21:17 +02:00
Daniel Winzen 4cd17049f0 Run /tmp cleaner on all accounts + prevent deleting empty accounts recently modified 2019-10-20 18:39:31 +02:00
Daniel Winzen c31c909b7c Switch hosting script to PHP 7.4 2019-10-20 18:38:08 +02:00
Daniel Winzen 079b771717 Define disable_symlinks nginx config rule globally 2019-10-20 13:17:08 +02:00
Daniel Winzen 724ef98c9b prevent deleting sockets of other php instances 2019-10-19 20:46:18 +02:00
Daniel Winzen 75408fa564 Moved build dependencies installing to the top 2019-10-17 19:20:09 +02:00
Daniel Winzen 9c04243f33 Simplify nginx systemd unit and add RuntimeDirectory option to php 2019-10-17 19:03:45 +02:00
Daniel Winzen b7be96b11f Enable nginx and fix systemd service 2019-10-16 21:29:55 +02:00
Daniel Winzen 985fd6245b Added missing libsodium-dev dependency 2019-10-16 20:37:19 +02:00
Daniel Winzen 486aeabfd1 Added libsystemd-dev dependency 2019-10-16 20:34:13 +02:00
Daniel Winzen 1137caefe1 Packages were renamed 2019-10-16 19:53:10 +02:00
Daniel Winzen 9595246119 Added make as dependency 2019-10-16 19:50:55 +02:00
Daniel Winzen c1dd567ab2 PHP and Composer need to be installed before we can install phpmyadmin with composer dependencies 2019-10-16 19:40:49 +02:00
Daniel Winzen b40afdf10b Mention new php instances to be enabled 2019-10-16 19:29:51 +02:00
Daniel Winzen 6052e57112 Switch to custom compiled php 2019-10-15 19:37:51 +02:00
Daniel Winzen ee4856e5fc Add noatime to fstab 2019-10-02 20:56:34 +02:00
Daniel Winzen b3289a7a77 Correctly define max opcache optimization level 2019-10-01 22:03:58 +02:00
Daniel Winzen b197767415 Updated nodejs signing key source 2019-09-30 18:54:05 +02:00
Daniel Winzen 2a592893eb Instances creation is now handled via setup.php 2019-09-28 17:57:43 +02:00
Daniel Winzen 4c28d7eddb Added missing libssl-dev dependency 2019-09-23 21:41:08 +02:00
Daniel Winzen 4096b66390 Install composer vai github instead of distro packages to include in chroot 2019-09-23 21:24:08 +02:00
Daniel Winzen 64930b4c5a Bumped db version 2019-09-23 19:41:29 +02:00
Daniel Winzen f9824e45a8 We run less instances now for less memory usage 2019-09-22 22:17:11 +02:00
Daniel Winzen dd00fde24d Update sodium_compat dependency 2019-09-22 22:00:36 +02:00
Daniel Winzen ae925a2000 Allow changing instances + add nginx_rewrites table + optimizations 2019-09-22 21:24:27 +02:00
Daniel Winzen 7ec0f76f35 Updated nginx logrotate 2019-09-07 12:21:00 +02:00
Daniel Winzen 1d71b06887 ngx_brotli repo moved to google 2019-09-06 23:14:20 +02:00
Daniel Winzen 0b61a38c26 Replace debian stock nginx with custom optimized nginx 2019-09-02 19:49:41 +02:00
Daniel Winzen df4c4275c7 Added vm.overcommit_ratio=100 to sysctl to use full memory capacity 2019-08-30 20:19:43 +02:00
Daniel Winzen 42ee1f65f7 Correctly set session path for adminer now running in chroot 2019-08-09 06:01:03 +02:00
Daniel Winzen e950e42f09 Debian packaging is slacking with adminer updates - fetch from git 2019-08-08 21:37:04 +02:00
Daniel Winzen 5252c01f2e libsasl2-modules might not be installed as dependency in some distributions 2019-07-21 15:24:07 +02:00
Daniel Winzen 37cf037a6c Added the new instances to rc.local and README 2019-07-21 12:43:56 +02:00
Daniel Winzen 2f97e826d4 Make only enabled onions clickable in admin + equal instance usage 2019-07-20 14:21:00 +02:00
Daniel Winzen 287eedf318 More tor instances + guard relays for stability and added disk quota 2019-06-30 16:20:06 +02:00
Daniel Winzen 47cf5edbca stripped bash-completion in chroot + added some useful binaries 2019-06-23 09:42:07 +02:00
Daniel Winzen 851a3103be Added canonical tag and store tor/php instance responsibility in db 2019-06-20 18:53:30 +02:00
Daniel Winzen 0462b9a440 Merge pull request #57 from NoahvdAa/patch-1 
Fixed a typo.
 2019-06-16 16:28:37 +02:00
Daniel Winzen e90eab05aa Merge pull request #52 from NoahvdAa/patch-7 
Remove "Happy new year"
 2019-05-27 21:59:22 +02:00
Daniel Winzen b8f4c9b808 Validate RSA keys for correctness which would otherwise crash tor 2019-05-27 21:56:59 +02:00
Daniel Winzen cfcfb075fe Update paragonie/sodium_compat dependency 2019-05-14 21:18:54 +02:00
Daniel Winzen 11c05e8866 Added CloudFlare too many redirects section to FAQ 2019-05-12 09:20:44 +02:00
Daniel Winzen 678ad279ef Optimized admin panel 2019-05-11 22:09:49 +02:00
Daniel Winzen 401b87d3ea Add curve25519-sha256 to KexAlgorithms 2019-05-06 20:05:16 +02:00
Daniel Winzen 270d025e43 Disallow .onion as clearnet domain 2019-04-23 20:04:08 +02:00
Daniel Winzen 47c9490c8b Regularly clean up /var/www/tmp directory 2019-04-10 18:29:12 +02:00
Daniel Winzen bdc8b101d0 Update sodium_compat dependency 2019-04-10 18:27:56 +02:00
Daniel Winzen b7b056badc Show clearnet domain section only if enabled 2019-04-06 21:55:28 +02:00
Daniel Winzen 84dff64e9e Fixed approval SQL query 2019-04-06 21:50:28 +02:00
Daniel Winzen 2b1592cd46 Use own phpmyadmin 2019-03-03 20:26:26 +01:00
Daniel Winzen 980f3e1214 Fixed form action links 2019-02-24 14:07:19 +01:00
Daniel Winzen 121a2a8ac2 Add clearnet domain support 2019-02-23 10:42:44 +01:00
Daniel Winzen 31c6020608 Fixed initial setup not creating config files 2019-02-23 07:11:19 +01:00
Daniel Winzen a520c987e6 Allow adding and removing onion domains 2019-02-22 07:19:27 +01:00
Daniel Winzen d1ea03ac15 Merge pull request #45 from NoahvdAa/patch-6 
"Polished" the index page a bit.
 2019-02-21 21:53:23 +01:00
Daniel Winzen f8b3748668 Allow users to delete their databases 2019-02-21 21:50:23 +01:00
Daniel Winzen c4cf9e7145 Set DOCUMENT_ROOT correctly to make .user.ini files work recursively 2019-02-15 20:05:45 +01:00
Daniel Winzen c219b65b53 Some software requires an IPv4 address and can't handle unix: addresses... 2019-02-12 19:38:21 +01:00
Daniel Winzen 4ff2fae6a5 Introduced second parameter to setup_chroot.sh to copy extra binaries 2019-02-11 07:17:01 +01:00
Daniel Winzen b1bf9eb42b Merge pull request #43 from NoahvdAa/patch-4 
Made link clickable.
 2019-02-03 14:14:49 +01:00
Daniel Winzen 34cbd13d27 Merge pull request #44 from NoahvdAa/patch-5 
Fixed a typo, made a few sentences a bit nicer.
 2019-02-03 14:14:17 +01:00
Daniel Winzen c637c98510 Fixed typo in csrf token hidden input field 2019-01-28 05:48:41 +01:00
Daniel Winzen 22c687b0e0 Fixed syntax error 2019-01-27 18:31:21 +01:00
Daniel Winzen 4aa51f4371 Set default file manager path to /www/ 2019-01-27 17:41:24 +01:00
Daniel Winzen 9c5294e64e Add csrf tokens to all sensitive forms 2019-01-27 17:41:02 +01:00
Daniel Winzen cf83b9901a Merge pull request #42 from NoahvdAa/patch-3 
Added CSRF protection to file manager.
 2019-01-27 16:22:20 +01:00
Daniel Winzen 7da6b8feed Install PHPMyAdmin locally as distributions ship outdated version 2019-01-26 16:48:38 +01:00
Daniel Winzen 7661c0ccdb With more than 10 crashes within 10 minutes we should restart php 2019-01-26 14:17:09 +01:00
Daniel Winzen 7eed4a05d7 hidden service dirs now contain authorized_clients folder 2019-01-25 20:32:35 +01:00
Daniel Winzen e537e06118 Enable exec() related functions since we now have resource control in place 2019-01-22 21:15:32 +01:00
Daniel Winzen bdf26c8d00 Introduce CPU and Memory resource control for php and all child-processes 2019-01-22 21:12:50 +01:00
Daniel Winzen 98d6a46aff Merge pull request #41 from NoahvdAa/patch-2 
Fixed a small typo
 2019-01-20 11:50:31 +01:00
Daniel Winzen 11574e3e3f nproc seems to be a global limit, not per session - increased accoringly 2019-01-08 18:20:24 +01:00
Daniel Winzen 5eab397200 Randomise DB (user)names to reduce attack surface + allow multiple DBs per user 2019-01-07 22:26:33 +01:00
Daniel Winzen 838b6c3b6f disable systemd-resolver and tor@default apparmor profile 2019-01-06 20:35:04 +01:00
Daniel Winzen 74417d1d5b nginx default site is now managed by the script 2019-01-06 19:48:35 +01:00
Daniel Winzen 6a834142ba Fixed typo 2019-01-06 19:44:49 +01:00
Daniel Winzen dfe7f7d9e7 when shell access is enabled, we shouldn't use force-command in sshd_config 2019-01-06 19:35:49 +01:00
Daniel Winzen 09ca89029e apply security restrictions in limits.conf 2019-01-06 19:33:12 +01:00
Daniel Winzen c46a2584fa Add shell access and scp support 2019-01-06 18:20:02 +01:00
Daniel Winzen b5d8b79b8e Disabled STRICT_TRANS_TABLES for compatibility 2019-01-05 12:15:56 +01:00
Daniel Winzen ee7e1d11ca Merge pull request #40 from NoahvdAa/patch-1 
Added the "select all" option to the file manager.
 2019-01-04 21:29:44 +01:00
Daniel Winzen 899da11a56 Merge pull request #38 from NoahvdAa/patch-1 
Fixed a typo
 2019-01-04 09:59:35 +01:00
Daniel Winzen 7e4ed95ba8 Additional direcotries would have to be included in chroots to be useful - removed 2019-01-03 07:20:54 +01:00
Daniel Winzen e536a5c544 Minor nginx config fix 2019-01-01 20:43:21 +01:00
Daniel Winzen cff617379d tmp is created by setup_chroot script already 2019-01-01 14:34:06 +01:00
Daniel Winzen 6b6efc2fc6 Logs are stored outside chroot - don't check existence and let nginx handle it 2019-01-01 13:54:36 +01:00
Daniel Winzen 55bc8cd757 Introduce mysqld socket stream forwarding with nginx for chroot jails 2019-01-01 13:47:30 +01:00
Daniel Winzen 0f38bd2449 Improved privilege separation 2019-01-01 02:24:22 +01:00
Daniel Winzen a5b0de4b07 Added setup_chroot.sh script 2018-12-27 22:32:37 +01:00
Daniel Winzen 91167d1f45 Fix systemd namespace issues taking effect after reboot 2018-12-24 06:27:33 +01:00
Daniel Winzen e0bfc5e633 Our hidden service should run on v3 by default 2018-12-10 16:58:50 +01:00
Daniel Winzen a901e25bb4 Instructions to prepare user disk quota 2018-12-09 12:25:25 +01:00
Daniel Winzen 08cc492b86 New imap.enable_insecure_rsh php.ini option protects against imap_open exploit 
http://php.net/manual/en/imap.configuration.php
 2018-12-08 11:01:06 +01:00
Daniel Winzen 11c055ebcf Remove commeted options 2018-12-07 22:18:49 +01:00
Daniel Winzen 4f6539b31d Introduce systemd.exec restrictions for better security 2018-12-07 21:54:44 +01:00
Daniel Winzen 8e155012a7 Suppress chatty dovecot messages 2018-12-07 21:48:22 +01:00
Daniel Winzen 4b25310396 Simplified sshd_config 2018-12-07 13:25:30 +01:00
Daniel Winzen 756e16b533 Fixed potential race condition pointed out in issue #31 2018-12-06 16:54:35 +01:00