327 Commits

Author SHA1 Message Date
Jamil
dafbc54b09 Fix minor mistakes (#859) 2022-07-27 07:34:34 -07:00
Jamil
b5d5028b9f prefix with sudo (#853)
* prefix with sudo

* Update docs/docs/deploy/README.md

Co-authored-by: Andrew <andrew@firezone.dev>

Co-authored-by: Andrew <andrew@firezone.dev>
2022-07-26 11:53:40 -07:00
Jason G
39b1555ee2 update navbar beta link (#850) 2022-07-26 10:31:42 -07:00
Jamil
f590364ecd Fix empty OIDC config prevents fresh application from starting (#846)
* Fix master build

* use JSON for openid_connect_providers

* (hopefully) print errors to STDOUT

* set TERMINFO

* Upload built artifact before functional testing

* D'oh

* Revert logging change
2022-07-25 19:21:41 -07:00
Gabi
23db81fae5 Build/729/different reverse proxy (#795)
* Removes disabling SSL and adds remote_ip lib

* Fix to use remote_ip when not proxy

* Add trusted_proxy to config

* Add proxy_forwarded prameter to config and improve logging

* Fix trusted_proxy list parsing

* Fix ip formatting

* Expect JSON array for trusted_proxy

* fix proxied-related plug loading runtime

* fix typo

* checkpoint

* add traefik draft

* add logging

* woops

* adding logging for debug

* rollback debugging logs

* docs refinement

* Fix markdown lints

* remove disabling proxy_forwarded option for prod

* rename, improve docs and add clients config

* change dev_secure to secure_cookies

* Set proxy_forwarded as true by default

* remove proxy_forwarded in favor of nil trusted_proxies

* renaming and doc improvement

* build fix

* jamilbk changes

Co-authored-by: Jamil Bou Kheir <jamilbk@users.noreply.github.com>
2022-07-25 11:47:58 -07:00
Jamil
ab70facee5 Better document telemetry (#658)
* WIP document telemetry [no ci]

* add telemetry doc

* Update docs/docs/reference/telemetry.md

* Update docs/docs/reference/telemetry.md

Co-authored-by: Jason Gong <52545545+gongjason@users.noreply.github.com>
2022-07-25 11:47:58 -07:00
Jason G
5948089cd4 Add onelogin to authentication docs (#829)
* onelogin instructions and link update

* add onelogin to readme

* update help instructions

* code readability

* auth method to POST

* sidebar ordering

* resolve review comments

* shell -> ruby
2022-07-25 11:47:58 -07:00
Jamil
1517ab3a13 Add telemetry (#834) 2022-07-25 11:47:58 -07:00
Jamil
0e373e9731 Enable Ruby / Elixir code highlighting (#832) 2022-07-25 11:47:58 -07:00
Jason G
0239e12ede Minor fixes and polish to docs (#831)
* remove duplicate files for nftables

* github logo in navbar

* add company links to footer

* use auto-generated indexes

* make use of swizzling

* SEO

* lint error
2022-07-25 11:47:58 -07:00
Andrew
b70b65a408 Make phoenix crash detection configurable. (#813)
* Add toggle to firezone config for phoenix crash detection

* Add config option to docs & polish table layout a bit

* Add comment explaining crash detection toggle
2022-07-25 11:47:58 -07:00
Andrew
2f11771d59 Update install script and docs for Cloudsmith package repo (#809)
* Update install script to setup and install firezone from cloudsmith repo

* silence source repo file not found when removing

* Update docs with cloudsmith repo instructions, add feedback message to uninstall

* Fix supported platforms link

* add upgrade note to post install pkg script & only grep config file for check if it exists

* Clean up install server doc links

* use apt-get instead of apt, add RHEL 7,8,9 & OLS 7,8,9

* Use more cross platform compatible terminal text styles
2022-07-25 11:47:58 -07:00
Gabi
76f6e53cfd NFTables fixes (#804) 2022-07-25 11:47:58 -07:00
Jamil Bou Kheir
ef5630f94f Fix linter error 2022-07-25 11:47:58 -07:00
Jamil
0c433b848f Remove old interface when changing names (#805)
* Remove old interface if it's going to be changed

* Remove old interface
2022-07-25 11:47:58 -07:00
Andrew
69a4412d75 Remove pre-configured Okta & Google OAuth providers (#793)
* Remove pre-configured Okta & Google OAuth providers, update docs

* Upgrade docs clarifications & remove unused auth code for pre-configured providers (google/okta)

* Fix docs url for upgrade note
2022-07-25 11:47:58 -07:00
Jamil
4687220684 Acme support (#779)
* Bump nodejs to 16 lts (#772)

* Move docs to Docusaurus (#726)

* wait 10

Co-authored-by: Andrew <andrew@firezone.dev>
Co-authored-by: Chetan Verma <chetan61verma@gmail.com>
2022-07-25 11:47:58 -07:00
Andrew
3e39339643 Improve user vpn connection status ui (#784)
* Update VPN Connection column with status tag, update docs explaining tags under authenticate section

* Fix events test warning

* Fix formatting

* Fix docs lint

* Move vpn status doc to fix doc lint

* Use div instead of label for tag root, update oidc language

* Refactor vpn status component for pr feedback

* use a component instead of a live one
2022-07-25 11:47:58 -07:00
Andrew
6dbd5cc59d Update egress rules user guide with user scope ui (#782)
* Update egress rules user guide with user scope ui

* Fix user scope description

* Update egress rules view with correct user scope text & corresponding doc img

* Revert previous doc text
2022-07-25 11:47:58 -07:00
Chetan Verma
afefde7110 Move docs to Docusaurus (#726) 2022-07-25 11:47:58 -07:00
Andrew
a75dfa3073 Add redirect routes for oidc signin links by provider (#770)
* Add redirect routes for oidc signin links by provider

* whitespace fix

* restore comment

* Add oidc redirect route helper to auth template for sign-in buttons

* Update docs to mention pretty URLs.

* Fix docs
2022-07-25 11:47:58 -07:00
Andrew
d49e44c3fc Update rules UI to include optional user scope (#764)
* Add optional user scope field to Rules UI

* Build a users map and use for rule list table

* Include current user in user scope options

* Add user scope tests to live rule view test

* Finish adding/removing scoped rule tests

* Add rules number field to user detail view with link to rules page

* Woops, forgot to define destination in remove scope test

* Only add rules path to user_details template for auth'd views.

* Use socket for rules_path router & remove user options logic from view

* Update fw rules guide to explain user scoped rules
2022-07-25 11:47:58 -07:00
Jamil
47956c8018 Fix google redirect uri (#774)
* Google requires trailing slack in redirect_uri

* Bump deps
2022-07-01 00:03:24 -07:00
Jamil
f461ef84c6 Option to disable masquerade (#769)
* Option to disable masquerade

Fixes #666

* Fix markdown lint issues

* Reflow text

* Fix markdownlint errors

* Clean up conditional
2022-06-29 17:21:37 -07:00
Jamil
627382fe69 Trim whitespace (#767) 2022-06-28 17:15:21 -07:00
Chris
13881c0d15 Linux clients - nmcli instructions (#756)
* change client instruction description - ideally admins should not be generating configurations for users and sharing them

* add instructions for importing WireGuard configuration files using nmcli for Linux users

* add instructions for Linux clients to automatically connect using nmcli
2022-06-28 11:18:19 -07:00
Chris
4d2e3ac08a Add Firewall section to the reference docs area with firewall template (#758)
* add nftables configuration template and firewall section to reference

* add note about firezone managed rules being cleared
2022-06-28 11:16:29 -07:00
Jamil
5fc2ae12fe Update running-sql-queries.md 2022-06-24 16:47:31 -07:00
Chris
7f2bf0c598 add instructions to take a backup with pg_dump (#754) 2022-06-24 16:39:41 -07:00
Jamil
834a1f5191 Update index.md (#749) 2022-06-22 23:13:55 -07:00
Jamil
42dc05c7e7 set default MTU to 1280 (#742) 2022-06-21 17:31:40 -07:00
Jamil
f84df97c86 Update install script to support Ubuntu 22.04 (#733) 2022-06-18 10:52:46 -04:00
Jamil
e6adc0fc92 Allow option to disable auto-creating OIDC users (#728)
* Allow option to disable auto-creating OIDC users

* Po's comments
2022-06-18 10:19:05 -04:00
Jamil
f26cca54b4 Allow disabling the VPN session disabling through OIDC (#727)
* Allow disabling the VPN session disabling through OIDC

* More debugging

* Update docs/docs/authenticate/index.md

* Update omnibus/cookbooks/firezone/attributes/default.rb

* Update apps/fz_http/lib/fz_http_web/live/hooks/live_auth.ex

Co-authored-by: Andrew <andrew@firezone.dev>

Co-authored-by: Andrew <andrew@firezone.dev>
2022-06-17 10:15:41 -07:00
Chetan Verma
12a28b6232 Code Highlight Changes (#712) 2022-06-14 17:33:57 -07:00
lilibobear
21e9c1cebb Removed sentence and updated Heading (#709) 2022-06-14 13:09:12 -07:00
Jamil
221739edeb 0.4.0 (#688)
* Bump npm

* Bump deps for dependabot issues

* MFA (#660)

* 2fa wip

add encrypted map

gen schema

add nimble_totp

add module doc

add qrusty

bump base to enable use of qrusty

requires a newer version of glibc

Revert "add qrusty"

This reverts commit 27eaf7864ea98578186c53ed4c5f650e244e8ede.

cannot be used on bionic

add eqrcode

scaffold

extract renderQR

Revert "add eqrcode"

This reverts commit fe6f74f18f13dfcc92dbdace657d194e5536e164.

use frontend qr code generation

display MFA methods

add description

* wip

* finish mfa totp addition workflow

* use real user

* allow deleting authenticator

* use valid? and :since

* make credo happy

* use mfa

* make credo happy

* add account page for unprivileged users

* eof

* add unit tests

* add integration tests

* Workaround for SSH dropping by not using random port (#697)

* Bump npm

* Bump deps for dependabot issues

* Workaround for SSH dropping by not using random port

Fixes #478

Co-authored-by: Jamil Bou Kheir <jamilbk@users.noreply.github.com>

* Update repo README (#700)

* update main readme

* add link

* update badges

* remove redundant copy

* Fix show-config to display current config (#703)

Fixes #553

* Minor MFA fixes (#704)

* Fix conflicting cache-control header (#706)

* Add manual refresh (#705)

* Add manual refresh

* Align button right

Co-authored-by: Jamil Bou Kheir <jamilbk@users.noreply.github.com>

Co-authored-by: Po Chen <chenpaul914@gmail.com>
Co-authored-by: Gabi <gabriel@firezone.dev>
Co-authored-by: Jason G <52545545+gongjason@users.noreply.github.com>
2022-06-14 09:19:56 -07:00
Jason G
5e16a0c849 Docs - OIDC instructions (#615)
* add azure ad docs

* re-add idp instructions

* update azure AD doc

* edit google auth doc for oidc

* update okta documentation for oidc

* update azure gif

* fix lint errors

* title case

* update for review notes

* changing references of base URL to external URL

* make notes consistent to discourage basic OAuth vs OIDC

* add offline_access scope for azure

* wip upgrade docs

* update azure doc and upgrade instructions

* update Okta doc

* trailing whitespace

* add docs for offline access

* consistent code placeholder formatting

* update upgrade docs

* update image title
2022-06-13 08:38:10 -07:00
Jason G
5da7f48449 Docs style update (#674)
* improve text readability

* title font weight

* improve hover look

* font size and colors

* wip logo redo

* site nav font size

* Styled Docs Navigation

* Styling Select Version

* Custom Header Changes

* Button Style Update

* Build Correction

* Major Styling Updates

* Change Aux Link

* Styling Updates

* Changes

* fix links in nav

* inter -> Fira sans + mono

* Pre Commit Run

Co-authored-by: Chetan Verma <chetan61verma@gmail.com>
2022-06-08 11:43:35 -07:00
Jason G
8576d874a3 Improve deployment docs (#673)
* simplify deployment instructions

* fix lint error

* add troubleshooting section

* additional server instrucrtions

* clarify supported distros in intro

* punctuation

* upgrade to 0.3.17

* clarifications from review

@jamilbk changed based on your comments. There was a section about upgrading that was supposed to be in another branch (OIDC). I removed that.

@lilibobear added a screenshot

* add note for ssh interruptions during install

* link to github issue for ssh interrupt

* review note fixes

* testing signed commit

* update gpg email
2022-06-08 04:41:05 -07:00
Jamil
b3b5f6e9b2 Fix file and directory locations (#682) 2022-06-07 12:24:02 -07:00
Chris
d4bc8d559f Add configuration option to allow the NGINX vhosts to listen for IPv6 connections in addition to IPv4 (#657) 2022-05-29 14:52:58 -07:00
Po Chen
d99f6b4fa6 Truncate device name to 15 characters (#648)
* truncate device name with a hash

* add test

* make linter happy
2022-05-25 22:50:22 -07:00
Jason G
397c20d213 Docs - update add and edit device instructions (#614)
* update device settings instructions

* wording tweak
2022-05-25 09:44:08 -07:00
Jamil
cd85b0847a Update README.md 2022-05-23 13:59:16 -07:00
Jamil
4a601800ac Update README.md 2022-05-23 12:04:00 -07:00
Jamil
500faf813a Bump all runtimes; use simpler version function for app version (#634) 2022-05-19 07:38:16 -07:00
Jamil
ab6463a4af Fix reverse tunnel docs (#613) 2022-05-17 15:59:48 -07:00
Jamil
0ded5d97ba Add file locations to docs (#607)
* Add phoenix listen address

* Fix listen address

* Add file locations to docs
2022-05-17 11:28:22 -07:00
Jamil
b91848d756 Add phoenix listen address (#604)
* Add phoenix listen address

* Fix listen address
2022-05-17 11:27:49 -07:00