Commit Graph

482 Commits

Author SHA1 Message Date
Jamil
27e6ddc293 Fix configure bug for admins (#1045)
* Allow admins to configure devices

* Disable SSL certs

* Update scripts/install.sh

Signed-off-by: Jamil <jamilbk@users.noreply.github.com>

Signed-off-by: Jamil <jamilbk@users.noreply.github.com>
2022-10-18 22:20:16 -07:00
Jamil
0455ee8373 Use /contact/sales over typeform (#1039) 2022-10-18 08:17:10 -07:00
Jamil
3bc19c4c9f allow dns hosts; fix notifications concurrency issues (#1027)
* allow dns hosts; fix notifications concurrency issues

* Make notifications tests a little more robust
2022-10-16 13:44:59 -07:00
Jamil
dd11c728b0 Better validate OIDC and SAML configs (#1026)
* Bump postgres to release; Note on Caddy cert

* default auto_create_users

* Validate SAML and OIDC configs better

* Fix failing test
2022-10-15 18:33:32 -07:00
Jamil
0cf0a82194 Swallow OIDC errors (#1025) 2022-10-14 16:05:10 -07:00
Jamil
aa67b689e5 Add keycloak dev (#1023)
* Add keycloak dev

* Fix test using string keys
2022-10-14 14:19:24 -07:00
Jamil
d963929c07 0.6.0 (#1004)
* 0.6.0

* Make OIDC and SAML user provisioning configurable per-provider (#1015)

* Got ugly migration to work

* Move auto_create_users to per-provider config

* Update deps to bust cache

* Update Process sleep

* Update docs with Auto create users

* working migration script (#1013)

* Add telem for Docker and SAML (#1020)

* Add telem for Docker and SAML

* Omit unneeded format
2022-10-13 15:22:53 -07:00
Jamil
448ef072e5 Docs sec controls (#1018)
* add security controls document

* Add sec controls doc
2022-10-13 12:59:41 -07:00
Jamil
08bf880547 Move persistent term cache to cachex (#1003)
* Move persistent term cache to cachex

* Rename Conf -> Configurations
2022-10-05 05:28:50 -05:00
Jamil
185790dd0f Fix error due to updated LiveView (#1001) 2022-10-03 22:47:34 -05:00
Jamil
6cb6cb1f93 Favor live redirects over patches (#985)
* Checkpoint

* Favor redirect over patch

* Fix tests
2022-09-27 10:15:48 -07:00
Jamil
820abe170c Upgrade to LiveView 0.18 and use replace: true (#980)
* Upgrade to LiveView 0.18 and use replace: true

* Fetch test deps too

* Fix test with new liveview
2022-09-24 12:39:05 -07:00
Jamil
ae111ad437 Add websocket connection troubleshooting section (#977)
* Remove markdown exceptions for table and code blocks

* Fix Zitadel docs errors

* Add trailingSlash: false to prevent 404 bug
2022-09-23 15:35:01 -07:00
Jamil
50845b0ede Open in new tab (#966) 2022-09-15 18:10:23 -07:00
Jamil
aab77656a7 Add admin_count and active_device_count (#956)
* install, compile deps for test env

* Add admin_count and active_device_counts to telemetry

* Update apps/fz_http/test/fz_http/devices_test.exs

Signed-off-by: Jamil <jamilbk@users.noreply.github.com>

Signed-off-by: Jamil <jamilbk@users.noreply.github.com>
2022-09-13 08:50:38 -07:00
Jamil
70e4bf36c1 Add subscribe for updates link (#958) 2022-09-13 08:49:46 -07:00
Jamil
7861977379 (Supercedes #950) Bump elixir (#953)
* Bump elixir to 1.14.0

* gen_env -> compile_env

* Update Dockerfiles

* Update software
2022-09-12 14:40:16 -07:00
Jamil
ea67535f9a Bump runtimes; deps; postgres 13.5 -> 13.8 (#944)
* Bump deps; runtimes; pg to 13.8

* bump npm deps

* Bump nginx

* Use PCRE over PCRE2
2022-09-01 21:08:37 -07:00
Jamil
f384db2444 Trim whitespace on string fields (#941)
* Trim whitespace on string fields

* Update apps/fz_http/lib/fz_http/shared_validators.ex

Signed-off-by: Jamil <jamilbk@users.noreply.github.com>

Signed-off-by: Jamil <jamilbk@users.noreply.github.com>
2022-08-30 14:26:40 -07:00
Gabi
40120b5b26 remove ct != established from rules (#940) 2022-08-30 13:18:33 -07:00
Jamil
a3f5e0613f Prevent autocompleting passwords in FF (#936) 2022-08-29 23:04:53 -07:00
Jamil
bc7bdb3386 Add ip exhaustion error to base to show when fields are hidden (#935)
* Add ip exhaustion error to base to show when fields are hidden

* Add tmp as an empty dir

* Bump deps
2022-08-29 22:32:05 -07:00
Jamil
06e3956317 create-or-reset-admin resets admin role to :admin (#922) 2022-08-17 19:53:29 -07:00
Jamil
5d113ba251 Fix rules form (#917) 2022-08-11 17:18:50 -07:00
Jamil
a4340be61e Fix endpoint placeholder & security overflow (#916)
* Use consistent placeholders

* Remove redundant text and overflow-x
2022-08-11 16:25:59 -07:00
Jamil
db785d7ba2 Allow disabling the configuration of devices by unprivileged users (#909)
* Add all the config options, test should fail

* Don't show fields that can't be edited

* Remove unneeded leading match

* use str not ~r

* Choose Conf.get or @allow

* Add Docker env vars
2022-08-10 15:56:15 -07:00
Jamil
5e60d2b442 Bump Wireguardex (#912) 2022-08-10 14:50:47 -07:00
Jamil
ebb3d383d7 remove beta program (#908) 2022-08-09 11:37:54 -07:00
Jamil
0a7c16af17 Bump Wireguardex (#906) 2022-08-09 11:09:44 -07:00
Jamil
5617a72910 Clarify when UI config is overriding ENV config (#872)
* Some minor clarification and UI polish

* Pull overrides from changeset
2022-08-08 21:14:06 -07:00
Gabi
f03617b07f nft rules match wireguard interface name (#901) 2022-08-08 12:56:33 -07:00
Gabi
038f025220 Re-add port-based rules and gate them behind kernel version (#890)
* Revert "Revert "Add initial rough version of port based rules (#874)" (#888)"

This reverts commit 58e48457ad.

* gate port rule depending on kernel version

* fix version comparision

* allow for no port-related values when creating rule event

* Fix struct accessor

* fix getting port type in rule list component

* small fix

* oops

* hide port-related display on disabled port-rules

* Gate table headers

* update port-based rule for boot-up only and update ui

* fix tests

* fix disable button

* Minor UI and wording update

* Add firewall functional tests

* fix functional testing

* add debug log for functional debugging

* fix

* Fix functional testing by preventing overlap

* remove sudo from functional firewall tests

* fix error message

* fix firewall ci

* re-adding sudo to functional test

* fix expected results in functional test

* Apply suggestions

* Update apps/fz_http/lib/fz_http_web/live/rule_live/rule_list_component.html.heex

Signed-off-by: Jamil <jamilbk@users.noreply.github.com>

Co-authored-by: Jamil <jamilbk@users.noreply.github.com>
2022-08-05 16:11:33 -07:00
Po Chen
4a2ab72eec target blank (#893) 2022-08-05 08:53:53 -07:00
Jamil
d821ce8bf4 Move page subheaders under titles; minor cleanup (#892) 2022-08-04 09:30:42 -07:00
Jamil
58e48457ad Revert "Add initial rough version of port based rules (#874)" (#888)
This reverts commit 55a311adec.
2022-08-03 12:34:30 -07:00
Andrew
4ef461a7d0 Add notifications live view. (#867)
* Remove events module from UI and trigger events on DB notifies

* Add tests and take out error flash from ui for now.

* Use FzHttp.Devices.decode in devices/rules tests and remove commented line

* address PR feedback & fix race condition in interface test

* Clean up events & notifier based on PR feedback

* Add notifications live view, broadcast them through the notification channel

* Notification improvements (#869)

* Flatten Notifications to make it more general and add timestamp

* Remove wildcard from notification channel in UserSocket

* Implement clear button for clearing notifications. Add icon helper

* Add broadcast helper

* UI fixes for notifications badge

* Add notifications live view tests

* Fix tests

* fix docs link, deleted wrong one in the merge!

* clean up tests based on pr feedback

Co-authored-by: Po Chen <chenpaul914@gmail.com>
2022-08-01 21:16:31 -07:00
Gabi
55a311adec Add initial rough version of port based rules (#874)
* Add initial rough version of port based rules

* fix tests

* nftables refactor

* UI/database improvements

* UI and Int4Range improvements

* Multiple improvements

* Add tests for port rules

* minor refactor and update error message

* Fix error message for tests

* int4range refactor
2022-08-01 20:57:55 -07:00
Andrew
2c88653c9a Trigger events on device/rule/user insert and delete instead of from UI actions. (#835)
* Remove events module from UI and trigger events on DB notifies

* Add tests and take out error flash from ui for now.

* Use FzHttp.Devices.decode in devices/rules tests and remove commented line

* address PR feedback & fix race condition in interface test

* Clean up events & notifier based on PR feedback

* Reduce wait time for pg notifies

* Test Notifier event handling instead of using unboxed sandbox runs
2022-08-01 15:02:46 -07:00
Jamil
e0e780b7fa Go easy on the x-forwarded-for header (#877) 2022-07-29 17:17:00 -07:00
Po Chen
30876da922 Reduce cast coverage (#851)
* remove cast role in create

* remove cast in update

this will fail

* Revert "remove cast role in create"

This reverts commit 217c62170f1f09987c6adbf7a5b3f467dd84034c.

* remove role in generic cast

* separate role and sign in token out from generic update

* handle empty value in put_password_hash

* separate last signed in at

* remove usage of removed changeset function

* fix clear sign in token

* improve tests

* fix tests

* split update user

* require password change

* fix test

* remove unused env var
2022-07-29 08:44:25 -07:00
Po Chen
4ba93bdce2 Fix config ui out of sync (#875)
* fix config ui out of sync

* fix and add more tests

* simplify tests
2022-07-29 08:22:27 -07:00
Gabi
493709858d fixes parsing for ipv6 (#871) 2022-07-28 14:38:13 -07:00
Jamil
0c50ac677d Fix new docs links (#865) 2022-07-27 20:48:39 -07:00
Jamil
c81650a49f Add uid (#861) 2022-07-27 17:28:14 -07:00
Jamil
3e765139ca Fix customization typo (#857) 2022-07-26 23:59:09 -07:00
Jamil
3c69a28d16 Add release 0.5.0 announcement (#856) 2022-07-26 23:58:57 -07:00
Andrew
61c9ea5e98 fix server tests (#854) 2022-07-26 13:12:27 -07:00
Jamil
f590364ecd Fix empty OIDC config prevents fresh application from starting (#846)
* Fix master build

* use JSON for openid_connect_providers

* (hopefully) print errors to STDOUT

* set TERMINFO

* Upload built artifact before functional testing

* D'oh

* Revert logging change
2022-07-25 19:21:41 -07:00
Po Chen
5218bd0404 Remove no longer needed compilers declaration (#848) 2022-07-25 16:29:01 -07:00
Jamil
99867ce3b1 revert removing the x-forwarded-for header (#837)
* revert removing the x-forwarded-for header

* Clean up remote_ip headers
2022-07-25 11:47:58 -07:00