Commit Graph

195 Commits

Author SHA1 Message Date
Jamil
6e38fd558b Revert "(fixed) Don't listen on port 80 if ACME is disabled (#927)" (#930)
This reverts commit bda920a065.
2022-08-19 18:12:28 -07:00
Jamil
41ff3c3b3f Cache node deps; fix minor docs typos (#923)
* Minor typo fixes

* cache node deps

* Remove unneeded script

* Remove unneeded script

* Remove redundant lint-docs step...

* Cache nodejs for static anal

* npm ci before use

* limit markdownlint to docs for now

* Move markdownlint config to root
2022-08-18 21:01:04 -07:00
Jamil
bda920a065 (fixed) Don't listen on port 80 if ACME is disabled (#927)
* don't listen on port 80 if acme is disabled

* restart nginx when changing acme settings
2022-08-18 18:34:04 -07:00
Jamil
91b64638ea Revert "don't listen on port 80 if acme is disabled (#921)" (#925)
This reverts commit c38f57ca16.
2022-08-17 20:24:32 -07:00
Jamil
c38f57ca16 don't listen on port 80 if acme is disabled (#921) 2022-08-17 14:30:38 -07:00
Jamil
db785d7ba2 Allow disabling the configuration of devices by unprivileged users (#909)
* Add all the config options, test should fail

* Don't show fields that can't be edited

* Remove unneeded leading match

* use str not ~r

* Choose Conf.get or @allow

* Add Docker env vars
2022-08-10 15:56:15 -07:00
Jason G
36c605c36f Docs fixes (#911)
* update architecture diagram

* fix edit this page link

* fix keywords not showing

* remove trailing slash
2022-08-10 14:51:20 -07:00
Jason G
72e0458a73 Docs - add mfa instructions (#904)
* add mfa docs

* add client instructions

* ran npm in wrong folder

* grammar and titles

* broken link

* Update docs/docs/authenticate/multi-factor.md

Co-authored-by: Jamil <jamilbk@users.noreply.github.com>
Signed-off-by: Jason G <jason@firez.one>

* Update docs/docs/authenticate/multi-factor.md

Co-authored-by: Jamil <jamilbk@users.noreply.github.com>
Signed-off-by: Jason G <jason@firez.one>

* Update docs/docs/user-guides/client-instructions.md

Co-authored-by: Jamil <jamilbk@users.noreply.github.com>
Signed-off-by: Jason G <jason@firez.one>

* Apply suggestions from code review

Co-authored-by: Jamil <jamilbk@users.noreply.github.com>
Signed-off-by: Jason G <jason@firez.one>

* remove restart cmd

* update example on default.rb

* Update Gemfile.lock

* Update docs/docs/authenticate/README.md

Co-authored-by: Jamil <jamilbk@users.noreply.github.com>
Signed-off-by: Jason G <jason@firez.one>

* fix errors

* Update docs/docs/authenticate/README.md

Signed-off-by: Jamil <jamilbk@users.noreply.github.com>

Co-authored-by: Jamil <jamilbk@users.noreply.github.com>
2022-08-09 07:25:13 -07:00
Jamil
4d73df77bc Fix wording (#895) 2022-08-08 10:47:13 -07:00
Jamil
a6927b87d2 Remove docs link for older versions
Signed-off-by: Jamil <jamilbk@users.noreply.github.com>
2022-08-06 12:32:42 -07:00
Jamil
30cc7d2552 Enable HSTS for Nginx (#889)
* Enable HSTS for Nginx

* Fix nesting hash
2022-08-03 16:16:51 -07:00
Jamil
34902052eb Fix algolia searchbar (#884) 2022-08-01 20:36:33 -07:00
Jamil
01fa25548e Fix API key (#883) 2022-08-01 20:08:05 -07:00
Po Chen
89d74ba683 bump docusaurus (#882) 2022-08-01 19:51:41 -07:00
Gabi
b2e292d4fd remove http-related nginx config (#866)
* remove http-related nginx config

* Add more details about Nginx and reverse proxies to upgrade notes

Co-authored-by: Jamil Bou Kheir <jamilbk@users.noreply.github.com>
2022-07-29 11:50:31 -07:00
Andrew
5487a36e79 Restore the manual install steps to install server docs. (#873)
* Improve install docs some & restore the manual install steps

* Fix docs lint

* Remove space in RedHat

* fix typo
2022-07-28 14:39:00 -07:00
Jamil
0c50ac677d Fix new docs links (#865) 2022-07-27 20:48:39 -07:00
Jamil
9a94e12f0b docs older versions (#860) 2022-07-27 07:40:11 -07:00
Jamil
dafbc54b09 Fix minor mistakes (#859) 2022-07-27 07:34:34 -07:00
Jamil
b5d5028b9f prefix with sudo (#853)
* prefix with sudo

* Update docs/docs/deploy/README.md

Co-authored-by: Andrew <andrew@firezone.dev>

Co-authored-by: Andrew <andrew@firezone.dev>
2022-07-26 11:53:40 -07:00
Jason G
39b1555ee2 update navbar beta link (#850) 2022-07-26 10:31:42 -07:00
Jamil
f590364ecd Fix empty OIDC config prevents fresh application from starting (#846)
* Fix master build

* use JSON for openid_connect_providers

* (hopefully) print errors to STDOUT

* set TERMINFO

* Upload built artifact before functional testing

* D'oh

* Revert logging change
2022-07-25 19:21:41 -07:00
Gabi
23db81fae5 Build/729/different reverse proxy (#795)
* Removes disabling SSL and adds remote_ip lib

* Fix to use remote_ip when not proxy

* Add trusted_proxy to config

* Add proxy_forwarded prameter to config and improve logging

* Fix trusted_proxy list parsing

* Fix ip formatting

* Expect JSON array for trusted_proxy

* fix proxied-related plug loading runtime

* fix typo

* checkpoint

* add traefik draft

* add logging

* woops

* adding logging for debug

* rollback debugging logs

* docs refinement

* Fix markdown lints

* remove disabling proxy_forwarded option for prod

* rename, improve docs and add clients config

* change dev_secure to secure_cookies

* Set proxy_forwarded as true by default

* remove proxy_forwarded in favor of nil trusted_proxies

* renaming and doc improvement

* build fix

* jamilbk changes

Co-authored-by: Jamil Bou Kheir <jamilbk@users.noreply.github.com>
2022-07-25 11:47:58 -07:00
Jamil
ab70facee5 Better document telemetry (#658)
* WIP document telemetry [no ci]

* add telemetry doc

* Update docs/docs/reference/telemetry.md

* Update docs/docs/reference/telemetry.md

Co-authored-by: Jason Gong <52545545+gongjason@users.noreply.github.com>
2022-07-25 11:47:58 -07:00
Jason G
5948089cd4 Add onelogin to authentication docs (#829)
* onelogin instructions and link update

* add onelogin to readme

* update help instructions

* code readability

* auth method to POST

* sidebar ordering

* resolve review comments

* shell -> ruby
2022-07-25 11:47:58 -07:00
Jamil
1517ab3a13 Add telemetry (#834) 2022-07-25 11:47:58 -07:00
Jamil
0e373e9731 Enable Ruby / Elixir code highlighting (#832) 2022-07-25 11:47:58 -07:00
Jason G
0239e12ede Minor fixes and polish to docs (#831)
* remove duplicate files for nftables

* github logo in navbar

* add company links to footer

* use auto-generated indexes

* make use of swizzling

* SEO

* lint error
2022-07-25 11:47:58 -07:00
Andrew
b70b65a408 Make phoenix crash detection configurable. (#813)
* Add toggle to firezone config for phoenix crash detection

* Add config option to docs & polish table layout a bit

* Add comment explaining crash detection toggle
2022-07-25 11:47:58 -07:00
Andrew
2f11771d59 Update install script and docs for Cloudsmith package repo (#809)
* Update install script to setup and install firezone from cloudsmith repo

* silence source repo file not found when removing

* Update docs with cloudsmith repo instructions, add feedback message to uninstall

* Fix supported platforms link

* add upgrade note to post install pkg script & only grep config file for check if it exists

* Clean up install server doc links

* use apt-get instead of apt, add RHEL 7,8,9 & OLS 7,8,9

* Use more cross platform compatible terminal text styles
2022-07-25 11:47:58 -07:00
Gabi
76f6e53cfd NFTables fixes (#804) 2022-07-25 11:47:58 -07:00
Jamil Bou Kheir
ef5630f94f Fix linter error 2022-07-25 11:47:58 -07:00
Jamil
0c433b848f Remove old interface when changing names (#805)
* Remove old interface if it's going to be changed

* Remove old interface
2022-07-25 11:47:58 -07:00
Andrew
69a4412d75 Remove pre-configured Okta & Google OAuth providers (#793)
* Remove pre-configured Okta & Google OAuth providers, update docs

* Upgrade docs clarifications & remove unused auth code for pre-configured providers (google/okta)

* Fix docs url for upgrade note
2022-07-25 11:47:58 -07:00
Jamil
4687220684 Acme support (#779)
* Bump nodejs to 16 lts (#772)

* Move docs to Docusaurus (#726)

* wait 10

Co-authored-by: Andrew <andrew@firezone.dev>
Co-authored-by: Chetan Verma <chetan61verma@gmail.com>
2022-07-25 11:47:58 -07:00
Andrew
3e39339643 Improve user vpn connection status ui (#784)
* Update VPN Connection column with status tag, update docs explaining tags under authenticate section

* Fix events test warning

* Fix formatting

* Fix docs lint

* Move vpn status doc to fix doc lint

* Use div instead of label for tag root, update oidc language

* Refactor vpn status component for pr feedback

* use a component instead of a live one
2022-07-25 11:47:58 -07:00
Andrew
6dbd5cc59d Update egress rules user guide with user scope ui (#782)
* Update egress rules user guide with user scope ui

* Fix user scope description

* Update egress rules view with correct user scope text & corresponding doc img

* Revert previous doc text
2022-07-25 11:47:58 -07:00
Chetan Verma
afefde7110 Move docs to Docusaurus (#726) 2022-07-25 11:47:58 -07:00
Andrew
a75dfa3073 Add redirect routes for oidc signin links by provider (#770)
* Add redirect routes for oidc signin links by provider

* whitespace fix

* restore comment

* Add oidc redirect route helper to auth template for sign-in buttons

* Update docs to mention pretty URLs.

* Fix docs
2022-07-25 11:47:58 -07:00
Andrew
d49e44c3fc Update rules UI to include optional user scope (#764)
* Add optional user scope field to Rules UI

* Build a users map and use for rule list table

* Include current user in user scope options

* Add user scope tests to live rule view test

* Finish adding/removing scoped rule tests

* Add rules number field to user detail view with link to rules page

* Woops, forgot to define destination in remove scope test

* Only add rules path to user_details template for auth'd views.

* Use socket for rules_path router & remove user options logic from view

* Update fw rules guide to explain user scoped rules
2022-07-25 11:47:58 -07:00
Jamil
47956c8018 Fix google redirect uri (#774)
* Google requires trailing slack in redirect_uri

* Bump deps
2022-07-01 00:03:24 -07:00
Jamil
f461ef84c6 Option to disable masquerade (#769)
* Option to disable masquerade

Fixes #666

* Fix markdown lint issues

* Reflow text

* Fix markdownlint errors

* Clean up conditional
2022-06-29 17:21:37 -07:00
Jamil
627382fe69 Trim whitespace (#767) 2022-06-28 17:15:21 -07:00
Chris
13881c0d15 Linux clients - nmcli instructions (#756)
* change client instruction description - ideally admins should not be generating configurations for users and sharing them

* add instructions for importing WireGuard configuration files using nmcli for Linux users

* add instructions for Linux clients to automatically connect using nmcli
2022-06-28 11:18:19 -07:00
Chris
4d2e3ac08a Add Firewall section to the reference docs area with firewall template (#758)
* add nftables configuration template and firewall section to reference

* add note about firezone managed rules being cleared
2022-06-28 11:16:29 -07:00
Jamil
5fc2ae12fe Update running-sql-queries.md 2022-06-24 16:47:31 -07:00
Chris
7f2bf0c598 add instructions to take a backup with pg_dump (#754) 2022-06-24 16:39:41 -07:00
Jamil
834a1f5191 Update index.md (#749) 2022-06-22 23:13:55 -07:00
Jamil
42dc05c7e7 set default MTU to 1280 (#742) 2022-06-21 17:31:40 -07:00
Jamil
f84df97c86 Update install script to support Ubuntu 22.04 (#733) 2022-06-18 10:52:46 -04:00