Po Chen
bfbb671d32
Docker DEV ( #737 )
2022-07-25 11:47:58 -07:00
Jamil
55a19c994c
Remove nodejs and python from build ( #796 )
...
* Try removing nodejs
* Add nodejs plugin
* Remove unused nodejs and python builds
* skip adding nodejs plugin
2022-07-25 11:47:58 -07:00
Andrew
69a4412d75
Remove pre-configured Okta & Google OAuth providers ( #793 )
...
* Remove pre-configured Okta & Google OAuth providers, update docs
* Upgrade docs clarifications & remove unused auth code for pre-configured providers (google/okta)
* Fix docs url for upgrade note
2022-07-25 11:47:58 -07:00
Po Chen
48d8ea75a9
Implement PKCE ( #789 )
...
* use to_existing_atom
* implement pkce
* fix and add tests
* Update apps/fz_http/lib/fz_http_web/controllers/auth_controller.ex
Co-authored-by: Jamil <jamilbk@users.noreply.github.com >
Co-authored-by: Jamil <jamilbk@users.noreply.github.com >
2022-07-25 11:47:58 -07:00
Jamil
4687220684
Acme support ( #779 )
...
* Bump nodejs to 16 lts (#772 )
* Move docs to Docusaurus (#726 )
* wait 10
Co-authored-by: Andrew <andrew@firezone.dev >
Co-authored-by: Chetan Verma <chetan61verma@gmail.com >
2022-07-25 11:47:58 -07:00
Jamil Bou Kheir
7a8ac0da42
Rebase onto master
2022-07-25 11:47:58 -07:00
Po Chen
90c63f1db5
use x-forwarded-for in addition to x-real-ip ( #785 )
2022-07-25 11:47:58 -07:00
Andrew
0a4f08665d
Use toggle for vpn connection permission ( #787 )
...
* Add ui refresh of danger zone section for user view
* Use large switch style
* Go back to medium style for toggle
2022-07-25 11:47:58 -07:00
Andrew
3e39339643
Improve user vpn connection status ui ( #784 )
...
* Update VPN Connection column with status tag, update docs explaining tags under authenticate section
* Fix events test warning
* Fix formatting
* Fix docs lint
* Move vpn status doc to fix doc lint
* Use div instead of label for tag root, update oidc language
* Refactor vpn status component for pr feedback
* use a component instead of a live one
2022-07-25 11:47:58 -07:00
Andrew
6dbd5cc59d
Update egress rules user guide with user scope ui ( #782 )
...
* Update egress rules user guide with user scope ui
* Fix user scope description
* Update egress rules view with correct user scope text & corresponding doc img
* Revert previous doc text
2022-07-25 11:47:58 -07:00
Jamil Bou Kheir
f1af5ddf2f
wait 10
2022-07-25 11:47:58 -07:00
Chetan Verma
afefde7110
Move docs to Docusaurus ( #726 )
2022-07-25 11:47:58 -07:00
Po Chen
abd5085ab8
fix build ( #778 )
2022-07-25 11:47:58 -07:00
Andrew
9eefca1de5
Bump nodejs to 16 lts ( #772 )
2022-07-25 11:47:58 -07:00
Andrew
a75dfa3073
Add redirect routes for oidc signin links by provider ( #770 )
...
* Add redirect routes for oidc signin links by provider
* whitespace fix
* restore comment
* Add oidc redirect route helper to auth template for sign-in buttons
* Update docs to mention pretty URLs.
* Fix docs
2022-07-25 11:47:58 -07:00
Gabi
f5806a2d8a
Replaces nftables rule management to use sets ( #766 )
...
* Replaces nftables rule management to use sets
Fixes firezone/product#398
* Fix fz_wall not existing function
* Minor tidy up
* Refactor tests and projections
* Refactor fz_wall state to use map instead of tuple
* Minor fix
2022-07-25 11:47:58 -07:00
Andrew
d49e44c3fc
Update rules UI to include optional user scope ( #764 )
...
* Add optional user scope field to Rules UI
* Build a users map and use for rule list table
* Include current user in user scope options
* Add user scope tests to live rule view test
* Finish adding/removing scoped rule tests
* Add rules number field to user detail view with link to rules page
* Woops, forgot to define destination in remove scope test
* Only add rules path to user_details template for auth'd views.
* Use socket for rules_path router & remove user options logic from view
* Update fw rules guide to explain user scoped rules
2022-07-25 11:47:58 -07:00
Andrew
93ea4f42e3
Bump chef client in firezone cookbooks Gemfile to 17.10.0 ( #755 )
2022-07-25 11:47:58 -07:00
Gabi
8888839e97
add user id to rules ( #722 )
...
* checkpoint
* Add and delete functions for multiple rules
* Update delete device to delete user rules
* Fix tests
* Improve testing
* Multiple suggested small improvments
* Swap call order on update device
* Fix rule deletion for users/devices
* Fix deletion for multiple rules
* Remove device deletion by pubkey
* Fix multiple rule deletion in case of handle change
* Optimize sql query for getting nftable spec rules
* Fix rule deletion when same daddr
* Fix rule deletion to account for whitespace at the start of line
* Improve rule duplicate error message
Co-authored-by: Jamil Bou Kheir <jamilbk@users.noreply.github.com >
2022-07-25 11:47:58 -07:00
dependabot[bot]
be688962a3
Bump JamesIves/github-pages-deploy-action from 4.2.2 to 4.4.0 ( #838 )
...
Bumps [JamesIves/github-pages-deploy-action](https://github.com/JamesIves/github-pages-deploy-action ) from 4.2.2 to 4.4.0.
- [Release notes](https://github.com/JamesIves/github-pages-deploy-action/releases )
- [Commits](https://github.com/JamesIves/github-pages-deploy-action/compare/v4.2.2...v4.4.0 )
---
updated-dependencies:
- dependency-name: JamesIves/github-pages-deploy-action
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-07-25 09:29:55 -07:00
dependabot[bot]
b0e3bef27d
Bump gettext from 0.19.1 to 0.20.0 ( #844 )
...
Bumps [gettext](https://github.com/elixir-gettext/gettext ) from 0.19.1 to 0.20.0.
- [Release notes](https://github.com/elixir-gettext/gettext/releases )
- [Changelog](https://github.com/elixir-gettext/gettext/blob/main/CHANGELOG.md )
- [Commits](https://github.com/elixir-gettext/gettext/commits )
---
updated-dependencies:
- dependency-name: gettext
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-07-25 09:27:17 -07:00
dependabot[bot]
57aad6af92
Bump rubocop from 1.30.0 to 1.32.0 ( #839 )
...
Bumps [rubocop](https://github.com/rubocop/rubocop ) from 1.30.0 to 1.32.0.
- [Release notes](https://github.com/rubocop/rubocop/releases )
- [Changelog](https://github.com/rubocop/rubocop/blob/master/CHANGELOG.md )
- [Commits](https://github.com/rubocop/rubocop/compare/v1.30.0...v1.32.0 )
---
updated-dependencies:
- dependency-name: rubocop
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-07-25 09:27:05 -07:00
dependabot[bot]
34fa68b6c3
Bump phoenix_live_view from 0.17.10 to 0.17.11 ( #840 )
...
Bumps [phoenix_live_view](https://github.com/phoenixframework/phoenix_live_view ) from 0.17.10 to 0.17.11.
- [Release notes](https://github.com/phoenixframework/phoenix_live_view/releases )
- [Changelog](https://github.com/phoenixframework/phoenix_live_view/blob/master/CHANGELOG.md )
- [Commits](https://github.com/phoenixframework/phoenix_live_view/compare/v0.17.10...v0.17.11 )
---
updated-dependencies:
- dependency-name: phoenix_live_view
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-07-25 09:26:56 -07:00
dependabot[bot]
91020f89d7
Bump phoenix_html from 3.1.0 to 3.2.0 ( #841 )
...
Bumps [phoenix_html](https://github.com/phoenixframework/phoenix_html ) from 3.1.0 to 3.2.0.
- [Release notes](https://github.com/phoenixframework/phoenix_html/releases )
- [Changelog](https://github.com/phoenixframework/phoenix_html/blob/master/CHANGELOG.md )
- [Commits](https://github.com/phoenixframework/phoenix_html/compare/v3.1.0...v3.2.0 )
---
updated-dependencies:
- dependency-name: phoenix_html
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-07-25 09:26:43 -07:00
dependabot[bot]
35b717e8d0
Bump dialyxir from 1.1.0 to 1.2.0 ( #842 )
...
Bumps [dialyxir](https://github.com/jeremyjh/dialyxir ) from 1.1.0 to 1.2.0.
- [Release notes](https://github.com/jeremyjh/dialyxir/releases )
- [Changelog](https://github.com/jeremyjh/dialyxir/blob/master/CHANGELOG.md )
- [Commits](https://github.com/jeremyjh/dialyxir/compare/1.1.0...1.2.0 )
---
updated-dependencies:
- dependency-name: dialyxir
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-07-25 09:26:31 -07:00
dependabot[bot]
133b1fb2d3
Bump ueberauth_identity from 0.4.0 to 0.4.2 ( #843 )
...
Bumps [ueberauth_identity](https://github.com/ueberauth/ueberauth_identity ) from 0.4.0 to 0.4.2.
- [Release notes](https://github.com/ueberauth/ueberauth_identity/releases )
- [Changelog](https://github.com/ueberauth/ueberauth_identity/blob/master/CHANGELOG.md )
- [Commits](https://github.com/ueberauth/ueberauth_identity/commits )
---
updated-dependencies:
- dependency-name: ueberauth_identity
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-07-25 09:26:19 -07:00
wwuck
8e6b4396bf
Enable dependabot ( #814 )
...
* Create dependabot.yml
* Add pinning for pre-commit dependency version
2022-07-20 07:53:59 -07:00
Po Chen
9857b5cad7
Update test.yml ( #790 )
2022-07-08 11:19:27 -07:00
Po Chen
7c720f3bd8
Add cloudsmith publish ( #783 )
...
* add cloudsmith publish
* add more distributions
* build on tag or dispatch
* add attribution
* rename
* Update publish.yml
2022-07-07 15:43:49 -07:00
Po Chen
8baa6b1c0f
fix ci ( #781 )
...
* fix ci
* take 2
2022-07-05 08:47:52 -07:00
Jamil
1fcb45ced4
Parallelize CI builds for tests ( #780 )
...
* Parallelize CI builds for tests
* NodeJS 16
2022-07-02 15:26:53 -07:00
Jamil
609aaecfe9
Remove unused workflow; don't run release_drafter except on master ( #775 )
...
* Remove unused workflow; don't run release_drafter except on master
* use correct syntax for string literal
2022-07-01 01:35:30 -07:00
Jamil
47956c8018
Fix google redirect uri ( #774 )
...
* Google requires trailing slack in redirect_uri
* Bump deps
2022-07-01 00:03:24 -07:00
Jamil
6442439378
Telemetry check service ( #771 )
2022-06-30 09:34:03 -07:00
Jamil
f461ef84c6
Option to disable masquerade ( #769 )
...
* Option to disable masquerade
Fixes #666
* Fix markdown lint issues
* Reflow text
* Fix markdownlint errors
* Clean up conditional
2022-06-29 17:21:37 -07:00
Jamil
627382fe69
Trim whitespace ( #767 )
2022-06-28 17:15:21 -07:00
Jamil
97a7089194
Detect Fedora 36
2022-06-28 16:59:11 -07:00
Chris
13881c0d15
Linux clients - nmcli instructions ( #756 )
...
* change client instruction description - ideally admins should not be generating configurations for users and sharing them
* add instructions for importing WireGuard configuration files using nmcli for Linux users
* add instructions for Linux clients to automatically connect using nmcli
2022-06-28 11:18:19 -07:00
Chris
4d2e3ac08a
Add Firewall section to the reference docs area with firewall template ( #758 )
...
* add nftables configuration template and firewall section to reference
* add note about firezone managed rules being cleared
2022-06-28 11:16:29 -07:00
Chris
f9a3a11980
fix #761 - move nginx deprecated ssl on into listen statement ( #762 )
2022-06-28 11:12:51 -07:00
Po Chen
7cc94f1497
Fix error message matching ( #760 )
...
* Fix error message matching
* Update live.ex
* use more conventional delimiter
2022-06-28 05:21:53 -07:00
Jamil
5fc2ae12fe
Update running-sql-queries.md
2022-06-24 16:47:31 -07:00
Chris
7f2bf0c598
add instructions to take a backup with pg_dump ( #754 )
2022-06-24 16:39:41 -07:00
Jamil
938c359e5a
Disable changing password when local_auth is disabled ( #751 )
...
* segregate account form between admins and unprivileged users
* Disable magic_link, identity providers when local auth disabled
* Revert authentication.ex
2022-06-23 21:32:08 -07:00
Andrew
73403613ae
re-add logger require in fz_http Devices module ( #752 )
...
* re-add logger require in fz_http Devices module
* fix interface test in fz_vpn
* Start GenServer dynamically on first use
* docs clarify
Co-authored-by: Jamil Bou Kheir <jamilbk@users.noreply.github.com >
2022-06-23 16:36:47 -07:00
Andrew
dc4f07dc8a
Remove wireguard-tools from firezone. ( #748 )
...
* Remove wireguard-tools from firezone
* Remove unused public key environment variable
* remove wg private keygen from omnibus config
* Move private key file management to Elixir
* cleanup perms, remove unused code
* Cleanup some more code, fix interface test
* fix functional test & refactor FzVpn.Interface.set
* update owner group on wg_private_key even if file is present
* Fix device config generation
Co-authored-by: Jamil Bou Kheir <jamilbk@users.noreply.github.com >
2022-06-23 11:29:57 -07:00
Jamil
576ff89c93
Display flash error when creating device results in interface error ( #747 )
...
* Display flash error when creating device results in interface error
* Don't overwrite state with error_info
* Add for delete; refactor a tad
* D'oh, handle GenServer call appropriately
* Add missing device delete tests (!!)
2022-06-23 08:33:45 -07:00
Jamil
834a1f5191
Update index.md ( #749 )
2022-06-22 23:13:55 -07:00
Jamil
7b92db5736
Add user_count, device_count, users_with_mfa_count ( #741 )
2022-06-21 17:41:24 -07:00
Jamil
42dc05c7e7
set default MTU to 1280 ( #742 )
2022-06-21 17:31:40 -07:00