Commit Graph

1874 Commits

Author SHA1 Message Date
Jamil
dd67baf629 Build docker image in build workflow; Update automatic install to use Docker (#983)
* Test docker prod build in CI

* Need uses

* Set build-args

* Split builds

* Fix build-args format

* wtf

* hmmm

* Jeebus

* build version based on drafted release

* Build multi-platform images

* Only build for supported platforms

* Use newer OTP fingers crossed

* Use OTP 24 for arm64

* Finalize test build of Docker image

* Update comment

* Bump to OTP 25.1

* Use proper ver

* D'oh proper sha

* Use OTP 24 and install python for node build

* Use new Docker base

* Use python3

* Use newly-built base images with other platform support

* Don't build for ppc64le and s390x

* Build only for amd64/arm64

* Don't rebuild on publish; simply copy

* See where the image is being pushed

* Remove echo

* Add docker updates

* Match platforms from base image

* Use docker-compose over docker compose

* Use our own base

* we need python3

* use consistent service name

* trim trailing slash from external_url

* Build for latest tag in staging
2022-09-29 08:20:32 -05:00
Jamil
9602a145f4 Use EXTERNAL_URL host as default endpoint (#986) 2022-09-27 16:06:28 -07:00
Jamil
6cb6cb1f93 Favor live redirects over patches (#985)
* Checkpoint

* Favor redirect over patch

* Fix tests
2022-09-27 10:15:48 -07:00
dependabot[bot]
a7d650767b Bump postgrex from 0.16.4 to 0.16.5 (#982)
Bumps [postgrex](https://github.com/elixir-ecto/postgrex) from 0.16.4 to 0.16.5.
- [Release notes](https://github.com/elixir-ecto/postgrex/releases)
- [Changelog](https://github.com/elixir-ecto/postgrex/blob/master/CHANGELOG.md)
- [Commits](https://github.com/elixir-ecto/postgrex/compare/v0.16.4...v0.16.5)

---
updated-dependencies:
- dependency-name: postgrex
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-09-26 07:17:57 -07:00
Jamil
820abe170c Upgrade to LiveView 0.18 and use replace: true (#980)
* Upgrade to LiveView 0.18 and use replace: true

* Fetch test deps too

* Fix test with new liveview
2022-09-24 12:39:05 -07:00
Jamil
ae111ad437 Add websocket connection troubleshooting section (#977)
* Remove markdown exceptions for table and code blocks

* Fix Zitadel docs errors

* Add trailingSlash: false to prevent 404 bug
2022-09-23 15:35:01 -07:00
Jamil
177715b650 Turn on contextualSearch (#974) 2022-09-22 01:25:37 -07:00
Sebastian Büchler
f2f371974c Add Zitadel to OIDC Docs (#1) (#969)
* Create zitadel.md

Signed-off-by: Sebastian Büchler <42775578+sebastianbuechler@users.noreply.github.com>

* Update README.md

Signed-off-by: Sebastian Büchler <42775578+sebastianbuechler@users.noreply.github.com>

Signed-off-by: Sebastian Büchler <42775578+sebastianbuechler@users.noreply.github.com>

Signed-off-by: Sebastian Büchler <42775578+sebastianbuechler@users.noreply.github.com>
2022-09-21 18:35:29 -07:00
Jamil
8697005e6e Attempt to fix docs search by adding sitemap and start_url config (#973) 2022-09-21 18:34:49 -07:00
dependabot[bot]
307699644e Bump ueberauth from 0.10.2 to 0.10.3 (#972)
Bumps [ueberauth](https://github.com/ueberauth/ueberauth) from 0.10.2 to 0.10.3.
- [Release notes](https://github.com/ueberauth/ueberauth/releases)
- [Changelog](https://github.com/ueberauth/ueberauth/blob/master/CHANGELOG.md)
- [Commits](https://github.com/ueberauth/ueberauth/compare/v0.10.2...v0.10.3)

---
updated-dependencies:
- dependency-name: ueberauth
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-09-21 10:18:26 -07:00
Jamil
02d932affc Fix redirect always happening when issuing cert (#968)
* Fix redirect always happening when issuing cert

* Remove outdated comment
2022-09-16 13:39:41 -07:00
Jamil
50845b0ede Open in new tab (#966) 2022-09-15 18:10:23 -07:00
Jamil
0d7a087f3c Fix management->configuration (#965) 2022-09-15 17:42:25 -07:00
Jamil
aab77656a7 Add admin_count and active_device_count (#956)
* install, compile deps for test env

* Add admin_count and active_device_counts to telemetry

* Update apps/fz_http/test/fz_http/devices_test.exs

Signed-off-by: Jamil <jamilbk@users.noreply.github.com>

Signed-off-by: Jamil <jamilbk@users.noreply.github.com>
2022-09-13 08:50:38 -07:00
Jamil
70e4bf36c1 Add subscribe for updates link (#958) 2022-09-13 08:49:46 -07:00
Jamil
ac5d2379f1 Bump Jason for improved performance (#955) 2022-09-12 15:19:16 -07:00
Jamil
7861977379 (Supercedes #950) Bump elixir (#953)
* Bump elixir to 1.14.0

* gen_env -> compile_env

* Update Dockerfiles

* Update software
2022-09-12 14:40:16 -07:00
Jamil
13a48cce1b Add star history chart to README (#954) 2022-09-12 14:39:48 -07:00
dependabot[bot]
befbc748d8 Bump actions/checkout from 2 to 3 (#951)
Bumps [actions/checkout](https://github.com/actions/checkout) from 2 to 3.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v2...v3)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-09-12 12:26:47 -07:00
dependabot[bot]
d45ed1c2ca Bump phoenix from 1.6.11 to 1.6.12 (#952)
Bumps [phoenix](https://github.com/phoenixframework/phoenix) from 1.6.11 to 1.6.12.
- [Release notes](https://github.com/phoenixframework/phoenix/releases)
- [Changelog](https://github.com/phoenixframework/phoenix/blob/v1.6.12/CHANGELOG.md)
- [Commits](https://github.com/phoenixframework/phoenix/compare/v1.6.11...v1.6.12)

---
updated-dependencies:
- dependency-name: phoenix
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-09-12 12:22:31 -07:00
dependabot[bot]
4c8f0307e3 Bump guardian from 2.2.4 to 2.3.0 (#947)
Bumps [guardian](https://github.com/ueberauth/guardian) from 2.2.4 to 2.3.0.
- [Release notes](https://github.com/ueberauth/guardian/releases)
- [Changelog](https://github.com/ueberauth/guardian/blob/master/CHANGELOG.md)
- [Commits](https://github.com/ueberauth/guardian/compare/v2.2.4...v2.3.0)

---
updated-dependencies:
- dependency-name: guardian
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-09-07 14:34:35 -07:00
dependabot[bot]
7e85555da3 Bump credo from 1.6.6 to 1.6.7 (#948)
Bumps [credo](https://github.com/rrrene/credo) from 1.6.6 to 1.6.7.
- [Release notes](https://github.com/rrrene/credo/releases)
- [Changelog](https://github.com/rrrene/credo/blob/master/CHANGELOG.md)
- [Commits](https://github.com/rrrene/credo/compare/v1.6.6...v1.6.7)

---
updated-dependencies:
- dependency-name: credo
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-09-07 14:34:13 -07:00
leriel
43537a50b1 Update alpine version to match one available for hexpm/elixir (#946) 2022-09-02 07:57:15 -07:00
Jamil
ea67535f9a Bump runtimes; deps; postgres 13.5 -> 13.8 (#944)
* Bump deps; runtimes; pg to 13.8

* bump npm deps

* Bump nginx

* Use PCRE over PCRE2
2022-09-01 21:08:37 -07:00
Jamil
9f862484df Redirect http -> https when acme is enabled (#942) 2022-08-30 14:28:37 -07:00
Jamil
f384db2444 Trim whitespace on string fields (#941)
* Trim whitespace on string fields

* Update apps/fz_http/lib/fz_http/shared_validators.ex

Signed-off-by: Jamil <jamilbk@users.noreply.github.com>

Signed-off-by: Jamil <jamilbk@users.noreply.github.com>
2022-08-30 14:26:40 -07:00
Gabi
40120b5b26 remove ct != established from rules (#940) 2022-08-30 13:18:33 -07:00
Jamil
a3f5e0613f Prevent autocompleting passwords in FF (#936) 2022-08-29 23:04:53 -07:00
Jamil
bc7bdb3386 Add ip exhaustion error to base to show when fields are hidden (#935)
* Add ip exhaustion error to base to show when fields are hidden

* Add tmp as an empty dir

* Bump deps
2022-08-29 22:32:05 -07:00
Jamil
0900a9fd86 Use dummy ACME cert initially; Reload nginx immediately before ACME issuance (#928)
* Only inject cert if exists

* Generate a temporary self-signed cert until ACME issues one

* Fix typo

* Update omnibus/cookbooks/firezone/recipes/nginx.rb

Co-authored-by: Gabi <gabriel@firezone.dev>
Signed-off-by: Jamil <jamilbk@users.noreply.github.com>

* Restart nginx immediately

* Remove redundant logic

* Use execute

* Update docs with note

Signed-off-by: Jamil <jamilbk@users.noreply.github.com>
Co-authored-by: Gabi <gabriel@firezone.dev>
2022-08-22 21:42:14 -07:00
dependabot[bot]
e4de365d14 Bump rubocop from 1.35.0 to 1.35.1 (#932)
Bumps [rubocop](https://github.com/rubocop/rubocop) from 1.35.0 to 1.35.1.
- [Release notes](https://github.com/rubocop/rubocop/releases)
- [Changelog](https://github.com/rubocop/rubocop/blob/master/CHANGELOG.md)
- [Commits](https://github.com/rubocop/rubocop/compare/v1.35.0...v1.35.1)

---
updated-dependencies:
- dependency-name: rubocop
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-08-22 11:40:10 -07:00
dependabot[bot]
01986bf8e7 Bump ex_doc from 0.28.4 to 0.28.5 (#933)
Bumps [ex_doc](https://github.com/elixir-lang/ex_doc) from 0.28.4 to 0.28.5.
- [Release notes](https://github.com/elixir-lang/ex_doc/releases)
- [Changelog](https://github.com/elixir-lang/ex_doc/blob/v0.28.5/CHANGELOG.md)
- [Commits](https://github.com/elixir-lang/ex_doc/compare/v0.28.4...v0.28.5)

---
updated-dependencies:
- dependency-name: ex_doc
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-08-22 11:39:55 -07:00
Jamil
6e38fd558b Revert "(fixed) Don't listen on port 80 if ACME is disabled (#927)" (#930)
This reverts commit bda920a065.
2022-08-19 18:12:28 -07:00
Jamil
41ff3c3b3f Cache node deps; fix minor docs typos (#923)
* Minor typo fixes

* cache node deps

* Remove unneeded script

* Remove unneeded script

* Remove redundant lint-docs step...

* Cache nodejs for static anal

* npm ci before use

* limit markdownlint to docs for now

* Move markdownlint config to root
2022-08-18 21:01:04 -07:00
Jamil
bda920a065 (fixed) Don't listen on port 80 if ACME is disabled (#927)
* don't listen on port 80 if acme is disabled

* restart nginx when changing acme settings
2022-08-18 18:34:04 -07:00
Jamil
91b64638ea Revert "don't listen on port 80 if acme is disabled (#921)" (#925)
This reverts commit c38f57ca16.
2022-08-17 20:24:32 -07:00
Jamil
06e3956317 create-or-reset-admin resets admin role to :admin (#922) 2022-08-17 19:53:29 -07:00
Jamil
c38f57ca16 don't listen on port 80 if acme is disabled (#921) 2022-08-17 14:30:38 -07:00
dependabot[bot]
42923c3ebe Bump rubocop from 1.33.0 to 1.35.0 (#919)
Bumps [rubocop](https://github.com/rubocop/rubocop) from 1.33.0 to 1.35.0.
- [Release notes](https://github.com/rubocop/rubocop/releases)
- [Changelog](https://github.com/rubocop/rubocop/blob/master/CHANGELOG.md)
- [Commits](https://github.com/rubocop/rubocop/compare/v1.33.0...v1.35.0)

---
updated-dependencies:
- dependency-name: rubocop
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-08-15 20:24:52 -07:00
Jamil
5d113ba251 Fix rules form (#917) 2022-08-11 17:18:50 -07:00
Jamil
a4340be61e Fix endpoint placeholder & security overflow (#916)
* Use consistent placeholders

* Remove redundant text and overflow-x
2022-08-11 16:25:59 -07:00
Po Chen
6c2703869e Use Dockerfile.prod (#915)
Signed-off-by: Po Chen <chenpaul914@gmail.com>

Signed-off-by: Po Chen <chenpaul914@gmail.com>
2022-08-11 11:19:04 -07:00
Jamil
db785d7ba2 Allow disabling the configuration of devices by unprivileged users (#909)
* Add all the config options, test should fail

* Don't show fields that can't be edited

* Remove unneeded leading match

* use str not ~r

* Choose Conf.get or @allow

* Add Docker env vars
2022-08-10 15:56:15 -07:00
Po Chen
c48ebcf9e7 Update image name and remove build (#914)
Signed-off-by: Po Chen <chenpaul914@gmail.com>

Signed-off-by: Po Chen <chenpaul914@gmail.com>
2022-08-10 15:56:00 -07:00
Jason G
36c605c36f Docs fixes (#911)
* update architecture diagram

* fix edit this page link

* fix keywords not showing

* remove trailing slash
2022-08-10 14:51:20 -07:00
Jamil
5e60d2b442 Bump Wireguardex (#912) 2022-08-10 14:50:47 -07:00
Po Chen
9505d70f91 Prod image (#887)
* rename dockerfile

* use renamed dockerfile

* add Dockerfile.prod

* digest

* add publish image workflow

* add helper scripts

* start example docker compose

* fix workflow

* stage

* chmod

* stage

* nft

* must be root

* create path

* list address

* try alpine again

* remove nobody

* fix shared lib

* set wireguard endpoint

* config interface and route before starting server

* fix env var name

* move env var defaults into dockerfile

* persist private key

* migrate on start

* add create-or-reset-admin

* link env values

* clean up

* fix permission

* rename service

* add deploy

* persist pg data

* build version

* set version on build

* add gen_secrets

* fix typo

* move version to the end

* move up a little

* use map_join

* remove gen_secrets

* add gen-env

* cat

* gen more

* add telemetry
2022-08-10 14:42:38 -07:00
Andrew
be565a6897 Install script UX: ask to load wireguard mod & install missing deps for Debian repo (#907) 2022-08-09 14:23:29 -07:00
Jamil
ebb3d383d7 remove beta program (#908) 2022-08-09 11:37:54 -07:00
Jamil
0a7c16af17 Bump Wireguardex (#906) 2022-08-09 11:09:44 -07:00