Commit Graph

356 Commits

Author SHA1 Message Date
Arjan H
5fecf57d62 Include optional custom nginx config files (#72)
If you want to control e.g. the ssl_protocols or ssl_ciphers settings,
create a file named 'custom-ssl.inc' in the /home/labca/nginx_data/conf.d/
directory (or when using the docker-only setup, either add a volume mount
or edit the labca_nginx_conf volume to include the file). Similarly,
'custom-base.inc' can be created to e.g. define a custom log format, and
'custom.inc' could be created for any settings on the plain HTTP server
context.
2023-07-15 16:46:49 +02:00
Arjan H
dd831cb2cd Unmark docker-only setup as beta as it seems stable now 2023-07-15 08:38:49 +02:00
dependabot[bot]
bd3ec5ccab Bump actions/setup-go from 2 to 4 (#79)
Bumps [actions/setup-go](https://github.com/actions/setup-go) from 2 to 4.
- [Release notes](https://github.com/actions/setup-go/releases)
- [Commits](https://github.com/actions/setup-go/compare/v2...v4)

---
updated-dependencies:
- dependency-name: actions/setup-go
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-07-14 20:20:36 +02:00
Arjan H
33c5fdfee1 Update go.mod dependencies of gui 2023-07-14 19:33:18 +02:00
Arjan H
09582bff02 Fix pull_request target branches in build-dockers workflow 2023-07-13 20:21:25 +02:00
Arjan H
293de7e4be Configure dependabot for several ecosystems 2023-07-13 19:38:18 +02:00
Arjan H
56041d9cc9 Fix boulder-tools donor image for pre-built boulder container 2023-07-13 19:33:43 +02:00
Arjan H
c8afcad3c7 Fix issue with version number on fresh installation 2023-07-12 21:38:47 +02:00
Arjan H
8be46cda73 Bump boulder version to release-2023-07-11 2023-07-12 20:20:38 +02:00
Arjan H
5eefbf2ea8 Fix restart of control container in docker-only mode 2023-07-02 16:53:51 +02:00
Arjan H
012a7a5d53 Switch from docker-compose to docker compose plugin (#73)
The standalone docker-compose has been deprecated in favor of a plugin
for the compose binary.
2023-07-02 16:10:38 +02:00
Arjan H
e3e0767303 Remove fqdn restriction from wfe2 DirectoryCAAIdentity config (#76)
Let's Encrypt added validation on this field in their b2224eb4b commit
from 2023-03-21, but this seems unnecessarily strict when looking at the
CAA rfc. It's a problem for LabCA users only using one top level domain,
e.g. 'home'.
2023-07-01 14:24:15 +02:00
Arjan H
2a518ae03a It is now possible to upload backup files on the manage page (#75) 2023-07-01 11:03:47 +02:00
Arjan H
cae7dfc5bb Log name of pre-update database backup file 2023-07-01 11:01:09 +02:00
Arjan H
768806b1dd Use host part of fqdn in backup names instead of docker container name 2023-07-01 10:00:22 +02:00
hakwerk
017d8da041 [skip ci] Commit changes from build-dockers action 2023-06-29 18:51:53 +00:00
Arjan H
cfb9476d40 Fix migration of database schema to preserve data (#75) 2023-06-29 20:28:27 +02:00
Arjan H
8aef5dd949 Fix restart of control container (also after restoring backup) 2023-06-29 20:06:03 +02:00
Arjan H
7598c8ad6d Do not generate new web certificate if the one from a restored backup is still valid 2023-06-28 21:08:44 +02:00
Arjan H
0745c10d12 Restore MySQL data after renaming containers (#75)
When we changed the docker-compose project name from boulder to labca, we should
have also taken care of moving existing DB data from the old docker volume to the
new one. Now we do this in case anyone else upgrades from a pre-v23.05 release.

Also, clean up gorp_migrations table so the in-place upgrades will actually work.
2023-06-28 20:15:51 +02:00
Arjan H
7cc703b855 Cosmetic: add more mouseover hints for audit log messages 2023-06-25 08:09:42 +02:00
Arjan H
77335e1a3e Use OCSP live signing when not using Redis 2023-06-22 19:49:29 +02:00
Arjan H
94464a6ca9 Fix placeholder substitution in setup 2023-06-18 13:24:13 +02:00
Arjan H
c40fa515e0 Update nginx image to 1.25.1 which only accepts TLS v1.2 and v1.3 (#72)
The previous image 1.21.6 did not accept TLS v1.3 and still accepted 1.0 and 1.1
2023-06-18 11:54:28 +02:00
Arjan H
e32b692599 Restart boulder after updating CRL generation interval 2023-06-16 19:26:52 +02:00
Arjan H
514ede49c8 Fix bconsul container working_dir and restart always 2023-06-16 18:37:27 +02:00
Arjan H
3781027664 Make Issuer CRL generation interval configurable (default 24h) 2023-06-15 18:36:18 +02:00
hakwerk
b340974488 [skip ci] Commit changes from build-dockers action 2023-06-13 17:08:35 +00:00
Arjan H
d7f4c10fd9 Bump boulder version to release-2023-06-12 2023-06-13 18:46:42 +02:00
Arjan H
66b51217df Prevent posting empty data from manage CRL (#53) 2023-06-11 15:59:57 +02:00
Arjan H
f0601ff668 Fix MySQL container name; fix workdir for apply script in install 2023-06-11 12:19:00 +02:00
Arjan H
2b81d2d3dd Add options to trigger CRL generation and upload a Root CRL (#53) 2023-06-11 12:09:14 +02:00
Arjan H
9f77d1a308 Add ability to keep private Root CA key offline (#53)
When generating a new Root CA certificate, show the key in the GUI and ask the user to
store it offline. When importing an existing CA make the root key optional.
When the private key is needed but we don't have it, ask the user to provide it. You
can now also create a CSR for the Issuer CA that can be signed by the offline Root CA.
2023-06-08 20:24:41 +02:00
Arjan H
7b13c6eb3a Remove sha labels when building docker images 2023-06-06 20:36:39 +02:00
Arjan H
c03f13ae0c Keep version number in config file when restoring 2023-05-29 15:18:07 +02:00
hakwerk
8491545d39 [skip ci] Commit changes from build-dockers action 2023-05-25 17:35:54 +00:00
Arjan H
1397085935 Bump boulder version to release-2023-05-22 2023-05-25 19:32:51 +02:00
Arjan H
eb3b0eea8e Install zip for exporting certificates 2023-05-23 19:32:05 +02:00
Arjan H
0d15cbb3f6 Use optional environment variable for labca image version 2023-05-23 19:14:16 +02:00
Arjan H
9a6553ba10 Declare docker-only setup as beta (#41)
Internal testing has not uncoverd any surprises yet...
2023-05-02 19:01:03 +02:00
Arjan H
f59601fde9 Fix connMaxIdleTime after spaces were changed to tabs 2023-04-29 19:17:56 +02:00
Arjan H
0fde1be025 Bump boulder version to release-2023-04-24 2023-04-25 20:03:25 +02:00
Arjan H
0501f2fa4a Fix some remnants of renaming docker containers 2023-04-23 15:28:04 +02:00
Arjan H
6353767d3c Reduce akamai purger interval to save CPU cycles 2023-04-23 14:52:49 +02:00
Arjan H
d211ec9b1f Fix cache key in docker build action 2023-04-22 13:51:42 +02:00
Arjan H
abc9f503f2 Include tags in docker build action for proper versioning 2023-04-22 11:34:21 +02:00
Arjan H
2653308333 Use go 1.20 in gui go.mod 2023-04-22 11:07:03 +02:00
Arjan H
861af46a6f Add instructions for docker-only setup (#41) 2023-04-20 20:20:23 +02:00
hakwerk
55ec8fe4e7 [skip ci] Commit changes from build-dockers action 2023-04-20 17:06:18 +00:00
Arjan H
877e8b9b60 Bump boulder version to release-2023-04-17 2023-04-19 20:53:17 +02:00