Commit Graph

47 Commits

Author SHA1 Message Date
Andrew Rousset
9d60f8b218 Make Set-Cookie secure attribute false in dev environments (#363 product) (#610)
Co-authored-by: Andrew Rousset <akr@valkyrie.local>
2022-05-17 15:16:40 -07:00
Jamil
c990ea8691 Get OIDC working with Okta, Azure (#590) 2022-05-12 21:37:33 -07:00
Po Chen
298b353ebe Implemet Outbound emails (#576)
* add mailer

* setup configs

* only setup mailer if from_email is present

* Do not assume OUTBOUND_EMAIL_FROM exists

* update docs

* add usage of mailer as tests

* address comments
2022-05-09 14:50:22 -10:00
Jamil
4acd54b050 Fixes for local development (#562)
* Fixes for local development

A few issues that I ran into getting this up on my local machine.
I also made sure it works now properly on Github Codespaces which
will hopefully make it easier for devs to get started.

- Username/Pass docs updated to correct values
- Add runtime.exs and migrate releases.exs over to it as recommended by
Elixir 1.11 release notes
- Update Endpoint to allow for proxy passed headers if enabled with
PROXY_FORWARDED
- Add missing .env file section to CONTRIBUTION
- Add a sample .env file (.env.sample) to help getting started
- Update docs to show how to use Github Codespaces with an external
URL.
- Remove unused alias from dev (which I think doesn't work anyway due to
compile time restrictions, only in runtime or releases.exs)
- Ensure pre-commit is in path and available on devcontainer
- Simplify some docker commands, remove unneeded ports.

* Update runtime.exs with resolved conflicts

Co-authored-by: Mark Percival <m@mdp.im>
2022-04-29 08:23:20 -07:00
Jamil
90521ccf02 Renew session before authenticating (#518)
* session fixes

* Build callback_url using Phoenix helpers

* Add email to unpriv device page
2022-04-06 14:29:52 -07:00
Jamil
4fa5bedf1b 500/fix redirect local auth (#509)
* Allow config of ext url; show this after create-admin

* Use opts for ueberauth

* weird nil error

* get_env vs fetch_env

* Use integer

* Try new external_url thingo

* Fix callback_url

* Fix path suffix

* Fix markdownlint hiccup

* fix create admin

* Differentiate phoenix_port

* cron note; installscript fix; minor fqdn fixes

* Send full node obj to app_env

* Add db pass to config file
2022-04-05 14:43:00 -07:00
Jamil
a91c2db887 0.3.0 (#465)
* Found endpoint empty bug

* Fix use_site_ bugs

* Generate private keys client-side instead of on the Firezone server (#451)

* Rename events; add crypto lib

* seemingly working keygen

* Checkpoint

* Remove private key from devices; make tests pass

* Refactor auth to use simplified new router helper

* Fix js bundle

* Refactor event listeners into their own file

* Refactor settings

* Fix JS

* Working live views in unprivileged sections

* Rough draft working

* Checkpoint before fixing tests

* Tests passing

* Max devices per user configuration option (#471)

* Max tunnels per user configuration option

* Clean up remaining tunnel references

* Replace local auth system with Ueberauth / Guardian (#475)

* Checkpoint working authentication

* Working admin and unprivileged auth using Guardian

* Remove Sessions cruft

* More cleanup

* load new secrets

* Remove firezone tmp dirs

* Okta and Google Oauth (#485)

* working oauth!

* Remove keycloak; working google

* Ensure nil to_s

* Passing tests

* Add compile-time prod config

* Fix live_view typo

* Revert key_ttl to vpn_session_duration

* print logs after first configure

* Use get_env/1 for fetching optional config vars

* Disable telemetry from config

* miss the to_s

* Fix sign in page

* add tunnel admin guide

* auth path

* Fix tests

* Device editing no more (#491)
2022-03-04 09:32:13 -08:00
Jamil Bou Kheir
a2bc25359a Rate limiting 2022-02-03 14:48:45 -08:00
Jamil Bou Kheir
432c204280 Add telemetry fixes 2022-01-31 16:08:41 -08:00
Jamil
ad9c7ff793 Merge pull request #421 from firezone/backlog/379/expose_db_connect_options
Expose more database connect options
2022-01-27 15:49:48 -08:00
Jamil Bou Kheir
19b0e088ff Expose more database options in configuration file 2022-01-26 10:43:28 -08:00
Jamil Bou Kheir
57d92f2fd1 SSO lead gen 2022-01-26 08:46:53 -08:00
Jamil Bou Kheir
38cce9d54c Make prod launchable on dev 2021-12-29 06:05:33 -06:00
Jamil Bou Kheir
765976275e Add diagnostic pinger; default settings
Also don't display DNSservers when empty.

Fixes firezone/backlog#135
Fixes firezone/backlog#123
Fixes firezone/backlog#130

Refs #333
2021-12-09 15:24:10 -08:00
Jamil Bou Kheir
4bc60855ab Fix origin check 2021-10-01 12:06:44 -07:00
Jamil Bou Kheir
7f7a27cb92 Use ip route vs route for egress interface 2021-09-25 14:28:33 -07:00
Jamil Bou Kheir
6dd25f9a08 Give up on fixing live view flash... they're annoying anyway 2021-09-22 17:24:10 -07:00
Jamil Bou Kheir
31ccba3df9 firezone fw vpn loads 2021-09-12 18:28:23 +00:00
Jamil Bou Kheir
b2c6992d2b Use postgres sequence for device address 2021-09-10 00:28:01 +00:00
Jamil Bou Kheir
18b0079dbe Fix device delete 2021-09-09 20:13:14 +00:00
Jamil Bou Kheir
24a49b9468 Add nft_path and wg_path config options 2021-09-01 20:29:16 +00:00
Jamil Bou Kheir
dd5633e986 Patch disable_signup 2021-08-20 03:56:17 +00:00
Jamil Bou Kheir
f01866e7b2 tests passed 2021-08-19 23:10:15 +00:00
Jamil Bou Kheir
3a5162e0d5 Checkpoint back to linux 2021-08-19 12:29:05 -07:00
Jamil Bou Kheir
ad54cfdb0f All the way baby 2021-07-15 09:20:10 -07:00
Jamil Bou Kheir
3759f6d65d Rename instances 2021-07-10 06:29:16 -07:00
Jamil Bou Kheir
0b45d56e6b Upgrade webpack 2021-06-28 09:07:30 -07:00
Jamil Bou Kheir
cdb719fe74 Rename fireguard -> cloudfire 2021-06-28 08:44:03 -07:00
Jamil Bou Kheir
43d2f642c2 Starting on tests 2021-03-25 12:14:10 -07:00
Jamil Bou Kheir
cde4bfb875 checkpoint 2021-03-14 19:51:53 -07:00
Jamil Bou Kheir
f170ff6f5c Disable signup implies only one user 2021-03-10 11:14:55 -08:00
Jamil Bou Kheir
d5934e04cd Add DB encryption 2021-03-04 09:22:48 -06:00
Jamil Bou Kheir
82c34c5b7d Use send/receive for add device workflow 2021-03-03 16:56:11 -06:00
Jamil Bou Kheir
f989eca5be Rework how fg_vpn handles interfacing with the OS 2021-01-24 21:00:43 -08:00
Jamil Bou Kheir
c23c5bb93b Add peer before sending to user
closes #75
2020-12-27 14:58:22 -06:00
Jamil Bou Kheir
472f81ab1e FgVpn Config 2020-11-16 10:28:18 -06:00
Jamil Bou Kheir
3c7b884d7e Add option for disabling signups 2020-11-14 13:49:57 -06:00
Jamil Bou Kheir
17d24599fb functional test built package 2020-11-08 17:46:49 -06:00
Jamil Bou Kheir
a1e2e6ddac Reorganizing config 2020-11-06 08:48:08 -06:00
Jamil Bou Kheir
c5f99f40c2 Seems to be working 2020-06-01 23:53:02 -07:00
Jamil Bou Kheir
6944fc99c9 Seemingly cool 2020-06-01 22:22:03 -07:00
Jamil Bou Kheir
ee866c2cf2 First rename 2020-05-11 16:18:57 -05:00
Jamil Bou Kheir
de0d6e92c2 Add device foreign key to firewall_rules 2020-05-06 00:33:01 -07:00
Jamil Bou Kheir
7ac37c0113 cloudfire -> fireguard 2020-05-05 22:00:24 -07:00
Jamil Bou Kheir
ec71470d22 Rename CfPhx -> CfHttp success 2020-05-04 22:07:31 -07:00
Jamil Bou Kheir
a76e9f46c3 Rename cloudfire app to cf_phx; Start Dockerfile work 2020-04-22 21:32:31 -07:00
Jamil Bou Kheir
d049b006f6 Initial commit 2020-04-21 20:49:55 -07:00