Guillaume Vincent
f326ec275d
push images to docker hub
hace 2 años
dependabot[bot]
b6f8357ce9
Bump django from 3.2.10 to 3.2.11 in /containers/backend ( #694 )
Bumps [django](https://github.com/django/django ) from 3.2.10 to 3.2.11.
- [Release notes](https://github.com/django/django/releases )
- [Commits](https://github.com/django/django/compare/3.2.10...3.2.11 )
---
updated-dependencies:
- dependency-name: django
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
hace 2 años
Guillaume Vincent
7662ff61c4
Add account deletion in mobile app
hace 2 años
Guillaume Vincent
3d4aab585d
Bump django from 3.2.8 to 3.2.10 in /containers/backend
hace 2 años
Guillaume Vincent
432b3042a3
Add ALLOWED_HOSTS env variable for backend container
hace 2 años
Guillaume Vincent
9d7e84b27d
Fix lesspass.com HSTS preload status error
Fixes #671
hace 3 años
Guillaume Vincent
e9b6b9f94a
Use python slim image to reduce the size of backend container
hace 3 años
Guillaume Vincent
0881e15c27
Fix HTTP and HTTPS configuration
hace 3 años
Guillaume Vincent
f267490580
Fix TypeError: decode() got an unexpected keyword argument 'verify' error
hace 3 años
Guillaume Vincent
ec9ab2063c
Redirect lesspass.com to www.lesspass.com
Co-authored-by: William Entriken <github.com@phor.net>
hace 3 años
Guillaume Vincent
3205eee942
Update python modules
hace 3 años
Guillaume Vincent
742f3dc1b3
Keep user authenticated on mobile
hace 3 años
dependabot[bot]
f023432e3f
Bump django from 3.1.7 to 3.1.8 in /containers/backend ( #612 )
Bumps [django](https://github.com/django/django ) from 3.1.7 to 3.1.8.
- [Release notes](https://github.com/django/django/releases )
- [Commits](https://github.com/django/django/compare/3.1.7...3.1.8 )
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
hace 3 años
Guillaume Vincent
306cba1bc4
Upgrade packages for backend
hace 3 años
dependabot[bot]
e58b617064
Bump django from 3.0.7 to 3.1.6 in /containers/backend ( #605 )
Bumps [django](https://github.com/django/django ) from 3.0.7 to 3.1.6.
- [Release notes](https://github.com/django/django/releases )
- [Commits](https://github.com/django/django/compare/3.0.7...3.1.6 )
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
hace 3 años
Guillaume Vincent
39a1cac561
Use python 3.8 on the backend
hace 3 años
Guillaume Vincent
3fca391735
Update requirements.txt on the backend
hace 3 años
Guillaume Vincent
ecddb4f29e
Apply black
hace 3 años
Bianca Rosa
68625c8455
Add backend code for encrypting passworld profiles
closes #580
hace 3 años
Guillaume Vincent
3168380ff0
edit hsts configuration
The header must contain the `includeSubDomains` directive.
The header must contain the `preload` directive.
hace 3 años
Guillaume Vincent
cfed362a77
Use less restrictive TLS configuration
Until the day TLS 1.3 becomes widely supported, web servers must rely on a fallback to TLS 1.2 with correctly configured server directives and strong cipher suites.
* https://www.cloudinsidr.com/content/tls-1-3-and-tls-1-2-cipher-suites-demystified-how-to-pick-your-ciphers-wisely/
* (fr) https://www.ssi.gouv.fr/guide/recommandations-de-securite-relatives-a-tls/
* https://ssl-config.mozilla.org/#server=apache&version=2.4.41&config=intermediate&openssl=1.1.1d&guideline=5.6
hace 3 años
Peter Dave Hello
071c3934d4
Fix a few places with wrong indentation ( #578 )
hace 3 años
Peter Dave Hello
96af69af3b
Ensure final newline char in text files, following .editorconfig ( #575 )
hace 3 años
Peter Dave Hello
7ce7be6451
Remove trailing spaces in text files, following .editorconfig ( #573 )
hace 3 años
Guillaume Vincent
4bb32d9664
Use modern ssl configuration and fix HSTS
hace 3 años
Peter Dave Hello
0a824a9748
Minimize Apache ServerTokens for lesspass-site, cc #568 ( #571 )
hace 3 años
Peter Dave Hello
2a7c018dc9
Enable Apache OCSP stapling ( #569 )
This will speed up the website loading, and make the website more
reliable to the users when the client fails to connect to the CA for an
OCSP response.
Reference:
- https://en.wikipedia.org/wiki/OCSP_stapling
hace 4 años
Peter Dave Hello
cc7bac7c9b
Enable Apache HTTP/2 for better performance ( #570 )
hace 4 años
Guillaume Vincent
b7047be7bf
Remove blog from main repo and fix links
hace 4 años
John Steel
4c703e69ae
Container SSL README.md changed to create_ca_and_ee.sh ( #559 )
* Rename README.md
README.md wasn't actually a readme but an example for how
to make a simple pki.
* Updating ssl script
+ Adding shebang line (#!/usr/bin/env bash)
+ Adding variables for key type and subject
+ Adding comments
+ Adding openssl verify
hace 4 años
Guillaume Vincent
ab3c6969d7
Rebuild containers
hace 4 años
Guillaume Vincent
e70c4bdfe1
Fix authentication workflow
* use refresh token to refresh access token if expired
* change access token duration to 15 minutes
* change refresh token validity to 1 week
Fixes: 539
Fixes: 236
hace 4 años
Guillaume Vincent
876c0edcc9
Set X-Frame-Options header to deny
hace 4 años
Guillaume Vincent
a4fec4b5b7
Fix authentication with old JWT header type
hace 4 años
Guillaume Vincent
ee30d0528c
Fix preflight CORS redirect issue
hace 4 años
Guillaume Vincent
5d1aa73633
Fix proxy pass for old requests
hace 4 años
Guillaume Vincent
c8361afd73
Update Dockerfile
hace 4 años
dependabot[bot]
3f10d92a48
Bump django from 3.0.6 to 3.0.7 in /containers/backend ( #531 )
Bumps [django](https://github.com/django/django ) from 3.0.6 to 3.0.7.
- [Release notes](https://github.com/django/django/releases )
- [Commits](https://github.com/django/django/compare/3.0.6...3.0.7 )
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
hace 4 años
Guillaume Vincent
442cf93b78
Add backward compatible url for auth
hace 4 años
Guillaume Vincent
9b35717e4a
Use multistage build for frontend container
hace 4 años
Guillaume Vincent
6a246608ca
Remove old self hosted files and add affiliate link in README
hace 4 años
Guillaume Vincent
1845f4691a
Minor fixes on CICD
* Remove blog container from container deploy until Dockerfile is present
* Do not stop pushing package after an error
hace 4 años
Guillaume Vincent
ef93386f07
Update backend container python modules to the latest versions
hace 4 años
Guillaume Vincent
a73daf6a1e
CICD for packages and containers
hace 4 años
Guillaume Vincent
fbd7e024ed
Add blog container wip
hace 4 años
Guillaume Vincent
e063e38355
wip refactor containers
hace 4 años
Guillaume Vincent
451a5d6779
Create release script
hace 5 años
Guillaume Vincent
99b0bdbb6f
Add deploy actions
hace 5 años
Guillaume Vincent
e488713eff
Start moving site in packages and prepare for netlify
hace 5 años
Guillaume Vincent
d969c775e8
Fix ci for the backend
hace 5 años