peaklabs-dev
5b347f3d0f
fix(ssl): remove mode selection for MariaDB as it is not supported
2025-02-07 21:07:40 +01:00
peaklabs-dev
c1e7a5721e
fix(ssl): adjust ca paths for MySQL
2025-02-07 20:09:11 +01:00
peaklabs-dev
cd63760770
fix(ssl): when regenerating SSL certs the cert is not singed with the new CN
2025-02-07 19:36:52 +01:00
peaklabs-dev
a539bfd765
fix(ssl): server id
2025-02-07 18:45:12 +01:00
peaklabs-dev
bd33f65c0a
feat(ssl): new modes for MongoDB and get caCert and mountPath correctly
2025-02-07 18:31:41 +01:00
peaklabs-dev
8a45c24dc2
fix(ui): only show Regenerate SSL Certificates button when there is a cert
2025-02-07 18:30:44 +01:00
peaklabs-dev
62fb2c2877
fix(ssl): ger caCert and mountPath correctly
2025-02-07 18:30:07 +01:00
peaklabs-dev
836006798f
fix(ssl): remove caCert even if it is a folder by accident
2025-02-07 18:28:58 +01:00
peaklabs-dev
6a52f51851
fix(ssl): get caCert correctly
2025-02-07 18:27:30 +01:00
peaklabs-dev
69a6010839
fix(ssl): fix SSL regeneration to sign with CA cert and use mount path
2025-02-07 18:12:55 +01:00
peaklabs-dev
35cd9573ab
fix(ssl): add mount path to DB to fix regeneration of certs
2025-02-07 18:11:26 +01:00
peaklabs-dev
f92c170db1
feat(ssl): ability to create .pem certs and add clientAuth to extendedKeyUsage
2025-02-07 18:07:55 +01:00
peaklabs-dev
1a4c2c3dc9
fix(ssl): fix MariaDB and MySQL need CA cert
2025-02-06 15:14:57 +01:00
peaklabs-dev
6eabfd5c8e
feat/fix(ssl): fix some issues and improve ssl generation helper
...
- set default country to XX
- fix array handling of the subjectAlternativeNames so that no indexes are added or skipped
- add extendedKeyUsage to server certs to make them more secure
- add keyAgreement to server certs
- remove authorityKeyIdentifier as it caused the following issue: unable to get local issuer certificate
- removed duplicated distinguished_name entries
- improved formatting
2025-02-06 15:13:08 +01:00
peaklabs-dev
367eebc9fc
feat: Add full SSL support to MongoDB
2025-02-05 22:56:29 +01:00
peaklabs-dev
844f40188a
feat(ssl): Add SSL relationships to all DBs
2025-02-05 22:19:13 +01:00
peaklabs-dev
852be5fd93
feat(ssl): check for SSL renewal twice daily
2025-02-05 22:11:10 +01:00
peaklabs-dev
806d9af569
feat(ssl): improve SSL generation and security a lot
...
- rename some variables for better clarity
- format subjectAltNames correctly
- setup extensions more securely and improve them a lot
- use finally block to remove tempConfig
2025-02-05 22:09:37 +01:00
peaklabs-dev
951a454cbc
fix(ssl): regenerating certs for a specific DB
...
- fix: add mount path to make file mounts work correctly
- fix: get CA cert of the server not some random cert
2025-02-05 21:22:54 +01:00
peaklabs-dev
ba24630c28
fix(ssl): make sure when regenerating the CA cert it is not overwritten with a server cert
2025-02-05 21:13:30 +01:00
peaklabs-dev
7666cec462
fix(ssl): wrong ssl cert is loaded to the server and UI error when regenerating SSL
2025-02-05 21:10:37 +01:00
peaklabs-dev
1003858632
feat(ssl): Add openssl.conf to configure SSL extension properly
2025-02-05 18:06:38 +01:00
peaklabs-dev
a3c4f86e80
fix(ssl): do not remove SSL directory
2025-02-05 18:03:55 +01:00
peaklabs-dev
e81ed1aad8
feat(ssl): Add full MariaDB SSL support
2025-02-04 21:08:20 +01:00
peaklabs-dev
8f2b45c8b5
fix(ssl): use 1 instead of on for mysql
2025-02-04 20:52:23 +01:00
peaklabs-dev
80fc7c7b97
fix(ssl): use mountPath parameter not a hardcoded path
2025-02-04 18:31:09 +01:00
peaklabs-dev
3f857c6dac
feat(ssl): Add full MySQL SSL Support
2025-02-04 18:29:35 +01:00
peaklabs-dev
d6a39f2ed3
fix(ssl): always create ca crt on disk even if it is already there
2025-02-04 16:57:40 +01:00
peaklabs-dev
da148f93a6
feat(ssl): regenerate CA cert and all other certs logic
2025-02-04 16:55:36 +01:00
peaklabs-dev
3c62130e86
fix(ssl): improve SSL cert file mounts
...
- If SSL is disabled, delete the SSL crt and file mounts in the DB
- If SSL is disabled, delete the SSL folder
- If SSL is enabled, make sure the file mounts are added inside the helper
- remove old file mounts first to make sure the ssl crt content is always up to date and no duplicates are added
2025-02-04 16:34:24 +01:00
peaklabs-dev
6de76ca3f8
fix(deletion): fix DB deletion
...
- delete file mounts, volume mounts, envs, ssl crts, backups and detach tags correctly when deleting
2025-02-04 15:32:56 +01:00
peaklabs-dev
c3a440a64e
fix(ui): certificate expiration data is null before starting the DB
2025-02-04 14:37:35 +01:00
peaklabs-dev
fd5b7492f8
chore(ui): improve valid until handling
2025-02-03 23:21:09 +01:00
peaklabs-dev
53510928d2
feat(ssl): regenerate certificate and valid until UI
2025-02-03 22:54:31 +01:00
peaklabs-dev
cd335e9e00
fix(ssl): make sure the subjectAlternativeNames are unique and stored correctly
2025-02-03 22:42:15 +01:00
peaklabs-dev
2fbb898c89
feat(ssl): regenerate SSL certs job
2025-02-03 22:37:12 +01:00
peaklabs-dev
fba95c3729
fix(migration): store subjectAlternativeNames as a json array in the db
2025-02-03 22:35:00 +01:00
🏔️ Peak
f871c1067b
Merge branch 'next' into feat-db-ssl
2025-02-03 22:20:51 +01:00
🏔️ Peak
4c9aa24cd3
Merge branch 'main' into next
2025-02-03 22:17:11 +01:00
peaklabs-dev
72a2f79d88
feat(ssl): improve ssl generation
...
- add default state and country
- rename parameters for more clarity
- set subjectAltName
- delete old certificate before creating new one
- Set CN and subjectAltNames in DB for automatic renewal
2025-02-03 22:11:29 +01:00
peaklabs-dev
9d9fbd6859
feat(databases): add CA SSL crt location to Postgres URLs
2025-02-03 22:06:53 +01:00
peaklabs-dev
498bf04559
feat(migration): add CN and alternative names to DB
2025-02-03 22:05:32 +01:00
peaklabs-dev
5f357e3d92
fix(database): fix volume and file mounts and naming
...
- fix: Volume and file mounts are unmounted if there are more than 1
- rename the crt and key to server key and crt to follow best practices
- move crt and key to a more standardized location
2025-02-03 22:03:45 +01:00
Andras Bacsai
f4575e531f
fix(backup): escape special characters in database backup commands
2025-02-03 21:49:13 +01:00
peaklabs-dev
3cf758e2d0
fix(databases): fix database name users new uuid instead of DB one
2025-02-03 21:43:16 +01:00
peaklabs-dev
a1e650e699
chore: rename ca crt folder to ssl
2025-02-03 21:42:28 +01:00
peaklabs-dev
30343b0049
feat(ui): improve server advanced view
...
- use new path for CA certificate
- fix grammar
- added link to the docs
- added "valid until" to show expiration date
2025-02-03 21:40:41 +01:00
Andras Bacsai
c45c64a1a1
fix(ui): always redirect to dashboard after team switch
2025-02-03 21:38:40 +01:00
Andras Bacsai
035db67180
Merge pull request #5036 from sistracia/next
...
fix(api): domain check when updating domain
2025-02-03 21:28:42 +01:00
Andras Bacsai
1e9a4aa5b6
fix(core): remove --remove-orphans flag from proxy startup command to prevent other proxy deletions (db)
2025-02-03 21:24:27 +01:00
