Commit Graph

3823 Commits

Author SHA1 Message Date
🏔️ Peak
c7840bdf1b Merge branch 'next' into feat-db-ssl 2025-02-07 23:01:46 +01:00
peaklabs-dev
7b30b1aff1 feat(ssl): Full SSL support for Redis 2025-02-07 22:36:36 +01:00
peaklabs-dev
aad717d22f fix(ssl): permission issue with MariDB cert and key and paths 2025-02-07 21:08:14 +01:00
peaklabs-dev
5b347f3d0f fix(ssl): remove mode selection for MariaDB as it is not supported 2025-02-07 21:07:40 +01:00
peaklabs-dev
c1e7a5721e fix(ssl): adjust ca paths for MySQL 2025-02-07 20:09:11 +01:00
peaklabs-dev
cd63760770 fix(ssl): when regenerating SSL certs the cert is not singed with the new CN 2025-02-07 19:36:52 +01:00
peaklabs-dev
a539bfd765 fix(ssl): server id 2025-02-07 18:45:12 +01:00
peaklabs-dev
bd33f65c0a feat(ssl): new modes for MongoDB and get caCert and mountPath correctly 2025-02-07 18:31:41 +01:00
peaklabs-dev
62fb2c2877 fix(ssl): ger caCert and mountPath correctly 2025-02-07 18:30:07 +01:00
peaklabs-dev
836006798f fix(ssl): remove caCert even if it is a folder by accident 2025-02-07 18:28:58 +01:00
peaklabs-dev
6a52f51851 fix(ssl): get caCert correctly 2025-02-07 18:27:30 +01:00
peaklabs-dev
69a6010839 fix(ssl): fix SSL regeneration to sign with CA cert and use mount path 2025-02-07 18:12:55 +01:00
peaklabs-dev
35cd9573ab fix(ssl): add mount path to DB to fix regeneration of certs 2025-02-07 18:11:26 +01:00
peaklabs-dev
f92c170db1 feat(ssl): ability to create .pem certs and add clientAuth to extendedKeyUsage 2025-02-07 18:07:55 +01:00
peaklabs-dev
1a4c2c3dc9 fix(ssl): fix MariaDB and MySQL need CA cert 2025-02-06 15:14:57 +01:00
peaklabs-dev
6eabfd5c8e feat/fix(ssl): fix some issues and improve ssl generation helper
- set default country to XX
- fix array handling of the subjectAlternativeNames so that no indexes are added or skipped
- add extendedKeyUsage to server certs to make them more secure
- add keyAgreement to server certs
- remove authorityKeyIdentifier as it caused the following issue: unable to get local issuer certificate
- removed duplicated distinguished_name entries
- improved formatting
2025-02-06 15:13:08 +01:00
peaklabs-dev
367eebc9fc feat: Add full SSL support to MongoDB 2025-02-05 22:56:29 +01:00
peaklabs-dev
844f40188a feat(ssl): Add SSL relationships to all DBs 2025-02-05 22:19:13 +01:00
peaklabs-dev
852be5fd93 feat(ssl): check for SSL renewal twice daily 2025-02-05 22:11:10 +01:00
peaklabs-dev
806d9af569 feat(ssl): improve SSL generation and security a lot
- rename some variables for better clarity
- format subjectAltNames correctly
- setup extensions more securely and improve them a lot
- use finally block to remove tempConfig
2025-02-05 22:09:37 +01:00
peaklabs-dev
951a454cbc fix(ssl): regenerating certs for a specific DB
- fix: add mount path to make file mounts work correctly
- fix: get CA cert of the server not some random cert
2025-02-05 21:22:54 +01:00
peaklabs-dev
ba24630c28 fix(ssl): make sure when regenerating the CA cert it is not overwritten with a server cert 2025-02-05 21:13:30 +01:00
peaklabs-dev
7666cec462 fix(ssl): wrong ssl cert is loaded to the server and UI error when regenerating SSL 2025-02-05 21:10:37 +01:00
peaklabs-dev
1003858632 feat(ssl): Add openssl.conf to configure SSL extension properly 2025-02-05 18:06:38 +01:00
peaklabs-dev
a3c4f86e80 fix(ssl): do not remove SSL directory 2025-02-05 18:03:55 +01:00
peaklabs-dev
e81ed1aad8 feat(ssl): Add full MariaDB SSL support 2025-02-04 21:08:20 +01:00
peaklabs-dev
8f2b45c8b5 fix(ssl): use 1 instead of on for mysql 2025-02-04 20:52:23 +01:00
peaklabs-dev
80fc7c7b97 fix(ssl): use mountPath parameter not a hardcoded path 2025-02-04 18:31:09 +01:00
peaklabs-dev
3f857c6dac feat(ssl): Add full MySQL SSL Support 2025-02-04 18:29:35 +01:00
peaklabs-dev
d6a39f2ed3 fix(ssl): always create ca crt on disk even if it is already there 2025-02-04 16:57:40 +01:00
peaklabs-dev
da148f93a6 feat(ssl): regenerate CA cert and all other certs logic 2025-02-04 16:55:36 +01:00
peaklabs-dev
3c62130e86 fix(ssl): improve SSL cert file mounts
- If SSL is disabled, delete the SSL crt and file mounts in the DB
- If SSL is disabled, delete the SSL folder
- If SSL is enabled, make sure the file mounts are added inside the helper
- remove old file mounts first to make sure the ssl crt content is always up to date and no duplicates are added
2025-02-04 16:34:24 +01:00
peaklabs-dev
6de76ca3f8 fix(deletion): fix DB deletion
- delete file mounts, volume mounts, envs, ssl crts, backups and detach tags correctly when deleting
2025-02-04 15:32:56 +01:00
Andras Bacsai
1c12cb98d9 feat(deployment): ensure private key is stored in filesystem before deployment 2025-02-04 15:23:28 +01:00
Andras Bacsai
d632eb2be9 refactor: simplify service start and restart workflows 2025-02-04 14:34:34 +01:00
Andras Bacsai
65a7610e48 Merge pull request #5029 from IARayan/IARayan-bitbucket-preview-deployment-fix-pullrequest-update
fix: Handle pullrequest:updated for reliable preview deployments
2025-02-04 13:55:16 +01:00
Andras Bacsai
186a3fc75b Merge pull request #5038 from Vann-Dev/main
feat(api): add applications logs api
2025-02-04 13:33:30 +01:00
Andras Bacsai
8033a89dee fix(ui): simplify service templates loading logic 2025-02-04 13:30:27 +01:00
Andras Bacsai
fbb6ce3fce fix(core): enhance Slack deployment success notification formatting 2025-02-04 12:44:31 +01:00
Andras Bacsai
df129b83b3 fix(core): update Slack notification formatting to use bold correctly 2025-02-04 12:40:04 +01:00
Andras Bacsai
3da921e2ac fix(core): improve deployment failure Slack notification formatting 2025-02-04 12:36:39 +01:00
Vann
2e652490c1 chore: add openapi response 2025-02-04 02:56:15 +00:00
peaklabs-dev
fd5b7492f8 chore(ui): improve valid until handling 2025-02-03 23:21:09 +01:00
peaklabs-dev
53510928d2 feat(ssl): regenerate certificate and valid until UI 2025-02-03 22:54:31 +01:00
peaklabs-dev
cd335e9e00 fix(ssl): make sure the subjectAlternativeNames are unique and stored correctly 2025-02-03 22:42:15 +01:00
peaklabs-dev
2fbb898c89 feat(ssl): regenerate SSL certs job 2025-02-03 22:37:12 +01:00
peaklabs-dev
fba95c3729 fix(migration): store subjectAlternativeNames as a json array in the db 2025-02-03 22:35:00 +01:00
🏔️ Peak
f871c1067b Merge branch 'next' into feat-db-ssl 2025-02-03 22:20:51 +01:00
peaklabs-dev
72a2f79d88 feat(ssl): improve ssl generation
- add default state and country
- rename parameters for more clarity
- set subjectAltName
- delete old certificate before creating new one
- Set CN and subjectAltNames in DB for automatic renewal
2025-02-03 22:11:29 +01:00
peaklabs-dev
9d9fbd6859 feat(databases): add CA SSL crt location to Postgres URLs 2025-02-03 22:06:53 +01:00