149 Commits (456522d23d399b03fa347e9ea40e24fd270bbe01)

Author	SHA1	Message	Date
Oliver Günther	99a8b3f140	Fix how we gather and derive sampling traces for sentry (#9395) ... We previously defined a fixed tracing rate AND a sampling tracer in the backend, which result in everything to be traced regardless of the actual rate. We now define a base rate for certain requests, so that we can exclude health checks and other things. The configuration is now a factor (0 = off, default) (1 = use suggested rates), any other value x (x multiplied by suggested rates)	3 years ago
Oliver Günther	9256c9b46c	Allow to disable ldap groups sync with env flag (#9211)	4 years ago
Markus Kahl	8c8b8bbfa7	create backups via UI (#9136) ... * create backups via UI * Fix import of modal service * introduced backup token and addressed remaining comments * allow disabling permissions * improvements - only make user wait to use backup token in if really necessary - notify admins of new backup token - disable 'include attachments' option in UI if unavailable - documentation - misc * spec fixes * fixed feature spec * allow setting capybara host in every case * removed unused style file * addressed review feedback, added further feature specs * polish (code climate) * Avoid empty attachments * Don't raise filesize validation for internal exports Co-authored-by: Oliver Günther <mail@oliverguenther.de>	4 years ago
Oliver Günther	788a7086eb	[36981] Make active_record_store the default (#9179) ... Currently, we're using the cache store for almost all environments by default For the majority of installations, the performance hit to use SQL sessions is negligible while the advantages are known: SQL store enables session features such as the builtin termination of old sessions during logout (on by default) and login (off by default). SQL store do not expire until desired, preventing the cache exhaustion logout problem on e.g., community https://community.openproject.org/wp/36981	4 years ago
Oliver Günther	693d01f8c7	Bump Sentry and implement log handling in core (#9133) ... * Bump Sentry and implement log handling in core * Manually insert the sentry middlewares * Also add user locale as tags * Add performance tracing * Update sentry host to sentry2 * Update frontend sentry-reporter to the new sdk * Silence delayed_job's own logger since activejob logs already Delayed::Job will otherwise always log all arguments, which we disable by design * Remove default sentry host	4 years ago
Oliver Günther	0c9fb9b1af	[36206] Make force_no_page for ldap configurable ... https://community.openproject.com/wp/36206	4 years ago
ulferts	1bdd2ab9ae	safe automatic fixes by rubocop (#8994)	4 years ago
Markus Kahl	af48244ffd	make download URL expiry configurable, use safer default	4 years ago
ulferts	6140f4c7e9	update copyright to 2021 (#8925) ... Updates the copyright to 2021 for all files that have a copyright. Files in our source code without the copyright header still do not receive one automatically. Additionally, backlisted files are also excluded. Previously the copyright of chiliproject which references redmine stated a copyright of redmine up to and including 2017 which is not true for the code we have in here. Because of that I changed that to 2013	4 years ago
ulferts	07186be404	treat dalli_store to say :mem_cache_store	4 years ago
ulferts	5a3439cf13	rails uses dalli by default on mem_cache_store configuration now ... Also see https://guides.rubyonrails.org/caching_with_rails.html#activesupport-cache-memcachestore Fixed deprecation: DEPRECATION: :dalli_store will be removed in Dalli 3.0. Please use Rails official :mem_cache_store instead.	4 years ago
Markus Kahl	c1b82bad00	direct uploads to S3 for attachments including IFC models ... Co-authored-by: Oliver Günther <mail@oliverguenther.de>	4 years ago
Markus Kahl	1b82908a1d	update puma and add puma health check	4 years ago
Oliver Günther	cbb04e3541	Allow logging slow SQL queries to sentry/local logger ... We can use the activerecord.sql notification hook to determine slow running queries without needing to look into the psql slow log. The default threshold is set to 2000ms for now, can be changed freely with `OPENPROJECT_SQL__SLOW__QUERY__THRESHOLD=X` where X is an integer threshold in miliseconds	4 years ago
Oliver Günther	70348e2e1e	Allow to override path to the CA used by LDAP connections	5 years ago
Oliver Günther	2d7838c26f	Allow separate sentry dsn for frontend errors ... [ci skip]	5 years ago
Oliver Günther	814b572382	Change augur URL to production ... [ci skip]	5 years ago
Oliver Günther	58aa7c3ccd	Use edge augur host as default for now	5 years ago
Inga Mai	7394197998	Successful happy path; WIP: error handling	5 years ago
Oliver Günther	522fc5cdea	Show protocol and hostname mismatch warning ... Shows a warning when - protocol is http or https and the setting is different - host name does not match the request	5 years ago
Henriette Dinger	bd7f4e4814	Update copyright notice	5 years ago
Oliver Günther	ad0e22d64a	Separately allow to disable sentry without removing dsn ... Allows us to quickly enable/disable only frontend reporting	5 years ago
Oliver Günther	269d91cfb9	[31583] avoid parsing strings to yaml ... If a configuration/ENV value has YML-incompatible contents, it is broken due to the `YAML.load` approach. However, if the outcome of `YAML.load` is a string, we can expect the input to be an actual string, not something YAML should parse. Thus as a workaround until proper configuration types are added (or better, settings and configuration is joined into one), this avoids breaking passwords in ENV configuration inputs. https://community.openproject.com/wp/31583	5 years ago
Oliver Günther	6f6bec8b22	Add optional sentry handling of frontend errors	5 years ago
ulferts	817e7918bc	let caching of avatar response base on setting	5 years ago
Markus Kahl	bfe1e2003f	make external avatar URLs valid for 24h	5 years ago
Markus Kahl	60c29cce82	Support using puma if configured via USE_PUMA=true (multithreading)	5 years ago
Markus Kahl	3a1ee72b05	do not serve dynamic content assets (e.g. highlighting) through asset host	5 years ago
Oliver Günther	e0a0be419b	[30360] Allow configuration of storage path display ... Use `show_storage_information` to toggle display of storage information in backend. [ci skip]	6 years ago
Oliver Günther	11c89a75a4	Add flag to disable pending migrations warnings ... [ci skip]	6 years ago
Oliver Günther	e42d3554d8	Add warning bar when MySQL database is used ... [ci skip]	6 years ago
Oliver Günther	0d5f50395e	[29253] Render error message in production on pending migrations ... Creates a new warning bar (previously top-shelf item) that renders a warning when migrations are pending. These did raise exceptions before in production and would result in users running in internal errors due to pending migration on some actions on the instance. https://community.openproject.com/wp/29253	6 years ago
Oliver Günther	3d07160dfd	[29711] Allow overrdiing gravatar default in configuration ... [ci skip] https://community.openproject.com/wp/29711	6 years ago
Wieland Lindenthal	a2d66aef07	Basic multi edition (Standard, BIM). ... Independent: - seed data - design - logo	6 years ago
Oliver Günther	703d77252e	Add link to impressum on homescreen and help dropdown	6 years ago
Oliver Günther	5bfb5a6575	Provide documentation on security badge in config readme	6 years ago
Cyril Rohr	27564608db	Display a security badge with the installation status ... vulnerable, unknown, up to date, update available	6 years ago
Oliver Günther	5ad720b63f	community and help links overridable document in config ... [ci skip]	6 years ago
Cyril Rohr	c531fba836	Make the log_level configurable	6 years ago
胡海星	044e44190b	Add the support of SSL smtp server	6 years ago
胡海星	5176e7b8ca	Add the support of SSL smtp server	6 years ago
Oliver Günther	a57363acd3	Create and redirect to text formatting help, but allow override	6 years ago
Oliver Günther	8aed6c6393	Fix Configuration const reload ... Fixes the following error pragmatically ``` lib/open_project/configuration.rb:36: warning: already initialized constant OpenProject::Configuration::ENV_PREFIX lib/open_project/configuration.rb:36: warning: previous definition of ENV_PREFIX was here ```	6 years ago
Jens Ulferts	57c8aeb5aa	add job to cleanup uncontainered attachments	7 years ago
Markus Kahl	bfb9601d76	registration footer override	7 years ago
Henriette Dinger	8877008623	Let links open in separate tab and add youtube channel link	7 years ago
Oliver Günther	aeb08f5ee0	Remove internal file server flags ... [ci skip]	7 years ago
Oliver Günther	d4a4a18de6	Allow to enabled internal asset server ... [ci skip]	7 years ago
Oliver Günther	e2d7c7b070	Allow crowdin in-context with CSP, but add opt-out ... Since the crowdin iframe adds all sorts of assets, we will want to disabled that.	7 years ago
Oliver Günther	fa76452233	Allow :none authentication as empty smtp_authentication setting (#6210) ... We have users that need SMTP without authentication present, e.g., in an internal network. When passing :none to the smtp settings, this results in an authentication error since it tries to use that authentication method. The correct way is to remove the authentication setting in order to use none. https://stackoverflow.com/a/26093613 https://community.openproject.com/wp/27284 [ci skip]	7 years ago