openproject

Commit Graph

Author	SHA1	Message	Date
Oliver Günther	506daae7e6	Rename FORCE_SSL to HSTS in packager setup	2 years ago
Christophe Bliard	8a292d34fe	[#43530 ] Apply "No SSL" as specified with packager Default value of `Setting.rails_force_ssl` was `false` before `9e3c51299a`, and `true` after. As the default value changed to true, it lead a packaged installation to a forced ssl even if "No SSL" was chosen. Instead of unsetting `OPENPROJECT_RAILS__FORCE__SSL` and assume a default value of `false`, explicitly set it to either `true` or `false` to fix the problem.	2 years ago
Christophe Bliard	48a4f1b6ad	lint with rubocop --autocorrect (safe cops only)	2 years ago
Oliver Günther	9e3c51299a	Remove Setting.protocol in favor of static config	2 years ago
Christophe Bliard	99af076a4c	[#42226 ] Psych::DisallowedClass: Tried to load unspecified class: URI::Generic while upgrading from 12.01 to 12.10 https://community.openproject.org/work_packages/42226 properly deserialize setting hash value having a URI::Generic inside	3 years ago
Christophe Bliard	a33524ef6d	remove ruby magic comment for utf-8 ruby interprets source encoding as utf-8 since 2.0.0, making magic comment redundant and useless	3 years ago
Christophe Bliard	bc8d423ec2	update copyright information for 2022	3 years ago
Oliver Günther	ccfa29c728	Move license and copyright docs to root, fix names and references	3 years ago
ulferts	1bdd2ab9ae	safe automatic fixes by rubocop (#8994 )	4 years ago
ulferts	6140f4c7e9	update copyright to 2021 (#8925 ) Updates the copyright to 2021 for all files that have a copyright. Files in our source code without the copyright header still do not receive one automatically. Additionally, backlisted files are also excluded. Previously the copyright of chiliproject which references redmine stated a copyright of redmine up to and including 2017 which is not true for the code we have in here. Because of that I changed that to 2013	4 years ago
Henriette Dinger	bd7f4e4814	Update copyright notice	5 years ago
Oliver Günther	eec6e7fca3	Provide a way to set https without hsts This is required for a customer that uses an external proxy but runs into issues with HSTS (HOK) [ci skip]	5 years ago
Oliver Günther	2397608bac	Re-add force https flag for packaged installations with apache w/o ssl [ci skip]	5 years ago
Oliver Günther	5116decf2b	Ensure correctly setting http and https flags in packager [ci skip]	5 years ago
Oliver Günther	009a808587	[30197] Use separate ENV to trigger frontend angular recompilation This PR introduces two env variables for packaged installations: - RECOMPILE_RAILS_ASSETS will be set when a server prefix set and backend assets need to be recompiled or when a custom gemfile is present - RECOMPILE_ANGULAR_ASSETS will be undefined by default and will result in skipping angular recompilation if `RECOMPILE_RAILS_ASSETS=true`. Can be manually set by the user if frontend recompilation is needed (due to a custom frontend plugin). https://community.openproject.com/wp/30197	6 years ago
Oliver Günther	17462399a7	Restrict build targets [ci skip]	6 years ago
Oliver Günther	01fd9cd2e2	Add postgres support in packager	6 years ago
Oliver Günther	bff63fb922	Also unset RAILS_FORCE_SSL if disabled in packager	6 years ago
Oliver Günther	e0b5f0d58c	Clear cache before postinstall [ci skip]	6 years ago
Oliver Günther	30d7ac28f2	Ensure force_ssl flag does not break SYS api Revert "Remove force ssl flag" This reverts commit `f5ecdb45b5`. [ci skip]	7 years ago
Oliver Günther	f5ecdb45b5	Remove force ssl flag It will break accessing localhost, e.g., by SVN [ci skip]	7 years ago
Oliver Günther	450b0fc13d	[27763] Ensure session cookie receives secure flag in https When users enable https in their instance, the session cookie should be `secure` by default. It currently is only when the configuration `rails_force_ssl` is set. https://community.openproject.com/wp/268331	7 years ago
Oliver Günther	6ef4211e77	Bump copyright to 2018 (#6171 ) [ci skip]	7 years ago
Oliver Günther	a0c5ba0b2a	Allow overriding Setting.protocl in packager rake task When an instance is SSL termination, server/ssl will be false and Setting.protocol will be set to http. However, the instance's protocol SHOULD be set to https since that is used for link generation This PR allows to override the ENV coming from packager when the instance is behind ssl termination using `SERVER_PROTOCOL_FORCE_HTTPS` [ci skip]	7 years ago
Oliver Günther	7cf11bb689	Update copyright notice	8 years ago
Oliver Günther	ba2c082701	Packager: Clean old assets in post-install step	9 years ago
Oliver Günther	a28c5c17ff	Allow directory access for third party plugins Otherwise, apache will reject accessing the asset when a plugin adds a subdirectory.	9 years ago
Oliver Günther	cfa69177f8	Allow custom gems to be installed through a separate source In a packaged installation, installing custom plugins is unfeasible by default to them breaking on each upgrade of the package (since the Gemfile(.lock) is being overridden. This commit allows users to specify a separated Gemfile, that will be checked by the package installer.	9 years ago
Oliver Günther	b2e7802088	Use generic URI instead of URI::HTTP Otherwise, the passed scheme is ignored. [ci skip]	9 years ago
Oliver Günther	8076bebb62	Use generic URI instead of URI::HTTP Otherwise, the passed scheme is ignored.	9 years ago
Cyril Rohr	bfda0e1e39	Do not attempt to configure SCM if it was skipped	9 years ago
Oliver Günther	83e6bc8ff8	Configure relative root in before_postinstall	9 years ago
Oliver Günther	c688e7b939	Include OP-related packager postinstall The addon-openproject started to bloat due to a number of rake tasks with environment becoming a necessity. As any of these rake tasks load the environment, which may take up to 10 seconds, we should strive to include the relevant logic into OpenProject where possible.	9 years ago

32 Commits (56738cbfe492dcde3ab80463bff33eed7ae765f4)