Commit Graph

619 Commits (master)

Author SHA1 Message Date
Robin Appelman 8c10c78099
feat: add request id as comment to all queries
Signed-off-by: Robin Appelman <robin@icewind.nl>
2 weeks ago
Ferdinand Thiessen 5453c1d7fa
feat(settings): Allow to sort groups in the account management alphabetically
We can do this purly in the frontend - but when enforced from the backend using the existing system config,
we need to follow the requirement. We then show a warning about the configuration.

Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
1 month ago
Ferdinand Thiessen 7d51b6fff5
Merge pull request #44438 from nextcloud/feat/login-form-timeout
feat(login): Clear login form (password) after IDLE timeout
1 month ago
Ferdinand Thiessen 2525e73caa fix(DB): Sanitize `host` parameter for postgres databases when IPv6 address is passed
Doctrine is using `pg_connect` with the `host` parameter, this does not allow IPv6 addresses in URI notation.
So we need to extract the IP address and pass it directly

Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
1 month ago
Ferdinand Thiessen 3fede00732
feat(login): Clear login form (password) after IDLE timeout
For security reasons it is recommended to stop the login process at a defined time,
this could prevent password leaks by e.g. user forgetting that they entered their password on public devices.

Enforced e.g. by the BSI ORP.4.A13 rule.

Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
1 month ago
Josh 243ff7c976
docs(config.sample.php):
When setting a custom `updatedirectory` it's important that it not be located within the Server installation folder structure.

Partially addresses nextcloud/updater#463

Signed-off-by: Josh <josh.t.richards@gmail.com>
2 months ago
Maxence Lange 1d00d6c633 fix(config): deprecated enable_file_metadata
Signed-off-by: Maxence Lange <maxence@artificial-owl.com>
2 months ago
Alexander Müller 2f89a732fe
in text: "bruteforce" > "brute force"
In description text we should use correct spelling which is "brute force" or "brute-force", not "bruteforce".

In other parts of the documentation, "brute force" is used: https://docs.nextcloud.com/server/latest/admin_manual/configuration_server/bruteforce_configuration.html

See also https://en.wikipedia.org/wiki/Brute-force_attack

Signed-off-by: Alexander Müller <28591861+alexanderdd@users.noreply.github.com>
2 months ago
Ferdinand Thiessen 1017f4f34a fix: Also expose forbidden filename character in the capabilities
Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
2 months ago
Christoph Wurst 911ab393c0
feat(db): Make dirty query logging available in production
Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
3 months ago
Christoph Wurst 5dd7513390 fix(db): Fix replica password example config
Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
3 months ago
Daniel b9b0ca6dea
Merge pull request #41998 from nextcloud/enh/read-replica 4 months ago
Louis Chemineau a39b3a3d84
Add global accessibility switch
Signed-off-by: Louis Chemineau <louis@chmn.me>
5 months ago
Julius Härtl 79c4986354
enh: Implement PrimaryReadReplicaConnection
Signed-off-by: Julius Härtl <jus@bitgrid.net>
5 months ago
Richard Steinmetz 8191295f66
feat(dav): dispatch out-of-office started and ended events
Signed-off-by: Richard Steinmetz <richard@steinmetz.cloud>
5 months ago
Daniel Kesselberg b5241d5220
feat: allow multiple libreoffice invocations
LibreOffice only allows one invocation per user profile.[^1]

The office provider set the user profile to /tmp/owncloud-instanceid and therefore only one invocation per instance is allowed. This was introduced a while ago, yet it's unclear if this was intentionally or just a side effect.[^2]

The limitation on one invocation leads to the situation that the preview generation only works for a couple of files if you upload a whole folder of emf or word files.

This commit removes the limitation by using a new user profile for each preview. That's done by using instance id plus file id as postfix for getTemporaryFolder.

This has some drawbacks:

- Overload protection: If you upload 100 emf files, you may end up with 100 LibreOffice invocations. Though, you can use preview_concurrency_new to limit the number of previews that can be generated concurrently when php-sysvsem is available.
- New profile: I assume it takes a few bits to generate a fresh LibreOffice user profile. It appears that there is no way to ask LibreOffice to not create a profile and just work with the defaults. The profile will be cleaned after use by our temp manager.
- Remove the configuration option preview_office_cl_parameters:  This is not strictly necessary yet, but if you set the configuration option, the generated path for the user profile is also missing. The configuration option is not well documented (e.g., it's unclear that the last option needs to be --outdir) and actually, there should be no reason to change it after all.

[^1]: https://wiki.documentfoundation.org/UserProfile
[^2]: https://github.com/owncloud/core/pull/9784

Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>
6 months ago
Daniel Kesselberg aa48a5f94f
feat: add preview provider for emf files based on office
Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>
6 months ago
fenn-cs 13d03f45a3 Add unified search toggle in config
The new global search UI is new and might be unstable, hence
we are giving users the option to use the old unified search UI, if
the encounter signficant bottlenecks.

Signed-off-by: fenn-cs <fenn25.fn@gmail.com>
Signed-off-by: nextcloud-command <nextcloud-command@users.noreply.github.com>
6 months ago
Josh Richards 4a7f648d16
config.sample.php: fix incorrect theme name + add a missing one
Fixes #40908 

Signed-off-by: Josh Richards <josh.t.richards@gmail.com>
7 months ago
Simon L e5b11ced4a address review
Signed-off-by: Simon L <szaimen@e.mail.de>
7 months ago
John Molakvoæ (skjnldsv) dbeb526bba
fix(files): disallow illegal characters
Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>
7 months ago
Arthur Schiwon 825b65e2ef
Merge pull request #39978 from joshtrichards/jr-cfg-sample-trystack-remove
(config sample) Remove defunct trystack.org url
8 months ago
Joas Schilling abc98d343c
feat(security): Add a "testing mode" for bruteforce protection that doesn't sleep
Signed-off-by: Joas Schilling <coding@schilljs.com>
9 months ago
Josh Richards 5c3bf436c8
(config sample) Remove defunct trystack.org url
Fixes nextcloud/documentation#10434 and nextcloud/documentation#9400

Signed-off-by: Josh Richards <josh.t.richards@gmail.com>
9 months ago
Arthur Schiwon f840c08dd6
docs(config): inform about log.backtrace
Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>
10 months ago
Joda Stößer a4a7971f11 style(config): alphabetise preview providers
Signed-off-by: Joda Stößer <git@simjo.st>
11 months ago
Dominik Fuchß a4a57409db Changes after code review.
Signed-off-by: Dominik Fuchß <develop@fuchss.org>
11 months ago
Dominik Fuchß c3ba871f36 Add config variable for curl timeout
Add the config variable for curl calls ("remote_curl_timeout"). E.g., needed for nextcloud federation.

Signed-off-by: Dominik Fuchß <develop@fuchss.org>
11 months ago
Simon L 918859cafd allow to specify upgrade.cli-upgrade-link in order to link to the correct documentation
Signed-off-by: Simon L <szaimen@e.mail.de>
11 months ago
JanisPlayer c71a3065a7 Allow to specify an imaginary key
Signed-off-by: JanisPlayer <54918417+JanisPlayer@users.noreply.github.com>
12 months ago
Simon L 0b1444357b
Merge pull request #38321 from nextcloud/pulsejet/patch-dbtableprefix
docs: add dbtableprefix to sample config
12 months ago
Varun Patil 8102c88c2e Add dbtableprefix to sample config
Signed-off-by: Varun Patil <varunpatil@ucla.edu>
12 months ago
Christoph Wurst 00d6a6f514
doc(config): Rearrange sample config into appropriate sections
Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
12 months ago
Christoph Wurst 20c65227d2
doc(auth): Warn about disabled token passwords and LDAP logout
Auth tokens store the user's login password by default. If the password
changes externally (on LDAP), all connected clients stop syncing after 5
minutes max when the password is verified the next time. A web login
revivess those app passwords.

If storing the password is disabled, the tokens continue to work after
password change. But that also means the clients are not logged out the
same way. This can be fine for some setups and problematic for others.

Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
1 year ago
Joas Schilling 454281af03
feat(security): Allow to opt-out of ratelimit protection, e.g. for testing on CI
Signed-off-by: Joas Schilling <coding@schilljs.com>
1 year ago
Arthur Schiwon ddc423ab39
fix default_language doc
Since commit 0228bc6e66 the browser
language always is preferred.

Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>
1 year ago
Joas Schilling ab1af9952f
fix(docs): Fix RST parsing of the sample config
Signed-off-by: Joas Schilling <coding@schilljs.com>
1 year ago
Côme Chilliet dde5c46a3e
Migrate to Symfony Mailer
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
1 year ago
max-nextcloud a635674d27
Fix default value for files_no_background_scan
The value is read in b888c61463/apps/files/lib/BackgroundJob/ScanFiles.php (L105) and the default value is false.

Signed-off-by: max-nextcloud <max@nextcloud.com>
1 year ago
William 81ec99ae33
Update config/config.sample.php
add better description

Co-authored-by: Joas Schilling <213943+nickvergessen@users.noreply.github.com>
Signed-off-by: William <william.hak57@gmail.com>
1 year ago
William 2c4afdcdd1
add documentation preview_ffmpeg_path
add preview_ffmpeg_path documentation.
document custom path for ffmpeg so it can be used by the previewprovider to create video previews with the snap package of nextcloud.

Signed-off-by: William <william.hak57@gmail.com>
1 year ago
CaptainSifff 328c4cdbb5
Update config/config.sample.php: fix typos.
Co-authored-by: Git'Fellow <12234510+solracsf@users.noreply.github.com>
Signed-off-by: CaptainSifff <CaptainSifff@gmx.de>
1 year ago
Florian Goth 1e9e7d6283 elaborate on what is required for using the tempdirectory setting of nextcloud
Signed-off-by: Florian Goth <fgoth@physik.uni-wuerzburg.de>
1 year ago
Daniel Kesselberg a1fef7bbe4
docs: trusted_proxies support IPv6 ranges
Support for IPv6 ranges was added by https://github.com/nextcloud/server/pull/32615

Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>
1 year ago
Christian Wolf 6638185eae Fix comments in sample config to be correctly marked as verbatim
The comments were not marked as verbatim and thus the Sphinx compiler to generate
the online admin manual interpreted backslashes as special chars. They disappeared
from the output.
By adding ``, it is marked as verbatim and the backslashes are not removed.

Signed-off-by: Christian Wolf <github@christianwolf.email>
1 year ago
Christian Wolf 6ae6615e1d Fix some issues that were not yet introduced in changes to sample config
This should not change anything but fix some documentation issues.
This change should not change anything in the implemenetation.

Signed-off-by: Christian Wolf <github@christianwolf.email>
1 year ago
Christian Wolf 7e46f033b6
Reorder the sample config file in order to have a cleaner structure and better sectioning in the online manual
The change should only affect the conmments and reorder the config lines

Copy modifications from https://github.com/nextcloud/documentation/pull/9166 into sample config file

Signed-off-by: Christian Wolf <github@christianwolf.email>
1 year ago
Simon L bfb3b2af9f increase preview_max_memory and make it easier to debug
Signed-off-by: Simon L <szaimen@e.mail.de>
1 year ago
Joas Schilling d230fd145a
Language fixes in example config
Signed-off-by: Joas Schilling <coding@schilljs.com>
1 year ago
Joas Schilling 13957032cf
More fixing
Signed-off-by: Joas Schilling <coding@schilljs.com>
1 year ago