528e5adaab
smokescreen: Default to only listening on 127.0.0.1.
...
This prevents Smokescreen from acting as an open proxy.
Fixes #19214 .
2021-07-14 15:40:26 -07:00
47897c76a2
scripts: Use curl -f (--fail).
...
This makes curl exit with nonzero status on HTTP 4xx/5xx errors.
Signed-off-by: Anders Kaseorg <anders@zulip.com>
2021-07-13 16:47:49 -07:00
77169408f4
docs: Remove do-release-upgrade -d option.
...
It has not been necessary since Ubuntu 20.04.1 was released in August.
Signed-off-by: Anders Kaseorg <anders@zulip.com>
2021-07-13 11:02:44 -07:00
93f62b999e
nagios: Replace check_website_response with standard check_http plugin.
...
Signed-off-by: Anders Kaseorg <anders@zulip.com>
2021-07-09 16:47:03 -07:00
85cbdc8904
rate_limit: Add rate limiting of ZulipRemoteServer.
2021-07-08 15:55:02 -07:00
3b4f8cc85b
saml: Add setting to skip the "continue to registration" page.
...
It's a smoother Just-In-Time provisioning process to allow
creating the account and getting signed in on the first login by the
user.
2021-07-08 15:21:20 -07:00
ee8724e436
docs: Correct Big Blue Button to BigBlueButton.
...
Signed-off-by: Anders Kaseorg <anders@zulip.com>
2021-07-05 16:59:00 -07:00
91bfebca7d
install: Replace wget with curl.
...
curl uses Happy Eyeballs to avoid long timeouts on systems with broken
IPv6.
Signed-off-by: Anders Kaseorg <anders@zulip.com>
2021-06-25 09:05:07 -07:00
108e7ee8af
docs: Update example supervisorctl status.
2021-06-14 17:12:59 -07:00
c54b48452d
saml: Support syncing custom profile fields with SAML attributes.
...
Fixes #17277 .
The main limitation of this implementation is that the sync happens if
the user authing already exists. This means that a new user going
through the sign up flow will not have their custom fields synced upon
finishing it. The fields will get synced on their consecutive log in via
SAML in the future. This can be addressed in the future by moving the
syncing code further down the codepaths to login_or_register_remote_user
and plumbing the data through to the user creation process.
We detail that limitation in the documentation.
2021-06-08 14:47:33 -07:00
16700fc82c
docs: Remove inaccurate LDAP coming soon notice.
...
We implemented this feature in the series ending with the
documentation in 2abe325147
2021-06-08 14:29:47 -07:00
161645c83c
docs: Link to install-existing-server from production/deployment.
2021-06-02 17:16:14 -07:00
03dd44e0ad
docs: Remove link to 16.04, which can be confusing.
...
The instructions do not just apply to 16.04; the block below describes
the settings, which are correct for all relevant Ubuntu versions.
2021-06-02 16:58:24 -07:00
1771f61f96
docs: Add a missing close paren.
2021-06-01 14:57:42 -07:00
663d3b780d
docs: Update path to nginx.conf, as it is now a template.
...
Also provide the right expansion for the one embedded variable
currently in the template.
2021-06-01 14:57:42 -07:00
e1b8315f5e
docs: Give an example command for generating SAML key/cert pair.
2021-06-01 08:29:05 -07:00
b31ef13cf1
docs: Mention that SAML private key cannot be encrypted.
...
The underlying xmlsec library doesn't give a very useful error when
trying to load an encrypted private key which can lead to confusion.
2021-06-01 08:29:05 -07:00
e17758f8ad
auth: Implement a generic OpenID Connect backend.
...
Fixes #11939 .
2021-05-28 09:43:06 -07:00
8960e64443
docs: Provide more detailed instructions for requesting API key.
...
Some users had trouble getting an API key that was resolved by doing
this.
Fixes #18524 .
2021-05-27 12:09:40 -07:00
3c28fa033d
docs: Update documentation for new database user and dbname flags.
...
Updated the install documentation to include the explanation of the
two new install options `--postgresql-database-name` and
`--postgresql-database-user`.
2021-05-25 13:56:05 -07:00
d1c385f425
docs: Clarify how to set GIPHY API key in settings.
2021-05-18 17:32:55 -07:00
e015f3ed7d
docs: Correct “webapp” to “web app”.
...
Signed-off-by: Anders Kaseorg <anders@zulip.com>
2021-05-14 13:15:38 -07:00
e3c570401e
docs: Document password hashing change from PBKDF2 to Argon2.
...
This changed in commit 483a351d44#3410 ).
Signed-off-by: Anders Kaseorg <anders@zulip.com>
2021-05-14 13:07:51 -07:00
653c67a2b6
docs: Explicitly list possible outgoing HTTP connections.
2021-05-13 11:06:30 -07:00
6777660e02
deployment: Document smokescreen default and configuration.
2021-05-13 11:05:47 -07:00
a9ced1d228
smokescreen: Capitalize Smokescreen in documentation.
2021-05-12 12:32:39 -07:00
c43f883699
docs: Fix typo in export docs.
...
"as part of a high evailability environment" => "as part of a high availability environment".
2021-05-10 17:33:21 -07:00
8261f7e801
commands: Add delete_user management command and document it.
2021-05-10 15:38:14 -07:00
6ee7d5c983
docs: Improve documentation for changing a realm's subdomain.
...
Add a single line for self-hosting case to point to the ReadTheDocs
section of management command to change the realm's subdomain.
Fixes : #17857
2021-05-10 12:33:43 -07:00
544bbd5398
docs: Fix capitalization mistakes.
...
Signed-off-by: Anders Kaseorg <anders@zulip.com>
2021-05-10 09:57:26 -07:00
35a5cd1e65
docs: Add new summary section to the release lifecycle page.
2021-05-05 18:24:17 -07:00
279f7b1c8d
user docs: Create separate "Code blocks" user documentation page.
...
* Move the extended documentation of code blocks to a separate page.
* Merge "code playgrounds" documentation to be a section of that page.
* Document copy widget on code blocks.
* This commit changes how we refer to "```python" type syntax for code
blocks. Instead of being called a syntax highlighting label, this is
now referred to as a "language tag", since it serves both syntax
highlighting and playgrounds.
* Remap all the links.
* Advertise this new page in various places that previously did not have a link.
2021-05-05 16:11:21 -07:00
6b7a3fb74a
markdown: Rewrite all external images to use Camo.
...
Requesting external images is a privacy risk, so route all external
images through Camo.
Tweaked by tabbott for better test coverage, more comments, and to fix
bugs.
2021-04-30 10:36:16 -07:00
03e155f38a
docs: Add production documentation for custom management commands.
2021-04-29 12:36:13 -07:00
02c5676a67
ldap: Add advanced LDAP realm access control.
...
This allows access to be more configurable than just setting one
attribute. This can be configured by setting the setting
AUTH_LDAP_ADVANCED_REALM_ACCESS_CONTROL.
2021-04-28 09:08:13 -07:00
f71b591f95
Revert "docs: Temporarily remove Giphy help center link."
...
This reverts commit a94b9cc9e2
2021-04-28 07:07:36 -07:00
4c88da8ed9
scripts: Tool to find the diff to an original settings.py prod template.
...
This hits the unauthenticated Github API to get the list of tags,
which is rate-limited to 60 requests per hour. This means that the
tool can only be run 60 times per hour before it starts to exit with
errors, but that seems like a reasonable limit for the moment.
2021-04-27 21:50:33 -07:00
ceb4b239c4
docs: Update install docs to document the install options correctly.
...
Update `docs/production/install.md` and
`docs/production/deployment.md` to document the install flags that can
be used as part of the installer more clearly.
Fixes #18122 .
2021-04-27 19:44:05 -07:00
bc9d20eaa2
docs: Describe the process of upgrading settings.py files.
...
Fixes #17782 .
2021-04-27 18:01:28 -07:00
ae2c377d13
postgresql: Switch to defaulting to PostgreSQL 13.
2021-04-27 16:55:04 -07:00
a615dcb83e
docs: Fix double-period typo in settings.md.
2021-04-26 17:07:41 -07:00
6060d0d364
docs: Add missing space to compound verbs “log in”, “set up”, etc.
...
Noun: backup, checkout, cleanup, login, logout, setup, shutdown, signup,
timeout.
Verb: back up, check out, clean up, log in, log out, set up, shut
down, sign up, time out.
Signed-off-by: Anders Kaseorg <anders@zulip.com>
2021-04-26 09:31:08 -07:00
1b5a7a2337
docs: Clarify what the certificate is supposed to be in the saml config.
...
Closes #17955 .
Users were sometimes confused about what this certificate is supposed to
be.
2021-04-23 15:16:58 -07:00
476524c0c1
scripts: Add a script to stop the server.
...
Using `supervisorctl stop all` to stop the server is not terribly
discoverable, and may stop services which are not part of Zulip
proper.
Add an explicit tool which only stops the relevant services. It also
more carefully controls the order in which services are stopped to
minimize lost requests, and maximally quiesce the server.
Locations which may be stopping _older_ versions of Zulip (without
this script) are left with using `supervisorctl stop all`.
Fixes #14959 .
2021-04-21 10:24:08 -07:00
977a2f7fa0
emails: Rename "missed message email" to "message notification email".
2021-04-21 10:10:54 -07:00
c9f5946239
puppet: Add override for queue_workers_multiprocess.
...
With tweaks to the documentation by tabbott.
This uses the following configuration option:
[application_server]
queue_workers_multiprocess = false
2021-04-20 14:37:15 -07:00
f3abe73e72
docs: Use our Digital Ocean marketplace referral code.
2021-04-20 10:45:26 -07:00
7264d44dd4
docs: Minor grammar tweak.
2021-04-16 14:05:42 -07:00
e683ae2d24
docs: Add a missing word.
2021-04-16 14:05:42 -07:00
d58931e2b5
docs: Document situations where one needs smokescreen.
2021-04-16 14:05:42 -07:00
Alex Vandiver
Anders Kaseorg
Mateusz Mandera
Tim Abbott
Adam Birds
Aman Agrawal
Matthew Wegner
Siddharth Asthana
Alya Abbott
Wesley Aptekar-Cassels
strifel
Jennifer Hwang