Jonathan Hult
44f612f121
Fix typo - "netforwad" -> "netforward" ( #647 )
2023-01-08 23:51:08 +01:00
Roy
f9dfafa9d9
Add device flow scope. ( #616 )
...
add the openid as the base scope
2023-01-08 22:26:14 +01:00
Maycon Santos
ca62f6787a
Use configuration input struct ( #645 )
...
As we will be passing more flags to configure
local agents, we need a more flexible type
2023-01-08 12:57:28 +01:00
Maycon Santos
27f4993ce3
Add netbird installer project ( #637 )
2023-01-08 11:33:04 +01:00
Misha Bragin
5c0b8a46f0
Add system activity tracking and event store ( #636 )
...
This PR adds system activity tracking.
The management service records events like
add/remove peer, group, rule, route, etc.
The activity events are stored in the SQLite event store
and can be queried by the HTTP API.
2023-01-02 15:11:32 +01:00
Oskar Manhart
50caacff69
Fix COTURN config when selfhosting netbird
...
Coturn doesn't read the turnserver.conf when selfhosting netbird.
This PR fixes that.
2022-12-22 12:02:48 +01:00
Maycon Santos
d18966276a
Store the previous applied dns configuration hash ( #628 )
...
This prevents changing the system
DNS config when there is nothing to new
It also prevents issues with network change on google chrome
2022-12-16 17:00:20 +01:00
Maycon Santos
6b32e2dc07
Validate single account domain input ( #624 )
2022-12-13 13:43:29 +01:00
Maycon Santos
c0a62b6ddc
Add DNS domain to getting started scripts ( #625 )
2022-12-13 13:42:43 +01:00
Maycon Santos
7dfef091bb
Properly parse dns resolver address ( #622 )
...
Prevent panic when address is empty. Common with older managers, where
resolver is disabled by default as
we receive an empty dns config
2022-12-13 12:26:48 +01:00
Maycon Santos
93fcfeae91
Export single account domain variable
2022-12-08 19:45:33 +01:00
Maycon Santos
6f610dca89
Filter routes to sync from same HA group ( #618 )
...
An additional check and filter for routes that are part
of the same HA group where the peer is a routing peer
2022-12-08 15:15:50 +01:00
Maycon Santos
eec24fc730
Use latest tag for dashboard ( #617 )
...
Using the latest tag will align with the
dashboard's new release cycle that relies on tags
2022-12-08 15:15:17 +01:00
Krzysztof Nazarewski
1204bbd54a
HA Network Routes: prevent routing directly-accessible networks through VPN interface ( #612 )
...
Prevent routing peer to add routes from the same HA group as client routes
2022-12-08 13:19:55 +01:00
Maycon Santos
0be46c083d
Generate validation certificate from mandatory JWK fields ( #614 )
...
When there is no X5c we will use N and E fields of
a JWK to generate the public RSA and a Pem certificate
2022-12-07 22:06:43 +01:00
Maycon Santos
0fbfec4ce4
Remove wiretrustee conflict checks ( #615 )
2022-12-07 18:53:48 +01:00
Maycon Santos
d43f0200a6
Handle peer deletion and state update ( #611 )
...
If peer is deleted in the console,
we set its state as needs login
On Down command we clean any previous state errors
this prevents need for daemon restart
Removed state error wrapping when engine exits, log is enough
2022-12-06 15:37:30 +01:00
Maycon Santos
a387e3cfc2
Add network routes distribution groups ( #606 )
...
Updated tests, API, and account manager methods
Sync routes to peers in the distribution groups
Added store upgrade by adding the All group to routes that don't have them
2022-12-06 10:11:57 +01:00
Misha Bragin
d1b7c23b19
Add SetupKey usage limit ( #605 )
...
Add a usage_limit parameter to the API.
This limits the number of times a setup key
can be used.
usage_limit == 0 indicates the the usage is inlimited.
2022-12-05 13:09:59 +01:00
Maycon Santos
d2d5d4b4b9
Update go version ( #603 )
...
Removed ioctl code and remove exception from lint action
2022-12-04 13:22:21 +01:00
Maycon Santos
d029136d3d
Add security policy file ( #600 )
2022-12-02 13:54:22 +01:00
Maycon Santos
a6d2f673ad
Add contribution guide ( #595 )
...
* Add contribution guide
* update code of conduct contact email
* add PR template
2022-12-02 13:31:31 +01:00
Maycon Santos
0cf0dc048b
Update issue templates ( #597 )
2022-12-02 13:31:15 +01:00
Rui Lopes
5ade879e31
Remove the leading space from the Signal status value ( #594 )
2022-12-01 11:48:13 +01:00
Maycon Santos
a814715ef8
Add resolvconf configurator for linux ( #592 )
2022-11-29 14:51:18 +01:00
Maycon Santos
4a30b66503
Check if system is our manager when resolvconf ( #590 )
...
Sometimes resolvconf will manage the /etc/resolv.conf file
And systemd-resolved still the DNS manager
2022-11-29 13:37:50 +01:00
Maycon Santos
ae500b63a7
User custom loopback address ( #589 )
...
We will probe a set of addresses and port
to define the one available for our DNS service
if none is available, we return an error
2022-11-29 11:49:18 +01:00
Maycon Santos
20a73e3e14
Sync peers FQDN ( #584 )
...
Use stdout and stderr log path only if on Linux and attempt to create the path
Update status system with FQDN fields and
status command to display the domain names of remote and local peers
Set some DNS logs to tracing
update readme file
2022-11-26 13:29:50 +01:00
Misha Bragin
fcf7786a85
Disable route when removing peer ( #582 )
2022-11-25 18:11:07 +01:00
Maycon Santos
a78fd69f80
Feature/dns client configuration ( #563 )
...
Added host configurators for Linux, Windows, and macOS.
The host configurator will update the peer system configuration
directing DNS queries according to its capabilities.
Some Linux distributions don't support split (match) DNS or custom ports,
and that will be reported to our management system in another PR
2022-11-23 13:39:42 +01:00
Genteure
4bd5029e7b
Enable IPv6 address discovery ( #578 )
...
Agents will use IPv6 when available for ICE negotiation
2022-11-23 11:03:29 +01:00
Tom Kunicki
f604956246
External NAT IP mapping support ( #487 )
...
* External NAT IP mapping support
* Ignore blacklisted interfaces, even if in user specified in mapping
2022-11-23 08:42:12 +01:00
Misha Bragin
53c532bbb4
Fix interactive SSO login when creating account from a device ( #575 )
2022-11-22 12:37:36 +01:00
Misha Bragin
8b0a1bbae0
Display peers of a user that it has access to ( #571 )
...
If a user has a non-admin role, display all peers
that user's peers have access to when calling
/peers endpoint of the HTTP API.
2022-11-21 17:45:14 +01:00
Misha Bragin
e965d6c022
Fix CISPA note
2022-11-21 17:36:07 +01:00
Misha Bragin
11f8249eed
Add CISPA note ( #572 )
2022-11-21 16:38:41 +01:00
Maycon Santos
d63a9ce4a7
Return peer's FQDN via API ( #567 )
...
Added a temp method to retrieve the dns domain
2022-11-21 11:14:42 +01:00
Maycon Santos
9cb66bdb5d
Update last run time and active count ( #568 )
...
* Update last run time and active count
We will collect the active peer min and max versions
* Get UI client usage
2022-11-18 16:35:13 +01:00
Genteure
c8ace8bbbe
Fix docker network interface filter ( #564 )
...
docker network address are assigned on network interfaces that start with "br-"
2022-11-15 22:07:58 +01:00
Misha Bragin
509d23c7cf
Replace gRPC errors in business logic with internal ones ( #558 )
2022-11-11 20:36:45 +01:00
Misha Bragin
1db4027bea
Remove docs typo
2022-11-10 10:48:00 +01:00
Misha Bragin
d4dbc322be
Add ref to ICE in Readme
2022-11-10 10:46:40 +01:00
Misha Bragin
e19d5dca7f
Refactor AddPeer to ensure consistency ( #557 )
2022-11-08 16:14:36 +01:00
Maycon Santos
157137e4ad
Use a single way to generate network map ( #550 )
2022-11-08 11:38:40 +01:00
Maycon Santos
7d7e576775
Set report caller when info or higher ( #555 )
2022-11-08 10:56:13 +01:00
Misha Bragin
f37b43a542
Save Peer Status separately in the FileStore ( #554 )
...
Due to peer reconnects when restarting the Management service,
there are lots of SaveStore operations to update peer status.
Store.SavePeerStatus stores peer status separately and the
FileStore implementation stores it in memory.
2022-11-08 10:46:12 +01:00
Maycon Santos
7e262572a4
Move dns label generation to store ( #552 )
2022-11-08 10:31:34 +01:00
Misha Bragin
a768a0aa8a
Always lock the store when getting an account ( #551 )
2022-11-07 19:09:22 +01:00
Misha Bragin
ed7ac81027
Introduce locking on the account level ( #548 )
2022-11-07 17:52:23 +01:00
Maycon Santos
1f845f466c
Add account copy test ( #549 )
2022-11-07 17:37:28 +01:00
