Commit Graph

  • 9d3b543998 Add pipeline for publishing debs main h7x4 2025-05-12 13:21:27 +02:00
  • 650181dd0c WIP: add pipeline for publishing debs publish-deb-pipeline h7x4 2025-05-12 13:21:27 +02:00
  • 6a7e8db162 Add script to create deb package h7x4 2024-04-26 00:31:23 +02:00
  • 30d02775c2 Make compile-time feature for SUID/SGID mode h7x4 2025-11-11 00:27:27 +09:00
  • 0feb959199 .gitea/workflows: remove rust cache step h7x4 2025-11-11 00:06:23 +09:00
  • 653da7d24e Create deb package dpkg-packaging h7x4 2024-04-26 00:31:23 +02:00
  • c2dcd40442 cargo fmt h7x4 2025-11-10 23:50:55 +09:00
  • 7514d5e738 flake.nix: set vim as default editor in test vm h7x4 2025-11-10 22:56:37 +09:00
  • c6d3bbca6f Add warning comments for functions running as SUID/SGID h7x4 2025-11-10 12:11:24 +09:00
  • d932b57aaa Use multithreaded tokio runtime for external server h7x4 2025-11-10 01:27:52 +09:00
  • f90e60d856 server: don't unset NOTIFY_SOCKET on enabling watchdog h7x4 2025-11-10 01:06:37 +09:00
  • 46c5d372b2 Deduplicate common username/group prefixes in error msg h7x4 2025-11-10 00:50:36 +09:00
  • e8b28f5116 flake.nix: misc fixes to test vm h7x4 2025-11-10 00:40:01 +09:00
  • 9e23f03ca2 Use non-templated systemd service h7x4 2025-11-10 00:38:26 +09:00
  • bd4791dc17 Check that executable is not SUID/SGID for unrelated subcommands h7x4 2025-11-10 00:33:53 +09:00
  • 05a4f9ad1d module.nix: don't run with debug logging by default (move to test vm) h7x4 2025-11-09 20:28:19 +09:00
  • a57eefa5be module.nix: render config to /etc h7x4 2025-11-09 20:27:36 +09:00
  • 45fbec1ad4 module.nix: default runtimedir to /run, improve systemd unit h7x4 2025-11-09 20:14:48 +09:00
  • 968c71ba79 example-config.toml: improve comments, default runtimedir to /run h7x4 2025-11-09 20:14:10 +09:00
  • 44c2fe3eca Cargo.toml: add additional metadata h7x4 2025-11-09 19:23:03 +09:00
  • 3405010508 README: add note about nixos vm h7x4 2025-11-09 18:49:48 +09:00
  • 0294381804 module.nix: explicitly disable PrivateIPC h7x4 2025-11-09 16:07:19 +09:00
  • 0457a2317d flake.nix: add runnable vm configuration h7x4 2025-11-09 16:06:55 +09:00
  • 1ee79a5b47 flake.lock: bump, Cargo.toml: update inputs h7x4 2025-11-09 16:06:08 +09:00
  • 92f6561190 .gitea/workflows: update gitea-web target host h7x4 2025-08-03 04:53:25 +02:00
  • f212ef1bfb Cargo.toml: update deps, flake.nix: add cargo-edit, bump nixpkgs h7x4 2025-07-11 19:09:43 +02:00
  • c2d22ee7f8 flake.lock: bump, Cargo.lock: bump, Cargo.toml: update inputs, format, etc h7x4 2025-05-07 10:39:10 +02:00
  • 8ba946976d README: add better description h7x4 2025-03-18 12:38:17 +01:00
  • 1cfe9ab350 LICENSE: change from GPLv2-only to BSD3 h7x4 2025-01-18 22:40:48 +01:00
  • 7aadb016a2 README.md: add badge for rust docs h7x4 2025-01-18 21:51:57 +01:00
  • d9b11f6e38 Update rust dependencies h7x4 2025-01-18 20:44:53 +01:00
  • 3fb7c143fb flake.nix: update to nixpkgs-unstable h7x4 2025-01-18 20:36:35 +01:00
  • c1cf591492 .envrc: init h7x4 2024-12-10 00:36:22 +01:00
  • d24be4eee6 .gitea/build: init h7x4 2024-12-10 00:35:45 +01:00
  • a0be0d3b92 Wrap database users and database names in newtypes h7x4 2024-08-20 17:46:43 +02:00
  • 8c2754c9d7 cargo-deny: init h7x4 2024-08-20 17:46:43 +02:00
  • 338694a64e Add more --json flags h7x4 2024-08-20 17:46:43 +02:00
  • cdb1fb4181 Integrate better with systemd + better logs and protocol usage h7x4 2024-08-20 17:46:40 +02:00
  • a4067975b6 flake.nix: add rust-src to rust toolchain for devshell h7x4 2024-08-19 19:34:55 +02:00
  • e993644844 core/database_privileges: test edit-db-privs -p parser h7x4 2024-08-19 19:26:27 +02:00
  • fe60441c89 README: fix outdated command names h7x4 2024-08-19 19:03:04 +02:00
  • 0ce90ab42a list-db -> show-db h7x4 2024-08-19 18:58:26 +02:00
  • 51302d75f0 create-users: default to setting no password in prompt h7x4 2024-08-19 18:06:47 +02:00
  • b9a1d91630 Add nixos module h7x4 2024-08-19 18:00:57 +02:00
  • b21aa0eece Fix sql regex to work like ownership validation h7x4 2024-08-19 17:57:35 +02:00
  • d1d06514a9 cargo fmt + clippy h7x4 2024-08-19 17:52:16 +02:00
  • 3556eb37ea Dont drop privs as server h7x4 2024-08-19 17:46:08 +02:00
  • 20669569f3 Fix binary collation issues for privs as well h7x4 2024-08-19 17:44:21 +02:00
  • f43499fca0 "downgrade" nixpkgs to stable, to avoid rust 1.80 breakage h7x4 2024-08-19 17:11:19 +02:00
  • ed12a3153b server/config: revamp h7x4 2024-08-19 16:47:34 +02:00
  • 48240489a7 Have server notify the client about db connection errors h7x4 2024-08-19 16:46:12 +02:00
  • 8fdfe457ac Remove a few TODOs, either solved or converted to issue h7x4 2024-08-19 02:43:05 +02:00
  • 94e0e5d6c7 build.rs: small cleanup h7x4 2024-08-19 02:23:49 +02:00
  • 807017ea70 add shell completion h7x4 2024-08-19 02:22:18 +02:00
  • 0e38fbb7e9 flake.lock: update h7x4 2024-08-19 02:23:23 +02:00
  • 5d049390b8 passwd-user: check for user existence before password input h7x4 2024-08-19 00:49:20 +02:00
  • a6f00d4313 Ensure user/db prefix has a _ behind it h7x4 2024-08-19 00:48:13 +02:00
  • cd0b2c3e6d sd_notify(ready) h7x4 2024-08-19 00:13:22 +02:00
  • 93469a6e84 Add more serverside logging h7x4 2024-08-19 00:11:11 +02:00
  • e4da639d5c Fix sqlx parse error h7x4 2024-08-19 00:09:27 +02:00
  • daa8e069d3 Fix sql statement for show-user h7x4 2024-08-18 22:57:01 +02:00
  • 86b5b47f1e Add some logging h7x4 2024-08-18 22:26:00 +02:00
  • 9d88c95f33 Fix systemd socket activation h7x4 2024-08-18 22:22:31 +02:00
  • 53f19b3d05 Replace socket authentication mechanism with SO_PEERCRED h7x4 2024-08-18 22:20:56 +02:00
  • 94c9a54c14 Bump all deps, fix db connection closing issues h7x4 2024-08-18 01:33:22 +02:00
  • 168f832aec Readd "databases where user has privileges" to show-user h7x4 2024-08-18 00:17:55 +02:00
  • f957bbd9da Don't validate prefixes and postfixes for db item ownership h7x4 2024-08-17 22:30:30 +02:00
  • 54a38255e6 privs editor: "New user" ->"Previously unprivileged" h7x4 2024-08-17 21:27:46 +02:00
  • 466d4a8b96 Use db name as example for privs editor h7x4 2024-08-17 21:24:59 +02:00
  • af86893acf Rewrite entire codebase to split into client and server h7x4 2024-08-10 02:16:38 +02:00
  • 20e60ca5c7 Add protocol for authenticating a unix socket h7x4 2024-08-09 19:08:48 +02:00
  • dc29dd274a flake.nix: create packaging, generate coverage h7x4 2024-08-09 19:05:16 +02:00
  • e420c1f4d5 edit-db-privs: display diffs and ask before commiting h7x4 2024-08-08 21:48:17 +02:00
  • 7ee60dacdc Misc fixups to priv diff logic, add tests h7x4 2024-08-08 21:02:25 +02:00
  • 8a91e9a3d0 core/database_operations: replace single field struct with sqlx unwrap h7x4 2024-08-08 19:45:28 +02:00
  • e2193f47c1 Only pass the mysql config portion when connecting h7x4 2024-08-08 19:40:57 +02:00
  • 452fa22e9c flake.nix: add cargo-nextest to devshell h7x4 2024-08-08 19:31:02 +02:00
  • 39a3f8ffd1 core/common: make testable, fix some status messages h7x4 2024-08-08 19:30:27 +02:00
  • 69870147f5 Add a few more status prints to the commands h7x4 2024-08-08 00:56:30 +02:00
  • f78c88517f Add lock-user and unlock-user h7x4 2024-08-08 00:53:26 +02:00
  • 7e71b5071f Report back more detailed results from commands h7x4 2024-08-07 23:33:07 +02:00
  • 21c1f8cc87 Fix clippy warnings h7x4 2024-08-07 23:10:37 +02:00
  • 011bcf9edc More spring cleaning for privs, add test h7x4 2024-08-07 23:00:38 +02:00
  • 1bb1c133e8 Consistently name db connection connection h7x4 2024-08-07 21:54:13 +02:00
  • 5a7516aed8 Rename most instances of "permission" to "privilege" h7x4 2024-08-07 21:51:03 +02:00
  • 7025982d44 flake.nix: add mysql-client to devshell h7x4 2024-08-07 20:50:56 +02:00
  • 71c712dce0 treewide: move some code around, spring cleaning h7x4 2024-08-07 20:50:39 +02:00
  • 833251a1a2 show-user: add databases field, report when no users h7x4 2024-08-07 20:30:16 +02:00
  • a3c894061c Remove already fixed TODO h7x4 2024-08-07 17:27:29 +02:00
  • e1f89b7b72 cargo clippy + fmt h7x4 2024-08-07 17:25:28 +02:00
  • 3d7d001f65 show-user: add --json flag h7x4 2024-08-07 17:21:26 +02:00
  • a9b8f7cee7 user_operations: don't fetch auth_string/password, only check existence h7x4 2024-08-07 17:14:24 +02:00
  • d0b750cd33 cargo clippy + fmt h7x4 2024-08-07 16:55:51 +02:00
  • d1c42dac8b Wrap all operations in database transactions h7x4 2024-08-07 16:54:26 +02:00
  • cb83942cc8 tokio: use single thread h7x4 2024-08-07 16:45:24 +02:00
  • dadfa786ef create-user: ask for password by default h7x4 2024-08-07 16:43:55 +02:00
  • f75d2fee7a replace deps edit and rpassword with dialoguer h7x4 2024-08-07 16:43:26 +02:00
  • 404e5371e3 build.rs: don't fail on symlink creation h7x4 2024-08-07 16:19:40 +02:00
  • 05c15da59d Remove already fixed TODOs h7x4 2024-08-07 16:18:48 +02:00
  • 9d0b632e9c Inline database quotation functions h7x4 2024-08-07 16:17:14 +02:00