* security(nginx): use only strong ciphers over ssl
* drop support for TLSv1 and TLSv1.1, and add support for TLSv1.3
* disable all ciphers else for EECDH+AESGCM and EDH+AESGCM
* disable session ticketing
* use secp384r1 as certificate curve
* enable strict transport security with preloading
* enable xss-protection
Signed-off-by: Chinmay D. Pai <chinmaydpai@gmail.com>
* chore: explicitly state ssl on listening socket
Signed-off-by: Chinmay D. Pai <chinmaydpai@gmail.com>
* remove download_chart_of_accounts method as it is not being used
anywhere
* use reload_module from six for flake8 fixes
Signed-off-by: Chinmay D. Pai <chinmaydpai@gmail.com>
* Easy Installer did not support Debian 10 Buster, so I changed the playbooks to support Debian 10.
* Related Issue: #831
* Tested in a newly deployed Debian 10 Buster running on KVM and in a brand new deployed LXC Container (--container) also running fine.
fixes issue where unicode keyword does not exist for python3:
Traceback (most recent call last):
File "/usr/local/bin/bench", line 11, in <module>
load_entry_point('bench', 'console_scripts', 'bench')()
File "/home/frappe/.bench/bench/cli.py", line 40, in cli
bench_command()
File "/usr/local/lib/python3.6/dist-packages/click/core.py", line 764, in __call__
return self.main(*args, **kwargs)
File "/usr/local/lib/python3.6/dist-packages/click/core.py", line 717, in main
rv = self.invoke(ctx)
File "/usr/local/lib/python3.6/dist-packages/click/core.py", line 1137, in invoke
return _process_result(sub_ctx.command.invoke(sub_ctx))
File "/usr/local/lib/python3.6/dist-packages/click/core.py", line 1137, in invoke
return _process_result(sub_ctx.command.invoke(sub_ctx))
File "/usr/local/lib/python3.6/dist-packages/click/core.py", line 956, in invoke
return ctx.invoke(self.callback, **ctx.params)
File "/usr/local/lib/python3.6/dist-packages/click/core.py", line 555, in invoke
return callback(*args, **kwargs)
File "/home/frappe/.bench/bench/commands/setup.py", line 22, in setup_nginx
make_nginx_conf(bench_path=".", yes=yes)
File "/home/frappe/.bench/bench/config/nginx.py", line 13, in make_nginx_conf
sites = prepare_sites(config, bench_path)
File "/home/frappe/.bench/bench/config/nginx.py", line 100, in prepare_sites
sites_configs = get_sites_with_config(bench_path=bench_path)
File "/home/frappe/.bench/bench/config/nginx.py", line 217, in get_sites_with_config
if isinstance(domain, str) or isinstance(domain, unicode):
NameError: name 'unicode' is not defined
Signed-off-by: Chinmay D. Pai <chinmaydpai@gmail.com>
i think some changes to the newer version of ansible api (2.9.0) causes
mariadb installation to fail spectacularly. pinning the ansible version
to 2.8.5 should fix this issue for now.
Signed-off-by: Chinmay D. Pai <chinmaydpai@gmail.com>
