557de8e24c
Update settings to re-use admin layout, one big navigation tree, improve settings forms
2017-01-28 03:56:10 +01:00
0bf8c1b5d8
Do not automatically login after password reset, as it would circumvent two-factor auth (if enabled)
...
Do not require e-mail address changes to be re-confirmed, it's only trouble for no real benefit
2017-01-27 20:35:16 +01:00
9b8670c939
Added optional two-factor authentication
2017-01-27 20:35:16 +01:00
8008b60324
Fix key names in statsd
2017-01-26 19:46:52 +01:00
fd23876e75
Improve StatsD instrumentation
2017-01-26 19:08:05 +01:00
4bd0286045
Fix up timeout, improve contrast on "show more", add responsive style
...
for extremely wide monitors
2017-01-26 18:48:56 +01:00
f80c55b591
Fix error
2017-01-22 23:07:31 +01:00
e161d2acdc
Override Rack::Request to use the same trusted proxy settings as Rails
2017-01-22 21:01:28 +01:00
f748a91ec7
Fix #463 - Fetch and display previews of URLs using OpenGraph tags
2017-01-20 01:00:14 +01:00
86264a950c
Add optional StatsD performance tracking
2017-01-18 23:44:29 +01:00
a898072d76
Add Heroku deployment support
2017-01-17 22:00:03 +11:00
db40fd4641
Change default S3 ACL string used by Paperclip from 'public' (which is invalid) to 'public-read'
2017-01-15 20:58:46 +11:00
f29df16eea
Fix Paperclip timeout setting. Fix bug introduced in #437
2017-01-08 19:12:54 +01:00
438446b397
Add read timeout to paperclip when it's downloading remote images
2017-01-07 15:43:56 +01:00
238233440f
Follow call on locked account creates follow request instead
...
Reflect "requested" relationship in API and UI
Reflect inability of private posts to be reblogged in the UI
Disable Webfinger for locked accounts
2016-12-22 23:03:57 +01:00
7855a9b58b
Don't use rack timeout in any but production environments
2016-12-21 19:10:40 +01:00
9d4f96f440
Removing external hub completely, fix #333 fixing digit-only hashtags,
...
removing web app capability from non-webapp pages
2016-12-18 12:24:37 +01:00
4a167885b2
Fix paperclip config
2016-12-07 17:19:29 +01:00
311f2354cf
Update Paperclip config to allow plugging in Minio instead of AWS
2016-12-07 16:59:18 +01:00
5522606989
Add single user mode
2016-12-06 17:19:26 +01:00
e5e702a976
Adding configurable e-mail blacklist
2016-12-04 19:07:02 +01:00
f6b99b05d3
Do not use expiring links after all
2016-12-04 13:02:43 +01:00
595f592304
Do not autoplay videos, display play button instead. Use expiring links when using S3. Do not keep originals
...
for avatars/headers, resize avatars down to 120x120 instead of 300x300. Set cache headers on S3 stuff, also
make it private (aka only accessible via expiring links to prevent hotlinking)
2016-12-04 12:28:10 +01:00
e20d57a9e6
Fix cloudfront config
2016-12-03 22:12:22 +01:00
b245dc1575
Add Cloudfront support
2016-12-03 22:08:15 +01:00
67db2cd871
Upgrade Paperclip to 5, AWS-SDK to 2, do not generate medium/small versions of avatars
2016-11-29 14:20:15 +01:00
3c1c2b0e06
Adding rack timeout of 30sec, PuSH jobs moved to push queue so they
...
can be processed separately
2016-11-29 02:07:14 +01:00
56b9edd476
Don't rate-limit PuSH endpoints
2016-11-29 00:44:11 +01:00
79075e1303
Fix URLs in inline-rendered XML
2016-11-29 00:26:01 +01:00
4d3cd93221
Fix URLs in ApplicationController.renderer
2016-11-28 21:21:05 +01:00
de5764c372
Fix reset date format when rate limited
2016-11-25 18:20:47 +01:00
30f9e9e624
Remove Neo4J
2016-11-24 23:46:27 +01:00
8ab2fcbb2c
Mini Profiler not working well, remove it
2016-11-24 19:59:11 +01:00
30010a6dbd
Moving some counter queries out of subqueries in the API
2016-11-22 22:59:54 +01:00
0e0b4f9e59
i18n for devise mailer too
2016-11-16 18:25:21 +01:00
1b61e404b4
Localizations for most server-side strings
2016-11-16 00:55:33 +01:00
e71b152d89
Fix rubocop issues, introduce usage of frozen literal to improve performance
2016-11-15 16:56:29 +01:00
46191e7071
Adding Emoji One
2016-11-08 21:46:29 +01:00
9da30e31c8
Fix region setting for AWS gem
2016-11-08 18:55:46 +01:00
8f0869876b
Improved configuration from ENV, cleaned up timeline filter methods
...
to be more readable, add extra logging to process feed service
2016-11-07 23:20:52 +01:00
89e887b44a
Fix insecure S3 URLs
2016-11-06 20:59:06 +01:00
54b9a42b3a
Fix URL configuration when S3 is enabled
2016-11-06 20:43:16 +01:00
ec43fb73ed
Improve S3 config
2016-11-06 18:55:20 +01:00
eb6ad973d1
Adding optional S3, fail-mastodon
2016-11-06 18:35:46 +01:00
e7035a4d39
Make cookies https-only if LOCAL_HTTPS is true, set X-Frame-Options to DENY,
...
add permissive CORS to API controllers
2016-11-02 12:58:15 +01:00
ff0eca7337
Restrict access to oauth/applications to admins only
2016-10-23 12:08:52 +02:00
6657414266
Adding OAuth access scopes, fixing OAuth authorization UI, adding rate limiting
...
to the API
2016-10-22 19:39:44 +02:00
be98addccc
Improving all forms
2016-10-18 16:37:15 +02:00
02613aef3b
Adding application/jrd+json webfinger resource
2016-10-18 02:54:49 +02:00
5860094354
Adding sync of follow relationships to Neo4J, accounts/suggestions API
2016-10-14 23:10:07 +02:00
Eugen Rochko