* Add git auth providers schema
* Pipe git auth providers to the schema
* Add git auth providers to the API
* Add gitauth endpoint to query authenticated state
* Add endpoint to query git state
* Use BroadcastChannel to automatically authenticate with Git
* Add error validation for submitting the create workspace form
* Fix panic on template dry-run
* Add tests for the template version Git auth endpoint
* Show error if no gitauth is configured
* Add gitauth to cliui
* Fix unused method receiver
* Fix linting errors
* Fix dbauthz querier test
* Fix make gen
* Add JavaScript test for git auth
* Fix bad error message
* Fix provisionerd test race
See https://github.com/coder/coder/actions/runs/4277960646/jobs/7447232814
* Fix requested changes
* Add comment to CreateWorkspacePageView
* docs: Update the troubleshooting section
Update the troubleshooting section to link web-server docs
* make fmt
* Update docs/templates.md
Co-authored-by: Ben Potter <me@bpmct.net>
---------
Co-authored-by: Ben Potter <me@bpmct.net>
* added query for tokens by user id
* updated query args
* adding owner col
* fix request params
* update-golden-files
* added owners col to ls table output
* added ttoken translations
* prettier
* format table according to arg
* using slice.Contains
* refactored token state
* cleanup
This PR adds the prometheus metric coderd_workspace_builds_total.
It measures the total number of workspace builds, along with a number of labels intended to be useful for an operator debugging a failed workspace build trying to discover the scope of the issue.
- Remove mostly redundant "Transferred" column
- Rename "Bandwidth" to "Throughput"
- Replace "--reverse" (which has an ambiguous starting state) with "--direction=(up|down)"
- Tolerate AgentStartErrors which may be caused by failing startup
script
* docs: apache reverse proxy
* fixed to correctly pass WebSocket headers
* add a sample configuration file
* updating with suggestions
* Update coder.conf
* fix http to https redirection
* fix: upgrade http to https
* Update examples/web-server/apache/README.md
Co-authored-by: Ben Potter <me@bpmct.net>
* add other dns providers documentation link
---------
Co-authored-by: Ben Potter <me@bpmct.net>
Co-authored-by: Ben Potter <ben@coder.com>
* docs: Add nginx reverse-proxy example
This PR adds nginx reverse-proxy example to provision coder with tls certificate using letsencrypt certbot.
This will partially resolve#6086.
* change nginx example to to absolute path
* Update examples/web-server/nginx/README.md
Co-authored-by: Ben Potter <me@bpmct.net>
* Update examples/web-server/nginx/README.md
Co-authored-by: Ben Potter <me@bpmct.net>
* Update examples/web-server/nginx/README.md
Co-authored-by: Ben Potter <me@bpmct.net>
* Update examples/web-server/nginx/README.md
Co-authored-by: Ben Potter <me@bpmct.net>
* Update examples/web-server/nginx/README.md
Co-authored-by: Ben Potter <me@bpmct.net>
* Update examples/web-server/nginx/README.md
Co-authored-by: Ben Potter <me@bpmct.net>
* Update examples/web-server/nginx/README.md
Co-authored-by: Ben Potter <me@bpmct.net>
* Update examples/web-server/nginx/README.md
Co-authored-by: Ben Potter <me@bpmct.net>
* Update examples/web-server/nginx/README.md
Co-authored-by: Ben Potter <me@bpmct.net>
* Update examples/web-server/nginx/README.md
Co-authored-by: Ben Potter <me@bpmct.net>
* Update examples/web-server/nginx/README.md
Co-authored-by: Ben Potter <me@bpmct.net>
* Update examples/web-server/nginx/README.md
Co-authored-by: Ben Potter <me@bpmct.net>
* Update examples/web-server/nginx/README.md
Co-authored-by: Ben Potter <me@bpmct.net>
* Update examples/web-server/nginx/README.md
Co-authored-by: Ben Potter <me@bpmct.net>
* Update examples/web-server/nginx/README.md
Co-authored-by: Ben Potter <me@bpmct.net>
* refactor: replaced bullets with numbered lists
* remove the ambiguous ip addr.
* fixed a typo
* correctly handle the wildcard subdomain
* simplified after testing
* fmt: prettier formatting
* Adapt to the coder style guide
* fix: agent disconnection
* Update examples/web-server/nginx/README.md
Co-authored-by: Ben Potter <me@bpmct.net>
* Update docs/admin/configure.md
Co-authored-by: Ben Potter <me@bpmct.net>
* Update examples/web-server/nginx/README.md
Co-authored-by: Ben Potter <me@bpmct.net>
* updated with suggested changes
* updated with requested changes
* add reference to certbot docs for other dns providers
---------
Co-authored-by: Ben Potter <me@bpmct.net>
Updates templates examples and docs to pass the --method standalone argument
to code-server install script, and installs code-server under /tmp/code-server.
Co-authored-by: Mathias Fredriksson <mafredri@gmail.com>
---------
Co-authored-by: Mathias Fredriksson <mafredri@gmail.com>
* added migration for api key resource
* sort of working
* auditing login
* passing the correct user id
* added and fixed tests
* gen documentation
* formatting and lint
* lint
* audit Github oauth and write tests
* audit oauth and write tests
* added defer fn for login error auditing
* fixed test
* feat: audit logout (#5998)
* Update coderd/userauth.go
Co-authored-by: Steven Masley <Emyrk@users.noreply.github.com>
* fix test
* bypassing diff generation if login/logout
* lint
---------
Co-authored-by: Steven Masley <Emyrk@users.noreply.github.com>
Adds a flag --disable-password-auth that prevents the password login
endpoint from working unless the user has the "owner" (aka. site admin)
role.
Adds a subcommand `coder server create-admin-user` which creates a user
directly in the database with the "owner" role, the "admin" role in
every organization, and password auth. This is to avoid lock-out
situations where all accounts have the login type set to an identity
provider and nobody can login.
Adds --session-duration which lets admins customize the default session
expiration for browser sessions.
Adds --disable-session-expiry-refresh which allows admins to prevent
session expiry from being automatically bumped upon the API key being
used.
* fix: index template versions by template and name
We were incorrectly returning template versions by name relative
to organizations. This could result in an incorrect version being
returned if multiple templates had versions with the same name.
* Fix auth referencing
* Fix route location
* Fix authorize route name
* Fix previous call
* Fix authorize route name
* feat: generate a self-signed certificate if no certificates are specified
Clouds like AWS automatically navigate to https://<ip-here>. This
allows us to bind to that immediately, serve a self-signed certificate,
then reroute to the access URL.
* Add new flag and deprecate old one
* Fix redirect if not using tunnel
* Add deprecation notice
* Fix TLS redirect
* Run `make gen`
* Fix bad test
* Fix gen
Ben Potter