1
0
mirror of https://github.com/Mailu/Mailu.git synced 2024-12-14 10:53:30 +02:00
Commit Graph

154 Commits

Author SHA1 Message Date
Alexander Graf
37855153b8
fixed plugin path 2022-01-17 18:12:53 +01:00
willofr
93a94d33ce
update roundcube to 1.5.2 (security fix)
New roundcube release (1.5.2) where a XSS is addressed: https://roundcube.net/news/2021/12/30/update-1.5.2-released
2022-01-05 11:17:31 +01:00
bkraul
d494dd7d2a Fixes #2131 2022-01-03 07:56:52 -06:00
Dimitri Huisman
b248026933 Fix #2117. Gpg-agent package was missing for roundcube image. 2022-01-01 10:51:11 +00:00
Florent Daigniere
6d5926ef29 prettify 2021-12-21 16:06:34 +01:00
Dimitri Huisman
385cb28bf2 Correctly calculate and set SESSION_TIMEOUT in roundcube 2021-12-20 22:13:18 +00:00
Dimitri Huisman
ab80316df6 Fix error in roundcube config 2021-12-20 21:24:03 +00:00
Florent Daigniere
3a46ee073c Make roundcube use SESSION_TIMEOUT 2021-12-20 11:36:56 +01:00
Alexander Graf
1a41657f90
add documentation, allow overrides, clean plugins 2021-12-18 17:43:21 +01:00
Alexander Graf
b3d48cc20f
fixed health check 2021-12-18 16:43:18 +01:00
Alexander Graf
e7e283663d
Merge remote-tracking branch 'upstream/master' into update_roundcube 2021-12-17 22:23:08 +01:00
Alexander Graf
64acfacc73
duh. typo 2021-12-17 15:55:16 +01:00
Alexander Graf
547ad253e1
added plugin selection, derive key, clean env 2021-12-17 15:54:05 +01:00
Alexander Graf
7c2c2dc65a
updated to carddav 4.3.0 2021-11-30 17:18:59 +01:00
Alexander Graf
1ebdb26979
updated to rc 1.5.1 2021-11-29 14:21:26 +01:00
Dimitri Huisman
f7677543c6 Process code review remarks
- Moved run to bottom of Dockerfile to allow using unmodified / cached states.
- Simplified bash code in deploy.sh.
- Improved the large bash one-liner in CI.yml. It could not handle >9 for 1.x.
2021-11-18 17:21:56 +00:00
Dimitri Huisman
56dd70cf4a Implement versioning for CI/CD workflow (see #1182). 2021-11-17 20:00:04 +00:00
Alexander Graf
423b8a6b9b
Merge branch 'master' into update_roundcube 2021-11-07 21:35:53 +01:00
DjVinnii
a6beb234ff Set timezone in roundcube.ini 2021-11-04 16:17:11 +01:00
DjVinnii
225160610b Set default TZ in Dockerfiles 2021-11-04 14:22:12 +01:00
Alexander Graf
6003e11533 duh. add timezone (again) 2021-11-03 19:32:31 +01:00
Alexander Graf
949efcf537 prevent endless redirect loop on nginx failure 2021-11-03 19:16:37 +01:00
Alexander Graf
c89045ed03 duh 2021-11-03 15:20:30 +01:00
Alexander Graf
920ac4cd21 updated to php8. fixed login. fixed max_filesize. 2021-11-03 15:18:00 +01:00
Alexander Graf
46d27e48ff Merge remote-tracking branch 'upstream/master' into update_roundcube 2021-11-03 13:57:06 +01:00
DjVinnii
a1f0c20583 Add tzdata to webmails 2021-11-02 15:32:27 +01:00
Alexander Graf
ee45475567 updated roundcube. added cleanup run at startup 2021-11-02 12:21:40 +01:00
Dimitri Huisman
5232bd38fd Simplify webmail logout. 2021-10-26 12:07:36 +00:00
Dimitri Huisman
44d2448412 Updated SSO logic for webmails. Fixed small bug rate limiting. 2021-10-25 19:21:38 +00:00
Alexander Graf
ef9e1ac279 remove health check from log 2021-09-28 12:29:57 +02:00
Alexander Graf
7380b248cf direct logging of php errors to stderr 2021-09-28 11:16:40 +02:00
Alexander Graf
cd17aa0c43 repair failing health-check 2021-09-28 11:06:59 +02:00
Alexander Graf
16691e83ad re-enable mod_rewrite in roundcube
moved chown/mkdir/symlink from start.py to Dockerfile
2021-09-24 18:15:00 +02:00
Diman0
7083b3f7c6 Fix roundcube sso header issue
Removed apache rewrite module.
2021-09-24 12:10:21 +02:00
Alexander Graf
6c510e2e86 enabled caching via .htaccess 2021-09-06 13:48:13 +02:00
Erriez
6cecacb6da Add catch_workers_output to php-rainloop.conf 2021-08-18 21:50:13 +02:00
Erriez
6437540704 Change error_log to warn 2021-08-18 19:00:32 +02:00
Erriez
5adc4f08f6 Restore curl 2021-08-16 17:41:36 +02:00
Erriez
10f2c17979 Restore Roundcube PHP files 2021-08-13 23:21:12 +02:00
Erriez
5a1d89aaac Restore Rainloop Dockerfile HEALTHCHECK 2021-08-13 23:20:41 +02:00
Erriez
556a5897d1 Install php7-pdo and php7-pdo_sqlite for contacts 2021-08-12 21:10:06 +02:00
Erriez
d0a0ba6727 Optimize PHP pm setting to ondemand
The ondemand setting results in lower memory consumption in idle.
2021-08-12 20:49:58 +02:00
Erriez
0fd97124f7 Process review feedback 2021-08-12 17:23:24 +02:00
Erriez
d472900efa Optimize Rainloop to NGINX
- Reduce build time.
- Reduce image size.
- Faster user response using CGI.
2021-08-10 21:47:14 +02:00
Florent Daigniere
defea3258d update arm builds too 2021-08-03 13:58:54 +02:00
bors[bot]
66ea28b50a
Merge #1845
1845: Update rainloop to 1.16.0 r=mergify[bot] a=nextgens

## What type of PR?

Security-update for rainloop.

## What does this PR do?

Upgrade to rainloop v1.16

### Related issue(s)
- #1829

## Prerequistes
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [x] In case of feature or enhancement: documentation updated accordingly
- [x] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/guide.html#changelog) entry file.


Co-authored-by: Florent Daigniere <nextgens@freenetproject.org>
2021-07-06 09:13:21 +00:00
Florent Daigniere
d75c8469d3 Update rainloop to 1.16.0 2021-07-03 15:10:34 +02:00
Alexander Graf
14bdeb5e1e Update version of roundcube webmail and carddav plugin.
This is a security update.

- roundcube 1.4.11
- carddav 4.1.2
2021-06-30 12:36:11 +02:00
bors[bot]
fc1a663da2
Merge #1754
1754: centralize Webmail authentication behind the admin panel (SSO) r=mergify[bot] a=nextgens

## What type of PR?

Enhancement: it centralizes the authentication of webmails to the admin interface.

## What does this PR do?

It implements the glue required for webmails to do SSO using the admin interface.
One of the main advantages of centralizing things this way is that it reduces significantly the attack surface available to an unauthenticated attacker (no webmail access until there is a valid Flask session).

Others include the ability to implement 2FA down the line and rate-limit things as required.

### Related issue(s)
- #783

## Prerequistes
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [x] In case of feature or enhancement: documentation updated accordingly
- [x] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/guide.html#changelog) entry file.


Co-authored-by: Florent Daigniere <nextgens@freenetproject.org>
2021-06-29 12:32:21 +00:00
parisni
a9548e4cbd Remove mailu/roundcube shared host 2021-06-19 09:20:23 +02:00