1
0
mirror of https://github.com/Mailu/Mailu.git synced 2025-07-03 00:47:16 +02:00
Commit Graph

263 Commits

Author SHA1 Message Date
f1a60aa6ea Remove unneeded auth_request_set 2021-10-27 11:11:50 +00:00
d3f07a0882 Simplify the handling of /static 2021-10-27 10:56:34 +02:00
aee089f3b1 Ensure that static assets are readable 2021-10-27 10:55:47 +02:00
48764f0400 Ensure all requests from the page sso go through the page sso. 2021-10-27 08:06:53 +00:00
5232bd38fd Simplify webmail logout. 2021-10-26 12:07:36 +00:00
5d81846c5d Introduce the shared stub /static for providing all static files 2021-10-26 11:30:06 +00:00
eb74a72a52 Moved locations to correct area in nginx.conf. 2021-10-26 07:35:06 +00:00
aa7380ffba Doh! 2021-10-25 20:00:00 +00:00
44d2448412 Updated SSO logic for webmails. Fixed small bug rate limiting. 2021-10-25 19:21:38 +00:00
ed7adf52a6 Merge branch 'master' of github.com:Diman0/Mailu into fix-sso-1929 2021-10-25 17:31:25 +00:00
913a6304a7 Finishing touches. Introduce /static stub for handling all static files. 2021-10-25 17:24:41 +00:00
41f5b43b38 Set nginx logging to level info again. 2021-09-24 15:33:16 +02:00
f4cde61148 Make header translatable. More finishing touches. 2021-09-24 15:29:28 +02:00
9894b49cbd Merge/Update with changes from master 2021-09-24 10:07:52 +02:00
89ea51d570 Implement rate-limits 2021-09-23 18:40:49 +02:00
bf0aad9820 Merge branch 'master' of github.com:Mailu/Mailu into fix-sso-1929 2021-09-22 17:04:13 +02:00
1e8b41f731 Merge remote-tracking branch 'upstream/master' into adminlte3_fixes 2021-09-09 13:22:15 +02:00
d464187477 Merge #1964
1964: Alpine3.14.2 r=mergify[bot] a=nextgens

Upgrade to alpine 3.14.2, retry upgrading unbound & switch back to libressl

Co-authored-by: Florent Daigniere <nextgens@freenetproject.org>
2021-09-06 15:59:10 +00:00
a319ecde29 also precompress static txt files 2021-09-06 13:52:35 +02:00
b445d9ddd1 set expire headers only for mailu content
also moved robots.txt from config to static folder.
2021-09-06 13:45:48 +02:00
698ee4e521 added tiff and webp to list of cached content 2021-09-06 09:10:59 +02:00
72ba5ca3f9 fix 1789: ensure that nginx resolves ipv4 addresses 2021-09-03 21:59:53 +02:00
b148e41d9b Fix nginx config 2021-09-03 13:01:09 +02:00
f4e7ce0990 enabled caching, gzip and robots.txt 2021-09-02 20:48:44 +02:00
103918ba57 pre-compress assets (*.ico for now) 2021-09-02 20:46:56 +02:00
39d7a5c504 pngcrushed images 2021-09-02 20:46:08 +02:00
960033525d configure sso in nginx 2021-09-02 18:02:20 +02:00
8868aec0dc Merge master. Make sso login working for admin. 2021-09-02 17:08:50 +02:00
d7c2b510c7 Give alpine 3.14.2 a shot 2021-09-01 18:56:44 +02:00
394c2fe22c Document REAL_IP_HEADER and REAL_IP_FROM
Fix a security vulnerability whereby we were not clearing other headers
2021-08-28 10:03:18 +02:00
6bba0cecfc Strip the Forwarded header since nothing is compatible with it yet 2021-08-28 09:02:52 +02:00
3e676e232a fix #1270 2021-08-23 19:41:44 +02:00
dd127f8f06 Change letsencrypt timer from 1h --> 1 day
There's no need to be calling certbot so frequently
2021-08-18 15:57:53 +02:00
6704cb869a Switch to 3072bits dhparam (instead of 4096bits)
We aim for 128bits of security here
2021-08-18 15:51:16 +02:00
e304c352a1 Change letsencrypt timer from 1h --> 1 day
There's no need to be calling certbot so frequently
2021-08-18 15:40:44 +02:00
c76a76c0b0 make it optional, add a knob 2021-08-10 12:19:51 +02:00
109a8aa000 Ensure that we always have CERT+INTERMEDIARY CA
Let's encrypt may change things up in the future...
2021-08-10 10:55:21 +02:00
974bcba5ab Restore LOGIN as tests assume it's there 2021-08-10 09:05:02 +02:00
12c842c4b9 In fact in fullchain we want all but the last 2021-08-09 23:27:03 +02:00
24f9bf1064 format certs for nginx 2021-08-09 22:51:23 +02:00
98b903fe13 don't send the rootcert 2021-08-09 21:38:03 +02:00
92ec446c20 doh 2021-08-09 21:29:05 +02:00
f05cc99dc0 Add ECC certs for modern clients 2021-08-09 21:06:15 +02:00
cb68cb312b Reduce the size of the RSA key to 3072bits
This is already generous for certificates that have a 3month validity!

We rekey every single time.
2021-08-09 20:40:56 +02:00
5e7d5adf17 AUTH shouldn't happen on port 25 2021-08-09 20:10:49 +02:00
7285c6bfd9 admin won't understand LOGIN 2021-08-09 17:29:42 +02:00
48f3b1fd49 Merge #1656
1656: Add ability to set no WEBROOT_REDIRECT to Nginx r=mergify[bot] a=DavidFair

## What type of PR?

Enhancement / Documentation

## What does this PR do?

From commit:

---

Adds a 'none' env option to WEBROOT_REDIRECT so that no `location /`
configuration is written to nginx.conf.

This is useful for setting up Mailu and Mailman where we override the
root to proxy to the mailing list server instead. Without this change
the nginx container will not start, or for 1.7 users can set their
WEBMAIL_PATH to / with no webmail to get the same results.

This fix means that future users don't have to choose between webmail
and a root override and makes the configuration intention clear.

---

I've also added bullet points to break up a long flowing sentence in `configuration.rst` - it should be a bit easier to read now

### Related issue(s)
No Related Issue - I just jumped to a PR

## Prerequistes
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [x] In case of feature or enhancement: documentation updated accordingly

@ Maintainers - Is this worthy of the changelog, it's useful to know about but I imagine the number of people it affects is equally minimal?
- [ ] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/guide.html#changelog) entry file.


Co-authored-by: David Fairbrother <DavidFair@users.noreply.github.com>
2021-08-06 19:15:42 +00:00
420afa53f8 Upgrade to alpine 3.14 2021-07-05 15:50:49 +02:00
dd3d03f06d Merge remote-tracking branch 'upstream/master' into webmail-sso 2021-03-10 14:41:12 +01:00
ce0c93a681 Merge #1618
1618: add OCSP stapling to nginx.conf r=mergify[bot] a=lub

It's not added in tls.conf, because apparently the mail ssl module
doesnt' support OCSP stapling.

https://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_stapling
^ exists

https://nginx.org/en/docs/mail/ngx_mail_ssl_module.html#ssl_stapling
^ missing

When the configured certificate doesn't have OCSP information, it'll
just log a warning during startup.

## What type of PR?

enhancement

## What does this PR do?

It enables OCSP stapling for the http server. OCSP stapling reduces roundtrips for the client and reduces load on OCSP responders.

### Related issue(s)
- fixes  #1616

## Prerequistes
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [x] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/guide.html#changelog) entry file.


Co-authored-by: lub <git@lubiland.de>
2021-03-08 09:39:25 +00:00