1
0
mirror of https://github.com/Mailu/Mailu.git synced 2025-01-22 03:39:05 +02:00

2050 Commits

Author SHA1 Message Date
Florent Daigniere
8c6b0ccdb3 fix #3403
(cherry picked from commit e5790a297aa3cfaf0092970ea3716e6cb1eda7f9)
2024-09-07 18:45:49 +00:00
Florent Daigniere
6fc97ee2cb doh2
(cherry picked from commit 1917bf7ee4ded980f66f39483547a16f80e2a107)
2024-08-11 16:43:16 +00:00
Florent Daigniere
7556df2fa7 Fix CI
(cherry picked from commit 616376eb5a56278c2ba5c454eb58aa89c18afa6b)
2024-08-11 16:43:16 +00:00
Florent Daigniere
b36018e0c1 Handle the case where PROXY_PROTOCOL_25 is set
(cherry picked from commit 0ff18c607923eaa364327dffd510d127667bea75)
2024-08-11 16:43:16 +00:00
Florent Daigniere
79a393d601 s/nginx/front
(cherry picked from commit 5cfec650dfcee49b840134bd61292ace8fe3ea15)
2024-08-09 14:35:38 +00:00
Florent Daigniere
f2c0a147fa as per review
(cherry picked from commit 78c5d34227c7e42b4f7aaef8cd431697726f0485)
2024-08-09 14:35:38 +00:00
Florent Daigniere
14196e5054 Do the same with Client-Ip
(cherry picked from commit 98f671dc2e4be4fbc2ed64a5e36263caa217183c)
2024-08-09 14:35:37 +00:00
Florent Daigniere
1366ee3fc7 doh
(cherry picked from commit d7c6528f045e50b939675fcb6730ab4813aeb6d4)
2024-08-09 14:35:37 +00:00
Florent Daigniere
a5af42a6ef Better
(cherry picked from commit 38ea029bd9b118e58627055a900ae8357e9e48e5)
2024-08-09 14:35:37 +00:00
Florent Daigniere
00ef3cb950 Remove this insanity since we don't use nginx
(cherry picked from commit 148c8f9ede32e649129eaec3eba0e3886db1d0a5)
2024-08-09 14:35:37 +00:00
Florent Daigniere
3d4a9ac29c Fix #3364
(cherry picked from commit ee243ea735744b296bb90b2c1e6a1fded8915c8d)
2024-08-09 14:35:37 +00:00
bors-mailu[bot]
30734b49aa
Merge #3363
3363: Update 3rd party deps (backport #3358) r=mergify[bot] a=mergify[bot]

## What type of PR?

bug-fix

## What does this PR do?

Update 3rd party deps (clamav & snappymail), clarify the wording in the docs related to rspamd overrides.

### Related issue(s)
- closes #3347 
- closes #3360 (thank you [ctrl-i](https://github.com/ctrl-i) for the heads up)
- #3359 

## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [ ] In case of feature or enhancement: documentation updated accordingly
- [x] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.
<hr>This is an automatic backport of pull request #3358 done by [Mergify](https://mergify.com).

Co-authored-by: Florent Daigniere <nextgens@freenetproject.org>
2024-08-06 16:44:54 +00:00
Florent Daigniere
dcd843d4ba Add a new CNAME for old MUAs
(cherry picked from commit cfec4c58cc20faf18540c574b00bc76568d62f86)
2024-08-06 16:27:34 +00:00
Florent Daigniere
95edcd8dcb As per review
(cherry picked from commit 11e72e70349c3ab89e8a6c538deb15692a40d7c0)
2024-07-30 11:08:52 +00:00
Florent Daigniere
ca6488e2ff as per review
(cherry picked from commit 0eafff00c14b44e7e6970c6fdcfa4aa54553d97e)
2024-07-30 11:08:52 +00:00
Florent Daigniere
6173f5e434 simplify again the logic
(cherry picked from commit f003c0e712ba609457695ccfa89f55a4fa544c32)
2024-07-30 11:08:52 +00:00
Florent Daigniere
745d26acf5 Fix email forwarding when set from the UI
(cherry picked from commit 9120f731fc610407a11fb72020b21c7046924efa)
2024-07-30 11:08:52 +00:00
Florent Daigniere
9392c62664 Fix smtpd_forbid_unauth_pipelining w XCLIENT
(cherry picked from commit 648c98ab0500b25e7eef9bc09c53e3ce05c56e25)
2024-07-01 15:47:49 +00:00
Florent Daigniere
47b2cd4792 Update models.py
(cherry picked from commit 98b3016bbdb0fd96e5823e140ae8e7facfedfd20)
2024-06-26 12:26:15 +00:00
Florent Daigniere
dc86008cb4 optimize as per review
(cherry picked from commit cdbfa4ee01e87ed02e9e0e5e129a6b19c8901f20)
2024-06-26 12:26:15 +00:00
Florent Daigniere
8e28050510 Don't let people disable 465 and 993
This is what we use for the other type of autoconfig... and really what
everyone should be using.

(cherry picked from commit 5fb44bd7190ec2e2d70e06927f641d0b5df44ed8)
2024-06-26 12:26:15 +00:00
Florent Daigniere
fd4ba4bd86 Update autoconfig too
(cherry picked from commit b3d49599cf802aff2fbb3e51052c98ae658734f6)
2024-06-26 12:26:14 +00:00
Florent Daigniere
42b4dd2004 ports not in PORTS should not be bound
(cherry picked from commit b7dcf452671c566a846127d8ca8644efcbe8f368)
2024-06-26 12:26:14 +00:00
bors-mailu[bot]
8bd5d0f23d
Merge #3317 #3318
3317: define client_ip variable (backport #3315) r=mergify[bot] a=mergify[bot]

## What type of PR?

bug-fix

## What does this PR do?

### Related issue(s)
closes #3314 

## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [x] In case of feature or enhancement: documentation updated accordingly
- [x] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.
<hr>This is an automatic backport of pull request #3315 done by [Mergify](https://mergify.com).

3318: nginx should recursively set the realip until the first no trusted ad… (backport #3313) r=mergify[bot] a=mergify[bot]

## What type of PR?

bug-fix

## What does this PR do?

### Related issue(s)

closes https://github.com/Mailu/Mailu/issues/3311

## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [x] In case of feature or enhancement: documentation updated accordingly
- [x] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.
<hr>This is an automatic backport of pull request #3313 done by [Mergify](https://mergify.com).

Co-authored-by: Dominik Hebeler <dominik@suma-ev.de>
2024-06-26 11:38:07 +00:00
Dominik Hebeler
33516af243 do not put real_ip_recursive within the for-loop
(cherry picked from commit 5be25b58873624b973b4356cfe10e299450ad605)
2024-06-26 07:36:28 +00:00
Dominik Hebeler
c941950344 nginx should recursively set the realip until the first no trusted address is found
(cherry picked from commit 28f3b60615b0b2f501ea235c84ac7d2bdf1dc26b)
2024-06-26 07:36:28 +00:00
Dominik Hebeler
bca4fdffdb define client_ip variable
(cherry picked from commit 34766602a87c6feac48b7716a19fae2e8950ae9b)
2024-06-26 07:30:26 +00:00
Florent Daigniere
de922fd7e4 better
(cherry picked from commit 89ff26660f5bf0b54cdda0d519934f4d96f27be8)
2024-06-19 17:00:57 +00:00
Florent Daigniere
2d2e9c4d8a another
(cherry picked from commit c0d0dcf71377b639d8c83421c830cd6d69ebec4d)
2024-06-19 17:00:57 +00:00
Florent Daigniere
600235f393 another one
nginx: [warn] the "listen ... http2" directive is deprecated, use the "http2" directive instead in /etc/nginx/nginx.conf:90
(cherry picked from commit e9db8c4509638bfad65c78fc41a09c036b191afa)
2024-06-19 17:00:57 +00:00
Florent Daigniere
a4542507b5 remove another warning
ERROR:root:Not sure what to do with  in PROXY_PROTOCOL (None)
(cherry picked from commit 12c1affc05304a8b058afbceacac441a7462fc94)
2024-06-19 17:00:56 +00:00
Florent Daigniere
59bcf25b5b fix warnings
(cherry picked from commit 2b6daf6157a681a44e297a18f798e300245dd59e)
2024-06-19 17:00:56 +00:00
Dimitri Huisman
415c55e73b
Update version numbers 2024-06-09 14:56:34 +00:00
Dimitri Huisman
412c8c48d6
Merge branch 'master' into preparations-release 2024-06-09 11:43:02 +00:00
bors-mailu[bot]
c5d246e08c
Merge #3209
3209: Add missing translations for Dutch, German, French and Polish r=mergify[bot] a=Diman0

## What type of PR?

bug-fix

## What does this PR do?
Adds missing translations for Dutch. These strings were introduced after 2.0. Practically **all** translations must be updated with these strings.

### Related issue(s)

## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [n/a] In case of feature or enhancement: documentation updated accordingly
- [x] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.


Co-authored-by: Dimitri Huisman <diman@huisman.xyz>
2024-06-09 10:28:23 +00:00
bors-mailu[bot]
d91a04dd00
Merge #3221
3221: Better PROXY_PROTOCOL r=mergify[bot] a=nextgens

## What type of PR?

Feature

## What does this PR do?

- Disable IMAP, POP3 and Submission by default; see https://nostarttls.secvuln.info/ on why explicit TLS is going away.
- Change the semantic of PROXY_PROTOCOL to make it configurable per port
- fix TLS_FLAVOR=notls not working with snappymail
- fix TLS_PERMISSIVE
- remove KUBERNETES_INGRESS; shouldn't be needed anymore
- update the documentation and the reverse proxy example

### Related issue(s)
- close #3162
- close #3061

## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [x] In case of feature or enhancement: documentation updated accordingly
- [x] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.


Co-authored-by: Florent Daigniere <nextgens@freenetproject.org>
Co-authored-by: Florent Daigniere <nextgens@users.noreply.github.com>
2024-06-09 10:17:32 +00:00
Dimitri Huisman
712f5f48a8
Add missing translation for German 2024-06-09 10:13:10 +00:00
Florent Daigniere
52e02d4c56
Update core/nginx/dovecot/proxy.conf
Co-authored-by: Dimitri Huisman <52963853+Diman0@users.noreply.github.com>
2024-06-09 11:59:12 +02:00
Florent Daigniere
c63bd0ce38
Update core/nginx/conf/nginx.conf
Co-authored-by: Dimitri Huisman <52963853+Diman0@users.noreply.github.com>
2024-06-09 11:59:05 +02:00
bors-mailu[bot]
a5858afda3
Merge #3207
3207: Add Belarusian translation. r=mergify[bot] a=spoooyders

## What type of PR?

Translation.

## What does this PR do?
Adds Belarusian translation.

### Related issue(s)
## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [x] In case of feature or enhancement: documentation updated accordingly
- [x] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.


Co-authored-by: pavuki <tech@i2p.cc>
2024-06-09 09:55:35 +00:00
bors-mailu[bot]
c18eb3a33c
Merge #3232
3232: simplify the logic, add an extra check on the API auth handler r=mergify[bot] a=nextgens

## What type of PR?

enhancement

## What does this PR do?

simplify the logic of API authentication, ensure that the API token is at least 3 characters

### Related issue(s)

## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [ ] In case of feature or enhancement: documentation updated accordingly
- [ ] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.


Co-authored-by: Florent Daigniere <nextgens@freenetproject.org>
Co-authored-by: Florent Daigniere <nextgens@users.noreply.github.com>
Co-authored-by: Dimitri Huisman <diman@huisman.xyz>
2024-06-09 09:47:25 +00:00
Florent Daigniere
7df8cdbe01 Ensure we normalize for all languages 2024-05-27 18:33:25 +02:00
Florent Daigniere
6dbceeeefa doh 2024-05-27 15:43:50 +02:00
Florent Daigniere
eddcedf5cf Alpine 3.20 2024-05-27 15:34:53 +02:00
Florent Daigniere
a55a9d89ba Update all dependencies 2024-05-20 11:08:03 +02:00
Florent Daigniere
3565ab9a3b Fix #3260: double-quotes should be allowed in ooo 2024-05-17 08:32:39 +02:00
bors-mailu[bot]
935266bc65
Merge #3235
3235: Tweaks to logging r=mergify[bot] a=nextgens

## What type of PR?

enhancement

## What does this PR do?

Make the default ``LOG_LEVEL=INFO`` ; ensure that admin does not log the access log unless it's set to ``DEBUG``
This ensures we see the authentication related messages.

### Related issue(s)

## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [ ] In case of feature or enhancement: documentation updated accordingly
- [ ] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.


Co-authored-by: Florent Daigniere <nextgens@freenetproject.org>
2024-05-10 11:16:50 +00:00
Florent Daigniere
5b5d526d79 Fix CVE-2024-1135 2024-05-08 16:10:10 +02:00
Florent Daigniere
1d8f041b87 access_logs are DEBUG on admin 2024-04-20 23:38:37 +02:00
Florent Daigniere
2db75921a2
Ensure we have an api_token 2024-04-20 08:46:47 +02:00