1
0
mirror of https://github.com/Mailu/Mailu.git synced 2025-06-15 00:05:11 +02:00
Commit Graph

149 Commits

Author SHA1 Message Date
b6743019e8 Address CVE-2024-23829 (CVE for aiohttp) 2024-03-18 14:28:53 +00:00
851c4f8403 Alpine 3.19.1 2024-03-10 16:44:18 +01:00
494147eedf Need newer cryptography 2024-03-10 16:17:49 +01:00
a1e395c581 Update dependencies and re-enable flask toolbar 2024-01-21 18:42:51 +01:00
0e522fceb7 Upgrade alpine, node, PHP and snappymail 2023-12-20 14:08:49 +01:00
ffe823d6bc Upgrade to WTForms==3.1.1 2023-11-14 14:47:16 +01:00
38b6d360d3 Update system.py
promote to log.critical()
2023-11-09 10:26:04 +01:00
e75834f746 Update system.py
143 is the standard following SIGTERM
2023-11-09 10:20:42 +01:00
1c26368b37 Add a sigterm handler to make docker go faster 2023-11-07 16:55:24 +01:00
5bee3c031b Update all dependencies.
All changes were recreated due to deprecated functionalities introduced
by updating the dependencies
2023-10-31 19:55:58 +00:00
60b9ff0090 Fixed log filter not filtering out log messages for dovecot/nginx/postfix.
Fixed postfix not logging to standard out.
Fixed not all containers logging to journald.
Removed POSTFIX_LOG_FILE functionality. Added documentation on how to achieve the same (log to file) via journald & rsyslogd (see new FAQ entry 'How can I view and export the logs of a Mailu container?').
2023-10-27 14:10:13 +00:00
054fde8ac1 Tika v1 2023-10-11 15:49:04 +02:00
26e1077bd8 Merge #2950
2950: Upgrade snuffleupagus r=mergify[bot] a=nextgens

## What type of PR?

enhancement

## What does this PR do?

Upgrade snuffleupagus

### Related issue(s)

## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [ ] In case of feature or enhancement: documentation updated accordingly
- [x] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.


Co-authored-by: Florent Daigniere <nextgens@freenetproject.org>
2023-10-09 07:24:09 +00:00
04d69141c3 Merge #2961
2961: Hardened malloc was not disabled for oletools when an CPU with missing flags is used r=Diman0 a=Diman0

## What type of PR?
bug fix

## What does this PR do?
Updates oletools to also disable hardened malloc when used CPU misses flags

### Related issue(s)
- closes #2959 

## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [n/a ] In case of feature or enhancement: documentation updated accordingly
- [x] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.


Co-authored-by: Dimitri Huisman <diman@huisman.xyz>
Co-authored-by: Dimitri Huisman <52963853+Diman0@users.noreply.github.com>
Co-authored-by: Florent Daigniere <nextgens@users.noreply.github.com>
Co-authored-by: Florent Daigniere <nextgens@freenetproject.org>
2023-10-08 13:14:28 +00:00
92e861d4fa There is no reason not to enable it ourselves. 2023-10-07 10:09:04 +02:00
dd58d51156 change the logic as discussed 2023-10-07 09:45:59 +02:00
3985d1d044 clarify 2023-10-06 14:00:58 +02:00
0379857ab5 Update core/base/libs/socrate/socrate/system.py
Only check for avx2 is required

Co-authored-by: Florent Daigniere <nextgens@users.noreply.github.com>
2023-10-06 13:51:05 +02:00
e70db935ec Hardened malloc also requires AVX2 cpu flag 2023-10-06 10:27:31 +00:00
85cf7e6a7f Upgrade to alpine 3.18.4 2023-10-05 18:55:33 +02:00
9ae6eafb24 Remove the version pinning on hardened malloc 2023-10-04 17:13:56 +02:00
83fd29c597 Upgrade snuffleupagus 2023-09-20 18:00:36 +02:00
585549ce92 Merge #2924
2924: Remove the usage of capabilities, use port 8080 for admin r=nextgens a=nextgens

## What type of PR?

bug-fix

## What does this PR do?

In the real world users can't get them to work... I wonder if they use patched-up kernels or if xattrs are lost somehow... in any case, we can do without capabilities so let's do that.

Ensure that dovecot doesn't attempt to bind a v6 socket if SUBNET6 is not configured

Also, document that systemd-resolve may cause trouble with DNSSEC.

### Related issue(s)
- closes #2906
- closes #2913

## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [x] In case of feature or enhancement: documentation updated accordingly
- [x] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.


Co-authored-by: Florent Daigniere <nextgens@freenetproject.org>
2023-08-29 06:19:42 +00:00
bbed508e8b As per review 2023-08-28 11:49:42 +02:00
562cd8c135 Remove the usage of capabilities use port 8080
In the real world users can't get them to work...
2023-08-28 11:34:51 +02:00
367fd247cb Move the cleanup to socrate 2023-08-25 14:38:14 +02:00
2d9b348eb0 Update python deps to fix CVEs and build 2023-08-06 17:03:51 +02:00
21982478fb warning is enough 2023-04-20 18:01:16 +02:00
281800d946 Try to do the same for ARM64, log a message if we do 2023-04-20 17:59:14 +02:00
ede331f657 LD_PRELOAD may not be in ENV 2023-04-20 17:46:27 +02:00
b6ed4fd83e fix #2764 2023-04-14 10:09:51 +02:00
7b08232049 Sanitize logs as appropriate 2023-04-13 14:46:12 +02:00
5f14c8ced1 Fix unmet dependency 2023-04-04 12:51:59 +00:00
a2655e3c79 Update dependencies with CVEs 2023-04-04 12:35:27 +00:00
57a42ff3c8 Update instructions for syncing alpine image 2023-03-28 21:04:22 +02:00
250a200edb Mirror alpine image to ghcr.io/mailu docker org to prevent docker pull rate limit.
Use mirrored ghcr.io/mailu/alpine image as base image.
2023-03-28 18:23:35 +00:00
6d31831cf5 Sigh. Forgot to actually save the modified requirements-dev.txt file.
Remove the pinned version for requirements for dev.
The blocking issue is resolved, so no need to pin the old version.
2023-03-26 13:28:40 +00:00
709edb522b Introduce connection string (database url) for roundcube.
Remove database choice from setup.
Remove the old *DB_* database env variables from the documentation.
The env vars are deprecated now. They will be removed after the upcoming
Mailu release.
2023-03-26 12:21:00 +00:00
fed5ab1564 Alpine 3.17.2 2023-02-16 14:28:54 +01:00
802ab533d2 Upgrade to alpine 3.17.1
New openssl, new dovecot
2023-01-29 18:13:49 +01:00
18b900699c Bump version of Flask-RESTX to 1.0.5.
This resolves all deprecation warnings caused by Flask-RESTX.
2023-01-25 16:12:14 +00:00
dae9e9242b Merge #2624
2624: Move runtime environment variables to the end r=nextgens a=ghostwheel42

## What type of PR?

bug-fix

## What does this PR do?

This moves the environment variables used at runtime from the system to the base image.
It's a workaround for a strange build issue observed when building with hardened malloc enabled.



Co-authored-by: Alexander Graf <ghostwheel42@users.noreply.github.com>
2023-01-13 09:58:34 +00:00
bbf0ac5d47 Merge #2464
2464: Introduce RESTful API r=mergify[bot] a=Diman0

## What type of PR?

Feature

## What does this PR do?
Introduces a RESTful API for changing the complete Mailu config.
Anything that can be configured in the web administration interface, can also be configured via the Mailu RESTful API.

Via the swagger.json endpoint the complete OpenAPI specification can be retrieved.
Via the endpoint swaggerui, a web client is available which shows all the endpoints, data models and allows you to submit requests.

See docs/api.rst and docs/configuration.rst for details for enabling it.

### Related issue(s)
- closes #445 

## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [x] In case of feature or enhancement: documentation updated accordingly
- [x] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.


Co-authored-by: Alexander Graf <ghostwheel42@users.noreply.github.com>
Co-authored-by: Dimitri Huisman <diman@huisman.xyz>
2023-01-12 18:48:32 +00:00
712679b4d8 Duh 2023-01-12 18:19:35 +01:00
d558be20f6 Move runtime environment variables to the end 2023-01-12 15:23:00 +01:00
052f8e41ba Upgrade to snuffleupagus 0.9.0 2023-01-10 12:28:38 +01:00
bcceac359d Merge branch 'apiv1' of https://github.com/ghostwheel42/Mailu into feature-445-restful-api-ghostwheel 2023-01-05 10:18:02 +00:00
6f71ea833b Update python dependencies as suggested by dependabot 2022-12-29 15:36:07 +01:00
be40781394 Add default for WEB_API, re-add flask-restx to deps, remove whitespace 2022-12-27 14:28:25 +01:00
108958cabb drop privs better 2022-12-23 10:58:06 +01:00