1
0
mirror of https://github.com/Mailu/Mailu.git synced 2024-12-14 10:53:30 +02:00
Commit Graph

568 Commits

Author SHA1 Message Date
Dimitri Huisman
a0877e6181
Add changelog entry for PR 3029 2024-03-27 10:01:12 +00:00
Dimitri Huisman
9935cb48cd
Fix bug 3068. Spam messages were always marked as read. 2024-03-22 16:53:11 +00:00
bors-mailu[bot]
8bf5299f21
Merge #3194
3194: Fix 3113 r=mergify[bot] a=Diman0

## What type of PR?

bug-fix

## What does this PR do?
Fixes swaggerui documentation of all RESTful api end points. The API documentation should now be valid for each endpoint. 

### Related issue(s)
- close #3113 


## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [x] In case of feature or enhancement: documentation updated accordingly
- [x] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.


Co-authored-by: Dimitri Huisman <diman@huisman.xyz>
2024-03-18 08:10:44 +00:00
Florent Daigniere
7089cfea48 Ensure we also pin ISRG X2 in TLSA 2024-03-11 10:21:54 +01:00
Florent Daigniere
86adf07461 Ensure we always send an ISRG root for DANE 2024-03-10 12:19:40 +01:00
Florent Daigniere
dec5fecdb4 Ensure that nginx and dovecot are reloaded 2024-03-05 10:12:45 +01:00
Florent Daigniere
2afa9dca51 Fix ooo/sieve when proxy protocol is in use 2024-02-29 13:06:15 +01:00
darkclip
dba60c1c59 add changelog 2024-02-22 14:47:11 +08:00
Florent Daigniere
98a6bab0ca towncrier 2024-02-05 18:33:48 +01:00
Dimitri Huisman
8f86ffc6fd
Fix #3113. RESTful API was not correctly documented. 2024-01-22 10:44:30 +00:00
ctrl-i
3e187206ac
Create 3130.misc
Updated roundcube to 1.6.6
2024-01-21 09:34:00 +00:00
Florent Daigniere
bbfde0badc Fix 3129, thanks to Games-Crack 2024-01-18 17:30:01 +01:00
bors-mailu[bot]
5fcbe7a2fe
Merge #3097
3097: Upgrade alpine and node r=mergify[bot] a=nextgens

## What type of PR?

enhancement

## What does this PR do?

Upgrade alpine to 3.19.0 and node to node 21

That's php 8.3 and snappymail 2.31.0

### Related issue(s)


## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [ ] In case of feature or enhancement: documentation updated accordingly
- [x] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.


Co-authored-by: Florent Daigniere <nextgens@freenetproject.org>
2024-01-10 16:41:32 +00:00
Florent Daigniere
ec7dbc6a90 Add url 2023-12-28 09:04:44 +01:00
Florent Daigniere
bc863b4bbc Long term fix against SMTP smuggling 2023-12-28 08:51:50 +01:00
bors-mailu[bot]
df5b48a52d
Merge #3100
3100: Do not block webmail when we have a valid SSO session r=mergify[bot] a=nextgens

## What type of PR?

bug-fix

## What does this PR do?

Ensure we do not block webmail when we have a valid SSO session

### Related issue(s)
- close  #3094

## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [ ] In case of feature or enhancement: documentation updated accordingly
- [x] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.


Co-authored-by: Florent Daigniere <nextgens@freenetproject.org>
2023-12-22 08:43:12 +00:00
Florent Daigniere
64d83d061e Prevent SMTP smuggling 2023-12-21 18:17:29 +01:00
Florent Daigniere
325aa5452b Do not block webmail when we have a valid SSO sess 2023-12-21 12:37:08 +01:00
Florent Daigniere
0e522fceb7 Upgrade alpine, node, PHP and snappymail 2023-12-20 14:08:49 +01:00
Florent Daigniere
422f005c3f Fix 3095 2023-12-19 18:25:04 +01:00
Florent Daigniere
1f19ac5d8d Slow down the turtle policy 2023-11-30 18:17:53 +01:00
bors-mailu[bot]
bddbfabd82
Merge #3025
3025: Fix SETUP generating invalid files. r=mergify[bot] a=Diman0

## What type of PR?

bug-fix

## What does this PR do?
If JavaScript script is disabled or JS files are blocked from the setup website, the SETUP website would generate invalid configuration. Checks were added to prevent this situation from occurring.

Bootstrap loaded an outdated jquery version 1. We already use Jquery 2. I have disabled this and configured bootstrap to load our jquery js file.

Also fixed a regular expression that makes sure the specified Mailu storage path is valid.

### Related issue(s)
- closes #2396
- closes #2890
- closes #1524  

## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [n/a] In case of feature or enhancement: documentation updated accordingly
- [x] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.


Co-authored-by: Dimitri Huisman <diman@huisman.xyz>
Co-authored-by: Dimitri Huisman <52963853+Diman0@users.noreply.github.com>
2023-11-18 12:10:14 +00:00
Dimitri Huisman
e43fb69864
Update changelog fragment of 2890 2023-11-18 11:16:22 +00:00
Florent Daigniere
aefbd9552c fix clamav handling 2023-11-10 12:00:29 +01:00
bors-mailu[bot]
fd66c76c83
Merge #3033
3033: Enable snowball on FTS r=mergify[bot] a=nextgens

## What type of PR?

enhancement

## What does this PR do?

Enable [snowball](http://snowball.tartarus.org/algorithms/english/stemmer.html), a filter that will significantly cut down the size of FTS indexes.

It looks like the packages for aarch64 haven't been built yet... but this works on x64_86.
Don't unblock as long as  https://dl-cdn.alpinelinux.org/alpine/edge/testing/aarch64/dovecot-fts-flatcurve-0.3.4-r3.apk is 404

### Related issue(s)
- close #2977 

## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [ ] In case of feature or enhancement: documentation updated accordingly
- [x] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.


Co-authored-by: Florent Daigniere <nextgens@freenetproject.org>
2023-11-07 15:07:07 +00:00
bors-mailu[bot]
b7ca4eb9f0
Merge #3032
3032: Update all python dependencies r=mergify[bot] a=Diman0

## What type of PR?

enhancement

## What does this PR do?
Updates all dependencies. Unfortunately multiple things were deprecated such as
* `@babel.localeselector` decorator
* app.app.session_cookie_name
* app.before_first_request

Unfortunately flask_debugtoolbar is not compatible with the updated version of flask.
Flask-SQLAlchemy cannot be updated to 3.0.5 because this introduces an error/bug.

### Related issue(s)

## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [n/a] In case of feature or enhancement: documentation updated accordingly
- [x] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.


Co-authored-by: Dimitri Huisman <diman@huisman.xyz>
2023-11-06 14:48:09 +00:00
ctrl-i
b74cd17bdd
Upgrade to roundcube 1.6.5 (fix XSS) 2023-11-06 07:55:23 +00:00
Alexander Graf
fa8e8f4f73
Rename 3008.feature to 3023.feature 2023-11-01 18:02:40 +01:00
Alexander Graf
e77b3f0a36
Update newsfragment 2023-11-01 18:01:39 +01:00
Florent Daigniere
b5ecaa278e Enable snowball 2023-11-01 08:12:03 +01:00
Dimitri Huisman
bf79df5c80
Add changelog entry 2023-10-31 20:02:34 +00:00
Dimitri Huisman
67d11c47c8
Added checks to SETUP to make sure JavaScript is enabled and that all JS files could be loaded when loading the site page.
The setup site malfunctions if this is not the case.
Regular expression for checking the Mailu storage path was invalid.
2023-10-29 12:55:40 +00:00
Miłosz
1b175e48d4 testing: Add "download zonefile" button 2023-10-29 09:36:16 +00:00
bors[bot]
d0c6b34002
Merge #3008
3008: Fix issues with log filter and remove POSTFIX_LOG_FILE r=mergify[bot] a=Diman0

## What type of PR?

bug-fix

## What does this PR do?
Fixed log filter not filtering out log messages for dovecot/nginx/postfix.
Fixed postfix not logging to standard out.
Fixed not all containers logging to journald.
Removed POSTFIX_LOG_FILE functionality. A new FAQ entry is created that documents how to log to file with journald & rsyslog.

Thank you `@Lex999` for providing the sample code in #2839 for how to capture the standard out of called sub processes.

### Related issue(s)
- closes #2839
- closes #2819 
- closes #2939 

## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [x] In case of feature or enhancement: documentation updated accordingly
- [x] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.


Co-authored-by: Dimitri Huisman <diman@huisman.xyz>
2023-10-27 20:49:25 +00:00
Dimitri Huisman
60b9ff0090
Fixed log filter not filtering out log messages for dovecot/nginx/postfix.
Fixed postfix not logging to standard out.
Fixed not all containers logging to journald.
Removed POSTFIX_LOG_FILE functionality. Added documentation on how to achieve the same (log to file) via journald & rsyslogd (see new FAQ entry 'How can I view and export the logs of a Mailu container?').
2023-10-27 14:10:13 +00:00
Florent Daigniere
3e2a6d84ce doh 2023-10-27 13:41:51 +02:00
Florent Daigniere
435508be1e Introduce AUTH_REQUIRE_TOKENS 2023-10-27 13:39:36 +02:00
Florent Daigniere
9f93ed6593 Fix letsencrypt on master 2023-10-17 13:58:38 +02:00
bors[bot]
d0d4876a85
Merge #2982
2982: Switch to upstream's clamav image r=mergify[bot] a=nextgens

## What type of PR?

enhancement

## What does this PR do?

Switch to upstream's clamav image. The only downside is that it doesn't support armv7... but odds are it won't have enough RAM anyway.

Why do we want this?
- faster build times
- will be easier to upgrade
- less maintenance required for us
- it may fix the CI tests failing because of clamav/EICAR not getting caught
- it will save bandwidth (as we won't re-download the definitions from fresh: they are in the base image)
- it puts clamav on its own network (security)

### Related issue(s)
- close #2059

## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [ ] In case of feature or enhancement: documentation updated accordingly
- [x] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.


Co-authored-by: Florent Daigniere <nextgens@freenetproject.org>
2023-10-17 09:41:49 +00:00
bors[bot]
0441903361
Merge #2981
2981: Further improvements to fts r=mergify[bot] a=nextgens

## What type of PR?

enhancement

## What does this PR do?

- update instructions
- set a timeout on search: if the indexes are not up to date, it will take at most 50s to fail
- limit parallelism to 1 (is that what we want?)
- switch to a different image that has ARM support
- ensure that journald logs the output of tika and oletools
- update the upgrade instructions to ensure one doesn't DoS his server while re-indexing
- add a healthcheck for tika

### Related issue(s)


## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [ ] In case of feature or enhancement: documentation updated accordingly
- [x] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.


Co-authored-by: Florent Daigniere <nextgens@freenetproject.org>
2023-10-17 09:31:48 +00:00
Florent Daigniere
2a570d0f6f Roundcube 1.6.4 2023-10-16 13:38:49 +02:00
Florent Daigniere
6a2169096c Switch to upstream's clamav image 2023-10-13 16:24:10 +02:00
Florent Daigniere
c56b58149b Further improvements 2023-10-13 09:43:34 +02:00
jonathan
7a258c19ad #2948 Add Traditional Chinese translation 2023-10-13 11:08:35 +08:00
bors[bot]
62104501d4
Merge #2972
2972: switch to fts-flatcurve r=mergify[bot] a=nextgens

## What type of PR?

bug-fix

## What does this PR do?

Switch from fts-xapian to fts-flatcurve. This should address the problem with indexes getting too big and will be the default in dovecot 2.4.

Don't forget to nuke old indexes to reclaim space.

### Related issue(s)
- close #2390
- close #2184
- close #2976

## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [ ] In case of feature or enhancement: documentation updated accordingly
- [x] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.


Co-authored-by: Florent Daigniere <nextgens@freenetproject.org>
2023-10-12 18:45:55 +00:00
Dimitri Huisman
0026b8db24
Enhance RESTful API user retrieval with quota used bytes. This is the current size of the user's email box in bytes. 2023-10-11 15:49:52 +00:00
Florent Daigniere
054fde8ac1 Tika v1 2023-10-11 15:49:04 +02:00
Florent Daigniere
954fe40134 Towncrier 2023-10-10 15:07:37 +02:00
bors[bot]
d21eb8bea8
Merge #2974
2974: Add support for managing authentication tokens to RESTful API r=mergify[bot] a=Diman0

## What type of PR?

enhancement

## What does this PR do?
Authentication tokens could not be managed yet via the RESTful API. Support for this has been added to the RESTful API. It also contains a small bug fix for updating domains. 

### Related issue(s)
n/a1

## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [x] In case of feature or enhancement: documentation updated accordingly
- [x] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.


Co-authored-by: Dimitri Huisman <diman@huisman.xyz>
2023-10-10 11:35:20 +00:00
Dimitri Huisman
16e9d152dd
Forbidden_file_extension.map could not be overridden. 2023-10-10 08:19:36 +00:00