1
0
mirror of https://github.com/Mailu/Mailu.git synced 2025-01-22 03:39:05 +02:00

2024 Commits

Author SHA1 Message Date
Dominik Hebeler
c941950344 nginx should recursively set the realip until the first no trusted address is found
(cherry picked from commit 28f3b60615b0b2f501ea235c84ac7d2bdf1dc26b)
2024-06-26 07:36:28 +00:00
Florent Daigniere
de922fd7e4 better
(cherry picked from commit 89ff26660f5bf0b54cdda0d519934f4d96f27be8)
2024-06-19 17:00:57 +00:00
Florent Daigniere
2d2e9c4d8a another
(cherry picked from commit c0d0dcf71377b639d8c83421c830cd6d69ebec4d)
2024-06-19 17:00:57 +00:00
Florent Daigniere
600235f393 another one
nginx: [warn] the "listen ... http2" directive is deprecated, use the "http2" directive instead in /etc/nginx/nginx.conf:90
(cherry picked from commit e9db8c4509638bfad65c78fc41a09c036b191afa)
2024-06-19 17:00:57 +00:00
Florent Daigniere
a4542507b5 remove another warning
ERROR:root:Not sure what to do with  in PROXY_PROTOCOL (None)
(cherry picked from commit 12c1affc05304a8b058afbceacac441a7462fc94)
2024-06-19 17:00:56 +00:00
Florent Daigniere
59bcf25b5b fix warnings
(cherry picked from commit 2b6daf6157a681a44e297a18f798e300245dd59e)
2024-06-19 17:00:56 +00:00
Dimitri Huisman
415c55e73b
Update version numbers 2024-06-09 14:56:34 +00:00
Dimitri Huisman
412c8c48d6
Merge branch 'master' into preparations-release 2024-06-09 11:43:02 +00:00
bors-mailu[bot]
c5d246e08c
Merge #3209
3209: Add missing translations for Dutch, German, French and Polish r=mergify[bot] a=Diman0

## What type of PR?

bug-fix

## What does this PR do?
Adds missing translations for Dutch. These strings were introduced after 2.0. Practically **all** translations must be updated with these strings.

### Related issue(s)

## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [n/a] In case of feature or enhancement: documentation updated accordingly
- [x] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.


Co-authored-by: Dimitri Huisman <diman@huisman.xyz>
2024-06-09 10:28:23 +00:00
bors-mailu[bot]
d91a04dd00
Merge #3221
3221: Better PROXY_PROTOCOL r=mergify[bot] a=nextgens

## What type of PR?

Feature

## What does this PR do?

- Disable IMAP, POP3 and Submission by default; see https://nostarttls.secvuln.info/ on why explicit TLS is going away.
- Change the semantic of PROXY_PROTOCOL to make it configurable per port
- fix TLS_FLAVOR=notls not working with snappymail
- fix TLS_PERMISSIVE
- remove KUBERNETES_INGRESS; shouldn't be needed anymore
- update the documentation and the reverse proxy example

### Related issue(s)
- close #3162
- close #3061

## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [x] In case of feature or enhancement: documentation updated accordingly
- [x] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.


Co-authored-by: Florent Daigniere <nextgens@freenetproject.org>
Co-authored-by: Florent Daigniere <nextgens@users.noreply.github.com>
2024-06-09 10:17:32 +00:00
Dimitri Huisman
712f5f48a8
Add missing translation for German 2024-06-09 10:13:10 +00:00
Florent Daigniere
52e02d4c56
Update core/nginx/dovecot/proxy.conf
Co-authored-by: Dimitri Huisman <52963853+Diman0@users.noreply.github.com>
2024-06-09 11:59:12 +02:00
Florent Daigniere
c63bd0ce38
Update core/nginx/conf/nginx.conf
Co-authored-by: Dimitri Huisman <52963853+Diman0@users.noreply.github.com>
2024-06-09 11:59:05 +02:00
bors-mailu[bot]
a5858afda3
Merge #3207
3207: Add Belarusian translation. r=mergify[bot] a=spoooyders

## What type of PR?

Translation.

## What does this PR do?
Adds Belarusian translation.

### Related issue(s)
## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [x] In case of feature or enhancement: documentation updated accordingly
- [x] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.


Co-authored-by: pavuki <tech@i2p.cc>
2024-06-09 09:55:35 +00:00
bors-mailu[bot]
c18eb3a33c
Merge #3232
3232: simplify the logic, add an extra check on the API auth handler r=mergify[bot] a=nextgens

## What type of PR?

enhancement

## What does this PR do?

simplify the logic of API authentication, ensure that the API token is at least 3 characters

### Related issue(s)

## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [ ] In case of feature or enhancement: documentation updated accordingly
- [ ] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.


Co-authored-by: Florent Daigniere <nextgens@freenetproject.org>
Co-authored-by: Florent Daigniere <nextgens@users.noreply.github.com>
Co-authored-by: Dimitri Huisman <diman@huisman.xyz>
2024-06-09 09:47:25 +00:00
Florent Daigniere
7df8cdbe01 Ensure we normalize for all languages 2024-05-27 18:33:25 +02:00
Florent Daigniere
6dbceeeefa doh 2024-05-27 15:43:50 +02:00
Florent Daigniere
eddcedf5cf Alpine 3.20 2024-05-27 15:34:53 +02:00
Florent Daigniere
a55a9d89ba Update all dependencies 2024-05-20 11:08:03 +02:00
Florent Daigniere
3565ab9a3b Fix #3260: double-quotes should be allowed in ooo 2024-05-17 08:32:39 +02:00
bors-mailu[bot]
935266bc65
Merge #3235
3235: Tweaks to logging r=mergify[bot] a=nextgens

## What type of PR?

enhancement

## What does this PR do?

Make the default ``LOG_LEVEL=INFO`` ; ensure that admin does not log the access log unless it's set to ``DEBUG``
This ensures we see the authentication related messages.

### Related issue(s)

## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [ ] In case of feature or enhancement: documentation updated accordingly
- [ ] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.


Co-authored-by: Florent Daigniere <nextgens@freenetproject.org>
2024-05-10 11:16:50 +00:00
Florent Daigniere
5b5d526d79 Fix CVE-2024-1135 2024-05-08 16:10:10 +02:00
Florent Daigniere
1d8f041b87 access_logs are DEBUG on admin 2024-04-20 23:38:37 +02:00
Florent Daigniere
2db75921a2
Ensure we have an api_token 2024-04-20 08:46:47 +02:00
Florent Daigniere
4837a05c71 simplify the logic 2024-04-18 19:37:02 +02:00
bors-mailu[bot]
da36ac0e92
Merge #3203
3203: Add automatic tests for RESTful API r=mergify[bot] a=Diman0

and fix all remaining issues that I could find with the API.

## What type of PR?

internal feature / bug-fix

## What does this PR do?
I first wanted to finish #3113 before continuing on the tests to keep the scope smaller of the PR.

This PR adds automatic tests that tests **all** the interfaces of the RESTful API. Practically it only tests the normal Ok (http 200) situations. Maybe in the future we could add more tests to check if the validation checks work correctly for each interface.

I also fixed any issues I could find with the RESTful API. I can at least confirm that all interfaces work now. I think the validation checks are also complete now.

### Related issue(s)

## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [n/a] In case of feature or enhancement: documentation updated accordingly
- [n/a] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.


Co-authored-by: Dimitri Huisman <diman@huisman.xyz>
2024-04-17 18:09:31 +00:00
Florent Daigniere
614042344d document 2024-04-08 09:46:39 +02:00
Florent Daigniere
c701358c9d simplify 2024-04-08 09:09:43 +02:00
Florent Daigniere
e0b64a9e54 simplify config with TLS, PORTS and PROXY_PROTOCOL 2024-04-06 18:00:57 +02:00
Dimitri Huisman
956accebc3
Add missing translations for Polish 2024-04-04 07:44:24 +00:00
Dimitri Huisman
4191c6aee2
Add missing translations for French 2024-04-02 11:11:29 +00:00
Dimitri Huisman
e16e492497
Add (hopefully) last incomplete translation for Dutch 2024-04-02 07:43:06 +00:00
pavuki
dfdd663157 Update Belarusian translation. 2024-03-30 12:18:16 +01:00
pavuki
7cd5090d8d Update Belarusian translation. 2024-03-30 11:46:27 +01:00
Dimitri Huisman
9205d42ae9
Add missing translations for Dutch 2024-03-27 09:55:05 +00:00
pavuki
f21bfa84d4 Fix Belarusian translation. 2024-03-26 09:24:02 +01:00
pavuki
211ffb6d1f Fix Belarusian translation. 2024-03-26 09:08:00 +01:00
pavuki
dbf021a0f3 Add Belarusian translation. 2024-03-26 08:47:34 +01:00
Dimitri Huisman
9e468100a0
Fix issues with forward_destination in api and user form
* form
  * Fixed: Internal error occurred if an empty forward_destination was entered and forward_enabled was false
  * Fixed: form did not check if forward_destination is empty.
  * Fixed: form marked forward_destination field as read-only upon reloading form upon validation error
* api - create user and update/patch user
  * Create/Patch user did not check if forward_destination email address is valid
  * Create/Patch user did not check if forward_destination is present and forward_enabled is true
2024-03-23 14:14:43 +00:00
Dimitri Huisman
9935cb48cd
Fix bug 3068. Spam messages were always marked as read. 2024-03-22 16:53:11 +00:00
Dimitri Huisman
2558ae3bc9
Add automatic tests for RESTful API. Fix all remaining issues that I could find with the API. 2024-03-22 15:01:37 +00:00
Nico Winkelsträter
1d40ba635d
Change class from warning to text-muted.
`warning` ist not available in AdminLTE3 anymore.
2024-03-21 08:59:10 +01:00
Dimitri Huisman
b6743019e8
Address CVE-2024-23829 (CVE for aiohttp) 2024-03-18 14:28:53 +00:00
bors-mailu[bot]
8bf5299f21
Merge #3194
3194: Fix 3113 r=mergify[bot] a=Diman0

## What type of PR?

bug-fix

## What does this PR do?
Fixes swaggerui documentation of all RESTful api end points. The API documentation should now be valid for each endpoint. 

### Related issue(s)
- close #3113 


## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [x] In case of feature or enhancement: documentation updated accordingly
- [x] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.


Co-authored-by: Dimitri Huisman <diman@huisman.xyz>
2024-03-18 08:10:44 +00:00
Dimitri Huisman
c2348fc28f
Initial changes for new release. Releases.rst and CHANGELOG.md must still be updated. 2024-03-16 16:35:34 +00:00
Florent Daigniere
a1d8ff630f review2 2024-03-11 14:45:59 +01:00
Florent Daigniere
58b1738d8c api 2024-03-11 11:15:15 +01:00
Florent Daigniere
0171c6d0f8 review 2024-03-11 11:12:53 +01:00
Florent Daigniere
b2d37c4323 Make it clear that there may be more than one 2024-03-11 10:26:38 +01:00
Florent Daigniere
7089cfea48 Ensure we also pin ISRG X2 in TLSA 2024-03-11 10:21:54 +01:00