Dimitri Huisman
da788ddee3
Merge branch 'fix-sso-1929' of github.com:Diman0/Mailu into fix-sso-1929
2021-10-27 12:38:18 +00:00
Dimitri Huisman
bdcc183165
Redirect to configured ENV VAR for Admin/Webmail, further simplify nginx config.
2021-10-27 11:24:10 +00:00
Dimitri Huisman
f1a60aa6ea
Remove unneeded auth_request_set
2021-10-27 11:11:50 +00:00
Florent Daigniere
d3f07a0882
Simplify the handling of /static
2021-10-27 10:56:34 +02:00
Florent Daigniere
aee089f3b1
Ensure that static assets are readable
2021-10-27 10:55:47 +02:00
Dimitri Huisman
48764f0400
Ensure all requests from the page sso go through the page sso.
2021-10-27 08:06:53 +00:00
Dimitri Huisman
5232bd38fd
Simplify webmail logout.
2021-10-26 12:07:36 +00:00
Dimitri Huisman
5d81846c5d
Introduce the shared stub /static for providing all static files
2021-10-26 11:30:06 +00:00
Dimitri Huisman
eb74a72a52
Moved locations to correct area in nginx.conf.
2021-10-26 07:35:06 +00:00
Dimitri Huisman
aa7380ffba
Doh!
2021-10-25 20:00:00 +00:00
Dimitri Huisman
44d2448412
Updated SSO logic for webmails. Fixed small bug rate limiting.
2021-10-25 19:21:38 +00:00
Dimitri Huisman
ed7adf52a6
Merge branch 'master' of github.com:Diman0/Mailu into fix-sso-1929
2021-10-25 17:31:25 +00:00
Dimitri Huisman
913a6304a7
Finishing touches. Introduce /static stub for handling all static files.
2021-10-25 17:24:41 +00:00
Diman0
41f5b43b38
Set nginx logging to level info again.
2021-09-24 15:33:16 +02:00
Diman0
f4cde61148
Make header translatable. More finishing touches.
2021-09-24 15:29:28 +02:00
Diman0
9894b49cbd
Merge/Update with changes from master
2021-09-24 10:07:52 +02:00
Florent Daigniere
89ea51d570
Implement rate-limits
2021-09-23 18:40:49 +02:00
Diman0
bf0aad9820
Merge branch 'master' of github.com:Mailu/Mailu into fix-sso-1929
2021-09-22 17:04:13 +02:00
Alexander Graf
1e8b41f731
Merge remote-tracking branch 'upstream/master' into adminlte3_fixes
2021-09-09 13:22:15 +02:00
bors[bot]
d464187477
Merge #1964
...
1964: Alpine3.14.2 r=mergify[bot] a=nextgens
Upgrade to alpine 3.14.2, retry upgrading unbound & switch back to libressl
Co-authored-by: Florent Daigniere <nextgens@freenetproject.org>
2021-09-06 15:59:10 +00:00
Alexander Graf
a319ecde29
also precompress static txt files
2021-09-06 13:52:35 +02:00
Alexander Graf
b445d9ddd1
set expire headers only for mailu content
...
also moved robots.txt from config to static folder.
2021-09-06 13:45:48 +02:00
Alexander Graf
698ee4e521
added tiff and webp to list of cached content
2021-09-06 09:10:59 +02:00
Florent Daigniere
72ba5ca3f9
fix 1789: ensure that nginx resolves ipv4 addresses
2021-09-03 21:59:53 +02:00
Diman0
b148e41d9b
Fix nginx config
2021-09-03 13:01:09 +02:00
Alexander Graf
f4e7ce0990
enabled caching, gzip and robots.txt
2021-09-02 20:48:44 +02:00
Alexander Graf
103918ba57
pre-compress assets (*.ico for now)
2021-09-02 20:46:56 +02:00
Alexander Graf
39d7a5c504
pngcrushed images
2021-09-02 20:46:08 +02:00
Diman0
960033525d
configure sso in nginx
2021-09-02 18:02:20 +02:00
Diman0
8868aec0dc
Merge master. Make sso login working for admin.
2021-09-02 17:08:50 +02:00
Florent Daigniere
d7c2b510c7
Give alpine 3.14.2 a shot
2021-09-01 18:56:44 +02:00
Florent Daigniere
394c2fe22c
Document REAL_IP_HEADER and REAL_IP_FROM
...
Fix a security vulnerability whereby we were not clearing other headers
2021-08-28 10:03:18 +02:00
Florent Daigniere
6bba0cecfc
Strip the Forwarded header since nothing is compatible with it yet
2021-08-28 09:02:52 +02:00
Florent Daigniere
3e676e232a
fix #1270
2021-08-23 19:41:44 +02:00
Jack Murray
dd127f8f06
Change letsencrypt timer from 1h --> 1 day
...
There's no need to be calling certbot so frequently
2021-08-18 15:57:53 +02:00
Florent Daigniere
6704cb869a
Switch to 3072bits dhparam (instead of 4096bits)
...
We aim for 128bits of security here
2021-08-18 15:51:16 +02:00
Jack Murray
e304c352a1
Change letsencrypt timer from 1h --> 1 day
...
There's no need to be calling certbot so frequently
2021-08-18 15:40:44 +02:00
Florent Daigniere
c76a76c0b0
make it optional, add a knob
2021-08-10 12:19:51 +02:00
Florent Daigniere
109a8aa000
Ensure that we always have CERT+INTERMEDIARY CA
...
Let's encrypt may change things up in the future...
2021-08-10 10:55:21 +02:00
Florent Daigniere
974bcba5ab
Restore LOGIN as tests assume it's there
2021-08-10 09:05:02 +02:00
Florent Daigniere
12c842c4b9
In fact in fullchain we want all but the last
2021-08-09 23:27:03 +02:00
Florent Daigniere
24f9bf1064
format certs for nginx
2021-08-09 22:51:23 +02:00
Florent Daigniere
98b903fe13
don't send the rootcert
2021-08-09 21:38:03 +02:00
Florent Daigniere
92ec446c20
doh
2021-08-09 21:29:05 +02:00
Florent Daigniere
f05cc99dc0
Add ECC certs for modern clients
2021-08-09 21:06:15 +02:00
Florent Daigniere
cb68cb312b
Reduce the size of the RSA key to 3072bits
...
This is already generous for certificates that have a 3month validity!
We rekey every single time.
2021-08-09 20:40:56 +02:00
Florent Daigniere
5e7d5adf17
AUTH shouldn't happen on port 25
2021-08-09 20:10:49 +02:00
Florent Daigniere
7285c6bfd9
admin won't understand LOGIN
2021-08-09 17:29:42 +02:00
bors[bot]
48f3b1fd49
Merge #1656
...
1656: Add ability to set no WEBROOT_REDIRECT to Nginx r=mergify[bot] a=DavidFair
## What type of PR?
Enhancement / Documentation
## What does this PR do?
From commit:
---
Adds a 'none' env option to WEBROOT_REDIRECT so that no `location /`
configuration is written to nginx.conf.
This is useful for setting up Mailu and Mailman where we override the
root to proxy to the mailing list server instead. Without this change
the nginx container will not start, or for 1.7 users can set their
WEBMAIL_PATH to / with no webmail to get the same results.
This fix means that future users don't have to choose between webmail
and a root override and makes the configuration intention clear.
---
I've also added bullet points to break up a long flowing sentence in `configuration.rst` - it should be a bit easier to read now
### Related issue(s)
No Related Issue - I just jumped to a PR
## Prerequistes
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.
- [x] In case of feature or enhancement: documentation updated accordingly
@ Maintainers - Is this worthy of the changelog, it's useful to know about but I imagine the number of people it affects is equally minimal?
- [ ] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/guide.html#changelog ) entry file.
Co-authored-by: David Fairbrother <DavidFair@users.noreply.github.com>
2021-08-06 19:15:42 +00:00
Florent Daigniere
420afa53f8
Upgrade to alpine 3.14
2021-07-05 15:50:49 +02:00
