1
0
mirror of https://github.com/Mailu/Mailu.git synced 2025-07-05 00:49:29 +02:00
Commit Graph

869 Commits

Author SHA1 Message Date
8cc91bad75 Merge #2281 #2285 #2286 #2287
2281: Update alpine-linux to 3.14.4 - OpenSSL security FIX r=mergify[bot] a=willofr

## What type of PR?
Security fix

## What does this PR do?
Update Dockerfiles to use alpine-linux 3.14.4 which contains a security fix for openssl
https://alpinelinux.org/posts/Alpine-3.12.10-3.13.8-3.14.4-released.html

## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [x] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.


2285: Update names of language json files r=mergify[bot] a=ghostwheel42

## What type of PR?

bug-fix

## What does this PR do?

language json files of datatables i18n have been renamed
this updates the mappings to the current names


2286: Fix typo in Traefik reverse proxy docs r=mergify[bot] a=ghostwheel42

Slight typo in the Traefik reverse proxy docs. Found through running into the issue on my own instance.

## What type of PR?

documentation

## What does this PR do?

Adds  #2282 to master


2287: Fix typo in docs: cert not certs r=mergify[bot] a=ghostwheel42

## What type of PR?

documentation

## What does this PR do?

just a typo

Co-authored-by: Will <will@packer-output-c8fcfb40-3d93-4475-8f87-e14a9dd683b6>
Co-authored-by: willofr <willofr@users.noreply.github.com>
Co-authored-by: Alexander Graf <ghostwheel42@users.noreply.github.com>
Co-authored-by: DAHPr0gram3r <cbillwork02@gmail.com>
2022-03-18 22:36:50 +00:00
d70596d431 Update names of language json files 2022-03-18 20:53:46 +01:00
64ad6931e9 Move 'is_valid_user = user is not None' into else 2022-03-18 20:08:16 +01:00
630a4e9b5e Update auth.py
Add spaces
2022-03-18 20:05:16 +01:00
8775dc5b15 Fixing AUTH_RATELIMIT_IP not working on imap/pop3/smtp
#2283
2022-03-17 20:36:23 +01:00
d02296c3bc Update alpine-linux to 3.14.4 - OpenSSL security FIX 2022-03-17 10:40:42 +00:00
0b25854de0 Merge #2210
2210: Add input validation for domain creation r=mergify[bot] a=0pc0deFR

## What type of PR?

bug-fix

## What does this PR do?

This patch add the input validation for domain creation.

### Related issue(s)
- Mention an issue like: #1817
- Auto close an issue like: closes #1817


Co-authored-by: Kevin Falcoz <0pc0defr@gmail.com>
Co-authored-by: Dimitri Huisman <diman@huisman.xyz>
2022-03-12 12:34:30 +00:00
a7f9a35fa1 Merge branch 'master' into fix2274 2022-03-09 19:33:04 +01:00
a4ed464170 doh 2022-03-09 19:29:39 +01:00
0bfbb3bcd4 doh 2022-03-08 13:10:27 +01:00
cd3eee4c51 ghostwheel42's suggestion 2022-03-07 09:09:36 +01:00
d723326b8e style 2022-03-07 09:04:40 +01:00
f01d8cd9b9 improve 2022-03-05 18:41:06 +01:00
7b9c4e01f7 improve 2022-03-05 18:36:27 +01:00
91de20c49c Fix exception in logs
This was occuring when you had square brackets in the domain part
2022-03-05 18:22:58 +01:00
8cf76afbab Catch the ValueError instead 2022-03-05 18:01:30 +01:00
08aa32a5df Revert "Don't bother running the query without an address"
This reverts commit dc81979550.
2022-03-05 17:59:44 +01:00
7ce7f2096b belt, braces and suspenders 2022-03-05 14:54:54 +01:00
dc81979550 Don't bother running the query without an address
This should solve the following in admin logs:
"WARNING in nginx: Invalid user 'xxxx': (builtins.ValueError)
invalid email address (no "@")"
2022-03-05 14:33:20 +01:00
2e9b14d536 Merge #2254
2254: Send ISRG_X1 on port 25, make DANE pin that r=mergify[bot] a=nextgens

## What type of PR?

bug-fix

## What does this PR do?

Ensure we send ISRG_X1 in the handshake on port 25 (non-interactive, size doesn't really matter).

Update the DANE pin to reflect the change.

I am not sure whether we will need to add --preferred-chain= in the future; This may be the case when letsencrypt decides to use X2/the ECDSA chain

This needs to be tested on a letsencrypt account that isn't mine (I'm opted in for the alternate cert chains)

### Related issue(s)
- closes #2138

## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

There's already a towncrier news for it

Co-authored-by: Florent Daigniere <nextgens@freenetproject.org>
2022-02-24 13:22:57 +00:00
c40a0f4b80 Change link in warning to master. Master is always available. 1.9 will be unavaiable in the future. 2022-02-23 10:48:53 +00:00
e4a32b55f5 Send ISRG_X1 on port 25, make DANE pin that 2022-02-19 14:35:45 +01:00
d3e7ea5389 spell it out 2022-02-19 13:30:36 +01:00
a8dc20962a workaround a bug in coredns 2022-02-19 13:02:52 +01:00
55a601de5a Add missing import for validators, improve behaviour when an error occurs. 2022-02-17 13:09:15 +00:00
7d801c560c Improve if statement 2022-02-17 12:45:35 +00:00
9466ad4131 fix #2220 2022-02-13 15:40:20 +01:00
278d74ce6f Add title attribute on user-panel div 2022-02-01 13:53:11 +01:00
3fe1dbe881 Add input validation for domain creation 2022-02-01 13:08:30 +01:00
c69f886a73 Update code with ghostwheel42 comments 2022-02-01 09:10:51 +01:00
3e394faf92 Patch function "Display Name" into admin page 2022-01-31 16:40:37 +01:00
b9e614145f there too 2022-01-21 15:01:23 +01:00
b7fb8c661a switch to new API 2022-01-21 14:54:49 +01:00
90394d7d8c 🎨 use resolver.resolve 2022-01-21 21:17:37 +08:00
32446f03e7 Update start.py
fix missing leading . for the resolver test
2022-01-21 15:47:22 +08:00
1e53530164 Merge #2144
2144: Enable unbound by default, warn if the DNS resolver doesn't work r=mergify[bot] a=nextgens

## What type of PR?

bug-fix

## What does this PR do?

Enable unbound by default, warn if the DNS resolver doesn't work

### Related issue(s)
- close #2135

## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [ ] In case of feature or enhancement: documentation updated accordingly
- [x] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.


Co-authored-by: Florent Daigniere <nextgens@freenetproject.org>
Co-authored-by: Florent Daigniere <nextgens@users.noreply.github.com>
2022-01-12 13:21:49 +00:00
a9da0c084a syntax error 2022-01-12 13:44:17 +01:00
a2f6243382 remove the error variable 2022-01-12 13:34:18 +01:00
b12616b93f Make the recommendation clearer 2022-01-12 09:55:14 +01:00
f809be39bf supply missing fields argument 2022-01-11 18:53:01 +01:00
7bd1fd3489 fix 2145 2022-01-07 09:07:32 +01:00
379fe18f7a test dns resolvers at startup 2022-01-05 18:49:30 +01:00
98973223fd reduce TTL to 1d 2022-01-05 11:37:29 +01:00
792893caae change TTL to 1y 2022-01-05 10:41:25 +01:00
671f3e382a Fix 2138: Pin DANE with the full cert 2022-01-05 10:38:27 +01:00
7f89a29790 Fix 2125
Make the caller responsible to know whether the rate-limit code should
be called or not
2022-01-03 13:38:21 +01:00
65d905fe62 Merge #2099
2099: update Dockerfile to alpine 3.14.3 r=mergify[bot] a=willofr

## What type of PR?
Security fix

## What does this PR do?
Updated the Dockerfile to use the latest alpine version 3.14.3 where several CVEs have been fixed: https://alpinelinux.org/posts/Alpine-3.14.3-released.html
New images successfully built on my test env.

### Related issue(s)
None

## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [x] In case of feature or enhancement: documentation updated accordingly
- [x] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.


Co-authored-by: Will <will@packer-output-c8fcfb40-3d93-4475-8f87-e14a9dd683b6>
Co-authored-by: willofr <willofr@users.noreply.github.com>
2021-12-31 12:06:53 +00:00
3eca813182 Merge #2116
2116: fix 2114: redirect old path r=mergify[bot] a=nextgens

## What type of PR?

bug-fix

## What does this PR do?

Old paths may still be cached in browsers, it's easy enough to redirect them

### Related issue(s)
- close #2114


Co-authored-by: Florent Daigniere <nextgens@freenetproject.org>
2021-12-30 15:24:51 +00:00
c4675e6e75 fix 2114: redirect old path 2021-12-30 15:29:56 +01:00
b4d3d4b3c9 Preparations for 1.9 release. 2021-12-29 14:40:45 +00:00