1
0
mirror of https://github.com/Mailu/Mailu.git synced 2024-12-14 10:53:30 +02:00
Mailu/webmails
bors[bot] 7e60ba4e98
Merge #2613
2613: Enhance network segregation r=nextgens a=nextgens

## What type of PR?

enhancement

## What does this PR do?

- put radicale and webmail on their own network: this is done for security: that way they have no privileged access anywhere (no access to redis, no access to XCLIENT, ...)
- remove the EXPOSE statements from the dockerfiles. These ports are for internal comms and are not meant to be exposed in any way to the outside world.

### Related issue(s)
- #2611

## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [ ] In case of feature or enhancement: documentation updated accordingly
- [ ] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.


Co-authored-by: Florent Daigniere <nextgens@freenetproject.org>
2023-01-24 09:28:29 +00:00
..
roundcube Step1: expose managesieve, make the webmails use it 2023-01-04 14:51:15 +01:00
snappymail Step1: expose managesieve, make the webmails use it 2023-01-04 14:51:15 +01:00
Dockerfile Don't expose any port (suggestion from ghost) 2023-01-04 19:19:43 +01:00
nginx-webmail.conf Better snappymail defaults 2022-11-13 14:34:25 +01:00
php-webmail.conf Hardening: run the http and php as different users 2022-11-13 13:44:35 +01:00
php.ini Add snuffleupagus 2022-11-18 13:25:02 +01:00
snuffleupagus.rules Upgrade to snuffleupagus 0.9.0 2023-01-10 12:28:38 +01:00
start.py drop privs better 2022-12-23 10:58:06 +01:00