1
0
mirror of https://github.com/mailcow/mailcow-dockerized.git synced 2024-12-14 10:52:49 +02:00
Commit Graph

1635 Commits

Author SHA1 Message Date
andryyy
869e01a9a7 [Rspamd] Add fuzzy hash to msg 2018-11-12 09:57:25 +01:00
andryyy
4f7f493490 [Rspamd] Add SOGo contacts to whitelist 2018-11-12 09:56:54 +01:00
andryyy
2210201c76 [SOGo] Adjust SOGo view 2018-11-12 09:53:39 +01:00
andryyy
e6625501e7 [Nginx] Remove Strict-Transport-Security for subdomains (prevented autoconfig from working without TLS) 2018-11-12 09:53:18 +01:00
andryyy
1404fc50f4 [Rspamd] Add stopsignal (testing) 2018-11-12 09:52:34 +01:00
andryyy
159c36b531 [Dovecot] Create crypted mail_attachment_fs to store attachments with a min size of 128k
[Dovecot] Shared location to "auto:" to auto-detect legacy mailbox formats across shared mailboxes
[Dovecot] Create config service for crypted mail_attachment_fs
2018-11-12 09:52:12 +01:00
andryyy
9ee557e5a5 [Postfix] Adjust mailbox query 2018-11-12 09:49:52 +01:00
andryyy
244ab191bd [Dovecot] Dovecot 2.3.3, Pigeonhole 0.5.3
[Dovecot] Use "--enable-hardening" flag
[Dovecot] Fix cronjobs
[Dovecot] Use /var/volatile to prevent locking files from being written to NFS storage (if vmail is on NFS)
[Dovecot] Change userdb query
[Dovecot] Use /var/attachments for mdbox attachment deduplication and /var/index for index files
[Dovecot] Fix sieve user creation
[Dovecot] Make console writable
[Dovecot] Fix trim_logs.sh
2018-11-12 09:49:23 +01:00
Markus Gnadl
0e33fd49bb wildcards (subdomain.*) in ADDITIONAL_SAN are expanded to all mailcow domains 2018-10-30 09:07:01 +01:00
Michael Kuron
4ee546c04a
Reduce rspamd DNS timeout
Fixes #1957
2018-10-29 19:55:24 +01:00
andryyy
f8ff0afbc6 [Web] Fix init_db for older mailcow installations, fixes #1961 2018-10-28 20:57:21 +01:00
andryyy
b8b9e6ef57 [Web] Fix sieve validation, fixes #1960 2018-10-28 12:46:08 +01:00
andryyy
2bd1b1c960 [Watchdog] Skip container restart if running for less than 120 seconds 2018-10-27 23:44:06 +02:00
andryyy
a332f0dcc6 Merge branch 'master' of https://github.com/mailcow/mailcow-dockerized 2018-10-27 18:59:26 +02:00
André Peters
0758738326
Merge pull request #1924 from Skydiver84de/patch-1
Update lang.de.php
2018-10-27 17:38:20 +02:00
André Peters
efe19c347e
Merge pull request #1959 from heavygale/patch-2
Update lang.de.php
2018-10-27 17:37:56 +02:00
Max
fa9244828c
Update lang.de.php 2018-10-27 14:48:56 +02:00
Max
d5d7a77e21
Hide 'TLS policy maps'-Tab from Domainadmins
The tabpanel is already hidden, but the nav-tab was still visible.
2018-10-27 14:27:56 +02:00
andryyy
f92b20c9ad [Rspamd] Change log level to silent (see docs) 2018-10-27 13:55:55 +02:00
andryyy
f796db0a65 [DockerAPI] Add top and stats 2018-10-27 13:25:18 +02:00
andryyy
e04a3aed6a [ClamAV] Do not try to modify cross-mounted file, copy whitelist from conf to lib directory 2018-10-27 13:25:05 +02:00
andryyy
af5ce48e8d [ClamAV] Remove AllowSupplementaryGroups from freshclam.conf (deprecated) 2018-10-27 13:24:14 +02:00
andryyy
4e2b8dbd90 [Watchdog] Check if initdb is running and if true skip killing php-fpm-mailcow 2018-10-27 13:23:36 +02:00
andryyy
bf71f9b600 [Postfix] Add tls_preempt_cipherlist to SMTPS 2018-10-27 13:22:29 +02:00
andryyy
42fe16250b [Rspamd] Adjust default values for (perm) failures of DKIM and SPF 2018-10-26 20:04:41 +02:00
andryyy
c9cf3476a0 [Update] Remove obsolete parameters
[Compose] New watchdog image
[Watchdog] Allow multiple rcpts separated by comma
2018-10-26 10:07:23 +02:00
Patrik Kernstock
1dc9d3fa27
[Postfix] Security: Prefer server-side ciphers
Prefer server-side ciphers to prevent client-side cipher downgrade. Already enabled in Dovecot.
2018-10-25 23:37:25 +02:00
andryyy
70a914a98c [Web] More mailq fixes 2018-10-25 23:03:35 +02:00
andryyy
bc12e55b4d Merge branch 'master' of https://github.com/mailcow/mailcow-dockerized 2018-10-25 22:43:09 +02:00
andryyy
ea4e92a362 [Web] Fix mailq styles in /admin 2018-10-25 22:42:20 +02:00
andryyy
48047a364c [Web] Move 'get' method to mailq functions file 2018-10-25 22:41:57 +02:00
andryyy
5f02f7d38f [Web] Add overflows in /admin for small devices 2018-10-25 22:40:41 +02:00
andryyy
0d4e89e62b [Web] Fix maildir cleanup after deleting mailbox 2018-10-25 22:39:20 +02:00
andryyy
800eebd117 [Dovecot] Use events to kill supervisord when main proc dies
[Postfix] Use events to kill supervisord when main proc dies
[SOGo] Use events to kill supervisord when main proc dies
2018-10-25 22:35:07 +02:00
andryyy
23e3bdfe5a [Dockerapi] Some minor changes 2018-10-25 22:34:31 +02:00
André Peters
3094dd3822
[Web] Cleanup _sogo_static_view and memcached 2018-10-24 22:32:05 +02:00
andryyy
37964d9dd1 [ACME] Try to reload services after certificate changes instead of restarting
[DockerAPI] Add service reload commands
2018-10-24 20:14:59 +02:00
andryyy
5f02c6006c [Postfix] Do not remove user agent 2018-10-23 23:22:43 +02:00
André
93e0206db4 [Update] Remove mailcow_anonymize_headers.pcre checks
[Postfix] Rename mailcow_anonymize_headers.pcre > anonymize_headers.pcre to prevent collisions
2018-10-23 22:57:38 +02:00
André
66d8f33aac [Postfix] Move "should not"-sign headers out of Postcow check to always remove them, fixes #1911 2018-10-23 21:55:55 +02:00
André
c723a9d145 Merge branch 'master' of https://github.com/mailcow/mailcow-dockerized 2018-10-23 21:15:50 +02:00
André
e30dfd6751 [Web] Queue manager for Postfix
[Web] Add sogo_access mail attribute
[Web] Allow to wipe SOGo profiles
2018-10-23 21:14:57 +02:00
André
db64fa490b [SOGo] Read .sogo_access attribute when bootstrapping view 2018-10-23 21:13:37 +02:00
André
fbf1c7b7c1 [DockerAPI] WIP: change of structure, add some more commands to control mail queue 2018-10-23 21:12:37 +02:00
André Peters
bf06d8dd3a
Merge pull request #1934 from DynamicThijs/patch-1
Update lang.nl.php
2018-10-22 20:59:55 +02:00
DynamicThijs
4a0059136b
Update lang.nl.php 2018-10-22 20:56:19 +02:00
DynamicThijs
556a5a365c
Update lang.en.php 2018-10-22 20:44:36 +02:00
DynamicThijs
6969892572
Update lang.nl.php 2018-10-22 20:41:43 +02:00
Skydiver84de
ce1c8ee603
Update lang.de.php
Correction of little mistake in line 569 (deleted one "zu" as it did not make any sence).
2018-10-20 08:07:34 +02:00
André Peters
68f2a1c5fc
[Rspamd] Properly close additional Rspamd maps 2018-10-19 11:12:58 +02:00
André
7490a85a48 [Web] Check cookie content, fixes #1917 2018-10-19 10:20:09 +02:00
André
e941c6e8b2 [ACME] Fix missing for loop start
[Compose] New ACME image
2018-10-19 10:03:05 +02:00
André
2ac664ceb7 [Web] Fix missing return msg when resetting spam score 2018-10-18 22:32:37 +02:00
André
67658c1a07 [Web] Read default actions from Rspamd instead of using/printing "5,15"
[Web] Allow to reset spam score to server default (which deletes the custom spam score from the database and prints the default action values of Rspamd in use)
2018-10-18 21:48:30 +02:00
André
7a7fafec87 [Compose] New Rspamd image (1.8.1)
[Rspamd] Upgrade base to Bionic
2018-10-17 22:41:39 +02:00
André
86b92f68cb [Watchdog] Remove cert check (wip)
[Watchdog] Append last check loop as attachment to mail
[Watchdog] Print time and date in mail alerts
2018-10-17 22:30:13 +02:00
André
7386dc1e5c [ACME] Stop requesting certificates for autoconfig.* 2018-10-16 23:01:01 +02:00
André
109eec923f [Web] Internal hint to switch to array_key_last instead of array_pop 2018-10-16 23:00:15 +02:00
André
73b48fc13e [Rspamd] Remove deprecated attachments_only in AV module
[Rspamd] Remove old symbol score
2018-10-16 22:59:25 +02:00
André
51dd88abeb [Unbound] Reduce negative max ttl to 60s and min-ttl for all other keys to 5 2018-10-16 20:14:14 +02:00
André
8958449e76 [Postfix] Remove headers only when mail_name matches 2018-10-16 20:11:21 +02:00
André
d39eab53a3 [Web] Fix API 2018-10-16 20:09:01 +02:00
André
788e32b328 [Web] Set new expire date for time limited aliases via actions button, fixes #1903 2018-10-16 20:08:52 +02:00
André
d99b8aaf69 [Postfix] Change mail_name to Postcow and only replace headers when mail_name matches 2018-10-16 10:26:41 +02:00
Tobias "Knight" S
41c8a8bb46
disabling more functions inside php-fpm 2018-10-15 22:52:30 +02:00
André Peters
83a5eda762
Merge pull request #1434 from apoc4lyps/master
hardening http headers
2018-10-15 22:48:50 +02:00
André Peters
58d0f51242
Merge pull request #1899 from mailcow/alias-autodiscover
Hide autodiscover records on DNS page for alias domains
2018-10-15 22:45:33 +02:00
Michael Kuron
1bb618d563
Update dns_diagnostics.php 2018-10-15 20:53:41 +02:00
André
abd0a1b337 [PHP-FPM] Disable some functions by default 2018-10-15 20:52:39 +02:00
André
a844adde0f [Postfix] Add mailcow_anonymize_headers to default config 2018-10-15 20:52:06 +02:00
André
89b0e3e0c6 [Web] Minor language fix 2018-10-15 11:37:41 +02:00
André
178bee7ac3 Merge branch 'master' of https://github.com/mailcow/mailcow-dockerized 2018-10-14 19:05:57 +02:00
André
d2d0369f32 [PHP-FPM] Base on Alpine 3.8
[Watchdog] Base on Alpine 3.8
[ACME] Base on Alpine 3.8
[Watchdog] Minor changes
2018-10-14 14:29:03 +02:00
André
b8fe3f5fd4 [Web] Fall back to raw content when mail parsing fails, fixes #1892 2018-10-14 10:12:21 +02:00
André
2da228a21e [Watchdog] Remove some check_ping checks
[Watchdog] Add ClamAV check (if SKIP_CLAMD=n)
[Watchdog] Add Unbound check
[Watchdog] Do not use Docker API by default to determine IP of containers (see "IP_BY_DOCKER_API")
[Watchdog] Minor changes
2018-10-14 00:21:31 +02:00
André
a9eddae686 [ACME] Do not add alias domains to auto* domains 2018-10-14 00:19:14 +02:00
André
5705044af0 [ClamAV] Update to 0.100.2 2018-10-14 00:18:21 +02:00
Tobias "Knight" S
7114999c75
remove duplicated import time 2018-10-13 23:30:24 +02:00
André
93917f8385 [Unbound] Upgrade to Alpine 3.8, fixes #1882 2018-10-13 10:12:01 +02:00
André
4459b773f1 Merge branch 'master' of https://github.com/mailcow/mailcow-dockerized 2018-10-12 19:24:41 +02:00
André
c80fe40669 [Unbound] Do not allow from all (dangerous for setups with incorrect netfilter setups) 2018-10-12 11:35:45 +02:00
André
5ce15eac4b [Web] Some language updates for sys mails 2018-10-12 10:57:47 +02:00
André
23e6e52f4f [Postfix] Proper permissions for sql config files
[Dovecot] Proper permissions for sql config files
2018-10-12 10:57:00 +02:00
André
1fce562434 [Dovecot] Set imap_max_line_length = 2 M 2018-10-12 10:56:40 +02:00
André
3db6af5c90 [Unbound] Trust all addresses - do not expose Unbound! 2018-10-12 10:56:17 +02:00
André
9f0be1d8a8 [Web] Fix require_once to always include document root
[Web] Add system mails (send mails to all mailboxes via LMTP)
[Web] Allow to add more administrators
[Web] Fix domain administrator editing
[Web] Remove some foreign keys
[Web] Remove username from API
[Web] Remove more .php extension from code
[Web] More minor fixes
2018-10-11 11:59:23 +02:00
André
32f7ae1d2e [Rspamd] Prefix quarantine error_log messages with "QUARANTINE"
[Rspamd] Fix quarantine max size check (it was ignored)
2018-10-11 11:55:52 +02:00
André
c0b590fff6 [PHP-FPM] Move max_execution_time and max_input_time to general PHP config, removed as fixed php_admin_value 2018-10-11 11:54:38 +02:00
André
aa39be7ea6 [SOGo] Use mysqladmin status instead of ping to determine readiness
[PHP-FPM] Use mysqladmin status instead of ping to determine readiness
[PHP-FPM] Init database in entrypoint
[PHP-FPM] Change API credential injection
[Dovecot] Use mysqladmin status instead of ping to determine readiness
2018-10-11 11:53:22 +02:00
André
ce135bb773 [ACME] Log acme-client output base64 encoded, use mysqladmin status instead of ping to determine readiness 2018-10-11 11:51:13 +02:00
André Peters
4179cc74ec
Merge pull request #1830 from DynamicThijs/patch-1
Update Dutch lang file
2018-10-09 19:27:34 +02:00
Jérôme Groven
34ddde82c4 [Web] New /get/dkim/{domain} method to retrieve DKIM keys 2018-10-09 17:40:06 +02:00
André
699c9a7348 Merge branch 'master' of https://github.com/mailcow/mailcow-dockerized 2018-10-07 15:11:48 +02:00
André
ad63552951 [Dovecot] Check file size of mail crypt key pair, fixes #1859
[Compose] New Dovecot image
2018-10-07 15:10:17 +02:00
Michael Kuron
125ce8e27c
[web] fix relayhost test 2018-10-07 13:21:02 +02:00
André
9f52cd9456 [Docker API] Fix sieve list for users, fixes #1849 2018-10-06 22:09:23 +02:00
André
e304860408 [Web] Fix empty domain dropdown in race condition, fixes #1849 as workaround 2018-10-06 22:09:05 +02:00
André
1893dae2d9 [Web] Fix JS pathes, fixes #1845 2018-10-05 16:52:31 +02:00
André
c08149adef [SOGo] EAS changes, larger timeout 2018-10-05 11:12:55 +02:00
André
539727330b [Web] Fix domain admin edit function 2018-10-04 20:30:42 +02:00
André
f5799faf6d [Web] Feature: TLS policy maps
[Web] Avoid php extensions in links
[Web] Minor fixes
2018-10-04 14:38:12 +02:00
André
c6aa3610f0 [Postfix] Enable/create smtp_tls_policy_maps 2018-10-04 14:34:53 +02:00
André
f6b2a6aab2 [Postfix] Enable/create smtp_tls_policy_maps 2018-10-04 14:34:34 +02:00
André
2f18eb5ad0 [Nginx] Avoid php extensions, use rewrite 2018-10-04 14:34:00 +02:00
André
b2067cb521 [SOGo] SOGoMaximumSyncWindowSize = 99 2018-10-04 14:33:32 +02:00
André
cf28727376 [Dovecot] Add timeouts to sa-rules script, remove with -f flag to return 0 2018-10-03 23:27:31 +02:00
DynamicThijs
2ef73e2255
Update Dutch lang file
Another little update to the Dutch lang file
2018-10-03 18:00:44 +02:00
André
d00f4744fa [Web] Fix address rewriting actions, fixes #1829 2018-10-03 17:46:59 +02:00
André
a7b51a9972 [Web] Fix user page actions 2018-10-03 12:05:01 +02:00
André
76530b7e6d [Web] Use json_encode for mail attrs when creating a mailbox 2018-10-03 11:28:25 +02:00
André
d8148bef79 [Docker API] Do not print warning when maildr does not exist 2018-10-03 11:27:52 +02:00
André
f0dfee7820 [Web] Add MAILBOX_DEFAULT_ATTRIBUTES variable to define default mailbox attributes 2018-10-03 11:18:31 +02:00
André
668a0927ac [Web] Fix deletion of domain, fixes #1818 2018-10-02 21:20:11 +02:00
André
2af2f7836d [Dovecot] Remove fixed uid and gid 2018-10-02 10:31:22 +02:00
André
62b27aeacb [Dovecot] Check garbage hourly
[Dovecot] Update SA rules once when container starts
2018-10-02 09:34:21 +02:00
André
ca1e950c61 [Dovecot] Do not query gid and uid 2018-10-02 09:13:33 +02:00
André
b8ebdc3c58 [Postfix] Increase default message size limit to 100 MiB 2018-10-01 22:06:20 +02:00
André
a054182246 [Rspamd] Add desc to high spam networks 2018-09-30 18:56:35 +02:00
André
d7ca5579dc [Rspamd] Ignore custom files, but keep bad asn map 2018-09-30 18:55:35 +02:00
André
cdca603ff5 [Unbound] Fix logging, fixes #585
[Rspamd] Fix permissions of controller password file
[Unbound] Enable unbound-control
2018-09-30 14:43:18 +02:00
André
b008211f52 [Rspamd] Controller password placeholder 2018-09-30 09:55:50 +02:00
André
8439daea7e [Rspamd] Revert adding worker-controller-password... 2018-09-30 09:54:19 +02:00
André
4396be2938 [Rspamd] Place socket in _rspamd home and fix permissions
[Compose] Remove volume for Rspamd socket
[Web] Do not exit loop on fuzzy errors when learning a message as spam
2018-09-30 09:53:25 +02:00
André
73b10350d0 [Rspamd] Ignore sa-rules-heinlein file, remove from index 2018-09-29 22:03:48 +02:00
André
0fb43f4916 [Docker API] Use TLS encryption for communication with "on-the-fly" created key paris (non-exposed)
[Docker API] Create pipe to pass Rspamd UI worker password
[Dovecot] Pull Spamassassin ruleset to be read by Rspamd (MANY THANKS to Peer Heinlein!)
[Dovecot] Garbage collector for deleted maildirs (set keep time via MAILDIR_GC_TIME which defaults to 1440 minutes)
[Web] Flush memcached after mailbox item changes, fixes #1808
[Web] Fix duplicate IDs, fixes #1792
[Compose] Use SQL sockets
[PHP-FPM] Update APCu and Redis libs
[Dovecot] Encrypt maildir with global key pair in crypt-vol-1 (BACKUP!), also fixes #1791
[Web] Fix deletion of spam aliases
[Helper] Add "crypt" to backup script
[Helper] Override file for external SQL socket (not supported!)
[Compose] New images for Rspamd, PHP-FPM, SOGo, Dovecot, Docker API, Watchdog, ACME, Postfix
2018-09-29 22:01:23 +02:00
André
96c985abad [Rspamd] Move settings file to RSPAMD_CONF root, delete old lua scripts 2018-09-26 13:23:05 +02:00
André
5db40bf688 [Web] Implement MD5-CRYPT verification, fixes #1665 2018-09-20 10:25:36 +02:00
André
c7cef3241f [Rspamd] Controller worker count == 1, fixes #1716 2018-09-12 20:32:59 +02:00
André
1b5409f3fa [Rspamd] Check if ip is valid (KEEP_SPAM symbol), fixes #1759 2018-09-12 15:50:42 +02:00
André
1499094b61 [PHP-FPM] Increase PHP memory limit for "web" to 512M
[Helper] Nextcloud 14
[Rspamd] Fix KEEP_SPAM lua script: skip check if ip is false
2018-09-11 19:35:21 +02:00
André
a5488d4ba6 [Web] Fix init db on fresh installations 2018-09-10 16:23:08 +02:00
André
ce604232e2 [Web] Add missing data-acl for sync jobs 2018-09-10 10:56:32 +02:00
André
29aeb5b85d [Watchdog] Fix SOGo check, fixes #1750 2018-09-09 21:52:48 +02:00
André
c8a1cbd25a Merge branch 'temp-master' 2018-09-09 21:21:43 +02:00
André
c9554ca022 [Compose] Update watchdog image
[Watchdog] Fix IP detection with multiple networks
[Web] Show API field (no docs, no support, wip)
[Web] haveibeenpwned.com implementation
[Web] User and domain admin ACL (no docs, no support, wip)
[Web] Some minor fixes
2018-09-09 21:18:38 +02:00
André
ea4a26eabf [Nginx] Use SOGo web resources from local mount 2018-09-09 09:51:37 +02:00
André
ad902f0ad8 [SOGo] Remove HTTP server on port 9192 2018-09-09 09:48:11 +02:00
André
afc18fd469 [Rspamd] Update bad asn, move KEEP_SPAM to a custom lua function 2018-09-09 09:47:47 +02:00
André
8a88514dfd [SOGo] Declare /usr/lib/GNUstep/SOGo as volume
[Nginx] Mount vols from sogo-mailcow to access /usr/lib/GNUstep/SOGo
2018-09-07 16:40:37 +02:00
André
e5b830adea [Dovecot] Fix shared namespace 2018-08-31 23:33:55 +02:00
sriccio
5e56a46c84 [dovecot] Enhancement to allow to use auth_default_realm
When using auth_default_realm in dovecot configuration to setup a default domain name (to allow users to login with only a username instead of the full e-mail address), it breaks the compatibility with imapsync and sogo/sieve vacation.

Adding a domain name to dovecot master user/pass fixes this.

This never made it do the master branch, so I'm trying a PR again :)

See: https://github.com/mailcow/mailcow-dockerized/pull/1331#issuecomment-386534307
2018-08-28 17:14:05 +02:00
André Peters
4b09b5b1bb
Update functions.mailbox.inc.php
[Web] Remove invalid parameter from sieve_filters update query, fixes #1714
2018-08-26 18:31:44 +02:00
André
5b4b184778 [Web] Fixes to mailcow logo (stickers are coming!)
[Web] Fix adding multiple domain aliases, fixes #1705
2018-08-23 08:49:02 +02:00
André
1dea230b7b [Web] Fix setting a rate limit when adding a domain 2018-08-21 21:23:06 +02:00
André
d28fd4070b [Web] Allow to set rate limit in add_domain modal
[Web] Cleanup rate limits when deleting objects
2018-08-21 21:06:22 +02:00
André
d64a89473e [Web] Add multiple DKIM at once (+ button to auto-fill missing keys)
[Web] Duplicate DKIM keys from a single domain to a single or multiple domains
[Web] WIP: Started Ratelimit rework
[Web] Show RL in overview of mailbox and domains
[Web] Move RL function out of mailbox functions file
[Web] Some language fixes/changes
2018-08-21 17:41:04 +02:00
Michael Kuron
140326012c
Fix length of remote column in logs table
Otherwise a full non-anonymized IPv6 address won't fit
2018-08-19 10:07:44 +02:00
DynamicThijs
819e94883a
Update lang.nl.php 2018-08-18 10:28:07 +02:00
André Peters
e021f4c365
Merge pull request #1633 from Knight1/patch-1
kitterman.com redirects to TLS by default
2018-08-18 05:59:52 +02:00
André
3fd99e4f6d [Web] Important fix: Ignore untrusted headers 2018-08-17 22:32:42 +02:00