mirror of
https://github.com/mailcow/mailcow-dockerized.git
synced 2024-12-14 10:52:49 +02:00
c520f21d28
* [API] Fix minor issue in api docs * [GH-Actions][stale] Add neverstale label to exempt list * [Web] add github version tag * [Web] add github version tag * [Web] add github version tag * [Web] add github version tag * [Web] add github version tag * [Web] add github version tag error handling * [Web] add github version tag error handling * Passwordless SOGo auth: support for calendar invitations and calendar/contacts subscriptions Inviting someone to a calendar event triggers a request to /SOGo/so/otheruser@example.com/freebusy.ifb/ajaxRead. Subscribing to someone's calendar/contacts triggers a request to /SOGo/so/otheruser@example.com/foldersSearch. The email address in the URL is different from the logged-in user, which needs to be handled appropriately by sogo-auth.php. * [Web] add github version tag - adjust css * [Compose] Update SOGo Autoreply Schedule to 5m Based on the advice of inverse (SOGo developer). Thanks to https://github.com/jmber Closes: https://github.com/mailcow/mailcow-dockerized/issues/4436 * [Web] add github version tag - move twig globals * [Web] add github version tag - missing </div> * Passwordless SOGo auth: improvements for when accessing other users * [WebAuthn] fido2 passwordless auth - fix (#4440) * [WebAuthn] fido2 revert * [WebAuthn] set UV flags to 'discouraged' * [WebAuthn] revert - set UV flags to 'discouraged' * Update clamav to 0.104.2 * Update clamav to 0.104.2 * Update dovecot to 2.3.18 Update gosu to 1.14 Use debian bullseye as base * [Web] Updated lang.es.json [CI SKIP] (#4453) Co-authored-by: Fijxu <fijxu@zzls.xyz> Co-authored-by: milkmaker <milkmaker@mailcow.de> Co-authored-by: Fijxu <fijxu@zzls.xyz> * Fix broken documentation links (#4458) * Fix broken documentation links * Fix a few more broken documentation links * Fix broken documentation links in translation files * Fall back to empty string if WATCHDOG_NOTIFY_EMAIL undefined (#4457) By default, `.env` (`mailcow.conf`) does not define `WATCHDOG_NOTIFY_EMAIL`. Using it in `docker-compose.yml` without having it defined leads to Compose v2 displaying this warning on startup: > WARNING: The WATCHDOG_NOTIFY_EMAIL variable is not set. Defaulting to a blank string. Related to https://github.com/mailcow/mailcow-dockerized/issues/4315 * [Web] Updated lang.sk.json [CI SKIP] (#4461) Co-authored-by: Lukáš Matula <lukas@gbely.net> Co-authored-by: milkmaker <milkmaker@mailcow.de> Co-authored-by: Lukáš Matula <lukas@gbely.net> * oletools: disable template injection detection (#4464) Seems to be causing a lot of false positives lately * Fix minor typo in comment (#4466) Correction of the comment, so that the explanation is correct and can be understood. * Update issue templates to issue forms (#4465) This PR updates the issue templates to GitHubs new issue forms * [Web] Fix padding issue in UI admin panel (#4481) * [Web] fix admin panel padding issue * [Web] fix admin panel padding issue * [Web] Updated lang.sk.json [CI SKIP] (#4489) Co-authored-by: Lukáš Matula <lukas@gbely.net> Co-authored-by: milkmaker <milkmaker@mailcow.de> Co-authored-by: Lukáš Matula <lukas@gbely.net> * increase opcache.interned_strings_buffer to 16 (#4487) since version 23.0.2 Nextcloud recommends having a value greater than 8 for `opcache.interned_strings_buffer`. As this memory will be only used when needed this should have no impact on installations that are not using nextcloud. related discussion: https://help.nextcloud.com/t/nextcloud-23-02-opcache-interned-strings-buffer/134007/19 related nextcloud issue: https://github.com/nextcloud/server/issues/31223 * nextcloud - add missing redirections (#4366) adds missing location directives to the nginx configuration of nextcloud 22, to prevent warnings in nextcloud admin center of missing redirections * Update imapsync to 2.178 (#4491) * Update and fix oletools (#4479) As noticed by @MAGICCC (#4464 (comment)), our olefy image does not work anymore if you rebuild it. This is because @HeinleinSupport recently updated their repository with the changes from @decalage2's repository, which renamed olvba3 to olevba. Since @HeinleinSupport does not recommend using its own patched branch and is very slow in pulling in changes from upstream (@decalage2), let's switch to the latter. This also allowed me to revert #4464. Finally, a minor patch to rspamd is necessary. While the documentation says In the extended mode the oletools module will not trigger on specific categories, but will always set a threat string with all found flags when at least a macro was found. This is not actually true -- it only sets it when suspicious or autoexec threats were detected. But it's a one-line patch to make rspamd behave as documented and we should submit that patch to @rspamd too. With this patch, I have confirmed that Mailcow will reject any incoming, non-whitelisted message containing attachments with macros. * [Web] Fix excluded domain list in quaratine view Previously excluded domains from quarantine were not shown. * [Dovecot] Update syslogng Version to 3.28 (#4496) Co-authored-by: Niklas Meyer <niklas.meyer@tinc.gmbh> Co-authored-by: ntimo <git@nowitzki.me> Co-authored-by: Peter <magic@kthx.at> Co-authored-by: FreddleSpl0it <patschul@posteo.de> Co-authored-by: FreddleSpl0it <75116288+FreddleSpl0it@users.noreply.github.com> Co-authored-by: Michael Kuron <mkuron@users.noreply.github.com> Co-authored-by: milkmaker <milkmaker@mailcow.de> Co-authored-by: Fijxu <fijxu@zzls.xyz> Co-authored-by: Slavi Pantaleev <slavi@devture.com> Co-authored-by: Lukáš Matula <lukas@gbely.net> Co-authored-by: Max <mail@heavygale.de> Co-authored-by: Michael Cramer <michael@bigmichi1.de> Co-authored-by: Robert Christian <soulsymphonies@users.noreply.github.com> Co-authored-by: André <andre.peters@debinux.de> Co-authored-by: Niklas Meyer <niklas.meyer@tinc.gmbh>
132 lines
4.1 KiB
Docker
132 lines
4.1 KiB
Docker
FROM debian:bullseye-slim
|
|
LABEL maintainer "Andre Peters <andre.peters@servercow.de>"
|
|
|
|
ARG DEBIAN_FRONTEND=noninteractive
|
|
ARG DOVECOT=2.3.18
|
|
ENV LC_ALL C
|
|
ENV GOSU_VERSION 1.14
|
|
|
|
# Add groups and users before installing Dovecot to not break compatibility
|
|
RUN groupadd -g 5000 vmail \
|
|
&& groupadd -g 401 dovecot \
|
|
&& groupadd -g 402 dovenull \
|
|
&& groupadd -g 999 sogo \
|
|
&& usermod -a -G sogo nobody \
|
|
&& useradd -g vmail -u 5000 vmail -d /var/vmail \
|
|
&& useradd -c "Dovecot unprivileged user" -d /dev/null -u 401 -g dovecot -s /bin/false dovecot \
|
|
&& useradd -c "Dovecot login user" -d /dev/null -u 402 -g dovenull -s /bin/false dovenull \
|
|
&& touch /etc/default/locale \
|
|
&& apt-get update \
|
|
&& apt-get -y --no-install-recommends install \
|
|
apt-transport-https \
|
|
ca-certificates \
|
|
cpanminus \
|
|
curl \
|
|
dnsutils \
|
|
dirmngr \
|
|
gettext \
|
|
gnupg2 \
|
|
jq \
|
|
libauthen-ntlm-perl \
|
|
libcgi-pm-perl \
|
|
libcrypt-openssl-rsa-perl \
|
|
libcrypt-ssleay-perl \
|
|
libdata-uniqid-perl \
|
|
libdbd-mysql-perl \
|
|
libdbi-perl \
|
|
libdigest-hmac-perl \
|
|
libdist-checkconflicts-perl \
|
|
libencode-imaputf7-perl \
|
|
libfile-copy-recursive-perl \
|
|
libfile-tail-perl \
|
|
libhtml-parser-perl \
|
|
libio-compress-perl \
|
|
libio-socket-inet6-perl \
|
|
libio-socket-ssl-perl \
|
|
libio-tee-perl \
|
|
libipc-run-perl \
|
|
libjson-webtoken-perl \
|
|
liblockfile-simple-perl \
|
|
libmail-imapclient-perl \
|
|
libmodule-implementation-perl \
|
|
libmodule-scandeps-perl \
|
|
libnet-ssleay-perl \
|
|
libpackage-stash-perl \
|
|
libpackage-stash-xs-perl \
|
|
libpar-packer-perl \
|
|
libparse-recdescent-perl \
|
|
libproc-processtable-perl \
|
|
libreadonly-perl \
|
|
libregexp-common-perl \
|
|
libsys-meminfo-perl \
|
|
libterm-readkey-perl \
|
|
libtest-deep-perl \
|
|
libtest-fatal-perl \
|
|
libtest-mock-guard-perl \
|
|
libtest-mockobject-perl \
|
|
libtest-nowarnings-perl \
|
|
libtest-pod-perl \
|
|
libtest-requires-perl \
|
|
libtest-simple-perl \
|
|
libtest-warn-perl \
|
|
libtry-tiny-perl \
|
|
libunicode-string-perl \
|
|
liburi-perl \
|
|
libwww-perl \
|
|
lua-sql-mysql \
|
|
lua-socket \
|
|
mariadb-client \
|
|
procps \
|
|
python3-pip \
|
|
redis-server \
|
|
supervisor \
|
|
syslog-ng \
|
|
syslog-ng-core \
|
|
syslog-ng-mod-redis \
|
|
wget \
|
|
&& dpkgArch="$(dpkg --print-architecture | awk -F- '{ print $NF }')" \
|
|
&& wget -O /usr/local/bin/gosu "https://github.com/tianon/gosu/releases/download/$GOSU_VERSION/gosu-$dpkgArch" \
|
|
&& chmod +x /usr/local/bin/gosu \
|
|
&& gosu nobody true \
|
|
&& apt-key adv --fetch-keys https://repo.dovecot.org/DOVECOT-REPO-GPG \
|
|
&& echo "deb https://repo.dovecot.org/ce-${DOVECOT}/debian/bullseye bullseye main" > /etc/apt/sources.list.d/dovecot.list \
|
|
&& apt-get update \
|
|
&& apt-get -y --no-install-recommends install \
|
|
dovecot-lua \
|
|
dovecot-managesieved \
|
|
dovecot-sieve \
|
|
dovecot-lmtpd \
|
|
dovecot-ldap \
|
|
dovecot-mysql \
|
|
dovecot-core \
|
|
dovecot-pop3d \
|
|
dovecot-imapd \
|
|
dovecot-solr \
|
|
&& pip3 install mysql-connector-python html2text jinja2 redis \
|
|
&& apt-get autoremove --purge -y \
|
|
&& apt-get autoclean \
|
|
&& rm -rf /var/lib/apt/lists/* \
|
|
&& rm -rf /tmp/* /var/tmp/* /root/.cache/
|
|
|
|
COPY trim_logs.sh /usr/local/bin/trim_logs.sh
|
|
COPY clean_q_aged.sh /usr/local/bin/clean_q_aged.sh
|
|
COPY syslog-ng.conf /etc/syslog-ng/syslog-ng.conf
|
|
COPY syslog-ng-redis_slave.conf /etc/syslog-ng/syslog-ng-redis_slave.conf
|
|
COPY imapsync /usr/local/bin/imapsync
|
|
COPY imapsync_runner.pl /usr/local/bin/imapsync_runner.pl
|
|
COPY report-spam.sieve /usr/lib/dovecot/sieve/report-spam.sieve
|
|
COPY report-ham.sieve /usr/lib/dovecot/sieve/report-ham.sieve
|
|
COPY rspamd-pipe-ham /usr/lib/dovecot/sieve/rspamd-pipe-ham
|
|
COPY rspamd-pipe-spam /usr/lib/dovecot/sieve/rspamd-pipe-spam
|
|
COPY sa-rules.sh /usr/local/bin/sa-rules.sh
|
|
COPY maildir_gc.sh /usr/local/bin/maildir_gc.sh
|
|
COPY docker-entrypoint.sh /
|
|
COPY supervisord.conf /etc/supervisor/supervisord.conf
|
|
COPY stop-supervisor.sh /usr/local/sbin/stop-supervisor.sh
|
|
COPY quarantine_notify.py /usr/local/bin/quarantine_notify.py
|
|
COPY quota_notify.py /usr/local/bin/quota_notify.py
|
|
COPY repl_health.sh /usr/local/bin/repl_health.sh
|
|
|
|
ENTRYPOINT ["/docker-entrypoint.sh"]
|
|
CMD exec /usr/bin/supervisord -c /etc/supervisor/supervisord.conf
|