689 Commits

Author SHA1 Message Date
bors-mailu[bot]
9082055ad0 Merge #3934 #3940
3934: chore: fix link to charts r=nextgens a=dekarl

charts moved to the charts folder in f76c60a540

## What type of PR?

documentation

## What does this PR do?
track moved link destination

### Related issue(s)
- the chart was moved in: [#001](https://github.com/Mailu/helm-charts/pull/389)

## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [X] In case of feature or enhancement: documentation updated accordingly
- [X] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.


3940: Reenable nginx request buffering to fix roundcube r=nextgens a=nextgens

## What type of PR?

bug-fix

## What does this PR do?

Re-enable nginx request buffering to fix roundcube

### Related issue(s)
- closes #3913 

## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [ ] In case of feature or enhancement: documentation updated accordingly
- [x] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.


Co-authored-by: Karl Egly <dekarl@web.de>
Co-authored-by: Florent Daigniere <nextgens@freenetproject.org>
2025-10-20 11:16:00 +00:00
Florent Daigniere
418aee8634 stick with 1.4 TLS then 2025-10-20 10:42:09 +02:00
Florent Daigniere
ca89739174 Reenable nginx request buffering to fix roundcube 2025-10-18 21:48:59 +02:00
Florent Daigniere
e9df0159f7 Upgrade clamav to 1.5, use base image 2025-10-18 20:25:19 +02:00
sdomi
b6eebc516e Fixes around non-blocking I/O in the thread manager 2025-10-07 11:47:56 +02:00
DaCHack
964ae98149 Merge branch 'master' into patch-1 2025-08-30 23:20:01 +02:00
bors-mailu[bot]
c0f4fb84b4 Merge #3897
3897: fix: update ssloptions for fetchmail r=mergify[bot] a=WebSpider

## What type of PR?

bug-fix

## What does this PR do?

Fetchmail has updated SSL behaviour in v6.4.0, causing some unencrypted fetchmail jobs to fail. This repairs the functionality by adding a fallback.

### Related issue(s)
- Closes #3670 

## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [X] In case of feature or enhancement: documentation updated accordingly
- [x] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.


Co-authored-by: Nils Vogels <n.vogels@aves-it.nl>
2025-08-27 17:32:21 +00:00
DaCHack
464eebbcba Create 3864.feature 2025-08-24 02:12:03 +02:00
bors-mailu[bot]
fa2165687c Merge #3907
3907: Fix passphrase changed errors in snappymail r=mergify[bot] a=nextgens

## What type of PR?

bug-fix

## What does this PR do?

Fix "passphrase changed" errors in snappymail; tell it to encrypt data against the email address instead of the transient token used by SSO.

You may need to run the following for the error message to disappear completely
   ``find webmail/_data_/_default_/storage/ -name .cryptkey -delete``

### Related issue(s)
- closes #3906 

## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [ ] In case of feature or enhancement: documentation updated accordingly
- [x] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.


Co-authored-by: Florent Daigniere <nextgens@freenetproject.org>
2025-08-22 16:32:03 +00:00
Florent Daigniere
146202a902 Fix passphrase changed errors in snappymail 2025-08-22 12:47:50 +02:00
Florent Daigniere
e9825477dc Snuffleupagus v0.12 2025-08-22 12:24:38 +02:00
Florent Daigniere
895beec0b9 Upgrade Tika to fix CVE-2025-54988 2025-08-21 13:44:11 +02:00
Florent Daigniere
8ea66c219a fix snappymail 2025-08-15 21:08:11 +02:00
Nils Vogels
38c5cd7a7c chore: add towncrier fragment 2025-08-14 16:26:08 +02:00
bors-mailu[bot]
91d571aec8 Merge #3760
3760: Improve details page of domains by completing the zonefile, hiding unneeded entries, and puny encoding domains r=mergify[bot] a=Jumper78

## What type of PR?

feature, bug-fix

## What does this PR do?

The PR improves the quality of the details page for the domains. In detail, it:
- adds the lines for the alternative domains shown in the details page also to the zonefile
- hides the entries for the DMARC report (_domain1_._report._dmarc._domain2_) if _domain1_ and _domain2_ are equal; in that case the entries are not needed to allow the sending of the DMARC report
- makes sure that the entries shown in the details page and in the zone file are puny encoded
- the PR also includes a small bugfix; the zonefile included only one of the two DMARC lines for the main domain; the dmarc report dns entry is now also included for the main domain

### Related issue(s)
- in PR #3350, a list of dns entries for alternative domains was added to the details page; the lines for the alternative domains were missing in the download of the zonefile
- in issue #3661 it was discussed how the entries for the DMARC report exactly has to look like

## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [x] In case of feature or enhancement: documentation updated accordingly
- [x] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.


Co-authored-by: Jumper78 <52802286+Jumper78@users.noreply.github.com>
2025-08-13 15:02:14 +00:00
bors-mailu[bot]
16f077da75 Merge #3887
3887: Remove OCSP stapling by Nginx r=nextgens a=svoop

Let's Encrypt has dropped OCSP support and the resulting warning may cause problems when restarting or reloading the frontend Nginx e.g. as part of a post cert update hook.

## What type of PR?

Feature removal

## What does this PR do?

### Related issue(s)
closes #3886

## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [x] In case of feature or enhancement: documentation updated accordingly
- [x] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.


Co-authored-by: Sven Schwyn <sven.schwyn@bitcetera.com>
2025-08-13 12:49:49 +00:00
Florent Daigniere
2359a9e8e4 Merge branch 'master' into fix_ci 2025-08-13 09:59:01 +02:00
Florent Daigniere
9131a5a8c2 towncrier 2025-08-13 09:54:15 +02:00
Sven Schwyn
bf8e98e200 Remove OCSP stapling by Nginx 2025-08-12 16:58:44 +02:00
Florent Daigniere
e21f2f388d towncrier 2025-06-10 17:26:49 +02:00
bors-mailu[bot]
4fc4237e23 Merge #3839
3839: fix #3836: healthcheck of clamav r=mergify[bot] a=nextgens

## What type of PR?

bug-fix

## What does this PR do?

Fix the healthcheck of clamav

### Related issue(s)
- closes #3836 
- closes #3823
- closes #3741

## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [ ] In case of feature or enhancement: documentation updated accordingly
- [x] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.


Co-authored-by: Florent Daigniere <nextgens@freenetproject.org>
2025-05-08 13:07:59 +00:00
Florent Daigniere
8c2420d8cb fix #3836: healthcheck of clamav 2025-05-08 13:54:56 +02:00
bors-mailu[bot]
8924846a7c Merge #3729
3729: Allow setting collation via env variable and add uvloop r=mergify[bot] a=Grennith

## What type of PR?

Enhancement / Bugfix

## What does this PR do?

As of https://github.com/Mailu/Mailu/pull/3701, the collation shall be set by overwriting `SQLALCHEMY_DATABASE_URI` to contain the collation of the related DB. However, this is currently not possible in the Helm chart of Mailu at all. It's statically set there and would also require not setting DB_NAME etc. to not have it overwritten, see https://github.com/Mailu/Mailu/blob/master/core/admin/mailu/configuration.py#L144

Additionally, uvloop is added to the prod requirements of which postfix-mta-sts-resolver makes use of.

### Related issue(s)
- Mention an issue like: #3449 

## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [ x ] In case of feature or enhancement: documentation updated accordingly
- [ ] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.


Co-authored-by: Till Skrodzki <till@mueskro.de>
2025-02-28 23:33:12 +00:00
Jumper78
463b261370 put all newsfragments into bugfix file 2025-02-25 19:00:56 +00:00
Jumper78
e865f96d5a Update 3760.feature 2025-02-24 22:00:32 +01:00
Till Skrodzki
ebd3459738 Add towncrier entry for PR #3729 2025-02-24 21:05:38 +01:00
Jumper78
226a70214c Create 3760.bugfix 2025-02-15 07:25:50 +01:00
Jumper78
ad6b381e34 Create 3760.feature 2025-02-15 07:24:32 +01:00
Jumper78
7baea85783 Create 3758.bugfix 2025-02-14 20:50:14 +01:00
ctrl-i
651ca984d9 Update roundcube to 1.6.10 2025-02-13 08:26:53 +00:00
bors-mailu[bot]
8cc60a9867 Merge #3748
3748: Bump CREDENTIAL_ROUNDS to 13 r=mergify[bot] a=nextgens

## What type of PR?

enhancement

## What does this PR do?

Bump CREDENTIAL_ROUNDS to 13. As discussed on #mailu-dev, CPUs get faster.

Benchmark it using:
```
python3 -m timeit -n 1 -s "from passlib.hash import bcrypt_sha256" "bcrypt_sha256.using(rounds=13).hash('password')"
```

### Related issue(s)
- #1753 

## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [x] In case of feature or enhancement: documentation updated accordingly
- [x] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.


Co-authored-by: Florent Daigniere <nextgens@freenetproject.org>
2025-02-10 07:51:05 +00:00
Florent Daigniere
2a93cdf9aa Ensure tests actually work 2025-02-09 18:31:16 +01:00
Florent Daigniere
fc4225b330 Bump CREDENTIAL_ROUNDS to 13 2025-02-09 17:18:47 +01:00
Nazar Mokrynskyi
d51915871c Update ClamAV image tag to more generic and add newsfragment 2025-01-27 17:47:20 +02:00
Florent Daigniere
4cf35e7228 useGlobalPreferredServer=false in autoconfig 2025-01-09 12:05:02 +01:00
bors-mailu[bot]
d6b7bcf79b Merge #3709
3709: Clarify ip listen address setting r=mergify[bot] a=nextgens

## What type of PR?

documentation

## What does this PR do?

Clarify ip listen address setting in setup to avoid open-relays.

Thanks to `@Cenness`  for reporting it and suggesting a better wording.

### Related issue(s)
- closes #3680
- closes #3683
- #3690

## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [ ] In case of feature or enhancement: documentation updated accordingly
- [x] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.


Co-authored-by: Florent Daigniere <nextgens@freenetproject.org>
2025-01-05 21:41:44 +00:00
bors-mailu[bot]
b260d8ac90 Merge #3440
3440: Update reverse proxy documentation for using Traefik on a different host r=mergify[bot] a=Diman0

## What type of PR?

documentation

## What does this PR do?

It adds an extra section to the reverse proxy documentation. It provides an example on how to use Traefik on a different host than the host running Mailu. Now we will have documented both use cases where the reverse proxy is on the same host or a different host than Mailu.

### Related issue(s)
n/a

## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [x] In case of feature or enhancement: documentation updated accordingly
- [x] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.


Co-authored-by: Dimitri Huisman <diman@huisman.xyz>
2025-01-05 11:49:52 +00:00
Florent Daigniere
a9fb512567 Clarify ip listen address setting 2025-01-05 11:59:56 +01:00
Florent Daigniere
adc8ef9aba Add the mariadb connector as per 3449 2024-12-30 16:06:56 +01:00
Fabian Stanke
8a13316a0d Adds towncrier entry for PR #3696 as requested 2024-12-27 07:20:58 +01:00
Florent Daigniere
64d0bb603d Ensure mobileconfig has the right content-type 2024-12-22 16:40:44 +01:00
Florent Daigniere
f1c5ac5b14 Don't check empty passwords against HIBP 2024-11-17 14:42:23 +01:00
bors-mailu[bot]
e713fb6723 Merge #3647
3647: upgrade to snuffleupagus v0.11 r=mergify[bot] a=nextgens

## What type of PR?

enhancement

## What does this PR do?

- upgrade snuffleupagus to v0.11
- filter php:// wrapper types and only allow those we currently require (hardening)

### Related issue(s)

## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [ ] In case of feature or enhancement: documentation updated accordingly
- [x] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.


Co-authored-by: Florent Daigniere <nextgens@freenetproject.org>
2024-11-17 12:33:35 +00:00
Florent Daigniere
6f3257f3b2 doh; v2.38.2 2024-11-16 22:48:04 +01:00
Florent Daigniere
d4a3d5aeae Upgrade snappymail to v2.38.2 2024-11-16 22:24:26 +01:00
Florent Daigniere
9a928f8c7b snuffleupagus 11 2024-11-16 22:18:22 +01:00
Florent Daigniere
152b45a0e9 alpine 3.20.3 2024-10-21 11:05:01 +02:00
bors-mailu[bot]
e9570020aa Merge #3618
3618: Filter logs line based and in binary mode without decoding utf-8 r=mergify[bot] a=ghostwheel42

## What type of PR?

bug-fix

## What does this PR do?

try at fixing decoding errors when filtering logs

### Related issue(s)
- closes #3398



Co-authored-by: Alexander Graf <ghostwheel42@users.noreply.github.com>
2024-10-17 15:28:54 +00:00
Alexander Graf
70e28df9c7 Add newsfragment 2024-10-17 16:57:54 +02:00
bors-mailu[bot]
05175b5a3c Merge #3608
3608: Ensure healthchecks timeout r=mergify[bot] a=nextgens

## What type of PR?

bug-fix

## What does this PR do?

Ensure healthchecks timeout

### Related issue(s)
- close #3398
- close #3602

## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [ ] In case of feature or enhancement: documentation updated accordingly
- [x] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.


Co-authored-by: Florent Daigniere <nextgens@freenetproject.org>
2024-10-17 12:48:44 +00:00