310 Commits

Author SHA1 Message Date
Florent Daigniere
ca89739174 Reenable nginx request buffering to fix roundcube 2025-10-18 21:48:59 +02:00
bors-mailu[bot]
fa2165687c Merge #3907
3907: Fix passphrase changed errors in snappymail r=mergify[bot] a=nextgens

## What type of PR?

bug-fix

## What does this PR do?

Fix "passphrase changed" errors in snappymail; tell it to encrypt data against the email address instead of the transient token used by SSO.

You may need to run the following for the error message to disappear completely
   ``find webmail/_data_/_default_/storage/ -name .cryptkey -delete``

### Related issue(s)
- closes #3906 

## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [ ] In case of feature or enhancement: documentation updated accordingly
- [x] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.


Co-authored-by: Florent Daigniere <nextgens@freenetproject.org>
2025-08-22 16:32:03 +00:00
Florent Daigniere
146202a902 Fix passphrase changed errors in snappymail 2025-08-22 12:47:50 +02:00
Florent Daigniere
e9825477dc Snuffleupagus v0.12 2025-08-22 12:24:38 +02:00
Alexander Graf
e7a9b1b16f Keep fastcgi split as is 2025-08-17 19:45:19 +02:00
Florent Daigniere
84f00a759c As per review by ghost 2025-08-17 11:27:09 +02:00
Florent Daigniere
4a73383251 Use upstream's regexp 2025-08-16 14:32:38 +02:00
Florent Daigniere
5d62ea0617 Better rules 2025-08-16 06:04:47 +02:00
Florent Daigniere
4c0bd55fb1 Fix TLS_FLAVOR=notls and indent 2025-08-15 21:51:41 +02:00
Florent Daigniere
8ea66c219a fix snappymail 2025-08-15 21:08:11 +02:00
Florent Daigniere
241d3cb6dd Add snuffleupagus rules from upstream 2025-08-13 09:50:09 +02:00
Florent Daigniere
880312db30 roundcube 1.6.11 and carddav 5.1.1 2025-08-13 09:38:53 +02:00
bors-mailu[bot]
e713fb6723 Merge #3647
3647: upgrade to snuffleupagus v0.11 r=mergify[bot] a=nextgens

## What type of PR?

enhancement

## What does this PR do?

- upgrade snuffleupagus to v0.11
- filter php:// wrapper types and only allow those we currently require (hardening)

### Related issue(s)

## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [ ] In case of feature or enhancement: documentation updated accordingly
- [x] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.


Co-authored-by: Florent Daigniere <nextgens@freenetproject.org>
2024-11-17 12:33:35 +00:00
Florent Daigniere
d4a3d5aeae Upgrade snappymail to v2.38.2 2024-11-16 22:24:26 +01:00
Florent Daigniere
9a928f8c7b snuffleupagus 11 2024-11-16 22:18:22 +01:00
Florent Daigniere
7aaf7ec17b Ensure healthchecks timeout 2024-10-05 18:59:29 +02:00
Florent Daigniere
0021ba9cb9 fix #3272 2024-09-05 23:08:41 +02:00
Florent Daigniere
4af085253e fix #3401 2024-09-05 22:18:12 +02:00
ctrl-i
23f4744a1c Update Dockerfile
Due to an incremental recommended update to roundcube
2024-09-01 09:39:11 +01:00
Florent Daigniere
cf1088f1c5 Update snuffleupagus rules 2024-08-26 10:13:26 +02:00
Florent Daigniere
407024d59a Roundcube 1.6.8 2024-08-04 17:57:33 +02:00
Florent Daigniere
da168322d6 Update deps 2024-08-02 21:24:41 +02:00
bors-mailu[bot]
d91a04dd00 Merge #3221
3221: Better PROXY_PROTOCOL r=mergify[bot] a=nextgens

## What type of PR?

Feature

## What does this PR do?

- Disable IMAP, POP3 and Submission by default; see https://nostarttls.secvuln.info/ on why explicit TLS is going away.
- Change the semantic of PROXY_PROTOCOL to make it configurable per port
- fix TLS_FLAVOR=notls not working with snappymail
- fix TLS_PERMISSIVE
- remove KUBERNETES_INGRESS; shouldn't be needed anymore
- update the documentation and the reverse proxy example

### Related issue(s)
- close #3162
- close #3061

## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [x] In case of feature or enhancement: documentation updated accordingly
- [x] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.


Co-authored-by: Florent Daigniere <nextgens@freenetproject.org>
Co-authored-by: Florent Daigniere <nextgens@users.noreply.github.com>
2024-06-09 10:17:32 +00:00
Florent Daigniere
72bf53105c doh2 2024-05-27 16:03:03 +02:00
Florent Daigniere
a55a9d89ba Update all dependencies 2024-05-20 11:08:03 +02:00
ctrl-i
e79e055ac1 Update Dockerfile
Roundcube incremented to 1.6.7 due to XSS vulnerabilities
2024-05-20 07:47:39 +01:00
Florent Daigniere
2b6405227b fix #3162: ensure snappymail works with notls 2024-04-06 18:16:52 +02:00
ctrl-i
8c848d4926 Update Dockerfile
Updated roundcube to the latest version 1.6.6
2024-01-21 09:32:39 +00:00
Florent Daigniere
0e522fceb7 Upgrade alpine, node, PHP and snappymail 2023-12-20 14:08:49 +01:00
bors-mailu[bot]
fd66c76c83 Merge #3033
3033: Enable snowball on FTS r=mergify[bot] a=nextgens

## What type of PR?

enhancement

## What does this PR do?

Enable [snowball](http://snowball.tartarus.org/algorithms/english/stemmer.html), a filter that will significantly cut down the size of FTS indexes.

It looks like the packages for aarch64 haven't been built yet... but this works on x64_86.
Don't unblock as long as  https://dl-cdn.alpinelinux.org/alpine/edge/testing/aarch64/dovecot-fts-flatcurve-0.3.4-r3.apk is 404

### Related issue(s)
- close #2977 

## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [ ] In case of feature or enhancement: documentation updated accordingly
- [x] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.


Co-authored-by: Florent Daigniere <nextgens@freenetproject.org>
2023-11-07 15:07:07 +00:00
Florent Daigniere
80d03ae60b doh2 2023-11-07 09:42:43 +01:00
Florent Daigniere
239ef0092e Doh 2023-11-07 09:23:22 +01:00
ctrl-i
3a3f6d0694 Update Dockerfile 2023-11-06 07:56:13 +00:00
Florent Daigniere
fe9b16142f Same for snappymail 2023-11-01 11:04:01 +01:00
Florent Daigniere
d4116cf3b3 When FTS is enabled this is cheap 2023-11-01 10:54:53 +01:00
Florent Daigniere
2a570d0f6f Roundcube 1.6.4 2023-10-16 13:38:49 +02:00
Florent Daigniere
282401e671 Maybe fix CI 2023-10-09 12:13:57 +02:00
bors[bot]
26e1077bd8 Merge #2950
2950: Upgrade snuffleupagus r=mergify[bot] a=nextgens

## What type of PR?

enhancement

## What does this PR do?

Upgrade snuffleupagus

### Related issue(s)

## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [ ] In case of feature or enhancement: documentation updated accordingly
- [x] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.


Co-authored-by: Florent Daigniere <nextgens@freenetproject.org>
2023-10-09 07:24:09 +00:00
bors[bot]
04d69141c3 Merge #2961
2961: Hardened malloc was not disabled for oletools when an CPU with missing flags is used r=Diman0 a=Diman0

## What type of PR?
bug fix

## What does this PR do?
Updates oletools to also disable hardened malloc when used CPU misses flags

### Related issue(s)
- closes #2959 

## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [n/a ] In case of feature or enhancement: documentation updated accordingly
- [x] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.


Co-authored-by: Dimitri Huisman <diman@huisman.xyz>
Co-authored-by: Dimitri Huisman <52963853+Diman0@users.noreply.github.com>
Co-authored-by: Florent Daigniere <nextgens@users.noreply.github.com>
Co-authored-by: Florent Daigniere <nextgens@freenetproject.org>
2023-10-08 13:14:28 +00:00
Florent Daigniere
a6f57ca3d4 Upgrade snappymail to v2.29.1 2023-10-08 14:58:39 +02:00
Dimitri Huisman
ee7bb53366 Fix extracting of snappymail archive not working. 2023-10-05 18:12:48 +00:00
Florent Daigniere
c137e1a919 Add new rule too 2023-09-20 18:04:28 +02:00
Florent Daigniere
9402a3beec Upgrade webmails
roundcube 1.6.3
rcmcarddav 5.1.0
snappymail 2.28.4
2023-09-16 10:38:26 +02:00
Florent Daigniere
ca83152ad9 Update snuffleupagus.rules 2023-08-08 21:41:50 +02:00
Helmuth Breitenfellner
b7cf1c88ea bugfix for gpg execution with roundcube 2023-08-08 21:41:50 +02:00
Florent Daigniere
f143aa3dc8 Use dovecot-proxy where appropriate 2023-06-05 10:23:30 +02:00
bors[bot]
b6c093dfd6 Merge #2790
2790: Implement managesieve support r=mergify[bot] a=nextgens

## What type of PR?

Feature

## What does this PR do?

This is a better a alternative to #2773

Expose managesieve to the outside world.

### Related issue(s)
- close #2773
- #428
- #113
- #81
- #1222

## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [x] In case of feature or enhancement: documentation updated accordingly
- [x] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.


Co-authored-by: Florent Daigniere <nextgens@freenetproject.org>
2023-05-26 14:11:33 +00:00
Florent Daigniere
7d39741c47 Make webmails use a different port without proxy protocol 2023-05-09 12:06:04 +02:00
Florent Daigniere
6be9ce8b65 doh 2023-04-28 07:51:47 +02:00
Florent Daigniere
1512493764 Fix roundcube's spellchecker 2023-04-27 12:43:38 +02:00