Florent Daigniere
9afe2938bb
log.critical() where useful
2023-11-06 13:16:03 +01:00
Florent Daigniere
46b62248f9
Update core/admin/start.py
...
Co-authored-by: Dimitri Huisman <52963853+Diman0@users.noreply.github.com >
2023-10-28 11:24:13 +02:00
Florent Daigniere
0373d7b925
Long term solution for helm-charts
2023-10-28 09:40:09 +02:00
Dimitri Huisman
a84ef1d6aa
Rspamd executable was moved to /usr/bin
...
(cherry picked from commit 096c0be4f7 )
2023-10-28 09:40:01 +02:00
Florent Daigniere
382369c054
Upgrade to alpine 3.18.4
...
(cherry picked from commit 85cf7e6a7f )
2023-10-28 09:40:01 +02:00
Gaudenz Steinlin
4693c22776
Remove IMAP ID capability from nginx
...
The ID capability is not supported by nginx. Advertizing it leads to
problems with client which send an ID command before authenticating.
Before authentication commands are not forwarded to dovecot, but
directly processed by nginx.
One notable client which hit this issue is offlineimap.
Closes #2938
2023-10-18 23:01:05 +02:00
Florent Daigniere
74e705180c
Roundcube 1.6.4
...
(cherry picked from commit 2a570d0f6f )
# Conflicts:
# docs/faq.rst
2023-10-16 14:27:30 +00:00
Dimitri Huisman
c4e8842dfd
Forbidden_file_extension.map could not be overridden.
...
(cherry picked from commit 16e9d152dd )
2023-10-10 11:10:09 +00:00
Florent Daigniere
2657d0c8bd
doh2
...
(cherry picked from commit 037a79206e )
2023-10-08 13:42:20 +00:00
Florent Daigniere
08088c6d10
Doh
...
(cherry picked from commit 12e8041ba6 )
2023-10-08 13:42:19 +00:00
Florent Daigniere
affd759731
There is no reason not to enable it ourselves.
...
(cherry picked from commit 92e861d4fa )
2023-10-08 13:42:19 +00:00
Florent Daigniere
447158a095
Maybe fix olefy
...
(cherry picked from commit 9e1bf76a0c )
2023-10-08 13:42:19 +00:00
Florent Daigniere
b7b291a4ab
change the logic as discussed
...
(cherry picked from commit dd58d51156 )
2023-10-08 13:42:18 +00:00
Florent Daigniere
588c5cb274
clarify
...
(cherry picked from commit 3985d1d044 )
2023-10-08 13:42:18 +00:00
Dimitri Huisman
1614bf4e8c
Update core/base/libs/socrate/socrate/system.py
...
Only check for avx2 is required
Co-authored-by: Florent Daigniere <nextgens@users.noreply.github.com >
(cherry picked from commit 0379857ab5 )
2023-10-08 13:42:18 +00:00
Dimitri Huisman
646c9d2cd9
Hardened malloc also requires AVX2 cpu flag
...
(cherry picked from commit e70db935ec )
2023-10-08 13:42:18 +00:00
Dimitri Huisman
8db03e37b6
Hardened malloc was not disabled for oletools when an CPU with missing flags is used
...
(cherry picked from commit 77c4829401 )
2023-10-08 13:42:17 +00:00
Florent Daigniere
882566c726
Remove the version pinning on hardened malloc
...
(cherry picked from commit 9ae6eafb24 )
2023-10-05 04:44:31 +00:00
Florent Daigniere
b5c528a7a2
This is master only
2023-08-29 09:12:30 +02:00
Florent Daigniere
d904941599
merge
2023-08-29 08:54:58 +02:00
Florent Daigniere
dbcba4b4c8
doh
...
(cherry picked from commit 8d4abe55ed )
2023-08-29 06:35:06 +00:00
Florent Daigniere
45a15c56e3
Ensure that dovecot doesn't bind v6 if not required
...
(cherry picked from commit b2a5a80e12 )
# Conflicts:
# core/nginx/dovecot/proxy.conf
2023-08-29 06:35:06 +00:00
Florent Daigniere
2bc9405caf
Remove the usage of capabilities use port 8080
...
In the real world users can't get them to work...
(cherry picked from commit 562cd8c135 )
# Conflicts:
# core/admin/start.py
# core/nginx/dovecot/login.lua
2023-08-29 06:35:05 +00:00
Florent Daigniere
d6cb1eaa9c
As per review
...
(cherry picked from commit bbed508e8b )
2023-08-28 13:22:30 +00:00
Florent Daigniere
5f98b0a929
Make rspamd retry for longer when connecting to clamav
...
(cherry picked from commit 086c05a42c )
2023-08-28 13:22:30 +00:00
Florent Daigniere
b26147341a
Move the cleanup to socrate
...
(cherry picked from commit 367fd247cb )
2023-08-28 13:22:29 +00:00
Florent Daigniere
919475fd73
Delete the PID file to avoid race conditions
...
Apparently sometimes the podop subprocess can be re-assigned the same
PID when the container is restarted, causing havok.
(cherry picked from commit 1731f45d83 )
2023-08-28 13:22:29 +00:00
Florent Daigniere
1208e82a25
We also need a wait now that we capture stdin
...
(cherry picked from commit 003bcaab90 )
2023-08-16 09:33:22 +00:00
Florent Daigniere
0cd6d95f9c
As per review
...
(cherry picked from commit ab3dd11db8 )
2023-08-15 19:29:47 +00:00
Florent Daigniere
73f8ee2e17
Prevent rspamc zombies, ensure that triggering learn-spam works
...
(cherry picked from commit a1f9fb4347 )
2023-08-15 19:29:47 +00:00
Alexander Graf
fbb3e8a98b
Update python deps to fix CVEs and build
...
(cherry picked from commit 2d9b348eb0 )
2023-08-06 17:51:22 +00:00
Florent Daigniere
7cafe129c4
increase the number of postfix workers
...
(cherry picked from commit a6d217c455 )
2023-06-25 07:05:52 +00:00
Florent Daigniere
28ccd8c96f
Update core/admin/mailu/internal/views/auth.py
...
(cherry picked from commit 22edc15de2 )
2023-05-31 09:44:21 +00:00
Dimitri Huisman
76c7c43494
Retrieve raw password on the correct location
...
(cherry picked from commit 8c206e8a9b )
2023-05-31 09:44:20 +00:00
Dimitri Huisman
19f68540b5
Get the password from the source.
...
Remove password from response (not needed)
(cherry picked from commit 10a3d1eabb )
2023-05-31 09:44:20 +00:00
Dimitri Huisman
6d6b739f8a
Also url encode the password when authentication fails
...
(cherry picked from commit 008cbdb6b1 )
2023-05-31 09:44:20 +00:00
Dimitri Huisman
33c572d8dd
Authentication failed for email clients when the password contained a non latin-1 character.
...
(cherry picked from commit 5f94be871c )
2023-05-31 09:44:19 +00:00
Florent Daigniere
0b3e34c2cb
Fix2805
...
(cherry picked from commit bee8ce9357 )
2023-05-06 08:21:28 +00:00
Florent Daigniere
43eca323ca
as requested in review
...
(cherry picked from commit 7e46e1491e )
2023-04-22 09:47:28 +00:00
Florent Daigniere
9284227071
dovecot is creating zombies
...
(cherry picked from commit 36fcb9b830 )
2023-04-22 09:47:27 +00:00
Florent Daigniere
5163fc8af1
Fix logs in the SMTP container
...
(cherry picked from commit eec9d1201f )
2023-04-22 09:47:27 +00:00
Florent Daigniere
f129d2677a
warning is enough
...
(cherry picked from commit 21982478fb )
2023-04-20 16:43:58 +00:00
Florent Daigniere
8d46c85355
Try to do the same for ARM64, log a message if we do
...
(cherry picked from commit 281800d946 )
2023-04-20 16:43:58 +00:00
Florent Daigniere
79077c0684
LD_PRELOAD may not be in ENV
...
(cherry picked from commit ede331f657 )
2023-04-20 16:43:57 +00:00
bors[bot]
50351e189e
Merge #2788
...
2788: Always exempt app-tokens from rate limits (backport #2772 ) r=mergify[bot] a=mergify[bot]
This is an automatic backport of pull request #2772 done by [Mergify](https://mergify.com ).
---
<details>
<summary>Mergify commands and options</summary>
<br />
More conditions and actions can be found in the [documentation](https://docs.mergify.com/ ).
You can also trigger Mergify actions by commenting on this pull request:
- ``@Mergifyio` refresh` will re-evaluate the rules
- ``@Mergifyio` rebase` will rebase this PR on its base branch
- ``@Mergifyio` update` will merge the base branch into this PR
- ``@Mergifyio` backport <destination>` will backport this PR on `<destination>` branch
Additionally, on Mergify [dashboard](https://dashboard.mergify.com ) you can:
- look at your merge queues
- generate the Mergify configuration with the config editor.
Finally, you can contact us on https://mergify.com
</details>
Co-authored-by: Florent Daigniere <nextgens@freenetproject.org >
2023-04-20 11:06:59 +00:00
Florent Daigniere
02aeeeee54
Make it happen post-deduplication
...
(cherry picked from commit 5a55d1824e )
2023-04-20 10:20:12 +00:00
Florent Daigniere
74afbb47e9
ratelimit: ensure we hit the ip-ratelimit on unsuccesful attempts
...
against a valid account
(cherry picked from commit 21ed7b69a8 )
2023-04-20 10:20:11 +00:00
Florent Daigniere
cabb803aa5
doh
...
(cherry picked from commit 775033391a )
2023-04-20 10:20:11 +00:00
Florent Daigniere
a0613896d4
Always exempt app-tokens from rate limits
...
(cherry picked from commit c363378005 )
2023-04-20 10:20:11 +00:00
Florent Daigniere
666872483f
fix #2764
...
(cherry picked from commit b6ed4fd83e )
2023-04-20 09:42:03 +00:00