1813 Commits

Author SHA1 Message Date
Florent Daigniere
9afe2938bb log.critical() where useful 2023-11-06 13:16:03 +01:00
Florent Daigniere
46b62248f9 Update core/admin/start.py
Co-authored-by: Dimitri Huisman <52963853+Diman0@users.noreply.github.com>
2023-10-28 11:24:13 +02:00
Florent Daigniere
0373d7b925 Long term solution for helm-charts 2023-10-28 09:40:09 +02:00
Dimitri Huisman
a84ef1d6aa Rspamd executable was moved to /usr/bin
(cherry picked from commit 096c0be4f7)
2023-10-28 09:40:01 +02:00
Florent Daigniere
382369c054 Upgrade to alpine 3.18.4
(cherry picked from commit 85cf7e6a7f)
2023-10-28 09:40:01 +02:00
Gaudenz Steinlin
4693c22776 Remove IMAP ID capability from nginx
The ID capability is not supported by nginx. Advertizing it leads to
problems with client which send an ID command before authenticating.
Before authentication commands are not forwarded to dovecot, but
directly processed by nginx.

One notable client which hit this issue is offlineimap.

Closes #2938
2023-10-18 23:01:05 +02:00
Florent Daigniere
74e705180c Roundcube 1.6.4
(cherry picked from commit 2a570d0f6f)

# Conflicts:
#	docs/faq.rst
2023-10-16 14:27:30 +00:00
Dimitri Huisman
c4e8842dfd Forbidden_file_extension.map could not be overridden.
(cherry picked from commit 16e9d152dd)
2023-10-10 11:10:09 +00:00
Florent Daigniere
2657d0c8bd doh2
(cherry picked from commit 037a79206e)
2023-10-08 13:42:20 +00:00
Florent Daigniere
08088c6d10 Doh
(cherry picked from commit 12e8041ba6)
2023-10-08 13:42:19 +00:00
Florent Daigniere
affd759731 There is no reason not to enable it ourselves.
(cherry picked from commit 92e861d4fa)
2023-10-08 13:42:19 +00:00
Florent Daigniere
447158a095 Maybe fix olefy
(cherry picked from commit 9e1bf76a0c)
2023-10-08 13:42:19 +00:00
Florent Daigniere
b7b291a4ab change the logic as discussed
(cherry picked from commit dd58d51156)
2023-10-08 13:42:18 +00:00
Florent Daigniere
588c5cb274 clarify
(cherry picked from commit 3985d1d044)
2023-10-08 13:42:18 +00:00
Dimitri Huisman
1614bf4e8c Update core/base/libs/socrate/socrate/system.py
Only check for avx2 is required

Co-authored-by: Florent Daigniere <nextgens@users.noreply.github.com>
(cherry picked from commit 0379857ab5)
2023-10-08 13:42:18 +00:00
Dimitri Huisman
646c9d2cd9 Hardened malloc also requires AVX2 cpu flag
(cherry picked from commit e70db935ec)
2023-10-08 13:42:18 +00:00
Dimitri Huisman
8db03e37b6 Hardened malloc was not disabled for oletools when an CPU with missing flags is used
(cherry picked from commit 77c4829401)
2023-10-08 13:42:17 +00:00
Florent Daigniere
882566c726 Remove the version pinning on hardened malloc
(cherry picked from commit 9ae6eafb24)
2023-10-05 04:44:31 +00:00
Florent Daigniere
b5c528a7a2 This is master only 2023-08-29 09:12:30 +02:00
Florent Daigniere
d904941599 merge 2023-08-29 08:54:58 +02:00
Florent Daigniere
dbcba4b4c8 doh
(cherry picked from commit 8d4abe55ed)
2023-08-29 06:35:06 +00:00
Florent Daigniere
45a15c56e3 Ensure that dovecot doesn't bind v6 if not required
(cherry picked from commit b2a5a80e12)

# Conflicts:
#	core/nginx/dovecot/proxy.conf
2023-08-29 06:35:06 +00:00
Florent Daigniere
2bc9405caf Remove the usage of capabilities use port 8080
In the real world users can't get them to work...

(cherry picked from commit 562cd8c135)

# Conflicts:
#	core/admin/start.py
#	core/nginx/dovecot/login.lua
2023-08-29 06:35:05 +00:00
Florent Daigniere
d6cb1eaa9c As per review
(cherry picked from commit bbed508e8b)
2023-08-28 13:22:30 +00:00
Florent Daigniere
5f98b0a929 Make rspamd retry for longer when connecting to clamav
(cherry picked from commit 086c05a42c)
2023-08-28 13:22:30 +00:00
Florent Daigniere
b26147341a Move the cleanup to socrate
(cherry picked from commit 367fd247cb)
2023-08-28 13:22:29 +00:00
Florent Daigniere
919475fd73 Delete the PID file to avoid race conditions
Apparently sometimes the podop subprocess can be re-assigned the same
PID when the container is restarted, causing havok.

(cherry picked from commit 1731f45d83)
2023-08-28 13:22:29 +00:00
Florent Daigniere
1208e82a25 We also need a wait now that we capture stdin
(cherry picked from commit 003bcaab90)
2023-08-16 09:33:22 +00:00
Florent Daigniere
0cd6d95f9c As per review
(cherry picked from commit ab3dd11db8)
2023-08-15 19:29:47 +00:00
Florent Daigniere
73f8ee2e17 Prevent rspamc zombies, ensure that triggering learn-spam works
(cherry picked from commit a1f9fb4347)
2023-08-15 19:29:47 +00:00
Alexander Graf
fbb3e8a98b Update python deps to fix CVEs and build
(cherry picked from commit 2d9b348eb0)
2023-08-06 17:51:22 +00:00
Florent Daigniere
7cafe129c4 increase the number of postfix workers
(cherry picked from commit a6d217c455)
2023-06-25 07:05:52 +00:00
Florent Daigniere
28ccd8c96f Update core/admin/mailu/internal/views/auth.py
(cherry picked from commit 22edc15de2)
2023-05-31 09:44:21 +00:00
Dimitri Huisman
76c7c43494 Retrieve raw password on the correct location
(cherry picked from commit 8c206e8a9b)
2023-05-31 09:44:20 +00:00
Dimitri Huisman
19f68540b5 Get the password from the source.
Remove password from response (not needed)

(cherry picked from commit 10a3d1eabb)
2023-05-31 09:44:20 +00:00
Dimitri Huisman
6d6b739f8a Also url encode the password when authentication fails
(cherry picked from commit 008cbdb6b1)
2023-05-31 09:44:20 +00:00
Dimitri Huisman
33c572d8dd Authentication failed for email clients when the password contained a non latin-1 character.
(cherry picked from commit 5f94be871c)
2023-05-31 09:44:19 +00:00
Florent Daigniere
0b3e34c2cb Fix2805
(cherry picked from commit bee8ce9357)
2023-05-06 08:21:28 +00:00
Florent Daigniere
43eca323ca as requested in review
(cherry picked from commit 7e46e1491e)
2023-04-22 09:47:28 +00:00
Florent Daigniere
9284227071 dovecot is creating zombies
(cherry picked from commit 36fcb9b830)
2023-04-22 09:47:27 +00:00
Florent Daigniere
5163fc8af1 Fix logs in the SMTP container
(cherry picked from commit eec9d1201f)
2023-04-22 09:47:27 +00:00
Florent Daigniere
f129d2677a warning is enough
(cherry picked from commit 21982478fb)
2023-04-20 16:43:58 +00:00
Florent Daigniere
8d46c85355 Try to do the same for ARM64, log a message if we do
(cherry picked from commit 281800d946)
2023-04-20 16:43:58 +00:00
Florent Daigniere
79077c0684 LD_PRELOAD may not be in ENV
(cherry picked from commit ede331f657)
2023-04-20 16:43:57 +00:00
bors[bot]
50351e189e Merge #2788
2788: Always exempt app-tokens from rate limits (backport #2772) r=mergify[bot] a=mergify[bot]

This is an automatic backport of pull request #2772 done by [Mergify](https://mergify.com).


---


<details>
<summary>Mergify commands and options</summary>

<br />

More conditions and actions can be found in the [documentation](https://docs.mergify.com/).

You can also trigger Mergify actions by commenting on this pull request:

- ``@Mergifyio` refresh` will re-evaluate the rules
- ``@Mergifyio` rebase` will rebase this PR on its base branch
- ``@Mergifyio` update` will merge the base branch into this PR
- ``@Mergifyio` backport <destination>` will backport this PR on `<destination>` branch

Additionally, on Mergify [dashboard](https://dashboard.mergify.com) you can:

- look at your merge queues
- generate the Mergify configuration with the config editor.

Finally, you can contact us on https://mergify.com
</details>

Co-authored-by: Florent Daigniere <nextgens@freenetproject.org>
2023-04-20 11:06:59 +00:00
Florent Daigniere
02aeeeee54 Make it happen post-deduplication
(cherry picked from commit 5a55d1824e)
2023-04-20 10:20:12 +00:00
Florent Daigniere
74afbb47e9 ratelimit: ensure we hit the ip-ratelimit on unsuccesful attempts
against a valid account

(cherry picked from commit 21ed7b69a8)
2023-04-20 10:20:11 +00:00
Florent Daigniere
cabb803aa5 doh
(cherry picked from commit 775033391a)
2023-04-20 10:20:11 +00:00
Florent Daigniere
a0613896d4 Always exempt app-tokens from rate limits
(cherry picked from commit c363378005)
2023-04-20 10:20:11 +00:00
Florent Daigniere
666872483f fix #2764
(cherry picked from commit b6ed4fd83e)
2023-04-20 09:42:03 +00:00