309 Commits

Author SHA1 Message Date
OutBackDingo
de66bd687d updated and merge conflicts fixed for mailu master 2025-05-23 08:45:00 +07:00
ctrl-i
d48cc06c59 Upgrade to the latest version of roundcube - 1.6.10
Upgrade to the latest version of roundcube
2025-02-13 08:25:10 +00:00
Sebastian Wilke
8f236d2ed0 Fix Dockerfiles 2024-12-17 20:16:28 +01:00
Florent Daigniere
59400f0f1b Upgrade snappymail to v2.38.2
(cherry picked from commit d4a3d5aeae)
2024-11-17 12:34:22 +00:00
bors-mailu[bot]
e713fb6723 Merge #3647
3647: upgrade to snuffleupagus v0.11 r=mergify[bot] a=nextgens

## What type of PR?

enhancement

## What does this PR do?

- upgrade snuffleupagus to v0.11
- filter php:// wrapper types and only allow those we currently require (hardening)

### Related issue(s)

## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [ ] In case of feature or enhancement: documentation updated accordingly
- [x] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.


Co-authored-by: Florent Daigniere <nextgens@freenetproject.org>
2024-11-17 12:33:35 +00:00
Florent Daigniere
d4a3d5aeae Upgrade snappymail to v2.38.2 2024-11-16 22:24:26 +01:00
Florent Daigniere
9a928f8c7b snuffleupagus 11 2024-11-16 22:18:22 +01:00
Florent Daigniere
df3329962c Ensure healthchecks timeout
(cherry picked from commit 7aaf7ec17b)

# Conflicts:
#	towncrier/newsfragments/3398.misc
2024-10-17 12:58:46 +00:00
Florent Daigniere
7aaf7ec17b Ensure healthchecks timeout 2024-10-05 18:59:29 +02:00
Florent Daigniere
9b55970ab9 fix #3272
(cherry picked from commit 0021ba9cb9)
2024-09-07 18:45:50 +00:00
Florent Daigniere
f568f1de20 fix #3401
(cherry picked from commit 4af085253e)
2024-09-07 18:45:49 +00:00
Florent Daigniere
0021ba9cb9 fix #3272 2024-09-05 23:08:41 +02:00
Florent Daigniere
4af085253e fix #3401 2024-09-05 22:18:12 +02:00
ctrl-i
938d513488 Update Dockerfile
Due to an incremental recommended update to roundcube

(cherry picked from commit 23f4744a1c)
2024-09-01 17:18:35 +00:00
ctrl-i
23f4744a1c Update Dockerfile
Due to an incremental recommended update to roundcube
2024-09-01 09:39:11 +01:00
Florent Daigniere
83e10813cf Update snuffleupagus rules
(cherry picked from commit cf1088f1c5)
2024-08-26 16:57:04 +00:00
Florent Daigniere
cf1088f1c5 Update snuffleupagus rules 2024-08-26 10:13:26 +02:00
Florent Daigniere
60cb72e9ca Roundcube 1.6.8
(cherry picked from commit 407024d59a)
2024-08-06 16:27:34 +00:00
Florent Daigniere
6fd984afb1 Update deps
(cherry picked from commit da168322d6)
2024-08-06 16:27:34 +00:00
Florent Daigniere
407024d59a Roundcube 1.6.8 2024-08-04 17:57:33 +02:00
Florent Daigniere
da168322d6 Update deps 2024-08-02 21:24:41 +02:00
bors-mailu[bot]
d91a04dd00 Merge #3221
3221: Better PROXY_PROTOCOL r=mergify[bot] a=nextgens

## What type of PR?

Feature

## What does this PR do?

- Disable IMAP, POP3 and Submission by default; see https://nostarttls.secvuln.info/ on why explicit TLS is going away.
- Change the semantic of PROXY_PROTOCOL to make it configurable per port
- fix TLS_FLAVOR=notls not working with snappymail
- fix TLS_PERMISSIVE
- remove KUBERNETES_INGRESS; shouldn't be needed anymore
- update the documentation and the reverse proxy example

### Related issue(s)
- close #3162
- close #3061

## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [x] In case of feature or enhancement: documentation updated accordingly
- [x] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.


Co-authored-by: Florent Daigniere <nextgens@freenetproject.org>
Co-authored-by: Florent Daigniere <nextgens@users.noreply.github.com>
2024-06-09 10:17:32 +00:00
Florent Daigniere
72bf53105c doh2 2024-05-27 16:03:03 +02:00
Florent Daigniere
a55a9d89ba Update all dependencies 2024-05-20 11:08:03 +02:00
ctrl-i
e79e055ac1 Update Dockerfile
Roundcube incremented to 1.6.7 due to XSS vulnerabilities
2024-05-20 07:47:39 +01:00
Florent Daigniere
2b6405227b fix #3162: ensure snappymail works with notls 2024-04-06 18:16:52 +02:00
ctrl-i
8c848d4926 Update Dockerfile
Updated roundcube to the latest version 1.6.6
2024-01-21 09:32:39 +00:00
Florent Daigniere
0e522fceb7 Upgrade alpine, node, PHP and snappymail 2023-12-20 14:08:49 +01:00
bors-mailu[bot]
fd66c76c83 Merge #3033
3033: Enable snowball on FTS r=mergify[bot] a=nextgens

## What type of PR?

enhancement

## What does this PR do?

Enable [snowball](http://snowball.tartarus.org/algorithms/english/stemmer.html), a filter that will significantly cut down the size of FTS indexes.

It looks like the packages for aarch64 haven't been built yet... but this works on x64_86.
Don't unblock as long as  https://dl-cdn.alpinelinux.org/alpine/edge/testing/aarch64/dovecot-fts-flatcurve-0.3.4-r3.apk is 404

### Related issue(s)
- close #2977 

## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [ ] In case of feature or enhancement: documentation updated accordingly
- [x] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.


Co-authored-by: Florent Daigniere <nextgens@freenetproject.org>
2023-11-07 15:07:07 +00:00
Florent Daigniere
80d03ae60b doh2 2023-11-07 09:42:43 +01:00
Florent Daigniere
239ef0092e Doh 2023-11-07 09:23:22 +01:00
ctrl-i
3a3f6d0694 Update Dockerfile 2023-11-06 07:56:13 +00:00
Florent Daigniere
fe9b16142f Same for snappymail 2023-11-01 11:04:01 +01:00
Florent Daigniere
d4116cf3b3 When FTS is enabled this is cheap 2023-11-01 10:54:53 +01:00
Florent Daigniere
2a570d0f6f Roundcube 1.6.4 2023-10-16 13:38:49 +02:00
Florent Daigniere
282401e671 Maybe fix CI 2023-10-09 12:13:57 +02:00
bors[bot]
26e1077bd8 Merge #2950
2950: Upgrade snuffleupagus r=mergify[bot] a=nextgens

## What type of PR?

enhancement

## What does this PR do?

Upgrade snuffleupagus

### Related issue(s)

## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [ ] In case of feature or enhancement: documentation updated accordingly
- [x] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.


Co-authored-by: Florent Daigniere <nextgens@freenetproject.org>
2023-10-09 07:24:09 +00:00
bors[bot]
04d69141c3 Merge #2961
2961: Hardened malloc was not disabled for oletools when an CPU with missing flags is used r=Diman0 a=Diman0

## What type of PR?
bug fix

## What does this PR do?
Updates oletools to also disable hardened malloc when used CPU misses flags

### Related issue(s)
- closes #2959 

## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [n/a ] In case of feature or enhancement: documentation updated accordingly
- [x] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.


Co-authored-by: Dimitri Huisman <diman@huisman.xyz>
Co-authored-by: Dimitri Huisman <52963853+Diman0@users.noreply.github.com>
Co-authored-by: Florent Daigniere <nextgens@users.noreply.github.com>
Co-authored-by: Florent Daigniere <nextgens@freenetproject.org>
2023-10-08 13:14:28 +00:00
Florent Daigniere
a6f57ca3d4 Upgrade snappymail to v2.29.1 2023-10-08 14:58:39 +02:00
Dimitri Huisman
ee7bb53366 Fix extracting of snappymail archive not working. 2023-10-05 18:12:48 +00:00
Florent Daigniere
c137e1a919 Add new rule too 2023-09-20 18:04:28 +02:00
Florent Daigniere
9402a3beec Upgrade webmails
roundcube 1.6.3
rcmcarddav 5.1.0
snappymail 2.28.4
2023-09-16 10:38:26 +02:00
Florent Daigniere
ca83152ad9 Update snuffleupagus.rules 2023-08-08 21:41:50 +02:00
Helmuth Breitenfellner
b7cf1c88ea bugfix for gpg execution with roundcube 2023-08-08 21:41:50 +02:00
Florent Daigniere
f143aa3dc8 Use dovecot-proxy where appropriate 2023-06-05 10:23:30 +02:00
bors[bot]
b6c093dfd6 Merge #2790
2790: Implement managesieve support r=mergify[bot] a=nextgens

## What type of PR?

Feature

## What does this PR do?

This is a better a alternative to #2773

Expose managesieve to the outside world.

### Related issue(s)
- close #2773
- #428
- #113
- #81
- #1222

## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [x] In case of feature or enhancement: documentation updated accordingly
- [x] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.


Co-authored-by: Florent Daigniere <nextgens@freenetproject.org>
2023-05-26 14:11:33 +00:00
Florent Daigniere
7d39741c47 Make webmails use a different port without proxy protocol 2023-05-09 12:06:04 +02:00
Florent Daigniere
6be9ce8b65 doh 2023-04-28 07:51:47 +02:00
Florent Daigniere
1512493764 Fix roundcube's spellchecker 2023-04-27 12:43:38 +02:00
Florent Daigniere
86ff5f7b71 Merge remote-tracking branch 'upstream/master' into managesieve-proxy 2023-04-20 18:53:17 +02:00