Commit Graph

2103 Commits

Author SHA1 Message Date
Encotric
b43600dfca Remove OIDC_REDIRECT_URL 2025-04-04 17:47:55 +02:00
Encotric
eb6c3e47c8 fix: add default config values 2025-03-30 19:07:25 +02:00
Encotric
c7b1571f8a Merge branch 'master' into pr/pbence/64
Co-authored-by: Pőcze Bence <bence@pocze.ch>
2025-03-30 18:11:07 +02:00
Pőcze Bence
2a46097f04 allow configure domain if username is not an email address 2025-03-29 00:32:51 +01:00
Pőcze Bence
55e95a24cf allow configure username claim 2025-03-29 00:32:17 +01:00
Sebastian Wilke
d2e69cc6c8 Merge remote-tracking branch 'upstream/2024.06' into oidc 2024-12-17 20:07:41 +01:00
Florent Daigniere
1805ef4480 Don't check empty passwords against HIBP
(cherry picked from commit f1c5ac5b14)
2024-11-17 14:48:36 +00:00
bors-mailu[bot]
cfae470cbb Merge #3623
3623: alpine 3.20.3 (backport #3622) r=mergify[bot] a=mergify[bot]

## What type of PR?

bug-fix

## What does this PR do?

Upgrade from alpine 3.20.0 to alpine 3.20.3 ; We need a fix for [CVE-2024-5535](https://security.alpinelinux.org/vuln/CVE-2024-5535)

### Related issue(s)


## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [ ] In case of feature or enhancement: documentation updated accordingly
- [x] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.
<hr>This is an automatic backport of pull request #3622 done by [Mergify](https://mergify.com).

Co-authored-by: Florent Daigniere <nextgens@freenetproject.org>
2024-10-21 21:26:20 +00:00
Florent Daigniere
5b2456cc8e alpine 3.20.3
(cherry picked from commit 152b45a0e9)
2024-10-21 10:33:17 +00:00
Alexander Graf
9dae649f31 Flush buffer on flush() and flush explicitely after subprocess has ended
(cherry picked from commit f16467b984)
2024-10-17 15:36:22 +00:00
Alexander Graf
5e8fdd4c9e Filter logs line based and in binary mode without decoding utf-8
(cherry picked from commit 4a49234afa)
2024-10-17 15:36:21 +00:00
Florent Daigniere
df3329962c Ensure healthchecks timeout
(cherry picked from commit 7aaf7ec17b)

# Conflicts:
#	towncrier/newsfragments/3398.misc
2024-10-17 12:58:46 +00:00
Florent Daigniere
450c78f7b0 Fix http2
(cherry picked from commit fb49ef9057)
2024-10-15 19:33:41 +00:00
bors-mailu[bot]
6b5bb5fcd1 Merge #3559
3559: Fix #3531 (backport #3557) r=mergify[bot] a=mergify[bot]

## What type of PR?

bug-fix

## What does this PR do?

Ensure we have both RSA and ECDSA certs when using letsencrypt now that the default behaviour from certbot has changed.
This is only important for new installs, not those renewing existing certs.

### Related issue(s)
- closes #3531

## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [ ] In case of feature or enhancement: documentation updated accordingly
- [x] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.
<hr>This is an automatic backport of pull request #3557 done by [Mergify](https://mergify.com).

Co-authored-by: Florent Daigniere <nextgens@freenetproject.org>
2024-09-23 09:16:11 +00:00
Florent Daigniere
e47da4ba0d Fix #3531
(cherry picked from commit 8e4af5ad05)
2024-09-22 13:25:31 +00:00
Florent Daigniere
bd7a5bd235 Add delay
(cherry picked from commit c11815b3a0)
2024-09-13 07:29:26 +00:00
Florent Daigniere
6d2daebe68 Maybe fix #3402
(cherry picked from commit 8b34fbe881)
2024-09-13 07:29:25 +00:00
Florent Daigniere
4dc2e0b48a Need sleep.
(cherry picked from commit 07f0ec3d0b)
2024-09-12 21:26:07 +00:00
Florent Daigniere
e7caca3e08 As per review
(cherry picked from commit 12e94b7616)
2024-09-12 15:34:09 +00:00
Florent Daigniere
c193cf1d60 play it safe
(cherry picked from commit f4ab22edbc)
2024-09-12 15:34:09 +00:00
Florent Daigniere
0bdb9e1cea Apply suggestions from code review
Co-authored-by: Alexander Graf <ghostwheel42@users.noreply.github.com>
(cherry picked from commit cdf8ee8820)
2024-09-12 15:34:09 +00:00
Florent Daigniere
cb3ed1598d doh
(cherry picked from commit c6c4c09f08)
2024-09-12 15:34:09 +00:00
Florent Daigniere
80427fb77c Fix #3450
(cherry picked from commit a875d7fe6a)
2024-09-12 15:34:09 +00:00
Florent Daigniere
8e0809ebfe Fix #3411
(cherry picked from commit 63769c73cf)
2024-09-09 18:03:58 +00:00
Dimitri Huisman
883af43f7a Fix 3420 - fixed syntax errors in certwatcher.py
(cherry picked from commit c4f457e7f9)
2024-09-09 14:18:48 +00:00
Florent Daigniere
f5bc226574 INBOUND_TLS_ENFORCE makes no sense.
(cherry picked from commit 28c28b1c84)
2024-09-07 18:45:50 +00:00
Florent Daigniere
eb2754c211 doh
(cherry picked from commit 5ea3840fc4)
2024-09-07 18:45:50 +00:00
Florent Daigniere
0e9721b7f9 Untested code that may fix the following:
Exception in thread Thread-2 (forward_text_lines):
Traceback (most recent call last):
  File "/usr/lib/python3.12/threading.py", line 1073, in _bootstrap_inner
    self.run()  File "/usr/lib/python3.12/threading.py", line 1010, in run
    self._target(*self._args, **self._kwargs)
  File "/app/venv/lib/python3.12/site-packages/socrate/system.py", line 155, in forward_text_lines
    current_line = src.readline()
                   ^^^^^^^^^^^^^^
  File "<frozen codecs>", line 322, in decode
UnicodeDecodeError: 'utf-8' codec can't decode byte 0xa8 in position 166: invalid start byte

This was reported in #3398

(cherry picked from commit 61812ac32a)
2024-09-07 18:45:50 +00:00
Florent Daigniere
45c39d9416 fix #3379
(cherry picked from commit bae4855bea)
2024-09-07 18:45:50 +00:00
Florent Daigniere
a0cb9852ac doh
(cherry picked from commit b426c67949)
2024-09-07 18:45:50 +00:00
Florent Daigniere
8c6b0ccdb3 fix #3403
(cherry picked from commit e5790a297a)
2024-09-07 18:45:49 +00:00
Florent Daigniere
6fc97ee2cb doh2
(cherry picked from commit 1917bf7ee4)
2024-08-11 16:43:16 +00:00
Florent Daigniere
7556df2fa7 Fix CI
(cherry picked from commit 616376eb5a)
2024-08-11 16:43:16 +00:00
Florent Daigniere
b36018e0c1 Handle the case where PROXY_PROTOCOL_25 is set
(cherry picked from commit 0ff18c6079)
2024-08-11 16:43:16 +00:00
Florent Daigniere
79a393d601 s/nginx/front
(cherry picked from commit 5cfec650df)
2024-08-09 14:35:38 +00:00
Florent Daigniere
f2c0a147fa as per review
(cherry picked from commit 78c5d34227)
2024-08-09 14:35:38 +00:00
Florent Daigniere
14196e5054 Do the same with Client-Ip
(cherry picked from commit 98f671dc2e)
2024-08-09 14:35:37 +00:00
Florent Daigniere
1366ee3fc7 doh
(cherry picked from commit d7c6528f04)
2024-08-09 14:35:37 +00:00
Florent Daigniere
a5af42a6ef Better
(cherry picked from commit 38ea029bd9)
2024-08-09 14:35:37 +00:00
Florent Daigniere
00ef3cb950 Remove this insanity since we don't use nginx
(cherry picked from commit 148c8f9ede)
2024-08-09 14:35:37 +00:00
Florent Daigniere
3d4a9ac29c Fix #3364
(cherry picked from commit ee243ea735)
2024-08-09 14:35:37 +00:00
dependabot[bot]
2eb58f4a61 Bump requests from 2.32.2 to 2.32.3 in /core/base
Bumps [requests](https://github.com/psf/requests) from 2.32.2 to 2.32.3.
- [Release notes](https://github.com/psf/requests/releases)
- [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md)
- [Commits](https://github.com/psf/requests/compare/v2.32.2...v2.32.3)

---
updated-dependencies:
- dependency-name: requests
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-08-09 14:10:34 +02:00
dependabot[bot]
951820214f Bump the pip group across 1 directory with 4 updates
Bumps the pip group with 4 updates in the /core/base directory: [requests](https://github.com/psf/requests), [setuptools](https://github.com/pypa/setuptools), [certifi](https://github.com/certifi/python-certifi) and [urllib3](https://github.com/urllib3/urllib3).


Updates `requests` from 2.31.0 to 2.32.2
- [Release notes](https://github.com/psf/requests/releases)
- [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md)
- [Commits](https://github.com/psf/requests/compare/v2.31.0...v2.32.2)

Updates `setuptools` from 69.5.1 to 70.0.0
- [Release notes](https://github.com/pypa/setuptools/releases)
- [Changelog](https://github.com/pypa/setuptools/blob/main/NEWS.rst)
- [Commits](https://github.com/pypa/setuptools/compare/v69.5.1...v70.0.0)

Updates `certifi` from 2024.2.2 to 2024.7.4
- [Commits](https://github.com/certifi/python-certifi/compare/2024.02.02...2024.07.04)

Updates `urllib3` from 2.2.1 to 2.2.2
- [Release notes](https://github.com/urllib3/urllib3/releases)
- [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst)
- [Commits](https://github.com/urllib3/urllib3/compare/2.2.1...2.2.2)

---
updated-dependencies:
- dependency-name: requests
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: setuptools
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: certifi
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: urllib3
  dependency-type: direct:production
  dependency-group: pip
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-08-09 14:10:34 +02:00
Luca Bosin
b4e7c8efae Add -e to local PIP packages in requirements-dev.txt 2024-08-09 14:10:34 +02:00
bors-mailu[bot]
30734b49aa Merge #3363
3363: Update 3rd party deps (backport #3358) r=mergify[bot] a=mergify[bot]

## What type of PR?

bug-fix

## What does this PR do?

Update 3rd party deps (clamav & snappymail), clarify the wording in the docs related to rspamd overrides.

### Related issue(s)
- closes #3347 
- closes #3360 (thank you [ctrl-i](https://github.com/ctrl-i) for the heads up)
- #3359 

## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [ ] In case of feature or enhancement: documentation updated accordingly
- [x] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.
<hr>This is an automatic backport of pull request #3358 done by [Mergify](https://mergify.com).

Co-authored-by: Florent Daigniere <nextgens@freenetproject.org>
2024-08-06 16:44:54 +00:00
Florent Daigniere
dcd843d4ba Add a new CNAME for old MUAs
(cherry picked from commit cfec4c58cc)
2024-08-06 16:27:34 +00:00
Florent Daigniere
95edcd8dcb As per review
(cherry picked from commit 11e72e7034)
2024-07-30 11:08:52 +00:00
Florent Daigniere
ca6488e2ff as per review
(cherry picked from commit 0eafff00c1)
2024-07-30 11:08:52 +00:00
Florent Daigniere
6173f5e434 simplify again the logic
(cherry picked from commit f003c0e712)
2024-07-30 11:08:52 +00:00
Florent Daigniere
745d26acf5 Fix email forwarding when set from the UI
(cherry picked from commit 9120f731fc)
2024-07-30 11:08:52 +00:00