Commit Graph

5028 Commits

Author SHA1 Message Date
Luca Bosin
ea742a5524 Fix password change URL variable documentation 2024-07-28 13:02:15 +02:00
dependabot[bot]
53b316dc20 Bump requests in /tests in the pip group across 1 directory
Bumps the pip group with 1 update in the /tests directory: [requests](https://github.com/psf/requests).


Updates `requests` from 2.31.0 to 2.32.2
- [Release notes](https://github.com/psf/requests/releases)
- [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md)
- [Commits](https://github.com/psf/requests/compare/v2.31.0...v2.32.2)

---
updated-dependencies:
- dependency-name: requests
  dependency-type: direct:production
  dependency-group: pip
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-07-24 14:59:20 +00:00
Luca
cef5f5192e Merge pull request #1 from heviat/oidc
Add OIDC user authentication
2024-07-24 16:58:32 +02:00
Luca Bosin
96dd76ca5c Remove already applied patch file
This patch file was used to migrate the OIDC implementation from https://github.com/heviat/Mailu-OpenID to this repository.
2024-07-24 13:14:15 +02:00
Luca Bosin
bea907399e Fix client_ip header injection prevention 2024-07-23 20:37:02 +02:00
Luca Bosin
f73d6055ce Add code landmarks 2024-07-23 20:25:49 +02:00
Luca Bosin
d616a95910 Fix client_ip header injections and rate limiting 2024-07-23 20:21:43 +02:00
dependabot[bot]
1139e0260a Bump ASzc/change-string-case-action from 5 to 6
Bumps [ASzc/change-string-case-action](https://github.com/aszc/change-string-case-action) from 5 to 6.
- [Release notes](https://github.com/aszc/change-string-case-action/releases)
- [Commits](https://github.com/aszc/change-string-case-action/compare/v5...v6)

---
updated-dependencies:
- dependency-name: ASzc/change-string-case-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-07-23 16:26:10 +00:00
Luca
2edbba30be Merge pull request #3 from heviat/Wombosvideo-dependabot
Create dependabot.yml
2024-07-23 18:25:49 +02:00
Luca
ede64bd43c Create dependabot.yml 2024-07-23 18:19:21 +02:00
Luca Bosin
d89e01ff44 Fix + in README.md 2024-07-23 17:28:05 +02:00
Luca Bosin
32422d3f49 Improve GitHub user experience
- Improve formatting of `AUTHORS.md`, `CONTRIBUTING.md`, `LICENSE.md`, `README.md` and `SECURITY.md`
- Update wording to include `Mailu-OIDC`-related information in `AUTHORS.md`, `CONTRIBUTING.md`, `LICENSE.md`, `README.md`, `RELEASE_TEMPLATE.md`, `SECURITY.md`
- Add OIDC setup guide to `README.md`
- Switch from issue template to issue forms
- Add pull-request templates
2024-07-23 17:13:40 +02:00
Sebastian Wilke
c25c6df5b3 Initial commit 2024-07-23 16:26:02 +02:00
bors-mailu[bot]
fe3e13e56e Merge #3323
3323: Fix smtpd_forbid_unauth_pipelining with XCLIENT (backport #3322) r=mergify[bot] a=mergify[bot]

## What type of PR?

bug-fix

## What does this PR do?

Fix smtpd_forbid_unauth_pipelining with XCLIENT. The default has changed in postfix 3.9, we need it enabled for XCLIENT to work.

### Related issue(s)
- close #3301

## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [ ] In case of feature or enhancement: documentation updated accordingly
- [x] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.
<hr>This is an automatic backport of pull request #3322 done by [Mergify](https://mergify.com).

Co-authored-by: Florent Daigniere <nextgens@freenetproject.org>
2024.06.6
2024-07-01 15:54:54 +00:00
Florent Daigniere
9392c62664 Fix smtpd_forbid_unauth_pipelining w XCLIENT
(cherry picked from commit 648c98ab05)
2024-07-01 15:47:49 +00:00
bors-mailu[bot]
d5bee885bf Merge #3322
3322: Fix smtpd_forbid_unauth_pipelining with XCLIENT r=mergify[bot] a=nextgens

## What type of PR?

bug-fix

## What does this PR do?

Fix smtpd_forbid_unauth_pipelining with XCLIENT. The default has changed in postfix 3.9, we need it enabled for XCLIENT to work.

### Related issue(s)
- close #3301

## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [ ] In case of feature or enhancement: documentation updated accordingly
- [x] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.


Co-authored-by: Florent Daigniere <nextgens@freenetproject.org>
2024-07-01 15:39:59 +00:00
Florent Daigniere
648c98ab05 Fix smtpd_forbid_unauth_pipelining w XCLIENT 2024-07-01 17:16:28 +02:00
bors-mailu[bot]
dc6c3756c7 Merge #3319
3319: ports not in PORTS should not be bound (backport #3307) r=mergify[bot] a=mergify[bot]

## What type of PR?

bug-fix

## What does this PR do?

Ensure we only bind ports that do feature in PORTS.
Previously we would bind ports 110 and 143 even though we shouldn't have.

### Related issue(s)

## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [ ] In case of feature or enhancement: documentation updated accordingly
- [x] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.
<hr>This is an automatic backport of pull request #3307 done by [Mergify](https://mergify.com).

Co-authored-by: Florent Daigniere <nextgens@freenetproject.org>
Co-authored-by: Florent Daigniere <nextgens@users.noreply.github.com>
2024.06.5
2024-06-27 17:41:07 +00:00
Florent Daigniere
47b2cd4792 Update models.py
(cherry picked from commit 98b3016bbd)
2024-06-26 12:26:15 +00:00
Florent Daigniere
da8106ab66 Document that 25,465 and 993 can't be disabled
(cherry picked from commit b0dbaa6719)
2024-06-26 12:26:15 +00:00
Florent Daigniere
dc86008cb4 optimize as per review
(cherry picked from commit cdbfa4ee01)
2024-06-26 12:26:15 +00:00
Florent Daigniere
8e28050510 Don't let people disable 465 and 993
This is what we use for the other type of autoconfig... and really what
everyone should be using.

(cherry picked from commit 5fb44bd719)
2024-06-26 12:26:15 +00:00
Florent Daigniere
fd4ba4bd86 Update autoconfig too
(cherry picked from commit b3d49599cf)
2024-06-26 12:26:14 +00:00
Florent Daigniere
42b4dd2004 ports not in PORTS should not be bound
(cherry picked from commit b7dcf45267)
2024-06-26 12:26:14 +00:00
bors-mailu[bot]
3309464605 Merge #3307
3307: ports not in PORTS should not be bound r=nextgens a=nextgens

## What type of PR?

bug-fix

## What does this PR do?

Ensure we only bind ports that do feature in PORTS.
Previously we would bind ports 110 and 143 even though we shouldn't have.

### Related issue(s)

## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [ ] In case of feature or enhancement: documentation updated accordingly
- [x] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.


Co-authored-by: Florent Daigniere <nextgens@freenetproject.org>
Co-authored-by: Florent Daigniere <nextgens@users.noreply.github.com>
2024-06-26 11:48:19 +00:00
bors-mailu[bot]
8bd5d0f23d Merge #3317 #3318
3317: define client_ip variable (backport #3315) r=mergify[bot] a=mergify[bot]

## What type of PR?

bug-fix

## What does this PR do?

### Related issue(s)
closes #3314 

## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [x] In case of feature or enhancement: documentation updated accordingly
- [x] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.
<hr>This is an automatic backport of pull request #3315 done by [Mergify](https://mergify.com).

3318: nginx should recursively set the realip until the first no trusted ad… (backport #3313) r=mergify[bot] a=mergify[bot]

## What type of PR?

bug-fix

## What does this PR do?

### Related issue(s)

closes https://github.com/Mailu/Mailu/issues/3311

## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [x] In case of feature or enhancement: documentation updated accordingly
- [x] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.
<hr>This is an automatic backport of pull request #3313 done by [Mergify](https://mergify.com).

Co-authored-by: Dominik Hebeler <dominik@suma-ev.de>
2024.06.4
2024-06-26 11:38:07 +00:00
Florent Daigniere
98b3016bbd Update models.py 2024-06-26 11:21:29 +02:00
Dominik Hebeler
33516af243 do not put real_ip_recursive within the for-loop
(cherry picked from commit 5be25b5887)
2024-06-26 07:36:28 +00:00
Dominik Hebeler
c941950344 nginx should recursively set the realip until the first no trusted address is found
(cherry picked from commit 28f3b60615)
2024-06-26 07:36:28 +00:00
Dominik Hebeler
bca4fdffdb define client_ip variable
(cherry picked from commit 34766602a8)
2024-06-26 07:30:26 +00:00
bors-mailu[bot]
e82da51003 Merge #3313
3313: nginx should recursively set the realip until the first no trusted ad… r=nextgens a=Sacerdoss

## What type of PR?

bug-fix

## What does this PR do?

### Related issue(s)

closes https://github.com/Mailu/Mailu/issues/3311

## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [x] In case of feature or enhancement: documentation updated accordingly
- [x] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.


Co-authored-by: Dominik Hebeler <dominik@suma-ev.de>
2024-06-26 07:29:02 +00:00
bors-mailu[bot]
f9a4c0410a Merge #3315
3315: define client_ip variable r=mergify[bot] a=Sacerdoss

## What type of PR?

bug-fix

## What does this PR do?

### Related issue(s)
closes #3314 

## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [x] In case of feature or enhancement: documentation updated accordingly
- [x] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.


Co-authored-by: Dominik Hebeler <dominik@suma-ev.de>
2024-06-26 07:23:24 +00:00
Dominik Hebeler
5be25b5887 do not put real_ip_recursive within the for-loop 2024-06-25 13:34:17 +02:00
Dominik Hebeler
34766602a8 define client_ip variable 2024-06-25 12:48:10 +02:00
Dominik Hebeler
28f3b60615 nginx should recursively set the realip until the first no trusted address is found 2024-06-25 12:38:51 +02:00
Florent Daigniere
b0dbaa6719 Document that 25,465 and 993 can't be disabled 2024-06-24 09:01:55 +02:00
Florent Daigniere
cdbfa4ee01 optimize as per review 2024-06-24 08:58:39 +02:00
Florent Daigniere
5fb44bd719 Don't let people disable 465 and 993
This is what we use for the other type of autoconfig... and really what
everyone should be using.
2024-06-22 10:23:14 +02:00
Florent Daigniere
b3d49599cf Update autoconfig too 2024-06-22 10:16:15 +02:00
Florent Daigniere
b7dcf45267 ports not in PORTS should not be bound 2024-06-22 10:16:15 +02:00
bors-mailu[bot]
0d2630c47b Merge #3300
3300: fix warnings (backport #3299) r=mergify[bot] a=mergify[bot]

## What type of PR?

bug-fix

## What does this PR do?

fix warnings

### Related issue(s)
- close #3297 

## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [ ] In case of feature or enhancement: documentation updated accordingly
- [ ] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.
<hr>This is an automatic backport of pull request #3299 done by [Mergify](https://mergify.com).

Co-authored-by: Florent Daigniere <nextgens@freenetproject.org>
2024.06.3
2024-06-19 17:46:09 +00:00
Florent Daigniere
de922fd7e4 better
(cherry picked from commit 89ff26660f)
2024-06-19 17:00:57 +00:00
Florent Daigniere
2d2e9c4d8a another
(cherry picked from commit c0d0dcf713)
2024-06-19 17:00:57 +00:00
Florent Daigniere
600235f393 another one
nginx: [warn] the "listen ... http2" directive is deprecated, use the "http2" directive instead in /etc/nginx/nginx.conf:90
(cherry picked from commit e9db8c4509)
2024-06-19 17:00:57 +00:00
Florent Daigniere
a4542507b5 remove another warning
ERROR:root:Not sure what to do with  in PROXY_PROTOCOL (None)
(cherry picked from commit 12c1affc05)
2024-06-19 17:00:56 +00:00
Florent Daigniere
1bcbf4b613 fix warnings again
(cherry picked from commit cfd7e6b690)
2024-06-19 17:00:56 +00:00
Florent Daigniere
59bcf25b5b fix warnings
(cherry picked from commit 2b6daf6157)
2024-06-19 17:00:56 +00:00
bors-mailu[bot]
e4c4498ba8 Merge #3299
3299: fix warnings r=mergify[bot] a=nextgens

## What type of PR?

bug-fix

## What does this PR do?

fix warnings

### Related issue(s)
- close #3297 

## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [ ] In case of feature or enhancement: documentation updated accordingly
- [ ] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.


Co-authored-by: Florent Daigniere <nextgens@freenetproject.org>
2024-06-19 16:52:59 +00:00
Florent Daigniere
89ff26660f better 2024-06-19 15:35:44 +02:00
Florent Daigniere
c0d0dcf713 another 2024-06-19 14:58:34 +02:00