DerLinkman
05fbd549f8
dovecot: change dict declarations for before scripts
2026-03-04 15:19:43 +01:00
DerLinkman
9d54fbcc3e
dovecot: migrated config to 2.4 + config splitting
2026-03-04 15:19:42 +01:00
DerLinkman
8063b671cb
indev: dovecot 2.4 config migration
2026-03-04 15:19:14 +01:00
FreddleSpl0it
97312c1a9d
Update alpine images to 3.23
2026-03-04 13:35:11 +01:00
FreddleSpl0it
dcbea71e67
[ACME] auto-create DNS-01 config template on startup
2026-03-04 11:42:40 +01:00
FreddleSpl0it
4abb5cbfab
Merge pull request #7086 from mailcow/feat/sogo-build
...
[SOGo] Build SOGo from source with security patches
2026-03-03 14:24:29 +01:00
FreddleSpl0it
b695936273
Merge pull request #6912 from cjlapao/feat-acme-dns
...
acme: add DNS challenges
2026-03-03 14:23:28 +01:00
DerLinkman
d9463c7950
sogo: shrinked image file by ~50%
2026-03-03 14:14:32 +01:00
FreddleSpl0it
579542381a
Merge pull request #7060 from jovobe/staging
...
Bump alpine version of netfilter
2026-03-03 14:06:01 +01:00
FreddleSpl0it
ce5659f300
Merge pull request #7082 from JeremieCrinon/fix/show-stopped-containers-api-and-dashboard
...
fix: show stopped and failed containers in dashboard and API
2026-03-03 14:01:03 +01:00
FreddleSpl0it
1967cb642f
Merge pull request #6457 from mailcow/renovate/composer-composer-2.x
...
chore(deps): update dependency composer/composer to v2.9.5
2026-03-03 13:38:32 +01:00
FreddleSpl0it
ba0eb04ebe
Merge pull request #6695 from maxi322/feature/check_dns_improvement
...
check_dns: better time measurement
2026-03-03 13:31:23 +01:00
FreddleSpl0it
7562578b74
[SOGo] Build SOGo from source with security patches
2026-03-03 11:24:42 +01:00
Jérémie Crinon
99dc0f6616
fix: show stopped and failed containers in dashboard and API
2026-02-27 13:41:36 +01:00
maxi322
1c52eaa3a4
check_dns: better time measurement
...
alpine does not output ms using date, therefore we use perl to get a more
accurate measurement of the dns response time.
The script output is now even more similar to nagios check_dns.
2026-02-14 18:07:39 +01:00
Johan M. von Behren
c7e04b4146
Bump alpine version of netfilter
...
Bump alpine from 3.21 to 3.23. Closes #7059
2026-02-13 14:26:27 +01:00
renovate[bot]
075959aea9
Update dependency composer/composer to v2.9.5
...
Signed-off-by: milkmaker <milkmaker@mailcow.de >
2026-02-12 11:09:08 +00:00
FreddleSpl0it
c1d4f04c22
Merge branch 'staging' into feat/restrict-alias-sending
2026-01-28 10:02:03 +01:00
FreddleSpl0it
c06112b26e
[Postfix] Configurable send permissions for alias addresses
2026-01-27 09:05:51 +01:00
FreddleSpl0it
aa5a4f0998
Merge pull request #6710 from mailcow/renovate/tianon-gosu-1.x
...
chore(deps): update dependency tianon/gosu to v1.19
2026-01-27 08:09:31 +01:00
FreddleSpl0it
bf4f471cfd
Merge pull request #6837 from mailcow/renovate/php-memcached-dev-php-memcached-3.x
...
chore(deps): update dependency php-memcached-dev/php-memcached to v3.4.0
2026-01-27 08:08:50 +01:00
FreddleSpl0it
869d9af7dd
Merge pull request #6901 from mailcow/renovate/phpredis-phpredis-6.x
...
chore(deps): update dependency phpredis/phpredis to v6.3.0
2026-01-27 08:05:58 +01:00
FreddleSpl0it
af10499ecb
Merge pull request #6927 from mailcow/renovate/imagick-imagick-3.x
...
chore(deps): update dependency imagick/imagick to v3.8.1
2026-01-27 08:04:51 +01:00
FreddleSpl0it
a1a4d8ff98
Merge pull request #6947 from mailcow/renovate/krakjoe-apcu-5.x
...
chore(deps): update dependency krakjoe/apcu to v5.1.28
2026-01-27 08:04:24 +01:00
Copilot
038b2efb75
Add MTA-STS support for alias domains ( #6972 )
...
* Initial plan
* Add MTA-STS support for alias domains
Co-authored-by: DerLinkman <62480600+DerLinkman@users.noreply.github.com >
* Improve domain normalization and code style in mta-sts.php
Co-authored-by: DerLinkman <62480600+DerLinkman@users.noreply.github.com >
* Add error handling for idn_to_ascii in mta-sts.php
Co-authored-by: DerLinkman <62480600+DerLinkman@users.noreply.github.com >
* Add database error handling for alias domain query
Co-authored-by: DerLinkman <62480600+DerLinkman@users.noreply.github.com >
* Add ACME certificate support for MTA-STS on alias domains
Query alias_domain table to find aliases with MTA-STS enabled target domains and request certificates for mta-sts.<alias-domain> subdomains.
Co-authored-by: DerLinkman <62480600+DerLinkman@users.noreply.github.com >
* compose: bump image tag to 1.95
* Add MTA-STS DNS records display for alias domains in UI
When viewing an alias domain's DNS diagnostics, check if the target domain has MTA-STS enabled and display the required DNS records for the alias domain.
Co-authored-by: DerLinkman <62480600+DerLinkman@users.noreply.github.com >
---------
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com >
Co-authored-by: DerLinkman <62480600+DerLinkman@users.noreply.github.com >
Co-authored-by: DerLinkman <niklas.meyer@servercow.de >
2025-12-15 16:29:21 +01:00
DerLinkman
b6f57dfb78
rspamd: update to 3.14.2
2025-12-12 14:06:49 +01:00
DerLinkman
67e7acd6bd
rspamd: upgrade to 3.14.1, trixie rebuild + bcc forwarded hosts fix ( #6958 )
...
* rspamd: fix bcc + subadress handling when using forward hosts
* rspamd: build against trixie + use version 3.14.1
2025-12-11 09:45:56 +01:00
renovate[bot]
689336b3e1
chore(deps): update dependency tianon/gosu to v1.19
...
Signed-off-by: milkmaker <milkmaker@mailcow.de >
2025-12-10 10:41:59 +00:00
renovate[bot]
01cf72cdef
chore(deps): update dependency phpredis/phpredis to v6.3.0
...
Signed-off-by: milkmaker <milkmaker@mailcow.de >
2025-12-10 10:41:54 +00:00
renovate[bot]
4cdb97c699
chore(deps): update dependency php-memcached-dev/php-memcached to v3.4.0
...
Signed-off-by: milkmaker <milkmaker@mailcow.de >
2025-12-10 10:41:50 +00:00
renovate[bot]
1bd795a9c6
chore(deps): update dependency krakjoe/apcu to v5.1.28
...
Signed-off-by: milkmaker <milkmaker@mailcow.de >
2025-12-10 10:41:42 +00:00
renovate[bot]
39f29e6c30
chore(deps): update dependency imagick/imagick to v3.8.1
...
Signed-off-by: milkmaker <milkmaker@mailcow.de >
2025-12-10 10:41:38 +00:00
DerLinkman
dbb9e474b0
pf-tlspol: upgrade to 1.8.22 ( #6951 )
...
* postfix-tlspol: upgrade to 1.8.20
* pf-tlspol: update to 1.8.22
2025-12-09 13:25:50 +01:00
Carlos
890295bbfc
Add DNS-01 challenge support with configuration files and scripts
2025-11-14 07:10:17 +00:00
Josh
0413d26855
Allow making spam aliases permanent ( #6888 )
...
* Allow making spam aliases permanent
* added german translation
* updated Spamalias Twig + Rename in Spam Alias
* compose: update image tags to align to vendor version
---------
Co-authored-by: DerLinkman <niklas.meyer@servercow.de >
2025-11-13 16:05:01 +01:00
Peter
7313f996d3
Update to trixie ( #6907 )
2025-11-13 15:16:00 +01:00
DerLinkman
62d16c9e56
compose: changes cronjobs to regular cron syntax + fixed sogo creds for cronjobs ( #6866 )
...
* cron: restructure cron timer to time on second (instead of random)
* dovecot: fix clearance for cron.creds file
2025-11-13 14:59:49 +01:00
Carlos
a52e977b89
Add DNS-01 challenge support for ACME certificates and related configurations
2025-11-13 07:19:38 +00:00
Claas Flint
1b833be760
Replace pigz with zstd for backup compression ( #6897 )
...
* Replace pigz with zstd for backup compression
This change replaces pigz (parallel gzip) with zstd (Zstandard) as the
compression algorithm for mailcow backups while maintaining full backward
compatibility with existing .tar.gz backups.
Benefits:
- Better compression ratios (12-37% improvement in tests)
- Improved compression speed with modern algorithm
- Maintains rsyncable functionality for incremental backups
- Full backward compatibility for restoring old .tar.gz backups
- Wide industry adoption and active development
Changes:
- Backup compression: pigz --rsyncable -p → zstd --rsyncable -T
- Backup decompression: pigz -d -p → zstd -d -T
- File extensions: .tar.gz → .tar.zst
- Added get_archive_info() function for intelligent format detection
- Updated backup Dockerfile to install zstd alongside pigz
- Restore function now auto-detects and handles both formats
- Updated FILE_SELECTION regex to recognize both .tar.zst and .tar.gz
- Updated comments to reflect new file extension
Backward Compatibility:
- Restore automatically detects .tar.zst (preferred) or .tar.gz (legacy)
- Existing .tar.gz backups can still be restored without issues
- pigz remains installed in backup image for legacy support
- Graceful fallback if backup file format not found
Testing:
- Added comprehensive test suite (test_backup_and_restore.sh)
- 12 automated tests covering all scenarios:
* Backup creation (both formats)
* Restore (both formats)
* Format detection and priority
* Error handling (missing files, empty dirs)
* Content integrity verification
* Multi-threading configuration
* Large file compression (8.59 MB realistic data)
Test Results:
✓ zstd compression working
✓ pigz compression working (legacy)
✓ zstd decompression working
✓ pigz decompression working (backward compatible)
✓ Archive detection working
✓ Content integrity verified
✓ Format priority correct (.tar.zst preferred)
✓ Error handling for missing files
✓ Error handling for empty directories
✓ Multi-threading configuration verified
✓ Large file compression: 37.05% improvement
✓ Small file compression: 12.18% improvement
* move testing script into development folder
---------
Co-authored-by: DerLinkman <niklas.meyer@servercow.de >
2025-11-12 10:06:36 +01:00
DerLinkman
ec472f13cf
sogo: removed URLDecrpytion by default, make it configurable in sogo.conf
2025-11-12 09:50:41 +01:00
FreddleSpl0it
980bfa3aa0
Merge pull request #6696 from mailcow/renovate/krakjoe-apcu-5.x
...
chore(deps): update dependency krakjoe/apcu to v5.1.27
2025-10-10 14:07:24 +02:00
FreddleSpl0it
664a954393
Merge pull request #6798 from mailcow/renovate/php-pecl-mail-mailparse-3.x
...
chore(deps): update dependency php/pecl-mail-mailparse to v3.1.9
2025-10-10 14:07:05 +02:00
FreddleSpl0it
f47df263d7
[Rspamd] Update to 3.13.2
2025-10-10 13:04:01 +02:00
DerLinkman
417835dea8
netfilter: improve logging and mark iptables-legacy as deprecated
2025-10-09 16:37:05 +02:00
renovate[bot]
dd160cd508
Update dependency php/pecl-mail-mailparse to v3.1.9
...
Signed-off-by: milkmaker <milkmaker@mailcow.de >
2025-09-30 13:42:36 +00:00
FreddleSpl0it
9940c503a2
[Nginx] do not invert ENABLE_IPV6
2025-09-22 14:16:42 +02:00
FreddleSpl0it
610609378f
[SOGo][Web] Set URL encryption key in mailcow.conf
2025-09-22 12:58:05 +02:00
FreddleSpl0it
260906e350
[SOGo][Web] Enable SOGo URL Encryption
2025-09-22 12:28:09 +02:00
FreddleSpl0it
0d900d4fc8
[SOGo] Drop deprecated sogo_update_password sql trigger if it still exists
2025-09-11 11:01:50 +02:00
FreddleSpl0it
1c438330c6
[postfix-tlspol] build with NOOPT=1 for wider CPU compatibility
2025-09-10 10:14:37 +02:00