amorfo77/mailcow-dockerized
1
0
Fork 0
mirror of https://github.com/mailcow/mailcow-dockerized.git synced 2026-08-20 05:53:18 +00:00
Code Issues Projects Releases Wiki Activity
7,679 Commits 37 Branches 93 Tags
161f763b6c7cdc045b93700cc7664b4c98d3147d
Commit Graph
5446 Commits
Author SHA1 Message Date
FreddleSpl0itandGitHub 161f763b6c Merge branch 'staging' into feat/new-imapsync 2026-08-19 09:01:47 +02:00
FreddleSpl0it 17d20599a7 [Imapsync] fix legacy syncjob migration edge cases 2026-08-19 08:58:27 +02:00
FreddleSpl0itandGitHub d80b15b06c Merge pull request #7376 from smpaz7467/fix/extended-sender-acl-authsource 
[Web] show external sender addresses regardless of authsource
 2026-08-18 14:41:20 +02:00
FreddleSpl0itandGitHub ed4fe41d7a Merge pull request #7349 from smpaz7467/fix/login-redirect-deeplink 
[Web] redirect deep links to the matching login page
 2026-08-18 14:37:32 +02:00
FreddleSpl0itandGitHub 6b9d875773 Merge pull request #7347 from smpaz7467/fix/dns-zonefile-absolute-rhs 
[Web] use absolute RHS names in generated DNS zonefile
 2026-08-18 14:30:50 +02:00
FreddleSpl0itandGitHub 4d5b9d1c80 Merge pull request #7342 from FrauJulian/feat/show-password 
[Web] Add show/hide password toggle on login pages
 2026-08-18 14:25:22 +02:00
FreddleSpl0itandGitHub 8abf453e1c Merge pull request #7428 from mailcow/feat/forbid-external-alias 
[Web] Add ACL + global switch to disable external alias goto
 2026-08-18 14:13:39 +02:00
FreddleSpl0it 8bd9e12a73 [Web] Add ACL + global switch to disable external alias goto 2026-08-18 14:07:37 +02:00
FreddleSpl0itandGitHub c665d430de Merge pull request #7344 from smpaz7467/fix/forced-pw-change-raw-lang-key 
[Web] translate password errors in the forced password change modal
 2026-08-18 13:31:35 +02:00
FreddleSpl0itandGitHub 2195a674ff Merge pull request #7290 from wryfi/7150-fix-passwd-verify 
Fix #7150: passwd-verify.lua wipes auth cache during any nginx outage
 2026-08-18 13:27:01 +02:00
FreddleSpl0itandGitHub 089c44aee1 Merge pull request #7334 from DerLinkman/feat/postfix-tlspol-update 
postfix-tlspol: upgrade to trixie + 1.11.0 update
 2026-08-18 13:20:16 +02:00
FreddleSpl0it 91d3b7246a [Web] Minor hardening across web UI and nginx 2026-08-18 09:08:17 +02:00
FreddleSpl0it feed5ad183 [Dovecot] Remove legacy DeltaChat auto-filing sieve rule 2026-08-17 08:35:53 +02:00
FreddleSpl0it 8c85044781 [SOGo] Update to 5.12.10 2026-08-17 08:20:45 +02:00
FreddleSpl0it b5fa926bc0 [Clamd] Update to 1.4.6 2026-08-13 13:56:49 +02:00
milkmakerGitHubMatjaž TekavecAndré Glazastov
 		d1a2f4e168 Translations update from Weblate (#7400) 
* [Web] Updated lang.si-si.json

Co-authored-by: Matjaž Tekavec <matjaz@moj-svet.si>
Co-authored-by: milkmaker <milkmaker@mailcow.de>

* [Web] Updated lang.pt-br.json

Co-authored-by: André Glazastov <andre@glazastov.com>

---------

Co-authored-by: Matjaž Tekavec <matjaz@moj-svet.si>
Co-authored-by: André Glazastov <andre@glazastov.com>
 2026-08-04 18:37:38 +02:00
milkmakerandGitHub f7a536d634 update postscreen_access.cidr (#7394) 2026-08-04 18:35:48 +02:00
FreddleSpl0it d64c923aca [ACME] Skip mta-sts certificate request when MTA-STS is not active for a domain 2026-07-30 10:33:55 +02:00
FreddleSpl0itandGitHub 2d5f166ba8 Merge pull request #7389 from mailcow/fix/default-mbox-template 
[Web] Create default mailbox template with eas and dav access
 2026-07-30 09:23:24 +02:00
FreddleSpl0itandGitHub 94b5a623ab Merge pull request #7388 from mailcow/fix/7329 
[Web] Move mailcow update check to server side
 2026-07-30 09:13:19 +02:00
FreddleSpl0itandGitHub e406ecd461 Merge pull request #7387 from mailcow/fix/mfk25 
Hardening mailcow
 2026-07-30 09:07:10 +02:00
FreddleSpl0it 7036dbf4f8 [Rspamd] update to 4.1.4 2026-07-30 08:50:18 +02:00
FreddleSpl0it 36c70db86c [Web] harden CORS origin matching and add Vary: Origin 2026-07-30 08:37:18 +02:00
Stephen Ritz 9cd16f0001 [Web] show external sender addresses regardless of authsource 
The extended_sender_acl field sat inside the
`{% if not result.authsource or result.authsource == 'mailcow' %}` block
that hides the local password fields for mailboxes authenticating against
an external identity provider. As a result the "External sender addresses"
input was not rendered at all for keycloak / generic-oidc / ldap mailboxes,
even for a full admin, so those addresses could neither be reviewed nor
edited in the UI while the underlying sender_acl rows stayed active.

Extended sender ACLs are unrelated to local password management. Move the
field out of that block; it stays gated by acl.extend_sender_acl as intended.

Fixes #7365
 2026-07-28 07:12:17 -07:00
FreddleSpl0itandGitHub f4961c4023 Merge pull request #7333 from fallmo/fix/cors-settings-validation 
fix: cors allowed origins settings validation
 2026-07-28 15:35:29 +02:00
FreddleSpl0itandGitHub 38de21592c Merge pull request #7358 from SYNLINQ/staging 
Fix nginx CVE-2026-42533
 2026-07-28 14:40:30 +02:00
FreddleSpl0it f44bd2f36a [Web] document sender_acl in get/mailbox API examples 2026-07-28 14:19:45 +02:00
FreddleSpl0itandGitHub 95a77f2dcb Merge pull request #7348 from smpaz7467/fix/api-get-mailbox-sender-acl 
[Web] return sender_acl in get/mailbox API
 2026-07-28 14:12:57 +02:00
FreddleSpl0itandGitHub e856510fb2 Merge pull request #7345 from smpaz7467/fix/time-limited-alias-api 
[Web] fix add/time_limited_alias silently discarding requests and validity
 2026-07-28 13:49:37 +02:00
FreddleSpl0itandGitHub d51d06d716 Merge pull request #7343 from smpaz7467/fix/nginx-ipv6-default-server 
[Nginx] only bind IPv6 default_server when ENABLE_IPV6 is set
 2026-07-28 13:35:17 +02:00
FreddleSpl0it 54170d075a [Web] Move mailcow update check to server side 2026-07-28 13:32:18 +02:00
FreddleSpl0it e245ac04d9 [Web] enforce tenant boundary for SOGo SSO 2026-07-28 09:21:29 +02:00
oidipos c877fdf0a5 fix: remove MIME decoding of JSON encoded subject 
Since moving to rspamd's multipart metadata_exporter,
`subject` is a JSON encoded UTF-8 string and must not be MIME decoded.
 2026-07-24 21:03:00 +02:00
FreddleSpl0it fea38c8e1b [Web] escape mailbox name 2026-07-24 11:16:39 +02:00
FreddleSpl0it cc9af65852 [Web] remove domain admin sso token after use 2026-07-24 10:26:23 +02:00
FreddleSpl0it 92cc8bec90 [Web] Use parameterized LIKE for sogo_acl deletion 2026-07-23 15:29:41 +02:00
FreddleSpl0it 145745329e [Web] add dot stuffing for quarantine raw release 2026-07-23 15:01:44 +02:00
FreddleSpl0it 8e72d22c56 [Web] Escape rspamd_history and rllog 2026-07-23 11:17:55 +02:00
FreddleSpl0it ddd76d99cd [Web] Add sogo_auth_internal nginx marker for sogo-auth.php 2026-07-23 10:10:29 +02:00
FreddleSpl0it 7e63061b30 [Imapsync] switch from order_id to prio 2026-07-22 13:08:15 +02:00
FreddleSpl0it 52ca8f95c2 [Imapsync] fix custom params 2026-07-21 17:13:33 +02:00
FreddleSpl0it 6758999cf3 [Imapsync] Remove oauth source hint 2026-07-21 12:20:13 +02:00
FreddleSpl0it 5c5f251d35 [Imapsync] hide user1 input on oauth user login flow 2026-07-21 12:13:38 +02:00
FreddleSpl0it 1a10d0748e [Imapsync] Move "open logs" to action buttons 2026-07-21 12:07:25 +02:00
FreddleSpl0it f4f9f72395 [Imapsync] Add token status badge for user login flow 2026-07-21 12:01:35 +02:00
FreddleSpl0it 6f81778e5e [Imapsync] fix token badge for imapsync source 2026-07-21 11:54:02 +02:00
SYNLINQandGitHub 2ebd32d2ee Update Dockerfile 
bump nginx version to 1.30.4
 2026-07-20 21:31:57 +02:00
FreddleSpl0it 069b89629e [Imapsync] Use dropdown for custom params 2026-07-17 20:45:46 +02:00
FreddleSpl0it 496c3a51ac [Imapsync] Add parallel imapsync support 2026-07-17 19:31:09 +02:00
FreddleSpl0it 06a2a14c55 [Imapsync] Add oauth support 2026-07-17 16:04:42 +02:00