woodfairy
0a0686ef19
[Nginx][Clamd][Postfix] Rebuild images for brotli CVE-2026-111497
...
The current nginx, clamd and postfix images ship a brotli decoder in the
affected range 1.0.3 - 1.2.0 (CVE-2026-111497, CVSS 9.8, listed in CISA KEV):
- nginx:1.30.6-2 brotli-libs 1.2.0-r1 (fixed in Alpine 3.24: 1.2.1-r0)
- clamd:1.4.6-1 brotli-libs 1.2.0-r1 (fixed in Alpine 3.24: 1.2.1-r0)
- postfix:3.10.12-1 libbrotli1 1.1.0-2+b7 (fixed in trixie-security:
1.1.0-2+deb13u1, DSA-6582-1)
All other mailcow images already contain a fixed version.
clamd and postfix only need a rebuild, which pulls the fixed packages.
The postfix rebuild also picks up Debian's postfix 3.10.13, hence the
new tag postfix:3.10.13-1. The
nginx image never upgraded the packages of its base image, so it only got
fixes when nginx:<version>-alpine was republished. It now runs
apk upgrade like clamd and acme do.
2026-11-08 00:49:55 +01:00
FreddleSpl0it
4c7e2ec036
[Nginx] Limit request body size, configurable via NGINX_MAX_BODY_SIZE
2026-10-28 16:54:26 +01:00
FreddleSpl0it
1f04122eca
[Nginx] Update to 1.30.6
2026-10-21 13:41:43 +02:00
SYNLINQ
2ebd32d2ee
Update Dockerfile
...
bump nginx version to 1.30.4
2026-07-20 21:31:57 +02:00
FreddleSpl0it
1f8b4679cc
[Nignx] Update to 1.30.3
2026-06-25 12:17:37 +02:00
FreddleSpl0it
db4e3b4d54
[Nginx] Update to 1.30.2
2026-05-26 10:36:39 +02:00
FreddleSpl0it
f553f38635
[Nginx] Update to 1.30.1
2026-05-20 17:24:41 +02:00
FreddleSpl0it
9940c503a2
[Nginx] do not invert ENABLE_IPV6
2025-09-22 14:16:42 +02:00
DerLinkman and Copilot
88bf9b02e1
core: modules splitting + ipv6 nat rewrite ( #6634 )
...
* ipv6: added ipv6 detection + removed ip6 nat container
* nginx: renamed DISABLE_IPv6 to ENABLE_IPV6 to align
* initial commit for script overhauls
* rewrite to scripts after testing (improved error handling)
* fixed missing fi in update.sh
* fixed/added comments for modules
* fix broken EXIT_CODE var handling
* added jq as dependancy
* fixed docker version check for daemon
* improved _modules handling while running
* reintegrated module loading (update.sh)
* added error handling for blank daemon.json
* adapted removal of ACME_CONTACT for nightly
* move detect_major_update func to core submodule
* removed unnecessary message on every call of function
* Update _modules/scripts/new_options.sh
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
* Update _modules/scripts/core.sh
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
* improve ENABLE_IPV6 check in nginx bootstrap
* improve detection of ENABLE_IPV6
* ip6_controller: moved docker major detection upwards
* Update _modules/scripts/new_options.sh
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
* Update _modules/scripts/new_options.sh
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
* reuse DOCKER_MAJOR Variable in ip6_controller
* fix some smaller typos in update.sh
* smaller bugfixes in submodules
* completely remove ACME_CONTACT Variable
---------
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
2025-08-06 08:36:40 +02:00
FreddleSpl0it
a567d5dc31
[Nginx] Add support for trusted proxies via env var
2025-02-18 11:03:34 +01:00
FreddleSpl0it
3544a2246e
[Nginx] fix ADDITIONAL_SERVER_NAMES array
2025-02-04 13:30:00 +01:00
FreddleSpl0it
97890b71f1
[Nginx] Invert SKIP container condition
2025-02-03 12:22:13 +01:00
FreddleSpl0it
e645f931dc
[Nginx] Add env var for HTTP to HTTPS redirection
2025-02-03 12:05:08 +01:00
FreddleSpl0it
0ad327bbe5
[Nginx] Use separate vhosts for additional server names
2025-01-29 09:51:45 +01:00
FreddleSpl0it
7bcd61ecb5
[Nginx] Generate includes for custom configs
2025-01-22 14:30:47 +01:00
FreddleSpl0it
8853e2c44a
[Nginx] Use SOGo IPv4 for upstream
2024-12-09 09:50:16 +01:00
FreddleSpl0it
70ca5fde95
[Nginx] Use jinja2 for templating nginx configuration
2024-11-19 08:39:52 +01:00
Kristian Klausen
a0cdc1e4ff
Remove "empty" folders
...
There seems to be no reason for this empty folders.
2018-02-13 23:45:49 +01:00
andryyy
d891bc8894
Docs
2017-03-02 11:23:23 +01:00
andryyy
5f7fb2e7c2
Deployed dfc88cc with MkDocs version: 0.16.1
2017-03-02 11:21:46 +01:00
andryyy
9022176ad0
Nginx needs no modification anymore
2016-12-17 10:07:07 +01:00
andryyy
0498a8f6be
Move Nginx to Docker hub
2016-12-14 09:06:14 +01:00
andryyy
5b9e598f6f
Add dummy folders for Dockerfiles we pull from hub
2016-12-09 20:47:15 +01:00