copilot-swe-agent[bot] and DerLinkman
64fe2e6d0d
Fix DEV_MODE bypass to work when SESS_REMOTE_UA not set
...
Co-authored-by: DerLinkman <62480600+DerLinkman@users.noreply.github.com >
2025-12-12 16:36:32 +00:00
copilot-swe-agent[bot] and DerLinkman
f01ada9377
Add isset check for DEV_MODE to prevent undefined index
...
Co-authored-by: DerLinkman <62480600+DerLinkman@users.noreply.github.com >
2025-12-12 16:30:39 +00:00
copilot-swe-agent[bot] and DerLinkman
ae6420dc80
Fix DEV_MODE access using $GLOBALS instead of global keyword
...
Co-authored-by: DerLinkman <62480600+DerLinkman@users.noreply.github.com >
2025-12-12 16:23:16 +00:00
copilot-swe-agent[bot] and DerLinkman
a1b0004be9
Add comment explaining User-Agent length validation
...
Co-authored-by: DerLinkman <62480600+DerLinkman@users.noreply.github.com >
2025-12-12 16:14:09 +00:00
copilot-swe-agent[bot] and DerLinkman
88376566f9
Add validation for User-Agent in DEV_MODE bypass
...
Co-authored-by: DerLinkman <62480600+DerLinkman@users.noreply.github.com >
2025-12-12 16:12:37 +00:00
copilot-swe-agent[bot] and DerLinkman
89b4676641
Allow User-Agent changes in DEV_MODE for responsive testing
...
Co-authored-by: DerLinkman <62480600+DerLinkman@users.noreply.github.com >
2025-12-12 16:11:05 +00:00
copilot-swe-agent[bot] and DerLinkman
a710b0e580
Fix line ending issue in functions.inc.php - preserve CRLF
...
Co-authored-by: DerLinkman <62480600+DerLinkman@users.noreply.github.com >
2025-12-12 15:59:55 +00:00
copilot-swe-agent[bot] and DerLinkman
b3e6891802
Fix session handling - explicitly start session after destroy
...
Co-authored-by: DerLinkman <62480600+DerLinkman@users.noreply.github.com >
2025-12-12 15:53:53 +00:00
copilot-swe-agent[bot] and DerLinkman
19225b223c
Fix User-Agent validation error after session expiry and regeneration
...
Co-authored-by: DerLinkman <62480600+DerLinkman@users.noreply.github.com >
2025-12-12 15:51:56 +00:00
DerLinkman and GitHub
1fe4cd03e9
ui: fix global filters ui tickbox reappearing ( #6966 )
2025-12-12 16:01:18 +01:00
12e02e67ff
Translations update from Weblate ( #6965 )
...
* [Web] Updated lang.fr-fr.json
Co-authored-by: Keo <contact@kbl.netlib.re >
* [Web] Updated lang.pt-pt.json
Co-authored-by: Germano Pires Ferreira <germanopires@gmail.com >
Co-authored-by: milkmaker <milkmaker@mailcow.de >
* [Web] Updated lang.pl-pl.json
Co-authored-by: Monika Bark <rychert.monika@wp.pl >
---------
Co-authored-by: Keo <contact@kbl.netlib.re >
Co-authored-by: Germano Pires Ferreira <germanopires@gmail.com >
Co-authored-by: Monika Bark <rychert.monika@wp.pl >
2025-12-12 15:21:04 +01:00
DerLinkman
b6f57dfb78
rspamd: update to 3.14.2
2025-12-12 14:06:49 +01:00
3ebf2c2d2d
Prevent duplicate/plaintext login announcement rendering ( #6963 )
...
* Initial plan
* Fix duplicate login announcement display
Co-authored-by: DerLinkman <62480600+DerLinkman@users.noreply.github.com >
---------
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com >
Co-authored-by: DerLinkman <62480600+DerLinkman@users.noreply.github.com >
2025-12-12 12:34:20 +01:00
DerLinkman and GitHub
67e7acd6bd
rspamd: upgrade to 3.14.1, trixie rebuild + bcc forwarded hosts fix ( #6958 )
...
* rspamd: fix bcc + subadress handling when using forward hosts
* rspamd: build against trixie + use version 3.14.1
2025-12-11 09:45:56 +01:00
Ashitaka and GitHub
1ab6af21e3
Merge pull request #6905 from Ashitaka57/6646-pbkdf2-sha512-verify-hash
...
Support for PBKDF2-SHA512 hash algorithm in verify_hash() (FreeIPA compatibility) (issue 6646)
2025-12-10 11:41:06 +01:00
DerLinkman and GitHub
dbb9e474b0
pf-tlspol: upgrade to 1.8.22 ( #6951 )
...
* postfix-tlspol: upgrade to 1.8.20
* pf-tlspol: update to 1.8.22
2025-12-09 13:25:50 +01:00
Khurram Malik and GitHub
f8eed8c786
fix(api): add missing break in CORS switch block causing save to hang ( #6926 )
2025-12-09 11:54:20 +01:00
79171ea6f5
[Web] Updated lang.fr-fr.json ( #6943 )
...
Co-authored-by: Neuronnexion <support@nnx.com >
2025-12-05 14:40:45 +01:00
4e3294b273
[Web] Updated lang.fr-fr.json ( #6941 )
...
[Web] Updated lang.fr-fr.json
[Web] Updated lang.fr-fr.json
Co-authored-by: Neuronnexion <support@nnx.com >
2025-12-03 23:31:37 +01:00
6c106b4e4d
[Web] Updated lang.fr-fr.json ( #6936 )
...
Co-authored-by: Neuronnexion <support@nnx.com >
2025-12-02 16:40:36 +01:00
milkmaker and GitHub
3d6253a2b2
update postscreen_access.cidr ( #6933 )
2025-12-01 08:48:22 +01:00
b873812588
[Web] Updated lang.gr-gr.json ( #6930 )
...
Co-authored-by: ChD Computers <chdcomputers@gmail.com >
2025-11-29 13:20:02 +01:00
514fefd2ed
Translations update from Weblate ( #6924 )
...
* [Web] Updated lang.ca-es.json
Co-authored-by: Pere Montpeó <peremontpeo@gmail.com >
Co-authored-by: milkmaker <milkmaker@mailcow.de >
* [Web] Updated lang.gr-gr.json
Co-authored-by: Chris <chrismfz@gmail.com >
Co-authored-by: milkmaker <milkmaker@mailcow.de >
* [Web] Updated lang.cs-cz.json
Co-authored-by: Filip Hajny <filip@hajny.net >
* [Web] Updated lang.pl-pl.json
[Web] Updated lang.pl-pl.json
Co-authored-by: Monika Bark <rychert.monika@wp.pl >
Co-authored-by: milkmaker <milkmaker@mailcow.de >
---------
Co-authored-by: Pere Montpeó <peremontpeo@gmail.com >
Co-authored-by: Chris <chrismfz@gmail.com >
Co-authored-by: Filip Hajny <filip@hajny.net >
Co-authored-by: Monika Bark <rychert.monika@wp.pl >
2025-11-24 16:50:03 +01:00
9832006141
Translations update from Weblate ( #6916 )
...
* [Web] Updated lang.si-si.json
Co-authored-by: Matjaž Tekavec <matjaz@moj-svet.si >
* [Web] Updated lang.ru-ru.json
Co-authored-by: Habetdin <15926758+Habetdin@users.noreply.github.com >
* [Web] Updated lang.pl-pl.json
[Web] Updated lang.pl-pl.json
[Web] Updated lang.pl-pl.json
Co-authored-by: Monika Bark <rychert.monika@wp.pl >
Co-authored-by: Peter <magic@kthx.at >
Co-authored-by: milkmaker <milkmaker@mailcow.de >
---------
Co-authored-by: Matjaž Tekavec <matjaz@moj-svet.si >
Co-authored-by: Habetdin <15926758+Habetdin@users.noreply.github.com >
Co-authored-by: Monika Bark <rychert.monika@wp.pl >
Co-authored-by: Peter <magic@kthx.at >
2025-11-17 23:23:07 +01:00
0413d26855
Allow making spam aliases permanent ( #6888 )
...
* Allow making spam aliases permanent
* added german translation
* updated Spamalias Twig + Rename in Spam Alias
* compose: update image tags to align to vendor version
---------
Co-authored-by: DerLinkman <niklas.meyer@servercow.de >
2025-11-13 16:05:01 +01:00
Patrik Kernstock and GitHub
7b29c1f304
Disable nginx server_tokens in http context ( #6873 )
2025-11-13 15:19:11 +01:00
Patrik Kernstock and GitHub
ae3ef391ee
Remove deprecated 'X-XSS-Protection' header ( #6871 )
2025-11-13 15:16:44 +01:00
Peter and GitHub
7313f996d3
Update to trixie ( #6907 )
2025-11-13 15:16:00 +01:00
DerLinkman and GitHub
62d16c9e56
compose: changes cronjobs to regular cron syntax + fixed sogo creds for cronjobs ( #6866 )
...
* cron: restructure cron timer to time on second (instead of random)
* dovecot: fix clearance for cron.creds file
2025-11-13 14:59:49 +01:00
1b833be760
Replace pigz with zstd for backup compression ( #6897 )
...
* Replace pigz with zstd for backup compression
This change replaces pigz (parallel gzip) with zstd (Zstandard) as the
compression algorithm for mailcow backups while maintaining full backward
compatibility with existing .tar.gz backups.
Benefits:
- Better compression ratios (12-37% improvement in tests)
- Improved compression speed with modern algorithm
- Maintains rsyncable functionality for incremental backups
- Full backward compatibility for restoring old .tar.gz backups
- Wide industry adoption and active development
Changes:
- Backup compression: pigz --rsyncable -p → zstd --rsyncable -T
- Backup decompression: pigz -d -p → zstd -d -T
- File extensions: .tar.gz → .tar.zst
- Added get_archive_info() function for intelligent format detection
- Updated backup Dockerfile to install zstd alongside pigz
- Restore function now auto-detects and handles both formats
- Updated FILE_SELECTION regex to recognize both .tar.zst and .tar.gz
- Updated comments to reflect new file extension
Backward Compatibility:
- Restore automatically detects .tar.zst (preferred) or .tar.gz (legacy)
- Existing .tar.gz backups can still be restored without issues
- pigz remains installed in backup image for legacy support
- Graceful fallback if backup file format not found
Testing:
- Added comprehensive test suite (test_backup_and_restore.sh)
- 12 automated tests covering all scenarios:
* Backup creation (both formats)
* Restore (both formats)
* Format detection and priority
* Error handling (missing files, empty dirs)
* Content integrity verification
* Multi-threading configuration
* Large file compression (8.59 MB realistic data)
Test Results:
✓ zstd compression working
✓ pigz compression working (legacy)
✓ zstd decompression working
✓ pigz decompression working (backward compatible)
✓ Archive detection working
✓ Content integrity verified
✓ Format priority correct (.tar.zst preferred)
✓ Error handling for missing files
✓ Error handling for empty directories
✓ Multi-threading configuration verified
✓ Large file compression: 37.05% improvement
✓ Small file compression: 12.18% improvement
* move testing script into development folder
---------
Co-authored-by: DerLinkman <niklas.meyer@servercow.de >
2025-11-12 10:06:36 +01:00
DerLinkman
ec472f13cf
sogo: removed URLDecrpytion by default, make it configurable in sogo.conf
2025-11-12 09:50:41 +01:00
2e1d98cc7c
[Web] Updated lang.pl-pl.json ( #6908 )
...
[Web] Updated lang.pl-pl.json
[Web] Updated lang.pl-pl.json
Co-authored-by: Monika Bark <rychert.monika@wp.pl >
2025-11-10 21:06:13 +01:00
07d7e3dc30
[Web] Updated lang.pl-pl.json ( #6906 )
...
[Web] Updated lang.pl-pl.json
[Web] Updated lang.pl-pl.json
[Web] Updated lang.pl-pl.json
[Web] Updated lang.pl-pl.json
[Web] Updated lang.pl-pl.json
[Web] Updated lang.pl-pl.json
[Web] Updated lang.pl-pl.json
[Web] Updated lang.pl-pl.json
[Web] Updated lang.pl-pl.json
[Web] Updated lang.pl-pl.json
Co-authored-by: Monika Bark <rychert.monika@wp.pl >
2025-11-09 23:03:00 +01:00
b0f5aee628
[Web] Updated lang.pl-pl.json ( #6898 )
...
Co-authored-by: Monika Bark <rychert.monika@wp.pl >
2025-11-05 17:37:26 +01:00
milkmaker and GitHub
d3065612fd
update postscreen_access.cidr ( #6886 )
2025-11-03 21:07:40 +01:00
Josh and GitHub
9912e41f78
[Web] Correct order of Dansk/Danish in UI ( #6887 )
2025-11-03 21:07:20 +01:00
04200c99a4
Translations update from Weblate ( #6880 )
...
* [Web] Updated lang.vi-vn.json
Co-authored-by: Nguyễn Thái Dũng <nguyenthaidung.work+mailcow.email@gmail.com >
Co-authored-by: milkmaker <milkmaker@mailcow.de >
* [Web] Updated lang.nb-no.json
Co-authored-by: Runar Ingebrigtsen <runar@rin.no >
---------
Co-authored-by: Nguyễn Thái Dũng <nguyenthaidung.work+mailcow.email@gmail.com >
Co-authored-by: Runar Ingebrigtsen <runar@rin.no >
2025-10-27 20:00:29 +01:00
FreddleSpl0it
9a806e64ce
[PHP] remove opcache.revalidate_freq
2025-10-24 08:18:49 +02:00
FreddleSpl0it
22a09b9795
[PHP] re-add opcache.revalidate_freq setting
2025-10-23 15:16:24 +02:00
FreddleSpl0it and GitHub
04d5c43550
Merge pull request #6847 from patschi/disable-opcache-jit
...
Disable PHP opcache.jit
2025-10-23 09:32:02 +02:00
fbcb8cbeb9
[Web] Updated lang.vi-vn.json ( #6861 )
...
Co-authored-by: Nguyễn Thái Dũng <nguyenthaidung.work+mailcow.email@gmail.com >
2025-10-21 18:03:22 +02:00
23fb5e2fca
Add Vietnamese language ( #6854 )
...
* [Web] Updated lang.vi-vn.json
[Web] Added lang.vi-vn.json
Co-authored-by: Nguyễn Thái Dũng <nguyenthaidung.work+mailcow.email@gmail.com >
Co-authored-by: Peter <magic@kthx.at >
Co-authored-by: milkmaker <milkmaker@mailcow.de >
* Add Vietnamese language
---------
Co-authored-by: Nguyễn Thái Dũng <nguyenthaidung.work+mailcow.email@gmail.com >
Co-authored-by: Peter <magic@kthx.at >
2025-10-20 18:35:00 +02:00
Patrik Kernstock
a4970397f1
Disable PHP opcache.jit
2025-10-17 13:17:56 +02:00
FreddleSpl0it
b85837c803
[Web] Add password verification when setting recovery email
2025-10-13 12:05:17 +02:00
FreddleSpl0it and GitHub
653fc40d4c
Merge pull request #6783 from patschi/phpfpm-moar-speeeed
...
Optimize phpfpm opcache: more aggressive caching, enable JIT
2025-10-13 11:43:07 +02:00
FreddleSpl0it and GitHub
c17d80a6fd
Merge pull request #6821 from tjmills-dev/feat/show-app-passwd-logins
...
Show app passwords for successful logins on user page
2025-10-13 11:41:39 +02:00
FreddleSpl0it and GitHub
980bfa3aa0
Merge pull request #6696 from mailcow/renovate/krakjoe-apcu-5.x
...
chore(deps): update dependency krakjoe/apcu to v5.1.27
2025-10-10 14:07:24 +02:00
FreddleSpl0it and GitHub
664a954393
Merge pull request #6798 from mailcow/renovate/php-pecl-mail-mailparse-3.x
...
chore(deps): update dependency php/pecl-mail-mailparse to v3.1.9
2025-10-10 14:07:05 +02:00
FreddleSpl0it and GitHub
d5a27c4ccb
Merge pull request #6830 from mailcow/feat/rspamd-3.13.2
...
[Rspamd] Update to 3.13.2
2025-10-10 13:10:54 +02:00
FreddleSpl0it and GitHub
b859a52b8e
Merge pull request #6828 from mailcow/fix/6818
...
[Web] Fix SOGo redirection after login
2025-10-10 13:08:22 +02:00
copilot-swe-agent[bot]andDerLinkman
DerLinkmanandGitHub
AshitakaandGitHub
Khurram MalikandGitHub
Patrik KernstockandGitHub
FreddleSpl0it
Patrik Kernstock