FreddleSpl0it and GitHub
869d9af7dd
Merge pull request #6901 from mailcow/renovate/phpredis-phpredis-6.x
...
chore(deps): update dependency phpredis/phpredis to v6.3.0
2026-01-27 08:05:58 +01:00
FreddleSpl0it and GitHub
af10499ecb
Merge pull request #6927 from mailcow/renovate/imagick-imagick-3.x
...
chore(deps): update dependency imagick/imagick to v3.8.1
2026-01-27 08:04:51 +01:00
FreddleSpl0it and GitHub
a1a4d8ff98
Merge pull request #6947 from mailcow/renovate/krakjoe-apcu-5.x
...
chore(deps): update dependency krakjoe/apcu to v5.1.28
2026-01-27 08:04:24 +01:00
FreddleSpl0it and GitHub
95d61e8aa2
Merge pull request #6980 from bluewalk/feat/issue-6489
...
Configurable displayName(s) - Fixes issue #6489
2026-01-27 08:02:20 +01:00
FreddleSpl0it and GitHub
ec8dd1a54f
Merge pull request #6990 from psuet/mobileconfig-with-password-complexity
...
fix: Password for mobileconfig that conforms to password-complexity policy
2026-01-27 07:56:35 +01:00
382ee34d0e
[Web] Updated lang.hu-hu.json ( #7020 )
...
Co-authored-by: Sándor <me-github@sandros.hu >
2026-01-26 20:15:47 +01:00
0999c9e9ab
Translations update from Weblate ( #7014 )
...
* [Web] Updated lang.zh-cn.json
Co-authored-by: 雨 <luotianyi@luotianyi.me >
* [Web] Updated lang.pl-pl.json
Co-authored-by: Monika Bark <rychert.monika@wp.pl >
Co-authored-by: milkmaker <milkmaker@mailcow.de >
---------
Co-authored-by: 雨 <luotianyi@luotianyi.me >
Co-authored-by: Monika Bark <rychert.monika@wp.pl >
2026-01-23 22:02:55 +01:00
e727620bd3
Translations update from Weblate ( #7002 )
...
* [Web] Updated lang.zh-cn.json
Co-authored-by: ガラスのような夢 <i@msdnicrosoft.work >
* [Web] Updated lang.pl-pl.json
Co-authored-by: Monika Bark <rychert.monika@wp.pl >
---------
Co-authored-by: ガラスのような夢 <i@msdnicrosoft.work >
Co-authored-by: Monika Bark <rychert.monika@wp.pl >
2026-01-07 17:23:31 +01:00
milkmaker and GitHub
71fa3ecebc
update postscreen_access.cidr ( #6987 )
2026-01-07 17:22:01 +01:00
Paul Sütterlin
70101d1187
fix: Password for mobileconfig that conforms to password-complexity policy
2026-01-01 16:57:21 +01:00
bluewalk
c060c205d3
Fixes issue #6489
2025-12-21 16:56:16 +01:00
038b2efb75
Add MTA-STS support for alias domains ( #6972 )
...
* Initial plan
* Add MTA-STS support for alias domains
Co-authored-by: DerLinkman <62480600+DerLinkman@users.noreply.github.com >
* Improve domain normalization and code style in mta-sts.php
Co-authored-by: DerLinkman <62480600+DerLinkman@users.noreply.github.com >
* Add error handling for idn_to_ascii in mta-sts.php
Co-authored-by: DerLinkman <62480600+DerLinkman@users.noreply.github.com >
* Add database error handling for alias domain query
Co-authored-by: DerLinkman <62480600+DerLinkman@users.noreply.github.com >
* Add ACME certificate support for MTA-STS on alias domains
Query alias_domain table to find aliases with MTA-STS enabled target domains and request certificates for mta-sts.<alias-domain> subdomains.
Co-authored-by: DerLinkman <62480600+DerLinkman@users.noreply.github.com >
* compose: bump image tag to 1.95
* Add MTA-STS DNS records display for alias domains in UI
When viewing an alias domain's DNS diagnostics, check if the target domain has MTA-STS enabled and display the required DNS records for the alias domain.
Co-authored-by: DerLinkman <62480600+DerLinkman@users.noreply.github.com >
---------
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com >
Co-authored-by: DerLinkman <62480600+DerLinkman@users.noreply.github.com >
Co-authored-by: DerLinkman <niklas.meyer@servercow.de >
2025-12-15 16:29:21 +01:00
DerLinkman and GitHub
1fe4cd03e9
ui: fix global filters ui tickbox reappearing ( #6966 )
2025-12-12 16:01:18 +01:00
12e02e67ff
Translations update from Weblate ( #6965 )
...
* [Web] Updated lang.fr-fr.json
Co-authored-by: Keo <contact@kbl.netlib.re >
* [Web] Updated lang.pt-pt.json
Co-authored-by: Germano Pires Ferreira <germanopires@gmail.com >
Co-authored-by: milkmaker <milkmaker@mailcow.de >
* [Web] Updated lang.pl-pl.json
Co-authored-by: Monika Bark <rychert.monika@wp.pl >
---------
Co-authored-by: Keo <contact@kbl.netlib.re >
Co-authored-by: Germano Pires Ferreira <germanopires@gmail.com >
Co-authored-by: Monika Bark <rychert.monika@wp.pl >
2025-12-12 15:21:04 +01:00
DerLinkman
b6f57dfb78
rspamd: update to 3.14.2
2025-12-12 14:06:49 +01:00
3ebf2c2d2d
Prevent duplicate/plaintext login announcement rendering ( #6963 )
...
* Initial plan
* Fix duplicate login announcement display
Co-authored-by: DerLinkman <62480600+DerLinkman@users.noreply.github.com >
---------
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com >
Co-authored-by: DerLinkman <62480600+DerLinkman@users.noreply.github.com >
2025-12-12 12:34:20 +01:00
DerLinkman
1bac6f1ee7
ofelia: revert fixed cron syntax for sa-rules download
2025-12-11 13:29:11 +01:00
DerLinkman and GitHub
67e7acd6bd
rspamd: upgrade to 3.14.1, trixie rebuild + bcc forwarded hosts fix ( #6958 )
...
* rspamd: fix bcc + subadress handling when using forward hosts
* rspamd: build against trixie + use version 3.14.1
2025-12-11 09:45:56 +01:00
renovate[bot] and GitHub
910ce573d6
chore(deps): update peter-evans/create-pull-request action to v8 ( #6953 )
2025-12-10 19:48:02 +01:00
renovate[bot] and GitHub
01cf72cdef
chore(deps): update dependency phpredis/phpredis to v6.3.0
...
Signed-off-by: milkmaker <milkmaker@mailcow.de >
2025-12-10 10:41:54 +00:00
renovate[bot] and GitHub
1bd795a9c6
chore(deps): update dependency krakjoe/apcu to v5.1.28
...
Signed-off-by: milkmaker <milkmaker@mailcow.de >
2025-12-10 10:41:42 +00:00
renovate[bot] and GitHub
39f29e6c30
chore(deps): update dependency imagick/imagick to v3.8.1
...
Signed-off-by: milkmaker <milkmaker@mailcow.de >
2025-12-10 10:41:38 +00:00
Ashitaka and GitHub
1ab6af21e3
Merge pull request #6905 from Ashitaka57/6646-pbkdf2-sha512-verify-hash
...
Support for PBKDF2-SHA512 hash algorithm in verify_hash() (FreeIPA compatibility) (issue 6646)
2025-12-10 11:41:06 +01:00
DerLinkman
5d95c48e0d
backup: add image prefetch function to verify latest image is used
2025-12-10 08:43:04 +01:00
DerLinkman and GitHub
dbb9e474b0
pf-tlspol: upgrade to 1.8.22 ( #6951 )
...
* postfix-tlspol: upgrade to 1.8.20
* pf-tlspol: update to 1.8.22
2025-12-09 13:25:50 +01:00
Khurram Malik and GitHub
f8eed8c786
fix(api): add missing break in CORS switch block causing save to hang ( #6926 )
2025-12-09 11:54:20 +01:00
ef010aa39c
Update CONTRIBUTING.md
...
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
2025-12-08 15:08:25 +01:00
79171ea6f5
[Web] Updated lang.fr-fr.json ( #6943 )
...
Co-authored-by: Neuronnexion <support@nnx.com >
2025-12-05 14:40:45 +01:00
4e3294b273
[Web] Updated lang.fr-fr.json ( #6941 )
...
[Web] Updated lang.fr-fr.json
[Web] Updated lang.fr-fr.json
Co-authored-by: Neuronnexion <support@nnx.com >
2025-12-03 23:31:37 +01:00
32a6ecddb6
chore(deps): update alpine docker tag to v3.23 ( #6940 )
...
Signed-off-by: milkmaker <milkmaker@mailcow.de >
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-12-03 23:30:46 +01:00
DerLinkman
f3d9833ecf
Merge branch 'master' into staging
2025-12-03 16:55:12 +01:00
DerLinkman
930ca76ea7
update: moved _modules initialization and update at the beginning of update script
2025-12-03 16:54:26 +01:00
DerLinkman
9a2887cf46
core: improved docker compose version check
2025-12-03 16:27:04 +01:00
DerLinkman
9950914086
core: improved docker compose version check
2025-12-03 16:26:22 +01:00
470cfb0026
chore(deps): update actions/stale action to v10.1.1 ( #6937 )
...
Signed-off-by: milkmaker <milkmaker@mailcow.de >
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-12-03 13:53:05 +01:00
6c106b4e4d
[Web] Updated lang.fr-fr.json ( #6936 )
...
Co-authored-by: Neuronnexion <support@nnx.com >
2025-12-02 16:40:36 +01:00
milkmaker and GitHub
3d6253a2b2
update postscreen_access.cidr ( #6933 )
2025-12-01 08:48:22 +01:00
b873812588
[Web] Updated lang.gr-gr.json ( #6930 )
...
Co-authored-by: ChD Computers <chdcomputers@gmail.com >
2025-11-29 13:20:02 +01:00
514fefd2ed
Translations update from Weblate ( #6924 )
...
* [Web] Updated lang.ca-es.json
Co-authored-by: Pere Montpeó <peremontpeo@gmail.com >
Co-authored-by: milkmaker <milkmaker@mailcow.de >
* [Web] Updated lang.gr-gr.json
Co-authored-by: Chris <chrismfz@gmail.com >
Co-authored-by: milkmaker <milkmaker@mailcow.de >
* [Web] Updated lang.cs-cz.json
Co-authored-by: Filip Hajny <filip@hajny.net >
* [Web] Updated lang.pl-pl.json
[Web] Updated lang.pl-pl.json
Co-authored-by: Monika Bark <rychert.monika@wp.pl >
Co-authored-by: milkmaker <milkmaker@mailcow.de >
---------
Co-authored-by: Pere Montpeó <peremontpeo@gmail.com >
Co-authored-by: Chris <chrismfz@gmail.com >
Co-authored-by: Filip Hajny <filip@hajny.net >
Co-authored-by: Monika Bark <rychert.monika@wp.pl >
2025-11-24 16:50:03 +01:00
6f9ee2d151
chore(deps): update actions/checkout action to v6 ( #6920 )
...
Signed-off-by: milkmaker <milkmaker@mailcow.de >
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-11-21 10:55:12 +01:00
9832006141
Translations update from Weblate ( #6916 )
...
* [Web] Updated lang.si-si.json
Co-authored-by: Matjaž Tekavec <matjaz@moj-svet.si >
* [Web] Updated lang.ru-ru.json
Co-authored-by: Habetdin <15926758+Habetdin@users.noreply.github.com >
* [Web] Updated lang.pl-pl.json
[Web] Updated lang.pl-pl.json
[Web] Updated lang.pl-pl.json
Co-authored-by: Monika Bark <rychert.monika@wp.pl >
Co-authored-by: Peter <magic@kthx.at >
Co-authored-by: milkmaker <milkmaker@mailcow.de >
---------
Co-authored-by: Matjaž Tekavec <matjaz@moj-svet.si >
Co-authored-by: Habetdin <15926758+Habetdin@users.noreply.github.com >
Co-authored-by: Monika Bark <rychert.monika@wp.pl >
Co-authored-by: Peter <magic@kthx.at >
2025-11-17 23:23:07 +01:00
0413d26855
Allow making spam aliases permanent ( #6888 )
...
* Allow making spam aliases permanent
* added german translation
* updated Spamalias Twig + Rename in Spam Alias
* compose: update image tags to align to vendor version
---------
Co-authored-by: DerLinkman <niklas.meyer@servercow.de >
2025-11-13 16:05:01 +01:00
Patrik Kernstock and GitHub
7b29c1f304
Disable nginx server_tokens in http context ( #6873 )
2025-11-13 15:19:11 +01:00
Patrik Kernstock and GitHub
ae3ef391ee
Remove deprecated 'X-XSS-Protection' header ( #6871 )
2025-11-13 15:16:44 +01:00
Peter and GitHub
7313f996d3
Update to trixie ( #6907 )
2025-11-13 15:16:00 +01:00
DerLinkman and GitHub
62d16c9e56
compose: changes cronjobs to regular cron syntax + fixed sogo creds for cronjobs ( #6866 )
...
* cron: restructure cron timer to time on second (instead of random)
* dovecot: fix clearance for cron.creds file
2025-11-13 14:59:49 +01:00
DerLinkman
674b41ce08
updated the Contributing Guidelines
2025-11-12 10:16:54 +01:00
1b833be760
Replace pigz with zstd for backup compression ( #6897 )
...
* Replace pigz with zstd for backup compression
This change replaces pigz (parallel gzip) with zstd (Zstandard) as the
compression algorithm for mailcow backups while maintaining full backward
compatibility with existing .tar.gz backups.
Benefits:
- Better compression ratios (12-37% improvement in tests)
- Improved compression speed with modern algorithm
- Maintains rsyncable functionality for incremental backups
- Full backward compatibility for restoring old .tar.gz backups
- Wide industry adoption and active development
Changes:
- Backup compression: pigz --rsyncable -p → zstd --rsyncable -T
- Backup decompression: pigz -d -p → zstd -d -T
- File extensions: .tar.gz → .tar.zst
- Added get_archive_info() function for intelligent format detection
- Updated backup Dockerfile to install zstd alongside pigz
- Restore function now auto-detects and handles both formats
- Updated FILE_SELECTION regex to recognize both .tar.zst and .tar.gz
- Updated comments to reflect new file extension
Backward Compatibility:
- Restore automatically detects .tar.zst (preferred) or .tar.gz (legacy)
- Existing .tar.gz backups can still be restored without issues
- pigz remains installed in backup image for legacy support
- Graceful fallback if backup file format not found
Testing:
- Added comprehensive test suite (test_backup_and_restore.sh)
- 12 automated tests covering all scenarios:
* Backup creation (both formats)
* Restore (both formats)
* Format detection and priority
* Error handling (missing files, empty dirs)
* Content integrity verification
* Multi-threading configuration
* Large file compression (8.59 MB realistic data)
Test Results:
✓ zstd compression working
✓ pigz compression working (legacy)
✓ zstd decompression working
✓ pigz decompression working (backward compatible)
✓ Archive detection working
✓ Content integrity verified
✓ Format priority correct (.tar.zst preferred)
✓ Error handling for missing files
✓ Error handling for empty directories
✓ Multi-threading configuration verified
✓ Large file compression: 37.05% improvement
✓ Small file compression: 12.18% improvement
* move testing script into development folder
---------
Co-authored-by: DerLinkman <niklas.meyer@servercow.de >
2025-11-12 10:06:36 +01:00
DerLinkman
88adb1adf5
remove dev docker volume from upstream
2025-11-12 09:54:35 +01:00
DerLinkman
ec472f13cf
sogo: removed URLDecrpytion by default, make it configurable in sogo.conf
2025-11-12 09:50:41 +01:00
FreddleSpl0itandGitHub
Paul Sütterlin
bluewalk
renovate[bot]andGitHub
AshitakaandGitHub
Khurram MalikandGitHub
Patrik KernstockandGitHub
