amorfo77/mailcow-dockerized
1
0
Fork 0
mirror of https://github.com/mailcow/mailcow-dockerized.git synced 2026-08-18 21:13:18 +00:00
Code Issues Projects Releases Wiki Activity
7,658 Commits 37 Branches 93 Tags
8abf453e1cbdc314977996ad7c3cdf7a961901f8
Commit Graph
1206 Commits
Author SHA1 Message Date
FreddleSpl0itandGitHub 2195a674ff Merge pull request #7290 from wryfi/7150-fix-passwd-verify 
Fix #7150: passwd-verify.lua wipes auth cache during any nginx outage
 2026-08-18 13:27:01 +02:00
FreddleSpl0itandGitHub 089c44aee1 Merge pull request #7334 from DerLinkman/feat/postfix-tlspol-update 
postfix-tlspol: upgrade to trixie + 1.11.0 update
 2026-08-18 13:20:16 +02:00
FreddleSpl0it 91d3b7246a [Web] Minor hardening across web UI and nginx 2026-08-18 09:08:17 +02:00
FreddleSpl0it feed5ad183 [Dovecot] Remove legacy DeltaChat auto-filing sieve rule 2026-08-17 08:35:53 +02:00
milkmakerandGitHub f7a536d634 update postscreen_access.cidr (#7394) 2026-08-04 18:35:48 +02:00
FreddleSpl0itandGitHub e406ecd461 Merge pull request #7387 from mailcow/fix/mfk25 
Hardening mailcow
 2026-07-30 09:07:10 +02:00
FreddleSpl0itandGitHub d51d06d716 Merge pull request #7343 from smpaz7467/fix/nginx-ipv6-default-server 
[Nginx] only bind IPv6 default_server when ENABLE_IPV6 is set
 2026-07-28 13:35:17 +02:00
oidipos c877fdf0a5 fix: remove MIME decoding of JSON encoded subject 
Since moving to rspamd's multipart metadata_exporter,
`subject` is a JSON encoded UTF-8 string and must not be MIME decoded.
 2026-07-24 21:03:00 +02:00
FreddleSpl0it ddd76d99cd [Web] Add sogo_auth_internal nginx marker for sogo-auth.php 2026-07-23 10:10:29 +02:00
Stephen RitzandClaude Opus 4.8 7dab6c63d1 [Nginx] only bind IPv6 default_server when ENABLE_IPV6 is set 
The HTTP-to-HTTPS redirect server block bound `listen [::]:{{ HTTP_PORT }}
default_server` unconditionally, while every other IPv6 listen directive in
this template is guarded by `{% if ENABLE_IPV6 %}`. On hosts where IPv6 is
disabled at the kernel level, nginx cannot bind `::` and fails to start.

This only triggers when HTTP_REDIRECT is enabled and ENABLE_IPV6 is false,
which is why it survives testing with ENABLE_IPV6=false alone.

Guard the directive like the other six IPv6 listeners in the template.

Refs #7296

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
 2026-07-14 14:54:28 -07:00
DerLinkman 0f06c8e563 postfix: prepare TLSRPT compatibility for tlspol 2026-07-13 19:34:58 +02:00
FreddleSpl0it 31e1550668 [Postfix] change postscreen blacklist_action to denylist_action 2026-07-13 08:45:56 +02:00
DerLinkman 3098caebbc migrate postfix to trixie 2026-07-10 18:29:45 +02:00
milkmakerandGitHub 1840074991 update postscreen_access.cidr (#7311) 2026-07-01 11:31:58 +02:00
Chris Haumesser ddcce811c1 Fixes #7150 (Dovecot passwd-verify.lua wipes auth cache during any nginx restart or unavailability) 
- distinguishes between text and numeric responses from nginx
  - prevents auth cache from being invalidated due to nginx unavailability
 2026-06-12 16:32:22 -06:00
FreddleSpl0it 24cc369d84 [Rspamd] Migrate metadata_exporter to multipart formatter 2026-06-11 09:34:27 +02:00
milkmakerandGitHub 03c31f825a update postscreen_access.cidr (#7269) 2026-06-09 12:20:53 +02:00
milkmakerandGitHub d42c3823c4 update postscreen_access.cidr (#7209) 2026-05-02 19:15:14 +02:00
milkmakerandGitHub dc15994d40 update postscreen_access.cidr (#7177) 2026-04-02 11:50:05 +02:00
FreddleSpl0it e848226062 [SOGo] Update paths from /usr/lib/ to /usr/local/lib/ 2026-03-06 16:26:13 +01:00
FreddleSpl0it dcbea71e67 [ACME] auto-create DNS-01 config template on startup 2026-03-04 11:42:40 +01:00
FreddleSpl0itandGitHub b695936273 Merge pull request #6912 from cjlapao/feat-acme-dns 
acme: add DNS challenges
 2026-03-03 14:23:28 +01:00
DocFraggleGitHubHailer, Christian <christian.hailer@interhyp.de>DocFraggle
 		5e478a32df Fix lua script sub-addressing (#7037) 
* Fix lua script sub-addressing

* Fix subject tagging in rspamd.local.lua as well

---------

Co-authored-by: Hailer, Christian <christian.hailer@interhyp.de>
Co-authored-by: DocFraggle <drfraggle@drfraggleshome.de>
 2026-03-02 15:49:11 +01:00
milkmakerandGitHub 22c94a4d2f update postscreen_access.cidr (#7084) 2026-03-01 13:30:57 +01:00
milkmakerandGitHub 0428f5c9bd update postscreen_access.cidr (#7042) 2026-02-01 22:45:03 +01:00
FreddleSpl0itandGitHub 82276cd1ca Merge pull request #7022 from mailcow/feat/eas-dav-access 
[Web] Allow admins to limit EAS and DAV access for mailbox users
 2026-01-28 09:54:47 +01:00
FreddleSpl0it 56ea4302ed [Web] Allow admins to limit EAS and DAV access for mailbox users 2026-01-28 09:49:33 +01:00
milkmakerandGitHub 71fa3ecebc update postscreen_access.cidr (#6987) 2026-01-07 17:22:01 +01:00
DerLinkmanandGitHub 67e7acd6bd rspamd: upgrade to 3.14.1, trixie rebuild + bcc forwarded hosts fix (#6958) 
* rspamd: fix bcc + subadress handling when using forward hosts

* rspamd: build against trixie + use version 3.14.1
 2025-12-11 09:45:56 +01:00
milkmakerandGitHub 3d6253a2b2 update postscreen_access.cidr (#6933) 2025-12-01 08:48:22 +01:00
Carlos 890295bbfc Add DNS-01 challenge support with configuration files and scripts 2025-11-14 07:10:17 +00:00
Patrik KernstockandGitHub 7b29c1f304 Disable nginx server_tokens in http context (#6873) 2025-11-13 15:19:11 +01:00
Patrik KernstockandGitHub ae3ef391ee Remove deprecated 'X-XSS-Protection' header (#6871) 2025-11-13 15:16:44 +01:00
DerLinkman ec472f13cf sogo: removed URLDecrpytion by default, make it configurable in sogo.conf 2025-11-12 09:50:41 +01:00
milkmakerandGitHub d3065612fd update postscreen_access.cidr (#6886) 2025-11-03 21:07:40 +01:00
FreddleSpl0it 9a806e64ce [PHP] remove opcache.revalidate_freq 2025-10-24 08:18:49 +02:00
FreddleSpl0it 22a09b9795 [PHP] re-add opcache.revalidate_freq setting 2025-10-23 15:16:24 +02:00
Patrik Kernstock a4970397f1 Disable PHP opcache.jit 2025-10-17 13:17:56 +02:00
FreddleSpl0itandGitHub 653fc40d4c Merge pull request #6783 from patschi/phpfpm-moar-speeeed 
Optimize phpfpm opcache: more aggressive caching, enable JIT
 2025-10-13 11:43:07 +02:00
milkmakerandGitHub 796e131c3a update postscreen_access.cidr (#6801) 2025-10-01 11:14:57 +02:00
Patrik Kernstock d06d23bbaf Fix several SQL statements 2025-09-26 14:58:04 +02:00
Patrik Kernstock 2f8a181281 Fix comments, added some comments 2025-09-26 04:16:57 +02:00
Patrik Kernstock 83ba8d5840 Optimize opcache settings, enable JIT 2025-09-26 04:01:17 +02:00
patr_GitHubpatr_
 		84e230de8f [Nginx] fix: Disable IPv6 support in Nginx configuration (#6736) 
Co-authored-by: patr_ <patbernh@gmail.com>
 2025-09-12 11:17:18 +02:00
FreddleSpl0it 13f7f9830b Prevent user login if protocol access has been disabled 2025-09-09 12:11:19 +02:00
FreddleSpl0it 8d7235b535 [RSPAMD] Add boundary if present when applying domain-wide footer 2025-09-09 10:52:19 +02:00
FreddleSpl0it f67c0530f5 [Rspamd][Web] Internal alias support 2025-09-09 10:37:54 +02:00
Dmitriy AlekseevandGitHub 06db1d6a72 [Rspamd] Do not increment rate limit for emails from user to himself (#6706) 
* [Rspamd] Do not increment rate limit for emails from user to himself

* Lowercase username and recipient address for comparison

Normalize username and recipient address comparison to lowercase.
 2025-09-05 03:37:59 +02:00
milkmakerandGitHub dbde144014 update postscreen_access.cidr (#6703) 2025-09-03 08:14:14 +02:00
DerLinkman 6c5d82c4df expanded postscreen whitelist with modern freemailers + included checks.mailcow.email 2025-08-28 14:06:17 +02:00