FreddleSpl0it
1c7c328a2a
[Web][Netfilter] Fix netban limits, no negative ban times, save lists atomically, check banlist id
2026-10-27 12:53:01 +01:00
FreddleSpl0it
7457fd59aa
[Web][Dovecot] Do not count logins as failed while the identity provider is unavailable
2026-10-27 12:46:24 +01:00
FreddleSpl0it
15042e5921
[Web] Add mailbox group and identity provider translations
2026-10-27 10:21:11 +01:00
FreddleSpl0it
3959e311a0
[Web] Add API Documentation for mailbox groups and identity provider sync
2026-10-27 10:20:24 +01:00
FreddleSpl0it
2c5718c9c9
[Web][Dovecot][SOGo][DockerApi] Add mailbox groups, shared mailboxes and identity provider sync
2026-10-27 10:01:33 +01:00
FreddleSpl0it
8bc8fbdd2c
[Web] Add API Documentation for API keys
2026-10-23 11:23:38 +02:00
FreddleSpl0it
f63042bbaf
[Web] Bind API sessions to their key
2026-10-23 11:22:32 +02:00
FreddleSpl0it
4828f0cf64
[Web] Restrict read-only API sessions
2026-10-23 11:21:45 +02:00
FreddleSpl0it
40488b2120
[Web] Add API key translations
2026-10-23 11:21:05 +02:00
FreddleSpl0it
0dadf49934
[Web] Rework API keys: multiple read-only/read-write keys, service keys from mailcow.conf
2026-10-23 11:20:17 +02:00
FreddleSpl0it
c145f858e2
[Web][Dovecot] imapsync: update to 2.314, refresh OAuth tokens of running jobs, add source presets
2026-10-22 18:27:49 +02:00
FreddleSpl0it
474f1c688b
[Web] Add imapsync translations
2026-10-22 10:09:42 +02:00
FreddleSpl0it
7c62a57910
[Web][Dovecot] Rework imapsync: sync sources, OAuth2 (XOAUTH2), worker pool, Python runner
2026-10-22 10:07:52 +02:00
FreddleSpl0it
b2a152fe45
[Web] Add Mailcow\ class structure and imapsync module classes
2026-10-22 10:07:43 +02:00
milkmaker and Schwindelhub
ca8546fa4a
[Web] Updated lang.de-de.json ( #7527 )
...
Co-authored-by: Schwindelhub <github@netbla.de >
2026-10-20 20:34:32 +02:00
milkmaker and Matjaž Tekavec
6f6edfb85e
[Web] Updated lang.si-si.json ( #7525 )
...
Co-authored-by: Matjaž Tekavec <matjaz@moj-svet.si >
2026-10-19 18:40:37 +02:00
FreddleSpl0it
4a29767a31
[Web] Add role color marker and icons to login pages
2026-10-15 15:23:29 +02:00
FreddleSpl0it
cd29426933
[Web] Fix minor customize and theme ui issues
2026-10-15 15:15:42 +02:00
FreddleSpl0it
37be306f1c
[Web] change default theme label
2026-10-15 15:10:49 +02:00
FreddleSpl0it
a351017455
[Web] Update bootstrap-select css to 1.14.0-beta3
2026-10-15 14:47:19 +02:00
FreddleSpl0it
887b8a3594
[Web] Add servercow theme
2026-10-15 14:46:57 +02:00
FreddleSpl0it
571c1b5b29
[Web] Update Bootstrap to 5.3.8, add theme support
2026-10-15 14:43:06 +02:00
milkmaker and Stefano
fe4e675754
[Web] Updated lang.it-it.json ( #7460 )
...
Co-authored-by: Stefano <stefano.vassena@gmail.com >
2026-09-09 22:28:28 +02:00
b05f59b705
Translations update from Weblate ( #7457 )
...
* [Web] Updated lang.si-si.json
Co-authored-by: Matjaž Tekavec <matjaz@moj-svet.si >
Co-authored-by: milkmaker <milkmaker@mailcow.de >
* [Web] Updated lang.zh-cn.json
Co-authored-by: 雨 <luotianyi@luotianyi.me >
---------
Co-authored-by: Matjaž Tekavec <matjaz@moj-svet.si >
Co-authored-by: 雨 <luotianyi@luotianyi.me >
2026-09-07 21:38:12 +02:00
7ec61fde8a
Translations update from Weblate ( #7431 )
...
* [Web] Updated lang.it-it.json
Co-authored-by: Claudio <cb@bastard.it >
* [Web] Updated lang.si-si.json
Co-authored-by: Matjaž Tekavec <matjaz@moj-svet.si >
---------
Co-authored-by: Claudio <cb@bastard.it >
Co-authored-by: Matjaž Tekavec <matjaz@moj-svet.si >
2026-08-19 20:23:04 +02:00
FreddleSpl0it
d80b15b06c
Merge pull request #7376 from smpaz7467/fix/extended-sender-acl-authsource
...
[Web] show external sender addresses regardless of authsource
2026-08-18 14:41:20 +02:00
FreddleSpl0it
ed4fe41d7a
Merge pull request #7349 from smpaz7467/fix/login-redirect-deeplink
...
[Web] redirect deep links to the matching login page
2026-08-18 14:37:32 +02:00
FreddleSpl0it
6b9d875773
Merge pull request #7347 from smpaz7467/fix/dns-zonefile-absolute-rhs
...
[Web] use absolute RHS names in generated DNS zonefile
2026-08-18 14:30:50 +02:00
FreddleSpl0it
4d5b9d1c80
Merge pull request #7342 from FrauJulian/feat/show-password
...
[Web] Add show/hide password toggle on login pages
2026-08-18 14:25:22 +02:00
FreddleSpl0it
8abf453e1c
Merge pull request #7428 from mailcow/feat/forbid-external-alias
...
[Web] Add ACL + global switch to disable external alias goto
2026-08-18 14:13:39 +02:00
FreddleSpl0it
8bd9e12a73
[Web] Add ACL + global switch to disable external alias goto
2026-08-18 14:07:37 +02:00
FreddleSpl0it
c665d430de
Merge pull request #7344 from smpaz7467/fix/forced-pw-change-raw-lang-key
...
[Web] translate password errors in the forced password change modal
2026-08-18 13:31:35 +02:00
FreddleSpl0it
91d3b7246a
[Web] Minor hardening across web UI and nginx
2026-08-18 09:08:17 +02:00
d1a2f4e168
Translations update from Weblate ( #7400 )
...
* [Web] Updated lang.si-si.json
Co-authored-by: Matjaž Tekavec <matjaz@moj-svet.si >
Co-authored-by: milkmaker <milkmaker@mailcow.de >
* [Web] Updated lang.pt-br.json
Co-authored-by: André Glazastov <andre@glazastov.com >
---------
Co-authored-by: Matjaž Tekavec <matjaz@moj-svet.si >
Co-authored-by: André Glazastov <andre@glazastov.com >
2026-08-04 18:37:38 +02:00
FreddleSpl0it
d64c923aca
[ACME] Skip mta-sts certificate request when MTA-STS is not active for a domain
2026-07-30 10:33:55 +02:00
FreddleSpl0it
2d5f166ba8
Merge pull request #7389 from mailcow/fix/default-mbox-template
...
[Web] Create default mailbox template with eas and dav access
2026-07-30 09:23:24 +02:00
FreddleSpl0it
94b5a623ab
Merge pull request #7388 from mailcow/fix/7329
...
[Web] Move mailcow update check to server side
2026-07-30 09:13:19 +02:00
FreddleSpl0it
e406ecd461
Merge pull request #7387 from mailcow/fix/mfk25
...
Hardening mailcow
2026-07-30 09:07:10 +02:00
FreddleSpl0it
36c70db86c
[Web] harden CORS origin matching and add Vary: Origin
2026-07-30 08:37:18 +02:00
Stephen Ritz
9cd16f0001
[Web] show external sender addresses regardless of authsource
...
The extended_sender_acl field sat inside the
`{% if not result.authsource or result.authsource == 'mailcow' %}` block
that hides the local password fields for mailboxes authenticating against
an external identity provider. As a result the "External sender addresses"
input was not rendered at all for keycloak / generic-oidc / ldap mailboxes,
even for a full admin, so those addresses could neither be reviewed nor
edited in the UI while the underlying sender_acl rows stayed active.
Extended sender ACLs are unrelated to local password management. Move the
field out of that block; it stays gated by acl.extend_sender_acl as intended.
Fixes #7365
2026-07-28 07:12:17 -07:00
FreddleSpl0it
f4961c4023
Merge pull request #7333 from fallmo/fix/cors-settings-validation
...
fix: cors allowed origins settings validation
2026-07-28 15:35:29 +02:00
FreddleSpl0it
f44bd2f36a
[Web] document sender_acl in get/mailbox API examples
2026-07-28 14:19:45 +02:00
FreddleSpl0it
95a77f2dcb
Merge pull request #7348 from smpaz7467/fix/api-get-mailbox-sender-acl
...
[Web] return sender_acl in get/mailbox API
2026-07-28 14:12:57 +02:00
FreddleSpl0it
54170d075a
[Web] Move mailcow update check to server side
2026-07-28 13:32:18 +02:00
FreddleSpl0it
e245ac04d9
[Web] enforce tenant boundary for SOGo SSO
2026-07-28 09:21:29 +02:00
FreddleSpl0it
fea38c8e1b
[Web] escape mailbox name
2026-07-24 11:16:39 +02:00
FreddleSpl0it
cc9af65852
[Web] remove domain admin sso token after use
2026-07-24 10:26:23 +02:00
FreddleSpl0it
92cc8bec90
[Web] Use parameterized LIKE for sogo_acl deletion
2026-07-23 15:29:41 +02:00
FreddleSpl0it
145745329e
[Web] add dot stuffing for quarantine raw release
2026-07-23 15:01:44 +02:00
FreddleSpl0it
8e72d22c56
[Web] Escape rspamd_history and rllog
2026-07-23 11:17:55 +02:00