From 0f0a2be736ca0f78116f08232492c83679d0f09f Mon Sep 17 00:00:00 2001 From: Dimitri Huisman Date: Sat, 1 Jan 2022 12:35:53 +0000 Subject: [PATCH] Update CHANGELOG.md with items that were not added by mistake. --- CHANGELOG.md | 33 ++++++++++++++++++++++++ towncrier/newsfragments/1154.enhancement | 1 - towncrier/newsfragments/1638.fix | 1 - towncrier/newsfragments/1705.enhancement | 1 - towncrier/newsfragments/1922.enhancement | 5 ---- towncrier/newsfragments/1929.enhancement | 10 ------- towncrier/newsfragments/1992.enhancement | 3 --- towncrier/newsfragments/1996.enhancement | 1 - towncrier/newsfragments/2002.enhancement | 1 - towncrier/newsfragments/2007.enhancement | 1 - towncrier/newsfragments/2017.enhancement | 1 - towncrier/newsfragments/2035.enhancement | 1 - towncrier/newsfragments/2072.enhancement | 1 - towncrier/newsfragments/2078.fix | 1 - towncrier/newsfragments/2079.fix | 2 -- towncrier/newsfragments/2093.fix | 1 - towncrier/newsfragments/2102.fix | 1 - towncrier/newsfragments/2106.fix | 1 - towncrier/newsfragments/224.enhancement | 1 - 19 files changed, 33 insertions(+), 34 deletions(-) delete mode 100644 towncrier/newsfragments/1154.enhancement delete mode 100644 towncrier/newsfragments/1638.fix delete mode 100644 towncrier/newsfragments/1705.enhancement delete mode 100644 towncrier/newsfragments/1922.enhancement delete mode 100644 towncrier/newsfragments/1929.enhancement delete mode 100644 towncrier/newsfragments/1992.enhancement delete mode 100644 towncrier/newsfragments/1996.enhancement delete mode 100644 towncrier/newsfragments/2002.enhancement delete mode 100644 towncrier/newsfragments/2007.enhancement delete mode 100644 towncrier/newsfragments/2017.enhancement delete mode 100644 towncrier/newsfragments/2035.enhancement delete mode 100644 towncrier/newsfragments/2072.enhancement delete mode 100644 towncrier/newsfragments/2078.fix delete mode 100644 towncrier/newsfragments/2079.fix delete mode 100644 towncrier/newsfragments/2093.fix delete mode 100644 towncrier/newsfragments/2102.fix delete mode 100644 towncrier/newsfragments/2106.fix delete mode 100644 towncrier/newsfragments/224.enhancement diff --git a/CHANGELOG.md b/CHANGELOG.md index e260e884..14a48f19 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -20,6 +20,32 @@ After changing mailu.env, it is required to recreate all containers for the chan Please note that the shipped image for PostgreSQL database is fully deprecated now. To migrate to the official PostgreSQL image, you can follow our guide [here](https://mailu.io/master/database.html#mailu-postgresql) 1.9.0 - 2021-12-28 +- Features: Document how to setup client autoconfig using an override ([#224](https://github.com/Mailu/Mailu/issues/224)) +- Features: Add support for timezones ([#1154](https://github.com/Mailu/Mailu/issues/1154)) +- Features: Ensure that RCVD_NO_TLS_LAST doesn't add to the spam score (as TLS usage can't be determined) ([#1705](https://github.com/Mailu/Mailu/issues/1705)) +- Features: Add support for ECDSA certificates when letsencrypt is used. This means dropping compatibility for android < 4.1.1 + Add LETSENCRYPT_SHORTCHAIN to your configuration to avoid sending ISRG Root X1 (this will break compatibility with android < 7.1.1) + Disable AUTH command on port 25 + Disable TLS tickets, reconfigure the cache to improve Forward Secrecy + Prevent clear-text credentials from being sent to relays ([#1922](https://github.com/Mailu/Mailu/issues/1922)) +- Features: Improved the SSO page. Warning! The new endpoints /sso and /static are introduced. + These endpoints are now used for handling sign on requests and shared static files. + You may want to update your reverse proxy to proxy /sso and /static to Mailu (to the front service). + The example section of using a reverse proxy is updated with this information. + - New SSO page is used for logging in Admin or Webmail. + - Made SSO page available separately. SSO page can now be used without Admin accessible (ADMIN=false). + - Introduced stub /static which is used by all sites for accessing static files. + - Removed the /admin/ prefix to reduce complexity of routing with Mailu. Admin is accessible directly via /admin instead of /admin/ui + Note: Failed logon attempts are logged in the logs of admin. You can watch this with fail2ban. ([#1929](https://github.com/Mailu/Mailu/issues/1929)) +- Features: Make unbound work with ipv6 + Add a cache-min-ttl of 5minutes + Enable qname minimisation (privacy) ([#1992](https://github.com/Mailu/Mailu/issues/1992)) +- Features: Disable the login page if SESSION_COOKIE_SECURE is incompatible with how Mailu is accessed as this seems to be a common misconfiguration. ([#1996](https://github.com/Mailu/Mailu/issues/1996)) +- Features: Derive a new subkey (from SECRET_KEY) for SRS ([#2002](https://github.com/Mailu/Mailu/issues/2002)) +- Features: allow sending emails as user+detail@domain.tld ([#2007](https://github.com/Mailu/Mailu/issues/2007)) +- Features: rspamd: get dkim keys via REST API instead of filesystem ([#2017](https://github.com/Mailu/Mailu/issues/2017)) +- Features: updated roundcube to 1.5 and carddav to 4.2.2 using php8 ([#2035](https://github.com/Mailu/Mailu/issues/2035)) +- Features: use dovecot-fts-xapian from alpine package ([#2072](https://github.com/Mailu/Mailu/issues/2072)) - Features: Make the rate limit apply to a subnet rather than a specific IP (/24 for v4 and /56 for v6) ([#116](https://github.com/Mailu/Mailu/issues/116)) - Features: Add instructions on how to create DNS records for email client auto-configuration (RFC6186 style) ([#224](https://github.com/Mailu/Mailu/issues/224)) - Features: Remove the Received header with PRIMARY_HOSTNAME [PUBLIC_IP] ([#466](https://github.com/Mailu/Mailu/issues/466)) @@ -118,6 +144,13 @@ Please note that the shipped image for PostgreSQL database is fully deprecated n - Bugfixes: The DB_PORT and ROUNDCUBE_DB_PORT environment variables were not actually used. They are removed from the documentation. For using different ports you can already use the notation host:port . ([#2073](https://github.com/Mailu/Mailu/issues/2073)) - Bugfixes: Ensure that webmail tokens expire in sync with sessions ([#2080](https://github.com/Mailu/Mailu/issues/2080)) - Bugfixes: Introduce SESSION_TIMEOUT (1h) and PERMANENT_SESSION_LIFETIME (30d) ([#2094](https://github.com/Mailu/Mailu/issues/2094)) +- Bugfixes: Hide the login of the user in sent emails ([#1638](https://github.com/Mailu/Mailu/issues/1638)) +- Bugfixes: SSO login page to webmail did not work if WEB_WEBMAIL=/ was set. ([#2078](https://github.com/Mailu/Mailu/issues/2078)) +- Bugfixes: #2079 Webmail token check does not work if WEBMAIL_ADDRESS is set to a hostname. + #2081 Fix typo in nginx config for webmail port (10043 to 10143) ([#2079](https://github.com/Mailu/Mailu/issues/2079)) +- Bugfixes: Alias, relay and fetchmail lists in the admin interface were missing the edit button. ([#2093](https://github.com/Mailu/Mailu/issues/2093)) +- Bugfixes: Fix bug introduced by enhanced session management ([#2098](https://github.com/Mailu/Mailu/issues/2102)) +- Bugfixes: Fix build dependencies postfix-mta-sts-resolver. ([#2106](https://github.com/Mailu/Mailu/issues/2106)) - Improved Documentation: Document hardware requirements when using clamav. Clamav requires **at least** 2GB of memory. This 2Gb does not entail any other software running on the box. diff --git a/towncrier/newsfragments/1154.enhancement b/towncrier/newsfragments/1154.enhancement deleted file mode 100644 index d19b3d09..00000000 --- a/towncrier/newsfragments/1154.enhancement +++ /dev/null @@ -1 +0,0 @@ -Add support for timezones \ No newline at end of file diff --git a/towncrier/newsfragments/1638.fix b/towncrier/newsfragments/1638.fix deleted file mode 100644 index 9a87e41e..00000000 --- a/towncrier/newsfragments/1638.fix +++ /dev/null @@ -1 +0,0 @@ -Hide the login of the user in sent emails diff --git a/towncrier/newsfragments/1705.enhancement b/towncrier/newsfragments/1705.enhancement deleted file mode 100644 index 9a6cb11a..00000000 --- a/towncrier/newsfragments/1705.enhancement +++ /dev/null @@ -1 +0,0 @@ -Ensure that RCVD_NO_TLS_LAST doesn't add to the spam score (as TLS usage can't be determined) diff --git a/towncrier/newsfragments/1922.enhancement b/towncrier/newsfragments/1922.enhancement deleted file mode 100644 index 4b01fa88..00000000 --- a/towncrier/newsfragments/1922.enhancement +++ /dev/null @@ -1,5 +0,0 @@ -Add support for ECDSA certificates when letsencrypt is used. This means dropping compatibility for android < 4.1.1 -Add LETSENCRYPT_SHORTCHAIN to your configuration to avoid sending ISRG Root X1 (this will break compatibility with android < 7.1.1) -Disable AUTH command on port 25 -Disable TLS tickets, reconfigure the cache to improve Forward Secrecy -Prevent clear-text credentials from being sent to relays diff --git a/towncrier/newsfragments/1929.enhancement b/towncrier/newsfragments/1929.enhancement deleted file mode 100644 index 12c4f607..00000000 --- a/towncrier/newsfragments/1929.enhancement +++ /dev/null @@ -1,10 +0,0 @@ -Improved the SSO page. Warning! The new endpoints /sso and /static are introduced. -These endpoints are now used for handling sign on requests and shared static files. -You may want to update your reverse proxy to proxy /sso and /static to Mailu (to the front service). -The example section of using a reverse proxy is updated with this information. - - New SSO page is used for logging in Admin or Webmail. - - Made SSO page available separately. SSO page can now be used without Admin accessible (ADMIN=false). - - Introduced stub /static which is used by all sites for accessing static files. - - Removed the /admin/ prefix to reduce complexity of routing with Mailu. Admin is accessible directly via /admin instead of /admin/ui -Note: Failed logon attempts are logged in the logs of admin. You can watch this with fail2ban. - diff --git a/towncrier/newsfragments/1992.enhancement b/towncrier/newsfragments/1992.enhancement deleted file mode 100644 index 56a11538..00000000 --- a/towncrier/newsfragments/1992.enhancement +++ /dev/null @@ -1,3 +0,0 @@ -Make unbound work with ipv6 -Add a cache-min-ttl of 5minutes -Enable qname minimisation (privacy) diff --git a/towncrier/newsfragments/1996.enhancement b/towncrier/newsfragments/1996.enhancement deleted file mode 100644 index d1bc2ccf..00000000 --- a/towncrier/newsfragments/1996.enhancement +++ /dev/null @@ -1 +0,0 @@ -Disable the login page if SESSION_COOKIE_SECURE is incompatible with how Mailu is accessed as this seems to be a common misconfiguration. diff --git a/towncrier/newsfragments/2002.enhancement b/towncrier/newsfragments/2002.enhancement deleted file mode 100644 index bd025141..00000000 --- a/towncrier/newsfragments/2002.enhancement +++ /dev/null @@ -1 +0,0 @@ -Derive a new subkey (from SECRET_KEY) for SRS diff --git a/towncrier/newsfragments/2007.enhancement b/towncrier/newsfragments/2007.enhancement deleted file mode 100644 index 802e6d36..00000000 --- a/towncrier/newsfragments/2007.enhancement +++ /dev/null @@ -1 +0,0 @@ -allow sending emails as user+detail@domain.tld diff --git a/towncrier/newsfragments/2017.enhancement b/towncrier/newsfragments/2017.enhancement deleted file mode 100644 index 076914d2..00000000 --- a/towncrier/newsfragments/2017.enhancement +++ /dev/null @@ -1 +0,0 @@ -rspamd: get dkim keys via REST API instead of filesystem diff --git a/towncrier/newsfragments/2035.enhancement b/towncrier/newsfragments/2035.enhancement deleted file mode 100644 index 91345cbd..00000000 --- a/towncrier/newsfragments/2035.enhancement +++ /dev/null @@ -1 +0,0 @@ -updated roundcube to 1.5 and carddav to 4.2.2 using php8 diff --git a/towncrier/newsfragments/2072.enhancement b/towncrier/newsfragments/2072.enhancement deleted file mode 100644 index 48275dff..00000000 --- a/towncrier/newsfragments/2072.enhancement +++ /dev/null @@ -1 +0,0 @@ -use dovecot-fts-xapian from alpine package diff --git a/towncrier/newsfragments/2078.fix b/towncrier/newsfragments/2078.fix deleted file mode 100644 index 2a05e5f4..00000000 --- a/towncrier/newsfragments/2078.fix +++ /dev/null @@ -1 +0,0 @@ -SSO login page to webmail did not work if WEB_WEBMAIL=/ was set. \ No newline at end of file diff --git a/towncrier/newsfragments/2079.fix b/towncrier/newsfragments/2079.fix deleted file mode 100644 index 82350ff6..00000000 --- a/towncrier/newsfragments/2079.fix +++ /dev/null @@ -1,2 +0,0 @@ -#2079 Webmail token check does not work if WEBMAIL_ADDRESS is set to a hostname. -#2081 Fix typo in nginx config for webmail port (10043 to 10143) \ No newline at end of file diff --git a/towncrier/newsfragments/2093.fix b/towncrier/newsfragments/2093.fix deleted file mode 100644 index 68bfcec5..00000000 --- a/towncrier/newsfragments/2093.fix +++ /dev/null @@ -1 +0,0 @@ -Alias, relay and fetchmail lists in the admin interface were missing the edit button. diff --git a/towncrier/newsfragments/2102.fix b/towncrier/newsfragments/2102.fix deleted file mode 100644 index 94196122..00000000 --- a/towncrier/newsfragments/2102.fix +++ /dev/null @@ -1 +0,0 @@ -Fix bug introduced by enhanced session management (PR #2098) diff --git a/towncrier/newsfragments/2106.fix b/towncrier/newsfragments/2106.fix deleted file mode 100644 index ca2a4014..00000000 --- a/towncrier/newsfragments/2106.fix +++ /dev/null @@ -1 +0,0 @@ -Fix build dependencies postfix-mta-sts-resolver. \ No newline at end of file diff --git a/towncrier/newsfragments/224.enhancement b/towncrier/newsfragments/224.enhancement deleted file mode 100644 index 9e4edccf..00000000 --- a/towncrier/newsfragments/224.enhancement +++ /dev/null @@ -1 +0,0 @@ -Document how to setup client autoconfig using an override