diff --git a/CHANGELOG.md b/CHANGELOG.md index 5e793564..e413e7d3 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -10,7 +10,7 @@ These settings tell Mailu that the HTTP header with the remote client IP address For more information see the [configuration reference](https://mailu.io/1.9/configuration.html#advanced-settings). One major change for the docker compose file is that the antispam container needs a fixed hostname [#1837](https://github.com/Mailu/Mailu/issues/1837). -This is handled when you regenerate the docker-compose file. A fixed hostname is required to retain rspamd history. +This is handled when you regenerate the docker compose file. A fixed hostname is required to retain rspamd history. After changing mailu.env, it is required to recreate all containers for the changes to be propagated. @@ -314,8 +314,8 @@ v1.6.0 - 2019-01-18 - Enhancement: Reverse proxy - Real ip header and mail-letsencrypt ([#358](https://github.com/Mailu/Mailu/issues/358)) - Enhancement: Parametrize hosts ([#373](https://github.com/Mailu/Mailu/issues/373)) - Enhancement: Expose ports in dockerfiles ([#392](https://github.com/Mailu/Mailu/issues/392)) -- Enhancement: Added webmail-imap dependency in docker-compose ([#403](https://github.com/Mailu/Mailu/issues/403)) -- Enhancement: Add environment variables to allow running outside of docker-compose ([#429](https://github.com/Mailu/Mailu/issues/429)) +- Enhancement: Added webmail-imap dependency in docker compose ([#403](https://github.com/Mailu/Mailu/issues/403)) +- Enhancement: Add environment variables to allow running outside of docker compose ([#429](https://github.com/Mailu/Mailu/issues/429)) - Enhancement: Add original Delivered-To header to received messages ([#433](https://github.com/Mailu/Mailu/issues/433)) - Enhancement: Use HOST_ADMIN in "Forwarding authentication server" ([#436](https://github.com/Mailu/Mailu/issues/436), [#437](https://github.com/Mailu/Mailu/issues/437)) - Enhancement: Use POD_ADDRESS_RANGE for Dovecot ([#448](https://github.com/Mailu/Mailu/issues/448)) diff --git a/ISSUE_TEMPLATE.md b/ISSUE_TEMPLATE.md index 7c05deae..fbc83ffb 100644 --- a/ISSUE_TEMPLATE.md +++ b/ISSUE_TEMPLATE.md @@ -19,7 +19,7 @@ Please put your text outside of the comment blocks to be visible. You can use th ### Environment -- [ ] docker-compose +- [ ] docker compose - [ ] kubernetes - [ ] docker swarm @@ -61,7 +61,7 @@ Just saying "it doesn’t work as expected" is not useful. It's also helpful to Often it is very useful to include log fragments of the involved component. You can get the logs via `docker logs --tail 1000`. For example for the admin container: `docker logs mailu_admin_1 --tail 1000` -or using docker-compose `docker-compose -f /mailu/docker-compose.yml logs --tail 1000 admin` +or using docker compose `docker compose -f /mailu/docker-compose.yml logs --tail 1000 admin` If you can find the relevant section, please share only the parts that seem relevant. If you have any logs, please enclose them in code tags, like so: diff --git a/RELEASE_TEMPLATE.md b/RELEASE_TEMPLATE.md index 45641c2f..1455b883 100644 --- a/RELEASE_TEMPLATE.md +++ b/RELEASE_TEMPLATE.md @@ -1,5 +1,5 @@ This is a new automatic release of Mailu. The new version can be seen in the tag name. -The main version X.Y (e.g. 1.9) will always reflect the latest version of the branch. To update your Mailu installation simply pull the latest images `docker-compose pull && docker-compose up -d`. +The main version X.Y (e.g. 1.9) will always reflect the latest version of the branch. To update your Mailu installation simply pull the latest images `docker compose pull && docker compose up -d`. The pinned version X.Y.Z (e.g. 1.9.1) is not updated. It is pinned to the commit that was used for creating this release. You can use a pinned version to make sure your Mailu installation is not suddenly updated when recreating containers. The pinned version allows the user to manually update. It also allows to go back to a previous pinned version. To check what was changed: diff --git a/core/admin/mailu/translations/cs/LC_MESSAGES/messages.po b/core/admin/mailu/translations/cs/LC_MESSAGES/messages.po new file mode 100644 index 00000000..d4df9446 --- /dev/null +++ b/core/admin/mailu/translations/cs/LC_MESSAGES/messages.po @@ -0,0 +1,733 @@ +# Czech translations for Mailu.io. +# Copyright (C) 2023 S474N +# This file is distributed under the same license as the PROJECT project. +# S474N , 2023. +# +msgid "" +msgstr "" +"Project-Id-Version: PROJECT VERSION\n" +"Report-Msgid-Bugs-To: translate@s474n.com\n" +"POT-Creation-Date: 2022-05-22 18:47+0200\n" +"PO-Revision-Date: 2023-02-21 16:14+0100\n" +"Last-Translator: S474N \n" +"Language-Team: Czech\n" +"Language: cs_CZ\n" +"MIME-Version: 1.0\n" +"Content-Type: text/plain; charset=UTF-8\n" +"Content-Transfer-Encoding: 8bit\n" +"Plural-Forms: nplurals=3; plural=(n==1 ? 0 : n>=2 && n<=4 ? 1 : 2);\n" +"Generated-By: Babel 2.3.4\n" +"X-Generator: Poedit 3.2.2\n" + +#: mailu/sso/forms.py:8 mailu/ui/forms.py:79 +msgid "E-mail" +msgstr "E-mail" + +#: mailu/sso/forms.py:9 mailu/ui/forms.py:80 mailu/ui/forms.py:93 +#: mailu/ui/forms.py:112 mailu/ui/forms.py:166 +#: mailu/ui/templates/client.html:32 mailu/ui/templates/client.html:57 +msgid "Password" +msgstr "Heslo" + +#: mailu/sso/forms.py:10 mailu/sso/forms.py:11 mailu/sso/templates/login.html:4 +#: mailu/ui/templates/sidebar.html:142 +msgid "Sign in" +msgstr "Přihlásit se" + +#: mailu/sso/templates/base_sso.html:8 mailu/ui/templates/base.html:8 +msgid "Admin page for" +msgstr "Admin stránka pro" + +#: mailu/sso/templates/base_sso.html:19 mailu/ui/templates/base.html:19 +msgid "toggle sidebar" +msgstr "přepnout postranní panel" + +#: mailu/sso/templates/base_sso.html:37 mailu/ui/templates/base.html:37 +msgid "change language" +msgstr "změnit jazyk" + +#: mailu/sso/templates/sidebar_sso.html:4 mailu/ui/templates/sidebar.html:94 +msgid "Go to" +msgstr "Jít" + +#: mailu/sso/templates/sidebar_sso.html:9 mailu/ui/templates/client.html:4 +#: mailu/ui/templates/sidebar.html:50 mailu/ui/templates/sidebar.html:107 +msgid "Client setup" +msgstr "Nastavení klienta" + +#: mailu/sso/templates/sidebar_sso.html:16 mailu/ui/templates/sidebar.html:114 +msgid "Website" +msgstr "Webová stránka" + +#: mailu/sso/templates/sidebar_sso.html:22 mailu/ui/templates/sidebar.html:120 +msgid "Help" +msgstr "Pomoc" + +#: mailu/sso/templates/sidebar_sso.html:35 +#: mailu/ui/templates/domain/signup.html:4 mailu/ui/templates/sidebar.html:127 +msgid "Register a domain" +msgstr "Registrovat doménu" + +#: mailu/sso/templates/sidebar_sso.html:49 mailu/ui/forms.py:95 +#: mailu/ui/templates/sidebar.html:149 mailu/ui/templates/user/signup.html:4 +#: mailu/ui/templates/user/signup_domain.html:4 +msgid "Sign up" +msgstr "Registrovat se" + +#: mailu/ui/forms.py:33 mailu/ui/forms.py:36 +msgid "Invalid email address." +msgstr "Špatná mailová adresa." + +#: mailu/ui/forms.py:45 +msgid "Confirm" +msgstr "Potvrdit" + +#: mailu/ui/forms.py:48 mailu/ui/forms.py:58 +#: mailu/ui/templates/domain/details.html:26 +#: mailu/ui/templates/domain/list.html:19 mailu/ui/templates/relay/list.html:18 +msgid "Domain name" +msgstr "Název domény" + +#: mailu/ui/forms.py:49 +msgid "Maximum user count" +msgstr "Maximální počet uživatelů" + +#: mailu/ui/forms.py:50 +msgid "Maximum alias count" +msgstr "Maximální počet aliasů" + +#: mailu/ui/forms.py:51 +msgid "Maximum user quota" +msgstr "Maximální uživatelská kvóta" + +#: mailu/ui/forms.py:52 +msgid "Enable sign-up" +msgstr "Povolit registraci" + +#: mailu/ui/forms.py:53 mailu/ui/forms.py:74 mailu/ui/forms.py:86 +#: mailu/ui/forms.py:132 mailu/ui/forms.py:144 +#: mailu/ui/templates/alias/list.html:22 mailu/ui/templates/domain/list.html:22 +#: mailu/ui/templates/relay/list.html:20 mailu/ui/templates/token/list.html:20 +#: mailu/ui/templates/user/list.html:24 +msgid "Comment" +msgstr "Komentář" + +#: mailu/ui/forms.py:54 mailu/ui/forms.py:68 mailu/ui/forms.py:75 +#: mailu/ui/forms.py:88 mailu/ui/forms.py:136 mailu/ui/forms.py:145 +msgid "Save" +msgstr "Uložit" + +#: mailu/ui/forms.py:59 +msgid "Initial admin" +msgstr "Hlavní admin" + +#: mailu/ui/forms.py:60 +msgid "Admin password" +msgstr "Heslo admina" + +#: mailu/ui/forms.py:61 mailu/ui/forms.py:81 mailu/ui/forms.py:94 +msgid "Confirm password" +msgstr "Potvrdit heslo" + +#: mailu/ui/forms.py:63 +msgid "Create" +msgstr "Vytvořit" + +#: mailu/ui/forms.py:67 +msgid "Alternative name" +msgstr "Alternativní jméno" + +#: mailu/ui/forms.py:72 +msgid "Relayed domain name" +msgstr "Seznam předávaných domén" + +#: mailu/ui/forms.py:73 mailu/ui/templates/relay/list.html:19 +msgid "Remote host" +msgstr "Vzdálený hostitel" + +#: mailu/ui/forms.py:82 mailu/ui/templates/user/list.html:23 +#: mailu/ui/templates/user/signup_domain.html:16 +msgid "Quota" +msgstr "Kvóta" + +#: mailu/ui/forms.py:83 +msgid "Allow IMAP access" +msgstr "Povolit přístup IMAP" + +#: mailu/ui/forms.py:84 +msgid "Allow POP3 access" +msgstr "Povolit přístup POP3" + +#: mailu/ui/forms.py:85 mailu/ui/forms.py:101 +#: mailu/ui/templates/user/settings.html:15 +msgid "Displayed name" +msgstr "Zobrazené jméno" + +#: mailu/ui/forms.py:87 +msgid "Enabled" +msgstr "Povoleno" + +#: mailu/ui/forms.py:92 +msgid "Email address" +msgstr "Emailová adresa" + +#: mailu/ui/forms.py:102 +msgid "Enable spam filter" +msgstr "Povolit filtr spamu" + +#: mailu/ui/forms.py:103 +msgid "Enable marking spam mails as read" +msgstr "Povolit označování spamových e-mailů jako přečtených" + +#: mailu/ui/forms.py:104 +msgid "Spam filter tolerance" +msgstr "Tolerance spamového filtru" + +#: mailu/ui/forms.py:105 +msgid "Enable forwarding" +msgstr "Povolit přeposílání" + +#: mailu/ui/forms.py:106 +msgid "Keep a copy of the emails" +msgstr "Zachovat kopii e-mailů" + +#: mailu/ui/forms.py:107 mailu/ui/forms.py:143 +#: mailu/ui/templates/alias/list.html:21 +msgid "Destination" +msgstr "Cíl" + +#: mailu/ui/forms.py:108 +msgid "Save settings" +msgstr "Uložit nastavení" + +#: mailu/ui/forms.py:113 +msgid "Password check" +msgstr "Kontrola hesla" + +#: mailu/ui/forms.py:114 mailu/ui/templates/sidebar.html:25 +msgid "Update password" +msgstr "Aktualizovat heslo" + +#: mailu/ui/forms.py:118 +msgid "Enable automatic reply" +msgstr "Povolit automatickou odpověď" + +#: mailu/ui/forms.py:119 +msgid "Reply subject" +msgstr "Předmět odpovědi" + +#: mailu/ui/forms.py:120 +msgid "Reply body" +msgstr "Tělo odpovědi" + +#: mailu/ui/forms.py:122 +msgid "Start of vacation" +msgstr "Začátek dovolené" + +#: mailu/ui/forms.py:123 +msgid "End of vacation" +msgstr "Konec dovolené" + +#: mailu/ui/forms.py:124 +msgid "Update" +msgstr "Aktualizovat" + +#: mailu/ui/forms.py:129 +msgid "Your token (write it down, as it will never be displayed again)" +msgstr "Váš token (zapište si ho, protože se již nikdy nezobrazí)" + +#: mailu/ui/forms.py:134 mailu/ui/templates/token/list.html:21 +msgid "Authorized IP" +msgstr "Autorizovaná IP" + +#: mailu/ui/forms.py:140 +msgid "Alias" +msgstr "Alias" + +#: mailu/ui/forms.py:142 +msgid "Use SQL LIKE Syntax (e.g. for catch-all aliases)" +msgstr "Použít syntaxi jako SQL (např. pro doménové koše)" + +#: mailu/ui/forms.py:149 +msgid "Admin email" +msgstr "Email admina" + +#: mailu/ui/forms.py:150 mailu/ui/forms.py:155 mailu/ui/forms.py:168 +msgid "Submit" +msgstr "Poslat" + +#: mailu/ui/forms.py:154 +msgid "Manager email" +msgstr "E-mail manažera" + +#: mailu/ui/forms.py:159 +msgid "Protocol" +msgstr "Protokol" + +#: mailu/ui/forms.py:162 +msgid "Hostname or IP" +msgstr "Hostitel nebo IP" + +#: mailu/ui/forms.py:163 mailu/ui/templates/client.html:20 +#: mailu/ui/templates/client.html:45 +msgid "TCP port" +msgstr "TCP port" + +#: mailu/ui/forms.py:164 +msgid "Enable TLS" +msgstr "Povolit TLS" + +#: mailu/ui/forms.py:165 mailu/ui/templates/client.html:28 +#: mailu/ui/templates/client.html:53 mailu/ui/templates/fetch/list.html:21 +msgid "Username" +msgstr "Uživatelské jméno" + +#: mailu/ui/forms.py:167 +msgid "Keep emails on the server" +msgstr "Zachovat e-maily na serveru" + +#: mailu/ui/forms.py:172 +msgid "Announcement subject" +msgstr "Předmět oznámení" + +#: mailu/ui/forms.py:174 +msgid "Announcement body" +msgstr "Tělo oznámení" + +#: mailu/ui/forms.py:176 +msgid "Send" +msgstr "Poslat" + +#: mailu/ui/templates/announcement.html:4 +msgid "Public announcement" +msgstr "Veřejné oznámení" + +#: mailu/ui/templates/antispam.html:4 mailu/ui/templates/sidebar.html:80 +#: mailu/ui/templates/user/settings.html:19 +msgid "Antispam" +msgstr "Antispam" + +#: mailu/ui/templates/antispam.html:8 +msgid "RSPAMD status page" +msgstr "Stavová stránka RSPAMD" + +#: mailu/ui/templates/client.html:8 +msgid "configure your email client" +msgstr "nakonfigurovat e-mailového klienta" + +#: mailu/ui/templates/client.html:13 +msgid "Incoming mail" +msgstr "Příchozí mail" + +#: mailu/ui/templates/client.html:16 mailu/ui/templates/client.html:41 +msgid "Mail protocol" +msgstr "Poštovní protokol" + +#: mailu/ui/templates/client.html:24 mailu/ui/templates/client.html:49 +msgid "Server name" +msgstr "Název serveru" + +#: mailu/ui/templates/client.html:38 +msgid "Outgoing mail" +msgstr "Odchozí pošta" + +#: mailu/ui/templates/confirm.html:4 +msgid "Confirm action" +msgstr "Potvrdit akci" + +#: mailu/ui/templates/confirm.html:13 +#, python-format +msgid "You are about to %(action)s. Please confirm your action." +msgstr "Chystáte se %(action)s. Potvrďte prosím vaši akci." + +#: mailu/ui/templates/docker-error.html:4 +msgid "Docker error" +msgstr "Chyba Dockeru" + +#: mailu/ui/templates/docker-error.html:12 +msgid "An error occurred while talking to the Docker server." +msgstr "Při komunikaci se serverem Docker došlo k chybě." + +#: mailu/ui/templates/macros.html:129 +msgid "copy to clipboard" +msgstr "zkopírovat do schránky" + +#: mailu/ui/templates/sidebar.html:15 +msgid "My account" +msgstr "Můj účet" + +#: mailu/ui/templates/sidebar.html:19 mailu/ui/templates/user/list.html:37 +msgid "Settings" +msgstr "Nastavení" + +#: mailu/ui/templates/sidebar.html:31 mailu/ui/templates/user/list.html:38 +msgid "Auto-reply" +msgstr "Automatická odpověď" + +#: mailu/ui/templates/fetch/list.html:4 mailu/ui/templates/sidebar.html:37 +#: mailu/ui/templates/user/list.html:39 +msgid "Fetched accounts" +msgstr "Fetched účty" + +#: mailu/ui/templates/sidebar.html:43 mailu/ui/templates/token/list.html:4 +msgid "Authentication tokens" +msgstr "Autentizační tokeny" + +#: mailu/ui/templates/sidebar.html:56 +msgid "Administration" +msgstr "Administrace" + +#: mailu/ui/templates/sidebar.html:62 +msgid "Announcement" +msgstr "Oznámení" + +#: mailu/ui/templates/sidebar.html:68 +msgid "Administrators" +msgstr "Administrátoři" + +#: mailu/ui/templates/sidebar.html:74 +msgid "Relayed domains" +msgstr "Relayované domény" + +#: mailu/ui/templates/sidebar.html:88 +msgid "Mail domains" +msgstr "Poštovní domény" + +#: mailu/ui/templates/sidebar.html:99 +msgid "Webmail" +msgstr "Webmail" + +#: mailu/ui/templates/sidebar.html:135 +msgid "Sign out" +msgstr "Odhlásit se" + +#: mailu/ui/templates/working.html:4 +msgid "We are still working on this feature!" +msgstr "Na této funkci stále pracujeme!" + +#: mailu/ui/templates/admin/create.html:4 +msgid "Add a global administrator" +msgstr "Přidat globálního administrátora" + +#: mailu/ui/templates/admin/list.html:4 +msgid "Global administrators" +msgstr "Globální administrátor" + +#: mailu/ui/templates/admin/list.html:9 +msgid "Add administrator" +msgstr "Přidat administrátora" + +#: mailu/ui/templates/admin/list.html:17 mailu/ui/templates/alias/list.html:19 +#: mailu/ui/templates/alternative/list.html:19 +#: mailu/ui/templates/domain/list.html:17 mailu/ui/templates/fetch/list.html:19 +#: mailu/ui/templates/manager/list.html:19 +#: mailu/ui/templates/relay/list.html:17 mailu/ui/templates/token/list.html:19 +#: mailu/ui/templates/user/list.html:19 +msgid "Actions" +msgstr "Akce" + +#: mailu/ui/templates/admin/list.html:18 mailu/ui/templates/alias/list.html:20 +#: mailu/ui/templates/manager/list.html:20 mailu/ui/templates/user/list.html:21 +msgid "Email" +msgstr "Email" + +#: mailu/ui/templates/admin/list.html:25 mailu/ui/templates/alias/list.html:32 +#: mailu/ui/templates/alternative/list.html:29 +#: mailu/ui/templates/domain/list.html:34 mailu/ui/templates/fetch/list.html:34 +#: mailu/ui/templates/manager/list.html:27 +#: mailu/ui/templates/relay/list.html:30 mailu/ui/templates/token/list.html:30 +#: mailu/ui/templates/user/list.html:34 +msgid "Delete" +msgstr "Vymazat" + +#: mailu/ui/templates/alias/create.html:4 +msgid "Create alias" +msgstr "Vytvořit alias" + +#: mailu/ui/templates/alias/edit.html:4 +msgid "Edit alias" +msgstr "Upravit alias" + +#: mailu/ui/templates/alias/list.html:4 +msgid "Alias list" +msgstr "Seznam aliasů" + +#: mailu/ui/templates/alias/list.html:12 +msgid "Add alias" +msgstr "Přidat alias" + +#: mailu/ui/templates/alias/list.html:23 +#: mailu/ui/templates/alternative/list.html:21 +#: mailu/ui/templates/domain/list.html:23 mailu/ui/templates/fetch/list.html:25 +#: mailu/ui/templates/relay/list.html:21 mailu/ui/templates/token/list.html:22 +#: mailu/ui/templates/user/list.html:25 +msgid "Created" +msgstr "Vytvořeno" + +#: mailu/ui/templates/alias/list.html:24 +#: mailu/ui/templates/alternative/list.html:22 +#: mailu/ui/templates/domain/list.html:24 mailu/ui/templates/fetch/list.html:26 +#: mailu/ui/templates/relay/list.html:22 mailu/ui/templates/token/list.html:23 +#: mailu/ui/templates/user/list.html:26 +msgid "Last edit" +msgstr "Poslední úprava" + +#: mailu/ui/templates/alias/list.html:31 mailu/ui/templates/domain/list.html:33 +#: mailu/ui/templates/fetch/list.html:33 mailu/ui/templates/relay/list.html:29 +#: mailu/ui/templates/user/list.html:33 +msgid "Edit" +msgstr "Upravit" + +#: mailu/ui/templates/alternative/create.html:4 +msgid "Create alternative domain" +msgstr "Vytvořit alternativní doménu" + +#: mailu/ui/templates/alternative/list.html:4 +msgid "Alternative domain list" +msgstr "Seznam alternativních domén" + +#: mailu/ui/templates/alternative/list.html:12 +msgid "Add alternative" +msgstr "Přidat alternativu" + +#: mailu/ui/templates/alternative/list.html:20 +msgid "Name" +msgstr "Jméno" + +#: mailu/ui/templates/domain/create.html:4 +#: mailu/ui/templates/domain/list.html:9 +msgid "New domain" +msgstr "Nová doména" + +#: mailu/ui/templates/domain/details.html:4 +msgid "Domain details" +msgstr "Podrobnosti o doméně" + +#: mailu/ui/templates/domain/details.html:15 +msgid "Regenerate keys" +msgstr "Obnovit klíče" + +#: mailu/ui/templates/domain/details.html:17 +msgid "Generate keys" +msgstr "Generovat klíče" + +#: mailu/ui/templates/domain/details.html:30 +msgid "DNS MX entry" +msgstr "Záznam DNS MX" + +#: mailu/ui/templates/domain/details.html:34 +msgid "DNS SPF entries" +msgstr "Záznamy DNS SPF" + +#: mailu/ui/templates/domain/details.html:40 +msgid "DKIM public key" +msgstr "Veřejný klíč DKIM" + +#: mailu/ui/templates/domain/details.html:44 +msgid "DNS DKIM entry" +msgstr "Záznam DNS DKIM" + +#: mailu/ui/templates/domain/details.html:48 +msgid "DNS DMARC entry" +msgstr "Záznam DNS DMARC" + +#: mailu/ui/templates/domain/details.html:58 +msgid "DNS TLSA entry" +msgstr "Záznam DNS TLSA" + +#: mailu/ui/templates/domain/details.html:63 +msgid "DNS client auto-configuration entries" +msgstr "Položky automatické konfigurace klienta DNS" + +#: mailu/ui/templates/domain/edit.html:4 +msgid "Edit domain" +msgstr "Upravit doménu" + +#: mailu/ui/templates/domain/list.html:4 +msgid "Domain list" +msgstr "Seznam domén" + +#: mailu/ui/templates/domain/list.html:18 +msgid "Manage" +msgstr "Spravovat" + +#: mailu/ui/templates/domain/list.html:20 +msgid "Mailbox count" +msgstr "Počet poštovních schránek" + +#: mailu/ui/templates/domain/list.html:21 +msgid "Alias count" +msgstr "Počet aliasů" + +#: mailu/ui/templates/domain/list.html:31 +msgid "Details" +msgstr "Podrobnosti" + +#: mailu/ui/templates/domain/list.html:38 +msgid "Users" +msgstr "Uživatelů" + +#: mailu/ui/templates/domain/list.html:39 +msgid "Aliases" +msgstr "Aliasů" + +#: mailu/ui/templates/domain/list.html:40 +msgid "Managers" +msgstr "Manažerů" + +#: mailu/ui/templates/domain/list.html:42 +msgid "Alternatives" +msgstr "Alternativ" + +#: mailu/ui/templates/domain/signup.html:13 +msgid "" +"In order to register a new domain, you must first setup the\n" +" domain zone so that the domain MX points to this server" +msgstr "" +"Chcete-li zaregistrovat novou doménu, musíte nejprve nastavit\n" +" zónu domény tak, aby doménový MX záznam ukazovala na tento " +"server" + +#: mailu/ui/templates/domain/signup.html:18 +msgid "" +"If you do not know how to setup an MX record for your DNS " +"zone,\n" +" please contact your DNS provider or administrator. Also, please wait a\n" +" couple minutes after the MX is set so the local server " +"cache\n" +" expires." +msgstr "" +"Pokud nevíte, jak nastavit MX záznam pro zónu DNS,\n" +" kontaktujte svého poskytovatele DNS nebo správce. Také prosím počkejte " +"a\n" +" několik minut po MX tak, aby vypršela v mezipaměti " +"místního\n" +" serveru." + +#: mailu/ui/templates/fetch/create.html:4 +msgid "Add a fetched account" +msgstr "Přidejte fetched účet" + +#: mailu/ui/templates/fetch/edit.html:4 +msgid "Update a fetched account" +msgstr "Aktualizujte fetched účet" + +#: mailu/ui/templates/fetch/list.html:12 +msgid "Add an account" +msgstr "Přidat účet" + +#: mailu/ui/templates/fetch/list.html:20 +msgid "Endpoint" +msgstr "Koncový bod" + +#: mailu/ui/templates/fetch/list.html:22 +msgid "Keep emails" +msgstr "Zachovat emaily" + +#: mailu/ui/templates/fetch/list.html:23 +msgid "Last check" +msgstr "Poslední kontrola" + +#: mailu/ui/templates/fetch/list.html:24 +msgid "Status" +msgstr "Status" + +#: mailu/ui/templates/fetch/list.html:38 +msgid "yes" +msgstr "ano" + +#: mailu/ui/templates/fetch/list.html:38 +msgid "no" +msgstr "ne" + +#: mailu/ui/templates/manager/create.html:4 +msgid "Add a manager" +msgstr "Přidat manažera" + +#: mailu/ui/templates/manager/list.html:4 +msgid "Manager list" +msgstr "Seznam manažerů" + +#: mailu/ui/templates/manager/list.html:12 +msgid "Add manager" +msgstr "Přidat manažera" + +#: mailu/ui/templates/relay/create.html:4 +msgid "New relay domain" +msgstr "Nová relay doména" + +#: mailu/ui/templates/relay/edit.html:4 +msgid "Edit relayed domain" +msgstr "Upravit relay doménu" + +#: mailu/ui/templates/relay/list.html:4 +msgid "Relayed domain list" +msgstr "Seznam relay domén" + +#: mailu/ui/templates/relay/list.html:9 +msgid "New relayed domain" +msgstr "Nová relay doména" + +#: mailu/ui/templates/token/create.html:4 +msgid "Create an authentication token" +msgstr "Vytvořit ověřovací token" + +#: mailu/ui/templates/token/list.html:12 +msgid "New token" +msgstr "Nový token" + +#: mailu/ui/templates/user/create.html:4 +msgid "New user" +msgstr "Nový uživatel" + +#: mailu/ui/templates/user/create.html:15 +msgid "General" +msgstr "Všeobecné" + +#: mailu/ui/templates/user/create.html:23 +msgid "Features and quotas" +msgstr "Funkce a kvóty" + +#: mailu/ui/templates/user/edit.html:4 +msgid "Edit user" +msgstr "Upravit uživatele" + +#: mailu/ui/templates/user/list.html:4 +msgid "User list" +msgstr "Seznam uživatelů" + +#: mailu/ui/templates/user/list.html:12 +msgid "Add user" +msgstr "Přidat uživatele" + +#: mailu/ui/templates/user/list.html:20 mailu/ui/templates/user/settings.html:4 +msgid "User settings" +msgstr "Uživatelské nastavení" + +#: mailu/ui/templates/user/list.html:22 +msgid "Features" +msgstr "Funkce" + +#: mailu/ui/templates/user/password.html:4 +msgid "Password update" +msgstr "Aktualizace hesla" + +#: mailu/ui/templates/user/reply.html:4 +msgid "Automatic reply" +msgstr "Automatická odpověď" + +#: mailu/ui/templates/user/settings.html:27 +msgid "Auto-forward" +msgstr "Automatické přeposlání" + +#: mailu/ui/templates/user/signup_domain.html:8 +msgid "pick a domain for the new account" +msgstr "vybrat doménu pro nový účet" + +#: mailu/ui/templates/user/signup_domain.html:14 +msgid "Domain" +msgstr "Doména" + +#: mailu/ui/templates/user/signup_domain.html:15 +msgid "Available slots" +msgstr "Dostupných slotů" diff --git a/design/mailu-directory-structure.md b/design/mailu-directory-structure.md index 5d62c85d..69c666d7 100644 --- a/design/mailu-directory-structure.md +++ b/design/mailu-directory-structure.md @@ -88,7 +88,7 @@ If RFC issue #1222 is accepted, Dovecot will need read-only access to the certif - Path: `/mailu/data/` -Database files, like SQLite or PostgreSQL files. Databases don't perform well on network filesystems as they depend heavily on file locking and full controll on the database files. Making it unfit for concurrent access from multiple hosts. This directory should always live on a local filesystem. This makes it only usable in `docker-compose` deployments. Usage of this directory should be avoided in Kubernetes and Docker Swarm deployments. Some services will need to be improved to allow for this. +Database files, like SQLite or PostgreSQL files. Databases don't perform well on network filesystems as they depend heavily on file locking and full controll on the database files. Making it unfit for concurrent access from multiple hosts. This directory should always live on a local filesystem. This makes it only usable in `docker compose` deployments. Usage of this directory should be avoided in Kubernetes and Docker Swarm deployments. Some services will need to be improved to allow for this. #### admin data @@ -138,7 +138,7 @@ In the old situation, Maildir indexes are stored on the same volume. However, th - Path: `/mailu/local` (new) -Persistent storage not suitable for replication. In `docker-compose` deployments it lives inside `/mailu` and in replicated deployments it should live somewhere on the local host machine. +Persistent storage not suitable for replication. In `docker compose` deployments it lives inside `/mailu` and in replicated deployments it should live somewhere on the local host machine. #### Mailqueue @@ -185,7 +185,7 @@ The final layout of the Mailu filesystem will look like: Where in replicated environments: - `/mailu/config/`: should be a small, low performant and shared filesystem. -- `/mailu/data`: should be avoided. More work will need to be done to configure external DB servers for relevant services. Ideally, this directory should only exist on docker-compose deployments. +- `/mailu/data`: should be avoided. More work will need to be done to configure external DB servers for relevant services. Ideally, this directory should only exist on docker compose deployments. - `/mailu/local/`: Should exist only on local file systems of worker nodes. - `/mailu/mail`: A distributed filesystem with sufficient performance and storage requirements to hold and process all user mailboxes. Ideally only Maildir without indexes. diff --git a/docs/antispam.rst b/docs/antispam.rst index fb97e66a..7b0c7373 100644 --- a/docs/antispam.rst +++ b/docs/antispam.rst @@ -125,12 +125,12 @@ The following steps have to be taken to configure an additional symbol (rule) th #This file is LIVE reloaded by rspamd. Any changes are EFFECTIVE IMMEDIATELY. dummy.com -3. Reload Rspamd by stopping the Rspamd container and starting the Rspamd container again. Example for docker-compose setup: +3. Reload Rspamd by stopping the Rspamd container and starting the Rspamd container again. Example for docker compose setup: .. code-block:: bash - docker-compose scale antispam=0 - docker-compose scale antispam=1 + docker compose scale antispam=0 + docker compose scale antispam=1 4. (Optional) Check if the custom symbol is loaded. To access the Rspamd webgui, log in the Mailu administration web interface with a user that is an administrator and go to Antispam. In Rspamd webgui go to tab Symbols. Change the group drop-down box to local_bl. The following additional rule will be listed. @@ -163,8 +163,8 @@ Mailu rejects emails with file attachements it deems to be "executable" or other .. code-block:: bash - docker-compose exec antispam cat /etc/rspamd/local.d/forbidden_file_extension.map > overrides/rspamd/forbidden_file_extension.map - docker-compose restart antispam + docker compose exec antispam cat /etc/rspamd/local.d/forbidden_file_extension.map > overrides/rspamd/forbidden_file_extension.map + docker compose restart antispam Now the file `overrides/rspamd/forbidden_file_extension.map` can be edited, to make changes to the forbidden file extensions list. For the changes to take effect, rspamd must be restarted. @@ -176,8 +176,8 @@ If configured to do so, Mailu uses a lightweight tool called `mraptor from oleto .. code-block:: bash - docker-compose exec antispam cat /etc/rspamd/local.d/composites.conf > overrides/rspamd/composites.conf - docker-compose restart antispam + docker compose exec antispam cat /etc/rspamd/local.d/composites.conf > overrides/rspamd/composites.conf + docker compose restart antispam Now the file `overrides/rspamd/composites.conf` can be edited, to override the mraptor configuration in rspamd. For the changes to take effect, rspamd must be restarted. diff --git a/docs/cli.rst b/docs/cli.rst index 5513e41f..5f7bc690 100644 --- a/docs/cli.rst +++ b/docs/cli.rst @@ -19,7 +19,7 @@ alias .. code-block:: bash - docker-compose exec admin flask mailu alias foo example.net "mail1@example.com,mail2@example.com" + docker compose exec admin flask mailu alias foo example.net "mail1@example.com,mail2@example.com" alias-delete @@ -27,7 +27,7 @@ alias-delete .. code-block:: bash - docker-compose exec admin flask mailu alias-delete foo@example.net + docker compose exec admin flask mailu alias-delete foo@example.net domain @@ -35,7 +35,7 @@ domain .. code-block:: bash - docker-compose exec admin flask mailu domain example.net + docker compose exec admin flask mailu domain example.net password @@ -43,7 +43,7 @@ password .. code-block:: bash - docker-compose exec admin flask mailu password myuser example.net 'password123' + docker compose exec admin flask mailu password myuser example.net 'password123' user @@ -51,7 +51,7 @@ user .. code-block:: bash - docker-compose exec admin flask mailu user myuser example.net 'password123' + docker compose exec admin flask mailu user myuser example.net 'password123' user-import @@ -61,14 +61,14 @@ primary difference with simple `user` command is that password is being imported .. code-block:: bash - docker-compose run --rm admin flask mailu user-import myuser example.net '$6$51ebe0cb9f1dab48effa2a0ad8660cb489b445936b9ffd812a0b8f46bca66dd549fea530ce' 'SHA512-CRYPT' + docker compose run --rm admin flask mailu user-import myuser example.net '$6$51ebe0cb9f1dab48effa2a0ad8660cb489b445936b9ffd812a0b8f46bca66dd549fea530ce' 'SHA512-CRYPT' user-delete ----------- .. code-block:: bash - docker-compose exec admin flask mailu user-delete foo@example.net + docker compose exec admin flask mailu user-delete foo@example.net config-update ------------- @@ -77,7 +77,7 @@ The sole purpose of this command is for importing users/aliases in bulk and sync .. code-block:: bash - cat mail-config.yml | docker-compose exec -T admin flask mailu config-update --delete-objects + cat mail-config.yml | docker compose exec -T admin flask mailu config-update --delete-objects where mail-config.yml looks like: @@ -131,7 +131,7 @@ The purpose of this command is to export the complete configuration in YAML or J .. code-block:: bash - $ docker-compose exec admin flask mailu config-export --help + $ docker compose exec -T admin flask mailu config-export --help Usage: flask mailu config-export [OPTIONS] [FILTER]... @@ -156,11 +156,11 @@ Attributes explicitly specified in filters are automatically exported: there is .. code-block:: bash - $ docker-compose exec admin flask mailu config-export --output mail-config.yml + $ docker compose exec admin flask mailu config-export --output mail-config.yml - $ docker-compose exec admin flask mailu config-export domain.dns_mx domain.dns_spf + $ docker compose exec -T admin flask mailu config-export domain.dns_mx domain.dns_spf - $ docker-compose exec admin flask mailu config-export user.spam_threshold + $ docker compose exec -T admin flask mailu config-export user.email user.spam_threshold config-import ------------- @@ -169,7 +169,7 @@ This command imports configuration data from an external YAML or JSON source. .. code-block:: bash - $ docker-compose exec admin flask mailu config-import --help + $ docker compose exec -T admin flask mailu config-import --help Usage: flask mailu config-import [OPTIONS] [FILENAME|-] @@ -184,11 +184,11 @@ This command imports configuration data from an external YAML or JSON source. -n, --dry-run Perform a trial run with no changes made. -?, -h, --help Show this message and exit. -The current version of docker-compose exec does not pass stdin correctly, so you have to user docker exec instead: +To pass stdin correctly you have to use the `-T` option: .. code-block:: bash - docker exec -i $(docker-compose ps -q admin) flask mailu config-import -nv < mail-config.yml + docker compose exec -T admin flask mailu config-import -nv < mail-config.yml mail-config.yml contains the configuration and looks like this: diff --git a/docs/compose/.env b/docs/compose/.env index 265b4bad..e5e1edbf 100644 --- a/docs/compose/.env +++ b/docs/compose/.env @@ -138,7 +138,7 @@ WEBSITE=https://mailu.io # Log driver for front service. Possible values: # json-file (default) # journald (On systemd platforms, useful for Fail2Ban integration) -# syslog (Non systemd platforms, Fail2Ban integration. Disables `docker-compose log` for front!) +# syslog (Non systemd platforms, Fail2Ban integration. Disables `docker compose log` for front!) LOG_DRIVER=json-file # Docker-compose project name, this will prepended to containers names. diff --git a/docs/compose/requirements.rst b/docs/compose/requirements.rst index a9ec6eab..3eacc017 100644 --- a/docs/compose/requirements.rst +++ b/docs/compose/requirements.rst @@ -91,7 +91,7 @@ The Docker website is full of `detailed instructions`_ about setting up a proper Docker install. Default configuration should be suited for Mailu. -Additionally, you must install ``docker-compose`` by following the instructions +Additionally, you must install ``docker compose`` v2 by following the instructions from the `Docker website`_ if you plan on using the Compose flavor. Compose is a management tool for Docker, especially suited for multiple containers systems like Mailu. @@ -105,24 +105,34 @@ Once everything is setup, you should be able to run the following commands .. code-block:: bash $ docker version - Client: - Version: 1.11.2 - API version: 1.23 - Go version: go1.6.2 - Git commit: b9f10c9 - Built: Sun Jun 5 23:17:55 2016 - OS/Arch: linux/amd64 + Client: Docker Engine - Community + Version: 20.10.22 + API version: 1.41 + Go version: go1.18.9 + Git commit: 3a2c30b + Built: Thu Dec 15 22:27:03 2022 + OS/Arch: linux/arm64 + Context: default + Experimental: true + + Server: Docker Engine - Community + Engine: + Version: 20.10.22 + API version: 1.41 (minimum version 1.12) + Go version: go1.18.9 + Git commit: 42c8b31 + Built: Thu Dec 15 22:25:25 2022 + OS/Arch: linux/arm64 + Experimental: false + containerd: + Version: 1.6.14 + GitCommit: 9ba4b250366a5ddde94bb7c9d1def331423aa323 + runc: + Version: 1.1.4 + GitCommit: v1.1.4-0-g5fd4c4d + docker-init: + Version: 0.19.0 + GitCommit: de40ad0 - Server: - Version: 1.11.1 - API version: 1.23 - Go version: go1.6.2 - Git commit: 5604cbe - Built: Mon May 2 00:06:51 2016 - OS/Arch: linux/amd64 - - $ docker-compose version - docker-compose version 1.7.1, build 6c29830 - docker-py version: 1.8.1 - CPython version: 3.5.1 - OpenSSL version: OpenSSL 1.0.2h 3 May 2016 + $ docker compose version + Docker Compose version v2.14.1 diff --git a/docs/compose/setup.rst b/docs/compose/setup.rst index 57c9b761..f4c9c574 100644 --- a/docs/compose/setup.rst +++ b/docs/compose/setup.rst @@ -95,7 +95,7 @@ You may now start Mailu. Move the to the Mailu directory and run: .. code-block:: bash - docker-compose up -d + docker compose up -d Finally, you need an admin user account. @@ -106,7 +106,7 @@ Else, if you don't go with the automatic way, you need to manually create the ad .. code-block:: bash - docker-compose exec admin flask mailu admin me example.net 'password' + docker compose exec admin flask mailu admin me example.net 'password' This will create a user named ``me@example.net`` with password ``password`` and administration privileges. Connect to the Web admin interface and change the password to a strong one. diff --git a/docs/contributors/environment.rst b/docs/contributors/environment.rst index 25f6fbc0..d1b26787 100644 --- a/docs/contributors/environment.rst +++ b/docs/contributors/environment.rst @@ -153,25 +153,25 @@ After that you can run: .. code-block:: bash - docker-compose up -d + docker compose up -d If you wish to run commands inside a container, simply run (example): .. code-block:: bash - docker-compose exec admin ls -lah / + docker compose exec admin ls -lah / Or if you wish to start a shell for debugging: .. code-block:: bash - docker-compose exec admin sh + docker compose exec admin sh Finally, if you need to install packages inside the containers for debugging: .. code-block:: bash - docker-compose exec admin apk add --no-cache package-name + docker compose exec admin apk add --no-cache package-name Reviewing --------- @@ -215,8 +215,8 @@ For example, to test PR #500 against master, reviewers can use: export DOCKER_ORG="mailuci" export MAILU_VERSION="pr-500" - docker-compose pull - docker-compose up -d + docker compose pull + docker compose up -d You can now test the PR. Play around. See if (external) mails work. Check for whatever functionality the PR is trying to fix. When happy, you can approve the PR. When running into failures, mark the review as diff --git a/docs/database.rst b/docs/database.rst index fa6a199e..31abc191 100644 --- a/docs/database.rst +++ b/docs/database.rst @@ -15,11 +15,11 @@ This means it is not possible to switch the database back-end used by roundcube To switch to a different database back-end: -1. Run config-export to export the configuration. E.g. `docker-compose exec admin flask mailu config-export --secrets --output mail-config.yml` +1. Run config-export to export the configuration. E.g. `docker compose exec admin flask mailu config-export --secrets --output mail-config.yml` 2. Set up your new database server. Refer to the subsequent sections for tips for creating the database. 3. Modify the database settings (DB_*) in mailu.env. Refer to the :ref:`configuration guide (link) ` for the exact settings. 4. Start your Mailu deployment. -5. Run config-import to import the configuration. E.g. `docker exec -i $(docker-compose ps -q admin) flask mailu config-import -v < mail-config.yml` +5. Run config-import to import the configuration. E.g. `docker exec -i $(docker compose ps -q admin) flask mailu config-import -v < mail-config.yml` Mailu has now been switched to the new database back-end. The Mailu configuration has also been migrated. @@ -114,22 +114,22 @@ Prepare the environment. Mailu must not be in use. Only the database container. 1. Open a terminal. 2. `cd /mailu` -3. `docker-compose -p mailu down` -4. `docker-compose -p mailu up -d database` +3. `docker compose -p mailu down` +4. `docker compose -p mailu up -d database` Create the dump SQL file for recreating the database. -1. `docker-compose -p mailu exec database /bin/bash` +1. `docker compose -p mailu exec database /bin/bash` 2. `pg_dump -h database -p 5432 -U mailu > /backup/backup_db.sql` 3. Enter the password. See the value of DB_PW in mailu.env. 4. `exit` 5. The dump is saved to /mailu/data/psql_backup/backup_db.sql. -6. `docker-compose -p mailu down` +6. `docker compose -p mailu down` Prepare the new PostgreSQL deployment. 1. `mkdir -p /mailu/data/external_psql/pgdata` -2. Create the file docker-compose-postgresql.yml with the following contents: +2. Create the file docker compose-postgresql.yml with the following contents: .. code-block:: docker @@ -147,12 +147,12 @@ Prepare the new PostgreSQL deployment. - "/mailu/data/psql_backup:/dump" -3. `docker-compose -f docker-compose-postgresql.yml up -d` -4. `docker-compose -f docker-compose-postgresql.yml exec database /bin/bash` +3. `docker compose -f docker compose-postgresql.yml up -d` +4. `docker compose -f docker compose-postgresql.yml exec database /bin/bash` 5. `cat /dump/backup_db.sql | psql -h localhost -p 5432 -U mailu` 6. `exit` -7. `docker-compose -f docker-compose-postgresql.yml down` -8. Remove the file docker-compose-postgresql.yml. +7. `docker compose -f docker compose-postgresql.yml down` +8. Remove the file docker compose-postgresql.yml. The new PostgreSQL deployment has the dump loaded now. Now it is time to modify Mailu to use the official PostgreSQL docker image. @@ -199,7 +199,7 @@ to Mailu is now configured to use the official PostgreSQL docker image. Bring your new deployment online -1. `docker-compose -p mailu up -d` +1. `docker compose -p mailu up -d` Optionally you can remove left-over files which were used by the old database: diff --git a/docs/faq.rst b/docs/faq.rst index c73304b0..e5d57cef 100644 --- a/docs/faq.rst +++ b/docs/faq.rst @@ -401,8 +401,8 @@ down and up again. A container restart is not sufficient. .. code-block:: bash - docker-compose down && \ - docker-compose up -d + docker compose down && \ + docker compose up -d *Issue reference:* `615`_. @@ -479,8 +479,8 @@ to check the logs. .. code-block:: bash - docker-compose logs front | less -R - docker-compose exec front less /var/log/letsencrypt/letsencrypt.log + docker compose logs front | less -R + docker compose exec front less /var/log/letsencrypt/letsencrypt.log Common problems: @@ -538,20 +538,20 @@ down brute force attacks. The same applies to login attempts via the single sign We *do* provide a possibility to export the logs from the ``front`` service and ``Admin`` service to the host. The ``front`` container logs failed logon attempts on SMTP, IMAP and POP3. -The ``Admin``container logs failed logon attempt on the single sign on page. +The ``Admin`` container logs failed logon attempt on the single sign on page. For this you need to set ``LOG_DRIVER=journald`` or ``syslog``, depending on the log manager of the host. You will need to setup the proper Regex in the Fail2Ban configuration. Below an example how to do so. If you use a reverse proxy in front of Mailu, it is vital to set the environment variables REAL_IP_HEADER and REAL_IP_FROM. Without these environment variables, Mailu will not trust the remote client IP passed on by the reverse proxy and as a result your reverse proxy will be banned. -See the :ref:`[configuration reference ` for more information. +See the :ref:`configuration reference ` for more information. Assuming you have a working Fail2Ban installation on the host running your Docker containers, follow these steps: -1. In the mailu docker-compose set the logging driver of the front container to journald; and set the tag to mailu-front +1. In the mailu docker compose set the logging driver of the front container to journald; and set the tag to mailu-front .. code-block:: bash @@ -560,32 +560,57 @@ follow these steps: options: tag: mailu-front -2. Add the /etc/fail2ban/filter.d/bad-auth.conf +2. Add the /etc/fail2ban/filter.d/bad-auth-bots.conf .. code-block:: bash # Fail2Ban configuration file [Definition] - failregex = .* client login failed: .+ client:\ + failregex = ^\s?\S+ mailu\-front\[\d+\]: \S+ \S+ \[info\] \d+#\d+: \*\d+ client login failed: \"AUTH not supported\" while in http auth state, client: , server: ignoreregex = journalmatch = CONTAINER_TAG=mailu-front -3. Add the /etc/fail2ban/jail.d/bad-auth.conf +3. Add the /etc/fail2ban/jail.d/bad-auth-bots.conf .. code-block:: bash - [bad-auth] + [bad-auth-bots] enabled = true backend = systemd - filter = bad-auth + filter = bad-auth-bots bantime = 604800 - findtime = 300 - maxretry = 10 - action = docker-action + findtime = 600 + maxretry = 5 + action = docker-action-net The above will block flagged IPs for a week, you can of course change it to your needs. -4. In the mailu docker-compose set the logging driver of the Admin container to journald; and set the tag to mailu-admin +4. Add the following to /etc/fail2ban/action.d/docker-action-net.conf + +IMPORTANT: You have to install ipset on the host system, eg. `apt-get install ipset` on a Debian/Ubuntu system. + +See ipset homepage for details on ipset, https://ipset.netfilter.org/. + +.. code-block:: bash + + [Definition] + + actionstart = ipset --create f2b-bad-auth-bots nethash + iptables -I DOCKER-USER -m set --match-set f2b-bad-auth-bots src -p tcp -m tcp --dport 25 -j DROP + + actionstop = iptables -D DOCKER-USER -m set --match-set f2b-bad-auth-bots src -p tcp -m tcp --dport 25 -j DROP + ipset --destroy f2b-bad-auth-bots + + + actionban = ipset add -exist f2b-bad-auth-bots /24 + + actionunban = ipset del -exist f2b-bad-auth-bots /24 + +Using DOCKER-USER chain ensures that the blocked IPs are processed in the correct order with Docker. See more in: https://docs.docker.com/network/iptables/. + +Please note that the provided example will block the subnet from sending any email to the Mailu instance. + +5. In the mailu docker-compose set the logging driver of the Admin container to journald; and set the tag to mailu-admin .. code-block:: bash @@ -594,89 +619,32 @@ The above will block flagged IPs for a week, you can of course change it to your options: tag: mailu-admin -5. Add the /etc/fail2ban/filter.d/bad-auth-sso.conf +6. Add the /etc/fail2ban/filter.d/bad-auth.conf .. code-block:: bash # Fail2Ban configuration file [Definition] - failregex = .* Login failed for .+ from . + failregex = : Authentication attempt from has been rate-limited\.$ ignoreregex = journalmatch = CONTAINER_TAG=mailu-admin -6. Add the /etc/fail2ban/jail.d/bad-auth-sso.conf +7. Add the /etc/fail2ban/jail.d/bad-auth.conf .. code-block:: bash - [bad-auth-sso] + [bad-auth] enabled = true backend = systemd - filter = bad-auth-sso + filter = bad-auth bantime = 604800 - findtime = 300 - maxretry = 10 + findtime = 900 + maxretry = 15 action = docker-action The above will block flagged IPs for a week, you can of course change it to your needs. -7. Add the /etc/fail2ban/filter.d/bad-auth-api.conf - -.. code-block:: bash - - # Fail2Ban configuration file - [Definition] - failregex = .* Invalid API token provided by . - ignoreregex = - journalmatch = CONTAINER_TAG=mailu-admin - -8. Add the /etc/fail2ban/jail.d/bad-auth-api.conf - -.. code-block:: bash - - [bad-auth-api] - enabled = true - backend = systemd - filter = bad-auth-api - bantime = 604800 - findtime = 300 - maxretry = 10 - action = docker-action - -The above will block flagged IPs for a week, you can of course change it to your needs. - -9. Add the /etc/fail2ban/action.d/docker-action.conf - -Option 1: Use plain iptables - -.. code-block:: bash - - [Definition] - - actionstart = iptables -N f2b-bad-auth - iptables -A f2b-bad-auth -j RETURN - iptables -I DOCKER-USER -j f2b-bad-auth - - actionstop = iptables -D DOCKER-USER -j f2b-bad-auth - iptables -F f2b-bad-auth - iptables -X f2b-bad-auth - - actioncheck = iptables -n -L DOCKER-USER | grep -q 'f2b-bad-auth[ \t]' - - actionban = iptables -I f2b-bad-auth 1 -s -j DROP - - actionunban = iptables -D f2b-bad-auth -s -j DROP - -Using DOCKER-USER chain ensures that the blocked IPs are processed in the correct order with Docker. See more in: https://docs.docker.com/network/iptables/ - -Option 2: Use ipset together with iptables -IMPORTANT: You have to install ipset on the host system, eg. `apt-get install ipset` on a Debian/Ubuntu system. - -See ipset homepage for details on ipset, https://ipset.netfilter.org/. - -ipset and iptables provide one big advantage over just using iptables: This setup reduces the overall iptable rules. -There is just one rule for the bad authentications and the IPs are within the ipset. -Specially in larger setups with a high amount of brute force attacks this comes in handy. -Using iptables with ipset might reduce the system load in such attacks significantly. +8. Add the following to /etc/fail2ban/action.d/docker-action.conf .. code-block:: bash @@ -695,7 +663,7 @@ Using iptables with ipset might reduce the system load in such attacks significa Using DOCKER-USER chain ensures that the blocked IPs are processed in the correct order with Docker. See more in: https://docs.docker.com/network/iptables/ -10. Configure and restart the Fail2Ban service +9. Configure and restart the Fail2Ban service Make sure Fail2Ban is started after the Docker service by adding a partial override which appends this to the existing configuration. @@ -790,7 +758,7 @@ In many cases, Docker Compose will complain about the yaml syntax because it is Unless your distribution has proper up-to-date packages for Compose, we strongly advise that you install it either: - from the Docker-CE repositories along with Docker CE itself, - - from PyPI using `pip install docker-compose` or + - from PyPI using `pip install docker compose` or - from Github by downloading it directly. Detailed instructions can be found at https://docs.docker.com/compose/install/ diff --git a/docs/maintain.rst b/docs/maintain.rst index ec004006..eff8f5c4 100644 --- a/docs/maintain.rst +++ b/docs/maintain.rst @@ -14,9 +14,9 @@ simply pull the latest images and recreate the containers : .. code-block:: bash - docker-compose pull - docker-compose down - docker-compose up -d + docker compose pull + docker compose down + docker compose up -d Monitoring the mail server -------------------------- @@ -25,7 +25,7 @@ Logs are managed by Docker directly. You can easily read your logs using: .. code-block:: bash - docker-compose logs + docker compose logs Docker is able to forward logs to multiple log engines. Read the following documentation for details: https://docs.docker.com/engine/admin/logging/overview/. diff --git a/docs/releases.rst b/docs/releases.rst index 51d904ed..4a8e8731 100644 --- a/docs/releases.rst +++ b/docs/releases.rst @@ -382,9 +382,9 @@ For this upgrade it is necessary to bring the project down and up, due to networ .. code-block:: bash - docker-compose pull - docker-compose down --remove-orphans - docker-compose up -d + docker compose pull + docker compose down --remove-orphans + docker compose up -d After everything runs successfully, ``/mailu/certs/dhparam.pem`` is no longer needed and can be deleted. It's included in the Mailu distribution by default now. Also the old ``.env`` can be deleted. @@ -441,8 +441,8 @@ were removed (e.g. rmilter): .. code-block:: bash - docker-compose pull - docker-compose up -d --remove-orphans + docker compose pull + docker compose up -d --remove-orphans If you experience problems when upgrading, feel free to post issues and contact us on our chat channel for emergency support. diff --git a/docs/setup.rst b/docs/setup.rst index 64ba2bec..e7ede399 100644 --- a/docs/setup.rst +++ b/docs/setup.rst @@ -67,7 +67,7 @@ Make sure that you test properly before going live! - Try to send an email to an external service - On the external service, verify that DKIM and SPF are listed as passing - Try to receive an email from an external service -- Check the logs (``docker-compose logs -f servicenamehere``) to look for +- Check the logs (``docker compose logs -f servicenamehere``) to look for warnings or errors - Use an open relay checker like `mxtoolbox`_ to ensure you're not contributing to the spam problem on the internet. diff --git a/optional/unbound/start.py b/optional/unbound/start.py index df768092..5710b6f6 100755 --- a/optional/unbound/start.py +++ b/optional/unbound/start.py @@ -10,4 +10,4 @@ system.set_env() conf.jinja("/unbound.conf", os.environ, "/etc/unbound/unbound.conf") -os.execv("/usr/sbin/unbound", ["-c /etc/unbound/unbound.conf"]) +os.execv("/usr/sbin/unbound", ["unbound", "-c", "/etc/unbound/unbound.conf"]) diff --git a/setup/flavors/compose/mailu.env b/setup/flavors/compose/mailu.env index 8fac8ad9..e6b40a61 100644 --- a/setup/flavors/compose/mailu.env +++ b/setup/flavors/compose/mailu.env @@ -161,7 +161,7 @@ DOMAIN_REGISTRATION=true # Log driver for front service. Possible values: # json-file (default) # journald (On systemd platforms, useful for Fail2Ban integration) -# syslog (Non systemd platforms, Fail2Ban integration. Disables `docker-compose log` for front!) +# syslog (Non systemd platforms, Fail2Ban integration. Disables `docker compose log` for front!) # LOG_DRIVER={{ log_driver or 'json-file' }} # Docker-compose project name, this will prepended to containers names. diff --git a/setup/flavors/compose/setup.html b/setup/flavors/compose/setup.html index 3aa88809..85744192 100644 --- a/setup/flavors/compose/setup.html +++ b/setup/flavors/compose/setup.html @@ -31,12 +31,12 @@ files before going any further.

command using -p mailu flag for project name.

cd {{ root }}
-docker-compose -p mailu up -d
+docker compose -p mailu up -d
Before you can use Mailu, you must create the primary administrator user account. This should be {{ postmaster }}@{{ domain }}. Use the following command, changing PASSWORD to your liking: -
docker-compose -p mailu exec admin flask mailu admin {{ postmaster }} {{ domain }} PASSWORD
+
docker compose -p mailu exec admin flask mailu admin {{ postmaster }} {{ domain }} PASSWORD
 

 
 
Login to the admin interface to change the password for a safe one, at
diff --git a/tests/compose/core/00_create_users.sh b/tests/compose/core/00_create_users.sh
index 2e36189f..26461966 100755
--- a/tests/compose/core/00_create_users.sh
+++ b/tests/compose/core/00_create_users.sh
@@ -1,11 +1,11 @@
 echo "Users tests ..."
 # Should fail, admin is already auto-created
-docker-compose -f tests/compose/core/docker-compose.yml exec -T admin flask mailu admin admin mailu.io 'FooBar' && exit 1
+docker compose -f tests/compose/core/docker-compose.yml exec -T admin flask mailu admin admin mailu.io 'FooBar' && exit 1
 echo "The above error was intended!"
 # Should not fail, but does nothing; ifmissing mode
-docker-compose -f tests/compose/core/docker-compose.yml exec -T admin flask mailu admin admin mailu.io 'FooBar' --mode=ifmissing || exit 1
+docker compose -f tests/compose/core/docker-compose.yml exec -T admin flask mailu admin admin mailu.io 'FooBar' --mode=ifmissing || exit 1
 # Should not fail and update the password; update mode
-docker-compose -f tests/compose/core/docker-compose.yml exec -T admin flask mailu admin admin mailu.io 'password' --mode=update || exit 1
-docker-compose -f tests/compose/core/docker-compose.yml exec -T admin flask mailu user user mailu.io 'password' || exit 1
-docker-compose -f tests/compose/core/docker-compose.yml exec -T admin flask mailu user 'user/with/slash' mailu.io 'password' || exit 1
+docker compose -f tests/compose/core/docker-compose.yml exec -T admin flask mailu admin admin mailu.io 'password' --mode=update || exit 1
+docker compose -f tests/compose/core/docker-compose.yml exec -T admin flask mailu user user mailu.io 'password' || exit 1
+docker compose -f tests/compose/core/docker-compose.yml exec -T admin flask mailu user 'user/with/slash' mailu.io 'password' || exit 1
 echo "User testing successful!"
diff --git a/tests/compose/core/02_forward_test.sh b/tests/compose/core/02_forward_test.sh
index a53fa459..43eb8f99 100755
--- a/tests/compose/core/02_forward_test.sh
+++ b/tests/compose/core/02_forward_test.sh
@@ -1,4 +1,4 @@
-cat << EOF | docker-compose -f tests/compose/core/docker-compose.yml exec -T admin flask mailu config-update -v 1
+cat << EOF | docker compose -f tests/compose/core/docker-compose.yml exec -T admin flask mailu config-update -v 1
 users:
   - localpart: forwardinguser
     password_hash: "\$1\$F2OStvi1\$Q8hBIHkdJpJkJn/TrMIZ9/"
@@ -9,7 +9,7 @@ EOF
 
 python3 tests/forward_test.py
 
-cat << EOF | docker-compose -f tests/compose/core/docker-compose.yml exec -T admin flask mailu config-update -v 1
+cat << EOF | docker compose -f tests/compose/core/docker-compose.yml exec -T admin flask mailu config-update -v 1
 users:
   - localpart: forwardinguser
     password_hash: "\$1\$F2OStvi1\$Q8hBIHkdJpJkJn/TrMIZ9/"
diff --git a/tests/compose/core/03_alias_test.sh b/tests/compose/core/03_alias_test.sh
index dce1918a..6de31580 100755
--- a/tests/compose/core/03_alias_test.sh
+++ b/tests/compose/core/03_alias_test.sh
@@ -1,4 +1,4 @@
-cat << EOF | docker-compose -f tests/compose/core/docker-compose.yml exec -T admin flask mailu config-update -v 1
+cat << EOF | docker compose -f tests/compose/core/docker-compose.yml exec -T admin flask mailu config-update -v 1
 aliases:
   - localpart: alltheusers
     domain: mailu.io
@@ -7,6 +7,6 @@ EOF
 
 python3 tests/alias_test.py
 
-cat << EOF | docker-compose -f tests/compose/core/docker-compose.yml exec -T admin flask mailu config-update -v 1
+cat << EOF | docker compose -f tests/compose/core/docker-compose.yml exec -T admin flask mailu config-update -v 1
 aliases: []
 EOF
diff --git a/tests/compose/core/04_reply_test.sh b/tests/compose/core/04_reply_test.sh
index e1479cf0..b2402878 100755
--- a/tests/compose/core/04_reply_test.sh
+++ b/tests/compose/core/04_reply_test.sh
@@ -1,4 +1,4 @@
-cat << EOF | docker-compose -f tests/compose/core/docker-compose.yml exec -T admin flask mailu config-update -v 1
+cat << EOF | docker compose -f tests/compose/core/docker-compose.yml exec -T admin flask mailu config-update -v 1
 users:
   - localpart: replyuser
     password_hash: "\$1\$F2OStvi1\$Q8hBIHkdJpJkJn/TrMIZ9/"
@@ -10,7 +10,7 @@ EOF
 
 python3 tests/reply_test.py
 
-cat << EOF | docker-compose -f tests/compose/core/docker-compose.yml exec -T admin flask mailu config-update -v 1
+cat << EOF | docker compose -f tests/compose/core/docker-compose.yml exec -T admin flask mailu config-update -v 1
 users:
   - localpart: replyuser
     password_hash: "\$1\$F2OStvi1\$Q8hBIHkdJpJkJn/TrMIZ9/"
diff --git a/tests/compose/core/mailu.env b/tests/compose/core/mailu.env
index 134b8e84..405d736f 100644
--- a/tests/compose/core/mailu.env
+++ b/tests/compose/core/mailu.env
@@ -128,7 +128,7 @@ WEBSITE=https://mailu.io
 # Log driver for front service. Possible values:
 # json-file (default)
 # journald (On systemd platforms, useful for Fail2Ban integration)
-# syslog (Non systemd platforms, Fail2Ban integration. Disables `docker-compose log` for front!)
+# syslog (Non systemd platforms, Fail2Ban integration. Disables `docker compose log` for front!)
 # LOG_DRIVER=json-file
 
 # Docker-compose project name, this will prepended to containers names.
diff --git a/tests/compose/fetchmail/mailu.env b/tests/compose/fetchmail/mailu.env
index 0cc263e2..dfc35a7a 100644
--- a/tests/compose/fetchmail/mailu.env
+++ b/tests/compose/fetchmail/mailu.env
@@ -128,7 +128,7 @@ WEBSITE=https://mailu.io
 # Log driver for front service. Possible values:
 # json-file (default)
 # journald (On systemd platforms, useful for Fail2Ban integration)
-# syslog (Non systemd platforms, Fail2Ban integration. Disables `docker-compose log` for front!)
+# syslog (Non systemd platforms, Fail2Ban integration. Disables `docker compose log` for front!)
 # LOG_DRIVER=json-file
 
 # Docker-compose project name, this will prepended to containers names.
diff --git a/tests/compose/filters/00_create_users.sh b/tests/compose/filters/00_create_users.sh
index 3c581685..137c1947 100755
--- a/tests/compose/filters/00_create_users.sh
+++ b/tests/compose/filters/00_create_users.sh
@@ -1,5 +1,5 @@
 echo "Creating user required for next test ..."
 # Should not fail and update the password; update mode
-docker-compose -f tests/compose/filters/docker-compose.yml exec -T admin flask mailu admin admin mailu.io 'password' --mode=update || exit 1
-docker-compose -f tests/compose/filters/docker-compose.yml exec -T admin flask mailu user user mailu.io 'password' || exit 1
+docker compose -f tests/compose/filters/docker-compose.yml exec -T admin flask mailu admin admin mailu.io 'password' --mode=update || exit 1
+docker compose -f tests/compose/filters/docker-compose.yml exec -T admin flask mailu user user mailu.io 'password' || exit 1
 echo "User created successfully"
diff --git a/tests/compose/filters/mailu.env b/tests/compose/filters/mailu.env
index 2df09f61..ebf92b5a 100644
--- a/tests/compose/filters/mailu.env
+++ b/tests/compose/filters/mailu.env
@@ -128,7 +128,7 @@ WEBSITE=https://mailu.io
 # Log driver for front service. Possible values:
 # json-file (default)
 # journald (On systemd platforms, useful for Fail2Ban integration)
-# syslog (Non systemd platforms, Fail2Ban integration. Disables `docker-compose log` for front!)
+# syslog (Non systemd platforms, Fail2Ban integration. Disables `docker compose log` for front!)
 # LOG_DRIVER=json-file
 
 # Docker-compose project name, this will prepended to containers names.
diff --git a/tests/compose/test.py b/tests/compose/test.py
index 02575535..a9ec9bce 100755
--- a/tests/compose/test.py
+++ b/tests/compose/test.py
@@ -22,7 +22,7 @@ containers = []
 def stop(exit_code):
     print_logs()
     sys.stdout.flush()
-    print(subprocess.check_output("docker-compose -f " + compose_file + " down", shell=True).decode())
+    print(subprocess.check_output(f"docker compose -f {compose_file} down", shell=True).decode())
     sys.exit(exit_code)
 
 def health_checks(deadline):
@@ -88,7 +88,7 @@ def hooks():
 sys.stdout.flush()
 deadline=datetime.datetime.now()+datetime.timedelta(minutes=timeout)
 deadline=calendar.timegm(deadline.timetuple())
-print(subprocess.check_output("docker-compose -f " + compose_file + " up -d", shell=True).decode())
+print(subprocess.check_output(f"docker compose -f {compose_file} up -d", shell=True).decode())
 print()
 print(Fore.LIGHTMAGENTA_EX + "Sleeping for 10s" + Style.RESET_ALL)
 time.sleep(10)
diff --git a/tests/compose/webdav/mailu.env b/tests/compose/webdav/mailu.env
index f0842dd4..9d70c58d 100644
--- a/tests/compose/webdav/mailu.env
+++ b/tests/compose/webdav/mailu.env
@@ -128,7 +128,7 @@ WEBSITE=https://mailu.io
 # Log driver for front service. Possible values:
 # json-file (default)
 # journald (On systemd platforms, useful for Fail2Ban integration)
-# syslog (Non systemd platforms, Fail2Ban integration. Disables `docker-compose log` for front!)
+# syslog (Non systemd platforms, Fail2Ban integration. Disables `docker compose log` for front!)
 # LOG_DRIVER=json-file
 
 # Docker-compose project name, this will prepended to containers names.
diff --git a/tests/compose/webmail/01_ensure_admin_unreachable.sh b/tests/compose/webmail/01_ensure_admin_unreachable.sh
index 4fd78a1b..1d8a467e 100755
--- a/tests/compose/webmail/01_ensure_admin_unreachable.sh
+++ b/tests/compose/webmail/01_ensure_admin_unreachable.sh
@@ -1,6 +1,6 @@
 #!/bin/bash
 
-IP="$(docker inspect webmail_webmail_1|jq -r '.[0].NetworkSettings.Networks.webmail_default.IPAddress')"
+IP="$(docker inspect webmail-webmail-1|jq -r '.[0].NetworkSettings.Networks.webmail_webmail.IPAddress')"
 
 MAIN_RETURN_CODE=$(curl -I -so /dev/null -w "%{http_code}" http://$IP/)
 [[ $MAIN_RETURN_CODE -ne 200 && $MAIN_RETURN_CODE -ne 302 ]] && echo "The default page of snappymail hasn't returned 200 but $MAIN_RETURN_CODE!" >>/dev/stderr && exit 1
diff --git a/tests/compose/webmail/docker-compose.yml b/tests/compose/webmail/docker-compose.yml
index 5e106105..d61621d3 100644
--- a/tests/compose/webmail/docker-compose.yml
+++ b/tests/compose/webmail/docker-compose.yml
@@ -32,6 +32,9 @@ services:
       - "127.0.0.1:993:993"
     volumes:
       - "/mailu/certs:/certs"
+    networks:
+      - default
+      - webmail
 
   admin:
     image: ${DOCKER_ORG:-mailu}/${DOCKER_PREFIX:-}admin:${MAILU_VERSION:-local}
@@ -105,6 +108,8 @@ services:
       - "/mailu/webmail:/data"
     depends_on:
       - imap
+    networks:
+      - webmail
 
 
 networks:
@@ -114,6 +119,8 @@ networks:
       driver: default
       config:
         - subnet: 192.168.203.0/24
+  webmail:
+    driver: bridge
   noinet:
     driver: bridge
     internal: true
diff --git a/tests/compose/webmail/mailu.env b/tests/compose/webmail/mailu.env
index c1e0dff0..26fa5cdb 100644
--- a/tests/compose/webmail/mailu.env
+++ b/tests/compose/webmail/mailu.env
@@ -128,7 +128,7 @@ WEBSITE=https://mailu.io
 # Log driver for front service. Possible values:
 # json-file (default)
 # journald (On systemd platforms, useful for Fail2Ban integration)
-# syslog (Non systemd platforms, Fail2Ban integration. Disables `docker-compose log` for front!)
+# syslog (Non systemd platforms, Fail2Ban integration. Disables `docker compose log` for front!)
 # LOG_DRIVER=json-file
 
 # Docker-compose project name, this will prepended to containers names.
diff --git a/towncrier/newsfragments/2660.misc b/towncrier/newsfragments/2660.misc
new file mode 100644
index 00000000..80905f3d
--- /dev/null
+++ b/towncrier/newsfragments/2660.misc
@@ -0,0 +1 @@
+Change the instructions on how to setup fail2ban
diff --git a/towncrier/newsfragments/2676.feature b/towncrier/newsfragments/2676.feature
new file mode 100644
index 00000000..f2999c97
--- /dev/null
+++ b/towncrier/newsfragments/2676.feature
@@ -0,0 +1 @@
+Add Czech translation for web administration interface.