Commit Graph

212 Commits (32d44b96c37bd38b36fcfd91b0e27251e10d0bed)

Author SHA1 Message Date
Mario Jauvin db39d6b1e2 Set client_max_body_size in default nginx config file
Mario Jauvin 53a8543772 update permission
Mario Jauvin 5a909bd45d Add config.py and set permissions
Mario Jauvin 7dc9802447 Added subprocess import
Mario Jauvin a9f4fc1b3c Use MESSAGE_SIZE_LIMIT in webmail container also
The webmail container should use the same value as the front container.
mnival 5695bbb0f6 Configuring pwstore_scheme in carddav plugin with des_key because Mailu is incompatible with encrypted
Eric d9ea9f7009
Update php.ini
matching rainloop php to roundcube's: timezone is a parameter in mailu.env
mnival 4b9781210f Add /overrides directory in include
Alexander Graf 37855153b8
fixed plugin path
willofr 93a94d33ce
update roundcube to 1.5.2 (security fix)
New roundcube release (1.5.2) where a XSS is addressed: https://roundcube.net/news/2021/12/30/update-1.5.2-released
bkraul d494dd7d2a Fixes
Dimitri Huisman b248026933 Fix . Gpg-agent package was missing for roundcube image.
Florent Daigniere 6d5926ef29 prettify
Dimitri Huisman 385cb28bf2 Correctly calculate and set SESSION_TIMEOUT in roundcube
Dimitri Huisman ab80316df6 Fix error in roundcube config
Florent Daigniere 3a46ee073c Make roundcube use SESSION_TIMEOUT
Alexander Graf 1a41657f90
add documentation, allow overrides, clean plugins
Alexander Graf b3d48cc20f
fixed health check
Alexander Graf e7e283663d
Merge remote-tracking branch 'upstream/master' into update_roundcube
Alexander Graf 64acfacc73
duh. typo
Alexander Graf 547ad253e1
added plugin selection, derive key, clean env
Alexander Graf 7c2c2dc65a
updated to carddav 4.3.0
Alexander Graf 1ebdb26979
updated to rc 1.5.1
Dimitri Huisman f7677543c6 Process code review remarks
- Moved run to bottom of Dockerfile to allow using unmodified / cached states.
- Simplified bash code in deploy.sh.
- Improved the large bash one-liner in CI.yml. It could not handle >9 for 1.x.
Dimitri Huisman 56dd70cf4a Implement versioning for CI/CD workflow (see ).
Alexander Graf 423b8a6b9b
Merge branch 'master' into update_roundcube
DjVinnii a6beb234ff Set timezone in roundcube.ini
DjVinnii 225160610b Set default TZ in Dockerfiles
Alexander Graf 6003e11533 duh. add timezone (again)
Alexander Graf 949efcf537 prevent endless redirect loop on nginx failure
Alexander Graf c89045ed03 duh
Alexander Graf 920ac4cd21 updated to php8. fixed login. fixed max_filesize.
Alexander Graf 46d27e48ff Merge remote-tracking branch 'upstream/master' into update_roundcube
DjVinnii a1f0c20583 Add tzdata to webmails
Alexander Graf ee45475567 updated roundcube. added cleanup run at startup
Dimitri Huisman 5232bd38fd Simplify webmail logout.
Dimitri Huisman 44d2448412 Updated SSO logic for webmails. Fixed small bug rate limiting.
Alexander Graf ef9e1ac279 remove health check from log
Alexander Graf 7380b248cf direct logging of php errors to stderr
Alexander Graf cd17aa0c43 repair failing health-check
Alexander Graf 16691e83ad re-enable mod_rewrite in roundcube
moved chown/mkdir/symlink from start.py to Dockerfile
Diman0 7083b3f7c6 Fix roundcube sso header issue
Removed apache rewrite module.
Alexander Graf 6c510e2e86 enabled caching via .htaccess
Erriez 6cecacb6da Add catch_workers_output to php-rainloop.conf
Erriez 6437540704 Change error_log to warn
Erriez 5adc4f08f6 Restore curl
Erriez 10f2c17979 Restore Roundcube PHP files
Erriez 5a1d89aaac Restore Rainloop Dockerfile HEALTHCHECK
Erriez 556a5897d1 Install php7-pdo and php7-pdo_sqlite for contacts
Erriez d0a0ba6727 Optimize PHP pm setting to ondemand
The ondemand setting results in lower memory consumption in idle.
Erriez 0fd97124f7 Process review feedback
Erriez d472900efa Optimize Rainloop to NGINX
- Reduce build time.
- Reduce image size.
- Faster user response using CGI.
Florent Daigniere defea3258d update arm builds too
bors[bot] 66ea28b50a
Merge
1845: Update rainloop to 1.16.0 r=mergify[bot] a=nextgens

## What type of PR?

Security-update for rainloop.

## What does this PR do?

Upgrade to rainloop v1.16

### Related issue(s)
- 

## Prerequistes
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [x] In case of feature or enhancement: documentation updated accordingly
- [x] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/guide.html#changelog) entry file.


Co-authored-by: Florent Daigniere <nextgens@freenetproject.org>
Florent Daigniere d75c8469d3 Update rainloop to 1.16.0
Alexander Graf 14bdeb5e1e Update version of roundcube webmail and carddav plugin.
This is a security update.

- roundcube 1.4.11
- carddav 4.1.2
bors[bot] fc1a663da2
Merge
1754: centralize Webmail authentication behind the admin panel (SSO) r=mergify[bot] a=nextgens

## What type of PR?

Enhancement: it centralizes the authentication of webmails to the admin interface.

## What does this PR do?

It implements the glue required for webmails to do SSO using the admin interface.
One of the main advantages of centralizing things this way is that it reduces significantly the attack surface available to an unauthenticated attacker (no webmail access until there is a valid Flask session).

Others include the ability to implement 2FA down the line and rate-limit things as required.

### Related issue(s)
- 

## Prerequistes
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [x] In case of feature or enhancement: documentation updated accordingly
- [x] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/guide.html#changelog) entry file.


Co-authored-by: Florent Daigniere <nextgens@freenetproject.org>
parisni a9548e4cbd Remove mailu/roundcube shared host
parisni 5386e33af3 Reformat python
parisni 49c5c0eba6 Split mailu / roundcube db config
There is no reason to share the flavor since at least the dbname shall be different.
Florent Daigniere dd3d03f06d Merge remote-tracking branch 'upstream/master' into webmail-sso
bors[bot] 0f8d2077a5
Merge
1691: update webmails to PHP 7.4 r=mergify[bot] a=lub

## What type of PR?

update

## What does this PR do?

### Related issue(s)

## Prerequistes
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [ ] In case of feature or enhancement: documentation updated accordingly
- [ ] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/guide.html#changelog) entry file.



I think it's a minor change, which needs no changelog.

I've tested rainloop, would be great if someone could test roundcube, because I don't use it.

Co-authored-by: lub <git@lubiland.de>
bors[bot] cca4b50915
Merge
1607: _FILE variables for Docker swarm secrets r=mergify[bot] a=lub

## What type of PR?

enhancement

## What does this PR do?

This PR enables usage of DB_PW_FILE and SECRET_KEY_FILE instead of DB_PW and SECRET_KEY to load these values from files instead of supplying them directly. That way it's possible to use Docker secrets.

### Related issue(s)


## Prerequistes
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [x] In case of feature or enhancement: documentation updated accordingly
- [x] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/guide.html#changelog) entry file.


Co-authored-by: lub <git@lubiland.de>
Florent Daigniere e8f70c12dc avoid a warning
Florent Daigniere 80f939cf1a Revert to the old behaviour when ADMIN=false
Florent Daigniere 2cdee8d18e Make roundcube use internal auth
Florent Daigniere 906a051925 Make rainloop use internal auth
ronivay eb0dc7f90a disable php version expose
lub 8dd5dac3ed update roundcube to php 7.4
lub d63ca857b4 update rainloop to php 7.4
lub 02cfe326d3 support using files for SECRET_KEY and DB_PW
this enables usage of e.g. docker swarm secrets instead of exposing the
passwords directly via environment variables

just use DB_PW_FILE and SECRET_KEY_FILE instead of DB_PW and SECRET_KEY
Thomas Sänger e8eaad6c88
update roundcube
bors[bot] ddac2672fc
Merge
1338: Add GPG to Roundcube r=mergify[bot] a=PhilRW

The web UI was complaining that it couldn't find the GPG binary. Turns out it wasn't installed.

## What type of PR?

bug fix

## What does this PR do?

Adds GPG binary to Roundcube

Co-authored-by: Philip Rosenberg-Watt <PhilRW@users.noreply.github.com>
Co-authored-by: Dario Ernst <github@kanojo.de>
bors[bot] 0469e96f8e
Merge
1298: Added carddav-plugin for roundcube webmail r=ofthesun9 a=sholl

## Feature

This PR enables the carddav contacts plugin for integration remote contact-repositories based on CardDAV.

## What does this PR do?

This PR enables the carddav contacts plugin for integration remote contact-repositories based on CardDAV.

### Related issue(s)
- Related , at least for CardDAV.


## Prerequistes
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [x] In case of feature or enhancement: documentation updated accordingly (not needed since the plugins of webmail is not mentioned in the docs.)
- [x] Changelog-entry added


Co-authored-by: Stephan Holl <stephan@holl-land.de>
TheLegend875 519600a78b Set From header for delivery reports
closes 
Michael Wyraz 12667c70f6 Fix roundcube permissions, tail correct log
Dario Ernst 4d475f4e69
Merge branch 'master' into patch-1
bors[bot] e41b072938
Merge
1268: Roundcube db r=Nebukadneza a=micw

## What type of PR?

feature

## What does this PR do?

- makes roundcube work with mysql
- runs db init/upgrade scripts on startup
- redirects roundcube logs to stdout

### Related issue(s)
- preparations to solve 
- closes  (side effect ;-) )

## Prerequistes

- [x] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/guide.html#changelog) entry file.


Co-authored-by: Michael Wyraz <michael@wyraz.de>
Co-authored-by: micw <michael@wyraz.de>
Thomas Sänger 5e2d0b78b6
Update Roundcube to 1.4.3
micw e08f4ab7a9
Fix wrong psql lib name
micw b4d81f833d
Add pdo_pgsql to Dockerfile
Philip Rosenberg-Watt 7a552f02c3 Add gpg to Roundcube
The web UI was complaining that it couldn't find the GPG binary. Turns out it wasn't installed.
hoellen 9c2390ff7e Update RainLoop to 1.14.0
Michael Wyraz fe09cf5705 Default to DB_FLAVOR/DB_HOST if ROUNDCUBE_DB_FLAVOR/ROUNDCUBE_DB_HOST is not set
Michael Wyraz 8242ca150d Create/update database on startup
Michael Wyraz 982c93e3a2 Print roundcube error log to stdout
Michael Wyraz 06926561e2 Install php-mysql on roundcube container
Michael Wyraz 9b10e938cf Make roundcube db configurable
hoellen 94bfd7770b Update Roundcube to 1.4.2
Stephan Holl a22e8eb0c5 Added carddav-Plugin for roundcube.
bors[bot] 8fb3c688e7
Merge
1267: Update roundcube to 1.4.0 and enable new elastic skin r=hoellen a=hoellen

## What type of PR?
enhancement

## What does this PR do?
This PR brings the new roundcube 1.4.0 release with the new elastic skin.
![grafik](https://user-images.githubusercontent.com/11299996/69373290-c86cd680-0ca3-11ea-8dd5-d76beafc65a6.png)
![grafik](https://user-images.githubusercontent.com/11299996/69373358-e6d2d200-0ca3-11ea-8b92-3b8a528eb6c0.png)


As an idea we could integrate the Mailu logo in a next step to customize the webmail client a bit.

## Prerequistes
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [x] In case of feature or enhancement: documentation updated accordingly
- [x] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/guide.html#changelog) entry file.


Co-authored-by: hoellen <dev@hoellen.eu>
Michael Wyraz 09ee3ce95c Install py3-multidict from repository before installing socrate to avoid the need of gcc during build
hoellen 30d924b2c3 Update Roundcube to 1.4.1
hoellen fc320028a9 Update roundcube to 1.4.0 and enable new skin
Emil Petersson 291db780d0 Do not override values in /usr/local/etc/php/conf.d/roundcube.ini
bors[bot] 0417c791ff
Merge
985: Permit raspberry pi (and other architectures) builds r=mergify[bot] a=abondis

## What type of PR?

Enhancement

## What does this PR do?

Add an option to select base images and permit building for different CPU architectures.

### Related issue(s)
N/A

## Prerequistes

- [X] documentation updated accordingly
- [x] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/guide.html#changelog) entry file.


Co-authored-by: Aurélien Bondis <aurelien.bondis@gmail.com>
Co-authored-by: Aurelien <aurelien.bondis@gmail.com>
Aurélien Bondis 34079244a6 fix ARG positions
Thomas Sänger 56efc46af8
update roundcube 1.3.10
Aurélien Bondis e1a4bf32a6 only insert qemu binary if building for arm
Ionut Filip 075417bf90 Merged master and fixed conflicts