Commit Graph

3987 Commits (3cb8358090824e72e845fa829780699f161e0c60)
 

Author SHA1 Message Date
Florent Daigniere e2d4e3eb2e Implement header authentication via external proxy
Florent Daigniere 840b2bd9df block o:0:{} too
Florent Daigniere 017ea5298e typo
Florent Daigniere 2a4f6836cf protect unserialize()
Florent Daigniere e5ab9821f9 Add snuffleupagus
This seems to work in my limited testing.
Florent Daigniere bdc085048d Restore the Dockerfile like it was
Florent Daigniere b28798c74f doh
Florent Daigniere 1bfab1dbfa Maybe fix the test?
Florent Daigniere 6137f93d23 add a GTUBE test to check the antispam
Florent Daigniere 3cb87b6e49 Update entry
Florent Daigniere e3b875aa6b Well, -i stands for --insecure
Florent Daigniere 3b5b00d87d towncrier
Florent Daigniere e79d7fed55 Reduce the number of warnings on the CI
Florent Daigniere 699be6f9fa Drop privs when running admin too
Florent Daigniere 42cd5bf2dc Move it to base since admin will also use it
Florent Daigniere 80559ecb71 optimize caching
Florent Daigniere 21b9f76ebc setup doesn't need root
Florent Daigniere e5a1a353db Upgrade to alpine 3.16.3
This has PHP fixes and a new rspamd
Florent Daigniere 86637f0259 Make setup use the base image
bors[bot] 68bb8da2b7
Merge
2538: Fix the ARM build again r=mergify[bot] a=nextgens

I have double-checked from the builder and this works.

gcc -v from the alpine image tells me that we have  ``--enable-default-pie``

Co-authored-by: Florent Daigniere <nextgens@freenetproject.org>
Florent Daigniere 7745420fe0 Fix the ARM build again
bors[bot] b66f3fe9de
Merge
2537: Fix the armv7 build (again)! r=mergify[bot] a=nextgens

Revert "simplify": ghostwheel42's approach was right
This reverts commit 04f6bd2633.

Without the build still errors-out because of ``set -euxo pipefail``
see https://github.com/Mailu/Mailu/actions/runs/3479399158/jobs/5817902589

Co-authored-by: Florent Daigniere <nextgens@freenetproject.org>
Florent Daigniere b9b0c77d2e Revert "simplify": ghostwheel42's approach was right
This reverts commit 04f6bd2633.
Florent Daigniere 15b889fac8 Specify that this is optional
bors[bot] f43c8c652e
Merge
2483: Introduce FETCHMAIL_ENABLED r=mergify[bot] a=DjVinnii

## What type of PR?

Enhancement

## What does this PR do?
Add `FETCHMAIL_ENABLED` to enable/disable the Fetchmail functionality in the Admin UI.

### Related issue(s)
- closes 

## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [x] In case of feature or enhancement: documentation updated accordingly
- [x] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.


2535: fix the linux/arm/v7 build r=mergify[bot] a=nextgens

## What type of PR?

bug-fix

## What does this PR do?

The arm builder is running aarch64 ... and there is no package for arm/v7


Co-authored-by: Vincent Kling <v.kling@vinniict.nl>
Co-authored-by: Dimitri Huisman <diman@huisman.xyz>
Co-authored-by: Florent Daigniere <nextgens@freenetproject.org>
Dimitri Huisman 8afb544a10
Default FETCHMAIL_ENABLED to False
Florent Daigniere 32f3241569 ensure we have -pie too
Florent Daigniere 7ab3d8f9fe There is no good reason not to export them is the base image too
Florent Daigniere aa44a42654 ensure we compile the wheels with bells and whistles too
Florent Daigniere 04f6bd2633 simplify
Florent Daigniere d43e7f72df ghostwheel42's suggestion
Florent Daigniere 1f895d5f82 ghostwheel42's suggestion
Florent Daigniere 031a157ad9 fix the linux/arm/v7 build
bors[bot] 04a196c417
Merge
2525: Switch to GrapheneOS's hardened_malloc r=mergify[bot] a=nextgens

## What type of PR?

Feature

## What does this PR do?

Switch to GrapheneOS's hardened_malloc

This was suggested during the dev meeting of the 18/09/22.

It may break things and it may make things unbearably slow... but it should also make the exploitation of memory corruption bugs a lot harder.

## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [ ] In case of feature or enhancement: documentation updated accordingly
- [x] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.


2534: Close : document SQLALCHEMY_DATABASE_URI r=mergify[bot] a=nextgens

## What type of PR?

documentation

## What does this PR do?

document SQLALCHEMY_DATABASE_URI

### Related issue(s)
- closes 

## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [x] In case of feature or enhancement: documentation updated accordingly
- [ ] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.


Co-authored-by: Florent Daigniere <nextgens@freenetproject.org>
bors[bot] 40bdf7a6d9
Merge
2530: disable SESSION_COOKIE_SECURE when TLS_FLAVOR=notls r=mergify[bot] a=nextgens

## What type of PR?

bug-fix

## What does this PR do?

People are unlikely to proxy everything

### Related issue(s)
- closes 

Co-authored-by: Florent Daigniere <nextgens@freenetproject.org>
bors[bot] 3b150ff9a4
Merge
2532: Allow JS debugging, speed-up asset-build, disable redirect-debug. r=mergify[bot] a=ghostwheel42

## What type of PR?

bug-fix

## What does this PR do?

Another bugfix to the run_dev.sh helper

Co-authored-by: Alexander Graf <ghostwheel42@users.noreply.github.com>
Florent Daigniere b9e5560fb6 Better way to express the same thing
Thanks @ghostwheel42
Florent Daigniere 63513608b9 Close : document SQLALCHEMY_DATABASE_URI
Florent Daigniere 66de1dcec8 Change the logic
The idea here is that if you have set SESSION_COOKIE_SECURE we should
honor that... and if you haven't we should try to do the right thing.
Florent Daigniere 81628149a2 don't fake the library
Florent Daigniere 9b2f018be6 add --no-cache
Florent Daigniere 76f8517e00 This is still required (as TLS_FLAVOR isn't set)
Florent Daigniere b9564c0bc9 This shouldn't have been commited
Florent Daigniere 19af2944d7 Refactor as requested
Alexander Graf 6b470ac403
Allow proper JS debugging, speed-up assets dev-build, disable redirect-debug by default.
Florent Daigniere 7aad1158fb @ghostwheel42 will fix it in another PR
Florent Daigniere a566cb07d6 fix
Florent Daigniere 08b3a2814b Merge branch 'master' of https://github.com/Mailu/Mailu into notls
Florent Daigniere 385b6ac85d Use string formatting
Florent Daigniere 6474108056 Use a join() instead