2500: Password policy enforcement r=mergify[bot] a=nextgens
## What type of PR?
Feature
## What does this PR do?
It enforces that all new passwords set by users are at least 8 characters in length and checks all users' passwords at login time against HIBP.
The HIBP part requires javascript and Mailu to be accessed over HTTPS to work but degrades gracefully (no message will be shown if the requirements are not met).
It was a conscious choice to implement it at this level: administrators can set weaker passwords using non-HTTP based interfaces.
### Related issue(s)
- close#2208
- close#287
## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.
- [ ] In case of feature or enhancement: documentation updated accordingly
- [x] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.
Co-authored-by: Florent Daigniere <nextgens@freenetproject.org>
Co-authored-by: Alexander Graf <ghostwheel42@users.noreply.github.com>
2518: Add dev runner for admin container r=mergify[bot] a=ghostwheel42
## What type of PR?
development feature
## What does this PR do?
This adds a shell script (run_dev.sh) to run a live development environment in a container.
Co-authored-by: Alexander Graf <ghostwheel42@users.noreply.github.com>
2517: Use the new notation: arm64/v8 instead of arm64 r=mergify[bot] a=nextgens
## What type of PR?
bug-fix
## What does this PR do?
With a modern version of docker compose, on arm64 you get:
```
docker-compose pull
[+] Running 0/8
⠼ admin Pulling 1.4s
⠿ smtp Error 1.4s
⠿ imap Error 1.4s
⠿ webmail Error 1.4s
⠿ antispam Error 1.4s
⠼ redis Pulling 1.4s
⠼ front Pulling 1.4s
⠿ resolver Error 1.4s
no matching manifest for linux/arm64/v8 in the manifest list entries
```
This may fix it.
It's discussed at https://stackoverflow.com/questions/70819028/relation-between-linux-arm64-and-linux-arm64-v8-are-these-aliases-for-each-othe
Co-authored-by: Florent Daigniere <nextgens@freenetproject.org>
Co-authored-by: Dimitri Huisman <diman@huisman.xyz>
2498: Implement ITERATE in podop r=mergify[bot] a=nextgens
## What type of PR?
Feature
## What does this PR do?
This makes ``doveadm -A`` work.
The easiest way to try it out is:
```
doveadm dict iter proxy:/tmp/podop.socket:auth shared/userdb
or
doveadm user '*'
```
The protocol is described at https://doc.dovecot.org/developer_manual/design/dict_protocol/
The current version of dovecot is not using flags... so there's little gain in implementing them.
### Related issue(s)
- close#2499
## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.
- [ ] In case of feature or enhancement: documentation updated accordingly
- [x] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.
Co-authored-by: Florent Daigniere <nextgens@freenetproject.org>
Co-authored-by: Alexander Graf <ghostwheel42@users.noreply.github.com>
2513: fix(auto-reply): include start and end dates in the auto-reply period r=mergify[bot] a=bb-wkr
## What type of PR?
bug-fix
## What does this PR do?
Include start and end dates in the auto-reply period
### Related issue(s)
closes#2512
## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry is not applicable, you can check it or remove it from the list.
- [X] In case of feature or enhancement: documentation updated accordingly
- [X] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.
Co-authored-by: wkr <wkr@bitsbeats.com>
2509: Login docker.io to prevent rate limiting for pulling images r=mergify[bot] a=Diman0
## What type of PR?
feat/fix
## What does this PR do?
Added login to docker.io for CI/CD workflow. When logged in, we have a higher limit for pulling images. The arm workers were rate limited.
Co-authored-by: Dimitri Huisman <diman@huisman.xyz>
2508: Actually push the build arm images to ghcr.io r=mergify[bot] a=Diman0
## What type of PR?
fix
## What does this PR do?
Makes sure the images build for arm are actually pushed to ghcr.io.
### Related issue(s)
n/a
## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.
- [n/a] In case of feature or enhancement: documentation updated accordingly
- [n/a] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.
Co-authored-by: Dimitri Huisman <diman@huisman.xyz>
2507: Fix the CI for ARM builds r=mergify[bot] a=nextgens
We should install the dependencies everywhere where we may have to rebuild the wheels.
If other people use other arch and want their builds to go faster we can whitelist them too after they have confirmed it works.
Co-authored-by: Florent Daigniere <nextgens@freenetproject.org>
2506: Finishing touches for fixing arm builds r=mergify[bot] a=Diman0
- Use self-hosted runners for arm base image
- Use seperate docker image cache for arm build
## What type of PR?
fix
## What does this PR do?
### Related issue(s)
n/a
## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.
- [n/a] In case of feature or enhancement: documentation updated accordingly
- [n/a] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.
Co-authored-by: Dimitri Huisman <diman@huisman.xyz>
2505: Fix building wheels when deps need to compile r=mergify[bot] a=ghostwheel42
## What type of PR?
bug-fix
## What does this PR do?
This installs build requiremnets (compiler, etc.) when tehre are no pre-built wheels an the current architecture.
Co-authored-by: Alexander Graf <ghostwheel42@users.noreply.github.com>
2504: Remove superfluous cache export entry for arm r=mergify[bot] a=Diman0
## What type of PR?
fix
## What does this PR do?
Fix arm build. The arm job contained one cache export entry too many. Only one cache export entry is allowed.
### Related issue(s)
## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.
- [n/a ] In case of feature or enhancement: documentation updated accordingly
- [n/a] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.
Co-authored-by: Dimitri Huisman <diman@huisman.xyz>
bors[bot]