Commit Graph

4126 Commits (7d21966114f299d5108f5e9d04fe6bba90c22542)
 

Author SHA1 Message Date
Florent Daigniere 63a12d9857 changes requested by ghost
Florent Daigniere 546884d10c ghost's requested changes
bors[bot] 5a7d73dc3d
Merge
2554: Rollback to mysql-connector-python==8.0.29 r=mergify[bot] a=nextgens

See 

## What type of PR?

bug-fix

## What does this PR do?

Rollback to mysql-connector-python==8.0.29

### Related issue(s)
- closes  

## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [ ] In case of feature or enhancement: documentation updated accordingly
- [ ] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.


Co-authored-by: Florent Daigniere <nextgens@freenetproject.org>
Florent Daigniere 7e1ab7978e Block VBA Stomping too
Florent Daigniere 4881e0db2a ghost is right, it should be pinned here too
Florent Daigniere c1144612be
fix sorting
Florent Daigniere 4d8bd210c5
Update run_dev.sh
Florent Daigniere ee512112fb
fix flask db history
Florent Daigniere adacf579fc Rollback to mysql-connector-python==8.0.29
See 
Florent Daigniere 3e45a791cf Implement oletools to filter out bad macros
bors[bot] 9c6e9b05db
Merge
2543: Fix : make public announcements work r=nextgens a=nextgens

## What type of PR?

bug-fix

## What does this PR do?

Ensure public announcements bypass filters.

They can still time-out... but this is already a big improvement that we should be able to backport.

### Related issue(s)
- closes 

## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [ ] In case of feature or enhancement: documentation updated accordingly
- [x] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.


Co-authored-by: Florent Daigniere <nextgens@freenetproject.org>
Florent Daigniere 9fa3a3e0c7 doc
Florent Daigniere e94f6eaf33 towncrier
Florent Daigniere 9e61a33cb2 Merge branch 'master' of https://github.com/Mailu/Mailu into webmail-hardening
bors[bot] 6a3daa75ac
Merge
2539: Upgrade alpine, make setup use the base image r=mergify[bot] a=nextgens

## What type of PR?

enhancement

## What does this PR do?

Upgrade alpine, make setup use the base image, introduce a health-check, drop privileges. Drop privileges on admin too.

It may or may not help 

Co-authored-by: Florent Daigniere <nextgens@freenetproject.org>
Florent Daigniere f994c8687e doh
Florent Daigniere 44c47586ea Fix potential permission problems
Florent Daigniere d3d7916b58 Merge remote-tracking branch 'upstream/master' into upgrade-alpine
bors[bot] c1da586444
Merge
2526: Upgrade Snappymail to 2.21 and merge the webmail containers r=mergify[bot] a=nextgens

## What type of PR?

enhancement

## What does this PR do?

Upgrade Snappymail to 2.21 and merge the webmail containers. This will make the CI faster and should simplify things going forward (hardening but also allow running more than one webmail at the time, ...).

- enable APCu
- add new test to ensure we redirect to SSO and have disabled the admin panel
- add all the packaged dictionaries for spell checking
- harden the configuration of the webmails a bit (more to come in a separate PR)
- turn off deprecation warnings (php8.1 is too new)
- turn off error reporting (log them instead)
- return HTTP302 when we should
- gpg-verify the signature of the webmails we ship
- upgrade to snappymail 2.21, switch to the new json config format
- use socrates as it's meant to so that helm users can do their thing
- run the HTTPd and PHP as different users
- redirect the PHP errors to stderr

## Related issue(s)
- closes 
- closes 
- closes 

## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [ ] In case of feature or enhancement: documentation updated accordingly
- [x] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.


Co-authored-by: Florent Daigniere <nextgens@freenetproject.org>
Florent Daigniere ab852772f9 Bump snappymail to 2.21.3
Florent Daigniere 28d720bbc9 As requested
bors[bot] d650a9cc0f
Merge
2548: Fetchmail improvements (2) r=mergify[bot] a=nextgens

Follow-up to 

Co-authored-by: Florent Daigniere <nextgens@freenetproject.org>
Florent Daigniere 45b01db9de Fix the language switcher
Florent Daigniere 3fc0a0e7fa Merge branch 'master' of https://github.com/Mailu/Mailu into fetchmail-improvements
Florent Daigniere 4da2db1b0b add comment as requested
Florent Daigniere c79e8d3852 Fix display bug
bors[bot] 553b02fb3d
Merge
2529: Improve fetchmail r=mergify[bot] a=nextgens

## What type of PR?

enhancement

## What does this PR do?

Improve fetchmail:
- allow delivery via LMTP (faster, bypassing the filters)
- allow several folders to be retrieved
- run fetchmail as non-root
- tweak the compose file to ensure we have all the dependencies

### Related issue(s)
- closes  
- closes  
- closes 

## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [ ] In case of feature or enhancement: documentation updated accordingly
- [x] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.

Co-authored-by: Florent Daigniere <nextgens@freenetproject.org>
Co-authored-by: Florent Daigniere <nextgens@users.noreply.github.com>
bors[bot] 31c6c26ec8
Merge
2547: Disable libhardened-malloc for non x86. r=mergify[bot] a=nextgens

## What type of PR?

bug-fix

## What does this PR do?

Support is going to be a nightmare if RPI4 is not working; We can always reintroduce it later.

### Related issue(s)
- closes  


Co-authored-by: Florent Daigniere <nextgens@freenetproject.org>
bors[bot] 604eb69122
Merge
2545: Don't force a password reset r=mergify[bot] a=nextgens

## What type of PR?

bug-fix

## What does this PR do?

Don't force a password reset. You may want to edit the user without changing his password.


Co-authored-by: Florent Daigniere <nextgens@freenetproject.org>
Florent Daigniere dcf11aea48 Don't force a password reset
Florent Daigniere db9ed1fd59 Disable libhardened-malloc for non x86.
@see 

Support is going to be a nightmare if RPI4 is not working.
Florent Daigniere f802601a08
Update f4f0f89e0047_.py
Florent Daigniere d5ac9199a0
Update 7ac252f2bbbf_.py
Florent Daigniere 7822b41048 same for domains
Florent Daigniere ef9cc3c866 Show spoofing on /admin/user/list too
Florent Daigniere 38507b2e1b Close : Implement a GUI for WILDCARD_SENDERS
Florent Daigniere 6a22c82c02 Fix run_dev
Florent Daigniere cf7404e26c Fix : Make quotas adjustable in 50MiB increments
Florent Daigniere b20bf996ec Fix : make public announcements work
Florent Daigniere e2d4e3eb2e Implement header authentication via external proxy
Florent Daigniere 840b2bd9df block o:0:{} too
Florent Daigniere 017ea5298e typo
Florent Daigniere 2a4f6836cf protect unserialize()
Florent Daigniere e5ab9821f9 Add snuffleupagus
This seems to work in my limited testing.
Florent Daigniere bdc085048d Restore the Dockerfile like it was
Florent Daigniere b28798c74f doh
Florent Daigniere 1bfab1dbfa Maybe fix the test?
Florent Daigniere 6137f93d23 add a GTUBE test to check the antispam
Florent Daigniere 3cb87b6e49 Update entry
Florent Daigniere e3b875aa6b Well, -i stands for --insecure