Commit Graph

2969 Commits (98742268e6bae14dc778ecad69812068bc2038d5)
 

Author SHA1 Message Date
Dimitri Huisman 9f4e906534
Update docs/webadministration.rst
Co-authored-by: Dario Ernst <github@kanojo.de>
bors[bot] 92bf736da4
Merge
1635: Add support for AUTH LOGIN authentication mechanism for relaying emai… r=mergify[bot] a=Diman0

…l via smart hosts.

## What type of PR?

Feature

## What does this PR do?

This PR adds support to postfix for AUTH LOGIN authentication mechanism. This enables using smart hosts which only offer AUTH LOGIN. 

### Related issue(s)
- Auto close an issue like: closes 

## Prerequistes
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [n/a] In case of feature or enhancement: documentation updated accordingly
- [x] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/guide.html#changelog) entry file.


Co-authored-by: Dimitri Huisman <diman@huisman.xyz>
bors[bot] bf77d7c59d
Merge
1613: Add warnings about Dockers IPv6 solution r=mergify[bot] a=Simonmicro

## What type of PR?

enhancement

## What does this PR do?
Added some warnings and explanations about the current Docker ipv6 situation as suggested in https://github.com/Mailu/Mailu/issues/1578.

### Related issue(s)
closes 

## Prerequistes
- [x] In case of feature or enhancement: documentation updated accordingly
- [x] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/guide.html#changelog) entry file.


1617: relax TLS settings on port 25 r=mergify[bot] a=lub

Because basically every MTA out there uses opportunistic TLS _in
the best case_, it's actually counter productive to use such strict
settings.

The alternative to a handshake error is often an unencrypted submission,
which is basically the opposite of what strict ssl_protocols and
ssl_ciphers tries to achieve.

Even big and established providers like Amazon SES are incompatible with the current
settings.

This reverts commit 2ddf46ad2b.

## What type of PR?

bug-fix

## What does this PR do?

### Related issue(s)
- this reverts 
- the settings in this PR were initially introduced in  and intentionally divert from tls.conf

cc @bladeswords as they introduced the current config

1636: Add config file for the "stale" robot to clean up issues r=mergify[bot] a=Nebukadneza

## What type of PR?

enhancement

## What does this PR do?

With this, and the already activated github-app, the stale robot will
mark and subsequently close issues as specified in the config.

Currently we mark after 21 days, close after 7 more days, and ignore
issues with an assigned priority or milestone.

### Related issue(s)
Related:  

## Prerequistes
- No: In case of feature or enhancement: documentation updated accordingly
- No: Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/guide.html#changelog) entry file.


Co-authored-by: Simonmicro <simon@simonmicro.de>
Co-authored-by: lub <git@lubiland.de>
Co-authored-by: Dario Ernst <dario.ernst@rommelag.com>
bors[bot] 2640a95b6e
Merge
1629: Add mergify team-members r=Nebukadneza a=Nebukadneza

## What type of PR?

enhancement

## What does this PR do?

Sync the newly added team-members to the mergify team-regex so that they will benefit from the "team needs only one approve" rule


### Related issue(s)

## Prerequistes
- [x] In case of feature or enhancement: documentation updated accordingly
- [x] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/guide.html#changelog) entry file.


Co-authored-by: Dario Ernst <dario.ernst@rommelag.com>
Dario Ernst 8f49bb8d53 Add config file for the "stale" robot to clean up issues
With this, and the already activated github-app, the stale robot will
mark and subsequently close issues as specified in the config.

Currently we mark after 21 days, close after 7 more days, and ignore
issues with an assigned priority or milestone.
Dimitri Huisman a662c3f6f1 Changed change log file to correct filename
Dimitri Huisman d9e7b8249b Add support for AUTH LOGIN authentication mechanism for relaying email via smart hosts.
Dario Ernst 957b6ac104 Revert "Remove whitespaces in newlines"
This reverts commit 6c29d232e7.
Jon Wilson 5e32447f07 Change unbound logfile to the empty string
This is defined to send log messages to stderr, which is
what we want - fixes  ("Could not open logfile /dev/stdout:
Permission denied")
Dario Ernst 7e1150d9e5 Sync mergify team-member list to actualy members
Dario Ernst 6c29d232e7 Remove whitespaces in newlines
bors[bot] 2d68fa42d4
Merge
1615: Create ISSUE_TEMPLATE.md r=Nebukadneza a=Diman0

Add bug template to be used for reporting issues.

## What type of PR?

Feature?

## What does this PR do?
Add bug template which we will use to get better quality bug reports.

### Related issue(s)
- Auto close an issue like: closes 

## Prerequistes
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [N/A] In case of feature or enhancement: documentation updated accordingly
- [N/A] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/guide.html#changelog) entry file.


Co-authored-by: Dimitri Huisman <52963853+Diman0@users.noreply.github.com>
Co-authored-by: Dario Ernst <dario@kanojo.de>
lub e8b6747080 add newsfragemnt for
lub 66db1f8fd0 add OCSP stapling to nginx.conf
It's not added in tls.conf, because apparently the mail ssl module
doesnt' support OCSP stapling.

https://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_stapling
^ exists

https://nginx.org/en/docs/mail/ngx_mail_ssl_module.html#ssl_stapling
^ missing

When the configured certificate doesn't have OCSP information, it'll
just log a warning during startup.
Dario Ernst f3313fa26c Remove <> tags as they break markdown rendering
Dario Ernst 2e574d7ffb Fix issue-template whitespacing; Add some small formatting
lub 0cb0a26d95 relax TLS settings on port 25
Because basically every MTA out there uses opportunistic TLS _in
the best case_, it's actually counter productive to use such strict
settings.

The alternative to a handshake error is often an unencrypted submission,
which is basically the opposite of what strict ssl_protocols and
ssl_ciphers tries to achieve.

Even big and established providers like Amazon SES are incompatible with the current
settings.

This reverts commit 2ddf46ad2b.
Wolfgang Jung 1f4e9165fa Disables unencrypted http on TLS_ERROR
Dimitri Huisman 8b0e2edc52
Create ISSUE_TEMPLATE.md
Add bug template to be used for reporting issues.
Simonmicro eca00905cf
Minor formulation
Simonmicro 4a5678f571
Added explaining message about the current ipv6 problem
Simonmicro db440d46be
Added line of warning
Alexander Graf 8e14aa80ee documented options and added help text
Alexander Graf 9d2327b0f1 add space for more human readable indentation
add a newline before main sections
add some spaces to indent
Wolfgang Jung f999e3de08 Adds own server on port 80 for letsencrypt and redirect
lub 05e2af1802
fix small typo in Auth-SSL
lub d348477efc add towncrier for 1610
lub f0f873ffe7 add option to enforce inbound starttls
lub 714fa044e0 add towncrier for
lub 426355f6b8 add some docs about _FILE variables
lub 02cfe326d3 support using files for SECRET_KEY and DB_PW
this enables usage of e.g. docker swarm secrets instead of exposing the
passwords directly via environment variables

just use DB_PW_FILE and SECRET_KEY_FILE instead of DB_PW and SECRET_KEY
Alexander Graf ffbeabeb6f updated test to use --verbose flag
--verbose (or -v) is now a flag and not an option
Alexander Graf 85de702129 small typo. Change 'omitting' to 'commiting'
Alexander Graf 0cf91f35a4 moved change log entry to towncrier
bors[bot] 550065b043
Merge
1601: Fixing documentation minor typo r=mergify[bot] a=akevinieron

## What type of PR?
Documentation

## What does this PR do?
Fixing minor typo on certificate section

## Related issue(s)
N/A

Co-authored-by: Kevin Jimenez <kevinjimenezlorenzo@gmail.com>
Alexander Graf bc9362685b Merge remote-tracking branch 'upstream/master' into import-export
Alexander Graf 3a5a15a5e6 updated documentation and changelog
added some documentation for cli commands config-dump and config-update
Alexander Graf 69ccf791d2 fixed data import via from_dict
- stabilized CommaSeparatedList by sorting values
- CommaSeparatedList can now handle list and set input

- from_dict now handles mapped keys
- from_dict now handles null values

- class Domain: handle dkim-key None correctly
- class User: delete obsolete keys after converting
- class Alias: now uses Email._dict_input
Alexander Graf 190e7a709b renamed config-dump option --verbose to --full
bors[bot] 61e06ebbf9
Merge
1603: fixed workflow example in documentation r=mergify[bot] a=ghostwheel42

## What type of PR?

documentation

## What does this PR do?

fix error in workflow example. use "git remote add" to add upstream as remote.

### Related issue(s)

-/-

Co-authored-by: Alexander Graf <agraf@kevag-telekom.de>
Alexander Graf 5c0efe82cf implemented config_update and config_dump
enhanced data model with to_dict and from_dict methods
added config_dump function to manage command
config_update now uses new data model methods
Alexander Graf c26ddd3c68 fixed user's destination property
self.forward_destination is a list (and not string)
Alexander Graf 5dfccdafe9 fixed some minor typos, removed unused variable
Alexander Graf 669d8da9ac fixed workflow example in documentation
use "git remote add" instead of "git add remote"
Kevin Jimenez b86dc12c1f
Fixing documentation minor typo
bors[bot] f612758a4a
Merge
1599: Fix hardcoded reference to admin container. r=mergify[bot] a=Nebukadneza

Superseding  

## What type of PR?

big-fix

## What does this PR do?

Fixes a hardcoded reference to ``admin`` container which may or may not be called ``admin`` in reality, since the user may eventually to name the container otherwise.

### Related issue(s)
- closes 
- subsumes  

## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- Minor bug-fix, no additional documentation needed.


Co-authored-by: Richard Gomes <rgomes.info@gmail.com>
bors[bot] 7e5991796f
Merge
1600: Force setup-file download scheme to HTTPS r=mergify[bot] a=Nebukadneza



## What type of PR?

bug-fix

## What does this PR do?
Up until now HTTPS was only offered by redirect, making MitM possible
before server redirect hit the client.
Add scheme-force to HTTPS to the url-generation.

### Related issue(s)
- fixes  

## Prerequistes
- [x] In case of feature or enhancement: documentation updated accordingly
- [x] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/guide.html#changelog) entry file.


Co-authored-by: Dario Ernst <dario.ernst@rommelag.com>
bors[bot] ac3dfd5cde
Merge
1553: Added FAQ about SMTP Banner r=mergify[bot] a=arother

## What type of PR?
documentation

## What does this PR do?
Adding FAQ about SMTP Banner

### Related issue(s)
- closes  

## Prerequistes
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

Co-authored-by: Andreas Rother <andreas@rother.org>
Co-authored-by: Dario Ernst <github@kanojo.de>
Dario Ernst 9a440e2604 Force setup-file download scheme to HTTPS
Up until now HTTPS was only offered by redirect, making MitM possible
before server redirect hit the client.
Add scheme-force to HTTPS to the url-generation.

fixes 
Dario Ernst bf8acbb343
Remove section about hostname change
Changing Hostname in the .env and in the banner might lead to various breakages of the setup — so don’t advise it to users in the FAQ.

Co-authored-by: Thomas Sänger <thomas@gecko.space>