b13d143b34
Update to address issue #1178 (HTTP headers)
...
This change should remove the duplicate `x-xss-protection` header and also the `x-powered-by` header. Hopefully a pull request to main is appropriate, but may be worth back porting to 1.7.
Tested config by modifying live 1.7 nginx config and reloading. Has had the desired outcome of removing the headers.
```/etc/nginx # nginx -t -c /etc/nginx/nginx.conf
nginx: the configuration file /etc/nginx/nginx.conf syntax is ok
nginx: configuration file /etc/nginx/nginx.conf test is successful
/etc/nginx # nginx -s reload
```
These steps were based on:
- https://serverfault.com/questions/928912/how-do-i-remove-a-server-added-header-from-proxied-location
- https://serverfault.com/questions/929571/overwrite-http-headers-comming-back-from-a-web-application-server-proxied-in-ngi
- http://nginx.org/en/docs/http/ngx_http_proxy_module.html#proxy_hide_header
5 years ago
e46153c0b1
Merge #1114
...
1114: Resolve HOST to ADDRESS only if ADDRESS is not already set r=mergify[bot] a=micw
## What type of PR?
bug-fix
## What does this PR do?
~Makes the rsolving from hosts to ips at startup configurable~
I rewrote the pull request after #940 was merged. Now it resolves HOSTs to ADDRESSes only of ADDRESSes are not already set. So on kubernetes we can jsut set the address and have working service discovery.
### Related issue(s)
- closes #1113
## Prerequistes
~Minor change, backward compatible~
Changelog will be added
Co-authored-by: Michael Wyraz <michael@wyraz.de>
5 years ago
5fa87fbdf7
front: advertise real capabilites of mail-backends
5 years ago
de2f166bd1
Resolve HOST_* to *_ADDRESS only if *_ADDRESS is not already set
5 years ago
4afbc09d6e
Remove unnecessary host variable assignments
5 years ago
ed0fb77a01
Catch empty WEBMAIL and WEBDAV address
5 years ago
075417bf90
Merged master and fixed conflicts
5 years ago
9de5dc2592
Use python package socrate instead of Mailustart
5 years ago
1dbda71401
Adapt shared layer conf to now really-missing mailustart in admin (after merging webpack)
5 years ago
0306be1eed
Re-add missing MailuStar in admin
...
It turns out we were all blind and admin *does* use MailuStart
5 years ago
ce0c24e076
Merge branch 'master' into HorayNarea-feat-upgrade-alpine
5 years ago
53f754f5ac
Remove MailuStart from admin and correct layer-sharing comments
5 years ago
2c7d1d2f71
use HTTP/1.1 for proxyied connections
5 years ago
bb2edb6eb6
Revert "Move alpine version definition out to variable"
...
This reverts commit c787e4bdbd
5 years ago
c787e4bdbd
Move alpine version definition out to variable
5 years ago
a253ca47fe
Use official Mailu/MailuStart
5 years ago
d1f80cca99
Update Dockerfiles to most recent alpine 3.10
5 years ago
ef3c6c407a
upgrade alpine base-image
5 years ago
4c25c83419
HOST_* and *_ADDRESS variables cleanup
6 years ago
39444c794e
Install bash in alpine based images.
...
This fix https://github.com/Mailu/Mailu/issues/918
Bash shell is used by default in Kubernetes' dashboard console, which is very
useful for admins.
6 years ago
f8dffe5a19
Resolve hosts in admin
6 years ago
004a431e97
Change to mailustart functions
6 years ago
049ca9941f
Cleanup syntax and fix typo
6 years ago
71cda7983e
Merge branch 'master' into feat-logging
6 years ago
7d01bb2a4d
LOG_LEVEL docs and changelog entry
6 years ago
b04a9d1c28
Implement debug logging for template rendering
6 years ago
5636e7f5a7
Remove to avoid matching webroot
6 years ago
4f93e09028
Implement favicon package
...
Credit to:
- https://stackoverflow.com/a/19590415/1816774
- https://realfavicongenerator.net/
6 years ago
24828615cf
Webmail on root, fixes #757
6 years ago
c7dcfee882
Merge pull request #713 from pgeorgi/extend-nginx
...
nginx: Allow extending config with overrides
6 years ago
6ca8ed437d
Merge pull request #732 from Nebukadneza/add_front_certificate_reload
...
Add certificate watcher for external certs to reload nginx
6 years ago
1aa97c9914
Add certificate watcher for external certs to reload nginx
...
In case of TLS_FLAVOR=[mail,cert], the user supplies their own certificates.
However, since nginx is not aware of changes to these files, it cannot
reload itself e.g. when the certs get renewed.
To solve this, let’s add a small daemon in the place of
`letsencrypt.py`, which uses a flexible file-watching framework and
reloads nginx in the case the certificates change ….
6 years ago
c00910ca4b
Merge remote-tracking branch 'upstream/master' into extend-nginx
6 years ago
97d338e68a
Rectify 'endif' placement
6 years ago
425cdd5e77
Fix syntax errors
6 years ago
20f1faf6d0
Send 404 when nothing server at '/'
...
Prevents Nginx welcome screen
6 years ago
2de4995fec
Don't redirect when webmail is served on '/'
6 years ago
9dd447e23b
Add login method to smtp_auth under ssl
...
Fixes #704
6 years ago
eac4d553a9
nginx: Allow extending config with overrides
...
To facilitate this, the default redirect at / can be disabled, even if
the default remains at redirecting to the webmailer.
The extensions are within the host scope and are read from
$ROOT/overrides/nginx/*.conf.
6 years ago
42e2dbe35d
Standarize image by using shared / similair layers
6 years ago
603b6e7390
Merge pull request #2 from usrpro/fix-nginx-healthcheck
...
Fix nginx healthcheck
6 years ago
81b24f61e8
Merge branch 'master' into feat-healthchecks
6 years ago
c3e89967fb
Fix front health checking
...
- Specified seperated /health path in order to allow for healthcheck even if webmail and admin are not seletectd. This also allows healthchecking fom external services like DNS load balancers;
- Make curl not to fail on TLS because localhost is not included in the certificates.
6 years ago
bce1487338
Merge pull request #576 from hacor/master
...
Kubernetes fixed for production
6 years ago
78bd5aea1c
enable http2, because it's that easy
6 years ago
d4f32c3e7d
remove rewrite if webmail is on root
6 years ago
3098343360
Merged conflicts
6 years ago
4ea12deae7
Added kubernetes to Mailu
6 years ago
39272ab05c
add healthcheck for http services
6 years ago
de43060ef8
Move to Alpine:3.8 and fixing #522
6 years ago
bladeswords