29 Commits (bcecbda9dea3e82374b415a7efe5d678916500a1)

Author SHA1 Message Date
Alexander Graf 37855153b8
fixed plugin path 3 years ago
Florent Daigniere 6d5926ef29 prettify 3 years ago
Dimitri Huisman 385cb28bf2 Correctly calculate and set SESSION_TIMEOUT in roundcube 3 years ago
Alexander Graf 1a41657f90
add documentation, allow overrides, clean plugins 3 years ago
Alexander Graf 64acfacc73
duh. typo 3 years ago
Alexander Graf 547ad253e1
added plugin selection, derive key, clean env 3 years ago
Alexander Graf c89045ed03 duh 3 years ago
Alexander Graf 920ac4cd21 updated to php8. fixed login. fixed max_filesize. 3 years ago
Alexander Graf ee45475567 updated roundcube. added cleanup run at startup 3 years ago
Alexander Graf 7380b248cf direct logging of php errors to stderr 3 years ago
Alexander Graf 16691e83ad re-enable mod_rewrite in roundcube
moved chown/mkdir/symlink from start.py to Dockerfile
3 years ago
bors[bot] fc1a663da2
Merge #1754
1754: centralize Webmail authentication behind the admin panel (SSO) r=mergify[bot] a=nextgens

## What type of PR?

Enhancement: it centralizes the authentication of webmails to the admin interface.

## What does this PR do?

It implements the glue required for webmails to do SSO using the admin interface.
One of the main advantages of centralizing things this way is that it reduces significantly the attack surface available to an unauthenticated attacker (no webmail access until there is a valid Flask session).

Others include the ability to implement 2FA down the line and rate-limit things as required.

### Related issue(s)
- #783

## Prerequistes
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [x] In case of feature or enhancement: documentation updated accordingly
- [x] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/guide.html#changelog) entry file.


Co-authored-by: Florent Daigniere <nextgens@freenetproject.org>
3 years ago
parisni a9548e4cbd Remove mailu/roundcube shared host 3 years ago
parisni 5386e33af3 Reformat python 3 years ago
parisni 49c5c0eba6 Split mailu / roundcube db config
There is no reason to share the flavor since at least the dbname shall be different.
3 years ago
Florent Daigniere e8f70c12dc avoid a warning 4 years ago
Florent Daigniere 2cdee8d18e Make roundcube use internal auth 4 years ago
Michael Wyraz 12667c70f6 Fix roundcube permissions, tail correct log 5 years ago
Michael Wyraz fe09cf5705 Default to DB_FLAVOR/DB_HOST if ROUNDCUBE_DB_FLAVOR/ROUNDCUBE_DB_HOST is not set 5 years ago
Michael Wyraz 8242ca150d Create/update database on startup 5 years ago
Michael Wyraz 982c93e3a2 Print roundcube error log to stdout 5 years ago
Michael Wyraz 9b10e938cf Make roundcube db configurable 5 years ago
hoellen 9de5dc2592 Use python package socrate instead of Mailustart 5 years ago
Ionut Filip 004a431e97
Change to mailustart functions 6 years ago
Tim Möhlmann 049ca9941f
Cleanup syntax and fix typo 6 years ago
Tim Möhlmann 7d01bb2a4d
LOG_LEVEL docs and changelog entry 6 years ago
Tim Möhlmann b04a9d1c28
Implement debug logging for template rendering 6 years ago
Ionut Filip 94edb48f08 Dynamic attachment size 6 years ago
Ionut Filip 1187cac5e1 Finished up switching from .sh to .py 6 years ago