lub
/
mailu
1
0
Fork 0
Code Issues Pull Requests Packages Releases Wiki Activity
578 Commits
3 Branches
0 Tags
7.4 MiB
Commit Graph

221 Commits (c94e976f43221361d8a3ccece706ebc91eeea671)

Author SHA1 Message Date
kaiyou 1c0717e3db Merge pull request from nalt/master 
Admin: Switch to alpine for smaller image size
kaiyou 388d77dec7 Merge pull request from droopy4096/user_raw 
User import routine (and selector for ecryption hashing algorithm)
nalt 29cc77383b Admin: Switch to alpine for smaller image size
Dmytro Makovey 8565939904 ignoring virtualenv artefacts etc.
Dmytro Makovey 433da57015 add more CLI operations: deletions of users and aliases
Dmytro Makovey d099e24f18 added object deletion to config update
Dmytro Makovey e4b338c9a4 add config sync for bulk operations on users and aliases driven by config management systems etc.
Dmytro Makovey aef8975332 rename user_raw to user_import for more clarity. Add proper docstring
Dmytro Makovey db9ac1f68e add encryption scheme manipulation
n0izn0iz 434a3c017b Print stderr when certbot fails
kaiyou dc86a3feec Try to renew the certificate less often, related to
kaiyou 2bfe11c1a4 Merge pull request from interlegis/1.4-managercommands 
Add setlimits and setmanager commands to manage.py
kaiyou ffac116e1f Merge branch 'stable'
Fabio Rauber 4d0b9f9299 Add setlimits and setmanager commands to manage.py
Niels Keurentjes 010e5ca2a6 Perform read-only splits for the containers 
The .gitsplit.yml file contains the configuration to be used by Jérémy
Derussé's docker-gitsplit container.

For usage instructions see https://github.com/jderusse/docker-gitsplit
matiasvictor c350a2b2ae Add portuguese translation
Pierre Jaury c1d175d7a7 Handle infinite quotas when adding validators, fixes 
(cherry picked from commit fe0b292d45)
Pierre Jaury fe0b292d45 Handle infinite quotas when adding validators, fixes
Pierre Jaury 7e037663a1 Use relative path for certificates, fixes 
(cherry picked from commit e6c18e6ac3)
Pierre Jaury e6c18e6ac3 Use relative path for certificates, fixes
Pierre Jaury be5562620e Enable https and --preload on the admin to improve letsencrypt support
Pierre Jaury 0ff6dc892d Install certbot from pip instead of source
Pierre Jaury 25d8b9e614 Add a keep option per fetch, fixes
Pierre Jaury 38f291bc5d Implement a maximum quota per domain, fixes
Pierre Jaury 41b1666609 Fix the behaviour from Wtforms Components regarding readonly, related to
Pierre Jaury 182e844ae6 Set password properly when using the CLI, fixes,
kaiyou 020ec8ef6b Merge pull request from sanduhrs/german-translation-update 
Update german translation from poeditor.com
Stefan Auditor f043e50983 Add method to create an alias
Stefan Auditor 2c3c52a2ec Add method to create a normal user
Stefan Auditor 9f8051f6e7 Update german translation from poeditor.com: add some missing strings, a few wording corrections, fix typo
Pierre Jaury 764b9e209b Bug when redirecting after deleting a fetch, related to
Pierre Jaury a5f061a8b2 Fix a typo when renaming the domain variable
Pierre Jaury 720db8e72a Generate a certificate for the proper hostname
Pierre Jaury 373998ea99 Do not use objects after deleting them, fixes
kaiyou 08e4e2ee86 Update messages.po (POEditor.com)
Pierre Jaury 8ac9400c85 Add some missing translations
Pierre Jaury c3b9756000 Announcement to all users, fixes
Stefan Auditor eacf2a363b Add german translation
Pierre Jaury 9ef706517a Add the Docker client helper
Pierre Jaury 9e0718b00f Speed up local builds of the admin container
Pierre Jaury a8bc8e9d4b Reload Docker containers when certificates are generated
Pierre Jaury bbf71b262e Move docker related features to a separate module
Pierre Jaury 4246179b88 First working certificate generation code, related to
Pierre Jaury a9cb1e2d11 Change the spam threshold to an integer, related to
Pierre Jaury afbcb9b8c6 Remove an exception trigger in the main init file
d-fens 40820e4701 Fix admin template to reference github repository
Pierre Jaury c9aff0691b Add a scheduler to the Flask application
Pierre Jaury d4f93e39db Select translation based on browser configuration, fixes
kaiyou 9f09e0c8e0 Update messages.po (POEditor.com)
Pierre Jaury 013286b8e1 Rename the freeposte/mailu directory and database
Pierre Jaury 7be2d458d9 Use Email as a mixin and explicitely specify table names 
This also fixes , as explained in the ticket, because Flask
SQlAlchemy is not accessing declared attributes early anymore.
Pierre Jaury c7fe29c957 Push the missing messages.pot
Pierre Jaury c007b37df7 Display error messages when Docker is unreachable properly, related to
Pierre Jaury 984b605d05 Compile translations when building the admin container
Pierre Jaury acf4addae0 Add initial translations, fix
Pierre Jaury c37ad3557f Missing translations
Pierre Jaury 3fa44613b1 Add a default babel configuration
Pierre Jaury 3ade5641d9 Fix the confirmation form
Pierre Jaury 0beeeade41 Enable Babel for all views
Pierre Jaury a3ad45c8ac Use babel for base views
Pierre Jaury fe035114e9 Enable Babel for forms
Pierre Jaury d3436668d8 Enable Babel
Pierre Jaury 676a9a5d2c Do not redirect users to admin pages, fix
Pierre Jaury c028a3799d Write an equivalence test for domains, fixes 
(cherry picked from commit 144f427088acf9439fd9971898296137b8339f9a)
kaiyou 1ae8fe6af1 Merge pull request from diresi/junk_filter 
dovecot: use rspamd X-Spamd-Result percentage to evaluate spam
Pierre Jaury c02faada94 Remove deprecated references to flask_wtf.Form, fix
Pierre Jaury e7399e6926 Add a development run.py script
Christoph Rissner b9de28e910 dovecot: use rspamd X-Spamd-Result percentage to evaluate spam 
- configures dovecot to use the spamtest sieve plugins
- configures sieve to read the score from X-Spamd-Result: headers
- before.sieve applies the ${spam_threshold} to the spamtest percentage
- freeposte.db stores a percentage for ${spam_threshold}
- migrate freeposte.db spam_threshold from X/15 to percentages

the filter investigates the overall ratio of the `rspamd` header
`X-Spamd-Result` that looks something like this:

X-Spamd-Result: default: True [12.36 / 15.00]
 RBL_SPAMHAUS_XBL(4.00)[]
 BAYES_SPAM(3.06)[92.67%]
 RBL_SPAMHAUS_XBL_ANY(4.00)[]
 ONCE_RECEIVED_STRICT(4.00)[]
 HFILTER_HELO_BAREIP(3.00)[]
 RBL_SORBS_DUL(2.00)[]
 HFILTER_HOSTNAME_UNKNOWN(2.50)[]
 RBL_SPAMHAUS_PBL(2.00)[]
 RBL_SORBS_RECENT(1.50)[]
 MIME_UNKNOWN(0.10)[application/x-rar-compressed]
 RDNS_NONE(1.00)[]
 RBL_SORBS(0.00)[]
 R_SPF_NEUTRAL(0.00)[?all]
 ONCE_RECEIVED(0.10)[]
 RBL_SEM(1.00)[]
 MIME_HTML_ONLY(0.20)[]
 RBL_UCEPROTECT_LEVEL1(1.00)[]
 MIME_GOOD(-0.10)[multipart/mixed]

the sieve `spamtest :percent :value` in this case would be
   100*12.36/15 = 82.4%
Pierre Jaury 525089a531 Do not leak information about existing domains or users
Pierre Jaury 2cb4a44b5a Display fetchmail errors to the user, fixes
kaiyou 18253b1dd3 Merge pull request from vhf/admin-creation 
Allow admin creation after initial setup
Victor Felder 3976a5b38e Allow admin creation after initial setup
Victor Felder 97d952d7f1 Fix a typo
Pierre Jaury e24da96e58 Add some documentation to access decorators
Pierre Jaury 09bec055fd Fix domain deletion permissions
Pierre Jaury c1f9b61dac Add a simple permission audit script
Pierre Jaury f8dcef22ef Fix the manager deletion behaviour
Pierre Jaury f541a951de Remove obsolete utils module
Pierre Jaury 713318f097 Clean imports and remove calls to the utils module
Pierre Jaury ee9a416696 Implement the decorator-based access control for all views
Pierre Jaury 4e4f2b8037 First shot at improving access control, related to 
A couple of things are important to note for this commit:
- it only implements the new access control for alias and admin management
- the access control code is located in access.py

The idea behind simpler access control is auditability. There have been a
couple of bugs related to functions not checking permissions properly. If
checking permissions is as simple as decorating a function, exporting the
permission scheme for an audit should be simple.

Also, this still does not address the information leakage related to 404 errors
when an object does not exist, independently of permissions the user has over
the domain.
Pierre Jaury 3ea3bc1d8e Enforce permission checks for admin management
Pierre Jaury 6dc9131b97 Fix the wildcard migration script, fixes
Pierre Jaury e3197f9156 Have the admin interface listen on localhost
Pierre Jaury 8601d5b8db Fix when deleting a global admin
Pierre Jaury 0d3c75aa89 Fix a migration issue with wildcard aliases
Pierre Jaury 84769cab3e Switch to form-based confirmations, fixes
Pierre Jaury 5a69ada041 Add an action confirmation form, related to
Pierre Jaury 58337d7dd6 Set a proper default for spam thresholds
Pierre Jaury 1ce0bf2ef7 Update the user settings view with a slider
Pierre Jaury 0371da6307 Add the migration script for wildcard aliases, related to
XYunknown 6d4243ec66 Adding SQL Like format for aliases
Pierre Jaury b3d7b657ab Remove deprecated flask.ext imports
Pierre Jaury 9640d59aca Fix , serve static resources locally
Pierre Jaury 689c022a4a Get back to a single forward destination
Pierre Jaury 678a5c8065 Fix , use ellipsis for overflowing text
Pierre Jaury c07211677c Fix the default value for comma separated lists
Pierre Jaury 163494cb78 Use readonly attribute instead of disabled
Pierre Jaury 6af7a07e77 Avoid having an empty entry in destionation fields
Pierre Jaury 5581f1b0d9 Related to , fix the alias creation page