Commit Graph

20 Commits (d959a31d918027d11a35b3b432ac8bf6a5c11f43)

Author SHA1 Message Date
Alexander Graf a29f066858
Move even more python deps to base image
Florent Daigniere 1630a18dd8 Ensure that Mailu keeps working even if it can't obtain a certificate from letsencrypt for one of the HOSTNAMES
Florent Daigniere 6d80eea649 ghostwheel42's suggestion
Florent Daigniere d677c465a7 Handle spaces too
Florent Daigniere 3a56525e21 As discussed on #mailu-dev
Don't attempt to guess what the user wants
Florent Daigniere 81b592f3cb try to get LE certs for the new names
Florent Daigniere 0816cb9497 simplify as per ghostwheel42's suggestion
Florent Daigniere e4a32b55f5 Send ISRG_X1 on port 25, make DANE pin that
Florent Daigniere 3e676e232a fix
Jack Murray dd127f8f06 Change letsencrypt timer from 1h --> 1 day
There's no need to be calling certbot so frequently
Jack Murray e304c352a1 Change letsencrypt timer from 1h --> 1 day
There's no need to be calling certbot so frequently
Florent Daigniere c76a76c0b0 make it optional, add a knob
Florent Daigniere 109a8aa000 Ensure that we always have CERT+INTERMEDIARY CA
Let's encrypt may change things up in the future...
Florent Daigniere 12c842c4b9 In fact in fullchain we want all but the last
Florent Daigniere 24f9bf1064 format certs for nginx
Florent Daigniere f05cc99dc0 Add ECC certs for modern clients
Florent Daigniere cb68cb312b Reduce the size of the RSA key to 3072bits
This is already generous for certificates that have a 3month validity!

We rekey every single time.
Tim Möhlmann 42e2dbe35d
Standarize image by using shared / similair layers
kaiyou ac53b3ed97 Merge branch 'master' into refactor-repo
kaiyou 689be5f2d9 Move all directories per theme