lub
/
mailu
1
0
Fork 0
Code Issues Pull Requests Packages Releases Wiki Activity
3,002 Commits
3 Branches
0 Tags
7.4 MiB
main
dynamic-resolution
master
Branches Tags
${ item.name }
Create tag ${ searchTerm }
Create branch ${ searchTerm }
from 'f1a60aa6ea'
${ noResults }
Commit Graph

105 Commits (f1a60aa6eaabc2267fa76169853747c2371643c3)

Author SHA1 Message Date
bors[bot] 20e00ac0c4
Merge #1158 
1158: Use nginx for kubernetes ingress r=kaiyou a=micw

## What type of PR?

enhancement

## What does this PR do?

Currently, kubernetes uses a complex ingress setting which is not portable across different ingress controllers. This PR simplifies the ingress and delegates everythins special to Mailu to the front container,

### Related issue(s)
- closes #1121
- closes #1117
- closes #1021
- closes #1045

## Prerequistes

- [x] In case of feature or enhancement: documentation updated accordingly
- [x] Unless it's docs or a minor change: add [changelog]

Co-authored-by: Michael Wyraz <michael@wyraz.de>
 5 years ago
bladeswords b13d143b34
Update to address issue #1178 (HTTP headers) 
This change should remove the duplicate `x-xss-protection` header and also the `x-powered-by` header.  Hopefully a pull request to main is appropriate, but may be worth back porting to 1.7.

Tested config by modifying live 1.7 nginx config and reloading.  Has had the desired outcome of removing the headers.

```/etc/nginx # nginx -t -c /etc/nginx/nginx.conf 
nginx: the configuration file /etc/nginx/nginx.conf syntax is ok
nginx: configuration file /etc/nginx/nginx.conf test is successful
/etc/nginx # nginx -s reload
```

These steps were based on:
- https://serverfault.com/questions/928912/how-do-i-remove-a-server-added-header-from-proxied-location
- https://serverfault.com/questions/929571/overwrite-http-headers-comming-back-from-a-web-application-server-proxied-in-ngi
- http://nginx.org/en/docs/http/ngx_http_proxy_module.html#proxy_hide_header
 5 years ago
Thomas Sänger 5fa87fbdf7
front: advertise real capabilites of mail-backends 5 years ago
Michael Wyraz 92645bcd4a Use nginx for kubernetes ingress 5 years ago
Tim Möhlmann ed0fb77a01
Catch empty WEBMAIL and WEBDAV address 5 years ago
Ionut Filip 075417bf90 Merged master and fixed conflicts 5 years ago
Thomas Sänger 2c7d1d2f71
use HTTP/1.1 for proxyied connections 5 years ago
Ionut Filip 4c25c83419 HOST_* and *_ADDRESS variables cleanup 6 years ago
Tim Möhlmann 5636e7f5a7
Remove to avoid matching webroot 6 years ago
Tim Möhlmann 4f93e09028
Implement favicon package 
Credit to:
- https://stackoverflow.com/a/19590415/1816774
- https://realfavicongenerator.net/
 6 years ago
Tim Möhlmann 24828615cf
Webmail on root, fixes #757 6 years ago
Tim Möhlmann c00910ca4b
Merge remote-tracking branch 'upstream/master' into extend-nginx 6 years ago
Tim Möhlmann 97d338e68a
Rectify 'endif' placement 6 years ago
Tim Möhlmann 425cdd5e77
Fix syntax errors 6 years ago
Tim Möhlmann 20f1faf6d0
Send 404 when nothing server at '/' 
Prevents Nginx welcome screen
 6 years ago
Tim Möhlmann 2de4995fec
Don't redirect when webmail is served on '/' 6 years ago
Tim Möhlmann 9dd447e23b
Add login method to smtp_auth under ssl 
Fixes #704
 6 years ago
Patrick Georgi eac4d553a9 nginx: Allow extending config with overrides 
To facilitate this, the default redirect at / can be disabled, even if
the default remains at redirecting to the webmailer.

The extensions are within the host scope and are read from
$ROOT/overrides/nginx/*.conf.
 6 years ago
Thomas Sänger 603b6e7390
Merge pull request #2 from usrpro/fix-nginx-healthcheck 
Fix nginx healthcheck
 6 years ago
Tim Möhlmann c3e89967fb
Fix front health checking 
- Specified seperated /health path in order to allow for healthcheck even if webmail and admin are not seletectd. This also allows healthchecking fom external services like DNS load balancers;
- Make curl not to fail on TLS because localhost is not included in the certificates.
 6 years ago
mergify[bot] bce1487338
Merge pull request #576 from hacor/master 
Kubernetes fixed for production
 6 years ago
Paul Williams 78bd5aea1c enable http2, because it's that easy 6 years ago
hoellen d4f32c3e7d remove rewrite if webmail is on root 6 years ago
hacor 4ea12deae7 Added kubernetes to Mailu 6 years ago
kaiyou 75a1bf967c
Merge pull request #502 from hoellen/webmail-messagesize 
Use message_size_limit variable from env for webmail client_max_body_size
 6 years ago
hoellen c51e1b9eef webmail client_max_body_size with message_size_limit and 8M tolerance 6 years ago
hoellen 81a6a7cbf6 Use message_size variable from env for webmail 6 years ago
hoellen a1fb8442e3 Add posibilty to run webmail on root '/' 6 years ago
Scott b9e67635f4 Use HOST_ADMIN in "Forwarding authentication server". Fixes #436. 7 years ago
kaiyou dfb5463c94 Relax the frame filtering to allow roundcube to display previews 7 years ago
kaiyou 04278b6cbf Pass the full host to the backend, fixes #372 7 years ago
kaiyou 6c56c8e298 Specify the client max body size in the front, related to #371 7 years ago
Mildred Ki'Lya f538e33dcf Parametrize hosts 
Allows to use mailu without docker-compose when hostnames are not set up
by docker itself but provided via a separate resolver.

Use case: use mailu using nomad scheduler and consul resolver instead of
docker-compose. Other servers are provided by the DNS resolver that
resolves names like admin.service.consul or webmail.service.consul.
These names needs to be configurable.
 7 years ago
SunMar 6ec0fe7036 Adding options for mail-letsencrypt 7 years ago
kaiyou d0b8de72e4 Do not deny HTTP access upon TLS error when the flavor is mail 7 years ago
kaiyou bfc898c2d8 Move dhparam to /conf 7 years ago
kaiyou acb5d7da38 Use relative redirect for / to the webmail 7 years ago
kaiyou 2dfc91ac4d Use a map for passing x-forwarded-proto along 7 years ago
kaiyou a4f46ced49 Properly use x-forwarded-proto with redirects in the webui, related to #347 7 years ago
kaiyou 48d736feef Configure a resolver for the mail server to populate xclient hostnames 7 years ago
kaiyou 743eb81908 Fix the Webdav behavior with Radicale, related to #334 7 years ago
kaiyou 328001a417
Merge pull request #329 from HorayNarea/patch-1 
Disable ssl_session_tickets, see https://wiki.mozilla.org/Security/Server_Side_TLS#TLS_tickets_.28RFC_5077.29
 7 years ago
kaiyou f3ae318132 Perform webdav authentication in nginx, fixes #330 7 years ago
kaiyou 8920982213 Properly pass the request uri to the authentication backend 7 years ago
kaiyou 97dd9ed77c Fix a missing variable in the nginx config 7 years ago
Thomas Sänger d61ba8e651
disable ssl_session_tickets 7 years ago
kaiyou eb32871904 Force nginx to run dns queries at runtime 7 years ago
Thomas Sänger ad7c5e48c5
automatically set nginx-worker based on CPU-count 7 years ago
kaiyou f362ecdb19 Fix the missing trailing space on /webmail, fixes #304 7 years ago
kaiyou 1a3f85fbc2 Make the rspamd webui available, fixes #157 7 years ago
kaiyou 92f2025d7c Enable pop3 on the frontend, fix #313 7 years ago
kaiyou bfa50c5aa7 Add a new TLS flavor named 'mail' 7 years ago
kaiyou edbea372e9 Merge branch 'master' into refactor-repo 7 years ago
kaiyou ac53b3ed97 Merge branch 'master' into refactor-repo 7 years ago
kaiyou 689be5f2d9 Move all directories per theme 7 years ago