87 Commits (fccb0cc57f82f88235d3d10d58be4aff7762a483)

Author SHA1 Message Date
Florent Daigniere e1ddbb6eec Rollback to alpine 1.12
it ships unbound 1.10 that doesn't have the bug I think
08968baec1
3 years ago
Florent Daigniere 0211c06c37 don't need sudo here 3 years ago
Florent Daigniere 420afa53f8 Upgrade to alpine 3.14 3 years ago
parisni d2803f6f46 Update setup website 3 years ago
parisni 278878d48d Remove unused deps 3 years ago
bors[bot] 42cefab4c2
Merge #1760
1760: Security updates to postgresql r=mergify[bot] a=WebSpider

## What type of PR?

Security update

## What does this PR do?

It fixes vulnerabilities in the sudo package in the postgresql optional container documented in
CVE-2021-23240, CVE-2021-3156 and CVE-2021-23239

### Related issue(s)

None

## Prerequistes
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [x] In case of feature or enhancement: documentation updated accordingly
- [x] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/guide.html#changelog) entry file.


Co-authored-by: Nils Vogels <n.vogels@aves-it.nl>
3 years ago
Dario Ernst 4dbefe8e3a
Merge pull request #1631 from toastboy70/bug/#1536
Change unbound logfile to the empty string
3 years ago
Nils Vogels 6c4fa5432f Provide fix in postgresql container for CVE-2021-23240, CVE-2021-3156, CVE-2021-23239 3 years ago
cbachert 72a9ec5b7c Fix extract_host_port port separation
Regex quantifier should be lazy to make port separation work.
4 years ago
Jon Wilson 5e32447f07 Change unbound logfile to the empty string
This is defined to send log messages to stderr, which is
what we want - fixes #1536 ("Could not open logfile /dev/stdout:
Permission denied")
4 years ago
Richard Gomes b414757ff8 Fix hardcoded reference to admin container. 4 years ago
ofthesun9 539114a3d6
Merge branch 'master' into test-alpine-3.12 4 years ago
ofthesun9 16ec9adadd
Update optional/radicale/Dockerfile
Co-authored-by: Dario Ernst <github@kanojo.de>
4 years ago
ofthesun9 e8b72099a7 Switching to alpine:3.12 and use fetchmail from alpine repository
alpine3:12 provides fetchmail 6.4.5, so building fetchmail from alpha branch
is not needed anymore (ssl wrapped mode issue fixed) since 6.4.2
4 years ago
ofthesun9 e5f892ce70 Adjust radicale Dockerfile for alpine:3.12 & layers optimisation 4 years ago
ofthesun9 cff2e76269 Switching to alpine:3.12 4 years ago
ofthesun9 506b7e9372 Use Radicale 3.x for webdav service
- remove ==2.1.12 in Dockerfile pip3 install radicale
- remove -f flag in Dockerfile CMD
- remove deprecated daemon and dns_lookup settings from radicale.conf
- move realm setting from [server] to [auth] in radicale.conf
- add newsfragment
4 years ago
ofthesun9 6647c96bf9 Fixed typo in Dockerfile 4 years ago
ofthesun9 45f3772c26 Stick radicale to 2.1.12 version
As 3.0 is breaking compatibility with 2.1 branch
4 years ago
Tim Möhlmann dd07b0e3aa
Postgresql: default SUBNET6 in pg_hba 4 years ago
bors[bot] 564ca741a4
Merge #1257
1257: Allow local IPv6 connections to Postgres r=mergify[bot] a=tulir

## What type of PR?

bug-fix

## What does this PR do?

Fix postgres connection not working when IPv6 is enabled

Co-authored-by: Tulir Asokan <tulir@maunium.net>
4 years ago
Alexander A. Klimov 313e98c1a2 fetchmail: print unhandled exceptions, but don't crash
refs #1295
4 years ago
kaiyou 7507345ce9 Fix encoding of custom fields in fetchmailrc 4 years ago
Nick Young 0281205313
Upgrade alpine to get new clamav. 5 years ago
bors[bot] cfd838f310
Merge #1215
1215: Allow specifying the traefik version for cert dumping r=mergify[bot] a=timoschwarzer

## What type of PR?

Enhancement

## What does this PR do?

### Related issue(s)
- #1011 

## Prerequistes
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [X] In case of feature or enhancement: documentation updated accordingly
- [X] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/guide.html#changelog) entry file.


Co-authored-by: Timo Schwarzer <me@timoschwarzer.com>
5 years ago
Michael Wyraz 09ee3ce95c Install py3-multidict from repository before installing socrate to avoid the need of gcc during build 5 years ago
Tulir Asokan dcef6ff3e3
Allow local IPv6 connections to Postgres 5 years ago
Dario Ernst b374072892 Radicale: Use pip package instead of alpine repo
Required to fix failing builds caused by [alpine]upstream package rebuild against different python version
5 years ago
Tim Möhlmann 4e4b071fb0
Move services into core and optional 5 years ago
Timo Schwarzer 0c82caf817
Allow specifying the traefik version for cert dumping 5 years ago
Aurélien Bondis 124b1d4c71 rebase and update for 3.10, avoid adding qemu file to x86 images 5 years ago
Dennis Boldt d6cf5b991b
Update run.sh
On the first run, this script shows the error 'diff: can't stat '/output/cert.pem': No such file or directory', because the file does not exist in the folder `/output` yet. This bugfix ensures, that the diff is only called, when all required files are available.
5 years ago
bors[bot] f9ed1b74d9 Merge #1082
1082: Use socrate instead of Mailustart r=mergify[bot] a=hoellen

## What type of PR?

enhancement

## What does this PR do?
This PR updates the `Dockerfile`, `setup.py` and `config.py` of each image to support the new [Mailu/socrate](https://github.com/Mailu/socrate) python package. So [MailuStart](https://github.com/Mailu/MailuStart) is not used anymore for resolving DNS and configuration processing. 

## Prerequistes
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [x] In case of feature or enhancement: documentation updated accordingly
- [x] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/guide.html#changelog) entry file.


Co-authored-by: hoellen <dev@hoellen.eu>
5 years ago
bors[bot] b4f0002e86 Merge #1074
1074: Update traefik-certs-dumper r=muhlemmer a=YouriT

## What type of PR?

bug-fix

## What does this PR do?

Remove a useless dependency & update the command line according to the [latest ldez/traefik-certs-dumper documentation](https://github.com/ldez/traefik-certs-dumper/blob/master/docs/traefik-certs-dumper_file.md).

Co-authored-by: Youri Tolstoy <ytolstoy@gmail.com>
Co-authored-by: Tim Möhlmann <muhlemmer@gmail.com>
5 years ago
hoellen 9de5dc2592 Use python package socrate instead of Mailustart 5 years ago
Youri Tolstoy bfe4798e06
Update run.sh
update command according to ldez/traefik-certs-dumper
5 years ago
Youri Tolstoy d6cebcd102
Update Dockerfile
remove docker dependency
5 years ago
Dario Ernst 1dbda71401 Adapt shared layer conf to now really-missing mailustart in admin (after merging webpack) 5 years ago
Dario Ernst 0306be1eed Re-add missing MailuStar in admin
It turns out we were all blind and admin *does* use MailuStart
5 years ago
Dario Ernst 53f754f5ac Remove MailuStart from admin and correct layer-sharing comments 5 years ago
Dario Ernst bb2edb6eb6 Revert "Move alpine version definition out to variable"
This reverts commit c787e4bdbd.
5 years ago
Dario Ernst c787e4bdbd Move alpine version definition out to variable 5 years ago
Dario Ernst 1fa287a6d9 Update radicale dockerfile to alpine 3.10 5 years ago
Dario Ernst d1f80cca99 Update Dockerfiles to most recent alpine 3.10 5 years ago
Thomas Sänger ef3c6c407a upgrade alpine base-image 5 years ago
Dario Ernst 1acd629e6f Use ldez/traefik-certs-dumper in certificate dumper, and make more robust
closes #820
5 years ago
Abel Alfonso Fírvida Donéstevez 39444c794e Install bash in alpine based images.
This fix https://github.com/Mailu/Mailu/issues/918

Bash shell is used by default in Kubernetes' dashboard console, which is very
useful for admins.
5 years ago
Dario Ernst 2c5f977117
Make certdumper output fullchain-pems
Before it only outputted a pem-file with the server-certificate —
however, it seems some clients want the fullchain delivered, as it’s
common with letsencrypt.

closes #847
6 years ago
Ionut Filip 50343f354e Merge remote-tracking branch 'upstream/master' into feat-psql-support 6 years ago
Tim Möhlmann 3e97e7e1c2
Missed a spot of cleaning syntax 6 years ago