You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
mailu/webmails
bors[bot] 7e60ba4e98
Merge #2613
2613: Enhance network segregation r=nextgens a=nextgens

## What type of PR?

enhancement

## What does this PR do?

- put radicale and webmail on their own network: this is done for security: that way they have no privileged access anywhere (no access to redis, no access to XCLIENT, ...)
- remove the EXPOSE statements from the dockerfiles. These ports are for internal comms and are not meant to be exposed in any way to the outside world.

### Related issue(s)
- #2611

## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [ ] In case of feature or enhancement: documentation updated accordingly
- [ ] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.


Co-authored-by: Florent Daigniere <nextgens@freenetproject.org>
2 years ago
..
roundcube Step1: expose managesieve, make the webmails use it 2 years ago
snappymail Step1: expose managesieve, make the webmails use it 2 years ago
Dockerfile Don't expose any port (suggestion from ghost) 2 years ago
nginx-webmail.conf Better snappymail defaults 2 years ago
php-webmail.conf Hardening: run the http and php as different users 2 years ago
php.ini Add snuffleupagus 2 years ago
snuffleupagus.rules Upgrade to snuffleupagus 0.9.0 2 years ago
start.py drop privs better 2 years ago