837ee3b3b0
[Solr] Keep EdgeNGramFilterFactory out of query
...
[Compose] Update PHP-FPM, Solr and ACME images
2019-03-12 23:21:15 +01:00
fc63661fbd
[Solr] Change default configset before bootstrapping
...
[Solr] Bootstrap cannot be omitted and must occur before mounting the data directory
2019-03-12 23:15:26 +01:00
ae19d81f2d
Merge branch 'master' into admin-login
2019-03-10 10:38:42 +01:00
216451ed43
Merge branch 'master' into admin-login
2019-03-10 09:51:12 +01:00
c7c115d63a
[Solr] Use fixed, recommended schema but add EdgeNGramFilterFactory
2019-03-10 09:40:04 +01:00
47d4be8884
[Dovecot] v2.3.5 (PH 0.5.5)
...
[Dovecot] Change Solr cronjob to fit dovecot-fts
2019-03-10 09:35:26 +01:00
b6d9fbf747
[Postfix] Fix Postfix map
2019-03-09 12:30:36 +01:00
15970ab8dc
[Postfix] Fix sasl_passwd query from alias domain, fixes #2410
...
[Web] Major fix, added a line break!
[Compose] Update Postfix image
2019-03-09 11:22:39 +01:00
8e42ad4f1f
[Rspamd] Use stable unstable :)
2019-03-07 00:09:07 +01:00
d65f7a2bd4
[Watchdog] Do not hammer API too much when running Ipv6 NAT check
...
[Watchdog] Run IPv6 NAT check more often (300s sleep instead of 3600s)
2019-03-07 00:08:45 +01:00
e1ebacca27
[Rspamd] Drop rspamd.conf.local file
2019-03-06 15:06:51 +01:00
5bc8289d32
[Watchdog] Minor fixes, print last log lines on error
2019-03-04 17:56:27 +01:00
d365813997
Downgraded rspamd deb repository
2019-03-04 13:59:31 +01:00
c4dfed8a96
[Compose, Rspamd] Downgrade Rspamd
2019-03-03 22:54:47 +01:00
950ab30462
[Rspamd] Upgrade Rspamd
...
[Compose] New Rspamd image
2019-03-03 22:25:56 +01:00
fcbcc117d2
[Netfilter] Detect SOGo 403
...
[Compose] Update Netfilter
2019-02-28 20:22:16 +01:00
e2f39df7d8
remove obsolete code, use openssl instead of `cat /dev/urandom`
2019-02-26 20:44:53 +01:00
dd6d253ac0
add random masterpass for sogo admin login
...
add required headers for sogo proxy auth with password
add SOGoEncryptionKey
add SOGoTrustProxyAuthentication only conditionally if feature is enabled
2019-02-26 09:02:35 +01:00
57312ad605
[Compose] Add ALLOW_ADMIN_EMAIL_LOGIN to sogo-mailcow to trigger bootstrap on change
...
[Compose] Static IPv4 for Dovecot
[SOGo] Remove SOGoIMAPServer from sogo.conf
[SOGo] Add SOGoIMAPServer to bootstrap process
[Nginx] Disallow editAccount for other accounts than 0 (own)
2019-02-25 00:00:32 +01:00
298a8d24e9
Merge pull request #2360 from mhofer117/allow-admin-email-login
...
Allow admins to login as email user (without any password)
2019-02-24 18:49:13 +01:00
cac67db203
add config ALLOW_ADMIN_EMAIL_LOGIN and implement password-less SOGo login admins
2019-02-23 17:59:18 +01:00
db17a304b0
[ClamAV] Create directory before handling whitelist
2019-02-23 10:34:16 +01:00
354ecd727c
[ClamAV] More checks and permission fixes
2019-02-23 10:27:13 +01:00
fe9b9f5dfa
[ClamAV] Set permission recursively
...
[Compose] Updaet ClamAV image
2019-02-23 10:21:13 +01:00
fe6567a3c8
[Compose] New watchdog image
...
[Watchdog] Use ipv6nat-mailcow instead of ipv6nat
2019-02-19 22:25:28 +01:00
52eb6e48f2
[Compose] New Dovecot image
...
[Dovecot] Fix very stupid error in quarantine_notify.py - thanks to @DevTek314
2019-02-19 15:02:18 +01:00
63752fe0f2
[Solr] Changes to schema - field types are updated
2019-02-15 20:19:50 +01:00
1355e993dd
Fix building solr
...
I kept hitting an error when building solr `/bin/sh: /docker-entrypoint.sh: Text file busy`, this is caused where the script is attempted to be ran before the previous `chmod` command has properly sync'd to disk. Adding in a sync fixes this trouble for me.
2019-02-15 17:04:53 +11:00
5cae935485
Fix empty maildir_gc.sh
2019-02-12 17:11:04 +01:00
99a816430b
[ACME] Wait for Nginx
2019-02-10 17:36:25 +01:00
f35ffa61d0
Update Dockerfile
2019-02-08 17:03:38 +01:00
0e8f8ada1f
Update Dockerfile
2019-02-08 17:03:16 +01:00
4e97da197e
[Dovecot] Fix quarantine notificatin script
...
[Compose] Update Dovecot image
2019-02-08 10:06:28 +01:00
36ad9dbf78
[ACME] verify_html should accept 3** and 2**
2019-02-08 00:04:05 +01:00
c438411a3d
[Dovecot] Extend quarantine template: add score and release/delete buttons - depending on acl
2019-02-06 09:21:54 +01:00
2a5f6413fa
[Dovecot] Derive text part in quota/quarantine notification mails from html
2019-02-05 10:38:28 +01:00
12291436cd
Push image base to Alpine 3.9
2019-02-05 00:01:31 +01:00
c7c1422095
[Dovecot] Add quota_notify script
...
[Dovecot] Some minor changes to quarantine notification script to catch more errors
2019-02-05 00:00:22 +01:00
ccc61bf2dc
[PHP-FPM] PHP 7.3, mailparse from Git as long as no releas exists
2019-02-04 23:46:45 +01:00
9f2a6f13a5
Merge branch 'master' of https://github.com/mailcow/mailcow-dockerized
2019-02-04 23:45:54 +01:00
3bfd2c8885
[Dovecot] Once again... finally fixed?
2019-01-31 22:18:38 +01:00
dcd6b2268e
[Dovecot] Various fixes for quarantine notifications, many thanks to @DevTek314 for reporting them!
2019-01-31 21:45:58 +01:00
3aef412669
[Dovecot] Fix type of last_notification
2019-01-31 20:53:08 +01:00
24432b0d9d
[PHP-FPM] Remove old fix
2019-01-31 17:08:03 +01:00
6d4bcfabb1
[PHP-FPM] Fix sed command
2019-01-31 15:51:00 +01:00
3832d04998
[PHP-FPM] Fix sed command
2019-01-31 15:49:53 +01:00
61cd2c0353
[PHP-FPM] Patch legacy template lib of NC if exists
2019-01-31 15:44:56 +01:00
8c433bf0da
[PHP] Drop pear modules
2019-01-30 11:55:03 +01:00
c456fe12b3
[Dovecot] Fix last_notification in quarantine_notify.py
2019-01-29 12:13:26 +01:00
07392b7437
[Watchdog] Use stackoverflow.com for DNS check
...
[Git] Ignore mail_plugins*
[Dovecot] Read mail_plugins from dynamically generated file
[Dovecot] Encrypt FTS
[Dovecot] Add break_imap_seach option to Solr
[Web] Add ability to send quarantine notification mails
[Web] Minor style fixes
[Web] Add new MAILBOX_DEFAULT_ATTRIBUTES (doc updates, anyone? :-( )
[Web] Use rcpt_smtp if rcpt_mime is not set
[Web] Other minor fixes
2019-01-29 00:20:39 +01:00
f493d3a957
[Dovecot] Simplify Docker image
...
[Dovecot] Set Dovecot plugins dynamically via file and exclude Solr if not enabled
[Dovecot] Add new quarantine notification script
2019-01-29 00:11:12 +01:00
b2bb593656
[Dovecot] imapsync: Connect to database via socket
2019-01-19 11:57:48 +01:00
23c2249fa7
Log imapsync cronjob errors
...
Errors from the imap sync cronbjob are currently dropped silently.
2019-01-18 18:25:43 +01:00
630bce5f29
imapsync: Connect to database via socket
...
Make the imapsync script connect to mysql via socket and not tcp like all other services do.
Reasoning: consistency. 🤓 And in my case the database does not listen on tcp; just on the socket.
2019-01-18 17:36:30 +01:00
d6efc2fcd3
[Rspamd] Fix metadata_exporter
...
[Web] Show subjet in quarantine
[Compose] Update Rspamd image
2019-01-17 22:00:18 +01:00
ae4e1358a2
[Solr] Refuse to start with RAM lt 2 GB
...
[Config/Update] Set limits and change descriptions for Solr
2019-01-17 20:25:38 +01:00
5081d6d9f1
[ClamAV] Add more signatures
2019-01-16 23:41:42 +01:00
62ccd4215e
[SOGo] Allow to turn off GAL for each domain
2019-01-16 23:41:15 +01:00
0c84b484a5
[DockerAPI] Add unused FTS endpoints...
2019-01-16 22:20:22 +01:00
f3dfe346bf
[Dovecot] Allow setting ACL_ANYONE in mailcow.conf
2019-01-16 19:08:19 +01:00
889b260b7d
[ClamAV] Set prio of clamd parent to 10, fixes #2174
2019-01-13 23:03:07 +01:00
5619221ed0
[ClamAV] Fix whitelist permission error
...
[Compose] New image for ClamAV
[Git] Add ignore data/web/nextcloud*
2019-01-13 11:21:44 +01:00
ab35e1d688
Merge branch 'master' of https://github.com/mailcow/mailcow-dockerized
2019-01-10 22:14:52 +01:00
b0130c153c
[Clamd] Improve logging
...
[Compose] Remove tty from clamd-mailcow
2019-01-10 22:13:59 +01:00
9a90647709
[Clamav] Remove duplicate chown
2019-01-10 13:31:34 +01:00
e42afa39a8
[ClamAV] Update to 0.101.1 (based on Debian to fix some errors)
...
[ClamAV] Some config values are deprecated and were replaced
2019-01-08 12:54:33 +01:00
9750ec5bec
Merge branch 'master' into master
2019-01-01 14:20:22 +01:00
4f278255a5
[SOGo] Fix ealarms, again, fixes #2136
...
[Compose] Update SOGo image
2018-12-29 21:19:25 +01:00
3fa42ada8e
[Compose] Update to Redis 5
...
[Compose] New images for watchdog and PHP-FPM
[Watchdog] Run IPv6 NAT check hourly
[PHP-FPM] Update PHP and libs
2018-12-27 10:47:00 +01:00
424bc997ad
[Watchdog] Add check for IPv6 NAT: Make sure IPv6 NAT container was started at least 30s after other containers
...
[Compose] ipv6nat depends on all containers
[Compose] Update watchdog image
2018-12-27 08:20:49 +01:00
0974a5fb60
Fix transport map authentication with multiple identical nexthops
2018-12-25 15:02:50 +01:00
9aca90c75f
[SOGo] Fix file path of sogo-full.svg
...
[Compose] Updated SOGo image
[Update] Add user.name and user.email for local git config if missing
2018-12-22 16:56:50 +01:00
e84dec3b56
[SOGo] Revert self-built SOGo
2018-12-21 19:54:32 +01:00
fbe46e39e5
[SOGo] Copy logo from config dir, no need to rebuild image
2018-12-20 19:02:20 +01:00
8f686c1543
[Postfix] Split sasl passwd maps to not lookup sender_dependent_default_transport_maps auth info when querying for transport_maps
2018-12-19 09:38:56 +01:00
29512fa4e1
[SOGo] Build stable SOGo versions
...
[SOGo] Remove custom colors, there were various broken styles especially for indicators of freebusy states
2018-12-19 09:34:16 +01:00
6f1ec5acbf
[Watchdog] Alert when ratelimit log changed (does NOT send one mail per triggered ratelimit)
2018-12-15 21:21:22 +01:00
468e3dbe12
[PHP-FPM] Try SQL once, prevent loops (todo: fix view before upgrade)
2018-12-15 21:20:21 +01:00
c4446b85f1
[Rspamd] Add ratelimit.lua (to be removed from Dockerfile with next Rspamd release)
2018-12-15 21:19:35 +01:00
b7c9af5e75
[Dovecot] Give master user a uid and gid, fixes #2093
2018-12-13 19:52:50 +01:00
d8906e3d6c
[Dovecot] Trim more logs
2018-12-12 22:51:55 +01:00
4755bb323b
Allow setting ACL_ANYONE in the configuration
2018-12-11 11:32:36 +01:00
5153623539
[Dovecot] Add master user to userdb (to be used in SOGo)
...
[SOGo] Use sieve.creds to authenticate against Dovecot and send email reminders
2018-12-10 23:23:56 +01:00
b710cb751b
[Dovecot] Split imapsync cron by --
2018-12-10 13:24:51 +01:00
09b9055f1a
[DockerAPI] Add mysql_upgrade task
2018-12-10 13:24:07 +01:00
04b699a3c7
[PHP-FPM] Trigger mysql_upgrade
2018-12-10 13:22:25 +01:00
2a6320b86e
[Netfilter] Disable aborted login without auth as fail2ban trigger
...
[Dovecot] passdb query ignored active attribute in mailbox table
[PHP-FPM] Add default release format for spam
2018-12-06 16:49:28 +01:00
cfab7274b7
[Netfilter] Revert SNAT rule check, todo: check DNS with SNAT enabled
2018-12-01 23:12:27 +01:00
45ecc26a12
[Netfilter] Do not delete SNAT rule if not on first position
2018-12-01 21:17:08 +01:00
a695bdd2ee
[Dovecot] Update Dovecot to 2.3.4, update Pigeonhole to 0.5.4
...
[Dovecot] Remove UTF-8 attribute
2018-11-26 09:44:41 +01:00
c82f8165d8
[Dovecot] Fix maildir_gc, build with ldap support
2018-11-26 09:11:22 +01:00
9acd9c719d
[SOGo] Read plist_ldap for dual auth via ldap, unsupported
2018-11-26 09:10:39 +01:00
f011db317e
[SOGo] Wait for updated db schema before bootstrapping
2018-11-16 22:48:28 +01:00
7998ec3f1f
[DockerAPI] Fix image, fixes #2008
2018-11-16 20:09:29 +01:00
a4452ed3a5
[Postfix] Important fix for mailbox maps, fixes #2013
2018-11-15 22:55:45 +01:00
b3518b0749
[Dovecot] Remove dedicated index (wip)
...
[SOGo] Fix sogo_view
2018-11-12 20:59:39 +01:00
2210201c76
[SOGo] Adjust SOGo view
2018-11-12 09:53:39 +01:00
1404fc50f4
[Rspamd] Add stopsignal (testing)
2018-11-12 09:52:34 +01:00
9ee557e5a5
[Postfix] Adjust mailbox query
2018-11-12 09:49:52 +01:00
244ab191bd
[Dovecot] Dovecot 2.3.3, Pigeonhole 0.5.3
...
[Dovecot] Use "--enable-hardening" flag
[Dovecot] Fix cronjobs
[Dovecot] Use /var/volatile to prevent locking files from being written to NFS storage (if vmail is on NFS)
[Dovecot] Change userdb query
[Dovecot] Use /var/attachments for mdbox attachment deduplication and /var/index for index files
[Dovecot] Fix sieve user creation
[Dovecot] Make console writable
[Dovecot] Fix trim_logs.sh
2018-11-12 09:49:23 +01:00
0e33fd49bb
wildcards (subdomain.*) in ADDITIONAL_SAN are expanded to all mailcow domains
2018-10-30 09:07:01 +01:00
2bd1b1c960
[Watchdog] Skip container restart if running for less than 120 seconds
2018-10-27 23:44:06 +02:00
f796db0a65
[DockerAPI] Add top and stats
2018-10-27 13:25:18 +02:00
e04a3aed6a
[ClamAV] Do not try to modify cross-mounted file, copy whitelist from conf to lib directory
2018-10-27 13:25:05 +02:00
4e2b8dbd90
[Watchdog] Check if initdb is running and if true skip killing php-fpm-mailcow
2018-10-27 13:23:36 +02:00
c9cf3476a0
[Update] Remove obsolete parameters
...
[Compose] New watchdog image
[Watchdog] Allow multiple rcpts separated by comma
2018-10-26 10:07:23 +02:00
800eebd117
[Dovecot] Use events to kill supervisord when main proc dies
...
[Postfix] Use events to kill supervisord when main proc dies
[SOGo] Use events to kill supervisord when main proc dies
2018-10-25 22:35:07 +02:00
23e3bdfe5a
[Dockerapi] Some minor changes
2018-10-25 22:34:31 +02:00
37964d9dd1
[ACME] Try to reload services after certificate changes instead of restarting
...
[DockerAPI] Add service reload commands
2018-10-24 20:14:59 +02:00
db64fa490b
[SOGo] Read .sogo_access attribute when bootstrapping view
2018-10-23 21:13:37 +02:00
fbf1c7b7c1
[DockerAPI] WIP: change of structure, add some more commands to control mail queue
2018-10-23 21:12:37 +02:00
e941c6e8b2
[ACME] Fix missing for loop start
...
[Compose] New ACME image
2018-10-19 10:03:05 +02:00
7a7fafec87
[Compose] New Rspamd image (1.8.1)
...
[Rspamd] Upgrade base to Bionic
2018-10-17 22:41:39 +02:00
86b92f68cb
[Watchdog] Remove cert check (wip)
...
[Watchdog] Append last check loop as attachment to mail
[Watchdog] Print time and date in mail alerts
2018-10-17 22:30:13 +02:00
7386dc1e5c
[ACME] Stop requesting certificates for autoconfig.*
2018-10-16 23:01:01 +02:00
178bee7ac3
Merge branch 'master' of https://github.com/mailcow/mailcow-dockerized
2018-10-14 19:05:57 +02:00
d2d0369f32
[PHP-FPM] Base on Alpine 3.8
...
[Watchdog] Base on Alpine 3.8
[ACME] Base on Alpine 3.8
[Watchdog] Minor changes
2018-10-14 14:29:03 +02:00
2da228a21e
[Watchdog] Remove some check_ping checks
...
[Watchdog] Add ClamAV check (if SKIP_CLAMD=n)
[Watchdog] Add Unbound check
[Watchdog] Do not use Docker API by default to determine IP of containers (see "IP_BY_DOCKER_API")
[Watchdog] Minor changes
2018-10-14 00:21:31 +02:00
a9eddae686
[ACME] Do not add alias domains to auto* domains
2018-10-14 00:19:14 +02:00
5705044af0
[ClamAV] Update to 0.100.2
2018-10-14 00:18:21 +02:00
7114999c75
remove duplicated import time
2018-10-13 23:30:24 +02:00
93917f8385
[Unbound] Upgrade to Alpine 3.8, fixes #1882
2018-10-13 10:12:01 +02:00
23e6e52f4f
[Postfix] Proper permissions for sql config files
...
[Dovecot] Proper permissions for sql config files
2018-10-12 10:57:00 +02:00
aa39be7ea6
[SOGo] Use mysqladmin status instead of ping to determine readiness
...
[PHP-FPM] Use mysqladmin status instead of ping to determine readiness
[PHP-FPM] Init database in entrypoint
[PHP-FPM] Change API credential injection
[Dovecot] Use mysqladmin status instead of ping to determine readiness
2018-10-11 11:53:22 +02:00
ce135bb773
[ACME] Log acme-client output base64 encoded, use mysqladmin status instead of ping to determine readiness
2018-10-11 11:51:13 +02:00
ad63552951
[Dovecot] Check file size of mail crypt key pair, fixes #1859
...
[Compose] New Dovecot image
2018-10-07 15:10:17 +02:00
9f52cd9456
[Docker API] Fix sieve list for users, fixes #1849
2018-10-06 22:09:23 +02:00
c6aa3610f0
[Postfix] Enable/create smtp_tls_policy_maps
2018-10-04 14:34:53 +02:00
cf28727376
[Dovecot] Add timeouts to sa-rules script, remove with -f flag to return 0
2018-10-03 23:27:31 +02:00
d8148bef79
[Docker API] Do not print warning when maildr does not exist
2018-10-03 11:27:52 +02:00
2af2f7836d
[Dovecot] Remove fixed uid and gid
2018-10-02 10:31:22 +02:00
62b27aeacb
[Dovecot] Check garbage hourly
...
[Dovecot] Update SA rules once when container starts
2018-10-02 09:34:21 +02:00
ca1e950c61
[Dovecot] Do not query gid and uid
2018-10-02 09:13:33 +02:00
d7ca5579dc
[Rspamd] Ignore custom files, but keep bad asn map
2018-09-30 18:55:35 +02:00
cdca603ff5
[Unbound] Fix logging, fixes #585
...
[Rspamd] Fix permissions of controller password file
[Unbound] Enable unbound-control
2018-09-30 14:43:18 +02:00
4396be2938
[Rspamd] Place socket in _rspamd home and fix permissions
...
[Compose] Remove volume for Rspamd socket
[Web] Do not exit loop on fuzzy errors when learning a message as spam
2018-09-30 09:53:25 +02:00
0fb43f4916
[Docker API] Use TLS encryption for communication with "on-the-fly" created key paris (non-exposed)
...
[Docker API] Create pipe to pass Rspamd UI worker password
[Dovecot] Pull Spamassassin ruleset to be read by Rspamd (MANY THANKS to Peer Heinlein!)
[Dovecot] Garbage collector for deleted maildirs (set keep time via MAILDIR_GC_TIME which defaults to 1440 minutes)
[Web] Flush memcached after mailbox item changes, fixes #1808
[Web] Fix duplicate IDs, fixes #1792
[Compose] Use SQL sockets
[PHP-FPM] Update APCu and Redis libs
[Dovecot] Encrypt maildir with global key pair in crypt-vol-1 (BACKUP!), also fixes #1791
[Web] Fix deletion of spam aliases
[Helper] Add "crypt" to backup script
[Helper] Override file for external SQL socket (not supported!)
[Compose] New images for Rspamd, PHP-FPM, SOGo, Dovecot, Docker API, Watchdog, ACME, Postfix
2018-09-29 22:01:23 +02:00
96c985abad
[Rspamd] Move settings file to RSPAMD_CONF root, delete old lua scripts
2018-09-26 13:23:05 +02:00
29aeb5b85d
[Watchdog] Fix SOGo check, fixes #1750
2018-09-09 21:52:48 +02:00
c8a1cbd25a
Merge branch 'temp-master'
2018-09-09 21:21:43 +02:00
c9554ca022
[Compose] Update watchdog image
...
[Watchdog] Fix IP detection with multiple networks
[Web] Show API field (no docs, no support, wip)
[Web] haveibeenpwned.com implementation
[Web] User and domain admin ACL (no docs, no support, wip)
[Web] Some minor fixes
2018-09-09 21:18:38 +02:00
ad902f0ad8
[SOGo] Remove HTTP server on port 9192
2018-09-09 09:48:11 +02:00
8a88514dfd
[SOGo] Declare /usr/lib/GNUstep/SOGo as volume
...
[Nginx] Mount vols from sogo-mailcow to access /usr/lib/GNUstep/SOGo
2018-09-07 16:40:37 +02:00
5e56a46c84
[dovecot] Enhancement to allow to use auth_default_realm
...
When using auth_default_realm in dovecot configuration to setup a default domain name (to allow users to login with only a username instead of the full e-mail address), it breaks the compatibility with imapsync and sogo/sieve vacation.
Adding a domain name to dovecot master user/pass fixes this.
This never made it do the master branch, so I'm trying a PR again :)
See: https://github.com/mailcow/mailcow-dockerized/pull/1331#issuecomment-386534307
2018-08-28 17:14:05 +02:00
66ee11c03d
[SOGo] Disable display of ACL "any/authenticated" by default
...
[Dovecot] Disable "any" ACL by default
[SOGo] Might fix theme switching (yes, again)
2018-08-17 21:42:31 +02:00
6bd818ceec
[ACME] Remove third-party IP tools
2018-08-06 15:15:24 +02:00
ff0b9246b5
[ClamAV] Add whitelist file for ClamAV, fixes #1607
...
[ACME] Test for CAA before running script, fixes #1632
2018-08-05 22:35:20 +02:00
9dd17d4609
[SOGo] Change color codes in correct files
2018-08-04 09:23:45 +02:00
bf9a180c00
[SOGo] Fix theme switching (99% sure we did it this time, guys)
2018-08-03 20:27:58 +02:00
e678292447
[Dovecot] Trim autodiscover logs
2018-08-02 12:19:58 +02:00
andryyy
tha80
Marcel Hofer
Joshua Hesketh
Aaron Larisch
Christian Burmeister
Dirk Weise
amorfo77
Markus Heberling
Michael Kuron
Markus Heberling
Markus Gnadl
André
Tobias "Knight" S
sriccio