09b6c20bad
[DockerAPI] Hide stderr from rspamadm output
2018-01-14 18:44:06 +01:00
5d5d36fc60
[Dovecot] Revert to 2.2 to fix various errors
2018-01-14 10:44:06 +01:00
38aaeeb30b
[Dovecot] Dovecot 2.3 from git for temp fixes
...
[ACME] Use -a switch (thanks to jas8522!)
2018-01-14 10:34:06 +01:00
42923698fd
[Dovcot] Fixes for v2.3
2018-01-13 22:49:50 +01:00
ceef6d6fd3
[Dovecot] Dovecot 2.3, Pigeonhole 0.5
...
[Watchdog] Fix Dovecot health check
2018-01-09 11:15:52 +01:00
b7a23a28fd
Merge branch 'dev' of https://github.com/mailcow/mailcow-dockerized into dev
2018-01-08 22:01:39 +01:00
1e9cae9084
[Compose] New images with LOG_LINES
...
[Update] Do not add empty line in each loop
2018-01-08 22:00:54 +01:00
cde250a989
Properly wait for MySQL to come up before starting SOGo
2018-01-08 19:56:44 +01:00
db032af698
[ACME] Fix script
2017-12-31 17:17:46 +01:00
8d56534e76
[Postfix] Don't try to authenticate to relayhosts without username, fixes #725
2017-12-25 10:18:49 +01:00
236e4d4a36
See Issue #826
...
Fixes dockerapi-mailcow_1 | raise TypeError('port must be an integer')
Containers are now restarting.
2017-12-18 16:41:04 +01:00
52f4f850cf
[Postfix] Fix missing authentication data for relayhosts when sender domain is alias domain
2017-12-17 17:45:12 +01:00
a771d66889
[Dovecot] Update imapsync
2017-12-17 17:45:05 +01:00
2994b94b6c
[Docker API] Remove logs, remove env var for compose project name
2017-12-11 09:43:01 +01:00
6c67b9df82
Replace name by IP, remove unused tables
2017-12-09 22:30:18 +01:00
2519738094
Various changes...
2017-12-09 13:15:24 +01:00
7d6fc8e6b6
[Dockerapi] Auto detect version of docker server
...
Some older versions of docker need specific version of client api to be able to
communicate. This change allows automatically detect and set version of API to
match server version of API.
Fixes #765
2017-12-01 23:41:37 +01:00
ade4b9e7ae
[Postfix, Web] Feature: BCC maps
2017-11-19 15:13:43 +01:00
5211ab10ed
[ACME] Fix license issue
2017-11-16 14:57:17 +01:00
c45ea5433f
[Rspamd] Base on xenial to fix mime types problems
2017-11-15 12:29:18 +01:00
fe845ee56d
[Fail2ban] Fix fail2ban container
2017-11-14 19:50:20 +01:00
84a7a1a2e7
[Compose] New images, Nginx checks for SOGo before bootstrapping
...
[PHP-FPM] Some more modules (primarily for Horde)
[Fail2ban] Do not log matches of local and private ips
[Watchdog] Some changes in log system for further processing (wip)
[ACME] Fixes #745
2017-11-14 10:44:22 +01:00
60e97503f7
[Web, Dovecot] Show wether a sync job is running, validate min max input attr and validate these values
2017-11-08 11:07:32 +01:00
a36a8828c2
[Dovecot] Specify supervisord user
2017-11-05 12:19:18 +01:00
1ef10f1358
[PHP-FPM] Include net_sieve, test removal of usr/src/php for size
2017-11-03 20:27:43 +01:00
a9f64a3472
[Dockerapi] Return answers in json
2017-11-03 20:26:09 +01:00
b32e5adcc5
[Dovecot] sieve_before/after maps in sql, changed dict names
2017-11-03 20:25:38 +01:00
1e9bc49f2c
[Rspamd] Echo dummy for fowardingshosts map; Use higher map reading interval;
...
[Dockerapi] Exit on sigterm;
[Watchdog] Wait for dockerapi-mailcow to be online
2017-10-27 11:22:39 +02:00
04cb033f0a
[PHP-FPM] Add imagemagic
2017-10-21 10:10:27 +02:00
a110e2ea0f
[ACME] Fix detection of orphaned SANs and add tini
2017-10-21 10:08:20 +02:00
6b6470fe54
[Rspamd] Use tini
2017-10-15 09:31:19 +02:00
ac413058c1
[Watchdog] Fix kill -0 check, use tini and send kill request to tini instead of parent pid, sleep longer
2017-10-14 23:26:08 +02:00
c5dd30b058
[ClamAV] Use tini, check if background procs are running, use pipe to output to stdout
2017-10-14 23:25:29 +02:00
c5054ae7ed
[Watchdog] Ignore null name in jq
...
[Nginx] Merge sites
[Scripts] Nextcloud helper script (testing!)
2017-10-11 22:56:22 +02:00
7c46d6548b
[Dovecot] Ignore watchdog IP in logs, filter by syslog-ng
2017-10-11 11:23:20 +02:00
e107cbef5e
[Postfix] Fix sending as alias, when alias is in alias domains, cleanup
2017-10-11 11:22:52 +02:00
2862b43c81
[Watchdog] Fix watchdog to fit non-exposed PHP
2017-10-09 15:54:54 +02:00
6110ac386f
[SOGo] Use official nightly; [PHP-FPM] Fix expose=off
2017-10-09 15:45:48 +02:00
72995ff98e
[PHP-FPM] Include more modules for upcoming features and Nextcloud support, drop ro flag; [Watchdog] Some fixes and changes
2017-10-08 22:47:52 +02:00
ef9953898c
[ACME, Watchdog, DockerAPI] Use only limited Docker API
2017-10-06 13:32:49 +02:00
3ae0b16845
[Web, DockerAPI] Be more like official Docker API
2017-10-06 10:20:40 +02:00
fc18d153cd
[Compose, DockerAPI, Web, Watchdog] Watchdog may send notification mails (todo: docs), DockerAPI via Flesk for limited access
2017-10-05 23:38:33 +02:00
9860d44d04
[Watchdog] Do also log errors to Redis if availble
2017-10-04 23:18:51 +02:00
2dc8306b69
[Postfix] Remove old socket
2017-10-04 23:15:26 +02:00
82ac5fa063
[SOGo] Remove supervisord API
2017-10-04 13:04:35 +02:00
9b4ed6b21c
[PHP-FPM] Include Docker api for better SOGo status handling and future changes
2017-10-04 13:04:15 +02:00
da987e5b48
[Postfix] Forgot 'not' in filter
2017-10-03 16:54:18 +02:00
c59d03fcb3
[Watchdog] Skip when use_watchdog=n
2017-10-03 12:07:48 +02:00
68d7fa1504
[Watchdog] Skip when use_watchdog=n
2017-10-03 12:05:38 +02:00
752a571607
Merge pull request #638 from mkuron/acme
...
ACME needs to wait for MySQL to be ready
2017-09-28 12:58:07 +02:00
ae79445ec0
ACME needs to wait for MySQL to be ready
2017-09-27 19:48:25 +02:00
337c9e350e
[Watchdog] Reset diff, new image
2017-09-22 16:40:02 +02:00
62524150d2
[ACME] Add timestamps, check if acme account key is valid
...
[Postfix] Ignore local0
[Watchdog] Add Rspamd checks
2017-09-21 19:30:09 +02:00
ab850dc901
[ACME] Detect and fix invalid registration
2017-09-21 09:46:09 +02:00
41d2a16571
[Watchdog] Script was not executable
2017-09-20 23:36:04 +02:00
f511cb0f63
[Watchdog] More fixes and or changes
2017-09-20 23:24:56 +02:00
fd1955edca
[Fail2ban] Add variable name
2017-09-20 23:24:39 +02:00
b6e84fac3a
Sleep instead of stopping containers to prevent restarts
2017-09-20 12:50:50 +02:00
df5c79c3f1
Fixes for watchdog!
2017-09-20 12:27:24 +02:00
e70d5b9206
Fix watchdog
2017-09-20 11:05:23 +02:00
a8fb1d3f4f
Add experimental watchdog
2017-09-20 10:56:49 +02:00
d0c0cd4992
[Rspamd] Fix user settings...
2017-09-16 23:27:13 +02:00
1b974bc8d1
[Compose] New images
2017-09-16 23:05:33 +02:00
2b97305f6d
[ACME] Sleep, don't exit
2017-09-16 13:17:48 +02:00
762f18e913
[Clamd] Use Dockerds own init system
2017-09-14 23:13:24 +02:00
eeaa48a729
[PHP-FPM] Use valid user for mysqladmin ping
...
[SOGo] Use valid user for mysqladmin ping
2017-09-12 20:57:18 +02:00
1ffed58956
[ACME] New version, better IPv4 detection
2017-09-11 21:51:17 +02:00
ed4e8d301c
Fix tabs
2017-09-08 18:41:02 +02:00
b8c4093702
[Web] Allow a spam score up to 2000, fixes #556
2017-09-07 20:20:36 +02:00
fcd0efc265
Change primary name of SSL certificate
...
Hostname as primary name for the SSL certificate, all other names will
be added as SAN
2017-09-03 19:41:47 +02:00
1f90433429
[Dovecot, Postfix, SOGo] Fix redis log cleanup, fixes #542
2017-09-03 11:57:58 +02:00
446907944a
[Postfix] Fix missing ltrim
2017-09-01 23:40:23 +02:00
008d500f4d
[Compose, Dovecot] Fixed missing ltrim
2017-09-01 23:39:51 +02:00
7351fcf1e3
[Compose, SOGo] New version, ltrim logs
2017-09-01 23:33:12 +02:00
4d7bb26874
[Postfix] Add null rcpt for watchdog
2017-09-01 12:22:29 +02:00
08d6b97ffa
[Dovecot] New Dovecot and Pigeonhole versions; include delete2 option in imapsync
2017-08-31 10:36:10 +02:00
4a0e3a433b
[Fail2ban] Remove rule to detect disconnects without authentication
2017-08-30 22:27:33 +02:00
b1213c51d7
[Rspamd] Dynamic ratelimit fixed, removed async redis request; Ready to implement per-user ratelimits via UI (tbd)
2017-08-30 21:42:39 +02:00
7a2c0f2ee7
[Acme] Skip backup mx domains
2017-08-18 09:57:25 +02:00
92eefc1288
Merge pull request #486 from mkuron/patch-1
...
Disable ClamAV phishing filter
2017-08-02 15:54:16 +02:00
dec64eef32
Disable ClamAV phishing filter
...
ClamAV has a phishing filter built in, but it generates too many false positives. We can disable it without risk because rspamd also checks for phishing itself.
2017-08-02 14:42:53 +02:00
2eed7c05a1
[Dovecot] Push version, fix cronjob ( fixes #310 )
2017-08-01 14:02:00 +02:00
c7484434dd
[Dovecot] Remove master.pid if not running; Check for active imapsync besides lock file; Reconnect MySQL connection in imapsync_cron.pl
2017-07-31 08:19:02 +02:00
33bf9f5c5d
[Rspamd] Push image version 1.5, Rspamd 1.6.3
2017-07-26 23:07:01 +02:00
8da02378b1
[Rspamd] Use Nginx IP in settings map
2017-07-26 23:04:49 +02:00
03c614f749
[Postfix] Use Nginx IP in whitelist_forwardinghosts.sh
2017-07-26 23:04:27 +02:00
b629089ff8
[SOGo] Rename reconf-domains to bootstrap-sogo and exec sogod after a successful bootstrap; Wait for SOGo to die and free listener
2017-07-24 23:25:04 +02:00
5d5646df0c
[Compose, SOGo] Update SOGo, give SOGo more time for a graceful restart, autorestart on any exit code
2017-07-24 22:53:23 +02:00
83d485dd94
[Web, Postfix, Compose] Allow to add relayhosts per domain (+ plain and login authentication)
2017-07-22 20:39:54 +02:00
ed33cb5f57
[Rspamd] ARC: Disallow login/domain mismatch
2017-07-21 11:03:35 +02:00
5f5872f78b
[Rspamd] Initial custom ratelimit support
2017-07-13 12:54:53 +02:00
e6727b1fd6
[ACME] Iterate alias domains, use hostname in subject field
2017-07-13 12:51:52 +02:00
9e92c4a2ad
[Dovecot] Do not keep persistent logs in a container
2017-07-11 17:09:31 +02:00
f8ae5158cb
[Postfix] Do not keep persistent logs in a container
2017-07-11 17:09:20 +02:00
a31819fd6c
[SOGo] Log to a pipe to not keep logs in a container
2017-07-11 17:08:06 +02:00
51660589d4
[Rspamd] Push version 1.3
2017-07-09 22:28:36 +02:00
a324b1a385
[Rspamd] Fix DKIM siging (base64 hash line folding)
2017-07-06 15:57:33 +02:00
69da02c144
[Dovecot] Important fix for Pigeonhole (downgrade)
2017-07-05 19:13:07 +02:00
7f47af1d60
Fix destination hash
2017-07-05 12:31:52 +02:00
87cc5f54ff
[Postfix] Fix redis log destination hash
2017-07-05 12:03:12 +02:00
2fadfee61a
[SOGo] Remove thunderbird plugin generation, will move to docs
2017-07-05 10:22:48 +02:00
de14d30e6b
[ACME] Fix exit command (was using echo), fix for duplicate SAN (filter)
2017-07-04 21:32:58 +02:00
dc463c3dda
[Multiple] Push multiple logs to Redis channel for fail2ban-mailcow to read. Enables Fail2ban independently of used Docker logging driver.
2017-07-04 18:08:20 +02:00
ed11e7586e
[Clamd] Add SKIP_CLAMD variable to disable Clamd start
2017-07-04 18:05:44 +02:00
ace247b3b9
[ACME] Unset name arrays before reusing them
2017-07-03 10:20:09 +02:00
2cf9f71613
[ACME] Revert fix for empty additional_san, fix skip_ip_check in ACME
2017-07-02 20:18:22 +02:00
cf902854d7
Merge, conflict fixed
2017-07-02 11:22:35 +02:00
b7cb4ac9d5
[Fail2ban] Added more regex to match failed or disallowed logins to Dovecot, changed Mailcow to mailcow
2017-07-02 11:10:35 +02:00
ae5ce6568d
[Dovecot] Dovecot 2.2.31, Pigeonhole 0.4.19
2017-06-30 20:30:30 +02:00
5ab11c0c1e
[ACME] Show err instead of empty var when IP lookup failed
2017-06-30 20:29:55 +02:00
d2048ccf20
[ACME] Be more verbose about IP address
2017-06-29 21:22:01 +02:00
a6b60aebb8
[Fai2ban] Added auto-detection for container names; Allow multiple rules for each container; log rule id and container on match
2017-06-29 11:30:14 +02:00
9040d456ed
[acme-mailcow] Auto-detect container ids for restart; Restart containers after restore
2017-06-29 10:25:32 +02:00
3d652dd3d0
Added more checks for acme-mailcow
2017-06-29 00:56:51 +02:00
6d8438c01c
- More checks for acme-mailcow (verify hashes)
...
- Autodiscover configuration file: Merge array from vars.local.inc.php
- Push acme-mailcow to 1.6
2017-06-28 23:22:51 +02:00
b0584c3622
Use , as IFS for additional san
2017-06-28 10:50:51 +02:00
f7bce8b81a
Copy dhparams if not found
2017-06-27 20:15:53 +02:00
e9ea0712f2
Add SKIP_FAIL2BAN var
2017-06-27 10:26:48 +02:00
b9ffcf2bf8
Add whitelist function to Fail2ban
2017-06-26 23:18:05 +02:00
8590cc577b
Move folder names to match image names
2017-06-25 00:21:24 +02:00
c4c1bdf477
Add a retry window for fail2ban-mailcow, add priority to logging, added window time to logging string"
2017-06-24 20:04:12 +02:00
b8e9b3d879
fail2ban:1.1, use Redis, add logging, ban time and max attempts to be configured via UI soon
2017-06-24 00:07:18 +02:00
2104034156
cp -n is unknown
2017-06-23 14:22:54 +02:00
59623a639e
Keep key when issuing new certificate to not break TLSA records with options 3 1 1
2017-06-23 08:40:05 +02:00
18e52ab27d
More debug output, keep key for TLSA 3 1 1, other minor changes
2017-06-23 08:33:07 +02:00
85a9239ae9
Move account key
2017-06-22 21:44:10 +02:00
0c07ff59c3
Fix skip le test...
2017-06-22 21:31:14 +02:00
1f9b5cb16e
ACME: support CNAME in domain checks
2017-06-22 20:36:03 +02:00
4066f3507c
New Rspamd image, also fixes #386
2017-06-22 17:12:13 +02:00
856b05147c
Skip LE with configuration parameter
2017-06-22 09:06:24 +02:00
601f3b6947
Change select Priority
...
Simple change, for Select Older
2017-06-21 11:54:03 +02:00
c82c9524b0
Delete certificate if SANs were removed
2017-06-20 20:06:54 +02:00
428140d34f
Version update
2017-06-20 20:06:35 +02:00
0e501acd7d
Base on stretch
2017-06-20 20:06:24 +02:00
4be67ccd64
dovecot/imapsync_cron: Use passfiles to hide passwords from ps
2017-06-19 11:43:07 +02:00
fbf33e475a
SOGo will be started after reconf script to prevent race conditions
2017-06-19 10:19:16 +02:00
624e52e198
mysqladmin uses ping on static IPv4, supervisor does no more autostart SOGo
2017-06-19 10:18:53 +02:00
10d83017e1
Declare correct arrays
2017-06-19 08:59:47 +02:00
9117c499ef
Do not break DNS replies....
2017-06-18 20:57:26 +02:00
6fa19a37d8
Unbound changes
2017-06-18 20:23:26 +02:00
5aba885b58
Skip ACME client for other certificates than LE
2017-06-17 10:08:12 +02:00
08edc1d1d3
Remove obsolete file, add {}
2017-06-16 23:27:16 +02:00
812b9b617a
Cannot spawn as proc in sub shell. Breaks SOGo restart.
2017-06-16 23:26:43 +02:00
c739091a67
Customize the SOGo Integrator plugin for Thunderbird
2017-06-16 10:30:40 +02:00
19325ffb2a
Validate additional SAN
2017-06-14 07:24:32 +02:00
863a0e4d06
Finally fix SOGo race condition
2017-06-13 23:38:47 +02:00
4a0a9cbf1f
Minor tweaks
2017-06-13 23:38:24 +02:00
0fd0cff8ac
Auto-sign autodiscover and autoconfig for all domains found in mailcow - only if A records exists and matches
2017-06-13 23:37:48 +02:00
9a99975394
Fix duplicate postfix install
2017-06-13 07:45:24 +02:00
3e09d11856
Be less verbose
2017-06-13 07:41:13 +02:00
fcfc119805
Fix race condition with workaround
2017-06-13 07:39:45 +02:00
35a73025c7
Add until to hopefully stop race condition
2017-06-12 23:49:21 +02:00
a33aa7a2cb
Fix Dockerfile
2017-06-12 23:48:56 +02:00
261e1ad4fb
Rspamd stable
2017-06-12 23:48:42 +02:00
b367ec0ace
Add Unbound as better DNSSEC enabled resolver
2017-06-12 23:48:27 +02:00
d6c9f96b4e
Don't keep development packages in php-fpm image.
2017-06-12 17:06:57 +02:00
ef62f6b383
Acme tool checks for valid autodiscover and autoconfig A records and skips non-existing names
...
Todo: Add AAAA check, add check for additional_san
2017-06-12 10:45:12 +02:00
ad969d15cd
Remove bind9
2017-06-12 10:43:36 +02:00
a25fc17b87
Fix permission
2017-06-12 10:43:28 +02:00
c0619a5b6b
Less layers
2017-06-12 10:43:11 +02:00
5321ebe707
Push to Dovecot 2.2.30
2017-06-12 10:42:48 +02:00
cf44745c18
Less layers
2017-06-12 10:42:33 +02:00
02ceb6d3ef
Remove obsolete files
2017-06-12 10:40:08 +02:00
663ea7815c
Use new milter interface
2017-06-06 22:01:41 +02:00
f84a3a731a
File indents
2017-05-29 21:50:43 +02:00
ed58a9a9b3
File permission
2017-05-29 21:49:47 +02:00
ae707cd8ff
Revert "php-fpm dockerfile simplification"
2017-05-29 08:45:30 +02:00
192eb50449
Merge pull request #319 from TBK0000/php-fpm-alpine
...
php-fpm dockerfile simplification
2017-05-29 07:32:24 +02:00
9ee00c9933
php-fpm dockerfile simplification
...
By using Alpine pkgs instead of the official php base image the image size has been reduced from 459 MB to 55.7 MB a reduction of a whooping 403.3 MB :D
2017-05-28 23:33:16 +02:00
e151e32730
ShellCheck
...
http://www.shellcheck.net/
2017-05-28 23:28:41 +02:00
2d0c4db2a5
Clamav dockerfile simplification
...
- Locked to specific release.
- Fewer layers.
- Size reduction of 49 MB.
2017-05-28 16:23:13 +02:00
95c30e8791
Remove change...
2017-05-26 23:03:51 +02:00
178a219c05
Merge branch 'dev' of https://github.com/mailcow/mailcow-dockerized into dev
2017-05-26 23:02:34 +02:00
4f2a1d940c
Merge pull request #313 from mkuron/fail2ban
...
Authentication rate limiting for Mailcow UI
2017-05-25 15:52:15 +02:00
1906c26e5d
Auth rate limiting: Mailcow UI and correct treatment of v4-mapped addresses
2017-05-25 13:57:50 +02:00
0403579b7e
Use hostname
2017-05-25 11:00:14 +02:00
8c73b8eb5f
Merge pull request #311 from mkuron/fail2ban
...
Fail2ban-like authentication rate limiting for Postfix, Dovecot and SOGo
2017-05-25 10:58:14 +02:00
88f94a2e15
Authentication rate limiting for Postfix, Dovecot and SOGo
2017-05-25 10:44:10 +02:00
d1b99d2355
Remove workaround
2017-05-23 22:22:40 +02:00
b17543f211
Fixes
2017-05-23 21:50:48 +02:00
fd5a59086b
More structural changes
2017-05-23 09:36:59 +02:00
a72631fb15
Merge branch 'master' into dev
2017-05-17 21:20:12 +02:00
a7b854f7ce
Fix Dockerfile, again
2017-05-17 21:16:48 +02:00
61de3c354c
Use Alpine ClamAV
2017-05-17 07:48:48 +02:00
dd5b46e9ee
Use Alpine PHP-FPM
2017-05-17 07:48:37 +02:00
f38d726ed2
Revert base of Rspamd
2017-05-17 07:46:27 +02:00
861ade77ab
New Dockerfile
2017-05-14 22:11:12 +02:00
be044a1592
Add openssl
2017-05-14 22:10:25 +02:00
e795898b80
Fix Redis migration
2017-05-14 20:16:43 +02:00
1add37157d
Remove icu lib dev
2017-05-14 20:15:34 +02:00
ce4c5b80b8
Fix migration to Redis
2017-05-14 20:07:43 +02:00
a46a84a949
Fix docker-entrypoint, fixes key merging from file to Redis
2017-05-14 14:26:07 +02:00
fbac28974b
Base on Alpine
2017-05-14 14:25:10 +02:00
4b875d1468
Remove some tools after installation
2017-05-14 14:24:55 +02:00
cf4cefbccd
Base on Alpine, still needs cleanup
2017-05-14 14:23:26 +02:00
980acb507e
Log to redis and file
2017-05-13 22:58:10 +02:00
766a986f27
[Dockerfiles] Do not install both curl and wget
...
curl is used in rspamd-pipe-*, so I kept curl
2017-05-13 18:10:04 +02:00
7fd982f948
[Dockerfiles] Do not persist DEBIAN_FRONTEND=noninteractive in images
...
According to https://github.com/moby/moby/issues/4032#issuecomment-163689851
(and some other comments in the issue) it's not recommended to set
`DEBIAN_FRONTEND` via `ENV` in a Dockerfile. `ARG` has the same
effect at build time but does not change `DEBIAN_FRONTEND` in the
final image, so I switched to it. It should also work to remove it
completely.
2017-05-13 18:10:04 +02:00
e081a847a1
[Dockerfiles] Do not keep curl installed
2017-05-13 18:10:04 +02:00
559d9dda71
[Dockerfiles] Run rm as early as possible
2017-05-13 18:10:04 +02:00
andre.peters
Michael Kuron
Oratorian
Peter Schiffer
André
Michael Kuron
Tobias
André Peters
NuVivo314
Markus Frosch
TBK
Michael Käufl