Commit Graph

103 Commits (c79aae2b1ebb66bed8a2ab5c2f28584ca578c59e)

Author SHA1 Message Date
andryyy 0bd03c04bd
[ACME] Skip inactive domains 2021-03-03 07:59:11 +01:00
andryyy e9b554b09c [Web] Add nevondo.com ip check source, thank you! 2021-03-01 20:00:01 +01:00
andryyy d3c0e2fc11
Temp remove ip6.korves.net 2021-03-01 10:21:53 +01:00
andryyy 27b18373cc
[Alpine] Update Alpine base images to v3.13 2021-02-18 08:48:12 +01:00
andryyy da200db2d3
[ACME] Add more checks, avoid cert/key mismatch on some installations, fix some output 2020-09-28 19:58:30 +02:00
andryyy c8ce288178
[ACME] Do check for restart of Postfix and Dovecot service more thoroughly 2020-09-26 23:33:28 +02:00
andryyy 97ee4b70ca
[Various] Always use lowercase for COMPOSE_PROJECT_NAME 2020-08-27 20:41:45 +02:00
andryyy 27b192d5c3
[ACME] Filter containers by compose project name 2020-07-11 13:30:57 +02:00
andryyy e40a0eae01
[ACME] Fix directory URL 2020-07-03 10:20:36 +02:00
andryyy 4ce39c0f3f
[ACME] Add DIRECTORY_URL for custom directory URLs 2020-07-03 09:00:10 +02:00
andryyy 02a74914b4
Update to Alpine 3.11 2020-05-11 11:50:45 +02:00
andryyy 03f173905e [Compose] Update SOGo and ACME
[ACME] SKIP IP check for SNAT'ed setups to workaround race conditions
2020-03-15 21:37:10 +01:00
andryyy e28a176639
[ACME, Watchdog] Improve waiting for Redis 2020-03-08 20:23:32 +01:00
andryyy e19e6b9e92
[ACME] Force renewal with force_renew file, docs will follow 2020-03-03 14:59:24 +01:00
andryyy 9a25ebc54e
Merge branch 'master' of https://github.com/mailcow/mailcow-dockerized 2020-03-01 11:49:58 +01:00
andryyy 7b9f5ac1c4
[ACME] Restart Postfix, reload seems not work all the time 2020-02-29 14:26:38 +01:00
andryyy 1fb81f0511
[ACME] Use redis master for write operations 2020-02-05 10:53:23 +01:00
Marcel Hofer b8a12ad192 [SSL] fix bug with pruning old certificates (#3272) 2020-01-17 22:36:04 +01:00
Marcel Hofer 56bc9d45bb [SSL] prevent multiple certificates with the same domain 2019-10-20 14:44:39 +02:00
Marcel Hofer b413ed4013 [SSL] minor fix: prevent checking of empty SQL_DOMAIN 2019-10-19 18:23:59 +02:00
Marcel Hofer 2e35da6816 [SSL] create individual domain certificates, add SNI configs for Postfix/Dovecot/Nginx 2019-10-19 12:48:56 +02:00
andryyy b0711db489
[Dockerfiles] Rename some files and create hook points 2019-10-18 12:01:47 +02:00
Rene Pasing b4ebe83d2f Do not create random files when SKIP_HTTP_VERIFICATION=y (#2830) 2019-08-13 20:26:47 +02:00
andryyy cbdd6b0dfa
[ACME] Fix insecure http verifications 2019-07-22 22:52:45 +02:00
andryyy 3d52cc2270
[ACME] Alpine 3.10 2019-07-22 21:08:11 +02:00
andryyy ea3f1374fc
[ACME] Slightly better info messages, some fixes 2019-07-09 08:59:07 +02:00
andryyy 014a0c7af5
[ACME] Better HTTP verification 2019-06-29 20:28:03 +02:00
andryyy 2efd27e40e
[Olefy] A new container is born, thanks to @c-rosenberg
[ACME] Autoconfig is back (re-added to SAN list by default for all mail domains)
[Rspamd] Added comment to composite
2019-06-25 18:52:05 +02:00
andryyy db0ec130f5
[Web] Lang updates
[ACME] Typo
2019-05-22 23:47:45 +02:00
Christian Burmeister bfbd4c1240
acme-tiny with python3 2019-05-20 21:32:04 +02:00
André Peters 003b244544
Merge pull request #2623 from Arlon1/acme/cert_renewal_threshold
acme: changed the threshold for certificate renewal
2019-05-20 19:51:03 +02:00
andryyy 6a8c4e332b
[ACME] Register error when no hostname could be validated 2019-05-16 19:43:08 +02:00
Arlon1 2d5add5a13 acme: changed the threshold for certificate renewal
The threshold for certificate renewal is changed to 30 days before
expiry date (was 14 days).
fixes #2607
2019-05-16 15:31:50 +02:00
andryyy 60fd955def
[ACME] Add 0 byte check for cert.pem 2019-04-27 10:23:00 +02:00
andryyy 9bab6507a7
[ACME] Allow to skip all names but MAILCOW_HOSTNAME 2019-04-26 21:15:46 +02:00
andryyy b42d0df8e2
[ACME] Allow to skip http verification 2019-03-29 07:46:52 +01:00
andryyy 8b0f7fa81b
[ACME] Write redis key on non-empty exit code 2019-03-27 23:14:46 +01:00
andryyy c77368ee70
[ACME] Set mode 600 for key files 2019-03-12 23:24:03 +01:00
andryyy 99a816430b
[ACME] Wait for Nginx 2019-02-10 17:36:25 +01:00
andryyy 36ad9dbf78
[ACME] verify_html should accept 3** and 2** 2019-02-08 00:04:05 +01:00
andryyy 9f2a6f13a5
Merge branch 'master' of https://github.com/mailcow/mailcow-dockerized 2019-02-04 23:45:54 +01:00
Markus Gnadl 0e33fd49bb wildcards (subdomain.*) in ADDITIONAL_SAN are expanded to all mailcow domains 2018-10-30 09:07:01 +01:00
andryyy 37964d9dd1 [ACME] Try to reload services after certificate changes instead of restarting
[DockerAPI] Add service reload commands
2018-10-24 20:14:59 +02:00
André e941c6e8b2 [ACME] Fix missing for loop start
[Compose] New ACME image
2018-10-19 10:03:05 +02:00
André 7386dc1e5c [ACME] Stop requesting certificates for autoconfig.* 2018-10-16 23:01:01 +02:00
André d2d0369f32 [PHP-FPM] Base on Alpine 3.8
[Watchdog] Base on Alpine 3.8
[ACME] Base on Alpine 3.8
[Watchdog] Minor changes
2018-10-14 14:29:03 +02:00
André a9eddae686 [ACME] Do not add alias domains to auto* domains 2018-10-14 00:19:14 +02:00
André ce135bb773 [ACME] Log acme-client output base64 encoded, use mysqladmin status instead of ping to determine readiness 2018-10-11 11:51:13 +02:00
André 0fb43f4916 [Docker API] Use TLS encryption for communication with "on-the-fly" created key paris (non-exposed)
[Docker API] Create pipe to pass Rspamd UI worker password
[Dovecot] Pull Spamassassin ruleset to be read by Rspamd (MANY THANKS to Peer Heinlein!)
[Dovecot] Garbage collector for deleted maildirs (set keep time via MAILDIR_GC_TIME which defaults to 1440 minutes)
[Web] Flush memcached after mailbox item changes, fixes #1808
[Web] Fix duplicate IDs, fixes #1792
[Compose] Use SQL sockets
[PHP-FPM] Update APCu and Redis libs
[Dovecot] Encrypt maildir with global key pair in crypt-vol-1 (BACKUP!), also fixes #1791
[Web] Fix deletion of spam aliases
[Helper] Add "crypt" to backup script
[Helper] Override file for external SQL socket (not supported!)
[Compose] New images for Rspamd, PHP-FPM, SOGo, Dovecot, Docker API, Watchdog, ACME, Postfix
2018-09-29 22:01:23 +02:00
André 6bd818ceec [ACME] Remove third-party IP tools 2018-08-06 15:15:24 +02:00