6b6470fe54
[Rspamd] Use tini
2017-10-15 09:31:19 +02:00
ac413058c1
[Watchdog] Fix kill -0 check, use tini and send kill request to tini instead of parent pid, sleep longer
2017-10-14 23:26:08 +02:00
c5dd30b058
[ClamAV] Use tini, check if background procs are running, use pipe to output to stdout
2017-10-14 23:25:29 +02:00
c5054ae7ed
[Watchdog] Ignore null name in jq
...
[Nginx] Merge sites
[Scripts] Nextcloud helper script (testing!)
2017-10-11 22:56:22 +02:00
7c46d6548b
[Dovecot] Ignore watchdog IP in logs, filter by syslog-ng
2017-10-11 11:23:20 +02:00
e107cbef5e
[Postfix] Fix sending as alias, when alias is in alias domains, cleanup
2017-10-11 11:22:52 +02:00
2862b43c81
[Watchdog] Fix watchdog to fit non-exposed PHP
2017-10-09 15:54:54 +02:00
6110ac386f
[SOGo] Use official nightly; [PHP-FPM] Fix expose=off
2017-10-09 15:45:48 +02:00
72995ff98e
[PHP-FPM] Include more modules for upcoming features and Nextcloud support, drop ro flag; [Watchdog] Some fixes and changes
2017-10-08 22:47:52 +02:00
ef9953898c
[ACME, Watchdog, DockerAPI] Use only limited Docker API
2017-10-06 13:32:49 +02:00
3ae0b16845
[Web, DockerAPI] Be more like official Docker API
2017-10-06 10:20:40 +02:00
fc18d153cd
[Compose, DockerAPI, Web, Watchdog] Watchdog may send notification mails (todo: docs), DockerAPI via Flesk for limited access
2017-10-05 23:38:33 +02:00
9860d44d04
[Watchdog] Do also log errors to Redis if availble
2017-10-04 23:18:51 +02:00
2dc8306b69
[Postfix] Remove old socket
2017-10-04 23:15:26 +02:00
82ac5fa063
[SOGo] Remove supervisord API
2017-10-04 13:04:35 +02:00
9b4ed6b21c
[PHP-FPM] Include Docker api for better SOGo status handling and future changes
2017-10-04 13:04:15 +02:00
da987e5b48
[Postfix] Forgot 'not' in filter
2017-10-03 16:54:18 +02:00
c59d03fcb3
[Watchdog] Skip when use_watchdog=n
2017-10-03 12:07:48 +02:00
68d7fa1504
[Watchdog] Skip when use_watchdog=n
2017-10-03 12:05:38 +02:00
752a571607
Merge pull request #638 from mkuron/acme
...
ACME needs to wait for MySQL to be ready
2017-09-28 12:58:07 +02:00
ae79445ec0
ACME needs to wait for MySQL to be ready
2017-09-27 19:48:25 +02:00
337c9e350e
[Watchdog] Reset diff, new image
2017-09-22 16:40:02 +02:00
62524150d2
[ACME] Add timestamps, check if acme account key is valid
...
[Postfix] Ignore local0
[Watchdog] Add Rspamd checks
2017-09-21 19:30:09 +02:00
ab850dc901
[ACME] Detect and fix invalid registration
2017-09-21 09:46:09 +02:00
41d2a16571
[Watchdog] Script was not executable
2017-09-20 23:36:04 +02:00
f511cb0f63
[Watchdog] More fixes and or changes
2017-09-20 23:24:56 +02:00
fd1955edca
[Fail2ban] Add variable name
2017-09-20 23:24:39 +02:00
b6e84fac3a
Sleep instead of stopping containers to prevent restarts
2017-09-20 12:50:50 +02:00
df5c79c3f1
Fixes for watchdog!
2017-09-20 12:27:24 +02:00
e70d5b9206
Fix watchdog
2017-09-20 11:05:23 +02:00
a8fb1d3f4f
Add experimental watchdog
2017-09-20 10:56:49 +02:00
d0c0cd4992
[Rspamd] Fix user settings...
2017-09-16 23:27:13 +02:00
1b974bc8d1
[Compose] New images
2017-09-16 23:05:33 +02:00
2b97305f6d
[ACME] Sleep, don't exit
2017-09-16 13:17:48 +02:00
762f18e913
[Clamd] Use Dockerds own init system
2017-09-14 23:13:24 +02:00
eeaa48a729
[PHP-FPM] Use valid user for mysqladmin ping
...
[SOGo] Use valid user for mysqladmin ping
2017-09-12 20:57:18 +02:00
1ffed58956
[ACME] New version, better IPv4 detection
2017-09-11 21:51:17 +02:00
ed4e8d301c
Fix tabs
2017-09-08 18:41:02 +02:00
b8c4093702
[Web] Allow a spam score up to 2000, fixes #556
2017-09-07 20:20:36 +02:00
fcd0efc265
Change primary name of SSL certificate
...
Hostname as primary name for the SSL certificate, all other names will
be added as SAN
2017-09-03 19:41:47 +02:00
1f90433429
[Dovecot, Postfix, SOGo] Fix redis log cleanup, fixes #542
2017-09-03 11:57:58 +02:00
446907944a
[Postfix] Fix missing ltrim
2017-09-01 23:40:23 +02:00
008d500f4d
[Compose, Dovecot] Fixed missing ltrim
2017-09-01 23:39:51 +02:00
7351fcf1e3
[Compose, SOGo] New version, ltrim logs
2017-09-01 23:33:12 +02:00
4d7bb26874
[Postfix] Add null rcpt for watchdog
2017-09-01 12:22:29 +02:00
08d6b97ffa
[Dovecot] New Dovecot and Pigeonhole versions; include delete2 option in imapsync
2017-08-31 10:36:10 +02:00
4a0e3a433b
[Fail2ban] Remove rule to detect disconnects without authentication
2017-08-30 22:27:33 +02:00
b1213c51d7
[Rspamd] Dynamic ratelimit fixed, removed async redis request; Ready to implement per-user ratelimits via UI (tbd)
2017-08-30 21:42:39 +02:00
7a2c0f2ee7
[Acme] Skip backup mx domains
2017-08-18 09:57:25 +02:00
92eefc1288
Merge pull request #486 from mkuron/patch-1
...
Disable ClamAV phishing filter
2017-08-02 15:54:16 +02:00
dec64eef32
Disable ClamAV phishing filter
...
ClamAV has a phishing filter built in, but it generates too many false positives. We can disable it without risk because rspamd also checks for phishing itself.
2017-08-02 14:42:53 +02:00
2eed7c05a1
[Dovecot] Push version, fix cronjob ( fixes #310 )
2017-08-01 14:02:00 +02:00
c7484434dd
[Dovecot] Remove master.pid if not running; Check for active imapsync besides lock file; Reconnect MySQL connection in imapsync_cron.pl
2017-07-31 08:19:02 +02:00
33bf9f5c5d
[Rspamd] Push image version 1.5, Rspamd 1.6.3
2017-07-26 23:07:01 +02:00
8da02378b1
[Rspamd] Use Nginx IP in settings map
2017-07-26 23:04:49 +02:00
03c614f749
[Postfix] Use Nginx IP in whitelist_forwardinghosts.sh
2017-07-26 23:04:27 +02:00
b629089ff8
[SOGo] Rename reconf-domains to bootstrap-sogo and exec sogod after a successful bootstrap; Wait for SOGo to die and free listener
2017-07-24 23:25:04 +02:00
5d5646df0c
[Compose, SOGo] Update SOGo, give SOGo more time for a graceful restart, autorestart on any exit code
2017-07-24 22:53:23 +02:00
83d485dd94
[Web, Postfix, Compose] Allow to add relayhosts per domain (+ plain and login authentication)
2017-07-22 20:39:54 +02:00
ed33cb5f57
[Rspamd] ARC: Disallow login/domain mismatch
2017-07-21 11:03:35 +02:00
5f5872f78b
[Rspamd] Initial custom ratelimit support
2017-07-13 12:54:53 +02:00
e6727b1fd6
[ACME] Iterate alias domains, use hostname in subject field
2017-07-13 12:51:52 +02:00
9e92c4a2ad
[Dovecot] Do not keep persistent logs in a container
2017-07-11 17:09:31 +02:00
f8ae5158cb
[Postfix] Do not keep persistent logs in a container
2017-07-11 17:09:20 +02:00
a31819fd6c
[SOGo] Log to a pipe to not keep logs in a container
2017-07-11 17:08:06 +02:00
51660589d4
[Rspamd] Push version 1.3
2017-07-09 22:28:36 +02:00
a324b1a385
[Rspamd] Fix DKIM siging (base64 hash line folding)
2017-07-06 15:57:33 +02:00
69da02c144
[Dovecot] Important fix for Pigeonhole (downgrade)
2017-07-05 19:13:07 +02:00
7f47af1d60
Fix destination hash
2017-07-05 12:31:52 +02:00
87cc5f54ff
[Postfix] Fix redis log destination hash
2017-07-05 12:03:12 +02:00
2fadfee61a
[SOGo] Remove thunderbird plugin generation, will move to docs
2017-07-05 10:22:48 +02:00
de14d30e6b
[ACME] Fix exit command (was using echo), fix for duplicate SAN (filter)
2017-07-04 21:32:58 +02:00
dc463c3dda
[Multiple] Push multiple logs to Redis channel for fail2ban-mailcow to read. Enables Fail2ban independently of used Docker logging driver.
2017-07-04 18:08:20 +02:00
ed11e7586e
[Clamd] Add SKIP_CLAMD variable to disable Clamd start
2017-07-04 18:05:44 +02:00
ace247b3b9
[ACME] Unset name arrays before reusing them
2017-07-03 10:20:09 +02:00
2cf9f71613
[ACME] Revert fix for empty additional_san, fix skip_ip_check in ACME
2017-07-02 20:18:22 +02:00
cf902854d7
Merge, conflict fixed
2017-07-02 11:22:35 +02:00
b7cb4ac9d5
[Fail2ban] Added more regex to match failed or disallowed logins to Dovecot, changed Mailcow to mailcow
2017-07-02 11:10:35 +02:00
ae5ce6568d
[Dovecot] Dovecot 2.2.31, Pigeonhole 0.4.19
2017-06-30 20:30:30 +02:00
5ab11c0c1e
[ACME] Show err instead of empty var when IP lookup failed
2017-06-30 20:29:55 +02:00
d2048ccf20
[ACME] Be more verbose about IP address
2017-06-29 21:22:01 +02:00
a6b60aebb8
[Fai2ban] Added auto-detection for container names; Allow multiple rules for each container; log rule id and container on match
2017-06-29 11:30:14 +02:00
9040d456ed
[acme-mailcow] Auto-detect container ids for restart; Restart containers after restore
2017-06-29 10:25:32 +02:00
3d652dd3d0
Added more checks for acme-mailcow
2017-06-29 00:56:51 +02:00
6d8438c01c
- More checks for acme-mailcow (verify hashes)
...
- Autodiscover configuration file: Merge array from vars.local.inc.php
- Push acme-mailcow to 1.6
2017-06-28 23:22:51 +02:00
b0584c3622
Use , as IFS for additional san
2017-06-28 10:50:51 +02:00
f7bce8b81a
Copy dhparams if not found
2017-06-27 20:15:53 +02:00
e9ea0712f2
Add SKIP_FAIL2BAN var
2017-06-27 10:26:48 +02:00
b9ffcf2bf8
Add whitelist function to Fail2ban
2017-06-26 23:18:05 +02:00
8590cc577b
Move folder names to match image names
2017-06-25 00:21:24 +02:00
c4c1bdf477
Add a retry window for fail2ban-mailcow, add priority to logging, added window time to logging string"
2017-06-24 20:04:12 +02:00
b8e9b3d879
fail2ban:1.1, use Redis, add logging, ban time and max attempts to be configured via UI soon
2017-06-24 00:07:18 +02:00
2104034156
cp -n is unknown
2017-06-23 14:22:54 +02:00
59623a639e
Keep key when issuing new certificate to not break TLSA records with options 3 1 1
2017-06-23 08:40:05 +02:00
18e52ab27d
More debug output, keep key for TLSA 3 1 1, other minor changes
2017-06-23 08:33:07 +02:00
85a9239ae9
Move account key
2017-06-22 21:44:10 +02:00
0c07ff59c3
Fix skip le test...
2017-06-22 21:31:14 +02:00
1f9b5cb16e
ACME: support CNAME in domain checks
2017-06-22 20:36:03 +02:00
4066f3507c
New Rspamd image, also fixes #386
2017-06-22 17:12:13 +02:00
856b05147c
Skip LE with configuration parameter
2017-06-22 09:06:24 +02:00
601f3b6947
Change select Priority
...
Simple change, for Select Older
2017-06-21 11:54:03 +02:00
c82c9524b0
Delete certificate if SANs were removed
2017-06-20 20:06:54 +02:00
428140d34f
Version update
2017-06-20 20:06:35 +02:00
0e501acd7d
Base on stretch
2017-06-20 20:06:24 +02:00
4be67ccd64
dovecot/imapsync_cron: Use passfiles to hide passwords from ps
2017-06-19 11:43:07 +02:00
fbf33e475a
SOGo will be started after reconf script to prevent race conditions
2017-06-19 10:19:16 +02:00
624e52e198
mysqladmin uses ping on static IPv4, supervisor does no more autostart SOGo
2017-06-19 10:18:53 +02:00
10d83017e1
Declare correct arrays
2017-06-19 08:59:47 +02:00
9117c499ef
Do not break DNS replies....
2017-06-18 20:57:26 +02:00
6fa19a37d8
Unbound changes
2017-06-18 20:23:26 +02:00
5aba885b58
Skip ACME client for other certificates than LE
2017-06-17 10:08:12 +02:00
08edc1d1d3
Remove obsolete file, add {}
2017-06-16 23:27:16 +02:00
812b9b617a
Cannot spawn as proc in sub shell. Breaks SOGo restart.
2017-06-16 23:26:43 +02:00
c739091a67
Customize the SOGo Integrator plugin for Thunderbird
2017-06-16 10:30:40 +02:00
19325ffb2a
Validate additional SAN
2017-06-14 07:24:32 +02:00
863a0e4d06
Finally fix SOGo race condition
2017-06-13 23:38:47 +02:00
4a0a9cbf1f
Minor tweaks
2017-06-13 23:38:24 +02:00
0fd0cff8ac
Auto-sign autodiscover and autoconfig for all domains found in mailcow - only if A records exists and matches
2017-06-13 23:37:48 +02:00
9a99975394
Fix duplicate postfix install
2017-06-13 07:45:24 +02:00
3e09d11856
Be less verbose
2017-06-13 07:41:13 +02:00
fcfc119805
Fix race condition with workaround
2017-06-13 07:39:45 +02:00
35a73025c7
Add until to hopefully stop race condition
2017-06-12 23:49:21 +02:00
a33aa7a2cb
Fix Dockerfile
2017-06-12 23:48:56 +02:00
261e1ad4fb
Rspamd stable
2017-06-12 23:48:42 +02:00
b367ec0ace
Add Unbound as better DNSSEC enabled resolver
2017-06-12 23:48:27 +02:00
d6c9f96b4e
Don't keep development packages in php-fpm image.
2017-06-12 17:06:57 +02:00
ef62f6b383
Acme tool checks for valid autodiscover and autoconfig A records and skips non-existing names
...
Todo: Add AAAA check, add check for additional_san
2017-06-12 10:45:12 +02:00
ad969d15cd
Remove bind9
2017-06-12 10:43:36 +02:00
a25fc17b87
Fix permission
2017-06-12 10:43:28 +02:00
c0619a5b6b
Less layers
2017-06-12 10:43:11 +02:00
5321ebe707
Push to Dovecot 2.2.30
2017-06-12 10:42:48 +02:00
cf44745c18
Less layers
2017-06-12 10:42:33 +02:00
02ceb6d3ef
Remove obsolete files
2017-06-12 10:40:08 +02:00
663ea7815c
Use new milter interface
2017-06-06 22:01:41 +02:00
f84a3a731a
File indents
2017-05-29 21:50:43 +02:00
ed58a9a9b3
File permission
2017-05-29 21:49:47 +02:00
ae707cd8ff
Revert "php-fpm dockerfile simplification"
2017-05-29 08:45:30 +02:00
192eb50449
Merge pull request #319 from TBK0000/php-fpm-alpine
...
php-fpm dockerfile simplification
2017-05-29 07:32:24 +02:00
9ee00c9933
php-fpm dockerfile simplification
...
By using Alpine pkgs instead of the official php base image the image size has been reduced from 459 MB to 55.7 MB a reduction of a whooping 403.3 MB :D
2017-05-28 23:33:16 +02:00
e151e32730
ShellCheck
...
http://www.shellcheck.net/
2017-05-28 23:28:41 +02:00
2d0c4db2a5
Clamav dockerfile simplification
...
- Locked to specific release.
- Fewer layers.
- Size reduction of 49 MB.
2017-05-28 16:23:13 +02:00
95c30e8791
Remove change...
2017-05-26 23:03:51 +02:00
178a219c05
Merge branch 'dev' of https://github.com/mailcow/mailcow-dockerized into dev
2017-05-26 23:02:34 +02:00
4f2a1d940c
Merge pull request #313 from mkuron/fail2ban
...
Authentication rate limiting for Mailcow UI
2017-05-25 15:52:15 +02:00
1906c26e5d
Auth rate limiting: Mailcow UI and correct treatment of v4-mapped addresses
2017-05-25 13:57:50 +02:00
0403579b7e
Use hostname
2017-05-25 11:00:14 +02:00
8c73b8eb5f
Merge pull request #311 from mkuron/fail2ban
...
Fail2ban-like authentication rate limiting for Postfix, Dovecot and SOGo
2017-05-25 10:58:14 +02:00
88f94a2e15
Authentication rate limiting for Postfix, Dovecot and SOGo
2017-05-25 10:44:10 +02:00
d1b99d2355
Remove workaround
2017-05-23 22:22:40 +02:00
b17543f211
Fixes
2017-05-23 21:50:48 +02:00
fd5a59086b
More structural changes
2017-05-23 09:36:59 +02:00
a72631fb15
Merge branch 'master' into dev
2017-05-17 21:20:12 +02:00
a7b854f7ce
Fix Dockerfile, again
2017-05-17 21:16:48 +02:00
61de3c354c
Use Alpine ClamAV
2017-05-17 07:48:48 +02:00
dd5b46e9ee
Use Alpine PHP-FPM
2017-05-17 07:48:37 +02:00
f38d726ed2
Revert base of Rspamd
2017-05-17 07:46:27 +02:00
861ade77ab
New Dockerfile
2017-05-14 22:11:12 +02:00
be044a1592
Add openssl
2017-05-14 22:10:25 +02:00
e795898b80
Fix Redis migration
2017-05-14 20:16:43 +02:00
1add37157d
Remove icu lib dev
2017-05-14 20:15:34 +02:00
ce4c5b80b8
Fix migration to Redis
2017-05-14 20:07:43 +02:00
a46a84a949
Fix docker-entrypoint, fixes key merging from file to Redis
2017-05-14 14:26:07 +02:00
fbac28974b
Base on Alpine
2017-05-14 14:25:10 +02:00
4b875d1468
Remove some tools after installation
2017-05-14 14:24:55 +02:00
cf4cefbccd
Base on Alpine, still needs cleanup
2017-05-14 14:23:26 +02:00
980acb507e
Log to redis and file
2017-05-13 22:58:10 +02:00
766a986f27
[Dockerfiles] Do not install both curl and wget
...
curl is used in rspamd-pipe-*, so I kept curl
2017-05-13 18:10:04 +02:00
7fd982f948
[Dockerfiles] Do not persist DEBIAN_FRONTEND=noninteractive in images
...
According to https://github.com/moby/moby/issues/4032#issuecomment-163689851
(and some other comments in the issue) it's not recommended to set
`DEBIAN_FRONTEND` via `ENV` in a Dockerfile. `ARG` has the same
effect at build time but does not change `DEBIAN_FRONTEND` in the
final image, so I switched to it. It should also work to remove it
completely.
2017-05-13 18:10:04 +02:00
e081a847a1
[Dockerfiles] Do not keep curl installed
2017-05-13 18:10:04 +02:00
559d9dda71
[Dockerfiles] Run rm as early as possible
2017-05-13 18:10:04 +02:00
85be7aa973
[Dockerfiles] Sorted list of packages
2017-05-13 18:10:04 +02:00
9ab9d76240
[Dockerfiles] Used best practices for apt-get
...
See https://docs.docker.com/engine/userguide/eng-image/dockerfile_best-practices/#apt-get
- Replaced `-y install` with `install -y` (unification)
- Put every package on its own line
- Moved `rm -rf /var/lib/apt/lists/*` in the same `RUN` statement as `apt-get`
- Removed unnecessary `apt-get clean`
See 03e2923e42/contrib/mkimage/debootstrap (L82-L105)
2017-05-13 18:09:53 +02:00
d0d0961006
[Dockerfiles] Replaced deprecated MAINTAINER with LABEL
...
Used format proposed in
https://docs.docker.com/engine/reference/builder/#maintainer-deprecated
2017-05-13 18:09:45 +02:00
6cd97c46c5
Used tabs for indentation in Dockerfiles
2017-05-12 20:59:27 +02:00
93046dea45
Fixes #261
2017-05-09 21:29:51 +02:00
a18bcce93d
Minor style changes
2017-05-08 15:38:03 +02:00
653d23a843
Migrate some settings and DKIM keys to Redis when starting
2017-05-08 15:35:24 +02:00
a267a4ad71
Use DKIM selector from Redis
2017-05-08 14:11:30 +02:00
d614aaf617
Add Json logger
2017-05-06 23:42:18 +02:00
a790c2bdc0
Add phpredis
2017-05-05 10:34:31 +02:00
3fc42465a0
Fix width problems in mailbox table, change image name to stretch
2017-05-02 09:42:07 +02:00
dfee8efa97
Fix DBUSER in entrypoint
2017-04-28 12:24:14 +02:00
77992be9fc
Update Dovecot and Pigeonhole
2017-04-28 10:53:04 +02:00
40f86057e5
Move forwarding host script to Docker image
2017-04-23 19:38:47 +02:00
08612f0aef
Merge remote-tracking branch 'origin/dev' into forwardinghosts
2017-04-22 18:13:58 +02:00
cae7ff7816
Initial clamd container
2017-04-20 21:13:41 +02:00
a75d916b74
Forwarding hosts in postscreen
2017-04-17 15:51:50 +02:00
06928ec841
imapsync: added option to delete from source after transfer
2017-04-10 13:08:02 +02:00
e03136bf21
Add description to command
2017-04-08 23:36:46 +02:00
8e3dceb512
Rebase images on stretch
2017-04-05 22:25:59 +02:00
5bee39dc95
Use fixed IDs
2017-04-05 22:25:34 +02:00
13cd5e0b1d
Run sievec after adding keys, use fixed IDs for users
2017-04-05 22:25:16 +02:00
2b955d08ab
Base on Stretch, add Zeyple
2017-04-05 22:19:41 +02:00
58d86dadce
Rebase Dovecot on Stretch slim, build from stable source with latest stable Pigeonhole for antispam replacement
2017-04-03 20:06:49 +02:00
d5c8f0160c
Go back to apt-stable repo
2017-03-26 11:07:50 +02:00
42eabf4cb3
Fix Postfix sender when sender is alias in alias domain
2017-03-20 21:38:52 +01:00
09850a76e5
Use Rspamds new tag symbol
2017-03-12 14:38:20 +01:00
276e370989
Rspamd tag check for non-spam only (post-filter), remove sql files from repository"
2017-03-08 17:58:00 +01:00
489b1ff1c0
Fix domain visibility in SOGo (domains should _not_ see each other)
2017-03-08 17:46:21 +01:00
a06bac6739
[Dockerfiles] Use COPY instead of ADD
2017-03-07 15:48:24 +01:00
André
Michael Kuron
Michael Kuron
Tobias
André Peters
NuVivo314
Markus Frosch
TBK
Michael Käufl