DerLinkman
0e76396f01
reuse nightly images where needed
2026-01-20 08:46:04 +01:00
DerLinkman
9bbac9f171
Merge branch 'staging' into nightly
2026-01-19 12:17:11 +01:00
Copilot
038b2efb75
Add MTA-STS support for alias domains ( #6972 )
...
* Initial plan
* Add MTA-STS support for alias domains
Co-authored-by: DerLinkman <62480600+DerLinkman@users.noreply.github.com >
* Improve domain normalization and code style in mta-sts.php
Co-authored-by: DerLinkman <62480600+DerLinkman@users.noreply.github.com >
* Add error handling for idn_to_ascii in mta-sts.php
Co-authored-by: DerLinkman <62480600+DerLinkman@users.noreply.github.com >
* Add database error handling for alias domain query
Co-authored-by: DerLinkman <62480600+DerLinkman@users.noreply.github.com >
* Add ACME certificate support for MTA-STS on alias domains
Query alias_domain table to find aliases with MTA-STS enabled target domains and request certificates for mta-sts.<alias-domain> subdomains.
Co-authored-by: DerLinkman <62480600+DerLinkman@users.noreply.github.com >
* compose: bump image tag to 1.95
* Add MTA-STS DNS records display for alias domains in UI
When viewing an alias domain's DNS diagnostics, check if the target domain has MTA-STS enabled and display the required DNS records for the alias domain.
Co-authored-by: DerLinkman <62480600+DerLinkman@users.noreply.github.com >
---------
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com >
Co-authored-by: DerLinkman <62480600+DerLinkman@users.noreply.github.com >
Co-authored-by: DerLinkman <niklas.meyer@servercow.de >
2025-12-15 16:29:21 +01:00
DerLinkman
b6f57dfb78
rspamd: update to 3.14.2
2025-12-12 14:06:49 +01:00
DerLinkman
1bac6f1ee7
ofelia: revert fixed cron syntax for sa-rules download
2025-12-11 13:29:11 +01:00
DerLinkman
67e7acd6bd
rspamd: upgrade to 3.14.1, trixie rebuild + bcc forwarded hosts fix ( #6958 )
...
* rspamd: fix bcc + subadress handling when using forward hosts
* rspamd: build against trixie + use version 3.14.1
2025-12-11 09:45:56 +01:00
DerLinkman
dbb9e474b0
pf-tlspol: upgrade to 1.8.22 ( #6951 )
...
* postfix-tlspol: upgrade to 1.8.20
* pf-tlspol: update to 1.8.22
2025-12-09 13:25:50 +01:00
Josh
0413d26855
Allow making spam aliases permanent ( #6888 )
...
* Allow making spam aliases permanent
* added german translation
* updated Spamalias Twig + Rename in Spam Alias
* compose: update image tags to align to vendor version
---------
Co-authored-by: DerLinkman <niklas.meyer@servercow.de >
2025-11-13 16:05:01 +01:00
DerLinkman
62d16c9e56
compose: changes cronjobs to regular cron syntax + fixed sogo creds for cronjobs ( #6866 )
...
* cron: restructure cron timer to time on second (instead of random)
* dovecot: fix clearance for cron.creds file
2025-11-13 14:59:49 +01:00
DerLinkman
88adb1adf5
remove dev docker volume from upstream
2025-11-12 09:54:35 +01:00
DerLinkman
ec472f13cf
sogo: removed URLDecrpytion by default, make it configurable in sogo.conf
2025-11-12 09:50:41 +01:00
FreddleSpl0it
e6f83853ae
Merge remote-tracking branch 'origin/staging' into nightly
2025-10-15 11:17:07 +02:00
FreddleSpl0it
6af2addf3c
[PHPFPM] Update Image to Version 1.94
2025-10-14 10:25:06 +02:00
FreddleSpl0it
d5a27c4ccb
Merge pull request #6830 from mailcow/feat/rspamd-3.13.2
...
[Rspamd] Update to 3.13.2
2025-10-10 13:10:54 +02:00
FreddleSpl0it
f47df263d7
[Rspamd] Update to 3.13.2
2025-10-10 13:04:01 +02:00
FreddleSpl0it
2642d9109e
[Redis] Update to Redis 7.4.6
2025-10-10 12:48:57 +02:00
DerLinkman
417835dea8
netfilter: improve logging and mark iptables-legacy as deprecated
2025-10-09 16:37:05 +02:00
FreddleSpl0it
7da088c931
Merge branch 'staging' into nightly
2025-10-06 13:58:40 +02:00
FreddleSpl0it
9940c503a2
[Nginx] do not invert ENABLE_IPV6
2025-09-22 14:16:42 +02:00
FreddleSpl0it
610609378f
[SOGo][Web] Set URL encryption key in mailcow.conf
2025-09-22 12:58:05 +02:00
FreddleSpl0it
260906e350
[SOGo][Web] Enable SOGo URL Encryption
2025-09-22 12:28:09 +02:00
FreddleSpl0it
bb3c2fb4fe
Merge pull request #6731 from mailcow/staging
...
Automatic PR to nightly from 2025-09-11T07:38:50Z
2025-09-12 11:43:02 +02:00
FreddleSpl0it
0d900d4fc8
[SOGo] Drop deprecated sogo_update_password sql trigger if it still exists
2025-09-11 11:01:50 +02:00
FreddleSpl0it
eb84847a5b
Merge branch 'staging' into nightly
2025-09-11 10:26:42 +02:00
FreddleSpl0it
8cb25709ae
[Clamd] update to 1.71
2025-09-10 08:23:22 +02:00
DerLinkman
34877ecf9c
watchdog: added postfix-tlspol check ( #6691 )
2025-09-03 08:18:04 +02:00
maxi322
5e66ffa366
watchdog: use dig instead of check_dns ( #6685 )
...
* watchdog: use dig instead of check_dns
check_dns is slower and uses more system resources,
dig wrapped in a script is a more performant approach and uses
fewer system resources
* added debug mode + compose image bump
---------
Co-authored-by: maxi322 <maxi322@users.noreply.github.com >
Co-authored-by: DerLinkman <niklas.meyer@servercow.de >
2025-08-28 12:56:37 +02:00
DerLinkman
0cfcde673c
Merge branch 'staging' into nightly
2025-08-28 10:21:38 +02:00
DerLinkman
29e28b47ed
compose: add depends on for postfix-tlspol
2025-08-28 10:20:21 +02:00
DerLinkman
1cb38bacdb
Postfix: Split TLSPol companion app into separate container ( #6688 )
...
* postfix: split postfix-tlspol service into new container
* postfix-tls-pol: added debug mode
* pf-tlspol: removed obsoleted standalone conf from Dockerfiles
* pf-tlspol: use git instead of wget
2025-08-28 10:18:18 +02:00
DerLinkman
169aafec50
compose: fix dovecot image tag
2025-08-27 14:09:29 +02:00
DerLinkman
c39712af67
pf/php: add mta-sts support (outbound) ( #6686 )
...
* added mta-sts-resolver into postfix config + daemon
* [Web] Add MTA-STS support
* [Web] Fix mta-sts server_name
* updated .gitignore
* [ACME] fetch cert for mta-sts subdomain
* [Web] change MTA-STS id to human-readable timestamp
* [Web] Remove MTA-STS version STSv2
* [Web] Fix MTA-STS DNS check
* [Web] add max_age limit for MTA-STS policy
* Added tooltips and info texts to mta-sts webui page
* postfix: replace mta-sts-resolver with postfix-tlspol
---------
Co-authored-by: FreddleSpl0it <75116288+FreddleSpl0it@users.noreply.github.com >
2025-08-26 09:57:05 +02:00
FreddleSpl0it
ed5be5d7dc
Merge branch 'feat/mailcow-adm' into nightly
2025-08-19 11:57:22 +02:00
FreddleSpl0it
ac90ecaf4f
Merge remote-tracking branch 'origin/staging' into nightly
2025-08-19 11:51:54 +02:00
FreddleSpl0it
fed3fc9514
[Controller] Add HTTPS_PORT env var to base_url
2025-08-19 11:30:20 +02:00
DerLinkman
88bf9b02e1
core: modules splitting + ipv6 nat rewrite ( #6634 )
...
* ipv6: added ipv6 detection + removed ip6 nat container
* nginx: renamed DISABLE_IPv6 to ENABLE_IPV6 to align
* initial commit for script overhauls
* rewrite to scripts after testing (improved error handling)
* fixed missing fi in update.sh
* fixed/added comments for modules
* fix broken EXIT_CODE var handling
* added jq as dependancy
* fixed docker version check for daemon
* improved _modules handling while running
* reintegrated module loading (update.sh)
* added error handling for blank daemon.json
* adapted removal of ACME_CONTACT for nightly
* move detect_major_update func to core submodule
* removed unnecessary message on every call of function
* Update _modules/scripts/new_options.sh
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
* Update _modules/scripts/core.sh
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
* improve ENABLE_IPV6 check in nginx bootstrap
* improve detection of ENABLE_IPV6
* ip6_controller: moved docker major detection upwards
* Update _modules/scripts/new_options.sh
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
* Update _modules/scripts/new_options.sh
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
* reuse DOCKER_MAJOR Variable in ip6_controller
* fix some smaller typos in update.sh
* smaller bugfixes in submodules
* completely remove ACME_CONTACT Variable
---------
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
2025-08-06 08:36:40 +02:00
Markus Machatschek
69420113f7
rspamd: update rspamd to 3.12.1 ( #6643 )
...
* rspamd: update rspamd to 3.12.1
* compose: correct rspamd tag + pushed image
---------
Co-authored-by: DerLinkman <niklas.meyer@servercow.de >
2025-08-06 08:33:11 +02:00
DerLinkman
4b5fd0b50a
compose: bump nginx nightly
2025-08-05 16:42:24 +02:00
DerLinkman
5aa9498f65
Merge branch 'feat/remove-ip6nat' into nightly
2025-08-05 16:41:15 +02:00
DerLinkman
73929db796
rewrite to scripts after testing (improved error handling)
2025-08-05 16:03:22 +02:00
DerLinkman
3f9215678d
ipv6: added ipv6 detection + removed ip6 nat container
2025-08-05 16:02:41 +02:00
DerLinkman
360fe03497
sogo: update to 5.12.3
2025-08-05 16:01:47 +02:00
FreddleSpl0it
0ac0e5c252
[DockerApi] Rename DockerApi to Controller and add mailcow-adm tool
2025-08-01 15:31:50 +02:00
Denis Evers
95eb350f15
[netfilter] fix negative timer, no unbanning of IPs ( #6575 )
...
* [netfilter] added debug logs and updated autopurge
* updated "Allow/Blacklist" terms
* netfilter: bumped compose version
* netfilter: changed black/whitelist terms in code
---------
Co-authored-by: Denis Evers <git@evers.sh >
Co-authored-by: DerLinkman <niklas.meyer@servercow.de >
2025-07-16 10:08:55 +02:00
DerLinkman
c066273c79
Merge branch staging into nightly
2025-07-16 09:03:20 +02:00
FreddleSpl0it
02557b2098
Merge pull request #6631 from mailcow/fix/jinja2-rendering
...
[Dovecot] Use Jinja2 sandbox for rendering quota and quarantine notif…
2025-07-15 07:38:20 +02:00
FreddleSpl0it
ec6dbb099a
[ACME] Remove deprecated ACME_CONTACT variable
2025-07-02 10:37:23 +02:00
FreddleSpl0it
2fbbbbe9a9
[Dovecot] Use Jinja2 sandbox for rendering quota and quarantine notifications
2025-07-02 08:59:29 +02:00
DerLinkman
7907d43af7
compose: bumped nginx container tag
2025-05-27 16:24:21 +02:00
DerLinkman
737fced7be
rewrite to scripts after testing (improved error handling)
2025-05-27 15:26:08 +02:00