e406ecd461
Merge pull request #7387 from mailcow/fix/mfk25
...
Hardening mailcow
2026-07-30 09:07:10 +02:00
ddd76d99cd
[Web] Add sogo_auth_internal nginx marker for sogo-auth.php
2026-07-23 10:10:29 +02:00
7dab6c63d1
[Nginx] only bind IPv6 default_server when ENABLE_IPV6 is set
...
The HTTP-to-HTTPS redirect server block bound `listen [::]:{{ HTTP_PORT }}
default_server` unconditionally, while every other IPv6 listen directive in
this template is guarded by `{% if ENABLE_IPV6 %}`. On hosts where IPv6 is
disabled at the kernel level, nginx cannot bind `::` and fails to start.
This only triggers when HTTP_REDIRECT is enabled and ENABLE_IPV6 is false,
which is why it survives testing with ENABLE_IPV6=false alone.
Guard the directive like the other six IPv6 listeners in the template.
Refs #7296
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-07-14 14:54:28 -07:00
7b29c1f304
Disable nginx server_tokens in http context ( #6873 )
2025-11-13 15:19:11 +01:00
84e230de8f
[Nginx] fix: Disable IPv6 support in Nginx configuration ( #6736 )
...
Co-authored-by: patr_ <patbernh@gmail.com >
2025-09-12 11:17:18 +02:00
c39712af67
pf/php: add mta-sts support (outbound) ( #6686 )
...
* added mta-sts-resolver into postfix config + daemon
* [Web] Add MTA-STS support
* [Web] Fix mta-sts server_name
* updated .gitignore
* [ACME] fetch cert for mta-sts subdomain
* [Web] change MTA-STS id to human-readable timestamp
* [Web] Remove MTA-STS version STSv2
* [Web] Fix MTA-STS DNS check
* [Web] add max_age limit for MTA-STS policy
* Added tooltips and info texts to mta-sts webui page
* postfix: replace mta-sts-resolver with postfix-tlspol
---------
Co-authored-by: FreddleSpl0it <75116288+FreddleSpl0it@users.noreply.github.com >
2025-08-26 09:57:05 +02:00
65fb4c2aa8
[Nginx] Move conf.d include before SNI vhosts
2025-03-26 13:04:43 +01:00
f64c6aa1d4
Merge pull request #6269 from mailcow/staging
...
Automatic PR to nightly from 2025-01-27T10:00:26Z
2025-02-07 15:10:10 +01:00
e645f931dc
[Nginx] Add env var for HTTP to HTTPS redirection
2025-02-03 12:05:08 +01:00
0ad327bbe5
[Nginx] Use separate vhosts for additional server names
2025-01-29 09:51:45 +01:00
36d4fcbf39
Merge pull request #6255 from mailcow/staging
...
Automatic PR to nightly from 2025-01-23T11:01:42Z
2025-01-23 15:21:39 +01:00
04058ab06e
[Nginx] move conf.d include to end of nginx.conf
2025-01-23 14:54:28 +01:00
d430b595c1
Merge branch 'staging' into nightly
2025-01-23 08:11:45 +01:00
1fca328266
[Nginx] Disable IPv6 listener for Rspamd dynmaps when DISABLE_IPv6=y
2025-01-22 15:11:46 +01:00
7bcd61ecb5
[Nginx] Generate includes for custom configs
2025-01-22 14:30:47 +01:00
FreddleSpl0it