public/mailcow-dockerized
1
0
Fork 0
mirror of https://github.com/mailcow/mailcow-dockerized.git synced 2026-09-01 16:37:10 +00:00
Code Issues Releases Wiki Activity
7,601 Commits 39 Branches 93 Tags
fffe1aec3d16a2933cbfbbb30ceb8b4a2cd862dd
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
DerLinkman d9463c7950 sogo: shrinked image file by ~50% 2026-03-03 14:14:32 +01:00
DerLinkman 5ca900749c autodiscover: use generalized error logging instead of specific to prevent user enumeration 2025-12-18 16:54:45 +01:00
DerLinkman b005803fe0 Add autodiscover debug script with domain override support 
- Add view_autodiscover.sh helper script for testing autodiscover responses
- Support -h/--help flag for usage information
- Support -d/--domain flag to override autodiscover target (useful for testing)
- Auto-detect xmllint availability for formatted output
- Email validation with regex
- Interactive mode if no email provided
- Display response length for debugging
 2025-12-17 14:27:53 +01:00
DerLinkman ec77406dba Fix autodiscover.php: Use random error IDs and fix SQL type casting 
- Replace hardcoded error IDs with random values (1-10 billion range) for better debugging
- Cast SimpleXMLElement email to string before SQL query to prevent type errors
- Qualify ambiguous 'active' column with table names in JOIN query
- Add proper error XML response for database errors instead of die()
- Ensure all error paths return complete XML documents
 2025-12-17 14:27:38 +01:00
DerLinkman ee15721550 feat: implement passwordless autodiscover endpoint 
- Remove HTTP Basic Authentication requirement from autodiscover.php
- Extract email address from XML request body instead of AUTH headers
- Validate mailbox existence and active status before returning config
- Improve security by eliminating password transmission
- Add comprehensive error handling for invalid/inactive mailboxes
- Follow industry standards (Microsoft, Google, Apple)
- Maintain backward compatibility with existing email clients
- Keep full logging functionality in Redis AUTODISCOVER_LOG

This change enhances security while improving user experience and
follows modern email client configuration best practices.
 2025-12-17 13:39:05 +01:00
DerLinkman 1fe4cd03e9 ui: fix global filters ui tickbox reappearing (#6966) 2025-12-12 16:01:18 +01:00
DerLinkman b6f57dfb78 rspamd: update to 3.14.2 2025-12-12 14:06:49 +01:00
DerLinkman 1bac6f1ee7 ofelia: revert fixed cron syntax for sa-rules download 2025-12-11 13:29:11 +01:00
DerLinkman 67e7acd6bd rspamd: upgrade to 3.14.1, trixie rebuild + bcc forwarded hosts fix (#6958) 
* rspamd: fix bcc + subadress handling when using forward hosts

* rspamd: build against trixie + use version 3.14.1
 2025-12-11 09:45:56 +01:00
DerLinkman 5d95c48e0d backup: add image prefetch function to verify latest image is used 2025-12-10 08:43:04 +01:00
DerLinkman dbb9e474b0 pf-tlspol: upgrade to 1.8.22 (#6951) 
* postfix-tlspol: upgrade to 1.8.20

* pf-tlspol: update to 1.8.22
 2025-12-09 13:25:50 +01:00
DerLinkmanandCopilot ef010aa39c Update CONTRIBUTING.md 
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
 2025-12-08 15:08:25 +01:00
DerLinkman f3d9833ecf Merge branch 'master' into staging 2025-12-03 16:55:12 +01:00
DerLinkman 930ca76ea7 update: moved _modules initialization and update at the beginning of update script 2025-12-03 16:54:26 +01:00
DerLinkman 9a2887cf46 core: improved docker compose version check 2025-12-03 16:27:04 +01:00
DerLinkman 9950914086 core: improved docker compose version check 2025-12-03 16:26:22 +01:00
DerLinkman 62d16c9e56 compose: changes cronjobs to regular cron syntax + fixed sogo creds for cronjobs (#6866) 
* cron: restructure cron timer to time on second (instead of random)

* dovecot: fix clearance for cron.creds file
 2025-11-13 14:59:49 +01:00
DerLinkman 674b41ce08 updated the Contributing Guidelines 2025-11-12 10:16:54 +01:00
DerLinkman 88adb1adf5 remove dev docker volume from upstream 2025-11-12 09:54:35 +01:00
DerLinkman ec472f13cf sogo: removed URLDecrpytion by default, make it configurable in sogo.conf 2025-11-12 09:50:41 +01:00
DerLinkman 417835dea8 netfilter: improve logging and mark iptables-legacy as deprecated 2025-10-09 16:37:05 +02:00
DerLinkman 4db1569c93 Squashed commit of the following: 
commit 94c1a6c4e1
Author: DerLinkman <niklas.meyer@servercow.de>
Date:   Wed Sep 10 16:20:58 2025 +0200

    scripts:  ipv6_controller improvement + fix modules handling (#6722)

    * Fix subscript handling for modules

    * ipv6: detect case when link local is present

    * v6-controller: removed fixed-cidr for docker 28+
 2025-09-10 16:22:19 +02:00
DerLinkman 94c1a6c4e1 scripts: ipv6_controller improvement + fix modules handling (#6722) 
* Fix subscript handling for modules

* ipv6: detect case when link local is present

* v6-controller: removed fixed-cidr for docker 28+
 2025-09-10 16:20:58 +02:00
DerLinkman 34877ecf9c watchdog: added postfix-tlspol check (#6691) 2025-09-03 08:18:04 +02:00
DerLinkman 5361a4a4ee updated sponsors in Readme.md 2025-09-01 12:32:27 +02:00
DerLinkman 0b0a65a3f3 web: rename login placeholder for mailbox to email address (#6693) 2025-08-28 17:02:16 +02:00
DerLinkman 6c5d82c4df expanded postscreen whitelist with modern freemailers + included checks.mailcow.email 2025-08-28 14:06:17 +02:00
DerLinkman 29e28b47ed compose: add depends on for postfix-tlspol 2025-08-28 10:20:21 +02:00
DerLinkman 1cb38bacdb Postfix: Split TLSPol companion app into separate container (#6688) 
* postfix: split postfix-tlspol service into new container

* postfix-tls-pol: added debug mode

* pf-tlspol: removed obsoleted standalone conf from Dockerfiles

* pf-tlspol: use git instead of wget
 2025-08-28 10:18:18 +02:00
DerLinkman 169aafec50 compose: fix dovecot image tag 2025-08-27 14:09:29 +02:00
DerLinkman 3826c4b5be fix postfix tlspol missing folders for config 2025-08-26 10:10:16 +02:00
DerLinkman e1410baaeb fix gitignore 2025-08-26 09:58:18 +02:00
DerLinkmanandFreddleSpl0it c39712af67 pf/php: add mta-sts support (outbound) (#6686) 
* added mta-sts-resolver into postfix config + daemon

* [Web] Add MTA-STS support

* [Web] Fix mta-sts server_name

* updated .gitignore

* [ACME] fetch cert for mta-sts subdomain

* [Web] change MTA-STS id to human-readable timestamp

* [Web] Remove MTA-STS version STSv2

* [Web] Fix MTA-STS DNS check

* [Web] add max_age limit for MTA-STS policy

* Added tooltips and info texts to mta-sts webui page

* postfix: replace mta-sts-resolver with postfix-tlspol

---------

Co-authored-by: FreddleSpl0it <75116288+FreddleSpl0it@users.noreply.github.com>
 2025-08-26 09:57:05 +02:00
DerLinkman 2b93b59cdd db: change qhash varchar to 64 instead of 255 2025-08-06 16:11:23 +02:00
DerLinkman e91d678bd1 fix docker version detection 2025-08-06 09:36:05 +02:00
DerLinkman ef5739c32f add 2025-08 as breaking major release 2025-08-06 08:39:21 +02:00
DerLinkmanandCopilot 88bf9b02e1 core: modules splitting + ipv6 nat rewrite (#6634) 
* ipv6: added ipv6 detection + removed ip6 nat container

* nginx: renamed DISABLE_IPv6 to ENABLE_IPV6 to align

* initial commit for script overhauls

* rewrite to scripts after testing (improved error handling)

* fixed missing fi in update.sh

* fixed/added comments for modules

* fix broken EXIT_CODE var handling

* added jq as dependancy

* fixed docker version check for daemon

* improved _modules handling while running

* reintegrated module loading (update.sh)

* added error handling for blank daemon.json

* adapted removal of ACME_CONTACT for nightly

* move detect_major_update func to core submodule

* removed unnecessary message on every call of function

* Update _modules/scripts/new_options.sh

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* Update _modules/scripts/core.sh

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* improve ENABLE_IPV6 check in nginx bootstrap

* improve detection of ENABLE_IPV6

* ip6_controller: moved docker major detection upwards

* Update _modules/scripts/new_options.sh

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* Update _modules/scripts/new_options.sh

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* reuse DOCKER_MAJOR Variable in ip6_controller

* fix some smaller typos in update.sh

* smaller bugfixes in submodules

* completely remove ACME_CONTACT Variable

---------

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
 2025-08-06 08:36:40 +02:00
DerLinkman 360fe03497 sogo: update to 5.12.3 2025-08-05 16:01:47 +02:00
DerLinkman 8a89f5c685 updated Readme (sponsors) 2025-06-23 10:36:49 +02:00
DerLinkman d4f899b091 compose: add selinux label to mysql-socket-vol to prevent "access denied" (#6560) 2025-05-26 11:35:34 +02:00
DerLinkman aa4125fe62 sogo: enabled SOGoEnableMailCleaning per default 2025-04-23 15:13:52 +02:00
DerLinkman a92832d115 update README.md to include first 50 and 100$ monthly sponsors 2025-04-02 14:39:24 +02:00
DerLinkman 463e3ab78c rspamd: update rspamd to 3.11.1 (#6374) 2025-03-14 12:18:59 +01:00
DerLinkman 18acbc7a4c cold-standby: changed texts + removed --no-parallel for pull 2025-03-11 12:35:13 +01:00
DerLinkman 2f93f1d0c5 os: fixes for newer mariadb-client versions (especially on alpine 3.21) 2025-03-10 16:45:57 +01:00
DerLinkman 0860a7503e os: updated alpine containers to 3.21 2025-03-10 11:56:12 +01:00
DerLinkman 70190e5230 rspamd: remove .info from fishy tlds (default) 2025-02-28 15:38:05 +01:00
DerLinkman 5296085189 update.sh: corrected typos inside update.sh 2025-02-27 11:47:08 +01:00
DerLinkman a4c2cf4c67 scripts: adapted new docker image names to docker_garbage function + removed dup 2025-02-27 11:44:52 +01:00
DerLinkman 704dd50262 compose: use ghcr.io for new/current mailcow docker images instead of docker hub (#6332) 2025-02-26 15:20:57 +01:00
DerLinkman a6c38590ca rspamd: upgraded rspamd to 3.11.0-2 (incl. NIXSPAM Removal) (#6328) 2025-02-25 09:23:10 +01:00
DerLinkman 4ac541f671 [Mariadb] Update to 10.11 (LTS) (#5152) 
* [Mariadb] Update to 10.11 (LTS)

* mysql: set default collation to general_ci
 2025-02-17 15:48:25 +01:00
DerLinkman 16e22e23dc sogo: switched apt source to sogo again (supports aarch64 now) 2025-02-17 14:31:50 +01:00
DerLinkman ac2f0c7db1 Merge pull request #6286 from mailcow/fix-workflow-staging 
Fix check_prs_if_on_staging workflow
 2025-02-11 13:52:44 +01:00
DerLinkman aac4c6b5f4 postfix: added master.pid removal and startsecs to supervisord (#6284) 2025-01-31 12:49:39 +01:00
DerLinkman 2407aa7895 Merge branch 'feat/clamd-rebuild' into staging 2025-01-29 14:01:39 +01:00
DerLinkman 244d4b8c4c compose: rollback clamd version until next major... accidentally pushed 2025-01-29 13:46:53 +01:00
DerLinkman f92ddd86c5 clamd: update to 1.4.2 + build from source instead using alpine packages (#6273) 
* clamd: update to 1.4.2 + build from source instead using alpine packages

* clamd: remove exposed ports from buildfile

* clamd: cleanup dockerfile
 2025-01-29 09:49:04 +01:00
DerLinkman 1a087bb2c8 clamd: cleanup dockerfile 2025-01-28 14:49:11 +01:00
DerLinkman 65bc581fab clamd: remove exposed ports from buildfile 2025-01-28 14:36:43 +01:00
DerLinkman 60a2270d1e clamd: update to 1.4.2 + build from source instead using alpine packages 2025-01-28 14:25:56 +01:00
DerLinkman 43f945fe01 dovecot: fix index timeout seconds 2025-01-23 11:51:41 +01:00
DerLinkman e76c0ba9a6 Merge branch 'staging' 2025-01-23 11:31:01 +01:00
DerLinkman d83111568e update.sh: remove accidentally added exit at end of solr volume removal 2025-01-23 11:30:05 +01:00
DerLinkman 1dac8f1f66 scripts: changed SKIP_FTS text to warn on lower threaded systems 2025-01-23 08:42:22 +01:00
DerLinkman 5a04942d89 update.sh: changed SKIP_FTS default to y instead n for updates 2025-01-23 08:38:14 +01:00
DerLinkman a30f6696a3 update.sh: fixed --force for solr-removal + code optimization 2025-01-23 08:30:48 +01:00
DerLinkman 4708b1398b update.sh: fix mailcow fts update versioning 2025-01-20 15:41:48 +01:00
DerLinkman 746915cbdd fts: change autoindex to occur on mailboxes of receiving 20 or more mails daily 2025-01-20 14:21:15 +01:00
DerLinkman 31e001ebee flatcurve: change default amount of processes to 1 2025-01-16 11:37:15 +01:00
DerLinkman 1c6684a539 compose: fix dovecot tagging 2024-12-12 17:02:21 +01:00
DerLinkman de80c120c9 update.sh: added silent fix for removing old fts.conf in order to update properly 2024-12-12 16:57:32 +01:00
Niklas Meyer 3e8bb06a37 dovecot: replace solr fts with flatcurve (xapian) (#5680) 
* fts-flatcurve: inital implementation

* fts: removed solr from compose.yml

* flatcurve: added heap and proc logic to dovecot

* added logic for update.sh & generate for Flatcurve

* delete old iteration of fts-flatcurve.conf

* updated default fts.conf

* updated .gitignore to exclude fts.conf for further git updates

* Remove autogeneration of fts.conf (disable override)

* cleanup all left solr stuff

* renamed SKIP_FLATCURVE to SKIP_FTS

* cleanup leftovers solr in lang files

* moved lazy_expunge plugin only to mail_plugins

* added fts timeout value

* compose: remove dev image of dovecot

* updated japanese translation
 2024-12-12 16:44:42 +01:00
Niklas Meyer 3875e8377a sogo: added SOGoDisableOrganizerEventCheck value to sogo.conf (#6204) 2024-12-10 15:59:02 +01:00
Niklas Meyer bca4e1a03d update.sh: precaution ask for deletion of dns_blocklists.cf if old format (#6154) 2024-11-19 14:13:37 +01:00
DerLinkman 5ad4ab5b60 update.sh: fixed typos 2024-11-15 16:39:06 +01:00
Niklas Meyer bd9f4ba0a5 Merge pull request #6173 from mailcow/staging 
2024-11b
 2024-11-15 16:21:17 +01:00
DerLinkman d10d64dd92 mysql: increased thread_stack to 192k since 10.5.27 2024-11-15 16:18:22 +01:00
Niklas MeyerEaston ManFreddleSpl0itmilkmaker
 		4d688c5500 2024-11a (#6160) 
* update.sh: precaution ask for deletion of dns_blocklists.cf if old format (#6154)

* [Web] Updated lang.zh-cn.json (#6151)

[Web] Updated lang.zh-cn.json

Co-authored-by: Easton Man <me@eastonman.com>

* compose: bump sogo version to include 5.11.2 (#6156)

* php: use correct php image + workaround of #6149 (#6159)

* compose: bump php-fpm container to correctly use patched c-ares

* [Web] check $containers_info contains required fields

---------

Co-authored-by: FreddleSpl0it <patschul@posteo.de>

---------

Co-authored-by: milkmaker <milkmaker@mailcow.de>
Co-authored-by: Easton Man <me@eastonman.com>
Co-authored-by: FreddleSpl0it <patschul@posteo.de>
 2024-11-12 15:57:17 +01:00
Niklas MeyerandFreddleSpl0it b90375b6e5 php: use correct php image + workaround of #6149 (#6159) 
* compose: bump php-fpm container to correctly use patched c-ares

* [Web] check $containers_info contains required fields

---------

Co-authored-by: FreddleSpl0it <patschul@posteo.de>
 2024-11-12 15:56:23 +01:00
Niklas Meyer afe0ba74d2 compose: bump sogo version to include 5.11.2 (#6156) 2024-11-12 11:11:34 +01:00
Niklas Meyer 52f3f93aee update.sh: precaution ask for deletion of dns_blocklists.cf if old format (#6154) 2024-11-11 16:50:14 +01:00
Niklas Meyer 6ec1e357c3 fix: broken sogo cron notifications (for appointments etc.) (#6128) 2024-11-05 16:21:14 +01:00
Niklas Meyer b106945c73 Feat/rspamd 3.10.2 (#6122) 
* rspamd: update to 3.10.2

* rspamd: fix broken archive_extension gz
 2024-10-21 16:03:51 +02:00
Niklas Meyer ee2791d93a rspamd: update to 3.10.1 (#6115) 
* rspamd: upgrade to 3.10.1

* rspamd: adapt 30s task timeout per default now
 2024-10-18 15:50:45 +02:00
Niklas Meyer 38907b5032 dovecot: activate lazy_expunge plugin per default (unconfigured) (#6112) 2024-10-16 15:56:40 +02:00
Niklas Meyer 8dcaffe925 php: upgrade to alpine 3.20 (base os) (#6106) 2024-10-16 10:35:54 +02:00
Niklas Meyer c53bf85480 postfix: add X-Original-To header per default (#6110) 2024-10-16 10:35:39 +02:00
Niklas Meyer 982e823c71 sogo: upgrade to 5.11.1 (#6109) 2024-10-15 16:13:51 +02:00
Niklas Meyer fda95301ba fix: added tls1.0/1.1 patch for openssl when using older tls versions in override (#6105) 2024-10-15 10:32:08 +02:00
Niklas Meyer bb6f405841 compose: added clamd as depends_on to rspamd (#6062) 2024-09-04 14:42:30 +02:00
Niklas Meyer 0129f84a32 Merge pull request #6056 from mailcow/update/postscreen_access.cidr 
[Postfix] update postscreen_access.cidr
 2024-09-02 15:37:24 +02:00
DerLinkman 37beed6ad9 update FUNDING.yml 2024-08-26 09:56:49 +02:00
DerLinkman 75f18df143 Revert "Before update on 2024-08-20_14_22_10" 
This reverts commit 89398c4726.
 2024-08-23 09:54:10 +02:00
DerLinkman 89398c4726 Before update on 2024-08-20_14_22_10 2024-08-20 14:22:55 +02:00
DerLinkman 8971b11c49 Merge branch 'staging' 2024-08-20 14:08:57 +02:00
Niklas Meyer 439a936fd8 Merge pull request #6033 from mailcow/staging 
2024-08a
 2024-08-20 13:44:51 +02:00
Niklas Meyer ffcd242048 Merge pull request #6027 from mailcow/staging 
Automatic PR to nightly from 2024-08-19T12:28:50Z
 2024-08-20 13:41:54 +02:00
DerLinkman e21157c10d Merge branch 'staging' into nightly 2024-08-19 11:42:12 +02:00
Niklas Meyer b70bcd36fb containers: use mariadb-admin instead of deprecated mysqladmin (#6026) 
* dockerfiles: use mariadb-admin instead of deprecated mysqladmin command

* compose: bump compose tags
 2024-08-19 11:33:28 +02:00