022a11e159
Merge remote-tracking branch 'up/master'
2020-06-21 15:52:31 +01:00
74554bcbf3
Version bump
2020-06-21 15:45:34 +01:00
5d6c23cff9
Finalize php configuration
2020-06-21 15:18:46 +01:00
0ccbf1b809
Only spawn a thread pool when strictly needed
...
For --check-primary-hostname, the pool is not used.
When exiting, the other processes are left alive and will hang.
2020-06-21 15:05:17 +01:00
6fd3195275
Fix MTA-STS policy id so it does not have invalid characters, fixes #1779
2020-06-12 13:09:11 -04:00
d01069f7f2
Automatically agree to ToS on SSL provision
2020-06-12 09:27:08 +01:00
224242dfde
Merge v0.46 point release branch
2020-06-11 12:25:49 -04:00
049bfb6f7f
v0.46
2020-06-11 12:23:18 -04:00
12d60d102b
Update Roundcube to 1.4.6
...
Fixes #1776
2020-06-11 12:21:17 -04:00
9db2fc7f05
In web proxies, add X-{Forwarded-{Host,Proto},Real-IP} and 'proxy_set_header Host' when there is a flag
...
Merges #1432 , more or less.
2020-06-11 12:20:17 -04:00
e03a6541ce
Don't make autoconfig/autodiscover subdomains and SRV records when the parent domain has no user accounts
...
These subdomains/records are for automatic configuration of mail clients, but if there are no user accounts on a domain, there is no need to publish a DNS record, provision a TLS certificate, or create an nginx server config block.
2020-06-11 12:20:17 -04:00
41642f2f59
[backport] Fix roundcube error log file path in setup script ( #1775 )
2020-06-11 12:16:53 -04:00
df9bb263dc
daily_tasks.sh: redirect stderr to stdout ( #1768 )
...
When the management commands fail, they can print something to the standard error output.
The administrator would never notice, because it wouldn't be send to him with the usual emails.
Fixes #1763
2020-06-07 09:56:45 -04:00
339c330b4f
Fix roundcube error log file path in setup script ( #1775 )
2020-06-07 09:50:04 -04:00
cfc8fb484c
Add rate limiting of SSH in the firewall ( #1770 )
...
See #1767 .
2020-06-07 09:47:51 -04:00
bc1be9d70a
readme fixes
2020-05-30 08:15:31 -04:00
3a4b8da8fd
More for MTA-STS for incoming mail
...
* Create the mta_sts A/AAAA records even if there is no valid TLS certificate because we can't get a TLS certificate if we don't set up the domains.
* Make the policy id in the TXT record stable by using a hash of the policy file so that the DNS record doesn't change every day, which means no nightly notification and also it allows for longer caching by sending MTAs.
2020-05-30 08:04:09 -04:00
37dad9d4bb
Provision certificates from Let's Encrypt grouped by DNS zone
...
Folks didn't want certificates exposing all of the domains hosted by the server (although this can already be found on the internet).
Additionally, if one domain fails (usually because of a misconfiguration), it would be nice if not everything fails. So grouping them helps with that.
Fixes #690 .
2020-05-29 15:38:18 -04:00
b805f8695e
Move status checks for www, autoconfig, autodiscover, and mta-sts to within the section for the parent domain
...
Since we're checking the MTA-STS policy, there's no need to check that the domain resolves etc. directly.
2020-05-29 15:38:13 -04:00
10bedad3a3
MTA-STS tweaks, add status check using postfix-mta-sts-resolver, change to enforce
2020-05-29 15:36:52 -04:00
afc9f9686a
Publish MTA-STS policy for incoming mail ( #1731 )
...
Co-authored-by: Daniel Mabbett <triumph_2500@hotmail.com>
2020-05-29 15:30:07 -04:00
8ca58798e4
Typo fix
2020-05-28 16:17:10 +01:00
235ebe9a4a
Secondary nameservers: Allow IPv6
2020-05-28 15:47:43 +01:00
211d3ff8a8
Fix os tag issues
2020-05-24 23:23:45 +01:00
a51e968d31
Use pip3
2020-05-17 15:20:14 +01:00
c95b91af5a
Force python3-pip
2020-05-17 15:14:43 +01:00
117bdb7464
Update Nextcloud to the latest version
...
Nextcloud 17 doesn't support PHP 7.4 (and therefore Ubuntu 20.04 LTS)
2020-05-17 15:04:17 +01:00
baa5d32dea
Make sure /etc/default/bind9 exists
2020-05-17 02:58:19 +01:00
1513655bc4
Make sure that the OS in the admin panel matches the actual system OS
2020-05-17 02:45:35 +01:00
959281c635
Version bump
2020-05-17 02:38:18 +01:00
98b50ce333
Syntax function fix
2020-05-17 02:38:00 +01:00
b66ade73c8
Begin support for Ubuntu LTS
2020-05-17 02:33:26 +01:00
7de8fc9bc0
v0.45
2020-05-16 06:45:23 -04:00
de115fe01e
Merge remote-tracking branch 'up/master'
2020-05-11 19:42:54 +01:00
c87b62b8c2
Fix path to Roundcube error log in fail2ban jails.conf ( #1761 )
2020-05-11 08:59:42 -04:00
8fe33da85d
Run nightly tasks on a random minute after 03:00 to avoid overload ( #1754 )
...
- The MIAB version check regularly fails at 03:00, presumably because a
large portion of installations is checking mailinabox.email at the same
time.
- At installation time, the time of the nightly clock is configured to
run at a random minute after 03:00, but before 04:00.
- Users might expect the nightly tasks to be over at a certain time and
run their own custom tasks afterwards. This could thus interfere with
custom backup routines.
- This breaks reproducibility of the installation process.
- Users might also be surprised by the nightly task time changing after
updating MIAB.
2020-05-10 19:54:45 -04:00
c202a5cbc6
Changlog entries
2020-05-10 19:46:25 -04:00
1353949e42
Upgrade Roundcube to 1.4.4, Nextcloud to 17.0.6, Z-Push to 2.5.2
2020-05-10 19:44:12 -04:00
c19f8c9ee6
Change Mozilla autoconfig useGlobalPreferredServer property to false
...
Fixes #1736 .
2020-05-10 19:29:01 -04:00
ad9979f9c6
Make the Show More link an actual button
2020-04-25 04:26:24 +01:00
e75d89113a
Test
2020-04-25 04:17:55 +01:00
7984d103a4
Test
2020-04-25 04:13:46 +01:00
4309a6a875
Swap show-button order
2020-04-25 03:51:38 +01:00
32e42f14fb
Do not apply custom nginx dotfiles to the default webroot
2020-04-24 17:03:13 +01:00
d9567c0035
Use proper emojis for status checks
2020-04-24 15:50:01 +01:00
7328990921
Installation instructions
2020-04-22 16:29:44 +01:00
8ca34e18bd
Properly configure nsd, bump version
2020-04-22 16:25:12 +01:00
3589ac2c06
Don't interfere with locales right away, bump version
2020-04-22 16:14:20 +01:00
2d228c0520
Remove PPA installation process
2020-04-21 14:59:54 +01:00
8ba078c04b
Attempt to fix some stuff and bump version
2020-04-21 14:48:16 +01:00
David Duque
Joshua Tauberer
Faye Duxovni
Vasek Sraier
Marcus Bointon
A. Schippers
yeuna92
clonejo