Joshua Tauberer 
							
						 
					 
					
						
						
						
						
							
						
						
							d790cae0e2 
							
						 
					 
					
						
						
							
							DNSSEC: use RSASHA256 for the .guide tld too  
						
						
						
					 
					
						2014-10-23 17:03:23 +00:00 
						 
				 
			
				
					
						
							
							
								David Piggott 
							
						 
					 
					
						
						
						
						
							
						
						
							3ff74c8dc5 
							
						 
					 
					
						
						
							
							Add source line so dkim should actually work when run separately  
						
						
						
					 
					
						2014-10-20 21:33:20 +01:00 
						 
				 
			
				
					
						
							
							
								David Piggott 
							
						 
					 
					
						
						
						
						
							
						
						
							e997114d6e 
							
						 
					 
					
						
						
							
							Add shebangs to enable running dkim and webmail scripts separately  
						
						
						
					 
					
						2014-10-20 21:26:14 +01:00 
						 
				 
			
				
					
						
							
							
								Joshua Tauberer 
							
						 
					 
					
						
						
						
						
							
						
						
							e9aecba4df 
							
						 
					 
					
						
						
							
							update to roundcube 1.0.3, and really update  
						
						... 
						
						
						
						Updating existing installed was broken. The new roundcube would be copied into a subdirectory of /usr/local/lib/roundcubemail.
Also fixes the image thumbnail issue raised on the forum (https://discourse.mailinabox.email/t/roundcube-thumbnails-not-showing/136 ), see http://trac.roundcube.net/wiki/Changelog . 
						
					 
					
						2014-10-20 12:48:15 +00:00 
						 
				 
			
				
					
						
							
							
								Joshua Tauberer 
							
						 
					 
					
						
						
						
						
							
						
						
							6585384daa 
							
						 
					 
					
						
						
							
							bring the max outgoing mail size via webmail and z-push in line with the limit set in postfix: 128 MB  
						
						... 
						
						
						
						The limit was previously the nginx default (2MB?).
fixes  #236  
						
					 
					
						2014-10-16 22:11:10 +00:00 
						 
				 
			
				
					
						
							
							
								Joshua Tauberer 
							
						 
					 
					
						
						
						
						
							
						
						
							8902e9d1fc 
							
						 
					 
					
						
						
							
							bump bootstrap to incoming v0.04 tag  
						
						
						
					 
					
						2014-10-15 12:33:20 -04:00 
						 
				 
			
				
					
						
							
							
								Joshua Tauberer 
							
						 
					 
					
						
						
						
						
							
						
						
							df5df18820 
							
						 
					 
					
						
						
							
							fixes for bootstrap.sh for upgrading  
						
						... 
						
						
						
						* `git fetch` wasn't done right for shallow clones
* the test for whether mailinabox has already been cloned wasn't looking at the right directory if the script was not run from $HOME 
						
					 
					
						2014-10-15 12:22:48 -04:00 
						 
				 
			
				
					
						
							
							
								Joshua Tauberer 
							
						 
					 
					
						
						
						
						
							
						
						
							0b5bf602aa 
							
						 
					 
					
						
						
							
							various improvements in bash comments  
						
						
						
					 
					
						2014-10-15 11:46:20 -04:00 
						 
				 
			
				
					
						
							
							
								Joshua Tauberer 
							
						 
					 
					
						
						
						
						
							
						
						
							06e074bd32 
							
						 
					 
					
						
						
							
							disable SSLv3 in dovecot now that it is known to be insecure (POODLE)  
						
						... 
						
						
						
						SSLv3 is already disabled in Postfix (45e93f7dcc51dd2ed70b 
						
					 
					
						2014-10-15 15:39:05 +00:00 
						 
				 
			
				
					
						
							
							
								Joshua Tauberer 
							
						 
					 
					
						
						
						
						
							
						
						
							495790d81d 
							
						 
					 
					
						
						
							
							still didn't get the permissions right, chmod must follow sa-learn's initial creation of files  
						
						... 
						
						
						
						see #231 , #201 , b26abc947e7ca54a2bfbdfe0a9f187 
						
					 
					
						2014-10-12 18:05:04 +00:00 
						 
				 
			
				
					
						
							
							
								Joshua Tauberer 
							
						 
					 
					
						
						
						
						
							
						
						
							dfe0a9f187 
							
						 
					 
					
						
						
							
							clean up setup/spamassassin.sh  
						
						
						
					 
					
						2014-10-12 17:57:04 +00:00 
						 
				 
			
				
					
						
							
							
								Joshua Tauberer 
							
						 
					 
					
						
						
						
						
							
						
						
							7ca54a2bfb 
							
						 
					 
					
						
						
							
							give dovecot antispam plugin's sa-learn-pipe script permission to write to the bayes files  
						
						... 
						
						
						
						see #231 , #201 , b26abc947e 
						
					 
					
						2014-10-12 17:57:04 +00:00 
						 
				 
			
				
					
						
							
							
								David Piggott 
							
						 
					 
					
						
						
						
						
							
						
						
							b26abc947e 
							
						 
					 
					
						
						
							
							Change owner of spamassassin directory from mail to spampd,  closes   #231  
						
						
						
					 
					
						2014-10-11 18:00:22 +01:00 
						 
				 
			
				
					
						
							
							
								Joshua Tauberer 
							
						 
					 
					
						
						
						
						
							
						
						
							2f4eccd9a9 
							
						 
					 
					
						
						
							
							add 'source /etc/mailinabox.conf' to dns.sh so it can be run separately  
						
						
						
					 
					
						2014-10-08 12:48:43 +00:00 
						 
				 
			
				
					
						
							
							
								Joshua Tauberer 
							
						 
					 
					
						
						
						
						
							
						
						
							8566b78202 
							
						 
					 
					
						
						
							
							drop webfinger, see  #95  
						
						
						
					 
					
						2014-10-07 20:30:36 +00:00 
						 
				 
			
				
					
						
							
							
								Joshua Tauberer 
							
						 
					 
					
						
						
						
						
							
						
						
							711db9352c 
							
						 
					 
					
						
						
							
							bootstrap: apt was mangling stdin  
						
						... 
						
						
						
						When executed "cat bootstrap.sh | bash", apt-get mangled stdin. The script would terminate at the end of the if block containing apt-get (that seems to be as much as bash read from the pipe) and the remainder of the script was output to the console. This was very weird.
Ensuring that apt-get and git have their stdins redirected from /dev/null seems to fix the problem.
see #224  
						
					 
					
						2014-10-05 13:40:12 -04:00 
						 
				 
			
				
					
						
							
							
								Joshua Tauberer 
							
						 
					 
					
						
						
						
						
							
						
						
							7c2092d48f 
							
						 
					 
					
						
						
							
							remove apache before installing nginx, see  #224  
						
						
						
					 
					
						2014-10-05 09:01:20 -04:00 
						 
				 
			
				
					
						
							
							
								Joshua Tauberer 
							
						 
					 
					
						
						
						
						
							
						
						
							5fd107cae5 
							
						 
					 
					
						
						
							
							more work on making the bash scripts readable  
						
						
						
					 
					
						2014-10-04 17:57:26 -04:00 
						 
				 
			
				
					
						
							
							
								Joshua Tauberer 
							
						 
					 
					
						
						
						
						
							
						
						
							db0967446b 
							
						 
					 
					
						
						
							
							remove unnecessary sudos  
						
						
						
					 
					
						2014-10-04 14:06:08 -04:00 
						 
				 
			
				
					
						
							
							
								Joshua Tauberer 
							
						 
					 
					
						
						
						
						
							
						
						
							2ff5038c84 
							
						 
					 
					
						
						
							
							replace '.' with 'source'  
						
						
						
					 
					
						2014-10-04 14:05:06 -04:00 
						 
				 
			
				
					
						
							
							
								Joshua Tauberer 
							
						 
					 
					
						
						
						
						
							
						
						
							4ae76aa2dd 
							
						 
					 
					
						
						
							
							dnssec: use RSASHA256 keys for .email domains  
						
						
						
					 
					
						2014-10-04 17:29:42 +00:00 
						 
				 
			
				
					
						
							
							
								h8h 
							
						 
					 
					
						
						
						
						
							
						
						
							ba33669a62 
							
						 
					 
					
						
						
							
							generate the locales before change to it.  
						
						... 
						
						
						
						For my german box changing the locale failed:
´´´´/bin/sh: warning: setlocale: LC_ALL: cannot change locale (en_US.UTF-8)
/bin/sh: warning: setlocale: LC_ALL: cannot change locale (en_US.UTF-8)
/bin/sh: warning: setlocale: LC_ALL: cannot change locale (en_US.UTF-8)
/bin/sh: warning: setlocale: LC_ALL: cannot change locale (en_US.UTF-8)
setup/functions.sh: line 6: warning: setlocale: LC_ALL: cannot change locale (en_US.UTF-8)´´´´
see #206  and 4e6d572de9closes  #220 
commit modified by joshdata 
						
					 
					
						2014-10-02 11:05:42 +00:00 
						 
				 
			
				
					
						
							
							
								Joshua Tauberer 
							
						 
					 
					
						
						
						
						
							
						
						
							94c4352f45 
							
						 
					 
					
						
						
							
							Merge branch 'jmar71n-master' - site-wide bayesean spam filtering  
						
						
						
					 
					
						2014-09-27 16:18:55 +00:00 
						 
				 
			
				
					
						
							
							
								Joshua Tauberer 
							
						 
					 
					
						
						
						
						
							
						
						
							6dd6353d41 
							
						 
					 
					
						
						
							
							move sa-learn-pipe.sh from /usr to /usr/local  
						
						
						
					 
					
						2014-09-27 16:18:40 +00:00 
						 
				 
			
				
					
						
							
							
								Joshua Tauberer 
							
						 
					 
					
						
						
						
						
							
						
						
							d06bfa6c1b 
							
						 
					 
					
						
						
							
							tweak the site-wide bayesian spam filtering config  
						
						
						
					 
					
						2014-09-27 16:18:36 +00:00 
						 
				 
			
				
					
						
							
							
								Joshua Tauberer 
							
						 
					 
					
						
						
						
						
							
						
						
							698ae03505 
							
						 
					 
					
						
						
							
							catch-all addresses should not have precedence over mail users  
						
						... 
						
						
						
						Aliases have precedence over mail users. A catch-all address would grab mail intended for a mail user and send it elsewhere. This adds some SQL hackery to create dummy aliases for all mail users.
fixes  #200 
closes  #214  another way 
						
					 
					
						2014-09-27 13:32:10 +00:00 
						 
				 
			
				
					
						
							
							
								Joshua Tauberer 
							
						 
					 
					
						
						
						
						
							
						
						
							a4c70f7a92 
							
						 
					 
					
						
						
							
							revert dovecot part of  39bca053ed because dovecot started behaving weird and I don't have time to debug it  
						
						
						
					 
					
						2014-09-26 22:41:59 +00:00 
						 
				 
			
				
					
						
							
							
								Joshua Tauberer 
							
						 
					 
					
						
						
						
						
							
						
						
							39bca053ed 
							
						 
					 
					
						
						
							
							add 2048 bits of DH params for nginx, postfix, dovecot  
						
						... 
						
						
						
						nginx/postfix use a new pre-generated dh2048.pem file. dovecot generates the bits on its own.
ssllabs.com reports that TLS_DHE ciphers went from 1024 to 2048 bits as expected. The ECDHE ciphers remain at 256 bits --- no idea what that really means. (This tests nginx only. I haven't tested postfix/dovecot.)
see https://discourse.mailinabox.email/t/fips-ready-for-ssl-dhec-key-exchange/76/3  
						
					 
					
						2014-09-26 22:09:22 +00:00 
						 
				 
			
				
					
						
							
							
								Joshua Tauberer 
							
						 
					 
					
						
						
						
						
							
						
						
							c2eb8e5330 
							
						 
					 
					
						
						
							
							typo in roundcube download URL  
						
						... 
						
						
						
						see 8e0967dd8e (commitcomment-7940724) 
						
					 
					
						2014-09-26 14:26:45 +00:00 
						 
				 
			
				
					
						
							
							
								Joshua Tauberer 
							
						 
					 
					
						
						
						
						
							
						
						
							4e6d572de9 
							
						 
					 
					
						
						
							
							ensure Python operates in UTF-8 with a consistent locale for all users  
						
						... 
						
						
						
						fixes  #206  (hopefully) 
					
						2014-09-26 08:26:09 -04:00 
						 
				 
			
				
					
						
							
							
								Joshua Tauberer 
							
						 
					 
					
						
						
						
						
							
						
						
							5714b3c6b7 
							
						 
					 
					
						
						
							
							bump bootstrap.sh to incoming 0.03 tag  
						
						
						
					 
					
						2014-09-24 12:48:15 +00:00 
						 
				 
			
				
					
						
							
							
								Joshua Tauberer 
							
						 
					 
					
						
						
						
						
							
						
						
							8e0967dd8e 
							
						 
					 
					
						
						
							
							if an earlier version of roundcube had already been installed, update to our target version  
						
						... 
						
						
						
						fixes  #195  
					
						2014-09-24 12:46:51 +00:00 
						 
				 
			
				
					
						
							
							
								Joshua Tauberer 
							
						 
					 
					
						
						
						
						
							
						
						
							ed8fb2d06d 
							
						 
					 
					
						
						
							
							the latest z-push introduces a new/second USE_FULLEMAIL_FOR_LOGIN parameter  
						
						... 
						
						
						
						see http://discourse.mailinabox.email/t/activesync-z-push-not-working/94/3  
						
					 
					
						2014-09-24 12:24:35 +00:00 
						 
				 
			
				
					
						
							
							
								Joshua Tauberer 
							
						 
					 
					
						
						
						
						
							
						
						
							8c8d9304ac 
							
						 
					 
					
						
						
							
							lock z-push to a particular upstream version by fmbiete/Z-Push-contrib commit hash  
						
						
						
					 
					
						2014-09-24 12:20:10 +00:00 
						 
				 
			
				
					
						
							
							
								Joshua Tauberer 
							
						 
					 
					
						
						
						
						
							
						
						
							c1ccd22531 
							
						 
					 
					
						
						
							
							put a start script at /usr/local/bin/mailinabox  
						
						
						
					 
					
						2014-09-22 16:37:12 -04:00 
						 
				 
			
				
					
						
							
							
								Joshua Tauberer 
							
						 
					 
					
						
						
						
						
							
						
						
							01c964bfe3 
							
						 
					 
					
						
						
							
							update bootstrap.sh for next tag  
						
						
						
					 
					
						2014-09-22 16:35:07 -04:00 
						 
				 
			
				
					
						
							
							
								Joshua Tauberer 
							
						 
					 
					
						
						
						
						
							
						
						
							6c59294e7b 
							
						 
					 
					
						
						
							
							more readable bash  
						
						
						
					 
					
						2014-09-21 16:05:11 -04:00 
						 
				 
			
				
					
						
							
							
								Joshua Tauberer 
							
						 
					 
					
						
						
						
						
							
						
						
							9d40a12f44 
							
						 
					 
					
						
						
							
							first pass at making readable documentation by parsing the bash scripts  
						
						
						
					 
					
						2014-09-21 13:43:31 -04:00 
						 
				 
			
				
					
						
							
							
								jmar71n 
							
						 
					 
					
						
						
						
						
							
						
						
							b5bb12d0d2 
							
						 
					 
					
						
						
							
							enable site-wide bayesian filtering  
						
						... 
						
						
						
						Create directory in $STORAGE_ROOT for bayes database.
Added --username arg to sa-learn as the user mail does not have permission to edit files in $STORAGE_ROOT. There is probably a better solution to this... 
						
					 
					
						2014-09-20 16:07:30 +01:00 
						 
				 
			
				
					
						
							
							
								Joshua Tauberer 
							
						 
					 
					
						
						
						
						
							
						
						
							dd91553689 
							
						 
					 
					
						
						
							
							open the firewall to an alternative SSH port if set  
						
						... 
						
						
						
						https://discourse.mailinabox.email/t/opening-up-a-custom-port-for-ssh-after-install/55/2  
					
						2014-09-20 08:26:10 -04:00 
						 
				 
			
				
					
						
							
							
								Joshua Tauberer 
							
						 
					 
					
						
						
						
						
							
						
						
							98651deea4 
							
						 
					 
					
						
						
							
							python3-dev is a dependency for many pip packages, including pyyaml,  fixes   #196  
						
						
						
					 
					
						2014-09-17 21:56:09 +00:00 
						 
				 
			
				
					
						
							
							
								Bretos 
							
						 
					 
					
						
						
						
						
							
						
						
							467f04facb 
							
						 
					 
					
						
						
							
							update roundcube version  
						
						
						
					 
					
						2014-09-10 12:32:32 +02:00 
						 
				 
			
				
					
						
							
							
								Joshua Tauberer 
							
						 
					 
					
						
						
						
						
							
						
						
							7ea956d3bc 
							
						 
					 
					
						
						
							
							install network-checks's dependencies  
						
						... 
						
						
						
						Since it runs before the real setup begins, we must make sure that packages are installed.
Also removing bind9-host's installation from system.sh. In 189dd6000efixes  #180  
						
					 
					
						2014-09-07 12:29:23 +00:00 
						 
				 
			
				
					
						
							
							
								Joel Kåberg 
							
						 
					 
					
						
						
						
						
							
						
						
							6b13ac1ca9 
							
						 
					 
					
						
						
							
							Support more concurrent connections  
						
						
						
					 
					
						2014-09-04 16:40:33 +02:00 
						 
				 
			
				
					
						
							
							
								Joel Kåberg 
							
						 
					 
					
						
						
						
						
							
						
						
							9fd6958dc2 
							
						 
					 
					
						
						
							
							Revert commit "Support more concurrent connections for z-push"  
						
						
						
					 
					
						2014-09-04 16:39:38 +02:00 
						 
				 
			
				
					
						
							
							
								Joel Kåberg 
							
						 
					 
					
						
						
						
						
							
						
						
							e434bf9fce 
							
						 
					 
					
						
						
							
							Support more concurrent connections for z-push  
						
						... 
						
						
						
						My logs were showing lots of: 
[04-Sep-2014 15:52:41] WARNING: [pool www] server reached pm.max_children setting (5), consider raising it 
						
					 
					
						2014-09-04 16:11:06 +02:00 
						 
				 
			
				
					
						
							
							
								Joshua Tauberer 
							
						 
					 
					
						
						
						
						
							
						
						
							3853e8dd93 
							
						 
					 
					
						
						
							
							show the status of backups in the control panel  
						
						
						
					 
					
						2014-09-01 13:06:53 +00:00 
						 
				 
			
				
					
						
							
							
								Joshua Tauberer 
							
						 
					 
					
						
						
						
						
							
						
						
							4ec6692f21 
							
						 
					 
					
						
						
							
							showing the mail-in-a-box version might fail if git isn't actually installed  
						
						... 
						
						
						
						The user might acquire the sources via some means other than a git clone. On Vagrant, the files come in via Vagrant. So test for git before running `git describe`. 
						
					 
					
						2014-09-01 07:51:25 -04:00 
						 
				 
			
				
					
						
							
							
								Joel Kåberg 
							
						 
					 
					
						
						
						
						
							
						
						
							7603ce0489 
							
						 
					 
					
						
						
							
							this is what I meant  
						
						
						
					 
					
						2014-09-01 10:32:44 +02:00 
						 
				 
			
				
					
						
							
							
								Joel Kåberg 
							
						 
					 
					
						
						
						
						
							
						
						
							8b2fed1a2a 
							
						 
					 
					
						
						
							
							fixes comments by @JoshData  
						
						
						
					 
					
						2014-09-01 10:02:46 +02:00