KiekerJan
be899f2b9e
avoid a runaway /64 in jail.conf
2021-10-25 16:44:25 +02:00
github@kiekerjan.isdronken.nl
52a5100265
align recidive search time to a week
2021-09-09 22:52:30 +02:00
KiekerJan
c4fa84b966
tuning fail2ban
2021-08-29 22:47:29 +02:00
KiekerJan
63255d321a
tuning fail2ban
2021-08-28 13:34:37 +02:00
KiekerJan
cf6eac0d0c
add nginx security headers
2021-08-02 00:05:12 +02:00
KiekerJan
1f35158211
use predefined DHE field groups
2021-08-01 23:09:59 +02:00
KiekerJan
87be897d36
update DH security to 4096
2021-08-01 21:52:37 +02:00
KiekerJan
3592b6463d
add ipv6 localhost to ignore ip list
2021-07-04 20:09:07 +02:00
github@kiekerjan.isdronken.nl
212b9a31df
add definition of admin ipv6 address
2021-06-27 22:12:15 +02:00
github@kiekerjan.isdronken.nl
ca5fb3c2e0
Merge changes from upstream v0.54
2021-06-20 23:36:54 +02:00
KiekerJan
95712e196b
remove chkrootkit,too many false positives
2021-06-05 09:53:07 +02:00
KiekerJan
f722eef9d7
remove not belonging data
2021-05-31 23:45:46 +02:00
github@kiekerjan.isdronken.nl
9f7ced57a6
add favicon
2021-05-31 23:38:35 +02:00
KiekerJan
a24c01973f
doveadm fts rescan clears the indices, we don't want that
2021-05-30 21:11:47 +02:00
KiekerJan
7ffc87c529
more to ignore for chkrootkit
2021-05-28 23:37:53 +02:00
KiekerJan
b0e053bc4a
update chkrootkit ignore file
2021-05-18 13:03:23 +02:00
Joshua Tauberer
d510c8ae2a
Enable and recommend port 465 for mail submission instead of port 587 ( fixes #1849 )
...
Port 465 with "implicit" (i.e. always-on) TLS is a more secure approach than port 587 with explicit (i.e. optional and only on with STARTTLS). Although we reject credentials on port 587 without STARTTLS, by that point credentials have already been sent.
2021-05-15 16:42:14 -04:00
KiekerJan
6f804ea5fe
only cron errors as output
2021-05-09 09:23:58 +02:00
github@kiekerjan.isdronken.nl
6aec61e4e8
cleanup solr files
2021-05-08 23:43:39 +02:00
github@kiekerjan.isdronken.nl
23c0388bb3
base for xapian dovecot fts
2021-05-08 22:35:46 +02:00
KiekerJan
575e5144d5
add ignore file for chkrootkit
2021-05-01 23:36:51 +02:00
github@kiekerjan.isdronken.nl
7368b4caea
simplify fail2ban configuration
2021-04-28 15:57:52 +02:00
github@kiekerjan.isdronken.nl
7089bd2748
solr fixes
2021-04-26 09:40:27 +02:00
github@kiekerjan.isdronken.nl
b1671df028
update once every hour, not every day
2021-04-25 20:53:32 +02:00
github@kiekerjan.isdronken.nl
3bf241c3e0
add postfix spamhaus jail
2021-04-23 22:03:22 +02:00
github@kiekerjan.isdronken.nl
1292dce11e
merge from 1804 version
2021-04-21 22:42:10 +02:00
github@kiekerjan.isdronken.nl
e946276f15
install solr without ubuntu package
2021-04-21 22:26:49 +02:00
github@kiekerjan.isdronken.nl
ef5b536f43
optimize solr cron and log
2021-04-18 21:52:17 +02:00
github@kiekerjan.isdronken.nl
4aaee13c1c
Add solr full text search based on https://github.com/jvolkenant/mailinabox/tree/solr-jetty
2021-04-17 23:00:14 +02:00
github@kiekerjan.isdronken.nl
c24ca5abd4
include changes from v0.53. Remove some POWER modifications to closer follow original mialinabox
2021-04-13 09:50:23 +02:00
github@kiekerjan.isdronken.nl
daf5a62e83
Merge changes from kiekerjan special
2021-04-11 20:45:24 +02:00
github@kiekerjan.isdronken.nl
12d0aee27a
Add own changes
2021-04-11 12:14:41 +02:00
David Duque
4829e687ff
Merge changes from master
2021-01-31 16:20:15 +00:00
David Duque
a67a57913d
Merge upstream v0.51
2020-11-15 18:30:19 +00:00
gumida
7ce41e3865
Changed mta-sts.txt end of line from LF to CRLF per RFC 8461 ( #1863 )
2020-11-15 07:54:34 -05:00
Felix Spöttel
7d6c7b6610
Increase mta-sts max_age to one week ( #1829 )
...
This aligns the policy with the example policy found in the spec
see https://tools.ietf.org/html/rfc8461#section-3.2
2020-10-02 21:27:21 -04:00
0pis
7f0f28f8e3
Use tabs instead of spaces in nginx conf ( #1827 )
...
* conf/nginx-primaryonly.conf: Use tabs instead of spaces
* management/web_update.py: Includes the tabs so they display with the correct indentation when added to the local.conf
Co-authored-by: 0pis <0pis>
2020-09-27 07:13:33 -04:00
David Duque
2bfa65329a
Keep root in actual local.conf file
2020-09-27 02:17:49 +01:00
David Duque
81c64f0a8f
Re-add webmail roundcube (to primaryonly)
2020-09-27 02:05:16 +01:00
David Duque
4b7f6e20da
Update nginx files to discard non-essential locations for non-primary domains
2020-09-27 02:01:17 +01:00
David Duque
7725e6efe6
Revert .nginx.conf file features
2020-09-27 01:31:51 +01:00
David Duque
7de99aa690
Merge v0.50 from upstream
2020-09-26 10:21:01 +01:00
Hilko
1098e2b48e
Add noindex to www_default meta tags ( #1791 )
2020-07-29 10:03:33 -04:00
David Duque
c8fbe2dd5d
Determine the PHP version at runtime (instead of at setup-time)
2020-07-15 15:28:02 +01:00
David Duque
ffc7e8d77e
Add comments explaining
2020-06-28 10:05:25 +01:00
David Duque
7f305ee02e
Add /.well-known/mta-sts.txt to all nginx dotfiles
2020-06-28 09:57:28 +01:00
David Duque
022a11e159
Merge remote-tracking branch 'up/master'
2020-06-21 15:52:31 +01:00
David Duque
5d6c23cff9
Finalize php configuration
2020-06-21 15:18:46 +01:00
A. Schippers
afc9f9686a
Publish MTA-STS policy for incoming mail ( #1731 )
...
Co-authored-by: Daniel Mabbett <triumph_2500@hotmail.com >
2020-05-29 15:30:07 -04:00
David Duque
de115fe01e
Merge remote-tracking branch 'up/master'
2020-05-11 19:42:54 +01:00