downtownallday
d60e2182e3
Merge remote-tracking branch 'upstream/main' into sync-upstream
...
# Conflicts:
# setup/webmail.sh
2025-02-15 18:51:34 -05:00
Tomasz Stanczak
41cbf0ba8e
Handle no existence of expired certificates before trying to move them into ssl.expired subdirectory ( #2480 )
...
Shell option 'nullglob' to prevent the following 'for' loop from being entered even when no matching files are present.
2025-02-15 14:31:58 -05:00
downtownallday
c5e33b51e5
Update license
2025-01-04 15:08:53 -05:00
downtownallday
4c2e4bab29
fix error when glob matches nothing (variable 'file' will have the glob as a value in the for loop and produce the error "mv: cannot stat '/home/user-data/ssl/*-+([0-9])-+([0-9a-f]).pem': No such file or directory")
2024-12-22 10:26:09 -05:00
downtownallday
0aa7050221
Merge remote-tracking branch 'upstream/main' into merge-upstream
...
# Conflicts:
# management/status_checks.py
# setup/webmail.sh
2024-12-22 10:22:53 -05:00
yeah
18721e42d1
Cronjob for cleaning up expired SSL certificates in order to improve page load times with many domains ( #2410 )
...
Fixes #2316 .
2024-12-22 08:07:04 -05:00
downtownallday
11e69f53a0
Merge remote-tracking branch 'upstream/main' into merge-upstream
...
# Conflicts:
# setup/firstuser.sh
# setup/functions.sh
# setup/mail-users.sh
# setup/management.sh
# setup/network-checks.sh
# setup/nextcloud.sh
# setup/questions.sh
# setup/ssl.sh
# setup/start.sh
# setup/system.sh
# setup/webmail.sh
# tools/archive_conf_files.sh
# tools/web_update
2024-04-03 12:45:10 -04:00
Teal Dulcet
ec497efa69
Quote echo commands to preserve whitespace.
2024-04-03 09:22:50 -04:00
Teal Dulcet
f1888f2043
Fixed SC2148: Add a shebang.
2024-04-03 09:21:34 -04:00
Teal Dulcet
30c4681e80
Fixed SC2086: Double quote to prevent globbing and word splitting.
2024-04-03 09:20:20 -04:00
Teal Dulcet
133bae1300
Fixed SC2006: Use $(...) notation instead of legacy backticks ....
2024-04-03 05:17:25 -07:00
downtownallday
6ade958e2d
Merge remote-tracking branch 'upstream/main' into merge-upstream
2024-03-23 17:50:34 -04:00
Joshua Tauberer
fa72e015ee
Update SMTP Smuggling protection to the 'long-term fix'
...
* Revert "Guard against SMTP smuggling", commit faf23f150c , by restoring the setting to its default.
* Revert "[security] SMTP smuggling: update short term fix (#2346 )", commmit e931e103fe , by restoring the setting to its default.
* Set smtpd_forbid_bare_newline=normalize.
2024-03-23 13:15:32 -04:00
downtownallday
d349150dd0
Merge remote-tracking branch 'upstream/main' into merge-upstream
...
# Conflicts:
# .gitignore
# management/auth.py
# management/daemon.py
# management/mail_log.py
# management/mailconfig.py
# management/mfa.py
# management/ssl_certificates.py
# management/status_checks.py
# management/utils.py
# management/web_update.py
# setup/mail-postfix.sh
# setup/migrate.py
# setup/preflight.sh
# setup/webmail.sh
# tests/test_mail.py
# tools/editconf.py
2024-03-12 07:41:14 -04:00
Teal Dulcet
dbc2b5eee0
Fixed ISC003 (explicit-string-concatenation): Explicitly concatenated string should be implicitly concatenated
2024-03-10 07:56:49 -04:00
Teal Dulcet
0e9193651d
Fixed PLW1514 (unspecified-encoding): open in text mode without explicit encoding argument
2024-03-10 07:56:49 -04:00
Teal Dulcet
c585c1ecf6
Fixed W291 (trailing-whitespace): Trailing whitespace
2024-03-10 07:56:49 -04:00
Teal Dulcet
3d72c32b1d
Fixed W605 (invalid-escape-sequence)
2024-03-10 07:54:51 -04:00
Teal Dulcet
6bfd1e5140
Fixed W293 (blank-line-with-whitespace): Blank line contains whitespace
2024-03-10 07:54:51 -04:00
Teal Dulcet
49124cc9ca
Fixed PLR6201 (literal-membership): Use a set literal when testing for membership
2024-03-10 07:54:51 -04:00
Teal Dulcet
cb922ec286
Fixed UP015 (redundant-open-modes): Unnecessary open mode parameters
2024-03-10 07:54:49 -04:00
downtownallday
da2d88e4f4
Fix invalid escape sequences
2024-03-05 08:56:39 -05:00
downtownallday
190d7195d3
Merge branch 'main' of https://github.com/mail-in-a-box/mailinabox
...
The roundcube password plugin is not disabled.
# Conflicts:
# management/utils.py
# setup/start.sh
# setup/system.sh
# setup/webmail.sh
# tools/editconf.py
2023-01-15 20:35:08 -05:00
Hugh Secker-Walker and Hugh Secker-Walker
820a39b865
chore(python open): Refactor open and gzip.open to use context manager ( #2203 )
...
Co-authored-by: Hugh Secker-Walker <hsw+miac@hodain.net >
2023-01-15 08:28:43 -05:00
Hugh Secker-Walker and Hugh Secker-Walker
57047d96e9
chore(setup): Update obsolete chown group syntax ( #2202 )
...
Co-authored-by: Hugh Secker-Walker <hsw+miac@hodain.net >
2023-01-15 08:25:36 -05:00
downtownallday
2ac391796e
setup: add a setup mod to attach a logwatch report to daily status checks emails
2022-11-06 07:02:33 -05:00
downtownallday
53cbabac75
Fix url redirection when a remote nextcloud is used so that .well-known/caldav and carddav work properly, as well as the redirecting /cloud to the remote Nextcloud. Since the nginx config is replaced by the management daemon whenever a new domain is added, this change adds a hooking mechanism for setup mods.Fix url redirection when a remote nextcloud is in use. This corrects redirection for /.well-known/caldav, /.well-known/carddav and /cloud to send the client to the remote nextcloud. This requires an nginx configuration change, and since the nginx config is replaced by the management daemon whenever a new domain is added, this change adds a hooking mechanism for setup mods allowing them to intercept and modify the resultant nginx config.
2022-09-21 15:52:47 -04:00
downtownallday
bf63ca827e
Add copyright to source files
2022-09-19 14:45:11 -04:00
downtownallday
30631b0fc5
Fix undefined variable 'val' in tools/editconf.py ( #2137 )
...
Merges #2137 .
2022-09-17 09:09:00 -04:00
Joshua Tauberer
0a7b9d5089
Update dovecot, spampd settings for Ubuntu 22.04
...
* dovecot's ssl_protocols became ssl_min_protocol in 2.3
* spampd fixed a bug so we can remove lmtp_destination_recipient_limit=1 in postfix
2022-07-28 14:34:45 -04:00
Joshua Tauberer
78d71498fa
Upgrade from PHP 7.2 to 8.0 for Ubuntu 22.04
...
* Add the PHP PPA.
* Specify the version when invoking the php CLI.
* Specify the version in package names.
* Update paths to 8.0 (using a variable in the setup scripts).
* Update z-push's php-xsl dependency to php8.0-xml.
* php-json is now built-into PHP.
Although PHP 8.1 is the stock version in Ubuntu 22.04, it's not supported by Nextcloud yet, and it likely will never be supported by the the version of Nextcloud that succeeds the last version of Nextcloud that supports PHP 7.2, and we have to install the next version so that an upgrade is permitted, so skipping to PHP 8.1 may not be easily possible.
2022-07-28 14:02:46 -04:00
downtownallday
27dcb5d7ca
Enable fail2ban for z-push and add a test for it
2022-07-18 15:52:04 -04:00
downtownallday
fd44210ee7
Fix undefined variable 'val'
2022-06-25 12:35:03 -04:00
downtownallday
c135bf1f77
Merge branch 'jammyjellyfish2204' of https://github.com/mail-in-a-box/mailinabox into jammyjellyfish2204
...
# Conflicts:
# CHANGELOG.md
# README.md
# conf/nginx-top.conf
# management/backup.py
# setup/bootstrap.sh
# setup/management.sh
# setup/nextcloud.sh
# setup/system.sh
# setup/web.sh
# setup/webmail.sh
# setup/zpush.sh
# tests/test_mail.py
2022-06-21 23:58:17 -04:00
Joshua Tauberer
3599bbbf2e
Update dovecot, spampd settings for Ubuntu 22.04
...
* dovecot's ssl_protocols became ssl_min_protocol in 2.3
* spampd fixed a bug so we can remove lmtp_destination_recipient_limit=1 in postfix
2022-06-19 07:31:07 -04:00
Joshua Tauberer
0159347673
Upgrade from PHP 7.2 to 8.0 for Ubuntu 22.04
...
* Add the PHP PPA.
* Specify the version when invoking the php CLI.
* Specify the version in package names.
* Update paths to 8.0 (using a variable in the setup scripts).
* Update z-push's php-xsl dependency to php8.0-xml.
* php-json is now built-into PHP.
Although PHP 8.1 is the stock version in Ubuntu 22.04, it's not supported by Nextcloud yet, and it likely will never be supported by the the version of Nextcloud that succeeds the last version of Nextcloud that supports PHP 7.2, and we have to install the next version so that an upgrade is permitted, so skipping to PHP 8.1 may not be easily possible.
2022-06-19 07:31:05 -04:00
downtownallday
fe2079ee8f
Add setup mods for testing the latest version of roundcube
2022-02-25 19:32:29 -05:00
Joshua Tauberer
bcc89705ab
Update dovecot, spampd settings for Ubuntu 22.04
...
* dovecot's ssl_protocols became ssl_min_protocol in 2.3
* spampd fixed a bug so we can remove lmtp_destination_recipient_limit=1 in postfix
2022-01-09 11:42:31 -05:00
Daniel Mabbett
ae20878431
Upgrade from PHP 7.2 to 8.0 for Ubuntu 22.04
...
(Updated by @JoshData from the original commit which was for Ubuntu 20.04 using PHP 7.4. And although 8.1 seems to be available, it's not supported by Nextcloud yet, and it likely will never be supported by the the version of Nextcloud that succeeds the last version of Nextcloud that supports PHP 7.2, and we have to install the next version so that an upgrade is permitted, so skipping to PHP 8.1 may not be easily possible.)
2022-01-08 20:07:32 -05:00
Joshua Tauberer
545e7a52e4
Add MFA list/disable to the management CLI so admins can restore access if MFA device is lost
2020-10-31 10:23:43 -04:00
Joshua Tauberer
ac9ecc3bd3
Rename tools/mail.py to management/cli.py
2020-10-29 15:41:54 -04:00
David Duque
967409b157
Drop requirement for passwords to have no spaces ( #1789 )
2020-07-16 07:23:11 -04:00
Marcus Bointon
cfc8fb484c
Add rate limiting of SSH in the firewall ( #1770 )
...
See #1767 .
2020-06-07 09:47:51 -04:00
Stefan
f52749b403
Better return codes after errors in the setup scripts ( #1741 )
2020-04-11 14:18:44 -04:00
Joshua Tauberer
bbfa01f33a
update to PHP 7.2
...
* drop the ondrej/php PPA since PHP 7.x is available directly from Ubuntu 18.04
* intall PHP 7.2 which is just the "php" package in Ubuntu 18.04
* some package names changed, some unnecessary packages are no longer provided
* update paths
2018-10-03 13:00:15 -04:00
Pascal Garber
e0d46d1eb5
Use Nextcloud’s occ command to unlock the admin ( #1406 )
2018-07-25 15:37:09 -04:00
Joshua Tauberer
5eb4a53de1
remove old tools/update-subresource-integrity.py script which isn't used now that we download all admin page remote assets during setup
2018-02-24 09:24:14 -05:00
yodax
d773140502
Update to Nextcloud 12 using PHP7
...
* Install PHP7 via a PPA, enable unattended upgrades for the PPA, and switch all of our PHP configuration to the PHP7 install.
* Keep installing PHP5 for ownCloud/Nextcloud packages because we need it to possibly run transitional updates to ownCloud/Nextcloud versions less than 12. But replace PHP5 packages with PHP7 packages elsewhere.
* Update to Nextcloud 12 which requires PHP7, with a transitional upgrade to Nextcloud 11.0.3.
* Disable TLS cert validation by Roundcube when connecting to localhost IMAP and SMTP. Validation became the default in PHP7 but we don't necessarily have a (non-self-)signed certificate and it definitely isn't valid for the IP address 127.0.0.1.
Merges #1140
2017-07-14 06:48:22 -04:00
Jan Schulz-Hofen
48e0f39179
Rename ownCloud to Nextcloud in safe places
...
e.g. code comments and user-facing prompts/outputs which can be safely changed without risking to break anything
2017-04-02 11:19:21 +02:00
Dominik Murzynowski
36bef2ee16
Change password min-length to 8 characters ( #1098 )
2017-02-14 14:24:59 -05:00