Felix Spöttel
f205c48564
Use pyotp for validating TOTP codes
...
* also implements resynchronisation support via `pyotp`'s `valid_window option
2020-09-02 19:12:15 +02:00
Felix Spöttel
a7a66929aa
add user interface for managing 2fa
...
* update user schema with 2fa columns
2020-09-02 16:48:23 +02:00
David Ferreira de Sousa Duque
a336931c95
Version release: v0.48.POWER.0
2020-08-26 23:13:41 +01:00
David Ferreira de Sousa Duque
d7d3561768
v0.48
...
Roundcube XSS vulnerability fixed.
-----BEGIN PGP SIGNATURE-----
iQFDBAABCgAtFiEEX0wOcxPM10RpOyrquSBB9MEL3YEFAl9GpkcPHGp0QG9jY2Ft
cy5pbmZvAAoJELkgQfTBC92BoYAH/2NjdfN2d6f45uPq/X32bBAc6wfI7Cs9yCKp
LOrAfPlmE0jRSm9ThATfZvaWci2r2IFhsFzQ9bWHpbIP5YD7mDD50I2uTnZa9BV4
MsI40VXoh0BAgkWRqK60rTw0lQ9YGT+1TNLDEs1Y7vBjfTCOh4MMn4jUXkIEHDQg
2pSHY1RUq7T0wRaHS+rTPDccotS/xCGg6uZJ+gSlvhRdxakAe9mo8139KD/4fjT8
HK6igpwHsn3POg7mmJoSYXtScmWRYfnSV9kyfYyVyjhu5/uIowdICwFOzX7G7ruM
yA/azBlyMs898e5jYFR1tQqQ1rVYVy/nqCQOiyJa34ngHGSi41U=
=a9fn
-----END PGP SIGNATURE-----
gpgsig -----BEGIN PGP SIGNATURE-----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=3X2X
-----END PGP SIGNATURE-----
Merge upstream v0.48
2020-08-26 23:09:14 +01:00
Joshua Tauberer
0d72566c99
Merge v0.48 point release branch
2020-08-26 14:11:56 -04:00
Joshua Tauberer
62db58eaaf
v0.48
2020-08-26 14:11:01 -04:00
Joshua Tauberer
891de8d6c3
Upgrade Roundcube to 1.4.8
...
Merges #1809
2020-08-26 14:10:04 -04:00
David Duque
24c5d54f49
start.sh: Generate locales properly
2020-08-10 03:07:45 +01:00
David Duque
0cf4ed9a24
Version bump
2020-07-30 15:43:48 +01:00
David Duque
1ba62c6112
v0.47
...
v0.47 (July 29, 2020)
---------------------
Security fixes:
* Roundcube is updated to version 1.4.7 fixing a cross-site scripting (XSS) vulnerability with HTML messages with malicious svg/na$
* SSH connections are now rate-limited at the firewall level (in addition to fail2ban).
-----BEGIN PGP SIGNATURE-----
iQFDBAABCgAtFiEEX0wOcxPM10RpOyrquSBB9MEL3YEFAl8hh4APHGp0QG9jY2Ft
cy5pbmZvAAoJELkgQfTBC92BD8EIAKuNEHxgL0C0kkpAhuTlVXuoNEH/2FF6hYS7
7NqVrqOO1iVPGkGPhAh77CLpnvvJEhu9GeSWFhTrpI//5CvfafUQowmELClmDcYL
yxHqgoHX9O0PAd+uCLgO3MdAzFMVLNbPmt/uPgEHufnrrQGIGieB2iGWnf9xnnpf
wFSyQQnLofFpq7nH6qQvLNvh//zPQd7l/YV3ieEuT0dV4izg/Sr7Q5W6Zwn/q/ed
Btp4CizRFRFTmulIEM8an+jSXMMvdVkut6WDcl6ct8LZLoWwtEkWVeru9IVu4n9L
Lj8Bkt+8aRR6updnI/2tm0d7ZgFXWHc/+dfLCaK+aOlMD3qV9p0=
=xsgn
-----END PGP SIGNATURE-----
gpgsig -----BEGIN PGP SIGNATURE-----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=CTVK
-----END PGP SIGNATURE-----
Merge upstream v0.47
2020-07-30 14:51:00 +01:00
Joshua Tauberer
65983b8ac7
Merge v0.47 point release branch
2020-07-29 10:27:06 -04:00
hija
56d0289ed9
v0.47
2020-07-29 10:24:56 -04:00
Marcus Bointon
f253c40012
[backport] Add rate limiting of SSH in the firewall ( #1770 )
...
See #1767 . Backport of cfc8fb484c
2020-07-29 10:24:23 -04:00
Hilko
2c34a6df2b
Update roundcube to 1.4.7
2020-07-29 10:15:12 -04:00
Marcus Bointon
cd518e6820
Raise Dovecot per user connection limit ( #1799 )
2020-07-27 06:37:52 -04:00
David Duque
dd7899acca
Version bump
2020-07-26 01:03:28 +01:00
David Duque
60911515fd
Support Ubuntu LTS point releases
2020-07-26 00:26:35 +01:00
David Duque
ac8c0ae762
Release v0.46.POWER.4
2020-07-22 12:45:18 +01:00
David Duque
c8fbe2dd5d
Determine the PHP version at runtime (instead of at setup-time)
2020-07-15 15:28:02 +01:00
David Duque
515a74ba11
Render the lsb_release at flask init time
...
Don't change the index.html file at setup time
2020-07-14 11:51:25 +01:00
David Duque
1d4d03637f
Version bump
2020-06-29 09:47:38 +01:00
David Duque
b98111b4e1
Fix unassigned php version
2020-06-29 09:13:50 +01:00
David Duque
3876cbac8a
Version bump
2020-06-28 10:06:50 +01:00
David Duque
fcb44dafa3
Let's encrypt certbot hotfix
2020-06-27 21:32:36 +01:00
David Duque
7af4ab0f4f
Version bump
2020-06-27 20:27:49 +01:00
David Duque
7864055490
Upgrade Nextcloud
2020-06-27 19:39:03 +01:00
David Duque
7b357fa71b
Version bump (v0.46 rc)
2020-06-21 22:49:14 +01:00
David Duque
9a4cf4d7af
Update dependencies
2020-06-21 16:02:17 +01:00
David Duque
022a11e159
Merge remote-tracking branch 'up/master'
2020-06-21 15:52:31 +01:00
David Duque
74554bcbf3
Version bump
2020-06-21 15:45:34 +01:00
David Duque
5d6c23cff9
Finalize php configuration
2020-06-21 15:18:46 +01:00
Joshua Tauberer
224242dfde
Merge v0.46 point release branch
2020-06-11 12:25:49 -04:00
Joshua Tauberer
049bfb6f7f
v0.46
2020-06-11 12:23:18 -04:00
Joshua Tauberer
12d60d102b
Update Roundcube to 1.4.6
...
Fixes #1776
2020-06-11 12:21:17 -04:00
Faye Duxovni
41642f2f59
[backport] Fix roundcube error log file path in setup script ( #1775 )
2020-06-11 12:16:53 -04:00
Faye Duxovni
339c330b4f
Fix roundcube error log file path in setup script ( #1775 )
2020-06-07 09:50:04 -04:00
Marcus Bointon
cfc8fb484c
Add rate limiting of SSH in the firewall ( #1770 )
...
See #1767 .
2020-06-07 09:47:51 -04:00
Joshua Tauberer
10bedad3a3
MTA-STS tweaks, add status check using postfix-mta-sts-resolver, change to enforce
2020-05-29 15:36:52 -04:00
A. Schippers
afc9f9686a
Publish MTA-STS policy for incoming mail ( #1731 )
...
Co-authored-by: Daniel Mabbett <triumph_2500@hotmail.com>
2020-05-29 15:30:07 -04:00
David Duque
211d3ff8a8
Fix os tag issues
2020-05-24 23:23:45 +01:00
David Duque
a51e968d31
Use pip3
2020-05-17 15:20:14 +01:00
David Duque
c95b91af5a
Force python3-pip
2020-05-17 15:14:43 +01:00
David Duque
117bdb7464
Update Nextcloud to the latest version
...
Nextcloud 17 doesn't support PHP 7.4 (and therefore Ubuntu 20.04 LTS)
2020-05-17 15:04:17 +01:00
David Duque
baa5d32dea
Make sure /etc/default/bind9 exists
2020-05-17 02:58:19 +01:00
David Duque
1513655bc4
Make sure that the OS in the admin panel matches the actual system OS
2020-05-17 02:45:35 +01:00
David Duque
959281c635
Version bump
2020-05-17 02:38:18 +01:00
David Duque
98b50ce333
Syntax function fix
2020-05-17 02:38:00 +01:00
David Duque
b66ade73c8
Begin support for Ubuntu LTS
2020-05-17 02:33:26 +01:00
Joshua Tauberer
7de8fc9bc0
v0.45
2020-05-16 06:45:23 -04:00
David Duque
de115fe01e
Merge remote-tracking branch 'up/master'
2020-05-11 19:42:54 +01:00
clonejo
8fe33da85d
Run nightly tasks on a random minute after 03:00 to avoid overload ( #1754 )
...
- The MIAB version check regularly fails at 03:00, presumably because a
large portion of installations is checking mailinabox.email at the same
time.
- At installation time, the time of the nightly clock is configured to
run at a random minute after 03:00, but before 04:00.
- Users might expect the nightly tasks to be over at a certain time and
run their own custom tasks afterwards. This could thus interfere with
custom backup routines.
- This breaks reproducibility of the installation process.
- Users might also be surprised by the nightly task time changing after
updating MIAB.
2020-05-10 19:54:45 -04:00
Joshua Tauberer
1353949e42
Upgrade Roundcube to 1.4.4, Nextcloud to 17.0.6, Z-Push to 2.5.2
2020-05-10 19:44:12 -04:00
David Duque
8ca34e18bd
Properly configure nsd, bump version
2020-04-22 16:25:12 +01:00
David Duque
3589ac2c06
Don't interfere with locales right away, bump version
2020-04-22 16:14:20 +01:00
David Duque
2d228c0520
Remove PPA installation process
2020-04-21 14:59:54 +01:00
David Duque
8ba078c04b
Attempt to fix some stuff and bump version
2020-04-21 14:48:16 +01:00
David Duque
8aa1ea23c8
Use describe --tags when comparing versions
2020-04-21 14:26:51 +01:00
David Duque
d98825f609
Update pre-flights, bump version
2020-04-20 23:31:18 +01:00
David Duque
ecb575e686
git describe --tags
2020-04-18 15:17:13 +01:00
David Duque
a8be38fcc0
Refer to Debian instead of Ubuntu
2020-04-18 14:43:24 +01:00
David Duque
52e9afcf2f
Just use the script directly
2020-04-17 22:59:25 +01:00
David Duque
9b6781685a
Move settings away from mailinabox.conf
2020-04-16 22:52:48 +01:00
David Duque
d9397a026b
SMTP Relay initialization
2020-04-16 20:19:14 +01:00
David Duque
7ffc889c08
Bump web dependencies ( #1 )
...
- Bootstrap: 3.3.7 -> 4.4.1
- - New admin panel style and respective corrections applied.
- JQuery: 2.1.4 -> 3.5.0
2020-04-16 19:52:01 +01:00
David Duque
edb03b7862
Misc changes
2020-04-12 23:54:35 +01:00
David Duque
8667a574d4
Use local PHP version (ZPush)
2020-04-12 01:04:55 +01:00
David Duque
5f1343864c
Use local PHP version
2020-04-12 01:02:14 +01:00
David Duque
6cee029d15
Move php version to functions.sh
2020-04-12 00:56:55 +01:00
David Duque
5c93d698b4
Update PHP version (7.2 -> 7.3)
2020-04-12 00:50:31 +01:00
David Duque
0568bcc5d3
Early configuration of the nsd service
2020-04-12 00:44:19 +01:00
David Duque
435b01dda4
Merge remote-tracking branch 'up/master'
2020-04-11 19:32:10 +01:00
David Duque
9fb02090bf
Remove operations not applicable to Debian
...
Signed-off-by: David Duque <david.f.s.duque@tecnico.ulisboa.pt>
2020-04-11 19:24:20 +01:00
Stefan
f52749b403
Better return codes after errors in the setup scripts ( #1741 )
2020-04-11 14:18:44 -04:00
David Duque
fcff1f5d2c
Change environment to Debian 10
2020-04-11 19:12:40 +01:00
Daniel Davis
e224fc6656
Delete unused function apt_add_repository_to_unattended_upgrades ( #1721 )
...
The function apt_add_repository_to_unattended_upgrades is defined
but never called anywhere. It appears that automatic apt updates
are handled in system.sh where the file /etc/apt/apt.conf.d/02periodic
is created. The last call was removed in bbfa01f33a
2020-03-08 09:49:39 -04:00
Joshua Tauberer
30c2c60f59
v0.44
2020-02-15 07:15:09 -05:00
Joshua Tauberer
ddadb6c28a
Roundcube 1.4.2
2020-01-22 03:25:53 -05:00
Michael Kroes
faee29ba8b
Bump Nextcloud to 17.0.2 ( #1702 )
2020-01-22 03:06:17 -05:00
jvolkenant
e6294049bc
Update Roundcube persistent_login plugin ( #1712 )
2020-01-22 02:58:04 -05:00
Joshua Tauberer
30885bcc8a
Downgrade TLS settings for port 25, partially reverting f53b18ebb9
...
Port 25 now is aligned with Mozilla's "Old" recommendations at https://ssl-config.mozilla.org/#server=postfix&server-version=3.3.0&config=old&openssl-version=1.1.1 .
See #1705
2020-01-20 14:52:23 -05:00
Joshua Tauberer
385340da46
install openssh-client which provides ssh-keygen and is not present on desktop Ubuntu by default
2019-12-12 11:27:39 -05:00
jvolkenant
0271e549bb
Fix typo in InstallNextcloud calls ( #1693 )
2019-12-10 19:01:09 -05:00
Joshua Tauberer
f53b18ebb9
Upgrade TLS settings
2019-12-01 17:49:36 -05:00
Joshua Tauberer
8567a9b719
Fix upgrade issue broken by 802e7a1f4d
2019-12-01 17:44:12 -05:00
Vasek Sraier
ad9d732608
OpenDKIM canonicalization changed to relaxed for mail headers ( #1620 )
...
Because Mailman reformats headers it breaks DKIM signatures. SPF also does
not apply in mailing lists. This together causes DMARC to fail and mark the
email as invalid. This fixes DKIM signatures for Mailman-based mailing lists
and makes sure DMARC test is passed.
2019-12-01 16:24:38 -05:00
jvolkenant
aa15670dc2
Fixed multiple commented add_header entries in /etc/spamassassin/local.cf ( #1641 )
2019-12-01 16:23:02 -05:00
jvolkenant
81176c8e4b
Fix to prevent multiple commented entries in dovecot conf ( #1642 )
2019-12-01 16:22:17 -05:00
Carl Reinke
960b5d5bbd
Don't use ifquery to check interface state since it is no longer installed ( #1689 )
2019-12-01 16:21:38 -05:00
Carl Reinke
802e7a1f4d
Copy systemd service files before linking to avoid issue with order of mounting filesystems ( #1688 )
2019-12-01 16:15:04 -05:00
Michael Kroes
52c68c6510
Implement Nextcloud php-fpm recommended performance tuning settings ( #1679 )
2019-12-01 16:13:33 -05:00
Michael Kroes
54b1ee9a3d
Nextcloud 17 ( #1676 )
2019-12-01 16:11:00 -05:00
Francesco Montanari
6e3dee8b3b
Upgrade RoundCube to 1.4.1 and set the default skin to elastic ( #1673 )
...
* Upgrade RoundCube to 1.4.0 and set the default skin to elastic
* Install php-ldap extension
* Remove smtp parameters that are now the default
2019-12-01 16:10:04 -05:00
Michael Kroes
91638c7fe0
Removed the postgrey option that specifies which whitelist file to use. This allows the usage of a .local verion ( #1675 )
2019-11-23 07:58:29 -05:00
Michael Kroes
ff8170d5ab
Align nextcloud cron job with recommended settings ( #1680 )
2019-11-23 07:51:22 -05:00
jvolkenant
df80b9fc71
Allow user_external for Nextcloud 16 (and eventually 17) ( #1655 )
2019-11-02 15:28:36 -04:00
jvolkenant
ed02e2106b
Update zpush to 2.5.1 ( #1654 )
2019-10-28 06:27:54 -04:00
Jeff Volkenant
24a567c3be
Fix mailinabox-postgrey-whitelist cron job return code for file over 28 days
...
Merges #1639
2019-10-05 16:27:21 -04:00
Brendan Hide
70f05e9d52
Ensure the universe repository is enabled
...
A minimal Ubuntu server installation might not have universe enabled by
default. By adding it, we ensure we can install packages only available
in universe, such as python3-pip
Merges #1650 .
2019-10-05 16:14:12 -04:00
Michael Kroes
889118aeb6
Upgraded Nextcloud to 16.0.5 ( #1648 )
...
* Upgraded Nextcloud to 16.0.5
* Improved Nextcloud upgrade detection
2019-10-05 16:12:00 -04:00
Joshua Tauberer
9e29564f48
v0.43
2019-09-01 07:43:47 -04:00
jvolkenant
d6becddbe5
Change Nextcloud upgrade logic to look at STORAGE_ROOT's config.php version vs /usr/local's version.php version ( #1632 )
...
* Download and verify Nextcloud download before deleting old install directory
* Changed install logic to look at config.php and not version.php for database version number. When restoring from a backup, config.php in STORAGE_ROOT will hold the Nextcloud version that corresponds to the user's database and version.php in /usr/local won't even exist, so we were missing Nextcloud migration steps. In other cases they should be the same.
2019-08-31 08:50:36 -04:00
Michael Kroes
1d6793d124
Update the Postgrey whitelist to a newer version monthly ( #1611 )
...
Automatically update the Postgrey whitelist to a newer version once a month.
2019-08-31 08:38:41 -04:00
cmharper
295d481603
Upgraded roundcube to 1.3.10 ( #1634 )
2019-08-31 07:55:38 -04:00
Joshua Tauberer
e37768ca86
v0.42b
2019-08-03 11:49:32 -04:00
jvolkenant
bea5eb0dda
Add interm upgrade step from Nextcloud 13 -> 14 ( #1605 )
2019-07-12 06:41:16 -04:00
Joshua Tauberer
5fc1944f04
pull v0.42, go back to v0.41
2019-07-05 11:56:54 -04:00
Joshua Tauberer
39fd4ce16c
v0.42
2019-07-04 21:34:55 -04:00
jvolkenant
193763f8f0
Update to Nextcloud 15.0.8, Contacts to 3.1.1, and Calendar to 1.6.5 ( #1577 )
...
* Update to Nextcloud 15.0.7, Contacts to 3.1.1, and Calendar to 1.6.5
* Enabled localhost-only insecure IMAP login for localhost Nextcloud auth
* Add package php-imagick and BigInt conversion
* added support for /cloud/oc[sm]-provider/ endpoint
2019-06-16 11:10:52 -04:00
jvolkenant
79759ea5a3
Upgrade Z-Push to 2.5.0 ( #1581 )
2019-06-16 11:07:45 -04:00
jvolkenant
6e5ceab0f8
hide virtualenv output ( #1578 )
2019-05-15 11:59:32 -07:00
jvolkenant
c6fa0d23df
check that munin-cron is not running (via cron) when it is run in setup, fixes #660 ( #1579 )
2019-05-15 11:58:40 -07:00
cmharper
85e59245fd
hide 'RTNETLINK answers: Network is unreachable' error message during setup if IPv6 is not available ( #1576 )
2019-05-15 11:57:06 -07:00
jvolkenant
4232a1205c
fix dovecot message about SSLv2 not supported by OpenSSL ( #1580 )
2019-05-15 11:46:52 -07:00
just4t
25fec63a03
RAM limit to 502Mb to meet EC2 & Vultr 512Mb inst. ( #1560 )
...
AS told here: https://github.com/mail-in-a-box/mailinabox/pull/1534
2019-04-14 16:33:50 -04:00
dexbleeker
9b46637aff
Update Roundcube to version 1.3.9 ( #1546 )
2019-04-14 14:19:21 -04:00
Joshua Tauberer
dd7a2aa8a6
v0.41
2019-02-26 18:17:50 -05:00
Joshua Tauberer
149552f79b
systemctl link should use -f to avoid an error if a system service already exists with that name but points to a different file
...
https://discourse.mailinabox.email/t/new-error-failed-systemctl-link-conf-mailinabox-service/4626/2
2019-02-26 18:16:26 -05:00
Joshua Tauberer
adddd95e38
add lmtp_destination_recipient_limit=1 to work around spampd bug, see #1523
2019-02-25 13:20:57 -05:00
Yoann Colin
10050aa601
Upgrade to NextCloud 14 ( #1504 )
...
* Upgraded Nextcloud from 13.0.6 to 14.0.6.
* Upgraded Contacts from 2.1.5 to 2.1.8.
* Upgraded Calendar from 1.6.1 to 1.6.4.
* Cleanup unsupported version upgrades: Since an upgrade to v0.30 is mandatory before moving upward, I removed the checks for Nextcloud prior version 12.
* Fix the storage root path.
* Add missing indices. Thx @yodax for your feedback.
2019-02-08 21:24:03 -05:00
jvolkenant
c60e3dc842
fail2ban ssh/ssh-ddos and sasl are now sshd and postfix-sasl ( fixes #1453 , merges #1454 )
...
* fail2ban ssh/ssh-ddos and sasl are now sshd and postfix-sasl
* specified custom datepattern for miab-owncloud.conf
2019-01-18 09:40:51 -05:00
Joshua Tauberer
c7659d9053
v0.40
2019-01-12 08:24:15 -05:00
Joshua Tauberer
cd3fb1b487
fix bootstrap.sh to not confuse the status checks about the latest version
2019-01-09 09:03:43 -05:00
Joshua Tauberer
6e60b47cb5
update bootstrap.sh script to detect the operating system and choose a different version tag depending on whether the box is running Ubuntu 14.04 or Ubuntu 18.04
2019-01-09 08:52:51 -05:00
Joshua Tauberer
a3add03706
Merge branch 'master' into ubuntu_bionic
2019-01-09 07:00:44 -05:00
Joshua Tauberer
7b592b1e99
v0.30 - the last Ubuntu 14.04 release
2019-01-09 06:31:56 -05:00
Dean Perry
31b743b164
Fix some more $DEFAULT_PUBLIC_IP issues ( #1494 )
2018-12-26 15:39:47 -05:00
jvolkenant
71f1c92b9e
bash strict mode fixes ( #1482 )
2018-12-13 20:30:05 -05:00
EliterScripts
e80a1dd4b7
fix DEFAULT_PUBLIC_IP unbound variable error ( #1488 )
...
This will fix this error while installing:
setup/questions.sh: line 95: DEFAULT_PUBLIC_IP: unbound variable
2018-12-13 20:28:21 -05:00
jvolkenant
b7e9a90005
roundcube: upgrade carddav plugin to 3.0.3 & updated migrate.py ( #1479 )
...
* roundcube: upgrade carddav plugin to 3.0.3 & updated migrate.py
* Check for db first and clear sessions to force re-login
2018-12-03 15:33:36 -05:00
Joshua Tauberer
0d4565e71d
merge master branch
2018-12-02 18:19:15 -05:00
Joshua Tauberer
703a9376ef
fix /etc /usr permissions for Scaleway, see #1438
2018-12-02 18:16:40 -05:00
Joshua Tauberer
bd54b41041
add missing rsyslog to apt install line
...
see #1438
2018-12-02 18:02:00 -05:00
Achilleas Pipinellis
a7dded8182
Add a logfile entry to the NSD conf file ( #1434 )
...
Having a log file can help debugging when something goes wrong and
NSD doesn't fail or MiaB doesn't notify you.
See
https://discourse.mailinabox.email/t/dns-email-domain-becomes-inaccessible-every-few-hours/3770
2018-12-02 18:00:16 -05:00
Joshua Tauberer
9ddca42c91
add 'nameserver' to resolv.conf, fixes #1450
2018-11-30 10:46:54 -05:00
Joshua Tauberer
e5e0c64395
turn on bash strict mode to better catch setup errors
...
fixes #893
2018-11-30 10:46:54 -05:00
Joshua Tauberer
aa52f52d02
disable SMTP AUTH on port 25 to stop it accidentally being used for submission
...
fixes #830
2018-11-30 10:46:54 -05:00
Holger Just
0335595e7e
Update Roundcube to version 1.3.8 ( #1475 )
...
https://github.com/roundcube/roundcubemail/releases/tag/1.3.8
2018-11-25 10:40:21 -05:00
jvolkenant
c9b3d88108
Fixes #1437 - package python-virtualenv is now called just virtualenv ( #1452 )
2018-10-24 17:20:48 -04:00
Joshua Tauberer
16f38042ec
v0.29 released, closes #1440
2018-10-24 16:12:25 -04:00
Michael Kroes
6eb9055275
Upgrade NextCloud to 13.06 ( #1436 )
2018-10-09 07:09:54 -04:00
Joshua Tauberer
3dbd6c994a
update bind9 configuration
2018-10-03 14:28:43 -04:00
Joshua Tauberer
bbfa01f33a
update to PHP 7.2
...
* drop the ondrej/php PPA since PHP 7.x is available directly from Ubuntu 18.04
* intall PHP 7.2 which is just the "php" package in Ubuntu 18.04
* some package names changed, some unnecessary packages are no longer provided
* update paths
2018-10-03 13:00:15 -04:00
Joshua Tauberer
f6a641ad23
remove some cleanup steps that are no longer needed since we aren't supporting upgrades of existing machines and, even if we did, we aren't supporting upgrades from really old versions of Mail-in-a-Box
2018-10-03 13:00:15 -04:00
Joshua Tauberer
51972fd129
fix some comments
2018-10-03 13:00:15 -04:00
Joshua Tauberer
bb43a2127c
turn the x64/i686 architecture check into a warning since I'm not sure if we have any architecture requirements anymore, beyond what Ubuntu supports
2018-10-03 13:00:15 -04:00
Christopher A. DeFlumeri
d96613b8fe
minimal changeset to get things working on 18.04
...
@joshdata squashed pull request #1398 , removed some comments, and added these notes:
* The old init.d script for the management daemon is replaced with a systemd service.
* A systemd service configuration is added to configure permissions for munin on startup.
* nginx SSL settings are updated because nginx's options and defaults have changed, and we now enable http2.
* Automatic SSHFP record generation is updated to know that 22 is the default SSH daemon port, since it is no longer explicit in sshd_config.
* The dovecot-lucene package is dropped because the Mail-in-a-Box PPA where we built the package has not been updated for Ubuntu 18.04.
* The stock postgrey package is installed instead of the one from our PPA (which we no longer support), which loses the automatic whitelisting of DNSWL.org-whitelisted senders.
* Drop memcached and the status check for memcached, which we used to use with ownCloud long ago but are no longer installing.
* Other minor changes.
2018-10-03 13:00:06 -04:00
Joshua Tauberer
504a9b0abc
certbot uses a new directory path for API v02 accounts and we should check that before creating a new account or else we'll try to create a new account on each setup run (which certbot just fails on)
2018-09-03 13:07:24 -04:00
Joshua Tauberer
842fbb3d72
auto-agree to Let's Encrypt's terms of service during setup
...
fixes #1409
This reverts commit 82844ca651#1399 )") and instead *always* auto-agree. If we don't auto-agree, certbot asks the user interactively, but our "curl | bash" setup line does not permit interactive prompts, so certbot failed to register and all certificate things were broken until the command was re-run interactively.
2018-09-03 13:06:34 -04:00
Joshua Tauberer
a5d5a073c7
update Z-Push to 2.4.4
...
Starting with 2.4, Z-Push no longer provides tarballs on their download server. The only options are getting the code from their git repository or using one of their distribution packages. Their Ubuntu 18.04 packaes don't seem to actually work in Ubuntu 18.04, so thinking ahead that's currently a bad choice. In 78d1c9be6e
2018-09-02 11:29:44 -04:00
Joshua Tauberer
d4b122ee94
update to Nextcloud 13.0.5
2018-08-24 11:11:52 -04:00
