downtownallday
a6f69f297b
Merge remote-tracking branch 'chadfurman/master' into chads-quota
...
# Conflicts:
# management/daemon.py
# management/mailconfig.py
# management/templates/users.html
# setup/bootstrap.sh
# setup/mail-postfix.sh
# setup/mail-users.sh
# setup/migrate.py
2024-09-06 12:03:08 -04:00
Chad Furman
8a1e803f48
removing duplicate conf
2024-07-08 20:14:47 -04:00
Chad Furman
0cd8e4db62
fixing imap sed script
2024-05-04 22:22:47 -04:00
Chad Furman
51c483117d
fixing parens
2024-05-04 21:15:05 -04:00
Chad Furman
173501e8b0
fixing imap sed script
2024-05-04 21:02:09 -04:00
Chad Furman
1795f8aefd
bringing in quota changes
2024-04-27 18:41:35 -04:00
downtownallday
11e69f53a0
Merge remote-tracking branch 'upstream/main' into merge-upstream
...
# Conflicts:
# setup/firstuser.sh
# setup/functions.sh
# setup/mail-users.sh
# setup/management.sh
# setup/network-checks.sh
# setup/nextcloud.sh
# setup/questions.sh
# setup/ssl.sh
# setup/start.sh
# setup/system.sh
# setup/webmail.sh
# tools/archive_conf_files.sh
# tools/web_update
2024-04-03 12:45:10 -04:00
Teal Dulcet
55a8be4aa9
Removed unnecessary bc commands.
2024-04-03 09:22:50 -04:00
Teal Dulcet
bdf4155bed
Fixed SC2046: Quote to prevent word splitting.
2024-04-03 09:21:34 -04:00
Teal Dulcet
30c4681e80
Fixed SC2086: Double quote to prevent globbing and word splitting.
2024-04-03 09:20:20 -04:00
downtownallday
190d7195d3
Merge branch 'main' of https://github.com/mail-in-a-box/mailinabox
...
The roundcube password plugin is not disabled.
# Conflicts:
# management/utils.py
# setup/start.sh
# setup/system.sh
# setup/webmail.sh
# tools/editconf.py
2023-01-15 20:35:08 -05:00
Hugh Secker-Walker
57047d96e9
chore(setup): Update obsolete chown group syntax ( #2202 )
...
Co-authored-by: Hugh Secker-Walker <hsw+miac@hodain.net>
2023-01-15 08:25:36 -05:00
downtownallday
bf63ca827e
Add copyright to source files
2022-09-19 14:45:11 -04:00
downtownallday
45d5b7cb25
Merge branch 'jammyjellyfish2204' of https://github.com/mail-in-a-box/mailinabox into jammyjellyfish2204
...
# Conflicts:
# setup/webmail.sh
# tools/editconf.py
2022-09-17 19:54:52 -04:00
Steve Hay
84da4e6000
Update dovecot to use same DH parameters file as the other services
...
Originally from #2157 .
2022-09-17 09:07:54 -04:00
Joshua Tauberer
0a7b9d5089
Update dovecot, spampd settings for Ubuntu 22.04
...
* dovecot's ssl_protocols became ssl_min_protocol in 2.3
* spampd fixed a bug so we can remove lmtp_destination_recipient_limit=1 in postfix
2022-07-28 14:34:45 -04:00
downtownallday
4e6550ed22
Merge branch 'jammyjellyfish2204' of https://github.com/mail-in-a-box/mailinabox into jammyjellyfish2204
...
# Conflicts:
# README.md
# setup/mail-dovecot.sh
# setup/system.sh
# setup/webmail.sh
# setup/zpush.sh
# tests/test_mail.py
2022-01-11 16:39:39 -05:00
Joshua Tauberer
bcc89705ab
Update dovecot, spampd settings for Ubuntu 22.04
...
* dovecot's ssl_protocols became ssl_min_protocol in 2.3
* spampd fixed a bug so we can remove lmtp_destination_recipient_limit=1 in postfix
2022-01-09 11:42:31 -05:00
downtownallday
7144ed041e
Merge branch 'main' of https://github.com/mail-in-a-box/mailinabox
...
# Conflicts:
# README.md
# setup/start.sh
2021-05-08 09:20:04 -04:00
Thomas Urban
3701e05d92
Rewrite envelope from address in sieve forwards ( #1949 )
...
Fixes #1946 .
2021-05-08 08:30:53 -04:00
Joshua Tauberer
9b07d86bf7
Use $(...) notation instead of legacy backtick notation for embedded shell commands
...
shellcheck reported
SC2006: Use $(...) notation instead of legacy backticked `...`.
Fixed by applying shellcheck's diff output as a patch.
2021-05-03 19:28:23 -04:00
downtownallday
a24cf104e4
Merge branch 'master' of https://github.com/mail-in-a-box/mailinabox
2020-07-27 07:04:06 -04:00
Marcus Bointon
cd518e6820
Raise Dovecot per user connection limit ( #1799 )
2020-07-27 06:37:52 -04:00
downtownallday
1f0d2ddb92
Issue #1340 - LDAP backend for accounts
...
This commit will:
1. Change the user account database from sqlite to OpenLDAP
2. Add policyd-spf to postfix for SPF validation
3. Add a test runner with some automated test suites
Notes:
User account password hashes are preserved.
There is a new Roundcube contact list called "Directory" that lists the users in LDAP (MiaB users), similar to what Google Suite does.
Users can still change their password in Roundcube.
OpenLDAP is configured with TLS, but all remote access is blocked by firewall rules. Manual changes are required to open it for remote access (eg. "ufw allow proto tcp from <HOST> to any port ldaps").
The test runner is started by executing tests/runner.sh. Be aware that it will make changes to your system, including adding new users, domains, mailboxes, start/stop services, etc. It is highly unadvised to run it on a production system!
The LDAP schema that supports mail delivery with postfix and dovecot is located in conf/postfix.schema. This file is copied verbatim from the LdapAdmin project (GPL, ldapadmin.org). Instead of including the file in git, it could be referenced by URL and downloaded by the setup script if GPL is an issue or apply for a PEN from IANA.
Mangement console and other services should not appear or behave any differently than before.
2020-01-17 17:03:21 -05:00
Joshua Tauberer
f53b18ebb9
Upgrade TLS settings
2019-12-01 17:49:36 -05:00
jvolkenant
81176c8e4b
Fix to prevent multiple commented entries in dovecot conf ( #1642 )
2019-12-01 16:22:17 -05:00
jvolkenant
193763f8f0
Update to Nextcloud 15.0.8, Contacts to 3.1.1, and Calendar to 1.6.5 ( #1577 )
...
* Update to Nextcloud 15.0.7, Contacts to 3.1.1, and Calendar to 1.6.5
* Enabled localhost-only insecure IMAP login for localhost Nextcloud auth
* Add package php-imagick and BigInt conversion
* added support for /cloud/oc[sm]-provider/ endpoint
2019-06-16 11:10:52 -04:00
jvolkenant
4232a1205c
fix dovecot message about SSLv2 not supported by OpenSSL ( #1580 )
2019-05-15 11:46:52 -07:00
Christopher A. DeFlumeri
d96613b8fe
minimal changeset to get things working on 18.04
...
@joshdata squashed pull request #1398 , removed some comments, and added these notes:
* The old init.d script for the management daemon is replaced with a systemd service.
* A systemd service configuration is added to configure permissions for munin on startup.
* nginx SSL settings are updated because nginx's options and defaults have changed, and we now enable http2.
* Automatic SSHFP record generation is updated to know that 22 is the default SSH daemon port, since it is no longer explicit in sshd_config.
* The dovecot-lucene package is dropped because the Mail-in-a-Box PPA where we built the package has not been updated for Ubuntu 18.04.
* The stock postgrey package is installed instead of the one from our PPA (which we no longer support), which loses the automatic whitelisting of DNSWL.org-whitelisted senders.
* Drop memcached and the status check for memcached, which we used to use with ownCloud long ago but are no longer installing.
* Other minor changes.
2018-10-03 13:00:06 -04:00
Joshua Tauberer
e924459140
revert f25801e/#1233 - use Mozilla intermediate ciphers for IMAP/POP not modern ciphers
...
fixes #1300
2017-12-24 14:41:41 -05:00
sam-banks
88604074d6
Bugfix for free command ( #1278 )
...
A quick fix - there's no "o" option for free.
2017-12-18 08:21:28 -05:00
Joshua Tauberer
f25801e88d
Merge #1233 - Limit Dovecot ciphers to the Mozilla modern set
2017-10-03 11:55:16 -04:00
Lloyd Smart
81258e2189
Implement upstream issue #1228 for stronger dh parameters in Dovecot. ( #1232 )
2017-08-30 13:04:22 -04:00
Lloyd Smart
4dd4b4232a
Limited ciphers to the Mozilla modern set from https://mozilla.github.io/server-side-tls/ssl-config-generator/ as requested in issue #1228 .
2017-08-29 15:02:58 +01:00
Jan Schulz-Hofen
3830facf78
set dovecot vsz_limit to 1/3 of available memory ( #1096 )
...
The `default_vsz_limit` is the maximum amount of virtual memory that can be allocated. It should be set *reasonably high* to avoid allocation issues with larger mailboxes. We're setting it to 1/3 of the total available memory (physical mem + swap) to be sure.
See here for discussion:
- https://www.dovecot.org/list/dovecot/2012-August/137569.html
- https://www.dovecot.org/list/dovecot/2011-December/132455.html
2017-03-01 07:59:48 -05:00
Chris Blankenship
fac8477ba1
Configured Dovecot to log into its own logfile
2016-06-06 08:21:44 -04:00
Ralph J.Mayer
afd401c3d4
Allow remote client for Sieve
2015-12-31 18:22:31 +01:00
Scott Bronson
6336cc6452
tiny tweaks to make the bash slightly more readable
2015-12-22 12:33:26 -08:00
Michael Kroes
fd9287a0fd
Add Archive folder to comment in mail-dovecot.sh
2015-10-27 07:58:07 -04:00
Joshua Tauberer
274e5ca676
let dovecot automatically create mailbox folders rather than doing it manually in the management daemon, fixes #554
2015-10-18 11:55:27 +00:00
Michael Long
732a6922de
Allow global sieve scripts for before or after user sieve scripts. This allows defining custom system-wide sieve rules.
2015-08-24 19:55:34 -04:00
Joshua Tauberer
73fbcd7fa3
silence all of the installing/already installed package messages on installation
...
Querying dpkg for each package is slow, and we have way too much output on installation because of it.
2015-08-19 15:58:35 -04:00
Joshua Tauberer
b23ba6f75e
simplify build/setup of dovecot-lucene package
2015-06-03 15:48:35 -04:00
Joshua Tauberer
c38bdbb0c5
mistake in 31eec9fa1c
#300
2015-04-11 15:24:15 -04:00
Joshua Tauberer
d11be61d94
Add POP3S support (merge w/ adjustments)
...
* Add pop3s to the ufw firewall rules.
* Updated some comments.
* Updated CHANGELOG.
Merge branch 'master' of https://github.com/pichak/mailinabox
2015-04-09 08:19:20 -04:00
Morteza Milani
916063a79b
Better documentation for POP3 settings, UIDL.
...
UIDL assigns a unique string to each email. This allows emails to
be left on the server after a client downloads them.
2015-04-08 21:32:14 -07:00
Morteza Milani
31eec9fa1c
Add POP3s support
2015-01-25 23:37:01 -08:00
Joshua Tauberer
c75950125d
set dovecot default_process_limit and fs.inotify.max_user_instances to better defaults
...
See https://discourse.mailinabox.email/t/mailserver-limits/228 .
2015-01-02 23:25:52 +00:00
Joshua Tauberer
0b5bf602aa
various improvements in bash comments
2014-10-15 11:46:20 -04:00
Joshua Tauberer
06e074bd32
disable SSLv3 in dovecot now that it is known to be insecure (POODLE)
...
SSLv3 is already disabled in Postfix (45e93f7dcc
) and Nginx (51dd2ed70b
).
2014-10-15 15:39:05 +00:00