2af557139d
default IPv6 AAAA records were missing
...
This was broken by the ability to have multiple TXT records in 9f1d633ae4
2015-06-17 06:47:22 -04:00
9e0dcd8718
security.md: add a section on DNSSEC specifically
2015-06-15 10:24:16 -04:00
be2b5a62de
ownCloud updated to version 8.0.4
2015-06-14 16:04:07 +00:00
0cbba71c72
merge #429 - Move OwnCloud's config to Storage Root
2015-06-14 15:48:09 +00:00
d28563fb45
tweak the ownCloud config location migration (no need for third ln)
2015-06-14 15:42:32 +00:00
38632f0f90
Move OwnCloud's config to Storage Root
2015-06-12 14:53:02 +02:00
0754ce01b1
questions.sh needs to apt-get update before it does an apt-get install, see #431 , see #438
2015-06-10 09:43:22 -04:00
1ef455d37d
bootstrap.sh needs to apt-get update before it does an apt-get install, fixes #431
2015-06-10 09:33:47 -04:00
d152603abd
changelog entries and mention our forks of postgrey and dovecot in the README
2015-06-10 09:27:29 -04:00
9e125aec00
Merge pull request #436 from bizonix/patch-1
...
fix loop redirecting
2015-06-07 16:30:58 -04:00
2c90c267bd
fix loop redirecting
...
server is redirecting the request for this address in a way that will never complete
2015-06-07 21:50:41 +03:00
47de93961e
OCSP improvements
...
* Set ssl_stapling_verify to off per https://sslmate.com/blog/post/ocsp_stapling_in_apache_and_nginx ('on' has no security benefits).
* Set resolver to 127.0.0.1, instead of Google Public DNS, because we might as well use our local nameserver anyway.
* Remove the commented line which per the link above would never be necessary anyway.
OCSP seems to work just fine after these changes.
2015-06-06 23:24:09 +00:00
1990f32ca4
typo, fixes #435
2015-06-06 13:22:50 +00:00
807939c0e4
make the +tag address tips clearer
2015-06-06 13:02:23 +00:00
a1c7bf0883
add munin to readme
2015-06-06 12:55:13 +00:00
5008cc603e
merge - munin system monitoring
2015-06-06 12:52:22 +00:00
9857db96cd
add a link to the /admin/munin page from the control panel nav bar
2015-06-06 12:52:16 +00:00
e9e6d94e3b
the control panel auth hmac message should also include the user's password so that resetting a password in the database forces that user to log in to the control panel again; also use a sha256 hmac
2015-06-06 12:38:19 +00:00
462a79cf47
fix what counts as a required alias, fixes #434
2015-06-06 12:12:10 +00:00
f792deeebd
when the undocumented custom web settings has a redirect or proxy at the root of a domain, use a minimal nginx config template (same as the new default www redirects)
2015-06-04 12:32:00 +00:00
95173bb327
provide redirects from www subdomains of zones to their parent domain
...
* Split the nginx templates again so we have just the part needed to make a domain do a redirect separate from the rest.
* Add server blocks to the nginx config for these domains.
* List these domains in the SSL certificate install admin panel.
* Generate default 'www' records just for domains we provide default redirects for.
Fixes #321 .
2015-06-04 12:19:01 +00:00
1d09e2406b
refactor how the nginx config file is assembled
...
This doesn't change anything. Just preparation for the next commit.
2015-06-04 12:19:01 +00:00
c9add7a8bf
if a user sets a custom A record on PRIMARY_HOSTNAME, which is ignored anyway, don't let that cause PRIMARY_HOSTNAME from being dropped from nginx.conf
...
Could be related to https://discourse.mailinabox.email/t/nginx-lost-admin-record-after-install-ssl-cert-problem/528 .
2015-06-04 12:19:01 +00:00
e4caed9277
add a note in the setup script about the use of our postgrey fork and dnswl's license terms
2015-06-03 16:28:20 -04:00
1760eaa601
merge #406 - dovecot-lucene & packaging
2015-06-03 15:51:16 -04:00
b25ce67fe1
bring the postgrey patches into this repository rather than maintaining them in a separate postgrey fork repository
2015-06-03 15:50:25 -04:00
b23ba6f75e
simplify build/setup of dovecot-lucene package
2015-06-03 15:48:35 -04:00
cf904a05cc
Reject outgoing mail if FROM does not match Login
2015-06-01 21:26:01 -07:00
47a5a44b9e
v0.10
...
* SMTP Submission (port 587) began offering the insecure SSLv3 protocol due to a misconfiguration in the previous version.
* Roundcube now allows persistent logins using Roundcube-Persistent-Login-Plugin.
* ownCloud is updated to version 8.0.3.
* SPF records for non-mail domains were tightened.
* The minimum greylisting delay has been reduced from 5 minutes to 3 minutes.
* Users and aliases weren't working if they were entered with any uppercase letters. Now only lowercase is allowed.
* After installing an SSL certificate from the control panel, the page wasn't being refreshed.
* Backups broke if the box's hostname was changed after installation.
* Dotfiles (i.e. .svn) stored in ownCloud Files were not accessible from ownCloud's mobile/desktop clients.
* Fix broken install on OVH VPS's.
2015-06-01 18:05:41 -04:00
a0e6c7ceb6
fix downloading dotfiles through ownCloud's webdav
...
fixes #414
2015-05-30 18:03:37 +00:00
49aa367ffa
merge #422 - Add persistent login functionality to roundcube
2015-05-30 14:07:50 +00:00
83b36f2c3a
simplify the roundcube updating logic, changelog entry for roundcube persistent login
2015-05-30 14:07:36 +00:00
2b341d884f
merge #396 - allow the backup process to work after a hostname change
2015-05-30 13:55:08 +00:00
141a09b31e
changelog, comments for duplicity --allow-source-mismatch
2015-05-30 13:46:39 +00:00
6378ec4bbd
Merge pull request #423 from BrianZachary/master
...
Update README.md
2015-05-29 16:53:38 -04:00
603fb1c698
Update README.md
...
Added latest front page appearance of Mail-In-A-Box to README.md
2015-05-29 16:43:14 -04:00
67b4ea947b
Add persistent login functionality to roundcube
2015-05-29 14:49:40 -05:00
4075b7c78a
Merge pull request #421 from samrobotmesh/patch-1
...
Echange -> Exchange
2015-05-29 10:59:25 -04:00
6499eba0cb
Echange -> Exchange
2015-05-29 07:36:53 -07:00
980626aa40
Merge branch 'postgrey/delay/clean' of https://github.com/Xoib/mailinabox
...
Closes #413 .
2015-05-29 13:00:51 +00:00
3f329bc1a8
fix typos
2015-05-29 01:38:42 -04:00
69de67b1c2
link security.md from the readme
2015-05-28 21:41:23 -04:00
7158f9a8d9
security.md: add links to appropriate source files in various places to make it easier to inspect the code to verify the statements; unfortunately line numbers will drift but it would be nice if we could link right to line numbers
2015-05-28 21:39:50 -04:00
bb75bd7167
more security details
2015-05-28 21:39:50 -04:00
4fa58169f1
after installing an SSL certificate from the control panel the page wasn't being refreshed, broken in ec73c171c7
2015-05-28 18:45:53 +00:00
564040897f
Merge pull request #420 from dhpiggott/increase-dmarc-and-spf-strictness
...
Make SPF forbid any outbound mail from non-mail domains
2015-05-28 13:17:14 -04:00
f78bbab289
Make SPF forbid any outbound mail from non-mail domains
2015-05-28 18:11:44 +01:00
d3c82d7363
Merge pull request #419 from dhpiggott/improve-dmarc-and-spf-descriptions
...
Improve DMARC and SPF record descriptions
2015-05-28 13:06:44 -04:00
7b9b978a6d
Improve DMARC and SPF record descriptions
2015-05-28 16:34:58 +01:00
45d47818ca
add changelog entry for 4f98d470a0
2015-05-28 13:12:57 +00:00
Joshua Tauberer
Norman Stanke
bizonix
Morteza Milani
BrianZachary
Joaquin Bravo
Sam
Eric Mill
David Piggott