098e250cc4
bump free_tls_certificates, fixes #695 , if a challenge fails dont cache it permanently (or at all)
2016-02-16 09:08:58 -05:00
3d5a35b184
typo
2016-02-15 18:47:19 -05:00
87d3f2641d
merge #685 - tweak postfix mail queue/warn/bounce times
2016-02-15 18:44:56 -05:00
c6c75c5a17
document the default values for delay_warning_time, maximal_queue_lifetime, bounce_queue_lifetime
2016-02-15 18:38:55 -05:00
1ba44b02d4
forgot to catch free_tls_certificates.client.ChallengeFailed
...
Provisioning could crash if, e.g., the DNS we see is different from the DNS Let's Encrypt sees.
see #695 , probably fixes it
2016-02-15 18:22:16 -05:00
6fd4cd85ca
Merge pull request #712 from s4wny/patch-2
...
Added a warning to the installation / setup script
2016-02-14 14:29:13 -05:00
6182347641
spelling box->Box
2016-02-14 20:24:00 +01:00
401b0526a3
Added a warning to the installation / setup script
...
See pull request #638 and issue #635 for more information.
2016-02-14 19:40:43 +01:00
2f24328608
before the user agrees to Let's Encrypt's ToS the admin could get a nightly email with weird interactive text
...
Made a mistake refactoring the headless variable earlier.
fixes #696
2016-02-13 12:38:16 -05:00
8ea42847da
nightly status checks could fail if any domains had non-ASCII characters
...
https://discourse.mailinabox.email/t/status-check-emails-empty-after-upgrading-to-v0-16/1082/3
A user on that thread suggests an alternate solution, adding `PYTHONIOENCODING=utf-8` to `/etc/environment`. Python docs say that affects stdin/out/err. But we also use these environment variables elsewhere to ensure that config files we read/write are opened with UTF8 too. Maybe all that can be simplified too.
2016-02-13 11:51:06 -05:00
4ed23f44e6
take a full backup more often so we don't keep backups around for so long
2016-02-05 11:08:33 -05:00
178527dab1
convert the backup increment time to the local timezone, fixes #700
...
Duplicity gives times in UTC. We were assuming times were in local time.
2016-02-05 08:58:07 -05:00
f5c376dca8
Merge pull request #699 from BastianPoe/patch-1
...
Fix: Correct IP is reported when using custom DNS
2016-02-04 15:42:10 -05:00
239eac662c
Fix: Correct IP is reported when using custom DNS
...
Fix bug that reports wrong ip, when custom DNS is enabled
2016-02-04 21:32:11 +01:00
4e18f66db6
tls control panel: only show integral seconds while waiting the requested time from Lets Encrypt, in case we got back a non-integral number of seconds to wait
2016-02-03 08:21:22 -05:00
77937df955
bind postfix to the right network interface when sending outbound mail so that SPF checks on the receiving end will pass
...
fixes #3 (again)
2016-02-01 12:36:52 -05:00
4db8efa0df
bump Roundcube to 1.1.4
2016-02-01 12:31:42 -05:00
66c80bd16a
Merge pull request #688 from OmgImAlexis/patch-1
...
fixed typo
2016-01-30 19:31:47 -05:00
5895aeecd7
fixed typo
2016-01-31 11:01:00 +10:30
83ffc99b9c
change the public URL of bootstrap.sh to setup.sh
2016-01-30 11:19:51 -05:00
3615772b2d
v0.16
2016-01-30 11:15:14 -05:00
78729bd277
update CHANGELOG
2016-01-27 20:23:41 -05:00
85a9a1608c
Update mail-postfix.sh
2016-01-21 16:05:43 +01:00
2e693f7011
Update mail-postfix.sh
...
Updated according to Josh's latest reaction. Sounds good.
2016-01-21 08:38:39 +01:00
6f0220da4b
Update mail-postfix.sh
...
Same result as maximal_queue_lifetime and bounce_queue_lifetime, but complies with rfc2821.
2016-01-20 15:34:22 +01:00
09a45b4397
Update mail-postfix.sh
...
The default timeout for Postfix's maximal_queue_lifetime and bounce_queue_lifetime is 5 days. This is way too long if you expect someone to have an answer and after 5 days you'll get the message that it's not delivered. This disrupts communication. It would be more responsive if the user got the 'can't deliver' error after 24 hours.
2016-01-20 13:25:41 +01:00
6b408ef824
Use utils.shell instead of subprocess.Popen
2016-01-14 10:24:04 -05:00
62b6117638
Merge pull request #675 from jeroenj/patch-1
...
Removes border and rounded corners from navbar
2016-01-14 09:53:36 -05:00
70111dafbc
Removes border and rounded corners from navbar
2016-01-14 15:48:39 +01:00
faaa74c3a7
tls: hide extra reasons why domains aren't getting a new certificate during setup
2016-01-14 07:21:08 -05:00
8932aaf4ef
needed libcgi-fast-perl and chown log files
2016-01-13 23:55:45 -05:00
6d6f3ea391
Added ability to use munin's dynazoom
2016-01-13 22:20:33 -05:00
2ad7d0830e
add exception handling for what_version_is_this, fixes #659
2016-01-09 09:23:07 -05:00
5045e206c2
roundcube file ownership should not preserve uid/gid from the release tarball, tar (when run as root) should always extract using --no-same-owner, fixes #667
2016-01-09 09:17:45 -05:00
07f9228694
Merge branch 'letsencrypt' for automatic provisioning of TLS certificates from Let's Encrypt
2016-01-09 08:58:35 -05:00
50b5b91216
v0.15a
...
Sending mail through Exchange/ActiveSync (Z-Push) had been broken since v0.14. This is now fixed.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
iQEcBAABAgAGBQJWkQ9rAAoJELkgQfTBC92BPjQH/ibFBZHgma7C53Q4X9iPfUk2
dPK75rNBx06d6yW4LNAYuWVnNO1Mb0khb2k2UPwg4noImYWqsNS9hXih7C6oPHiK
Szz4ubCc5MEqnmhxiNkzLdIBvsyKmz8IfmCl+LCXu8uk0Fb+pB6zbSdAGxjtaSPL
itCwz8+ApTC4bl1CoNYPn2zudHmHNeC7L6INYdb+xbtc/Tz6mO/xMaBVPDiKeq9P
LqLTOXiJNENz7vKSZytlWGOTdtSTZqwd7JBXuBg0QFz5C9yg8EV4LWB9wOm5aTIf
Fol3WK5ZHA5YeihZKmZSjz9+p4iwv5hqR5osKL2n46LeVHyafESl+QnZSXRlDjE=
=i3ei
-----END PGP SIGNATURE-----
Merge release branch v0.15a
v0.15a
Sending mail through Exchange/ActiveSync (Z-Push) had been broken since v0.14. This is now fixed.
2016-01-09 08:48:37 -05:00
72bfc0915c
v0.15a (January 9, 2016)
...
Sending mail through Exchange/ActiveSync (Z-Push) had been broken since v0.14. This is now fixed.
2016-01-09 08:44:51 -05:00
a7d7a9adbd
Fixing issue making it impossible to send mail from Z-Push
...
* added IMAP_SMTP_METHOD to z_push/backend_imap
* reverting that line accidentally deleted in commit 5055ef
* cf pull request GH-580 that commit is part of
Signed-off-by: Bernard `Guyzmo` Pratz <guyzmo+github@m0g.net>
2016-01-09 08:42:18 -05:00
413af1fe67
Merge pull request #668 from guyzmo/z-push-smtp-fix
...
Fixing issue making it impossible to send mail from Z-Push
2016-01-09 08:41:59 -05:00
b09cbb0ca4
Fixing issue making it impossible to send mail from Z-Push
...
* added IMAP_SMTP_METHOD to z_push/backend_imap
* reverting that line accidentally deleted in commit 5055ef
* cf pull request GH-580 that commit is part of
Signed-off-by: Bernard `Guyzmo` Pratz <guyzmo+github@m0g.net>
2016-01-08 16:43:09 +00:00
5b135738b4
Merge pull request #661 from baltoche/master
...
Gandi tells me that .be TLD only supports algorithms 8 and 10 for DNSSEC
2016-01-05 11:10:21 -05:00
36e5772a8e
Update dns_update.py
2016-01-05 16:56:16 +01:00
2b9fb9643d
changelog entries for lets encrypt
2016-01-04 18:43:17 -05:00
2882e63dd8
second part of provisioning tls certificates from the control panel
2016-01-04 18:43:17 -05:00
812ef024ef
status checks: check that the non-primary domains also resolve over IPv6, if configured
2016-01-04 18:43:17 -05:00
40cdc5aa30
status checks: if a domain's DNS isnt working dont check the TLS certificate because we cant automatically provision one now anyway
2016-01-04 18:43:17 -05:00
b8d6226a9a
when provisioning tls certs from the command line, specify domain names as command line arguments to force getting certs for those domains
2016-01-04 18:43:17 -05:00
bac15d3919
provision tls certificates from the control panel
2016-01-04 18:43:16 -05:00
4b4f670adf
s/SSL/TLS/ in user-visible text throughout the project
2016-01-04 18:43:16 -05:00
b1b57f9bfd
don't try to get certs for IDNA domains and report all reasons for not fetching a certificate
...
fixes #646
2016-01-04 18:43:16 -05:00
Joshua Tauberer
Sony?
Wolf-Bastian Pöttner
X O
dofl
mike
Jeroen Jacobs
Bernard `Guyzmo` Pratz
baltoche