Commit Graph

  • 20e11bbab3 fail2ban: whitelist our machine's public ip address so status checks dont cause bans of the machine itself Joshua Tauberer 2015-12-07 08:45:59 -0500
  • 5bbe9f9a04 status checks: when ipv6 is enabled, check that services are accessible over ipv6 too Joshua Tauberer 2015-12-07 08:37:00 -0500
  • 7a93d219ef some cleanup in dns_update.py Joshua Tauberer 2015-11-29 14:59:35 +0000
  • 808522d895 merge functions get_web_domains and get_default_www_redirects Joshua Tauberer 2015-11-29 14:43:12 +0000
  • be9efe0273 ensure malformed ssl certificate can't cause it to be written to an arbitrary path Joshua Tauberer 2015-11-29 14:04:37 +0000
  • 766b98c4ad refactor: move SSL-related management functions into a new module ssl_certificates.py Joshua Tauberer 2015-11-29 13:59:22 +0000
  • c422543fdd make the system SSL certificate a symlink so we never have to replace a certificate file, and flatten the directory structure of user-installed certificates Joshua Tauberer 2015-11-29 01:27:03 +0000
  • cf33be4596 fix boto 2 conflict on Google Compute Engine instances Joshua Tauberer 2015-11-26 14:47:49 +0000
  • 161d096139 add a way to dump backup status from the command line Joshua Tauberer 2015-11-26 14:34:07 +0000
  • b32cb6229b install boto (py2) via the package manager, not pip (used by duplicity) Joshua Tauberer 2015-11-26 14:20:59 +0000
  • 3dd5fff110 Merge pull request #602 from NurdTurd/patch-2 Joshua Tauberer 2015-11-20 14:54:39 -0500
  • 398a66dd4a Typo on 'weirdly' Sheldon Rupp 2015-11-20 20:46:28 +0100
  • 84d80128b5 Merge branch 'management-memory-usage' of github.com:yodax/mailinabox into management-memory-usage yodax 2015-11-20 02:01:01 -0500
  • 59f8aa1c31 Add checks to the management interface to report memory usage Michael Kroes 2015-11-01 03:29:45 -0500
  • cfba97e104 updated changelog Joshua Tauberer 2015-11-19 07:00:27 -0500
  • bbf78716fd during setup suppress the status line about generating an SSL certificate if we already have it Joshua Tauberer 2015-11-18 09:47:09 -0500
  • b9820641aa when generating the initial self-signed cert, dont keep the CSR - it has no use after this step Joshua Tauberer 2015-11-18 09:33:12 -0500
  • 8c00556bab use /dev/urandom for roundcube/owncloud key generation, see #596, partially reverts #115 (69f0e1d07a) Joshua Tauberer 2015-11-17 17:13:49 -0500
  • 16d148a8a9 use /dev/urandom for DNSSEC key generation, fixes #596, partially reverts #115 (69f0e1d07a) Joshua Tauberer 2015-11-17 17:11:35 -0500
  • e8264e9b6a ensure /dev/urandom is seeded with a blocking call to /dev/random and using Ubuntu's pollinate servers Joshua Tauberer 2015-11-17 16:55:14 -0500
  • 4f2b223070 add comments about how openssl generates random numbers for genrsa and what could create a perfect storm to make the key not random Joshua Tauberer 2015-11-17 15:41:13 -0500
  • 05e128cafb the >'s in pip install package names might be interpreted as shell redirects and was creating files name '=1.0.0' '=2.0.0' and '=1.0.2' (I'm not sure how this was ever working) Joshua Tauberer 2015-11-18 09:43:08 -0500
  • 59e9952a61 the explanatory text for setting up secondary nameservers was hidden until a secondary nameserver is added, so that wasn't helpful Joshua Tauberer 2015-11-18 10:03:23 -0500
  • ee47d5030a Merge 00028046b4 into 2f9fd09b2f Casey Marshall 2015-11-18 22:44:42 +0000
  • 2f9fd09b2f Merge pull request #599 from nstanke/loglevel Joshua Tauberer 2015-11-18 17:42:58 -0500
  • ec20d657ba Change Z-Push log level to error Norman Stanke 2015-11-18 21:39:17 +0100
  • 34ba279b0a Merge pull request #598 from yodax/zpush-log-rotate Joshua Tauberer 2015-11-18 07:25:24 -0500
  • 334da70d38 Merge branch 'management-memory-usage' of github.com:yodax/mailinabox into management-memory-usage yodax 2015-11-18 06:24:54 -0500
  • e103a1f892 Add checks to the management interface to report memory usage Michael Kroes 2015-11-01 03:29:45 -0500
  • c28065cc56 Add log rotation to z-push yodax 2015-11-17 09:27:05 -0500
  • 04960d0b98 Merge pull request #597 from yodax/backup-stop-phpfpm Joshua Tauberer 2015-11-17 08:14:23 -0500
  • 280de022cb Change order in which service stop yodax 2015-11-17 05:22:42 -0500
  • fa1cad7fb2 During the backup you will get login failures which will confuse iOS, so it is better to stop php-fpm as well yodax 2015-11-17 02:57:14 -0500
  • d263ec417f Merge branch 'management-memory-usage' of github.com:yodax/mailinabox into management-memory-usage yodax 2015-11-17 01:32:32 -0500
  • 9f3afc3765 Add checks to the management interface to report memory usage Michael Kroes 2015-11-01 03:29:45 -0500
  • 00028046b4 Use /dev/urandom. Casey Marshall 2015-11-14 14:04:04 -0600
  • 1926bfa1c5 all DNS queries should have a timeout, fixes #591 Joshua Tauberer 2015-11-11 12:24:01 +0000
  • 2b351208e0 Merge pull request #589 from NurdTurd/patch-1 Joshua Tauberer 2015-11-08 15:59:12 -0500
  • 96b02e68ee Change 'Wosign' to 'WoSign' Sheldon Rupp 2015-11-08 21:31:43 +0100
  • 82f4f8b2eb delete /etc/cron.daily/mailinabox-backup BuildTools 2015-11-06 07:55:48 -0500
  • d703b0a2a1 change from /etc/cron.daily to /etc/cron.d BuildTools 2015-11-06 07:47:40 -0500
  • 2e3796c4f7 set owncloud's email from address, fixes #586 Joshua Tauberer 2015-11-05 11:20:16 +0000
  • ac238b9d28 dont run secondary nameserver checks if the zone's nameservers aren't correct to begin with, possibly because the user is using external DNS, see #582 Joshua Tauberer 2015-11-05 11:09:15 +0000
  • 25e6fa53c2 update Roundcube to 1.1.3 Joshua Tauberer 2015-11-05 11:03:34 +0000
  • 57b4c685df v0.14 v0.14 Joshua Tauberer 2015-11-04 17:56:31 -0500
  • 3fd1279e7d ...but then also have to compare against the intended IP address, which might have a custom override, see #582 Joshua Tauberer 2015-11-03 12:06:03 +0000
  • 3bc38c89ab secondary NS status checks in 3b91bc2c0a should not be skipped if the target IP address has been modified by a custom record Joshua Tauberer 2015-11-03 06:48:04 -0500
  • 4995cebc38 add additional comments explaining why the IMAP special folders are set up as they are Joshua Tauberer 2015-11-01 07:30:15 -0500
  • f34b4fdf32 Add checks to the management interface to report memory usage Michael Kroes 2015-11-01 03:29:45 -0500
  • 3234dc2796 Add special folder Archives to map to Archive Michael Kroes 2015-11-01 02:26:00 -0500
  • 720157e8a3 update changelog Joshua Tauberer 2015-10-31 19:20:56 +0000
  • 8d9eb022d1 bump HTML5_Notifier version, include its version in the check for whether we need to update Roundcube Joshua Tauberer 2015-10-31 19:06:56 +0000
  • 5e2eb51879 merge: add roudcube html5_notifier plugin, #550 Joshua Tauberer 2015-10-31 18:59:53 +0000
  • d0062b7de4 Merge pull request #572 from OmgImAlexis/patch-1 Joshua Tauberer 2015-10-31 14:57:13 -0400
  • 6307503cda Merge pull request #580 from yodax/z-push-update Joshua Tauberer 2015-10-31 14:52:46 -0400
  • 9b1e04b1e8 Merge remote-tracking branch 'upstream/master' into z-push-update Michael Kroes 2015-10-31 03:08:54 -0400
  • 24f1dbc0bb PHP version has a bug that needs a workaround in z-push Michael Kroes 2015-10-27 16:42:58 -0400
  • 5d158c524d Merge pull request #581 from yodax/default-archive-folder Joshua Tauberer 2015-10-27 08:15:50 -0400
  • fd9287a0fd Add Archive folder to comment in mail-dovecot.sh Michael Kroes 2015-10-27 07:58:07 -0400
  • 90836eff5b For a new user create the archive folder Michael Kroes 2015-10-27 02:20:00 -0400
  • 914cf68651 Remove default comments from imap config Michael Kroes 2015-10-25 13:26:38 -0400
  • 4db82d3d09 Caldav doesnt support sync tokens Michael Kroes 2015-10-25 13:19:22 -0400
  • 5055ef060d Change configuration options for new version of z-push Michael Kroes 2015-10-25 08:22:03 -0400
  • 35088a7cac Update Z-Push version to 80cbe53de4ab8dd598d1f2af6f0a23fa396c529a Michael Kroes 2015-10-25 07:25:24 -0400
  • f046031b26 nginx-ssl.conf changes were partially incorrect, partial revert of 834c42bc50 Joshua Tauberer 2015-10-24 11:36:18 +0000
  • 3b91bc2c0a if secondary nameservers are given, status checks now check they are serving the right info Joshua Tauberer 2015-10-22 10:58:36 +0000
  • 4c4babd9e7 experimentally scanning the mail log to see if we can infer a good time to take a backup Joshua Tauberer 2015-10-22 10:35:14 +0000
  • 53dc53bf8f changelog entries Joshua Tauberer 2015-10-18 12:10:57 +0000
  • 274e5ca676 let dovecot automatically create mailbox folders rather than doing it manually in the management daemon, fixes #554 Joshua Tauberer 2015-10-18 11:55:27 +0000
  • 5e7b7835b7 Merge pull request #573 from ptimof/master Joshua Tauberer 2015-10-12 10:05:52 -0400
  • 1bdfdbee89 Added 'Sent' folder when creating user. Peter Timofejew 2015-10-12 09:43:35 -0400
  • ebffaab16a Added wosign as a suggest free SSL provider. X O 2015-10-11 11:33:18 +1030
  • e51d80ee59 Merge 5ed354a723 into d6d4085809 Peter Timofejew 2015-10-10 16:53:55 +0000
  • d6d4085809 munin setup may show '/bin/rm: missing operand', fixes #527 Joshua Tauberer 2015-10-10 16:48:49 +0000
  • 5ed354a723 Default IMAP_SENTFOLDER folder was incorrect Peter Timofejew 2015-10-10 10:40:48 -0400
  • 2a44b0cafb the new SSL certs routine requires cryptography>=1.0.2 to make RSAPublicNumbers hashable Joshua Tauberer 2015-10-08 12:24:22 +0000
  • 834c42bc50 move nginx-ssl to be a global configuration file rather than including it into each server block Joshua Tauberer 2015-09-27 17:13:11 +0000
  • 6c8ee1862a use subresource integrity attributes to guard against CDNs being used as an attack vector; drop external resources that we can't protect this way (fonts); fixes #234 Joshua Tauberer 2015-09-18 19:04:28 +0000
  • 787beab63f choose the best SSL cert from among the installed certificates; use the server certificate instead of self-signed certificates Joshua Tauberer 2015-09-18 13:03:07 +0000
  • 58349a9410 when updating DNS, clear the local DNS cache Joshua Tauberer 2015-09-18 13:00:53 +0000
  • 93c2258d23 let the HSTS header be controlled by the management daemon so some domains can choose to enable preload Joshua Tauberer 2015-09-08 21:20:13 +0000
  • bd7a4dedc1 Merge pull request #551 from anoma/master Joshua Tauberer 2015-09-07 06:49:48 -0400
  • ae3ae0b5ba Revert to default FAIL2BAN findtime for SSH jail anoma 2015-09-07 08:36:59 +0100
  • 42d657eb54 Unnecessary config item, inherited from default jail.conf anoma 2015-09-07 08:28:54 +0100
  • d60d73b7e0 status checks: dont error if there's a domain that dns_update hasn't been run yet on Joshua Tauberer 2015-09-06 13:26:20 +0000
  • 6704da1446 silence errors in the admin if there is an invalid domain name in the database Joshua Tauberer 2015-09-06 13:24:15 +0000
  • d24a2f7cab Updated, mistype. Hoekynl 2015-09-06 10:22:08 +0200
  • ed31002cc6 Added commit version hash. Working now. Hoekynl 2015-09-06 10:20:36 +0200
  • f8ac896795 Include html5_notifier by default Hoekynl 2015-09-05 23:33:19 +0200
  • 3e96de26dd server_names_hash_bucket_size=128 now, see #93 Joshua Tauberer 2015-09-05 20:18:19 +0000
  • 4f6fa40dbd warn in status checks if a custom DNS record has been set on a domain that would normally serve web and as a result that domain no longer is serving web Joshua Tauberer 2015-09-05 20:07:12 +0000
  • 104b804059 if a custom DNS record exists for a web-serving domain and the record is just the box's IP address, don't skip this domain for serving web Joshua Tauberer 2015-09-05 20:06:30 +0000
  • fc80d33d9c Remove period. Sheldon Rupp 2015-09-05 21:45:02 +0200
  • c545e46ebe Merge pull request #548 from NurdTurd/patch-1 Joshua Tauberer 2015-09-05 15:30:25 -0400
  • 52a216fbcb Typo Sheldon Rupp 2015-09-05 21:29:24 +0200
  • 2c29d59895 Merge pull request #478 from kri3v/patch-1 Joshua Tauberer 2015-09-05 11:42:36 -0400
  • de34d0d337 pin pip versions of email_validator and cryptography so pip doesn't keep reinstalling them each upgrade even if nothing changed (and the ceffi depedency installation can be very slow and is prone to break under low memory) Joshua Tauberer 2015-09-05 12:34:41 +0000
  • 2bb7a6fc27 changelog entries Joshua Tauberer 2015-09-05 08:01:59 -0400
  • 1b84292c56 Merge pull request #544 from 0xFelix/master Joshua Tauberer 2015-09-05 06:59:00 -0400
  • 18efae9703 Remove direct dependencies as they get installed automatically Felix 2015-09-05 09:08:47 +0200