Commit Graph

Select branches

Hide Pull Requests

2fa

docker

encryption-milter

main

secureupgrade

webauthn

#1

#1

#1000

#1000

#1001

#1001

#1005

#1006

#1007

#1007

#1010

#1014

#1022

#1022

#1024

#1025

#1025

#1027

#1028

#1029

#103

#103

#1030

#1030

#1035

#1035

#1036

#1037

#1039

#1039

#1042

#1042

#1043

#1043

#1044

#105

#1052

#1057

#1057

#1058

#1058

#1065

#1076

#1077

#1078

#1079

#1079

#1083

#1083

#1085

#1085

#1093

#1094

#1096

#1098

#1099

#1103

#1103

#1105

#1108

#111

#1114

#1120

#1121

#1123

#1126

#1126

#113

#1138

#1139

#1140

#1140

#1141

#115

#1150

#1151

#1153

#1155

#1162

#1163

#1165

#1165

#1166

#1168

#1168

#1169

#1169

#1171

#1172

#1173

#1177

#1179

#1181

#1185

#12

#1201

#1206

#1209

#1212

#1215

#1215

#1216

#1216

#1221

#1221

#1223

#1229

#1229

#1231

#1232

#1233

#1233

#1236

#1238

#1238

#1253

#1255

#1258

#1261

#1265

#1265

#1266

#1266

#1268

#1271

#1277

#1278

#1281

#1281

#1287

#1287

#1292

#1294

#1294

#1302

#1305

#1311

#1311

#1312

#1313

#1313

#1330

#1338

#1338

#1345

#1346

#1346

#1347

#1348

#135

#1354

#1359

#1376

#1377

#1377

#1380

#1387

#1387

#1398

#1399

#1400

#1400

#1402

#1406

#1408

#1408

#1412

#1417

#142

#1420

#1427

#1432

#1433

#1434

#1435

#1436

#1438

#144

#1441

#1441

#1443

#1443

#1447

#1448

#1451

#1452

#1454

#1455

#1455

#1456

#1456

#1457

#1458

#146

#1460

#1463

#1464

#1467

#147

#1475

#1476

#1477

#1479

#148

#1480

#1481

#1482

#1487

#1488

#149

#149

#1494

#1497

#1498

#150

#1500

#1504

#1506

#1511

#152

#1520

#1529

#1534

#1545

#1546

#1550

#1551

#1556

#156

#1560

#1563

#1564

#1565

#1568

#1568

#1576

#1577

#1578

#1579

#1580

#1581

#1584

#1588

#1590

#1590

#1603

#1603

#1605

#1606

#1611

#1616

#162

#1620

#1625

#1628

#1628

#1629

#163

#1632

#1633

#1634

#1635

#1636

#1639

#164

#1641

#1642

#1643

#1644

#1644

#1646

#1646

#1648

#1650

#1651

#1652

#1652

#1653

#1654

#1655

#166

#1662

#167

#1670

#1671

#1672

#1673

#1674

#1675

#1676

#1679

#168

#1680

#1684

#1684

#1688

#1689

#1693

#1698

#170

#1702

#1703

#1712

#1716

#1716

#1717

#1720

#1721

#1728

#173

#1731

#1734

#1741

#1742

#1748

#1752

#1754

#1761

#1768

#1770

#1773

#1773

#1775

#178

#1787

#1789

#1790

#1791

#1793

#1795

#1798

#1799

#1800

#1804

#1809

#1812

#1813

#1814

#1817

#1823

#1823

#1827

#1829

#1830

#1836

#1841

#1848

#1853

#1855

#1856

#1856

#1863

#1866

#1869

#1876

#188

#1882

#1882

#1883

#1884

#1884

#1886

#1891

#1892

#1893

#1895

#1899

#1900

#1900

#1905

#1908

#191

#191

#1913

#192

#1920

#1920

#1929

#193

#1932

#1942

#1943

#1947

#1948

#1949

#1950

#1954

#1955

#1958

#1958

#1960

#1965

#1965

#1970

#1976

#2001

#2002

#2008

#201

#2012

#2013

#2015

#2017

#202

#202

#2024

#2033

#2034

#2035

#2038

#2043

#2043

#2044

#2045

#2051

#2054

#2055

#2063

#2064

#2067

#2069

#207

#2074

#2077

#2078

#2079

#2081

#2083

#2090

#21

#2105

#2106

#2109

#2115

#212

#212

#2125

#2126

#2137

#2138

#214

#214

#2151

#2153

#2156

#2157

#2158

#2159

#2162

#2163

#2170

#2182

#2190

#2191

#2192

#2192

#2193

#2193

#2194

#2198

#2199

#220

#220

#2201

#2202

#2203

#2204

#2207

#2208

#2216

#2218

#2219

#2220

#2220

#2226

#2227

#2236

#2241

#2244

#2247

#2248

#2249

#2252

#2253

#2258

#2258

#2259

#2259

#2260

#2260

#2261

#2262

#2262

#2263

#2268

#227

#227

#2270

#2271

#2275

#2281

#2287

#2293

#2296

#2298

#2298

#2299

#230

#2301

#2304

#2305

#2306

#2308

#2308

#2309

#2309

#2310

#2311

#2315

#2317

#2319

#2319

#232

#2322

#2325

#2328

#2329

#233

#2330

#2332

#2333

#2334

#2340

#2340

#2342

#2343

#2345

#2346

#2347

#2349

#2351

#2352

#2356

#2359

#2360

#2365

#2368

#2376

#2377

#2378

#2379

#2380

#2382

#2382

#2383

#2383

#2385

#2387

#2387

#2389

#239

#239

#2390

#2401

#2406

#2407

#2409

#2410

#2410

#2411

#2411

#2413

#2413

#2416

#2416

#2418

#2418

#242

#242

#2422

#2423

#2424

#2424

#2425

#2425

#2428

#2428

#2429

#2429

#2431

#2431

#2432

#2432

#2433

#2436

#2436

#2437

#2439

#244

#244

#2440

#2440

#2441

#2441

#2445

#2445

#2453

#2454

#2457

#2457

#2459

#2459

#248

#25

#25

#251

#251

#254

#260

#261

#269

#269

#274

#274

#275

#276

#276

#279

#282

#287

#288

#29

#297

#298

#300

#304

#306

#307

#310

#311

#311

#312

#313

#313

#317

#324

#324

#326

#332

#334

#336

#336

#338

#338

#34

#347

#348

#349

#349

#350

#350

#353

#363

#363

#365

#365

#366

#372

#377

#377

#38

#38

#392

#392

#396

#397

#397

#40

#403

#406

#409

#409

#410

#411

#412

#412

#413

#414

#414

#418

#419

#420

#421

#422

#423

#427

#429

#435

#435

#436

#437

#437

#439

#439

#442

#445

#45

#450

#451

#452

#460

#463

#47

#471

#476

#476

#477

#478

#479

#483

#483

#485

#485

#486

#49

#490

#490

#491

#491

#492

#494

#5

#502

#502

#507

#507

#510

#510

#512

#517

#523

#526

#528

#533

#536

#537

#540

#540

#544

#548

#549

#549

#550

#551

#571

#571

#572

#573

#580

#581

#583

#583

#584

#584

#587

#589

#596

#596

#597

#598

#599

#602

#605

#621

#624

#624

#630

#630

#632

#632

#634

#634

#636

#638

#638

#647

#65

#650

#650

#654

#66

#661

#664

#664

#665

#668

#674

#675

#678

#679

#679

#68

#685

#687

#687

#688

#69

#69

#699

#70

#708

#708

#709

#709

#712

#714

#714

#716

#718

#719

#719

#726

#727

#728

#73

#732

#733

#734

#735

#739

#739

#74

#743

#743

#744

#751

#754

#754

#755

#756

#757

#757

#760

#760

#763

#766

#767

#767

#768

#769

#77

#770

#770

#771

#772

#773

#774

#774

#775

#775

#776

#780

#780

#786

#787

#789

#791

#793

#794

#794

#795

#798

#80

#80

#804

#805

#805

#806

#808

#808

#810

#810

#811

#811

#818

#818

#821

#822

#823

#837

#840

#840

#846

#846

#857

#868

#868

#87

#870

#874

#874

#875

#876

#876

#879

#88

#880

#883

#883

#886

#887

#887

#889

#89

#891

#891

#894

#897

#897

#90

#900

#902

#904

#904

#906

#906

#908

#909

#914

#914

#917

#917

#92

#927

#931

#936

#938

#938

#939

#940

#946

#946

#947

#947

#948

#948

#949

#951

#952

#955

#955

#956

#956

#957

#957

#958

#958

#959

#959

#960

#961

#962

#962

#965

#97

#97

#970

#972

#974

#975

#975

#976

#976

#983

#984

#988

#992

#996

14.08-beta

v0.01

v0.02

v0.03

v0.04

v0.05

v0.06

v0.07

v0.08

v0.09

v0.10

v0.11

v0.11b

v0.12

v0.12b

v0.12c

v0.13a

v0.13b

v0.14

v0.15

v0.15-rc1

v0.15a

v0.16

v0.17

v0.17b

v0.17c

v0.18

v0.18b

v0.18c

v0.19

v0.19a

v0.19b

v0.20

v0.21

v0.21b

v0.21c

v0.22

v0.23

v0.23a

v0.24

v0.25

v0.26

v0.26b

v0.26c

v0.27

v0.28

v0.29

v0.30

v0.40

v0.41

v0.42

v0.42b

v0.43

v0.44

v0.45

v0.46

v0.47

v0.48

v0.50

v0.51

v0.52

v0.53

v0.53a

v0.54

v55

v56

v57

v57a

v60

v60.1

v61

v61.1

v62

v63

v64

v65

v66

v67

v68

v69

v69a

v69b

v70

Mono Color

• 10fbb2b293 in cf7053c124 I allowed editconf.py to insert a setting where we find it already commented-out in order to get an nginx configuration line in the right place, but it wasn't quite right because when run again we would insert the setting a second time Joshua Tauberer 2014-07-08 00:48:22 +0000
• 3bab63d4ce update to Roundcube 1.0.1 Joshua Tauberer 2014-07-08 00:37:53 +0000
• 7339bf080a add a web_update script to trigger writing nginx config Joshua Tauberer 2014-07-08 00:34:38 +0000
• 59a9d02fa5 check that installed certificates are for the domains we are using the certificates for Joshua Tauberer 2014-07-07 12:06:11 +0000
• 3d4eadd436 the new migration management in c8856f107d left out the part where we actually keep the system's current MIGRATIONID... it was being lost when setup/start.sh was re-run Joshua Tauberer 2014-07-07 11:29:21 +0000
• e2277ddcfe Merge pull request #92 from konklone/greylisting Joshua Tauberer 2014-07-07 07:25:10 -0400
• cf7053c124 set nginx server_names_hash_bucket_size to 64, fixes #93 Joshua Tauberer 2014-07-07 11:23:31 +0000
• 430b2dec11 update default www page to link to the website, fixes #96 Joshua Tauberer 2014-07-07 07:07:54 -0400
• ad3f6f8424 adding externals and .env to gitignore Joshua Tauberer 2014-07-07 07:06:24 -0400
• 65fb65ada7 an mx record may be missing if the A record matches the A record of PRIMARY_HOSTNAME Joshua Tauberer 2014-07-07 02:33:35 +0000
• 28e254fb84 whats_next: Allow the PRIMARY_HOSTNAME to not have an MX because the default value means the domain itself, which is what we want anyway Joshua Tauberer 2014-07-07 02:17:04 +0000
• e898cd5d2a whats_next: wrap output to the actual width of the terminal Joshua Tauberer 2014-07-07 02:03:01 +0000
• 6a231d4409 clarify that an SSL cert can remain self-signed on the non-primary domains if the domain isn't being used for web Joshua Tauberer 2014-07-07 01:54:54 +0000
• 3d645b57d0 mine was ten minutes - might as well be pessimistic Eric Mill 2014-07-06 21:11:56 -0400
• 75f8d23218 Merge pull request #90 from konklone/password Joshua Tauberer 2014-07-06 17:30:01 -0400
• 75914d3c0d Clarify what the password does. Eric Mill 2014-07-06 17:26:07 -0400
• 7f5372d649 Merge pull request #88 from konklone/more Joshua Tauberer 2014-07-06 15:00:07 -0400
• 4faf130dfa all right, restore 'permanently' Eric Mill 2014-07-06 14:40:19 -0400
• c8d506edb9 Merge pull request #89 from konklone/file-urls Joshua Tauberer 2014-07-06 12:35:35 -0400
• 86cbd4c5a6 Makes the page work at a file:// URL. Eric Mill 2014-07-06 12:31:43 -0400
• 5b80730fa4 Merge pull request #87 from konklone/typos Joshua Tauberer 2014-07-06 12:30:12 -0400
• cae52595b2 Don't *permanently* confirm the security exception. Eric Mill 2014-07-06 12:29:00 -0400
• 2ac76b56cf fix a few typos, clarifying language. Eric Mill 2014-07-06 12:20:45 -0400
• dcce98f84b and remove the old documentation now that there is documentation on the website Joshua Tauberer 2014-07-06 11:57:57 -0400
• b86a9a85b0 fix scrollspy responsiveness Joshua Tauberer 2014-07-06 11:37:09 -0400
• 05664f0a3b have the README refer to the website for details Joshua Tauberer 2014-07-06 11:31:11 -0400
• ceeb281ef7 moving over helpful test sites from the old doc file Joshua Tauberer 2014-07-06 11:27:15 -0400
• 158d9ffa4a setup guide fixes Joshua Tauberer 2014-07-06 11:20:47 -0400
• de4dd797b3 fix CC0 link Joshua Tauberer 2014-07-06 15:09:43 +0000
• 8682aeb433 add a setup guide Joshua Tauberer 2014-07-06 11:09:09 -0400
• 49d5561933 when adding/removing mail addresses also update nginx's config Joshua Tauberer 2014-07-06 12:16:50 +0000
• 3fc22e1601 fix Digital Ocean recommendation, fixes #79, #80; thanks @konklone Joshua Tauberer 2014-06-30 20:46:49 +0000
• c8856f107d migrate the SSL certificates path for non-primary certs to a new layout using a new migration script Joshua Tauberer 2014-06-30 20:41:29 +0000
• 06ba25151f get_domain_ssl_files returned the wrong path for the CSR for PRIMARY_HOSTNAME Joshua Tauberer 2014-06-30 19:49:41 +0000
• b5aa1b0f31 walk the user through choosing the PRIMARY_HOSTNAME by first asking for their email address Joshua Tauberer 2014-06-30 10:20:58 -0400
• fed5959288 s/PUBLIC_HOSTNAME/PRIMARY_HOSTNAME/ throughout Joshua Tauberer 2014-06-30 09:15:36 -0400
• 6a1b701499 Merge 09ee64b437 into 0e8fe7f01d Eric Mill 2014-06-29 17:16:19 +0000
• 09ee64b437 Updates Digital Ocean details. Eric Mill 2014-06-29 13:15:49 -0400
• 573faa2bf5 install the backup script as a daily cron job Joshua Tauberer 2014-06-26 10:46:22 +0000
• 87f001a5d5 some comments Joshua Tauberer 2014-06-24 03:24:41 +0000
• f8cd2bb805 typo: www/default/index.html would be overwritten if it already exists Joshua Tauberer 2014-06-23 19:43:19 +0000
• 1dec8c65ce move the SSH password login check into whats_next.py (it used to be in start.sh and then moved to an unused script when it became a problem for Vagrant) Joshua Tauberer 2014-06-23 19:39:20 +0000
• 0e8fe7f01d Merge pull request #77 from konklone/patch-1 Joshua Tauberer 2014-06-23 14:15:33 -0400
• df9b4474ac fixes a typo, links to CC0, updates a link to be https Eric Mill 2014-06-23 14:12:46 -0400
• fb12f681dd improvements Joshua Tauberer 2014-06-23 12:10:29 +0000
• d4ce50de86 new tool to purchase and install a SSL certificate using Gandi.net's API Joshua Tauberer 2014-06-23 10:53:09 +0000
• dd8d248c5a initial commit of website Joshua Tauberer 2014-06-22 20:15:22 -0400
• 30c416ff6e rename the new checklist script to whats_next.py Joshua Tauberer 2014-06-23 00:11:24 +0000
• 5aa09c3f9b let the user override some DNS records in a different way Joshua Tauberer 2014-06-22 19:33:30 +0000
• 45e93f7dcc strengthen the cyphers and protocols allowed by Dovecot and Postfix submission Joshua Tauberer 2014-06-22 19:03:11 +0000
• 343886d818 add mail alias checks and other cleanup Joshua Tauberer 2014-06-22 16:28:55 +0000
• deab8974ec if we handle mail for both a domain and any subdomain, only create a zone for the domain and put the subdomain's DNS records in the main domain's zone file Joshua Tauberer 2014-06-22 16:24:15 +0000
• 4668367420 first pass at a management tool for checking what the user must do to finish his configuration: set NS records, DS records, sign his certificates, etc. Joshua Tauberer 2014-06-22 15:34:36 +0000
• ec6c7d84c1 dont ask for a CSR country code on second runs because the CSR is already generated and any new country code won't be used anyway Joshua Tauberer 2014-06-22 12:48:21 +0000
• 8076ce4ab9 Merge pull request #74 from mkropat/mgmt-auth Joshua Tauberer 2014-06-22 11:36:04 -0400
• 9e63ec62fb Cleanup: remove env dependency Michael Kropat 2014-06-22 08:55:19 -0400
• d100a790a0 Remove API_KEY_FILE setting Michael Kropat 2014-06-22 08:45:29 -0400
• 554a28479f Merge remote-tracking branch 'upstream/master' into mgmt-auth Michael Kropat 2014-06-21 21:29:25 -0400
• 064d75e261 Merge pull request #73 from mkropat/syslog-logging Joshua Tauberer 2014-06-21 21:22:27 -0400
• e70bc50432 README parallel sentence structure Joshua Tauberer 2014-06-22 00:34:49 +0000
• bb394242ef Update documentation to use API auth Michael Kropat 2014-06-22 00:07:14 +0000
• 88e496eba4 Update setup scripts to auth against the API Michael Kropat 2014-06-22 00:02:52 +0000
• 447399e8cd Update mail tool to pass api key auth Michael Kropat 2014-06-21 23:49:09 +0000
• 067052d4ea Add key-based authentication to management service Michael Kropat 2014-06-21 23:42:48 +0000
• 53e15eae15 Tell Flask to log to syslog Michael Kropat 2014-06-21 23:25:35 +0000
• 67d31ed998 move the SSL setup into its own bash script since it is used for much more than email now Joshua Tauberer 2014-06-21 22:15:53 +0000
• 0ab43ef4fd have webfinger output a JSON file in STORAGE_ROOT/webfinger/(acct/..) Joshua Tauberer 2014-06-21 17:08:18 +0000
• 326cc2a451 obviously put our stuff in /usr/local and not /usr Joshua Tauberer 2014-06-21 12:35:00 -0400
• d3cacd4a11 update test_dns Joshua Tauberer 2014-06-19 18:47:41 -0400
• 87b0608f15 test_dns: DNSSEC signing inserts empty text string components Joshua Tauberer 2014-06-17 17:34:26 -0400
• 85169dc960 preliminary support for webfinger Joshua Tauberer 2014-06-20 01:54:59 +0000
• 5faa1cae71 manage the nginx conf in the management daemon too so we can have nginx operate on all domains that we serve mail for Joshua Tauberer 2014-06-20 01:16:38 +0000
• a1a80b295e update docs a bit Joshua Tauberer 2014-06-18 23:12:05 -0400
• 94a140a27a linkify README Joshua Tauberer 2014-06-18 23:04:06 -0400
• 126ea94ccf drop support for ADSP which since last November is no longer recommended per http://datatracker.ietf.org/doc/status-change-adsp-rfc5617-to-historic/ Joshua Tauberer 2014-06-18 22:56:55 -0400
• 0f72f78eea add DNSSEC/DANE TLSA to the README Joshua Tauberer 2014-06-19 02:19:05 +0000
• 782ad04b10 use DANE when sending mail: if the recipient MX has a DANE TLSA record in DNS then Postfix will necessarily encrypt the mail in transport Joshua Tauberer 2014-06-19 01:58:14 +0000
• 95e61bc110 add DANE TLSA records to the PUBLIC_HOSTNAME's DNS Joshua Tauberer 2014-06-19 01:39:27 +0000
• 699bccad80 missing spaces in nsd.conf (has no effect but looks proper) Joshua Tauberer 2014-06-18 23:53:52 +0000
• afb6c26c8b run bind9 on the loopback interface for ensuring we are using a DNSSEC-aware nameserver to resolve our own DNS queries (i.e. when sending mail) since we can't trust that the network configuration provided for us gives us a DNSSEC-aware DNS server Joshua Tauberer 2014-06-18 19:41:35 -0400
• 761fac729b nsd.conf wasn't properly using the signed zone files Joshua Tauberer 2014-06-18 23:30:35 +0000
• dd15bf4384 use a better sort order for records in DNS zone files Joshua Tauberer 2014-06-17 23:34:06 +0000
• 14396e58f8 dont create a separate zone for PUBLIC_HOSTNAME if it is a subdomain of another zone (hmm, this is a general principle that could apply to any two domains the box is serving) Joshua Tauberer 2014-06-17 23:30:00 +0000
• 33f06f29c1 let the user override some DNS records Joshua Tauberer 2014-06-17 21:39:26 +0000
• 88709506f8 add DNSSEC Joshua Tauberer 2014-06-17 22:21:12 +0000
• 1ca7c0c6e1 Update README.md jordanrinke 2014-06-13 12:52:21 -0700
• 3560bfedb7 add ipset save/load/flush jordanrinke 2014-06-13 12:51:41 -0700
• 5dd3f71343 Initial commit jordanrinke 2014-06-13 12:41:04 -0700
• aaa735dbfe write nsd.conf zones in a predictable order so that we don't keep rewriting it Joshua Tauberer 2014-06-12 22:28:37 -0400
• e9cde52a48 two more cases of shelling out external programs in a more secure way, see cecda9cec5 Joshua Tauberer 2014-06-12 21:06:04 -0400
• c925f72b0b remove obsoleted parts of setup/dns.sh Joshua Tauberer 2014-06-12 20:18:53 -0400
• e18c51293d update News Challenge status in README Joshua Tauberer 2014-06-10 18:48:09 -0400
• d28d07f78e increase the postfix message size limit from 10MB to 128MB Joshua Tauberer 2014-06-10 10:21:43 +0000
• cad868c6c9 reorganize mail.sh a little Joshua Tauberer 2014-06-10 10:19:49 +0000
• 8bd62aa3bc increase duplicity's volume size from the default of 25MB to 100MB so we create fewer files Joshua Tauberer 2014-06-09 13:47:41 +0000
• 5490142df5 re-do the backup script to use the duplicity program Joshua Tauberer 2014-06-09 09:34:52 -0400
• cecda9cec5 management: shell out external programs in a more secure way Joshua Tauberer 2014-06-09 08:09:45 -0400
• 93be8d9f67 Create dshield_auto.sh Onder Vincent Koc 2014-06-09 12:03:27 +0100
• fbbce3c0fa Initial commit Onder Vincent Koc 2014-06-09 11:55:36 +0100
• 70bd96f643 Merge pull request #70 from mkropat/ipv6-support Joshua Tauberer 2014-06-08 19:03:33 -0400