Commit Graph

Select branches

Hide Pull Requests

2fa

docker

encryption-milter

main

secureupgrade

webauthn

#1

#1

#1000

#1000

#1001

#1001

#1005

#1006

#1007

#1007

#1010

#1014

#1022

#1022

#1024

#1025

#1025

#1027

#1028

#1029

#103

#103

#1030

#1030

#1035

#1035

#1036

#1037

#1039

#1039

#1042

#1042

#1043

#1043

#1044

#105

#1052

#1057

#1057

#1058

#1058

#1065

#1076

#1077

#1078

#1079

#1079

#1083

#1083

#1085

#1085

#1093

#1094

#1096

#1098

#1099

#1103

#1103

#1105

#1108

#111

#1114

#1120

#1121

#1123

#1126

#1126

#113

#1138

#1139

#1140

#1140

#1141

#115

#1150

#1151

#1153

#1155

#1162

#1163

#1165

#1165

#1166

#1168

#1168

#1169

#1169

#1171

#1172

#1173

#1177

#1179

#1181

#1185

#12

#1201

#1206

#1209

#1212

#1215

#1215

#1216

#1216

#1221

#1221

#1223

#1229

#1229

#1231

#1232

#1233

#1233

#1236

#1238

#1238

#1253

#1255

#1258

#1261

#1265

#1265

#1266

#1266

#1268

#1271

#1277

#1278

#1281

#1281

#1287

#1287

#1292

#1294

#1294

#1302

#1305

#1311

#1311

#1312

#1313

#1313

#1330

#1338

#1338

#1345

#1346

#1346

#1347

#1348

#135

#1354

#1359

#1376

#1377

#1377

#1380

#1387

#1387

#1398

#1399

#1400

#1400

#1402

#1406

#1408

#1408

#1412

#1417

#142

#1420

#1427

#1432

#1433

#1434

#1435

#1436

#1438

#144

#1441

#1441

#1443

#1443

#1447

#1448

#1451

#1452

#1454

#1455

#1455

#1456

#1456

#1457

#1458

#146

#1460

#1463

#1464

#1467

#147

#1475

#1476

#1477

#1479

#148

#1480

#1481

#1482

#1487

#1488

#149

#149

#1494

#1497

#1498

#150

#1500

#1504

#1506

#1511

#152

#1520

#1529

#1534

#1545

#1546

#1550

#1551

#1556

#156

#1560

#1563

#1564

#1565

#1568

#1568

#1576

#1577

#1578

#1579

#1580

#1581

#1584

#1588

#1590

#1590

#1603

#1603

#1605

#1606

#1611

#1616

#162

#1620

#1625

#1628

#1628

#1629

#163

#1632

#1633

#1634

#1635

#1636

#1639

#164

#1641

#1642

#1643

#1644

#1644

#1646

#1646

#1648

#1650

#1651

#1652

#1652

#1653

#1654

#1655

#166

#1662

#167

#1670

#1671

#1672

#1673

#1674

#1675

#1676

#1679

#168

#1680

#1684

#1684

#1688

#1689

#1693

#1698

#170

#1702

#1703

#1712

#1716

#1716

#1717

#1720

#1721

#1728

#173

#1731

#1734

#1741

#1742

#1748

#1752

#1754

#1761

#1768

#1770

#1773

#1773

#1775

#178

#1787

#1789

#1790

#1791

#1793

#1795

#1798

#1799

#1800

#1804

#1809

#1812

#1813

#1814

#1817

#1823

#1823

#1827

#1829

#1830

#1836

#1841

#1848

#1853

#1855

#1856

#1856

#1863

#1866

#1869

#1876

#188

#1882

#1882

#1883

#1884

#1884

#1886

#1891

#1892

#1893

#1895

#1899

#1900

#1900

#1905

#1908

#191

#191

#1913

#192

#1920

#1920

#1929

#193

#1932

#1942

#1943

#1947

#1948

#1949

#1950

#1954

#1955

#1958

#1958

#1960

#1965

#1965

#1970

#1976

#2001

#2002

#2008

#201

#2012

#2013

#2015

#2017

#202

#202

#2024

#2033

#2034

#2035

#2038

#2043

#2043

#2044

#2045

#2051

#2054

#2055

#2063

#2064

#2067

#2069

#207

#2074

#2077

#2078

#2079

#2081

#2083

#2090

#21

#2105

#2106

#2109

#2115

#212

#212

#2125

#2126

#2137

#2138

#214

#214

#2151

#2153

#2156

#2157

#2158

#2159

#2162

#2163

#2170

#2182

#2190

#2191

#2192

#2192

#2193

#2193

#2194

#2198

#2199

#220

#220

#2201

#2202

#2203

#2204

#2207

#2208

#2216

#2218

#2219

#2220

#2220

#2226

#2227

#2236

#2241

#2244

#2247

#2248

#2249

#2252

#2253

#2258

#2258

#2259

#2259

#2260

#2260

#2261

#2262

#2262

#2263

#2268

#227

#227

#2270

#2271

#2275

#2281

#2287

#2293

#2296

#2298

#2298

#2299

#230

#2301

#2304

#2305

#2306

#2308

#2308

#2309

#2309

#2310

#2311

#2315

#2317

#2319

#2319

#232

#2322

#2325

#2328

#2329

#233

#2330

#2332

#2333

#2334

#2340

#2340

#2342

#2343

#2345

#2346

#2347

#2349

#2351

#2352

#2356

#2359

#2360

#2365

#2368

#2376

#2377

#2378

#2379

#2380

#2382

#2382

#2383

#2383

#2385

#2387

#2387

#2389

#239

#239

#2390

#2401

#2406

#2407

#2409

#2410

#2410

#2411

#2411

#2413

#2413

#2416

#2416

#2418

#2418

#242

#242

#2422

#2423

#2424

#2424

#2425

#2425

#2428

#2428

#2429

#2429

#2431

#2431

#2432

#2432

#2433

#2436

#2436

#2437

#2439

#244

#244

#2440

#2440

#2441

#2441

#2445

#2445

#248

#25

#25

#251

#251

#254

#260

#261

#269

#269

#274

#274

#275

#276

#276

#279

#282

#287

#288

#29

#297

#298

#300

#304

#306

#307

#310

#311

#311

#312

#313

#313

#317

#324

#324

#326

#332

#334

#336

#336

#338

#338

#34

#347

#348

#349

#349

#350

#350

#353

#363

#363

#365

#365

#366

#372

#377

#377

#38

#38

#392

#392

#396

#397

#397

#40

#403

#406

#409

#409

#410

#411

#412

#412

#413

#414

#414

#418

#419

#420

#421

#422

#423

#427

#429

#435

#435

#436

#437

#437

#439

#439

#442

#445

#45

#450

#451

#452

#460

#463

#47

#471

#476

#476

#477

#478

#479

#483

#483

#485

#485

#486

#49

#490

#490

#491

#491

#492

#494

#5

#502

#502

#507

#507

#510

#510

#512

#517

#523

#526

#528

#533

#536

#537

#540

#540

#544

#548

#549

#549

#550

#551

#571

#571

#572

#573

#580

#581

#583

#583

#584

#584

#587

#589

#596

#596

#597

#598

#599

#602

#605

#621

#624

#624

#630

#630

#632

#632

#634

#634

#636

#638

#638

#647

#65

#650

#650

#654

#66

#661

#664

#664

#665

#668

#674

#675

#678

#679

#679

#68

#685

#687

#687

#688

#69

#69

#699

#70

#708

#708

#709

#709

#712

#714

#714

#716

#718

#719

#719

#726

#727

#728

#73

#732

#733

#734

#735

#739

#739

#74

#743

#743

#744

#751

#754

#754

#755

#756

#757

#757

#760

#760

#763

#766

#767

#767

#768

#769

#77

#770

#770

#771

#772

#773

#774

#774

#775

#775

#776

#780

#780

#786

#787

#789

#791

#793

#794

#794

#795

#798

#80

#80

#804

#805

#805

#806

#808

#808

#810

#810

#811

#811

#818

#818

#821

#822

#823

#837

#840

#840

#846

#846

#857

#868

#868

#87

#870

#874

#874

#875

#876

#876

#879

#88

#880

#883

#883

#886

#887

#887

#889

#89

#891

#891

#894

#897

#897

#90

#900

#902

#904

#904

#906

#906

#908

#909

#914

#914

#917

#917

#92

#927

#931

#936

#938

#938

#939

#940

#946

#946

#947

#947

#948

#948

#949

#951

#952

#955

#955

#956

#956

#957

#957

#958

#958

#959

#959

#960

#961

#962

#962

#965

#97

#97

#970

#972

#974

#975

#975

#976

#976

#983

#984

#988

#992

#996

14.08-beta

v0.01

v0.02

v0.03

v0.04

v0.05

v0.06

v0.07

v0.08

v0.09

v0.10

v0.11

v0.11b

v0.12

v0.12b

v0.12c

v0.13a

v0.13b

v0.14

v0.15

v0.15-rc1

v0.15a

v0.16

v0.17

v0.17b

v0.17c

v0.18

v0.18b

v0.18c

v0.19

v0.19a

v0.19b

v0.20

v0.21

v0.21b

v0.21c

v0.22

v0.23

v0.23a

v0.24

v0.25

v0.26

v0.26b

v0.26c

v0.27

v0.28

v0.29

v0.30

v0.40

v0.41

v0.42

v0.42b

v0.43

v0.44

v0.45

v0.46

v0.47

v0.48

v0.50

v0.51

v0.52

v0.53

v0.53a

v0.54

v55

v56

v57

v57a

v60

v60.1

v61

v61.1

v62

v63

v64

v65

v66

v67

v68

v69

v69a

v69b

v70

Mono Color

• 8682aeb433 add a setup guide Joshua Tauberer 2014-07-06 11:09:09 -0400
• 49d5561933 when adding/removing mail addresses also update nginx's config Joshua Tauberer 2014-07-06 12:16:50 +0000
• 3fc22e1601 fix Digital Ocean recommendation, fixes #79, #80; thanks @konklone Joshua Tauberer 2014-06-30 20:46:49 +0000
• c8856f107d migrate the SSL certificates path for non-primary certs to a new layout using a new migration script Joshua Tauberer 2014-06-30 20:41:29 +0000
• 06ba25151f get_domain_ssl_files returned the wrong path for the CSR for PRIMARY_HOSTNAME Joshua Tauberer 2014-06-30 19:49:41 +0000
• b5aa1b0f31 walk the user through choosing the PRIMARY_HOSTNAME by first asking for their email address Joshua Tauberer 2014-06-30 10:20:58 -0400
• fed5959288 s/PUBLIC_HOSTNAME/PRIMARY_HOSTNAME/ throughout Joshua Tauberer 2014-06-30 09:15:36 -0400
• 6a1b701499 Merge 09ee64b437 into 0e8fe7f01d Eric Mill 2014-06-29 17:16:19 +0000
• 09ee64b437 Updates Digital Ocean details. Eric Mill 2014-06-29 13:15:49 -0400
• 573faa2bf5 install the backup script as a daily cron job Joshua Tauberer 2014-06-26 10:46:22 +0000
• 87f001a5d5 some comments Joshua Tauberer 2014-06-24 03:24:41 +0000
• f8cd2bb805 typo: www/default/index.html would be overwritten if it already exists Joshua Tauberer 2014-06-23 19:43:19 +0000
• 1dec8c65ce move the SSH password login check into whats_next.py (it used to be in start.sh and then moved to an unused script when it became a problem for Vagrant) Joshua Tauberer 2014-06-23 19:39:20 +0000
• 0e8fe7f01d Merge pull request #77 from konklone/patch-1 Joshua Tauberer 2014-06-23 14:15:33 -0400
• df9b4474ac fixes a typo, links to CC0, updates a link to be https Eric Mill 2014-06-23 14:12:46 -0400
• fb12f681dd improvements Joshua Tauberer 2014-06-23 12:10:29 +0000
• d4ce50de86 new tool to purchase and install a SSL certificate using Gandi.net's API Joshua Tauberer 2014-06-23 10:53:09 +0000
• dd8d248c5a initial commit of website Joshua Tauberer 2014-06-22 20:15:22 -0400
• 30c416ff6e rename the new checklist script to whats_next.py Joshua Tauberer 2014-06-23 00:11:24 +0000
• 5aa09c3f9b let the user override some DNS records in a different way Joshua Tauberer 2014-06-22 19:33:30 +0000
• 45e93f7dcc strengthen the cyphers and protocols allowed by Dovecot and Postfix submission Joshua Tauberer 2014-06-22 19:03:11 +0000
• 343886d818 add mail alias checks and other cleanup Joshua Tauberer 2014-06-22 16:28:55 +0000
• deab8974ec if we handle mail for both a domain and any subdomain, only create a zone for the domain and put the subdomain's DNS records in the main domain's zone file Joshua Tauberer 2014-06-22 16:24:15 +0000
• 4668367420 first pass at a management tool for checking what the user must do to finish his configuration: set NS records, DS records, sign his certificates, etc. Joshua Tauberer 2014-06-22 15:34:36 +0000
• ec6c7d84c1 dont ask for a CSR country code on second runs because the CSR is already generated and any new country code won't be used anyway Joshua Tauberer 2014-06-22 12:48:21 +0000
• 8076ce4ab9 Merge pull request #74 from mkropat/mgmt-auth Joshua Tauberer 2014-06-22 11:36:04 -0400
• 9e63ec62fb Cleanup: remove env dependency Michael Kropat 2014-06-22 08:55:19 -0400
• d100a790a0 Remove API_KEY_FILE setting Michael Kropat 2014-06-22 08:45:29 -0400
• 554a28479f Merge remote-tracking branch 'upstream/master' into mgmt-auth Michael Kropat 2014-06-21 21:29:25 -0400
• 064d75e261 Merge pull request #73 from mkropat/syslog-logging Joshua Tauberer 2014-06-21 21:22:27 -0400
• e70bc50432 README parallel sentence structure Joshua Tauberer 2014-06-22 00:34:49 +0000
• bb394242ef Update documentation to use API auth Michael Kropat 2014-06-22 00:07:14 +0000
• 88e496eba4 Update setup scripts to auth against the API Michael Kropat 2014-06-22 00:02:52 +0000
• 447399e8cd Update mail tool to pass api key auth Michael Kropat 2014-06-21 23:49:09 +0000
• 067052d4ea Add key-based authentication to management service Michael Kropat 2014-06-21 23:42:48 +0000
• 53e15eae15 Tell Flask to log to syslog Michael Kropat 2014-06-21 23:25:35 +0000
• 67d31ed998 move the SSL setup into its own bash script since it is used for much more than email now Joshua Tauberer 2014-06-21 22:15:53 +0000
• 0ab43ef4fd have webfinger output a JSON file in STORAGE_ROOT/webfinger/(acct/..) Joshua Tauberer 2014-06-21 17:08:18 +0000
• 326cc2a451 obviously put our stuff in /usr/local and not /usr Joshua Tauberer 2014-06-21 12:35:00 -0400
• d3cacd4a11 update test_dns Joshua Tauberer 2014-06-19 18:47:41 -0400
• 87b0608f15 test_dns: DNSSEC signing inserts empty text string components Joshua Tauberer 2014-06-17 17:34:26 -0400
• 85169dc960 preliminary support for webfinger Joshua Tauberer 2014-06-20 01:54:59 +0000
• 5faa1cae71 manage the nginx conf in the management daemon too so we can have nginx operate on all domains that we serve mail for Joshua Tauberer 2014-06-20 01:16:38 +0000
• a1a80b295e update docs a bit Joshua Tauberer 2014-06-18 23:12:05 -0400
• 94a140a27a linkify README Joshua Tauberer 2014-06-18 23:04:06 -0400
• 126ea94ccf drop support for ADSP which since last November is no longer recommended per http://datatracker.ietf.org/doc/status-change-adsp-rfc5617-to-historic/ Joshua Tauberer 2014-06-18 22:56:55 -0400
• 0f72f78eea add DNSSEC/DANE TLSA to the README Joshua Tauberer 2014-06-19 02:19:05 +0000
• 782ad04b10 use DANE when sending mail: if the recipient MX has a DANE TLSA record in DNS then Postfix will necessarily encrypt the mail in transport Joshua Tauberer 2014-06-19 01:58:14 +0000
• 95e61bc110 add DANE TLSA records to the PUBLIC_HOSTNAME's DNS Joshua Tauberer 2014-06-19 01:39:27 +0000
• 699bccad80 missing spaces in nsd.conf (has no effect but looks proper) Joshua Tauberer 2014-06-18 23:53:52 +0000
• afb6c26c8b run bind9 on the loopback interface for ensuring we are using a DNSSEC-aware nameserver to resolve our own DNS queries (i.e. when sending mail) since we can't trust that the network configuration provided for us gives us a DNSSEC-aware DNS server Joshua Tauberer 2014-06-18 19:41:35 -0400
• 761fac729b nsd.conf wasn't properly using the signed zone files Joshua Tauberer 2014-06-18 23:30:35 +0000
• dd15bf4384 use a better sort order for records in DNS zone files Joshua Tauberer 2014-06-17 23:34:06 +0000
• 14396e58f8 dont create a separate zone for PUBLIC_HOSTNAME if it is a subdomain of another zone (hmm, this is a general principle that could apply to any two domains the box is serving) Joshua Tauberer 2014-06-17 23:30:00 +0000
• 33f06f29c1 let the user override some DNS records Joshua Tauberer 2014-06-17 21:39:26 +0000
• 88709506f8 add DNSSEC Joshua Tauberer 2014-06-17 22:21:12 +0000
• 1ca7c0c6e1 Update README.md jordanrinke 2014-06-13 12:52:21 -0700
• 3560bfedb7 add ipset save/load/flush jordanrinke 2014-06-13 12:51:41 -0700
• 5dd3f71343 Initial commit jordanrinke 2014-06-13 12:41:04 -0700
• aaa735dbfe write nsd.conf zones in a predictable order so that we don't keep rewriting it Joshua Tauberer 2014-06-12 22:28:37 -0400
• e9cde52a48 two more cases of shelling out external programs in a more secure way, see cecda9cec5 Joshua Tauberer 2014-06-12 21:06:04 -0400
• c925f72b0b remove obsoleted parts of setup/dns.sh Joshua Tauberer 2014-06-12 20:18:53 -0400
• e18c51293d update News Challenge status in README Joshua Tauberer 2014-06-10 18:48:09 -0400
• d28d07f78e increase the postfix message size limit from 10MB to 128MB Joshua Tauberer 2014-06-10 10:21:43 +0000
• cad868c6c9 reorganize mail.sh a little Joshua Tauberer 2014-06-10 10:19:49 +0000
• 8bd62aa3bc increase duplicity's volume size from the default of 25MB to 100MB so we create fewer files Joshua Tauberer 2014-06-09 13:47:41 +0000
• 5490142df5 re-do the backup script to use the duplicity program Joshua Tauberer 2014-06-09 09:34:52 -0400
• cecda9cec5 management: shell out external programs in a more secure way Joshua Tauberer 2014-06-09 08:09:45 -0400
• 93be8d9f67 Create dshield_auto.sh Onder Vincent Koc 2014-06-09 12:03:27 +0100
• fbbce3c0fa Initial commit Onder Vincent Koc 2014-06-09 11:55:36 +0100
• 70bd96f643 Merge pull request #70 from mkropat/ipv6-support Joshua Tauberer 2014-06-08 19:03:33 -0400
• fb957d2de7 Populate default values before echoing help text Michael Kropat 2014-06-08 18:44:08 -0400
• cd1802fecc Filter privacy-sensitive headers on outgoing mail Joshua Tauberer 2014-06-08 17:30:37 -0400
• ae67409603 Support dual-stack IPv4/IPv6 mail servers Michael Kropat 2014-06-08 18:32:52 -0400
• 2c4212fa36 use editconf.py to mangle /etc/postfix/master.cf Joshua Tauberer 2014-06-08 17:23:06 -0400
• 5b72e5419d fix shebang lines in the tests to take advantage of any activated python environment Joshua Tauberer 2014-06-08 17:22:52 -0400
• ad520b45ff adding a new script archive_conf_files.sh to dump the contents of all files modified by editconf.py so testing is easier Joshua Tauberer 2014-06-08 17:21:13 -0400
• eeebc3de70 Merge bb63d5774a into ca34c1b1ae Michael Kropat 2014-06-08 20:33:36 +0000
• bb63d5774a Remove submission options configuration Michael Kropat 2014-06-08 16:31:51 -0400
• d904feb399 Filter privacy-sensitive headers on outgoing mail Michael Kropat 2014-06-08 15:18:36 -0400
• ca34c1b1ae Merge pull request #68 from mkropat/protect-key Joshua Tauberer 2014-06-07 20:19:40 -0400
• 42bf624045 Protect private key from being world-readable Michael Kropat 2014-06-07 19:40:50 -0400
• 3fa8e384d4 improve hostname/IP default values Joshua Tauberer 2014-06-07 14:57:22 -0400
• b60ca25e53 add comments to the new get_default_hostname etc. functions, and simplify the logic in the Vagrantfile and start.sh so that we always call into the same two functions Joshua Tauberer 2014-06-07 14:55:57 -0400
• 43ef49c737 Improve hostname/IP default values Michael Kropat 2014-06-07 13:54:58 -0400
• add1545deb Merge pull request #65 from mkropat/mkropat/password-mask Joshua Tauberer 2014-06-06 17:18:33 -0400
• 5774205bc2 Mask password input on stdin Michael Kropat 2014-06-06 17:07:30 -0400
• 242cadebc8 allow dashes in emails during validation, and for aliases allow a much wider range of characters, fixes #64 Joshua Tauberer 2014-06-06 09:58:58 -0400
• f1dac1fe13 show less output when updating DNS configuration Joshua Tauberer 2014-06-06 08:41:57 -0400
• 389c354c8f Vagrant updates Joshua Tauberer 2014-06-06 08:20:26 -0400
• f9c3f33e74 move the SSH password login check out of setup because it interfers with Vagrant and into a separate script that we'll use for auditing in a later phase Joshua Tauberer 2014-06-06 08:17:49 -0400
• 6194c63f76 add management comments for checking for updated Ubuntu packages and applying updates Joshua Tauberer 2014-06-05 20:57:25 +0000
• cab7321dbb remove vestigal docker compatibility that prevented starting services during setup Joshua Tauberer 2014-06-04 20:04:26 -0400
• 295981828f Vagrantize Joshua Tauberer 2014-06-04 19:39:58 -0400
• 3961e1aec3 test_dns: more error handling Joshua Tauberer 2014-06-04 19:31:55 -0400
• 7fa4862f1a refactor dns_update so that the zone is first generated in a file-format agnostic way Joshua Tauberer 2014-06-04 19:00:31 -0400
• 8ed15168c0 the new dns_update totally forgot to write the OpenDKIM tables Joshua Tauberer 2014-06-04 18:44:13 -0400
• 2f0d036504 the bc package is no longer needed since redoing dns_update Joshua Tauberer 2014-06-04 17:27:01 -0400
• d6e6cfd3c9 mail test: catch typical connecting errors and display nicer output Joshua Tauberer 2014-06-04 17:13:06 -0400
• fff06f7d71 improve DNS test output Joshua Tauberer 2014-06-04 17:01:49 -0400