Gnous/mailcow
2
0
Fork 0
Code Issues Pull Requests 1 Packages Projects Releases Wiki Activity
7,506 Commits 2 Branches 0 Tags 48 MiB
2e176339ba
Commit Graph

7506 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
renovate[bot]
075959aea9
Update dependency composer/composer to v2.9.5 
Signed-off-by: milkmaker <milkmaker@mailcow.de>
 2026-02-12 11:09:08 +00:00
milkmaker
885ba2510e
Translations update from Weblate (#7055) 
* [Web] Updated lang.cs-cz.json

Co-authored-by: Filip Hajny <filip@hajny.net>
Co-authored-by: milkmaker <milkmaker@mailcow.de>

* [Web] Updated lang.ru-ru.json

Co-authored-by: Habetdin <15926758+Habetdin@users.noreply.github.com>

---------

Co-authored-by: Filip Hajny <filip@hajny.net>
Co-authored-by: Habetdin <15926758+Habetdin@users.noreply.github.com>
 2026-02-09 01:52:35 +01:00
Carlos Lapao
87563249f1
Add DNS-01 challenge variables to update migration for existing instances 
Existing mailcow installations were Not receiving the ACME_DNS_CHALLENGE,
ACME_DNS_PROVIDER, and ACME_ACCOUNT_EMAIL options when running update.sh,  as they were only defined in generate_config.sh for new installations.
 2026-02-07 13:02:55 +00:00
Jonathan Procter
fb1686065d
Add endpoint for editing quarantine mails 
Added endpoint to edit quarantine items with actions to release or learn as ham. Functionality already existed but was undocumented.
 2026-02-03 21:31:32 +00:00
milkmaker
0428f5c9bd
update postscreen_access.cidr (#7042) 2026-02-01 22:45:03 +01:00
milkmaker
a70c23065c
Translations update from Weblate (#7040) 
* [Web] Updated lang.vi-vn.json

Co-authored-by: Phu D. Nguyen <sillycat@duck.com>

* [Web] Updated lang.zh-tw.json

Co-authored-by: Proton Chang <protonmo@gmail.com>

* [Web] Updated lang.si-si.json

Co-authored-by: Matjaž Tekavec <matjaz@moj-svet.si>

---------

Co-authored-by: Phu D. Nguyen <sillycat@duck.com>
Co-authored-by: Proton Chang <protonmo@gmail.com>
Co-authored-by: Matjaž Tekavec <matjaz@moj-svet.si>
 2026-02-01 22:44:52 +01:00
FreddleSpl0it
caaa4a414d
[Web] Fix datatables search after PR #7022 2026-01-29 10:26:44 +01:00
FreddleSpl0it
c3d841340c
[Dovecot][PHP][SOGo] Update Images 2026-01-28 11:28:36 +01:00
FreddleSpl0it
2e8897c2cf
Merge branch 'staging' into fix/autodiscover-passwordless 2026-01-28 11:10:28 +01:00
FreddleSpl0it
b8cd00111f
Merge pull request #7007 from moregeek/feat/allow_preset_passwords 
feat: allow preset of passwords via environment vars
 2026-01-28 10:18:56 +01:00
FreddleSpl0it
81cda80651
Merge pull request #7021 from mailcow/feat/restrict-alias-sending 
[Postfix] Configurable send permissions for alias addresses
 2026-01-28 10:03:02 +01:00
FreddleSpl0it
c1d4f04c22
Merge branch 'staging' into feat/restrict-alias-sending 2026-01-28 10:02:03 +01:00
FreddleSpl0it
82276cd1ca
Merge pull request #7022 from mailcow/feat/eas-dav-access 
[Web] Allow admins to limit EAS and DAV access for mailbox users
 2026-01-28 09:54:47 +01:00
FreddleSpl0it
56ea4302ed
[Web] Allow admins to limit EAS and DAV access for mailbox users 2026-01-28 09:49:33 +01:00
FreddleSpl0it
c06112b26e
[Postfix] Configurable send permissions for alias addresses 2026-01-27 09:05:51 +01:00
FreddleSpl0it
aa5a4f0998
Merge pull request #6710 from mailcow/renovate/tianon-gosu-1.x 
chore(deps): update dependency tianon/gosu to v1.19
 2026-01-27 08:09:31 +01:00
FreddleSpl0it
bf4f471cfd
Merge pull request #6837 from mailcow/renovate/php-memcached-dev-php-memcached-3.x 
chore(deps): update dependency php-memcached-dev/php-memcached to v3.4.0
 2026-01-27 08:08:50 +01:00
FreddleSpl0it
978bff9dbc
Merge pull request #6867 from DiscoNova/feat/possible-to-disable-logins-from-autoprotocol-domains 
[Web] Disable login UI on autoprotocol domains
 2026-01-27 08:08:12 +01:00
FreddleSpl0it
869d9af7dd
Merge pull request #6901 from mailcow/renovate/phpredis-phpredis-6.x 
chore(deps): update dependency phpredis/phpredis to v6.3.0
 2026-01-27 08:05:58 +01:00
FreddleSpl0it
af10499ecb
Merge pull request #6927 from mailcow/renovate/imagick-imagick-3.x 
chore(deps): update dependency imagick/imagick to v3.8.1
 2026-01-27 08:04:51 +01:00
FreddleSpl0it
a1a4d8ff98
Merge pull request #6947 from mailcow/renovate/krakjoe-apcu-5.x 
chore(deps): update dependency krakjoe/apcu to v5.1.28
 2026-01-27 08:04:24 +01:00
FreddleSpl0it
95d61e8aa2
Merge pull request #6980 from bluewalk/feat/issue-6489 
Configurable displayName(s) - Fixes issue #6489
 2026-01-27 08:02:20 +01:00
FreddleSpl0it
ec8dd1a54f
Merge pull request #6990 from psuet/mobileconfig-with-password-complexity 
fix: Password for mobileconfig that conforms to password-complexity policy
 2026-01-27 07:56:35 +01:00
milkmaker
382ee34d0e
[Web] Updated lang.hu-hu.json (#7020) 
Co-authored-by: Sándor <me-github@sandros.hu>
 2026-01-26 20:15:47 +01:00
milkmaker
0999c9e9ab
Translations update from Weblate (#7014) 
* [Web] Updated lang.zh-cn.json

Co-authored-by: 雨 <luotianyi@luotianyi.me>

* [Web] Updated lang.pl-pl.json

Co-authored-by: Monika Bark <rychert.monika@wp.pl>
Co-authored-by: milkmaker <milkmaker@mailcow.de>

---------

Co-authored-by: 雨 <luotianyi@luotianyi.me>
Co-authored-by: Monika Bark <rychert.monika@wp.pl>
 2026-01-23 22:02:55 +01:00
Stefan Morgenthaler
c485968e7f
feat: allow preset of passwords via environment vars 
Signed-off-by: Stefan Morgenthaler <dev@morgenthaler.at>
 2026-01-14 11:42:15 +01:00
milkmaker
e727620bd3
Translations update from Weblate (#7002) 
* [Web] Updated lang.zh-cn.json

Co-authored-by: ガラスのような夢 <i@msdnicrosoft.work>

* [Web] Updated lang.pl-pl.json

Co-authored-by: Monika Bark <rychert.monika@wp.pl>

---------

Co-authored-by: ガラスのような夢 <i@msdnicrosoft.work>
Co-authored-by: Monika Bark <rychert.monika@wp.pl>
 2026-01-07 17:23:31 +01:00
milkmaker
71fa3ecebc
update postscreen_access.cidr (#6987) 2026-01-07 17:22:01 +01:00
Paul Sütterlin
70101d1187
fix: Password for mobileconfig that conforms to password-complexity policy 2026-01-01 16:57:21 +01:00
bluewalk
c060c205d3 Fixes issue #6489 2025-12-21 16:56:16 +01:00
DerLinkman
5ca900749c
autodiscover: use generalized error logging instead of specific to prevent user enumeration 2025-12-18 16:54:45 +01:00
DerLinkman
b005803fe0
Add autodiscover debug script with domain override support 
- Add view_autodiscover.sh helper script for testing autodiscover responses
- Support -h/--help flag for usage information
- Support -d/--domain flag to override autodiscover target (useful for testing)
- Auto-detect xmllint availability for formatted output
- Email validation with regex
- Interactive mode if no email provided
- Display response length for debugging
 2025-12-17 14:27:53 +01:00
DerLinkman
ec77406dba
Fix autodiscover.php: Use random error IDs and fix SQL type casting 
- Replace hardcoded error IDs with random values (1-10 billion range) for better debugging
- Cast SimpleXMLElement email to string before SQL query to prevent type errors
- Qualify ambiguous 'active' column with table names in JOIN query
- Add proper error XML response for database errors instead of die()
- Ensure all error paths return complete XML documents
 2025-12-17 14:27:38 +01:00
DerLinkman
ee15721550
feat: implement passwordless autodiscover endpoint 
- Remove HTTP Basic Authentication requirement from autodiscover.php
- Extract email address from XML request body instead of AUTH headers
- Validate mailbox existence and active status before returning config
- Improve security by eliminating password transmission
- Add comprehensive error handling for invalid/inactive mailboxes
- Follow industry standards (Microsoft, Google, Apple)
- Maintain backward compatibility with existing email clients
- Keep full logging functionality in Redis AUTODISCOVER_LOG

This change enhances security while improving user experience and
follows modern email client configuration best practices.
 2025-12-17 13:39:05 +01:00
Copilot
038b2efb75
Add MTA-STS support for alias domains (#6972) 
* Initial plan

* Add MTA-STS support for alias domains

Co-authored-by: DerLinkman <62480600+DerLinkman@users.noreply.github.com>

* Improve domain normalization and code style in mta-sts.php

Co-authored-by: DerLinkman <62480600+DerLinkman@users.noreply.github.com>

* Add error handling for idn_to_ascii in mta-sts.php

Co-authored-by: DerLinkman <62480600+DerLinkman@users.noreply.github.com>

* Add database error handling for alias domain query

Co-authored-by: DerLinkman <62480600+DerLinkman@users.noreply.github.com>

* Add ACME certificate support for MTA-STS on alias domains

Query alias_domain table to find aliases with MTA-STS enabled target domains and request certificates for mta-sts.<alias-domain> subdomains.

Co-authored-by: DerLinkman <62480600+DerLinkman@users.noreply.github.com>

* compose: bump image tag to 1.95

* Add MTA-STS DNS records display for alias domains in UI

When viewing an alias domain's DNS diagnostics, check if the target domain has MTA-STS enabled and display the required DNS records for the alias domain.

Co-authored-by: DerLinkman <62480600+DerLinkman@users.noreply.github.com>

---------

Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: DerLinkman <62480600+DerLinkman@users.noreply.github.com>
Co-authored-by: DerLinkman <niklas.meyer@servercow.de>
 2025-12-15 16:29:21 +01:00
DerLinkman
1fe4cd03e9
ui: fix global filters ui tickbox reappearing (#6966) 2025-12-12 16:01:18 +01:00
milkmaker
12e02e67ff
Translations update from Weblate (#6965) 
* [Web] Updated lang.fr-fr.json

Co-authored-by: Keo <contact@kbl.netlib.re>

* [Web] Updated lang.pt-pt.json

Co-authored-by: Germano Pires Ferreira <germanopires@gmail.com>
Co-authored-by: milkmaker <milkmaker@mailcow.de>

* [Web] Updated lang.pl-pl.json

Co-authored-by: Monika Bark <rychert.monika@wp.pl>

---------

Co-authored-by: Keo <contact@kbl.netlib.re>
Co-authored-by: Germano Pires Ferreira <germanopires@gmail.com>
Co-authored-by: Monika Bark <rychert.monika@wp.pl>
 2025-12-12 15:21:04 +01:00
DerLinkman
b6f57dfb78
rspamd: update to 3.14.2 2025-12-12 14:06:49 +01:00
Copilot
3ebf2c2d2d
Prevent duplicate/plaintext login announcement rendering (#6963) 
* Initial plan

* Fix duplicate login announcement display

Co-authored-by: DerLinkman <62480600+DerLinkman@users.noreply.github.com>

---------

Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: DerLinkman <62480600+DerLinkman@users.noreply.github.com>
 2025-12-12 12:34:20 +01:00
DerLinkman
1bac6f1ee7
ofelia: revert fixed cron syntax for sa-rules download 2025-12-11 13:29:11 +01:00
DerLinkman
67e7acd6bd
rspamd: upgrade to 3.14.1, trixie rebuild + bcc forwarded hosts fix (#6958) 
* rspamd: fix bcc + subadress handling when using forward hosts

* rspamd: build against trixie + use version 3.14.1
 2025-12-11 09:45:56 +01:00
renovate[bot]
910ce573d6
chore(deps): update peter-evans/create-pull-request action to v8 (#6953) 2025-12-10 19:48:02 +01:00
renovate[bot]
689336b3e1
chore(deps): update dependency tianon/gosu to v1.19 
Signed-off-by: milkmaker <milkmaker@mailcow.de>
 2025-12-10 10:41:59 +00:00
renovate[bot]
01cf72cdef
chore(deps): update dependency phpredis/phpredis to v6.3.0 
Signed-off-by: milkmaker <milkmaker@mailcow.de>
 2025-12-10 10:41:54 +00:00
renovate[bot]
4cdb97c699
chore(deps): update dependency php-memcached-dev/php-memcached to v3.4.0 
Signed-off-by: milkmaker <milkmaker@mailcow.de>
 2025-12-10 10:41:50 +00:00
renovate[bot]
1bd795a9c6
chore(deps): update dependency krakjoe/apcu to v5.1.28 
Signed-off-by: milkmaker <milkmaker@mailcow.de>
 2025-12-10 10:41:42 +00:00
renovate[bot]
39f29e6c30
chore(deps): update dependency imagick/imagick to v3.8.1 
Signed-off-by: milkmaker <milkmaker@mailcow.de>
 2025-12-10 10:41:38 +00:00
Ashitaka
1ab6af21e3
Merge pull request #6905 from Ashitaka57/6646-pbkdf2-sha512-verify-hash 
Support for PBKDF2-SHA512 hash algorithm in verify_hash() (FreeIPA compatibility) (issue 6646)
 2025-12-10 11:41:06 +01:00
DerLinkman
5d95c48e0d
backup: add image prefetch function to verify latest image is used 2025-12-10 08:43:04 +01:00
DerLinkman
dbb9e474b0
pf-tlspol: upgrade to 1.8.22 (#6951) 
* postfix-tlspol: upgrade to 1.8.20

* pf-tlspol: update to 1.8.22
 2025-12-09 13:25:50 +01:00