mailcow

Author	SHA1	Message	Date
SYNLINQ	7d17715e2e	Update Dockerfile install unbound package from alpine:edge	2026-05-22 16:26:47 +02:00
milkmaker	4f2348631a	[Web] Updated lang.pl-pl.json (#7245 ) Co-authored-by: Adrian-Kozien <adrian@kozien.net>	2026-05-21 17:16:34 +02:00
FreddleSpl0it	22ae1f5363	Merge pull request #7241 from mailcow/fix/quarantinetable escape HTML in quarantine table	2026-05-20 18:02:19 +02:00
FreddleSpl0it	cbd3d8b9bc	escape HTML in quarantine table	2026-05-20 17:53:47 +02:00
FreddleSpl0it	f553f38635	[Nginx] Update to 1.30.1	2026-05-20 17:24:41 +02:00
renovate[bot]	104af58628	Update dependency php/pecl-mail-mailparse to v3.2.0 Signed-off-by: milkmaker <milkmaker@mailcow.de>	2026-05-14 18:33:03 +00:00
Jahongir Qurbonov	4ddcee28e4	Add Uzbek language (#7224 )	2026-05-13 16:42:38 +02:00
milkmaker	b0d16bbcee	[Web] Updated lang.pt-br.json (#7228 ) Co-authored-by: Edson Wolf <edsonwolf@vivaldi.net>	2026-05-13 16:42:03 +02:00
FreddleSpl0it	ff3d571054	[SOGo] Update to 5.12.8	2026-05-13 10:31:23 +02:00
FreddleSpl0it	a8e945f3da	Merge pull request #7220 from mailcow/fix/06052026 [Web] escape HTML in sieve filter edit view and queue manager	2026-05-12 08:36:36 +02:00
FreddleSpl0it	33547d1d73	[Web] escape HTML in sieve filter edit view and queue manager	2026-05-12 08:31:51 +02:00
milkmaker	539c32d99c	Translations update from Weblate (#7218 ) * [Web] Updated lang.az-az.json Co-authored-by: Nemoralis <nemoralis@duck.com> * [Web] Updated lang.nl-nl.json Co-authored-by: Tom18314 <tomstokmans5@gmail.com> * [Web] Updated lang.pl-pl.json Co-authored-by: pmuch78 <pawel@prolin.pl> --------- Co-authored-by: Nemoralis <nemoralis@duck.com> Co-authored-by: Tom18314 <tomstokmans5@gmail.com> Co-authored-by: pmuch78 <pawel@prolin.pl>	2026-05-08 16:46:10 +02:00
milkmaker	d42c3823c4	update postscreen_access.cidr (#7209 )	2026-05-02 19:15:14 +02:00
FreddleSpl0it	8ead057ce9	[Web] Create default mailbox template with eas and dav access	2026-04-15 09:33:23 +02:00
milkmaker	886dbcc419	Translations update from Weblate (#7190 ) * [Web] Updated lang.az-az.json [Web] Added lang.az-az.json Co-authored-by: Nemoralis <nemoralis@duck.com> Co-authored-by: Peter <magic@kthx.at> Co-authored-by: milkmaker <milkmaker@mailcow.de> * [Web] Updated lang.si-si.json Co-authored-by: Matjaž Tekavec <matjaz@moj-svet.si> * [Web] Updated lang.pt-br.json Co-authored-by: André Ribas <andre@ribassu.com> --------- Co-authored-by: Nemoralis <nemoralis@duck.com> Co-authored-by: Peter <magic@kthx.at> Co-authored-by: Matjaž Tekavec <matjaz@moj-svet.si> Co-authored-by: André Ribas <andre@ribassu.com>	2026-04-11 21:25:03 +02:00
Dmitriy Alekseev	b0873edb6a	Update RSPAMD version in Dockerfile	2026-04-06 17:28:32 +02:00
Dmitriy Alekseev	694d751915	Update RSPAMD version in Dockerfile	2026-04-06 17:28:14 +02:00
milkmaker	dc15994d40	update postscreen_access.cidr (#7177 )	2026-04-02 11:50:05 +02:00
Dmitriy Alekseev	08278a8be9	Update RSPAMD version to 4.0.0 in Dockerfile	2026-03-30 23:51:05 +02:00
FreddleSpl0it	5a00b5124b	[Web][Dovecot] Add parameterized queries and input validation for quarantine_category	2026-03-29 12:08:45 +02:00
FreddleSpl0it	8c039f694f	Improve template URI escaping and parameter handling	2026-03-19 12:48:43 +01:00
FreddleSpl0it	95bf46c1e4	escape HTML in autodiscover logs	2026-03-19 12:44:50 +01:00
FreddleSpl0it	edde35156d	escape HTML in qitem details	2026-03-19 12:44:30 +01:00
FreddleSpl0it	84e3c32f13	escape HTML in last logins	2026-03-19 12:44:00 +01:00
FreddleSpl0it	ecb848493b	add missing object-level access control	2026-03-19 12:42:45 +01:00
FreddleSpl0it	8a65b9d1c6	add missing access control	2026-03-19 12:41:47 +01:00
FreddleSpl0it	ed9264fd2a	[Web] Allow force_tfa for LDAP and Keycloak users	2026-03-13 14:13:25 +01:00
FreddleSpl0it	7817dda43f	[ACME] Skip subdomains covered by wildcards (DNS-01 challenge only)	2026-03-13 13:08:18 +01:00
FreddleSpl0it	127fb1e8f5	[ACME] Skip autodiscover/mta-sts subdomains covered by wildcard certificates	2026-03-13 12:35:22 +01:00
milkmaker	09f09cb850	[Web] Updated lang.hu-hu.json (#7130 )	2026-03-12 15:01:54 +01:00
FreddleSpl0it	d4bf377a96	Merge pull request #7121 from rezzorix/fix/theme-localstorage-staging Fix theme localStorage collision with rspamd UI	2026-03-12 07:47:03 +01:00
FreddleSpl0it	abd6fe8c79	Merge pull request #7124 from mailcow/fix/7112 [ACME] Fix wildcard certificate conflict with MAILCOW_HOSTNAME	2026-03-12 07:46:02 +01:00
rezzorix	03eccd4e42	added/fix: use mailcow_theme in bundled dark mode JS	2026-03-12 14:11:31 +08:00
FreddleSpl0it	1da8d1c894	[ACME] Fix wildcard certificate conflict with MAILCOW_HOSTNAME	2026-03-11 09:33:16 +01:00
FreddleSpl0it	d1feebf164	[Web] Fix LDAP/Keycloak login TypeError - missing JSON decode for attributes	2026-03-11 09:18:03 +01:00
rezzorix	293b885a85	Fix theme localStorage collision with rspamd UI	2026-03-11 13:32:53 +08:00
FreddleSpl0it	33acf56526	[SOGo] Add ActiveSync support	2026-03-10 13:13:00 +01:00
FreddleSpl0it	e7ea3aa608	[SOGo] Fix draft folder creation by adding /var/spool/sogo directory	2026-03-10 10:31:50 +01:00
FreddleSpl0it	2e176339ba	[Watchdog] Fix Nagios MariaDB client SSL compatibility with Alpine 3.23	2026-03-10 10:01:18 +01:00
FreddleSpl0it	8f883f3d37	Rename dns-101 to dns-01	2026-03-09 15:27:33 +01:00
FreddleSpl0it	8760e7e5db	[Rspamd] Update to 3.14.3-1	2026-03-09 07:59:34 +01:00
FreddleSpl0it	e848226062	[SOGo] Update paths from /usr/lib/ to /usr/local/lib/	2026-03-06 16:26:13 +01:00
FreddleSpl0it	efaeb77e13	Merge pull request #7093 from mailcow/fix/7054 [SOGo][Web] use incremental updates for mailbox/alias/resource sync in sogo_static_view	2026-03-06 09:23:00 +01:00
FreddleSpl0it	6c857243ec	[SOGo] Update to 5.12.5	2026-03-06 09:18:10 +01:00
milkmaker	6012cf4486	[Web] Updated lang.nl-nl.json (#7095 ) Co-authored-by: Tom18314 <tomstokmans5@gmail.com>	2026-03-04 23:03:02 +01:00
FreddleSpl0it	fe71f84c82	[SOGo] Fix custom UI patches after moving to source-compiled SOGo	2026-03-04 14:55:52 +01:00
FreddleSpl0it	97312c1a9d	Update alpine images to 3.23	2026-03-04 13:35:11 +01:00
FreddleSpl0it	dcbea71e67	[ACME] auto-create DNS-01 config template on startup	2026-03-04 11:42:40 +01:00
FreddleSpl0it	4e33c7143f	[SOGo][Web] use incremental updates for mailbox/alias/resource sync in sogo_static_view	2026-03-04 11:16:48 +01:00
milkmaker	4c184b25f4	Translations update from Weblate (#7091 ) * [Web] Language file updated by 'Cleanup translation files' addon Co-authored-by: milkmaker <milkmaker@mailcow.de> * [Web] Updated lang.si-si.json Co-authored-by: Matjaž Tekavec <matjaz@moj-svet.si> --------- Co-authored-by: Matjaž Tekavec <matjaz@moj-svet.si>	2026-03-03 20:25:24 +01:00
FreddleSpl0it	ddc2309f1e	Merge pull request #7089 from mailcow/fix/7039 [Web] switch from GET to POST for datatable requests	2026-03-03 15:07:17 +01:00
FreddleSpl0it	d40252ccce	[Web] Add missing EAS and DAV protocol options to mailbox bulk actions	2026-03-03 14:39:41 +01:00
FreddleSpl0it	4abb5cbfab	Merge pull request #7086 from mailcow/feat/sogo-build [SOGo] Build SOGo from source with security patches	2026-03-03 14:24:29 +01:00
FreddleSpl0it	b695936273	Merge pull request #6912 from cjlapao/feat-acme-dns acme: add DNS challenges	2026-03-03 14:23:28 +01:00
DerLinkman	d9463c7950	sogo: shrinked image file by ~50%	2026-03-03 14:14:32 +01:00
FreddleSpl0it	579542381a	Merge pull request #7060 from jovobe/staging Bump alpine version of netfilter	2026-03-03 14:06:01 +01:00
FreddleSpl0it	ce5659f300	Merge pull request #7082 from JeremieCrinon/fix/show-stopped-containers-api-and-dashboard fix: show stopped and failed containers in dashboard and API	2026-03-03 14:01:03 +01:00
FreddleSpl0it	1967cb642f	Merge pull request #6457 from mailcow/renovate/composer-composer-2.x chore(deps): update dependency composer/composer to v2.9.5	2026-03-03 13:38:32 +01:00
FreddleSpl0it	ba0eb04ebe	Merge pull request #6695 from maxi322/feature/check_dns_improvement check_dns: better time measurement	2026-03-03 13:31:23 +01:00
FreddleSpl0it	609ce6b0d6	Merge pull request #6976 from mailcow/fix/autodiscover-passwordless feat: Implement passwordless autodiscover endpoint	2026-03-03 13:25:16 +01:00
FreddleSpl0it	af61e2d303	[Web] Add fail2ban logging to passwordless autodiscover endpoint	2026-03-03 13:24:44 +01:00
FreddleSpl0it	c6e3f517e1	Merge pull request #7047 from jonprocter/staging Document qitem endpoint in openapi.yaml for editing quarantine mails	2026-03-03 13:11:43 +01:00
FreddleSpl0it	c033cd6254	Merge pull request #7077 from mailcow/feat/force-tfa [Web] Add forced 2FA setup and password update enforcement	2026-03-03 13:01:16 +01:00
FreddleSpl0it	7562578b74	[SOGo] Build SOGo from source with security patches	2026-03-03 11:24:42 +01:00
FreddleSpl0it	43f570e761	[Web] switch from GET to POST for datatable requests	2026-03-03 08:10:16 +01:00
DocFraggle	5e478a32df	Fix lua script sub-addressing (#7037 ) * Fix lua script sub-addressing * Fix subject tagging in rspamd.local.lua as well --------- Co-authored-by: Hailer, Christian <christian.hailer@interhyp.de> Co-authored-by: DocFraggle <drfraggle@drfraggleshome.de>	2026-03-02 15:49:11 +01:00
milkmaker	22c94a4d2f	update postscreen_access.cidr (#7084 )	2026-03-01 13:30:57 +01:00
Jérémie Crinon	99dc0f6616	fix: show stopped and failed containers in dashboard and API	2026-02-27 13:41:36 +01:00
FreddleSpl0it	96d4802cb2	[Web] Switch QR code generation from external API to local library and fix composer.json/lock mismatch	2026-02-24 11:02:47 +01:00
FreddleSpl0it	ad5b94af5e	[Web] Add forced 2FA setup and password update enforcement	2026-02-24 10:44:33 +01:00
milkmaker	7fce984cac	[Web] Updated lang.lv-lv.json (#7069 ) Co-authored-by: Edgars Andersons <Edgars+Mailcow+Weblate@gaitenis.id.lv>	2026-02-19 22:15:32 +01:00
maxi322	1c52eaa3a4	check_dns: better time measurement alpine does not output ms using date, therefore we use perl to get a more accurate measurement of the dns response time. The script output is now even more similar to nagios check_dns.	2026-02-14 18:07:39 +01:00
Johan M. von Behren	c7e04b4146	Bump alpine version of netfilter Bump alpine from 3.21 to 3.23. Closes #7059	2026-02-13 14:26:27 +01:00
renovate[bot]	075959aea9	Update dependency composer/composer to v2.9.5 Signed-off-by: milkmaker <milkmaker@mailcow.de>	2026-02-12 11:09:08 +00:00
milkmaker	885ba2510e	Translations update from Weblate (#7055 ) * [Web] Updated lang.cs-cz.json Co-authored-by: Filip Hajny <filip@hajny.net> Co-authored-by: milkmaker <milkmaker@mailcow.de> * [Web] Updated lang.ru-ru.json Co-authored-by: Habetdin <15926758+Habetdin@users.noreply.github.com> --------- Co-authored-by: Filip Hajny <filip@hajny.net> Co-authored-by: Habetdin <15926758+Habetdin@users.noreply.github.com>	2026-02-09 01:52:35 +01:00
Jonathan Procter	fb1686065d	Add endpoint for editing quarantine mails Added endpoint to edit quarantine items with actions to release or learn as ham. Functionality already existed but was undocumented.	2026-02-03 21:31:32 +00:00
milkmaker	0428f5c9bd	update postscreen_access.cidr (#7042 )	2026-02-01 22:45:03 +01:00
milkmaker	a70c23065c	Translations update from Weblate (#7040 ) * [Web] Updated lang.vi-vn.json Co-authored-by: Phu D. Nguyen <sillycat@duck.com> * [Web] Updated lang.zh-tw.json Co-authored-by: Proton Chang <protonmo@gmail.com> * [Web] Updated lang.si-si.json Co-authored-by: Matjaž Tekavec <matjaz@moj-svet.si> --------- Co-authored-by: Phu D. Nguyen <sillycat@duck.com> Co-authored-by: Proton Chang <protonmo@gmail.com> Co-authored-by: Matjaž Tekavec <matjaz@moj-svet.si>	2026-02-01 22:44:52 +01:00
FreddleSpl0it	caaa4a414d	[Web] Fix datatables search after PR #7022	2026-01-29 10:26:44 +01:00
FreddleSpl0it	2e8897c2cf	Merge branch 'staging' into fix/autodiscover-passwordless	2026-01-28 11:10:28 +01:00
FreddleSpl0it	c1d4f04c22	Merge branch 'staging' into feat/restrict-alias-sending	2026-01-28 10:02:03 +01:00
FreddleSpl0it	82276cd1ca	Merge pull request #7022 from mailcow/feat/eas-dav-access [Web] Allow admins to limit EAS and DAV access for mailbox users	2026-01-28 09:54:47 +01:00
FreddleSpl0it	56ea4302ed	[Web] Allow admins to limit EAS and DAV access for mailbox users	2026-01-28 09:49:33 +01:00
FreddleSpl0it	c06112b26e	[Postfix] Configurable send permissions for alias addresses	2026-01-27 09:05:51 +01:00
FreddleSpl0it	aa5a4f0998	Merge pull request #6710 from mailcow/renovate/tianon-gosu-1.x chore(deps): update dependency tianon/gosu to v1.19	2026-01-27 08:09:31 +01:00
FreddleSpl0it	bf4f471cfd	Merge pull request #6837 from mailcow/renovate/php-memcached-dev-php-memcached-3.x chore(deps): update dependency php-memcached-dev/php-memcached to v3.4.0	2026-01-27 08:08:50 +01:00
FreddleSpl0it	978bff9dbc	Merge pull request #6867 from DiscoNova/feat/possible-to-disable-logins-from-autoprotocol-domains [Web] Disable login UI on autoprotocol domains	2026-01-27 08:08:12 +01:00
FreddleSpl0it	869d9af7dd	Merge pull request #6901 from mailcow/renovate/phpredis-phpredis-6.x chore(deps): update dependency phpredis/phpredis to v6.3.0	2026-01-27 08:05:58 +01:00
FreddleSpl0it	af10499ecb	Merge pull request #6927 from mailcow/renovate/imagick-imagick-3.x chore(deps): update dependency imagick/imagick to v3.8.1	2026-01-27 08:04:51 +01:00
FreddleSpl0it	a1a4d8ff98	Merge pull request #6947 from mailcow/renovate/krakjoe-apcu-5.x chore(deps): update dependency krakjoe/apcu to v5.1.28	2026-01-27 08:04:24 +01:00
FreddleSpl0it	95d61e8aa2	Merge pull request #6980 from bluewalk/feat/issue-6489 Configurable displayName(s) - Fixes issue #6489	2026-01-27 08:02:20 +01:00
FreddleSpl0it	ec8dd1a54f	Merge pull request #6990 from psuet/mobileconfig-with-password-complexity fix: Password for mobileconfig that conforms to password-complexity policy	2026-01-27 07:56:35 +01:00
milkmaker	382ee34d0e	[Web] Updated lang.hu-hu.json (#7020 ) Co-authored-by: Sándor <me-github@sandros.hu>	2026-01-26 20:15:47 +01:00
milkmaker	0999c9e9ab	Translations update from Weblate (#7014 ) * [Web] Updated lang.zh-cn.json Co-authored-by: 雨 <luotianyi@luotianyi.me> * [Web] Updated lang.pl-pl.json Co-authored-by: Monika Bark <rychert.monika@wp.pl> Co-authored-by: milkmaker <milkmaker@mailcow.de> --------- Co-authored-by: 雨 <luotianyi@luotianyi.me> Co-authored-by: Monika Bark <rychert.monika@wp.pl>	2026-01-23 22:02:55 +01:00
milkmaker	e727620bd3	Translations update from Weblate (#7002 ) * [Web] Updated lang.zh-cn.json Co-authored-by: ガラスのような夢 <i@msdnicrosoft.work> * [Web] Updated lang.pl-pl.json Co-authored-by: Monika Bark <rychert.monika@wp.pl> --------- Co-authored-by: ガラスのような夢 <i@msdnicrosoft.work> Co-authored-by: Monika Bark <rychert.monika@wp.pl>	2026-01-07 17:23:31 +01:00
milkmaker	71fa3ecebc	update postscreen_access.cidr (#6987 )	2026-01-07 17:22:01 +01:00
Paul Sütterlin	70101d1187	fix: Password for mobileconfig that conforms to password-complexity policy	2026-01-01 16:57:21 +01:00
bluewalk	c060c205d3	Fixes issue #6489	2025-12-21 16:56:16 +01:00
DerLinkman	5ca900749c	autodiscover: use generalized error logging instead of specific to prevent user enumeration	2025-12-18 16:54:45 +01:00
DerLinkman	ec77406dba	Fix autodiscover.php: Use random error IDs and fix SQL type casting - Replace hardcoded error IDs with random values (1-10 billion range) for better debugging - Cast SimpleXMLElement email to string before SQL query to prevent type errors - Qualify ambiguous 'active' column with table names in JOIN query - Add proper error XML response for database errors instead of die() - Ensure all error paths return complete XML documents	2025-12-17 14:27:38 +01:00
DerLinkman	ee15721550	feat: implement passwordless autodiscover endpoint - Remove HTTP Basic Authentication requirement from autodiscover.php - Extract email address from XML request body instead of AUTH headers - Validate mailbox existence and active status before returning config - Improve security by eliminating password transmission - Add comprehensive error handling for invalid/inactive mailboxes - Follow industry standards (Microsoft, Google, Apple) - Maintain backward compatibility with existing email clients - Keep full logging functionality in Redis AUTODISCOVER_LOG This change enhances security while improving user experience and follows modern email client configuration best practices.	2025-12-17 13:39:05 +01:00
Copilot	038b2efb75	Add MTA-STS support for alias domains (#6972 ) * Initial plan * Add MTA-STS support for alias domains Co-authored-by: DerLinkman <62480600+DerLinkman@users.noreply.github.com> * Improve domain normalization and code style in mta-sts.php Co-authored-by: DerLinkman <62480600+DerLinkman@users.noreply.github.com> * Add error handling for idn_to_ascii in mta-sts.php Co-authored-by: DerLinkman <62480600+DerLinkman@users.noreply.github.com> * Add database error handling for alias domain query Co-authored-by: DerLinkman <62480600+DerLinkman@users.noreply.github.com> * Add ACME certificate support for MTA-STS on alias domains Query alias_domain table to find aliases with MTA-STS enabled target domains and request certificates for mta-sts.<alias-domain> subdomains. Co-authored-by: DerLinkman <62480600+DerLinkman@users.noreply.github.com> * compose: bump image tag to 1.95 * Add MTA-STS DNS records display for alias domains in UI When viewing an alias domain's DNS diagnostics, check if the target domain has MTA-STS enabled and display the required DNS records for the alias domain. Co-authored-by: DerLinkman <62480600+DerLinkman@users.noreply.github.com> --------- Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com> Co-authored-by: DerLinkman <62480600+DerLinkman@users.noreply.github.com> Co-authored-by: DerLinkman <niklas.meyer@servercow.de>	2025-12-15 16:29:21 +01:00
DerLinkman	1fe4cd03e9	ui: fix global filters ui tickbox reappearing (#6966 )	2025-12-12 16:01:18 +01:00
milkmaker	12e02e67ff	Translations update from Weblate (#6965 ) * [Web] Updated lang.fr-fr.json Co-authored-by: Keo <contact@kbl.netlib.re> * [Web] Updated lang.pt-pt.json Co-authored-by: Germano Pires Ferreira <germanopires@gmail.com> Co-authored-by: milkmaker <milkmaker@mailcow.de> * [Web] Updated lang.pl-pl.json Co-authored-by: Monika Bark <rychert.monika@wp.pl> --------- Co-authored-by: Keo <contact@kbl.netlib.re> Co-authored-by: Germano Pires Ferreira <germanopires@gmail.com> Co-authored-by: Monika Bark <rychert.monika@wp.pl>	2025-12-12 15:21:04 +01:00
DerLinkman	b6f57dfb78	rspamd: update to 3.14.2	2025-12-12 14:06:49 +01:00
Copilot	3ebf2c2d2d	Prevent duplicate/plaintext login announcement rendering (#6963 ) * Initial plan * Fix duplicate login announcement display Co-authored-by: DerLinkman <62480600+DerLinkman@users.noreply.github.com> --------- Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com> Co-authored-by: DerLinkman <62480600+DerLinkman@users.noreply.github.com>	2025-12-12 12:34:20 +01:00
DerLinkman	67e7acd6bd	rspamd: upgrade to 3.14.1, trixie rebuild + bcc forwarded hosts fix (#6958 ) * rspamd: fix bcc + subadress handling when using forward hosts * rspamd: build against trixie + use version 3.14.1	2025-12-11 09:45:56 +01:00
renovate[bot]	689336b3e1	chore(deps): update dependency tianon/gosu to v1.19 Signed-off-by: milkmaker <milkmaker@mailcow.de>	2025-12-10 10:41:59 +00:00
renovate[bot]	01cf72cdef	chore(deps): update dependency phpredis/phpredis to v6.3.0 Signed-off-by: milkmaker <milkmaker@mailcow.de>	2025-12-10 10:41:54 +00:00
renovate[bot]	4cdb97c699	chore(deps): update dependency php-memcached-dev/php-memcached to v3.4.0 Signed-off-by: milkmaker <milkmaker@mailcow.de>	2025-12-10 10:41:50 +00:00
renovate[bot]	1bd795a9c6	chore(deps): update dependency krakjoe/apcu to v5.1.28 Signed-off-by: milkmaker <milkmaker@mailcow.de>	2025-12-10 10:41:42 +00:00
renovate[bot]	39f29e6c30	chore(deps): update dependency imagick/imagick to v3.8.1 Signed-off-by: milkmaker <milkmaker@mailcow.de>	2025-12-10 10:41:38 +00:00
Ashitaka	1ab6af21e3	Merge pull request #6905 from Ashitaka57/6646-pbkdf2-sha512-verify-hash Support for PBKDF2-SHA512 hash algorithm in verify_hash() (FreeIPA compatibility) (issue 6646)	2025-12-10 11:41:06 +01:00
DerLinkman	dbb9e474b0	pf-tlspol: upgrade to 1.8.22 (#6951 ) * postfix-tlspol: upgrade to 1.8.20 * pf-tlspol: update to 1.8.22	2025-12-09 13:25:50 +01:00
Khurram Malik	f8eed8c786	fix(api): add missing break in CORS switch block causing save to hang (#6926 )	2025-12-09 11:54:20 +01:00
milkmaker	79171ea6f5	[Web] Updated lang.fr-fr.json (#6943 ) Co-authored-by: Neuronnexion <support@nnx.com>	2025-12-05 14:40:45 +01:00
milkmaker	4e3294b273	[Web] Updated lang.fr-fr.json (#6941 ) [Web] Updated lang.fr-fr.json [Web] Updated lang.fr-fr.json Co-authored-by: Neuronnexion <support@nnx.com>	2025-12-03 23:31:37 +01:00
milkmaker	6c106b4e4d	[Web] Updated lang.fr-fr.json (#6936 ) Co-authored-by: Neuronnexion <support@nnx.com>	2025-12-02 16:40:36 +01:00
milkmaker	3d6253a2b2	update postscreen_access.cidr (#6933 )	2025-12-01 08:48:22 +01:00
milkmaker	b873812588	[Web] Updated lang.gr-gr.json (#6930 ) Co-authored-by: ChD Computers <chdcomputers@gmail.com>	2025-11-29 13:20:02 +01:00
milkmaker	514fefd2ed	Translations update from Weblate (#6924 ) * [Web] Updated lang.ca-es.json Co-authored-by: Pere Montpeó <peremontpeo@gmail.com> Co-authored-by: milkmaker <milkmaker@mailcow.de> * [Web] Updated lang.gr-gr.json Co-authored-by: Chris <chrismfz@gmail.com> Co-authored-by: milkmaker <milkmaker@mailcow.de> * [Web] Updated lang.cs-cz.json Co-authored-by: Filip Hajny <filip@hajny.net> * [Web] Updated lang.pl-pl.json [Web] Updated lang.pl-pl.json Co-authored-by: Monika Bark <rychert.monika@wp.pl> Co-authored-by: milkmaker <milkmaker@mailcow.de> --------- Co-authored-by: Pere Montpeó <peremontpeo@gmail.com> Co-authored-by: Chris <chrismfz@gmail.com> Co-authored-by: Filip Hajny <filip@hajny.net> Co-authored-by: Monika Bark <rychert.monika@wp.pl>	2025-11-24 16:50:03 +01:00
milkmaker	9832006141	Translations update from Weblate (#6916 ) * [Web] Updated lang.si-si.json Co-authored-by: Matjaž Tekavec <matjaz@moj-svet.si> * [Web] Updated lang.ru-ru.json Co-authored-by: Habetdin <15926758+Habetdin@users.noreply.github.com> * [Web] Updated lang.pl-pl.json [Web] Updated lang.pl-pl.json [Web] Updated lang.pl-pl.json Co-authored-by: Monika Bark <rychert.monika@wp.pl> Co-authored-by: Peter <magic@kthx.at> Co-authored-by: milkmaker <milkmaker@mailcow.de> --------- Co-authored-by: Matjaž Tekavec <matjaz@moj-svet.si> Co-authored-by: Habetdin <15926758+Habetdin@users.noreply.github.com> Co-authored-by: Monika Bark <rychert.monika@wp.pl> Co-authored-by: Peter <magic@kthx.at>	2025-11-17 23:23:07 +01:00
Carlos	890295bbfc	Add DNS-01 challenge support with configuration files and scripts	2025-11-14 07:10:17 +00:00
Josh	0413d26855	Allow making spam aliases permanent (#6888 ) * Allow making spam aliases permanent * added german translation * updated Spamalias Twig + Rename in Spam Alias * compose: update image tags to align to vendor version --------- Co-authored-by: DerLinkman <niklas.meyer@servercow.de>	2025-11-13 16:05:01 +01:00
Patrik Kernstock	7b29c1f304	Disable nginx server_tokens in http context (#6873 )	2025-11-13 15:19:11 +01:00
Patrik Kernstock	ae3ef391ee	Remove deprecated 'X-XSS-Protection' header (#6871 )	2025-11-13 15:16:44 +01:00
Peter	7313f996d3	Update to trixie (#6907 )	2025-11-13 15:16:00 +01:00
DerLinkman	62d16c9e56	compose: changes cronjobs to regular cron syntax + fixed sogo creds for cronjobs (#6866 ) * cron: restructure cron timer to time on second (instead of random) * dovecot: fix clearance for cron.creds file	2025-11-13 14:59:49 +01:00
Carlos	a52e977b89	Add DNS-01 challenge support for ACME certificates and related configurations	2025-11-13 07:19:38 +00:00
Claas Flint	1b833be760	Replace pigz with zstd for backup compression (#6897 ) * Replace pigz with zstd for backup compression This change replaces pigz (parallel gzip) with zstd (Zstandard) as the compression algorithm for mailcow backups while maintaining full backward compatibility with existing .tar.gz backups. Benefits: - Better compression ratios (12-37% improvement in tests) - Improved compression speed with modern algorithm - Maintains rsyncable functionality for incremental backups - Full backward compatibility for restoring old .tar.gz backups - Wide industry adoption and active development Changes: - Backup compression: pigz --rsyncable -p → zstd --rsyncable -T - Backup decompression: pigz -d -p → zstd -d -T - File extensions: .tar.gz → .tar.zst - Added get_archive_info() function for intelligent format detection - Updated backup Dockerfile to install zstd alongside pigz - Restore function now auto-detects and handles both formats - Updated FILE_SELECTION regex to recognize both .tar.zst and .tar.gz - Updated comments to reflect new file extension Backward Compatibility: - Restore automatically detects .tar.zst (preferred) or .tar.gz (legacy) - Existing .tar.gz backups can still be restored without issues - pigz remains installed in backup image for legacy support - Graceful fallback if backup file format not found Testing: - Added comprehensive test suite (test_backup_and_restore.sh) - 12 automated tests covering all scenarios: * Backup creation (both formats) * Restore (both formats) * Format detection and priority * Error handling (missing files, empty dirs) * Content integrity verification * Multi-threading configuration * Large file compression (8.59 MB realistic data) Test Results: ✓ zstd compression working ✓ pigz compression working (legacy) ✓ zstd decompression working ✓ pigz decompression working (backward compatible) ✓ Archive detection working ✓ Content integrity verified ✓ Format priority correct (.tar.zst preferred) ✓ Error handling for missing files ✓ Error handling for empty directories ✓ Multi-threading configuration verified ✓ Large file compression: 37.05% improvement ✓ Small file compression: 12.18% improvement * move testing script into development folder --------- Co-authored-by: DerLinkman <niklas.meyer@servercow.de>	2025-11-12 10:06:36 +01:00
DerLinkman	ec472f13cf	sogo: removed URLDecrpytion by default, make it configurable in sogo.conf	2025-11-12 09:50:41 +01:00
milkmaker	2e1d98cc7c	[Web] Updated lang.pl-pl.json (#6908 ) [Web] Updated lang.pl-pl.json [Web] Updated lang.pl-pl.json Co-authored-by: Monika Bark <rychert.monika@wp.pl>	2025-11-10 21:06:13 +01:00
milkmaker	07d7e3dc30	[Web] Updated lang.pl-pl.json (#6906 ) [Web] Updated lang.pl-pl.json [Web] Updated lang.pl-pl.json [Web] Updated lang.pl-pl.json [Web] Updated lang.pl-pl.json [Web] Updated lang.pl-pl.json [Web] Updated lang.pl-pl.json [Web] Updated lang.pl-pl.json [Web] Updated lang.pl-pl.json [Web] Updated lang.pl-pl.json [Web] Updated lang.pl-pl.json Co-authored-by: Monika Bark <rychert.monika@wp.pl>	2025-11-09 23:03:00 +01:00
milkmaker	b0f5aee628	[Web] Updated lang.pl-pl.json (#6898 ) Co-authored-by: Monika Bark <rychert.monika@wp.pl>	2025-11-05 17:37:26 +01:00
milkmaker	d3065612fd	update postscreen_access.cidr (#6886 )	2025-11-03 21:07:40 +01:00
Josh	9912e41f78	[Web] Correct order of Dansk/Danish in UI (#6887 )	2025-11-03 21:07:20 +01:00
milkmaker	04200c99a4	Translations update from Weblate (#6880 ) * [Web] Updated lang.vi-vn.json Co-authored-by: Nguyễn Thái Dũng <nguyenthaidung.work+mailcow.email@gmail.com> Co-authored-by: milkmaker <milkmaker@mailcow.de> * [Web] Updated lang.nb-no.json Co-authored-by: Runar Ingebrigtsen <runar@rin.no> --------- Co-authored-by: Nguyễn Thái Dũng <nguyenthaidung.work+mailcow.email@gmail.com> Co-authored-by: Runar Ingebrigtsen <runar@rin.no>	2025-10-27 20:00:29 +01:00
FreddleSpl0it	9a806e64ce	[PHP] remove opcache.revalidate_freq	2025-10-24 08:18:49 +02:00
Markku Post	95e0608749	[Web] Disable login on autodiscover/autoconfig domains Autodiscover and autoconfig domains (autodiscover., autoconfig.) are intended solely for client autoconfiguration endpoints and should not display the mailcow login page. This change check the hostname and disables unauthenticated users from seeing the login page on those domains; HTTP 404 response is returned when necessary.	2025-10-24 06:03:40 +03:00
FreddleSpl0it	22a09b9795	[PHP] re-add opcache.revalidate_freq setting	2025-10-23 15:16:24 +02:00
FreddleSpl0it	04d5c43550	Merge pull request #6847 from patschi/disable-opcache-jit Disable PHP opcache.jit	2025-10-23 09:32:02 +02:00
milkmaker	fbcb8cbeb9	[Web] Updated lang.vi-vn.json (#6861 ) Co-authored-by: Nguyễn Thái Dũng <nguyenthaidung.work+mailcow.email@gmail.com>	2025-10-21 18:03:22 +02:00
milkmaker	23fb5e2fca	Add Vietnamese language (#6854 ) * [Web] Updated lang.vi-vn.json [Web] Added lang.vi-vn.json Co-authored-by: Nguyễn Thái Dũng <nguyenthaidung.work+mailcow.email@gmail.com> Co-authored-by: Peter <magic@kthx.at> Co-authored-by: milkmaker <milkmaker@mailcow.de> * Add Vietnamese language --------- Co-authored-by: Nguyễn Thái Dũng <nguyenthaidung.work+mailcow.email@gmail.com> Co-authored-by: Peter <magic@kthx.at>	2025-10-20 18:35:00 +02:00
Patrik Kernstock	a4970397f1	Disable PHP opcache.jit	2025-10-17 13:17:56 +02:00
FreddleSpl0it	b85837c803	[Web] Add password verification when setting recovery email	2025-10-13 12:05:17 +02:00
FreddleSpl0it	653fc40d4c	Merge pull request #6783 from patschi/phpfpm-moar-speeeed Optimize phpfpm opcache: more aggressive caching, enable JIT	2025-10-13 11:43:07 +02:00
FreddleSpl0it	c17d80a6fd	Merge pull request #6821 from tjmills-dev/feat/show-app-passwd-logins Show app passwords for successful logins on user page	2025-10-13 11:41:39 +02:00
FreddleSpl0it	980bfa3aa0	Merge pull request #6696 from mailcow/renovate/krakjoe-apcu-5.x chore(deps): update dependency krakjoe/apcu to v5.1.27	2025-10-10 14:07:24 +02:00
FreddleSpl0it	664a954393	Merge pull request #6798 from mailcow/renovate/php-pecl-mail-mailparse-3.x chore(deps): update dependency php/pecl-mail-mailparse to v3.1.9	2025-10-10 14:07:05 +02:00
FreddleSpl0it	d5a27c4ccb	Merge pull request #6830 from mailcow/feat/rspamd-3.13.2 [Rspamd] Update to 3.13.2	2025-10-10 13:10:54 +02:00

1 2 3 4 5 ...

5454 Commits