Gnous/mailcow
2
0
Fork 0
Code Issues Pull Requests 1 Packages Projects Releases Wiki Activity
7,617 Commits 2 Branches 0 Tags 50 MiB
9cd16f0001
Commit Graph

5396 Commits

Author SHA1 Message Date
milkmaker
b0d16bbcee
[Web] Updated lang.pt-br.json (#7228) 
Co-authored-by: Edson Wolf <edsonwolf@vivaldi.net>
 2026-05-13 16:42:03 +02:00
FreddleSpl0it
ff3d571054
[SOGo] Update to 5.12.8 2026-05-13 10:31:23 +02:00
FreddleSpl0it
a8e945f3da
Merge pull request #7220 from mailcow/fix/06052026 
[Web] escape HTML in sieve filter edit view and queue manager
 2026-05-12 08:36:36 +02:00
FreddleSpl0it
33547d1d73
[Web] escape HTML in sieve filter edit view and queue manager 2026-05-12 08:31:51 +02:00
milkmaker
539c32d99c
Translations update from Weblate (#7218) 
* [Web] Updated lang.az-az.json

Co-authored-by: Nemoralis <nemoralis@duck.com>

* [Web] Updated lang.nl-nl.json

Co-authored-by: Tom18314 <tomstokmans5@gmail.com>

* [Web] Updated lang.pl-pl.json

Co-authored-by: pmuch78 <pawel@prolin.pl>

---------

Co-authored-by: Nemoralis <nemoralis@duck.com>
Co-authored-by: Tom18314 <tomstokmans5@gmail.com>
Co-authored-by: pmuch78 <pawel@prolin.pl>
 2026-05-08 16:46:10 +02:00
milkmaker
d42c3823c4
update postscreen_access.cidr (#7209) 2026-05-02 19:15:14 +02:00
milkmaker
886dbcc419
Translations update from Weblate (#7190) 
* [Web] Updated lang.az-az.json

[Web] Added lang.az-az.json

Co-authored-by: Nemoralis <nemoralis@duck.com>
Co-authored-by: Peter <magic@kthx.at>
Co-authored-by: milkmaker <milkmaker@mailcow.de>

* [Web] Updated lang.si-si.json

Co-authored-by: Matjaž Tekavec <matjaz@moj-svet.si>

* [Web] Updated lang.pt-br.json

Co-authored-by: André Ribas <andre@ribassu.com>

---------

Co-authored-by: Nemoralis <nemoralis@duck.com>
Co-authored-by: Peter <magic@kthx.at>
Co-authored-by: Matjaž Tekavec <matjaz@moj-svet.si>
Co-authored-by: André Ribas <andre@ribassu.com>
 2026-04-11 21:25:03 +02:00
Dmitriy Alekseev
b0873edb6a
Update RSPAMD version in Dockerfile 2026-04-06 17:28:32 +02:00
Dmitriy Alekseev
694d751915
Update RSPAMD version in Dockerfile 2026-04-06 17:28:14 +02:00
milkmaker
dc15994d40
update postscreen_access.cidr (#7177) 2026-04-02 11:50:05 +02:00
Dmitriy Alekseev
08278a8be9
Update RSPAMD version to 4.0.0 in Dockerfile 2026-03-30 23:51:05 +02:00
FreddleSpl0it
5a00b5124b
[Web][Dovecot] Add parameterized queries and input validation for quarantine_category 2026-03-29 12:08:45 +02:00
FreddleSpl0it
8c039f694f
Improve template URI escaping and parameter handling 2026-03-19 12:48:43 +01:00
FreddleSpl0it
95bf46c1e4
escape HTML in autodiscover logs 2026-03-19 12:44:50 +01:00
FreddleSpl0it
edde35156d
escape HTML in qitem details 2026-03-19 12:44:30 +01:00
FreddleSpl0it
84e3c32f13
escape HTML in last logins 2026-03-19 12:44:00 +01:00
FreddleSpl0it
ecb848493b
add missing object-level access control 2026-03-19 12:42:45 +01:00
FreddleSpl0it
8a65b9d1c6
add missing access control 2026-03-19 12:41:47 +01:00
FreddleSpl0it
ed9264fd2a
[Web] Allow force_tfa for LDAP and Keycloak users 2026-03-13 14:13:25 +01:00
FreddleSpl0it
7817dda43f
[ACME] Skip subdomains covered by wildcards (DNS-01 challenge only) 2026-03-13 13:08:18 +01:00
FreddleSpl0it
127fb1e8f5
[ACME] Skip autodiscover/mta-sts subdomains covered by wildcard certificates 2026-03-13 12:35:22 +01:00
milkmaker
09f09cb850
[Web] Updated lang.hu-hu.json (#7130) 2026-03-12 15:01:54 +01:00
FreddleSpl0it
d4bf377a96
Merge pull request #7121 from rezzorix/fix/theme-localstorage-staging 
Fix theme localStorage collision with rspamd UI
 2026-03-12 07:47:03 +01:00
FreddleSpl0it
abd6fe8c79
Merge pull request #7124 from mailcow/fix/7112 
[ACME] Fix wildcard certificate conflict with MAILCOW_HOSTNAME
 2026-03-12 07:46:02 +01:00
rezzorix
03eccd4e42 added/fix: use mailcow_theme in bundled dark mode JS 2026-03-12 14:11:31 +08:00
FreddleSpl0it
1da8d1c894
[ACME] Fix wildcard certificate conflict with MAILCOW_HOSTNAME 2026-03-11 09:33:16 +01:00
FreddleSpl0it
d1feebf164
[Web] Fix LDAP/Keycloak login TypeError - missing JSON decode for attributes 2026-03-11 09:18:03 +01:00
rezzorix
293b885a85 Fix theme localStorage collision with rspamd UI 2026-03-11 13:32:53 +08:00
FreddleSpl0it
33acf56526
[SOGo] Add ActiveSync support 2026-03-10 13:13:00 +01:00
FreddleSpl0it
e7ea3aa608
[SOGo] Fix draft folder creation by adding /var/spool/sogo directory 2026-03-10 10:31:50 +01:00
FreddleSpl0it
2e176339ba
[Watchdog] Fix Nagios MariaDB client SSL compatibility with Alpine 3.23 2026-03-10 10:01:18 +01:00
FreddleSpl0it
8f883f3d37
Rename dns-101 to dns-01 2026-03-09 15:27:33 +01:00
FreddleSpl0it
8760e7e5db
[Rspamd] Update to 3.14.3-1 2026-03-09 07:59:34 +01:00
FreddleSpl0it
e848226062
[SOGo] Update paths from /usr/lib/ to /usr/local/lib/ 2026-03-06 16:26:13 +01:00
FreddleSpl0it
efaeb77e13
Merge pull request #7093 from mailcow/fix/7054 
[SOGo][Web] use incremental updates for mailbox/alias/resource sync in sogo_static_view
 2026-03-06 09:23:00 +01:00
FreddleSpl0it
6c857243ec
[SOGo] Update to 5.12.5 2026-03-06 09:18:10 +01:00
milkmaker
6012cf4486
[Web] Updated lang.nl-nl.json (#7095) 
Co-authored-by: Tom18314 <tomstokmans5@gmail.com>
 2026-03-04 23:03:02 +01:00
FreddleSpl0it
fe71f84c82
[SOGo] Fix custom UI patches after moving to source-compiled SOGo 2026-03-04 14:55:52 +01:00
FreddleSpl0it
97312c1a9d
Update alpine images to 3.23 2026-03-04 13:35:11 +01:00
FreddleSpl0it
dcbea71e67
[ACME] auto-create DNS-01 config template on startup 2026-03-04 11:42:40 +01:00
FreddleSpl0it
4e33c7143f
[SOGo][Web] use incremental updates for mailbox/alias/resource sync in sogo_static_view 2026-03-04 11:16:48 +01:00
milkmaker
4c184b25f4
Translations update from Weblate (#7091) 
* [Web] Language file updated by 'Cleanup translation files' addon

Co-authored-by: milkmaker <milkmaker@mailcow.de>

* [Web] Updated lang.si-si.json

Co-authored-by: Matjaž Tekavec <matjaz@moj-svet.si>

---------

Co-authored-by: Matjaž Tekavec <matjaz@moj-svet.si>
 2026-03-03 20:25:24 +01:00
FreddleSpl0it
ddc2309f1e
Merge pull request #7089 from mailcow/fix/7039 
[Web] switch from GET to POST for datatable requests
 2026-03-03 15:07:17 +01:00
FreddleSpl0it
d40252ccce
[Web] Add missing EAS and DAV protocol options to mailbox bulk actions 2026-03-03 14:39:41 +01:00
FreddleSpl0it
4abb5cbfab
Merge pull request #7086 from mailcow/feat/sogo-build 
[SOGo] Build SOGo from source with security patches
 2026-03-03 14:24:29 +01:00
FreddleSpl0it
b695936273
Merge pull request #6912 from cjlapao/feat-acme-dns 
acme: add DNS challenges
 2026-03-03 14:23:28 +01:00
DerLinkman
d9463c7950
sogo: shrinked image file by ~50% 2026-03-03 14:14:32 +01:00
FreddleSpl0it
579542381a
Merge pull request #7060 from jovobe/staging 
Bump alpine version of netfilter
 2026-03-03 14:06:01 +01:00
FreddleSpl0it
ce5659f300
Merge pull request #7082 from JeremieCrinon/fix/show-stopped-containers-api-and-dashboard 
fix: show stopped and failed containers in dashboard and API
 2026-03-03 14:01:03 +01:00
FreddleSpl0it
1967cb642f
Merge pull request #6457 from mailcow/renovate/composer-composer-2.x 
chore(deps): update dependency composer/composer to v2.9.5
 2026-03-03 13:38:32 +01:00
FreddleSpl0it
ba0eb04ebe
Merge pull request #6695 from maxi322/feature/check_dns_improvement 
check_dns: better time measurement
 2026-03-03 13:31:23 +01:00
FreddleSpl0it
609ce6b0d6
Merge pull request #6976 from mailcow/fix/autodiscover-passwordless 
feat: Implement passwordless autodiscover endpoint
 2026-03-03 13:25:16 +01:00
FreddleSpl0it
af61e2d303
[Web] Add fail2ban logging to passwordless autodiscover endpoint 2026-03-03 13:24:44 +01:00
FreddleSpl0it
c6e3f517e1
Merge pull request #7047 from jonprocter/staging 
Document qitem endpoint in openapi.yaml for editing quarantine mails
 2026-03-03 13:11:43 +01:00
FreddleSpl0it
c033cd6254
Merge pull request #7077 from mailcow/feat/force-tfa 
[Web] Add forced 2FA setup and password update enforcement
 2026-03-03 13:01:16 +01:00
FreddleSpl0it
7562578b74
[SOGo] Build SOGo from source with security patches 2026-03-03 11:24:42 +01:00
FreddleSpl0it
43f570e761
[Web] switch from GET to POST for datatable requests 2026-03-03 08:10:16 +01:00
DocFraggle
5e478a32df Fix lua script sub-addressing (#7037) 
* Fix lua script sub-addressing

* Fix subject tagging in rspamd.local.lua as well

---------

Co-authored-by: Hailer, Christian <christian.hailer@interhyp.de>
Co-authored-by: DocFraggle <drfraggle@drfraggleshome.de>
 2026-03-02 15:49:11 +01:00
milkmaker
22c94a4d2f
update postscreen_access.cidr (#7084) 2026-03-01 13:30:57 +01:00
Jérémie Crinon
99dc0f6616 fix: show stopped and failed containers in dashboard and API 2026-02-27 13:41:36 +01:00
FreddleSpl0it
96d4802cb2
[Web] Switch QR code generation from external API to local library and fix composer.json/lock mismatch 2026-02-24 11:02:47 +01:00
FreddleSpl0it
ad5b94af5e
[Web] Add forced 2FA setup and password update enforcement 2026-02-24 10:44:33 +01:00
milkmaker
7fce984cac
[Web] Updated lang.lv-lv.json (#7069) 
Co-authored-by: Edgars Andersons <Edgars+Mailcow+Weblate@gaitenis.id.lv>
 2026-02-19 22:15:32 +01:00
maxi322
1c52eaa3a4 check_dns: better time measurement 
alpine does not output ms using date, therefore we use perl to get a more
accurate measurement of the dns response time.
The script output is now even more similar to nagios check_dns.
 2026-02-14 18:07:39 +01:00
Johan M. von Behren
c7e04b4146
Bump alpine version of netfilter 
Bump alpine from 3.21 to 3.23. Closes #7059
 2026-02-13 14:26:27 +01:00
renovate[bot]
075959aea9
Update dependency composer/composer to v2.9.5 
Signed-off-by: milkmaker <milkmaker@mailcow.de>
 2026-02-12 11:09:08 +00:00
milkmaker
885ba2510e
Translations update from Weblate (#7055) 
* [Web] Updated lang.cs-cz.json

Co-authored-by: Filip Hajny <filip@hajny.net>
Co-authored-by: milkmaker <milkmaker@mailcow.de>

* [Web] Updated lang.ru-ru.json

Co-authored-by: Habetdin <15926758+Habetdin@users.noreply.github.com>

---------

Co-authored-by: Filip Hajny <filip@hajny.net>
Co-authored-by: Habetdin <15926758+Habetdin@users.noreply.github.com>
 2026-02-09 01:52:35 +01:00
Jonathan Procter
fb1686065d
Add endpoint for editing quarantine mails 
Added endpoint to edit quarantine items with actions to release or learn as ham. Functionality already existed but was undocumented.
 2026-02-03 21:31:32 +00:00
milkmaker
0428f5c9bd
update postscreen_access.cidr (#7042) 2026-02-01 22:45:03 +01:00
milkmaker
a70c23065c
Translations update from Weblate (#7040) 
* [Web] Updated lang.vi-vn.json

Co-authored-by: Phu D. Nguyen <sillycat@duck.com>

* [Web] Updated lang.zh-tw.json

Co-authored-by: Proton Chang <protonmo@gmail.com>

* [Web] Updated lang.si-si.json

Co-authored-by: Matjaž Tekavec <matjaz@moj-svet.si>

---------

Co-authored-by: Phu D. Nguyen <sillycat@duck.com>
Co-authored-by: Proton Chang <protonmo@gmail.com>
Co-authored-by: Matjaž Tekavec <matjaz@moj-svet.si>
 2026-02-01 22:44:52 +01:00
FreddleSpl0it
caaa4a414d
[Web] Fix datatables search after PR #7022 2026-01-29 10:26:44 +01:00
FreddleSpl0it
2e8897c2cf
Merge branch 'staging' into fix/autodiscover-passwordless 2026-01-28 11:10:28 +01:00
FreddleSpl0it
c1d4f04c22
Merge branch 'staging' into feat/restrict-alias-sending 2026-01-28 10:02:03 +01:00
FreddleSpl0it
82276cd1ca
Merge pull request #7022 from mailcow/feat/eas-dav-access 
[Web] Allow admins to limit EAS and DAV access for mailbox users
 2026-01-28 09:54:47 +01:00
FreddleSpl0it
56ea4302ed
[Web] Allow admins to limit EAS and DAV access for mailbox users 2026-01-28 09:49:33 +01:00
FreddleSpl0it
c06112b26e
[Postfix] Configurable send permissions for alias addresses 2026-01-27 09:05:51 +01:00
FreddleSpl0it
aa5a4f0998
Merge pull request #6710 from mailcow/renovate/tianon-gosu-1.x 
chore(deps): update dependency tianon/gosu to v1.19
 2026-01-27 08:09:31 +01:00
FreddleSpl0it
bf4f471cfd
Merge pull request #6837 from mailcow/renovate/php-memcached-dev-php-memcached-3.x 
chore(deps): update dependency php-memcached-dev/php-memcached to v3.4.0
 2026-01-27 08:08:50 +01:00
FreddleSpl0it
978bff9dbc
Merge pull request #6867 from DiscoNova/feat/possible-to-disable-logins-from-autoprotocol-domains 
[Web] Disable login UI on autoprotocol domains
 2026-01-27 08:08:12 +01:00
FreddleSpl0it
869d9af7dd
Merge pull request #6901 from mailcow/renovate/phpredis-phpredis-6.x 
chore(deps): update dependency phpredis/phpredis to v6.3.0
 2026-01-27 08:05:58 +01:00
FreddleSpl0it
af10499ecb
Merge pull request #6927 from mailcow/renovate/imagick-imagick-3.x 
chore(deps): update dependency imagick/imagick to v3.8.1
 2026-01-27 08:04:51 +01:00
FreddleSpl0it
a1a4d8ff98
Merge pull request #6947 from mailcow/renovate/krakjoe-apcu-5.x 
chore(deps): update dependency krakjoe/apcu to v5.1.28
 2026-01-27 08:04:24 +01:00
FreddleSpl0it
95d61e8aa2
Merge pull request #6980 from bluewalk/feat/issue-6489 
Configurable displayName(s) - Fixes issue #6489
 2026-01-27 08:02:20 +01:00
FreddleSpl0it
ec8dd1a54f
Merge pull request #6990 from psuet/mobileconfig-with-password-complexity 
fix: Password for mobileconfig that conforms to password-complexity policy
 2026-01-27 07:56:35 +01:00
milkmaker
382ee34d0e
[Web] Updated lang.hu-hu.json (#7020) 
Co-authored-by: Sándor <me-github@sandros.hu>
 2026-01-26 20:15:47 +01:00
milkmaker
0999c9e9ab
Translations update from Weblate (#7014) 
* [Web] Updated lang.zh-cn.json

Co-authored-by: 雨 <luotianyi@luotianyi.me>

* [Web] Updated lang.pl-pl.json

Co-authored-by: Monika Bark <rychert.monika@wp.pl>
Co-authored-by: milkmaker <milkmaker@mailcow.de>

---------

Co-authored-by: 雨 <luotianyi@luotianyi.me>
Co-authored-by: Monika Bark <rychert.monika@wp.pl>
 2026-01-23 22:02:55 +01:00
milkmaker
e727620bd3
Translations update from Weblate (#7002) 
* [Web] Updated lang.zh-cn.json

Co-authored-by: ガラスのような夢 <i@msdnicrosoft.work>

* [Web] Updated lang.pl-pl.json

Co-authored-by: Monika Bark <rychert.monika@wp.pl>

---------

Co-authored-by: ガラスのような夢 <i@msdnicrosoft.work>
Co-authored-by: Monika Bark <rychert.monika@wp.pl>
 2026-01-07 17:23:31 +01:00
milkmaker
71fa3ecebc
update postscreen_access.cidr (#6987) 2026-01-07 17:22:01 +01:00
Paul Sütterlin
70101d1187
fix: Password for mobileconfig that conforms to password-complexity policy 2026-01-01 16:57:21 +01:00
bluewalk
c060c205d3 Fixes issue #6489 2025-12-21 16:56:16 +01:00
DerLinkman
5ca900749c
autodiscover: use generalized error logging instead of specific to prevent user enumeration 2025-12-18 16:54:45 +01:00
DerLinkman
ec77406dba
Fix autodiscover.php: Use random error IDs and fix SQL type casting 
- Replace hardcoded error IDs with random values (1-10 billion range) for better debugging
- Cast SimpleXMLElement email to string before SQL query to prevent type errors
- Qualify ambiguous 'active' column with table names in JOIN query
- Add proper error XML response for database errors instead of die()
- Ensure all error paths return complete XML documents
 2025-12-17 14:27:38 +01:00
DerLinkman
ee15721550
feat: implement passwordless autodiscover endpoint 
- Remove HTTP Basic Authentication requirement from autodiscover.php
- Extract email address from XML request body instead of AUTH headers
- Validate mailbox existence and active status before returning config
- Improve security by eliminating password transmission
- Add comprehensive error handling for invalid/inactive mailboxes
- Follow industry standards (Microsoft, Google, Apple)
- Maintain backward compatibility with existing email clients
- Keep full logging functionality in Redis AUTODISCOVER_LOG

This change enhances security while improving user experience and
follows modern email client configuration best practices.
 2025-12-17 13:39:05 +01:00
Copilot
038b2efb75
Add MTA-STS support for alias domains (#6972) 
* Initial plan

* Add MTA-STS support for alias domains

Co-authored-by: DerLinkman <62480600+DerLinkman@users.noreply.github.com>

* Improve domain normalization and code style in mta-sts.php

Co-authored-by: DerLinkman <62480600+DerLinkman@users.noreply.github.com>

* Add error handling for idn_to_ascii in mta-sts.php

Co-authored-by: DerLinkman <62480600+DerLinkman@users.noreply.github.com>

* Add database error handling for alias domain query

Co-authored-by: DerLinkman <62480600+DerLinkman@users.noreply.github.com>

* Add ACME certificate support for MTA-STS on alias domains

Query alias_domain table to find aliases with MTA-STS enabled target domains and request certificates for mta-sts.<alias-domain> subdomains.

Co-authored-by: DerLinkman <62480600+DerLinkman@users.noreply.github.com>

* compose: bump image tag to 1.95

* Add MTA-STS DNS records display for alias domains in UI

When viewing an alias domain's DNS diagnostics, check if the target domain has MTA-STS enabled and display the required DNS records for the alias domain.

Co-authored-by: DerLinkman <62480600+DerLinkman@users.noreply.github.com>

---------

Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: DerLinkman <62480600+DerLinkman@users.noreply.github.com>
Co-authored-by: DerLinkman <niklas.meyer@servercow.de>
 2025-12-15 16:29:21 +01:00
DerLinkman
1fe4cd03e9
ui: fix global filters ui tickbox reappearing (#6966) 2025-12-12 16:01:18 +01:00
milkmaker
12e02e67ff
Translations update from Weblate (#6965) 
* [Web] Updated lang.fr-fr.json

Co-authored-by: Keo <contact@kbl.netlib.re>

* [Web] Updated lang.pt-pt.json

Co-authored-by: Germano Pires Ferreira <germanopires@gmail.com>
Co-authored-by: milkmaker <milkmaker@mailcow.de>

* [Web] Updated lang.pl-pl.json

Co-authored-by: Monika Bark <rychert.monika@wp.pl>

---------

Co-authored-by: Keo <contact@kbl.netlib.re>
Co-authored-by: Germano Pires Ferreira <germanopires@gmail.com>
Co-authored-by: Monika Bark <rychert.monika@wp.pl>
 2025-12-12 15:21:04 +01:00
DerLinkman
b6f57dfb78
rspamd: update to 3.14.2 2025-12-12 14:06:49 +01:00
Copilot
3ebf2c2d2d
Prevent duplicate/plaintext login announcement rendering (#6963) 
* Initial plan

* Fix duplicate login announcement display

Co-authored-by: DerLinkman <62480600+DerLinkman@users.noreply.github.com>

---------

Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: DerLinkman <62480600+DerLinkman@users.noreply.github.com>
 2025-12-12 12:34:20 +01:00
DerLinkman
67e7acd6bd
rspamd: upgrade to 3.14.1, trixie rebuild + bcc forwarded hosts fix (#6958) 
* rspamd: fix bcc + subadress handling when using forward hosts

* rspamd: build against trixie + use version 3.14.1
 2025-12-11 09:45:56 +01:00
renovate[bot]
689336b3e1
chore(deps): update dependency tianon/gosu to v1.19 
Signed-off-by: milkmaker <milkmaker@mailcow.de>
 2025-12-10 10:41:59 +00:00