mailcow/data/web
Niklas Meyer c520f21d28
🐄 Moorch Update 2022 - ClamAV, Dovecot & Olefy Update (#4497)
* [API] Fix minor issue in api docs

* [GH-Actions][stale] Add neverstale label to exempt list

* [Web] add github version tag

* [Web] add github version tag

* [Web] add github version tag

* [Web] add github version tag

* [Web] add github version tag

* [Web] add github version tag error handling

* [Web] add github version tag error handling

* Passwordless SOGo auth: support for calendar invitations and calendar/contacts subscriptions

Inviting someone to a calendar event triggers a request to /SOGo/so/otheruser@example.com/freebusy.ifb/ajaxRead. Subscribing to someone's calendar/contacts triggers a request to /SOGo/so/otheruser@example.com/foldersSearch. The email address in the URL is different from the logged-in user, which needs to be handled appropriately by sogo-auth.php.

* [Web] add github version tag - adjust css

* [Compose] Update SOGo Autoreply Schedule to 5m

Based on the advice of inverse (SOGo developer). Thanks to https://github.com/jmber

Closes: https://github.com/mailcow/mailcow-dockerized/issues/4436

* [Web] add github version tag - move twig globals

* [Web] add github version tag - missing </div>

* Passwordless SOGo auth: improvements for when accessing other users

* [WebAuthn] fido2 passwordless auth - fix (#4440)

* [WebAuthn] fido2 revert

* [WebAuthn] set UV flags to 'discouraged'

* [WebAuthn] revert - set UV flags to 'discouraged'

* Update clamav to 0.104.2

* Update clamav to 0.104.2

* Update dovecot to 2.3.18

Update gosu to 1.14
Use debian bullseye as base

* [Web] Updated lang.es.json [CI SKIP] (#4453)

Co-authored-by: Fijxu <fijxu@zzls.xyz>
Co-authored-by: milkmaker <milkmaker@mailcow.de>

Co-authored-by: Fijxu <fijxu@zzls.xyz>

* Fix broken documentation links (#4458)

* Fix broken documentation links

* Fix a few more broken documentation links

* Fix broken documentation links in translation files

* Fall back to empty string if WATCHDOG_NOTIFY_EMAIL undefined (#4457)

By default, `.env` (`mailcow.conf`) does not define `WATCHDOG_NOTIFY_EMAIL`.

Using it in `docker-compose.yml` without having it defined leads to Compose v2 displaying this warning on startup:

> WARNING: The WATCHDOG_NOTIFY_EMAIL variable is not set. Defaulting to a blank string.

Related to https://github.com/mailcow/mailcow-dockerized/issues/4315

* [Web] Updated lang.sk.json [CI SKIP] (#4461)

Co-authored-by: Lukáš Matula <lukas@gbely.net>
Co-authored-by: milkmaker <milkmaker@mailcow.de>

Co-authored-by: Lukáš Matula <lukas@gbely.net>

* oletools: disable template injection detection (#4464)

Seems to be causing a lot of false positives lately

* Fix minor typo in comment (#4466)

Correction of the comment, so that the explanation is correct and can be understood.

* Update issue templates to issue forms (#4465)

This PR updates the issue templates to GitHubs new issue forms

* [Web] Fix padding issue in UI admin panel (#4481)

* [Web] fix admin panel padding issue

* [Web] fix admin panel padding issue

* [Web] Updated lang.sk.json [CI SKIP] (#4489)

Co-authored-by: Lukáš Matula <lukas@gbely.net>
Co-authored-by: milkmaker <milkmaker@mailcow.de>

Co-authored-by: Lukáš Matula <lukas@gbely.net>

* increase opcache.interned_strings_buffer to 16 (#4487)

since version 23.0.2 Nextcloud recommends having a value greater than 8 for `opcache.interned_strings_buffer`. As this memory will be only used when needed this should have no impact on installations that are not using nextcloud.

related discussion: https://help.nextcloud.com/t/nextcloud-23-02-opcache-interned-strings-buffer/134007/19
related nextcloud issue: https://github.com/nextcloud/server/issues/31223

* nextcloud - add missing redirections (#4366)

adds missing location directives to the nginx configuration of nextcloud 22, to prevent warnings in nextcloud admin center of missing redirections

* Update imapsync to 2.178 (#4491)

* Update and fix oletools (#4479)

As noticed by @MAGICCC (#4464 (comment)), our olefy image does not work anymore if you rebuild it. This is because @HeinleinSupport recently updated their repository with the changes from @decalage2's repository, which renamed olvba3 to olevba. Since @HeinleinSupport does not recommend using its own patched branch and is very slow in pulling in changes from upstream (@decalage2), let's switch to the latter. This also allowed me to revert #4464.

Finally, a minor patch to rspamd is necessary. While the documentation says

In the extended mode the oletools module will not trigger on specific categories, but will always set a threat string with all found flags when at least a macro was found.

This is not actually true -- it only sets it when suspicious or autoexec threats were detected. But it's a one-line patch to make rspamd behave as documented and we should submit that patch to @rspamd too. With this patch, I have confirmed that Mailcow will reject any incoming, non-whitelisted message containing attachments with macros.

* [Web] Fix excluded domain list in quaratine view

Previously excluded domains from quarantine were not shown.

* [Dovecot] Update syslogng Version to 3.28 (#4496)

Co-authored-by: Niklas Meyer <niklas.meyer@tinc.gmbh>

Co-authored-by: ntimo <git@nowitzki.me>
Co-authored-by: Peter <magic@kthx.at>
Co-authored-by: FreddleSpl0it <patschul@posteo.de>
Co-authored-by: FreddleSpl0it <75116288+FreddleSpl0it@users.noreply.github.com>
Co-authored-by: Michael Kuron <mkuron@users.noreply.github.com>
Co-authored-by: milkmaker <milkmaker@mailcow.de>
Co-authored-by: Fijxu <fijxu@zzls.xyz>
Co-authored-by: Slavi Pantaleev <slavi@devture.com>
Co-authored-by: Lukáš Matula <lukas@gbely.net>
Co-authored-by: Max <mail@heavygale.de>
Co-authored-by: Michael Cramer <michael@bigmichi1.de>
Co-authored-by: Robert Christian <soulsymphonies@users.noreply.github.com>
Co-authored-by: André <andre.peters@debinux.de>
Co-authored-by: Niklas Meyer <niklas.meyer@tinc.gmbh>
2022-03-02 16:32:17 +01:00
..
api Jan(moo)uary Update 2022 - Revision A (2022-01a) (#4445) 2022-02-01 15:26:48 +01:00
css Jan(moo)uary Update 2022 - Revision A (2022-01a) (#4445) 2022-02-01 15:26:48 +01:00
fonts [Web] Update Bootstrap Icons 2021-10-15 19:49:47 +02:00
img [Web] Replace country flags, improve flags for last logins, add info about last password change of a user 2021-06-08 13:16:10 +02:00
inc Jan(moo)uary Update 2022 - Revision A (2022-01a) (#4445) 2022-02-01 15:26:48 +01:00
js [Web] Show last 7 days per default in sasl logs table for user 2021-10-30 16:56:04 +02:00
lang 🐄 Moorch Update 2022 - ClamAV, Dovecot & Olefy Update (#4497) 2022-03-02 16:32:17 +01:00
oauth [Web] oauth authorize - added missing twig templating 2021-10-22 14:37:26 +02:00
templates 🐄 Moorch Update 2022 - ClamAV, Dovecot & Olefy Update (#4497) 2022-03-02 16:32:17 +01:00
_rspamderror.php [Web] Use redis master where necessary, hide UI if not master, create replicate quota2 table 2020-02-05 11:04:14 +01:00
_status.502.html Add a not about creating a backup before starting over 2021-12-05 18:59:39 +01:00
admin.php [web] implemented twig templating system (#4264) 2021-09-22 20:47:10 +02:00
autoconfig.php [Web] Fix require_once to always include document root 2018-10-11 11:59:23 +02:00
autodiscover-json.php [Web] Fix potential XSS in autodiscover-json.php 2021-09-07 18:58:05 +02:00
autodiscover.php Removed toggle ALLOW_APP_PASSWORDS_IN_EAS 2021-10-27 09:39:34 +02:00
debug.php [web] implemented twig templating system (#4264) 2021-09-22 20:47:10 +02:00
edit.php [Web, Dovecot] Allow to define scope of services for app passwords 2021-10-28 21:57:19 +02:00
favicon.png [Web] Hide up time of containers that are missing 2018-02-01 13:28:17 +01:00
index.php [web] implemented twig templating system (#4264) 2021-09-22 20:47:10 +02:00
json_api.php Jan(moo)uary Update 2022 - Revision A (2022-01a) (#4445) 2022-02-01 15:26:48 +01:00
mailbox.php [web] implemented twig templating system (#4264) 2021-09-22 20:47:10 +02:00
mobileconfig.php [Web] Updated lang.ro.json (#4396) 2021-12-22 19:34:50 +01:00
qhandler.php [Web] qhandler - added missing twig templating 2021-10-22 08:52:05 +02:00
quarantine.php [web] implemented twig templating system (#4264) 2021-09-22 20:47:10 +02:00
resource.php deliver CSS and JS as external request 2019-10-20 21:25:58 +02:00
robots.txt mailcow dockerized 2016-12-09 20:39:02 +01:00
sogo-auth.php Jan(moo)uary Update 2022 - Revision A (2022-01a) (#4445) 2022-02-01 15:26:48 +01:00
user.php [Web] Auto-generated app passwords for Apple configuration profiles (#4316) 2021-11-14 20:09:39 +01:00