Alexandre Aubin
c5580a0551
app/permissions: Move permissions data out of LDAP
2024-08-05 20:41:42 +02:00
Alexandre Aubin
d0ce8cce53
Merge remote-tracking branch 'origin/dev' into bookworm
2024-07-25 19:29:59 +02:00
Alexandre Aubin
970e2e2dbc
services: redis ain't installed by default anymore on yunohost
2024-07-25 18:53:26 +02:00
Josué Tille
f6c270e1d2
[Fix] Make slapd listen also on ipv6
2024-07-21 10:30:14 +02:00
Alexandre Aubin
88b11bee09
mail: fix opendkim assuming mails arent authenticated because of missing {auth_type} from postfix
2024-07-17 18:37:15 +02:00
Alexandre Aubin
946d2289d5
cleanup: we probably don't need to keep the super-legacy service entries anymore
2024-07-15 23:02:52 +02:00
Alexandre Aubin
f16011a138
Remove reference to rspamd, rspamd is to become an app
2024-07-15 22:23:59 +02:00
Alexandre Aubin
128df3d804
Update services.yml
2024-07-11 11:35:28 +02:00
Alexandre Aubin
b661356783
Merge remote-tracking branch 'origin/dev' into bookworm
2024-06-30 00:23:58 +02:00
Alexandre Aubin
bd43a4504e
Update main.cf: fuck postfix syntax
2024-06-18 14:12:11 +02:00
Alexandre Aubin
40778817ac
Merge remote-tracking branch 'origin/bookworm' into handle-metronome-as-an-app
2024-06-08 16:35:53 +02:00
Alexandre Aubin
42d2f789cf
Merge remote-tracking branch 'origin/dev' into bookworm
2024-05-19 20:47:27 +02:00
Chris Vogel
1c7e139c74
Update main.cf to allow aliases for sender addresses of apps
...
If an app registers the sender address _app@doma.in_ **and** a yunohost account configured an alias for the same address the app will not be able to send emails anymore.
postfix asks the first map defined in smtpd_sender_login_maps and finds that the address _app@doma.in_ can be used as a sender address by the yunohost account having configured the alias and **then stops and doesn't look up the second list** for registered apps.
The unionmap instructs postfix to join a list from both sources and then return the match from that joined list which would then contain _yunohost_account_having_registered_alias, appname_ for the lookup of _app@doma.in_.
This allows the yunohost account having registered the alias and the app being registered to use the sender address to send email using that sender **and makes it possible to receive replies to the emails going out from the app**.
Reference: https://serverfault.com/questions/948362/postfix-multiple-smtpd-sender-login-maps
2024-05-18 14:03:32 +02:00
Yann Autissier
c2e39a533f
fix ldap write access for admin users
...
Admin users are unable to modify ldap entries, getting following error:
0x32 (LDAP_INSUFFICIENT_ACCESS)
2024-05-13 22:28:38 +00:00
Alexandre Aubin
4769242dc5
Yolodraft: handle metronome as an app
2024-05-11 14:50:46 +02:00
Alexandre Aubin
582350c145
mail: attempt to move to opendkim instead of rspamd for dkim signing/verify
2024-05-07 16:31:50 +02:00
Alexandre Aubin
f248086fb6
nginx: nevermind applogos caching, nowadays nginx/browsers automatically cache static assets with etags etc ?
2024-02-03 20:28:41 +01:00
Alexandre Aubin
41da1daf02
nginx: remove old 'yunohost_panel.conf' stuff
2024-02-03 18:39:25 +01:00
Alexandre Aubin
98701ebdab
regenconf: the 'plain' subfolder thing for nginx conf is annoying, flatten things up
2024-02-03 18:36:55 +01:00
Alexandre Aubin
ca835534de
portal: serve app logos from an sso-specific route (to keep separation of concern etc)
2024-02-03 18:24:31 +01:00
Alexandre Aubin
69cc6345a5
webadmin: add cache config for app logos
2024-02-03 18:21:02 +01:00
Alexandre Aubin
0a01423408
Merge remote-tracking branch 'origin/dev' into bookworm
2023-12-28 02:57:12 +01:00
Alexandre Aubin
3070e504ad
Make rspamd an optional dependency, because rspamd is only necessary when you really care about incoming mail, is resource-heavy, and for some reason some setups cant install libhyperscan which is required by rspamd
2023-12-26 17:52:08 +01:00
Alexandre Aubin
155418409e
postfix: fix edge case bug with the sni file when no domain has mail enabled
2023-12-26 17:42:11 +01:00
Josue-T
a729c78379
apps: add mailbox/IMAP support for apps that declared a system user with mail enabled ( #1745 )
...
* Add missing account registration for apps in postfix
* Also set email on dovecot DB
* fix undefined var
* Fix missing username format config in dovecot
2023-12-23 19:34:22 +01:00
Alexandre Aubin
d7855fc9a7
portalapi: propagate changes to fail2ban config
2023-11-28 18:40:49 +01:00
Alexandre Aubin
c216a3f246
Merge remote-tracking branch 'origin/dev' into bookworm
2023-11-24 22:35:25 +01:00
chri2
8cb6a5649b
let dovecot create folders on first login
...
tells dovecot to create standard folders on first login if they do not exist and which folder names are used for special purposes like archive, spam/junk, sent, etc.
2023-10-31 14:07:36 +01:00
axolotle
bfba939927
Merge remote-tracking branch 'origin/dev' into bookworm
2023-10-31 02:57:26 +01:00
Alexandre Aubin
62779ee266
Merge pull request #1730 from chri2/fix_rspamd_redis
...
add redis database configuration
2023-10-21 13:00:08 +02:00
Chris Vogel
e6e58ec269
improve dovecots rspamd integration
...
For rspamd being able to learn ham or spam from messages being moved into spam/junk folders or out of them dovecot needs to know how spam/junk folders and trash folders are named.
The former rules narrowed the folders being recognized as spam/trash down to just 'Junk, SPAM, Trash' (case-senistive).
Since users and admins can change the foldernames and write their own seive filters to use those folders I think it is a big improvement if more folders will be recognized.
The change is supposed to accept some more commonly used folder names for spam and trash in a case-insensitive manner.
2023-10-18 23:04:24 +02:00
Chris Vogel
a2faa8add9
add redis database configuration
...
https://github.com/YunoHost/issues/issues/2266
without this rspamd does not use the redis database
2023-10-17 14:49:32 +02:00
Alexandre Aubin
db30b3acb8
Merge branch 'bookworm' into portal-api
2023-09-27 18:57:02 +02:00
Kayou
2bd3dd2bba
set maxretry to 10
2023-09-08 22:31:08 +02:00
Kay0u
d0b65d5661
revert important variables in fail2ban jail.conf
2023-09-08 15:17:25 +02:00
Kay0u
8eb2e72282
Update Fail2ban jail.conf file from https://sources.debian.org/src/fail2ban/1.0.2-2/config/jail.conf/
2023-09-08 15:13:20 +02:00
selfhoster1312
26d4d9420c
Allow inline scripts for yunohost-portal (nginx CSP)
2023-08-15 14:12:08 +02:00
Alexandre Aubin
afd7b37ebc
Tweak nginx portal conf to serve html/css/js/assets from /usr/share/yunohost/portal, similar to webadmin
2023-07-30 23:53:43 +02:00
Alexandre Aubin
09c5a4cfb9
admin and portalapi: propagate new configurable CORS mechanism from moulinette
2023-07-29 19:15:30 +02:00
Alexandre Aubin
ae37b5fc24
portalapi: Add new yunohost-portal-api to yunohost services
2023-07-17 19:47:24 +02:00
Alexandre Aubin
f69f87fa65
Merge remote-tracking branch 'origin/dev' into portal-api
2023-07-17 18:56:05 +02:00
Alexandre Aubin
f4dfb56006
portal refactoring: the 'yunohost tile' thingy won't work anymore, gotta discuss what we want to do exactly
2023-07-15 16:01:03 +02:00
Alexandre Aubin
0cb673c125
portalapi: woopsies
2023-07-14 19:35:05 +02:00
Alexandre Aubin
5104c2a79f
portalapi: add CORS headers ... though gotta revisit this later, I don't know what I'm doing
2023-07-14 19:11:32 +02:00
Alexandre Aubin
5e1d69a2cb
portalapi: harden systemd service configuration
2023-07-14 18:55:33 +02:00
Alexandre Aubin
a1cf770e1b
Merge branch 'dev' into portal-api
2023-07-11 17:11:02 +02:00
Alexandre Aubin
7ba6c37eb8
Merge branch '11.2' into bookworm
2023-07-11 15:56:52 +02:00
Alexandre Aubin
432a9ab544
regenconf/ssh: disable Banner by default
2023-07-10 19:19:28 +02:00
Alexandre Aubin
961dc5a6ee
Merge pull request #815 from YunoHost/allow-system-user-to-auth-on-mail-stack
...
Allow system users to auth on the mail stack and send emails
2023-07-10 19:14:30 +02:00
Alexandre Aubin
6b24412910
Merge pull request #1534 from YunoHost/fix-ocsp-stapling
...
Fix OCSP stapling ... but using tech giant resolvers :|
2023-07-10 19:12:19 +02:00
