sovereign

Commit Graph

Аутор	SHA1	Порука	Датум
Thomas Buck	029bbca332	various fixes. noreply mail account, commento, fathom, postgres.	пре 2 година
Thomas Buck	ee0f739b1d	Lots of updates, first test of VPN.	пре 4 година
Thomas Buck	781a660162	dont send DMARC reports to ourselves	пре 5 година
Thomas Buck	14c4c800ba	Minimal config with only mail and web and git hosting. So disable z-push backend CalDav and CardDav integration for now.	пре 5 година
Thomas Buck	50ca2d19b2	Remove indices from mailserver SQL schema and added send-only users.	пре 5 година
Thomas Buck	f17f41b536	use mail as dkim selector. explicitely give keysize. add localhost to sasl exceptions.	пре 5 година
Thomas Buck	2d359819a2	Similar log settings for all apache virtual hosts	пре 5 година
Thomas Buck	f7094f17dd	Generate mail autoconfig for all domains and put them in well-known too	пре 5 година
Thomas Buck	7b8f15528d	Fix a bunch of broken http->https redirects and make them always temporary	пре 5 година
Thomas Buck	db6a0571a6	Newer Dovecot won't start with SSLv2 in config	пре 5 година
Thomas Buck	5a900bb33a	Use Z-Push from official upstream repos. Configure imap, caldav, carddav backends properly for nextcloud. Using Z-Push Autodiscover.	пре 5 година
Thomas Buck	9411373c5b	Cleanup postfix task. Move password hashing into top level config file.	пре 5 година
Thomas Buck	7096fec015	don't keep extra var for organization thats not really needed.	пре 5 година
Thomas Buck	e452e31e42	Rename mail_virtual_domains to only virtual_domains, will later also use for web.	пре 5 година
Thomas Buck	31afcaa7b9	Remove encfs and call directory data instead of decrypted	пре 5 година
John Giannelos	351addffd7	Force https on mail autoconfig apache vhost.	пре 7 година
Mike Ashley	486c3f1414	Replace OpenDKIM with Rspamd's dkim_signing module - remove configuration of OpenDKIM - remove OpenDKIM milter from postfix's configuration - add configuration files for rpsamd's dkim module - update the rspamd task - update services in README	пре 6 година
Mike Ashley	14615ae223	Switch to Rspamd for DMARC handling - Remove OpenDMARC - Configure Rspamd for DMARC handling - Update services and how to set up DNS records in README	пре 6 година
Mike Ashley	5e2c8c8a2d	Remove redundant greylisting	пре 6 година
Mike Ashley	c9bb6dba92	Remove rmilter from mailserver configuration Rmilter [is no longer needed](https://rspamd.com/doc/quickstart.html#rmilter-setup) as of Rspamd 1.6.	пре 6 година
Arjen Verstoep	46b234929a	Correct configuration of imap plugins	пре 6 година
Aaron D Borden	2bde2afb53	Use postmaster@ for DMARC reports	пре 7 година
Aleksandr Bogdanov	f5a38fec63	Implementing password hashing for ircbouncer and mailserver inside password_hash filter plugin	пре 7 година
Mike Ashley	166c57f045	Use submission port for client outgoing email Currently client email is submitted via ssmtp (port 465). This has been deprecated for years. The correct way to submit email is via submission (port 587). This patch adds port 587 as a second and the default way of submitting email for delivery. Port 465 remains open for backwards compatibility with existing clients.	пре 8 година
Carl Meyer	1a3d01f311	Complete rmilter/rspamd setup.	пре 8 година
Carl Meyer	d46fb1521b	Make OpenDMARC cron job email root only on error.	пре 8 година
Carl Meyer	57982401a9	Pass {auth_type} to milters, fixing OpenDKIM signing of authenticated SMTP messages.	пре 8 година
Mike Ashley	beaceafbd1	Update mailserver role to use LE certificate	пре 8 година
Mike Ashley	4c830e1b07	Override opendmarc defaults This patch restores sovereign's configuration of opendmarc.	пре 8 година
Mike Ashley	1bc60827ef	Revert opendmarc to use mysql An earlier commit started transitioning opendmarc to use postgres, but this was incomplete. This patch reverts that change and uses mysql for the reporting database. Other changes: * Do not maintain a copy of the database import schema. A copy is included in the distribution in /usr/share/doc, so that is used instead. * The configuration file is replaced with the distribution's sample configuration. A second patch will restore the actual configuration. This will make the changes easier to see if the default configuraton file changes in future versions of opendmarc.	пре 8 година
Mike Ashley	d3abc02f84	Clean up Apache SSL configuration Avoid using the Include directive. Move most of the SSL configuration to the global configuration and leave enabling the SSL engine to each virtual host that wants to use it.	пре 8 година
Sven Neuhaus	d59c5eff05	Generate 2048 DH group and add it to Postfix	пре 8 година
Sven Neuhaus	20bd80c599	Generate 2048 DH group and add it to Postfix	пре 8 година
Alex Payne	ecaa4c2330	Partially working Rspamd replacement for dspam	пре 8 година
Alex Payne	58a4532fe7	Better permission handling for OpenDMARC. Resolves #400.	пре 8 година
Alex Payne	417403f534	Use {{ mail_server_hostname }} over mail.servername Resolves #402.	пре 8 година
Miloš Hadžić	d823ed0848	Use lmtp instead of lda for delivery.	пре 8 година
Will McCutchen	16b66cc849	Define apache SSL config in one place	пре 9 година
Alex Payne	26d61c68a8	Implement OpenDMARC. Resolves #369.	пре 9 година
Sven Neuhaus	a088d9c456	Use "modern" SSLCipherSuite per Mozilla recommendations. See https://wiki.mozilla.org/Security/Server_Side_TLS for details. Removes RC4 cipher. Fixes issue #341. Also explicitly disabled SSLCompression and enables OCSP stapling. We should put all these settings in /etc/apache2/mods-enabled/ssl.conf to avoid duplication...	пре 9 година
Sven Neuhaus	ac59435d6e	exclude SSLv3 for all TLS to mitigate POODLE vulnerability	пре 9 година
Sven Neuhaus	f338b1e15d	Postfix: Disable SSLv2 and SSLv3 for mandatory TLS connections Postfix: Disable SSLv2 and SSLv3 for 'mandatory SSL' mode connections to completely mitigate the POODLE issue.	пре 9 година
Mike Ashley	cf5d98c505	Correct SMTP port number	пре 9 година
Patrick O'Doherty	6f6fc6a90f	Disable SSLv3 in all Apache vhosts	пре 9 година
Lorenzo Villani	8959f1c183	Add support for Thunderbird automatic configuration Resolves #114	пре 10 година
Michael West	aa2e1a0e74	Increase security of postfix smtp tls ciphers, that is sending email to other smtp servers using encryption	пре 10 година
Alex Payne	e6bd0a08c2	Set `smtpd_relay_restrictions` to backwards compatible mode. Resolves #231.	пре 10 година
Thom Wiggers	6312286b64	Remove ahbl as it's being winded down http://ahbl.org/content/changes-ahbl Fixes #232	пре 10 година
James Ravn	46eabbedd7	Limits z-push sync to 3 months This prevents timeouts when trying to sync very large mailboxes. By default, z-push attempts to get headers for all messages in a folder.	пре 10 година
Allen Riddell	9a6cbcd925	Quote password substitution (may contain spaces)	пре 10 година

Први Претходна 1 2 Следеће Последњи

80 Комити (029bbca33231c47647bcaf23fee5adffdf84b59e)