holger krekel
22d77f4680
splitout base class for dictproxy
2024-07-22 13:51:32 +02:00
holger krekel
46c34bfbea
use class for dispatching lookups
2024-07-22 13:51:32 +02:00
link2xt
052fb64a3d
nginx: use numbers for upstream ports
...
Otherwise nginx fails when user actually tries to connect,
logs have errors such as
`invalid port in upstream "127.0.0.1:imaps"`
and
`invalid port in upstream "127.0.0.1:submissions"`.
2024-07-17 17:13:05 +00:00
link2xt
e8bf051cd0
refactor: use f-string in logging where it is easy
...
% is only interpreted if there are two or more arguments:
<https://docs.python.org/3/library/logging.html#logging.Logger.debug >
So it is safe to pass a single argument with already formatted
string.
2024-07-16 09:13:56 +00:00
holger krekel
d3c29b2f6e
rename chatmail_domain to mail_domain like is used everywhere else
2024-07-16 10:34:08 +02:00
holger krekel
ef7f4965d4
add changelog entry
2024-07-16 10:34:08 +02:00
holger krekel
c593906c26
fix dns zone file comment syntax
2024-07-16 10:34:08 +02:00
holger krekel
27eea671dc
fix pyinfra run to account for new pyinfra release
2024-07-16 10:34:08 +02:00
holger krekel
79a9d2345b
more tests and refinements
2024-07-16 10:34:08 +02:00
holger krekel
c3caddcec9
separate between required and recommended entries
2024-07-16 10:34:08 +02:00
holger krekel
6d90182d2e
add DNS tests, make remote ssh-exec errors show locally, cleanup ssh-bootstrap
2024-07-16 10:34:08 +02:00
holger krekel
ea503a6075
restructure DNS checks
2024-07-16 10:34:08 +02:00
holger krekel
ffe313528e
simplify remote zone-file checking and insist for "dns" subcommand that all records are present
2024-07-16 10:34:08 +02:00
holger krekel
9b5b4c3787
- better debugging for DNS queries
...
- don't try to guess IP addresses but insist on A and AAAA records
- try to allow ipv4 or ipv6 only zones
- move chatmail.zone generation to jinja so we can have conditionals
2024-07-16 10:34:08 +02:00
holger krekel
c5bf3188a4
report back on ip determination -- deal with failure to obtain ip address
2024-07-16 10:34:08 +02:00
holger krekel
c4f46dc499
fix maildata handling after prematurely merging #369
2024-07-13 19:20:06 +02:00
Daniel Kahn Gillmor
c1fd573de2
Add tests for alternate mail subjects
2024-07-13 18:33:42 +02:00
Daniel Kahn Gillmor
c6b083472f
Accept encrypted messages that use hcp_minimal
...
in draft-ietf-lamps-header-protection-22, hcp_minimal recommends
"[...]" as the obscured Subject header. In the pending draft
-23 (hopefully released this week, going into a working group last
call), the same HCP will be renamed to hcp_baseline, but it still
recommends the use of "[...]" for the obscured Subject header.
2024-07-13 18:33:42 +02:00
holger krekel
254fe95394
postfix was hitting the "100 clients" smtp-submission connected limit (DC apps) and switched to stress mode which brings more randomness/relay to smtp-connections. We now allow 5K because it should be fine for the machine.
2024-07-13 17:19:15 +02:00
holger krekel
ac61ac082e
Revert "postfix: fix timeout to 300s on submission ports"
...
This reverts commit 39584c7b7d
2024-07-13 16:13:54 +02:00
link2xt
02df395dab
filtermail: do not inject addresses into fromat string
2024-07-13 11:46:49 +02:00
link2xt
39584c7b7d
postfix: fix timeout to 300s on submission ports
...
Otherwise smtpd reduces it to 10s on "overload".
2024-07-13 11:46:20 +02:00
link2xt
4ebc4f3069
postfix: do not lookup client hostnames
2024-07-13 11:45:54 +02:00
missytake
1eca8aa143
CI: don't let commits in other PRs interrupt CI runs ( #361 )
2024-07-12 12:05:21 +02:00
missytake
9c09d50e8f
acmetool: reload nginx after requesting new cert
2024-07-12 11:07:35 +02:00
link2xt
d73e896e66
Add changelog entry for HTTPS/IMAP/SMTP multiplexing
2024-07-11 10:31:45 +00:00
link2xt
283045dc4a
Multiplex HTTPS, IMAP and SMTP on port 443
...
Services are distinguished based on ALPN.
For example,
openssl s_client -connect example.org:443 -alpn smtp
gives SMTP connection and
openssl s_client -connect example.org:443 -alpn imap
gives IMAP connection.
2024-07-11 10:30:46 +00:00
holger krekel
180cfb3951
get rid of xfailing test
2024-07-11 12:08:33 +02:00
holger krekel
610637da80
don't report on xfail, it's useless
2024-07-11 02:16:08 +02:00
holger krekel
73e6f5e6da
apply last review suggestions
2024-07-10 19:20:51 +02:00
holger krekel
b7e6926880
changing newline-naming as suggested
2024-07-10 19:20:51 +02:00
holger krekel
a7ef6ee35b
don't use kwargs for overrides parameter
2024-07-10 19:20:51 +02:00
holger krekel
920e062293
let config.get_user_maildir return a Path
2024-07-10 19:20:51 +02:00
holger krekel
794a0608a1
Path-ify config.mailboxes_dir
2024-07-10 19:20:51 +02:00
holger krekel
fc09653de3
remove all occurences of hardcoded /home/vmail for database and mailbox dirs
2024-07-10 19:20:51 +02:00
holger krekel
c8661fd135
introduce "mailboxes_dir" config ini option to avoid hardcoding /home/vmail/mail/....
...
in source code and to improve testability.
2024-07-10 19:20:51 +02:00
holger krekel
4b0600a453
be a bit more lenient on keeping old users
2024-07-10 00:02:34 +02:00
holger krekel
f1c10cac2b
chunked deletion
2024-07-10 00:02:34 +02:00
holger krekel
af83ca0235
ensuring int-ness of last_login
2024-07-09 19:12:55 +02:00
holger krekel
8f6870ebb7
fix and streamline deletion test
2024-07-09 19:12:55 +02:00
holger krekel
0e8bdbd3e3
streamline address deletion test
2024-07-09 19:12:55 +02:00
holger krekel
0d593c22d1
apply code review and also catch "." as username
2024-07-09 19:12:55 +02:00
holger krekel
a1f0a3e23b
Apply suggestions from code review
...
Co-authored-by: link2xt <link2xt@testrun.org >
2024-07-09 19:12:55 +02:00
holger krekel
9b15d8de24
more precise test, streamline wording (accounts -> address)
2024-07-09 19:12:55 +02:00
holger krekel
aaa51cf234
add changelog PR link
2024-07-09 19:12:55 +02:00
holger krekel
66c7115cfc
run removal of inactive users daily
2024-07-09 19:12:55 +02:00
holger krekel
823386d824
delete inactive users works
2024-07-09 19:12:55 +02:00
holger krekel
433cb71211
basic remove-users functionality and tests
2024-07-09 19:12:55 +02:00
link2xt
62c60d3070
doveauth: log when a new account is created
2024-07-09 00:24:06 +02:00
holger krekel
698d328620
don't do PTR reverse checking
2024-07-08 21:48:27 +02:00
