78 Commits

Author	SHA1	Message	Date
missytake	28fc91f5f3	rspamd: add rate limiting	2024-01-12 15:47:36 +00:00
missytake	67062677b0	disable some unnecessary rspamd modules	2024-01-12 15:47:36 +00:00
missytake	faf8ffe678	do DKIM signing with rspamd instead of openDKIM	2024-01-12 15:47:36 +00:00
missytake	5821098699	DNS: added www subdomain to zonefile	2024-01-12 13:34:23 +00:00
link2xt	542d63888a	nginx: redirect www. to non-www	2024-01-12 13:34:23 +00:00
link2xt	449f8a014c	Fix indentation in nginx.conf.j2	2024-01-12 13:34:23 +00:00
link2xt	57764d0cf5	dns: require www. subdomain and request TLS certificate for it	2024-01-12 13:34:23 +00:00
link2xt	c39a79e26a	dns: check mta-sts CNAME directly without resolving to IP	2024-01-12 13:34:23 +00:00
link2xt	b6622fc68e	chore: run scripts/cmdeploy fmt	2024-01-12 12:18:28 +00:00
missytake	bcc54602ee	postfix: cleanup submission headers	2024-01-05 12:13:31 +01:00
missytake	f9998d5721	tests: if sender's public IP address is in the Received header	2024-01-05 12:13:31 +01:00
nudeldudel	8605ceba5e	Update master.cf.j2 ... Add submission-header-cleanup to reduce the meta-data	2024-01-05 12:13:31 +01:00
link2xt	70b0e9d5e5	postfix: increase compatibility_level to 3.6	2023-12-27 00:29:12 +01:00
missytake	fdd533aa3b	acmetool: stop nginx so acmetool-redirector can start	2023-12-25 23:45:40 +01:00
link2xt	a44ed0aeb3	Use dig +short option to simplify DNS parsing ... Without this option parsing of answer was flaky as for long records like _submission._tcp.nine.testrun.org. dig printed the result with a space rather than tab as a separator and .split("\t") did not work. This change makes the `dig` command print the answer in the form we need so there is no need for complex parsing other than taking the first line. `-r` option is added to make sure options are not changed by .digrc in the root home directory.	2023-12-22 21:49:12 +00:00
link2xt	f5bfa6bd56	test: test scanning QR code	2023-12-21 22:22:38 +00:00
link2xt	81a6f8808b	fix: escape login and password when passed from dovecot to doveauth ... This should allow to use / in the password	2023-12-21 22:22:38 +00:00
missytake	46d5dbb07d	DNS: nicer output for reverse DNS/PTR records. fixes #143	2023-12-20 19:26:50 +01:00
missytake	d2e0d1fecc	DNS: flush_zone before validating DNS entries. fixes #140	2023-12-20 19:26:50 +01:00
missytake	d333cfdd5a	lint: fix 1 issue	2023-12-20 19:26:50 +01:00
missytake	40a3a2cc86	tests: make test init work with reachable chatmail_domain	2023-12-20 19:26:50 +01:00
missytake	fe978a1971	DNS: increase SSH command's timeout to 10 seconds (the default)	2023-12-20 19:26:50 +01:00
missytake	b426c2e7ff	DNS: error if can't connect with SSH. fixes #144	2023-12-20 19:26:50 +01:00
missytake	b626464453	cmdeploy: fail init and run if SSH doesn't connect	2023-12-20 19:26:50 +01:00
missytake	76c3316f02	cmdeploy init: make output green if DNS is correct	2023-12-19 19:39:49 +01:00
missytake	a6a9406228	DNS: making CLI output slightly prettier	2023-12-19 19:39:49 +01:00
missytake	7921f5dd0b	DNS: fix some crashes in cmdeploy dns	2023-12-19 19:39:49 +01:00
missytake	39fc9d628f	cmdeploy: only run cmdeploy dns after cmdeploy run	2023-12-19 19:39:49 +01:00
link2xt	85a9183b61	Do not call show_dns with run args	2023-12-19 19:39:49 +01:00
missytake	36a4381484	DNS: use local dig if ssh fails	2023-12-19 19:39:49 +01:00
missytake	5ff98a571c	DNS: commit hpk's suggestion	2023-12-19 19:39:49 +01:00
missytake	0a91aeb4a3	cmdeploy: simplify check_necessary_dns output	2023-12-19 19:39:49 +01:00
missytake	c38f1d7e54	DNS: fix reverse DNS checking	2023-12-19 19:39:49 +01:00
missytake	03aab4043c	DNS: fix CNAME resolving, don't print ssh commands for DNS requests	2023-12-19 19:39:49 +01:00
missytake	146def2f06	cmdeploy: show DNS info at begin and end of cmdeploy run	2023-12-19 19:39:49 +01:00
missytake	d642224a73	DNS: flush cache in the beginning	2023-12-19 19:39:49 +01:00
missytake	0238437ce7	DNS: get DNS records with server-side dig	2023-12-19 19:39:49 +01:00
missytake	7ed59ea8bc	DNS: move getting IPs to dns.py	2023-12-19 19:39:49 +01:00
missytake	49d0a0bbb0	DNS: fix parsing	2023-12-19 19:39:49 +01:00
missytake	330a034329	DNS: ignore DNS resolvers which don't give us JSON	2023-12-19 19:39:49 +01:00
missytake	aee18215fc	DNS: Also check A and CNAME entries	2023-12-19 19:39:49 +01:00
missytake	336f87770d	cmdeploy: write --zonefile to file	2023-12-19 19:39:49 +01:00
missytake	4199e04ab3	cmdeploy: fixing DNS CLI output	2023-12-19 19:39:49 +01:00
missytake	d2fe417715	DNS: try other resolvers if the first doesn't have it	2023-12-19 19:39:49 +01:00
missytake	2b731bf909	DNS: also add IPv4 entry to zonefile	2023-12-19 19:39:49 +01:00
missytake	2669babb53	DNS: added checks for PTR records	2023-12-19 19:39:49 +01:00
missytake	fe675a9a72	cmdeploy: dns --zonefile subcommand to just print the zonefile	2023-12-19 19:39:49 +01:00
missytake	79f766b28e	tests: mark test as xfail until we can test for CLI output	2023-12-19 19:39:49 +01:00
missytake	0eeb692c4b	DNS: re-use HTTP session to reduce query time by 7 seconds	2023-12-19 19:39:49 +01:00
missytake	6c401173db	DNS: also generate AAAA entry	2023-12-19 19:39:49 +01:00