holger krekel
180cfb3951
get rid of xfailing test
2024-07-11 12:08:33 +02:00
holger krekel
610637da80
don't report on xfail, it's useless
2024-07-11 02:16:08 +02:00
holger krekel
a7ef6ee35b
don't use kwargs for overrides parameter
2024-07-10 19:20:51 +02:00
holger krekel
fc09653de3
remove all occurences of hardcoded /home/vmail for database and mailbox dirs
2024-07-10 19:20:51 +02:00
holger krekel
c8661fd135
introduce "mailboxes_dir" config ini option to avoid hardcoding /home/vmail/mail/....
...
in source code and to improve testability.
2024-07-10 19:20:51 +02:00
holger krekel
a1f0a3e23b
Apply suggestions from code review
...
Co-authored-by: link2xt <link2xt@testrun.org >
2024-07-09 19:12:55 +02:00
holger krekel
66c7115cfc
run removal of inactive users daily
2024-07-09 19:12:55 +02:00
holger krekel
698d328620
don't do PTR reverse checking
2024-07-08 21:48:27 +02:00
holger krekel
85bb301255
feat: faster and simpler DNS checks, better ip-address determination ( #346 )
...
* drastically reduce round-trips for dns checks, and do it during 'run' and 'dns' sub commands
* provide progress-dots for dns checks and "--verbose" for seeing what is executed remotely
* introduce ssh-mediated remote python function execution mechanism
2024-07-08 20:10:52 +02:00
link2xt
0d61c13c58
DKIM-sign Content-Type and oversign all signed headers
...
Oversigning (including header name in DKIM-Signature
more times that it appears in the mail) prevents
adding more headers with the same name
without invalidating DKIM signature.
We don't want middleboxes to insert a second From header,
adding Cc field to mails that don't have one etc.
2024-07-08 14:27:11 +00:00
holger krekel
15f79e0826
remove fix-file-owner which takes forever on servers with many mail directories
...
(it's unclear why this is still needed and should be fixed differently in any case)
2024-07-06 10:31:41 +02:00
holger krekel
3d96f0fdfa
Support iterating over all users with doveadm commands ( #344 )
2024-07-06 01:19:57 +00:00
link2xt
733b9604ba
dovecot: enable gzip compression on disk
2024-07-05 20:13:03 +00:00
link2xt
969fdd7995
Remove sieve to enable hardlink deduplication in LMTP
...
LMTP does not deduplicate messages
if sieve plugin is used.
We don't check for Auto-Submitted header anymore
as iOS application has a notification service
and should not display "You have a new message".
2024-07-05 19:22:26 +00:00
link2xt
b1d11d7747
Revert 57c29c14a4
...
Apparently this causes outlook.com messages to be rejected
even though they don't use `l=` tag.
2024-07-03 20:36:31 +00:00
link2xt
17389b8667
Increase number of logged in IMAP sessions to 50000
2024-07-01 17:20:23 +00:00
Christian Hagenest
f7ef236ac8
Revert "CI: disable requesting new certs for staging.testrun.org"
...
This reverts commit 127d9d6460
2024-06-18 14:49:37 +02:00
link2xt
57c29c14a4
Reject DKIM signatures that do not cover the whole message body
2024-06-18 02:48:54 +00:00
missytake
501b12564c
tests: mark expunged test as slow
2024-06-06 14:14:31 +02:00
missytake
4271573e15
DNS: don't check DNS on cmdeploy init anymore
2024-06-04 14:30:39 +02:00
Christian Hagenest
777a7addd2
Ensure cron is installed #282 ( #310 )
2024-05-27 14:04:40 +02:00
Christian Hagenest
4e65291304
fix up
2024-05-19 17:09:35 +02:00
Christian Hagenest
505ad36b36
fix nginx.conf
2024-05-19 17:09:35 +02:00
Christian Hagenest
e06c3631b2
nginx logs => journald
2024-05-19 17:09:35 +02:00
Christian Hagenest
da236e6e1b
only restart journald if conf was changed
2024-05-19 17:09:35 +02:00
Christian Hagenest
2796730a87
journald.conf storage=volatile
2024-05-19 17:09:35 +02:00
missytake
127d9d6460
CI: disable requesting new certs for staging.testrun.org
2024-05-18 22:02:51 +02:00
Christian Hagenest
cb7de8019b
add acl to apt.packages ( #293 )
2024-05-17 21:36:36 +02:00
Christian Hagenest
2b5b06316d
fix #272 ( #290 )
...
@missytake and me both tested the deployment manually, so I'll merge
2024-05-17 17:45:28 +02:00
link2xt
76b56d7b78
metadata: add support for /shared/vendor/deltachat/irohrelay
2024-05-07 15:52:54 +00:00
holger krekel
c1163228f6
add a test for imap capabilities offered from chatmail
2024-05-06 19:57:31 +02:00
holger krekel
0a968aae93
add XCHATMAIL marker
2024-05-06 19:57:31 +02:00
link2xt
879cffc056
Configure more lints and switch from black to ruff format
2024-05-06 14:41:00 +00:00
link2xt
e1b1a945b1
Authenticate echobot by passing /run/echobot/password to doveauth
2024-05-05 15:25:44 +00:00
link2xt
0493e27312
Move echobot into /var/lib/echobot
2024-05-05 15:25:44 +00:00
missytake
f35d98bb40
acmetool: enable debugging
2024-05-01 10:45:21 +02:00
missytake
0a72c2fba7
acmetool: accept new terms of services
...
closes #275
2024-05-01 00:21:58 +02:00
link2xt
39f5f64998
Reload Dovecot and Postfix when TLS certificate updates ( #271 )
2024-04-15 14:08:32 +00:00
Christian Hagenest
e372599ce7
change location of changes per nami's recommendation
2024-04-11 19:15:28 +02:00
Christian Hagenest
ce9fb02a75
correct key for obs home deltachat
2024-04-11 19:15:28 +02:00
Christian Hagenest
4526f5e772
apt update after adding new repository
2024-04-11 19:15:28 +02:00
Christian Hagenest
616a42c8f3
add our obs repo to cmdeploy init
2024-04-11 19:15:28 +02:00
missytake
2d26a40c2b
DNS: lint
2024-04-03 15:12:52 +02:00
missytake
a78d4e6198
DNS: optimize dnsutils installation command
2024-04-03 15:12:52 +02:00
missytake
2a1e004962
DNS: ensure dig is installed
2024-04-03 15:12:52 +02:00
link2xt
5e55cc205d
Run chatmail-metadata and doveauth as vmail
2024-03-30 23:08:42 +01:00
link2xt
221f4a2b0c
Apply systemd restrictions to echobot
...
These options are suggested by
`systemd-analyze security echobot.service`
2024-03-30 14:17:48 +00:00
link2xt
1c2bf919ed
Start Dovecot before Postfix
2024-03-29 04:24:54 +00:00
link2xt
d15c22c1e8
Configure users and groups before installing any packages
...
Otherwise packages may add user
without correct configuration such as groups
and the step adding user will be skipped.
2024-03-29 04:24:54 +00:00
link2xt
3a50d82657
Move systemd unit templates to cmdeploy
...
They are part of deployment rather than service itself.
Different deployments may have different users,
filesystem layout etc.
2024-03-28 16:38:30 +01:00
