Mark Felder
1142d06fdb
Limit the bind for the HTTPS server on 8443 to 127.0.0.1
2025-03-15 07:42:09 +00:00
link2xt
35fe189be7
Pass through original_content instead of content in filtermail
...
This avoids unnecessary UTF-8 recoding and passes bytestring through.
2025-03-11 13:27:16 +00:00
missytake
a78e8e10d2
Merge pull request #517 from chatmail/opendkim-path
...
opendkim: add absolute path to opendkim-genkey
2025-03-11 12:20:17 +01:00
missytake
9af37ccfbf
opendkim: add absolute path to opendkim-genkey
2025-03-11 11:56:07 +01:00
l
803f3e6181
Merge pull request #514 from chatmail/link2xt/readme-tls
...
Document TLS requirements in the readme
2025-03-10 22:47:43 +00:00
link2xt
f188aef11e
Document TLS requirements in the readme
2025-03-09 15:52:44 +00:00
link2xt
76d7e60018
Remove cleanup service from submission ports
...
It does not work because of `smtpd_proxy_filter`
forwarding the message to filtermail
and we cleanup the message once
filtermail reinjects it on port 10025.
2025-03-09 10:26:53 +00:00
link2xt
fe749159e4
Document that authclean cleans up the Subject
2025-03-08 02:42:35 +00:00
adbenitez
3c3532a292
update links in CHANGELOG.md
2025-03-06 22:10:15 +01:00
adb
710ca0070f
Merge pull request #504 from chatmail/adb/delete-big-messages
...
delete big messages after 7 days
2025-03-04 17:40:44 +01:00
adbenitez
4038fefefd
add changelog entry
2025-03-04 17:37:58 +01:00
Timotheus Pokorra
cdcdc0b724
update Let's encrypt Subscriber Agreement
2025-03-04 16:00:28 +01:00
adbenitez
2313093b55
delete big messages after 7 days
2025-03-03 17:19:15 +01:00
missytake
3f2ec54725
mtail: fix getting logs from STDIN
2025-02-25 16:23:13 +01:00
missytake
e928a33f95
opendkim: restart once every day ( #498 )
...
fix #495
2025-02-19 21:50:48 +01:00
missytake
2780f53d3b
CI: accept ns.testrun.org host key ( #499 )
2025-02-19 21:24:23 +01:00
missytake
c3f1bdca52
filtermail: strip any empty lines at the end ( #496 )
2025-02-19 16:38:01 +01:00
missytake
f4e371676b
chatmaild: fix umask for doveauth + metadata ( #494 )
...
* chatmaild: fix umask for doveauth + metadata
fix #453
2025-02-17 19:10:26 +01:00
link2xt
8ec6e6e985
opendkim: use su instead of sudo
2025-02-17 19:09:50 +01:00
missytake
f4fc1a3f93
CI: stop nested acme directories on staging-ipv4
2025-02-17 01:17:11 +01:00
missytake
42bfb9f22f
journald: remove old logs from disk. ( #490 )
...
fix #486
2025-02-17 00:27:04 +01:00
link2xt
1a35cdc7a9
Require TLS 1.3 on client-facing ports
...
I tested with -tls1_2 option
of openssl s_client
that TLS 1.2 connections
are no longer possible
on any ports except port 25.
Port 25 requires at least TLS 1.2
for encrypted connections.
2025-02-16 23:01:56 +00:00
link2xt
2daac76574
Replace subject with [...] for outgoing mail
...
`authclean` cleanup server is used by
reinjecting smtpd running on localhost:10025 by default.
It runs after filtermail
and currently removes `Received` header
to avoid leaking IP address.
Can as well be used to replace `Subject` lines
with `Subject: [...]`.
If there are multiple `Subject` lines,
all of them should be replaced.
This allows us to avoid dealing with
localized subjects, including SecureJoin
messages `vc-request` and `vg-request`
which can have Subject lines like
Subject: =?utf-8?q?Nachricht_von_nrn178fi4=40nine=2Etestrun=2Eorg?=
2025-02-16 22:35:51 +00:00
link2xt
5633582d31
Add changelog entry for MTA-STS daemon removal
2025-02-16 21:27:15 +00:00
link2xt
667a987dfc
Remove MTA-STS daemon
2025-02-16 20:31:07 +00:00
link2xt
49907c78a3
Add changelog entry for crypt compatibility
2025-02-16 15:15:31 +00:00
adb
5cfdb0698f
use old crypt lib in python < 3.11 ( #483 )
2025-02-16 12:18:42 +00:00
link2xt
7e6f8ddfba
Simplify SPF record
...
There is no need to explicitly specify domain for `a` rule.
2025-02-15 03:51:49 +00:00
adb
4d915f9800
improve secure-join message detection ( #473 )
2025-01-28 04:48:07 +00:00
l
9e6ba1a164
fix: install gcc and python3-dev ( #477 )
...
These are needed to build crypt-r
2025-01-27 14:38:18 +00:00
adbenitez
20f76c83f8
replace deprecated crypt package with crypt-r
2025-01-26 19:48:46 +00:00
link2xt
b2995551a2
ci: remove iroh relay from zonefiles
...
iroh subdomain is not needed
since 95f8c4b269
2025-01-26 19:22:45 +00:00
link2xt
c8f46147e0
chore: ruff 0.9.2 fixes and formatting
2025-01-24 20:57:13 +01:00
missytake
9f6ea8121c
added changelog
2025-01-08 17:21:18 +01:00
missytake
9c08cbfbec
DNS: recommend DKIM record without space in between for some DNS web interfaces
2025-01-08 17:21:18 +01:00
missytake
c3190dd51a
doc: fix migration guide
...
fix #464
2025-01-08 16:55:10 +01:00
missytake
5b8de76c22
fix tests
2024-12-21 00:04:40 +01:00
missytake
d6205d9a04
add changelog
2024-12-21 00:04:40 +01:00
missytake
6a32192e50
Revert rest of #462
...
This reverts commit 88a8dc905b
2024-12-21 00:04:40 +01:00
missytake
5c78619750
DNS: make --all non-optional for cmdeploy dns
2024-12-21 00:04:40 +01:00
missytake
a7b808ebaf
Release 1.5.0
2024-12-20 10:53:36 +01:00
missytake
d11038b7b3
DNS: out() instead of print()
2024-12-20 10:46:42 +01:00
missytake
88a8dc905b
DNS: recommend cmdeploy dns --all in the README
2024-12-20 10:46:42 +01:00
missytake
a2fbb5dc37
add changelog
2024-12-20 10:46:42 +01:00
missytake
97c31e3820
fix tests
2024-12-20 10:46:42 +01:00
missytake
08c88caa46
CI: test all DNS records
2024-12-20 10:46:42 +01:00
missytake
8e5174ae44
DNS: add -all to cmdeploy dns
2024-12-20 10:46:42 +01:00
missytake
69fe5eac2b
DNS: more elegant solution to fix mta-sts record
2024-12-17 18:27:56 +01:00
missytake
46f6a07239
Revert "DNS: fix _mta-sts TXT record on initial setup"
...
This reverts commit 6d4af3cf0c
2024-12-17 18:27:56 +01:00
missytake
b268efbc6e
DNS: fix _mta-sts TXT record on initial setup
2024-12-17 18:27:56 +01:00
