holger krekel
f69a2355f6
better prerequisites
2025-03-21 21:40:05 +01:00
holger krekel
388c01105c
streamline intro/getting started
2025-03-21 21:36:26 +01:00
holger krekel
f8996e1d7d
Update README.md
...
Co-authored-by: bjoern <r10s@b44t.com >
2025-03-21 20:32:38 +01:00
holger krekel
6b3d5025d9
Update README.md
...
Co-authored-by: bjoern <r10s@b44t.com >
2025-03-21 20:32:38 +01:00
holger krekel
ed271189d2
trim the feature list
2025-03-21 20:32:38 +01:00
holger krekel
65f8a9a652
provide more summary info/perequisites in the README
2025-03-21 20:32:38 +01:00
holger krekel
6c5b9fde1f
Update README.md
...
Co-authored-by: l <link2xt@testrun.org >
2025-03-21 06:50:17 +01:00
holger krekel
258436442f
rework intro to read when coming from chatmail.at
2025-03-21 06:50:17 +01:00
link2xt
05a32efa50
fix: send SNI when connecting to outside servers
...
Otherwise email providers which allow to bring your own domain
and use the same IP addresses for all customers
send wildcard certificate instead of the correct one
and Postfix refuses to connect with an error
server certificate verification failed for example.org[A.B.C.D]:25: num=62:hostname mismatch
2025-03-16 11:21:16 +00:00
Mark Felder
1142d06fdb
Limit the bind for the HTTPS server on 8443 to 127.0.0.1
2025-03-15 07:42:09 +00:00
link2xt
35fe189be7
Pass through original_content instead of content in filtermail
...
This avoids unnecessary UTF-8 recoding and passes bytestring through.
2025-03-11 13:27:16 +00:00
missytake
a78e8e10d2
Merge pull request #517 from chatmail/opendkim-path
...
opendkim: add absolute path to opendkim-genkey
2025-03-11 12:20:17 +01:00
missytake
9af37ccfbf
opendkim: add absolute path to opendkim-genkey
2025-03-11 11:56:07 +01:00
l
803f3e6181
Merge pull request #514 from chatmail/link2xt/readme-tls
...
Document TLS requirements in the readme
2025-03-10 22:47:43 +00:00
link2xt
f188aef11e
Document TLS requirements in the readme
2025-03-09 15:52:44 +00:00
link2xt
76d7e60018
Remove cleanup service from submission ports
...
It does not work because of `smtpd_proxy_filter`
forwarding the message to filtermail
and we cleanup the message once
filtermail reinjects it on port 10025.
2025-03-09 10:26:53 +00:00
link2xt
fe749159e4
Document that authclean cleans up the Subject
2025-03-08 02:42:35 +00:00
adbenitez
3c3532a292
update links in CHANGELOG.md
2025-03-06 22:10:15 +01:00
adb
710ca0070f
Merge pull request #504 from chatmail/adb/delete-big-messages
...
delete big messages after 7 days
2025-03-04 17:40:44 +01:00
adbenitez
4038fefefd
add changelog entry
2025-03-04 17:37:58 +01:00
Timotheus Pokorra
cdcdc0b724
update Let's encrypt Subscriber Agreement
2025-03-04 16:00:28 +01:00
adbenitez
2313093b55
delete big messages after 7 days
2025-03-03 17:19:15 +01:00
missytake
3f2ec54725
mtail: fix getting logs from STDIN
2025-02-25 16:23:13 +01:00
missytake
e928a33f95
opendkim: restart once every day ( #498 )
...
fix #495
2025-02-19 21:50:48 +01:00
missytake
2780f53d3b
CI: accept ns.testrun.org host key ( #499 )
2025-02-19 21:24:23 +01:00
missytake
c3f1bdca52
filtermail: strip any empty lines at the end ( #496 )
2025-02-19 16:38:01 +01:00
missytake
f4e371676b
chatmaild: fix umask for doveauth + metadata ( #494 )
...
* chatmaild: fix umask for doveauth + metadata
fix #453
2025-02-17 19:10:26 +01:00
link2xt
8ec6e6e985
opendkim: use su instead of sudo
2025-02-17 19:09:50 +01:00
missytake
f4fc1a3f93
CI: stop nested acme directories on staging-ipv4
2025-02-17 01:17:11 +01:00
missytake
42bfb9f22f
journald: remove old logs from disk. ( #490 )
...
fix #486
2025-02-17 00:27:04 +01:00
link2xt
1a35cdc7a9
Require TLS 1.3 on client-facing ports
...
I tested with -tls1_2 option
of openssl s_client
that TLS 1.2 connections
are no longer possible
on any ports except port 25.
Port 25 requires at least TLS 1.2
for encrypted connections.
2025-02-16 23:01:56 +00:00
link2xt
2daac76574
Replace subject with [...] for outgoing mail
...
`authclean` cleanup server is used by
reinjecting smtpd running on localhost:10025 by default.
It runs after filtermail
and currently removes `Received` header
to avoid leaking IP address.
Can as well be used to replace `Subject` lines
with `Subject: [...]`.
If there are multiple `Subject` lines,
all of them should be replaced.
This allows us to avoid dealing with
localized subjects, including SecureJoin
messages `vc-request` and `vg-request`
which can have Subject lines like
Subject: =?utf-8?q?Nachricht_von_nrn178fi4=40nine=2Etestrun=2Eorg?=
2025-02-16 22:35:51 +00:00
link2xt
5633582d31
Add changelog entry for MTA-STS daemon removal
2025-02-16 21:27:15 +00:00
link2xt
667a987dfc
Remove MTA-STS daemon
2025-02-16 20:31:07 +00:00
link2xt
49907c78a3
Add changelog entry for crypt compatibility
2025-02-16 15:15:31 +00:00
adb
5cfdb0698f
use old crypt lib in python < 3.11 ( #483 )
2025-02-16 12:18:42 +00:00
link2xt
7e6f8ddfba
Simplify SPF record
...
There is no need to explicitly specify domain for `a` rule.
2025-02-15 03:51:49 +00:00
adb
4d915f9800
improve secure-join message detection ( #473 )
2025-01-28 04:48:07 +00:00
l
9e6ba1a164
fix: install gcc and python3-dev ( #477 )
...
These are needed to build crypt-r
2025-01-27 14:38:18 +00:00
adbenitez
20f76c83f8
replace deprecated crypt package with crypt-r
2025-01-26 19:48:46 +00:00
link2xt
b2995551a2
ci: remove iroh relay from zonefiles
...
iroh subdomain is not needed
since 95f8c4b269
2025-01-26 19:22:45 +00:00
link2xt
c8f46147e0
chore: ruff 0.9.2 fixes and formatting
2025-01-24 20:57:13 +01:00
missytake
9f6ea8121c
added changelog
2025-01-08 17:21:18 +01:00
missytake
9c08cbfbec
DNS: recommend DKIM record without space in between for some DNS web interfaces
2025-01-08 17:21:18 +01:00
missytake
c3190dd51a
doc: fix migration guide
...
fix #464
2025-01-08 16:55:10 +01:00
missytake
5b8de76c22
fix tests
2024-12-21 00:04:40 +01:00
missytake
d6205d9a04
add changelog
2024-12-21 00:04:40 +01:00
missytake
6a32192e50
Revert rest of #462
...
This reverts commit 88a8dc905b
2024-12-21 00:04:40 +01:00
missytake
5c78619750
DNS: make --all non-optional for cmdeploy dns
2024-12-21 00:04:40 +01:00
missytake
a7b808ebaf
Release 1.5.0
2024-12-20 10:53:36 +01:00
