georglauterbach
69c83c4f81
Merge branch 'master' into update-base-image
2024-01-15 10:49:49 +01:00
Den
ce6ebcc021
docs: Rspamd DKIM config simplify via path setting ( #3702 )
...
docs: Rspamd DKIM config (`dkim_signing.conf`) example has been simplified via `path` + `selector` settings.
---------
Co-authored-by: Brennan Kinney <5098581+polarathene@users.noreply.github.com>
2024-01-15 13:10:03 +13:00
Brennan Kinney
1449629479
fix: Revert quoting SA_SPAM_SUBJECT in mailserver.env ( #3767 )
...
In Docker Compose `.env` files are parsed properly when values are wrapped with quotes. Trailing white-space is also discarded, like it would be with shell variables.
This is not the case with `docker run` or other CRI like `podman` (_including it's compose equivalent support_). Those will parse the quotes to be included in a literal string value. Trailing white-space is also retained.
Hence a default with a trailing space is not compatible across CRI. This change documents the default with additional context on how to include a trailing white-space with a custom value for the users CRI choice. It additionally clearly communicates the opt-out value for this feature.
2024-01-15 11:23:23 +13:00
Georg Lauterbach
3a142f9726
tests: small adjustments ( #3772 )
2024-01-14 23:14:03 +01:00
github-actions[bot]
f794f65caa
docs: updated CONTRIBUTORS.md ( #3777 )
...
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2024-01-14 14:08:27 +01:00
Joerg Sonnenberger
e3331b0f44
feat: Add MTA-STS support for outbound mail ( #3592 )
...
* feat: add support for MTA-STS for outgoing mails
* Hook-up mta-sts-daemon into basic process handling test
* fix: Call python script directly
The python3 shebang will run it, which will now meet the expectations of the process testing via pgrep. fail2ban has the same approach.
---------
Co-authored-by: Brennan Kinney <5098581+polarathene@users.noreply.github.com>
2024-01-13 21:37:20 +13:00
Casper
71e1102749
Tiny #3480 follow up: Add missing ENABLE_OAUTH2 var ( #3775 )
2024-01-12 23:48:14 +01:00
Keval Kapdee
52c4582f7b
feat: Auth - OAuth2 (Dovecot PassDB) ( #3480 )
...
Co-authored-by: Brennan Kinney <5098581+polarathene@users.noreply.github.com>
2024-01-13 09:45:14 +13:00
Georg Lauterbach
06fab3f129
tests: streamline tests and helpers further ( #3747 )
...
Co-authored-by: Brennan Kinney <5098581+polarathene@users.noreply.github.com>
2024-01-11 10:34:08 +01:00
Casper
aba218e6d7
Fix jaq: Download platform specific binary ( #3766 )
...
* choose architecture dynamically
2024-01-10 12:31:30 +13:00
dependabot[bot]
8d8936dfac
chore(deps): Bump anchore/scan-action from 3.3.8 to 3.4.0 ( #3761 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-01-08 17:40:50 +00:00
dependabot[bot]
ac25fb495b
chore(deps): Bump docker/metadata-action from 5.4.0 to 5.5.0 ( #3762 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-01-08 18:39:28 +01:00
Brennan Kinney
5e28c17cf4
docs: SpamAssassin ENV docs refactor ( #3756 )
...
* chore: Log `SPAMASSASSIN_SPAM_TO_INBOX=1` ENV correctly
ENV name logged was incomplete.
* docs: Update SA related ENV docs
* fix: Log level `warning` should be `warn`
* docs: FAQ - Revise outdated SA entry
* chore: Antispam / Antivirus => Anti-spam / Anti-virus
* docs: ENV - Additional revisions to SA ENV
* docs: ENV - Move `ENABLE_SPAMASSASSIN_KAM`
2024-01-08 03:07:38 +01:00
github-actions[bot]
8e20173200
docs: updated CONTRIBUTORS.md ( #3757 )
...
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2024-01-08 09:40:01 +13:00
Brennan Kinney
6d666512c1
ci: .gitattributes - Ensure eol=lf for shell scripts ( #3755 )
...
* ci: `.gitattributes` - Ensure `eol=lf` for shell scripts
- These files should always use LF for line endings during a checkout.
- `Dockerfile` does not like building with HereDoc `RUN` scripts that expect LF.
2024-01-08 09:34:24 +13:00
Casper
0eb4ac7714
tests: Replace wc -l with grep -c ( #3752 )
2024-01-06 17:07:00 +01:00
Brennan Kinney
6082d5f8d0
chore: Disable smtputf8 support in config directly ( #3750 )
...
* chore: Disable `smtputf8` support in config
This was always configured disabled at runtime, better to just set explicitly in `main.cf` unless config diverges when Dovecot is enabled to opt-out of this feature.
2024-01-05 23:18:30 +01:00
Georg Lauterbach
04f4ae4569
Rspamd: add custom symbol scores for SPF, DKIM & DMARC ( #3726 )
2024-01-05 09:07:31 +01:00
Georg Lauterbach
8f391e4d5a
release: v13.2.0 ( #3746 )
...
* bump `VERSION` & adjust `CHANGELOG.md`
* chore: Bump the unreleased base compare tag in `CHANGELOG.md`
---------
Co-authored-by: Brennan Kinney <5098581+polarathene@users.noreply.github.com>
2024-01-04 22:14:51 +01:00
Georg Lauterbach
bf69ef248e
Postfix: add smtpd_data_restrictions = reject_unauth_pipelining ( #3744 )
...
* add `smtpd_data_restrictions = reject_unauth_pipelining`
* fix: Skip restriction if trusted
* add changelog entry
* revert change to `postfix-amavis.cf`
* Update CHANGELOG.md
---------
Co-authored-by: Brennan Kinney <5098581+polarathene@users.noreply.github.com>
2024-01-04 22:13:13 +01:00
Georg Lauterbach
45fd28091b
Merge branch 'master' into update-base-image
2024-01-03 21:42:53 +01:00
Georg Lauterbach
25c7024cc4
security(Postfix): Protect against "SMTP Smuggling" attack ( #3727 )
...
View `CHANGELOG.md` entry and PR for details.
---------
Co-authored-by: Brennan Kinney <5098581+polarathene@users.noreply.github.com>
2024-01-03 14:02:59 +13:00
Georg Lauterbach
9e81517fe3
tests: Use swaks instead of nc for sending mail ( #3732 )
...
See associated `CHANGELOG.md` entry for details.
---------
Co-authored-by: Brennan Kinney <5098581+polarathene@users.noreply.github.com>
2024-01-03 13:17:54 +13:00
Brennan Kinney
0889b0ff06
fix: supervisor-app.conf - Correct the log location for postgrey ( #3724 )
...
* fix: `supervisor-app.conf` - Correct `postgrey` log location
Looks like this should have been like every other service and reference a log file(s) based on program name in the supervisor log directory.
* tests: Adjust log location for `postgrey_enabled.bats`
2023-12-30 09:59:09 +13:00
Georg Lauterbach
8392e3c1a8
release: v13.1.0 ( #3720 )
...
Co-authored-by: Casper <casperklein@users.noreply.github.com>
Co-authored-by: Brennan Kinney <5098581+polarathene@users.noreply.github.com>
2023-12-29 13:58:54 +01:00
Brennan Kinney
72517d3f82
docs: Debugging - Delivery failure from service downtime ( #3718 )
...
* docs: Debugging - Delivery failure from service downtime
Services may be temporarily down, such as when restarted when certificates are updated due to the `check-for-changes.sh` service. This is another known source of intermittent delivery failures.
2023-12-26 09:53:32 +13:00
Georg Lauterbach
efa5fe4341
remove deprectaed comment about Rspamd PPA
2023-12-23 11:30:27 +01:00
Brennan Kinney
f49e2899af
Apply suggestions from code review
2023-12-23 19:34:10 +13:00
georglauterbach
a8057812a3
fix debug getmail
...
The output changed (due to a slight change in version); hence we need to
adjust the output of the dump.
2023-12-21 17:47:21 +01:00
georglauterbach
c9be8cd118
changed the default of DOVECOT_COMMUNITY_REPO to 0
2023-12-21 17:47:20 +01:00
georglauterbach
ef6639f8dd
further update the changelog
2023-12-21 17:47:20 +01:00
georglauterbach
95eeafd62c
update base image to Debian 12
2023-12-21 17:47:19 +01:00
georglauterbach
3a0a0bee42
update Rsyslog fix
2023-12-21 17:47:19 +01:00
georglauterbach
3180a63e77
update Dovecot Xapian installation
2023-12-21 17:47:18 +01:00
georglauterbach
542fabff15
update tests for Postgrey
2023-12-21 17:47:18 +01:00
georglauterbach
0bed3a549d
update tests for DKIM key gen
2023-12-21 17:47:18 +01:00
georglauterbach
93c9c04912
update scripts for Amavis & SpamAssassin
2023-12-21 17:47:17 +01:00
georglauterbach
b4cc602b0e
update getmail location and name
2023-12-21 17:47:17 +01:00
georglauterbach
a539b6cb12
add note on package updates
2023-12-21 17:47:16 +01:00
georglauterbach
12a8ec36ea
update Postfix configuration
2023-12-21 17:47:16 +01:00
georglauterbach
e4230e5a93
updated packages lists and added comments for maintainability
2023-12-21 17:47:15 +01:00
georglauterbach
1861718cc1
use PPA for Rspamd
2023-12-21 17:47:15 +01:00
georglauterbach
cf0bf59698
better communicate why we need early packages
2023-12-21 17:47:15 +01:00
georglauterbach
f96b8fbcc1
moved and merged functions in packages.sh
2023-12-21 17:47:14 +01:00
georglauterbach
fde195b9b0
removed custom installations of Fail2Ban, getmail6 and Rspamd
2023-12-21 17:47:14 +01:00
georglauterbach
bcb06f4a89
packages.sh now uses /etc/os-release to determine the release name of Debian
2023-12-21 17:47:13 +01:00
georglauterbach
52f5c25934
updated docs about Rspamd version on ARM64
...
The new note is easier to maintain; it does not require frequent
updates.
2023-12-21 17:47:09 +01:00
Casper
3adb53eb12
Remove sed statement ( #3715 )
2023-12-20 13:43:32 +13:00
Brennan Kinney
226ec847a4
ci: Remove VERSION from Dockerfile ( #3711 )
...
* ci: Remove `VERSION` from `Dockerfile`
This line was meant to be dropped with the switch to using the `DMS_RELEASE` ENV.
2023-12-19 08:35:16 +00:00
github-actions[bot]
6a56c7e749
docs: update CONTRIBUTORS.md ( #3704 )
...
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2023-12-19 06:01:25 +00:00
