Commit Graph

314 Commits

Author SHA1 Message Date
Spitap
235ef3befb thighter config file permission 2022-10-27 11:14:06 +02:00
Antoine Nguyen
67f6cee8ea Merge pull request #442 from Spitfireap/patch-1
Set $max_server to 2 to avoid amavis crash
2022-10-25 19:32:37 +02:00
Spitfireap
53f7f8ef9d Update config_dict_template.py 2022-10-19 08:19:40 +00:00
Antoine Nguyen
b84abbbacc python3-certbot-nginx is only available on Debian based systems.
see #437
2022-10-05 18:17:54 +02:00
Antoine Nguyen
dbac16ee17 Drop dkim view before upgrade to prevent error.
see https://github.com/modoboa/modoboa/issues/2508
2022-10-05 18:08:43 +02:00
Antoine Nguyen
2e1e4ca7a1 Merge pull request #433 from Spitfireap/fix-modoboa-dovecot-group
Change stats permission to allow doveadm pw command
2022-10-03 15:28:50 +02:00
Spitap
fe6dc82796 fixed typo 2022-10-03 15:13:53 +02:00
Spitap
82c4b1033a Better fix 2022-09-27 09:32:55 +02:00
Spitap
6d7dd9f578 Add modoboa user to dovecot group upon install 2022-09-26 18:34:47 +02:00
Antoine Nguyen
b391de5937 Merge branch 'master' of github.com:modoboa/modoboa-installer 2022-09-22 10:53:25 +02:00
Antoine Nguyen
47a5d29043 Fixed opendkim dsn syntax.
fix #2602
2022-09-22 10:52:41 +02:00
Antoine Nguyen
1f8dd1b5df Merge pull request #426 from Spitfireap/mitigate-spamhaus-dns
mitigate false spamhaus reject
2022-09-16 17:11:21 +02:00
Antoine Nguyen
a8c9d4dd12 Merge pull request #430 from Spitfireap/fix-libsql-package
removed libmysqlclient-dev
2022-09-16 09:57:29 +02:00
Spitap
306fc2f891 removed libmysqlclient-dev 2022-09-15 16:02:50 +02:00
Antoine Nguyen
915cff1ca5 Custom database port support for automx 2022-09-15 11:00:26 +02:00
Antoine Nguyen
1662b14ccc Fixed syntax error 2022-09-15 10:44:46 +02:00
Antoine Nguyen
23ac0bf172 Complete custom database port support 2022-09-15 10:43:44 +02:00
Antoine Nguyen
062ad0d9f3 Added support for custom database port 2022-09-15 10:23:59 +02:00
Antoine Nguyen
59c61c3b7c Merge pull request #428 from Spitfireap/Fix-missing-packages
Add missing packages
2022-09-14 16:52:54 +02:00
Spitap
2ebefaa188 Added Nginx plugin for certbot when needed 2022-09-14 08:45:23 +02:00
Antoine Nguyen
2054755789 Merge pull request #427 from virtuaris/modoboa-issue-2157
Fix permissions for modoboa dovecot mailbox commands (modoboa/modoboa…
2022-09-05 15:21:14 +02:00
Spitap
2149b7703f Add missing packages 2022-08-05 15:27:20 +02:00
haris
743f2b2fa2 Fix permissions for modoboa dovecot mailbox commands (modoboa/modoboa/issues/2157) 2022-08-01 14:39:55 +02:00
Spitap
199a90c9e8 Set up return codes for other spamlist 2022-07-30 18:48:51 +02:00
Spitap
1ae5061dfa mitigate false spamhaus reject 2022-07-29 16:23:32 +02:00
Antoine Nguyen
f30201d32b Fixed ipv6 issue 2022-07-28 15:17:46 +02:00
Antoine Nguyen
d495afd4c2 Merge pull request #420 from saaditDE/saaditDE-removeForceRenew-removeNoUpgrade-Patch
removed forcing renew, no-autoupgrade
2022-07-22 09:49:57 +02:00
Antoine Nguyen
2123ccf9c3 Merge pull request #415 from saaditDE/saaditDE-PatchTLSVAndCiphers-1
Replacing old TLS versions and insecure ciphers
2022-07-22 09:49:44 +02:00
Antoine Nguyen
9ff989a062 Merge pull request #417 from jfhovinne/start-redis
Ensure redis server is started
2022-06-28 18:43:40 +02:00
Karim
4301bcca74 removed forcing renew, no-autoupgrade
only renew, no force fix and do upgrades
https://github.com/modoboa/modoboa/issues/2129
2022-06-27 19:49:46 +02:00
jfhovinne
6466a68d46 Ensure redis server is started 2022-06-05 14:40:53 +02:00
Antoine Nguyen
578fc05981 Added support for amavis 2.12.X (ubuntu 22.04)
see #413
2022-05-18 10:48:53 +02:00
Karim
85dc113fe4 Replaceing old TLS versions and insecure ciphers
NEVER use SSL / TLS in outdated versions or insecure / oudated ciphers. Current state-of-the-art TLS Versions are TLSv1.2 and TLSv1.3. TLSv1.2 is only enabled for backwards compatibility. Ciphers are taken out of the guide. 

```ssl_ciphers ECDHE-RSA-AES256-GCM-SHA512:DHE-RSA-AES256-GCM-SHA512:ECDHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-SHA384;```

Are the recommended ciphers out of  source 4 in combination of all other sources.
 
source 1: https://www.linuxtechi.com/harden-secure-nginx-web-server-linux
source 2: https://beaglesecurity.com/blog/article/nginx-server-security.html
source 3: https://www.acunetix.com/blog/articles/tls-ssl-cipher-hardening/
source 4: https://raymii.org/s/tutorials/Strong_SSL_Security_On_nginx.html
2022-05-18 01:22:45 +02:00
Antoine Nguyen
d272118d6a Merge branch 'master' of github.com:modoboa/modoboa-installer 2021-11-04 10:26:45 +01:00
Antoine Nguyen
04b38cf52a Fixed /etc/os-release parsing.
fix #399
2021-11-04 10:26:02 +01:00
Antoine Nguyen
7f87c2518c Merge pull request #358 from staticsafe/patch-1
Update Postfix main.cf template to allow IPv6
2021-10-14 10:09:28 +02:00
Antoine Nguyen
a4b930d337 Merge pull request #395 from TheMultii/master
corrected a typo
2021-10-14 10:05:56 +02:00
Antoine Nguyen
90cc17db95 Merge pull request #397 from Meseira/patch-1
Fix PostgreSQL URI
2021-10-14 10:05:21 +02:00
Xavier Gendre
d447bfa81b Fix PostgreSQL URI
SQLAlchemy removed support for `postgres://`, the URI has to start with `postgresql://`.
2021-10-07 22:47:15 +02:00
TheMultii
1a8c2d405a corrected a typo 2021-09-25 21:01:51 +02:00
Antoine Nguyen
f7985a9d03 Fix #393 2021-09-23 09:01:31 +02:00
Antoine Nguyen
16b66a0200 Force setuptools version tp <58.0.0
see https://setuptools.pypa.io/en/latest/history.html#v58-0-0
2021-09-22 17:05:00 +02:00
Antoine Nguyen
5b506a2eb9 fix #392 2021-09-22 16:12:21 +02:00
Antoine Nguyen
d3f56ef8d0 Updated README file. 2021-09-22 11:47:00 +02:00
Antoine Nguyen
58f5a8af09 Fixed issue with Debian bullseye (11). 2021-09-22 11:32:55 +02:00
Antoine Nguyen
32041a40e2 Temp. fix for django-webpack-loader compat issue. 2021-06-07 12:54:58 +02:00
Antoine Nguyen
c9d67250ba Revert change since it prevents opendkim to work properly. 2021-04-23 09:32:22 +02:00
Antoine Nguyen
33a909a264 Disable milters for amavis receiver. 2021-03-20 09:20:45 +01:00
Antoine Nguyen
6fdf57b703 Prevent daemons to start at installation on debian like systems. 2021-03-20 09:20:02 +01:00
Sadiq Saif
becd427f6b Update Postfix main.cf template to allow IPv6
setting inet_protocols to all allows Postfix to use IPv6 if available on a host

fixes issue #344
2020-12-28 13:01:27 -05:00