Commit Graph

111 Commits

Author SHA1 Message Date
Antoine Nguyen
b7f378fc63 Disable all required lines when dovecot is not installed 2023-12-15 11:59:03 +01:00
Antoine Nguyen
7b990c9ff6 Replace EDH key generation by DHE group file 2023-12-15 11:55:11 +01:00
Spitap
f658e5e85e Fixed escape character on dovecot config tpl 2023-08-30 17:13:59 +02:00
Spitap
941142f5f5 Fixed dkim user 2023-08-30 08:48:58 +02:00
Spitap
0b0e2a4e6a Updated for 2.2 2023-08-29 20:07:26 +02:00
Floréal Cabanettes
2cc34e9033 Merge branch 'modoboa:master' into master 2023-07-13 11:21:29 +02:00
Floréal Cabanettes
5704a0a236 Add amavis 2.13.X as a copy of 2.12.X for debian12, for postgresql too 2023-07-10 23:47:32 +02:00
Floréal Cabanettes
187790149d Add amavis 2.13.X as a copy of 2.12.X for debian12 2023-07-07 23:52:44 +02:00
Zzzz
9ad6c4db68 Fix http2 wrong port 2023-07-07 09:54:05 -11:00
Spitap
6e3a232e83 Added http2 for nginx 2023-05-25 11:16:32 +02:00
Spitap
2873a5ae69 Updated automx config 2023-05-09 19:34:22 +02:00
Antoine Nguyen
76ec16cd45 Added missing files 2023-01-31 09:08:34 +01:00
Spitap
81129d2875 Removed globally set mail_uid and mail_gid
Co-Authored-By: Antoine Nguyen <tonio@ngyn.org>
2023-01-24 09:29:51 +01:00
Spitap
7cae12b32e Fix multiple hard-coded vmail 2023-01-23 19:24:28 +01:00
Spitap
bcdbb4a2ce fix typo 2022-11-29 14:53:05 +01:00
Spitap
bd1ddcef21 randomize api call time 2022-11-29 13:45:31 +01:00
Spitap
bd0ecd0949 fix typo in dovecot configuration file 2022-11-10 14:57:43 +01:00
Spitap
fe7df276fc Check dovecot version greater 2022-10-27 17:25:39 +02:00
Spitap
8f34f0af6f Fixes ssl permission error, updated ssl_protocol parameter 2022-10-27 17:00:58 +02:00
Spitap
fe6dc82796 fixed typo 2022-10-03 15:13:53 +02:00
Spitap
82c4b1033a Better fix 2022-09-27 09:32:55 +02:00
Antoine Nguyen
b391de5937 Merge branch 'master' of github.com:modoboa/modoboa-installer 2022-09-22 10:53:25 +02:00
Antoine Nguyen
47a5d29043 Fixed opendkim dsn syntax.
fix #2602
2022-09-22 10:52:41 +02:00
Antoine Nguyen
1f8dd1b5df Merge pull request #426 from Spitfireap/mitigate-spamhaus-dns
mitigate false spamhaus reject
2022-09-16 17:11:21 +02:00
Antoine Nguyen
23ac0bf172 Complete custom database port support 2022-09-15 10:43:44 +02:00
Spitap
199a90c9e8 Set up return codes for other spamlist 2022-07-30 18:48:51 +02:00
Spitap
1ae5061dfa mitigate false spamhaus reject 2022-07-29 16:23:32 +02:00
Antoine Nguyen
f30201d32b Fixed ipv6 issue 2022-07-28 15:17:46 +02:00
Antoine Nguyen
2123ccf9c3 Merge pull request #415 from saaditDE/saaditDE-PatchTLSVAndCiphers-1
Replacing old TLS versions and insecure ciphers
2022-07-22 09:49:44 +02:00
Antoine Nguyen
578fc05981 Added support for amavis 2.12.X (ubuntu 22.04)
see #413
2022-05-18 10:48:53 +02:00
Karim
85dc113fe4 Replaceing old TLS versions and insecure ciphers
NEVER use SSL / TLS in outdated versions or insecure / oudated ciphers. Current state-of-the-art TLS Versions are TLSv1.2 and TLSv1.3. TLSv1.2 is only enabled for backwards compatibility. Ciphers are taken out of the guide. 

```ssl_ciphers ECDHE-RSA-AES256-GCM-SHA512:DHE-RSA-AES256-GCM-SHA512:ECDHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-SHA384;```

Are the recommended ciphers out of  source 4 in combination of all other sources.
 
source 1: https://www.linuxtechi.com/harden-secure-nginx-web-server-linux
source 2: https://beaglesecurity.com/blog/article/nginx-server-security.html
source 3: https://www.acunetix.com/blog/articles/tls-ssl-cipher-hardening/
source 4: https://raymii.org/s/tutorials/Strong_SSL_Security_On_nginx.html
2022-05-18 01:22:45 +02:00
Antoine Nguyen
7f87c2518c Merge pull request #358 from staticsafe/patch-1
Update Postfix main.cf template to allow IPv6
2021-10-14 10:09:28 +02:00
Antoine Nguyen
5b506a2eb9 fix #392 2021-09-22 16:12:21 +02:00
Antoine Nguyen
58f5a8af09 Fixed issue with Debian bullseye (11). 2021-09-22 11:32:55 +02:00
Antoine Nguyen
c9d67250ba Revert change since it prevents opendkim to work properly. 2021-04-23 09:32:22 +02:00
Antoine Nguyen
33a909a264 Disable milters for amavis receiver. 2021-03-20 09:20:45 +01:00
Sadiq Saif
becd427f6b Update Postfix main.cf template to allow IPv6
setting inet_protocols to all allows Postfix to use IPv6 if available on a host

fixes issue #344
2020-12-28 13:01:27 -05:00
Antoine Nguyen
c39adcbd14 Added support for Modoboa 1.16 2020-10-05 09:15:59 +02:00
Antoine Nguyen
1960e29c97 Fixed radicale setup. 2020-09-17 21:19:54 +02:00
Antoine Nguyen
68ec298fc9 Disabled radicale-storage-by-index plugin. 2020-06-09 11:08:39 +02:00
Antoine Nguyen
2b9f5cdb6b Removed bogus list.
fix #322
2020-05-18 14:50:44 +02:00
Antoine Nguyen
b5aa1bc7e7 Do not enable cron job if dovecot is disabled. 2020-03-04 11:14:39 +01:00
Antoine Nguyen
63c29c34b9 Deploy python3 virtualenvs only. 2019-12-06 12:18:01 +01:00
Antoine Nguyen
31d0e9b9f0 amavis: use branch schema file if version not avail.
fix #254
2018-11-29 13:22:52 +01:00
Anthony Bourguignon
5dacd2695c use lowercase username in dovecot auth 2018-10-17 11:57:31 +02:00
Antoine Nguyen
d28346efec Merge branch 'master' of github.com:modoboa/modoboa-installer 2018-10-01 15:53:47 +02:00
Antoine Nguyen
2b8393e2d4 Updated postfix config for autoreply 1.5.0 2018-10-01 15:53:26 +02:00
Antoine Nguyen
13e14f5fb6 Merge pull request #224 from stefaweb/nginx-update-for-autodiscover
Nginx vhost template update for autodiscover
2018-10-01 13:36:50 +02:00
Antoine Nguyen
c70eb03b4c Merge branch 'master' of github.com:modoboa/modoboa-installer 2018-09-16 18:14:56 +02:00
Antoine Nguyen
b18029d95b Fix #214. 2018-09-16 18:14:35 +02:00