Commit Graph

  • 7c9abfbde3 Reject on DKIM PERMFAIL and SPF PERMFAIL as well link2xt 2024-01-14 09:19:04 +00:00
  • 95de87a325 Fixup rspamd disabled.conf deployment message link2xt 2024-01-14 08:45:39 +00:00
  • 5366df8dc6 Replace rspamd rule weights with a strict rule link2xt 2024-01-14 08:45:23 +00:00
  • 0a6db5161d Remove unused _configure_opendkim link2xt 2024-01-12 19:05:23 +00:00
  • 62e25e44fd Disable ratelimit module like other modules link2xt 2024-01-12 18:56:11 +00:00
  • ce9fe920dc Do not return anything from remove_opendkim() link2xt 2024-01-12 18:47:57 +00:00
  • c171866faf Actually disable phising, rbl and hfilter link2xt 2024-01-12 18:46:07 +00:00
  • 7758c94e31 rspamd: remove redis (not needed) missytake 2024-01-09 16:47:07 +01:00
  • 66debb9245 lint fixes, final touch missytake 2023-12-27 13:34:24 +01:00
  • 3542232393 rspamd: reject emails with invalid SPF, DKIM, DMARC missytake 2023-12-27 11:17:24 +01:00
  • 536c12d989 tests: use generic recipient for DKIM testing missytake 2023-12-26 13:18:48 +01:00
  • 265403e110 revert "Significantly lower ratelimit" missytake 2023-12-26 12:45:58 +01:00
  • fd679af577 rspamd: generate DKIM keys with rspamadm missytake 2023-12-26 10:27:11 +01:00
  • ecbf135549 rspamd: install rspamd + redis missytake 2023-12-26 10:22:44 +01:00
  • 7b90b936dd tests: add test for rejecting SPF & DMARC fails missytake 2023-12-26 10:00:16 +01:00
  • 17a919ee53 lint: fix 3 issues missytake 2023-12-26 09:58:47 +01:00
  • 1b15ec0eae rspamd: Significantly lower ratelimit; without read receipts this should be more than fine missytake 2023-10-16 17:06:03 +02:00
  • bf863f05b6 rspamd: add redis-server for caching missytake 2023-10-16 17:05:19 +02:00
  • a2316beab1 rspamd: disable RBL checks missytake 2023-10-15 23:37:29 +02:00
  • 28fc91f5f3 rspamd: add rate limiting missytake 2023-10-15 23:25:36 +02:00
  • 67062677b0 disable some unnecessary rspamd modules missytake 2023-10-15 23:11:55 +02:00
  • faf8ffe678 do DKIM signing with rspamd instead of openDKIM missytake 2023-10-15 22:54:46 +02:00
  • 5821098699 DNS: added www subdomain to zonefile missytake 2024-01-12 12:48:45 +01:00
  • 542d63888a nginx: redirect www. to non-www link2xt 2024-01-06 18:48:21 +00:00
  • 449f8a014c Fix indentation in nginx.conf.j2 link2xt 2024-01-06 18:43:25 +00:00
  • 57764d0cf5 dns: require www. subdomain and request TLS certificate for it link2xt 2024-01-06 18:21:25 +00:00
  • c39a79e26a dns: check mta-sts CNAME directly without resolving to IP link2xt 2024-01-06 18:20:53 +00:00
  • b6622fc68e chore: run scripts/cmdeploy fmt link2xt 2024-01-12 12:18:28 +00:00
  • 75b41641f0 doveauth: fix home directory returned from lookup_passdb link2xt 2024-01-06 20:08:54 +00:00
  • 30a61972fb Update autoconfig XML URL with RFC draft link2xt 2024-01-07 21:26:10 +00:00
  • bcc54602ee postfix: cleanup submission headers missytake 2023-12-27 12:17:03 +01:00
  • f9998d5721 tests: if sender's public IP address is in the Received header missytake 2023-12-27 12:16:47 +01:00
  • 8605ceba5e Update master.cf.j2 nudeldudel 2023-12-27 10:54:33 +01:00
  • 30bcf9ff77 www: change nine.testrun.org occurence to mail_domain missytake 2023-12-31 02:00:14 +01:00
  • 70b0e9d5e5 postfix: increase compatibility_level to 3.6 link2xt 2023-12-24 12:10:35 +00:00
  • fdd533aa3b acmetool: stop nginx so acmetool-redirector can start missytake 2023-12-25 23:45:40 +01:00
  • a44ed0aeb3 Use dig +short option to simplify DNS parsing link2xt 2023-12-22 12:34:50 +00:00
  • f5bfa6bd56 test: test scanning QR code link2xt 2023-12-21 19:14:20 +00:00
  • 81a6f8808b fix: escape login and password when passed from dovecot to doveauth link2xt 2023-12-21 19:03:31 +00:00
  • be3685519f Document ports 80 and 443 and add more hyperlinks link2xt 2023-12-21 15:56:51 +00:00
  • 2cf950e901 echo: fail if configure doesn't work missytake 2023-12-20 15:34:12 +01:00
  • 46d5dbb07d DNS: nicer output for reverse DNS/PTR records. fixes #143 missytake 2023-12-20 16:50:20 +01:00
  • d2e0d1fecc DNS: flush_zone before validating DNS entries. fixes #140 missytake 2023-12-20 15:48:01 +01:00
  • d333cfdd5a lint: fix 1 issue missytake 2023-12-20 15:42:54 +01:00
  • 32238e99ab tests: testing cmdeploy init only makes sense with a staging server as well now missytake 2023-12-20 15:09:58 +01:00
  • 40a3a2cc86 tests: make test init work with reachable chatmail_domain missytake 2023-12-20 15:06:12 +01:00
  • fe978a1971 DNS: increase SSH command's timeout to 10 seconds (the default) missytake 2023-12-20 14:57:29 +01:00
  • b426c2e7ff DNS: error if can't connect with SSH. fixes #144 missytake 2023-12-20 14:55:31 +01:00
  • b626464453 cmdeploy: fail init and run if SSH doesn't connect missytake 2023-12-20 14:52:23 +01:00
  • 76c3316f02 cmdeploy init: make output green if DNS is correct missytake 2023-12-19 17:24:43 +01:00
  • a6a9406228 DNS: making CLI output slightly prettier missytake 2023-12-19 17:08:31 +01:00
  • 7921f5dd0b DNS: fix some crashes in cmdeploy dns missytake 2023-12-19 17:05:08 +01:00
  • 39fc9d628f cmdeploy: only run cmdeploy dns after cmdeploy run missytake 2023-12-19 16:16:16 +01:00
  • 85a9183b61 Do not call show_dns with run args link2xt 2023-12-19 14:31:22 +00:00
  • 36a4381484 DNS: use local dig if ssh fails missytake 2023-12-19 15:30:20 +01:00
  • 5ff98a571c DNS: commit hpk's suggestion missytake 2023-12-14 18:45:39 +01:00
  • 0a91aeb4a3 cmdeploy: simplify check_necessary_dns output missytake 2023-12-14 18:44:28 +01:00
  • c38f1d7e54 DNS: fix reverse DNS checking missytake 2023-12-14 18:34:45 +01:00
  • 42bba52f66 README: move cmdeploy dns to additional commands missytake 2023-12-14 18:18:06 +01:00
  • 03aab4043c DNS: fix CNAME resolving, don't print ssh commands for DNS requests missytake 2023-12-14 18:12:56 +01:00
  • 146def2f06 cmdeploy: show DNS info at begin and end of cmdeploy run missytake 2023-12-14 17:30:05 +01:00
  • d642224a73 DNS: flush cache in the beginning missytake 2023-12-14 17:21:31 +01:00
  • 0238437ce7 DNS: get DNS records with server-side dig missytake 2023-12-14 16:29:37 +01:00
  • 7ed59ea8bc DNS: move getting IPs to dns.py missytake 2023-12-14 16:12:00 +01:00
  • 49d0a0bbb0 DNS: fix parsing missytake 2023-12-13 14:31:24 +01:00
  • 330a034329 DNS: ignore DNS resolvers which don't give us JSON missytake 2023-12-13 14:23:05 +01:00
  • aee18215fc DNS: Also check A and CNAME entries missytake 2023-12-13 14:21:02 +01:00
  • 336f87770d cmdeploy: write --zonefile to file missytake 2023-12-13 04:58:51 +01:00
  • 4199e04ab3 cmdeploy: fixing DNS CLI output missytake 2023-12-13 04:30:24 +01:00
  • 50922fb1d2 docs: dns doesn't just output a zone file anymore missytake 2023-12-13 04:24:14 +01:00
  • d2fe417715 DNS: try other resolvers if the first doesn't have it missytake 2023-12-13 04:18:25 +01:00
  • 2b731bf909 DNS: also add IPv4 entry to zonefile missytake 2023-12-13 04:05:07 +01:00
  • 2669babb53 DNS: added checks for PTR records missytake 2023-12-13 04:03:26 +01:00
  • fe675a9a72 cmdeploy: dns --zonefile subcommand to just print the zonefile missytake 2023-12-13 03:35:04 +01:00
  • 79f766b28e tests: mark test as xfail until we can test for CLI output missytake 2023-12-13 02:56:54 +01:00
  • 0eeb692c4b DNS: re-use HTTP session to reduce query time by 7 seconds missytake 2023-12-13 02:54:10 +01:00
  • 6c401173db DNS: also generate AAAA entry missytake 2023-12-13 02:48:02 +01:00
  • b474b86e7b cmdeploy: only output DNS entries which are not correct yet missytake 2023-12-13 02:39:08 +01:00
  • 6a9beb8ff7 DNS: ensure mta-sts.@ is also pointing to @ missytake 2023-12-13 01:40:08 +01:00
  • d0f5d08443 cmdeploy run: don't run if crucial DNS entries are missing missytake 2023-12-13 00:07:41 +01:00
  • 49848ec01e cmdeploy init: show DNS entries required for deployment if not set missytake 2023-12-12 23:51:27 +01:00
  • 0ffe4d4996 Revert "pyinfra: only install unbound-anchor on Debian systems" missytake 2023-12-19 17:31:34 +01:00
  • 7a2a889585 pyinfra: only install unbound-anchor on Debian systems missytake 2023-12-19 17:28:11 +01:00
  • 1e4b776de5 unbound: generate root.key manually if it doesn't exist missytake 2023-12-19 16:48:36 +01:00
  • 3d00ca1672 doveauth: add support for Dovecot 2.3.16 link2xt 2023-12-18 19:18:27 +00:00
  • 485bbb9cbd Let acmetool manage port 80 link2xt 2023-12-18 15:16:27 +00:00
  • 359c195419 count ci accounts correctly holger krekel 2023-12-16 16:47:46 +01:00
  • 1b9e822ff6 strike this weird CHATMAIL_DOMAIN variable holger krekel 2023-12-15 23:55:18 +01:00
  • 9f6c00d62c strike last mentins of "instance" in readme holger krekel 2023-12-15 23:52:06 +01:00
  • a1355c10ca fix: check config failed for non-testrun domains missytake 2023-12-15 20:25:58 +01:00
  • 92ca3283fd Add metrics link2xt 2023-12-14 18:10:58 +00:00
  • cea1f3f5f7 dovecot: remove -depth from expunge find commands missytake 2023-12-14 18:51:42 +01:00
  • 39550d3096 small fixes missytake 2023-12-14 15:11:57 +01:00
  • 070003b983 dovecot: deleting mails with find instead of doveadm expunge missytake 2023-12-14 15:01:26 +01:00
  • 049ed79e59 dovecot: unconditionally delete all mails after 40 days missytake 2023-12-12 22:04:16 +01:00
  • a9e55e3b25 cmdeploy: get cmdeploy run --config working missytake 2023-12-13 15:10:32 +01:00
  • 5a178ed235 feat: one more paragraph to explain chatmail Septias 2023-12-14 11:46:27 +01:00
  • 8a338f1320 Use more characters for passwords (#124) Floris Bruynooghe 2023-12-14 11:51:22 +01:00
  • d437b8a943 Merge pull request #125 from deltachat/sk/fix_typo Sebastian Klähn 2023-12-14 11:35:41 +01:00
  • a4d520a9ad fix: align spelling of Delta Chat Septias 2023-12-14 11:00:48 +01:00