04da2e80cd
Begin writing the OpenSMTPD config
2024-05-11 12:45:12 +02:00
link2xt
76b56d7b78
metadata: add support for /shared/vendor/deltachat/irohrelay
2024-05-07 15:52:54 +00:00
holger krekel
c1163228f6
add a test for imap capabilities offered from chatmail
2024-05-06 19:57:31 +02:00
holger krekel
0a968aae93
add XCHATMAIL marker
2024-05-06 19:57:31 +02:00
link2xt
879cffc056
Configure more lints and switch from black to ruff format
2024-05-06 14:41:00 +00:00
link2xt
e1b1a945b1
Authenticate echobot by passing /run/echobot/password to doveauth
2024-05-05 15:25:44 +00:00
link2xt
0493e27312
Move echobot into /var/lib/echobot
2024-05-05 15:25:44 +00:00
missytake
f35d98bb40
acmetool: enable debugging
2024-05-01 10:45:21 +02:00
missytake
0a72c2fba7
acmetool: accept new terms of services
...
closes #275
2024-05-01 00:21:58 +02:00
link2xt
39f5f64998
Reload Dovecot and Postfix when TLS certificate updates ( #271 )
2024-04-15 14:08:32 +00:00
Christian Hagenest
e372599ce7
change location of changes per nami's recommendation
2024-04-11 19:15:28 +02:00
Christian Hagenest
ce9fb02a75
correct key for obs home deltachat
2024-04-11 19:15:28 +02:00
Christian Hagenest
4526f5e772
apt update after adding new repository
2024-04-11 19:15:28 +02:00
Christian Hagenest
616a42c8f3
add our obs repo to cmdeploy init
2024-04-11 19:15:28 +02:00
missytake
2d26a40c2b
DNS: lint
2024-04-03 15:12:52 +02:00
missytake
a78d4e6198
DNS: optimize dnsutils installation command
2024-04-03 15:12:52 +02:00
missytake
2a1e004962
DNS: ensure dig is installed
2024-04-03 15:12:52 +02:00
link2xt
5e55cc205d
Run chatmail-metadata and doveauth as vmail
2024-03-30 23:08:42 +01:00
link2xt
221f4a2b0c
Apply systemd restrictions to echobot
...
These options are suggested by
`systemd-analyze security echobot.service`
2024-03-30 14:17:48 +00:00
link2xt
1c2bf919ed
Start Dovecot before Postfix
2024-03-29 04:24:54 +00:00
link2xt
d15c22c1e8
Configure users and groups before installing any packages
...
Otherwise packages may add user
without correct configuration such as groups
and the step adding user will be skipped.
2024-03-29 04:24:54 +00:00
link2xt
3a50d82657
Move systemd unit templates to cmdeploy
...
They are part of deployment rather than service itself.
Different deployments may have different users,
filesystem layout etc.
2024-03-28 16:38:30 +01:00
holger krekel
850112502f
extend imap online test to cover multi-device
2024-03-28 16:11:00 +01:00
holger krekel
46d31a91da
properly startup metadata service and add online test for metadata
2024-03-28 16:11:00 +01:00
missytake
e5e58f4e38
tests: fix quota test after log line changed
2024-03-25 13:55:53 +01:00
missytake
04517f284c
acmetool: reload postfix+dovecot after cert renew.
...
fix #234
2024-03-25 11:36:29 +01:00
holger krekel
e32fb37b5d
fix some test and formatting/ruff issues
2024-03-21 16:19:54 +01:00
holger krekel
8d9019b1c5
fix runtime dovecot/sieve-compile error on every incoming message
2024-03-20 19:10:54 +01:00
missytake
2097233fd6
expunge: reset maildirsize after expunging old mails
2024-03-18 07:03:06 +01:00
link2xt
4bca7891a2
Switch SPF from fail to softfail (~all instead of -all)
...
This is recommended to prevent SPF failure
from rejecting the message early in case messages
are remailed without breaking DKIM.
2024-03-09 20:02:29 +00:00
link2xt
2e23e743fd
dovecot: increase default_client_limit
2024-03-09 14:01:00 +01:00
missytake
8baee557ee
make sure rsync is installed, later commands depend on it
2024-03-07 19:14:48 +01:00
link2xt
42e50b089f
Push notification extension
...
This change adds XDELTAPUSH capability.
Delta Chat clients detecting this capability
can set /private/devicetoken IMAP metadata
on the inbox to subscribe for Apple (APNS)
notifications.
Notifications are implemented in a new
`chatmail-metadata` service
which handles requests to set /private/devicetoken
IMAP metadata from Delta Chat clients
and /private/messagenew requests from
push_notification_lua script.
To avoid sending notifications for
MDNs, webxdc updates and Delta Chat sync messages,
messages with Auto-Submitted header are ignored
by setting $Auto keyword (flag) on them in Sieve script
and skipping such messages in push_notification_lua script.
Outgoing messages are also ignored.
2024-03-06 19:00:04 +00:00
missytake
e6a3fab6aa
config: only block words if they are in privacy* config keys
2024-03-05 00:38:23 +01:00
holger krekel
ccd6e3e99c
fix bailout if there is no TXT entry
2024-03-04 20:04:11 +01:00
missytake
21778fa4f3
tests: add test that we don't leak email addresses via VRFY
2024-03-03 22:49:03 +01:00
link2xt
14342383cf
Generate our own single-line DKIM entry
2024-02-17 09:34:25 +00:00
link2xt
ee25d35db1
Fix Python 3.9 support
...
I installed pyenv and then installed Python 3.9:
$ pyenv install 3.9
$ eval "$(pyenv init -)"
$ pyenv shell 3.9
In a clean repository I ran
$ scripts/cmdeploy init
$ scripts/cmdeploy run
$ scripts/cmdeploy dns
$ scripts/cmdeploy fmt
With the changes made all these commands work.
scripts/cmdeploy test fails some tests
using maildata fixture at
importlib.resources.files(__package__).joinpath("mail-data")
line but this is not critical.
2024-02-17 09:27:02 +00:00
link2xt
ee2115584b
Run scripts/cmdeploy fmt
2024-02-15 14:07:10 +00:00
missytake
1c9c088657
tests: add test that currently no outdated mails are stored on the server
2024-02-14 12:19:12 +01:00
missytake
b5afac2f1a
expunge: run cronjob with vmail instead of dovecot. fix #210
2024-02-14 12:19:12 +01:00
link2xt
c8d9f20a48
fix: avoid "Argument list too long" in expunge.cron
...
Make `find` look for accounts.
2024-02-13 07:37:23 +00:00
missytake
6a30db7ce0
tests: test that echobot replies to msg. closes #199
2024-01-31 16:45:26 +01:00
link2xt
9e9ab80422
Do not subscribe to TLS reports
2024-01-31 14:35:54 +01:00
link2xt
5bbb3d9b21
Rewrite and document smtpd_tls_exclude_ciphers
2024-01-27 02:10:02 +00:00
link2xt
6bc2186912
postfix: set tls_preempt_cipherlist
2024-01-26 19:45:53 +00:00
link2xt
8d5f91bf98
postfix: use new syntax for TLS version
2024-01-26 19:42:18 +00:00
missytake
9ddf60d0fc
postfix: enforce TLS 1.2, disallow some insecure TLS ciphers
2024-01-26 19:41:48 +00:00
link2xt
05bdf65996
Add ADSP DNS record
...
ADSP RFC 5617 is declared historic because of no deployment:
<https://datatracker.ietf.org/doc/status-change-adsp-rfc5617-to-historic/ >
However, it is declared as supported by <https://github.com/fastmail/authentication_milter >.
OpenDKIM has a release note from 2014-12-27 saying "Discontinue support for ADSP"
and does not support ADSP anymore.
Anyway, it does not hurt to publish a TXT record
indicating the strictest possible ADSP policy
that we apply to all incoming mail ourselves.
Unlike DMARC which allows either SPF or DKIM to pass,
ADSP requires that DKIM passes.
2024-01-26 15:04:09 +00:00
link2xt
6d6217812d
Add missing login map
2024-01-25 23:17:57 +00:00
