missytake
536c12d989
tests: use generic recipient for DKIM testing
2024-01-12 15:49:06 +00:00
missytake
265403e110
revert "Significantly lower ratelimit"
2024-01-12 15:49:01 +00:00
missytake
fd679af577
rspamd: generate DKIM keys with rspamadm
2024-01-12 15:47:36 +00:00
missytake
ecbf135549
rspamd: install rspamd + redis
2024-01-12 15:47:36 +00:00
missytake
7b90b936dd
tests: add test for rejecting SPF & DMARC fails
2024-01-12 15:47:36 +00:00
missytake
17a919ee53
lint: fix 3 issues
2024-01-12 15:47:36 +00:00
missytake
1b15ec0eae
rspamd: Significantly lower ratelimit; without read receipts this should be more than fine
2024-01-12 15:47:36 +00:00
missytake
bf863f05b6
rspamd: add redis-server for caching
2024-01-12 15:47:36 +00:00
missytake
a2316beab1
rspamd: disable RBL checks
2024-01-12 15:47:36 +00:00
missytake
28fc91f5f3
rspamd: add rate limiting
2024-01-12 15:47:36 +00:00
missytake
67062677b0
disable some unnecessary rspamd modules
2024-01-12 15:47:36 +00:00
missytake
faf8ffe678
do DKIM signing with rspamd instead of openDKIM
2024-01-12 15:47:36 +00:00
missytake
5821098699
DNS: added www subdomain to zonefile
2024-01-12 13:34:23 +00:00
link2xt
542d63888a
nginx: redirect www. to non-www
2024-01-12 13:34:23 +00:00
link2xt
449f8a014c
Fix indentation in nginx.conf.j2
2024-01-12 13:34:23 +00:00
link2xt
57764d0cf5
dns: require www. subdomain and request TLS certificate for it
2024-01-12 13:34:23 +00:00
link2xt
c39a79e26a
dns: check mta-sts CNAME directly without resolving to IP
2024-01-12 13:34:23 +00:00
link2xt
b6622fc68e
chore: run scripts/cmdeploy fmt
2024-01-12 12:18:28 +00:00
link2xt
75b41641f0
doveauth: fix home directory returned from lookup_passdb
...
It is currently unused, but better have it correct
in case of enabling debugging options such as rawlogs.
2024-01-08 16:40:08 +00:00
link2xt
30a61972fb
Update autoconfig XML URL with RFC draft
...
Old page does not exist anymore and linking to web archive is not nice.
2024-01-08 16:33:04 +01:00
missytake
bcc54602ee
postfix: cleanup submission headers
2024-01-05 12:13:31 +01:00
missytake
f9998d5721
tests: if sender's public IP address is in the Received header
2024-01-05 12:13:31 +01:00
nudeldudel
8605ceba5e
Update master.cf.j2
...
Add submission-header-cleanup to reduce the meta-data
2024-01-05 12:13:31 +01:00
missytake
30bcf9ff77
www: change nine.testrun.org occurence to mail_domain
2024-01-05 12:12:52 +01:00
link2xt
70b0e9d5e5
postfix: increase compatibility_level to 3.6
2023-12-27 00:29:12 +01:00
missytake
fdd533aa3b
acmetool: stop nginx so acmetool-redirector can start
2023-12-25 23:45:40 +01:00
link2xt
a44ed0aeb3
Use dig +short option to simplify DNS parsing
...
Without this option parsing of answer was flaky
as for long records like
_submission._tcp.nine.testrun.org.
dig printed the result with a space rather
than tab as a separator and .split("\t") did not work.
This change makes the `dig` command print the answer
in the form we need so there is no need for complex parsing
other than taking the first line.
`-r` option is added to make sure options are not changed by .digrc
in the root home directory.
2023-12-22 21:49:12 +00:00
link2xt
f5bfa6bd56
test: test scanning QR code
2023-12-21 22:22:38 +00:00
link2xt
81a6f8808b
fix: escape login and password when passed from dovecot to doveauth
...
This should allow to use / in the password
2023-12-21 22:22:38 +00:00
link2xt
be3685519f
Document ports 80 and 443 and add more hyperlinks
2023-12-21 16:16:17 +00:00
missytake
2cf950e901
echo: fail if configure doesn't work
2023-12-21 01:06:23 +01:00
missytake
46d5dbb07d
DNS: nicer output for reverse DNS/PTR records. fixes #143
2023-12-20 19:26:50 +01:00
missytake
d2e0d1fecc
DNS: flush_zone before validating DNS entries. fixes #140
2023-12-20 19:26:50 +01:00
missytake
d333cfdd5a
lint: fix 1 issue
2023-12-20 19:26:50 +01:00
missytake
32238e99ab
tests: testing cmdeploy init only makes sense with a staging server as well now
2023-12-20 19:26:50 +01:00
missytake
40a3a2cc86
tests: make test init work with reachable chatmail_domain
2023-12-20 19:26:50 +01:00
missytake
fe978a1971
DNS: increase SSH command's timeout to 10 seconds (the default)
2023-12-20 19:26:50 +01:00
missytake
b426c2e7ff
DNS: error if can't connect with SSH. fixes #144
2023-12-20 19:26:50 +01:00
missytake
b626464453
cmdeploy: fail init and run if SSH doesn't connect
2023-12-20 19:26:50 +01:00
missytake
76c3316f02
cmdeploy init: make output green if DNS is correct
2023-12-19 19:39:49 +01:00
missytake
a6a9406228
DNS: making CLI output slightly prettier
2023-12-19 19:39:49 +01:00
missytake
7921f5dd0b
DNS: fix some crashes in cmdeploy dns
2023-12-19 19:39:49 +01:00
missytake
39fc9d628f
cmdeploy: only run cmdeploy dns after cmdeploy run
2023-12-19 19:39:49 +01:00
link2xt
85a9183b61
Do not call show_dns with run args
2023-12-19 19:39:49 +01:00
missytake
36a4381484
DNS: use local dig if ssh fails
2023-12-19 19:39:49 +01:00
missytake
5ff98a571c
DNS: commit hpk's suggestion
2023-12-19 19:39:49 +01:00
missytake
0a91aeb4a3
cmdeploy: simplify check_necessary_dns output
2023-12-19 19:39:49 +01:00
missytake
c38f1d7e54
DNS: fix reverse DNS checking
2023-12-19 19:39:49 +01:00
missytake
42bba52f66
README: move cmdeploy dns to additional commands
2023-12-19 19:39:49 +01:00
missytake
03aab4043c
DNS: fix CNAME resolving, don't print ssh commands for DNS requests
2023-12-19 19:39:49 +01:00
