fripost-ansible/roles/webmail/files/etc/nginx/sites-available/roundcube, branch master

Webmail: Upgrade backend to PHP7.4.

2024-09-08T00:03:08+00:00

Roundcube: Fix favicon path.

2021-01-27T15:03:33+00:00

Roundcube: Serve assets pre-compressed when possible.

2021-01-27T14:28:32+00:00

See https://salsa.debian.org/roundcube-team/roundcube/-/commit/f1e89494e8b777d69564e67f2d8b47ac84eb02f4 .

Roundcube: Change document root to /var/lib/roundcube/public_html.

2021-01-27T14:22:32+00:00

Per https://salsa.debian.org/roundcube-team/roundcube/commit/7df02624eec4857053432d8ebe9b4e2b36f22bc5 .

nginx: Add Expires: HTTP headers.

2020-05-17T18:34:42+00:00

webmail: Add .webp to the list of static resources.

2020-05-17T18:34:42+00:00

Webmail: Compress static resources.

2020-05-17T16:30:03+00:00

We leave dynamic pages (those passed to PHP-FPM) alone for now:
compressing them would make us vulnerable to BREACH attacks.  This will
be revisited once Roundcube 1.5 is released: 1.5 adds support for the
same-site cookie attribute which once set to 'Strict' makes it immune to
BREACH attacks:

    https://github.com/roundcube/roundcubemail/pull/6772
    https://www.sjoerdlangkemper.nl/2016/11/07/current-state-of-breach-attack/#same-site-cookies

Webmail: Fix allowed extensions for static resources.

2020-05-17T16:30:03+00:00

  $ find -L /usr/share/roundcube/{plugins,program/js,program/resources,skins} -xtype f -printf "%f\\n" \
      | sed -r "s/^([^.]+)(.*)/\1\2\t\2/" | sort -k2 | uniq -c -f1

Webmail: Improve Content-Security-Policy.

2020-05-17T16:30:03+00:00

Roundcube: Port to Debian 10.

2020-05-17T03:21:32+00:00

We use the version from buster-backports (currently 1.4.4+dfsg.1-1~bpo10+1)
for the elastic theme.