summaryrefslogtreecommitdiffstats
path: root/roles/webmail
Commit message (Expand)AuthorAgeFiles
* s/LDAP-provider/LDAP_provider/Guilhem Moulin2020-05-191
* stunnel4: Harden and socket-activate.Guilhem Moulin2020-05-185
* AEAD ciphers: Add EECDH+CHACHA20 macro.Guilhem Moulin2020-05-181
* nginx: Add Expires: HTTP headers.Guilhem Moulin2020-05-171
* webmail: Add .webp to the list of static resources.Guilhem Moulin2020-05-171
* Webmail: Compress static resources.Guilhem Moulin2020-05-171
* Webmail: Fix allowed extensions for static resources.Guilhem Moulin2020-05-171
* Webmail: Improve Content-Security-Policy.Guilhem Moulin2020-05-171
* Remove 'meta: flush_handlers' directives under conditionals.Guilhem Moulin2020-05-171
* Roundcube: skip 'keyboard_shortcuts' plugin.Guilhem Moulin2020-05-171
* Roundcube: Port to Debian 10.Guilhem Moulin2020-05-1710
* Roundcube: improve serving of static resources.Guilhem Moulin2018-12-061
* Upgrade webmail baseline to Debian Stretch.Guilhem Moulin2018-12-036
* Upgrade syntax to Ansible 2.7 (apt module).Guilhem Moulin2018-12-031
* Upgrade syntax to Ansible 2.4.Guilhem Moulin2017-11-231
* Don't make Roundcube add a 'X-Sender' header with the sender's identity.Guilhem Moulin2017-06-011
* Don't let authenticated client use arbitrary sender addresses.Guilhem Moulin2017-06-011
* webmail: use Zend opcache and configure APCu.Guilhem Moulin2017-05-143
* nginx: add support for HTTP/2.Guilhem Moulin2016-12-131
* Webmail: Install XCache (PHP opcode cacher).Guilhem Moulin2016-12-081
* nginx: Don't hard-code the HPKP headers.Guilhem Moulin2016-07-123
* Change the pubkey extension from .pem to .pub.Guilhem Moulin2016-07-101
* Route SMTP traffic from the webmail through IPsec.Guilhem Moulin2016-07-106
* IMAP: don't include mailbox under the virtual namespace in LIST responses.Guilhem Moulin2016-07-061
* certs/public: fetch each cert's pubkey (SPKI), not the cert itself.Guilhem Moulin2016-06-151
* Use stunnel to secure the connection from the webmail to ldap.fripost.org.Guilhem Moulin2016-06-054
* Roundcube: route IMAP and managesieve traffic through IPSec.Guilhem Moulin2016-05-282
* Roundcube: add a link to our webpage as support URL.Guilhem Moulin2016-05-241
* Roundcube: add a warning regarding IMAP hostname change.Guilhem Moulin2016-05-231
* Add an ansible module 'fetch_cmd' to fetch the output of a remote command loc...Guilhem Moulin2016-05-181
* roundube: Pin X.509 certificate for sieve.fripost.org:4190.Guilhem Moulin2016-05-172
* Use systemd unit files for stunnel4.Guilhem Moulin2016-05-123
* Roundcube's CSP: remove 'upgrade-insecure-requests' and 'block-all-mixed-cont...Guilhem Moulin2016-04-081
* Roundcube's CSP: allow loading images from data: URIs and arbitrary URLs.Guilhem Moulin2016-04-071
* Set frame-ancestors from 'none' to 'self' in roundcube's CSP.Guilhem Moulin2016-04-021
* wibbleGuilhem Moulin2016-04-021
* Set a HPKP on the webmail, website/wiki/git and list manager.Guilhem Moulin2016-04-011
* Set a CSP on the webmail, website/wiki and list manager.Guilhem Moulin2016-04-011
* Set HTTP security headers.Guilhem Moulin2016-03-301
* Let's EncryptGuilhem Moulin2016-03-021
* Upgrade playbooks to Ansible 2.0.Guilhem Moulin2016-02-122
* Use the Let's Encrypt CA for our public certs.Guilhem Moulin2015-12-202
* nginx: Move include.d/* to snippets/.Guilhem Moulin2015-12-201
* nginx: s/conf.d/include.d/Guilhem Moulin2015-12-151
* wibbleGuilhem Moulin2015-12-091
* ngnix: mv ssl/config conf.d/sslGuilhem Moulin2015-12-091
* Use a dedicated subdomain for ManageSieve.Guilhem Moulin2015-12-031
* Automatically fetch X.509 certificates, and add them to git.Guilhem Moulin2015-12-031
* Roundcube managesieve SSL options: use AESGCM and disable compression.Guilhem Moulin2015-10-271
* stunnel: disable compression.Guilhem Moulin2015-10-271