Commit message (Collapse) | Author | Age | Files | |
---|---|---|---|---|
* | stunnel: disable compression. | Guilhem Moulin | 2015-10-27 | 1 |
| | ||||
* | stunnel: use GCM ciphers only; use SSL options rather than ciphers to ↵ | Guilhem Moulin | 2015-10-27 | 1 |
| | | | | disable protocols. | |||
* | roundcube: Raise 'imap_timeout' from 1 to 3 minutes. | Guilhem Moulin | 2015-09-30 | 1 |
| | | | | See http://wiki.fripost.org/tracker/Error_on_search_in_roundcube/ . | |||
* | roundcube: Use php5-enchant and GNU Aspell for spell-checking. | Guilhem Moulin | 2015-09-29 | 1 |
| | ||||
* | Add jqueryui configuration. | Guilhem Moulin | 2015-09-29 | 2 |
| | ||||
* | Make roundcube plugin configuration static files. | Guilhem Moulin | 2015-09-29 | 4 |
| | ||||
* | Upgrade Roundcube to 1.1.2. | Guilhem Moulin | 2015-09-24 | 8 |
| | ||||
* | Make the webmail connect directly to the outgoing SMTP proxy. | Guilhem Moulin | 2015-06-07 | 6 |
| | | | | | (Hence delete the 'webmail' Postfix instance.) This shortens the delay caused by the recipient verification probes. | |||
* | Use recipient address verification probes. | Guilhem Moulin | 2015-06-07 | 1 |
| | | | | | | | This is specially useful for mailing lists and the webmail, since it prevents our outgoing gateway from accepting mails known to be bouncing. However the downside is that it adds a delay of up to 6s after the RCPT TO command. | |||
* | Upgrade the webmail configuration from Wheezy to Jessie. | Guilhem Moulin | 2015-06-07 | 3 |
| | ||||
* | Don't make Roundcube add a 'X-Sender' header with the sender's identity. | Guilhem Moulin | 2015-06-07 | 1 |
| | ||||
* | Roundcube's 'password' plugin. | Guilhem Moulin | 2015-06-07 | 1 |
| | ||||
* | Make Nginx send the intermediate certificate along with the server's. | Guilhem Moulin | 2015-06-07 | 1 |
| | ||||
* | Remove o=mailHosting from the LDAP directory suffix. | Guilhem Moulin | 2015-06-07 | 1 |
| | | | | | | So our suffix is now a mere 'dc=fripost,dc=org'. We're also using the default '/var/lib/ldap' as olcDbDirectory (hence we don't clear it before hand). | |||
* | Add ability to add custom OrganizationalUnits in genkeypair. | Guilhem Moulin | 2015-06-07 | 1 |
| | | | | Also, it's now possible to reuse an existing private key (with -f). | |||
* | Tell vim the underlying filetype of templates for syntax highlighting. | Guilhem Moulin | 2015-06-07 | 1 |
| | ||||
* | Reload Postfix upon configuration change, but don't restart it. | Guilhem Moulin | 2015-06-07 | 2 |
| | | | | | | (Unless a new instance is created, or the master.cf change is modified.) Changing some variables, such as inet_protocols, require a full restart, but most of the time it's overkill. | |||
* | Replace IPSec tunnels by app-level ephemeral TLS sessions. | Guilhem Moulin | 2015-06-07 | 3 |
| | | | | | For some reason giraff doesn't like IPSec. App-level TLS sessions are less efficient, but thanks to ansible it still scales well. | |||
* | Outgoing SMTP proxy. | Guilhem Moulin | 2015-06-07 | 1 |
| | ||||
* | Expose the real user ID when using the webmail. | Guilhem Moulin | 2015-06-07 | 1 |
| | | | | | | Sadly not doing so and keeping a table message ID -> username, like we do for SASL authenticated users, doesn't seem trivial here. We could encrypt the header, though. | |||
* | Fix syntax error. | Guilhem Moulin | 2015-06-07 | 1 |
| | ||||
* | Generate certs for Dovecot and Nginx if they are not there. | Guilhem Moulin | 2015-06-07 | 2 |
| | ||||
* | Force Roundcube to connect the IMAP server on localhost:143. | Guilhem Moulin | 2015-06-07 | 1 |
| | ||||
* | Allow Roundcube to offer JavaScript. | Guilhem Moulin | 2015-06-07 | 1 |
| | ||||
* | Support boken SMTP clients and LOGIN SASL mechanism. | Guilhem Moulin | 2015-06-07 | 1 |
| | ||||
* | Install Rouncube from backports. | Guilhem Moulin | 2015-06-07 | 2 |
| | | | | | | Recent versions have a whole bunch of bugfixes and nice new features: http://trac.roundcube.net/wiki/Changelog | |||
* | wibble | Guilhem Moulin | 2015-06-07 | 1 |
| | ||||
* | Assume a DNS entry for each role. | Guilhem Moulin | 2015-06-07 | 3 |
| | | | | | | E.g., ldap.fripost.org, ntp.fripost.org, etc. (Ideally the DNS zone would be provisioned by ansible, too.) It's a bit unclear how to index the subdomains (mx{1,2,3}, etc), though. | |||
* | typo | Guilhem Moulin | 2015-06-07 | 1 |
| | ||||
* | wibble | Guilhem Moulin | 2015-06-07 | 2 |
| | ||||
* | Don't pass the client information unless necessary. | Guilhem Moulin | 2015-06-07 | 1 |
| | ||||
* | Don't use IPSec to relay messages to localhost. | Guilhem Moulin | 2015-06-07 | 1 |
| | ||||
* | Excplicitely make local services run on localhost. | Guilhem Moulin | 2015-06-07 | 1 |
| | ||||
* | typo | Guilhem Moulin | 2015-06-07 | 1 |
| | ||||
* | Configure Sieve and ManageSieve. | Guilhem Moulin | 2015-06-07 | 2 |
| | | | | | Also, add the 'managesieve' RoundCube plugin to communicate with our server. | |||
* | Use a local IMAP caching proxy under the webmail. | Guilhem Moulin | 2015-06-07 | 1 |
| | | | | | | | | | | | | (Unless the webmail is itself a full IMAP server.) It replaces RoundCube's own IMAP and message caches. Dovecot's IMAPC storage backend is not very documented, but provides smart IMAP proxying. References include: http://dovecot.org/pipermail/dovecot/2011-January/056975.html http://wiki2.dovecot.org/HowTo/ImapcProxy http://wiki2.dovecot.org/Migration/Dsync | |||
* | Configure the webmail. | Guilhem Moulin | 2015-06-07 | 9 |