Commit graph

1040 commits

Author SHA1 Message Date
David Duque
9193dbe56b Software Updates
* FontAwesome to v6.2.1
2022-11-21 02:04:28 +00:00
David Duque
289f311c4f Hide some unnecessary configuration output 2022-11-21 01:54:18 +00:00
Dom
9215b011f8
Fix bug with quota field detection (#97)
* Fix bug with quota field detection

This is related to Issue #96 "Upgrade to v60.4 fails"

* Update setup/mail-users.sh

sqlite_schema isn't supported everywhere yet

Co-authored-by: David Duque <github@duqued.net>
2022-11-20 18:35:44 +00:00
David Duque
748adfebd9 v60.4 2022-11-07 22:07:35 +00:00
David Duque
1f778bc94c Hotfix 2022-11-07 22:07:24 +00:00
David Duque
6abed54756 Nextcloud: update to v24.0.7 2022-11-07 21:49:29 +00:00
David Duque
b5bc886561 Create a command alias for management/cli.py 2022-11-07 21:33:43 +00:00
David Duque
1af976a093 Move setup cli command to /usr/local/sbin 2022-11-07 21:28:04 +00:00
David Duque
3451dadde5
Roundcube: Use Mail-in-a-Box admin API to drive password changes (#92)
* Use Mail-in-a-Box driver
We're using the user's own credentials to authenticate themselves.
There are some issues if we release as-is:
* Only usable if the user in question is an admin
* Cannot be used if the user has 2FA enabled

* daemon: Add selective gatekeeper
* Allows us to give access to features for logged in, non-admin users

* Allow non-admins to change their own password

* Begin password management self service, frontend

* Allow all users to enable 2FA

* Password change front-end form

* Self password change front-end functionality

* Force logout after successful password change

* Clear fields after successful password change, also fix error modal
2022-11-07 21:07:37 +00:00
David Duque
774ab4f1e8 "Recover" database if hit by #85 2022-11-06 22:14:35 +00:00
David Duque
26714cee49
Only ensure IPv6 is enabled at the loopback level
We shouldn't exactly try forcing IPv6 to be enabled everywhere.
2022-11-02 09:51:07 +00:00
David Duque
1efa0ed408 v60.3 2022-10-30 23:05:36 +00:00
David Duque
be678a126e Remove nextcloud config lock before upgrading
Fixes #86
2022-10-30 18:39:25 +00:00
David Duque
662639d905 Software updates
* Nextcloud: Calendar plugin to v3.5.2
* Webmail: CardDAV/CalDAV plugin to v4.4.4
2022-10-30 17:10:18 +00:00
David Duque
ed7859eab8 v60.2 2022-10-20 00:36:29 +01:00
David Duque
8b4a49597e v60.1 2022-10-18 21:58:46 +01:00
David Duque
01cf61deab gettext is a build dependency for duplicity
* Fixes #81
2022-10-18 20:36:18 +01:00
David Duque
619d3781f5 noreply addresses: Use correct db path
* Fixes #82
2022-10-18 20:35:25 +01:00
David Duque
025494ed9c v60.0 2022-10-17 03:41:20 +01:00
David Duque
824762d18d Last-minute setup patches 2022-10-17 03:40:08 +01:00
David Duque
9243ea9374 Software Updates
* Nextcloud to 24.0.6
* * Contacts to 4.2.2
* JQuery to 3.6.1
* Bootstrap to 5.2.2
* FontAwesome to 6.2.0
2022-10-17 02:56:03 +01:00
David Duque
132cfe6e32 Enable local ipv6 at kernel level
* We need :: for nsd
2022-10-17 02:45:31 +01:00
David Duque
bc72c58ae5 Move away from doveadm pw for password changes
* Fixes #77
2022-10-17 02:36:38 +01:00
David Duque
866c185a08 Fix #66
Make sure OOO notices are sent as if the recipients sent them
2022-10-16 23:26:00 +01:00
David Duque
a03707e5f8 Confirm boto3 installation 2022-10-16 20:46:04 +01:00
David Duque
913a4a4585 Alternative duplicity installation (build from pip) 2022-10-16 19:21:07 +01:00
David Duque
c30a18a30b Import changes from upstream v60 2022-10-16 18:26:39 +01:00
Joshua Tauberer
89cd9fb611 Increase gunicorn's worker timeout since some /admin commands take a long time 2022-10-08 08:23:48 -04:00
Joshua Tauberer
22a6270657 Remove old setup step to uninstall acme library 2022-10-08 08:23:48 -04:00
Joshua Tauberer
9b111e2493 Update to Nextcloud 23.0.8 (contacts 4.2.0, calendar 3.5.0) 2022-10-08 07:23:21 -04:00
jvolkenant
b8feb77ef4
Move postgrey database under $STORAGE_ROOT (#2077) 2022-09-24 13:17:55 -04:00
Joshua Tauberer
3c44604316 Install 'file' package
The command is used in mailinabox-postgrey-whitelist. Reported missing (on systems that don't install it by default) in #2083.
2022-09-24 10:10:50 -04:00
kiekerjan
d584a41e60
Update Roundcube to 1.6.0 (#2153) 2022-09-17 09:20:20 -04:00
downtownallday
56074ae035 Tighten roundcube session config (#2138)
Merges #2138.
2022-09-17 09:09:00 -04:00
Steve Hay
84da4e6000 Update dovecot to use same DH parameters file as the other services
Originally from #2157.
2022-09-17 09:07:54 -04:00
Steve Hay
3fd2e3efa9
Replace Flask built-in WSGI server with gunicorn (#2158) 2022-09-17 08:03:16 -04:00
David Duque
e7ee4bc5b4 Fix Nextcloud installation step 2022-09-10 15:52:17 +01:00
David Duque
fc04c8d723 Nextcloud: Implement old version safeguards 2022-09-08 13:05:41 +01:00
Johga
2aa4229e0b
fix error when user_external version under 3.0.0 (#69) 2022-09-08 13:03:51 +01:00
David Duque
e1be9a5eeb
Ubuntu 22.04 support (#59)
* Vagrantfile: Add Ubuntu 22.04 image

* Recognize Ubuntu 22.04 as supported

* Bump nextcloud to v24.0.0

* Bump Roundcube to 1.6-beta

Still waiting for the final release to come out

* Fix version checking functions

* NextCloud fixes

* Update Roundcube config

* Bump roundcube to 1.6-rc

* FIx nextcloud installation step

* rcm: Update CardDAV plugin to v4.4.0 (Guzzle v7)

* Fix STORAGE_ROOT permissions

* Update RC CardDAV plugin to v4.4.1

* Unpin b2sdk for Ubuntu 22.04

* Comment fix

* Drop support for Debian 10 from this point forward

* Software Updates
* Nextcloud: 24.0.2
* Nextcloud Calendar: 3.4.2
* Roundcube CardDAV: 4.4.2

* Update Roundcube to v1.6.0

* Update Nextcloud to v24.0.3
* Contacts to v4.2.0

* Upgrade Nextcloud to v24.0.4
* Calendar to v3.5.0

Webmail:
* CardDAV to v4.4.3
2022-09-08 12:26:39 +01:00
Joshua Tauberer
91fc74b408 Setup fixes for Ubuntu 22.04
Nextcloud:
* The Nextcloud user_external 1.0.0 package for Nextcloud 21.0.7 isn't available from Nextcloud's releases page, but it's not needed in an intermediate upgrade step (hopefully), so we can skip it.
* Nextcloud updgrade steps should not be elifs because multiple intermediate upgrades may be needed.
* Continue if the user_external backend migration fails. Maybe it's not necessary. It gives a scary error message though.
* Remove a line that removes an old file that hasn't been in use since 2019 and the expectation is that Ubuntu 22.04 installations are on fresh machines.

Backups:
* For duplicity, we now need boto3 for AWS.
2022-09-03 07:50:36 -04:00
David Duque
e0c0b5053c Upgrade Nextcloud External User Backend to v3.0.0
Co-Authored-By: Joshua Tauberer <jt@occams.info>
2022-07-28 14:42:51 -04:00
Joshua Tauberer
268b31685d Ensure STORAGE_ROOT has a+rx permission since processes run by different system users need to access files within it 2022-07-28 14:42:51 -04:00
Joshua Tauberer
ab71abbc7c Update to latest cryptography Python package, add missing source at top of management.sh so it can run standalone (needs STORAGE_ROOT) 2022-07-28 14:42:51 -04:00
Joshua Tauberer
87e6df9e28 Fix roundcube dependency missing imap and unneeded ldap 2022-07-28 14:42:51 -04:00
Felix Matouschek
558f2db31f system.sh: Remove no longer needed haveged (#2090)
Starting from kernels 5.6 haveged is obsolete. Therefore remove it in
Ubuntu 22.04.

See https://github.com/jirka-h/haveged/issues/57
2022-07-28 14:42:51 -04:00
Joshua Tauberer
0a7b9d5089 Update dovecot, spampd settings for Ubuntu 22.04
* dovecot's ssl_protocols became ssl_min_protocol in 2.3
* spampd fixed a bug so we can remove lmtp_destination_recipient_limit=1 in postfix
2022-07-28 14:34:45 -04:00
Joshua Tauberer
1eddf9a220 Upgrade to Nextcloud 23.0.4
The first version supporting PHP 8.0 is Nextcloud 21. Therefore we can add migrations only to Nextcloud 21 forward, and so we only support migrating from Nextcloud 20 (Mail-in-a-Box versions v0.51+). Migration steps through Nextcloud 21 and 22 are added.

Also:

* Fix PHP APUc settings to be before Nextcloud tools are run.
2022-07-28 14:34:45 -04:00
Joshua Tauberer
78d71498fa Upgrade from PHP 7.2 to 8.0 for Ubuntu 22.04
* Add the PHP PPA.
* Specify the version when invoking the php CLI.
* Specify the version in package names.
* Update paths to 8.0 (using a variable in the setup scripts).
* Update z-push's php-xsl dependency to php8.0-xml.
* php-json is now built-into PHP.

Although PHP 8.1 is the stock version in Ubuntu 22.04, it's not supported by Nextcloud yet, and it likely will never be supported by the the version of Nextcloud that succeeds the last version of Nextcloud that supports PHP 7.2, and we have to install the next version so that an upgrade is permitted, so skipping to PHP 8.1 may not be easily possible.
2022-07-28 14:02:46 -04:00
Joshua Tauberer
b41a0ad80e Drop some hacks that we needed for Ubuntu 18.04
* certbot's PPA is no longer needed because a recent version is now included in the Ubuntu respository.
* Un-pin b2sdk (reverts 69d8fdef99 and d829d74048).
* Revert boto+s3 workaround for duplicity (partial revert of 99474b348f).
* Revert old "fix boto 2 conflict on Google Compute Engine instances" (cf33be4596) which is probably no longer needed.
2022-07-28 14:02:46 -04:00