Commit Graph

2678 Commits

Author SHA1 Message Date
polarathene 9f9312db30 docs(chore): Shift "PROXY protocol" tabs
NGINX tab relocated closer to Traefik, as the nested config tabs for DMS Postfix + Dovecot config have been extracted out to be visible after the reverse proxy config tab group instead of buried in the Traefik tab.

The warning admonition is shifted into the relevant config tab where it's visible upfront for the reader to be aware of and change to the duplicate ports tab early.
2024-03-10 22:12:41 +13:00
polarathene fc0ef0f996 docs(chore): Manual IP config tabs merge (part 3)
This wraps the two tabs in an `example` admonition, then indents content correctly. No other changes to minimize diff noise.
2024-03-10 21:55:05 +13:00
polarathene c1a9a7fd6a docs(chore): Manual IP config tabs merge (part 2)
The external IP for DMS `Service` is a simpler configuration than the Load Balancer one. Shift it to be presented first.
2024-03-10 21:53:07 +13:00
polarathene 239dc3edcf docs(chore): Manual IP config tabs merge (part 1)
These two tabs have effectively the same pro/cons and `info` admonition content. The primary difference is their YAML snippet paired with a bit of context.

Removes the redundant content, minor revisions to content.
2024-03-10 21:51:48 +13:00
polarathene 01acb9d021 docs(chore): Shift pro/con lists to top of each tab
Additionally make them collapsible but expanded by default (`???+`)
2024-03-10 21:34:51 +13:00
polarathene 6b868539c2 docs(chore): Adjust other comparison lists to `TaskList` 2024-03-10 21:31:02 +13:00
polarathene 34173e8d6b docs: Introduce `TaskList` for pro/con lists
Bullet points aren't that nice when we're differentiating with an icon already, but `mkdocs-material` makes it difficult to target via CSS as we cannot easily add a list to a `ul` element and it'd be a bit awkward to append to each list item.

Task list feature works well, but customizing the unchecked style would look better. This is acceptable since we're not a TaskList anywhere else.
2024-03-10 21:24:36 +13:00
Brennan Kinney 50c27f39b4
Apply suggestions from code review 2024-03-10 18:02:28 +13:00
georglauterbach edf0a623e4
add one more requirement for using PROXY protocol 2024-03-09 17:38:18 +01:00
georglauterbach 8edf55edab
more details for PROXY-protocol NGINX 2024-03-09 17:33:51 +01:00
georglauterbach b561b178da
remove superflous `tmp-files`
This is not required because `readOnlyRootFilesystem: false`.
2024-03-09 17:29:36 +01:00
georglauterbach 4dfe11e470
drop content that is not relevant or incorrect
The scaling-issue is incorrect here, because there is no actual relation
to the `Service`. Whether not the Origin IP is preserved is covered
later too - no need to make the reader confused at this point.
2024-03-09 17:24:33 +01:00
georglauterbach a6d87157ae
formatting 2024-03-09 17:19:10 +01:00
georglauterbach cb704d5c61
more wording 2024-03-09 17:13:16 +01:00
georglauterbach 8c39bdc3fd
wording 2024-03-09 17:10:09 +01:00
georglauterbach bcf933cd40
praise be linters 2024-03-09 17:04:23 +01:00
georglauterbach 78ad4dc1ef
remove superflous CIDR 2024-03-09 17:03:41 +01:00
georglauterbach 9c7a53e07e
make port names consistent 2024-03-09 16:55:40 +01:00
georglauterbach e53095cbcf
correct `apiVersion` for `Deployment` 2024-03-09 16:54:59 +01:00
georglauterbach 4d68958c3f
rewrite "Exposing your Mail ..." section
It should be better structured now and container a more uniform
structure.
2024-03-09 16:51:20 +01:00
georglauterbach 48fddf3e21
rephrasing for exposing DMS section 2024-03-08 17:47:32 +01:00
georglauterbach aa6894e5fa
move `Deployment` section 2024-03-08 17:33:03 +01:00
georglauterbach faff9c3fb5
add note on the service type for PROXY protocol 2024-03-08 17:32:08 +01:00
Brennan Kinney b8eb1d9684
Update docs/content/config/advanced/kubernetes.md 2024-03-09 00:50:09 +13:00
Brennan Kinney 65abc56c5b
Update kubernetes.md 2024-03-09 00:46:59 +13:00
Brennan Kinney 93298b91f7
Apply suggestions from code review 2024-03-09 00:41:03 +13:00
georglauterbach d2a57be44f
rewrite Kubernetes page
- re-structure the page (mainly introducing `===`) to enable users to
  switch easily between individual parts of this docs page
- rewrite the PROXY protocol parts
- add Traefik PROXY protocol example with deciated proxy-ports
2024-03-07 11:06:34 +01:00
Kirill Kirilenko 3649699197
fix: Move spam to mailbox associated to the `\Junk` special-use attribute (#3925)
Co-authored-by: Brennan Kinney <5098581+polarathene@users.noreply.github.com>
2024-03-07 11:13:22 +13:00
Georg Lauterbach e21e5e0490
Rspamd: update history key in Redis configuration (#3927) 2024-03-06 08:44:34 +01:00
Georg Lauterbach b5b193ca4c
Rspamd: minor tweaks and follow-up for SPF, DKIM and DMARC symbols (#3923)
* move `policies_group.conf` to correct location

I originally assumed the file had to be placed into `scores.d`, but I
now know that `local.d` is actually correct.

* add configuration for composite symbols

See updates to #3690:

Additional Rspamd Symbols

Rspamd has so-called composite symbols that trigger when a condition
is met. Especially AUTH_NA and AUTH_NA_OR_FAIL will adjust the scores
of various lines in the table above. This needs to be taken into account.

* update CHANGELOG
2024-03-05 10:48:49 +01:00
Brennan Kinney d227d6dc73
docs: Reference systemd timer example (`cerbot renew`) (#3921) 2024-03-05 20:33:04 +13:00
dependabot[bot] 899b644a04
chore(deps): Bump docker/setup-buildx-action from 3.0.0 to 3.1.0 (#3924)
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-03-04 18:19:57 +01:00
github-actions[bot] 0c8d8f26d9
docs: updated `CONTRIBUTORS.md` (#3916) 2024-03-03 22:50:06 +01:00
Casper 83a48e8958
Fail2ban logrotate interval/count: substitute only when necessary (#3919) 2024-03-03 22:48:42 +01:00
Georg Lauterbach 12f5101d84
Rspamd: improve SPF, DKIM and DMARC Symbol Weights (#3913) 2024-03-02 02:42:47 +01:00
Casper 736f2e44bc
Fail2Ban: Align logrotate count & interval (#3915) 2024-03-01 01:00:23 +01:00
Casper aa9465773c
Rename supervisor-app.conf to dms-services.conf (#3908)
* rename supervisor-app.conf to dms-services.conf

* changelog added
2024-02-28 22:08:19 +01:00
Dominic Germain 512f39c7eb
feat: Configurable number of rotated log files (#3907) 2024-02-28 15:34:30 +01:00
dependabot[bot] 2c1faa7244
chore(deps): Bump myrotvorets/set-commit-status-action (#3911) 2024-02-26 13:45:50 +01:00
github-actions[bot] d3ccaddb70
docs: updated `CONTRIBUTORS.md` (#3909)
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2024-02-25 12:54:49 +01:00
Jesse Portnoy 95dfc71b54
Fix typo and broken README link (#3906) 2024-02-25 00:06:58 +01:00
Casper e232e43d32
fix: fetchmail environment variables (#3901) 2024-02-21 11:19:41 +01:00
Brennan Kinney 67faa95b0b
fix(`setup`): `open-dkim` log for conflicting implementations (#3899) 2024-02-20 21:33:04 +13:00
Brennan Kinney d86c3cb159
chore: `packages.sh` - Remove redundant comment (#3900) 2024-02-20 21:21:22 +13:00
Robbert Klarenbeek a815bf5ab4
fix: Apply SELinux security context after moving to mail-state (#3890)
* fix: Apply SELinux security context after moving to mail-state
* fix: Ignore failing chcon on non-SELinux systems
2024-02-16 20:24:39 +13:00
github-actions[bot] 79a9656f48
docs: update `CONTRIBUTORS.md` (#3883)
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2024-02-14 09:48:35 +00:00
Brennan Kinney 22555347ed
docs: Complete rewrite of PROXY protocol guide (#3882) 2024-02-13 19:42:17 +13:00
Frugan 34654c7e20
chore: Source Postgrey `whitelist_clients` config from Github (#3879)
Use a more updated list for Postgrey `whitelist_clients`
2024-02-09 10:23:58 +13:00
Georg Lauterbach 4f222fe256
Rspamd: improve DKIM key generation (#3876)
* correct removal of old files with `--force`

`rm` would fail when one of the files is not present, which is quite
undesirable log (not harmful until `set -e` is introduced).

* use tmp log file

ref: https://github.com/docker-mailserver/docker-mailserver/issues/3873#issuecomment-1926736020

* correct indentation
2024-02-06 00:30:22 +01:00
Rahil Bhimjiani 51a3915257
docs: fix 404 in mailserver.env and default to RSA 2048 for TLS certs (#3875)
* fix 404: broken MTA-STS link in comment of mailserver.env

Signed-off-by: Rahil Bhimjiani <me@rahil.rocks>

* docs: recommend and default to RSA 2048 for ssl certs

Signed-off-by: Rahil Bhimjiani <me@rahil.rocks>

---------

Signed-off-by: Rahil Bhimjiani <me@rahil.rocks>
2024-02-06 11:56:47 +13:00