Commit Graph
92 Commits
Author SHA1 Message Date
Daniel Winzen b13cb09080 Check update of tor after adding repo 2020-09-05 17:46:04 +02:00
Daniel Winzen 1111b76813 Fixed typo 2020-09-05 16:06:22 +02:00
Daniel Winzen be717d4683 Added a note about raspberry pi setups 2020-08-30 14:04:20 +02:00
Daniel Winzen 1a531c6ccf Stop install script on error and check memory in addition to ncpu 2020-08-30 10:40:16 +02:00
Daniel Winzen a72733c2af Add note about different package names in older distributions 2020-08-20 08:29:51 +02:00
Daniel Winzen f87823b663 Add automake as build dependency 2020-08-19 19:03:24 +02:00
Daniel Winzen d3cbc65081 Make sure mysql is removed before installing mariadb 2020-08-19 18:18:59 +02:00
Daniel Winzen 5531886289 Replace distribution imagemagick with a custom build 2020-08-19 17:45:28 +02:00
Daniel Winzen d3ca7ab32f Include bash-completion in package list 2020-08-15 22:16:34 +02:00
Daniel Winzen 3b7818c738 disable auth penalty as everyone connects from the same IP 2020-08-04 21:48:07 +02:00
Daniel Winzen c56f8fffce Remove eatmydata package if installed 2020-08-01 09:04:49 +02:00
Daniel Winzen db0d358d27 Apparently ca-certificates is not always pre-installed 2020-07-26 21:06:57 +02:00
Daniel Winzen 1764f0b405 Re-order package installation to have all required programs installed before use on minimal systems and remove a few more potential conflicts 2020-07-26 19:42:27 +02:00
Daniel Winzen 0a761596a6 Don't ask questions when running apt 2020-07-25 18:25:57 +02:00
Daniel Winzen c84567b46f Remove nodejs from apt install as we use nvm now 2020-07-25 18:13:39 +02:00
Daniel Winzen 3de4580595 Fixed typo 2020-07-21 17:57:32 +02:00
Daniel Winzen 7902994ac1 Update LD cache to include newly generated libraries 2020-07-21 12:11:06 +02:00
Daniel Winzen af0d5cf26a Remove FTP support - SFTP is the future 2020-07-19 18:03:07 +02:00
Daniel Winzen a9c0b38711 Switch FileManager from ftp to sftp 2020-07-19 17:24:42 +02:00
Daniel Winzen 23993c6e31 libatomic-ops-dev is no longer a dependency 2020-07-19 15:35:28 +02:00
Daniel Winzen 98a1eb2966 Correctly build libatomic_ops from source 2020-07-19 15:22:41 +02:00
Daniel Winzen 5539d86b6d Always check for update when running install_binaries.sh 2020-07-19 13:44:58 +02:00
Daniel Winzen 825a2967e2 Build custom libssh2 and enable hmac-sha2-512 as best matching MAC 2020-07-19 13:33:53 +02:00
Daniel Winzen 4a09f99ff7 Initialization of phpmyadmin database is now part of the setup 2020-07-19 10:27:22 +02:00
Daniel Winzen ff355bf01f Update composer and create phpmyadmin database tables 2020-07-19 10:13:12 +02:00
Daniel Winzen 33839c2e2e Try remounting ro on quotacheck, but don't fail if not possible 2020-07-19 09:56:11 +02:00
Daniel Winzen 25e02d73a0 Use nvm to install node and install yarn with npm 2020-07-19 09:47:52 +02:00
Daniel Winzen f9c02c7a56 Add mysql lua module to nginx 2020-07-19 09:17:59 +02:00
Daniel Winzen 20759103b0 Add nginx lua module form openresty 2020-07-05 22:51:49 +02:00
Daniel Winzen 4e183a490e Update patch 2020-06-02 21:04:30 +02:00
Daniel Winzen 588082e6d0 Allow copy-pasting repositories without worrying about the distribution code 2020-04-09 05:45:42 +02:00
Daniel Winzen 2cd17af243 Add libatomic to nginx 2020-03-15 18:31:19 +01:00
Daniel Winzen 7ae817c18f Minor optimizations 2020-02-29 16:12:10 +01:00
Daniel Winzen c2b010e8e6 Added PGP Two Factor Authentication (2FA) 2020-02-17 07:07:02 +01:00
Daniel Winzen e949e4ea48 Bugfixes 2020-02-14 06:43:52 +01:00
Daniel Winzen 6cd3146b29 Add $request_method to nginx cache key 2020-02-08 22:53:33 +01:00
Daniel Winzen 14c50d7c1e Allow nginx to write in postfix directory 2020-02-08 22:37:57 +01:00
Daniel Winzen 1549b7cc09 vfemail.net took down their .onion server... 2020-02-07 20:10:26 +01:00
Daniel Winzen 0d47c3a5be Updated composer version 2020-02-07 19:43:55 +01:00
Daniel Winzen aa22f7fbeb Added xz and zopfli to chroot 2020-02-06 07:01:33 +01:00
Daniel Winzen 21714d5c25 Added missing hardlink dependency 2020-02-06 06:42:42 +01:00
Daniel Winzen fcd1a37092 Add brotli to chroot 2020-02-06 06:33:15 +01:00
Daniel Winzen 9786372794 Remove no longer needed binaries 2020-02-05 21:14:32 +01:00
Daniel Winzen 78b11191ec Added note about initializing phpMyAdmin setting tables 2020-02-05 19:34:33 +01:00
Daniel Winzen 1b28fcac95 Fix vsftpd not starting 2020-02-05 19:26:35 +01:00
Daniel Winzen f814c67e3f Check path exists and create if not yet existing 2020-02-05 19:06:01 +01:00
Daniel Winzen 05cd5b0774 Rotate all php version logs 2020-02-05 17:59:34 +01:00
Daniel Winzen 6917ffcae0 Added clean_nginx_sockets.sh 2020-02-05 07:27:43 +01:00
Daniel Winzen 35e0a27774 Fix instance not always being enqueued for reloading 2020-02-02 11:42:51 +01:00
Daniel Winzen 3a53ea59f8 Hardlink chroot related files across all accounts to save disk space 2020-01-28 20:51:17 +01:00
Daniel Winzen 988ccef316 fix setup_chroot.sh not being executable 2020-01-26 21:09:12 +01:00
Daniel Winzen 26c4c3c75d set safe file permissions 2020-01-26 14:41:06 +01:00
Daniel Winzen 61d15297b7 Bugfix 2020-01-26 12:07:15 +01:00
Daniel Winzen 47fb983557 sanitize $system_account to protect against database modification exploits 2020-01-25 21:53:00 +01:00
Daniel Winzen 93dc5b10c4 Avoid passing password hash as parameter and write directly to /etc/shadow 2020-01-25 20:29:51 +01:00
Daniel Winzen fc244d3182 Move chroot creation/updating to new setup_chroot() function 2020-01-23 21:49:36 +01:00
Daniel Winzen cb90bc7508 Introduced HOME_MOUNT_PATH const 2020-01-23 20:59:44 +01:00
Daniel Winzen e6946ad1ce Introduced new const to easily change the sites name globally 2020-01-21 21:47:51 +01:00
Daniel Winzen 29b06199e6 Removed unused saslauthd config 2020-01-19 10:28:17 +01:00
Daniel Winzen 5215d7ab29 Fix heredoc pausing script execution 2020-01-19 10:23:53 +01:00
Daniel Winzen 566411df37 Integrate torproject repository instrictions in README 2020-01-18 20:42:26 +01:00
Daniel Winzen 739216f853 Tweaked nginx ressource limits 2020-01-16 06:22:35 +01:00
Daniel Winzen d54fa4535d Updated composer version 2020-01-14 17:08:42 +01:00
Daniel Winzen 24692da470 Fixed cache injection vulnerability using faked headers 2020-01-14 06:45:56 +01:00
Daniel Winzen cdbf8958b2 Improve unused account detection script 2020-01-13 06:55:27 +01:00
Daniel Winzen 68b4458c88 Improve inode/dnode caching under memory pressure 2020-01-13 06:53:22 +01:00
Daniel Winzen e9c4b798d5 Update php systemd service files 2020-01-11 13:33:34 +01:00
Daniel Winzen 5abb32402d Added options to enable/disable account upgrades and coinpayments 2020-01-11 13:18:50 +01:00
Daniel Winzen a69714bce8 Enable hidden service intro DoS defense 2020-01-11 12:56:20 +01:00
Daniel Winzen 0bb35ae263 chroot squirrelmail 2020-01-09 07:06:08 +01:00
Daniel Winzen 709e4fd1c5 Reduce priority of background deletion task 2020-01-08 06:32:40 +01:00
Daniel Winzen 9ba305da60 Removed old sendmail_wrapper.php script 2020-01-07 19:43:30 +01:00
Daniel Winzen b09aa25d88 \ at line ending in heredoc needs escaping 2020-01-05 20:36:32 +01:00
Daniel Winzen 3921c92388 Updated nginx patch 2020-01-05 19:49:11 +01:00
Daniel Winzen 930052fe1e BindPaths -> ReadWritePaths for all systemd services 2020-01-05 19:31:52 +01:00
Daniel Winzen d7c886bb54 Added support for mail() inside chroots 2020-01-05 15:50:08 +01:00
Daniel Winzen f573f79f6c Switch gnupg1 to gnupg2 and set env[HOME] for php correctly 2020-01-05 15:03:20 +01:00
Daniel Winzen 6d92ea99e0 Inreased mysql max_connections variable 2020-01-05 14:02:38 +01:00
Daniel Winzen b768d3f45f Enabled rar php extension 2019-12-21 12:42:24 +01:00
Daniel Winzen a527b2702a Added gnupg extension to php 2019-12-21 11:00:46 +01:00
Daniel Winzen 2de12162ce Enable upgrading number of files quota 2019-12-21 09:23:14 +01:00
Daniel Winzen 0b41932570 Use Dovecot SASL instead of running a seperate saslauthd 2019-12-16 22:25:30 +01:00
Daniel Winzen b2da71f9d2 Add "/.composer/vendor/bin" to PATH within chroot 2019-12-14 23:07:26 +01:00
Daniel Winzen 264eacc3f9 Added some empty dirs and files that may be used within a chroot 2019-12-14 22:55:45 +01:00
Daniel Winzen 0e0fb54eae Track quota usage and allow upgrading quotas 2019-12-14 21:01:39 +01:00
Daniel Winzen fee1c135c2 Updated composer version 2019-11-28 13:33:26 +01:00
Daniel Winzen da00e68dfb Add autoconf to build dependencies 2019-11-28 13:18:37 +01:00
Daniel Winzen 1f4c90edf7 image/x-icon (.ico files) can be compressed well 2019-11-10 20:55:54 +01:00
Daniel Winzen 6b19346b20 Various optimizations 2019-11-02 19:41:05 +01:00
Daniel Winzen f857083765 Enable HPACK nginx module and aio 2019-11-01 20:45:21 +01:00
Daniel Winzen 2bb94cf623 Add HTTP2 HPACK patch by CloudFlare 2019-11-01 20:12:45 +01:00
Daniel Winzen 1498c092cd Add dynamic TLS record patch by CloudFlare 2019-11-01 19:07:25 +01:00