Commit Graph

Select branches

Hide Pull Requests

master

Mono Color

• c1843b3e49 Note that fail2ban depends on the order of the audit fields master finnandClaude Opus 5.5 2026-10-23 19:42:53 +00:00
• a424d9b87f bump version to 1.3.0 finnandClaude Opus 5.5 2026-10-23 19:23:37 +00:00
• e88704017e Raise the minimum password length to 20 characters finnandClaude Opus 5.5 2026-10-23 19:23:37 +00:00
• fc1463c290 Create /workspaces in the devcontainer for the dev user finnandClaude Opus 5.5 2026-10-23 19:23:37 +00:00
• 4a159006aa Log structured fields through a logger adapter finnandClaude Opus 5.5 2026-10-23 13:58:44 +00:00
• 39eb7431e3 JSON encode the values in the request and cross-origin log lines finnandClaude Opus 5.5 2026-10-23 13:55:49 +00:00
• d33821dd1b Log security relevant events to an audit log finnandClaude Opus 5.5 2026-10-23 13:55:49 +00:00
• 80da3afc04 Require a minimum password length of 12 characters for new passwords finnandClaude Opus 5.5 2026-10-23 13:33:48 +00:00
• 4e71c809da Split the auth module into hashing, password policy, passwords and login finnandClaude Opus 5.5 2026-10-23 13:25:58 +00:00
• c72bc8c6af Disable the gunicorn control socket in the Docker image finnandClaude Opus 5.5 2026-10-22 19:19:05 +00:00
• 2e40c0ff47 Remove the SSHA512 password hashes finnandClaude Opus 5.5 2026-10-22 19:18:50 +00:00
• 4cbe1435dc bump version top 1.2.0 finn 2026-10-22 19:04:56 +00:00
• 5eea5da396 Hash passwords with bcrypt instead of a single SHA-512 round finnandClaude Opus 5.5 2026-10-22 19:04:04 +00:00
• b1c412f3d7 Show the not found page for unknown URLs finnandClaude Opus 5.5 2026-10-22 18:37:12 +00:00
• 105fd42d22 Log every request once and keep the language per request finnandClaude Opus 5.5 2026-10-22 18:37:12 +00:00
• b86506eb0e Make the login case-insensitive and keep non-admins off the user list finnandClaude Opus 5.5 2026-10-22 18:03:07 +00:00
• fda35307c6 Document the reverse proxy requirement for X-Real-IP finnandClaude Opus 5.5 2026-10-22 18:02:36 +00:00
• 74a7eaf677 Write the project name as "Max" in the README finnandClaude Opus 5.5 2026-10-22 17:53:01 +00:00
• 7ba0253837 Set the charset and the current language in the HTML head finnandClaude Opus 5.5 2026-10-22 17:53:01 +00:00
• 78702f133c Remove unused Font Awesome files and legacy font formats finnandClaude Opus 5.5 2026-10-22 17:53:01 +00:00
• ca4cb0b25f Fix spelling in the translations and their English source strings finnandClaude Opus 5.5 2026-10-22 17:47:38 +00:00
• f46a346078 Show the version in a footer for logged-in users finnandClaude Opus 5.5 2026-10-22 17:43:02 +00:00
• 2b1160862a Fix several small security and robustness issues finnandClaude Opus 5.5 2026-10-21 20:04:22 +00:00
• 58242117f6 Ask for the current password when changing the own password finnandClaude Opus 5.5 2026-10-21 19:38:14 +00:00
• 6e6ae3ccb7 Add the Python extension and interpreter path to the devcontainer finnandClaude Opus 5.5 2026-10-21 19:24:37 +00:00
• 5b87d9ff03 Fix HTTP 500 on the create pages with ?return=detail finnandClaude Opus 5.5 2026-10-21 19:24:37 +00:00
• 91eaef7f93 Pass only the return parameter to form actions finnandClaude Opus 5.5 2026-10-21 19:24:37 +00:00
• 53081dd553 Pin all dependencies with hashes and add a CVE audit finnandClaude Opus 5.5 2026-10-21 18:30:08 +00:00
• 2fb357ae77 Set security headers on all responses finnandClaude Opus 5.5 2026-10-21 18:17:19 +00:00
• 931243dd60 Harden the container: non-root, no build tools, read-only, stdout logging finnandClaude Opus 5.5 2026-10-21 18:09:30 +00:00
• 7ac4e6c3a7 Handle sessions on password change correctly finnandClaude Opus 5.5 2026-10-21 17:48:03 +00:00
• 9aed6b5227 Set SameSite=Lax and use the __Host- prefix for the session cookie finnandClaude Opus 5.5 2026-10-21 17:40:54 +00:00
• 8e32727fcd Limit sessions per user instead of a global LRU cap finnandClaude Opus 5.5 2026-10-21 17:27:44 +00:00
• 80757fa1d8 Fix HTTP 500 on missing email or domain when creating users and aliases finnandClaude Opus 5.5 2026-10-21 15:25:38 +00:00
• 4a03b5c1a1 Reserve privileged alias addresses for admins finnandClaude Opus 5.5 2026-10-21 15:19:21 +00:00
• fc24ba068d Prevent session fixation on login finnandClaude Opus 5.5 2026-10-21 11:51:35 +00:00
• cc3d064e64 Expire sessions after 30 min idle and 12 h absolute finnandClaude Opus 5.5 2026-10-21 11:46:44 +00:00
• ca023e705c Invalidate sessions server-side on logout and deactivation finnandClaude Opus 5.5 2026-10-21 11:01:55 +00:00
• dc85c578a2 Protect against login CSRF without cookies for anonymous users finnandClaude Opus 5.5 2026-10-21 10:48:55 +00:00
• 91e95b1947 Make isort compatible with black finnandClaude Opus 5.5 2026-10-21 09:06:51 +00:00
• 340006ff37 Disable debug default login finnandClaude Opus 5.5 2026-10-21 08:36:57 +00:00
• 86fcdfde27 Devcontainer: enable bash-completion and set UTF-8 locale finnandClaude Opus 5.5 2026-10-21 08:36:57 +00:00
• e0b5e05cce Use port 8757 for the dev server finnandClaude Opus 5.5 2026-10-21 08:36:57 +00:00
• 9f25457b24 Remove old docker-compose based dev setup finnandClaude Opus 5.5 2026-10-21 08:21:12 +00:00
• 9895017385 Restructure scripts into dev/ and prod/ for the devcontainer finnandClaude Opus 5.5 2026-10-21 08:36:53 +00:00
• 7c2b9fb3f4 Refactor logging and drop deprecated FLASK_ENV finnandClaude Opus 5.5 2026-10-21 08:21:07 +00:00
• 65dddea3bc initial switch to a devcontainer finn 2026-10-21 06:25:18 +00:00
• 2bd853e9b5 modernizing the dependencies finn 2026-10-19 18:53:59 +02:00
• a1c6b656d7 multi-domain support Finn Stutzenstein 2022-03-15 18:36:41 +01:00
• 58f46d0bbe Fix typo Finn Stutzenstein 2022-03-12 08:38:42 +01:00
• 7124133f88 Fix SQL queries and order tables Finn Stutzenstein 2022-03-06 11:22:45 +01:00
• 818a43202a remove can_receive Finn Stutzenstein 2022-03-06 11:14:19 +01:00
• 8f623a264d Fix user creation Finn Stutzenstein 2022-03-06 10:01:17 +01:00
• d7641c2da4 Fix SQL queries Finn Stutzenstein 2022-03-06 09:53:34 +01:00
• b31f83e214 Fix prod docker file Finn Stutzenstein 2022-03-06 09:39:06 +01:00
• aff7bf3b48 Unique emails and added can_receive Finn Stutzenstein 2022-03-06 09:34:23 +01:00
• ba580483b4 Fix real ip header Finn Stutzenstein 2022-02-01 18:35:41 +01:00
• add153d8a6 More work Finn Stutzenstein 2022-01-22 18:37:56 +01:00
• 9d018e00be initial commit FinnStutzenstein 2020-04-13 08:31:44 +02:00