Update Roundcube 1.6.1, iRedAPD 5.2.

Add websocket support in http header 'Content-Security-Policy:'.

Dockerfiles/iredapd

@@ -11,14 +11,14 @@ RUN /bin/sh ${SCRIPTS_DIR}/add_user_iredapd.sh && \
 
 RUN apt-get update && apt-get upgrade -y && apt-get install -y --no-install-recommends python3-sqlalchemy python3-dnspython python3-pymysql python3-ldap python3-psycopg2 python3-more-itertools && \
     apt-get clean && apt-get autoclean && rm -rf /var/lib/apt/lists/* && \
-    wget -c https://github.com/iredmail/iRedAPD/archive/5.1.2.tar.gz && \
-    tar xzf 5.1.2.tar.gz -C /opt && \
-    rm -f 5.1.2.tar.gz && \
-    ln -sf /opt/iRedAPD-5.1.2 /opt/iredapd && \
+    wget -c https://github.com/iredmail/iRedAPD/archive/5.2.tar.gz && \
+    tar xzf 5.2.tar.gz -C /opt && \
+    rm -f 5.2.tar.gz && \
+    ln -sf /opt/iRedAPD-5.2 /opt/iredapd && \
     /usr/bin/pip3 install --no-cache-dir --no-deps web.py==0.62 && \
     rm -rf /root/.cache
 
-COPY ./config/opt/iRedAPD-5.1.2/. /opt/iRedAPD-5.1.2/
+COPY ./config/opt/iRedAPD-5.2/. /opt/iRedAPD-5.2/
 COPY ./entrypoints/iredapd.sh /entrypoint.sh
 
 CMD /bin/sh /entrypoint.sh

config/etc/nginx/conf-available/headers.conf

@@ -8,5 +8,5 @@ add_header X-Content-Type-Options nosniff always;
 add_header X-XSS-Protection '1; mode=block' always;
 add_header X-Download-Options noopen always;
 add_header X-Permitted-Cross-Domain-Policies none always;
-add_header Content-Security-Policy "default-src https: data: 'unsafe-inline' 'unsafe-eval'" always;
+add_header Content-Security-Policy "default-src https: ws: wss: data: 'unsafe-inline' 'unsafe-eval'" always;
 add_header Referrer-Policy strict-origin always;

config/etc/postfix/main.cf

@@ -65,8 +65,7 @@ debug_peer_level = 2
 #
 
 
-# Disable backwards compatibility. Used by Postfix-3.x.
-compatibility_level = 2
+compatibility_level = 3.6
 
 
 # SMTP server response code when recipient or domain not found.

config/root/iRedMail/iRedMail.tips

@@ -166,7 +166,7 @@ full email address.
 
 ## iRedAPD - Postfix Policy Server:
 
-* Version: 5.1.2
+* Version: 5.2
 * Listen address: 0.0.0.0, port: 7777
 * SQL database account:
     - Database name: iredapd

entrypoints/iredapd.sh

@@ -22,7 +22,7 @@ require_non_empty_var IREDAPD_DB_PASSWORD ${IREDAPD_DB_PASSWORD}
 create_log_dir ${IREDAPD_LOG_DIR}
 create_log_file ${IREDAPD_LOG_FILE}
 
-ln -sf ${IREDAPD_CUSTOM_CONF} /opt/iRedAPD-5.1.2/custom_settings.py
+ln -sf ${IREDAPD_CUSTOM_CONF} /opt/iRedAPD-5.2/custom_settings.py
 
 # Update placeholders in config file.
 ${CMD_SED} "s#PH_HOSTNAME#${HOSTNAME}#g" ${IREDAPD_CONF}

entrypoints/roundcube.sh

@@ -8,7 +8,7 @@
 
 . /docker/entrypoints/functions.sh
 
-ROUNDCUBE_DOCUMENT_ROOT="/opt/www/roundcubemail-1.5.3"
+ROUNDCUBE_DOCUMENT_ROOT="/opt/www/roundcubemail-1.6.1"
 ROUNDCUBE_DOCUMENT_ROOT_SYMLINK="/opt/www/roundcubemail"
 ROUNDCUBE_CONF="/opt/www/roundcubemail/config/config.inc.php"
 

scripts/install_all_pkgs.sh

@@ -69,12 +69,12 @@ apt-get clean && apt-get autoclean && rm -rf /var/lib/apt/lists/*
 mkdir -p ${WEB_APP_ROOTDIR}
 
 # Install iRedAPD.
-wget -c -q https://github.com/iredmail/iRedAPD/archive/5.1.2.tar.gz && \
-tar xzf 5.1.2.tar.gz -C /opt && \
-rm -f 5.1.2.tar.gz && \
-ln -s /opt/iRedAPD-5.1.2 /opt/iredapd && \
-chown -R iredapd:iredapd /opt/iRedAPD-5.1.2 && \
-chmod -R 0500 /opt/iRedAPD-5.1.2 && \
+wget -c -q https://github.com/iredmail/iRedAPD/archive/5.2.tar.gz && \
+tar xzf 5.2.tar.gz -C /opt && \
+rm -f 5.2.tar.gz && \
+ln -s /opt/iRedAPD-5.2 /opt/iredapd && \
+chown -R iredapd:iredapd /opt/iRedAPD-5.2 && \
+chmod -R 0500 /opt/iRedAPD-5.2 && \
 
 # Install mlmmjadmin.
 wget -c -q https://github.com/iredmail/mlmmjadmin/archive/3.1.5.tar.gz && \
@@ -86,13 +86,13 @@ chown -R mlmmj:mlmmj /opt/mlmmjadmin-3.1.5 && \
 chmod -R 0500 /opt/mlmmjadmin-3.1.5
 
 # Install Roundcube.
-wget -c -q https://github.com/roundcube/roundcubemail/releases/download/1.5.3/roundcubemail-1.5.3-complete.tar.gz && \
-tar zxf roundcubemail-1.5.3-complete.tar.gz -C /opt/www && \
-rm -f roundcubemail-1.5.3-complete.tar.gz && \
-ln -s /opt/www/roundcubemail-1.5.3 /opt/www/roundcubemail && \
-chown -R root:root /opt/www/roundcubemail-1.5.3 && \
-chmod -R 0755 /opt/www/roundcubemail-1.5.3 && \
-cd /opt/www/roundcubemail-1.5.3 && \
+wget -c -q https://github.com/roundcube/roundcubemail/releases/download/1.6.1/roundcubemail-1.6.1-complete.tar.gz && \
+tar zxf roundcubemail-1.6.1-complete.tar.gz -C /opt/www && \
+rm -f roundcubemail-1.6.1-complete.tar.gz && \
+ln -s /opt/www/roundcubemail-1.6.1 /opt/www/roundcubemail && \
+chown -R root:root /opt/www/roundcubemail-1.6.1 && \
+chmod -R 0755 /opt/www/roundcubemail-1.6.1 && \
+cd /opt/www/roundcubemail-1.6.1 && \
 chown -R www-data:www-data temp logs && \
 chmod 0000 CHANGELOG INSTALL LICENSE README* UPGRADING installer SQL
 

scripts/mariadb/pre_start/roundcube.sh

@@ -47,7 +47,7 @@ if [[ X"${USE_ROUNDCUBE}" == X"YES" ]]; then
     create_rc_custom_conf config_password.inc.php
 
     # Always update SQL db.
-    cd /opt/www/roundcubemail-1.5.3 && \
+    cd /opt/www/roundcubemail-1.6.1 && \
         ./bin/updatedb.sh --dir=./SQL --package roundcube
 
     # Allow user to update password.