mirror of
https://gitlab.com/simple-nixos-mailserver/nixos-mailserver.git
synced 2025-05-05 02:00:50 +05:00
15306cba72
OpenDKIM has not been updated in the last 7 years and failed to adopt RFC8463, which introduces Ed25519-SHA256 signatures. It has thereby held back the DKIM ecosystem, which relies on the DNS system to publish its public keys. The DNS system in turn does not handle large record sizes well (see RFC8301), which is why Ed25519 public keys would be preferable, but I'm not sure the ecosystem has caught up, so we stay on the conservative side with RSA for now. Closes: #210
90 lines
3.5 KiB
ReStructuredText
90 lines
3.5 KiB
ReStructuredText
Release Notes
|
|
=============
|
|
|
|
NixOS 25.05
|
|
-----------
|
|
|
|
- OpenDKIM has been removed and DKIM signing is now handled by Rspamd, which only supports ``relaxed``` canoncalizaliaton.
|
|
(`merge request <https://gitlab.com/simple-nixos-mailserver/nixos-mailserver/-/merge_requests/374` __)
|
|
- Rspamd now connects to Redis over its Unix Domain Socket by default
|
|
(`merge request <https://gitlab.com/simple-nixos-mailserver/nixos-mailserver/-/merge_requests/375>`__)
|
|
|
|
- If you need to revert TCP connections, configure ``mailserver.redis.address`` to reference the value of ``config.services.redis.servers.rspamd.bind``.
|
|
- The integration with policyd-spf was removed and SPF handling is now fully based on Rspamd scoring.
|
|
(`merge request <https://gitlab.com/simple-nixos-mailserver/nixos-mailserver/-/merge_requests/380>`__)
|
|
- Individual domains can now be excluded from DMARC Reporting through ``mailserver.dmarcReporting.excludedDomains``.
|
|
(`merge request <https://gitlab.com/simple-nixos-mailserver/nixos-mailserver/-/merge_requests/297>`__)
|
|
|
|
NixOS 24.11
|
|
-----------
|
|
|
|
- No new feature, only bug fixes and documentation improvements
|
|
|
|
NixOS 24.05
|
|
-----------
|
|
|
|
- Add new option ``acmeCertificateName`` which can be used to support
|
|
wildcard certificates
|
|
|
|
NixOS 23.11
|
|
-----------
|
|
|
|
- Add basic support for LDAP users
|
|
- Add support for regex (PCRE) aliases
|
|
|
|
NixOS 23.05
|
|
-----------
|
|
|
|
- Existing ACME certificates can be reused without configuring NGINX
|
|
- Certificate scheme is no longer a number, but a meaningful string instead
|
|
|
|
NixOS 22.11
|
|
-----------
|
|
|
|
- Allow Rspamd to send DMARC reporting
|
|
(`merge request <https://gitlab.com/simple-nixos-mailserver/nixos-mailserver/-/merge_requests/244>`__)
|
|
|
|
NixOS 22.05
|
|
-----------
|
|
|
|
- Make NixOS Mailserver options discoverable from search.nixos.org
|
|
- Add a roundcube setup guide in the documentation
|
|
|
|
NixOS 21.11
|
|
-----------
|
|
|
|
- Switch default DKIM body policy from simple to relaxed
|
|
(`merge request <https://gitlab.com/simple-nixos-mailserver/nixos-mailserver/-/merge_requests/247>`__)
|
|
- Ensure locally-delivered mails have the X-Original-To header
|
|
(`merge request <https://gitlab.com/simple-nixos-mailserver/nixos-mailserver/-/merge_requests/243>`__)
|
|
- NixOS Mailserver options are detailed in the `documentation
|
|
<https://nixos-mailserver.readthedocs.io/en/latest/options.html>`__
|
|
- New options ``dkimBodyCanonicalization`` and
|
|
``dkimHeaderCanonicalization``
|
|
- New option ``certificateDomains`` to generate certificate for
|
|
additional domains (such as ``imap.example.com``)
|
|
|
|
|
|
NixOS 21.05
|
|
-----------
|
|
|
|
- New `fullTextSearch` option to search in messages (based on Xapian)
|
|
(`Merge Request <https://gitlab.com/simple-nixos-mailserver/nixos-mailserver/-/merge_requests/212>`__)
|
|
- Flake support
|
|
(`Merge Request <https://gitlab.com/simple-nixos-mailserver/nixos-mailserver/-/merge_requests/200>`__)
|
|
- New `openFirewall` option defaulting to `true`
|
|
- We moved from Freenode to Libera Chat
|
|
|
|
NixOS 20.09
|
|
-----------
|
|
|
|
- IMAP and Submission with TLS wrapped-mode are now enabled by default
|
|
on ports 993 and 465 respectively
|
|
- OpenDKIM is now sandboxed with Systemd
|
|
- New `forwards` option to forwards emails to external addresses
|
|
(`Merge Request <https://gitlab.com/simple-nixos-mailserver/nixos-mailserver/-/merge_requests/193>`__)
|
|
- New `sendingFqdn` option to specify the fqdn of the machine sending
|
|
email (`Merge Request <https://gitlab.com/simple-nixos-mailserver/nixos-mailserver/-/merge_requests/187>`__)
|
|
- Move the Gitlab wiki to `ReadTheDocs
|
|
<https://nixos-mailserver.readthedocs.io/en/latest/>`_
|