v1.6.0

• Merge branch 'argon2id' 27e7bae
• feat: switch from 64 MiB to 19 MiB for argon2id (attackers are limited by rate limiting, not hash rate; see code comments), added dummyproofing to token saving, move rate limiting above DNS and DB queries to prevent request flooding, code cleanup by moving constant declarations to the top 3b743b6
• feat: argon2id implementation with backwards compatibility for pdkbf2 3e6e0dc

---

v1.5.0...v1.6.0

v1.5.0

• fix: drop scmp in favor of native node.js timing comparison, optimize onAuth (reduced speed by ~100ms), updated snapshots adc2400
• fix: fixed tests to have TTL for spoofPacket of 5m instead of 30s (ref forwardemail/nodejs-dns-over-https-tangerine#15) b9d0b74
• fix: fixed env for webmail, updated netplan for baremetal, added mail to ansible hosts lists, optimized list emails endpoint, fixed pagination, fixed unnecessary log output in test env, added client ID/EHLO check for passing through IP via webmail proxy 28cf9eb
• fix: clear snappymail app cache in ansible 756388a
• fix: ansible should always fully rebuild 19dc67b
• fix: set minimum to 50 aliases per page on My Account > Aliases 7a892ab
• fix: switch from nomic-embed-text to mx-bai-embed-large f3bda41
• fix: switch to gpt-oss:20b and nomic-embed-text, added CS listing/pagination edc8e23
• fix: improve CS prompt 01f100e
• feat: final optimizations for v1 of AI privacy-focused customer support LLM d0ea7f7
• feat: added ansible setup for redis and mongo (with R2 backups, dynamic IP allowlist, etc) 0cccfb8
• fix: fixed opengraph tag 6a257d4

---

v1.4.6...v1.5.0

v1.4.6

• feat: if process.env.INBOX_ZERO is true then archive message after drafting reply d875cd4
• feat: added blog post on ai customer support agent, updated tests, fixed some things with it b02b0ff
• fix: WIP for customer support dbbbd1d
• Fix mermaid graph syntax in documentation 7c5b180
• feat: added customer support WIP 722f198
• fix: simpler regex for fail2ban webmail auth fcba622
• fix: minor fail2ban webmail tweak 47f1c77
• fix: ansible fail2ban webmail regex f73fb7f
• fix: nginx csp policies d562092
• docs: update webmail operational docs 75d4543
• fix: php fpm disabling curl_exec which is needed for carddav sync 0bb44e6
• fix: more ansible logs and checks 97056c4
• fix: extra ansible logging for plugin information 2a6c885
• fix: webmail ansible app version fixes 3bd88a7
• fix: reset php cache on deploy 9c44cf9
• feat: add fail2ban for webmail login a90dc41
• fix: sync locales and snapshots, fixed missing phrase 02cbaf6
• fix: added lightbox to blog post 79569f7

---

v1.4.5...v1.4.6

v1.4.5

• fix: fixed CardDAV REPORT issue 5af915d
• feat: added sqlite performance blog post af39c2a

---

v1.4.4...v1.4.5

v1.4.4

• fix: md linting cleanup, logger for outerHTML to debug vs error/fatal, allow users to view emails even if they are suspended, hide tti if logged in (closes #449), cleanup NAS guide, fixed MSFT issue, optimized impersonation check with confusables and other IDN homograph attack prevention (more leniant to allow users to have forwardemail in username portion of an email address, e.g. [email protected] or [email protected]), use greylisting instead of denylisting in case of capacity/storage issues, prevent users from getting concurrency block on SMTP (e.g. mass mail via Gmail), cleanup whitespace/newlines ddf2158
• fix: ansible app version file path reference 7c296e8
• fix: ansible app version file path reference c97623e
• fix: ansible webmail app version usage 53854e1
• fix: use APP_VERSION for path based cache busting 83e07b5
• fix: use nginx for CSP and use FORWARDEMAIL_VERSION in path prefix for static assets 2945168
• fix: clean up unnecessary nginx test 29a7529
• fix: remove mail-overrides submodule, ansible will handle clone ac182df
• fix: fixed link to FAQ section ccefc2b
• fix: added missing md files fb7ffbb
• feat: three new blog posts (nas, printer/camera, pi) f424e8c
• fix: mail cache, nginx and fastcgi tweaks for ansible 6dcdbbb
• fix: dist clean up a51b5e2
• fix: ansible nginx validation 3af31e5
• fix: ensure node, npm and proper snappymail build, fixes for php-fpm and nginx configs 105f293
• fix: move ansible mail docs and update php-fpm session length 797e0f6
• feat: added cat to list of TLDs for free plan (closes #447) c8b77f8
• fix: comment out MSFT block 83ded67
• feat: add mail-overrides as submodule 6e07cbd
• fix: added golf course to seo slugs 4f6c8fb
• fix: move to clean dist folder for mail 9443e0a
• fix: fixed code block styling 46cdf81
• fix: fixed code block interpolation in pug view b15b29f

---

v1.4.3...v1.4.4

v1.4.3

• feat: added ability to allowlist/denylist entire TLDs (e.g. block all *.ru domains) 3b4eaa9
• fix: ansible mail path and env var changes d750a3c
• fix: update mail env var references, clean up dir creation and fix nginx cert paths d7ef1cf
• feat: added mail.forwardemail.net to IP list a17f8af
• fix: webmail ansible updates a9e55a7

---

v1.4.2...v1.4.3

v1.4.2

• fix: fixed msft exchange spam blocking to be more accurate 281ca65
• fix: comment out msft block until false positive culprit discovered 06d17df
• Merge pull request #446 from forwardemail/feat/snappymail-ansible 578bf62
• fix: use mail prefix for env vars and add to defaults a3870e4
• fix: change webmail references to mail 9447af8
• feat: add webmail ansible setup ea251ea

---

v1.4.1...v1.4.2

v1.4.1

• fix: added sfv:skb and sfv:sks checks for microsoft 0accaff
• feat: added microsoft exchange spam detection to is-arbitrary helper 4d96f08
• fix: revert any caldav optimizations for now 044cc53
• fix: caldav server optimization bug 7f1da68

---

v1.4.0...v1.4.1

v1.4.0

• Merge pull request #444 from forwardemail/fix/optimize-admin-payments 66a4beb
• Merge pull request #445 from forwardemail/fix/optimize-caldav-query 8b5f126
• fix: optimize caldav events query 96a0317
• fix: optimize admin payments query 4327555
• fix: fixed imap tests 59d3067
• fix: export _.difference (thx worm) 4b083e1
• Revert "fix: temp run migrateSchema always (slow and will revert)" 05a5e57
• fix: temp run migrateSchema always (slow and will revert) 3441f40
• fix: check for missing columns and run alterStatements d8489a7
• Merge pull request #442 from forwardemail/fix/check-pm2-hanging 2714140
• Update email.js cbd0f84
• Merge pull request #441 from forwardemail/fix/carddav-improvements f968ed6
• fix: updated FAQ to advertise we offer legacy TLS 1.0 support for older devices f12cdcd
• fix: set lower cipher for tls v1 due to openssl disabling older ciphers bc76f97
• fix: fixed SMTP_PORT in config 80b9e7c
• fix: updated ecosystem-smtp to reflect accurate tls vs ssl config 96d5ea8
• fix: smtp running tls 1.0 with STARTTLS on 2555 and with SSL on 2455 d13c69e
• fix: utilize alternative to node_args 44d6b13
• fix: set node_args for tls c7d483c
• fix: set secure to true for 2355 bda6b33
• fix: set up smtp server to allow port 2355 0c0765d
• fix: check-pm2 job hanging 0cfc760
• fix: PROPFIND to normalize vcf extension for client compatibility d3aabc4
• fix: carddav proppatch support, sync-collection, validate vcard, if-none-match and incomplete vcard 978c1bb
• Merge pull request #440 from forwardemail/fix/caldav-vtodo-issues e905dd6
• fix: remove task specific calendars and update docs 63363ca

---

v1.3.0...v1.4.0

v1.3.0

• Merge pull request #439 from forwardemail/fix/caldav-vtodo-issues 5f67c83
• Merge branch 'master' into fix/caldav-vtodo-issues 1248d45
• fix: attempt to fix caldav issue with strict mode change 46ed8fa
• chore: add unified calendar to accept both event and tasks 62b272c
• fix: caldav vtodo session and add testing utils 5ae95ba
• fix: added cz domain to good domains list (Czech Republic) 9daf08d
• fix: check pm2 should check for pid and race conditions 82da1a2
• fix: bump deps, fixed pm2 check script with locking mechanism, component types should not have enum to prevent issues 3c79466
• Merge pull request #413 from jamescridland/patch-1 cde991b
• chore: upgrade caldav-adapter for VTODO support 6fc31a9
• Merge pull request #436 from forwardemail/fix/caldav-vtodo-simplified 7b90171
• fix: caldav vtodo simplified and use strings instead of array 0c13cf3
• Merge pull request #424 from forwardemail/feat/add-caldav-vtodo 67b6881
• Merge pull request #429 from forwardemail/fix/missing-domain-filter 0878986
• fix: missing domain API allowing filter by domain name c4d5627
• Merge pull request #428 from forwardemail/fix/admin-payments-query 79786f4
• fix: modal message on credits granted fbc4d29
• fix: admin payments slow query e2bca2a
• fix: add some tests and fixture vtodo data 79ba696
• feat: add caldav vtodo / tasks support f5f86d1
• Update index.md 4b7807f

---

v1.2.14...v1.3.0