Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 2 additions & 0 deletions conf/nginx-alldomains.conf
Original file line number Diff line number Diff line change
Expand Up @@ -42,6 +42,8 @@
fastcgi_split_path_info ^/mail(/.*)()$;
fastcgi_index index.php;
fastcgi_param SCRIPT_FILENAME /usr/local/lib/roundcubemail/$fastcgi_script_name;
# ensure roudcube session id's aren't leaked to other parts of the server
fastcgi_param PHP_VALUE "session.cookie_path=/mail/";
fastcgi_pass php-fpm;

# Outgoing mail also goes through this endpoint, so increase the maximum
Expand Down
2 changes: 0 additions & 2 deletions setup/webmail.sh
Original file line number Diff line number Diff line change
Expand Up @@ -141,8 +141,6 @@ cat > $RCM_CONFIG <<EOF;
\$config['login_username_filter'] = 'email';
\$config['password_charset'] = 'UTF-8';
\$config['junk_mbox'] = 'Spam';
/* ensure roudcube session id's aren't leaked to other parts of the server */
\$config['session_path'] = '/mail/';
/* prevent CSRF, requires php 7.3+ */
\$config['session_samesite'] = 'Strict';
\$config['quota_zero_as_unlimited'] = true;
Expand Down