v1.1.0

⚠️ Upgrade notes

• Server settings are no longer read from the environment. Message limits, greylisting, blocklists, the AbuseIPDB threshold, required TLS, Rspamd fail-open, the virus action, the outbound relay and the hourly sending limits can now be changed only in Server settings. If one of the old variables is still set, its value is copied into Server settings once at startup, unless that setting was already changed. A warning then asks you to remove the variable.
• docker-compose.yml now runs the published ghcr.io/rikodev/unomail image instead of building one locally.

New

• Thunderbird for Android QR setup. Settings › Security can show a QR code in Thunderbird's "Export for Mobile" format, covering IMAP (993, TLS) and SMTP (465, TLS). Without 2-step verification, the code carries the account password after you confirm it. With 2-step verification on, the code is offered when you create a new app password with mail access. The code is drawn in the browser and never stored.
• More AbuseIPDB reports.
  • SMTP, IMAP, POP3 and ManageSieve connections dropped for too many errors before sign-in are reported as port scan and hacking.
  • Mail refused for phishing, or filed as junk by the AI phishing check from an unverified sender, is reported as phishing rather than spam.
  • Three requests within ten minutes for paths of software this server doesn't run (/wp-login.php, /.env, *.php…) are reported as a web app attack.

Improved

• Admin tables and tabs stay usable on narrow screens.
• The masked addresses admin page is grouped into titled sections.