v0.2.0

What's new

• Admin password change. Settings has a new Security tab. Changing the password asks for the current one and logs out all devices.
• Stronger password rules. New passwords need 12 to 128 characters without spaces and must not be easy to guess (zxcvbn). They are also checked against Have I Been Pwned; only the first 5 characters of the SHA-1 hash are sent. Set HIBP_CHECK=false to make no outgoing request.
• Local recovery. stalias reset-admin-password sets a new admin password from a terminal on the server.
• Tighter login rate limit. Failed attempts are now also limited per admin account, and the response carries an exact Retry-After.
• Alias names from words by default, with a setting to switch back to random characters. Alias domains and alias names now share one settings tab.
• The documentation is split into focused pages under docs/.

Upgrading

Passwords are now normalized to Unicode NFC and limited to 128 characters. If you cannot log in after updating (for example, your password has decomposed Unicode characters or is longer than 128 characters), run:

docker exec -it stalias /stalias reset-admin-password

The container image is published to ghcr.io/untoastedtoast/stalias by the release workflow. See the README for how to verify its signature and provenance.

v0.1.2

What's new

• The sidebar shows a link to the source code and the running version.
• The README shows the latest version and a Rust badge, and lists the libraries used in a new credits section.
• Refreshed the README screenshots.

The container image is published to ghcr.io/untoastedtoast/stalias by the release workflow. See the README for how to verify its signature and provenance.

v0.1.1

What's new

• Search the alias table by address or description (Bitwarden puts the website into the description).
• Filter by status, domain and creation date, and sort by newest, oldest or address.
• New "Created" column. Stalwart records no creation date, so stalias remembers it for aliases created through the web UI or the API. Existing aliases show no date.
• The table shows 15 aliases per page with a pager.

Under the hood

• Split the database and dashboard code into smaller modules.
• Updated the GitHub Actions used by the release workflow.

The container image is published to ghcr.io/untoastedtoast/stalias by the release workflow. See the README for how to verify its signature and provenance.

v0.1.0

First public release. Email aliases for Stalwart Mail Server 0.16 or newer, created from Bitwarden through an Addy.io-compatible API, with a web UI and setup wizard.

The container image is published to ghcr.io/untoastedtoast/stalias by the release workflow. See the README for how to verify its signature and provenance.