BastienandGitHub 93850822fc 🔒️(keycloak) add a Caddy IP allowlist in front of the admin console (#793) ...

Caddy serves port 8080 in the Keycloak image. Keycloak listens on
127.0.0.1:8081 only. KEYCLOAK_ADMIN_IP_ALLOWLIST restricts /admin/* and
/realms/master/*. KEYCLOAK_TRUSTED_PROXIES sets the client IP from
X-Forwarded-For, as in the frontend image. The default allows all.

The build options are ENV in the runtime stage, so a start without
--optimized keeps them. The HEALTHCHECK probes Caddy and the management
port and follows PORT and KC_HTTP_MANAGEMENT_PORT.

Add bin/smoke-test-keycloak and the make target test-keycloak-image.
Remove the Scalingo buildpack for Keycloak.

2026-09-14 10:53:19 +02:00

..

assets

📝(readme) update architecture image and include in README

2025-09-27 12:58:48 +02:00

architecture.md

✨(emails) support i18n email addresses and force-lowercase mailboxes (#785)

2026-08-29 01:23:24 +02:00

authentication-provider.md

🔒️(keycloak) added a setup guide for IDENTITY_PROVIDER (#781)

2026-08-25 00:07:46 +02:00

email-exporter.md

🔨(devx) update developer experience: uv, rustfs, caddy, new makefile (#556)

2026-02-23 12:30:36 +01:00

entitlements.md

✨(entitlements) add DeployCenter backend for syncing maildomain admins (#572)

2026-03-03 15:06:55 +01:00

env.md

🔒️(keycloak) add a Caddy IP allowlist in front of the admin console (#793)

2026-09-14 10:53:19 +02:00

frontend-threads-cache.md

♻️(frontend) refactor thread query cache management (#642)

2026-05-06 19:39:07 +02:00

identity-provider.md

🔒️(keycloak) add a Caddy IP allowlist in front of the admin console (#793)

2026-09-14 10:53:19 +02:00

imports-mbox.md

✨(imports) refactor import code: retries, continuous mode, list UI (#742)

2026-07-22 16:11:18 +02:00

imports-pst.md

✨(imports) refactor import code: retries, continuous mode, list UI (#742)

2026-07-22 16:11:18 +02:00

imports.md

✨(imports) refactor import code: retries, continuous mode, list UI (#742)

2026-07-22 16:11:18 +02:00

internationalization.md

✨(exports) allow domain admins to export mailboxes (#789)

2026-09-10 22:22:50 +02:00

mobile.md

✨(mobile) custom logout view to terminates the IdP session

2026-08-13 12:08:41 +02:00

model-custom-attributes.md

✨(frontend) translate template placeholder and add user_name builtin var

2026-06-11 11:58:45 +02:00

permissions.md

✨(imports) refactor import code: retries, continuous mode, list UI (#742)

2026-07-22 16:11:18 +02:00

prometheus.md

✨(metrics) add prometheus metrics endpoint (#329)

2025-09-05 12:22:54 +02:00

push-notifications.md

✨(push) add Push Notifications system for iOS, Android, Web

2026-07-22 16:11:18 +02:00

search-indexation.md

✨(imports) refactor import code: retries, continuous mode, list UI (#742)

2026-07-22 16:11:18 +02:00

self-hosting.md

✨(emails) support i18n email addresses and force-lowercase mailboxes (#785)

2026-08-29 01:23:24 +02:00

selfcheck.md

✨(backend) report selfcheck status to Sentry crons (#694)

2026-06-04 00:38:59 +02:00

spam.md

✨(inbound) ARC relay-trust: inbound_auth "arc" + arc_verdict rule (#763)

2026-07-24 01:20:12 +02:00

theme-customization.md

💄(frontend) migrate to ui-kit v2

2025-12-15 17:59:51 +01:00

tiered-storage.md

✨(imports) refactor import code: retries, continuous mode, list UI (#742)

2026-07-22 16:11:18 +02:00

webhooks.md

✨(inbound) add webhooks, message postmarks, spam fixes

2026-07-06 16:20:52 +02:00

worker.md

✨(imports) refactor import code: retries, continuous mode, list UI (#742)

2026-07-22 16:11:18 +02:00