Engineering notes on security, Linux systems and hardened infrastructure. Every post documents a real setup, re-tested before publishing — reproducible commands, measured numbers, trade-offs stated plainly.
Convergent builds its mail service on free software and sends its fixes upstream. Twelve pull requests accepted by SnappyMail and Tachyon: address book sync, message HTML sanitising, two-factor authentication, calendar invitations and LDAP directories.
Mail, calendars, contacts, tasks, notes, files and chat in one window, on infrastructure we run in Tunisia. The argument is not about software quality — it is about which court has jurisdiction.
Three Convergent fixes merged into Cyrus IMAP: a CalDAV server crash on free/busy requests, HTTP/2 responses truncated past 64 KB, and the version number still exposed in calendars despite serverinfo: off.
A new open source SnappyMail plugin from Convergent: accept, tentatively accept or decline an invitation from the message view, with the reply produced by the CalDAV server (RFC 6638). Design, cancellations and SEQUENCE revisions, limits.
Contact synchronisation between SnappyMail and Cyrus IMAP. Why we forked Mailbux's CardDAV plugin: a hardcoded URL rewritten at every login, and a two-way sync force-re-enabled on each sign-in — and why that last one destroys contacts.
Calendars in the SnappyMail webmail, backed by Cyrus IMAP's DAV. Why we forked Mailbux's CalDAV plugin, what we fixed (URL as configuration, RRULE, VALARM, CSP) and how invitations are delegated to the server (RFC 6638).
GLPI is free software — so why have someone host it? Because a GLPI instance managed by Convergent is not a stock GLPI instance: vulnerability intelligence on your inventory, ready-to-send asset reports, a CMDB that fills itself, governed internal communications. No extra licence, and no lock on your data.
Convergent is releasing its GLPI Git Plugin Installer plugin under a free licence: install and update GLPI plugins from git / HTTPS repositories, with SSRF-guarded fetch and zip-slip-safe extraction. Overview and GitHub link.
Consolidate several clamd instances into a single containerized ClamAV engine (Podman/Quadlet), non-root, exposed over a group-restricted unix socket, sharing the host's signatures — without wasting memory.
Convergent is releasing its GLPI Matomo Tag Manager plugin under a free licence: inject a Matomo Tag Manager container into every GLPI page, without touching any template. Why open source, architecture, security and step-by-step installation.
Convergent is releasing commerce_konnect under a free licence: a Drupal Commerce module that integrates the Tunisian Konnect payment gateway. Overview and GitHub link.