Aine
76d50a85fb
Update jitsi stable-8319 -> stable-8615
2 lat temu
Slavi Pantaleev
d4676f2c7c
Upgrade com.devture.ansible.role.timesync to pinned tag (v1.0.0-0)
2 lat temu
Slavi Pantaleev
a4e6f91ebb
Upgrade com.devture.ansible.role.systemd_service_manager (v1.0.0-0 -> v1.0.0-1)
2 lat temu
Slavi Pantaleev
f0e5a00802
Upgrade backup-borg (v1.2.4-1.7.12-0 -> v1.2.4-1.7.12-1)
2 lat temu
Aine
b74ddf1c6b
update grafana (2.4.7 -> 2.5.1); update ntfy (2.3.1 -> 2.4.0)
2 lat temu
Slavi Pantaleev
c62896b97e
Upgrade Traefik (v2.9.10-1 -> v2.9.10-2)
2 lat temu
Slavi Pantaleev
66930c9d75
Upgrade systemd_docker_base, container_socket_proxy, Traefik
These roles now obey
`devture_systemd_docker_base_container_image_pull_method` and `devture_systemd_docker_base_container_network_creation_method`
and can work on systems which don't have the Docker SDK for Python
installed by avoiding the various Ansible Docker modules and using raw
`docker` commands for pulling images and creating networks.
2 lat temu
Aine
2f11bf39c3
Update borgmatic 1.7.11 -> 1.7.12
2 lat temu
Slavi Pantaleev
2649d9d8bb
Fix lint-reported errors
2 lat temu
Slavi Pantaleev
45c92ba7db
Upgrade Traefik (2.9.9 -> 2.9.10)
2 lat temu
Aine
8f43385f16
add borgmatic cli
2 lat temu
Aine
df5df0b386
Update borgmatic 1.7.10 -> 1.7.11
2 lat temu
Slavi Pantaleev
1d00d15482
Switch to exported Jitsi role
2 lat temu
Slavi Pantaleev
6538b707fe
Auto-sort roles in requirements.yml with agru
2 lat temu
Aine
f68038c1db
Update ntfy 2.3.0 -> 2.3.1
2 lat temu
Aine
39c8817aaa
fix typo
2 lat temu
Aine
cc40984b03
Update requirements.yml
2 lat temu
Slavi Pantaleev
82a484c62f
Upgrade Grafana (v9.4.7-0 -> v9.4.7-1)
2 lat temu
Aine
3d3212725e
Update borgmatic 1.7.9 -> 1.7.10
2 lat temu
Slavi Pantaleev
6732901c70
Upgrade com.devture.ansible.role.systemd_service_manager
2 lat temu
Aine
34a03cf732
safely integrate agru, format justfile, format requirements.yml
3 lat temu
Slavi Pantaleev
e60febc9ca
Use git for fetching the geerlingguy.docker role
With this change, all dependency roles are downloaded
using the same mechanism (git), which makes life simpler for tools like
https://gitlab.com/etke.cc/int/agru
3 lat temu
Aine
e04894de7c
Update borg 1.2.3 -> 1.2.4
3 lat temu
Slavi Pantaleev
6b3ab052f6
Upgrade prometheus_node_exporter (v1.5.0-6 -> v1.5.0-7)
3 lat temu
Aine
1a23016570
Update grafana v9.4.3 -> v9.4.7
3 lat temu
Slavi Pantaleev
c222391e77
Upgrade Traefik (v2.9.8-2 -> v2.9.9-0)
3 lat temu
Slavi Pantaleev
7a7c75c6a4
Upgrade prometheus_postgres_exporter (v0.11.1-2 -> v0.12.0-0)
3 lat temu
Aine
045542be76
Update redis 7.0.9 -> 7.0.10
3 lat temu
Aine
5c0cc0168c
Update prometheus v2.42.0 -> v2.43.0
3 lat temu
Slavi Pantaleev
14b8efcad2
Replace matrix-prometheus with an external Prometheus role
3 lat temu
Slavi Pantaleev
d351213486
Upgrade prometheus_node_exporter (v1.5.0-4 -> v1.5.0-6)
3 lat temu
Slavi Pantaleev
220d80ac3a
Move matrix-aux outside of this playbook
3 lat temu
Aine
b01e7b1ae5
update ntfy 2.1.2 -> 2.2.0
3 lat temu
Aine
88dc5e0de0
migrate prometheus-node-exporter's var
3 lat temu
Aine
ff6e7f0ac5
Update borgmatic 1.7.8 -> 1.7.9
3 lat temu
Slavi Pantaleev
d6975e4ab8
Upgrade com.devture.ansible.role.postgres
3 lat temu
Aine
122a834a7f
update prometheus-node-exporter 1.5.0-2 -> 1.5.0-3
3 lat temu
Slavi Pantaleev
70af9a4481
Upgrade Traefik (v2.9.8-1 -> v2.9.8-2) - not using unprivileged ports anymore
3 lat temu
Slavi Pantaleev
26fdae3797
Upgrade com.devture.ansible.role.container_socket_proxy
3 lat temu
Slavi Pantaleev
bf2b540807
Harden Traefik security by accessing the Docker API through docker-socket-proxy
With these changes, we:
- install https://github.com/Tecnativa/docker-socket-proxy via the
https://github.com/devture/com.devture.ansible.role.container_socket_proxy Ansible role
- make Traefik access the Docker API via TCP by connecting to this
socket proxy
- .. which allows us to run the Traefik container with less privileges
(non-`root`, dropped capabilities)
3 lat temu
Aine
6a6761cb88
Update ntfy 2.1.1 -> 2.1.2
3 lat temu
Aine
e588f5eaec
update grafana 9.4.2 -> 9.4.3
3 lat temu
Slavi Pantaleev
70b67b12bc
Upgrade com.devture.ansible.role.postgres_backup
3 lat temu
Slavi Pantaleev
0dcfc74fc8
Upgrade com.devture.ansible.role.traefik_certs_dumper
3 lat temu
Slavi Pantaleev
49b7d805ee
Upgrade com.devture.ansible.role.traefik
3 lat temu
Aine
bb19de4a5f
update borgmatic 1.7.7 -> 1.7.8
3 lat temu
Aine
47cfec726f
update grafana 9.4.1 -> 9.4.2
3 lat temu
Slavi Pantaleev
849248b165
Upgrade Etherpad role (v1.8.18-1 -> v1.8.18-2)
3 lat temu
Slavi Pantaleev
795c335395
Upgrade Etherpad role (v1.8.18-0 -> v1.8.18-1)
3 lat temu
Slavi Pantaleev
124fbeda04
Switch to using an external Etherpad role
This new role also adds native Traefik support and support for other
(non-`amd64`) architectures via self-building.
3 lat temu