Slavi Pantaleev
035b1c3c04
Upgrade Coturn (4.6.2-r10 -> 4.6.2-r11)
пре 1 година
Slavi Pantaleev
d6aa98e57d
Upgrade Coturn (4.6.2-r9 -> 4.6.2-r10)
пре 1 година
Slavi Pantaleev
9f2eff2ac7
Respect `devture_systemd_docker_base_docker_service_name`
Related to 0241c71a4c
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/3270#issuecomment-2143782962
With this change, it should be possible for people to adjust the Docker
dependency from `docker.service` to something else (e.g. `pkg-ContainerManager-dockerd.service`),
or to completely eliminate it by setting `devture_systemd_docker_base_docker_service_name` to an empty string.
This makes it easier for people to use the playbook against a Synology DSM server.
пре 1 година
Slavi Pantaleev
3bf488fb16
Upgrade Coturn (4.6.2-r5 -> 4.6.2-r9)
пре 1 година
Slavi Pantaleev
e1363c9b9b
Add lt-cred-mech authentication mechanism to Coturn
All homeserver implementations have been updated to support this as
well.
It's just Jitsi that possibly doesn't work with anything other than `auth-secret`.
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/3191
пре 2 година
Slavi Pantaleev
ad32953e0b
Add additional-networks support to matrix-coturn
Not that it seems necessary right now, but it makes it consistent with
all other roles.
пре 2 година
Slavi Pantaleev
dc9ff4e01b
Add support for external-IP-address-autodetection to Coturn
пре 2 година
Samuel Meenzen
c846ed199b
Annotate version numbers with renovate metadata
пре 2 година
Slavi Pantaleev
c8e0f35c94
Upgrade Coturn (4.6.2-r4 -> 4.6.2-r5)
пре 2 година
Slavi Pantaleev
ce0eb973b0
Upgrade Coturn (4.6.2-r3 -> 4.6.2-r4)
пре 2 година
Aine
df07b8fb7d
Update coturn 4.6.1-r3 -> 4.6.2-r3
пре 2 година
Slavi Pantaleev
fa63785109
Upgrade Coturn (4.6.1-r2 -> 4.6.1-r3)
пре 2 година
Slavi Pantaleev
69b2df629b
Enable some recommended Coturn options in an effort to lower DDoS amplification factor
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/2592
пре 3 година
Slavi Pantaleev
0b9dc56edf
Add type support to matrix_coturn_container_additional_volumes
.. and try to auto-switch between `bind` and `volume` depending on
whether there's a slash in the `src` path.
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/2482
пре 3 година
Aine
f6f7bbd2a1
Update coturn 4.6.1-r1 -> 4.6.1-r2
пре 3 година
Slavi Pantaleev
c7767e9bc8
Upgrade Coturn (4.6.1-r0 -> 4.6.1-r1)
пре 3 година
Slavi Pantaleev
aafa8f019c
Allow matrix_coturn_docker_network to be set to 'host' to use host-networking
This helps large deployments which need to open up thousands of ports
(matrix_coturn_turn_udp_min_port, matrix_coturn_turn_udp_min_port)
On a test VM, opening 1k ports takes 17 seconds for Docker to "publish"
all of these ports (setting up forwarding rules with the firewall, etc),
so service startup and shutdown take a long amount of time.
If host-networking is used, there's no need to open any ports at all
and startup/shutdown can be quick.
пре 3 година
Slavi Pantaleev
bb0faa6bc3
Block various private network ranges via denied_peer_ips for Coturn by default
Inspired by: https://www.rtcsec.com/article/cve-2020-26262-bypass-of-coturns-access-control-protection/
пре 3 година
Slavi Pantaleev
773cb7d37e
Make no-tcp-relay Coturn configuration property configurable
пре 3 година
Slavi Pantaleev
bf23d63f82
Add matrix_coturn_additional_configuration
пре 3 година
Slavi Pantaleev
4c9f96722f
Add no-multicast-peers to Coturn config by default
Part of a security hardening provoked by:
https://www.rtcsec.com/article/cve-2020-26262-bypass-of-coturns-access-control-protection/
пре 3 година
Slavi Pantaleev
6414599079
Upgrade Coturn (4.6.0 -> 4.6.1)
пре 3 година
Slavi Pantaleev
410a915a8a
Move roles/matrix* to roles/custom/matrix*
This paves the way for installing other roles into `roles/galaxy` using `ansible-galaxy`,
similar to how it's done in:
- https://github.com/spantaleev/gitea-docker-ansible-deploy
- https://github.com/spantaleev/nextcloud-docker-ansible-deploy
In the near future, we'll be removing a lot of the shared role code from here
and using upstream roles for it. Some of the core `matrix-*` roles have
already been extracted out into other reusable roles:
- https://github.com/devture/com.devture.ansible.role.postgres
- https://github.com/devture/com.devture.ansible.role.systemd_docker_base
- https://github.com/devture/com.devture.ansible.role.timesync
- https://github.com/devture/com.devture.ansible.role.vars_preserver
- https://github.com/devture/com.devture.ansible.role.playbook_runtime_messages
- https://github.com/devture/com.devture.ansible.role.playbook_help
We just need to migrate to those.
пре 3 година
Aine
83482721f8
Update Coturn 4.5.2-r14 -> 4.6.0-r0
пре 3 година
Slavi Pantaleev
f2d613dfea
Upgrade Coturn (4.5.2-r13 -> 4.5.2-r14)
пре 3 година
Aine
66d4c7e072
[DO NOT MERGE]Update Coturn 4.5.2-r12 -> 4.5.2-r13
**no docker tag yet**, [keep an eye on it](https://hub.docker.com/r/coturn/coturn/tags?page=1&name=4.5.2-r13 )
пре 3 година
Aine
e149f33140
add/unify 'Project source code URL' link across all roles
пре 3 година
Aine
f448cca732
Update coturn 4.5.2-r11 -> 4.5.2-r12
пре 3 година
Aine
ac1bd49494
Update coturn 4.5.2-r8 -> 4.5.2-r11
пре 3 година
Slavi Pantaleev
f4ba995d9b
Fix validation and prevent empty "external-ip=" lines in Coturn config
We no longer validate that there's an IP address defined.
Seems like Coturn can start without one as well, so there's no need to
require it.
If people populate `matrix_coturn_turn_external_ip_addresses` directly
to specify multiple addresses, they can leave
`matrix_coturn_turn_external_ip_address` empty.
We use the "select not equal to empty string" thing in the for loop
to avoid `matrix_coturn_turn_external_ip_address` leading to
`matrix_coturn_turn_external_ip_addresses: ['']` leading to
`external-ip=` in the Coturn configuration.
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1741
пре 3 година
Hefty Zauk
03d2dcc996
Move into coturn defaults
пре 3 година
heftyzauk
268b079374
Revert Coturn Address Change, add new Addresses var ( #2 )
пре 3 година
heftyzauk
29847627f1
Multi-IP coturn
Add support for multiple external turn IP addresses, this allows for better comptability with dualstack ipv4/ipv6 hosts, and is supported as per the documentation (point 6 here: https://matrix-org.github.io/synapse/latest/turn-howto.html#configuration )
пре 3 година
Marko Weltzer
7e5b88c3b7
fix: all praise the allmighty yamllinter
пре 4 година
sakkiii
980c2b9a80
Update coturn (4.5.2-r4 -> 4.5.2-r8)
пре 4 година
sakkiii
6feb99076a
Update Coturn (4.5.2-r3 -> 4.5.2-r4)
пре 4 година
Slavi Pantaleev
dc8000760b
Bump Coturn version tag (4.5.2-r2 -> 4.5.2-r3)
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1236
пре 4 година
Michael Collins
98e6cd685d
sync with previous repo
пре 4 година
Slavi Pantaleev
b6d71b9da1
Fix self-building for Coturn
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1158
пре 4 година
sakkiii
04805f35a7
Coturn update 4.5.2 -> 4.5.2-r2
пре 4 година
sakkiii
1cc1202df2
update coturn
пре 4 година
Slavi Pantaleev
3dcc006932
Fix self-building for Coturn
689dcea773 wasn't enough. The `upstream/..` tags are
just upstream sources, without the alpine-based Dockerfile.
We need to use the `docker/..` tags for that (or `master`)
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1032
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1023
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1009
пре 4 година
Slavi Pantaleev
689dcea773
Fix self-building for Coturn
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1023
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1009
пре 4 година
Slavi Pantaleev
62c0587b6a
Use Alpine-based Coturn
пре 4 година
Michael-GMH
50d7209c5b
GMH v04.3
пре 4 година
Dan Arnfield
29177d4922
Switch to official coturn docker image
пре 4 година
Slavi Pantaleev
fcb9e9618a
Make Coturn TLSv1/v1.1 configurable
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/999
пре 4 година
Michael-GMH
89cb5a3d7a
GMH v0.4.2 update
пре 4 година
Ahmad Haghighi
e335f3fc77
rename matrix_global_registry to matrix_container_global_registry_prefix related to #990
Signed-off-by: Ahmad Haghighi <haghighi@fedoraproject.org>
пре 4 година
Ahmad Haghighi
f52a8b6484
use custom docker registry
пре 4 година