Slavi Pantaleev
bf2b540807
Harden Traefik security by accessing the Docker API through docker-socket-proxy
With these changes, we:
- install https://github.com/Tecnativa/docker-socket-proxy via the
https://github.com/devture/com.devture.ansible.role.container_socket_proxy Ansible role
- make Traefik access the Docker API via TCP by connecting to this
socket proxy
- .. which allows us to run the Traefik container with less privileges
(non-`root`, dropped capabilities)
3 лет назад
Slavi Pantaleev
449b51588e
Remove usage of undefined matrix_bot_go_neb_identifier variable
This is a mistake made in 10b5350370 .
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/2540
3 лет назад
Slavi Pantaleev
d9ce9064f6
Merge pull request #2542 from etkecc/patch-188
update honoroit 0.9.16 -> 0.9.17
3 лет назад
Aine
493de7316c
update honoroit 0.9.16 -> 0.9.17
* healthchecks.io integration
* mutex on forwarding messages into thread
* fix in prefixes handling
* send error messages as thread reply when possible
3 лет назад
Slavi Pantaleev
6724b60d88
Merge pull request #2541 from etkecc/patch-187
Update ntfy 2.1.1 -> 2.1.2
3 лет назад
Aine
6a6761cb88
Update ntfy 2.1.1 -> 2.1.2
3 лет назад
Slavi Pantaleev
10b5350370
Add Traefik support to Go-NEB bot
Completely untested.
3 лет назад
Slavi Pantaleev
6085e3a816
Add validation tasks for Etherpad migration (matrix_etherpad -> etherpad)
3 лет назад
Slavi Pantaleev
2457ac0f6a
Merge pull request #2538 from etkecc/patch-186
update grafana 9.4.2 -> 9.4.3
3 лет назад
Aine
e588f5eaec
update grafana 9.4.2 -> 9.4.3
3 лет назад
Slavi Pantaleev
f8966cd8da
Default etherpad_hostname to matrix_server_fqn_etherpad for backward compatibility
3 лет назад
Slavi Pantaleev
8acfcf8bf1
Merge pull request #2537 from etkecc/patch-185
update borgmatic 1.7.7 -> 1.7.8
3 лет назад
Slavi Pantaleev
70b67b12bc
Upgrade com.devture.ansible.role.postgres_backup
3 лет назад
Slavi Pantaleev
0dcfc74fc8
Upgrade com.devture.ansible.role.traefik_certs_dumper
3 лет назад
Slavi Pantaleev
49b7d805ee
Upgrade com.devture.ansible.role.traefik
3 лет назад
Slavi Pantaleev
c49875e71c
Merge pull request #2536 from etkecc/patch-184
update grafana 9.4.1 -> 9.4.2
3 лет назад
Aine
bb19de4a5f
update borgmatic 1.7.7 -> 1.7.8
3 лет назад
Aine
47cfec726f
update grafana 9.4.1 -> 9.4.2
3 лет назад
Slavi Pantaleev
849248b165
Upgrade Etherpad role (v1.8.18-1 -> v1.8.18-2)
3 лет назад
Slavi Pantaleev
795c335395
Upgrade Etherpad role (v1.8.18-0 -> v1.8.18-1)
3 лет назад
Slavi Pantaleev
124fbeda04
Switch to using an external Etherpad role
This new role also adds native Traefik support and support for other
(non-`amd64`) architectures via self-building.
3 лет назад
Slavi Pantaleev
ae76db4d77
Upgrade com.devture.ansible.role.traefik_certs_dumper for wait time increase (60 -> 180 sec.)
3 лет назад
Slavi Pantaleev
2e2691e96b
Merge pull request #2534 from FSG-Cat/draupnir
Resolve Draupnir regression caused in #2508
3 лет назад
Slavi Pantaleev
4f74d21ba8
Upgrade devture/ansible (2.13.6-r0-1 -> 2.13.6-r0-2)
The new version includes the `passlib` Python module.
3 лет назад
Catalan Lover
4ccd3f79de
Fix Draupnir config
Config was accidently changed when importing upstream changes.
3 лет назад
Slavi Pantaleev
606c1907bb
Merge pull request #2533 from etkecc/patch-183
update ntfy 2.1.0 -> 2.1.1
3 лет назад
Slavi Pantaleev
227d9d8209
Fix variable name typo
3 лет назад
Aine
4cd9e65d6d
update ntfy 2.1.0 -> 2.1.1
3 лет назад
Slavi Pantaleev
adc18251a9
Upgrade com.devture.ansible.role.traefik (2.9.6 -> 2.9.8)
3 лет назад
Slavi Pantaleev
a4b401c4da
Upgrade com.devture.ansible.role.traefik and improve front-Traefik-with-another-proxy docs
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/2532
3 лет назад
Slavi Pantaleev
8db2c0498a
Upgrade Synapse (v1.77.0 -> v1.78.0)
3 лет назад
Slavi Pantaleev
d6371a0781
Upgrade ddclient (v3.10.0-ls110 -> v3.10.0-ls111)
3 лет назад
Slavi Pantaleev
468bed653e
Upgrade Redis (v7.0.7-0 -> v7.0.9-0)
3 лет назад
Slavi Pantaleev
ba2a3caaf3
Minor improvements to docs/configuring-playbook-ssl-certificates.md
3 лет назад
Slavi Pantaleev
d8c2e1a98c
Merge pull request #2530 from plui29989/master
Added doc for self-signed certificates
3 лет назад
Slavi Pantaleev
7331d314c4
Improve wording
3 лет назад
Slavi Pantaleev
b0845984b3
Only enable Traefik certs dumper if the ACME certificate resolver for Traefik is enabled
If someone disables ACME, then they're using their own certificates
somehow. There's nothing to dump from an `acme.json` file.
3 лет назад
Slavi Pantaleev
f7149103e4
Remove matrix_playbook_traefik_certs_dumper_role_enabled in favor of just devture_traefik_certs_dumper_enabled
We don't need these 2 roughly-the-same settings related to the
traefik-certs-dumper role.
For Traefik, it makes sense, because it's a component used by the
various related playbooks and they could step onto each other's toes
if the role is enabled, but Traefik is disabled (in that case, uninstall
tasks will run).
As for Traefik certs dumper, the other related playbooks don't have it,
so there's no conflict. Even if they used it, each one would use its own
instance (different `devture_traefik_certs_dumper_identifier`), so there
wouldn't be a conflict and uninstall tasks can run without any danger.
3 лет назад
Slavi Pantaleev
f372403d22
Merge pull request #2531 from array-in-a-matrix/master
remove devture services in remove-all script
3 лет назад
array-in-a-matrix
c3900aaf1b
remove devture services
3 лет назад
plui29989
4b17a1e73a
formatting
3 лет назад
plui29989
32e700f076
Add doc for self-signed certificates
3 лет назад
Slavi Pantaleev
79685c728b
Merge pull request #2528 from etkecc/patch-182
Update element 1.11.23 -> 1.11.24
3 лет назад
Slavi Pantaleev
2da914e1bb
Merge pull request #2527 from etkecc/patch-181
Update grafana 9.3.6 -> 9.4.1
3 лет назад
Aine
0fe1d1f9ec
Update element 1.11.23 -> 1.11.24
3 лет назад
Aine
0aede060f3
Update grafana 9.3.6 -> 9.4.1
3 лет назад
Slavi Pantaleev
6fe739a2cb
Remove unnecessary variable
3 лет назад
Slavi Pantaleev
bb90536874
Fix variable name typos in docs/configuring-playbook-postgres-backup.md
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/2524
3 лет назад
Slavi Pantaleev
73f09d4bb0
Remove fronting matrix-nginx-proxy example
We don't need this anymore. No one should be using matrix-nginx-proxy
anymore.
3 лет назад
Slavi Pantaleev
a5e216b837
Merge pull request #2526 from jalemann/master
Add example config + readme for fronting playbook's traefik with own nginx on same server
3 лет назад