Slavi Pantaleev
bf2b540807
Harden Traefik security by accessing the Docker API through docker-socket-proxy
With these changes, we:
- install https://github.com/Tecnativa/docker-socket-proxy via the
https://github.com/devture/com.devture.ansible.role.container_socket_proxy Ansible role
- make Traefik access the Docker API via TCP by connecting to this
socket proxy
- .. which allows us to run the Traefik container with less privileges
(non-`root`, dropped capabilities)
пре 3 година
Slavi Pantaleev
449b51588e
Remove usage of undefined matrix_bot_go_neb_identifier variable
This is a mistake made in 10b5350370 .
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/2540
пре 3 година
Slavi Pantaleev
d9ce9064f6
Merge pull request #2542 from etkecc/patch-188
update honoroit 0.9.16 -> 0.9.17
пре 3 година
Aine
493de7316c
update honoroit 0.9.16 -> 0.9.17
* healthchecks.io integration
* mutex on forwarding messages into thread
* fix in prefixes handling
* send error messages as thread reply when possible
пре 3 година
Slavi Pantaleev
6724b60d88
Merge pull request #2541 from etkecc/patch-187
Update ntfy 2.1.1 -> 2.1.2
пре 3 година
Aine
6a6761cb88
Update ntfy 2.1.1 -> 2.1.2
пре 3 година
Slavi Pantaleev
10b5350370
Add Traefik support to Go-NEB bot
Completely untested.
пре 3 година
Slavi Pantaleev
6085e3a816
Add validation tasks for Etherpad migration (matrix_etherpad -> etherpad)
пре 3 година
Slavi Pantaleev
2457ac0f6a
Merge pull request #2538 from etkecc/patch-186
update grafana 9.4.2 -> 9.4.3
пре 3 година
Aine
e588f5eaec
update grafana 9.4.2 -> 9.4.3
пре 3 година
Slavi Pantaleev
f8966cd8da
Default etherpad_hostname to matrix_server_fqn_etherpad for backward compatibility
пре 3 година
Slavi Pantaleev
8acfcf8bf1
Merge pull request #2537 from etkecc/patch-185
update borgmatic 1.7.7 -> 1.7.8
пре 3 година
Slavi Pantaleev
70b67b12bc
Upgrade com.devture.ansible.role.postgres_backup
пре 3 година
Slavi Pantaleev
0dcfc74fc8
Upgrade com.devture.ansible.role.traefik_certs_dumper
пре 3 година
Slavi Pantaleev
49b7d805ee
Upgrade com.devture.ansible.role.traefik
пре 3 година
Slavi Pantaleev
c49875e71c
Merge pull request #2536 from etkecc/patch-184
update grafana 9.4.1 -> 9.4.2
пре 3 година
Aine
bb19de4a5f
update borgmatic 1.7.7 -> 1.7.8
пре 3 година
Aine
47cfec726f
update grafana 9.4.1 -> 9.4.2
пре 3 година
Slavi Pantaleev
849248b165
Upgrade Etherpad role (v1.8.18-1 -> v1.8.18-2)
пре 3 година
Slavi Pantaleev
795c335395
Upgrade Etherpad role (v1.8.18-0 -> v1.8.18-1)
пре 3 година
Slavi Pantaleev
124fbeda04
Switch to using an external Etherpad role
This new role also adds native Traefik support and support for other
(non-`amd64`) architectures via self-building.
пре 3 година
Slavi Pantaleev
ae76db4d77
Upgrade com.devture.ansible.role.traefik_certs_dumper for wait time increase (60 -> 180 sec.)
пре 3 година
Slavi Pantaleev
2e2691e96b
Merge pull request #2534 from FSG-Cat/draupnir
Resolve Draupnir regression caused in #2508
пре 3 година
Slavi Pantaleev
4f74d21ba8
Upgrade devture/ansible (2.13.6-r0-1 -> 2.13.6-r0-2)
The new version includes the `passlib` Python module.
пре 3 година
Catalan Lover
4ccd3f79de
Fix Draupnir config
Config was accidently changed when importing upstream changes.
пре 3 година
Slavi Pantaleev
606c1907bb
Merge pull request #2533 from etkecc/patch-183
update ntfy 2.1.0 -> 2.1.1
пре 3 година
Slavi Pantaleev
227d9d8209
Fix variable name typo
пре 3 година
Aine
4cd9e65d6d
update ntfy 2.1.0 -> 2.1.1
пре 3 година
Slavi Pantaleev
adc18251a9
Upgrade com.devture.ansible.role.traefik (2.9.6 -> 2.9.8)
пре 3 година
Slavi Pantaleev
a4b401c4da
Upgrade com.devture.ansible.role.traefik and improve front-Traefik-with-another-proxy docs
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/2532
пре 3 година
Slavi Pantaleev
8db2c0498a
Upgrade Synapse (v1.77.0 -> v1.78.0)
пре 3 година
Slavi Pantaleev
d6371a0781
Upgrade ddclient (v3.10.0-ls110 -> v3.10.0-ls111)
пре 3 година
Slavi Pantaleev
468bed653e
Upgrade Redis (v7.0.7-0 -> v7.0.9-0)
пре 3 година
Slavi Pantaleev
ba2a3caaf3
Minor improvements to docs/configuring-playbook-ssl-certificates.md
пре 3 година
Slavi Pantaleev
d8c2e1a98c
Merge pull request #2530 from plui29989/master
Added doc for self-signed certificates
пре 3 година
Slavi Pantaleev
7331d314c4
Improve wording
пре 3 година
Slavi Pantaleev
b0845984b3
Only enable Traefik certs dumper if the ACME certificate resolver for Traefik is enabled
If someone disables ACME, then they're using their own certificates
somehow. There's nothing to dump from an `acme.json` file.
пре 3 година
Slavi Pantaleev
f7149103e4
Remove matrix_playbook_traefik_certs_dumper_role_enabled in favor of just devture_traefik_certs_dumper_enabled
We don't need these 2 roughly-the-same settings related to the
traefik-certs-dumper role.
For Traefik, it makes sense, because it's a component used by the
various related playbooks and they could step onto each other's toes
if the role is enabled, but Traefik is disabled (in that case, uninstall
tasks will run).
As for Traefik certs dumper, the other related playbooks don't have it,
so there's no conflict. Even if they used it, each one would use its own
instance (different `devture_traefik_certs_dumper_identifier`), so there
wouldn't be a conflict and uninstall tasks can run without any danger.
пре 3 година
Slavi Pantaleev
f372403d22
Merge pull request #2531 from array-in-a-matrix/master
remove devture services in remove-all script
пре 3 година
array-in-a-matrix
c3900aaf1b
remove devture services
пре 3 година
plui29989
4b17a1e73a
formatting
пре 3 година
plui29989
32e700f076
Add doc for self-signed certificates
пре 3 година
Slavi Pantaleev
79685c728b
Merge pull request #2528 from etkecc/patch-182
Update element 1.11.23 -> 1.11.24
пре 3 година
Slavi Pantaleev
2da914e1bb
Merge pull request #2527 from etkecc/patch-181
Update grafana 9.3.6 -> 9.4.1
пре 3 година
Aine
0fe1d1f9ec
Update element 1.11.23 -> 1.11.24
пре 3 година
Aine
0aede060f3
Update grafana 9.3.6 -> 9.4.1
пре 3 година
Slavi Pantaleev
6fe739a2cb
Remove unnecessary variable
пре 3 година
Slavi Pantaleev
bb90536874
Fix variable name typos in docs/configuring-playbook-postgres-backup.md
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/2524
пре 3 година
Slavi Pantaleev
73f09d4bb0
Remove fronting matrix-nginx-proxy example
We don't need this anymore. No one should be using matrix-nginx-proxy
anymore.
пре 3 година
Slavi Pantaleev
a5e216b837
Merge pull request #2526 from jalemann/master
Add example config + readme for fronting playbook's traefik with own nginx on same server
пре 3 година