Commit graph

120 commits

Author SHA1 Message Date
Aine c8dbb437b9
fix prometheus postgres exporter role name 2023-05-17 18:29:22 +00:00
Slavi Pantaleev cd116d3bc6
Merge pull request #2689 from moan0s/postgres-exporter
Move postgres-exporter repo
2023-05-17 21:21:17 +03:00
Slavi Pantaleev 017a795105 Upgrade aux (v1.0.0-0 -> v1.0.0-1) 2023-05-17 21:19:47 +03:00
Julian-Samuel Gebühr 98d8723694 Move postgres-exporter repo 2023-05-17 14:58:22 +02:00
Aine e435c6bb55
update borgmatic 1.7.12 -> 1.7.13 2023-05-16 19:48:09 +00:00
Slavi Pantaleev 62c92578b5 Upgrade Postgres (minor versions upgrade) 2023-05-15 06:57:56 +03:00
Aine 25a4af1d3b
Update prometheus v2.43.0 -> 2.44.0 2023-05-14 22:20:29 +00:00
Slavi Pantaleev 1b9a29fba6 Upgrade Grafana (v9.5.1-0 -> v9.5.2-0) 2023-05-11 09:42:19 +03:00
Slavi Pantaleev f102d75e13 Upgrade backup-borg (v1.2.4-1.7.12-1 -> v1.2.4-1.7.12-2) 2023-05-11 09:42:13 +03:00
Aine 76d50a85fb
Update jitsi stable-8319 -> stable-8615 2023-05-02 11:02:52 +00:00
Slavi Pantaleev d4676f2c7c Upgrade com.devture.ansible.role.timesync to pinned tag (v1.0.0-0) 2023-04-29 08:21:02 +03:00
Slavi Pantaleev a4e6f91ebb Upgrade com.devture.ansible.role.systemd_service_manager (v1.0.0-0 -> v1.0.0-1) 2023-04-27 17:55:51 +03:00
Slavi Pantaleev f0e5a00802 Upgrade backup-borg (v1.2.4-1.7.12-0 -> v1.2.4-1.7.12-1) 2023-04-27 17:55:39 +03:00
Aine b74ddf1c6b
update grafana (2.4.7 -> 2.5.1); update ntfy (2.3.1 -> 2.4.0) 2023-04-26 21:35:04 +00:00
Slavi Pantaleev c62896b97e Upgrade Traefik (v2.9.10-1 -> v2.9.10-2) 2023-04-18 10:59:02 +03:00
Slavi Pantaleev 66930c9d75 Upgrade systemd_docker_base, container_socket_proxy, Traefik
These roles now obey
`devture_systemd_docker_base_container_image_pull_method` and `devture_systemd_docker_base_container_network_creation_method`
and can work on systems which don't have the Docker SDK for Python
installed by avoiding the various Ansible Docker modules and using raw
`docker` commands for pulling images and creating networks.
2023-04-18 10:41:55 +03:00
Aine 2f11bf39c3
Update borgmatic 1.7.11 -> 1.7.12 2023-04-14 06:05:24 +00:00
Slavi Pantaleev 2649d9d8bb Fix lint-reported errors 2023-04-08 08:10:22 +03:00
Slavi Pantaleev 45c92ba7db Upgrade Traefik (2.9.9 -> 2.9.10) 2023-04-07 08:09:57 +03:00
Aine 8f43385f16
add borgmatic cli 2023-04-04 21:05:02 +00:00
Aine df5df0b386
Update borgmatic 1.7.10 -> 1.7.11 2023-04-04 11:24:14 +00:00
Slavi Pantaleev 1d00d15482 Switch to exported Jitsi role 2023-04-03 08:53:46 +03:00
Slavi Pantaleev 6538b707fe Auto-sort roles in requirements.yml with agru 2023-03-31 17:09:07 +03:00
Aine f68038c1db
Update ntfy 2.3.0 -> 2.3.1 2023-03-31 11:05:41 +00:00
Aine 39c8817aaa
fix typo 2023-03-30 07:46:41 +00:00
Aine cc40984b03
Update requirements.yml 2023-03-30 07:44:14 +00:00
Slavi Pantaleev 82a484c62f Upgrade Grafana (v9.4.7-0 -> v9.4.7-1) 2023-03-28 12:24:37 +03:00
Aine 3d3212725e
Update borgmatic 1.7.9 -> 1.7.10 2023-03-28 08:01:39 +00:00
Slavi Pantaleev 6732901c70 Upgrade com.devture.ansible.role.systemd_service_manager 2023-03-28 10:54:47 +03:00
Aine 34a03cf732
safely integrate agru, format justfile, format requirements.yml 2023-03-25 17:47:13 +02:00
Slavi Pantaleev e60febc9ca Use git for fetching the geerlingguy.docker role
With this change, all dependency roles are downloaded
using the same mechanism (git), which makes life simpler for tools like
https://gitlab.com/etke.cc/int/agru
2023-03-25 08:56:12 +02:00
Aine e04894de7c
Update borg 1.2.3 -> 1.2.4 2023-03-24 07:54:06 +00:00
Slavi Pantaleev 6b3ab052f6 Upgrade prometheus_node_exporter (v1.5.0-6 -> v1.5.0-7) 2023-03-23 11:02:27 +02:00
Aine 1a23016570
Update grafana v9.4.3 -> v9.4.7 2023-03-22 16:54:39 +00:00
Slavi Pantaleev c222391e77 Upgrade Traefik (v2.9.8-2 -> v2.9.9-0) 2023-03-22 07:46:53 +02:00
Slavi Pantaleev 7a7c75c6a4 Upgrade prometheus_postgres_exporter (v0.11.1-2 -> v0.12.0-0) 2023-03-22 07:43:54 +02:00
Slavi Pantaleev 4a009480ae
Merge pull request #2593 from etkecc/patch-197
Update prometheus v2.42.0 -> v2.43.0
2023-03-21 20:14:43 +02:00
Aine 045542be76
Update redis 7.0.9 -> 7.0.10 2023-03-21 18:03:53 +00:00
Aine 5c0cc0168c
Update prometheus v2.42.0 -> v2.43.0 2023-03-21 17:59:58 +00:00
Slavi Pantaleev 14b8efcad2 Replace matrix-prometheus with an external Prometheus role 2023-03-21 07:38:12 +02:00
Slavi Pantaleev d351213486 Upgrade prometheus_node_exporter (v1.5.0-4 -> v1.5.0-6) 2023-03-21 07:29:21 +02:00
Slavi Pantaleev 220d80ac3a Move matrix-aux outside of this playbook 2023-03-20 11:06:27 +02:00
Aine b01e7b1ae5
update ntfy 2.1.2 -> 2.2.0 2023-03-18 19:29:20 +00:00
Aine 88dc5e0de0
migrate prometheus-node-exporter's var 2023-03-18 10:26:29 +02:00
Aine ff6e7f0ac5
Update borgmatic 1.7.8 -> 1.7.9 2023-03-16 21:03:55 +00:00
Slavi Pantaleev d6975e4ab8 Upgrade com.devture.ansible.role.postgres 2023-03-16 14:57:40 +02:00
Aine 122a834a7f
update prometheus-node-exporter 1.5.0-2 -> 1.5.0-3 2023-03-10 20:23:13 +00:00
Slavi Pantaleev 70af9a4481 Upgrade Traefik (v2.9.8-1 -> v2.9.8-2) - not using unprivileged ports anymore 2023-03-09 08:56:58 +02:00
Slavi Pantaleev 26fdae3797 Upgrade com.devture.ansible.role.container_socket_proxy 2023-03-06 10:29:58 +02:00
Slavi Pantaleev bf2b540807 Harden Traefik security by accessing the Docker API through docker-socket-proxy
With these changes, we:

- install https://github.com/Tecnativa/docker-socket-proxy via the
  https://github.com/devture/com.devture.ansible.role.container_socket_proxy Ansible role

- make Traefik access the Docker API via TCP by connecting to this
  socket proxy

- .. which allows us to run the Traefik container with less privileges
  (non-`root`, dropped capabilities)
2023-03-06 09:11:02 +02:00