Aine
5c0cc0168c
Update prometheus v2.42.0 -> v2.43.0
2023-03-21 17:59:58 +00:00
Slavi Pantaleev
14b8efcad2
Replace matrix-prometheus with an external Prometheus role
2023-03-21 07:38:12 +02:00
Slavi Pantaleev
d351213486
Upgrade prometheus_node_exporter (v1.5.0-4 -> v1.5.0-6)
2023-03-21 07:29:21 +02:00
Slavi Pantaleev
220d80ac3a
Move matrix-aux outside of this playbook
2023-03-20 11:06:27 +02:00
Aine
b01e7b1ae5
update ntfy 2.1.2 -> 2.2.0
2023-03-18 19:29:20 +00:00
Aine
88dc5e0de0
migrate prometheus-node-exporter's var
2023-03-18 10:26:29 +02:00
Aine
ff6e7f0ac5
Update borgmatic 1.7.8 -> 1.7.9
2023-03-16 21:03:55 +00:00
Slavi Pantaleev
d6975e4ab8
Upgrade com.devture.ansible.role.postgres
2023-03-16 14:57:40 +02:00
Aine
122a834a7f
update prometheus-node-exporter 1.5.0-2 -> 1.5.0-3
2023-03-10 20:23:13 +00:00
Slavi Pantaleev
70af9a4481
Upgrade Traefik (v2.9.8-1 -> v2.9.8-2) - not using unprivileged ports anymore
2023-03-09 08:56:58 +02:00
Slavi Pantaleev
26fdae3797
Upgrade com.devture.ansible.role.container_socket_proxy
2023-03-06 10:29:58 +02:00
Slavi Pantaleev
bf2b540807
Harden Traefik security by accessing the Docker API through docker-socket-proxy
...
With these changes, we:
- install https://github.com/Tecnativa/docker-socket-proxy via the
https://github.com/devture/com.devture.ansible.role.container_socket_proxy Ansible role
- make Traefik access the Docker API via TCP by connecting to this
socket proxy
- .. which allows us to run the Traefik container with less privileges
(non-`root`, dropped capabilities)
2023-03-06 09:11:02 +02:00
Aine
6a6761cb88
Update ntfy 2.1.1 -> 2.1.2
2023-03-05 10:17:07 +00:00
Aine
e588f5eaec
update grafana 9.4.2 -> 9.4.3
2023-03-03 07:47:47 +00:00
Slavi Pantaleev
8acfcf8bf1
Merge pull request #2537 from etkecc/patch-185
...
update borgmatic 1.7.7 -> 1.7.8
2023-03-03 09:35:43 +02:00
Slavi Pantaleev
70b67b12bc
Upgrade com.devture.ansible.role.postgres_backup
2023-03-03 09:04:13 +02:00
Slavi Pantaleev
0dcfc74fc8
Upgrade com.devture.ansible.role.traefik_certs_dumper
2023-03-03 09:00:30 +02:00
Slavi Pantaleev
49b7d805ee
Upgrade com.devture.ansible.role.traefik
2023-03-03 09:00:30 +02:00
Aine
bb19de4a5f
update borgmatic 1.7.7 -> 1.7.8
2023-03-03 06:21:26 +00:00
Aine
47cfec726f
update grafana 9.4.1 -> 9.4.2
2023-03-03 06:18:52 +00:00
Slavi Pantaleev
849248b165
Upgrade Etherpad role (v1.8.18-1 -> v1.8.18-2)
2023-03-02 23:00:18 +02:00
Slavi Pantaleev
795c335395
Upgrade Etherpad role (v1.8.18-0 -> v1.8.18-1)
2023-03-02 22:58:45 +02:00
Slavi Pantaleev
124fbeda04
Switch to using an external Etherpad role
...
This new role also adds native Traefik support and support for other
(non-`amd64`) architectures via self-building.
2023-03-02 22:50:13 +02:00
Slavi Pantaleev
ae76db4d77
Upgrade com.devture.ansible.role.traefik_certs_dumper for wait time increase (60 -> 180 sec.)
2023-03-02 16:06:11 +02:00
Aine
4cd9e65d6d
update ntfy 2.1.0 -> 2.1.1
2023-03-01 20:09:54 +00:00
Slavi Pantaleev
adc18251a9
Upgrade com.devture.ansible.role.traefik (2.9.6 -> 2.9.8)
2023-03-01 12:47:55 +02:00
Slavi Pantaleev
a4b401c4da
Upgrade com.devture.ansible.role.traefik and improve front-Traefik-with-another-proxy docs
...
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/2532
2023-03-01 12:32:30 +02:00
Slavi Pantaleev
468bed653e
Upgrade Redis (v7.0.7-0 -> v7.0.9-0)
2023-03-01 10:30:09 +02:00
Aine
0aede060f3
Update grafana 9.3.6 -> 9.4.1
2023-02-28 13:18:21 +00:00
Slavi Pantaleev
e6ba7cc2c9
Upgrade com.devture.ansible.role.traefik
2023-02-27 16:32:37 +02:00
Slavi Pantaleev
d5910d0421
Upgrade com.devture.ansible.role.docker_sdk_for_python
...
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/2522
2023-02-27 08:27:41 +02:00
Slavi Pantaleev
31857ea9bb
Upgrade com.devture.ansible.role.traefik_certs_dumper
2023-02-26 19:49:01 +02:00
Slavi Pantaleev
7c622bd249
Upgrade com.devture.ansible.role.traefik
2023-02-26 19:12:10 +02:00
Aine
e625e9aa5b
fix postgres version detection in the borg role
2023-02-26 10:41:40 +00:00
Aine
252e542bc5
Update ntfy 2.0.1 -> 2.1.0
2023-02-26 08:19:51 +00:00
Slavi Pantaleev
53f8a0c6ae
Upgrade com.devture.ansible.role.traefik
2023-02-24 20:27:15 +02:00
Slavi Pantaleev
84c5b44bea
Upgrade com.devture.ansible.role.docker_sdk_for_python
2023-02-22 16:09:16 +02:00
Aine
cbc8f0c6e6
Update borgmatic 1.7.6 -> 1.7.7
2023-02-21 10:14:53 +00:00
Slavi Pantaleev
8e592fb0c1
Upgrade grafana role (v9.3.6-1 -> v9.3.6-2)
2023-02-20 16:53:19 +02:00
Slavi Pantaleev
a758301bf6
Upgrade geerlingguy.docker (6.0.4 -> 6.1.0)
2023-02-19 10:20:40 +02:00
Slavi Pantaleev
0da308e24d
Upgrade com.devture.ansible.role.traefik
2023-02-19 10:20:13 +02:00
Aine
886d1cddd0
Update ntfy v2.0.0-1 -> v2.0.1-0
2023-02-18 19:10:23 +00:00
Slavi Pantaleev
154d077ec7
Upgrade ntfy (v2.0.0-0 -> v2.0.0-1)
2023-02-17 16:24:10 +02:00
Slavi Pantaleev
990a6369e1
Switch to using an external Redis role
2023-02-17 16:23:59 +02:00
Slavi Pantaleev
964aa0e84d
Switch to using an external Ntfy role
...
The newly extracted role also has native Traefik support,
so we no longer need to rely on `matrix-nginx-proxy` for
reverse-proxying to Ntfy.
The new role uses port `80` inside the container (not `8080`, like
before), because that's the default assumption of the officially
published container image. Using a custom port (like `8080`), means the
default healthcheck command (which hardcodes port `80`) doesn't work.
Instead of fiddling to override the healthcheck command, we've decided
to stick to the default port instead. This only affects the
inside-the-container port, not any external ports.
The new role also supports adding the network ranges of the container's
multiple additional networks as "exempt hosts". Previously, only one
network's address range was added to "exempt hosts".
2023-02-17 09:54:33 +02:00
Slavi Pantaleev
7c5826f1c3
Break dependency between matrix-prometheus-nginxlog-exporter and the Grafana role
...
Wiring happens via `group_vars/matrix_servers` now.
2023-02-15 10:52:25 +02:00
Slavi Pantaleev
1006b8d899
Replace matrix-grafana with an external role
2023-02-15 10:32:24 +02:00
Slavi Pantaleev
266195ab45
Upgrade backup_borg (v1.2.3-1.7.5-1 -> v1.2.3-1.7.6-0)
...
Supersedes https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/2472
2023-02-13 12:26:49 +02:00
Slavi Pantaleev
65730b84d3
Upgrade backup_borg (v1.2.3-1.7.5-0 -> v1.2.3-1.7.5-1)
2023-02-13 11:51:11 +02:00
Slavi Pantaleev
78c35136b2
Replace matrix-backup-borg with an external role
2023-02-13 10:53:11 +02:00