Commit Graph

51 Commits

Author SHA1 Message Date
Marco
88a2f0e85f Set webroot volume name 2021-06-28 13:03:10 +02:00
Marco
549b9d2527
Merge pull request #3 from mrckndt/nginx_improvements
Nginx improvements
2021-06-28 12:57:27 +02:00
Marco
bff9ede29b
Merge pull request #4 from mrckndt/update-image-versions
Update image versions
2021-06-28 12:56:56 +02:00
Marco Kundt
9847a29b60 Update image versions
Setting Postgres to a major release tag will ensure there are not
suprises while autoupdates.
2021-06-28 10:49:35 +02:00
Marco Kundt
51b61fb2d8 Minor Nginx tweaks
Because of privacy concerns it's desirable to disable referrer, FLoC and
Cloudflare as resolver.
2021-06-23 21:18:49 +02:00
Marco
f316858850 Moving Mattermost nginx configuration to default.conf
Nginx expects the default server configuration to be inside an
default.conf file.
2021-06-18 13:43:57 +02:00
Marco
4e0749ca7e
Merge pull request #1 from coltoneshaw/patch-1
Feedback / Edits after testing.
2021-06-15 15:08:25 +02:00
Colton Shaw
5b40a4d768
Updated the changes 2021-05-27 09:50:00 -04:00
Marco
74e8d616c8
Merge pull request #2 from mrckndt/hardening_options
Add hardening options
2021-05-25 12:16:50 +02:00
Marco Kundt
8f41168f8a Add hardening options
* no new capabilities
* container root read-only (directories needed for rw are populated as
tmpfs)
* limit pids
2021-05-21 14:41:34 +02:00
Colton Shaw
220fbb1fde
Added removing instructions 2021-05-11 12:43:46 -04:00
Colton Shaw
047d0b2c36
Added teams / enterprise 2021-05-11 12:41:39 -04:00
Colton Shaw
97a4f201dc
Updated the readme
- Adjusted the `/usr/local/bin` to just be `docker-compose` assuming they've properly installed it on their system to read cleaner
- moved the `sudo systemctl enable --now docker` to a step 4 so it doesn't cause issues with certbot
- Added more clarity on what a user should edit in the `.env` file.
- Added update instructions
- Added instructions for different versions of Mattermost.
2021-05-11 12:39:36 -04:00
Marco Kundt
23e6eaf212 Revert "hardening options"
This reverts commit e8867805fe.
2021-05-11 17:39:34 +02:00
Marco Kundt
ac837e9952 Fix a missing $ in DOMAIN variable 2021-05-11 17:02:36 +02:00
Marco Kundt
e8867805fe hardening options 2021-05-11 15:08:48 +02:00
Marco Kundt
0471c3e858 highlight the different methods for SSL 2021-05-04 14:27:48 +02:00
Marco Kundt
d1325f9046 mark cert dir creation as optional 2021-05-04 14:18:16 +02:00
Marco Kundt
f471881db7 get cloning command right 2021-05-04 14:16:53 +02:00
Marco Kundt
36c7c04f54 some minot updates and fixes 2021-05-04 14:15:37 +02:00
Marco Kundt
6a84350961 adding domain variable 2021-05-04 14:14:46 +02:00
Marco Kundt
b66be7953d get dependencies right 2021-04-27 12:48:56 +02:00
Marco Kundt
848d38c88c use path to nginx config instead of config file itself 2021-04-27 12:21:31 +02:00
Marco Kundt
d09edec595 fix enumerations/indentation 2021-04-22 16:14:14 +02:00
Marco Kundt
16d8e165c2 add readme.md 2021-04-22 16:11:14 +02:00
Marco Kundt
89d257d0ae escape env variable 2021-04-22 16:00:20 +02:00
Marco Kundt
99efe02e56 add commented paths in case Let's Encrypt will be used 2021-04-22 15:57:59 +02:00
Marco Kundt
8dab4028fd changing the permissions are not necessarily needed 2021-04-22 15:57:17 +02:00
Marco Kundt
bfe7e19064 add LICENSE 2021-04-22 15:05:39 +02:00
Marco Kundt
e322940e7e add guide for issuing Let's Encrypt certificate with Docker 2021-04-22 14:27:27 +02:00
Marco Kundt
294fc2689b add script for issuing Let's Encrypt certificate 2021-04-22 13:50:07 +02:00
Marco Kundt
7cfc0cc5e9 remove MM settings used for testing 2021-04-20 20:23:52 +02:00
Marco Kundt
2f47ef778b fix dependencies on containers 2021-04-20 20:23:15 +02:00
Marco Kundt
b24942db60 change paths to old mattermost-docker settings 2021-04-20 20:22:20 +02:00
Marco Kundt
486e09e314 set proxy_http_version to 1.1 2021-04-20 19:28:28 +02:00
Marco Kundt
8b7bfdc889 introduce TLS 1.3's 0-RTT 2021-04-20 19:27:53 +02:00
Marco Kundt
008c8c9483 add Cloudflare as resolver for OCSP 2021-04-20 19:27:26 +02:00
Marco Kundt
255de3fc3f move some settings around 2021-04-20 19:26:34 +02:00
Marco Kundt
794c3d2f67 rename default network and create webroot docker volume 2021-04-16 15:56:27 +02:00
Marco Kundt
ec9febc868 possibility for using the containers with an external reverse proxy 2021-04-15 14:51:23 +02:00
Marco Kundt
6ec897971c add variable for the restart policy 2021-04-12 15:02:03 +02:00
Marco Kundt
cd9fd14cfe set the right timezone inside containers 2021-04-12 14:40:45 +02:00
Marco Kundt
4ee03115a5 separate necessary variables from optional ones 2021-04-12 14:22:58 +02:00
Marco Kundt
acf6773b10 alter some comments 2021-04-12 14:18:38 +02:00
Marco Kundt
ba9164b117 set mattermost to default_server
To avoid the default nginx configuration (which is enabled by
default in the nginx image) we set the mattermost vhosts to the
default_server.
2021-04-12 14:11:03 +02:00
Marco Kundt
b12721b6a3 adding variables for image tags 2021-04-12 14:08:35 +02:00
Marco Kundt
9106e4186b fix Mattermost data paths 2021-04-12 13:24:32 +02:00
Marco Kundt
f39bb20443 rename cert and key to a more generic name 2021-04-12 13:15:21 +02:00
Marco Kundt
c01879ab68 add dhparams to nginx 2021-04-12 10:36:07 +02:00
Marco Kundt
e782cde4c7 add guide for migrating database user to a non-superuser 2021-04-12 10:30:42 +02:00