Marco
88a2f0e85f
Set webroot volume name
2021-06-28 13:03:10 +02:00
Marco
549b9d2527
Merge pull request #3 from mrckndt/nginx_improvements
...
Nginx improvements
2021-06-28 12:57:27 +02:00
Marco
bff9ede29b
Merge pull request #4 from mrckndt/update-image-versions
...
Update image versions
2021-06-28 12:56:56 +02:00
Marco Kundt
9847a29b60
Update image versions
...
Setting Postgres to a major release tag will ensure there are not
suprises while autoupdates.
2021-06-28 10:49:35 +02:00
Marco Kundt
51b61fb2d8
Minor Nginx tweaks
...
Because of privacy concerns it's desirable to disable referrer, FLoC and
Cloudflare as resolver.
2021-06-23 21:18:49 +02:00
Marco
f316858850
Moving Mattermost nginx configuration to default.conf
...
Nginx expects the default server configuration to be inside an
default.conf file.
2021-06-18 13:43:57 +02:00
Marco
4e0749ca7e
Merge pull request #1 from coltoneshaw/patch-1
...
Feedback / Edits after testing.
2021-06-15 15:08:25 +02:00
Colton Shaw
5b40a4d768
Updated the changes
2021-05-27 09:50:00 -04:00
Marco
74e8d616c8
Merge pull request #2 from mrckndt/hardening_options
...
Add hardening options
2021-05-25 12:16:50 +02:00
Marco Kundt
8f41168f8a
Add hardening options
...
* no new capabilities
* container root read-only (directories needed for rw are populated as
tmpfs)
* limit pids
2021-05-21 14:41:34 +02:00
Colton Shaw
220fbb1fde
Added removing instructions
2021-05-11 12:43:46 -04:00
Colton Shaw
047d0b2c36
Added teams / enterprise
2021-05-11 12:41:39 -04:00
Colton Shaw
97a4f201dc
Updated the readme
...
- Adjusted the `/usr/local/bin` to just be `docker-compose` assuming they've properly installed it on their system to read cleaner
- moved the `sudo systemctl enable --now docker` to a step 4 so it doesn't cause issues with certbot
- Added more clarity on what a user should edit in the `.env` file.
- Added update instructions
- Added instructions for different versions of Mattermost.
2021-05-11 12:39:36 -04:00
Marco Kundt
23e6eaf212
Revert "hardening options"
...
This reverts commit e8867805fe
.
2021-05-11 17:39:34 +02:00
Marco Kundt
ac837e9952
Fix a missing $ in DOMAIN variable
2021-05-11 17:02:36 +02:00
Marco Kundt
e8867805fe
hardening options
2021-05-11 15:08:48 +02:00
Marco Kundt
0471c3e858
highlight the different methods for SSL
2021-05-04 14:27:48 +02:00
Marco Kundt
d1325f9046
mark cert dir creation as optional
2021-05-04 14:18:16 +02:00
Marco Kundt
f471881db7
get cloning command right
2021-05-04 14:16:53 +02:00
Marco Kundt
36c7c04f54
some minot updates and fixes
2021-05-04 14:15:37 +02:00
Marco Kundt
6a84350961
adding domain variable
2021-05-04 14:14:46 +02:00
Marco Kundt
b66be7953d
get dependencies right
2021-04-27 12:48:56 +02:00
Marco Kundt
848d38c88c
use path to nginx config instead of config file itself
2021-04-27 12:21:31 +02:00
Marco Kundt
d09edec595
fix enumerations/indentation
2021-04-22 16:14:14 +02:00
Marco Kundt
16d8e165c2
add readme.md
2021-04-22 16:11:14 +02:00
Marco Kundt
89d257d0ae
escape env variable
2021-04-22 16:00:20 +02:00
Marco Kundt
99efe02e56
add commented paths in case Let's Encrypt will be used
2021-04-22 15:57:59 +02:00
Marco Kundt
8dab4028fd
changing the permissions are not necessarily needed
2021-04-22 15:57:17 +02:00
Marco Kundt
bfe7e19064
add LICENSE
2021-04-22 15:05:39 +02:00
Marco Kundt
e322940e7e
add guide for issuing Let's Encrypt certificate with Docker
2021-04-22 14:27:27 +02:00
Marco Kundt
294fc2689b
add script for issuing Let's Encrypt certificate
2021-04-22 13:50:07 +02:00
Marco Kundt
7cfc0cc5e9
remove MM settings used for testing
2021-04-20 20:23:52 +02:00
Marco Kundt
2f47ef778b
fix dependencies on containers
2021-04-20 20:23:15 +02:00
Marco Kundt
b24942db60
change paths to old mattermost-docker settings
2021-04-20 20:22:20 +02:00
Marco Kundt
486e09e314
set proxy_http_version to 1.1
2021-04-20 19:28:28 +02:00
Marco Kundt
8b7bfdc889
introduce TLS 1.3's 0-RTT
2021-04-20 19:27:53 +02:00
Marco Kundt
008c8c9483
add Cloudflare as resolver for OCSP
2021-04-20 19:27:26 +02:00
Marco Kundt
255de3fc3f
move some settings around
2021-04-20 19:26:34 +02:00
Marco Kundt
794c3d2f67
rename default network and create webroot docker volume
2021-04-16 15:56:27 +02:00
Marco Kundt
ec9febc868
possibility for using the containers with an external reverse proxy
2021-04-15 14:51:23 +02:00
Marco Kundt
6ec897971c
add variable for the restart policy
2021-04-12 15:02:03 +02:00
Marco Kundt
cd9fd14cfe
set the right timezone inside containers
2021-04-12 14:40:45 +02:00
Marco Kundt
4ee03115a5
separate necessary variables from optional ones
2021-04-12 14:22:58 +02:00
Marco Kundt
acf6773b10
alter some comments
2021-04-12 14:18:38 +02:00
Marco Kundt
ba9164b117
set mattermost to default_server
...
To avoid the default nginx configuration (which is enabled by
default in the nginx image) we set the mattermost vhosts to the
default_server.
2021-04-12 14:11:03 +02:00
Marco Kundt
b12721b6a3
adding variables for image tags
2021-04-12 14:08:35 +02:00
Marco Kundt
9106e4186b
fix Mattermost data paths
2021-04-12 13:24:32 +02:00
Marco Kundt
f39bb20443
rename cert and key to a more generic name
2021-04-12 13:15:21 +02:00
Marco Kundt
c01879ab68
add dhparams to nginx
2021-04-12 10:36:07 +02:00
Marco Kundt
e782cde4c7
add guide for migrating database user to a non-superuser
2021-04-12 10:30:42 +02:00