788fa0e766
update prometheus-node-exporter 1.5.0 -> 1.6.0
12 months ago
d475a4906d
update ntfy 2.4.0 -> 2.5.0
1 year ago
c8dbb437b9
fix prometheus postgres exporter role name
1 year ago
cd116d3bc6
Merge pull request #2689 from moan0s/postgres-exporter
...
Move postgres-exporter repo
1 year ago
017a795105
Upgrade aux (v1.0.0-0 -> v1.0.0-1)
1 year ago
98d8723694
Move postgres-exporter repo
1 year ago
e435c6bb55
update borgmatic 1.7.12 -> 1.7.13
1 year ago
62c92578b5
Upgrade Postgres (minor versions upgrade)
1 year ago
25a4af1d3b
Update prometheus v2.43.0 -> 2.44.0
1 year ago
1b9a29fba6
Upgrade Grafana (v9.5.1-0 -> v9.5.2-0)
1 year ago
f102d75e13
Upgrade backup-borg (v1.2.4-1.7.12-1 -> v1.2.4-1.7.12-2)
1 year ago
76d50a85fb
Update jitsi stable-8319 -> stable-8615
1 year ago
d4676f2c7c
Upgrade com.devture.ansible.role.timesync to pinned tag (v1.0.0-0)
1 year ago
a4e6f91ebb
Upgrade com.devture.ansible.role.systemd_service_manager (v1.0.0-0 -> v1.0.0-1)
1 year ago
f0e5a00802
Upgrade backup-borg (v1.2.4-1.7.12-0 -> v1.2.4-1.7.12-1)
1 year ago
b74ddf1c6b
update grafana (2.4.7 -> 2.5.1); update ntfy (2.3.1 -> 2.4.0)
1 year ago
c62896b97e
Upgrade Traefik (v2.9.10-1 -> v2.9.10-2)
1 year ago
66930c9d75
Upgrade systemd_docker_base, container_socket_proxy, Traefik
...
These roles now obey
`devture_systemd_docker_base_container_image_pull_method` and `devture_systemd_docker_base_container_network_creation_method`
and can work on systems which don't have the Docker SDK for Python
installed by avoiding the various Ansible Docker modules and using raw
`docker` commands for pulling images and creating networks.
1 year ago
2f11bf39c3
Update borgmatic 1.7.11 -> 1.7.12
1 year ago
2649d9d8bb
Fix lint-reported errors
1 year ago
45c92ba7db
Upgrade Traefik (2.9.9 -> 2.9.10)
1 year ago
8f43385f16
add borgmatic cli
1 year ago
df5df0b386
Update borgmatic 1.7.10 -> 1.7.11
1 year ago
1d00d15482
Switch to exported Jitsi role
1 year ago
6538b707fe
Auto-sort roles in requirements.yml with agru
1 year ago
f68038c1db
Update ntfy 2.3.0 -> 2.3.1
1 year ago
39c8817aaa
fix typo
1 year ago
cc40984b03
Update requirements.yml
1 year ago
82a484c62f
Upgrade Grafana (v9.4.7-0 -> v9.4.7-1)
1 year ago
3d3212725e
Update borgmatic 1.7.9 -> 1.7.10
1 year ago
6732901c70
Upgrade com.devture.ansible.role.systemd_service_manager
1 year ago
34a03cf732
safely integrate agru, format justfile, format requirements.yml
1 year ago
e60febc9ca
Use git for fetching the geerlingguy.docker role
...
With this change, all dependency roles are downloaded
using the same mechanism (git), which makes life simpler for tools like
https://gitlab.com/etke.cc/int/agru
1 year ago
e04894de7c
Update borg 1.2.3 -> 1.2.4
1 year ago
6b3ab052f6
Upgrade prometheus_node_exporter (v1.5.0-6 -> v1.5.0-7)
1 year ago
1a23016570
Update grafana v9.4.3 -> v9.4.7
1 year ago
c222391e77
Upgrade Traefik (v2.9.8-2 -> v2.9.9-0)
1 year ago
7a7c75c6a4
Upgrade prometheus_postgres_exporter (v0.11.1-2 -> v0.12.0-0)
1 year ago
4a009480ae
Merge pull request #2593 from etkecc/patch-197
...
Update prometheus v2.42.0 -> v2.43.0
1 year ago
045542be76
Update redis 7.0.9 -> 7.0.10
1 year ago
5c0cc0168c
Update prometheus v2.42.0 -> v2.43.0
1 year ago
14b8efcad2
Replace matrix-prometheus with an external Prometheus role
1 year ago
d351213486
Upgrade prometheus_node_exporter (v1.5.0-4 -> v1.5.0-6)
1 year ago
220d80ac3a
Move matrix-aux outside of this playbook
1 year ago
b01e7b1ae5
update ntfy 2.1.2 -> 2.2.0
1 year ago
88dc5e0de0
migrate prometheus-node-exporter's var
1 year ago
ff6e7f0ac5
Update borgmatic 1.7.8 -> 1.7.9
1 year ago
d6975e4ab8
Upgrade com.devture.ansible.role.postgres
1 year ago
122a834a7f
update prometheus-node-exporter 1.5.0-2 -> 1.5.0-3
1 year ago
70af9a4481
Upgrade Traefik (v2.9.8-1 -> v2.9.8-2) - not using unprivileged ports anymore
1 year ago
26fdae3797
Upgrade com.devture.ansible.role.container_socket_proxy
1 year ago
bf2b540807
Harden Traefik security by accessing the Docker API through docker-socket-proxy
...
With these changes, we:
- install https://github.com/Tecnativa/docker-socket-proxy via the
https://github.com/devture/com.devture.ansible.role.container_socket_proxy Ansible role
- make Traefik access the Docker API via TCP by connecting to this
socket proxy
- .. which allows us to run the Traefik container with less privileges
(non-`root`, dropped capabilities)
1 year ago
6a6761cb88
Update ntfy 2.1.1 -> 2.1.2
1 year ago
e588f5eaec
update grafana 9.4.2 -> 9.4.3
1 year ago
8acfcf8bf1
Merge pull request #2537 from etkecc/patch-185
...
update borgmatic 1.7.7 -> 1.7.8
1 year ago
70b67b12bc
Upgrade com.devture.ansible.role.postgres_backup
1 year ago
0dcfc74fc8
Upgrade com.devture.ansible.role.traefik_certs_dumper
1 year ago
49b7d805ee
Upgrade com.devture.ansible.role.traefik
1 year ago
bb19de4a5f
update borgmatic 1.7.7 -> 1.7.8
1 year ago
47cfec726f
update grafana 9.4.1 -> 9.4.2
1 year ago
849248b165
Upgrade Etherpad role (v1.8.18-1 -> v1.8.18-2)
1 year ago
795c335395
Upgrade Etherpad role (v1.8.18-0 -> v1.8.18-1)
1 year ago
124fbeda04
Switch to using an external Etherpad role
...
This new role also adds native Traefik support and support for other
(non-`amd64`) architectures via self-building.
1 year ago
ae76db4d77
Upgrade com.devture.ansible.role.traefik_certs_dumper for wait time increase (60 -> 180 sec.)
1 year ago
4cd9e65d6d
update ntfy 2.1.0 -> 2.1.1
1 year ago
adc18251a9
Upgrade com.devture.ansible.role.traefik (2.9.6 -> 2.9.8)
1 year ago
a4b401c4da
Upgrade com.devture.ansible.role.traefik and improve front-Traefik-with-another-proxy docs
...
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/2532
1 year ago
468bed653e
Upgrade Redis (v7.0.7-0 -> v7.0.9-0)
1 year ago
0aede060f3
Update grafana 9.3.6 -> 9.4.1
1 year ago
e6ba7cc2c9
Upgrade com.devture.ansible.role.traefik
1 year ago
d5910d0421
Upgrade com.devture.ansible.role.docker_sdk_for_python
...
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/2522
1 year ago
31857ea9bb
Upgrade com.devture.ansible.role.traefik_certs_dumper
1 year ago
7c622bd249
Upgrade com.devture.ansible.role.traefik
1 year ago
e625e9aa5b
fix postgres version detection in the borg role
1 year ago
252e542bc5
Update ntfy 2.0.1 -> 2.1.0
1 year ago
53f8a0c6ae
Upgrade com.devture.ansible.role.traefik
1 year ago
84c5b44bea
Upgrade com.devture.ansible.role.docker_sdk_for_python
1 year ago
cbc8f0c6e6
Update borgmatic 1.7.6 -> 1.7.7
1 year ago
8e592fb0c1
Upgrade grafana role (v9.3.6-1 -> v9.3.6-2)
1 year ago
a758301bf6
Upgrade geerlingguy.docker (6.0.4 -> 6.1.0)
1 year ago
0da308e24d
Upgrade com.devture.ansible.role.traefik
1 year ago
886d1cddd0
Update ntfy v2.0.0-1 -> v2.0.1-0
1 year ago
154d077ec7
Upgrade ntfy (v2.0.0-0 -> v2.0.0-1)
1 year ago
990a6369e1
Switch to using an external Redis role
1 year ago
964aa0e84d
Switch to using an external Ntfy role
...
The newly extracted role also has native Traefik support,
so we no longer need to rely on `matrix-nginx-proxy` for
reverse-proxying to Ntfy.
The new role uses port `80` inside the container (not `8080`, like
before), because that's the default assumption of the officially
published container image. Using a custom port (like `8080`), means the
default healthcheck command (which hardcodes port `80`) doesn't work.
Instead of fiddling to override the healthcheck command, we've decided
to stick to the default port instead. This only affects the
inside-the-container port, not any external ports.
The new role also supports adding the network ranges of the container's
multiple additional networks as "exempt hosts". Previously, only one
network's address range was added to "exempt hosts".
1 year ago
7c5826f1c3
Break dependency between matrix-prometheus-nginxlog-exporter and the Grafana role
...
Wiring happens via `group_vars/matrix_servers` now.
1 year ago
1006b8d899
Replace matrix-grafana with an external role
1 year ago
266195ab45
Upgrade backup_borg (v1.2.3-1.7.5-1 -> v1.2.3-1.7.6-0)
...
Supersedes https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/2472
1 year ago
65730b84d3
Upgrade backup_borg (v1.2.3-1.7.5-0 -> v1.2.3-1.7.5-1)
1 year ago
78c35136b2
Replace matrix-backup-borg with an external role
1 year ago
c289996cd9
Upgrade com.devture.ansible.role.traefik
1 year ago
a5683a6449
Upgrade com.devture.ansible.role.traefik and rename some variables
1 year ago
1338963b6c
Add support for obtaining additional SSL certificates via Traefik
1 year ago
c07630ed51
Add com.devture.ansible.role.traefik_certs_dumper role
...
With this, other roles (like Coturn, Postmoogle) will be able
to use SSL certificates extracted from Traefik
via https://github.com/ldez/traefik-certs-dumper
1 year ago
8155f780e5
Add support for reverse-proxying Matric (Client & Federation) via Traefik
1 year ago
f983604695
Initial work on Traefik support
...
This gets us started on adding a Traefik role and hooking Traefik:
- directly to services which support Traefik - we only have a few of
these right now, but the list will grow
- to matrix-nginx-proxy for most services that integrate with
matrix-nginx-proxy right now
Traefik usage should be disabled by default for now and nothing should
change for people just yet.
Enabling these experiments requires additional configuration like this:
```yaml
devture_traefik_ssl_email_address: '.....'
matrix_playbook_traefik_role_enabled: true
matrix_playbook_traefik_labels_enabled: true
matrix_ssl_retrieval_method: none
matrix_nginx_proxy_https_enabled: false
matrix_nginx_proxy_container_http_host_bind_port: ''
matrix_nginx_proxy_container_federation_host_bind_port: ''
matrix_nginx_proxy_trust_forwarded_proto: true
matrix_nginx_proxy_x_forwarded_for: '$proxy_add_x_forwarded_for'
matrix_coturn_enabled: false
```
What currently works is:
reverse-proxying for all nginx-proxy based services **except** for the Matrix homeserver
(both Client-Server an Federation traffic for the homeserver don't work yet)
1 year ago
946bbe9734
Upgrade prometheus_node_exporter (v1.5.0-1 -> v1.5.0-2)
1 year ago
5de5b5c62c
Upgrade prometheus_postgres_exporter (v0.11.1-1 -> v0.11.1-2)
1 year ago
045ed94d43
Upgrade prometheus_postgres_exporter (v0.11.1-0 -> v0.11.1-1)
1 year ago
be78b74fbd
Switch from matrix-prometheus-postgres-exporter to an external prometheus_postgres_exporter role
1 year ago
e43ba65dd3
Upgrade prometheus_node_exporter (v1.5.0-0 -> v1.5.0-1)
1 year ago
9ed2e04d80
Switch from matrix-prometheus-node-exporter to an external prometheus_node_exporter role
1 year ago
c27021b29b
Upgrade com.devture.ansible.role.timesync
1 year ago
f64745c6ac
Upgrade com.devture.ansible.role.timesync
...
Related to https://github.com/devture/com.devture.ansible.role.timesync
1 year ago
4c5d945ad3
Upgrade com.devture.ansible.role.postgres
1 year ago
c874830de3
Upgrade com.devture.ansible.role.postgres
...
The new version uses the corresponding container image when running
vacuum, not the latest Postgres version.
1 year ago
d018677293
Upgrade geerlingguy.docker (6.0.3 -> 6.0.4)
1 year ago
4589f94053
Upgrade Postgres (minor versions upgrade)
1 year ago
4eed49f931
Replace custom/matrix-postgres-backup role with galaxy/com.devture.ansible.role.postgres_backup
...
This role is usable on its own and it's not tied to Matrix, so
extracting it out into an independent role that we install via
ansible-galaxy makes sense.
This also fixes the confusion from the other day, where
`matrix_postgres_*` had to be renamed to `devture_postgres_*`
(unless it was about `matrix_postgres_backup_*`).
We now can safely say that ALL `matrix_postgres_*` variables need to be
renamed.
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/2305
1 year ago
de979bc6a2
Upgrade com.devture.ansible.role.postgres
1 year ago
b25385dffd
Upgrade com.devture.ansible.role.postgres
1 year ago
81054bb19c
Upgrade com.devture.ansible.role.postgres
1 year ago
4bb3a38de6
Upgrade com.devture.ansible.role.postgres
1 year ago
04b9483f0d
Switch from matrix-postgres to com.devture.ansible.role.postgres
1 year ago
7c2a7a8eb6
Replace most import_tasks calls with include_tasks for improved performance
2 years ago
54cacc927e
Upgrade com.devture.ansible.role.docker_sdk_for_python
2 years ago
ccfaefa4d2
Add service groups
2 years ago
93d4f8d425
Replace matrix-common-after systemd service management with com.devture.ansible.role.systemd_service_manager
2 years ago
d8f2141eb0
Install Docker via geerlingguy.docker Galaxy role
2 years ago
5ff59eb31a
Upgrade com.devture.ansible.role.playbook_state_preserver
2 years ago
04c6c11561
Install ntpd/systemd-timesync via com.devture.ansible.role.timesync
2 years ago
c3a7237de7
Initial work on using externally defined roles
2 years ago
Aine