matrix-docker-ansible-deploy/requirements.yml

---

- src: geerlingguy.docker
  version: 6.1.0

- src: git+https://github.com/devture/com.devture.ansible.role.docker_sdk_for_python.git
  version: 129c8590e106b83e6f4c259649a613c6279e937a

- src: git+https://github.com/devture/com.devture.ansible.role.playbook_help.git
  version: c1f40e82b4d6b072b6f0e885239322bdaaaf554f

- src: git+https://github.com/devture/com.devture.ansible.role.systemd_docker_base.git
  version: 327d2e17f5189ac2480d6012f58cf64a2b46efba

- src: git+https://github.com/devture/com.devture.ansible.role.timesync.git
  version: 3d5bb2976815958cdce3f368fa34fb51554f899b

- src: git+https://github.com/devture/com.devture.ansible.role.playbook_state_preserver.git
  version: ff2fd42e1c1a9e28e3312bbd725395f9c2fc7f16

- src: git+https://github.com/devture/com.devture.ansible.role.postgres.git
  version: 38764398bf82b06a1736c3bfedc71dfd229e4b52

- src: git+https://github.com/devture/com.devture.ansible.role.postgres_backup.git
  version: 8e9ec48a09284c84704d7a2dce17da35f181574d

- src: git+https://github.com/devture/com.devture.ansible.role.systemd_service_manager.git
  version: 6ccb88ac5fc27e1e70afcd48278ade4b564a9096

- src: git+https://github.com/devture/com.devture.ansible.role.playbook_runtime_messages.git
  version: 9b4b088c62b528b73a9a7c93d3109b091dd42ec6

- src: git+https://gitlab.com/etke.cc/roles/prometheus_node_exporter.git
  version: v1.5.0-6

- src: git+https://gitlab.com/etke.cc/roles/prometheus_postgres_exporter.git
  version: v0.12.0-0

- src: git+https://gitlab.com/etke.cc/roles/backup_borg.git
  version: v1.2.3-1.7.9-0

- src: git+https://gitlab.com/etke.cc/roles/grafana.git
  version: v9.4.7-0

- src: git+https://gitlab.com/etke.cc/roles/ntfy.git
  version: v2.2.0-0

- src: git+https://gitlab.com/etke.cc/roles/redis.git
  version: v7.0.10-0

- src: git+https://gitlab.com/etke.cc/roles/etherpad.git
  version: v1.8.18-2

- src: git+https://github.com/devture/com.devture.ansible.role.container_socket_proxy.git
  version: v0.1.1-1

- src: git+https://github.com/devture/com.devture.ansible.role.traefik.git
  version: v2.9.9-0

- src: git+https://github.com/devture/com.devture.ansible.role.traefik_certs_dumper.git
  version: v2.8.1-0

- src: git+https://github.com/mother-of-all-self-hosting/ansible-role-aux.git
  name: aux
  version: v1.0.0-0

- src: git+https://github.com/mother-of-all-self-hosting/ansible-role-prometheus.git
  name: prometheus
  version: v2.43.0-0
Initial work on using externally defined roles 2 years ago			`---`

Install Docker via geerlingguy.docker Galaxy role 2 years ago			`- src: geerlingguy.docker`
Upgrade geerlingguy.docker (6.0.4 -> 6.1.0) 2 years ago			`version: 6.1.0`
Install Docker via geerlingguy.docker Galaxy role 2 years ago
			`- src: git+https://github.com/devture/com.devture.ansible.role.docker_sdk_for_python.git`
Upgrade com.devture.ansible.role.docker_sdk_for_python Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/2522 2 years ago			`version: 129c8590e106b83e6f4c259649a613c6279e937a`
Install Docker via geerlingguy.docker Galaxy role 2 years ago
Initial work on using externally defined roles 2 years ago			`- src: git+https://github.com/devture/com.devture.ansible.role.playbook_help.git`
			`version: c1f40e82b4d6b072b6f0e885239322bdaaaf554f`

			`- src: git+https://github.com/devture/com.devture.ansible.role.systemd_docker_base.git`
			`version: 327d2e17f5189ac2480d6012f58cf64a2b46efba`

Install ntpd/systemd-timesync via com.devture.ansible.role.timesync 2 years ago			`- src: git+https://github.com/devture/com.devture.ansible.role.timesync.git`
Upgrade com.devture.ansible.role.timesync 2 years ago			`version: 3d5bb2976815958cdce3f368fa34fb51554f899b`
Install ntpd/systemd-timesync via com.devture.ansible.role.timesync 2 years ago
Initial work on using externally defined roles 2 years ago			`- src: git+https://github.com/devture/com.devture.ansible.role.playbook_state_preserver.git`
Upgrade com.devture.ansible.role.playbook_state_preserver 2 years ago			`version: ff2fd42e1c1a9e28e3312bbd725395f9c2fc7f16`
Initial work on using externally defined roles 2 years ago
Switch from matrix-postgres to com.devture.ansible.role.postgres 2 years ago			`- src: git+https://github.com/devture/com.devture.ansible.role.postgres.git`
Upgrade com.devture.ansible.role.postgres 2 years ago			`version: 38764398bf82b06a1736c3bfedc71dfd229e4b52`
Switch from matrix-postgres to com.devture.ansible.role.postgres 2 years ago
Replace custom/matrix-postgres-backup role with galaxy/com.devture.ansible.role.postgres_backup This role is usable on its own and it's not tied to Matrix, so extracting it out into an independent role that we install via ansible-galaxy makes sense. This also fixes the confusion from the other day, where `matrix_postgres_` had to be renamed to `devture_postgres_` (unless it was about `matrix_postgres_backup_`). We now can safely say that ALL `matrix_postgres_` variables need to be renamed. Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/2305 2 years ago			`- src: git+https://github.com/devture/com.devture.ansible.role.postgres_backup.git`
Upgrade com.devture.ansible.role.postgres_backup 2 years ago			`version: 8e9ec48a09284c84704d7a2dce17da35f181574d`
Replace custom/matrix-postgres-backup role with galaxy/com.devture.ansible.role.postgres_backup This role is usable on its own and it's not tied to Matrix, so extracting it out into an independent role that we install via ansible-galaxy makes sense. This also fixes the confusion from the other day, where `matrix_postgres_` had to be renamed to `devture_postgres_` (unless it was about `matrix_postgres_backup_`). We now can safely say that ALL `matrix_postgres_` variables need to be renamed. Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/2305 2 years ago
Replace matrix-common-after systemd service management with com.devture.ansible.role.systemd_service_manager 2 years ago			`- src: git+https://github.com/devture/com.devture.ansible.role.systemd_service_manager.git`
Replace most import_tasks calls with include_tasks for improved performance 2 years ago			`version: 6ccb88ac5fc27e1e70afcd48278ade4b564a9096`
Replace matrix-common-after systemd service management with com.devture.ansible.role.systemd_service_manager 2 years ago
Initial work on using externally defined roles 2 years ago			`- src: git+https://github.com/devture/com.devture.ansible.role.playbook_runtime_messages.git`
Replace most import_tasks calls with include_tasks for improved performance 2 years ago			`version: 9b4b088c62b528b73a9a7c93d3109b091dd42ec6`
Switch from matrix-prometheus-node-exporter to an external prometheus_node_exporter role 2 years ago
			`- src: git+https://gitlab.com/etke.cc/roles/prometheus_node_exporter.git`
Upgrade prometheus_node_exporter (v1.5.0-4 -> v1.5.0-6) 2 years ago			`version: v1.5.0-6`
Switch from matrix-prometheus-postgres-exporter to an external prometheus_postgres_exporter role 2 years ago
			`- src: git+https://gitlab.com/etke.cc/roles/prometheus_postgres_exporter.git`
Upgrade prometheus_postgres_exporter (v0.11.1-2 -> v0.12.0-0) 2 years ago			`version: v0.12.0-0`
Initial work on Traefik support This gets us started on adding a Traefik role and hooking Traefik: - directly to services which support Traefik - we only have a few of these right now, but the list will grow - to matrix-nginx-proxy for most services that integrate with matrix-nginx-proxy right now Traefik usage should be disabled by default for now and nothing should change for people just yet. Enabling these experiments requires additional configuration like this: ```yaml devture_traefik_ssl_email_address: '.....' matrix_playbook_traefik_role_enabled: true matrix_playbook_traefik_labels_enabled: true matrix_ssl_retrieval_method: none matrix_nginx_proxy_https_enabled: false matrix_nginx_proxy_container_http_host_bind_port: '' matrix_nginx_proxy_container_federation_host_bind_port: '' matrix_nginx_proxy_trust_forwarded_proto: true matrix_nginx_proxy_x_forwarded_for: '$proxy_add_x_forwarded_for' matrix_coturn_enabled: false ``` What currently works is: reverse-proxying for all nginx-proxy based services except for the Matrix homeserver (both Client-Server an Federation traffic for the homeserver don't work yet) 2 years ago
Replace matrix-backup-borg with an external role 2 years ago			`- src: git+https://gitlab.com/etke.cc/roles/backup_borg.git`
Update borgmatic 1.7.8 -> 1.7.9 2 years ago			`version: v1.2.3-1.7.9-0`
Replace matrix-backup-borg with an external role 2 years ago
Replace matrix-grafana with an external role 2 years ago			`- src: git+https://gitlab.com/etke.cc/roles/grafana.git`
Update grafana v9.4.3 -> v9.4.7 2 years ago			`version: v9.4.7-0`
Replace matrix-grafana with an external role 2 years ago
Switch to using an external Ntfy role The newly extracted role also has native Traefik support, so we no longer need to rely on `matrix-nginx-proxy` for reverse-proxying to Ntfy. The new role uses port `80` inside the container (not `8080`, like before), because that's the default assumption of the officially published container image. Using a custom port (like `8080`), means the default healthcheck command (which hardcodes port `80`) doesn't work. Instead of fiddling to override the healthcheck command, we've decided to stick to the default port instead. This only affects the inside-the-container port, not any external ports. The new role also supports adding the network ranges of the container's multiple additional networks as "exempt hosts". Previously, only one network's address range was added to "exempt hosts". 2 years ago			`- src: git+https://gitlab.com/etke.cc/roles/ntfy.git`
update ntfy 2.1.2 -> 2.2.0 2 years ago			`version: v2.2.0-0`
Switch to using an external Ntfy role The newly extracted role also has native Traefik support, so we no longer need to rely on `matrix-nginx-proxy` for reverse-proxying to Ntfy. The new role uses port `80` inside the container (not `8080`, like before), because that's the default assumption of the officially published container image. Using a custom port (like `8080`), means the default healthcheck command (which hardcodes port `80`) doesn't work. Instead of fiddling to override the healthcheck command, we've decided to stick to the default port instead. This only affects the inside-the-container port, not any external ports. The new role also supports adding the network ranges of the container's multiple additional networks as "exempt hosts". Previously, only one network's address range was added to "exempt hosts". 2 years ago
Switch to using an external Redis role 2 years ago			`- src: git+https://gitlab.com/etke.cc/roles/redis.git`
Update redis 7.0.9 -> 7.0.10 2 years ago			`version: v7.0.10-0`
Switch to using an external Redis role 2 years ago
Switch to using an external Etherpad role This new role also adds native Traefik support and support for other (non-`amd64`) architectures via self-building. 2 years ago			`- src: git+https://gitlab.com/etke.cc/roles/etherpad.git`
Upgrade Etherpad role (v1.8.18-1 -> v1.8.18-2) 2 years ago			`version: v1.8.18-2`
Switch to using an external Etherpad role This new role also adds native Traefik support and support for other (non-`amd64`) architectures via self-building. 2 years ago
Harden Traefik security by accessing the Docker API through docker-socket-proxy With these changes, we: - install https://github.com/Tecnativa/docker-socket-proxy via the https://github.com/devture/com.devture.ansible.role.container_socket_proxy Ansible role - make Traefik access the Docker API via TCP by connecting to this socket proxy - .. which allows us to run the Traefik container with less privileges (non-`root`, dropped capabilities) 2 years ago			`- src: git+https://github.com/devture/com.devture.ansible.role.container_socket_proxy.git`
Upgrade com.devture.ansible.role.container_socket_proxy 2 years ago			`version: v0.1.1-1`
Harden Traefik security by accessing the Docker API through docker-socket-proxy With these changes, we: - install https://github.com/Tecnativa/docker-socket-proxy via the https://github.com/devture/com.devture.ansible.role.container_socket_proxy Ansible role - make Traefik access the Docker API via TCP by connecting to this socket proxy - .. which allows us to run the Traefik container with less privileges (non-`root`, dropped capabilities) 2 years ago
Initial work on Traefik support This gets us started on adding a Traefik role and hooking Traefik: - directly to services which support Traefik - we only have a few of these right now, but the list will grow - to matrix-nginx-proxy for most services that integrate with matrix-nginx-proxy right now Traefik usage should be disabled by default for now and nothing should change for people just yet. Enabling these experiments requires additional configuration like this: ```yaml devture_traefik_ssl_email_address: '.....' matrix_playbook_traefik_role_enabled: true matrix_playbook_traefik_labels_enabled: true matrix_ssl_retrieval_method: none matrix_nginx_proxy_https_enabled: false matrix_nginx_proxy_container_http_host_bind_port: '' matrix_nginx_proxy_container_federation_host_bind_port: '' matrix_nginx_proxy_trust_forwarded_proto: true matrix_nginx_proxy_x_forwarded_for: '$proxy_add_x_forwarded_for' matrix_coturn_enabled: false ``` What currently works is: reverse-proxying for all nginx-proxy based services except for the Matrix homeserver (both Client-Server an Federation traffic for the homeserver don't work yet) 2 years ago			`- src: git+https://github.com/devture/com.devture.ansible.role.traefik.git`
Upgrade Traefik (v2.9.8-2 -> v2.9.9-0) 2 years ago			`version: v2.9.9-0`
Add com.devture.ansible.role.traefik_certs_dumper role With this, other roles (like Coturn, Postmoogle) will be able to use SSL certificates extracted from Traefik via https://github.com/ldez/traefik-certs-dumper 2 years ago
			`- src: git+https://github.com/devture/com.devture.ansible.role.traefik_certs_dumper.git`
Upgrade com.devture.ansible.role.traefik_certs_dumper 2 years ago			`version: v2.8.1-0`
Move matrix-aux outside of this playbook 2 years ago
			`- src: git+https://github.com/mother-of-all-self-hosting/ansible-role-aux.git`
			`name: aux`
			`version: v1.0.0-0`
Replace matrix-prometheus with an external Prometheus role 2 years ago
			`- src: git+https://github.com/mother-of-all-self-hosting/ansible-role-prometheus.git`
			`name: prometheus`
Update prometheus v2.42.0 -> v2.43.0 2 years ago			`version: v2.43.0-0`