22 Commits (59a3646c66dcc0314c9622907c5278ec10e05e30)

Author	SHA1	Message	Date
Slavi Pantaleev	0b9dc56edf	Add type support to matrix_coturn_container_additional_volumes ... .. and try to auto-switch between `bind` and `volume` depending on whether there's a slash in the `src` path. Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/2482	2 years ago
Aine	f6f7bbd2a1	Update coturn 4.6.1-r1 -> 4.6.1-r2	2 years ago
Slavi Pantaleev	d44d4b637f	Allow Coturn to work with SSL certificates extracted from Traefik	2 years ago
Slavi Pantaleev	c7767e9bc8	Upgrade Coturn (4.6.1-r0 -> 4.6.1-r1)	2 years ago
Slavi Pantaleev	aafa8f019c	Allow matrix_coturn_docker_network to be set to 'host' to use host-networking ... This helps large deployments which need to open up thousands of ports (matrix_coturn_turn_udp_min_port, matrix_coturn_turn_udp_min_port) On a test VM, opening 1k ports takes 17 seconds for Docker to "publish" all of these ports (setting up forwarding rules with the firewall, etc), so service startup and shutdown take a long amount of time. If host-networking is used, there's no need to open any ports at all and startup/shutdown can be quick.	2 years ago
Slavi Pantaleev	bb0faa6bc3	Block various private network ranges via denied_peer_ips for Coturn by default ... Inspired by: https://www.rtcsec.com/article/cve-2020-26262-bypass-of-coturns-access-control-protection/	2 years ago
Slavi Pantaleev	773cb7d37e	Make no-tcp-relay Coturn configuration property configurable	2 years ago
Slavi Pantaleev	bf23d63f82	Add matrix_coturn_additional_configuration	2 years ago
Slavi Pantaleev	4c9f96722f	Add no-multicast-peers to Coturn config by default ... Part of a security hardening provoked by: https://www.rtcsec.com/article/cve-2020-26262-bypass-of-coturns-access-control-protection/	2 years ago
Slavi Pantaleev	6414599079	Upgrade Coturn (4.6.0 -> 4.6.1)	2 years ago
Slavi Pantaleev	707e909b9b	/usr/local/bin/matrix-ssl-lets-encrypt-certificates-renew -> /matrix/ssl/bin/lets-encrypt-certificates-renew	2 years ago
Slavi Pantaleev	a04f6f4e3d	Optimize uninstall tasks a bit ... - forego removing Docker images - it's not effective anyway, because it only removes the last version.. which is a drop in the bucket, usually - do not reload systemd - it's none of our business. `--tags=start`, etc., handle this - combine all uninstall tasks under a single block, which only runs if we detect traces (a leftover systemd .service file) of the component. If no such .service is detected, we skip them all. This may lead to incorect cleanup in rare cases, but is good enough for the most part.	2 years ago
Slavi Pantaleev	61f67d8f0a	Add install-* tags for quicker runs	2 years ago
Slavi Pantaleev	7c2a7a8eb6	Replace most import_tasks calls with include_tasks for improved performance	2 years ago
Slavi Pantaleev	0ea7cb5d18	Remove various init.yml files - initialize systemd services, etc., statically (not at runtime)	2 years ago
Slavi Pantaleev	d3bd1ca024	matrix_*_retries_{count,delay} -> devture_playbook_help_*_retries_{count,delay}	2 years ago
Slavi Pantaleev	4f4c856e43	matrix_host_command_systemctl -> devture_systemd_docker_base_host_command_systemctl (via com.devture.ansible.role.systemd_docker_base)	2 years ago
Slavi Pantaleev	7086c0ebe3	matrix_host_command_sh -> devture_systemd_docker_base_host_command_sh (via com.devture.ansible.role.systemd_docker_base)	2 years ago
Slavi Pantaleev	a9a81460ec	matrix_host_command_docker -> devture_systemd_docker_base_host_command_docker (via com.devture.ansible.role.systemd_docker_base)	2 years ago
Slavi Pantaleev	835d2e9581	matrix_systemd_path -> devture_systemd_docker_base_systemd_path (via com.devture.ansible.role.systemd_docker_base)	2 years ago
Slavi Pantaleev	f03f716989	matrix_systemd_unit_home_path -> devture_systemd_docker_base_systemd_unit_home_path (via com.devture.ansible.role.systemd_docker_base)	2 years ago
Slavi Pantaleev	410a915a8a	Move roles/matrix* to roles/custom/matrix* ... This paves the way for installing other roles into `roles/galaxy` using `ansible-galaxy`, similar to how it's done in: - https://github.com/spantaleev/gitea-docker-ansible-deploy - https://github.com/spantaleev/nextcloud-docker-ansible-deploy In the near future, we'll be removing a lot of the shared role code from here and using upstream roles for it. Some of the core `matrix-*` roles have already been extracted out into other reusable roles: - https://github.com/devture/com.devture.ansible.role.postgres - https://github.com/devture/com.devture.ansible.role.systemd_docker_base - https://github.com/devture/com.devture.ansible.role.timesync - https://github.com/devture/com.devture.ansible.role.vars_preserver - https://github.com/devture/com.devture.ansible.role.playbook_runtime_messages - https://github.com/devture/com.devture.ansible.role.playbook_help We just need to migrate to those.	2 years ago