11 Commits (e04894de7cd2a2aff05f8404caff6258b62edc09)

Author	SHA1	Message	Date
Slavi Pantaleev	69b2df629b	Enable some recommended Coturn options in an effort to lower DDoS amplification factor ... Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/2592	2 years ago
Slavi Pantaleev	0b9dc56edf	Add type support to matrix_coturn_container_additional_volumes ... .. and try to auto-switch between `bind` and `volume` depending on whether there's a slash in the `src` path. Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/2482	2 years ago
Aine	f6f7bbd2a1	Update coturn 4.6.1-r1 -> 4.6.1-r2	2 years ago
Slavi Pantaleev	c7767e9bc8	Upgrade Coturn (4.6.1-r0 -> 4.6.1-r1)	2 years ago
Slavi Pantaleev	aafa8f019c	Allow matrix_coturn_docker_network to be set to 'host' to use host-networking ... This helps large deployments which need to open up thousands of ports (matrix_coturn_turn_udp_min_port, matrix_coturn_turn_udp_min_port) On a test VM, opening 1k ports takes 17 seconds for Docker to "publish" all of these ports (setting up forwarding rules with the firewall, etc), so service startup and shutdown take a long amount of time. If host-networking is used, there's no need to open any ports at all and startup/shutdown can be quick.	2 years ago
Slavi Pantaleev	bb0faa6bc3	Block various private network ranges via denied_peer_ips for Coturn by default ... Inspired by: https://www.rtcsec.com/article/cve-2020-26262-bypass-of-coturns-access-control-protection/	2 years ago
Slavi Pantaleev	773cb7d37e	Make no-tcp-relay Coturn configuration property configurable	2 years ago
Slavi Pantaleev	bf23d63f82	Add matrix_coturn_additional_configuration	2 years ago
Slavi Pantaleev	4c9f96722f	Add no-multicast-peers to Coturn config by default ... Part of a security hardening provoked by: https://www.rtcsec.com/article/cve-2020-26262-bypass-of-coturns-access-control-protection/	2 years ago
Slavi Pantaleev	6414599079	Upgrade Coturn (4.6.0 -> 4.6.1)	2 years ago
Slavi Pantaleev	410a915a8a	Move roles/matrix* to roles/custom/matrix* ... This paves the way for installing other roles into `roles/galaxy` using `ansible-galaxy`, similar to how it's done in: - https://github.com/spantaleev/gitea-docker-ansible-deploy - https://github.com/spantaleev/nextcloud-docker-ansible-deploy In the near future, we'll be removing a lot of the shared role code from here and using upstream roles for it. Some of the core `matrix-*` roles have already been extracted out into other reusable roles: - https://github.com/devture/com.devture.ansible.role.postgres - https://github.com/devture/com.devture.ansible.role.systemd_docker_base - https://github.com/devture/com.devture.ansible.role.timesync - https://github.com/devture/com.devture.ansible.role.vars_preserver - https://github.com/devture/com.devture.ansible.role.playbook_runtime_messages - https://github.com/devture/com.devture.ansible.role.playbook_help We just need to migrate to those.	2 years ago