Commit Graph

322 Commits

Author SHA1 Message Date
Reynir Björnsson 0aeb0fef96 gitea: require email confirmation on registration 2022-04-07 14:35:21 +01:00
Reynir Björnsson 3791e1351a Install mosh 2022-01-31 10:57:24 +00:00
Reynir Björnsson 5d745e0cde Allow for multiple ssh keys
This required restructuring users.yml.
2022-01-28 13:15:14 +00:00
Reynir Björnsson 54a38114d6 gitea: Enable notify emails 2022-01-28 13:13:12 +00:00
benjaoming 17d4513b97 Add security and password policy customization
I need someone with a functional Docker setup to help test this :)

Tip from a new user that we are requiring stupid password stuff

https://www.bbc.com/news/technology-40875534
2022-01-24 09:53:59 +00:00
Reynir Björnsson 36534604c1 Add dummy user and pass
It seems perhaps it is required by gitea before it will enable email
2022-01-24 09:39:03 +00:00
Reynir Björnsson d73cc9e28f Gitea mail typo: smpt_port -> smtp_host 2022-01-24 09:25:44 +00:00
Reynir Björnsson 554024f2b2 Gitea mail: add crucial configuration 2022-01-24 09:19:54 +00:00
Reynir Björnsson ac455beac0 Add quotes
Non-string value found for env option. Ambiguous env options must be wrapped in quotes to avoid them being interpreted. Key: GITEA__mailer__ENABLED
2022-01-24 09:07:49 +00:00
valberg 1680ab0fc9 gitea-enhancements (#70) 2022-01-23 19:01:32 +00:00
valberg 499bd20ad1 Merge pull request 'Refactor allowed_sender_domains and allow more domains' (#69) from reynir/ansible:postfix-allowed_sender_domains into master
Reviewed-on: data.coop/ansible#69
2022-01-23 16:38:30 +00:00
Reynir Björnsson e3156c7c01 Gitea: setup mailer, raise LOGIN_REMEMBER_DAYS 2022-01-20 13:48:04 +00:00
Reynir Björnsson 6e57f1d0c2 Refactor allowed_sender_domains and allow more
A new object 'postfix' is created with a list of allowed_sender_domains.
Any services that expect to send mail this way should add its sender
domain to that list.
2022-01-20 13:36:48 +00:00
Jesper Hess 04b3fb4baa
Upgrade gitea -> v1.15.7 2021-12-14 16:24:02 +01:00
Reynir Björnsson 9e0fcfc4a7 Define referenced variable nextcloud.volume_folder 2021-11-23 13:49:50 +01:00
Reynir Björnsson 68c82a785b Upgrade synapse to v1.47.1 2021-11-23 13:12:15 +01:00
Jesper Hess 682e205c0b Bump OpenLDAP to 1.5.0 and phpLDAPAdmin to 0.9.0 2021-10-11 18:53:22 +02:00
Jesper Hess e64c858df8 Bump portainer version to 2.9.1 2021-10-11 18:52:39 +02:00
Jesper Hess c0bd431d3c Change default sender domain to @services.data.coop so as not to cause issues with our @data.coop emails 2021-10-10 18:03:09 +02:00
Jesper Hess a5a2d38b0c Bump Synapse to v1.44.0 and Element to v1.9.0 2021-10-10 15:25:54 +02:00
Jesper Hess c34d9fcb90 Add Hedgedoc
- Add Hedgedoc as a replacement for CodiMD.
- Integrate it with the new SSO system
2021-10-09 22:42:35 +02:00
Jesper Hess 270b7aa0e1 Merge branch 'master' into keycloak 2021-10-09 12:19:45 +00:00
Jesper Hess b6c2db6434
Switch NextCloud to docker_compose in Ansible + upgrade to v22 2021-10-09 14:13:18 +02:00
Jesper Hess 2af5165349
Upgrade portainer to 2.9.0 2021-10-07 20:59:38 +02:00
Jesper Hess ca6c3a96a1
Comment out the KEYCLOAK_USER and KEYCLOAK_PASSWORD since they mess up things after first run 2021-10-07 20:58:31 +02:00
Jesper Hess e6ee76ddde Merge branch 'master' into keycloak 2021-10-07 11:31:07 +00:00
Jesper Hess 2c8482a5ab Merge branch 'master' into element.v1.8.4 2021-10-07 11:26:42 +00:00
Jesper Hess 3999db2eff
Add keycloak service 2021-10-07 13:20:30 +02:00
Reynir Björnsson 43f39c981d Bump element to v1.8.4
See https://matrix.org/blog/2021/09/13/vulnerability-disclosure-key-sharing
2021-09-14 15:30:08 +02:00
Jesper Hess b39df6003b
Disable Matrix registrations and move Matrix secrets to Ansible vault.
Fixes #46
2021-07-03 09:12:18 +02:00
Jesper Hess 0ef4f972ed
Update Element -> 1.7.29 & Synapse -> 1.34.0 2021-05-28 06:23:46 +02:00
Víðir Valberg Guðmundsson 30b9580d3c Add required pip packages. 2021-02-01 21:06:39 +01:00
Víðir Valberg Guðmundsson 9e5c18f839 Rename docker_service tasks to docker_compose. 2021-02-01 21:06:23 +01:00
Víðir Valberg Guðmundsson 068502773e Fix matrix_riot service. 2021-02-01 20:51:28 +01:00
Jesper Hess a692e7d2cb
Migrate Passit to docker_service & set correct volume folder path 2021-01-28 14:01:19 +01:00
Víðir Valberg Guðmundsson cec959a47e Upgrade portainer to 2.0.1. 2021-01-26 21:59:26 +01:00
Jesper Hess 9ae295896f
Use docker_service ansible command 2021-01-26 20:40:22 +01:00
Jesper Hess 3fe7d162aa
Use correct volume folder 2021-01-26 20:01:05 +01:00
Jesper Hess 86de1fd24e
Initial work on restic container for backup 2021-01-26 19:57:06 +01:00
Jesper Hess f5293c016d
Change YAML to use lists instead of comma-separated strings for domains because it looks nicer 2020-12-17 08:43:24 +01:00
Reynir Björnsson fe5fa81f44 Update cryptoaarhus.dk domains 2020-12-10 16:25:26 +01:00
Jesper Hess bb5c77e602
Fix typo 2020-11-27 10:48:02 +01:00
Jesper Hess 21e2b743ef Merge pull request 'Bump Matrix max upload size to a whopping 50 MB' (#45) from matrix-max-upload-size into master
Reviewed-on: data.coop/ansible#45

All good, thanks!
2020-11-27 09:37:58 +00:00
Reynir Björnsson 8d88016efd Matrix: up nginx client_max_body_size to 50MB
Then it's consistent with max_upload_size (sort of - modulo overhead in
http)
2020-11-27 10:36:51 +01:00
Jesper Hess 2ac2d8b8da
Change ouroboros interval to 10min to hopefully fly under the new docker hub rate limit. 2020-11-23 08:25:35 +01:00
Reynir Björnsson a78641674d cryptoaarhus_website: Add cryptoaarhus.dk domain 2020-11-05 08:47:58 +01:00
Reynir Björnsson 03cde007bc Bump Matrix max upload size to a whopping 50 MB 2020-10-19 10:01:00 +02:00
reynir 5738a8c40f Merge branch 'master' into cryptoaarhus.dk 2020-09-28 12:29:11 +00:00
Carl Bordum Hansen 653a0603d5 Allow fetching data.coop's public rooms over federation 2020-09-23 20:47:31 +02:00
Reynir Björnsson 9a0fe69789 Add cryptoaarhus website 2020-09-11 18:44:15 +02:00
Jesper Hess 8bec174a46
Switch riot.data.coop->element.data.coop in riot's config.json 2020-08-31 18:57:49 +02:00
Jesper Hess 3e098546ef
Update gitea to v 1.12.3 2020-08-31 18:24:47 +02:00
Jesper Hess e7d69cd6df Merge pull request 'Gitea network werent autocreated' (#40) from rluch/ansible:rluch/fix-initially-missing-gitea-network into master 2020-08-31 05:50:05 +00:00
Reynir Björnsson d49a57792f Add element.data.coop for riot
Riot was renamed to element recently.
2020-08-23 11:33:45 +02:00
Jesper Hess 99cb94c94a
Update Riot and Synapse to latest 2020-08-15 17:21:12 +02:00
Jesper Hess ad243a5777
Fix problem with new.data.coop overwriting the old site 2020-06-10 20:15:13 +02:00
Vidir Valberg Gudmundsson 4cf48f13c0 Add new data.coop website. Fix postfix container for newest ansible. Comment out tt-rss. 2020-05-29 23:36:07 +02:00
Jesper Hess 5a5bb50e09
Upgrade synapse and riot to latest 2020-05-08 15:43:58 +02:00
Rasmus Lundsgaard Christiansen d49b943fd2 Gitea network werent autocreated 2020-04-12 16:34:52 +02:00
Jesper Hess 09617dd35a
Move postfix network config to postfix.yml file instead of base services.yml file 2020-03-04 18:05:48 +01:00
Jesper Hess 98d4ab69cc Add ulovlig-logning.dk 2020-03-04 09:39:36 +00:00
Jesper Hess f2a6aab2fe
Drone is working now 2020-03-01 13:47:09 +01:00
Jesper Hess e0f01bb78e
Upgrade Drone initial steps 2020-03-01 08:03:05 +01:00
Vidir Valberg Gudmundsson d51edc2922 Upgrade gitea. 2020-02-27 09:44:33 +01:00
Vidir Valberg Gudmundsson 47d7abe631 Upgrade synapse and riot. 2020-02-26 20:55:21 +01:00
Vidir Valberg Gudmundsson 6e94ac766b Upgrade portainer. 2020-02-26 20:27:05 +01:00
Jesper Hess 5f1bbae3de
Increase rate limiting for outgoing mails to support the needs of ulovliglogning 2020-02-06 21:47:43 +01:00
Jesper Hess cd2424999f
Add www.[domain] to hosted websites 2020-01-14 08:11:19 +01:00
Jesper Hess 4e0332cc79
Add www.[domain] to hosted websites 2020-01-14 08:10:03 +01:00
Jesper Hess ef3e0993da
Add www.[domain] to hosted websites 2020-01-14 07:58:32 +01:00
Jesper Hess 1adc11e9c4 Add ulovliglogning.dk website to the stack 2020-01-13 19:24:54 +01:00
Jesper Hess 447b82326c
Add ulovliglogning.dk website to the stack 2020-01-13 17:29:09 +01:00
Jesper Hess edfd530afe
Upgrade Synapse to v1.7.1 and Riot v1.5.6 2019-12-19 11:18:41 +01:00
Reynir Björnsson 6331805793 Add smtps port 2019-11-19 11:10:05 +01:00
Jesper Hess 3f2c7b1547
Upgrade Synapse to v1.5.1 and Riot to v1.5.3 2019-11-11 09:56:02 +01:00
Jesper Hess 71664653b0
Upgrade to Synapse 1.0.0 and Riot-Web 1.2.1 2019-06-12 14:33:35 +02:00
Jesper Hess 57cf5103c5
Upgrade to Matrix 0.99.5 and Riot 1.2.0 2019-05-30 19:59:37 +02:00
Jesper Hess 5566be7da9
Make netdata update via ouroboros 2019-05-30 18:53:26 +02:00
Jesper Hess 70632c26c2
Add tt-rss service 2019-04-25 12:05:28 +02:00
Jesper Hess fb67e038a8
Upgrade riot to 1.0.7 2019-04-10 18:01:58 +02:00
Jesper Hess 999f266af5
Update synapse to v0.99.3 2019-04-10 17:53:46 +02:00
Jesper Hess e42937736e
Enable group/community creation for all matrix users 2019-04-10 17:46:39 +02:00
Jesper Hess ba28b1eb0c
Add SYNAPSE_CACHE_FACTOR env var 2019-03-30 09:35:04 +01:00
Jesper Hess 1f69fdc3b4
Rewrite matrix/riot to use docker_service 2019-03-15 19:34:27 +01:00
Víðir Valberg Guðmundsson ada37f206a Adding networks to mailu database container. 2019-03-15 18:19:21 +01:00
Víðir Valberg Guðmundsson 8b10f40edd Add portainer. 2019-03-15 12:38:36 +01:00
Jesper Hess 59319938b8
Upgrade riot to 1.0.3 2019-03-13 06:37:22 +01:00
Jesper Hess be65327ea9
Pin specific version of matrix 2019-03-11 17:34:34 +01:00
Jesper Hess 0775a77979
Reduce log level to WARN in Synapse 2019-03-10 21:15:21 +01:00
Jesper Hess fff9f1e9da
Extract matrix config to file, make sure everything still works as before 2019-03-07 21:28:54 +01:00
Jesper Hess fb0efacf40
Add volume folder for matrix 2019-03-07 13:23:10 +01:00
Jesper Hess 8b5e8a276b
Reduce log level to hopefully lighten the load 2019-03-05 20:00:20 +01:00
Jesper Hess 05eb677c3f
Add quotes in a couple of places 2019-03-05 15:17:53 +01:00
Víðir Valberg Guðmundsson a43c52e71e Fix stuff to get mailu to work. 2019-03-05 15:10:24 +01:00
Jesper Hess 02aa4e185f
Move docker_volumes variable def to more logical place 2019-03-05 14:47:58 +01:00
Víðir Valberg Guðmundsson 6ffdac0c25 Fix mailu version variable. 2019-03-05 13:19:41 +01:00
Víðir Valberg Guðmundsson d0dd46e4f2 Rename to indicate j2 template. 2019-03-05 13:17:49 +01:00
Víðir Valberg Guðmundsson 8a0a2bf0a0 Merge branch 'master' into service/mailu 2019-03-05 13:10:24 +01:00
Víðir Valberg Guðmundsson ae78c942d7 Use ansible_service to run mailu containers with docker compose. 2019-03-05 13:07:57 +01:00
Jesper Hess 0f398cef3f
Upgrade riot to 1.0.1 2019-03-05 10:59:32 +01:00
Jesper Hess d5602af999
Add haveged to base system packages 2019-03-05 10:31:31 +01:00
Jesper Hess 0c5ed48600
Upgrade CodiMD 2019-03-05 10:06:10 +01:00
Jesper Hess ae2873e4d9
vhost config file for matrix domain 2019-03-05 09:06:19 +01:00
Jesper Hess 4db622313d
Publish port for nginx to forward connections to 2019-03-05 09:04:47 +01:00
Jesper Hess fef1951d57
Add necessary nginx configs to get matrix federation to work 2019-03-05 08:37:16 +01:00
Jesper Hess 1f8b1827ff
Rearrange matrix+riot ansible script, move volumes to host mounts. 2019-03-05 08:36:30 +01:00
Jesper Hess 55c8e77254
Move openldap to volume mounts 2019-03-04 18:21:14 +01:00
Jesper Hess 2f413b3e99
Switch out watchtower with Ouroboros 2019-03-04 16:28:51 +01:00
Jesper Hess 9ff11808ce
Add watchtower to manage auto-update of containers 2019-03-03 15:45:35 +01:00
Jesper Hess 0c1e94323c
Add drone CI/CD pipeline 2019-03-03 15:17:08 +01:00
Jesper Hess 787f47d45e
Set restart policy on containers that were missing it 2019-03-03 07:38:00 +01:00
Víðir Valberg Guðmundsson f5bc79e636 Add network. 2019-03-02 23:25:07 +01:00
Víðir Valberg Guðmundsson f734e7608b Merge branch 'master' into service/mailu 2019-03-02 23:10:36 +01:00
Víðir Valberg Guðmundsson d25555d107 Initial mailu setup 2019-03-02 23:05:00 +01:00
Jesper Hess 1cd9b67b4e
Configure gitea container as per old server 2019-03-02 21:30:54 +01:00
Jesper Hess 24a3f4ab3d
Add volume folder for gitea 2019-03-02 21:16:00 +01:00
Jesper Hess 454fc751d2
Add VIRTUAL_PORT to gitea 2019-03-02 21:16:00 +01:00
Jesper Hess e30f05d3e4
Clean up gitea docker 2019-03-02 21:15:59 +01:00
Jesper Hess ea8804d31c
Add cryptohagen.dk website 2019-03-02 19:51:32 +01:00
Jesper Hess e118b30873
Deploy https://data.coop as a container 2019-03-02 19:24:42 +01:00
Jesper Hess 1400b18930
Set up authentication for local registry + log in 2019-03-02 19:15:37 +01:00
Jesper Hess 3b596c5701
Add docker registry container 2019-03-02 18:29:15 +01:00
Jesper Hess 92baab22a9
Rename of server in netdata 2019-02-28 20:51:30 +01:00
Jesper Hess eb36b822b3
Add netdata as docker container 2019-02-28 08:38:23 +01:00
Jesper Hess 53046bb85f
Add apparmor package 2019-02-28 08:28:54 +01:00
Jesper Hess df913b2622
Fix missing quotes in ENV variables 2019-02-28 08:22:38 +01:00
Víðir Valberg Guðmundsson 14e72b2a5c Pinning riot container. 2019-02-16 00:38:44 +01:00
Víðir Valberg Guðmundsson 3a2ac5cb6b Getting codimd to work. 2019-02-14 22:52:55 +01:00
Jesper Hess dcf8fe8087
Add codimd service. LDAP isn't working just yet 2019-02-13 21:17:48 +01:00
Víðir Valberg Guðmundsson fce600d56c Moving nginx volumes to bind volumes. 2019-02-13 10:36:04 +01:00
Víðir Valberg Guðmundsson 3def4b490b Some small fixes to privatebin. 2019-02-13 10:35:45 +01:00
Jesper Hess c7fe698bc2 Merge branch 'privatebin' of data.coop/ansible into master
Resolves #8
2019-02-13 09:10:39 +00:00
Jesper Hess 26792454f4
Finalise privatebin service setup 2019-02-13 10:05:00 +01:00
Jesper Hess ca183eaf4d
Add privatebin config file 2019-02-13 10:04:40 +01:00
Jesper Hess d9921adae0
Add /docker-volumes folder structure for bind mounts 2019-02-13 10:04:22 +01:00
Víðir Valberg Guðmundsson 79149a4cba Adding some missing matrix stuff. Trying to get federation to work. 2019-02-13 09:49:22 +01:00
Jesper Hess 7a1e2c4b02
Fix typo 2019-02-13 08:54:05 +01:00
Jesper Hess 83935a8649
Add privatebin service 2019-02-13 08:50:42 +01:00
Víðir Valberg Guðmundsson fefbabcc33 Add postfix container. Get passit running with that. Fider is still not working. 2019-02-10 08:59:53 +01:00
Víðir Valberg Guðmundsson 027c18f070 Update riot config. 2019-02-09 22:46:32 +01:00
Jesper Hess 76a0b411e9
Still fixing stuff 2019-02-09 18:49:03 +01:00
Jesper Hess 6805197c31
Fixing riot and matrix stuff 2019-02-09 17:00:47 +01:00
Jesper Hess ec930a6f0f
Add hostname for riot 2019-02-09 16:00:04 +01:00
Jesper Hess 8066a0e67d
Remove ssl requirement from matrix config 2019-02-09 15:56:20 +01:00
Jesper Hess f30f07eacb
Add riot.im.conf and stuff to matrix role 2019-02-09 15:43:15 +01:00
Jesper Hess e371b11e84
Add config.json for riot 2019-02-09 15:18:09 +01:00
Jesper Hess 3d09c8592f
Add matrix base_domain and set in synapse config 2019-02-09 15:07:16 +01:00
Jesper Hess 5f1e4e02ef
Use bionic release of docker for Ubuntu 2019-02-09 14:59:45 +01:00
Víðir Valberg Guðmundsson f97eb0e8ed
Initial matrix/riot stuff. 2019-02-09 14:34:04 +01:00
Víðir Valberg Guðmundsson 05f5628de2 Hardcoding ldap filters for now. 2019-02-09 14:33:21 +01:00
Víðir Valberg Guðmundsson 69d53c26e9 Update server address. Remove published ports (nginx proxy does it). 2019-02-09 12:21:53 +01:00
Víðir Valberg Guðmundsson b2a532c258 Get rid of all docker compose files and use ansible modules to create resources. 2019-01-26 17:54:45 +01:00
Víðir Valberg Guðmundsson 3fa26a3f29 Rename thelounge URLs to data.coop. 2019-01-19 18:18:03 +01:00
Víðir Valberg Guðmundsson 60f1a9a95f Adding fider and openldap services. 2019-01-19 18:15:36 +01:00
Víðir Valberg Guðmundsson 0acc23bc3f Adding letsencrypt to the nginx-proxy. Also added thelounge irc client. 2019-01-19 14:56:23 +01:00
Víðir Valberg Guðmundsson 615ef294ba We can generalise the way we setup services and "just" define the names of the services. 2018-06-24 18:19:56 +02:00
Víðir Valberg Guðmundsson 723868331d Some cleanup. 2018-06-24 17:57:43 +02:00
Jesper Hess a995b6d551
Configure services to use nginx-proxy and external_services network 2018-06-24 15:17:57 +02:00
Jesper Hess d5d1e3e8cc
Add nginx reverse proxy docker config 2018-06-24 15:17:35 +02:00
Jesper Hess b7fb9dc360
Configure external_services network 2018-06-24 15:16:56 +02:00
Víðir Valberg Guðmundsson 795d5585b1 add vagrant file and adjust stuff. 2018-06-24 01:44:30 +02:00
Jesper Hess 7866b614ac
Fix env variables for Nextcloud 2018-06-23 19:44:27 +02:00
Víðir Valberg Guðmundsson d443c29907 Add nextcloud to ansible. 2018-06-23 17:58:58 +02:00
Víðir Valberg Guðmundsson c005139fd8 Adding docker-service to docker role, and add a sample gitea service. 2018-06-23 17:22:50 +02:00
Jesper Hess eee9bd7e04
Initial Nextcloud compose file 2018-06-23 16:41:33 +02:00
Víðir Valberg Guðmundsson 1bb6ea5eff Pubkeys should be added to the root user as well. 2018-06-23 14:44:00 +02:00
Jesper Hess 25d7eff835
Move playbook file 2018-06-23 13:37:00 +02:00
Jesper Hess ff792d4cc5
IP addresses for setup 2018-06-23 11:37:02 +02:00
Jesper Hess fa8425ba2a
Install aptitude if missing 2018-05-10 11:20:28 +02:00
Jesper Hess 5b96b26593
Add docker role + check for python 2018-05-10 11:19:54 +02:00
Jesper Hess 24d0ffd087
Add initial user configuration 2018-05-08 21:32:42 +02:00
Jesper Hess 76e9cba31a
Initial commit 2018-05-08 21:09:24 +02:00