Commit Graph

255 Commits

Author SHA1 Message Date
08b39ff5e2 prometheus: Update version, add node exporter
This includes a complete overhaul of the Containerfile for moving to a
self-contained build based on Bookworm, a move to Quadlet, and the
inclusion of a node exporter for node metrics with a default Grafana
dashboard.
2023-11-19 12:46:42 +00:00
fe9d5db2ce navidrome: Correct package URL for new version 2023-11-18 00:09:00 +00:00
4744c1cd11 gotosocial: Update to version 0.12.2 2023-11-17 19:07:17 +00:00
877f87c667 gitea: Update to version 1.12.0 2023-11-17 19:07:06 +00:00
03f1c1c932 navidrome: Update to version 0.50.0 2023-11-17 19:04:00 +00:00
70cc88efbf rspamd: Update to 3.7.4, start on health-check 2023-11-17 19:00:28 +00:00
bcd39b92e1 slidge: Update Discord plugin to latest version 2023-11-17 13:13:04 +00:00
3e7adeb6a3 radicale: Start on health-check pass 2023-11-17 13:11:51 +00:00
263149c324 prosody: Start on health-check pass 2023-11-17 13:08:04 +00:00
80ad429457 Don't propagate stop to Prosody component state 2023-11-14 18:26:08 +00:00
e91366e63d slidge: Update plugins to latest versions 2023-11-14 18:05:39 +00:00
8de75fe927 postfix: Start on health-check pass 2023-11-05 18:03:42 +00:00
456e432cb7 nginx: Start on health-check pass 2023-11-05 17:43:57 +00:00
c728f61642 navidrome: Update to 0.49.3, start on health-check 2023-11-05 17:30:20 +00:00
3cb622e25a lldap: Update to version 0.5.0, start on health-check 2023-11-05 17:19:14 +00:00
c81390ba5a hugo: Update to 0.119.0, start on health-check pass 2023-11-05 16:48:28 +00:00
b0a8100fbb Correct order for prosody-component-register
Compontents that intend to register against Prosody via unit files
should be started completely before registration completes.
2023-11-05 16:47:27 +00:00
5163fd4da0 Allow clients to choose own ciphers
This changes a previously updated default in Dovecot and Postfix, as it
resulted in too many issues in older clients.
2023-10-30 22:16:00 +00:00
9aec143bbd gotosocial: Update to 0.12.1, add health-check 2023-10-29 16:53:38 +00:00
c81789ae69 gitea: Fix HealthCmd for shell redirect pattern 2023-10-29 16:52:27 +00:00
9dfd940eab Auto-update Dovecot and Gitea on container build 2023-10-29 16:46:28 +00:00
95d279be7a gitea: Enable and start on health-check pass 2023-10-29 16:44:05 +00:00
f536787fb6 dovecot: Enable and start on health-check pass 2023-10-29 16:22:26 +00:00
36e1e3039e coturn: Enable and startup on health-checks 2023-10-29 15:56:02 +00:00
fcf9175060 Enable Podman auto-updates for Redis and MariaDB
Container auto-updates are scheduled for 30 minutes past every hour, or
approximately 30 minutes after `coreos-home-server-update` runs, in
order to give enough time for container builds to complete; only
containers with auto-updates enabled are eligible, however.

This also enables health-checks for Redis, and updates the version to
7.2.
2023-10-29 13:31:27 +00:00
50249ba987 Use BindsTo in Dovecot first boot process
This is to avoid starting requisite units (specifically, the MariaDB
migrations) if conditions fail.
2023-10-22 00:19:52 +01:00
4ce5be1798 rspamd: Update to version 3.7.1 2023-10-22 00:00:47 +01:00
0a7985b8ca postfix: Exclude anonymous ciphers for TLS 2023-10-21 17:33:03 +01:00
5131d1d93c prosody: Make component registration more robust 2023-10-21 17:26:18 +01:00
a5ce4675d5 Improve TLS security for Dovecot and Postfix 2023-10-21 17:19:35 +01:00
71214e94a6 prosody: Update to version 0.12.4, update modules 2023-10-03 22:44:08 +01:00
ddd50da0dc gitea: Update to version 1.20.5 2023-10-03 22:43:10 +01:00
ad2ebd092c slidge: Update to latest versions of plugins 2023-09-10 17:10:25 +01:00
0ff662b8c5 Auto-archive inbox messages after 1 week 2023-09-06 21:23:24 +01:00
8d7ee45574 slidge: Update WhatsApp plugin to latest version 2023-08-23 21:02:43 +01:00
035f34af75 gitea: Update to version 1.20.3 2023-08-22 19:21:42 +01:00
2976386e2f gotosocial: Update to version 0.11.1 2023-08-22 19:21:21 +01:00
0e14ac19e5 prosody: Update to Bookworm, move to Quadlet 2023-08-20 18:03:38 +01:00
faaefcdebb slidge: Update to latest WhatsApp plugin version 2023-08-20 17:35:20 +01:00
5afcea8f05 dovecot: Auto-archive unflagged messages in inbox 2023-08-20 11:31:37 +01:00
779e6e09f9 gotosocial: Don't report Mastodon version 2023-08-16 18:43:01 +01:00
c920a2a380 gotosocial: Update to version 0.11.0 2023-08-15 23:39:01 +01:00
ccf1852026 dovecot: Update to version 2.3.19, move to Quadlet 2023-08-13 16:30:55 +01:00
c285828395 postfix: Update to version 3.7.6, move to Quadlet 2023-08-13 16:30:09 +01:00
67e16b82df navidrome: Move to Quadlet 2023-08-13 16:03:42 +01:00
2679166819 gotosocial: Move to Quadlet 2023-08-13 14:13:07 +01:00
43136d090b coturn: Update to version 4.6.1, move to Quadlet 2023-08-13 13:59:57 +01:00
7db3958362 biboumi: Move to Quadlet, Debian-packaged version 2023-08-13 13:36:25 +01:00
fb6d134cdb slidge: Update to latest protocol versions 2023-08-12 17:52:35 +01:00
8ea73709e8 gitea: Update to version 1.20.2, move to Quadlet 2023-08-12 17:14:04 +01:00
7764f0fde0 hugo: Move to Quadlet, minify HTML by default 2023-08-12 17:01:17 +01:00
3465082806 letsencrypt: Update Lego to version 4.13.3 2023-08-12 16:31:56 +01:00
15b41eee1a nginx: Update to version 1.25, move to Quadlet 2023-08-12 16:31:31 +01:00
ee4375869d mariadb: Move to Quadlet 2023-08-12 11:49:30 +01:00
6ead546a9d radicale: Update to version 3.1.8, move to Quadlet 2023-08-12 11:26:49 +01:00
f367141361 rspamd: Don't use Notify=true
RSpamd doesn't have `systemd-notify` support, so we're forced to use
plain ol' conmon notify support instead.
2023-08-11 21:13:03 +01:00
9e690a54f0 rspamd: Update to version 3.6, move to Quadlet 2023-08-11 20:40:59 +01:00
90ae8853ac lldap: Update to version v0.4.3, move to Quadlet 2023-08-11 20:12:23 +01:00
c5a6208e6a redis: Move to container unit, Debian Bookworm
The container file is now directly based on Debian Bookworm, and uses
official Debian packages.
2023-08-11 20:12:23 +01:00
dc48e4b06b slidge: Update slidge-whatsapp to latest version 2023-08-05 11:39:55 +01:00
17fc39ac02 hugo: Update to version 0.115.4, Debian Bookworm 2023-07-30 20:37:44 +01:00
2889f2870a letsencrypt: Update to version 4.13.2 2023-07-23 10:55:52 +01:00
f7f679f9df gitea: Update to version 1.20.1 2023-07-23 10:54:37 +01:00
c14cef82f1 slidge: Update WhatsApp plugin to latest version 2023-07-22 11:04:31 +01:00
fad6a3d394 gotosocial: Inject supported Mastodon version 2023-07-22 10:28:09 +01:00
85d020b59d gotosocial: Update to version 0.10.0 2023-07-22 09:35:11 +01:00
350e37f6fc slidge: Update plugin versions 2023-07-18 22:06:54 +01:00
3f0b672633 prosody: De/Reactivate components after reload 2023-07-18 21:55:17 +01:00
5fb6e2b0f0 gitea: Update to version 1.20.0, enable indexing 2023-07-18 21:54:51 +01:00
542fbbbcea gitea: Update to version 1.19.4 2023-07-11 19:45:44 +01:00
8fce96dc1f slidge: Update WhatsApp plugin to latest version 2023-06-21 11:56:27 +01:00
2c6231080f slidge: Update WhatsApp plugin to latest version 2023-06-20 14:00:51 +01:00
df1c244686 slidge: Update to latest version, move to Bookworm
This reflects changes made to Slidge for an effective split of plugins
from core, and bundles each plugin in their own virtual environment.
2023-06-19 11:03:02 +01:00
29fa2181ca coturn: Make service less verbose 2023-06-18 11:09:22 +01:00
06a8417451 coturn: Allow more private network ranges 2023-06-04 17:09:24 +02:00
7cf8caebb4 gotosocial: Update to version 0.9.0 2023-05-25 10:04:27 +02:00
252ac7b28f gitea: Update to version 1.19.3 2023-05-06 21:57:09 +02:00
8d717127e3 gitea: Update to version 1.19.2 2023-04-28 14:53:04 +01:00
410d0715b5 gitea: Update to version 1.19.1 2023-04-26 21:59:57 +01:00
95fb7b4f7d gotosocial: Update to version 0.8.1 2023-04-23 18:49:00 +01:00
c391ebc96e slidge: Update to latest version 2023-04-23 12:02:32 +01:00
8b56af11a5 slidge: Update to latest version 2023-04-04 00:13:17 +01:00
951005cd15 coturn: Allow local range connects
Given that this setup is for a *home* server, we're forced to allow
peers for typical home IP ranges (such as `192.168.0.0/24`); however, we
should still not allow access to ranges for other containers or anything
else running in `localhost`.
2023-03-29 21:29:26 +01:00
1801b7d8aa postfix: Allow for messages up to 20MB in size
This is lower than most other services (e.g. Gmail allows for receiving
up to 50MB and sending up to 25MB) but more than most will need.
2023-03-28 21:29:40 +01:00
1742f45dd1 slidge: Update to latest version 2023-03-26 22:04:32 +01:00
b5b64eba5b nginx: Remove deprecated XSS protection block 2023-03-25 14:28:12 +00:00
3f5c0306ed rspamd: Update to version 3.5 2023-03-25 13:25:20 +00:00
efff72baa8 nginx: Update configuration, remove static serve
Services will now have an additional set of security-oriented response
headers attached, and cache times re-jigged.

In addition, the `nginx-serve-static@` service has been removed in
favour of `nginx-serve-volume@`, which is simpler to set up and use.
2023-03-25 13:21:47 +00:00
6ab280592e slidge: Update to latest version 2023-03-21 19:33:47 +00:00
0786e6e8f3 slidge: Update to latest version 2023-03-19 18:39:51 +00:00
766fb881f8 slidge: Fix upload service environment 2023-03-17 17:10:52 +00:00
e7e90f0002 dovecot: Add chroot in container
Dovecot will, by default, have login processes run under a limited
`chroot` environment. However, this broke recently with the update to
Podman 4.4.1 and the removal of implicit `CAP_CHROOT` capabilities.
This commit re-adds these in place.
2023-03-13 11:15:38 +00:00
c01eed0761 prosody: Move HTTP upload component to own address
Sharing an address with the MUC component causes issues in discovery.
2023-03-12 17:52:31 +00:00
45104d5fe6 letsencrypt: Fix location of 'lego' binary 2023-03-11 22:57:46 +00:00
03d4fdcc05 slidge: Update to latest version
And fix Dockerfile for changes in build.
2023-03-05 18:48:09 +00:00
e99faa5450 gitea: Update to version 1.18.5 2023-03-04 16:34:30 +00:00
3d3f4bb59e gotosocial: Update to version 0.7.1 2023-03-04 16:34:20 +00:00
07df01f6c7 letsencrypt: Update Lego to version 4.10.2 2023-03-04 16:34:05 +00:00
02705c9f1e prosody: Update to version 0.12.3 2023-03-04 16:33:53 +00:00
96c8ac2db5 gotosocial: Update to version 0.7.0 2023-02-18 12:36:32 +00:00