From 0377db2812038cb3a20d3881df03172cee7b54a4 Mon Sep 17 00:00:00 2001 From: Stefan Bethke Date: Sun, 2 Aug 2026 17:24:58 +0200 Subject: [PATCH 1/3] Use correct hostname for yate --- inventories/z9/hosts.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/inventories/z9/hosts.yaml b/inventories/z9/hosts.yaml index b4373d6c..b07a2864 100644 --- a/inventories/z9/hosts.yaml +++ b/inventories/z9/hosts.yaml @@ -13,7 +13,7 @@ all: ansible_host: waybackproxy.ccchh.net ansible_user: chaos yate: - ansible_host: yate.ccchh.net + ansible_host: yate.z9.ccchh.net ansible_user: chaos certbot_hosts: hosts: From f749ed436ca2db416858c84b97f0f6beae9152d0 Mon Sep 17 00:00:00 2001 From: Stefan Bethke Date: Sun, 2 Aug 2026 17:25:30 +0200 Subject: [PATCH 2/3] Use fixed port range to allow for better fw rules --- inventories/chaosknoten/host_vars/git-pages.yaml | 2 ++ inventories/z9/host_vars/yate.yaml | 6 ++++++ resources/z9/yate/docker_compose/rmanager.conf.j2 | 4 ++++ resources/z9/yate/docker_compose/yrtpchan.conf.j2 | 4 ++++ resources/z9/yate/docker_compose/ysipchan.conf.j2 | 6 ++++++ 5 files changed, 22 insertions(+) create mode 100644 inventories/chaosknoten/host_vars/git-pages.yaml create mode 100644 resources/z9/yate/docker_compose/rmanager.conf.j2 create mode 100644 resources/z9/yate/docker_compose/yrtpchan.conf.j2 create mode 100644 resources/z9/yate/docker_compose/ysipchan.conf.j2 diff --git a/inventories/chaosknoten/host_vars/git-pages.yaml b/inventories/chaosknoten/host_vars/git-pages.yaml new file mode 100644 index 00000000..a5c8c822 --- /dev/null +++ b/inventories/chaosknoten/host_vars/git-pages.yaml @@ -0,0 +1,2 @@ +# renovate: datasource=docker depName=codeberg.org/git-pages/git-pages +git_pages__version: latest diff --git a/inventories/z9/host_vars/yate.yaml b/inventories/z9/host_vars/yate.yaml index fecacb1e..ce296c42 100644 --- a/inventories/z9/host_vars/yate.yaml +++ b/inventories/z9/host_vars/yate.yaml @@ -6,3 +6,9 @@ docker_compose__configuration_files: content: "{{ lookup('ansible.builtin.template', 'resources/z9/yate/docker_compose/regexroute.conf.j2') }}" - name: regfile.conf content: "{{ lookup('ansible.builtin.template', 'resources/z9/yate/docker_compose/regfile.conf.j2') }}" + - name: rmanager.conf + content: "{{ lookup('ansible.builtin.template', 'resources/z9/yate/docker_compose/rmanager.conf.j2') }}" + - name: yrtpchan.conf + content: "{{ lookup('ansible.builtin.template', 'resources/z9/yate/docker_compose/yrtpchan.conf.j2') }}" + - name: ysipchan.conf + content: "{{ lookup('ansible.builtin.template', 'resources/z9/yate/docker_compose/ysipchan.conf.j2') }}" diff --git a/resources/z9/yate/docker_compose/rmanager.conf.j2 b/resources/z9/yate/docker_compose/rmanager.conf.j2 new file mode 100644 index 00000000..fec08817 --- /dev/null +++ b/resources/z9/yate/docker_compose/rmanager.conf.j2 @@ -0,0 +1,4 @@ +; https://github.com/eventphone/yate/blob/master/conf.d/rmanager.conf.sample +[general] +; password: string: Password required to authenticate as admin, default empty! +;password= diff --git a/resources/z9/yate/docker_compose/yrtpchan.conf.j2 b/resources/z9/yate/docker_compose/yrtpchan.conf.j2 new file mode 100644 index 00000000..ac2c275d --- /dev/null +++ b/resources/z9/yate/docker_compose/yrtpchan.conf.j2 @@ -0,0 +1,4 @@ +; https://github.com/eventphone/yate/blob/master/conf.d/yrtpchan.conf.sample +[general] +minport=42000 +maxport=42999 diff --git a/resources/z9/yate/docker_compose/ysipchan.conf.j2 b/resources/z9/yate/docker_compose/ysipchan.conf.j2 new file mode 100644 index 00000000..32cfa762 --- /dev/null +++ b/resources/z9/yate/docker_compose/ysipchan.conf.j2 @@ -0,0 +1,6 @@ +; Setting for all SIP channels +; https://github.com/eventphone/yate/blob/master/conf.d/ysipchan.conf.sample + +[general] +; try to avoid `Transport(general) received likely truncated packet with length 1500, try to increase maxpkt` +maxpkt=8192 From 47bc22daee6787eda1230524a645af774082a1c5 Mon Sep 17 00:00:00 2001 From: Renovate Date: Sun, 2 Aug 2026 15:31:42 +0000 Subject: [PATCH 3/3] Update docker.io/library/postgres Docker tag to v17 --- inventories/chaosknoten/host_vars/cloud.yaml | 2 +- resources/chaosknoten/lists/docker_compose/compose.yaml.j2 | 2 +- resources/chaosknoten/pretalx/docker_compose/compose.yaml.j2 | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/inventories/chaosknoten/host_vars/cloud.yaml b/inventories/chaosknoten/host_vars/cloud.yaml index 8f299b2d..7a96f337 100644 --- a/inventories/chaosknoten/host_vars/cloud.yaml +++ b/inventories/chaosknoten/host_vars/cloud.yaml @@ -1,7 +1,7 @@ # renovate: datasource=docker depName=git.hamburg.ccc.de/ccchh/oci-images/nextcloud nextcloud__version: 34 # renovate: datasource=docker depName=docker.io/library/postgres -nextcloud__postgres_version: 15.18 +nextcloud__postgres_version: 17.10 nextcloud__fqdn: cloud.hamburg.ccc.de nextcloud__data_dir: /data/nextcloud nextcloud__extra_configuration: "{{ lookup('ansible.builtin.template', 'resources/chaosknoten/cloud/nextcloud/extra_configuration.config.php.j2') }}" diff --git a/resources/chaosknoten/lists/docker_compose/compose.yaml.j2 b/resources/chaosknoten/lists/docker_compose/compose.yaml.j2 index f6194cb3..3142813d 100644 --- a/resources/chaosknoten/lists/docker_compose/compose.yaml.j2 +++ b/resources/chaosknoten/lists/docker_compose/compose.yaml.j2 @@ -62,7 +62,7 @@ services: - POSTGRES_DB=mailmandb - POSTGRES_USER=mailman - "POSTGRES_PASSWORD={{ secret__lists__postgres_password }}" - image: docker.io/library/postgres:12-alpine + image: docker.io/library/postgres:17-alpine volumes: - /opt/mailman/database:/var/lib/postgresql/data networks: diff --git a/resources/chaosknoten/pretalx/docker_compose/compose.yaml.j2 b/resources/chaosknoten/pretalx/docker_compose/compose.yaml.j2 index dea2dfb1..b5290bbe 100644 --- a/resources/chaosknoten/pretalx/docker_compose/compose.yaml.j2 +++ b/resources/chaosknoten/pretalx/docker_compose/compose.yaml.j2 @@ -3,7 +3,7 @@ services: database: - image: docker.io/library/postgres:15-alpine + image: docker.io/library/postgres:17-alpine environment: - "POSTGRES_USER=pretalx" - "POSTGRES_PASSWORD={{ secret__pretalx_db_password }}"