From a370fafcb0fa05422fddfa0f08d7c6a5863fab67 Mon Sep 17 00:00:00 2001 From: Renovate Date: Fri, 31 Jul 2026 17:46:12 +0000 Subject: [PATCH 1/4] Update docker.io/library/postgres Docker tag to v15 --- resources/chaosknoten/lists/docker_compose/compose.yaml.j2 | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/resources/chaosknoten/lists/docker_compose/compose.yaml.j2 b/resources/chaosknoten/lists/docker_compose/compose.yaml.j2 index f6194cb3..f5535313 100644 --- a/resources/chaosknoten/lists/docker_compose/compose.yaml.j2 +++ b/resources/chaosknoten/lists/docker_compose/compose.yaml.j2 @@ -62,7 +62,7 @@ services: - POSTGRES_DB=mailmandb - POSTGRES_USER=mailman - "POSTGRES_PASSWORD={{ secret__lists__postgres_password }}" - image: docker.io/library/postgres:12-alpine + image: docker.io/library/postgres:15-alpine volumes: - /opt/mailman/database:/var/lib/postgresql/data networks: From 0377db2812038cb3a20d3881df03172cee7b54a4 Mon Sep 17 00:00:00 2001 From: Stefan Bethke Date: Sun, 2 Aug 2026 17:24:58 +0200 Subject: [PATCH 2/4] Use correct hostname for yate --- inventories/z9/hosts.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/inventories/z9/hosts.yaml b/inventories/z9/hosts.yaml index b4373d6c..b07a2864 100644 --- a/inventories/z9/hosts.yaml +++ b/inventories/z9/hosts.yaml @@ -13,7 +13,7 @@ all: ansible_host: waybackproxy.ccchh.net ansible_user: chaos yate: - ansible_host: yate.ccchh.net + ansible_host: yate.z9.ccchh.net ansible_user: chaos certbot_hosts: hosts: From f749ed436ca2db416858c84b97f0f6beae9152d0 Mon Sep 17 00:00:00 2001 From: Stefan Bethke Date: Sun, 2 Aug 2026 17:25:30 +0200 Subject: [PATCH 3/4] Use fixed port range to allow for better fw rules --- inventories/chaosknoten/host_vars/git-pages.yaml | 2 ++ inventories/z9/host_vars/yate.yaml | 6 ++++++ resources/z9/yate/docker_compose/rmanager.conf.j2 | 4 ++++ resources/z9/yate/docker_compose/yrtpchan.conf.j2 | 4 ++++ resources/z9/yate/docker_compose/ysipchan.conf.j2 | 6 ++++++ 5 files changed, 22 insertions(+) create mode 100644 inventories/chaosknoten/host_vars/git-pages.yaml create mode 100644 resources/z9/yate/docker_compose/rmanager.conf.j2 create mode 100644 resources/z9/yate/docker_compose/yrtpchan.conf.j2 create mode 100644 resources/z9/yate/docker_compose/ysipchan.conf.j2 diff --git a/inventories/chaosknoten/host_vars/git-pages.yaml b/inventories/chaosknoten/host_vars/git-pages.yaml new file mode 100644 index 00000000..a5c8c822 --- /dev/null +++ b/inventories/chaosknoten/host_vars/git-pages.yaml @@ -0,0 +1,2 @@ +# renovate: datasource=docker depName=codeberg.org/git-pages/git-pages +git_pages__version: latest diff --git a/inventories/z9/host_vars/yate.yaml b/inventories/z9/host_vars/yate.yaml index fecacb1e..ce296c42 100644 --- a/inventories/z9/host_vars/yate.yaml +++ b/inventories/z9/host_vars/yate.yaml @@ -6,3 +6,9 @@ docker_compose__configuration_files: content: "{{ lookup('ansible.builtin.template', 'resources/z9/yate/docker_compose/regexroute.conf.j2') }}" - name: regfile.conf content: "{{ lookup('ansible.builtin.template', 'resources/z9/yate/docker_compose/regfile.conf.j2') }}" + - name: rmanager.conf + content: "{{ lookup('ansible.builtin.template', 'resources/z9/yate/docker_compose/rmanager.conf.j2') }}" + - name: yrtpchan.conf + content: "{{ lookup('ansible.builtin.template', 'resources/z9/yate/docker_compose/yrtpchan.conf.j2') }}" + - name: ysipchan.conf + content: "{{ lookup('ansible.builtin.template', 'resources/z9/yate/docker_compose/ysipchan.conf.j2') }}" diff --git a/resources/z9/yate/docker_compose/rmanager.conf.j2 b/resources/z9/yate/docker_compose/rmanager.conf.j2 new file mode 100644 index 00000000..fec08817 --- /dev/null +++ b/resources/z9/yate/docker_compose/rmanager.conf.j2 @@ -0,0 +1,4 @@ +; https://github.com/eventphone/yate/blob/master/conf.d/rmanager.conf.sample +[general] +; password: string: Password required to authenticate as admin, default empty! +;password= diff --git a/resources/z9/yate/docker_compose/yrtpchan.conf.j2 b/resources/z9/yate/docker_compose/yrtpchan.conf.j2 new file mode 100644 index 00000000..ac2c275d --- /dev/null +++ b/resources/z9/yate/docker_compose/yrtpchan.conf.j2 @@ -0,0 +1,4 @@ +; https://github.com/eventphone/yate/blob/master/conf.d/yrtpchan.conf.sample +[general] +minport=42000 +maxport=42999 diff --git a/resources/z9/yate/docker_compose/ysipchan.conf.j2 b/resources/z9/yate/docker_compose/ysipchan.conf.j2 new file mode 100644 index 00000000..32cfa762 --- /dev/null +++ b/resources/z9/yate/docker_compose/ysipchan.conf.j2 @@ -0,0 +1,6 @@ +; Setting for all SIP channels +; https://github.com/eventphone/yate/blob/master/conf.d/ysipchan.conf.sample + +[general] +; try to avoid `Transport(general) received likely truncated packet with length 1500, try to increase maxpkt` +maxpkt=8192 From a89154af6bfe1b67c452e36ec9c38d22b579218b Mon Sep 17 00:00:00 2001 From: Renovate Date: Sun, 2 Aug 2026 15:31:37 +0000 Subject: [PATCH 4/4] Update docker.io/library/postgres Docker tag to v15 --- resources/chaosknoten/lists/docker_compose/compose.yaml.j2 | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/resources/chaosknoten/lists/docker_compose/compose.yaml.j2 b/resources/chaosknoten/lists/docker_compose/compose.yaml.j2 index f6194cb3..f5535313 100644 --- a/resources/chaosknoten/lists/docker_compose/compose.yaml.j2 +++ b/resources/chaosknoten/lists/docker_compose/compose.yaml.j2 @@ -62,7 +62,7 @@ services: - POSTGRES_DB=mailmandb - POSTGRES_USER=mailman - "POSTGRES_PASSWORD={{ secret__lists__postgres_password }}" - image: docker.io/library/postgres:12-alpine + image: docker.io/library/postgres:15-alpine volumes: - /opt/mailman/database:/var/lib/postgresql/data networks: