Update docker.io/library/postgres Docker tag to v17

docs/concepts-and-configurations/matrix-moderation.md

@@ -27,9 +27,10 @@ The bot account `@moderation:hamburg.ccc.de` (Draupnir) maintains various intern
 These can include, for example, user bans or entire server bans.
 Additionally, certain automatic monitoring measures (so-called "protections") apply in these rooms, which trigger a configured action if violated.
 For example, a user is not allowed to tag too many other users in a single message, as this is considered spam and results in a kick.
-The bot is controlled and configured via a privileged *CCCHH Moderation Management* room using `!mjolnir` commands.
+The bot is controlled and configured via a privileged *CCCHH Moderation Management* room using `!draupnir` commands.
 There, individual actions can also be triggered through the bot as needed, such as redacting messages, kicking users from all or some channels, etc.
 
-It is also possible to make our moderation bot's local lists available to other entities and subscribe our bot to other entities' lists.
-Our list is published in `#general-moderation:hamburg.ccc.de` where other moderation bots can freely watch it.
+Currently we operate **two policy lists**: One for internal bans like "Hausverbot" or similar and one for general misconduct like harassment and spam.
+It is possible to make our general list available to other entities as well as subscribe our bot to other entities' lists.
+Our general list is published in `#general-moderation:hamburg.ccc.de` where other moderation bots can freely watch it.
 

docs/guides/matrix-taking-moderation-action.md

@@ -18,18 +18,20 @@ All bot actions are triggered through the *CCCHH Moderation Management* room.
 ## Banning a User
 
 ```
-!draupnir ban user general <glob> <reason>
+!draupnir ban user <list> <glob> <reason>
 ```
 
+- `<list>` either `general` for general misconduct or `internal` for CCCHH-internal reasons
 - `<glob>` can be a user ID (e.g. `@example:matrix.org`) but also more sophisticated. Be careful when using actual glob syntax as whole servers can be banned even if just a single user is the intended target.
 - `<reason>` is technically optional but should always be supplied so that we know why a certain user was banned in retrospect. The bot supports parsing quotations so `"<reason>"` is usually what you want if more than one word is used.
 
 ## Banning a Server
 
 ```
-!draupnir ban server general <glob> <reason>
+!draupnir ban server <list> <glob> <reason>
 ```
 
+- `<list>` either `general` for general misconduct or `internal` for CCCHH-internal reasons
 - `<glob>` can be used to ban subdomains of a domain too, e.g. `*.example.com`. If used, an additional `--force` is required after the whole command.
 - `<reason>` should be supplied and supports quotation (`"<reason>") if more than one word is used
 - When a domain is banned, we usually also ban all subdomains too. This needs to be done in two separate commands.

inventories/chaosknoten/host_vars/cloud.yaml

@@ -1,7 +1,7 @@
 # renovate: datasource=docker depName=git.hamburg.ccc.de/ccchh/oci-images/nextcloud
 nextcloud__version: 34
 # renovate: datasource=docker depName=docker.io/library/postgres
-nextcloud__postgres_version: 15.18
+nextcloud__postgres_version: 17.11
 nextcloud__fqdn: cloud.hamburg.ccc.de
 nextcloud__data_dir: /data/nextcloud
 nextcloud__extra_configuration: "{{ lookup('ansible.builtin.template', 'resources/chaosknoten/cloud/nextcloud/extra_configuration.config.php.j2') }}"

resources/chaosknoten/lists/docker_compose/compose.yaml.j2

@@ -62,7 +62,7 @@ services:
       - POSTGRES_DB=mailmandb
       - POSTGRES_USER=mailman
       - "POSTGRES_PASSWORD={{ secret__lists__postgres_password }}"
-    image: docker.io/library/postgres:12-alpine
+    image: docker.io/library/postgres:17-alpine
     volumes:
       - /opt/mailman/database:/var/lib/postgresql/data
     networks:

resources/chaosknoten/pretalx/docker_compose/compose.yaml.j2

@@ -3,7 +3,7 @@
 
 services:
   database:
-    image: docker.io/library/postgres:15-alpine
+    image: docker.io/library/postgres:17-alpine
     environment:
       - "POSTGRES_USER=pretalx"
       - "POSTGRES_PASSWORD={{ secret__pretalx_db_password }}"