Slavi Pantaleev
|
69b2df629b
|
Enable some recommended Coturn options in an effort to lower DDoS amplification factor
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/2592
|
2023-03-22 08:04:47 +02:00 |
|
Slavi Pantaleev
|
773cb7d37e
|
Make no-tcp-relay Coturn configuration property configurable
|
2023-01-26 17:35:30 +02:00 |
|
Slavi Pantaleev
|
bf23d63f82
|
Add matrix_coturn_additional_configuration
|
2023-01-26 17:35:30 +02:00 |
|
Slavi Pantaleev
|
4c9f96722f
|
Add no-multicast-peers to Coturn config by default
Part of a security hardening provoked by:
https://www.rtcsec.com/article/cve-2020-26262-bypass-of-coturns-access-control-protection/
|
2023-01-26 17:35:30 +02:00 |
|
Slavi Pantaleev
|
410a915a8a
|
Move roles/matrix* to roles/custom/matrix*
This paves the way for installing other roles into `roles/galaxy` using `ansible-galaxy`,
similar to how it's done in:
- https://github.com/spantaleev/gitea-docker-ansible-deploy
- https://github.com/spantaleev/nextcloud-docker-ansible-deploy
In the near future, we'll be removing a lot of the shared role code from here
and using upstream roles for it. Some of the core `matrix-*` roles have
already been extracted out into other reusable roles:
- https://github.com/devture/com.devture.ansible.role.postgres
- https://github.com/devture/com.devture.ansible.role.systemd_docker_base
- https://github.com/devture/com.devture.ansible.role.timesync
- https://github.com/devture/com.devture.ansible.role.vars_preserver
- https://github.com/devture/com.devture.ansible.role.playbook_runtime_messages
- https://github.com/devture/com.devture.ansible.role.playbook_help
We just need to migrate to those.
|
2022-11-03 09:11:29 +02:00 |
|