1
0
mirror of https://github.com/spantaleev/matrix-docker-ansible-deploy.git synced 2024-12-12 08:43:55 +02:00
matrix-docker-ansible-deploy/docs
Slavi Pantaleev 299a8c4c7c Make (most) containers start as non-root
This makes all containers (except mautrix-telegram and
mautrix-whatsapp), start as a non-root user.

We do this, because we don't trust some of the images.
In any case, we'd rather not trust ALL images and avoid giving
`root` access at all. We can't be sure they would drop privileges
or what they might do before they do it.

Because Postfix doesn't support running as non-root,
it had to be replaced by an Exim mail server.

The matrix-nginx-proxy nginx container image is patched up
(by replacing its main configuration) so that it can work as non-root.
It seems like there's no other good image that we can use and that is up-to-date
(https://hub.docker.com/r/nginxinc/nginx-unprivileged is outdated).

Likewise for riot-web (https://hub.docker.com/r/bubuntux/riot-web/),
we patch it up ourselves when starting (replacing the main nginx
configuration).
Ideally, it would be fixed upstream so we can simplify.
2019-01-27 20:25:13 +02:00
..
ansible.md Add Ansible guide and Ansible version checks 2019-01-03 16:24:14 +02:00
configuring-dns.md Use CNAME for riot in the example table 2018-10-21 16:34:00 +03:00
configuring-playbook-bridge-mautrix-telegram.md Annotate certain features as optional/advanced 2018-11-26 07:23:42 +02:00
configuring-playbook-bridge-mautrix-whatsapp.md Annotate certain features as optional/advanced 2018-11-26 07:23:42 +02:00
configuring-playbook-email.md Make (most) containers start as non-root 2019-01-27 20:25:13 +02:00
configuring-playbook-external-postgres.md Make roles more independent of one another 2019-01-16 18:05:48 +02:00
configuring-playbook-federation.md Annotate certain features as optional/advanced 2018-11-26 07:23:42 +02:00
configuring-playbook-ldap-auth.md Add LDAP auth password provider documentation and changelog description 2018-11-28 11:21:03 +02:00
configuring-playbook-matrix-corporal.md Annotate certain features as optional/advanced 2018-11-26 07:23:42 +02:00
configuring-playbook-mxisd.md Split playbook into multiple roles 2019-01-12 18:01:10 +02:00
configuring-playbook-own-webserver.md Add support for 2 more SSL certificate retrieval methods 2018-12-23 11:00:12 +02:00
configuring-playbook-rest-auth.md Annotate certain features as optional/advanced 2018-11-26 07:23:42 +02:00
configuring-playbook-s3.md Improve wording a bit 2018-08-08 10:10:16 +03:00
configuring-playbook-shared-secret-auth.md Annotate certain features as optional/advanced 2018-11-26 07:23:42 +02:00
configuring-playbook-ssl-certificates.md Add support for 2 more SSL certificate retrieval methods 2018-12-23 11:00:12 +02:00
configuring-playbook-telemetry.md Annotate certain features as optional/advanced 2018-11-26 07:23:42 +02:00
configuring-playbook.md Split playbook into multiple roles 2019-01-12 18:01:10 +02:00
configuring-well-known.md Fix /.well-known/matrix/client for CORS 2018-11-29 09:13:25 +02:00
importing-media-store.md Make media-store restore work with server files, not local 2019-01-01 15:57:50 +02:00
importing-postgres.md Make media-store restore work with server files, not local 2019-01-01 15:57:50 +02:00
importing-sqlite.md Make media-store restore work with server files, not local 2019-01-01 15:57:50 +02:00
installing.md Make media-store restore work with server files, not local 2019-01-01 15:57:50 +02:00
maintenance-and-troubleshooting.md Add initial version of maintenance and troubleshooting doc 2018-11-14 14:34:24 -06:00
maintenance-checking-services.md Add self-check command 2018-10-21 12:58:25 +03:00
maintenance-upgrading-postgres.md Add support for configuring Postgres auto-upgrade-backup path 2018-11-01 09:48:56 +02:00
maintenance-upgrading-services.md Link to Synapse Homeowners room 2018-12-11 10:15:09 -06:00
prerequisites.md Add Ansible guide and Ansible version checks 2019-01-03 16:24:14 +02:00
README.md Add initial version of maintenance and troubleshooting doc 2018-11-14 14:34:24 -06:00
registering-users.md add script + doc to change a user to admin 2018-11-28 11:02:15 +01:00
uninstalling.md add script + doc to remove everything 2018-11-28 11:02:51 +01:00