| Age | Commit message (Collapse) | Author | Files | Lines |
|---|
|
migrate db now always runs (gated only on the binary existing, not on
whether this run freshly installed the shared release) and runs before
the service starts, not after. installed_version only reflects whether
THIS run upgraded the shared /opt/pleroma binary, not whether THIS
instance's own database is migrated against it; gating migrate on that
let every instance but whichever one's play ran first after an upgrade
skip its own migration and crash-loop on "Unapplied Migrations detected"
(hit this for real on nth_io and haskell_social after a 2.11.0 upgrade).
pleroma_ctl migrate is a no-op when nothing's pending, so changed_when
false keeps normal runs from reporting changed every time.
Cap the default console logger handler (journald) at :warning: it had no
level set, so info-level noise like telemetry attach notices and every
SQL debug query were flooding the journal. ex_syslogger's own level was
already set separately; this only affects the handler nothing else was
touching.
|
|
Default pleroma_signup_open to "false" and add pleroma_invites_enabled
"true" as a default (there was none before, every instance had to set it
explicitly). Two of three live instances were already overridden to
invite-only; open registration by default is what let haskell.social get
hit by spam/harassment in the first place.
Point tzdata's :data_dir at a writable, per-instance directory instead of
its own root-owned lib path. Without this, tzdata_release_updater crashes
every few seconds trying to write its update-poll marker file under
/opt/pleroma/lib, which the pleroma user can't write to.
|
|
|
|
- Add pleroma/build role to compile from source (OTP binaries no longer published)
- Install Elixir 1.18.3 manually on Ubuntu Noble (ships 1.14, needs 1.15+)
- Standardize all build roles to produce versioned .tar.gz artifacts
- Add version defaults to all server roles (bin, dendrite, nostr/relayer)
- Switch server roles from get_url to unarchive for .tar.gz installs
- Add build_srv_dir variable to all build roles
- Deploy pleroma styles.json so custom FE themes appear in picker
- Fix pleroma OTP install: version check, root ownership, auto-cleanup old releases
- Fix pleroma config: log level :warn -> :warning, remove availableStyles
- Add wait_for grafana readiness before dashboard install
- Set minecraft ops changed_when: false
|
|
- Add no_log: true to tasks that handle passwords/secrets
- Tighten config file permissions (0644 -> 0600/0640 where appropriate)
- Bind pleroma to 127.0.0.1 instead of 0.0.0.0
- Tighten ergo unix socket mode 0777 -> 0770
- Remove weak defaults; roles now fail explicitly if required vars not set
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
