| Age | Commit message (Collapse) | Author | Files | Lines |
|---|
|
migrate db now always runs (gated only on the binary existing, not on
whether this run freshly installed the shared release) and runs before
the service starts, not after. installed_version only reflects whether
THIS run upgraded the shared /opt/pleroma binary, not whether THIS
instance's own database is migrated against it; gating migrate on that
let every instance but whichever one's play ran first after an upgrade
skip its own migration and crash-loop on "Unapplied Migrations detected"
(hit this for real on nth_io and haskell_social after a 2.11.0 upgrade).
pleroma_ctl migrate is a no-op when nothing's pending, so changed_when
false keeps normal runs from reporting changed every time.
Cap the default console logger handler (journald) at :warning: it had no
level set, so info-level noise like telemetry attach notices and every
SQL debug query were flooding the journal. ex_syslogger's own level was
already set separately; this only affects the handler nothing else was
touching.
|
|
Default pleroma_signup_open to "false" and add pleroma_invites_enabled
"true" as a default (there was none before, every instance had to set it
explicitly). Two of three live instances were already overridden to
invite-only; open registration by default is what let haskell.social get
hit by spam/harassment in the first place.
Point tzdata's :data_dir at a writable, per-instance directory instead of
its own root-owned lib path. Without this, tzdata_release_updater crashes
every few seconds trying to write its update-poll marker file under
/opt/pleroma/lib, which the pleroma user can't write to.
|
|
Reword the lookup comment above each upstream _version var to a single
greppable "# version-check: <url>" marker, always placed directly above
the version line, so a script can find every instance with one grep.
Bump bin 2.0.1 -> 2.0.2, pleroma 2.10.0 -> 2.11.0, relayer 2.2.8 -> 2.3.1,
ergo 2.18.0 -> 2.19.1, openhop_repeater 1.1.1 -> 1.1.4, keeping the
bin/server and pleroma/otp duplicate version vars in sync.
Add a TODO on openhop/repeater to review upstream's identity-validation
changes (1.1.2-1.1.4) against the stale-UID bug before deploying to the
live mesh node.
Document the version-check convention in the README.
|
|
nginx expands localhost to [::1] too, but the endpoint binds only
127.0.0.1, so every request burned a refused ipv6 connect first and
flooded the error log.
|
|
26.04 ships elixir 1.18.3, the exact version the role pinned from
upstream zips, so the download/unarchive tasks and version vars go
away. Resolves the TODO waiting on this release.
|
|
Each build role now creates build_work_dir itself and sets its own toolchain's
cache env (GOPATH/GOCACHE/GOMODCACHE, CARGO_HOME, npm cache, MIX/HEX) on its
build tasks, so the roles are self-contained instead of relying on a play-level
environment and pre_task.
|
|
Move every build role's working dir off /tmp (the SD card) to {{build_work_dir}},
which the playbook points at the SSD on the build host. nostr and pleroma stage
their artifacts inside their own build dirs so the shared work dir can't collide,
while preserving the archive top-level names (relayer, release) that the server
roles depend on.
|
|
|
|
- Add pleroma/build role to compile from source (OTP binaries no longer published)
- Install Elixir 1.18.3 manually on Ubuntu Noble (ships 1.14, needs 1.15+)
- Standardize all build roles to produce versioned .tar.gz artifacts
- Add version defaults to all server roles (bin, dendrite, nostr/relayer)
- Switch server roles from get_url to unarchive for .tar.gz installs
- Add build_srv_dir variable to all build roles
- Deploy pleroma styles.json so custom FE themes appear in picker
- Fix pleroma OTP install: version check, root ownership, auto-cleanup old releases
- Fix pleroma config: log level :warn -> :warning, remove availableStyles
- Add wait_for grafana readiness before dashboard install
- Set minecraft ops changed_when: false
|
|
- Add no_log: true to tasks that handle passwords/secrets
- Tighten config file permissions (0644 -> 0600/0640 where appropriate)
- Bind pleroma to 127.0.0.1 instead of 0.0.0.0
- Tighten ergo unix socket mode 0777 -> 0770
- Remove weak defaults; roles now fail explicitly if required vars not set
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
