Merge branch 'dev'

.env.sample

@@ -14,15 +14,3 @@ SECRET_POSTGRES_PASSWORD_VERSION=v1
 ## A list of these tz database names can be looked up at Wikipedia
 ## https://en.wikipedia.org/wiki/List_of_tz_database_time_zones
 TZ=UTC
-
-## Make Mattermost container readonly. This interferes with the regeneration of root.html inside the container. Only use
-## it if you know what you're doing.
-## See https://github.com/mattermost/docker/issues/18
-MATTERMOST_CONTAINER_READONLY=false
-
-## Additional configuration settings for Mattermost. Documentation on the variables and the settings itself can be found at
-## https://docs.mattermost.com/administration/config-settings.html
-## Keep in mind that variables set here will take precedence over the same setting in config.json. This includes
-## the system console as well and settings set with env variables will be greyed out.
-
-

abra.sh

@@ -1 +1 @@
-export MATTERMOST_ENTRYPOINT_VERSION=v1
+export ENTRYPOINT_VERSION=v1

compose.yml

@@ -1,50 +1,19 @@
 version: "3.8"
 
 services:
-  postgres:
-    image: postgres:13-alpine
-    security_opt:
-      - no-new-privileges:true
-    tmpfs:
-      - /tmp
-      - /var/run/postgresql
-    volumes:
-      - postgres_data:/var/lib/postgresql/data
-    environment:
-      # timezone inside container
-      - TZ
-
-      # necessary Postgres options/variables
-      - POSTGRES_USER=mattermost
-      - POSTGRES_PASSWORD_FILE=/run/secrets/postgres_password
-      - POSTGRES_DB=mattermost
-    secrets:
-      - postgres_password
-    networks:
-      - internal
-
   app:
-    image: mattermost/mattermost-team-edition:7.0
-    security_opt:
-      - no-new-privileges:true
-    read_only: ${MATTERMOST_CONTAINER_READONLY}
-    tmpfs:
-      - /tmp
+    image: mattermost/mattermost-team-edition:8.0.1
+    environment:
+      - TZ
+      - MM_SQLSETTINGS_DRIVERNAME=postgres
+      - MM_SERVICESETTINGS_SITEURL=https://${DOMAIN}
     volumes:
       - mattermost_config:/mattermost/config:rw
       - mattermost_data:/mattermost/data:rw
       - mattermost_logs:/mattermost/logs:rw
       - mattermost_plugins:/mattermost/plugins:rw
       - mattermost_client_plugins:/mattermost/client/plugins:rw
-    environment:
-      # timezone inside container
-      - TZ
-
-      # necessary Mattermost options/variables (see env.sample)
-      - MM_SQLSETTINGS_DRIVERNAME=postgres
-
-      # additional settings
-      - MM_SERVICESETTINGS_SITEURL=https://${DOMAIN}
+      - mattermost_certs:/etc/ssl/certs:ro
     networks:
       - proxy
       - internal
@@ -59,7 +28,7 @@ services:
         - "traefik.http.routers.${STACK_NAME}.middlewares=${STACK_NAME}-redirect"
         - "traefik.http.middlewares.${STACK_NAME}-redirect.headers.SSLForceHost=true"
         - "traefik.http.middlewares.${STACK_NAME}-redirect.headers.SSLHost=${DOMAIN}"
-        - "coop-cloud.${STACK_NAME}.version=0.1.0+7.0"
+        - "coop-cloud.${STACK_NAME}.version=0.1.0+8.0.1"
     configs:
       - source: abra_mattermost_entrypoint
         target: /abra-mattermost-entrypoint.sh
@@ -68,6 +37,21 @@ services:
       - postgres_password
     entrypoint: /abra-mattermost-entrypoint.sh
 
+  postgres:
+    image: postgres:15-alpine
+    volumes:
+      - postgres_data:/var/lib/postgresql/data
+    environment:
+      - TZ
+      - POSTGRES_USER=mattermost
+      - POSTGRES_PASSWORD_FILE=/run/secrets/postgres_password
+      - POSTGRES_DB=mattermost
+    secrets:
+      - postgres_password
+    networks:
+      - internal
+
+
 secrets:
   postgres_password:
     external: true
@@ -75,8 +59,8 @@ secrets:
 
 configs:
   abra_mattermost_entrypoint:
-    name: abra_mattermost_entrypoint
-    file: ./abra-mattermost-entrypoint.sh
+    name: ${STACK_NAME}_entrypoint_${ENTRYPOINT_VERSION}
+    file: ./entrypoint.sh
 
 networks:
   proxy:
@@ -86,8 +70,8 @@ networks:
 volumes:
   postgres_data:
   mattermost_config:
+  mattermost_certs:
   mattermost_data:
   mattermost_logs:
   mattermost_plugins:
   mattermost_client_plugins:
-