Update Mattermost to 7.0, add release notes, add abra.sh file to fix deployment entrypoint issue

.env.sample

@@ -14,3 +14,15 @@ SECRET_POSTGRES_PASSWORD_VERSION=v1
 ## A list of these tz database names can be looked up at Wikipedia
 ## https://en.wikipedia.org/wiki/List_of_tz_database_time_zones
 TZ=UTC
+
+## Make Mattermost container readonly. This interferes with the regeneration of root.html inside the container. Only use
+## it if you know what you're doing.
+## See https://github.com/mattermost/docker/issues/18
+MATTERMOST_CONTAINER_READONLY=false
+
+## Additional configuration settings for Mattermost. Documentation on the variables and the settings itself can be found at
+## https://docs.mattermost.com/administration/config-settings.html
+## Keep in mind that variables set here will take precedence over the same setting in config.json. This includes
+## the system console as well and settings set with env variables will be greyed out.
+
+

abra.sh

@@ -1 +1 @@
-export ENTRYPOINT_VERSION=v1
+export MATTERMOST_ENTRYPOINT_VERSION=v1

compose.yml

@@ -1,19 +1,50 @@
 version: "3.8"
 
 services:
-  app:
-    image: mattermost/mattermost-team-edition:8.0.1
+  postgres:
+    image: postgres:13-alpine
+    security_opt:
+      - no-new-privileges:true
+    tmpfs:
+      - /tmp
+      - /var/run/postgresql
+    volumes:
+      - postgres_data:/var/lib/postgresql/data
     environment:
+      # timezone inside container
       - TZ
-      - MM_SQLSETTINGS_DRIVERNAME=postgres
-      - MM_SERVICESETTINGS_SITEURL=https://${DOMAIN}
+
+      # necessary Postgres options/variables
+      - POSTGRES_USER=mattermost
+      - POSTGRES_PASSWORD_FILE=/run/secrets/postgres_password
+      - POSTGRES_DB=mattermost
+    secrets:
+      - postgres_password
+    networks:
+      - internal
+
+  app:
+    image: mattermost/mattermost-team-edition:7.0
+    security_opt:
+      - no-new-privileges:true
+    read_only: ${MATTERMOST_CONTAINER_READONLY}
+    tmpfs:
+      - /tmp
     volumes:
       - mattermost_config:/mattermost/config:rw
       - mattermost_data:/mattermost/data:rw
       - mattermost_logs:/mattermost/logs:rw
       - mattermost_plugins:/mattermost/plugins:rw
       - mattermost_client_plugins:/mattermost/client/plugins:rw
-      - mattermost_certs:/etc/ssl/certs:ro
+    environment:
+      # timezone inside container
+      - TZ
+
+      # necessary Mattermost options/variables (see env.sample)
+      - MM_SQLSETTINGS_DRIVERNAME=postgres
+
+      # additional settings
+      - MM_SERVICESETTINGS_SITEURL=https://${DOMAIN}
     networks:
       - proxy
       - internal
@@ -28,7 +59,7 @@ services:
         - "traefik.http.routers.${STACK_NAME}.middlewares=${STACK_NAME}-redirect"
         - "traefik.http.middlewares.${STACK_NAME}-redirect.headers.SSLForceHost=true"
         - "traefik.http.middlewares.${STACK_NAME}-redirect.headers.SSLHost=${DOMAIN}"
-        - "coop-cloud.${STACK_NAME}.version=0.1.0+8.0.1"
+        - "coop-cloud.${STACK_NAME}.version=0.1.0+7.0"
     configs:
       - source: abra_mattermost_entrypoint
         target: /abra-mattermost-entrypoint.sh
@@ -37,21 +68,6 @@ services:
       - postgres_password
     entrypoint: /abra-mattermost-entrypoint.sh
 
-  postgres:
-    image: postgres:15-alpine
-    volumes:
-      - postgres_data:/var/lib/postgresql/data
-    environment:
-      - TZ
-      - POSTGRES_USER=mattermost
-      - POSTGRES_PASSWORD_FILE=/run/secrets/postgres_password
-      - POSTGRES_DB=mattermost
-    secrets:
-      - postgres_password
-    networks:
-      - internal
-
-
 secrets:
   postgres_password:
     external: true
@@ -59,8 +75,8 @@ secrets:
 
 configs:
   abra_mattermost_entrypoint:
-    name: ${STACK_NAME}_entrypoint_${ENTRYPOINT_VERSION}
-    file: ./entrypoint.sh
+    name: abra_mattermost_entrypoint
+    file: ./abra-mattermost-entrypoint.sh
 
 networks:
   proxy:
@@ -70,8 +86,8 @@ networks:
 volumes:
   postgres_data:
   mattermost_config:
-  mattermost_certs:
   mattermost_data:
   mattermost_logs:
   mattermost_plugins:
   mattermost_client_plugins:
+

release/0.1.0+7.0.txt

@@ -0,0 +1,6 @@
+This should be a fairly stable update. The only strange behaviour we've noticed so far has been:
+
+- When clicking on 'Channels' to change to 'Boards' or 'Playbooks', your window may flicker and just reload 'Channels'. Click 'Boards' or 'Playbooks' again and it should behave as expected.
+- When clicking on private messages, you may get an error telling you that you don't have permission to view these.
+
+To fix both of these errors, logout of your server in your Mattermost client, delete the server (if you are using an app), and then re-add it. We haven't noticed any issues after doing this.