replace command syntax with usage of file provider to set skip verify of self signed certs

support zulip self signed cert
Update .drone.yml
2025-02-13 14:34:00 -05:00 · 2025-02-12 23:10:47 -05:00 · 2025-01-08 10:09:13 -08:00 · 2024-12-03 19:33:59 +01:00
6 changed files with 20 additions and 4 deletions
--- a/.drone.yml
+++ b/.drone.yml
@ -34,7 +34,7 @@ steps:
        from_secret: drone_abra-bot_token
      fork: true
      repositories:
-        - coop-cloud/auto-recipes-catalogue-json
+        - toolshed/auto-recipes-catalogue-json

 trigger:
  event: tag
--- a/.env.sample
+++ b/.env.sample
@ -147,3 +147,7 @@ COMPOSE_FILE="compose.yml"
 # NOTE(3wc): as of 2024-04-01 only the `icecast` recipe uses this
 #COMPOSE_FILE="$COMPOSE_FILE:compose.web-alt.yml"
 #WEB_ALT_ENABLED=1
+
+## Zulip
+#COMPOSE_FILE="$COMPOSE_FILE:compose.zulip.yml"
+#ZULIP_HTTPS_PROXY_ENABLED=1
--- a/compose.yml
+++ b/compose.yml
@ -3,7 +3,7 @@ version: "3.8"

 services:
  app:
-    image: "traefik:v2.11.10"
+    image: "traefik:v2.11.14"
    # Note(decentral1se): *please do not* add any additional ports here.
    # Doing so could break new installs with port conflicts. Please use
    # the usual `compose.$app.yml` approach for any additional ports
@ -47,12 +47,12 @@ services:
        - "traefik.http.routers.${STACK_NAME}.tls.certresolver=${LETS_ENCRYPT_ENV}"
        - "traefik.http.routers.${STACK_NAME}.service=api@internal"
        - "traefik.http.routers.${STACK_NAME}.middlewares=security@file"
-        - "coop-cloud.${STACK_NAME}.version=2.8.0+v2.11.10"
+        - "coop-cloud.${STACK_NAME}.version=2.9.0+v2.11.14"
        - "coop-cloud.${STACK_NAME}.timeout=${TIMEOUT:-120}"
        - "backupbot.backup=${ENABLE_BACKUPS:-true}"

  socket-proxy:
-    image: lscr.io/linuxserver/socket-proxy:1.26.2-r0-ls26
+    image: lscr.io/linuxserver/socket-proxy:1.26.2-r0-ls30
    environment:
      - ALLOW_START=0
      - ALLOW_STOP=0
--- a/compose.zulip.yml
+++ b/compose.zulip.yml
@ -0,0 +1,6 @@
+version: "3.8"
+services:
+  app:
+    deploy:
+      labels:
+        - "traefik.http.services.${STACK_NAME}.loadBalancer.serversTransport=zulip@file"
--- a/file-provider.yml.tmpl
+++ b/file-provider.yml.tmpl
@ -1,5 +1,10 @@
 ---
 http:
+    {{ if eq (env "ZULIP_HTTPS_PROXY_ENABLED") "1" }}
+  serversTransports:
+    zulip:
+      insecureSkipVerify: true
+  {{ end }}
  middlewares:
    {{ if eq (env "KEYCLOAK_MIDDLEWARE_ENABLED") "1" }}
    keycloak:
--- a/release/2.9.0+v2.11.14
+++ b/release/2.9.0+v2.11.14
@ -0,0 +1 @@
+Closes Security Issue https://github.com/traefik/traefik/security/advisories/GHSA-h924-8g65-j9wg
Author	SHA1	Message	Date
brooke	91ca64b71e	replace command syntax with usage of file provider to set skip verify of self signed certs	2025-02-13 14:34:00 -05:00
brooke	8be9f387e5	support zulip self signed cert	2025-02-12 23:10:47 -05:00
Cassowary	85d0c159b0	Update .drone.yml All checks were successful continuous-integration/drone/push Build is passing Details	2025-01-08 10:09:13 -08:00
Moritz	6294944952	chore: publish 2.9.0+v2.11.14 release All checks were successful continuous-integration/drone/tag Build is passing Details continuous-integration/drone/push Build is passing Details	2024-12-03 19:33:59 +01:00
				`@ -0,0 +1 @@`
				`Closes Security Issue https://github.com/traefik/traefik/security/advisories/GHSA-h924-8g65-j9wg`