From 0c9ea6bc56bdca76472ae8cd265999493bfb50d8 Mon Sep 17 00:00:00 2001
From: Quentin Dufour <quentin@deuxfleurs.fr>
Date: Mon, 7 Aug 2023 11:17:40 +0200
Subject: [PATCH] disable network fingerprinting in nomad

---
 cluster/prod/app/matrix/build/docker-compose.yml | 10 +++++-----
 nix/deuxfleurs.nix                               |  3 +++
 2 files changed, 8 insertions(+), 5 deletions(-)

diff --git a/cluster/prod/app/matrix/build/docker-compose.yml b/cluster/prod/app/matrix/build/docker-compose.yml
index 18a4fea..4429a88 100644
--- a/cluster/prod/app/matrix/build/docker-compose.yml
+++ b/cluster/prod/app/matrix/build/docker-compose.yml
@@ -6,18 +6,18 @@ services:
       context: ./riotweb
       args:
         # https://github.com/vector-im/riot-web/releases
-        VERSION: 1.11.25
-    image: superboum/amd64_riotweb:v33
+        VERSION: 1.11.38
+    image: superboum/amd64_riotweb:v34
 
   synapse:
     build:
       context: ./matrix-synapse
       args:
         # https://github.com/matrix-org/synapse/releases
-        VERSION: 1.79.0
+        VERSION: 1.89.0
         # https://github.com/matrix-org/synapse-s3-storage-provider/commits/main
         # Update with the latest commit on main each time you update the synapse version
         # otherwise synapse may fail to launch due to incompatibility issues
         # see this issue for an example: https://github.com/matrix-org/synapse-s3-storage-provider/issues/64
-        S3_VERSION: v1.2.0
-    image: superboum/amd64_synapse:v56
+        S3_VERSION: v1.2.1
+    image: superboum/amd64_synapse:v57
diff --git a/nix/deuxfleurs.nix b/nix/deuxfleurs.nix
index 76091c1..1e41b48 100644
--- a/nix/deuxfleurs.nix
+++ b/nix/deuxfleurs.nix
@@ -362,6 +362,9 @@ in
         enabled = true;
         network_interface = "wg0";
         meta = node_meta;
+        options = {
+            "fingerprint.denylist" = "env_aws,env_gce,env_azure";
+        };
       };
       telemetry = {
         publish_allocation_metrics = true;