tixie/nixcfg
1
0
Fork 0
forked from Deuxfleurs/nixcfg
Code Pull requests Activity

disable network fingerprinting in nomad

Browse source
This commit is contained in:
Quentin 2023-08-07 11:17:40 +02:00
parent e7a3582c4e
commit 0c9ea6bc56
Signed by untrusted user: quentin
GPG key ID: E9602264D639FF68
2 changed files with 8 additions and 5 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

10
cluster/prod/app/matrix/build/docker-compose.yml
View file

@ -6,18 +6,18 @@ services:
context: ./riotweb context: ./riotweb
args: args:
# https://github.com/vector-im/riot-web/releases # https://github.com/vector-im/riot-web/releases
VERSION: 1.11.25 VERSION: 1.11.38
image: superboum/amd64_riotweb:v33 image: superboum/amd64_riotweb:v34
synapse: synapse:
build: build:
context: ./matrix-synapse context: ./matrix-synapse
args: args:
# https://github.com/matrix-org/synapse/releases # https://github.com/matrix-org/synapse/releases
VERSION: 1.79.0 VERSION: 1.89.0
# https://github.com/matrix-org/synapse-s3-storage-provider/commits/main # https://github.com/matrix-org/synapse-s3-storage-provider/commits/main
# Update with the latest commit on main each time you update the synapse version # Update with the latest commit on main each time you update the synapse version
# otherwise synapse may fail to launch due to incompatibility issues # otherwise synapse may fail to launch due to incompatibility issues
# see this issue for an example: https://github.com/matrix-org/synapse-s3-storage-provider/issues/64 # see this issue for an example: https://github.com/matrix-org/synapse-s3-storage-provider/issues/64
S3_VERSION: v1.2.0 S3_VERSION: v1.2.1
image: superboum/amd64_synapse:v56 image: superboum/amd64_synapse:v57

3
nix/deuxfleurs.nix
View file

@ -362,6 +362,9 @@ in
enabled = true; enabled = true;
network_interface = "wg0"; network_interface = "wg0";
meta = node_meta; meta = node_meta;
options = {
"fingerprint.denylist" = "env_aws,env_gce,env_azure";
};
}; };
telemetry = { telemetry = {
publish_allocation_metrics = true; publish_allocation_metrics = true;