Update to 2024-01-04 17:00

2024-01-04 17:00:34 +01:00 · 2024-01-04 17:00:34 +01:00 · 72afb8eda5
parent 9675be207e
commit 72afb8eda5
47 changed files with 65 additions and 57 deletions
--- a/roles/consul_template/defaults/main.yml
+++ b/roles/consul_template/defaults/main.yml
@ -1,11 +1,11 @@
 ---

 # Version of consul-template to install
-consul_tpl_version: 0.35.0
+consul_tpl_version: 0.36.0
 # URL of the archive
 consul_tpl_archive_url: https://releases.hashicorp.com/consul-template/{{ consul_tpl_version }}/consul-template_{{ consul_tpl_version }}_linux_amd64.zip
 # Expected sha256 of the archive
-consul_tpl_archive_sha256: 1b1c9127e8da25b2d7322e6f2aa8e6d946336083999e0fdb321f96ffd447eebd
+consul_tpl_archive_sha256: 9844aebb997b81dd5b58a6ddadbf650eca4b200ccbc2ad680d817528a73c0d3a

 # Root dir where consul-template will be installed
 consul_tpl_root_dir: /opt/consul_template
--- a/roles/documize/tasks/archive_pre.yml
+++ b/roles/documize/tasks/archive_pre.yml
@ -10,7 +10,7 @@

 - name: Backup the database (PostgreSQL)
  command: >
-    /usr/pgsql-15/bin/pg_dump
+    /usr/pgsql-16/bin/pg_dump
    --clean
    --create
    --host={{ documize_db_server }}
--- a/roles/documize/tasks/install.yml
+++ b/roles/documize/tasks/install.yml
@ -5,7 +5,7 @@
    name:
      - tar
      - zstd
-      - postgresql15
+      - postgresql16
  tags: documize

 - name: Download documize
--- a/roles/documize/templates/pre-backup.j2
+++ b/roles/documize/templates/pre-backup.j2
@ -13,14 +13,14 @@ set -eo pipefail
  --add-drop-table {{ documize_db_name | quote }} | zstd -c > "{{ documize_root_dir }}/backup/{{ documize_db_name }}.sql.zst"
 {% elif documize_db_engine == 'postgres' %}
 {% if documize_db_server not in ['127.0.0.1','localhost'] %}
-PGPASSWORD={{ documize_db_pass | quote }} /usr/pgsql-15/bin/pg_dump \
+PGPASSWORD={{ documize_db_pass | quote }} /usr/pgsql-16/bin/pg_dump \
  --clean \
  --create \
  --username={{ documize_db_user | quote }} \
  --host={{ documize_db_server | quote }} \
  {{ documize_db_name | quote }} | \
 {% else %}
-su - postgres -c "/usr/pgsql-15/bin/pg_dump --clean --create {{ documize_db_name | quote }}" | \
+su - postgres -c "/usr/pgsql-16/bin/pg_dump --clean --create {{ documize_db_name | quote }}" | \
 {% endif %}
  zstd -c > "{{ documize_root_dir }}/backup/{{ documize_db_name }}.sql.zst"
 {% endif %}
--- a/roles/funkwhale/tasks/archive_pre.yml
+++ b/roles/funkwhale/tasks/archive_pre.yml
@ -19,7 +19,7 @@

 - name: Archive a database dump
  command: >
-    /usr/pgsql-15/bin/pg_dump
+    /usr/pgsql-16/bin/pg_dump
    --clean
    --create
    --host={{ funkwhale_db_server }}
--- a/roles/funkwhale/templates/pre-backup.sh.j2
+++ b/roles/funkwhale/templates/pre-backup.sh.j2
@ -2,7 +2,7 @@

 set -eo pipefail

-PGPASSWORD={{ funkwhale_db_pass | quote }} /usr/pgsql-15/bin/pg_dump \
+PGPASSWORD={{ funkwhale_db_pass | quote }} /usr/pgsql-16/bin/pg_dump \
  --clean \
  --create \
  --username={{ funkwhale_db_user | quote }} \
--- a/roles/funkwhale/vars/RedHat-7.yml
+++ b/roles/funkwhale/vars/RedHat-7.yml
@ -3,7 +3,7 @@
 funkwhale_packages:
  - gcc
  - git
-  - postgresql15
+  - postgresql16
  - postgresql-devel
  - openldap-devel
  - cyrus-sasl-devel
--- a/roles/funkwhale/vars/RedHat-8.yml
+++ b/roles/funkwhale/vars/RedHat-8.yml
@ -3,7 +3,7 @@
 funkwhale_packages:
  - gcc
  - git
-  - postgresql15
+  - postgresql16
  - postgresql-devel
  - openldap-devel
  - cyrus-sasl-devel
--- a/roles/mailman/tasks/archive_pre.yml
+++ b/roles/mailman/tasks/archive_pre.yml
@ -20,7 +20,7 @@

 - name: Dump the database
  command: >
-    /usr/pgsql-15/bin/pg_dump
+    /usr/pgsql-16/bin/pg_dump
    --clean
    --create
    --host={{ mailman_db_server | quote }}
--- a/roles/mailman/templates/pre-backup.sh.j2
+++ b/roles/mailman/templates/pre-backup.sh.j2
@ -6,7 +6,7 @@ set -eo pipefail
 {% if mailman_db_engine == 'postgres' %}
 {% if mailman_db_server not in ['localhost', '127.0.0.1'] %}
 PGPASSWORD={{ mailman_db_pass | quote }} \
-  /usr/pgsql-15/bin/pg_dump \
+  /usr/pgsql-16/bin/pg_dump \
  --clean \
  --create \
  --username={{ mailman_db_user | quote }} \
@ -15,7 +15,7 @@ PGPASSWORD={{ mailman_db_pass | quote }} \
  {{ mailman_db_name[db] }} | \
  zstd -c > {{ mailman_root_dir }}/backup/{{ mailman_db_name[db] }}.sql.zst
 {% else %}
-su - postgres -c "/usr/pgsql-15/bin/pg_dump --clear {{ mailman_db_name[db] }}" | \
+su - postgres -c "/usr/pgsql-16/bin/pg_dump --clear {{ mailman_db_name[db] }}" | \
 {% endif %}
  zstd -c > {{ mailman_root_dir }}/backup/{{ mailman_db_name[db] }}.sql.zst
 {% else %}
--- a/roles/matrix_synapse/tasks/archive_pre.yml
+++ b/roles/matrix_synapse/tasks/archive_pre.yml
@ -19,7 +19,7 @@

 - name: Archive a database dump
  shell: >
-    /usr/pgsql-15/bin/pg_dump
+    /usr/pgsql-16/bin/pg_dump
    --clean
    --create
    --host={{ synapse_pg_db_server }}
--- a/roles/matrix_synapse/templates/pre-backup.sh.j2
+++ b/roles/matrix_synapse/templates/pre-backup.sh.j2
@ -2,7 +2,7 @@

 set -eo pipefail

-PGPASSWORD='{{ synapse_pg_db_pass }}' /usr/pgsql-15/bin/pg_dump \
+PGPASSWORD='{{ synapse_pg_db_pass }}' /usr/pgsql-16/bin/pg_dump \
  --clean \
  --create \
  --username={{ synapse_pg_db_user }} \
--- a/roles/matrix_synapse/vars/RedHat-7.yml
+++ b/roles/matrix_synapse/vars/RedHat-7.yml
@ -17,7 +17,7 @@ synapse_packages:
  - libtool
  - autoconf
  - automake
-  - postgresql15
+  - postgresql16
  - postgresql-devel
  - libpqxx-devel
  - jemalloc
--- a/roles/matrix_synapse/vars/RedHat-8.yml
+++ b/roles/matrix_synapse/vars/RedHat-8.yml
@ -17,7 +17,7 @@ synapse_packages:
  - libtool
  - autoconf
  - automake
-  - postgresql15
+  - postgresql16
  - postgresql-devel
  - jemalloc
  - python39-pip
--- a/roles/matrix_synapse/vars/RedHat-9.yml
+++ b/roles/matrix_synapse/vars/RedHat-9.yml
@ -17,7 +17,7 @@ synapse_packages:
  - libtool
  - autoconf
  - automake
-  - postgresql15
+  - postgresql16
  - postgresql-devel
  - jemalloc
  - python3-pip
--- a/roles/metabase/tasks/archive_pre.yml
+++ b/roles/metabase/tasks/archive_pre.yml
@ -39,7 +39,7 @@

 - name: Dump the database
  shell: >
-    /usr/pgsql-15/bin/pg_dump
+    /usr/pgsql-16/bin/pg_dump
    --clean
    --create
    --host={{ metabase_db_server }}
--- a/roles/metabase/tasks/install.yml
+++ b/roles/metabase/tasks/install.yml
@ -98,7 +98,7 @@
 - when: metabase_db_engine == 'postgres'
  block:
    - name: Install postgresql client
-      package: name=postgresql15
+      package: name=postgresql16

    - name: Create postgres user
      postgresql_user:
--- a/roles/metabase/templates/pre-backup.j2
+++ b/roles/metabase/templates/pre-backup.j2
@ -13,7 +13,7 @@ set -eo pipefail
  --quick --single-transaction \
  --add-drop-table {{ metabase_db_name | quote }} | zstd -c > {{ metabase_root_dir }}/backup/{{ metabase_db_name }}.sql.zst
 {% elif metabase_db_engine == 'postgres' %}
-PGPASSWORD={{ metabase_db_pass | quote }} /usr/pgsql-15/bin/pg_dump \
+PGPASSWORD={{ metabase_db_pass | quote }} /usr/pgsql-16/bin/pg_dump \
  --clean \
  --create \
  --username={{ metabase_db_user }} \
--- a/roles/miniflux/tasks/archive_pre.yml
+++ b/roles/miniflux/tasks/archive_pre.yml
@ -9,12 +9,12 @@
  tags: miniflux

 - name: Install pg_dump
-  package: name=postgresql15
+  package: name=postgresql16
  tags: miniflux

 - name: Backup the database
  command: >
-    /usr/pgsql-15/bin/pg_dump
+    /usr/pgsql-16/bin/pg_dump
    --clean
    --create
    --host={{ miniflux_db_server }}
--- a/roles/miniflux/tasks/install.yml
+++ b/roles/miniflux/tasks/install.yml
@ -5,7 +5,7 @@
    name:
      - tar
      - zstd
-      - postgresql15
+      - postgresql16
  tags: miniflux

 - name: Download miniflux
--- a/roles/miniflux/templates/pre-backup.j2
+++ b/roles/miniflux/templates/pre-backup.j2
@ -2,7 +2,7 @@

 set -eo pipefail

-PGPASSWORD='{{ miniflux_db_pass }}' /usr/pgsql-15/bin/pg_dump \
+PGPASSWORD='{{ miniflux_db_pass }}' /usr/pgsql-16/bin/pg_dump \
  --clean \
  --create \
  --username={{ miniflux_db_user | quote }} \
--- a/roles/n8n/tasks/archive_pre.yml
+++ b/roles/n8n/tasks/archive_pre.yml
@ -22,7 +22,7 @@

 - name: Backup the database
  command: >
-    /usr/pgsql-15/bin/pg_dump
+    /usr/pgsql-16/bin/pg_dump
    --format=custom
    --clean
    --create
--- a/roles/n8n/tasks/install.yml
+++ b/roles/n8n/tasks/install.yml
@ -9,7 +9,7 @@
      - make
      - sqlite-devel
      - python3
-      - postgresql15
+      - postgresql16
  tags: n8n

 - name: Wipe node_module on upgrade
--- a/roles/n8n/templates/pre-backup.sh.j2
+++ b/roles/n8n/templates/pre-backup.sh.j2
@ -2,7 +2,7 @@

 set -eo pipefail

-PGPASSWORD='{{ n8n_db_pass }}' /usr/pgsql-15/bin/pg_dump \
+PGPASSWORD='{{ n8n_db_pass }}' /usr/pgsql-16/bin/pg_dump \
  --format=custom \
  --clean \
  --create \
--- a/roles/nomad/tasks/install.yml
+++ b/roles/nomad/tasks/install.yml
@ -1,5 +1,9 @@
 ---

+- name: Install general packages
+  package: name={{ nomad_packages }}
+  tags: nomad
+
 - name: Install task driver packages
  package: name={{ nomad_task_driver_packages[item] }}
  loop: "{{ nomad_enabled_task_drivers }}"
--- a/roles/nomad/vars/RedHat.yml
+++ b/roles/nomad/vars/RedHat.yml
@ -5,6 +5,7 @@ nomad_packages:
  - zstd
  - unzip
  - acl
+  - git

 # Note : there's no package for the Docker driver as it'll pull the docker role already
 nomad_task_driver_packages:
--- a/roles/odoo/tasks/archive_pre.yml
+++ b/roles/odoo/tasks/archive_pre.yml
@ -7,7 +7,7 @@
 - name: Install postgresql client
  package:
    name:
-      - postgresql15
+      - postgresql16
  tags: odoo

 - name: Stop the server during upgrade
@ -29,7 +29,7 @@

 - name: Dump the database
  command: >
-    /usr/pgsql-15/bin/pg_dump
+    /usr/pgsql-16/bin/pg_dump
    --clean
    --create
    --host={{ odoo_db_server | quote }}
--- a/roles/odoo/templates/pre-backup.sh.j2
+++ b/roles/odoo/templates/pre-backup.sh.j2
@ -2,7 +2,7 @@

 set -eo pipefail

-PGPASSWORD={{ odoo_db_pass | quote }} /usr/pgsql-15/bin/pg_dump \
+PGPASSWORD={{ odoo_db_pass | quote }} /usr/pgsql-16/bin/pg_dump \
  --format=custom \
  --clean \
  --username={{ odoo_db_user }} \
--- a/roles/odoo/vars/RedHat-8.yml
+++ b/roles/odoo/vars/RedHat-8.yml
@ -12,7 +12,7 @@ odoo_packages:
  #- nodejs-less
  - tar
  - zstd
-  - postgresql15 # for pg_dump
+  - postgresql16 # for pg_dump
  - git
  - acl

--- a/roles/paperless_ng/tasks/archive_pre.yml
+++ b/roles/paperless_ng/tasks/archive_pre.yml
@ -7,7 +7,7 @@
 - name: Install postgresql client
  package:
    name:
-      - postgresql15
+      - postgresql16
  tags: ged

 - name: Archive previous version
@ -25,7 +25,7 @@

 - name: Dump the database
  command: >
-    /usr/pgsql-15/bin/pg_dump
+    /usr/pgsql-16/bin/pg_dump
    --clean
    --create 
    --host={{ paperless_db_server | quote }}
--- a/roles/paperless_ng/templates/pre-backup.j2
+++ b/roles/paperless_ng/templates/pre-backup.j2
@ -2,7 +2,7 @@

 set -eo pipefail

-PGPASSWORD='{{ paperless_db_pass }}' /usr/pgsql-15/bin/pg_dump \
+PGPASSWORD='{{ paperless_db_pass }}' /usr/pgsql-16/bin/pg_dump \
  --clean \
  --create \
  --username={{ paperless_db_user | quote }} \
--- a/roles/penpot/tasks/archive_pre.yml
+++ b/roles/penpot/tasks/archive_pre.yml
@ -25,12 +25,12 @@
  tags: penpot

 - name: Install postgresql client
-  package: name=postgresql15
+  package: name=postgresql16
  tags: penpot

 - name: Dump the database
  command: >
-    /usr/pgsql-15/bin/pg_dump
+    /usr/pgsql-16/bin/pg_dump
    --clean
    --create
    --host={{ penpot_db_server | quote }}
--- a/roles/penpot/templates/pre-backup.j2
+++ b/roles/penpot/templates/pre-backup.j2
@ -2,7 +2,7 @@

 set -eo pipefail

-PGPASSWORD='{{ penpot_db_pass }}' /usr/pgsql-15/bin/pg_dump \
+PGPASSWORD='{{ penpot_db_pass }}' /usr/pgsql-16/bin/pg_dump \
  --clean \
  --create \
  --username={{ penpot_db_user | quote }} \
--- a/roles/pgadmin4/templates/config_local.py.j2
+++ b/roles/pgadmin4/templates/config_local.py.j2
@ -13,7 +13,7 @@ SHOW_GRAVATAR_IMAGE=False
 SECURITY_EMAIL_SENDER='no-reply@{{ ansible_domain }}'
 UPGRADE_CHECK_ENABLED=False
 DEFAULT_BINARY_PATHS = {
-  "pg": "/usr/pgsql-15/bin/"
+  "pg": "/usr/pgsql-16/bin/"
 }
 {% if pga_auth | length >= 1 %}
 AUTHENTICATION_SOURCES=['{{ pga_auth | join('\',\'') }}']
--- a/roles/pgadmin4/vars/RedHat-7.yml
+++ b/roles/pgadmin4/vars/RedHat-7.yml
@ -4,7 +4,7 @@ pgadmin4_packages:
  - gcc
  - postgresql
  - postgresql-devel
-  - postgresql15
+  - postgresql16
  - python3-virtualenv
  - python3-pip
  - python-setuptools # Needed for pip install expect
--- a/roles/pgadmin4/vars/RedHat-8.yml
+++ b/roles/pgadmin4/vars/RedHat-8.yml
@ -4,7 +4,7 @@ pgadmin4_packages:
  - gcc
  - postgresql
  - postgresql-devel
-  - postgresql15
+  - postgresql16
  - python3-virtualenv
  - python3-pip
  - python3-setuptools # Needed for pip install expect
--- a/roles/repo_base/templates/postgresql-client.repo.j2
+++ b/roles/repo_base/templates/postgresql-client.repo.j2
@ -1,9 +1,9 @@
 [postgresql-client]
-baseurl = https://download.postgresql.org/pub/repos/yum/15/redhat/rhel-$releasever-$basearch
+baseurl = https://download.postgresql.org/pub/repos/yum/16/redhat/rhel-$releasever-$basearch
 gpgcheck = 1
-gpgkey = https://download.postgresql.org/pub/repos/yum/RPM-GPG-KEY-PGDG-15
+gpgkey = https://download.postgresql.org/pub/repos/yum/keys/PGDG-RPM-GPG-KEY-RHEL
 name = PostgreSQL Client
-includepkgs = postgresql15 postgresql15-libs
+includepkgs = postgresql16 postgresql16-libs
 {% if ansible_os_family == 'RedHat' and ansible_distribution_major_version is version('8', '>=') %}
 # Workaround a bug in dnf which would make the default module mask packages from postgres repo
 module_hotfixes = true
--- a/roles/repo_postgresql/templates/postgresql.repo.j2
+++ b/roles/repo_postgresql/templates/postgresql.repo.j2
@ -2,7 +2,7 @@
 [postgresql]
 baseurl = https://download.postgresql.org/pub/repos/yum/{{ pg_version }}/redhat/rhel-$releasever-$basearch
 gpgcheck = 1
-gpgkey = https://download.postgresql.org/pub/repos/yum/RPM-GPG-KEY-PGDG-{{ pg_version }}
+gpgkey = https://download.postgresql.org/pub/repos/yum/keys/PGDG-RPM-GPG-KEY-RHEL
 name = PostgreSQL
 {% if ansible_os_family == 'RedHat' and ansible_distribution_major_version is version('8', '>=') %}
 # Workaround a bug in dnf which would make the default module mask packages from postgres repo
@ -13,7 +13,7 @@ exclude = python3-psycopg2
 [postgresql-common]
 baseurl = https://download.postgresql.org/pub/repos/yum/common/redhat/rhel-$releasever-$basearch
 gpgcheck = 1
-gpgkey = https://download.postgresql.org/pub/repos/yum/RPM-GPG-KEY-PGDG
+gpgkey = https://download.postgresql.org/pub/repos/yum/keys/PGDG-RPM-GPG-KEY-RHEL
 name = PostgreSQL Common
 exclude = python3-psycopg2,libpq5
 {% endif %}
--- a/roles/squash_tm/tasks/archive_pre.yml
+++ b/roles/squash_tm/tasks/archive_pre.yml
@ -43,11 +43,11 @@
 - when: squashtm_db_engine == 'postgres'
  block:
    - name: Install pg_dump
-      package: name=postgresql15
+      package: name=postgresql16

    - name: Dump the database
      command: >
-        /usr/pgsql-15/bin/pg_dump
+        /usr/pgsql-16/bin/pg_dump
          --clean
          --create
          --host={{ squashtm_db_server | quote }}
--- a/roles/squash_tm/templates/pre-backup.j2
+++ b/roles/squash_tm/templates/pre-backup.j2
@ -5,7 +5,7 @@ set -eo pipefail
 {% if squashtm_db_engine == 'postgres' %}
 {% if squashtm_db_server not in ['localhost', '127.0.0.1'] %}
 PGPASSWORD={{ squashtm_db_pass | quote }} \
-  /usr/pgsql-15/bin/pg_dump \
+  /usr/pgsql-16/bin/pg_dump \
  --clean \
  --create \
  --username={{ squashtm_db_user | quote }} \
@ -13,7 +13,7 @@ PGPASSWORD={{ squashtm_db_pass | quote }} \
  --port={{ squashtm_db_port }} \
  {{ squashtm_db_name }} | \
 {% else %}
-su - postgres -c "/usr/pgsql-15/bin/pg_dump --clear {{ squashtm_db_name }}" | \
+su - postgres -c "/usr/pgsql-16/bin/pg_dump --clear {{ squashtm_db_name }}" | \
 {% endif %}
  zstd -c > {{ squashtm_root_dir }}/backup/{{ squashtm_db_name }}.sql.zst
 {% else %}
--- a/roles/squid/files/acl/software_various.domains
+++ b/roles/squid/files/acl/software_various.domains
@ -402,3 +402,6 @@ download.copr.fedorainfracloud.org
 update.ixsystems.com
 update.freenas.org
 apt.tn.ixsystems.com
+
+# Seafile
+s3.eu-central-1.amazonaws.com
--- a/roles/taiga/tasks/archive_pre.yml
+++ b/roles/taiga/tasks/archive_pre.yml
@ -11,7 +11,7 @@
 - name: Install postgresql client
  package:
    name:
-      - postgresql15
+      - postgresql16
  tags: taiga

 - name: Stop services during upgrade
@ -39,7 +39,7 @@

 - name: Dump the database
  command: >
-    /usr/pgsql-15/bin/pg_dump
+    /usr/pgsql-16/bin/pg_dump
    --clean
    --create
    --host={{ taiga_db_server | quote }}
--- a/roles/taiga/templates/pre-backup.j2
+++ b/roles/taiga/templates/pre-backup.j2
@ -2,7 +2,7 @@

 set -eo pipefail

-PGPASSWORD='{{ taiga_db_pass }}' /usr/pgsql-15/bin/pg_dump \
+PGPASSWORD='{{ taiga_db_pass }}' /usr/pgsql-16/bin/pg_dump \
  --clean \
  --create \
  --username={{ taiga_db_user | quote }} \
--- a/roles/taiga/vars/RedHat-8.yml
+++ b/roles/taiga/vars/RedHat-8.yml
@ -22,7 +22,7 @@ taiga_packages:
  - curl
  - tmux
  - gettext
-  - postgresql15
+  - postgresql16
  - postgresql-devel
  - libpq-devel
  - libxml2-devel
--- a/roles/wapt_server/templates/pre-backup.sh.j2
+++ b/roles/wapt_server/templates/pre-backup.sh.j2
@ -2,7 +2,7 @@

 set -eo pipefail

-PGPASSWORD={{ wapt_db_pass | quote }} /usr/pgsql-15/bin/pg_dump \
+PGPASSWORD={{ wapt_db_pass | quote }} /usr/pgsql-16/bin/pg_dump \
  --clean \
  --create \
  --username={{ wapt_db_user | quote }} \
--- a/roles/wapt_server/vars/RedHat-7.yml
+++ b/roles/wapt_server/vars/RedHat-7.yml
@ -3,5 +3,5 @@
 wapt_packages:
  - tis-waptserver
  - tis-waptsetup
-  - postgresql15
+  - postgresql16
  - python-psycopg2 # Needed to manage PG with ansible
--- a/roles/wapt_server/vars/RedHat-8.yml
+++ b/roles/wapt_server/vars/RedHat-8.yml
@ -3,5 +3,5 @@
 wapt_packages:
  - tis-waptserver
  - tis-waptsetup
-  - postgresql15
+  - postgresql16
  - python3-psycopg2 # Needed to manage PG with ansible