nomad
/
unifi
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Update to 8.0.28

This commit is contained in:
Daniel Berteaud 2024-01-29 20:28:01 +01:00
parent 32455660c7
commit 7af40608d4
5 changed files with 13 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
example/images/unifi/Dockerfile
View File

@ -1,6 +1,6 @@
FROM danielberteaud/java:17.24.1-10 AS builder
ARG UNIFI_VERSION=8.0.26
ARG UNIFI_VERSION=8.0.28
RUN set -euxo pipefail &&\
apk --no-cache add curl ca-certificates unzip &&\

8
example/unifi.nomad.hcl
View File

@ -58,7 +58,10 @@ job "unifi" {
"traefik.http.routers.unifi.entrypoints=https",
"traefik.http.routers.unifi.rule=Host(`unifi.example.org`)",
"traefik.http.middlewares.csp-unifi.headers.contentsecuritypolicy=default-src 'self';font-src 'self' data:;img-src 'self' data:;script-src 'self' 'unsafe-inline' 'unsafe-eval';style-src 'self' 'unsafe-inline';",
"traefik.http.routers.unifi.middlewares=security-headers@file,forward-proto@file,inflight-std@file,hsts@file,compression@file,csp-unifi",
"traefik.http.middlewares.unifi-inflight.inflightreq.amount=300",
"traefik.http.middlewares.unifi-rate-limit.ratelimit.average=100",
"traefik.http.middlewares.unifi-rate-limit.ratelimit.burst=200",
"traefik.http.routers.unifi.middlewares=security-headers@file,unifi-rate-limit,forward-proto@file,inflight-std@file,unifi-inflight,hsts@file,compression@file,csp-unifi",
"traefik.enable=true",
@ -250,7 +253,7 @@ _EOF
driver = "docker"
config {
image = "danielberteaud/unifi:8.0.26-3"
image = "danielberteaud/unifi:8.0.28-1"
volumes = [
"local/init-system.properties.sh:/entrypoint.d/10-init-system.properties.sh"
]
@ -285,6 +288,7 @@ _EOF
env {
TMPDIR = "/local/tmp"
}
# Use a template block instead of env {} so we can fetch values from vault

2
images/unifi/Dockerfile
View File

@ -1,6 +1,6 @@
FROM [[ .docker.repo ]][[ .docker.base_images.java17.image ]] AS builder
ARG UNIFI_VERSION=8.0.26
ARG UNIFI_VERSION=[[ .unifi.controller.version ]]
RUN set -euxo pipefail &&\
apk --no-cache add curl ca-certificates unzip &&\

1
unifi.nomad.hcl
View File

@ -126,6 +126,7 @@ _EOF
env {
[[ template "common/proxy_env" . ]]
TMPDIR = "/local/tmp"
}
[[ template "common/file_env" $c ]]

5
variables.yml
View File

@ -17,8 +17,11 @@ unifi:
# The driver to use (docker or podman)
driver: docker
# Version of the controller to deploy
version: 8.0.28
# The image for the controller
image: '[[ .docker.repo ]]unifi:8.0.26-3'
image: '[[ .docker.repo ]]unifi:[[ .unifi.controller.version ]]-1'
vault:
policies: