Update to 8.0.28
This commit is contained in:
parent
32455660c7
commit
7af40608d4
|
@ -1,6 +1,6 @@
|
||||||
FROM danielberteaud/java:17.24.1-10 AS builder
|
FROM danielberteaud/java:17.24.1-10 AS builder
|
||||||
|
|
||||||
ARG UNIFI_VERSION=8.0.26
|
ARG UNIFI_VERSION=8.0.28
|
||||||
|
|
||||||
RUN set -euxo pipefail &&\
|
RUN set -euxo pipefail &&\
|
||||||
apk --no-cache add curl ca-certificates unzip &&\
|
apk --no-cache add curl ca-certificates unzip &&\
|
||||||
|
|
|
@ -58,7 +58,10 @@ job "unifi" {
|
||||||
"traefik.http.routers.unifi.entrypoints=https",
|
"traefik.http.routers.unifi.entrypoints=https",
|
||||||
"traefik.http.routers.unifi.rule=Host(`unifi.example.org`)",
|
"traefik.http.routers.unifi.rule=Host(`unifi.example.org`)",
|
||||||
"traefik.http.middlewares.csp-unifi.headers.contentsecuritypolicy=default-src 'self';font-src 'self' data:;img-src 'self' data:;script-src 'self' 'unsafe-inline' 'unsafe-eval';style-src 'self' 'unsafe-inline';",
|
"traefik.http.middlewares.csp-unifi.headers.contentsecuritypolicy=default-src 'self';font-src 'self' data:;img-src 'self' data:;script-src 'self' 'unsafe-inline' 'unsafe-eval';style-src 'self' 'unsafe-inline';",
|
||||||
"traefik.http.routers.unifi.middlewares=security-headers@file,forward-proto@file,inflight-std@file,hsts@file,compression@file,csp-unifi",
|
"traefik.http.middlewares.unifi-inflight.inflightreq.amount=300",
|
||||||
|
"traefik.http.middlewares.unifi-rate-limit.ratelimit.average=100",
|
||||||
|
"traefik.http.middlewares.unifi-rate-limit.ratelimit.burst=200",
|
||||||
|
"traefik.http.routers.unifi.middlewares=security-headers@file,unifi-rate-limit,forward-proto@file,inflight-std@file,unifi-inflight,hsts@file,compression@file,csp-unifi",
|
||||||
|
|
||||||
|
|
||||||
"traefik.enable=true",
|
"traefik.enable=true",
|
||||||
|
@ -250,7 +253,7 @@ _EOF
|
||||||
driver = "docker"
|
driver = "docker"
|
||||||
|
|
||||||
config {
|
config {
|
||||||
image = "danielberteaud/unifi:8.0.26-3"
|
image = "danielberteaud/unifi:8.0.28-1"
|
||||||
volumes = [
|
volumes = [
|
||||||
"local/init-system.properties.sh:/entrypoint.d/10-init-system.properties.sh"
|
"local/init-system.properties.sh:/entrypoint.d/10-init-system.properties.sh"
|
||||||
]
|
]
|
||||||
|
@ -285,6 +288,7 @@ _EOF
|
||||||
env {
|
env {
|
||||||
|
|
||||||
|
|
||||||
|
TMPDIR = "/local/tmp"
|
||||||
}
|
}
|
||||||
|
|
||||||
# Use a template block instead of env {} so we can fetch values from vault
|
# Use a template block instead of env {} so we can fetch values from vault
|
||||||
|
|
|
@ -1,6 +1,6 @@
|
||||||
FROM [[ .docker.repo ]][[ .docker.base_images.java17.image ]] AS builder
|
FROM [[ .docker.repo ]][[ .docker.base_images.java17.image ]] AS builder
|
||||||
|
|
||||||
ARG UNIFI_VERSION=8.0.26
|
ARG UNIFI_VERSION=[[ .unifi.controller.version ]]
|
||||||
|
|
||||||
RUN set -euxo pipefail &&\
|
RUN set -euxo pipefail &&\
|
||||||
apk --no-cache add curl ca-certificates unzip &&\
|
apk --no-cache add curl ca-certificates unzip &&\
|
||||||
|
|
|
@ -126,6 +126,7 @@ _EOF
|
||||||
|
|
||||||
env {
|
env {
|
||||||
[[ template "common/proxy_env" . ]]
|
[[ template "common/proxy_env" . ]]
|
||||||
|
TMPDIR = "/local/tmp"
|
||||||
}
|
}
|
||||||
|
|
||||||
[[ template "common/file_env" $c ]]
|
[[ template "common/file_env" $c ]]
|
||||||
|
|
|
@ -17,8 +17,11 @@ unifi:
|
||||||
# The driver to use (docker or podman)
|
# The driver to use (docker or podman)
|
||||||
driver: docker
|
driver: docker
|
||||||
|
|
||||||
|
# Version of the controller to deploy
|
||||||
|
version: 8.0.28
|
||||||
|
|
||||||
# The image for the controller
|
# The image for the controller
|
||||||
image: '[[ .docker.repo ]]unifi:8.0.26-3'
|
image: '[[ .docker.repo ]]unifi:[[ .unifi.controller.version ]]-1'
|
||||||
|
|
||||||
vault:
|
vault:
|
||||||
policies:
|
policies:
|
||||||
|
|
Loading…
Reference in New Issue