diff options
Diffstat (limited to 'roles')
| -rw-r--r-- | roles/elevate/media/defaults/main.yml | 2 | ||||
| -rw-r--r-- | roles/elevate/media/tasks/nextcloud.yml | 7 | ||||
| -rw-r--r-- | roles/elevate/media/templates/nextcloud-nginx.conf.j2 | 1 | ||||
| -rw-r--r-- | roles/mysql/tasks/main.yml | 2 |
4 files changed, 8 insertions, 4 deletions
diff --git a/roles/elevate/media/defaults/main.yml b/roles/elevate/media/defaults/main.yml index 3ffd2d89..78107c42 100644 --- a/roles/elevate/media/defaults/main.yml +++ b/roles/elevate/media/defaults/main.yml @@ -1,5 +1,5 @@ --- -nextcloud_version: 15 +nextcloud_version: 17.0.3 nextcloud_hostnames: - wolke.example.com diff --git a/roles/elevate/media/tasks/nextcloud.yml b/roles/elevate/media/tasks/nextcloud.yml index fbb6d9b6..4dcedf31 100644 --- a/roles/elevate/media/tasks/nextcloud.yml +++ b/roles/elevate/media/tasks/nextcloud.yml @@ -29,8 +29,11 @@ state: present name: nextcloud tag: "{{ inventory_hostname }}" - path: /srv/nextcloud/docker/ - force: "{{ nextcloud_dockerfile.changed }}" + source: build + build: + path: /srv/nextcloud/docker/ + pull: no + force_source: "{{ nextcloud_dockerfile.changed }}" ### TODO: set mysql variables: ### <snip> diff --git a/roles/elevate/media/templates/nextcloud-nginx.conf.j2 b/roles/elevate/media/templates/nextcloud-nginx.conf.j2 index 16d510eb..3033d449 100644 --- a/roles/elevate/media/templates/nextcloud-nginx.conf.j2 +++ b/roles/elevate/media/templates/nextcloud-nginx.conf.j2 @@ -25,6 +25,7 @@ server { ssl_certificate_key /var/lib/acme/live/{{ nextcloud_hostnames[0] }}/privkey; include snippets/hsts.conf; + add_header X-Frame-Options "SAMEORIGIN"; add_header X-Content-Type-Options nosniff; add_header X-XSS-Protection "1; mode=block"; add_header X-Robots-Tag none; diff --git a/roles/mysql/tasks/main.yml b/roles/mysql/tasks/main.yml index 22b37fcf..402cb55a 100644 --- a/roles/mysql/tasks/main.yml +++ b/roles/mysql/tasks/main.yml @@ -7,7 +7,7 @@ apt: name: - "{{ mysql_pkg_name }}" - - python-mysqldb + - python-pymysql state: present force: yes |