tjtoml / mattermost-ansible Goto Github PK

My name is Jason Blais and I'm a product manager for the Mattermost open source project.

Mattermost is moving to new APIv4 endpoints, which will allow for more powerful integrations and server interaction.

As part of this move, we will be moving the WebSocket endpoint to APIv4 in Q3 of 2017 (tentatively scheduled for July 16, 2017 release). This will result in a breaking change for deployments using a reverse proxy.

For those configuring NGINX proxy, just a single one-line change is required, replacing the location /api/v3/users/websocket { line with location ~ /api/v[0-9]+/(users/)?websocket$ { in the /etc/nginx/sites-available/mattermost NGINX configuration file. We've noted this in our documentation.

I'm opening an issue so we can discuss if any changes are needed for the Ansible package, as we weren't sure what kind of configuration is recommended on your end.

This might be a problem with my config, but I can verify with dig -x that reverse DNS is set up for our FQDN.

Steps to reproduce:

*Create hosts file with IP (not url) of server
*Modify db password in play.yml and cert_email_address
*Run targeting Amazon EC2 Ubuntu host

Error: Error creating new authz :: Name does not end in a public suffix

3.5.0 is the latest release. https://about.mattermost.com/download/

Hi there,

I've got some spare time so I can manage your repository as you requested. You've got somes pretty awesome PR like #26 and I'ld be gratefull to include them in Master.

Best Regards,
Luclis.

Hi,

I notice the nginx includes SSLv3 in the list of allowed protocols. This should be removed.

https://security.googleblog.com/2014/10/this-poodle-bites-exploiting-ssl-30.html

Thanks.

@tjtoml : I could not make letsencrypt work from a private cloud because of letsencrypt limitations to public DNS names and IP networks.
I managed to write a role that uses ansible's crypto modules and creates a self-signed certificate.
See https://docs.ansible.com/ansible/2.4/list_of_crypto_modules.html
It installs python crypto requirements.
You can switch between both options with selfsigned_ssl_cert: true as a variable in the playbook. This enables my new role, disables letsencrypt and cron roles, and adapts nginx config from template.
Now it works for me. Are you interested in a pull request ?

Hey there I'm new to Devops and what not , but I've been playing around with docker, ubuntu, etc I would like to become a maintainer for this project. Might need to learn the ins & outs first, but open to learn.How can I start ?

Thanks

Hey Tyler,

Really nice work!

Would you be up for sharing some info on your project so we can promote it?

Also, would love to have you hang out with the Mattermost community on our server, if you're not there already. We have an installers and images where we can intro you to other folks doing great work like yours!

Ian

Currently iptables is completely disabled for RHEL 6 because I don't like dealing with iptables. If someone could fix that, it would be just great.

Add Fedora 24 support

Hey Tyler,

Here at Openbook we just set up a Mattermost server in less than an hour thanks to your work.

We thought would be nice to show some appreciation!

Thanks for making this available for everyone, you rock!