71 Commits

Author	SHA1	Message	Date
Johannes Bornhold	fe0e0cdce4	fix(univention-management-stack): Use postgresql service for notifications-api	2023-09-14 15:17:58 +02:00
Johannes Bornhold	a74d662404	fix(univention-management-stack): Add Helm charts	2023-09-14 15:17:58 +02:00
Johannes Bornhold	471a2fa262	fix(univention-management-stack): Add switch "univentionManagementStack.enabled"	2023-09-14 14:58:22 +02:00
Dominik Kaminski	a799db03c4	fix(services): Explicitly set securityContexts	2023-09-13 19:33:47 +02:00
Dominik Kaminski	d725b93798	fix(element): Update opendesk element version to 2.0.1	2023-09-13 19:33:47 +02:00
Dominik Kaminski	e1070eeb06	fix(services): Update Postfix to 2.0.2 fixing security gaining	2023-09-13 19:33:47 +02:00
Dominik Kaminski	c7fc187f14	fix(helmfile): Update images and use a tag and digest together	2023-09-13 19:33:47 +02:00
Dominik Kaminski	89ac783dc3	chore(collabora): Quote strings	2023-09-13 19:33:47 +02:00
Dominik Kaminski	882f1fbc93	fix(element): Improve default container security settings	2023-09-13 19:33:43 +02:00
Dominik Kaminski	b5583caec1	fix(collabora): Update Ingress annotations and set securityContext	2023-09-13 16:32:35 +02:00
Dominik Kaminski	ed7e5e428e	fix(jitsi): Update jitsi to 1.5.1 and fix prosody image	2023-09-06 19:09:59 +02:00
Dominik Kaminski	a6fa846afc	fix(services): Fix capabilities of postifix	2023-09-05 21:50:31 +02:00
Dominik Kaminski	4380e78981	fix(nextcloud): Fix yamllint disable comment	2023-09-05 20:31:32 +02:00
Dominik Kaminski	be82243966	fix(services): Fix OCI registry address of postgresql, mariadb	2023-09-05 20:15:03 +02:00
Dominik Kaminski	f9886448b6	fix(helmfile): Add imagePullPolicy default env variable	2023-09-05 19:59:18 +02:00
Dominik Kaminski	1ef4a861ac	fix(services): Disable https redirect in istio to fix cert-manager issues	2023-09-05 18:48:18 +02:00
Dominik Kaminski	3b90533063	fix(keycloak): Improve default security settings	2023-09-05 18:47:28 +02:00
Dominik Kaminski	1349181d80	fix(jitsi): Update chart to 1.4.2 with improved security and fixed change on each deployment	2023-09-05 18:47:04 +02:00
Dominik Kaminski	ca4b1da84f	chore(helmfile): Fix linting errors for yamllint	2023-09-03 22:26:26 +02:00
Dominik Kaminski	9d7866480c	fix(services): Update clamav to 4.0.0, redis to 18.0.0, postgresql to 2.0.2, mariadb to 2.0.2 and use OCI registries	2023-09-03 21:53:09 +02:00
Dominik Kaminski	9a6d2409a6	fix(services): Enable security context and use default increased security settings	2023-09-03 21:51:33 +02:00
Dominik Kaminski	f758293241	fix(services): Replace image digest by tag	2023-09-03 21:49:39 +02:00
Dominik Kaminski	6321ff50a0	fix(services): Fix image registry templates for postfix	2023-09-03 21:46:40 +02:00
Dominik Kaminski	5fbf86b6bc	fix(services): Set readOnlyRootFilesystem to true on master	2023-09-03 21:44:42 +02:00
Dominik Kaminski	6e68f7f28c	fix(nextcloud): Add support for up to 4G large upload for Ingress NGINX and NGINX Inc. Ingress	2023-09-03 21:43:55 +02:00
Dominik Kaminski	41d40c9b73	fix(nextcloud): Use clamav-icap when clamavDistributed is activated	2023-09-03 21:43:00 +02:00
Dominik Kaminski	cef11acbae	fix(nextcloud): Rename sovereign-workplace-nextcloud-bootstrap to opendesk-nextcloud-bootstrap and use OCI	2023-09-03 21:40:45 +02:00
Dominik Kaminski	6e5ef639c2	fix(collabora): Add websocket support for NGINX Inc. Ingress	2023-09-03 21:40:06 +02:00
Thorsten Rossner	39565c7cfd	fix(open-xchange): Update images and Helm chart	2023-08-31 10:56:00 +00:00
Thorsten Rossner	387bd8715c	fix(jitsi): Update Jitsi Helm chart to set the user's display name as default	2023-08-30 17:06:57 +00:00
Thorsten Rossner	3d4d45f711	fix(xwiki): Theming and language of central navigation	2023-08-30 09:48:20 +00:00
Dominik Henneke	7f7eae8f99	fix(element): Apply the global theme to Element	2023-08-29 15:39:37 +00:00
Thorsten Rossner	a14c42f6ed	fix(ci): Add central branding information	2023-08-29 14:27:52 +00:00
Dominik Kaminski	7491582c28	fix(jitsi): Allow configuration of LoadBalancer status field for patchJVB job	2023-08-16 15:21:49 +02:00
Dominik Kaminski	06dc7a115d	fix(open-xchange): Explicitly disable core-ui-middleware ingress	2023-08-16 10:36:14 +02:00
Dominik Kaminski	d8adcc463a	fix(keycloak): Increase proxy-buffer-size for ingress-nginx	2023-08-16 09:33:27 +02:00
Dominik Kaminski	4c21fd2286	fix(helmfile): Replace bitnami repositories with OCI	2023-08-15 11:32:03 +02:00
Dominik Kaminski	5788323621	feat(helmfile): Implement private image/chart registry variables	2023-08-15 11:32:03 +02:00
Dominik Kaminski	de257893d4	fix(jitsi): Update support for NodePort setups with different ingress/egress ips	2023-08-14 18:50:42 +02:00
Thomas Kaltenbrunner	390f2dee52	fix(open-xchange): Bump sovereign-workplace-open-xchange-bootstrap to 1.3.1	2023-08-14 11:18:35 +02:00
Thomas Kaltenbrunner	53796dae66	fix(open-xchange): Bump dovecot and sovereign-workplace-open-xchange-bootstrap to 1.3.0 with image digest support	2023-08-14 11:18:33 +02:00
Thomas Kaltenbrunner	2d376b35ed	chore(xwiki): Remove xwiki init	2023-08-14 11:17:29 +02:00
Dominik Kaminski	5f0ca92a05	feat(element): Add element component	2023-08-14 08:48:42 +02:00
Thorsten Rossner	53948eae76	fix(open-xchange): Functional mailboxes auth settings update in AppSuite and Dovecot	2023-08-14 06:42:59 +00:00
Thorsten Rossner	b8a8932221	fix(keycloak): Improve digest image pinning	2023-08-11 09:30:37 +00:00
Dominik Kaminski	3a0b246f83	fix(jitsi): Fix identifiers in resources	2023-08-11 09:58:10 +02:00
Thorsten Rossner	27ce71554d	fix(keycloak): Keycloak extensions sha256 image pinning, includes fix for failing keycloak extension handler on unavailable SMTP relay.	2023-08-10 13:41:13 +00:00
Thomas Kaltenbrunner	2033c76d81	fix(services): Remove fqdn from dovecot in postfix	2023-08-10 10:39:04 +00:00
Dominik Kaminski	76f7962d03	chore(ci): Update YAML files to comply with YAMLLINT	2023-08-08 22:01:36 +02:00
Thorsten Rossner	8425c10b18	fix(xwiki): Remove init job as XWiki now does the required bootstrapping internally; Restartability works now as expected	2023-08-07 18:59:21 +00:00