Commit Graph
22 Commits
Author SHA1 Message Date
BastienandGitHub bfe9492509 ⬆️(chore) bump keycloak to 26.7.1 (#776) 2026-08-08 10:00:53 +02:00
BastienandGitHub e16ff27abd ⬆️(keycloak) upgrade theme to 2.3.4 (#732) 2026-06-30 11:01:36 +02:00
BastienandGitHub fc0ff1b354 🔒️(chore) bump keycloak to 26.6.4 (#729)
https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0815/
2026-06-29 16:15:46 +02:00
BastienandGitHub 11d191d967 (chore) bump keycloak to 26.6.3 (#718) 2026-06-23 11:51:35 +02:00
BastienandGitHub ab4520b01b 🔒(backend) force including special characters in generated passwords (#640)
This makes us able to upgrade the Keycloak password policy
2026-04-30 14:30:29 +02:00
BastienandGitHub 3cd2fd1aeb (paas) fix Procfile processes names (#648) 2026-04-29 14:52:41 +02:00
BastienandGitHub b98b45008f (paas) place imports and reindex worker queues in dedicated containers (#643) 2026-04-29 14:18:49 +02:00
BastienandGitHub e8d4a00817 (chore) bump keycloak to 26.6.1 (#637) 2026-04-19 15:59:02 +02:00
BastienandGitHub 00e38f5532 (chore) bump keycloak to 26.5.4 (#571) 2026-02-26 11:27:53 +01:00
BastienandGitHub 100f671e1e (chore) bump keycloak to 26.5.3 (#543) 2026-02-16 22:36:12 +01:00
BastienandGitHub a67fd36c33 (ops) implement production docker images (#451)
* (ops) implement production docker images

Github workflows:
  - moved docker-publish jobs into a separate file on push main only
Backend:
  - added healthcheck on backend Dockerfile + minor fixes
  - bumped django to 5.1.15 to mitigate major CVE
  - moved /healthz endpoint to /__heartbeat__ + added db connection
    check
Frontend:
  - Added runtime-prod Dockerfile target + minor fixes on the Dockerfile
  - bump next to 15.5.9 to mitigate major CVE
  - moved nginx config to standard nginx container configuration
    template, fixed `scalingo_postfrontend` accordingly
Keycloak:
  - Added production Dockerfile
  - Removed scalingo_pgdump script & cron.json
socks-proxy:
  - added package upgrades run into runtime Dockerfile stage
Misc:
  - removed scalingo_pgdump.sh & cron.json
  - fixed compose and e2e nginx configs with /healthz replacement

* (fix) coderabbit recommandations
2026-01-12 15:18:25 +01:00
BastienandGitHub 5e3f5a4494 (socks-proxy) add healthcheck to dockerfile (#402) 2025-12-20 01:01:59 +01:00
Bastien OgierandSylvain Zimmer d1bdd19e33 (mta-in) added vars for myhostname, myorigin and mydomain 2025-09-19 22:52:51 +02:00
BastienandGitHub 0dd16f489c (mta-in) enable starttls (#323)
add tls config
add STARTTLS_CHAIN_FILES env var
add openssl config for post-quantum proof
use trixie as base image, which bumps postfix to 3.10.3
2025-08-27 10:27:07 +02:00
BastienandGitHub dfe7f7e4a0 (cron) add pgdump cron for keycloak deployment (#312)
adds the scalingo_pgdump.sh script for keycloak deployments
adds the cron.json to start the dump every night
2025-08-12 20:08:15 +02:00
BastienandGitHub 3f1154a4b1 (cron) pgdump: fix restic repository. (#293) 2025-07-25 17:58:11 +02:00
BastienandGitHub 45d8c295c6 (cron) pgdump: add 30 days backup retention. (#288) 2025-07-23 10:48:54 +02:00
BastienandGitHub 0accafd979 ci: backup with restic instead of awscli. (#287) 2025-07-22 11:52:51 +02:00
BastienandGitHub a68b035cdb cron: add scalingo_pgdump script to dump the database and upload it to scaleway s3. add cron.json to schedule pgdump everyday at noon. (#270) 2025-07-15 16:58:19 +02:00
BastienandGitHub 286e01f3e8 actions: cleanup container tags and add the retention action. (#269) 2025-07-15 14:04:55 +02:00
BastienandGitHub 8a46381435 Merge pull request #260 from suitenumerique/ci/docker_publish
ci: docker build and push mta-in and mta-out.
2025-07-09 22:39:23 +02:00
Bastien Ogier 1c3d218042 ci: docker build and push mta-in and mta-out. 2025-07-09 20:25:57 +00:00