diff --git a/roles/rocketchat/defaults/main.yml b/roles/rocketchat/defaults/main.yml index 3afce72..c72e6b4 100644 --- a/roles/rocketchat/defaults/main.yml +++ b/roles/rocketchat/defaults/main.yml @@ -9,7 +9,7 @@ rocketchat_packages: rocketchat_dir: /srv/rocketchat rocketchat_application_path: '{{ rocketchat_dir }}/bundle' # "latest" implies latest stable here, can be "3.3.0", for example -rocketchat_version: 6.4.9 +rocketchat_version: 6.6.1 # rocketchat_tarball_remote: https://releases.rocket.chat/{{ rocketchat_version }}/download rocketchat_tarball_remote: https://cdn-download.rocket.chat/build/rocket.chat-{{ rocketchat_version }}.tgz rocketchat_tarball_fetch_timeout: 100 diff --git a/roles/rocketchat/templates/rocketchat.service.j2 b/roles/rocketchat/templates/rocketchat.service.j2 index bd674af..f6325fd 100644 --- a/roles/rocketchat/templates/rocketchat.service.j2 +++ b/roles/rocketchat/templates/rocketchat.service.j2 @@ -12,6 +12,7 @@ Group={{ rocketchat_service_group }} Environment=MONGO_URL=mongodb://{{ rocketchat_mongodb_uri }} Environment=MONGO_OPLOG_URL=mongodb://{{ rocketchat_mongodb_server }}:{{ rocketchat_mongodb_port }}/local Environment=ROOT_URL=https://{{ rocketchat_vhost_server }} +Environment=BIND_IP={{rocketchat_internal_host }} Environment=PORT={{ rocketchat_internal_port }} {% for item in rocketchat_service_environment %} Environment={{ item.name }}={{ item.value }} diff --git a/roles/rocketchat/templates/vhost.j2 b/roles/rocketchat/templates/vhost.j2 index 876c5e2..61bed9d 100644 --- a/roles/rocketchat/templates/vhost.j2 +++ b/roles/rocketchat/templates/vhost.j2 @@ -15,13 +15,11 @@ server { {% include 'templates/nginx_ssl.inc.j2' with context %} - # Referrer Policy + # # Referrer Policy add_header Referrer-Policy 'no-referrer'; - - add_header Strict-Transport-Security "max-age=63072000; includeSubDomains; preload"; - add_header X-Frame-Options DENY; - add_header X-Content-Type-Options nosniff; + # add_header X-Frame-Options DENY; + # add_header X-Content-Type-Options nosniff; error_page 497 https://$host:$server_port$request_uri; location / {