From 62f4bb7740e421e0881937c6ad4d07016cbb15a4 Mon Sep 17 00:00:00 2001 From: Jan Koppe Date: Sat, 4 Jan 2025 20:00:32 +0100 Subject: [PATCH] lock down hedgedoc due to abuse --- modules/swarm/hedgedoc/main.tf | 2 ++ stacks/ax41-1/.terraform.lock.hcl | 4 +++- 2 files changed, 5 insertions(+), 1 deletion(-) diff --git a/modules/swarm/hedgedoc/main.tf b/modules/swarm/hedgedoc/main.tf index fd6b816..ee9947e 100644 --- a/modules/swarm/hedgedoc/main.tf +++ b/modules/swarm/hedgedoc/main.tf @@ -62,6 +62,8 @@ resource "docker_service" "hedgedoc" { CMD_PROTOCOL_USESSL = "true", CMD_EMAIL = "false", CMD_ALLOW_EMAIL_REGISTER = "false", + CMD_ALLOW_ANONYMOUS = "false", + CMD_REQUIRE_FREEURL_AUTHENTICATION = "true", CMD_ALLOW_FREEURL = "true", CMD_OAUTH2_PROVIDERNAME = "authentik", CMD_OAUTH2_SCOPE = "openid email profile", diff --git a/stacks/ax41-1/.terraform.lock.hcl b/stacks/ax41-1/.terraform.lock.hcl index 58316c4..76ea3aa 100644 --- a/stacks/ax41-1/.terraform.lock.hcl +++ b/stacks/ax41-1/.terraform.lock.hcl @@ -41,8 +41,10 @@ provider "registry.terraform.io/goauthentik/authentik" { } provider "registry.terraform.io/hashicorp/dns" { - version = "3.4.2" + version = "3.4.2" + constraints = "3.4.2" hashes = [ + "h1:2r/hFLnTWnZiIKrxwCrkSH7X2F12fu8BJzuRjHYA45M=", "h1:fANvQG0D/XKyj+s+egm66efvr8z2gNKER6UlKfjUxvU=", "zh:75e40862402368e23cd298b62519203621cf4891b95e1c863530bf7d8e9614e6", "zh:78d5eefdd9e494defcb3c68d282b8f96630502cac21d1ea161f53cfe9bb483b3",