Changeset 7400a38a in darkpeak-services

Timestamp:

Sep 24, 2020, 9:12:22 AM (2 months ago)

Author:

Caolan McMahon <caolan@…>

Branches:

master

Parents:

1d1868f0

git-author:

Caolan McMahon <caolan@…> (09/24/20 09:10:45)

git-committer:

Caolan McMahon <caolan@…> (09/24/20 09:12:22)

Message:

Upgrade TTRSS to master (broken)

This is because of exploits disclosed here:
​https://www.digeex.de/blog/tinytinyrss/

Unfortunately, we were using an old version for the LDAP plugin.
Which means the new version has broken login for now.
Should at least not be expoitable though.

Location:

roles/ttrss

Files:

• defaults/main.yml (modified) (1 diff)
• templates/config.php.j2 (modified) (2 diffs)

roles/ttrss/defaults/main.yml

@@ -22 +22 @@
 # now follows a rolling release model based on the master branch:
 # https://tt-rss.org/oldforum/viewtopic.php?f=10&t=3262
-ttrss_tag: "1.15.3"
+#ttrss_tag: "1.15.3"
+ttrss_tag: "master"

roles/ttrss/templates/config.php.j2

@@ -19 +19 @@
         // ***********************************
 
-        define('SELF_URL_PATH', '{{ domain }}');
+        define('SELF_URL_PATH', 'https://{{ domain }}/');
         // Full URL of your tt-rss installation. This should be set to the
         // location of tt-rss directory, e.g. http://example.org/tt-rss/
@@ -198 +198 @@
         // ***************************************
 
-        define('CHECK_FOR_NEW_VERSION', true);
+        define('CHECK_FOR_UPDATES', true);
         // Check for new versions of tt-rss automatically.