Version 0.9.9 / 0.9.10 - Breaking change release.
This is most likely the last breaking change before we hit 1.0.0 stable. :happy-honse-noises:
New:
- Added Venue syncshell feature - users are able to create venue syncshells, and the server processes these lookups and joins in the federation.
- Added ClamAV Virusscanner support to the fileserver
- Redesigned administration dashboard to show more meaningful things when logging in
- Added a "send announcement" feature on the adminpanel that can be used to message online players
Installer changes:
- Removed Azure monitor / App Insights connection from the installer
- Removed firewalling / UWF setup in the installer, sane (blocked) defaults, we only open up 80/443 to traefik, the rest is all internal.
- Removed "ip-whitelisting" in general from the whole setup.
- Removed direct links to Victoria stack from the admin panel - they are no longer exposed to the outside world (only internal)
- Added docker compose example files (minimal, complete, complete w/ traefik and complete w/ nginx)
- Added deployment documentation (including settings documentation for the server, fileserver and admin panel) into the /deploy folder in the repo
- Removed "Bootstrap" and "Configuration only" type installations. The installer is now basic, and only for an AIO server.
ClamAV
If you want to add ClamAV to your existing stack, please see the docs site: https://honse.farm/docs/antivirus/#docker-compose-setup
Note: It will require some fiddling with your existing docker compose files and creating new configurations in your fileserver appconfig.
Note on ip-whitelisting
In the past, the installer would allow you to open up ports in your host firewall to be able to directly reach postgresql and redis.
This is no longer the case, and these ports are now only open to the internal docker network. This means that you will not be able to directly connect to these services from outside the docker network, and you will need to use a tool like docker exec to access them if needed.
Either that, or open up the ports yourself. I consider it my responsibility to make sure that the installation out of the box is as secure as can be.
There will be more advanced knowledge base articles on how to do this in the future, as it is neccesary to open up ports when running a multi-fileserver installation.
