bump woodpecker

group_vars/gitea/vars

@@ -36,3 +36,7 @@ nft_deny_list: |
   ip saddr 94.103.188.103 counter drop comment "2024-03-22: user profile spam"
   ip saddr 78.40.116.193 counter drop comment "2024-03-22: user profile spam"
   ip saddr 159.253.120.5 counter drop comment "2024-03-22: user profile spam"
+  ip saddr 176.123.1.195 counter drop comment "2024-03-31: created 108 unactivated accounts"
+  ip saddr 43.225.192.242 counter drop comment "2024-04-04: advertising in user profile"
+  ip saddr 117.216.199.83 counter drop comment "2024-04-16: advertising in user profile"
+  ip saddr 37.221.65.103  counter drop comment "2024-04-17: user profile spam"

roles/nginx/tasks/main.yml

@@ -47,7 +47,7 @@
   when: certbot_authenticator == 'gandi'
 
 - name: Generate TLS certificates via nginx
-  command: /root/certbot-venv/bin/certbot certonly --nginx --cert-name {{ nginx_domain | quote }} -n --agree-tos -d {{ nginx_certificates | join(",") | quote }} -m {{ admin_email | quote }}
+  command: /root/certbot-venv/bin/certbot certonly --nginx --nginx-sleep-seconds 10 --cert-name {{ nginx_domain | quote }} -n --agree-tos -d {{ nginx_certificates | join(",") | quote }} -m {{ admin_email | quote }}
   register: certbot
   changed_when: '"no action taken." not in certbot.stdout'
   when: certbot_authenticator == 'nginx'

woodpecker-agent.yml

@@ -1,6 +1,6 @@
 - hosts: woodpecker_agents
   vars:
-    - WOODPECKER_VERSION: "2.3.0"
+    - WOODPECKER_VERSION: "2.4.1"
     - WOODPECKER_AGENT_SECRET: "{{ vault_woodpecker_agent_secret }}"
   tasks:
     - name: Basic setup

woodpecker.yml

@@ -2,7 +2,7 @@
 
 - hosts: woodpeckers
   vars:
-    - WOODPECKER_VERSION: "2.3.0"
+    - WOODPECKER_VERSION: "2.4.1"
     - WOODPECKER_AGENT_SECRET: "{{ vault_woodpecker_agent_secret }}"
     - WOODPECKER_GITEA_SECRET: "{{ vault_woodpecker_gitea_secret }}"
     - WOODPECKER_GITEA_CLIENT: "78903dbe-f90e-4c8d-947a-f6839a1d11c9"