add simplex, update docker images and compose

docker-compose.yml

@@ -13,6 +13,7 @@ networks:
   bookstack:
   tor:
   write:
+  simplex:
 
 services:
   synapse:
@@ -54,6 +55,8 @@ services:
     networks:
       - matrix
     read_only: true
+    ports: 
+      - "127.0.0.1:5432:5432"
     security_opt:
       - no-new-privileges:true
     cap_drop:
@@ -101,6 +104,50 @@ services:
     labels:
       - "com.centurylinklabs.watchtower.enable=false"
 
+  simplex-smp-server:
+    image: simplexchat/smp-server:latest
+    container_name:  simplex-smp
+    restart: unless-stopped
+    user: "1000:1000"
+    ports:
+      - "5223:5223"
+    volumes:
+      - ./simplex/smp/config:/etc/opt/simplex:Z
+      - ./simplex/smp/logs:/var/opt/simplex:Z
+      - ./swag/www/simplex.hackliberty.org:/var/www/smp-server-web:Z
+    environment:
+      - ADDR=${SIMPLEX_ADDR}
+#     - PASS=${SIMPLEX_PASSWORD}
+    networks:
+      - simplex
+      - tor
+    security_opt:
+      - no-new-privileges:true
+    cap_drop:
+      - ALL
+
+  simplex-xftp-server:
+    image: simplexchat/xftp-server:latest
+    container_name:  simplex-xftp
+    user: "1000:1000"
+    ports:
+      - "5233:443"
+    restart: unless-stopped
+    volumes:
+      - ./simplex/xftp/config:/etc/opt/simplex-xftp:Z
+      - ./simplex/xftp/logs:/var/opt/simplex-xftp:Z
+      - ./simplex/xftp/files:/srv/xftp:X
+    environment:
+      - ADDR=${XFTP_ADDR}
+      - QUOTA=150gb
+    networks:
+      - simplex
+      - tor
+    security_opt:
+      - no-new-privileges:true
+    cap_drop:
+      - ALL
+
   pantalaimon:
     build: ./images/pantalaimon
     container_name: pantalaimon
@@ -297,7 +344,7 @@ services:
       - http://swag:81/nginx_status
 
   gitea:
-    image: gitea/gitea
+    image: gitea/gitea:1.22.0
     container_name: gitea
     environment:
       - USER_UID=1000
@@ -391,7 +438,7 @@ services:
       - "com.centurylinklabs.watchtower.enable=false"
 
   lemmy:
-    image: dessalines/lemmy:0.19.2
+    image: dessalines/lemmy:0.19.3
     container_name: lemmy
     restart: unless-stopped
     environment:
@@ -405,7 +452,7 @@ services:
       - lemmy
 
   lemmy-ui:
-    image: dessalines/lemmy-ui:0.19.2
+    image: dessalines/lemmy-ui:0.19.3
     container_name: lemmy-ui
     restart: unless-stopped
     environment:
@@ -499,7 +546,7 @@ services:
       - ./.env
 
   matrix-chatgpt3-bot:
-    image: ghcr.io/matrixgpt/matrix-chatgpt-bot:latest
+    image: ghcr.io/matrixgpt/matrix-chatgpt-bot:3.1.4
     container_name: chatgpt3
     volumes:
       - ./chatgpt3:/storage
@@ -515,6 +562,15 @@ services:
     networks:
       - tor
 
+  tor-proxy:
+    image: osminogin/tor-simple
+    container_name: tor-proxy
+    volumes:
+      - ./tor-proxy:/var/lib/tor
+      - ./tor-proxy/torrc:/etc/tor
+    networks:
+      - tor
+
   writefreely:
     image: algernon/writefreely
     container_name: writefreely

images/synapse-docker/Dockerfile

@@ -1,4 +1,4 @@
-ARG SYNAPSE_VERSION=1.99.0
+ARG SYNAPSE_VERSION=1.108.0
 ARG HARDENED_MALLOC_VERSION=11
 ARG UID=991
 ARG GID=991

images/synapse-worker-docker/Dockerfile

@@ -1,4 +1,4 @@
-ARG SYNAPSE_VERSION=1.99.0
+ARG SYNAPSE_VERSION=1.108.0
 ARG HARDENED_MALLOC_VERSION=11
 ARG UID=991
 ARG GID=991

swag/nginx/site-confs/simplex.conf

@@ -0,0 +1,16 @@
+server {  
+    listen 443 ssl http2;
+    listen [::]:443 ssl http2;
+
+    server_name simplex.*;
+
+    include /config/nginx/ssl.conf;
+
+    location / {
+        include /config/nginx/proxy.conf;
+        include /config/nginx/resolver.conf;
+        include /config/nginx/security-headers.conf;
+        add_header Content-Security-Policy "default-src 'none'; connect-src 'self'; font-src * https: data:; img-src * https: data:; manifest-src * https: data:; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; frame-ancestors 'none'; block-all-mixed-content; base-uri 'none'";        
+        root /config/www/simplex.hackliberty.org;        
+    }
+}