Enable PROXY_MEDIA and bump Funkwhale

roles/couchdb/templates/docker-compose.yml.j2

@@ -24,6 +24,12 @@ services:
     labels:
       traefik.http.routers.couchdb.entrypoints: websecure
       traefik.http.routers.couchdb.rule: "Host(`{{ couchdb_subdomain }}.{{ domain_name }}`)"
+      traefik.http.routers.couchdb.middlewares: cors@docker
       traefik.http.services.couchdb.loadbalancer.server.port: 5984
+      traefik.http.middlewares.cors.headers.accessControlAllowOriginList: https://tempo.agate.blue
+      traefik.http.middlewares.cors.headers.accessControlAllowCredentials: true
+      # Cannot use wildcards with creds, see https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Access-Control-Allow-Headers
+      traefik.http.middlewares.cors.headers.accessControlAllowHeaders: "Content-Type"
+      traefik.http.middlewares.cors.headers.accessControlAllowMethods: GET, OPTIONS, POST, PUT, DELETE
       traefik.enable: true
     restart: unless-stopped

roles/music/templates/conf.env.j2

@@ -28,7 +28,7 @@ AWS_SECRET_ACCESS_KEY={{ scaleway_s3_key }}
 AWS_STORAGE_BUCKET_NAME=celiglyphe
 AWS_S3_ENDPOINT_URL=https://s3.fr-par.scw.cloud
 AWS_S3_REGION_NAME=fr-par
-PROXY_MEDIA=false
+PROXY_MEDIA=true
 
 THROTTLING_ENABLED=false
 EXTERNAL_REQUESTS_TIMEOUT=30

roles/music/vars/main.yml

@@ -1,4 +1,4 @@
-funkwhale_version: 1.2.3
+funkwhale_version: 1.2.10
 funkwhale_api_port: 5000
 funkwhale_nginx_port: 80
 funkwhale_static_root: /static