Azazel-Pi v1.5.0 — Nginx proxy, Mattermost reset, schema & docs updates

Release date: 2025-11-05

Highlights

Nginx reverse proxy for Mattermost: ready-to-use site config + setup script
One-shot Mattermost full reset script (DB + uploads), with Docker/Postgres support
Config schema extended to support multiple external interfaces
Suricata now monitors both wlan1 and eth0 by default
Documentation updated (EN/JA) with Nginx setup and network config notes
Added

deploy/nginx-site.conf: opinionated Nginx site for proxying Mattermost on http:/// to 127.0.0.1:8065
scripts/setup_nginx_mattermost.sh: installs Nginx, deploys the site config, enables and restarts the service
scripts/mattermost_reset.sh: destructive full reset (DB + uploads/plugins/logs)
Supports native systemd Mattermost and Docker/PostgreSQL deployments
Backs up /opt/mattermost to /var/backups before reset
Recreates Postgres DB or resets schema; handles SQLite; prints manual hints for MySQL
Changed

configs/azazel.schema.json: add interfaces.external (array) to explicitly mark WAN/uplink interfaces
configs/network/azazel.yaml: set default interfaces and add external: ["eth0","wlan1"]
deploy/suricata/suricata.yaml: monitor external interfaces wlan1 and eth0 (af-packet)
deploy/nginx.conf: add recommended proxy headers and client_max_body_size for Mattermost
README.md / README_ja.md: document Nginx reverse proxy setup and interface role defaults
pyproject.toml: bump version to 1.5.0
Breaking changes

None expected. The schema change is backward-compatible (interfaces.external is optional).
The sample config defaults changed (wlan0 as LAN, wlan1/eth0 as external); review if your environment differs.
Upgrade notes

Pull and update configs:
If you maintain local overrides of /etc/azazel/azazel.yaml, consider adding:
interfaces:
external: ["eth0", "wlan1"]
Suricata:
New default monitors eth0 as external. If eth0 is not present or undesired, adjust suricata.yaml accordingly.
Optional Nginx front for Mattermost:
Run as root: sudo setup_nginx_mattermost.sh
Access Mattermost at http:///
Add TLS via your own server block or Certbot if needed.
Optional: Mattermost full reset (destructive!):
Run: sudo bash mattermost_reset.sh and type RESET when prompted.
Documentation

README (EN/JA): Nginx reverse proxy steps, network role defaults
Existing docs updated where relevant; see docs/ for details
Full Changelog

Compare v1.0.0…v1.5.0
https://github.com/01rabbit/Azazel-Pi/compare/v1.0.0...v1.5.0
Known issues

pytest is not installed on some target environments; this release validated with a full bytecode compile check. If you run the Python test suite locally, install dev dependencies first.
Contributors

@01rabbit
付記（実行結果サマリ）
Version bump: 1.0.0 → 1.5.0 in pyproject.toml
Commit and annotated tag created: v1.5.0
Pushed to origin main and tag v1.5.0
Quality gates:
Build (syntax compile): PASS
Lint/Typecheck: not configured
Tests: SKIPPED (pytest not installed on host)