From cbfb991e79f4a06dc5d1e78b0f42849b1a4b1bb2 Mon Sep 17 00:00:00 2001
From: Kevin Veen-Birkenbach <kevin@veen.world>
Date: Fri, 26 Sep 2025 15:21:01 +0200
Subject: [PATCH] Hardened BBB Version

---
 roles/docker-compose/tasks/03_repository.yml | 17 ++++++++++-------
 roles/web-app-bigbluebutton/config/main.yml  |  2 +-
 2 files changed, 11 insertions(+), 8 deletions(-)

diff --git a/roles/docker-compose/tasks/03_repository.yml b/roles/docker-compose/tasks/03_repository.yml
index b6f491d2..904dfafd 100644
--- a/roles/docker-compose/tasks/03_repository.yml
+++ b/roles/docker-compose/tasks/03_repository.yml
@@ -1,15 +1,18 @@
 - name: Set default docker_repository_path
   set_fact:
-    docker_repository_path: "{{docker_compose.directories.services}}repository/"
+    docker_repository_path: "{{ [ docker_compose.directories.services, 'repository/' ] | path_join }}"
 
 - name: pull docker repository
   git:
-    repo:       "{{ docker_repository_address }}"
-    dest:       "{{ docker_repository_path }}"
-    version:    "{{ docker_repository_branch | default('main') }}"
-    depth:      1
-    update:     yes
-    recursive:  yes
+    repo:           "{{ docker_repository_address }}"
+    dest:           "{{ docker_repository_path }}"
+    version:        "{{ docker_repository_branch | default('main') }}"
+    single_branch:  yes
+    depth:          1
+    update:         yes
+    recursive:      yes
+    force:          yes
+    accept_hostkey: yes
   notify:
     - docker compose build
     - docker compose up
diff --git a/roles/web-app-bigbluebutton/config/main.yml b/roles/web-app-bigbluebutton/config/main.yml
index d335d6ea..1139fab2 100644
--- a/roles/web-app-bigbluebutton/config/main.yml
+++ b/roles/web-app-bigbluebutton/config/main.yml
@@ -25,7 +25,7 @@ docker:
   services:
     bigbluebutton:
       repository: "https://github.com/bigbluebutton/docker.git"
-      version:    "main"  
+      version:    "bbb3.0"
     database:
       # This is set to true to pass integration test, doesn't have any other function
       enabled:    true