c264d670e8
update hookshot config to generic hs variables
3 years ago
44ae8d3b92
refine etherpad in nginx wanted services condition
3 years ago
a9dd397771
add etherpad to nginx wanted services
...
it's required if enabled by the dimension config here:
6eb8fb8392/roles/matrix-etherpad/tasks/init.yml (L42-L49)#1517
3 years ago
321ed9b609
Merge remote-tracking branch 'origin/master' into hookshot
3 years ago
08fe38cf40
add hookshot to nginx wanted services
...
related 0fb881deb5
3 years ago
224633df1d
fix condition for matrix_hookshot_container_http_host_bind_ports
3 years ago
2b97ab9a51
fix matrix_hookshot_container_http_host_bind_ports
3 years ago
3a766d4ba5
proxy hookshot metrics when proxying synapse metrics
...
see also #1527
3 years ago
0fb881deb5
Update the "wanted systemd services" list for matrix-nginx-proxy/matrix-grafana
...
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1517
3 years ago
87871040df
add hookshot metrics to internal prometheus
3 years ago
1987cc4839
refine hookshot role
3 years ago
a83b880f72
matrix-bot-honoroit: feedback
3 years ago
4377c348c5
matrix-bot-honoroit: disable self-build by default, update to v0.9.1
3 years ago
e0f2aa9de8
refactor matrix_hookshot_container_http_host_bind_ports
3 years ago
7b093c5ae0
Move some variables to a more appropriate location
3 years ago
19b5a50805
Derive Honoroit database password from matrix_homeserver_generic_secret_key
...
Related to the work done in https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/818
3 years ago
5c3c0d0d58
Set Dendrite's real_ip_header correctly
3 years ago
05b4572fab
Fix matrix_dimension_homeserver_federationUrl for Dendrite
3 years ago
de49cc5271
Fix matrix_registration_shared_secret for Dendrite
3 years ago
593fc2fa85
Replace matrix-synapse.service references with more homeserver-neutral references
3 years ago
38ad152c03
Add Dendrite-awareness to matrix_homeserver_container_url when matrix-nginx-proxy disabled
3 years ago
bbbfc0708f
Derive matrix_coturn_turn_static_auth_secret from matrix_homeserver_generic_secret_key
...
Doing this further simplifies examples/vars.yml.
3 years ago
965890bf75
Derive secrets from matrix_homeserver_generic_secret_key, not matrix_synapse_macaroon_secret_key
...
We're trying to move away from implementation-specific variables,
hoping for a clean (implementation-neutral) examples/vars.yml file.
3 years ago
1dfe21944f
Make matrix_homeserver_implementation influence matrix_IMPLEMENTATION_enabled, not the other way around
...
Doing this seems more reasonable and simpler.
3 years ago
4139290cc9
Rename some variables for consistency
3 years ago
32bbcf5ed6
Fix incorrect definition
3 years ago
38ec546b8b
Only trust own identity server in Dendrite config, if ma1sd enabled
3 years ago
ecc237bbad
Initial work on getting nginx reverse proxying working with Dendrite
3 years ago
3cf9f87097
Add matrix_homeserver_implementation, tracking the current homeserver implementation
...
The goal is to have a single variable which tells us which homeserver
software is in use. Much simpler than having if/elif/elif checks for
variables like (`matrix_synapse_enabled` and `matrix_dendrite_enabled`, etc.)
everywhere.
3 years ago
5b148921a0
Upgrade Dendrite (0.3.11 -> 0.5.0) and update configuration
...
This brings dendrite.yaml up to date and cleans things up a bit.
3 years ago
07af05690c
Add initial role for Dendrite as alternative Matrix server
3 years ago
d9dd524db3
self-build consistency: rename vars everywhere
3 years ago
b0c801a497
Rename variable for consistency (matrix_bot_honoroit_container_self_build -> matrix_bot_honoroit_container_image_self_build)
...
Discussed in https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1514
3 years ago
407e8c4940
added honoroit
3 years ago
490f11ba0d
matrix-client-cinny: self_build feedback"
3 years ago
5788a16a2e
added matrix-client-cinny
3 years ago
621251c1e5
hookshot role groundwork
3 years ago
dcab14d9a8
Add self-building support to Beeper LinkedIn bridge
...
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1480
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1242
3 years ago
25ced724ac
Update matrix_servers
3 years ago
0f49ce0638
Set up vars for mautrix-twitter playbook
...
* Copy/update mautrix_facebook group_vars to mautrix_twitter
* Replace facebook -> twitter, fb -> twt, remove presence var
* Enable playbook in setup.yml
3 years ago
fc55df9318
Make some appservices reach the homeserver via nginx
...
This is useful when Synapse is using a worker setup. In that case,
we don't want appservices to connect to `matrix-synapse:8008`, because
not all APIs are exposed there.
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1449
3 years ago
286871b9b5
Add self-build for Dimension
...
Add a self-build option for the Dimension Dockerfile.
- This helps further support arm64 hosts (i.e. A1.Flex w/Oracle)
3 years ago
ab60238518
Support encrypted matrix_synapse_macaroon_secret_key
...
This change forces ansible to decrypt the variable with ansible-vault if encrypted, to avoid the error '{"msg": "Unexpected templating type error occurred on ({{ matrix_synapse_macaroon_secret_key | password_hash('sha512') }}): secret must be unicode or bytes, not ansible.parsing.yaml.objects.AnsibleVaultEncryptedUnicode"}'
Every other variable in the playbook was found to have no problems with encryption.
The change has no negative impact on non-encrypted matrix_synapse_macaroon_secret_key.
3 years ago
b4fb819481
Merge pull request #1403 from borisrunakov/rename-matrix-ma1sd-default-port
...
remove default from variable name
3 years ago
394ecb0acc
remove default from variable name
3 years ago
d3a9ec98de
refactoring
3 years ago
1ec67f49b0
replaced 8008 where possible
3 years ago
c1bc7b9f93
Rename variables to prevent confusion
...
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1397
and https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1399
3 years ago
07496069c8
rellocating variables for consistency
3 years ago
7756cc4c8e
replace port 8048 with matrix_synapse_container_default_federation_port
3 years ago
9688d071a8
fix matrix_synapse_account_threepid_delegates_email and matrix_synapse_account_threepid_delegates_msisdn ( #1370 )
...
* fix for string concatenation on matrix_synapse_account_threepid_delegates_email and matrix_synapse_account_threepid_delegates_msisdn
* .editorconfig should not be ignored
* Restore .gitignore
Co-authored-by: b <b@b>
Co-authored-by: Slavi Pantaleev <slavi@devture.com>
3 years ago
dcda17595a
change port 8090 to matrix_ma1sd_default_port
3 years ago
06bcdcf9d2
Merge pull request #1311 from HarHarLinks/master
...
add auto proxy synapse worker metrics
3 years ago
4209c4208c
add own variable for worker metrics
...
https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1311#issuecomment-945718866
3 years ago
6937a2c0a9
Ensure password_hash salt is less than 16 chars
...
Also fixes the appservice and homeserver tokens for the Googlechat bridge,
so that they're not the same as the ones for the Hangouts bridge.
3 years ago
1dac525e63
Added Mautrix Google Chat
3 years ago
fb709152f3
Add self-building support for mautrix-whatsapp
...
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1322
3 years ago
b5d8444764
Add self-building support to matrix-bridge-appservice-webhooks
3 years ago
2ec06b7477
Merge pull request #1242 from apmechev/add_beeper_linkedin_bridge
...
Add beeper LinkedIn bridge
3 years ago
603ad7c52b
Remove (non-working) SQLite support from beeper-linkedin bridge
...
This bridge doesn't support SQLite anyway, so it's not necessary
to carry around configuration fields and code for migration from SQLite
to Postgres. There's nothing to migrate.
3 years ago
13e660bffd
Add missing section separator
3 years ago
b13cf1871f
add code for LinkedIn Bridge
3 years ago
9860fb4675
Upgrade Sygnal (v0.9.0 -> v0.10.1)
3 years ago
46340fdf63
Simplify if condition
3 years ago
4d57a41b3f
remove matrix_awx_enabled from these
3 years ago
2e30802b87
use group variables instead
3 years ago
421f85defa
Add self-building support to matrix-email2matrix
3 years ago
dfa7b6e4fd
Merge pull request #1171 from BackInBash/patch-1
...
Updating to ma1sd v2.5.0
3 years ago
676101e999
Minor fixups for ma1sd 2.5.0
...
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1171
3 years ago
f5d6b01b9f
Updated group_vars to update self_build based on matrix_architecture
3 years ago
31244e7fcc
Merge pull request #1180 from Toorero/master
...
Fixed self-build functionality for mautrix-signal
3 years ago
ead4b00c09
Reverted back to manual self-build detection
3 years ago
3a28100131
Renamed matrix_lottieconverter to matrix_telegram_lottieconverter
3 years ago
7f15787d54
Fixed mautrix-telegram selfbuild not working on non amd64 platforms
3 years ago
f933ba14ae
Fixed self-build functionality for mautrix-signal and added self-build functionality for signald
3 years ago
aa6398a948
Autoset self-build for mautrix-signal bridge
3 years ago
b4d7ab0b53
Merge pull request #1153 from Cadair/worker_prom
...
Add worker metrics to prometheus exporter
3 years ago
2aa457efcc
Use a prom variable and not a synapse role variable
3 years ago
3777334778
Do not try to use TURNS when TLS disabled for Coturn
...
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1145
3 years ago
8b146f083e
Disable turns when Let's Encrypt is used
...
Supersedes https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1145
3 years ago
19ed8d1d17
Upgrade mjolnir (0.1.17 -> 0.1.18) and implement self building
3 years ago
4e2780ff88
Add support for a prometheus postgres exporter
...
This commit introduces a new role that downloads and installs the
prometheus community postgres exporter https://github.com/prometheus-community/postgres_exporter .
A new credential is added to matrix_postgres_additional_databases that
allows the exporter access to the database to gather statistics.
A new dashboard was added to the grafana role, with some refactoring
to enable the dashboard only if the new role is enabled.
I've included some basic instructions for how to enable the role in
the Docs section.
In terms of testing, I've tested enabling the role, and disabling
it to make sure it cleans up the container and systemd role.
4 years ago
409cd2b9a3
Source port binding from group vars in line other components
4 years ago
04548f8df2
Merge branch 'master' into hydrogen
4 years ago
9437f78c9e
Build using custom config.json, add CSP, update to 0.1.53
4 years ago
9a8a81fdb0
Disable OCSP stapling when self-signed certificates are used
...
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1073
4 years ago
544915ff76
Add Heisenbridge
4 years ago
ca361af616
Add Hydrogen
4 years ago
f03adc83f1
Fix matrix_ma1sd_dns_overwrite_homeserver_client_value when not matrix_nginx_proxy_enabled
...
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1047
4 years ago
e3fa3e12bc
Upgrade Synapse (1.31 -> 1.32.2)
4 years ago
378fabf177
Revert "Upgrade Synapse (1.31 -> 1.32.1)"
...
This reverts commit 1fb54a37cbhttps://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1017
Related to
https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1010
4 years ago
1fb54a37cb
Upgrade Synapse (1.31 -> 1.32.1)
...
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1010
4 years ago
ca786cc343
Revert "Upgrade Synapse (1.31 -> 1.32)"
...
This reverts commit f825c7c263https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1010
4 years ago
f825c7c263
Upgrade Synapse (1.31 -> 1.32)
4 years ago
adcecaffaf
Fix connectivity between prometheus and prometheus-node-exporter
...
Expected to have regressed after https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1008
This patch comes with its own downsides (as described in the comments
for matrix_prometheus_node_exporter_container_http_host_bind_port),
but at least there's:
- no security issue
- metrics remain readable from matrix-prometheus (even if the network metrics are inaccurate)
A better patch is certainly welcome.
4 years ago
8da8979a24
Do not override matrix_prometheus_node_exporter_container_http_host_bind_port when matrix-nginx-proxy disabled
...
Not sure why this had been done in the first place.
It doesn't make any sense.
There's no relation between matrix-nginx-proxy and
prometheus-node-exporter.
4 years ago
126fbbc0cc
fix typo
4 years ago
f52a8b6484
use custom docker registry
4 years ago
a1a0d91604
Make prometheus-node-exporter not overlap with Synapse metrics port
...
This was causing a port conflict when `matrix_nginx_proxy_enabled: false`.
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/983
4 years ago
1b55766927
Do not redefine matrix-postgres role vars in matrix-postgres-backup
...
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/868
4 years ago
0a107dc0ce
Merge pull request #868 from foxcris/postgres-backup
...
- Added a postgres-backup role
4 years ago
14b8e3a3ab
- fixed error with generator function
4 years ago
2178f3612f
- matrix_postgres_backup_databases now uses more simple structure
4 years ago
995c483856
Merge pull request #962 from aaronraimist/mjolnir
...
Add mjolnir
4 years ago
1ecee625d5
Depend on more services, add a delay
4 years ago
59699e0d98
Try to make Dimension wait for Synapse
...
Some people have reported Dimension failing to contact
matrix-nginx-proxy/Synapse on startup. This attempts to
delay Dimension startup some more.
4 years ago
59ac8a5921
Make Dimension require matrix-nginx-proxy, if enabled
...
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/966
4 years ago
5b7dbe8275
Make matrix-synapse wanted by matrix-nginx-proxy only if enabled
4 years ago
5a4ea5f866
Make AWX enabling/disabling consistent with other playbook roles
...
That is:
- enabled in the role by default
- disabled in the compilation (playbook), if considered an optional
component
4 years ago
b89936afba
Make bridges depend on matrix-nginx-proxy
...
We don't point them straight to Synapse anymore, but rather
to matrix-nginx-proxy, which forwards to Synapse (or something else).
4 years ago
bab8b950ca
Add mjolnir
4 years ago
06c74728eb
Move matrix_nginx_proxy_proxy_synapse_federation_api_enabled definition to the role
...
This variable was previously undefined in the role and was only getting
defined via `group_vars/matrix_servers`.
We now properly initialize it (and its good default value) in the role
itself.
4 years ago
9a0222fa47
Add Sygnal support
...
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/683
4 years ago
11cd1cb0fa
- removed matrix_postgres_backup_db_list variable
...
- add matrix_postgres_backup_databases to be build on top of matrix_postgres_additional_databases
- POSTGRES_DB is now directly set from matrix_postgres_backup_databases while building the templates/env-postgres-backup.j2
4 years ago
43f7d9afb6
- removed dynamic building of the postgres db list an reused matrix_postgres_additional_databases in group_vars/matrix_servers as source for the list
...
- adjusted env-postgres-backup.j2 to use the new role specific variables
4 years ago
ecc6bdb3ca
- changed variables names to use role specific one and redefine them using group_vars/matrix_servers
4 years ago
011e95c1d2
Merge pull request #893 from GoMatrixHosting/master
...
matrix-awx - the GoMatrixHosting v0.3.0 initial PR
4 years ago
20c6bd686e
Added the matrix_bot_go_neb_container_http_host_bind_port variable to allow the container to expose its listen port
4 years ago
51e2547484
Added support for the Go-NEB bot
4 years ago
a25b8135b8
Fix point overlap between matrix-domain and Jitsi
...
Mostly affects people who disable the integrated `matrix-nginx-proxy`.
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/456
and more specifically 4d62a75f6f
4 years ago
33ec5710d9
0.2.1 revision
4 years ago
1ef683d366
Make nginx proxy config (when disabled) obey matrix_federation_public_port
...
People who were disabling matrix-nginx-proxy (in favor of their own
nginx webserver) and also overriding `matrix_federation_public_port`,
found that the generated nginx configuration still hardcoded `8448`,
which forced their nginx server to use that, regardless of the fact
that `matrix_federation_public_port` was pointing elsewhere.
We now allow for the in-container federation port to be configurable,
and also automatically wire things properly.
4 years ago
2ca8211184
Merge remote-tracking branch 'upstream/master'
4 years ago
b99372a3c5
initial commit of mautrix-instagram role
4 years ago
91c987ca7d
Merge pull request #872 from xangelix/add-mx-puppet-groupme-gh
...
Add mx-puppet-groupme support
4 years ago
d94d0e2ca5
Merge pull request #456 from eMPee584/synapse-workers
...
Synapse workers
4 years ago
217b4a8808
Release Synapse v1.27.0 to ARM32 via self-building
...
Related to: https://matrix.org/blog/2021/02/18/synapse-1-27-0-released#dropping-armv7-docker-images
4 years ago
005f4d57f9
Remove mention of sqlite3 support for Etherpad
...
The official Etherpad Docker image has no support for sqlite3 databases.
4 years ago
c4e1209452
Merge branch 'master' into add-mx-puppet-groupme-gh
4 years ago
daae74b074
Merge branch 'master' into synapse-workers
4 years ago
1434c371bd
safer port binding of etherpad docker container
...
don't bind to any host port if nginx_proxy is used
only bind to localhost if it's not used
4 years ago
e510481e84
Merge branch 'master' into add-mx-puppet-groupme-gh
4 years ago
c15d5a58a9
Make mx-puppet-groupme tokens unique
4 years ago
5cfeae806b
Merge branch 'master' into synapse-workers
4 years ago
894679750e
Merge pull request #862 from s-thom/nginx-additional
...
Add additional domains for Let's Encrypt certificates to be obtained
4 years ago
b900a4a3ba
Add groupme postgres
4 years ago
5a70a56ff0
Initial implementation
4 years ago
2b47258c6c
Do not auto-expose metrics on matrix.DOMAIN/_synapse/metrics
...
.. and other documentation improvements.
4 years ago
c8ab200cb1
Break dependency between matrix-prometheus and (matrix-prometheus-node-exporter, matrix-synapse)
4 years ago
18e31526a8
Rename some variables
4 years ago
989100b1c1
Grafana nginx proxy config
4 years ago
eb5aa93e8a
Grafana
...
Also includes the dashboards for Synapse and for Node Exporter.
Again has only been tested on debian amd64 so far, but the grafana docker image is available for arm64 and arm32. Nice.
4 years ago
e525970b39
Prometheus Node Exporter
...
Basic system stats, to show stuff the synapse metrics
can't show such as resource usage by bridges, etc
Seems to work fine as well.
This too has only been tested on debian amd64 so far
4 years ago
13ef9e85cf
Prometheus
...
Initial attempt. Seems to work fine.
Only tested on debian amd64 so far
4 years ago
064b2e533c
Add variable for extra domains to get LE certs for
...
I felt that adding another variable was probably going to be the easiest way to do this. I may end up adding another variable to enable this feature, for consistency with some of the other things.
4 years ago
38bf1eda70
Etherpad Jitsi integration
4 years ago
4b451ff782
Etherpad role
4 years ago
d3ecc6f017
Fix bridges failing to upload media when Synapse workers are enabled
4 years ago
4d62a75f6f
Get matrix-corporal to play nicely with a Synapse worker setup
...
We do this by creating one more layer of indirection.
First we reach some generic vhost handling matrix.DOMAIN.
A bunch of override rules are added there (capturing traffic to send to
ma1sd, etc). nginx-status and similar generic things also live there.
We then proxy to the homeserver on some other vhost (only Synapse being
available right now, but repointing this to Dendrite or other will be
possible in the future).
Then that homeserver-specific vhost does its thing to proxy to the
homeserver. It may or may not use workers, etc.
Without matrix-corporal, the flow is now:
1. matrix.DOMAIN (matrix-nginx-proxy/matrix-domain.conf)
2. matrix-nginx-proxy/matrix-synapse.conf
3. matrix-synapse
With matrix-corporal enabled, it becomes:
1. matrix.DOMAIN (matrix-nginx-proxy/matrix-domain.conf)
2. matrix-corporal
3. matrix-nginx-proxy/matrix-synapse.conf
4. matrix-synapse
(matrix-corporal gets injected at step 2).
4 years ago
63301b0ef1
Improvements around Synapse worker/metrics ports exposure
...
There was a `matrix_nginx_proxy_enabled|default(False)` check, but:
- it didn't seem to work reliably for some reason (hmm)
- referring to a `matrix_nginx_proxy_*` variable from within the
`matrix-synapse` role is not ideal
- exposing always happened on `127.0.0.1`, which may not be good enough
for some rarer setups (where the own webserver is external to the host)
4 years ago
HarHarLinks
Slavi Pantaleev
Aine
Jip J. Dekker
rakshazi
Shreyas Ajjarapu
Matthew Cengia
John M
Christos Karamolegkos
boris runakov
b
b
borisrunakov
Luke
Alexandar Mechev
Michael Collins
Nate
Toorero
Stuart Mumford
Aaron Raimist
Raymond Coetzee
ewang
Toni Spets
Ahmad Haghighi
foxcris
Yannick Goossens
Michael
Marcus Proest
Béla Becker
Cody Neiman
Marc Leuser
Peetz0r
Stuart Thomson