1763 Commits (1cf4d5ea7f8e3a836c72145dc7fedfba1b6b540d)

Author	SHA1	Message	Date
sakkiii	29bba5161b	Element More security headers ... More Production ready nginx headers for Matrix client element.	4 years ago
Slavi Pantaleev	f6b371164c	Remove useless variable	4 years ago
Slavi Pantaleev	62c0587b6a	Use Alpine-based Coturn	4 years ago
Slavi Pantaleev	72a7cb4145	Merge pull request #1018 from GoMatrixHosting/master ... GoMatrixHosting v0.4.3	4 years ago
Slavi Pantaleev	e3fa3e12bc	Upgrade Synapse (1.31 -> 1.32.2)	4 years ago
Michael-GMH	50d7209c5b	GMH v04.3	4 years ago
Slavi Pantaleev	378fabf177	Revert "Upgrade Synapse (1.31 -> 1.32.1)" ... This reverts commit 1fb54a37cb. Seems like it's been pulled or something. It used to exist, but not anymore. Not sure what's going on. Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1017 Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1010	4 years ago
Slavi Pantaleev	1fb54a37cb	Upgrade Synapse (1.31 -> 1.32.1) ... Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1010	4 years ago
Slavi Pantaleev	d691cc0920	Move variable definition a bit	4 years ago
Slavi Pantaleev	e00ef04b57	Add opt-out-of-FLoC headers by default	4 years ago
Slavi Pantaleev	42783972fd	Merge pull request #1011 from aaronraimist/synapse-admin ... Upgrade synapse-admin (0.7.0 -> 0.7.2)	4 years ago
Slavi Pantaleev	ca786cc343	Revert "Upgrade Synapse (1.31 -> 1.32)" ... This reverts commit f825c7c263. Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1010	4 years ago
Aaron Raimist	bb64b80697	Upgrade synapse-admin (0.7.0 -> 0.7.2)	4 years ago
Slavi Pantaleev	f825c7c263	Upgrade Synapse (1.31 -> 1.32)	4 years ago
Slavi Pantaleev	7eda6a3c12	Merge pull request #1009 from thedanbob/coturn-official ... Switch to official coturn image	4 years ago
Slavi Pantaleev	adcecaffaf	Fix connectivity between prometheus and prometheus-node-exporter ... Expected to have regressed after https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1008 This patch comes with its own downsides (as described in the comments for matrix_prometheus_node_exporter_container_http_host_bind_port), but at least there's: - no security issue - metrics remain readable from matrix-prometheus (even if the network metrics are inaccurate) A better patch is certainly welcome.	4 years ago
Dan Arnfield	b2ca1f2829	Add capability required by new image	4 years ago
Slavi Pantaleev	398b9f5d66	Merge pull request #1008 from sakkiii/master ... security** node-exporter data & port publicly exposed	4 years ago
Dan Arnfield	29177d4922	Switch to official coturn docker image	4 years ago
sak	88a30fb5ed	security** node-exporter data & port publicly exposed	4 years ago
sak	0f9a455719	Revert "security** node-exporter data & port publicly exposed" ... This reverts commit d0cd709c08.	4 years ago
sak	d0cd709c08	security** node-exporter data & port publicly exposed	4 years ago
Slavi Pantaleev	4a1739f604	Merge pull request #1007 from teutat3s/fix/nginx-dont-send-version ... Don't expose nginx version with each response	4 years ago
teutat3s	2bf7c26cfa	Don't expose nginx version with each response	4 years ago
Slavi Pantaleev	c565e72f0d	Merge pull request #1003 from sakkiii/patch-2 ... updated matrix_grafana_docker_image to v7.5.4	4 years ago
Slavi Pantaleev	51b46697c5	Merge pull request #1005 from sakkiii/master ... Improve security for grafana	4 years ago
Dan Arnfield	f04614a993	Fix prometheus network for ansible < 2.8	4 years ago
Slavi Pantaleev	badd81e0ec	Revert "Attempt to fix docker_network result discrepancy between Ansible versions" ... This reverts commit 68ca81c8c2.	4 years ago
sakkiii	1958d0792d	Update matrix-client-element.conf.j2	4 years ago
sakkiii	b6d45c5fd8	Merge branch 'master' of https://github.com/sakkiii/matrix-docker-ansible-deploy	4 years ago
sakkiii	05042f5ff1	Improve security grafana ... - duplicate X-Content-Type-Options - X-Frame-Options header - Referrer-Policy [Might consider adding variable] - Secure flag with cookies - matrix_grafana_content_security_policy variable for [Content Security Policy](https://grafana.com/docs/grafana/latest/administration/configuration/#content_security_policy)	4 years ago
sakkiii	27377e099d	updated matrix_grafana_docker_image to v7.5.4 ... Latest stable grafana version is [7.5.4 (2021-04-14)](https://github.com/grafana/grafana/releases/tag/v7.5.4)	4 years ago
Slavi Pantaleev	68ca81c8c2	Attempt to fix docker_network result discrepancy between Ansible versions ... Supposedly fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/907	4 years ago
Slavi Pantaleev	9c1f41eadf	Merge pull request #1002 from thedanbob/node-exporter-1.1.2 ... Update prometheus node exporter (1.1.0->1.1.2)	4 years ago
Dan Arnfield	8a550ce67c	Update prometheus (2.24.1->2.26.0)	4 years ago
Dan Arnfield	83cc5c9e6a	Update prometheus node exporter (1.1.0 -> 1.1.2)	4 years ago
sakkiii	5dc642ace1	Nginx element web: XSS protection & nosniff header ... X-XSS-Protection: 1; mode=block; header, for basic XSS protection in legacy browsers. X-Content-Type-Options: nosniff header, to disable MIME sniffing	4 years ago
Slavi Pantaleev	fcb9e9618a	Make Coturn TLSv1/v1.1 configurable ... Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/999	4 years ago
sakkiii	540416e32d	Disable support for TLS 1.0 and TLS 1.1 ... These old versions of TLS rely on MD5 and SHA-1, both now broken, and contain other flaws. TLS 1.0 is no longer PCI-DSS compliant and the TLS working group has adopted a document to deprecate TLS 1.0 and TLS 1.1.	4 years ago
Michael-GMH	89cb5a3d7a	GMH v0.4.2 update	4 years ago
Michael	f41bfb69d2	update survey template formatting	4 years ago
Michael	814bdf5a88	update spelling	4 years ago
Michael	fbe22289bd	merge with upstream and testing branch	4 years ago
Slavi Pantaleev	995c483856	Merge pull request #962 from aaronraimist/mjolnir ... Add mjolnir	4 years ago
Slavi Pantaleev	f183add44d	Merge pull request #977 from aaronraimist/simple-antispam ... Upgrade synapse-simple-antispam (0.0.1 -> 0.0.3)	4 years ago
Aaron Raimist	81dddd2e25	Upgrade Element (1.7.24 -> 1.7.24.1)	4 years ago
Aaron Raimist	c43bd412dd	Upgrade synapse-simple-antispam (0.0.1 -> 0.0.3)	4 years ago
Aaron Raimist	1ecee625d5	Depend on more services, add a delay	4 years ago
Slavi Pantaleev	a88391edf5	Merge pull request #972 from JohannesKleine/nginx-config ... matrix-nginx-proxy: add custom nginx options to nginx.conf.j2	4 years ago
teutat3s	0b5e903693	Updates to mautrix-signal config ... See these last commits: tulir/mautrix-signal@4fc34330c1f6947aece67863b0d04da34c776f80 tulir/mautrix-signal@64bc5c36a509ba435a0b01cf44afb1b5d2642efd tulir/mautrix-signal@ddda1666d41d28750cc59d070e4388b24add6ad9	4 years ago
Christoph Johannes Kleine	fcd66b2889	rename variables	4 years ago
Christoph Johannes Kleine	8ba1105010	rename variable	4 years ago
Christoph Johannes Kleine	3a772f2f65	matrix-nginx-proxy: add custom nginx options to nginx.conf.j2	4 years ago
Slavi Pantaleev	93960b70be	Do not fail if `_matrix-identity` DNS SRV record missing ... Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/963 This also simplifies Prerequisites, which is great. It'd be nice if we were doing these checks in some optional manner and reporting them as helpful messages (using `matrix_playbook_runtime_results`), but that's more complicated. I'd rather drop these checks completely.	4 years ago
Slavi Pantaleev	5e1cf7f8b9	Upgrade Element (1.7.23 -> 1.7.24)	4 years ago
Slavi Pantaleev	9409588513	Fix variable name typo (take 2) ... Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/970	4 years ago
Slavi Pantaleev	179b416ed5	Fix variable name typo ... Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/970	4 years ago
Slavi Pantaleev	77d598b315	Fix Go-NEB variable definitions using the wrong type ... Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/969	4 years ago
Slavi Pantaleev	49868db3de	Upgrade Synapse for ARM64 (1.30.0 -> 1.30.1)	4 years ago
Slavi Pantaleev	94487dc6a7	Upgrade Synapse for amd64 (1.30.0 -> 1.30.1)	4 years ago
transcaffeine	dbae18fd6a	feat: push ephemeral events to appservices ... This adds https://github.com/matrix-org/matrix-doc/pull/2409 to the appservice registrations, enabling synapse to push EDUs to appservices.	4 years ago
Dan Arnfield	97d8527e00	Update nginx (1.19.6 -> 1.19.8)	4 years ago
Slavi Pantaleev	5a4ea5f866	Make AWX enabling/disabling consistent with other playbook roles ... That is: - enabled in the role by default - disabled in the compilation (playbook), if considered an optional component	4 years ago
Aaron Raimist	bab8b950ca	Add mjolnir	4 years ago
Slavi Pantaleev	06c74728eb	Move matrix_nginx_proxy_proxy_synapse_federation_api_enabled definition to the role ... This variable was previously undefined in the role and was only getting defined via `group_vars/matrix_servers`. We now properly initialize it (and its good default value) in the role itself.	4 years ago
Slavi Pantaleev	d09609daa8	Fix Jinja2 syntax error ... Fixes a regression introduced in ffe649a240	4 years ago
Slavi Pantaleev	6a3433fbad	Update Synapse for ARM64 (1.29.0 -> 1.30.0) ... Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/958	4 years ago
Slavi Pantaleev	ffe649a240	Update homeserver.yaml to keep up with Synapse v1.30.0 ... Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/958	4 years ago
rakshazi	74106f2a80	Updated synapse 1.29.0 -> 1.30.0	4 years ago
Thom Wiggers	54fe59f05c	Update IRC appservice	4 years ago
Slavi Pantaleev	2737ebc290	Complain if people try to use matrix-sygnal on non-amd64	4 years ago
Slavi Pantaleev	b824522b33	Remove unnecessary with_items statement	4 years ago
Slavi Pantaleev	9a0222fa47	Add Sygnal support ... Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/683	4 years ago
Michael	af240aef37	remove sections from task list that arent needed	4 years ago
Michael	85127bacba	Merge remote-tracking branch 'upstream/master'	4 years ago
Michael	1e54b1d1a5	merge upstream	4 years ago
Slavi Pantaleev	f99dcd611f	Pass proper UID/GID to Synapse ... Fixes a regression caused by a5ee39266c. If the user id and group id were different than 991:991 (which used to be a hardcoded default for us long ago), there was a mismatch between what Synapse was trying to use (991:991) and what it was actually started with (in `--user=..`). It was then trying to change ownership, which was failing. This was mostly affecting newer installations which were not using the 991:991 defaults we had long ago (since a1c5a197a9).	4 years ago
Slavi Pantaleev	a5ee39266c	Go through start.py when launching Synapse ... This allows us to benefit from helpful things it does for us, like enabling jemalloc: https://github.com/matrix-org/synapse/pull/8553 We weren't going through `start.py` before, because it was causing some conflict with our `docker run --user=...` stuff, but it doesn't seem to be a problem anymore. Having done this, we won't need to do things like https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/941 anymore.	4 years ago
Aaron Raimist	32b3650c12	Set X-Forwarded-Proto on federation requests	4 years ago
Béla Becker	2d7e7680e5	matrix.{{ matrix_domain }} -> {{ matrix_server_fqn_matrix }}	4 years ago
Aaron Raimist	466827139a	Also check if matrix_ssl_lets_encrypt_support_email is blank	4 years ago
Slavi Pantaleev	97c0bf1a73	Merge pull request #942 from pushytoxin/etherpad1_8_12 ... Upgrade Etherpad (1.8.7 -> 1.8.12)	4 years ago
Béla Becker	60aa40845f	Upgrade Etherpad (1.8.7 -> 1.8.12)	4 years ago
Yannick Goossens	27416607d9	Another field with 'invalid input syntax for type smallint'	4 years ago
Michael	5a6bdb0c3d	merge upstream	4 years ago
Michael	571b70a1f4	fix for running outside of AWX	4 years ago
Michael	5a1f3b7d67	GMH v0.3.0	4 years ago
Michael	33ec5710d9	0.2.1 revision	4 years ago
Michael	4c882c513b	initial PR	4 years ago
Marcus Proest	2ca8211184	Merge remote-tracking branch 'upstream/master'	4 years ago
Marcus Proest	b99372a3c5	initial commit of mautrix-instagram role	4 years ago
Slavi Pantaleev	108aed53be	Fix invalid matrix-postgres.service when matrix_postgres_process_extra_arguments is empty ... This only seems to be affecting some people badly enough to cause matrix-postgres not to start. Certain systemd versions probably handle it better or something. Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/889 (hopefully)	4 years ago
Slavi Pantaleev	1dbdfeec07	Fix matrix-postgres stopping for consistency with other services ... This probably got lost somehow in all the work that happened in https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/456	4 years ago
Slavi Pantaleev	9f91eaa54b	Fix incorrect service name ... Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/887	4 years ago
Slavi Pantaleev	91c987ca7d	Merge pull request #872 from xangelix/add-mx-puppet-groupme-gh ... Add mx-puppet-groupme support	4 years ago
Slavi Pantaleev	d94d0e2ca5	Merge pull request #456 from eMPee584/synapse-workers ... Synapse workers	4 years ago
Slavi Pantaleev	9dc87bb948	Add Synapse worker presets for easier configuration ... Adding more presets in the future would be nice.	4 years ago
Slavi Pantaleev	eaea215282	Allow Synapse workers to be used with an external nginx webserver ... We're talking about a webserver running on the same machine, which imports the configuration files generated by the `matrix-nginx-proxy` in the `/matrix/nginx-proxy/conf.d` directory. Users who run an nginx webserver on some other machine will need to do something different.	4 years ago
Slavi Pantaleev	2f732e4234	Update Synapse worker endpoints	4 years ago
Slavi Pantaleev	217b4a8808	Release Synapse v1.27.0 to ARM32 via self-building ... Related to: https://matrix.org/blog/2021/02/18/synapse-1-27-0-released#dropping-armv7-docker-images	4 years ago
Béla Becker	65eab14a64	Make sure Etherpad has a database to write to	4 years ago
Béla Becker	005f4d57f9	Remove mention of sqlite3 support for Etherpad ... The official Etherpad Docker image has no support for sqlite3 databases.	4 years ago
Slavi Pantaleev	1789620901	Merge branch 'master' into synapse-workers	4 years ago
Slavi Pantaleev	d6c4d41c2b	Define instanceId property on workers ... This give us the possibility to run multiple instances of workers that that don't expose a port. Right now, we don't support that, but in the future we could run multiple `federation_sender` or `pusher` workers, without them fighting over naming (previously, they'd all be named something like `matrix-synapse-worker-pusher-0`, because they'd all define `port` as `0`).	4 years ago
rakshazi	996f732f98	Update synapse-admin (0.6.1 -> 0.7.0)	4 years ago
Cody Neiman	c4e1209452	Merge branch 'master' into add-mx-puppet-groupme-gh	4 years ago
Slavi Pantaleev	d33483b8ce	Document that Synapse pusher worker instances are shardable ... Related to: - https://github.com/matrix-org/synapse/pull/9407 - https://github.com/matrix-org/synapse/pull/7855	4 years ago
Slavi Pantaleev	daae74b074	Merge branch 'master' into synapse-workers	4 years ago
Slavi Pantaleev	521160c12f	Upgrade Synapse (v1.26.0 -> v1.27.0)	4 years ago
Slavi Pantaleev	865d71e35a	Upgrade Element (1.7.20 -> 1.7.21)	4 years ago
Marc Leuser	fd3d48bb6d	trust the reverse proxy by default	4 years ago
Marc Leuser	1434c371bd	safer port binding of etherpad docker container ... don't bind to any host port if nginx_proxy is used only bind to localhost if it's not used	4 years ago
Slavi Pantaleev	61e427d690	Do not let people enable more than 1 federation_sender worker	4 years ago
Slavi Pantaleev	85a05f38e8	Allow Synapse worker list to be generated dynamically ... This leads to much easier management and potential safety features (validation). In the future, we could try to avoid port conflicts as well, but it didn't seem worth the effort to do it now. Our port ranges seem large enough. This can also pave the way for a "presets" feature (similar to `matrix_nginx_proxy_ssl_presets`) which makes it even easier for people to configure worker counts.	4 years ago
Slavi Pantaleev	43059bb040	Fix metrics listeners for Synapse workers ... `::` leads to errors like: > socket.gaierror: [Errno -9] Address family for hostname not supported	4 years ago
Slavi Pantaleev	453a4ec2d8	Relocate tasks related to Synapse workers	4 years ago
Cody Neiman	e510481e84	Merge branch 'master' into add-mx-puppet-groupme-gh	4 years ago
Slavi Pantaleev	5cfeae806b	Merge branch 'master' into synapse-workers	4 years ago
Slavi Pantaleev	894679750e	Merge pull request #862 from s-thom/nginx-additional ... Add additional domains for Let's Encrypt certificates to be obtained	4 years ago
Slavi Pantaleev	a8e9f35708	Touch up documentation a bit	4 years ago
Slavi Pantaleev	7d39e5153a	Upgrade Postgres minor versions	4 years ago
Cody Neiman	dc5e7eed3f	Fix mx-puppet-groupme port typo	4 years ago
Cody Neiman	2b3c143487	Update mx-puppet-groupme docker image	4 years ago
Cody Neiman	5a70a56ff0	Initial implementation	4 years ago
Slavi Pantaleev	8434af10de	Do not fail on unrelated validation tasks when Grafana not enabled	4 years ago
Slavi Pantaleev	66d5b0e5b9	Do not fail on unrelated validation tasks when Prometheus not enabled ... These validation tasks should only run when Prometheus is enabled.	4 years ago
Slavi Pantaleev	2ac2b02cb4	Merge pull request #838 from Peetz0r/stats ... Prometheus and Grafana on stats.<domain>	4 years ago
Slavi Pantaleev	c8ab200cb1	Break dependency between matrix-prometheus and (matrix-prometheus-node-exporter, matrix-synapse)	4 years ago
Slavi Pantaleev	6842102e00	Split install/uninstall tasks in matrix-prometheus	4 years ago
Slavi Pantaleev	18e31526a8	Rename some variables	4 years ago
Slavi Pantaleev	85a260daaf	Make --tags=setup-prometheus not break, relying on matrix-base facts	4 years ago
Slavi Pantaleev	df3dd1c824	Use --read-only FS for metrics-related containers ... It seems like it doesn't cause any issues for any of these services.	4 years ago
Slavi Pantaleev	3ce9712388	Fix Grafana dashboard/datasource label	4 years ago
Slavi Pantaleev	f0cd294628	Fix matrix-prometheus-node-exporter failure to start ... The quotes around "host" for both `--pid` and `--net` were causing trouble for me: > docker: --pid: invalid PID mode. and: > docker: Error response from daemon: network "host" not found. I've also changed the `-v` call to `--mount` for consistency with the rest of the playbook.	4 years ago
efraimbart	b7e68cb779	Fix wrong docker image being pulled ... Changed `matrix_mautrix_signal_docker_image_force_pull` to `matrix_mautrix_signal_daemon_docker_image_force_pull` when force pulling the daemon	4 years ago
Peetz0r	fde222a041	Update Prometheus Node Exporter 1.0.1 => 1.1.0	4 years ago
Peetz0r	3a77261dc6	Update Grafana 7.3.7 => 7.4.0	4 years ago
Peetz0r	144a5e6198	Register docker network info and use it for prometheus-node-exporter ... Using the hardcoded IP did break while I was messing with IPv6 stuff on the other branch	4 years ago
Peetz0r	76d7e84be5	Make prometheus-node-exporter a bit more capable ... By running it in a more privileged container with access to the host network stack and such	4 years ago
Peetz0r	989100b1c1	Grafana nginx proxy config	4 years ago
Peetz0r	eb5aa93e8a	Grafana ... Also includes the dashboards for Synapse and for Node Exporter. Again has only been tested on debian amd64 so far, but the grafana docker image is available for arm64 and arm32. Nice.	4 years ago
Peetz0r	e525970b39	Prometheus Node Exporter ... Basic system stats, to show stuff the synapse metrics can't show such as resource usage by bridges, etc Seems to work fine as well. This too has only been tested on debian amd64 so far	4 years ago
Peetz0r	13ef9e85cf	Prometheus ... Initial attempt. Seems to work fine. Only tested on debian amd64 so far	4 years ago
Slavi Pantaleev	7e8e95a09a	Make S3-mounting path configurable ... This will make data migration easier.	4 years ago
Yan	385b6c623e	Fixes: a66a604e ("Selfbuild appservice-slack bridge")	4 years ago
Stuart Thomson	064b2e533c	Add variable for extra domains to get LE certs for ... I felt that adding another variable was probably going to be the easiest way to do this. I may end up adding another variable to enable this feature, for consistency with some of the other things.	4 years ago
Paul Tötterman	9ad67d7cdf	Upgrade Element (1.7.19 -> 1.7.20) ... https://github.com/vector-im/element-web/releases/tag/v1.7.20 https://hub.docker.com/layers/vectorim/element-web/v1.7.20/images/sha256-44cae3a532d86c16940deb70866b522ba6acc8c5d7adf3c661cfc8b06f1de681?context=explore	4 years ago
Aaron Raimist	5cb976c321	Upgrade Element (1.7.18 -> 1.7.19)	4 years ago
Julian Foad	d1f28d17bb	Allow psql args to be given to matrix-postgres-cli ... This passes any arguments given to 'matrix-postgres-cli' to the 'psql' command. Examples: $ # start an interactive shell connected to a given db $ sudo matrix-postgres-cli -d synapse $ # run a query, non-interactively $ sudo matrix-postgres-cli -d synapse -c 'SELECT group_id FROM groups;'	4 years ago
Slavi Pantaleev	c4a05b760a	Make mautrix bridges not overwrite their config ... If they do, our next playbook runs would simply revert it and report "changed" for that task. There's no benefit to letting the bridge spew a new config file. This does not apply to the mautrix whatsapp bridge, because that one is written in Go (not Python) and takes different flags. There's no equivalent flag there.	4 years ago