c0656448f7
Port 80 for IPv6
3 years ago
cd26af2f6f
Certbot Update (v1.20.0 -> v1.21.0)
3 years ago
7a4f49c457
Nginx Minio Update (1.21.3 -> 1.21.4)
3 years ago
735c966ab6
Disable systemd services when stopping to uninstall them
...
Until now, we were leaving services "enabled"
(symlinks in /etc/systemd/system/multi-user.target.wants/).
We clean these up now. Broken symlinks may still exist in older
installations that enabled/disabled services. We're not taking care
to fix these up. It's just a cosmetic defect anyway.
3 years ago
6eaa8ac65a
add server_name to matrix-synapsel.conf only if matrix_nginx_proxy_enabled
3 years ago
dcda17595a
change port 8090 to matrix_ma1sd_default_port
3 years ago
06bcdcf9d2
Merge pull request #1311 from HarHarLinks/master
...
add auto proxy synapse worker metrics
3 years ago
5f6bbafa17
fix space before tab in indent
3 years ago
7b33fc8e19
fixup! auto-generate prometheus.yml for workers metrics
3 years ago
ce41674e61
auto-generate prometheus.yml for workers metrics
3 years ago
4209c4208c
add own variable for worker metrics
...
https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1311#issuecomment-945718866
3 years ago
2bf052369d
Upgrade certbot (v1.19.0 -> v1.20.0)
3 years ago
1ba7760ea4
add how to generate htpasswd
...
for matrix_nginx_proxy_proxy_synapse_metrics_basic_auth_key
resolves #1308
3 years ago
d9fa2f7ed4
add auto proxy synapse worker metrics
...
when matrix_nginx_proxy_proxy_synapse_metrics is enabled
3 years ago
31396f0615
Merge pull request #1295 from nogweii/feat-support-upstream-https-forwarded
...
Support trusting the upstream server when it says the protocol is HTTPS
3 years ago
a676b5358c
Fix hydrogen OCSP typo
...
From 6f80292745
3 years ago
2578ca4cee
rename matrix_nginx_proxy_x_forwarded_header_value -> matrix_nginx_proxy_x_forwarded_proto_value
3 years ago
d0cd67044e
replace $scheme with X-Forwarded-Proto when enabled
3 years ago
3055b3996e
Updates Certbot -> v1.19.0, nginx ->1.21.3-alpine
3 years ago
ae6caf158a
Added variable matrix_nginx_proxy_request_timeout ( #1265 )
...
* add timeout param for nginx proxy
default value matrix_nginx_proxy_request_timeout is 60s
* default matrix_nginx_proxy_request_timeout - 60s
* few more variables for request timeout
* Update nginx.conf.j2
* Update nginx.conf.j2
3 years ago
a911207854
Revert "nginx update v1.21.2"
...
This reverts commit 732051b8fc
3 years ago
732051b8fc
nginx update v1.21.2
...
http://nginx.org/en/CHANGES
3 years ago
f5a7e6d78b
Certbot update v1.18.0
3 years ago
4d57a41b3f
remove matrix_awx_enabled from these
3 years ago
2e30802b87
use group variables instead
3 years ago
8238d65e5f
simplify template conditional
3 years ago
bfb61e776e
GMH v0.5.7... maybe!
3 years ago
4105ba854b
Merge pull request #1147 from datenkollektiv-net/allow-custom-federation-fqn
...
Make federation domain customizable
3 years ago
9345d840be
root path for the base domain is wrong ( #1189 )
...
* root path for the base domain
* Fix path when running in a container
Co-authored-by: Slavi Pantaleev <slavi@devture.com>
3 years ago
7a51268dfc
Upgrade certbot & nginx
...
Upgrade certbot (v1.16.0 -> v1.17.0) nginx (1.21.0 -> 1.21.1)
3 years ago
6294e58304
Fix Content-Security-Policy for Element
...
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1154
According to
https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy ,
having both a header and the `<meta>`-tag provided by Element itself is
not a problem. The 2 CSP policies get combined.
3 years ago
5df4d68829
Make federation domain customizable
3 years ago
0217644b48
Content-Security-Policy For Element Web
...
https://github.com/vector-im/element-web#configuration-best-practices
3 years ago
963f38ee7b
Upgrade certbot (v1.14.0 -> v1.16.0)
4 years ago
bee14550ab
Fix local/bin scripts autocompletion by adding rx perms to everyone
...
It's mildly annoying when trying to execute these scripts while logged
in as a regular user, as the missing execute permissions will hinder
autocompletion even when trying to use with sudo.
These shell scripts don't contain secrets, but may fail when ran by a
regular user. The failure is due to the lack of access to the /matrix
directory, and does not result in any damage.
4 years ago
4880dcceb0
Fix OCSP-stapling-related errors due to missing resolver
...
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1057
4 years ago
4ddd8bbb84
Updated nginx-proxy (1.20.0 -> 1.21.0)
4 years ago
1ed0857019
Fix syntax error
...
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1024
4 years ago
4a4a7f136e
changes added to hydrogen client
4 years ago
25e67b51d1
Merge branch 'spantaleev:master' into master
4 years ago
3436f9c10a
rename to matrix_nginx_proxy_hsts_preload_enabled
4 years ago
7cc5328ede
Comments & Ref
4 years ago
df2d91970d
matrix_nginx_proxy_xss_protection
4 years ago
6f80292745
Add OCSP stapling support and other SSL optimizations to Hydrogen vhost
...
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1061
and https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1057
4 years ago
d0de21ab34
Delete Hydrogen nginx configuration file when disabled
4 years ago
04548f8df2
Merge branch 'master' into hydrogen
4 years ago
9437f78c9e
Build using custom config.json, add CSP, update to 0.1.53
4 years ago
e9b878b9e9
Optimize SSL session
4 years ago
e6afa05f7b
Enable OCSP stapling for the federation port
...
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1057
Not sure if this is beneficial though.
4 years ago
57a6a98a50
Fix incorrect SSL certificate path
...
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1057
4 years ago
JokerGermany
sakkiii
Slavi Pantaleev
b
b
Kim Brose
Aaron Raimist
Colin Shea
Michael Collins
sakkiii
oxmie
pushytoxin
rakshazi
sakkiii