Slavi Pantaleev
2df4349606
Fix matrix-corporal nginx configuration trouble in certain conditions
...
If the playbook were to run with `--tags=setup-nginx-proxy`,
it wouldn't go into `setup_corporal.yml`, which meant it wouldn't
perform a bunch of `set_fact` calls which override important
nginx proxy configuration.
We run these variable overrides on each call now (tagged with `always`)
to avoid such problems in the future.
6 years ago
Slavi Pantaleev
0d0ccde286
Add Service Discovery (/.well-known/matrix/client) support
6 years ago
Slavi Pantaleev
38e3ffa29c
Rename variable (matrix_riot_web_default_identity_server_url -> matrix_identity_server_url)
6 years ago
Slavi Pantaleev
4f48508014
Rename variable (matrix_nginx_riot_web_data_path -> matrix_riot_web_data_path)
6 years ago
Slavi Pantaleev
3fed0ec594
Remove now-useless file
6 years ago
Slavi Pantaleev
2446b4845c
Update matrix-corporal dependency
6 years ago
Slavi Pantaleev
8bbb6f0c60
Update dependencies
6 years ago
Slavi Pantaleev
21916c1a3c
Update matrix-corporal (1.1 -> 1.1.1)
6 years ago
Slavi Pantaleev
620553e408
Update README
6 years ago
Hugues Morisset
6ef934a416
Mautrix telegram minimum config variable requirement
6 years ago
Hugues Morisset
45fb2df43f
Fix some problem with permissions
...
Fix typo
Move mautrix variable in `defaults/main.yml` exclusively
6 years ago
Hugues Morisset
7b5f68c431
Add mautrix-telegram to bridge with telegram services
6 years ago
Slavi Pantaleev
7adcdf3040
Add the ability to control event_cache_size for Synapse
...
I've found the previous 10K default value to be way too low
on a bunch of servers I'm running, so it's now up to
100K and made configurable.
6 years ago
Slavi Pantaleev
b52d91e180
Add the ability to controll password-peppering for Synapse
...
Closes Github issue #5
6 years ago
Slavi Pantaleev
6d6a6412fa
Add the ability to control statistics-reporting for Synapse
...
Closes Github issue #3
6 years ago
Slavi Pantaleev
88b4434da9
Fix incorrect path
6 years ago
Slavi Pantaleev
7310498f71
Update certbot
6 years ago
Slavi Pantaleev
49e0d0e6db
Update dependencies
6 years ago
Slavi Pantaleev
7428b941c8
Remove old s3fs stuff
...
We've been using Goofys for a long time instead.
6 years ago
Slavi Pantaleev
23e4a4734b
Switch from acmetool to certbot for SSL certificate retrieval
6 years ago
Slavi Pantaleev
d5346656e3
Use 0.16.1 for riot-web, as the image for 0.16.2 is still unavailable
6 years ago
Slavi Pantaleev
51ac3421b5
Update matrix-corporal (1.0.1 -> 1.1)
6 years ago
Slavi Pantaleev
314ff09846
Update dependencies
6 years ago
Slavi Pantaleev
92e6fdd279
Update dependencies
6 years ago
Slavi Pantaleev
861957b6f1
Add missing when statement
6 years ago
Slavi Pantaleev
5398d80f01
Add support for matrix-corporal
6 years ago
Slavi Pantaleev
02d5b54fa5
Add controls for influencing Matrix Synapse's rate-limiting
6 years ago
Slavi Pantaleev
14d7d3e670
Add support for matrix-synapse-shared-secret-auth
6 years ago
Slavi Pantaleev
f72882fe1a
Fix user registration regression
...
Regression since a302a7d748
,
which made the Matrix Client API only available on
the http port (8008) and not over the federation port (8448).
6 years ago
Slavi Pantaleev
b0f1a1c80f
Fix nginx warning: adding already-default text/html to gzip_types
6 years ago
Slavi Pantaleev
832a4d71c1
Default to INFO logging for matrix-synapse-rest-auth, not DEBUG
6 years ago
Slavi Pantaleev
21a108262f
Remove some leftover debug statements
6 years ago
Slavi Pantaleev
25becc63d5
Minor fixups for the matrix-synapse-rest-auth handling
6 years ago
Slavi Pantaleev
ea43d46b70
Add matrix-synapse-rest-auth support
6 years ago
Slavi Pantaleev
df79901f8b
Improve compression support
6 years ago
Slavi Pantaleev
a302a7d748
Only run federation on 8448 and client on 80
...
This disables federation on the 80 port, as it's
not necessary. We also disable the old Angular webclient.
For the federation port (8448), we disable the client APIs
as those are not necessary. Those can even cause trouble
if one doesn't know about them and thinks that guarding the client
APIs at the 80 port is enough.
6 years ago
Slavi Pantaleev
74093dfb15
Add mxisd Identity Server support
6 years ago
Slavi Pantaleev
617712000e
Minor wording improvements
6 years ago
Slavi Pantaleev
1c71cb110e
Change SSL certificate obtaining a bit
6 years ago
Slavi Pantaleev
21da2f572b
Add email-sending support
6 years ago
Slavi Pantaleev
cab54879d1
Update dependencies
6 years ago
Slavi Pantaleev
084a0a0e53
Minor consistency improvement
6 years ago
Slavi Pantaleev
700602eed3
Rename a bunch of playbook variables for better consistency
6 years ago
Slavi Pantaleev
336785d1ed
Rename Ansible playbook tag (setup-main -> setup-all)
6 years ago
Slavi Pantaleev
3fd6fd647f
Put all containers in their own isolated Docker network (matrix)
...
Moving away from using the default bridge network to using our own.
This isolates our services from other Docker containers running
on the default network on the same host.
The benefits are that:
- isolation is a little better - we no longer share a default
bridge network with any other containers that might be running on the host
- there are no longer hard dependencies - we do service discovery
by DNS name, and not via explicit `--link` usage during container start,
so containers can start out of order and fail without bringing down others
with them
(`matrix-nginx-proxy` can continue running, even if one of the other services dies)
In the future, when other services get introduced,
the increased resilience and simplicity will help as well.
6 years ago
Slavi Pantaleev
b88fe971d6
Fix matrix-nginx-proxy.service dependency on riot-web, if riot-web disabled
6 years ago
Slavi Pantaleev
cdf4eefdf9
Fix typos
6 years ago
Slavi Pantaleev
f6950612a5
Upgrade dependencies
6 years ago
Slavi Pantaleev
6cb14be162
Upgrade dependencies
6 years ago
Slavi Pantaleev
ae7e8e61c6
Update dependencies
6 years ago