Slavi Pantaleev
1472958e25
Upgrade Synapse (1.47.1 -> 1.48.0)
3 years ago
Slavi Pantaleev
6b07ee3b58
Upgrade Synapse (1.47.0 -> 1.47.1) - security fixes
...
Learn more here: https://github.com/matrix-org/synapse/releases/tag/v1.47.1
3 years ago
rakshazi
d41e9230da
expose smtp_user and smtp_pass to ansible configs (role: matrix-synapse)
3 years ago
Slavi Pantaleev
e1a6d1e4b2
Upgrade Synapse (1.46.0 -> 1.47.0)
...
We had to remove UID/GID environment variables that we used to pass
to the Synapse container, because it was causing a problem after
https://github.com/matrix-org/synapse/pull/11209
We were using both `--user` and UID/GID environment variables until now.
3 years ago
boris runakov
1ec67f49b0
replaced 8008 where possible
3 years ago
Slavi Pantaleev
c1bc7b9f93
Rename variables to prevent confusion
...
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1397
and https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1399
3 years ago
Slavi Pantaleev
dc4452ac21
Merge branch 'master' into matrix-federation-api-port
3 years ago
boris runakov
8c3e25de1b
renamed var to matrix_synapse_container_federation_api_port
3 years ago
b
07496069c8
rellocating variables for consistency
3 years ago
b
afccc2b11f
make 8448 configurable instead of hard coded
3 years ago
b
7756cc4c8e
replace port 8048 with matrix_synapse_container_default_federation_port
3 years ago
Slavi Pantaleev
7b8b595e81
Upgrade Synapse (1.45.1 -> 1.46.0)
3 years ago
Slavi Pantaleev
5dc2868269
Upgrade Synapse (1.45.0 -> 1.45.1)
3 years ago
Slavi Pantaleev
1dab178a44
Upgrade Synapse (1.44.0 -> 1.45.0)
3 years ago
Wm Salt Hale
a1cbd5459c
Update Synapse default room version (6 -> 9)
...
From the [Synapse 1.43.0 release highlights](https://matrix.org/blog/2021/09/21/synapse-1-43-0-released ):
> Asks clients to prefer [room version 9](https://github.com/matrix-org/matrix-doc/pull/3375 ) when creating restricted rooms ([#10772 ](https://github.com/matrix-org/synapse/issues/10772 )), via the API defined in [MSC3244: room version capabilities](https://github.com/matrix-org/matrix-doc/pull/3244 ).
3 years ago
Slavi Pantaleev
278bbae4d5
Upgrade Synapse (1.43.0 -> 1.44.0)
3 years ago
Slavi Pantaleev
7934cde90f
Upgrade Synapse (1.42.0 -> 1.43.0)
...
Related to:
- https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1287
- https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1288
.. but does it in a more complete way
3 years ago
Slavi Pantaleev
0faad74a44
Upgrade Synapse (1.41.1 -> 1.42.0)
3 years ago
Catalan Lover
777ba6bc5a
Upgrade to Synaspe v 1.41.1 (Security Update)
...
Synapse 1.41.1 Patches 2 exploits that can reveal information about rooms an user is not supposed to have access to information about.
3 years ago
Slavi Pantaleev
a4db9557db
Update homeserver.yaml to match the one in Synapse v1.41.0
...
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1247
3 years ago
Catalan Lover
1e070f1e56
Update Synapse from 1.40.0 to 1.41.0
3 years ago
Toni Spets
bce94c5860
Allow configuring synapse database transaction limit
3 years ago
WobbelTheBear
2469ada520
Update Synapse (1.39.0 -> 1.40.0)
3 years ago
Slavi Pantaleev
179775b92d
Upgrade Synapse (1.38.1 -> 1.39.0)
3 years ago
Slavi Pantaleev
112d8d8243
Upgrade Synapse (1.38.0 -> 1.38.1)
3 years ago
Janar Juusu
c198320f65
feat: update synapse to 1.38.0
3 years ago
Davy Landman
c9d73c6606
Updating to latest synapse release (performance regression)
...
https://github.com/matrix-org/synapse/releases/tag/v1.37.1
3 years ago
Slavi Pantaleev
3da4b684a5
Upgrade Synapse (1.36.0 -> 1.37.0)
3 years ago
Slavi Pantaleev
9daeb39710
Upgrade Synapse (1.35.1 -> 1.36.0)
3 years ago
Slavi Pantaleev
ab08a4f60e
Upgrade Synapse (1.35.0 -> 1.35.1)
4 years ago
Slavi Pantaleev
b1f1c28ef0
Upgrade Synapse (1.34.0 -> 1.35.0)
4 years ago
Slavi Pantaleev
b3351d2a53
Merge pull request #1083 from haghighi-ahmad/active-directory-support-for-ldap_auth_provider
...
Synapse LDAP auth: add support for Active Directory
4 years ago
BG
763952395b
Adding mjolnir antispam synapse modul.
4 years ago
Ahmad Haghighi
209d59070e
Avoiding if(s), fix #1083
...
Conversation: https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1083#discussion_r638671860
Signed-off-by: Ahmad Haghighi <haghighi@fedoraproject.org>
4 years ago
Ahmad Haghighi
ee088d5d46
Synapse LDAP auth: add support for Active Directory
...
Signed-off-by: Ahmad Haghighi <haghighi@fedoraproject.org>
4 years ago
Slavi Pantaleev
d156c8caa2
Upgrade Synapse (1.33.2 -> 1.34.0)
4 years ago
sakkiii
8fc55b30c5
Upgrade Synapse (1.33.1 -> 1.33.2)
...
This release fixes a denial of service attack (CVE-2021-29471) against Synapse's push rules implementation. Server admins are encouraged to upgrade.
Ref: https://github.com/matrix-org/synapse/releases/tag/v1.33.2
4 years ago
Slavi Pantaleev
61220ea487
Upgrade Synapse (1.33.0 -> 1.33.1)
4 years ago
Slavi Pantaleev
d4d1e2e922
Upgrade Synapse (1.32.2 -> 1.33.0)
4 years ago
Slavi Pantaleev
e3fa3e12bc
Upgrade Synapse (1.31 -> 1.32.2)
4 years ago
Slavi Pantaleev
378fabf177
Revert "Upgrade Synapse (1.31 -> 1.32.1)"
...
This reverts commit 1fb54a37cb
.
Seems like it's been pulled or something. It used to exist, but not
anymore. Not sure what's going on.
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1017
Related to
https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1010
4 years ago
Slavi Pantaleev
1fb54a37cb
Upgrade Synapse (1.31 -> 1.32.1)
...
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1010
4 years ago
Slavi Pantaleev
ca786cc343
Revert "Upgrade Synapse (1.31 -> 1.32)"
...
This reverts commit f825c7c263
.
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1010
4 years ago
Slavi Pantaleev
f825c7c263
Upgrade Synapse (1.31 -> 1.32)
4 years ago
Ahmad Haghighi
e335f3fc77
rename matrix_global_registry to matrix_container_global_registry_prefix related to #990
...
Signed-off-by: Ahmad Haghighi <haghighi@fedoraproject.org>
4 years ago
Ahmad Haghighi
f52a8b6484
use custom docker registry
4 years ago
Slavi Pantaleev
4830b7d830
Upgrade Synapse for ARM64 (1.30.1 -> 1.31.0)
4 years ago
Slavi Pantaleev
3f426de599
Upgrade Synapse (1.30.1 -> 1.31.0)
4 years ago
Slavi Pantaleev
f183add44d
Merge pull request #977 from aaronraimist/simple-antispam
...
Upgrade synapse-simple-antispam (0.0.1 -> 0.0.3)
4 years ago
Aaron Raimist
c43bd412dd
Upgrade synapse-simple-antispam (0.0.1 -> 0.0.3)
4 years ago
Slavi Pantaleev
49868db3de
Upgrade Synapse for ARM64 (1.30.0 -> 1.30.1)
4 years ago
Slavi Pantaleev
94487dc6a7
Upgrade Synapse for amd64 (1.30.0 -> 1.30.1)
4 years ago
Slavi Pantaleev
6a3433fbad
Update Synapse for ARM64 (1.29.0 -> 1.30.0)
...
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/958
4 years ago
rakshazi
74106f2a80
Updated synapse 1.29.0 -> 1.30.0
4 years ago
Pablo Montepagano
52fe8a05b0
Adding vars to synapse for private servers.
4 years ago
Slavi Pantaleev
9b72384df7
Upgrade Synapse (1.28.0 -> 1.29.0)
4 years ago
Slavi Pantaleev
ccf5915874
Upgrade Synapse for ARM64 (v1.26.0 -> v1.28.0)
4 years ago
Slavi Pantaleev
ae091d7b2d
Upgrade Synapse (v1.27.0 -> v1.28.0)
4 years ago
rakshazi
2f887f292c
added "matrix_%SERVICE%_version" variable to all roles, use it in "matrix_%SERVICE%_docker_image" var (preserving backward-compatibility)
4 years ago
Slavi Pantaleev
d94d0e2ca5
Merge pull request #456 from eMPee584/synapse-workers
...
Synapse workers
4 years ago
Slavi Pantaleev
9dc87bb948
Add Synapse worker presets for easier configuration
...
Adding more presets in the future would be nice.
4 years ago
Slavi Pantaleev
217b4a8808
Release Synapse v1.27.0 to ARM32 via self-building
...
Related to: https://matrix.org/blog/2021/02/18/synapse-1-27-0-released#dropping-armv7-docker-images
4 years ago
Slavi Pantaleev
d6c4d41c2b
Define instanceId property on workers
...
This give us the possibility to run multiple instances of
workers that that don't expose a port.
Right now, we don't support that, but in the future we could
run multiple `federation_sender` or `pusher` workers, without
them fighting over naming (previously, they'd all be named
something like `matrix-synapse-worker-pusher-0`, because
they'd all define `port` as `0`).
4 years ago
Slavi Pantaleev
d33483b8ce
Document that Synapse pusher worker instances are shardable
...
Related to:
- https://github.com/matrix-org/synapse/pull/9407
- https://github.com/matrix-org/synapse/pull/7855
4 years ago
Slavi Pantaleev
daae74b074
Merge branch 'master' into synapse-workers
4 years ago
Slavi Pantaleev
521160c12f
Upgrade Synapse (v1.26.0 -> v1.27.0)
4 years ago
Slavi Pantaleev
61e427d690
Do not let people enable more than 1 federation_sender worker
4 years ago
Slavi Pantaleev
85a05f38e8
Allow Synapse worker list to be generated dynamically
...
This leads to much easier management and potential safety
features (validation). In the future, we could try to avoid port
conflicts as well, but it didn't seem worth the effort to do it now.
Our port ranges seem large enough.
This can also pave the way for a "presets" feature
(similar to `matrix_nginx_proxy_ssl_presets`) which makes it even easier
for people to configure worker counts.
4 years ago
Slavi Pantaleev
5cfeae806b
Merge branch 'master' into synapse-workers
4 years ago
Slavi Pantaleev
7e8e95a09a
Make S3-mounting path configurable
...
This will make data migration easier.
4 years ago
Slavi Pantaleev
1cd2a218de
Merge branch 'master' into synapse-workers
4 years ago
Slavi Pantaleev
c6feb0b99e
Upgrade Synapse (v1.25.0 -> v1.26.0)
4 years ago
Slavi Pantaleev
66cdc7bf5a
Clean up worker.yaml generation a bit and make it more flexible
4 years ago
Slavi Pantaleev
63301b0ef1
Improvements around Synapse worker/metrics ports exposure
...
There was a `matrix_nginx_proxy_enabled|default(False)` check, but:
- it didn't seem to work reliably for some reason (hmm)
- referring to a `matrix_nginx_proxy_*` variable from within the
`matrix-synapse` role is not ideal
- exposing always happened on `127.0.0.1`, which may not be good enough
for some rarer setups (where the own webserver is external to the host)
4 years ago
Marcel Partap
183adec3d8
Merge remote-tracking branch 'origin/master' into synapse-workers
4 years ago
Slavi Pantaleev
95346f3117
Reorganize Postgres access (breaking change)
...
In short, this makes Synapse a 2nd class citizen,
preparing for a future where it's just one-of-many homeserver software
options.
We also no longer have a default Postgres superuser password,
which improves security.
The changelog explains more as to why this was done
and how to proceed from here.
4 years ago
Slavi Pantaleev
b15da29ebb
Bump Synapse to v1.25.0 for ARM
4 years ago
Slavi Pantaleev
d5945c6e78
Upgrade Synapse (v1.24.0 -> v1.25.0) for amd64
4 years ago
Marcel Partap
cd8100544b
Merge remote-tracking branch 'origin/master' into synapse-workers
...
Sync with upstream
4 years ago
Slavi Pantaleev
245b749946
Upgrade Synapse for ARM (v1.23.0 -> v1.24.0)
...
Continuation of aa86e0dac6
, now that ARM images are out.
4 years ago
Slavi Pantaleev
aa86e0dac6
Upgrade Synapse (v1.23.0 -> v1.24.0)
...
Because the ARM images are not pushed yet, we hold back to v1.23.0
for now.
4 years ago
Slavi Pantaleev
c07c927d9f
Automatically enable openid listeners when ma1sd enabled
...
ma1sd requires the openid endpoints for certain functionality.
Example: 90b2b5301c/src/main/java/io/kamax/mxisd/auth/AccountManager.java (L67-L99)
If federation is disabled, we still need to expose these openid APIs on the
federation port.
Previously, we were doing similar magic for Dimension.
As per its documentation, when running unfederated, one is to enable
the openid listener as well. As per their recommendation, people
are advised to do enable it on the Client-Server API port
and use the `federationUrl` variable to override where the federation
port is (making federation requests go to the Client-Server API).
Because ma1sd always uses the federation port (unless you do some
DNS overwriting magic using its configuration -- which we'd rather not
do), it's better if we just default to putting the `openid` listener
where it belongs - on the federation port.
With this commit, we retain the "automatically enable openid APIs" thing
we've been doing for Dimension, but move it to the federation port instead.
We also now do the same thing when ma1sd is enabled.
4 years ago
Marcel Partap
f201bca519
synapse workers: define and expose METRICS port for each worker
...
As seen on TV:
https://github.com/matrix-org/synapse/blob/master/docs/metrics-howto.md#monitoring-workers
4 years ago
Marcel Partap
af08f18779
synapse workers default config: disable user_dir worker for now
...
(until https://github.com/matrix-org/synapse/issues/8787 is resolved)
4 years ago
Marcel Partap
b73ac965ac
Merge remote-tracking branch 'origin/master' into synapse-workers
4 years ago
Slavi Pantaleev
be5263f397
Move self-building git repository URLs to variables (stop hardcoding)
4 years ago
transcaffeine
c58a7e03c7
synapse: update to 1.23.0
4 years ago
Slavi Pantaleev
5eed874199
Improve self-building experience (avoid conflict with pullable images)
...
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/716
This patch makes us use more fully-qualified container image names
(either prefixed with docker.io/ or with localhost/).
The latter happens when self-building is enabled.
We've recently had issues where if an image was removed manually
and the service was restarted (making `docker run` fetch it from Docker Hub, etc.),
we'd end up with a pulled image, even though we're aiming for a self-built one.
Re-running the playbook would then not do a rebuild, because:
- the image with that name already exists (even though it's something
else)
- we sometimes had conditional logic where we'd build only if the git
repo changed
By explicitly changing the name of the images (prefixing with localhost/),
we avoid such confusion and the possibility that we'd automatically pul something
which is not what we expect.
Also, I've removed that condition where building would happen on git
changes only. We now always build (unless an image with that name
already exists). We just force-build when the git repo changes.
4 years ago
Marcel Partap
4678c5d7bd
Merge remote-tracking branch 'origin/master' into synapse-workers
...
Also, replace vague FIXME by a proper NOTE on the complete
story of the user_dir endpoints..
4 years ago
Slavi Pantaleev
5c91e56898
Upgrade Synapse (v1.22.0 -> v1.22.1)
4 years ago
Marcel Partap
2d1b9f2dbf
synapse workers: reworkings + get endpoints from upstream docs via awk
...
(yes, a bit awkward and brittle… xD)
4 years ago
Slavi Pantaleev
70f0b97a0a
Upgrade Synapse (v1.21.2 -> v1.22.0)
4 years ago
Marcel Partap
87bd64ce9e
Merge remote-tracking branch 'origin/master' into synapse-workers
4 years ago
Slavi Pantaleev
f7ecc7a2a5
Upgrade Synapse (v1.21.1 -> v1.21.2)
4 years ago
Slavi Pantaleev
5abd511368
Upgrade Synapse (v1.21.0 -> v1.21.1)
4 years ago
Aaron Raimist
78529cbd47
Upgrade Synapse (v1.20.1 -> v1.21.0)
4 years ago
Marcel Partap
36e9be6092
matrix_synapse_workers_{avail,enabled}_list: sort non-generic workers
...
.. alphabetically and put those not documented as multi-instance
capable on ports ending on zero.
4 years ago
Marcel Partap
93a8ea7e4a
Merge remote-tracking branch 'master' into feature/add-worker-support
4 years ago
Slavi Pantaleev
e68450f094
Upgrade Synapse (v1.20.0 -> v1.20.1)
4 years ago
Slavi Pantaleev
dd217137b6
Upgrade Synapse (v1.19.3 -> v1.20.0)
4 years ago