Michael Collins
df9da052ab
fix conditional
3 years ago
Michael Collins
384dfdce4b
update?
3 years ago
Samonitari
6f99f95aa2
Merge branch 'master' of https://github.com/spantaleev/matrix-docker-ansible-deploy into add-support-for-suse-linux
3 years ago
Michael Collins
b0d56f6c18
update conditionals
3 years ago
Michael Collins
208dce51d8
add new survey entries for welcome page link, headline and text
3 years ago
Michael Collins
0f4cb513b8
update survey
3 years ago
Michael Collins
8d9d176c36
update?
3 years ago
Michael Collins
d1754915d1
improve conditional
3 years ago
Michael Collins
ecc0437520
add logo section
3 years ago
Slavi Pantaleev
2bf052369d
Upgrade certbot (v1.19.0 -> v1.20.0)
3 years ago
Slavi Pantaleev
278bbae4d5
Upgrade Synapse (1.43.0 -> 1.44.0)
3 years ago
Slavi Pantaleev
bad2c5296e
Merge pull request #1312 from HarHarLinks/patch-4
...
add how to generate htpasswd
3 years ago
Michael Collins
e3183ba267
Merge remote-tracking branch 'upstream/master' into gomatrixhosting-testing
3 years ago
Kim Brose
1ba7760ea4
add how to generate htpasswd
...
for matrix_nginx_proxy_proxy_synapse_metrics_basic_auth_key
resolves #1308
3 years ago
HarHarLinks
d9fa2f7ed4
add auto proxy synapse worker metrics
...
when matrix_nginx_proxy_proxy_synapse_metrics is enabled
3 years ago
Michael Collins
40506d5c5a
no log
3 years ago
Slavi Pantaleev
b5d8444764
Add self-building support to matrix-bridge-appservice-webhooks
3 years ago
Michael Collins
c8744ef9a9
update deploy role for new awx token authentication method
3 years ago
Slavi Pantaleev
096c960b84
Add support for Postgres v14
3 years ago
Slavi Pantaleev
256d3ffec5
Merge pull request #1304 from apmechev/update-linkedin-0.5.1
...
Upgrade LinkedIn (0.5.0 -> 0.5.1)
3 years ago
Toni Spets
3119ef4574
Upgrade Heisenbridge (1.2.0 -> 1.2.1)
3 years ago
Slavi Pantaleev
b4b14539a7
Use ntp (instead of systemd-timesyncd) on Ubuntu 18.04
...
Seems like Ubuntu 18.04 does not have a dedicated `systemd-timesyncd` package, nor
does it include the `systemd-timesyncd` binary in the main `systemd` package.
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1302
Regression since https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1192
3 years ago
Alexandar Mechev
f02c08dc7f
Upgrade LinkedIn (0.5.0 -> 0.5.1)
3 years ago
Oli
59d4532efb
Upgrade Element (1.8.5 -> 1.9.0)
3 years ago
Jan
0ed585baa7
Archlinux: remove package systemd-timesyncd
...
#1192 lead to the following error for me on Archlinux:
`TASK [matrix-base : Install host dependencies] *******************************************************************************************************************************
fatal: [matrix.***.de]: FAILED! => changed=false
msg: |-
failed to install systemd-timesyncd: error: target not found: systemd-timesyncd`
There is no package called `systemd-timesyncd` on Archlinux. The service is installed with the [`systemd`](https://archlinux.org/packages/core/x86_64/systemd/ ) package itself.
I suggest removing the `systemd-timesyncd` from 2453876eb9/roles/matrix-base/tasks/server_base/setup_archlinux.yml (L7)
3 years ago
Slavi Pantaleev
31396f0615
Merge pull request #1295 from nogweii/feat-support-upstream-https-forwarded
...
Support trusting the upstream server when it says the protocol is HTTPS
3 years ago
Slavi Pantaleev
4f841a7001
Merge pull request #1192 from sakkiii/patch-1
...
migrate from ntp to systemd-timesyncd for ubuntu & Archlinux
3 years ago
Slavi Pantaleev
62ce06e28c
Merge pull request #1298 from GoMatrixHosting/gomatrixhosting-testing
...
GoMatrixHosting v0.6.0
3 years ago
Michael Collins
9a4187c852
Merge remote-tracking branch 'upstream/master' into gomatrixhosting-testing
3 years ago
Aaron Raimist
a676b5358c
Fix hydrogen OCSP typo
...
From 6f80292745
3 years ago
Colin Shea
2578ca4cee
rename matrix_nginx_proxy_x_forwarded_header_value -> matrix_nginx_proxy_x_forwarded_proto_value
3 years ago
Colin Shea
d0cd67044e
replace $scheme with X-Forwarded-Proto when enabled
3 years ago
Toni Spets
ff63f4efce
Upgrade Heisenbridge (1.1.1 -> 1.2.0)
3 years ago
Michael Collins
33c471477f
remove commented section
3 years ago
Slavi Pantaleev
7934cde90f
Upgrade Synapse (1.42.0 -> 1.43.0)
...
Related to:
- https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1287
- https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1288
.. but does it in a more complete way
3 years ago
Slavi Pantaleev
35153093fc
Merge pull request #1283 from wol-win/irc-update
...
Update irc bridge version (release-0.30.0 -> release-0.31.0)
3 years ago
WobbelTheBear
d82b98a522
Upgrade mjolnir (v0.1.19 -> v1.1.20)
...
Upgrade mjolnir (v0.1.19 -> v1.1.20)
Remark: interesting version number increase :-)
3 years ago
WobbelTheBear
f542a3a7c8
Update release (release-0.30.0 -> release-0.31.0)
...
Update release (release-0.30.0 -> release-0.31.0)
3 years ago
Michael Collins
6902ee5aa7
add rotate ssh module to matrix-awx
3 years ago
Toni Spets
8b9c7b18ac
Upgrade Heisenbridge (1.1.0 -> 1.1.1)
3 years ago
sakkiii
255cb97c41
Upgrade grafana (8.1.3 -> 8.1.4)
3 years ago
Slavi Pantaleev
b166f0175a
Upgrade Element (1.8.4 -> 1.8.5)
3 years ago
sakkiii
3055b3996e
Updates Certbot -> v1.19.0, nginx ->1.21.3-alpine
3 years ago
Toni Spets
4adbefab82
Upgrade Heisenbridge (1.0.1 -> 1.1.0)
3 years ago
Krisztian Szegi
f364fba182
Fix tripping on timesync setup
3 years ago
Slavi Pantaleev
4b46913278
Upgrade Element (1.8.2 -> 1.8.4) to patch a security issue
...
See:
- https://github.com/vector-im/element-web/releases/tag/v1.8.4
- https://matrix.org/blog/2021/09/10/pre-disclosure-upcoming-critical-fix-for-several-popular-matrix-clients
3 years ago
Aaron Raimist
f7e614b644
Add comment explaining why this step goes here
3 years ago
Aaron Raimist
82641092a7
Revert "Move some related tasks closer together in matrix-client-hydrogen"
...
This reverts commit e913347fe1
.
3 years ago
WobbelTheBear
df13ea5f14
Upgrade grafana (8.1.2 -> 8.1.3) ( #1269 )
...
Upgrade grafana (8.1.2 -> 8.1.3)
3 years ago
Slavi Pantaleev
0faad74a44
Upgrade Synapse (1.41.1 -> 1.42.0)
3 years ago
Michael Collins
8339103594
revert unneeded changes
3 years ago
Michael Collins
ca705cf9dd
Merge remote-tracking branch 'upstream/master' into testing
3 years ago
sakkiii
ae6caf158a
Added variable matrix_nginx_proxy_request_timeout ( #1265 )
...
* add timeout param for nginx proxy
default value matrix_nginx_proxy_request_timeout is 60s
* default matrix_nginx_proxy_request_timeout - 60s
* few more variables for request timeout
* Update nginx.conf.j2
* Update nginx.conf.j2
3 years ago
Slavi Pantaleev
a911207854
Revert "nginx update v1.21.2"
...
This reverts commit 732051b8fc
.
There's no such container image published yet.
3 years ago
Slavi Pantaleev
115f365860
Merge pull request #1263 from hifi/feature/heisenbridge-1.0.1
...
Bump Heisenbridge to v1.0.1
3 years ago
sakkiii
732051b8fc
nginx update v1.21.2
...
http://nginx.org/en/CHANGES
3 years ago
Toni Spets
c228343339
Bump Heisenbridge to v1.0.1
3 years ago
Slavi Pantaleev
e913347fe1
Move some related tasks closer together in matrix-client-hydrogen
3 years ago
Slavi Pantaleev
d384d0d7a0
Upgrade Element (1.8.1 -> 1.8.2)
3 years ago
Slavi Pantaleev
1c9124e3b7
Merge pull request #1260 from aaronraimist/self-build
...
Pull correct version when self building Mautrix Facebook and Synapse Admin
3 years ago
Aaron Raimist
3ab01a5f9e
Pull correct version when self building Mautrix Facebook and Synapse Admin
3 years ago
Catalan Lover
777ba6bc5a
Upgrade to Synaspe v 1.41.1 (Security Update)
...
Synapse 1.41.1 Patches 2 exploits that can reveal information about rooms an user is not supposed to have access to information about.
3 years ago
sakkiii
2453876eb9
Update main.yml
3 years ago
sakkiii
087a5d62f1
systemd-timesyncd for any archlinux version
3 years ago
Slavi Pantaleev
7fc1a94c30
Merge pull request #1258 from sakkiii/jitsi-fix
...
Jitsi Update (stable-5963 -> stable-6173)
3 years ago
Slavi Pantaleev
9d06dd61a6
Upgrade exim-relay (4.94.2-r0-3 -> 4.94.2-r0-4)
3 years ago
sakkiii
510f299c04
Syntex fixed
3 years ago
sakkiii
465d436b1b
Merge branch 'spantaleev:master' into jitsi-fix
3 years ago
sakkiii
a43b109653
Jitsi Update stable-5963
3 years ago
sakkiii
6feb99076a
Update Coturn (4.5.2-r3 -> 4.5.2-r4)
3 years ago
WobbelTheBear
972077aa33
Update prometheus (2.29.1 -> 2.29.2)
...
Update prometheus (2.29.1 -> 2.29.2)
3 years ago
Slavi Pantaleev
ad3d2a5aee
Merge pull request #1252 from sakkiii/patch-4
...
mjolnir & hydrogen Minor Updates
3 years ago
sakkiii
e4ea32b89f
Hydrogen v0.2.7
3 years ago
sakkiii
44709465c9
mjolnir releases v0.1.19
3 years ago
sakkiii
86f5ba8348
Grafana Grafana v8.1
3 years ago
Slavi Pantaleev
a4db9557db
Update homeserver.yaml to match the one in Synapse v1.41.0
...
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1247
3 years ago
Slavi Pantaleev
bb0e59de48
Merge pull request #1250 from wol-win/worker_trial
...
Endpoint changes for Client and media API due to migration to 1.41.0
3 years ago
Slavi Pantaleev
b447fa8f34
Merge pull request #1247 from FSG-Cat/patch-1
...
Update Synapse from 1.40.0 to 1.41.0
3 years ago
Wolfgang Winter
ee75d35193
Endpoint changes for Client and media API due to migration to 1.41.0
3 years ago
Joseph Walton-Rivers
a787f406f9
Update main.yml
...
Fix incorrect docker version tag for matrix-appservice-irc
3 years ago
Catalan Lover
1e070f1e56
Update Synapse from 1.40.0 to 1.41.0
3 years ago
Michael Collins
6ecd947c72
remove delete subscription section
3 years ago
Michael Collins
463e9a6196
woops bool not bools
3 years ago
Michael Collins
f19856e125
change template name
3 years ago
Michael Collins
c6f8bc5d83
missing one template from deletion section
3 years ago
Michael Collins
a49da05cf9
delegate locally
3 years ago
Michael Collins
ef4b5a187d
alter delete_job_template template
3 years ago
Michael Collins
b120b8aeba
delay these till the next playbook
3 years ago
sakkiii
01a5f521cd
Merge branch 'patch-2' of https://github.com/sakkiii/matrix-docker-ansible-deploy into patch-2
3 years ago
sakkiii
00d1804dd9
prometheus & its exporter updates
3 years ago
Slavi Pantaleev
57414ec2be
Upgrade matrix-corporal (2.1.1 -> 2.1.2)
3 years ago
Slavi Pantaleev
4b643db31b
Upgrade devture/exim-relay (4.94.2-r0-2 -> 4.94.2-r0-3)
...
Related to https://github.com/devture/exim-relay/pull/11
3 years ago
Slavi Pantaleev
ca7e0b9df2
Merge pull request #1243 from sakkiii/patch-3
...
Postgres Minor Updates
3 years ago
Slavi Pantaleev
2ec06b7477
Merge pull request #1242 from apmechev/add_beeper_linkedin_bridge
...
Add beeper LinkedIn bridge
3 years ago
Slavi Pantaleev
603ad7c52b
Remove (non-working) SQLite support from beeper-linkedin bridge
...
This bridge doesn't support SQLite anyway, so it's not necessary
to carry around configuration fields and code for migration from SQLite
to Postgres. There's nothing to migrate.
3 years ago
Slavi Pantaleev
78c22138a5
Do not reference variables from other roles
...
This configuration is supposed to be kept clean and not reference variables defined in other roles.
`group_vars/matrix_servers` redefines these to hook our various roles together.
3 years ago
Thom Wiggers
78b62664cd
Update to version v0.30.0
...
https://github.com/matrix-org/matrix-appservice-irc/releases/tag/0.30.0
3 years ago
sakkiii
48548eb561
Postgres Minor Updates
3 years ago
Alexandar Mechev
b13cf1871f
add code for LinkedIn Bridge
3 years ago
Slavi Pantaleev
24793adb2f
Merge pull request #1241 from sakkiii/patch-3
...
Certbot update v1.18.0
3 years ago
Slavi Pantaleev
9860fb4675
Upgrade Sygnal (v0.9.0 -> v0.10.1)
3 years ago
sakkiii
f5a7e6d78b
Certbot update v1.18.0
3 years ago
Michael Collins
3125ee56e2
add abort_deletion.yml task list
3 years ago
Michael Collins
e75ecd858d
launch cleanup job after deleting subscription
3 years ago
Michael Collins
a37e5b6d60
job templates cant delete themselves
3 years ago
Michael Collins
14effd5e2b
delegate delete tasks locally
3 years ago
Michael Collins
312bcc444b
no log
3 years ago
nono
d9d9554a74
Update the docker image version for mautrix-telegram
3 years ago
Michael Collins
92b26ec846
check if matrix_vars.yml file exists
3 years ago
Michael Collins
7203d4ec21
replace module only if file exists
3 years ago
Michael Collins
9ac5ad148a
merge upstream
3 years ago
Michael Collins
b2f96df1a9
end play after deleting subscription in AWX
3 years ago
Michael Collins
fa43d04ad7
syntax error
3 years ago
Michael Collins
7b9929e17b
add << SUBSCRIPTION DELETION IN PROGRESS >> job template
3 years ago
AtomHare
4240df6401
update link
3 years ago
AtomHare
7d0ce01792
update links
3 years ago
AtomHare
7eec01e359
update mautrix new repo name
3 years ago
AtomHare
43c9eab6b9
update mautrix new repo name
3 years ago
AtomHare
1ae4032cb7
update new repo name mautrix
3 years ago
AtomHare
b9124c0080
update new repo name mautrix-hangouts
3 years ago
AtomHare
69f333ea25
Update main.yml
3 years ago
Michael Collins
517ecbf0d1
move delete-subscription to deploy
3 years ago
Slavi Pantaleev
dc8000760b
Bump Coturn version tag (4.5.2-r2 -> 4.5.2-r3)
...
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1236
3 years ago
Slavi Pantaleev
511a267b00
Merge pull request #1229 from wol-win/feature/signal_config
...
Feature/signal config
3 years ago
Slavi Pantaleev
2c80e0bc89
Merge pull request #1235 from wol-win/element_web
...
Upgrade Element (1.8.0 -> 1.8.1)
3 years ago
WobbelTheBear
12dbb29675
Upgrade Element (1.8.0 -> 1.8.1)
...
Element web/desktop has just been updated to fix some regressions in regard to VoIP.
3 years ago
pushytoxin
854ea91195
Mautrix-Facebook repo location update, pin v0.3.1
...
The Github link is just a redirect to Tulir's own GitLab, so I replaced the self-build link
The docker container repository was rearranged hierarchically (dock.mau.dev/tulir/mautrix-facebook -> dock.mau.dev/mautrix/facebook)
Tagged versions have been made available, thus :latest -> :v0.3.1
3 years ago
Michael Collins
bdf10462d2
Merge remote-tracking branch 'upstream/master'
3 years ago
Slavi Pantaleev
62bba12551
Merge pull request #1233 from hifi/feature/heisenbridge-1.0.0
...
Pin Heisenbridge to 1.0.0
3 years ago
Slavi Pantaleev
71c7d0ba7f
Merge pull request #1232 from thedanbob/debian-bullseye
...
docker-ce is now available for Debian Bullseye
3 years ago
Michael Collins
41c335b967
merge upstream
3 years ago
Toni Spets
4fe27a7645
Pin Heisenbridge to 1.0.0
3 years ago
Wolfgang Winter
4b7506ca1a
Preset the permissions inline with other bridges
3 years ago
Wolfgang Winter
b1c94efcd8
Make template generic for the pemission settings
3 years ago
Slavi Pantaleev
70d412e523
Upgrade Element (1.7.34 -> 1.8.0)
3 years ago
Dan Arnfield
df82ec13b2
docker-ce is now available for Debian Bullseye
3 years ago
Wolfgang Winter
d0b557eb6f
Replace tabs to spaces to prevent problems in YAML
3 years ago
Slavi Pantaleev
f5a2d732ea
Merge pull request #1224 from GoMatrixHosting/master
...
GoMatrixHosting v0.5.7
3 years ago
Wolfgang Winter
7486db0d1a
Missing ticks
3 years ago
WobbelTheBear
f988fd3339
Change sequence of permissions
...
As per earlier comment (see from tulir) the sequence has been changed.
3 years ago
WobbelTheBear
d249fe874e
Update roles/matrix-bridge-mautrix-signal/templates/config.yaml.j2
...
Updated settings in template file:
* relay for any user
* user permissions only for HS domain users
Co-authored-by: Jan <31133207+Jaffex@users.noreply.github.com>
3 years ago
WobbelTheBear
ae9639585c
Update roles/matrix-bridge-mautrix-signal/defaults/main.yml
...
Improved setup through template file
Co-authored-by: Jan <31133207+Jaffex@users.noreply.github.com>
3 years ago
Wolfgang Winter
a34241e4cc
Remove intial permissions seting
...
Permissions, when set in the template, will be augmented rahter than replaced when using matrix_mautrix_signal_configuration_extension_yaml. Therefore, permissions shall only be set in the defaults/vars.yml or in the HS specific vars.yml file
3 years ago
Wolfgang Winter
5ca28ba872
Default relay bot functionality setting
...
Per default relay bot functionality is disabled; the bridge user permissions depends on the relay bot, if enabled the base domain users are on level relay, else remain on user;
3 years ago
Wolfgang Winter
e6b77284f2
Relay bot configurable + permissions
...
Enable / disable relay bot functionality as configuratoin paramter; set bridge permissions for base domain users to user level
3 years ago
Michael Collins
98e6cd685d
sync with previous repo
3 years ago
Jaffex
e90b33c4e3
Update matrix-mautrix-signal config to 0.2.0 to enable relay mode
3 years ago
Michael Collins
4c12c1892c
use saner folder permissions
3 years ago
Michael Collins
4d57a41b3f
remove matrix_awx_enabled from these
3 years ago
Michael Collins
2e30802b87
use group variables instead
3 years ago
Michael Collins
8238d65e5f
simplify template conditional
3 years ago
Toni Spets
bce94c5860
Allow configuring synapse database transaction limit
3 years ago
Slavi Pantaleev
05ad620386
Update homeserver.yaml to keep up with Synapse v1.40.0
...
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1225
3 years ago
WobbelTheBear
2469ada520
Update Synapse (1.39.0 -> 1.40.0)
3 years ago
Michael Collins
bfb61e776e
GMH v0.5.7... maybe!
3 years ago
Sebastian Gumprich
24589b91f4
irc appservice image tag has a 'v' now
3 years ago
Slavi Pantaleev
6de8b5925a
Merge pull request #1222 from wol-win/feature/signal
...
New version of Mautrix Signal bridge (version 0.2.0)
3 years ago
Wolfgang Winter
6ecfbe98b1
New version of Mautrix Signal bridge version 0.2.0 provided through new GitLab repository location
3 years ago
Thom Wiggers
d11d6f52ae
Update IRC appservice
...
https://github.com/matrix-org/matrix-appservice-irc/releases/tag/0.29.0
3 years ago
Sebastian Gumprich
d2a1b8b134
whatsapp bridge has new docker image location
...
See https://github.com/mautrix/whatsapp/releases/tag/v0.1.8
3 years ago
Slavi Pantaleev
2e23166ed3
Merge pull request #1216 from aaronraimist/hydrogen
...
Upgrade Hydrogen (0.2.3 -> 0.2.5)
3 years ago
Aaron Raimist
f3aae70f70
Upgrade Hydrogen (0.2.3 -> 0.2.5)
3 years ago
Slavi Pantaleev
23006fd64e
Fix email2matrix path initialization
...
Regression since 421f85defa
3 years ago
Slavi Pantaleev
421f85defa
Add self-building support to matrix-email2matrix
3 years ago
Slavi Pantaleev
2697590d28
Remove some useless if conditions
3 years ago
Slavi Pantaleev
a68ac9cb4f
Split install/uninstall tasks in matrix-email2matrix
3 years ago
Slavi Pantaleev
5fc61ed964
Upgrade Element (1.7.33 -> 1.7.34)
3 years ago
Slavi Pantaleev
179775b92d
Upgrade Synapse (1.38.1 -> 1.39.0)
3 years ago
Slavi Pantaleev
dfa7b6e4fd
Merge pull request #1171 from BackInBash/patch-1
...
Updating to ma1sd v2.5.0
3 years ago
Slavi Pantaleev
676101e999
Minor fixups for ma1sd 2.5.0
...
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1171
3 years ago
Michael Collins
67db5a0024
GoMatrixHosting v0.5.5
3 years ago
Slavi Pantaleev
49abe66f1d
Remove unnecessary if condition
...
All of `setup_install.yml` only runs if `matrix_bot_matrix_reminder_bot_enabled`,
so it's not necessary to add that condition once again.
3 years ago
Nate
012440c309
Allow for self-building of reminder-bot
3 years ago
Hardy Erlinger
03e8c75a30
Restore authentication for Jitsi Meet.
3 years ago
sakkiii
4a2b169fc9
systemd-timesyncd for ubuntu
3 years ago
sakkiii
f4a9c4dff2
Update prometheus node exporter (1.1.2 -> 1.2.0)
3 years ago
Slavi Pantaleev
112d8d8243
Upgrade Synapse (1.38.0 -> 1.38.1)
3 years ago
sakkiii
7f0b8fef0a
Merge branch 'spantaleev:master' into patch-1
3 years ago
Slavi Pantaleev
31244e7fcc
Merge pull request #1180 from Toorero/master
...
Fixed self-build functionality for mautrix-signal
3 years ago
Slavi Pantaleev
7d9ee3e2fb
Remove unnecessary if-condition
3 years ago
Slavi Pantaleev
a21696f687
Fix some if-checks
...
We'd rather not suppress pull errors or run self-build tasks if pulling fails.
3 years ago
Toorero
ead4b00c09
Reverted back to manual self-build detection
3 years ago
Slavi Pantaleev
30339cd313
Merge pull request #1139 from sakkiii/jitsi-fix
...
Jitsi Update -> stable-5963
3 years ago
sakkiii
d08a78ff1f
remove prosody JICOFO_COMPONENT_SECRET
3 years ago
Slavi Pantaleev
4105ba854b
Merge pull request #1147 from datenkollektiv-net/allow-custom-federation-fqn
...
Make federation domain customizable
3 years ago
Slavi Pantaleev
25e6eb27ab
Merge pull request #1183 from Toorero/mautrix-telegram-selfbuild-fix
...
Fixed mautrix-telegram selfbuild not working on non amd64 platforms
3 years ago
Slavi Pantaleev
fb221c8179
Do not needlessly ignore errors
3 years ago
Slavi Pantaleev
51b94d9987
Merge pull request #1194 from meyerrj/master
...
Update main.yml for matrix-reminder-bot
3 years ago
Slavi Pantaleev
931b16fa66
Merge pull request #1193 from sakkiii/patch-2
...
Upgrade hydrogen (v0.2.0 -> v0.2.3)
3 years ago
JokerGermany
9345d840be
root path for the base domain is wrong ( #1189 )
...
* root path for the base domain
* Fix path when running in a container
Co-authored-by: Slavi Pantaleev <slavi@devture.com>
3 years ago
Richard Meyer
a8373d6bd4
Update main.yml
...
Fixes an issue related to https://github.com/anoadragon453/matrix-reminder-bot/issues/86
3 years ago
sakkiii
8b304445e5
Upgrade hydrogen (v0.2.0 -> v0.2.3)
3 years ago
sakkiii
5209a17da1
migrate from ntp to chrony
3 years ago
Slavi Pantaleev
70cb27138c
Upgrade Element (1.7.32 -> 1.7.33)
3 years ago
Toorero
b3793f3595
Masked TARGETARCH via docker.build.arg directive
3 years ago
Toorero
3a28100131
Renamed matrix_lottieconverter to matrix_telegram_lottieconverter
3 years ago
Toorero
7f15787d54
Fixed mautrix-telegram selfbuild not working on non amd64 platforms
3 years ago
Toorero
f933ba14ae
Fixed self-build functionality for mautrix-signal and added self-build functionality for signald
3 years ago
sakkiii
e90979e91f
Upgrade grafana (8.0.5 -> 8.0.6)
3 years ago
Slavi Pantaleev
a435c64c13
Merge pull request #1176 from GoMatrixHosting/master
...
GoMatrixHosting v0.5.4
3 years ago
Michael-GMH
86e4649578
GoMatrixHosting v0.5.5
3 years ago
Michael-GMH
03006eb5ab
GoMatrixHosting v0.5.5
3 years ago
Michael-GMH
245986c793
Merge remote-tracking branch 'upstream/master'
3 years ago
Toorero
f732a75ca5
Added selfbuild functionality to mautrix-signal bridge
3 years ago
Janar Juusu
c198320f65
feat: update synapse to 1.38.0
3 years ago
Slavi Pantaleev
2e0eddde9d
Upgrade matrix-corporal (2.1.0 -> 2.1.1)
3 years ago
Markus
83b9908c9d
Update to ma1sd v2.5.0
3 years ago
sakkiii
cd54147144
Upgrade grafana (8.0.3 -> 8.0.5)
3 years ago
sakkiii
7a51268dfc
Upgrade certbot & nginx
...
Upgrade certbot (v1.16.0 -> v1.17.0) nginx (1.21.0 -> 1.21.1)
3 years ago
Slavi Pantaleev
3fa895fe96
Upgrade Element (1.7.31 -> 1.7.32)
3 years ago
Michael-GMH
f6e0cbe5f3
did i even update this
3 years ago
sakkiii
49455a9ce0
prometheus version 2.28.0 -> 2.28.1
3 years ago
Michael-GMH
1c938c72fd
GoMatrixHosting 0.5.2
3 years ago
Slavi Pantaleev
b4d7ab0b53
Merge pull request #1153 from Cadair/worker_prom
...
Add worker metrics to prometheus exporter
3 years ago
Slavi Pantaleev
b6d71b9da1
Fix self-building for Coturn
...
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1158
3 years ago
Neutron
1ad9bba88f
Skip importing validate_config task when Synapse is disabled
3 years ago
Stuart Mumford
2aa457efcc
Use a prom variable and not a synapse role variable
3 years ago
Michael-GMH
7acaef89df
GoMatrixHosting v0.5.1
3 years ago
Slavi Pantaleev
ccde2362fc
Merge branch 'master' into mjolnir-0.1.18
3 years ago
Slavi Pantaleev
55452c3068
Update Mjolnir (v0.1.17 -> v0.1.18)
3 years ago
Aaron Raimist
fc16fbda5b
Remove a bunch of redundant Ansible <2.8 self building checks
3 years ago
Aaron Raimist
19ed8d1d17
Upgrade mjolnir (0.1.17 -> 0.1.18) and implement self building
3 years ago
sak
7b2211da8e
remove jibri
3 years ago
Slavi Pantaleev
6294e58304
Fix Content-Security-Policy for Element
...
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1154
According to
https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy ,
having both a header and the `<meta>`-tag provided by Element itself is
not a problem. The 2 CSP policies get combined.
3 years ago
Stuart Mumford
09ee5ce52e
we index from 0 apparently
3 years ago
Stuart Mumford
3d063f6ace
make them show as jobs in grafana
3 years ago
oxmie
5df4d68829
Make federation domain customizable
3 years ago
Stuart Mumford
7b52e6ad5e
Add worker metrics to prometheus exporter
3 years ago
Davy Landman
c9d73c6606
Updating to latest synapse release (performance regression)
...
https://github.com/matrix-org/synapse/releases/tag/v1.37.1
3 years ago
sakkiii
d338090f00
postgres minor updates
3 years ago
Slavi Pantaleev
3da4b684a5
Upgrade Synapse (1.36.0 -> 1.37.0)
3 years ago
Thom Wiggers
eb5619fd4b
Update IRC bridge
3 years ago
Michael Sasser
7578a355c4
heisenbridge fix service name
3 years ago
sakkiii
8a369f61f3
Merge branch 'spantaleev:master' into jitsi-fix
3 years ago
hanthor
ddbb4b2acc
Update main.yml
...
update to v0.2.0
3 years ago
Slavi Pantaleev
2d740dbebd
Mount /data in matrix-redis container
...
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1140
3 years ago
sakkiii
2b881e245b
Update prometheus v2.27.1 -> v2.28.0
3 years ago
sakkiii
0cc17ab2ca
matrix_jitsi_jicofo_component_secret validation
3 years ago
sakkiii
f2f1b20e44
jicofo client proxy connection
3 years ago
sakkiii
b132941e71
Merge branch 'spantaleev:master' into jitsi-fix
3 years ago
Slavi Pantaleev
18533b5000
Merge pull request #1135 from sakkiii/patch-1
...
Coturn update 4.5.2 -> 4.5.2-r2
3 years ago
Slavi Pantaleev
d019e9078a
Remove unused variables from mx-puppet-* bridges
...
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1131
3 years ago
sakkiii
6ede9c8cd6
network-alias added to fix domains
3 years ago
sakkiii
d9e943aaaa
minor fix
3 years ago
sakkiii
0c8a3c401f
jibri service
3 years ago
sakkiii
04805f35a7
Coturn update 4.5.2 -> 4.5.2-r2
3 years ago
Slavi Pantaleev
b19fa3acb2
Upgrade Element (1.7.30 -> 1.7.31)
3 years ago
sakkiii
1250208907
whitespaces
3 years ago
sakkiii
c0cd2a3c93
JICOFO_RESERVATION_ENABLED contains whitespaces.
3 years ago
sakkiii
f8be36327c
jibri service
3 years ago
sakkiii
3e011bafd5
jibri env
3 years ago
sakkiii
8af2d818b1
domain_fix
3 years ago
sakkiii
2ca92b76b6
stable-5963
3 years ago
Slavi Pantaleev
5a1dabe14f
Bump exim-relay Docker image tag
...
The new one is based on Alpine 3.14, instead of Alpine 3.13.
3 years ago
Slavi Pantaleev
282844209a
Merge pull request #1105 from blaztinn/centos-stream-8
...
Add support for CentOS (Stream) 8
3 years ago
Marcel Ackermann
a790096adf
matrix_mx_puppet_slack_client_id deprecated
3 years ago
Marcel Ackermann
ed078998b5
deprecated
3 years ago
Slavi Pantaleev
efa7486b88
Merge pull request #1127 from sakkiii/patch-3
...
Content-Security-Policy For Element Web
3 years ago
sakkiii
b826171139
Update grafana 8.0.2 -> 8.0.3
3 years ago
sakkiii
0217644b48
Content-Security-Policy For Element Web
...
https://github.com/vector-im/element-web#configuration-best-practices
3 years ago
Slavi Pantaleev
3dd32d2512
Update worker endpoints
...
Should have been part of 9daeb39710
4 years ago
Slavi Pantaleev
9daeb39710
Upgrade Synapse (1.35.1 -> 1.36.0)
4 years ago
Michael-GMH
4fb1134ad1
GoMatrixHosting v0.5.0
4 years ago
Slavi Pantaleev
a7fcb7c04d
Merge pull request #1122 from sakkiii/patch-2
...
update hydrogen v0.1.56 -> v0.1.57
4 years ago
sakkiii
4cd5835e11
update hydrogen v0.1.56 -> v0.1.57
...
https://github.com/vector-im/hydrogen-web/releases/tag/v0.1.57
4 years ago
sakkiii
08d1a5c2e7
Update grafana 8.0.0 -> 8.0.2
4 years ago
Blaž Tomažič
72bc9b5cfc
Add support for CentOS (Stream) 8
4 years ago
Slavi Pantaleev
1cf4d5ea7f
Upgrade Redis (6.0.10 -> 6.2.4)
4 years ago
Slavi Pantaleev
963f38ee7b
Upgrade certbot (v1.14.0 -> v1.16.0)
4 years ago
SkepticalWaves
2e8a2bdf7d
Add empty default for jitsi-prosody modules
4 years ago
SkepticalWaves
2886dc3939
Add module configuration to jitsi-prosody env file
4 years ago
Slavi Pantaleev
6c9c78ddae
Merge pull request #1112 from sakkiii/patch-2
...
coturn update
4 years ago
sakkiii
be1d1d0b7c
matrix_grafana_content_security_policy_customized default false
4 years ago
sakkiii
2d9ba82337
Update element 7.5.7 -> 8.0.0
4 years ago
sakkiii
1cc1202df2
update coturn
4 years ago
rakshazi
77fd1bff22
Update element 1.7.29 -> 1.7.30
4 years ago
Slavi Pantaleev
fa76c1ee5b
Do not run self-build Ansible version-check, if component not enabled
...
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1108
4 years ago
Slavi Pantaleev
bec9eaeb50
Merge pull request #1108 from tommes0815/fix-hydrogen-for-ansible2.7
...
fix error when running with Ansible 2.7 in the hydrogen setup
4 years ago
Thom Wiggers
3c05cc04bc
Update IRC appservice
4 years ago
Thomas Kühne
7f4e71b22a
fix error when running with Ansible 2.7 in the hydrogen setup
...
Without this the hydrogen task would fail for Ansible 2.7 even when hydrogen is not enabled.
4 years ago
Michael-GMH
122a92fa1c
GoMatrixHosting v0.4.9 update
4 years ago
Slavi Pantaleev
b1f1c28ef0
Upgrade Synapse (1.34.0 -> 1.35.0)
4 years ago
Michael-GMH
ad7bbd6442
merge upstream
4 years ago
Michael-GMH
6f40d78353
fix random edits to upstream
4 years ago
Michael-GMH
ea6e344d05
merge upstream
4 years ago
Michael-GMH
85777e8f96
merge with upstream
4 years ago
Slavi Pantaleev
1ed0857019
Fix syntax error
...
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1024
4 years ago
sakkiii
4a4a7f136e
changes added to hydrogen client
4 years ago
sakkiii
25e67b51d1
Merge branch 'spantaleev:master' into master
4 years ago
sakkiii
3436f9c10a
rename to matrix_nginx_proxy_hsts_preload_enabled
4 years ago
Slavi Pantaleev
0648b1b618
Upgrade Element (1.7.28 -> 1.7.29)
4 years ago
sakkiii
7cc5328ede
Comments & Ref
4 years ago
sakkiii
df2d91970d
matrix_nginx_proxy_xss_protection
4 years ago
Slavi Pantaleev
d4c7a90b5c
Merge pull request #1076 from Eagle-251/Jitsi-Prosody-OwnNginxCompatibility
...
Allow Jitsi XMPP websocket support for users using own webserver.
4 years ago
ewang
409cd2b9a3
Source port binding from group vars in line other components
4 years ago
Eagle-251
ef6a7e051c
Fix missing port binding.
4 years ago
ewang
1bb6ed97ae
Make port bindings default for those disabling nginx proxy
...
I changed the conditional statement in prosody systemd template to bind the localhost port by default if people have set ```matrix_nginx_proxy_enabled == false ```.
Hopefully that should make it the default behaviour now.
4 years ago
Aaron Raimist
3c0452ff5a
Remove unnecessary bind for config.json, use proper nginx.conf
4 years ago
ewang
4a772e50f4
Allow Jitsi XMPP webscoket support for users using own webserver.
...
Added:
- Conditional localhost Port bindings for Jitsi Prosody systemd template
- Added variable to main.yml to allow overriding from vars.yml
4 years ago
Slavi Pantaleev
6f80292745
Add OCSP stapling support and other SSL optimizations to Hydrogen vhost
...
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1061
and https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1057
4 years ago
Slavi Pantaleev
d0de21ab34
Delete Hydrogen nginx configuration file when disabled
4 years ago
Aaron Raimist
ac4ede20af
Add docs
4 years ago
Aaron Raimist
1633f61018
Only install config.json when self building
4 years ago
Aaron Raimist
04548f8df2
Merge branch 'master' into hydrogen
4 years ago
Aaron Raimist
9437f78c9e
Build using custom config.json, add CSP, update to 0.1.53
4 years ago
Slavi Pantaleev
47b4608b96
Fail in a friendlier way when trying to self-build on Ansible <= 2.8
...
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1070
Related discussion here: 1ab507349c (commitcomment-51108407)
4 years ago
Slavi Pantaleev
1ab507349c
Fix self-building for various components on Ansible < 2.8
...
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1070
4 years ago
Slavi Pantaleev
66615c43a3
Merge pull request #1065 from sakkiii/patch-1
...
Update grafana (7.5.6->7.5.7)
4 years ago
Tobias K
3dcbed6353
roles/matrix-grafana: Set root_url in granafa.ini
4 years ago
sakkiii
8529ca4c17
Update grafana (7.5.6->7.5.7)
4 years ago
Slavi Pantaleev
073d920a62
Merge pull request #1061 from sakkiii/ssl_enhancement
...
Optimize SSL session
4 years ago
Toni Spets
544915ff76
Add Heisenbridge
4 years ago
Slavi Pantaleev
21eb39f986
Mention matrix_common_after_systemd_service_start_wait_for_timeout_seconds in failure message
...
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1062
4 years ago
Slavi Pantaleev
ee46fabdca
Make waiting time for --tags=start configurable
...
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1062
4 years ago
sakkiii
e9b878b9e9
Optimize SSL session
4 years ago
Slavi Pantaleev
e6afa05f7b
Enable OCSP stapling for the federation port
...
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1057
Not sure if this is beneficial though.
4 years ago
Slavi Pantaleev
57a6a98a50
Fix incorrect SSL certificate path
...
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1057
4 years ago
Slavi Pantaleev
b9c4e8ce16
Merge pull request #1057 from sakkiii/ssl_staple
...
Enable OCSP Stapling
4 years ago
sakkiii
d31b55b2a7
SSL-enabled block only
4 years ago
rakshazi
400371f6dd
Updated Element version (1.7.27 -> 1.7.28)
4 years ago
Slavi Pantaleev
d156c8caa2
Upgrade Synapse (1.33.2 -> 1.34.0)
4 years ago
Slavi Pantaleev
e4dd933cf0
Make missing /_synapse/admin correctly return 404 responses
...
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1058
We may try to capture such calls and return a friendlier response (HTML
or JSON) saying "The Synapse Admin API is not enabled", but that may not
be desirable.
For now, we stick to what "upstream" recommends: "simply
don't proxy these APIs", which should lead to the same kind of 404 that
we have now.
See here: 6660912226/docs/reverse_proxy.md (synapse-administration-endpoints)
4 years ago
sakkiii
2c3da6599b
Added warning
4 years ago
sakkiii
0dd4459799
matrix_nginx_proxy_ocsp_stapling_enabled variable added
4 years ago
sakkiii
c05021640d
Enable OCSP Stapling
4 years ago
Aaron Raimist
ca361af616
Add Hydrogen
4 years ago
sakkiii
b191e461a5
Merge branch 'spantaleev:master' into master
4 years ago
sakkiii
4bd7d8b5e4
Update grafana (7.5.5->7.5.6)
4 years ago
sakkiii
d5cd3d443d
Update prometheus (2.26.0->2.27.0)
4 years ago
sakkiii
322b750aad
Merge branch 'spantaleev:master' into master
4 years ago
Slavi Pantaleev
f481b1a84b
Upgrade matrix-mailer (4.94.2-r0 -> 4.94.2-r0-1)
...
Related to https://github.com/devture/exim-relay/pull/9
4 years ago
Slavi Pantaleev
8e6f1876f5
Switch to :latest version of synapse-admin
...
Related to https://github.com/Awesome-Technologies/synapse-admin/issues/132
We should switch back when >0.8.0 gets released.
4 years ago
sakkiii
8fc55b30c5
Upgrade Synapse (1.33.1 -> 1.33.2)
...
This release fixes a denial of service attack (CVE-2021-29471) against Synapse's push rules implementation. Server admins are encouraged to upgrade.
Ref: https://github.com/matrix-org/synapse/releases/tag/v1.33.2
4 years ago
Slavi Pantaleev
2d4b039c55
Merge pull request #1046 from GoMatrixHosting/master
...
GoMatrixHosting v0.4.6
4 years ago
Michael-GMH
2b4bada72a
fix conditional
4 years ago
Michael-GMH
0adcef65e6
fix conditional
4 years ago
Michael-GMH
f70102e40c
no dashes in usernames
4 years ago
Slavi Pantaleev
f4657b2cdb
Upgrade Element (1.7.26 -> 1.7.27)
4 years ago
Michael-GMH
4e6f6e179b
GMH 0.4.6 update
4 years ago
sakkiii
29cf6a0087
Merge branch 'spantaleev:master' into master
4 years ago
Slavi Pantaleev
3dcc006932
Fix self-building for Coturn
...
689dcea773
wasn't enough. The `upstream/..` tags are
just upstream sources, without the alpine-based Dockerfile.
We need to use the `docker/..` tags for that (or `master`)
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1032
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1023
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1009
4 years ago
Slavi Pantaleev
33f0074862
Upgrade matrix-mailer (4.94-r0 -> 4.94.2-r0)
...
Related to https://github.com/devture/exim-relay/issues/6
4 years ago
Slavi Pantaleev
c19508087a
Merge pull request #1036 from sakkiii/grafana-csp
...
Grafana csp template backward compatible with older browsers
4 years ago
Slavi Pantaleev
a198b87455
Upgrade synapse-admin (0.7.2 -> 0.8.0)
...
Related to https://github.com/Awesome-Technologies/synapse-admin/issues/132
4 years ago
Slavi Pantaleev
867ebb52ab
Merge pull request #1037 from pushytoxin/jitsi-5765-1
...
Update Jitsi (5142 -> 5765-1)
4 years ago
sakkiii
bb0810302d
Merge branch 'spantaleev:master' into master
4 years ago
Slavi Pantaleev
61220ea487
Upgrade Synapse (1.33.0 -> 1.33.1)
4 years ago
sakkiii
9174448e5e
get rid of this {% else %}
4 years ago
sakkiii
0d5fe2d9f7
Update roles/matrix-grafana/templates/grafana.ini.j2
...
Co-authored-by: Aaron Raimist <aaron@raim.ist>
4 years ago
Béla Becker
b10655ebb1
Jitsi XMPP Websocket support
...
Jitsi-meet enabled websockets by default, claiming better reliability.
Matrix-nginx-proxy configuration has been set up according to the
Prosody documentation: https://prosody.im/doc/websocket
4 years ago
Béla Becker
116bcaa13b
Update jitsi to stable-5765-1
...
Changelog:
https://github.com/jitsi/docker-jitsi-meet/blob/stable-5765-1/CHANGELOG.md
4 years ago
sakkiii
37de7fc96a
Updated Reference
4 years ago
sakkiii
303de935d5
grafana CSP backward compatible with older browsers
4 years ago
Slavi Pantaleev
d4d1e2e922
Upgrade Synapse (1.32.2 -> 1.33.0)
4 years ago
Slavi Pantaleev
b09a805939
Merge pull request #1031 from thedanbob/nginx-1.20.0
...
Update nginx (1.19.10 -> 1.20.0)
4 years ago
Slavi Pantaleev
6fdc71c40b
Merge pull request #1030 from thedanbob/grafana-7.5.5
...
Update grafana (7.5.4 -> 7.5.5)
4 years ago
Dan Arnfield
cfaa3e598a
Update nginx (1.19.10 -> 1.20.0)
4 years ago
Dan Arnfield
bec5933db4
Update grafana (7.5.4 -> 7.5.5)
4 years ago
Michael-GMH
067b61e779
GoMatrixHosting v0.4.5 update
4 years ago
Slavi Pantaleev
2409c33ea2
Upgrade Element (1.7.25 -> 1.7.26)
4 years ago
benkuly
49cb2635a2
updated matrix-sms-bridge
4 years ago
Michael-GMH
a14bf6c2ed
GoMatrixHosting v0.4.4 update
4 years ago
Slavi Pantaleev
689dcea773
Fix self-building for Coturn
...
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1023
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1009
4 years ago
sakkiii
40fe6bd5c1
variable matrix_nginx_proxy_hsts_preload_enable added
4 years ago
Slavi Pantaleev
389dc26615
Fix Synapse generic worker balancing
...
Potentially fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1022
4 years ago
sakkiii
5b4fdf9b87
Merge branch 'master' of https://github.com/sakkiii/matrix-docker-ansible-deploy
4 years ago
sakkiii
0ccf0fbf1c
HSTS preload + X-XSS enables
...
**HSTS Preloading:**
In its strongest and recommended form, the [HSTS policy](https://www.chromium.org/hsts ) includes all subdomains, and indicates a willingness to be “preloaded” into browsers:
`Strict-Transport-Security: max-age=31536000; includeSubDomains; preload`
**X-Xss-Protection:**
`1; mode=block` which tells the browser to block the response if it detects an attack rather than sanitising the script.
4 years ago
sakkiii
3564635f0f
Merge branch 'master' into master
4 years ago
sakkiii
29bba5161b
Element More security headers
...
More Production ready nginx headers for Matrix client element.
4 years ago
Slavi Pantaleev
f6b371164c
Remove useless variable
4 years ago
Slavi Pantaleev
62c0587b6a
Use Alpine-based Coturn
4 years ago
Slavi Pantaleev
72a7cb4145
Merge pull request #1018 from GoMatrixHosting/master
...
GoMatrixHosting v0.4.3
4 years ago
Slavi Pantaleev
e3fa3e12bc
Upgrade Synapse (1.31 -> 1.32.2)
4 years ago
Michael-GMH
50d7209c5b
GMH v04.3
4 years ago
Slavi Pantaleev
378fabf177
Revert "Upgrade Synapse (1.31 -> 1.32.1)"
...
This reverts commit 1fb54a37cb
.
Seems like it's been pulled or something. It used to exist, but not
anymore. Not sure what's going on.
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1017
Related to
https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1010
4 years ago
Slavi Pantaleev
1fb54a37cb
Upgrade Synapse (1.31 -> 1.32.1)
...
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1010
4 years ago
Slavi Pantaleev
d691cc0920
Move variable definition a bit
4 years ago
Slavi Pantaleev
e00ef04b57
Add opt-out-of-FLoC headers by default
4 years ago
Slavi Pantaleev
42783972fd
Merge pull request #1011 from aaronraimist/synapse-admin
...
Upgrade synapse-admin (0.7.0 -> 0.7.2)
4 years ago
Slavi Pantaleev
ca786cc343
Revert "Upgrade Synapse (1.31 -> 1.32)"
...
This reverts commit f825c7c263
.
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1010
4 years ago
Aaron Raimist
bb64b80697
Upgrade synapse-admin (0.7.0 -> 0.7.2)
4 years ago
Slavi Pantaleev
f825c7c263
Upgrade Synapse (1.31 -> 1.32)
4 years ago
Slavi Pantaleev
7eda6a3c12
Merge pull request #1009 from thedanbob/coturn-official
...
Switch to official coturn image
4 years ago
Slavi Pantaleev
adcecaffaf
Fix connectivity between prometheus and prometheus-node-exporter
...
Expected to have regressed after https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1008
This patch comes with its own downsides (as described in the comments
for matrix_prometheus_node_exporter_container_http_host_bind_port),
but at least there's:
- no security issue
- metrics remain readable from matrix-prometheus (even if the network metrics are inaccurate)
A better patch is certainly welcome.
4 years ago
Dan Arnfield
b2ca1f2829
Add capability required by new image
4 years ago
Slavi Pantaleev
398b9f5d66
Merge pull request #1008 from sakkiii/master
...
security** node-exporter data & port publicly exposed
4 years ago
Dan Arnfield
29177d4922
Switch to official coturn docker image
4 years ago
sak
88a30fb5ed
security** node-exporter data & port publicly exposed
4 years ago
sak
0f9a455719
Revert "security** node-exporter data & port publicly exposed"
...
This reverts commit d0cd709c08
.
4 years ago
sak
d0cd709c08
security** node-exporter data & port publicly exposed
4 years ago
Slavi Pantaleev
4a1739f604
Merge pull request #1007 from teutat3s/fix/nginx-dont-send-version
...
Don't expose nginx version with each response
4 years ago
teutat3s
2bf7c26cfa
Don't expose nginx version with each response
4 years ago
Slavi Pantaleev
c565e72f0d
Merge pull request #1003 from sakkiii/patch-2
...
updated matrix_grafana_docker_image to v7.5.4
4 years ago
Slavi Pantaleev
51b46697c5
Merge pull request #1005 from sakkiii/master
...
Improve security for grafana
4 years ago
Dan Arnfield
f04614a993
Fix prometheus network for ansible < 2.8
4 years ago
Slavi Pantaleev
badd81e0ec
Revert "Attempt to fix docker_network result discrepancy between Ansible versions"
...
This reverts commit 68ca81c8c2
.
4 years ago
sakkiii
1958d0792d
Update matrix-client-element.conf.j2
4 years ago
sakkiii
b6d45c5fd8
Merge branch 'master' of https://github.com/sakkiii/matrix-docker-ansible-deploy
4 years ago
sakkiii
05042f5ff1
Improve security grafana
...
- duplicate X-Content-Type-Options
- X-Frame-Options header
- Referrer-Policy [Might consider adding variable]
- Secure flag with cookies
- matrix_grafana_content_security_policy variable for [Content Security Policy](https://grafana.com/docs/grafana/latest/administration/configuration/#content_security_policy )
4 years ago
sakkiii
27377e099d
updated matrix_grafana_docker_image to v7.5.4
...
Latest stable grafana version is [7.5.4 (2021-04-14)](https://github.com/grafana/grafana/releases/tag/v7.5.4 )
4 years ago
Slavi Pantaleev
68ca81c8c2
Attempt to fix docker_network result discrepancy between Ansible versions
...
Supposedly fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/907
4 years ago
Slavi Pantaleev
9c1f41eadf
Merge pull request #1002 from thedanbob/node-exporter-1.1.2
...
Update prometheus node exporter (1.1.0->1.1.2)
4 years ago
Dan Arnfield
8a550ce67c
Update prometheus (2.24.1->2.26.0)
4 years ago
Dan Arnfield
83cc5c9e6a
Update prometheus node exporter (1.1.0 -> 1.1.2)
4 years ago
sakkiii
5dc642ace1
Nginx element web: XSS protection & nosniff header
...
X-XSS-Protection: 1; mode=block; header, for basic XSS protection in legacy browsers.
X-Content-Type-Options: nosniff header, to disable MIME sniffing
4 years ago
Slavi Pantaleev
fcb9e9618a
Make Coturn TLSv1/v1.1 configurable
...
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/999
4 years ago
sakkiii
540416e32d
Disable support for TLS 1.0 and TLS 1.1
...
These old versions of TLS rely on MD5 and SHA-1, both now broken, and contain other flaws. TLS 1.0 is no longer PCI-DSS compliant and the TLS working group has adopted a document to deprecate TLS 1.0 and TLS 1.1.
4 years ago
Michael-GMH
89cb5a3d7a
GMH v0.4.2 update
4 years ago
Michael
f41bfb69d2
update survey template formatting
4 years ago
Michael
814bdf5a88
update spelling
4 years ago
Michael
fbe22289bd
merge with upstream and testing branch
4 years ago
Slavi Pantaleev
995c483856
Merge pull request #962 from aaronraimist/mjolnir
...
Add mjolnir
4 years ago
Slavi Pantaleev
f183add44d
Merge pull request #977 from aaronraimist/simple-antispam
...
Upgrade synapse-simple-antispam (0.0.1 -> 0.0.3)
4 years ago
Aaron Raimist
81dddd2e25
Upgrade Element (1.7.24 -> 1.7.24.1)
4 years ago
Aaron Raimist
c43bd412dd
Upgrade synapse-simple-antispam (0.0.1 -> 0.0.3)
4 years ago
Aaron Raimist
1ecee625d5
Depend on more services, add a delay
4 years ago
Slavi Pantaleev
a88391edf5
Merge pull request #972 from JohannesKleine/nginx-config
...
matrix-nginx-proxy: add custom nginx options to nginx.conf.j2
4 years ago
teutat3s
0b5e903693
Updates to mautrix-signal config
...
See these last commits:
tulir/mautrix-signal@4fc34330c1f6947aece67863b0d04da34c776f80
tulir/mautrix-signal@64bc5c36a509ba435a0b01cf44afb1b5d2642efd
tulir/mautrix-signal@ddda1666d41d28750cc59d070e4388b24add6ad9
4 years ago
Christoph Johannes Kleine
fcd66b2889
rename variables
4 years ago
Christoph Johannes Kleine
8ba1105010
rename variable
4 years ago
Christoph Johannes Kleine
3a772f2f65
matrix-nginx-proxy: add custom nginx options to nginx.conf.j2
4 years ago
Slavi Pantaleev
93960b70be
Do not fail if `_matrix-identity` DNS SRV record missing
...
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/963
This also simplifies Prerequisites, which is great.
It'd be nice if we were doing these checks in some optional manner
and reporting them as helpful messages (using
`matrix_playbook_runtime_results`), but that's more complicated.
I'd rather drop these checks completely.
4 years ago
Slavi Pantaleev
5e1cf7f8b9
Upgrade Element (1.7.23 -> 1.7.24)
4 years ago
Slavi Pantaleev
9409588513
Fix variable name typo (take 2)
...
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/970
4 years ago
Slavi Pantaleev
179b416ed5
Fix variable name typo
...
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/970
4 years ago
Slavi Pantaleev
77d598b315
Fix Go-NEB variable definitions using the wrong type
...
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/969
4 years ago
Slavi Pantaleev
49868db3de
Upgrade Synapse for ARM64 (1.30.0 -> 1.30.1)
4 years ago
Slavi Pantaleev
94487dc6a7
Upgrade Synapse for amd64 (1.30.0 -> 1.30.1)
4 years ago
transcaffeine
dbae18fd6a
feat: push ephemeral events to appservices
...
This adds https://github.com/matrix-org/matrix-doc/pull/2409 to the
appservice registrations, enabling synapse to push EDUs to appservices.
4 years ago
Dan Arnfield
97d8527e00
Update nginx (1.19.6 -> 1.19.8)
4 years ago
Slavi Pantaleev
5a4ea5f866
Make AWX enabling/disabling consistent with other playbook roles
...
That is:
- enabled in the role by default
- disabled in the compilation (playbook), if considered an optional
component
4 years ago
Aaron Raimist
bab8b950ca
Add mjolnir
4 years ago
Slavi Pantaleev
06c74728eb
Move matrix_nginx_proxy_proxy_synapse_federation_api_enabled definition to the role
...
This variable was previously undefined in the role and was only getting
defined via `group_vars/matrix_servers`.
We now properly initialize it (and its good default value) in the role
itself.
4 years ago
Slavi Pantaleev
d09609daa8
Fix Jinja2 syntax error
...
Fixes a regression introduced in ffe649a240
4 years ago
Slavi Pantaleev
6a3433fbad
Update Synapse for ARM64 (1.29.0 -> 1.30.0)
...
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/958
4 years ago
Slavi Pantaleev
ffe649a240
Update homeserver.yaml to keep up with Synapse v1.30.0
...
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/958
4 years ago
rakshazi
74106f2a80
Updated synapse 1.29.0 -> 1.30.0
4 years ago
Thom Wiggers
54fe59f05c
Update IRC appservice
4 years ago
Slavi Pantaleev
2737ebc290
Complain if people try to use matrix-sygnal on non-amd64
4 years ago
Slavi Pantaleev
b824522b33
Remove unnecessary with_items statement
4 years ago
Slavi Pantaleev
9a0222fa47
Add Sygnal support
...
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/683
4 years ago
Michael
af240aef37
remove sections from task list that arent needed
4 years ago
Michael
85127bacba
Merge remote-tracking branch 'upstream/master'
4 years ago
Michael
1e54b1d1a5
merge upstream
4 years ago
Slavi Pantaleev
f99dcd611f
Pass proper UID/GID to Synapse
...
Fixes a regression caused by a5ee39266c
.
If the user id and group id were different than 991:991
(which used to be a hardcoded default for us long ago),
there was a mismatch between what Synapse was trying to use (991:991)
and what it was actually started with (in `--user=..`). It was then
trying to change ownership, which was failing.
This was mostly affecting newer installations which were not using the
991:991 defaults we had long ago (since a1c5a197a9
).
4 years ago
Slavi Pantaleev
a5ee39266c
Go through start.py when launching Synapse
...
This allows us to benefit from helpful things it does for us,
like enabling jemalloc: https://github.com/matrix-org/synapse/pull/8553
We weren't going through `start.py` before, because it was causing some
conflict with our `docker run --user=...` stuff, but it doesn't seem
to be a problem anymore.
Having done this, we won't need to do things like
https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/941
anymore.
4 years ago
Aaron Raimist
32b3650c12
Set X-Forwarded-Proto on federation requests
4 years ago
Béla Becker
2d7e7680e5
matrix.{{ matrix_domain }} -> {{ matrix_server_fqn_matrix }}
4 years ago
Aaron Raimist
466827139a
Also check if matrix_ssl_lets_encrypt_support_email is blank
4 years ago
Slavi Pantaleev
97c0bf1a73
Merge pull request #942 from pushytoxin/etherpad1_8_12
...
Upgrade Etherpad (1.8.7 -> 1.8.12)
4 years ago
Béla Becker
60aa40845f
Upgrade Etherpad (1.8.7 -> 1.8.12)
4 years ago
Yannick Goossens
27416607d9
Another field with 'invalid input syntax for type smallint'
4 years ago
Michael
5a6bdb0c3d
merge upstream
4 years ago
Michael
571b70a1f4
fix for running outside of AWX
4 years ago
Michael
5a1f3b7d67
GMH v0.3.0
4 years ago
Michael
33ec5710d9
0.2.1 revision
4 years ago
Michael
4c882c513b
initial PR
4 years ago
Marcus Proest
2ca8211184
Merge remote-tracking branch 'upstream/master'
4 years ago
Marcus Proest
b99372a3c5
initial commit of mautrix-instagram role
4 years ago
Slavi Pantaleev
108aed53be
Fix invalid matrix-postgres.service when matrix_postgres_process_extra_arguments is empty
...
This only seems to be affecting some people badly enough to cause
matrix-postgres not to start. Certain systemd versions probably handle
it better or something.
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/889
(hopefully)
4 years ago
Slavi Pantaleev
1dbdfeec07
Fix matrix-postgres stopping for consistency with other services
...
This probably got lost somehow in all the work that happened in
https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/456
4 years ago
Slavi Pantaleev
9f91eaa54b
Fix incorrect service name
...
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/887
4 years ago
Slavi Pantaleev
91c987ca7d
Merge pull request #872 from xangelix/add-mx-puppet-groupme-gh
...
Add mx-puppet-groupme support
4 years ago
Slavi Pantaleev
d94d0e2ca5
Merge pull request #456 from eMPee584/synapse-workers
...
Synapse workers
4 years ago
Slavi Pantaleev
9dc87bb948
Add Synapse worker presets for easier configuration
...
Adding more presets in the future would be nice.
4 years ago
Slavi Pantaleev
eaea215282
Allow Synapse workers to be used with an external nginx webserver
...
We're talking about a webserver running on the same machine, which
imports the configuration files generated by the `matrix-nginx-proxy`
in the `/matrix/nginx-proxy/conf.d` directory.
Users who run an nginx webserver on some other machine will need to do
something different.
4 years ago
Slavi Pantaleev
2f732e4234
Update Synapse worker endpoints
4 years ago
Slavi Pantaleev
217b4a8808
Release Synapse v1.27.0 to ARM32 via self-building
...
Related to: https://matrix.org/blog/2021/02/18/synapse-1-27-0-released#dropping-armv7-docker-images
4 years ago
Béla Becker
65eab14a64
Make sure Etherpad has a database to write to
4 years ago
Béla Becker
005f4d57f9
Remove mention of sqlite3 support for Etherpad
...
The official Etherpad Docker image has no support for sqlite3 databases.
4 years ago
Slavi Pantaleev
1789620901
Merge branch 'master' into synapse-workers
4 years ago
Slavi Pantaleev
d6c4d41c2b
Define instanceId property on workers
...
This give us the possibility to run multiple instances of
workers that that don't expose a port.
Right now, we don't support that, but in the future we could
run multiple `federation_sender` or `pusher` workers, without
them fighting over naming (previously, they'd all be named
something like `matrix-synapse-worker-pusher-0`, because
they'd all define `port` as `0`).
4 years ago
rakshazi
996f732f98
Update synapse-admin (0.6.1 -> 0.7.0)
4 years ago
Cody Neiman
c4e1209452
Merge branch 'master' into add-mx-puppet-groupme-gh
4 years ago
Slavi Pantaleev
d33483b8ce
Document that Synapse pusher worker instances are shardable
...
Related to:
- https://github.com/matrix-org/synapse/pull/9407
- https://github.com/matrix-org/synapse/pull/7855
4 years ago
Slavi Pantaleev
daae74b074
Merge branch 'master' into synapse-workers
4 years ago
Slavi Pantaleev
521160c12f
Upgrade Synapse (v1.26.0 -> v1.27.0)
4 years ago
Slavi Pantaleev
865d71e35a
Upgrade Element (1.7.20 -> 1.7.21)
4 years ago
Marc Leuser
fd3d48bb6d
trust the reverse proxy by default
4 years ago
Marc Leuser
1434c371bd
safer port binding of etherpad docker container
...
don't bind to any host port if nginx_proxy is used
only bind to localhost if it's not used
4 years ago
Slavi Pantaleev
61e427d690
Do not let people enable more than 1 federation_sender worker
4 years ago
Slavi Pantaleev
85a05f38e8
Allow Synapse worker list to be generated dynamically
...
This leads to much easier management and potential safety
features (validation). In the future, we could try to avoid port
conflicts as well, but it didn't seem worth the effort to do it now.
Our port ranges seem large enough.
This can also pave the way for a "presets" feature
(similar to `matrix_nginx_proxy_ssl_presets`) which makes it even easier
for people to configure worker counts.
4 years ago
Slavi Pantaleev
43059bb040
Fix metrics listeners for Synapse workers
...
`::` leads to errors like:
> socket.gaierror: [Errno -9] Address family for hostname not supported
4 years ago
Slavi Pantaleev
453a4ec2d8
Relocate tasks related to Synapse workers
4 years ago
Cody Neiman
e510481e84
Merge branch 'master' into add-mx-puppet-groupme-gh
4 years ago
Slavi Pantaleev
5cfeae806b
Merge branch 'master' into synapse-workers
4 years ago
Slavi Pantaleev
894679750e
Merge pull request #862 from s-thom/nginx-additional
...
Add additional domains for Let's Encrypt certificates to be obtained
4 years ago
Slavi Pantaleev
a8e9f35708
Touch up documentation a bit
4 years ago
Slavi Pantaleev
7d39e5153a
Upgrade Postgres minor versions
4 years ago
Cody Neiman
dc5e7eed3f
Fix mx-puppet-groupme port typo
4 years ago
Cody Neiman
2b3c143487
Update mx-puppet-groupme docker image
4 years ago
Cody Neiman
5a70a56ff0
Initial implementation
4 years ago
Slavi Pantaleev
8434af10de
Do not fail on unrelated validation tasks when Grafana not enabled
4 years ago
Slavi Pantaleev
66d5b0e5b9
Do not fail on unrelated validation tasks when Prometheus not enabled
...
These validation tasks should only run when Prometheus is enabled.
4 years ago
Slavi Pantaleev
2ac2b02cb4
Merge pull request #838 from Peetz0r/stats
...
Prometheus and Grafana on stats.<domain>
4 years ago
Slavi Pantaleev
c8ab200cb1
Break dependency between matrix-prometheus and (matrix-prometheus-node-exporter, matrix-synapse)
4 years ago
Slavi Pantaleev
6842102e00
Split install/uninstall tasks in matrix-prometheus
4 years ago
Slavi Pantaleev
18e31526a8
Rename some variables
4 years ago
Slavi Pantaleev
85a260daaf
Make --tags=setup-prometheus not break, relying on matrix-base facts
4 years ago
Slavi Pantaleev
df3dd1c824
Use --read-only FS for metrics-related containers
...
It seems like it doesn't cause any issues for any of these services.
4 years ago
Slavi Pantaleev
3ce9712388
Fix Grafana dashboard/datasource label
4 years ago
Slavi Pantaleev
f0cd294628
Fix matrix-prometheus-node-exporter failure to start
...
The quotes around "host" for both `--pid` and `--net` were
causing trouble for me:
> docker: --pid: invalid PID mode.
and:
> docker: Error response from daemon: network "host" not found.
I've also changed the `-v` call to `--mount` for consistency with the
rest of the playbook.
4 years ago
efraimbart
b7e68cb779
Fix wrong docker image being pulled
...
Changed `matrix_mautrix_signal_docker_image_force_pull` to `matrix_mautrix_signal_daemon_docker_image_force_pull` when force pulling the daemon
4 years ago
Peetz0r
fde222a041
Update Prometheus Node Exporter 1.0.1 => 1.1.0
4 years ago
Peetz0r
3a77261dc6
Update Grafana 7.3.7 => 7.4.0
4 years ago
Peetz0r
144a5e6198
Register docker network info and use it for prometheus-node-exporter
...
Using the hardcoded IP did break while I was
messing with IPv6 stuff on the other branch
4 years ago
Peetz0r
76d7e84be5
Make prometheus-node-exporter a bit more capable
...
By running it in a more privileged container with access to the host network stack and such
4 years ago
Peetz0r
989100b1c1
Grafana nginx proxy config
4 years ago
Peetz0r
eb5aa93e8a
Grafana
...
Also includes the dashboards for Synapse and for Node Exporter.
Again has only been tested on debian amd64 so far, but the grafana docker image is available for arm64 and arm32. Nice.
4 years ago
Peetz0r
e525970b39
Prometheus Node Exporter
...
Basic system stats, to show stuff the synapse metrics
can't show such as resource usage by bridges, etc
Seems to work fine as well.
This too has only been tested on debian amd64 so far
4 years ago
Peetz0r
13ef9e85cf
Prometheus
...
Initial attempt. Seems to work fine.
Only tested on debian amd64 so far
4 years ago
Slavi Pantaleev
7e8e95a09a
Make S3-mounting path configurable
...
This will make data migration easier.
4 years ago
Yan
385b6c623e
Fixes: a66a604e
("Selfbuild appservice-slack bridge")
4 years ago
Stuart Thomson
064b2e533c
Add variable for extra domains to get LE certs for
...
I felt that adding another variable was probably going to be the easiest way to do this. I may end up adding another variable to enable this feature, for consistency with some of the other things.
4 years ago
Paul Tötterman
9ad67d7cdf
Upgrade Element (1.7.19 -> 1.7.20)
...
https://github.com/vector-im/element-web/releases/tag/v1.7.20
https://hub.docker.com/layers/vectorim/element-web/v1.7.20/images/sha256-44cae3a532d86c16940deb70866b522ba6acc8c5d7adf3c661cfc8b06f1de681?context=explore
4 years ago
Aaron Raimist
5cb976c321
Upgrade Element (1.7.18 -> 1.7.19)
4 years ago
Julian Foad
d1f28d17bb
Allow psql args to be given to matrix-postgres-cli
...
This passes any arguments given to 'matrix-postgres-cli' to the 'psql' command.
Examples:
$ # start an interactive shell connected to a given db
$ sudo matrix-postgres-cli -d synapse
$ # run a query, non-interactively
$ sudo matrix-postgres-cli -d synapse -c 'SELECT group_id FROM groups;'
4 years ago
Slavi Pantaleev
c4a05b760a
Make mautrix bridges not overwrite their config
...
If they do, our next playbook runs would simply revert it
and report "changed" for that task.
There's no benefit to letting the bridge spew a new config file.
This does not apply to the mautrix whatsapp bridge, because that one
is written in Go (not Python) and takes different flags. There's no
equivalent flag there.
4 years ago
Slavi Pantaleev
889b299bc2
Merge pull request #804 from pushytoxin/matrix-etherpad
...
Self-hosted Etherpad
4 years ago
Slavi Pantaleev
7804060eee
Use Etherpad 1.8.7, not :latest
4 years ago
Slavi Pantaleev
98f9619279
Merge pull request #843 from thomwiggers/update-irc
...
Update IRC bridge to 0.23.0
4 years ago
o8F0LY
0a0c9a4efc
Add double quotes to avoid synatx errors
4 years ago
Thom Wiggers
8de739132a
Update IRC bridge to 0.23.0
4 years ago
Peetz0r
e0e459ac0c
Fixed missing quotes
4 years ago
Slavi Pantaleev
efbffa26bf
Fix typo
4 years ago
Peetz0r
473936065d
Use Debian Buster Docker repo on Debian Bullseye
...
Future maintainer: check on https://docs.docker.com/engine/install/debian/ if Docker for
Debian 11 is released, then undo this commit
4 years ago
Béla Becker
2edc9cb83c
Name the Synapse database on state compression import
...
Fixes:
https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/833
4 years ago
Béla Becker
b7261dc098
Etherpad role: Etherpad needs Dimension
...
The default scalar.vector.im integrations manager doesn't support custom
URL's for etherpad, therefore Dimension needs to be enabled.
4 years ago
Slavi Pantaleev
3ea90ca436
Upgrade Element (1.7.17 -> 1.7.18)
4 years ago
Slavi Pantaleev
e7f3f7c431
Enable /devices endpoint for generic workers
4 years ago
Slavi Pantaleev
26b287bd17
Upgrade certbot (1.10.1 -> 1.11.0)
4 years ago
Slavi Pantaleev
1cd2a218de
Merge branch 'master' into synapse-workers
4 years ago
Slavi Pantaleev
c6feb0b99e
Upgrade Synapse (v1.25.0 -> v1.26.0)
4 years ago
Slavi Pantaleev
39c2d72d17
Merge branch 'master' into synapse-workers
4 years ago
Slavi Pantaleev
008049f2a9
Fix mautrix-telegram registration file mistake
...
Regression since f6097fbba1
4 years ago
Slavi Pantaleev
a49dab76f8
Merge branch 'master' into synapse-workers
4 years ago
Slavi Pantaleev
e3290d8bcb
Remove |to_json causing trouble
...
Fixes a regression introduced in f6097fbba1
, which was cauing Synapse
to die with this error message:
> ValueError: sender_localpart needs characters which are not URL encoded.
4 years ago
Slavi Pantaleev
a31c9603fa
Merge branch 'master' into synapse-workers
4 years ago
Slavi Pantaleev
f6097fbba1
E2BE not working for mautrix bridges
...
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/806
4 years ago
Slavi Pantaleev
07f1ea24ee
Make it possible to override the welcome.html.j2 template used for Element
4 years ago
Slavi Pantaleev
d98a1ceadd
Merge branch 'master' into synapse-workers
4 years ago
Slavi Pantaleev
512f42aa76
Do not report docker kill/rm attempts as errors
...
These are just defensive cleanup tasks that we run.
In the good case, there's nothing to kill or remove, so they trigger an
error like this:
> Error response from daemon: Cannot kill container: something: No such container: something
and:
> Error: No such container: something
People often ask us if this is a problem, so instead of always having to
answer with "no, this is to be expected", we'd rather eliminate it now
and make logs cleaner.
In the event that:
- a container is really stuck and needs cleanup using kill/rm
- and cleanup fails, and we fail to report it because of error
suppression (`2>/dev/null`)
.. we'd still get an error when launching ("container name already in use .."),
so it shouldn't be too hard to investigate.
4 years ago
Slavi Pantaleev
869727a402
Add comment to mautrix-facebook bridge regarding alembic migrations
4 years ago
Slavi Pantaleev
a9af36841d
Merge branch 'master' into synapse-workers
4 years ago
Slavi Pantaleev
346f8b3475
Fix typo
4 years ago
Slavi Pantaleev
26542308b3
Use |to_json in more places in matrix-appservice-discord config
...
I don't think this was causing an issue, but it might
if the bot token has a more special value in the future.
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/828
4 years ago
Béla Becker
42f338016b
Etherpad matrix-nginx-proxy configuration
4 years ago
Béla Becker
7bc9be95cb
Add map directive to the base of nginx.conf
...
This needs to be added for WebSocket upgrades to work properly (see doc:
http://nginx.org/en/docs/http/websocket.html )
4 years ago
Béla Becker
38bf1eda70
Etherpad Jitsi integration
4 years ago
Béla Becker
4b451ff782
Etherpad role
4 years ago
Slavi Pantaleev
a535226210
Stop/disable unnecessary worker services before deleting them
4 years ago
Slavi Pantaleev
dd24942c03
Use |to_json for mautrix-telegram config
...
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/824
4 years ago
Slavi Pantaleev
778b66876c
Merge branch 'master' into synapse-workers
4 years ago
Slavi Pantaleev
70dcdd41a7
Simplify matrix-remove-all
...
We don't have instantiated services anymore, nor
/etc/systemd/system/matrix-synapse.service.wants/ stuff.
4 years ago
Slavi Pantaleev
d3ecc6f017
Fix bridges failing to upload media when Synapse workers are enabled
4 years ago
Slavi Pantaleev
66cdc7bf5a
Clean up worker.yaml generation a bit and make it more flexible
4 years ago
Slavi Pantaleev
1462409b34
Fix worker listening addresses
...
Not specifying bind addresses for the worker resulted in this warning:
> synapse.app - 47 - WARNING - None - Failed to listen on 0.0.0.0, continuing because listening on [::]
Additionally, metrics listening only on 127.0.0.1 seems like a no-op.
Only having it accessible from within the container is likely not what
we intend. Changed that to all interfaces as well.
Whether it actually gets exposed or not depends on the systemd service
and `matrix_synapse_workers_container_host_bind_address`.
4 years ago
Slavi Pantaleev
01747c8cc4
Prevent Synapse warning about enabling metric listeners with enable_metrics: false
...
> synapse.app.generic_worker - 606 - WARNING - None - Metrics listener configured, but enable_metrics is not True!
4 years ago
Slavi Pantaleev
70796703d3
Run Synapse workers in their own containers
...
This switches the `docker exec` method of spawning
Synapse workers inside the `matrix-synapse` container with
dedicated containers for each worker.
We also have dedicated systemd services for each worker,
so this are now:
- more consistent with everything else (we don't use systemd
instantiated services anywhere)
- we don't need the "parse systemd instance name into worker name +
port" part
- we don't need to keep track of PIDs manually
- we don't need jq (less depenendencies)
- workers dying would be restarted by systemd correctly, like any other
service
- `docker ps` shows each worker separately and we can observe resource
usage
4 years ago
Slavi Pantaleev
6fc214480c
Fix Signal role using incorrect database string variable
...
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/823
4 years ago
Slavi Pantaleev
da50fb27a0
Whitelist /_matrix/key requests for going to generic workers on the federation port
4 years ago
Slavi Pantaleev
4d62a75f6f
Get matrix-corporal to play nicely with a Synapse worker setup
...
We do this by creating one more layer of indirection.
First we reach some generic vhost handling matrix.DOMAIN.
A bunch of override rules are added there (capturing traffic to send to
ma1sd, etc). nginx-status and similar generic things also live there.
We then proxy to the homeserver on some other vhost (only Synapse being
available right now, but repointing this to Dendrite or other will be
possible in the future).
Then that homeserver-specific vhost does its thing to proxy to the
homeserver. It may or may not use workers, etc.
Without matrix-corporal, the flow is now:
1. matrix.DOMAIN (matrix-nginx-proxy/matrix-domain.conf)
2. matrix-nginx-proxy/matrix-synapse.conf
3. matrix-synapse
With matrix-corporal enabled, it becomes:
1. matrix.DOMAIN (matrix-nginx-proxy/matrix-domain.conf)
2. matrix-corporal
3. matrix-nginx-proxy/matrix-synapse.conf
4. matrix-synapse
(matrix-corporal gets injected at step 2).
4 years ago
Slavi Pantaleev
c05d3d09bd
Disable systemd services while stopping them
...
This removes some `multi-target.wants` symlinks as well, etc.
But despite systemd saying:
> Removed symlink /etc/systemd/system/matrix-synapse.service.wants/matrix-synapse-worker@appservice:0.service
.. I still see such symlinks tehre for me for some reason, so keeping the
code (below) to find & delete them still seems like a good idea.
4 years ago
Slavi Pantaleev
63301b0ef1
Improvements around Synapse worker/metrics ports exposure
...
There was a `matrix_nginx_proxy_enabled|default(False)` check, but:
- it didn't seem to work reliably for some reason (hmm)
- referring to a `matrix_nginx_proxy_*` variable from within the
`matrix-synapse` role is not ideal
- exposing always happened on `127.0.0.1`, which may not be good enough
for some rarer setups (where the own webserver is external to the host)
4 years ago
Slavi Pantaleev
f66a6b066b
Be more specific with the Redis version being used
4 years ago
Slavi Pantaleev
5ca68210cd
Do not handle /_matrix/federation on client-server port, nor /_matrix/client stuff on federation port
...
I guess it didn't hurt to do it until now, but it's not great serving
federation APIs on the client-server API port, etc.
matrix-corporal doesn't work yet (still something to be solved in the
future), but its firewalling operations will also be sabotaged
by Client-Server APIs being served on the federation port (it's a way to get around its firewalling).
4 years ago
Slavi Pantaleev
cc5cf0d725
Load roles/matrix-synapse/vars/workers.yml earlier to not break --tags=setup-nginx-proxy
...
If we load it at runtime, during matrix-synapse role execution,
it's good enough for matrix-synapse and all roles after that,
but.. it breaks when someone uses `--tags=setup-nginx-proxy` alone.
The downside of including this vars file like this in `setup.yml`
is that the variables contained in it cannot be overriden by the user
(in their inventory's `vars.yml`).
... but it's not like overriding these variables was possible anyway
when including them at runtime.
4 years ago
Slavi Pantaleev
92ee3d78a0
Fix matrix-remove-all for when Synapse workers are enabled
4 years ago
Slavi Pantaleev
8fa913dca7
Fix Ansible warning
4 years ago
Marcel Partap
edc21f15e5
Restrict publishing worker (metrics) ports to localhost
4 years ago
Marcel Partap
183adec3d8
Merge remote-tracking branch 'origin/master' into synapse-workers
4 years ago
Marcel Partap
c8f051a42d
Track workers endpoint list in repo instead of regenerating on user side
4 years ago
Marcel Partap
f2c7d79238
Drop probably incorrect comment from synapse homeserver.yaml.j2
4 years ago
Slavi Pantaleev
a56cb34850
Notify people if /matrix/postgres/data-auto-upgrade-backup exists
4 years ago
Slavi Pantaleev
a2422c458a
Notify of remaining matrix-postgres local data in a better way
4 years ago
Slavi Pantaleev
1cd251ed78
Don't delete Docker images which may have been pulled by another
...
Some people run Coturn or Jitsi, etc., by themselves and disable it
in the playbook.
Because the playbook is trying to be nice and clean up after itself,
it was deleting these Docker images.
However, people wish to pull and use them separately and would rather
they don't get deleted.
We could make this configurable for the sake of this special case, but
it's simpler to just avoid deleting these images.
It's not like this "cleaning things up" thing works anyway.
As time goes on, the playbook gets updated with newer image tags
and we leave so many images behind. If one doesn't run
`docker system prune -a` manually once in a while, they'd get swamped
with images anyway. Whether we leave a few images behind due to the lack
of this cleanup now is pretty much irrelevant.
4 years ago
Slavi Pantaleev
f085362149
Fix some Postgres CLI scripts to target the correct database
...
Fixes a regression introduced in 95346f3117
.
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/814
Using `matrix_synapse_` variables in the `matrix-postgres` role is not
ideal, but.. this script belongs neither here, nor there.
We'll have it be like that for now.
4 years ago
Slavi Pantaleev
3051655d21
Ensure matrix_appservice_irc_docker_src_files_path created when self-building
...
The git module will create it anyway, but that would likely use `root:root`.
4 years ago
Panagiotis Georgiadis
f10e3fef0d
Merge branch 'master' into irc
4 years ago
Panagiotis Georgiadis
e502ee33da
Selfbuild appservice-irc bridge
4 years ago
Slavi Pantaleev
f9968b6981
Fix matrix_postgres_connection_password length check
4 years ago
Slavi Pantaleev
2997a7fc3e
Make mx-puppet-* bridges not log to files
...
We log everything in systemd/journald for every service already,
so there's no need for double-logging, bridges rotating log files
manually and other such nonsense.
4 years ago
Slavi Pantaleev
f3dd346724
Try to tighten Signal bridge security
4 years ago
Slavi Pantaleev
8ec975e3c8
Use matrix:matrix for Signal bridge (not root)
4 years ago
Slavi Pantaleev
37909aa7a9
Create signald/{avatars,attachments,data} and rename config dir
4 years ago
Slavi Pantaleev
88addd71fc
Fix Postgres imports going to the matrix DB by default
...
Well, they still do go to that DB by default,
but our docs give a better command to users, which would do the right
thing.
4 years ago
Slavi Pantaleev
bef0702fea
Wait some more when starting Postgres during setup on ARM
4 years ago
Slavi Pantaleev
f9c1d62435
Fix Postgres database (-alpine) failing to start on ARM32
4 years ago
Slavi Pantaleev
95346f3117
Reorganize Postgres access (breaking change)
...
In short, this makes Synapse a 2nd class citizen,
preparing for a future where it's just one-of-many homeserver software
options.
We also no longer have a default Postgres superuser password,
which improves security.
The changelog explains more as to why this was done
and how to proceed from here.
4 years ago
throwawayay
a30ef0cc29
Update element-web (1.7.16 -> 1.7.17)
4 years ago
Slavi Pantaleev
024a23ed17
Upgrade mautrix-facebook to the new Postgres-only version
...
I had intentionally held it back in 39ea3496a4
until:
- it received more testing (there were a few bugs during the
migration, but now it seems OK)
- this migration guide was written
4 years ago
pushytoxin
d51ea25219
When validating LE certs, do not wait for a random time
...
While administering we will occasionally invoke this script interactively with the "non-interactive" switch still there, yet still sit at the desk waiting for 300 seconds for this timer to run out.
The systemd-timer already uses a 3h randomized delay for automatic renewals, which serves this purpose well.
4 years ago
Slavi Pantaleev
39ea3496a4
Downgrade/lock mautrix-facebook to pre-mobile times
...
The `mobile` branch got merged to `master`, which ends up becoming
`:latest`. It's a "rewrite" of the bridge's backend and only
supports a Postgres database.
We'd like to go back (well, forward) to `:latest`, but that will take
a little longer, because:
- we need to handle and document things for people still on SQLite
(especially those with external Postgres, who are likely on SQLite for
bridges)
- I'd rather test the new builds (and migration) a bit before
releasing it to others and possibly breaking their bridge
Brave ones who are already using the bridge with Postgres
can jump on `:latest` and report their experience.
4 years ago
Slavi Pantaleev
c9d96d8135
Fix mautrix-telegram paths creation bug
4 years ago
Slavi Pantaleev
56c54d5cc7
Upgrade matrix-corporal (2.0.1 -> 2.1.0)
4 years ago
Slavi Pantaleev
c1008fde44
Upgrade matrix-coturn (4.5.1.3 -> 4.5.2)
4 years ago
Slavi Pantaleev
cf06f84608
Upgrade matrix-corporal (2.0.0 -> 2.0.1)
4 years ago
Slavi Pantaleev
d95cbe38d7
Rename configuration setting
4 years ago
Slavi Pantaleev
28d86e3aaa
Initial work on support for matrix-corporal v2
4 years ago
Slavi Pantaleev
8549926395
Attempt to fix mautrix-whatsapp DB migration user table conflict
...
Discussed in https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/791
4 years ago
Slavi Pantaleev
1692a28fe4
Work around annoying Docker warning about undefined $HOME
...
> WARNING: Error loading config file: .dockercfg: $HOME is not defined
.. which appeared in Docker 20.10.
4 years ago
Slavi Pantaleev
26f0bbfdef
Fix self-building for matrix-ma1sd on non-version tag/branch
...
Building `master` or something like this was failing.
4 years ago
Slavi Pantaleev
9e936e45ad
Use BuildKit for ma1sd Docker building
...
Newer versions (`master`) use things like `--platform=...`,
which are not supported unless we enable the new BuildKit building
backend.
4 years ago
Slavi Pantaleev
e1690722f7
Replace cronjobs with systemd timers
...
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/756
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/737
I feel like timers are somewhat more complicated and dirty (compared to
cronjobs), but they come with these benefits:
- log output goes to journald
- on newer systemd distros, you can see when the timer fired, when it
will fire, etc.
- we don't need to rely on cron (reducing our dependencies to just
systemd + Docker)
Cronjobs work well, but it's one more dependency that needs to be
installed. We were even asking people to install it manually
(in `docs/prerequisites.md`), which could have gone unnoticed.
Once in a while someone says "my SSL certificates didn't renew"
and it's likely because they forgot to install a cron daemon.
Switching to systemd timers means that installation is simpler
and more unified.
4 years ago
Slavi Pantaleev
05ca9357a8
Add .service suffix to systemd units list
...
We'll be adding `.timer` units later on, so it's good to be
more explicit.
4 years ago
Slavi Pantaleev
653d1d7924
Revert "Don't self-build ma1sd every time unless git sources changed"
...
This reverts commit 2a25b63bb6
.
Looking at other roles, we trigger building regardless of this.
It's better to always trigger it, because it's less fragile.
If the build fails and we only trigger it on "git changes"
then we won't trigger it for a while. That's not good.
Triggering it each and every time may seem like a waste,
but it supposedly runs quickly due to Docker caching.
4 years ago
Slavi Pantaleev
6f5aaad48d
Split install/uninstall tasks in matrix-coturn
4 years ago
Slavi Pantaleev
57ea43d8b0
Remove unused variable
...
This variable has been useless since 2019-01-08.
We probably don't need to check for its usage anymore,
given how much time has passed since then, but ..
4 years ago
Slavi Pantaleev
7a90eb6d4f
Relocate some validation tasks
4 years ago
Slavi Pantaleev
67dc5237c5
Merge pull request #794 from drpaneas/appservice_slack_rebuild
...
Selfbuild appservice-slack bridge
4 years ago
Slavi Pantaleev
862a6276a0
Do not pull appservice-slack when self-building
4 years ago
Slavi Pantaleev
b15da29ebb
Bump Synapse to v1.25.0 for ARM
4 years ago
Panagiotis Georgiadis
a66a604e53
Selfbuild appservice-slack bridge
4 years ago
Slavi Pantaleev
2a25b63bb6
Don't self-build ma1sd every time unless git sources changed
4 years ago
Slavi Pantaleev
a5a44a9d3f
Merge pull request #786 from drpaneas/rebuild_telegram
...
Local rebuild for Telegram
4 years ago
Slavi Pantaleev
52fa7e576b
Fix path typo
4 years ago
Slavi Pantaleev
5fa30cdfcb
Ensure matrix_mautrix_facebook_docker_src_files_path created
...
Before we potentially clone to that path, we'd better make sure it exists.
We also simplify `when` statements a bit.
Given that we're in `setup_install.yml`, we know that the bridge is enabled,
so there's no need to check for that.
4 years ago
Slavi Pantaleev
568cb3d86f
Upgrade matrix-mailer (4.93-r0 -> 4.93-r1)
...
This is a bit misleading, because the old Docker image
was tagged as `4.93.1`. There hasn't been a `4.93.1` version yet though.
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/792
4 years ago
Slavi Pantaleev
24100342e1
Tell people that federation_ip_range_blacklist is gone
...
Related to d5945c6e78
4 years ago
Slavi Pantaleev
d5945c6e78
Upgrade Synapse (v1.24.0 -> v1.25.0) for amd64
4 years ago
Panagiotis Georgiadis
999fd2596f
Local rebuild for Telegram
4 years ago
Slavi Pantaleev
0b260a133f
Add matrix-aux role to help with managing auxiliary files/directories
4 years ago
Will
5b0761bf40
Create list_tokens.yml
4 years ago
Will
1468010194
Update main.yml
4 years ago
Marcel Partap
cd8100544b
Merge remote-tracking branch 'origin/master' into synapse-workers
...
Sync with upstream
4 years ago
Slavi Pantaleev
f7ae050eaf
Remove useless quotes around ssl_ciphers value
...
Not sure if it breaks with them or not, but no other directive
uses quotes and the nginx docs show examples without quotes,
so we're being consistent with all of that.
4 years ago
Slavi Pantaleev
5822ba0c01
Use a more natural if statement
4 years ago
Slavi Pantaleev
de6ecd8818
Update inaccurate comments
4 years ago
Agustin Ferrario
5156c63a76
Clean up code
...
Code was clean up and simplified to make it simpler and easier to
maintain. No features were modified.
4 years ago
Agustin Ferrario
25d423e6b6
Fix errors per spantaleev suggestions
...
The different configurations are now all lower case, for consistent
naming.
`matrix_nginx_proxy_ssl_config` is now called
`matrix_nginx_proxy_ssl_preset`. The different options for "modern",
"intermediate" and "old" are stored in the main.yml file, instead of
being hardcoded in the configuration files. This will improve the
maintainability of the code.
The "custom" preset was removed. Now if one of the variables is set, it
will use it instead of the preset. This will allow to mix and match more
easily, for example using all the intermediate options but only
supporting TLSv1.2. This will also provide better backward
compatibility.
4 years ago
Agustin Ferrario
3cb71e7e84
Merge branch 'master' of https://github.com/spantaleev/matrix-docker-ansible-deploy
4 years ago
Slavi Pantaleev
6cce5383bc
Fix Ansible 2.9.6 check
...
Fixup for https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/769
4 years ago
Slavi Pantaleev
2c09111a3a
Actually enforce that we run on Ansible >= 2.7.1
...
Related to 6e652e10ad
4 years ago
Slavi Pantaleev
8710883064
Merge pull request #743 from pushytoxin/docker_network
...
Drop the old workaround for an Ansible bug that has been fixed three years ago
4 years ago
Slavi Pantaleev
cd2d2f594a
Merge pull request #686 from laszabine/signal
...
Added a role for the bridge mautrix-signal
4 years ago
Slavi Pantaleev
3b524ee815
Make mautrix-signal bridge not log to files
...
We try to only use console logging (going to journald) for everything,
instead of logging things twice (or more).
4 years ago
Slavi Pantaleev
274f23f668
Make matrix-mautrix-signal-daemon.service depend on docker.service
4 years ago
Slavi Pantaleev
da2a6682b3
Get rid of matrix_mautrix_signal_configuration_permissions
...
While it's kind of nice having it, it's also somewhat raw
and unnecessary.
Having a good default and not even mentioning it seems better
for most users.
People who need a more exposed bridge (rare) can use
override the default configuration using
`matrix_mautrix_signal_configuration_extension_yaml`.
4 years ago
Slavi Pantaleev
df8d9cfd34
Remove some TODOs
...
The answer to these is: it's good to have them in both places.
The role defines the obvious things it depends on (not knowing
what setup it will find itself into), and then
`group_vars/matrix_servers` "extends" it based on everything else it
knows (the homeserver being Synapse, whether or not the internal
Postgres server is being used, etc.)
4 years ago
Slavi Pantaleev
4805637181
Add support for custom ma1sd view sesion templates
4 years ago
Slavi Pantaleev
f84c69c164
Relocate custom ma1sd threepid email templates to config/
...
We used to store them in data/, but that seems inappropriate,
since it's just static configuration that the playbook can recreate.
4 years ago
Slavi Pantaleev
b5812b539b
Rename ma1sd custom email template variable
...
Keeps up with a1f64f5159 (diff-0ccf69eb4d59a7645eb4d0a0b077e693948edb33ad06df043bba3fb30122879b)
4 years ago
Slavi Pantaleev
fb83eccf99
Relocate SQL template file
4 years ago
Sabine Laszakovits
84cac25c11
added config data_dir (else in ~, which isn't set)
4 years ago
Sabine Laszakovits
56af2b1a8c
small fixes
4 years ago
Sabine Laszakovits
89f7f3c3b8
added log level configuration
4 years ago
Sabine Laszakovits
ffb837d4bc
made the bridge use the default postgres db
4 years ago
Sabine Laszakovits
a06c58c753
Merge branch 'master' into signal
4 years ago
Slavi Pantaleev
1ed991e25c
Merge pull request #769 from aaronraimist/check-for-buggy-ansible
...
Check for buggy version of Ansible that Ubuntu 20.04 provides
4 years ago
Slavi Pantaleev
86da489b9b
Never fail when stopping systemd service during (SQLite -> Postgres) migration
...
We need to suppress systemd service-stopping requests in certain rare
cases like https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/771
That issue seems to describe a case, where a migration from mxisd to
ma1sd was happening (DB files had just been moved), and then we were
attemping to stop `matrix-ma1sd.service` so we could import that database into
Postgres. However, there's neither `matrix-mxisd.service`, nor
`matrix-ma1sd.service` after `migrate_mxisd.yml` had just run, so
stopping `matrix-ma1sd.service` was failing.
4 years ago
Aaron Raimist
8827a49e21
Check equality properly
4 years ago
Aaron Raimist
3dd0517f04
Check for buggy version of Ansible that Ubuntu 20.04 provides
4 years ago
Slavi Pantaleev
a2a4218e95
Make mautrix-python-based bridges E2EE happier
...
Fixes a problem like this:
> File "/usr/lib/python3.8/site-packages/mautrix/bridge/e2ee.py", line 79, in __init__
> raise RuntimeError("Unsupported database scheme")
mautrix-python's e2ee.py module expects to find `postgres://` instead of
`postgresql://`.
4 years ago
Slavi Pantaleev
80c72615c7
Fixup all Dimension boolean fields after pgloader import
...
This is 8b6174786b
done right. There were many more fields
that we had to account for.
4 years ago
Slavi Pantaleev
21662af3be
Archive database only after additional_psql_statements_list had executed
4 years ago
Stuart Mumford
019a4d7dcd
Use role relative paths for things
4 years ago
Slavi Pantaleev
be0c599565
Feed more slashes to mautrix bridges when using SQLite
...
This makes the `sqlite://` URI match what we were using before
and what the config expects.
4 years ago
Slavi Pantaleev
8b6174786b
Fixup Dimension database schema a bit after pgloader import
4 years ago
Slavi Pantaleev
c5f8b1f61b
Fix mautrix-whatsapp Postgres connection string to not use SSL by default
4 years ago
Slavi Pantaleev
f19b29846d
Merge pull request #740 from jdreichmann/postgres-per-default
...
postgres: create databases for all services
4 years ago
Slavi Pantaleev
ad1425eee4
Add pgloader self-building support (for ARM)
4 years ago
Slavi Pantaleev
8675dedbdb
Add support for automatic (nedb -> Postgres) migration to matrix-appservice-slack
4 years ago
Slavi Pantaleev
9b95e1937c
Auto-restart matrix-appservice-irc after (nedb -> Postgres) migration
4 years ago
Slavi Pantaleev
715bdf2c64
Add support for automatic (nedb -> Postgres) migration to mx-appservice-irc
4 years ago
Slavi Pantaleev
15f4cc924d
Rename variables (_database_db_name -> _database_name)
4 years ago
Slavi Pantaleev
ab6563ce4e
Add support for automatic (Postgres -> SQLite) migration to mx-puppet-twitter
4 years ago
Slavi Pantaleev
69cc2145d2
Add support for automatic (Postgres -> SQLite) migration to mx-puppet-steam
4 years ago
Slavi Pantaleev
262a25f997
Add support for automatic (Postgres -> SQLite) migration to mx-puppet-slack
4 years ago
Slavi Pantaleev
e49eb078a2
Add support for automatic (Postgres -> SQLite) migration to mx-puppet-skype
4 years ago
Dan Arnfield
c3b63c6c97
Update element-web (1.7.15 -> 1.7.16)
4 years ago
Dan Arnfield
10e0fa17ad
Update nginx (1.19.5 -> 1.19.6)
4 years ago
Slavi Pantaleev
d135cd9cd3
Ensure mx-puppet-discord directories are created before attempting migration
...
Our old (base-path -> data-path) SQLite migration can't work otherwise.
It's probably not necessary to keep it anymore, but since we still do,
at least we should take care to ensure it works.
4 years ago
Slavi Pantaleev
44c9f4daca
Add support for automatic (Postgres -> SQLite) migration to mx-puppet-instagram
4 years ago
Slavi Pantaleev
e64758c119
Add missing restart task
...
Should have been part of 149872e00c
4 years ago
Slavi Pantaleev
149872e00c
Add support for automatic (Postgres -> SQLite) migration to mx-puppet-discord
4 years ago
Slavi Pantaleev
9b4bf73587
Fix undefined variable reference
4 years ago
Slavi Pantaleev
6488e11d69
Relocate some tasks
4 years ago
Slavi Pantaleev
ca066217d1
Merge pull request #757 from 0x46616c6b/disable-nginx-logging-option
...
add option to disable nginx access log
4 years ago
louis
dcd4716636
add option to disable nginx access log
4 years ago
Slavi Pantaleev
d0ee86e0a5
Fix matrix_corporal_docker_image_name_prefix referencing matrix_synapse_ stuff
4 years ago
Agustin Ferrario
a06feba281
Merge branch 'master' of https://github.com/spantaleev/matrix-docker-ansible-deploy
4 years ago
Slavi Pantaleev
8748f3d443
Move python{,3}-docker installation to another task
...
This also adds support for installing python3-docker (not python-docker)
in systems that run Python 3.
4 years ago
Slavi Pantaleev
349fbb6434
Do not hardcode armhf for Raspbian
...
Raspbian doesn't seem to support arm64, so this is somewhat pointless
right now.
However, they might in the future. Doing this should also unify us
some more with `setup_debian.yml` with the ultimate goal of
eliminating `setup_raspbian.yml`.
4 years ago
Slavi Pantaleev
a09ed58892
Ensure gnupg installed on Raspbian
...
It's likely installed by default, but it doesn't hurt to specify it.
It also makes us more the same with `setup_debian.yml`.
4 years ago
Slavi Pantaleev
f545de53f7
Do not hardcode "ubuntu" for the Docker APT key URL
...
Well, `ubuntu` or `debian`, the same key is served right now,
so it doesn't really matter.
This seems cleaner and less prone to breakage though.
4 years ago
Slavi Pantaleev
55f252a6ed
Do not hardcode amd64 in setup_debian.yml
...
Until now, we've only supported non-amd64 on Raspbian.
Seems like there are now people running Debian/Ubuntu on ARM,
so we were forcing them into amd64 Docker packages.
I've gotten a report that this change fixes support
for Ubuntu Server 20.04 on RPi 4B.
4 years ago
Slavi Pantaleev
ed159cc742
Move matrix_architecture to matrix-base
...
We were only defining this in `group_vars/matrix_servers`, which is
inconsistent with how we normally do things.
4 years ago
Agustin Ferrario
2082242499
Add `matrix_nginx_proxy_ssl_config`
...
A new variable called `matrix_nginx_proxy_ssl_config` is created for
configuring how the nginx proxy configures SSL. Also a new configuration
validation option and other auxiliary variables are created.
A new variable configuration called `matrix_nginx_proxy_ssl_config` is
created. This allow to set the SSL configuration easily using the
default options proposed by Mozilla. The default configuration is set to
"Intermediate", removing the weak ciphers used in the old
configurations.
The new variable can also be set to "Custom" for a more granular control.
This allows to set another three variables called:
- `matrix_nginx_proxy_ssl_protocols`,
- `matrix_nginx_proxy_ssl_prefer_server_ciphers`
- `matrix_nginx_proxy_ssl_ciphers`
Also a new task is added to validate the SSL configuration variable.
4 years ago
Slavi Pantaleev
0f4649a45c
Merge branch 'master' into postgres-per-default
4 years ago
Slavi Pantaleev
a4b8baee49
Fix inability to send (Matrix -> Discord) messages via appservice-discord
...
Revert "Correct inabillity for appservice-discord to connect"
This reverts commit 673e19f830
.
While certain things do work even with such a local URL, sending
messages leads to an error like this:
> [DiscordBot] verbose: DiscordAPIError: Invalid Form Body
> avatar_url: Not a well formed URL.
Fixes https://github.com/Half-Shot/matrix-appservice-discord/issues/649
The sample configuration file for appservice-discord
c29cfc72f5/config/config.sample.yaml (L8)
explicitly says that we need a public URL.
4 years ago
Slavi Pantaleev
a197968b7f
Make matrix-registration use Postgres by default
...
Now that 0.7.2 is out, the Docker image supports Postgres
and we can do the (SQLite -> Postgres) migration.
I've also found out that we needed to fix up the `tokens.ex_date` column
data type a bit to prevent matrix-registration from raising exceptions
when comparing `datetime.now()` with `ex_date` coming from the database.
Example:
> File "/usr/local/lib/python3.8/site-packages/matrix_registration/tokens.py", line 58, in valid
> expired = self.ex_date < datetime.now()
> TypeError: can't compare offset-naive and offset-aware datetimes
4 years ago
Slavi Pantaleev
1bd5c240e5
Add support for executing additional DB migration statements
...
In cases where pgloader is not enough and we need to do some additional
migration work after it, we can now use
`additional_psql_statements_list` and
`additional_psql_statements_db_name`.
This is to be used when migrating `matrix-registration`'s data at the
very least.
4 years ago
Slavi Pantaleev
3289298ac7
Merge branch 'master' into postgres-per-default
4 years ago
Slavi Pantaleev
69f71f48a6
Upgrade matrix-registration (v0.7.1 -> 0.7.2) and use official image
...
This switches us to a container image maintained by the
matrix-registration developer.
0.7.2 also supports a `base_url` configuration option we can use to
make it easier to reverse-proxy at a different base URL.
We still keep some workarounds, because of this issue:
https://github.com/ZerataX/matrix-registration/issues/47
4 years ago
Slavi Pantaleev
e2ba46bf01
Fix Jinja2 syntax error (else if -> elif)
4 years ago
Slavi Pantaleev
dd797ba6a7
Fix Postgres database importing/upgrading conflicts
...
We were running into conflicts, because having initialized
the roles (users) and databases, trying to import leads to
errors (role XXX already exists, etc.).
We were previously ignoring the Synapse database (`homeserver`)
when upgrading/importing, because that one gets created by default
whenever the container starts.
For our additional databases, it's a similar situation now.
It's not created by default as soon as Postgres starts with an empty
database, but rather we create it as part of running the playbook.
So we either need to skip those role/database creation statements
while upgrading/importing, or to avoid creating the additional database
and rely on the import for that. I've gone for the former, because
it's already similar to what we were doing and it's simpler
(it lets `setup_postgres.yml` be the same in all scenarios).
4 years ago
Slavi Pantaleev
2a502db239
Add (SQLite + Postgres) support and automatic migration to matrix-dimension
4 years ago
Slavi Pantaleev
0790a7b2a8
Add support for matrix_dimension_systemd_{required,wanted}_services_list
...
We were referencing them from `group_vars/matrix_servers` since
recently, but there were no such variables and they weren't being put to
use.
4 years ago
Slavi Pantaleev
374f43735a
Separate matrix-dimension install/uninstall tasks
4 years ago
Slavi Pantaleev
8d74593878
Prepare matrix-registation for (SQLite + Postgres) support
...
Auto-migration and everything seems to work. It's just that
matrix-registration cannot load the Python modules required
for talking to a Postgres database.
Tracked here: https://github.com/ZerataX/matrix-registration/issues/44
Until this gets fixed, we'll continue default to 'sqlite'.
4 years ago