304 Commits (735c966ab69cc8aa141a341426ad401631417dac)

Author	SHA1	Message	Date
Slavi Pantaleev	735c966ab6	Disable systemd services when stopping to uninstall them ... Until now, we were leaving services "enabled" (symlinks in /etc/systemd/system/multi-user.target.wants/). We clean these up now. Broken symlinks may still exist in older installations that enabled/disabled services. We're not taking care to fix these up. It's just a cosmetic defect anyway.	3 years ago
b	6eaa8ac65a	add server_name to matrix-synapsel.conf only if matrix_nginx_proxy_enabled	3 years ago
b	dcda17595a	change port 8090 to matrix_ma1sd_default_port	3 years ago
Slavi Pantaleev	06bcdcf9d2	Merge pull request #1311 from HarHarLinks/master ... add auto proxy synapse worker metrics	3 years ago
Kim Brose	5f6bbafa17	fix space before tab in indent	3 years ago
HarHarLinks	7b33fc8e19	fixup! auto-generate prometheus.yml for workers metrics	3 years ago
HarHarLinks	ce41674e61	auto-generate prometheus.yml for workers metrics	3 years ago
HarHarLinks	4209c4208c	add own variable for worker metrics ... https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1311#issuecomment-945718866	3 years ago
Slavi Pantaleev	2bf052369d	Upgrade certbot (v1.19.0 -> v1.20.0)	3 years ago
Kim Brose	1ba7760ea4	add how to generate htpasswd ... for matrix_nginx_proxy_proxy_synapse_metrics_basic_auth_key resolves #1308	3 years ago
HarHarLinks	d9fa2f7ed4	add auto proxy synapse worker metrics ... when matrix_nginx_proxy_proxy_synapse_metrics is enabled	3 years ago
Slavi Pantaleev	31396f0615	Merge pull request #1295 from nogweii/feat-support-upstream-https-forwarded ... Support trusting the upstream server when it says the protocol is HTTPS	3 years ago
Aaron Raimist	a676b5358c	Fix hydrogen OCSP typo ... From 6f80292745	3 years ago
Colin Shea	2578ca4cee	rename matrix_nginx_proxy_x_forwarded_header_value -> matrix_nginx_proxy_x_forwarded_proto_value	3 years ago
Colin Shea	d0cd67044e	replace $scheme with X-Forwarded-Proto when enabled	3 years ago
sakkiii	3055b3996e	Updates Certbot -> v1.19.0, nginx ->1.21.3-alpine	3 years ago
sakkiii	ae6caf158a	Added variable matrix_nginx_proxy_request_timeout (#1265) ... * add timeout param for nginx proxy default value matrix_nginx_proxy_request_timeout is 60s * default matrix_nginx_proxy_request_timeout - 60s * few more variables for request timeout * Update nginx.conf.j2 * Update nginx.conf.j2	3 years ago
Slavi Pantaleev	a911207854	Revert "nginx update v1.21.2" ... This reverts commit 732051b8fc. There's no such container image published yet.	3 years ago
sakkiii	732051b8fc	nginx update v1.21.2 ... http://nginx.org/en/CHANGES	3 years ago
sakkiii	f5a7e6d78b	Certbot update v1.18.0	3 years ago
Michael Collins	4d57a41b3f	remove matrix_awx_enabled from these	3 years ago
Michael Collins	2e30802b87	use group variables instead	3 years ago
Michael Collins	8238d65e5f	simplify template conditional	3 years ago
Michael Collins	bfb61e776e	GMH v0.5.7... maybe!	3 years ago
Slavi Pantaleev	4105ba854b	Merge pull request #1147 from datenkollektiv-net/allow-custom-federation-fqn ... Make federation domain customizable	3 years ago
JokerGermany	9345d840be	root path for the base domain is wrong (#1189) ... * root path for the base domain * Fix path when running in a container Co-authored-by: Slavi Pantaleev <slavi@devture.com>	3 years ago
sakkiii	7a51268dfc	Upgrade certbot & nginx ... Upgrade certbot (v1.16.0 -> v1.17.0) nginx (1.21.0 -> 1.21.1)	3 years ago
Slavi Pantaleev	6294e58304	Fix Content-Security-Policy for Element ... Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1154 According to https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy, having both a header and the `<meta>`-tag provided by Element itself is not a problem. The 2 CSP policies get combined.	3 years ago
oxmie	5df4d68829	Make federation domain customizable	3 years ago
sakkiii	0217644b48	Content-Security-Policy For Element Web ... https://github.com/vector-im/element-web#configuration-best-practices	3 years ago
Slavi Pantaleev	963f38ee7b	Upgrade certbot (v1.14.0 -> v1.16.0)	4 years ago
pushytoxin	bee14550ab	Fix local/bin scripts autocompletion by adding rx perms to everyone ... It's mildly annoying when trying to execute these scripts while logged in as a regular user, as the missing execute permissions will hinder autocompletion even when trying to use with sudo. These shell scripts don't contain secrets, but may fail when ran by a regular user. The failure is due to the lack of access to the /matrix directory, and does not result in any damage.	4 years ago
Slavi Pantaleev	4880dcceb0	Fix OCSP-stapling-related errors due to missing resolver ... Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1057	4 years ago
rakshazi	4ddd8bbb84	Updated nginx-proxy (1.20.0 -> 1.21.0)	4 years ago
Slavi Pantaleev	1ed0857019	Fix syntax error ... Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1024	4 years ago
sakkiii	4a4a7f136e	changes added to hydrogen client	4 years ago
sakkiii	25e67b51d1	Merge branch 'spantaleev:master' into master	4 years ago
sakkiii	3436f9c10a	rename to matrix_nginx_proxy_hsts_preload_enabled	4 years ago
sakkiii	7cc5328ede	Comments & Ref	4 years ago
sakkiii	df2d91970d	matrix_nginx_proxy_xss_protection	4 years ago
Slavi Pantaleev	6f80292745	Add OCSP stapling support and other SSL optimizations to Hydrogen vhost ... Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1061 and https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1057	4 years ago
Slavi Pantaleev	d0de21ab34	Delete Hydrogen nginx configuration file when disabled	4 years ago
Aaron Raimist	04548f8df2	Merge branch 'master' into hydrogen	4 years ago
Aaron Raimist	9437f78c9e	Build using custom config.json, add CSP, update to 0.1.53	4 years ago
sakkiii	e9b878b9e9	Optimize SSL session	4 years ago
Slavi Pantaleev	e6afa05f7b	Enable OCSP stapling for the federation port ... Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1057 Not sure if this is beneficial though.	4 years ago
Slavi Pantaleev	57a6a98a50	Fix incorrect SSL certificate path ... Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1057	4 years ago
Slavi Pantaleev	b9c4e8ce16	Merge pull request #1057 from sakkiii/ssl_staple ... Enable OCSP Stapling	4 years ago
sakkiii	d31b55b2a7	SSL-enabled block only	4 years ago
Slavi Pantaleev	e4dd933cf0	Make missing /_synapse/admin correctly return 404 responses ... Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1058 We may try to capture such calls and return a friendlier response (HTML or JSON) saying "The Synapse Admin API is not enabled", but that may not be desirable. For now, we stick to what "upstream" recommends: "simply don't proxy these APIs", which should lead to the same kind of 404 that we have now. See here: 6660912226/docs/reverse_proxy.md (synapse-administration-endpoints)	4 years ago