2152 Commits (87a2240dc268ff8fbd755dba41bdfb95a029694b)

Author	SHA1	Message	Date
sakkiii	d338090f00	postgres minor updates	3 years ago
Slavi Pantaleev	3da4b684a5	Upgrade Synapse (1.36.0 -> 1.37.0)	3 years ago
Thom Wiggers	eb5619fd4b	Update IRC bridge	3 years ago
Michael Sasser	7578a355c4	heisenbridge fix service name	3 years ago
sakkiii	8a369f61f3	Merge branch 'spantaleev:master' into jitsi-fix	3 years ago
hanthor	ddbb4b2acc	Update main.yml ... update to v0.2.0	3 years ago
Slavi Pantaleev	2d740dbebd	Mount /data in matrix-redis container ... Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1140	3 years ago
sakkiii	2b881e245b	Update prometheus v2.27.1 -> v2.28.0	3 years ago
sakkiii	0cc17ab2ca	matrix_jitsi_jicofo_component_secret validation	3 years ago
sakkiii	f2f1b20e44	jicofo client proxy connection	3 years ago
sakkiii	b132941e71	Merge branch 'spantaleev:master' into jitsi-fix	3 years ago
Slavi Pantaleev	18533b5000	Merge pull request #1135 from sakkiii/patch-1 ... Coturn update 4.5.2 -> 4.5.2-r2	3 years ago
Slavi Pantaleev	d019e9078a	Remove unused variables from mx-puppet-* bridges ... Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1131	3 years ago
sakkiii	6ede9c8cd6	network-alias added to fix domains	3 years ago
sakkiii	d9e943aaaa	minor fix	3 years ago
sakkiii	0c8a3c401f	jibri service	3 years ago
sakkiii	04805f35a7	Coturn update 4.5.2 -> 4.5.2-r2	3 years ago
Slavi Pantaleev	b19fa3acb2	Upgrade Element (1.7.30 -> 1.7.31)	3 years ago
sakkiii	1250208907	whitespaces	3 years ago
sakkiii	c0cd2a3c93	JICOFO_RESERVATION_ENABLED contains whitespaces.	3 years ago
sakkiii	f8be36327c	jibri service	3 years ago
sakkiii	3e011bafd5	jibri env	3 years ago
sakkiii	8af2d818b1	domain_fix	3 years ago
sakkiii	2ca92b76b6	stable-5963	3 years ago
Slavi Pantaleev	5a1dabe14f	Bump exim-relay Docker image tag ... The new one is based on Alpine 3.14, instead of Alpine 3.13.	3 years ago
Slavi Pantaleev	282844209a	Merge pull request #1105 from blaztinn/centos-stream-8 ... Add support for CentOS (Stream) 8	3 years ago
Marcel Ackermann	a790096adf	matrix_mx_puppet_slack_client_id deprecated	3 years ago
Marcel Ackermann	ed078998b5	deprecated	3 years ago
Slavi Pantaleev	efa7486b88	Merge pull request #1127 from sakkiii/patch-3 ... Content-Security-Policy For Element Web	3 years ago
sakkiii	b826171139	Update grafana 8.0.2 -> 8.0.3	3 years ago
sakkiii	0217644b48	Content-Security-Policy For Element Web ... https://github.com/vector-im/element-web#configuration-best-practices	3 years ago
Slavi Pantaleev	3dd32d2512	Update worker endpoints ... Should have been part of 9daeb39710	3 years ago
Slavi Pantaleev	9daeb39710	Upgrade Synapse (1.35.1 -> 1.36.0)	3 years ago
Michael-GMH	4fb1134ad1	GoMatrixHosting v0.5.0	4 years ago
Slavi Pantaleev	a7fcb7c04d	Merge pull request #1122 from sakkiii/patch-2 ... update hydrogen v0.1.56 -> v0.1.57	4 years ago
sakkiii	4cd5835e11	update hydrogen v0.1.56 -> v0.1.57 ... https://github.com/vector-im/hydrogen-web/releases/tag/v0.1.57	4 years ago
sakkiii	08d1a5c2e7	Update grafana 8.0.0 -> 8.0.2	4 years ago
Blaž Tomažič	72bc9b5cfc	Add support for CentOS (Stream) 8	4 years ago
Slavi Pantaleev	1cf4d5ea7f	Upgrade Redis (6.0.10 -> 6.2.4)	4 years ago
Slavi Pantaleev	963f38ee7b	Upgrade certbot (v1.14.0 -> v1.16.0)	4 years ago
SkepticalWaves	2e8a2bdf7d	Add empty default for jitsi-prosody modules	4 years ago
SkepticalWaves	2886dc3939	Add module configuration to jitsi-prosody env file	4 years ago
Slavi Pantaleev	6c9c78ddae	Merge pull request #1112 from sakkiii/patch-2 ... coturn update	4 years ago
sakkiii	be1d1d0b7c	matrix_grafana_content_security_policy_customized default false	4 years ago
sakkiii	2d9ba82337	Update element 7.5.7 -> 8.0.0	4 years ago
sakkiii	1cc1202df2	update coturn	4 years ago
rakshazi	77fd1bff22	Update element 1.7.29 -> 1.7.30	4 years ago
Slavi Pantaleev	fa76c1ee5b	Do not run self-build Ansible version-check, if component not enabled ... Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1108	4 years ago
Slavi Pantaleev	bec9eaeb50	Merge pull request #1108 from tommes0815/fix-hydrogen-for-ansible2.7 ... fix error when running with Ansible 2.7 in the hydrogen setup	4 years ago
Thom Wiggers	3c05cc04bc	Update IRC appservice	4 years ago
Thomas Kühne	7f4e71b22a	fix error when running with Ansible 2.7 in the hydrogen setup ... Without this the hydrogen task would fail for Ansible 2.7 even when hydrogen is not enabled.	4 years ago
Michael-GMH	122a92fa1c	GoMatrixHosting v0.4.9 update	4 years ago
Slavi Pantaleev	b1f1c28ef0	Upgrade Synapse (1.34.0 -> 1.35.0)	4 years ago
Michael-GMH	ad7bbd6442	merge upstream	4 years ago
Michael-GMH	6f40d78353	fix random edits to upstream	4 years ago
Michael-GMH	ea6e344d05	merge upstream	4 years ago
Michael-GMH	85777e8f96	merge with upstream	4 years ago
Slavi Pantaleev	1ed0857019	Fix syntax error ... Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1024	4 years ago
sakkiii	4a4a7f136e	changes added to hydrogen client	4 years ago
sakkiii	25e67b51d1	Merge branch 'spantaleev:master' into master	4 years ago
sakkiii	3436f9c10a	rename to matrix_nginx_proxy_hsts_preload_enabled	4 years ago
Slavi Pantaleev	0648b1b618	Upgrade Element (1.7.28 -> 1.7.29)	4 years ago
sakkiii	7cc5328ede	Comments & Ref	4 years ago
sakkiii	df2d91970d	matrix_nginx_proxy_xss_protection	4 years ago
Slavi Pantaleev	d4c7a90b5c	Merge pull request #1076 from Eagle-251/Jitsi-Prosody-OwnNginxCompatibility ... Allow Jitsi XMPP websocket support for users using own webserver.	4 years ago
ewang	409cd2b9a3	Source port binding from group vars in line other components	4 years ago
Eagle-251	ef6a7e051c	Fix missing port binding.	4 years ago
ewang	1bb6ed97ae	Make port bindings default for those disabling nginx proxy ... I changed the conditional statement in prosody systemd template to bind the localhost port by default if people have set ```matrix_nginx_proxy_enabled == false ```. Hopefully that should make it the default behaviour now.	4 years ago
Aaron Raimist	3c0452ff5a	Remove unnecessary bind for config.json, use proper nginx.conf	4 years ago
ewang	4a772e50f4	Allow Jitsi XMPP webscoket support for users using own webserver. ... Added: - Conditional localhost Port bindings for Jitsi Prosody systemd template - Added variable to main.yml to allow overriding from vars.yml	4 years ago
Slavi Pantaleev	6f80292745	Add OCSP stapling support and other SSL optimizations to Hydrogen vhost ... Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1061 and https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1057	4 years ago
Slavi Pantaleev	d0de21ab34	Delete Hydrogen nginx configuration file when disabled	4 years ago
Aaron Raimist	ac4ede20af	Add docs	4 years ago
Aaron Raimist	1633f61018	Only install config.json when self building	4 years ago
Aaron Raimist	04548f8df2	Merge branch 'master' into hydrogen	4 years ago
Aaron Raimist	9437f78c9e	Build using custom config.json, add CSP, update to 0.1.53	4 years ago
Slavi Pantaleev	47b4608b96	Fail in a friendlier way when trying to self-build on Ansible <= 2.8 ... Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1070 Related discussion here: 1ab507349c (commitcomment-51108407)	4 years ago
Slavi Pantaleev	1ab507349c	Fix self-building for various components on Ansible < 2.8 ... Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1070	4 years ago
Slavi Pantaleev	66615c43a3	Merge pull request #1065 from sakkiii/patch-1 ... Update grafana (7.5.6->7.5.7)	4 years ago
Tobias K	3dcbed6353	roles/matrix-grafana: Set root_url in granafa.ini	4 years ago
sakkiii	8529ca4c17	Update grafana (7.5.6->7.5.7)	4 years ago
Slavi Pantaleev	073d920a62	Merge pull request #1061 from sakkiii/ssl_enhancement ... Optimize SSL session	4 years ago
Toni Spets	544915ff76	Add Heisenbridge	4 years ago
Slavi Pantaleev	21eb39f986	Mention matrix_common_after_systemd_service_start_wait_for_timeout_seconds in failure message ... Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1062	4 years ago
Slavi Pantaleev	ee46fabdca	Make waiting time for --tags=start configurable ... Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1062	4 years ago
sakkiii	e9b878b9e9	Optimize SSL session	4 years ago
Slavi Pantaleev	e6afa05f7b	Enable OCSP stapling for the federation port ... Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1057 Not sure if this is beneficial though.	4 years ago
Slavi Pantaleev	57a6a98a50	Fix incorrect SSL certificate path ... Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1057	4 years ago
Slavi Pantaleev	b9c4e8ce16	Merge pull request #1057 from sakkiii/ssl_staple ... Enable OCSP Stapling	4 years ago
sakkiii	d31b55b2a7	SSL-enabled block only	4 years ago
rakshazi	400371f6dd	Updated Element version (1.7.27 -> 1.7.28)	4 years ago
Slavi Pantaleev	d156c8caa2	Upgrade Synapse (1.33.2 -> 1.34.0)	4 years ago
Slavi Pantaleev	e4dd933cf0	Make missing /_synapse/admin correctly return 404 responses ... Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1058 We may try to capture such calls and return a friendlier response (HTML or JSON) saying "The Synapse Admin API is not enabled", but that may not be desirable. For now, we stick to what "upstream" recommends: "simply don't proxy these APIs", which should lead to the same kind of 404 that we have now. See here: 6660912226/docs/reverse_proxy.md (synapse-administration-endpoints)	4 years ago
sakkiii	2c3da6599b	Added warning	4 years ago
sakkiii	0dd4459799	matrix_nginx_proxy_ocsp_stapling_enabled variable added	4 years ago
sakkiii	c05021640d	Enable OCSP Stapling	4 years ago
Aaron Raimist	ca361af616	Add Hydrogen	4 years ago
sakkiii	b191e461a5	Merge branch 'spantaleev:master' into master	4 years ago
sakkiii	4bd7d8b5e4	Update grafana (7.5.5->7.5.6)	4 years ago
sakkiii	d5cd3d443d	Update prometheus (2.26.0->2.27.0)	4 years ago
sakkiii	322b750aad	Merge branch 'spantaleev:master' into master	4 years ago
Slavi Pantaleev	f481b1a84b	Upgrade matrix-mailer (4.94.2-r0 -> 4.94.2-r0-1) ... Related to https://github.com/devture/exim-relay/pull/9	4 years ago
Slavi Pantaleev	8e6f1876f5	Switch to :latest version of synapse-admin ... Related to https://github.com/Awesome-Technologies/synapse-admin/issues/132 We should switch back when >0.8.0 gets released.	4 years ago
sakkiii	8fc55b30c5	Upgrade Synapse (1.33.1 -> 1.33.2) ... This release fixes a denial of service attack (CVE-2021-29471) against Synapse's push rules implementation. Server admins are encouraged to upgrade. Ref: https://github.com/matrix-org/synapse/releases/tag/v1.33.2	4 years ago
Slavi Pantaleev	2d4b039c55	Merge pull request #1046 from GoMatrixHosting/master ... GoMatrixHosting v0.4.6	4 years ago
Michael-GMH	2b4bada72a	fix conditional	4 years ago
Michael-GMH	0adcef65e6	fix conditional	4 years ago
Michael-GMH	f70102e40c	no dashes in usernames	4 years ago
Slavi Pantaleev	f4657b2cdb	Upgrade Element (1.7.26 -> 1.7.27)	4 years ago
Michael-GMH	4e6f6e179b	GMH 0.4.6 update	4 years ago
sakkiii	29cf6a0087	Merge branch 'spantaleev:master' into master	4 years ago
Slavi Pantaleev	3dcc006932	Fix self-building for Coturn ... 689dcea773 wasn't enough. The `upstream/..` tags are just upstream sources, without the alpine-based Dockerfile. We need to use the `docker/..` tags for that (or `master`) Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1032 Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1023 Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1009	4 years ago
Slavi Pantaleev	33f0074862	Upgrade matrix-mailer (4.94-r0 -> 4.94.2-r0) ... Related to https://github.com/devture/exim-relay/issues/6	4 years ago
Slavi Pantaleev	c19508087a	Merge pull request #1036 from sakkiii/grafana-csp ... Grafana csp template backward compatible with older browsers	4 years ago
Slavi Pantaleev	a198b87455	Upgrade synapse-admin (0.7.2 -> 0.8.0) ... Related to https://github.com/Awesome-Technologies/synapse-admin/issues/132	4 years ago
Slavi Pantaleev	867ebb52ab	Merge pull request #1037 from pushytoxin/jitsi-5765-1 ... Update Jitsi (5142 -> 5765-1)	4 years ago
sakkiii	bb0810302d	Merge branch 'spantaleev:master' into master	4 years ago
Slavi Pantaleev	61220ea487	Upgrade Synapse (1.33.0 -> 1.33.1)	4 years ago
sakkiii	9174448e5e	get rid of this {% else %}	4 years ago
sakkiii	0d5fe2d9f7	Update roles/matrix-grafana/templates/grafana.ini.j2 ... Co-authored-by: Aaron Raimist <aaron@raim.ist>	4 years ago
Béla Becker	b10655ebb1	Jitsi XMPP Websocket support ... Jitsi-meet enabled websockets by default, claiming better reliability. Matrix-nginx-proxy configuration has been set up according to the Prosody documentation: https://prosody.im/doc/websocket	4 years ago
Béla Becker	116bcaa13b	Update jitsi to stable-5765-1 ... Changelog: https://github.com/jitsi/docker-jitsi-meet/blob/stable-5765-1/CHANGELOG.md	4 years ago
sakkiii	37de7fc96a	Updated Reference	4 years ago
sakkiii	303de935d5	grafana CSP backward compatible with older browsers	4 years ago
Slavi Pantaleev	d4d1e2e922	Upgrade Synapse (1.32.2 -> 1.33.0)	4 years ago
Slavi Pantaleev	b09a805939	Merge pull request #1031 from thedanbob/nginx-1.20.0 ... Update nginx (1.19.10 -> 1.20.0)	4 years ago
Slavi Pantaleev	6fdc71c40b	Merge pull request #1030 from thedanbob/grafana-7.5.5 ... Update grafana (7.5.4 -> 7.5.5)	4 years ago
Dan Arnfield	cfaa3e598a	Update nginx (1.19.10 -> 1.20.0)	4 years ago
Dan Arnfield	bec5933db4	Update grafana (7.5.4 -> 7.5.5)	4 years ago
Michael-GMH	067b61e779	GoMatrixHosting v0.4.5 update	4 years ago
Slavi Pantaleev	2409c33ea2	Upgrade Element (1.7.25 -> 1.7.26)	4 years ago
benkuly	49cb2635a2	updated matrix-sms-bridge	4 years ago
Michael-GMH	a14bf6c2ed	GoMatrixHosting v0.4.4 update	4 years ago
Slavi Pantaleev	689dcea773	Fix self-building for Coturn ... Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1023 Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1009	4 years ago
sakkiii	40fe6bd5c1	variable matrix_nginx_proxy_hsts_preload_enable added	4 years ago
Slavi Pantaleev	389dc26615	Fix Synapse generic worker balancing ... Potentially fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1022	4 years ago
sakkiii	5b4fdf9b87	Merge branch 'master' of https://github.com/sakkiii/matrix-docker-ansible-deploy	4 years ago
sakkiii	0ccf0fbf1c	HSTS preload + X-XSS enables ... **HSTS Preloading:** In its strongest and recommended form, the [HSTS policy](https://www.chromium.org/hsts) includes all subdomains, and indicates a willingness to be “preloaded” into browsers: `Strict-Transport-Security: max-age=31536000; includeSubDomains; preload` **X-Xss-Protection:** `1; mode=block` which tells the browser to block the response if it detects an attack rather than sanitising the script.	4 years ago
sakkiii	3564635f0f	Merge branch 'master' into master	4 years ago
sakkiii	29bba5161b	Element More security headers ... More Production ready nginx headers for Matrix client element.	4 years ago
Slavi Pantaleev	f6b371164c	Remove useless variable	4 years ago
Slavi Pantaleev	62c0587b6a	Use Alpine-based Coturn	4 years ago
Slavi Pantaleev	72a7cb4145	Merge pull request #1018 from GoMatrixHosting/master ... GoMatrixHosting v0.4.3	4 years ago
Slavi Pantaleev	e3fa3e12bc	Upgrade Synapse (1.31 -> 1.32.2)	4 years ago
Michael-GMH	50d7209c5b	GMH v04.3	4 years ago
Slavi Pantaleev	378fabf177	Revert "Upgrade Synapse (1.31 -> 1.32.1)" ... This reverts commit 1fb54a37cb. Seems like it's been pulled or something. It used to exist, but not anymore. Not sure what's going on. Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1017 Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1010	4 years ago
Slavi Pantaleev	1fb54a37cb	Upgrade Synapse (1.31 -> 1.32.1) ... Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1010	4 years ago
Slavi Pantaleev	d691cc0920	Move variable definition a bit	4 years ago
Slavi Pantaleev	e00ef04b57	Add opt-out-of-FLoC headers by default	4 years ago
Slavi Pantaleev	42783972fd	Merge pull request #1011 from aaronraimist/synapse-admin ... Upgrade synapse-admin (0.7.0 -> 0.7.2)	4 years ago
Slavi Pantaleev	ca786cc343	Revert "Upgrade Synapse (1.31 -> 1.32)" ... This reverts commit f825c7c263. Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1010	4 years ago
Aaron Raimist	bb64b80697	Upgrade synapse-admin (0.7.0 -> 0.7.2)	4 years ago
Slavi Pantaleev	f825c7c263	Upgrade Synapse (1.31 -> 1.32)	4 years ago
Slavi Pantaleev	7eda6a3c12	Merge pull request #1009 from thedanbob/coturn-official ... Switch to official coturn image	4 years ago
Slavi Pantaleev	adcecaffaf	Fix connectivity between prometheus and prometheus-node-exporter ... Expected to have regressed after https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1008 This patch comes with its own downsides (as described in the comments for matrix_prometheus_node_exporter_container_http_host_bind_port), but at least there's: - no security issue - metrics remain readable from matrix-prometheus (even if the network metrics are inaccurate) A better patch is certainly welcome.	4 years ago
Dan Arnfield	b2ca1f2829	Add capability required by new image	4 years ago
Slavi Pantaleev	398b9f5d66	Merge pull request #1008 from sakkiii/master ... security** node-exporter data & port publicly exposed	4 years ago
Dan Arnfield	29177d4922	Switch to official coturn docker image	4 years ago
sak	88a30fb5ed	security** node-exporter data & port publicly exposed	4 years ago
sak	0f9a455719	Revert "security** node-exporter data & port publicly exposed" ... This reverts commit d0cd709c08.	4 years ago
sak	d0cd709c08	security** node-exporter data & port publicly exposed	4 years ago
Slavi Pantaleev	4a1739f604	Merge pull request #1007 from teutat3s/fix/nginx-dont-send-version ... Don't expose nginx version with each response	4 years ago
teutat3s	2bf7c26cfa	Don't expose nginx version with each response	4 years ago
Slavi Pantaleev	c565e72f0d	Merge pull request #1003 from sakkiii/patch-2 ... updated matrix_grafana_docker_image to v7.5.4	4 years ago
Slavi Pantaleev	51b46697c5	Merge pull request #1005 from sakkiii/master ... Improve security for grafana	4 years ago
Dan Arnfield	f04614a993	Fix prometheus network for ansible < 2.8	4 years ago
Slavi Pantaleev	badd81e0ec	Revert "Attempt to fix docker_network result discrepancy between Ansible versions" ... This reverts commit 68ca81c8c2.	4 years ago
sakkiii	1958d0792d	Update matrix-client-element.conf.j2	4 years ago
sakkiii	b6d45c5fd8	Merge branch 'master' of https://github.com/sakkiii/matrix-docker-ansible-deploy	4 years ago
sakkiii	05042f5ff1	Improve security grafana ... - duplicate X-Content-Type-Options - X-Frame-Options header - Referrer-Policy [Might consider adding variable] - Secure flag with cookies - matrix_grafana_content_security_policy variable for [Content Security Policy](https://grafana.com/docs/grafana/latest/administration/configuration/#content_security_policy)	4 years ago
sakkiii	27377e099d	updated matrix_grafana_docker_image to v7.5.4 ... Latest stable grafana version is [7.5.4 (2021-04-14)](https://github.com/grafana/grafana/releases/tag/v7.5.4)	4 years ago
Slavi Pantaleev	68ca81c8c2	Attempt to fix docker_network result discrepancy between Ansible versions ... Supposedly fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/907	4 years ago
Slavi Pantaleev	9c1f41eadf	Merge pull request #1002 from thedanbob/node-exporter-1.1.2 ... Update prometheus node exporter (1.1.0->1.1.2)	4 years ago
Dan Arnfield	8a550ce67c	Update prometheus (2.24.1->2.26.0)	4 years ago
Dan Arnfield	83cc5c9e6a	Update prometheus node exporter (1.1.0 -> 1.1.2)	4 years ago
sakkiii	5dc642ace1	Nginx element web: XSS protection & nosniff header ... X-XSS-Protection: 1; mode=block; header, for basic XSS protection in legacy browsers. X-Content-Type-Options: nosniff header, to disable MIME sniffing	4 years ago
Slavi Pantaleev	fcb9e9618a	Make Coturn TLSv1/v1.1 configurable ... Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/999	4 years ago
sakkiii	540416e32d	Disable support for TLS 1.0 and TLS 1.1 ... These old versions of TLS rely on MD5 and SHA-1, both now broken, and contain other flaws. TLS 1.0 is no longer PCI-DSS compliant and the TLS working group has adopted a document to deprecate TLS 1.0 and TLS 1.1.	4 years ago
Michael-GMH	89cb5a3d7a	GMH v0.4.2 update	4 years ago
Michael	f41bfb69d2	update survey template formatting	4 years ago
Michael	814bdf5a88	update spelling	4 years ago
Michael	fbe22289bd	merge with upstream and testing branch	4 years ago
Slavi Pantaleev	995c483856	Merge pull request #962 from aaronraimist/mjolnir ... Add mjolnir	4 years ago
Slavi Pantaleev	f183add44d	Merge pull request #977 from aaronraimist/simple-antispam ... Upgrade synapse-simple-antispam (0.0.1 -> 0.0.3)	4 years ago
Aaron Raimist	81dddd2e25	Upgrade Element (1.7.24 -> 1.7.24.1)	4 years ago
Aaron Raimist	c43bd412dd	Upgrade synapse-simple-antispam (0.0.1 -> 0.0.3)	4 years ago
Aaron Raimist	1ecee625d5	Depend on more services, add a delay	4 years ago
Slavi Pantaleev	a88391edf5	Merge pull request #972 from JohannesKleine/nginx-config ... matrix-nginx-proxy: add custom nginx options to nginx.conf.j2	4 years ago
teutat3s	0b5e903693	Updates to mautrix-signal config ... See these last commits: tulir/mautrix-signal@4fc34330c1f6947aece67863b0d04da34c776f80 tulir/mautrix-signal@64bc5c36a509ba435a0b01cf44afb1b5d2642efd tulir/mautrix-signal@ddda1666d41d28750cc59d070e4388b24add6ad9	4 years ago
Christoph Johannes Kleine	fcd66b2889	rename variables	4 years ago
Christoph Johannes Kleine	8ba1105010	rename variable	4 years ago
Christoph Johannes Kleine	3a772f2f65	matrix-nginx-proxy: add custom nginx options to nginx.conf.j2	4 years ago
Slavi Pantaleev	93960b70be	Do not fail if `_matrix-identity` DNS SRV record missing ... Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/963 This also simplifies Prerequisites, which is great. It'd be nice if we were doing these checks in some optional manner and reporting them as helpful messages (using `matrix_playbook_runtime_results`), but that's more complicated. I'd rather drop these checks completely.	4 years ago
Slavi Pantaleev	5e1cf7f8b9	Upgrade Element (1.7.23 -> 1.7.24)	4 years ago
Slavi Pantaleev	9409588513	Fix variable name typo (take 2) ... Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/970	4 years ago
Slavi Pantaleev	179b416ed5	Fix variable name typo ... Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/970	4 years ago
Slavi Pantaleev	77d598b315	Fix Go-NEB variable definitions using the wrong type ... Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/969	4 years ago
Slavi Pantaleev	49868db3de	Upgrade Synapse for ARM64 (1.30.0 -> 1.30.1)	4 years ago
Slavi Pantaleev	94487dc6a7	Upgrade Synapse for amd64 (1.30.0 -> 1.30.1)	4 years ago
transcaffeine	dbae18fd6a	feat: push ephemeral events to appservices ... This adds https://github.com/matrix-org/matrix-doc/pull/2409 to the appservice registrations, enabling synapse to push EDUs to appservices.	4 years ago
Dan Arnfield	97d8527e00	Update nginx (1.19.6 -> 1.19.8)	4 years ago
Slavi Pantaleev	5a4ea5f866	Make AWX enabling/disabling consistent with other playbook roles ... That is: - enabled in the role by default - disabled in the compilation (playbook), if considered an optional component	4 years ago
Aaron Raimist	bab8b950ca	Add mjolnir	4 years ago
Slavi Pantaleev	06c74728eb	Move matrix_nginx_proxy_proxy_synapse_federation_api_enabled definition to the role ... This variable was previously undefined in the role and was only getting defined via `group_vars/matrix_servers`. We now properly initialize it (and its good default value) in the role itself.	4 years ago
Slavi Pantaleev	d09609daa8	Fix Jinja2 syntax error ... Fixes a regression introduced in ffe649a240	4 years ago
Slavi Pantaleev	6a3433fbad	Update Synapse for ARM64 (1.29.0 -> 1.30.0) ... Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/958	4 years ago
Slavi Pantaleev	ffe649a240	Update homeserver.yaml to keep up with Synapse v1.30.0 ... Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/958	4 years ago
rakshazi	74106f2a80	Updated synapse 1.29.0 -> 1.30.0	4 years ago
Thom Wiggers	54fe59f05c	Update IRC appservice	4 years ago
Slavi Pantaleev	2737ebc290	Complain if people try to use matrix-sygnal on non-amd64	4 years ago
Slavi Pantaleev	b824522b33	Remove unnecessary with_items statement	4 years ago
Slavi Pantaleev	9a0222fa47	Add Sygnal support ... Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/683	4 years ago
Michael	af240aef37	remove sections from task list that arent needed	4 years ago
Michael	85127bacba	Merge remote-tracking branch 'upstream/master'	4 years ago
Michael	1e54b1d1a5	merge upstream	4 years ago
Slavi Pantaleev	f99dcd611f	Pass proper UID/GID to Synapse ... Fixes a regression caused by a5ee39266c. If the user id and group id were different than 991:991 (which used to be a hardcoded default for us long ago), there was a mismatch between what Synapse was trying to use (991:991) and what it was actually started with (in `--user=..`). It was then trying to change ownership, which was failing. This was mostly affecting newer installations which were not using the 991:991 defaults we had long ago (since a1c5a197a9).	4 years ago
Slavi Pantaleev	a5ee39266c	Go through start.py when launching Synapse ... This allows us to benefit from helpful things it does for us, like enabling jemalloc: https://github.com/matrix-org/synapse/pull/8553 We weren't going through `start.py` before, because it was causing some conflict with our `docker run --user=...` stuff, but it doesn't seem to be a problem anymore. Having done this, we won't need to do things like https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/941 anymore.	4 years ago
Aaron Raimist	32b3650c12	Set X-Forwarded-Proto on federation requests	4 years ago
Béla Becker	2d7e7680e5	matrix.{{ matrix_domain }} -> {{ matrix_server_fqn_matrix }}	4 years ago
Aaron Raimist	466827139a	Also check if matrix_ssl_lets_encrypt_support_email is blank	4 years ago
Slavi Pantaleev	97c0bf1a73	Merge pull request #942 from pushytoxin/etherpad1_8_12 ... Upgrade Etherpad (1.8.7 -> 1.8.12)	4 years ago
Béla Becker	60aa40845f	Upgrade Etherpad (1.8.7 -> 1.8.12)	4 years ago
Yannick Goossens	27416607d9	Another field with 'invalid input syntax for type smallint'	4 years ago
Michael	5a6bdb0c3d	merge upstream	4 years ago
Michael	571b70a1f4	fix for running outside of AWX	4 years ago
Michael	5a1f3b7d67	GMH v0.3.0	4 years ago
Michael	33ec5710d9	0.2.1 revision	4 years ago
Michael	4c882c513b	initial PR	4 years ago
Marcus Proest	2ca8211184	Merge remote-tracking branch 'upstream/master'	4 years ago
Marcus Proest	b99372a3c5	initial commit of mautrix-instagram role	4 years ago
Slavi Pantaleev	108aed53be	Fix invalid matrix-postgres.service when matrix_postgres_process_extra_arguments is empty ... This only seems to be affecting some people badly enough to cause matrix-postgres not to start. Certain systemd versions probably handle it better or something. Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/889 (hopefully)	4 years ago
Slavi Pantaleev	1dbdfeec07	Fix matrix-postgres stopping for consistency with other services ... This probably got lost somehow in all the work that happened in https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/456	4 years ago
Slavi Pantaleev	9f91eaa54b	Fix incorrect service name ... Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/887	4 years ago
Slavi Pantaleev	91c987ca7d	Merge pull request #872 from xangelix/add-mx-puppet-groupme-gh ... Add mx-puppet-groupme support	4 years ago
Slavi Pantaleev	d94d0e2ca5	Merge pull request #456 from eMPee584/synapse-workers ... Synapse workers	4 years ago
Slavi Pantaleev	9dc87bb948	Add Synapse worker presets for easier configuration ... Adding more presets in the future would be nice.	4 years ago
Slavi Pantaleev	eaea215282	Allow Synapse workers to be used with an external nginx webserver ... We're talking about a webserver running on the same machine, which imports the configuration files generated by the `matrix-nginx-proxy` in the `/matrix/nginx-proxy/conf.d` directory. Users who run an nginx webserver on some other machine will need to do something different.	4 years ago
Slavi Pantaleev	2f732e4234	Update Synapse worker endpoints	4 years ago
Slavi Pantaleev	217b4a8808	Release Synapse v1.27.0 to ARM32 via self-building ... Related to: https://matrix.org/blog/2021/02/18/synapse-1-27-0-released#dropping-armv7-docker-images	4 years ago
Béla Becker	65eab14a64	Make sure Etherpad has a database to write to	4 years ago
Béla Becker	005f4d57f9	Remove mention of sqlite3 support for Etherpad ... The official Etherpad Docker image has no support for sqlite3 databases.	4 years ago
Slavi Pantaleev	1789620901	Merge branch 'master' into synapse-workers	4 years ago
Slavi Pantaleev	d6c4d41c2b	Define instanceId property on workers ... This give us the possibility to run multiple instances of workers that that don't expose a port. Right now, we don't support that, but in the future we could run multiple `federation_sender` or `pusher` workers, without them fighting over naming (previously, they'd all be named something like `matrix-synapse-worker-pusher-0`, because they'd all define `port` as `0`).	4 years ago
rakshazi	996f732f98	Update synapse-admin (0.6.1 -> 0.7.0)	4 years ago
Cody Neiman	c4e1209452	Merge branch 'master' into add-mx-puppet-groupme-gh	4 years ago
Slavi Pantaleev	d33483b8ce	Document that Synapse pusher worker instances are shardable ... Related to: - https://github.com/matrix-org/synapse/pull/9407 - https://github.com/matrix-org/synapse/pull/7855	4 years ago
Slavi Pantaleev	daae74b074	Merge branch 'master' into synapse-workers	4 years ago
Slavi Pantaleev	521160c12f	Upgrade Synapse (v1.26.0 -> v1.27.0)	4 years ago
Slavi Pantaleev	865d71e35a	Upgrade Element (1.7.20 -> 1.7.21)	4 years ago
Marc Leuser	fd3d48bb6d	trust the reverse proxy by default	4 years ago
Marc Leuser	1434c371bd	safer port binding of etherpad docker container ... don't bind to any host port if nginx_proxy is used only bind to localhost if it's not used	4 years ago
Slavi Pantaleev	61e427d690	Do not let people enable more than 1 federation_sender worker	4 years ago
Slavi Pantaleev	85a05f38e8	Allow Synapse worker list to be generated dynamically ... This leads to much easier management and potential safety features (validation). In the future, we could try to avoid port conflicts as well, but it didn't seem worth the effort to do it now. Our port ranges seem large enough. This can also pave the way for a "presets" feature (similar to `matrix_nginx_proxy_ssl_presets`) which makes it even easier for people to configure worker counts.	4 years ago
Slavi Pantaleev	43059bb040	Fix metrics listeners for Synapse workers ... `::` leads to errors like: > socket.gaierror: [Errno -9] Address family for hostname not supported	4 years ago
Slavi Pantaleev	453a4ec2d8	Relocate tasks related to Synapse workers	4 years ago
Cody Neiman	e510481e84	Merge branch 'master' into add-mx-puppet-groupme-gh	4 years ago
Slavi Pantaleev	5cfeae806b	Merge branch 'master' into synapse-workers	4 years ago
Slavi Pantaleev	894679750e	Merge pull request #862 from s-thom/nginx-additional ... Add additional domains for Let's Encrypt certificates to be obtained	4 years ago
Slavi Pantaleev	a8e9f35708	Touch up documentation a bit	4 years ago
Slavi Pantaleev	7d39e5153a	Upgrade Postgres minor versions	4 years ago
Cody Neiman	dc5e7eed3f	Fix mx-puppet-groupme port typo	4 years ago
Cody Neiman	2b3c143487	Update mx-puppet-groupme docker image	4 years ago
Cody Neiman	5a70a56ff0	Initial implementation	4 years ago
Slavi Pantaleev	8434af10de	Do not fail on unrelated validation tasks when Grafana not enabled	4 years ago
Slavi Pantaleev	66d5b0e5b9	Do not fail on unrelated validation tasks when Prometheus not enabled ... These validation tasks should only run when Prometheus is enabled.	4 years ago
Slavi Pantaleev	2ac2b02cb4	Merge pull request #838 from Peetz0r/stats ... Prometheus and Grafana on stats.<domain>	4 years ago
Slavi Pantaleev	c8ab200cb1	Break dependency between matrix-prometheus and (matrix-prometheus-node-exporter, matrix-synapse)	4 years ago
Slavi Pantaleev	6842102e00	Split install/uninstall tasks in matrix-prometheus	4 years ago
Slavi Pantaleev	18e31526a8	Rename some variables	4 years ago
Slavi Pantaleev	85a260daaf	Make --tags=setup-prometheus not break, relying on matrix-base facts	4 years ago
Slavi Pantaleev	df3dd1c824	Use --read-only FS for metrics-related containers ... It seems like it doesn't cause any issues for any of these services.	4 years ago
Slavi Pantaleev	3ce9712388	Fix Grafana dashboard/datasource label	4 years ago
Slavi Pantaleev	f0cd294628	Fix matrix-prometheus-node-exporter failure to start ... The quotes around "host" for both `--pid` and `--net` were causing trouble for me: > docker: --pid: invalid PID mode. and: > docker: Error response from daemon: network "host" not found. I've also changed the `-v` call to `--mount` for consistency with the rest of the playbook.	4 years ago
efraimbart	b7e68cb779	Fix wrong docker image being pulled ... Changed `matrix_mautrix_signal_docker_image_force_pull` to `matrix_mautrix_signal_daemon_docker_image_force_pull` when force pulling the daemon	4 years ago
Peetz0r	fde222a041	Update Prometheus Node Exporter 1.0.1 => 1.1.0	4 years ago
Peetz0r	3a77261dc6	Update Grafana 7.3.7 => 7.4.0	4 years ago
Peetz0r	144a5e6198	Register docker network info and use it for prometheus-node-exporter ... Using the hardcoded IP did break while I was messing with IPv6 stuff on the other branch	4 years ago
Peetz0r	76d7e84be5	Make prometheus-node-exporter a bit more capable ... By running it in a more privileged container with access to the host network stack and such	4 years ago
Peetz0r	989100b1c1	Grafana nginx proxy config	4 years ago
Peetz0r	eb5aa93e8a	Grafana ... Also includes the dashboards for Synapse and for Node Exporter. Again has only been tested on debian amd64 so far, but the grafana docker image is available for arm64 and arm32. Nice.	4 years ago
Peetz0r	e525970b39	Prometheus Node Exporter ... Basic system stats, to show stuff the synapse metrics can't show such as resource usage by bridges, etc Seems to work fine as well. This too has only been tested on debian amd64 so far	4 years ago
Peetz0r	13ef9e85cf	Prometheus ... Initial attempt. Seems to work fine. Only tested on debian amd64 so far	4 years ago
Slavi Pantaleev	7e8e95a09a	Make S3-mounting path configurable ... This will make data migration easier.	4 years ago
Yan	385b6c623e	Fixes: a66a604e ("Selfbuild appservice-slack bridge")	4 years ago
Stuart Thomson	064b2e533c	Add variable for extra domains to get LE certs for ... I felt that adding another variable was probably going to be the easiest way to do this. I may end up adding another variable to enable this feature, for consistency with some of the other things.	4 years ago
Paul Tötterman	9ad67d7cdf	Upgrade Element (1.7.19 -> 1.7.20) ... https://github.com/vector-im/element-web/releases/tag/v1.7.20 https://hub.docker.com/layers/vectorim/element-web/v1.7.20/images/sha256-44cae3a532d86c16940deb70866b522ba6acc8c5d7adf3c661cfc8b06f1de681?context=explore	4 years ago
Aaron Raimist	5cb976c321	Upgrade Element (1.7.18 -> 1.7.19)	4 years ago
Julian Foad	d1f28d17bb	Allow psql args to be given to matrix-postgres-cli ... This passes any arguments given to 'matrix-postgres-cli' to the 'psql' command. Examples: $ # start an interactive shell connected to a given db $ sudo matrix-postgres-cli -d synapse $ # run a query, non-interactively $ sudo matrix-postgres-cli -d synapse -c 'SELECT group_id FROM groups;'	4 years ago
Slavi Pantaleev	c4a05b760a	Make mautrix bridges not overwrite their config ... If they do, our next playbook runs would simply revert it and report "changed" for that task. There's no benefit to letting the bridge spew a new config file. This does not apply to the mautrix whatsapp bridge, because that one is written in Go (not Python) and takes different flags. There's no equivalent flag there.	4 years ago
Slavi Pantaleev	889b299bc2	Merge pull request #804 from pushytoxin/matrix-etherpad ... Self-hosted Etherpad	4 years ago
Slavi Pantaleev	7804060eee	Use Etherpad 1.8.7, not :latest	4 years ago
Slavi Pantaleev	98f9619279	Merge pull request #843 from thomwiggers/update-irc ... Update IRC bridge to 0.23.0	4 years ago
o8F0LY	0a0c9a4efc	Add double quotes to avoid synatx errors	4 years ago
Thom Wiggers	8de739132a	Update IRC bridge to 0.23.0	4 years ago
Peetz0r	e0e459ac0c	Fixed missing quotes	4 years ago
Slavi Pantaleev	efbffa26bf	Fix typo	4 years ago
Peetz0r	473936065d	Use Debian Buster Docker repo on Debian Bullseye ... Future maintainer: check on https://docs.docker.com/engine/install/debian/ if Docker for Debian 11 is released, then undo this commit	4 years ago
Béla Becker	2edc9cb83c	Name the Synapse database on state compression import ... Fixes: https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/833	4 years ago
Béla Becker	b7261dc098	Etherpad role: Etherpad needs Dimension ... The default scalar.vector.im integrations manager doesn't support custom URL's for etherpad, therefore Dimension needs to be enabled.	4 years ago
Slavi Pantaleev	3ea90ca436	Upgrade Element (1.7.17 -> 1.7.18)	4 years ago
Slavi Pantaleev	e7f3f7c431	Enable /devices endpoint for generic workers	4 years ago
Slavi Pantaleev	26b287bd17	Upgrade certbot (1.10.1 -> 1.11.0)	4 years ago
Slavi Pantaleev	1cd2a218de	Merge branch 'master' into synapse-workers	4 years ago
Slavi Pantaleev	c6feb0b99e	Upgrade Synapse (v1.25.0 -> v1.26.0)	4 years ago
Slavi Pantaleev	39c2d72d17	Merge branch 'master' into synapse-workers	4 years ago
Slavi Pantaleev	008049f2a9	Fix mautrix-telegram registration file mistake ... Regression since f6097fbba1	4 years ago
Slavi Pantaleev	a49dab76f8	Merge branch 'master' into synapse-workers	4 years ago
Slavi Pantaleev	e3290d8bcb	Remove |to_json causing trouble ... Fixes a regression introduced in f6097fbba1, which was cauing Synapse to die with this error message: > ValueError: sender_localpart needs characters which are not URL encoded.	4 years ago
Slavi Pantaleev	a31c9603fa	Merge branch 'master' into synapse-workers	4 years ago
Slavi Pantaleev	f6097fbba1	E2BE not working for mautrix bridges ... Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/806	4 years ago
Slavi Pantaleev	07f1ea24ee	Make it possible to override the welcome.html.j2 template used for Element	4 years ago
Slavi Pantaleev	d98a1ceadd	Merge branch 'master' into synapse-workers	4 years ago
Slavi Pantaleev	512f42aa76	Do not report docker kill/rm attempts as errors ... These are just defensive cleanup tasks that we run. In the good case, there's nothing to kill or remove, so they trigger an error like this: > Error response from daemon: Cannot kill container: something: No such container: something and: > Error: No such container: something People often ask us if this is a problem, so instead of always having to answer with "no, this is to be expected", we'd rather eliminate it now and make logs cleaner. In the event that: - a container is really stuck and needs cleanup using kill/rm - and cleanup fails, and we fail to report it because of error suppression (`2>/dev/null`) .. we'd still get an error when launching ("container name already in use .."), so it shouldn't be too hard to investigate.	4 years ago
Slavi Pantaleev	869727a402	Add comment to mautrix-facebook bridge regarding alembic migrations	4 years ago
Slavi Pantaleev	a9af36841d	Merge branch 'master' into synapse-workers	4 years ago
Slavi Pantaleev	346f8b3475	Fix typo	4 years ago
Slavi Pantaleev	26542308b3	Use |to_json in more places in matrix-appservice-discord config ... I don't think this was causing an issue, but it might if the bot token has a more special value in the future. Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/828	4 years ago
Béla Becker	42f338016b	Etherpad matrix-nginx-proxy configuration	4 years ago
Béla Becker	7bc9be95cb	Add map directive to the base of nginx.conf ... This needs to be added for WebSocket upgrades to work properly (see doc: http://nginx.org/en/docs/http/websocket.html)	4 years ago
Béla Becker	38bf1eda70	Etherpad Jitsi integration	4 years ago
Béla Becker	4b451ff782	Etherpad role	4 years ago
Slavi Pantaleev	a535226210	Stop/disable unnecessary worker services before deleting them	4 years ago
Slavi Pantaleev	dd24942c03	Use |to_json for mautrix-telegram config ... Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/824	4 years ago
Slavi Pantaleev	778b66876c	Merge branch 'master' into synapse-workers	4 years ago
Slavi Pantaleev	70dcdd41a7	Simplify matrix-remove-all ... We don't have instantiated services anymore, nor /etc/systemd/system/matrix-synapse.service.wants/ stuff.	4 years ago
Slavi Pantaleev	d3ecc6f017	Fix bridges failing to upload media when Synapse workers are enabled	4 years ago
Slavi Pantaleev	66cdc7bf5a	Clean up worker.yaml generation a bit and make it more flexible	4 years ago
Slavi Pantaleev	1462409b34	Fix worker listening addresses ... Not specifying bind addresses for the worker resulted in this warning: > synapse.app - 47 - WARNING - None - Failed to listen on 0.0.0.0, continuing because listening on [::] Additionally, metrics listening only on 127.0.0.1 seems like a no-op. Only having it accessible from within the container is likely not what we intend. Changed that to all interfaces as well. Whether it actually gets exposed or not depends on the systemd service and `matrix_synapse_workers_container_host_bind_address`.	4 years ago
Slavi Pantaleev	01747c8cc4	Prevent Synapse warning about enabling metric listeners with enable_metrics: false ... > synapse.app.generic_worker - 606 - WARNING - None - Metrics listener configured, but enable_metrics is not True!	4 years ago
Slavi Pantaleev	70796703d3	Run Synapse workers in their own containers ... This switches the `docker exec` method of spawning Synapse workers inside the `matrix-synapse` container with dedicated containers for each worker. We also have dedicated systemd services for each worker, so this are now: - more consistent with everything else (we don't use systemd instantiated services anywhere) - we don't need the "parse systemd instance name into worker name + port" part - we don't need to keep track of PIDs manually - we don't need jq (less depenendencies) - workers dying would be restarted by systemd correctly, like any other service - `docker ps` shows each worker separately and we can observe resource usage	4 years ago
Slavi Pantaleev	6fc214480c	Fix Signal role using incorrect database string variable ... Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/823	4 years ago
Slavi Pantaleev	da50fb27a0	Whitelist /_matrix/key requests for going to generic workers on the federation port	4 years ago
Slavi Pantaleev	4d62a75f6f	Get matrix-corporal to play nicely with a Synapse worker setup ... We do this by creating one more layer of indirection. First we reach some generic vhost handling matrix.DOMAIN. A bunch of override rules are added there (capturing traffic to send to ma1sd, etc). nginx-status and similar generic things also live there. We then proxy to the homeserver on some other vhost (only Synapse being available right now, but repointing this to Dendrite or other will be possible in the future). Then that homeserver-specific vhost does its thing to proxy to the homeserver. It may or may not use workers, etc. Without matrix-corporal, the flow is now: 1. matrix.DOMAIN (matrix-nginx-proxy/matrix-domain.conf) 2. matrix-nginx-proxy/matrix-synapse.conf 3. matrix-synapse With matrix-corporal enabled, it becomes: 1. matrix.DOMAIN (matrix-nginx-proxy/matrix-domain.conf) 2. matrix-corporal 3. matrix-nginx-proxy/matrix-synapse.conf 4. matrix-synapse (matrix-corporal gets injected at step 2).	4 years ago
Slavi Pantaleev	c05d3d09bd	Disable systemd services while stopping them ... This removes some `multi-target.wants` symlinks as well, etc. But despite systemd saying: > Removed symlink /etc/systemd/system/matrix-synapse.service.wants/matrix-synapse-worker@appservice:0.service .. I still see such symlinks tehre for me for some reason, so keeping the code (below) to find & delete them still seems like a good idea.	4 years ago
Slavi Pantaleev	63301b0ef1	Improvements around Synapse worker/metrics ports exposure ... There was a `matrix_nginx_proxy_enabled|default(False)` check, but: - it didn't seem to work reliably for some reason (hmm) - referring to a `matrix_nginx_proxy_*` variable from within the `matrix-synapse` role is not ideal - exposing always happened on `127.0.0.1`, which may not be good enough for some rarer setups (where the own webserver is external to the host)	4 years ago
Slavi Pantaleev	f66a6b066b	Be more specific with the Redis version being used	4 years ago
Slavi Pantaleev	5ca68210cd	Do not handle /_matrix/federation on client-server port, nor /_matrix/client stuff on federation port ... I guess it didn't hurt to do it until now, but it's not great serving federation APIs on the client-server API port, etc. matrix-corporal doesn't work yet (still something to be solved in the future), but its firewalling operations will also be sabotaged by Client-Server APIs being served on the federation port (it's a way to get around its firewalling).	4 years ago
Slavi Pantaleev	cc5cf0d725	Load roles/matrix-synapse/vars/workers.yml earlier to not break --tags=setup-nginx-proxy ... If we load it at runtime, during matrix-synapse role execution, it's good enough for matrix-synapse and all roles after that, but.. it breaks when someone uses `--tags=setup-nginx-proxy` alone. The downside of including this vars file like this in `setup.yml` is that the variables contained in it cannot be overriden by the user (in their inventory's `vars.yml`). ... but it's not like overriding these variables was possible anyway when including them at runtime.	4 years ago
Slavi Pantaleev	92ee3d78a0	Fix matrix-remove-all for when Synapse workers are enabled	4 years ago
Slavi Pantaleev	8fa913dca7	Fix Ansible warning	4 years ago
Marcel Partap	edc21f15e5	Restrict publishing worker (metrics) ports to localhost	4 years ago
Marcel Partap	183adec3d8	Merge remote-tracking branch 'origin/master' into synapse-workers	4 years ago
Marcel Partap	c8f051a42d	Track workers endpoint list in repo instead of regenerating on user side	4 years ago
Marcel Partap	f2c7d79238	Drop probably incorrect comment from synapse homeserver.yaml.j2	4 years ago
Slavi Pantaleev	a56cb34850	Notify people if /matrix/postgres/data-auto-upgrade-backup exists	4 years ago
Slavi Pantaleev	a2422c458a	Notify of remaining matrix-postgres local data in a better way	4 years ago
Slavi Pantaleev	1cd251ed78	Don't delete Docker images which may have been pulled by another ... Some people run Coturn or Jitsi, etc., by themselves and disable it in the playbook. Because the playbook is trying to be nice and clean up after itself, it was deleting these Docker images. However, people wish to pull and use them separately and would rather they don't get deleted. We could make this configurable for the sake of this special case, but it's simpler to just avoid deleting these images. It's not like this "cleaning things up" thing works anyway. As time goes on, the playbook gets updated with newer image tags and we leave so many images behind. If one doesn't run `docker system prune -a` manually once in a while, they'd get swamped with images anyway. Whether we leave a few images behind due to the lack of this cleanup now is pretty much irrelevant.	4 years ago
Slavi Pantaleev	f085362149	Fix some Postgres CLI scripts to target the correct database ... Fixes a regression introduced in 95346f3117. Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/814 Using `matrix_synapse_` variables in the `matrix-postgres` role is not ideal, but.. this script belongs neither here, nor there. We'll have it be like that for now.	4 years ago
Slavi Pantaleev	3051655d21	Ensure matrix_appservice_irc_docker_src_files_path created when self-building ... The git module will create it anyway, but that would likely use `root:root`.	4 years ago
Panagiotis Georgiadis	f10e3fef0d	Merge branch 'master' into irc	4 years ago
Panagiotis Georgiadis	e502ee33da	Selfbuild appservice-irc bridge	4 years ago
Slavi Pantaleev	f9968b6981	Fix matrix_postgres_connection_password length check	4 years ago
Slavi Pantaleev	2997a7fc3e	Make mx-puppet-* bridges not log to files ... We log everything in systemd/journald for every service already, so there's no need for double-logging, bridges rotating log files manually and other such nonsense.	4 years ago
Slavi Pantaleev	f3dd346724	Try to tighten Signal bridge security	4 years ago
Slavi Pantaleev	8ec975e3c8	Use matrix:matrix for Signal bridge (not root)	4 years ago
Slavi Pantaleev	37909aa7a9	Create signald/{avatars,attachments,data} and rename config dir	4 years ago
Slavi Pantaleev	88addd71fc	Fix Postgres imports going to the matrix DB by default ... Well, they still do go to that DB by default, but our docs give a better command to users, which would do the right thing.	4 years ago
Slavi Pantaleev	bef0702fea	Wait some more when starting Postgres during setup on ARM	4 years ago
Slavi Pantaleev	f9c1d62435	Fix Postgres database (-alpine) failing to start on ARM32	4 years ago
Slavi Pantaleev	95346f3117	Reorganize Postgres access (breaking change) ... In short, this makes Synapse a 2nd class citizen, preparing for a future where it's just one-of-many homeserver software options. We also no longer have a default Postgres superuser password, which improves security. The changelog explains more as to why this was done and how to proceed from here.	4 years ago
throwawayay	a30ef0cc29	Update element-web (1.7.16 -> 1.7.17)	4 years ago
Slavi Pantaleev	024a23ed17	Upgrade mautrix-facebook to the new Postgres-only version ... I had intentionally held it back in 39ea3496a4 until: - it received more testing (there were a few bugs during the migration, but now it seems OK) - this migration guide was written	4 years ago
pushytoxin	d51ea25219	When validating LE certs, do not wait for a random time ... While administering we will occasionally invoke this script interactively with the "non-interactive" switch still there, yet still sit at the desk waiting for 300 seconds for this timer to run out. The systemd-timer already uses a 3h randomized delay for automatic renewals, which serves this purpose well.	4 years ago
Slavi Pantaleev	39ea3496a4	Downgrade/lock mautrix-facebook to pre-mobile times ... The `mobile` branch got merged to `master`, which ends up becoming `:latest`. It's a "rewrite" of the bridge's backend and only supports a Postgres database. We'd like to go back (well, forward) to `:latest`, but that will take a little longer, because: - we need to handle and document things for people still on SQLite (especially those with external Postgres, who are likely on SQLite for bridges) - I'd rather test the new builds (and migration) a bit before releasing it to others and possibly breaking their bridge Brave ones who are already using the bridge with Postgres can jump on `:latest` and report their experience.	4 years ago
Slavi Pantaleev	c9d96d8135	Fix mautrix-telegram paths creation bug	4 years ago
Slavi Pantaleev	56c54d5cc7	Upgrade matrix-corporal (2.0.1 -> 2.1.0)	4 years ago
Slavi Pantaleev	c1008fde44	Upgrade matrix-coturn (4.5.1.3 -> 4.5.2)	4 years ago
Slavi Pantaleev	cf06f84608	Upgrade matrix-corporal (2.0.0 -> 2.0.1)	4 years ago
Slavi Pantaleev	d95cbe38d7	Rename configuration setting	4 years ago
Slavi Pantaleev	28d86e3aaa	Initial work on support for matrix-corporal v2	4 years ago
Slavi Pantaleev	8549926395	Attempt to fix mautrix-whatsapp DB migration user table conflict ... Discussed in https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/791	4 years ago
Slavi Pantaleev	1692a28fe4	Work around annoying Docker warning about undefined $HOME ... > WARNING: Error loading config file: .dockercfg: $HOME is not defined .. which appeared in Docker 20.10.	4 years ago
Slavi Pantaleev	26f0bbfdef	Fix self-building for matrix-ma1sd on non-version tag/branch ... Building `master` or something like this was failing.	4 years ago
Slavi Pantaleev	9e936e45ad	Use BuildKit for ma1sd Docker building ... Newer versions (`master`) use things like `--platform=...`, which are not supported unless we enable the new BuildKit building backend.	4 years ago
Slavi Pantaleev	e1690722f7	Replace cronjobs with systemd timers ... Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/756 Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/737 I feel like timers are somewhat more complicated and dirty (compared to cronjobs), but they come with these benefits: - log output goes to journald - on newer systemd distros, you can see when the timer fired, when it will fire, etc. - we don't need to rely on cron (reducing our dependencies to just systemd + Docker) Cronjobs work well, but it's one more dependency that needs to be installed. We were even asking people to install it manually (in `docs/prerequisites.md`), which could have gone unnoticed. Once in a while someone says "my SSL certificates didn't renew" and it's likely because they forgot to install a cron daemon. Switching to systemd timers means that installation is simpler and more unified.	4 years ago
Slavi Pantaleev	05ca9357a8	Add .service suffix to systemd units list ... We'll be adding `.timer` units later on, so it's good to be more explicit.	4 years ago
Slavi Pantaleev	653d1d7924	Revert "Don't self-build ma1sd every time unless git sources changed" ... This reverts commit 2a25b63bb6. Looking at other roles, we trigger building regardless of this. It's better to always trigger it, because it's less fragile. If the build fails and we only trigger it on "git changes" then we won't trigger it for a while. That's not good. Triggering it each and every time may seem like a waste, but it supposedly runs quickly due to Docker caching.	4 years ago
Slavi Pantaleev	6f5aaad48d	Split install/uninstall tasks in matrix-coturn	4 years ago
Slavi Pantaleev	57ea43d8b0	Remove unused variable ... This variable has been useless since 2019-01-08. We probably don't need to check for its usage anymore, given how much time has passed since then, but ..	4 years ago
Slavi Pantaleev	7a90eb6d4f	Relocate some validation tasks	4 years ago
Slavi Pantaleev	67dc5237c5	Merge pull request #794 from drpaneas/appservice_slack_rebuild ... Selfbuild appservice-slack bridge	4 years ago
Slavi Pantaleev	862a6276a0	Do not pull appservice-slack when self-building	4 years ago
Slavi Pantaleev	b15da29ebb	Bump Synapse to v1.25.0 for ARM	4 years ago
Panagiotis Georgiadis	a66a604e53	Selfbuild appservice-slack bridge	4 years ago
Slavi Pantaleev	2a25b63bb6	Don't self-build ma1sd every time unless git sources changed	4 years ago
Slavi Pantaleev	a5a44a9d3f	Merge pull request #786 from drpaneas/rebuild_telegram ... Local rebuild for Telegram	4 years ago
Slavi Pantaleev	52fa7e576b	Fix path typo	4 years ago
Slavi Pantaleev	5fa30cdfcb	Ensure matrix_mautrix_facebook_docker_src_files_path created ... Before we potentially clone to that path, we'd better make sure it exists. We also simplify `when` statements a bit. Given that we're in `setup_install.yml`, we know that the bridge is enabled, so there's no need to check for that.	4 years ago
Slavi Pantaleev	568cb3d86f	Upgrade matrix-mailer (4.93-r0 -> 4.93-r1) ... This is a bit misleading, because the old Docker image was tagged as `4.93.1`. There hasn't been a `4.93.1` version yet though. Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/792	4 years ago
Slavi Pantaleev	24100342e1	Tell people that federation_ip_range_blacklist is gone ... Related to d5945c6e78	4 years ago
Slavi Pantaleev	d5945c6e78	Upgrade Synapse (v1.24.0 -> v1.25.0) for amd64	4 years ago
Panagiotis Georgiadis	999fd2596f	Local rebuild for Telegram	4 years ago
Slavi Pantaleev	0b260a133f	Add matrix-aux role to help with managing auxiliary files/directories	4 years ago
Will	5b0761bf40	Create list_tokens.yml	4 years ago
Will	1468010194	Update main.yml	4 years ago
Marcel Partap	cd8100544b	Merge remote-tracking branch 'origin/master' into synapse-workers ... Sync with upstream	4 years ago
Slavi Pantaleev	f7ae050eaf	Remove useless quotes around ssl_ciphers value ... Not sure if it breaks with them or not, but no other directive uses quotes and the nginx docs show examples without quotes, so we're being consistent with all of that.	4 years ago
Slavi Pantaleev	5822ba0c01	Use a more natural if statement	4 years ago
Slavi Pantaleev	de6ecd8818	Update inaccurate comments	4 years ago
Agustin Ferrario	5156c63a76	Clean up code ... Code was clean up and simplified to make it simpler and easier to maintain. No features were modified.	4 years ago