c0656448f7
Port 80 for IPv6
3 years ago
f01b9c3865
Upgrade Heisenbridge (1.5.0 -> 1.6.0)
3 years ago
c4d2c8394c
Abort if on an unsupported Postgres version (v9.6)
...
Official support ends today (2021-11-11).
Synapse still supports v9.6, but we'd better force users to transition
to newer versions anyway.
3 years ago
cd26af2f6f
Certbot Update (v1.20.0 -> v1.21.0)
3 years ago
7a4f49c457
Nginx Minio Update (1.21.3 -> 1.21.4)
3 years ago
735c966ab6
Disable systemd services when stopping to uninstall them
...
Until now, we were leaving services "enabled"
(symlinks in /etc/systemd/system/multi-user.target.wants/).
We clean these up now. Broken symlinks may still exist in older
installations that enabled/disabled services. We're not taking care
to fix these up. It's just a cosmetic defect anyway.
3 years ago
367cddb715
Upgrade Element (v1.9.4)
3 years ago
143b0f26d9
Restore usage of some _environment_variables_extension Jitsi variables
...
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1377
Regresion since https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1139
3 years ago
6eaa8ac65a
add server_name to matrix-synapsel.conf only if matrix_nginx_proxy_enabled
3 years ago
09ac6a0e8c
Upgrade Heisenbridge (1.4.1 -> 1.5.0)
3 years ago
7b8b595e81
Upgrade Synapse (1.45.1 -> 1.46.0)
3 years ago
dae117c91b
Bump Hydrogen (0.2.7 -> 0.2.19)
3 years ago
4586efebd7
Merge pull request #1369 from borisrunakov/configurable-ma1sd-port
...
change port 8090 to matrix_ma1sd_default_port
3 years ago
0434e3bf8f
Allow force-patching webpack.config.js when self-building Element
...
We were applying the low-memory system patch to webpack.config.js
on systems with < 4GB memory.
From now on, we also let people force-enable patching by toggling the
`matrix_client_element_container_image_self_build_low_memory_system_patch_enabled`
variable.
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1357
3 years ago
dcda17595a
change port 8090 to matrix_ma1sd_default_port
3 years ago
17fc055d53
Upgrade Heisenbridge (1.4.0 -> 1.4.1)
3 years ago
c6c68e00a4
merge upstream
3 years ago
65182ea0f2
fixes #1365
...
docker-ce does not like quotes around the shm-size value
3 years ago
fc593bc8ab
Increase shm-size for Postgres container to fix VACUUM
...
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1268
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1364
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1362
3 years ago
c8a8035de4
Make it possible to self-build Element on low-memory devices (<4G RAM)
...
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1357
3 years ago
39fa852ed6
Remove unnecessary if checks
...
Should have been done in 63f5a88fa0
3 years ago
63f5a88fa0
Separate install/uninstall tasks for Element and Hydrogen
3 years ago
124b9608fc
Upgrade Heisenbridge (1.3.0 -> 1.4.0)
3 years ago
32f15e9bf0
update IRC appservice
...
https://github.com/matrix-org/matrix-appservice-irc/releases/tag/0.32.1
3 years ago
0231302db9
Upgrade grafana (8.1.4 -> 8.2.2)
3 years ago
d09609b3bd
Update prometheus (2.29.2 -> 2.30.3)
3 years ago
d31cdb071a
Upgrade Element (v1.9.3)
...
https://github.com/vector-im/element-web/releases/tag/v1.9.3
3 years ago
06bcdcf9d2
Merge pull request #1311 from HarHarLinks/master
...
add auto proxy synapse worker metrics
3 years ago
5f6bbafa17
fix space before tab in indent
3 years ago
d7af78066b
Upgrade Heisenbridge (1.2.1 -> 1.3.0)
3 years ago
09ac950d17
Fix dump importing (backup restore) into Postgres v14
...
In short, the problem is that older Postgres versions store passwords
hashed as md5. When you dump such a database, the dump naturally also
contains md5-hashed passwords.
Restoring from that dump used to create users and updates their passwords
with these md5 hashes.
However, Postgres v14 prefers does not like md5-hashed passwords now (by default),
which breaks connectivity. Postgres v14 prefers `scram-sha-256` for
authentication.
Our solution is to just ignore setting passwords (`ALTER ROLE ..`
statements) when restoring dumps. We don't need to set passwords as
defined in the dump anyway, because the playbook creates users
and manages their passwords by itself.
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1340
3 years ago
7f140e9be2
Merge remote-tracking branch 'upstream/master' into gomatrixhosting-testing
3 years ago
725150565a
GoMatrixHosting v0.6.3 hotfix2
3 years ago
86614d6357
Merge pull request #1345 from GoMatrixHosting/gomatrixhosting-testing
...
GoMatrixHosting v0.6.3 [hotfix]
3 years ago
5dc2868269
Upgrade Synapse (1.45.0 -> 1.45.1)
3 years ago
7b33fc8e19
fixup! auto-generate prometheus.yml for workers metrics
3 years ago
ce41674e61
auto-generate prometheus.yml for workers metrics
3 years ago
4209c4208c
add own variable for worker metrics
...
https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1311#issuecomment-945718866
3 years ago
75cfad57ca
GoMatrixHosting v0.6.3 hotfix
3 years ago
1dab178a44
Upgrade Synapse (1.44.0 -> 1.45.0)
3 years ago
d65607c48f
Merge remote-tracking branch 'upstream/master' into gomatrixhosting-testing
3 years ago
18395e73d3
GMH v0.6.3
3 years ago
5284afc60e
Merge pull request #1333 from Samonitari/add-support-for-suse-linux
...
Add support for suse linux
3 years ago
8c15555d00
Upgrade Element (1.9.0 -> 1.9.2)
3 years ago
a1cbd5459c
Update Synapse default room version (6 -> 9)
...
From the [Synapse 1.43.0 release highlights](https://matrix.org/blog/2021/09/21/synapse-1-43-0-released ):
> Asks clients to prefer [room version 9](https://github.com/matrix-org/matrix-doc/pull/3375 ) when creating restricted rooms ([#10772 ](https://github.com/matrix-org/synapse/issues/10772 )), via the API defined in [MSC3244: room version capabilities](https://github.com/matrix-org/matrix-doc/pull/3244 ).
3 years ago
1dac525e63
Added Mautrix Google Chat
3 years ago
fb709152f3
Add self-building support for mautrix-whatsapp
...
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1322
3 years ago
0c21b5a055
Merge pull request #1326 from GoMatrixHosting/gomatrixhosting-testing
...
GoMatrixHosting v0.6.2
3 years ago
fc0296b56e
update element section
3 years ago
25d0ae7b67
Update matrix-appservice-slack (1.5.0 -> 1.8.0)
...
I am not using this bridge and haven't tested this but multiple people have said 1.5.0 isn't working and 1.8.0 works for them so it seems to make sense to update.
https://github.com/matrix-org/matrix-appservice-slack/issues/618#issuecomment-929849093
3 years ago
c630bc3eaa
update element section
3 years ago
46cba52e79
update element section
3 years ago
b4654f8992
update element section
3 years ago
927633321a
update element section
3 years ago
676ba70971
update element section
3 years ago
53f4b84d1f
update element section
3 years ago
8ff0ae27b8
update element section
3 years ago
9f0a8965d5
update element config
3 years ago
36883150c6
update
3 years ago
291efc1163
update element section
3 years ago
6a8799afcc
wrap brand variable in single quotes too
3 years ago
85bc12d14c
saner handling of background variable
3 years ago
79acf6fc7e
update conditionals
3 years ago
a352ea4674
derp
3 years ago
1ae103bbbe
stop configure element from double wrapping this
3 years ago
89c8ae94d6
update
3 years ago
a631587ebd
this isnt needed
3 years ago
07a5433c24
fix lineinfile
3 years ago
dd6e643581
first round of variable name changes
3 years ago
175bdb100b
first round of variable name changes
3 years ago
6b9af38228
update?
3 years ago
f4410514f5
update variable names
3 years ago
de084c4d4d
fix variable name change
3 years ago
fb23c7b697
Merge remote-tracking branch 'upstream/master' into gomatrixhosting-testing
3 years ago
a60a43cb08
change naming scheme of variables that feature in deploy.
3 years ago
42af090a7c
update naming scheme 1
3 years ago
df9da052ab
fix conditional
3 years ago
384dfdce4b
update?
3 years ago
6f99f95aa2
Merge branch 'master' of https://github.com/spantaleev/matrix-docker-ansible-deploy into add-support-for-suse-linux
3 years ago
b0d56f6c18
update conditionals
3 years ago
208dce51d8
add new survey entries for welcome page link, headline and text
3 years ago
0f4cb513b8
update survey
3 years ago
8d9d176c36
update?
3 years ago
d1754915d1
improve conditional
3 years ago
ecc0437520
add logo section
3 years ago
2bf052369d
Upgrade certbot (v1.19.0 -> v1.20.0)
3 years ago
278bbae4d5
Upgrade Synapse (1.43.0 -> 1.44.0)
3 years ago
bad2c5296e
Merge pull request #1312 from HarHarLinks/patch-4
...
add how to generate htpasswd
3 years ago
e3183ba267
Merge remote-tracking branch 'upstream/master' into gomatrixhosting-testing
3 years ago
1ba7760ea4
add how to generate htpasswd
...
for matrix_nginx_proxy_proxy_synapse_metrics_basic_auth_key
resolves #1308
3 years ago
d9fa2f7ed4
add auto proxy synapse worker metrics
...
when matrix_nginx_proxy_proxy_synapse_metrics is enabled
3 years ago
40506d5c5a
no log
3 years ago
b5d8444764
Add self-building support to matrix-bridge-appservice-webhooks
3 years ago
c8744ef9a9
update deploy role for new awx token authentication method
3 years ago
096c960b84
Add support for Postgres v14
3 years ago
256d3ffec5
Merge pull request #1304 from apmechev/update-linkedin-0.5.1
...
Upgrade LinkedIn (0.5.0 -> 0.5.1)
3 years ago
3119ef4574
Upgrade Heisenbridge (1.2.0 -> 1.2.1)
3 years ago
b4b14539a7
Use ntp (instead of systemd-timesyncd) on Ubuntu 18.04
...
Seems like Ubuntu 18.04 does not have a dedicated `systemd-timesyncd` package, nor
does it include the `systemd-timesyncd` binary in the main `systemd` package.
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1302
Regression since https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1192
3 years ago
f02c08dc7f
Upgrade LinkedIn (0.5.0 -> 0.5.1)
3 years ago
59d4532efb
Upgrade Element (1.8.5 -> 1.9.0)
3 years ago
0ed585baa7
Archlinux: remove package systemd-timesyncd
...
#1192 lead to the following error for me on Archlinux:
`TASK [matrix-base : Install host dependencies] *******************************************************************************************************************************
fatal: [matrix.***.de]: FAILED! => changed=false
msg: |-
failed to install systemd-timesyncd: error: target not found: systemd-timesyncd`
There is no package called `systemd-timesyncd` on Archlinux. The service is installed with the [`systemd`](https://archlinux.org/packages/core/x86_64/systemd/ ) package itself.
I suggest removing the `systemd-timesyncd` from 2453876eb9/roles/matrix-base/tasks/server_base/setup_archlinux.yml (L7)
3 years ago
31396f0615
Merge pull request #1295 from nogweii/feat-support-upstream-https-forwarded
...
Support trusting the upstream server when it says the protocol is HTTPS
3 years ago
4f841a7001
Merge pull request #1192 from sakkiii/patch-1
...
migrate from ntp to systemd-timesyncd for ubuntu & Archlinux
3 years ago
62ce06e28c
Merge pull request #1298 from GoMatrixHosting/gomatrixhosting-testing
...
GoMatrixHosting v0.6.0
3 years ago
9a4187c852
Merge remote-tracking branch 'upstream/master' into gomatrixhosting-testing
3 years ago
a676b5358c
Fix hydrogen OCSP typo
...
From 6f80292745
3 years ago
2578ca4cee
rename matrix_nginx_proxy_x_forwarded_header_value -> matrix_nginx_proxy_x_forwarded_proto_value
3 years ago
d0cd67044e
replace $scheme with X-Forwarded-Proto when enabled
3 years ago
ff63f4efce
Upgrade Heisenbridge (1.1.1 -> 1.2.0)
3 years ago
33c471477f
remove commented section
3 years ago
7934cde90f
Upgrade Synapse (1.42.0 -> 1.43.0)
...
Related to:
- https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1287
- https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1288
.. but does it in a more complete way
3 years ago
35153093fc
Merge pull request #1283 from wol-win/irc-update
...
Update irc bridge version (release-0.30.0 -> release-0.31.0)
3 years ago
d82b98a522
Upgrade mjolnir (v0.1.19 -> v1.1.20)
...
Upgrade mjolnir (v0.1.19 -> v1.1.20)
Remark: interesting version number increase :-)
3 years ago
f542a3a7c8
Update release (release-0.30.0 -> release-0.31.0)
...
Update release (release-0.30.0 -> release-0.31.0)
3 years ago
6902ee5aa7
add rotate ssh module to matrix-awx
3 years ago
8b9c7b18ac
Upgrade Heisenbridge (1.1.0 -> 1.1.1)
3 years ago
255cb97c41
Upgrade grafana (8.1.3 -> 8.1.4)
3 years ago
b166f0175a
Upgrade Element (1.8.4 -> 1.8.5)
3 years ago
3055b3996e
Updates Certbot -> v1.19.0, nginx ->1.21.3-alpine
3 years ago
4adbefab82
Upgrade Heisenbridge (1.0.1 -> 1.1.0)
3 years ago
f364fba182
Fix tripping on timesync setup
3 years ago
4b46913278
Upgrade Element (1.8.2 -> 1.8.4) to patch a security issue
...
See:
- https://github.com/vector-im/element-web/releases/tag/v1.8.4
- https://matrix.org/blog/2021/09/10/pre-disclosure-upcoming-critical-fix-for-several-popular-matrix-clients
3 years ago
f7e614b644
Add comment explaining why this step goes here
3 years ago
82641092a7
Revert "Move some related tasks closer together in matrix-client-hydrogen"
...
This reverts commit e913347fe1
3 years ago
df13ea5f14
Upgrade grafana (8.1.2 -> 8.1.3) ( #1269 )
...
Upgrade grafana (8.1.2 -> 8.1.3)
3 years ago
0faad74a44
Upgrade Synapse (1.41.1 -> 1.42.0)
3 years ago
8339103594
revert unneeded changes
3 years ago
ca705cf9dd
Merge remote-tracking branch 'upstream/master' into testing
3 years ago
ae6caf158a
Added variable matrix_nginx_proxy_request_timeout ( #1265 )
...
* add timeout param for nginx proxy
default value matrix_nginx_proxy_request_timeout is 60s
* default matrix_nginx_proxy_request_timeout - 60s
* few more variables for request timeout
* Update nginx.conf.j2
* Update nginx.conf.j2
3 years ago
a911207854
Revert "nginx update v1.21.2"
...
This reverts commit 732051b8fc
3 years ago
115f365860
Merge pull request #1263 from hifi/feature/heisenbridge-1.0.1
...
Bump Heisenbridge to v1.0.1
3 years ago
732051b8fc
nginx update v1.21.2
...
http://nginx.org/en/CHANGES
3 years ago
c228343339
Bump Heisenbridge to v1.0.1
3 years ago
e913347fe1
Move some related tasks closer together in matrix-client-hydrogen
3 years ago
d384d0d7a0
Upgrade Element (1.8.1 -> 1.8.2)
3 years ago
1c9124e3b7
Merge pull request #1260 from aaronraimist/self-build
...
Pull correct version when self building Mautrix Facebook and Synapse Admin
3 years ago
3ab01a5f9e
Pull correct version when self building Mautrix Facebook and Synapse Admin
3 years ago
777ba6bc5a
Upgrade to Synaspe v 1.41.1 (Security Update)
...
Synapse 1.41.1 Patches 2 exploits that can reveal information about rooms an user is not supposed to have access to information about.
3 years ago
2453876eb9
Update main.yml
3 years ago
087a5d62f1
systemd-timesyncd for any archlinux version
3 years ago
7fc1a94c30
Merge pull request #1258 from sakkiii/jitsi-fix
...
Jitsi Update (stable-5963 -> stable-6173)
3 years ago
9d06dd61a6
Upgrade exim-relay (4.94.2-r0-3 -> 4.94.2-r0-4)
3 years ago
510f299c04
Syntex fixed
3 years ago
465d436b1b
Merge branch 'spantaleev:master' into jitsi-fix
3 years ago
a43b109653
Jitsi Update stable-5963
3 years ago
6feb99076a
Update Coturn (4.5.2-r3 -> 4.5.2-r4)
3 years ago
972077aa33
Update prometheus (2.29.1 -> 2.29.2)
...
Update prometheus (2.29.1 -> 2.29.2)
3 years ago
ad3d2a5aee
Merge pull request #1252 from sakkiii/patch-4
...
mjolnir & hydrogen Minor Updates
3 years ago
e4ea32b89f
Hydrogen v0.2.7
3 years ago
44709465c9
mjolnir releases v0.1.19
3 years ago
86f5ba8348
Grafana Grafana v8.1
3 years ago
a4db9557db
Update homeserver.yaml to match the one in Synapse v1.41.0
...
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1247
3 years ago
bb0e59de48
Merge pull request #1250 from wol-win/worker_trial
...
Endpoint changes for Client and media API due to migration to 1.41.0
3 years ago
b447fa8f34
Merge pull request #1247 from FSG-Cat/patch-1
...
Update Synapse from 1.40.0 to 1.41.0
3 years ago
ee75d35193
Endpoint changes for Client and media API due to migration to 1.41.0
3 years ago
a787f406f9
Update main.yml
...
Fix incorrect docker version tag for matrix-appservice-irc
3 years ago
1e070f1e56
Update Synapse from 1.40.0 to 1.41.0
3 years ago
6ecd947c72
remove delete subscription section
3 years ago
463e9a6196
woops bool not bools
3 years ago
f19856e125
change template name
3 years ago
c6f8bc5d83
missing one template from deletion section
3 years ago
a49da05cf9
delegate locally
3 years ago
ef4b5a187d
alter delete_job_template template
3 years ago
b120b8aeba
delay these till the next playbook
3 years ago
01a5f521cd
Merge branch 'patch-2' of https://github.com/sakkiii/matrix-docker-ansible-deploy into patch-2
3 years ago
00d1804dd9
prometheus & its exporter updates
3 years ago
57414ec2be
Upgrade matrix-corporal (2.1.1 -> 2.1.2)
3 years ago
4b643db31b
Upgrade devture/exim-relay (4.94.2-r0-2 -> 4.94.2-r0-3)
...
Related to https://github.com/devture/exim-relay/pull/11
3 years ago
ca7e0b9df2
Merge pull request #1243 from sakkiii/patch-3
...
Postgres Minor Updates
3 years ago
2ec06b7477
Merge pull request #1242 from apmechev/add_beeper_linkedin_bridge
...
Add beeper LinkedIn bridge
3 years ago
603ad7c52b
Remove (non-working) SQLite support from beeper-linkedin bridge
...
This bridge doesn't support SQLite anyway, so it's not necessary
to carry around configuration fields and code for migration from SQLite
to Postgres. There's nothing to migrate.
3 years ago
78c22138a5
Do not reference variables from other roles
...
This configuration is supposed to be kept clean and not reference variables defined in other roles.
`group_vars/matrix_servers` redefines these to hook our various roles together.
3 years ago
78b62664cd
Update to version v0.30.0
...
https://github.com/matrix-org/matrix-appservice-irc/releases/tag/0.30.0
3 years ago
48548eb561
Postgres Minor Updates
3 years ago
b13cf1871f
add code for LinkedIn Bridge
3 years ago
24793adb2f
Merge pull request #1241 from sakkiii/patch-3
...
Certbot update v1.18.0
3 years ago
9860fb4675
Upgrade Sygnal (v0.9.0 -> v0.10.1)
3 years ago
f5a7e6d78b
Certbot update v1.18.0
3 years ago
3125ee56e2
add abort_deletion.yml task list
3 years ago
e75ecd858d
launch cleanup job after deleting subscription
3 years ago
a37e5b6d60
job templates cant delete themselves
3 years ago
14effd5e2b
delegate delete tasks locally
3 years ago
312bcc444b
no log
3 years ago
d9d9554a74
Update the docker image version for mautrix-telegram
3 years ago
92b26ec846
check if matrix_vars.yml file exists
3 years ago
7203d4ec21
replace module only if file exists
3 years ago
9ac5ad148a
merge upstream
3 years ago
b2f96df1a9
end play after deleting subscription in AWX
3 years ago
fa43d04ad7
syntax error
3 years ago
7b9929e17b
add << SUBSCRIPTION DELETION IN PROGRESS >> job template
3 years ago
4240df6401
update link
3 years ago
7d0ce01792
update links
3 years ago
7eec01e359
update mautrix new repo name
3 years ago
43c9eab6b9
update mautrix new repo name
3 years ago
1ae4032cb7
update new repo name mautrix
3 years ago
b9124c0080
update new repo name mautrix-hangouts
3 years ago
69f333ea25
Update main.yml
3 years ago
517ecbf0d1
move delete-subscription to deploy
3 years ago
dc8000760b
Bump Coturn version tag (4.5.2-r2 -> 4.5.2-r3)
...
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1236
3 years ago
511a267b00
Merge pull request #1229 from wol-win/feature/signal_config
...
Feature/signal config
3 years ago
2c80e0bc89
Merge pull request #1235 from wol-win/element_web
...
Upgrade Element (1.8.0 -> 1.8.1)
3 years ago
12dbb29675
Upgrade Element (1.8.0 -> 1.8.1)
...
Element web/desktop has just been updated to fix some regressions in regard to VoIP.
3 years ago
854ea91195
Mautrix-Facebook repo location update, pin v0.3.1
...
The Github link is just a redirect to Tulir's own GitLab, so I replaced the self-build link
The docker container repository was rearranged hierarchically (dock.mau.dev/tulir/mautrix-facebook -> dock.mau.dev/mautrix/facebook)
Tagged versions have been made available, thus :latest -> :v0.3.1
3 years ago
bdf10462d2
Merge remote-tracking branch 'upstream/master'
3 years ago
62bba12551
Merge pull request #1233 from hifi/feature/heisenbridge-1.0.0
...
Pin Heisenbridge to 1.0.0
3 years ago
71c7d0ba7f
Merge pull request #1232 from thedanbob/debian-bullseye
...
docker-ce is now available for Debian Bullseye
3 years ago
41c335b967
merge upstream
3 years ago
4fe27a7645
Pin Heisenbridge to 1.0.0
3 years ago
4b7506ca1a
Preset the permissions inline with other bridges
3 years ago
b1c94efcd8
Make template generic for the pemission settings
3 years ago
70d412e523
Upgrade Element (1.7.34 -> 1.8.0)
3 years ago
df82ec13b2
docker-ce is now available for Debian Bullseye
3 years ago
d0b557eb6f
Replace tabs to spaces to prevent problems in YAML
3 years ago
f5a2d732ea
Merge pull request #1224 from GoMatrixHosting/master
...
GoMatrixHosting v0.5.7
3 years ago
7486db0d1a
Missing ticks
3 years ago
f988fd3339
Change sequence of permissions
...
As per earlier comment (see from tulir) the sequence has been changed.
3 years ago
d249fe874e
Update roles/matrix-bridge-mautrix-signal/templates/config.yaml.j2
...
Updated settings in template file:
* relay for any user
* user permissions only for HS domain users
Co-authored-by: Jan <31133207+Jaffex@users.noreply.github.com>
3 years ago
ae9639585c
Update roles/matrix-bridge-mautrix-signal/defaults/main.yml
...
Improved setup through template file
Co-authored-by: Jan <31133207+Jaffex@users.noreply.github.com>
3 years ago
a34241e4cc
Remove intial permissions seting
...
Permissions, when set in the template, will be augmented rahter than replaced when using matrix_mautrix_signal_configuration_extension_yaml. Therefore, permissions shall only be set in the defaults/vars.yml or in the HS specific vars.yml file
3 years ago
5ca28ba872
Default relay bot functionality setting
...
Per default relay bot functionality is disabled; the bridge user permissions depends on the relay bot, if enabled the base domain users are on level relay, else remain on user;
3 years ago
e6b77284f2
Relay bot configurable + permissions
...
Enable / disable relay bot functionality as configuratoin paramter; set bridge permissions for base domain users to user level
3 years ago
98e6cd685d
sync with previous repo
3 years ago
e90b33c4e3
Update matrix-mautrix-signal config to 0.2.0 to enable relay mode
3 years ago
4c12c1892c
use saner folder permissions
3 years ago
4d57a41b3f
remove matrix_awx_enabled from these
3 years ago
2e30802b87
use group variables instead
3 years ago
8238d65e5f
simplify template conditional
3 years ago
bce94c5860
Allow configuring synapse database transaction limit
3 years ago
05ad620386
Update homeserver.yaml to keep up with Synapse v1.40.0
...
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1225
3 years ago
2469ada520
Update Synapse (1.39.0 -> 1.40.0)
3 years ago
bfb61e776e
GMH v0.5.7... maybe!
3 years ago
24589b91f4
irc appservice image tag has a 'v' now
3 years ago
6de8b5925a
Merge pull request #1222 from wol-win/feature/signal
...
New version of Mautrix Signal bridge (version 0.2.0)
3 years ago
6ecfbe98b1
New version of Mautrix Signal bridge version 0.2.0 provided through new GitLab repository location
3 years ago
d11d6f52ae
Update IRC appservice
...
https://github.com/matrix-org/matrix-appservice-irc/releases/tag/0.29.0
3 years ago
d2a1b8b134
whatsapp bridge has new docker image location
...
See https://github.com/mautrix/whatsapp/releases/tag/v0.1.8
3 years ago
2e23166ed3
Merge pull request #1216 from aaronraimist/hydrogen
...
Upgrade Hydrogen (0.2.3 -> 0.2.5)
3 years ago
f3aae70f70
Upgrade Hydrogen (0.2.3 -> 0.2.5)
3 years ago
23006fd64e
Fix email2matrix path initialization
...
Regression since 421f85defa
3 years ago
421f85defa
Add self-building support to matrix-email2matrix
3 years ago
2697590d28
Remove some useless if conditions
3 years ago
a68ac9cb4f
Split install/uninstall tasks in matrix-email2matrix
3 years ago
5fc61ed964
Upgrade Element (1.7.33 -> 1.7.34)
3 years ago
179775b92d
Upgrade Synapse (1.38.1 -> 1.39.0)
3 years ago
dfa7b6e4fd
Merge pull request #1171 from BackInBash/patch-1
...
Updating to ma1sd v2.5.0
3 years ago
676101e999
Minor fixups for ma1sd 2.5.0
...
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1171
3 years ago
67db5a0024
GoMatrixHosting v0.5.5
3 years ago
49abe66f1d
Remove unnecessary if condition
...
All of `setup_install.yml` only runs if `matrix_bot_matrix_reminder_bot_enabled`,
so it's not necessary to add that condition once again.
3 years ago
012440c309
Allow for self-building of reminder-bot
3 years ago
03e8c75a30
Restore authentication for Jitsi Meet.
3 years ago
4a2b169fc9
systemd-timesyncd for ubuntu
3 years ago
f4a9c4dff2
Update prometheus node exporter (1.1.2 -> 1.2.0)
3 years ago
112d8d8243
Upgrade Synapse (1.38.0 -> 1.38.1)
3 years ago
7f0b8fef0a
Merge branch 'spantaleev:master' into patch-1
3 years ago
31244e7fcc
Merge pull request #1180 from Toorero/master
...
Fixed self-build functionality for mautrix-signal
3 years ago
7d9ee3e2fb
Remove unnecessary if-condition
3 years ago
a21696f687
Fix some if-checks
...
We'd rather not suppress pull errors or run self-build tasks if pulling fails.
3 years ago
ead4b00c09
Reverted back to manual self-build detection
3 years ago
30339cd313
Merge pull request #1139 from sakkiii/jitsi-fix
...
Jitsi Update -> stable-5963
3 years ago
d08a78ff1f
remove prosody JICOFO_COMPONENT_SECRET
3 years ago
4105ba854b
Merge pull request #1147 from datenkollektiv-net/allow-custom-federation-fqn
...
Make federation domain customizable
3 years ago
25e6eb27ab
Merge pull request #1183 from Toorero/mautrix-telegram-selfbuild-fix
...
Fixed mautrix-telegram selfbuild not working on non amd64 platforms
3 years ago
fb221c8179
Do not needlessly ignore errors
3 years ago
51b94d9987
Merge pull request #1194 from meyerrj/master
...
Update main.yml for matrix-reminder-bot
3 years ago
931b16fa66
Merge pull request #1193 from sakkiii/patch-2
...
Upgrade hydrogen (v0.2.0 -> v0.2.3)
3 years ago
9345d840be
root path for the base domain is wrong ( #1189 )
...
* root path for the base domain
* Fix path when running in a container
Co-authored-by: Slavi Pantaleev <slavi@devture.com>
3 years ago
a8373d6bd4
Update main.yml
...
Fixes an issue related to https://github.com/anoadragon453/matrix-reminder-bot/issues/86
3 years ago
8b304445e5
Upgrade hydrogen (v0.2.0 -> v0.2.3)
3 years ago
5209a17da1
migrate from ntp to chrony
3 years ago
70cb27138c
Upgrade Element (1.7.32 -> 1.7.33)
3 years ago
b3793f3595
Masked TARGETARCH via docker.build.arg directive
3 years ago
3a28100131
Renamed matrix_lottieconverter to matrix_telegram_lottieconverter
3 years ago
7f15787d54
Fixed mautrix-telegram selfbuild not working on non amd64 platforms
3 years ago
f933ba14ae
Fixed self-build functionality for mautrix-signal and added self-build functionality for signald
3 years ago
e90979e91f
Upgrade grafana (8.0.5 -> 8.0.6)
3 years ago
a435c64c13
Merge pull request #1176 from GoMatrixHosting/master
...
GoMatrixHosting v0.5.4
3 years ago
86e4649578
GoMatrixHosting v0.5.5
3 years ago
03006eb5ab
GoMatrixHosting v0.5.5
3 years ago
245986c793
Merge remote-tracking branch 'upstream/master'
3 years ago
f732a75ca5
Added selfbuild functionality to mautrix-signal bridge
3 years ago
c198320f65
feat: update synapse to 1.38.0
3 years ago
2e0eddde9d
Upgrade matrix-corporal (2.1.0 -> 2.1.1)
3 years ago
83b9908c9d
Update to ma1sd v2.5.0
3 years ago
cd54147144
Upgrade grafana (8.0.3 -> 8.0.5)
3 years ago
7a51268dfc
Upgrade certbot & nginx
...
Upgrade certbot (v1.16.0 -> v1.17.0) nginx (1.21.0 -> 1.21.1)
3 years ago
3fa895fe96
Upgrade Element (1.7.31 -> 1.7.32)
3 years ago
f6e0cbe5f3
did i even update this
3 years ago
49455a9ce0
prometheus version 2.28.0 -> 2.28.1
3 years ago
1c938c72fd
GoMatrixHosting 0.5.2
3 years ago
b4d7ab0b53
Merge pull request #1153 from Cadair/worker_prom
...
Add worker metrics to prometheus exporter
3 years ago
b6d71b9da1
Fix self-building for Coturn
...
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1158
3 years ago
1ad9bba88f
Skip importing validate_config task when Synapse is disabled
3 years ago
2aa457efcc
Use a prom variable and not a synapse role variable
3 years ago
7acaef89df
GoMatrixHosting v0.5.1
3 years ago
ccde2362fc
Merge branch 'master' into mjolnir-0.1.18
3 years ago
55452c3068
Update Mjolnir (v0.1.17 -> v0.1.18)
3 years ago
fc16fbda5b
Remove a bunch of redundant Ansible <2.8 self building checks
3 years ago
19ed8d1d17
Upgrade mjolnir (0.1.17 -> 0.1.18) and implement self building
3 years ago
7b2211da8e
remove jibri
3 years ago
6294e58304
Fix Content-Security-Policy for Element
...
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1154
According to
https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy ,
having both a header and the `<meta>`-tag provided by Element itself is
not a problem. The 2 CSP policies get combined.
3 years ago
09ee5ce52e
we index from 0 apparently
3 years ago
3d063f6ace
make them show as jobs in grafana
3 years ago
5df4d68829
Make federation domain customizable
3 years ago
7b52e6ad5e
Add worker metrics to prometheus exporter
3 years ago
c9d73c6606
Updating to latest synapse release (performance regression)
...
https://github.com/matrix-org/synapse/releases/tag/v1.37.1
3 years ago
d338090f00
postgres minor updates
3 years ago
3da4b684a5
Upgrade Synapse (1.36.0 -> 1.37.0)
3 years ago
eb5619fd4b
Update IRC bridge
3 years ago
7578a355c4
heisenbridge fix service name
3 years ago
8a369f61f3
Merge branch 'spantaleev:master' into jitsi-fix
3 years ago
ddbb4b2acc
Update main.yml
...
update to v0.2.0
3 years ago
2d740dbebd
Mount /data in matrix-redis container
...
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1140
3 years ago
2b881e245b
Update prometheus v2.27.1 -> v2.28.0
3 years ago
0cc17ab2ca
matrix_jitsi_jicofo_component_secret validation
3 years ago
f2f1b20e44
jicofo client proxy connection
3 years ago
b132941e71
Merge branch 'spantaleev:master' into jitsi-fix
3 years ago
18533b5000
Merge pull request #1135 from sakkiii/patch-1
...
Coturn update 4.5.2 -> 4.5.2-r2
3 years ago
d019e9078a
Remove unused variables from mx-puppet-* bridges
...
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1131
3 years ago
6ede9c8cd6
network-alias added to fix domains
3 years ago
d9e943aaaa
minor fix
3 years ago
0c8a3c401f
jibri service
3 years ago
04805f35a7
Coturn update 4.5.2 -> 4.5.2-r2
3 years ago
b19fa3acb2
Upgrade Element (1.7.30 -> 1.7.31)
3 years ago
1250208907
whitespaces
3 years ago
c0cd2a3c93
JICOFO_RESERVATION_ENABLED contains whitespaces.
3 years ago
f8be36327c
jibri service
3 years ago
3e011bafd5
jibri env
3 years ago
8af2d818b1
domain_fix
3 years ago
2ca92b76b6
stable-5963
3 years ago
5a1dabe14f
Bump exim-relay Docker image tag
...
The new one is based on Alpine 3.14, instead of Alpine 3.13.
3 years ago
282844209a
Merge pull request #1105 from blaztinn/centos-stream-8
...
Add support for CentOS (Stream) 8
3 years ago
a790096adf
matrix_mx_puppet_slack_client_id deprecated
3 years ago
ed078998b5
deprecated
3 years ago
efa7486b88
Merge pull request #1127 from sakkiii/patch-3
...
Content-Security-Policy For Element Web
3 years ago
b826171139
Update grafana 8.0.2 -> 8.0.3
4 years ago
0217644b48
Content-Security-Policy For Element Web
...
https://github.com/vector-im/element-web#configuration-best-practices
4 years ago
3dd32d2512
Update worker endpoints
...
Should have been part of 9daeb39710
4 years ago
9daeb39710
Upgrade Synapse (1.35.1 -> 1.36.0)
4 years ago
4fb1134ad1
GoMatrixHosting v0.5.0
4 years ago
a7fcb7c04d
Merge pull request #1122 from sakkiii/patch-2
...
update hydrogen v0.1.56 -> v0.1.57
4 years ago
4cd5835e11
update hydrogen v0.1.56 -> v0.1.57
...
https://github.com/vector-im/hydrogen-web/releases/tag/v0.1.57
4 years ago
08d1a5c2e7
Update grafana 8.0.0 -> 8.0.2
4 years ago
72bc9b5cfc
Add support for CentOS (Stream) 8
4 years ago
1cf4d5ea7f
Upgrade Redis (6.0.10 -> 6.2.4)
4 years ago
963f38ee7b
Upgrade certbot (v1.14.0 -> v1.16.0)
4 years ago
2e8a2bdf7d
Add empty default for jitsi-prosody modules
4 years ago
2886dc3939
Add module configuration to jitsi-prosody env file
4 years ago
6c9c78ddae
Merge pull request #1112 from sakkiii/patch-2
...
coturn update
4 years ago
be1d1d0b7c
matrix_grafana_content_security_policy_customized default false
4 years ago
2d9ba82337
Update element 7.5.7 -> 8.0.0
4 years ago
1cc1202df2
update coturn
4 years ago
77fd1bff22
Update element 1.7.29 -> 1.7.30
4 years ago
fa76c1ee5b
Do not run self-build Ansible version-check, if component not enabled
...
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1108
4 years ago
bec9eaeb50
Merge pull request #1108 from tommes0815/fix-hydrogen-for-ansible2.7
...
fix error when running with Ansible 2.7 in the hydrogen setup
4 years ago
3c05cc04bc
Update IRC appservice
4 years ago
7f4e71b22a
fix error when running with Ansible 2.7 in the hydrogen setup
...
Without this the hydrogen task would fail for Ansible 2.7 even when hydrogen is not enabled.
4 years ago
122a92fa1c
GoMatrixHosting v0.4.9 update
4 years ago
b1f1c28ef0
Upgrade Synapse (1.34.0 -> 1.35.0)
4 years ago
ad7bbd6442
merge upstream
4 years ago
6f40d78353
fix random edits to upstream
4 years ago
ea6e344d05
merge upstream
4 years ago
85777e8f96
merge with upstream
4 years ago
1ed0857019
Fix syntax error
...
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1024
4 years ago
4a4a7f136e
changes added to hydrogen client
4 years ago
25e67b51d1
Merge branch 'spantaleev:master' into master
4 years ago
3436f9c10a
rename to matrix_nginx_proxy_hsts_preload_enabled
4 years ago
0648b1b618
Upgrade Element (1.7.28 -> 1.7.29)
4 years ago
7cc5328ede
Comments & Ref
4 years ago
df2d91970d
matrix_nginx_proxy_xss_protection
4 years ago
d4c7a90b5c
Merge pull request #1076 from Eagle-251/Jitsi-Prosody-OwnNginxCompatibility
...
Allow Jitsi XMPP websocket support for users using own webserver.
4 years ago
409cd2b9a3
Source port binding from group vars in line other components
4 years ago
ef6a7e051c
Fix missing port binding.
4 years ago
1bb6ed97ae
Make port bindings default for those disabling nginx proxy
...
I changed the conditional statement in prosody systemd template to bind the localhost port by default if people have set ```matrix_nginx_proxy_enabled == false ```.
Hopefully that should make it the default behaviour now.
4 years ago
3c0452ff5a
Remove unnecessary bind for config.json, use proper nginx.conf
4 years ago
4a772e50f4
Allow Jitsi XMPP webscoket support for users using own webserver.
...
Added:
- Conditional localhost Port bindings for Jitsi Prosody systemd template
- Added variable to main.yml to allow overriding from vars.yml
4 years ago
6f80292745
Add OCSP stapling support and other SSL optimizations to Hydrogen vhost
...
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1061
and https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1057
4 years ago
d0de21ab34
Delete Hydrogen nginx configuration file when disabled
4 years ago
ac4ede20af
Add docs
4 years ago
1633f61018
Only install config.json when self building
4 years ago
04548f8df2
Merge branch 'master' into hydrogen
4 years ago
9437f78c9e
Build using custom config.json, add CSP, update to 0.1.53
4 years ago
47b4608b96
Fail in a friendlier way when trying to self-build on Ansible <= 2.8
...
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1070
Related discussion here: 1ab507349c (commitcomment-51108407)
4 years ago
1ab507349c
Fix self-building for various components on Ansible < 2.8
...
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1070
4 years ago
66615c43a3
Merge pull request #1065 from sakkiii/patch-1
...
Update grafana (7.5.6->7.5.7)
4 years ago
3dcbed6353
roles/matrix-grafana: Set root_url in granafa.ini
4 years ago
8529ca4c17
Update grafana (7.5.6->7.5.7)
4 years ago
073d920a62
Merge pull request #1061 from sakkiii/ssl_enhancement
...
Optimize SSL session
4 years ago
544915ff76
Add Heisenbridge
4 years ago
21eb39f986
Mention matrix_common_after_systemd_service_start_wait_for_timeout_seconds in failure message
...
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1062
4 years ago
ee46fabdca
Make waiting time for --tags=start configurable
...
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1062
4 years ago
e9b878b9e9
Optimize SSL session
4 years ago
e6afa05f7b
Enable OCSP stapling for the federation port
...
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1057
Not sure if this is beneficial though.
4 years ago
57a6a98a50
Fix incorrect SSL certificate path
...
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1057
4 years ago
b9c4e8ce16
Merge pull request #1057 from sakkiii/ssl_staple
...
Enable OCSP Stapling
4 years ago
d31b55b2a7
SSL-enabled block only
4 years ago
400371f6dd
Updated Element version (1.7.27 -> 1.7.28)
4 years ago
d156c8caa2
Upgrade Synapse (1.33.2 -> 1.34.0)
4 years ago
e4dd933cf0
Make missing /_synapse/admin correctly return 404 responses
...
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1058
We may try to capture such calls and return a friendlier response (HTML
or JSON) saying "The Synapse Admin API is not enabled", but that may not
be desirable.
For now, we stick to what "upstream" recommends: "simply
don't proxy these APIs", which should lead to the same kind of 404 that
we have now.
See here: 6660912226/docs/reverse_proxy.md (synapse-administration-endpoints)
4 years ago
2c3da6599b
Added warning
4 years ago
0dd4459799
matrix_nginx_proxy_ocsp_stapling_enabled variable added
4 years ago
c05021640d
Enable OCSP Stapling
4 years ago
ca361af616
Add Hydrogen
4 years ago
b191e461a5
Merge branch 'spantaleev:master' into master
4 years ago
4bd7d8b5e4
Update grafana (7.5.5->7.5.6)
4 years ago
d5cd3d443d
Update prometheus (2.26.0->2.27.0)
4 years ago
322b750aad
Merge branch 'spantaleev:master' into master
4 years ago
f481b1a84b
Upgrade matrix-mailer (4.94.2-r0 -> 4.94.2-r0-1)
...
Related to https://github.com/devture/exim-relay/pull/9
4 years ago
8e6f1876f5
Switch to :latest version of synapse-admin
...
Related to https://github.com/Awesome-Technologies/synapse-admin/issues/132
We should switch back when >0.8.0 gets released.
4 years ago
8fc55b30c5
Upgrade Synapse (1.33.1 -> 1.33.2)
...
This release fixes a denial of service attack (CVE-2021-29471) against Synapse's push rules implementation. Server admins are encouraged to upgrade.
Ref: https://github.com/matrix-org/synapse/releases/tag/v1.33.2
4 years ago
2d4b039c55
Merge pull request #1046 from GoMatrixHosting/master
...
GoMatrixHosting v0.4.6
4 years ago
2b4bada72a
fix conditional
4 years ago
0adcef65e6
fix conditional
4 years ago
f70102e40c
no dashes in usernames
4 years ago
f4657b2cdb
Upgrade Element (1.7.26 -> 1.7.27)
4 years ago
4e6f6e179b
GMH 0.4.6 update
4 years ago
29cf6a0087
Merge branch 'spantaleev:master' into master
4 years ago
3dcc006932
Fix self-building for Coturn
...
689dcea773https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1032
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1023
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1009
4 years ago
33f0074862
Upgrade matrix-mailer (4.94-r0 -> 4.94.2-r0)
...
Related to https://github.com/devture/exim-relay/issues/6
4 years ago
c19508087a
Merge pull request #1036 from sakkiii/grafana-csp
...
Grafana csp template backward compatible with older browsers
4 years ago
a198b87455
Upgrade synapse-admin (0.7.2 -> 0.8.0)
...
Related to https://github.com/Awesome-Technologies/synapse-admin/issues/132
4 years ago
867ebb52ab
Merge pull request #1037 from pushytoxin/jitsi-5765-1
...
Update Jitsi (5142 -> 5765-1)
4 years ago
bb0810302d
Merge branch 'spantaleev:master' into master
4 years ago
61220ea487
Upgrade Synapse (1.33.0 -> 1.33.1)
4 years ago
9174448e5e
get rid of this {% else %}
4 years ago
0d5fe2d9f7
Update roles/matrix-grafana/templates/grafana.ini.j2
...
Co-authored-by: Aaron Raimist <aaron@raim.ist>
4 years ago
b10655ebb1
Jitsi XMPP Websocket support
...
Jitsi-meet enabled websockets by default, claiming better reliability.
Matrix-nginx-proxy configuration has been set up according to the
Prosody documentation: https://prosody.im/doc/websocket
4 years ago
116bcaa13b
Update jitsi to stable-5765-1
...
Changelog:
https://github.com/jitsi/docker-jitsi-meet/blob/stable-5765-1/CHANGELOG.md
4 years ago
37de7fc96a
Updated Reference
4 years ago
303de935d5
grafana CSP backward compatible with older browsers
4 years ago
d4d1e2e922
Upgrade Synapse (1.32.2 -> 1.33.0)
4 years ago
b09a805939
Merge pull request #1031 from thedanbob/nginx-1.20.0
...
Update nginx (1.19.10 -> 1.20.0)
4 years ago
6fdc71c40b
Merge pull request #1030 from thedanbob/grafana-7.5.5
...
Update grafana (7.5.4 -> 7.5.5)
4 years ago
cfaa3e598a
Update nginx (1.19.10 -> 1.20.0)
4 years ago
bec5933db4
Update grafana (7.5.4 -> 7.5.5)
4 years ago
067b61e779
GoMatrixHosting v0.4.5 update
4 years ago
2409c33ea2
Upgrade Element (1.7.25 -> 1.7.26)
4 years ago
49cb2635a2
updated matrix-sms-bridge
4 years ago
a14bf6c2ed
GoMatrixHosting v0.4.4 update
4 years ago
689dcea773
Fix self-building for Coturn
...
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1023
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1009
4 years ago
40fe6bd5c1
variable matrix_nginx_proxy_hsts_preload_enable added
4 years ago
389dc26615
Fix Synapse generic worker balancing
...
Potentially fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1022
4 years ago
5b4fdf9b87
Merge branch 'master' of https://github.com/sakkiii/matrix-docker-ansible-deploy
4 years ago
0ccf0fbf1c
HSTS preload + X-XSS enables
...
**HSTS Preloading:**
In its strongest and recommended form, the [HSTS policy](https://www.chromium.org/hsts ) includes all subdomains, and indicates a willingness to be “preloaded” into browsers:
`Strict-Transport-Security: max-age=31536000; includeSubDomains; preload`
**X-Xss-Protection:**
`1; mode=block` which tells the browser to block the response if it detects an attack rather than sanitising the script.
4 years ago
3564635f0f
Merge branch 'master' into master
4 years ago
29bba5161b
Element More security headers
...
More Production ready nginx headers for Matrix client element.
4 years ago
f6b371164c
Remove useless variable
4 years ago
62c0587b6a
Use Alpine-based Coturn
4 years ago
72a7cb4145
Merge pull request #1018 from GoMatrixHosting/master
...
GoMatrixHosting v0.4.3
4 years ago
e3fa3e12bc
Upgrade Synapse (1.31 -> 1.32.2)
4 years ago
50d7209c5b
GMH v04.3
4 years ago
378fabf177
Revert "Upgrade Synapse (1.31 -> 1.32.1)"
...
This reverts commit 1fb54a37cbhttps://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1017
Related to
https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1010
4 years ago
1fb54a37cb
Upgrade Synapse (1.31 -> 1.32.1)
...
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1010
4 years ago
d691cc0920
Move variable definition a bit
4 years ago
e00ef04b57
Add opt-out-of-FLoC headers by default
4 years ago
42783972fd
Merge pull request #1011 from aaronraimist/synapse-admin
...
Upgrade synapse-admin (0.7.0 -> 0.7.2)
4 years ago
ca786cc343
Revert "Upgrade Synapse (1.31 -> 1.32)"
...
This reverts commit f825c7c263https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1010
4 years ago
bb64b80697
Upgrade synapse-admin (0.7.0 -> 0.7.2)
4 years ago
f825c7c263
Upgrade Synapse (1.31 -> 1.32)
4 years ago
7eda6a3c12
Merge pull request #1009 from thedanbob/coturn-official
...
Switch to official coturn image
4 years ago
adcecaffaf
Fix connectivity between prometheus and prometheus-node-exporter
...
Expected to have regressed after https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1008
This patch comes with its own downsides (as described in the comments
for matrix_prometheus_node_exporter_container_http_host_bind_port),
but at least there's:
- no security issue
- metrics remain readable from matrix-prometheus (even if the network metrics are inaccurate)
A better patch is certainly welcome.
4 years ago
b2ca1f2829
Add capability required by new image
4 years ago
398b9f5d66
Merge pull request #1008 from sakkiii/master
...
security** node-exporter data & port publicly exposed
4 years ago
29177d4922
Switch to official coturn docker image
4 years ago
88a30fb5ed
security** node-exporter data & port publicly exposed
4 years ago
0f9a455719
Revert "security** node-exporter data & port publicly exposed"
...
This reverts commit d0cd709c08
4 years ago
d0cd709c08
security** node-exporter data & port publicly exposed
4 years ago
4a1739f604
Merge pull request #1007 from teutat3s/fix/nginx-dont-send-version
...
Don't expose nginx version with each response
4 years ago
2bf7c26cfa
Don't expose nginx version with each response
4 years ago
c565e72f0d
Merge pull request #1003 from sakkiii/patch-2
...
updated matrix_grafana_docker_image to v7.5.4
4 years ago
51b46697c5
Merge pull request #1005 from sakkiii/master
...
Improve security for grafana
4 years ago
f04614a993
Fix prometheus network for ansible < 2.8
4 years ago
badd81e0ec
Revert "Attempt to fix docker_network result discrepancy between Ansible versions"
...
This reverts commit 68ca81c8c2
4 years ago
1958d0792d
Update matrix-client-element.conf.j2
4 years ago
b6d45c5fd8
Merge branch 'master' of https://github.com/sakkiii/matrix-docker-ansible-deploy
4 years ago
05042f5ff1
Improve security grafana
...
- duplicate X-Content-Type-Options
- X-Frame-Options header
- Referrer-Policy [Might consider adding variable]
- Secure flag with cookies
- matrix_grafana_content_security_policy variable for [Content Security Policy](https://grafana.com/docs/grafana/latest/administration/configuration/#content_security_policy )
4 years ago
27377e099d
updated matrix_grafana_docker_image to v7.5.4
...
Latest stable grafana version is [7.5.4 (2021-04-14)](https://github.com/grafana/grafana/releases/tag/v7.5.4 )
4 years ago
68ca81c8c2
Attempt to fix docker_network result discrepancy between Ansible versions
...
Supposedly fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/907
4 years ago
9c1f41eadf
Merge pull request #1002 from thedanbob/node-exporter-1.1.2
...
Update prometheus node exporter (1.1.0->1.1.2)
4 years ago
8a550ce67c
Update prometheus (2.24.1->2.26.0)
4 years ago
83cc5c9e6a
Update prometheus node exporter (1.1.0 -> 1.1.2)
4 years ago
5dc642ace1
Nginx element web: XSS protection & nosniff header
...
X-XSS-Protection: 1; mode=block; header, for basic XSS protection in legacy browsers.
X-Content-Type-Options: nosniff header, to disable MIME sniffing
4 years ago
fcb9e9618a
Make Coturn TLSv1/v1.1 configurable
...
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/999
4 years ago
540416e32d
Disable support for TLS 1.0 and TLS 1.1
...
These old versions of TLS rely on MD5 and SHA-1, both now broken, and contain other flaws. TLS 1.0 is no longer PCI-DSS compliant and the TLS working group has adopted a document to deprecate TLS 1.0 and TLS 1.1.
4 years ago
89cb5a3d7a
GMH v0.4.2 update
4 years ago
f41bfb69d2
update survey template formatting
4 years ago
814bdf5a88
update spelling
4 years ago
fbe22289bd
merge with upstream and testing branch
4 years ago
995c483856
Merge pull request #962 from aaronraimist/mjolnir
...
Add mjolnir
4 years ago
f183add44d
Merge pull request #977 from aaronraimist/simple-antispam
...
Upgrade synapse-simple-antispam (0.0.1 -> 0.0.3)
4 years ago
81dddd2e25
Upgrade Element (1.7.24 -> 1.7.24.1)
4 years ago
c43bd412dd
Upgrade synapse-simple-antispam (0.0.1 -> 0.0.3)
4 years ago
1ecee625d5
Depend on more services, add a delay
4 years ago
a88391edf5
Merge pull request #972 from JohannesKleine/nginx-config
...
matrix-nginx-proxy: add custom nginx options to nginx.conf.j2
4 years ago
0b5e903693
Updates to mautrix-signal config
...
See these last commits:
tulir/mautrix-signal@4fc34330c1f6947aece67863b0d04da34c776f80
tulir/mautrix-signal@64bc5c36a509ba435a0b01cf44afb1b5d2642efd
tulir/mautrix-signal@ddda1666d41d28750cc59d070e4388b24add6ad9
4 years ago
fcd66b2889
rename variables
4 years ago
8ba1105010
rename variable
4 years ago
3a772f2f65
matrix-nginx-proxy: add custom nginx options to nginx.conf.j2
4 years ago
93960b70be
Do not fail if `_matrix-identity` DNS SRV record missing
...
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/963
This also simplifies Prerequisites, which is great.
It'd be nice if we were doing these checks in some optional manner
and reporting them as helpful messages (using
`matrix_playbook_runtime_results`), but that's more complicated.
I'd rather drop these checks completely.
4 years ago
5e1cf7f8b9
Upgrade Element (1.7.23 -> 1.7.24)
4 years ago
9409588513
Fix variable name typo (take 2)
...
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/970
4 years ago
JokerGermany
Toni Spets
Slavi Pantaleev
sakkiii
teutat3s
b
b
PC-Admin
Patrick C. F. Ernzer
Thom Wiggers
throwawayay
Kim Brose
Wm Salt Hale
Luke
Michael Collins
Aaron R
Samonitari
Alexandar Mechev
Oli
Jan
Colin Shea
WobbelTheBear
Krisztian Szegi
Catalan Lover
sakkiii
Wolfgang Winter
Joseph Walton-Rivers
Thom Wiggers
nono
AtomHare
pushytoxin
Wolfgang Winter
Dan Arnfield
Jaffex
Sebastian Gumprich
Sebastian Gumprich
Nate
Hardy Erlinger
Toorero
Richard Meyer
Janar Juusu
Markus
Neutron
Stuart Mumford
sak
oxmie
Davy Landman
Michael Sasser
hanthor
Marcel Ackermann
Blaž Tomažič
SkepticalWaves
rakshazi
Thomas Kühne
ewang
Eagle-251
Tobias K
Béla Becker
benkuly
Michael
Christoph Johannes Kleine