Scott Crossen
59bb6b2971
responded to reviewer comments
4 years ago
Scott Crossen
e894befd87
Updates to reviewer comments
4 years ago
Slavi Pantaleev
350c39d745
Update comment
4 years ago
Slavi Pantaleev
ef68d3d296
Add support for reverse-proxying /_synapse/oidc
...
This broke in 63a49bb2dc
.
Proxying the OpenID Connect endpoints is now possible,
but needs to be enabled explicitly now.
Supersedes #702 (Github Pull Request).
This patch builds up on the idea from that Pull Request,
but does things in a cleaner way.
4 years ago
Slavi Pantaleev
5c91e56898
Upgrade Synapse (v1.22.0 -> v1.22.1)
4 years ago
Aaron Raimist
c33d007306
Switch to the new vectorim/element-web Docker image
4 years ago
Marcel Partap
cce90b187a
synapse workers: fix undefined variable cases when removing workers
4 years ago
Slavi Pantaleev
c1c6eaefff
Upgrade Element (1.7.10 -> 1.7.12)
4 years ago
Slavi Pantaleev
9a46647010
Make https://matrix.DOMAIN/ redirect to https://element.DOMAIN/
...
Fixes #696 (Github Issue)
4 years ago
Slavi Pantaleev
4700e80389
Raise standalone default Matrix Client API client_max_body_size
...
We do this to match Synapse's new default "max_upload_size" (50MB).
This `matrix_nginx_proxy_proxy_matrix_client_api_client_max_body_size_mb`
default value only affects standalone usage of the `matrix-nginx-proxy`
role. When the role is used in the context of the playbook,
the value is dynamically assigned from `group_vars/matrix_servers`.
Somewhat related to #692 (Github Issue).
4 years ago
Marcel Partap
e078e29ef8
synapse workers: fix self name in workers-doc-to-yaml.awk script
4 years ago
Slavi Pantaleev
ef07aa8e5d
Prevent certain nginx location blocks from being ignored
...
The regex introduced in 63a49bb2dc
seems to take precedence
over the bare location blocks, causing a regression.
> It is important to understand that, by default, Nginx will serve regular expression matches in preference to prefix matches.
> However, it evaluates prefix locations first, allowing for the administer to override this tendency by specifying locations using the = and ^~ modifiers.
Source: https://www.digitalocean.com/community/tutorials/understanding-nginx-server-and-location-block-selection-algorithms
4 years ago
Marcel Partap
2d1b9f2dbf
synapse workers: reworkings + get endpoints from upstream docs via awk
...
(yes, a bit awkward and brittle… xD)
4 years ago
Slavi Pantaleev
70f0b97a0a
Upgrade Synapse (v1.21.2 -> v1.22.0)
4 years ago
Slavi Pantaleev
63a49bb2dc
Do not expose /_synapse/admin publicly by default
...
Fixes #685 (Github Issue).
4 years ago
Marcel Partap
87bd64ce9e
Merge remote-tracking branch 'origin/master' into synapse-workers
4 years ago
Marcel Partap
a4125d5446
synapse workers: polishing, cleansing and installation of jq dependency
4 years ago
Marcel Partap
501efee07e
synapse workers: supply systemd with actual worker PIDs (requires jq)
...
also, worker.yaml.j2:
- hone worker_name
- remove worker_pid_file entry (would only be used if worker_daemonize
set to true; also, synapse only knows about the container namespace
and thus can not provide the required host-view PID)
4 years ago
Slavi Pantaleev
24c6d7e81f
Upgrade Element (1.7.9 -> 1.7.10)
4 years ago
Scott Crossen
94dcceb7b9
removed intentional delay
4 years ago
Scott Crossen
efeb651789
Removed typo
4 years ago
Scott Crossen
e7d79a95dc
removed platform-specific stuff
4 years ago
Scott Crossen
19721be8b1
removed dhcp option
4 years ago
Scott Crossen
de1511b4bb
Fixed valdiation
4 years ago
Scott Crossen
806f98447c
Removed directory creation
4 years ago
Scott Crossen
51cca4c312
Added containerization
4 years ago
Tobias Küchel
1cf5b1d80f
e2ee_backup: rename variables to be consistent with naming scheme
4 years ago
Tobias Küchel
5158fa4df9
e2ee_backup_methods: rather leave the default empty, so that the system default may apply
4 years ago
Tobias Küchel
8f7e21892d
fix indentation, updated to proposed changes from Slavi: no more ifdef
4 years ago
Tobias Küchel
4cfa112755
update default backup_methods as proposed by the system anyway
4 years ago
Tobias Küchel
6599204334
fix commata not being set when secure_backup_required false
4 years ago
Tobias Küchel
48f929dc91
add variables for secure_backup_required and secure_backup_setup_methods
4 years ago
Slavi Pantaleev
f7ecc7a2a5
Upgrade Synapse (v1.21.1 -> v1.21.2)
4 years ago
jgbresson
640166e4c3
Upgrade Element (1.7.8 -> 1.7.9)
4 years ago
Dan Arnfield
b65bfc38ce
Update nginx (1.19.2 -> 1.19.3)
4 years ago
Scott Crossen
53bc7a77e1
fixed EOF issues
4 years ago
Scott Crossen
fa5d85426b
Renamed systemd descriptions for all bridges
4 years ago
Scott Crossen
1f988969a5
Added role for dynamic dns
4 years ago
Slavi Pantaleev
5abd511368
Upgrade Synapse (v1.21.0 -> v1.21.1)
4 years ago
Slavi Pantaleev
d250727e8b
Upgrade certbot (1.7.0 -> 1.9.0)
4 years ago
Aaron Raimist
78529cbd47
Upgrade Synapse (v1.20.1 -> v1.21.0)
4 years ago
Marcel Partap
d2e61af224
Add worker_name to synapse worker config template
...
& restrict federation listener; frontend_proxy / user_dir don't need it
4 years ago
Marcel Partap
36e9be6092
matrix_synapse_workers_{avail,enabled}_list: sort non-generic workers
...
.. alphabetically and put those not documented as multi-instance
capable on ports ending on zero.
4 years ago
Marcel Partap
e9241f5fb9
Improve synapse-workers systemd service template
...
Is the PID magic gonna work? or will it need an ExecStartPost hack..
4 years ago
Marcel Partap
40024e9b81
Prevent workers failing if their config doesn't exist
...
- cherry-pick "Ensure worker config exists in systemd service (#7528 )"
from synapse d74cdc1a42e8b487d74c214b1d0ca575429d546a:
"check that the worker config file exists instead of silently failing."
4 years ago
Marcel Partap
93a8ea7e4a
Merge remote-tracking branch 'master' into feature/add-worker-support
4 years ago
Fanch
1a9cafa3a3
add run-docker-prune command
4 years ago
Slavi Pantaleev
6a72e3fa54
Try to make importing SQLite from older Synapse version work
...
If the SQLite database was from an older version of Synapse, it appears
that Synapse would try to run migrations on it first, before importing.
This was failing, because the file wasn't writable.
Hopefully, this fixes the problem.
4 years ago
Slavi Pantaleev
23daec748c
Require Ansible v2.7 or newer (because of items2dict and dict2items)
...
Interestingly, no one has reported this failure before #662 (Github
Issue).
It doesn't make sense to keep saying that we support such old Ansible
versions, when we're not even testing on anything close to those.
Time is also passing and such versions are getting more and more
ancient. It's time we bumped our requirements to something that is more
likely to work.
4 years ago
Slavi Pantaleev
07fa8404bf
Upgrade matrix-corporal (1.10.1 -> 1.11.0)
4 years ago
Slavi Pantaleev
9e8c14bf65
Merge pull request #660 from clemsos/master
...
Element web : update welcome page template
4 years ago
Dan Arnfield
3a3383fada
Add support for postgres 13
4 years ago
Slavi Pantaleev
43c5f3ec6e
Do not create /home/matrix when creating the matrix user
4 years ago
Clement Renaud
ac3ba1d919
element web : update welcome page template
4 years ago
Slavi Pantaleev
7eb8192a51
Comlain about version requirement on Ansible v1
...
I don't believe Ansible v1 would even go as far as executing this
sanity check, but.. Adding an extra defensive check for completeness.
4 years ago
Slavi Pantaleev
3d702fe03b
Avoid set_fact with error message to prevent confusion
4 years ago
Slavi Pantaleev
3818d82852
Upgrade Element (1.7.7 -> 1.7.8)
4 years ago
Slavi Pantaleev
263727095d
Merge pull request #657 from cnvandijk/feature-client-well-known
...
Client well known compatibility
4 years ago
Slavi Pantaleev
3e2f0a4240
Upgrade matrix-synapse-admin (0.4.1 -> 0.5.0)
...
Related to #658 (Github Issue).
4 years ago
Chris van Dijk
b9c8d059d0
Support both the im.vector.riot and io.element variants in client .well-known
...
According to the docs, "e2ee" is already under "io.element":
https://github.com/vector-im/element-web/blob/develop/docs/e2ee.md#disabling-encryption-by-default
however "jitsi" is still under "im.vector.riot":
https://github.com/vector-im/element-web/blob/develop/docs/jitsi.md#configuring-element-to-use-your-self-hosted-jitsi-server
For now let's just maintain backward and forward compatibility for both
settings since the client version is out of the control of this
playbook.
4 years ago
Chris van Dijk
f6b0f0a477
Rename matrix_riot_jitsi_preferredDomain and matrix_riot_e2ee_default to Element
4 years ago
Slavi Pantaleev
9fba46e694
Merge pull request #655 from aaronraimist/element-showLabs
...
Allow configuration of Element's bug_report_endpoint_url and showLabsSettings
4 years ago
Aaron Raimist
dc2def914e
Allow configuration of Element's bug_report_endpoint_url and showLabsSettings
...
showLabsSettings is the new enableLabs I guess. enableLabs doesn't seem to do anything anymore. It had been deprecated for a while.
This PR also removes @riot-bot:matrix.org as the default welcome_user_id since it doesn't exist anymore.
4 years ago
Slavi Pantaleev
e68450f094
Upgrade Synapse (v1.20.0 -> v1.20.1)
4 years ago
Slavi Pantaleev
329fef048f
Upgrade matrix-corporal (1.10.0 -> 1.10.1)
4 years ago
Slavi Pantaleev
32ac4706cb
Upgrade matrix-corporal (1.9.0 -> 1.10.0)
4 years ago
Slavi Pantaleev
dd217137b6
Upgrade Synapse (v1.19.3 -> v1.20.0)
4 years ago
Slavi Pantaleev
65e22a6888
Upgrade Synapse (v1.19.2 -> v1.19.3)
4 years ago
Slavi Pantaleev
6db3a46f88
Merge pull request #650 from dwiegreffe/master
...
New docker image appservice-slack
4 years ago
Daniel Wiegreffe
b3926e7cca
Update main.yml
4 years ago
Max Klenk
fc2edcbecf
fix media routing
4 years ago
Max Klenk
132daba1af
fix worker routes
4 years ago
Slavi Pantaleev
e10e3e354d
Upgrade Synapse (v1.19.1 -> v1.19.2)
4 years ago
Dan Arnfield
faa96ca0c3
Update element (1.7.5 -> 1.7.7)
4 years ago
Daniel Wiegreffe
8f41041f6d
replacement of the docker image for appservice-slack to the officially maintained image
4 years ago
Scott Crossen
b24333dd0f
Use the same naming convention as the other mx-puppet suite.
4 years ago
Slavi Pantaleev
6e8a39119b
Update matrix-reminder-bot (0.1.0 -> 0.2.0)
4 years ago
0hlov3
c19abe4a76
Changes matrix_dimension_integrations_ui_url from /riot to /element https://dimension.t2bot.io/
4 years ago
Max Klenk
1e68d8b2e5
allow to pass arguments to the postgres process
4 years ago
Max Klenk
880025324a
fix redis config if no password is set
4 years ago
Max Klenk
4fdfc0a34f
add missing ratelimiting options required for load testing
4 years ago
Max Klenk
9a3d84b931
Merge branch 'master' into feature/add-worker-support
4 years ago
Max Klenk
a25a429a52
add redis support
4 years ago
Slavi Pantaleev
5bb2c43502
Add support for enabling Jitsi lobby
...
Related to #643 (Github Issue)
4 years ago
Slavi Pantaleev
2a1ec38e3a
Stop using Ansible's cron module
...
This is mainly to address SSL renewal not working for us due to:
- https://github.com/ansible/ansible/issues/71213
- https://github.com/ansible/ansible/pull/71207
Using the cron module was hacky anyway. We shouldn't need an extra
level of buggy abstraction to manage a cronjob file.
4 years ago
Slavi Pantaleev
bed16fd065
Upgrade Element (1.7.4 -> 1.7.5)
4 years ago
Slavi Pantaleev
6def66940f
Fix broken cover photo for matrix-registration
4 years ago
Slavi Pantaleev
da38a7869f
Add matrix-registration support
4 years ago
Slavi Pantaleev
a456e3a9e7
Surface certain messages at the end of playbook execution
...
Fixes #106 (Github Issue).
4 years ago
Slavi Pantaleev
e3dca2f66f
Try to avoid Docker logs growing too much for one-off containers
...
We recently had a report of the Postgres backup container's log file
growing the size of /var/lib/docker until it ran out of disk space.
Trying to prevent similar problems in the future.
4 years ago
Max Klenk
06bc430c7c
refactor to use new workers and routes they serve
4 years ago
Max Klenk
53ccc783b7
remove duplicated key
4 years ago
Max Klenk
59d1fb76b6
only apply worker redirects if workers are enabled
4 years ago
Max Klenk
567d0318b0
Merge branch 'synapse-workers' into feature/add-worker-support
4 years ago
Slavi Pantaleev
3c285bc6f5
Install lsb-release on Debian distros if unavailable
...
Certain more-minimal Debian installations may not have
lsb-release installed, which makes the playbook fail.
We need lsb-release on Debian, so that ansible_lsb
could tell us if this is Debian or Raspbian.
4 years ago
Slavi Pantaleev
6e9600ffec
Upgrade Synapse (v1.19.0 -> v1.19.1)
4 years ago
Slavi Pantaleev
daf13107a0
Add support for rust-synapse-compress-state
4 years ago
Slavi Pantaleev
b4a549b772
Upgrade Element (1.7.3 -> 1.7.4)
4 years ago
Slavi Pantaleev
9952ec6c16
Upgrade Synapse (v1.18.0 -> v1.19.0)
4 years ago
Slavi Pantaleev
fc1655cd4b
Merge pull request #633 from thedanbob/certbot-1.7.0
...
Update certbot (1.6.0 -> 1.7.0)
4 years ago