Slavi Pantaleev
2da40c729a
Do not expose server room directory by default
...
Prompted by: https://matrix.org/blog/2019/11/09/avoiding-unwelcome-visitors-on-private-matrix-servers
This is a bit controversial, because.. the Synapse default remains open,
while the general advice (as per the blog post) is to make it more private.
I'm not sure exactly what kind of server people set up and whether they
want to make the room directory public. Our general goal is to favor
privacy and security when running personal (family & friends) and corporate
homeservers, both of which likely benefit from having a more secure default.
5 years ago
Slavi Pantaleev
50614f1bad
Simplify Prerequisites a bit
...
Don't mention systemd-journald adjustment anymore, because
we've changed log levels to WARNING and Synapse is not chatty by default
anymore.
The "excessive log messages may get dropped on CentOS" issue no longer
applies to most users and we shouldn't bother them with it.
5 years ago
Mike
4edb1eb131
Update init.yml
...
Removed a set_facts that I have used for tracing down the issue
5 years ago
Michael Haak
5b213e6ad0
Replace constructs appending elements with variables to matrix_synapse_container_extra_arguments. Fixes issue https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/304
5 years ago
Aaron Raimist
c600ff758d
Upgrade riot-web (1.5.2 -> 1.5.3)
5 years ago
Slavi Pantaleev
f0e80218b0
Upgrade Synapse (1.5.0 -> 1.5.1)
5 years ago
Dan Arnfield
80265bfec5
Update riot-web (1.5.0 -> 1.5.2)
5 years ago
recklesscoder
5d3b765241
Actually use matrix_synapse_storage_path
...
matrix_synapse_storage_path is already defined in matrix-synapse/defaults/main.yml (with a default of "{{ matrix_synapse_base_path }}/storage"), but was not being used for its presumed purpose in matrix-synapse.service.j2. As a result, if matrix_synapse_storage_path was overridden (in a vars.yml), the synapse service failed to start.
5 years ago
Slavi Pantaleev
721ca9b83f
Add missing publicUrl configuration for Dimension
...
Discussed in #282 (Github Issue).
5 years ago
Dan Arnfield
9b187eca8f
Update nginx (1.17.4 -> 1.17.5)
5 years ago
Dan Arnfield
f0ce0db7dc
Update synapse (1.4.1 -> 1.5.0)
5 years ago
Slavi Pantaleev
e81837a586
Undo some formatting changes
5 years ago
Noah Fleischmann
1df3d53243
Verbose logging should be off per default
5 years ago
Noah Fleischmann
9728bdffee
Undo auto formatting
5 years ago
Noah Fleischmann
852fceb33f
Add documentation
5 years ago
Noah Fleischmann
c3fb7ebf4c
Add variable for mxisd verbose logging
5 years ago
Slavi Pantaleev
3bf7a7a85e
Upgrade riot-web (1.4.2 -> 1.5.0)
5 years ago
Slavi Pantaleev
e0ea708acc
Upgrade Synapse (1.4.0 -> 1.4.1)
5 years ago
Julian Foad
7ce80bc58e
Quote docker args in case inputs contain spaces
5 years ago
Slavi Pantaleev
e32aaacaa7
Make gzipped SQL dumps by default during --upgrade-postgres
5 years ago
Slavi Pantaleev
29526e7bb1
Add support for backing up / importing all Postgres databases/users
5 years ago
Aaron Raimist
5a2c1a44e4
Upgrade riot-web (1.4.1 -> 1.4.2)
5 years ago
Paul Tötterman
aabb16d78b
Fix spelling ngnix -> nginx
5 years ago
Slavi Pantaleev
9c438a3870
Add support for Postgres v12
5 years ago
Dan Arnfield
b59642950e
Update riot-web (1.4.0 -> 1.4.1)
5 years ago
Slavi Pantaleev
f25696489b
Merge pull request #273 from Sporiff/patch-1
...
Bump riot web version 1.3.6 -> 1.4.0
5 years ago
Slavi Pantaleev
19fb96fa57
Merge pull request #275 from aaronraimist/synapse-1.4.0
...
Upgrade Synapse (1.3.1 -> 1.4.0)
5 years ago
Slavi Pantaleev
a37b96d829
Upgrade Synapse to 1.4.0
5 years ago
Slavi Pantaleev
392f8202bd
Make SAML2 configuration match sample config generated using generate command
5 years ago
Slavi Pantaleev
810d0fb0e4
Make it possible to serve static websites from the base domain
5 years ago
Aaron Raimist
413d9ec143
WIP: Upgrade Synapse (1.3.1 -> 1.4.0rc2)
5 years ago
Ciarán Ainsworth
271d32b866
Bump riot web version 1.3.6 -> 1.4.0
5 years ago
Slavi Pantaleev
1dd1f9602f
Merge pull request #271 from thedanbob/certbot-0.38
...
Update certbot (0.37.1 -> 0.38.0)
5 years ago
Dan Arnfield
c12ca8fff0
Update certbot (0.37.1 -> 0.38.0)
5 years ago
Dan Arnfield
2dd9dc4882
Update nginx (1.17.3 -> 1.17.4)
5 years ago
Slavi Pantaleev
3264024055
Update matrix-corporal (1.5.0 -> 1.6.0)
5 years ago
Slavi Pantaleev
73c90e9513
Try to make Synapse config/key generation respect uid/gid
...
Attempt at fixing #268 (Github Issue)
5 years ago
Dan Arnfield
f076bd2474
Update riot-web (1.3.5 -> 1.3.6)
5 years ago
Slavi Pantaleev
39ae7959bd
Upgrade Telegram bridge (0.6.0 -> 0.6.1)
5 years ago
gusttt
25262fa0e1
Disable docker network tasks in check mode to allow running the playbook in check mode (--check --diff)
5 years ago
Aaron Raimist
b930c29bf0
Upgrade riot-web (1.3.3 -> 1.3.5)
5 years ago
Slavi Pantaleev
68ed2ebefa
Add support for Synapse Simple Antispam
...
Fixes #255 (Github Issue).
5 years ago
Slavi Pantaleev
4b1e9a4827
Add support for configuring Synapse spam_checker setting
5 years ago
Slavi Pantaleev
6b8ca70a0b
Upgrade Exim (4.92.1 -> 4.92.2)
5 years ago
Slavi Pantaleev
14e242aec1
Make matrix-mailer exit more gracefully
5 years ago
Slavi Pantaleev
1784bde226
Ensure Postgres data ownership is correct
...
Fixes #257 (Github Issue)
5 years ago
Slavi Pantaleev
a6d51ebe9b
Force-pull Slack Docker image if :latest
5 years ago
Julian Foad
a5eb845a2d
Fix force-pulling of mautrix-whatsapp
5 years ago
Slavi Pantaleev
f2f3d41649
Make matrix-corporal configuration extensible
...
Fixes #70 (Github Issue).
5 years ago
Slavi Pantaleev
2d4e19326d
Add missing when statement
5 years ago
Slavi Pantaleev
0edd7e8089
Make Riot-web configuration extensible
...
Fixes #71 (Github Issue).
5 years ago
Slavi Pantaleev
c4eebc5355
Add information about community-grouping for the Facebook bridge
5 years ago
Slavi Pantaleev
10a9deba4a
Make Synapse configuration extensible
5 years ago
Slavi Pantaleev
b440d5b73c
Remove some fact definitions during runtime
5 years ago
Slavi Pantaleev
65da600426
Merge branch 'master' into master
5 years ago
Slavi Pantaleev
c8a4d59a81
Merge pull request #251 from Munfred/master
...
Add mautrix-hangouts bridge role and documentation
5 years ago
Slavi Pantaleev
2ef8898421
Add comment
5 years ago
Slavi Pantaleev
97fb71d98c
Change privilege level
5 years ago
Slavi Pantaleev
1bcbc4a9ba
Update matrix-corporal (1.4.0 -> 1.5.0)
5 years ago
Slavi Pantaleev
2efcf11ee8
Remove some whitespace
5 years ago
Dan Arnfield
1ce3526bf2
Update riot-web (1.3.2 -> 1.3.3)
5 years ago
Dan Arnfield
42ea3cb0e1
Update synapse (1.3.0 -> 1.3.1)
5 years ago
Slavi Pantaleev
db57618abd
Update nginx and certbot
5 years ago
Slavi Pantaleev
1b2191a0f1
Add new Synapse configuration options (since 1.3.0)
...
Continuation of #246 (Github Pull Request)
5 years ago
Dan Arnfield
7b5e633776
Update synapse (1.2.1 -> 1.3.0)
5 years ago
Slavi Pantaleev
a1afafeb35
Upgrade mxisd (1.4.5 -> 1.4.6)
5 years ago
Slavi Pantaleev
59d807fca7
Ensure auth.clientID is passed as string in Discord configuration
...
Discord client IDs are numeric (e.g. 12345).
Passing them as integers however, causes the Discord bridge's YAML parser
to parse them as integers and its config schema validation will fail.
Fixes #240 (Github Issue)
5 years ago
Dan Arnfield
dc11704c11
Bump postgres versions (11.5, 10.10, 9.6.15)
5 years ago
Slavi Pantaleev
910ffb481c
Update email2matrix (1.0 -> 1.0.1)
5 years ago
Slavi Pantaleev
99f5baa7bb
Fix undefined variable error (matrix_synapse_id_servers_public)
...
This only gets triggered if:
- the Synapse role is used standalone and the default values are used
- the whole playbook is used, with `matrix_mxisd_enabled: false`
5 years ago
Slavi Pantaleev
5b736c416b
Merge pull request #236 from oleg-fiksel/guest-access
...
Added possibility to enable guest access on synapse
5 years ago
Oleg Fiksel
43628ddad6
Added "|to_json" to ensure we really pass a boolean
5 years ago
Oleg Fiksel
f713bbe0f8
Added possibility to enable guest access on synapse
5 years ago
Slavi Pantaleev
3e57a1463a
Serve nginx status page over HTTPS as well
...
Continuation of #234 (Github Pull Request).
I had unintentionally updated the documentation for the feature,
saying the page is available at `https://matrix.DOMAIN/nginx_status `.
Looks like it wasn't the case, going against my expectations.
I'm correcting this with this patch.
The status page is being made available on both HTTP and HTTPS.
Serving over HTTP is likely necessary for services like
Longview
(https://www.linode.com/docs/platform/longview/longview-app-for-nginx/ )
5 years ago
p5t2vspoqqw
c32a3e3204
correct defaults
5 years ago
p5t2vspoqqw
4b8190dc3f
serve status page for matrix.DOMAIN only
5 years ago
p5t2vspoqqw
281f2ee519
Merge branch 'master' of https://github.com/spantaleev/matrix-docker-ansible-deploy
5 years ago
Dan Arnfield
dc71457132
Update riot-web (1.3.0 -> 1.3.2)
5 years ago
microchipster
122c3f1ec0
sync more chats in hangouts, switch to admin mode
5 years ago
microchipster
1e8d593f7a
fix hangout displayname bug
5 years ago
microchipster
75785a0734
fix login url
5 years ago
microchipster
74d9eb1ec0
fix incorrect nginx proxy entry for hangouts bridge
5 years ago
microchipster
754c475338
matrix-hangouts/login instead of just /login
5 years ago
microchipster
95750c1bc7
attempt to inject nginx config for hangouts bridge
5 years ago
microchipster
264704a29e
absorb Munfred changes
5 years ago
Eduardo Beltrame
c1aea7c3fc
Update validate_config.yml
5 years ago
Eduardo Beltrame
85c7e9eb09
Update validate_config.yml
5 years ago
Eduardo Beltrame
0a9ce65d3b
Update validate_config.yml
5 years ago
Eduardo Beltrame
ad682f2180
Update main.yml
5 years ago
Eduardo Beltrame
ef9f6efd12
Update main.yml
5 years ago
Eduardo Beltrame
451d84a981
Update main.yml
5 years ago
Eduardo Beltrame
da6d2e5621
Update main.yml
5 years ago
Eduardo Beltrame
bc1c30168c
remove login block -- wrong file
5 years ago
Eduardo Beltrame
c71cef3f70
Add hangouts /login in the right place
5 years ago
Eduardo Beltrame
b0f203b2ec
Update main.yml
5 years ago
Eduardo Beltrame
ab6e808bc6
fix /login for mautrix-hangouts bridge
5 years ago
Eduardo Beltrame
4528e6402b
add Publicly accessible base URL for the login endpoints.
...
# Auth server config
auth:
# Publicly accessible base URL for the login endpoints.
# The prefix below is not implicitly added. This URL and all subpaths should be proxied
# or otherwise pointed to the appservice's webserver to the path specified below (prefix).
# This path should usually include a trailing slash.
public: http://example.com/login/
# Internal prefix in the appservice web server for the login endpoints.
prefix: /login
5 years ago
Eduardo Beltrame
2d3fc98d18
Update main.yml
5 years ago
microchipster
a16347789d
nginx settings for hangouts bridge login
5 years ago
microchipster
0585889d5a
add hangouts bridge by copying facebook bridge and find-replacing
5 years ago