1808 Commits (cd54147144f41ecf6156d3ea85f02a4cb74a97e5)

Author	SHA1	Message	Date
sakkiii	0dd4459799	matrix_nginx_proxy_ocsp_stapling_enabled variable added	4 years ago
sakkiii	c05021640d	Enable OCSP Stapling	4 years ago
Aaron Raimist	ca361af616	Add Hydrogen	4 years ago
sakkiii	b191e461a5	Merge branch 'spantaleev:master' into master	4 years ago
sakkiii	4bd7d8b5e4	Update grafana (7.5.5->7.5.6)	4 years ago
sakkiii	d5cd3d443d	Update prometheus (2.26.0->2.27.0)	4 years ago
sakkiii	322b750aad	Merge branch 'spantaleev:master' into master	4 years ago
Slavi Pantaleev	f481b1a84b	Upgrade matrix-mailer (4.94.2-r0 -> 4.94.2-r0-1) ... Related to https://github.com/devture/exim-relay/pull/9	4 years ago
Slavi Pantaleev	8e6f1876f5	Switch to :latest version of synapse-admin ... Related to https://github.com/Awesome-Technologies/synapse-admin/issues/132 We should switch back when >0.8.0 gets released.	4 years ago
sakkiii	8fc55b30c5	Upgrade Synapse (1.33.1 -> 1.33.2) ... This release fixes a denial of service attack (CVE-2021-29471) against Synapse's push rules implementation. Server admins are encouraged to upgrade. Ref: https://github.com/matrix-org/synapse/releases/tag/v1.33.2	4 years ago
Slavi Pantaleev	2d4b039c55	Merge pull request #1046 from GoMatrixHosting/master ... GoMatrixHosting v0.4.6	4 years ago
Michael-GMH	2b4bada72a	fix conditional	4 years ago
Michael-GMH	0adcef65e6	fix conditional	4 years ago
Michael-GMH	f70102e40c	no dashes in usernames	4 years ago
Slavi Pantaleev	f4657b2cdb	Upgrade Element (1.7.26 -> 1.7.27)	4 years ago
Michael-GMH	4e6f6e179b	GMH 0.4.6 update	4 years ago
sakkiii	29cf6a0087	Merge branch 'spantaleev:master' into master	4 years ago
Slavi Pantaleev	3dcc006932	Fix self-building for Coturn ... 689dcea773 wasn't enough. The `upstream/..` tags are just upstream sources, without the alpine-based Dockerfile. We need to use the `docker/..` tags for that (or `master`) Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1032 Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1023 Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1009	4 years ago
Slavi Pantaleev	33f0074862	Upgrade matrix-mailer (4.94-r0 -> 4.94.2-r0) ... Related to https://github.com/devture/exim-relay/issues/6	4 years ago
Slavi Pantaleev	c19508087a	Merge pull request #1036 from sakkiii/grafana-csp ... Grafana csp template backward compatible with older browsers	4 years ago
Slavi Pantaleev	a198b87455	Upgrade synapse-admin (0.7.2 -> 0.8.0) ... Related to https://github.com/Awesome-Technologies/synapse-admin/issues/132	4 years ago
Slavi Pantaleev	867ebb52ab	Merge pull request #1037 from pushytoxin/jitsi-5765-1 ... Update Jitsi (5142 -> 5765-1)	4 years ago
sakkiii	bb0810302d	Merge branch 'spantaleev:master' into master	4 years ago
Slavi Pantaleev	61220ea487	Upgrade Synapse (1.33.0 -> 1.33.1)	4 years ago
sakkiii	9174448e5e	get rid of this {% else %}	4 years ago
sakkiii	0d5fe2d9f7	Update roles/matrix-grafana/templates/grafana.ini.j2 ... Co-authored-by: Aaron Raimist <aaron@raim.ist>	4 years ago
Béla Becker	b10655ebb1	Jitsi XMPP Websocket support ... Jitsi-meet enabled websockets by default, claiming better reliability. Matrix-nginx-proxy configuration has been set up according to the Prosody documentation: https://prosody.im/doc/websocket	4 years ago
Béla Becker	116bcaa13b	Update jitsi to stable-5765-1 ... Changelog: https://github.com/jitsi/docker-jitsi-meet/blob/stable-5765-1/CHANGELOG.md	4 years ago
sakkiii	37de7fc96a	Updated Reference	4 years ago
sakkiii	303de935d5	grafana CSP backward compatible with older browsers	4 years ago
Slavi Pantaleev	d4d1e2e922	Upgrade Synapse (1.32.2 -> 1.33.0)	4 years ago
Slavi Pantaleev	b09a805939	Merge pull request #1031 from thedanbob/nginx-1.20.0 ... Update nginx (1.19.10 -> 1.20.0)	4 years ago
Slavi Pantaleev	6fdc71c40b	Merge pull request #1030 from thedanbob/grafana-7.5.5 ... Update grafana (7.5.4 -> 7.5.5)	4 years ago
Dan Arnfield	cfaa3e598a	Update nginx (1.19.10 -> 1.20.0)	4 years ago
Dan Arnfield	bec5933db4	Update grafana (7.5.4 -> 7.5.5)	4 years ago
Michael-GMH	067b61e779	GoMatrixHosting v0.4.5 update	4 years ago
Slavi Pantaleev	2409c33ea2	Upgrade Element (1.7.25 -> 1.7.26)	4 years ago
benkuly	49cb2635a2	updated matrix-sms-bridge	4 years ago
Michael-GMH	a14bf6c2ed	GoMatrixHosting v0.4.4 update	4 years ago
Slavi Pantaleev	689dcea773	Fix self-building for Coturn ... Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1023 Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1009	4 years ago
sakkiii	40fe6bd5c1	variable matrix_nginx_proxy_hsts_preload_enable added	4 years ago
Slavi Pantaleev	389dc26615	Fix Synapse generic worker balancing ... Potentially fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1022	4 years ago
sakkiii	5b4fdf9b87	Merge branch 'master' of https://github.com/sakkiii/matrix-docker-ansible-deploy	4 years ago
sakkiii	0ccf0fbf1c	HSTS preload + X-XSS enables ... **HSTS Preloading:** In its strongest and recommended form, the [HSTS policy](https://www.chromium.org/hsts) includes all subdomains, and indicates a willingness to be “preloaded” into browsers: `Strict-Transport-Security: max-age=31536000; includeSubDomains; preload` **X-Xss-Protection:** `1; mode=block` which tells the browser to block the response if it detects an attack rather than sanitising the script.	4 years ago
sakkiii	3564635f0f	Merge branch 'master' into master	4 years ago
sakkiii	29bba5161b	Element More security headers ... More Production ready nginx headers for Matrix client element.	4 years ago
Slavi Pantaleev	f6b371164c	Remove useless variable	4 years ago
Slavi Pantaleev	62c0587b6a	Use Alpine-based Coturn	4 years ago
Slavi Pantaleev	72a7cb4145	Merge pull request #1018 from GoMatrixHosting/master ... GoMatrixHosting v0.4.3	4 years ago
Slavi Pantaleev	e3fa3e12bc	Upgrade Synapse (1.31 -> 1.32.2)	4 years ago
Michael-GMH	50d7209c5b	GMH v04.3	4 years ago
Slavi Pantaleev	378fabf177	Revert "Upgrade Synapse (1.31 -> 1.32.1)" ... This reverts commit 1fb54a37cb. Seems like it's been pulled or something. It used to exist, but not anymore. Not sure what's going on. Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1017 Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1010	4 years ago
Slavi Pantaleev	1fb54a37cb	Upgrade Synapse (1.31 -> 1.32.1) ... Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1010	4 years ago
Slavi Pantaleev	d691cc0920	Move variable definition a bit	4 years ago
Slavi Pantaleev	e00ef04b57	Add opt-out-of-FLoC headers by default	4 years ago
Slavi Pantaleev	42783972fd	Merge pull request #1011 from aaronraimist/synapse-admin ... Upgrade synapse-admin (0.7.0 -> 0.7.2)	4 years ago
Slavi Pantaleev	ca786cc343	Revert "Upgrade Synapse (1.31 -> 1.32)" ... This reverts commit f825c7c263. Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1010	4 years ago
Aaron Raimist	bb64b80697	Upgrade synapse-admin (0.7.0 -> 0.7.2)	4 years ago
Slavi Pantaleev	f825c7c263	Upgrade Synapse (1.31 -> 1.32)	4 years ago
Slavi Pantaleev	7eda6a3c12	Merge pull request #1009 from thedanbob/coturn-official ... Switch to official coturn image	4 years ago
Slavi Pantaleev	adcecaffaf	Fix connectivity between prometheus and prometheus-node-exporter ... Expected to have regressed after https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1008 This patch comes with its own downsides (as described in the comments for matrix_prometheus_node_exporter_container_http_host_bind_port), but at least there's: - no security issue - metrics remain readable from matrix-prometheus (even if the network metrics are inaccurate) A better patch is certainly welcome.	4 years ago
Dan Arnfield	b2ca1f2829	Add capability required by new image	4 years ago
Slavi Pantaleev	398b9f5d66	Merge pull request #1008 from sakkiii/master ... security** node-exporter data & port publicly exposed	4 years ago
Dan Arnfield	29177d4922	Switch to official coturn docker image	4 years ago
sak	88a30fb5ed	security** node-exporter data & port publicly exposed	4 years ago
sak	0f9a455719	Revert "security** node-exporter data & port publicly exposed" ... This reverts commit d0cd709c08.	4 years ago
sak	d0cd709c08	security** node-exporter data & port publicly exposed	4 years ago
Slavi Pantaleev	4a1739f604	Merge pull request #1007 from teutat3s/fix/nginx-dont-send-version ... Don't expose nginx version with each response	4 years ago
teutat3s	2bf7c26cfa	Don't expose nginx version with each response	4 years ago
Slavi Pantaleev	c565e72f0d	Merge pull request #1003 from sakkiii/patch-2 ... updated matrix_grafana_docker_image to v7.5.4	4 years ago
Slavi Pantaleev	51b46697c5	Merge pull request #1005 from sakkiii/master ... Improve security for grafana	4 years ago
Dan Arnfield	f04614a993	Fix prometheus network for ansible < 2.8	4 years ago
Slavi Pantaleev	badd81e0ec	Revert "Attempt to fix docker_network result discrepancy between Ansible versions" ... This reverts commit 68ca81c8c2.	4 years ago
sakkiii	1958d0792d	Update matrix-client-element.conf.j2	4 years ago
sakkiii	b6d45c5fd8	Merge branch 'master' of https://github.com/sakkiii/matrix-docker-ansible-deploy	4 years ago
sakkiii	05042f5ff1	Improve security grafana ... - duplicate X-Content-Type-Options - X-Frame-Options header - Referrer-Policy [Might consider adding variable] - Secure flag with cookies - matrix_grafana_content_security_policy variable for [Content Security Policy](https://grafana.com/docs/grafana/latest/administration/configuration/#content_security_policy)	4 years ago
sakkiii	27377e099d	updated matrix_grafana_docker_image to v7.5.4 ... Latest stable grafana version is [7.5.4 (2021-04-14)](https://github.com/grafana/grafana/releases/tag/v7.5.4)	4 years ago
Slavi Pantaleev	68ca81c8c2	Attempt to fix docker_network result discrepancy between Ansible versions ... Supposedly fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/907	4 years ago
Slavi Pantaleev	9c1f41eadf	Merge pull request #1002 from thedanbob/node-exporter-1.1.2 ... Update prometheus node exporter (1.1.0->1.1.2)	4 years ago
Dan Arnfield	8a550ce67c	Update prometheus (2.24.1->2.26.0)	4 years ago
Dan Arnfield	83cc5c9e6a	Update prometheus node exporter (1.1.0 -> 1.1.2)	4 years ago
sakkiii	5dc642ace1	Nginx element web: XSS protection & nosniff header ... X-XSS-Protection: 1; mode=block; header, for basic XSS protection in legacy browsers. X-Content-Type-Options: nosniff header, to disable MIME sniffing	4 years ago
Slavi Pantaleev	fcb9e9618a	Make Coturn TLSv1/v1.1 configurable ... Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/999	4 years ago
sakkiii	540416e32d	Disable support for TLS 1.0 and TLS 1.1 ... These old versions of TLS rely on MD5 and SHA-1, both now broken, and contain other flaws. TLS 1.0 is no longer PCI-DSS compliant and the TLS working group has adopted a document to deprecate TLS 1.0 and TLS 1.1.	4 years ago
Michael-GMH	89cb5a3d7a	GMH v0.4.2 update	4 years ago
Michael	f41bfb69d2	update survey template formatting	4 years ago
Michael	814bdf5a88	update spelling	4 years ago
Michael	fbe22289bd	merge with upstream and testing branch	4 years ago
Slavi Pantaleev	995c483856	Merge pull request #962 from aaronraimist/mjolnir ... Add mjolnir	4 years ago
Slavi Pantaleev	f183add44d	Merge pull request #977 from aaronraimist/simple-antispam ... Upgrade synapse-simple-antispam (0.0.1 -> 0.0.3)	4 years ago
Aaron Raimist	81dddd2e25	Upgrade Element (1.7.24 -> 1.7.24.1)	4 years ago
Aaron Raimist	c43bd412dd	Upgrade synapse-simple-antispam (0.0.1 -> 0.0.3)	4 years ago
Aaron Raimist	1ecee625d5	Depend on more services, add a delay	4 years ago
Slavi Pantaleev	a88391edf5	Merge pull request #972 from JohannesKleine/nginx-config ... matrix-nginx-proxy: add custom nginx options to nginx.conf.j2	4 years ago
teutat3s	0b5e903693	Updates to mautrix-signal config ... See these last commits: tulir/mautrix-signal@4fc34330c1f6947aece67863b0d04da34c776f80 tulir/mautrix-signal@64bc5c36a509ba435a0b01cf44afb1b5d2642efd tulir/mautrix-signal@ddda1666d41d28750cc59d070e4388b24add6ad9	4 years ago
Christoph Johannes Kleine	fcd66b2889	rename variables	4 years ago
Christoph Johannes Kleine	8ba1105010	rename variable	4 years ago
Christoph Johannes Kleine	3a772f2f65	matrix-nginx-proxy: add custom nginx options to nginx.conf.j2	4 years ago
Slavi Pantaleev	93960b70be	Do not fail if `_matrix-identity` DNS SRV record missing ... Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/963 This also simplifies Prerequisites, which is great. It'd be nice if we were doing these checks in some optional manner and reporting them as helpful messages (using `matrix_playbook_runtime_results`), but that's more complicated. I'd rather drop these checks completely.	4 years ago
Slavi Pantaleev	5e1cf7f8b9	Upgrade Element (1.7.23 -> 1.7.24)	4 years ago
Slavi Pantaleev	9409588513	Fix variable name typo (take 2) ... Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/970	4 years ago
Slavi Pantaleev	179b416ed5	Fix variable name typo ... Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/970	4 years ago
Slavi Pantaleev	77d598b315	Fix Go-NEB variable definitions using the wrong type ... Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/969	4 years ago
Slavi Pantaleev	49868db3de	Upgrade Synapse for ARM64 (1.30.0 -> 1.30.1)	4 years ago
Slavi Pantaleev	94487dc6a7	Upgrade Synapse for amd64 (1.30.0 -> 1.30.1)	4 years ago
transcaffeine	dbae18fd6a	feat: push ephemeral events to appservices ... This adds https://github.com/matrix-org/matrix-doc/pull/2409 to the appservice registrations, enabling synapse to push EDUs to appservices.	4 years ago
Dan Arnfield	97d8527e00	Update nginx (1.19.6 -> 1.19.8)	4 years ago
Slavi Pantaleev	5a4ea5f866	Make AWX enabling/disabling consistent with other playbook roles ... That is: - enabled in the role by default - disabled in the compilation (playbook), if considered an optional component	4 years ago
Aaron Raimist	bab8b950ca	Add mjolnir	4 years ago
Slavi Pantaleev	06c74728eb	Move matrix_nginx_proxy_proxy_synapse_federation_api_enabled definition to the role ... This variable was previously undefined in the role and was only getting defined via `group_vars/matrix_servers`. We now properly initialize it (and its good default value) in the role itself.	4 years ago
Slavi Pantaleev	d09609daa8	Fix Jinja2 syntax error ... Fixes a regression introduced in ffe649a240	4 years ago
Slavi Pantaleev	6a3433fbad	Update Synapse for ARM64 (1.29.0 -> 1.30.0) ... Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/958	4 years ago
Slavi Pantaleev	ffe649a240	Update homeserver.yaml to keep up with Synapse v1.30.0 ... Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/958	4 years ago
rakshazi	74106f2a80	Updated synapse 1.29.0 -> 1.30.0	4 years ago
Thom Wiggers	54fe59f05c	Update IRC appservice	4 years ago
Slavi Pantaleev	2737ebc290	Complain if people try to use matrix-sygnal on non-amd64	4 years ago
Slavi Pantaleev	b824522b33	Remove unnecessary with_items statement	4 years ago
Slavi Pantaleev	9a0222fa47	Add Sygnal support ... Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/683	4 years ago
Michael	af240aef37	remove sections from task list that arent needed	4 years ago
Michael	85127bacba	Merge remote-tracking branch 'upstream/master'	4 years ago
Michael	1e54b1d1a5	merge upstream	4 years ago
Slavi Pantaleev	f99dcd611f	Pass proper UID/GID to Synapse ... Fixes a regression caused by a5ee39266c. If the user id and group id were different than 991:991 (which used to be a hardcoded default for us long ago), there was a mismatch between what Synapse was trying to use (991:991) and what it was actually started with (in `--user=..`). It was then trying to change ownership, which was failing. This was mostly affecting newer installations which were not using the 991:991 defaults we had long ago (since a1c5a197a9).	4 years ago
Slavi Pantaleev	a5ee39266c	Go through start.py when launching Synapse ... This allows us to benefit from helpful things it does for us, like enabling jemalloc: https://github.com/matrix-org/synapse/pull/8553 We weren't going through `start.py` before, because it was causing some conflict with our `docker run --user=...` stuff, but it doesn't seem to be a problem anymore. Having done this, we won't need to do things like https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/941 anymore.	4 years ago
Aaron Raimist	32b3650c12	Set X-Forwarded-Proto on federation requests	4 years ago
Béla Becker	2d7e7680e5	matrix.{{ matrix_domain }} -> {{ matrix_server_fqn_matrix }}	4 years ago
Aaron Raimist	466827139a	Also check if matrix_ssl_lets_encrypt_support_email is blank	4 years ago
Slavi Pantaleev	97c0bf1a73	Merge pull request #942 from pushytoxin/etherpad1_8_12 ... Upgrade Etherpad (1.8.7 -> 1.8.12)	4 years ago
Béla Becker	60aa40845f	Upgrade Etherpad (1.8.7 -> 1.8.12)	4 years ago
Yannick Goossens	27416607d9	Another field with 'invalid input syntax for type smallint'	4 years ago
Michael	5a6bdb0c3d	merge upstream	4 years ago
Michael	571b70a1f4	fix for running outside of AWX	4 years ago
Michael	5a1f3b7d67	GMH v0.3.0	4 years ago
Michael	33ec5710d9	0.2.1 revision	4 years ago
Michael	4c882c513b	initial PR	4 years ago
Marcus Proest	2ca8211184	Merge remote-tracking branch 'upstream/master'	4 years ago
Marcus Proest	b99372a3c5	initial commit of mautrix-instagram role	4 years ago
Slavi Pantaleev	108aed53be	Fix invalid matrix-postgres.service when matrix_postgres_process_extra_arguments is empty ... This only seems to be affecting some people badly enough to cause matrix-postgres not to start. Certain systemd versions probably handle it better or something. Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/889 (hopefully)	4 years ago
Slavi Pantaleev	1dbdfeec07	Fix matrix-postgres stopping for consistency with other services ... This probably got lost somehow in all the work that happened in https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/456	4 years ago
Slavi Pantaleev	9f91eaa54b	Fix incorrect service name ... Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/887	4 years ago
Slavi Pantaleev	91c987ca7d	Merge pull request #872 from xangelix/add-mx-puppet-groupme-gh ... Add mx-puppet-groupme support	4 years ago
Slavi Pantaleev	d94d0e2ca5	Merge pull request #456 from eMPee584/synapse-workers ... Synapse workers	4 years ago
Slavi Pantaleev	9dc87bb948	Add Synapse worker presets for easier configuration ... Adding more presets in the future would be nice.	4 years ago
Slavi Pantaleev	eaea215282	Allow Synapse workers to be used with an external nginx webserver ... We're talking about a webserver running on the same machine, which imports the configuration files generated by the `matrix-nginx-proxy` in the `/matrix/nginx-proxy/conf.d` directory. Users who run an nginx webserver on some other machine will need to do something different.	4 years ago
Slavi Pantaleev	2f732e4234	Update Synapse worker endpoints	4 years ago
Slavi Pantaleev	217b4a8808	Release Synapse v1.27.0 to ARM32 via self-building ... Related to: https://matrix.org/blog/2021/02/18/synapse-1-27-0-released#dropping-armv7-docker-images	4 years ago
Béla Becker	65eab14a64	Make sure Etherpad has a database to write to	4 years ago
Béla Becker	005f4d57f9	Remove mention of sqlite3 support for Etherpad ... The official Etherpad Docker image has no support for sqlite3 databases.	4 years ago
Slavi Pantaleev	1789620901	Merge branch 'master' into synapse-workers	4 years ago
Slavi Pantaleev	d6c4d41c2b	Define instanceId property on workers ... This give us the possibility to run multiple instances of workers that that don't expose a port. Right now, we don't support that, but in the future we could run multiple `federation_sender` or `pusher` workers, without them fighting over naming (previously, they'd all be named something like `matrix-synapse-worker-pusher-0`, because they'd all define `port` as `0`).	4 years ago
rakshazi	996f732f98	Update synapse-admin (0.6.1 -> 0.7.0)	4 years ago