25b343c8c8
matrix-ntfy: without nginx, bind to 127.0.0.1:2586
2 years ago
ec9f8e2931
Add a role to install 'ntfy' push-notification server.
...
This commit adds a 'matrix-ntfy' role that runs Ntfy server in Docker with
simple configuration, and plumbing to add the role to the playbook.
TODO: documentation, self-check, database persistence.
2 years ago
2e4fad6194
Use 127.0.0.1 instead of localhost for federation API when nginx disabled
...
`localhost` may resolve to `::1` on some IPv6-enabled systems, which will
not work, because we only potentially expose container ports on
`127.0.0.1` when nginx is disabled (`matrix_nginx_proxy_enabled: false`),
not on `::1`.
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1914
2 years ago
90447a2839
Use correct registration secret
2 years ago
8e9d165787
Another rename to matrix-bot-maubot
...
No functionality changed
2 years ago
1316656998
Rename to bot_maubot and fix permission error
2 years ago
eb25d54246
Merge branch 'master' of https://github.com/spantaleev/matrix-docker-ansible-deploy into node_postgres_reverse_proxy
2 years ago
d24cb7db6f
Initial maubot commit
2 years ago
ba51997f7b
(BC Break) Redo how metrics are exposed to external Prometheus servers
2 years ago
fff4b9116c
Use prebuilt ARM images for coturn / synapse-admin
...
* synapse-admin arm64 builds available since 2021-12-17 v.0.8.4 [awesometechnologies/synapse-admin:0.8.5](https://hub.docker.com/layers/synapse-admin/awesometechnologies/synapse-admin/0.8.5/images/sha256-eb54b8660c4641641b8acd08fd2dfc94ecc3fc604860f9e8b286a38008e3f3b6?context=explore )
* coturn arm32/arm64 builds available since 2021-04-15 v.4.5.2-r0-alpine [coturn/coturn:4.5.2-r12](https://hub.docker.com/layers/coturn/coturn/coturn/4.5.2-r12/images/sha256-94887581bb1093085033be0494c3a651bd40034afba1867ddc78b8ba32dc2faf?context=explore )
2 years ago
a3d19ad318
Add Go Skype Bridge
...
Based on mautrix-whatsapp, as that's what the bridge software is based on.
3 years ago
8ecdfc3ed6
Automatically enable admin api access via nginx ( #1830 )
3 years ago
cbb924dec7
Support ansible vault strings for homeserver secret key
3 years ago
49da9c76ac
Merge pull request #1782 from etkecc/matrix-bot-buscarron
...
add matrix-bot-buscarron
3 years ago
47e5bab784
Fix self-building if condition
3 years ago
c83c70ac35
Don't self-build signald image on arm64, as upstream image exists
3 years ago
290754371a
add matrix-bot-buscarron
3 years ago
90a142439a
Add matrix-registration-bot ( #1771 )
...
* Add matrix-registration-bot
This adds an install and uninstall task plus helpers. The bot is disabled by default.
This commit does not include documentation, yet. In short, the bot can be enabled by adding
matrix_bot_matrix_registration_bot_enabled: true
matrix_bot_matrix_registration_bot_matrix_user_password: "verysecret"
matrix_bot_matrix_registration_bot_matrix_admin_token: "supersecret"
to the host_vars
* Change bot username to bot.matrix-registration-bot following convention
* Address smaller remarks, fix local docker build
* Switch to an env file
* Add environment variables extension for additional config
* Add documentation for the matrix-registration-bot
* Add screenshot on how to obtain admin access token
* Use bot as admin to only have one access token (bot and admin api)
* Use cleaner setting of matrix_synapse_registration_requires_token
* Use config file for cleaner more secure usage
* Delete unneeded env
* Rename vars to make usage clear
* Fix typos/wording and add notice about logging out
* Convert configuration to use |to_json
* Reorder role includes
Nothing should be after `matrix-common-after`.
`matrix-bot-matrix-registration-bot` can probably be anywhere, but it makes sense to put it next to the other `matrix-bot-*` roles.
* Minor group_vars/matrix_servers touchups
Co-authored-by: Slavi Pantaleev <slavi@devture.com>
3 years ago
d5f4c17146
matrix-backup-borg: integrate postgres backups, add extended borgmatic configuration
3 years ago
a9e6538ef8
Upgrade Hookshot (1.3.0 -> 1.4.0)
...
https://github.com/matrix-org/matrix-hookshot/releases/tag/1.4.0
3 years ago
ceb2f54970
Make hookshot hardcoded public URLs dynamic
3 years ago
03d2dcc996
Move into coturn defaults
3 years ago
268b079374
Revert Coturn Address Change, add new Addresses var ( #2 )
3 years ago
29847627f1
Multi-IP coturn
...
Add support for multiple external turn IP addresses, this allows for better comptability with dualstack ipv4/ipv6 hosts, and is supported as per the documentation (point 6 here: https://matrix-org.github.io/synapse/latest/turn-howto.html#configuration )
3 years ago
ab3e02c7fd
Remove matrix-awx sections
3 years ago
db4b6efb5d
Force self-building of matrix-hookshot on arm64
...
The `halfshot/matrix-hookshot` container images published to Docker Hub
(as of 2022-04-05, at least) are only available for `amd64`, not for
`arm64`. Self-building on arm64 is necessary.
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1728
It should be noted that a `roiarthurb/matrix-hookshot` container image is available,
which is available for the arm64 platform, but that's non-official and doesn't
contain an amd64 build, so it's of limited use.
3 years ago
a5a3769ca9
add borg backup ( #1727 )
...
* add borg backup
* lint fix
* add exlclude patterns
* missed in the #1726 fix for honoroit
* feedback
* Fix indentation
* feedback
* feedback
* feedback
Co-authored-by: Slavi Pantaleev <slavi@devture.com>
3 years ago
b9d6f8b90f
Merge pull request #1728 from RoiArthurB/hookshot-arm64
...
Add hookshot self build for arm64 and amd64
3 years ago
e7978dbdca
Dendrite 0.7.0
3 years ago
1ce891fc70
Revert group_var wrong part reindent
3 years ago
b38c7371a9
[STEAM] Move docker source from icewind1991 to tilosp fixed repo
3 years ago
b3176957c3
Add hookshot self build for arm64 and amd64
3 years ago
958d089b68
Do not install the ma1sd identity server by default
...
As mentioned in the changelog, this is a breaking change.
3 years ago
1df3e2a967
Merge pull request #1694 from HarHarLinks/master
...
add default for matrix_prometheus_scraper_hookshot_enabled
3 years ago
5eb514b08b
Use |default instead of merely casting to bool
3 years ago
9c58f2a98a
default matrix_prometheus_scraper_hookshot_enabled
3 years ago
9de677942d
bridge-mautrix-facebook: add support for web-based login
3 years ago
69d2da4d44
Fix whitespace inconsistency
3 years ago
1895b01810
Move matrix_container_global_registry_prefix to matrix-base
...
Various roles depend on this. It makes sense to make it part
of the `matrix-base` role.
3 years ago
8c25ade9fb
Rework matrix_mautrix_twitter_database_* variables a bit
...
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1682
Previously, when matrix-postgres was disabled, we were setting
`matrix_mautrix_twitter_database_engine` to an invalid empty value.
Now, we always hardcode `matrix_mautrix_twitter_database_engine: postgres`,
but set/unset the database hostname and password values instead.
3 years ago
648001875e
Fix for old jinja versions
...
Co-authored-by: Procuria <37988494+Procuria@users.noreply.github.com>
3 years ago
d556952bb6
update hookshot to respect protocol and custom ports
3 years ago
8e8bf55e15
fix: missing spaces on closing }
3 years ago
819574b8ba
Merge branch 'spantaleev:master' into master
3 years ago
7e5b88c3b7
fix: all praise the allmighty yamllinter
3 years ago
ccb85b31a4
Upgrade devture/email2matrix (1.0.1 -> 1.0.2) and disable self-building on ARM32/ARM64
...
1.0.2 is the first container image tag that is available as a multi-arch image
with support for linux/amd64, linux/arm64/v8 (arm64) and linux/arm/v7 (arm32),
so self-building is no longer necessary on all these platforms.
3 years ago
1099ccab43
Upgrade devture/exim-relay (4.95-r0 -> 4.95-r0-1) and disable self-building on ARM32/ARM64
...
4.95-r0-1 is the first container image tag that is available as a multi-arch image
with support for linux/amd64, linux/arm64/v8 (arm64) and linux/arm/v7 (arm32),
so self-building is no longer necessary on all these platforms.
3 years ago
e295c90d0b
Merge pull request #1505 from HarHarLinks/hookshot
...
add matrix-hookshot
3 years ago
4a4d718f7c
Upgrade matrix-corporal (2.2.2 -> 2.2.3) and disable self-building on ARM32/ARM64
...
2.2.3 is the first container image tag that is available as a multi-arch image
with support for linux/amd64, linux/arm64/v8 (arm64) and linux/arm/v7 (arm32),
so self-building is no longer necessary on all these platforms.
3 years ago
39d9ef43e9
fixup! update hookshot config to generic hs variables
3 years ago
2a91a43b32
Merge remote-tracking branch 'origin/master' into hookshot
3 years ago
54d8d0ec38
simplify hookshot conditional for readability
3 years ago
c264d670e8
update hookshot config to generic hs variables
3 years ago
44ae8d3b92
refine etherpad in nginx wanted services condition
3 years ago
a9dd397771
add etherpad to nginx wanted services
...
it's required if enabled by the dimension config here:
6eb8fb8392/roles/matrix-etherpad/tasks/init.yml (L42-L49)#1517
3 years ago
321ed9b609
Merge remote-tracking branch 'origin/master' into hookshot
3 years ago
08fe38cf40
add hookshot to nginx wanted services
...
related 0fb881deb5
3 years ago
224633df1d
fix condition for matrix_hookshot_container_http_host_bind_ports
3 years ago
2b97ab9a51
fix matrix_hookshot_container_http_host_bind_ports
3 years ago
3a766d4ba5
proxy hookshot metrics when proxying synapse metrics
...
see also #1527
3 years ago
0fb881deb5
Update the "wanted systemd services" list for matrix-nginx-proxy/matrix-grafana
...
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1517
3 years ago
87871040df
add hookshot metrics to internal prometheus
3 years ago
1987cc4839
refine hookshot role
3 years ago
a83b880f72
matrix-bot-honoroit: feedback
3 years ago
4377c348c5
matrix-bot-honoroit: disable self-build by default, update to v0.9.1
3 years ago
e0f2aa9de8
refactor matrix_hookshot_container_http_host_bind_ports
3 years ago
7b093c5ae0
Move some variables to a more appropriate location
3 years ago
19b5a50805
Derive Honoroit database password from matrix_homeserver_generic_secret_key
...
Related to the work done in https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/818
3 years ago
5c3c0d0d58
Set Dendrite's real_ip_header correctly
3 years ago
05b4572fab
Fix matrix_dimension_homeserver_federationUrl for Dendrite
3 years ago
de49cc5271
Fix matrix_registration_shared_secret for Dendrite
3 years ago
593fc2fa85
Replace matrix-synapse.service references with more homeserver-neutral references
3 years ago
38ad152c03
Add Dendrite-awareness to matrix_homeserver_container_url when matrix-nginx-proxy disabled
3 years ago
bbbfc0708f
Derive matrix_coturn_turn_static_auth_secret from matrix_homeserver_generic_secret_key
...
Doing this further simplifies examples/vars.yml.
3 years ago
965890bf75
Derive secrets from matrix_homeserver_generic_secret_key, not matrix_synapse_macaroon_secret_key
...
We're trying to move away from implementation-specific variables,
hoping for a clean (implementation-neutral) examples/vars.yml file.
3 years ago
1dfe21944f
Make matrix_homeserver_implementation influence matrix_IMPLEMENTATION_enabled, not the other way around
...
Doing this seems more reasonable and simpler.
3 years ago
4139290cc9
Rename some variables for consistency
3 years ago
32bbcf5ed6
Fix incorrect definition
3 years ago
38ec546b8b
Only trust own identity server in Dendrite config, if ma1sd enabled
3 years ago
ecc237bbad
Initial work on getting nginx reverse proxying working with Dendrite
3 years ago
3cf9f87097
Add matrix_homeserver_implementation, tracking the current homeserver implementation
...
The goal is to have a single variable which tells us which homeserver
software is in use. Much simpler than having if/elif/elif checks for
variables like (`matrix_synapse_enabled` and `matrix_dendrite_enabled`, etc.)
everywhere.
3 years ago
5b148921a0
Upgrade Dendrite (0.3.11 -> 0.5.0) and update configuration
...
This brings dendrite.yaml up to date and cleans things up a bit.
3 years ago
07af05690c
Add initial role for Dendrite as alternative Matrix server
3 years ago
d9dd524db3
self-build consistency: rename vars everywhere
3 years ago
b0c801a497
Rename variable for consistency (matrix_bot_honoroit_container_self_build -> matrix_bot_honoroit_container_image_self_build)
...
Discussed in https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1514
3 years ago
407e8c4940
added honoroit
3 years ago
490f11ba0d
matrix-client-cinny: self_build feedback"
3 years ago
5788a16a2e
added matrix-client-cinny
3 years ago
621251c1e5
hookshot role groundwork
3 years ago
dcab14d9a8
Add self-building support to Beeper LinkedIn bridge
...
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1480
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1242
3 years ago
25ced724ac
Update matrix_servers
3 years ago
0f49ce0638
Set up vars for mautrix-twitter playbook
...
* Copy/update mautrix_facebook group_vars to mautrix_twitter
* Replace facebook -> twitter, fb -> twt, remove presence var
* Enable playbook in setup.yml
3 years ago
fc55df9318
Make some appservices reach the homeserver via nginx
...
This is useful when Synapse is using a worker setup. In that case,
we don't want appservices to connect to `matrix-synapse:8008`, because
not all APIs are exposed there.
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1449
3 years ago
286871b9b5
Add self-build for Dimension
...
Add a self-build option for the Dimension Dockerfile.
- This helps further support arm64 hosts (i.e. A1.Flex w/Oracle)
3 years ago
ab60238518
Support encrypted matrix_synapse_macaroon_secret_key
...
This change forces ansible to decrypt the variable with ansible-vault if encrypted, to avoid the error '{"msg": "Unexpected templating type error occurred on ({{ matrix_synapse_macaroon_secret_key | password_hash('sha512') }}): secret must be unicode or bytes, not ansible.parsing.yaml.objects.AnsibleVaultEncryptedUnicode"}'
Every other variable in the playbook was found to have no problems with encryption.
The change has no negative impact on non-encrypted matrix_synapse_macaroon_secret_key.
3 years ago
b4fb819481
Merge pull request #1403 from borisrunakov/rename-matrix-ma1sd-default-port
...
remove default from variable name
3 years ago
394ecb0acc
remove default from variable name
3 years ago
d3a9ec98de
refactoring
3 years ago
1ec67f49b0
replaced 8008 where possible
3 years ago
c1bc7b9f93
Rename variables to prevent confusion
...
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1397
and https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1399
3 years ago
07496069c8
rellocating variables for consistency
3 years ago
7756cc4c8e
replace port 8048 with matrix_synapse_container_default_federation_port
3 years ago
9688d071a8
fix matrix_synapse_account_threepid_delegates_email and matrix_synapse_account_threepid_delegates_msisdn ( #1370 )
...
* fix for string concatenation on matrix_synapse_account_threepid_delegates_email and matrix_synapse_account_threepid_delegates_msisdn
* .editorconfig should not be ignored
* Restore .gitignore
Co-authored-by: b <b@b>
Co-authored-by: Slavi Pantaleev <slavi@devture.com>
3 years ago
dcda17595a
change port 8090 to matrix_ma1sd_default_port
3 years ago
06bcdcf9d2
Merge pull request #1311 from HarHarLinks/master
...
add auto proxy synapse worker metrics
3 years ago
4209c4208c
add own variable for worker metrics
...
https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1311#issuecomment-945718866
3 years ago
6937a2c0a9
Ensure password_hash salt is less than 16 chars
...
Also fixes the appservice and homeserver tokens for the Googlechat bridge,
so that they're not the same as the ones for the Hangouts bridge.
3 years ago
1dac525e63
Added Mautrix Google Chat
3 years ago
fb709152f3
Add self-building support for mautrix-whatsapp
...
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1322
3 years ago
b5d8444764
Add self-building support to matrix-bridge-appservice-webhooks
3 years ago
2ec06b7477
Merge pull request #1242 from apmechev/add_beeper_linkedin_bridge
...
Add beeper LinkedIn bridge
3 years ago
603ad7c52b
Remove (non-working) SQLite support from beeper-linkedin bridge
...
This bridge doesn't support SQLite anyway, so it's not necessary
to carry around configuration fields and code for migration from SQLite
to Postgres. There's nothing to migrate.
3 years ago
13e660bffd
Add missing section separator
3 years ago
b13cf1871f
add code for LinkedIn Bridge
3 years ago
9860fb4675
Upgrade Sygnal (v0.9.0 -> v0.10.1)
3 years ago
46340fdf63
Simplify if condition
3 years ago
4d57a41b3f
remove matrix_awx_enabled from these
3 years ago
2e30802b87
use group variables instead
3 years ago
421f85defa
Add self-building support to matrix-email2matrix
3 years ago
dfa7b6e4fd
Merge pull request #1171 from BackInBash/patch-1
...
Updating to ma1sd v2.5.0
3 years ago
676101e999
Minor fixups for ma1sd 2.5.0
...
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1171
3 years ago
f5d6b01b9f
Updated group_vars to update self_build based on matrix_architecture
3 years ago
31244e7fcc
Merge pull request #1180 from Toorero/master
...
Fixed self-build functionality for mautrix-signal
3 years ago
ead4b00c09
Reverted back to manual self-build detection
3 years ago
3a28100131
Renamed matrix_lottieconverter to matrix_telegram_lottieconverter
3 years ago
7f15787d54
Fixed mautrix-telegram selfbuild not working on non amd64 platforms
3 years ago
f933ba14ae
Fixed self-build functionality for mautrix-signal and added self-build functionality for signald
3 years ago
aa6398a948
Autoset self-build for mautrix-signal bridge
3 years ago
b4d7ab0b53
Merge pull request #1153 from Cadair/worker_prom
...
Add worker metrics to prometheus exporter
3 years ago
2aa457efcc
Use a prom variable and not a synapse role variable
3 years ago
3777334778
Do not try to use TURNS when TLS disabled for Coturn
...
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1145
3 years ago
8b146f083e
Disable turns when Let's Encrypt is used
...
Supersedes https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1145
3 years ago
19ed8d1d17
Upgrade mjolnir (0.1.17 -> 0.1.18) and implement self building
3 years ago
4e2780ff88
Add support for a prometheus postgres exporter
...
This commit introduces a new role that downloads and installs the
prometheus community postgres exporter https://github.com/prometheus-community/postgres_exporter .
A new credential is added to matrix_postgres_additional_databases that
allows the exporter access to the database to gather statistics.
A new dashboard was added to the grafana role, with some refactoring
to enable the dashboard only if the new role is enabled.
I've included some basic instructions for how to enable the role in
the Docs section.
In terms of testing, I've tested enabling the role, and disabling
it to make sure it cleans up the container and systemd role.
4 years ago
409cd2b9a3
Source port binding from group vars in line other components
4 years ago
04548f8df2
Merge branch 'master' into hydrogen
4 years ago
9437f78c9e
Build using custom config.json, add CSP, update to 0.1.53
4 years ago
9a8a81fdb0
Disable OCSP stapling when self-signed certificates are used
...
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1073
4 years ago
544915ff76
Add Heisenbridge
4 years ago
ca361af616
Add Hydrogen
4 years ago
f03adc83f1
Fix matrix_ma1sd_dns_overwrite_homeserver_client_value when not matrix_nginx_proxy_enabled
...
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1047
4 years ago
e3fa3e12bc
Upgrade Synapse (1.31 -> 1.32.2)
4 years ago
378fabf177
Revert "Upgrade Synapse (1.31 -> 1.32.1)"
...
This reverts commit 1fb54a37cbhttps://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1017
Related to
https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1010
4 years ago
1fb54a37cb
Upgrade Synapse (1.31 -> 1.32.1)
...
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1010
4 years ago
ca786cc343
Revert "Upgrade Synapse (1.31 -> 1.32)"
...
This reverts commit f825c7c263https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1010
4 years ago
f825c7c263
Upgrade Synapse (1.31 -> 1.32)
4 years ago
adcecaffaf
Fix connectivity between prometheus and prometheus-node-exporter
...
Expected to have regressed after https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1008
This patch comes with its own downsides (as described in the comments
for matrix_prometheus_node_exporter_container_http_host_bind_port),
but at least there's:
- no security issue
- metrics remain readable from matrix-prometheus (even if the network metrics are inaccurate)
A better patch is certainly welcome.
4 years ago
8da8979a24
Do not override matrix_prometheus_node_exporter_container_http_host_bind_port when matrix-nginx-proxy disabled
...
Not sure why this had been done in the first place.
It doesn't make any sense.
There's no relation between matrix-nginx-proxy and
prometheus-node-exporter.
4 years ago
126fbbc0cc
fix typo
4 years ago
f52a8b6484
use custom docker registry
4 years ago
Julian Foad
Slavi Pantaleev
Julian-Samuel Gebühr
krassle
Vladimir Panteleev
Devin Dooley
Matthew Cengia
Aine
HarHarLinks
Hefty Zauk
heftyzauk
PC-Admin
Aine
SaltireSoul
Arthur Brugière
RoiArthurB
László Várady
Marko Weltzer
Marko Weltzer
Marko Weltzer
Jip J. Dekker
rakshazi
Shreyas Ajjarapu
John M
Christos Karamolegkos
boris runakov
b
b
borisrunakov
Luke
Alexandar Mechev
Michael Collins
Nate
Toorero
Stuart Mumford
Aaron Raimist
Raymond Coetzee
ewang
Toni Spets
Ahmad Haghighi