2e74187050
Add matrix_client_element_hostname and matrix_client_element_path_prefix variables
2 years ago
eb7292f274
Add matrix_client_hydrogen_hostname and fix Hydrogen serving at non-root-path
2 years ago
6a52be7987
Add (native) Traefik support to matrix-client-hydrogen
...
Previously, it had to go through matrix-nginx-proxy.
It's exposed to Traefik directly via container labels now
Serving at a path other than `/` doesn't work well yet.
2 years ago
64e2b26ed5
Fix Hydrogen failing to start
...
We were mounting our own configuration to
`/usr/share/nginx/html/config.json`, which is a symlink to
`/tmp/config.json`. So we effectively mount our file to
`/tmp/config.json`.
When starting:
- if Hydrogen sees a `CONFIG_OVERRIDE` environment variable,
it will try to save it into our read-only config file and fail.
- if Hydrogen doesn't see a `CONFIG_OVERRIDE` environment variable (the
path we go through, because we don't pass such a variable),
it will try to copy its bundled configuration (`/config.json.bundled`)
to `/tmp/config.json`. Because our configuration is mounted as read-only, it will
fail.
In both cases, it will fail with:
> cp: can't create '/tmp/config.json': File exists
Source: 3720de36bb/docker/dynamic-config.sh
2 years ago
799cbb44fb
Add the ability to control (Traefik) routing priority for Element and synapse-admin
...
This may proof useful to someone in the future.
2 years ago
5c7cd70684
Make use of the existing matrix_synapse_admin_public_endpoint variable
2 years ago
c33ed94352
Add security headers to synapse-admin (on Traefik)
...
We've had it on `matrix-nginx-proxy` before, but
our initial support for Traefik did not include any of these security
headers.
2 years ago
71597132e0
Move around some matrix-client-element variables
2 years ago
5ab5f28d14
Add support for running synapse-admin (on Traefik) at the root path
...
Previously, we had to run it at a subpath, like `/synapse-admin`.
We can now dedicate a whole domain and the `/` path to it, should we
wish to do so.
2 years ago
ff1338e003
Add support for hosting Element (on Traefik) at a subpath
2 years ago
e34174b1b4
Add various security headers to matrix-client-element when behind Traefik
2 years ago
e51e4eec09
Add (native) Traefik support to matrix-client-element
...
Previously, it had to go through matrix-nginx-proxy.
It's exposed to Traefik directly via container labels now
2 years ago
f2ed5e4b04
Delete /matrix/nginx-proxy/conf.d/matrix-client-element.conf if matrix_nginx_proxy_proxy_element_enabled not enabled
2 years ago
9f820a506a
Update postmoogle 0.9.12 -> 0.9.13
...
* live SSL certificates reload on file changes (e.g., on automatic certs renewal)
* print all errors when trying connection to an SMTP server
2 years ago
31aa87fdb6
Merge pull request #2475 from etkecc/patch-167
...
Update coturn 4.6.1-r1 -> 4.6.1-r2
2 years ago
3d9aa8387e
Add (native) Traefik support to synapse-admin
...
Previously, it had to go through matrix-nginx-proxy.
It's exposed to Traefik directly via container labels now.
2 years ago
f6f7bbd2a1
Update coturn 4.6.1-r1 -> 4.6.1-r2
2 years ago
38904c08b0
Wire backup_borg_username
...
It's probably unnecessary, as this user is only used in the borg container
internally, but.. It doesn't hurt to set it to `matrix`.
2 years ago
78c35136b2
Replace matrix-backup-borg with an external role
2 years ago
af10d350bc
fix: missing endif in client well-known
2 years ago
6939a3d6d3
fix: only add element related entries to client well-known if element is enabled ( #2453 )
...
* fix: only add element related entries to client well-known if element is enabled
* Fix matrix-base/defaults/main.yml syntax
---------
Co-authored-by: Slavi Pantaleev <slavi@devture.com>
2 years ago
79413e7717
updated dendrite
2 years ago
f1a1ce8a91
Merge pull request #2464 from spantaleev/traefik
...
Reverse-proxy configuration changes and initial Traefik support
2 years ago
cba63bd4b9
Upgrade Drapunir from 1.8.0 Beta to 1.8.0 release.
2 years ago
6b0650641b
Update matrix_playbook_reverse_proxy_type documentation
2 years ago
8309a21303
Rename reverse proxy types and fix Hookshot http/https urlPrefix issue
2 years ago
3f2cb840b9
Merge branch 'master' into traefik
2 years ago
ad22bdb884
Do not run matrix-user-verification-service validation tasks unless the service is enabled
2 years ago
7142ff422d
Ensure matrix_user_verification_service_uvs_access_token is always defined
...
The playbook tries to avoid such variables which are sometimes defined
and sometimes not. We'd rather not check for `is defined`.
2 years ago
97f65e8dff
Minor fixes to allow for Traefik without SSL
2 years ago
a1ef28681a
Update Hydrogen 0.3.6 -> 0.3.7
2 years ago
28d2eb593c
Add matrix_playbook_reverse_proxy_type variable which influences all other services
2 years ago
06ccd71edc
Merge branch 'master' into traefik
2 years ago
f6ab162fff
Remove systemd-reloading handler in matrix-user-verification-service
...
None of the other roles use handlers.
We rely on com.devture.ansible.role.systemd_service_manager to reload services when it's necessary to do so.
2 years ago
e1bfa2a7d6
Fix ansible-lint-reported errors
2 years ago
43a6a035a0
Skip removing /.well-known/element directory to suppress ansible-lint error
...
Leaving an orphan directory is okay and can be improved later on.
2 years ago
01ccec2dbe
Merge branch 'master' into pr-jitsi-matrix-authentication
2 years ago
7cdf59d79b
Merge pull request #2451 from FSG-Cat/draupnir
...
Add Draupnir support to the project.
2 years ago
d6c8ea3742
Merge pull request #2452 from borisrunakov/update-matrix-chatgpt-bot
...
update matrix-chatgpt-bot
2 years ago
f71cd3a760
fix linting in validate_config.yml
2 years ago
b738486684
update validate_config.yml
2 years ago
d32f80bf29
Update postmoogle 0.9.11 -> 0.9.12
...
* fix uploads from incoming emails into matrix threads
* fix emails dequeue (account data cleanup)
* rewrite recipients handling (Cc, To, etc.)
2 years ago
9615855cfa
update matrix-chatgpt-bot
2 years ago
ddcb1735e2
Add draupnir as valid prefix to resolve a bug
...
Current draupnir does not listen to its name. This config change fixes this bug. This bodge is able to be removed once this is fixed upstream.
2 years ago
a717590aa5
Rename systemd service file from mjolnir to draupnir
2 years ago
88a26758e1
Merge branch 'master' into traefik
2 years ago
9092d4bb6b
Push draupnir version from develop to v1.80.0-beta.0
2 years ago
78b1ebd5af
commit main.yml for draupnir and set target ver to develop
2 years ago
563cf1a4ba
Initial commit for draupnir.
...
main.yml is not included due to that its changed separately.
2 years ago
49a1985750
Fix Postmoogle systemd service description
2 years ago
d44d4b637f
Allow Coturn to work with SSL certificates extracted from Traefik
2 years ago
2eb2ad0ad7
Update heisenbridge 1.14.1 -> 1.14.2
2 years ago
2b9061a5d3
Add support for reverse-proxying the base domain via Traefik
2 years ago
6c17671abd
Upgrade synapse-admin (0.8.6 -> 0.8.7) and drop reverse-proxy workaround
...
Related to 6a31fba3466a31fba346https://github.com/Awesome-Technologies/synapse-admin/issues/322
2 years ago
66baef5bf6
Fix matrix-synapse-reverse-proxy-companion.service stopping during uninstallation
...
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/2444
2 years ago
6a205a83f6
Change renamed variables matrix_systemd_path -> devture_systemd_docker_base_systemd_path
2 years ago
6cffec14ea
fixup! Remove the self-build stub, because self-build was not implemented
2 years ago
be634168ac
Make the linter happy.
2 years ago
f3ca4a0632
Remove unnecessary comment.
2 years ago
7848d865a5
Also define the vars to be overwritten in group vars within the role vars.
2 years ago
70bea81df7
Introduced flags to (1) enable/disable Auth (2) enable/disable openid_server_name pinning. Updated validate_config.yml and added new checks to verify.
2 years ago
96dd86d33b
Set default values where sensible and remove unnecessary conditionals in .env.j2.
...
Check for empty string instead of Null to verify if an openid_server_name is pinned.
2 years ago
6b206b3763
Move checks into validate_config.yml.
2 years ago
6499b6536a
Decoupling: Do not use variables user-verification-service role inside the jitsi role.
2 years ago
50c1e9d695
Set matrix_user_verification_service_uvs_homeserver_url in the role defaults and updated docs accordingly.
2 years ago
0e0ae2f3e6
Assign default log level in role instead of matrix_servers file.
2 years ago
bf5e633656
Remove the self-build stub, because self-build was not implemented
2 years ago
b89f5b7ff5
Clarify task name and add user and group to templated env file
...
Co-authored-by: Slavi Pantaleev <slavi@devture.com>
2 years ago
6913d368c8
Consolidate conditionals into a block, keep image
...
Co-authored-by: Slavi Pantaleev <slavi@devture.com>
2 years ago
8155f780e5
Add support for reverse-proxying Matric (Client & Federation) via Traefik
2 years ago
f983604695
Initial work on Traefik support
...
This gets us started on adding a Traefik role and hooking Traefik:
- directly to services which support Traefik - we only have a few of
these right now, but the list will grow
- to matrix-nginx-proxy for most services that integrate with
matrix-nginx-proxy right now
Traefik usage should be disabled by default for now and nothing should
change for people just yet.
Enabling these experiments requires additional configuration like this:
```yaml
devture_traefik_ssl_email_address: '.....'
matrix_playbook_traefik_role_enabled: true
matrix_playbook_traefik_labels_enabled: true
matrix_ssl_retrieval_method: none
matrix_nginx_proxy_https_enabled: false
matrix_nginx_proxy_container_http_host_bind_port: ''
matrix_nginx_proxy_container_federation_host_bind_port: ''
matrix_nginx_proxy_trust_forwarded_proto: true
matrix_nginx_proxy_x_forwarded_for: '$proxy_add_x_forwarded_for'
matrix_coturn_enabled: false
```
What currently works is:
reverse-proxying for all nginx-proxy based services **except** for the Matrix homeserver
(both Client-Server an Federation traffic for the homeserver don't work yet)
2 years ago
4d6a8d049d
Add matrix_nginx_proxy_container_network variable
2 years ago
e018663ba4
Attach ma1sd/nginx-proxy/synapse-reverse-proxy-companion to additional networks in a better way
...
Switching from doing "post-start" loop hacks to running the container
in 3 steps: `create` + potentially connect to additional networks + `start`.
This way, the container would be connected to all its networks even at
the very beginning of its life.
2 years ago
be78b74fbd
Switch from matrix-prometheus-postgres-exporter to an external prometheus_postgres_exporter role
2 years ago
2d7d5d4bab
Use new security-opt syntax (: -> =)
...
Related to https://docs.docker.com/engine/deprecated/#separator--of---security-opt-flag-on-docker-run
2 years ago
4d49f1f56e
Update Prometheus to v2.42.0 from v2.41.0
...
Docker images are released now so this change can now be pushed.
2 years ago
c11f772e78
Fix python packages path in synapse container
2 years ago
7cb140b987
Downgrade Prometheus (v2.42.0 -> v2.41.0) until a container image gets published
...
Container image not published yet.
Reverts #2438
2 years ago
d42ef7d243
Merge pull request #2439 from etkecc/patch-160
...
Update synapse 1.75.0 -> 1.76.0; default room version 9 -> 10
2 years ago
c8ce83c725
Merge pull request #2438 from etkecc/patch-159
...
Update prometheus 2.41.0 -> 2.42.0
2 years ago
0f208ed053
Update synapse 1.75.0 -> 1.76.0; default room version 9 -> 10
2 years ago
82d870fddf
Update prometheus 2.41.0 -> 2.42.0
2 years ago
5300740f70
Update element 1.11.21 -> 1.11.22
2 years ago
c7767e9bc8
Upgrade Coturn (4.6.1-r0 -> 4.6.1-r1)
2 years ago
66bb2943b4
Merge pull request #2436 from etkecc/patch-157
...
Update jitsi stable-8218 -> stable-8252
2 years ago
68ca23d709
Update jitsi stable-8218 -> stable-8252
2 years ago
d70076c805
Update element 1.11.20 -> 1.11.21
2 years ago
8c2b77bf0c
Update cinny 2.2.3 -> 2.2.4
2 years ago
611a74bde2
Use |to_json in mautrix metrics configuration
...
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/2427
2 years ago
d82d0ad84b
Add _metrics_proxying_enabled variables to mautrix bridges
...
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/2427
`metrics_enabled` should only expose the metrics locally, on the
container network, so that a local Prometheus can consume them.
Exposing them publicly should be done via a separate toggle (`metrics_proxying_enabled`).
This is how all other roles work, so this makes these mautrix roles consistent with the rest.
2 years ago
cad83ddca6
Merge pull request #2427 from alemairebe/mautrix-metrics
...
Mautrix metrics
2 years ago
f9a496c29c
Merge pull request #2432 from shalzz/patch/slack
...
mautrix-slack: add team name in channel name template
2 years ago
df9931f719
mautrix-slack: add team name in channel name template
2 years ago
389d6c978f
Merge pull request #2431 from etkecc/patch-154
...
Update borgmatic 1.7.5 -> 1.7.6
2 years ago
5482a9d5d0
Merge pull request #2429 from etkecc/patch-152
...
Update mautrix-discord latest -> 0.1.0
2 years ago
4f69b22a6e
Update borgmatic 1.7.5 -> 1.7.6
2 years ago
a9a17d803e
Update maubot 0.3.1 -> 0.4.0
2 years ago
111303208a
Update mautrix-discord latest -> 0.1.0
2 years ago
9eaf6944e3
add nginx proxy connfig for mautrix metrics
2 years ago
691ef13cab
template metric toggle for mautrix bridges supporting it
2 years ago
e588c42088
Improve synapse-admin reverse-proxying fix
...
Fixup for 6a31fba346
2 years ago
6a31fba346
Fix synapse-admin reverse-proxying regression caused by 0.8.6
...
Related to f165aa5d48https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/2424
2 years ago
f165aa5d48
Update synapse-admin 0.8.5 -> 0.8.6
2 years ago
7b5ced3037
Fix linting issue.
2 years ago
d66a2949f6
Update env.j2
...
Use matrix_bot_chatgpt_context for CHATGPT_CONTEXT
2 years ago
7e1408ea65
Bump ChatGPT version and add new config settings
...
matrix_bot_chatgpt_context=thread
2 years ago
430a55902c
Merge pull request #2420 from bertybuttface/patch-1
...
Upgrade matrix-chatgpt-bot to latest
2 years ago
784043cc5d
Ensure OPENAI_PRO is true/false (not True/False)
2 years ago
867737fe0b
Upgrade Grafana (9.3.4 -> 9.3.6)
2 years ago
aafa8f019c
Allow matrix_coturn_docker_network to be set to 'host' to use host-networking
...
This helps large deployments which need to open up thousands of ports
(matrix_coturn_turn_udp_min_port, matrix_coturn_turn_udp_min_port)
On a test VM, opening 1k ports takes 17 seconds for Docker to "publish"
all of these ports (setting up forwarding rules with the firewall, etc),
so service startup and shutdown take a long amount of time.
If host-networking is used, there's no need to open any ports at all
and startup/shutdown can be quick.
2 years ago
bb0faa6bc3
Block various private network ranges via denied_peer_ips for Coturn by default
...
Inspired by: https://www.rtcsec.com/article/cve-2020-26262-bypass-of-coturns-access-control-protection/
2 years ago
773cb7d37e
Make no-tcp-relay Coturn configuration property configurable
2 years ago
bf23d63f82
Add matrix_coturn_additional_configuration
2 years ago
4c9f96722f
Add no-multicast-peers to Coturn config by default
...
Part of a security hardening provoked by:
https://www.rtcsec.com/article/cve-2020-26262-bypass-of-coturns-access-control-protection/
2 years ago
18c3903def
Update env.j2
...
Set OPEN_AI to matrix_bot_chatgpt_openai_pro
2 years ago
ad58858a96
Upgrade matrix-chatgpt (1.2.3 -> 1.3.2)
...
Add support for OPENAI_PRO for ChatGPT pro subscriptions.
2 years ago
d01de9f33d
Fix lint errors
2 years ago
547b01d618
Added option to allow user to set jigasi user and password for AUTH
2 years ago
6afd3c59eb
Update grafana 9.3.2 -> 9.3.4
2 years ago
47165e8902
updated dendrite version
2 years ago
54e5e4b6b9
Merge pull request #2416 from moan0s/fix_cactus_comments
...
Fix client js and css download (load compiled version)
2 years ago
c4d1347466
Fix typos
2 years ago
18d8d41e14
Fix client js and css download (load compiled version)
2 years ago
9ed2e04d80
Switch from matrix-prometheus-node-exporter to an external prometheus_node_exporter role
2 years ago
5f7ed722f6
Merge pull request #2415 from etkecc/patch-148
...
Update hookshot 2.6.1 -> 2.7.0
2 years ago
32292b1f02
Update hookshot 2.6.1 -> 2.7.0
2 years ago
b71e267221
Update element 1.11.19 -> 1.11.20
2 years ago
8804a15821
Update element 1.11.18 -> 1.11.19
2 years ago
6c332da7d3
Fix ChatGPT container
...
This container needs a writable $HOME, and will fail at startup if
there isn't one.
Provide one by pointing HOME to a path under the mounted /data
directory.
2 years ago
63a3764f51
Update element 1.11.17 -> 1.11.18
2 years ago
70a35f17fe
Merge pull request #2402 from etkecc/patch-144
...
Update buscarron v1.3.0 -> v1.3.1
2 years ago
2fc02abfdc
Update buscarron v1.3.0 -> v1.3.1
2 years ago
903db54959
Update postmoogle 0.9.10 -> 0.9.11
2 years ago
424f79df3a
Replace synapse.app.pusher and synapse.app.federation_sender with synapse.app.generic_worker
...
Related to https://github.com/matrix-org/synapse/commit/3479599387164aca2613e88d169719
2 years ago
34745b5206
Upgrade Synapse (v1.74.0 -> v1.75.0)
2 years ago
3ff6e755a9
Upgrade Hookshot (2.6.0 -> 2.6.1)
2 years ago
e053b2b0fc
update mautrix-whatsapp 0.8.0 -> 0.8.1
2 years ago
5c8bad6091
update borg image tag
2 years ago
34c448c3bb
Upgrade Cinny (2.2.2 -> 2.2.3)
2 years ago
d1b4a6ebe1
unify docker images urls
2 years ago
5d10001712
Merge pull request #2394 from etkecc/patch-141
...
Update hookshot 2.5.0 -> 2.6.0
2 years ago
627d8557ae
Update hookshot 2.5.0 -> 2.6.0
2 years ago
e8c6267e9a
Update jitsi stable-8138-1 -> stable-8218
2 years ago
ae1ad3baf6
Improve block tasks indentation to make yamllint happy
...
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/2392
2 years ago
673ee508dc
Upgrade matrix-chatgpt (1.2.2 -> 1.2.3)
2 years ago
ab8cb21a45
Upgrade matrix-chatgpt (1.2.1 -> 1.2.2)
2 years ago
17438bd0dd
Upgrade mjolnir (v1.6.3 -> v1.6.4)
2 years ago
0c472c172e
Upgrade mjolnir (v1.6.1 -> v1.6.3)
2 years ago
4e40ac5ad8
Merge pull request #2227 from xangelix/add-matrix-mautrix-slack-role
...
Add matrix-bridge-mautrix-slack role
2 years ago
226d81318a
Merge branch 'bertybuttface-master'
2 years ago
Slavi Pantaleev
Aine
td
Array in a Matrix
Catalan Lover
ntallasv
Catalan Lover
jakicoll
Paul N
Jakob S
Shaleen Jain
Adrien le Maire
bertybuttface
rhys
Julian-Samuel Gebühr
Vladimir Panteleev
Aine