Commit Graph
100 Commits
Author SHA1 Message Date
Slavi Pantaleev a8fc4fe6ce Mention log4j vulnerability affecting mautrix-signal
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1459
and https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1452
2021-12-14 12:33:59 +02:00
Slavi PantaleevandGitHub 9bc8581d7f Merge pull request #1456 from rakshazi/patch-1
(Security fix) Update Element 1.9.6 -> 1.9.7
2021-12-13 18:16:48 +02:00
Slavi PantaleevandGitHub ce28c2f0c8 Merge pull request #1455 from hypn0tick/master
Update Jitsi Version (stable-6173 => stable-6727)
2021-12-13 09:48:47 +02:00
Slavi PantaleevandGitHub ab21da4c14 Merge pull request #1452 from laszabine/signal-1
Updated signald docker image path
2021-12-11 18:43:02 +02:00
Slavi PantaleevandGitHub 1406e83444 Merge pull request #1451 from skepticalwaves/patch-3
Fix email sending broken by #1406
2021-12-11 17:34:48 +02:00
Slavi PantaleevandGitHub b1d8e39612 Merge pull request #1446 from hypn0tick/master
Add support for creation of Jitsi internal authentication users in vars.yml
2021-12-11 10:14:50 +02:00
Slavi PantaleevandGitHub 6568b68759 Fix validation message
The check was checking for an empty string in `matrix_jitsi_prosody_auth_internal_accounts`,
which is unlikely to happen. We should check for an empty list instead.

The check was not validating username/password values, so telling the user that they need a non-empty
username/password is misleading. It was merely checking if there's at least one entry in the list.

This patch adjusts the check and message accordingly.
2021-12-11 10:14:33 +02:00
Slavi Pantaleev fc55df9318 Make some appservices reach the homeserver via nginx
This is useful when Synapse is using a worker setup. In that case,
we don't want appservices to connect to `matrix-synapse:8008`, because
not all APIs are exposed there.

Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1449
2021-12-10 08:29:57 +02:00
Slavi Pantaleev a9e222d523 Remove useless variable (matrix_appservice_webhooks_control_room_id)
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1447

Seems like there's such a variable in the
`matrix-bridge-appservice-slack` role, which is probably where it got
copied over from.
2021-12-09 19:46:20 +02:00
Slavi PantaleevandGitHub f6238c9305 Merge pull request #1443 from aaronraimist/v3-again
Run `workers-doc-to-yaml.sh`
2021-12-09 15:48:59 +02:00
Slavi PantaleevandGitHub 9b6bb9cad7 Merge pull request #1444 from aaronraimist/patch-1
Fix comments about `_database_*` variables
2021-12-09 15:45:33 +02:00
Slavi PantaleevandGitHub e53ca6d968 Merge pull request #1445 from johndotpub/dimension-self-build
Add self-build for Dimension (arm64 support)
2021-12-09 15:42:39 +02:00
Slavi PantaleevandGitHub c58c5b3610 Merge pull request #1441 from FSG-Cat/patch-3
Update Grafana from 8.3.0 to 8.3.1 due to Security Flaw
2021-12-08 06:02:27 +02:00
Slavi Pantaleev ff720bedce Upgrade matrix-postgres-backup default to v14
Related to c08880d175
2021-12-07 19:43:33 +02:00
Slavi PantaleevandGitHub c6cf2858b3 Merge pull request #1439 from wol-win/element-web-update
Update Element Web Version (v1.9.5 -> v1.9.6)
2021-12-06 21:06:07 +02:00
Slavi Pantaleev 9babaa5a2b Fix mx-puppet-discord media URLs using container-network URLs (http://matrix-nginx-proxy:12080) 2021-12-06 13:40:01 +02:00
Slavi PantaleevandGitHub 9ab7b9fa58 Merge pull request #1438 from Jaffex/master
Update signal bridge configuration template
2021-12-05 10:39:14 +02:00
Slavi PantaleevandGitHub 42352b491c Merge pull request #1432 from wol-win/prometheus
Update prometheus (v2.30.3 -> v2.31.1)
2021-12-02 15:01:03 +02:00
Slavi PantaleevandGitHub 971a751a5e Merge pull request #1433 from wol-win/redis
Update redis (6.2.4 -> 6.2.6)
2021-12-02 15:00:45 +02:00
Slavi PantaleevandGitHub 60c745a862 Merge pull request #1431 from wol-win/grafana
Update version grafana (8.2.2 -> 8.3.0)
2021-12-02 15:00:11 +02:00
Slavi Pantaleev d584b44f10 Upgrade matrix-corporal (2.2.1 -> 2.2.2) 2021-12-01 08:23:35 +02:00
Slavi PantaleevandGitHub 89094d0126 Merge pull request #1429 from felixx9/patch-1
Update importing-postgres.md
2021-12-01 08:22:17 +02:00
Slavi Pantaleev 1472958e25 Upgrade Synapse (1.47.1 -> 1.48.0) 2021-11-30 16:35:23 +02:00
Slavi PantaleevandGitHub c6f9363231 Merge pull request #1419 from redoonetworks/master
Ansible 2.10 & AWX 19.4 compatibility
2021-11-30 08:41:33 +02:00
Slavi PantaleevandGitHub 25e4d32cb6 Merge pull request #1420 from ChrisKar96/encrypted_macaroon_support
Support encrypted matrix_synapse_macaroon_secret_key
2021-11-30 08:32:49 +02:00
Slavi PantaleevandGitHub 90ff7df7b7 Merge pull request #1426 from skepticalwaves/patch-2
Update matrix-bridge-mautrix-telegram version
2021-11-30 08:20:11 +02:00
Slavi Pantaleev 61391647e9 Make /.well-known/matrix/client and /.well-known/matrix/server customizable
We recently had someone need to inject additional configuration into
`/.well-known/matrix/client` as described here:
https://github.com/turt2live/matrix-dimension/blob/22b245bbd11f7067b09c5f17efc48fc9c629b743/docs/bigbluebutton.md#have-dimension-create-meetings-with-elements-video-call-button

There may be other use cases as well.
2021-11-26 15:28:03 +02:00
Slavi Pantaleev cfc79ebe29 Upgrade exim-relay (4.94.2-r0-5 -> 4.95-r0) 2021-11-25 09:21:05 +02:00
Slavi Pantaleev ae45254d83 Add missing headers in Traefik v2 example
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1393
2021-11-24 11:34:40 +02:00
Slavi Pantaleev 3a9fe48deb Make matrix-nginx-proxy's X-Forwarded-For header customizable
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1393
2021-11-24 11:32:06 +02:00
Slavi PantaleevandGitHub 24a0d965bf Merge pull request #1417 from GoMatrixHosting/gomatrixhosting-testing
GoMatrixHosting v0.6.6
2021-11-24 10:02:19 +02:00
Slavi PantaleevandGitHub 986e7ce50c Merge pull request #1414 from hifi/feature/heisenbridge-1.7.1
Upgrade Heisenbridge (1.7.0 -> 1.7.1)
2021-11-23 15:32:43 +02:00
Slavi Pantaleev 6b07ee3b58 Upgrade Synapse (1.47.0 -> 1.47.1) - security fixes
Learn more here: https://github.com/matrix-org/synapse/releases/tag/v1.47.1
2021-11-23 14:50:07 +02:00
Slavi PantaleevandGitHub f0f5b9fa00 Merge pull request #1411 from wol-win/element_upgrade
Upgrade Element version (1.9.4 --> 1.9.5)
2021-11-22 18:12:31 +02:00
Slavi Pantaleev fc751f0330 Upgrade exim-relay (4.94.2-r0-4 -> 4.94.2-r0-5) 2021-11-20 09:31:04 +02:00
Slavi Pantaleev 2734adfb4e Upgrade matrix-corporal (2.2.0 -> 2.2.1) 2021-11-20 09:28:27 +02:00
Slavi PantaleevandGitHub 3b27ce2ff6 Merge pull request #1404 from aaronraimist/v3
Allow workers to serve new v3 APIs
2021-11-19 10:54:47 +02:00
Slavi Pantaleev 2e73dac39f Upgrade matrix-corporal (2.1.4 -> 2.2.0)
There was also a 2.1.5 security release made today.
2.2.0 contains the same security fix + more.

Both make handling of Client-Server API v3-prefixed requests better.

Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1404
2021-11-19 10:53:09 +02:00
Slavi PantaleevandGitHub df39a9bb72 Merge pull request #1407 from hifi/feature/heisenbridge-1.7.0
Upgrade Heisenbridge (1.6.0 -> 1.7.0)
2021-11-18 13:10:07 +02:00
Slavi PantaleevandGitHub 8cbddc7558 Merge pull request #1406 from rakshazi/master
expose smtp_user and smtp_pass to ansible configs (role: matrix-synapse)
2021-11-18 07:51:11 +02:00
Slavi Pantaleev e1a6d1e4b2 Upgrade Synapse (1.46.0 -> 1.47.0)
We had to remove UID/GID environment variables that we used to pass
to the Synapse container, because it was causing a problem after
https://github.com/matrix-org/synapse/pull/11209

We were using both `--user` and UID/GID environment variables until now.
2021-11-17 17:21:15 +02:00
Slavi Pantaleev 75cb4ce3b0 Add warning about matrix_ma1sd_default_port being renamed
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1403
2021-11-17 10:38:52 +02:00
Slavi PantaleevandGitHub b4fb819481 Merge pull request #1403 from borisrunakov/rename-matrix-ma1sd-default-port
remove default from variable name
2021-11-17 10:35:54 +02:00
Slavi PantaleevandGitHub 6bbc2054b8 Merge pull request #1402 from borisrunakov/matrix-synapse-container-client-api-port
make 8008 configurable
2021-11-17 10:34:40 +02:00
Slavi PantaleevandGitHub 5fc533eca5 Merge pull request #1400 from IUCCA/master
Updated Mautrix-WhatsApp config
2021-11-16 15:50:06 +02:00
Slavi Pantaleev e72ae8bc48 Upgrade matrix-corporal (2.1.3 -> 2.1.4) 2021-11-15 17:23:25 +02:00
Slavi Pantaleev c1bc7b9f93 Rename variables to prevent confusion
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1397
and https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1399
2021-11-15 14:56:11 +02:00
Slavi Pantaleev ba48aa70f7 Fix variable name typo
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1397
2021-11-15 14:52:08 +02:00
Slavi PantaleevandGitHub a536f5764e Merge pull request #1399 from borisrunakov/matrix-federation-api-port
make 8448 configurable instead of hard coded
2021-11-15 14:49:14 +02:00
Slavi PantaleevandGitHub dc4452ac21 Merge branch 'master' into matrix-federation-api-port 2021-11-15 14:49:03 +02:00
Slavi PantaleevandGitHub edf63bfdd7 Add some to_json invocations 2021-11-15 14:48:25 +02:00
Slavi Pantaleev 994c0e504c Ensure some matrix-nginx-proxy variables are defined
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1397
2021-11-15 14:46:44 +02:00
Slavi PantaleevandGitHub 0152ecef1c Merge pull request #1397 from borisrunakov/synapse_container_federation_port
Synapse container federation port
2021-11-15 14:45:34 +02:00
Slavi Pantaleev 0d4764a213 Upgrade matrix-corporal (2.1.2 -> 2.1.3)
2.1.3 fixes a security vulnerability, which allowed attackers to
circuimvent policy checks by sending HTTP requests with trailing slashes.

Learn more in the matrix-corporal changelog: https://github.com/devture/matrix-corporal/blob/master/CHANGELOG.md
2021-11-15 11:24:12 +02:00
Slavi Pantaleev 266bdbc902 Update matrix-corporal documentation 2021-11-15 10:29:27 +02:00
Slavi Pantaleev c08880d175 Upgrade postgres-backup to v14 2021-11-15 09:15:44 +02:00
Slavi PantaleevandGitHub 10523b700c Merge pull request #1396 from aaronraimist/postgres
Postgres Minor Updates (14.1, 13.5, 12.9, 11.14, 10.19)
2021-11-15 08:35:26 +02:00
Slavi Pantaleev 8abe1ac483 Warn people if on an old SQLite-supporting mautrix-facebook version
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1401

https://github.com/mautrix/facebook/releases/tag/v0.3.2 says that this
version re-adds SQLite support.
2021-11-15 08:28:20 +02:00
Slavi PantaleevandGitHub 20efa5ee70 Merge pull request #1401 from RoiArthurB/patch-1
Upgrade Mautrix Facebook bridge version
2021-11-15 08:12:09 +02:00
Slavi PantaleevandGitHub 24fd455a9e Merge pull request #1394 from JokerGermany/master
Port 80 for IPv6
2021-11-13 09:15:35 +02:00
Slavi PantaleevandGitHub c07d15ec6c Merge pull request #1392 from hifi/feature/heisenbridge-1.6.0
Upgrade Heisenbridge (1.5.0 -> 1.6.0)
2021-11-12 07:48:24 +02:00
Slavi Pantaleev b195760301 Mention dropped Postgres v9.6 support in the changelog
Related to c4d2c8394c
2021-11-11 16:04:20 +02:00
Slavi Pantaleev c4d2c8394c Abort if on an unsupported Postgres version (v9.6)
Official support ends today (2021-11-11).
Synapse still supports v9.6, but we'd better force users to transition
to newer versions anyway.
2021-11-11 15:42:34 +02:00
Slavi PantaleevandGitHub dc70e94a31 Merge pull request #1390 from sakkiii/patch-2
Nginx & Certbot Updates
2021-11-10 19:33:45 +02:00
Slavi Pantaleev 735c966ab6 Disable systemd services when stopping to uninstall them
Until now, we were leaving services "enabled"
(symlinks in /etc/systemd/system/multi-user.target.wants/).

We clean these up now. Broken symlinks may still exist in older
installations that enabled/disabled services. We're not taking care
to fix these up. It's just a cosmetic defect anyway.
2021-11-10 17:39:21 +02:00
Slavi PantaleevandGitHub f5fd9661fa Merge pull request #1388 from teutat3s/bump/element-client-1.9.4
Upgrade Element (v1.9.4)
2021-11-09 16:31:19 +02:00
Slavi Pantaleev 143b0f26d9 Restore usage of some _environment_variables_extension Jitsi variables
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1377

Regresion since https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1139
2021-11-08 10:34:09 +02:00
Slavi PantaleevandGitHub 9af010657d Merge pull request #1380 from borisrunakov/workers_with_own_webserver
add server_name to matrix-synapse.conf only if matrix_nginx_proxy_enabled
2021-11-05 15:38:28 +02:00
Slavi PantaleevandGitHub 60bf8bef9c Merge pull request #1379 from hifi/feature/heisenbridge-1.5.0
Upgrade Heisenbridge (1.4.1 -> 1.5.0)
2021-11-05 10:35:48 +02:00
Slavi PantaleevandPC-Admin 2d2e6986a1 Add missing space 2021-11-04 11:35:58 +08:00
Slavi PantaleevandGitHub 94777d5f0e Merge pull request #1376 from ldicarlo/patch-1
chore: adding some explanations about setting prometheus password
2021-11-04 00:29:13 +02:00
Slavi PantaleevandGitHub 12be1033e5 Add missing space 2021-11-04 00:28:58 +02:00
Slavi Pantaleev 7b8b595e81 Upgrade Synapse (1.45.1 -> 1.46.0) 2021-11-02 17:42:13 +02:00
Slavi Pantaleev dae117c91b Bump Hydrogen (0.2.7 -> 0.2.19) 2021-11-02 15:57:18 +02:00
Slavi PantaleevandGitHub 4586efebd7 Merge pull request #1369 from borisrunakov/configurable-ma1sd-port
change port 8090 to matrix_ma1sd_default_port
2021-11-01 10:50:14 +02:00
Slavi Pantaleev ff3bd12015 Upgrade devture/ansible (2.9.14-r0 -> 2.10.7-r0) 2021-11-01 10:48:17 +02:00
Slavi Pantaleev 0434e3bf8f Allow force-patching webpack.config.js when self-building Element
We were applying the low-memory system patch to webpack.config.js
on systems with < 4GB memory.

From now on, we also let people force-enable patching by toggling the
`matrix_client_element_container_image_self_build_low_memory_system_patch_enabled`
variable.

Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1357
2021-11-01 09:08:18 +02:00
Slavi PantaleevandGitHub add313c7be Merge pull request #1368 from hifi/patch-2
Upgrade Heisenbridge (1.4.0 -> 1.4.1)
2021-10-31 19:09:31 +02:00
Slavi PantaleevandGitHub 8f70f0f877 Merge pull request #1367 from GoMatrixHosting/gomatrixhosting-testing
GoMatrixHosting v0.6.4
2021-10-31 16:06:42 +02:00
Slavi PantaleevandGitHub 439c3fddc2 Merge pull request #1366 from pcfe/pcfe-do-not-use-quotes-for-shm-flag
fixes #1365
2021-10-30 15:34:10 +03:00
Slavi Pantaleev fc593bc8ab Increase shm-size for Postgres container to fix VACUUM
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1268

Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1364

Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1362
2021-10-30 09:53:56 +03:00
Slavi Pantaleev c8a8035de4 Make it possible to self-build Element on low-memory devices (<4G RAM)
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1357
2021-10-29 11:13:01 +03:00
Slavi Pantaleev 39fa852ed6 Remove unnecessary if checks
Should have been done in 63f5a88fa0.
2021-10-29 10:41:11 +03:00
Slavi Pantaleev 63f5a88fa0 Separate install/uninstall tasks for Element and Hydrogen 2021-10-29 10:29:54 +03:00
Slavi PantaleevandGitHub 76745342f4 Merge pull request #1361 from hifi/feature/heisenbridge-1.4.0
Upgrade Heisenbridge (1.3.0 -> 1.4.0)
2021-10-29 09:40:12 +03:00
Slavi PantaleevandGitHub e80cf7d92c Merge pull request #1360 from thomwiggers/patch-6
update IRC appservice
2021-10-28 16:28:24 +03:00
Slavi PantaleevandGitHub 28fe9ffed4 Merge pull request #1359 from jariz/patch-1
caddy example fixes
2021-10-28 14:33:13 +03:00
Slavi PantaleevandGitHub c81ac90a05 Merge pull request #1358 from sakkiii/patch-2
Prometheus & Grafana Update
2021-10-27 21:23:29 +03:00
Slavi Pantaleev feda83abf0 Mention that Hydrogen always undergoes self-building 2021-10-27 14:00:40 +03:00
Slavi PantaleevandGitHub be17792466 Merge pull request #1352 from throwawayay/patch-1
Upgrade Element (v1.9.3)
2021-10-25 20:40:01 +03:00
Slavi PantaleevandGitHub 06bcdcf9d2 Merge pull request #1311 from HarHarLinks/master
add auto proxy synapse worker metrics
2021-10-25 09:21:11 +03:00
Slavi PantaleevandGitHub 013c6e68f9 Merge pull request #1348 from hifi/feature/heisenbridge-1.3.0
Upgrade Heisenbridge (1.2.1 -> 1.3.0)
2021-10-21 20:15:12 +03:00
Slavi Pantaleev 09ac950d17 Fix dump importing (backup restore) into Postgres v14
In short, the problem is that older Postgres versions store passwords
hashed as md5. When you dump such a database, the dump naturally also
contains md5-hashed passwords.
Restoring from that dump used to create users and updates their passwords
with these md5 hashes.
However, Postgres v14 prefers does not like md5-hashed passwords now (by default),
which breaks connectivity. Postgres v14 prefers `scram-sha-256` for
authentication.

Our solution is to just ignore setting passwords (`ALTER ROLE ..`
statements) when restoring dumps. We don't need to set passwords as
defined in the dump anyway, because the playbook creates users
and manages their passwords by itself.

Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1340
2021-10-21 16:38:56 +03:00
Slavi PantaleevandGitHub 35c91701a8 Merge pull request #1347 from GoMatrixHosting/gomatrixhosting-testing
Gomatrixhosting v0.6.3 hotfix2
2021-10-21 10:03:41 +03:00
Slavi PantaleevandGitHub 86614d6357 Merge pull request #1345 from GoMatrixHosting/gomatrixhosting-testing
GoMatrixHosting v0.6.3 [hotfix]
2021-10-20 17:04:55 +03:00
Slavi Pantaleev 5dc2868269 Upgrade Synapse (1.45.0 -> 1.45.1) 2021-10-20 15:08:07 +03:00
Slavi PantaleevandGitHub 7595adb91d Merge pull request #1344 from aaronraimist/patch-1
Fix link to nginx files in configuring-playbook-own-webserver.md
2021-10-20 09:41:03 +03:00
Slavi PantaleevandGitHub 2fd968cf44 Merge pull request #1342 from aaronraimist/patch-1
Update installing.md to be a bit more clear
2021-10-20 09:12:50 +03:00
Slavi Pantaleev 1dab178a44 Upgrade Synapse (1.44.0 -> 1.45.0) 2021-10-19 16:25:00 +03:00
Slavi PantaleevandGitHub 139205f3b3 Merge pull request #1338 from GoMatrixHosting/gomatrixhosting-testing
Gomatrixhosting v0.6.3 - rebased properly :)
2021-10-19 14:45:19 +03:00