iartamonov/matrix-docker-ansible-deploy
1
0
Fork 0
mirror of https://github.com/spantaleev/matrix-docker-ansible-deploy.git synced 2026-07-19 10:16:20 +03:00
Code Issues Packages Projects Releases Wiki Activity
5,414 Commits 12 Branches 0 Tags
5e30f6d4c4af1bb000f56641b3a57ea91c512d3f
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Slavi Pantaleev f2e68469cb Upgrade nginx (1.23.2 -> 1.23.3) 2022-12-19 12:32:43 +02:00
Slavi Pantaleev 576eb0006c Upgrade Grafana (9.3.1 -> 9.3.2) 2022-12-17 22:49:34 +02:00
Slavi Pantaleev a7d39b109a Upgrade Redis (7.0.6 -> 7.0.7) 2022-12-17 22:48:48 +02:00
Slavi Pantaleev fa73513064 Upgrade mautrix-whatsapp (0.7.2 -> 0.8.0) 2022-12-17 22:47:38 +02:00
Slavi PantaleevandGitHub 0c6959de8b Merge pull request #2341 from etkecc/patch-137 
Update prometheus 2.40.6 -> 2.40.7
 2022-12-14 13:05:45 +02:00
Slavi PantaleevandGitHub 60127cdffd Merge pull request #2339 from etkecc/patch-135 
update redis 7.0.5 -> 7.0.6
 2022-12-14 07:31:36 +02:00
Slavi PantaleevandGitHub 190f241bf5 Merge pull request #2340 from etkecc/patch-136 
Update jitsi stable-8138 -> stable-8138-1
 2022-12-14 07:31:31 +02:00
Slavi PantaleevandGitHub ea591cdd8a Merge pull request #2338 from etkecc/patch-134 
update mautrix-instagram 0.2.2 -> 0.2.3
 2022-12-14 07:31:12 +02:00
Slavi Pantaleev 1f593f708f Upgrade Jitsi (stable-8044 -> stable-8138) 
Untested
 2022-12-12 19:00:55 +02:00
Slavi Pantaleev 3f4ab0bd7e Upgrade Redis (7.0.4 -> 7.0.5) 2022-12-12 19:00:55 +02:00
Slavi PantaleevandGitHub c99c23eca3 Merge pull request #2337 from FanchTheSystem/patch-1 
Specify relation between matrix-registration and matrix-registration-bot
 2022-12-12 16:21:04 +02:00
Slavi Pantaleev ae7325f251 Run com.devture.ansible.role.playbook_state_preserver even on --tags=install-all 2022-12-12 15:28:29 +02:00
Slavi PantaleevandGitHub e8ed318908 Merge pull request #2335 from gardar/fix-tag-typo 
fix: unclosed tags typo
 2022-12-12 08:18:03 +02:00
Slavi PantaleevandGitHub 6f52e8c64c Merge pull request #2334 from ikkemaniac/update-nginxlog 
Update nginxlog
 2022-12-12 08:17:43 +02:00
Slavi Pantaleev f69d90c1e6 Upgrade Prometheus (2.40.5 -> 2.40.6) 2022-12-11 18:29:13 +02:00
Slavi Pantaleev 86d177266a Upgrade matrix-corporal (2.4.0 -> 2.5.0) 2022-12-11 18:29:13 +02:00
Slavi PantaleevandGitHub b0030bd62f Merge pull request #2333 from mattcen/hydrogen-prebuilt-docker 
Use upstream Docker image for amd64 rather than self-build
 2022-12-11 17:01:48 +02:00
Slavi Pantaleev 2b89d5d92f Upgrade exim-relay (4.95-r0-4 -> 4.96-r1-0) 2022-12-11 11:45:47 +02:00
Slavi PantaleevandGitHub 905ffd091e Merge pull request #2332 from mochman/master 
add 'not' to fail check for s3_storage_provider
 2022-12-10 15:22:50 +02:00
Slavi Pantaleev d81e7d6328 Make matrix_synapse_ext_synapse_s3_storage_provider_config_endpoint_url required 
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/2330
 2022-12-10 10:37:01 +02:00
Slavi PantaleevandGitHub a2935ec7c8 Merge pull request #2329 from AIndoria/master 
Fix Broken ma1sd Playbook Documentation Link
 2022-12-09 17:17:12 +02:00
Slavi Pantaleev 3824139908 Rename inject_into_nginx_proxy.yml to init.yml when it does more than injection 2022-12-09 10:18:40 +02:00
Slavi Pantaleev f186d6236d Add some missing tags to Synapse role 
Without these:

- `--tags=install-synapse` and `--tags=install-all` would be incomplete
and will not contain Synapse worker configuration

- `--tags=install-synapse-reverse-proxy-companion` and
  `--tags=setup-synapse-reverse-proxy-companion` would not contain
  Synapse worker configuration
 2022-12-09 10:15:40 +02:00
Slavi PantaleevandGitHub da82c3bd4f Merge pull request #2327 from ikkemaniac/fix-nginxlog-prometheus 
fix: nginxlog prometheus config port
 2022-12-08 13:15:34 +02:00
Slavi PantaleevandGitHub bdf1bea873 Merge pull request #2326 from ikkemaniac/fix-nginxlox-systemd 
fix: nginxlog systemd entry
 2022-12-08 13:14:57 +02:00
Slavi PantaleevandGitHub 7900839d40 Merge pull request #2324 from thedanbob/delete-matrix-scripts 
Only delete playbook scripts from /usr/local/bin
 2022-12-07 21:37:14 +02:00
Slavi Pantaleev 6a5a09ba9b Remove matrix-change-user-admin-status mentions and provide an alternative 2022-12-07 20:36:28 +02:00
Slavi PantaleevandGitHub 48d601008c Merge pull request #2322 from etkecc/patch-133 
postmoogle - add missing join()s
 2022-12-07 13:53:12 +02:00
Slavi PantaleevandGitHub 87448c04de Merge pull request #2321 from etkecc/postmoogle-0910 
update postmoogle 0.9.9 -> 0.9.10
 2022-12-07 08:59:05 +02:00
Slavi PantaleevandGitHub b4cb085fb5 Merge pull request #2320 from etkecc/patch-132 
Update element v1.11.15 -> v1.11.16
 2022-12-06 16:51:41 +02:00
Slavi Pantaleev 9edc7da67d Do not specify now-unnecessary worker_main_http_uri Synapse worker setting 
Related to

- https://github.com/matrix-org/synapse/commit/c15e9a0edb696990365ac5a4e5be847b5ae23921
- https://github.com/matrix-org/synapse/commit/01a052789266179c70c10ea6a6253c64fd9990d2
 2022-12-06 15:54:06 +02:00
Slavi Pantaleev 13e7399104 Handle /timestamp_to_event via Synapse workers 
Related to https://github.com/matrix-org/synapse/commit/8f10c8b054fc970838be9ae6f1f5aea95f166c98
 2022-12-06 15:52:16 +02:00
Slavi Pantaleev 663fe29ddb Do not specify start_pushers in Synapse config 
It's unnecessary when `pusher_instances` is populated.

Source: https://github.com/matrix-org/synapse/commit/6acb6d772a77a4398c112d82118c5b79755a91cb
 2022-12-06 15:49:56 +02:00
Slavi Pantaleev 135bb5af3e Do not specify send_federation in Synapse config 
It's unnecessary when `federation_sender_instances` is populated.

Source: https://github.com/matrix-org/synapse/commit/6acb6d772a77a4398c112d82118c5b79755a91cb
 2022-12-06 15:49:28 +02:00
Slavi Pantaleev 84d529b542 Upgrade Synapse (v1.72.0 -> v1.73.0) 
Synapse Worker configuration updates are coming later.
 2022-12-06 15:47:07 +02:00
Slavi Pantaleev 9ab2a72e86 More matrix_postgres -> devture_postgres changes 
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/2319
 2022-12-06 10:12:31 +02:00
Slavi PantaleevandGitHub 86b436792d Merge pull request #2319 from felixx9/master 
matrix_ to devture_
 2022-12-06 10:11:53 +02:00
Slavi Pantaleev b1c77f9bf2 Add comment to matrix-backup-borg.service 
Related to 8005557061
 2022-12-05 15:45:33 +02:00
Slavi Pantaleev 8005557061 Give backup-borg container more permissions to perform the backup 
Running with a user (like `matrix:matrix`) fails if Etherpad is enabled,
because `/matrix/etherpad` is owned by `matrix_etherpad_user_uid`/`matrix_etherpad_user_gid` (`5001:5001`).

The `matrix` user can't acccess the Etherpad directory for this reason
and Borgmatic fails when trying to make a backup.

There may be other things under `/matrix` which similarly use
non-`matrix:matrix` permissions.

Another workaround might have been to add `/matrix/etherpad` (and
potentially other things) to `matrix_backup_borg_location_exclude_patterns`, but:

- that means Etherpad won't be backed up - not great
- only excluding Etherpad may not be enough. There may be other files we
  need to exclude as well

---

Running with `root` is still not enough though.

We need at least the `CAP_DAC_OVERRIDE` capability, or we won't be able to read the
`/etc/borgmatic.d/config.yaml` configuration file (owned by
`matrix:matrix` with `0640` permissions).

---

Additionally, it seems like the backup process tries to write to at least a few directories:
- `/root/.borgmatic`
- `/root/.ssh`
- `/root/.config`

> [Errno 30] Read-only file system: '/root/.borgmatic'
> Error while creating a backup.
> /etc/borgmatic.d/config.yaml: Error running configuration file

We either need to stop mounting the container filesystem as readonly
(remove `--read-only`) or to allow writing via a `tmpfs`.

I've gone the `tmpfs` route which seems to work.

In any case, the mounted source directories (`matrix_backup_borg_location_source_directories`)
are read-only regardless, so our actual source files are protected from unintentional changes.
 2022-12-05 15:42:57 +02:00
Slavi Pantaleev 7b123907e0 Fix borg repository URL format 
Reference: https://borgbackup.readthedocs.io/en/stable/usage/general.html#repository-urls

Otherwise, we'd get:

> /etc/borgmatic.d/config.yaml: Remote repository paths without ssh:// syntax are deprecated. Interpreting "user@hostname:matrix" as "ssh://user@hostname/./matrix"
 2022-12-05 15:15:47 +02:00
Slavi Pantaleev 64b03c2dfd Fix backup-borg repository initialization for borgmatic 1.7+ (or borg 2.0) 2022-12-05 15:00:11 +02:00
Slavi Pantaleev 1f1a3dfc38 Ensure database port is passed to Borg as an integer 
Without this, it's a string and borg says:

> At 'hooks.postgresql_databases[INDEX_HERE].port': '5432' is not of type 'integer'
> /etc/borgmatic/config.yaml /etc/borgmatic.d /tmp/.config/borgmatic/config.yaml /tmp/.config/borgmatic.d: No valid configuration files found

.. and fails to do anything.
 2022-12-05 14:42:02 +02:00
Slavi Pantaleev d8df03dfc9 Mark Postgres v15 as supported for borg backup 
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/2257

Fixed in https://gitlab.com/etke.cc/borgmatic/-/commit/d134cd7c4c0aadecc2c00df45bd8371e248aa81f
(thanks to `alpine:latest` now being `alpine:3.17.0`, which includes
Postgres v15)
 2022-12-05 11:46:49 +02:00
Slavi Pantaleev b2a40effaf Fix Element self-building by switching to docker-buildx 
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/2318
 2022-12-05 10:02:54 +02:00
Slavi Pantaleev 6414599079 Upgrade Coturn (4.6.0 -> 4.6.1) 2022-12-05 09:46:11 +02:00
Slavi PantaleevandGitHub 9b47a85322 Merge pull request #2316 from qlyoung/fix-s3-ensure-data-directory 
fix s3 storage provider not ensuring data dir
 2022-12-04 10:20:27 +02:00
Slavi Pantaleev 7464604ddd Make use of matrix_synapse_ext_s3_storage_provider_data_path in a few more places 2022-12-04 10:17:55 +02:00
Slavi Pantaleev ceb2c30277 Upgrade mautrix-signal (v0.4.1 -> v0.4.2) 2022-12-03 15:37:17 +02:00
Slavi Pantaleev 4589f94053 Upgrade Postgres (minor versions upgrade) 2022-12-02 19:17:35 +02:00
Slavi Pantaleev d59bbfdfc9 Upgrade Hookshot (2.4.0 -> 2.5.0) 2022-12-02 19:15:04 +02:00
Slavi Pantaleev a353bda7a1 Upgrade appservice-slack (2.0.1 -> 2.0.2) 2022-12-01 23:30:09 +02:00
Slavi Pantaleev 9e93030159 Upgrade Grafana (9.3.0 -> 9.3.1) 2022-12-01 23:29:33 +02:00
Slavi PantaleevandGitHub 7dc612743d Merge pull request #2311 from etkecc/patch-131 
Update prometheus 2.40.4 -> 2.40.5
 2022-12-01 17:40:03 +02:00
Slavi PantaleevandGitHub 5e595611fe Merge pull request #2309 from etkecc/patch-130 
fix hookshot role
 2022-11-30 14:33:40 +02:00
Slavi Pantaleev e3d21e8096 Rename some default Hookshot variables 
Fixup for 7e2e2626a0

Some references were left unrenamed which caused `validate_config.yml`
to trigger.
 2022-11-30 11:55:23 +02:00
Slavi Pantaleev dc817f30ce Upgrade Grafana (9.2.7 -> 9.3.0) 2022-11-30 11:50:21 +02:00
Slavi PantaleevandGitHub 9d5b5d7a01 Merge pull request #2308 from etkecc/patch-129 
Update grafana 9.2.6 -> 9.2.7
 2022-11-30 11:28:39 +02:00
Slavi Pantaleev 0a018ac22b Add internal Postgres instance (if enabled) to postgres-backup dependencies 2022-11-30 11:22:00 +02:00
Slavi Pantaleev d5ea17d66f Make postgres-backup priority start later 2022-11-30 11:18:39 +02:00
Slavi Pantaleev 4eed49f931 Replace custom/matrix-postgres-backup role with galaxy/com.devture.ansible.role.postgres_backup 
This role is usable on its own and it's not tied to Matrix, so
extracting it out into an independent role that we install via
ansible-galaxy makes sense.

This also fixes the confusion from the other day, where
`matrix_postgres_*` had to be renamed to `devture_postgres_*`
(unless it was about `matrix_postgres_backup_*`).
We now can safely say that ALL `matrix_postgres_*` variables need to be
renamed.

Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/2305
 2022-11-30 11:01:19 +02:00
Slavi PantaleevandGitHub a365e54f4d Merge pull request #2307 from etkecc/patch-128 
Update prometheus 2.40.2 -> 2.40.4
 2022-11-30 10:34:20 +02:00
Slavi Pantaleev de979bc6a2 Upgrade com.devture.ansible.role.postgres 2022-11-30 09:42:06 +02:00
Slavi Pantaleev bc64d8ed9a Upgrade prometheus-node-exporter (v1.4.0 -> v1.5.0) 2022-11-30 08:32:29 +02:00
Slavi Pantaleev 4a62df2ea3 Make Hookshot logging-level configurable 2022-11-30 08:18:41 +02:00
Slavi Pantaleev 84f306b236 Add support for enableHttpGet and waitForComplete Hookshot options 
Supersedes https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/2256
 2022-11-30 08:16:58 +02:00
Slavi Pantaleev 7e2e2626a0 Make hookshot variable names consistent with the rest of the playbook 
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/2256
 2022-11-30 08:13:39 +02:00
Slavi PantaleevandGitHub a2f0bcc4a3 Merge pull request #2306 from MrAnno/faq-docker-install-typo 
Fix Docker installation typo in FAQ
 2022-11-30 07:46:42 +02:00
Slavi Pantaleev b25385dffd Upgrade com.devture.ansible.role.postgres 2022-11-29 20:16:29 +02:00
Slavi PantaleevandGitHub d40d303cc5 Merge pull request #2304 from array-in-a-matrix/patch-10 
update dendrite to v0.10.8
 2022-11-29 19:46:54 +02:00
Slavi Pantaleev 8c5e34b37f Upgrade ddclient (v3.10.0-ls105 -> v3.10.0-ls106) 2022-11-29 08:20:36 +02:00
Slavi Pantaleev 4b2d30a474 Fix matrix_dendrite_client_api_turn_shared_secret not being defined 
Regression since https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/2290
 2022-11-28 18:33:18 +02:00
Slavi Pantaleev 5b26647127 Upgrade Certbot (v1.31.0 -> v2.0.0) and switch to new default key type (ecdsa) 
More details about the new key type can be found here:
https://eff-certbot.readthedocs.io/en/stable/using.html#rsa-and-ecdsa-keys

Existing RSA-based keys will continue to renew as RSA until manual
action is taken. Example from the documentation above:
> certbot renew --key-type ecdsa --cert-name example.com --force-renewal

In the future, we may add a command which does this automatically for
all domains.
 2022-11-28 09:24:25 +02:00
Slavi Pantaleev 81054bb19c Upgrade com.devture.ansible.role.postgres 2022-11-28 09:05:22 +02:00
Slavi Pantaleev 0d322a5c86 Announce matrix-postgres replacement and /usr/local/bin cleanup 2022-11-28 08:09:57 +02:00
Slavi Pantaleev 4b111d05d5 Pass devture_postgres_db_migration_request to com.devture.ansible.role.postgres in a cleaner way 2022-11-28 07:44:59 +02:00
Slavi Pantaleev 910cd9adf0 Replace import_role calls with include_role calls 2022-11-27 11:27:01 +02:00
Slavi Pantaleev 4bb3a38de6 Upgrade com.devture.ansible.role.postgres 2022-11-27 11:24:53 +02:00
Slavi Pantaleev 3d1ea3e79e Auto-delete old matrix scripts from /usr/local/bin 2022-11-27 10:10:00 +02:00
Slavi Pantaleev d1b2fd50be Remove manual service enablement/start for backup-borg 
This is done via devture_systemd_service_manager_services_list_auto
already.
 2022-11-27 10:04:03 +02:00
Slavi Pantaleev 2688e8bfc3 Optimize initial installation by not reloading systemd after each .service install 
We expect `--tags=start` to handle systemd reloading, so we don't need
to do it manually each time we install/uninstall a .service file.
 2022-11-27 10:02:45 +02:00
Slavi Pantaleev 707e909b9b /usr/local/bin/matrix-ssl-lets-encrypt-certificates-renew -> /matrix/ssl/bin/lets-encrypt-certificates-renew 2022-11-27 09:53:23 +02:00
Slavi Pantaleev fb86f6d5e7 /usr/local/bin/matrix-remove-all -> /matrix/bin/remove-all 2022-11-27 09:47:02 +02:00
Slavi Pantaleev c928148261 Make uninstall tasks for Synapse delete bin/ 2022-11-27 09:43:25 +02:00
Slavi Pantaleev 40cf9cd72c /usr/local/bin/matrix-dendrite-create-account -> /matrix/dendrite/bin/create-account 2022-11-27 09:42:10 +02:00
Slavi Pantaleev 7c5c3aedc4 Put s3-storage-provider scripts under /matrix/synapse/ext/s3-storage-provider/bin, not /usr/local/bin 2022-11-27 09:38:34 +02:00
Slavi Pantaleev 735e7355a5 Rename variable (matrix_synapse_ext_s3_storage_provider_path -> matrix_synapse_ext_s3_storage_provider_base_path) 2022-11-27 09:28:29 +02:00
Slavi Pantaleev 72744f9db9 /usr/local/bin/matrix-synapse-register-user -> /matrix/synapse/bin/register-user 2022-11-27 09:26:18 +02:00
Slavi Pantaleev 7b43ef34b7 Remove more hardcoded matrix-postgres references 2022-11-27 09:16:18 +02:00
Slavi Pantaleev 3d5d843418 Replace some devture_postgres_identifier instances with devture_postgres_connection_hostname 2022-11-27 08:31:54 +02:00
Slavi Pantaleev eedf5ad94d Remove some hardcoded matrix-postgres references 2022-11-27 08:23:43 +02:00
Slavi Pantaleev 04b9483f0d Switch from matrix-postgres to com.devture.ansible.role.postgres 2022-11-27 08:04:31 +02:00
Slavi Pantaleev dd9ae0d25c Fix accidentally swapped tags (rust-synapse-compress-state and update-user-password) 2022-11-27 07:24:39 +02:00
Slavi PantaleevandGitHub 1688983436 Merge pull request #2299 from etkecc/patch-127 
update mautrix-telegram 0.12.1 -> 0.12.2
 2022-11-26 20:51:02 +02:00
Slavi Pantaleev 018a609e47 Simplify matrix_postgres_backup_databases definition 
Related to 71de7cd8cd
 2022-11-26 18:57:45 +02:00
Slavi Pantaleev 71de7cd8cd Simplify matrix_backup_borg_postgresql_databases definition 
There was no need to add `synapse` to the list manually
and then add all other additional databases.

When the `synapse` database was the main database, this made sense.
Since a long time ago already, ALL databases are "additional" databases,
so the `synapse` database is part of that list.

We could additional add the main (`matrix`) database to this list,
but there's probably no point in backing that one up.
 2022-11-26 18:53:54 +02:00
Slavi PantaleevandGitHub 9427f9408d Merge pull request #2298 from pub-solar/docs/synapse-oidc-keycloak 
Update docs on how to use synapse & keycloak OIDC
 2022-11-26 17:23:31 +02:00
Slavi Pantaleev fe4c2d73f4 Update Ansible version requirements 
Tests were carried out like this:

- `virtualenv3 env`
- `./env/bin/pip install ansible==4.10.0 ansible-core==2.11.7`
- `./env/bin/ansible-playbook .....`

The lowest version of `ansible-core` available on PyPI right now is
2.11.0. That version has trouble with `ansible==4.0.0` though.
The errors we were hitting seemed to be resolved by others online by
using `ansible==4.10.0` instead, which has a minimum `ansible-core`
requirement of `2.11.7`, so that's what we went with.

Older versions of Ansible may work, but.. I'm having trouble
installing them and don't want to spend too much time on digging through
ancient versions and testing them out. People should just learn to run
up-to-date software.
 2022-11-26 16:45:07 +02:00
Slavi Pantaleev 16c18b0344 Upgrade Hydrogen (v0.3.4 -> v0.3.5) 2022-11-25 18:59:01 +02:00
Slavi Pantaleev fa523c6472 Remove blank lines 2022-11-25 17:36:42 +02:00
Slavi Pantaleev a04f6f4e3d Optimize uninstall tasks a bit 
- forego removing Docker images - it's not effective anyway, because it
  only removes the last version.. which is a drop in the bucket, usually

- do not reload systemd - it's none of our business. `--tags=start`,
  etc., handle this

- combine all uninstall tasks under a single block, which only runs if
  we detect traces (a leftover systemd .service file) of the component.
  If no such .service is detected, we skip them all. This may lead to
  incorect cleanup in rare cases, but is good enough for the most part.
 2022-11-25 17:28:57 +02:00