iartamonov/matrix-docker-ansible-deploy
1
0
Fork 0
mirror of https://github.com/spantaleev/matrix-docker-ansible-deploy.git synced 2026-07-19 11:16:20 +03:00
Code Issues Packages Projects Releases Wiki Activity
6,022 Commits 12 Branches 0 Tags
6d5cf9cbcd99e298352025edfd1b1eef539dbfc6
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Slavi PantaleevandGitHub 87567b3d0b Merge pull request #2599 from etkecc/honoroit-networks 
honoroit - add proper networking configuration and traefik labels
 2023-03-23 19:42:34 +02:00
Slavi Pantaleev 6b3ab052f6 Upgrade prometheus_node_exporter (v1.5.0-6 -> v1.5.0-7) 2023-03-23 11:02:27 +02:00
Slavi PantaleevandGitHub 7f8bc79947 Merge pull request #2597 from etkecc/patch-200 
Update grafana v9.4.3 -> v9.4.7
 2023-03-22 19:01:21 +02:00
Slavi Pantaleev 7be8943b64 Pin matrix-rageshake to 1.9.0 
Related to:

- https://github.com/matrix-org/rageshake/issues/69
- https://github.com/matrix-org/rageshake/pull/70
 2023-03-22 17:53:57 +02:00
Slavi PantaleevandGitHub a086688867 Merge pull request #2596 from Zocker1999NET/patch-2 
Describe disabled ntfy web app in documentation & changelog
 2023-03-22 11:28:40 +02:00
Slavi PantaleevandGitHub a54d8f82a0 Update configuring-playbook-ntfy.md 2023-03-22 11:28:34 +02:00
Slavi Pantaleev 69b2df629b Enable some recommended Coturn options in an effort to lower DDoS amplification factor 
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/2592
 2023-03-22 08:04:47 +02:00
Slavi Pantaleev c222391e77 Upgrade Traefik (v2.9.8-2 -> v2.9.9-0) 2023-03-22 07:46:53 +02:00
Slavi Pantaleev 7a7c75c6a4 Upgrade prometheus_postgres_exporter (v0.11.1-2 -> v0.12.0-0) 2023-03-22 07:43:54 +02:00
Slavi PantaleevandGitHub 4a009480ae Merge pull request #2593 from etkecc/patch-197 
Update prometheus v2.42.0 -> v2.43.0
 2023-03-21 20:14:43 +02:00
Slavi PantaleevandGitHub 01c565fc76 Merge pull request #2594 from etkecc/patch-198 
Update hookshot 3.0.0 -> 3.0.1
 2023-03-21 20:14:28 +02:00
Slavi PantaleevandGitHub 6ef8a30dc4 Merge pull request #2595 from etkecc/patch-199 
Update redis 7.0.9 -> 7.0.10
 2023-03-21 20:14:15 +02:00
Slavi Pantaleev 14b8efcad2 Replace matrix-prometheus with an external Prometheus role 2023-03-21 07:38:12 +02:00
Slavi Pantaleev d351213486 Upgrade prometheus_node_exporter (v1.5.0-4 -> v1.5.0-6) 2023-03-21 07:29:21 +02:00
Slavi Pantaleev 01db1ae9b7 Mention passlib 
It's not strictly required yet, but certain versions of Ansible display warnings
if passlib is missing. The non-passlib crypto usage is deprecated, so
passlib will become a requirement in newer Ansible versions. It's only a
matter of time.
 2023-03-20 18:44:20 +02:00
Slavi Pantaleev a1a37700b9 Update one more devture/ansible reference 2023-03-20 18:40:01 +02:00
Slavi Pantaleev a542a2ff41 Upgrade devture/ansible (2.13.6-r0-2 -> 2.13.6-r0-3) 2023-03-20 17:59:08 +02:00
Slavi Pantaleev 21c2bbb11f Add matrix_prometheus_nginxlog_exporter_container_network 2023-03-20 17:04:23 +02:00
Slavi Pantaleev ade312e6f6 Add matrix_hookshot_container_network 2023-03-20 17:03:19 +02:00
Slavi Pantaleev 1b6a85e485 Do not consider prometheus-exporters as part of the prometheus group 
This makes us rebuild/restart exporters when running `just install-service prometheus`,
which we don't like.
 2023-03-20 15:09:04 +02:00
Slavi Pantaleev abf96569e0 Add extra_args support to install-service justfile command 
It's now possible to do: `just install-service prometheus -l host.example.com`
 2023-03-20 15:05:19 +02:00
Slavi Pantaleev d974c0c166 Make yamllint happy 2023-03-20 11:09:59 +02:00
Slavi Pantaleev 220d80ac3a Move matrix-aux outside of this playbook 2023-03-20 11:06:27 +02:00
Slavi PantaleevandGitHub be3a733b69 Merge pull request #2588 from ctwelve/patch-1 
Update sliding sync doc for external DB users
 2023-03-20 09:21:13 +02:00
Slavi PantaleevandGitHub e726c97edc Merge pull request #2584 from Kab1r/fix/sliding-sync-sync-url 
fix(sliding-sync): Use external syncv3 server URL
 2023-03-19 08:15:09 +02:00
Slavi Pantaleev 3e84e354a8 Add "install-service" justfile command 
It should be noted that this cannot be used for the initial install
of services which require a database or have other dependencies.
Those would typically need to invoke the playbook with
`--tags=install-postgres,install-SERVICE`, etc.

The purpose of this shortcut is to easily rebuild and restart
a single serice subsequently. For those cases, often times there's no need to
reinitialize the database and other components and simply running a
single component's tasks is enough.
 2023-03-19 08:12:37 +02:00
Slavi PantaleevandGitHub 2c233492db Merge pull request #2585 from etkecc/patch-196 
update ntfy 2.1.2 -> 2.2.0
 2023-03-18 23:18:24 +02:00
Slavi PantaleevandGitHub 4198d04ec8 Merge pull request #2582 from etkecc/prometheus-node-exporter-changes 
migrate prometheus-node-exporter's var
 2023-03-18 10:51:53 +02:00
Slavi PantaleevandGitHub 8f0bef347a Merge pull request #2581 from array-in-a-matrix/master 
add database for Dendrite's relay API - fixes #2571
 2023-03-18 10:12:38 +02:00
Slavi PantaleevandGitHub 554915bd74 Merge pull request #2579 from etkecc/patch-195 
Update hookshot 2.7.0 -> 3.0.0
 2023-03-17 23:52:22 +02:00
Slavi PantaleevandGitHub 01cf29ecf4 Merge pull request #2578 from etkecc/patch-194 
Update mautrix-whatsapp 0.8.2 -> 0.8.3
 2023-03-17 23:51:47 +02:00
Slavi PantaleevandGitHub 00c00cf69b Merge pull request #2577 from etkecc/patch-193 
Update mautrix-discord 0.1.1 -> 0.2.0
 2023-03-17 23:51:17 +02:00
Slavi Pantaleev 56b0706863 Fix default database name 
For backward-compatibility reasons, this playbook uses `matrix` as its
main and default database.
 2023-03-17 08:27:52 +02:00
Slavi PantaleevandGitHub eae9565cde Merge pull request #2575 from etkecc/patch-192 
Update borgmatic 1.7.8 -> 1.7.9
 2023-03-17 07:58:03 +02:00
Slavi Pantaleev ee4bac1988 Upgrade matrix-corporal (2.5.1 -> 2.5.2) 2023-03-16 18:29:11 +02:00
Slavi Pantaleev d6975e4ab8 Upgrade com.devture.ansible.role.postgres 2023-03-16 14:57:40 +02:00
Slavi Pantaleev 2b49ae79ca Use just for Postgres maintenance command examples 2023-03-16 11:23:22 +02:00
Slavi Pantaleev 636142c4e0 matrix-bot-chatgpt role refactoring 2023-03-16 10:21:53 +02:00
Slavi Pantaleev a55c6b1b5a Remove non-functional variable matrix_bot_chatgpt_loglevel 
It wasn't used at all. It doesn't seem like there's a way to control
the log level, judging by:
- https://github.com/matrixgpt/matrix-chatgpt-bot/blob/8f9eea4114e74597dd7cfcc9454bf327ec32c2a3/.env.example
- https://github.com/matrixgpt/matrix-chatgpt-bot/blob/8f9eea4114e74597dd7cfcc9454bf327ec32c2a3/src/env.ts
 2023-03-16 10:21:53 +02:00
Slavi Pantaleev 9afc46de72 Update matrix_bot_chatgpt_matrix_blacklist/matrix_bot_chatgpt_matrix_whitelist comment 2023-03-16 10:21:53 +02:00
Slavi PantaleevandGitHub cc890297f8 Merge pull request #2573 from etkecc/patch-191 
Update element 1.11.24 -> 1.11.25
 2023-03-15 22:12:42 +02:00
Slavi Pantaleev 99cc5e4b2f Fix file name typo 2023-03-15 14:14:35 +02:00
Slavi PantaleevandGitHub 4bd1b6bb50 Merge pull request #2570 from array-in-a-matrix/patch-20 
fix typo in dendrite dynamic thumbnail var
 2023-03-14 20:23:03 +02:00
Slavi Pantaleev fab6c03609 Allow some new endpoints to work on workers 
Related to:

- https://github.com/matrix-org/synapse/commit/682d31c7023b6b7299e74bc631e4d2acc60f91ac
- https://github.com/matrix-org/synapse/commit/ecbe0ddbe7c47e05bc27b39dc10a9c30eafd2960
- https://github.com/matrix-org/synapse/commit/f4fc83ac755b8b06ecab1a31592308b03f8d2a5e

.. and https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/2569
 2023-03-14 19:21:43 +02:00
Slavi PantaleevandGitHub 40c094f486 Merge pull request #2569 from FSG-Cat/patch-1 
Upgrade Synapse from 1.78.0 to 1.79.0
 2023-03-14 19:18:27 +02:00
Slavi Pantaleev 4c1db32ef9 Rename some Dendrite variables to improve consistency 2023-03-14 08:52:15 +02:00
Slavi Pantaleev fd2f497ac0 Fix variable names 
Related to:
- https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/2565
- https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/2566
 2023-03-14 08:47:01 +02:00
Slavi PantaleevandGitHub 75cc50d2ab Merge pull request #2567 from array-in-a-matrix/patch-18 
Update dendrite to v0.12.0
 2023-03-14 08:43:18 +02:00
Slavi PantaleevandGitHub 38cb0a7c85 Merge pull request #2565 from array-in-a-matrix/master 
add dynamic thumbnails var for Dendrite
 2023-03-14 08:43:01 +02:00
Slavi PantaleevandGitHub bef13fe495 Merge branch 'master' into master 2023-03-14 08:42:55 +02:00
Slavi PantaleevandGitHub c747891cfe Merge pull request #2566 from array-in-a-matrix/search 
add full text search for dendrite
 2023-03-14 08:41:28 +02:00
Slavi Pantaleev cf7f9701b7 urlencode matrix_synapse_auto_compressor_database_username/matrix_synapse_auto_compressor_database_password 2023-03-13 11:59:14 +02:00
Slavi PantaleevandGitHub e5c5a9b02b Merge pull request #2561 from etkecc/synapse-auto-compressor 
add synapse_auto_compressor
 2023-03-12 10:55:20 +02:00
Slavi Pantaleev d3a0ef22b6 Announce matrix-synapse-auto-compressor 2023-03-12 10:55:08 +02:00
Slavi Pantaleev bb89d7b3fb Fix self-building for matrix-synapse-auto-compressor 2023-03-12 10:39:19 +02:00
Slavi Pantaleev 7422337c26 Add missing matrix-synapse-auto-compressor.timer in systemd service list 2023-03-12 10:18:33 +02:00
Slavi Pantaleev 328d0d8a5f Move synapse-auto-compressor Postgres argument to an environment variable 
This provides an additional security benefit. The password won't leak in
the process list anymore.
 2023-03-12 10:18:33 +02:00
Slavi Pantaleev 26d5719df4 Make matrix-synapse-auto-compressor live in its own container network 
It will, additionally, be connected to the devture-postgres network, if
devture-postgres is enabled.
 2023-03-12 10:18:33 +02:00
Slavi Pantaleev 0f2e568b30 Add validation tasks to matrix-synapse-auto-compressor 2023-03-12 10:18:33 +02:00
Slavi Pantaleev ca69fce648 Add missing group vars for matrix-synapse-auto-compressor 2023-03-12 10:18:33 +02:00
Slavi Pantaleev b28d779c6c Add matrix-synapse-auto-compressor section in group_vars/matrix_servers 2023-03-12 09:48:46 +02:00
Slavi Pantaleev 43ae0b2943 Minor rewording 2023-03-12 09:44:43 +02:00
Slavi PantaleevandGitHub 1bdd3e2503 Merge pull request #2560 from etkecc/patch-190 
update prometheus-node-exporter 1.5.0-2 -> 1.5.0-3
 2023-03-10 22:27:10 +02:00
Slavi Pantaleev 70af9a4481 Upgrade Traefik (v2.9.8-1 -> v2.9.8-2) - not using unprivileged ports anymore 2023-03-09 08:56:58 +02:00
Slavi PantaleevandGitHub d999e984da Merge pull request #2553 from array-in-a-matrix/patch-17 
fix incomplete config line
 2023-03-09 08:01:15 +02:00
Slavi PantaleevandGitHub dceb781e16 Merge pull request #2554 from joecool1029/gptbump 
Bump ChatGPT version and add new config settings
 2023-03-09 08:00:35 +02:00
Slavi PantaleevandGitHub 0d93ee8c46 Merge pull request #2548 from etkecc/patch-189 
Update jitsi stable-8252 -> stable-8319
 2023-03-07 22:45:30 +02:00
Slavi Pantaleev dddfee16bc Fix all 300+ ansible-lint-reported errors 2023-03-07 17:28:15 +02:00
Slavi Pantaleev bf95204860 Mention Element X Android not being quite ready for testing yet 2023-03-07 14:44:30 +02:00
Slavi Pantaleev 6c1a39e6e9 Announce sliding-sync support 
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/2515
 2023-03-07 12:22:04 +02:00
Slavi Pantaleev 023fe3ea08 Add sliding-sync support 
This allows people to try out the new Element X clients, which need to
run against the sliding-sync proxy (https://github.com/matrix-org/sliding-sync).

Supersedes https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/2515

The code is based on the existing PR (#2515), but heavily reworked. Major changes:

- lots of internal refactoring and variable renaming

- fixed self-building to support non-amd64 architectures

- changed to talk to the homeserver locally, over the container network (not
  publicly)

- no more matrix-nginx-proxy support due to complexity (see below)

- no more `matrix_server_fqn_sliding_sync_proxy` in favor of
  `matrix_sliding_sync_hostname` and `matrix_sliding_sync_path_prefix`

- runs on `matrix.DOMAIN/sliding-sync` by default, so it can tried
  easily without having to create new DNS records
 2023-03-07 11:57:56 +02:00
Slavi Pantaleev 2a872e95fc Mention external roles in the FAQ 2023-03-06 13:52:22 +02:00
Slavi Pantaleev db4070fc75 Remove some nginx references 2023-03-06 13:48:31 +02:00
Slavi Pantaleev 6e3aab6594 Make devture-traefik to matrix-traefik migration code a little safer 2023-03-06 11:00:42 +02:00
Slavi Pantaleev 26fdae3797 Upgrade com.devture.ansible.role.container_socket_proxy 2023-03-06 10:29:58 +02:00
Slavi Pantaleev e21c44347f Add Traefik Dashboard warning 2023-03-06 10:28:44 +02:00
Slavi Pantaleev 30f1034767 Remove matrix_playbook_traefik_role_enabled variable and devture-traefik references 
The variable was necessary when multiple playbooks could have
potentially tried to manage a shared `devture-traefik.serivce` systemd service
and shared `/devture-traefik` directory.

Since adcc6d9723, we use our own `/matrix/traefik`
(`matrix-traefik.service`) installation and no conflicts can arise.
It's safe to always enable the role, just like we do with all the other roles.
 2023-03-06 09:51:14 +02:00
Slavi Pantaleev adcc6d9723 Relocate Traefik (to matrix-traefik.service && /matrix/traefik base path) 
The migration is automatic. Existing users should experience a bit of
downtime until the playbook runs to completion, but don't need to do
anything manually.

This change is provoked by https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/2535

While my statements there ("Traefik is a shared component among
sibling/related playbooks and should retain its global
non-matrix-prefixed name and path") do make sense, there's another point
of view as well.

With the addition of docker-socket-proxy support in bf2b540807,
we potentially introduced another non-`matrix-`-prefixed systemd service
and global path (`/devture-container-socket-proxy`). It would have
started to become messy.

Traefik always being called `devture-traefik.service` and using the `/devture-traefik` path
has the following downsides:

- different playbooks may write to the same place, unintentionally,
  before you disable the Traefik role in some of them.
  If each playbook manages its own installation, no such conflicts
  arise and you'll learn about the conflict when one of them starts its
  Traefik service and fails because the ports are already in use

- the data is scattered - backing up `/matrix` is no longer enough when
  some stuff lives in `/devture-traefik` or `/devture-container-socket-proxy` as well;
  similarly, deleting `/matrix` is no longer enough to clean up

For this reason, the Traefik instance managed by this playbook
will now be called `matrix-traefik` and live under `/matrix/traefik`.

This also makes it obvious to users running multiple playbooks, which
Traefik instance (powered by which playbook) is the active one.
Previously, you'd look at `devture-traefik.service` and wonder which
role was managing it.
 2023-03-06 09:34:31 +02:00
Slavi Pantaleev bf2b540807 Harden Traefik security by accessing the Docker API through docker-socket-proxy 
With these changes, we:

- install https://github.com/Tecnativa/docker-socket-proxy via the
  https://github.com/devture/com.devture.ansible.role.container_socket_proxy Ansible role

- make Traefik access the Docker API via TCP by connecting to this
  socket proxy

- .. which allows us to run the Traefik container with less privileges
  (non-`root`, dropped capabilities)
 2023-03-06 09:11:02 +02:00
Slavi Pantaleev 449b51588e Remove usage of undefined matrix_bot_go_neb_identifier variable 
This is a mistake made in 10b5350370.

Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/2540
 2023-03-06 08:52:32 +02:00
Slavi PantaleevandGitHub d9ce9064f6 Merge pull request #2542 from etkecc/patch-188 
update honoroit 0.9.16 -> 0.9.17
 2023-03-05 20:16:31 +02:00
Slavi PantaleevandGitHub 6724b60d88 Merge pull request #2541 from etkecc/patch-187 
Update ntfy 2.1.1 -> 2.1.2
 2023-03-05 12:29:25 +02:00
Slavi Pantaleev 10b5350370 Add Traefik support to Go-NEB bot 
Completely untested.
 2023-03-03 10:40:45 +02:00
Slavi Pantaleev 6085e3a816 Add validation tasks for Etherpad migration (matrix_etherpad -> etherpad) 2023-03-03 10:38:11 +02:00
Slavi PantaleevandGitHub 2457ac0f6a Merge pull request #2538 from etkecc/patch-186 
update grafana 9.4.2 -> 9.4.3
 2023-03-03 09:56:35 +02:00
Slavi Pantaleev f8966cd8da Default etherpad_hostname to matrix_server_fqn_etherpad for backward compatibility 2023-03-03 09:47:13 +02:00
Slavi PantaleevandGitHub 8acfcf8bf1 Merge pull request #2537 from etkecc/patch-185 
update borgmatic 1.7.7 -> 1.7.8
 2023-03-03 09:35:43 +02:00
Slavi Pantaleev 70b67b12bc Upgrade com.devture.ansible.role.postgres_backup 2023-03-03 09:04:13 +02:00
Slavi Pantaleev 0dcfc74fc8 Upgrade com.devture.ansible.role.traefik_certs_dumper 2023-03-03 09:00:30 +02:00
Slavi Pantaleev 49b7d805ee Upgrade com.devture.ansible.role.traefik 2023-03-03 09:00:30 +02:00
Slavi PantaleevandGitHub c49875e71c Merge pull request #2536 from etkecc/patch-184 
update grafana 9.4.1 -> 9.4.2
 2023-03-03 08:27:00 +02:00
Slavi Pantaleev 849248b165 Upgrade Etherpad role (v1.8.18-1 -> v1.8.18-2) 2023-03-02 23:00:18 +02:00
Slavi Pantaleev 795c335395 Upgrade Etherpad role (v1.8.18-0 -> v1.8.18-1) 2023-03-02 22:58:45 +02:00
Slavi Pantaleev 124fbeda04 Switch to using an external Etherpad role 
This new role also adds native Traefik support and support for other
(non-`amd64`) architectures via self-building.
 2023-03-02 22:50:13 +02:00
Slavi Pantaleev ae76db4d77 Upgrade com.devture.ansible.role.traefik_certs_dumper for wait time increase (60 -> 180 sec.) 2023-03-02 16:06:11 +02:00
Slavi PantaleevandGitHub 2e2691e96b Merge pull request #2534 from FSG-Cat/draupnir 
Resolve Draupnir regression caused in #2508
 2023-03-02 10:35:29 +02:00
Slavi Pantaleev 4f74d21ba8 Upgrade devture/ansible (2.13.6-r0-1 -> 2.13.6-r0-2) 
The new version includes the `passlib` Python module.
 2023-03-02 10:31:50 +02:00
Slavi PantaleevandGitHub 606c1907bb Merge pull request #2533 from etkecc/patch-183 
update ntfy 2.1.0 -> 2.1.1
 2023-03-01 23:48:12 +02:00
Slavi Pantaleev 227d9d8209 Fix variable name typo 2023-03-01 23:14:40 +02:00
Slavi Pantaleev adc18251a9 Upgrade com.devture.ansible.role.traefik (2.9.6 -> 2.9.8) 2023-03-01 12:47:55 +02:00