iartamonov/matrix-docker-ansible-deploy
1
0
Fork 0
mirror of https://github.com/spantaleev/matrix-docker-ansible-deploy.git synced 2026-07-19 13:26:20 +03:00
Code Issues Packages Projects Releases Wiki Activity
5,953 Commits 12 Branches 0 Tags
75cc50d2abbe034da9a0219dcf32deb9c9df200e
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Slavi PantaleevandGitHub 75cc50d2ab Merge pull request #2567 from array-in-a-matrix/patch-18 
Update dendrite to v0.12.0
 2023-03-14 08:43:18 +02:00
Slavi PantaleevandGitHub 38cb0a7c85 Merge pull request #2565 from array-in-a-matrix/master 
add dynamic thumbnails var for Dendrite
 2023-03-14 08:43:01 +02:00
Slavi PantaleevandGitHub bef13fe495 Merge branch 'master' into master 2023-03-14 08:42:55 +02:00
Slavi PantaleevandGitHub c747891cfe Merge pull request #2566 from array-in-a-matrix/search 
add full text search for dendrite
 2023-03-14 08:41:28 +02:00
Slavi Pantaleev cf7f9701b7 urlencode matrix_synapse_auto_compressor_database_username/matrix_synapse_auto_compressor_database_password 2023-03-13 11:59:14 +02:00
Slavi PantaleevandGitHub e5c5a9b02b Merge pull request #2561 from etkecc/synapse-auto-compressor 
add synapse_auto_compressor
 2023-03-12 10:55:20 +02:00
Slavi Pantaleev d3a0ef22b6 Announce matrix-synapse-auto-compressor 2023-03-12 10:55:08 +02:00
Slavi Pantaleev bb89d7b3fb Fix self-building for matrix-synapse-auto-compressor 2023-03-12 10:39:19 +02:00
Slavi Pantaleev 7422337c26 Add missing matrix-synapse-auto-compressor.timer in systemd service list 2023-03-12 10:18:33 +02:00
Slavi Pantaleev 328d0d8a5f Move synapse-auto-compressor Postgres argument to an environment variable 
This provides an additional security benefit. The password won't leak in
the process list anymore.
 2023-03-12 10:18:33 +02:00
Slavi Pantaleev 26d5719df4 Make matrix-synapse-auto-compressor live in its own container network 
It will, additionally, be connected to the devture-postgres network, if
devture-postgres is enabled.
 2023-03-12 10:18:33 +02:00
Slavi Pantaleev 0f2e568b30 Add validation tasks to matrix-synapse-auto-compressor 2023-03-12 10:18:33 +02:00
Slavi Pantaleev ca69fce648 Add missing group vars for matrix-synapse-auto-compressor 2023-03-12 10:18:33 +02:00
Slavi Pantaleev b28d779c6c Add matrix-synapse-auto-compressor section in group_vars/matrix_servers 2023-03-12 09:48:46 +02:00
Slavi Pantaleev 43ae0b2943 Minor rewording 2023-03-12 09:44:43 +02:00
Slavi PantaleevandGitHub 1bdd3e2503 Merge pull request #2560 from etkecc/patch-190 
update prometheus-node-exporter 1.5.0-2 -> 1.5.0-3
 2023-03-10 22:27:10 +02:00
Slavi Pantaleev 70af9a4481 Upgrade Traefik (v2.9.8-1 -> v2.9.8-2) - not using unprivileged ports anymore 2023-03-09 08:56:58 +02:00
Slavi PantaleevandGitHub d999e984da Merge pull request #2553 from array-in-a-matrix/patch-17 
fix incomplete config line
 2023-03-09 08:01:15 +02:00
Slavi PantaleevandGitHub dceb781e16 Merge pull request #2554 from joecool1029/gptbump 
Bump ChatGPT version and add new config settings
 2023-03-09 08:00:35 +02:00
Slavi PantaleevandGitHub 0d93ee8c46 Merge pull request #2548 from etkecc/patch-189 
Update jitsi stable-8252 -> stable-8319
 2023-03-07 22:45:30 +02:00
Slavi Pantaleev dddfee16bc Fix all 300+ ansible-lint-reported errors 2023-03-07 17:28:15 +02:00
Slavi Pantaleev bf95204860 Mention Element X Android not being quite ready for testing yet 2023-03-07 14:44:30 +02:00
Slavi Pantaleev 6c1a39e6e9 Announce sliding-sync support 
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/2515
 2023-03-07 12:22:04 +02:00
Slavi Pantaleev 023fe3ea08 Add sliding-sync support 
This allows people to try out the new Element X clients, which need to
run against the sliding-sync proxy (https://github.com/matrix-org/sliding-sync).

Supersedes https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/2515

The code is based on the existing PR (#2515), but heavily reworked. Major changes:

- lots of internal refactoring and variable renaming

- fixed self-building to support non-amd64 architectures

- changed to talk to the homeserver locally, over the container network (not
  publicly)

- no more matrix-nginx-proxy support due to complexity (see below)

- no more `matrix_server_fqn_sliding_sync_proxy` in favor of
  `matrix_sliding_sync_hostname` and `matrix_sliding_sync_path_prefix`

- runs on `matrix.DOMAIN/sliding-sync` by default, so it can tried
  easily without having to create new DNS records
 2023-03-07 11:57:56 +02:00
Slavi Pantaleev 2a872e95fc Mention external roles in the FAQ 2023-03-06 13:52:22 +02:00
Slavi Pantaleev db4070fc75 Remove some nginx references 2023-03-06 13:48:31 +02:00
Slavi Pantaleev 6e3aab6594 Make devture-traefik to matrix-traefik migration code a little safer 2023-03-06 11:00:42 +02:00
Slavi Pantaleev 26fdae3797 Upgrade com.devture.ansible.role.container_socket_proxy 2023-03-06 10:29:58 +02:00
Slavi Pantaleev e21c44347f Add Traefik Dashboard warning 2023-03-06 10:28:44 +02:00
Slavi Pantaleev 30f1034767 Remove matrix_playbook_traefik_role_enabled variable and devture-traefik references 
The variable was necessary when multiple playbooks could have
potentially tried to manage a shared `devture-traefik.serivce` systemd service
and shared `/devture-traefik` directory.

Since adcc6d9723, we use our own `/matrix/traefik`
(`matrix-traefik.service`) installation and no conflicts can arise.
It's safe to always enable the role, just like we do with all the other roles.
 2023-03-06 09:51:14 +02:00
Slavi Pantaleev adcc6d9723 Relocate Traefik (to matrix-traefik.service && /matrix/traefik base path) 
The migration is automatic. Existing users should experience a bit of
downtime until the playbook runs to completion, but don't need to do
anything manually.

This change is provoked by https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/2535

While my statements there ("Traefik is a shared component among
sibling/related playbooks and should retain its global
non-matrix-prefixed name and path") do make sense, there's another point
of view as well.

With the addition of docker-socket-proxy support in bf2b540807,
we potentially introduced another non-`matrix-`-prefixed systemd service
and global path (`/devture-container-socket-proxy`). It would have
started to become messy.

Traefik always being called `devture-traefik.service` and using the `/devture-traefik` path
has the following downsides:

- different playbooks may write to the same place, unintentionally,
  before you disable the Traefik role in some of them.
  If each playbook manages its own installation, no such conflicts
  arise and you'll learn about the conflict when one of them starts its
  Traefik service and fails because the ports are already in use

- the data is scattered - backing up `/matrix` is no longer enough when
  some stuff lives in `/devture-traefik` or `/devture-container-socket-proxy` as well;
  similarly, deleting `/matrix` is no longer enough to clean up

For this reason, the Traefik instance managed by this playbook
will now be called `matrix-traefik` and live under `/matrix/traefik`.

This also makes it obvious to users running multiple playbooks, which
Traefik instance (powered by which playbook) is the active one.
Previously, you'd look at `devture-traefik.service` and wonder which
role was managing it.
 2023-03-06 09:34:31 +02:00
Slavi Pantaleev bf2b540807 Harden Traefik security by accessing the Docker API through docker-socket-proxy 
With these changes, we:

- install https://github.com/Tecnativa/docker-socket-proxy via the
  https://github.com/devture/com.devture.ansible.role.container_socket_proxy Ansible role

- make Traefik access the Docker API via TCP by connecting to this
  socket proxy

- .. which allows us to run the Traefik container with less privileges
  (non-`root`, dropped capabilities)
 2023-03-06 09:11:02 +02:00
Slavi Pantaleev 449b51588e Remove usage of undefined matrix_bot_go_neb_identifier variable 
This is a mistake made in 10b5350370.

Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/2540
 2023-03-06 08:52:32 +02:00
Slavi PantaleevandGitHub d9ce9064f6 Merge pull request #2542 from etkecc/patch-188 
update honoroit 0.9.16 -> 0.9.17
 2023-03-05 20:16:31 +02:00
Slavi PantaleevandGitHub 6724b60d88 Merge pull request #2541 from etkecc/patch-187 
Update ntfy 2.1.1 -> 2.1.2
 2023-03-05 12:29:25 +02:00
Slavi Pantaleev 10b5350370 Add Traefik support to Go-NEB bot 
Completely untested.
 2023-03-03 10:40:45 +02:00
Slavi Pantaleev 6085e3a816 Add validation tasks for Etherpad migration (matrix_etherpad -> etherpad) 2023-03-03 10:38:11 +02:00
Slavi PantaleevandGitHub 2457ac0f6a Merge pull request #2538 from etkecc/patch-186 
update grafana 9.4.2 -> 9.4.3
 2023-03-03 09:56:35 +02:00
Slavi Pantaleev f8966cd8da Default etherpad_hostname to matrix_server_fqn_etherpad for backward compatibility 2023-03-03 09:47:13 +02:00
Slavi PantaleevandGitHub 8acfcf8bf1 Merge pull request #2537 from etkecc/patch-185 
update borgmatic 1.7.7 -> 1.7.8
 2023-03-03 09:35:43 +02:00
Slavi Pantaleev 70b67b12bc Upgrade com.devture.ansible.role.postgres_backup 2023-03-03 09:04:13 +02:00
Slavi Pantaleev 0dcfc74fc8 Upgrade com.devture.ansible.role.traefik_certs_dumper 2023-03-03 09:00:30 +02:00
Slavi Pantaleev 49b7d805ee Upgrade com.devture.ansible.role.traefik 2023-03-03 09:00:30 +02:00
Slavi PantaleevandGitHub c49875e71c Merge pull request #2536 from etkecc/patch-184 
update grafana 9.4.1 -> 9.4.2
 2023-03-03 08:27:00 +02:00
Slavi Pantaleev 849248b165 Upgrade Etherpad role (v1.8.18-1 -> v1.8.18-2) 2023-03-02 23:00:18 +02:00
Slavi Pantaleev 795c335395 Upgrade Etherpad role (v1.8.18-0 -> v1.8.18-1) 2023-03-02 22:58:45 +02:00
Slavi Pantaleev 124fbeda04 Switch to using an external Etherpad role 
This new role also adds native Traefik support and support for other
(non-`amd64`) architectures via self-building.
 2023-03-02 22:50:13 +02:00
Slavi Pantaleev ae76db4d77 Upgrade com.devture.ansible.role.traefik_certs_dumper for wait time increase (60 -> 180 sec.) 2023-03-02 16:06:11 +02:00
Slavi PantaleevandGitHub 2e2691e96b Merge pull request #2534 from FSG-Cat/draupnir 
Resolve Draupnir regression caused in #2508
 2023-03-02 10:35:29 +02:00
Slavi Pantaleev 4f74d21ba8 Upgrade devture/ansible (2.13.6-r0-1 -> 2.13.6-r0-2) 
The new version includes the `passlib` Python module.
 2023-03-02 10:31:50 +02:00
Slavi PantaleevandGitHub 606c1907bb Merge pull request #2533 from etkecc/patch-183 
update ntfy 2.1.0 -> 2.1.1
 2023-03-01 23:48:12 +02:00
Slavi Pantaleev 227d9d8209 Fix variable name typo 2023-03-01 23:14:40 +02:00
Slavi Pantaleev adc18251a9 Upgrade com.devture.ansible.role.traefik (2.9.6 -> 2.9.8) 2023-03-01 12:47:55 +02:00
Slavi Pantaleev a4b401c4da Upgrade com.devture.ansible.role.traefik and improve front-Traefik-with-another-proxy docs 
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/2532
 2023-03-01 12:32:30 +02:00
Slavi Pantaleev 8db2c0498a Upgrade Synapse (v1.77.0 -> v1.78.0) 2023-03-01 11:07:25 +02:00
Slavi Pantaleev d6371a0781 Upgrade ddclient (v3.10.0-ls110 -> v3.10.0-ls111) 2023-03-01 10:32:49 +02:00
Slavi Pantaleev 468bed653e Upgrade Redis (v7.0.7-0 -> v7.0.9-0) 2023-03-01 10:30:09 +02:00
Slavi Pantaleev ba2a3caaf3 Minor improvements to docs/configuring-playbook-ssl-certificates.md 2023-03-01 09:54:23 +02:00
Slavi PantaleevandGitHub d8c2e1a98c Merge pull request #2530 from plui29989/master 
Added doc for self-signed certificates
 2023-03-01 09:47:07 +02:00
Slavi PantaleevandGitHub 7331d314c4 Improve wording 2023-03-01 09:45:54 +02:00
Slavi Pantaleev b0845984b3 Only enable Traefik certs dumper if the ACME certificate resolver for Traefik is enabled 
If someone disables ACME, then they're using their own certificates
somehow. There's nothing to dump from an `acme.json` file.
 2023-03-01 09:45:16 +02:00
Slavi Pantaleev f7149103e4 Remove matrix_playbook_traefik_certs_dumper_role_enabled in favor of just devture_traefik_certs_dumper_enabled 
We don't need these 2 roughly-the-same settings related to the
traefik-certs-dumper role.

For Traefik, it makes sense, because it's a component used by the
various related playbooks and they could step onto each other's toes
if the role is enabled, but Traefik is disabled (in that case, uninstall
tasks will run).

As for Traefik certs dumper, the other related playbooks don't have it,
so there's no conflict. Even if they used it, each one would use its own
instance (different `devture_traefik_certs_dumper_identifier`), so there
wouldn't be a conflict and uninstall tasks can run without any danger.
 2023-03-01 09:31:48 +02:00
Slavi PantaleevandGitHub f372403d22 Merge pull request #2531 from array-in-a-matrix/master 
remove devture services in remove-all script
 2023-03-01 09:00:24 +02:00
Slavi PantaleevandGitHub 79685c728b Merge pull request #2528 from etkecc/patch-182 
Update element 1.11.23 -> 1.11.24
 2023-02-28 15:27:15 +02:00
Slavi PantaleevandGitHub 2da914e1bb Merge pull request #2527 from etkecc/patch-181 
Update grafana 9.3.6 -> 9.4.1
 2023-02-28 15:26:51 +02:00
Slavi Pantaleev 6fe739a2cb Remove unnecessary variable 2023-02-27 18:32:22 +02:00
Slavi Pantaleev bb90536874 Fix variable name typos in docs/configuring-playbook-postgres-backup.md 
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/2524
 2023-02-27 17:57:36 +02:00
Slavi Pantaleev 73f09d4bb0 Remove fronting matrix-nginx-proxy example 
We don't need this anymore. No one should be using matrix-nginx-proxy
anymore.
 2023-02-27 17:48:35 +02:00
Slavi PantaleevandGitHub a5e216b837 Merge pull request #2526 from jalemann/master 
Add example config + readme for fronting playbook's traefik with own nginx on same server
 2023-02-27 17:47:37 +02:00
Slavi Pantaleev faa074f7af Improve wording 2023-02-27 17:47:19 +02:00
Slavi Pantaleev 91660f7433 Improve wordng in examples/nginx/README.md 2023-02-27 17:45:28 +02:00
Slavi Pantaleev 7716c306f1 Split Traefik rules for Matrix Client and Matrix Federation APIs 
This helps people who run federation on another domain (etc.).
They should now easily be able to add a custom rule for federation traffic.
 2023-02-27 17:28:33 +02:00
Slavi Pantaleev b388a01ab7 Wire all certResolver variables to devture_traefik_certResolver_primary 
This allows people wishing to change or unset the resolver,
to have a single variable which they can toggle.

Unsetting the resolver is useful for using your own certificates
(not coming from a certificate resolver).
 2023-02-27 17:09:19 +02:00
Slavi Pantaleev 9e7415afa2 Ensure Buscarron is part of the Postgres network 2023-02-27 17:07:44 +02:00
Slavi Pantaleev e6ba7cc2c9 Upgrade com.devture.ansible.role.traefik 2023-02-27 16:32:37 +02:00
Slavi PantaleevandGitHub 2c8dffc51c Merge pull request #2525 from thomwiggers/patch-8 
Update irc appservice
 2023-02-27 15:04:10 +02:00
Slavi Pantaleev d5910d0421 Upgrade com.devture.ansible.role.docker_sdk_for_python 
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/2522
 2023-02-27 08:27:41 +02:00
Slavi Pantaleev 058a54fd05 Add native Traefik support to Dimension 2023-02-26 23:06:36 +02:00
Slavi Pantaleev b84f25309b Add matrix_homeserver_container_network 2023-02-26 22:09:37 +02:00
Slavi Pantaleev cdd23aafc6 Add matrix_conduit_container_network/matrix_conduit_container_additional_networks 2023-02-26 22:08:08 +02:00
Slavi Pantaleev 9e4ecf4ac9 Add matrix_dendrite_container_network/matrix_dendrite_container_additional_networks 2023-02-26 22:05:36 +02:00
Slavi Pantaleev 31857ea9bb Upgrade com.devture.ansible.role.traefik_certs_dumper 2023-02-26 19:49:01 +02:00
Slavi Pantaleev 7c622bd249 Upgrade com.devture.ansible.role.traefik 2023-02-26 19:12:10 +02:00
Slavi PantaleevandGitHub f0463b0a10 Merge pull request #2520 from Jaffex/master 
Fix documentation when fronting traefik with another reverse proxy
 2023-02-26 18:44:57 +02:00
Slavi PantaleevandGitHub 835f2d482e Merge pull request #2519 from etkecc/patch-180 
update mautrix-telegram 0.12.2 -> 0.13.0
 2023-02-26 18:33:55 +02:00
Slavi Pantaleev 0452619820 Add Related plabooks 2023-02-26 16:21:50 +02:00
Slavi Pantaleev 71ae825f6a Switch default reverse-proxy to Traefik, force reverse-proxy choice on existing users 2023-02-26 16:14:05 +02:00
Slavi Pantaleev 67e97cd2dc Redo etke.cc section in the README 2023-02-26 15:55:05 +02:00
Slavi PantaleevandGitHub c57ffa4332 Merge pull request #2518 from etkecc/patch-179 
fix postgres version detection in the borg role
 2023-02-26 13:28:42 +02:00
Slavi Pantaleev d20ff688db Add native Traefik support to Sygnal 2023-02-26 11:03:42 +02:00
Slavi PantaleevandGitHub eb213c1195 Merge pull request #2517 from etkecc/patch-178 
Update ntfy 2.0.1 -> 2.1.0
 2023-02-26 10:20:46 +02:00
Slavi Pantaleev 348dd8e76b Remove double space 2023-02-25 19:37:35 +02:00
Slavi Pantaleev 8df7ad47cd Fix rageshake project description in defaults/main.yml 2023-02-25 19:04:28 +02:00
Slavi Pantaleev ccb5b37842 Fix some typos on the Buscarron docs page 2023-02-25 15:59:28 +02:00
Slavi Pantaleev 725b2beed7 Add native Traefik support to Buscarron 2023-02-25 15:50:48 +02:00
Slavi Pantaleev 3852a740bc Mention that Buscarron is aggressive when it comes to banning 2023-02-25 15:50:35 +02:00
Slavi Pantaleev bc5dda2b3a Reorder some Buscarron default variables and fix some typos 
Fixes a regression introduced in 0220c851e8
 2023-02-25 15:11:23 +02:00
Slavi Pantaleev d7578880b6 Fix typo on Rageshake documentation page 2023-02-25 15:07:47 +02:00
Slavi Pantaleev 63408096cf Fix up Buscarron description on its documentation page 2023-02-25 15:06:29 +02:00
Slavi Pantaleev 0220c851e8 Add multiple container networks support to Buscarron 2023-02-25 15:03:03 +02:00