iartamonov/matrix-docker-ansible-deploy
1
0
Fork 0
mirror of https://github.com/spantaleev/matrix-docker-ansible-deploy.git synced 2026-07-19 14:16:19 +03:00
Code Issues Packages Projects Releases Wiki Activity
5,997 Commits 12 Branches 0 Tags
a542a2ff41f1a87ea6c6efa60528ee060c9f63ef
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Slavi Pantaleev a542a2ff41 Upgrade devture/ansible (2.13.6-r0-2 -> 2.13.6-r0-3) 2023-03-20 17:59:08 +02:00
Slavi Pantaleev 21c2bbb11f Add matrix_prometheus_nginxlog_exporter_container_network 2023-03-20 17:04:23 +02:00
Slavi Pantaleev ade312e6f6 Add matrix_hookshot_container_network 2023-03-20 17:03:19 +02:00
Slavi Pantaleev 1b6a85e485 Do not consider prometheus-exporters as part of the prometheus group 
This makes us rebuild/restart exporters when running `just install-service prometheus`,
which we don't like.
 2023-03-20 15:09:04 +02:00
Slavi Pantaleev abf96569e0 Add extra_args support to install-service justfile command 
It's now possible to do: `just install-service prometheus -l host.example.com`
 2023-03-20 15:05:19 +02:00
Slavi Pantaleev d974c0c166 Make yamllint happy 2023-03-20 11:09:59 +02:00
Slavi Pantaleev 220d80ac3a Move matrix-aux outside of this playbook 2023-03-20 11:06:27 +02:00
Slavi PantaleevandGitHub be3a733b69 Merge pull request #2588 from ctwelve/patch-1 
Update sliding sync doc for external DB users
 2023-03-20 09:21:13 +02:00
Slavi PantaleevandGitHub e726c97edc Merge pull request #2584 from Kab1r/fix/sliding-sync-sync-url 
fix(sliding-sync): Use external syncv3 server URL
 2023-03-19 08:15:09 +02:00
Slavi Pantaleev 3e84e354a8 Add "install-service" justfile command 
It should be noted that this cannot be used for the initial install
of services which require a database or have other dependencies.
Those would typically need to invoke the playbook with
`--tags=install-postgres,install-SERVICE`, etc.

The purpose of this shortcut is to easily rebuild and restart
a single serice subsequently. For those cases, often times there's no need to
reinitialize the database and other components and simply running a
single component's tasks is enough.
 2023-03-19 08:12:37 +02:00
Slavi PantaleevandGitHub 2c233492db Merge pull request #2585 from etkecc/patch-196 
update ntfy 2.1.2 -> 2.2.0
 2023-03-18 23:18:24 +02:00
Slavi PantaleevandGitHub 4198d04ec8 Merge pull request #2582 from etkecc/prometheus-node-exporter-changes 
migrate prometheus-node-exporter's var
 2023-03-18 10:51:53 +02:00
Slavi PantaleevandGitHub 8f0bef347a Merge pull request #2581 from array-in-a-matrix/master 
add database for Dendrite's relay API - fixes #2571
 2023-03-18 10:12:38 +02:00
Slavi PantaleevandGitHub 554915bd74 Merge pull request #2579 from etkecc/patch-195 
Update hookshot 2.7.0 -> 3.0.0
 2023-03-17 23:52:22 +02:00
Slavi PantaleevandGitHub 01cf29ecf4 Merge pull request #2578 from etkecc/patch-194 
Update mautrix-whatsapp 0.8.2 -> 0.8.3
 2023-03-17 23:51:47 +02:00
Slavi PantaleevandGitHub 00c00cf69b Merge pull request #2577 from etkecc/patch-193 
Update mautrix-discord 0.1.1 -> 0.2.0
 2023-03-17 23:51:17 +02:00
Slavi Pantaleev 56b0706863 Fix default database name 
For backward-compatibility reasons, this playbook uses `matrix` as its
main and default database.
 2023-03-17 08:27:52 +02:00
Slavi PantaleevandGitHub eae9565cde Merge pull request #2575 from etkecc/patch-192 
Update borgmatic 1.7.8 -> 1.7.9
 2023-03-17 07:58:03 +02:00
Slavi Pantaleev ee4bac1988 Upgrade matrix-corporal (2.5.1 -> 2.5.2) 2023-03-16 18:29:11 +02:00
Slavi Pantaleev d6975e4ab8 Upgrade com.devture.ansible.role.postgres 2023-03-16 14:57:40 +02:00
Slavi Pantaleev 2b49ae79ca Use just for Postgres maintenance command examples 2023-03-16 11:23:22 +02:00
Slavi Pantaleev 636142c4e0 matrix-bot-chatgpt role refactoring 2023-03-16 10:21:53 +02:00
Slavi Pantaleev a55c6b1b5a Remove non-functional variable matrix_bot_chatgpt_loglevel 
It wasn't used at all. It doesn't seem like there's a way to control
the log level, judging by:
- https://github.com/matrixgpt/matrix-chatgpt-bot/blob/8f9eea4114e74597dd7cfcc9454bf327ec32c2a3/.env.example
- https://github.com/matrixgpt/matrix-chatgpt-bot/blob/8f9eea4114e74597dd7cfcc9454bf327ec32c2a3/src/env.ts
 2023-03-16 10:21:53 +02:00
Slavi Pantaleev 9afc46de72 Update matrix_bot_chatgpt_matrix_blacklist/matrix_bot_chatgpt_matrix_whitelist comment 2023-03-16 10:21:53 +02:00
Slavi PantaleevandGitHub cc890297f8 Merge pull request #2573 from etkecc/patch-191 
Update element 1.11.24 -> 1.11.25
 2023-03-15 22:12:42 +02:00
Slavi Pantaleev 99cc5e4b2f Fix file name typo 2023-03-15 14:14:35 +02:00
Slavi PantaleevandGitHub 4bd1b6bb50 Merge pull request #2570 from array-in-a-matrix/patch-20 
fix typo in dendrite dynamic thumbnail var
 2023-03-14 20:23:03 +02:00
Slavi Pantaleev fab6c03609 Allow some new endpoints to work on workers 
Related to:

- https://github.com/matrix-org/synapse/commit/682d31c7023b6b7299e74bc631e4d2acc60f91ac
- https://github.com/matrix-org/synapse/commit/ecbe0ddbe7c47e05bc27b39dc10a9c30eafd2960
- https://github.com/matrix-org/synapse/commit/f4fc83ac755b8b06ecab1a31592308b03f8d2a5e

.. and https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/2569
 2023-03-14 19:21:43 +02:00
Slavi PantaleevandGitHub 40c094f486 Merge pull request #2569 from FSG-Cat/patch-1 
Upgrade Synapse from 1.78.0 to 1.79.0
 2023-03-14 19:18:27 +02:00
Slavi Pantaleev 4c1db32ef9 Rename some Dendrite variables to improve consistency 2023-03-14 08:52:15 +02:00
Slavi Pantaleev fd2f497ac0 Fix variable names 
Related to:
- https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/2565
- https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/2566
 2023-03-14 08:47:01 +02:00
Slavi PantaleevandGitHub 75cc50d2ab Merge pull request #2567 from array-in-a-matrix/patch-18 
Update dendrite to v0.12.0
 2023-03-14 08:43:18 +02:00
Slavi PantaleevandGitHub 38cb0a7c85 Merge pull request #2565 from array-in-a-matrix/master 
add dynamic thumbnails var for Dendrite
 2023-03-14 08:43:01 +02:00
Slavi PantaleevandGitHub bef13fe495 Merge branch 'master' into master 2023-03-14 08:42:55 +02:00
Slavi PantaleevandGitHub c747891cfe Merge pull request #2566 from array-in-a-matrix/search 
add full text search for dendrite
 2023-03-14 08:41:28 +02:00
Slavi Pantaleev cf7f9701b7 urlencode matrix_synapse_auto_compressor_database_username/matrix_synapse_auto_compressor_database_password 2023-03-13 11:59:14 +02:00
Slavi PantaleevandGitHub e5c5a9b02b Merge pull request #2561 from etkecc/synapse-auto-compressor 
add synapse_auto_compressor
 2023-03-12 10:55:20 +02:00
Slavi Pantaleev d3a0ef22b6 Announce matrix-synapse-auto-compressor 2023-03-12 10:55:08 +02:00
Slavi Pantaleev bb89d7b3fb Fix self-building for matrix-synapse-auto-compressor 2023-03-12 10:39:19 +02:00
Slavi Pantaleev 7422337c26 Add missing matrix-synapse-auto-compressor.timer in systemd service list 2023-03-12 10:18:33 +02:00
Slavi Pantaleev 328d0d8a5f Move synapse-auto-compressor Postgres argument to an environment variable 
This provides an additional security benefit. The password won't leak in
the process list anymore.
 2023-03-12 10:18:33 +02:00
Slavi Pantaleev 26d5719df4 Make matrix-synapse-auto-compressor live in its own container network 
It will, additionally, be connected to the devture-postgres network, if
devture-postgres is enabled.
 2023-03-12 10:18:33 +02:00
Slavi Pantaleev 0f2e568b30 Add validation tasks to matrix-synapse-auto-compressor 2023-03-12 10:18:33 +02:00
Slavi Pantaleev ca69fce648 Add missing group vars for matrix-synapse-auto-compressor 2023-03-12 10:18:33 +02:00
Slavi Pantaleev b28d779c6c Add matrix-synapse-auto-compressor section in group_vars/matrix_servers 2023-03-12 09:48:46 +02:00
Slavi Pantaleev 43ae0b2943 Minor rewording 2023-03-12 09:44:43 +02:00
Slavi PantaleevandGitHub 1bdd3e2503 Merge pull request #2560 from etkecc/patch-190 
update prometheus-node-exporter 1.5.0-2 -> 1.5.0-3
 2023-03-10 22:27:10 +02:00
Slavi Pantaleev 70af9a4481 Upgrade Traefik (v2.9.8-1 -> v2.9.8-2) - not using unprivileged ports anymore 2023-03-09 08:56:58 +02:00
Slavi PantaleevandGitHub d999e984da Merge pull request #2553 from array-in-a-matrix/patch-17 
fix incomplete config line
 2023-03-09 08:01:15 +02:00
Slavi PantaleevandGitHub dceb781e16 Merge pull request #2554 from joecool1029/gptbump 
Bump ChatGPT version and add new config settings
 2023-03-09 08:00:35 +02:00
Slavi PantaleevandGitHub 0d93ee8c46 Merge pull request #2548 from etkecc/patch-189 
Update jitsi stable-8252 -> stable-8319
 2023-03-07 22:45:30 +02:00
Slavi Pantaleev dddfee16bc Fix all 300+ ansible-lint-reported errors 2023-03-07 17:28:15 +02:00
Slavi Pantaleev bf95204860 Mention Element X Android not being quite ready for testing yet 2023-03-07 14:44:30 +02:00
Slavi Pantaleev 6c1a39e6e9 Announce sliding-sync support 
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/2515
 2023-03-07 12:22:04 +02:00
Slavi Pantaleev 023fe3ea08 Add sliding-sync support 
This allows people to try out the new Element X clients, which need to
run against the sliding-sync proxy (https://github.com/matrix-org/sliding-sync).

Supersedes https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/2515

The code is based on the existing PR (#2515), but heavily reworked. Major changes:

- lots of internal refactoring and variable renaming

- fixed self-building to support non-amd64 architectures

- changed to talk to the homeserver locally, over the container network (not
  publicly)

- no more matrix-nginx-proxy support due to complexity (see below)

- no more `matrix_server_fqn_sliding_sync_proxy` in favor of
  `matrix_sliding_sync_hostname` and `matrix_sliding_sync_path_prefix`

- runs on `matrix.DOMAIN/sliding-sync` by default, so it can tried
  easily without having to create new DNS records
 2023-03-07 11:57:56 +02:00
Slavi Pantaleev 2a872e95fc Mention external roles in the FAQ 2023-03-06 13:52:22 +02:00
Slavi Pantaleev db4070fc75 Remove some nginx references 2023-03-06 13:48:31 +02:00
Slavi Pantaleev 6e3aab6594 Make devture-traefik to matrix-traefik migration code a little safer 2023-03-06 11:00:42 +02:00
Slavi Pantaleev 26fdae3797 Upgrade com.devture.ansible.role.container_socket_proxy 2023-03-06 10:29:58 +02:00
Slavi Pantaleev e21c44347f Add Traefik Dashboard warning 2023-03-06 10:28:44 +02:00
Slavi Pantaleev 30f1034767 Remove matrix_playbook_traefik_role_enabled variable and devture-traefik references 
The variable was necessary when multiple playbooks could have
potentially tried to manage a shared `devture-traefik.serivce` systemd service
and shared `/devture-traefik` directory.

Since adcc6d9723, we use our own `/matrix/traefik`
(`matrix-traefik.service`) installation and no conflicts can arise.
It's safe to always enable the role, just like we do with all the other roles.
 2023-03-06 09:51:14 +02:00
Slavi Pantaleev adcc6d9723 Relocate Traefik (to matrix-traefik.service && /matrix/traefik base path) 
The migration is automatic. Existing users should experience a bit of
downtime until the playbook runs to completion, but don't need to do
anything manually.

This change is provoked by https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/2535

While my statements there ("Traefik is a shared component among
sibling/related playbooks and should retain its global
non-matrix-prefixed name and path") do make sense, there's another point
of view as well.

With the addition of docker-socket-proxy support in bf2b540807,
we potentially introduced another non-`matrix-`-prefixed systemd service
and global path (`/devture-container-socket-proxy`). It would have
started to become messy.

Traefik always being called `devture-traefik.service` and using the `/devture-traefik` path
has the following downsides:

- different playbooks may write to the same place, unintentionally,
  before you disable the Traefik role in some of them.
  If each playbook manages its own installation, no such conflicts
  arise and you'll learn about the conflict when one of them starts its
  Traefik service and fails because the ports are already in use

- the data is scattered - backing up `/matrix` is no longer enough when
  some stuff lives in `/devture-traefik` or `/devture-container-socket-proxy` as well;
  similarly, deleting `/matrix` is no longer enough to clean up

For this reason, the Traefik instance managed by this playbook
will now be called `matrix-traefik` and live under `/matrix/traefik`.

This also makes it obvious to users running multiple playbooks, which
Traefik instance (powered by which playbook) is the active one.
Previously, you'd look at `devture-traefik.service` and wonder which
role was managing it.
 2023-03-06 09:34:31 +02:00
Slavi Pantaleev bf2b540807 Harden Traefik security by accessing the Docker API through docker-socket-proxy 
With these changes, we:

- install https://github.com/Tecnativa/docker-socket-proxy via the
  https://github.com/devture/com.devture.ansible.role.container_socket_proxy Ansible role

- make Traefik access the Docker API via TCP by connecting to this
  socket proxy

- .. which allows us to run the Traefik container with less privileges
  (non-`root`, dropped capabilities)
 2023-03-06 09:11:02 +02:00
Slavi Pantaleev 449b51588e Remove usage of undefined matrix_bot_go_neb_identifier variable 
This is a mistake made in 10b5350370.

Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/2540
 2023-03-06 08:52:32 +02:00
Slavi PantaleevandGitHub d9ce9064f6 Merge pull request #2542 from etkecc/patch-188 
update honoroit 0.9.16 -> 0.9.17
 2023-03-05 20:16:31 +02:00
Slavi PantaleevandGitHub 6724b60d88 Merge pull request #2541 from etkecc/patch-187 
Update ntfy 2.1.1 -> 2.1.2
 2023-03-05 12:29:25 +02:00
Slavi Pantaleev 10b5350370 Add Traefik support to Go-NEB bot 
Completely untested.
 2023-03-03 10:40:45 +02:00
Slavi Pantaleev 6085e3a816 Add validation tasks for Etherpad migration (matrix_etherpad -> etherpad) 2023-03-03 10:38:11 +02:00
Slavi PantaleevandGitHub 2457ac0f6a Merge pull request #2538 from etkecc/patch-186 
update grafana 9.4.2 -> 9.4.3
 2023-03-03 09:56:35 +02:00
Slavi Pantaleev f8966cd8da Default etherpad_hostname to matrix_server_fqn_etherpad for backward compatibility 2023-03-03 09:47:13 +02:00
Slavi PantaleevandGitHub 8acfcf8bf1 Merge pull request #2537 from etkecc/patch-185 
update borgmatic 1.7.7 -> 1.7.8
 2023-03-03 09:35:43 +02:00
Slavi Pantaleev 70b67b12bc Upgrade com.devture.ansible.role.postgres_backup 2023-03-03 09:04:13 +02:00
Slavi Pantaleev 0dcfc74fc8 Upgrade com.devture.ansible.role.traefik_certs_dumper 2023-03-03 09:00:30 +02:00
Slavi Pantaleev 49b7d805ee Upgrade com.devture.ansible.role.traefik 2023-03-03 09:00:30 +02:00
Slavi PantaleevandGitHub c49875e71c Merge pull request #2536 from etkecc/patch-184 
update grafana 9.4.1 -> 9.4.2
 2023-03-03 08:27:00 +02:00
Slavi Pantaleev 849248b165 Upgrade Etherpad role (v1.8.18-1 -> v1.8.18-2) 2023-03-02 23:00:18 +02:00
Slavi Pantaleev 795c335395 Upgrade Etherpad role (v1.8.18-0 -> v1.8.18-1) 2023-03-02 22:58:45 +02:00
Slavi Pantaleev 124fbeda04 Switch to using an external Etherpad role 
This new role also adds native Traefik support and support for other
(non-`amd64`) architectures via self-building.
 2023-03-02 22:50:13 +02:00
Slavi Pantaleev ae76db4d77 Upgrade com.devture.ansible.role.traefik_certs_dumper for wait time increase (60 -> 180 sec.) 2023-03-02 16:06:11 +02:00
Slavi PantaleevandGitHub 2e2691e96b Merge pull request #2534 from FSG-Cat/draupnir 
Resolve Draupnir regression caused in #2508
 2023-03-02 10:35:29 +02:00
Slavi Pantaleev 4f74d21ba8 Upgrade devture/ansible (2.13.6-r0-1 -> 2.13.6-r0-2) 
The new version includes the `passlib` Python module.
 2023-03-02 10:31:50 +02:00
Slavi PantaleevandGitHub 606c1907bb Merge pull request #2533 from etkecc/patch-183 
update ntfy 2.1.0 -> 2.1.1
 2023-03-01 23:48:12 +02:00
Slavi Pantaleev 227d9d8209 Fix variable name typo 2023-03-01 23:14:40 +02:00
Slavi Pantaleev adc18251a9 Upgrade com.devture.ansible.role.traefik (2.9.6 -> 2.9.8) 2023-03-01 12:47:55 +02:00
Slavi Pantaleev a4b401c4da Upgrade com.devture.ansible.role.traefik and improve front-Traefik-with-another-proxy docs 
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/2532
 2023-03-01 12:32:30 +02:00
Slavi Pantaleev 8db2c0498a Upgrade Synapse (v1.77.0 -> v1.78.0) 2023-03-01 11:07:25 +02:00
Slavi Pantaleev d6371a0781 Upgrade ddclient (v3.10.0-ls110 -> v3.10.0-ls111) 2023-03-01 10:32:49 +02:00
Slavi Pantaleev 468bed653e Upgrade Redis (v7.0.7-0 -> v7.0.9-0) 2023-03-01 10:30:09 +02:00
Slavi Pantaleev ba2a3caaf3 Minor improvements to docs/configuring-playbook-ssl-certificates.md 2023-03-01 09:54:23 +02:00
Slavi PantaleevandGitHub d8c2e1a98c Merge pull request #2530 from plui29989/master 
Added doc for self-signed certificates
 2023-03-01 09:47:07 +02:00
Slavi PantaleevandGitHub 7331d314c4 Improve wording 2023-03-01 09:45:54 +02:00
Slavi Pantaleev b0845984b3 Only enable Traefik certs dumper if the ACME certificate resolver for Traefik is enabled 
If someone disables ACME, then they're using their own certificates
somehow. There's nothing to dump from an `acme.json` file.
 2023-03-01 09:45:16 +02:00
Slavi Pantaleev f7149103e4 Remove matrix_playbook_traefik_certs_dumper_role_enabled in favor of just devture_traefik_certs_dumper_enabled 
We don't need these 2 roughly-the-same settings related to the
traefik-certs-dumper role.

For Traefik, it makes sense, because it's a component used by the
various related playbooks and they could step onto each other's toes
if the role is enabled, but Traefik is disabled (in that case, uninstall
tasks will run).

As for Traefik certs dumper, the other related playbooks don't have it,
so there's no conflict. Even if they used it, each one would use its own
instance (different `devture_traefik_certs_dumper_identifier`), so there
wouldn't be a conflict and uninstall tasks can run without any danger.
 2023-03-01 09:31:48 +02:00
Slavi PantaleevandGitHub f372403d22 Merge pull request #2531 from array-in-a-matrix/master 
remove devture services in remove-all script
 2023-03-01 09:00:24 +02:00
Slavi PantaleevandGitHub 79685c728b Merge pull request #2528 from etkecc/patch-182 
Update element 1.11.23 -> 1.11.24
 2023-02-28 15:27:15 +02:00
Slavi PantaleevandGitHub 2da914e1bb Merge pull request #2527 from etkecc/patch-181 
Update grafana 9.3.6 -> 9.4.1
 2023-02-28 15:26:51 +02:00
Slavi Pantaleev 6fe739a2cb Remove unnecessary variable 2023-02-27 18:32:22 +02:00
Slavi Pantaleev bb90536874 Fix variable name typos in docs/configuring-playbook-postgres-backup.md 
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/2524
 2023-02-27 17:57:36 +02:00
Slavi Pantaleev 73f09d4bb0 Remove fronting matrix-nginx-proxy example 
We don't need this anymore. No one should be using matrix-nginx-proxy
anymore.
 2023-02-27 17:48:35 +02:00
Slavi PantaleevandGitHub a5e216b837 Merge pull request #2526 from jalemann/master 
Add example config + readme for fronting playbook's traefik with own nginx on same server
 2023-02-27 17:47:37 +02:00