iartamonov/matrix-docker-ansible-deploy
1
0
Fork 0
mirror of https://github.com/spantaleev/matrix-docker-ansible-deploy.git synced 2026-07-19 10:06:19 +03:00
Code Issues Packages Projects Releases Wiki Activity
10,831 Commits 12 Branches 0 Tags
b18c1efd65df489c8bc60e8a02b531fa05dc9dd5
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Slavi Pantaleev ecf9befc32 Adapt to the all-at-once restart mode default in systemd_service_manager v2.0.0-0 
- `install-service` no longer forces `one-by-one` restart mode

- the coturn priority condition is flipped: only `one-by-one` mode
  needs the delayed priority (1500); all other modes (including
  the new `all-at-once` default) use the normal priority (900)

Ref:

- https://github.com/devture/com.devture.ansible.role.systemd_service_manager/commit/d42cd9204548d47c1368badc9b152f4261093398
- https://github.com/devture/com.devture.ansible.role.systemd_service_manager/blob/f3e658cca3b41d3aedc81aa77cf22bafd9ca4d0f/docs/restart-mode-comparison.md
- https://github.com/devture/com.devture.ansible.role.systemd_service_manager/commit/36445fb41931c6baa3c44818877def4a162e5db4
- 750cb7e29e
 2026-02-10 16:41:41 +02:00
Slavi Pantaleev 750cb7e29e Upgrade systemd_service_manager (v1.1.0-0 -> v2.0.0-0) 2026-02-10 16:21:57 +02:00
Slavi Pantaleev ace086056f Upgrade Postgres (v18.1-4 -> v18.1-5) 2026-02-09 21:24:48 +02:00
Slavi PantaleevandClaude Opus 4.6 0e8ef8ef10 Add retry logic for Synapse user registration on Connection refused 
When DB credentials change (derived from matrix_synapse_macaroon_secret_key),
a running Synapse container may fail to connect to its database and stop
serving requests. This causes register_new_matrix_user to fail with
"Connection refused" when the matrix-user-creator role tries to register users.

This extends the retry logic from 44b43a51b (which handled HMAC failures)
to also handle Connection refused errors: restart Synapse (picking up the
new config with updated credentials), wait for it to start, and retry.

Caused by c21a80d232

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
 2026-02-09 17:36:59 +02:00
Slavi PantaleevandClaude Opus 4.6 2c2738a48f Remove passlib dependency by making matrix-media-repo datastore IDs user-provided 
These IDs were incorrectly auto-derived from matrix_homeserver_generic_secret_key,
which is meant for secrets that are OK to change. Datastore IDs are static
identifiers that must never change after first use.

The playbook now requires users to explicitly set matrix_media_repo_datastore_file_id
(and matrix_media_repo_datastore_s3_id when S3 is enabled) in vars.yml, with
validation that fails early if they are missing.

This was the last usage of passlib, which is now removed from prerequisites.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
 2026-02-09 16:56:51 +02:00
Slavi PantaleevandClaude Opus 4.6 44b43a51b9 Add retry logic for Synapse user registration on HMAC failure 
When the registration_shared_secret changes (derived from
matrix_synapse_macaroon_secret_key), a running Synapse container still
has the old secret in its config. This causes register_new_matrix_user
to fail with "HMAC incorrect" when the matrix-user-creator role tries
to register users.

This mirrors the approach from 2a581cce (which added similar retry
logic for the Matrix Authentication Service on database auth failure):
if the initial registration attempt fails with an HMAC error, restart
Synapse (picking up the new config with the updated secret), wait for
it to start, and retry.

Caused by c21a80d232

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
 2026-02-09 06:29:14 +02:00
Slavi Pantaleev 92c204394a Upgrade Postgres (v18.1-3 -> v18.1-4) 2026-02-08 18:46:36 +02:00
Slavi Pantaleev a1015b6df2 Change salt for Whatsapp token secrets to make pre-commit happy 2026-02-08 18:43:10 +02:00
Slavi PantaleevandClaude Opus 4.6 2a581cce62 Add retry logic for MAS user registration on database auth failure 
When the Postgres role updates database passwords (e.g., due to a
change in the secret derivation method), the Matrix Authentication
Service container may still be running with old configuration that
references the previous password. This causes mas-cli to fail with
"password authentication failed" when the matrix-user-creator role
tries to register users.

Rather than adding config-change detection or eager restarts to the
MAS role, this adds targeted retry logic: if the initial registration
attempt fails with a database authentication error, restart the MAS
service (which picks up the new config with the updated password),
wait for it to start, and retry. The restart usually only triggers
once per run since subsequent user registrations succeed after the restart.

Related to c21a80d232

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
 2026-02-08 18:32:20 +02:00
Slavi PantaleevandClaude Opus 4.6 c21a80d232 Switch to fast single-round hashing for derived secrets 
Replace password_hash('sha512', rounds=655555) with hash('sha512')
for all 114 secret derivations in group_vars/matrix_servers.

The old method (655k rounds of SHA-512) was designed for protecting
low-entropy human passwords in /etc/shadow. For deriving secrets
from a high-entropy secret key, a single hash round is equally
secure - the security comes from the key's entropy, not the
computational cost. SHA-512 remains preimage-resistant regardless
of rounds.

This yields a major performance improvement: evaluating
postgres_managed_databases (which references multiple derived
database passwords) dropped from ~10.7s to ~0.6s on a fast mini
PC. The Postgres role evaluates this variable multiple times, and
other roles reference derived passwords too, so the cumulative
savings across a full playbook run are substantial.

All derived service passwords (database passwords, appservice
tokens, etc.) will change on the next run. The main/superuser
database password is not affected (it's hardcoded in inventory
variables). All services receive their new passwords in the same
run, so this should be seamless.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
 2026-02-08 18:15:02 +02:00
Slavi Pantaleev cf6c5208e8 Fix cli-non-interactive syntax in uninstallation docs (add -c flag) 
The cli-non-interactive script passes arguments directly to psql, which
interprets positional arguments as database names, not SQL commands.
Without the -c flag, commands like:

  /matrix/postgres/bin/cli-non-interactive 'DROP DATABASE foo;'

fail with: FATAL: database "DROP DATABASE foo;" does not exist

The correct syntax requires -c to pass a command:

  /matrix/postgres/bin/cli-non-interactive -c 'DROP DATABASE foo;'

This mistake was originally introduced in c399992542
when the matrix-bridge-mautrix-hangouts role was removed. That commit's
uninstallation docs were then used as a template and the error propagated
to subsequent removal documentation for other bridges and components.
 2026-02-07 10:52:56 +02:00
Slavi Pantaleev 6d1ec58a82 Fix prometheus_postgres_exporter_port variable rename 
The variable was renamed to prometheus_postgres_exporter_container_http_port in
https://github.com/mother-of-all-self-hosting/ansible-role-prometheus-postgres-exporter/commit/2b37e604cb4cab88f8b1878ac1a347d0129b9195

Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/4897

Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/4894
 2026-02-06 01:25:34 +02:00
Slavi Pantaleev a7ddb189b5 Add missing license file for whoami_sync_worker_router.js.j2 2026-02-04 04:26:15 +02:00
Slavi Pantaleev 7d4536cf78 Upgrade baibot (v1.13.0 -> v1.14.0) and add built-in tools configuration support 2026-02-04 04:21:47 +02:00
Slavi Pantaleev 93f6264466 Add CHANGELOG entry for whoami-based sync worker routing 2026-02-04 04:06:59 +02:00
Slavi Pantaleev 45c855c853 Remove old map-based user identifier extraction for sync workers 
The whoami-based approach is now the only implementation for sync worker routing.
It works with all token types (native Synapse, MAS, etc.) and is automatically
enabled when sync workers exist.

The old map-based approach only worked with native Synapse tokens (syt_<b64>_...)
and would give poor results with MAS or other auth systems.
 2026-02-04 04:06:59 +02:00
Slavi Pantaleev 5cc69ca7eb Add whoami-based sync worker routing for user-level sticky sessions 
This adds a new routing mechanism for sync workers that resolves access tokens
to usernames via Synapse's whoami endpoint, enabling true user-level sticky
routing regardless of which device or token is used.

Previously, sticky routing relied on parsing the username from native Synapse
tokens (`syt_<base64 username>_...`), which only works with native Synapse auth
and provides device-level stickiness at best. This new approach works with any
auth system (native Synapse, MAS, etc.) because Synapse handles token validation
internally.

Implementation uses nginx's auth_request module with an njs script because:
- The whoami lookup requires an async HTTP subrequest (ngx.fetch)
- js_set handlers must return synchronously and don't support async operations
- auth_request allows the async lookup to complete, then captures the result
  via response headers into nginx variables

The njs script:
- Extracts access tokens from Authorization header or query parameter
- Calls Synapse's whoami endpoint to resolve token -> username
- Caches results in a shared memory zone to minimize latency
- Returns the username via a `X-User-Identifier` header

The username is then used by nginx's upstream hash directive for consistent
worker selection. This leverages nginx's built-in health checking and failover.
 2026-02-04 04:06:59 +02:00
Slavi Pantaleev 76e13f8200 Add native Sliding Sync (MSC3575) endpoint to worker routing 
The /_matrix/client/unstable/org.matrix.simplified_msc3575/sync endpoint
can be handled by generic workers, but Synapse's workers.md documentation
doesn't mention it. The code confirms it's worker-compatible:

- SlidingSyncRestServlet is registered via sync.register_servlets:
  https://github.com/element-hq/synapse/blob/0dfcffab0f/synapse/rest/client/sync.py#L1128-L1131

- sync.register_servlets is NOT in the worker exclusion list:
  https://github.com/element-hq/synapse/blob/0dfcffab0f/synapse/rest/__init__.py#L180-L194

- GenericWorkerStore includes SlidingSyncStore:
  https://github.com/element-hq/synapse/blob/0dfcffab0f/synapse/app/generic_worker.py#L168

This adds the endpoint to both:
- matrix_synapse_workers_sync_worker_client_server_endpoints (for specialized sync workers with sticky routing)
- matrix_synapse_workers_generic_worker_endpoints (documenting generic worker capability)
 2026-02-02 15:59:00 +02:00
Slavi Pantaleev b9631aea1c Upgrade ntfy (v2.16.0-0 -> v2.16.0-1) 2026-01-30 21:14:11 +02:00
Slavi Pantaleev 18b11eea3b Try versioning=loose for the Coturn container image definition for Renovate 
Ref: https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/4880#issuecomment-3807433691
 2026-01-27 22:40:47 +02:00
Slavi Pantaleev 460d46999f Make Synapse's enable_local_media_storage configurable 
Ref:
- https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/4882
- https://github.com/element-hq/synapse/pull/19204
- https://element-hq.github.io/synapse/latest/usage/configuration/config_documentation.html#enable_local_media_storage

We default it to `true`, keeping up with upstream and the old behavior.

s3-storage-provider users may set `matrix_synapse_enable_local_media_storage` to `false`
to disable local file caching.
This likely comes at the expense of some performance.

For matrix-media-repo users, it likely doesn't matter what this is set to,
as for a matrix-media-repo setup, all media-related API endpoints are
captured and forwarded to matrix-media-repo (before reaching Synapse).
 2026-01-27 22:11:06 +02:00
Slavi Pantaleev 97c2915034 Upgrade baibot (v1.12.0 -> v1.13.0) 2026-01-23 00:52:36 +02:00
Slavi Pantaleev 911031e2cf Add support for Hookshot static connections (new in v7.3.0) 
This adds the matrix_hookshot_connections variable for configuring
static webhook connections via the config file.

See: https://github.com/matrix-org/matrix-hookshot/pull/1102
 2026-01-20 16:10:30 +02:00
Slavi Pantaleev bd6202eb65 Upgrade Traefik (v3.6.6-0 -> v3.6.7-1) and remove all (now-unnecessary) encodedCharacters_* setting overrides 
All these `encodedCharacters_*` settings default to `true` in Traefik v3.6.7,
so we don't need to override their values.

Ref: https://doc.traefik.io/traefik/v3.6/migrate/v3/#v367

Closes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/4835
 2026-01-15 14:40:38 +02:00
Slavi Pantaleev ac5dc5d44f Pull in some additional Synapse workers routing configuration 
Provoked by https://github.com/element-hq/synapse/pull/19281
which landed in Synapse v1.145.0, but we pull in a few other routes
that I noticed to be missing.
 2026-01-14 12:07:09 +02:00
Slavi Pantaleev e1bf0aebd2 Upgrade LiveKit (v1.9.10-0 -> v1.9.10-1) 2026-01-12 10:10:14 +02:00
Slavi Pantaleev 8a02d791ea Add missing : to matrix_media_repo_redis_shards entry 
Ref: https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/4851#issuecomment-3732696383
 2026-01-10 15:10:09 +02:00
Slavi Pantaleev 5f3f57197e Revert "Remove outdated warning about Postmoogle not working well with Matrix Authentication Service" 
This reverts commit 81b371e690.

Ref: https://github.com/spantaleev/matrix-docker-ansible-deploy/commit/81b371e690e17ec5c26d8993ce051ccc233f1ecd#commitcomment-173871096
 2026-01-06 09:28:28 +02:00
Slavi Pantaleev edf833627e Add matrix_coturn_hostname to allow for the Coturn domain to be different than matrix_server_fqn_matrix 2025-12-25 10:03:39 +02:00
Slavi Pantaleev ed20b65912 Upgrade Traefik (v3.6.5-0 -> v3.6.5-1) 2025-12-25 09:57:33 +02:00
Slavi Pantaleev 66c85f63e6 Update default OpenAI image generation model for baibot (gpt-image-1 -> gpt-image-1.5) 2025-12-21 23:28:36 +02:00
Slavi Pantaleev 9ea18d6f2d Upgrade baibot (v1.11.0 -> v1.12.0) 2025-12-21 23:28:12 +02:00
Slavi Pantaleev 12bee503e0 Configure encodedCharacters for the web Traefik entrypoint (if matrix_playbook_ssl_enabled is false) to fix Traefik 3.6.3+ regression in those cases 
Continuation of e7cb9eee79

Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/4798
 2025-12-15 17:00:49 +02:00
Slavi Pantaleev e7cb9eee79 Configure encodedCharacters for various Traefik entrypoints to fix Traefik 3.6.3+ regression 
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/4798

Ref: https://doc.traefik.io/traefik/migrate/v3/#v364
 2025-12-15 13:00:53 +02:00
Slavi Pantaleev e813932240 Upgrade Traefik (v3.6.4-0 -> v3.6.4-1) 2025-12-15 12:34:43 +02:00
Slavi Pantaleev 98331ae970 Upgrade baibot (v1.10.0 -> v1.11.0) and add support for configuring a custom avatar 2025-12-15 10:27:44 +02:00
Slavi Pantaleev fa3d05ea81 Bump OpenAI text-generation model for baibot (gpt-5.1 -> gpt-5.2) 2025-12-12 16:03:40 +02:00
Slavi Pantaleev 88dcfbdaa7 Override matrix_matrixto_base_path in terms of matrix_base_data_path in group_vars/matrix_servers 
Closes https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/4787
 2025-12-08 05:39:14 +02:00
Slavi Pantaleev 95884479c3 Fix tag name typo (setup-jwt-service -> setup-livekit-jwt-service) for the livekit-jwt-service role 2025-12-06 08:35:33 +02:00
Slavi Pantaleev 64fc64921c Upgrade livekit-jwt-service (v0.3.0 -> v0.4.0) and adapt configuration 
Ref: https://github.com/element-hq/lk-jwt-service/releases/tag/v0.4.0

Supersedes https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/4784
 2025-12-06 08:34:33 +02:00
Slavi Pantaleev 4238ec6e86 Upgrade baibot (v1.9.0 -> v1.10.0) 2025-12-06 07:12:48 +02:00
Slavi Pantaleev 325b22a302 Stop using deprecated vars variable in all other custom roles 
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/4776

Supersedes https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/4777
 2025-12-02 21:32:15 +02:00
Slavi Pantaleev 0041bd01c3 Upgrade Postgres (v18.1-2 -> v18.1-3) 2025-12-02 07:38:38 +02:00
Slavi Pantaleev f31be1a725 Adapt to static-webserver v2.40.0 changes to the public directory 
Ref:

- https://github.com/static-web-server/static-web-server/releases/tag/v2.40.0
- https://github.com/static-web-server/static-web-server/pull/567
- https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/4767

Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/4768

Regression since a451f1fcb1
 2025-12-01 13:50:06 +02:00
Slavi Pantaleev 64d890300b Upgrade docker-sdk-for-python (c38854e4c8451520e20163af1dd5f657790332da -> 542a2d68db4e9a8e9bb4b508052760b900c7dce6) 2025-11-30 17:50:05 +02:00
Slavi Pantaleev fb0a1bd489 Upgrade baibot (v1.8.3 -> v1.9.0) 2025-11-30 12:37:57 +02:00
Slavi Pantaleev eda41e89c1 Upgrade baibot (v1.8.2 -> v1.8.3) 2025-11-28 14:53:31 +02:00
Slavi Pantaleev ebdb2cc827 Use a proper (bool) value for the matrix_bot_draupnir_login_native variable
Lock Threads / action (push) Has been cancelled
Matrix CI / yamllint (push) Has been cancelled
Matrix CI / ansible-lint (push) Has been cancelled
Matrix CI / Run pre-commit (push) Has been cancelled 
Otherwise Ansible casts the "" string to a bool.
This works, but it's deprecated and a bad idea anyway.
 2025-11-26 13:20:20 +02:00
Slavi Pantaleev 9b7767f451 Upgrade Postgres (v18.1-1 -> v18.1-2) 2025-11-26 13:17:04 +02:00
Slavi Pantaleev 201d3ea087 Upgrade Postgres (v18.1-0 -> v18.1-1) 2025-11-26 12:02:48 +02:00
Slavi Pantaleev bf3f4a9059 Upgrade timesync (v1.1.0-0 -> v1.1.0-1) 2025-11-26 12:01:47 +02:00
Slavi Pantaleev cbf8a2e7e9 Upgrade docker-sdk-for-python (129c8590e106b83e6f4c259649a613c6279e937a -> c38854e4c8451520e20163af1dd5f657790332da) 2025-11-26 11:59:38 +02:00
Slavi Pantaleev ddf0fe7167 Fix Ansible inject_facts_as_vars deprecation warning 2025-11-26 11:56:57 +02:00
Slavi Pantaleev 07423d3dd4 Upgrade playbook-help (7663e3114513e56f28d3ed762059b445c678a71a -> 8630e4f1749bcb659c412820f754473f09055052) 2025-11-26 11:35:28 +02:00
Slavi Pantaleev 430f350733 Stop using deprecated vars variable 2025-11-26 11:35:09 +02:00
Slavi Pantaleev b464f3cc55 Upgrade baibot (v1.8.1 -> v1.8.2)
Lock Threads / action (push) Has been cancelled
Matrix CI / yamllint (push) Has been cancelled
Matrix CI / ansible-lint (push) Has been cancelled
Matrix CI / Run pre-commit (push) Has been cancelled
2025-11-20 06:14:56 +02:00
Slavi Pantaleev fb2d7481dc Upgrade playbook-state-preserver (ff2fd42e1c1a9e28e3312bbd725395f9c2fc7f16 -> dd6e15246b7a9a2d921e0b3f9cd8a4a917a1bb2f)
Lock Threads / action (push) Has been cancelled
Matrix CI / yamllint (push) Has been cancelled
Matrix CI / ansible-lint (push) Has been cancelled
Matrix CI / Run pre-commit (push) Has been cancelled
Close stale issues and PRs / stale (push) Has been cancelled
2025-11-19 06:50:55 +02:00
Slavi Pantaleev 4b2919b538 Bump OpenAI text-generation model for baibot (gpt-5 -> gpt-5.1)
Lock Threads / action (push) Has been cancelled
Matrix CI / yamllint (push) Has been cancelled
Matrix CI / ansible-lint (push) Has been cancelled
Matrix CI / Run pre-commit (push) Has been cancelled
2025-11-18 06:24:08 +02:00
Slavi Pantaleev d05c83d0d5 Bump Anthropic text-generation model for baibot (claude-3-7-sonnet-20250219 -> claude-sonnet-4-5-20250929) 2025-11-18 06:23:47 +02:00
Slavi Pantaleev 45ed9cc226 Upgrade Postgres (v18.0-1 -> v18.1-0)
Lock Threads / action (push) Has been cancelled
Matrix CI / yamllint (push) Has been cancelled
Matrix CI / ansible-lint (push) Has been cancelled
Matrix CI / Run pre-commit (push) Has been cancelled
Close stale issues and PRs / stale (push) Has been cancelled
2025-11-14 07:01:48 +02:00
Slavi Pantaleev fe34e6c61d Upgrade Traefik (v3.6.0-0 -> v3.6.1-0) 2025-11-14 06:54:31 +02:00
Slavi Pantaleev 56629103c6 Revert "chore(deps): update ghcr.io/element-hq/synapse docker tag to v1.142.0"
Lock Threads / action (push) Has been cancelled
Matrix CI / yamllint (push) Has been cancelled
Matrix CI / ansible-lint (push) Has been cancelled
Matrix CI / Run pre-commit (push) Has been cancelled
Close stale issues and PRs / stale (push) Has been cancelled 
This reverts commit c8c6a83ecc.

Synapse v1.142.0 is broken for Matrix Authentication Service deployments
that use a path-prefix (e.g. `/auth`) such as ours.

For such deployments, Synapse fails to contact MAS at the correct
introspection endpoint (it keeps hitting `/oauth2/introspect`, instead of `/auth/oauth2/introspect`)
and is not usable.

Related to https://github.com/element-hq/synapse/commit/3595ff921f876ee6ccb03623ae93e21f723bd444
 2025-11-11 16:18:28 +02:00
Slavi Pantaleev 8979fdef79 Announce Zulip bridge
Lock Threads / action (push) Has been cancelled
Matrix CI / yamllint (push) Has been cancelled
Matrix CI / ansible-lint (push) Has been cancelled
Matrix CI / Run pre-commit (push) Has been cancelled
Close stale issues and PRs / stale (push) Has been cancelled 
Ref: https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/4695
 2025-11-08 09:12:39 +02:00
Slavi Pantaleev 1861faf31d Adjust matrix_steam_bridge_network_displayname_template 
Ref: https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/4714
 2025-11-08 08:02:46 +02:00
Slavi Pantaleev bf99fa9bb2 Fix docs/ansible.md --mount typo
Lock Threads / action (push) Has been cancelled
Matrix CI / yamllint (push) Has been cancelled
Matrix CI / ansible-lint (push) Has been cancelled
Matrix CI / Run pre-commit (push) Has been cancelled
Close stale issues and PRs / stale (push) Has been cancelled 
Ref: https://github.com/mother-of-all-self-hosting/mash-playbook/pull/1260
 2025-11-07 14:23:39 +02:00
Slavi Pantaleev 1235ea886d Update matrix_synapse_in_container_python_packages_path for Synapse v1.141.0 (Python 3.12 -> 3.13)
Lock Threads / action (push) Has been cancelled
Matrix CI / yamllint (push) Has been cancelled
Matrix CI / ansible-lint (push) Has been cancelled
Matrix CI / Run pre-commit (push) Has been cancelled
Close stale issues and PRs / stale (push) Has been cancelled 
Ref:
- https://github.com/element-hq/synapse/releases/tag/v1.141.0
- https://github.com/element-hq/synapse/pull/19064

> The Docker images are now based on Debian trixie and use Python 3.13.
 2025-10-29 18:39:31 +02:00
Slavi Pantaleev afbf4df32d Add deprecation warnings for matrix_synapse_experimental_features_msc3202_device_masquerading_enabled and matrix_synapse_experimental_features_msc4133_enabled 
Follow-up to e0e4032002
 2025-10-29 18:39:31 +02:00
Slavi Pantaleev c7a3315af3 Restrict allowed Postgres versions (via postgres_allowed_versions_auto) when Borg Backup is enabled
Lock Threads / action (push) Has been cancelled
Matrix CI / yamllint (push) Has been cancelled
Matrix CI / ansible-lint (push) Has been cancelled
Matrix CI / Run pre-commit (push) Has been cancelled 
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/4632
 2025-10-20 15:59:44 +03:00
Slavi Pantaleev b5ffb9e72f Upgrade Postgres (v18.0-0 -> v18.0-1) 2025-10-20 15:59:03 +03:00
Slavi Pantaleev b2024fa7c1 Upgrade Matrix Authentication Service (1.4.0 -> 1.4.1)
Lock Threads / action (push) Has been cancelled
Matrix CI / yamllint (push) Has been cancelled
Matrix CI / ansible-lint (push) Has been cancelled
Matrix CI / Run pre-commit (push) Has been cancelled
Close stale issues and PRs / stale (push) Has been cancelled
2025-10-16 17:59:09 +03:00
Slavi Pantaleev d908d003c8 Add support for configuring account.password_registration_email_required for Matrix Authentication Service
Lock Threads / action (push) Has been cancelled
Matrix CI / yamllint (push) Has been cancelled
Matrix CI / ansible-lint (push) Has been cancelled
Matrix CI / Run pre-commit (push) Has been cancelled 
Ref:

- https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/4647
- https://github.com/element-hq/matrix-authentication-service/releases/tag/v1.4.0
- https://github.com/element-hq/matrix-authentication-service/pull/5109
 2025-10-16 06:59:10 +03:00
Slavi Pantaleev 8fd2b75756 Remove matrix_synapse_container_image_customizations_s3_storage_provider_installation_old_boto_workaround_enabled
Lock Threads / action (push) Has been cancelled
Matrix CI / ansible-lint (push) Has been cancelled
Matrix CI / Run pre-commit (push) Has been cancelled
Matrix CI / yamllint (push) Has been cancelled
Close stale issues and PRs / stale (push) Has been cancelled 
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/4637

We no longer need to boto workaround since s3-storage-provider got
upgraded to v1.6.0 in https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/4635
 2025-10-14 21:09:22 +03:00
Slavi Pantaleev f048a0f9a5 Revert s3-storage-provider (1.6.0 -> 1.5.0)
Lock Threads / action (push) Has been cancelled
Matrix CI / yamllint (push) Has been cancelled
Matrix CI / ansible-lint (push) Has been cancelled
Matrix CI / Run pre-commit (push) Has been cancelled 
Ref: https://github.com/matrix-org/synapse-s3-storage-provider/pull/134#issuecomment-3396609289

Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/4635
 2025-10-13 12:25:59 +03:00
Slavi Pantaleev b54eadb9e0 Revert "Remove matrix_synapse_container_image_customizations_s3_storage_provider_installation_old_boto_workaround_enabled" 
This reverts commit 2b0ea94a72.

We're going back to s3-storage-provider=v1.5.0

Ref: https://github.com/matrix-org/synapse-s3-storage-provider/pull/134#issuecomment-3396609289
 2025-10-13 12:24:58 +03:00
Slavi Pantaleev 2b0ea94a72 Remove matrix_synapse_container_image_customizations_s3_storage_provider_installation_old_boto_workaround_enabled 
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/4637

We no longer need to boto workaround since s3-storage-provider got
upgraded to v1.6.0 in https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/4635
 2025-10-13 10:16:56 +03:00
Slavi Pantaleev ed9bb75a52 packageName -> depName for Renovate line for matrix-org/synapse-s3-storage-provider
Lock Threads / action (push) Has been cancelled
Matrix CI / yamllint (push) Has been cancelled
Matrix CI / ansible-lint (push) Has been cancelled
Matrix CI / Run pre-commit (push) Has been cancelled
Close stale issues and PRs / stale (push) Has been cancelled 
`depName` is a required attribute as per our custom regex.

Ref:

- https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/4635
- https://github.com/spantaleev/matrix-docker-ansible-deploy/blob/2d05db52c76efaed4178e919715698b3fc87bf61/.github/renovate.json#L16
 2025-10-11 07:43:28 +03:00
Slavi Pantaleev 37a0967258 Fix templating of matrix_authentication_service_config_http_listener_web_resources_default when not matrix_authentication_service_admin_api_enabled 
Regression since db54063a0c

Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/4617
 2025-10-04 13:51:46 +03:00
Slavi Pantaleev 931056a1dc Make pre-commit happy
Lock Threads / action (push) Has been cancelled
Matrix CI / yamllint (push) Has been cancelled
Matrix CI / ansible-lint (push) Has been cancelled
Matrix CI / Run pre-commit (push) Has been cancelled
Close stale issues and PRs / stale (push) Has been cancelled
2025-10-02 15:06:16 +03:00
Slavi Pantaleev 677b1ea55b Make yamllint happy 2025-10-02 15:00:42 +03:00
Slavi Pantaleev 3bf56e931d Add support for Element Admin 2025-10-02 14:58:48 +03:00
Slavi Pantaleev db54063a0c Add matrix_authentication_service_admin_api_enabled that controls if the Matrix Authentication Service's API is enabled
Lock Threads / action (push) Has been cancelled
Matrix CI / yamllint (push) Has been cancelled
Matrix CI / ansible-lint (push) Has been cancelled
Matrix CI / Run pre-commit (push) Has been cancelled 
Builds up on top of d0adc8a37473dee2214437b87b2db6b2081851ec
 2025-10-02 14:40:24 +03:00
Slavi Pantaleev 8857f78a4d Add matrix_authentication_service_config_http_listener_web_resources* variables for controlling Matrix Authentication Service's web HTTP listener's resources 2025-10-02 14:40:16 +03:00
Slavi Pantaleev cb6ae3de76 Upgrade Postgres (v17.6-7 -> v18.0-0) 
Ref:
- https://github.com/mother-of-all-self-hosting/ansible-role-postgres/commit/d00258c03d8630970ede5ffd2a944e6827d7e484
- https://github.com/mother-of-all-self-hosting/ansible-role-postgres/commit/1a6031855342b7edf237352f92702e716370a169
 2025-10-01 15:22:57 +03:00
Slavi Pantaleev b71968cf64 Fix variable name (postgres_postgres_process_extra_arguments_auto -> postgres_postgres_process_extra_arguments_default) in documentation about Postgres tuning
Lock Threads / action (push) Has been cancelled
Matrix CI / yamllint (push) Has been cancelled
Matrix CI / ansible-lint (push) Has been cancelled
Matrix CI / Run pre-commit (push) Has been cancelled 
Things have changed after https://github.com/mother-of-all-self-hosting/ansible-role-postgres/commit/b906c3036bfa866436601b8556a7d38e45a99e36
 2025-09-25 17:22:04 +03:00
Slavi Pantaleev 2607714887 Fix broken firing template for matrix-alertmanager-receiver
Lock Threads / action (push) Has been cancelled
Matrix CI / yamllint (push) Has been cancelled
Matrix CI / ansible-lint (push) Has been cancelled
Matrix CI / Run pre-commit (push) Has been cancelled 
This was an upstream documentation mistake that propagated to us
during the update in 25e7cac28d.

The upstream fix is here:

- https://github.com/metio/matrix-alertmanager-receiver/commit/8f7f4d1dd11214b317a7f5cb5d3bd1fb0b953dfd
- https://github.com/metio/matrix-alertmanager-receiver/pull/99
 2025-09-24 10:02:25 +03:00
Slavi Pantaleev 2997f23e20 Remove variables controlling removed Element options (secure_backup_required & secure_backup_setup_methods) from /.well-known/matrix/client
Lock Threads / action (push) Has been cancelled
Matrix CI / yamllint (push) Has been cancelled
Matrix CI / ansible-lint (push) Has been cancelled
Matrix CI / Run pre-commit (push) Has been cancelled 
Ref:

- https://github.com/element-hq/element-web/pull/30681
- https://github.com/element-hq/element-web/pull/30702
 2025-09-23 17:34:47 +03:00
Slavi Pantaleev ca69a97d08 Upgrade Postgres (v17.6-6 -> v17.6-7)
Lock Threads / action (push) Has been cancelled
Matrix CI / yamllint (push) Has been cancelled
Matrix CI / ansible-lint (push) Has been cancelled
Matrix CI / Run pre-commit (push) Has been cancelled
2025-09-21 16:11:30 +03:00
Slavi Pantaleev 2ea4384840 Add --no-update to mautrix-whatsapp and mautrix-gmessages 
All other mautrix bridges already had `--no-update`.
For some reason, these 2 didn't.

Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/4585
 2025-09-21 10:01:59 +03:00
Slavi Pantaleev 9f6305db4d Upgrade matrix-corporal (3.1.6 -> 3.1.7)
Lock Threads / action (push) Has been cancelled
Matrix CI / yamllint (push) Has been cancelled
Matrix CI / ansible-lint (push) Has been cancelled
Matrix CI / Run pre-commit (push) Has been cancelled
Close stale issues and PRs / stale (push) Has been cancelled
2025-09-20 17:08:08 +03:00
Slavi Pantaleev 25e7cac28d Upgrade matrix-alertmanager-receiver (2025.9.10 -> 2025.9.17) and switch from computed-values to in-template logic
Lock Threads / action (push) Has been cancelled
Matrix CI / yamllint (push) Has been cancelled
Matrix CI / ansible-lint (push) Has been cancelled
Matrix CI / Run pre-commit (push) Has been cancelled 
Ref:

- https://github.com/metio/matrix-alertmanager-receiver/releases/tag/2025.9.17
- https://github.com/metio/matrix-alertmanager-receiver/pull/94
 2025-09-18 07:19:33 +03:00
Slavi Pantaleev 130d756dcb Upgrade exim-relay (v4.98.1-r0-2-1 -> v4.98.1-r0-2-2)
Lock Threads / action (push) Has been cancelled
Matrix CI / yamllint (push) Has been cancelled
Matrix CI / ansible-lint (push) Has been cancelled
Matrix CI / Run pre-commit (push) Has been cancelled 
Related to: https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/4581
 2025-09-17 07:03:13 +03:00
Slavi Pantaleev d8eed6bfd3 Add some variables for controlling x_forwarded settings for Synapse listeners
Lock Threads / action (push) Has been cancelled
Matrix CI / yamllint (push) Has been cancelled
Matrix CI / ansible-lint (push) Has been cancelled
Matrix CI / Run pre-commit (push) Has been cancelled
Close stale issues and PRs / stale (push) Has been cancelled
2025-09-16 18:17:35 +03:00
Slavi Pantaleev a6f0f40296 Upgrade Postgres (v17.6-5 -> v17.6-6)
Lock Threads / action (push) Has been cancelled
Matrix CI / yamllint (push) Has been cancelled
Matrix CI / ansible-lint (push) Has been cancelled
Matrix CI / Run pre-commit (push) Has been cancelled
Close stale issues and PRs / stale (push) Has been cancelled
2025-09-14 07:37:57 +03:00
Slavi Pantaleev f65656175f Upgrade Postgres (v17.6-3 -> v17.6-5)
Lock Threads / action (push) Has been cancelled
Matrix CI / ansible-lint (push) Has been cancelled
Matrix CI / Run pre-commit (push) Has been cancelled
Matrix CI / yamllint (push) Has been cancelled
Close stale issues and PRs / stale (push) Has been cancelled
2025-09-12 18:32:25 +03:00
Slavi Pantaleev 24c2de23d5 Upgrade baibot (v1.8.0 -> v1.8.1) 2025-09-12 17:05:06 +03:00
Slavi Pantaleev deb19fb67c Switch container image for synapse-auto-compressor (etke.cc/rust-synapse-compress-state -> mb-saces/rust-synapse-tools)
Lock Threads / action (push) Has been cancelled
Matrix CI / yamllint (push) Has been cancelled
Matrix CI / ansible-lint (push) Has been cancelled
Matrix CI / Run pre-commit (push) Has been cancelled 
Both container images provide the same version (v0.1.4) of the upstream software
(https://github.com/matrix-org/rust-synapse-compress-state).

The new container image is also available multiarch and is available for `arm64`,
removing the need to self-build on this architecture.
 2025-09-12 13:23:59 +03:00
Slavi Pantaleev 2a2ef828c3 Extract mb-saces/rust-synapse-tools version into a variable (matrix_synapse_rust_synapse_compress_state_docker_image_version) and annotate for Renovate 2025-09-12 12:00:57 +03:00
Slavi Pantaleev facdde367f Upgrade Traefik (v3.5.1-0 -> v3.5.2-0) 2025-09-10 06:42:17 +03:00
Slavi Pantaleev a22d2cc2bf Upgrade Postgres (v17.6-2 -> v17.6-3)
Lock Threads / action (push) Has been cancelled
Matrix CI / yamllint (push) Has been cancelled
Matrix CI / ansible-lint (push) Has been cancelled
Matrix CI / Run pre-commit (push) Has been cancelled
2025-09-09 09:56:33 +03:00
Slavi Pantaleev cab01be63c Upgrade Postgres (v17.6-1 -> v17.6-2) 2025-09-09 08:58:44 +03:00