iartamonov/matrix-docker-ansible-deploy
1
0
Fork 0
mirror of https://github.com/spantaleev/matrix-docker-ansible-deploy.git synced 2026-07-19 11:06:19 +03:00
Code Issues Packages Projects Releases Wiki Activity
5,448 Commits 12 Branches 0 Tags
b89f5b7ff5e7e957145c1f2e4a79dba77dc22e89
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Slavi PantaleevandGitHub f400093865 Merge pull request #2373 from spantaleev/dependabot/github_actions/ansible-community/ansible-lint-action-6.10.2 
Bump ansible-community/ansible-lint-action from 6.10.0 to 6.10.2
 2023-01-03 18:12:43 +02:00
Slavi Pantaleev 1abba4c918 Upgrade matrix-corporal (2.5.0 -> 2.5.1) 2023-01-02 14:39:54 +02:00
Slavi Pantaleev 73e689e48e Fix --tags=register-user not working on Dendrite due to broken Jinja syntax 
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/2369
 2022-12-31 17:33:46 +02:00
Slavi Pantaleev d018677293 Upgrade geerlingguy.docker (6.0.3 -> 6.0.4) 2022-12-30 18:12:38 +02:00
Slavi Pantaleev 2188dd34d1 Add missing install-* tags in setup.yml 
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/2356
 2022-12-28 15:29:34 +02:00
Slavi PantaleevandGitHub e8f6a9965d Merge pull request #2365 from spantaleev/dependabot/github_actions/ansible-community/ansible-lint-action-6.10.0 
Bump ansible-community/ansible-lint-action from 6.8.2 to 6.10.0
 2022-12-27 11:49:26 +02:00
Slavi Pantaleev ba09705f7f Make Jitsi auth setup not show credentials in the shell 
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/2363
 2022-12-26 07:58:32 +02:00
Slavi PantaleevandGitHub 7164a79aa2 Merge pull request #2362 from etkecc/patch-138 
Update ntfy 1.29.1 -> 1.30.1
 2022-12-23 18:30:18 +02:00
Slavi PantaleevandGitHub 1e6d8d1bc8 Merge pull request #2361 from etkecc/master 
update beeper-linkedin 0.5.3 -> 0.5.4
 2022-12-23 13:13:48 +02:00
Slavi PantaleevandGitHub f731bcb5eb Merge pull request #2360 from Kuchenmampfer/master 
Upgrade Signald
 2022-12-23 10:11:44 +02:00
Slavi PantaleevandGitHub 2ad9f8e0a0 Merge pull request #2358 from adam-kress/patch-1 
Update element v1.11.16 -> v1.11.17
 2022-12-21 20:19:27 +02:00
Slavi PantaleevandGitHub 539ed4dd05 Merge pull request #2357 from meenzen/conduit-update 
Update conduit to 0.5.0
 2022-12-21 20:07:42 +02:00
Slavi Pantaleev 77bb386adc Upgrade devture/ansible (2.13.6-r0 -> 2.13.6-r0-1) 
This is a rebuild on Alpinelinux 3.17.0 (previously 3.16.2).
The new container image tag was pushed for arm32 and arm64 architectures
as well (2.13.6-r0 was `amd64`-only due to CI trouble in the past).

Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/2353
 2022-12-21 18:47:38 +02:00
Slavi Pantaleev 40aa42e982 Add reference to push.enabled to homeserver.yaml 
Related to:

- https://github.com/matrix-org/synapse/pull/14551/files
- https://github.com/matrix-org/synapse/pull/14619/files
 2022-12-21 06:43:43 +02:00
Slavi Pantaleev 42c4f0450d Upgrade Prometheus (2.40.7 -> 2.41.0) 2022-12-20 21:37:19 +02:00
Slavi Pantaleev d0b2a50768 Upgrade Hydrogen (v0.3.5 -> v0.3.6) 2022-12-20 21:36:39 +02:00
Slavi PantaleevandGitHub c4f2a5f158 Merge pull request #2355 from joecool1029/synapsebump 
Upgrade Synapse (1.73.0 -> 1.74.0)
 2022-12-20 21:33:41 +02:00
Slavi Pantaleev 362954aeab Remove warning which no longer applies 
This warning was added because of:
https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/2090

The problem has since been fixed by:
https://github.com/spantaleev/matrix-docker-ansible-deploy/commit/e9e84341a91fb0013469d74ee8c88c2edb5ad3a5

This current patch was provoked by:
https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/2352
 2022-12-20 11:24:20 +02:00
Slavi Pantaleev d4a8435fa2 Try to improve own-webserver docs a bit 
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/2351
 2022-12-20 10:32:14 +02:00
Slavi PantaleevandGitHub b138c25937 Merge pull request #2350 from FSG-Cat/patch-1 
Update Mjolnir from 1.5.0 to 1.6.1
 2022-12-19 16:39:39 +02:00
Slavi Pantaleev f2e68469cb Upgrade nginx (1.23.2 -> 1.23.3) 2022-12-19 12:32:43 +02:00
Slavi Pantaleev 576eb0006c Upgrade Grafana (9.3.1 -> 9.3.2) 2022-12-17 22:49:34 +02:00
Slavi Pantaleev a7d39b109a Upgrade Redis (7.0.6 -> 7.0.7) 2022-12-17 22:48:48 +02:00
Slavi Pantaleev fa73513064 Upgrade mautrix-whatsapp (0.7.2 -> 0.8.0) 2022-12-17 22:47:38 +02:00
Slavi PantaleevandGitHub 0c6959de8b Merge pull request #2341 from etkecc/patch-137 
Update prometheus 2.40.6 -> 2.40.7
 2022-12-14 13:05:45 +02:00
Slavi PantaleevandGitHub 60127cdffd Merge pull request #2339 from etkecc/patch-135 
update redis 7.0.5 -> 7.0.6
 2022-12-14 07:31:36 +02:00
Slavi PantaleevandGitHub 190f241bf5 Merge pull request #2340 from etkecc/patch-136 
Update jitsi stable-8138 -> stable-8138-1
 2022-12-14 07:31:31 +02:00
Slavi PantaleevandGitHub ea591cdd8a Merge pull request #2338 from etkecc/patch-134 
update mautrix-instagram 0.2.2 -> 0.2.3
 2022-12-14 07:31:12 +02:00
Slavi Pantaleev 1f593f708f Upgrade Jitsi (stable-8044 -> stable-8138) 
Untested
 2022-12-12 19:00:55 +02:00
Slavi Pantaleev 3f4ab0bd7e Upgrade Redis (7.0.4 -> 7.0.5) 2022-12-12 19:00:55 +02:00
Slavi PantaleevandGitHub c99c23eca3 Merge pull request #2337 from FanchTheSystem/patch-1 
Specify relation between matrix-registration and matrix-registration-bot
 2022-12-12 16:21:04 +02:00
Slavi Pantaleev ae7325f251 Run com.devture.ansible.role.playbook_state_preserver even on --tags=install-all 2022-12-12 15:28:29 +02:00
Slavi PantaleevandGitHub e8ed318908 Merge pull request #2335 from gardar/fix-tag-typo 
fix: unclosed tags typo
 2022-12-12 08:18:03 +02:00
Slavi PantaleevandGitHub 6f52e8c64c Merge pull request #2334 from ikkemaniac/update-nginxlog 
Update nginxlog
 2022-12-12 08:17:43 +02:00
Slavi Pantaleev f69d90c1e6 Upgrade Prometheus (2.40.5 -> 2.40.6) 2022-12-11 18:29:13 +02:00
Slavi Pantaleev 86d177266a Upgrade matrix-corporal (2.4.0 -> 2.5.0) 2022-12-11 18:29:13 +02:00
Slavi PantaleevandGitHub b0030bd62f Merge pull request #2333 from mattcen/hydrogen-prebuilt-docker 
Use upstream Docker image for amd64 rather than self-build
 2022-12-11 17:01:48 +02:00
Slavi Pantaleev 2b89d5d92f Upgrade exim-relay (4.95-r0-4 -> 4.96-r1-0) 2022-12-11 11:45:47 +02:00
Slavi PantaleevandGitHub 905ffd091e Merge pull request #2332 from mochman/master 
add 'not' to fail check for s3_storage_provider
 2022-12-10 15:22:50 +02:00
Slavi Pantaleev d81e7d6328 Make matrix_synapse_ext_synapse_s3_storage_provider_config_endpoint_url required 
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/2330
 2022-12-10 10:37:01 +02:00
Slavi PantaleevandGitHub a2935ec7c8 Merge pull request #2329 from AIndoria/master 
Fix Broken ma1sd Playbook Documentation Link
 2022-12-09 17:17:12 +02:00
Slavi Pantaleev 3824139908 Rename inject_into_nginx_proxy.yml to init.yml when it does more than injection 2022-12-09 10:18:40 +02:00
Slavi Pantaleev f186d6236d Add some missing tags to Synapse role 
Without these:

- `--tags=install-synapse` and `--tags=install-all` would be incomplete
and will not contain Synapse worker configuration

- `--tags=install-synapse-reverse-proxy-companion` and
  `--tags=setup-synapse-reverse-proxy-companion` would not contain
  Synapse worker configuration
 2022-12-09 10:15:40 +02:00
Slavi PantaleevandGitHub da82c3bd4f Merge pull request #2327 from ikkemaniac/fix-nginxlog-prometheus 
fix: nginxlog prometheus config port
 2022-12-08 13:15:34 +02:00
Slavi PantaleevandGitHub bdf1bea873 Merge pull request #2326 from ikkemaniac/fix-nginxlox-systemd 
fix: nginxlog systemd entry
 2022-12-08 13:14:57 +02:00
Slavi PantaleevandGitHub 7900839d40 Merge pull request #2324 from thedanbob/delete-matrix-scripts 
Only delete playbook scripts from /usr/local/bin
 2022-12-07 21:37:14 +02:00
Slavi Pantaleev 6a5a09ba9b Remove matrix-change-user-admin-status mentions and provide an alternative 2022-12-07 20:36:28 +02:00
Slavi PantaleevandGitHub 48d601008c Merge pull request #2322 from etkecc/patch-133 
postmoogle - add missing join()s
 2022-12-07 13:53:12 +02:00
Slavi PantaleevandGitHub 87448c04de Merge pull request #2321 from etkecc/postmoogle-0910 
update postmoogle 0.9.9 -> 0.9.10
 2022-12-07 08:59:05 +02:00
Slavi PantaleevandGitHub b4cb085fb5 Merge pull request #2320 from etkecc/patch-132 
Update element v1.11.15 -> v1.11.16
 2022-12-06 16:51:41 +02:00
Slavi Pantaleev 9edc7da67d Do not specify now-unnecessary worker_main_http_uri Synapse worker setting 
Related to

- https://github.com/matrix-org/synapse/commit/c15e9a0edb696990365ac5a4e5be847b5ae23921
- https://github.com/matrix-org/synapse/commit/01a052789266179c70c10ea6a6253c64fd9990d2
 2022-12-06 15:54:06 +02:00
Slavi Pantaleev 13e7399104 Handle /timestamp_to_event via Synapse workers 
Related to https://github.com/matrix-org/synapse/commit/8f10c8b054fc970838be9ae6f1f5aea95f166c98
 2022-12-06 15:52:16 +02:00
Slavi Pantaleev 663fe29ddb Do not specify start_pushers in Synapse config 
It's unnecessary when `pusher_instances` is populated.

Source: https://github.com/matrix-org/synapse/commit/6acb6d772a77a4398c112d82118c5b79755a91cb
 2022-12-06 15:49:56 +02:00
Slavi Pantaleev 135bb5af3e Do not specify send_federation in Synapse config 
It's unnecessary when `federation_sender_instances` is populated.

Source: https://github.com/matrix-org/synapse/commit/6acb6d772a77a4398c112d82118c5b79755a91cb
 2022-12-06 15:49:28 +02:00
Slavi Pantaleev 84d529b542 Upgrade Synapse (v1.72.0 -> v1.73.0) 
Synapse Worker configuration updates are coming later.
 2022-12-06 15:47:07 +02:00
Slavi Pantaleev 9ab2a72e86 More matrix_postgres -> devture_postgres changes 
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/2319
 2022-12-06 10:12:31 +02:00
Slavi PantaleevandGitHub 86b436792d Merge pull request #2319 from felixx9/master 
matrix_ to devture_
 2022-12-06 10:11:53 +02:00
Slavi Pantaleev b1c77f9bf2 Add comment to matrix-backup-borg.service 
Related to 8005557061
 2022-12-05 15:45:33 +02:00
Slavi Pantaleev 8005557061 Give backup-borg container more permissions to perform the backup 
Running with a user (like `matrix:matrix`) fails if Etherpad is enabled,
because `/matrix/etherpad` is owned by `matrix_etherpad_user_uid`/`matrix_etherpad_user_gid` (`5001:5001`).

The `matrix` user can't acccess the Etherpad directory for this reason
and Borgmatic fails when trying to make a backup.

There may be other things under `/matrix` which similarly use
non-`matrix:matrix` permissions.

Another workaround might have been to add `/matrix/etherpad` (and
potentially other things) to `matrix_backup_borg_location_exclude_patterns`, but:

- that means Etherpad won't be backed up - not great
- only excluding Etherpad may not be enough. There may be other files we
  need to exclude as well

---

Running with `root` is still not enough though.

We need at least the `CAP_DAC_OVERRIDE` capability, or we won't be able to read the
`/etc/borgmatic.d/config.yaml` configuration file (owned by
`matrix:matrix` with `0640` permissions).

---

Additionally, it seems like the backup process tries to write to at least a few directories:
- `/root/.borgmatic`
- `/root/.ssh`
- `/root/.config`

> [Errno 30] Read-only file system: '/root/.borgmatic'
> Error while creating a backup.
> /etc/borgmatic.d/config.yaml: Error running configuration file

We either need to stop mounting the container filesystem as readonly
(remove `--read-only`) or to allow writing via a `tmpfs`.

I've gone the `tmpfs` route which seems to work.

In any case, the mounted source directories (`matrix_backup_borg_location_source_directories`)
are read-only regardless, so our actual source files are protected from unintentional changes.
 2022-12-05 15:42:57 +02:00
Slavi Pantaleev 7b123907e0 Fix borg repository URL format 
Reference: https://borgbackup.readthedocs.io/en/stable/usage/general.html#repository-urls

Otherwise, we'd get:

> /etc/borgmatic.d/config.yaml: Remote repository paths without ssh:// syntax are deprecated. Interpreting "user@hostname:matrix" as "ssh://user@hostname/./matrix"
 2022-12-05 15:15:47 +02:00
Slavi Pantaleev 64b03c2dfd Fix backup-borg repository initialization for borgmatic 1.7+ (or borg 2.0) 2022-12-05 15:00:11 +02:00
Slavi Pantaleev 1f1a3dfc38 Ensure database port is passed to Borg as an integer 
Without this, it's a string and borg says:

> At 'hooks.postgresql_databases[INDEX_HERE].port': '5432' is not of type 'integer'
> /etc/borgmatic/config.yaml /etc/borgmatic.d /tmp/.config/borgmatic/config.yaml /tmp/.config/borgmatic.d: No valid configuration files found

.. and fails to do anything.
 2022-12-05 14:42:02 +02:00
Slavi Pantaleev d8df03dfc9 Mark Postgres v15 as supported for borg backup 
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/2257

Fixed in https://gitlab.com/etke.cc/borgmatic/-/commit/d134cd7c4c0aadecc2c00df45bd8371e248aa81f
(thanks to `alpine:latest` now being `alpine:3.17.0`, which includes
Postgres v15)
 2022-12-05 11:46:49 +02:00
Slavi Pantaleev b2a40effaf Fix Element self-building by switching to docker-buildx 
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/2318
 2022-12-05 10:02:54 +02:00
Slavi Pantaleev 6414599079 Upgrade Coturn (4.6.0 -> 4.6.1) 2022-12-05 09:46:11 +02:00
Slavi PantaleevandGitHub 9b47a85322 Merge pull request #2316 from qlyoung/fix-s3-ensure-data-directory 
fix s3 storage provider not ensuring data dir
 2022-12-04 10:20:27 +02:00
Slavi Pantaleev 7464604ddd Make use of matrix_synapse_ext_s3_storage_provider_data_path in a few more places 2022-12-04 10:17:55 +02:00
Slavi Pantaleev ceb2c30277 Upgrade mautrix-signal (v0.4.1 -> v0.4.2) 2022-12-03 15:37:17 +02:00
Slavi Pantaleev 4589f94053 Upgrade Postgres (minor versions upgrade) 2022-12-02 19:17:35 +02:00
Slavi Pantaleev d59bbfdfc9 Upgrade Hookshot (2.4.0 -> 2.5.0) 2022-12-02 19:15:04 +02:00
Slavi Pantaleev a353bda7a1 Upgrade appservice-slack (2.0.1 -> 2.0.2) 2022-12-01 23:30:09 +02:00
Slavi Pantaleev 9e93030159 Upgrade Grafana (9.3.0 -> 9.3.1) 2022-12-01 23:29:33 +02:00
Slavi PantaleevandGitHub 7dc612743d Merge pull request #2311 from etkecc/patch-131 
Update prometheus 2.40.4 -> 2.40.5
 2022-12-01 17:40:03 +02:00
Slavi PantaleevandGitHub 5e595611fe Merge pull request #2309 from etkecc/patch-130 
fix hookshot role
 2022-11-30 14:33:40 +02:00
Slavi Pantaleev e3d21e8096 Rename some default Hookshot variables 
Fixup for 7e2e2626a0

Some references were left unrenamed which caused `validate_config.yml`
to trigger.
 2022-11-30 11:55:23 +02:00
Slavi Pantaleev dc817f30ce Upgrade Grafana (9.2.7 -> 9.3.0) 2022-11-30 11:50:21 +02:00
Slavi PantaleevandGitHub 9d5b5d7a01 Merge pull request #2308 from etkecc/patch-129 
Update grafana 9.2.6 -> 9.2.7
 2022-11-30 11:28:39 +02:00
Slavi Pantaleev 0a018ac22b Add internal Postgres instance (if enabled) to postgres-backup dependencies 2022-11-30 11:22:00 +02:00
Slavi Pantaleev d5ea17d66f Make postgres-backup priority start later 2022-11-30 11:18:39 +02:00
Slavi Pantaleev 4eed49f931 Replace custom/matrix-postgres-backup role with galaxy/com.devture.ansible.role.postgres_backup 
This role is usable on its own and it's not tied to Matrix, so
extracting it out into an independent role that we install via
ansible-galaxy makes sense.

This also fixes the confusion from the other day, where
`matrix_postgres_*` had to be renamed to `devture_postgres_*`
(unless it was about `matrix_postgres_backup_*`).
We now can safely say that ALL `matrix_postgres_*` variables need to be
renamed.

Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/2305
 2022-11-30 11:01:19 +02:00
Slavi PantaleevandGitHub a365e54f4d Merge pull request #2307 from etkecc/patch-128 
Update prometheus 2.40.2 -> 2.40.4
 2022-11-30 10:34:20 +02:00
Slavi Pantaleev de979bc6a2 Upgrade com.devture.ansible.role.postgres 2022-11-30 09:42:06 +02:00
Slavi Pantaleev bc64d8ed9a Upgrade prometheus-node-exporter (v1.4.0 -> v1.5.0) 2022-11-30 08:32:29 +02:00
Slavi Pantaleev 4a62df2ea3 Make Hookshot logging-level configurable 2022-11-30 08:18:41 +02:00
Slavi Pantaleev 84f306b236 Add support for enableHttpGet and waitForComplete Hookshot options 
Supersedes https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/2256
 2022-11-30 08:16:58 +02:00
Slavi Pantaleev 7e2e2626a0 Make hookshot variable names consistent with the rest of the playbook 
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/2256
 2022-11-30 08:13:39 +02:00
Slavi PantaleevandGitHub a2f0bcc4a3 Merge pull request #2306 from MrAnno/faq-docker-install-typo 
Fix Docker installation typo in FAQ
 2022-11-30 07:46:42 +02:00
Slavi Pantaleev b25385dffd Upgrade com.devture.ansible.role.postgres 2022-11-29 20:16:29 +02:00
Slavi PantaleevandGitHub d40d303cc5 Merge pull request #2304 from array-in-a-matrix/patch-10 
update dendrite to v0.10.8
 2022-11-29 19:46:54 +02:00
Slavi Pantaleev 8c5e34b37f Upgrade ddclient (v3.10.0-ls105 -> v3.10.0-ls106) 2022-11-29 08:20:36 +02:00
Slavi Pantaleev 4b2d30a474 Fix matrix_dendrite_client_api_turn_shared_secret not being defined 
Regression since https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/2290
 2022-11-28 18:33:18 +02:00
Slavi Pantaleev 5b26647127 Upgrade Certbot (v1.31.0 -> v2.0.0) and switch to new default key type (ecdsa) 
More details about the new key type can be found here:
https://eff-certbot.readthedocs.io/en/stable/using.html#rsa-and-ecdsa-keys

Existing RSA-based keys will continue to renew as RSA until manual
action is taken. Example from the documentation above:
> certbot renew --key-type ecdsa --cert-name example.com --force-renewal

In the future, we may add a command which does this automatically for
all domains.
 2022-11-28 09:24:25 +02:00
Slavi Pantaleev 81054bb19c Upgrade com.devture.ansible.role.postgres 2022-11-28 09:05:22 +02:00
Slavi Pantaleev 0d322a5c86 Announce matrix-postgres replacement and /usr/local/bin cleanup 2022-11-28 08:09:57 +02:00
Slavi Pantaleev 4b111d05d5 Pass devture_postgres_db_migration_request to com.devture.ansible.role.postgres in a cleaner way 2022-11-28 07:44:59 +02:00
Slavi Pantaleev 910cd9adf0 Replace import_role calls with include_role calls 2022-11-27 11:27:01 +02:00
Slavi Pantaleev 4bb3a38de6 Upgrade com.devture.ansible.role.postgres 2022-11-27 11:24:53 +02:00
Slavi Pantaleev 3d1ea3e79e Auto-delete old matrix scripts from /usr/local/bin 2022-11-27 10:10:00 +02:00
Slavi Pantaleev d1b2fd50be Remove manual service enablement/start for backup-borg 
This is done via devture_systemd_service_manager_services_list_auto
already.
 2022-11-27 10:04:03 +02:00
Slavi Pantaleev 2688e8bfc3 Optimize initial installation by not reloading systemd after each .service install 
We expect `--tags=start` to handle systemd reloading, so we don't need
to do it manually each time we install/uninstall a .service file.
 2022-11-27 10:02:45 +02:00