Commit Graph
100 Commits
Author SHA1 Message Date
Slavi Pantaleev c95ca4badc Do not ask everyone to whitelist Jitsi ports
It's an optional service, so we shouldn't bother most people with it.
2021-04-21 14:48:54 +03:00
Slavi Pantaleev d691cc0920 Move variable definition a bit 2021-04-21 13:59:20 +03:00
Slavi Pantaleev e00ef04b57 Add opt-out-of-FLoC headers by default 2021-04-21 13:58:24 +03:00
Slavi PantaleevandGitHub 7fa7e3e5a6 Merge pull request #1012 from aaronraimist/facebook-docs
Update mautrix-facebook docs
2021-04-21 09:27:11 +03:00
Slavi PantaleevandGitHub 42783972fd Merge pull request #1011 from aaronraimist/synapse-admin
Upgrade synapse-admin (0.7.0 -> 0.7.2)
2021-04-21 09:24:30 +03:00
Slavi Pantaleev ca786cc343 Revert "Upgrade Synapse (1.31 -> 1.32)"
This reverts commit f825c7c263.

Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1010
2021-04-20 23:40:55 +03:00
Slavi Pantaleev f825c7c263 Upgrade Synapse (1.31 -> 1.32) 2021-04-20 17:47:34 +03:00
Slavi PantaleevandGitHub 7eda6a3c12 Merge pull request #1009 from thedanbob/coturn-official
Switch to official coturn image
2021-04-19 18:41:17 +03:00
Slavi Pantaleev adcecaffaf Fix connectivity between prometheus and prometheus-node-exporter
Expected to have regressed after https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1008

This patch comes with its own downsides (as described in the comments
for matrix_prometheus_node_exporter_container_http_host_bind_port),
but at least there's:
- no security issue
- metrics remain readable from matrix-prometheus (even if the network metrics are inaccurate)

A better patch is certainly welcome.
2021-04-19 18:29:03 +03:00
Slavi Pantaleev 8da8979a24 Do not override matrix_prometheus_node_exporter_container_http_host_bind_port when matrix-nginx-proxy disabled
Not sure why this had been done in the first place.
It doesn't make any sense.

There's no relation between matrix-nginx-proxy and
prometheus-node-exporter.
2021-04-19 17:45:27 +03:00
Slavi PantaleevandGitHub 398b9f5d66 Merge pull request #1008 from sakkiii/master
security** node-exporter data & port publicly exposed
2021-04-19 17:31:00 +03:00
Slavi PantaleevandGitHub 4a1739f604 Merge pull request #1007 from teutat3s/fix/nginx-dont-send-version
Don't expose nginx version with each response
2021-04-18 21:33:11 +03:00
Slavi PantaleevandGitHub c565e72f0d Merge pull request #1003 from sakkiii/patch-2
updated matrix_grafana_docker_image to v7.5.4
2021-04-18 09:56:12 +03:00
Slavi PantaleevandGitHub 51b46697c5 Merge pull request #1005 from sakkiii/master
Improve security for grafana
2021-04-18 09:50:59 +03:00
Slavi PantaleevandGitHub ac8a835fd2 Merge pull request #1006 from thedanbob/fix-prometheus-network
Fix prometheus network for ansible < 2.8
2021-04-18 09:09:37 +03:00
Slavi Pantaleev badd81e0ec Revert "Attempt to fix docker_network result discrepancy between Ansible versions"
This reverts commit 68ca81c8c2.
2021-04-17 19:31:20 +03:00
Slavi Pantaleev 68ca81c8c2 Attempt to fix docker_network result discrepancy between Ansible versions
Supposedly fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/907
2021-04-17 11:42:06 +03:00
Slavi PantaleevandGitHub 9c1f41eadf Merge pull request #1002 from thedanbob/node-exporter-1.1.2
Update prometheus node exporter (1.1.0->1.1.2)
2021-04-17 11:15:13 +03:00
Slavi PantaleevandGitHub 92925e5537 Merge pull request #1001 from thedanbob/prometheus-2.26.0
Update prometheus (2.24.1->2.26.0)
2021-04-17 11:14:53 +03:00
Slavi Pantaleev fcb9e9618a Make Coturn TLSv1/v1.1 configurable
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/999
2021-04-16 09:29:32 +03:00
Slavi PantaleevandGitHub 8ae0628c2f Merge pull request #999 from sakkiii/patch-1
CoTurn Disable support for TLS 1.0 and TLS 1.1
2021-04-16 09:21:23 +03:00
Slavi PantaleevandGitHub ed3c9ccbd2 Merge pull request #998 from GoMatrixHosting/master
GoMatrixHosting v0.4.2
2021-04-15 12:20:27 +03:00
Slavi Pantaleev c7c137df74 Upgrade nginx and certbot 2021-04-14 13:24:41 +03:00
Slavi Pantaleev 931452bb06 Upgrade exim (4.93 -> 4.94) 2021-04-14 08:57:01 +03:00
Slavi Pantaleev 316d7d815a Add FAQ entry about debugging SSL certificate renewal troubles 2021-04-13 10:52:38 +03:00
Slavi PantaleevandGitHub 291621c984 Merge pull request #997 from rakshazi/patch-3
Updated Element Web 1.7.24.1 -> 1.7.25
2021-04-13 09:22:08 +03:00
Slavi PantaleevandGitHub 68db6d028b Merge pull request #990 from haghighi-ahmad/feature-use-custom-docker-registry
use custom docker registry
2021-04-12 16:08:34 +03:00
Slavi PantaleevandGitHub 898c0a842e Merge pull request #991 from aaronraimist/arch-sanity-check
Add sanity check for server architecture
2021-04-12 10:38:14 +03:00
Slavi PantaleevandGitHub f751176069 Merge pull request #987 from MarcProe/master
Fix for"nginx and two other services boot loops" #966
2021-04-09 11:39:23 +03:00
Slavi PantaleevandGitHub 4ecfd78f92 Merge pull request #988 from aaronraimist/fix-mjolnir
Fix step 3 of Mjolnir instructions
2021-04-09 11:36:15 +03:00
Slavi Pantaleev 4830b7d830 Upgrade Synapse for ARM64 (1.30.1 -> 1.31.0) 2021-04-06 17:22:25 +03:00
Slavi Pantaleev 3f426de599 Upgrade Synapse (1.30.1 -> 1.31.0) 2021-04-06 16:00:10 +03:00
Slavi Pantaleev a1a0d91604 Make prometheus-node-exporter not overlap with Synapse metrics port
This was causing a port conflict when `matrix_nginx_proxy_enabled: false`.

Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/983
2021-04-06 12:23:43 +03:00
Slavi Pantaleev c386e8e9db Use integers for some variables
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/868
2021-04-05 11:38:23 +03:00
Slavi Pantaleev 832e191ab8 Fix incorrect variable usage in when statement
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/868
2021-04-05 11:32:48 +03:00
Slavi Pantaleev 1b55766927 Do not redefine matrix-postgres role vars in matrix-postgres-backup
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/868
2021-04-05 11:32:19 +03:00
Slavi Pantaleev 298556e02e Fix undefined matrix_postgres_backup_detected_version_corresponding_docker_image
.. and prevent variable name overlap with `matrix-postgres` for the
other variables as well.

Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/868
2021-04-05 11:23:12 +03:00
Slavi Pantaleev 6526087c14 Announce automated local Postgres backup support 2021-04-05 11:16:44 +03:00
Slavi Pantaleev 37c089bb96 Minor docs improvements 2021-04-05 11:13:45 +03:00
Slavi PantaleevandGitHub 0a107dc0ce Merge pull request #868 from foxcris/postgres-backup
- Added a postgres-backup role
2021-04-05 10:53:04 +03:00
Slavi PantaleevandGitHub 560777cc16 Merge pull request #981 from aaronraimist/grafana
Allow special characters in Grafana password and upgrade Grafana
2021-04-04 10:04:07 +03:00
Slavi PantaleevandGitHub 3b8d9bcb32 Merge pull request #982 from GoMatrixHosting/master
GoMatrixHosting v0.4.0 update
2021-04-04 10:03:26 +03:00
Slavi PantaleevandGitHub 179edb2c06 Merge pull request #980 from aaronraimist/mjolnir-doc-tweaks
Couple of additional tweaks to the mjolnir docs
2021-04-03 11:54:02 +03:00
Slavi Pantaleev 28a6f8bd57 Announce Mjolnir bot support
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/962
2021-04-03 10:52:39 +03:00
Slavi PantaleevandGitHub 995c483856 Merge pull request #962 from aaronraimist/mjolnir
Add mjolnir
2021-04-03 10:45:29 +03:00
Slavi PantaleevandGitHub a37a8c76d4 Merge pull request #979 from aaronraimist/synapse-speed
Add some advice about making Synapse faster
2021-04-03 09:52:42 +03:00
Slavi PantaleevandGitHub f183add44d Merge pull request #977 from aaronraimist/simple-antispam
Upgrade synapse-simple-antispam (0.0.1 -> 0.0.3)
2021-04-03 08:45:14 +03:00
Slavi PantaleevandGitHub 1bb4fe594d Merge pull request #978 from aaronraimist/element-1.7.24.1
Upgrade Element (1.7.24 -> 1.7.24.1)
2021-04-03 08:44:34 +03:00
Slavi PantaleevandGitHub a88391edf5 Merge pull request #972 from JohannesKleine/nginx-config
matrix-nginx-proxy: add custom nginx options to nginx.conf.j2
2021-03-31 10:30:57 +03:00
Slavi PantaleevandGitHub 40b6711453 Merge pull request #973 from teutat3s/mautrix-signal/update-config
Updates to mautrix-signal config
2021-03-31 08:47:51 +03:00
Slavi Pantaleev 93960b70be Do not fail if _matrix-identity DNS SRV record missing
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/963

This also simplifies Prerequisites, which is great.

It'd be nice if we were doing these checks in some optional manner
and reporting them as helpful messages (using
`matrix_playbook_runtime_results`), but that's more complicated.
I'd rather drop these checks completely.
2021-03-30 11:24:04 +03:00
Slavi Pantaleev 5e1cf7f8b9 Upgrade Element (1.7.23 -> 1.7.24) 2021-03-29 17:58:02 +03:00
Slavi Pantaleev 59699e0d98 Try to make Dimension wait for Synapse
Some people have reported Dimension failing to contact
matrix-nginx-proxy/Synapse on startup. This attempts to
delay Dimension startup some more.
2021-03-29 12:35:02 +03:00
Slavi Pantaleev 9409588513 Fix variable name typo (take 2)
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/970
2021-03-29 10:59:57 +03:00
Slavi Pantaleev 179b416ed5 Fix variable name typo
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/970
2021-03-29 09:24:35 +03:00
Slavi Pantaleev 77d598b315 Fix Go-NEB variable definitions using the wrong type
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/969
2021-03-28 12:10:22 +03:00
Slavi Pantaleev 49868db3de Upgrade Synapse for ARM64 (1.30.0 -> 1.30.1) 2021-03-26 16:48:15 +02:00
Slavi Pantaleev 94487dc6a7 Upgrade Synapse for amd64 (1.30.0 -> 1.30.1) 2021-03-26 15:37:11 +02:00
Slavi PantaleevandGitHub 5ce6d98f6c Merge pull request #967 from jdreichmann/transcaffeine/push-ephemeral-to-appservices
feat: push ephemeral events to appservices
2021-03-25 19:56:33 +02:00
Slavi Pantaleev 59ac8a5921 Make Dimension require matrix-nginx-proxy, if enabled
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/966
2021-03-25 11:56:34 +02:00
Slavi Pantaleev efbeb42857 Fix YAML indentation in docs 2021-03-25 09:02:35 +02:00
Slavi Pantaleev 5b7dbe8275 Make matrix-synapse wanted by matrix-nginx-proxy only if enabled 2021-03-25 08:51:26 +02:00
Slavi PantaleevandGitHub 080658a2a9 Merge pull request #964 from thedanbob/nginx-1.19.8
Update nginx (1.19.6 -> 1.19.8)
2021-03-24 17:24:48 +02:00
Slavi Pantaleev 5a4ea5f866 Make AWX enabling/disabling consistent with other playbook roles
That is:
- enabled in the role by default
- disabled in the compilation (playbook), if considered an optional
component
2021-03-24 14:02:53 +02:00
Slavi Pantaleev b89936afba Make bridges depend on matrix-nginx-proxy
We don't point them straight to Synapse anymore, but rather
to matrix-nginx-proxy, which forwards to Synapse (or something else).
2021-03-24 14:00:41 +02:00
Slavi PantaleevandGitHub 19cbdce6d2 Merge pull request #963 from aaronraimist/ma1sd-srv
Make ma1sd's SRV record optional
2021-03-24 10:05:42 +02:00
Slavi Pantaleev 06c74728eb Move matrix_nginx_proxy_proxy_synapse_federation_api_enabled definition to the role
This variable was previously undefined in the role and was only getting
defined via `group_vars/matrix_servers`.

We now properly initialize it (and its good default value) in the role
itself.
2021-03-23 10:28:32 +02:00
Slavi Pantaleev d09609daa8 Fix Jinja2 syntax error
Fixes a regression introduced in ffe649a240
2021-03-22 17:13:10 +02:00
Slavi Pantaleev 6a3433fbad Update Synapse for ARM64 (1.29.0 -> 1.30.0)
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/958
2021-03-22 16:43:23 +02:00
Slavi Pantaleev ffe649a240 Update homeserver.yaml to keep up with Synapse v1.30.0
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/958
2021-03-22 16:43:10 +02:00
Slavi PantaleevandGitHub bb49f33c62 Merge pull request #958 from rakshazi/patch-2
Updated synapse 1.29.0 -> 1.30.0
2021-03-22 16:40:54 +02:00
Slavi PantaleevandGitHub 8bcdbdef8c Merge pull request #957 from thomwiggers/update-irc
Update IRC appservice
2021-03-22 15:34:34 +02:00
Slavi Pantaleev 2737ebc290 Complain if people try to use matrix-sygnal on non-amd64 2021-03-20 13:38:27 +02:00
Slavi Pantaleev b824522b33 Remove unnecessary with_items statement 2021-03-20 13:34:22 +02:00
Slavi Pantaleev 9a0222fa47 Add Sygnal support
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/683
2021-03-20 13:32:22 +02:00
Slavi PantaleevandGitHub 54315505de Merge pull request #956 from GoMatrixHosting/master
GoMatrixHosting v0.3.2 hotfix
2021-03-20 12:56:43 +02:00
Slavi Pantaleev f99dcd611f Pass proper UID/GID to Synapse
Fixes a regression caused by a5ee39266c.

If the user id and group id were different than 991:991
(which used to be a hardcoded default for us long ago),
there was a mismatch between what Synapse was trying to use (991:991)
and what it was actually started with (in `--user=..`). It was then
trying to change ownership, which was failing.

This was mostly affecting newer installations which were not using the
991:991 defaults we had long ago (since a1c5a197a9).
2021-03-19 16:44:10 +02:00
Slavi Pantaleev a5ee39266c Go through start.py when launching Synapse
This allows us to benefit from helpful things it does for us,
like enabling jemalloc: https://github.com/matrix-org/synapse/pull/8553

We weren't going through `start.py` before, because it was causing some
conflict with our `docker run --user=...` stuff, but it doesn't seem
to be a problem anymore.

Having done this, we won't need to do things like
https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/941
anymore.
2021-03-19 08:16:59 +02:00
Slavi PantaleevandGitHub 3f0550b5d9 Merge pull request #948 from chagai95/patch-1
fix typo
2021-03-18 08:59:47 +02:00
Slavi PantaleevandGitHub ff882ceb66 Merge pull request #950 from aaronraimist/x-forwarded-proto-federation
Set X-Forwarded-Proto on federation requests
2021-03-18 08:59:19 +02:00
Slavi PantaleevandGitHub 41c90d2087 Merge pull request #945 from pushytoxin/master
matrix.{{ matrix_domain }} -> {{ matrix_server_fqn_matrix }}
2021-03-17 14:20:42 +02:00
Slavi PantaleevandGitHub f4d0abbaf5 Merge pull request #944 from aaronraimist/blank-or-none
Also check if matrix_ssl_lets_encrypt_support_email is blank
2021-03-17 08:08:02 +02:00
Slavi PantaleevandGitHub 97c0bf1a73 Merge pull request #942 from pushytoxin/etherpad1_8_12
Upgrade Etherpad (1.8.7 -> 1.8.12)
2021-03-16 20:07:34 +02:00
Slavi PantaleevandGitHub a872db07ee Merge pull request #940 from Zir0h/master
Another field with 'invalid input syntax for type smallint'
2021-03-16 18:03:13 +02:00
Slavi PantaleevandGitHub 93f79c63e1 Merge pull request #939 from GoMatrixHosting/master
GoMatrixHosting v0.3.1 hotfix!
2021-03-16 16:03:43 +02:00
Slavi Pantaleev c890e351fc Remove some whitespace 2021-03-16 09:56:29 +02:00
Slavi PantaleevandGitHub 011e95c1d2 Merge pull request #893 from GoMatrixHosting/master
matrix-awx - the GoMatrixHosting v0.3.0 initial PR
2021-03-16 08:40:15 +02:00
Slavi Pantaleev b46ef46663 Do not mention login before registration 2021-03-16 08:02:20 +02:00
Slavi Pantaleev 6cbfee539c Announce Go-NEB support 2021-03-16 07:54:26 +02:00
Slavi PantaleevandGitHub 6181861ffe Merge pull request #929 from Zir0h/master
Added support for the Go-NEB bot
2021-03-16 07:49:53 +02:00
Slavi PantaleevandGitHub 38b3fbd6f9 Mention DNS setup
This may be especially helpful to existing playbook users
who happen to find themselves installing Go-NEB later on.
2021-03-16 07:49:43 +02:00
Slavi PantaleevandGitHub 9c5f4ef3e2 Merge pull request #937 from rakshazi/patch-1
Updated Element 1.7.22 -> 1.7.23
2021-03-15 18:02:04 +02:00
Slavi PantaleevandGitHub c7e9f04756 Merge pull request #936 from irregulator/nginx_check_cors
matrix-nginx-proxy: specify Origin header, comply with CORS
2021-03-15 14:49:23 +02:00
Slavi PantaleevandGitHub 7215fd4319 Merge pull request #933 from pmontepagano/fork/require-auth-synapse-configs
Adding vars to synapse for private servers
2021-03-15 08:03:43 +02:00
Slavi Pantaleev 9b72384df7 Upgrade Synapse (1.28.0 -> 1.29.0) 2021-03-08 17:24:09 +02:00
Slavi Pantaleev f0698ee641 Do not overwrite X-Forwarded-For when reverse-proxying to Synapse
We have a flow like this:
1. matrix.DOMAIN vhost (matrix-domain.conf)
2. matrix-synapse vhost (matrix-synapse.conf); or matrix-corporal container, if enabled
3. (optional) matrix-synapse vhost (matrix-synapse.conf), if matrix-corporal enabled
4. matrix-synapse container

We are setting `X-Forwarded-For` correctly in step #1, but were
overwriting it in step #2 with something inaccurate.

Not doing anything in step #2 is better than doing the wrong thing.
It's probably best if we append another reverse-proxy address there
though, although what we're doing now (with this patch) seems to yield
the correct result (when matrix-corporal is not enabled).

When matrix-corporal is enabled, we still seem to do the wrong thing for
some reason. It's something to be fixed later on.
2021-03-08 17:24:09 +02:00
Slavi PantaleevandGitHub 5516bc8896 Merge pull request #923 from aaronraimist/patch-1
Make steps in configuring-playbook.md numbered
2021-03-07 09:53:49 +02:00
Slavi PantaleevandGitHub 11f8b5f3a7 Merge pull request #916 from jokey2k/patch-2
Adjust wait timeout
2021-03-05 10:43:36 +02:00
Slavi Pantaleev 7d1522d884 Add Ko-fi donation link 2021-03-02 13:29:04 +02:00
Slavi PantaleevandGitHub 0f647594ac Merge pull request #915 from SierraKiloBravo/add-nginx-worker-config
Added nginx proxy worker configuration to template and defaults
2021-03-02 13:04:28 +02:00