iartamonov/matrix-docker-ansible-deploy
1
0
Fork 0
mirror of https://github.com/spantaleev/matrix-docker-ansible-deploy.git synced 2026-07-19 09:56:20 +03:00
Code Issues Packages Projects Releases Wiki Activity
5,683 Commits 12 Branches 0 Tags
f37a7a21f17ff8b1b7c7f38eea3f63ecd2dfc04f
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Slavi Pantaleev f37a7a21f1 Delay Postmoogle startup to help Traefik-based setups 2023-02-11 08:53:32 +02:00
Slavi Pantaleev 8309a21303 Rename reverse proxy types and fix Hookshot http/https urlPrefix issue 2023-02-11 08:44:11 +02:00
Slavi Pantaleev 3f2cb840b9 Merge branch 'master' into traefik 2023-02-11 07:46:35 +02:00
Slavi Pantaleev ad22bdb884 Do not run matrix-user-verification-service validation tasks unless the service is enabled 2023-02-10 19:40:03 +02:00
Slavi Pantaleev 7142ff422d Ensure matrix_user_verification_service_uvs_access_token is always defined 
The playbook tries to avoid such variables which are sometimes defined
and sometimes not. We'd rather not check for `is defined`.
 2023-02-10 19:40:03 +02:00
Slavi Pantaleev 97f65e8dff Minor fixes to allow for Traefik without SSL 2023-02-10 19:36:06 +02:00
Slavi PantaleevandGitHub ddad722e78 Merge pull request #2458 from etkecc/patch-164 
Update Hydrogen 0.3.6 -> 0.3.7
 2023-02-10 16:53:13 +02:00
Slavi Pantaleev a5afa4eac9 Merge branch 'master' into traefik 2023-02-10 16:11:58 +02:00
Slavi Pantaleev c773a005ae Fix broken link to Matrix User Verification Service 2023-02-10 16:11:52 +02:00
Slavi Pantaleev 28d2eb593c Add matrix_playbook_reverse_proxy_type variable which influences all other services 2023-02-10 16:04:34 +02:00
Slavi PantaleevandGitHub 8263228ffb Merge pull request #2457 from FSG-Cat/patch-3 
Fix formating error in Draupnir docs
 2023-02-10 14:40:59 +02:00
Slavi Pantaleev 06ccd71edc Merge branch 'master' into traefik 2023-02-10 14:37:59 +02:00
Slavi Pantaleev 6db3c8f2ad Announce Matrix Authentication Support for Jitsi 
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/2375
 2023-02-10 14:26:41 +02:00
Slavi Pantaleev f6ab162fff Remove systemd-reloading handler in matrix-user-verification-service 
None of the other roles use handlers.

We rely on com.devture.ansible.role.systemd_service_manager to reload services when it's necessary to do so.
 2023-02-10 14:22:37 +02:00
Slavi Pantaleev e1bfa2a7d6 Fix ansible-lint-reported errors 2023-02-10 14:21:31 +02:00
Slavi Pantaleev 43a6a035a0 Skip removing /.well-known/element directory to suppress ansible-lint error 
Leaving an orphan directory is okay and can be improved later on.
 2023-02-10 14:16:00 +02:00
Slavi Pantaleev 01ccec2dbe Merge branch 'master' into pr-jitsi-matrix-authentication 2023-02-10 14:12:47 +02:00
Slavi Pantaleev 600aaa0bc7 Announce Draupnir support 
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/2451
 2023-02-10 11:52:31 +02:00
Slavi PantaleevandGitHub 7cdf59d79b Merge pull request #2451 from FSG-Cat/draupnir 
Add Draupnir support to the project.
 2023-02-10 11:43:30 +02:00
Slavi PantaleevandGitHub 0a15e56641 Fix typo 2023-02-10 11:41:44 +02:00
Slavi PantaleevandGitHub d6c8ea3742 Merge pull request #2452 from borisrunakov/update-matrix-chatgpt-bot 
update matrix-chatgpt-bot
 2023-02-10 08:29:00 +02:00
Slavi PantaleevandGitHub 7fb7e7cd69 Merge pull request #2454 from etkecc/patch-163 
Update postmoogle 0.9.11 -> 0.9.12
 2023-02-09 21:47:30 +02:00
Slavi Pantaleev c289996cd9 Upgrade com.devture.ansible.role.traefik 2023-02-09 10:16:41 +02:00
Slavi Pantaleev a5683a6449 Upgrade com.devture.ansible.role.traefik and rename some variables 2023-02-09 10:12:09 +02:00
Slavi Pantaleev 88a26758e1 Merge branch 'master' into traefik 2023-02-08 18:48:10 +02:00
Slavi Pantaleev c71567477a Stop using deprecated matrix_bot_postmoogle_domain variable in group vars 2023-02-08 18:48:01 +02:00
Slavi Pantaleev 1338963b6c Add support for obtaining additional SSL certificates via Traefik 2023-02-08 18:47:19 +02:00
Slavi Pantaleev 49a1985750 Fix Postmoogle systemd service description 2023-02-08 16:45:58 +02:00
Slavi Pantaleev 9a71a5696b Allow Postmoogle to work with SSL certificates extracted from Traefik 2023-02-08 16:45:03 +02:00
Slavi Pantaleev ddf6b2d4ee Handle matrix_playbook_reverse_proxy_type being "none" when deciding on Coturn certificate parameters 2023-02-08 16:24:43 +02:00
Slavi Pantaleev d44d4b637f Allow Coturn to work with SSL certificates extracted from Traefik 2023-02-08 16:06:46 +02:00
Slavi Pantaleev c07630ed51 Add com.devture.ansible.role.traefik_certs_dumper role 
With this, other roles (like Coturn, Postmoogle) will be able
to use SSL certificates extracted from Traefik
via https://github.com/ldez/traefik-certs-dumper
 2023-02-08 16:05:38 +02:00
Slavi PantaleevandGitHub 65b8e0f4ef Merge pull request #2446 from etkecc/patch-162 
Update heisenbridge 1.14.1 -> 1.14.2
 2023-02-07 11:15:19 +02:00
Slavi Pantaleev 2b9061a5d3 Add support for reverse-proxying the base domain via Traefik 2023-02-07 11:02:02 +02:00
Slavi Pantaleev 6c17671abd Upgrade synapse-admin (0.8.6 -> 0.8.7) and drop reverse-proxy workaround 
Related to 6a31fba346, 6a31fba346.

Related to https://github.com/Awesome-Technologies/synapse-admin/issues/322
 2023-02-07 10:45:19 +02:00
Slavi Pantaleev 66baef5bf6 Fix matrix-synapse-reverse-proxy-companion.service stopping during uninstallation 
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/2444
 2023-02-07 08:48:50 +02:00
Slavi Pantaleev 8155f780e5 Add support for reverse-proxying Matric (Client & Federation) via Traefik 2023-02-06 13:08:11 +02:00
Slavi Pantaleev f983604695 Initial work on Traefik support 
This gets us started on adding a Traefik role and hooking Traefik:

- directly to services which support Traefik - we only have a few of
  these right now, but the list will grow

- to matrix-nginx-proxy for most services that integrate with
  matrix-nginx-proxy right now

Traefik usage should be disabled by default for now and nothing should
change for people just yet.

Enabling these experiments requires additional configuration like this:

```yaml
devture_traefik_ssl_email_address: '.....'

matrix_playbook_traefik_role_enabled: true
matrix_playbook_traefik_labels_enabled: true

matrix_ssl_retrieval_method: none

matrix_nginx_proxy_https_enabled: false

matrix_nginx_proxy_container_http_host_bind_port: ''
matrix_nginx_proxy_container_federation_host_bind_port: ''

matrix_nginx_proxy_trust_forwarded_proto: true

matrix_nginx_proxy_x_forwarded_for: '$proxy_add_x_forwarded_for'

matrix_coturn_enabled: false
```

What currently works is:
reverse-proxying for all nginx-proxy based services **except** for the Matrix homeserver
(both Client-Server an Federation traffic for the homeserver don't work yet)
 2023-02-06 10:34:51 +02:00
Slavi Pantaleev 946bbe9734 Upgrade prometheus_node_exporter (v1.5.0-1 -> v1.5.0-2) 2023-02-06 09:54:34 +02:00
Slavi Pantaleev 5de5b5c62c Upgrade prometheus_postgres_exporter (v0.11.1-1 -> v0.11.1-2) 2023-02-06 09:49:15 +02:00
Slavi Pantaleev 4d6a8d049d Add matrix_nginx_proxy_container_network variable 2023-02-06 08:48:11 +02:00
Slavi Pantaleev e018663ba4 Attach ma1sd/nginx-proxy/synapse-reverse-proxy-companion to additional networks in a better way 
Switching from doing "post-start" loop hacks to running the container
in 3 steps: `create` + potentially connect to additional networks + `start`.
This way, the container would be connected to all its networks even at
the very beginning of its life.
 2023-02-06 08:38:43 +02:00
Slavi Pantaleev 045ed94d43 Upgrade prometheus_postgres_exporter (v0.11.1-0 -> v0.11.1-1) 2023-02-05 10:54:51 +02:00
Slavi Pantaleev be78b74fbd Switch from matrix-prometheus-postgres-exporter to an external prometheus_postgres_exporter role 2023-02-05 10:32:09 +02:00
Slavi Pantaleev 2d7d5d4bab Use new security-opt syntax (: -> =) 
Related to https://docs.docker.com/engine/deprecated/#separator--of---security-opt-flag-on-docker-run
 2023-02-03 20:36:24 +02:00
Slavi PantaleevandGitHub 919f9701ce Merge pull request #2443 from FSG-Cat/patch-2 
Update Prometheus to v2.42.0 from v2.41.0
 2023-02-02 17:32:06 +02:00
Slavi PantaleevandGitHub 4027531957 Merge pull request #2440 from etkecc/patch-161 
Fix python packages path in synapse container
 2023-02-01 08:28:29 +02:00
Slavi PantaleevandGitHub 7cb140b987 Downgrade Prometheus (v2.42.0 -> v2.41.0) until a container image gets published 
Container image not published yet.

Reverts #2438
 2023-01-31 23:24:20 +02:00
Slavi PantaleevandGitHub d42ef7d243 Merge pull request #2439 from etkecc/patch-160 
Update synapse 1.75.0 -> 1.76.0; default room version 9 -> 10
 2023-01-31 22:44:04 +02:00
Slavi PantaleevandGitHub c8ce83c725 Merge pull request #2438 from etkecc/patch-159 
Update prometheus 2.41.0 -> 2.42.0
 2023-01-31 22:43:34 +02:00
Slavi PantaleevandGitHub c65d165c1b Merge pull request #2437 from etkecc/patch-158 
Update element 1.11.21 -> 1.11.22
 2023-01-31 22:42:59 +02:00
Slavi Pantaleev c7767e9bc8 Upgrade Coturn (4.6.1-r0 -> 4.6.1-r1) 2023-01-31 20:25:59 +02:00
Slavi PantaleevandGitHub 66bb2943b4 Merge pull request #2436 from etkecc/patch-157 
Update jitsi stable-8218 -> stable-8252
 2023-01-31 18:03:08 +02:00
Slavi PantaleevandGitHub f5a85af47d Merge pull request #2435 from etkecc/patch-156 
Update element 1.11.20 -> 1.11.21
 2023-01-31 18:02:38 +02:00
Slavi PantaleevandGitHub dae1640070 Merge pull request #2433 from etkecc/patch-155 
Update cinny 2.2.3 -> 2.2.4
 2023-01-30 09:14:31 +02:00
Slavi Pantaleev 611a74bde2 Use |to_json in mautrix metrics configuration 
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/2427
 2023-01-30 08:59:35 +02:00
Slavi Pantaleev d7c0239e40 Enable metrics endpoint for mautrix bridges by default when Prometheus is enabled 
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/2427

This just enables the endpoint, which is somewhat helpful, but not
really enough to scrape them. Ideally, we'd be injecting these targets
into the Prometheus scrape config too.
For now, registering targets with Prometheus is very manual
(`matrix_prometheus_scraper_postgres_enabled`, `matrix_prometheus_scraper_hookshot_enabled`, ..).
This should be redone - e.g. a new `matrix_prometheus_scrape_config_jobs_auto` variable,
which is dynamically built in `group_vars/matrix_servers`.
 2023-01-30 08:53:28 +02:00
Slavi Pantaleev d82d0ad84b Add _metrics_proxying_enabled variables to mautrix bridges 
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/2427

`metrics_enabled` should only expose the metrics locally, on the
container network, so that a local Prometheus can consume them.

Exposing them publicly should be done via a separate toggle (`metrics_proxying_enabled`).
This is how all other roles work, so this makes these mautrix roles consistent with the rest.
 2023-01-30 08:50:57 +02:00
Slavi PantaleevandGitHub cad83ddca6 Merge pull request #2427 from alemairebe/mautrix-metrics 
Mautrix metrics
 2023-01-30 08:36:40 +02:00
Slavi PantaleevandGitHub f9a496c29c Merge pull request #2432 from shalzz/patch/slack 
mautrix-slack: add team name in channel name template
 2023-01-30 08:27:48 +02:00
Slavi PantaleevandGitHub 389d6c978f Merge pull request #2431 from etkecc/patch-154 
Update borgmatic 1.7.5 -> 1.7.6
 2023-01-29 21:51:42 +02:00
Slavi PantaleevandGitHub 5482a9d5d0 Merge pull request #2429 from etkecc/patch-152 
Update mautrix-discord latest -> 0.1.0
 2023-01-29 21:02:39 +02:00
Slavi PantaleevandGitHub 1dc8f59a38 Merge pull request #2430 from etkecc/patch-153 
Update maubot 0.3.1 -> 0.4.0
 2023-01-29 21:02:12 +02:00
Slavi Pantaleev e588c42088 Improve synapse-admin reverse-proxying fix 
Fixup for 6a31fba346
 2023-01-28 17:09:27 +02:00
Slavi Pantaleev 6a31fba346 Fix synapse-admin reverse-proxying regression caused by 0.8.6 
Related to f165aa5d48

Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/2424
 2023-01-28 17:04:55 +02:00
Slavi PantaleevandGitHub 29818abaf5 Merge pull request #2423 from etkecc/patch-150 
Update synapse-admin 0.8.5 -> 0.8.6
 2023-01-28 09:56:41 +02:00
Slavi PantaleevandGitHub 546535982b Merge pull request #2422 from bertybuttface/patch-1 
Bump Matrix Bot ChatGPT from 1.3.2 --> 1.4.1
 2023-01-27 21:18:32 +02:00
Slavi PantaleevandGitHub 430a55902c Merge pull request #2420 from bertybuttface/patch-1 
Upgrade matrix-chatgpt-bot to latest
 2023-01-27 08:57:16 +02:00
Slavi PantaleevandGitHub 784043cc5d Ensure OPENAI_PRO is true/false (not True/False) 2023-01-27 08:55:38 +02:00
Slavi Pantaleev e43ba65dd3 Upgrade prometheus_node_exporter (v1.5.0-0 -> v1.5.0-1) 2023-01-27 08:46:16 +02:00
Slavi Pantaleev 864b64d015 Mention the new no-multicast-peers default in Coturn config 
Related to 4c9f96722f
 2023-01-26 20:01:48 +02:00
Slavi Pantaleev f1c9052fe5 Make it obvious that running Coturn in host-networking mode requires manual firewall changes 2023-01-26 17:59:56 +02:00
Slavi Pantaleev 867737fe0b Upgrade Grafana (9.3.4 -> 9.3.6) 2023-01-26 17:42:03 +02:00
Slavi Pantaleev aafa8f019c Allow matrix_coturn_docker_network to be set to 'host' to use host-networking 
This helps large deployments which need to open up thousands of ports
(matrix_coturn_turn_udp_min_port, matrix_coturn_turn_udp_min_port)

On a test VM, opening 1k ports takes 17 seconds for Docker to "publish"
all of these ports (setting up forwarding rules with the firewall, etc),
so service startup and shutdown take a long amount of time.

If host-networking is used, there's no need to open any ports at all
and startup/shutdown can be quick.
 2023-01-26 17:35:30 +02:00
Slavi Pantaleev bb0faa6bc3 Block various private network ranges via denied_peer_ips for Coturn by default 
Inspired by: https://www.rtcsec.com/article/cve-2020-26262-bypass-of-coturns-access-control-protection/
 2023-01-26 17:35:30 +02:00
Slavi Pantaleev 773cb7d37e Make no-tcp-relay Coturn configuration property configurable 2023-01-26 17:35:30 +02:00
Slavi Pantaleev bf23d63f82 Add matrix_coturn_additional_configuration 2023-01-26 17:35:30 +02:00
Slavi Pantaleev 4c9f96722f Add no-multicast-peers to Coturn config by default 
Part of a security hardening provoked by:
https://www.rtcsec.com/article/cve-2020-26262-bypass-of-coturns-access-control-protection/
 2023-01-26 17:35:30 +02:00
Slavi PantaleevandGitHub 803d5c129e Merge pull request #2419 from RhysRdm/jitsi-jigasi-user-population 
Added option to allow user to set jigasi user and password for AUTH
 2023-01-25 17:18:01 +02:00
Slavi PantaleevandGitHub 39b0300797 Merge pull request #2418 from etkecc/patch-149 
Update grafana 9.3.2 -> 9.3.4
 2023-01-25 10:46:23 +02:00
Slavi PantaleevandGitHub d0d2c94493 Merge pull request #2417 from array-in-a-matrix/patch-12 
updated dendrite to version 0.11.0
 2023-01-25 07:23:53 +02:00
Slavi PantaleevandGitHub 54e5e4b6b9 Merge pull request #2416 from moan0s/fix_cactus_comments 
Fix client js and css download (load compiled version)
 2023-01-22 09:10:16 +02:00
Slavi PantaleevandGitHub c4d1347466 Fix typos 2023-01-22 09:08:47 +02:00
Slavi Pantaleev 9ed2e04d80 Switch from matrix-prometheus-node-exporter to an external prometheus_node_exporter role 2023-01-21 11:07:04 +02:00
Slavi PantaleevandGitHub 5f7ed722f6 Merge pull request #2415 from etkecc/patch-148 
Update hookshot 2.6.1 -> 2.7.0
 2023-01-20 22:40:54 +02:00
Slavi PantaleevandGitHub 1546c98448 Merge pull request #2414 from etkecc/patch-147 
Update element 1.11.19 -> 1.11.20
 2023-01-20 22:40:26 +02:00
Slavi PantaleevandGitHub 9f1e990f8c Merge pull request #2413 from spantaleev/dependabot/github_actions/ansible-community/ansible-lint-action-6.11.0 
Bump ansible-community/ansible-lint-action from 6.10.2 to 6.11.0
 2023-01-20 19:20:53 +02:00
Slavi Pantaleev b7b5c7edb7 Improve s3-storage-provider migration steps visibility 2023-01-19 17:16:21 +02:00
Slavi Pantaleev 4ec602983f Remove scary synapse-s3-storage-provider warning 2023-01-19 17:14:02 +02:00
Slavi Pantaleev 910c99d03d Improve "Copying data to Amazon S3" documentation for synapse-s3-storage-provider 2023-01-19 17:14:02 +02:00
Slavi Pantaleev 36ef2c6131 Do not recommend SSE-C in default s3-storage-provider config 
This is an advanced feature with dubious usefulness.
Putting it in the default config just confuses people.

Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/2220
 2023-01-19 17:14:02 +02:00
Slavi PantaleevandGitHub 13b916408d Merge pull request #2408 from etkecc/patch-146 
Update element 1.11.18 -> 1.11.19
 2023-01-19 07:56:42 +02:00
Slavi PantaleevandGitHub d78c24cd6b Merge pull request #2405 from CyberShadow/chatgpt-home 
Fix ChatGPT container
 2023-01-19 06:42:34 +02:00
Slavi PantaleevandGitHub fc3012208c Merge pull request #2403 from array-in-a-matrix/patch-11 
Fixed broken links to justfile
 2023-01-18 18:33:08 +02:00
Slavi PantaleevandGitHub 4fed67747b Merge pull request #2404 from etkecc/patch-145 
Update element 1.11.17 -> 1.11.18
 2023-01-18 18:22:37 +02:00
Slavi PantaleevandGitHub 70a35f17fe Merge pull request #2402 from etkecc/patch-144 
Update buscarron v1.3.0 -> v1.3.1
 2023-01-18 16:33:00 +02:00
Slavi PantaleevandGitHub 65ed68287c Merge pull request #2401 from etkecc/patch-143 
Update postmoogle 0.9.10 -> 0.9.11
 2023-01-18 16:32:39 +02:00
Slavi Pantaleev 424f79df3a Replace synapse.app.pusher and synapse.app.federation_sender with synapse.app.generic_worker 
Related to https://github.com/matrix-org/synapse/commit/3479599387164aca2613e88d169719
 2023-01-17 15:55:57 +02:00
Slavi Pantaleev 34745b5206 Upgrade Synapse (v1.74.0 -> v1.75.0) 2023-01-17 15:53:26 +02:00
Slavi Pantaleev c27021b29b Upgrade com.devture.ansible.role.timesync 2023-01-17 14:51:00 +02:00