mirror of
https://github.com/spantaleev/matrix-docker-ansible-deploy.git
synced 2024-12-25 18:38:30 +01:00
Allow Synapse manhole to be enabled
Can you double check that the way I have this set only exposes it locally? It is important that the manhole is not available to the outside world since it is quite powerful and the password is hard coded.
This commit is contained in:
parent
1ec7cd898d
commit
79d1576648
@ -574,6 +574,9 @@ matrix_synapse_container_federation_api_tls_host_bind_port: "{{ '8448' if (matri
|
|||||||
#
|
#
|
||||||
# For exposing the Synapse Metrics API's port (plain HTTP) to the local host.
|
# For exposing the Synapse Metrics API's port (plain HTTP) to the local host.
|
||||||
matrix_synapse_container_metrics_api_host_bind_port: "{{ '127.0.0.1:9100' if (matrix_synapse_metrics_enabled and not matrix_nginx_proxy_enabled) else '' }}"
|
matrix_synapse_container_metrics_api_host_bind_port: "{{ '127.0.0.1:9100' if (matrix_synapse_metrics_enabled and not matrix_nginx_proxy_enabled) else '' }}"
|
||||||
|
#
|
||||||
|
# For exposing the Synapse Manhole port (plain HTTP) to the local host.
|
||||||
|
matrix_synapse_container_manhole_api_host_bind_port: "{{ '127.0.0.1:9000' if matrix_synapse_manhole_enabled else '' }}"
|
||||||
|
|
||||||
matrix_synapse_database_host: "{{ matrix_postgres_connection_hostname }}"
|
matrix_synapse_database_host: "{{ matrix_postgres_connection_hostname }}"
|
||||||
matrix_synapse_database_user: "{{ matrix_postgres_connection_username }}"
|
matrix_synapse_database_user: "{{ matrix_postgres_connection_username }}"
|
||||||
|
@ -40,6 +40,13 @@ matrix_synapse_container_federation_api_tls_host_bind_port: ''
|
|||||||
# Takes an "<ip>:<port>" or "<port>" value (e.g. "127.0.0.1:9100"), or empty string to not expose.
|
# Takes an "<ip>:<port>" or "<port>" value (e.g. "127.0.0.1:9100"), or empty string to not expose.
|
||||||
matrix_synapse_container_metrics_api_host_bind_port: ''
|
matrix_synapse_container_metrics_api_host_bind_port: ''
|
||||||
|
|
||||||
|
# Controls whether the matrix-synapse container exposes the manhole port (tcp/9000 in the container).
|
||||||
|
#
|
||||||
|
# Takes effect only if the manhole is enabled (matrix_synapse_manhole_enabled).
|
||||||
|
#
|
||||||
|
# Takes an "<ip>:<port>" or "<port>" value (e.g. "127.0.0.1:9100"), or empty string to not expose.
|
||||||
|
matrix_synapse_container_manhole_api_host_bind_port: ''
|
||||||
|
|
||||||
# A list of extra arguments to pass to the container
|
# A list of extra arguments to pass to the container
|
||||||
matrix_synapse_container_extra_arguments: []
|
matrix_synapse_container_extra_arguments: []
|
||||||
|
|
||||||
@ -222,10 +229,15 @@ matrix_synapse_push_include_content: true
|
|||||||
matrix_synapse_url_preview_enabled: true
|
matrix_synapse_url_preview_enabled: true
|
||||||
|
|
||||||
# Enable exposure of metrics to Prometheus
|
# Enable exposure of metrics to Prometheus
|
||||||
# See https://github.com/matrix-org/synapse/blob/master/docs/metrics-howto.rst
|
# See https://github.com/matrix-org/synapse/blob/master/docs/metrics-howto.md
|
||||||
matrix_synapse_metrics_enabled: false
|
matrix_synapse_metrics_enabled: false
|
||||||
matrix_synapse_metrics_port: 9100
|
matrix_synapse_metrics_port: 9100
|
||||||
|
|
||||||
|
# Enable the Synapse manhole
|
||||||
|
# See https://github.com/matrix-org/synapse/blob/master/docs/manhole.md
|
||||||
|
matrix_synapse_manhole_enabled: false
|
||||||
|
|
||||||
|
|
||||||
# Send ERROR logs to sentry.io for easier tracking
|
# Send ERROR logs to sentry.io for easier tracking
|
||||||
# To set this up: go to sentry.io, create a python project, and set
|
# To set this up: go to sentry.io, create a python project, and set
|
||||||
# matrix_synapse_sentry_dsn to the URL it gives you.
|
# matrix_synapse_sentry_dsn to the URL it gives you.
|
||||||
|
@ -229,11 +229,13 @@ listeners:
|
|||||||
compress: false
|
compress: false
|
||||||
{% endif %}
|
{% endif %}
|
||||||
|
|
||||||
|
{% if matrix_synapse_manhole_enabled %}
|
||||||
# Turn on the twisted ssh manhole service on localhost on the given
|
# Turn on the twisted ssh manhole service on localhost on the given
|
||||||
# port.
|
# port.
|
||||||
# - port: 9000
|
- port: 9000
|
||||||
# bind_addresses: ['::1', '127.0.0.1']
|
bind_addresses: ['0.0.0.0']
|
||||||
# type: manhole
|
type: manhole
|
||||||
|
{% endif %}
|
||||||
|
|
||||||
|
|
||||||
## Homeserver blocking ##
|
## Homeserver blocking ##
|
||||||
|
@ -41,6 +41,9 @@ ExecStart=/usr/bin/docker run --rm --name matrix-synapse \
|
|||||||
{% if matrix_synapse_metrics_enabled and matrix_synapse_container_metrics_api_host_bind_port %}
|
{% if matrix_synapse_metrics_enabled and matrix_synapse_container_metrics_api_host_bind_port %}
|
||||||
-p {{ matrix_synapse_container_metrics_api_host_bind_port }}:{{ matrix_synapse_metrics_port }} \
|
-p {{ matrix_synapse_container_metrics_api_host_bind_port }}:{{ matrix_synapse_metrics_port }} \
|
||||||
{% endif %}
|
{% endif %}
|
||||||
|
{% if matrix_synapse_manhole_enabled and matrix_synapse_container_manhole_api_host_bind_port %}
|
||||||
|
-p {{ matrix_synapse_container_manhole_api_host_bind_port }}:9000 \
|
||||||
|
{% endif %}
|
||||||
-v {{ matrix_synapse_config_dir_path }}:/data:ro \
|
-v {{ matrix_synapse_config_dir_path }}:/data:ro \
|
||||||
-v {{ matrix_synapse_run_path }}:/matrix-run:rw \
|
-v {{ matrix_synapse_run_path }}:/matrix-run:rw \
|
||||||
-v {{ matrix_synapse_storage_path }}:/matrix-media-store-parent:slave \
|
-v {{ matrix_synapse_storage_path }}:/matrix-media-store-parent:slave \
|
||||||
|
Loading…
Reference in New Issue
Block a user