Aine
cbbf20004c
replace access log ip anonymization with vars to control access logs
2025-07-30 14:40:48 +01:00
Aine
e8c7091c3f
update nginx configs for cinny, hydrogen, and synapse reverse proxy companion with ip anonymization
2025-07-30 12:59:42 +01:00
Slavi Pantaleev
d876da4186
Explicitly tell template-lookup to not auto-parse JSON files
...
ansible-core>=2.19.0 only auto-parses YAML files, not JSON.
Previous ansible-core versions auto-parsed JSON as well, but ansible-core>=2.19.0
doesn't, so we added a `from_json` post-filter.
However, older versions auto-parsing JSON and turning it into a dict, on
which we later run `from_json` is no good.
In this patch, we try to equalize behavior and configure Ansible to never parse JSON,
hopefully making old-Ansible behave like new Ansible.
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/4458
Ref: https://docs.ansible.com/ansible/latest/collections/ansible/builtin/template_lookup.html#parameter-convert_data
2025-07-27 07:45:58 +03:00
Slavi Pantaleev
90813b3739
Pass the result of JSON-file template lookups through from_json
for better ansible-core>=2.19.0 compatibility
...
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/4445
It seems like ansible-core 2.19.0 no longer automatically parses template lookup content
as JSON (into a dict) when dealing with template files (be it `file.json.j2` or `file.j2`).
For files detected to contain YAML (`.ya?ml.j2`, but possibly others),
it automatically parses YAML, because the `convert_data` option
for the template lookup defaults to `true`.
Ref: https://docs.ansible.com/ansible/latest/collections/ansible/builtin/template_lookup.html
2025-07-26 18:53:11 +03:00
Slavi Pantaleev
51ab9ed9ff
Adjust lstrip_blocks
to use a bool
value for compatibility with ansible-core>=2.19.0
...
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/4445
2025-07-26 17:58:12 +03:00
Slavi Pantaleev
a1f6ee4dc9
Improve compatibility with ansible-core>=2.19.0 by not reaching into vars
...
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/4445
2025-07-26 17:50:20 +03:00
Slavi Pantaleev
3ee7deb2d7
Rename variable (matrix_user_groupname
-> matrix_group_name
)
2025-04-29 10:39:41 +03:00
Slavi Pantaleev
9fc5cdab33
Rename variable (matrix_user_username
-> matrix_user_name
)
2025-04-29 10:39:41 +03:00
Suguru Hirahara
c385bee7af
Re-run "reuse annotate" to sort statements
...
Signed-off-by: Suguru Hirahara <acioustick@noreply.codeberg.org >
2025-03-05 12:43:41 +09:00
Suguru Hirahara
afd122330b
Add license information to files for matrix-client-hydrogen
...
This commit adds copyright attributions in SPDX to the files for matrix-client-hydrogen following REUSE's specification.
Signed-off-by: Suguru Hirahara <acioustick@noreply.codeberg.org >
2025-02-25 18:01:02 +09:00
Slavi Pantaleev
c47eca389b
Rework all roles to include component_(docker|container)_image_registry_prefix*
variables
...
This:
- brings consistency - no more mixing `_name_prefix` and `_registry_prefix`
- adds extensibility - a future patch will allow reconfiguring all registry prefixes for all roles in the playbook
We still have `_docker_` vs `_container_` inconsistencies.
These may be worked on later.
2025-02-24 11:38:47 +02:00
Slavi Pantaleev
d12643eb91
Do not use docker stop --time
(deprecated in Docker v28 in favor of --timeout
or just -t
)
...
`-t` works on both old and new Docker versions, so it's best to use that.
2025-02-22 21:42:18 +02:00
Slavi Pantaleev
4a61bd49e3
Enable (Traefik compression middleware)-assisted compression for Cinny, Element & Hydrogen
2024-11-14 15:54:10 +02:00
Slavi Pantaleev
17f98f005e
Upgrade Hydrogen (v0.5.0 -> v0.5.1)
2024-10-21 14:29:04 +03:00
David Mehren
c89c356e53
Add a global config option for Docker network MTU ( #3502 )
...
* Add a global config option for Docker network MTU
* Upgrade systemd_docker_base (v1.2.0-0 -> v1.3.0-0)
The new version includes `devture_systemd_docker_base_container_networks_driver_options`
due to 3cc7d12396
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/3502
* Switch from passing matrix_playbook_docker_network_mtu to respecting devture_systemd_docker_base_container_networks_driver_options
Related to:
- 3cc7d12396
- https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/3502
* Update all roles to versions that respect `devture_systemd_docker_base_container_networks_driver_options`
---------
Co-authored-by: Slavi Pantaleev <slavi@devture.com >
2024-09-18 16:20:27 +03:00
renovate[bot]
1d145e86b8
Update ghcr.io/element-hq/hydrogen-web Docker tag to v0.5.0
2024-08-20 10:47:58 +00:00
Slavi Pantaleev
9f2eff2ac7
Respect devture_systemd_docker_base_docker_service_name
...
Related to 0241c71a4c
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/3270#issuecomment-2143782962
With this change, it should be possible for people to adjust the Docker
dependency from `docker.service` to something else (e.g. `pkg-ContainerManager-dockerd.service`),
or to completely eliminate it by setting `devture_systemd_docker_base_docker_service_name` to an empty string.
This makes it easier for people to use the playbook against a Synology DSM server.
2024-06-04 13:14:34 +03:00
Slavi Pantaleev
7891268873
Do not hardcode https:// in all remaining places, refer to matrix_static_files_scheme
...
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/3333
2024-05-25 16:14:26 +03:00
Slavi Pantaleev
3758b0cfeb
Squashed commit of the following:
...
commit cf8637efaca0a0be3609fd6add0dff893a0a9194
Author: Slavi Pantaleev <slavi@devture.com >
Date: Sun Mar 24 19:14:57 2024 +0200
Make devture_systemd_docker_base_ipv6_enabled automatically reconfigure geerlingguy/ansible-role-docker
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/3218
commit dc7af3bc7d25f321bf409477d823e43ea8a05803
Author: Slavi Pantaleev <slavi@devture.com >
Date: Sun Mar 24 19:10:31 2024 +0200
Replace matrix_ipv6_enabled with devture_systemd_docker_base_ipv6_enabled
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/3218
commit 07e900d6a2
Author: Slavi Pantaleev <slavi@devture.com >
Date: Sun Mar 24 19:01:51 2024 +0200
Improve matrix_ipv6_enabled comments
commit 3f03ca7f69
Author: Tilo Spannagel <development@tilosp.de >
Date: Sat Mar 9 19:27:50 2024 +0000
Add setting to enable ipv6
2024-03-24 19:15:43 +02:00
Slavi Pantaleev
51df34e7ae
Ensure each container labels file defines at least one service
...
Most of these files were defining a service, usually toward the end.
These lines have been moved upward.
Some components (mautrix-signal, mautrix-gmessages, etc.) were defining
a service conditionally (only if metrics are exposed, etc). This was
causing issues like these in the Traefik logs:
> level=error msg="service \"matrix-mautrix-twitter\" error: port is missing" providerName=docker container=matrix-mautrix-twitter-..
2024-01-17 17:56:45 +02:00
Slavi Pantaleev
f4f3d57520
Remove all traces of matrix-nginx-proxy, add validation & uninstallation tasks
2024-01-14 18:42:14 +02:00
Slavi Pantaleev
b37a02720f
Move all Matrix client apps into the matrix-addons container network
...
Putting each client into its own network was good for isolation,
but it's quite wasteful in terms of the container network pool.
2024-01-05 07:17:11 +02:00
Pierre 'McFly' Marty
4a8d8d8ce5
fix: hydrogen client docker/sources url
2023-12-15 11:08:23 +01:00
Slavi Pantaleev
2511b34a7c
Stop containers gracefully, instead of outright killing them
2023-12-06 11:52:23 +02:00
Slavi Pantaleev
ec3b204541
Merge branch 'master' into renovate-config
2023-10-16 18:15:53 +03:00
Julian Foad
3e43b9d1c7
client-hydrogen: remove unrelated change (docker push)
2023-10-09 13:28:50 +01:00
Julian Foad
408aec7d5b
client-hydrogen: fix self-build
...
Self-build now requires the new docker buildx/buildkit, so switch
from the ansible docker module to running a docker build command,
like elsewhere.
2023-10-09 11:06:54 +01:00
Samuel Meenzen
cfefc36477
fix: correct vector-im image name for renovate
2023-10-06 14:38:21 +02:00
Samuel Meenzen
c846ed199b
Annotate version numbers with renovate metadata
2023-10-06 14:14:03 +02:00
Slavi Pantaleev
f4829d6988
Upgrade Hydrogen (v0.4.0 -> v0.4.1)
2023-09-04 15:23:21 +03:00
Aine
b035ef1fa3
Update hydrogen 0.3.8 -> 0.4.0
2023-06-21 17:37:29 +03:00
Sergio Durigan Junior
dca6db15da
Fix prefix path when loading Hydrogen's theme-element.json
...
This is needed when using a prefix path that doesn't end with a slash.
Signed-off-by: Sergio Durigan Junior <sergiodj@sergiodj.net >
2023-05-31 12:24:27 -04:00
Slavi Pantaleev
dddfee16bc
Fix all 300+ ansible-lint-reported errors
2023-03-07 17:28:15 +02:00
Slavi Pantaleev
6cdbde01d7
Fix various Traefik headers syntax
...
`always` is an nginx suffix, which shouldn't have been added to these.
2023-02-20 16:50:39 +02:00
Slavi Pantaleev
38c4e464c1
Fix self-check for Hydrogen and Cinny when running under a subpath
2023-02-17 09:20:22 +02:00
Aine
c98f40c836
Update hydrogen 0.3.7 -> 0.3.8
2023-02-14 17:49:16 +00:00
Slavi Pantaleev
eb7292f274
Add matrix_client_hydrogen_hostname and fix Hydrogen serving at non-root-path
2023-02-14 10:57:13 +02:00
Slavi Pantaleev
6a52be7987
Add (native) Traefik support to matrix-client-hydrogen
...
Previously, it had to go through matrix-nginx-proxy.
It's exposed to Traefik directly via container labels now
Serving at a path other than `/` doesn't work well yet.
2023-02-14 09:58:35 +02:00
Slavi Pantaleev
64e2b26ed5
Fix Hydrogen failing to start
...
We were mounting our own configuration to
`/usr/share/nginx/html/config.json`, which is a symlink to
`/tmp/config.json`. So we effectively mount our file to
`/tmp/config.json`.
When starting:
- if Hydrogen sees a `CONFIG_OVERRIDE` environment variable,
it will try to save it into our read-only config file and fail.
- if Hydrogen doesn't see a `CONFIG_OVERRIDE` environment variable (the
path we go through, because we don't pass such a variable),
it will try to copy its bundled configuration (`/config.json.bundled`)
to `/tmp/config.json`. Because our configuration is mounted as read-only, it will
fail.
In both cases, it will fail with:
> cp: can't create '/tmp/config.json': File exists
Source: 3720de36bb/docker/dynamic-config.sh
We work around this by mounting our configuration on top of the bundled
one (`/config.json.bundled`). We then let Hydrogen's startup script copy
it to `/tmp/config.json` (a tmpfs we've mounted into the container) and use it from there.
2023-02-14 09:49:22 +02:00
Aine
a1ef28681a
Update Hydrogen 0.3.6 -> 0.3.7
2023-02-10 14:40:50 +00:00
Slavi Pantaleev
d0b2a50768
Upgrade Hydrogen (v0.3.5 -> v0.3.6)
2022-12-20 21:36:39 +02:00
Matthew Cengia
3453fff901
Use upstream Docker image for amd64 rather than self-build
2022-12-11 21:25:43 +11:00
Slavi Pantaleev
2688e8bfc3
Optimize initial installation by not reloading systemd after each .service install
...
We expect `--tags=start` to handle systemd reloading, so we don't need
to do it manually each time we install/uninstall a .service file.
2022-11-27 10:02:45 +02:00
Slavi Pantaleev
16c18b0344
Upgrade Hydrogen (v0.3.4 -> v0.3.5)
2022-11-25 18:59:01 +02:00
Slavi Pantaleev
a04f6f4e3d
Optimize uninstall tasks a bit
...
- forego removing Docker images - it's not effective anyway, because it
only removes the last version.. which is a drop in the bucket, usually
- do not reload systemd - it's none of our business. `--tags=start`,
etc., handle this
- combine all uninstall tasks under a single block, which only runs if
we detect traces (a leftover systemd .service file) of the component.
If no such .service is detected, we skip them all. This may lead to
incorect cleanup in rare cases, but is good enough for the most part.
2022-11-25 17:28:57 +02:00
Slavi Pantaleev
61f67d8f0a
Add install-* tags for quicker runs
2022-11-25 16:02:51 +02:00
Slavi Pantaleev
7c2a7a8eb6
Replace most import_tasks calls with include_tasks for improved performance
2022-11-24 11:33:45 +02:00
Slavi Pantaleev
0ea7cb5d18
Remove various init.yml files - initialize systemd services, etc., statically (not at runtime)
2022-11-23 11:45:46 +02:00
Aine
19b59f9ded
Update Hydrogen 0.3.3 -> 0.3.4
2022-11-10 17:56:59 +00:00
Slavi Pantaleev
a4e2a3bc07
Upgrade Hydrogen (v0.3.2 -> v0.3.3)
2022-11-04 17:07:29 +02:00