5456 Commits

Author SHA1 Message Date
Slavi Pantaleev
1e60f41a59 Restore Element Call HTTP headers to more secure/privacy-respecting values 2025-03-12 17:44:00 +02:00
Slavi Pantaleev
f8e84c4b2f Remove useless matrix_element_call_port variable 2025-03-12 17:43:34 +02:00
Slavi Pantaleev
3f5e8f656b Switch default LiveKit server endpoint to one under the matrix. domain and polish-up docs 2025-03-12 17:35:30 +02:00
Slavi Pantaleev
72118f2f03 Fix LiveKitServer middlware name (matrix-livekit-server-server-slashless-redirect -> matrix-livekit-server-slashless-redirect) 2025-03-12 16:56:06 +02:00
Slavi Pantaleev
585377975b Adjust LiveKit Server ports and exposure 2025-03-12 16:51:10 +02:00
Slavi Pantaleev
22ef579444 Make livekit-jwt-service communicate with livekit-server via public URLs
Communicating via container URLs works, but the URL provided to
livekit-jwt-service as `LIVEKIT_URL` is also passed to the user later
and it must be a public one at that point.

It'd be great if livekit-jwt-service can be given 2 different URLs
(e.g. `LIVEKIT_URL` and `LIVEKIT_URL_PUBLIC`) and only announce the
public one to the user, but there's no support for this yet.
2025-03-12 15:44:31 +02:00
Slavi Pantaleev
32f8c6de6e Merge branch 'master' into element-call-integration 2025-03-12 15:27:42 +02:00
Aine
79cc333be2
Postmoogle v0.9.26 (crypto init fix) 2025-03-12 12:38:37 +02:00
Slavi Pantaleev
8291b2f99d Merge branch 'master' into element-call-integration 2025-03-12 09:14:50 +02:00
Slavi Pantaleev
c5a03efdf6 Increase default Synapse/rc_message rate limits
The new rate limits are more suitable for running Element Call.

Ref:

- 93ae2aed98/docs/self-hosting.md (a-matrix-homeserver)
- https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/3562

Instead of trying to increase them conditionally only when Element Call
is enabled, it's simpler and good-enough to just increase them in all cases.
2025-03-12 09:13:43 +02:00
Slavi Pantaleev
63f81bf268 Add support for configuring Synapse's MSC4222 (adding state_after to sync v2) experimental feature
This is required by Element Call.

Ref:

- 93ae2aed98/docs/self-hosting.md (a-matrix-homeserver)
- https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/3562
2025-03-12 09:12:39 +02:00
Slavi Pantaleev
f5a0be0a7b Add support for configuring Synapse's MSC4140 (Delayed Events) experimental feature
This is required by Element Call.

Ref:

- 93ae2aed98/docs/self-hosting.md (a-matrix-homeserver)
- https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/3562
2025-03-12 09:10:35 +02:00
Slavi Pantaleev
4fb0b75942 Reorder Synapse config's experimental_features alphabetically 2025-03-12 09:05:59 +02:00
Slavi Pantaleev
890f10f765 Make matrix_livekit_jwt_service_public_url respect matrix_livekit_jwt_service_path_prefix 2025-03-12 09:01:35 +02:00
Slavi Pantaleev
031cf68cbb Remove unused matrix_element_call_metrics_* variables 2025-03-12 08:59:50 +02:00
Slavi Pantaleev
5961841e52 Make matrix-livekit-jwt-service role not reference foreign variables (except the matrix-base ones) 2025-03-12 08:59:05 +02:00
Slavi Pantaleev
2be4923aef Make Element Call role not reference foreign variables (except the matrix-base ones) 2025-03-12 08:56:15 +02:00
Slavi Pantaleev
23efad9cb7 Rework Element Call config.json templating 2025-03-12 08:51:52 +02:00
Slavi Pantaleev
6b55ba29ab Make Element Call refuse a path prefix other than / 2025-03-12 08:46:11 +02:00
Slavi Pantaleev
0d1112638d Update LiveKit JWT service path prefix (/lk-jwt-service -> /livekit-jwt-service) 2025-03-12 08:07:56 +02:00
Slavi Pantaleev
c3c2ba34b4 Split matrix_element_call_systemd_required_services_list into _default, _auto and _custom 2025-03-12 08:02:29 +02:00
Slavi Pantaleev
0215708f79 Remove some useless variables and rework environment variables variable for livekit-jwt-service 2025-03-12 08:00:28 +02:00
Slavi Pantaleev
e1b57f3d45 Pin livekit-jwt-service to released (v0.2.0) and adapt configuration 2025-03-12 07:56:47 +02:00
Slavi Pantaleev
de2a8f11d2 _name_prefix -> _registry_prefix changes for LiveKit roles 2025-03-12 07:47:07 +02:00
Slavi Pantaleev
2a69ca35be Clean up Element Call group vars vs defaults/main.yml mixup and make some minor LiveKit updates 2025-03-12 07:42:40 +02:00
Slavi Pantaleev
f161c7c58f Add newlines at end of files 2025-03-12 07:03:00 +02:00
Slavi Pantaleev
6c6b44dc25 Add license information to Element Call and LiveKit roles 2025-03-12 06:58:00 +02:00
Slavi Pantaleev
8eb1c57e2b Merge branch 'master' into element-call-integration 2025-03-12 06:36:48 +02:00
Slavi Pantaleev
aa36acdef1 Remove useless matrix_static_files_client_redirect_root_uri_to_domain variable definition 2025-03-12 06:36:24 +02:00
Slavi Pantaleev
74d6a99b1e Adjust names for Element Call tasks and make uninstallation more consistent with other roles 2025-03-12 06:32:22 +02:00
Slavi Pantaleev
81a30f17ac Remove some superficial comments 2025-03-12 06:29:39 +02:00
Slavi Pantaleev
413d591562 Bring container-network-creation tasks up-to-date for Element Call and LiveKit-related services 2025-03-12 06:27:11 +02:00
Slavi Pantaleev
7572522820 Merge branch 'master' into element-call-integration 2025-03-12 06:24:34 +02:00
Suguru Hirahara
72f28474c2
Update roles/custom/matrix-client-element/templates/env.j2: add the copyright header
Signed-off-by: Suguru Hirahara <acioustick@noreply.codeberg.org>
2025-03-12 12:29:49 +09:00
Slavi Pantaleev
40732e3594 Upgrade Element Web (v1.11.94 -> v1.11.95) and patch healthcheck
Related to:

- https://github.com/element-hq/element-web/pull/29471
- 16f9e7dd46c899963d8fc6cedcfac82b383aac55
2025-03-11 22:34:59 +02:00
Slavi Pantaleev
a5d850d800 Add matrix_client_element_environment_variable_element_web_port and matrix_client_element_environment_variables_extension variables 2025-03-11 22:34:59 +02:00
Slavi Pantaleev
e65d198841 Run Element Web in tightened/read-only mode without a custom nginx config
Newer Element Web versions allow for the nginx port to be
overriden, etc., and provide instructions for running in read-only mode.

This makes our custom `nginx.conf` patches unnecessary.

Passing the correct `ELEMENT_WEB_PORT` environment variable
also helps with future changes.

Another benefit of this (besides keeping closer to upstream
recommendations and the improved simplicity) is that:

- the container can run its entrypoint env-substitutions code now,
  without reporting errors

- IPv6 for nginx works, so `matrix-client-element:8080` is accessible
  via IPv6 on the container network now
  (this affects only for Traefik's communicaton with Element Web
  internally; public connectivity was handled by Traefik and IPv6 was
  available there even before)

Ref:

- 2052080d7d/docs/install.md (docker)
- https://github.com/element-hq/element-web/pull/28849
- https://github.com/element-hq/element-web/pull/28840
2025-03-11 22:32:35 +02:00
Slavi Pantaleev
16f9e7dd46 Revert "Upgrade Element Web (v1.11.94 -> v1.11.95)"
This reverts commit 178f7a9fffc3264553d1c17c83df05d33a263817.

Element v1.11.95 doesn't seem to work. The container starts and is
unhealthy.

Until this is investigated and fixed, reverting.
2025-03-11 19:26:00 +02:00
Slavi Pantaleev
bda63024ee Upgrade Synapse (v1.125.0 -> v1.126.0) 2025-03-11 19:14:37 +02:00
Slavi Pantaleev
178f7a9fff Upgrade Element Web (v1.11.94 -> v1.11.95) 2025-03-11 19:14:08 +02:00
Slavi Pantaleev
1313f1e414 Make base domain root path redirect also handle URLs with query strings (passing them along)
Previously `https://example.com` and `https://example.com/` would be
redirected to `https://matrix.example.com`.

However, `https://example.com/?something` was not handled and was tried
to be served as a file by matrix-static-files for this base domain.

From now on, paths containing query strings will be handled as well
and the query string will be passed along.
Example: `https://example.com/?something` -> `https://matrix.example.com/?something`
2025-03-11 19:07:33 +02:00
Aine
ccab72aa2e
Postmoogle v0.9.25 2025-03-10 17:59:07 +02:00
renovate[bot]
96adaf9916 Update ghcr.io/matrix-org/rageshake Docker tag to v1.15.0 2025-03-10 10:39:16 +02:00
Slavi Pantaleev
35dd8e46cd Adjust /etc/docker/daemon.json cleanup comment with link to ansible-role-docker PR 2025-03-09 16:22:46 +02:00
Slavi Pantaleev
6d6fd4bf85 Add license information to roles/custom/matrix_playbook_migration/tasks/docker_daemon_options_file_cleanup.yml 2025-03-09 16:07:01 +02:00
Slavi Pantaleev
bd073bca74 Remove /etc/docker/daemon.json when no Docker options are set anymore 2025-03-09 16:03:15 +02:00
Iruwen
55e47d69db
Enable room summary API (MSC3266) support for Synapse to support Element X clients 2025-03-06 14:48:23 +01:00
Slavi Pantaleev
1c68fd0d9b Make matrix-synapse-reverse-proxy-companion not report "502 Bad Gateway" when Synapse workers restart
Since nginx 1.27.3, we can make use of the `resolve` parameter for an `upstream`'s `server`,
to allow DNS resolution to happen continuously at runtime, not just once during startup.

Previously, this was not possible to do in an `upstream` block without
an nginx-plus subscription. Outside of an `upstream` block, we've used
and still use `set $backend ..` workarounds to get DNS resolution at
runtime, but now we can do it in `upstream` as well.
2025-03-05 21:24:43 +02:00
Aine
60bc545d0e
Synapse Admin v0.10.3-etke38 2025-03-05 15:24:00 +02:00
Suguru Hirahara
d4c007dffd
Re-run reuse annotate for roles/
Signed-off-by: Suguru Hirahara <acioustick@noreply.codeberg.org>
2025-03-05 16:03:16 +09:00