Marcel Partap
b05d298ae4
synapse workers nginx rule: add client_max_body_size on media endpoints
...
so transfer limits are properly set in accord to the relevant setting
https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/456#issuecomment-719996778
2020-11-10 21:43:33 +01:00
Marcel Partap
e5072c20d9
synapse workers/nginx: handle media_repository worker endpoints on federation port
...
to prevent "404 on the federation port for the path `/_matrix/media`,
if a remote server is trying to get the media object on federation
port, see https://github.com/matrix-org/synapse/issues/8695 "
https://github.com/matrix-org/synapse/pull/8701
2020-11-10 20:35:39 +01:00
Marcel Partap
2d1b9f2dbf
synapse workers: reworkings + get endpoints from upstream docs via awk
...
(yes, a bit awkward and brittle… xD)
2020-10-28 07:13:19 +01:00
Marcel Partap
87bd64ce9e
Merge remote-tracking branch 'origin/master' into synapse-workers
2020-10-23 23:45:07 +02:00
Dan Arnfield
b65bfc38ce
Update nginx (1.19.2 -> 1.19.3)
2020-10-14 06:23:33 -05:00
Slavi Pantaleev
d250727e8b
Upgrade certbot (1.7.0 -> 1.9.0)
2020-10-13 09:44:32 +03:00
Max Klenk
fc2edcbecf
fix media routing
2020-09-18 10:45:01 +02:00
Max Klenk
132daba1af
fix worker routes
2020-09-18 10:18:32 +02:00
Max Klenk
9a3d84b931
Merge branch 'master' into feature/add-worker-support
2020-09-10 13:57:11 +02:00
Slavi Pantaleev
2a1ec38e3a
Stop using Ansible's cron module
...
This is mainly to address SSL renewal not working for us due to:
- https://github.com/ansible/ansible/issues/71213
- https://github.com/ansible/ansible/pull/71207
Using the cron module was hacky anyway. We shouldn't need an extra
level of buggy abstraction to manage a cronjob file.
2020-09-06 10:49:19 +03:00
Max Klenk
06bc430c7c
refactor to use new workers and routes they serve
2020-08-28 13:53:39 +02:00
Max Klenk
59d1fb76b6
only apply worker redirects if workers are enabled
2020-08-27 15:25:32 +02:00
Max Klenk
567d0318b0
Merge branch 'synapse-workers' into feature/add-worker-support
2020-08-27 15:22:12 +02:00
Slavi Pantaleev
fc1655cd4b
Merge pull request #633 from thedanbob/certbot-1.7.0
...
Update certbot (1.6.0 -> 1.7.0)
2020-08-17 16:47:12 +03:00
Dan Arnfield
c8754f422a
Update certbot (1.6.0 -> 1.7.0)
2020-08-16 15:01:13 -05:00
Dan Arnfield
8d373409b8
Update nginx (1.19.1 -> 1.19.2)
2020-08-16 14:59:48 -05:00
Justin Croonenberghs
31e2a1f06b
Undo ill-advised change
...
In #628 I proposed a CORS change that turns out not to be the root of the issue. Caffeine-addled diagnosis leads to sloppy thinking, and this change should be reverted. In fact, if left it will cause problems for new installations.
2020-08-09 14:20:37 -05:00
Justin Croonenberghs
c5d18733d2
Update CORS for ma1sd
...
Even with the v2 updates listed in #503 and partially addressed in #614 , this is still needed to enable identity services to function with Element Desktop/Web. Testing on multiple clients with a clean config has confirmed this, at least for my installation.
2020-08-08 23:19:07 -05:00
Slavi Pantaleev
54195b22c7
Allow framing Jitsi
...
Hopefully fixes a regression caused by b106a9592e
.
Related to #597 (Github Pull Request).
2020-08-04 16:08:11 +03:00
Slavi Pantaleev
3f8e5b4363
Allow framing Dimension
...
Fix regression since 2a50b8b6bb
(#597 ).
Dimension is intended to be embedded in various clients,
be it the Element service that we host (at element.DOMAIN),
some other Element (element-desktop running locally), etc.
2020-07-25 07:08:32 +03:00
TwoTwenty
b106a9592e
Update matrix-jitsi.conf.j2
2020-07-22 10:39:24 -07:00
TwoTwenty
c97e7c5a3e
Update matrix-dimension.conf.j2
2020-07-22 10:39:07 -07:00
TwoTwenty
18ba885ca2
Update matrix-client-element.conf.j2
2020-07-22 10:38:50 -07:00
Slavi Pantaleev
c6ab1c6a90
Riot is now Element
...
Fixes #586 (Github Issue)
2020-07-17 11:31:20 +03:00
Dan Arnfield
c47a55d170
Update nginx (1.19.0 -> 1.19.1) and certbot (1.5.0 -> 1.6.0)
2020-07-16 06:34:14 -05:00
shadow
6293f1bdb0
Run all API self checks in check_mode
2020-07-04 15:24:33 +02:00
Slavi Pantaleev
65e5020596
Proxy other /_synapse endpoints to the client API
...
Besides /_synapse/admin, there are other things like
/_synapse/oidc, etc.
We should just proxy everything.
Fixes #534 (Github Issue).
2020-06-09 08:12:58 +03:00
Slavi Pantaleev
88a4a3ab55
Update components
2020-06-06 08:25:27 +03:00
Chris van Dijk
74df10633a
Remove hardcoded command paths in playbook cron usage
2020-05-27 23:14:58 +02:00
Chris van Dijk
6e3b877dc2
Remove hardcoded command paths in playbook shell usage
2020-05-27 23:14:56 +02:00
Chris van Dijk
6334f6c1ea
Remove hardcoded command paths in systemd unit files
...
Depending on the distro, common commands like sleep and chown may either
be located in /bin or /usr/bin.
Systemd added path lookup to ExecStart in v239, allowing only the
command name to be put in unit files and not the full path as
historically required. At least Ubuntu 18.04 LTS is however still on
v237 so we should maintain portability for a while longer.
2020-05-27 23:14:54 +02:00
Slavi Pantaleev
7a2dbdc2d7
Update components
2020-05-19 15:06:35 +03:00
Chris van Dijk
7585bcc4ac
Allow the matrix user username and groupname to be configured separately
...
No migration steps should be required.
2020-05-01 19:59:32 +02:00
Slavi Pantaleev
554da8338a
Merge pull request #463 from hooger/architecture
...
Architecture
2020-04-20 16:45:59 +03:00
Marcel Partap
46984a4f99
Nginx conf: more testing less b0rk
2020-04-19 21:42:34 +02:00
Christoph Johannes Kleine
765c046beb
add missing ; to matrix-synapse.conf.j2
2020-04-19 19:50:42 +02:00
Marcel Partap
e4763c21bc
nginx config: route traffic to workers on matrix-synapse
...
FIXME: horrid duplication in template file
2020-04-19 19:05:03 +02:00
Marcel Partap
a14b9c09ad
Add to synapse nginx template conditional URL rewrites for workers
...
· 😅 How to keep this in sync with the matrix-synapse documentation?
· regex location matching is expensive
· nginx syntax limit: one location only per block / statement
· thus, lots of duplicate statements in this file
2020-04-19 19:05:03 +02:00
Dan Arnfield
e2de6a1569
Update nginx (1.17.9 -> 1.17.10)
2020-04-19 08:38:53 -05:00
Horvath Gergely
bd61598faf
add experimental(?) architecture support for arm32 and arm64
...
the changes are necessary because certbot images are tagged, so docker does not recognize the necessary architecture
2020-04-18 22:55:19 +02:00
Chris van Dijk
d83236ea0e
Fix inconsistent whitespace
2020-04-17 00:53:26 +02:00
Marcel Partap
874e2e1fc0
Rename variables (s/mxisd/ma1sd/) and adapt roles
2020-04-02 11:31:38 +02:00
Slavi Pantaleev
8bcc9712d0
Make follow_redirects configurable when checking /.well-known/matrix/client
...
Discussed in #101 (Github Issue).
2020-03-31 11:45:32 +03:00
Christian Wolf
8c9b5ea6dd
Removed a few syntax bugs in Archlinux configuration
2020-03-28 13:00:01 +01:00
Christian Wolf
d84b2868b7
Added basic changes to make it compatible with Archlinux
2020-03-28 11:39:15 +01:00
mooomooo
eebc6e13f8
Made directory variables for /etc/systemd/system , /etc/cron.d , /usr/local/bin
2020-03-24 11:27:58 -07:00
Slavi Pantaleev
0f39cb9987
Fix incorrect server_name for Jitsi
...
Fixes #417 (Github Issue)
2020-03-24 17:57:39 +02:00
Slavi Pantaleev
cdd9ee1962
Add Jitsi support
2020-03-23 17:19:15 +02:00
Dan Arnfield
c7440b723a
Update certbot (1.2.0 -> 1.3.0)
2020-03-18 06:54:10 -05:00
Dan Arnfield
4065d74a5f
Update nginx (1.17.8 -> 1.17.9)
2020-03-18 06:53:59 -05:00