mirror/matrix-docker-ansible-deploy
1
0
Fork 0
mirror of https://github.com/spantaleev/matrix-docker-ansible-deploy.git synced 2024-11-08 19:57:35 +01:00
Code Issues Packages Projects Releases Wiki Activity
5,748 Commits 6 Branches 0 Tags 30 MiB
59a3646c66
Commit Graph

3629 Commits

Author SHA1 Message Date
Slavi Pantaleev
d82d0ad84b Add _metrics_proxying_enabled variables to mautrix bridges 
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/2427

`metrics_enabled` should only expose the metrics locally, on the
container network, so that a local Prometheus can consume them.

Exposing them publicly should be done via a separate toggle (`metrics_proxying_enabled`).
This is how all other roles work, so this makes these mautrix roles consistent with the rest.
 2023-01-30 08:50:57 +02:00
Slavi Pantaleev
cad83ddca6
Merge pull request #2427 from alemairebe/mautrix-metrics 
Mautrix metrics
 2023-01-30 08:36:40 +02:00
Slavi Pantaleev
f9a496c29c
Merge pull request #2432 from shalzz/patch/slack 
mautrix-slack: add team name in channel name template
 2023-01-30 08:27:48 +02:00
Shaleen Jain
df9931f719 mautrix-slack: add team name in channel name template 2023-01-30 10:17:19 +05:30
Slavi Pantaleev
389d6c978f
Merge pull request #2431 from etkecc/patch-154 
Update borgmatic 1.7.5 -> 1.7.6
 2023-01-29 21:51:42 +02:00
Slavi Pantaleev
5482a9d5d0
Merge pull request #2429 from etkecc/patch-152 
Update mautrix-discord latest -> 0.1.0
 2023-01-29 21:02:39 +02:00
Aine
4f69b22a6e
Update borgmatic 1.7.5 -> 1.7.6 2023-01-29 18:14:41 +00:00
Aine
a9a17d803e
Update maubot 0.3.1 -> 0.4.0 2023-01-29 18:12:26 +00:00
Aine
111303208a
Update mautrix-discord latest -> 0.1.0 2023-01-29 18:11:33 +00:00
Adrien le Maire
9eaf6944e3 add nginx proxy connfig for mautrix metrics 2023-01-29 15:17:31 +01:00
Adrien le Maire
691ef13cab template metric toggle for mautrix bridges supporting it 2023-01-29 09:45:52 +01:00
Slavi Pantaleev
e588c42088 Improve synapse-admin reverse-proxying fix 
Fixup for 6a31fba346
 2023-01-28 17:09:27 +02:00
Slavi Pantaleev
6a31fba346 Fix synapse-admin reverse-proxying regression caused by 0.8.6 
Related to f165aa5d48

Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/2424
 2023-01-28 17:04:55 +02:00
Aine
f165aa5d48
Update synapse-admin 0.8.5 -> 0.8.6 2023-01-28 07:54:52 +00:00
bertybuttface
7b5ced3037
Fix linting issue. 2023-01-27 19:02:14 +00:00
bertybuttface
d66a2949f6
Update env.j2 
Use matrix_bot_chatgpt_context for CHATGPT_CONTEXT
 2023-01-27 18:57:24 +00:00
bertybuttface
7e1408ea65
Bump ChatGPT version and add new config settings 
matrix_bot_chatgpt_context=thread
 2023-01-27 18:55:13 +00:00
Slavi Pantaleev
430a55902c
Merge pull request #2420 from bertybuttface/patch-1 
Upgrade matrix-chatgpt-bot to latest
 2023-01-27 08:57:16 +02:00
Slavi Pantaleev
784043cc5d
Ensure OPENAI_PRO is true/false (not True/False) 2023-01-27 08:55:38 +02:00
Slavi Pantaleev
867737fe0b Upgrade Grafana (9.3.4 -> 9.3.6) 2023-01-26 17:42:03 +02:00
Slavi Pantaleev
aafa8f019c Allow matrix_coturn_docker_network to be set to 'host' to use host-networking 
This helps large deployments which need to open up thousands of ports
(matrix_coturn_turn_udp_min_port, matrix_coturn_turn_udp_min_port)

On a test VM, opening 1k ports takes 17 seconds for Docker to "publish"
all of these ports (setting up forwarding rules with the firewall, etc),
so service startup and shutdown take a long amount of time.

If host-networking is used, there's no need to open any ports at all
and startup/shutdown can be quick.
 2023-01-26 17:35:30 +02:00
Slavi Pantaleev
bb0faa6bc3 Block various private network ranges via denied_peer_ips for Coturn by default 
Inspired by: https://www.rtcsec.com/article/cve-2020-26262-bypass-of-coturns-access-control-protection/
 2023-01-26 17:35:30 +02:00
Slavi Pantaleev
773cb7d37e Make no-tcp-relay Coturn configuration property configurable 2023-01-26 17:35:30 +02:00
Slavi Pantaleev
bf23d63f82 Add matrix_coturn_additional_configuration 2023-01-26 17:35:30 +02:00
Slavi Pantaleev
4c9f96722f Add no-multicast-peers to Coturn config by default 
Part of a security hardening provoked by:
https://www.rtcsec.com/article/cve-2020-26262-bypass-of-coturns-access-control-protection/
 2023-01-26 17:35:30 +02:00
bertybuttface
18c3903def
Update env.j2 
Set OPEN_AI to matrix_bot_chatgpt_openai_pro
 2023-01-26 15:12:36 +00:00
bertybuttface
ad58858a96
Upgrade matrix-chatgpt (1.2.3 -> 1.3.2) 
Add support for OPENAI_PRO for ChatGPT pro subscriptions.
 2023-01-26 15:09:24 +00:00
rhys
d01de9f33d Fix lint errors 2023-01-25 12:07:00 +00:00
rhys
547b01d618 Added option to allow user to set jigasi user and password for AUTH 2023-01-25 12:02:40 +00:00
Aine
6afd3c59eb
Update grafana 9.3.2 -> 9.3.4 2023-01-25 08:39:47 +00:00
Array in a Matrix
47165e8902
updated dendrite version 2023-01-24 15:50:06 -05:00
Slavi Pantaleev
54e5e4b6b9
Merge pull request #2416 from moan0s/fix_cactus_comments 
Fix client js and css download (load compiled version)
 2023-01-22 09:10:16 +02:00
Slavi Pantaleev
c4d1347466
Fix typos 2023-01-22 09:08:47 +02:00
Julian-Samuel Gebühr
18d8d41e14 Fix client js and css download (load compiled version) 2023-01-21 20:54:12 +01:00
Slavi Pantaleev
9ed2e04d80 Switch from matrix-prometheus-node-exporter to an external prometheus_node_exporter role 2023-01-21 11:07:04 +02:00
Slavi Pantaleev
5f7ed722f6
Merge pull request #2415 from etkecc/patch-148 
Update hookshot 2.6.1 -> 2.7.0
 2023-01-20 22:40:54 +02:00
Aine
32292b1f02
Update hookshot 2.6.1 -> 2.7.0 2023-01-20 18:39:05 +00:00
Aine
b71e267221
Update element 1.11.19 -> 1.11.20 2023-01-20 18:38:14 +00:00
Aine
8804a15821
Update element 1.11.18 -> 1.11.19 2023-01-19 05:10:49 +00:00
Vladimir Panteleev
6c332da7d3
Fix ChatGPT container 
This container needs a writable $HOME, and will fail at startup if
there isn't one.

Provide one by pointing HOME to a path under the mounted /data
directory.
 2023-01-19 01:21:44 +00:00
Aine
63a3764f51
Update element 1.11.17 -> 1.11.18 2023-01-18 15:45:04 +00:00
Slavi Pantaleev
70a35f17fe
Merge pull request #2402 from etkecc/patch-144 
Update buscarron v1.3.0 -> v1.3.1
 2023-01-18 16:33:00 +02:00
Aine
2fc02abfdc
Update buscarron v1.3.0 -> v1.3.1 2023-01-18 13:52:44 +00:00
Aine
903db54959
Update postmoogle 0.9.10 -> 0.9.11 2023-01-18 13:37:03 +00:00
Slavi Pantaleev
424f79df3a Replace synapse.app.pusher and synapse.app.federation_sender with synapse.app.generic_worker 
Related to https://github.com/matrix-org/synapse/commit/3479599387164aca2613e88d169719
 2023-01-17 15:55:57 +02:00
Slavi Pantaleev
34745b5206 Upgrade Synapse (v1.74.0 -> v1.75.0) 2023-01-17 15:53:26 +02:00
Slavi Pantaleev
3ff6e755a9 Upgrade Hookshot (2.6.0 -> 2.6.1) 2023-01-16 18:52:22 +02:00
Aine
e053b2b0fc
update mautrix-whatsapp 0.8.0 -> 0.8.1 2023-01-16 13:17:02 +00:00
Aine
5c8bad6091
update borg image tag 2023-01-16 12:11:01 +02:00
Slavi Pantaleev
34c448c3bb Upgrade Cinny (2.2.2 -> 2.2.3) 2023-01-15 11:07:19 +02:00
Aine
d1b4a6ebe1
unify docker images urls 2023-01-14 15:26:58 +02:00
Slavi Pantaleev
5d10001712
Merge pull request #2394 from etkecc/patch-141 
Update hookshot 2.5.0 -> 2.6.0
 2023-01-13 18:40:42 +02:00
Aine
627d8557ae
Update hookshot 2.5.0 -> 2.6.0 2023-01-13 16:31:19 +00:00
Aine
e8c6267e9a
Update jitsi stable-8138-1 -> stable-8218 2023-01-13 16:30:18 +00:00
Slavi Pantaleev
ae1ad3baf6 Improve block tasks indentation to make yamllint happy 
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/2392
 2023-01-13 18:17:52 +02:00
Slavi Pantaleev
673ee508dc Upgrade matrix-chatgpt (1.2.2 -> 1.2.3) 2023-01-12 11:25:00 +02:00
Slavi Pantaleev
ab8cb21a45 Upgrade matrix-chatgpt (1.2.1 -> 1.2.2) 2023-01-11 19:25:07 +02:00
Slavi Pantaleev
17438bd0dd Upgrade mjolnir (v1.6.3 -> v1.6.4) 2023-01-11 19:24:35 +02:00
Slavi Pantaleev
0c472c172e Upgrade mjolnir (v1.6.1 -> v1.6.3) 2023-01-11 13:51:35 +02:00
Slavi Pantaleev
4e40ac5ad8
Merge pull request #2227 from xangelix/add-matrix-mautrix-slack-role 
Add matrix-bridge-mautrix-slack role
 2023-01-11 10:35:45 +02:00
Slavi Pantaleev
226d81318a Merge branch 'bertybuttface-master' 2023-01-10 17:27:42 +02:00
Slavi Pantaleev
a96a22c925 chatgpt docs updates 2023-01-10 17:26:59 +02:00
bertybuttface
0b88293393 Bump ChatGPT version. 2023-01-10 14:09:08 +00:00
bertybuttface
0ec1868b95 Add matrix-bot-chatgpt. 
Co-Authored-By: Slavi Pantaleev <slavi@devture.com>
 2023-01-10 13:57:38 +00:00
Slavi Pantaleev
d2416365d2
Merge pull request #2220 from xangelix/synapse-s3-sse-c 
Add S3 SSE-C config support for synapse-s3-storage-provider
 2023-01-10 09:25:11 +02:00
Slavi Pantaleev
f0d1e23c9d
Move around whitelines 2023-01-10 09:22:55 +02:00
Cody Wyatt Neiman
fc9eaa6ec5
Remove git version for s3 storage provider 2023-01-09 15:52:38 -05:00
Aine
6bd909bbb7
add mode var for synapse ext ldap auth 2023-01-09 22:18:37 +02:00
Slavi Pantaleev
1d1fd7053c ewoutp/goofys:latest -> docker.io/ewoutp/goofys:latest 2023-01-09 18:55:22 +02:00
Aine
b487bb6749
unify image prefixes 2023-01-08 22:05:43 +02:00
Aine
38151c9fd3
Update heisenbridge 1.14.0 -> 1.14.1 2023-01-06 11:03:18 +00:00
James Collier
36d8ea281c
Allow the mautrix whatsapp relaybot to be enabled with a variable (#2381) 
* Allow the mautrix whatsapp relaybot to be enable with a variable

This allows a user to enable the relaybot by setting a variable in
`vars.yml` in the same way that the mautrix signal relaybot is
configured.

* Correct default values for mautrix whatsapp relaybot variables

* Add documentation for using the relaybot with mautrix whatsapp

* Adjust variable names to better reflect what they do

* Set default variables properly and use to_json in template
 2023-01-06 11:09:07 +02:00
jakicoll
42e4e50f5b Matrix Authentication Support for Jitsi 
This extends the collection with support for seamless authentication at the Jitsi server using Matrix OpenID.

1. New role for installing the [Matrix User Verification Service](https://github.com/matrix-org/matrix-user-verification-service)
2. Changes to Jitsi role: Installing Jitsi Prosody Mods and configuring Jitsi Auth
3. Changes to Jitsi and nginx-proxy roles: Serving .well-known/element/jitsi from jitsi.DOMAIN
4. We updated the Jitsi documentation on authentication and added documentation for the user verification service.
 2023-01-04 14:27:16 +01:00
Cody Wyatt Neiman
7e5e1712f5
Encode s3 sse-c key for utf-8 2023-01-03 17:53:33 -05:00
Cody Wyatt Neiman
f5390562ed
Fix synapse s3 storage provider container indentation 2023-01-03 16:13:09 -05:00
Cody Wyatt Neiman
6d96bcee1d
Allow 'git' as a version for s3 storage provider 2023-01-03 15:18:49 -05:00
Cody Wyatt Neiman
4d44f7b49e
Use base64 encoded string for sse-c key 2023-01-03 15:18:09 -05:00
Cody Wyatt Neiman
4c60b1dabf
Merge branch 'master' into synapse-s3-sse-c 2023-01-03 14:31:02 -05:00
Cody Wyatt Neiman
12b8cb3aab
Fix localpart slack id regex for mautrix-slack 2023-01-02 21:58:52 -05:00
Cody Wyatt Neiman
e977242022
Pull more mautrix-slack defaults from upstream 2023-01-02 21:31:04 -05:00
Cody Wyatt Neiman
f4874d2e4a
Pull upstream mautrix-slack config defaults 2023-01-02 21:09:40 -05:00
Cody Wyatt Neiman
2e0dfb2dc1
Update slack bridge implementation 2023-01-02 20:07:04 -05:00
Cody Wyatt Neiman
d07480a883
Remove hardcoded matrix-postgres references 2023-01-02 19:23:14 -05:00
Cody Wyatt Neiman
97c45676de
Update paths and vars for mautrix-slack to roles/custom 2023-01-02 19:13:58 -05:00
Cody Wyatt Neiman
d6022d851e
Move mautrix-sack role files to new roles/custom path 2023-01-02 19:13:49 -05:00
Cody Wyatt Neiman
6fb0f26b30
Add mautrix/appservice slack bridge bot username checks 2023-01-02 19:13:49 -05:00
Cody Wyatt Neiman
784e5492d5
Add matrix-bridge-mautrix-slack role 2023-01-02 19:13:17 -05:00
Slavi Pantaleev
1abba4c918 Upgrade matrix-corporal (2.5.0 -> 2.5.1) 2023-01-02 14:39:54 +02:00
Slavi Pantaleev
73e689e48e Fix --tags=register-user not working on Dendrite due to broken Jinja syntax 
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/2369
 2022-12-31 17:33:46 +02:00
Slavi Pantaleev
ba09705f7f Make Jitsi auth setup not show credentials in the shell 
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/2363
 2022-12-26 07:58:32 +02:00
Aine
6795fe3578
Update ntfy 1.29.1 -> 1.30.1 2022-12-23 15:46:33 +00:00
Aine
8b2a86e35e
update beeper-linkedin 0.5.3 -> 0.5.4 2022-12-23 13:00:35 +02:00
Kuchenmampfer
d1442dec15
Upgrade Signald 
Fixes the following issue when trying to use the !pm <phone number> command: https://gitlab.com/signald/signald/-/issues/345
 2022-12-22 22:31:38 +00:00
adam-kress
bef4fe5d9e
Update element v1.11.16 -> v1.11.17 2022-12-21 13:16:09 -05:00
Samuel Meenzen
0179b0f165
Remove conduit workaround 
Conduit update 0.5.0 fixed the issue, so this is no longer needed.
 2022-12-21 18:28:34 +01:00
Samuel Meenzen
33fb5a4665
Upgrade Conduit (0.4.0 -> 0.5.0) 2022-12-21 18:21:49 +01:00
Slavi Pantaleev
40aa42e982 Add reference to push.enabled to homeserver.yaml 
Related to:

- https://github.com/matrix-org/synapse/pull/14551/files
- https://github.com/matrix-org/synapse/pull/14619/files
 2022-12-21 06:43:43 +02:00
Slavi Pantaleev
42c4f0450d Upgrade Prometheus (2.40.7 -> 2.41.0) 2022-12-20 21:37:19 +02:00
Slavi Pantaleev
d0b2a50768 Upgrade Hydrogen (v0.3.5 -> v0.3.6) 2022-12-20 21:36:39 +02:00
Joe Kappus
deabd79452
Upgrade Synapse (1.73.0 -> 1.74.0) 
Signed-off-by: Joe Kappus <joe@wt.gd>
 2022-12-20 14:07:14 -05:00
Catalan Lover
5e30f6d4c4
Update Mjolnir from 1.5.0 to 1.6.1 
Please note that This Mjolnir version bump technnically is missing some extra stuff that mjolnir claims we should do but it didnt work when i tried it and well my mjolnir deployment has been running this since release day almost and its fine. No errors in log that are unexpected. (Mjolnir throws errors in the log for anyone who wonders for various things that are fine. Like if a protection is off that is an error. Its due to how matrix-bot-lib works.)
 2022-12-19 15:33:58 +01:00
Slavi Pantaleev
f2e68469cb Upgrade nginx (1.23.2 -> 1.23.3) 2022-12-19 12:32:43 +02:00
Slavi Pantaleev
576eb0006c Upgrade Grafana (9.3.1 -> 9.3.2) 2022-12-17 22:49:34 +02:00
Slavi Pantaleev
a7d39b109a Upgrade Redis (7.0.6 -> 7.0.7) 2022-12-17 22:48:48 +02:00
Slavi Pantaleev
fa73513064 Upgrade mautrix-whatsapp (0.7.2 -> 0.8.0) 2022-12-17 22:47:38 +02:00
Aine
455b8aff15
Update prometheus 2.40.6 -> 2.40.7 2022-12-14 10:32:14 +00:00
Slavi Pantaleev
60127cdffd
Merge pull request #2339 from etkecc/patch-135 
update redis 7.0.5 -> 7.0.6
 2022-12-14 07:31:36 +02:00
Slavi Pantaleev
190f241bf5
Merge pull request #2340 from etkecc/patch-136 
Update jitsi stable-8138 -> stable-8138-1
 2022-12-14 07:31:31 +02:00
Aine
bd0f21588f
Update jitsi stable-8138 -> stable-8138-1 2022-12-13 22:49:10 +00:00
Aine
07ca0267f1
update redis 7.0.5 -> 7.0.6 2022-12-13 22:47:30 +00:00
Aine
f642f6fae7
update mautrix-instagram 0.2.2 -> 0.2.3 2022-12-13 22:45:52 +00:00
Slavi Pantaleev
1f593f708f Upgrade Jitsi (stable-8044 -> stable-8138) 
Untested
 2022-12-12 19:00:55 +02:00
Slavi Pantaleev
3f4ab0bd7e Upgrade Redis (7.0.4 -> 7.0.5) 2022-12-12 19:00:55 +02:00
Slavi Pantaleev
e8ed318908
Merge pull request #2335 from gardar/fix-tag-typo 
fix: unclosed tags typo
 2022-12-12 08:18:03 +02:00
gardar
b9afcead42 fix: unclosed tags typo 2022-12-11 23:25:59 +00:00
ikkemaniac
108ada75e8 update dashboard, fix typo, fix using original user ip 
improve nginxlog matches to group URI's
 2022-12-11 22:41:12 +01:00
Slavi Pantaleev
f69d90c1e6 Upgrade Prometheus (2.40.5 -> 2.40.6) 2022-12-11 18:29:13 +02:00
Slavi Pantaleev
86d177266a Upgrade matrix-corporal (2.4.0 -> 2.5.0) 2022-12-11 18:29:13 +02:00
Slavi Pantaleev
b0030bd62f
Merge pull request #2333 from mattcen/hydrogen-prebuilt-docker 
Use upstream Docker image for amd64 rather than self-build
 2022-12-11 17:01:48 +02:00
Matthew Cengia
3453fff901
Use upstream Docker image for amd64 rather than self-build 2022-12-11 21:25:43 +11:00
Slavi Pantaleev
2b89d5d92f Upgrade exim-relay (4.95-r0-4 -> 4.96-r1-0) 2022-12-11 11:45:47 +02:00
Luke Moch
dd51ad2ba2 fail if matrix_synapse_ext_synapse_s3_storage_provider_config_endpoint_url 'not' startswith('http') 2022-12-10 08:13:55 -05:00
Slavi Pantaleev
d81e7d6328 Make matrix_synapse_ext_synapse_s3_storage_provider_config_endpoint_url required 
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/2330
 2022-12-10 10:37:01 +02:00
Slavi Pantaleev
3824139908 Rename inject_into_nginx_proxy.yml to init.yml when it does more than injection 2022-12-09 10:18:40 +02:00
Slavi Pantaleev
f186d6236d Add some missing tags to Synapse role 
Without these:

- `--tags=install-synapse` and `--tags=install-all` would be incomplete
and will not contain Synapse worker configuration

- `--tags=install-synapse-reverse-proxy-companion` and
  `--tags=setup-synapse-reverse-proxy-companion` would not contain
  Synapse worker configuration
 2022-12-09 10:15:40 +02:00
Dan Arnfield
5823f1f298 Only delete playbook scripts from /usr/local/bin 2022-12-07 13:26:02 -06:00
Rhys
fd79140201
Changes to allow a user to set the max participants on a jitsi conference (#2323) 
* Changes to allow a user to set the max participants on a jitsi
conference

* changed var name from jitsi_max_participants to matrix_prosody_jitsi_max_participants
 2022-12-07 17:54:58 +02:00
ikkemaniac
8ebf18a885
add prometheus-nginxlog-exporter role (#2315) 
* add prometheus-nginxlog-exporter role

* Rename matrix_prometheus_nginxlog_exporter_container_url to matrix_prometheus_nginxlog_exporter_container_hostname

* avoid referencing variables from other roles, handover info using group_vars/matrix_servers

* fix: stop service when uninstalling

fix: typo

move available arch's into a var

fix: text

* fix: prometheus enabled condition

Co-authored-by: ikkemaniac <ikkemaniac@localhost>
 2022-12-07 16:58:36 +02:00
Aine
fda65a0a56
postmoogle - add missing join()s 2022-12-07 11:38:47 +00:00
Aine
ba13231c58
update postmoogle 0.9.9 -> 0.9.10 2022-12-06 22:51:17 +02:00
Aine
ba4580a1fd
Update element v1.11.15 -> v1.11.16 2022-12-06 14:50:56 +00:00
Slavi Pantaleev
9edc7da67d Do not specify now-unnecessary worker_main_http_uri Synapse worker setting 
Related to

- c15e9a0edb
- 01a0527892
 2022-12-06 15:54:06 +02:00
Slavi Pantaleev
13e7399104 Handle /timestamp_to_event via Synapse workers 
Related to 8f10c8b054
 2022-12-06 15:52:16 +02:00
Slavi Pantaleev
663fe29ddb Do not specify start_pushers in Synapse config 
It's unnecessary when `pusher_instances` is populated.

Source: 6acb6d772a
 2022-12-06 15:49:56 +02:00
Slavi Pantaleev
135bb5af3e Do not specify send_federation in Synapse config 
It's unnecessary when `federation_sender_instances` is populated.

Source: 6acb6d772a
 2022-12-06 15:49:28 +02:00
Slavi Pantaleev
84d529b542 Upgrade Synapse (v1.72.0 -> v1.73.0) 
Synapse Worker configuration updates are coming later.
 2022-12-06 15:47:07 +02:00
Slavi Pantaleev
b1c77f9bf2 Add comment to matrix-backup-borg.service 
Related to 8005557061
 2022-12-05 15:45:33 +02:00
Slavi Pantaleev
8005557061 Give backup-borg container more permissions to perform the backup 
Running with a user (like `matrix:matrix`) fails if Etherpad is enabled,
because `/matrix/etherpad` is owned by `matrix_etherpad_user_uid`/`matrix_etherpad_user_gid` (`5001:5001`).

The `matrix` user can't acccess the Etherpad directory for this reason
and Borgmatic fails when trying to make a backup.

There may be other things under `/matrix` which similarly use
non-`matrix:matrix` permissions.

Another workaround might have been to add `/matrix/etherpad` (and
potentially other things) to `matrix_backup_borg_location_exclude_patterns`, but:

- that means Etherpad won't be backed up - not great
- only excluding Etherpad may not be enough. There may be other files we
  need to exclude as well

---

Running with `root` is still not enough though.

We need at least the `CAP_DAC_OVERRIDE` capability, or we won't be able to read the
`/etc/borgmatic.d/config.yaml` configuration file (owned by
`matrix:matrix` with `0640` permissions).

---

Additionally, it seems like the backup process tries to write to at least a few directories:
- `/root/.borgmatic`
- `/root/.ssh`
- `/root/.config`

> [Errno 30] Read-only file system: '/root/.borgmatic'
> Error while creating a backup.
> /etc/borgmatic.d/config.yaml: Error running configuration file

We either need to stop mounting the container filesystem as readonly
(remove `--read-only`) or to allow writing via a `tmpfs`.

I've gone the `tmpfs` route which seems to work.

In any case, the mounted source directories (`matrix_backup_borg_location_source_directories`)
are read-only regardless, so our actual source files are protected from unintentional changes.
 2022-12-05 15:42:57 +02:00
Slavi Pantaleev
64b03c2dfd Fix backup-borg repository initialization for borgmatic 1.7+ (or borg 2.0) 2022-12-05 15:00:11 +02:00
Slavi Pantaleev
1f1a3dfc38 Ensure database port is passed to Borg as an integer 
Without this, it's a string and borg says:

> At 'hooks.postgresql_databases[INDEX_HERE].port': '5432' is not of type 'integer'
> /etc/borgmatic/config.yaml /etc/borgmatic.d /tmp/.config/borgmatic/config.yaml /tmp/.config/borgmatic.d: No valid configuration files found

.. and fails to do anything.
 2022-12-05 14:42:02 +02:00
Slavi Pantaleev
d8df03dfc9 Mark Postgres v15 as supported for borg backup 
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/2257

Fixed in d134cd7c4c
(thanks to `alpine:latest` now being `alpine:3.17.0`, which includes
Postgres v15)
 2022-12-05 11:46:49 +02:00
Slavi Pantaleev
b2a40effaf Fix Element self-building by switching to docker-buildx 
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/2318
 2022-12-05 10:02:54 +02:00
Slavi Pantaleev
6414599079 Upgrade Coturn (4.6.0 -> 4.6.1) 2022-12-05 09:46:11 +02:00
Slavi Pantaleev
7464604ddd Make use of matrix_synapse_ext_s3_storage_provider_data_path in a few more places 2022-12-04 10:17:55 +02:00
Quentin Young
b31731ebf8 fix s3 storage provider not ensuring data dir 
This path is accessed by the s3 storage provider stuff and needs to be
ensured.

Broken by 7c5c3aedc
 2022-12-04 01:16:58 -05:00
Slavi Pantaleev
ceb2c30277 Upgrade mautrix-signal (v0.4.1 -> v0.4.2) 2022-12-03 15:37:17 +02:00
Slavi Pantaleev
d59bbfdfc9 Upgrade Hookshot (2.4.0 -> 2.5.0) 2022-12-02 19:15:04 +02:00
Slavi Pantaleev
a353bda7a1 Upgrade appservice-slack (2.0.1 -> 2.0.2) 2022-12-01 23:30:09 +02:00
Slavi Pantaleev
9e93030159 Upgrade Grafana (9.3.0 -> 9.3.1) 2022-12-01 23:29:33 +02:00
Aine
ea401170e1
Update prometheus 2.40.4 -> 2.40.5 2022-12-01 15:16:33 +00:00