mirror/matrix-docker-ansible-deploy
1
0
Fork 0
mirror of https://github.com/spantaleev/matrix-docker-ansible-deploy.git synced 2024-11-15 06:52:51 +01:00
Code Issues Packages Projects Releases Wiki Activity
7,807 Commits 6 Branches 0 Tags 32 MiB
f794aa2005
Commit Graph

4654 Commits

Author SHA1 Message Date
Charles Wright
47caba38fb Implemented suggestions from Slavi 2022-08-05 09:59:35 -05:00
Slavi Pantaleev
ecfcbd6f1f
Merge pull request #2001 from etkecc/honoroit-0912 
Update Honoroit 0.9.11 -> 0.9.12
 2022-08-05 07:10:34 +03:00
Charles Wright
20767b5149 Fixes to enable Conduit in setup-all 2022-08-04 14:35:41 -05:00
Aine
998dafe9c4
Update Honoroit 0.9.11 -> 0.9.12 2022-08-04 22:02:45 +03:00
Charles Wright
53cf0e18a4 Actually make the data dir writable this time 2022-08-04 13:32:01 -05:00
Charles Wright
50c4c48f09 Rename storage directory to data 2022-08-04 13:31:28 -05:00
Charles Wright
c228ad451d Updates to conduit paths 2022-08-04 13:25:18 -05:00
Charles Wright
2d7c427504 Fixes from a first trial run 2022-08-04 13:16:32 -05:00
Charles Wright
f4afbe8ede First pass at adding vars for Conduit 2022-08-04 12:39:26 -05:00
Charles Wright
c484c6294d First pass at creating defaults and tasks for Conduit 2022-08-04 12:37:08 -05:00
Charles Wright
a5476e1857 Fixes to the conduit systemd config 2022-08-04 12:36:13 -05:00
Stuart Mumford
309a2393c3 Add no update flag as our config is read only 2022-08-04 09:18:12 +00:00
Stuart Mumford
f9026469cd Add back sqlite plugin database config option 2022-08-04 08:54:19 +00:00
Charles Wright
6be5672eac Adding support for Conduit: First temps: Some rough templates 2022-08-03 22:07:42 -05:00
Charles Wright
cad5d56011
Fix Dendrite extra arguments getting lost 
Move the `matrix_dendrite_process_extra_arguments` line up so it doesn't get lost, and add a trailing backslash
 2022-08-03 21:26:46 -05:00
Slavi Pantaleev
747e9dd57c Upgrade Dendrite (0.9.0 -> 0.9.1) 2022-08-03 21:44:28 +03:00
Aine
311926cbda
Update Element 1.11.1 -> 1.11.2 2022-08-03 08:38:15 +00:00
Slavi Pantaleev
8b588735e1 Fix fully-qualified container image name for go-skype-bridge when not self-building 
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1996

Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1992

Regression since cf6e38a586
 2022-08-03 11:00:54 +03:00
Slavi Pantaleev
5958f851c4
Merge pull request #1995 from etkecc/patch-33 
Update Hydrogen 0.3.0 -> 0.3.1
 2022-08-02 14:00:22 +03:00
Aine
8c983ba1e2
Update Hydrogen 0.3.0 -> 0.3.1 2022-08-02 10:47:54 +00:00
Aine
01dfbee51e
Update Synapse 1.63.1 -> 1.64.0 2022-08-02 10:45:32 +00:00
Slavi Pantaleev
d81f50d1c0 Update Grafana (9.0.5 -> 9.0.6) 2022-08-02 10:49:48 +03:00
Slavi Pantaleev
c807af2873 Upgrade ddclient (v3.9.1-ls93 -> v3.9.1-ls94) 2022-08-02 08:03:22 +03:00
Slavi Pantaleev
cf6e38a586 Use pre-built image for go-skype-bridge on amd64 and arm64 
Related to:

- https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1992
- https://github.com/kelaresg/go-skype-bridge/pull/17
 2022-08-02 07:48:19 +03:00
Arthur Brugière
3cde6cace9
[Go-Skype] Change Docker Hub repository 2022-08-02 09:10:37 +07:00
Slavi Pantaleev
cc58167f4c Upgrade Dendrite (0.8.1 -> 0.9.0) 
Looks like we've skipped a bunch of 0.8.x versions (up to 0.8.9)
and are jumping straight to 0.9.0.

This is untested. Judging by Dendrite's changelog, it shouldn't cause
any breakage though: https://github.com/matrix-org/dendrite/blob/v0.9.0/CHANGES.md
 2022-08-01 21:45:59 +03:00
Aine
737dc9d490
Fix mautrix-telegram permissions 2022-07-30 18:10:49 +00:00
Aine
5c36f14b46
Update Honoroit 0.9.10 -> 0.9.11 2022-07-30 13:24:59 +03:00
Slavi Pantaleev
544b36eb3c Upgrade Hydrogen (v0.2.33 -> v0.3.0) 
This is untested.
 2022-07-29 18:31:18 +03:00
IUCCA
5d7c5d122d
Added option to add env variables to mautrix signal daemon container (#1882) 
* Auto trust new signal identities

from signald doku: when a remote key changes, set trust level to TRUSTED_UNVERIFIED instead of UNTRUSTED 
I find it much more convenient when new identities are automatically recognized as trusted, as the process to do that manually is cumbersome.
Should this the default behavior, or should i add an option to configure this behavior?

* Added option to trust new signal identities

* Using env file

* Renamed variable

* Corrected typo

* Use fully-qualified Ansible module name

* removed option trust_new_keys

Co-authored-by: Slavi Pantaleev <slavi@devture.com>
 2022-07-29 08:28:25 +03:00
Slavi Pantaleev
429d0b323b
Merge pull request #1974 from MdotAmaan/master 
Add Mautrix Discord Bridge
 2022-07-29 08:05:52 +03:00
MdotAmaan
6fb961eb12 Make changes according to feedback 
Co-authored-by: Slavi Pantaleev <slavi@devture.com>

Update group_vars/matrix_servers

Co-authored-by: Slavi Pantaleev <slavi@devture.com>

Remove old data migration tasks

Co-authored-by: Slavi Pantaleev <slavi@devture.com>

Update roles/matrix-bridge-mautrix-discord/tasks/validate_config.yml

Co-authored-by: Slavi Pantaleev <slavi@devture.com>

Redo bridge permissions
 2022-07-29 00:28:44 +04:00
Slavi Pantaleev
953efe6a74 Upgrade prometheus-postgres-exporter (v0.10.1 -> v0.11.0) 2022-07-28 16:58:38 +03:00
snailed
c77f2b8a64
Make http_host_bind_port vars more useful (#1984) 
* if variable to bind an exporter container to a host port is set, have matrix-domain.conf (nginx) support this

* manipulate some variables to account for just port numbers or 0.0.0.0 IPs

* Make sure to use the right variable in the init.yml files

* Update roles/matrix-prometheus-node-exporter/tasks/init.yml

Co-authored-by: Slavi Pantaleev <slavi@devture.com>

* Update roles/matrix-prometheus-postgres-exporter/tasks/init.yml

Co-authored-by: Slavi Pantaleev <slavi@devture.com>

* remove extraneous variables and whitespace

Co-authored-by: Luca Bilke <luca@gmail.com>
Co-authored-by: Slavi Pantaleev <slavi@devture.com>
 2022-07-28 16:11:42 +03:00
Slavi Pantaleev
d65096cd82
Merge pull request #1978 from spantaleev/appservice-kakaotalk 
Add matrix-appservice-kakaotalk support
 2022-07-27 09:42:18 +03:00
Aine
a1469c8e14
Update Element v1.11.0 -> v1.11.1 2022-07-26 16:08:04 +00:00
Slavi Pantaleev
10a5b0d831 Add warnings about using Borg backup with external Postgres 
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1982
 2022-07-26 17:31:06 +03:00
Slavi Pantaleev
9c15474d94 Upgrade Grafana (9.0.4 -> 9.0.5) 2022-07-26 17:10:00 +03:00
Slavi Pantaleev
c85c062c01 Upgrade ddclient (v3.9.1-ls92 -> v3.9.1-ls93) 2022-07-26 09:08:33 +03:00
Slavi Pantaleev
532c4ffb71 Use force=false for appservice-kakaotalk-node 
Not that it matters. This option is only used when `type` is `unix`.
 2022-07-25 16:54:37 +03:00
Slavi Pantaleev
e5c4731f68 Use kakaotalk_ as the puppet prefix 
This is what upstream uses and also what
https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1977
used.

Initially, I wanted to make the prefix more unique, in case another
Kakaotalk bridge comes along, but.. it's probably on the new bridge to
come up with a unique puppet prefix, not on us now to override upstream
decisions.
 2022-07-25 16:01:15 +03:00
Slavi Pantaleev
d14e499365 Add dedicated variables for controlling Kakaotalk encryption 2022-07-25 16:01:15 +03:00
Slavi Pantaleev
7b937cf9a9 Make ansible-lint happy 2022-07-25 16:01:15 +03:00
Slavi Pantaleev
e46ba5deba Add matrix-appservice-kakaotalk support 
Adds support for: https://src.miscworks.net/fair/matrix-appservice-kakaotalk

This is pretty similar to
https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1977
which just appeared, but has mostly been done independently.

I've taken some inspiration and did some fixups based on that PR.
Thanks to https://github.com/hnarjis for taking the time to contribute!

Notable differences between this branch compared to that PR:

- better naming and documentation around the "configuration" variables
- no unnecessary (5 sec.) intentional delay when starting `matrix-appservice-kakaotalk-node.service`
- stores configuration in `config/`, not in `data/`
- passes configuration as read-only and starts the bridge with (`--no-update`) to ensure no changes are made to it
- starts containers more securely - with `matrix:matrix` user:group (not `root`) and
  reduced capabilities (`--cap-drop=ALL`)
- uses `tcp` for communication between the "node" and the appservice (simpler than sharing unix sockets)
- `registration.yaml` which is closer to the one generated by `matrix-appservice-kakaotalk` (no `de.sorunome.msc2409.push_ephemeral` stuff, etc.)
- `registration.yaml` which is more customizable (customizable bot username and prefix for puppets - see `matrix_appservice_kakaotalk_appservice_bot_username` and `matrix_appservice_kakaotalk_user_prefix`)
- less fragile and more extensible bridge permissions configuration via `matrix_appservice_kakaotalk_bridge_permissions`. Doing `{% if matrix_admin %}` in the bridge configuration sometimes causes syntax problems (I hit some myself) and is not ideal. Other bridges should be redone as well.
- configurable command prefix for the bridge, instead of hardcoding `!kt` (see `matrix_appservice_kakaotalk_command_prefix`)
- logging that is more consistent with the rest of the playbook (console / journald only, no logging to files), as well as configurable log level (via `matrix_appservice_kakaotalk_logging_level`)
- somewhat more detailed documentation (`docs/configuring-playbook-bridge-appservice-kakaotalk.md`)
- removed some dead code (data relocation tasks from `tasks/setup_install.yml`, as well as likely unnecessary SQLite -> Postgres migration)
 2022-07-25 16:01:15 +03:00
Slavi Pantaleev
163a423f42 Fix ansible-lint error 2022-07-25 16:01:04 +03:00
Slavi Pantaleev
ac72879bf5 Make bridge permissions more easily configurable 
Not doing {% if matrix_admin %} checks in the YAML also fixes some issues
with indentation being incorrect sometimes.

This should be backward compatible, except for mautrix-signal's case
where `matrix_mautrix_signal_bridge_permissions` previously existed
as a string, not a dictionary. `tasks/validate_config.yml` will catch
the problem an even provide a quick fix.
 2022-07-25 15:57:16 +03:00
Slavi Pantaleev
b2f47fcfcd Make linkedin logging level configurable 2022-07-25 15:57:16 +03:00
Slavi Pantaleev
9e65ba3298
Merge pull request #1958 from xangelix/migrate-mx-puppet-groupme-repo 
Migrate mx-puppet-groupme to new repo
 2022-07-25 15:15:06 +03:00
Slavi Pantaleev
53ea0ccca5 Fix linkedin bridge building regression 
Regression since 1693c4ca1d

Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1975
 2022-07-23 09:07:34 +03:00
MdotAmaan
8621ff1379 Add Mautrix Discord Bridge 2022-07-22 18:55:44 +04:00
Maxdeso
75961359fb dendrite_recaptcha_siteverify_api 2022-07-21 20:54:56 +03:00
Slavi Pantaleev
1f9c7e746d
Merge pull request #1967 from aaronraimist/hydrogen 
Allow new Hydrogen options from #1940 to be customized
 2022-07-21 18:26:33 +03:00
Aaron Raimist
14296db9ef
Update roles/matrix-client-hydrogen/defaults/main.yml 
Co-authored-by: Slavi Pantaleev <slavi@devture.com>
 2022-07-21 15:24:08 +00:00
Slavi Pantaleev
4155ed2518 Leave docker_image module calls unprefixed to increase compatibility 
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1965
 2022-07-21 11:24:47 +03:00
Aaron Raimist
b8d3453e32
lint 2022-07-21 03:17:34 +00:00
Aaron Raimist
0e77d2c2f5
lint 2022-07-21 03:15:35 +00:00
Aaron Raimist
ca5d7df161
Allow new Hydrogen options from #1940 to be customized 2022-07-21 03:12:42 +00:00
Simone
db604f81ec Upgrade heisenbridge 1.13.0 1.13.1 2022-07-20 19:21:23 +02:00
Aine
592c88b021
Update Grafana 9.0.3 -> 9.0.4 2022-07-20 16:52:03 +00:00
Slavi Pantaleev
89bd25995a Upgrade Synapse (v1.63.0 -> v1.63.1) 2022-07-20 16:06:01 +03:00
Slavi Pantaleev
90551e82ec Make use of matrix_bot_maubot_management_interface_port variable to actually make maubot port configurable 
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1894
 2022-07-20 13:06:11 +03:00
Slavi Pantaleev
8a689813ff Remove unused maubot variable 
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1894
 2022-07-20 13:04:35 +03:00
Slavi Pantaleev
5ce2732899 Make maubot logging level configurable 
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1894
 2022-07-20 13:03:50 +03:00
Slavi Pantaleev
b575409ed7 Use |to_json in maubot configuration 
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1894
 2022-07-20 13:02:19 +03:00
Slavi Pantaleev
d2fb6a86e1 Fix matrix-bot-maubot.service.j2 indentation (tabs only) 
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1894
 2022-07-20 12:55:15 +03:00
Slavi Pantaleev
46ced6134c Store maubot configuration separately from data 
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1894

Because the configuration file is now mounted as readonly and maubot tries to update it on start,
we get this warning:
> Failed to create tempfile to write updated config to disk: [Errno 30] Read-only file system: '/config/tmpfa8vcb3y.yaml'

It doesn't seem to cause issues though.

Because the configuration is no longer overwritten on every bot start, each
next Ansible run should no longer overwrite it again and report a
"changed" task.
 2022-07-20 12:54:43 +03:00
Slavi Pantaleev
d1649ff67b Do not restart matrix-bot-maubot.service on every playbook run 
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1894
 2022-07-20 12:40:30 +03:00
Julian-Samuel Gebühr
b20cfc5015
Clear up maubot role (#1960) 
* Make interface hidden behind proxy by default

* Remove expose option and replace with http_bind_port

Reasoning: This is a similar binary trigger but allows to bin not on all interfaces

* Clarify maubot admin purpose

* Remove unnecessary edif

* Extend docs to prevent common misconceptions

* Make http_bind_port singular, do not allow multiple values

* Make optional again
 2022-07-20 12:23:32 +03:00
Slavi Pantaleev
a1bfad1e9b Fix whitespace in matrix_bot_maubot_database_connection_string 2022-07-20 11:16:49 +03:00
Slavi Pantaleev
b8832e3014 Fix some Jinja2 inconsistencies in maubot role 2022-07-20 10:27:13 +03:00
Slavi Pantaleev
1f2d100d91
Merge pull request #1894 from moan0s/maubot_moanos 
Maubot moanos
 2022-07-20 10:10:14 +03:00
Slavi Pantaleev
e306d0051e
Add project introduction to maubot's defaults file 2022-07-20 10:07:03 +03:00
Slavi Pantaleev
492d430cb0 Revert "Revert "Update Hookshot 1.8.0 -> 1.8.1"" 
This reverts commit 65bfc1396e.

The 1.8.1 image is published now, so we can finally upgrade.
 2022-07-20 10:01:42 +03:00
Julian-Samuel Gebühr
f2dcbe5c9c Name all tasks 2022-07-20 09:00:47 +02:00
Julian-Samuel Gebühr
04a817aeaa Use explicit version for self build 2022-07-20 08:55:10 +02:00
Julian-Samuel Gebühr
f8a8870711 Use FQCN 2022-07-20 08:52:58 +02:00
Julian-Samuel Gebühr
d2e6ab6c38 Fix some CI lint errors 2022-07-20 08:41:17 +02:00
Julian-Samuel Gebühr
73ebbdcacd Move maubot nginx config 
Reasoning: setup_install.yml only runs on --tags=setup-all or on --tags=setup-bot-maubot.

If --tags=setup-nginx-proxy or similar commands are run, setup_install.yml will not run and the nginx configuration will be incomplete.
 2022-07-20 08:29:03 +02:00
Julian-Samuel Gebühr
d6d311e810 Fix plugin database issue 2022-07-20 08:27:20 +02:00
Cody Wyatt Neiman
1dea35209b
Fix self-build error image names 2022-07-19 19:46:45 -04:00
Cody Wyatt Neiman
dbddd9f989
Migrate mx-puppet-groupme to new repo 2022-07-19 19:02:32 -04:00
Slavi Pantaleev
a4a1796518
Merge pull request #1955 from etkecc/patch-28 
Update Coturn 4.5.2-r12 -> 4.5.2-r13
 2022-07-19 18:40:38 +03:00
Slavi Pantaleev
2a131fd507
Merge pull request #1954 from aaronraimist/stats 
Update telemetry documentation to more closely match upstream
 2022-07-19 18:38:29 +03:00
Aine
66d4c7e072
[DO NOT MERGE]Update Coturn 4.5.2-r12 -> 4.5.2-r13 
**no docker tag yet**, [keep an eye on it](https://hub.docker.com/r/coturn/coturn/tags?page=1&name=4.5.2-r13)
 2022-07-19 15:25:32 +00:00
Aaron Raimist
817830bb3d
Update telemetry documentation to more closely match upstream 
Synapse no longer describes the stats as anonymized since the `server_name` is included.
https://github.com/matrix-org/synapse/pull/13321
 2022-07-19 14:58:19 +00:00
Slavi Pantaleev
65bfc1396e Revert "Update Hookshot 1.8.0 -> 1.8.1" 
This reverts commit 05ccee9f6f.

Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1952
 2022-07-19 16:47:08 +03:00
Aine
24a027c6b9
Update Synapse 1.62.0 -> 1.63.0 2022-07-19 13:24:27 +00:00
Slavi Pantaleev
a9c1d44059
Merge pull request #1950 from etkecc/honoroit-0910 
update Honoroit 0.9.9 -> 0.9.10
 2022-07-18 23:45:38 +03:00
Aine
0aca676f7f
Update Redis 7.0.3 -> 7.0.4 2022-07-18 18:35:42 +00:00
Aine
5b0bdced1d
update Honoroit 0.9.9 -> 0.9.10 2022-07-18 21:24:17 +03:00
Aine
05ccee9f6f
Update Hookshot 1.8.0 -> 1.8.1 
No docker tag published yet, [keep an eye on it](https://hub.docker.com/r/halfshot/matrix-hookshot/tags?page=1&ordering=last_updated&name=1.8.1)
 2022-07-18 15:37:04 +00:00
Slavi Pantaleev
8ad1fa085e Use full path when importing SSL setup tasks 
This is an attempt to make ansible-lint happy.
 2022-07-18 16:48:25 +03:00
Slavi Pantaleev
c73680712b Fix (suppress) var-naming ansible-lint errors 
Reference: https://ansible-lint.readthedocs.io/en/latest/default_rules/#var-naming

We don't really fix these, but just suppress them,
because they're like that intentionally.

We try to name variables in a way that is consistent with the
configuration key they control. If the upstream component uses
camelCase, we also need to include camelCase in the variable name.
 2022-07-18 16:43:12 +03:00
Slavi Pantaleev
7831dc91b3 Import tasks from other roles in a better way 
One that doesn't trip up ansible-lint, causing `load-failure` errors.
 2022-07-18 16:15:04 +03:00
Slavi Pantaleev
c1849ae888 Fix the remaining var-spacing ansible-lint errors 
Reference: https://ansible-lint.readthedocs.io/en/latest/default_rules/#var-spacing
 2022-07-18 15:33:41 +03:00
Slavi Pantaleev
cac9bf2637 Fix syntax error regression 2022-07-18 15:13:09 +03:00
Slavi Pantaleev
1693c4ca1d Fix no-changed-when ansible-lint errors 
Reference: https://ansible-lint.readthedocs.io/en/latest/default_rules/#no-changed-when
 2022-07-18 15:08:10 +03:00
Slavi Pantaleev
0ab2001ce7 Fix git-latest ansible-lint errors 
Reference: https://ansible-lint.readthedocs.io/en/latest/default_rules/#git-latest

Our variable naming is not necessarily consistent across roles.
I've tried to follow the naming conventions of each individual role.
All new variables are suffixed with `_version`, but the prefix may be
somewhat different.
 2022-07-18 14:43:52 +03:00
Slavi Pantaleev
211ff20891 Fix package-latest ansible-lint errors 
Reference: https://ansible-lint.readthedocs.io/en/latest/default_rules/#package-latest
 2022-07-18 14:08:35 +03:00
Slavi Pantaleev
318bfa84d5 Fix spacing around filter invocations 2022-07-18 13:21:32 +03:00
Slavi Pantaleev
bb8b8c4bf0 Fix tasks include regression 2022-07-18 13:03:17 +03:00
Slavi Pantaleev
d073c7ecb3 More ansible-lint fixes 2022-07-18 13:01:19 +03:00
Slavi Pantaleev
983bf819ef Explictly set Synapse's worker configuration's owner/permissions 2022-07-18 13:01:19 +03:00
Slavi Pantaleev
ddf18eadc7 More ansible-lint fixes 2022-07-18 13:01:17 +03:00
Slavi Pantaleev
34cdaade08 Use fully-qualified module names for builtin Ansible modules 
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1939
 2022-07-18 12:58:41 +03:00
Slavi Pantaleev
78b5be4a26 Do not generate /.well-known/matrix/support unless explicitly asked to 
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1931
 2022-07-18 12:54:45 +03:00
Slavi Pantaleev
c9e30708be Fix double-quoting in /.well-known/matrix/support 
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1931

`|to_json` already adds the surrounding double-quotes for the string, so
adding them explicitly means we've got a double-quotes problem.
 2022-07-18 12:46:19 +03:00
Slavi Pantaleev
4a5143fa8d Add variable to influence whether /.well-known/matrix/support is created 
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1931
 2022-07-18 12:32:41 +03:00
teutates
018ca75d48
Implement MSC 1929 Homeserver Admin Contact (#1931) 
* Implement MSC 1929 Homeserver Admin Contact
Fixes #1612

For details to the proposed (not accepted yet) MSC, see:
https://github.com/matrix-org/matrix-spec-proposals/blob/hs/proposal-admin-contact-1/proposals/1929-admin-contact.md

* Implement feedback from PR #1931

* Implement feedback from PR #1931

* Fix mixed indentation
 2022-07-18 12:28:59 +03:00
Slavi Pantaleev
9abcb10f9f
Merge pull request #1946 from etkecc/update-redis 
update redis 6.2.6 -> 7.0.3
 2022-07-17 18:15:38 +03:00
Slavi Pantaleev
f99ab3c2e2
Merge pull request #1945 from etkecc/update-sygnal 
update sygnal 0.11.0 -> 0.12.0
 2022-07-17 18:15:12 +03:00
Slavi Pantaleev
9ef680b45c
Merge pull request #1944 from etkecc/update-prometheus 
update prometheus 2.36.2 -> 2.37.0
 2022-07-17 18:10:05 +03:00
Slavi Pantaleev
411c42bee5
Merge pull request #1943 from etkecc/update-nginx 
update nginx 1.21.6 -> 1.23.0
 2022-07-17 18:09:37 +03:00
Slavi Pantaleev
3b3bfa29e9
Merge pull request #1942 from etkecc/update-grafana 
update grafana 9.0.2 -> 9.0.3
 2022-07-17 18:09:04 +03:00
Slavi Pantaleev
fde4297703
Merge pull request #1941 from etkecc/update-dynamic-dns 
update dynamic dns 3.9.1-ls89 -> 3.9.1-ls92
 2022-07-17 18:08:37 +03:00
Aine
405d07527f
update sygnal 0.11.0 -> 0.12.0 2022-07-17 17:38:05 +03:00
Aine
22a55f4fa7
update redis 6.2.6 -> 7.0.3 2022-07-17 17:33:43 +03:00
Aine
4bc12fd560
update prometheus 2.36.2 -> 2.37.0 2022-07-17 17:31:41 +03:00
Aine
a6506cf6ff
update nginx 1.21.6 -> 1.23.0 2022-07-17 17:29:50 +03:00
Aine
ca11763e86
update grafana 9.0.2 -> 9.0.3 2022-07-17 17:26:33 +03:00
Aine
0ffac5bb45
update dynamic dns 3.9.1-ls89 -> 3.9.1-ls92 2022-07-17 17:24:51 +03:00
Aine
0453ccc716
update hydrogen 0.2.29 -> 0.2.33; sync config 2022-07-17 17:21:22 +03:00
Aine
e3ff6ca01b
mautrix-whatsapp - fix more vars 2022-07-17 14:16:57 +03:00
Aine
88cff139ed
fix mautrix-whatsapp config 2022-07-17 10:29:45 +03:00
Aine
e149f33140
add/unify 'Project source code URL' link across all roles 2022-07-16 23:59:21 +03:00
Slavi Pantaleev
fa9b34b983
Try to make Jinja not trip up over syntax 2022-07-16 23:25:05 +03:00
Aine
91cbc8b2ff
Update mautrix whatsapp 0.5.0 -> 0.6.0 2022-07-16 22:28:53 +03:00
Slavi Pantaleev
e94ec75e1a Remove matrix-bridge-mx-puppet-skype role 2022-07-14 18:09:19 +03:00
Slavi Pantaleev
a1d0b58471 Try to do the signald (0.19.0) data migration automatically 
Improvement over e4caf3fa81.

Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1921
 2022-07-14 11:50:18 +03:00
Slavi Pantaleev
f0450eeb5d
Merge pull request #1921 from pub-solar/bump/signal-bridge 
signald: 0.18.5 -> 0.20.0
 2022-07-14 10:29:43 +03:00
Julian-Samuel Gebühr
6b7191c939 Fix tabs issue for real 2022-07-12 01:22:20 +02:00
Slavi Pantaleev
3b85a9a994
Upgrade hookshot (1.7.3 -> 1.8.0) 2022-07-11 20:25:32 +03:00
Julian-Samuel Gebühr
acf53f604b Fix homserver configuration url 2022-07-10 14:48:00 +02:00
Julian-Samuel Gebühr
ffa20357ea Use http_bin_port and make networking clearer 2022-07-10 13:33:29 +02:00
Julian-Samuel Gebühr
e62632bf5d Change from spaces to tabs 2022-07-10 11:04:49 +02:00
Julian-Samuel Gebühr
07fdb09f69 Rename with addition "url" 2022-07-10 10:10:30 +02:00
Julian-Samuel Gebühr
2e15bd85ea Rename with addition "unshared" 2022-07-10 10:09:55 +02:00
Julian-Samuel Gebühr
27b1835ed4 Fix uninstall (for real this time) 2022-07-10 10:06:17 +02:00
Julian-Samuel Gebühr
f64c132927 Make database switchable 2022-07-10 09:51:27 +02:00
Julian-Samuel Gebühr
05c1333ebb Restrict permissions of container 2022-07-09 13:44:41 +02:00
Julian-Samuel Gebühr
bcd7ec714b Add postgres configuration 2022-07-09 13:00:28 +02:00
Julian-Samuel Gebühr
a842e9cd1d Fix uninstall (did not remove service) 2022-07-09 13:00:17 +02:00
Julian-Samuel Gebühr
135096e53a Add defaults 2022-07-09 11:55:49 +02:00
Julian-Samuel Gebühr
4ab516fca8 Fix linter 2022-07-09 11:42:18 +02:00
Julian-Samuel Gebühr
07cfd3ba09 Use custom invocation instead of provided script 2022-07-09 11:39:23 +02:00
Julian-Samuel Gebühr
59806ec3ea Fix typo in variable name 2022-07-09 11:25:35 +02:00
Julian-Samuel Gebühr
ab94cb279c Merge branch 'maubot_moanos' of https://github.com/moan0s/matrix-docker-ansible-deploy into maubot_moanos 2022-07-09 11:10:16 +02:00
Slavi Pantaleev
f1b52b6796 Merge remote-tracking branch 'julianf/add-ntfy-role' 2022-07-08 18:03:15 +03:00
Chirayu Desai
b5c7fd6051
mjolnir: v1.5.0 
https://github.com/matrix-org/mjolnir/releases/tag/v1.5.0
 2022-07-08 19:26:35 +05:30
Julian Foad
25b343c8c8 matrix-ntfy: without nginx, bind to 127.0.0.1:2586 2022-07-08 12:02:06 +01:00
ThellraAK
95959ff20b
Changed whatsapp logging variable name to match (#1920) 
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1912

Co-authored-by: ThellraAK <ThellraAK@pop-os.localdomain>
Co-authored-by: Slavi Pantaleev <slavi@devture.com>
 2022-07-07 07:54:03 +03:00
teutat3s
90269092bf
signald: 0.18.5 -> 0.20.0 
https://gitlab.com/signald/signald/-/blob/main/releases/0.19.0.md
https://gitlab.com/signald/signald/-/blob/main/releases/0.19.1.md
https://gitlab.com/signald/signald/-/blob/main/releases/0.20.0.md
 2022-07-06 11:57:24 +02:00
Slavi Pantaleev
e074f9d4ed
Merge pull request #1919 from etkecc/patch-24 
Update Synapse 1.61.1 -> 1.62.0
 2022-07-05 18:26:48 +03:00
Aine
fe347c85d9
Update Synapse 1.61.1 -> 1.62.0 2022-07-05 15:20:48 +00:00
Aine
95fd215521
Update element 1.10.15 -> 1.11.0 2022-07-05 15:11:52 +00:00
Slavi Pantaleev
e4cbdd56d8 Merge remote-tracking branch 'julianf/add-ntfy-role' 2022-07-05 09:37:01 +03:00
3hhh
097c23c0b6
bots: make command_prefix configurable 2022-07-04 22:53:43 +02:00
Julian Foad
e60d20dc6a matrix-ntfy: store settings in a config file 2022-07-04 21:30:29 +01:00
Julian Foad
e119512c59 matrix-ntfy: add variable 'matrix_ntfy_base_url' 2022-07-04 15:32:13 +01:00
Julian Foad
efe1f21f05 matrix-ntfy: fix and separate out uninstall tasks 2022-07-04 15:32:13 +01:00
Julian Foad
408e2e9b4e matrix-ntfy: remove almost-empty README.md 2022-07-04 15:32:13 +01:00
Julian Foad
3866fff5a8 matrix-ntfy: persist cache on disk 2022-07-04 15:32:13 +01:00
Julian Foad
763586e878 matrix-ntfy: add self-check 2022-07-04 15:32:13 +01:00
Julian Foad
85b12b74a7 matrix-ntfy: documentation 2022-07-04 15:32:07 +01:00
Julian Foad
2a516a16fb matrix-ntfy: enable WebSocket proxying 2022-07-04 15:31:37 +01:00
Julian Foad
ec9f8e2931 Add a role to install 'ntfy' push-notification server. 
This commit adds a 'matrix-ntfy' role that runs Ntfy server in Docker with
simple configuration, and plumbing to add the role to the playbook.

TODO: documentation, self-check, database persistence.
 2022-07-04 15:31:29 +01:00
Slavi Pantaleev
2e4fad6194 Use 127.0.0.1 instead of localhost for federation API when nginx disabled 
`localhost` may resolve to `::1` on some IPv6-enabled systems, which will
not work, because we only potentially expose container ports on
`127.0.0.1` when nginx is disabled (`matrix_nginx_proxy_enabled: false`),
not on `::1`.

Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1914
 2022-07-02 15:02:35 +03:00
Kabir Kwatra
c3f85ae827 feat(jitsi+arm64): Enable Jitsi on arm64 
fixes spantaleev/matrix-docker-ansible-deploy#1889

Support for arm64 images tracked in jitsi/docker-jitsi-meet#1214 and added in jitsi/docker-jitsi-meet#1269
 2022-07-01 07:56:09 -07:00
ThellraAK
1c8f21c738 Adding logging configuration and default to the rest of the mautrixes that don't have them 2022-07-01 04:05:28 -08:00
Slavi Pantaleev
a6a5f79a6f Relocate matrix_mautrix_facebook_logging_level in defaults/main.yml 
Improvement to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1909
 2022-07-01 14:32:42 +03:00
Slavi Pantaleev
71006393e0 Default mautrix-facebook to WARNING loggers by default 
Overlooked in https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1909
 2022-07-01 14:31:28 +03:00
ThellraAK
06e51b06f1
Adding logging variable for facebook and setting it's default (#1909) 
Co-authored-by: ThellraAK <ThellraAK@pop-os.localdomain>
Co-authored-by: Slavi Pantaleev <slavi@devture.com>
 2022-07-01 14:22:02 +03:00
Slavi Pantaleev
95ca182ab5 Remove outdated logging configuration from Dimension 
Related to 123a45bb21

Provoked by https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1879

Not sure how bot-sdk's logging level can be adjusted. Seems like
Dimension now hardcodes `LogService.setLevel(LogLevel.DEBUG);` in its
startup code.
 2022-06-30 12:10:36 +03:00
Slavi Pantaleev
5642c425ac
Merge pull request #1905 from aaronraimist/hydrogen-self-check 
Fix Hydrogen self check
 2022-06-29 18:14:26 +03:00
Aaron Raimist
6a99b3d532
Fix Hydrogen self check 
Thanks to Julian for pointing this out
 2022-06-29 15:09:29 +00:00
Stuart Mumford
320978cdf5 Enable setting database URI and other things 2022-06-29 13:17:03 +00:00
Stuart Mumford
6cc92854df enable setting database URL 2022-06-29 12:37:29 +00:00
Slavi Pantaleev
c15bf2e019 Upgrade Grafana (9.0.1 -> 9.0.2) 2022-06-29 08:42:55 +03:00
Slavi Pantaleev
c614b61e01 Fix mautrix-signal permissions configuration 
Fixup for https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1899
 2022-06-28 17:54:00 +03:00
Julian-Samuel Gebühr
9d06ece5a4 Merge branch 'master' of https://github.com/spantaleev/matrix-docker-ansible-deploy into maubot_moanos 2022-06-28 16:33:46 +02:00
Slavi Pantaleev
bff35926dc Upgrade Synapse (v1.61.0 -> v1.61.1) 2022-06-28 17:13:19 +03:00
Aine
5b38ee5371
add missing retry to the apache docker image pull 2022-06-28 08:27:57 +00:00
Aine
23ed70a6bb
fix typo 2022-06-27 11:38:21 +00:00
Slavi Pantaleev
e27ecd6e76
Add matrix_admin example 2022-06-27 11:02:10 +03:00
Aine
44f2234c99
define matrix_admin in matrix-base 2022-06-27 10:34:04 +03:00
Aine
00192f6e94
mautrix-instagram, mautrix-signal: set delivery_error_reports: true 2022-06-26 21:19:56 +03:00
Aine
cd88c06994
mautrix-twitter: update defaults 2022-06-26 21:16:43 +03:00
Aine
ed8ef0d1f8
mautrix-telegram: update defaults 2022-06-26 21:09:31 +03:00
Aine
55d8e3dfdd
mautrix-based bridges: add matrix_admin 2022-06-26 21:03:21 +03:00
Aine
d426dbbc32
missing var 2022-06-26 20:41:23 +03:00
Aine
2689a0981a
mautrix-based bridges - set log level = warn(ing) 2022-06-26 20:31:51 +03:00
Aine
5801017df0
mx-puppet-bridges - set log level = warn, set presence interval = 5s 2022-06-26 20:16:09 +03:00
Aine
c71fea70d3
matrix-prometheus feedback 2022-06-26 12:01:57 +03:00
Aine
1542e8bca0
Update roles/matrix-prometheus/templates/systemd/matrix-prometheus.service.j2 
Co-authored-by: Slavi Pantaleev <slavi@devture.com>
 2022-06-26 06:59:46 +00:00
Aine
574f57c82c
expose prometheus process args 2022-06-26 08:41:22 +03:00
Slavi Pantaleev
fcf1ca2792
Merge pull request #1896 from etkecc/patch-19 
Update Grafana (8.5.3 -> 9.0.1)
 2022-06-25 22:32:40 +03:00
Aine
c793fc5ff0
Update Prometheus (v2.33.3 -> v2.36.2) 2022-06-25 18:07:30 +00:00
Aine
b784f88af5
Update Grafana (8.5.3 -> 9.0.1) 2022-06-25 18:06:35 +00:00
Slavi Pantaleev
83f1574a08 Upgrade exim-relay (4.95-r0-2 -> 4.95-r0-4) 2022-06-25 19:06:14 +03:00
Julian-Samuel Gebühr
9ed70188dd Use safer |to_json 2022-06-25 09:47:32 +02:00
Julian-Samuel Gebühr
2e5ad5cbe9 Remove unused variable 2022-06-25 09:46:19 +02:00
Julian-Samuel Gebühr
a295ec3e3d Change to matrix_bot_maubot_bot_server_public 
This shall indicate that the public url of maubot is here configured the same as matrix_server_fqn_matrix but this must not be the case.
In the config I used the matrix fqnd directly as this part of the config is directly bound to the homeserver we want to connect to (but can not use the internal)
 2022-06-25 09:44:24 +02:00
Julian-Samuel Gebühr
64fbc5ff87 Replace spaces with tabs 2022-06-25 08:50:22 +02:00
Julian-Samuel Gebühr
7baf477c16 Remove unnecessary variable 
The /data is hardcoded in the container
 2022-06-24 18:21:13 +02:00
Julian-Samuel Gebühr
90447a2839 Use correct registration secret 2022-06-24 18:19:23 +02:00
Julian-Samuel Gebühr
a289116140
Use tagged release 
Co-authored-by: Slavi Pantaleev <slavi@devture.com>
 2022-06-24 18:07:09 +02:00
Julian-Samuel Gebühr
2e2e5048ca Merge branch 'maubot_moanos' of https://github.com/moan0s/matrix-docker-ansible-deploy into maubot_moanos 2022-06-24 18:01:58 +02:00
Julian-Samuel Gebühr
2f167f2122 Rename docker container to matrix-bot-maubot 2022-06-24 18:01:51 +02:00
Julian-Samuel Gebühr
6d1650c834
Remove config dir 
Co-authored-by: Slavi Pantaleev <slavi@devture.com>
 2022-06-24 17:59:45 +02:00
Julian-Samuel Gebühr
ba0caf395a
Create dckr-src file path only when neccessary 
Co-authored-by: Slavi Pantaleev <slavi@devture.com>
 2022-06-24 17:58:50 +02:00
Julian-Samuel Gebühr
6ed105b830 Rename service from matrix-maubot to matrix-bot-maubot 2022-06-24 17:54:57 +02:00
Julian-Samuel Gebühr
d5c82a5221 Remove logging to /var/log and make readonly 2022-06-24 17:36:53 +02:00
Julian-Samuel Gebühr
2309a61cb0 Fix minor naming issue 2022-06-24 13:15:34 +02:00
Julian-Samuel Gebühr
2f1d78fa48 Make true and false lowercase 2022-06-24 12:45:19 +02:00
Julian-Samuel Gebühr
0ea146930b Make exposing management UI configurable 2022-06-24 12:39:51 +02:00
Julian-Samuel Gebühr
8806598f51 Add option to proxy management UI (now defaults to false) 2022-06-24 12:29:06 +02:00
Julian-Samuel Gebühr
d7eb2d097f Fix yamllint (emptylines) 2022-06-24 11:58:10 +02:00
Julian-Samuel Gebühr
4d40b61a51 Fix config error, add nginx 2022-06-24 11:50:52 +02:00
Slavi Pantaleev
569b52f0c1 Document how the systemd node-exporter collector can be made to work 2022-06-24 08:33:17 +03:00
Julian-Samuel Gebühr
1316656998 Rename to bot_maubot and fix permission error 2022-06-23 21:58:03 +02:00
Julian-Samuel Gebühr
eb25d54246 Merge branch 'master' of https://github.com/spantaleev/matrix-docker-ansible-deploy into node_postgres_reverse_proxy 2022-06-23 20:45:13 +02:00
Julian-Samuel Gebühr
d24cb7db6f Initial maubot commit 2022-06-23 20:24:52 +02:00
Slavi Pantaleev
37d7e75e9b Add support for passing extra arguments to prometheus-node-exporter 2022-06-23 20:37:56 +03:00
Slavi Pantaleev
1727ecd888 Make yamllint happy (take 2) 
> Error:   19:3      error    wrong indentation: expected 4 but found 2  (indentation)
 2022-06-23 18:00:32 +03:00
Slavi Pantaleev
9aab7f9c37 Make yamllint happy 
Fixup for ba51997f7b
 2022-06-23 17:57:59 +03:00
Slavi Pantaleev
ba51997f7b (BC Break) Redo how metrics are exposed to external Prometheus servers 2022-06-23 17:55:07 +03:00
Slavi Pantaleev
a3a6e14f7b Add matrix_nginx_proxy_proxy_synapse_metrics_addr_{with,sans}_container variables to defaults 
We redefine these variables in `group_vars/matrix_servers`, but it's better
to have some defaults in the role as well.
 2022-06-22 23:04:27 +03:00
Slavi Pantaleev
2e68c9963b Fix matrix-prometheus-postgres-exporter port number in some comments 2022-06-22 22:50:43 +03:00
Slavi Pantaleev
f4cf7b9cc1 Remove unused variable (matrix_nginx_proxy_synapse_workers_enabled_list) definition 2022-06-22 22:17:51 +03:00
Slavi Pantaleev
f943e82384 Upgrade Certbot (1.27 -> 1.28) 2022-06-22 14:44:12 +03:00
Slavi Pantaleev
5963a387f0 Upgrade Postgres (14.3 -> 14.4) 2022-06-22 14:43:55 +03:00
Aine
970afa4578
Update Buscarron 1.1.0 -> 1.2.0 2022-06-21 00:02:17 +03:00
Julian-Samuel Gebühr
f57aed8e01 Add a setting to make nginx forward node_exporter and postgres_exporter 2022-06-20 21:32:03 +02:00
David Mehren
f6a73231ab
Synapse workers should respect X-Forwarded headers 
Currently, Synapse workers ignore the X-Forwarded headers, which leads to internal Docker IP addresses randomly appearing in the users' device list.

This adds the `x_forwarded: true` option to the worker config, fixing the issue.
 2022-06-18 16:13:08 +02:00
Slavi Pantaleev
38027e72f6 Fix "object of type 'NoneType' has no len()" error 
Fixup for 5eff67371d - https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1884
 2022-06-17 15:45:29 +03:00
Slavi Pantaleev
7440dd34fb
Merge pull request #1884 from etkecc/master 
add synapse media_retention
 2022-06-17 15:31:55 +03:00
Slavi Pantaleev
5987589436
Use |to_json 2022-06-17 15:30:22 +03:00
Slavi Pantaleev
323f5aa60d Synchronize homeserver.yaml config with the one from Synapse 1.61.0 2022-06-17 15:26:23 +03:00
Aine
5eff67371d
add synapse media_retention 2022-06-17 14:32:17 +03:00
Aine
7b0e5ef995
Update mautrix-whatsapp 0.4.0 -> 0.5.0 2022-06-16 14:55:11 +00:00
Slavi Pantaleev
6a573399ae Upgrade Synapse (v1.60.0 -> v1.61.0) 2022-06-14 17:15:27 +03:00
Slavi Pantaleev
37b584ef58 Upgrade matrix-corporal (2.2.3 -> 2.3.0) 
matrix-corporal 2.3.0 supports Synapse v1.61.0 (which removed
communities/groups support).
 2022-06-14 17:15:27 +03:00
Aine
b2f9ede87c
Update Element v1.10.14 -> v1.10.15 2022-06-14 13:45:46 +00:00
Vladimir Panteleev
a3d19ad318
Add Go Skype Bridge 
Based on mautrix-whatsapp, as that's what the bridge software is based on.
 2022-06-12 21:29:43 +00:00
3hhh
cebbe0beec
whatsapp bridge: set the default log level to warning 
Debug logs are inappropriate for production use.
 2022-06-11 08:11:28 +02:00
3hhh
6b94ccbcff
whatsapp bridge: add matrix_mautrix_whatsapp_log_level 
Fixes #1873
 2022-06-11 08:09:57 +02:00
3hhh
39914881a7
whatsapp bridge: disable logging to external files 
The same logs still go to the systemd journal.
 2022-06-11 07:56:22 +02:00
Slavi Pantaleev
99c24ef0e8 Upgrade Hookshot (1.7.2 -> 1.7.3) 2022-06-09 20:52:56 +03:00
Slavi Pantaleev
12b28a4749 Upgrade Hookshot (1.7.0 -> 1.7.2) 2022-06-09 14:13:53 +03:00
Slavi Pantaleev
4a72c90a6b Upgrade Element (v1.10.13 -> v1.10.14) 2022-06-07 14:34:02 +03:00
Ruben Hias
fc38f4a6a9 Updated mautrix-googlechat to v0.3.3 2022-06-06 11:27:10 +02:00
roughnecks
c05e78fc9a Fix string null in status_endpoint 2022-06-02 16:52:15 +02:00
Slavi Pantaleev
8ea7cd73cf Fix self-building for matrix-registration 
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1864

Related to https://github.com/zeratax/matrix-registration/issues/93

This is a poor way to do things though. It may break again in the future.
matrix-registration is a poorly maintained project and should likely be removed from the playbook.
 2022-06-01 09:43:31 +03:00
Aine
25fd7f0cff
update Honoroit 0.9.8 -> 0.9.9 2022-05-31 20:32:10 +03:00
Slavi Pantaleev
2c1da0ac2a Switch matrix_encryption_disabler back to upstream repository 
Now that https://github.com/digitalentity/matrix_encryption_disabler/pull/9
has been merged, we can get the module from there.

Continuation of 246c43be1e
 2022-05-31 17:35:22 +03:00
Slavi Pantaleev
246c43be1e Upgrade Synapse (v1.59.1 -> v1.60.0) 2022-05-31 17:24:38 +03:00
Slavi Pantaleev
78204619ea Stop using deprecated (in Synapse v1.59) user_dir and appservice workers 
Source: https://github.com/matrix-org/synapse/blob/v1.59.0/docs/upgrade.md#deprecation-of-the-synapseappappservice-and-synapseappuser_dir-worker-application-types

As an alternative, we should probably find a way to run one or a few
more generic workers (which will handle appservice and user_dir stuff) and
update `homeserver.yaml` so that it would point to the name of these workers using
`notify_appservices_from_worker` and `update_user_directory_from_worker` options.

For now, this solves the deprecation, so we can have a peace of mind
going forward.

We're force-setting these worker counts to 0, so that we can clean up
existing homeservers which use these worker types. In the future, these
options will either be removed or repurposed (so that they transparently
create more generic workers that handle user_dir/appservice loads).
 2022-05-31 16:35:50 +03:00
Aine
fd3a9b2fbb
Update Honoroit 0.9.7 -> 0.9.8 
* add `NOENCRYPTION` option
* fix race condition on thread start
* fix greetings messages
* updated deps
 2022-05-31 09:20:49 +00:00
Aine
2e527338d3
Update Cinny 2.0.3 -> 2.0.4 2022-05-29 08:23:17 +00:00
Aine
f60eb72329
Updated signal daemon 0.18.1 -> 0.18.5 2022-05-25 09:00:32 +00:00
Aine
e37bcd1daf
Updated Element 1.10.12 -> 1.10.13 2022-05-24 14:14:41 +00:00
Aine
f448cca732
Update coturn 4.5.2-r11 -> 4.5.2-r12 2022-05-24 11:26:01 +00:00
Slavi Pantaleev
63c755b115
Merge pull request #1837 from Lyokovic/vicx/fix-ldap-simple-bind 
Fix synapse LDAP simple bind config
 2022-05-24 10:40:28 +03:00
Erick Wibben
3b40d8b0a0
Update Matrix-Registration-Bot main.yml 
Line 10, which sets the tag to which docker version to pull was reverted from `v1.1.15` to latest. This gets the playbook working again
 2022-05-21 10:24:27 -05:00
Slavi Pantaleev
271a8d0a73 Upgrade certbot (v1.23.0 -> v1.27.0) 2022-05-21 10:20:56 +03:00
Slavi Pantaleev
746a25fabf
Merge pull request #1838 from GoliathLabs/matrix-registration-bot 
Set version to v1.1.5
 2022-05-20 21:36:13 +02:00
Slavi Pantaleev
62f7bd3780
Merge pull request #1840 from GoliathLabs/matrix-mautrix-googlechat 
Updated: mautrix-googlechat to v0.3.2
 2022-05-20 21:35:50 +02:00
Slavi Pantaleev
f46f288492
Merge pull request #1845 from GoliathLabs/grafana 
Updated: grafana to 8.5.3
 2022-05-20 21:35:24 +02:00
Slavi Pantaleev
612c64e009
Merge pull request #1844 from GoliathLabs/etherpad 
Updated: etherpad to 1.8.18
 2022-05-20 21:34:57 +02:00
Slavi Pantaleev
615417b87f
Merge pull request #1843 from GoliathLabs/linuxserver-ddclient 
Updated: ddclient to v3.9.1-ls89
 2022-05-20 21:34:25 +02:00
Slavi Pantaleev
d1651f3f60
Merge pull request #1842 from GoliathLabs/hydrogen-web 
Updated: hydrogen-web to v0.2.29
 2022-05-20 21:34:01 +02:00
Slavi Pantaleev
4abce49cd6
Merge pull request #1841 from GoliathLabs/mautrix-twitter 
Updated: mautrix-twitter to v0.1.4
 2022-05-20 21:33:32 +02:00
GoliathLabs
9c24167b8d Updated: grafana to 8.5.3 2022-05-20 20:32:19 +02:00
GoliathLabs
64850531ba Updated: etherpad to 1.8.18 2022-05-20 20:30:06 +02:00
GoliathLabs
554615d727 Updated: ddclient to v3.9.1-ls89 2022-05-20 20:28:01 +02:00
GoliathLabs
2c312435c6 Reverted URL change 2022-05-20 20:25:41 +02:00
GoliathLabs
8a65e3a0db Updated: hydrogen to v0.2.29 2022-05-20 20:24:56 +02:00
GoliathLabs
e779ec45f4 Updated: hydrogen-web to v0.2.29 2022-05-20 20:24:38 +02:00
GoliathLabs
d804e97ff6 Updated: mautrix-twitter to v0.1.4 2022-05-20 20:19:58 +02:00
GoliathLabs
751a8f8a5d Updated: mautrix-googlechat to v0.3.2 2022-05-20 20:16:04 +02:00
GoliathLabs
275943c0f8 Updated: mjolnir v1.4.2 2022-05-20 20:03:59 +02:00
GoliathLabs
0c741e8d16 Set version to v1.1.5 2022-05-20 19:58:22 +02:00
Vicx
a906fad12e Fix synapse LDAP simple bind config 
When using LDAP simple bind, the `bind_dn` and `bind_password`
configuration values must not be present.
 2022-05-20 19:09:16 +02:00
Slavi Pantaleev
c945f38c52
Merge pull request #1818 from paulRbr/bridge-mautrix-signal-encryption 
Bridge mautrix signal and mautrix whatsapp encryption
 2022-05-18 14:50:26 +02:00
Slavi Pantaleev
677a2fc503 Fix compatibility with ansible=6 / ansible-core=2.13 
Details here: https://docs.ansible.com/ansible/devel/porting_guides/porting_guide_6.html#id36

Basically:

```yaml
- name: Prior to 2.13
  debug:
    msg: '[1] + {{ [2] }}'

- name: 2.13 and forward
  debug:
    msg: '{{ [1] + [2] }}'
```

Interestingly, we had been using the new/safe syntax in lofs of places.

We were using the broken one in many others though. Hopefully all
instances were fixed by this patch.
 2022-05-18 15:43:39 +03:00
Slavi Pantaleev
98fecf95a6
Merge pull request #1836 from etkecc/patch-11 
Update Synapse v1.59.0 -> v.1.59.1
 2022-05-18 14:09:59 +02:00
Slavi Pantaleev
a1e5ecf551 Upgrade hookshot (1.6.1 -> 1.7.0) 
This new version should be buildable on arm64.

See: https://github.com/matrix-org/matrix-hookshot/releases/tag/1.7.0

There's still no prebuild arm64 image, so we continue relying on
self-building there.
 2022-05-18 14:43:16 +03:00
Aine
de8d6f8d6c
Update Synapse v1.59.0 -> v.1.59.1 2022-05-18 11:37:34 +00:00
Paul B
e1e83353b4
bridge-whatsapp: add variable to enable end-to-bridge encryption 2022-05-18 13:14:22 +02:00
Paul B
99de38280d
bridge-signal: add variable to enable encryption 2022-05-18 13:14:20 +02:00
Slavi Pantaleev
468d492fd4
Merge pull request #1831 from etkecc/patch-9 
Update Postgres (CVE-2022-1552 + last 9.x update)
 2022-05-18 12:32:28 +02:00
Aine
4297af5c51
Update mautrix-whatsapp v0.3.1 -> v0.4.0 2022-05-18 10:19:43 +00:00
Toni Spets
2cce91fe1d
Upgrade Heisenbridge (1.12.0 -> 1.13.0) 2022-05-18 12:38:07 +03:00
Slavi Pantaleev
f972a80224 Upgrade Synapse (1.58.1 -> 1.59.0) 2022-05-17 13:08:17 +03:00
Slavi Pantaleev
bab1ee2233 Work around mx-puppet-discord failing with "No relay found" after reboot 
Related to https://gitlab.com/mx-puppet/discord/mx-puppet-discord/-/issues/117

Looks like the bridge is too quick to start and fails to initialize
itself by connecting to Synapse. It's mostly observed after a system
reboot, because Synapse (and everything else) is slower to start.

Once mx-puppet-discord fails to initialize itself, a "No relay found"
error will be observed any time you try to relay a Matrix message to
Discord. Relaying messages in the other direction (Discord to Matrix)
also fails.

With this workaround (longer delay on mx-puppet-discord startup), I
observe mx-puppet-discord working well, even after a full reboot.
Of course, a proper fix is preferable, instead of delaying by a magic
number of seconds.
 2022-05-17 11:34:00 +03:00
Aine
4109dc3bcd
Update Postgres (CVE-2022-1552 + last 9.x update) 
CVE: https://security-tracker.debian.org/tracker/CVE-2022-1552
Source: https://www.postgresql.org/about/news/postgresql-143-137-1211-1116-and-1021-released-2449/
Postgres 9.6 upgrade (**not a CVE fix, 9.x still vulnerable**): https://www.postgresql.org/docs/release/9.6.24/
 2022-05-16 19:56:54 +00:00
Slavi Pantaleev
f21269f441
Upgrade mx-puppet-slack (v0.1.1 -> v0.1.2) 
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1829
 2022-05-16 21:40:31 +03:00
Slavi Pantaleev
99931af532
Merge pull request #1825 from dsonck92/change-to-upstream 
Change back to working original mx-puppet-slack
 2022-05-16 07:39:00 +02:00
Aaron Raimist
2a9b52a1c2
Update Element self build repo URL 
It forwards to the correct place but might as well just update it to the current URL.
 2022-05-16 04:29:29 +00:00
Aine
c58c7dc643
Update Cinny v2.0.2 -> v2.0.3 2022-05-15 05:45:07 +00:00
Daniel Sonck
894669eca2 Change back to working original mx-puppet-slack 
Now that v0.1.1 is out, which depends on the functional matrix-slack-parser
it works again.
 2022-05-14 21:09:54 +02:00
Aine
dca593cf7a
Update Cinny v2.0.1 -> v2.0.2 2022-05-14 11:33:19 +00:00
Aine
8ec1f4bee0
Update Cinny v2.0.0 -> v2.0.1 2022-05-13 16:20:04 +00:00
Didier 'OdyX' Raboud
eda75e6492
Bump Slack Appservice to 1.11.0 2022-05-11 10:47:00 +02:00
Aine
d09934c79c
matrix-bot-buscarron - set defaults 2022-05-10 18:44:20 +03:00
Aine
9997ca4dbd
Merge branch 'spantaleev:master' into master 2022-05-10 15:39:34 +00:00
Aine
8c505e8a2c
matrix-bot-buscarron v1.1.0 2022-05-10 18:38:57 +03:00
Aine
02d4a841c4
Update Element 1.10.11 -> 1.10.12 2022-05-10 14:31:41 +00:00
Aine
62cb801878
Update cinny v1.8.2 -> v2.0.0 2022-05-10 13:57:12 +00:00
Slavi Pantaleev
9fc60d8c86 Revert "Change back to original mx-puppet-slack" 
This reverts commit fcfd00bcb4.

Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1808

Reverts https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1809

Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1810
 2022-05-10 16:20:44 +03:00
Daniel Sonck
fcfd00bcb4 Change back to original mx-puppet-slack 
Closes: #1808
 2022-05-09 23:38:01 +02:00
Slavi Pantaleev
25302ed142
Merge pull request #1802 from dsonck92/change-to-upstream 
Change back to original mx-puppet-discord
 2022-05-08 07:35:11 +02:00
Slavi Pantaleev
e62123ac13
Merge pull request #1804 from HarHarLinks/feeds 
Add hookshot feeds config support
 2022-05-08 07:10:40 +02:00
HarHarLinks
7390646cd5 add hookshot feeds support 2022-05-07 18:42:15 +02:00
Kim Brose
84ea5f6ecc
Upgrade Hookshot (1.5.0 -> 1.6.1) 2022-05-07 14:34:33 +02:00
Daniel Sonck
3f45805fd2 Change back to original mx-puppet-discord 
Closes: #1801
 2022-05-07 12:40:17 +02:00
Slavi Pantaleev
83b7fcee45 Do not proxy some endpoints to the generic Synapse worker 
These endpoints should not be proxied to a generic Synapse worker
without other preparation (setting up stream writers, sending traffic
to a specific stream writer, etc.).

Disabling them for now. In the future, we'd like to fix up our awk
script to disable them automatically.

This is a fix up for 058fedff91
 2022-05-07 09:39:19 +02:00
Slavi Pantaleev
058fedff91 Fix "endpoint seems conditional" determination in workers-doc-to-yaml.awk" 
This prevented us from keeping our workers reverse-proxying definitions
updated since Synapse v1.54.0.

The last `workers.md` file we could parse is at commit
02632b3504ad4512c5f5a4f859b3fe326b19c788.
Parsing regressed at commit c56bfb08bc071368db23f3b1c593724eb4f205f0,
because the introduction message for `synapse.app.generic_worker` said
"If":

> If a worker is set up to handle a..

.. which made the AWK script think that definitions below were
conditional (which they're not in this case).

This patch fixes up the regex for determining if a line is conditional
or not, so that it doesn't trip up. Hopefully, it doesn't miss something
important.
 2022-05-06 09:08:45 +02:00
Slavi Pantaleev
549e4418b9 Upgrade Synapse (1.58.0 -> 1.58.1) 2022-05-06 08:56:06 +02:00
Slavi Pantaleev
1439be2743 Upgrade matrix-appservice-irc (0.33 -> 0.34) 
Related to https://matrix.org/blog/2022/05/04/0-34-0-security-release-for-matrix-appservice-irc-high-severity
 2022-05-04 11:10:00 +03:00
Slavi Pantaleev
03674e1a36 Upgrade Synapse (1.57.1 -> 1.58.0) 2022-05-03 14:32:32 +03:00
Slavi Pantaleev
7adc167412 Fail if trying to use Jitsi on an architecture other than amd64 
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1797
 2022-05-03 08:10:18 +03:00
Brandon Kraft
7776c2e0bb
Upgrade to Grafana 8.5.1 
https://grafana.com/docs/grafana/latest/release-notes/release-notes-8-5-1/
https://grafana.com/docs/grafana/latest/release-notes/release-notes-8-5-0/
https://grafana.com/docs/grafana/latest/release-notes/release-notes-8-4-7/
https://grafana.com/docs/grafana/latest/release-notes/release-notes-8-4-6/
https://grafana.com/docs/grafana/latest/release-notes/release-notes-8-4-5/
https://grafana.com/docs/grafana/latest/release-notes/release-notes-8-4-4/
https://grafana.com/docs/grafana/latest/release-notes/release-notes-8-4-3/
https://grafana.com/docs/grafana/latest/release-notes/release-notes-8-4-2/
 2022-05-02 12:37:56 -05:00
Aine
1ee118bd49
matrix-change-user-admin-status: do not allocate tty 2022-04-26 17:48:28 +00:00
Aine
4f1f3555f2
Update element 1.10.10 -> 1.10.11 2022-04-26 16:10:36 +00:00
Slavi Pantaleev
e41fcf2746 Fix file name (vars.yaml -> vars.yml) to prevent confusion 2022-04-26 15:44:07 +03:00
Slavi Pantaleev
49da9c76ac
Merge pull request #1782 from etkecc/matrix-bot-buscarron 
add matrix-bot-buscarron
 2022-04-25 09:44:35 +03:00
Slavi Pantaleev
8014979ddb
Merge pull request #1780 from Shaps/nginx-proxy-configure-httpasswd 
Make synapse htpasswd file path configurable
 2022-04-25 09:43:29 +03:00
Slavi Pantaleev
4a0b839768
Automatically do the right thing with regards to Synapse Metrics htpasswd 
.. regardless of whether matrix-nginx-proxy runs in a container or not
 2022-04-25 09:42:36 +03:00
Aine
c92af9fe89
matrix-bot-buscarron: feedback 2022-04-25 09:40:49 +03:00
Sekki21956
2d21a70b3e Update path to signald Dockerfile 2022-04-25 02:05:13 +02:00
Aine
b720b15de6
buscarron v1.0.0 2022-04-24 09:50:23 +03:00
Aine
290754371a
add matrix-bot-buscarron 2022-04-23 16:19:24 +03:00
Andrea Tartaglia
68424e68e5 feat: make synapse htpasswd file path configurable 
When setting `matrix_nginx_proxy_enabled: false` and enabling authentication on the metrics endpoint, the htpasswd file is hardcoded to the nginx-proxy container dir, this changes the hardcoded value to a variable so the path can be updated
 2022-04-23 11:13:36 +01:00
Matthew Cengia
fa108b8ae4 Bump signald to 0.18.1 
According to https://signald.org/articles/install/docker/#migrating-from-versions-before-0180,
This release only chowns files if the container is running as root. See also this upstream commit:
3bb7e8d2c1
 2022-04-22 22:16:37 +10:00
Toni Spets
9e0d969ba4
Upgrade Heisenbridge (1.10.1 -> 1.12.0) 2022-04-22 13:56:34 +03:00
Slavi Pantaleev
69f684255c Fix Signald git repository to unbreak self-building 
The maunium fork of Signald is no longer up-to-date (does not publish
0.18.0.. at least not yet) and all the necessary changes are now upstream.

Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1775
 2022-04-21 15:54:29 +03:00
Slavi Pantaleev
0b5e4aa784 Use non-root image for Signald 
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1775

Related to https://signald.org/articles/install/docker/#migrating-from-versions-before-0180

> Prior to 0.18.0 the signald container image used the root user, which is not recommended for security reasons. This was fixed in the 0.18.0 release which will start as root, fix permissions on the volume, then drop to the non-root user and start signald. Future images will start as the non-root user, so if you’re upgrading make sure to run 0.18.0 at least once.
> A special tag, 0.18.0-non-root, will be published. it starts as the non-root user and does not fix permissions on the volume.
 2022-04-21 15:53:05 +03:00
Slavi Pantaleev
79f89479e0
Merge pull request #1775 from GoliathLabs/mautrix-signal 
Updated: mautrix-signal to v0.3.0 & signald to 0.18.0
 2022-04-21 15:11:38 +03:00
GoliathLabs
de3fc61129 Updated: mautrix-signal v0.3.0 & signald 0.18.0 2022-04-21 13:53:01 +02:00
Erick Wibben
12198a147b
Update matrix-bot-matrix-registration-bot.service.j2 2022-04-21 06:49:07 -05:00
Julian-Samuel Gebühr
90a142439a
Add matrix-registration-bot (#1771) 
* Add matrix-registration-bot

This adds an install and uninstall task plus helpers. The bot is disabled by default.
This commit does not include documentation, yet. In short, the bot can be enabled by adding
matrix_bot_matrix_registration_bot_enabled: true
matrix_bot_matrix_registration_bot_matrix_user_password: "verysecret"
matrix_bot_matrix_registration_bot_matrix_admin_token: "supersecret"
to the host_vars

* Change bot username to bot.matrix-registration-bot following convention

* Address smaller remarks, fix local docker build

* Switch to an env file

* Add environment variables extension for additional config

* Add documentation for the matrix-registration-bot

* Add screenshot on how to obtain admin access token

* Use bot as admin to only have one access token (bot and admin api)

* Use cleaner setting of matrix_synapse_registration_requires_token

* Use config file for cleaner more secure usage

* Delete unneeded env

* Rename vars to make usage clear

* Fix typos/wording and add notice about logging out

* Convert configuration to use |to_json

* Reorder role includes

Nothing should be after `matrix-common-after`.

`matrix-bot-matrix-registration-bot` can probably be anywhere, but it makes sense to put it next to the other `matrix-bot-*` roles.

* Minor group_vars/matrix_servers touchups

Co-authored-by: Slavi Pantaleev <slavi@devture.com>
 2022-04-21 11:07:47 +03:00
borisrunakov
acaebfbf67
optional media cache with range requests support (#1759) 2022-04-21 10:31:26 +03:00
Slavi Pantaleev
b2105f35ec
Add comments around rtm 
Comments taken from https://github.com/matrix-org/matrix-appservice-slack/blob/develop/config/config.sample.yaml

We should probably reconcile our configuration with that one and include comments for other fields as well.
 2022-04-21 09:58:30 +03:00
Didier 'OdyX' Raboud
018da4fb25
Slack appservice: Enable RTM by default 
It is very confusing to debug why messages only go from Matrix to Slack
but not from Slack to Matrix. RTM should be enabled by default, as
that's the recommended way to make this work.
 2022-04-20 19:06:19 +02:00
Slavi Pantaleev
d04767a9d6 Upgrade Synapse (1.57.0 -> 1.57.1) 2022-04-20 18:46:10 +03:00
Aine
502ea21fba
add retires to all get_url actions 2022-04-19 22:01:14 +03:00
Aine
80c9551ef9
matrix-backup-borg - cleanup the .service from the systemd list 2022-04-19 19:42:13 +03:00
Aine
949228eaf8
update synapse 1.56.0 -> 1.57.0 2022-04-19 14:41:31 +03:00
Aine
15ce32a30c
update honoroit 0.9.6 -> 0.9.7 2022-04-18 19:37:14 +03:00
Adriel Sand
949fdd0135
matrix-backup-borg: add ability to backup to unencrypted repositories (#1754) 
* matrix-backup-borg: added option for unencrypted repo access

* matrix-backup-borg: fixed requiring password for unencrypted repos; changed variable name

* matrix-backup-borg: add unknown_unencrypted_repo_access_is_ok to config.yaml.j2

* matrix-backup-borg: cleanup comments

* matrix-backup-borg: add documentation regarding unencrypted repos

* matrix-backup-borg: add readability and ease of use to code

* matrix-backup-borg: fix wording in defaults/main.yml comment

* matrix-backup-borg: add quotes to docs

* Indicate the variable to use

Co-authored-by: Slavi Pantaleev <slavi@devture.com>
 2022-04-18 14:48:37 +03:00
Olivér Falvai
4be425c267
Upgrade Telegrame bridge to 0.11.3 2022-04-18 13:10:39 +02:00
Lunar
471806e7bd
Increase default async time for rust-synapse-compress-state 
Increase the async timeout value defaults, as larger Matrix servers need more time to complete.
 2022-04-17 20:27:04 -05:00
Arthur Brugière
3fbbd5a52c
Update mautrix-whatsapp 0.3.0 -> 0.3.1 2022-04-17 14:07:50 +07:00
Slavi Pantaleev
83ffb9d910
Merge pull request #1755 from etkecc/backup-borg-postgres 
matrix-backup-borg: integrate postgres backups, add extended borgmatic configuration
 2022-04-16 09:30:03 +03:00
Aine
c520a758ec
fix linter 2022-04-15 19:43:45 +03:00
Aine
a9d0cbc560
feedback 2022-04-15 19:38:10 +03:00
joecool1029
5611cab71a
Update element 1.10.9 -> 1.10.10 2022-04-14 13:38:38 -04:00
Aine
d5f4c17146
matrix-backup-borg: integrate postgres backups, add extended borgmatic configuration 2022-04-14 18:06:54 +03:00
Kim Brose
7e062328ff
Upgrade Hookshot (1.4.0 -> 1.5.0) 2022-04-14 15:01:40 +02:00
Slavi Pantaleev
2df993977a Ensure git cloning when self-building is done with the matrix user, not root 
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1749
 2022-04-14 08:52:37 +03:00
Aine
b9bf20c761
Update honoroit 0.9.5 -> 0.9.6 
This update brings stable threads support
 2022-04-12 15:52:49 +00:00
Christos Karamolegkos
9c606d1fcb
Update jitsi to version 7001 
Tested, works without any configuration changes.
 2022-04-12 17:00:07 +03:00
Aine
ac1bd49494
Update coturn 4.5.2-r8 -> 4.5.2-r11 2022-04-12 11:16:36 +00:00
Aine
10c6c24c16
Update element 1.10.8 -> 1.10.9 2022-04-12 11:15:11 +00:00
Yan Minagawa
f6cb59116b This adds a variable for requiring MSC3231 token for registration 2022-04-12 14:31:49 +07:00
HarHarLinks
a9e6538ef8 Upgrade Hookshot (1.3.0 -> 1.4.0) 
https://github.com/matrix-org/matrix-hookshot/releases/tag/1.4.0
 2022-04-11 18:55:02 +02:00
HarHarLinks
ceb2f54970 Make hookshot hardcoded public URLs dynamic 2022-04-11 16:45:33 +02:00
Slavi Pantaleev
f4ba995d9b Fix validation and prevent empty "external-ip=" lines in Coturn config 
We no longer validate that there's an IP address defined.
Seems like Coturn can start without one as well, so there's no need to
require it.

If people populate `matrix_coturn_turn_external_ip_addresses` directly
to specify multiple addresses, they can leave
`matrix_coturn_turn_external_ip_address` empty.

We use the "select not equal to empty string" thing in the for loop
to avoid `matrix_coturn_turn_external_ip_address` leading to
`matrix_coturn_turn_external_ip_addresses: ['']` leading to
`external-ip=` in the Coturn configuration.

Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1741
 2022-04-11 15:38:35 +03:00
Hefty Zauk
03d2dcc996
Move into coturn defaults 2022-04-11 11:20:09 +00:00
heftyzauk
268b079374
Revert Coturn Address Change, add new Addresses var (#2) 2022-04-11 11:50:41 +01:00
heftyzauk
da31eecdb7
Merge branch 'spantaleev:master' into master 2022-04-11 11:42:49 +01:00
Slavi Pantaleev
0364c6c634 Suppress old container cleanup (kill/rm) failures 
People often report and ask about these "failures".
More-so previously, when the `docker kill/rm` output was collected,
but it still happens now when people do `systemctl status
matrix-something` and notice that it says "FAILURE".

Suppressing to avoid further time being wasted on saying "this is
expected".
 2022-04-11 09:05:33 +03:00
heftyzauk
29847627f1
Multi-IP coturn 
Add support for multiple external turn IP addresses, this allows for better comptability with dualstack ipv4/ipv6 hosts, and is supported as per the documentation (point 6 here: https://matrix-org.github.io/synapse/latest/turn-howto.html#configuration)
 2022-04-10 21:51:03 +01:00
Slavi Pantaleev
5e00f0135e
Merge pull request #1738 from SaltireSoul/master 
Dendrite 0.8.1
 2022-04-10 07:42:25 +03:00
SaltireSoul
515792790a uncomment push_server config 2022-04-09 21:41:35 +01:00
Yan Minagawa
b982733a8a
fix typo in document path for the proxy 2022-04-09 19:41:48 +07:00
SaltireSoul
6925e26960 Dendrite 0.8.1 2022-04-09 02:55:48 +01:00
PC-Admin
ab3e02c7fd Remove matrix-awx sections 2022-04-09 08:48:02 +08:00
slikie
17f8fd003d
bump mautrix instagram version to 0.1.3 2022-04-07 20:01:26 +08:00
László Várady
a86757a18d mautrix-facebook: update to v0.4.0 2022-04-07 01:28:30 +02:00
Aine
7559eb99a7
Update Synapse 1.55.2 -> 1.56.0 2022-04-05 20:48:15 +03:00
Luke
627333d82b
fix container image 2022-04-05 12:42:38 +00:00
Aine
a5a3769ca9
add borg backup (#1727) 
* add borg backup

* lint fix

* add exlclude patterns

* missed in the #1726 fix for honoroit

* feedback

* Fix indentation

* feedback

* feedback

* feedback

Co-authored-by: Slavi Pantaleev <slavi@devture.com>
 2022-04-05 14:37:27 +03:00
Slavi Pantaleev
b9d6f8b90f
Merge pull request #1728 from RoiArthurB/hookshot-arm64 
Add hookshot self build for arm64 and amd64
 2022-04-05 09:58:26 +03:00
SaltireSoul
e7978dbdca Dendrite 0.7.0 2022-04-05 03:40:37 +01:00
RoiArthurB
b38c7371a9 [STEAM] Move docker source from icewind1991 to tilosp fixed repo 2022-04-03 17:34:27 +07:00
Arthur Brugière
cfd8a9c0f8
[HOOKSHOT] Fix yamllint 2022-04-03 17:19:35 +07:00
Arthur Brugière
b3176957c3
Add hookshot self build for arm64 and amd64 2022-04-03 17:10:46 +07:00
Aine
5f0ece0c28
fix permissions 2022-04-03 00:49:57 +03:00
Slavi Pantaleev
999c717cf4 Revert "Temporarily switch to Myned-maintained fork of mx-puppet-discord/mx-puppet-slack" 
This reverts commit 0103d92df4.

The same fix has now been merged upstream
(https://gitlab.com/beeper/mx-puppet-monorepo/-/merge_requests/35), so
we don't need to use a fork anymore.

Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1719
 2022-03-31 08:37:24 +03:00
Kim Brose
ea358e208c
Upgrade Hookshot (1.2.0 -> 1.3.0) 2022-03-30 14:18:21 +02:00
Slavi Pantaleev
0103d92df4 Temporarily switch to Myned-maintained fork of mx-puppet-discord/mx-puppet-slack 
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1719

We're using a pinned commit of this fork, which patches up the npm/yarn
lock files, so that self-building of the Discord and Slack bridges can
work after GitHub's deprecation of the `git://` and `ssh://` protocols
(https://github.blog/2021-09-01-improving-git-protocol-security-github/).

When the issue gets fixed in the Beeper fork (via
https://gitlab.com/beeper/mx-puppet-monorepo/-/merge_requests/35 or
otherwise), we'll get back on it.
 2022-03-30 09:02:17 +03:00
Olivér Falvai
9b03234323
Fix Facebook presence config key 2022-03-29 22:14:44 +02:00
joecool1029
f29f51a54c
Update Element 1.10.7 -> 1.10.8 2022-03-28 13:52:44 -04:00
GoliathLabs
fc1e15baff Updated: to v0.3.1 2022-03-26 12:09:42 +01:00
Slavi Pantaleev
dac4df7384 Add arm64 support for rust-synapse-compress-state by switching container image 
This switches the playbook from devture/rust-synapse-compress-state (a
container image which wraps the upstream-prebuilt amd64 binary of
rust-synapse-compress-state) to registry.gitlab.com/mb-saces/rust-synapse-compress-state
(https://gitlab.com/mb-saces/rust-synapse-compress-state), which builds
rust-synapse-compress-state from source and provides a multi-arch image
that currently works on amd64 and arm64.

Ideally, we'll stop using `:latest` and arm32 support will be made
available upstream as well at some point.
Discussed here: https://gitlab.com/mb-saces/rust-synapse-compress-state/-/issues/1
 2022-03-26 10:31:05 +02:00
Slavi Pantaleev
85627b59ad Make synapse-compress-state in-container binary path configurable 
This makes it easier to use another container image for
rust-synapse-compress-state, which may be storing the binary at another
path.
 2022-03-26 10:04:21 +02:00
joecool1029
38f2dc4553
Synapse 1.55.0 -> Synapse 1.55.2 
This is a minor hotfix, needs to be bumped though or new deploys will break (existing deploys not affected by bug).
 2022-03-24 15:54:36 -04:00
pulmonarycosignerkindness
97865484bd
Update mjolnir antispam commit hash 
Changed the commit hash in matrix_synapse_ext_spam_checker_mjolnir_antispam_git_version to latest. Fixes a Synapse ImportError with mjolnir v1.4.1 leading to a Synapse crash-loop.
 2022-03-23 19:17:54 +00:00
Catalan Lover
07e68d48de
Update Mjolnir from 1.3.2 to 1.4.1 2022-03-22 20:37:40 +01:00
Slavi Pantaleev
d04162b275 Upgrade Synapse (1.54.0 -> 1.55.0) 
`roles/matrix-synapse/vars/workers.yml` has not been updated here,
because running `roles/matrix-synapse/files/workers-doc-to-yaml.awk`
seems to cause some trouble with the current `workers.md` file
available at https://github.com/matrix-org/synapse/raw/master/docs/workers.md,
namely lots of:

> FIXME: ADDITIONAL CONDITIONS REQUIRED: to be enabled manually

lines and commented out regex lines.

This is something that remains to be investigated/fixed.
 2022-03-22 19:41:30 +02:00
Peter
41f948c48b
Update mautrix-whatsapp 0.2.4 -> 0.3.0 2022-03-22 13:34:05 +01:00
Slavi Pantaleev
0d6c0f5df2
Merge pull request #1705 from HarHarLinks/master 
Fix index in external_prometheus.yml.example.j2
 2022-03-18 08:46:15 +02:00
Slavi Pantaleev
c305ddd50f
Merge pull request #1703 from thomwiggers/patch-7 
Update IRC appservice bridge
 2022-03-17 23:03:54 +02:00
Aine
95cfbf0256
Switch mx-puppet-slack to the beeper fork (#1704) 2022-03-17 22:16:17 +02:00
Kim Brose
5ed23e81ef
Fix index in external_prometheus.yml.example.j2 
For an unknown reason prometheus ignored the given "numeric" index and replaced it by 1. This made it not work properly, plus multiple workers of same types were not differentiable. With a "string" index, it works as intended.
 2022-03-17 18:37:37 +01:00
Thom Wiggers
dc82c1a0e6
Update IRC appservice bridge 2022-03-17 17:21:18 +01:00
Aine
abff35ea97
Update Cinny 1.8.1 -> 1.8.2 2022-03-17 15:39:47 +00:00
Aine
2da3768b20
Added retries to the docker pulls (#1701) 2022-03-17 17:37:11 +02:00
Slavi Pantaleev
2af4a92fa9
Merge pull request #1698 from jimeh/fix-to_nice_yaml 
fix: avoid yaml being wrapped at column 80 via to_nice_yaml
 2022-03-16 09:46:32 +02:00
Jim Myhrberg
eeca3c8dca
fix: avoid yaml being wrapped at column 80 via to_nice_yaml 
The `to_nice_yaml` helper will by default wrap any string YAML values on
the first space after column 80. This can in worst case yield invalid
YAML syntax. More details in Ansible's documentation here:

https://docs.ansible.com/ansible/latest/user_guide/playbooks_filters.html#formatting-data-yaml-and-json

In short, you need to explicitly provide a custom width argument of a
high number of some kind to avoid the line wrapping.
 2022-03-16 01:10:26 +00:00
Sweeny
36d4d1f66e
Add check for ma1sd repo changes on image self build 
Adding when clause to ma1sd image build task to avoid image being built if not needed.
 2022-03-15 23:50:06 +00:00
Slavi Pantaleev
5cdb3b442c
Merge pull request #1696 from etkecc/patch-2 
Update Cinny 1.8.0 -> 1.8.1
 2022-03-15 22:28:57 +02:00
Aine
981dafa225
Update Cinny 1.8.0 -> 1.8.1 2022-03-15 18:21:09 +00:00
Aine
332fda6b02
Update Element 1.10.6 -> 1.10.7 2022-03-15 18:20:13 +00:00
Slavi Pantaleev
81f4a4b11e
Merge pull request #1685 from MrAnno/facebook-web-login 
bridge-mautrix-facebook: add support for web-based login
 2022-03-15 08:53:26 +02:00
László Várady
ebfa511515 synapse: do not expose plain federation port when it's disabled 
matrix_synapse_federation_port_enabled can be disabled by users, for
example, when one wants to use the same port for client and federation
requests (docs/configuring-playbook-federation.md).
 2022-03-14 03:45:46 +01:00
László Várady
f0588c7fd0 bridge-mautrix-facebook: disable temporary disconnect notices 
https://github.com/mautrix/facebook/issues/215
 2022-03-14 03:32:25 +01:00
László Várady
4359e5774c bridge-mautrix-telegram: add option to enable/disable web-based login 2022-03-12 19:14:08 +01:00
László Várady
9de677942d bridge-mautrix-facebook: add support for web-based login 2022-03-12 16:30:29 +01:00
László Várady
9cc3c5be76 Fix warning about reverse-proxying when built-in proxy is disabled 
`matrix_nginx_proxy_enabled` is usually set to false by users, this is when
the warning should be displayed.
 2022-03-12 16:29:20 +01:00
Slavi Pantaleev
65f92f043a Fix mx-puppet-discord container image repository URL 
Fixup for d8a19e5bf9
 2022-03-10 20:14:59 +02:00
Slavi Pantaleev
d8a19e5bf9 Switch to the Beeper-maintained fork of mx-puppet-discord 
Building mx-puppet-discord appears to have been broken for a while.

Related to:
- https://github.com/matrix-discord/mx-puppet-discord/issues/201
- https://github.com/matrix-discord/mx-puppet-discord/issues/202
- https://github.com/matrix-discord/mx-puppet-discord/issues/203

We'd rather use a fork that is maintained better and by someone who
cares about whether their software works or not, so we'll be using the
Beeper-maintained for from now on.

In the future, we should probably do the same for the Slack bridge
which is also part of the same monorepo
(https://gitlab.com/beeper/mx-puppet-monorepo).
 2022-03-10 12:27:53 +02:00
Slavi Pantaleev
1895b01810 Move matrix_container_global_registry_prefix to matrix-base 
Various roles depend on this. It makes sense to make it part
of the `matrix-base` role.
 2022-03-10 11:28:25 +02:00
Slavi Pantaleev
a05bcc98b0 Upgrade Synapse (1.53.0 -> 1.54.0) 2022-03-08 16:58:51 +02:00
László Várady
fabbc91cfa client-cinny: update to v1.8.0 2022-03-08 13:04:55 +01:00
Slavi Pantaleev
d5de1e8352 Document that using an external Postgres server has serious downsides 
Related to:

- https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1682
- https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1679
 2022-03-08 09:30:20 +02:00
Slavi Pantaleev
5a4dd2b3e8
Merge pull request #1676 from MrAnno/federate-switch-for-portal-rooms 
"Federate rooms" switch for mautrix bridges
 2022-03-08 08:16:25 +02:00
Slavi Pantaleev
8c25ade9fb Rework matrix_mautrix_twitter_database_* variables a bit 
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1682

Previously, when matrix-postgres was disabled, we were setting
`matrix_mautrix_twitter_database_engine` to an invalid empty value.

Now, we always hardcode `matrix_mautrix_twitter_database_engine: postgres`,
but set/unset the database hostname and password values instead.
 2022-03-08 08:10:40 +02:00
László Várady
338b4cebd2 bridge-mautrix-whatsapp: add option for creating non-federated rooms 2022-03-07 15:01:06 +01:00
László Várady
3c6c8db5d5 bridge-mautrix-twitter: add option for creating non-federated rooms 2022-03-07 15:01:06 +01:00
László Várady
5789b3bbab bridge-mautrix-telegram: add option for creating non-federated rooms 2022-03-07 15:01:06 +01:00
László Várady
d1d68417ff bridge-mautrix-signal: add option for creating non-federated rooms 2022-03-07 15:00:59 +01:00
László Várady
5c083b6385 bridge-mautrix-instagram: add option for creating non-federated rooms 2022-03-07 15:00:44 +01:00
László Várady
d6df1e7135 bridge-mautrix-googlechat: add option for creating non-federated rooms 2022-03-07 14:59:46 +01:00
László Várady
2c861c90bc bridge-mautrix-facebook: add option for creating non-federated rooms 2022-03-07 14:59:46 +01:00
Slavi Pantaleev
1bea072484
Merge pull request #1677 from MrAnno/remove-community-support 
Remove deprecated community options
 2022-03-06 08:15:27 +02:00
Jim Myhrberg
a5e95c42b2
feat(appservice-discord): add disablePortalBridging bridge option 
This allows disabling the automatic portal bridging, meaning bridges
must be manually setup via self-servicing, by setting:

    matrix_appservice_discord_bridge_enableSelfServiceBridging: true
 2022-03-06 01:46:09 +00:00
László Várady
ba68d2ad36 Remove deprecated community options 
"Community" support

- has been removed from mautrix/facebook in v0.3.3:
  31cac6fb5e

- has been removed from mautrix/signal in v0.2.2:
  1f27a608a6

- will be removed in the next mautrix/instagram release:
  e2ae1ca503

- will be removed in the next mautrix/twitter release:
  3893075265
 2022-03-05 21:57:30 +01:00
Luis
833ac506fe
pass GET parameters too 
This fixes parameters not being passed to the provisioning api
 2022-03-04 15:08:16 -03:00
Luis
584e50d117
fix hookshot provisioning url in nginx 
Hello, this PR should fix Hookshot container not receiving API calls with the right path because nginx proxy was stripping the /v1 from it.
 2022-03-04 14:40:05 -03:00
Kim Brose
f62279581d
Upgrade Hookshot (1.1.0 -> 1.2.0) 
all features were actually already silently supported 🎉

upstream changelog: https://github.com/matrix-org/matrix-hookshot/releases/tag/1.2.0
 2022-03-04 16:54:17 +01:00
Slavi Pantaleev
fb700743f9
Merge pull request #1635 from HarHarLinks/hookshot-urlprefix 
Update hookshot to respect protocol and custom ports
 2022-03-04 07:44:01 +02:00
Peter Schümann
211f05abbe add $is_args$args 
to proxy url params in GET requests
 2022-03-03 22:21:21 +01:00
Alejo Diaz
4ec24ec344
Add support for obtain ECDSA keys (#1667) 
* Add support for obtain ECDSA keys

* Replace matrix_ssl_lets_encrypt_use_ecdsa_keys for matrix_ssl_lets_encrypt_key_type
 2022-03-03 18:15:39 +02:00
Slavi Pantaleev
35df276487
Merge pull request #1624 from HarHarLinks/hookshot 
update hookshot registration.yml
 2022-03-03 09:37:45 +02:00
Slavi Pantaleev
9d72f32e64
Merge pull request #1668 from HarHarLinks/hookshot-move 
hookshot moved to matrix-org namespace
 2022-03-03 09:13:11 +02:00
Slavi Pantaleev
e3d4c13e04
Merge pull request #1669 from HarHarLinks/hookshot-collision 
avoid namespace collisions between webhook bridges
 2022-03-03 09:12:32 +02:00
Aaron Raimist
09d45b854b
Upgrade Mjolnir (1.3.1 -> 1.3.2) 2022-03-02 20:39:23 +00:00
HarHarLinks
3d47b44d64 avoid namespace collisions between webhook bridges 2022-03-02 21:28:52 +01:00
HarHarLinks
58771a9c65 hookshot moved to matrix-org namespace 2022-03-02 20:58:11 +01:00
joecool1029
42a8fb3a3c
Upgrade Element (1.10.5 -> 1.10.6) 2022-03-01 17:30:15 -05:00
joecool1029
7384772957
Upgrade Element (1.10.4 -> 1.10.5) 2022-03-01 02:50:17 -05:00
GoMatrixHosting
28f6091ed4 GoMatrixHosting v0.7.0 2022-02-27 17:40:20 +08:00
Kim Brose
3719abe0e6
Optimize signal bridge startup order 
bridge requires the daemon, so start it first
 2022-02-26 14:56:51 +01:00
Aine
ffa57055f4
updated honoroit 0.9.4 -> 0.9.5 2022-02-24 20:50:06 +02:00
Slavi Pantaleev
87c9ea0dc6
Merge pull request #1651 from GoliathLabs/jitsi 
Updated: jitsi to stable-6865
 2022-02-23 14:44:37 +02:00
PC-Admin
c640799864 GoMatrixHosting v0.6.9 - stop re-writing of matrix_homeserver_generic_secret_key 2022-02-23 20:06:46 +08:00
Wm Salt Hale
46f74c3ac0
Merge branch 'spantaleev:master' into default_room_version_9 2022-02-22 11:05:13 -08:00
Slavi Pantaleev
ef7acce94b Upgrade Synapse (1.52.0 -> 1.53.0) 2022-02-22 15:34:10 +02:00
Slavi Pantaleev
eca7c277b4
Merge pull request #1650 from GoliathLabs/synapse-admin 
Updated: synapse-admin to 0.8.5
 2022-02-22 14:57:32 +02:00
Slavi Pantaleev
0e6781fba1
Merge pull request #1649 from GoliathLabs/prometheus 
Updated: prometheus to v2.33.3
 2022-02-22 14:57:16 +02:00
Slavi Pantaleev
389f96b45b
Merge pull request #1648 from GoliathLabs/certbot 
Updated: certbot to v1.23.0
 2022-02-22 14:56:56 +02:00
Slavi Pantaleev
28df88643a
Merge pull request #1647 from GoliathLabs/grafana 
Updated: grafana to 8.4.1
 2022-02-22 14:56:34 +02:00
Slavi Pantaleev
22b82001d6
Merge pull request #1646 from GoliathLabs/ddclient 
Updated: ddclient to v3.9.1-ls79
 2022-02-22 14:56:00 +02:00
Slavi Pantaleev
8ca98582ef
Merge pull request #1645 from GoliathLabs/mautrix-telegram 
Updated: mautrix-telegram to v0.11.2
 2022-02-22 14:55:39 +02:00
GoliathLabs
b8f6f6a51a
Updated: jitsi to stable-6865 2022-02-22 13:08:28 +01:00
GoliathLabs
7f4d7444a3
Updated: synapse-admin to 0.8.5 2022-02-22 12:54:31 +01:00
GoliathLabs
728123b9ab
Updated: prometheus to v2.33.3 2022-02-22 12:52:00 +01:00
GoliathLabs
e53cc026d0
Updated: certbot to v1.23.0 2022-02-22 12:50:21 +01:00
GoliathLabs
0f251a2104
Updated: grafana to 8.4.1 2022-02-22 12:47:32 +01:00
GoliathLabs
5b96dd609b
Updated: ddclient to v3.9.1-ls79 2022-02-22 12:45:42 +01:00
GoliathLabs
a4ba2ba601
Updated: mautrix-telegram v0.11.2 2022-02-22 12:37:11 +01:00
GoliathLabs
906f192cf3
Updated: mautrix-signal to v0.2.3 2022-02-22 12:33:55 +01:00
Christos Karamolegkos
a6e766a06a
Upgrade Element (1.10.3 -> 1.10.4) 2022-02-18 19:56:22 +02:00
HarHarLinks
d556952bb6 update hookshot to respect protocol and custom ports 2022-02-16 20:10:01 +01:00
Petteri Pucilowski
fe389bd11a Changed to: mautrix-whatsapp v0.2.4 tag 2022-02-16 19:48:41 +02:00
Aaron Raimist
f0e30c76f3
Postgres Minor Updates (14.2, 13.6, 12.10, 11.15, 10.20) 2022-02-16 09:22:25 +00:00
Slavi Pantaleev
1ed46f0a86 Remove Jinja2 templating delimiters from when statement 
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1629

Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1505
 2022-02-16 09:36:33 +02:00
Slavi Pantaleev
8b3fad45f9 Upgrade Element (1.10.1 -> 1.10.3) 
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1627
 2022-02-15 14:04:08 +02:00
Slavi Pantaleev
241e21c702 Fix typo 2022-02-15 07:04:45 +02:00
Slavi Pantaleev
f0ab2ec506 Add support for configuring allow_embedding for Grafana 
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1626
 2022-02-15 07:03:25 +02:00
Slavi Pantaleev
cfba9b2cf5 Update matrix_encryption_disabler (patch_power_levels feature) 
Related to:

- https://github.com/digitalentity/matrix_encryption_disabler/pull/4
- https://github.com/digitalentity/matrix_encryption_disabler/issues/5
- https://github.com/digitalentity/matrix_encryption_disabler/pull/6
 2022-02-14 10:39:14 +02:00
HarHarLinks
735eec92cc update hookshot registration.yml 
based on comments in chat:
https://matrix.to/#/!TlZdPIYrhwNvXlBiEk:half-shot.uk/$RbG6itEHVV8J_u5ry1HiFdC76n19M3vmopfQOyRmkKU?via=half-shot.uk&via=matrix.org&via=envs.net
 2022-02-13 17:31:52 +01:00
Slavi Pantaleev
5eeb0156b1 Bump matrix_encryption_disabler "version" 2022-02-12 09:55:59 +02:00
Slavi Pantaleev
f44ca0c7c2 Add support for matrix_encryption_disabler 
Related to https://github.com/matrix-org/synapse/issues/4401

Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1621
 2022-02-12 09:25:24 +02:00
Catalan Lover
cc412dfffe
Update Hydrogen from v0.2.25 to v0.2.26 2022-02-12 00:37:40 +01:00
Slavi Pantaleev
85c66a944f Remove useless cast 2022-02-11 20:05:32 +02:00
Slavi Pantaleev
5a69c899a3 Upgrade matrix-synapse-shared-secret-auth (1.0.2 -> 2.0.2) 
For now, we disable the new `com.devture.shared_secret_auth` login type
by default, because it causes problems with Element:
https://github.com/vector-im/element-web/issues/19605

This also becomes the first module to use the new Synapse module system
that got introduced in Synapse v1.46.0.

Despite these upgrades, things should remain functionally identical
as far as bridges, matrix-corporal or other consumers are concerned.
 2022-02-11 10:23:50 +02:00
Slavi Pantaleev
e2e5db3b89
Do not use misleading with_items for a single file 2022-02-11 08:36:05 +02:00
Slavi Pantaleev
6c47b447e3
Do not use misleading with_items for a single file 2022-02-11 08:35:39 +02:00
Wunderharke
a24f7626bd 7330992b20 fixed the major_version compare and made foedora deployments to use setup_redhat8.yml. This however broke the script on fedora as there is no EPEL package. This commit add very basic fedora support. 2022-02-09 16:56:14 +01:00
Slavi Pantaleev
7330992b20 Do not compare ansible_distribution_major_version as a string 
Fedora 35 is:

- `ansible_os_family = 'RedHat'`
- `ansible_distribution_major_version = '35'`

Our RedHat checks against v7/v8 are really for RHEL derivatives (CentOS, Rockylinux,
AlmaLinux), but the same checks (by coincidence) apply for Fedora 35.

The problem is that `'35' > '7'` (comparing these as strings) is
`false`.

This patch makes sure that we always cast
`ansible_distribution_major_version` to an integer.

Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1610
 2022-02-09 16:20:09 +02:00
Slavi Pantaleev
e0df99a7de Fix typo 2022-02-09 14:03:06 +02:00
Slavi Pantaleev
94c9780f7a
Fix matrix_synapse_encryption_enabled_by_default_for_room_type 
The value of `off` was taken to be a boolean, but it shouldn't be.

Synapse expects a string (currently one of: `all`, `invite`, `off`).
 2022-02-09 10:38:28 +02:00
Slavi Pantaleev
5addb889b1
Fix inconsistent spacing 2022-02-09 10:27:12 +02:00
Marko Weltzer
d27e623c71 fix: manually merge upstream 2022-02-09 09:01:56 +01:00
Slavi Pantaleev
5163aa643a Upgrade Synapse (1.51.0 -> 1.52.0) 
This also removes the `matrix_synapse_version_arm64` variable we've
been dragging around for a long time.

Since https://github.com/matrix-org/synapse/pull/11810, a multiarch Synapse
container image (for AMD64 and ARM64) is released at the same time.
 2022-02-08 15:13:41 +02:00
Slavi Pantaleev
a095accce7 Replace some CentOS references to support other RHEL derivatives 
Not hardcoding 'CentOS' and using the OS family ('RedHat') instead,
we now behave better on Rockylinux and AlmaLinux, etc.

With that said, we may or may not fully support CentOS/Rockylinux/AlmaLinux v8 yet.
Certain things were improved in
https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/300.

v8 support is discussed here: https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/300
Certain things (firewalld?) may still be problematic. This patch does not try to address those.
If the remaining issues are confirmed to be fixed in the future, we can mark v8 as supported.
 2022-02-06 18:05:25 +02:00
Marko Weltzer
819574b8ba
Merge branch 'spantaleev:master' into master 2022-02-05 21:37:53 +01:00
Marko Weltzer
7e5b88c3b7 fix: all praise the allmighty yamllinter 2022-02-05 21:32:54 +01:00
Slavi Pantaleev
b244ab477c Upgrade email2matrix (1.0.2 -> 1.0.3) 
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1605

Fixes a regression introduced in ccb85b31a4. The
`docker.io/devture/email2matrix:1.0.2` container image was faulty due to
this 49f966d6cc
 2022-02-05 13:58:15 +02:00
Slavi Pantaleev
86c36523df Replace ExecStopPost with ExecStop 
Reverts b1b4ba501f, 90c9801c56, a3c84f78ca, ..

I haven't really traced it (yet), but on some servers, I'm observing
`ansible-playbook ... --tags=start` completing very slowly, waiting
to stop services. I can't reproduce this on all Matrix servers I manage.
I suspect that either the systemd version is to blame or that some
specific service is not responding well to some `docker kill/rm` command.

`ExecStop` seems to work great in all cases and it's what we've been
using for a very long time, so I'm reverting to that.
 2022-02-05 12:13:36 +02:00
Slavi Pantaleev
d07e50a04f
Merge pull request #1604 from GoliathLabs/prometheus 
Updated: prometheus to v.2.33.1
 2022-02-05 12:10:57 +02:00
Slavi Pantaleev
a66f5d35d6
Merge pull request #1603 from GoliathLabs/nginx-proxy 
Updated: nginx to 1.21.6-alpine
 2022-02-05 12:10:41 +02:00
Slavi Pantaleev
c9c79d935e
Merge pull request #1601 from GoliathLabs/grafana 
Updated: grafana to 8.3.4
 2022-02-05 12:05:02 +02:00
Slavi Pantaleev
eea58c9c44
Merge pull request #1600 from GoliathLabs/dynamic-dns 
Updated: ddclient to v3.9.1-ls77
 2022-02-05 12:04:39 +02:00
GoliathLabs
e0a088dbe3
Updated: prometheus to v.2.33.1 2022-02-05 11:01:52 +01:00
GoliathLabs
33851f1dfa
Updated: nginx to 1.21.6-alpine 2022-02-05 10:58:09 +01:00
GoliathLabs
e27e0b28c8
Updated: grafana to 8.3.4 2022-02-05 10:52:31 +01:00
GoliathLabs
509466018b
Updated: ddclient to v3.9.1-ls77 2022-02-05 10:49:14 +01:00
GoliathLabs
b4ecadcb2f
Updated: Heisenbridge to 1.10.1 2022-02-05 10:37:09 +01:00
Slavi Pantaleev
ccb85b31a4 Upgrade devture/email2matrix (1.0.1 -> 1.0.2) and disable self-building on ARM32/ARM64 
1.0.2 is the first container image tag that is available as a multi-arch image
with support for linux/amd64, linux/arm64/v8 (arm64) and linux/arm/v7 (arm32),
so self-building is no longer necessary on all these platforms.
 2022-02-05 11:14:20 +02:00
Slavi Pantaleev
45fbcc56da Upgrade devture/exim-relay (4.95-r0-1 -> 4.95-r0-2) 
4.95-r0-1 was problematic, because `/etc/exim/exim.conf` in the
container had the wrong permissions (writable by the `exim` user).

Fixed in 697f3cff7e
which is built as 4.95-r0-2
 2022-02-01 18:31:38 +02:00
Slavi Pantaleev
133d85fedf Upgrade Element (1.10.0 -> 1.10.1) 2022-02-01 18:27:06 +02:00
Slavi Pantaleev
1099ccab43 Upgrade devture/exim-relay (4.95-r0 -> 4.95-r0-1) and disable self-building on ARM32/ARM64 
4.95-r0-1 is the first container image tag that is available as a multi-arch image
with support for linux/amd64, linux/arm64/v8 (arm64) and linux/arm/v7 (arm32),
so self-building is no longer necessary on all these platforms.
 2022-02-01 17:23:07 +02:00
Slavi Pantaleev
0ec86d40ac
Merge pull request #1588 from FSG-Cat/patch-2 
Update Mjolnir from v1.2.1 to v1.3.1
 2022-02-01 17:16:31 +02:00
Catalan Lover
1f21799782
Update Mjolnir from v1.2.1 to v1.3.1 2022-02-01 15:23:31 +01:00
Catalan Lover
c03f69fe93
Update Hydrogen from v0.2.23 to v0.2.25 2022-02-01 15:00:33 +01:00
Slavi Pantaleev
e295c90d0b
Merge pull request #1505 from HarHarLinks/hookshot 
add matrix-hookshot
 2022-02-01 13:45:48 +02:00
Slavi Pantaleev
4216807c86 Upgrade Element (1.9.9 -> 1.10.0) 2022-01-31 18:51:28 +02:00
Slavi Pantaleev
4a4d718f7c Upgrade matrix-corporal (2.2.2 -> 2.2.3) and disable self-building on ARM32/ARM64 
2.2.3 is the first container image tag that is available as a multi-arch image
with support for linux/amd64, linux/arm64/v8 (arm64) and linux/arm/v7 (arm32),
so self-building is no longer necessary on all these platforms.
 2022-01-31 16:52:49 +02:00
AtomHare
d93b8bb57a
Upgrade Mautrix/Facebook (0.3.2 -> 0.3.3) 
Not tested but shouldn't break something
 2022-01-30 23:37:19 +01:00
HarHarLinks
51baa40eff fixup! escape hookshot variables using to_json 2022-01-30 19:28:40 +01:00
HarHarLinks
99cf6adf95 fixup! update hookshot private key installation method 2022-01-30 19:21:26 +01:00
HarHarLinks
5300dc7a8b update hookshot/defaults/main.yml comments 2022-01-30 19:05:49 +01:00
HarHarLinks
f136c1fb8f fixup! add some hookshot config validation 2022-01-30 18:53:57 +01:00
HarHarLinks
2a91a43b32 Merge remote-tracking branch 'origin/master' into hookshot 2022-01-30 17:50:50 +01:00
HarHarLinks
4477711e79 add some hookshot config validation 2022-01-30 17:46:40 +01:00
HarHarLinks
f47bfdfb4f remove hookshot uninstall comments based on feedback 2022-01-30 17:46:01 +01:00
HarHarLinks
29d0b277f4 fix hookshot missing figma config variable 2022-01-30 17:45:28 +01:00
HarHarLinks
a3c84f78ca update hookshot.service to ExecStopPost 2022-01-30 17:45:09 +01:00
HarHarLinks
99802bc143 escape hookshot variables using to_json 2022-01-30 17:44:22 +01:00
Aine
211b0ad3b5
Update honoroit (v0.9.3 -> v0.9.4) 2022-01-29 21:08:20 +02:00
Slavi Pantaleev
fce190099a
Use |to_json for matrix_mx_puppet_slack_oauth_client_secret 2022-01-28 08:15:23 +02:00
Jim Myhrberg
7ae70c27e6
feat(mx-puppet-slack): add support for OAuth client ID/secret 
The OAuth credentials method seems to be the only viable way to
configure the mx-puppet-bridge now. Legacy tokens can no longer be
created, and the other methods (xoxs and xoxc tokens) come with warnings
about them being against Slack's terms of service.
 2022-01-28 01:22:34 +00:00
Slavi Pantaleev
11c0dcf2ac Upgrade Cinny (1.6.1 -> 1.7.0) 
(untested change, but unlikely to cause breakage)
 2022-01-26 15:16:55 +02:00
Slavi Pantaleev
ad082b3b1b Fix self-building for Synapse v1.51.0 (requires BuildKit) 
Synapse v1.51.0 requires to be built with BuildKit since
https://github.com/matrix-org/synapse/pull/11691

The `docker_image` Ansible module does not support BuildKit
(https://github.com/ansible-collections/community.general/issues/514),
so we had to switch to a `docker build` call.
 2022-01-26 08:41:34 +02:00
Slavi Pantaleev
cf46b7fed5 Upgrade Synapse (1.50.2 -> 1.51.0) 2022-01-25 14:19:40 +02:00
Catalan Lover
f59f903c04
Update Synapse from 1.50.1 to 1.50.2 
Fixes a issue with room version 1.

Merging has to wait until ARM images are built ofc.
 2022-01-24 14:47:41 +01:00
Thracky
b02aa4b799 Add missing slash in url scheme for mediaUrl 2022-01-23 14:09:18 -05:00
HarHarLinks
a1a5b16185 update hookshot private key installation method 2022-01-23 16:10:25 +01:00
HarHarLinks
5d07f14235 install openssl for hookshot 
using b33ea48
 2022-01-23 15:11:25 +01:00
GoliathLabs
c6287083e4
Updated: prom-postgres-exporter to v0.10.1 2022-01-20 10:57:39 +01:00
Wm Salt Hale
88b832a818 updated task names leftover from template used 2022-01-19 22:02:20 -08:00
Wm Salt Hale
3aa8c1f62c only enable openssl if necessary 2022-01-19 21:58:39 -08:00
Aine
51b27de1bb
matrix-bot-honoroit: bugfix commands in reply-to mode, add custom prefixes for thread topics 2022-01-19 18:33:51 +02:00
Slavi Pantaleev
bcfae766a1
Merge pull request #1567 from aaronraimist/antispam 
Upgrade synapse-simple-antispam (0.0.3 -> 0.0.7)
 2022-01-19 16:56:10 +02:00
Aaron Raimist
ff94d815e1
Upgrade synapse-simple-antispam (0.0.3 -> 0.0.7) 2022-01-19 14:35:55 +00:00
Wm Salt Hale
ad8d4740a7
Merge branch 'spantaleev:master' into default_room_version_9 2022-01-18 14:56:25 -08:00
Slavi Pantaleev
4cd44f117d Upgrade Synapse (1.50.0 -> 1.50.1) 
v1.50.0 was found to be buggy for people using a `webclient` listener.
This is fixed in v1.50.1.

We don't use such a listener, so we weren't affected anyway.
 2022-01-18 20:45:12 +02:00
Slavi Pantaleev
5f22371c23 Upgrade Synapse (1.49.2 -> 1.50.0) 2022-01-18 16:15:52 +02:00
Slavi Pantaleev
1b151a59ad
Merge pull request #1562 from GoliathLabs/element-web 
Updated: element-web to v1.9.9
 2022-01-18 09:55:50 +02:00
GoliathLabs
3614903e38
Updated: element-web to v1.9.9 2022-01-17 18:40:44 +01:00
Slavi Pantaleev
06d188ee2d
Merge pull request #1561 from GoliathLabs/certbot 
Updated: Certbot to v1.22.0
 2022-01-17 11:57:46 +02:00
GoliathLabs
b608c3d342
Updated: worker_processes to auto 2022-01-17 10:55:36 +01:00
GoliathLabs
8a66db850e
Updated: Certbot to v1.22.0 2022-01-17 10:53:15 +01:00
Slavi Pantaleev
a1460616d6
Merge pull request #1560 from GoliathLabs/twitter 
Updated: mautrix-twitter to v0.1.3
 2022-01-17 11:14:30 +02:00
Slavi Pantaleev
14d58b8e95
Merge pull request #1559 from GoliathLabs/whatsapp 
Added: mautrix-whatsapp v0.2.3 tag
 2022-01-17 11:13:59 +02:00
GoliathLabs
94d31eefd3
Updated: mautrix-twitter to v0.1.3 2022-01-17 10:02:16 +01:00
Slavi Pantaleev
098d21a7b7
Merge pull request #1558 from GoliathLabs/signal 
Added: mautrix-signal 0.2.2 & signald 0.16.1
 2022-01-17 10:58:37 +02:00
GoliathLabs
46f621bca6
Added: mautrix-whatsapp v0.2.3 tag 2022-01-17 09:58:16 +01:00
GoliathLabs
6f142faf85
Added: mautrix-signal 0.2.2 & signald 0.16.1 2022-01-17 09:55:00 +01:00
GoliathLabs
29668f4a33
Updated: telegram to v0.11.1 2022-01-16 22:41:01 +01:00
Aine
05541bd54a
Updated Honoroit with fallback reply-to mode 2022-01-16 18:41:02 +02:00
Slavi Pantaleev
d0030b2de9
Merge pull request #1555 from GoliathLabs/master 
Added Instagram version tag instead of latest
 2022-01-16 17:04:11 +02:00
Felix
8f0da16621
Added: version tag (v0.1.2 2022-01-16 16:00:54 +01:00
Slavi Pantaleev
1fd8bcc0bc
Merge pull request #1547 from GoliathLabs/jitsi 
Updated: version to stable-6726-2
 2022-01-15 20:32:41 +02:00
Slavi Pantaleev
e8077485f2
Merge pull request #1551 from GoliathLabs/node-exporter 
Updated: node-exporter to v1.3.1
 2022-01-15 20:32:07 +02:00
Slavi Pantaleev
5a3f0eacf5
Merge pull request #1553 from GoliathLabs/appservice-slack 
Updated: slack to 1.10.0
 2022-01-15 20:31:24 +02:00
Slavi Pantaleev
efa5ac6064
Merge pull request #1550 from GoliathLabs/sygnal 
Updated: sygnal to v0.11.0
 2022-01-15 20:29:33 +02:00
Slavi Pantaleev
dd44d07100
Merge pull request #1548 from GoliathLabs/appservice-webhooks 
Updated: webhooks image tag to v1.0.3-01
 2022-01-15 20:26:56 +02:00
Slavi Pantaleev
1122a481fd
Merge pull request #1546 from GoliathLabs/dynamic-dns 
Updated: ddclient to v3.9.1-ls76
 2022-01-15 20:25:22 +02:00
GoliathLabs
dec1bd6c65
Updated: slack to 1.10.0 2022-01-15 18:59:18 +01:00
GoliathLabs
f2f4d5ba21
Updated: node-exporter to v1.3.1 2022-01-15 18:49:30 +01:00
GoliathLabs
6bdb599a58
Updated: sygnal to v0.11.0 2022-01-15 18:45:23 +01:00
GoliathLabs
dcbd0a598e
Updated: beeper-linkedin to v0.5.2 2022-01-15 18:40:28 +01:00
GoliathLabs
7dffd44171
Updated: webhooks image tag to v1.0.3-01 2022-01-15 18:36:10 +01:00
GoliathLabs
be4c93dc24
Updated: version to stable-6726-2 2022-01-15 18:33:44 +01:00
GoliathLabs
b0b88242f2
Updated: ddclient to v3.9.1-ls76 2022-01-15 18:31:07 +01:00
Slavi Pantaleev
b87cf31d59
Merge pull request #1543 from aaronraimist/hydrogen 
Upgrade Hydrogen (0.2.19 -> 0.2.23)
 2022-01-15 09:08:48 +02:00
Slavi Pantaleev
cba605a8b7 Fix go-neb sample configuration to not clash with Jinja2 
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1544
 2022-01-15 09:07:24 +02:00
Aaron Raimist
02c1756135
Upgrade Hydrogen (0.2.19 -> 0.2.23) 2022-01-14 19:31:30 +00:00
HarHarLinks
321ed9b609 Merge remote-tracking branch 'origin/master' into hookshot 2022-01-14 19:26:31 +01:00
HarHarLinks
df074151cd update default hookshot webhook mxid prefix 2022-01-14 19:24:37 +01:00
HarHarLinks
58b732a84d support hookshot permissions management 
see Half-Shot/matrix-hookshot#167
 2022-01-14 19:21:05 +01:00
IUCCA
49342bd3a7
added writable /tmp directory 2022-01-14 11:29:18 +01:00
Toni Spets
037bde73a6
Upgrade Heisenbridge (1.9.0 -> 1.10.0) 2022-01-14 11:53:03 +02:00
HarHarLinks
6f32db3063 fix matrix_hookshot_github_oauth_uri 2022-01-12 02:15:37 +01:00
HarHarLinks
8498ffd8f7 name hookshot github private key consistently 2022-01-12 01:28:38 +01:00
HarHarLinks
28c9e7aac2 fix hookshot commandPrefix jinja2 2022-01-12 01:26:17 +01:00
HarHarLinks
f12cad7a7b rename hookshot *.yaml to *.yml 2022-01-12 00:18:54 +01:00
HarHarLinks
23d6b2d3da update hookshot github private key path and install condition 2022-01-11 23:18:47 +01:00
HarHarLinks
964479d3d3 .gitkeep matrix-bridge-hookshot/files 
needed for users to put private-key.pem in
 2022-01-11 23:03:16 +01:00
HarHarLinks
3a766d4ba5 proxy hookshot metrics when proxying synapse metrics 
see also #1527
 2022-01-11 22:39:57 +01:00
HarHarLinks
8b19f56ef8 add hookshot config validation 2022-01-11 22:36:10 +01:00
HarHarLinks
206a093d56 fix hookshot docker image name 2022-01-11 22:35:57 +01:00
HarHarLinks
65991de61c update hookshot private key file mechanism 2022-01-11 01:30:57 +01:00
HarHarLinks
87871040df add hookshot metrics to internal prometheus 2022-01-11 00:56:51 +01:00
HarHarLinks
1987cc4839 refine hookshot role 2022-01-11 00:19:29 +01:00
Slavi Pantaleev
ac515b7f09 Fix incorrect variables being used 2022-01-10 15:11:14 +02:00
Slavi Pantaleev
29bc22a085 Add matrix_nginx_proxy_container_additional_networks 
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1498
 2022-01-10 11:51:57 +02:00
Slavi Pantaleev
7d96526b53
Merge pull request #1524 from GoMatrixHosting/gomatrixhosting-testing 
update new variable for matrix-awx, update documentation
 2022-01-10 08:02:48 +02:00
PC-Admin
e72ecf2c65 update new variable for matrix-awx, update documentation 2022-01-10 09:18:10 +08:00
Aine
4377c348c5
matrix-bot-honoroit: disable self-build by default, update to v0.9.1 2022-01-09 17:46:47 +02:00
Slavi Pantaleev
c12c224322
Merge pull request #1521 from HarHarLinks/webhooks_tag 
pin appservice-webhooks version v1.0.2-01
 2022-01-09 17:22:52 +02:00
HarHarLinks
b50494e5b3 pin appservice-webhooks version v1.0.2-01 2022-01-09 15:05:01 +01:00
Slavi Pantaleev
27a4871aea Fix variable name typo 2022-01-09 12:14:23 +02:00
Slavi Pantaleev
817d6833bf Try to fix self-building for honoroit (fix incorrect Dockerfile path) 
Hopefully fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1518
 2022-01-08 20:06:59 +02:00
HarHarLinks
ebf33f46b7 update hookshot passkey.pem path according to docs 
https://github.com/Half-Shot/matrix-hookshot/issues/133#issuecomment-1007541580
 2022-01-08 16:55:27 +01:00
HarHarLinks
912c238847 Upgrade Hookshot (1.0.0 -> 1.1.0) 2022-01-08 16:53:52 +01:00
HarHarLinks
495bfedc0d refine hookshot role using --test 2022-01-08 16:53:48 +01:00
Slavi Pantaleev
4e4fb98a65 Do not install fuse unless necessary 
Discussed here: https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1510
 2022-01-08 14:14:46 +02:00
Slavi Pantaleev
0f59c4056e Set up well-known when invoked with the setup-dendrite tag 2022-01-07 16:00:51 +02:00
Slavi Pantaleev
139c574cdb Move checks from unused validate_config.yml file elsewhere 2022-01-07 16:00:51 +02:00
Slavi Pantaleev
90c9801c56 Use ExecStopPost instead of ExecStop 
This is the equivalent of b1b4ba501f for the matrix-dendrite role.
 2022-01-07 16:00:51 +02:00
Slavi Pantaleev
61c0930325 Suppress output for ExecStartPre/ExecStop commands 
This brings matrix-dendrite.service in line with all the other services.
 2022-01-07 16:00:51 +02:00
Slavi Pantaleev
5c3c0d0d58 Set Dendrite's real_ip_header correctly 2022-01-07 16:00:51 +02:00
Slavi Pantaleev
05b4572fab Fix matrix_dimension_homeserver_federationUrl for Dendrite 2022-01-07 16:00:51 +02:00
Slavi Pantaleev
965890bf75 Derive secrets from matrix_homeserver_generic_secret_key, not matrix_synapse_macaroon_secret_key 
We're trying to move away from implementation-specific variables,
hoping for a clean (implementation-neutral) examples/vars.yml file.
 2022-01-07 16:00:42 +02:00
Slavi Pantaleev
1dfe21944f Make matrix_homeserver_implementation influence matrix_IMPLEMENTATION_enabled, not the other way around 
Doing this seems more reasonable and simpler.
 2022-01-07 15:59:35 +02:00
Slavi Pantaleev
4139290cc9 Rename some variables for consistency 2022-01-07 15:59:35 +02:00
Slavi Pantaleev
2bd33e5cf2 Make --tags=register-user work for both Dendrite/Synapse 
Also get rid of `--tags=update-user-password` in the
`matrix-dendrite` role, as what we had doesn't work.

We may be able to do it with some Ansible helper or something else.
For now, we'll omit this feature.
 2022-01-07 15:59:35 +02:00
Slavi Pantaleev
f8a8d7d310 Fix /usr/local/bin/matrix-dendrite-create-account 
We also need to fix `--tags=register-user`. This tag is currently
defined in both the `matrix-synapse` and `matrix-dendrite` roles.
 2022-01-07 15:59:35 +02:00
Slavi Pantaleev
b297e8ee2b Delay Dendrite startup so that matrix-postgres.service can start 2022-01-07 15:59:35 +02:00
Slavi Pantaleev
9f6e8f5eaf Remove matrix_s3 references from matrix-dendrite role 
All the `matrix_s3_*` stuff happens in the `matrix-synapse` role.

If we are to have such S3 support for Dendrite, we should probably
extract it out of the `matrix-synapse` role (into a `matrix-s3` role or
`matrix-goofys`, etc.) and wire `matrix-dendrite` accordingly.

This may or may not be done in the future though. For now, I'm
cleaning things up in the `matrix-dendrite` role.
 2022-01-07 15:59:35 +02:00
Slavi Pantaleev
3b9d5b13e9 Add support for not serving Dendrite federation APIs on the client port 
Seems like Dendrite encourages serving both the Client and Federation
API at the same port.

Coming from Synapse and how things are done there, we have separate
ports. Using separate ports probably makes matrix-corporal (etc.)
integration easier, so separating the APIs by default probably makes
sense.
 2022-01-07 15:59:35 +02:00
Slavi Pantaleev
ecc237bbad Initial work on getting nginx reverse proxying working with Dendrite 2022-01-07 15:59:35 +02:00
Slavi Pantaleev
2f57c51733 Remove useless check 
Since 025a5ab5e5, we do a similar check in matrix-base.
 2022-01-07 15:59:35 +02:00
Slavi Pantaleev
3cf9f87097 Add matrix_homeserver_implementation, tracking the current homeserver implementation 
The goal is to have a single variable which tells us which homeserver
software is in use. Much simpler than having if/elif/elif checks for
variables like (`matrix_synapse_enabled` and `matrix_dendrite_enabled`, etc.)
everywhere.
 2022-01-07 15:59:35 +02:00
Slavi Pantaleev
63968cb04f Upgrade Dendrite (0.5.0 -> 0.5.1) 2022-01-07 15:59:35 +02:00
Slavi Pantaleev
b2b62b7221 Add a variable to control Dendrite's disable_federation setting 2022-01-07 15:59:35 +02:00
Slavi Pantaleev
5b148921a0 Upgrade Dendrite (0.3.11 -> 0.5.0) and update configuration 
This brings dendrite.yaml up to date and cleans things up a bit.
 2022-01-07 15:59:35 +02:00
Slavi Pantaleev
ccd3dc7a57 Remove Dendrite file logging 
We refrain from logging to files for all components,
because we rely on systemd-journald anyway.
 2022-01-07 15:59:35 +02:00
Jip J. Dekker
953a9ac718 Upgrade Dendrite (0.3.9 -> 0.3.11) 2022-01-07 15:59:35 +02:00
Jip J. Dekker
cde2504966 Upgrade Dendrite (0.3.8 -> 0.3.9) 2022-01-07 15:59:35 +02:00
Aaron Raimist
265d048597 Upgrade Dendrite (0.3.6 -> 0.3.8) 2022-01-07 15:59:35 +02:00
Aaron Raimist
fc62537fcf Remove Synapse and Goofys stuff 2022-01-07 15:59:35 +02:00
Jip J. Dekker
07af05690c Add initial role for Dendrite as alternative Matrix server 2022-01-07 15:59:35 +02:00
rakshazi
2836667df2
self-build consistency: missing var 2022-01-07 13:21:41 +02:00
rakshazi
c191bf54ca
self-build consistency: add deprecation warnings 2022-01-07 13:17:39 +02:00
rakshazi
d9dd524db3
self-build consistency: rename vars everywhere 2022-01-07 12:18:45 +02:00
Slavi Pantaleev
b0c801a497 Rename variable for consistency (matrix_bot_honoroit_container_self_build -> matrix_bot_honoroit_container_image_self_build) 
Discussed in https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1514
 2022-01-07 11:53:24 +02:00
rakshazi
d66c812830
matrix-bot-honoroit: fix self-build 2022-01-07 09:06:25 +00:00
rakshazi
d7af37e9e9
matrix-bot-honoroit feedback 2022-01-07 09:41:52 +02:00
rakshazi
407e8c4940
added honoroit 2022-01-06 20:30:10 +02:00
HarHarLinks
b8ee1980ea refine hookshot role 2022-01-06 18:55:36 +01:00
Slavi Pantaleev
7dfb68b7f8 Add else statements to inline ifs 
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1509
 2022-01-06 11:05:02 +02:00
rakshazi
490f11ba0d
matrix-client-cinny: self_build feedback" 2022-01-06 09:11:28 +02:00
rakshazi
5788a16a2e
added matrix-client-cinny 2022-01-05 18:33:21 +02:00
Slavi Pantaleev
b1b4ba501f Replace ExecStop with ExecStopPost 
ExecStopPost should allow us to clean up (docker kill + docker rm)
even if the ExecStart (docker run ..) command failed, and not just after
a graceful service stop was initiated.

Source: https://www.freedesktop.org/software/systemd/man/systemd.service.html#ExecStopPost=
 2022-01-04 17:27:25 +02:00
Slavi Pantaleev
8515ac55e6 Upgrade nginx (1.21.4 -> 1.21.5) 2022-01-04 17:04:01 +02:00
Slavi Pantaleev
b3a9160e0f
Merge pull request #1497 from jimeh/etherpad-add-optional-admin-access 
feat(etherpad): add optional admin web-UI access
 2022-01-04 09:20:39 +02:00
Slavi Pantaleev
f0d7a8e99d
Use to_json 2022-01-04 09:18:31 +02:00
Slavi Pantaleev
3295eb15bf
Merge pull request #1500 from cnvandijk/deprecated-jitsi-interface-config 
Remove Jitsi web interface_config.js in favour of custom-interface_config.js
 2022-01-04 08:50:42 +02:00
Slavi Pantaleev
bd91230cf8
Merge pull request #1502 from aaronraimist/mautrix-twitter 
Update links to Mautrix Twitter bridge
 2022-01-04 08:48:09 +02:00
HarHarLinks
621251c1e5 hookshot role groundwork 2022-01-03 21:25:03 +01:00
HarHarLinks
c0f7c39f7d s/plabook/playbook 2022-01-03 18:34:21 +01:00
Aaron Raimist
dc96526475
Update links to Mautrix Twitter bridge 
Signed-off-by: Aaron Raimist <aaron@raim.ist>
 2022-01-03 01:05:13 +00:00
Chris van Dijk
bc5efa0dbc Remove Jitsi web interface_config.js in favour of custom-interface_config.js 
As of docker-jitsi-meet stable-6433 [1], `/config/interface_config.js`
is regenerated on every boot. The correct way to modify the interface
config is now via `/config/custom-interface_config.js`, which is
appended to a default copy of `interface_config.js` by
`/etc/cont-init.d/10-config` on every boot of the docker image.

Given that `interface_config.js` is considered deprecated by upstream
(all options will eventually be moved to `config.js`), we also deprecate
the `matrix_jitsi_web_interface_config_*` variables in favour of
`matrix_jitsi_web_custom_interface_config_extension`.

[1] https://github.com/jitsi/docker-jitsi-meet/blob/stable-6433/CHANGELOG.md#stable-6433
 2022-01-02 10:54:51 +01:00
Jim Myhrberg
993121e517
feat(etherpad): add optional admin web-UI access 
Enables optional access to Etherpad's web-UI. This is useful for
managing Etherpad plugins.

Among other things, plugins makes it easy to manage/delete pads if you
install the adminpads2 plugin.
 2022-01-01 03:12:14 +00:00
Slavi Pantaleev
948c411106 Remove sudo requirement for generating SSL certificates 
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1492
 2021-12-30 10:47:06 +02:00
Toni Spets
cdf76bdbb7
Upgrade Heisenbridge (1.8.2 -> 1.9.0) 2021-12-29 21:05:41 +02:00
Slavi Pantaleev
d166a90514
Merge pull request #1493 from SierraKiloBravo/allow-configuring-mautrix-telegram-name-templates 
Allow editing of MXID/dispname templates for mautrix-telegram users
 2021-12-29 10:19:49 +02:00
Slavi Pantaleev
908dc6c07a
Merge pull request #1491 from HarHarLinks/webhooks_fork 
switch appservice-webhooks fork
 2021-12-28 18:25:03 +02:00
HarHarLinks
c2f3586ac6 switch appservice-webhooks fork 
turt2live/matrix-appservice-webhooks -> redoonetworks/matrix-appservice-webhooks
 2021-12-28 17:12:28 +01:00
pushytoxin
1066baed38 Upgrade etherpad to 1.8.16 
Extend the config template with the lines added in the past year
 2021-12-28 15:02:28 +01:00
SierraKiloBravo
56e9ff1740 Added defaults and edited config template for mautrix-telegram, allowing editing of MXID/displayname templates for bridged users 2021-12-28 11:40:22 +01:00
Slavi Pantaleev
280c6c5424
Add |to_json 2021-12-27 21:45:13 +02:00
Alejo Diaz
297ed9ce36 Add encryption_enabled_by_default_for_room_type 
This commit simply add encryption_enabled_by_default_for_room_type
variable.

Signed-off-by: Alejo Diaz <xlejo@protonmail.com>
 2021-12-27 14:20:23 -03:00
Toni Spets
5df486f31e
Upgrade Heisenbridge (1.8.0 -> 1.8.2) 2021-12-25 18:05:41 +02:00
Slavi Pantaleev
dcab14d9a8 Add self-building support to Beeper LinkedIn bridge 
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1480

Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1242
 2021-12-23 13:04:09 +02:00
Toni Spets
061d6ac86f
Upgrade Heisenbridge (1.7.1 -> 1.8.0) 2021-12-22 19:04:21 +02:00
Slavi Pantaleev
f6f81a85de
Enable notifications during backfill 
.. as per the default bridge config.

Source: f848710c01/mautrix_twitter/example-config.yamll (L147)
 2021-12-22 15:27:35 +02:00
Shreyas Ajjarapu
ed0fcd618c
Update config.yaml.j2 2021-12-21 21:37:09 -06:00
Shreyas Ajjarapu
99b59f73f4
Merge branch 'spantaleev:master' into master 2021-12-21 21:36:09 -06:00
Catalan Lover
eb0c332f80
Update Synapse Version from 1.49.1 to 1.49.2 
This upgrade is technically not needed due to 1.49.1 and 1.49.2 being identical with a lone fix to Debian packaging being the only change. 

Still some might want us to be on the absolutely latest version even tho these 2 are practically identical.

ARM64 has yet to be built so this has to wait for that before merge.
 2021-12-21 19:29:56 +01:00
Shreyas Ajjarapu
bae375f3af
Merge branch 'spantaleev:master' into master 2021-12-21 09:32:16 -06:00
Catalan Lover
6c9f6c28de
Update Synapse from 1.49.0 to 1.49.1 
This update fixes a sync issue that would cause some users to experience sync issues that could cause initial sync to completely fail.
 2021-12-21 14:15:13 +01:00
Shreyas Ajjarapu
3509f648af
Update config.yaml.j2 2021-12-21 00:28:55 -06:00
Shreyas Ajjarapu
cddbb1ffa0
Update config.yaml.j2 2021-12-21 00:27:45 -06:00
Shreyas Ajjarapu
6a9775520b
Update validate_config.yml 2021-12-21 00:13:08 -06:00
Shreyas Ajjarapu
87bc9bd146
Update validate_config.yml 2021-12-20 23:36:05 -06:00
Shreyas Ajjarapu
3441e1a307
Merge branch 'spantaleev:master' into master 2021-12-20 23:25:39 -06:00
array-in-a-matrix
2d49b95006 missing uppercase in bot name 2021-12-20 16:55:15 -05:00
WobbelTheBear
dad1a23aa8
Update Element version (v1.9.7 -> v1.9.8) 2021-12-20 17:44:08 +01:00
Slavi Pantaleev
01b6bba9d7 Make Synapse's url_preview_accept_language default to 'en-US, en' 
Related to https://github.com/matrix-org/synapse/issues/11604

Getting an upstream fix is preferable. In any case, it's probably nice
to have this defined explicitly in our configuration. This way, people
can more easily discover that they can override the URL preview
language.
 2021-12-18 15:17:14 +02:00
SkepticalWaves
e8237ea37e
Update synapse-admin to newest tagged release 2021-12-17 15:23:44 -05:00
Slavi Pantaleev
afd7f03bb5 Minor comment changes 2021-12-17 17:30:40 +02:00
Slavi Pantaleev
fa704f104b Add support for using custom ACME CA servers (other than Let's Encrypt') 
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1468
 2021-12-17 17:30:21 +02:00
Slavi Pantaleev
4625b34acc Fix failure trying to stop orphaned systemd services 
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1461
 2021-12-17 17:18:35 +02:00
Alexander Bersenev
45119ea9df
Remove a space from XMPP_INTERNAL_MUC_DOMAIN 
The domain is invalid with space, so it shouldn't be here
 2021-12-17 05:47:47 +05:00
Slavi Pantaleev
d45d30cc3f
Merge pull request #1467 from GoMatrixHosting/gomatrixhosting-testing 
GoMatrixHosting v0.6.7
 2021-12-16 08:16:17 +02:00
PC-Admin
2579f6f49b add new defaults for AWX section 2021-12-16 07:51:27 +08:00
Slavi Pantaleev
60592fd6a8 Fix Jitsi logging.properties conditional being interpreted as Jinja code 
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1464
 2021-12-15 21:22:29 +02:00
Slavi Pantaleev
0f569df629
Merge pull request #1464 from sakkiii/jitsi-update 
Update Jitsi to stable-6726-1
 2021-12-15 17:46:24 +02:00
sakkiii
42cd4d2c8d crontab mount dir should exists 2021-12-15 20:14:47 +05:30
Slavi Pantaleev
a2cdc8b543
Merge pull request #1466 from sakkiii/patch-3 
Update coturn (4.5.2-r4 -> 4.5.2-r8)
 2021-12-15 15:24:37 +02:00
sakkiii
980c2b9a80
Update coturn (4.5.2-r4 -> 4.5.2-r8) 2021-12-15 18:35:13 +05:30
sakkiii
8a0c7913be
Grafana Updata (8.3.1 -> 8.3.3) 2021-12-15 18:33:09 +05:30
sakkiii
55860bf38f Jitsi update - sentry logging added 2021-12-15 18:23:29 +05:30
sakkiii
12832d8a68 jitsi update 2021-12-15 18:05:52 +05:30
PC-Admin
9b4e4477d9 Merge remote-tracking branch 'upstream/master' into gomatrixhosting-testing 2021-12-15 15:10:06 +08:00
PC-Admin
aef9a1ea1f GoMatrixHosting v0.6.7 2021-12-15 15:07:41 +08:00
Wm Salt Hale
3001b2d32d
Merge branch 'spantaleev:master' into default_room_version_9 2021-12-14 18:19:26 -08:00
Slavi Pantaleev
5be1310541 Upgrade Synapse (1.48.0 -> 1.49.0) 2021-12-14 16:54:35 +02:00
Matthew Cengia
2b83aeb87e Update Mautrix-Twitter image path 2021-12-14 22:36:23 +11:00
Matthew Cengia
cb608c06aa Remove references to sqlite 
Remove references to sqlite since we should just use postgres from the
outset.
 2021-12-14 22:36:23 +11:00
Matthew Cengia
68e6311a9f Update mautrix-twitter config to be Jinja2 template 
Updates based off the variable names used in mautrix-facebook role.

Also update port number in defauts/main.yml, and disable presence
checking, because Twitter doesn't support that.
 2021-12-14 22:36:23 +11:00
Matthew Cengia
8282ab48c7 Replace bridge config with one from upstream 
Source: 12f420ab95/mautrix_twitter/example-config.yaml
 2021-12-14 22:36:23 +11:00
Matthew Cengia
7afe8103da Find/replace Facebook with Twitter 
find roles/matrix-bridge-mautrix-twitter -type f -exec sed -i \
  -e 's/facebook/twitter/g' \
  -e 's/Facebook/Twitter/g' \
  -e 's/FB/Twitter/g' \
  -e 's/fb/twitter/g' {} +
 2021-12-14 22:36:23 +11:00
Matthew Cengia
e9e4d8f250 Rename mautrix-twitter systemd file 2021-12-14 22:36:23 +11:00
Matthew Cengia
6b9b824964 Copy matrix-bridge-mautrix-facebook as base for matrix-bridge-mautrix-twitter 2021-12-14 22:36:23 +11:00
rakshazi
1f0d56fb75
(Security fix) Update Element 1.9.6 -> 1.9.7 
Ref: https://matrix.org/blog/2021/12/13/disclosure-buffer-overflow-in-libolm-and-matrix-js-sdk
 2021-12-13 15:55:40 +00:00
ppacheco28
eca26e49e1 Update Jitsi to version stable-6727 2021-12-11 11:09:06 -03:00
laszabine
dd903ffcc2
Updated signald docker image path 2021-12-11 16:16:41 +00:00
SkepticalWaves
bbab82ee64
Fix email sending broken by #1406 2021-12-11 10:26:55 -05:00
AnonyPla
ece163b29f
Upgrade Mjolnir from 1.1.20 to version 1.2.1 (#1422) 
* Upgrade Mjolnir from 1.1.20 to version 1.2.1

https://hub.docker.com/r/matrixdotorg/mjolnir/tags

using the "latest" tag seems inefficient as it doesn't actually redirect to the latest release

In any case, the latest release is now 1.2.1

docker pull matrixdotorg/mjolnir:v1.2.1

* Fixup

Co-authored-by: Slavi Pantaleev <slavi@devture.com>
 2021-12-11 10:16:33 +02:00
Slavi Pantaleev
b1d8e39612
Merge pull request #1446 from hypn0tick/master 
Add support for creation of Jitsi internal authentication users in vars.yml
 2021-12-11 10:14:50 +02:00
Slavi Pantaleev
6568b68759
Fix validation message 
The check was checking for an empty string in `matrix_jitsi_prosody_auth_internal_accounts`,
which is unlikely to happen. We should check for an empty list instead.

The check was not validating username/password values, so telling the user that they need a non-empty
username/password is misleading. It was merely checking if there's at least one entry in the list.

This patch adjusts the check and message accordingly.
 2021-12-11 10:14:33 +02:00
ppacheco28
c116f268f2 Fixed type mismatch 2021-12-09 19:30:32 -03:00
Slavi Pantaleev
a9e222d523 Remove useless variable (matrix_appservice_webhooks_control_room_id) 
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1447

Seems like there's such a variable in the
`matrix-bridge-appservice-slack` role, which is probably where it got
copied over from.
 2021-12-09 19:46:20 +02:00
Slavi Pantaleev
f6238c9305
Merge pull request #1443 from aaronraimist/v3-again 
Run `workers-doc-to-yaml.sh`
 2021-12-09 15:48:59 +02:00
Slavi Pantaleev
9b6bb9cad7
Merge pull request #1444 from aaronraimist/patch-1 
Fix comments about `_database_*` variables
 2021-12-09 15:45:33 +02:00
ppacheco28
0c101f20c4 Fixed unnecessary checking of user attributes, added check for matrix_jitsi_enable_auth boolean 2021-12-09 07:54:40 -03:00
ppacheco28
4c25c1df06 Changed matrix_jitsi_prosody_auth_internal_accounts default to an empty array, removed unused configuration declaration, and moved jibri configuration back to its proper place 2021-12-09 07:50:31 -03:00
ppacheco28
a26abb2f1b Removed an empty line (formatting) 2021-12-09 07:44:50 -03:00
ppacheco28
6e38ce42d8 Added check before stopping service, fixed unnecessary checking of user attributes, and created sections to clarify the file's purpose 2021-12-09 07:40:25 -03:00
ppacheco28
d086668f52 Ensure internal authentication users are properly configured 2021-12-09 02:42:36 -03:00
ppacheco28
dd1feffcc2 Add support for Jitsi internal authentication user creation 2021-12-08 20:14:18 -03:00
ppacheco28
f2cd37685c Add support for Jitsi internal authentication user creation 2021-12-08 19:52:05 -03:00
John M
286871b9b5 Add self-build for Dimension 
Add a self-build option for the Dimension Dockerfile.
 - This helps further support arm64 hosts (i.e. A1.Flex w/Oracle)
 2021-12-08 04:48:59 -08:00
Aaron Raimist
fac497faa5
Fix comments in other roles 2021-12-08 10:13:12 +00:00
Aaron R
421b055cb5
Fix comment about matrix_mautrix_whatsapp_database_* variables 
Was renamed in 087dbe4ddc

It is unclear to me if there is anything you actually need to adjust with these variables. It looks like that is done automatically in `matrix_servers`.
 2021-12-08 04:09:09 -06:00
Aaron Raimist
0071828503
Run workers-doc-to-yaml.sh 
1472958e25 reverted some of the v3 changes. I'm not sure why. Running the `workers-doc-to-yaml.sh` script now puts them back 🤷‍♂️.
 2021-12-08 08:37:55 +00:00
Catalan Lover
18daf8f3da
Update Grafana from 8.3.0 to 8.3.1 due to Security Flaw 
https://grafana.com/blog/2021/12/07/grafana-8.3.1-8.2.7-8.1.8-and-8.0.7-released-with-high-severity-security-fix/
 2021-12-07 21:52:49 +01:00
Slavi Pantaleev
ff720bedce Upgrade matrix-postgres-backup default to v14 
Related to c08880d175
 2021-12-07 19:43:33 +02:00
WobbelTheBear
391e095cb9
Update main.yml 2021-12-06 19:56:13 +01:00
Slavi Pantaleev
9babaa5a2b Fix mx-puppet-discord media URLs using container-network URLs (http://matrix-nginx-proxy:12080) 2021-12-06 13:40:01 +02:00
Jan
20bc3eb24b Update signal bridge configuration template 2021-12-04 22:08:59 +01:00
Slavi Pantaleev
42352b491c
Merge pull request #1432 from wol-win/prometheus 
Update prometheus (v2.30.3 -> v2.31.1)
 2021-12-02 15:01:03 +02:00
Slavi Pantaleev
971a751a5e
Merge pull request #1433 from wol-win/redis 
Update redis (6.2.4 -> 6.2.6)
 2021-12-02 15:00:45 +02:00
WobbelTheBear
229b93d7c8
Update redis (6.2.4 -> 6.2.6) 2021-12-02 13:54:57 +01:00
WobbelTheBear
3f0e8122ec
Update prometheus 2021-12-02 13:41:12 +01:00
WobbelTheBear
27e1451cbc
Update main.yml 2021-12-02 13:31:57 +01:00
Slavi Pantaleev
d584b44f10 Upgrade matrix-corporal (2.2.1 -> 2.2.2) 2021-12-01 08:23:35 +02:00
Slavi Pantaleev
1472958e25 Upgrade Synapse (1.47.1 -> 1.48.0) 2021-11-30 16:35:23 +02:00
SkepticalWaves
8e1463a6a1
Update matrix-bridge-mautrix-telegram version 2021-11-28 21:59:33 -05:00
Slavi Pantaleev
61391647e9 Make /.well-known/matrix/client and /.well-known/matrix/server customizable 
We recently had someone need to inject additional configuration into
`/.well-known/matrix/client` as described here:
22b245bbd1/docs/bigbluebutton.md (have-dimension-create-meetings-with-elements-video-call-button)

There may be other use cases as well.
 2021-11-26 15:28:03 +02:00
Slavi Pantaleev
cfc79ebe29 Upgrade exim-relay (4.94.2-r0-5 -> 4.95-r0) 2021-11-25 09:21:05 +02:00
Slavi Pantaleev
3a9fe48deb Make matrix-nginx-proxy's X-Forwarded-For header customizable 
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1393
 2021-11-24 11:32:06 +02:00
PC-Admin
37191d98c5 GoMatrixHosting v0.6.6 2021-11-24 10:43:25 +08:00
Toni Spets
e8a57ad432 Upgrade Heisenbridge (1.7.0 -> 1.7.1) 2021-11-23 15:03:09 +02:00
Slavi Pantaleev
6b07ee3b58 Upgrade Synapse (1.47.0 -> 1.47.1) - security fixes 
Learn more here: https://github.com/matrix-org/synapse/releases/tag/v1.47.1
 2021-11-23 14:50:07 +02:00
WobbelTheBear
e11e31e2c6
Update main.yml 2021-11-22 16:53:20 +01:00
Slavi Pantaleev
fc751f0330 Upgrade exim-relay (4.94.2-r0-4 -> 4.94.2-r0-5) 2021-11-20 09:31:04 +02:00
Slavi Pantaleev
2734adfb4e Upgrade matrix-corporal (2.2.0 -> 2.2.1) 2021-11-20 09:28:27 +02:00
Slavi Pantaleev
3b27ce2ff6
Merge pull request #1404 from aaronraimist/v3 
Allow workers to serve new v3 APIs
 2021-11-19 10:54:47 +02:00
Slavi Pantaleev
2e73dac39f Upgrade matrix-corporal (2.1.4 -> 2.2.0) 
There was also a 2.1.5 security release made today.
2.2.0 contains the same security fix + more.

Both make handling of Client-Server API v3-prefixed requests better.

Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1404
 2021-11-19 10:53:09 +02:00
Toni Spets
110d91b06e Upgrade Heisenbridge (1.6.0 -> 1.7.0) 2021-11-18 13:05:30 +02:00
rakshazi
d41e9230da
expose smtp_user and smtp_pass to ansible configs (role: matrix-synapse) 2021-11-17 21:34:46 +02:00
Slavi Pantaleev
e1a6d1e4b2 Upgrade Synapse (1.46.0 -> 1.47.0) 
We had to remove UID/GID environment variables that we used to pass
to the Synapse container, because it was causing a problem after
https://github.com/matrix-org/synapse/pull/11209

We were using both `--user` and UID/GID environment variables until now.
 2021-11-17 17:21:15 +02:00
Aaron Raimist
f8fe68b385
Allow workers to serve new v3 APIs 
1f196f59cb
 2021-11-17 14:54:49 +00:00
Slavi Pantaleev
75cb4ce3b0 Add warning about matrix_ma1sd_default_port being renamed 
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1403
 2021-11-17 10:38:52 +02:00
Slavi Pantaleev
b4fb819481
Merge pull request #1403 from borisrunakov/rename-matrix-ma1sd-default-port 
remove default from variable name
 2021-11-17 10:35:54 +02:00
Slavi Pantaleev
6bbc2054b8
Merge pull request #1402 from borisrunakov/matrix-synapse-container-client-api-port 
make 8008 configurable
 2021-11-17 10:34:40 +02:00
boris runakov
394ecb0acc remove default from variable name 2021-11-16 21:14:28 +02:00
boris runakov
d3a9ec98de refactoring 2021-11-16 21:03:21 +02:00
Slavi Pantaleev
5fc533eca5
Merge pull request #1400 from IUCCA/master 
Updated Mautrix-WhatsApp config
 2021-11-16 15:50:06 +02:00
iucca
949ae80117 added server_map variable and renamed secret_map 2021-11-16 14:22:06 +01:00
iucca
b272e6147a Resolved server_map 2021-11-16 13:37:11 +01:00
boris runakov
1ec67f49b0 replaced 8008 where possible 2021-11-15 22:43:05 +02:00
IUCCA
adf2dc13b3
Update main.yml 2021-11-15 19:27:49 +01:00
iucca
3535c97117 updated whatsapp config 2021-11-15 19:25:08 +01:00
iucca
ae122466fc updated whatsapp config 2021-11-15 19:23:28 +01:00
Slavi Pantaleev
e72ae8bc48 Upgrade matrix-corporal (2.1.3 -> 2.1.4) 2021-11-15 17:23:25 +02:00
Slavi Pantaleev
c1bc7b9f93 Rename variables to prevent confusion 
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1397
and https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1399
 2021-11-15 14:56:11 +02:00
Slavi Pantaleev
ba48aa70f7 Fix variable name typo 
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1397
 2021-11-15 14:52:08 +02:00
Slavi Pantaleev
dc4452ac21
Merge branch 'master' into matrix-federation-api-port 2021-11-15 14:49:03 +02:00
Slavi Pantaleev
edf63bfdd7
Add some to_json invocations 2021-11-15 14:48:25 +02:00
Slavi Pantaleev
994c0e504c Ensure some matrix-nginx-proxy variables are defined 
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1397
 2021-11-15 14:46:44 +02:00
Slavi Pantaleev
0152ecef1c
Merge pull request #1397 from borisrunakov/synapse_container_federation_port 
Synapse container federation port
 2021-11-15 14:45:34 +02:00
boris runakov
8c3e25de1b renamed var to matrix_synapse_container_federation_api_port 2021-11-15 13:01:22 +02:00
boris runakov
28d9c3192e Merge branch 'master' into matrix-federation-api-port 2021-11-15 12:49:47 +02:00
b
07496069c8 rellocating variables for consistency 2021-11-15 12:07:54 +02:00
Slavi Pantaleev
0d4764a213 Upgrade matrix-corporal (2.1.2 -> 2.1.3) 
2.1.3 fixes a security vulnerability, which allowed attackers to
circuimvent policy checks by sending HTTP requests with trailing slashes.

Learn more in the matrix-corporal changelog: https://github.com/devture/matrix-corporal/blob/master/CHANGELOG.md
 2021-11-15 11:24:12 +02:00
Slavi Pantaleev
c08880d175 Upgrade postgres-backup to v14 2021-11-15 09:15:44 +02:00
Slavi Pantaleev
10523b700c
Merge pull request #1396 from aaronraimist/postgres 
Postgres Minor Updates (14.1, 13.5, 12.9, 11.14, 10.19)
 2021-11-15 08:35:26 +02:00
Slavi Pantaleev
8abe1ac483 Warn people if on an old SQLite-supporting mautrix-facebook version 
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1401

https://github.com/mautrix/facebook/releases/tag/v0.3.2 says that this
version re-adds SQLite support.
 2021-11-15 08:28:20 +02:00
Arthur Brugière
708a7108b3
Upgrade Mautrix Facebook bridge version 2021-11-15 10:29:13 +07:00
iucca
4ff8fddd72 updated whatsapp config, backfill doesn't work 2021-11-14 23:57:52 +01:00
iucca
1d0e594def updated whatsapp config, backfill doesn't work 2021-11-14 23:45:07 +01:00
b
afccc2b11f make 8448 configurable instead of hard coded 2021-11-14 23:32:25 +02:00
Aaron Raimist
61b743f86d
Postgres Minor Updates (14.1, 13.5, 12.9, 11.14, 10.19) 2021-11-14 19:10:56 +00:00
b
5e97f5a4e6 fixed matrix_dimension_homeserver_federationUrl 2021-11-14 20:57:27 +02:00
b
7756cc4c8e replace port 8048 with matrix_synapse_container_default_federation_port 2021-11-14 20:30:13 +02:00
JokerGermany
c0656448f7 Port 80 for IPv6 2021-11-13 01:18:22 +01:00
Toni Spets
f01b9c3865 Upgrade Heisenbridge (1.5.0 -> 1.6.0) 2021-11-12 04:50:29 +02:00
Slavi Pantaleev
c4d2c8394c Abort if on an unsupported Postgres version (v9.6) 
Official support ends today (2021-11-11).
Synapse still supports v9.6, but we'd better force users to transition
to newer versions anyway.
 2021-11-11 15:42:34 +02:00
sakkiii
cd26af2f6f
Certbot Update (v1.20.0 -> v1.21.0) 2021-11-10 22:58:45 +05:30
sakkiii
7a4f49c457
Nginx Minio Update (1.21.3 -> 1.21.4) 2021-11-10 22:52:23 +05:30
Slavi Pantaleev
735c966ab6 Disable systemd services when stopping to uninstall them 
Until now, we were leaving services "enabled"
(symlinks in /etc/systemd/system/multi-user.target.wants/).

We clean these up now. Broken symlinks may still exist in older
installations that enabled/disabled services. We're not taking care
to fix these up. It's just a cosmetic defect anyway.
 2021-11-10 17:39:21 +02:00
teutat3s
367cddb715
Upgrade Element (v1.9.4) 2021-11-09 15:01:18 +01:00
Slavi Pantaleev
143b0f26d9 Restore usage of some _environment_variables_extension Jitsi variables 
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1377

Regresion since https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1139
 2021-11-08 10:34:09 +02:00
b
6eaa8ac65a add server_name to matrix-synapsel.conf only if matrix_nginx_proxy_enabled 2021-11-05 15:31:10 +02:00
Toni Spets
09ac6a0e8c Upgrade Heisenbridge (1.4.1 -> 1.5.0) 2021-11-05 10:31:31 +02:00
Slavi Pantaleev
7b8b595e81 Upgrade Synapse (1.45.1 -> 1.46.0) 2021-11-02 17:42:13 +02:00
Slavi Pantaleev
dae117c91b Bump Hydrogen (0.2.7 -> 0.2.19) 2021-11-02 15:57:18 +02:00
Slavi Pantaleev
4586efebd7
Merge pull request #1369 from borisrunakov/configurable-ma1sd-port 
change port 8090 to matrix_ma1sd_default_port
 2021-11-01 10:50:14 +02:00
Slavi Pantaleev
0434e3bf8f Allow force-patching webpack.config.js when self-building Element 
We were applying the low-memory system patch to webpack.config.js
on systems with < 4GB memory.

From now on, we also let people force-enable patching by toggling the
`matrix_client_element_container_image_self_build_low_memory_system_patch_enabled`
variable.

Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1357
 2021-11-01 09:08:18 +02:00
b
dcda17595a change port 8090 to matrix_ma1sd_default_port 2021-10-31 21:06:22 +02:00
Toni Spets
17fc055d53
Upgrade Heisenbridge (1.4.0 -> 1.4.1) 2021-10-31 18:31:31 +02:00
PC-Admin
c6c68e00a4 merge upstream 2021-10-31 08:56:48 +08:00
Patrick C. F. Ernzer
65182ea0f2 fixes #1365 
docker-ce does not like quotes around the shm-size value
 2021-10-30 13:13:30 +02:00
Slavi Pantaleev
fc593bc8ab Increase shm-size for Postgres container to fix VACUUM 
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1268

Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1364

Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1362
 2021-10-30 09:53:56 +03:00
Slavi Pantaleev
c8a8035de4 Make it possible to self-build Element on low-memory devices (<4G RAM) 
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1357
 2021-10-29 11:13:01 +03:00
Slavi Pantaleev
39fa852ed6 Remove unnecessary if checks 
Should have been done in 63f5a88fa0.
 2021-10-29 10:41:11 +03:00
Slavi Pantaleev
63f5a88fa0 Separate install/uninstall tasks for Element and Hydrogen 2021-10-29 10:29:54 +03:00
Toni Spets
124b9608fc Upgrade Heisenbridge (1.3.0 -> 1.4.0) 2021-10-28 21:07:11 +03:00
Thom Wiggers
32f15e9bf0
update IRC appservice 
https://github.com/matrix-org/matrix-appservice-irc/releases/tag/0.32.1
 2021-10-28 15:21:58 +02:00
sakkiii
0231302db9
Upgrade grafana (8.1.4 -> 8.2.2) 2021-10-27 23:14:14 +05:30
sakkiii
d09609b3bd
Update prometheus (2.29.2 -> 2.30.3) 2021-10-27 23:11:01 +05:30
throwawayay
d31cdb071a
Upgrade Element (v1.9.3) 
https://github.com/vector-im/element-web/releases/tag/v1.9.3
 2021-10-25 12:44:58 -04:00
Slavi Pantaleev
06bcdcf9d2
Merge pull request #1311 from HarHarLinks/master 
add auto proxy synapse worker metrics
 2021-10-25 09:21:11 +03:00
Kim Brose
5f6bbafa17
fix space before tab in indent 2021-10-24 16:00:42 +02:00
Toni Spets
d7af78066b Upgrade Heisenbridge (1.2.1 -> 1.3.0) 2021-10-21 19:55:13 +03:00
Slavi Pantaleev
09ac950d17 Fix dump importing (backup restore) into Postgres v14 
In short, the problem is that older Postgres versions store passwords
hashed as md5. When you dump such a database, the dump naturally also
contains md5-hashed passwords.
Restoring from that dump used to create users and updates their passwords
with these md5 hashes.
However, Postgres v14 prefers does not like md5-hashed passwords now (by default),
which breaks connectivity. Postgres v14 prefers `scram-sha-256` for
authentication.

Our solution is to just ignore setting passwords (`ALTER ROLE ..`
statements) when restoring dumps. We don't need to set passwords as
defined in the dump anyway, because the playbook creates users
and manages their passwords by itself.

Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1340
 2021-10-21 16:38:56 +03:00
PC-Admin
7f140e9be2 Merge remote-tracking branch 'upstream/master' into gomatrixhosting-testing 2021-10-21 10:27:45 +08:00
PC-Admin
725150565a GoMatrixHosting v0.6.3 hotfix2 2021-10-21 10:25:23 +08:00
Slavi Pantaleev
86614d6357
Merge pull request #1345 from GoMatrixHosting/gomatrixhosting-testing 
GoMatrixHosting v0.6.3 [hotfix]
 2021-10-20 17:04:55 +03:00
Slavi Pantaleev
5dc2868269 Upgrade Synapse (1.45.0 -> 1.45.1) 2021-10-20 15:08:07 +03:00
HarHarLinks
7b33fc8e19 fixup! auto-generate prometheus.yml for workers metrics 2021-10-20 13:30:38 +02:00
HarHarLinks
ce41674e61 auto-generate prometheus.yml for workers metrics 2021-10-20 12:51:00 +02:00
HarHarLinks
4209c4208c add own variable for worker metrics 
https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1311#issuecomment-945718866
 2021-10-20 12:51:00 +02:00
PC-Admin
75cfad57ca GoMatrixHosting v0.6.3 hotfix 2021-10-20 18:00:55 +08:00
Slavi Pantaleev
1dab178a44 Upgrade Synapse (1.44.0 -> 1.45.0) 2021-10-19 16:25:00 +03:00
PC-Admin
d65607c48f Merge remote-tracking branch 'upstream/master' into gomatrixhosting-testing 2021-10-19 17:48:23 +08:00
PC-Admin
18395e73d3 GMH v0.6.3 2021-10-19 17:45:15 +08:00
Slavi Pantaleev
5284afc60e
Merge pull request #1333 from Samonitari/add-support-for-suse-linux 
Add support for suse linux
 2021-10-15 09:50:02 +03:00
Slavi Pantaleev
8c15555d00 Upgrade Element (1.9.0 -> 1.9.2) 2021-10-15 09:27:26 +03:00
Wm Salt Hale
a1cbd5459c
Update Synapse default room version (6 -> 9) 
From the [Synapse 1.43.0 release highlights](https://matrix.org/blog/2021/09/21/synapse-1-43-0-released):
> Asks clients to prefer [room version 9](https://github.com/matrix-org/matrix-doc/pull/3375) when creating restricted rooms ([#10772](https://github.com/matrix-org/synapse/issues/10772)), via the API defined in [MSC3244: room version capabilities](https://github.com/matrix-org/matrix-doc/pull/3244).
 2021-10-12 09:49:16 -07:00
Luke
1dac525e63 Added Mautrix Google Chat 2021-10-12 11:45:04 +00:00
Slavi Pantaleev
fb709152f3 Add self-building support for mautrix-whatsapp 
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1322
 2021-10-12 10:02:07 +03:00
Slavi Pantaleev
0c21b5a055
Merge pull request #1326 from GoMatrixHosting/gomatrixhosting-testing 
GoMatrixHosting v0.6.2
 2021-10-12 08:53:11 +03:00
Michael Collins
fc0296b56e update element section 2021-10-12 12:20:53 +08:00
Aaron R
25d0ae7b67
Update matrix-appservice-slack (1.5.0 -> 1.8.0) 
I am not using this bridge and haven't tested this but multiple people have said 1.5.0 isn't working and 1.8.0 works for them so it seems to make sense to update.

https://github.com/matrix-org/matrix-appservice-slack/issues/618#issuecomment-929849093
 2021-10-11 18:36:07 -05:00
Michael Collins
c630bc3eaa update element section 2021-10-11 15:13:09 +08:00
Michael Collins
46cba52e79 update element section 2021-10-11 15:00:11 +08:00
Michael Collins
b4654f8992 update element section 2021-10-11 14:53:52 +08:00
Michael Collins
927633321a update element section 2021-10-11 13:34:46 +08:00
Michael Collins
676ba70971 update element section 2021-10-11 12:57:16 +08:00
Michael Collins
53f4b84d1f update element section 2021-10-11 12:55:49 +08:00
Michael Collins
8ff0ae27b8 update element section 2021-10-11 12:15:15 +08:00
Michael Collins
9f0a8965d5 update element config 2021-10-11 11:43:58 +08:00
Michael Collins
36883150c6 update 2021-10-11 11:30:30 +08:00
Michael Collins
291efc1163 update element section 2021-10-11 11:20:28 +08:00
Michael Collins
6a8799afcc wrap brand variable in single quotes too 2021-10-11 10:55:39 +08:00
Michael Collins
85bc12d14c saner handling of background variable 2021-10-11 10:37:02 +08:00
Michael Collins
79acf6fc7e update conditionals 2021-10-11 10:30:12 +08:00
Michael Collins
a352ea4674 derp 2021-10-11 10:23:37 +08:00
Michael Collins
1ae103bbbe stop configure element from double wrapping this 2021-10-11 10:07:34 +08:00
Michael Collins
89c8ae94d6 update 2021-10-10 16:16:31 +08:00
Michael Collins
a631587ebd this isnt needed 2021-10-10 14:44:27 +08:00
Michael Collins
07a5433c24 fix lineinfile 2021-10-10 14:39:36 +08:00
Michael Collins
dd6e643581 first round of variable name changes 2021-10-10 14:10:06 +08:00
Michael Collins
175bdb100b first round of variable name changes 2021-10-10 13:23:49 +08:00
Michael Collins
6b9af38228 update? 2021-10-10 09:19:01 +08:00
Michael Collins
f4410514f5 update variable names 2021-10-09 15:45:49 +08:00
Michael Collins
de084c4d4d fix variable name change 2021-10-09 15:43:47 +08:00
Michael Collins
fb23c7b697 Merge remote-tracking branch 'upstream/master' into gomatrixhosting-testing 2021-10-09 15:38:32 +08:00
Michael Collins
a60a43cb08 change naming scheme of variables that feature in deploy. 2021-10-09 15:21:10 +08:00
Michael Collins
42af090a7c update naming scheme 1 2021-10-09 10:21:27 +08:00
Michael Collins
df9da052ab fix conditional 2021-10-09 09:24:39 +08:00
Michael Collins
384dfdce4b update? 2021-10-09 08:58:10 +08:00
Samonitari
6f99f95aa2 Merge branch 'master' of https://github.com/spantaleev/matrix-docker-ansible-deploy into add-support-for-suse-linux 2021-10-08 10:27:32 +02:00
Michael Collins
b0d56f6c18 update conditionals 2021-10-08 14:28:37 +08:00
Michael Collins
208dce51d8 add new survey entries for welcome page link, headline and text 2021-10-08 14:18:59 +08:00
Michael Collins
0f4cb513b8 update survey 2021-10-08 13:16:09 +08:00
Michael Collins
8d9d176c36 update? 2021-10-07 13:29:55 +08:00
Michael Collins
d1754915d1 improve conditional 2021-10-07 12:53:32 +08:00
Michael Collins
ecc0437520 add logo section 2021-10-07 12:49:59 +08:00
Slavi Pantaleev
2bf052369d Upgrade certbot (v1.19.0 -> v1.20.0) 2021-10-06 15:14:38 +03:00
Slavi Pantaleev
278bbae4d5 Upgrade Synapse (1.43.0 -> 1.44.0) 2021-10-05 17:13:21 +03:00
Slavi Pantaleev
bad2c5296e
Merge pull request #1312 from HarHarLinks/patch-4 
add how to generate htpasswd
 2021-10-05 11:29:44 +03:00
Michael Collins
e3183ba267 Merge remote-tracking branch 'upstream/master' into gomatrixhosting-testing 2021-10-05 11:39:07 +08:00
Kim Brose
1ba7760ea4
add how to generate htpasswd 
for matrix_nginx_proxy_proxy_synapse_metrics_basic_auth_key
resolves #1308
 2021-10-04 22:18:05 +02:00
HarHarLinks
d9fa2f7ed4 add auto proxy synapse worker metrics 
when matrix_nginx_proxy_proxy_synapse_metrics is enabled
 2021-10-04 21:44:50 +02:00
Michael Collins
40506d5c5a no log 2021-10-02 12:43:14 +08:00
Slavi Pantaleev
b5d8444764 Add self-building support to matrix-bridge-appservice-webhooks 2021-10-01 16:37:37 +03:00
Michael Collins
c8744ef9a9 update deploy role for new awx token authentication method 2021-10-01 18:56:38 +08:00
Slavi Pantaleev
096c960b84 Add support for Postgres v14 2021-10-01 11:27:40 +03:00
Slavi Pantaleev
256d3ffec5
Merge pull request #1304 from apmechev/update-linkedin-0.5.1 
Upgrade LinkedIn (0.5.0 -> 0.5.1)
 2021-10-01 10:15:08 +03:00
Toni Spets
3119ef4574 Upgrade Heisenbridge (1.2.0 -> 1.2.1) 2021-09-30 08:42:58 +03:00
Slavi Pantaleev
b4b14539a7 Use ntp (instead of systemd-timesyncd) on Ubuntu 18.04 
Seems like Ubuntu 18.04 does not have a dedicated `systemd-timesyncd` package, nor
does it include the `systemd-timesyncd` binary in the main `systemd` package.

Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1302

Regression since https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1192
 2021-09-28 13:38:27 +03:00
Alexandar Mechev
f02c08dc7f Upgrade LinkedIn (0.5.0 -> 0.5.1) 2021-09-28 11:07:43 +02:00
Oli
59d4532efb
Upgrade Element (1.8.5 -> 1.9.0) 2021-09-28 07:40:00 +02:00
Jan
0ed585baa7
Archlinux: remove package systemd-timesyncd 
#1192 lead to the following error for me on Archlinux:
`TASK [matrix-base : Install host dependencies] *******************************************************************************************************************************
fatal: [matrix.***.de]: FAILED! => changed=false 
  msg: |-
    failed to install systemd-timesyncd: error: target not found: systemd-timesyncd`

There is no package called `systemd-timesyncd` on Archlinux. The service is installed with the [`systemd`](https://archlinux.org/packages/core/x86_64/systemd/) package itself.

I suggest removing the `systemd-timesyncd` from 2453876eb9/roles/matrix-base/tasks/server_base/setup_archlinux.yml (L7)
 2021-09-26 11:48:03 +02:00
Slavi Pantaleev
31396f0615
Merge pull request #1295 from nogweii/feat-support-upstream-https-forwarded 
Support trusting the upstream server when it says the protocol is HTTPS
 2021-09-26 09:54:15 +03:00
Slavi Pantaleev
4f841a7001
Merge pull request #1192 from sakkiii/patch-1 
migrate from ntp to systemd-timesyncd for ubuntu & Archlinux
 2021-09-25 10:15:40 +03:00
Slavi Pantaleev
62ce06e28c
Merge pull request #1298 from GoMatrixHosting/gomatrixhosting-testing 
GoMatrixHosting v0.6.0
 2021-09-25 09:35:53 +03:00
Michael Collins
9a4187c852 Merge remote-tracking branch 'upstream/master' into gomatrixhosting-testing 2021-09-25 10:56:26 +08:00
Aaron Raimist
a676b5358c
Fix hydrogen OCSP typo 
From 6f80292745
 2021-09-24 20:09:06 -05:00
Colin Shea
2578ca4cee rename matrix_nginx_proxy_x_forwarded_header_value -> matrix_nginx_proxy_x_forwarded_proto_value 2021-09-24 05:22:30 -07:00
Colin Shea
d0cd67044e replace $scheme with X-Forwarded-Proto when enabled 2021-09-24 05:14:38 -07:00
Toni Spets
ff63f4efce Upgrade Heisenbridge (1.1.1 -> 1.2.0) 2021-09-23 10:18:46 +03:00
Michael Collins
33c471477f remove commented section 2021-09-22 09:44:52 +08:00
Slavi Pantaleev
7934cde90f Upgrade Synapse (1.42.0 -> 1.43.0) 
Related to:

- https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1287
- https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1288

.. but does it in a more complete way
 2021-09-21 18:17:50 +03:00
Slavi Pantaleev
35153093fc
Merge pull request #1283 from wol-win/irc-update 
Update irc bridge version (release-0.30.0 -> release-0.31.0)
 2021-09-21 10:51:11 +03:00
WobbelTheBear
d82b98a522
Upgrade mjolnir (v0.1.19 -> v1.1.20) 
Upgrade mjolnir (v0.1.19 -> v1.1.20)

Remark: interesting version number increase :-)
 2021-09-20 16:53:13 +02:00
WobbelTheBear
f542a3a7c8
Update release (release-0.30.0 -> release-0.31.0) 
Update release (release-0.30.0 -> release-0.31.0)
 2021-09-20 16:49:30 +02:00
Michael Collins
6902ee5aa7 add rotate ssh module to matrix-awx 2021-09-19 17:12:12 +08:00
Toni Spets
8b9c7b18ac Upgrade Heisenbridge (1.1.0 -> 1.1.1) 2021-09-17 21:31:02 +03:00
sakkiii
255cb97c41
Upgrade grafana (8.1.3 -> 8.1.4) 2021-09-17 15:50:06 +05:30
Slavi Pantaleev
b166f0175a Upgrade Element (1.8.4 -> 1.8.5) 2021-09-15 09:36:21 +03:00
sakkiii
3055b3996e
Updates Certbot -> v1.19.0, nginx ->1.21.3-alpine 2021-09-14 16:51:01 +05:30
Toni Spets
4adbefab82 Upgrade Heisenbridge (1.0.1 -> 1.1.0) 2021-09-14 11:17:28 +03:00
Krisztian Szegi
f364fba182 Fix tripping on timesync setup 2021-09-14 08:35:20 +02:00
Slavi Pantaleev
4b46913278 Upgrade Element (1.8.2 -> 1.8.4) to patch a security issue 
See:
- https://github.com/vector-im/element-web/releases/tag/v1.8.4
- https://matrix.org/blog/2021/09/10/pre-disclosure-upcoming-critical-fix-for-several-popular-matrix-clients
 2021-09-13 16:24:09 +03:00
Aaron Raimist
f7e614b644
Add comment explaining why this step goes here 2021-09-11 20:44:00 -05:00
Aaron Raimist
82641092a7
Revert "Move some related tasks closer together in matrix-client-hydrogen" 
This reverts commit e913347fe1.
 2021-09-11 20:43:08 -05:00
WobbelTheBear
df13ea5f14
Upgrade grafana (8.1.2 -> 8.1.3) (#1269) 
Upgrade grafana (8.1.2 -> 8.1.3)
 2021-09-09 09:33:22 +03:00
Slavi Pantaleev
0faad74a44 Upgrade Synapse (1.41.1 -> 1.42.0) 2021-09-07 20:44:18 +03:00
Michael Collins
8339103594 revert unneeded changes 2021-09-04 15:08:07 +08:00
Michael Collins
ca705cf9dd Merge remote-tracking branch 'upstream/master' into testing 2021-09-04 14:24:13 +08:00
sakkiii
ae6caf158a
Added variable matrix_nginx_proxy_request_timeout (#1265) 
* add timeout param for nginx proxy

default value matrix_nginx_proxy_request_timeout is 60s

* default matrix_nginx_proxy_request_timeout - 60s

* few more variables for request timeout

* Update nginx.conf.j2

* Update nginx.conf.j2
 2021-09-03 10:00:45 +03:00
Slavi Pantaleev
a911207854 Revert "nginx update v1.21.2" 
This reverts commit 732051b8fc.

There's no such container image published yet.
 2021-09-03 09:07:58 +03:00
Slavi Pantaleev
115f365860
Merge pull request #1263 from hifi/feature/heisenbridge-1.0.1 
Bump Heisenbridge to v1.0.1
 2021-09-03 08:43:01 +03:00
sakkiii
732051b8fc
nginx update v1.21.2 
http://nginx.org/en/CHANGES
 2021-09-03 10:46:21 +05:30
Toni Spets
c228343339 Bump Heisenbridge to v1.0.1 2021-09-03 07:58:48 +03:00
Slavi Pantaleev
e913347fe1 Move some related tasks closer together in matrix-client-hydrogen 2021-09-01 16:47:43 +03:00
Slavi Pantaleev
d384d0d7a0 Upgrade Element (1.8.1 -> 1.8.2) 2021-09-01 11:14:04 +03:00
Slavi Pantaleev
1c9124e3b7
Merge pull request #1260 from aaronraimist/self-build 
Pull correct version when self building Mautrix Facebook and Synapse Admin
 2021-08-31 17:30:49 +03:00
Aaron Raimist
3ab01a5f9e
Pull correct version when self building Mautrix Facebook and Synapse Admin 2021-08-31 08:43:52 -05:00
Catalan Lover
777ba6bc5a
Upgrade to Synaspe v 1.41.1 (Security Update) 
Synapse 1.41.1 Patches 2 exploits that can reveal information about rooms an user is not supposed to have access to information about.
 2021-08-31 14:54:23 +02:00
sakkiii
2453876eb9
Update main.yml 2021-08-31 16:24:26 +05:30
sakkiii
087a5d62f1
systemd-timesyncd for any archlinux version 2021-08-31 15:53:59 +05:30
Slavi Pantaleev
7fc1a94c30
Merge pull request #1258 from sakkiii/jitsi-fix 
Jitsi Update (stable-5963 -> stable-6173)
 2021-08-30 10:41:00 +03:00
Slavi Pantaleev
9d06dd61a6 Upgrade exim-relay (4.94.2-r0-3 -> 4.94.2-r0-4) 2021-08-30 10:09:51 +03:00
sakkiii
510f299c04 Syntex fixed 2021-08-29 21:43:39 +05:30
sakkiii
465d436b1b
Merge branch 'spantaleev:master' into jitsi-fix 2021-08-29 19:35:09 +05:30
sakkiii
a43b109653 Jitsi Update stable-5963 2021-08-29 19:34:30 +05:30
sakkiii
6feb99076a
Update Coturn (4.5.2-r3 -> 4.5.2-r4) 2021-08-29 15:40:00 +05:30
WobbelTheBear
972077aa33
Update prometheus (2.29.1 -> 2.29.2) 
Update prometheus (2.29.1 -> 2.29.2)
 2021-08-27 16:51:38 +02:00
Slavi Pantaleev
ad3d2a5aee
Merge pull request #1252 from sakkiii/patch-4 
mjolnir & hydrogen Minor Updates
 2021-08-25 20:23:57 +03:00
sakkiii
e4ea32b89f
Hydrogen v0.2.7 2021-08-25 22:49:12 +05:30
sakkiii
44709465c9
mjolnir releases v0.1.19 2021-08-25 22:45:21 +05:30
sakkiii
86f5ba8348
Grafana Grafana v8.1 2021-08-25 22:43:07 +05:30
Slavi Pantaleev
a4db9557db Update homeserver.yaml to match the one in Synapse v1.41.0 
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1247
 2021-08-25 09:51:50 +03:00
Slavi Pantaleev
bb0e59de48
Merge pull request #1250 from wol-win/worker_trial 
Endpoint changes for Client and media API due to migration to 1.41.0
 2021-08-25 09:37:43 +03:00
Slavi Pantaleev
b447fa8f34
Merge pull request #1247 from FSG-Cat/patch-1 
Update Synapse from 1.40.0 to 1.41.0
 2021-08-25 09:37:20 +03:00
Wolfgang Winter
ee75d35193 Endpoint changes for Client and media API due to migration to 1.41.0 2021-08-24 21:46:38 +02:00
Joseph Walton-Rivers
a787f406f9
Update main.yml 
Fix incorrect docker version tag for matrix-appservice-irc
 2021-08-24 18:41:39 +01:00
Catalan Lover
1e070f1e56
Update Synapse from 1.40.0 to 1.41.0 2021-08-24 19:09:28 +02:00
Michael Collins
6ecd947c72 remove delete subscription section 2021-08-24 19:05:58 +08:00
Michael Collins
463e9a6196 woops bool not bools 2021-08-24 18:48:43 +08:00
Michael Collins
f19856e125 change template name 2021-08-24 18:35:49 +08:00
Michael Collins
c6f8bc5d83 missing one template from deletion section 2021-08-24 18:35:00 +08:00
Michael Collins
a49da05cf9 delegate locally 2021-08-24 18:20:26 +08:00
Michael Collins
ef4b5a187d alter delete_job_template template 2021-08-24 14:33:50 +08:00
Michael Collins
b120b8aeba delay these till the next playbook 2021-08-24 14:27:50 +08:00
sakkiii
01a5f521cd Merge branch 'patch-2' of https://github.com/sakkiii/matrix-docker-ansible-deploy into patch-2 2021-08-24 10:26:20 +05:30
sakkiii
00d1804dd9 prometheus & its exporter updates 2021-08-24 10:24:54 +05:30
Slavi Pantaleev
57414ec2be Upgrade matrix-corporal (2.1.1 -> 2.1.2) 2021-08-23 15:39:54 +03:00
Slavi Pantaleev
4b643db31b Upgrade devture/exim-relay (4.94.2-r0-2 -> 4.94.2-r0-3) 
Related to https://github.com/devture/exim-relay/pull/11
 2021-08-23 15:31:37 +03:00
Slavi Pantaleev
ca7e0b9df2
Merge pull request #1243 from sakkiii/patch-3 
Postgres Minor Updates
 2021-08-23 15:29:14 +03:00
Slavi Pantaleev
2ec06b7477
Merge pull request #1242 from apmechev/add_beeper_linkedin_bridge 
Add beeper LinkedIn bridge
 2021-08-23 15:15:35 +03:00
Slavi Pantaleev
603ad7c52b Remove (non-working) SQLite support from beeper-linkedin bridge 
This bridge doesn't support SQLite anyway, so it's not necessary
to carry around configuration fields and code for migration from SQLite
to Postgres. There's nothing to migrate.
 2021-08-23 15:12:19 +03:00
Slavi Pantaleev
78c22138a5
Do not reference variables from other roles 
This configuration is supposed to be kept clean and not reference variables defined in other roles.

`group_vars/matrix_servers` redefines these to hook our various roles together.
 2021-08-23 15:06:00 +03:00
Thom Wiggers
78b62664cd
Update to version v0.30.0 
https://github.com/matrix-org/matrix-appservice-irc/releases/tag/0.30.0
 2021-08-23 10:29:05 +02:00
sakkiii
48548eb561
Postgres Minor Updates 2021-08-22 18:45:25 +05:30
Alexandar Mechev
b13cf1871f add code for LinkedIn Bridge 2021-08-21 17:32:45 +02:00
Slavi Pantaleev
24793adb2f
Merge pull request #1241 from sakkiii/patch-3 
Certbot update v1.18.0
 2021-08-20 22:05:29 +03:00
Slavi Pantaleev
9860fb4675 Upgrade Sygnal (v0.9.0 -> v0.10.1) 2021-08-20 17:48:24 +03:00
sakkiii
f5a7e6d78b
Certbot update v1.18.0 2021-08-20 19:47:11 +05:30
Michael Collins
3125ee56e2 add abort_deletion.yml task list 2021-08-20 13:27:10 +08:00
Michael Collins
e75ecd858d launch cleanup job after deleting subscription 2021-08-20 11:14:15 +08:00
Michael Collins
a37e5b6d60 job templates cant delete themselves 2021-08-20 09:58:55 +08:00
Michael Collins
14effd5e2b delegate delete tasks locally 2021-08-20 09:35:12 +08:00
Michael Collins
312bcc444b no log 2021-08-20 09:28:54 +08:00
nono
d9d9554a74 Update the docker image version for mautrix-telegram 2021-08-19 14:08:53 +02:00
Michael Collins
92b26ec846 check if matrix_vars.yml file exists 2021-08-19 18:05:47 +08:00
Michael Collins
7203d4ec21 replace module only if file exists 2021-08-19 18:01:26 +08:00
Michael Collins
9ac5ad148a merge upstream 2021-08-19 17:38:38 +08:00
Michael Collins
b2f96df1a9 end play after deleting subscription in AWX 2021-08-19 17:13:34 +08:00
Michael Collins
fa43d04ad7 syntax error 2021-08-19 17:02:28 +08:00
Michael Collins
7b9929e17b add << SUBSCRIPTION DELETION IN PROGRESS >> job template 2021-08-19 16:55:58 +08:00
AtomHare
4240df6401
update link 2021-08-18 17:25:45 +02:00
AtomHare
7d0ce01792
update links 2021-08-18 17:24:54 +02:00
AtomHare
7eec01e359
update mautrix new repo name 2021-08-18 17:21:20 +02:00
AtomHare
43c9eab6b9
update mautrix new repo name 2021-08-18 17:20:18 +02:00
AtomHare
1ae4032cb7
update new repo name mautrix 2021-08-18 17:17:44 +02:00
AtomHare
b9124c0080
update new repo name mautrix-hangouts 2021-08-18 17:16:58 +02:00
AtomHare
69f333ea25
Update main.yml 2021-08-18 17:14:18 +02:00
Michael Collins
517ecbf0d1 move delete-subscription to deploy 2021-08-18 21:07:44 +08:00
Slavi Pantaleev
dc8000760b Bump Coturn version tag (4.5.2-r2 -> 4.5.2-r3) 
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1236
 2021-08-18 09:50:10 +03:00
Slavi Pantaleev
511a267b00
Merge pull request #1229 from wol-win/feature/signal_config 
Feature/signal config
 2021-08-18 09:42:46 +03:00
Slavi Pantaleev
2c80e0bc89
Merge pull request #1235 from wol-win/element_web 
Upgrade Element (1.8.0 -> 1.8.1)
 2021-08-17 20:21:44 +03:00
WobbelTheBear
12dbb29675
Upgrade Element (1.8.0 -> 1.8.1) 
Element web/desktop has just been updated to fix some regressions in regard to VoIP.
 2021-08-17 12:47:52 +02:00
pushytoxin
854ea91195 Mautrix-Facebook repo location update, pin v0.3.1 
The Github link is just a redirect to Tulir's own GitLab, so I replaced the self-build link
The docker container repository was rearranged hierarchically (dock.mau.dev/tulir/mautrix-facebook -> dock.mau.dev/mautrix/facebook)
Tagged versions have been made available, thus :latest -> :v0.3.1
 2021-08-17 10:35:49 +02:00
Michael Collins
bdf10462d2 Merge remote-tracking branch 'upstream/master' 2021-08-17 16:24:34 +08:00
Slavi Pantaleev
62bba12551
Merge pull request #1233 from hifi/feature/heisenbridge-1.0.0 
Pin Heisenbridge to 1.0.0
 2021-08-17 09:12:45 +03:00
Slavi Pantaleev
71c7d0ba7f
Merge pull request #1232 from thedanbob/debian-bullseye 
docker-ce is now available for Debian Bullseye
 2021-08-17 09:12:17 +03:00
Michael Collins
41c335b967 merge upstream 2021-08-17 13:20:39 +08:00
Toni Spets
4fe27a7645 Pin Heisenbridge to 1.0.0 2021-08-17 07:50:53 +03:00
Wolfgang Winter
4b7506ca1a Preset the permissions inline with other bridges 2021-08-16 18:24:12 +02:00
Wolfgang Winter
b1c94efcd8 Make template generic for the pemission settings 2021-08-16 18:23:40 +02:00
Slavi Pantaleev
70d412e523 Upgrade Element (1.7.34 -> 1.8.0) 2021-08-16 18:10:22 +03:00
Dan Arnfield
df82ec13b2 docker-ce is now available for Debian Bullseye 2021-08-16 08:44:02 -05:00
Wolfgang Winter
d0b557eb6f Replace tabs to spaces to prevent problems in YAML 2021-08-15 08:42:21 +02:00
Slavi Pantaleev
f5a2d732ea
Merge pull request #1224 from GoMatrixHosting/master 
GoMatrixHosting v0.5.7
 2021-08-15 08:45:56 +03:00
Wolfgang Winter
7486db0d1a Missing ticks 2021-08-14 17:58:08 +02:00
WobbelTheBear
f988fd3339
Change sequence of permissions 
As per earlier comment (see from tulir) the sequence has been changed.
 2021-08-14 17:47:31 +02:00
WobbelTheBear
d249fe874e
Update roles/matrix-bridge-mautrix-signal/templates/config.yaml.j2 
Updated settings in template file:
* relay for any user
* user permissions only for HS domain users

Co-authored-by: Jan <31133207+Jaffex@users.noreply.github.com>
 2021-08-14 17:36:43 +02:00
WobbelTheBear
ae9639585c
Update roles/matrix-bridge-mautrix-signal/defaults/main.yml 
Improved setup through template file

Co-authored-by: Jan <31133207+Jaffex@users.noreply.github.com>
 2021-08-14 17:35:49 +02:00
Wolfgang Winter
a34241e4cc Remove intial permissions seting 
Permissions, when set in the template, will be augmented rahter than replaced when using matrix_mautrix_signal_configuration_extension_yaml. Therefore, permissions shall only be set in the defaults/vars.yml or in the HS specific vars.yml file
 2021-08-13 21:11:41 +02:00
Wolfgang Winter
5ca28ba872 Default relay bot functionality setting 
Per default relay bot functionality is disabled; the bridge user permissions depends on the relay bot, if enabled the base domain users are on level relay, else remain on user;
 2021-08-13 17:48:05 +02:00
Wolfgang Winter
e6b77284f2 Relay bot configurable + permissions 
Enable / disable relay bot functionality as configuratoin paramter; set bridge permissions for base domain users to user level
 2021-08-13 17:46:37 +02:00
Michael Collins
98e6cd685d sync with previous repo 2021-08-13 16:05:57 +08:00
Jaffex
e90b33c4e3 Update matrix-mautrix-signal config to 0.2.0 to enable relay mode 2021-08-12 12:52:55 +02:00
Michael Collins
4c12c1892c use saner folder permissions 2021-08-11 17:32:38 +08:00
Michael Collins
4d57a41b3f remove matrix_awx_enabled from these 2021-08-11 17:18:57 +08:00
Michael Collins
2e30802b87 use group variables instead 2021-08-11 15:21:09 +08:00
Michael Collins
8238d65e5f simplify template conditional 2021-08-11 14:19:19 +08:00
Toni Spets
bce94c5860 Allow configuring synapse database transaction limit 2021-08-10 21:09:28 +03:00
Slavi Pantaleev
05ad620386 Update homeserver.yaml to keep up with Synapse v1.40.0 
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1225
 2021-08-10 17:36:44 +03:00
WobbelTheBear
2469ada520
Update Synapse (1.39.0 -> 1.40.0) 2021-08-10 15:32:07 +02:00
Michael Collins
bfb61e776e GMH v0.5.7... maybe! 2021-08-10 12:58:10 +08:00
Sebastian Gumprich
24589b91f4 irc appservice image tag has a 'v' now 2021-08-09 19:01:51 +02:00
Slavi Pantaleev
6de8b5925a
Merge pull request #1222 from wol-win/feature/signal 
New version of Mautrix Signal bridge (version 0.2.0)
 2021-08-09 13:59:17 +03:00
Wolfgang Winter
6ecfbe98b1 New version of Mautrix Signal bridge version 0.2.0 provided through new GitLab repository location 2021-08-09 11:19:12 +02:00
Thom Wiggers
d11d6f52ae
Update IRC appservice 
https://github.com/matrix-org/matrix-appservice-irc/releases/tag/0.29.0
 2021-08-09 10:57:45 +02:00
Sebastian Gumprich
d2a1b8b134
whatsapp bridge has new docker image location 
See https://github.com/mautrix/whatsapp/releases/tag/v0.1.8
 2021-08-07 15:47:24 +02:00
Slavi Pantaleev
2e23166ed3
Merge pull request #1216 from aaronraimist/hydrogen 
Upgrade Hydrogen (0.2.3 -> 0.2.5)
 2021-08-07 11:34:04 +03:00
Aaron Raimist
f3aae70f70
Upgrade Hydrogen (0.2.3 -> 0.2.5) 2021-08-07 02:47:51 -05:00
Slavi Pantaleev
23006fd64e Fix email2matrix path initialization 
Regression since 421f85defa
 2021-08-04 17:59:49 +03:00
Slavi Pantaleev
421f85defa Add self-building support to matrix-email2matrix 2021-08-04 15:03:45 +03:00
Slavi Pantaleev
2697590d28 Remove some useless if conditions 2021-08-04 14:51:15 +03:00
Slavi Pantaleev
a68ac9cb4f Split install/uninstall tasks in matrix-email2matrix 2021-08-04 14:45:07 +03:00
Slavi Pantaleev
5fc61ed964 Upgrade Element (1.7.33 -> 1.7.34) 2021-08-04 09:09:35 +03:00
Slavi Pantaleev
179775b92d Upgrade Synapse (1.38.1 -> 1.39.0) 2021-07-29 18:51:22 +03:00
Slavi Pantaleev
dfa7b6e4fd
Merge pull request #1171 from BackInBash/patch-1 
Updating to ma1sd v2.5.0
 2021-07-28 11:09:39 +03:00
Slavi Pantaleev
676101e999 Minor fixups for ma1sd 2.5.0 
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1171
 2021-07-28 11:08:50 +03:00
Michael Collins
67db5a0024 GoMatrixHosting v0.5.5 2021-07-27 15:12:03 +08:00
Slavi Pantaleev
49abe66f1d
Remove unnecessary if condition 
All of `setup_install.yml` only runs if `matrix_bot_matrix_reminder_bot_enabled`,
so it's not necessary to add that condition once again.
 2021-07-26 08:54:35 +03:00
Nate
012440c309 Allow for self-building of reminder-bot 2021-07-25 14:16:37 -07:00
Hardy Erlinger
03e8c75a30 Restore authentication for Jitsi Meet. 2021-07-25 16:23:51 +02:00
sakkiii
4a2b169fc9
systemd-timesyncd for ubuntu 2021-07-22 23:42:53 +05:30
sakkiii
f4a9c4dff2
Update prometheus node exporter (1.1.2 -> 1.2.0) 2021-07-22 23:29:43 +05:30
Slavi Pantaleev
112d8d8243 Upgrade Synapse (1.38.0 -> 1.38.1) 2021-07-22 19:48:29 +03:00
sakkiii
7f0b8fef0a
Merge branch 'spantaleev:master' into patch-1 2021-07-21 23:50:19 +05:30
Slavi Pantaleev
31244e7fcc
Merge pull request #1180 from Toorero/master 
Fixed self-build functionality for mautrix-signal
 2021-07-21 15:17:57 +03:00
Slavi Pantaleev
7d9ee3e2fb
Remove unnecessary if-condition 2021-07-21 15:17:17 +03:00
Slavi Pantaleev
a21696f687
Fix some if-checks 
We'd rather not suppress pull errors or run self-build tasks if pulling fails.
 2021-07-21 15:16:14 +03:00
Toorero
ead4b00c09 Reverted back to manual self-build detection 2021-07-21 14:05:21 +02:00
Slavi Pantaleev
30339cd313
Merge pull request #1139 from sakkiii/jitsi-fix 
Jitsi Update -> stable-5963
 2021-07-20 09:57:11 +03:00
sakkiii
d08a78ff1f
remove prosody JICOFO_COMPONENT_SECRET 2021-07-20 12:09:11 +05:30
Slavi Pantaleev
4105ba854b
Merge pull request #1147 from datenkollektiv-net/allow-custom-federation-fqn 
Make federation domain customizable
 2021-07-20 09:12:16 +03:00
Slavi Pantaleev
25e6eb27ab
Merge pull request #1183 from Toorero/mautrix-telegram-selfbuild-fix 
Fixed mautrix-telegram selfbuild not working on non amd64 platforms
 2021-07-20 09:06:04 +03:00
Slavi Pantaleev
fb221c8179
Do not needlessly ignore errors 2021-07-20 09:05:13 +03:00
Slavi Pantaleev
51b94d9987
Merge pull request #1194 from meyerrj/master 
Update main.yml for matrix-reminder-bot
 2021-07-20 08:57:59 +03:00
Slavi Pantaleev
931b16fa66
Merge pull request #1193 from sakkiii/patch-2 
Upgrade hydrogen (v0.2.0 -> v0.2.3)
 2021-07-20 08:57:23 +03:00
JokerGermany
9345d840be
root path for the base domain is wrong (#1189) 
* root path for the base domain

* Fix path when running in a container

Co-authored-by: Slavi Pantaleev <slavi@devture.com>
 2021-07-20 08:48:11 +03:00
Richard Meyer
a8373d6bd4
Update main.yml 
Fixes an issue related to https://github.com/anoadragon453/matrix-reminder-bot/issues/86
 2021-07-19 19:02:29 -05:00
sakkiii
8b304445e5
Upgrade hydrogen (v0.2.0 -> v0.2.3) 2021-07-19 23:31:39 +05:30
sakkiii
5209a17da1
migrate from ntp to chrony 2021-07-19 23:11:30 +05:30
Slavi Pantaleev
70cb27138c Upgrade Element (1.7.32 -> 1.7.33) 2021-07-19 18:57:19 +03:00
Toorero
b3793f3595 Masked TARGETARCH via docker.build.arg directive 2021-07-17 14:40:21 +02:00
Toorero
3a28100131 Renamed matrix_lottieconverter to matrix_telegram_lottieconverter 2021-07-17 14:05:13 +02:00
Toorero
7f15787d54 Fixed mautrix-telegram selfbuild not working on non amd64 platforms 2021-07-16 18:58:55 +02:00
Toorero
f933ba14ae Fixed self-build functionality for mautrix-signal and added self-build functionality for signald 2021-07-16 13:27:36 +02:00
sakkiii
e90979e91f
Upgrade grafana (8.0.5 -> 8.0.6) 2021-07-15 23:10:45 +05:30
Slavi Pantaleev
a435c64c13
Merge pull request #1176 from GoMatrixHosting/master 
GoMatrixHosting v0.5.4
 2021-07-15 09:28:59 +03:00
Michael-GMH
86e4649578 GoMatrixHosting v0.5.5 2021-07-15 12:47:00 +08:00
Michael-GMH
03006eb5ab GoMatrixHosting v0.5.5 2021-07-15 12:46:38 +08:00
Michael-GMH
245986c793 Merge remote-tracking branch 'upstream/master' 2021-07-15 12:44:54 +08:00
Toorero
f732a75ca5 Added selfbuild functionality to mautrix-signal bridge 2021-07-14 03:11:13 +02:00
Janar Juusu
c198320f65
feat: update synapse to 1.38.0 2021-07-13 20:56:47 +03:00
Slavi Pantaleev
2e0eddde9d Upgrade matrix-corporal (2.1.0 -> 2.1.1) 2021-07-10 19:40:53 +03:00
Markus
83b9908c9d
Update to ma1sd v2.5.0 2021-07-10 14:09:08 +02:00
sakkiii
cd54147144
Upgrade grafana (8.0.3 -> 8.0.5) 2021-07-09 17:55:15 +05:30
sakkiii
7a51268dfc
Upgrade certbot & nginx 
Upgrade certbot (v1.16.0 -> v1.17.0) nginx (1.21.0 -> 1.21.1)
 2021-07-09 17:51:27 +05:30
Slavi Pantaleev
3fa895fe96 Upgrade Element (1.7.31 -> 1.7.32) 2021-07-09 11:26:13 +03:00
Michael-GMH
f6e0cbe5f3 did i even update this 2021-07-08 09:46:29 +08:00
sakkiii
49455a9ce0
prometheus version 2.28.0 -> 2.28.1 2021-07-07 21:53:05 +05:30
Michael-GMH
1c938c72fd GoMatrixHosting 0.5.2 2021-07-06 14:51:36 +08:00
Slavi Pantaleev
b4d7ab0b53
Merge pull request #1153 from Cadair/worker_prom 
Add worker metrics to prometheus exporter
 2021-07-05 10:30:02 +03:00
Slavi Pantaleev
b6d71b9da1 Fix self-building for Coturn 
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1158
 2021-07-03 10:06:09 +03:00
Neutron
1ad9bba88f Skip importing validate_config task when Synapse is disabled 2021-07-02 20:58:57 +03:00
Stuart Mumford
2aa457efcc Use a prom variable and not a synapse role variable 2021-07-02 15:41:36 +00:00
Michael-GMH
7acaef89df GoMatrixHosting v0.5.1 2021-07-02 14:11:09 +08:00
Slavi Pantaleev
ccde2362fc
Merge branch 'master' into mjolnir-0.1.18 2021-07-02 08:52:58 +03:00
Slavi Pantaleev
55452c3068 Update Mjolnir (v0.1.17 -> v0.1.18) 2021-07-02 08:28:44 +03:00
Aaron Raimist
fc16fbda5b
Remove a bunch of redundant Ansible <2.8 self building checks 2021-07-02 00:14:37 -05:00
Aaron Raimist
19ed8d1d17
Upgrade mjolnir (0.1.17 -> 0.1.18) and implement self building 2021-07-02 00:10:59 -05:00
sak
7b2211da8e remove jibri 2021-07-01 15:37:20 +05:30
Slavi Pantaleev
6294e58304 Fix Content-Security-Policy for Element 
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1154

According to
https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy,
having both a header and the `<meta>`-tag provided by Element itself is
not a problem. The 2 CSP policies get combined.
 2021-07-01 12:41:05 +03:00
Stuart Mumford
09ee5ce52e we index from 0 apparently 2021-06-30 21:32:19 +00:00
Stuart Mumford
3d063f6ace make them show as jobs in grafana 2021-06-30 21:30:18 +00:00
oxmie
5df4d68829 Make federation domain customizable 2021-06-30 23:02:27 +02:00
Stuart Mumford
7b52e6ad5e Add worker metrics to prometheus exporter 2021-06-30 20:52:49 +00:00
Davy Landman
c9d73c6606
Updating to latest synapse release (performance regression) 
https://github.com/matrix-org/synapse/releases/tag/v1.37.1
 2021-06-30 16:15:00 +02:00
sakkiii
d338090f00
postgres minor updates 2021-06-30 10:00:52 +05:30
Slavi Pantaleev
3da4b684a5 Upgrade Synapse (1.36.0 -> 1.37.0) 2021-06-29 13:55:09 +03:00
Thom Wiggers
eb5619fd4b
Update IRC bridge 2021-06-29 12:45:21 +02:00
Michael Sasser
7578a355c4
heisenbridge fix service name 2021-06-29 12:15:03 +02:00
sakkiii
8a369f61f3
Merge branch 'spantaleev:master' into jitsi-fix 2021-06-26 21:54:42 +05:30
hanthor
ddbb4b2acc
Update main.yml 
update to v0.2.0
 2021-06-24 12:10:45 -04:00
Slavi Pantaleev
2d740dbebd Mount /data in matrix-redis container 
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1140
 2021-06-24 10:10:52 +03:00
sakkiii
2b881e245b
Update prometheus v2.27.1 -> v2.28.0 2021-06-24 10:07:14 +05:30
sakkiii
0cc17ab2ca matrix_jitsi_jicofo_component_secret validation 2021-06-23 23:55:55 +05:30
sakkiii
f2f1b20e44 jicofo client proxy connection 2021-06-23 23:17:24 +05:30
sakkiii
b132941e71
Merge branch 'spantaleev:master' into jitsi-fix 2021-06-23 21:31:25 +05:30
Slavi Pantaleev
18533b5000
Merge pull request #1135 from sakkiii/patch-1 
Coturn update 4.5.2 -> 4.5.2-r2
 2021-06-23 11:15:41 +03:00
Slavi Pantaleev
d019e9078a Remove unused variables from mx-puppet-* bridges 
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1131
 2021-06-23 09:56:31 +03:00
sakkiii
6ede9c8cd6 network-alias added to fix domains 2021-06-22 23:59:49 +05:30
sakkiii
d9e943aaaa minor fix 2021-06-22 23:32:32 +05:30
sakkiii
0c8a3c401f jibri service 2021-06-22 23:20:09 +05:30
sakkiii
04805f35a7
Coturn update 4.5.2 -> 4.5.2-r2 2021-06-22 22:39:35 +05:30
Slavi Pantaleev
b19fa3acb2 Upgrade Element (1.7.30 -> 1.7.31) 2021-06-22 10:18:58 +03:00
sakkiii
1250208907
whitespaces 2021-06-22 12:24:35 +05:30
sakkiii
c0cd2a3c93
JICOFO_RESERVATION_ENABLED contains whitespaces. 2021-06-22 12:14:14 +05:30
sakkiii
f8be36327c
jibri service 2021-06-22 11:11:01 +05:30
sakkiii
3e011bafd5 jibri env 2021-06-22 00:18:29 +05:30
sakkiii
8af2d818b1 domain_fix 2021-06-21 23:55:26 +05:30
sakkiii
2ca92b76b6 stable-5963 2021-06-21 23:37:08 +05:30
Slavi Pantaleev
5a1dabe14f Bump exim-relay Docker image tag 
The new one is based on Alpine 3.14, instead of Alpine 3.13.
 2021-06-21 15:32:34 +03:00
Slavi Pantaleev
282844209a
Merge pull request #1105 from blaztinn/centos-stream-8 
Add support for CentOS (Stream) 8
 2021-06-21 15:32:11 +03:00
Marcel Ackermann
a790096adf
matrix_mx_puppet_slack_client_id deprecated 2021-06-21 12:13:20 +02:00
Marcel Ackermann
ed078998b5
deprecated 2021-06-21 12:12:07 +02:00
Slavi Pantaleev
efa7486b88
Merge pull request #1127 from sakkiii/patch-3 
Content-Security-Policy For Element Web
 2021-06-20 10:01:43 +03:00
sakkiii
b826171139
Update grafana 8.0.2 -> 8.0.3 2021-06-18 23:32:30 +05:30
sakkiii
0217644b48
Content-Security-Policy For Element Web 
https://github.com/vector-im/element-web#configuration-best-practices
 2021-06-18 23:27:23 +05:30
Slavi Pantaleev
3dd32d2512 Update worker endpoints 
Should have been part of 9daeb39710
 2021-06-15 19:28:21 +03:00
Slavi Pantaleev
9daeb39710 Upgrade Synapse (1.35.1 -> 1.36.0) 2021-06-15 19:25:41 +03:00
Michael-GMH
4fb1134ad1 GoMatrixHosting v0.5.0 2021-06-14 22:36:49 +08:00
Slavi Pantaleev
a7fcb7c04d
Merge pull request #1122 from sakkiii/patch-2 
update hydrogen v0.1.56 -> v0.1.57
 2021-06-14 17:26:30 +03:00
sakkiii
4cd5835e11
update hydrogen v0.1.56 -> v0.1.57 
https://github.com/vector-im/hydrogen-web/releases/tag/v0.1.57
 2021-06-14 19:46:08 +05:30
sakkiii
08d1a5c2e7
Update grafana 8.0.0 -> 8.0.2 2021-06-14 19:41:23 +05:30
Blaž Tomažič
72bc9b5cfc Add support for CentOS (Stream) 8 2021-06-12 10:49:38 +02:00
Slavi Pantaleev
1cf4d5ea7f Upgrade Redis (6.0.10 -> 6.2.4) 2021-06-10 12:25:55 +03:00
Slavi Pantaleev
963f38ee7b Upgrade certbot (v1.14.0 -> v1.16.0) 2021-06-10 12:18:42 +03:00
SkepticalWaves
2e8a2bdf7d
Add empty default for jitsi-prosody modules 2021-06-08 22:56:09 -04:00
SkepticalWaves
2886dc3939
Add module configuration to jitsi-prosody env file 2021-06-08 22:55:19 -04:00
Slavi Pantaleev
6c9c78ddae
Merge pull request #1112 from sakkiii/patch-2 
coturn update
 2021-06-08 22:46:11 +03:00
sakkiii
be1d1d0b7c matrix_grafana_content_security_policy_customized default false 2021-06-09 00:52:52 +05:30
sakkiii
2d9ba82337 Update element 7.5.7 -> 8.0.0 2021-06-09 00:48:55 +05:30
sakkiii
1cc1202df2
update coturn 2021-06-08 23:59:31 +05:30
rakshazi
77fd1bff22
Update element 1.7.29 -> 1.7.30 2021-06-08 14:57:49 +00:00
Slavi Pantaleev
fa76c1ee5b Do not run self-build Ansible version-check, if component not enabled 
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1108
 2021-06-08 08:59:02 +03:00
Slavi Pantaleev
bec9eaeb50
Merge pull request #1108 from tommes0815/fix-hydrogen-for-ansible2.7 
fix error when running with Ansible 2.7 in the hydrogen setup
 2021-06-07 22:09:39 +03:00
Thom Wiggers
3c05cc04bc
Update IRC appservice 2021-06-07 10:41:18 +02:00
Thomas Kühne
7f4e71b22a fix error when running with Ansible 2.7 in the hydrogen setup 
Without this the hydrogen task would fail for Ansible 2.7 even when hydrogen is not enabled.
 2021-06-06 14:37:17 +02:00
Michael-GMH
122a92fa1c GoMatrixHosting v0.4.9 update 2021-06-04 13:10:45 +08:00
Slavi Pantaleev
b1f1c28ef0 Upgrade Synapse (1.34.0 -> 1.35.0) 2021-06-01 19:14:59 +03:00
Michael-GMH
ad7bbd6442 merge upstream 2021-06-01 16:00:13 +08:00
Michael-GMH
6f40d78353 fix random edits to upstream 2021-05-25 21:25:40 +08:00
Michael-GMH
ea6e344d05 merge upstream 2021-05-25 21:10:34 +08:00
Michael-GMH
85777e8f96 merge with upstream 2021-05-25 21:08:00 +08:00
Slavi Pantaleev
1ed0857019 Fix syntax error 
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1024
 2021-05-25 11:45:17 +03:00
sakkiii
4a4a7f136e changes added to hydrogen client 2021-05-25 11:42:51 +05:30
sakkiii
25e67b51d1 Merge branch 'spantaleev:master' into master 2021-05-25 11:40:56 +05:30
sakkiii
3436f9c10a rename to matrix_nginx_proxy_hsts_preload_enabled 2021-05-25 00:56:59 +05:30
Slavi Pantaleev
0648b1b618 Upgrade Element (1.7.28 -> 1.7.29) 2021-05-24 20:38:48 +03:00
sakkiii
7cc5328ede Comments & Ref 2021-05-24 17:20:54 +05:30
sakkiii
df2d91970d matrix_nginx_proxy_xss_protection 2021-05-24 17:02:47 +05:30
Slavi Pantaleev
d4c7a90b5c
Merge pull request #1076 from Eagle-251/Jitsi-Prosody-OwnNginxCompatibility 
Allow Jitsi XMPP websocket support for users using own webserver.
 2021-05-24 11:07:05 +03:00
ewang
409cd2b9a3 Source port binding from group vars in line other components 2021-05-23 14:06:18 +02:00
Eagle-251
ef6a7e051c
Fix missing port binding. 2021-05-22 15:55:50 +02:00
ewang
1bb6ed97ae Make port bindings default for those disabling nginx proxy 
I changed the conditional statement in prosody systemd template to bind the localhost port by default if people have set ```matrix_nginx_proxy_enabled == false ```.
Hopefully that should make it the default behaviour now.
 2021-05-22 15:53:42 +02:00
Aaron Raimist
3c0452ff5a
Remove unnecessary bind for config.json, use proper nginx.conf 2021-05-21 17:22:40 -05:00
ewang
4a772e50f4 Allow Jitsi XMPP webscoket support for users using own webserver. 
Added:
 - Conditional localhost Port bindings for Jitsi Prosody systemd template
- Added variable to main.yml to allow overriding from vars.yml
 2021-05-21 15:26:06 +02:00
Slavi Pantaleev
6f80292745
Add OCSP stapling support and other SSL optimizations to Hydrogen vhost 
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1061
and https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1057
 2021-05-21 13:40:37 +03:00
Slavi Pantaleev
d0de21ab34
Delete Hydrogen nginx configuration file when disabled 2021-05-21 12:58:32 +03:00
Aaron Raimist
ac4ede20af
Add docs 2021-05-21 04:43:04 -05:00
Aaron Raimist
1633f61018
Only install config.json when self building 2021-05-21 04:23:06 -05:00
Aaron Raimist
04548f8df2
Merge branch 'master' into hydrogen 2021-05-21 04:09:18 -05:00
Aaron Raimist
9437f78c9e
Build using custom config.json, add CSP, update to 0.1.53 2021-05-21 03:45:21 -05:00
Slavi Pantaleev
47b4608b96 Fail in a friendlier way when trying to self-build on Ansible <= 2.8 
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1070

Related discussion here: 1ab507349c (commitcomment-51108407)
 2021-05-21 11:15:05 +03:00
Slavi Pantaleev
1ab507349c Fix self-building for various components on Ansible < 2.8 
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1070
 2021-05-20 08:43:20 +03:00
Slavi Pantaleev
66615c43a3
Merge pull request #1065 from sakkiii/patch-1 
Update grafana (7.5.6->7.5.7)
 2021-05-19 22:07:59 +03:00
Tobias K
3dcbed6353
roles/matrix-grafana: Set root_url in granafa.ini 2021-05-19 19:52:58 +02:00
sakkiii
8529ca4c17
Update grafana (7.5.6->7.5.7) 2021-05-19 22:30:03 +05:30
Slavi Pantaleev
073d920a62
Merge pull request #1061 from sakkiii/ssl_enhancement 
Optimize SSL session
 2021-05-19 17:14:52 +03:00
Toni Spets
544915ff76 Add Heisenbridge 2021-05-19 10:42:21 +03:00
Slavi Pantaleev
21eb39f986 Mention matrix_common_after_systemd_service_start_wait_for_timeout_seconds in failure message 
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1062
 2021-05-19 08:46:13 +03:00
Slavi Pantaleev
ee46fabdca Make waiting time for --tags=start configurable 
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1062
 2021-05-19 08:39:55 +03:00
sakkiii
e9b878b9e9 Optimize SSL session 2021-05-18 19:39:43 +05:30
Slavi Pantaleev
e6afa05f7b Enable OCSP stapling for the federation port 
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1057

Not sure if this is beneficial though.
 2021-05-18 08:15:42 +03:00
Slavi Pantaleev
57a6a98a50 Fix incorrect SSL certificate path 
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1057
 2021-05-18 07:58:47 +03:00
Slavi Pantaleev
b9c4e8ce16
Merge pull request #1057 from sakkiii/ssl_staple 
Enable OCSP Stapling
 2021-05-18 07:50:35 +03:00
sakkiii
d31b55b2a7 SSL-enabled block only 2021-05-18 03:24:06 +05:30
rakshazi
400371f6dd
Updated Element version (1.7.27 -> 1.7.28) 2021-05-17 13:15:12 +00:00
Slavi Pantaleev
d156c8caa2 Upgrade Synapse (1.33.2 -> 1.34.0) 2021-05-17 14:58:07 +03:00
Slavi Pantaleev
e4dd933cf0 Make missing /_synapse/admin correctly return 404 responses 
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1058

We may try to capture such calls and return a friendlier response (HTML
or JSON) saying "The Synapse Admin API is not enabled", but that may not
be desirable.

For now, we stick to what "upstream" recommends: "simply
don't proxy these APIs", which should lead to the same kind of 404 that
we have now.
See here: 6660912226/docs/reverse_proxy.md (synapse-administration-endpoints)
 2021-05-17 11:45:35 +03:00
sakkiii
2c3da6599b Added warning 2021-05-15 16:07:52 +05:30
sakkiii
0dd4459799 matrix_nginx_proxy_ocsp_stapling_enabled variable added 2021-05-15 16:01:49 +05:30
sakkiii
c05021640d Enable OCSP Stapling 2021-05-15 15:57:05 +05:30
Aaron Raimist
ca361af616
Add Hydrogen 2021-05-15 04:23:36 -05:00
sakkiii
b191e461a5 Merge branch 'spantaleev:master' into master 2021-05-15 12:20:02 +05:30
sakkiii
4bd7d8b5e4
Update grafana (7.5.5->7.5.6) 2021-05-14 18:59:21 +05:30
sakkiii
d5cd3d443d
Update prometheus (2.26.0->2.27.0) 2021-05-14 18:56:33 +05:30
sakkiii
322b750aad Merge branch 'spantaleev:master' into master 2021-05-14 18:54:47 +05:30
Slavi Pantaleev
f481b1a84b Upgrade matrix-mailer (4.94.2-r0 -> 4.94.2-r0-1) 
Related to https://github.com/devture/exim-relay/pull/9
 2021-05-12 18:09:08 +03:00
Slavi Pantaleev
8e6f1876f5 Switch to :latest version of synapse-admin 
Related to https://github.com/Awesome-Technologies/synapse-admin/issues/132

We should switch back when >0.8.0 gets released.
 2021-05-11 19:25:12 +03:00
sakkiii
8fc55b30c5
Upgrade Synapse (1.33.1 -> 1.33.2) 
This release fixes a denial of service attack (CVE-2021-29471) against Synapse's push rules implementation. Server admins are encouraged to upgrade.

Ref: https://github.com/matrix-org/synapse/releases/tag/v1.33.2
 2021-05-11 19:06:30 +05:30
Slavi Pantaleev
2d4b039c55
Merge pull request #1046 from GoMatrixHosting/master 
GoMatrixHosting v0.4.6
 2021-05-11 09:07:48 +03:00
Michael-GMH
2b4bada72a fix conditional 2021-05-11 14:05:45 +08:00
Michael-GMH
0adcef65e6 fix conditional 2021-05-11 13:58:42 +08:00
Michael-GMH
f70102e40c no dashes in usernames 2021-05-11 13:55:13 +08:00
Slavi Pantaleev
f4657b2cdb Upgrade Element (1.7.26 -> 1.7.27) 2021-05-11 08:22:43 +03:00
Michael-GMH
4e6f6e179b GMH 0.4.6 update 2021-05-10 18:50:10 +08:00
sakkiii
29cf6a0087 Merge branch 'spantaleev:master' into master 2021-05-10 15:10:18 +05:30
Slavi Pantaleev
3dcc006932 Fix self-building for Coturn 
689dcea773 wasn't enough. The `upstream/..` tags are
just upstream sources, without the alpine-based Dockerfile.
We need to use the `docker/..` tags for that (or `master`)

Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1032

Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1023

Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1009
 2021-05-10 11:35:53 +03:00
Slavi Pantaleev
33f0074862 Upgrade matrix-mailer (4.94-r0 -> 4.94.2-r0) 
Related to https://github.com/devture/exim-relay/issues/6
 2021-05-10 11:23:44 +03:00
Slavi Pantaleev
c19508087a
Merge pull request #1036 from sakkiii/grafana-csp 
Grafana csp template backward compatible with older browsers
 2021-05-10 10:09:13 +03:00
Slavi Pantaleev
a198b87455 Upgrade synapse-admin (0.7.2 -> 0.8.0) 
Related to https://github.com/Awesome-Technologies/synapse-admin/issues/132
 2021-05-10 10:06:12 +03:00
Slavi Pantaleev
867ebb52ab
Merge pull request #1037 from pushytoxin/jitsi-5765-1 
Update Jitsi (5142 -> 5765-1)
 2021-05-08 12:35:29 +03:00
sakkiii
bb0810302d Merge branch 'spantaleev:master' into master 2021-05-07 23:03:55 +05:30
Slavi Pantaleev
61220ea487 Upgrade Synapse (1.33.0 -> 1.33.1) 2021-05-06 20:47:09 +03:00
sakkiii
9174448e5e get rid of this {% else %} 2021-05-06 12:46:17 +05:30
sakkiii
0d5fe2d9f7
Update roles/matrix-grafana/templates/grafana.ini.j2 
Co-authored-by: Aaron Raimist <aaron@raim.ist>
 2021-05-06 12:38:40 +05:30
Béla Becker
b10655ebb1 Jitsi XMPP Websocket support 
Jitsi-meet enabled websockets by default, claiming better reliability.
Matrix-nginx-proxy configuration has been set up according to the
Prosody documentation: https://prosody.im/doc/websocket
 2021-05-05 19:10:58 +02:00
Béla Becker
116bcaa13b Update jitsi to stable-5765-1 
Changelog:
https://github.com/jitsi/docker-jitsi-meet/blob/stable-5765-1/CHANGELOG.md
 2021-05-05 19:10:58 +02:00
sakkiii
37de7fc96a Updated Reference 2021-05-05 22:25:38 +05:30
sakkiii
303de935d5 grafana CSP backward compatible with older browsers 2021-05-05 22:12:56 +05:30
Slavi Pantaleev
d4d1e2e922 Upgrade Synapse (1.32.2 -> 1.33.0) 2021-05-05 19:18:53 +03:00
Slavi Pantaleev
b09a805939
Merge pull request #1031 from thedanbob/nginx-1.20.0 
Update nginx (1.19.10 -> 1.20.0)
 2021-05-04 10:41:02 +03:00
Slavi Pantaleev
6fdc71c40b
Merge pull request #1030 from thedanbob/grafana-7.5.5 
Update grafana (7.5.4 -> 7.5.5)
 2021-05-04 10:40:21 +03:00
Dan Arnfield
cfaa3e598a Update nginx (1.19.10 -> 1.20.0) 2021-05-03 16:00:11 -05:00
Dan Arnfield
bec5933db4 Update grafana (7.5.4 -> 7.5.5) 2021-05-03 15:57:06 -05:00
Michael-GMH
067b61e779 GoMatrixHosting v0.4.5 update 2021-04-29 08:06:45 +08:00
Slavi Pantaleev
2409c33ea2 Upgrade Element (1.7.25 -> 1.7.26) 2021-04-27 17:21:31 +03:00
benkuly
49cb2635a2
updated matrix-sms-bridge 2021-04-27 14:39:58 +02:00
Michael-GMH
a14bf6c2ed GoMatrixHosting v0.4.4 update 2021-04-26 20:00:32 +08:00
Slavi Pantaleev
689dcea773 Fix self-building for Coturn 
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1023

Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1009
 2021-04-24 20:31:25 +03:00
sakkiii
40fe6bd5c1 variable matrix_nginx_proxy_hsts_preload_enable added 2021-04-24 20:04:20 +05:30
Slavi Pantaleev
389dc26615 Fix Synapse generic worker balancing 
Potentially fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1022
 2021-04-24 11:52:45 +03:00
sakkiii
5b4fdf9b87 Merge branch 'master' of https://github.com/sakkiii/matrix-docker-ansible-deploy 2021-04-24 12:15:34 +05:30
sakkiii
0ccf0fbf1c HSTS preload + X-XSS enables 
**HSTS Preloading:**
In its strongest and recommended form, the [HSTS policy](https://www.chromium.org/hsts) includes all subdomains, and indicates a willingness to be “preloaded” into browsers:
`Strict-Transport-Security: max-age=31536000; includeSubDomains; preload`

**X-Xss-Protection:**
`1; mode=block` which tells the browser to block the response if it detects an attack rather than sanitising the script.
 2021-04-24 12:12:34 +05:30
sakkiii
3564635f0f
Merge branch 'master' into master 2021-04-24 11:46:52 +05:30
sakkiii
29bba5161b Element More security headers 
More Production ready nginx headers for Matrix client element.
 2021-04-24 11:10:40 +05:30
Slavi Pantaleev
f6b371164c Remove useless variable 2021-04-23 07:07:18 +03:00
Slavi Pantaleev
62c0587b6a Use Alpine-based Coturn 2021-04-22 15:05:37 +03:00
Slavi Pantaleev
72a7cb4145
Merge pull request #1018 from GoMatrixHosting/master 
GoMatrixHosting v0.4.3
 2021-04-22 14:23:30 +03:00
Slavi Pantaleev
e3fa3e12bc Upgrade Synapse (1.31 -> 1.32.2) 2021-04-22 14:22:07 +03:00
Michael-GMH
50d7209c5b GMH v04.3 2021-04-22 11:45:59 +08:00
Slavi Pantaleev
378fabf177 Revert "Upgrade Synapse (1.31 -> 1.32.1)" 
This reverts commit 1fb54a37cb.

Seems like it's been pulled or something. It used to exist, but not
anymore. Not sure what's going on.

Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1017

Related to
https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1010
 2021-04-21 23:36:58 +03:00
Slavi Pantaleev
1fb54a37cb Upgrade Synapse (1.31 -> 1.32.1) 
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1010
 2021-04-21 18:47:15 +03:00
Slavi Pantaleev
d691cc0920 Move variable definition a bit 2021-04-21 13:59:20 +03:00
Slavi Pantaleev
e00ef04b57 Add opt-out-of-FLoC headers by default 2021-04-21 13:58:24 +03:00
Slavi Pantaleev
42783972fd
Merge pull request #1011 from aaronraimist/synapse-admin 
Upgrade synapse-admin (0.7.0 -> 0.7.2)
 2021-04-21 09:24:30 +03:00
Slavi Pantaleev
ca786cc343 Revert "Upgrade Synapse (1.31 -> 1.32)" 
This reverts commit f825c7c263.

Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1010
 2021-04-20 23:40:55 +03:00
Aaron Raimist
bb64b80697
Upgrade synapse-admin (0.7.0 -> 0.7.2) 2021-04-20 15:14:08 -05:00
Slavi Pantaleev
f825c7c263 Upgrade Synapse (1.31 -> 1.32) 2021-04-20 17:47:34 +03:00
Slavi Pantaleev
7eda6a3c12
Merge pull request #1009 from thedanbob/coturn-official 
Switch to official coturn image
 2021-04-19 18:41:17 +03:00
Slavi Pantaleev
adcecaffaf Fix connectivity between prometheus and prometheus-node-exporter 
Expected to have regressed after https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1008

This patch comes with its own downsides (as described in the comments
for matrix_prometheus_node_exporter_container_http_host_bind_port),
but at least there's:
- no security issue
- metrics remain readable from matrix-prometheus (even if the network metrics are inaccurate)

A better patch is certainly welcome.
 2021-04-19 18:29:03 +03:00
Dan Arnfield
b2ca1f2829 Add capability required by new image 2021-04-19 10:16:26 -05:00
Slavi Pantaleev
398b9f5d66
Merge pull request #1008 from sakkiii/master 
security** node-exporter data & port publicly exposed
 2021-04-19 17:31:00 +03:00
Dan Arnfield
29177d4922 Switch to official coturn docker image 2021-04-19 09:04:08 -05:00
sak
88a30fb5ed security** node-exporter data & port publicly exposed 2021-04-19 15:35:23 +05:30
sak
0f9a455719 Revert "security** node-exporter data & port publicly exposed" 
This reverts commit d0cd709c08.
 2021-04-19 15:24:36 +05:30
sak
d0cd709c08 security** node-exporter data & port publicly exposed 2021-04-19 15:15:59 +05:30
Slavi Pantaleev
4a1739f604
Merge pull request #1007 from teutat3s/fix/nginx-dont-send-version 
Don't expose nginx version with each response
 2021-04-18 21:33:11 +03:00
teutat3s
2bf7c26cfa
Don't expose nginx version with each response 2021-04-18 16:24:13 +02:00
Slavi Pantaleev
c565e72f0d
Merge pull request #1003 from sakkiii/patch-2 
updated matrix_grafana_docker_image to v7.5.4
 2021-04-18 09:56:12 +03:00
Slavi Pantaleev
51b46697c5
Merge pull request #1005 from sakkiii/master 
Improve security for grafana
 2021-04-18 09:50:59 +03:00
Dan Arnfield
f04614a993 Fix prometheus network for ansible < 2.8 2021-04-17 20:15:26 -05:00
Slavi Pantaleev
badd81e0ec Revert "Attempt to fix docker_network result discrepancy between Ansible versions" 
This reverts commit 68ca81c8c2.
 2021-04-17 19:31:20 +03:00
sakkiii
1958d0792d Update matrix-client-element.conf.j2 2021-04-17 21:33:07 +05:30
sakkiii
b6d45c5fd8 Merge branch 'master' of https://github.com/sakkiii/matrix-docker-ansible-deploy 2021-04-17 21:03:26 +05:30
sakkiii
05042f5ff1 Improve security grafana 
- duplicate X-Content-Type-Options
- X-Frame-Options header
- Referrer-Policy [Might consider adding variable]
- Secure flag with cookies
- matrix_grafana_content_security_policy variable for [Content Security Policy](https://grafana.com/docs/grafana/latest/administration/configuration/#content_security_policy)
 2021-04-17 21:03:05 +05:30
sakkiii
27377e099d
updated matrix_grafana_docker_image to v7.5.4 
Latest stable grafana version is [7.5.4 (2021-04-14)](https://github.com/grafana/grafana/releases/tag/v7.5.4)
 2021-04-17 17:31:14 +05:30
Slavi Pantaleev
68ca81c8c2 Attempt to fix docker_network result discrepancy between Ansible versions 
Supposedly fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/907
 2021-04-17 11:42:06 +03:00
Slavi Pantaleev
9c1f41eadf
Merge pull request #1002 from thedanbob/node-exporter-1.1.2 
Update prometheus node exporter (1.1.0->1.1.2)
 2021-04-17 11:15:13 +03:00
Dan Arnfield
8a550ce67c Update prometheus (2.24.1->2.26.0) 2021-04-16 09:25:45 -05:00
Dan Arnfield
83cc5c9e6a Update prometheus node exporter (1.1.0 -> 1.1.2) 2021-04-16 09:17:04 -05:00
sakkiii
5dc642ace1
Nginx element web: XSS protection & nosniff header 
X-XSS-Protection: 1; mode=block; header, for basic XSS protection in legacy browsers.
X-Content-Type-Options: nosniff header, to disable MIME sniffing
 2021-04-16 14:45:04 +05:30
Slavi Pantaleev
fcb9e9618a Make Coturn TLSv1/v1.1 configurable 
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/999
 2021-04-16 09:29:32 +03:00
sakkiii
540416e32d
Disable support for TLS 1.0 and TLS 1.1 
These old versions of TLS rely on MD5 and SHA-1, both now broken, and contain other flaws. TLS 1.0 is no longer PCI-DSS compliant and the TLS working group has adopted a document to deprecate TLS 1.0 and TLS 1.1.
 2021-04-15 19:25:23 +05:30
Michael-GMH
89cb5a3d7a GMH v0.4.2 update 2021-04-15 17:07:03 +08:00
Michael
f41bfb69d2 update survey template formatting 2021-04-04 12:01:53 +08:00
Michael
814bdf5a88 update spelling 2021-04-04 11:52:26 +08:00
Michael
fbe22289bd merge with upstream and testing branch 2021-04-04 11:41:06 +08:00
Slavi Pantaleev
995c483856
Merge pull request #962 from aaronraimist/mjolnir 
Add mjolnir
 2021-04-03 10:45:29 +03:00
Slavi Pantaleev
f183add44d
Merge pull request #977 from aaronraimist/simple-antispam 
Upgrade synapse-simple-antispam (0.0.1 -> 0.0.3)
 2021-04-03 08:45:14 +03:00
Aaron Raimist
81dddd2e25
Upgrade Element (1.7.24 -> 1.7.24.1) 2021-04-02 18:43:30 -05:00
Aaron Raimist
c43bd412dd
Upgrade synapse-simple-antispam (0.0.1 -> 0.0.3) 2021-04-02 18:08:08 -05:00
Aaron Raimist
1ecee625d5
Depend on more services, add a delay 2021-04-02 17:07:24 -05:00
Slavi Pantaleev
a88391edf5
Merge pull request #972 from JohannesKleine/nginx-config 
matrix-nginx-proxy: add custom nginx options to nginx.conf.j2
 2021-03-31 10:30:57 +03:00
teutat3s
0b5e903693
Updates to mautrix-signal config 
See these last commits:

tulir/mautrix-signal@4fc34330c1

tulir/mautrix-signal@64bc5c36a5

tulir/mautrix-signal@ddda1666d4
 2021-03-31 02:51:23 +02:00
Christoph Johannes Kleine
fcd66b2889
rename variables 2021-03-30 16:41:32 +02:00
Christoph Johannes Kleine
8ba1105010
rename variable 2021-03-30 15:59:10 +02:00
Christoph Johannes Kleine
3a772f2f65
matrix-nginx-proxy: add custom nginx options to nginx.conf.j2 2021-03-30 14:11:20 +02:00
Slavi Pantaleev
93960b70be Do not fail if _matrix-identity DNS SRV record missing 
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/963

This also simplifies Prerequisites, which is great.

It'd be nice if we were doing these checks in some optional manner
and reporting them as helpful messages (using
`matrix_playbook_runtime_results`), but that's more complicated.
I'd rather drop these checks completely.
 2021-03-30 11:24:04 +03:00
Slavi Pantaleev
5e1cf7f8b9 Upgrade Element (1.7.23 -> 1.7.24) 2021-03-29 17:58:02 +03:00
Slavi Pantaleev
9409588513 Fix variable name typo (take 2) 
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/970
 2021-03-29 10:59:57 +03:00
Slavi Pantaleev
179b416ed5 Fix variable name typo 
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/970
 2021-03-29 09:24:35 +03:00
Slavi Pantaleev
77d598b315 Fix Go-NEB variable definitions using the wrong type 
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/969
 2021-03-28 12:10:22 +03:00
Slavi Pantaleev
49868db3de Upgrade Synapse for ARM64 (1.30.0 -> 1.30.1) 2021-03-26 16:48:15 +02:00
Slavi Pantaleev
94487dc6a7 Upgrade Synapse for amd64 (1.30.0 -> 1.30.1) 2021-03-26 15:37:11 +02:00
transcaffeine
dbae18fd6a
feat: push ephemeral events to appservices 
This adds https://github.com/matrix-org/matrix-doc/pull/2409 to the
appservice registrations, enabling synapse to push EDUs to appservices.
 2021-03-25 18:49:54 +01:00
Dan Arnfield
97d8527e00 Update nginx (1.19.6 -> 1.19.8) 2021-03-24 09:42:08 -05:00
Slavi Pantaleev
5a4ea5f866 Make AWX enabling/disabling consistent with other playbook roles 
That is:
- enabled in the role by default
- disabled in the compilation (playbook), if considered an optional
component
 2021-03-24 14:02:53 +02:00
Aaron Raimist
bab8b950ca
Add mjolnir 2021-03-23 22:46:08 -05:00
Slavi Pantaleev
06c74728eb Move matrix_nginx_proxy_proxy_synapse_federation_api_enabled definition to the role 
This variable was previously undefined in the role and was only getting
defined via `group_vars/matrix_servers`.

We now properly initialize it (and its good default value) in the role
itself.
 2021-03-23 10:28:32 +02:00
Slavi Pantaleev
d09609daa8 Fix Jinja2 syntax error 
Fixes a regression introduced in ffe649a240
 2021-03-22 17:13:10 +02:00
Slavi Pantaleev
6a3433fbad Update Synapse for ARM64 (1.29.0 -> 1.30.0) 
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/958
 2021-03-22 16:43:23 +02:00
Slavi Pantaleev
ffe649a240 Update homeserver.yaml to keep up with Synapse v1.30.0 
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/958
 2021-03-22 16:43:10 +02:00
rakshazi
74106f2a80
Updated synapse 1.29.0 -> 1.30.0 2021-03-22 14:03:42 +00:00
Thom Wiggers
54fe59f05c
Update IRC appservice 2021-03-22 12:37:35 +01:00
Slavi Pantaleev
2737ebc290 Complain if people try to use matrix-sygnal on non-amd64 2021-03-20 13:38:27 +02:00
Slavi Pantaleev
b824522b33 Remove unnecessary with_items statement 2021-03-20 13:34:22 +02:00
Slavi Pantaleev
9a0222fa47 Add Sygnal support 
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/683
 2021-03-20 13:32:22 +02:00
Michael
af240aef37 remove sections from task list that arent needed 2021-03-20 17:35:30 +08:00
Michael
85127bacba Merge remote-tracking branch 'upstream/master' 2021-03-20 17:21:27 +08:00
Michael
1e54b1d1a5 merge upstream 2021-03-20 17:21:02 +08:00
Slavi Pantaleev
f99dcd611f Pass proper UID/GID to Synapse 
Fixes a regression caused by a5ee39266c.

If the user id and group id were different than 991:991
(which used to be a hardcoded default for us long ago),
there was a mismatch between what Synapse was trying to use (991:991)
and what it was actually started with (in `--user=..`). It was then
trying to change ownership, which was failing.

This was mostly affecting newer installations which were not using the
991:991 defaults we had long ago (since a1c5a197a9).
 2021-03-19 16:44:10 +02:00
Slavi Pantaleev
a5ee39266c Go through start.py when launching Synapse 
This allows us to benefit from helpful things it does for us,
like enabling jemalloc: https://github.com/matrix-org/synapse/pull/8553

We weren't going through `start.py` before, because it was causing some
conflict with our `docker run --user=...` stuff, but it doesn't seem
to be a problem anymore.

Having done this, we won't need to do things like
https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/941
anymore.
 2021-03-19 08:16:59 +02:00
Aaron Raimist
32b3650c12
Set X-Forwarded-Proto on federation requests 2021-03-17 18:51:10 -05:00
Béla Becker
2d7e7680e5 matrix.{{ matrix_domain }} -> {{ matrix_server_fqn_matrix }} 2021-03-17 12:36:45 +01:00
Aaron Raimist
466827139a
Also check if matrix_ssl_lets_encrypt_support_email is blank 2021-03-17 00:54:05 -05:00
Slavi Pantaleev
97c0bf1a73
Merge pull request #942 from pushytoxin/etherpad1_8_12 
Upgrade Etherpad (1.8.7 -> 1.8.12)
 2021-03-16 20:07:34 +02:00
Béla Becker
60aa40845f Upgrade Etherpad (1.8.7 -> 1.8.12) 2021-03-16 18:55:58 +01:00
Yannick Goossens
27416607d9 Another field with 'invalid input syntax for type smallint' 2021-03-16 16:38:59 +01:00
Michael
5a6bdb0c3d merge upstream 2021-03-16 21:52:26 +08:00
Michael
571b70a1f4 fix for running outside of AWX 2021-03-16 21:37:19 +08:00
Michael
5a1f3b7d67 GMH v0.3.0 2021-03-14 14:35:38 +08:00
Michael
33ec5710d9 0.2.1 revision 2021-02-28 22:21:40 +08:00
Michael
4c882c513b initial PR 2021-02-20 17:19:17 +08:00
Marcus Proest
2ca8211184 Merge remote-tracking branch 'upstream/master' 2021-02-19 19:02:48 +01:00
Marcus Proest
b99372a3c5 initial commit of mautrix-instagram role 2021-02-19 17:20:26 +01:00
Slavi Pantaleev
108aed53be Fix invalid matrix-postgres.service when matrix_postgres_process_extra_arguments is empty 
This only seems to be affecting some people badly enough to cause
matrix-postgres not to start. Certain systemd versions probably handle
it better or something.

Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/889
(hopefully)
 2021-02-19 16:33:23 +02:00
Slavi Pantaleev
1dbdfeec07 Fix matrix-postgres stopping for consistency with other services 
This probably got lost somehow in all the work that happened in
https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/456
 2021-02-19 15:53:30 +02:00
Slavi Pantaleev
9f91eaa54b Fix incorrect service name 
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/887
 2021-02-19 12:12:21 +02:00
Slavi Pantaleev
91c987ca7d
Merge pull request #872 from xangelix/add-mx-puppet-groupme-gh 
Add mx-puppet-groupme support
 2021-02-19 11:42:41 +02:00
Slavi Pantaleev
d94d0e2ca5
Merge pull request #456 from eMPee584/synapse-workers 
Synapse workers
 2021-02-19 11:40:36 +02:00
Slavi Pantaleev
9dc87bb948 Add Synapse worker presets for easier configuration 
Adding more presets in the future would be nice.
 2021-02-19 11:38:47 +02:00
Slavi Pantaleev
eaea215282 Allow Synapse workers to be used with an external nginx webserver 
We're talking about a webserver running on the same machine, which
imports the configuration files generated by the `matrix-nginx-proxy`
in the `/matrix/nginx-proxy/conf.d` directory.

Users who run an nginx webserver on some other machine will need to do
something different.
 2021-02-19 11:36:48 +02:00
Slavi Pantaleev
2f732e4234 Update Synapse worker endpoints 2021-02-19 11:36:14 +02:00
Slavi Pantaleev
217b4a8808 Release Synapse v1.27.0 to ARM32 via self-building 
Related to: https://matrix.org/blog/2021/02/18/synapse-1-27-0-released#dropping-armv7-docker-images
 2021-02-19 09:10:16 +02:00
Béla Becker
65eab14a64 Make sure Etherpad has a database to write to 2021-02-18 17:43:14 +01:00
Béla Becker
005f4d57f9 Remove mention of sqlite3 support for Etherpad 
The official Etherpad Docker image has no support for sqlite3 databases.
 2021-02-18 17:39:36 +01:00
Slavi Pantaleev
1789620901 Merge branch 'master' into synapse-workers 2021-02-18 18:24:43 +02:00
Slavi Pantaleev
d6c4d41c2b Define instanceId property on workers 
This give us the possibility to run multiple instances of
workers that that don't expose a port.

Right now, we don't support that, but in the future we could
run multiple `federation_sender` or `pusher` workers, without
them fighting over naming (previously, they'd all be named
something like `matrix-synapse-worker-pusher-0`, because
they'd all define `port` as `0`).
 2021-02-18 18:19:51 +02:00
rakshazi
996f732f98
Update synapse-admin (0.6.1 -> 0.7.0) 2021-02-18 12:05:21 +00:00
Cody Neiman
c4e1209452
Merge branch 'master' into add-mx-puppet-groupme-gh 2021-02-17 13:52:37 -05:00
Slavi Pantaleev
d33483b8ce Document that Synapse pusher worker instances are shardable 
Related to:
- https://github.com/matrix-org/synapse/pull/9407
- https://github.com/matrix-org/synapse/pull/7855
 2021-02-16 17:45:41 +02:00
Slavi Pantaleev
daae74b074 Merge branch 'master' into synapse-workers 2021-02-16 17:31:40 +02:00
Slavi Pantaleev
521160c12f Upgrade Synapse (v1.26.0 -> v1.27.0) 2021-02-16 17:30:48 +02:00
Slavi Pantaleev
865d71e35a
Upgrade Element (1.7.20 -> 1.7.21) 2021-02-16 13:44:28 +02:00
Marc Leuser
fd3d48bb6d trust the reverse proxy by default 2021-02-15 10:50:45 +01:00
Marc Leuser
1434c371bd safer port binding of etherpad docker container 
don't bind to any host port if nginx_proxy is used
only bind to localhost if it's not used
 2021-02-15 10:46:23 +01:00
Slavi Pantaleev
61e427d690 Do not let people enable more than 1 federation_sender worker 2021-02-15 11:37:03 +02:00
Slavi Pantaleev
85a05f38e8 Allow Synapse worker list to be generated dynamically 
This leads to much easier management and potential safety
features (validation). In the future, we could try to avoid port
conflicts as well, but it didn't seem worth the effort to do it now.
Our port ranges seem large enough.

This can also pave the way for a "presets" feature
(similar to `matrix_nginx_proxy_ssl_presets`) which makes it even easier
for people to configure worker counts.
 2021-02-15 11:25:35 +02:00
Slavi Pantaleev
43059bb040 Fix metrics listeners for Synapse workers 
`::` leads to errors like:

> socket.gaierror: [Errno -9] Address family for hostname not supported
 2021-02-15 11:19:07 +02:00
Slavi Pantaleev
453a4ec2d8 Relocate tasks related to Synapse workers 2021-02-15 11:18:47 +02:00
Cody Neiman
e510481e84
Merge branch 'master' into add-mx-puppet-groupme-gh 2021-02-14 13:41:16 -05:00
Slavi Pantaleev
5cfeae806b Merge branch 'master' into synapse-workers 2021-02-14 13:00:57 +02:00
Slavi Pantaleev
894679750e
Merge pull request #862 from s-thom/nginx-additional 
Add additional domains for Let's Encrypt certificates to be obtained
 2021-02-14 11:05:25 +02:00
Slavi Pantaleev
a8e9f35708 Touch up documentation a bit 2021-02-14 11:05:05 +02:00
Slavi Pantaleev
7d39e5153a Upgrade Postgres minor versions 2021-02-14 09:12:29 +02:00
Cody Neiman
dc5e7eed3f
Fix mx-puppet-groupme port typo 2021-02-13 11:20:35 -05:00
Cody Neiman
2b3c143487
Update mx-puppet-groupme docker image 2021-02-13 11:10:53 -05:00
Cody Neiman
5a70a56ff0
Initial implementation 2021-02-12 23:13:30 -05:00
Slavi Pantaleev
8434af10de Do not fail on unrelated validation tasks when Grafana not enabled 2021-02-12 15:45:19 +02:00
Slavi Pantaleev
66d5b0e5b9 Do not fail on unrelated validation tasks when Prometheus not enabled 
These validation tasks should only run when Prometheus is enabled.
 2021-02-12 15:41:15 +02:00
Slavi Pantaleev
2ac2b02cb4
Merge pull request #838 from Peetz0r/stats 
Prometheus and Grafana on stats.<domain>
 2021-02-12 14:03:17 +02:00
Slavi Pantaleev
c8ab200cb1 Break dependency between matrix-prometheus and (matrix-prometheus-node-exporter, matrix-synapse) 2021-02-12 11:59:24 +02:00
Slavi Pantaleev
6842102e00 Split install/uninstall tasks in matrix-prometheus 2021-02-12 11:59:24 +02:00
Slavi Pantaleev
18e31526a8 Rename some variables 2021-02-12 11:59:24 +02:00
Slavi Pantaleev
85a260daaf Make --tags=setup-prometheus not break, relying on matrix-base facts 2021-02-12 11:59:24 +02:00
Slavi Pantaleev
df3dd1c824 Use --read-only FS for metrics-related containers 
It seems like it doesn't cause any issues for any of these services.
 2021-02-12 11:59:24 +02:00
Slavi Pantaleev
3ce9712388 Fix Grafana dashboard/datasource label 2021-02-12 11:59:24 +02:00
Slavi Pantaleev
f0cd294628 Fix matrix-prometheus-node-exporter failure to start 
The quotes around "host" for both `--pid` and `--net` were
causing trouble for me:

> docker: --pid: invalid PID mode.

and:

> docker: Error response from daemon: network "host" not found.

I've also changed the `-v` call to `--mount` for consistency with the
rest of the playbook.
 2021-02-12 11:59:24 +02:00
efraimbart
b7e68cb779
Fix wrong docker image being pulled 
Changed `matrix_mautrix_signal_docker_image_force_pull` to `matrix_mautrix_signal_daemon_docker_image_force_pull` when force pulling the daemon
 2021-02-11 22:56:37 -05:00
Peetz0r
fde222a041 Update Prometheus Node Exporter 1.0.1 => 1.1.0 2021-02-10 23:11:17 +01:00
Peetz0r
3a77261dc6 Update Grafana 7.3.7 => 7.4.0 2021-02-10 23:11:02 +01:00
Peetz0r
144a5e6198 Register docker network info and use it for prometheus-node-exporter 
Using the hardcoded IP did break while I was
messing with IPv6 stuff on the other branch
 2021-02-10 22:54:42 +01:00
Peetz0r
76d7e84be5 Make prometheus-node-exporter a bit more capable 
By running it in a more privileged container with access to the host network stack and such
 2021-02-10 22:54:14 +01:00
Peetz0r
989100b1c1 Grafana nginx proxy config 2021-02-10 22:54:14 +01:00
Peetz0r
eb5aa93e8a Grafana 
Also includes the dashboards for Synapse and for Node Exporter.

Again has only been tested on debian amd64 so far, but the grafana docker image is available for arm64 and arm32. Nice.
 2021-02-10 22:54:14 +01:00
Peetz0r
e525970b39 Prometheus Node Exporter 
Basic system stats, to show stuff the synapse metrics
can't show such as resource usage by bridges, etc

Seems to work fine as well.

This too has only been tested on debian amd64 so far
 2021-02-10 22:54:14 +01:00
Peetz0r
13ef9e85cf Prometheus 
Initial attempt. Seems to work fine.

Only tested on debian amd64 so far
 2021-02-10 22:54:14 +01:00
Slavi Pantaleev
7e8e95a09a Make S3-mounting path configurable 
This will make data migration easier.
 2021-02-09 22:05:07 +02:00
Yan
385b6c623e Fixes: a66a604e ("Selfbuild appservice-slack bridge") 2021-02-09 00:02:48 +01:00
Stuart Thomson
064b2e533c Add variable for extra domains to get LE certs for 
I felt that adding another variable was probably going to be the easiest way to do this. I may end up adding another variable to enable this feature, for consistency with some of the other things.
 2021-02-06 20:02:39 +13:00
Paul Tötterman
9ad67d7cdf
Upgrade Element (1.7.19 -> 1.7.20) 
https://github.com/vector-im/element-web/releases/tag/v1.7.20
https://hub.docker.com/layers/vectorim/element-web/v1.7.20/images/sha256-44cae3a532d86c16940deb70866b522ba6acc8c5d7adf3c661cfc8b06f1de681?context=explore
 2021-02-04 16:26:56 +02:00
Aaron Raimist
5cb976c321
Upgrade Element (1.7.18 -> 1.7.19) 2021-02-03 10:07:43 -06:00
Julian Foad
d1f28d17bb Allow psql args to be given to matrix-postgres-cli 
This passes any arguments given to 'matrix-postgres-cli' to the 'psql' command.

Examples:
  $ # start an interactive shell connected to a given db
  $ sudo matrix-postgres-cli -d synapse
  $ # run a query, non-interactively
  $ sudo matrix-postgres-cli -d synapse -c 'SELECT group_id FROM groups;'
 2021-02-03 12:59:21 +00:00
Slavi Pantaleev
c4a05b760a Make mautrix bridges not overwrite their config 
If they do, our next playbook runs would simply revert it
and report "changed" for that task.

There's no benefit to letting the bridge spew a new config file.

This does not apply to the mautrix whatsapp bridge, because that one
is written in Go (not Python) and takes different flags. There's no
equivalent flag there.
 2021-02-03 13:23:18 +02:00
Slavi Pantaleev
889b299bc2
Merge pull request #804 from pushytoxin/matrix-etherpad 
Self-hosted Etherpad
 2021-01-31 09:55:46 +02:00
Slavi Pantaleev
7804060eee Use Etherpad 1.8.7, not :latest 2021-01-31 09:47:47 +02:00
Slavi Pantaleev
98f9619279
Merge pull request #843 from thomwiggers/update-irc 
Update IRC bridge to 0.23.0
 2021-01-31 09:26:56 +02:00
o8F0LY
0a0c9a4efc Add double quotes to avoid synatx errors 2021-01-30 22:54:51 +01:00
Thom Wiggers
8de739132a
Update IRC bridge to 0.23.0 2021-01-30 12:47:56 +01:00
Peetz0r
e0e459ac0c Fixed missing quotes 2021-01-30 11:58:24 +01:00
Slavi Pantaleev
efbffa26bf
Fix typo 2021-01-30 11:37:08 +02:00
Peetz0r
473936065d Use Debian Buster Docker repo on Debian Bullseye 
Future maintainer: check on https://docs.docker.com/engine/install/debian/ if Docker for
Debian 11 is released, then undo this commit
 2021-01-30 09:02:41 +01:00
Béla Becker
2edc9cb83c Name the Synapse database on state compression import 
Fixes:
https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/833
 2021-01-28 17:54:02 +01:00
Béla Becker
b7261dc098 Etherpad role: Etherpad needs Dimension 
The default scalar.vector.im integrations manager doesn't support custom
URL's for etherpad, therefore Dimension needs to be enabled.
 2021-01-28 15:11:22 +01:00
Slavi Pantaleev
3ea90ca436 Upgrade Element (1.7.17 -> 1.7.18) 2021-01-28 09:23:23 +02:00
Slavi Pantaleev
e7f3f7c431 Enable /devices endpoint for generic workers 2021-01-27 22:18:47 +02:00
Slavi Pantaleev
26b287bd17 Upgrade certbot (1.10.1 -> 1.11.0) 2021-01-27 21:51:46 +02:00
Slavi Pantaleev
1cd2a218de Merge branch 'master' into synapse-workers 2021-01-27 21:41:54 +02:00
Slavi Pantaleev
c6feb0b99e Upgrade Synapse (v1.25.0 -> v1.26.0) 2021-01-27 21:41:47 +02:00
Slavi Pantaleev
39c2d72d17 Merge branch 'master' into synapse-workers 2021-01-27 17:12:16 +02:00
Slavi Pantaleev
008049f2a9 Fix mautrix-telegram registration file mistake 
Regression since f6097fbba1
 2021-01-27 17:11:46 +02:00
Slavi Pantaleev
a49dab76f8 Merge branch 'master' into synapse-workers 2021-01-27 15:49:16 +02:00
Slavi Pantaleev
e3290d8bcb Remove |to_json causing trouble 
Fixes a regression introduced in f6097fbba1, which was cauing Synapse
to die with this error message:

> ValueError: sender_localpart needs characters which are not URL encoded.
 2021-01-27 15:48:35 +02:00
Slavi Pantaleev
a31c9603fa Merge branch 'master' into synapse-workers 2021-01-27 15:43:56 +02:00
Slavi Pantaleev
f6097fbba1 E2BE not working for mautrix bridges 
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/806
 2021-01-27 15:43:33 +02:00
Slavi Pantaleev
07f1ea24ee Make it possible to override the welcome.html.j2 template used for Element 2021-01-27 12:36:57 +02:00
Slavi Pantaleev
d98a1ceadd Merge branch 'master' into synapse-workers 2021-01-27 10:27:17 +02:00
Slavi Pantaleev
512f42aa76 Do not report docker kill/rm attempts as errors 
These are just defensive cleanup tasks that we run.
In the good case, there's nothing to kill or remove, so they trigger an
error like this:

> Error response from daemon: Cannot kill container: something: No such container: something

and:

> Error: No such container: something

People often ask us if this is a problem, so instead of always having to
answer with "no, this is to be expected", we'd rather eliminate it now
and make logs cleaner.

In the event that:
- a container is really stuck and needs cleanup using kill/rm
- and cleanup fails, and we fail to report it because of error
suppression (`2>/dev/null`)

.. we'd still get an error when launching ("container name already in use .."),
so it shouldn't be too hard to investigate.
 2021-01-27 10:22:46 +02:00
Slavi Pantaleev
869727a402 Add comment to mautrix-facebook bridge regarding alembic migrations 2021-01-27 10:17:48 +02:00
Slavi Pantaleev
a9af36841d Merge branch 'master' into synapse-workers 2021-01-27 09:34:29 +02:00
Slavi Pantaleev
346f8b3475
Fix typo 2021-01-26 10:13:08 +02:00
Slavi Pantaleev
26542308b3 Use |to_json in more places in matrix-appservice-discord config 
I don't think this was causing an issue, but it might
if the bot token has a more special value in the future.

Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/828
 2021-01-26 10:00:07 +02:00
Béla Becker
42f338016b Etherpad matrix-nginx-proxy configuration 2021-01-26 05:04:47 +01:00
Béla Becker
7bc9be95cb Add map directive to the base of nginx.conf 
This needs to be added for WebSocket upgrades to work properly (see doc:
http://nginx.org/en/docs/http/websocket.html)
 2021-01-26 05:04:47 +01:00
Béla Becker
38bf1eda70 Etherpad Jitsi integration 2021-01-26 05:04:47 +01:00
Béla Becker
4b451ff782 Etherpad role 2021-01-26 05:04:47 +01:00
Slavi Pantaleev
a535226210 Stop/disable unnecessary worker services before deleting them 2021-01-25 15:20:37 +02:00
Slavi Pantaleev
dd24942c03
Use |to_json for mautrix-telegram config 
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/824
 2021-01-25 15:15:27 +02:00
Slavi Pantaleev
778b66876c Merge branch 'master' into synapse-workers 2021-01-25 14:56:55 +02:00
Slavi Pantaleev
70dcdd41a7 Simplify matrix-remove-all 
We don't have instantiated services anymore, nor
/etc/systemd/system/matrix-synapse.service.wants/ stuff.
 2021-01-25 14:02:30 +02:00
Slavi Pantaleev
d3ecc6f017 Fix bridges failing to upload media when Synapse workers are enabled 2021-01-25 13:55:08 +02:00
Slavi Pantaleev
66cdc7bf5a Clean up worker.yaml generation a bit and make it more flexible 2021-01-25 13:02:01 +02:00
Slavi Pantaleev
1462409b34 Fix worker listening addresses 
Not specifying bind addresses for the worker resulted in this warning:

> synapse.app - 47 - WARNING - None - Failed to listen on 0.0.0.0, continuing because listening on [::]

Additionally, metrics listening only on 127.0.0.1 seems like a no-op.
Only having it accessible from within the container is likely not what
we intend. Changed that to all interfaces as well.

Whether it actually gets exposed or not depends on the systemd service
and `matrix_synapse_workers_container_host_bind_address`.
 2021-01-25 12:29:47 +02:00
Slavi Pantaleev
01747c8cc4 Prevent Synapse warning about enabling metric listeners with enable_metrics: false 
> synapse.app.generic_worker - 606 - WARNING - None - Metrics listener configured, but enable_metrics is not True!
 2021-01-25 12:24:12 +02:00
Slavi Pantaleev
70796703d3 Run Synapse workers in their own containers 
This switches the `docker exec` method of spawning
Synapse workers inside the `matrix-synapse` container with
dedicated containers for each worker.

We also have dedicated systemd services for each worker,
so this are now:
- more consistent with everything else (we don't use systemd
instantiated services anywhere)
- we don't need the "parse systemd instance name into worker name +
port" part
- we don't need to keep track of PIDs manually
- we don't need jq (less depenendencies)
- workers dying would be restarted by systemd correctly, like any other
service
- `docker ps` shows each worker separately and we can observe resource
usage
 2021-01-25 12:14:46 +02:00
Slavi Pantaleev
6fc214480c
Fix Signal role using incorrect database string variable 
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/823
 2021-01-25 10:42:23 +02:00
Slavi Pantaleev
da50fb27a0 Whitelist /_matrix/key requests for going to generic workers on the federation port 2021-01-25 09:46:50 +02:00
Slavi Pantaleev
4d62a75f6f Get matrix-corporal to play nicely with a Synapse worker setup 
We do this by creating one more layer of indirection.

First we reach some generic vhost handling matrix.DOMAIN.
A bunch of override rules are added there (capturing traffic to send to
ma1sd, etc). nginx-status and similar generic things also live there.

We then proxy to the homeserver on some other vhost (only Synapse being
available right now, but repointing this to Dendrite or other will be
possible in the future).
Then that homeserver-specific vhost does its thing to proxy to the
homeserver. It may or may not use workers, etc.

Without matrix-corporal, the flow is now:
1. matrix.DOMAIN (matrix-nginx-proxy/matrix-domain.conf)
2. matrix-nginx-proxy/matrix-synapse.conf
3. matrix-synapse

With matrix-corporal enabled, it becomes:
1. matrix.DOMAIN (matrix-nginx-proxy/matrix-domain.conf)
2. matrix-corporal
3. matrix-nginx-proxy/matrix-synapse.conf
4. matrix-synapse

(matrix-corporal gets injected at step 2).
 2021-01-25 09:46:41 +02:00
Slavi Pantaleev
c05d3d09bd Disable systemd services while stopping them 
This removes some `multi-target.wants` symlinks as well, etc.

But despite systemd saying:

> Removed symlink /etc/systemd/system/matrix-synapse.service.wants/matrix-synapse-worker@appservice:0.service

.. I still see such symlinks tehre for me for some reason, so keeping the
code (below) to find & delete them still seems like a good idea.
 2021-01-25 08:58:23 +02:00
Slavi Pantaleev
63301b0ef1 Improvements around Synapse worker/metrics ports exposure 
There was a `matrix_nginx_proxy_enabled|default(False)` check, but:
- it didn't seem to work reliably for some reason (hmm)
- referring to a `matrix_nginx_proxy_*` variable from within the
  `matrix-synapse` role is not ideal
- exposing always happened on `127.0.0.1`, which may not be good enough
  for some rarer setups (where the own webserver is external to the host)
 2021-01-25 08:25:43 +02:00
Slavi Pantaleev
f66a6b066b Be more specific with the Redis version being used 2021-01-25 01:34:58 +02:00
Slavi Pantaleev
5ca68210cd Do not handle /_matrix/federation on client-server port, nor /_matrix/client stuff on federation port 
I guess it didn't hurt to do it until now, but it's not great serving
federation APIs on the client-server API port, etc.

matrix-corporal doesn't work yet (still something to be solved in the
future), but its firewalling operations will also be sabotaged
by Client-Server APIs being served on the federation port (it's a way to get around its firewalling).
 2021-01-24 22:22:57 +02:00
Slavi Pantaleev
cc5cf0d725 Load roles/matrix-synapse/vars/workers.yml earlier to not break --tags=setup-nginx-proxy 
If we load it at runtime, during matrix-synapse role execution,
it's good enough for matrix-synapse and all roles after that,
but.. it breaks when someone uses `--tags=setup-nginx-proxy` alone.

The downside of including this vars file like this in `setup.yml`
is that the variables contained in it cannot be overriden by the user
(in their inventory's `vars.yml`).
... but it's not like overriding these variables was possible anyway
when including them at runtime.
 2021-01-24 20:19:55 +02:00
Slavi Pantaleev
92ee3d78a0 Fix matrix-remove-all for when Synapse workers are enabled 2021-01-24 19:42:32 +02:00
Slavi Pantaleev
8fa913dca7 Fix Ansible warning 2021-01-24 19:11:35 +02:00
Marcel Partap
edc21f15e5 Restrict publishing worker (metrics) ports to localhost 2021-01-24 08:53:09 +01:00
Marcel Partap
183adec3d8 Merge remote-tracking branch 'origin/master' into synapse-workers 2021-01-23 15:04:11 +01:00
Marcel Partap
c8f051a42d Track workers endpoint list in repo instead of regenerating on user side 2021-01-23 14:44:36 +01:00
Marcel Partap
f2c7d79238 Drop probably incorrect comment from synapse homeserver.yaml.j2 2021-01-23 14:44:36 +01:00
Slavi Pantaleev
a56cb34850 Notify people if /matrix/postgres/data-auto-upgrade-backup exists 2021-01-23 14:14:45 +02:00
Slavi Pantaleev
a2422c458a Notify of remaining matrix-postgres local data in a better way 2021-01-23 14:04:51 +02:00
Slavi Pantaleev
1cd251ed78 Don't delete Docker images which may have been pulled by another 
Some people run Coturn or Jitsi, etc., by themselves and disable it
in the playbook.

Because the playbook is trying to be nice and clean up after itself,
it was deleting these Docker images.

However, people wish to pull and use them separately and would rather
they don't get deleted.

We could make this configurable for the sake of this special case, but
it's simpler to just avoid deleting these images.
It's not like this "cleaning things up" thing works anyway.
As time goes on, the playbook gets updated with newer image tags
and we leave so many images behind. If one doesn't run
`docker system prune -a` manually once in a while, they'd get swamped
with images anyway. Whether we leave a few images behind due to the lack
of this cleanup now is pretty much irrelevant.
 2021-01-23 14:01:31 +02:00
Slavi Pantaleev
f085362149 Fix some Postgres CLI scripts to target the correct database 
Fixes a regression introduced in 95346f3117.

Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/814

Using `matrix_synapse_` variables in the `matrix-postgres` role is not
ideal, but.. this script belongs neither here, nor there.
We'll have it be like that for now.
 2021-01-23 11:38:34 +02:00
Slavi Pantaleev
3051655d21
Ensure matrix_appservice_irc_docker_src_files_path created when self-building 
The git module will create it anyway, but that would likely use `root:root`.
 2021-01-22 22:42:40 +02:00
Panagiotis Georgiadis
f10e3fef0d
Merge branch 'master' into irc 2021-01-22 20:30:24 +00:00
Panagiotis Georgiadis
e502ee33da
Selfbuild appservice-irc bridge 2021-01-22 21:28:53 +01:00
Slavi Pantaleev
f9968b6981 Fix matrix_postgres_connection_password length check 2021-01-22 21:22:58 +02:00
Slavi Pantaleev
2997a7fc3e Make mx-puppet-* bridges not log to files 
We log everything in systemd/journald for every service already,
so there's no need for double-logging, bridges rotating log files
manually and other such nonsense.
 2021-01-22 19:22:26 +02:00
Slavi Pantaleev
f3dd346724 Try to tighten Signal bridge security 2021-01-22 18:56:08 +02:00
Slavi Pantaleev
8ec975e3c8 Use matrix:matrix for Signal bridge (not root) 2021-01-22 18:52:20 +02:00
Slavi Pantaleev
37909aa7a9 Create signald/{avatars,attachments,data} and rename config dir 2021-01-22 18:40:51 +02:00
Slavi Pantaleev
88addd71fc Fix Postgres imports going to the matrix DB by default 
Well, they still do go to that DB by default,
but our docs give a better command to users, which would do the right
thing.
 2021-01-22 17:39:08 +02:00
Slavi Pantaleev
bef0702fea Wait some more when starting Postgres during setup on ARM 2021-01-22 16:21:30 +02:00
Slavi Pantaleev
f9c1d62435 Fix Postgres database (-alpine) failing to start on ARM32 2021-01-22 13:52:55 +02:00
Slavi Pantaleev
95346f3117 Reorganize Postgres access (breaking change) 
In short, this makes Synapse a 2nd class citizen,
preparing for a future where it's just one-of-many homeserver software
options.

We also no longer have a default Postgres superuser password,
which improves security.

The changelog explains more as to why this was done
and how to proceed from here.
 2021-01-22 13:26:12 +02:00
throwawayay
a30ef0cc29
Update element-web (1.7.16 -> 1.7.17) 2021-01-20 08:35:07 -05:00
Slavi Pantaleev
024a23ed17 Upgrade mautrix-facebook to the new Postgres-only version 
I had intentionally held it back in 39ea3496a4
until:
- it received more testing (there were a few bugs during the
migration, but now it seems OK)
- this migration guide was written
 2021-01-20 10:12:51 +02:00
pushytoxin
d51ea25219 When validating LE certs, do not wait for a random time 
While administering we will occasionally invoke this script interactively with the "non-interactive" switch still there, yet still sit at the desk waiting for 300 seconds for this timer to run out.

The systemd-timer already uses a 3h randomized delay for automatic renewals, which serves this purpose well.
 2021-01-19 18:41:45 +01:00
Slavi Pantaleev
39ea3496a4 Downgrade/lock mautrix-facebook to pre-mobile times 
The `mobile` branch got merged to `master`, which ends up becoming
`:latest`. It's a "rewrite" of the bridge's backend and only
supports a Postgres database.

We'd like to go back (well, forward) to `:latest`, but that will take
a little longer, because:
- we need to handle and document things for people still on SQLite
(especially those with external Postgres, who are likely on SQLite for
bridges)
- I'd rather test the new builds (and migration) a bit before
releasing it to others and possibly breaking their bridge

Brave ones who are already using the bridge with Postgres
can jump on `:latest` and report their experience.
 2021-01-19 18:44:15 +02:00
Slavi Pantaleev
c9d96d8135 Fix mautrix-telegram paths creation bug 2021-01-19 09:15:34 +02:00
Slavi Pantaleev
56c54d5cc7 Upgrade matrix-corporal (2.0.1 -> 2.1.0) 2021-01-18 18:23:17 +02:00
Slavi Pantaleev
c1008fde44 Upgrade matrix-coturn (4.5.1.3 -> 4.5.2) 2021-01-18 00:41:47 +02:00
Slavi Pantaleev
cf06f84608 Upgrade matrix-corporal (2.0.0 -> 2.0.1) 2021-01-17 22:05:26 +02:00
Slavi Pantaleev
d95cbe38d7 Rename configuration setting 2021-01-17 18:29:26 +02:00
Slavi Pantaleev
28d86e3aaa Initial work on support for matrix-corporal v2 2021-01-16 23:47:14 +02:00
Slavi Pantaleev
8549926395 Attempt to fix mautrix-whatsapp DB migration user table conflict 
Discussed in https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/791
 2021-01-15 17:13:47 +02:00
Slavi Pantaleev
1692a28fe4 Work around annoying Docker warning about undefined $HOME 
> WARNING: Error loading config file: .dockercfg: $HOME is not defined

.. which appeared in Docker 20.10.
 2021-01-15 00:23:01 +02:00
Slavi Pantaleev
26f0bbfdef Fix self-building for matrix-ma1sd on non-version tag/branch 
Building `master` or something like this was failing.
 2021-01-14 23:57:38 +02:00
Slavi Pantaleev
9e936e45ad Use BuildKit for ma1sd Docker building 
Newer versions (`master`) use things like `--platform=...`,
which are not supported unless we enable the new BuildKit building
backend.
 2021-01-14 23:48:30 +02:00
Slavi Pantaleev
e1690722f7 Replace cronjobs with systemd timers 
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/756

Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/737

I feel like timers are somewhat more complicated and dirty (compared to
cronjobs), but they come with these benefits:

- log output goes to journald
- on newer systemd distros, you can see when the timer fired, when it
will fire, etc.
- we don't need to rely on cron (reducing our dependencies to just
systemd + Docker)

Cronjobs work well, but it's one more dependency that needs to be
installed. We were even asking people to install it manually
(in `docs/prerequisites.md`), which could have gone unnoticed.

Once in a while someone says "my SSL certificates didn't renew"
and it's likely because they forgot to install a cron daemon.

Switching to systemd timers means that installation is simpler
and more unified.
 2021-01-14 23:35:50 +02:00
Slavi Pantaleev
05ca9357a8 Add .service suffix to systemd units list 
We'll be adding `.timer` units later on, so it's good to be
more explicit.
 2021-01-14 23:02:10 +02:00
Slavi Pantaleev
653d1d7924 Revert "Don't self-build ma1sd every time unless git sources changed" 
This reverts commit 2a25b63bb6.

Looking at other roles, we trigger building regardless of this.
It's better to always trigger it, because it's less fragile.
If the build fails and we only trigger it on "git changes"
then we won't trigger it for a while. That's not good.

Triggering it each and every time may seem like a waste,
but it supposedly runs quickly due to Docker caching.
 2021-01-14 22:20:51 +02:00
Slavi Pantaleev
6f5aaad48d Split install/uninstall tasks in matrix-coturn 2021-01-14 22:11:38 +02:00
Slavi Pantaleev
57ea43d8b0 Remove unused variable 
This variable has been useless since 2019-01-08.
We probably don't need to check for its usage anymore,
given how much time has passed since then, but ..
 2021-01-14 17:47:13 +02:00
Slavi Pantaleev
7a90eb6d4f Relocate some validation tasks 2021-01-14 17:00:46 +02:00
Slavi Pantaleev
67dc5237c5
Merge pull request #794 from drpaneas/appservice_slack_rebuild 
Selfbuild appservice-slack bridge
 2021-01-14 10:47:31 +02:00
Slavi Pantaleev
862a6276a0
Do not pull appservice-slack when self-building 2021-01-14 10:47:23 +02:00
Slavi Pantaleev
b15da29ebb Bump Synapse to v1.25.0 for ARM 2021-01-14 10:41:47 +02:00
Panagiotis Georgiadis
a66a604e53
Selfbuild appservice-slack bridge 2021-01-14 01:29:11 +01:00
Slavi Pantaleev
2a25b63bb6 Don't self-build ma1sd every time unless git sources changed 2021-01-13 20:14:47 +02:00
Slavi Pantaleev
a5a44a9d3f
Merge pull request #786 from drpaneas/rebuild_telegram 
Local rebuild for Telegram
 2021-01-13 18:01:15 +02:00
Slavi Pantaleev
52fa7e576b
Fix path typo 2021-01-13 18:00:32 +02:00
Slavi Pantaleev
5fa30cdfcb
Ensure matrix_mautrix_facebook_docker_src_files_path created 
Before we potentially clone to that path, we'd better make sure it exists.

We also simplify `when` statements a bit.
Given that we're in `setup_install.yml`, we know that the bridge is enabled,
so there's no need to check for that.
 2021-01-13 17:59:46 +02:00
Slavi Pantaleev
568cb3d86f Upgrade matrix-mailer (4.93-r0 -> 4.93-r1) 
This is a bit misleading, because the old Docker image
was tagged as `4.93.1`. There hasn't been a `4.93.1` version yet though.

Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/792
 2021-01-13 17:37:31 +02:00
Slavi Pantaleev
24100342e1 Tell people that federation_ip_range_blacklist is gone 
Related to d5945c6e78
 2021-01-13 13:47:51 +02:00
Slavi Pantaleev
d5945c6e78 Upgrade Synapse (v1.24.0 -> v1.25.0) for amd64 2021-01-13 13:02:49 +02:00
Panagiotis Georgiadis
999fd2596f
Local rebuild for Telegram 2021-01-12 19:29:50 +01:00
Slavi Pantaleev
0b260a133f Add matrix-aux role to help with managing auxiliary files/directories 2021-01-11 22:32:52 +02:00
Will
5b0761bf40
Create list_tokens.yml 2021-01-09 08:52:02 -08:00
Will
1468010194
Update main.yml 2021-01-09 08:50:34 -08:00
Marcel Partap
cd8100544b Merge remote-tracking branch 'origin/master' into synapse-workers 
Sync with upstream
 2021-01-08 20:58:50 +01:00
Slavi Pantaleev
f7ae050eaf Remove useless quotes around ssl_ciphers value 
Not sure if it breaks with them or not, but no other directive
uses quotes and the nginx docs show examples without quotes,
so we're being consistent with all of that.
 2021-01-08 21:22:44 +02:00
Slavi Pantaleev
5822ba0c01 Use a more natural if statement 2021-01-08 21:21:33 +02:00
Slavi Pantaleev
de6ecd8818
Update inaccurate comments 2021-01-08 21:15:14 +02:00
Agustin Ferrario
5156c63a76 Clean up code 
Code was clean up and simplified to make it simpler and easier to
maintain. No features were modified.
 2021-01-08 18:35:27 +01:00
Agustin Ferrario
25d423e6b6 Fix errors per spantaleev suggestions 
The different configurations are now all lower case, for consistent
naming.

`matrix_nginx_proxy_ssl_config` is now called
`matrix_nginx_proxy_ssl_preset`. The different options for "modern",
"intermediate" and "old" are stored in the main.yml file, instead of
being hardcoded in the configuration files. This will improve the
maintainability of the code.

The "custom" preset was removed. Now if one of the variables is set, it
will use it instead of the preset. This will allow to mix and match more
easily, for example using all the intermediate options but only
supporting TLSv1.2. This will also provide better backward
compatibility.
 2021-01-08 11:32:10 +01:00
Agustin Ferrario
3cb71e7e84 Merge branch 'master' of https://github.com/spantaleev/matrix-docker-ansible-deploy 2021-01-03 13:18:21 +01:00
Slavi Pantaleev
6cce5383bc Fix Ansible 2.9.6 check 
Fixup for https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/769
 2021-01-03 08:55:30 +02:00
Slavi Pantaleev
2c09111a3a Actually enforce that we run on Ansible >= 2.7.1 
Related to 6e652e10ad
 2021-01-03 08:54:17 +02:00
Slavi Pantaleev
8710883064
Merge pull request #743 from pushytoxin/docker_network 
Drop the old workaround for an Ansible bug that has been fixed three years ago
 2021-01-03 08:49:09 +02:00
Slavi Pantaleev
cd2d2f594a
Merge pull request #686 from laszabine/signal 
Added a role for the bridge mautrix-signal
 2021-01-03 08:25:01 +02:00
Slavi Pantaleev
3b524ee815 Make mautrix-signal bridge not log to files 
We try to only use console logging (going to journald) for everything,
instead of logging things twice (or more).
 2021-01-03 08:20:43 +02:00
Slavi Pantaleev
274f23f668 Make matrix-mautrix-signal-daemon.service depend on docker.service 2021-01-03 08:16:49 +02:00
Slavi Pantaleev
da2a6682b3 Get rid of matrix_mautrix_signal_configuration_permissions 
While it's kind of nice having it, it's also somewhat raw
and unnecessary.

Having a good default and not even mentioning it seems better
for most users.

People who need a more exposed bridge (rare) can use
override the default configuration using
`matrix_mautrix_signal_configuration_extension_yaml`.
 2021-01-03 08:06:32 +02:00
Slavi Pantaleev
df8d9cfd34 Remove some TODOs 
The answer to these is: it's good to have them in both places.
The role defines the obvious things it depends on (not knowing
what setup it will find itself into), and then
`group_vars/matrix_servers` "extends" it based on everything else it
knows (the homeserver being Synapse, whether or not the internal
Postgres server is being used, etc.)
 2021-01-03 07:46:55 +02:00
Slavi Pantaleev
4805637181 Add support for custom ma1sd view sesion templates 2021-01-03 07:36:09 +02:00
Slavi Pantaleev
f84c69c164 Relocate custom ma1sd threepid email templates to config/ 
We used to store them in data/, but that seems inappropriate,
since it's just static configuration that the playbook can recreate.
 2021-01-03 07:35:13 +02:00
Slavi Pantaleev
b5812b539b Rename ma1sd custom email template variable 
Keeps up with a1f64f5159 (diff-0ccf69eb4d59a7645eb4d0a0b077e693948edb33ad06df043bba3fb30122879b)
 2021-01-03 00:58:31 +02:00
Slavi Pantaleev
fb83eccf99 Relocate SQL template file 2021-01-03 00:58:31 +02:00
Sabine Laszakovits
84cac25c11 added config data_dir (else in ~, which isn't set) 2021-01-02 19:01:21 +01:00
Sabine Laszakovits
56af2b1a8c small fixes 2021-01-02 00:56:45 +01:00
Sabine Laszakovits
89f7f3c3b8 added log level configuration 2021-01-02 00:55:55 +01:00
Sabine Laszakovits
ffb837d4bc made the bridge use the default postgres db 2021-01-02 00:39:11 +01:00
Sabine Laszakovits
a06c58c753 Merge branch 'master' into signal 2021-01-01 21:05:00 +01:00
Slavi Pantaleev
1ed991e25c
Merge pull request #769 from aaronraimist/check-for-buggy-ansible 
Check for buggy version of Ansible that Ubuntu 20.04 provides
 2020-12-29 11:19:37 +02:00
Slavi Pantaleev
86da489b9b Never fail when stopping systemd service during (SQLite -> Postgres) migration 
We need to suppress systemd service-stopping requests in certain rare
cases like https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/771

That issue seems to describe a case, where a migration from mxisd to
ma1sd was happening (DB files had just been moved), and then we were
attemping to stop `matrix-ma1sd.service` so we could import that database into
Postgres. However, there's neither `matrix-mxisd.service`, nor
`matrix-ma1sd.service` after `migrate_mxisd.yml` had just run, so
stopping `matrix-ma1sd.service` was failing.
 2020-12-29 10:31:20 +02:00
Aaron Raimist
8827a49e21
Check equality properly 2020-12-26 20:20:00 -06:00
Aaron Raimist
3dd0517f04
Check for buggy version of Ansible that Ubuntu 20.04 provides 2020-12-26 20:13:49 -06:00
Slavi Pantaleev
a2a4218e95 Make mautrix-python-based bridges E2EE happier 
Fixes a problem like this:
> File "/usr/lib/python3.8/site-packages/mautrix/bridge/e2ee.py", line 79, in __init__
> raise RuntimeError("Unsupported database scheme")

mautrix-python's e2ee.py module expects to find `postgres://` instead of
`postgresql://`.
 2020-12-23 15:39:12 +02:00
Slavi Pantaleev
80c72615c7 Fixup all Dimension boolean fields after pgloader import 
This is 8b6174786b done right. There were many more fields
that we had to account for.
 2020-12-23 14:12:11 +02:00
Slavi Pantaleev
21662af3be Archive database only after additional_psql_statements_list had executed 2020-12-23 14:12:11 +02:00
Stuart Mumford
019a4d7dcd Use role relative paths for things 2020-12-23 11:34:48 +00:00
Slavi Pantaleev
be0c599565 Feed more slashes to mautrix bridges when using SQLite 
This makes the `sqlite://` URI match what we were using before
and what the config expects.
 2020-12-23 13:33:25 +02:00
Slavi Pantaleev
8b6174786b Fixup Dimension database schema a bit after pgloader import 2020-12-23 12:57:43 +02:00
Slavi Pantaleev
c5f8b1f61b Fix mautrix-whatsapp Postgres connection string to not use SSL by default 2020-12-23 11:40:22 +02:00
Slavi Pantaleev
f19b29846d
Merge pull request #740 from jdreichmann/postgres-per-default 
postgres: create databases for all services
 2020-12-23 11:00:41 +02:00
Slavi Pantaleev
ad1425eee4 Add pgloader self-building support (for ARM) 2020-12-23 09:08:54 +02:00
Slavi Pantaleev
8675dedbdb Add support for automatic (nedb -> Postgres) migration to matrix-appservice-slack 2020-12-22 19:56:52 +02:00
Slavi Pantaleev
9b95e1937c Auto-restart matrix-appservice-irc after (nedb -> Postgres) migration 2020-12-22 19:34:08 +02:00
Slavi Pantaleev
715bdf2c64 Add support for automatic (nedb -> Postgres) migration to mx-appservice-irc 2020-12-22 19:32:43 +02:00
Slavi Pantaleev
15f4cc924d Rename variables (_database_db_name -> _database_name) 2020-12-22 17:10:02 +02:00
Slavi Pantaleev
ab6563ce4e Add support for automatic (Postgres -> SQLite) migration to mx-puppet-twitter 2020-12-22 17:09:08 +02:00
Slavi Pantaleev
69cc2145d2 Add support for automatic (Postgres -> SQLite) migration to mx-puppet-steam 2020-12-22 16:51:59 +02:00
Slavi Pantaleev
262a25f997 Add support for automatic (Postgres -> SQLite) migration to mx-puppet-slack 2020-12-22 16:39:21 +02:00
Slavi Pantaleev
e49eb078a2 Add support for automatic (Postgres -> SQLite) migration to mx-puppet-skype 2020-12-22 16:29:47 +02:00
Dan Arnfield
c3b63c6c97 Update element-web (1.7.15 -> 1.7.16) 2020-12-22 08:29:37 -06:00
Dan Arnfield
10e0fa17ad Update nginx (1.19.5 -> 1.19.6) 2020-12-22 08:23:37 -06:00
Slavi Pantaleev
d135cd9cd3 Ensure mx-puppet-discord directories are created before attempting migration 
Our old (base-path -> data-path) SQLite migration can't work otherwise.

It's probably not necessary to keep it anymore, but since we still do,
at least we should take care to ensure it works.
 2020-12-22 13:44:36 +02:00
Slavi Pantaleev
44c9f4daca Add support for automatic (Postgres -> SQLite) migration to mx-puppet-instagram 2020-12-22 13:30:52 +02:00
Slavi Pantaleev
e64758c119 Add missing restart task 
Should have been part of 149872e00c
 2020-12-22 13:24:53 +02:00
Slavi Pantaleev
149872e00c Add support for automatic (Postgres -> SQLite) migration to mx-puppet-discord 2020-12-22 11:10:10 +02:00
Slavi Pantaleev
9b4bf73587 Fix undefined variable reference 2020-12-22 11:08:07 +02:00
Slavi Pantaleev
6488e11d69 Relocate some tasks 2020-12-22 10:52:36 +02:00
Slavi Pantaleev
ca066217d1
Merge pull request #757 from 0x46616c6b/disable-nginx-logging-option 
add option to disable nginx access log
 2020-12-21 22:30:25 +02:00
louis
dcd4716636 add option to disable nginx access log 2020-12-21 21:26:49 +01:00
Slavi Pantaleev
d0ee86e0a5 Fix matrix_corporal_docker_image_name_prefix referencing matrix_synapse_ stuff 2020-12-21 15:44:14 +02:00
Agustin Ferrario
a06feba281 Merge branch 'master' of https://github.com/spantaleev/matrix-docker-ansible-deploy 2020-12-18 10:22:43 +01:00
Slavi Pantaleev
8748f3d443 Move python{,3}-docker installation to another task 
This also adds support for installing python3-docker (not python-docker)
in systems that run Python 3.
 2020-12-17 11:49:56 +02:00
Slavi Pantaleev
349fbb6434 Do not hardcode armhf for Raspbian 
Raspbian doesn't seem to support arm64, so this is somewhat pointless
right now.

However, they might in the future. Doing this should also unify us
some more with `setup_debian.yml` with the ultimate goal of
eliminating `setup_raspbian.yml`.
 2020-12-17 11:47:34 +02:00
Slavi Pantaleev
a09ed58892 Ensure gnupg installed on Raspbian 
It's likely installed by default, but it doesn't hurt to specify it.
It also makes us more the same with `setup_debian.yml`.
 2020-12-17 11:45:32 +02:00
Slavi Pantaleev
f545de53f7 Do not hardcode "ubuntu" for the Docker APT key URL 
Well, `ubuntu` or `debian`, the same key is served right now,
so it doesn't really matter.

This seems cleaner and less prone to breakage though.
 2020-12-17 11:39:18 +02:00
Slavi Pantaleev
55f252a6ed Do not hardcode amd64 in setup_debian.yml 
Until now, we've only supported non-amd64 on Raspbian.

Seems like there are now people running Debian/Ubuntu on ARM,
so we were forcing them into amd64 Docker packages.

I've gotten a report that this change fixes support
for Ubuntu Server 20.04 on RPi 4B.
 2020-12-17 11:37:30 +02:00
Slavi Pantaleev
ed159cc742 Move matrix_architecture to matrix-base 
We were only defining this in `group_vars/matrix_servers`, which is
inconsistent with how we normally do things.
 2020-12-17 11:33:18 +02:00
Agustin Ferrario
2082242499 Add matrix_nginx_proxy_ssl_config 
A new variable called `matrix_nginx_proxy_ssl_config` is created for
configuring how the nginx proxy configures SSL. Also a new configuration
validation option and other auxiliary variables are created.

A new variable configuration called `matrix_nginx_proxy_ssl_config` is
created. This allow to set the SSL configuration easily using the
default options proposed by Mozilla. The default configuration is set to
"Intermediate", removing the weak ciphers used in the old
configurations.

The new variable can also be set to "Custom" for a more granular control.
This allows to set another three variables called:

- `matrix_nginx_proxy_ssl_protocols`,
- `matrix_nginx_proxy_ssl_prefer_server_ciphers`
- `matrix_nginx_proxy_ssl_ciphers`

Also a new task is added to validate the SSL configuration variable.
 2020-12-16 10:35:37 +01:00
Slavi Pantaleev
0f4649a45c Merge branch 'master' into postgres-per-default 2020-12-16 03:35:39 +02:00
Slavi Pantaleev
a4b8baee49 Fix inability to send (Matrix -> Discord) messages via appservice-discord 
Revert "Correct inabillity for appservice-discord to connect"
This reverts commit 673e19f830.

While certain things do work even with such a local URL, sending
messages leads to an error like this:

> [DiscordBot] verbose: DiscordAPIError: Invalid Form Body
> avatar_url: Not a well formed URL.

Fixes https://github.com/Half-Shot/matrix-appservice-discord/issues/649

The sample configuration file for appservice-discord
c29cfc72f5/config/config.sample.yaml (L8)
explicitly says that we need a public URL.
 2020-12-16 03:35:13 +02:00
Slavi Pantaleev
a197968b7f Make matrix-registration use Postgres by default 
Now that 0.7.2 is out, the Docker image supports Postgres
and we can do the (SQLite -> Postgres) migration.

I've also found out that we needed to fix up the `tokens.ex_date` column
data type a bit to prevent matrix-registration from raising exceptions
when comparing `datetime.now()` with `ex_date` coming from the database.

Example:

> File "/usr/local/lib/python3.8/site-packages/matrix_registration/tokens.py", line 58, in valid
> expired = self.ex_date < datetime.now()
> TypeError: can't compare offset-naive and offset-aware datetimes
 2020-12-15 23:19:56 +02:00
Slavi Pantaleev
1bd5c240e5 Add support for executing additional DB migration statements 
In cases where pgloader is not enough and we need to do some additional
migration work after it, we can now use
`additional_psql_statements_list` and
`additional_psql_statements_db_name`.

This is to be used when migrating `matrix-registration`'s data at the
very least.
 2020-12-15 23:18:29 +02:00
Slavi Pantaleev
3289298ac7 Merge branch 'master' into postgres-per-default 2020-12-15 22:02:52 +02:00
Slavi Pantaleev
69f71f48a6 Upgrade matrix-registration (v0.7.1 -> 0.7.2) and use official image 
This switches us to a container image maintained by the
matrix-registration developer.

0.7.2 also supports a `base_url` configuration option we can use to
make it easier to reverse-proxy at a different base URL.

We still keep some workarounds, because of this issue:
https://github.com/ZerataX/matrix-registration/issues/47
 2020-12-15 22:02:06 +02:00
Slavi Pantaleev
e2ba46bf01 Fix Jinja2 syntax error (else if -> elif) 2020-12-14 22:40:37 +02:00
Slavi Pantaleev
dd797ba6a7 Fix Postgres database importing/upgrading conflicts 
We were running into conflicts, because having initialized
the roles (users) and databases, trying to import leads to
errors (role XXX already exists, etc.).

We were previously ignoring the Synapse database (`homeserver`)
when upgrading/importing, because that one gets created by default
whenever the container starts.

For our additional databases, it's a similar situation now.
It's not created by default as soon as Postgres starts with an empty
database, but rather we create it as part of running the playbook.

So we either need to skip those role/database creation statements
while upgrading/importing, or to avoid creating the additional database
and rely on the import for that. I've gone for the former, because
it's already similar to what we were doing and it's simpler
(it lets `setup_postgres.yml` be the same in all scenarios).
 2020-12-14 22:28:20 +02:00
Slavi Pantaleev
2a502db239 Add (SQLite + Postgres) support and automatic migration to matrix-dimension 2020-12-14 21:01:47 +02:00
Slavi Pantaleev
0790a7b2a8 Add support for matrix_dimension_systemd_{required,wanted}_services_list 
We were referencing them from `group_vars/matrix_servers` since
recently, but there were no such variables and they weren't being put to
use.
 2020-12-14 20:31:07 +02:00
Slavi Pantaleev
374f43735a Separate matrix-dimension install/uninstall tasks 2020-12-14 20:05:31 +02:00
Slavi Pantaleev
8d74593878 Prepare matrix-registation for (SQLite + Postgres) support 
Auto-migration and everything seems to work. It's just that
matrix-registration cannot load the Python modules required
for talking to a Postgres database.

Tracked here: https://github.com/ZerataX/matrix-registration/issues/44

Until this gets fixed, we'll continue default to 'sqlite'.
 2020-12-14 18:58:37 +02:00
Slavi Pantaleev
516ccb2b2b Separate matrix-registration install/uninstall tasks 2020-12-14 18:12:14 +02:00
transcaffeine
13d8a9b39c
hint supported automatic migration nedb->postgres 2020-12-14 16:33:40 +01:00
Slavi Pantaleev
af3ea67bba Add (SQLite + Postgres) support and automatic migration to matrix-ma1sd 2020-12-14 17:16:25 +02:00
Slavi Pantaleev
0ca48f3532 Separate matrix-ma1sd install/uninstall tasks 2020-12-14 16:57:51 +02:00
Slavi Pantaleev
7248eb3c11 Fix syntax error in roles/matrix-bridge-appservice-irc/defaults/main.yml 2020-12-14 16:25:44 +02:00
Slavi Pantaleev
cba973d6b5 Enable automatic (SQLite -> Postgres) migration for matrix-appservice-discord 2020-12-14 16:25:22 +02:00
Slavi Pantaleev
13f84e2ad5 Enable automatic (SQLite -> Postgres) migration for matrix-mautrix-whatsapp 2020-12-14 16:21:01 +02:00
Slavi Pantaleev
86a8091768 Enable automatic (SQLite -> Postgres) migration for matrix-mautrix-telegram 2020-12-14 16:19:54 +02:00
Slavi Pantaleev
3ba8520266 Enable automatic (SQLite -> Postgres) migration for matrix-mautrix-hangouts 2020-12-14 16:18:38 +02:00
Slavi Pantaleev
bbc08722c5 Enable automatic (SQLite -> Postgres) migration for matrix-mautrix-facebook 2020-12-14 16:14:23 +02:00
Slavi Pantaleev
c1431b28f0 Make use of matrix_postgres_db_migration_request.caller 2020-12-14 16:13:57 +02:00
Slavi Pantaleev
ac37091d01 Enable automatic (SQLite -> Postgres) migration for matrix-reminder-bot 2020-12-14 16:03:40 +02:00
Slavi Pantaleev
dc7850e83c Fix wording and variable names a bit 2020-12-14 16:03:40 +02:00
Slavi Pantaleev
bc376c2fb2 Add database migration utility to matrix-postgres role 2020-12-14 16:03:40 +02:00
transcaffeine
54da61f81b
add postgres support mx-appservice-[slack|irc] with fallback to nedb in role and migration notice 2020-12-14 14:08:35 +01:00
Slavi Pantaleev
e3a0c9adda Add (Postgres + SQLite) support to matrix-reminder-bot 
This has been tested and appears to work.
 2020-12-14 15:02:11 +02:00
Slavi Pantaleev
dde1c9f899 Fix indentation causing YAML syntax error 2020-12-14 14:53:35 +02:00
Slavi Pantaleev
aa828ff9f6 Separate matrix-reminder-bot install/uninstall tasks 2020-12-14 14:50:04 +02:00
Slavi Pantaleev
b9a04a7f95 Rename some remaining matrix_*_postgres_* vars back to matrix_*_database_* 
Looks like there are some that I missed in 087dbe4ddc
 2020-12-14 14:42:18 +02:00
transcaffeine
5d70bc1376
add postgres support for mx-puppet-* with fallback to sqlite in role and migration notice 2020-12-14 13:22:58 +01:00
Slavi Pantaleev
087dbe4ddc Rename matrix_*_postgres_* back to matrix_*_database_* 
I was thinking that it makes sense to be more specific,
and using `_postgres_` also separated these variables
from the `_database_` variables that ended up in bridge configuration.

However, @jdreichmann makes a good point
(https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/740#discussion_r542281102)
that we don't need to be so specific and can allow for other engines (like MySQL) to use these variables.
 2020-12-14 13:02:47 +02:00
Slavi Pantaleev
ce21ea3640 Add (Postgres + SQLite) support to matrix-mautrix-hangouts bridge 
I don't use this bridge, so this is completely untested.
 2020-12-14 12:34:59 +02:00
Slavi Pantaleev
43d6ff2af8 Fix sqlite usage for mautrix-facebook/mautrix-telegram 
Regression since 2d99ade72f and 9bf8ce878e, respectively.

When SQLite is to be used, these bridges expect an `sqlite://`
connection string, and not a plain file name (path), like Appservice
Discord and mautrix-whatsapp do.
 2020-12-14 12:30:10 +02:00
Slavi Pantaleev
6c77eae969 Add (Postgres + SQLite) support to matrix-mautrix-whatsapp bridge 
I don't use this bridge, so this is completely untested.
 2020-12-14 12:24:37 +02:00
Slavi Pantaleev
9bf8ce878e Add (Postgres + SQLite) support to matrix-mautrix-telegram bridge 
I don't use this bridge, so this is completely untested.
 2020-12-14 12:06:28 +02:00
Slavi Pantaleev
a3406a182b Move some things around 2020-12-14 12:04:47 +02:00
Slavi Pantaleev
2d99ade72f Add (Postgres + SQLite) support to matrix-mautrix-facebook bridge 2020-12-14 11:50:42 +02:00
Slavi Pantaleev
5dba0c038b Make --tags=import-generic-sqlite-db commands not pass a sensitive connection string around 
Instead of passing the connection string, we can now pass a name of a
variable, which contains a connection string.

Both are supported for having extra flexibility.
 2020-12-14 11:47:00 +02:00
Slavi Pantaleev
d91aa5a060 Do not introduce sub-variables exposing implementation details 2020-12-14 10:52:07 +02:00
Slavi Pantaleev
f1e85f7112 Don't mention Postgres roles, just say users 2020-12-14 10:04:37 +02:00
Slavi Pantaleev
4617984b9f Add (SQLite -> Postgres) migration instructions 2020-12-14 02:24:32 +02:00
Slavi Pantaleev
cb969c6ca2 Add --tags=import-generic-sqlite-db (pgloader import) 
This can be used by various bridges, etc., to import an SQLite
(or some other supported) database into Postgres.
 2020-12-14 02:23:29 +02:00
Slavi Pantaleev
c66c084027 Merge branch 'master' into postgres-per-default 2020-12-14 01:51:15 +02:00
Slavi Pantaleev
6e1dfb62f0 Rename some doc files and commands related to importing 
Since we'll likely have generic SQLite database importing
via [pgloader](https://pgloader.io/) for migrating bridge
databases from SQLite to Postgres, we'd rather avoid
calling the "import Synapse SQLite database" command
as just `--tags=import-sqlite-db`.

Similarly, for the media store, we'd like to mention that it's
related to Synapse as well.

We'd like to be more explicit, so as to be less confusing,
especially in light of other homeserver implementations
coming in the future.
 2020-12-14 01:51:00 +02:00
Slavi Pantaleev
b87b754372 Fail if appservice-discord wants Postgres, but has leftover SQLite data 2020-12-14 01:36:15 +02:00
Slavi Pantaleev
183d2a10db Ensure matrix-postgres.service is started before creating additional users/databases 2020-12-14 00:59:59 +02:00
Slavi Pantaleev
a374d309c8 Make appservice-discord support both SQLite and Postgres 
People can toggle between them now. The playbook also defaults
to using SQLite if an external Postgres server is used.

Ideally, we'd be able to create databases/users in external Postgres
servers as well, but our initialization logic (and `docker run` command,
etc.) hardcode too many things right now.
 2020-12-14 00:52:25 +02:00
Slavi Pantaleev
46a4034d3e Use "password" for additional Postgres databases, not "pass" 
Being more explicit sounds better.
 2020-12-14 00:43:03 +02:00
Slavi Pantaleev
3a037a5993 Ensure additional databases contain all the keys that we expect 2020-12-14 00:39:38 +02:00
Slavi Pantaleev
da4cb2f639 Do not use the postgresql_user/postgresql_db modules 
While these modules are really nice and helpful, we can't use them
for at least 2 reasons:

- for us, Postgres runs in a container on a private Docker network
(`--network=matrix`) without usually being exposed to the host.
These modules execute on the host so they won't be able to reach it.

- these modules require `psycopg2`, so we need to install it before
using it. This might or might not be its own can of worms.
 2020-12-14 00:31:38 +02:00
Slavi Pantaleev
bbc09d013b Do not execute additional databases creation code if not necessary 
The tasks in `create_additional_databases.yml` will likely
ensure `matrix-postgres.service` is started, etc.

If no additional databases are defined, we'd rather not execute that
file and all these tasks that it may do in the future.
 2020-12-13 23:46:05 +02:00
Slavi Pantaleev
c765ceb270 Prevent weird loop error 
> Invalid data passed to 'loop', it requires a list, got this instead: matrix_postgres_additional_databases. Hint: If you passed a list/dict of just one element, try adding wantlist=True to your lookup invocation or use q/query instead of lookup.

Well, or working around it, as I've done in this commit (which seems
more sane than `wantlist=True` stuff).
 2020-12-13 22:56:56 +02:00
Slavi Pantaleev
e2952f16f7 Determine matrix-postgres IP address without relying on jq 
To avoid needing to have `jq` installed on the machine, we could:
- try to run jq in a Docker container using some small image providing
that
- better yet, avoid `jq` altogether
 2020-12-13 22:45:48 +02:00
Slavi Pantaleev
f47e8a97e6 Make use of matrix_host_command_docker instead of hardcoding 2020-12-13 22:38:35 +02:00
Slavi Pantaleev
0641106370 Allow username of additional Postgres databases to be different 
We'll most likely use one that matches the database name, but
it's better to have it configurable.
 2020-12-13 22:37:04 +02:00
Slavi Pantaleev
527d5f57d5 Relocate Postgres additional database creation logic 
Moving it above the "uninstalling" set of tasks is better.
Extracting it out to another file at the same time, for readability,
especially given that it will probably have to become more complex in
the future (potentially installing `jq`, etc.)
 2020-12-13 22:37:04 +02:00
Slavi Pantaleev
dac0d3a682 Add default matrix_postgres_additional_databases 2020-12-13 21:07:16 +02:00
Slavi Pantaleev
77a5c7cf3c Merge branch 'master' into postgres-per-default 2020-12-13 21:04:15 +02:00
Slavi Pantaleev
47613e5a27 Remove synapse-janitor support 
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/746
 2020-12-11 23:24:42 +02:00
Slavi Pantaleev
86988ae180 Switch matrix-registration to v0.7.1 
Now that a new release has been made, we no longer need to use
`latest` / `master`.

Related to 0a9109771d and https://github.com/ZerataX/matrix-registration/issues/43
 2020-12-11 22:52:42 +02:00
Slavi Pantaleev
0a9109771d Use latest/master version of matrix-registration 
v0.7.0 is broken right now, because it calls
`/_matrix/client/r0/admin/register`, which is now at
`/_synapse/admin/v1/register`.

This has been fixed here: 6b26255fea

.. but it's not part of any release.

Switching to `master` (`docker.io/devture/zeratax-matrix-registration:latest`) until it gets resolved.

Reported upstream here: https://github.com/ZerataX/matrix-registration/issues/43
 2020-12-11 22:22:07 +02:00
Aaron Raimist
3c2a644e5c
Upgrade synapse-admin (v0.5.0 -> 0.6.1) 2020-12-10 16:28:48 -06:00
Slavi Pantaleev
7593d969e3 Make matrix-mailer not occupy matrix_server_fqn_matrix 
Starting with Docker 20.10, `--hostname` seems to have the side-effect
of making Docker's internal DNS server resolve said hostname to the IP
address of the container.

Because we were giving the mailer service a hostname of `matrix.DOMAIN`,
all requests destined for `matrix.DOMAIN` originating from other
services on the container network were resolving to `matrix-mailer`.
This is obviously wrong.

Initially reported here: https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/748

We normally try to not use the public hostname (and IP address) on the
container network and try to make services talk to one another locally,
but it sometimes could happen.

With this, we use a `matrix-mailer` hostname for the matrix-mailer
container. My testing shows that it doesn't cause any trouble with
email deliverability.
 2020-12-10 23:51:11 +02:00
transcaffeine
d9f4914e0d
WIP: postgres: create databases for all services 
If a service is enabled, a database for it is created in postgres with a uniqque password. The service can then use this database for data storage instead of relying on sqlite.
 2020-12-10 18:26:22 +01:00
Slavi Pantaleev
d08b27784f Fix systemd services autostart problem with Docker 20.10 
The Docker 19.04 -> 20.10 upgrade contains the following change
in `/usr/lib/systemd/system/docker.service`:

```
-BindsTo=containerd.service
-After=network-online.target firewalld.service containerd.service
+After=network-online.target firewalld.service containerd.service multi-user.target
-Requires=docker.socket
+Requires=docker.socket containerd.service
Wants=network-online.target
```

The `multi-user.target` requirement in `After` seems to be in conflict
with our `WantedBy=multi-user.target` and `After=docker.service` /
`Requires=docker.service` definitions, causing the following error on
startup for all of our systemd services:

> Job matrix-synapse.service/start deleted to break ordering cycle starting with multi-user.target/start

A workaround which appears to work is to add `DefaultDependencies=no`
to all of our services.
 2020-12-10 11:43:20 +02:00
John Goerzen
673e19f830
Correct inabillity for appservice-discord to connect 
After recently updating my matrix-docker-ansible-deploy installation, matrix-appservice-discord would refuse to start, logging ECONNREFUSED to https://matrix.[mydomain]:443, which was resolving to 172.18.0.2 due to the `--hostname` in mailer grabbing that hostname.

Curious why the IRC bridge didn't have this issue, I looked into it, and it was connecting to `http://matrix-synapse:8008`.  Correcting this one to that URL resolved the issue.
 2020-12-09 21:20:06 -06:00
Slavi Pantaleev
245b749946 Upgrade Synapse for ARM (v1.23.0 -> v1.24.0) 
Continuation of aa86e0dac6, now that ARM images are out.
 2020-12-09 20:54:18 +02:00
Slavi Pantaleev
aa86e0dac6 Upgrade Synapse (v1.23.0 -> v1.24.0) 
Because the ARM images are not pushed yet, we hold back to v1.23.0
for now.
 2020-12-09 13:31:10 +02:00
benkuly
ad92c61fdd updated matrix-sms-bridge 2020-12-09 09:45:44 +01:00
Slavi Pantaleev
c07c927d9f Automatically enable openid listeners when ma1sd enabled 
ma1sd requires the openid endpoints for certain functionality.
Example: 90b2b5301c/src/main/java/io/kamax/mxisd/auth/AccountManager.java (L67-L99)

If federation is disabled, we still need to expose these openid APIs on the
federation port.

Previously, we were doing similar magic for Dimension.
As per its documentation, when running unfederated, one is to enable
the openid listener as well. As per their recommendation, people
are advised to do enable it on the Client-Server API port
and use the `federationUrl` variable to override where the federation
port is (making federation requests go to the Client-Server API).

Because ma1sd always uses the federation port (unless you do some
DNS overwriting magic using its configuration -- which we'd rather not
do), it's better if we just default to putting the `openid` listener
where it belongs - on the federation port.

With this commit, we retain the "automatically enable openid APIs" thing
we've been doing for Dimension, but move it to the federation port instead.
We also now do the same thing when ma1sd is enabled.
 2020-12-08 16:59:20 +02:00
Slavi Pantaleev
8c02f7b79b Upgrade services 2020-12-07 15:18:03 +02:00
Slavi Pantaleev
d556aa943f Update docker-ce.repo to not hardcode $releasever=7 
This keeps it in line with https://download.docker.com/linux/centos/docker-ce.repo

Whether or not Docker works well on CentOS 8 for our purposes
hasn't been verified yet.

Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/300
 2020-12-07 07:20:47 +02:00
Slavi Pantaleev
7372480e95 Properly serialize some ma1sd configuration values 
We've had a report of the `connection` value getting cut off,
supposedly because it contains something that breaks off the string.

Using `|to_json` takes care of it.
 2020-12-06 23:59:58 +02:00
Hardy Erlinger
ec2a9d4852 Remove the recording button from the Jitsi UI if recording is disabled. 2020-12-06 13:50:45 +01:00
Béla Becker
6f9b4bd9ac Drop workaround for old Ansible docker_network bug 2020-12-05 19:02:10 +01:00
Béla Becker
6921ec4b8a Revert "Work around buggy docker_network sometimes failing to work" 
The docker_network bug was fixed two years ago
This reverts commit 36658addcd.
 2020-12-05 19:02:10 +01:00
Slavi Pantaleev
a5ae7e9ef0 Add self-building support to matrix-corporal 2020-12-04 01:48:08 +02:00
Slavi Pantaleev
b3d91ed488 Fix passing of matrix_appservice_discord_auth_usePrivilegedIntents 2020-12-04 01:06:42 +02:00
Slavi Pantaleev
05cecb5261 Merge branch 'discord-v1.0' 
This may be a bit premature, because the bridge didn't work for me
the last time I tried it (RC3).

Some bugs have been fixed to make our config compatible with v1.0.0
though, so it may work for some people (especially those starting
fresh).

I'm not for shipping potentially broken things, but given that we were
using `docker.io/halfshot/matrix-appservice-discord:latest` and that
points to v1.0.0 already (with no other tag we can use), our setup was
already broken in any case.

Now, at least it has some chance of running.
 2020-12-03 15:17:30 +02:00
Slavi Pantaleev
edd40811a5 Update matrix-appservice-discord to v1.0.0 final 2020-12-03 15:16:26 +02:00
Marcel Partap
b6b95fe742 synapse workers-doc-to-yaml script: compatibility++ with non-gnu awk 2020-12-02 23:22:02 +01:00
Marcel Partap
3156d96619 synapse workers-doc-to-yaml.awk: escape slash for non-gnu awk versions 2020-12-02 00:29:20 +01:00
Marcel Partap
e892ac464f synapse workers: untangle config template and specify bind address 
.. to mitigate log noise - WARNING:
Failed to listen on 0.0.0.0, continuing because listening on [::]
 2020-12-01 23:49:23 +01:00
Marcel Partap
f201bca519 synapse workers: define and expose METRICS port for each worker 
As seen on TV:
https://github.com/matrix-org/synapse/blob/master/docs/metrics-howto.md#monitoring-workers
 2020-12-01 22:49:15 +01:00
Marcel Partap
af08f18779 synapse workers default config: disable user_dir worker for now 
(until https://github.com/matrix-org/synapse/issues/8787 is resolved)
 2020-12-01 22:22:04 +01:00
Marcel Partap
414b812a29 synapse role workers setup: make configs clean action remote compatible 
Many people probably didn't even know this - that ansible can be
quite a bit picky about what it will be willing to work with remotely.

Thanks @maxklenk !
 2020-12-01 22:20:27 +01:00
Marcel Partap
d5932ca393 synapse role workers setup: execute the endpoint extraction locally 
Thanks @maxklenk !
 2020-12-01 22:18:42 +01:00
Marcel Partap
851c25c47f matrix-synapse nginx template: fix invalid jinja comment syntax 2020-12-01 21:55:07 +01:00
Marcel Partap
b73ac965ac Merge remote-tracking branch 'origin/master' into synapse-workers 2020-12-01 21:24:26 +01:00
Slavi Pantaleev
04da1bddf7 Update matrix-mautrix-facebook config a bit 
This also disables presence if it's disabled for Synapse.
 2020-12-01 11:55:18 +02:00
Slavi Pantaleev
90078dd296 Add matrix_services_autostart_enabled variable for preventing services autostart 
Some people requested that `--tags=start` not set up service autostart.

One can now do `--tags=start --extra-vars="matrix_services_autostart_enabled=false"`
to just start services ones and not set up autostarting.
 2020-11-30 20:58:21 +02:00
Slavi Pantaleev
e0d7d5f0ca Disable Jitsi recording/transcriptions by default 
It's not like it worked anyway, because we don't have the necessary
services installed for transcription (Jigasi), nor recording (Jibri).

Disabling these, should hopefully disable their related elements
in the Jitsi Web UI.

Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/726
 2020-11-28 22:31:00 +02:00
Slavi Pantaleev
be5263f397 Move self-building git repository URLs to variables (stop hardcoding) 2020-11-28 21:34:14 +02:00
Slavi Pantaleev
b354155d7c Make JVB websockets reverse-proxying work 2020-11-27 17:57:15 +02:00
Slavi Pantaleev
fa76128fd8 Update Jitsi to build 5142 
This supersedes/fixes-up this Pull Request:
https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/719

The Jitsi Web and JVB containers now (in build 5142) always
start by bulding their own default configuration
(`config.js` and `sip-communicator.properties`, respectively).

The fact that we were generating these files ourselves was no longer of use,
because our configuration was thrown away in favor of the one created
by the containers on startup.

With this commit, we're completely redoing things. We no longer
generate these configuration files. We try to pass the proper
environment variables, so that Jitsi services can generate the
configuration files themselves.

Besides that, we try to use the "custom configuration" mechanism
provided by Jitsi Web and Jitsi JVB (`custom-config.js` and
`custom-sip-communicator.properties`, respectively), so that
we and our users can inject additional configuration.

Some configuration options we had are gone now. Others are no longer
controllable via variables and need to be injected using
the `_config_extension` variables that we provide.

The validation logic that is part of the role should take care
to inform people about how to upgrade (if they're using some custom
configuration, which needs special care now). Most users should not
have to do anything special though.
 2020-11-27 17:57:15 +02:00
benkuly
f93a4f6474 updated matrix-sms-bridge 2020-11-27 16:01:24 +01:00
Slavi Pantaleev
d702e74079 Fix matrix-nginx-proxy static files mounting when SSL retrieval is none 
Fixup for 12867e9f18.

This shouldn't have been caught in the `if`.

Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/734
 2020-11-26 18:40:15 +02:00
Slavi Pantaleev
12867e9f18 Do not try to mount /matrix/ssl when matrix_ssl_retrieval_method is 'none' 
Since the switch from `-v` to `--mount` (in 1fca917ad1),
we've regressed when `matrix_ssl_retrieval_method == 'none'`.

In such a case, we don't create `/matrix/ssl` directories at all
and shouldn't be trying to mount them into the `matrix-nginx-proxy`
container.

Previously, with `-v`, Docker would auto-create them, effectively hiding
our mistake. Now that `--mount` doesn't do such auto-creation magic,
the `matrix-nginx-proxy` container was failing to start.

Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/734
 2020-11-26 09:55:26 +02:00
Slavi Pantaleev
796c752b60 Ensure Postgres passwords are not longer than 99 characters 
Complements https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/732
 2020-11-26 09:51:48 +02:00
Slavi Pantaleev
47db2d5363
Merge pull request #730 from benkuly/master 
updates matrix-sms-bridge (changed SMS provider)
 2020-11-25 16:36:11 +02:00
Slavi Pantaleev
75f9fde7a4 Remove some more -v usage 
Continuation of 1fca917ad1.

Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/722
 2020-11-25 10:49:59 +02:00
Slavi Pantaleev
1fca917ad1 Replace some -v instances with --mount 
`-v` magically creates the source destination as a directory,
if it doesn't exist already. We'd like to avoid this magic
and the potential breakage that it might cause.

We'd rather fail while Docker tries to find things to `--mount`
than have it automatically create directories and fail anyway,
while having contaminated the filesystem.

There's a lot more `-v` instances remaining to be fixed later on.
This is just some start.

Things like `matrix_synapse_container_additional_volumes` and
`matrix_nginx_proxy_container_additional_volumes` were not changed to
use `--mount`, as options for each one are passed differently
(`ro` is `ro`, but `rw` doesn't exist and `slave` is `bind-propagation=slave`).
To avoid breaking people's custom volume mounts, we keep it as it is for now.

A deficiency with `--mount` is that it lacks the `z` option (SELinux
ownership changes), and some of our `-v` instances use that. I'm not
sure how supported SELinux is for us right now, but it might be,
and breaking that would not be a good idea.
 2020-11-24 10:26:05 +02:00
Slavi Pantaleev
27c9014cb8 Improve uninstallation instructions 
Also switches to using `docker system prune -a` for a less invasive
cleanup of Docker images and related resources.
 2020-11-24 09:38:17 +02:00
Slavi Pantaleev
3e2355282b Upgrade Postgres minor versions 
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/727
 2020-11-24 09:06:19 +02:00
Aaron Raimist
c9d2ef7981
Upgrade Element (1.7.13 -> 1.7.14) 2020-11-23 23:05:54 -06:00
benkuly
ff9a4e90c4 updated matrix-sms-bridge 2020-11-23 13:43:04 +01:00
benkuly
3a2e058f2e updated version of matrix-sms-bridge 2020-11-23 13:07:08 +01:00
benkuly
f1ceb49ae2 fixed wrong path of truststore 2020-11-23 12:52:16 +01:00
benkuly
ad1f0a01ce fixed systemd service typo 2020-11-23 12:49:28 +01:00
benkuly
76b0b9dc34 fixed application.yml loading 2020-11-23 12:48:08 +01:00
benkuly
2fb42dd7f1 fixed typo in truststore path 2020-11-23 12:38:17 +01:00
benkuly
75600aa357 Merge remote-tracking branch 'github/master' 2020-11-23 12:31:14 +01:00
benkuly
4713e5d5f7 updated matrix-sms-bridge to 0.5.0 2020-11-23 12:30:39 +01:00
Slavi Pantaleev
6c85b84c1e Fix self-building for synapse-admin 2020-11-18 18:36:03 +02:00
Slavi Pantaleev
b627d93cdc Update homeserver.yaml to keep up with Synapse v1.23.0 
Related to #724 (Github Pull Request)
 2020-11-18 16:57:50 +02:00
transcaffeine
c58a7e03c7
synapse: update to 1.23.0 2020-11-18 14:16:46 +01:00
Slavi Pantaleev
41fa00edb4 Revert "Update jitsi web to stable-5142" 
This reverts commit 078592454c
due to reports of breakage both in the support chat room
and in here https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/719
 2020-11-18 12:54:43 +02:00
transcaffeine
f7d7190bd0
update mautrix-telegram to 0.9.0 2020-11-17 21:20:12 +01:00
benkuly
8153e25d2d updated matrix-sms-bridge image 2020-11-16 13:59:03 +01:00
benkuly
787a9ef8ad updated matrix-sms-bridge image 2020-11-16 11:51:11 +01:00
benkuly
775b1ca7af updated matrix-sms-bridge image version 2020-11-15 12:12:44 +01:00
Slavi Pantaleev
ccabc82d4c Use more fully-qualified container images 
This is both for consistency with 93cc71cb69976c
and for making things more obvious.
 2020-11-14 23:01:11 +02:00
Slavi Pantaleev
5eed874199 Improve self-building experience (avoid conflict with pullable images) 
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/716

This patch makes us use more fully-qualified container image names
(either prefixed with docker.io/ or with localhost/).

The latter happens when self-building is enabled.

We've recently had issues where if an image was removed manually
and the service was restarted (making `docker run` fetch it from Docker Hub, etc.),
we'd end up with a pulled image, even though we're aiming for a self-built one.
Re-running the playbook would then not do a rebuild, because:
- the image with that name already exists (even though it's something
else)
- we sometimes had conditional logic where we'd build only if the git
repo changed

By explicitly changing the name of the images (prefixing with localhost/),
we avoid such confusion and the possibility that we'd automatically pul something
which is not what we expect.

Also, I've removed that condition where building would happen on git
changes only. We now always build (unless an image with that name
already exists). We just force-build when the git repo changes.
 2020-11-14 23:00:49 +02:00
João Marques
078592454c Update jitsi web to stable-5142 
Changelog https://github.com/jitsi/jitsi-meet/releases/tag/stable%2Fjitsi-meet_5142
 2020-11-13 18:13:45 +00:00
benkuly
c985e17f18 updated matrix-sms-bridge 2020-11-13 08:44:21 +01:00
Slavi Pantaleev
6dbb90258e Mention and recommend enabling usePrivilegedIntents 2020-11-13 08:23:40 +02:00
Slavi Pantaleev
fe7bed5df3 Upgrade appservice-discord 2020-11-12 08:21:02 +02:00
Marcel Partap
4678c5d7bd Merge remote-tracking branch 'origin/master' into synapse-workers 
Also, replace vague FIXME by a proper NOTE on the complete
story of the user_dir endpoints..
 2020-11-11 21:26:08 +01:00
Slavi Pantaleev
4dbec2470f Fix systemd_path being undefined breakage 
Regression since #681 (Github Pull Request).

Fixes #715 (Github Issue).
 2020-11-11 00:45:02 +02:00
Slavi Pantaleev
4d12a6f8e9
Merge pull request #681 from scottcrossen/slc/ddclient 
Dynamic DNS
 2020-11-10 23:54:21 +02:00
Slavi Pantaleev
1427286cec Integrate matrix-dynamic-dns with matrix-nginx-proxy without causing a dependency 
We'd like the roles to be self-contained (as much as possible).

Thus, the `matrix-nginx-proxy` shouldn't reference any variables from
other roles. Instead, we rely on injection via
`group_vars/matrix_servers`.

Related to #681 (Github Pull Request)
 2020-11-10 23:49:36 +02:00
Slavi Pantaleev
8782919d85 Ensure matrix_dynamic_dns_domain_configurations contains configurations 
If `matrix_dynamic_dns_enabled`, we'd like to ensure there's at least
one configuration defined.

Related to #681 (Github Pull Request)
 2020-11-10 23:49:36 +02:00
Slavi Pantaleev
97a7c8b0f0 Fix matrix_dynamic_dns_domain_configurations validation check 
- `item` was undefined
- `'key' in configurations == ''` was doing the wrong thing

Related to #681 (Github Pull Request)
 2020-11-10 23:49:36 +02:00
Slavi Pantaleev
fef44b93d3 Define the matrix_dynamic_dns_domain_configurations variable in the role 
Having it unset in the role itself (while referencign it) is a little strange.

Now people can look at the `roles/matrix-dynamic-dns/defaults/main.yml`
file and figure out everything that's necessary to run the role.

Related to #681 (Github Pull Request)
 2020-11-10 23:49:36 +02:00
Marcel Partap
f3d2797d9c synapse workers: make awk script invocation handle paths with spaces 
(quoting ftw)
 2020-11-10 22:40:48 +01:00
Marcel Partap
b05d298ae4 synapse workers nginx rule: add client_max_body_size on media endpoints 
so transfer limits are properly set in accord to the relevant setting
https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/456#issuecomment-719996778
 2020-11-10 21:43:33 +01:00
Marcel Partap
1e971312e8 synapse workers: handle auth fallback endpoint on main process only 
(allegedly breaks with SSO enabled)
 2020-11-10 21:23:19 +01:00
Marcel Partap
e5072c20d9 synapse workers/nginx: handle media_repository worker endpoints on federation port 
to prevent "404 on the federation port for the path `/_matrix/media`,
if a remote server is trying to get the media object on federation
port, see https://github.com/matrix-org/synapse/issues/8695 "

https://github.com/matrix-org/synapse/pull/8701
 2020-11-10 20:35:39 +01:00
Aaron Raimist
31619e0968
Upgrade Element (1.7.12 -> 1.7.13) 2020-11-10 11:27:15 -06:00
Slavi Pantaleev
235299939d Upgrade nginx (1.19.3 -> 1.19.4) 2020-11-10 09:30:00 +02:00
Scott Crossen
59bb6b2971 responded to reviewer comments 2020-11-09 13:32:58 -08:00
Scott Crossen
e894befd87 Updates to reviewer comments 2020-11-07 17:53:13 -08:00
Slavi Pantaleev
350c39d745 Update comment 2020-11-02 11:13:25 +02:00
Slavi Pantaleev
ef68d3d296 Add support for reverse-proxying /_synapse/oidc 
This broke in 63a49bb2dc.

Proxying the OpenID Connect endpoints is now possible,
but needs to be enabled explicitly now.

Supersedes #702 (Github Pull Request).

This patch builds up on the idea from that Pull Request,
but does things in a cleaner way.
 2020-11-02 11:10:03 +02:00
Slavi Pantaleev
5c91e56898 Upgrade Synapse (v1.22.0 -> v1.22.1) 2020-10-30 19:35:55 +02:00
Aaron Raimist
c33d007306
Switch to the new vectorim/element-web Docker image 2020-10-29 11:46:58 -05:00
Marcel Partap
cce90b187a synapse workers: fix undefined variable cases when removing workers 2020-10-28 23:09:21 +01:00
Sabine
aabefe21f4 fixed yaml 2020-10-28 21:58:59 +01:00
Sabine
468cc39465 added a workaround for postgres's issue with initdb 2020-10-28 21:56:13 +01:00
Slavi Pantaleev
c1c6eaefff Upgrade Element (1.7.10 -> 1.7.12) 2020-10-28 17:34:39 +02:00
Slavi Pantaleev
9a46647010 Make https://matrix.DOMAIN/ redirect to https://element.DOMAIN/ 
Fixes #696 (Github Issue)
 2020-10-28 10:39:12 +02:00
Slavi Pantaleev
4700e80389 Raise standalone default Matrix Client API client_max_body_size 
We do this to match Synapse's new default "max_upload_size" (50MB).

This `matrix_nginx_proxy_proxy_matrix_client_api_client_max_body_size_mb`
default value only affects standalone usage of the `matrix-nginx-proxy`
role. When the role is used in the context of the playbook,
the value is dynamically assigned from `group_vars/matrix_servers`.

Somewhat related to #692 (Github Issue).
 2020-10-28 10:02:47 +02:00
Marcel Partap
e078e29ef8 synapse workers: fix self name in workers-doc-to-yaml.awk script 2020-10-28 08:39:31 +01:00
Slavi Pantaleev
ef07aa8e5d Prevent certain nginx location blocks from being ignored 
The regex introduced in 63a49bb2dc seems to take precedence
over the bare location blocks, causing a regression.

> It is important to understand that, by default, Nginx will serve regular expression matches in preference to prefix matches.
> However, it evaluates prefix locations first, allowing for the administer to override this tendency by specifying locations using the = and ^~ modifiers.

Source: https://www.digitalocean.com/community/tutorials/understanding-nginx-server-and-location-block-selection-algorithms
 2020-10-28 09:38:04 +02:00
Marcel Partap
2d1b9f2dbf synapse workers: reworkings + get endpoints from upstream docs via awk 
(yes, a bit awkward and brittle… xD)
 2020-10-28 07:13:19 +01:00
Slavi Pantaleev
70f0b97a0a Upgrade Synapse (v1.21.2 -> v1.22.0) 2020-10-27 14:24:02 +02:00
Slavi Pantaleev
63a49bb2dc Do not expose /_synapse/admin publicly by default 
Fixes #685 (Github Issue).
 2020-10-26 10:36:38 +02:00
Sabine Laszakovits
dd50ee19ab fixed bridge permissions 2020-10-25 21:42:40 +01:00
Sabine Laszakovits
2211e678f3 fixed comments that were copied over from mautrix-telegram role 2020-10-25 21:01:25 +01:00
Sabine Laszakovits
e59aa07b86 more cleanup 2020-10-25 20:47:10 +01:00
Sabine Laszakovits
c36e1355cf cleanup 2020-10-25 20:46:57 +01:00
Sabine Laszakovits
8ebc39dea0 fixed dependencies of bridge service (not ideal, but correct) 2020-10-25 20:46:32 +01:00
Sabine Laszakovits
9b890e9ced moved some settings from role to group_vars 2020-10-25 20:45:24 +01:00
Sabine Laszakovits
ff1d7921a0 moved registration.yaml contents to template 2020-10-25 20:16:24 +01:00
Sabine
7a54e11090 started moving settings to group_vars 2020-10-24 12:15:03 +02:00
Marcel Partap
87bd64ce9e Merge remote-tracking branch 'origin/master' into synapse-workers 2020-10-23 23:45:07 +02:00
Marcel Partap
a4125d5446 synapse workers: polishing, cleansing and installation of jq dependency 2020-10-23 20:49:53 +02:00
Sabine
69efcb5c21 added mautrix-signal role 2020-10-22 23:29:34 +02:00
Marcel Partap
501efee07e synapse workers: supply systemd with actual worker PIDs (requires jq) 
also, worker.yaml.j2:
  - hone worker_name
  - remove worker_pid_file entry (would only be used if worker_daemonize
    set to true; also, synapse only knows about the container namespace
    and thus can not provide the required host-view PID)
 2020-10-22 20:53:41 +02:00
Slavi Pantaleev
24c6d7e81f Upgrade Element (1.7.9 -> 1.7.10) 2020-10-20 19:06:16 +03:00
Scott Crossen
94dcceb7b9 removed intentional delay 2020-10-19 11:26:37 -07:00
Scott Crossen
efeb651789 Removed typo 2020-10-19 11:25:01 -07:00
Scott Crossen
e7d79a95dc removed platform-specific stuff 2020-10-19 10:46:02 -07:00
Scott Crossen
19721be8b1 removed dhcp option 2020-10-18 21:05:32 -07:00
Scott Crossen
de1511b4bb Fixed valdiation 2020-10-16 21:31:07 -07:00
Scott Crossen
806f98447c Removed directory creation 2020-10-16 21:26:58 -07:00
Scott Crossen
51cca4c312 Added containerization 2020-10-16 21:21:58 -07:00
Tobias Küchel
1cf5b1d80f e2ee_backup: rename variables to be consistent with naming scheme 2020-10-16 09:24:50 +02:00
Tobias Küchel
5158fa4df9 e2ee_backup_methods: rather leave the default empty, so that the system default may apply 2020-10-16 08:50:16 +02:00
Tobias Küchel
8f7e21892d fix indentation, updated to proposed changes from Slavi: no more ifdef 2020-10-16 08:47:37 +02:00
Tobias Küchel
4cfa112755 update default backup_methods as proposed by the system anyway 2020-10-16 08:44:04 +02:00
Tobias Küchel
6599204334 fix commata not being set when secure_backup_required false 2020-10-16 08:20:22 +02:00
Tobias Küchel
48f929dc91 add variables for secure_backup_required and secure_backup_setup_methods 2020-10-16 00:32:00 +02:00
Slavi Pantaleev
f7ecc7a2a5 Upgrade Synapse (v1.21.1 -> v1.21.2) 2020-10-15 17:42:52 +03:00
jgbresson
640166e4c3
Upgrade Element (1.7.8 -> 1.7.9) 2020-10-15 00:09:54 -04:00
Dan Arnfield
b65bfc38ce Update nginx (1.19.2 -> 1.19.3) 2020-10-14 06:23:33 -05:00
Scott Crossen
53bc7a77e1 fixed EOF issues 2020-10-13 16:47:09 -07:00
Scott Crossen
fa5d85426b Renamed systemd descriptions for all bridges 2020-10-13 16:40:30 -07:00
Scott Crossen
1f988969a5 Added role for dynamic dns 2020-10-13 16:26:57 -07:00
Slavi Pantaleev
5abd511368 Upgrade Synapse (v1.21.0 -> v1.21.1) 2020-10-13 13:08:25 +03:00
Slavi Pantaleev
d250727e8b Upgrade certbot (1.7.0 -> 1.9.0) 2020-10-13 09:44:32 +03:00
Aaron Raimist
78529cbd47
Upgrade Synapse (v1.20.1 -> v1.21.0) 2020-10-12 23:59:34 -05:00
Marcel Partap
d2e61af224 Add worker_name to synapse worker config template 
& restrict federation listener; frontend_proxy / user_dir don't need it
 2020-10-11 21:52:08 +02:00
Marcel Partap
36e9be6092 matrix_synapse_workers_{avail,enabled}_list: sort non-generic workers 
.. alphabetically and put those not documented as multi-instance
capable on ports ending on zero.
 2020-10-11 21:44:42 +02:00
Marcel Partap
e9241f5fb9 Improve synapse-workers systemd service template 
Is the PID magic gonna work? or will it need an ExecStartPost hack..
 2020-10-11 21:09:19 +02:00
Marcel Partap
40024e9b81 Prevent workers failing if their config doesn't exist 
- cherry-pick "Ensure worker config exists in systemd service (#7528)"
  from synapse d74cdc1a42e8b487d74c214b1d0ca575429d546a:
  "check that the worker config file exists instead of silently failing."
 2020-10-11 21:09:19 +02:00
Marcel Partap
93a8ea7e4a Merge remote-tracking branch 'master' into feature/add-worker-support 2020-10-11 20:59:05 +02:00
Fanch
1a9cafa3a3 add run-docker-prune command 2020-10-10 04:11:26 +02:00
Slavi Pantaleev
6a72e3fa54 Try to make importing SQLite from older Synapse version work 
If the SQLite database was from an older version of Synapse, it appears
that Synapse would try to run migrations on it first, before importing.
This was failing, because the file wasn't writable.

Hopefully, this fixes the problem.
 2020-10-07 08:54:46 +03:00
Slavi Pantaleev
23daec748c Require Ansible v2.7 or newer (because of items2dict and dict2items) 
Interestingly, no one has reported this failure before #662 (Github
Issue).

It doesn't make sense to keep saying that we support such old Ansible
versions, when we're not even testing on anything close to those.

Time is also passing and such versions are getting more and more
ancient. It's time we bumped our requirements to something that is more
likely to work.
 2020-10-02 11:53:19 +03:00
Slavi Pantaleev
07fa8404bf Upgrade matrix-corporal (1.10.1 -> 1.11.0) 2020-10-01 18:30:30 +03:00
Slavi Pantaleev
9e8c14bf65
Merge pull request #660 from clemsos/master 
Element web : update welcome page template
 2020-10-01 09:44:48 +03:00
Dan Arnfield
3a3383fada Add support for postgres 13 2020-09-30 16:50:59 -05:00
Slavi Pantaleev
43c5f3ec6e Do not create /home/matrix when creating the matrix user 2020-09-29 18:14:37 +03:00
Clement Renaud
ac3ba1d919 element web : update welcome page template 2020-09-29 12:33:47 +02:00
Slavi Pantaleev
7eb8192a51 Comlain about version requirement on Ansible v1 
I don't believe Ansible v1 would even go as far as executing this
sanity check, but.. Adding an extra defensive check for completeness.
 2020-09-29 12:37:39 +03:00
Slavi Pantaleev
3d702fe03b Avoid set_fact with error message to prevent confusion 2020-09-29 12:23:39 +03:00
Slavi Pantaleev
3818d82852 Upgrade Element (1.7.7 -> 1.7.8) 2020-09-28 22:20:36 +03:00
Slavi Pantaleev
263727095d
Merge pull request #657 from cnvandijk/feature-client-well-known 
Client well known compatibility
 2020-09-28 09:19:25 +03:00
Slavi Pantaleev
3e2f0a4240 Upgrade matrix-synapse-admin (0.4.1 -> 0.5.0) 
Related to #658 (Github Issue).
 2020-09-28 09:11:05 +03:00
Chris van Dijk
b9c8d059d0 Support both the im.vector.riot and io.element variants in client .well-known 
According to the docs, "e2ee" is already under "io.element":
  https://github.com/vector-im/element-web/blob/develop/docs/e2ee.md#disabling-encryption-by-default
however "jitsi" is still under "im.vector.riot":
  https://github.com/vector-im/element-web/blob/develop/docs/jitsi.md#configuring-element-to-use-your-self-hosted-jitsi-server

For now let's just maintain backward and forward compatibility for both
settings since the client version is out of the control of this
playbook.
 2020-09-26 16:57:02 +00:00
Chris van Dijk
f6b0f0a477 Rename matrix_riot_jitsi_preferredDomain and matrix_riot_e2ee_default to Element 2020-09-26 16:24:09 +00:00
Slavi Pantaleev
9fba46e694
Merge pull request #655 from aaronraimist/element-showLabs 
Allow configuration of Element's bug_report_endpoint_url and showLabsSettings
 2020-09-25 12:02:29 +03:00
Aaron Raimist
dc2def914e
Allow configuration of Element's bug_report_endpoint_url and showLabsSettings 
showLabsSettings is the new enableLabs I guess. enableLabs doesn't seem to do anything anymore. It had been deprecated for a while.

This PR also removes @riot-bot:matrix.org as the default welcome_user_id since it doesn't exist anymore.
 2020-09-24 18:37:31 -05:00
Slavi Pantaleev
e68450f094 Upgrade Synapse (v1.20.0 -> v1.20.1) 2020-09-24 18:43:54 +03:00
Slavi Pantaleev
329fef048f Upgrade matrix-corporal (1.10.0 -> 1.10.1) 2020-09-22 19:43:23 +03:00
Slavi Pantaleev
32ac4706cb Upgrade matrix-corporal (1.9.0 -> 1.10.0) 2020-09-22 19:28:27 +03:00
Slavi Pantaleev
dd217137b6 Upgrade Synapse (v1.19.3 -> v1.20.0) 2020-09-22 19:28:07 +03:00
Slavi Pantaleev
65e22a6888 Upgrade Synapse (v1.19.2 -> v1.19.3) 2020-09-18 17:37:04 +03:00
Slavi Pantaleev
6db3a46f88
Merge pull request #650 from dwiegreffe/master 
New docker image appservice-slack
 2020-09-18 14:31:39 +03:00
Daniel Wiegreffe
b3926e7cca
Update main.yml 2020-09-18 13:26:07 +02:00
Max Klenk
fc2edcbecf
fix media routing 2020-09-18 10:45:01 +02:00
Max Klenk
132daba1af
fix worker routes 2020-09-18 10:18:32 +02:00
Slavi Pantaleev
e10e3e354d Upgrade Synapse (v1.19.1 -> v1.19.2) 2020-09-16 16:35:17 +03:00
Dan Arnfield
faa96ca0c3 Update element (1.7.5 -> 1.7.7) 2020-09-15 06:15:30 -05:00
Daniel Wiegreffe
8f41041f6d replacement of the docker image for appservice-slack to the officially maintained image 2020-09-15 09:11:56 +02:00
Scott Crossen
b24333dd0f
Use the same naming convention as the other mx-puppet suite. 2020-09-14 11:11:30 -07:00
Slavi Pantaleev
6e8a39119b Update matrix-reminder-bot (0.1.0 -> 0.2.0) 2020-09-14 10:19:47 +03:00
0hlov3
c19abe4a76 Changes matrix_dimension_integrations_ui_url from /riot to /element https://dimension.t2bot.io/ 2020-09-13 04:19:19 +02:00
Max Klenk
1e68d8b2e5
allow to pass arguments to the postgres process 2020-09-11 14:29:10 +02:00
Max Klenk
880025324a
fix redis config if no password is set 2020-09-11 10:35:50 +02:00
Max Klenk
4fdfc0a34f
add missing ratelimiting options required for load testing 2020-09-11 09:46:20 +02:00
Max Klenk
9a3d84b931
Merge branch 'master' into feature/add-worker-support 2020-09-10 13:57:11 +02:00
Max Klenk
a25a429a52
add redis support 2020-09-10 13:39:00 +02:00
Slavi Pantaleev
5bb2c43502 Add support for enabling Jitsi lobby 
Related to #643 (Github Issue)
 2020-09-10 09:08:45 +03:00
Slavi Pantaleev
2a1ec38e3a Stop using Ansible's cron module 
This is mainly to address SSL renewal not working for us due to:
- https://github.com/ansible/ansible/issues/71213
- https://github.com/ansible/ansible/pull/71207

Using the cron module was hacky anyway. We shouldn't need an extra
level of buggy abstraction to manage a cronjob file.
 2020-09-06 10:49:19 +03:00
Slavi Pantaleev
bed16fd065 Upgrade Element (1.7.4 -> 1.7.5) 2020-09-01 20:51:51 +03:00