mirror of
https://github.com/spantaleev/matrix-docker-ansible-deploy.git
synced 2024-12-25 10:28:29 +01:00
df5d8bfc04
This was meant to serve as an intermediary for services needing to reach the homeserver. It was used like that for a while in this `bye-bye-nginx-proxy` branch, but was never actually public. It has recently been superseded by homeserver-like services injecting themselves into a new internal Traefik entrypoint (see `matrix_playbook_internal_matrix_client_api_traefik_entrypoint_*`), so `matrix-homeserver-proxy` is no longer necessary. --- This is probably a good moment to share some benchmarks and reasons for going with the internal Traefik entrypoint as opposed to this nginx service. 1. (1400 rps) Directly to Synapse (`ab -n 1000 -c 100 http://matrix-synapse:8008/_matrix/client/versions` 2. (~900 rps) Via `matrix-homeserver-proxy` (nginx) proxying to Synapse (`ab -n 1000 -c 100 http://matrix-homeserver-proxy:8008/_matrix/client/versions`) 3. (~1200 rps) Via the new internal entrypoint of Traefik (`matrix-internal-matrix-client-api`) proxying to Synapse (`ab -n 1000 -c 100 http://matrix-traefik:8008/_matrix/client/versions`) Besides Traefik being quicker for some reason, there are also other benefits to not having this `matrix-homeserver-proxy` component: - we can reuse what we have in terms of labels. Services can register a few extra labels on the new Traefik entrypoint - we don't need services (like `matrix-media-repo`) to inject custom nginx configs into `matrix-homeserver-proxy`. They just need to register labels, like they do already. - Traefik seems faster than nginx on this benchmark for some reason, which is a nice bonus - no need to run one extra container (`matrix-homeserver-proxy`) and execute one extra Ansible role - no need to maintain a setup where some people run the `matrix-homeserver-proxy` component (because they have route-stealing services like `matrix-media-repo` enabled) and others run an optimized setup without this component and everything needs to be rewired to talk to the homeserver directly. Now, everyone can go through Traefik and we can all run an identical setup Downsides of the new Traefik entrypoint setup are that: - all addon services that need to talk to the homeserver now depend on Traefik - people running their own Traefik setup will be inconvenienced - they need to manage one additional entrypoint
149 lines
4.7 KiB
YAML
149 lines
4.7 KiB
YAML
---
|
|
- name: "Set up a Matrix server"
|
|
hosts: "{{ target if target is defined else 'matrix_servers' }}"
|
|
become: true
|
|
|
|
roles:
|
|
# Most of the roles below are not distributed with the playbook, but downloaded separately using `ansible-galaxy` via the `just roles` command (see `justfile`).
|
|
- role: galaxy/playbook_help
|
|
|
|
- role: galaxy/systemd_docker_base
|
|
|
|
- role: custom/matrix_playbook_migration
|
|
|
|
- when: matrix_playbook_docker_installation_enabled | bool
|
|
role: galaxy/docker
|
|
vars:
|
|
docker_install_compose: false
|
|
docker_install_compose_plugin: false
|
|
tags:
|
|
- setup-docker
|
|
- setup-all
|
|
- install-docker
|
|
- install-all
|
|
|
|
- when: devture_docker_sdk_for_python_installation_enabled | bool
|
|
role: galaxy/docker_sdk_for_python
|
|
tags:
|
|
- setup-docker
|
|
- setup-all
|
|
- install-docker
|
|
- install-all
|
|
|
|
- when: devture_timesync_installation_enabled | bool
|
|
role: galaxy/timesync
|
|
tags:
|
|
- setup-timesync
|
|
- setup-all
|
|
- install-timesync
|
|
- install-all
|
|
|
|
- custom/matrix-base
|
|
- custom/matrix-dynamic-dns
|
|
- galaxy/exim_relay
|
|
|
|
- role: galaxy/postgres
|
|
|
|
- galaxy/redis
|
|
- custom/matrix-corporal
|
|
- custom/matrix-bridge-appservice-discord
|
|
- custom/matrix-bridge-appservice-slack
|
|
- custom/matrix-bridge-appservice-webhooks
|
|
- custom/matrix-bridge-appservice-irc
|
|
- custom/matrix-bridge-appservice-kakaotalk
|
|
- custom/matrix-bridge-beeper-linkedin
|
|
- custom/matrix-bridge-go-skype-bridge
|
|
- custom/matrix-bridge-mautrix-facebook
|
|
- custom/matrix-bridge-mautrix-twitter
|
|
- custom/matrix-bridge-mautrix-hangouts
|
|
- custom/matrix-bridge-mautrix-googlechat
|
|
- custom/matrix-bridge-mautrix-instagram
|
|
- custom/matrix-bridge-mautrix-telegram
|
|
- custom/matrix-bridge-mautrix-signal
|
|
- custom/matrix-bridge-mautrix-gmessages
|
|
- custom/matrix-bridge-mautrix-whatsapp
|
|
- custom/matrix-bridge-mautrix-wsproxy
|
|
- custom/matrix-bridge-mautrix-discord
|
|
- custom/matrix-bridge-mautrix-slack
|
|
- custom/matrix-bridge-mx-puppet-discord
|
|
- custom/matrix-bridge-mx-puppet-groupme
|
|
- custom/matrix-bridge-mx-puppet-steam
|
|
- custom/matrix-bridge-mx-puppet-slack
|
|
- custom/matrix-bridge-mx-puppet-twitter
|
|
- custom/matrix-bridge-mx-puppet-instagram
|
|
- custom/matrix-bridge-sms
|
|
- custom/matrix-bridge-heisenbridge
|
|
- custom/matrix-bridge-hookshot
|
|
- custom/matrix-bot-matrix-reminder-bot
|
|
- custom/matrix-bot-matrix-registration-bot
|
|
- custom/matrix-bot-maubot
|
|
- custom/matrix-bot-buscarron
|
|
- custom/matrix-bot-honoroit
|
|
- custom/matrix-bot-postmoogle
|
|
- custom/matrix-bot-go-neb
|
|
- custom/matrix-bot-mjolnir
|
|
- custom/matrix-bot-draupnir
|
|
- custom/matrix-bot-chatgpt
|
|
- custom/matrix-cactus-comments
|
|
- custom/matrix-cactus-comments-client
|
|
- custom/matrix-rageshake
|
|
- custom/matrix-synapse
|
|
- custom/matrix-synapse-auto-compressor
|
|
- custom/matrix-synapse-reverse-proxy-companion
|
|
- custom/matrix-dendrite
|
|
- custom/matrix-conduit
|
|
- custom/matrix-synapse-admin
|
|
- galaxy/prometheus_node_exporter
|
|
- galaxy/prometheus_postgres_exporter
|
|
- custom/matrix-prometheus-nginxlog-exporter
|
|
- galaxy/prometheus
|
|
- galaxy/grafana
|
|
- custom/matrix-prometheus-services-connect
|
|
- custom/matrix-registration
|
|
- custom/matrix-client-element
|
|
- custom/matrix-client-hydrogen
|
|
- custom/matrix-client-cinny
|
|
- custom/matrix-client-schildichat
|
|
- galaxy/jitsi
|
|
- custom/matrix-user-verification-service
|
|
- custom/matrix-ldap-registration-proxy
|
|
- custom/matrix-ma1sd
|
|
- custom/matrix-dimension
|
|
- galaxy/etherpad
|
|
- custom/matrix-sliding-sync
|
|
- custom/matrix-email2matrix
|
|
- custom/matrix-sygnal
|
|
- galaxy/ntfy
|
|
- custom/matrix-nginx-proxy
|
|
- custom/matrix-static-files
|
|
- custom/matrix-coturn
|
|
- custom/matrix-media-repo
|
|
|
|
- role: galaxy/auxiliary
|
|
|
|
- role: galaxy/postgres_backup
|
|
|
|
- role: galaxy/backup_borg
|
|
|
|
- custom/matrix-user-creator
|
|
- custom/matrix-common-after
|
|
|
|
- role: galaxy/container_socket_proxy
|
|
|
|
- role: galaxy/traefik
|
|
|
|
- role: galaxy/traefik_certs_dumper
|
|
|
|
- when: devture_systemd_service_manager_enabled | bool
|
|
role: galaxy/systemd_service_manager
|
|
|
|
# This is pretty much last, because we want it to better serve as a "last known good configuration".
|
|
# See: https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/2217#issuecomment-1301487601
|
|
- when: devture_playbook_state_preserver_enabled | bool
|
|
role: galaxy/playbook_state_preserver
|
|
tags:
|
|
- setup-all
|
|
- install-all
|
|
|
|
- role: galaxy/playbook_runtime_messages
|