matrix-docker-ansible-deploy/docs/installing.md
Suguru Hirahara 1d4451ccd2
Use common strings: "user ID"
Signed-off-by: Suguru Hirahara <acioustick@noreply.codeberg.org>
2024-12-09 14:41:08 +09:00

10 KiB
Raw Blame History

Installing

Prerequisites > Configuring your DNS settings > Getting the playbook > Configuring the playbook > Installing

If you've configured your DNS records and the playbook, you can start the installation procedure.

Update Ansible roles

Before installing, you need to update the Ansible roles that this playbook uses and fetches from outside.

To update your playbook directory and all upstream Ansible roles (defined in the requirements.yml file), run:

  • either: just update
  • or: a combination of git pull and just roles (or make roles if you have make program on your computer instead of just)

If you don't have either just tool or make program, you can run the ansible-galaxy tool directly: rm -rf roles/galaxy; ansible-galaxy install -r requirements.yml -p roles/galaxy/ --force

For details about just commands, take a look at: Running just commands.

Install Matrix server and services

The Ansible playbook's tasks are tagged, so that certain parts of the Ansible playbook can be run without running all other tasks.

The general command syntax for installation (and also maintenance) is: ansible-playbook -i inventory/hosts setup.yml --tags=COMMA_SEPARATED_TAGS_GO_HERE. It is recommended to get yourself familiar with the playbook tags before proceeding.

If you don't use SSH keys for authentication, but rather a regular password, you may need to add --ask-pass to the all Ansible commands.

If you do use SSH keys for authentication, and use a non-root user to become root (sudo), you may need to add -K (--ask-become-pass) to all Ansible commands.

There 2 ways to start the installation process - depending on whether you're Installing a brand new server (without importing data) or Installing a server into which you'll import old data.

Note: if you are migrating from an old server to a new one, take a look at this guide instead. This is an easier and more straightforward way than installing a server and importing old data into it.

Installing a brand new server (without importing data)

If this is a brand new Matrix server and you won't be importing old data into it, run all these tags:

ansible-playbook -i inventory/hosts setup.yml --tags=install-all,ensure-matrix-users-created,start

This will do a full installation and start all Matrix services.

Note: if the command does not work as expected, make sure that you have properly installed and configured software required to run the playbook, as described on Prerequisites.

Installing a server into which you'll import old data

If you will be importing data into your newly created Matrix server, install it, but do not start its services just yet. Starting its services or messing with its database now will affect your data import later on.

To do the installation without starting services, run ansible-playbook with the install-all tag only:

ansible-playbook -i inventory/hosts setup.yml --tags=install-all

⚠️ Warning: do not run the just "recipe" just install-all instead, because it automatically starts services at the end of execution. See: Difference between playbook tags and shortcuts

When this command completes, services won't be running yet.

You can now:

.. and then proceed to starting all services:

ansible-playbook -i inventory/hosts setup.yml --tags=ensure-matrix-users-created,start

Create your user account

You can skip this step if you have installed a server and imported old data to it.

As you have configured your brand new server and the client, you need to create your user account on your Matrix server.

After creating the user account, you can log in to it with Element Web that this playbook has installed for you at this URL: https://element.example.com/.

To create your user account (as an administrator of the server) via this Ansible playbook, run the command below on your local computer.

Notes:

  • Make sure to adjust YOUR_USERNAME_HERE and YOUR_PASSWORD_HERE
  • For YOUR_USERNAME_HERE, use a plain username like alice, not your full identifier (@alice:example.com)
  • Use admin=yes to make your user account an administrator of the Matrix server
ansible-playbook -i inventory/hosts setup.yml --extra-vars='username=YOUR_USERNAME_HERE password=YOUR_PASSWORD_HERE admin=yes' --tags=register-user

# Example: ansible-playbook -i inventory/hosts setup.yml --extra-vars='username=alice password=secret-password admin=yes' --tags=register-user

Feel free to create as many accounts (for friends, family, etc.) as you want. Still, perhaps you should grant full administrative access to your account only (with admin=yes), and others should be created with admin=no.

For more information, see the documentation for registering users.

Finalize the installation

Now you've configured Matrix services and your user account, you need to finalize the installation process by setting up Matrix delegation (redirection), so that your Matrix server (matrix.example.com) can present itself as the base domain (example.com) in the Matrix network.

This is required for federation to work! Without a proper configuration, your server will effectively not be part of the Matrix network.

To configure the delegation, you have these two options. Choose one of them according to your situation.

  • If you can afford to point the base domain at the Matrix server, follow the instructions below which guide you into serving the base domain from the integrated web server. It will enable you to use a Matrix user ID like @alice:example.com while hosting services on a subdomain like matrix.example.com.
  • Alternatively, if you're using the base domain for other purposes and cannot point it to the Matrix server (and thus cannot "serve the base domain" from it), you most likely need to manually install well-known files on the base domain's server, but feel free to familiarize yourself with all server delegation (redirection) options.

To have the base domain served from the integrated web server, add the following configuration to your inventory/host_vars/matrix.example.com/vars.yml file:

matrix_static_files_container_labels_base_domain_enabled: true

After configuring the playbook, run the command below:

ansible-playbook -i inventory/hosts setup.yml --tags=install-matrix-static-files,start

Things to do next

After finilizing the installation, you can:

Maintaining your setup in the future

While this playbook helps you to set up Matrix services and maintain them, it will not automatically run the maintenance task for you. You will need to update the playbook and re-run it manually.

The upstream projects, which this playbook makes use of, occasionally if not often suffer from security vulnerabilities.

Since it is unsafe to keep outdated services running on the server connected to the internet, please consider to update the playbook and re-run it periodically, in order to keep the services up-to-date.

For more information about upgrading or maintaining services with the playbook, take at look at this page: Upgrading the Matrix services

Feel free to re-run the setup command any time you think something is wrong with the server configuration. Ansible will take your configuration and update your server to match.

ansible-playbook -i inventory/hosts setup.yml --tags=setup-all,ensure-matrix-users-created,start

Note: see this page on the playbook tags for more information about those tags.

Make full use of just shortcut commands

After you get familiar with reconfiguring and re-running the playbook to maintain the server, upgrade its services, etc., you probably would like to make use of just shortcut commands for faster input.

For example, just install-all is useful for maintaining your setup quickly (2x-5x faster than just setup-all) when its components remain unchanged. If you adjust your vars.yml to remove other components, you'd need to run just setup-all, or these components will still remain installed.

You can learn about the shortcut commands on this page: Running just commands