Commit graph

2732 commits

Author SHA1 Message Date
Slavi Pantaleev 37d7e75e9b Add support for passing extra arguments to prometheus-node-exporter 2022-06-23 20:37:56 +03:00
Slavi Pantaleev 1727ecd888 Make yamllint happy (take 2)
> Error:   19:3      error    wrong indentation: expected 4 but found 2  (indentation)
2022-06-23 18:00:32 +03:00
Slavi Pantaleev 9aab7f9c37 Make yamllint happy
Fixup for ba51997f7b
2022-06-23 17:57:59 +03:00
Slavi Pantaleev ba51997f7b (BC Break) Redo how metrics are exposed to external Prometheus servers 2022-06-23 17:55:07 +03:00
Slavi Pantaleev a3a6e14f7b Add matrix_nginx_proxy_proxy_synapse_metrics_addr_{with,sans}_container variables to defaults
We redefine these variables in `group_vars/matrix_servers`, but it's better
to have some defaults in the role as well.
2022-06-22 23:04:27 +03:00
Slavi Pantaleev 2e68c9963b Fix matrix-prometheus-postgres-exporter port number in some comments 2022-06-22 22:50:43 +03:00
Slavi Pantaleev f4cf7b9cc1 Remove unused variable (matrix_nginx_proxy_synapse_workers_enabled_list) definition 2022-06-22 22:17:51 +03:00
Slavi Pantaleev f943e82384 Upgrade Certbot (1.27 -> 1.28) 2022-06-22 14:44:12 +03:00
Slavi Pantaleev 5963a387f0 Upgrade Postgres (14.3 -> 14.4) 2022-06-22 14:43:55 +03:00
Aine 970afa4578
Update Buscarron 1.1.0 -> 1.2.0 2022-06-21 00:02:17 +03:00
Julian-Samuel Gebühr f57aed8e01 Add a setting to make nginx forward node_exporter and postgres_exporter 2022-06-20 21:32:03 +02:00
David Mehren f6a73231ab
Synapse workers should respect X-Forwarded headers
Currently, Synapse workers ignore the X-Forwarded headers, which leads to internal Docker IP addresses randomly appearing in the users' device list.

This adds the `x_forwarded: true` option to the worker config, fixing the issue.
2022-06-18 16:13:08 +02:00
Slavi Pantaleev 38027e72f6 Fix "object of type 'NoneType' has no len()" error
Fixup for 5eff67371d - https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1884
2022-06-17 15:45:29 +03:00
Slavi Pantaleev 7440dd34fb
Merge pull request #1884 from etkecc/master
add synapse media_retention
2022-06-17 15:31:55 +03:00
Slavi Pantaleev 5987589436
Use |to_json 2022-06-17 15:30:22 +03:00
Slavi Pantaleev 323f5aa60d Synchronize homeserver.yaml config with the one from Synapse 1.61.0 2022-06-17 15:26:23 +03:00
Aine 5eff67371d
add synapse media_retention 2022-06-17 14:32:17 +03:00
Aine 7b0e5ef995
Update mautrix-whatsapp 0.4.0 -> 0.5.0 2022-06-16 14:55:11 +00:00
Slavi Pantaleev 6a573399ae Upgrade Synapse (v1.60.0 -> v1.61.0) 2022-06-14 17:15:27 +03:00
Slavi Pantaleev 37b584ef58 Upgrade matrix-corporal (2.2.3 -> 2.3.0)
matrix-corporal 2.3.0 supports Synapse v1.61.0 (which removed
communities/groups support).
2022-06-14 17:15:27 +03:00
Aine b2f9ede87c
Update Element v1.10.14 -> v1.10.15 2022-06-14 13:45:46 +00:00
Vladimir Panteleev a3d19ad318
Add Go Skype Bridge
Based on mautrix-whatsapp, as that's what the bridge software is based on.
2022-06-12 21:29:43 +00:00
3hhh cebbe0beec
whatsapp bridge: set the default log level to warning
Debug logs are inappropriate for production use.
2022-06-11 08:11:28 +02:00
3hhh 6b94ccbcff
whatsapp bridge: add matrix_mautrix_whatsapp_log_level
Fixes #1873
2022-06-11 08:09:57 +02:00
3hhh 39914881a7
whatsapp bridge: disable logging to external files
The same logs still go to the systemd journal.
2022-06-11 07:56:22 +02:00
Slavi Pantaleev 99c24ef0e8 Upgrade Hookshot (1.7.2 -> 1.7.3) 2022-06-09 20:52:56 +03:00
Slavi Pantaleev 12b28a4749 Upgrade Hookshot (1.7.0 -> 1.7.2) 2022-06-09 14:13:53 +03:00
Slavi Pantaleev 4a72c90a6b Upgrade Element (v1.10.13 -> v1.10.14) 2022-06-07 14:34:02 +03:00
Ruben Hias fc38f4a6a9 Updated mautrix-googlechat to v0.3.3 2022-06-06 11:27:10 +02:00
roughnecks c05e78fc9a Fix string null in status_endpoint 2022-06-02 16:52:15 +02:00
Slavi Pantaleev 8ea7cd73cf Fix self-building for matrix-registration
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1864

Related to https://github.com/zeratax/matrix-registration/issues/93

This is a poor way to do things though. It may break again in the future.
matrix-registration is a poorly maintained project and should likely be removed from the playbook.
2022-06-01 09:43:31 +03:00
Aine 25fd7f0cff
update Honoroit 0.9.8 -> 0.9.9 2022-05-31 20:32:10 +03:00
Slavi Pantaleev 2c1da0ac2a Switch matrix_encryption_disabler back to upstream repository
Now that https://github.com/digitalentity/matrix_encryption_disabler/pull/9
has been merged, we can get the module from there.

Continuation of 246c43be1e
2022-05-31 17:35:22 +03:00
Slavi Pantaleev 246c43be1e Upgrade Synapse (v1.59.1 -> v1.60.0) 2022-05-31 17:24:38 +03:00
Slavi Pantaleev 78204619ea Stop using deprecated (in Synapse v1.59) user_dir and appservice workers
Source: https://github.com/matrix-org/synapse/blob/v1.59.0/docs/upgrade.md#deprecation-of-the-synapseappappservice-and-synapseappuser_dir-worker-application-types

As an alternative, we should probably find a way to run one or a few
more generic workers (which will handle appservice and user_dir stuff) and
update `homeserver.yaml` so that it would point to the name of these workers using
`notify_appservices_from_worker` and `update_user_directory_from_worker` options.

For now, this solves the deprecation, so we can have a peace of mind
going forward.

We're force-setting these worker counts to 0, so that we can clean up
existing homeservers which use these worker types. In the future, these
options will either be removed or repurposed (so that they transparently
create more generic workers that handle user_dir/appservice loads).
2022-05-31 16:35:50 +03:00
Aine fd3a9b2fbb
Update Honoroit 0.9.7 -> 0.9.8
* add `NOENCRYPTION` option
* fix race condition on thread start
* fix greetings messages
* updated deps
2022-05-31 09:20:49 +00:00
Aine 2e527338d3
Update Cinny 2.0.3 -> 2.0.4 2022-05-29 08:23:17 +00:00
Aine f60eb72329
Updated signal daemon 0.18.1 -> 0.18.5 2022-05-25 09:00:32 +00:00
Aine e37bcd1daf
Updated Element 1.10.12 -> 1.10.13 2022-05-24 14:14:41 +00:00
Aine f448cca732
Update coturn 4.5.2-r11 -> 4.5.2-r12 2022-05-24 11:26:01 +00:00
Slavi Pantaleev 63c755b115
Merge pull request #1837 from Lyokovic/vicx/fix-ldap-simple-bind
Fix synapse LDAP simple bind config
2022-05-24 10:40:28 +03:00
Erick Wibben 3b40d8b0a0
Update Matrix-Registration-Bot main.yml
Line 10, which sets the tag to which docker version to pull was reverted from `v1.1.15` to latest. This gets the playbook working again
2022-05-21 10:24:27 -05:00
Slavi Pantaleev 271a8d0a73 Upgrade certbot (v1.23.0 -> v1.27.0) 2022-05-21 10:20:56 +03:00
Slavi Pantaleev 746a25fabf
Merge pull request #1838 from GoliathLabs/matrix-registration-bot
Set version to v1.1.5
2022-05-20 21:36:13 +02:00
Slavi Pantaleev 62f7bd3780
Merge pull request #1840 from GoliathLabs/matrix-mautrix-googlechat
Updated: mautrix-googlechat to v0.3.2
2022-05-20 21:35:50 +02:00
Slavi Pantaleev f46f288492
Merge pull request #1845 from GoliathLabs/grafana
Updated: grafana to 8.5.3
2022-05-20 21:35:24 +02:00
Slavi Pantaleev 612c64e009
Merge pull request #1844 from GoliathLabs/etherpad
Updated: etherpad to 1.8.18
2022-05-20 21:34:57 +02:00
Slavi Pantaleev 615417b87f
Merge pull request #1843 from GoliathLabs/linuxserver-ddclient
Updated: ddclient to v3.9.1-ls89
2022-05-20 21:34:25 +02:00
Slavi Pantaleev d1651f3f60
Merge pull request #1842 from GoliathLabs/hydrogen-web
Updated: hydrogen-web to v0.2.29
2022-05-20 21:34:01 +02:00
Slavi Pantaleev 4abce49cd6
Merge pull request #1841 from GoliathLabs/mautrix-twitter
Updated: mautrix-twitter to v0.1.4
2022-05-20 21:33:32 +02:00
GoliathLabs 9c24167b8d Updated: grafana to 8.5.3 2022-05-20 20:32:19 +02:00
GoliathLabs 64850531ba Updated: etherpad to 1.8.18 2022-05-20 20:30:06 +02:00
GoliathLabs 554615d727 Updated: ddclient to v3.9.1-ls89 2022-05-20 20:28:01 +02:00
GoliathLabs 2c312435c6 Reverted URL change 2022-05-20 20:25:41 +02:00
GoliathLabs 8a65e3a0db Updated: hydrogen to v0.2.29 2022-05-20 20:24:56 +02:00
GoliathLabs e779ec45f4 Updated: hydrogen-web to v0.2.29 2022-05-20 20:24:38 +02:00
GoliathLabs d804e97ff6 Updated: mautrix-twitter to v0.1.4 2022-05-20 20:19:58 +02:00
GoliathLabs 751a8f8a5d Updated: mautrix-googlechat to v0.3.2 2022-05-20 20:16:04 +02:00
GoliathLabs 275943c0f8 Updated: mjolnir v1.4.2 2022-05-20 20:03:59 +02:00
GoliathLabs 0c741e8d16 Set version to v1.1.5 2022-05-20 19:58:22 +02:00
Vicx a906fad12e Fix synapse LDAP simple bind config
When using LDAP simple bind, the `bind_dn` and `bind_password`
configuration values must not be present.
2022-05-20 19:09:16 +02:00
Slavi Pantaleev c945f38c52
Merge pull request #1818 from paulRbr/bridge-mautrix-signal-encryption
Bridge mautrix signal and mautrix whatsapp encryption
2022-05-18 14:50:26 +02:00
Slavi Pantaleev 677a2fc503 Fix compatibility with ansible=6 / ansible-core=2.13
Details here: https://docs.ansible.com/ansible/devel/porting_guides/porting_guide_6.html#id36

Basically:

```yaml
- name: Prior to 2.13
  debug:
    msg: '[1] + {{ [2] }}'

- name: 2.13 and forward
  debug:
    msg: '{{ [1] + [2] }}'
```

Interestingly, we had been using the new/safe syntax in lofs of places.

We were using the broken one in many others though. Hopefully all
instances were fixed by this patch.
2022-05-18 15:43:39 +03:00
Slavi Pantaleev 98fecf95a6
Merge pull request #1836 from etkecc/patch-11
Update Synapse v1.59.0 -> v.1.59.1
2022-05-18 14:09:59 +02:00
Slavi Pantaleev a1e5ecf551 Upgrade hookshot (1.6.1 -> 1.7.0)
This new version should be buildable on arm64.

See: https://github.com/matrix-org/matrix-hookshot/releases/tag/1.7.0

There's still no prebuild arm64 image, so we continue relying on
self-building there.
2022-05-18 14:43:16 +03:00
Aine de8d6f8d6c
Update Synapse v1.59.0 -> v.1.59.1 2022-05-18 11:37:34 +00:00
Paul B e1e83353b4
bridge-whatsapp: add variable to enable end-to-bridge encryption 2022-05-18 13:14:22 +02:00
Paul B 99de38280d
bridge-signal: add variable to enable encryption 2022-05-18 13:14:20 +02:00
Slavi Pantaleev 468d492fd4
Merge pull request #1831 from etkecc/patch-9
Update Postgres (CVE-2022-1552 + last 9.x update)
2022-05-18 12:32:28 +02:00
Aine 4297af5c51
Update mautrix-whatsapp v0.3.1 -> v0.4.0 2022-05-18 10:19:43 +00:00
Toni Spets 2cce91fe1d
Upgrade Heisenbridge (1.12.0 -> 1.13.0) 2022-05-18 12:38:07 +03:00
Slavi Pantaleev f972a80224 Upgrade Synapse (1.58.1 -> 1.59.0) 2022-05-17 13:08:17 +03:00
Slavi Pantaleev bab1ee2233 Work around mx-puppet-discord failing with "No relay found" after reboot
Related to https://gitlab.com/mx-puppet/discord/mx-puppet-discord/-/issues/117

Looks like the bridge is too quick to start and fails to initialize
itself by connecting to Synapse. It's mostly observed after a system
reboot, because Synapse (and everything else) is slower to start.

Once mx-puppet-discord fails to initialize itself, a "No relay found"
error will be observed any time you try to relay a Matrix message to
Discord. Relaying messages in the other direction (Discord to Matrix)
also fails.

With this workaround (longer delay on mx-puppet-discord startup), I
observe mx-puppet-discord working well, even after a full reboot.
Of course, a proper fix is preferable, instead of delaying by a magic
number of seconds.
2022-05-17 11:34:00 +03:00
Aine 4109dc3bcd
Update Postgres (CVE-2022-1552 + last 9.x update)
CVE: https://security-tracker.debian.org/tracker/CVE-2022-1552
Source: https://www.postgresql.org/about/news/postgresql-143-137-1211-1116-and-1021-released-2449/
Postgres 9.6 upgrade (**not a CVE fix, 9.x still vulnerable**): https://www.postgresql.org/docs/release/9.6.24/
2022-05-16 19:56:54 +00:00
Slavi Pantaleev f21269f441
Upgrade mx-puppet-slack (v0.1.1 -> v0.1.2)
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1829
2022-05-16 21:40:31 +03:00
Slavi Pantaleev 99931af532
Merge pull request #1825 from dsonck92/change-to-upstream
Change back to working original mx-puppet-slack
2022-05-16 07:39:00 +02:00
Aaron Raimist 2a9b52a1c2
Update Element self build repo URL
It forwards to the correct place but might as well just update it to the current URL.
2022-05-16 04:29:29 +00:00
Aine c58c7dc643
Update Cinny v2.0.2 -> v2.0.3 2022-05-15 05:45:07 +00:00
Daniel Sonck 894669eca2 Change back to working original mx-puppet-slack
Now that v0.1.1 is out, which depends on the functional matrix-slack-parser
it works again.
2022-05-14 21:09:54 +02:00
Aine dca593cf7a
Update Cinny v2.0.1 -> v2.0.2 2022-05-14 11:33:19 +00:00
Aine 8ec1f4bee0
Update Cinny v2.0.0 -> v2.0.1 2022-05-13 16:20:04 +00:00
Didier 'OdyX' Raboud eda75e6492
Bump Slack Appservice to 1.11.0 2022-05-11 10:47:00 +02:00
Aine d09934c79c
matrix-bot-buscarron - set defaults 2022-05-10 18:44:20 +03:00
Aine 9997ca4dbd
Merge branch 'spantaleev:master' into master 2022-05-10 15:39:34 +00:00
Aine 8c505e8a2c
matrix-bot-buscarron v1.1.0 2022-05-10 18:38:57 +03:00
Aine 02d4a841c4
Update Element 1.10.11 -> 1.10.12 2022-05-10 14:31:41 +00:00
Aine 62cb801878
Update cinny v1.8.2 -> v2.0.0 2022-05-10 13:57:12 +00:00
Slavi Pantaleev 9fc60d8c86 Revert "Change back to original mx-puppet-slack"
This reverts commit fcfd00bcb4.

Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1808

Reverts https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1809

Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1810
2022-05-10 16:20:44 +03:00
Daniel Sonck fcfd00bcb4 Change back to original mx-puppet-slack
Closes: #1808
2022-05-09 23:38:01 +02:00
Slavi Pantaleev 25302ed142
Merge pull request #1802 from dsonck92/change-to-upstream
Change back to original mx-puppet-discord
2022-05-08 07:35:11 +02:00
Slavi Pantaleev e62123ac13
Merge pull request #1804 from HarHarLinks/feeds
Add hookshot feeds config support
2022-05-08 07:10:40 +02:00
HarHarLinks 7390646cd5 add hookshot feeds support 2022-05-07 18:42:15 +02:00
Kim Brose 84ea5f6ecc
Upgrade Hookshot (1.5.0 -> 1.6.1) 2022-05-07 14:34:33 +02:00
Daniel Sonck 3f45805fd2 Change back to original mx-puppet-discord
Closes: #1801
2022-05-07 12:40:17 +02:00
Slavi Pantaleev 83b7fcee45 Do not proxy some endpoints to the generic Synapse worker
These endpoints should not be proxied to a generic Synapse worker
without other preparation (setting up stream writers, sending traffic
to a specific stream writer, etc.).

Disabling them for now. In the future, we'd like to fix up our awk
script to disable them automatically.

This is a fix up for 058fedff91
2022-05-07 09:39:19 +02:00
Slavi Pantaleev 058fedff91 Fix "endpoint seems conditional" determination in workers-doc-to-yaml.awk"
This prevented us from keeping our workers reverse-proxying definitions
updated since Synapse v1.54.0.

The last `workers.md` file we could parse is at commit
02632b3504ad4512c5f5a4f859b3fe326b19c788.
Parsing regressed at commit c56bfb08bc071368db23f3b1c593724eb4f205f0,
because the introduction message for `synapse.app.generic_worker` said
"If":

> If a worker is set up to handle a..

.. which made the AWK script think that definitions below were
conditional (which they're not in this case).

This patch fixes up the regex for determining if a line is conditional
or not, so that it doesn't trip up. Hopefully, it doesn't miss something
important.
2022-05-06 09:08:45 +02:00
Slavi Pantaleev 549e4418b9 Upgrade Synapse (1.58.0 -> 1.58.1) 2022-05-06 08:56:06 +02:00
Slavi Pantaleev 1439be2743 Upgrade matrix-appservice-irc (0.33 -> 0.34)
Related to https://matrix.org/blog/2022/05/04/0-34-0-security-release-for-matrix-appservice-irc-high-severity
2022-05-04 11:10:00 +03:00
Slavi Pantaleev 03674e1a36 Upgrade Synapse (1.57.1 -> 1.58.0) 2022-05-03 14:32:32 +03:00
Slavi Pantaleev 7adc167412 Fail if trying to use Jitsi on an architecture other than amd64
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1797
2022-05-03 08:10:18 +03:00