6 commits

Author	SHA1	Message	Date
Slavi Pantaleev	410a915a8a	Move roles/matrix* to roles/custom/matrix* ... This paves the way for installing other roles into `roles/galaxy` using `ansible-galaxy`, similar to how it's done in: - https://github.com/spantaleev/gitea-docker-ansible-deploy - https://github.com/spantaleev/nextcloud-docker-ansible-deploy In the near future, we'll be removing a lot of the shared role code from here and using upstream roles for it. Some of the core `matrix-*` roles have already been extracted out into other reusable roles: - https://github.com/devture/com.devture.ansible.role.postgres - https://github.com/devture/com.devture.ansible.role.systemd_docker_base - https://github.com/devture/com.devture.ansible.role.timesync - https://github.com/devture/com.devture.ansible.role.vars_preserver - https://github.com/devture/com.devture.ansible.role.playbook_runtime_messages - https://github.com/devture/com.devture.ansible.role.playbook_help We just need to migrate to those.	2022-11-03 09:11:29 +02:00
Slavi Pantaleev	4880dcceb0	Fix OCSP-stapling-related errors due to missing resolver ... Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1057	2021-05-28 11:14:33 +03:00
Slavi Pantaleev	c6ab1c6a90	Riot is now Element ... Fixes #586 (Github Issue)	2020-07-17 11:31:20 +03:00
Daniel Hoffend	b280b05c25	matrix-nginx-proxy: adding additional configuration blocks	2020-02-10 23:42:41 +01:00
Hugues De Keyzer	c451025134	Fix indentation in templates ... Use Jinja2 lstrip_blocks option in templates to ensure consistent indentation in generated files.	2019-05-07 21:23:35 +02:00
Slavi Pantaleev	299a8c4c7c	Make (most) containers start as non-root ... This makes all containers (except mautrix-telegram and mautrix-whatsapp), start as a non-root user. We do this, because we don't trust some of the images. In any case, we'd rather not trust ALL images and avoid giving `root` access at all. We can't be sure they would drop privileges or what they might do before they do it. Because Postfix doesn't support running as non-root, it had to be replaced by an Exim mail server. The matrix-nginx-proxy nginx container image is patched up (by replacing its main configuration) so that it can work as non-root. It seems like there's no other good image that we can use and that is up-to-date (https://hub.docker.com/r/nginxinc/nginx-unprivileged is outdated). Likewise for riot-web (https://hub.docker.com/r/bubuntux/riot-web/), we patch it up ourselves when starting (replacing the main nginx configuration). Ideally, it would be fixed upstream so we can simplify.	2019-01-27 20:25:13 +02:00

Renamed from roles/matrix-nginx-proxy/templates/nginx-conf.d/nginx-http.conf.j2 (Browse further)