pub-solar/matrix-docker-ansible-deploy
5
0
Fork 0
Code Issues Pull requests Packages Projects Releases Wiki Activity
5791 commits 2 branches 0 tags 16 MiB
Commit graph

269 commits

Author SHA1 Message Date
Slavi Pantaleev 0da308e24d Upgrade com.devture.ansible.role.traefik 2023-02-19 10:20:13 +02:00
Slavi Pantaleev 5df89a44b3 Add support for customizing Synapse templates 2023-02-17 19:37:34 +02:00
Slavi Pantaleev 990a6369e1 Switch to using an external Redis role 2023-02-17 16:23:59 +02:00
Slavi Pantaleev 964aa0e84d Switch to using an external Ntfy role 
The newly extracted role also has native Traefik support,
so we no longer need to rely on `matrix-nginx-proxy` for
reverse-proxying to Ntfy.

The new role uses port `80` inside the container (not `8080`, like
before), because that's the default assumption of the officially
published container image. Using a custom port (like `8080`), means the
default healthcheck command (which hardcodes port `80`) doesn't work.
Instead of fiddling to override the healthcheck command, we've decided
to stick to the default port instead. This only affects the
inside-the-container port, not any external ports.

The new role also supports adding the network ranges of the container's
multiple additional networks as "exempt hosts". Previously, only one
network's address range was added to "exempt hosts".
 2023-02-17 09:54:33 +02:00
Slavi Pantaleev 93bb117a29 Mention Traefik changes causing backward-compatibility break for own-webserver (non-nginx-proxy) users 
This also updates `docs/configuring-playbook-own-webserver.md`,
trying to make it up-to-date with all recent changes.
 2023-02-16 09:21:31 +02:00
Slavi Pantaleev 1006b8d899 Replace matrix-grafana with an external role 2023-02-15 10:32:24 +02:00
Slavi Pantaleev b648d4579f Make it clear that certain matrix_nginx_proxy_* variables are necessary for now, even with Traefik 
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/2480
 2023-02-15 07:30:38 +02:00
Slavi Pantaleev 80935a5194 Fix broken backup_borg link 
Referenced here: 06f5be4fa5 (r100414988)
 2023-02-13 14:14:25 +02:00
Slavi Pantaleev 06f5be4fa5 Announce matrix-backup-borg extraction 2023-02-13 13:16:55 +02:00
Slavi Pantaleev 73435dfe10 Announce Traefik support 2023-02-12 15:53:18 +02:00
Slavi Pantaleev 6db3c8f2ad Announce Matrix Authentication Support for Jitsi 
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/2375
 2023-02-10 14:26:41 +02:00
Slavi Pantaleev 600aaa0bc7 Announce Draupnir support 
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/2451
 2023-02-10 11:52:31 +02:00
Slavi Pantaleev be78b74fbd Switch from matrix-prometheus-postgres-exporter to an external prometheus_postgres_exporter role 2023-02-05 10:32:09 +02:00
Slavi Pantaleev 864b64d015 Mention the new no-multicast-peers default in Coturn config 
Related to 4c9f96722f
 2023-01-26 20:01:48 +02:00
Slavi Pantaleev f1c9052fe5 Make it obvious that running Coturn in host-networking mode requires manual firewall changes 2023-01-26 17:59:56 +02:00
Slavi Pantaleev aafa8f019c Allow matrix_coturn_docker_network to be set to 'host' to use host-networking 
This helps large deployments which need to open up thousands of ports
(matrix_coturn_turn_udp_min_port, matrix_coturn_turn_udp_min_port)

On a test VM, opening 1k ports takes 17 seconds for Docker to "publish"
all of these ports (setting up forwarding rules with the firewall, etc),
so service startup and shutdown take a long amount of time.

If host-networking is used, there's no need to open any ports at all
and startup/shutdown can be quick.
 2023-01-26 17:35:30 +02:00
Slavi Pantaleev bb0faa6bc3 Block various private network ranges via denied_peer_ips for Coturn by default 
Inspired by: https://www.rtcsec.com/article/cve-2020-26262-bypass-of-coturns-access-control-protection/
 2023-01-26 17:35:30 +02:00
Slavi Pantaleev 9ed2e04d80 Switch from matrix-prometheus-node-exporter to an external prometheus_node_exporter role 2023-01-21 11:07:04 +02:00
Slavi Pantaleev fb60ba67f6 Announce just 2023-01-13 09:18:27 +02:00
Slavi Pantaleev ecb5c077f6 Fix typo (too -> to) 2023-01-11 10:41:09 +02:00
Slavi Pantaleev 275a739b22 Announce maurtix-slack 
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/2227
 2023-01-11 10:38:54 +02:00
Slavi Pantaleev 20558589cb Announce matrix-bot-chatgpt 
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/2386
 2023-01-10 17:31:21 +02:00
Slavi Pantaleev 4eed49f931 Replace custom/matrix-postgres-backup role with galaxy/com.devture.ansible.role.postgres_backup 
This role is usable on its own and it's not tied to Matrix, so
extracting it out into an independent role that we install via
ansible-galaxy makes sense.

This also fixes the confusion from the other day, where
`matrix_postgres_*` had to be renamed to `devture_postgres_*`
(unless it was about `matrix_postgres_backup_*`).
We now can safely say that ALL `matrix_postgres_*` variables need to be
renamed.

Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/2305
 2022-11-30 11:01:19 +02:00
Slavi Pantaleev 0d322a5c86 Announce matrix-postgres replacement and /usr/local/bin cleanup 2022-11-28 08:09:57 +02:00
Slavi Pantaleev 8456657f21 Announce install-* tags 2022-11-25 16:15:19 +02:00
Slavi Pantaleev 6f865a7e0b Announce some playbook changes 2022-11-22 09:23:18 +02:00
Slavi Pantaleev e9e84341a9 Reverse-proxy to Synapse via matrix-synapse-reverse-proxy-companion 
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/2090
 2022-11-20 16:43:33 +02:00
Slavi Pantaleev 13b63eabf0
Merge pull request #2229 from etkecc/make-etherpad-great-again 
standalone etherpad
 2022-11-05 11:54:51 +02:00
Slavi Pantaleev 805b70bfa3 Announce standalone Etherpad 2022-11-05 11:47:47 +02:00
Slavi Pantaleev 7289992dba Document make roles some more 
Improves:

- https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/2232
- https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/2217#issuecomment-1304366791
 2022-11-05 07:10:04 +02:00
Slavi Pantaleev c3a7237de7 Initial work on using externally defined roles 2022-11-04 14:58:28 +02:00
Slavi Pantaleev 410a915a8a Move roles/matrix* to roles/custom/matrix* 
This paves the way for installing other roles into `roles/galaxy` using `ansible-galaxy`,
similar to how it's done in:

- https://github.com/spantaleev/gitea-docker-ansible-deploy
- https://github.com/spantaleev/nextcloud-docker-ansible-deploy

In the near future, we'll be removing a lot of the shared role code from here
and using upstream roles for it. Some of the core `matrix-*` roles have
already been extracted out into other reusable roles:

- https://github.com/devture/com.devture.ansible.role.postgres
- https://github.com/devture/com.devture.ansible.role.systemd_docker_base
- https://github.com/devture/com.devture.ansible.role.timesync
- https://github.com/devture/com.devture.ansible.role.vars_preserver
- https://github.com/devture/com.devture.ansible.role.playbook_runtime_messages
- https://github.com/devture/com.devture.ansible.role.playbook_help

We just need to migrate to those.
 2022-11-03 09:11:29 +02:00
Slavi Pantaleev 63a0e5c4f6 Add warnings to synapse-s3-storage-provider support feature 2022-10-14 17:58:47 +03:00
Slavi Pantaleev a3759b0466 Announce Synapse customization and synapse-s3-storage-provider support 2022-10-14 17:50:48 +03:00
Slavi Pantaleev f4804f475a Announce matrix-ldap-registration-proxy 
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/2038
 2022-10-02 09:27:51 +03:00
Jost Alemann b8b7974b78
fix: typo 2022-09-16 13:13:11 +02:00
Slavi Pantaleev 109e1addb8 Improve reliability when using more than 1 media_repository worker 2022-09-15 10:45:03 +03:00
Slavi Pantaleev a1fb082618 Add support for running background tasks on a worker 2022-09-15 10:32:51 +03:00
Slavi Pantaleev 5f3f460cda Restore support for appservice and user_dir workers 2022-09-15 10:06:56 +03:00
Slavi Pantaleev b842447047 Add support for multiple pusher workers 2022-09-15 08:32:55 +03:00
Slavi Pantaleev ec654ca91e Add support for multiple federation sender workers 2022-09-15 08:13:08 +03:00
Slavi Pantaleev 226c550ffa Add support for stream writer Synapse workers 
As stream writer workers are also powered by the `generic_worker`
Synapse app, this necessitated that we provide means for distinguishing
between them and regular `generic_workers`.

I've also taken the time to optimize nginx configuration generation
(more Jinja2 macro usage, less duplication).

Worker names have also changed.
Workers are now named sequentially like this:
- `matrix-synapse-worker-0-generic`
- `matrix-synapse-worker-1-stream-writer-typing`
- `matrix-synapse-worker-2-pusher`

instead of `matrix-synapse-worker_generic_worker-18111` (indexed with a
port number).

People who modify `matrix_synapse_workers_enabled_list` directly will
need to adjust their configuration.
 2022-09-15 08:10:04 +03:00
Slavi Pantaleev c00a8d4099 Announce Cactus Comments support 
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/2089
 2022-09-09 14:47:53 +03:00
Slavi Pantaleev eaf13264e6 Announce Postmoogle email bridge bot 
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/2043
 2022-08-23 14:16:10 +03:00
Slavi Pantaleev 9ab6c99434 Update changelog 
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/2012
 2022-08-10 14:38:35 +03:00
Slavi Pantaleev 81f4e8cffb Announce Conduit support 
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/2002
 2022-08-09 11:37:57 +03:00
Slavi Pantaleev 9d10d5543b Announce mautrix-discord support 2022-07-29 08:10:09 +03:00
Slavi Pantaleev 2e40ad7d4e Announce Kakaotalk support 2022-07-27 09:36:58 +03:00
Slavi Pantaleev e5238bf7d5 Announce maubot 
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1894
 2022-07-20 12:55:18 +03:00
Slavi Pantaleev e94ec75e1a Remove matrix-bridge-mx-puppet-skype role 2022-07-14 18:09:19 +03:00