c07c927d9f
ma1sd requires the openid endpoints for certain functionality.
Example: 90b2b5301c/src/main/java/io/kamax/mxisd/auth/AccountManager.java (L67-L99)
If federation is disabled, we still need to expose these openid APIs on the
federation port.
Previously, we were doing similar magic for Dimension.
As per its documentation, when running unfederated, one is to enable
the openid listener as well. As per their recommendation, people
are advised to do enable it on the Client-Server API port
and use the `federationUrl` variable to override where the federation
port is (making federation requests go to the Client-Server API).
Because ma1sd always uses the federation port (unless you do some
DNS overwriting magic using its configuration -- which we'd rather not
do), it's better if we just default to putting the `openid` listener
where it belongs - on the federation port.
With this commit, we retain the "automatically enable openid APIs" thing
we've been doing for Dimension, but move it to the federation port instead.
We also now do the same thing when ma1sd is enabled.
98 lines
5 KiB
Markdown
98 lines
5 KiB
Markdown
# Setting up Dimension (optional)
|
|
|
|
**[Dimension](https://dimension.t2bot.io) can only be installed after Matrix services are installed and running.**
|
|
If you're just installing Matrix services for the first time, please continue with the [Configuration](configuring-playbook.md) / [Installation](installing.md) flow and come back here later.
|
|
|
|
**Note**: enabling Dimension, means that the `openid` API endpoints will be exposed on the Matrix Federation port (usually `8448`), even if [federation](configuring-playbook-federation.md) is disabled. It's something to be aware of, especially in terms of firewall whitelisting (make sure port `8448` is accessible).
|
|
|
|
|
|
## Prerequisites
|
|
|
|
This playbook now supports running [Dimension](https://dimension.t2bot.io) in both a federated and an [unfederated](https://github.com/turt2live/matrix-dimension/blob/master/docs/unfederated.md) environment. This is handled automatically based on the value of `matrix_synapse_federation_enabled`.
|
|
|
|
Other important prerequisite is the `dimension.<your-domain>` DNS record being set up correctly. See [Configuring your DNS server](configuring-dns.md) on how to set up DNS record correctly.
|
|
|
|
|
|
## Enable
|
|
|
|
[Dimension integrations manager](https://dimension.t2bot.io) installation is disabled by default. You can enable it in your configuration file (`inventory/host_vars/matrix.<your-domain>/vars.yml`):
|
|
|
|
```yaml
|
|
matrix_dimension_enabled: true
|
|
```
|
|
|
|
|
|
## Define admin users
|
|
|
|
These users can modify the integrations this Dimension supports. Admin interface is accessible by opening Dimension in Element and clicking the settings icon.
|
|
Add this to your configuration file (`inventory/host_vars/matrix.<your-domain>/vars.yml`):
|
|
|
|
```yaml
|
|
matrix_dimension_admins:
|
|
- "@user1:{{ matrix_domain }}"
|
|
- "@user2:{{ matrix_domain }}"
|
|
```
|
|
|
|
|
|
## Access token
|
|
|
|
We recommend that you create a dedicated Matrix user for Dimension (`dimension` is a good username).
|
|
Follow our [Registering users](registering-users.md) guide to learn how to register **a regular (non-admin) user**.
|
|
|
|
You are required to specify an access token (belonging to this new user) for Dimension to work.
|
|
To get an access token for the Dimension user, you can follow one of two options:
|
|
|
|
*Through an interactive login*:
|
|
|
|
1. In a private browsing session (incognito window), open Element.
|
|
2. Log in with the `dimension` user and its password.
|
|
1. Set the display name and avatar, if required.
|
|
2. In the settings page choose "Help & About", scroll down to the bottom and click `Access Token: <click to reveal>`.
|
|
3. Copy the highlighted text to your configuration.
|
|
4. Close the private browsing session. **Do not log out**. Logging out will invalidate the token, making it not work.
|
|
|
|
*With CURL*
|
|
|
|
```
|
|
curl -X POST --header 'Content-Type: application/json' -d '{
|
|
"identifier": { "type": "m.id.user", "user": "YourDimensionUsername" },
|
|
"password": "YourDimensionPassword",
|
|
"type": "m.login.password"
|
|
}' 'https://matrix.YOURDOMAIN/_matrix/client/r0/login'
|
|
```
|
|
*Change the "YourDimensionUser/Pass" URL accordigly*
|
|
|
|
**Access tokens are sensitive information. Do not include them in any bug reports, messages, or logs. Do not share the access token with anyone.**
|
|
|
|
Add access token to your configuration file (`inventory/host_vars/matrix.<your-domain>/vars.yml`):
|
|
|
|
```yaml
|
|
matrix_dimension_access_token: "YOUR ACCESS TOKEN HERE"
|
|
```
|
|
|
|
For more information on how to acquire an access token, visit [https://t2bot.io/docs/access_tokens](https://t2bot.io/docs/access_tokens).
|
|
|
|
|
|
## Installation
|
|
|
|
After these variables have been set, please run the following command to re-run setup and to restart Dimension:
|
|
|
|
```
|
|
ansible-playbook -i inventory/hosts setup.yml --tags=setup-all,start
|
|
```
|
|
|
|
|
|
## Jitsi domain
|
|
|
|
By default Dimension will use [jitsi.riot.im](https://jitsi.riot.im/) as the `conferenceDomain` of [Jitsi](https://jitsi.org/) audio/video conference widgets. For users running [a self-hosted Jitsi instance](./configuring-playbook-jitsi.md), you will likely want the widget to use your own Jitsi instance. Currently there is no way to configure this via the playbook, see [this issue](https://github.com/turt2live/matrix-dimension/issues/345) for details.
|
|
|
|
In the interim until the above limitation is resolved, an admin user needs to configure the domain via the admin ui once dimension is running. In Element, go to *Manage Integrations* → *Settings* → *Widgets* → *Jitsi Conference Settings* and set *Jitsi Domain* and *Jitsi Script URL* appropriately.
|
|
|
|
|
|
## Additional features
|
|
|
|
To use a more custom configuration, you can define a `matrix_dimension_configuration_extension_yaml` string variable and put your configuration in it.
|
|
To learn more about how to do this, refer to the information about `matrix_dimension_configuration_extension_yaml` in the [default variables file](../roles/matrix-dimension/defaults/main.yml) of the Dimension component.
|
|
|
|
You can find all configuration options on [GitHub page of Dimension project](https://github.com/turt2live/matrix-dimension/blob/master/config/default.yaml).
|