04b9483f0d
Switch from matrix-postgres to com.devture.ansible.role.postgres
2 years ago
e9e84341a9
Reverse-proxy to Synapse via matrix-synapse-reverse-proxy-companion
...
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/2090
2 years ago
410a915a8a
Move roles/matrix* to roles/custom/matrix*
...
This paves the way for installing other roles into `roles/galaxy` using `ansible-galaxy`,
similar to how it's done in:
- https://github.com/spantaleev/gitea-docker-ansible-deploy
- https://github.com/spantaleev/nextcloud-docker-ansible-deploy
In the near future, we'll be removing a lot of the shared role code from here
and using upstream roles for it. Some of the core `matrix-*` roles have
already been extracted out into other reusable roles:
- https://github.com/devture/com.devture.ansible.role.postgres
- https://github.com/devture/com.devture.ansible.role.systemd_docker_base
- https://github.com/devture/com.devture.ansible.role.timesync
- https://github.com/devture/com.devture.ansible.role.vars_preserver
- https://github.com/devture/com.devture.ansible.role.playbook_runtime_messages
- https://github.com/devture/com.devture.ansible.role.playbook_help
We just need to migrate to those.
2 years ago
ce8e9be6a8
Document Conduit installation
...
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/2076
2 years ago
a061ea54b3
Caddyfile example : enable Content-Security-Policy by default instead of having the line commented
2 years ago
5271840971
caddy2 Caddyfile : add CORS handling, update click-jacking protection to handle different subdomains and add example for cases with other well-knowns
2 years ago
72309ed0a1
run the playbook on multiple hosts with different credentials ( #1980 )
...
* run the playbook on multiple hosts with different credentials with this script
* fix: add yaml missing document start "---"
* fix: *now really* allow this script to be run from any directory
* add about-note to examples/host.yml
Co-authored-by: Slavi Pantaleev <slavi@devture.com>
* improve ansible-all-hosts.sh related docs/configuring-playbook.md
Co-authored-by: Slavi Pantaleev <slavi@devture.com>
* fix typos :)
Co-authored-by: Slavi Pantaleev <slavi@devture.com>
2 years ago
ef3b352eec
Merge branch 'master' of https://github.com/Arkonos/matrix-docker-ansible-deploy
2 years ago
6abdb6e6f0
clarifying reverse proxying of well-known files
2 years ago
7e5b88c3b7
fix: all praise the allmighty yamllinter
2 years ago
bbbfc0708f
Derive matrix_coturn_turn_static_auth_secret from matrix_homeserver_generic_secret_key
...
Doing this further simplifies examples/vars.yml.
2 years ago
965890bf75
Derive secrets from matrix_homeserver_generic_secret_key, not matrix_synapse_macaroon_secret_key
...
We're trying to move away from implementation-specific variables,
hoping for a clean (implementation-neutral) examples/vars.yml file.
2 years ago
1dfe21944f
Make matrix_homeserver_implementation influence matrix_IMPLEMENTATION_enabled, not the other way around
...
Doing this seems more reasonable and simpler.
2 years ago
06f3b813d6
added .well-known path to Caddy2 example, closes #1442
2 years ago
0a10077c63
caddy example fixes
...
- caddy v1 requires a path in the header directive
- msisd has been replaced in favour of ma1sd
3 years ago
b3cfa2a1ba
Fix typo
3 years ago
814fb33f45
Merge pull request #1184 from Toorero/apache-example-enhancements
...
Added proxy config for synapse-admin
3 years ago
b5ab31240f
Added missing X-Forwarded-Proto header
3 years ago
ab0d2055ba
Added proxy config for synapse-admin
3 years ago
dd7a23ede6
Merge pull request #1068 from rafaelsgirao/master
...
Fix typo in examples/caddy2
3 years ago
15f4972dbf
Remove syntax-breaking pagination line
...
Seems to have been added by mistake.
3 years ago
729f348864
Fix typo in examples/caddy2
3 years ago
a25b8135b8
Fix point overlap between matrix-domain and Jitsi
...
Mostly affects people who disable the integrated `matrix-nginx-proxy`.
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/456
and more specifically 4d62a75f6f
3 years ago
a8b61adb8d
Clarify hosts file wording
3 years ago
1a3034b0c8
Fix typo
3 years ago
95346f3117
Reorganize Postgres access (breaking change)
...
In short, this makes Synapse a 2nd class citizen,
preparing for a future where it's just one-of-many homeserver software
options.
We also no longer have a default Postgres superuser password,
which improves security.
The changelog explains more as to why this was done
and how to proceed from here.
3 years ago
a47813585d
Rename file to prevent common mistake
...
Prompted by this: https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/779#issuecomment-764807507
3 years ago
f86d781244
Updates the the caddy2 Readme and comment lines for dimension
3 years ago
a1ecaf54ef
Adds Example for Caddy2 Jitsi
3 years ago
e2e6cfaa8b
Document Ansible's Python interpreter discovery some more
...
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/570
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/641
4 years ago
63a49bb2dc
Do not expose /_synapse/admin publicly by default
...
Fixes #685 (Github Issue).
4 years ago
8370ee0647
caddy2: removed unknown tls directive
4 years ago
bd69e4fdef
Merge branch 'master' of github.com:0hlov3/matrix-docker-ansible-deploy
4 years ago
59e1abb072
Corrects the Caddyfile
4 years ago
6fefbc248a
Fix typo and wording
4 years ago
c366e26360
Updates exempes/caddy2/Caddyfile to SSL Grade A+
4 years ago
e7921e305b
Comment in host-cars
4 years ago
abf70f7772
Adds example for Caddy2 Caddyfile
4 years ago
c6ab1c6a90
Riot is now Element
...
Fixes #586 (Github Issue)
4 years ago
f18037ae42
Disable TLSv1.1 by default
4 years ago
5366aef0da
Fix Caddy example config for Dimension
5 years ago
cb900d64dd
Listen 8448 required for apache
...
Listen 8448 directive makes apache listen on that port, without it federation does not work.
5 years ago
d90e11213f
Update comment to make it accurate
5 years ago
72d3514408
Move pipelining option to ansible.cfg
5 years ago
3b69db3c1e
More Apache ProxyPass directives need 'nocanon'
...
Invitations weren't working for me until I added 'nocanon' to these additional places. Until then, invitations failed with "Invalid signature for server ..." errors, as in https://github.com/matrix-org/synapse/issues/3294 .
I didn't check whether the user_directory/search proxy line also needs it, I just assumed it should have it too.
The other two proxy lines in this example also include a 'retry=0' parameter. That's a separate issue; I haven't touched it here.
5 years ago
2793e24b5b
Addresses comments in PR. Fixes typo in docker-compose. Changes mount of static files to RO. Adds example and brief explaination for haproxy certificates. Fixes whitespaces in nginx.conf
5 years ago
7f0b52e9e1
Formatting of haproxy.cfg
5 years ago
f1a64df339
Formatting of haproxy.cfg
5 years ago
06e8056173
Formatting of haproxy.cfg
5 years ago
3dfa6a28f9
Typo
5 years ago
Slavi Pantaleev