Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1397 and https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1399pull/1403/head
| @@ -1047,7 +1047,7 @@ matrix_dimension_enabled: false | |||||
| # the Dimension HTTP port to the local host. | # the Dimension HTTP port to the local host. | ||||
| matrix_dimension_container_http_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else '127.0.0.1:8184' }}" | matrix_dimension_container_http_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else '127.0.0.1:8184' }}" | ||||
| matrix_dimension_homeserver_federationUrl: "http://matrix-synapse:{{matrix_synapse_container_federation_port|string}}" | |||||
| matrix_dimension_homeserver_federationUrl: "http://matrix-synapse:{{matrix_synapse_container_federation_api_plain_port|string}}" | |||||
| matrix_integration_manager_rest_url: "{{ matrix_dimension_integrations_rest_url if matrix_dimension_enabled else None }}" | matrix_integration_manager_rest_url: "{{ matrix_dimension_integrations_rest_url if matrix_dimension_enabled else None }}" | ||||
| matrix_integration_manager_ui_url: "{{ matrix_dimension_integrations_ui_url if matrix_dimension_enabled else None }}" | matrix_integration_manager_ui_url: "{{ matrix_dimension_integrations_ui_url if matrix_dimension_enabled else None }}" | ||||
| @@ -1308,8 +1308,8 @@ matrix_nginx_proxy_proxy_matrix_federation_api_addr_sans_container: "127.0.0.1:1 | |||||
| # Settings controlling matrix-synapse-proxy.conf | # Settings controlling matrix-synapse-proxy.conf | ||||
| matrix_nginx_proxy_proxy_synapse_enabled: "{{ matrix_synapse_enabled }}" | matrix_nginx_proxy_proxy_synapse_enabled: "{{ matrix_synapse_enabled }}" | ||||
| matrix_nginx_proxy_proxy_synapse_federation_api_addr_with_container: "matrix-synapse:{{matrix_synapse_container_federation_port|string}}" | |||||
| matrix_nginx_proxy_proxy_synapse_federation_api_addr_sans_container: "localhost:{{matrix_synapse_container_federation_port|string}}" | |||||
| matrix_nginx_proxy_proxy_synapse_federation_api_addr_with_container: "matrix-synapse:{{matrix_synapse_container_federation_api_plain_port|string}}" | |||||
| matrix_nginx_proxy_proxy_synapse_federation_api_addr_sans_container: "localhost:{{matrix_synapse_container_federation_api_plain_port|string}}" | |||||
| # When matrix-nginx-proxy is disabled, the actual port number that the vhost uses may begin to matter. | # When matrix-nginx-proxy is disabled, the actual port number that the vhost uses may begin to matter. | ||||
| matrix_nginx_proxy_proxy_matrix_federation_port: "{{ matrix_federation_public_port }}" | matrix_nginx_proxy_proxy_matrix_federation_port: "{{ matrix_federation_public_port }}" | ||||
| @@ -1725,7 +1725,7 @@ matrix_synapse_account_threepid_delegates_msisdn: "{{ 'http://matrix-ma1sd:' + m | |||||
| matrix_synapse_container_client_api_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else '127.0.0.1:8008' }}" | matrix_synapse_container_client_api_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else '127.0.0.1:8008' }}" | ||||
| # | # | ||||
| # For exposing the Matrix Federation API's plain port (plain HTTP) to the local host. | # For exposing the Matrix Federation API's plain port (plain HTTP) to the local host. | ||||
| matrix_synapse_container_federation_api_plain_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else '127.0.0.1:' + matrix_synapse_container_federation_port|string }}" | |||||
| matrix_synapse_container_federation_api_plain_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else '127.0.0.1:' + matrix_synapse_container_federation_api_plain_port|string }}" | |||||
| # | # | ||||
| # For exposing the Matrix Federation API's TLS port (HTTPS) to the internet on all network interfaces. | # For exposing the Matrix Federation API's TLS port (HTTPS) to the internet on all network interfaces. | ||||
| matrix_synapse_container_federation_api_tls_host_bind_port: "{{ matrix_federation_public_port if (matrix_synapse_federation_enabled and matrix_synapse_tls_federation_listener_enabled) else '' }}" | matrix_synapse_container_federation_api_tls_host_bind_port: "{{ matrix_federation_public_port if (matrix_synapse_federation_enabled and matrix_synapse_tls_federation_listener_enabled) else '' }}" | ||||
| @@ -27,9 +27,9 @@ matrix_synapse_storage_path: "{{ matrix_synapse_base_path }}/storage" | |||||
| matrix_synapse_media_store_path: "{{ matrix_synapse_storage_path }}/media-store" | matrix_synapse_media_store_path: "{{ matrix_synapse_storage_path }}/media-store" | ||||
| matrix_synapse_ext_path: "{{ matrix_synapse_base_path }}/ext" | matrix_synapse_ext_path: "{{ matrix_synapse_base_path }}/ext" | ||||
| matrix_synapse_container_federation_api_port: 8448 | |||||
| matrix_synapse_container_federation_api_tls_port: 8448 | |||||
| matrix_synapse_container_federation_port: 8048 | |||||
| matrix_synapse_container_federation_api_plain_port: 8048 | |||||
| # Controls whether the matrix-synapse container exposes the Client/Server API port (tcp/8008 in the container). | # Controls whether the matrix-synapse container exposes the Client/Server API port (tcp/8008 in the container). | ||||
| # | # | ||||
| @@ -150,7 +150,7 @@ matrix_synapse_federation_rr_transactions_per_room_per_second: 50 | |||||
| # Controls whether the TLS federation listener is enabled (tcp/8448). | # Controls whether the TLS federation listener is enabled (tcp/8448). | ||||
| # Only makes sense if federation is enabled (`matrix_synapse_federation_enabled`). | # Only makes sense if federation is enabled (`matrix_synapse_federation_enabled`). | ||||
| # Note that federation may potentially be enabled as non-TLS on `matrix_synapse_container_federation_port` as well. | |||||
| # Note that federation may potentially be enabled as non-TLS on `matrix_synapse_container_federation_api_plain_port` as well. | |||||
| # If you're serving Synapse behind an HTTPS-capable reverse-proxy, | # If you're serving Synapse behind an HTTPS-capable reverse-proxy, | ||||
| # you can disable the TLS listener (`matrix_synapse_tls_federation_listener_enabled: false`). | # you can disable the TLS listener (`matrix_synapse_tls_federation_listener_enabled: false`). | ||||
| matrix_synapse_tls_federation_listener_enabled: true | matrix_synapse_tls_federation_listener_enabled: true | ||||
| @@ -276,7 +276,7 @@ listeners: | |||||
| {% if matrix_synapse_federation_port_enabled and matrix_synapse_tls_federation_listener_enabled %} | {% if matrix_synapse_federation_port_enabled and matrix_synapse_tls_federation_listener_enabled %} | ||||
| # TLS-enabled listener: for when matrix traffic is sent directly to synapse. | # TLS-enabled listener: for when matrix traffic is sent directly to synapse. | ||||
| - port: {{ matrix_synapse_container_federation_api_port|to_json }} | |||||
| - port: {{ matrix_synapse_container_federation_api_tls_port|to_json }} | |||||
| tls: true | tls: true | ||||
| bind_addresses: ['::'] | bind_addresses: ['::'] | ||||
| type: http | type: http | ||||
| @@ -302,7 +302,7 @@ listeners: | |||||
| {% if matrix_synapse_federation_port_enabled %} | {% if matrix_synapse_federation_port_enabled %} | ||||
| # Unsecure HTTP listener (Federation API): for when matrix traffic passes through a reverse proxy | # Unsecure HTTP listener (Federation API): for when matrix traffic passes through a reverse proxy | ||||
| # that unwraps TLS. | # that unwraps TLS. | ||||
| - port: {{ matrix_synapse_container_federation_port|to_json }} | |||||
| - port: {{ matrix_synapse_container_federation_api_plain_port|to_json }} | |||||
| tls: false | tls: false | ||||
| bind_addresses: ['::'] | bind_addresses: ['::'] | ||||
| type: http | type: http | ||||
| @@ -43,10 +43,10 @@ ExecStart={{ matrix_host_command_docker }} run --rm --name matrix-synapse \ | |||||
| -p {{ matrix_synapse_container_client_api_host_bind_port }}:8008 \ | -p {{ matrix_synapse_container_client_api_host_bind_port }}:8008 \ | ||||
| {% endif %} | {% endif %} | ||||
| {% if matrix_synapse_federation_enabled and matrix_synapse_tls_federation_listener_enabled and matrix_synapse_container_federation_api_tls_host_bind_port %} | {% if matrix_synapse_federation_enabled and matrix_synapse_tls_federation_listener_enabled and matrix_synapse_container_federation_api_tls_host_bind_port %} | ||||
| -p {{ matrix_synapse_container_federation_api_tls_host_bind_port }}:{{ matrix_synapse_container_federation_api_port }} \ | |||||
| -p {{ matrix_synapse_container_federation_api_tls_host_bind_port }}:{{ matrix_synapse_container_federation_api_tls_port }} \ | |||||
| {% endif %} | {% endif %} | ||||
| {% if matrix_synapse_federation_enabled and matrix_synapse_container_federation_api_plain_host_bind_port %} | {% if matrix_synapse_federation_enabled and matrix_synapse_container_federation_api_plain_host_bind_port %} | ||||
| -p {{ matrix_synapse_container_federation_api_plain_host_bind_port }}:{{ matrix_synapse_container_federation_port }} \ | |||||
| -p {{ matrix_synapse_container_federation_api_plain_host_bind_port }}:{{ matrix_synapse_container_federation_api_plain_port }} \ | |||||
| {% endif %} | {% endif %} | ||||
| {% if matrix_synapse_metrics_enabled and matrix_synapse_container_metrics_api_host_bind_port %} | {% if matrix_synapse_metrics_enabled and matrix_synapse_container_metrics_api_host_bind_port %} | ||||
| -p {{ matrix_synapse_container_metrics_api_host_bind_port }}:{{ matrix_synapse_metrics_port }} \ | -p {{ matrix_synapse_container_metrics_api_host_bind_port }}:{{ matrix_synapse_metrics_port }} \ | ||||