Raymond Coetzee
4e2780ff88
Add support for a prometheus postgres exporter
This commit introduces a new role that downloads and installs the
prometheus community postgres exporter https://github.com/prometheus-community/postgres_exporter .
A new credential is added to matrix_postgres_additional_databases that
allows the exporter access to the database to gather statistics.
A new dashboard was added to the grafana role, with some refactoring
to enable the dashboard only if the new role is enabled.
I've included some basic instructions for how to enable the role in
the Docs section.
In terms of testing, I've tested enabling the role, and disabling
it to make sure it cleans up the container and systemd role.
4 anni fa
Jez Cope
a8dbd93f61
Check irc service is present before stopping it
4 anni fa
Thom Wiggers
af4bd50c2a
Update IRC appservice
4 anni fa
Slavi Pantaleev
d61fe94bae
Fix incorrect path in Mjolnir uninstallation tasks
4 anni fa
rakshazi
4ddd8bbb84
Updated nginx-proxy (1.20.0 -> 1.21.0)
4 anni fa
BG
763952395b
Adding mjolnir antispam synapse modul.
4 anni fa
Michael-GMH
6f40d78353
fix random edits to upstream
4 anni fa
Slavi Pantaleev
36910348cf
Switch synapse-admin to tagged release (0.8.1)
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1084
4 anni fa
Michael-GMH
85777e8f96
merge with upstream
4 anni fa
Ahmad Haghighi
209d59070e
Avoiding if(s), fix #1083
Conversation: https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1083#discussion_r638671860
Signed-off-by: Ahmad Haghighi <haghighi@fedoraproject.org>
4 anni fa
Ahmad Haghighi
ee088d5d46
Synapse LDAP auth: add support for Active Directory
Signed-off-by: Ahmad Haghighi <haghighi@fedoraproject.org>
4 anni fa
Slavi Pantaleev
1ed0857019
Fix syntax error
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1024
4 anni fa
sakkiii
4a4a7f136e
changes added to hydrogen client
4 anni fa
sakkiii
3436f9c10a
rename to matrix_nginx_proxy_hsts_preload_enabled
4 anni fa
Slavi Pantaleev
0648b1b618
Upgrade Element (1.7.28 -> 1.7.29)
4 anni fa
sakkiii
7cc5328ede
Comments & Ref
4 anni fa
sakkiii
df2d91970d
matrix_nginx_proxy_xss_protection
4 anni fa
ewang
409cd2b9a3
Source port binding from group vars in line other components
4 anni fa
Eagle-251
ef6a7e051c
Fix missing port binding.
4 anni fa
ewang
1bb6ed97ae
Make port bindings default for those disabling nginx proxy
I changed the conditional statement in prosody systemd template to bind the localhost port by default if people have set ```matrix_nginx_proxy_enabled == false ```.
Hopefully that should make it the default behaviour now.
4 anni fa
Aaron Raimist
3c0452ff5a
Remove unnecessary bind for config.json, use proper nginx.conf
4 anni fa
ewang
4a772e50f4
Allow Jitsi XMPP webscoket support for users using own webserver.
Added:
- Conditional localhost Port bindings for Jitsi Prosody systemd template
- Added variable to main.yml to allow overriding from vars.yml
4 anni fa
Slavi Pantaleev
6f80292745
Add OCSP stapling support and other SSL optimizations to Hydrogen vhost
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1061
and https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1057
4 anni fa
Slavi Pantaleev
d0de21ab34
Delete Hydrogen nginx configuration file when disabled
4 anni fa
Aaron Raimist
ac4ede20af
Add docs
4 anni fa
Aaron Raimist
1633f61018
Only install config.json when self building
4 anni fa
Aaron Raimist
9437f78c9e
Build using custom config.json, add CSP, update to 0.1.53
4 anni fa
Slavi Pantaleev
47b4608b96
Fail in a friendlier way when trying to self-build on Ansible <= 2.8
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1070
Related discussion here: 1ab507349c (commitcomment-51108407)
4 anni fa
Slavi Pantaleev
1ab507349c
Fix self-building for various components on Ansible < 2.8
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1070
4 anni fa
Tobias K
3dcbed6353
roles/matrix-grafana: Set root_url in granafa.ini
4 anni fa
sakkiii
8529ca4c17
Update grafana (7.5.6->7.5.7)
4 anni fa
Toni Spets
544915ff76
Add Heisenbridge
4 anni fa
Slavi Pantaleev
21eb39f986
Mention matrix_common_after_systemd_service_start_wait_for_timeout_seconds in failure message
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1062
4 anni fa
Slavi Pantaleev
ee46fabdca
Make waiting time for --tags=start configurable
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1062
4 anni fa
sakkiii
e9b878b9e9
Optimize SSL session
4 anni fa
Slavi Pantaleev
e6afa05f7b
Enable OCSP stapling for the federation port
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1057
Not sure if this is beneficial though.
4 anni fa
Slavi Pantaleev
57a6a98a50
Fix incorrect SSL certificate path
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1057
4 anni fa
sakkiii
d31b55b2a7
SSL-enabled block only
4 anni fa
rakshazi
400371f6dd
Updated Element version (1.7.27 -> 1.7.28)
4 anni fa
Slavi Pantaleev
d156c8caa2
Upgrade Synapse (1.33.2 -> 1.34.0)
4 anni fa
Slavi Pantaleev
e4dd933cf0
Make missing /_synapse/admin correctly return 404 responses
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1058
We may try to capture such calls and return a friendlier response (HTML
or JSON) saying "The Synapse Admin API is not enabled", but that may not
be desirable.
For now, we stick to what "upstream" recommends: "simply
don't proxy these APIs", which should lead to the same kind of 404 that
we have now.
See here: 6660912226/docs/reverse_proxy.md (synapse-administration-endpoints)
4 anni fa
sakkiii
2c3da6599b
Added warning
4 anni fa
sakkiii
0dd4459799
matrix_nginx_proxy_ocsp_stapling_enabled variable added
4 anni fa
sakkiii
c05021640d
Enable OCSP Stapling
4 anni fa
Aaron Raimist
ca361af616
Add Hydrogen
4 anni fa
sakkiii
4bd7d8b5e4
Update grafana (7.5.5->7.5.6)
4 anni fa
sakkiii
d5cd3d443d
Update prometheus (2.26.0->2.27.0)
4 anni fa
Slavi Pantaleev
f481b1a84b
Upgrade matrix-mailer (4.94.2-r0 -> 4.94.2-r0-1)
Related to https://github.com/devture/exim-relay/pull/9
4 anni fa
Slavi Pantaleev
8e6f1876f5
Switch to :latest version of synapse-admin
Related to https://github.com/Awesome-Technologies/synapse-admin/issues/132
We should switch back when >0.8.0 gets released.
4 anni fa
sakkiii
8fc55b30c5
Upgrade Synapse (1.33.1 -> 1.33.2)
This release fixes a denial of service attack (CVE-2021-29471) against Synapse's push rules implementation. Server admins are encouraged to upgrade.
Ref: https://github.com/matrix-org/synapse/releases/tag/v1.33.2
4 anni fa