Raymond Coetzee
4e2780ff88
Add support for a prometheus postgres exporter
This commit introduces a new role that downloads and installs the
prometheus community postgres exporter https://github.com/prometheus-community/postgres_exporter .
A new credential is added to matrix_postgres_additional_databases that
allows the exporter access to the database to gather statistics.
A new dashboard was added to the grafana role, with some refactoring
to enable the dashboard only if the new role is enabled.
I've included some basic instructions for how to enable the role in
the Docs section.
In terms of testing, I've tested enabling the role, and disabling
it to make sure it cleans up the container and systemd role.
4 лет назад
Jez Cope
a8dbd93f61
Check irc service is present before stopping it
4 лет назад
Thom Wiggers
af4bd50c2a
Update IRC appservice
4 лет назад
Slavi Pantaleev
d61fe94bae
Fix incorrect path in Mjolnir uninstallation tasks
4 лет назад
rakshazi
4ddd8bbb84
Updated nginx-proxy (1.20.0 -> 1.21.0)
4 лет назад
BG
763952395b
Adding mjolnir antispam synapse modul.
4 лет назад
Michael-GMH
6f40d78353
fix random edits to upstream
4 лет назад
Slavi Pantaleev
36910348cf
Switch synapse-admin to tagged release (0.8.1)
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1084
4 лет назад
Michael-GMH
85777e8f96
merge with upstream
4 лет назад
Ahmad Haghighi
209d59070e
Avoiding if(s), fix #1083
Conversation: https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1083#discussion_r638671860
Signed-off-by: Ahmad Haghighi <haghighi@fedoraproject.org>
4 лет назад
Ahmad Haghighi
ee088d5d46
Synapse LDAP auth: add support for Active Directory
Signed-off-by: Ahmad Haghighi <haghighi@fedoraproject.org>
4 лет назад
Slavi Pantaleev
1ed0857019
Fix syntax error
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1024
4 лет назад
sakkiii
4a4a7f136e
changes added to hydrogen client
4 лет назад
sakkiii
3436f9c10a
rename to matrix_nginx_proxy_hsts_preload_enabled
4 лет назад
Slavi Pantaleev
0648b1b618
Upgrade Element (1.7.28 -> 1.7.29)
4 лет назад
sakkiii
7cc5328ede
Comments & Ref
4 лет назад
sakkiii
df2d91970d
matrix_nginx_proxy_xss_protection
4 лет назад
ewang
409cd2b9a3
Source port binding from group vars in line other components
4 лет назад
Eagle-251
ef6a7e051c
Fix missing port binding.
4 лет назад
ewang
1bb6ed97ae
Make port bindings default for those disabling nginx proxy
I changed the conditional statement in prosody systemd template to bind the localhost port by default if people have set ```matrix_nginx_proxy_enabled == false ```.
Hopefully that should make it the default behaviour now.
4 лет назад
Aaron Raimist
3c0452ff5a
Remove unnecessary bind for config.json, use proper nginx.conf
4 лет назад
ewang
4a772e50f4
Allow Jitsi XMPP webscoket support for users using own webserver.
Added:
- Conditional localhost Port bindings for Jitsi Prosody systemd template
- Added variable to main.yml to allow overriding from vars.yml
4 лет назад
Slavi Pantaleev
6f80292745
Add OCSP stapling support and other SSL optimizations to Hydrogen vhost
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1061
and https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1057
4 лет назад
Slavi Pantaleev
d0de21ab34
Delete Hydrogen nginx configuration file when disabled
4 лет назад
Aaron Raimist
ac4ede20af
Add docs
4 лет назад
Aaron Raimist
1633f61018
Only install config.json when self building
4 лет назад
Aaron Raimist
9437f78c9e
Build using custom config.json, add CSP, update to 0.1.53
4 лет назад
Slavi Pantaleev
47b4608b96
Fail in a friendlier way when trying to self-build on Ansible <= 2.8
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1070
Related discussion here: 1ab507349c (commitcomment-51108407)
4 лет назад
Slavi Pantaleev
1ab507349c
Fix self-building for various components on Ansible < 2.8
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1070
4 лет назад
Tobias K
3dcbed6353
roles/matrix-grafana: Set root_url in granafa.ini
4 лет назад
sakkiii
8529ca4c17
Update grafana (7.5.6->7.5.7)
4 лет назад
Toni Spets
544915ff76
Add Heisenbridge
4 лет назад
Slavi Pantaleev
21eb39f986
Mention matrix_common_after_systemd_service_start_wait_for_timeout_seconds in failure message
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1062
4 лет назад
Slavi Pantaleev
ee46fabdca
Make waiting time for --tags=start configurable
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1062
4 лет назад
sakkiii
e9b878b9e9
Optimize SSL session
4 лет назад
Slavi Pantaleev
e6afa05f7b
Enable OCSP stapling for the federation port
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1057
Not sure if this is beneficial though.
4 лет назад
Slavi Pantaleev
57a6a98a50
Fix incorrect SSL certificate path
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1057
4 лет назад
sakkiii
d31b55b2a7
SSL-enabled block only
4 лет назад
rakshazi
400371f6dd
Updated Element version (1.7.27 -> 1.7.28)
4 лет назад
Slavi Pantaleev
d156c8caa2
Upgrade Synapse (1.33.2 -> 1.34.0)
4 лет назад
Slavi Pantaleev
e4dd933cf0
Make missing /_synapse/admin correctly return 404 responses
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1058
We may try to capture such calls and return a friendlier response (HTML
or JSON) saying "The Synapse Admin API is not enabled", but that may not
be desirable.
For now, we stick to what "upstream" recommends: "simply
don't proxy these APIs", which should lead to the same kind of 404 that
we have now.
See here: 6660912226/docs/reverse_proxy.md (synapse-administration-endpoints)
4 лет назад
sakkiii
2c3da6599b
Added warning
4 лет назад
sakkiii
0dd4459799
matrix_nginx_proxy_ocsp_stapling_enabled variable added
4 лет назад
sakkiii
c05021640d
Enable OCSP Stapling
4 лет назад
Aaron Raimist
ca361af616
Add Hydrogen
4 лет назад
sakkiii
4bd7d8b5e4
Update grafana (7.5.5->7.5.6)
4 лет назад
sakkiii
d5cd3d443d
Update prometheus (2.26.0->2.27.0)
4 лет назад
Slavi Pantaleev
f481b1a84b
Upgrade matrix-mailer (4.94.2-r0 -> 4.94.2-r0-1)
Related to https://github.com/devture/exim-relay/pull/9
4 лет назад
Slavi Pantaleev
8e6f1876f5
Switch to :latest version of synapse-admin
Related to https://github.com/Awesome-Technologies/synapse-admin/issues/132
We should switch back when >0.8.0 gets released.
4 лет назад
sakkiii
8fc55b30c5
Upgrade Synapse (1.33.1 -> 1.33.2)
This release fixes a denial of service attack (CVE-2021-29471) against Synapse's push rules implementation. Server admins are encouraged to upgrade.
Ref: https://github.com/matrix-org/synapse/releases/tag/v1.33.2
4 лет назад