ExecStopPost should allow us to clean up (docker kill + docker rm)
even if the ExecStart (docker run ..) command failed, and not just after
a graceful service stop was initiated.

Source: https://www.freedesktop.org/software/systemd/man/systemd.service.html#ExecStopPost=

Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1492

Seems like Dendrite encourages serving both the Client and Federation
API at the same port.

Coming from Synapse and how things are done there, we have separate
ports. Using separate ports probably makes matrix-corporal (etc.)
integration easier, so separating the APIs by default probably makes
sense.

Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1468

Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1393

1f196f59cb

Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1397

Until now, we were leaving services "enabled"
(symlinks in /etc/systemd/system/multi-user.target.wants/).

We clean these up now. Broken symlinks may still exist in older
installations that enabled/disabled services. We're not taking care
to fix these up. It's just a cosmetic defect anyway.

https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1311#issuecomment-945718866

for matrix_nginx_proxy_proxy_synapse_metrics_basic_auth_key
resolves #1308

when matrix_nginx_proxy_proxy_synapse_metrics is enabled

From 6f80292745

* add timeout param for nginx proxy

default value matrix_nginx_proxy_request_timeout is 60s

* default matrix_nginx_proxy_request_timeout - 60s

* few more variables for request timeout

* Update nginx.conf.j2

* Update nginx.conf.j2

This reverts commit 732051b8fc.

There's no such container image published yet.

http://nginx.org/en/CHANGES

* root path for the base domain

* Fix path when running in a container

Co-authored-by: Slavi Pantaleev <slavi@devture.com>

Upgrade certbot (v1.16.0 -> v1.17.0) nginx (1.21.0 -> 1.21.1)

Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1154

According to
https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy,
having both a header and the `<meta>`-tag provided by Element itself is
not a problem. The 2 CSP policies get combined.

https://github.com/vector-im/element-web#configuration-best-practices