matrix-docker-ansible-deploy

Commit graph

Autor	SHA1	Nachricht	Datum
Slavi Pantaleev	9202b2b8d9	Ensure systemd services are running when doing --tags=start Fixes #129 (Github Issue). Unfortunately, we rely on `service_facts`, which is only available in Ansible >= 2.5. There's little reason to stick to an old version such as Ansible 2.4: - some time has passed since we've raised version requirements - it's time to move into the future (a little bit) - we've recently (in `82b4640072`) improved the way one can run Ansible in a Docker container From now on, Ansible >= 2.5 is required.	vor 7 Jahren
Slavi Pantaleev	82b4640072	Use a more suitable Docker image for running Ansible Inspired by #128 (Github Issue), we've created a new Docker image to replace https://hub.docker.com/r/qmxme/ansible Adding dnspython or dig to `qmxme/ansible` doesn't seem like a good idea (that might be accepted by them), given that it's specific to our use case. That's why we'll be maintaining our own image from now on.	vor 7 Jahren
Slavi Pantaleev	631b7cc6a6	Add support for adjusting Synapse rate-limiting configuration	vor 7 Jahren
Borjan Tchakaloff	cbd629e7ea	Specify that cron is likely required on the server When using Let's Encrypt SSL certificates, a cronjob is set up to automatically renew them. Though it does require a `cron`-compatible program on the server. This fixes the error that is caused by the `/etc/cron.d` directory not existing and the `ansible-cron` module trying to write out a file there -- without checking if the directory exists first.	vor 7 Jahren
Slavi Pantaleev	1939fc9113	Improve documentation a bit	vor 7 Jahren
Slavi Pantaleev	59e37105e8	Add TLS support to Coturn	vor 7 Jahren
Slavi Pantaleev	10d9293121	Indicate that TURN ports are a range	vor 7 Jahren
Slavi Pantaleev	c545d3eb85	Add support for serving base domain via matrix-nginx-proxy	vor 7 Jahren
Slavi Pantaleev	1974935bc6	Update docs a bit	vor 7 Jahren
Slavi Pantaleev	52486356e5	Add some more links to Dimension's homepage	vor 7 Jahren
Edgars Voroboks	c49ba1c4ab	Fix Dimension documentation	vor 7 Jahren
Slavi Pantaleev	a1f9869eb2	Improve documentation about getting the playbook	vor 7 Jahren
Edgars Voroboks	9f5215c95a	Make some additions to Dimension documentation	vor 7 Jahren
Edgars Voroboks	1bff4893d9	Provide Dimension documentation	vor 7 Jahren
Slavi Pantaleev	ae7e17e64a	Add information about mxisd email template customization Related to #108 (Github Pull Request).	vor 7 Jahren
Slavi Pantaleev	401d7560e9	Make Discord bridging instructions more detailed It didn't mention `matrix_appservice_discord_client_id` and `matrix_appservice_discord_bot_token`, which makes it hard for beginners. Related to #105 (Github Pull Request).	vor 7 Jahren
Lionstiger	b5ae0254fd	used ` backticks instead of double quotes	vor 7 Jahren
Lionstiger	faa16617da	add documentation	vor 7 Jahren
Lionstiger	835c349275	Add matrix-appservice-discord bridge Bridge is setup to work on the matrix side with this, but the discord invite link is not automatically generated.	vor 7 Jahren
Slavi Pantaleev	041a1947b3	Update Synapse (0.99.1.1 -> 0.99.2)	vor 7 Jahren
frlae	6b47ebeaa7	fixed a small path typo in playbook telemetry docs	vor 7 Jahren
Slavi Pantaleev	a43bcd81fe	Rename some variables	vor 7 Jahren
Slavi Pantaleev	28bd6dc75b	Improve Telegram/Whatsapp instructions	vor 7 Jahren
Slavi Pantaleev	747574ab56	Update Prerequisites a bit	vor 7 Jahren
Slavi Pantaleev	b79db89221	Improve wording a bit	vor 7 Jahren
Slavi Pantaleev	fcdc2a6c4f	Fix incomplete sentence	vor 7 Jahren
Slavi Pantaleev	eb08e20418	Upgrade Synapse (0.99.0 -> 0.99.1) and sync config `matrix_synapse_no_tls` is now implicit, so we've gotten rid of it. The `homeserver.yaml.j2` template has been synchronized with the configuration generated by Synapse v0.99.1 (some new options are present, etc.)	vor 7 Jahren
Slavi Pantaleev	70b2f07fec	Add PostgreSQL backup information	vor 7 Jahren
Slavi Pantaleev	46accfdb3c	Add guide about certificates for other domains We had something like that on the Server Delegation how-to page, but it's better if we have it on the SSL certificates page. Relocated there and improved linking. Fixes #94 (Github Issue)	vor 7 Jahren
Slavi Pantaleev	f4fa03d4b9	Re-iterate where one can find the well-known files	vor 7 Jahren
Slavi Pantaleev	ef903fe544	Add some quick links	vor 7 Jahren
Slavi Pantaleev	e9cfcb8429	Fix another YAML indentation problem on documentation page	vor 7 Jahren
Slavi Pantaleev	92aa5bfa2d	Fix YAML indentation on documentation page	vor 7 Jahren
Slavi Pantaleev	33726cdb08	Fix anchor	vor 7 Jahren
Slavi Pantaleev	5148f8edf4	Update docs	vor 7 Jahren
Slavi Pantaleev	91a757c581	Add support for reloading Synapse	vor 7 Jahren
Slavi Pantaleev	772154f3b9	Update Server Delegation docs a bit	vor 7 Jahren
Slavi Pantaleev	b540427974	Mention alternative ways to do Server Delegation	vor 7 Jahren
Slavi Pantaleev	f6ebd4ce62	Initial work on Synapse 0.99/1.0 preparation	vor 7 Jahren
Plailect	29b40b428a	Database files must be stored on permanent storage	vor 7 Jahren
Slavi Pantaleev	5e8a7fd05b	Update own-webserver guide and add sample Apache configuration This supersedes #59 (Github Pull Request), which was greatly beneficial in creating our sample Apache configuration.	vor 7 Jahren
Slavi Pantaleev	8681a5dc69	Add 'none' SSL certificate retrieval method	vor 7 Jahren
Slavi Pantaleev	e09b7435d1	Update documentation a bit	vor 7 Jahren
Slavi Pantaleev	cd332d9b4e	Add TLS v1.3 support to matrix-nginx-proxy This was mentioned in #27 (Github Pull Request), but it's just now that the nginx Docker image actually supports TLS v1.3 and we can enable it.	vor 7 Jahren
Slavi Pantaleev	a9fae8e3b1	Revert "Use native OpenSSL module to generate `passkey.pem`" This reverts commit `0dac5ea508`. Relying on pyOpenSSL is the Ansible way of doing things, but is impractical and annoying for users. `openssl` is easily available on most servers, even by default. We'd better use that.	vor 7 Jahren
Plailect	0dac5ea508	Use native OpenSSL module to generate `passkey.pem`	vor 7 Jahren
Plailect	0a2a8e118c	Update example configuration and documentation	vor 7 Jahren
Plailect	1c057bf06d	Correct variable name in documentation	vor 7 Jahren
Plailect	3a4a671dd7	Add support for matrix-appservice-irc	vor 7 Jahren
Slavi Pantaleev	299a8c4c7c	Make (most) containers start as non-root This makes all containers (except mautrix-telegram and mautrix-whatsapp), start as a non-root user. We do this, because we don't trust some of the images. In any case, we'd rather not trust ALL images and avoid giving `root` access at all. We can't be sure they would drop privileges or what they might do before they do it. Because Postfix doesn't support running as non-root, it had to be replaced by an Exim mail server. The matrix-nginx-proxy nginx container image is patched up (by replacing its main configuration) so that it can work as non-root. It seems like there's no other good image that we can use and that is up-to-date (https://hub.docker.com/r/nginxinc/nginx-unprivileged is outdated). Likewise for riot-web (https://hub.docker.com/r/bubuntux/riot-web/), we patch it up ourselves when starting (replacing the main nginx configuration). Ideally, it would be fixed upstream so we can simplify.	vor 7 Jahren

1 2 3

105 Commits (596f2ec1e24e1bee4e4be76ee637640107d1b064)