Slavi Pantaleev
226c550ffa
Add support for stream writer Synapse workers
As stream writer workers are also powered by the `generic_worker`
Synapse app, this necessitated that we provide means for distinguishing
between them and regular `generic_workers`.
I've also taken the time to optimize nginx configuration generation
(more Jinja2 macro usage, less duplication).
Worker names have also changed.
Workers are now named sequentially like this:
- `matrix-synapse-worker-0-generic`
- `matrix-synapse-worker-1-stream-writer-typing`
- `matrix-synapse-worker-2-pusher`
instead of `matrix-synapse-worker_generic_worker-18111` (indexed with a
port number).
People who modify `matrix_synapse_workers_enabled_list` directly will
need to adjust their configuration.
пре 3 година
Slavi Pantaleev
f12206676f
Upgrade Synapse (v1.66.0 -> 1.67.0) and remove `frontend_proxy` workers
`frontend_proxy` workers have been superseded by `generic_worker` workers.
Related to https://github.com/matrix-org/synapse/pull/13645
пре 3 година
Charles Wright
20767b5149
Fixes to enable Conduit in setup-all
пре 3 година
Slavi Pantaleev
d073c7ecb3
More ansible-lint fixes
пре 3 година
Julian Foad
25b343c8c8
matrix-ntfy: without nginx, bind to 127.0.0.1:2586
пре 3 година
Julian Foad
2a516a16fb
matrix-ntfy: enable WebSocket proxying
пре 3 година
Julian Foad
ec9f8e2931
Add a role to install 'ntfy' push-notification server.
This commit adds a 'matrix-ntfy' role that runs Ntfy server in Docker with
simple configuration, and plumbing to add the role to the playbook.
TODO: documentation, self-check, database persistence.
пре 3 година
Julian-Samuel Gebühr
4d40b61a51
Fix config error, add nginx
пре 3 година
Slavi Pantaleev
ba51997f7b
(BC Break) Redo how metrics are exposed to external Prometheus servers
пре 3 година
Julian-Samuel Gebühr
f57aed8e01
Add a setting to make nginx forward node_exporter and postgres_exporter
пре 3 година
Aine
290754371a
add matrix-bot-buscarron
пре 3 година
Andrea Tartaglia
68424e68e5
feat: make synapse htpasswd file path configurable
When setting `matrix_nginx_proxy_enabled: false` and enabling authentication on the metrics endpoint, the htpasswd file is hardcoded to the nginx-proxy container dir, this changes the hardcoded value to a variable so the path can be updated
пре 3 година
borisrunakov
acaebfbf67
optional media cache with range requests support ( #1759 )
пре 3 година
Slavi Pantaleev
3b9d5b13e9
Add support for not serving Dendrite federation APIs on the client port
Seems like Dendrite encourages serving both the Client and Federation
API at the same port.
Coming from Synapse and how things are done there, we have separate
ports. Using separate ports probably makes matrix-corporal (etc.)
integration easier, so separating the APIs by default probably makes
sense.
пре 4 година
Slavi Pantaleev
ecc237bbad
Initial work on getting nginx reverse proxying working with Dendrite
пре 4 година
rakshazi
5788a16a2e
added matrix-client-cinny
пре 4 година
Slavi Pantaleev
3a9fe48deb
Make matrix-nginx-proxy's X-Forwarded-For header customizable
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1393
пре 4 година
Aaron Raimist
f8fe68b385
Allow workers to serve new v3 APIs
1f196f59cb
пре 4 година
JokerGermany
c0656448f7
Port 80 for IPv6
пре 4 година
b
6eaa8ac65a
add server_name to matrix-synapsel.conf only if matrix_nginx_proxy_enabled
пре 4 година
Kim Brose
5f6bbafa17
fix space before tab in indent
пре 4 година
HarHarLinks
4209c4208c
add own variable for worker metrics
https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1311#issuecomment-945718866
пре 4 година
HarHarLinks
d9fa2f7ed4
add auto proxy synapse worker metrics
when matrix_nginx_proxy_proxy_synapse_metrics is enabled
пре 4 година
Aaron Raimist
a676b5358c
Fix hydrogen OCSP typo
From 6f80292745
пре 4 година
Colin Shea
2578ca4cee
rename matrix_nginx_proxy_x_forwarded_header_value -> matrix_nginx_proxy_x_forwarded_proto_value
пре 4 година
Colin Shea
d0cd67044e
replace $scheme with X-Forwarded-Proto when enabled
пре 4 година
sakkiii
ae6caf158a
Added variable matrix_nginx_proxy_request_timeout ( #1265 )
* add timeout param for nginx proxy
default value matrix_nginx_proxy_request_timeout is 60s
* default matrix_nginx_proxy_request_timeout - 60s
* few more variables for request timeout
* Update nginx.conf.j2
* Update nginx.conf.j2
пре 4 година
Michael Collins
98e6cd685d
sync with previous repo
пре 4 година
Michael Collins
2e30802b87
use group variables instead
пре 4 година
Michael Collins
8238d65e5f
simplify template conditional
пре 4 година
Michael Collins
bfb61e776e
GMH v0.5.7... maybe!
пре 4 година
JokerGermany
9345d840be
root path for the base domain is wrong ( #1189 )
* root path for the base domain
* Fix path when running in a container
Co-authored-by: Slavi Pantaleev <slavi@devture.com>
пре 4 година
Michael-GMH
86e4649578
GoMatrixHosting v0.5.5
пре 4 година
Michael-GMH
03006eb5ab
GoMatrixHosting v0.5.5
пре 4 година
Slavi Pantaleev
6294e58304
Fix Content-Security-Policy for Element
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1154
According to
https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy ,
having both a header and the `<meta>`-tag provided by Element itself is
not a problem. The 2 CSP policies get combined.
пре 4 година
oxmie
5df4d68829
Make federation domain customizable
пре 4 година
sakkiii
0217644b48
Content-Security-Policy For Element Web
https://github.com/vector-im/element-web#configuration-best-practices
пре 4 година
Michael-GMH
ad7bbd6442
merge upstream
пре 4 година
Slavi Pantaleev
4880dcceb0
Fix OCSP-stapling-related errors due to missing resolver
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1057
пре 4 година
Michael-GMH
6f40d78353
fix random edits to upstream
пре 4 година
Michael-GMH
85777e8f96
merge with upstream
пре 4 година
Slavi Pantaleev
1ed0857019
Fix syntax error
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1024
пре 4 година
sakkiii
4a4a7f136e
changes added to hydrogen client
пре 4 година
sakkiii
3436f9c10a
rename to matrix_nginx_proxy_hsts_preload_enabled
пре 4 година
sakkiii
df2d91970d
matrix_nginx_proxy_xss_protection
пре 4 година
Slavi Pantaleev
6f80292745
Add OCSP stapling support and other SSL optimizations to Hydrogen vhost
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1061
and https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1057
пре 4 година
Aaron Raimist
9437f78c9e
Build using custom config.json, add CSP, update to 0.1.53
пре 4 година
sakkiii
e9b878b9e9
Optimize SSL session
пре 4 година
Slavi Pantaleev
e6afa05f7b
Enable OCSP stapling for the federation port
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1057
Not sure if this is beneficial though.
пре 4 година
Slavi Pantaleev
57a6a98a50
Fix incorrect SSL certificate path
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1057
пре 4 година