overmind
/
matrix-docker-ansible-deploy
mirror da https://github.com/spantaleev/matrix-docker-ansible-deploy
1
0
Forka 0
Codice Problemi 0 Rilasci 0 Wiki Attività
Matrix Docker Ansible eploy
Non puoi selezionare più di 25 argomenti Gli argomenti devono iniziare con una lettera o un numero, possono includere trattini ('-') e possono essere lunghi fino a 35 caratteri.
7534 Commit
1 Ramo (Branch)
322 MiB
 
 
 
Albero (Tree): 7143133beb
Rami (Branch) Tag
${ item.name }
Crea branch ${ searchTerm }
da '7143133beb'
${ noResults }
matrix-docker-ansible-deploy/roles/custom/matrix-synapse-reverse-prox.../templates/nginx/conf.d/matrix-synapse-reverse-prox...

310 righe
16 KiB
Originale Blame Cronologia 

  1. #jinja2: lstrip_blocks: "True"

  2. 

  3. {% set room_workers = matrix_synapse_reverse_proxy_companion_synapse_workers_list | selectattr('type', 'equalto', 'room_worker') | list %}

  4. {% set sync_workers = matrix_synapse_reverse_proxy_companion_synapse_workers_list | selectattr('type', 'equalto', 'sync_worker') | list %}

  5. {% set client_reader_workers = matrix_synapse_reverse_proxy_companion_synapse_workers_list | selectattr('type', 'equalto', 'client_reader') | list %}

  6. {% set federation_reader_workers = matrix_synapse_reverse_proxy_companion_synapse_workers_list | selectattr('type', 'equalto', 'federation_reader') | list %}

  7. {% set generic_workers = matrix_synapse_reverse_proxy_companion_synapse_workers_list | selectattr('type', 'equalto', 'generic_worker') | list %}

  8. {% set stream_writer_typing_stream_workers = matrix_synapse_reverse_proxy_companion_synapse_workers_list | selectattr('type', 'equalto', 'stream_writer') | selectattr('stream_writer_stream', 'equalto', 'typing') | list %}

  9. {% set stream_writer_to_device_stream_workers = matrix_synapse_reverse_proxy_companion_synapse_workers_list | selectattr('type', 'equalto', 'stream_writer') | selectattr('stream_writer_stream', 'equalto', 'to_device') | list %}

  10. {% set stream_writer_account_data_stream_workers = matrix_synapse_reverse_proxy_companion_synapse_workers_list | selectattr('type', 'equalto', 'stream_writer') | selectattr('stream_writer_stream', 'equalto', 'account_data') | list %}

  11. {% set stream_writer_receipts_stream_workers = matrix_synapse_reverse_proxy_companion_synapse_workers_list | selectattr('type', 'equalto', 'stream_writer') | selectattr('stream_writer_stream', 'equalto', 'receipts') | list %}

  12. {% set stream_writer_presence_stream_workers = matrix_synapse_reverse_proxy_companion_synapse_workers_list | selectattr('type', 'equalto', 'stream_writer') | selectattr('stream_writer_stream', 'equalto', 'presence') | list %}

  13. {% set media_repository_workers = matrix_synapse_reverse_proxy_companion_synapse_workers_list | selectattr('type', 'equalto', 'media_repository') | list %}

  14. {% set user_dir_workers = matrix_synapse_reverse_proxy_companion_synapse_workers_list | selectattr('type', 'equalto', 'user_dir') | list %}

  15. 

  16. {% macro render_worker_upstream(name, workers, load_balance) %}

  17. {% if workers | length > 0 %}

  18. 	upstream {{ name }} {

  19. 		{{ load_balance }}

  20. 		keepalive {{ ((workers | length) * 2) | string }};

  21. 		{% for worker in workers %}

  22. 			server "{{ worker.name }}:{{ worker.port }}";

  23. 		{% endfor %}

  24. 	}

  25. {% endif %}

  26. {% endmacro %}

  27. 

  28. {% macro render_locations_to_upstream(locations, upstream_name) %}

  29. 	{% for location in locations %}

  30. 	location ~ {{ location }} {

  31. 		proxy_pass http://{{ upstream_name }}$request_uri;

  32. 		proxy_set_header Host $host;

  33. 		proxy_http_version 1.1;

  34. 		proxy_set_header Connection "";

  35. 	}

  36. 	{% endfor %}

  37. {% endmacro %}

  38. 

  39. {% if matrix_synapse_reverse_proxy_companion_synapse_workers_enabled %}

  40. 

  41. # Maps from https://tcpipuk.github.io/synapse/deployment/nginx.html#mapsconf

  42. # Client username from access token

  43. map $arg_access_token $accesstoken_from_urlparam {

  44.   default                    $arg_access_token;

  45.   "~syt_(?<username>.*?)_.*" $username;

  46. }

  47. # Client username from MXID

  48. map $http_authorization $mxid_localpart {

  49.   default                           $http_authorization;

  50.   "~Bearer syt_(?<username>.*?)_.*" $username;

  51.   ""                                $accesstoken_from_urlparam;

  52. }

  53. # Whether to upgrade HTTP connection

  54. map $http_upgrade $connection_upgrade {

  55.   default upgrade;

  56.   '' close;

  57. }

  58. #Extract room name from URI

  59. map $request_uri $room_name {

  60.   ~^/_matrix/(client|federation)/.*?(?:%21|!)(?<room>[A-Za-z0-9._=\-\/]+)(?::|%3A)[A-Za-z0-9._=\-\/]+ $room;

  61. }

  62. # End maps

  63. 

  64. 	{% if matrix_synapse_reverse_proxy_companion_synapse_cache_enabled %}

  65.     	proxy_cache_path  {{ matrix_synapse_reverse_proxy_companion_synapse_cache_path }} levels=1:2 keys_zone={{ matrix_synapse_reverse_proxy_companion_synapse_cache_keys_zone_name }}:{{ matrix_synapse_reverse_proxy_companion_synapse_cache_keys_zone_size }} inactive={{ matrix_synapse_reverse_proxy_companion_synapse_cache_inactive_time }} max_size={{ matrix_synapse_reverse_proxy_companion_synapse_cache_max_size_mb }}m;

  66. 	{% endif %}

  67. 	# Round Robin "upstream" pools for workers

  68. 

  69. 	{{ render_worker_upstream('room_workers_upstream', room_workers, 'hash $room_name consistent;') }}

  70. 	{{ render_worker_upstream('sync_workers_upstream', sync_workers, 'hash $mxid_localpart consistent;') }}

  71. 	{{ render_worker_upstream('client_reader_workers_upstream', client_reader_workers, 'least_conn;') }}

  72. 	{{ render_worker_upstream('federation_reader_workers_upstream', federation_reader_workers, 'hash $http_x_forwarded_for;') }}

  73. 

  74. 	{{ render_worker_upstream('generic_workers_upstream', generic_workers, 'hash $http_x_forwarded_for;') }}

  75. 

  76. 	{{ render_worker_upstream('stream_writer_typing_stream_workers_upstream', stream_writer_typing_stream_workers, '') }}

  77. 	{{ render_worker_upstream('stream_writer_to_device_stream_workers_upstream', stream_writer_to_device_stream_workers, '') }}

  78. 	{{ render_worker_upstream('stream_writer_account_data_stream_workers_upstream', stream_writer_account_data_stream_workers, '') }}

  79. 	{{ render_worker_upstream('stream_writer_receipts_stream_workers_upstream', stream_writer_receipts_stream_workers, '') }}

  80. 	{{ render_worker_upstream('stream_writer_presence_stream_workers_upstream', stream_writer_presence_stream_workers, '') }}

  81. 

  82. 	{{ render_worker_upstream('media_repository_workers_upstream', media_repository_workers, 'least_conn;') }}

  83. 

  84. 	{{ render_worker_upstream('user_dir_workers_upstream', user_dir_workers, '') }}

  85. {% endif %}

  86. 

  87. server {

  88. 	listen 8008;

  89. 	server_name {{ matrix_synapse_reverse_proxy_companion_hostname }};

  90. 

  91. 	server_tokens off;

  92. 	root /dev/null;

  93. 

  94. 	gzip on;

  95. 	gzip_types text/plain application/json;

  96. 

  97. 	{% if matrix_synapse_reverse_proxy_companion_synapse_workers_enabled %}

  98. 		# Client-server overrides -- These locations must go to the main Synapse process

  99. 		location ~ {{ matrix_synapse_reverse_proxy_companion_client_server_main_override_locations_regex }} {

  100. 			{# FIXME: This block was copied from the main Synapse fallback below.  It would be better to have it in one place and avoid duplication. #}

  101. 			{# Use the embedded DNS resolver in Docker containers to discover the service #}

  102. 			resolver {{ matrix_synapse_reverse_proxy_companion_http_level_resolver }} valid=5s;

  103. 			set $backend "{{ matrix_synapse_reverse_proxy_companion_client_api_addr }}";

  104. 			proxy_pass http://$backend;

  105. 

  106. 			proxy_set_header Host $host;

  107. 

  108. 			client_body_buffer_size 25M;

  109. 			client_max_body_size {{ matrix_synapse_reverse_proxy_companion_client_api_client_max_body_size_mb }}M;

  110. 			proxy_max_temp_file_size 0;

  111. 		}

  112. 

  113. 		# Client-server SSO overrides -- These locations must go to the main Synapse process

  114. 		location ~ {{ matrix_synapse_reverse_proxy_companion_client_server_sso_override_locations_regex }} {

  115. 			{# FIXME: This block was copied from the main Synapse fallback below.  It would be better to have it in one place and avoid duplication. #}

  116. 			{# Use the embedded DNS resolver in Docker containers to discover the service #}

  117. 			resolver {{ matrix_synapse_reverse_proxy_companion_http_level_resolver }} valid=5s;

  118. 			set $backend "{{ matrix_synapse_reverse_proxy_companion_client_api_addr }}";

  119. 			proxy_pass http://$backend;

  120. 

  121. 			proxy_set_header Host $host;

  122. 

  123. 			client_body_buffer_size 25M;

  124. 			client_max_body_size {{ matrix_synapse_reverse_proxy_companion_client_api_client_max_body_size_mb }}M;

  125. 			proxy_max_temp_file_size 0;

  126. 		}

  127. 

  128. 		{# Workers redirects BEGIN #}

  129. 

  130. 		{% if generic_workers | length > 0 %}

  131. 			# https://matrix-org.github.io/synapse/latest/workers.html#synapseappgeneric_worker

  132. 			{{ render_locations_to_upstream(matrix_synapse_reverse_proxy_companion_synapse_generic_worker_client_server_locations, 'generic_workers_upstream') }}

  133. 		{% endif %}

  134. 

  135. 		{% if stream_writer_typing_stream_workers | length > 0 %}

  136. 			# https://matrix-org.github.io/synapse/latest/workers.html#the-typing-stream

  137. 			{{ render_locations_to_upstream(matrix_synapse_reverse_proxy_companion_synapse_stream_writer_typing_stream_worker_client_server_locations, 'stream_writer_typing_stream_workers_upstream') }}

  138. 		{% endif %}

  139. 

  140. 		{% if stream_writer_to_device_stream_workers | length > 0 %}

  141. 			# https://matrix-org.github.io/synapse/latest/workers.html#the-to_device-stream

  142. 			{{ render_locations_to_upstream(matrix_synapse_reverse_proxy_companion_synapse_stream_writer_to_device_stream_worker_client_server_locations, 'stream_writer_to_device_stream_workers_upstream') }}

  143. 		{% endif %}

  144. 

  145. 		{% if stream_writer_account_data_stream_workers | length > 0 %}

  146. 			# https://matrix-org.github.io/synapse/latest/workers.html#the-account_data-stream

  147. 			{{ render_locations_to_upstream(matrix_synapse_reverse_proxy_companion_synapse_stream_writer_account_data_stream_worker_client_server_locations, 'stream_writer_account_data_stream_workers_upstream') }}

  148. 		{% endif %}

  149. 

  150. 		{% if stream_writer_receipts_stream_workers | length > 0 %}

  151. 			# https://matrix-org.github.io/synapse/latest/workers.html#the-receipts-stream

  152. 			{{ render_locations_to_upstream(matrix_synapse_reverse_proxy_companion_synapse_stream_writer_receipts_stream_worker_client_server_locations, 'stream_writer_receipts_stream_workers_upstream') }}

  153. 		{% endif %}

  154. 

  155. 		{% if stream_writer_presence_stream_workers | length > 0 %}

  156. 			# https://matrix-org.github.io/synapse/latest/workers.html#the-presence-stream

  157. 			{{ render_locations_to_upstream(matrix_synapse_reverse_proxy_companion_synapse_stream_writer_presence_stream_worker_client_server_locations, 'stream_writer_presence_stream_workers_upstream') }}

  158. 		{% endif %}

  159. 

  160. 		{% if room_workers | length > 0 %}

  161. 			# room workers

  162. 			# https://tcpipuk.github.io/synapse/deployment/workers.html

  163. 			# https://tcpipuk.github.io/synapse/deployment/nginx.html#locationsconf

  164. 			{{ render_locations_to_upstream(matrix_synapse_reverse_proxy_companion_synapse_room_worker_client_server_locations, 'room_workers_upstream') }}

  165. 		{% endif %}

  166. 

  167. 		{% if sync_workers | length > 0 %}

  168. 			# sync workers

  169. 			# https://tcpipuk.github.io/synapse/deployment/workers.html

  170. 			# https://tcpipuk.github.io/synapse/deployment/nginx.html#locationsconf

  171. 			{{ render_locations_to_upstream(matrix_synapse_reverse_proxy_companion_synapse_sync_worker_client_server_locations, 'sync_workers_upstream') }}

  172. 		{% endif %}

  173. 

  174. 		{% if client_reader_workers | length > 0 %}

  175. 			# client_reader workers

  176. 			# https://tcpipuk.github.io/synapse/deployment/workers.html

  177. 			# https://tcpipuk.github.io/synapse/deployment/nginx.html#locationsconf

  178. 			{{ render_locations_to_upstream(matrix_synapse_reverse_proxy_companion_synapse_client_reader_client_server_locations, 'client_reader_workers_upstream') }}

  179. 		{% endif %}

  180. 

  181. 		{% if media_repository_workers | length > 0 %}

  182. 			# https://matrix-org.github.io/synapse/latest/workers.html#synapseappmedia_repository

  183. 			{% for location in matrix_synapse_reverse_proxy_companion_synapse_media_repository_locations %}

  184. 			location ~ {{ location }} {

  185. 				proxy_pass http://media_repository_workers_upstream$request_uri;

  186. 				proxy_set_header Host $host;

  187. 

  188. 				client_body_buffer_size 25M;

  189. 				client_max_body_size {{ matrix_synapse_reverse_proxy_companion_client_api_client_max_body_size_mb }}M;

  190. 				proxy_max_temp_file_size 0;

  191. 

  192. 				{% if matrix_synapse_reverse_proxy_companion_synapse_cache_enabled %}

  193. 					proxy_buffering        on;

  194. 					proxy_cache            {{ matrix_synapse_reverse_proxy_companion_synapse_cache_keys_zone_name }};

  195. 					proxy_cache_valid      any {{ matrix_synapse_reverse_proxy_companion_synapse_cache_proxy_cache_valid_time }};

  196. 					proxy_force_ranges on;

  197. 					add_header X-Cache-Status $upstream_cache_status;

  198. 				{% endif %}

  199. 			}

  200. 			{% endfor %}

  201. 		{% endif %}

  202. 

  203. 		{% if user_dir_workers | length > 0 %}

  204. 			# https://matrix-org.github.io/synapse/latest/workers.html#updating-the-user-directory

  205. 			{{ render_locations_to_upstream(matrix_synapse_reverse_proxy_companion_synapse_user_dir_locations, 'user_dir_workers_upstream') }}

  206. 		{% endif %}

  207. 		{# Workers redirects END #}

  208. 	{% endif %}

  209. 

  210. 	{% for configuration_block in matrix_synapse_reverse_proxy_companion_synapse_client_api_additional_server_configuration_blocks %}

  211. 		{{- configuration_block }}

  212. 	{% endfor %}

  213. 

  214. 	{# Everything else just goes to the API server ##}

  215. 	location / {

  216. 		{# Use the embedded DNS resolver in Docker containers to discover the service #}

  217. 		resolver {{ matrix_synapse_reverse_proxy_companion_http_level_resolver }} valid=5s;

  218. 		set $backend "{{ matrix_synapse_reverse_proxy_companion_client_api_addr }}";

  219. 		proxy_pass http://$backend;

  220. 

  221. 		proxy_set_header Host $host;

  222. 

  223. 		client_body_buffer_size 25M;

  224. 		client_max_body_size {{ matrix_synapse_reverse_proxy_companion_client_api_client_max_body_size_mb }}M;

  225. 		proxy_max_temp_file_size 0;

  226. 	}

  227. }

  228. 

  229. {% if matrix_synapse_reverse_proxy_companion_federation_api_enabled %}

  230. server {

  231. 	listen 8048;

  232. 	server_name {{ matrix_synapse_reverse_proxy_companion_hostname }};

  233. 

  234. 	server_tokens off;

  235. 

  236. 	root /dev/null;

  237. 

  238. 	gzip on;

  239. 	gzip_types text/plain application/json;

  240. 

  241. 	{% if matrix_synapse_reverse_proxy_companion_synapse_workers_enabled %}

  242. 		# Federation overrides -- These locations must go to the main Synapse process

  243. 		location ~ {{ matrix_synapse_reverse_proxy_companion_federation_override_locations_regex }} {

  244. 			{# FIXME: This block was copied from the fallback location below.  It would be better to have it in one place and avoid duplication. #}

  245. 			{# Use the embedded DNS resolver in Docker containers to discover the service #}

  246. 			resolver {{ matrix_synapse_reverse_proxy_companion_http_level_resolver }} valid=5s;

  247. 			set $backend "{{ matrix_synapse_reverse_proxy_companion_federation_api_addr }}";

  248. 			proxy_pass http://$backend;

  249. 

  250. 			proxy_set_header Host $host;

  251. 

  252. 			client_body_buffer_size 25M;

  253. 			client_max_body_size {{ matrix_synapse_reverse_proxy_companion_federation_api_client_max_body_size_mb }}M;

  254. 			proxy_max_temp_file_size 0;

  255. 		}

  256. 

  257. 		{% if room_workers | length > 0 %}

  258. 			# https://tcpipuk.github.io/synapse/deployment/workers.html

  259. 			{{ render_locations_to_upstream(matrix_synapse_reverse_proxy_companion_synapse_room_worker_federation_locations, 'room_workers_upstream') }}

  260. 		{% endif %}

  261. 		{% if federation_reader_workers | length > 0 %}

  262. 			# https://tcpipuk.github.io/synapse/deployment/workers.html

  263. 			{{ render_locations_to_upstream(matrix_synapse_reverse_proxy_companion_synapse_federation_reader_federation_locations, 'federation_reader_workers_upstream') }}

  264. 		{% endif %}

  265. 		{% if generic_workers | length > 0 %}

  266. 			# https://matrix-org.github.io/synapse/latest/workers.html#synapseappgeneric_worker

  267. 			{{ render_locations_to_upstream(matrix_synapse_reverse_proxy_companion_synapse_generic_worker_federation_locations, 'generic_workers_upstream') }}

  268. 		{% endif %}

  269. 		{% if media_repository_workers | length > 0 %}

  270. 			# https://matrix-org.github.io/synapse/latest/workers.html#synapseappmedia_repository

  271. 			{% for location in matrix_synapse_reverse_proxy_companion_synapse_media_repository_locations %}

  272. 			location ~ {{ location }} {

  273. 				proxy_pass http://media_repository_workers_upstream$request_uri;

  274. 				proxy_set_header Host $host;

  275. 

  276. 				client_body_buffer_size 25M;

  277. 				client_max_body_size {{ matrix_synapse_reverse_proxy_companion_federation_api_client_max_body_size_mb }}M;

  278. 				proxy_max_temp_file_size 0;

  279. 

  280. 				{% if matrix_synapse_reverse_proxy_companion_synapse_cache_enabled %}

  281. 					proxy_buffering        on;

  282. 					proxy_cache            {{ matrix_synapse_reverse_proxy_companion_synapse_cache_keys_zone_name }};

  283. 					proxy_cache_valid      any  {{ matrix_synapse_reverse_proxy_companion_synapse_cache_proxy_cache_valid_time }};

  284. 					proxy_force_ranges on;

  285. 					add_header X-Cache-Status $upstream_cache_status;

  286. 				{% endif %}

  287. 			}

  288. 			{% endfor %}

  289. 		{% endif %}

  290. 	{% endif %}

  291. 

  292. 	{% for configuration_block in matrix_synapse_reverse_proxy_companion_synapse_federation_api_additional_server_configuration_blocks %}

  293. 		{{- configuration_block }}

  294. 	{% endfor %}

  295. 

  296. 	location / {

  297. 		{# Use the embedded DNS resolver in Docker containers to discover the service #}

  298. 		resolver {{ matrix_synapse_reverse_proxy_companion_http_level_resolver }} valid=5s;

  299. 		set $backend "{{ matrix_synapse_reverse_proxy_companion_federation_api_addr }}";

  300. 		proxy_pass http://$backend;

  301. 

  302. 		proxy_set_header Host $host;

  303. 

  304. 		client_body_buffer_size 25M;

  305. 		client_max_body_size {{ matrix_synapse_reverse_proxy_companion_federation_api_client_max_body_size_mb }}M;

  306. 		proxy_max_temp_file_size 0;

  307. 	}

  308. }

  309. {% endif %}