Matrix Docker Ansible eploy
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
 
 
 

382 regels
21 KiB

  1. # SOME DESCRIPTIVE TITLE.
  2. # Copyright (C) 2018-2024, Slavi Pantaleev, Aine Etke, MDAD community
  3. # members
  4. # This file is distributed under the same license as the
  5. # matrix-docker-ansible-deploy package.
  6. # FIRST AUTHOR <EMAIL@ADDRESS>, 2024.
  7. #
  8. #, fuzzy
  9. msgid ""
  10. msgstr ""
  11. "Project-Id-Version: matrix-docker-ansible-deploy \n"
  12. "Report-Msgid-Bugs-To: \n"
  13. "POT-Creation-Date: 2024-12-20 09:53+0200\n"
  14. "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
  15. "Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
  16. "Language: jp\n"
  17. "Language-Team: jp <LL@li.org>\n"
  18. "MIME-Version: 1.0\n"
  19. "Content-Type: text/plain; charset=utf-8\n"
  20. "Content-Transfer-Encoding: 8bit\n"
  21. "Generated-By: Babel 2.16.0\n"
  22. #: ../../../docs/configuring-playbook-bot-draupnir.md:1
  23. msgid "Setting up Draupnir (optional)"
  24. msgstr ""
  25. #: ../../../docs/configuring-playbook-bot-draupnir.md:3
  26. msgid "The playbook can install and configure the [Draupnir](https://github.com/the-draupnir-project/Draupnir) moderation bot for you."
  27. msgstr ""
  28. #: ../../../docs/configuring-playbook-bot-draupnir.md:5
  29. msgid "See the project's [documentation](https://github.com/the-draupnir-project/Draupnir/blob/main/README.md) to learn what it does and why it might be useful to you."
  30. msgstr ""
  31. #: ../../../docs/configuring-playbook-bot-draupnir.md:7
  32. msgid "This documentation page is about installing Draupnir in bot mode. As an alternative, you can run a multi-instance Draupnir deployment by installing [Draupnir in appservice mode](./configuring-playbook-appservice-draupnir-for-all.md) (called Draupnir-for-all) instead."
  33. msgstr ""
  34. #: ../../../docs/configuring-playbook-bot-draupnir.md:9
  35. msgid "If your migrating from Mjolnir skip to [this section](#migrating-from-mjolnir-only-required-if-migrating)."
  36. msgstr ""
  37. #: ../../../docs/configuring-playbook-bot-draupnir.md:11
  38. msgid "Prerequisites"
  39. msgstr ""
  40. #: ../../../docs/configuring-playbook-bot-draupnir.md:13
  41. msgid "Register the bot account"
  42. msgstr ""
  43. #: ../../../docs/configuring-playbook-bot-draupnir.md:15
  44. msgid "The playbook does not automatically create users for you. You **need to register the bot user manually** before setting up the bot."
  45. msgstr ""
  46. #: ../../../docs/configuring-playbook-bot-draupnir.md:17
  47. msgid "Choose a strong password for the bot. You can generate a good password with a command like this: `pwgen -s 64 1`."
  48. msgstr ""
  49. #: ../../../docs/configuring-playbook-bot-draupnir.md:19
  50. msgid "You can use the playbook to [register a new user](registering-users.md):"
  51. msgstr ""
  52. #: ../../../docs/configuring-playbook-bot-draupnir.md:25
  53. msgid "If you would like Draupnir to be able to deactivate users, move aliases, shutdown rooms, show abuse reports (see [below](#abuse-reports)), etc then it must be a server admin so you need to change `admin=no` to `admin=yes` in the command above."
  54. msgstr ""
  55. #: ../../../docs/configuring-playbook-bot-draupnir.md:27
  56. msgid "Get an access token"
  57. msgstr ""
  58. #: ../../../docs/configuring-playbook-bot-draupnir.md:29
  59. msgid "The bot requires an access token to be able to connect to your homeserver. Refer to the documentation on [how to obtain an access token](obtaining-access-tokens.md)."
  60. msgstr ""
  61. #: ../../../docs/configuring-playbook-bot-draupnir.md:31
  62. msgid "Make sure the account is free from rate limiting"
  63. msgstr ""
  64. #: ../../../docs/configuring-playbook-bot-draupnir.md:33
  65. msgid "If your homeserver's implementation is Synapse, you will need to prevent it from rate limiting the bot's account. **This is a required step. If you do not configure it, Draupnir will crash.**"
  66. msgstr ""
  67. #: ../../../docs/configuring-playbook-bot-draupnir.md:35
  68. msgid "This can be done using Synapse's [Admin APIs](https://element-hq.github.io/synapse/latest/admin_api/user_admin_api.html#override-ratelimiting-for-users). They can be accessed both externally and internally."
  69. msgstr ""
  70. #: ../../../docs/configuring-playbook-bot-draupnir.md:37
  71. msgid "To expose the APIs publicly, add the following configuration to your `inventory/host_vars/matrix.example.com/vars.yml` file."
  72. msgstr ""
  73. #: ../../../docs/configuring-playbook-bot-draupnir.md:43
  74. msgid "The APIs can also be accessed via [Synapse Admin](https://github.com/etkecc/synapse-admin), a web UI tool you can use to administrate users, rooms, media, etc. on your Matrix server. The playbook can install and configure Synapse Admin for you. For details about it, see [this page](configuring-playbook-synapse-admin.md)."
  75. msgstr ""
  76. #: ../../../docs/configuring-playbook-bot-draupnir.md:45
  77. msgid "**Note**: access to the APIs is restricted with a valid access token, so exposing them publicly should not be a real security concern. Still, doing so is not recommended for additional security. See [official Synapse reverse-proxying recommendations](https://element-hq.github.io/synapse/latest/reverse_proxy.html#synapse-administration-endpoints)."
  78. msgstr ""
  79. #: ../../../docs/configuring-playbook-bot-draupnir.md:47
  80. msgid "To discharge rate limiting, run the following command on systems that ship curl (note that it does not work on outdated Windows 10). Even if the APIs are not exposed to the internet, you should still be able to run the command on the homeserver locally. Before running it, make sure to replace `@bot.draupnir:example.com` with the MXID of your Draupnir:"
  81. msgstr ""
  82. #: ../../../docs/configuring-playbook-bot-draupnir.md:53
  83. msgid "You can obtain an access token for a homeserver admin account in the same way as you can do so for Draupnir itself. If you have made Draupnir an admin, you can just use the Draupnir token."
  84. msgstr ""
  85. #: ../../../docs/configuring-playbook-bot-draupnir.md:55
  86. msgid "Create a management room"
  87. msgstr ""
  88. #: ../../../docs/configuring-playbook-bot-draupnir.md:57
  89. msgid "Using your own account, create a new invite only room that you will use to manage the bot. This is the room where you will see the status of the bot and where you will send commands to the bot, such as the command to ban a user from another room. Anyone in this room can control the bot so it is important that you only invite trusted users to this room."
  90. msgstr ""
  91. #: ../../../docs/configuring-playbook-bot-draupnir.md:59
  92. msgid "If you make the management room encrypted (E2EE), then you MUST enable and use Pantalaimon (see [below](#configuration-with-e2ee-support))."
  93. msgstr ""
  94. #: ../../../docs/configuring-playbook-bot-draupnir.md:61
  95. msgid "Once you have created the room you need to copy the room ID so you can tell the bot to use that room. In Element Web you can do this by going to the room's settings, clicking Advanced, and then copying the internal room ID. The room ID will look something like `!qporfwt:example.com`."
  96. msgstr ""
  97. #: ../../../docs/configuring-playbook-bot-draupnir.md:63
  98. msgid "Finally invite the `@bot.draupnir:example.com` account you created earlier into the room."
  99. msgstr ""
  100. #: ../../../docs/configuring-playbook-bot-draupnir.md:65
  101. msgid "Adjusting the playbook configuration"
  102. msgstr ""
  103. #: ../../../docs/configuring-playbook-bot-draupnir.md:67
  104. msgid "Add the following configuration to your `inventory/host_vars/matrix.example.com/vars.yml` file. Make sure to replace `MANAGEMENT_ROOM_ID_HERE`."
  105. msgstr ""
  106. #: ../../../docs/configuring-playbook-bot-draupnir.md:76
  107. msgid "End-to-End Encryption support"
  108. msgstr ""
  109. #: ../../../docs/configuring-playbook-bot-draupnir.md:78
  110. msgid "Decide whether you want Draupnir to be capable of operating in end-to-end encrypted (E2EE) rooms. This includes the management room and the moderated rooms."
  111. msgstr ""
  112. #: ../../../docs/configuring-playbook-bot-draupnir.md:80
  113. msgid "To support E2EE, Draupnir needs to [use Pantalaimon](configuring-playbook-pantalaimon.md)."
  114. msgstr ""
  115. #: ../../../docs/configuring-playbook-bot-draupnir.md:82
  116. msgid "Configuration with E2EE support"
  117. msgstr ""
  118. #: ../../../docs/configuring-playbook-bot-draupnir.md:84
  119. msgid "When using Pantalaimon, Draupnir will log in to its bot account itself through Pantalaimon, so configure its username and password."
  120. msgstr ""
  121. #: ../../../docs/configuring-playbook-bot-draupnir.md:86
  122. msgid "Add the following configuration to your `inventory/host_vars/matrix.example.com/vars.yml` file (adapt to your needs):"
  123. msgstr ""
  124. #: ../../../docs/configuring-playbook-bot-draupnir.md:100
  125. msgid "The playbook's `group_vars` will configure other required settings. If using this role separately without the playbook, you also need to configure the two URLs that Draupnir uses to reach the homeserver, one through Pantalaimon and one \"raw\". This example is taken from the playbook's `group_vars`:"
  126. msgstr ""
  127. #: ../../../docs/configuring-playbook-bot-draupnir.md:112
  128. msgid "Configuration without E2EE support"
  129. msgstr ""
  130. #: ../../../docs/configuring-playbook-bot-draupnir.md:114
  131. msgid "When NOT using Pantalaimon, Draupnir does not log in by itself and you must give it an access token for its bot account."
  132. msgstr ""
  133. #: ../../../docs/configuring-playbook-bot-draupnir.md:116
  134. msgid "Add the following configuration to your `inventory/host_vars/matrix.example.com/vars.yml` file. Make sure to replace `ACCESS_TOKEN_HERE` with the one created [above](#get-an-access-token)."
  135. msgstr ""
  136. #: ../../../docs/configuring-playbook-bot-draupnir.md:122
  137. msgid "Abuse Reports"
  138. msgstr ""
  139. #: ../../../docs/configuring-playbook-bot-draupnir.md:124
  140. msgid "Draupnir supports two methods to receive reports in the management room."
  141. msgstr ""
  142. #: ../../../docs/configuring-playbook-bot-draupnir.md:126
  143. msgid "The first method intercepts the report API endpoint of the client-server API, which requires integration with the reverse proxy in front of the homeserver. If you are using traefik, this playbook can set this up for you:"
  144. msgstr ""
  145. #: ../../../docs/configuring-playbook-bot-draupnir.md:132
  146. msgid "The other method polls an Synapse Admin API endpoint, hence it is available only if using Synapse and if the Draupnir user is an admin (see [above](#register-the-bot-account)). To enable it, set `pollReports: true` on `vars.yml` file as below."
  147. msgstr ""
  148. #: ../../../docs/configuring-playbook-bot-draupnir.md:134
  149. msgid "Extending the configuration"
  150. msgstr ""
  151. #: ../../../docs/configuring-playbook-bot-draupnir.md:136
  152. msgid "You can configure additional options by adding the `matrix_bot_draupnir_configuration_extension_yaml` variable."
  153. msgstr ""
  154. #: ../../../docs/configuring-playbook-bot-draupnir.md:138
  155. msgid "For example, to change Draupnir's `pollReports` option to `true`, add the following configuration to your `inventory/host_vars/matrix.example.com/vars.yml` file:"
  156. msgstr ""
  157. #: ../../../docs/configuring-playbook-bot-draupnir.md:152
  158. msgid "Migrating from Mjolnir (Only required if migrating)"
  159. msgstr ""
  160. #: ../../../docs/configuring-playbook-bot-draupnir.md:154
  161. msgid "Replace your `matrix_bot_mjolnir` config with `matrix_bot_draupnir` config. Also disable Mjolnir if you're doing migration."
  162. msgstr ""
  163. #: ../../../docs/configuring-playbook-bot-draupnir.md:156
  164. msgid "That is all you need to do due to that Draupnir can complete migration on its own."
  165. msgstr ""
  166. #: ../../../docs/configuring-playbook-bot-draupnir.md:158
  167. msgid "Installing"
  168. msgstr ""
  169. #: ../../../docs/configuring-playbook-bot-draupnir.md:160
  170. msgid "After configuring the playbook, run it with [playbook tags](playbook-tags.md) as below:"
  171. msgstr ""
  172. #: ../../../docs/configuring-playbook-bot-draupnir.md:167
  173. msgid "**Notes**:"
  174. msgstr ""
  175. #: ../../../docs/configuring-playbook-bot-draupnir.md:169
  176. msgid "The `ensure-matrix-users-created` playbook tag makes the playbook automatically create the bot's user account."
  177. msgstr ""
  178. #: ../../../docs/configuring-playbook-bot-draupnir.md:171
  179. msgid "The shortcut commands with the [`just` program](just.md) are also available: `just install-all` or `just setup-all`"
  180. msgstr ""
  181. #: ../../../docs/configuring-playbook-bot-draupnir.md:173
  182. msgid "`just install-all` is useful for maintaining your setup quickly ([2x-5x faster](../CHANGELOG.md#2x-5x-performance-improvements-in-playbook-runtime) than `just setup-all`) when its components remain unchanged. If you adjust your `vars.yml` to remove other components, you'd need to run `just setup-all`, or these components will still remain installed."
  183. msgstr ""
  184. #: ../../../docs/configuring-playbook-bot-draupnir.md:175
  185. msgid "If you change the Pantalaimon's password (`matrix_bot_draupnir_pantalaimon_password` in your `vars.yml` file) subsequently, its credentials on the homeserver won't be updated automatically. If you'd like to change the password, use a tool like [synapse-admin](configuring-playbook-synapse-admin.md) to change it, and then update `matrix_bot_draupnir_pantalaimon_password` to let Pantalaimon know its new password."
  186. msgstr ""
  187. #: ../../../docs/configuring-playbook-bot-draupnir.md:177
  188. msgid "Usage"
  189. msgstr ""
  190. #: ../../../docs/configuring-playbook-bot-draupnir.md:179
  191. msgid "You can refer to the upstream [documentation](https://the-draupnir-project.github.io/draupnir-documentation/) for additional ways to use and configure Draupnir and for a more detailed usage guide."
  192. msgstr ""
  193. #: ../../../docs/configuring-playbook-bot-draupnir.md:181
  194. msgid "Below is a **non-exhaustive quick-start guide** for the impatient."
  195. msgstr ""
  196. #: ../../../docs/configuring-playbook-bot-draupnir.md:183
  197. msgid "Making Draupnir join and protect a room"
  198. msgstr ""
  199. #: ../../../docs/configuring-playbook-bot-draupnir.md:185
  200. msgid "Draupnir can be told to self-join public rooms, but it's better to follow this flow which works well for all kinds of rooms:"
  201. msgstr ""
  202. #: ../../../docs/configuring-playbook-bot-draupnir.md:187
  203. msgid "Invite the bot to the room manually ([inviting Draupnir to rooms](https://the-draupnir-project.github.io/draupnir-documentation/moderator/managing-protected-rooms#inviting-draupnir-to-rooms)). Before joining, the bot *may* ask for confirmation in the Management Room"
  204. msgstr ""
  205. #: ../../../docs/configuring-playbook-bot-draupnir.md:189
  206. msgid "[Give the bot permissions to do its job](#giving-draupnir-permissions-to-do-its-job)"
  207. msgstr ""
  208. #: ../../../docs/configuring-playbook-bot-draupnir.md:191
  209. msgid "Tell it to protect the room (using the [rooms command](https://the-draupnir-project.github.io/draupnir-documentation/moderator/managing-protected-rooms#using-the-draupnir-rooms-command)) by sending the following command to the Management Room: `!draupnir rooms add !qporfwt:example.com`"
  210. msgstr ""
  211. #: ../../../docs/configuring-playbook-bot-draupnir.md:193
  212. msgid "To have Draupnir provide useful room protection, you need do to a bit more work (at least the first time around). You may wish to [Subscribe to a public policy list](#subscribing-to-a-public-policy-list), [Create your own own policy and rules](#creating-your-own-policy-lists-and-rules) and [Enabling built-in protections](#enabling-built-in-protections)."
  213. msgstr ""
  214. #: ../../../docs/configuring-playbook-bot-draupnir.md:195
  215. msgid "Giving Draupnir permissions to do its job"
  216. msgstr ""
  217. #: ../../../docs/configuring-playbook-bot-draupnir.md:197
  218. msgid "For Draupnir to do its job, you need to [give it permissions](https://the-draupnir-project.github.io/draupnir-documentation/moderator/managing-protected-rooms#giving-draupnir-permissions) in rooms it's protecting. This involves **giving it an Administrator power level**."
  219. msgstr ""
  220. #: ../../../docs/configuring-playbook-bot-draupnir.md:199
  221. msgid "**We recommend setting this power level as soon as the bot joins your room** (and before you create new rules), so that it can apply rules as soon as they are available. If the bot is under-privileged, it may fail to apply protections and may not retry for a while (or until your restart it)."
  222. msgstr ""
  223. #: ../../../docs/configuring-playbook-bot-draupnir.md:201
  224. msgid "Subscribing to a public policy list"
  225. msgstr ""
  226. #: ../../../docs/configuring-playbook-bot-draupnir.md:203
  227. msgid "We recommend **subscribing to a public [policy list](https://the-draupnir-project.github.io/draupnir-documentation/concepts/policy-lists)** using the [watch command](https://the-draupnir-project.github.io/draupnir-documentation/moderator/managing-policy-lists#using-draupnirs-watch-command-to-subscribe-to-policy-rooms)."
  228. msgstr ""
  229. #: ../../../docs/configuring-playbook-bot-draupnir.md:205
  230. msgid "Polcy lists are maintained in Matrix rooms. A popular policy list is maintained in the public `#community-moderation-effort-bl:neko.dev` room."
  231. msgstr ""
  232. #: ../../../docs/configuring-playbook-bot-draupnir.md:207
  233. msgid "You can tell Draupnir to subscribe to it by sending the following command to the Management Room: `!draupnir watch #community-moderation-effort-bl:neko.dev`"
  234. msgstr ""
  235. #: ../../../docs/configuring-playbook-bot-draupnir.md:209
  236. msgid "Creating your own policy lists and rules"
  237. msgstr ""
  238. #: ../../../docs/configuring-playbook-bot-draupnir.md:211
  239. msgid "We also recommend **creating your own policy lists** with the [list create](https://the-draupnir-project.github.io/draupnir-documentation/moderator/managing-policy-lists#using-draupnirs-list-create-command-to-create-a-policy-room) command."
  240. msgstr ""
  241. #: ../../../docs/configuring-playbook-bot-draupnir.md:213
  242. msgid "You can do so by sending the following command to the Management Room: `!draupnir list create my-bans my-bans-bl`. This will create a policy list having a name (shortcode) of `my-bans` and stored in a public `#my-bans-bl:example.com` room on your server. As soon as you run this command, the bot will invite you to the policy list room."
  243. msgstr ""
  244. #: ../../../docs/configuring-playbook-bot-draupnir.md:215
  245. msgid "A policy list does nothing by itself, so the next step is **adding some rules to your policy list**. Policies target a so-called `entity` (one of: `user`, `room` or `server`). These entities are mentioned on the [policy lists](https://the-draupnir-project.github.io/draupnir-documentation/concepts/policy-lists) documentation page and in the Matrix Spec [here](https://spec.matrix.org/v1.11/client-server-api/#mban-recommendation)."
  246. msgstr ""
  247. #: ../../../docs/configuring-playbook-bot-draupnir.md:217
  248. msgid "The simplest and most useful entity to target is `user`. Below are a few examples using the [ban command](https://the-draupnir-project.github.io/draupnir-documentation/moderator/managing-users#the-ban-command) and targeting users."
  249. msgstr ""
  250. #: ../../../docs/configuring-playbook-bot-draupnir.md:219
  251. msgid "To create rules, you run commands in the Management Room (**not** in the policy list room)."
  252. msgstr ""
  253. #: ../../../docs/configuring-playbook-bot-draupnir.md:221
  254. msgid "(ban a single user on a given homeserver): `!draupnir ban @charles:example.com my-bans Rude to others`"
  255. msgstr ""
  256. #: ../../../docs/configuring-playbook-bot-draupnir.md:222
  257. msgid "(ban all users on a given homeserver by using a [wildcard](https://the-draupnir-project.github.io/draupnir-documentation/moderator/managing-users#wildcards)): `!draupnir ban @*:example.org my-bans Spam server - all users are fake`"
  258. msgstr ""
  259. #: ../../../docs/configuring-playbook-bot-draupnir.md:224
  260. msgid "As a result of running these commands, you may observe:"
  261. msgstr ""
  262. #: ../../../docs/configuring-playbook-bot-draupnir.md:226
  263. msgid "Draupnir creating `m.policy.rule.user` state events in the `#my-bans-bl:example.com` room on your server"
  264. msgstr ""
  265. #: ../../../docs/configuring-playbook-bot-draupnir.md:227
  266. msgid "applying these rules against all rooms that Draupnir is an Administrator in"
  267. msgstr ""
  268. #: ../../../docs/configuring-playbook-bot-draupnir.md:229
  269. msgid "You can undo bans with the [unban command](https://the-draupnir-project.github.io/draupnir-documentation/moderator/managing-users#the-unban-command)."
  270. msgstr ""
  271. #: ../../../docs/configuring-playbook-bot-draupnir.md:231
  272. msgid "Enabling built-in protections"
  273. msgstr ""
  274. #: ../../../docs/configuring-playbook-bot-draupnir.md:233
  275. msgid "You can also **turn on various built-in [protections](https://the-draupnir-project.github.io/draupnir-documentation/protections)** like `JoinWaveShortCircuit` (\"If X amount of users join in Y time, set the room to invite-only\")."
  276. msgstr ""
  277. #: ../../../docs/configuring-playbook-bot-draupnir.md:235
  278. msgid "To **see which protections are available and which are enabled**, send a `!draupnir protections` command to the Management Room."
  279. msgstr ""
  280. #: ../../../docs/configuring-playbook-bot-draupnir.md:237
  281. msgid "To **see the configuration options for a given protection**, send a `!draupnir config get PROTECTION_NAME` (e.g. `!draupnir config get JoinWaveShortCircuit`)."
  282. msgstr ""
  283. #: ../../../docs/configuring-playbook-bot-draupnir.md:239
  284. msgid "To **set a specific option for a given protection**, send a command like this: `!draupnir config set PROTECTION_NAME.OPTION VALUE` (e.g. `!draupnir config set JoinWaveShortCircuit.timescaleMinutes 30`)."
  285. msgstr ""
  286. #: ../../../docs/configuring-playbook-bot-draupnir.md:241
  287. msgid "To **enable a given protection**, send a command like this: `!draupnir enable PROTECTION_NAME` (e.g. `!draupnir enable JoinWaveShortCircuit`)."
  288. msgstr ""
  289. #: ../../../docs/configuring-playbook-bot-draupnir.md:243
  290. msgid "To **disable a given protection**, send a command like this: `!draupnir disable PROTECTION_NAME` (e.g. `!draupnir disable JoinWaveShortCircuit`)."
  291. msgstr ""