overmind
/
matrix-docker-ansible-deploy
peilaus alkaen https://github.com/spantaleev/matrix-docker-ansible-deploy
1
0
Fork 0
Koodi Ongelmat 0 Julkaisut 0 Wiki Toiminta
Matrix Docker Ansible eploy
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
10672 Commitit
13 Branchit
841 MiB
 
 
Puu: bab0f8639c
Branchit Tagit
${ item.name }
Create branch ${ searchTerm }
from 'bab0f8639c'
${ noResults }
matrix-docker-ansible-deploy/i18n/translation-templates/docs/configuring-playbook-ma1sd.pot

230 rivejä
12 KiB
Raaka Blame Historia 

  1. # SOME DESCRIPTIVE TITLE.

  2. # Copyright (C) 2018-2025, Slavi Pantaleev, Aine Etke, MDAD community members

  3. # This file is distributed under the same license as the matrix-docker-ansible-deploy package.

  4. # FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.

  5. #

  6. #, fuzzy

  7. msgid ""

  8. msgstr ""

  9. "Project-Id-Version: matrix-docker-ansible-deploy \n"

  10. "Report-Msgid-Bugs-To: \n"

  11. "POT-Creation-Date: 2025-11-06 23:09+0900\n"

  12. "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"

  13. "Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"

  14. "Language-Team: LANGUAGE <LL@li.org>\n"

  15. "MIME-Version: 1.0\n"

  16. "Content-Type: text/plain; charset=UTF-8\n"

  17. "Content-Transfer-Encoding: 8bit\n"

  18. 

  19. #: ../../../docs/configuring-playbook-ma1sd.md:12

  20. msgid "Setting up ma1sd Identity Server (optional)"

  21. msgstr ""

  22. 

  23. #: ../../../docs/configuring-playbook-ma1sd.md:14

  24. msgid "[!WARNING] Since ma1sd has been unmaintained for years (the latest commit and release being from 2021) and the future of identity server's role in the Matrix specification is uncertain, **we recommend not bothering with installing it unless it's the only way you can do what you need to do**."

  25. msgstr ""

  26. 

  27. #: ../../../docs/configuring-playbook-ma1sd.md:17

  28. msgid "Please note that certain things can be achieved with other components. For example, if you wish to implement LDAP integration, you might as well check out [the LDAP provider module for Synapse](./configuring-playbook-ldap-auth.md) instead."

  29. msgstr ""

  30. 

  31. #: ../../../docs/configuring-playbook-ma1sd.md:19

  32. msgid "The playbook can configure the [ma1sd](https://github.com/ma1uta/ma1sd) Identity Server for you. It is a fork of [mxisd](https://github.com/kamax-io/mxisd) which was pronounced end of life 2019-06-21."

  33. msgstr ""

  34. 

  35. #: ../../../docs/configuring-playbook-ma1sd.md:21

  36. msgid "ma1sd is used for 3PIDs (3rd party identifiers like E-mail and phone numbers) and some [enhanced features](https://github.com/ma1uta/ma1sd/#features). It is private by default, potentially at the expense of user discoverability."

  37. msgstr ""

  38. 

  39. #: ../../../docs/configuring-playbook-ma1sd.md:23

  40. msgid "See the project's [documentation](https://github.com/ma1uta/ma1sd/blob/master/README.md) to learn what it does and why it might be useful to you."

  41. msgstr ""

  42. 

  43. #: ../../../docs/configuring-playbook-ma1sd.md:25

  44. msgid "Prerequisites"

  45. msgstr ""

  46. 

  47. #: ../../../docs/configuring-playbook-ma1sd.md:27

  48. msgid "Open Matrix Federation port"

  49. msgstr ""

  50. 

  51. #: ../../../docs/configuring-playbook-ma1sd.md:29

  52. msgid "Enabling the ma1sd service will automatically reconfigure your Synapse homeserver to expose the `openid` API endpoints on the Matrix Federation port (usually `8448`), even if [federation](configuring-playbook-federation.md) is disabled. If you enable the component, make sure that the port is accessible."

  53. msgstr ""

  54. 

  55. #: ../../../docs/configuring-playbook-ma1sd.md:31

  56. msgid "Adjusting DNS records"

  57. msgstr ""

  58. 

  59. #: ../../../docs/configuring-playbook-ma1sd.md:33

  60. msgid "To make the ma1sd Identity Server enable its federation features, set up a SRV record that looks like this:"

  61. msgstr ""

  62. 

  63. #: ../../../docs/configuring-playbook-ma1sd.md:35

  64. msgid "Name: `_matrix-identity._tcp` (use this text as-is)"

  65. msgstr ""

  66. 

  67. #: ../../../docs/configuring-playbook-ma1sd.md:36

  68. msgid "Content: `10 0 443 matrix.example.com` (replace `example.com` with your own)"

  69. msgstr ""

  70. 

  71. #: ../../../docs/configuring-playbook-ma1sd.md:38

  72. msgid "See [ma1sd's documentation](https://github.com/ma1uta/ma1sd/wiki/mxisd-and-your-privacy#choices-are-never-easy) for information on the privacy implications of setting up this SRV record."

  73. msgstr ""

  74. 

  75. #: ../../../docs/configuring-playbook-ma1sd.md:40

  76. msgid "When setting up a SRV record, if you are asked for a service and protocol instead of a hostname split the host value from the table where the period is. For example use service as `_matrix-identity` and protocol as `_tcp`."

  77. msgstr ""

  78. 

  79. #: ../../../docs/configuring-playbook-ma1sd.md:42

  80. msgid "**Note**: This `_matrix-identity._tcp` SRV record for the identity server is different from the `_matrix._tcp` that can be used for Synapse delegation. See [howto-server-delegation.md](howto-server-delegation.md) for more information about delegation."

  81. msgstr ""

  82. 

  83. #: ../../../docs/configuring-playbook-ma1sd.md:44

  84. msgid "Adjusting the playbook configuration"

  85. msgstr ""

  86. 

  87. #: ../../../docs/configuring-playbook-ma1sd.md:46

  88. msgid "To enable ma1sd, add the following configuration to your `inventory/host_vars/matrix.example.com/vars.yml` file:"

  89. msgstr ""

  90. 

  91. #: ../../../docs/configuring-playbook-ma1sd.md:52

  92. msgid "Matrix.org lookup forwarding"

  93. msgstr ""

  94. 

  95. #: ../../../docs/configuring-playbook-ma1sd.md:54

  96. msgid "To ensure maximum discovery, you can make your identity server also forward lookups to the central matrix.org Identity server (at the cost of potentially leaking all your contacts information)."

  97. msgstr ""

  98. 

  99. #: ../../../docs/configuring-playbook-ma1sd.md:56

  100. msgid "Enabling this is discouraged and you'd better [learn more](https://github.com/ma1uta/ma1sd/blob/master/docs/features/identity.md#lookups) before proceeding."

  101. msgstr ""

  102. 

  103. #: ../../../docs/configuring-playbook-ma1sd.md:58

  104. msgid "To enable matrix.org forwarding, add the following configuration to your `vars.yml` file:"

  105. msgstr ""

  106. 

  107. #: ../../../docs/configuring-playbook-ma1sd.md:64

  108. msgid "Extending the configuration"

  109. msgstr ""

  110. 

  111. #: ../../../docs/configuring-playbook-ma1sd.md:66

  112. msgid "There are some additional things you may wish to configure about the component."

  113. msgstr ""

  114. 

  115. #: ../../../docs/configuring-playbook-ma1sd.md:68

  116. msgid "Take a look at:"

  117. msgstr ""

  118. 

  119. #: ../../../docs/configuring-playbook-ma1sd.md:70

  120. msgid "`roles/custom/matrix-ma1sd/defaults/main.yml` for some variables that you can customize via your `vars.yml` file. You can override settings (even those that don't have dedicated playbook variables) using the `matrix_ma1sd_configuration_extension_yaml` variable"

  121. msgstr ""

  122. 

  123. #: ../../../docs/configuring-playbook-ma1sd.md:72

  124. msgid "You can refer to the [ma1sd website](https://github.com/ma1uta/ma1sd) for more details and configuration options."

  125. msgstr ""

  126. 

  127. #: ../../../docs/configuring-playbook-ma1sd.md:74

  128. msgid "Customizing email templates"

  129. msgstr ""

  130. 

  131. #: ../../../docs/configuring-playbook-ma1sd.md:76

  132. msgid "If you'd like to change the default email templates used by ma1sd, take a look at the `matrix_ma1sd_threepid_medium_email_custom_` variables (in the `roles/custom/matrix-ma1sd/defaults/main.yml` file."

  133. msgstr ""

  134. 

  135. #: ../../../docs/configuring-playbook-ma1sd.md:78

  136. msgid "ma1sd-controlled Registration"

  137. msgstr ""

  138. 

  139. #: ../../../docs/configuring-playbook-ma1sd.md:80

  140. msgid "To use the [Registration](https://github.com/ma1uta/ma1sd/blob/master/docs/features/registration.md) feature of ma1sd, you can make use of the following variables:"

  141. msgstr ""

  142. 

  143. #: ../../../docs/configuring-playbook-ma1sd.md:82

  144. msgid "`matrix_synapse_enable_registration` — to enable user-initiated registration in Synapse"

  145. msgstr ""

  146. 

  147. #: ../../../docs/configuring-playbook-ma1sd.md:84

  148. msgid "`matrix_synapse_enable_registration_captcha` — to validate registering users using reCAPTCHA, as described in the [enabling reCAPTCHA](configuring-captcha.md) documentation."

  149. msgstr ""

  150. 

  151. #: ../../../docs/configuring-playbook-ma1sd.md:86

  152. msgid "`matrix_synapse_registrations_require_3pid` — a list of 3pid types (among `'email'`, `'msisdn'`) required by the Synapse server for registering"

  153. msgstr ""

  154. 

  155. #: ../../../docs/configuring-playbook-ma1sd.md:88

  156. msgid "variables prefixed with `matrix_ma1sd_container_labels_` (e.g. `matrix_ma1sd_container_labels_matrix_client_3pid_registration_enabled`) — to configure the Traefik reverse-proxy to capture and send registration requests to ma1sd (instead of Synapse), so it can apply its additional functionality"

  157. msgstr ""

  158. 

  159. #: ../../../docs/configuring-playbook-ma1sd.md:90

  160. msgid "`matrix_ma1sd_configuration_extension_yaml` — to configure ma1sd as required. See the [Registration feature's docs](https://github.com/ma1uta/ma1sd/blob/master/docs/features/registration.md) for inspiration. Also see the [Additional features](#additional-features) section below to learn more about how to use `matrix_ma1sd_configuration_extension_yaml`."

  161. msgstr ""

  162. 

  163. #: ../../../docs/configuring-playbook-ma1sd.md:92

  164. msgid "**Note**: For this to work, either the homeserver needs to [federate](configuring-playbook-federation.md) or the `openid` APIs need to exposed on the federation port. When federation is disabled and ma1sd is enabled, we automatically expose the `openid` APIs (only!) on the federation port. Make sure the federation port (usually `https://matrix.example.com:8448`) is whitelisted in your firewall (even if you don't actually use/need federation)."

  165. msgstr ""

  166. 

  167. #: ../../../docs/configuring-playbook-ma1sd.md:94

  168. msgid "Authentication"

  169. msgstr ""

  170. 

  171. #: ../../../docs/configuring-playbook-ma1sd.md:96

  172. msgid "[Authentication](https://github.com/ma1uta/ma1sd/blob/master/docs/features/authentication.md) provides the possibility to use your own [Identity Stores](https://github.com/ma1uta/ma1sd/blob/master/docs/stores/README.md) (for example LDAP) to authenticate users on your Homeserver."

  173. msgstr ""

  174. 

  175. #: ../../../docs/configuring-playbook-ma1sd.md:98

  176. msgid "To enable authentication against an LDAP server, add the following configuration to your `vars.yml` file:"

  177. msgstr ""

  178. 

  179. #: ../../../docs/configuring-playbook-ma1sd.md:118

  180. msgid "Example: SMS verification"

  181. msgstr ""

  182. 

  183. #: ../../../docs/configuring-playbook-ma1sd.md:120

  184. msgid "If your use case requires mobile verification, it is quite simple to integrate ma1sd with [Twilio](https://www.twilio.com/), an online telephony services gateway. Their prices are reasonable for low-volume projects and integration can be done with the following configuration:"

  185. msgstr ""

  186. 

  187. #: ../../../docs/configuring-playbook-ma1sd.md:134

  188. msgid "Example: Open Registration for every Domain"

  189. msgstr ""

  190. 

  191. #: ../../../docs/configuring-playbook-ma1sd.md:136

  192. msgid "If you want to open registration for any domain, you have to setup the allowed domains with ma1sd's `blacklist` and `whitelist`. The default behavior when neither the `blacklist`, nor the `whitelist` match, is to allow registration. Beware: you can't block toplevel domains (aka `.xy`) because the internal architecture of ma1sd doesn't allow that."

  193. msgstr ""

  194. 

  195. #: ../../../docs/configuring-playbook-ma1sd.md:150

  196. msgid "Installing"

  197. msgstr ""

  198. 

  199. #: ../../../docs/configuring-playbook-ma1sd.md:152

  200. msgid "After configuring the playbook, run it with [playbook tags](playbook-tags.md) as below:"

  201. msgstr ""

  202. 

  203. #: ../../../docs/configuring-playbook-ma1sd.md:159

  204. msgid "The shortcut commands with the [`just` program](just.md) are also available: `just install-all` or `just setup-all`"

  205. msgstr ""

  206. 

  207. #: ../../../docs/configuring-playbook-ma1sd.md:161

  208. msgid "`just install-all` is useful for maintaining your setup quickly ([2x-5x faster](../CHANGELOG.md#2x-5x-performance-improvements-in-playbook-runtime) than `just setup-all`) when its components remain unchanged. If you adjust your `vars.yml` to remove other components, you'd need to run `just setup-all`, or these components will still remain installed. Note these shortcuts run the `ensure-matrix-users-created` tag too."

  209. msgstr ""

  210. 

  211. #: ../../../docs/configuring-playbook-ma1sd.md:163

  212. msgid "Troubleshooting"

  213. msgstr ""

  214. 

  215. #: ../../../docs/configuring-playbook-ma1sd.md:165

  216. msgid "If email address validation emails sent by ma1sd are not reaching you, you should look into [Adjusting email-sending settings](configuring-playbook-email.md)."

  217. msgstr ""

  218. 

  219. #: ../../../docs/configuring-playbook-ma1sd.md:167

  220. msgid "As with all other services, you can find the logs in [systemd-journald](https://www.freedesktop.org/software/systemd/man/systemd-journald.service.html) by logging in to the server with SSH and running `journalctl -fu matrix-ma1sd`."

  221. msgstr ""

  222. 

  223. #: ../../../docs/configuring-playbook-ma1sd.md:169

  224. msgid "Increase logging verbosity"

  225. msgstr ""

  226. 

  227. #: ../../../docs/configuring-playbook-ma1sd.md:171

  228. msgid "If you want to increase the verbosity, add the following configuration to your `vars.yml` file and re-run the playbook:"

  229. msgstr ""