overmind
/
matrix-docker-ansible-deploy
espelhamento de https://github.com/spantaleev/matrix-docker-ansible-deploy
1
0
Fork 0
Código Issues 0 Versões 0 Wiki Atividade
Matrix Docker Ansible eploy
Você não pode selecionar mais de 25 tópicos Os tópicos devem começar com uma letra ou um número, podem incluir traços ('-') e podem ter até 35 caracteres.
8820 Commits
8 Branches
416 MiB
 
 
 
Tag: c51e771d1a
Branches Tags
${ item.name }
Criar branch ${ searchTerm }
de c51e771d1a
${ noResults }
matrix-docker-ansible-deploy/i18n/locales/bg/LC_MESSAGES/docs/howto-srv-server-delegation.po

220 linhas
7.6 KiB
Original Anotar Histórico 

  1. # SOME DESCRIPTIVE TITLE.

  2. # Copyright (C) 2018-2024, Slavi Pantaleev, Aine Etke, MDAD community

  3. # members

  4. # This file is distributed under the same license as the

  5. # matrix-docker-ansible-deploy package.

  6. # FIRST AUTHOR <EMAIL@ADDRESS>, 2024.

  7. #

  8. #, fuzzy

  9. msgid ""

  10. msgstr ""

  11. "Project-Id-Version: matrix-docker-ansible-deploy \n"

  12. "Report-Msgid-Bugs-To: \n"

  13. "POT-Creation-Date: 2024-12-16 12:05+0900\n"

  14. "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"

  15. "Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"

  16. "Language: bg\n"

  17. "Language-Team: bg <LL@li.org>\n"

  18. "Plural-Forms: nplurals=2; plural=(n != 1);\n"

  19. "MIME-Version: 1.0\n"

  20. "Content-Type: text/plain; charset=utf-8\n"

  21. "Content-Transfer-Encoding: 8bit\n"

  22. "Generated-By: Babel 2.16.0\n"

  23. 

  24. #: ../../../docs/howto-srv-server-delegation.md:1

  25. msgid "Server Delegation via a DNS SRV record (advanced)"

  26. msgstr ""

  27. 

  28. #: ../../../docs/howto-srv-server-delegation.md:3

  29. msgid ""

  30. "**Reminder** : unless you are affected by the [Downsides of well-known-"

  31. "based Server Delegation](howto-server-delegation.md#downsides-of-well-"

  32. "known-based-server-delegation), we suggest you **stay on the "

  33. "simple/default path**: [Server Delegation](howto-server-delegation.md) by"

  34. " [configuring well-known files](configuring-well-known.md) at the base "

  35. "domain."

  36. msgstr ""

  37. 

  38. #: ../../../docs/howto-srv-server-delegation.md:5

  39. msgid ""

  40. "This guide is about configuring Server Delegation using DNS SRV records "

  41. "(for the [Traefik](https://doc.traefik.io/traefik/) webserver). This "

  42. "method has special requirements when it comes to SSL certificates, so "

  43. "various changes are required."

  44. msgstr ""

  45. 

  46. #: ../../../docs/howto-srv-server-delegation.md:7

  47. msgid "Prerequisites"

  48. msgstr ""

  49. 

  50. #: ../../../docs/howto-srv-server-delegation.md:9

  51. msgid ""

  52. "SRV delegation while still using the playbook provided Traefik to get / "

  53. "renew the certificate requires a wildcard certificate."

  54. msgstr ""

  55. 

  56. #: ../../../docs/howto-srv-server-delegation.md:11

  57. msgid ""

  58. "To obtain / renew one from [Let's Encrypt](https://letsencrypt.org/), one"

  59. " needs to use a [DNS-01 challenge](https://letsencrypt.org/docs"

  60. "/challenge-types/#dns-01-challenge) method instead of the default "

  61. "[HTTP-01](https://letsencrypt.org/docs/challenge-"

  62. "types/#http-01-challenge)."

  63. msgstr ""

  64. 

  65. #: ../../../docs/howto-srv-server-delegation.md:13

  66. msgid ""

  67. "This means that this is **limited to the list of DNS providers supported "

  68. "by Traefik**, unless you bring in your own certificate."

  69. msgstr ""

  70. 

  71. #: ../../../docs/howto-srv-server-delegation.md:15

  72. msgid ""

  73. "The up-to-date list can be accessed on [traefik's "

  74. "documentation](https://doc.traefik.io/traefik/https/acme/#providers)"

  75. msgstr ""

  76. 

  77. #: ../../../docs/howto-srv-server-delegation.md:17

  78. msgid "The changes"

  79. msgstr ""

  80. 

  81. #: ../../../docs/howto-srv-server-delegation.md:19

  82. msgid ""

  83. "**Note**: the changes below instruct you how to do this for a basic "

  84. "Synapse installation. You will need to adapt the variable name and the "

  85. "content of the labels:"

  86. msgstr ""

  87. 

  88. #: ../../../docs/howto-srv-server-delegation.md:21

  89. msgid ""

  90. "if you're using another homeserver implementation (e.g. [Conduit"

  91. "](./configuring-playbook-conduit.md) or [Dendrite](./configuring-"

  92. "playbook-dendrite.md))"

  93. msgstr ""

  94. 

  95. #: ../../../docs/howto-srv-server-delegation.md:22

  96. msgid ""

  97. "if you're using [Synapse with workers enabled](./configuring-playbook-"

  98. "synapse.md#load-balancing-with-workers) (`matrix_synapse_workers_enabled:"

  99. " true`). In that case, it's actually the `matrix-synapse-reverse-proxy-"

  100. "companion` service which has Traefik labels attached"

  101. msgstr ""

  102. 

  103. #: ../../../docs/howto-srv-server-delegation.md:24

  104. msgid ""

  105. "Also, all instructions below are from an older version of the playbook "

  106. "and may not work anymore."

  107. msgstr ""

  108. 

  109. #: ../../../docs/howto-srv-server-delegation.md:26

  110. msgid "Federation Endpoint"

  111. msgstr ""

  112. 

  113. #: ../../../docs/howto-srv-server-delegation.md:33

  114. msgid ""

  115. "This is because with SRV federation, some servers / tools (one of which "

  116. "being the federation tester) try to access the federation API using the "

  117. "resolved IP address instead of the domain name (or they are not using "

  118. "SNI). This change will make Traefik route all traffic for which the path "

  119. "match this rule go to the federation endpoint."

  120. msgstr ""

  121. 

  122. #: ../../../docs/howto-srv-server-delegation.md:35

  123. msgid "Tell Traefik which certificate to serve for the federation endpoint"

  124. msgstr ""

  125. 

  126. #: ../../../docs/howto-srv-server-delegation.md:37

  127. msgid ""

  128. "Now that the federation endpoint is not bound to a domain anymore we need"

  129. " to explicitely tell Traefik to use a wildcard certificate in addition to"

  130. " one containing the base name."

  131. msgstr ""

  132. 

  133. #: ../../../docs/howto-srv-server-delegation.md:39

  134. msgid ""

  135. "This is because the Matrix specification expects the federation endpoint "

  136. "to be served using a certificate compatible with the base domain, "

  137. "however, the other resources on the endpoint still need a valid "

  138. "certificate to work."

  139. msgstr ""

  140. 

  141. #: ../../../docs/howto-srv-server-delegation.md:48

  142. msgid "Configure the DNS-01 challenge for let's encrypt"

  143. msgstr ""

  144. 

  145. #: ../../../docs/howto-srv-server-delegation.md:50

  146. msgid ""

  147. "Since we're now requesting a wildcard certificate, we need to change the "

  148. "ACME challenge method. To request a wildcard certificate from Let's "

  149. "Encrypt we are required to use the DNS-01 challenge."

  150. msgstr ""

  151. 

  152. #: ../../../docs/howto-srv-server-delegation.md:52

  153. msgid "This will need 3 changes:"

  154. msgstr ""

  155. 

  156. #: ../../../docs/howto-srv-server-delegation.md:53

  157. msgid "Add a new certificate resolver that works with DNS-01"

  158. msgstr ""

  159. 

  160. #: ../../../docs/howto-srv-server-delegation.md:54

  161. msgid ""

  162. "Configure the resolver to allow access to the DNS zone to configure the "

  163. "records to answer the challenge (refer to [Traefik's "

  164. "documentation](https://doc.traefik.io/traefik/https/acme/#providers) to "

  165. "know which environment variables to set)"

  166. msgstr ""

  167. 

  168. #: ../../../docs/howto-srv-server-delegation.md:55

  169. msgid "Tell the playbook to use the new resolver as default"

  170. msgstr ""

  171. 

  172. #: ../../../docs/howto-srv-server-delegation.md:57

  173. msgid ""

  174. "We cannot just disable the default resolver as that would disable SSL in "

  175. "quite a few places in the playbook."

  176. msgstr ""

  177. 

  178. #: ../../../docs/howto-srv-server-delegation.md:86

  179. msgid "Adjust Coturn's configuration"

  180. msgstr ""

  181. 

  182. #: ../../../docs/howto-srv-server-delegation.md:88

  183. msgid "The last step is to alter the generated Coturn configuration."

  184. msgstr ""

  185. 

  186. #: ../../../docs/howto-srv-server-delegation.md:90

  187. msgid ""

  188. "By default, Coturn is configured to wait on the certificate for the "

  189. "`matrix.` subdomain using an [instantiated systemd "

  190. "service](https://www.freedesktop.org/software/systemd/man/systemd.service.html#Service%20Templates)"

  191. " using the domain name as the parameter for this service. However, we "

  192. "need to serve the wildcard certificate, which is incompatible with "

  193. "systemd, it will try to expand the `*`, which will break and prevent "

  194. "Coturn from starting."

  195. msgstr ""

  196. 

  197. #: ../../../docs/howto-srv-server-delegation.md:92

  198. msgid "We also need to indicate to Coturn where the wildcard certificate is."

  199. msgstr ""

  200. 

  201. #: ../../../docs/howto-srv-server-delegation.md:94

  202. msgid ""

  203. "**⚠️ WARNING ⚠️** : On first start of the services, Coturn might still "

  204. "fail to start because Traefik is still in the process of obtaining the "

  205. "certificates. If you still get an error, make sure Traefik obtained the "

  206. "certificates and restart the Coturn service (`just start-group coturn`)."

  207. msgstr ""

  208. 

  209. #: ../../../docs/howto-srv-server-delegation.md:96

  210. msgid ""

  211. "This should not happen again afterwards as Traefik will renew "

  212. "certificates well before their expiry date, and the Coturn service is "

  213. "setup to restart periodically."

  214. msgstr ""

  215. 

  216. #: ../../../docs/howto-srv-server-delegation.md:122

  217. msgid "Full example of a working configuration"

  218. msgstr ""