Matrix Docker Ansible eploy
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
 
 
 

292 lines
10 KiB

  1. # SOME DESCRIPTIVE TITLE.
  2. # Copyright (C) 2018-2024, Slavi Pantaleev, Aine Etke, MDAD community
  3. # members
  4. # This file is distributed under the same license as the
  5. # matrix-docker-ansible-deploy package.
  6. # FIRST AUTHOR <EMAIL@ADDRESS>, 2024.
  7. #
  8. #, fuzzy
  9. msgid ""
  10. msgstr ""
  11. "Project-Id-Version: matrix-docker-ansible-deploy \n"
  12. "Report-Msgid-Bugs-To: \n"
  13. "POT-Creation-Date: 2024-12-16 12:05+0900\n"
  14. "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
  15. "Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
  16. "Language: jp\n"
  17. "Language-Team: jp <LL@li.org>\n"
  18. "MIME-Version: 1.0\n"
  19. "Content-Type: text/plain; charset=utf-8\n"
  20. "Content-Transfer-Encoding: 8bit\n"
  21. "Generated-By: Babel 2.16.0\n"
  22. #: ../../../docs/configuring-playbook-own-webserver.md:1
  23. msgid ""
  24. "Using your own webserver, instead of this playbook's Traefik reverse-"
  25. "proxy (optional, advanced)"
  26. msgstr ""
  27. #: ../../../docs/configuring-playbook-own-webserver.md:3
  28. msgid ""
  29. "By default, this playbook installs its own [Traefik](https://traefik.io/)"
  30. " reverse-proxy server (in a Docker container) which listens on ports 80 "
  31. "and 443. If that's okay, you can skip this document."
  32. msgstr ""
  33. #: ../../../docs/configuring-playbook-own-webserver.md:5
  34. msgid "Traefik"
  35. msgstr ""
  36. #: ../../../docs/configuring-playbook-own-webserver.md:7
  37. msgid ""
  38. "[Traefik](https://traefik.io/) is the default reverse-proxy for the "
  39. "playbook since [2023-02-26](../CHANGELOG.md/#2023-02-26) and serves **2 "
  40. "purposes**:"
  41. msgstr ""
  42. #: ../../../docs/configuring-playbook-own-webserver.md:9
  43. msgid ""
  44. "serving public traffic and providing SSL-termination with certificates "
  45. "obtained from [Let's Encrypt](https://letsencrypt.org/). See [Adjusting "
  46. "SSL certificate retrieval](./configuring-playbook-ssl-certificates.md)."
  47. msgstr ""
  48. #: ../../../docs/configuring-playbook-own-webserver.md:11
  49. msgid ""
  50. "assists internal communication between addon services (briges, bots, "
  51. "etc.) and the homeserver via an internal entrypoint (`matrix-internal-"
  52. "matrix-client-api`)."
  53. msgstr ""
  54. #: ../../../docs/configuring-playbook-own-webserver.md:13
  55. msgid "There are 2 ways to use Traefik with this playbook, as described below."
  56. msgstr ""
  57. #: ../../../docs/configuring-playbook-own-webserver.md:15
  58. msgid "Traefik managed by the playbook"
  59. msgstr ""
  60. #: ../../../docs/configuring-playbook-own-webserver.md:17
  61. msgid ""
  62. "To have the playbook install and use Traefik, add the following "
  63. "configuration to your `inventory/host_vars/matrix.example.com/vars.yml` "
  64. "file:"
  65. msgstr ""
  66. #: ../../../docs/configuring-playbook-own-webserver.md:25
  67. msgid "Traefik will manage SSL certificates for all services seamlessly."
  68. msgstr ""
  69. #: ../../../docs/configuring-playbook-own-webserver.md:27
  70. msgid "Traefik managed by you"
  71. msgstr ""
  72. #: ../../../docs/configuring-playbook-own-webserver.md:53
  73. msgid ""
  74. "In this mode all roles will still have Traefik labels attached. You will,"
  75. " however, need to configure your Traefik instance and its entrypoints."
  76. msgstr ""
  77. #: ../../../docs/configuring-playbook-own-webserver.md:55
  78. msgid ""
  79. "By default, the playbook configured a `default` certificate resolver and "
  80. "multiple entrypoints."
  81. msgstr ""
  82. #: ../../../docs/configuring-playbook-own-webserver.md:57
  83. msgid "You need to configure 4 entrypoints for your Traefik server:"
  84. msgstr ""
  85. #: ../../../docs/configuring-playbook-own-webserver.md:59
  86. msgid "`web` (TCP port `80`) - used for redirecting to HTTPS (`web-secure`)"
  87. msgstr ""
  88. #: ../../../docs/configuring-playbook-own-webserver.md:60
  89. msgid ""
  90. "`web-secure` (TCP port `443`) - used for exposing the Matrix Client-"
  91. "Server API and all other services"
  92. msgstr ""
  93. #: ../../../docs/configuring-playbook-own-webserver.md:61
  94. msgid ""
  95. "`matrix-federation` (TCP port `8448`) - used for exposing the Matrix "
  96. "Federation API"
  97. msgstr ""
  98. #: ../../../docs/configuring-playbook-own-webserver.md:62
  99. msgid ""
  100. "`matrix-internal-matrix-client-api` (TCP port `8008`) - used internally "
  101. "for addon services (bridges, bots) to communicate with the homserver"
  102. msgstr ""
  103. #: ../../../docs/configuring-playbook-own-webserver.md:64
  104. msgid ""
  105. "Below is some configuration for running Traefik yourself, although we "
  106. "recommend using [Traefik managed by the playbook](#traefik-managed-by-"
  107. "the-playbook)."
  108. msgstr ""
  109. #: ../../../docs/configuring-playbook-own-webserver.md:66
  110. msgid ""
  111. "Note that this configuration on its own does **not** redirect traffic on "
  112. "port 80 (plain HTTP) to port 443 for HTTPS. If you are not already doing "
  113. "this in Traefik, it can be added to Traefik in a [file "
  114. "provider](https://docs.traefik.io/v2.0/providers/file/) as follows:"
  115. msgstr ""
  116. #: ../../../docs/configuring-playbook-own-webserver.md:86
  117. msgid ""
  118. "You can use the following `docker-compose.yml` as example to launch "
  119. "Traefik."
  120. msgstr ""
  121. #: ../../../docs/configuring-playbook-own-webserver.md:122
  122. msgid "Another webserver"
  123. msgstr ""
  124. #: ../../../docs/configuring-playbook-own-webserver.md:124
  125. msgid "If you don't wish to use Traefik, you can also use your own webserver."
  126. msgstr ""
  127. #: ../../../docs/configuring-playbook-own-webserver.md:126
  128. msgid "Doing this is possible, but requires manual work."
  129. msgstr ""
  130. #: ../../../docs/configuring-playbook-own-webserver.md:128
  131. msgid "There are 2 ways to go about it:"
  132. msgstr ""
  133. #: ../../../docs/configuring-playbook-own-webserver.md:130
  134. msgid ""
  135. "(recommended) [Fronting the integrated reverse-proxy webserver with "
  136. "another reverse-proxy](#fronting-the-integrated-reverse-proxy-webserver-"
  137. "with-another-reverse-proxy) - using the playbook-managed reverse-proxy "
  138. "(Traefik), but disabling SSL termination for it, exposing this reverse-"
  139. "proxy on a few local ports (e.g. `127.0.0.1:81`, etc.) and forwarding "
  140. "traffic from your own webserver to those few ports"
  141. msgstr ""
  142. #: ../../../docs/configuring-playbook-own-webserver.md:132
  143. msgid ""
  144. "(difficult) [Using no reverse-proxy on the Matrix side at all](#using-no-"
  145. "reverse-proxy-on-the-matrix-side-at-all) disabling the playbook-managed "
  146. "reverse-proxy (Traefik), exposing services one by one using "
  147. "`_host_bind_port` variables and forwarding traffic from your own "
  148. "webserver to those ports"
  149. msgstr ""
  150. #: ../../../docs/configuring-playbook-own-webserver.md:134
  151. msgid "Fronting the integrated reverse-proxy webserver with another reverse-proxy"
  152. msgstr ""
  153. #: ../../../docs/configuring-playbook-own-webserver.md:136
  154. msgid ""
  155. "This method is about leaving the integrated reverse-proxy webserver be, "
  156. "but making it not get in the way (using up important ports, trying to "
  157. "retrieve SSL certificates, etc.)."
  158. msgstr ""
  159. #: ../../../docs/configuring-playbook-own-webserver.md:138
  160. msgid ""
  161. "If you wish to use another webserver, the integrated reverse-proxy "
  162. "webserver usually gets in the way because it attempts to fetch SSL "
  163. "certificates and binds to ports 80, 443 and 8448 (if Matrix Federation is"
  164. " enabled)."
  165. msgstr ""
  166. #: ../../../docs/configuring-playbook-own-webserver.md:140
  167. msgid ""
  168. "You can disable such behavior and make the integrated reverse-proxy "
  169. "webserver only serve traffic locally on the host itself (or over a local "
  170. "network)."
  171. msgstr ""
  172. #: ../../../docs/configuring-playbook-own-webserver.md:142
  173. msgid ""
  174. "This is the recommended way for using another reverse-proxy, because the "
  175. "integrated one would act as a black box and wire all Matrix services "
  176. "correctly. You would then only need to reverse-proxy a few individual "
  177. "domains and ports over to it."
  178. msgstr ""
  179. #: ../../../docs/configuring-playbook-own-webserver.md:144
  180. msgid ""
  181. "To front Traefik with another reverse-proxy, you would need some "
  182. "configuration like this:"
  183. msgstr ""
  184. #: ../../../docs/configuring-playbook-own-webserver.md:194
  185. msgid ""
  186. "Such a configuration would expose all services on a local port `81` and "
  187. "Matrix Federation on a local port `8449`. Your reverse-proxy "
  188. "configuration needs to send traffic to these ports. [`examples/reverse-"
  189. "proxies`](../examples/reverse-proxies/) contains examples for various "
  190. "webservers such as Apache2, Caddy, HAproxy, nginx and Nginx Proxy "
  191. "Manager."
  192. msgstr ""
  193. #: ../../../docs/configuring-playbook-own-webserver.md:196
  194. msgid ""
  195. "It's important that these webservers proxy-pass requests to the correct "
  196. "`ip:port` and also set the `Host` HTTP header appropriately. If you don't"
  197. " pass the `Host` header correctly, Traefik will return a `404 - not "
  198. "found` error."
  199. msgstr ""
  200. #: ../../../docs/configuring-playbook-own-webserver.md:198
  201. msgid "To put it another way:"
  202. msgstr ""
  203. #: ../../../docs/configuring-playbook-own-webserver.md:199
  204. msgid "`curl http://127.0.0.1:81` will result in a `404 - not found` error"
  205. msgstr ""
  206. #: ../../../docs/configuring-playbook-own-webserver.md:200
  207. msgid "but `curl -H 'Host: matrix.example.com' http://127.0.0.1:81` should work."
  208. msgstr ""
  209. #: ../../../docs/configuring-playbook-own-webserver.md:202
  210. msgid "Using no reverse-proxy on the Matrix side at all"
  211. msgstr ""
  212. #: ../../../docs/configuring-playbook-own-webserver.md:204
  213. msgid ""
  214. "Instead of [Fronting the integrated reverse-proxy webserver with another "
  215. "reverse-proxy](#fronting-the-integrated-reverse-proxy-webserver-with-"
  216. "another-reverse-proxy), you can also go another way -- completely "
  217. "disabling the playbook-managed Traefik reverse-proxy. You would then need"
  218. " to reverse-proxy from your own webserver directly to each individual "
  219. "Matrix service."
  220. msgstr ""
  221. #: ../../../docs/configuring-playbook-own-webserver.md:206
  222. msgid ""
  223. "This is more difficult, as you would need to handle the configuration for"
  224. " each service manually. Enabling additional services would come with "
  225. "extra manual work you need to do."
  226. msgstr ""
  227. #: ../../../docs/configuring-playbook-own-webserver.md:208
  228. msgid ""
  229. "Also, the Traefik reverse-proxy, besides fronting everything is also "
  230. "serving a 2nd purpose of allowing addons services to communicate with the"
  231. " Matrix homeserver thanks to its `matrix-internal-matrix-client-api` "
  232. "entrypoint (read more about it above). Disabling Traefik completely means"
  233. " the playbook would wire services to directly talk to the homeserver. "
  234. "This can work for basic setups, but not for more complex setups involving"
  235. " [matrix-media-repo](./configuring-playbook-matrix-media-repo.md), "
  236. "[matrix-corporal](./configuring-playbook-matrix-corporal.md) or other "
  237. "such services that need to \"steal routes\" from the homeserver."
  238. msgstr ""
  239. #: ../../../docs/configuring-playbook-own-webserver.md:210
  240. msgid ""
  241. "If your webserver is on the same machine, ensure your web server user "
  242. "(something like `http`, `apache`, `www-data`, `nginx`) is part of the "
  243. "`matrix` group. You should run something like this: `usermod -a -G matrix"
  244. " nginx`. This allows your webserver user to access files owned by the "
  245. "`matrix` group, so that it can serve static files from `/matrix/static-"
  246. "files`."
  247. msgstr ""