overmind
/
matrix-docker-ansible-deploy
mirror of https://github.com/spantaleev/matrix-docker-ansible-deploy
1
0
Fork 0
Code Issues 0 Releases 0 Wiki Activity
Matrix Docker Ansible eploy
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
8820 Commits
5 Branches
409 MiB
 
 
 
Tree: c51e771d1a
Branches Tags
${ item.name }
Create branch ${ searchTerm }
from 'c51e771d1a'
${ noResults }
matrix-docker-ansible-deploy/i18n/locales/jp/LC_MESSAGES/docs/howto-srv-server-delegation.po

219 lines
7.6 KiB
Raw Blame History 

  1. # SOME DESCRIPTIVE TITLE.

  2. # Copyright (C) 2018-2024, Slavi Pantaleev, Aine Etke, MDAD community

  3. # members

  4. # This file is distributed under the same license as the

  5. # matrix-docker-ansible-deploy package.

  6. # FIRST AUTHOR <EMAIL@ADDRESS>, 2024.

  7. #

  8. #, fuzzy

  9. msgid ""

  10. msgstr ""

  11. "Project-Id-Version: matrix-docker-ansible-deploy \n"

  12. "Report-Msgid-Bugs-To: \n"

  13. "POT-Creation-Date: 2024-12-16 12:05+0900\n"

  14. "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"

  15. "Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"

  16. "Language: jp\n"

  17. "Language-Team: jp <LL@li.org>\n"

  18. "MIME-Version: 1.0\n"

  19. "Content-Type: text/plain; charset=utf-8\n"

  20. "Content-Transfer-Encoding: 8bit\n"

  21. "Generated-By: Babel 2.16.0\n"

  22. 

  23. #: ../../../docs/howto-srv-server-delegation.md:1

  24. msgid "Server Delegation via a DNS SRV record (advanced)"

  25. msgstr ""

  26. 

  27. #: ../../../docs/howto-srv-server-delegation.md:3

  28. msgid ""

  29. "**Reminder** : unless you are affected by the [Downsides of well-known-"

  30. "based Server Delegation](howto-server-delegation.md#downsides-of-well-"

  31. "known-based-server-delegation), we suggest you **stay on the "

  32. "simple/default path**: [Server Delegation](howto-server-delegation.md) by"

  33. " [configuring well-known files](configuring-well-known.md) at the base "

  34. "domain."

  35. msgstr ""

  36. 

  37. #: ../../../docs/howto-srv-server-delegation.md:5

  38. msgid ""

  39. "This guide is about configuring Server Delegation using DNS SRV records "

  40. "(for the [Traefik](https://doc.traefik.io/traefik/) webserver). This "

  41. "method has special requirements when it comes to SSL certificates, so "

  42. "various changes are required."

  43. msgstr ""

  44. 

  45. #: ../../../docs/howto-srv-server-delegation.md:7

  46. msgid "Prerequisites"

  47. msgstr ""

  48. 

  49. #: ../../../docs/howto-srv-server-delegation.md:9

  50. msgid ""

  51. "SRV delegation while still using the playbook provided Traefik to get / "

  52. "renew the certificate requires a wildcard certificate."

  53. msgstr ""

  54. 

  55. #: ../../../docs/howto-srv-server-delegation.md:11

  56. msgid ""

  57. "To obtain / renew one from [Let's Encrypt](https://letsencrypt.org/), one"

  58. " needs to use a [DNS-01 challenge](https://letsencrypt.org/docs"

  59. "/challenge-types/#dns-01-challenge) method instead of the default "

  60. "[HTTP-01](https://letsencrypt.org/docs/challenge-"

  61. "types/#http-01-challenge)."

  62. msgstr ""

  63. 

  64. #: ../../../docs/howto-srv-server-delegation.md:13

  65. msgid ""

  66. "This means that this is **limited to the list of DNS providers supported "

  67. "by Traefik**, unless you bring in your own certificate."

  68. msgstr ""

  69. 

  70. #: ../../../docs/howto-srv-server-delegation.md:15

  71. msgid ""

  72. "The up-to-date list can be accessed on [traefik's "

  73. "documentation](https://doc.traefik.io/traefik/https/acme/#providers)"

  74. msgstr ""

  75. 

  76. #: ../../../docs/howto-srv-server-delegation.md:17

  77. msgid "The changes"

  78. msgstr ""

  79. 

  80. #: ../../../docs/howto-srv-server-delegation.md:19

  81. msgid ""

  82. "**Note**: the changes below instruct you how to do this for a basic "

  83. "Synapse installation. You will need to adapt the variable name and the "

  84. "content of the labels:"

  85. msgstr ""

  86. 

  87. #: ../../../docs/howto-srv-server-delegation.md:21

  88. msgid ""

  89. "if you're using another homeserver implementation (e.g. [Conduit"

  90. "](./configuring-playbook-conduit.md) or [Dendrite](./configuring-"

  91. "playbook-dendrite.md))"

  92. msgstr ""

  93. 

  94. #: ../../../docs/howto-srv-server-delegation.md:22

  95. msgid ""

  96. "if you're using [Synapse with workers enabled](./configuring-playbook-"

  97. "synapse.md#load-balancing-with-workers) (`matrix_synapse_workers_enabled:"

  98. " true`). In that case, it's actually the `matrix-synapse-reverse-proxy-"

  99. "companion` service which has Traefik labels attached"

  100. msgstr ""

  101. 

  102. #: ../../../docs/howto-srv-server-delegation.md:24

  103. msgid ""

  104. "Also, all instructions below are from an older version of the playbook "

  105. "and may not work anymore."

  106. msgstr ""

  107. 

  108. #: ../../../docs/howto-srv-server-delegation.md:26

  109. msgid "Federation Endpoint"

  110. msgstr ""

  111. 

  112. #: ../../../docs/howto-srv-server-delegation.md:33

  113. msgid ""

  114. "This is because with SRV federation, some servers / tools (one of which "

  115. "being the federation tester) try to access the federation API using the "

  116. "resolved IP address instead of the domain name (or they are not using "

  117. "SNI). This change will make Traefik route all traffic for which the path "

  118. "match this rule go to the federation endpoint."

  119. msgstr ""

  120. 

  121. #: ../../../docs/howto-srv-server-delegation.md:35

  122. msgid "Tell Traefik which certificate to serve for the federation endpoint"

  123. msgstr ""

  124. 

  125. #: ../../../docs/howto-srv-server-delegation.md:37

  126. msgid ""

  127. "Now that the federation endpoint is not bound to a domain anymore we need"

  128. " to explicitely tell Traefik to use a wildcard certificate in addition to"

  129. " one containing the base name."

  130. msgstr ""

  131. 

  132. #: ../../../docs/howto-srv-server-delegation.md:39

  133. msgid ""

  134. "This is because the Matrix specification expects the federation endpoint "

  135. "to be served using a certificate compatible with the base domain, "

  136. "however, the other resources on the endpoint still need a valid "

  137. "certificate to work."

  138. msgstr ""

  139. 

  140. #: ../../../docs/howto-srv-server-delegation.md:48

  141. msgid "Configure the DNS-01 challenge for let's encrypt"

  142. msgstr ""

  143. 

  144. #: ../../../docs/howto-srv-server-delegation.md:50

  145. msgid ""

  146. "Since we're now requesting a wildcard certificate, we need to change the "

  147. "ACME challenge method. To request a wildcard certificate from Let's "

  148. "Encrypt we are required to use the DNS-01 challenge."

  149. msgstr ""

  150. 

  151. #: ../../../docs/howto-srv-server-delegation.md:52

  152. msgid "This will need 3 changes:"

  153. msgstr ""

  154. 

  155. #: ../../../docs/howto-srv-server-delegation.md:53

  156. msgid "Add a new certificate resolver that works with DNS-01"

  157. msgstr ""

  158. 

  159. #: ../../../docs/howto-srv-server-delegation.md:54

  160. msgid ""

  161. "Configure the resolver to allow access to the DNS zone to configure the "

  162. "records to answer the challenge (refer to [Traefik's "

  163. "documentation](https://doc.traefik.io/traefik/https/acme/#providers) to "

  164. "know which environment variables to set)"

  165. msgstr ""

  166. 

  167. #: ../../../docs/howto-srv-server-delegation.md:55

  168. msgid "Tell the playbook to use the new resolver as default"

  169. msgstr ""

  170. 

  171. #: ../../../docs/howto-srv-server-delegation.md:57

  172. msgid ""

  173. "We cannot just disable the default resolver as that would disable SSL in "

  174. "quite a few places in the playbook."

  175. msgstr ""

  176. 

  177. #: ../../../docs/howto-srv-server-delegation.md:86

  178. msgid "Adjust Coturn's configuration"

  179. msgstr ""

  180. 

  181. #: ../../../docs/howto-srv-server-delegation.md:88

  182. msgid "The last step is to alter the generated Coturn configuration."

  183. msgstr ""

  184. 

  185. #: ../../../docs/howto-srv-server-delegation.md:90

  186. msgid ""

  187. "By default, Coturn is configured to wait on the certificate for the "

  188. "`matrix.` subdomain using an [instantiated systemd "

  189. "service](https://www.freedesktop.org/software/systemd/man/systemd.service.html#Service%20Templates)"

  190. " using the domain name as the parameter for this service. However, we "

  191. "need to serve the wildcard certificate, which is incompatible with "

  192. "systemd, it will try to expand the `*`, which will break and prevent "

  193. "Coturn from starting."

  194. msgstr ""

  195. 

  196. #: ../../../docs/howto-srv-server-delegation.md:92

  197. msgid "We also need to indicate to Coturn where the wildcard certificate is."

  198. msgstr ""

  199. 

  200. #: ../../../docs/howto-srv-server-delegation.md:94

  201. msgid ""

  202. "**⚠️ WARNING ⚠️** : On first start of the services, Coturn might still "

  203. "fail to start because Traefik is still in the process of obtaining the "

  204. "certificates. If you still get an error, make sure Traefik obtained the "

  205. "certificates and restart the Coturn service (`just start-group coturn`)."

  206. msgstr ""

  207. 

  208. #: ../../../docs/howto-srv-server-delegation.md:96

  209. msgid ""

  210. "This should not happen again afterwards as Traefik will renew "

  211. "certificates well before their expiry date, and the Coturn service is "

  212. "setup to restart periodically."

  213. msgstr ""

  214. 

  215. #: ../../../docs/howto-srv-server-delegation.md:122

  216. msgid "Full example of a working configuration"

  217. msgstr ""