From a56c2f8921bfaff6c31ef1669e14b04c022e386d Mon Sep 17 00:00:00 2001 From: Slavi Pantaleev Date: Mon, 8 Jul 2024 07:22:05 +0300 Subject: [PATCH] Mention matrix_playbook_public_matrix_federation_api_traefik_entrypoint_config_http3_enabled to people running their own webserver Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/3402 --- CHANGELOG.md | 12 ++++++++++++ docs/configuring-playbook-own-webserver.md | 8 ++++++++ 2 files changed, 20 insertions(+) diff --git a/CHANGELOG.md b/CHANGELOG.md index 0011dac45..3304d3a93 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -53,6 +53,18 @@ devture_traefik_config_entrypoint_web_secure_http3_enabled: false matrix_playbook_public_matrix_federation_api_traefik_entrypoint_config_http3_enabled: false ``` +If you are using [your own webserver](./docs/configuring-playbook-own-webserver.md) (in front of Traefik), port binding on UDP port `8448` by default due to HTTP/3 is either unnecessary or [may get in the way](https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/3402). If it does, you can disable it: + +```yml +# Disable HTTP/3 for the federation entrypoint. +# If you'd like HTTP/3, consider configuring it for your other reverse-proxy. +# +# Disabling this also sets `matrix_playbook_public_matrix_federation_api_traefik_entrypoint_host_bind_port_udp` to an empty value. +# If you'd like to keep HTTP/3 enabled here (for whatever reason), you may wish to explicitly +# set `matrix_playbook_public_matrix_federation_api_traefik_entrypoint_host_bind_port_udp` to something like '127.0.0.1:8449'. +matrix_playbook_public_matrix_federation_api_traefik_entrypoint_config_http3_enabled: false +``` + # 2024-07-01 diff --git a/docs/configuring-playbook-own-webserver.md b/docs/configuring-playbook-own-webserver.md index 702103670..399d8a9f1 100644 --- a/docs/configuring-playbook-own-webserver.md +++ b/docs/configuring-playbook-own-webserver.md @@ -171,6 +171,14 @@ devture_traefik_config_entrypoint_web_forwardedHeaders_insecure: true # - adjusting `matrix_playbook_public_matrix_federation_api_traefik_entrypoint_config_custom` (below) - removing `insecure: true` and enabling/configuring `trustedIPs` matrix_playbook_public_matrix_federation_api_traefik_entrypoint_host_bind_port: '127.0.0.1:8449' +# Disable HTTP/3 for the federation entrypoint. +# If you'd like HTTP/3, consider configuring it for your other reverse-proxy. +# +# Disabling this also sets `matrix_playbook_public_matrix_federation_api_traefik_entrypoint_host_bind_port_udp` to an empty value. +# If you'd like to keep HTTP/3 enabled here (for whatever reason), you may wish to explicitly +# set `matrix_playbook_public_matrix_federation_api_traefik_entrypoint_host_bind_port_udp` to something like '127.0.0.1:8449'. +matrix_playbook_public_matrix_federation_api_traefik_entrypoint_config_http3_enabled: false + # Depending on the value of `matrix_playbook_public_matrix_federation_api_traefik_entrypoint_host_bind_port` above, # this may need to be reconfigured. See the comments above. matrix_playbook_public_matrix_federation_api_traefik_entrypoint_config_custom: