Compare commits
2 Commits
4af024e8d2
...
55e187c9d5
| Author | SHA1 | Date | |
|---|---|---|---|
55e187c9d5
|
|||
|
74d4ad73f2
|
@ -1,6 +1,11 @@
|
|||||||
[defaults]
|
[defaults]
|
||||||
|
|
||||||
|
vault_password_file = gpg/open_vault.sh
|
||||||
|
|
||||||
retry_files_enabled = False
|
retry_files_enabled = False
|
||||||
stdout_callback = yaml
|
stdout_callback = yaml
|
||||||
|
|
||||||
|
inventory = inventory/hosts
|
||||||
|
|
||||||
[connection]
|
[connection]
|
||||||
pipelining = True
|
pipelining = True
|
||||||
|
|||||||
5
gpg/open_vault.sh
Executable file
5
gpg/open_vault.sh
Executable file
@ -0,0 +1,5 @@
|
|||||||
|
#!/bin/bash
|
||||||
|
|
||||||
|
set -e -u
|
||||||
|
|
||||||
|
gpg2 --batch --use-agent --decrypt $(dirname $0)/vault_passphrase.gpg 2>/dev/null
|
||||||
18
gpg/vault_passphrase.gpg
Normal file
18
gpg/vault_passphrase.gpg
Normal file
@ -0,0 +1,18 @@
|
|||||||
|
-----BEGIN PGP MESSAGE-----
|
||||||
|
|
||||||
|
hQIMAxEs7W/4x4lxARAAssinIzR2rGs+Qkm0Q2tRdSXSXRx3OhH+2T5p0Rz3YkqU
|
||||||
|
iyiUtyT/Ll7RMUAlAEDZITvirXe4ZZImDcxQegEzFgO7BowQYJDRdhaRmLKZpiuQ
|
||||||
|
foRnJAAR12sf49arjJjaBQb91ViOp5MkxAtXiiqWyXwSSII+cV88flMq143cFmfC
|
||||||
|
C5OdIQd3SqrbFhGRTjUzoIMqnJH8xksjwph9GS811dY14rQv5X1Ybt5zehMJ7/m/
|
||||||
|
luLNg2zgQgYOUxcovddCVMI54ThXyDubDox/5xLvVjyVOFHgwC/VLn+QXHuPY/r5
|
||||||
|
+rVzz/30eq0uOLKD3LnDBQskCWRVWGC2ulKaZtlylBq6KRzIM6c6+VPSHCjoFyES
|
||||||
|
RRpRHeIXGLs31eLkr8dc+VNbPKpMsjm/E/4ZVE2JBpy7S/kh1XYVQxT6ahDKT1tD
|
||||||
|
4YN9O0JyNXzjiyNaTTLwNGh5+ICEd3ZCfa4O/og2LySGPOw6mX8ukgP029LHVp6+
|
||||||
|
0tRwSWiIM3US/NIVGA+o9e9I/I5Bp/cnzJgd7faUIlzcVPP+euCbo4GsYWpX3Nca
|
||||||
|
eRcr7AVY3wwuZtl7/s8KbQKk0ulLxS4Lo2XmdpQl8CPGwASdbMf/H8B256+xiUQ3
|
||||||
|
ml400ZaCC7Loeduwl1ez1H/dFFzmpUziaxxtWW4aFtOUYhGeSCTu6ZIgxVq3eBnS
|
||||||
|
jAGv8bt+0Xnrpih3mZWM92cw2VKfzYD9WG+dCB4DtZMKhl1ub2bkeTC/B9F+QuP6
|
||||||
|
anlonYHs2wmPXzjcx8ajonbYrYXanoNRHDId6OqVAbjYqbua6TG6H9LUFweIj1RV
|
||||||
|
yhUPejzhA8xEB0nUcKJZKLvuqvwPbr06GODnAKY5TQ4yILMAnBx0pNzfQNzo
|
||||||
|
=Cecg
|
||||||
|
-----END PGP MESSAGE-----
|
||||||
385
inventory/host_vars/matrix.finallycoffee.eu/vars.yml
Normal file
385
inventory/host_vars/matrix.finallycoffee.eu/vars.yml
Normal file
@ -0,0 +1,385 @@
|
|||||||
|
#
|
||||||
|
# General config
|
||||||
|
# Domain of the matrix server and SSL config
|
||||||
|
#
|
||||||
|
matrix_domain: finallycoffee.eu
|
||||||
|
|
||||||
|
matrix_playbook_reverse_proxy_type: playbook-managed-traefik
|
||||||
|
matrix_playbook_ssl_enabled: true
|
||||||
|
devture_traefik_config_entrypoint_web_secure_enabled: false
|
||||||
|
devture_traefik_container_web_host_bind_port: '127.0.10.1:8080'
|
||||||
|
devture_traefik_config_entrypoint_web_forwardedHeaders_insecure: true
|
||||||
|
matrix_playbook_public_matrix_federation_api_traefik_entrypoint_host_bind_port: '127.0.10.2:8448'
|
||||||
|
matrix_playbook_public_matrix_federation_api_traefik_entrypoint_config_custom:
|
||||||
|
forwardedHeaders:
|
||||||
|
insecure: true
|
||||||
|
|
||||||
|
matrix_synapse_metrics_proxying_enabled: true
|
||||||
|
|
||||||
|
matrix_base_data_path: "{{ vault_matrix_base_data_path }}"
|
||||||
|
matrix_server_fqn_element: "chat.{{ matrix_domain }}"
|
||||||
|
matrix_playbook_docker_installation_enabled: false
|
||||||
|
|
||||||
|
#matrix_client_element_version: v1.8.4
|
||||||
|
#matrix_client_element_docker_image: "{{ matrix_client_element_docker_image_name_prefix }}vectorim/element-web:v1.7.21"
|
||||||
|
#matrix_synapse_docker_image: "{{ matrix_synapse_docker_image_name_prefix }}matrixdotorg/synapse:v1.77.0"
|
||||||
|
#matrix_synapse_in_container_python_packages_path: "/usr/local/lib/python3.11/site-packages"
|
||||||
|
#matrix_synapse_default_room_version: "10"
|
||||||
|
matrix_dimension_scheme: https
|
||||||
|
|
||||||
|
devture_timesync_installation_enabled: false
|
||||||
|
matrix_homeserver_generic_secret_key: "{{ vault_homeserver_generic_secret_key }}"
|
||||||
|
devture_systemd_service_manager_up_verification_delay_seconds: 180
|
||||||
|
|
||||||
|
web_user: "web"
|
||||||
|
revproxy_autoload_dir: "/vault/services/web/sites.d"
|
||||||
|
postgres_dump_dir: /vault/temp
|
||||||
|
|
||||||
|
|
||||||
|
#
|
||||||
|
# General Synapse config
|
||||||
|
#
|
||||||
|
devture_postgres_connection_password: "{{ vault_matrix_postgres_connection_password }}"
|
||||||
|
# A secret used to protect access keys issued by the server.
|
||||||
|
# matrix_homeserver_generic_secret_key: "{{ vault_homeserver_generic_secret_key }}"
|
||||||
|
# Make synapse accept larger media aswell
|
||||||
|
matrix_synapse_max_upload_size_mb: 200
|
||||||
|
# Enable metrics at (default) :9100/_synapse/metrics
|
||||||
|
matrix_synapse_metrics_enabled: true
|
||||||
|
matrix_synapse_turn_shared_secret: "{{ vault_matrix_coturn_turn_static_auth_secret }}"
|
||||||
|
matrix_synapse_turn_uris:
|
||||||
|
- "turn:voip.matrix.finallycoffee.eu?transport=udp"
|
||||||
|
- "turn:voip.matrix.finallycoffee.eu?transport=tcp"
|
||||||
|
# Auto-join all users into those rooms
|
||||||
|
matrix_synapse_auto_join_rooms:
|
||||||
|
- "#welcome:finallycoffee.eu"
|
||||||
|
- "#announcements:finallycoffee.eu"
|
||||||
|
|
||||||
|
## Synapse rate limits
|
||||||
|
matrix_synapse_rc_federation:
|
||||||
|
window_size: 1000
|
||||||
|
sleep_limit: 50
|
||||||
|
sleep_delay: 500
|
||||||
|
reject_limit: 50
|
||||||
|
concurrent: 10
|
||||||
|
matrix_synapse_rc_message:
|
||||||
|
per_second: 0.5
|
||||||
|
burst_count: 25
|
||||||
|
matrix_synapse_rc_joins:
|
||||||
|
local:
|
||||||
|
per_second: 0.5
|
||||||
|
burst_count: 20
|
||||||
|
remote:
|
||||||
|
per_second: 0.05
|
||||||
|
burst_count: 20
|
||||||
|
matrix_synapse_rc_joins_per_room:
|
||||||
|
per_second: 1
|
||||||
|
burst_count: 10
|
||||||
|
matrix_synapse_rc_invites:
|
||||||
|
per_room:
|
||||||
|
per_second: 0.5
|
||||||
|
burst_count: 10
|
||||||
|
per_user:
|
||||||
|
per_second: 0.006
|
||||||
|
burst_count: 10
|
||||||
|
per_issuer:
|
||||||
|
per_second: 2
|
||||||
|
burst_count: 20
|
||||||
|
|
||||||
|
## Synapse cache tuning
|
||||||
|
matrix_synapse_caches_global_factor: 1.5
|
||||||
|
matrix_synapse_event_cache_size: "300K"
|
||||||
|
|
||||||
|
## Synapse workers
|
||||||
|
matrix_synapse_workers_enabled: true
|
||||||
|
matrix_synapse_workers_preset: "little-federation-helper"
|
||||||
|
matrix_synapse_workers_generic_workers_count: 1
|
||||||
|
matrix_synapse_workers_media_repository_workers_count: 2
|
||||||
|
matrix_synapse_workers_federation_sender_workers_count: 2
|
||||||
|
matrix_synapse_workers_pusher_workers_count: 1
|
||||||
|
matrix_synapse_workers_appservice_workers_count: 1
|
||||||
|
|
||||||
|
# Static secret auth for matrix-synapse-shared-secret-auth
|
||||||
|
matrix_synapse_ext_password_provider_shared_secret_auth_enabled: true
|
||||||
|
matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret: "{{ vault_matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret }}"
|
||||||
|
matrix_synapse_ext_password_provider_rest_auth_enabled: true
|
||||||
|
matrix_synapse_ext_password_provider_rest_auth_endpoint: "http://matrix-ma1sd:8090"
|
||||||
|
matrix_synapse_ext_password_provider_rest_auth_registration_enforce_lowercase: false
|
||||||
|
matrix_synapse_ext_password_provider_rest_auth_registration_profile_name_autofill: true
|
||||||
|
matrix_synapse_ext_password_provider_rest_auth_login_profile_name_autofill: false
|
||||||
|
|
||||||
|
matrix_synapse_configuration_extension_yaml: |
|
||||||
|
database:
|
||||||
|
args:
|
||||||
|
cp_max: 20
|
||||||
|
caches:
|
||||||
|
per_cache_factors:
|
||||||
|
device_id_exists: 3
|
||||||
|
get_users_in_room: 4
|
||||||
|
_get_joined_users_from_context: 4
|
||||||
|
_get_joined_profile_from_event_id: 3
|
||||||
|
"*stateGroupMembersCache*": 2
|
||||||
|
_matches_user_in_member_list: 3
|
||||||
|
get_users_who_share_room_with_user: 3
|
||||||
|
is_interested_in_room: 2
|
||||||
|
get_user_by_id: 1.5
|
||||||
|
room_push_rule_cache: 1.5
|
||||||
|
expire_caches: true
|
||||||
|
cache_entry_ttl: 45m
|
||||||
|
sync_response_cache_duration: 2m
|
||||||
|
|
||||||
|
|
||||||
|
#
|
||||||
|
# synapse-admin tool
|
||||||
|
#
|
||||||
|
matrix_synapse_admin_enabled: true
|
||||||
|
matrix_synapse_admin_container_http_host_bind_port: 8985
|
||||||
|
|
||||||
|
|
||||||
|
#
|
||||||
|
# VoIP / CoTURN config
|
||||||
|
#
|
||||||
|
# A shared secret (between Synapse and Coturn) used for authentication.
|
||||||
|
matrix_coturn_turn_static_auth_secret: "{{ vault_matrix_coturn_turn_static_auth_secret }}"
|
||||||
|
# Disable coturn, as we use own instance
|
||||||
|
matrix_coturn_enabled: false
|
||||||
|
|
||||||
|
|
||||||
|
#
|
||||||
|
# dimension (integration manager) config
|
||||||
|
#
|
||||||
|
matrix_dimension_enabled: true
|
||||||
|
matrix_dimension_admins: "{{ vault_matrix_dimension_admins }}"
|
||||||
|
matrix_server_fqn_dimension: "dimension.matrix.{{ matrix_domain }}"
|
||||||
|
matrix_dimension_access_token: "{{ vault_matrix_dimension_access_token }}"
|
||||||
|
matrix_dimension_configuration_extension_yaml: |
|
||||||
|
telegram:
|
||||||
|
botToken: "{{ vault_matrix_dimension_configuration_telegram_bot_token }}"
|
||||||
|
|
||||||
|
|
||||||
|
#
|
||||||
|
# mautrix-whatsapp config
|
||||||
|
#
|
||||||
|
matrix_mautrix_whatsapp_enabled: true
|
||||||
|
matrix_mautrix_whatsapp_bridge_personal_filtering_spaces: true
|
||||||
|
matrix_mautrix_whatsapp_bridge_mute_bridging: true
|
||||||
|
matrix_mautrix_whatsapp_bridge_enable_status_broadcast: false
|
||||||
|
matrix_mautrix_whatsapp_bridge_allow_user_invite: true
|
||||||
|
matrix_mautrix_whatsapp_container_http_monitoring_host_bind_port: 9402
|
||||||
|
matrix_mautrix_whatsapp_container_extra_arguments:
|
||||||
|
- "-p 127.0.0.1:{{ matrix_mautrix_whatsapp_container_http_monitoring_host_bind_port }}:{{ matrix_mautrix_whatsapp_container_http_monitoring_host_bind_port }}"
|
||||||
|
matrix_mautrix_whatsapp_configuration_extension_yaml: |
|
||||||
|
bridge:
|
||||||
|
displayname_template: "{% raw %}{{.Name}} ({{if .Notify}}{{.Notify}}{{else}}{{.Jid}}{{end}}) (via WhatsApp){% endraw %}"
|
||||||
|
max_connection_attempts: 5
|
||||||
|
connection_timeout: 30
|
||||||
|
contact_wait_delay: 5
|
||||||
|
private_chat_portal_meta: true
|
||||||
|
login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret }}"
|
||||||
|
logging:
|
||||||
|
print_level: info
|
||||||
|
metrics:
|
||||||
|
enabled: true
|
||||||
|
listen: 0.0.0.0:{{ matrix_mautrix_whatsapp_container_http_monitoring_host_bind_port }}
|
||||||
|
whatsapp:
|
||||||
|
os_name: Linux mautrix-whatsapp
|
||||||
|
browser_name: Chrome
|
||||||
|
|
||||||
|
|
||||||
|
#
|
||||||
|
# mautrix-telegram config
|
||||||
|
#
|
||||||
|
matrix_mautrix_telegram_enabled: true
|
||||||
|
matrix_mautrix_telegram_api_id: "{{ vault_matrix_mautrix_telegram_api_id }}"
|
||||||
|
matrix_mautrix_telegram_api_hash: "{{ vault_matrix_mautrix_telegram_api_hash }}"
|
||||||
|
matrix_mautrix_telegram_public_endpoint: '/bridge/telegram'
|
||||||
|
matrix_mautrix_telegram_container_http_monitoring_host_bind_port: 9401
|
||||||
|
matrix_mautrix_telegram_container_http_host_bind_port_public: 8980
|
||||||
|
matrix_mautrix_telegram_container_extra_arguments:
|
||||||
|
- "-p 127.0.0.1:{{ matrix_mautrix_telegram_container_http_monitoring_host_bind_port }}:{{ matrix_mautrix_telegram_container_http_monitoring_host_bind_port }}"
|
||||||
|
- "-p 127.0.0.1:{{ matrix_mautrix_telegram_container_http_host_bind_port_public }}:80"
|
||||||
|
matrix_mautrix_telegram_configuration_extension_yaml: |
|
||||||
|
bridge:
|
||||||
|
displayname_template: "{displayname} (via Telegram)"
|
||||||
|
parallel_file_transfer: false
|
||||||
|
inline_images: false
|
||||||
|
image_as_file_size: 20
|
||||||
|
delivery_receipts: true
|
||||||
|
login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret }}"
|
||||||
|
animated_sticker:
|
||||||
|
target: webm
|
||||||
|
encryption:
|
||||||
|
allow: true
|
||||||
|
default: true
|
||||||
|
permissions:
|
||||||
|
"@transcaffeine:finallycoffee.eu": "admin"
|
||||||
|
"gruenhage.xyz": "full"
|
||||||
|
"boobies.software": "full"
|
||||||
|
logging:
|
||||||
|
root:
|
||||||
|
level: INFO
|
||||||
|
metrics:
|
||||||
|
enabled: true
|
||||||
|
listen_port: {{ matrix_mautrix_telegram_container_http_monitoring_host_bind_port }}
|
||||||
|
# permissions: "{{ vault_matrix_mautrix_telegram_permission_map | from_yaml }}"
|
||||||
|
|
||||||
|
|
||||||
|
#
|
||||||
|
# mautrix-signal config
|
||||||
|
#
|
||||||
|
matrix_mautrix_signal_enabled: true
|
||||||
|
matrix_mautrix_signal_container_http_monitoring_host_bind_port: 9408
|
||||||
|
matrix_mautrix_signal_container_extra_arguments:
|
||||||
|
- "-p 127.0.0.1:{{ matrix_mautrix_signal_container_http_monitoring_host_bind_port }}:{{ matrix_mautrix_signal_container_http_monitoring_host_bind_port }}"
|
||||||
|
matrix_mautrix_signal_configuration_extension_yaml: |
|
||||||
|
bridge:
|
||||||
|
displayname_template: "{displayname} (via Signal)"
|
||||||
|
community_id: "+signal:finallycoffee.eu"
|
||||||
|
encryption:
|
||||||
|
allow: true
|
||||||
|
default: true
|
||||||
|
key_sharing:
|
||||||
|
allow: true
|
||||||
|
require_verification: false
|
||||||
|
delivery_receipts: true
|
||||||
|
permissions:
|
||||||
|
"@ilosai:fairydust.space": "user"
|
||||||
|
logging:
|
||||||
|
root:
|
||||||
|
level: INFO
|
||||||
|
metrics:
|
||||||
|
enabled: true
|
||||||
|
listen_port: {{ matrix_mautrix_signal_container_http_monitoring_host_bind_port }}
|
||||||
|
|
||||||
|
|
||||||
|
#
|
||||||
|
# mx-puppet-instagram configuration
|
||||||
|
#
|
||||||
|
matrix_mx_puppet_instagram_enabled: true
|
||||||
|
matrix_mx_puppet_instagram_container_http_monitoring_host_bind_port: 9403
|
||||||
|
matrix_mx_puppet_instagram_container_extra_arguments:
|
||||||
|
- "-p 127.0.0.1:{{ matrix_mx_puppet_instagram_container_http_monitoring_host_bind_port }}:{{ matrix_mx_puppet_instagram_container_http_monitoring_host_bind_port }}"
|
||||||
|
matrix_mx_puppet_instagram_configuration_extension_yaml: |
|
||||||
|
bridge:
|
||||||
|
enableGroupSync: true
|
||||||
|
avatarUrl: mxc://finallycoffee.eu/acmiSAinuHDOULofFFeolTvr
|
||||||
|
metrics:
|
||||||
|
enabled: true
|
||||||
|
port: {{ matrix_mx_puppet_instagram_container_http_monitoring_host_bind_port }}
|
||||||
|
path: /metrics
|
||||||
|
presence:
|
||||||
|
enabled: true
|
||||||
|
interval: 3000
|
||||||
|
|
||||||
|
|
||||||
|
#
|
||||||
|
# mx-puppet-discord configuration
|
||||||
|
#
|
||||||
|
matrix_mx_puppet_discord_enabled: false
|
||||||
|
matrix_mx_puppet_discord_client_id: "{{ vault_matrix_mx_puppet_discord_client_id }}"
|
||||||
|
matrix_mx_puppet_discord_client_secret: "{{ vault_matrix_mx_puppet_discord_client_secret }}"
|
||||||
|
matrix_mx_puppet_discord_container_http_monitoring_host_bind_port: 9404
|
||||||
|
matrix_mx_puppet_discord_container_extra_arguments:
|
||||||
|
- "-p 127.0.0.1:{{ matrix_mx_puppet_discord_container_http_monitoring_host_bind_port }}:{{ matrix_mx_puppet_discord_container_http_monitoring_host_bind_port }}"
|
||||||
|
matrix_mx_puppet_discord_configuration_extension_yaml: |
|
||||||
|
bridge:
|
||||||
|
enableGroupSync: true
|
||||||
|
avatarUrl: mxc://finallycoffee.eu/BxcAAhjXmglMbtthStEHtCzd
|
||||||
|
metrics:
|
||||||
|
enabled: true
|
||||||
|
port: {{ matrix_mx_puppet_discord_container_http_monitoring_host_bind_port }}
|
||||||
|
path: /metrics
|
||||||
|
limits:
|
||||||
|
maxAutojoinUsers: 500
|
||||||
|
roomUserAutojoinDelay: 50
|
||||||
|
presence:
|
||||||
|
enabled: true
|
||||||
|
interval: 3000
|
||||||
|
|
||||||
|
|
||||||
|
#
|
||||||
|
# mx-puppet-slack configuration
|
||||||
|
#
|
||||||
|
matrix_mx_puppet_slack_enabled: true
|
||||||
|
matrix_mx_puppet_slack_client_id: "{{ vault_matrix_mx_puppet_slack_client_id }}"
|
||||||
|
matrix_mx_puppet_slack_client_secret: "{{ vault_matrix_mx_puppet_slack_client_secret }}"
|
||||||
|
matrix_mx_puppet_slack_oauth_redirect_path: '/bridge/slack/oauth'
|
||||||
|
matrix_mx_puppet_slack_container_http_auth_host_bind_port: 8981
|
||||||
|
matrix_mx_puppet_slack_container_http_monitoring_host_bind_port: 9406
|
||||||
|
matrix_mx_puppet_slack_container_extra_arguments:
|
||||||
|
- "-p 127.0.0.1:{{ matrix_mx_puppet_slack_container_http_monitoring_host_bind_port }}:{{ matrix_mx_puppet_slack_container_http_monitoring_host_bind_port }}"
|
||||||
|
- "-p 127.0.0.1:{{ matrix_mx_puppet_slack_container_http_auth_host_bind_port }}:8008"
|
||||||
|
matrix_mx_puppet_slack_configuration_extension_yaml: |
|
||||||
|
bridge:
|
||||||
|
enableGroupSync: true
|
||||||
|
metrics:
|
||||||
|
enabled: true
|
||||||
|
port: {{ matrix_mx_puppet_slack_container_http_monitoring_host_bind_port }}
|
||||||
|
path: /metrics
|
||||||
|
limits:
|
||||||
|
maxAutojoinUsers: 500
|
||||||
|
roomUserAutojoinDelay: 50
|
||||||
|
presence:
|
||||||
|
enabled: true
|
||||||
|
interval: 3000
|
||||||
|
|
||||||
|
|
||||||
|
#
|
||||||
|
# Element web configuration
|
||||||
|
#
|
||||||
|
# Branding config
|
||||||
|
matrix_client_element_brand: "Chat"
|
||||||
|
matrix_client_element_default_theme: "dark"
|
||||||
|
matrix_client_element_themes_enabled: true
|
||||||
|
matrix_client_element_welcome_headline: "Welcome to chat.finallycoffee.eu"
|
||||||
|
matrix_client_element_welcome_text: |
|
||||||
|
Decentralised, encrypted chat & collaboration,<br />
|
||||||
|
hosted on finallycoffee.eu, powered by element.io &
|
||||||
|
<a href="https://matrix.org" target="_blank" rel="noreferrer noopener">
|
||||||
|
<img width="79" height="34" alt="[matrix]" style="padding-left: 1px;vertical-align: middle" src="welcome/images/matrix.svg" />
|
||||||
|
</a>
|
||||||
|
matrix_client_element_welcome_logo: "welcome/images/logo.png"
|
||||||
|
matrix_client_element_welcome_logo_link: "https://{{ matrix_domain }}"
|
||||||
|
matrix_client_element_branding_auth_header_logo_url: "welcome/images/logo.png"
|
||||||
|
matrix_client_element_branding_welcome_background_url: "welcome/images/background.jpg"
|
||||||
|
matrix_client_element_container_extra_arguments:
|
||||||
|
- "-v {{ matrix_client_element_data_path }}/background.jpg:/app/{{ matrix_client_element_branding_welcome_background_url }}:ro"
|
||||||
|
- "-v {{ matrix_client_element_data_path }}/logo.png:/app/{{ matrix_client_element_branding_auth_header_logo_url }}:ro"
|
||||||
|
# Integration and capabilites config
|
||||||
|
matrix_client_element_integrations_ui_url: "https://{{ matrix_server_fqn_dimension }}/element"
|
||||||
|
matrix_client_element_integrations_rest_url: "https://{{ matrix_server_fqn_dimension }}/api/v1/scalar"
|
||||||
|
matrix_client_element_integrations_widgets_urls:
|
||||||
|
- "https://{{ matrix_server_fqn_dimension }}/widgets"
|
||||||
|
- "https://scalar.vector.im/api"
|
||||||
|
matrix_client_element_integrations_jitsi_widget_url: "https://{{ matrix_server_fqn_dimension }}/widgets/jitsi"
|
||||||
|
matrix_client_element_disable_custom_urls: false
|
||||||
|
matrix_client_element_room_directory_servers:
|
||||||
|
- "matrix.org"
|
||||||
|
- "finallycoffee.eu"
|
||||||
|
- "entropia.de"
|
||||||
|
matrix_client_element_enable_presence_by_hs_url:
|
||||||
|
https://matrix.org: false
|
||||||
|
|
||||||
|
|
||||||
|
# Matrix ma1sd extended configuration
|
||||||
|
matrix_ma1sd_configuration_extension_yaml: |
|
||||||
|
hashing:
|
||||||
|
enabled: true
|
||||||
|
pepperLength: 20
|
||||||
|
rotationPolicy: per_requests
|
||||||
|
requests: 10
|
||||||
|
hashStorageType: sql
|
||||||
|
algorithms:
|
||||||
|
- none
|
||||||
|
- sha256
|
||||||
|
|
||||||
|
|
||||||
|
# Matrix mail notification relay setup
|
||||||
|
exim_relay_enabled: true
|
||||||
|
exim_relay_sender_address: "Matrix on finallycoffee.eu <system-matrix@{{ matrix_domain }}>"
|
||||||
|
exim_relay_relay_use: true
|
||||||
|
exim_relay_relay_host_name: "{{ vault_matrix_mailer_relay_host_name }}"
|
||||||
|
exim_relay_relay_host_port: 587
|
||||||
|
exim_relay_relay_auth: true
|
||||||
|
exim_relay_relay_auth_username: "{{ vault_matrix_mailer_relay_auth_username }}"
|
||||||
|
exim_relay_relay_auth_password: "{{ vault_matrix_mailer_relay_auth_password }}"
|
||||||
100
inventory/host_vars/matrix.finallycoffee.eu/vault.yml
Normal file
100
inventory/host_vars/matrix.finallycoffee.eu/vault.yml
Normal file
@ -0,0 +1,100 @@
|
|||||||
|
$ANSIBLE_VAULT;1.1;AES256
|
||||||
|
39366364363633336238333130353832663162393038633665396333343732353964333363666539
|
||||||
|
6562346632343235623835643735386434316666393234360a383634616537393134613631383836
|
||||||
|
61333835363666623033306166376232303930306433343366373463653234623736643633383734
|
||||||
|
3330333665383539650a383132353032386230393031626361343764323034386230363066306331
|
||||||
|
34646236336262623435633566363033613737373064616266336237343233663066396163373034
|
||||||
|
62303765353066653737366539626461636531636438323932333134363136363134646164646531
|
||||||
|
63656638666233313437663261396665653736373164323433306435323336633938313164646264
|
||||||
|
33653661633965363833393031616463633761356234633630643562306366653133366637346166
|
||||||
|
38636433343736343461613731623538633361363934343764326466313261353633646230353065
|
||||||
|
37366134303164356433333961346663313963626165323966656536313532376162326565383539
|
||||||
|
65363333633964323838663461373666353665643236623839646664653661613838353239613137
|
||||||
|
39353061323131306365656261343630313665356165623064616436653566373663343733316237
|
||||||
|
34393666383465323463313838393465643830373632373938633763666636346539666233303265
|
||||||
|
38353337633833373331356663633936326334366337393135653030333531613565643666633038
|
||||||
|
64393862303765366632393137313432376563353335353231323464633637343334346634306534
|
||||||
|
35613330373336633031376263306466306437656635396133613335386130346163663438386136
|
||||||
|
61646437343938663431343736363564376238316666373531616231366132643864346538363866
|
||||||
|
35396433366137356162313963666134383134306462313336613735386639363936326131383939
|
||||||
|
66623833643433663039623837623133303336666233623935313438366136353332313165333936
|
||||||
|
31386632336535383533646639636164313331346630633366383739623261366465656632393062
|
||||||
|
63373332623738303364623437666531396331646666336230353333366261653438363861656466
|
||||||
|
39333762633037383336393164616563396564383232636533363864636230616664303330323932
|
||||||
|
66666234633362346132303932643464366466323535303835363430333737666661373534333934
|
||||||
|
61393362616438626636383564613335363634626231663234616438343464383461303632363033
|
||||||
|
39336362396339316661323662393665383031643931626333646335643335353661653939363538
|
||||||
|
38666561313539613566386132336630643237333432656236356132616230663561343665353938
|
||||||
|
33366663353834356434366335373265373439363430636533303933656264366338623232613435
|
||||||
|
35356662383232386137313064313363303861326635333435393737643663336534363234623430
|
||||||
|
32376432353330613666396337303935376366613564353039396164383361616337656535346166
|
||||||
|
34396635356266326461613135303639643935363261396363636338636564643838313262326266
|
||||||
|
31663139343336376233303637373864363835313839326433656235616332333134306139623239
|
||||||
|
37636639356263646437373362333931613262363363313462666534643765313139386461623731
|
||||||
|
33376635653133353033333733613464396632636634313063326363313030376632643863336237
|
||||||
|
61636638353237313764313435626463633964643665313536326235343639663137373436303564
|
||||||
|
30636232626137376339303238653664346538356430306238633037366332316263623666373062
|
||||||
|
63646533646131303466653637346463613237323161313265613834383634626237323563653733
|
||||||
|
38656435303264346663663465333966376631666530333833353233376263336436613065366362
|
||||||
|
36366263343438393132326661623031316663663231663464383732343064383234616636306530
|
||||||
|
66613634626362316533303034393063666632343262613431613635663866636433623535363238
|
||||||
|
30643933613731363236346234336662613633323831633437613435326465383530653765616262
|
||||||
|
63373538396364316563343365303134373466663639386137663564356532353531343636613135
|
||||||
|
63316463353264316164306566326462333732316431643939626161346530636638636662303037
|
||||||
|
34346461313961613063336332333934383363373335616636363661396362613661383762663866
|
||||||
|
64303834636264376461396266663763336665356561376161333136336638646363313133353161
|
||||||
|
31643061623833623239373432633537663664636334623534326639616633616361333834366131
|
||||||
|
30376361656238353332656666316637643133623433333861653265636266376639666135383638
|
||||||
|
37363337326231656530363536393737383565666266306532626361633633353539363866376534
|
||||||
|
61303737326632303762626666306134343837376566343035386663613336626332383035383035
|
||||||
|
37633462373066373062313862323766316362393832666466396637363562353865303366323062
|
||||||
|
39346332383966313437646138623364656234663066663639663138626163656433363038323166
|
||||||
|
65613862386665643438323061323763306635666162303366323131363436633335356332393366
|
||||||
|
63373966383132303434633835333438333337303664346335643066623839343835643364306561
|
||||||
|
34643336346564363462396330643263653931376664386335313433376332653832323437376135
|
||||||
|
35383231386133363236653334393433306638303131323064343931623538323130343666653061
|
||||||
|
36353536383632333964343730346265626433303131346531303133663832363036333261386237
|
||||||
|
30363361356265356139323761623563396565336137333733656431636531333234323061343862
|
||||||
|
33623935346663333735613661363234646234356331323636386637343661373363363261646231
|
||||||
|
33643233343235323230393933616664623166666266333862323631653835666135303233653635
|
||||||
|
63373061656163353762636531613632366638383366303864343132376162643963366564363563
|
||||||
|
61336338613935613532636165383463633866633036393533313433643562313737383431353163
|
||||||
|
37623165373933376236393931363939633963666636303136373065376635623761346537643530
|
||||||
|
35363464313630376233633863306238616138666464316534363332333937343362343233346431
|
||||||
|
34643032323934353939666364323239653932363735373061633434653062326336353239633261
|
||||||
|
38306237336266663038656534393664646138343038323335633064616431386666613739326630
|
||||||
|
34383963666534313530376331366238343836303036306336343533666332386163643033643138
|
||||||
|
33336333333338353733383165306139623964303035653439623131633566356136386431613135
|
||||||
|
63616462386639303230343866346631346532353531373132613433363239646330653666633532
|
||||||
|
65393766333238383531313132633537633833363335303630376239396565373730646331313633
|
||||||
|
30383861303739343265623934643635633361623262356433323035393062353630346430646262
|
||||||
|
63303434353038646361353661616339313937323336303566303536366163623362356332383862
|
||||||
|
37326333393761633732653264646333653439363039323238383361336233323232613336303464
|
||||||
|
34393635633131313135313665363161306466643364393734346264633030373234306466653862
|
||||||
|
32336163666435636162343465386633653863363533616339636531306130383331376563393533
|
||||||
|
65366136626662343065383164646665613035393636373565346235656439303933343563366339
|
||||||
|
36643838393033353033396535613331303031646162316361613564323163633434633861356135
|
||||||
|
62343461616335323565636633383962316531316362396165366533346166336163623232366261
|
||||||
|
39376230376562626135346333326437373733373266393236383435343562653034313133376236
|
||||||
|
61666138346562613330633630373837653465393233613261353937336666646231366666393335
|
||||||
|
35393463333936323664323831396639333462626238613164616435363664643438653763623431
|
||||||
|
32663237363134353061373563396535653565636431366565386337653863316333343738343432
|
||||||
|
62303132636338303462313439376535363063333833363632613832303436353834376561333330
|
||||||
|
66633632383135646263626333643230343630326539663762633934316261633062663732373932
|
||||||
|
30306438386263626335373838343236643562326135663366353638353163346365396261313133
|
||||||
|
36333634306133353235316237343738623263333732343063356238333162323931346664346539
|
||||||
|
66323733643061386334306130633537353630663336313966663538373963313435666564316539
|
||||||
|
63613030366332363432303036396232306537663765653938353736376135316539613135623632
|
||||||
|
66356639623635663365323635646635383638346539323438336261393332373935383536333831
|
||||||
|
61306639343061333639336162366536366438356166396266666132303932333037613632623666
|
||||||
|
63616662343830303664353931306632323630316162643432653835313962633735626163366332
|
||||||
|
34373637633066333432383533316363613031393963373963386161663430623533383165653561
|
||||||
|
38343439633066366663643138326264653539336530393932386236366533663935353664343966
|
||||||
|
39323161646231353234633961633732613065323039663062313661386565366534623430356632
|
||||||
|
64343732336238393262363338363734643639353830646163343361653761633134303163616562
|
||||||
|
35633436393832393137383534613031303963613339333566343065336530623964636662353065
|
||||||
|
32366630353538383339346465376661323666333234373665613164633866363364613066643034
|
||||||
|
37616630366232353166366535633936366536626462353831643335306337353564316461653564
|
||||||
|
66663133373466333431336366346435623436656230376232613665633466333463636263373464
|
||||||
|
30386434336538303061666566383033616563303564666362346432663130306531613063363537
|
||||||
|
646635613236636563666161666630653836
|
||||||
24
inventory/hosts
Normal file
24
inventory/hosts
Normal file
@ -0,0 +1,24 @@
|
|||||||
|
$ANSIBLE_VAULT;1.1;AES256
|
||||||
|
37366366376266633033656235333633346134336666323465356666353363323130366365393534
|
||||||
|
3365373534643965613139656465323663393862336163640a623663366631323035346632353030
|
||||||
|
37396264356137336535363663323935646464333138653035623562346438643139323439366132
|
||||||
|
3364356364353738660a616638393635333938373838316631396536386134333831613831343732
|
||||||
|
39333066363566643864343661646633326134633039316636306332303063366665373638353735
|
||||||
|
34386339633566663038613538316233306238383734623363623666346261336562663039373264
|
||||||
|
31313061616432643761633139643039636164613136643264663131666166646531366335346164
|
||||||
|
34303339393334616434633736383763653035386333363137336431363034653263306261646661
|
||||||
|
37323563373436333736633836666563646162303232393932346430373039346431356166393930
|
||||||
|
37616639333038653936633163323139396666303638663039623633633832333737633764643863
|
||||||
|
61383763613865323061636662663837656339373335643066333964393362303766366533303332
|
||||||
|
63646335356639366130393530373936636330633132356639626531303839656166346263613733
|
||||||
|
31333362316537323934306434393630656161353465636434303538643835396361613563663437
|
||||||
|
34383765626235356530396433643037306233663263623664636163326132316237386231323165
|
||||||
|
65643235356434626161396136303563633836313961343664653339623862633338313963333237
|
||||||
|
63663961636661383634343532356234626531373938313164373561386139366338393066623036
|
||||||
|
36633137623361626161313961386630623635323336353036623165316632353333383162623531
|
||||||
|
61353138613030343636326166303762656264643834396330313563616439323265333039323566
|
||||||
|
64356538346662613836356462613536656636373065643734346166353466363266353939393535
|
||||||
|
66333739623735656463373530646663303535643562363534306438323135353763303363376135
|
||||||
|
37653566306461396563333135633235626130313231636165383438376237383663373939353637
|
||||||
|
30366661303131333438376363366131613361326635366264363064633034376230353137663030
|
||||||
|
346238306532363635623732396366633538
|
||||||
@ -204,6 +204,8 @@ matrix_mautrix_telegram_configuration_extension: "{{ matrix_mautrix_telegram_con
|
|||||||
# You most likely don't need to touch this variable. Instead, see `matrix_mautrix_telegram_configuration_yaml`.
|
# You most likely don't need to touch this variable. Instead, see `matrix_mautrix_telegram_configuration_yaml`.
|
||||||
matrix_mautrix_telegram_configuration: "{{ matrix_mautrix_telegram_configuration_yaml | from_yaml | combine(matrix_mautrix_telegram_configuration_extension, recursive=True) }}"
|
matrix_mautrix_telegram_configuration: "{{ matrix_mautrix_telegram_configuration_yaml | from_yaml | combine(matrix_mautrix_telegram_configuration_extension, recursive=True) }}"
|
||||||
|
|
||||||
|
matrix_mautrix_telegram_sender_localpart: "telegrambot"
|
||||||
|
|
||||||
matrix_mautrix_telegram_registration_yaml: |
|
matrix_mautrix_telegram_registration_yaml: |
|
||||||
id: telegram
|
id: telegram
|
||||||
as_token: "{{ matrix_mautrix_telegram_appservice_token }}"
|
as_token: "{{ matrix_mautrix_telegram_appservice_token }}"
|
||||||
@ -222,6 +224,7 @@ matrix_mautrix_telegram_registration_yaml: |
|
|||||||
url: {{ matrix_mautrix_telegram_appservice_address }}
|
url: {{ matrix_mautrix_telegram_appservice_address }}
|
||||||
rate_limited: false
|
rate_limited: false
|
||||||
de.sorunome.msc2409.push_ephemeral: true
|
de.sorunome.msc2409.push_ephemeral: true
|
||||||
|
# sender_localpart: "bridges_{{ matrix_mautrix_telegram_sender_localpart }}"
|
||||||
|
|
||||||
matrix_mautrix_telegram_registration: "{{ matrix_mautrix_telegram_registration_yaml | from_yaml }}"
|
matrix_mautrix_telegram_registration: "{{ matrix_mautrix_telegram_registration_yaml | from_yaml }}"
|
||||||
|
|
||||||
|
|||||||
@ -70,7 +70,7 @@ namePatterns:
|
|||||||
#
|
#
|
||||||
# name: username of the user
|
# name: username of the user
|
||||||
# discriminator: hashtag of the user (ex. #1234)
|
# discriminator: hashtag of the user (ex. #1234)
|
||||||
user: :name
|
user: ":name (#:discriminator) (via Discord)"
|
||||||
|
|
||||||
# A user's guild-specific displayname - if they've set a custom nick in
|
# A user's guild-specific displayname - if they've set a custom nick in
|
||||||
# a guild
|
# a guild
|
||||||
@ -82,7 +82,7 @@ namePatterns:
|
|||||||
# displayname: the user's custom group-specific nick
|
# displayname: the user's custom group-specific nick
|
||||||
# channel: the name of the channel
|
# channel: the name of the channel
|
||||||
# guild: the name of the guild
|
# guild: the name of the guild
|
||||||
userOverride: :name
|
userOverride: ":displayname (:name#:discriminator) (via Discord)"
|
||||||
|
|
||||||
# Room names for bridged Discord channels
|
# Room names for bridged Discord channels
|
||||||
#
|
#
|
||||||
@ -90,7 +90,7 @@ namePatterns:
|
|||||||
#
|
#
|
||||||
# name: name of the channel
|
# name: name of the channel
|
||||||
# guild: name of the guild
|
# guild: name of the guild
|
||||||
room: :name
|
room: "#:name (:guild on Discord)"
|
||||||
|
|
||||||
# Group names for bridged Discord servers
|
# Group names for bridged Discord servers
|
||||||
#
|
#
|
||||||
|
|||||||
@ -90,6 +90,19 @@
|
|||||||
- {src: "{{ matrix_client_element_embedded_pages_home_path }}", name: "home.html"}
|
- {src: "{{ matrix_client_element_embedded_pages_home_path }}", name: "home.html"}
|
||||||
when: "item.src is not none"
|
when: "item.src is not none"
|
||||||
|
|
||||||
|
- name: Copy Element costum files
|
||||||
|
copy:
|
||||||
|
src: "{{ item.src }}"
|
||||||
|
dest: "{{ matrix_client_element_data_path }}/{{ item.name }}"
|
||||||
|
mode: 0644
|
||||||
|
owner: "{{ matrix_user_username }}"
|
||||||
|
group: "{{ matrix_user_groupname }}"
|
||||||
|
with_items:
|
||||||
|
- {src: "{{ role_path }}/files/background.jpg", name: "background.jpg"}
|
||||||
|
- {src: "{{ role_path }}/files/antifa_coffee_cups.png", name: "logo.png"}
|
||||||
|
when: false
|
||||||
|
#when: "matrix_client_element_enabled|bool and item.src is not none"
|
||||||
|
|
||||||
- name: Ensure Element config files removed
|
- name: Ensure Element config files removed
|
||||||
ansible.builtin.file:
|
ansible.builtin.file:
|
||||||
path: "{{ matrix_client_element_data_path }}/{{ item.name }}"
|
path: "{{ matrix_client_element_data_path }}/{{ item.name }}"
|
||||||
|
|||||||
@ -33,7 +33,7 @@ h1::after {
|
|||||||
}
|
}
|
||||||
|
|
||||||
.mx_Logo {
|
.mx_Logo {
|
||||||
height: 54px;
|
height: 92px;
|
||||||
margin-top: 2px;
|
margin-top: 2px;
|
||||||
}
|
}
|
||||||
|
|
||||||
|
|||||||
@ -2875,6 +2875,16 @@ federation_sender_instances: {{ matrix_synapse_federation_sender_instances | to_
|
|||||||
pusher_instances: {{ matrix_synapse_federation_pusher_instances | to_json }}
|
pusher_instances: {{ matrix_synapse_federation_pusher_instances | to_json }}
|
||||||
{% endif %}
|
{% endif %}
|
||||||
|
|
||||||
|
#{% for i in range(0, matrix_synapse_workers_federation_sender_workers_count|int)|list %}
|
||||||
|
# - federation_sender:{{ i | int }}
|
||||||
|
#{% endfor %}
|
||||||
|
#{% endif %}
|
||||||
|
|
||||||
|
#{% for i in range(0, matrix_synapse_workers_federation_sender_workers_count|int)|list %}
|
||||||
|
# - federation_sender:{{ i | int }}
|
||||||
|
#{% endfor %}
|
||||||
|
#{% endif %}
|
||||||
|
|
||||||
# When using workers this should be a map from `worker_name` to the
|
# When using workers this should be a map from `worker_name` to the
|
||||||
# HTTP replication listener of the worker, if configured.
|
# HTTP replication listener of the worker, if configured.
|
||||||
#
|
#
|
||||||
|
|||||||
BIN
roles/matrix-client-element/files/antifa_coffee_cups.png
Normal file
BIN
roles/matrix-client-element/files/antifa_coffee_cups.png
Normal file
Binary file not shown.
|
After Width: | Height: | Size: 188 KiB |
BIN
roles/matrix-client-element/files/background.jpg
Normal file
BIN
roles/matrix-client-element/files/background.jpg
Normal file
Binary file not shown.
|
After Width: | Height: | Size: 2.1 MiB |
BIN
roles/matrix-client-element/files/background_small.jpg
Normal file
BIN
roles/matrix-client-element/files/background_small.jpg
Normal file
Binary file not shown.
|
After Width: | Height: | Size: 747 KiB |
BIN
roles/matrix-riot-web/files/antifa_coffee_cups.png
Normal file
BIN
roles/matrix-riot-web/files/antifa_coffee_cups.png
Normal file
Binary file not shown.
|
After Width: | Height: | Size: 188 KiB |
BIN
roles/matrix-riot-web/files/background.jpg
Normal file
BIN
roles/matrix-riot-web/files/background.jpg
Normal file
Binary file not shown.
|
After Width: | Height: | Size: 2.1 MiB |
@ -157,3 +157,4 @@
|
|||||||
- install-all
|
- install-all
|
||||||
|
|
||||||
- role: galaxy/playbook_runtime_messages
|
- role: galaxy/playbook_runtime_messages
|
||||||
|
|
||||||
|
|||||||
106
templates/Caddyfile.j2
Normal file
106
templates/Caddyfile.j2
Normal file
@ -0,0 +1,106 @@
|
|||||||
|
https://{{ matrix_server_fqn_matrix }} {
|
||||||
|
tls /tls_certs/finallycoffee.eu/fullchain.pem /tls_certs/finallycoffee.eu/privkey.pem
|
||||||
|
encode zstd gzip
|
||||||
|
header {
|
||||||
|
Strict-Transport-Security "max-age=31536000;"
|
||||||
|
X-Frame-Options "DENY"
|
||||||
|
X-XSS-Protection "1; mode=block"
|
||||||
|
}
|
||||||
|
basicauth /metrics/* bcrypt monitoring {
|
||||||
|
monitoring JDJhJDE0JGdQRlNHVFpSQmRiaWlPem9LdXlkS09HN2E3LklZS05YZmtXTEY1NlFXbkMxd3hBUmwwbVZl
|
||||||
|
}
|
||||||
|
route /metrics/synapse {
|
||||||
|
uri replace /metrics/synapse /metrics/synapse/main-process
|
||||||
|
reverse_proxy * http://{{ matrix_nginx_proxy_container_http_host_bind_port }}
|
||||||
|
}
|
||||||
|
route /metrics/synapse/worker/appservice {
|
||||||
|
uri replace /metrics/synapse/worker/appservice /metrics/synapse/worker/appservice-0
|
||||||
|
reverse_proxy * http://{{ matrix_nginx_proxy_container_http_host_bind_port }}
|
||||||
|
}
|
||||||
|
route /metrics/synapse/worker/federation-sender-0 {
|
||||||
|
uri replace /metrics/synapse/worker/federation-sender-0 /metrics/synapse/worker/federation-sender-0
|
||||||
|
reverse_proxy * http://{{ matrix_nginx_proxy_container_http_host_bind_port }}
|
||||||
|
}
|
||||||
|
route /metrics/synapse/worker/federation-sender-1 {
|
||||||
|
uri replace /metrics/synapse/worker/federation-sender-1 /metrics/synapse/worker/federation-sender-1
|
||||||
|
reverse_proxy * http://{{ matrix_nginx_proxy_container_http_host_bind_port }}
|
||||||
|
}
|
||||||
|
route /metrics/synapse/worker/federation-sender-2 {
|
||||||
|
uri replace /metrics/synapse/worker/federation-sender-2 /metrics/synapse/worker/federation-sender-2
|
||||||
|
reverse_proxy * http://{{ matrix_nginx_proxy_container_http_host_bind_port }}
|
||||||
|
}
|
||||||
|
route /metrics/synapse/worker/generic-0 {
|
||||||
|
uri replace /metrics/synapse/worker/generic-0 /metrics/synapse/worker/generic-worker-0
|
||||||
|
reverse_proxy * http://{{ matrix_nginx_proxy_container_http_host_bind_port }}
|
||||||
|
}
|
||||||
|
route /metrics/synapse/worker/generic-1 {
|
||||||
|
uri replace /metrics/synapse/worker/generic-1 /metrics/synapse/worker/generic-worker-1
|
||||||
|
reverse_proxy * http://{{ matrix_nginx_proxy_container_http_host_bind_port }}
|
||||||
|
}
|
||||||
|
route /metrics/synapse/worker/media-0 {
|
||||||
|
uri replace /metrics/synapse/worker/media-0 /metrics/synapse/worker/media-repository-0
|
||||||
|
reverse_proxy * http://{{ matrix_nginx_proxy_container_http_host_bind_port }}
|
||||||
|
}
|
||||||
|
route /metrics/synapse/worker/media-1 {
|
||||||
|
uri replace /metrics/synapse/worker/media-1 /metrics/synapse/worker/media-repository-1
|
||||||
|
reverse_proxy * http://{{ matrix_nginx_proxy_container_http_host_bind_port }}
|
||||||
|
}
|
||||||
|
route /metrics/bridge/* {
|
||||||
|
uri strip_prefix /metrics/bridge
|
||||||
|
route /mautrix-telegram {
|
||||||
|
uri replace /mautrix-telegram /metrics
|
||||||
|
reverse_proxy http://127.0.0.1:{{ matrix_mautrix_telegram_container_http_monitoring_host_bind_port }}
|
||||||
|
}
|
||||||
|
route /mautrix-whatsapp {
|
||||||
|
uri replace /mautrix-whatsapp /metrics
|
||||||
|
reverse_proxy http://127.0.0.1:{{ matrix_mautrix_whatsapp_container_http_monitoring_host_bind_port }}
|
||||||
|
}
|
||||||
|
route /mautrix-signal {
|
||||||
|
uri replace /mautrix-signal /metrics
|
||||||
|
reverse_proxy http://127.0.0.1:{{ matrix_mautrix_signal_container_http_monitoring_host_bind_port }}
|
||||||
|
}
|
||||||
|
route /mx-puppet-instagram {
|
||||||
|
uri replace /mx-puppet-instagram /metrics
|
||||||
|
reverse_proxy http://127.0.0.1:{{ matrix_mx_puppet_instagram_container_http_monitoring_host_bind_port }}
|
||||||
|
}
|
||||||
|
route /mx-puppet-discord {
|
||||||
|
uri replace /mx-puppet-discord /metrics
|
||||||
|
reverse_proxy http://127.0.0.1:{{ matrix_mx_puppet_discord_container_http_monitoring_host_bind_port }}
|
||||||
|
}
|
||||||
|
route /mx-puppet-slack {
|
||||||
|
uri replace /mx-puppet-slack /metrics
|
||||||
|
reverse_proxy http://127.0.0.1:{{ matrix_mx_puppet_slack_container_http_monitoring_host_bind_port }}
|
||||||
|
}
|
||||||
|
}
|
||||||
|
reverse_proxy /_matrix/federation/* http://{{ matrix_playbook_public_matrix_federation_api_traefik_entrypoint_host_bind_port }}
|
||||||
|
reverse_proxy /_matrix/key/* http://{{ matrix_playbook_public_matrix_federation_api_traefik_entrypoint_host_bind_port }}
|
||||||
|
reverse_proxy * http://{{ devture_traefik_container_web_host_bind_port }}
|
||||||
|
}
|
||||||
|
|
||||||
|
https://{{ matrix_server_fqn_dimension }} {
|
||||||
|
tls /tls_certs/finallycoffee.eu/fullchain.pem /tls_certs/finallycoffee.eu/privkey.pem
|
||||||
|
encode zstd gzip
|
||||||
|
reverse_proxy * http://{{ matrix_nginx_proxy_container_http_host_bind_port }}
|
||||||
|
}
|
||||||
|
|
||||||
|
https://{{ matrix_server_fqn_element }} {
|
||||||
|
tls /tls_certs/chat.finallycoffee.eu/fullchain.pem /tls_certs/chat.finallycoffee.eu/privkey.pem
|
||||||
|
encode zstd gzip
|
||||||
|
reverse_proxy * http://{{ matrix_nginx_proxy_container_http_host_bind_port }}
|
||||||
|
}
|
||||||
|
|
||||||
|
https://{{ matrix_domain }}/.well-known/matrix/* {
|
||||||
|
tls /tls_certs/finallycoffee.eu/fullchain.pem /tls_certs/finallycoffee.eu/privkey.pem
|
||||||
|
route {
|
||||||
|
uri strip_prefix /.well-known/matrix
|
||||||
|
root * /matrix_static
|
||||||
|
file_server
|
||||||
|
}
|
||||||
|
header {
|
||||||
|
Content-Type "application/json"
|
||||||
|
X-Content-Type-Options "nosniff"
|
||||||
|
Access-Control-Allow-Origin *
|
||||||
|
Access-Control-Allow-Methods "GET, POST, PUT, DELETE, OPTIONS"
|
||||||
|
Access-Control-Allow-Headers "Origin, X-Requested-With, Content-Type, Accept, Authorization"
|
||||||
|
}
|
||||||
|
}
|
||||||
Loading…
Reference in New Issue
Block a user