.config
.github
LICENSES
bin
collections
docs
examples
group_vars
i18n
bin
locales
translation-templates
docs
README.pot
alternative-architectures.pot
ansible.pot
configuring-captcha.pot
configuring-dns.pot
configuring-playbook-alertmanager-receiver.pot
configuring-playbook-appservice-double-puppet.pot
configuring-playbook-appservice-draupnir-for-all.pot
configuring-playbook-backup-borg.pot
configuring-playbook-base-domain-serving.pot
configuring-playbook-bot-baibot.pot
configuring-playbook-bot-buscarron.pot
configuring-playbook-bot-chatgpt.pot
configuring-playbook-bot-draupnir.pot
configuring-playbook-bot-go-neb.pot
configuring-playbook-bot-honoroit.pot
configuring-playbook-bot-matrix-registration-bot.pot
configuring-playbook-bot-matrix-reminder-bot.pot
configuring-playbook-bot-maubot.pot
configuring-playbook-bot-mjolnir.pot
configuring-playbook-bridge-appservice-discord.pot
configuring-playbook-bridge-appservice-irc.pot
configuring-playbook-bridge-appservice-kakaotalk.pot
configuring-playbook-bridge-appservice-slack.pot
configuring-playbook-bridge-appservice-webhooks.pot
configuring-playbook-bridge-beeper-linkedin.pot
configuring-playbook-bridge-go-skype-bridge.pot
configuring-playbook-bridge-heisenbridge.pot
configuring-playbook-bridge-hookshot.pot
configuring-playbook-bridge-matrix-bridge-sms.pot
configuring-playbook-bridge-mautrix-bridges.pot
configuring-playbook-bridge-mautrix-discord.pot
configuring-playbook-bridge-mautrix-facebook.pot
configuring-playbook-bridge-mautrix-gmessages.pot
configuring-playbook-bridge-mautrix-googlechat.pot
configuring-playbook-bridge-mautrix-hangouts.pot
configuring-playbook-bridge-mautrix-instagram.pot
configuring-playbook-bridge-mautrix-meta-instagram.pot
configuring-playbook-bridge-mautrix-meta-messenger.pot
configuring-playbook-bridge-mautrix-signal.pot
configuring-playbook-bridge-mautrix-slack.pot
configuring-playbook-bridge-mautrix-telegram.pot
configuring-playbook-bridge-mautrix-twitter.pot
configuring-playbook-bridge-mautrix-whatsapp.pot
configuring-playbook-bridge-mautrix-wsproxy.pot
configuring-playbook-bridge-mx-puppet-discord.pot
configuring-playbook-bridge-mx-puppet-groupme.pot
configuring-playbook-bridge-mx-puppet-instagram.pot
configuring-playbook-bridge-mx-puppet-skype.pot
configuring-playbook-bridge-mx-puppet-slack.pot
configuring-playbook-bridge-mx-puppet-steam.pot
configuring-playbook-bridge-mx-puppet-twitter.pot
configuring-playbook-bridge-postmoogle.pot
configuring-playbook-bridge-wechat.pot
configuring-playbook-cactus-comments.pot
configuring-playbook-client-cinny.pot
configuring-playbook-client-element-web.pot
configuring-playbook-client-hydrogen.pot
configuring-playbook-client-schildichat-web.pot
configuring-playbook-conduit.pot
configuring-playbook-conduwuit.pot
configuring-playbook-dendrite.pot
configuring-playbook-dimension.pot
configuring-playbook-dynamic-dns.pot
configuring-playbook-email.pot
configuring-playbook-email2matrix.pot
configuring-playbook-etherpad.pot
configuring-playbook-external-postgres.pot
configuring-playbook-federation.pot
configuring-playbook-jitsi.pot
configuring-playbook-ldap-auth.pot
configuring-playbook-ma1sd.pot
configuring-playbook-matrix-authentication-service.pot
configuring-playbook-matrix-corporal.pot
configuring-playbook-matrix-ldap-registration-proxy.pot
configuring-playbook-matrix-media-repo.pot
configuring-playbook-matrix-registration.pot
configuring-playbook-mautrix-bridges.pot
configuring-playbook-nginx.pot
configuring-playbook-ntfy.pot
configuring-playbook-own-webserver.pot
configuring-playbook-pantalaimon.pot
configuring-playbook-postgres-backup.pot
configuring-playbook-prometheus-grafana.pot
configuring-playbook-prometheus-nginxlog.pot
configuring-playbook-prometheus-postgres.pot
configuring-playbook-rageshake.pot
configuring-playbook-rest-auth.pot
configuring-playbook-riot-web.pot
configuring-playbook-s3-goofys.pot
configuring-playbook-s3.pot
configuring-playbook-shared-secret-auth.pot
configuring-playbook-sliding-sync-proxy.pot
configuring-playbook-ssl-certificates.pot
configuring-playbook-sygnal.pot
configuring-playbook-synapse-admin.pot
configuring-playbook-synapse-auto-accept-invite.pot
configuring-playbook-synapse-auto-compressor.pot
configuring-playbook-synapse-s3-storage-provider.pot
configuring-playbook-synapse-simple-antispam.pot
configuring-playbook-synapse-usage-exporter.pot
configuring-playbook-synapse.pot
configuring-playbook-telemetry.pot
configuring-playbook-traefik.pot
configuring-playbook-turn.pot
configuring-playbook-user-verification-service.pot
configuring-playbook.pot
configuring-well-known.pot
container-images.pot
faq.pot
getting-the-playbook.pot
howto-server-delegation.pot
howto-srv-server-delegation.pot
importing-postgres.pot
importing-synapse-media-store.pot
importing-synapse-sqlite.pot
installing.pot
just.pot
maintenance-and-troubleshooting.pot
maintenance-checking-services.pot
maintenance-migrating.pot
maintenance-postgres.pot
maintenance-synapse.pot
maintenance-upgrading-services.pot
obtaining-access-tokens.pot
playbook-tags.pot
prerequisites.pot
quick-start.pot
registering-users.pot
self-building.pot
uninstalling.pot
updating-users-passwords.pot
i18n
CHANGELOG.pot
README.pot
YEAR-IN-REVIEW.pot
.gitignore
PUBLISHED_LANGUAGES
README.md
justfile
requirements.txt
roles
.editorconfig
.envrc
.gitattributes
.gitignore
.yamllint
CHANGELOG.md
CHANGELOG.md.license
LICENSE
Makefile
README.md
README.md.license
REUSE.toml
YEAR-IN-REVIEW.md
ansible.cfg
conf.py
flake.lock
flake.nix
jitsi_jvb.yml
justfile
requirements.yml
setup.yml
setup.yml.license
122 lines
7.5 KiB
Plaintext
122 lines
7.5 KiB
Plaintext
# SOME DESCRIPTIVE TITLE.
|
|
# Copyright (C) 2018-2025, Slavi Pantaleev, Aine Etke, MDAD community members
|
|
# This file is distributed under the same license as the matrix-docker-ansible-deploy package.
|
|
# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
|
|
#
|
|
#, fuzzy
|
|
msgid ""
|
|
msgstr ""
|
|
"Project-Id-Version: matrix-docker-ansible-deploy \n"
|
|
"Report-Msgid-Bugs-To: \n"
|
|
"POT-Creation-Date: 2025-01-27 09:54+0200\n"
|
|
"PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
|
|
"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
|
|
"Language-Team: LANGUAGE <LL@li.org>\n"
|
|
"MIME-Version: 1.0\n"
|
|
"Content-Type: text/plain; charset=UTF-8\n"
|
|
"Content-Transfer-Encoding: 8bit\n"
|
|
|
|
#: ../../../docs/configuring-playbook-synapse-admin.md:1
|
|
msgid "Setting up Synapse Admin (optional)"
|
|
msgstr ""
|
|
|
|
#: ../../../docs/configuring-playbook-synapse-admin.md:3
|
|
msgid "The playbook can install and configure [etkecc/synapse-admin](https://github.com/etkecc/synapse-admin) (a [feature-rich](https://github.com/etkecc/synapse-admin#fork-differences) fork of [Awesome-Technologies/synapse-admin](https://github.com/Awesome-Technologies/synapse-admin), community room: [#synapse-admin:etke.cc](https://matrix.to/#/#synapse-admin:etke.cc)) for you."
|
|
msgstr ""
|
|
|
|
#: ../../../docs/configuring-playbook-synapse-admin.md:5
|
|
msgid "synapse-admin is a web UI tool you can use to **administrate users, rooms, media, etc. on your Matrix server**. It's designed to work with the Synapse homeserver implementation and WON'T work with Dendrite because [Dendrite Admin API](https://element-hq.github.io/dendrite/administration/adminapi) differs from [Synapse Admin API](https://element-hq.github.io/synapse/latest/usage/administration/admin_api/)."
|
|
msgstr ""
|
|
|
|
#: ../../../docs/configuring-playbook-synapse-admin.md:7
|
|
msgid "💡 **Note**: the latest version of synapse-admin is hosted by [etke.cc](https://etke.cc/) at [admin.etke.cc](https://admin.etke.cc/). If you only need this service occasionally and trust giving your admin credentials to a 3rd party Single Page Application, you can consider using it from there and avoiding the (small) overhead of self-hosting."
|
|
msgstr ""
|
|
|
|
#: ../../../docs/configuring-playbook-synapse-admin.md:9
|
|
msgid "Adjusting DNS records (optional)"
|
|
msgstr ""
|
|
|
|
#: ../../../docs/configuring-playbook-synapse-admin.md:11
|
|
msgid "By default, this playbook installs Synapse Admin on the `matrix.` subdomain, at the `/synapse-admin` path (https://matrix.example.com/synapse-admin). This makes it easy to install it, because it **doesn't require additional DNS records to be set up**. If that's okay, you can skip this section."
|
|
msgstr ""
|
|
|
|
#: ../../../docs/configuring-playbook-synapse-admin.md:13
|
|
msgid "If you wish to adjust it, see the section [below](#adjusting-the-synapse-admin-url-optional) for details about DNS configuration."
|
|
msgstr ""
|
|
|
|
#: ../../../docs/configuring-playbook-synapse-admin.md:15
|
|
msgid "Adjusting the playbook configuration"
|
|
msgstr ""
|
|
|
|
#: ../../../docs/configuring-playbook-synapse-admin.md:17
|
|
msgid "To enable Synapse Admin, add the following configuration to your `inventory/host_vars/matrix.example.com/vars.yml` file:"
|
|
msgstr ""
|
|
|
|
#: ../../../docs/configuring-playbook-synapse-admin.md:23
|
|
msgid "**Note**: Synapse Admin requires Synapse's [Admin APIs](https://element-hq.github.io/synapse/latest/usage/administration/admin_api/index.html) to function. Access to them is restricted with a valid access token, so exposing them publicly should not be a real security concern. Still, for additional security, we normally leave them unexposed, following [official Synapse reverse-proxying recommendations](https://element-hq.github.io/synapse/latest/reverse_proxy.html#synapse-administration-endpoints). Because Synapse Admin needs these APIs to function, when installing Synapse Admin, the playbook **automatically** exposes the Synapse Admin API publicly for you. Depending on the homeserver implementation you're using (Synapse, Dendrite), this is equivalent to:"
|
|
msgstr ""
|
|
|
|
#: ../../../docs/configuring-playbook-synapse-admin.md:25
|
|
msgid "for [Synapse](./configuring-playbook-synapse.md) (our default homeserver implementation): `matrix_synapse_container_labels_public_client_synapse_admin_api_enabled: true`"
|
|
msgstr ""
|
|
|
|
#: ../../../docs/configuring-playbook-synapse-admin.md:26
|
|
msgid "for [Dendrite](./configuring-playbook-dendrite.md): `matrix_dendrite_container_labels_public_client_synapse_admin_api_enabled: true`"
|
|
msgstr ""
|
|
|
|
#: ../../../docs/configuring-playbook-synapse-admin.md:28
|
|
msgid "By default, synapse-admin installation will be [restricted to only work with one homeserver](https://github.com/etkecc/synapse-admin/blob/e21e44362c879ac41f47c580b04210842b6ff3d7/README.md#restricting-available-homeserver) — the one managed by the playbook. To adjust these restrictions, tweak the `matrix_synapse_admin_config_restrictBaseUrl` variable."
|
|
msgstr ""
|
|
|
|
#: ../../../docs/configuring-playbook-synapse-admin.md:30
|
|
msgid "[!WARNING] If you're using [Matrix Authentication Service](./configuring-playbook-matrix-authentication-service.md) (MAS) for authentication, you will be able to [log into synapse-admin with an access token](https://github.com/etkecc/synapse-admin/pull/58), but certain synapse-admin features (especially those around user management) will be limited or not work at all."
|
|
msgstr ""
|
|
|
|
#: ../../../docs/configuring-playbook-synapse-admin.md:33
|
|
msgid "Adjusting the Synapse Admin URL (optional)"
|
|
msgstr ""
|
|
|
|
#: ../../../docs/configuring-playbook-synapse-admin.md:35
|
|
msgid "By tweaking the `matrix_synapse_admin_hostname` and `matrix_synapse_admin_path_prefix` variables, you can easily make the service available at a **different hostname and/or path** than the default one."
|
|
msgstr ""
|
|
|
|
#: ../../../docs/configuring-playbook-synapse-admin.md:37
|
|
msgid "Example additional configuration for your `vars.yml` file:"
|
|
msgstr ""
|
|
|
|
#: ../../../docs/configuring-playbook-synapse-admin.md:45
|
|
msgid "If you've changed the default hostname, you may need to create a CNAME record for the Synapse Admin domain (`admin.example.com`), which targets `matrix.example.com`."
|
|
msgstr ""
|
|
|
|
#: ../../../docs/configuring-playbook-synapse-admin.md:47
|
|
msgid "When setting, replace `example.com` with your own."
|
|
msgstr ""
|
|
|
|
#: ../../../docs/configuring-playbook-synapse-admin.md:49
|
|
msgid "Installing"
|
|
msgstr ""
|
|
|
|
#: ../../../docs/configuring-playbook-synapse-admin.md:51
|
|
msgid "After configuring the playbook and potentially [adjusting your DNS records](#adjusting-dns-records), run the playbook with [playbook tags](playbook-tags.md) as below:"
|
|
msgstr ""
|
|
|
|
#: ../../../docs/configuring-playbook-synapse-admin.md:58
|
|
msgid "The shortcut commands with the [`just` program](just.md) are also available: `just install-all` or `just setup-all`"
|
|
msgstr ""
|
|
|
|
#: ../../../docs/configuring-playbook-synapse-admin.md:60
|
|
msgid "`just install-all` is useful for maintaining your setup quickly ([2x-5x faster](../CHANGELOG.md#2x-5x-performance-improvements-in-playbook-runtime) than `just setup-all`) when its components remain unchanged. If you adjust your `vars.yml` to remove other components, you'd need to run `just setup-all`, or these components will still remain installed. Note these shortcuts run the `ensure-matrix-users-created` tag too."
|
|
msgstr ""
|
|
|
|
#: ../../../docs/configuring-playbook-synapse-admin.md:62
|
|
msgid "Usage"
|
|
msgstr ""
|
|
|
|
#: ../../../docs/configuring-playbook-synapse-admin.md:64
|
|
msgid "After installation, Synapse Admin will be accessible at: `https://matrix.example.com/synapse-admin/`"
|
|
msgstr ""
|
|
|
|
#: ../../../docs/configuring-playbook-synapse-admin.md:66
|
|
msgid "To use Synapse Admin, you need to have [registered at least one administrator account](registering-users.md) on your server."
|
|
msgstr ""
|