LILiK
/
lilik_playbook
5
0
Fork 0
Code Issues 0 Pull Requests 0 Releases 0 Wiki Activity
Playbooks to a new Lilik
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
354 Commits
12 Branches
967 KiB
Tree: f47d64ba7e
Branches Tags
${ item.name }
Create branch ${ searchTerm }
from 'f47d64ba7e'
${ noResults }
lilik_playbook/roles/matrix-synapse/defaults/main.yaml

12 lines
368 B
Raw Normal View History

[fix] update synapse role default this role variables will be used during templating for nginx reverse proxy
7 years ago
roles/matrix-synapse: upgrade, postgres, ... - User last official deb package from matrix.org - Revised LDAP integration: * ldap_server, ldap_domain [ ldap_basedn ] config vraiables. * Bind a protected service account with a service password and start-tls - Hardcoded matrix.lilik.it --> {{ ansible_hostname }}.{{ domain }} - Sqlite -> Postgres New variables: - matrix_domain | default($domain)
5 years ago
[fix] update synapse role default this role variables will be used during templating for nginx reverse proxy
7 years ago
roles/matrix-synapse: got federation working This is beacause nginx will do canonization of URIs before proxy-passing if you add anything after the port host:port. For example, with: location /anything { proxy_pass http://127.0.0.1:8008/anything; } NGINX will perform canonization, but with: location /anything { proxy_pass http://127.0.0.1:8008 # With NO Trailing slash } NGINX will pass the unaltered original request, included /anything, to the upstream server. Canonization leads to problem when federating to other matrix-synapse instances. The observed bug was: - User A on our server (@A:our.server) invites User B on external server (@B:matrix.org). - User B correctly receive the invite. - User B try to join the room but the request timeout. - On our.sever logs we see "signature tampered" errors related to incoming connection from the external server (matrix.org). This commit fix the issue.
5 years ago
roles/matrix-synapse: upgrade, postgres, ... - User last official deb package from matrix.org - Revised LDAP integration: * ldap_server, ldap_domain [ ldap_basedn ] config vraiables. * Bind a protected service account with a service password and start-tls - Hardcoded matrix.lilik.it --> {{ ansible_hostname }}.{{ domain }} - Sqlite -> Postgres New variables: - matrix_domain | default($domain)
5 years ago
​
​
​
roles/matrix-synapse: add coturn integration support
5 years ago
​
​
​
 
  1. ---

  2. server_fqdn: '{{ ansible_hostname }}.{{ domain }}'

  3. proxy_location_path: "_matrix"

  4. remote_host: "http://127.0.0.1:8008"

  5. matrix_domain: '{{ domain }}'

  6. ldap_server: 'ldap1.dmz.{{ domain }}'

  7. ldap_domain: '{{ domain }}'

  8. ldap_basedn: 'dc={{ ldap_domain.replace(".", ",dc=") }}'

  9. turn_integration: true

  10. turn_host: 'matrix'

  11. turn_fqdn: 'turn.{{ domain }}'

  12. turn_port: '3478'