famedly / ansible-collection-matrix Goto Github PK

In GitLab by @jdreichmann on Apr 28, 2021, 11:12

Merges transcaffeine/synapse-role-cleanup -> main

In GitLab by @jadyn.dev on Jan 12, 2022, 13:22

The matrix_uia_login always picks the first flow in the list regardless if the flow is supported or not. This means ansible fails when deploying the com.famedly.login.soo stage.

In GitLab by @jbecker on Jan 15, 2021, 14:29

Merges feat/docker-networks-etc_hosts-host-volume-prefix -> main

Allows configuring docker networks and etc_hosts

In GitLab by @jadyn.dev on May 5, 2021, 09:46

Merges jadyn/synapse-api -> main

closes https://gitlab.com/famedly/ansible/collections/local/-/issues/71

In GitLab by @jdreichmann on Apr 30, 2021, 08:13

Merges transcaffeine/fix-broken-labeling -> main

In GitLab by @jadyn.dev on Apr 26, 2021, 09:12

Merges jadyn/barad-dur-role -> main

ref: https://gitlab.com/famedly/ansible/meta/-/issues/78

In GitLab by @jadyn.dev on May 27, 2021, 11:50

Merges jadyn/update_codeowners -> main

ref https://gitlab.com/famedly/ansible/collections/local/-/merge_requests/91

In GitLab by @jcgruenhage on Aug 23, 2021, 10:36

Our modules already offer a good low level API for managing matrix rooms, but we're lacking a higher level abstraction that takes in a bunch of variables and manages the rooms in an idempotent way.

Desired features

• creating a bunch of rooms and spaces in one run
• access control (public, invite only, knocking, restricted based on space membership)
• idempotently upgrading rooms (to allow for the former) -> needs changes to our matrix_room module, because that should be handling the upgrade IMO
• manage space hierarchy
• set encryption
• <your suggestions here>

In GitLab by @jdreichmann on Mar 23, 2021, 07:16

Merges transcaffeine/synapse-idempotency -> main

In GitLab by @jdreichmann on Oct 19, 2020, 08:40

Merges transcaffeine/synapse-workers -> main

See https://gitlab.com/famedly/ansible/collections/matrix/-/issues/4

In GitLab by @jbecker on Feb 22, 2021, 07:54

Merges jbecker/feat/docker-configurations -> main

In GitLab by @jbecker on Feb 8, 2021, 06:22

Merges feat/synapse-public-baseurl -> main

matrix_synapse_baseurl was not in use, so we rename it to the more accurate matrix_synapse_public_baseurl and actually use it in the configuration

In GitLab by @jdreichmann on Sep 29, 2020, 12:50

Allow to specify what type and amount of synapse workers to deploy.

Needs to be deployable with all deployment methods, needs checks in place to prevent trying to deploy unsupported worker configurations (e.g. pusher or appservice worker being deployed twice).

• Synapse<>Redis
• TCP Replication listener enable
• Dynamic worker deployment
  • Workers with n replicas (client, fed_in, media, fed_out)
  • Workers who can only be run once (appservice, pusher, user_dir(?))
• Allow passing in a dict of labels
• Map ports to host/docker-gateway-ip (default: 0.0.0.0)
• Systemd support
• Make it pretty again
• Traefik path matching
• Clean up leftover running workers (more replicas to less replicas scaling)
  • Docker
  • Systemd

Depends on famedly/ansible/collections/base#2 (redis needed for worker+synapse communication/sync)

• MR for synapse-workers: https://gitlab.com/famedly/ansible/collections/matrix/-/merge_requests/4
• MR for synapse-worker-playbook: https://gitlab.com/famedly/ansible/collections/local/-/merge_requests/14
• MR on local-test: https://gitlab.com/famedly/ansible/environments/local-test/-/merge_requests/6

In GitLab by @jcgruenhage on Dec 10, 2020, 12:28

Add info about commit conventions and stuff like that. See https://gitlab.com/famedly/ansible/collections/matrix/-/merge_requests/7#note_464004934 for an example of where docs would've been helpful.

In GitLab by @jdreichmann on Oct 21, 2021, 12:42

Merges transcaffeine/sygnal-panopticon-migration -> main

In GitLab by @jbecker on Feb 1, 2021, 16:26

Merges feat/override-recreate -> main

In GitLab by @jadyn.dev on Nov 26, 2021, 09:12

Merges jadyn/barad-dur -> main

In GitLab by @jcgruenhage on Oct 19, 2021, 14:09

Merges jcgruenhage/matrix-badge -> main

In GitLab by @jdreichmann on Nov 4, 2020, 07:31

Merges transcaffeine/restrict-fs-permissions -> main

Ansible's default mode for directories is 0755. Only the synapse user + group needs to be able to read+navigate the directories, and only the user themselves may write to it.

In GitLab by @jcgruenhage on Feb 14, 2020, 12:16

module to gather facts from the synapse admin api

In GitLab by @jadyn.dev on Jan 19, 2022, 13:33

Merges jadyn/fix-matrix-uia-flow-selection -> main

ref: https://gitlab.com/famedly/company/devops/collections/matrix/-/issues/18

In GitLab by @jdreichmann on Apr 22, 2021, 14:10

Merges transcaffeine/hedwig-container-version-label -> main

Closes #13

In GitLab by @lrsksr on Nov 23, 2021, 12:21

Merges emperor/synapse-1.47.1 -> main

Version bump in preparation for the synapse 1.47.1 security release expected to arrive 2021-11-23 12:00 UTC (in 30 minutes at the time of writing).

See https://matrix.org/blog/2021/11/18/pre-disclosure-upcoming-security-release-of-synapse-1-47-1

In GitLab by @jdreichmann on Nov 24, 2020, 08:45

Merges transcaffeine/fix-appservice-regression -> main

closes https://gitlab.com/famedly/ansible/collections/local/-/issues/33
fixes https://gitlab.com/famedly/ansible/collections/local/-/issues/32

In GitLab by @jadyn.dev on Apr 13, 2021, 12:15

Merges jadyn/matrix_utils -> main

• After talking with JC, we agreeed that user+pass and token should be added to the common argument spec, together with the mutally_exclusive and required_together specs for it.
• The login should be handled via the helper class, which looks if a token was supplied, and if that is not the case, uses user+pass to obtain the token.
• If a module logs in using user+pass, the module should invalidate the token when exiting. For this, the fail_json and exit_json methods need to be proxied to the helper aswell

In GitLab by @jcgruenhage on Feb 14, 2020, 12:13

A module for fetching facts about the rooms joined by the account identified by the access tokens. Fetching the whole room state for the joined rooms should be enough, but it might make sense to provide some shortcuts for commonly used things, for example to provide a list of room members.

In GitLab by @jdreichmann on Oct 28, 2021, 07:17

Merges transcaffeine/retry-network-related-tasks -> main

In GitLab by @jdreichmann on Mar 17, 2021, 10:17

Merges transcaffeine/hedwig-role -> main

In GitLab by @jdreichmann on May 10, 2021, 12:40

Merges transcaffeine/task-tagging -> main

In GitLab by @jdreichmann on Dec 10, 2020, 11:34

Merges transcaffeine/matrix-uia-login -> main

Test the module with: PASSWORD=abc echo '{"ANSIBLE_MODULE_ARGS": {"hs_url": "https://test-sp-gen-1.famedly.de","user_id": "admin","password": "$PASSWORD"}}' | python ansible_collections/famedly/matrix/plugins/modules/matrix_uia_login.py

In GitLab by @jdreichmann on Apr 15, 2021, 16:11

Merges transcaffeine/docs -> main

In GitLab by @jdreichmann on May 10, 2021, 07:05

Merges transcaffeine/hedwig-update -> main

This switches the config file format to yaml,
which allows to override the configuration using
hedwig_extra_config.

In GitLab by @Bubu on Feb 14, 2021, 19:09

On first run during install of signedjson pip was needed but it's only installed later on. Installing it manually and renunning the role worked.

In GitLab by @jcgruenhage on Feb 14, 2020, 12:14

Module for managing member state for a list of users in a given room.

Can be given a list of matrix-IDs, a state (member|kicked|banned) and a room-ID (which will be modified).

Supports the exclusive=True paramter for state=member, which will remove any non-listed user_id's from the room.

Auth via token (can be obtained from matrix_login), the token must be of a user with the required permissions for the actions. Errors will tell if permissions were insufficient, room was not found or the HS could not be connected to.

- name: Define members in roomID
  matrix_member:
    hs_url: ...
    token: $TOKEN
    room_id: $ROOM
    state: (member|kicked|banned)
    user_ids:
      - "@user1:homeserver.tld"
      - "@admin:matrix.org"

MR: https://gitlab.com/famedly/ansible/collections/matrix/-/merge_requests/2

In GitLab by @jdreichmann on Apr 23, 2021, 20:57

When the hedwig ansible role updates the config.toml, the hedwig docker container is not restarted, leading to the container running with the old config.

In GitLab by @jcgruenhage on Jan 28, 2021, 24:21

The problem is that matrix_synapse_workers is defined in deploy-workers.yml, the template depends on it even if workers are disabled

In GitLab by @jcgruenhage on Dec 16, 2020, 11:04

Merges jcgruenhage/timetracking-bot-role -> main

replaces https://gitlab.com/famedly/ansible/collections/matrix_private/-/merge_requests/1/

In GitLab by @ratzupaltuff on Sep 30, 2020, 12:36

this issue depends on those MRs:

https://gitlab.com/famedly/ansible/collections/metrics_private/-/merge_requests/2

https://gitlab.com/famedly/ansible/environments/internal/-/merge_requests/17

https://gitlab.com/famedly/ansible/collections/local/-/merge_requests/11/diffs

https://gitlab.com/famedly/ansible/environments/internal/-/merge_requests/18/diffs

In GitLab by @Bubu on Feb 14, 2021, 19:08

That means synapse crashes when oidc is enabled.

In GitLab by @jcgruenhage on Jan 28, 2021, 24:11

In GitLab by @jdreichmann on Oct 7, 2021, 07:43

Merges transcaffeine/synapse-update-worker-endpoints -> main

see https://gitlab.com/famedly/company/devops/meta/-/issues/184

In GitLab by @jdreichmann on May 18, 2021, 09:17

Merges transcaffeine/synapse-config-update -> main

See: https://github.com/matrix-org/synapse/blob/release-v1.34.0/UPGRADE.rst#upgrading-to-v1340

I chose to remove the config block without a replacement, because in most cases, tuning of those values is necessary, and if done so, the new layout has an additional config setting to enable/disable adding the default set of state event types, so the user would be advised to just set matrix_synapse_extra_config.room_prejoin_state themselves to the correct values.

In GitLab by @jdreichmann on Sep 10, 2021, 10:20

Merges transcaffeine/feat-monitoring-toggle -> main

In GitLab by @jdreichmann on Apr 26, 2021, 13:31

In GitLab by @jdreichmann on Apr 26, 2021, 09:14

Merges transcaffeine/hedwig-restart-fix -> main

Closes #14

In GitLab by @jdreichmann on Sep 30, 2020, 19:48

Merges transcaffeine/matrix_member-module -> main

This module can manage matrix membership in a given room by inviting or kicking a list specified users.

With the exclusive=True flag, it can be used to garantuee a list of members to be in a room (and no one else). For this module, users invited into a room count as members, as they can be in the room.

The required token for authentification can be obtained easily from the matrix_login module.

In GitLab by @jdreichmann on Apr 8, 2021, 18:17

A lot of ansible modules duplicate code used to set up and configure matrix-nio.

• They should be refactored to use a common class which handles those checks, and the modules itself should be reduced as much as possible to their actual logic.
• Methods like get_room_members, invite_to_room (from the matrix_member module) should also be properly externalised such that other modules can use them easily

This is archived using module_utils and importing from there, for an example see https://github.com/ansible-collections/hetzner.hcloud/blob/main/plugins/modules/hcloud_server_info.py#L130 and it's corresponding repository layout

In GitLab by @jcgruenhage on Jan 27, 2021, 23:03

TASK [famedly.matrix.element : Link main configuration] *******************************************************************************************************************
fatal: [matrix.entropia.de]: FAILED! => {"changed": false, "msg": "Error while linking: [Errno 2] No such file or directory: b'/opt/element/config.json' -> b'/opt/element/riot-v1.7.15/config.json'", "path": "/opt/element/riot-v1.7.15/config.json"}

In GitLab by @jdreichmann on Apr 22, 2021, 10:20

The following discussion from !13 should be addressed:

• @jdreichmann started a discussion:

  Use this as a version label per default on the docker container

In GitLab by @jdreichmann on Nov 2, 2021, 10:10

i.e.: package list for debian 10, debian 11, ...