Synapse Admin is Ketesa now! (#5113)

* Synapse Admin is Ketesa now! * i18n changes * add automatic migration * fix migration version in vars * add a note about routing for OIDC Auth * mention v1.0.0 announcement blog post * Update docs/container-images.md Co-authored-by: Suguru Hirahara <luixxiul@users.noreply.github.com> * Update CHANGELOG.md Co-authored-by: Suguru Hirahara <luixxiul@users.noreply.github.com> --------- Co-authored-by: Suguru Hirahara <luixxiul@users.noreply.github.com>
2026-04-20 12:18:00 +03:00 · 2026-04-03 15:26:18 +01:00
parent 3d40026f93
commit 9049a82945
100 changed files with 19316 additions and 15130 deletions
@@ -0,0 +1,59 @@
+{#
+SPDX-FileCopyrightText: 2023 - 2024 Slavi Pantaleev
+SPDX-FileCopyrightText: 2025 MDAD project contributors
+SPDX-FileCopyrightText: 2026 Nikita Chernyi
+
+SPDX-License-Identifier: AGPL-3.0-or-later
+#}
+
+{% if matrix_ketesa_container_labels_traefik_enabled %}
+traefik.enable=true
+
+{% if matrix_ketesa_container_labels_traefik_docker_network %}
+traefik.docker.network={{ matrix_ketesa_container_labels_traefik_docker_network }}
+{% endif %}
+
+traefik.http.services.matrix-ketesa.loadbalancer.server.port=8080
+
+{% set middlewares = [] %}
+
+{% if matrix_ketesa_container_labels_traefik_ipallowlist_sourcerange | length > 0 %}
+traefik.http.middlewares.matrix-ketesa-ipallowlist.ipallowlist.sourcerange={{ matrix_ketesa_container_labels_traefik_ipallowlist_sourcerange | join(',') }}
+{% set middlewares = middlewares + ['matrix-ketesa-ipallowlist'] %}
+{% endif %}
+
+{% if matrix_ketesa_container_labels_traefik_path_prefix != '/' %}
+traefik.http.middlewares.matrix-ketesa-slashless-redirect.redirectregex.regex=({{ matrix_ketesa_container_labels_traefik_path_prefix | quote }})$
+traefik.http.middlewares.matrix-ketesa-slashless-redirect.redirectregex.replacement=${1}/
+{% set middlewares = middlewares + ['matrix-ketesa-slashless-redirect'] %}
+{% endif %}
+
+{% if matrix_ketesa_container_labels_traefik_path_prefix != '/' %}
+traefik.http.middlewares.matrix-ketesa-strip-prefix.stripprefix.prefixes={{ matrix_ketesa_container_labels_traefik_path_prefix }}
+{% set middlewares = middlewares + ['matrix-ketesa-strip-prefix'] %}
+{% endif %}
+
+{% if matrix_ketesa_container_labels_traefik_additional_response_headers.keys() | length > 0 %}
+{% for name, value in matrix_ketesa_container_labels_traefik_additional_response_headers.items() %}
+traefik.http.middlewares.matrix-ketesa-add-headers.headers.customresponseheaders.{{ name }}={{ value }}
+{% endfor %}
+{% set middlewares = middlewares + ['matrix-ketesa-add-headers'] %}
+{% endif %}
+
+traefik.http.routers.matrix-ketesa.rule={{ matrix_ketesa_container_labels_traefik_rule }}
+{% if matrix_ketesa_container_labels_traefik_priority | int > 0 %}
+traefik.http.routers.matrix-ketesa.priority={{ matrix_ketesa_container_labels_traefik_priority }}
+{% endif %}
+{% if middlewares | length > 0 %}
+traefik.http.routers.matrix-ketesa.middlewares={{ middlewares | join(',') }}
+{% endif %}
+traefik.http.routers.matrix-ketesa.service=matrix-ketesa
+traefik.http.routers.matrix-ketesa.entrypoints={{ matrix_ketesa_container_labels_traefik_entrypoints }}
+traefik.http.routers.matrix-ketesa.tls={{ matrix_ketesa_container_labels_traefik_tls | to_json }}
+{% if matrix_ketesa_container_labels_traefik_tls %}
+traefik.http.routers.matrix-ketesa.tls.certResolver={{ matrix_ketesa_container_labels_traefik_tls_certResolver }}
+{% endif %}
+
+{% endif %}
+
+{{ matrix_ketesa_container_labels_additional_labels }}
@@ -0,0 +1,51 @@
+#jinja2: lstrip_blocks: True
+[Unit]
+Description=matrix-ketesa
+{% for service in matrix_ketesa_systemd_required_services_list %}
+Requires={{ service }}
+After={{ service }}
+{% endfor %}
+{% for service in matrix_ketesa_systemd_wanted_services_list %}
+Wants={{ service }}
+{% endfor %}
+DefaultDependencies=no
+
+[Service]
+Type=simple
+Environment="HOME={{ devture_systemd_docker_base_systemd_unit_home_path }}"
+ExecStartPre=-{{ devture_systemd_docker_base_host_command_sh }} -c '{{ devture_systemd_docker_base_host_command_docker }} stop -t {{ devture_systemd_docker_base_container_stop_grace_time_seconds }} matrix-ketesa 2>/dev/null || true'
+ExecStartPre=-{{ devture_systemd_docker_base_host_command_sh }} -c '{{ devture_systemd_docker_base_host_command_docker }} rm matrix-ketesa 2>/dev/null || true'
+
+ExecStartPre={{ devture_systemd_docker_base_host_command_docker }} create \
+			--rm \
+			--name=matrix-ketesa \
+			--log-driver=none \
+			--cap-drop=ALL \
+			--read-only \
+			--user={{ matrix_ketesa_container_uid }}:{{ matrix_ketesa_container_gid }} \
+			--network={{ matrix_ketesa_container_network }} \
+			{% if matrix_ketesa_container_http_host_bind_port %}
+			-p {{ matrix_ketesa_container_http_host_bind_port }}:8080 \
+			{% endif %}
+			--label-file={{ matrix_ketesa_base_path }}/labels \
+			--mount type=bind,src={{ matrix_ketesa_config_path }}/config.json,dst=/var/public/config.json,ro \
+			{% for arg in matrix_ketesa_container_extra_arguments %}
+			{{ arg }} \
+			{% endfor %}
+			{{ matrix_ketesa_container_image }}
+
+{% for network in matrix_ketesa_container_additional_networks %}
+ExecStartPre={{ devture_systemd_docker_base_host_command_docker }} network connect {{ network }} matrix-ketesa
+{% endfor %}
+
+ExecStart={{ devture_systemd_docker_base_host_command_docker }} start --attach matrix-ketesa
+
+ExecStop=-{{ devture_systemd_docker_base_host_command_sh }} -c '{{ devture_systemd_docker_base_host_command_docker }} stop -t {{ devture_systemd_docker_base_container_stop_grace_time_seconds }} matrix-ketesa 2>/dev/null || true'
+ExecStop=-{{ devture_systemd_docker_base_host_command_sh }} -c '{{ devture_systemd_docker_base_host_command_docker }} rm matrix-ketesa 2>/dev/null || true'
+
+Restart=always
+RestartSec=30
+SyslogIdentifier=matrix-ketesa
+
+[Install]
+WantedBy=multi-user.target
@@ -0,0 +1,5 @@
+SPDX-FileCopyrightText: 2020 - 2026 Slavi Pantaleev
+SPDX-FileCopyrightText: 2020 Dan Arnfield
+SPDX-FileCopyrightText: 2026 Nikita Chernyi
+
+SPDX-License-Identifier: AGPL-3.0-or-later