b3153fcc49
Run CI through prek on Arch
2026-03-22 16:52:39 +02:00
312cfe9b41
Add prek-based pre-commit workflow
2026-03-22 16:44:04 +02:00
b3a0f52824
Add conditional restart support to matrix-synapse-s3-storage-provider-migrate
...
Register env, database config, scripts, and systemd service/timer results,
compute matrix_synapse_s3_storage_provider_restart_necessary, and wire it
into group_vars/matrix_servers instead of hardcoding restart_necessary: true.
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com >
2026-03-22 10:21:59 +02:00
27a2b126bc
Add conditional restart support to matrix-goofys
...
Register image pull, env, and systemd service results, compute
matrix_goofys_restart_necessary, and wire it into group_vars/matrix_servers
instead of hardcoding restart_necessary: true.
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com >
2026-03-22 10:19:45 +02:00
8ae8b83139
Wire backup_borg conditional restart variable into group_vars/matrix_servers
...
Replace hardcoded restart_necessary: true with the computed
backup_borg_restart_necessary variable that the role already exposes.
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com >
2026-03-22 10:18:16 +02:00
74cc760d00
Wire jitsi conditional restart variables into group_vars/matrix_servers
...
Replace hardcoded restart_necessary: true with the computed variables
(jitsi_web_restart_necessary, jitsi_prosody_restart_necessary,
jitsi_jicofo_restart_necessary, jitsi_jvb_restart_necessary) that the
jitsi role already exposes.
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com >
2026-03-22 10:12:27 +02:00
c831ce6f63
chore(deps): update MOASH role versions for pull restart fix
2026-03-22 07:41:16 +02:00
d3241588e3
Add conditional restart support to 7 roles that previously always restarted
...
Replace hardcoded restart_necessary: true with computed values for:
conduit, continuwuity, dendrite, element-call, media-repo,
appservice-kakaotalk, and wechat.
Each role now registers results from config, support files, systemd service,
and docker image pull tasks, then computes a restart_necessary variable
from their combined .changed state. group_vars/matrix_servers is updated
to reference these variables instead of hardcoding true.
For dendrite, the systemd service template was also separated out of the
combined support-files with_items loop so it can be independently tracked.
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com >
2026-03-22 06:45:58 +02:00
b092e126a9
Fix docker image build results not affecting conditional restart for ldap-registration-proxy and matrixto
...
These roles had conditional restart logic (restart_necessary set_fact) but
the docker_image build task result was not registered or included in the
condition, so a changed image build would not trigger a service restart.
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com >
2026-03-22 06:45:47 +02:00
5167507989
chore(deps): update ghcr.io/etkecc/baibot docker tag to v1.16.0
2026-03-20 19:03:52 +02:00
d7ec806b51
chore(deps): update dependency prometheus_postgres_exporter to v0.19.1-2
2026-03-20 19:01:12 +02:00
11fee5e4db
chore(deps): update dependency traefik to v3.6.11-1
2026-03-20 19:00:53 +02:00
5523277bc1
Update prometheus-nginxlog-exporter (v1.10.0-0 → v1.10.0-1) and metrics exposure settings
...
Signed-off-by: Suguru Hirahara <did:key:z6MkvVZk1A3KBApWJXv2Ju4H14ErDfRGxh8zxdXSZ4vACDg5>
2026-03-20 18:11:25 +09:00
ed7be50cea
Update Prometheus Node Exporter (v1.9.1-14 → v1.9.1-15) and metrics exposure settings
...
Signed-off-by: Suguru Hirahara <did:key:z6MkvVZk1A3KBApWJXv2Ju4H14ErDfRGxh8zxdXSZ4vACDg5>
2026-03-20 10:43:40 +02:00
4ac5266efc
Update Prometheus Postgres Exporter (v0.19.1-0 → v0.19.1-1) and metrics exposure settings
...
Signed-off-by: Suguru Hirahara <did:key:z6MkvVZk1A3KBApWJXv2Ju4H14ErDfRGxh8zxdXSZ4vACDg5>
2026-03-20 10:43:40 +02:00
392ac0125f
chore(deps): update dependency prometheus_node_exporter to v1.9.1-15
2026-03-20 10:42:55 +02:00
756e189141
chore(deps): update dependency prometheus_postgres_exporter to v0.19.1-1
2026-03-20 10:42:45 +02:00
c55156b394
chore(deps): update dependency traefik to v3.6.11-0
2026-03-20 08:36:23 +02:00
446597aac9
Upgrade exim-relay (v4.98.1-r0-2-3 -> v4.99.1-r0-0-0)
2026-03-20 02:41:38 +02:00
b942715469
fix(self-check): respect path_prefix in web client self-check URLs
...
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/5051
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com >
2026-03-19 23:31:13 +02:00
aeb71d3543
chore(deps): update ghcr.io/etkecc/honoroit docker tag to v0.9.30
2026-03-19 19:07:29 +02:00
54c0b56200
Prepare Draupnir Roles for move to GHCR.
2026-03-19 19:07:19 +02:00
12af6da9d0
matrix-authentication-service: add UNIX socket support for playbook-managed Postgres
...
MAS now connects to the playbook-managed Postgres via a UNIX socket by
default (when available), matching the approach already used by Synapse.
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com >
2026-03-19 01:05:10 +02:00
f0a5393d48
fix(s3): use postgres unix socket for migrate and shell commands
2026-03-18 15:21:06 +02:00
68aca96cbd
docs: clarify database_host ignored when postgres sockets are enabled
2026-03-18 15:21:03 +02:00
68318ce932
chore(deps): update docker.io/metio/matrix-alertmanager-receiver docker tag to v2026.3.18
2026-03-18 12:11:23 +02:00
4e4bccd03a
chore(deps): update oci.element.io/element-admin docker tag to v0.1.11
2026-03-17 16:48:28 +02:00
19423864f0
synapse: add missing server_notices configuration variables
...
Add support for all server_notices settings documented by Synapse:
- room_avatar_url: optional avatar for the server notices room
- room_topic: optional topic for the server notices room
- auto_join: whether users are auto-joined instead of invited (default: false)
Signed-off-by: Norman Ziegner <n.ziegner@hzdr.de >
2026-03-17 16:43:14 +02:00
a000abdf19
postgres: stop disabling unix socket support
2026-03-17 15:35:02 +02:00
b596319a4a
postgres: drop redundant cli socket override
2026-03-17 15:35:02 +02:00
f0906e79a9
matrix-synapse: gate postgres sockets on postgres role support
2026-03-17 15:35:02 +02:00
2fff4b5b88
matrix-synapse: use clearer socket mount paths
2026-03-17 15:35:02 +02:00
e09ea540a0
matrix-synapse: prefer local sockets for db connections
2026-03-17 15:35:02 +02:00
bd614abd30
matrix-synapse: avoid network wiring for socket-based db access
2026-03-17 15:35:02 +02:00
b6f8a59b50
matrix-synapse: make managed service topology explicit
2026-03-17 15:35:02 +02:00
b7d501802c
chore(deps): update dependency ntfy to v2.19.2-0
2026-03-17 12:02:14 +02:00
1c98e76423
chore(deps): update dependency grafana to v11.6.5-8
2026-03-17 12:01:56 +02:00
cb7b13daad
chore(deps): update dock.mau.dev/mautrix/twitter docker tag to v0.2603.0
2026-03-16 23:21:19 +02:00
7e8f3250f7
chore(deps): update dock.mau.dev/mautrix/slack docker tag to v0.2603.0
2026-03-16 23:21:06 +02:00
e145bffb7e
chore(deps): update dock.mau.dev/mautrix/whatsapp docker tag to v0.2603.0
2026-03-16 23:20:31 +02:00
c3156a1a99
chore(deps): update ghcr.io/element-hq/element-call docker tag to v0.18.0
2026-03-16 23:19:11 +02:00
f9811a0e0a
matrix-authentication-service: mount Synapse Postgres socket for syn2mas
...
syn2mas reads Synapse's homeserver.yaml and reuses the database
connection details from there.
When Synapse is configured to reach the integrated Postgres over a UNIX socket,
the temporary syn2mas container was given the config file but not the socket mount,
so migrations could fail even though Synapse itself was configured correctly.
Wire the Synapse socket settings into MAS via playbook vars and mount
the same socket path into the syn2mas container, so migrations work in
socket-based deployments without coupling the MAS role directly to
Synapse role variables.
2026-03-16 22:43:02 +02:00
1dac2b5c14
matrix-bridge-hookshot: normalize generated passkey ownership
...
Similar to c6d33b819https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/5033
2026-03-16 16:50:40 +02:00
c6d33b819a
matrix-authentication-service: normalize generated key ownership
...
Fix host-generated MAS key ownership and mode after creation so installs recover cleanly when become_user is not honored. Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/5033
2026-03-16 16:49:51 +02:00
7e0d86d2ea
chore(deps): update ghcr.io/etkecc/postmoogle docker tag to v0.9.29
2026-03-16 11:27:51 +02:00
a035d77b1a
chore(deps): update dependency ntfy to v2.19.1-0
2026-03-16 11:27:09 +02:00
9934bc3e39
chore(deps): update dependency charset-normalizer to v3.4.6
2026-03-16 06:45:30 +02:00
a2fd140a61
chore(deps): update dependency ntfy to v2.19.0-0
2026-03-16 06:45:21 +02:00
5df7e678f7
matrix-synapse: add an explicit msc4306 feature toggle
...
Expose Synapse's `msc4306_enabled` experimental flag as a first-class MDAD
variable and wire it into `homeserver.yaml` alongside the other experimental
feature toggles.
This makes thread-subscriptions support explicit in playbook configuration,
rather than requiring operators to inject the upstream flag via raw
`matrix_synapse_configuration_extension_yaml`.
The variable intentionally controls only the Synapse feature flag. It does not
change the default `thread_subscriptions` worker count, which remains `0` in the
standard presets. Keeping those as separate choices avoids auto-starting an
experimental worker just because the upstream feature toggle is enabled.
Refs:
- https://github.com/element-hq/synapse/blob/b99a58719b274fcbb327fd8d7649185792bfd12c/synapse/config/experimental.py#L600-L602
- https://github.com/element-hq/synapse/blob/b99a58719b274fcbb327fd8d7649185792bfd12c/synapse/rest/client/versions.py#L183-L184
2026-03-15 01:26:53 +02:00
9af79ce4d2
matrix-synapse: support thread_subscriptions stream writers
...
Add `thread_subscriptions` as a supported web-facing stream writer in MDAD and
route its unstable client endpoints via the same explicit writer-or-main model
used for the other web-facing stream-backed APIs.
This is not just another generic worker route. Current Synapse gives thread
subscriptions their own `writers.thread_subscriptions` configuration, backs them
with a multi-writer stream, and asserts on store writes that the current
instance is an allowed thread-subscriptions writer.
Explicit early routing is also required here because the subscription endpoint is
room-scoped. In MDAD's specialized-worker model, the existing room-worker regex
would otherwise match `/_matrix/client/unstable/io.element.msc4306/rooms/...`
and steal the request before it reached the correct writer-or-main fallback.
Unlike `device_lists`, support is added without enabling a thread-subscriptions
worker by default in the standard presets. The underlying MSC4306/4308 feature
remains unstable and disabled by default upstream, so the conservative default
is to keep the worker count at `0` and let the new explicit routes fall back to
`main` unless an operator opts in.
Refs:
- https://github.com/element-hq/synapse/blob/b99a58719b274fcbb327fd8d7649185792bfd12c/synapse/config/workers.py#L175-L182
- https://github.com/element-hq/synapse/blob/b99a58719b274fcbb327fd8d7649185792bfd12c/synapse/rest/client/thread_subscriptions.py#L38-L247
- https://github.com/element-hq/synapse/blob/b99a58719b274fcbb327fd8d7649185792bfd12c/synapse/storage/databases/main/thread_subscriptions.py#L66-L83
- https://github.com/element-hq/synapse/blob/b99a58719b274fcbb327fd8d7649185792bfd12c/synapse/storage/databases/main/thread_subscriptions.py#L192-L322
2026-03-15 01:16:24 +02:00
Slavi Pantaleev
renovate[bot]
Suguru Hirahara
Catalan Lover
Norman Ziegner