* Add a warning sign to "Warning" labels
Signed-off-by: Suguru Hirahara <acioustick@noreply.codeberg.org>
* Update docs/configuring-playbook-matrix-registration.md
Signed-off-by: Suguru Hirahara <acioustick@noreply.codeberg.org>
* Update docs/maintenance-and-troubleshooting.md: remove a section for ma1sd
As the project has not updated since several years, it does not seem to be reasonable to pick it up specially on the document.
Signed-off-by: Suguru Hirahara <acioustick@noreply.codeberg.org>
* Common header for sections about adjusting the playbook configuration
Signed-off-by: Suguru Hirahara <acioustick@noreply.codeberg.org>
* Update docs/configuring-playbook-dendrite.md: fix links to dendrite.yaml.j2
Signed-off-by: Suguru Hirahara <acioustick@noreply.codeberg.org>
* Update docs/configuring-playbook-bridge-mautrix-signal.md: remove a note added by a commit to remove signalgo
The note has been added with 2f6525ccb3
, apparently copied from docs/configuring-playbook-bridge-mautrix-signalgo.md
Signed-off-by: Suguru Hirahara <acioustick@noreply.codeberg.org>
* Update docs/configuring-playbook-bridge-mautrix-wsproxy.md: fix the anchor link text to mautrix-imessage documentation
Signed-off-by: Suguru Hirahara <acioustick@noreply.codeberg.org>
* Update docs/configuring-playbook-etherpad.md: add a note about the component being managed externally
Refer docs/configuring-playbook-backup-borg.md
Signed-off-by: Suguru Hirahara <acioustick@noreply.codeberg.org>
* Update docs/configuring-playbook-jitsi.md: use the common label for warning messages
Signed-off-by: Suguru Hirahara <acioustick@noreply.codeberg.org>
* Update docs/configuring-playbook-ldap-auth.md: unrecommend using ma1sd for authentication
Signed-off-by: Suguru Hirahara <acioustick@noreply.codeberg.org>
* Update docs/configuring-playbook-appservice-double-puppet.md: remove a duplicate anchor link
Signed-off-by: Suguru Hirahara <acioustick@noreply.codeberg.org>
* Update docs for old mautrix bridges for Facebook and Instagram: remove anchor links to the deleted files
Signed-off-by: Suguru Hirahara <acioustick@noreply.codeberg.org>
* Update docs/configuring-playbook-bridge-wechat.md: use common descriptions
Signed-off-by: Suguru Hirahara <acioustick@noreply.codeberg.org>
* Update docs/configuring-playbook-bridge-matrix-bridge-sms.md: create a section for the prerequisite
Signed-off-by: Suguru Hirahara <acioustick@noreply.codeberg.org>
* Update docs/maintenance-and-troubleshooting.md: use the common header text
Signed-off-by: Suguru Hirahara <acioustick@noreply.codeberg.org>
* Use common descriptions for adding the configuration
Signed-off-by: Suguru Hirahara <acioustick@noreply.codeberg.org>
* Update docs/configuring-playbook-bridge-mautrix-telegram.md: small edits
- Add a section for a Telegram API key
- Add a section for instruction about Appservice Double Puppet or Shared Secret Auth
Signed-off-by: Suguru Hirahara <acioustick@noreply.codeberg.org>
* Update docs for Draupnir and Mjolnir: replace colons with periods
Signed-off-by: Suguru Hirahara <acioustick@noreply.codeberg.org>
* Update docs/configuring-playbook-rageshake.md: adopt the common instruction
Based on docs/configuring-playbook-sygnal.md regarding the notification about necessity of the service.
Signed-off-by: Suguru Hirahara <acioustick@noreply.codeberg.org>
* Add a note about the components managed externally
Signed-off-by: Suguru Hirahara <acioustick@noreply.codeberg.org>
---------
Signed-off-by: Suguru Hirahara <acioustick@noreply.codeberg.org>
Co-authored-by: Suguru Hirahara <acioustick@noreply.codeberg.org>
15 KiB
Configuring the playbook
Prerequisites > Configuring your DNS settings > Getting the playbook > Configuring the playbook > Installing
If you've configured your DNS records and retrieved the playbook's source code to your computer, you can start configuring the playbook. To do so, follow these steps inside the playbook directory:
-
create a directory to hold your configuration (
mkdir -p inventory/host_vars/matrix.example.com
whereexample.com
is your "base domain") -
copy the sample configuration file (
cp examples/vars.yml inventory/host_vars/matrix.example.com/vars.yml
) -
edit the configuration file (
inventory/host_vars/matrix.example.com/vars.yml
) to your liking. You may also take a look at the variousroles/*/ROLE_NAME_HERE/defaults/main.yml
files and see if there's something you'd like to copy over and override in yourvars.yml
configuration file. -
copy the sample inventory hosts file (
cp examples/hosts inventory/hosts
) -
edit the inventory hosts file (
inventory/hosts
) to your liking -
(optional, advanced) you may wish to keep your
inventory
directory under version control with git or any other version-control system. -
(optional, advanced) to run Ansible against multiple servers with different
sudo
credentials, you can copy the sample inventory hosts yaml file for each of your hosts: (cp examples/host.yml inventory/my_host1.yml
…) and use theansible-all-hosts.sh
script in the installation step.
For a basic Matrix installation, that's all you need.
For a more custom setup, see the Other configuration options below.
▶️ When you're done with all the configuration you'd like to do, continue with Installing.
Other configuration options
Note: some of the roles like one for integrating Etherpad or Jitsi are managed by their own repositories, and the configuration files for them cannot be found locally (in roles/galaxy
) until those roles are fetched from the upstream projects. Check requirements.yml for the URLs of those roles.
Core service adjustments
-
Homeserver configuration:
-
Configuring Synapse, if you're going with the default/recommended homeserver implementation
-
Configuring Conduit, if you've switched to the Conduit homeserver implementation
-
Configuring Dendrite, if you've switched to the Dendrite homeserver implementation
-
-
Server components:
-
Adjusting TURN server configuration (advanced)
-
Configuring the Traefik reverse-proxy (advanced)
-
Using your own webserver, instead of this playbook's Traefik reverse-proxy (advanced)
-
Adjusting SSL certificate retrieval (advanced)
-
Server connectivity:
Clients
Web clients for Matrix that you can host on your own domains.
-
Configuring Element Web, if you're going with the default/recommended client
-
Setting up Hydrogen, if you've enabled Hydrogen, a lightweight Matrix client with legacy and mobile browser support
-
Setting up Cinny, if you've enabled Cinny, a web client focusing primarily on simple, elegant and secure interface
-
Setting up SchildiChat Web, if you've enabled SchildiChat Web, a web client based on Element Web with some extras and tweaks
Authentication and user-related
Extend and modify how users are authenticated on your homeserver.
-
Setting up Matrix Authentication Service (Next-generation auth for Matrix, based on OAuth 2.0/OIDC)
-
Setting up the REST authentication password provider module (advanced)
-
Setting up the Shared Secret Auth password provider module (advanced)
-
Setting up the LDAP authentication password provider module (advanced)
-
Setting up matrix-ldap-registration-proxy (advanced)
-
Setting up Synapse Simple Antispam (advanced)
-
Setting up Matrix User Verification Service (advanced)
File Storage
Use alternative file storage to the default media_store
folder.
Bridging other networks
Bridges can be used to connect your Matrix installation with third-party communication networks.
-
Setting up Mautrix wsproxy for bridging Android SMS or Apple iMessage
-
Setting up matrix-hookshot - a bridge between Matrix and multiple project management services, such as GitHub, GitLab and JIRA.
Bots
Bots provide various additional functionality to your installation.
-
Setting up baibot - a bot through which you can talk to various AI / Large Language Models services (OpenAI's ChatGPT and others)
-
Setting up matrix-reminder-bot - a bot to remind you about stuff
-
Setting up matrix-registration-bot - a bot to create and manage registration tokens to invite users
-
Setting up maubot - a plugin-based Matrix bot system
-
Setting up Honoroit - a helpdesk bot
-
Setting up Mjolnir - a moderation tool/bot
-
Setting up Draupnir - a moderation tool/bot, forked from Mjolnir and maintained by its former leader developer
-
Setting up Draupnir for all/D4A - like the Draupnir bot mentioned above, but running in appservice mode and supporting multiple instances
-
Setting up Buscarron - a bot you can use to send any form (HTTP POST, HTML) to a (encrypted) Matrix room
Administration
Services that help you in administrating and monitoring your Matrix installation.
-
Setting up Prometheus Alertmanager integration via matrix-alertmanager-receiver
-
Enabling metrics and graphs (Prometheus, Grafana) for your Matrix server
-
Enabling synapse-usage-exporter for Synapse usage statistics
-
Backups:
-
Setting up BorgBackup - a full Matrix server backup solution, including the Postgres database
-
Setting up postgres backup - a Postgres-database backup solution (note: does not include other files)
-
Other specialized services
Various services that don't fit any other categories.
-
Setting up synapse-auto-compressor for compressing the database on Synapse homeservers
-
Setting up Matrix Corporal (advanced)
-
Setting up Cactus Comments - a federated comment system built on Matrix
Deprecated / unmaintained / removed services
Note: since a deprecated or unmaintained service will not be updated, its bug or vulnerability will be unlikely to get patched. It is recommended to migrate from the service to an alternative if any, and make sure to do your own research before you decide to keep it running nonetheless.
-
Setting up the Sliding Sync proxy for clients which require Sliding Sync support (like old Element X versions, before it got switched to Simplified Sliding Sync)
-
Setting up Appservice Webhooks bridging (deprecated; the bridge's author suggests taking a look at matrix-hookshot as a replacement, which can also be installed using this playbook)
-
Setting up the Dimension integration manager (unmaintained; after installing)
-
Setting up Go-NEB (unmaintained; the bridge's author suggests taking a look at matrix-hookshot as a replacement, which can also be installed using this playbook)
-
Setting up matrix-bot-chatgpt (unmaintained; the bridge's author suggests taking a look at baibot as a replacement, which can also be installed using this playbook)
-
Setting up Mautrix Facebook bridging (deprecated in favor of the Messenger/Instagram bridge with mautrix-meta-messenger)
-
Setting up Mautrix Hangouts bridging (deprecated in favor of the Google Chat bridge with mautrix-googlechat)
-
Setting up Mautrix Instagram bridging (deprecated in favor of the Messenger/Instagram bridge with mautrix-meta-instagram)
-
Setting up MX Puppet Skype bridging (removed; this component has been broken for a long time, so it has been removed from the playbook. Consider setting up Go Skype Bridge bridging)