Feat: config pour déployer matrix

.gitignore

@@ -1,3 +1,5 @@
-./matrix/postgres/data/
+matrix/postgres/data/
-./matrix/synapse/media_store/
+matrix/nginx/www/
-./traefik/certs/
+matrix/synapse/media_store/
+
+traefik/certs/

README.md

@@ -6,7 +6,7 @@ https://github.com/matusnovak/homelab
 
 ## Traefik
 
-Avant de lancer les contenaires, il faut gérer les certificats
+### Before
 
     mkcert -install
     mkcert -key-file ./certs/local-key.pem -cert-file ./certs/local-cert.pem localdev 'docker.localdev' '*.docker.localdev'
@@ -17,6 +17,14 @@ https://zestedesavoir.com/billets/3355/traefik-v2-https-ssl-en-localhost/
 
 ## Matrix
 
+### Before
+
+Make some direcories
+
+    mkdir -p nginx/www    
+    mkdir -p postgres/data
+    mkdir -p synapse/media_store
+
 ### Sources
 
 https://gist.github.com/matusnovak/37109e60abe79f4b59fc9fbda10896da

matrix/docker-compose.yml

@@ -0,0 +1,71 @@
+version: '3'
+services:
+  postgres:
+    image: "postgres:14.1"
+    restart: "unless-stopped"
+    environment:
+      POSTGRES_PASSWORD: "admin"
+    volumes:
+      - "./postgres/data:/var/lib/postgresql/data"
+      - ./postgres/init.sql:/docker-entrypoint-initdb.d/init.sql
+    networks:
+      - matrix
+
+  redis:
+    image: "redis:latest"
+    restart: "unless-stopped"
+    networks:
+      - matrix
+
+  synapse:
+    image: "matrixdotorg/synapse:latest"
+    restart: "unless-stopped"
+    environment:
+      SYNAPSE_CONFIG_DIR: "/data"
+      SYNAPSE_CONFIG_PATH: "/data/homeserver.yaml"
+      UID: "1000"
+      GID: "1000"
+      TZ: "Europe/Paris"
+    volumes:
+      - "./synapse:/data"
+    labels:
+      - "traefik.enable=true"
+      - "traefik.http.services.synapse.loadbalancer.server.port=8008"
+      - "traefik.http.routers.synapse.rule=Host(`synapse.combava.lan`)"
+      - "traefik.http.routers.synapse.entrypoints=https"
+      - "traefik.http.routers.synapse.tls=true"
+    networks:
+      - gateway
+      - matrix
+
+  nginx:
+    image: "nginx:latest"
+    restart: "unless-stopped"
+    volumes:
+      - "./nginx/matrix.conf:/etc/nginx/conf.d/matrix.conf"
+      - ./nginx/www:/var/www/
+    labels:
+      - "traefik.enable=true"
+      - "traefik.http.routers.matrix.rule=Host(`matrix.combava.lan`)"
+      - "traefik.http.routers.matrix.entrypoints=https"
+      - "traefik.http.routers.matrix.tls=true"
+    networks:
+      - gateway
+
+  element:
+    image: "vectorim/element-web:latest"
+    volumes:
+      - "./element/config.json:/app/config.json:ro"
+    labels:
+      - "traefik.enable=true"
+      - "traefik.http.services.element.loadbalancer.server.port=80"
+      - "traefik.http.routers.element.rule=Host(`element.combava.lan`)"
+      - "traefik.http.routers.element.entrypoints=https"
+      - "traefik.http.routers.element.tls=true"
+    networks:
+      - gateway
+
+networks:
+  matrix:
+  gateway:
+    external: true

matrix/nginx/matrix.conf

@@ -0,0 +1,18 @@
+server {
+  listen         80 default_server;
+  server_name    matrix.combava.lan;
+
+ # Traefik -> nginx -> synapse
+ location /_matrix {
+    proxy_pass http://synapse:8008;
+    proxy_set_header X-Forwarded-For $remote_addr;
+    client_max_body_size 128m;
+  }
+
+  location /.well-known/matrix/ {
+    root /var/www/;
+    default_type application/json;
+    add_header Access-Control-Allow-Origin  *;
+  }
+}
+

matrix/postgres/init.sql

@@ -0,0 +1,5 @@
+CREATE ROLE synapse;
+ALTER ROLE synapse WITH PASSWORD 'password';
+ALTER ROLE synapse WITH LOGIN;
+CREATE DATABASE synapse ENCODING 'UTF8' LC_COLLATE='C' LC_CTYPE='C' template=template0 OWNER synapse;
+GRANT ALL PRIVILEGES ON DATABASE synapse TO synapse;