feat(matrix): bootstrap script

_nginx/compose.yaml

@@ -7,6 +7,7 @@ services:
     ports:
       - "80:80"
       - "443:443"
+      - "8448:8448" # matrix federation
     volumes:
       - sites:/etc/nginx/conf.d/
       - certs:/etc/letsencrypt/

matrix/.env

@@ -5,6 +5,9 @@ POSTGRES_PASSWORD=
 PUID=1000
 PGID=1000
 
+#SYNAPSE_ENABLE_REGISTRATION=yes
+#SYNAPSE_ALLOW_GUEST=yes
+
 SYNAPSE_REPORT_STATS=no
 POSTGRES_USER=matrix
 POSTGRES_DB=matrix

matrix/compose.yaml

@@ -24,7 +24,7 @@ services:
       - POSTGRES_INITDB_ARGS=--encoding=UTF-8 --lc-collate=C --lc-ctype=C
 
   matrix:
-    image: docker.io/matrixdotorg/synapse:latest
+    image: docker.io/matrixdotorg/synapse:v1.97.0
     restart: unless-stopped
     volumes:
       - config:/config/
@@ -33,11 +33,8 @@ services:
       - SYNAPSE_SERVER_NAME=$BASE_URL
       - SYNAPSE_CONFIG_DIR=/config
       - SYNAPSE_DATA_DIR=/data
-      - POSTGRES_HOST=db
       - UID=$PUID
       - GID=$PGID
-    env_file:
-      - .env
     networks:
       - nginx
       - default

matrix/init_config.sh

@@ -0,0 +1,15 @@
+#!/usr/bin/env -S - bash -e
+
+set -a
+    . .env
+    SYNAPSE_SERVER_NAME="$BASE_URL"
+    SYNAPSE_NO_TLS=1
+    POSTGRES_HOST=db
+set +a
+
+ENV=()
+while read -r LINE; do
+    ENV+=(-e "$LINE")
+done < <(env)
+
+docker-compose run "${ENV[@]}" matrix migrate_config

matrix/new_user.sh

@@ -1,3 +1,3 @@
-#!/bin/bash
+#!/bin/bash -e
 
-sudo docker-compose exec matrix register_new_matrix_user -c /config/homeserver.yaml
+docker-compose exec -it matrix register_new_matrix_user -c /config/homeserver.yaml

matrix/nginx.conf

@@ -11,9 +11,9 @@ server {
     listen [::]:443 ssl;
     server_name $BASE_URL;
 
-#    # For the federation port
-#    listen 8448 ssl default_server;
-#    listen [::]:8448 ssl default_server;
+    # For the federation port
+    listen 8448 ssl default_server;
+    listen [::]:8448 ssl default_server;
 
     ssl_certificate     /etc/letsencrypt/live/$BASE_URL/fullchain.pem;
     ssl_certificate_key /etc/letsencrypt/live/$BASE_URL/privkey.pem;

nextcloud/nginx.conf

@@ -14,7 +14,6 @@ server {
     ssl_certificate     /etc/letsencrypt/live/$BASE_URL/fullchain.pem;
     ssl_certificate_key /etc/letsencrypt/live/$BASE_URL/privkey.pem;
 
-
     location / {
         proxy_pass       http://nextcloud;