Tips-Of-Mine/infrastructure
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Fix matrix federation

Browse Source 
Apparently this has been broken since like March...

It seems communication over port 8448 is required for server-to-server
comms, even if the client doesn't use it.
This commit is contained in:
Jake Howard
2021-06-12 16:47:51 +01:00
parent 94e4592db6
commit 33fcf1a9e5
5 changed files with 5 additions and 24 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
ansible/roles/gateway/files/haproxy-fail2ban-jail.conf
View File

@ -6,11 +6,11 @@ maxretry = 100
filter = haproxy-basic
backend = systemd
journalmatch = _COMM=haproxy
port = http,https,{{ haproxy.exposed_ports | join(",") }}
port = http,https,8448
ignoreip = {{ wireguard.cidr }},{{ nebula.cidr }},{{ pve_hosts.internal_cidr }}
[traefik]
enabled = true
filter = haproxy-basic # Not actually used
port = http,https,{{ haproxy.exposed_ports | join(",") }}
port = http,https,8448
ignoreip = {{ wireguard.cidr }},{{ nebula.cidr }},{{ pve_hosts.internal_cidr }}

10
ansible/roles/gateway/files/haproxy.cfg
View File

@ -35,11 +35,7 @@ listen http
timeout server 10m
server default {{ wireguard.clients.ingress.ip }}:880 check
{% for port in haproxy.exposed_ports %}
listen expose_{{ port }}
bind *:{{ port }}
listen matrix
bind *:8448
mode tcp
server default {{ wireguard.clients.ingress.ip }}:{{ port }}
{% endfor %}
server default {{ wireguard.clients.ingress.ip }}:8443 send-proxy