From 80fc58a6cdf9b3816ef5ca1c39ed70870bb9a895 Mon Sep 17 00:00:00 2001 From: boxswapper Date: Mon, 16 Mar 2026 12:56:58 -0600 Subject: [PATCH] updated readme.md --- README.md | 15 +++++++++++ group_vars/all.yml | 67 +++++++++++++++++++++++++++++----------------- 2 files changed, 57 insertions(+), 25 deletions(-) diff --git a/README.md b/README.md index 96d9f95..e7b2e2e 100644 --- a/README.md +++ b/README.md @@ -40,3 +40,18 @@ hugo # builds to /public cp -r public ../fpov/roles/nginx-proxy/files/mysite/ ``` +1. Host boots: Podman creates pod with ports 80, 443, 8008, 8448 open. +2. Nginx starts, runs certbot-entrypoint.sh: +- Checks for /etc/letsencrypt/live/matrix.example.com +- If missing → runs certbot certonly --standalone on port 8080 +- Writes certs to /etc/letsencrypt +3. Nginx loads TLS certs, serves static site + proxies /_matrix/ +4. User visits https://matrix.example.com → gets your Hugo site. +5. User visits https://matrix.example.com/_matrix/client → gets Synapse. +6. ACME renewal: Certbot’s renew is dry-run on each start (you can also add cron via systemd unit if needed). + +Certificate renewal +``` +# /etc/cron.d/certbot-renew +0 3 * * * root podman exec nginx-matrix certbot renew --quiet +``` \ No newline at end of file diff --git a/group_vars/all.yml b/group_vars/all.yml index b046ca4..1972022 100644 --- a/group_vars/all.yml +++ b/group_vars/all.yml @@ -1,25 +1,42 @@ -# Variables -matrix_domain: "matrix.example.com" -landing_domain: "example.com" # or same as matrix_domain + path-based routing -podman_user: "matrix" # set to 'root' for rootful -podman_pod_name: "matrix-pod" - -synapse_data_dir: "/var/lib/matrix-synapse" -nginx_config_dir: "/etc/nginx/conf.d" -nginx_webroot: "/var/www/landing" - -# Database (PostgreSQL) -db_name: "synapse" -db_user: "synapse" -db_pass: "{{ synapse_db_pass | mandatory }}" -synapse_db_pass: "supersecretpassword" # use vault for real deployments! - - -matrix_domain: "matrix.example.com" -landing_domain: "example.com" # optional, or use same domain + path-based routing - -# For certbot -certbot_email: "admin@example.com" - -# Static site path -nginx_webroot: "/var/lib/matrix-nginx" \ No newline at end of file +$ANSIBLE_VAULT;1.1;AES256 +64353034326537373762336464383964336133663564333362623733636134633235353362613430 +6639396262306130393035643463333166333437613832310a323130306134366634326365373962 +61663763363964623437633134616365646166303036613863326330333533313230613364653638 +6230303436346137390a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