28 lines
850 B
Markdown
28 lines
850 B
Markdown
deploy playbook after setup
|
|
```
|
|
ansible-playbook playbook.yml --ask-vault-pass
|
|
```
|
|
|
|
Check containers
|
|
```
|
|
ssh matrix.example.com
|
|
sudo podman ps
|
|
sudo podman logs synapse
|
|
```
|
|
|
|
test federation
|
|
```
|
|
curl https://{{ matrix_domain }}/_matrix/federation/v1/version
|
|
```
|
|
|
|
|
|
| Area | Recommendation |
|
|
|------|----------------|
|
|
| **TLS** | Use Certbot + Nginx plugin (`community.general.acme` Ansible module) |
|
|
| **Secrets** | Store DB passwords, secrets in **Ansible Vault** |
|
|
| **Updates** | Use `container_image: tag` with version pins (e.g., `v1.100.0`) |
|
|
| **Monitoring** | Add Prometheus metrics (`enable_metrics: true`) |
|
|
| **Coturn** | Deploy `coturn` (STUN/TURN) as separate container if needed |
|
|
| **Backups** | Backup `/var/lib/matrix-synapse` regularly |
|
|
| **Rootless Podman** | Use `podman user` namespaces + `podman system migrate` for portability |
|