Home

Awesome

Support room on Matrix donate

Matrix (An open network for secure, decentralized communication) server setup using Ansible and Docker

🎯 Purpose

This Ansible playbook is meant to help you run your own Matrix homeserver, along with the various services related to that.

That is, it lets you join the Matrix network using your own user ID like @alice:example.com, all hosted on your own server (see prerequisites).

We run all supported services in Docker containers (see the container images we use), which lets us have a predictable and up-to-date setup, across multiple supported distros (see prerequisites) and architectures (x86/amd64 being recommended).

Installation (upgrades) and some maintenance tasks are automated using Ansible (see our Ansible guide).

☁ Self-hosting or Managed / SaaS

This Ansible playbook tries to make self-hosting and maintaining a Matrix server fairly easy (see Getting started). Still, running any service smoothly requires knowledge, time and effort.

If you like the FOSS spirit of this Ansible playbook, but prefer to put the responsibility on someone else, you can also get a managed Matrix server from etke.cc (both hosting and on-premises) - a service built on top of this Ansible playbook but with additional components and services which all help you run a Matrix server with ease. Be advised that etke.cc operates on a subscription-based approach and there is no "just set up my server once and be done with it" option.

🚀 Getting started

We have detailed documentation in the docs/ directory - see the Table of Contents in the documentation README.

While the list of supported services and documentation is very extensive, you don't need to read through everything. We recommend:

If you experience an issue on configuring the playbook, setting up your server, maintaining services on it, etc., please take a look at our FAQ. If you cannot find an answer to your question, feel free to ask for help and support.

✔ Supported services

Using this playbook, you can get the following list of services configured on your server. Basically, this playbook aims to get you up-and-running with all the necessities around Matrix, without you having to do anything else.

Notes:

Homeserver

The homeserver is the backbone of your Matrix system. Choose one from the following list.

NameDefault?DescriptionDocumentation
SynapseStoring your data and managing your presence in the Matrix networkLink
ConduitStoring your data and managing your presence in the Matrix network. Conduit is a lightweight open-source server implementation of the Matrix Specification with a focus on easy setup and low system requirementsLink
DendriteStoring your data and managing your presence in the Matrix network. Dendrite is a second-generation Matrix homeserver written in Go, an alternative to Synapse.Link

Clients

Web clients for Matrix that you can host on your own domains.

NameDefault?DescriptionDocumentation
Element WebDefault Matrix web client, configured to connect to your own Synapse serverLink
HydrogenLightweight Matrix client with legacy and mobile browser supportLink
CinnySimple, elegant and secure web clientLink
SchildiChat WebBased on Element Web, with a more traditional instant messaging experienceLink

Server Components

Services that run on the server to make the various parts of your installation work.

NameDefault?DescriptionDocumentation
PostgreSQLDatabase for Synapse. Using an external PostgreSQL server is also possible.Link
CoturnSTUN/TURN server for WebRTC audio/video callsLink
TraefikWeb server, listening on ports 80, 443 and 8448 - standing in front of all the other services. Using your own webserver is possibleLink
Let's EncryptFree SSL certificate, which secures the connection to all componentsLink
EximMail server, through which all Matrix services send outgoing email (can be configured to relay through another SMTP server)Link
ma1sdMatrix Identity ServerLink
ddclientDynamic DNSLink

Authentication

Extend and modify how users are authenticated on your homeserver.

NameDefault?DescriptionDocumentation
matrix-synapse-rest-auth (advanced)REST authentication password provider moduleLink
matrix-synapse-shared-secret-auth (advanced)Password provider moduleLink
matrix-synapse-ldap3 (advanced)LDAP Auth password provider moduleLink
matrix-ldap-registration-proxy (advanced)A proxy that handles Matrix registration requests and forwards them to LDAP.Link
matrix-registrationA simple python application to have a token based Matrix registrationLink
Matrix User Verification Service (UVS)Service to verify details of a user based on an Open ID tokenLink
synapse-simple-antispam (advanced)A spam checker moduleLink

File Storage

Use alternative file storage to the default media_store folder.

NameDefault?DescriptionDocumentation
GoofysAmazon S3 (or other S3-compatible object store) storage for Synapse's content repository (media_store) filesLink
synapse-s3-storage-providerAmazon S3 (or other S3-compatible object store) storage for Synapse's content repository (media_store) filesLink
matrix-media-repomatrix-media-repo is a highly customizable multi-domain media repository for Matrix. Intended for medium to large deployments, this media repo de-duplicates media while being fully compliant with the specification.Link

Bridges

Bridges can be used to connect your Matrix installation with third-party communication networks.

NameDefault?DescriptionDocumentation
mautrix-discordBridge to DiscordLink
mautrix-slackBridge to SlackLink
mautrix-telegramBridge to TelegramLink
mautrix-gmessagesBridge to Google MessagesLink
mautrix-whatsappBridge to WhatsAppLink
mautrix-wsproxyBridge to Android SMS or Apple iMessageLink
mautrix-twitterBridge to TwitterLink
mautrix-googlechatBridge to Google ChatLink
mautrix-metaBridge to Messenger and InstagramLink for Messenger / Instagram
mautrix-signalBridge to SignalLink
beeper-linkedinBridge to LinkedInLink
matrix-appservice-ircBridge to IRCLink
matrix-appservice-kakaotalkBridge to KakaotalkLink
matrix-appservice-discordBridge to DiscordLink
matrix-appservice-slackBridge to SlackLink
matrix-hookshotBridge for generic webhooks and multiple project management services, such as GitHub, GitLab, Figma, and Jira in particularLink
matrix-sms-bridgeBridge to SMSLink
matrix-wechatBridge to WeChatLink
HeisenbridgeBouncer-style bridge to IRCLink
go-skype-bridgeBridge to SkypeLink
mx-puppet-slackBridge to SlackLink
mx-puppet-instagramBridge for Instagram-DMs (Instagram)Link
mx-puppet-twitterBridge for Twitter-DMs (Twitter)Link
mx-puppet-discordBridge to DiscordLink
mx-puppet-groupmeBridge to GroupMeLink
mx-puppet-steamBridge to SteamLink
Email2MatrixBridge for relaying emails to Matrix roomsLink
PostmoogleEmail to Matrix bridgeLink

Bots

Bots provide various additional functionality to your installation.

NameDefault?DescriptionDocumentation
baibotA bot that exposes the power of AI / Large Language Models to youLink
matrix-reminder-botBot for scheduling one-off & recurring reminders and alarmsLink
matrix-registration-botBot for invitations by creating and managing registration tokensLink
maubotA plugin-based Matrix bot systemLink
HonoroitA helpdesk botLink
MjolnirA moderation tool for MatrixLink
DraupnirA moderation tool for Matrix (Fork of Mjolnir)Link (for appservice mode)
BuscarronWeb forms (HTTP POST) to MatrixLink

Administration

Services that help you in administrating and monitoring your Matrix installation.

NameDefault?DescriptionDocumentation
matrix-alertmanager-receiverPrometheus' Alertmanager clientLink
Matrix Authentication ServiceOAuth 2.0 and OpenID Provider serverLink
synapse-adminA web UI tool for administrating users and rooms on your Matrix serverLink
Metrics and GraphsConsists of the Prometheus time-series database server, the Prometheus node-exporter host metrics exporter, and the Grafana web UI, with prometheus-nginxlog-exporter being available tooLink (for prometheus-nginxlog-exporter)
BorgBackupsLink
rageshakeBug report serverLink
synapse-usage-exporterExport the usage statistics of a Synapse homeserver to be scraped by Prometheus.Link

Misc

Various services that don't fit any other categories.

NameDefault?DescriptionDocumentation
sliding-sync(Superseded by Simplified Sliding Sync integrated into Synapse > 1.114 and Conduit > 0.6.0) Sliding Sync support for clients which require it (e.g. old Element X versions before Simplified Sliding Sync was developed)Link
synapse_auto_accept_inviteA Synapse module to automatically accept invites.Link
synapse_auto_compressorA cli tool that automatically compresses state_groups database table in background.Link
Matrix Corporal (advanced)Reconciliator and gateway for a managed Matrix serverLink
EtherpadAn open source collaborative text editorLink
JitsiAn open source video-conferencing platformLink
Cactus CommentsA federated comment system built on MatrixLink
PantalaimonAn E2EE aware proxy daemonLink
SygnalPush gatewayLink
ntfyPush notifications serverLink

🆕 Changes

This playbook evolves over time, sometimes with backward-incompatible changes.

When updating the playbook, refer to the changelog to catch up with what's new.

🆘 Support

🌐 Translation

See the i18n/README.md file for more information about translation.

Translations are still work in progress.

🤝 Related

You may also be interested in mash-playbook - another Ansible playbook for self-hosting non-Matrix services (see its List of supported services).

mash-playbook also makes use of Traefik as its reverse-proxy, so with minor interoperability adjustments, you can make matrix-docker-ansible-deploy and mash-playbook co-exist and host Matrix and non-Matrix services on the same server.