phaktor / matrix_riot_uncrypted_docker

Terraform script to create an AWS based Matrix server for the secure Riot.im Secure Chat

MatrixDeployer

This is a terraform script that will build the needed AWS infrastructure to host a docker container that will deploy the Matrix communication server for the secure chat application Riot.im. All choices for AWS infrastruction was designed to be cheap, but secure/functional.

Prerequisites:

• Download Terraform and install it
• Download the Matrix Server code
• Edit the Scripts -> matrix_installer.sh file and change the server name to your own
• Make sure you are signed up for an AWS account
• Obtain or create a new IAM Access Code

Steps:

Open up the code and create a new file called:

secret-variables.auto.tfvars

Then insert the following text into the file for AWS access/authentication:

aws_access_key_id = "type your IAM access key id to here"
aws_secret_access_key = "type your IAM secret access key to here"

Within terminal, navigate to the folder with the code and launch or initialize the terraform application by typing:

terraform init

Next, you will start building the AWS architecture/application with the use of:

terraform apply

Set up the Nginx/LetsEncrypt certificate with your domain.

Configure Nginx with the following information:

server {
    listen 80;
        listen [::]:80;
    server_name matrix.example.com;
    return 301 https://$host$request_uri;
}

server {
    listen 443 ssl;
    listen [::]:443 ssl;
    server_name matrix.example.com;

    ssl on;
    ssl_certificate /etc/letsencrypt/live/example.com/fullchain.pem;
    ssl_certificate_key /etc/letsencrypt/live/example.com/privkey.pem;

    location / {
        proxy_pass http://IP ADDRESS OF CONTAINER:8008;
        proxy_set_header X-Forwarded-For $remote_addr;
    }
}

server {
    listen 8448 ssl default_server;
    listen [::]:8448 ssl default_server;
    server_name matrix.example.com;

    ssl on;
    ssl_certificate /etc/letsencrypt/live/example.com/fullchain.pem;
    ssl_certificate_key /etc/letsencrypt/live/example.com/privkey.pem;
    location / {
        proxy_pass http://IP ADDRESS OF CONTAINER:8008;
        proxy_set_header X-Forwarded-For $remote_addr;
    }
}

server {
    listen 80;
        listen [::]:80;
    server_name jitsi.example.com;
    return 301 https://$host$request_uri;
}

server {
    listen 443 ssl;
    listen [::]:443 ssl;
    server_name jitsi.example.com;

    ssl on;
    ssl_certificate /etc/letsencrypt/live/example.com/fullchain.pem;
    ssl_certificate_key /etc/letsencrypt/live/example.com/privkey.pem;

    location / {
        proxy_pass http://IP ADDRESS OF CONTAINER:8443;
        proxy_set_header X-Forwarded-For $remote_addr;
    }
}

To pause the server, send the request through AWS to STOP the EC2 instance. Then you can start when ready to go.

When logging into the IP address for the first time, make sure you use

<EC2 IP Address>:8008

If you don't see the server page or it appears blank, then you will need to reset the container - see known issues.

Clean Up:

When finished with the server and wanting to clean up AWS, send the command within terminal:

terraform destroy

Extra

To make changes to the homeserver.yaml config file, you will need to edit the docker container.

• Make sure both docker commands have been sent (the first creates the file, but the container is temporary - files stays)
• Navigate to the AWS console and type in 'sudo su' for root access
• Run “docker ps -a” for a list of containers and their names (Name column)
• Type in the following command "docker exec -it /bin/sh" - in our case, the name is synapse
• Navigate to the /data folder
• Edit homeserver.yaml file and save
• If you need to find the IP address of the container, type in "docker inspect -f '{{range .NetworkSettings.Networks}}{{.IPAddress}}{{end}}' container_name_or_id"

Known Issues:

1. After navigating to the webpage, it may take 10 minutes for the server to boot up.

2. When you open the webpage for the first time, if nothing happens, the container may be frozen. Open AWS System console and type the following -

• docker ps -a (copy the container ID)
• docker container rm
• run the two docker commands found in Scripts -> matrix_installer.sh
• wait 10 minutes for it to start