Servers Update In Progress (Security Fix)

• Element 1.11.25 -> Element 1.11.26

The issues involve prototype pollution via events containing special strings in key locations, which can temporarily disrupt normal functioning of matrix-js-sdk and matrix-react-sdk, potentially impacting the consumer’s ability to process data safely.

Although we have only demonstrated a denial-of-service-style impact, we cannot completely rule out the possibility of a more severe impact due to the relatively extensive attack surface. We have therefore classified this as High severity and strongly recommend upgrading as a precautionary measure.

from: matrix.org security announcement

#discussion:etke.cc

Source

Stable Updates Published

• Borgmatic 1.7.8 -> 1.7.9
• Discord bridge 0.1.1 -> 0.2.0
• Grafana 9.4.3 -> 9.4.7
• Hookshot 2.7.0 -> 3.0.1
• Languagetool 6.0-dockerupdate-3 -> 6.0-dockerupdate-4
• Miniflux 2.0.42 -> 2.0.43
• Ntfy 2.1.2 -> 2.2.0
• Prometheus postgres exporter 0.11.1 -> 0.12.0
• Prometheus 2.42.0 -> 2.43.0
• Uptime Kuma 1.20.2 -> 1.21.0
• WhatsApp bridge 0.8.2 -> 0.8.3

Do you want to receive updates up to 1 week before the stable release? Switch to the fresh stability branch

#discussion:etke.cc

Source

Stable Updates Published

• Element 1.11.24 -> 1.11.25
• Synapse 1.78.0 -> 1.79.0

Do you want to receive updates up to 1 week before the stable release? Switch to the fresh stability branch

---

#discussion:etke.cc

Source

Stable Updates Published

• Borgmatic 1.7.7 -> 17.8
• Grafana 9.4.1 -> 9.4.3
• #honoroit:etke.cc 0.9.16 -> 0.9.17
• Jitsi stable-8252 -> stable-8319
• Ntfy 2.1.0 -> 2.1.2

Do you want to receive updates up to 1 week before the stable release? Switch to the fresh stability branch

---

Services Updates

• synapse_auto_compressor has been enabled for all customers. That tool performs internal housekeeping tasks and helps keep your synapse database clean (infamous state_groups table) by recalculating the state events in small chunks every day.

---

#discussion:etke.cc

Source

Stable Updates Published

• Element 1.11.23 -> 1.11.24
• Grafana 9.3.6 -> 9.4.1
• Redis 7.0.7 -> 7.0.9
• Uptime Kuma 1.20.1 -> 1.20.2
• Ntfy 2.0.1 -> 2.1.0
• Synapse 1.77.0 -> 1.78.0
• Synapse auto compressor 0.1.3 new
• Telegram bridge 0.12.2 -> 0.13.0

Do you want to receive updates up to 1 week before the stable release? Switch to the fresh stability branch

---

Services Updates

• synapse_auto_compressor has been added. That tool performs internal housekeeping tasks and helps keep your synapse database clean (infamous state_groups table) by recalculating the state events in small chunks every day. The tool was enabled for customers on the fresh stability branch

---

#discussion:etke.cc

Source

Stable Updates Published

• Borgmatic 1.7.6 -> 1.7.7
• Ntfy 1.31.0 -> 2.0.1
• Radicale 3.1.8.0 -> 3.1.8.1
• Soft-Serve 0.4.5 -> 0.4.6

Do you want to receive updates up to 1 week before the stable release? Switch to the fresh stability branch

#discussion:etke.cc

Source

Stable Updates Published

• Coturn 4.6.1-r1 -> 4.6.1-r2
• Discord bridge 0.1.0 -> 0.1.1
• Element 1.11.22 -> 1.11.23
• Hydrogen 0.3.6 -> 0.3.8
• Uptime Kuma 1.19.6 -> 1.20.1
• Languagetool 6.0-dockerupdate-2 -> 6.0-dockerupdate-3
• Ntfy 1.30.1 -> 1.31.0
• #postmoogle:etke.cc 0.9.12 -> 0.9.14
• Synapse 1.76.0 -> 1.77.0
• WhatsApp bridge 0.8.1 -> 0.8.2

Do you want to receive updates up to 1 week before the stable release? Switch to the fresh stability branch

---

Service Updates

• The Scheduler log output in case of maintenance issues is more readable now

---

#discussion:etke.cc

Source

🎉 Today marks 2 years of etke.cc! 🎉

The etke.cc managed Matrix hosting service was launched on the 12th of February 2021 and has turned 2 years old today!

Below, we’d like to show you what improvements have happened over the last year and what’s coming ahead for us.

Robotic assistance for increased human-friendliness

The Scheduler is a major service developed by etke.cc, which we introduced in the past year - it gives customers more control over managing their Matrix server.

It started as a solution to the “I’d like server maintenance to happen during a specific time window” request we were getting often. Over time, it grew into a toolkit for managing your Matrix homeserver via chat.

Using Scheduler, you can send a chat message to the @scheduler:etke.cc bot to:

• configure the automated maintenance time window (e.g., recurring maintenance Monday 15:04)
• run maintenance (server update) any time you wish (e.g., run maintenance)
• restart a specific service you’re observing trouble with (e.g., run restart facebook)
• check disk usage (e.g., run disk)

If you haven’t used Scheduler already, we urge you to give it a try! It really is a powerful tool.

Website improvements

• You need to have been in the dark, to be able to appreciate the light. We’ve added a Light theme to the etke.cc website, making it more approachable.
• We’ve improved our order form ’s usability and order processing performance. Furthermore, we now process orders more quickly and are continuing to improve in this area. Stay tuned for an all-new order form coming soon, which plans to eliminate back-and-forth email exchanges between you and us. This will lead to you getting a fully-functioning Matrix server hosted much sooner after ordering.
• We’ve improved our website’s Help section. Each bridge got a dedicated documentation page to help you find things more easily and not get overwhelmed with unrelated information. We still have more work to do in this area to document some remaining components and services that we offer.
• Multilingual website, order processing, and support were implemented. Check out the German version of our website .
• We’ve added more communication channels to simplify support requests coming from different platforms.

Stability is key

• The internal etke.cc container registry mirror (powered by Docker Registry ) was added to our stack, providing a more stable and quicker maintenance process. We previously used to pull components from their original registry (Docker Hub, Gitlab Registry, etc.), but these registries (especially Gitlab Registry) often experienced downtime and caused our maintenance process to break. No more! All container images are now mirrored on etke.cc infrastructure.
• The internal etke.cc monitoring system (powered by Prometheus and Grafana ) was implemented to monitor common issues and fatal outages of our customers’ servers.
• Alerting functionality was added later on, based on integrating our monitoring system with Scheduler. Problems like “high disk usage” and others, now trigger emails and Matrix notifications which are sent both to our support staff and server owners. This feature has prevented lots of downtime occurrences already, by notifying customers before actual outages happen (knowing your disk usage is at 80% can make you act before it reaches 100% and causes downtime)

Something new to play with

We’ve integrated 8 additional components into the Matrix stack. Some of them replaced existing ones - like mautrix bridges superseding unmaintained mx-puppet ones. Others are brand-new tools and services:

• (new) ntfy (UnifiedPush provider)
• (new) buscarron (web forms to matrix bot)
• (new) postmoogle (email bridge)
• (new) borgbackup (the “Holy Grail” of backups)
• mautrix-slack replaced mx-puppet-slack
• mautrix-discord replaced mx-puppet-discord
• go-skype-bridge replaced mx-puppet-skype
• hookshot replaced appservice-webhooks (webhooks/rss bridge)

If you already have old components installed (like mx-puppet-slack), you can use them as-is, until they break completely. If you wish to switch from a deprecated component to a new one - just contact us .

We now offer Ntfy and enable it by default for new installations. With Ntfy hosted on your server, you can use your personal UnifiedPush provider for delivering push notifications to your mobile phone. Your push notifications (even though they’re normally E2E-encrypted) will no longer go through Google or Apple servers. Full list of apps that support Ntfy

The team is growing

etke.cc started as a one-man project 2 years ago, providing a service on top of the matrix-docker-ansible-deploy Ansible playbook. The playbook is built in the open as free software by hundreds of contributors .

etke.cc has provided a way for people to host the open Matrix platform in an open, no-vendor-lock-in way. We believe that this is a selling point that is unique to etke.cc among all of its competitors.

In the past year, Slavi Pantaleev , the original playbook developer, has joined the etke.cc team. This helps things in multiple ways:

• provides increased manpower to etke.cc, so that things will run more smoothly and more and better services can be added in the future
• guarantees etke.cc’s stability, because all upstream Ansible playbook changes now consider etke.cc customers and usage-patterns
• etke.cc’s profits trickle back into sponsoring playbook (and other Matrix-related) development

Besides him, a few other members have joined the team part-time. They help with website improvements, support request handling, etc.

etke.cc follows in the spirit of the playbook and companies who do their work in the open, as Gitlab does . All the work we do is released as free software in our Gitlab repositories

Open Source

• Buscarron , a “web form to matrix bot”, was created and evolved during that year. It’s etke.cc ’s back office for the order processing
• Postmoogle , an SMTP server with a Matrix interface instead of IMAP (read: email bridge), was created and deeply integrated into etke.cc ’s processes. It handles 99% of etke.cc email communications
• Scheduler , Injector , Bunny Uploader , and many more were developed as well

Numbers!

• We’ve installed 124 new Matrix servers
• Pushed 453 updates and enhancements to the automation framework used as the service core
• Posted 72 updates in the announcements room, so you’re always up-to-date with what we’re working on

Do you want to see what’s changed? Here is the 1 year celebration post

Source

Stable Updates Published

• IRC (heisenbridge) 1.14.1 -> 1.14.2
• #postmoogle:etke.cc 0.9.11 -> 0.9.12
• Synapse Admin 0.8.6 -> 0.8.7

Do you want to receive updates up to 1 week before the stable release? Switch to the fresh stability branch

---

Service Update

• automatic daily sync of latest (non-versioned) images added to the etke.cc ’s registry, providing a way to get the latest changes for the components without pinned versions

---

#discussion:etke.cc

Source

Stable Updates Published

• Borgmatic 1.7.5 -> 1.7.6
• Cinny 2.2.3 -> 2.2.4
• Coturn 4.6.1-r0 -> 4.6.1-r1
• Discord bridge latest -> 0.1.0 pin
• Element 1.11.20 -> 1.11.22
• Jitsi stable-8218 -> stable-8252
• Miniflux 2.0.41 -> 2.0.42
• Prometheus 2.41.0 -> 2.42.0
• Soft-Serve 0.4.4 -> 0.4.5
• Synapse Admin 0.8.5 -> 0.8.6
• Synapse 1.75.0 -> 1.76.0

Do you want to receive updates up to 1 week before the stable release? Switch to the fresh stability branch

---

#discussion:etke.cc

Source