Sanitized mirror from private repository - 2026-03-16 11:01:28 UTC

deployments/matrix/fix-matrix.sh

@@ -0,0 +1,196 @@
+#!/bin/bash
+# =============================================================================
+# Matrix Synapse Fix/Repair Script
+# Diagnoses and fixes common issues
+# =============================================================================
+# Run as root
+
+echo "=========================================="
+echo "Matrix Synapse Fix/Repair Tool"
+echo "=========================================="
+
+# Check root
+if [[ $EUID -ne 0 ]]; then
+   echo "This script must be run as root"
+   exit 1
+fi
+
+FIXED=0
+ERRORS=0
+
+# 1. Check and fix YAML configuration
+echo ""
+echo "[1/6] Checking Synapse configuration..."
+if [ -f /opt/synapse/homeserver.yaml ]; then
+    if python3 -c "import yaml; yaml.safe_load(open('/opt/synapse/homeserver.yaml'))" 2>/dev/null; then
+        echo "  ✓ homeserver.yaml is valid YAML"
+    else
+        echo "  ✗ homeserver.yaml has YAML errors!"
+        echo "  Creating backup at /opt/synapse/homeserver.yaml.broken"
+        cp /opt/synapse/homeserver.yaml /opt/synapse/homeserver.yaml.broken
+
+        # Try to fix common issues
+        echo "  Attempting automatic fix..."
+        # Remove duplicate keys and fix indentation issues
+        python3 << 'PYFIX'
+import yaml
+import re
+
+try:
+    with open('/opt/synapse/homeserver.yaml', 'r') as f:
+        content = f.read()
+
+    # Try to parse and re-write
+    # First, try to fix common issues
+    lines = content.split('\n')
+    fixed_lines = []
+    in_list = False
+
+    for line in lines:
+        # Skip empty turn_uris followed by list items not indented under it
+        if line.strip() == 'turn_uris:':
+            in_list = True
+            fixed_lines.append(line)
+        elif in_list and line.strip().startswith('- "turn:'):
+            fixed_lines.append('  ' + line.strip())
+        elif in_list and line.strip().startswith('- "turns:'):
+            fixed_lines.append('  ' + line.strip())
+        elif in_list and not line.strip().startswith('-') and line.strip():
+            in_list = False
+            fixed_lines.append(line)
+        else:
+            fixed_lines.append(line)
+
+    fixed_content = '\n'.join(fixed_lines)
+
+    # Validate the fix
+    yaml.safe_load(fixed_content)
+
+    with open('/opt/synapse/homeserver.yaml', 'w') as f:
+        f.write(fixed_content)
+
+    print("  ✓ Configuration fixed automatically")
+except Exception as e:
+    print(f"  ✗ Auto-fix failed: {e}")
+    print("  Please manually fix /opt/synapse/homeserver.yaml")
+    print("  Backup saved at /opt/synapse/homeserver.yaml.broken")
+PYFIX
+        FIXED=$((FIXED + 1))
+    fi
+else
+    echo "  ✗ homeserver.yaml not found!"
+    ERRORS=$((ERRORS + 1))
+fi
+
+# 2. Check file permissions
+echo ""
+echo "[2/6] Checking file permissions..."
+if [ -d /opt/synapse ]; then
+    OWNER=$(stat -c '%U' /opt/synapse)
+    if [ "$OWNER" = "synapse" ]; then
+        echo "  ✓ /opt/synapse owned by synapse user"
+    else
+        echo "  ✗ Fixing ownership of /opt/synapse..."
+        chown -R synapse:synapse /opt/synapse
+        FIXED=$((FIXED + 1))
+    fi
+
+    # Check config file permissions
+    if [ -f /opt/synapse/homeserver.yaml ]; then
+        PERMS=$(stat -c '%a' /opt/synapse/homeserver.yaml)
+        if [ "$PERMS" = "600" ] || [ "$PERMS" = "640" ]; then
+            echo "  ✓ homeserver.yaml has correct permissions"
+        else
+            echo "  ✗ Fixing homeserver.yaml permissions..."
+            chmod 600 /opt/synapse/homeserver.yaml
+            FIXED=$((FIXED + 1))
+        fi
+    fi
+fi
+
+# 3. Check services
+echo ""
+echo "[3/6] Checking services..."
+for svc in postgresql synapse nginx coturn; do
+    if systemctl is-active --quiet $svc 2>/dev/null; then
+        echo "  ✓ $svc is running"
+    else
+        echo "  ✗ $svc is not running, attempting to start..."
+        systemctl start $svc 2>/dev/null
+        sleep 2
+        if systemctl is-active --quiet $svc; then
+            echo "    ✓ $svc started successfully"
+            FIXED=$((FIXED + 1))
+        else
+            echo "    ✗ Failed to start $svc"
+            echo "    Check logs: journalctl -u $svc -n 50"
+            ERRORS=$((ERRORS + 1))
+        fi
+    fi
+done
+
+# 4. Check database connection
+echo ""
+echo "[4/6] Checking database..."
+if sudo -u postgres psql -c "SELECT 1" synapse > /dev/null 2>&1; then
+    echo "  ✓ PostgreSQL connection successful"
+else
+    echo "  ✗ Cannot connect to synapse database"
+    ERRORS=$((ERRORS + 1))
+fi
+
+# 5. Check nginx configuration
+echo ""
+echo "[5/6] Checking nginx configuration..."
+if nginx -t 2>/dev/null; then
+    echo "  ✓ Nginx configuration is valid"
+else
+    echo "  ✗ Nginx configuration has errors"
+    nginx -t
+    ERRORS=$((ERRORS + 1))
+fi
+
+# 6. Check API endpoints
+echo ""
+echo "[6/6] Checking API endpoints..."
+sleep 1
+if curl -sf http://localhost:8008/_matrix/client/versions > /dev/null 2>&1; then
+    echo "  ✓ Matrix Client API responding"
+else
+    echo "  ✗ Matrix Client API not responding"
+    echo "    Checking Synapse logs..."
+    journalctl -u synapse -n 10 --no-pager 2>/dev/null | tail -5
+    ERRORS=$((ERRORS + 1))
+fi
+
+LISTEN_PORT=$(grep -oP '^    listen \K\d+' /etc/nginx/sites-enabled/matrix 2>/dev/null | head -1 || echo "8080")
+if curl -sf http://localhost:$LISTEN_PORT/ > /dev/null 2>&1; then
+    echo "  ✓ Element Web accessible on port $LISTEN_PORT"
+else
+    echo "  ✗ Element Web not accessible"
+    ERRORS=$((ERRORS + 1))
+fi
+
+# Summary
+echo ""
+echo "=========================================="
+if [ $ERRORS -eq 0 ]; then
+    if [ $FIXED -eq 0 ]; then
+        echo "✅ All checks passed! No issues found."
+    else
+        echo "✅ Fixed $FIXED issue(s). All checks now pass."
+        echo ""
+        echo "You may want to restart services:"
+        echo "  systemctl restart synapse nginx"
+    fi
+else
+    echo "⚠️  Found $ERRORS error(s) that need manual attention."
+    echo ""
+    echo "Common fixes:"
+    echo "  - Check logs: journalctl -u synapse -f"
+    echo "  - Validate YAML: python3 -c \"import yaml; yaml.safe_load(open('/opt/synapse/homeserver.yaml'))\""
+    echo "  - Restart services: systemctl restart postgresql synapse nginx coturn"
+fi
+echo "=========================================="
+
+exit $ERRORS