Sanitized mirror from private repository - 2026-04-20 01:32:01 UTC

docs/services/matrix/verify-matrix.sh

@@ -0,0 +1,126 @@
+#!/bin/bash
+# =============================================================================
+# Matrix Synapse + Element Web Verification Script
+# =============================================================================
+# Run as root or with sudo
+
+echo "=========================================="
+echo "Matrix/Element Health Check"
+echo "=========================================="
+echo ""
+
+FAILED=0
+WARN=0
+
+# Load domain from secrets if available
+if [ -f /root/.matrix_secrets ]; then
+    source /root/.matrix_secrets
+    echo "Domain: ${DOMAIN:-unknown}"
+fi
+
+echo ""
+echo "[Service Status]"
+for svc in synapse nginx coturn postgresql; do
+    STATUS=$(systemctl is-active $svc 2>/dev/null || echo "not-found")
+    if [ "$STATUS" = "active" ]; then
+        echo "  ✓ $svc: running"
+    elif [ "$STATUS" = "not-found" ]; then
+        echo "  - $svc: not installed"
+    else
+        echo "  ✗ $svc: $STATUS"
+        FAILED=1
+    fi
+done
+
+echo ""
+echo "[Matrix API]"
+# Client API
+if curl -sf http://localhost:8008/_matrix/client/versions > /dev/null 2>&1; then
+    VERSION_COUNT=$(curl -s http://localhost:8008/_matrix/client/versions | python3 -c "import sys,json; print(len(json.load(sys.stdin).get('versions',[])))" 2>/dev/null || echo "0")
+    echo "  ✓ Client API: responding ($VERSION_COUNT protocol versions)"
+else
+    echo "  ✗ Client API: not responding"
+    FAILED=1
+fi
+
+# Federation API
+FED_RESULT=$(curl -sf http://localhost:8008/_matrix/federation/v1/version 2>/dev/null)
+if [ -n "$FED_RESULT" ]; then
+    SYNAPSE_VER=$(echo "$FED_RESULT" | python3 -c "import sys,json; print(json.load(sys.stdin).get('server',{}).get('version','unknown'))" 2>/dev/null)
+    echo "  ✓ Federation API: responding (Synapse $SYNAPSE_VER)"
+else
+    echo "  ✗ Federation API: not responding"
+    FAILED=1
+fi
+
+echo ""
+echo "[Well-Known Endpoints]"
+# Check nginx port
+LISTEN_PORT=$(grep -oP 'listen \K\d+' /etc/nginx/sites-enabled/matrix 2>/dev/null | head -1 || echo "8080")
+
+SERVER_WK=$(curl -sf http://localhost:$LISTEN_PORT/.well-known/matrix/server 2>/dev/null)
+if [ -n "$SERVER_WK" ]; then
+    echo "  ✓ /.well-known/matrix/server: $SERVER_WK"
+else
+    echo "  ✗ /.well-known/matrix/server: not configured"
+    WARN=1
+fi
+
+CLIENT_WK=$(curl -sf http://localhost:$LISTEN_PORT/.well-known/matrix/client 2>/dev/null)
+if [ -n "$CLIENT_WK" ]; then
+    echo "  ✓ /.well-known/matrix/client: configured"
+else
+    echo "  ✗ /.well-known/matrix/client: not configured"
+    WARN=1
+fi
+
+echo ""
+echo "[Element Web]"
+if curl -sf http://localhost:$LISTEN_PORT/ > /dev/null 2>&1; then
+    echo "  ✓ Element Web: accessible on port $LISTEN_PORT"
+else
+    echo "  ✗ Element Web: not accessible"
+    FAILED=1
+fi
+
+# Check Element config
+if [ -f /opt/element/web/config.json ]; then
+    HOMESERVER=$(python3 -c "import json; print(json.load(open('/opt/element/web/config.json')).get('default_server_config',{}).get('m.homeserver',{}).get('base_url','not set'))" 2>/dev/null)
+    echo "  ✓ Element config: homeserver=$HOMESERVER"
+else
+    echo "  ✗ Element config: /opt/element/web/config.json not found"
+    WARN=1
+fi
+
+echo ""
+echo "[TURN Server]"
+if systemctl is-active --quiet coturn; then
+    TURN_PORT=$(grep -oP '^listening-port=\K\d+' /etc/turnserver.conf 2>/dev/null | head -1 || echo "3479")
+    echo "  ✓ Coturn: running on port $TURN_PORT"
+else
+    echo "  - Coturn: not running (voice/video calls may not work behind NAT)"
+    WARN=1
+fi
+
+echo ""
+echo "[Database]"
+if systemctl is-active --quiet postgresql; then
+    DB_SIZE=$(sudo -u postgres psql -t -c "SELECT pg_size_pretty(pg_database_size('synapse'));" 2>/dev/null | xargs)
+    echo "  ✓ PostgreSQL: running (synapse db: ${DB_SIZE:-unknown})"
+else
+    echo "  ✗ PostgreSQL: not running"
+    FAILED=1
+fi
+
+echo ""
+echo "=========================================="
+if [ $FAILED -eq 0 ] && [ $WARN -eq 0 ]; then
+    echo "✅ All checks passed!"
+elif [ $FAILED -eq 0 ]; then
+    echo "⚠️  Passed with warnings"
+else
+    echo "❌ Some checks failed"
+fi
+echo "=========================================="
+
+exit $FAILED