|
|
|
@@ -1214,7 +1214,7 @@ matrix_ma1sd_container_image_self_build: "{{ matrix_architecture != 'amd64' }}" |
|
|
|
# Normally, matrix-nginx-proxy is enabled and nginx can reach ma1sd over the container network. |
|
|
|
# If matrix-nginx-proxy is not enabled, or you otherwise have a need for it, you can expose |
|
|
|
# ma1sd's web-server port. |
|
|
|
matrix_ma1sd_container_http_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else '127.0.0.1:' + matrix_ma1sd_default_port|string }}" |
|
|
|
matrix_ma1sd_container_http_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else '127.0.0.1:' + matrix_ma1sd_container_port|string }}" |
|
|
|
|
|
|
|
# We enable Synapse integration via its Postgres database by default. |
|
|
|
# When using another Identity store, you might wish to disable this and define |
|
|
|
@@ -1296,8 +1296,8 @@ matrix_nginx_proxy_proxy_matrix_corporal_api_addr_with_container: "matrix-corpor |
|
|
|
matrix_nginx_proxy_proxy_matrix_corporal_api_addr_sans_container: "127.0.0.1:41081" |
|
|
|
|
|
|
|
matrix_nginx_proxy_proxy_matrix_identity_api_enabled: "{{ matrix_ma1sd_enabled }}" |
|
|
|
matrix_nginx_proxy_proxy_matrix_identity_api_addr_with_container: "matrix-ma1sd:{{ matrix_ma1sd_default_port }}" |
|
|
|
matrix_nginx_proxy_proxy_matrix_identity_api_addr_sans_container: "127.0.0.1:{{ matrix_ma1sd_default_port }}" |
|
|
|
matrix_nginx_proxy_proxy_matrix_identity_api_addr_with_container: "matrix-ma1sd:{{ matrix_ma1sd_container_port }}" |
|
|
|
matrix_nginx_proxy_proxy_matrix_identity_api_addr_sans_container: "127.0.0.1:{{ matrix_ma1sd_container_port }}" |
|
|
|
|
|
|
|
# By default, we do TLS termination for the Matrix Federation API (port 8448) at matrix-nginx-proxy. |
|
|
|
# Unless this is handled there OR Synapse's federation listener port is disabled, we'll reverse-proxy. |
|
|
|
@@ -1714,8 +1714,8 @@ matrix_synapse_container_image_self_build: "{{ matrix_architecture not in ['arm6 |
|
|
|
|
|
|
|
# When ma1sd is enabled, we can use it to validate email addresses and phone numbers. |
|
|
|
# Synapse can validate email addresses by itself as well, but it's probably not what we want by default when we have an identity server. |
|
|
|
matrix_synapse_account_threepid_delegates_email: "{{ 'http://matrix-ma1sd:' + matrix_ma1sd_default_port|string if matrix_ma1sd_enabled else '' }}" |
|
|
|
matrix_synapse_account_threepid_delegates_msisdn: "{{ 'http://matrix-ma1sd:' + matrix_ma1sd_default_port|string if matrix_ma1sd_enabled else '' }}" |
|
|
|
matrix_synapse_account_threepid_delegates_email: "{{ 'http://matrix-ma1sd:' + matrix_ma1sd_container_port|string if matrix_ma1sd_enabled else '' }}" |
|
|
|
matrix_synapse_account_threepid_delegates_msisdn: "{{ 'http://matrix-ma1sd:' + matrix_ma1sd_container_port|string if matrix_ma1sd_enabled else '' }}" |
|
|
|
|
|
|
|
# Normally, matrix-nginx-proxy is enabled and nginx can reach Synapse over the container network. |
|
|
|
# If matrix-nginx-proxy is not enabled, or you otherwise have a need for it, |
|
|
|
|