Signed-off-by: Suguru Hirahara <acioustick@noreply.codeberg.org>pull/4124/head
| @@ -1,3 +1,10 @@ | |||||
| <!-- | |||||
| SPDX-FileCopyrightText: 2024 - 2025 Slavi Pantaleev | |||||
| SPDX-FileCopyrightText: 2024 - 2025 Suguru Hirahara | |||||
| SPDX-License-Identifier: AGPL-3.0-or-later | |||||
| --> | |||||
| # Setting up Matrix Authentication Service (optional) | # Setting up Matrix Authentication Service (optional) | ||||
| The playbook can install and configure [Matrix Authentication Service](https://github.com/element-hq/matrix-authentication-service/) (MAS) — a service operating alongside your existing [Synapse](./configuring-playbook-synapse.md) homeserver and providing [better authentication, session management and permissions in Matrix](https://matrix.org/blog/2023/09/better-auth/). | The playbook can install and configure [Matrix Authentication Service](https://github.com/element-hq/matrix-authentication-service/) (MAS) — a service operating alongside your existing [Synapse](./configuring-playbook-synapse.md) homeserver and providing [better authentication, session management and permissions in Matrix](https://matrix.org/blog/2023/09/better-auth/). | ||||
| @@ -1,3 +1,8 @@ | |||||
| # SPDX-FileCopyrightText: 2024 - 2025 Slavi Pantaleev | |||||
| # SPDX-FileCopyrightText: 2025 Suguru Hirahara | |||||
| # | |||||
| # SPDX-License-Identifier: AGPL-3.0-or-later | |||||
| --- | --- | ||||
| # matrix-authentication-service (MAS) is an OAuth 2.0 and OpenID Provider server for Matrix. | # matrix-authentication-service (MAS) is an OAuth 2.0 and OpenID Provider server for Matrix. | ||||
| @@ -1,3 +1,7 @@ | |||||
| # SPDX-FileCopyrightText: 2024 Slavi Pantaleev | |||||
| # | |||||
| # SPDX-License-Identifier: AGPL-3.0-or-later | |||||
| --- | --- | ||||
| - name: Ensure Matrix Authentication Service paths exist | - name: Ensure Matrix Authentication Service paths exist | ||||
| @@ -1,3 +1,7 @@ | |||||
| # SPDX-FileCopyrightText: 2024 Slavi Pantaleev | |||||
| # | |||||
| # SPDX-License-Identifier: AGPL-3.0-or-later | |||||
| --- | --- | ||||
| - tags: | - tags: | ||||
| @@ -1,3 +1,7 @@ | |||||
| # SPDX-FileCopyrightText: 2024 Slavi Pantaleev | |||||
| # | |||||
| # SPDX-License-Identifier: AGPL-3.0-or-later | |||||
| --- | --- | ||||
| - name: Ensure Matrix Authentication Service is started | - name: Ensure Matrix Authentication Service is started | ||||
| @@ -1,3 +1,7 @@ | |||||
| # SPDX-FileCopyrightText: 2024 Slavi Pantaleev | |||||
| # | |||||
| # SPDX-License-Identifier: AGPL-3.0-or-later | |||||
| --- | --- | ||||
| - name: Fail if playbook called incorrectly | - name: Fail if playbook called incorrectly | ||||
| @@ -1,3 +1,8 @@ | |||||
| # SPDX-FileCopyrightText: 2024 Slavi Pantaleev | |||||
| # SPDX-FileCopyrightText: 2025 Suguru Hirahara | |||||
| # | |||||
| # SPDX-License-Identifier: AGPL-3.0-or-later | |||||
| --- | --- | ||||
| - ansible.builtin.set_fact: | - ansible.builtin.set_fact: | ||||
| @@ -1,3 +1,7 @@ | |||||
| # SPDX-FileCopyrightText: 2024 - 2025 Slavi Pantaleev | |||||
| # | |||||
| # SPDX-License-Identifier: AGPL-3.0-or-later | |||||
| --- | --- | ||||
| - name: Check existence of matrix-authentication-service service | - name: Check existence of matrix-authentication-service service | ||||
| @@ -1,3 +1,7 @@ | |||||
| # SPDX-FileCopyrightText: 2024 Slavi Pantaleev | |||||
| # | |||||
| # SPDX-License-Identifier: AGPL-3.0-or-later | |||||
| --- | --- | ||||
| - name: Prepare Matrix Authentication Service private key file path ({{ private_key_definition.key_file }}) | - name: Prepare Matrix Authentication Service private key file path ({{ private_key_definition.key_file }}) | ||||
| @@ -1,3 +1,7 @@ | |||||
| # SPDX-FileCopyrightText: 2024 - 2025 Slavi Pantaleev | |||||
| # | |||||
| # SPDX-License-Identifier: AGPL-3.0-or-later | |||||
| --- | --- | ||||
| - name: Fail if required matrix-authentication-service settings not defined | - name: Fail if required matrix-authentication-service settings not defined | ||||
| @@ -0,0 +1,3 @@ | |||||
| SPDX-FileCopyrightText: 2024 Slavi Pantaleev | |||||
| SPDX-License-Identifier: AGPL-3.0-or-later | |||||
| @@ -0,0 +1,3 @@ | |||||
| SPDX-FileCopyrightText: 2024 Slavi Pantaleev | |||||
| SPDX-License-Identifier: AGPL-3.0-or-later | |||||
| @@ -0,0 +1,3 @@ | |||||
| SPDX-FileCopyrightText: 2024 Slavi Pantaleev | |||||
| SPDX-License-Identifier: AGPL-3.0-or-later | |||||
| @@ -1 +1,7 @@ | |||||
| {# | |||||
| SPDX-FileCopyrightText: 2024 Slavi Pantaleev | |||||
| SPDX-License-Identifier: AGPL-3.0-or-later | |||||
| #} | |||||
| {{ matrix_authentication_service_environment_variables_extension }} | {{ matrix_authentication_service_environment_variables_extension }} | ||||
| @@ -1,3 +1,9 @@ | |||||
| {# | |||||
| SPDX-FileCopyrightText: 2024 Slavi Pantaleev | |||||
| SPDX-License-Identifier: AGPL-3.0-or-later | |||||
| #} | |||||
| {% if matrix_authentication_service_container_labels_traefik_enabled %} | {% if matrix_authentication_service_container_labels_traefik_enabled %} | ||||
| traefik.enable=true | traefik.enable=true | ||||
| @@ -0,0 +1,3 @@ | |||||
| SPDX-FileCopyrightText: 2024 Slavi Pantaleev | |||||
| SPDX-License-Identifier: AGPL-3.0-or-later | |||||
| @@ -0,0 +1,3 @@ | |||||
| SPDX-FileCopyrightText: 2024 Slavi Pantaleev | |||||
| SPDX-License-Identifier: AGPL-3.0-or-later | |||||
| @@ -0,0 +1,3 @@ | |||||
| SPDX-FileCopyrightText: 2024 Slavi Pantaleev | |||||
| SPDX-License-Identifier: AGPL-3.0-or-later | |||||
| @@ -0,0 +1,3 @@ | |||||
| SPDX-FileCopyrightText: 2024 Slavi Pantaleev | |||||
| SPDX-License-Identifier: AGPL-3.0-or-later | |||||
| @@ -0,0 +1,3 @@ | |||||
| SPDX-FileCopyrightText: 2024 - 2025 Slavi Pantaleev | |||||
| SPDX-License-Identifier: AGPL-3.0-or-later | |||||
| @@ -1,3 +1,7 @@ | |||||
| # SPDX-FileCopyrightText: 2024 Slavi Pantaleev | |||||
| # | |||||
| # SPDX-License-Identifier: AGPL-3.0-or-later | |||||
| --- | --- | ||||
| # Like `matrix_authentication_service_config_http_public_base` but a private base URL only accessible from within the container network. | # Like `matrix_authentication_service_config_http_public_base` but a private base URL only accessible from within the container network. | ||||