Signed-off-by: Suguru Hirahara <did🔑z6MkvVZk1A3KBApWJXv2Ju4H14ErDfRGxh8zxdXSZ4vACDg5>
pull/4913/head
| @@ -1,194 +0,0 @@ | |||
| # SPDX-FileCopyrightText: 2025 MDAD project contributors | |||
| # SPDX-FileCopyrightText: 2025 Slavi Pantaleev | |||
| # | |||
| # SPDX-License-Identifier: AGPL-3.0-or-later | |||
| --- | |||
| # conduwuit is a very cool, featureful fork of conduit (https://gitlab.com/famedly/conduit). | |||
| # Project source code URL: https://github.com/girlbossceo/conduwuit | |||
| # See: https://conduwuit.puppyirl.gay/ | |||
| matrix_conduwuit_enabled: true | |||
| matrix_conduwuit_hostname: '' | |||
| matrix_conduwuit_docker_image: "{{ matrix_conduwuit_docker_image_registry_prefix }}girlbossceo/conduwuit:{{ matrix_conduwuit_docker_image_tag }}" | |||
| matrix_conduwuit_docker_image_tag: v0.4.6-8f7ade4c22533a3177bfd8f175e178573ba6c1d4 | |||
| matrix_conduwuit_docker_image_force_pull: "{{ matrix_conduwuit_docker_image.endswith(':latest') }}" | |||
| matrix_conduwuit_docker_image_registry_prefix: "{{ matrix_conduwuit_docker_image_registry_prefix_upstream }}" | |||
| matrix_conduwuit_docker_image_registry_prefix_upstream: "{{ matrix_conduwuit_docker_image_registry_prefix_upstream_default }}" | |||
| matrix_conduwuit_docker_image_registry_prefix_upstream_default: ghcr.io/ | |||
| matrix_conduwuit_base_path: "{{ matrix_base_data_path }}/conduwuit" | |||
| matrix_conduwuit_config_path: "{{ matrix_conduwuit_base_path }}/config" | |||
| matrix_conduwuit_data_path: "{{ matrix_conduwuit_base_path }}/data" | |||
| matrix_conduwuit_config_port_number: 6167 | |||
| matrix_conduwuit_tmp_directory_size_mb: 500 | |||
| # List of systemd services that matrix-conduwuit.service depends on | |||
| matrix_conduwuit_systemd_required_services_list: "{{ matrix_conduwuit_systemd_required_services_list_default + matrix_conduwuit_systemd_required_services_list_auto + matrix_conduwuit_systemd_required_services_list_custom }}" | |||
| matrix_conduwuit_systemd_required_services_list_default: "{{ [devture_systemd_docker_base_docker_service_name] if devture_systemd_docker_base_docker_service_name else [] }}" | |||
| matrix_conduwuit_systemd_required_services_list_auto: [] | |||
| matrix_conduwuit_systemd_required_services_list_custom: [] | |||
| # List of systemd services that matrix-conduwuit.service wants | |||
| matrix_conduwuit_systemd_wanted_services_list: [] | |||
| # Controls how long to sleep for after starting the matrix-synapse container. | |||
| # | |||
| # Delaying, so that the homeserver can manage to fully start and various services | |||
| # that depend on it (`matrix_conduwuit_systemd_required_services_list` and `matrix_conduwuit_systemd_wanted_services_list`) | |||
| # may only start after the homeserver is up and running. | |||
| # | |||
| # This can be set to 0 to remove the delay. | |||
| matrix_conduwuit_systemd_service_post_start_delay_seconds: 3 | |||
| # The base container network. It will be auto-created by this role if it doesn't exist already. | |||
| matrix_conduwuit_container_network: "" | |||
| # A list of additional container networks that the container would be connected to. | |||
| # The role does not create these networks, so make sure they already exist. | |||
| # Use this to expose this container to another reverse proxy, which runs in a different container network. | |||
| matrix_conduwuit_container_additional_networks: "{{ matrix_conduwuit_container_additional_networks_auto + matrix_conduwuit_container_additional_networks_custom }}" | |||
| matrix_conduwuit_container_additional_networks_auto: [] | |||
| matrix_conduwuit_container_additional_networks_custom: [] | |||
| # matrix_conduwuit_container_labels_traefik_enabled controls whether labels to assist a Traefik reverse-proxy will be attached to the container. | |||
| # See `../templates/labels.j2` for details. | |||
| # | |||
| # To inject your own other container labels, see `matrix_conduwuit_container_labels_additional_labels`. | |||
| matrix_conduwuit_container_labels_traefik_enabled: true | |||
| matrix_conduwuit_container_labels_traefik_docker_network: "{{ matrix_conduwuit_container_network }}" | |||
| matrix_conduwuit_container_labels_traefik_entrypoints: web-secure | |||
| matrix_conduwuit_container_labels_traefik_tls_certResolver: default # noqa var-naming | |||
| # Controls whether labels will be added for handling the root (/) path on a public Traefik entrypoint. | |||
| matrix_conduwuit_container_labels_public_client_root_enabled: true | |||
| matrix_conduwuit_container_labels_public_client_root_traefik_hostname: "{{ matrix_conduwuit_hostname }}" | |||
| matrix_conduwuit_container_labels_public_client_root_traefik_rule: "Host(`{{ matrix_conduwuit_container_labels_public_client_root_traefik_hostname }}`) && Path(`/`)" | |||
| matrix_conduwuit_container_labels_public_client_root_traefik_priority: 0 | |||
| matrix_conduwuit_container_labels_public_client_root_traefik_entrypoints: "{{ matrix_conduwuit_container_labels_traefik_entrypoints }}" | |||
| matrix_conduwuit_container_labels_public_client_root_traefik_tls: "{{ matrix_conduwuit_container_labels_public_client_root_traefik_entrypoints != 'web' }}" | |||
| matrix_conduwuit_container_labels_public_client_root_traefik_tls_certResolver: "{{ matrix_conduwuit_container_labels_traefik_tls_certResolver }}" # noqa var-naming | |||
| matrix_conduwuit_container_labels_public_client_root_redirection_enabled: false | |||
| matrix_conduwuit_container_labels_public_client_root_redirection_url: "" | |||
| # Controls whether labels will be added that expose the Client-Server API on a public Traefik entrypoint. | |||
| matrix_conduwuit_container_labels_public_client_api_enabled: true | |||
| matrix_conduwuit_container_labels_public_client_api_traefik_hostname: "{{ matrix_conduwuit_hostname }}" | |||
| matrix_conduwuit_container_labels_public_client_api_traefik_path_prefix: /_matrix | |||
| matrix_conduwuit_container_labels_public_client_api_traefik_rule: "Host(`{{ matrix_conduwuit_container_labels_public_client_api_traefik_hostname }}`) && PathPrefix(`{{ matrix_conduwuit_container_labels_public_client_api_traefik_path_prefix }}`)" | |||
| matrix_conduwuit_container_labels_public_client_api_traefik_priority: 0 | |||
| matrix_conduwuit_container_labels_public_client_api_traefik_entrypoints: "{{ matrix_conduwuit_container_labels_traefik_entrypoints }}" | |||
| matrix_conduwuit_container_labels_public_client_api_traefik_tls: "{{ matrix_conduwuit_container_labels_public_client_api_traefik_entrypoints != 'web' }}" | |||
| matrix_conduwuit_container_labels_public_client_api_traefik_tls_certResolver: "{{ matrix_conduwuit_container_labels_traefik_tls_certResolver }}" # noqa var-naming | |||
| # Controls whether labels will be added that expose the Client-Server API on the internal Traefik entrypoint. | |||
| # This is similar to `matrix_conduwuit_container_labels_public_client_api_enabled`, but the entrypoint and intent is different. | |||
| matrix_conduwuit_container_labels_internal_client_api_enabled: false | |||
| matrix_conduwuit_container_labels_internal_client_api_traefik_path_prefix: "{{ matrix_conduwuit_container_labels_public_client_api_traefik_path_prefix }}" | |||
| matrix_conduwuit_container_labels_internal_client_api_traefik_rule: "PathPrefix(`{{ matrix_conduwuit_container_labels_internal_client_api_traefik_path_prefix }}`)" | |||
| matrix_conduwuit_container_labels_internal_client_api_traefik_priority: "{{ matrix_conduwuit_container_labels_public_client_api_traefik_priority }}" | |||
| matrix_conduwuit_container_labels_internal_client_api_traefik_entrypoints: "" | |||
| # Controls whether labels will be added that expose the Server-Server API (Federation API) on a public Traefik entrypoint. | |||
| matrix_conduwuit_container_labels_public_federation_api_enabled: "{{ matrix_conduwuit_config_allow_federation }}" | |||
| matrix_conduwuit_container_labels_public_federation_api_traefik_hostname: "{{ matrix_conduwuit_hostname }}" | |||
| matrix_conduwuit_container_labels_public_federation_api_traefik_path_prefix: /_matrix | |||
| matrix_conduwuit_container_labels_public_federation_api_traefik_rule: "Host(`{{ matrix_conduwuit_container_labels_public_federation_api_traefik_hostname }}`) && PathPrefix(`{{ matrix_conduwuit_container_labels_public_federation_api_traefik_path_prefix }}`)" | |||
| matrix_conduwuit_container_labels_public_federation_api_traefik_priority: 0 | |||
| matrix_conduwuit_container_labels_public_federation_api_traefik_entrypoints: '' | |||
| # TLS is force-enabled here, because the spec (https://spec.matrix.org/v1.9/server-server-api/#tls) says that the federation API must use HTTPS. | |||
| matrix_conduwuit_container_labels_public_federation_api_traefik_tls: true | |||
| matrix_conduwuit_container_labels_public_federation_api_traefik_tls_certResolver: "{{ matrix_conduwuit_container_labels_traefik_tls_certResolver }}" # noqa var-naming | |||
| # Controls whether labels will be added that expose the `/_conduwuit` path prefix on a public Traefik entrypoint. | |||
| matrix_conduwuit_container_labels_public_conduwuit_api_enabled: true | |||
| matrix_conduwuit_container_labels_public_conduwuit_api_traefik_hostname: "{{ matrix_conduwuit_hostname }}" | |||
| matrix_conduwuit_container_labels_public_conduwuit_api_traefik_path_prefix: /_conduwuit | |||
| matrix_conduwuit_container_labels_public_conduwuit_api_traefik_rule: "Host(`{{ matrix_conduwuit_container_labels_public_conduwuit_api_traefik_hostname }}`) && PathPrefix(`{{ matrix_conduwuit_container_labels_public_conduwuit_api_traefik_path_prefix }}`)" | |||
| matrix_conduwuit_container_labels_public_conduwuit_api_traefik_priority: 0 | |||
| matrix_conduwuit_container_labels_public_conduwuit_api_traefik_entrypoints: "{{ matrix_conduwuit_container_labels_traefik_entrypoints }}" | |||
| matrix_conduwuit_container_labels_public_conduwuit_api_traefik_tls: "{{ matrix_conduwuit_container_labels_public_conduwuit_api_traefik_entrypoints != 'web' }}" | |||
| matrix_conduwuit_container_labels_public_conduwuit_api_traefik_tls_certResolver: "{{ matrix_conduwuit_container_labels_traefik_tls_certResolver }}" # noqa var-naming | |||
| # matrix_conduwuit_container_labels_additional_labels contains a multiline string with additional labels to add to the container label file. | |||
| # See `../templates/labels.j2` for details. | |||
| # | |||
| # Example: | |||
| # matrix_conduwuit_container_labels_additional_labels: | | |||
| # my.label=1 | |||
| # another.label="here" | |||
| matrix_conduwuit_container_labels_additional_labels: '' | |||
| # Extra arguments for the Docker container | |||
| matrix_conduwuit_container_extra_arguments: [] | |||
| # Specifies which template files to use when configuring conduwuit. | |||
| # If you'd like to have your own different configuration, feel free to copy and paste | |||
| # the original files into your inventory (e.g. in `inventory/host_vars/matrix.example.com/`) | |||
| # and then change the specific host's `vars.yml` file like this: | |||
| # matrix_conduwuit_template_conduwuit_config: "{{ playbook_dir }}/inventory/host_vars/matrix.example.com/conduwuit.toml.j2" | |||
| matrix_conduwuit_template_conduwuit_config: "{{ role_path }}/templates/conduwuit.toml.j2" | |||
| # Max size for uploads, in bytes | |||
| matrix_conduwuit_config_server_name: "{{ matrix_domain }}" | |||
| # Max size for uploads, in bytes | |||
| matrix_conduwuit_config_max_request_size: 20_000_000 | |||
| # Enables registration. If set to false, no users can register on this server. | |||
| matrix_conduwuit_config_allow_registration: false | |||
| # Controls the `yes_i_am_very_very_sure_i_want_an_open_registration_server_prone_to_abuse` setting. | |||
| # This is only used when `matrix_conduwuit_config_allow_registration` is set to true and no registration token is configured. | |||
| matrix_conduwuit_config_yes_i_am_very_very_sure_i_want_an_open_registration_server_prone_to_abuse: false | |||
| # Controls the `registration_token` setting. | |||
| # When registration is enabled (`matrix_conduwuit_config_allow_registration`) you: | |||
| # - either need to set a token to protect registration from abuse | |||
| # - or you need to enable the `yes_i_am_very_very_sure_i_want_an_open_registration_server_prone_to_abuse` setting | |||
| # (see `matrix_conduwuit_config_yes_i_am_very_very_sure_i_want_an_open_registration_server_prone_to_abuse`), | |||
| # to allow registration without any form of 2nd-step. | |||
| matrix_conduwuit_config_registration_token: '' | |||
| # Controls the `new_user_displayname_suffix` setting. | |||
| # This is the suffix that will be added to the displayname of new users. | |||
| # Upstream defaults this to "🏳️⚧️", but we keep this consistent across all homeserver implementations and do not enable a suffix. | |||
| matrix_conduwuit_config_new_user_displayname_suffix: "" | |||
| # Controls the `allow_check_for_updates` setting. | |||
| matrix_conduwuit_config_allow_check_for_updates: false | |||
| # Controls the `emergency_password` setting. | |||
| matrix_conduwuit_config_emergency_password: '' | |||
| # Controls the `allow_federation` setting. | |||
| matrix_conduwuit_config_allow_federation: true | |||
| matrix_conduwuit_trusted_servers: | |||
| - "matrix.org" | |||
| matrix_conduwuit_config_log: "info,state_res=warn,rocket=off,_=off,sled=off" | |||
| # TURN integration. | |||
| # See: https://conduwuit.puppyirl.gay/turn.html | |||
| matrix_conduwuit_config_turn_uris: [] | |||
| matrix_conduwuit_config_turn_secret: '' | |||
| matrix_conduwuit_config_turn_username: '' | |||
| matrix_conduwuit_config_turn_password: '' | |||
| # Controls whether the self-check feature should validate SSL certificates. | |||
| matrix_conduwuit_self_check_validate_certificates: true | |||
| # Additional environment variables to pass to the container. | |||
| # | |||
| # Environment variables take priority over settings in the configuration file. | |||
| # | |||
| # Example: | |||
| # matrix_conduwuit_environment_variables_extension: | | |||
| # CONDUWUIT_MAX_REQUEST_SIZE=50000000 | |||
| # CONDUWUIT_REQUEST_TIMEOUT=60 | |||
| matrix_conduwuit_environment_variables_extension: '' | |||
| @@ -1,64 +0,0 @@ | |||
| # SPDX-FileCopyrightText: 2025 Slavi Pantaleev | |||
| # | |||
| # SPDX-License-Identifier: AGPL-3.0-or-later | |||
| --- | |||
| - name: Ensure conduwuit config path exists | |||
| ansible.builtin.file: | |||
| path: "{{ matrix_conduwuit_config_path }}" | |||
| state: directory | |||
| mode: 0750 | |||
| owner: "{{ matrix_user_name }}" | |||
| group: "{{ matrix_group_name }}" | |||
| - name: Ensure conduwuit data path exists | |||
| ansible.builtin.file: | |||
| path: "{{ matrix_conduwuit_data_path }}" | |||
| state: directory | |||
| mode: 0770 | |||
| owner: "{{ matrix_user_name }}" | |||
| group: "{{ matrix_group_name }}" | |||
| - name: Ensure conduwuit configuration installed | |||
| ansible.builtin.template: | |||
| src: "{{ matrix_conduwuit_template_conduwuit_config }}" | |||
| dest: "{{ matrix_conduwuit_config_path }}/conduwuit.toml" | |||
| mode: 0644 | |||
| owner: "{{ matrix_user_name }}" | |||
| group: "{{ matrix_group_name }}" | |||
| - name: Ensure conduwuit support files installed | |||
| ansible.builtin.template: | |||
| src: "{{ role_path }}/templates/{{ item }}.j2" | |||
| dest: "{{ matrix_conduwuit_base_path }}/{{ item }}" | |||
| mode: 0640 | |||
| owner: "{{ matrix_user_name }}" | |||
| group: "{{ matrix_group_name }}" | |||
| with_items: | |||
| - labels | |||
| - env | |||
| - name: Ensure conduwuit container network is created | |||
| community.general.docker_network: | |||
| enable_ipv6: "{{ devture_systemd_docker_base_ipv6_enabled }}" | |||
| name: "{{ matrix_conduwuit_container_network }}" | |||
| driver: bridge | |||
| driver_options: "{{ devture_systemd_docker_base_container_networks_driver_options }}" | |||
| - name: Ensure conduwuit container image is pulled | |||
| community.docker.docker_image: | |||
| name: "{{ matrix_conduwuit_docker_image }}" | |||
| source: "{{ 'pull' if ansible_version.major > 2 or ansible_version.minor > 7 else omit }}" | |||
| force_source: "{{ matrix_conduwuit_docker_image_force_pull if ansible_version.major > 2 or ansible_version.minor >= 8 else omit }}" | |||
| force: "{{ omit if ansible_version.major > 2 or ansible_version.minor >= 8 else matrix_conduwuit_docker_image_force_pull }}" | |||
| register: result | |||
| retries: "{{ devture_playbook_help_container_retries_count }}" | |||
| delay: "{{ devture_playbook_help_container_retries_delay }}" | |||
| until: result is not failed | |||
| - name: Ensure matrix-conduwuit.service installed | |||
| ansible.builtin.template: | |||
| src: "{{ role_path }}/templates/systemd/matrix-conduwuit.service.j2" | |||
| dest: "{{ devture_systemd_docker_base_systemd_path }}/matrix-conduwuit.service" | |||
| mode: 0644 | |||
| @@ -1,34 +0,0 @@ | |||
| # SPDX-FileCopyrightText: 2025 MDAD project contributors | |||
| # SPDX-FileCopyrightText: 2025 Slavi Pantaleev | |||
| # | |||
| # SPDX-License-Identifier: AGPL-3.0-or-later | |||
| --- | |||
| - tags: | |||
| - setup-all | |||
| - setup-conduwuit | |||
| - install-all | |||
| - install-conduwuit | |||
| block: | |||
| - when: matrix_conduwuit_enabled | bool | |||
| ansible.builtin.include_tasks: "{{ role_path }}/tasks/validate_config.yml" | |||
| - when: matrix_conduwuit_enabled | bool | |||
| ansible.builtin.include_tasks: "{{ role_path }}/tasks/install.yml" | |||
| - tags: | |||
| - setup-all | |||
| - setup-conduwuit | |||
| block: | |||
| - when: not matrix_conduwuit_enabled | bool | |||
| ansible.builtin.include_tasks: "{{ role_path }}/tasks/uninstall.yml" | |||
| - tags: | |||
| - self-check | |||
| block: | |||
| - when: matrix_conduwuit_enabled | bool | |||
| ansible.builtin.include_tasks: "{{ role_path }}/tasks/self_check_client_api.yml" | |||
| - when: matrix_conduwuit_enabled | bool | |||
| ansible.builtin.include_tasks: "{{ role_path }}/tasks/self_check_federation_api.yml" | |||
| @@ -1,28 +0,0 @@ | |||
| # SPDX-FileCopyrightText: 2025 Slavi Pantaleev | |||
| # SPDX-FileCopyrightText: 2025 Suguru Hirahara | |||
| # | |||
| # SPDX-License-Identifier: AGPL-3.0-or-later | |||
| --- | |||
| - name: Check Matrix Client API | |||
| ansible.builtin.uri: | |||
| url: "{{ matrix_conduwuit_client_api_url_endpoint_public }}" | |||
| follow_redirects: none | |||
| validate_certs: "{{ matrix_conduwuit_self_check_validate_certificates }}" | |||
| register: result_matrix_conduwuit_client_api | |||
| ignore_errors: true | |||
| check_mode: false | |||
| when: matrix_conduwuit_enabled | bool | |||
| delegate_to: 127.0.0.1 | |||
| become: false | |||
| - name: Fail if Matrix Client API not working | |||
| ansible.builtin.fail: | |||
| msg: "Failed checking Matrix Client API is up at `{{ matrix_server_fqn_matrix }}` (checked endpoint: `{{ matrix_conduwuit_client_api_url_endpoint_public }}`). Is conduwuit running? Is port 443 open in your firewall? Full error: {{ result_matrix_conduwuit_client_api }}" | |||
| when: "matrix_conduwuit_enabled | bool and (result_matrix_conduwuit_client_api.failed or 'json' not in result_matrix_conduwuit_client_api)" | |||
| - name: Report working Matrix Client API | |||
| ansible.builtin.debug: | |||
| msg: "The Matrix Client API at `{{ matrix_server_fqn_matrix }}` (checked endpoint: `{{ matrix_conduwuit_client_api_url_endpoint_public }}`) is working" | |||
| when: matrix_conduwuit_enabled | bool | |||
| @@ -1,32 +0,0 @@ | |||
| # SPDX-FileCopyrightText: 2025 Slavi Pantaleev | |||
| # | |||
| # SPDX-License-Identifier: AGPL-3.0-or-later | |||
| --- | |||
| - name: Check Matrix Federation API | |||
| ansible.builtin.uri: | |||
| url: "{{ matrix_synapse_federation_api_url_endpoint_public }}" | |||
| follow_redirects: none | |||
| validate_certs: "{{ matrix_synapse_self_check_validate_certificates }}" | |||
| register: result_matrix_synapse_federation_api | |||
| ignore_errors: true | |||
| check_mode: false | |||
| when: matrix_synapse_enabled | bool | |||
| delegate_to: 127.0.0.1 | |||
| become: false | |||
| - name: Fail if Matrix Federation API not working | |||
| ansible.builtin.fail: | |||
| msg: "Failed checking Matrix Federation API is up at `{{ matrix_server_fqn_matrix }}` (checked endpoint: `{{ matrix_synapse_federation_api_url_endpoint_public }}`). Is Synapse running? Is port {{ matrix_federation_public_port }} open in your firewall? Full error: {{ result_matrix_synapse_federation_api }}" | |||
| when: "matrix_synapse_enabled | bool and matrix_synapse_federation_enabled | bool and (result_matrix_synapse_federation_api.failed or 'json' not in result_matrix_synapse_federation_api)" | |||
| - name: Fail if Matrix Federation API unexpectedly enabled | |||
| ansible.builtin.fail: | |||
| msg: "Matrix Federation API is up at `{{ matrix_server_fqn_matrix }}` (checked endpoint: `{{ matrix_synapse_federation_api_url_endpoint_public }}`) despite being disabled." | |||
| when: "matrix_synapse_enabled | bool and not matrix_synapse_federation_enabled | bool and not result_matrix_synapse_federation_api.failed" | |||
| - name: Report working Matrix Federation API | |||
| ansible.builtin.debug: | |||
| msg: "The Matrix Federation API at `{{ matrix_server_fqn_matrix }}` (checked endpoint: `{{ matrix_synapse_federation_api_url_endpoint_public }}`) is working" | |||
| when: "matrix_synapse_enabled | bool and matrix_synapse_federation_enabled | bool" | |||
| @@ -1,63 +0,0 @@ | |||
| # SPDX-FileCopyrightText: 2025 MDAD project contributors | |||
| # | |||
| # SPDX-License-Identifier: AGPL-3.0-or-later | |||
| --- | |||
| - name: Ensure conduwuit config path exists | |||
| ansible.builtin.file: | |||
| path: "{{ matrix_conduwuit_config_path }}" | |||
| state: directory | |||
| mode: 0750 | |||
| owner: "{{ matrix_user_name }}" | |||
| group: "{{ matrix_group_name }}" | |||
| - name: Ensure conduwuit data path exists | |||
| ansible.builtin.file: | |||
| path: "{{ matrix_conduwuit_data_path }}" | |||
| state: directory | |||
| mode: 0770 | |||
| owner: "{{ matrix_user_name }}" | |||
| group: "{{ matrix_group_name }}" | |||
| - name: Ensure conduwuit configuration installed | |||
| ansible.builtin.template: | |||
| src: "{{ matrix_conduwuit_template_conduwuit_config }}" | |||
| dest: "{{ matrix_conduwuit_config_path }}/conduwuit.toml" | |||
| mode: 0644 | |||
| owner: "{{ matrix_user_name }}" | |||
| group: "{{ matrix_group_name }}" | |||
| - name: Ensure conduwuit support files installed | |||
| ansible.builtin.template: | |||
| src: "{{ role_path }}/templates/{{ item }}.j2" | |||
| dest: "{{ matrix_conduwuit_base_path }}/{{ item }}" | |||
| mode: 0640 | |||
| owner: "{{ matrix_user_name }}" | |||
| group: "{{ matrix_group_name }}" | |||
| with_items: | |||
| - labels | |||
| - name: Ensure conduwuit container network is created | |||
| community.general.docker_network: | |||
| enable_ipv6: "{{ devture_systemd_docker_base_ipv6_enabled }}" | |||
| name: "{{ matrix_conduwuit_container_network }}" | |||
| driver: bridge | |||
| driver_options: "{{ devture_systemd_docker_base_container_networks_driver_options }}" | |||
| - name: Ensure conduwuit container image is pulled | |||
| community.docker.docker_image: | |||
| name: "{{ matrix_conduwuit_docker_image }}" | |||
| source: "{{ 'pull' if ansible_version.major > 2 or ansible_version.minor > 7 else omit }}" | |||
| force_source: "{{ matrix_conduwuit_docker_image_force_pull if ansible_version.major > 2 or ansible_version.minor >= 8 else omit }}" | |||
| force: "{{ omit if ansible_version.major > 2 or ansible_version.minor >= 8 else matrix_conduwuit_docker_image_force_pull }}" | |||
| register: result | |||
| retries: "{{ devture_playbook_help_container_retries_count }}" | |||
| delay: "{{ devture_playbook_help_container_retries_delay }}" | |||
| until: result is not failed | |||
| - name: Ensure matrix-conduwuit.service installed | |||
| ansible.builtin.template: | |||
| src: "{{ role_path }}/templates/systemd/matrix-conduwuit.service.j2" | |||
| dest: "{{ devture_systemd_docker_base_systemd_path }}/matrix-conduwuit.service" | |||
| mode: 0644 | |||
| @@ -1,23 +0,0 @@ | |||
| # SPDX-FileCopyrightText: 2025 MDAD project contributors | |||
| # | |||
| # SPDX-License-Identifier: AGPL-3.0-or-later | |||
| --- | |||
| - name: Check existence of matrix-conduwuit service | |||
| ansible.builtin.stat: | |||
| path: "{{ devture_systemd_docker_base_systemd_path }}/matrix-conduwuit.service" | |||
| register: matrix_conduwuit_service_stat | |||
| - when: matrix_conduwuit_service_stat.stat.exists | bool | |||
| block: | |||
| - name: Ensure matrix-conduwuit is stopped | |||
| ansible.builtin.systemd: | |||
| name: matrix-conduwuit | |||
| state: stopped | |||
| daemon_reload: true | |||
| - name: Ensure matrix-conduwuit.service doesn't exist | |||
| ansible.builtin.file: | |||
| path: "{{ devture_systemd_docker_base_systemd_path }}/matrix-conduwuit.service" | |||
| state: absent | |||
| @@ -1,23 +0,0 @@ | |||
| # SPDX-FileCopyrightText: 2025 Slavi Pantaleev | |||
| # | |||
| # SPDX-License-Identifier: AGPL-3.0-or-later | |||
| --- | |||
| - name: Check existence of matrix-conduwuit service | |||
| ansible.builtin.stat: | |||
| path: "{{ devture_systemd_docker_base_systemd_path }}/matrix-conduwuit.service" | |||
| register: matrix_conduwuit_service_stat | |||
| - when: matrix_conduwuit_service_stat.stat.exists | bool | |||
| block: | |||
| - name: Ensure matrix-conduwuit is stopped | |||
| ansible.builtin.systemd: | |||
| name: matrix-conduwuit | |||
| state: stopped | |||
| daemon_reload: true | |||
| - name: Ensure matrix-conduwuit.service doesn't exist | |||
| ansible.builtin.file: | |||
| path: "{{ devture_systemd_docker_base_systemd_path }}/matrix-conduwuit.service" | |||
| state: absent | |||
| @@ -1,15 +0,0 @@ | |||
| # SPDX-FileCopyrightText: 2025 MDAD project contributors | |||
| # | |||
| # SPDX-License-Identifier: AGPL-3.0-or-later | |||
| --- | |||
| - name: Fail if required conduwuit settings not defined | |||
| ansible.builtin.fail: | |||
| msg: >- | |||
| You need to define a required configuration setting (`{{ item.name }}`). | |||
| when: "item.when | bool and lookup('vars', item.name, default='') | string | length == 0" | |||
| with_items: | |||
| - {'name': 'matrix_conduwuit_hostname', when: true} | |||
| - {'name': 'matrix_conduwuit_container_network', when: true} | |||
| - {'name': 'matrix_conduwuit_container_labels_internal_client_api_traefik_entrypoints', when: "{{ matrix_conduwuit_container_labels_internal_client_api_enabled }}"} | |||
| @@ -1 +0,0 @@ | |||
| {{ matrix_conduwuit_environment_variables_extension }} | |||
| @@ -1,3 +0,0 @@ | |||
| SPDX-FileCopyrightText: 2025 Slavi Pantaleev | |||
| SPDX-License-Identifier: AGPL-3.0-or-later | |||
| @@ -1,173 +0,0 @@ | |||
| {# | |||
| SPDX-FileCopyrightText: 2025 MDAD project contributors | |||
| SPDX-FileCopyrightText: 2025 Slavi Pantaleev | |||
| SPDX-FileCopyrightText: 2025 Suguru Hirahara | |||
| SPDX-License-Identifier: AGPL-3.0-or-later | |||
| #} | |||
| {% if matrix_conduwuit_container_labels_traefik_enabled %} | |||
| traefik.enable=true | |||
| {% if matrix_conduwuit_container_labels_traefik_docker_network %} | |||
| traefik.docker.network={{ matrix_conduwuit_container_labels_traefik_docker_network }} | |||
| {% endif %} | |||
| traefik.http.services.matrix-conduwuit.loadbalancer.server.port={{ matrix_conduwuit_config_port_number }} | |||
| {% if matrix_conduwuit_container_labels_public_client_root_enabled %} | |||
| ############################################################ | |||
| # # | |||
| # Public Root path (/) # | |||
| # # | |||
| ############################################################ | |||
| {% set client_root_middlewares = [] %} | |||
| {% if matrix_conduwuit_container_labels_public_client_root_redirection_enabled %} | |||
| {% set client_root_middlewares = client_root_middlewares + ['matrix-conduwuit-client-root-redirect'] %} | |||
| traefik.http.middlewares.matrix-conduwuit-client-root-redirect.redirectregex.regex=(.*) | |||
| traefik.http.middlewares.matrix-conduwuit-client-root-redirect.redirectregex.replacement={{ matrix_conduwuit_container_labels_public_client_root_redirection_url }} | |||
| {% endif %} | |||
| traefik.http.routers.matrix-conduwuit-public-client-root.rule={{ matrix_conduwuit_container_labels_public_client_root_traefik_rule }} | |||
| traefik.http.routers.matrix-conduwuit-public-client-root.middlewares={{ client_root_middlewares | join(',') }} | |||
| {% if matrix_conduwuit_container_labels_public_client_root_traefik_priority | int > 0 %} | |||
| traefik.http.routers.matrix-conduwuit-public-client-root.priority={{ matrix_conduwuit_container_labels_public_client_root_traefik_priority }} | |||
| {% endif %} | |||
| traefik.http.routers.matrix-conduwuit-public-client-root.service=matrix-conduwuit | |||
| traefik.http.routers.matrix-conduwuit-public-client-root.entrypoints={{ matrix_conduwuit_container_labels_public_client_root_traefik_entrypoints }} | |||
| traefik.http.routers.matrix-conduwuit-public-client-root.tls={{ matrix_conduwuit_container_labels_public_client_root_traefik_tls | to_json }} | |||
| {% if matrix_conduwuit_container_labels_public_client_root_traefik_tls %} | |||
| traefik.http.routers.matrix-conduwuit-public-client-root.tls.certResolver={{ matrix_conduwuit_container_labels_public_client_root_traefik_tls_certResolver }} | |||
| {% endif %} | |||
| ############################################################ | |||
| # # | |||
| # /Public Root path (/) # | |||
| # # | |||
| ############################################################ | |||
| {% endif %} | |||
| {% if matrix_conduwuit_container_labels_public_client_api_enabled %} | |||
| ############################################################ | |||
| # # | |||
| # Public Client-API (/_matrix) # | |||
| # # | |||
| ############################################################ | |||
| traefik.http.routers.matrix-conduwuit-public-client-api.rule={{ matrix_conduwuit_container_labels_public_client_api_traefik_rule }} | |||
| {% if matrix_conduwuit_container_labels_public_client_api_traefik_priority | int > 0 %} | |||
| traefik.http.routers.matrix-conduwuit-public-client-api.priority={{ matrix_conduwuit_container_labels_public_client_api_traefik_priority }} | |||
| {% endif %} | |||
| traefik.http.routers.matrix-conduwuit-public-client-api.service=matrix-conduwuit | |||
| traefik.http.routers.matrix-conduwuit-public-client-api.entrypoints={{ matrix_conduwuit_container_labels_public_client_api_traefik_entrypoints }} | |||
| traefik.http.routers.matrix-conduwuit-public-client-api.tls={{ matrix_conduwuit_container_labels_public_client_api_traefik_tls | to_json }} | |||
| {% if matrix_conduwuit_container_labels_public_client_api_traefik_tls %} | |||
| traefik.http.routers.matrix-conduwuit-public-client-api.tls.certResolver={{ matrix_conduwuit_container_labels_public_client_api_traefik_tls_certResolver }} | |||
| {% endif %} | |||
| ############################################################ | |||
| # # | |||
| # /Public Client-API (/_matrix) # | |||
| # # | |||
| ############################################################ | |||
| {% endif %} | |||
| {% if matrix_conduwuit_container_labels_internal_client_api_enabled %} | |||
| ############################################################ | |||
| # # | |||
| # Internal Client-API (/_matrix) # | |||
| # # | |||
| ############################################################ | |||
| traefik.http.routers.matrix-conduwuit-internal-client-api.rule={{ matrix_conduwuit_container_labels_internal_client_api_traefik_rule }} | |||
| {% if matrix_conduwuit_container_labels_internal_client_api_traefik_priority | int > 0 %} | |||
| traefik.http.routers.matrix-conduwuit-internal-client-api.priority={{ matrix_conduwuit_container_labels_internal_client_api_traefik_priority }} | |||
| {% endif %} | |||
| traefik.http.routers.matrix-conduwuit-internal-client-api.service=matrix-conduwuit | |||
| traefik.http.routers.matrix-conduwuit-internal-client-api.entrypoints={{ matrix_conduwuit_container_labels_internal_client_api_traefik_entrypoints }} | |||
| ############################################################ | |||
| # # | |||
| # /Internal Client-API (/_matrix) # | |||
| # # | |||
| ############################################################ | |||
| {% endif %} | |||
| {% if matrix_conduwuit_container_labels_public_federation_api_enabled %} | |||
| ############################################################ | |||
| # # | |||
| # Public Federation-API (/_matrix) # | |||
| # # | |||
| ############################################################ | |||
| traefik.http.routers.matrix-conduwuit-public-federation-api.rule={{ matrix_conduwuit_container_labels_public_federation_api_traefik_rule }} | |||
| {% if matrix_conduwuit_container_labels_public_federation_api_traefik_priority | int > 0 %} | |||
| traefik.http.routers.matrix-conduwuit-public-federation-api.priority={{ matrix_conduwuit_container_labels_public_federation_api_traefik_priority }} | |||
| {% endif %} | |||
| traefik.http.routers.matrix-conduwuit-public-federation-api.service=matrix-conduwuit | |||
| traefik.http.routers.matrix-conduwuit-public-federation-api.entrypoints={{ matrix_conduwuit_container_labels_public_federation_api_traefik_entrypoints }} | |||
| traefik.http.routers.matrix-conduwuit-public-federation-api.tls={{ matrix_conduwuit_container_labels_public_federation_api_traefik_tls | to_json }} | |||
| {% if matrix_conduwuit_container_labels_public_federation_api_traefik_tls %} | |||
| traefik.http.routers.matrix-conduwuit-public-federation-api.tls.certResolver={{ matrix_conduwuit_container_labels_public_federation_api_traefik_tls_certResolver }} | |||
| {% endif %} | |||
| ############################################################ | |||
| # # | |||
| # /Public Federation-API (/_matrix) # | |||
| # # | |||
| ############################################################ | |||
| {% endif %} | |||
| {% if matrix_conduwuit_container_labels_public_conduwuit_api_enabled %} | |||
| ############################################################ | |||
| # # | |||
| # Public conduwuit-API (/_conduwuit) # | |||
| # # | |||
| ############################################################ | |||
| traefik.http.routers.matrix-conduwuit-public-conduwuit-api.rule={{ matrix_conduwuit_container_labels_public_conduwuit_api_traefik_rule }} | |||
| {% if matrix_conduwuit_container_labels_public_conduwuit_api_traefik_priority | int > 0 %} | |||
| traefik.http.routers.matrix-conduwuit-public-conduwuit-api.priority={{ matrix_conduwuit_container_labels_public_conduwuit_api_traefik_priority }} | |||
| {% endif %} | |||
| traefik.http.routers.matrix-conduwuit-public-conduwuit-api.service=matrix-conduwuit | |||
| traefik.http.routers.matrix-conduwuit-public-conduwuit-api.entrypoints={{ matrix_conduwuit_container_labels_public_conduwuit_api_traefik_entrypoints }} | |||
| traefik.http.routers.matrix-conduwuit-public-conduwuit-api.tls={{ matrix_conduwuit_container_labels_public_conduwuit_api_traefik_tls | to_json }} | |||
| {% if matrix_conduwuit_container_labels_public_conduwuit_api_traefik_tls %} | |||
| traefik.http.routers.matrix-conduwuit-public-conduwuit-api.tls.certResolver={{ matrix_conduwuit_container_labels_public_conduwuit_api_traefik_tls_certResolver }} | |||
| {% endif %} | |||
| ############################################################ | |||
| # # | |||
| # /Public conduwuit-API (/_conduwuit) # | |||
| # # | |||
| ############################################################ | |||
| {% endif %} | |||
| {% endif %} | |||
| {{ matrix_conduwuit_container_labels_additional_labels }} | |||
| @@ -1,51 +0,0 @@ | |||
| #jinja2: lstrip_blocks: True | |||
| [Unit] | |||
| Description=conduwuit Matrix homeserver | |||
| {% for service in matrix_conduwuit_systemd_required_services_list %} | |||
| Requires={{ service }} | |||
| After={{ service }} | |||
| {% endfor %} | |||
| [Service] | |||
| Type=simple | |||
| Environment="HOME={{ devture_systemd_docker_base_systemd_unit_home_path }}" | |||
| ExecStartPre=-{{ devture_systemd_docker_base_host_command_sh }} -c '{{ devture_systemd_docker_base_host_command_docker }} stop -t {{ devture_systemd_docker_base_container_stop_grace_time_seconds }} matrix-conduwuit 2>/dev/null || true' | |||
| ExecStartPre=-{{ devture_systemd_docker_base_host_command_sh }} -c '{{ devture_systemd_docker_base_host_command_docker }} rm matrix-conduwuit 2>/dev/null || true' | |||
| ExecStartPre={{ devture_systemd_docker_base_host_command_docker }} create \ | |||
| --rm \ | |||
| --name=matrix-conduwuit \ | |||
| --log-driver=none \ | |||
| --user={{ matrix_user_uid }}:{{ matrix_user_gid }} \ | |||
| --cap-drop=ALL \ | |||
| --read-only \ | |||
| --tmpfs=/tmp:rw,noexec,nosuid,size={{ matrix_conduwuit_tmp_directory_size_mb }}m \ | |||
| --network={{ matrix_conduwuit_container_network }} \ | |||
| --env CONDUWUIT_CONFIG=/etc/conduwuit/conduwuit.toml \ | |||
| --label-file={{ matrix_conduwuit_base_path }}/labels \ | |||
| --mount type=bind,src={{ matrix_conduwuit_data_path }},dst=/var/lib/conduwuit \ | |||
| --mount type=bind,src={{ matrix_conduwuit_config_path }},dst=/etc/conduwuit,ro \ | |||
| {% for arg in matrix_conduwuit_container_extra_arguments %} | |||
| {{ arg }} \ | |||
| {% endfor %} | |||
| {{ matrix_conduwuit_docker_image }} | |||
| {% for network in matrix_conduwuit_container_additional_networks %} | |||
| ExecStartPre={{ devture_systemd_docker_base_host_command_docker }} network connect {{ network }} matrix-conduwuit | |||
| {% endfor %} | |||
| ExecStart={{ devture_systemd_docker_base_host_command_docker }} start --attach matrix-conduwuit | |||
| {% if matrix_conduwuit_systemd_service_post_start_delay_seconds != 0 %} | |||
| ExecStartPost=-{{ matrix_host_command_sleep }} {{ matrix_conduwuit_systemd_service_post_start_delay_seconds }} | |||
| {% endif %} | |||
| ExecStop=-{{ devture_systemd_docker_base_host_command_sh }} -c '{{ devture_systemd_docker_base_host_command_docker }} stop -t {{ devture_systemd_docker_base_container_stop_grace_time_seconds }} matrix-conduwuit 2>/dev/null || true' | |||
| ExecStop=-{{ devture_systemd_docker_base_host_command_sh }} -c '{{ devture_systemd_docker_base_host_command_docker }} rm matrix-conduwuit 2>/dev/null || true' | |||
| ExecReload={{ devture_systemd_docker_base_host_command_docker }} exec matrix-conduwuit /bin/sh -c 'kill -HUP 1' | |||
| Restart=always | |||
| RestartSec=30 | |||
| SyslogIdentifier=matrix-conduwuit | |||
| [Install] | |||
| WantedBy=multi-user.target | |||
| @@ -1,4 +0,0 @@ | |||
| SPDX-FileCopyrightText: 2025 MDAD project contributors | |||
| SPDX-FileCopyrightText: 2025 Slavi Pantaleev | |||
| SPDX-License-Identifier: AGPL-3.0-or-later | |||
| @@ -1,9 +0,0 @@ | |||
| # SPDX-FileCopyrightText: 2025 MDAD project contributors | |||
| # SPDX-FileCopyrightText: 2025 Slavi Pantaleev | |||
| # | |||
| # SPDX-License-Identifier: AGPL-3.0-or-later | |||
| --- | |||
| matrix_conduwuit_client_api_url_endpoint_public: "{{ 'https' if matrix_playbook_ssl_enabled else 'http' }}://{{ matrix_conduwuit_hostname }}/_matrix/client/versions" | |||
| matrix_conduwuit_federation_api_url_endpoint_public: "{{ 'https' if matrix_playbook_ssl_enabled else 'http' }}://{{ matrix_conduwuit_hostname }}:{{ matrix_federation_public_port }}/_matrix/federation/v1/version" | |||