Matrix Docker Ansible eploy
Non puoi selezionare più di 25 argomenti Gli argomenti devono iniziare con una lettera o un numero, possono includere trattini ('-') e possono essere lunghi fino a 35 caratteri.
 
 

166 righe
10 KiB

  1. # SPDX-FileCopyrightText: 2022 - 2024 Samuel Meenzen
  2. # SPDX-FileCopyrightText: 2022 - 2025 Slavi Pantaleev
  3. # SPDX-FileCopyrightText: 2022 Charles Wright
  4. # SPDX-FileCopyrightText: 2024 - 2025 Suguru Hirahara
  5. #
  6. # SPDX-License-Identifier: AGPL-3.0-or-later
  7. ---
  8. # Conduit is a simple, fast and reliable chat server powered by Matrix
  9. # Project source code URL: https://gitlab.com/famedly/conduit
  10. # See: https://conduit.rs
  11. matrix_conduit_enabled: true
  12. matrix_conduit_hostname: ''
  13. matrix_conduit_container_image: "{{ matrix_conduit_container_image_registry_prefix }}matrixconduit/matrix-conduit:{{ matrix_conduit_container_image_tag }}"
  14. matrix_conduit_container_image_registry_prefix: "{{ matrix_conduit_container_image_registry_prefix_upstream }}"
  15. matrix_conduit_container_image_registry_prefix_upstream: "{{ matrix_conduit_container_image_registry_prefix_upstream_default }}"
  16. matrix_conduit_container_image_registry_prefix_upstream_default: docker.io/
  17. # renovate: datasource=docker depName=matrixconduit/matrix-conduit
  18. matrix_conduit_container_image_tag: "v0.10.12"
  19. matrix_conduit_base_path: "{{ matrix_base_data_path }}/conduit"
  20. matrix_conduit_config_path: "{{ matrix_conduit_base_path }}/config"
  21. matrix_conduit_data_path: "{{ matrix_conduit_base_path }}/data"
  22. matrix_conduit_port_number: 6167
  23. matrix_conduit_tmp_directory_size_mb: 500
  24. # List of systemd services that matrix-conduit.service depends on
  25. matrix_conduit_systemd_required_services_list: "{{ matrix_conduit_systemd_required_services_list_default + matrix_conduit_systemd_required_services_list_auto + matrix_conduit_systemd_required_services_list_custom }}"
  26. matrix_conduit_systemd_required_services_list_default: "{{ [devture_systemd_docker_base_docker_service_name] if devture_systemd_docker_base_docker_service_name else [] }}"
  27. matrix_conduit_systemd_required_services_list_auto: []
  28. matrix_conduit_systemd_required_services_list_custom: []
  29. # List of systemd services that matrix-conduit.service wants
  30. matrix_conduit_systemd_wanted_services_list: []
  31. # Controls how long to sleep for after starting the matrix-synapse container.
  32. #
  33. # Delaying, so that the homeserver can manage to fully start and various services
  34. # that depend on it (`matrix_conduit_systemd_required_services_list` and `matrix_conduit_systemd_wanted_services_list`)
  35. # may only start after the homeserver is up and running.
  36. #
  37. # This can be set to 0 to remove the delay.
  38. matrix_conduit_systemd_service_post_start_delay_seconds: 3
  39. # The base container network. It will be auto-created by this role if it doesn't exist already.
  40. matrix_conduit_container_network: ""
  41. # A list of additional container networks that the container would be connected to.
  42. # The role does not create these networks, so make sure they already exist.
  43. # Use this to expose this container to another reverse proxy, which runs in a different container network.
  44. matrix_conduit_container_additional_networks: "{{ matrix_conduit_container_additional_networks_auto + matrix_conduit_container_additional_networks_custom }}"
  45. matrix_conduit_container_additional_networks_auto: []
  46. matrix_conduit_container_additional_networks_custom: []
  47. # matrix_conduit_container_labels_traefik_enabled controls whether labels to assist a Traefik reverse-proxy will be attached to the container.
  48. # See `../templates/labels.j2` for details.
  49. #
  50. # To inject your own other container labels, see `matrix_conduit_container_labels_additional_labels`.
  51. matrix_conduit_container_labels_traefik_enabled: true
  52. matrix_conduit_container_labels_traefik_docker_network: "{{ matrix_conduit_container_network }}"
  53. matrix_conduit_container_labels_traefik_entrypoints: web-secure
  54. matrix_conduit_container_labels_traefik_tls_certResolver: default # noqa var-naming
  55. # Controls whether labels will be added for handling the root (/) path on a public Traefik entrypoint.
  56. matrix_conduit_container_labels_public_client_root_enabled: true
  57. matrix_conduit_container_labels_public_client_root_traefik_hostname: "{{ matrix_conduit_hostname }}"
  58. matrix_conduit_container_labels_public_client_root_traefik_rule: "Host(`{{ matrix_conduit_container_labels_public_client_root_traefik_hostname }}`) && Path(`/`)"
  59. matrix_conduit_container_labels_public_client_root_traefik_priority: 0
  60. matrix_conduit_container_labels_public_client_root_traefik_entrypoints: "{{ matrix_conduit_container_labels_traefik_entrypoints }}"
  61. matrix_conduit_container_labels_public_client_root_traefik_tls: "{{ matrix_conduit_container_labels_public_client_root_traefik_entrypoints != 'web' }}"
  62. matrix_conduit_container_labels_public_client_root_traefik_tls_certResolver: "{{ matrix_conduit_container_labels_traefik_tls_certResolver }}" # noqa var-naming
  63. matrix_conduit_container_labels_public_client_root_redirection_enabled: false
  64. matrix_conduit_container_labels_public_client_root_redirection_url: ""
  65. # Controls whether labels will be added that expose the Client-Server API on a public Traefik entrypoint.
  66. matrix_conduit_container_labels_public_client_api_enabled: true
  67. matrix_conduit_container_labels_public_client_api_traefik_hostname: "{{ matrix_conduit_hostname }}"
  68. matrix_conduit_container_labels_public_client_api_traefik_path_prefix: /_matrix
  69. matrix_conduit_container_labels_public_client_api_traefik_rule: "Host(`{{ matrix_conduit_container_labels_public_client_api_traefik_hostname }}`) && PathPrefix(`{{ matrix_conduit_container_labels_public_client_api_traefik_path_prefix }}`)"
  70. matrix_conduit_container_labels_public_client_api_traefik_priority: 0
  71. matrix_conduit_container_labels_public_client_api_traefik_entrypoints: "{{ matrix_conduit_container_labels_traefik_entrypoints }}"
  72. matrix_conduit_container_labels_public_client_api_traefik_tls: "{{ matrix_conduit_container_labels_public_client_api_traefik_entrypoints != 'web' }}"
  73. matrix_conduit_container_labels_public_client_api_traefik_tls_certResolver: "{{ matrix_conduit_container_labels_traefik_tls_certResolver }}" # noqa var-naming
  74. # Controls whether labels will be added that expose the Client-Server API on the internal Traefik entrypoint.
  75. # This is similar to `matrix_conduit_container_labels_public_client_api_enabled`, but the entrypoint and intent is different.
  76. matrix_conduit_container_labels_internal_client_api_enabled: false
  77. matrix_conduit_container_labels_internal_client_api_traefik_path_prefix: "{{ matrix_conduit_container_labels_public_client_api_traefik_path_prefix }}"
  78. matrix_conduit_container_labels_internal_client_api_traefik_rule: "PathPrefix(`{{ matrix_conduit_container_labels_internal_client_api_traefik_path_prefix }}`)"
  79. matrix_conduit_container_labels_internal_client_api_traefik_priority: "{{ matrix_conduit_container_labels_public_client_api_traefik_priority }}"
  80. matrix_conduit_container_labels_internal_client_api_traefik_entrypoints: ""
  81. # Controls whether labels will be added that expose the Server-Server API (Federation API) on a public Traefik entrypoint.
  82. matrix_conduit_container_labels_public_federation_api_enabled: "{{ matrix_conduit_allow_federation }}"
  83. matrix_conduit_container_labels_public_federation_api_traefik_hostname: "{{ matrix_conduit_hostname }}"
  84. matrix_conduit_container_labels_public_federation_api_traefik_path_prefix: /_matrix
  85. matrix_conduit_container_labels_public_federation_api_traefik_rule: "Host(`{{ matrix_conduit_container_labels_public_federation_api_traefik_hostname }}`) && PathPrefix(`{{ matrix_conduit_container_labels_public_federation_api_traefik_path_prefix }}`)"
  86. matrix_conduit_container_labels_public_federation_api_traefik_priority: 0
  87. matrix_conduit_container_labels_public_federation_api_traefik_entrypoints: ''
  88. # TLS is force-enabled here, because the spec (https://spec.matrix.org/v1.9/server-server-api/#tls) says that the federation API must use HTTPS.
  89. matrix_conduit_container_labels_public_federation_api_traefik_tls: true
  90. matrix_conduit_container_labels_public_federation_api_traefik_tls_certResolver: "{{ matrix_conduit_container_labels_traefik_tls_certResolver }}" # noqa var-naming
  91. # matrix_conduit_container_labels_additional_labels contains a multiline string with additional labels to add to the container label file.
  92. # See `../templates/labels.j2` for details.
  93. #
  94. # Example:
  95. # matrix_conduit_container_labels_additional_labels: |
  96. # my.label=1
  97. # another.label="here"
  98. matrix_conduit_container_labels_additional_labels: ''
  99. # Extra arguments for the Docker container
  100. matrix_conduit_container_extra_arguments: []
  101. # Specifies which template files to use when configuring Conduit.
  102. # If you'd like to have your own different configuration, feel free to copy and paste
  103. # the original files into your inventory (e.g. in `inventory/host_vars/matrix.example.com/`)
  104. # and then change the specific host's `vars.yml` file like this:
  105. # matrix_conduit_template_conduit_config: "{{ playbook_dir }}/inventory/host_vars/matrix.example.com/conduit.toml.j2"
  106. matrix_conduit_template_conduit_config: "{{ role_path }}/templates/conduit.toml.j2"
  107. # Max size for uploads, in bytes
  108. matrix_conduit_max_request_size: 20_000_000
  109. # Maximum number of open files for Conduit's embedded RocksDB database
  110. # See https://github.com/facebook/rocksdb/wiki/RocksDB-Tuning-Guide#tuning-other-options
  111. # By default, Conduit uses a relatively low value of 20.
  112. matrix_conduit_rocksdb_max_open_files: 64
  113. # Enables registration. If set to false, no users can register on this server.
  114. matrix_conduit_allow_registration: false
  115. matrix_conduit_allow_federation: true
  116. # Enable the display name lightning bolt on registration.
  117. matrix_conduit_enable_lightning_bolt: false
  118. matrix_conduit_trusted_servers:
  119. - "matrix.org"
  120. # How many requests Conduit sends to other servers at the same time
  121. matrix_conduit_max_concurrent_requests: 100
  122. # TURN integration.
  123. # See: https://gitlab.com/famedly/conduit/-/blob/next/TURN.md
  124. matrix_conduit_turn_uris: []
  125. matrix_conduit_turn_secret: ''
  126. matrix_conduit_turn_username: ''
  127. matrix_conduit_turn_password: ''
  128. # matrix_conduit_restart_necessary controls whether the service
  129. # will be restarted (when true) or merely started (when false) by the
  130. # systemd service manager role (when conditional restart is enabled).
  131. #
  132. # This value is automatically computed during installation based on whether
  133. # any configuration files, the systemd service file, or the container image changed.
  134. # The default of `false` means "no restart needed" — appropriate when the role's
  135. # installation tasks haven't run (e.g., due to --tags skipping them).
  136. matrix_conduit_restart_necessary: false