overmind
/
matrix-docker-ansible-deploy
зеркало из https://github.com/spantaleev/matrix-docker-ansible-deploy
1
0
Форкнуть 0
Код Задачи 0 Релизы 0 Вики Активность
Matrix Docker Ansible eploy
Вы не можете выбрать более 25 тем Темы должны начинаться с буквы или цифры, могут содержать дефисы(-) и должны содержать не более 35 символов.
11805 коммитов
13 Ветки
9.2 GiB
 
 
ветка: create-pull-request/i18n
Ветки Теги
${ item.name }
Создать ветку ${ searchTerm }
из 'create-pull-request/i18n'
${ noResults }
matrix-docker-ansible-deploy/roles/custom/matrix-tuwunel/templates/tuwunel.toml.j2

244 строки
11 KiB
Исходник Постоянная ссылка Вина История 

  1. {#

  2. SPDX-FileCopyrightText: 2025 - 2026 MDAD project contributors

  3. SPDX-FileCopyrightText: 2025 - 2026 Slavi Pantaleev

  4. 

  5. SPDX-License-Identifier: AGPL-3.0-or-later

  6. #}

  7. ### Tuwunel configuration rendered by matrix-docker-ansible-deploy.

  8. ###

  9. ### This file only emits options exposed as Ansible variables. All other knobs

  10. ### keep tuwunel's upstream defaults. To override anything not surfaced here,

  11. ### use `matrix_tuwunel_environment_variables_extension` (env vars override TOML)

  12. ### or replace the template via `matrix_tuwunel_template_tuwunel_config`.

  13. ###

  14. ### Reference: https://matrix-construct.github.io/tuwunel/configuration.html

  15. 

  16. [global]

  17. server_name = {{ matrix_tuwunel_config_server_name | to_json }}

  18. address = "0.0.0.0"

  19. port = {{ matrix_tuwunel_config_port_number }}

  20. database_path = "/var/lib/tuwunel"

  21. 

  22. max_request_size = {{ matrix_tuwunel_config_max_request_size }}

  23. 

  24. new_user_displayname_suffix = {{ matrix_tuwunel_config_new_user_displayname_suffix | to_json }}

  25. 

  26. allow_registration = {{ matrix_tuwunel_config_allow_registration | to_json }}

  27. {% if matrix_tuwunel_config_registration_token | length > 0 %}

  28. registration_token = {{ matrix_tuwunel_config_registration_token | to_json }}

  29. {% endif %}

  30. {% if matrix_tuwunel_config_yes_i_am_very_very_sure_i_want_an_open_registration_server_prone_to_abuse | bool %}

  31. yes_i_am_very_very_sure_i_want_an_open_registration_server_prone_to_abuse = true

  32. {% endif %}

  33. 

  34. {% if matrix_tuwunel_config_emergency_password | length > 0 %}

  35. emergency_password = {{ matrix_tuwunel_config_emergency_password | to_json }}

  36. {% endif %}

  37. 

  38. allow_encryption = {{ matrix_tuwunel_config_allow_encryption | to_json }}

  39. allow_room_creation = {{ matrix_tuwunel_config_allow_room_creation | to_json }}

  40. default_room_version = {{ matrix_tuwunel_config_default_room_version | to_json }}

  41. {% if matrix_tuwunel_config_auto_join_rooms | length > 0 %}

  42. auto_join_rooms = {{ matrix_tuwunel_config_auto_join_rooms | to_json }}

  43. {% endif %}

  44. 

  45. allow_federation = {{ matrix_tuwunel_config_allow_federation | to_json }}

  46. trusted_servers = {{ matrix_tuwunel_config_trusted_servers | to_json }}

  47. {% if matrix_tuwunel_config_allowed_remote_server_names | length > 0 %}

  48. allowed_remote_server_names_experimental = {{ matrix_tuwunel_config_allowed_remote_server_names | to_json }}

  49. {% endif %}

  50. {% if matrix_tuwunel_config_forbidden_remote_server_names | length > 0 %}

  51. forbidden_remote_server_names = {{ matrix_tuwunel_config_forbidden_remote_server_names | to_json }}

  52. {% endif %}

  53. {% if matrix_tuwunel_config_forbidden_remote_room_directory_server_names | length > 0 %}

  54. forbidden_remote_room_directory_server_names = {{ matrix_tuwunel_config_forbidden_remote_room_directory_server_names | to_json }}

  55. {% endif %}

  56. {% if matrix_tuwunel_config_prevent_media_downloads_from | length > 0 %}

  57. prevent_media_downloads_from = {{ matrix_tuwunel_config_prevent_media_downloads_from | to_json }}

  58. {% endif %}

  59. ip_range_denylist = {{ matrix_tuwunel_config_ip_range_denylist | to_json }}

  60. 

  61. enable_policy_servers = {{ matrix_tuwunel_config_enable_policy_servers | to_json }}

  62. policy_server_request_timeout = {{ matrix_tuwunel_config_policy_server_request_timeout }}

  63. 

  64. msc3664_related_event_match = {{ matrix_tuwunel_config_msc3664_related_event_match | to_json }}

  65. 

  66. allow_outgoing_presence = {{ matrix_tuwunel_config_allow_outgoing_presence | to_json }}

  67. 

  68. {% if matrix_tuwunel_config_url_preview_domain_contains_allowlist | length > 0 %}

  69. url_preview_domain_contains_allowlist = {{ matrix_tuwunel_config_url_preview_domain_contains_allowlist | to_json }}

  70. {% endif %}

  71. {% if matrix_tuwunel_config_url_preview_domain_explicit_allowlist | length > 0 %}

  72. url_preview_domain_explicit_allowlist = {{ matrix_tuwunel_config_url_preview_domain_explicit_allowlist | to_json }}

  73. {% endif %}

  74. url_preview_check_root_domain = {{ matrix_tuwunel_config_url_preview_check_root_domain | to_json }}

  75. 

  76. create_admin_room = {{ matrix_tuwunel_config_create_admin_room | to_json }}

  77. federate_admin_room = {{ matrix_tuwunel_config_federate_admin_room | to_json }}

  78. grant_admin_to_first_user = {{ matrix_tuwunel_config_grant_admin_to_first_user | to_json }}

  79. 

  80. log = {{ matrix_tuwunel_config_log | to_json }}

  81. 

  82. {% if matrix_tuwunel_config_turn_uris | length > 0 %}

  83. turn_uris = {{ matrix_tuwunel_config_turn_uris | to_json }}

  84. {% endif %}

  85. {% if matrix_tuwunel_config_turn_secret | length > 0 %}

  86. turn_secret = {{ matrix_tuwunel_config_turn_secret | to_json }}

  87. {% endif %}

  88. {% if matrix_tuwunel_config_turn_username | length > 0 %}

  89. turn_username = {{ matrix_tuwunel_config_turn_username | to_json }}

  90. {% endif %}

  91. {% if matrix_tuwunel_config_turn_password | length > 0 %}

  92. turn_password = {{ matrix_tuwunel_config_turn_password | to_json }}

  93. {% endif %}

  94. 

  95. {% if matrix_tuwunel_config_rocksdb_compression_algo | length > 0 %}

  96. rocksdb_compression_algo = {{ matrix_tuwunel_config_rocksdb_compression_algo | to_json }}

  97. {% endif %}

  98. {% if matrix_tuwunel_config_rocksdb_compression_level | string | length > 0 %}

  99. rocksdb_compression_level = {{ matrix_tuwunel_config_rocksdb_compression_level }}

  100. {% endif %}

  101. {% if matrix_tuwunel_config_rocksdb_bottommost_compression_level | string | length > 0 %}

  102. rocksdb_bottommost_compression_level = {{ matrix_tuwunel_config_rocksdb_bottommost_compression_level }}

  103. {% endif %}

  104. rocksdb_direct_io = {{ matrix_tuwunel_config_rocksdb_direct_io | to_json }}

  105. {% if matrix_tuwunel_config_rocksdb_parallelism_threads | int > 0 %}

  106. rocksdb_parallelism_threads = {{ matrix_tuwunel_config_rocksdb_parallelism_threads }}

  107. {% endif %}

  108. {% if matrix_tuwunel_config_rocksdb_max_log_file_size | string | length > 0 %}

  109. rocksdb_max_log_file_size = {{ matrix_tuwunel_config_rocksdb_max_log_file_size }}

  110. {% endif %}

  111. {% if matrix_tuwunel_config_rocksdb_log_time_to_roll | string | length > 0 %}

  112. rocksdb_log_time_to_roll = {{ matrix_tuwunel_config_rocksdb_log_time_to_roll }}

  113. {% endif %}

  114. {% if matrix_tuwunel_config_database_backup_path | length > 0 %}

  115. database_backup_path = {{ matrix_tuwunel_config_database_backup_path | to_json }}

  116. database_backups_to_keep = {{ matrix_tuwunel_config_database_backups_to_keep }}

  117. {% endif %}

  118. 

  119. {% if matrix_tuwunel_config_cache_capacity_modifier | string | length > 0 %}

  120. cache_capacity_modifier = {{ matrix_tuwunel_config_cache_capacity_modifier }}

  121. {% endif %}

  122. {% if matrix_tuwunel_config_db_cache_capacity_mb | string | length > 0 %}

  123. db_cache_capacity_mb = {{ matrix_tuwunel_config_db_cache_capacity_mb }}

  124. {% endif %}

  125. {% if matrix_tuwunel_config_db_write_buffer_capacity_mb | string | length > 0 %}

  126. db_write_buffer_capacity_mb = {{ matrix_tuwunel_config_db_write_buffer_capacity_mb }}

  127. {% endif %}

  128. 

  129. {% if matrix_tuwunel_config_sentry_enabled | bool %}

  130. sentry = true

  131. {% if matrix_tuwunel_config_sentry_endpoint | length > 0 %}

  132. sentry_endpoint = {{ matrix_tuwunel_config_sentry_endpoint | to_json }}

  133. {% endif %}

  134. sentry_send_server_name = {{ matrix_tuwunel_config_sentry_send_server_name | to_json }}

  135. sentry_traces_sample_rate = {{ matrix_tuwunel_config_sentry_traces_sample_rate }}

  136. {% endif %}

  137. 

  138. {% if (matrix_tuwunel_config_tls_certs | length > 0) and (matrix_tuwunel_config_tls_key | length > 0) %}

  139. 

  140. [global.tls]

  141. certs = {{ matrix_tuwunel_config_tls_certs | to_json }}

  142. key = {{ matrix_tuwunel_config_tls_key | to_json }}

  143. dual_protocol = {{ matrix_tuwunel_config_tls_dual_protocol | to_json }}

  144. {% endif %}

  145. 

  146. {% set well_known_keys = [

  147.   matrix_tuwunel_config_well_known_client,

  148.   matrix_tuwunel_config_well_known_server,

  149.   matrix_tuwunel_config_well_known_support_page,

  150.   matrix_tuwunel_config_well_known_support_email,

  151.   matrix_tuwunel_config_well_known_support_mxid,

  152.   matrix_tuwunel_config_well_known_livekit_url,

  153. ] %}

  154. {% if well_known_keys | select | list | length > 0 %}

  155. 

  156. [global.well_known]

  157. {% if matrix_tuwunel_config_well_known_client | length > 0 %}

  158. client = {{ matrix_tuwunel_config_well_known_client | to_json }}

  159. {% endif %}

  160. {% if matrix_tuwunel_config_well_known_server | length > 0 %}

  161. server = {{ matrix_tuwunel_config_well_known_server | to_json }}

  162. {% endif %}

  163. {% if matrix_tuwunel_config_well_known_support_page | length > 0 %}

  164. support_page = {{ matrix_tuwunel_config_well_known_support_page | to_json }}

  165. {% endif %}

  166. {% if matrix_tuwunel_config_well_known_support_email | length > 0 %}

  167. support_email = {{ matrix_tuwunel_config_well_known_support_email | to_json }}

  168. {% endif %}

  169. {% if matrix_tuwunel_config_well_known_support_mxid | length > 0 %}

  170. support_mxid = {{ matrix_tuwunel_config_well_known_support_mxid | to_json }}

  171. {% endif %}

  172. {% if matrix_tuwunel_config_well_known_livekit_url | length > 0 %}

  173. livekit_url = {{ matrix_tuwunel_config_well_known_livekit_url | to_json }}

  174. {% endif %}

  175. {% endif %}

  176. 

  177. {% if matrix_tuwunel_config_blurhashing_enabled | bool %}

  178. 

  179. [global.blurhashing]

  180. components_x = {{ matrix_tuwunel_config_blurhashing_components_x }}

  181. components_y = {{ matrix_tuwunel_config_blurhashing_components_y }}

  182. blurhash_max_raw_size = {{ matrix_tuwunel_config_blurhashing_max_raw_size }}

  183. {% endif %}

  184. 

  185. {% if matrix_tuwunel_config_ldap_enabled | bool %}

  186. 

  187. [global.ldap]

  188. enable = true

  189. uri = {{ matrix_tuwunel_config_ldap_uri | to_json }}

  190. base_dn = {{ matrix_tuwunel_config_ldap_base_dn | to_json }}

  191. {% if matrix_tuwunel_config_ldap_bind_dn | length > 0 %}

  192. bind_dn = {{ matrix_tuwunel_config_ldap_bind_dn | to_json }}

  193. {% endif %}

  194. {% if matrix_tuwunel_config_ldap_bind_password_file | length > 0 %}

  195. bind_password_file = {{ matrix_tuwunel_config_ldap_bind_password_file | to_json }}

  196. {% endif %}

  197. filter = {{ matrix_tuwunel_config_ldap_filter | to_json }}

  198. uid_attribute = {{ matrix_tuwunel_config_ldap_uid_attribute | to_json }}

  199. {% if matrix_tuwunel_config_ldap_admin_base_dn | length > 0 %}

  200. admin_base_dn = {{ matrix_tuwunel_config_ldap_admin_base_dn | to_json }}

  201. {% endif %}

  202. {% if matrix_tuwunel_config_ldap_admin_filter | length > 0 %}

  203. admin_filter = {{ matrix_tuwunel_config_ldap_admin_filter | to_json }}

  204. {% endif %}

  205. {% endif %}

  206. 

  207. {% if matrix_tuwunel_config_jwt_enabled | bool %}

  208. 

  209. [global.jwt]

  210. enable = true

  211. {% if matrix_tuwunel_config_jwt_key | length > 0 %}

  212. key = {{ matrix_tuwunel_config_jwt_key | to_json }}

  213. {% endif %}

  214. format = {{ matrix_tuwunel_config_jwt_format | to_json }}

  215. algorithm = {{ matrix_tuwunel_config_jwt_algorithm | to_json }}

  216. register_user = {{ matrix_tuwunel_config_jwt_register_user | to_json }}

  217. {% if matrix_tuwunel_config_jwt_audience | length > 0 %}

  218. audience = {{ matrix_tuwunel_config_jwt_audience | to_json }}

  219. {% endif %}

  220. {% if matrix_tuwunel_config_jwt_issuer | length > 0 %}

  221. issuer = {{ matrix_tuwunel_config_jwt_issuer | to_json }}

  222. {% endif %}

  223. require_exp = {{ matrix_tuwunel_config_jwt_require_exp | to_json }}

  224. require_nbf = {{ matrix_tuwunel_config_jwt_require_nbf | to_json }}

  225. validate_exp = {{ matrix_tuwunel_config_jwt_validate_exp | to_json }}

  226. validate_nbf = {{ matrix_tuwunel_config_jwt_validate_nbf | to_json }}

  227. {% endif %}

  228. 

  229. {% for idp in matrix_tuwunel_config_identity_providers %}

  230. 

  231. [[global.identity_provider]]

  232. {% for key, value in idp.items() %}

  233. {{ key }} = {{ value | to_json }}

  234. {% endfor %}

  235. {% endfor %}

  236. 

  237. {% for sp in matrix_tuwunel_config_storage_providers %}

  238. 

  239. [global.storage_provider.{{ sp.id }}.{{ sp.kind }}]

  240. {% for key, value in sp.items() if key not in ['id', 'kind'] %}

  241. {{ key }} = {{ value | to_json }}

  242. {% endfor %}

  243. {% endfor %}