overmind
/
matrix-docker-ansible-deploy
зеркало из https://github.com/spantaleev/matrix-docker-ansible-deploy
1
0
Форкнуть 0
Код Задачи 0 Релизы 0 Вики Активность
Matrix Docker Ansible eploy
Вы не можете выбрать более 25 тем Темы должны начинаться с буквы или цифры, могут содержать дефисы(-) и должны содержать не более 35 символов.
11774 коммитов
18 Ветки
11 GiB
 
 
ветка: renovate/lock-file-maintenance
Ветки Теги
${ item.name }
Создать ветку ${ searchTerm }
из 'renovate/lock-file-maintenance'
${ noResults }
matrix-docker-ansible-deploy/roles/custom/matrix-tuwunel/templates/tuwunel.toml.j2

243 строки
11 KiB
Исходник Постоянная ссылка Вина История 

  1. {#

  2. SPDX-FileCopyrightText: 2025 - 2026 MDAD project contributors

  3. SPDX-FileCopyrightText: 2025 - 2026 Slavi Pantaleev

  4. 

  5. SPDX-License-Identifier: AGPL-3.0-or-later

  6. #}

  7. ### Tuwunel configuration rendered by matrix-docker-ansible-deploy.

  8. ###

  9. ### This file only emits options exposed as Ansible variables. All other knobs

  10. ### keep tuwunel's upstream defaults. To override anything not surfaced here,

  11. ### use `matrix_tuwunel_environment_variables_extension` (env vars override TOML)

  12. ### or replace the template via `matrix_tuwunel_template_tuwunel_config`.

  13. ###

  14. ### Reference: https://matrix-construct.github.io/tuwunel/configuration.html

  15. 

  16. [global]

  17. server_name = {{ matrix_tuwunel_config_server_name | to_json }}

  18. address = "0.0.0.0"

  19. port = {{ matrix_tuwunel_config_port_number }}

  20. database_path = "/var/lib/tuwunel"

  21. 

  22. max_request_size = {{ matrix_tuwunel_config_max_request_size }}

  23. 

  24. new_user_displayname_suffix = {{ matrix_tuwunel_config_new_user_displayname_suffix | to_json }}

  25. 

  26. allow_registration = {{ matrix_tuwunel_config_allow_registration | to_json }}

  27. {% if matrix_tuwunel_config_registration_token | length > 0 %}

  28. registration_token = {{ matrix_tuwunel_config_registration_token | to_json }}

  29. {% endif %}

  30. {% if matrix_tuwunel_config_yes_i_am_very_very_sure_i_want_an_open_registration_server_prone_to_abuse | bool %}

  31. yes_i_am_very_very_sure_i_want_an_open_registration_server_prone_to_abuse = true

  32. {% endif %}

  33. 

  34. {% if matrix_tuwunel_config_emergency_password | length > 0 %}

  35. emergency_password = {{ matrix_tuwunel_config_emergency_password | to_json }}

  36. {% endif %}

  37. 

  38. allow_encryption = {{ matrix_tuwunel_config_allow_encryption | to_json }}

  39. allow_room_creation = {{ matrix_tuwunel_config_allow_room_creation | to_json }}

  40. default_room_version = {{ matrix_tuwunel_config_default_room_version | to_json }}

  41. {% if matrix_tuwunel_config_auto_join_rooms | length > 0 %}

  42. auto_join_rooms = {{ matrix_tuwunel_config_auto_join_rooms | to_json }}

  43. {% endif %}

  44. 

  45. allow_federation = {{ matrix_tuwunel_config_allow_federation | to_json }}

  46. trusted_servers = {{ matrix_tuwunel_config_trusted_servers | to_json }}

  47. {% if matrix_tuwunel_config_allowed_remote_server_names | length > 0 %}

  48. allowed_remote_server_names_experimental = {{ matrix_tuwunel_config_allowed_remote_server_names | to_json }}

  49. {% endif %}

  50. {% if matrix_tuwunel_config_forbidden_remote_server_names | length > 0 %}

  51. forbidden_remote_server_names = {{ matrix_tuwunel_config_forbidden_remote_server_names | to_json }}

  52. {% endif %}

  53. {% if matrix_tuwunel_config_forbidden_remote_room_directory_server_names | length > 0 %}

  54. forbidden_remote_room_directory_server_names = {{ matrix_tuwunel_config_forbidden_remote_room_directory_server_names | to_json }}

  55. {% endif %}

  56. {% if matrix_tuwunel_config_prevent_media_downloads_from | length > 0 %}

  57. prevent_media_downloads_from = {{ matrix_tuwunel_config_prevent_media_downloads_from | to_json }}

  58. {% endif %}

  59. ip_range_denylist = {{ matrix_tuwunel_config_ip_range_denylist | to_json }}

  60. 

  61. enable_policy_servers = {{ matrix_tuwunel_config_enable_policy_servers | to_json }}

  62. policy_server_request_timeout = {{ matrix_tuwunel_config_policy_server_request_timeout }}

  63. 

  64. allow_outgoing_presence = {{ matrix_tuwunel_config_allow_outgoing_presence | to_json }}

  65. 

  66. {% if matrix_tuwunel_config_url_preview_domain_contains_allowlist | length > 0 %}

  67. url_preview_domain_contains_allowlist = {{ matrix_tuwunel_config_url_preview_domain_contains_allowlist | to_json }}

  68. {% endif %}

  69. {% if matrix_tuwunel_config_url_preview_domain_explicit_allowlist | length > 0 %}

  70. url_preview_domain_explicit_allowlist = {{ matrix_tuwunel_config_url_preview_domain_explicit_allowlist | to_json }}

  71. {% endif %}

  72. url_preview_check_root_domain = {{ matrix_tuwunel_config_url_preview_check_root_domain | to_json }}

  73. 

  74. create_admin_room = {{ matrix_tuwunel_config_create_admin_room | to_json }}

  75. federate_admin_room = {{ matrix_tuwunel_config_federate_admin_room | to_json }}

  76. grant_admin_to_first_user = {{ matrix_tuwunel_config_grant_admin_to_first_user | to_json }}

  77. 

  78. log = {{ matrix_tuwunel_config_log | to_json }}

  79. 

  80. {% if matrix_tuwunel_config_turn_uris | length > 0 %}

  81. turn_uris = {{ matrix_tuwunel_config_turn_uris | to_json }}

  82. {% endif %}

  83. {% if matrix_tuwunel_config_turn_secret | length > 0 %}

  84. turn_secret = {{ matrix_tuwunel_config_turn_secret | to_json }}

  85. {% endif %}

  86. {% if matrix_tuwunel_config_turn_username | length > 0 %}

  87. turn_username = {{ matrix_tuwunel_config_turn_username | to_json }}

  88. {% endif %}

  89. {% if matrix_tuwunel_config_turn_password | length > 0 %}

  90. turn_password = {{ matrix_tuwunel_config_turn_password | to_json }}

  91. {% endif %}

  92. 

  93. {% if matrix_tuwunel_config_rocksdb_compression_algo | length > 0 %}

  94. rocksdb_compression_algo = {{ matrix_tuwunel_config_rocksdb_compression_algo | to_json }}

  95. {% endif %}

  96. {% if matrix_tuwunel_config_rocksdb_compression_level | string | length > 0 %}

  97. rocksdb_compression_level = {{ matrix_tuwunel_config_rocksdb_compression_level }}

  98. {% endif %}

  99. {% if matrix_tuwunel_config_rocksdb_bottommost_compression_level | string | length > 0 %}

  100. rocksdb_bottommost_compression_level = {{ matrix_tuwunel_config_rocksdb_bottommost_compression_level }}

  101. {% endif %}

  102. rocksdb_direct_io = {{ matrix_tuwunel_config_rocksdb_direct_io | to_json }}

  103. {% if matrix_tuwunel_config_rocksdb_parallelism_threads | int > 0 %}

  104. rocksdb_parallelism_threads = {{ matrix_tuwunel_config_rocksdb_parallelism_threads }}

  105. {% endif %}

  106. {% if matrix_tuwunel_config_rocksdb_max_log_file_size | string | length > 0 %}

  107. rocksdb_max_log_file_size = {{ matrix_tuwunel_config_rocksdb_max_log_file_size }}

  108. {% endif %}

  109. {% if matrix_tuwunel_config_rocksdb_log_time_to_roll | string | length > 0 %}

  110. rocksdb_log_time_to_roll = {{ matrix_tuwunel_config_rocksdb_log_time_to_roll }}

  111. {% endif %}

  112. {% if matrix_tuwunel_config_database_backup_path | length > 0 %}

  113. database_backup_path = {{ matrix_tuwunel_config_database_backup_path | to_json }}

  114. database_backups_to_keep = {{ matrix_tuwunel_config_database_backups_to_keep }}

  115. {% endif %}

  116. 

  117. {% if matrix_tuwunel_config_cache_capacity_modifier | string | length > 0 %}

  118. cache_capacity_modifier = {{ matrix_tuwunel_config_cache_capacity_modifier }}

  119. {% endif %}

  120. {% if matrix_tuwunel_config_db_cache_capacity_mb | string | length > 0 %}

  121. db_cache_capacity_mb = {{ matrix_tuwunel_config_db_cache_capacity_mb }}

  122. {% endif %}

  123. {% if matrix_tuwunel_config_db_write_buffer_capacity_mb | string | length > 0 %}

  124. db_write_buffer_capacity_mb = {{ matrix_tuwunel_config_db_write_buffer_capacity_mb }}

  125. {% endif %}

  126. 

  127. {% if matrix_tuwunel_config_sentry_enabled | bool %}

  128. sentry = true

  129. {% if matrix_tuwunel_config_sentry_endpoint | length > 0 %}

  130. sentry_endpoint = {{ matrix_tuwunel_config_sentry_endpoint | to_json }}

  131. {% endif %}

  132. sentry_send_server_name = {{ matrix_tuwunel_config_sentry_send_server_name | to_json }}

  133. sentry_traces_sample_rate = {{ matrix_tuwunel_config_sentry_traces_sample_rate }}

  134. {% endif %}

  135. 

  136. {% if (matrix_tuwunel_config_tls_certs | length > 0) and (matrix_tuwunel_config_tls_key | length > 0) %}

  137. 

  138. [global.tls]

  139. certs = {{ matrix_tuwunel_config_tls_certs | to_json }}

  140. key = {{ matrix_tuwunel_config_tls_key | to_json }}

  141. dual_protocol = {{ matrix_tuwunel_config_tls_dual_protocol | to_json }}

  142. {% endif %}

  143. 

  144. {% set well_known_keys = [

  145.   matrix_tuwunel_config_well_known_client,

  146.   matrix_tuwunel_config_well_known_server,

  147.   matrix_tuwunel_config_well_known_support_page,

  148.   matrix_tuwunel_config_well_known_support_email,

  149.   matrix_tuwunel_config_well_known_support_mxid,

  150.   matrix_tuwunel_config_well_known_livekit_url,

  151. ] %}

  152. {% if well_known_keys | select | list | length > 0 %}

  153. 

  154. [global.well_known]

  155. {% if matrix_tuwunel_config_well_known_client | length > 0 %}

  156. client = {{ matrix_tuwunel_config_well_known_client | to_json }}

  157. {% endif %}

  158. {% if matrix_tuwunel_config_well_known_server | length > 0 %}

  159. server = {{ matrix_tuwunel_config_well_known_server | to_json }}

  160. {% endif %}

  161. {% if matrix_tuwunel_config_well_known_support_page | length > 0 %}

  162. support_page = {{ matrix_tuwunel_config_well_known_support_page | to_json }}

  163. {% endif %}

  164. {% if matrix_tuwunel_config_well_known_support_email | length > 0 %}

  165. support_email = {{ matrix_tuwunel_config_well_known_support_email | to_json }}

  166. {% endif %}

  167. {% if matrix_tuwunel_config_well_known_support_mxid | length > 0 %}

  168. support_mxid = {{ matrix_tuwunel_config_well_known_support_mxid | to_json }}

  169. {% endif %}

  170. {% if matrix_tuwunel_config_well_known_livekit_url | length > 0 %}

  171. livekit_url = {{ matrix_tuwunel_config_well_known_livekit_url | to_json }}

  172. {% endif %}

  173. {% endif %}

  174. 

  175. {% if matrix_tuwunel_config_blurhashing_enabled | bool %}

  176. 

  177. [global.blurhashing]

  178. components_x = {{ matrix_tuwunel_config_blurhashing_components_x }}

  179. components_y = {{ matrix_tuwunel_config_blurhashing_components_y }}

  180. blurhash_max_raw_size = {{ matrix_tuwunel_config_blurhashing_max_raw_size }}

  181. {% endif %}

  182. 

  183. {% if matrix_tuwunel_config_ldap_enabled | bool %}

  184. 

  185. [global.ldap]

  186. enable = true

  187. uri = {{ matrix_tuwunel_config_ldap_uri | to_json }}

  188. base_dn = {{ matrix_tuwunel_config_ldap_base_dn | to_json }}

  189. {% if matrix_tuwunel_config_ldap_bind_dn | length > 0 %}

  190. bind_dn = {{ matrix_tuwunel_config_ldap_bind_dn | to_json }}

  191. {% endif %}

  192. {% if matrix_tuwunel_config_ldap_bind_password_file | length > 0 %}

  193. bind_password_file = {{ matrix_tuwunel_config_ldap_bind_password_file | to_json }}

  194. {% endif %}

  195. filter = {{ matrix_tuwunel_config_ldap_filter | to_json }}

  196. uid_attribute = {{ matrix_tuwunel_config_ldap_uid_attribute | to_json }}

  197. name_attribute = {{ matrix_tuwunel_config_ldap_name_attribute | to_json }}

  198. {% if matrix_tuwunel_config_ldap_admin_base_dn | length > 0 %}

  199. admin_base_dn = {{ matrix_tuwunel_config_ldap_admin_base_dn | to_json }}

  200. {% endif %}

  201. {% if matrix_tuwunel_config_ldap_admin_filter | length > 0 %}

  202. admin_filter = {{ matrix_tuwunel_config_ldap_admin_filter | to_json }}

  203. {% endif %}

  204. {% endif %}

  205. 

  206. {% if matrix_tuwunel_config_jwt_enabled | bool %}

  207. 

  208. [global.jwt]

  209. enable = true

  210. {% if matrix_tuwunel_config_jwt_key | length > 0 %}

  211. key = {{ matrix_tuwunel_config_jwt_key | to_json }}

  212. {% endif %}

  213. format = {{ matrix_tuwunel_config_jwt_format | to_json }}

  214. algorithm = {{ matrix_tuwunel_config_jwt_algorithm | to_json }}

  215. register_user = {{ matrix_tuwunel_config_jwt_register_user | to_json }}

  216. {% if matrix_tuwunel_config_jwt_audience | length > 0 %}

  217. audience = {{ matrix_tuwunel_config_jwt_audience | to_json }}

  218. {% endif %}

  219. {% if matrix_tuwunel_config_jwt_issuer | length > 0 %}

  220. issuer = {{ matrix_tuwunel_config_jwt_issuer | to_json }}

  221. {% endif %}

  222. require_exp = {{ matrix_tuwunel_config_jwt_require_exp | to_json }}

  223. require_nbf = {{ matrix_tuwunel_config_jwt_require_nbf | to_json }}

  224. validate_exp = {{ matrix_tuwunel_config_jwt_validate_exp | to_json }}

  225. validate_nbf = {{ matrix_tuwunel_config_jwt_validate_nbf | to_json }}

  226. {% endif %}

  227. 

  228. {% for idp in matrix_tuwunel_config_identity_providers %}

  229. 

  230. [[global.identity_provider]]

  231. {% for key, value in idp.items() %}

  232. {{ key }} = {{ value | to_json }}

  233. {% endfor %}

  234. {% endfor %}

  235. 

  236. {% for sp in matrix_tuwunel_config_storage_providers %}

  237. 

  238. [global.storage_provider.{{ sp.id }}.{{ sp.kind }}]

  239. {% for key, value in sp.items() if key not in ['id', 'kind'] %}

  240. {{ key }} = {{ value | to_json }}

  241. {% endfor %}

  242. {% endfor %}