overmind
/
matrix-docker-ansible-deploy
miroir de https://github.com/spantaleev/matrix-docker-ansible-deploy
1
0
Bifurcation 0
Code Tickets 0 Versions 0 Wiki Activité
Matrix Docker Ansible eploy
Vous ne pouvez pas sélectionner plus de 25 sujets Les noms de sujets doivent commencer par une lettre ou un nombre, peuvent contenir des tirets ('-') et peuvent comporter jusqu'à 35 caractères.
5670 Révisions
11 Branches
1.1 GiB
 
 
Aborescence: 06ccd71edc
Branches Tags
${ item.name }
Créer la branche ${ searchTerm }
de '06ccd71edc'
${ noResults }
matrix-docker-ansible-deploy/group_vars/matrix_servers

3560 lignes
173 KiB
Brut Annotations Historique 

  1. ---

  2. 

  3. # This variables file wires together the various components (roles) used by the playbook.

  4. #

  5. # Roles used by playbook are pretty minimal and kept independent of one another as much as possible.

  6. # To deliver a turnkey fully-featured Matrix server, this playbook needs

  7. # to connect them all together. It does so by overriding role variables.

  8. #

  9. # You can also override ANY variable (seen here or in any given role),

  10. # by re-defining it in your own configuration file (`inventory/host_vars/matrix.<your-domain>`).

  11. 

  12. ########################################################################

  13. #                                                                      #

  14. # Playbook                                                             #

  15. #                                                                      #

  16. ########################################################################

  17. 

  18. # Controls whether to install Docker or not

  19. # Also see `devture_docker_sdk_for_python_installation_enabled`.

  20. matrix_playbook_docker_installation_enabled: true

  21. 

  22. # Controls whether to run the Traefik role or not

  23. # See the `com.devture.ansible.role.traefik` section below for role configuration.

  24. #

  25. # There's a difference between `devture_traefik_enabled` and `matrix_playbook_traefik_role_enabled`.

  26. # `devture_traefik_enabled` controls what the Traefik role would do - when not enabled, it will run uninstall tasks, etc.

  27. # `matrix_playbook_traefik_role_enabled` controls if the Traefik role would even run at all.

  28. #

  29. # Sometimes, you're installing Traefik via a different (related playbook) which uses the same role.

  30. # In such cases, you'd like to disable the role in this playbook from bothering with Traefik at all (`matrix_playbook_traefik_role_enabled: false`).

  31. # If you used `devture_traefik_enabled: false` + `matrix_playbook_traefik_role_enabled: true` instead, you'd see the Treafik role here

  32. # try to delete Traefik data (`/devture-traefik`) installed by the other playbook.

  33. matrix_playbook_traefik_role_enabled: false

  34. 

  35. # Controls whether to attach Traefik labels to services.

  36. # This is separate from `devture_traefik_enabled` and `matrix_playbook_traefik_role_enabled`,

  37. # because you may wish to disable Traefik installation by the playbook, yet still use Traefik

  38. # installed in another way.

  39. matrix_playbook_traefik_labels_enabled: false

  40. 

  41. matrix_playbook_traefik_certs_dumper_role_enabled: "{{ matrix_playbook_traefik_role_enabled }}"

  42. 

  43. # Controls the additional network that reverse-proxyable services will be connected to.

  44. matrix_playbook_reverse_proxyable_services_additional_network: "{{ devture_traefik_container_network if devture_traefik_enabled else '' }}"

  45. 

  46. matrix_playbook_reverse_proxy_type: "{{ 'traefik' if matrix_playbook_traefik_role_enabled else ('nginx-proxy' if matrix_nginx_proxy_enabled else 'none') }}"

  47. 

  48. matrix_playbook_ssl_retrieval_method: "{{ 'lets-encrypt' if matrix_playbook_traefik_certs_dumper_role_enabled else matrix_ssl_retrieval_method }}"

  49. 

  50. ########################################################################

  51. #                                                                      #

  52. # /Playbook                                                            #

  53. #                                                                      #

  54. ########################################################################

  55. 

  56. ########################################################################

  57. #                                                                      #

  58. # base                                                                 #

  59. #                                                                      #

  60. ########################################################################

  61. 

  62. matrix_homeserver_container_extra_arguments_auto: |

  63.   {{

  64.     (['--mount type=bind,src=' + matrix_appservice_discord_config_path + '/registration.yaml,dst=/matrix-appservice-discord-registration.yaml,ro'] if matrix_appservice_discord_enabled else [])

  65.     +

  66.     (['--mount type=bind,src=' + matrix_appservice_irc_config_path + '/registration.yaml,dst=/matrix-appservice-irc-registration.yaml,ro'] if matrix_appservice_irc_enabled else [])

  67.     +

  68.     (['--mount type=bind,src=' + matrix_appservice_kakaotalk_config_path + '/registration.yaml,dst=/matrix-appservice-kakaotalk-registration.yaml,ro'] if matrix_appservice_kakaotalk_enabled else [])

  69.     +

  70.     (['--mount type=bind,src=' + matrix_appservice_slack_config_path + '/slack-registration.yaml,dst=/matrix-appservice-slack-registration.yaml,ro'] if matrix_appservice_slack_enabled else [])

  71.     +

  72.     (['--mount type=bind,src=' + matrix_appservice_webhooks_config_path + '/webhooks-registration.yaml,dst=/matrix-appservice-webhooks-registration.yaml,ro'] if matrix_appservice_webhooks_enabled else [])

  73.     +

  74.     (['--mount type=bind,src=' + matrix_beeper_linkedin_config_path + '/registration.yaml,dst=/matrix-beeper-linkedin-registration.yaml,ro'] if matrix_beeper_linkedin_enabled else [])

  75.     +

  76.     (['--mount type=bind,src=' + matrix_go_skype_bridge_config_path + '/registration.yaml,dst=/matrix-go-skype-bridge-registration.yaml,ro'] if matrix_go_skype_bridge_enabled else [])

  77.     +

  78.     (['--mount type=bind,src=' + matrix_heisenbridge_base_path + '/registration.yaml,dst=/heisenbridge-registration.yaml,ro'] if matrix_heisenbridge_enabled else [])

  79.     +

  80.     (['--mount type=bind,src=' + matrix_hookshot_base_path + '/registration.yml,dst=/hookshot-registration.yml,ro'] if matrix_hookshot_enabled else [])

  81.     +

  82.     (['--mount type=bind,src=' + matrix_mautrix_discord_config_path + '/registration.yaml,dst=/matrix-mautrix-discord-registration.yaml,ro'] if matrix_mautrix_discord_enabled else [])

  83.     +

  84.     (['--mount type=bind,src=' + matrix_mautrix_slack_config_path + '/registration.yaml,dst=/matrix-mautrix-slack-registration.yaml,ro'] if matrix_mautrix_slack_enabled else [])

  85.     +

  86.     (['--mount type=bind,src=' + matrix_mautrix_facebook_config_path + '/registration.yaml,dst=/matrix-mautrix-facebook-registration.yaml,ro'] if matrix_mautrix_facebook_enabled else [])

  87.     +

  88.     (['--mount type=bind,src=' + matrix_mautrix_googlechat_config_path + '/registration.yaml,dst=/matrix-mautrix-googlechat-registration.yaml,ro'] if matrix_mautrix_googlechat_enabled else [])

  89.     +

  90.     (['--mount type=bind,src=' + matrix_mautrix_hangouts_config_path + '/registration.yaml,dst=/matrix-mautrix-hangouts-registration.yaml,ro'] if matrix_mautrix_hangouts_enabled else [])

  91.     +

  92.     (['--mount type=bind,src=' + matrix_mautrix_instagram_config_path + '/registration.yaml,dst=/matrix-mautrix-instagram-registration.yaml,ro'] if matrix_mautrix_instagram_enabled else [])

  93.     +

  94.     (['--mount type=bind,src=' + matrix_mautrix_signal_config_path + '/registration.yaml,dst=/matrix-mautrix-signal-registration.yaml,ro'] if matrix_mautrix_signal_enabled else [])

  95.     +

  96.     (['--mount type=bind,src=' + matrix_mautrix_telegram_config_path + '/registration.yaml,dst=/matrix-mautrix-telegram-registration.yaml,ro'] if matrix_mautrix_telegram_enabled else [])

  97.     +

  98.     (['--mount type=bind,src=' + matrix_mautrix_twitter_config_path + '/registration.yaml,dst=/matrix-mautrix-twitter-registration.yaml,ro'] if matrix_mautrix_twitter_enabled else [])

  99.     +

  100.     (['--mount type=bind,src=' + matrix_mautrix_whatsapp_config_path + '/registration.yaml,dst=/matrix-mautrix-whatsapp-registration.yaml,ro'] if matrix_mautrix_whatsapp_enabled else [])

  101.     +

  102.     (['--mount type=bind,src=' + matrix_mx_puppet_discord_config_path + '/registration.yaml,dst=/matrix-mx-puppet-discord-registration.yaml,ro'] if matrix_mx_puppet_discord_enabled else [])

  103.     +

  104.     (['--mount type=bind,src=' + matrix_mx_puppet_groupme_config_path + '/registration.yaml,dst=/matrix-mx-puppet-groupme-registration.yaml,ro'] if matrix_mx_puppet_groupme_enabled else [])

  105.     +

  106.     (['--mount type=bind,src=' + matrix_mx_puppet_instagram_config_path + '/registration.yaml,dst=/matrix-mx-puppet-instagram-registration.yaml,ro'] if matrix_mx_puppet_instagram_enabled else [])

  107.     +

  108.     (['--mount type=bind,src=' + matrix_mx_puppet_slack_config_path + '/registration.yaml,dst=/matrix-mx-puppet-slack-registration.yaml,ro'] if matrix_mx_puppet_slack_enabled else [])

  109.     +

  110.     (['--mount type=bind,src=' + matrix_mx_puppet_steam_config_path + '/registration.yaml,dst=/matrix-mx-puppet-steam-registration.yaml,ro'] if matrix_mx_puppet_steam_enabled else [])

  111.     +

  112.     (['--mount type=bind,src=' + matrix_mx_puppet_twitter_config_path + '/registration.yaml,dst=/matrix-mx-puppet-twitter-registration.yaml,ro'] if matrix_mx_puppet_twitter_enabled else [])

  113.     +

  114.     (['--mount type=bind,src=' + matrix_sms_bridge_config_path + '/registration.yaml,dst=/matrix-sms-bridge-registration.yaml,ro'] if matrix_sms_bridge_enabled else [])

  115.     +

  116.     (['--mount type=bind,src=' + matrix_cactus_comments_app_service_config_file + ',dst=/matrix-cactus-comments.yaml,ro'] if matrix_cactus_comments_enabled else [])

  117.   }}

  118. 

  119. matrix_homeserver_app_service_config_files_auto: |

  120.   {{

  121.     (['/matrix-appservice-discord-registration.yaml'] if matrix_appservice_discord_enabled else [])

  122.     +

  123.     (['/matrix-appservice-irc-registration.yaml'] if matrix_appservice_irc_enabled else [])

  124.     +

  125.     (['/matrix-appservice-kakaotalk-registration.yaml'] if matrix_appservice_kakaotalk_enabled else [])

  126.     +

  127.     (['/matrix-appservice-slack-registration.yaml'] if matrix_appservice_slack_enabled else [])

  128.     +

  129.     (['/matrix-appservice-webhooks-registration.yaml'] if matrix_appservice_webhooks_enabled else [])

  130.     +

  131.     (['/matrix-beeper-linkedin-registration.yaml'] if matrix_beeper_linkedin_enabled else [])

  132.     +

  133.     (['/matrix-go-skype-bridge-registration.yaml'] if matrix_go_skype_bridge_enabled else [])

  134.     +

  135.     (['/heisenbridge-registration.yaml'] if matrix_heisenbridge_enabled else [])

  136.     +

  137.     (['/hookshot-registration.yml'] if matrix_hookshot_enabled else [])

  138.     +

  139.     (['/matrix-mautrix-discord-registration.yaml'] if matrix_mautrix_discord_enabled else [])

  140.     +

  141.     (['/matrix-mautrix-slack-registration.yaml'] if matrix_mautrix_slack_enabled else [])

  142.     +

  143.     (['/matrix-mautrix-facebook-registration.yaml'] if matrix_mautrix_facebook_enabled else [])

  144.     +

  145.     (['/matrix-mautrix-googlechat-registration.yaml'] if matrix_mautrix_googlechat_enabled else [])

  146.     +

  147.     (['/matrix-mautrix-hangouts-registration.yaml'] if matrix_mautrix_hangouts_enabled else [])

  148.     +

  149.     (['/matrix-mautrix-instagram-registration.yaml'] if matrix_mautrix_instagram_enabled else [])

  150.     +

  151.     (['/matrix-mautrix-signal-registration.yaml'] if matrix_mautrix_signal_enabled else [])

  152.     +

  153.     (['/matrix-mautrix-telegram-registration.yaml'] if matrix_mautrix_telegram_enabled else [])

  154.     +

  155.     (['/matrix-mautrix-twitter-registration.yaml'] if matrix_mautrix_twitter_enabled else [])

  156.     +

  157.     (['/matrix-mautrix-whatsapp-registration.yaml'] if matrix_mautrix_whatsapp_enabled else [])

  158.     +

  159.     (['/matrix-mx-puppet-discord-registration.yaml'] if matrix_mx_puppet_discord_enabled else [])

  160.     +

  161.     (['/matrix-mx-puppet-groupme-registration.yaml'] if matrix_mx_puppet_groupme_enabled else [])

  162.     +

  163.     (['/matrix-mx-puppet-instagram-registration.yaml'] if matrix_mx_puppet_instagram_enabled else [])

  164.     +

  165.     (['/matrix-mx-puppet-slack-registration.yaml'] if matrix_mx_puppet_slack_enabled else [])

  166.     +

  167.     (['/matrix-mx-puppet-steam-registration.yaml'] if matrix_mx_puppet_steam_enabled else [])

  168.     +

  169.     (['/matrix-mx-puppet-twitter-registration.yaml'] if matrix_mx_puppet_twitter_enabled else [])

  170.     +

  171.     (['/matrix-sms-bridge-registration.yaml'] if matrix_sms_bridge_enabled else [])

  172.     +

  173.     (['/matrix-cactus-comments.yaml'] if matrix_cactus_comments_enabled else [])

  174.   }}

  175. 

  176. ########################################################################

  177. #                                                                      #

  178. # /base                                                                #

  179. #                                                                      #

  180. ########################################################################

  181. 

  182. 

  183. ########################################################################

  184. #                                                                      #

  185. # com.devture.ansible.role.systemd_service_manager                     #

  186. #                                                                      #

  187. ########################################################################

  188. 

  189. # This list is not exhaustive and final.

  190. # Synapse workers are still injected into the list at runtime.

  191. # Additional JVB workers (playbooks/jitsi_jvb.yml -- roles/custom/matrix-jitsi/tasks/init_additional_jvb.yml) override this variable at runtime as well.

  192. #

  193. # Priority levels are like this:

  194. # - core services (the homeserver) get a level of ~1000

  195. # - services that core services depend on (database, Redis, ntfy, etc.) get a lower level - between 500 and 1000

  196. # - reverse-proxying services get level 3000

  197. # - Matrix utility services (bridges, bots) get a level of 2000/2200, so that:

  198. #   - they can start before the reverse-proxy

  199. #   - so that, when the reverse-proxy is up (Matrix is up), all bots and bridges can be interacted with

  200. # - monitoring services (Prometheus, Grafana, ..) get a level of 4000 - they can start later than all-of-Matrix

  201. # - services which aren't time-sensitive (various crons and timers) get a level of 5000 - they can start later than all-of-Matrix

  202. devture_systemd_service_manager_services_list_auto: |

  203.   {{

  204.     ([{'name': 'matrix-backup-borg.timer', 'priority': 5000, 'groups': ['matrix', 'backup', 'borg']}] if matrix_backup_borg_enabled else [])

  205.     +

  206.     ([{'name': 'matrix-bot-buscarron.service', 'priority': 2200, 'groups': ['matrix', 'bots', 'buscarron']}] if matrix_bot_buscarron_enabled else [])

  207.     +

  208.     ([{'name': 'matrix-bot-go-neb.service', 'priority': 2200, 'groups': ['matrix', 'bots', 'go-neb']}] if matrix_bot_go_neb_enabled else [])

  209.     +

  210.     ([{'name': 'matrix-bot-honoroit.service', 'priority': 2200, 'groups': ['matrix', 'bots', 'honoroit']}] if matrix_bot_honoroit_enabled else [])

  211.     +

  212.     ([{'name': 'matrix-bot-matrix-registration-bot.service', 'priority': 2200, 'groups': ['matrix', 'bots', 'registration-bot']}] if matrix_bot_matrix_registration_bot_enabled else [])

  213.     +

  214.     ([{'name': 'matrix-bot-matrix-reminder-bot.service', 'priority': 2200, 'groups': ['matrix', 'bots', 'reminder-bot']}] if matrix_bot_matrix_reminder_bot_enabled else [])

  215.     +

  216.     ([{'name': 'matrix-bot-maubot.service', 'priority': 2200, 'groups': ['matrix', 'bots', 'maubot']}] if matrix_bot_maubot_enabled else [])

  217.     +

  218.     ([{'name': 'matrix-bot-mjolnir.service', 'priority': 2200, 'groups': ['matrix', 'bots', 'mjolnir']}] if matrix_bot_mjolnir_enabled else [])

  219.     +

  220.     ([{'name': 'matrix-bot-draupnir.service', 'priority': 2200, 'groups': ['matrix', 'bots', 'draupnir']}] if matrix_bot_draupnir_enabled else [])

  221.     +

  222.     ([{'name': 'matrix-bot-postmoogle.service', 'priority': 2200, 'groups': ['matrix', 'bots', 'postmoogle']}] if matrix_bot_postmoogle_enabled else [])

  223.     +

  224.     ([{'name': 'matrix-bot-chatgpt.service', 'priority': 2200, 'groups': ['matrix', 'bots', 'chatgpt']}] if matrix_bot_chatgpt_enabled else [])

  225.     +

  226.     ([{'name': 'matrix-appservice-discord.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'appservice-discord']}] if matrix_appservice_discord_enabled else [])

  227.     +

  228.     ([{'name': 'matrix-appservice-irc.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'appservice-irc']}] if matrix_appservice_irc_enabled else [])

  229.     +

  230.     ([{'name': 'matrix-appservice-kakaotalk.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'appservice-kakaotalk']}] if matrix_appservice_kakaotalk_enabled else [])

  231.     +

  232.     ([{'name': 'matrix-appservice-kakaotalk-node.service', 'priority': 1900, 'groups': ['matrix', 'bridges', 'appservice-kakaotalk', 'appservice-kakaotalk-node']}] if matrix_appservice_kakaotalk_enabled else [])

  233.     +

  234.     ([{'name': 'matrix-appservice-slack.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'appservice-slack']}] if matrix_appservice_slack_enabled else [])

  235.     +

  236.     ([{'name': 'matrix-appservice-webhooks.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'appservice-webhooks']}] if matrix_appservice_webhooks_enabled else [])

  237.     +

  238.     ([{'name': 'matrix-beeper-linkedin.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'beeper-linkedin']}] if matrix_beeper_linkedin_enabled else [])

  239.     +

  240.     ([{'name': 'matrix-go-skype-bridge.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'go-skype']}] if matrix_go_skype_bridge_enabled else [])

  241.     +

  242.     ([{'name': 'matrix-heisenbridge.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'heisenbridge']}] if matrix_heisenbridge_enabled else [])

  243.     +

  244.     ([{'name': 'matrix-hookshot.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'hookshot']}] if matrix_hookshot_enabled else [])

  245.     +

  246.     ([{'name': 'matrix-mautrix-discord.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mautrix-discord']}] if matrix_mautrix_discord_enabled else [])

  247.     +

  248.     ([{'name': 'matrix-mautrix-slack.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mautrix-slack']}] if matrix_mautrix_slack_enabled else [])

  249.     +

  250.     ([{'name': 'matrix-mautrix-facebook.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mautrix-facebook']}] if matrix_mautrix_facebook_enabled else [])

  251.     +

  252.     ([{'name': 'matrix-mautrix-googlechat.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mautrix-googlechat']}] if matrix_mautrix_googlechat_enabled else [])

  253.     +

  254.     ([{'name': 'matrix-mautrix-hangouts.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mautrix-hangouts']}] if matrix_mautrix_hangouts_enabled else [])

  255.     +

  256.     ([{'name': 'matrix-mautrix-instagram.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mautrix-instagram']}] if matrix_mautrix_instagram_enabled else [])

  257.     +

  258.     ([{'name': 'matrix-mautrix-signal.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mautrix-signal']}] if matrix_mautrix_signal_enabled else [])

  259.     +

  260.     ([{'name': 'matrix-mautrix-signal-daemon.service', 'priority': 1900, 'groups': ['matrix', 'bridges', 'mautrix-signal', 'mautrix-signal-daemon']}] if matrix_mautrix_signal_enabled else [])

  261.     +

  262.     ([{'name': 'matrix-mautrix-telegram.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mautrix-telegram']}] if matrix_mautrix_telegram_enabled else [])

  263.     +

  264.     ([{'name': 'matrix-mautrix-twitter.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mautrix-twitter']}] if matrix_mautrix_twitter_enabled else [])

  265.     +

  266.     ([{'name': 'matrix-mautrix-whatsapp.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mautrix-whatsapp']}] if matrix_mautrix_whatsapp_enabled else [])

  267.     +

  268.     ([{'name': 'matrix-mx-puppet-discord.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mx-puppet-discord']}] if matrix_mx_puppet_discord_enabled else [])

  269.     +

  270.     ([{'name': 'matrix-mx-puppet-groupme.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mx-puppet-groupme']}] if matrix_mx_puppet_groupme_enabled else [])

  271.     +

  272.     ([{'name': 'matrix-mx-puppet-instagram.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mx-puppet-instagram']}] if matrix_mx_puppet_instagram_enabled else [])

  273.     +

  274.     ([{'name': 'matrix-mx-puppet-slack.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mx-puppet-slack']}] if matrix_mx_puppet_slack_enabled else [])

  275.     +

  276.     ([{'name': 'matrix-mx-puppet-steam.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mx-puppet-steam']}] if matrix_mx_puppet_steam_enabled else [])

  277.     +

  278.     ([{'name': 'matrix-mx-puppet-twitter.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mx-puppet-twitter']}] if matrix_mx_puppet_twitter_enabled else [])

  279.     +

  280.     ([{'name': 'matrix-sms-bridge.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'sms']}] if matrix_sms_bridge_enabled else [])

  281.     +

  282.     ([{'name': 'matrix-cactus-comments.service', 'priority': 2000, 'groups': ['matrix', 'cactus-comments']}] if matrix_cactus_comments_enabled else [])

  283.     +

  284.     ([{'name': 'matrix-client-cinny.service', 'priority': 2000, 'groups': ['matrix', 'clients', 'cinny']}] if matrix_client_cinny_enabled else [])

  285.     +

  286.     ([{'name': 'matrix-client-element.service', 'priority': 2000, 'groups': ['matrix', 'clients', 'element']}] if matrix_client_element_enabled else [])

  287.     +

  288.     ([{'name': 'matrix-client-hydrogen.service', 'priority': 2000, 'groups': ['matrix', 'clients', 'hydrogen']}] if matrix_client_hydrogen_enabled else [])

  289.     +

  290.     ([{'name': ('matrix-' + matrix_homeserver_implementation + '.service'), 'priority': 1000, 'groups': ['matrix', 'homeservers', matrix_homeserver_implementation]}] if matrix_homeserver_enabled else [])

  291.     +

  292.     ([{'name': 'matrix-corporal.service', 'priority': 1500, 'groups': ['matrix', 'corporal']}] if matrix_corporal_enabled else [])

  293.     +

  294.     ([{'name': 'matrix-coturn.service', 'priority': 4000, 'groups': ['matrix', 'coturn']}] if matrix_coturn_enabled else [])

  295.     +

  296.     ([{'name': 'matrix-coturn-reload.timer', 'priority': 5000, 'groups': ['matrix', 'coturn']}] if (matrix_coturn_enabled and matrix_coturn_tls_enabled) else [])

  297.     +

  298.     ([{'name': 'matrix-dimension.service', 'priority': 2500, 'groups': ['matrix', 'integration-managers', 'dimension']}] if matrix_dimension_enabled else [])

  299.     +

  300.     ([{'name': 'matrix-dynamic-dns.service', 'priority': 5000, 'groups': ['matrix', 'dynamic-dns']}] if matrix_dynamic_dns_enabled else [])

  301.     +

  302.     ([{'name': 'matrix-email2matrix.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'email2matrix']}] if matrix_email2matrix_enabled else [])

  303.     +

  304.     ([{'name': 'matrix-etherpad.service', 'priority': 4000, 'groups': ['matrix', 'etherpad']}] if matrix_etherpad_enabled else [])

  305.     +

  306.     ([{'name': 'matrix-grafana.service', 'priority': 4000, 'groups': ['matrix', 'monitoring', 'grafana']}] if matrix_grafana_enabled else [])

  307.     +

  308.     ([{'name': 'matrix-jitsi-web.service', 'priority': 4200, 'groups': ['matrix', 'jitsi', 'jitsi-web']}] if matrix_jitsi_enabled else [])

  309.     +

  310.     ([{'name': 'matrix-jitsi-prosody.service', 'priority': 4000, 'groups': ['matrix', 'jitsi', 'jitsi-prosody']}] if matrix_jitsi_enabled else [])

  311.     +

  312.     ([{'name': 'matrix-jitsi-jicofo.service', 'priority': 4100, 'groups': ['matrix', 'jitsi', 'jitsi-jicofo']}] if matrix_jitsi_enabled else [])

  313.     +

  314.     ([{'name': 'matrix-jitsi-jvb.service', 'priority': 4100, 'groups': ['matrix', 'jitsi', 'jitsi-jvb']}] if matrix_jitsi_enabled else [])

  315.     +

  316.     ([{'name': 'matrix-ldap-registration-proxy.service', 'priority': 2000, 'groups': ['matrix', 'ldap-registration-proxy']}] if matrix_ldap_registration_proxy_enabled else [])

  317.     +

  318.     ([{'name': 'matrix-ma1sd.service', 'priority': 2000, 'groups': ['matrix', 'ma1sd']}] if matrix_ma1sd_enabled else [])

  319.     +

  320.     ([{'name': 'matrix-mailer.service', 'priority': 2000, 'groups': ['matrix', 'mailer']}] if matrix_mailer_enabled else [])

  321.     +

  322.     ([{'name': 'matrix-nginx-proxy.service', 'priority': 3000, 'groups': ['matrix', 'nginx', 'reverse-proxies']}] if matrix_nginx_proxy_enabled else [])

  323.     +

  324.     (matrix_ssl_renewal_systemd_units_list | selectattr('applicable') | selectattr('enableable') | list )

  325.     +

  326.     ([{'name': 'matrix-ntfy.service', 'priority': 800, 'groups': ['matrix', 'ntfy']}] if matrix_ntfy_enabled else [])

  327.     +

  328.     ([{'name': (devture_postgres_identifier + '.service'), 'priority': 500, 'groups': ['matrix', 'postgres']}] if devture_postgres_enabled else [])

  329.     +

  330.     ([{'name': (devture_postgres_backup_identifier + '.service'), 'priority': 5000, 'groups': ['matrix', 'backup', 'postgres-backup']}] if devture_postgres_backup_enabled else [])

  331.     +

  332.     ([{'name': 'matrix-prometheus.service', 'priority': 4000, 'groups': ['matrix', 'monitoring', 'prometheus', 'prometheus-core']}] if matrix_prometheus_enabled else [])

  333.     +

  334.     ([{'name': (prometheus_node_exporter_identifier + '.service'), 'priority': 3900, 'groups': ['matrix', 'monitoring', 'prometheus', 'prometheus-exporters']}] if prometheus_node_exporter_enabled else [])

  335.     +

  336.     ([{'name': (prometheus_postgres_exporter_identifier + '.service'), 'priority': 3900, 'groups': ['matrix', 'monitoring', 'prometheus', 'prometheus-exporters']}] if prometheus_postgres_exporter_enabled else [])

  337.     +

  338.     ([{'name': 'matrix-prometheus-nginxlog-exporter.service', 'priority': 3900, 'groups': ['matrix', 'monitoring', 'prometheus', 'prometheus-exporters']}] if matrix_prometheus_nginxlog_exporter_enabled else [])

  339.     +

  340.     ([{'name': 'matrix-redis', 'priority': 750, 'groups': ['matrix', 'redis']}] if matrix_redis_enabled else [])

  341.     +

  342.     ([{'name': 'matrix-registration.service', 'priority': 4000, 'groups': ['matrix', 'registration']}] if matrix_registration_enabled else [])

  343.     +

  344.     ([{'name': 'matrix-sygnal.service', 'priority': 800, 'groups': ['matrix', 'sygnal']}] if matrix_sygnal_enabled else [])

  345.     +

  346.     ([{'name': 'matrix-goofys.service', 'priority': 800, 'groups': ['matrix', 'goofys']}] if matrix_s3_media_store_enabled else [])

  347.     +

  348.     ([{'name': 'matrix-synapse-s3-storage-provider-migrate.timer', 'priority': 5000, 'groups': ['matrix']}] if matrix_synapse_ext_synapse_s3_storage_provider_enabled else [])

  349.     +

  350.     ([{'name': 'matrix-synapse-admin.service', 'priority': 4000, 'groups': ['matrix', 'synapse-admin']}] if matrix_synapse_admin_enabled else [])

  351.     +

  352.     ([{'name': 'matrix-synapse-reverse-proxy-companion.service', 'priority': 1500, 'groups': ['matrix', 'homeservers', 'synapse', 'reverse-proxies']}] if matrix_synapse_reverse_proxy_companion_enabled else [])

  353.     +

  354.     ([{'name': 'matrix-user-verification-service.service', 'priority': 800, 'groups': ['matrix', 'matrix-user-verification-service']}] if matrix_user_verification_service_enabled else [])

  355.     +

  356.     ([{'name': 'devture-traefik.service', 'priority': 3000, 'groups': ['matrix', 'traefik', 'reverse-proxies']}] if matrix_playbook_traefik_role_enabled else [])

  357.     +

  358.     ([{'name': (devture_traefik_certs_dumper_identifier + '.service'), 'priority': 3500, 'groups': ['matrix', 'traefik-certs-dumper']}] if matrix_playbook_traefik_certs_dumper_role_enabled else [])

  359.   }}

  360. 

  361. ########################################################################

  362. #                                                                      #

  363. # /com.devture.ansible.role.systemd_service_manager                    #

  364. #                                                                      #

  365. ########################################################################

  366. 

  367. 

  368. ########################################################################

  369. #                                                                      #

  370. # com.devture.ansible.role.timesync                                    #

  371. #                                                                      #

  372. ########################################################################

  373. 

  374. # To completely disable installing systemd-timesyncd/ntpd, use `devture_timesync_installation_enabled: false`.

  375. 

  376. ########################################################################

  377. #                                                                      #

  378. # /com.devture.ansible.role.timesync                                   #

  379. #                                                                      #

  380. ########################################################################

  381. 

  382. 

  383. 

  384. ######################################################################

  385. #

  386. # com.devture.ansible.role.playbook_state_preserver

  387. #

  388. ######################################################################

  389. 

  390. # To completely disable this feature, use `devture_playbook_state_preserver_enabled: false`.

  391. 

  392. devture_playbook_state_preserver_uid: "{{ matrix_user_uid }}"

  393. devture_playbook_state_preserver_gid: "{{ matrix_user_gid }}"

  394. 

  395. devture_playbook_state_preserver_vars_preservation_dst: "{{ matrix_base_data_path }}/vars.yml"

  396. 

  397. devture_playbook_state_preserver_commit_hash_preservation_dst: "{{ matrix_base_data_path }}/git_hash.yml"

  398. 

  399. ######################################################################

  400. #

  401. # /com.devture.ansible.role.playbook_state_preserver

  402. #

  403. ######################################################################

  404. 

  405. 

  406. 

  407. ######################################################################

  408. #

  409. # matrix-base

  410. #

  411. ######################################################################

  412. 

  413. matrix_identity_server_url: "{{ ('https://' + matrix_server_fqn_matrix) if matrix_ma1sd_enabled else None }}"

  414. 

  415. matrix_homeserver_container_url: |-

  416.   {{

  417.     'http://matrix-nginx-proxy:12080' if matrix_nginx_proxy_enabled else {

  418.       'synapse': ('http://matrix-synapse-reverse-proxy-companion:8008' if matrix_synapse_reverse_proxy_companion_enabled else 'http://matrix-synapse:'+ matrix_synapse_container_client_api_port|string),

  419.       'dendrite': ('http://matrix-dendrite:' + matrix_dendrite_http_bind_port|string),

  420.       'conduit': ('http://matrix-conduit:' + matrix_conduit_port_number|string),

  421.     }[matrix_homeserver_implementation]

  422.   }}

  423. 

  424. matrix_homeserver_container_federation_url: |-

  425.   {{

  426.     'http://matrix-nginx-proxy:12088' if matrix_nginx_proxy_enabled else {

  427.       'synapse': ('http://matrix-synapse-reverse-proxy-companion:8048' if matrix_synapse_reverse_proxy_companion_enabled else 'http://matrix-synapse:'+ matrix_synapse_container_federation_api_plain_port|string),

  428.       'dendrite': ('http://matrix-dendrite:' + matrix_dendrite_http_bind_port|string),

  429.       'conduit': ('http://matrix-conduit:' + matrix_conduit_port_number|string),

  430.     }[matrix_homeserver_implementation]

  431.   }}

  432. 

  433. matrix_integration_manager_rest_url: "{{ matrix_dimension_integrations_rest_url if matrix_dimension_enabled else None }}"

  434. matrix_integration_manager_ui_url: "{{ matrix_dimension_integrations_ui_url if matrix_dimension_enabled else None }}"

  435. 

  436. ######################################################################

  437. #

  438. # /matrix-base

  439. #

  440. ######################################################################

  441. 

  442. 

  443. ######################################################################

  444. #

  445. # matrix-bridge-appservice-discord

  446. #

  447. ######################################################################

  448. 

  449. # We don't enable bridges by default.

  450. matrix_appservice_discord_enabled: false

  451. 

  452. # Normally, matrix-nginx-proxy is enabled and nginx can reach matrix-appservice-discord over the container network.

  453. # If matrix-nginx-proxy is not enabled, or you otherwise have a need for it, you can expose

  454. # matrix-appservice-discord's client-server port to the local host.

  455. matrix_appservice_discord_container_http_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else '127.0.0.1:9005' }}"

  456. 

  457. # If the homeserver disables presence, it's likely better (less wasteful) to also disable presence on the bridge side.

  458. matrix_appservice_discord_bridge_disablePresence: "{{ not matrix_synapse_presence_enabled }}"

  459. 

  460. matrix_appservice_discord_systemd_required_services_list: |

  461.   {{

  462.     ['docker.service']

  463.     +

  464.     ['matrix-' + matrix_homeserver_implementation + '.service']

  465.     +

  466.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  467.     +

  468.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  469.   }}

  470. 

  471. matrix_appservice_discord_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'discord.as.token', rounds=655555) | to_uuid }}"

  472. 

  473. matrix_appservice_discord_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'discord.hs.token', rounds=655555) | to_uuid }}"

  474. 

  475. # We only make this use Postgres if our own Postgres server is enabled.

  476. # It's only then (for now) that we can automatically create the necessary database and user for this service.

  477. matrix_appservice_discord_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  478. matrix_appservice_discord_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  479. matrix_appservice_discord_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'as.discord.db', rounds=655555) | to_uuid }}"

  480. 

  481. ######################################################################

  482. #

  483. # /matrix-bridge-appservice-discord

  484. #

  485. ######################################################################

  486. 

  487. 

  488. ######################################################################

  489. #

  490. # matrix-appservice-webhooks

  491. #

  492. ######################################################################

  493. 

  494. # We don't enable bridges by default.

  495. matrix_appservice_webhooks_enabled: false

  496. 

  497. matrix_appservice_webhooks_container_image_self_build: "{{ matrix_architecture != 'amd64' }}"

  498. 

  499. # Normally, matrix-nginx-proxy is enabled and nginx can reach matrix-appservice-webhooks over the container network.

  500. # If matrix-nginx-proxy is not enabled, or you otherwise have a need for it, you can expose

  501. # matrix-appservice-webhooks' client-server port to the local host.

  502. matrix_appservice_webhooks_container_http_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else ('127.0.0.1:' ~ matrix_appservice_webhooks_matrix_port) }}"

  503. 

  504. matrix_appservice_webhooks_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'webhook.as.token', rounds=655555) | to_uuid }}"

  505. 

  506. matrix_appservice_webhooks_homeserver_url: "{{ matrix_homeserver_container_url }}"

  507. matrix_appservice_webhooks_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'webhook.hs.token', rounds=655555) | to_uuid }}"

  508. 

  509. matrix_appservice_webhooks_id_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'webhook.id.token', rounds=655555) | to_uuid }}"

  510. 

  511. matrix_appservice_webhooks_systemd_required_services_list: |

  512.   {{

  513.     ['docker.service']

  514.     +

  515.     ['matrix-' + matrix_homeserver_implementation + '.service']

  516.     +

  517.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  518.   }}

  519. 

  520. ######################################################################

  521. #

  522. # /matrix-appservice-webhooks

  523. #

  524. ######################################################################

  525. 

  526. 

  527. ######################################################################

  528. #

  529. # matrix-appservice-slack

  530. #

  531. ######################################################################

  532. 

  533. # We don't enable bridges by default.

  534. matrix_appservice_slack_enabled: false

  535. 

  536. matrix_appservice_slack_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"

  537. 

  538. # Normally, matrix-nginx-proxy is enabled and nginx can reach matrix-appservice-slack over the container network.

  539. # If matrix-nginx-proxy is not enabled, or you otherwise have a need for it, you can expose

  540. # matrix-appservice-slack's client-server port to the local host.

  541. matrix_appservice_slack_container_http_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else ('127.0.0.1:' ~ matrix_appservice_slack_slack_port) }}"

  542. 

  543. matrix_appservice_slack_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'slack.as.token', rounds=655555) | to_uuid }}"

  544. 

  545. matrix_appservice_slack_homeserver_url: "{{ matrix_homeserver_container_url }}"

  546. matrix_appservice_slack_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'slack.hs.token', rounds=655555) | to_uuid }}"

  547. 

  548. matrix_appservice_slack_id_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'slack.id.token', rounds=655555) | to_uuid }}"

  549. 

  550. matrix_appservice_slack_systemd_required_services_list: |

  551.   {{

  552.     ['docker.service']

  553.     +

  554.     ['matrix-' + matrix_homeserver_implementation + '.service']

  555.     +

  556.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  557.   }}

  558. 

  559. # Postgres is the default, except if not using internal Postgres server

  560. matrix_appservice_slack_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'nedb' }}"

  561. matrix_appservice_slack_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  562. matrix_appservice_slack_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'as.slack.db', rounds=655555) | to_uuid }}"

  563. 

  564. ######################################################################

  565. #

  566. # /matrix-bridge-appservice-slack

  567. #

  568. ######################################################################

  569. 

  570. ######################################################################

  571. #

  572. # matrix-bridge-appservice-irc

  573. #

  574. ######################################################################

  575. 

  576. # We don't enable bridges by default.

  577. matrix_appservice_irc_enabled: false

  578. 

  579. matrix_appservice_irc_container_image_self_build: "{{ matrix_architecture != 'amd64' }}"

  580. 

  581. # Normally, matrix-nginx-proxy is enabled and nginx can reach matrix-appservice-irc over the container network.

  582. # If matrix-nginx-proxy is not enabled, or you otherwise have a need for it, you can expose

  583. # matrix-appservice-irc's client-server port to the local host.

  584. matrix_appservice_irc_container_http_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else '127.0.0.1:9999' }}"

  585. 

  586. # The IRC bridge docs say that if homeserver presence is disabled, it's better to also disable

  587. # IRC bridge presence, for performance reasons.

  588. matrix_appservice_irc_homeserver_enablePresence: "{{ matrix_synapse_presence_enabled }}"

  589. 

  590. matrix_appservice_irc_systemd_required_services_list: |

  591.   {{

  592.     ['docker.service']

  593.     +

  594.     ['matrix-' + matrix_homeserver_implementation + '.service']

  595.     +

  596.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  597.   }}

  598. 

  599. matrix_appservice_irc_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'irc.as.token', rounds=655555) | to_uuid }}"

  600. 

  601. matrix_appservice_irc_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'irc.hs.token', rounds=655555) | to_uuid }}"

  602. 

  603. matrix_appservice_irc_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'nedb' }}"

  604. matrix_appservice_irc_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  605. matrix_appservice_irc_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'as.irc.db', rounds=655555) | to_uuid }}"

  606. 

  607. 

  608. ######################################################################

  609. #

  610. # /matrix-bridge-appservice-irc

  611. #

  612. ######################################################################

  613. 

  614. ######################################################################

  615. #

  616. # matrix-bridge-appservice-kakaotalk

  617. #

  618. ######################################################################

  619. 

  620. # We don't enable bridges by default.

  621. matrix_appservice_kakaotalk_enabled: false

  622. 

  623. matrix_appservice_kakaotalk_systemd_required_services_list: |

  624.   {{

  625.     ['docker.service']

  626.     +

  627.     ['matrix-appservice-kakaotalk-node.service']

  628.     +

  629.     ['matrix-' + matrix_homeserver_implementation + '.service']

  630.     +

  631.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  632.     +

  633.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  634.   }}

  635. 

  636. matrix_appservice_kakaotalk_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'as.kakao.hs', rounds=655555) | to_uuid }}"

  637. 

  638. matrix_appservice_kakaotalk_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'as.kakao.hs', rounds=655555) | to_uuid }}"

  639. 

  640. matrix_appservice_kakaotalk_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  641. 

  642. matrix_appservice_kakaotalk_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  643. matrix_appservice_kakaotalk_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  644. matrix_appservice_kakaotalk_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'as.kakao.db', rounds=655555) | to_uuid }}"

  645. 

  646. ######################################################################

  647. #

  648. # /matrix-bridge-appservice-kakaotalk

  649. #

  650. ######################################################################

  651. 

  652. 

  653. ######################################################################

  654. #

  655. # matrix-bridge-beeper-linkedin

  656. #

  657. ######################################################################

  658. 

  659. # We don't enable bridges by default.

  660. matrix_beeper_linkedin_enabled: false

  661. 

  662. matrix_beeper_linkedin_container_image_self_build: "{{ matrix_architecture not in ['amd64'] }}"

  663. 

  664. matrix_beeper_linkedin_systemd_required_services_list: |

  665.   {{

  666.     ['docker.service']

  667.     +

  668.     ['matrix-' + matrix_homeserver_implementation + '.service']

  669.     +

  670.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  671.     +

  672.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  673.   }}

  674. 

  675. matrix_beeper_linkedin_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'linked.as.token', rounds=655555) | to_uuid }}"

  676. 

  677. matrix_beeper_linkedin_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'linked.hs.token', rounds=655555) | to_uuid }}"

  678. 

  679. matrix_beeper_linkedin_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  680. 

  681. matrix_beeper_linkedin_bridge_presence: "{{ matrix_synapse_presence_enabled if matrix_synapse_enabled else true }}"

  682. 

  683. matrix_beeper_linkedin_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  684. matrix_beeper_linkedin_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'maulinkedin.db', rounds=655555) | to_uuid }}"

  685. 

  686. ######################################################################

  687. #

  688. # /matrix-bridge-beeper-linkedin

  689. #

  690. ######################################################################

  691. 

  692. ######################################################################

  693. #

  694. # matrix-bridge-go-skype-bridge

  695. #

  696. ######################################################################

  697. 

  698. # We don't enable bridges by default.

  699. matrix_go_skype_bridge_enabled: false

  700. 

  701. matrix_go_skype_bridge_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"

  702. 

  703. matrix_go_skype_bridge_systemd_required_services_list: |

  704.   {{

  705.     ['docker.service']

  706.     +

  707.     ['matrix-' + matrix_homeserver_implementation + '.service']

  708.     +

  709.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  710.     +

  711.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  712.   }}

  713. 

  714. matrix_go_skype_bridge_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'skype.as.token', rounds=655555) | to_uuid }}"

  715. 

  716. matrix_go_skype_bridge_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'skype.hs.token', rounds=655555) | to_uuid }}"

  717. 

  718. matrix_go_skype_bridge_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  719. 

  720. # Postgres is the default, except if not using internal Postgres server

  721. matrix_go_skype_bridge_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  722. matrix_go_skype_bridge_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  723. matrix_go_skype_bridge_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'goskype.db', rounds=655555) | to_uuid }}"

  724. 

  725. ######################################################################

  726. #

  727. # /matrix-bridge-go-skype-bridge

  728. #

  729. ######################################################################

  730. 

  731. 

  732. ######################################################################

  733. #

  734. # matrix-bridge-mautrix-discord

  735. #

  736. ######################################################################

  737. 

  738. # We don't enable bridges by default.

  739. matrix_mautrix_discord_enabled: false

  740. 

  741. matrix_mautrix_discord_container_image_self_build: "{{ matrix_architecture not in ['arm64', 'amd64'] }}"

  742. 

  743. matrix_mautrix_discord_systemd_required_services_list: |

  744.   {{

  745.     ['docker.service']

  746.     +

  747.     ['matrix-' + matrix_homeserver_implementation + '.service']

  748.     +

  749.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  750.     +

  751.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  752.   }}

  753. 

  754. matrix_mautrix_discord_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'maudisc.as.tok', rounds=655555) | to_uuid }}"

  755. 

  756. matrix_mautrix_discord_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'maudisc.hs.tok', rounds=655555) | to_uuid }}"

  757. 

  758. matrix_mautrix_discord_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  759. 

  760. # Postgres is the default, except if not using internal Postgres server

  761. matrix_mautrix_discord_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  762. matrix_mautrix_discord_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  763. matrix_mautrix_discord_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'maudiscord.db', rounds=655555) | to_uuid }}"

  764. 

  765. ######################################################################

  766. #

  767. # /matrix-bridge-mautrix-discord

  768. #

  769. ######################################################################

  770. 

  771. 

  772. ######################################################################

  773. #

  774. # matrix-bridge-mautrix-slack

  775. #

  776. ######################################################################

  777. 

  778. # We don't enable bridges by default.

  779. matrix_mautrix_slack_enabled: false

  780. 

  781. matrix_mautrix_slack_container_image_self_build: "{{ matrix_architecture not in ['arm64', 'amd64'] }}"

  782. 

  783. matrix_mautrix_slack_systemd_required_services_list: |

  784.   {{

  785.     ['docker.service']

  786.     +

  787.     ['matrix-' + matrix_homeserver_implementation + '.service']

  788.     +

  789.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  790.     +

  791.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  792.   }}

  793. 

  794. matrix_mautrix_slack_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mauslack.as.tok', rounds=655555) | to_uuid }}"

  795. 

  796. matrix_mautrix_slack_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mauslack.hs.tok', rounds=655555) | to_uuid }}"

  797. 

  798. matrix_mautrix_slack_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  799. 

  800. # Postgres is the default, except if not using internal Postgres server

  801. matrix_mautrix_slack_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  802. matrix_mautrix_slack_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  803. matrix_mautrix_slack_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mauslack.db', rounds=655555) | to_uuid }}"

  804. 

  805. ######################################################################

  806. #

  807. # /matrix-bridge-mautrix-slack

  808. #

  809. ######################################################################

  810. 

  811. 

  812. ######################################################################

  813. #

  814. # matrix-bridge-mautrix-facebook

  815. #

  816. ######################################################################

  817. 

  818. # We don't enable bridges by default.

  819. matrix_mautrix_facebook_enabled: false

  820. 

  821. matrix_mautrix_facebook_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"

  822. 

  823. matrix_mautrix_facebook_systemd_required_services_list: |

  824.   {{

  825.     ['docker.service']

  826.     +

  827.     ['matrix-' + matrix_homeserver_implementation + '.service']

  828.     +

  829.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  830.     +

  831.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  832.   }}

  833. 

  834. matrix_mautrix_facebook_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'fb.as.token', rounds=655555) | to_uuid }}"

  835. 

  836. matrix_mautrix_facebook_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'fb.hs.token', rounds=655555) | to_uuid }}"

  837. 

  838. matrix_mautrix_facebook_public_endpoint: "/{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'facebook', rounds=655555) | to_uuid }}"

  839. 

  840. matrix_mautrix_facebook_container_http_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else '127.0.0.1:9008' }}"

  841. 

  842. matrix_mautrix_facebook_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  843. 

  844. matrix_mautrix_facebook_bridge_presence: "{{ matrix_synapse_presence_enabled if matrix_synapse_enabled else true }}"

  845. 

  846. # People using an external Prometheus server will need to toggle all of these to be able to consume metrics remotely:

  847. # - `matrix_mautrix_facebook_metrics_enabled`

  848. # - `matrix_mautrix_facebook_proxying_metrics_enabled`

  849. # - `matrix_nginx_proxy_proxy_matrix_metrics_enabled`

  850. matrix_mautrix_facebook_metrics_enabled: "{{ matrix_prometheus_enabled }}"

  851. 

  852. # We'd like to force-set people with external Postgres to SQLite, so the bridge role can complain

  853. # and point them to a migration path.

  854. matrix_mautrix_facebook_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  855. matrix_mautrix_facebook_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  856. matrix_mautrix_facebook_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mau.fb.db', rounds=655555) | to_uuid }}"

  857. 

  858. ######################################################################

  859. #

  860. # /matrix-bridge-mautrix-facebook

  861. #

  862. ######################################################################

  863. 

  864. 

  865. ######################################################################

  866. #

  867. # matrix-bridge-mautrix-googlechat

  868. #

  869. ######################################################################

  870. 

  871. # We don't enable bridges by default.

  872. matrix_mautrix_googlechat_enabled: false

  873. 

  874. matrix_mautrix_googlechat_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"

  875. 

  876. matrix_mautrix_googlechat_systemd_required_services_list: |

  877.   {{

  878.     ['docker.service']

  879.     +

  880.     ['matrix-' + matrix_homeserver_implementation + '.service']

  881.     +

  882.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  883.     +

  884.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  885.   }}

  886. 

  887. matrix_mautrix_googlechat_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'gc.as.token', rounds=655555) | to_uuid }}"

  888. 

  889. matrix_mautrix_googlechat_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'gc.hs.token', rounds=655555) | to_uuid }}"

  890. 

  891. matrix_mautrix_googlechat_container_http_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else '127.0.0.1:9007' }}"

  892. 

  893. matrix_mautrix_googlechat_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  894. 

  895. # Postgres is the default, except if not using internal Postgres server

  896. matrix_mautrix_googlechat_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  897. matrix_mautrix_googlechat_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  898. matrix_mautrix_googlechat_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mau.gc.db', rounds=655555) | to_uuid }}"

  899. 

  900. ######################################################################

  901. #

  902. # /matrix-bridge-mautrix-googlechat

  903. #

  904. ######################################################################

  905. 

  906. 

  907. ######################################################################

  908. #

  909. # matrix-bridge-mautrix-hangouts

  910. #

  911. ######################################################################

  912. 

  913. # We don't enable bridges by default.

  914. matrix_mautrix_hangouts_enabled: false

  915. 

  916. matrix_mautrix_hangouts_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"

  917. 

  918. matrix_mautrix_hangouts_systemd_required_services_list: |

  919.   {{

  920.     ['docker.service']

  921.     +

  922.     ['matrix-' + matrix_homeserver_implementation + '.service']

  923.     +

  924.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  925.     +

  926.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  927.   }}

  928. 

  929. matrix_mautrix_hangouts_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'ho.as.token', rounds=655555) | to_uuid }}"

  930. 

  931. matrix_mautrix_hangouts_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'ho.hs.token', rounds=655555) | to_uuid }}"

  932. 

  933. matrix_mautrix_hangouts_container_http_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else '127.0.0.1:9007' }}"

  934. 

  935. matrix_mautrix_hangouts_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  936. 

  937. # Postgres is the default, except if not using internal Postgres server

  938. matrix_mautrix_hangouts_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  939. matrix_mautrix_hangouts_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  940. matrix_mautrix_hangouts_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mau.hangouts.db', rounds=655555) | to_uuid }}"

  941. 

  942. ######################################################################

  943. #

  944. # /matrix-bridge-mautrix-hangouts

  945. #

  946. ######################################################################

  947. 

  948. 

  949. ######################################################################

  950. #

  951. # matrix-bridge-mautrix-instagram

  952. #

  953. ######################################################################

  954. 

  955. # We don't enable bridges by default.

  956. matrix_mautrix_instagram_enabled: false

  957. 

  958. matrix_mautrix_instagram_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"

  959. 

  960. matrix_mautrix_instagram_systemd_required_services_list: |

  961.   {{

  962.     ['docker.service']

  963.     +

  964.     ['matrix-' + matrix_homeserver_implementation + '.service']

  965.     +

  966.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  967.     +

  968.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  969.   }}

  970. 

  971. matrix_mautrix_instagram_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'ig.as.token', rounds=655555) | to_uuid }}"

  972. 

  973. matrix_mautrix_instagram_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'ig.hs.token', rounds=655555) | to_uuid }}"

  974. 

  975. matrix_mautrix_instagram_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  976. 

  977. matrix_mautrix_instagram_bridge_presence: "{{ matrix_synapse_presence_enabled if matrix_synapse_enabled else true }}"

  978. 

  979. # People using an external Prometheus server will need to toggle all of these to be able to consume metrics remotely:

  980. # - `matrix_mautrix_instagram_metrics_enabled`

  981. # - `matrix_mautrix_instagram_proxying_metrics_enabled`

  982. # - `matrix_nginx_proxy_proxy_matrix_metrics_enabled`

  983. matrix_mautrix_instagram_metrics_enabled: "{{ matrix_prometheus_enabled }}"

  984. 

  985. # We'd like to force-set people with external Postgres to SQLite, so the bridge role can complain

  986. # and point them to a migration path.

  987. matrix_mautrix_instagram_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  988. matrix_mautrix_instagram_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  989. matrix_mautrix_instagram_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mau.ig.db', rounds=655555) | to_uuid }}"

  990. 

  991. ######################################################################

  992. #

  993. # /matrix-bridge-mautrix-instagram

  994. #

  995. ######################################################################

  996. 

  997. 

  998. ######################################################################

  999. #

  1000. # matrix-bridge-mautrix-signal

  1001. #

  1002. ######################################################################

  1003. 

  1004. # We don't enable bridges by default.

  1005. matrix_mautrix_signal_enabled: false

  1006. 

  1007. matrix_mautrix_signal_systemd_required_services_list: |

  1008.   {{

  1009.     ['docker.service']

  1010.     +

  1011.     ['matrix-' + matrix_homeserver_implementation + '.service']

  1012.     +

  1013.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  1014.     +

  1015.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1016.     +

  1017.     ['matrix-mautrix-signal-daemon.service']

  1018.   }}

  1019. 

  1020. matrix_mautrix_signal_homeserver_domain: '{{ matrix_domain }}'

  1021. 

  1022. matrix_mautrix_signal_homeserver_address: "{{ matrix_homeserver_container_url }}"

  1023. 

  1024. matrix_mautrix_signal_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'si.hs.token', rounds=655555) | to_uuid }}"

  1025. 

  1026. matrix_mautrix_signal_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'si.as.token', rounds=655555) | to_uuid }}"

  1027. 

  1028. matrix_mautrix_signal_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  1029. 

  1030. # People using an external Prometheus server will need to toggle all of these to be able to consume metrics remotely:

  1031. # - `matrix_mautrix_signal_metrics_enabled`

  1032. # - `matrix_mautrix_signal_proxying_metrics_enabled`

  1033. # - `matrix_nginx_proxy_proxy_matrix_metrics_enabled`

  1034. matrix_mautrix_signal_metrics_enabled: "{{ matrix_prometheus_enabled }}"

  1035. 

  1036. matrix_mautrix_signal_database_engine: 'postgres'

  1037. matrix_mautrix_signal_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1038. matrix_mautrix_signal_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mau.signal.db', rounds=655555) | to_uuid }}"

  1039. 

  1040. matrix_mautrix_signal_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"

  1041. matrix_mautrix_signal_daemon_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"

  1042. 

  1043. ######################################################################

  1044. #

  1045. # /matrix-bridge-mautrix-signal

  1046. #

  1047. ######################################################################

  1048. 

  1049. ######################################################################

  1050. #

  1051. # matrix-bridge-mautrix-telegram

  1052. #

  1053. ######################################################################

  1054. 

  1055. # We don't enable bridges by default.

  1056. matrix_mautrix_telegram_enabled: false

  1057. 

  1058. # Images are multi-arch (amd64 and arm64, but not arm32).

  1059. matrix_mautrix_telegram_container_image_self_build: "{{ matrix_architecture not in ['arm64', 'amd64'] }}"

  1060. matrix_telegram_lottieconverter_container_image_self_build: "{{ matrix_architecture not in ['arm64', 'amd64'] }}"

  1061. matrix_telegram_lottieconverter_container_image_self_build_mask_arch: "{{ matrix_architecture != 'amd64' }}"

  1062. 

  1063. matrix_mautrix_telegram_systemd_required_services_list: |

  1064.   {{

  1065.     ['docker.service']

  1066.     +

  1067.     ['matrix-' + matrix_homeserver_implementation + '.service']

  1068.     +

  1069.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  1070.     +

  1071.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1072.   }}

  1073. 

  1074. matrix_mautrix_telegram_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'telegr.as.token', rounds=655555) | to_uuid }}"

  1075. 

  1076. matrix_mautrix_telegram_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'telegr.hs.token', rounds=655555) | to_uuid }}"

  1077. 

  1078. matrix_mautrix_telegram_public_endpoint: "/{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'telegram', rounds=655555) | to_uuid }}"

  1079. 

  1080. matrix_mautrix_telegram_container_http_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else '127.0.0.1:9006' }}"

  1081. 

  1082. matrix_mautrix_telegram_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  1083. 

  1084. # Postgres is the default, except if not using internal Postgres server

  1085. matrix_mautrix_telegram_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  1086. matrix_mautrix_telegram_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1087. matrix_mautrix_telegram_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mau.telegram.db', rounds=655555) | to_uuid }}"

  1088. 

  1089. ######################################################################

  1090. #

  1091. # /matrix-bridge-mautrix-telegram

  1092. #

  1093. ######################################################################

  1094. 

  1095. ######################################################################

  1096. #

  1097. # matrix-bridge-mautrix-twitter

  1098. #

  1099. ######################################################################

  1100. 

  1101. # We don't enable bridges by default.

  1102. matrix_mautrix_twitter_enabled: false

  1103. 

  1104. matrix_mautrix_twitter_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"

  1105. 

  1106. matrix_mautrix_twitter_systemd_required_services_list: |

  1107.   {{

  1108.     ['docker.service']

  1109.     +

  1110.     ['matrix-' + matrix_homeserver_implementation + '.service']

  1111.     +

  1112.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  1113.     +

  1114.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1115.   }}

  1116. 

  1117. matrix_mautrix_twitter_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'twt.as.token', rounds=655555) | to_uuid }}"

  1118. 

  1119. matrix_mautrix_twitter_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'twt.hs.token', rounds=655555) | to_uuid }}"

  1120. 

  1121. matrix_mautrix_twitter_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  1122. 

  1123. matrix_mautrix_twitter_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1124. matrix_mautrix_twitter_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mau.twt.db', rounds=655555) | to_uuid if devture_postgres_enabled else '' }}"

  1125. 

  1126. ######################################################################

  1127. #

  1128. # /matrix-bridge-mautrix-twitter

  1129. #

  1130. ######################################################################

  1131. 

  1132. ######################################################################

  1133. #

  1134. # matrix-bridge-mautrix-whatsapp

  1135. #

  1136. ######################################################################

  1137. 

  1138. # We don't enable bridges by default.

  1139. matrix_mautrix_whatsapp_enabled: false

  1140. 

  1141. matrix_mautrix_whatsapp_container_image_self_build: "{{ matrix_architecture not in ['arm64', 'amd64'] }}"

  1142. 

  1143. matrix_mautrix_whatsapp_systemd_required_services_list: |

  1144.   {{

  1145.     ['docker.service']

  1146.     +

  1147.     ['matrix-' + matrix_homeserver_implementation + '.service']

  1148.     +

  1149.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  1150.     +

  1151.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1152.   }}

  1153. 

  1154. matrix_mautrix_whatsapp_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'whats.as.token', rounds=655555) | to_uuid }}"

  1155. 

  1156. matrix_mautrix_whatsapp_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'whats.hs.token', rounds=655555) | to_uuid }}"

  1157. 

  1158. matrix_mautrix_whatsapp_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  1159. 

  1160. # People using an external Prometheus server will need to toggle all of these to be able to consume metrics remotely:

  1161. # - `matrix_mautrix_twitter_metrics_enabled`

  1162. # - `matrix_mautrix_twitter_proxying_metrics_enabled`

  1163. # - `matrix_nginx_proxy_proxy_matrix_metrics_enabled`

  1164. matrix_mautrix_twitter_metrics_enabled: "{{ matrix_prometheus_enabled }}"

  1165. 

  1166. # Postgres is the default, except if not using internal Postgres server

  1167. matrix_mautrix_whatsapp_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  1168. matrix_mautrix_whatsapp_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1169. matrix_mautrix_whatsapp_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mauwhatsapp.db', rounds=655555) | to_uuid }}"

  1170. 

  1171. ######################################################################

  1172. #

  1173. # /matrix-bridge-mautrix-whatsapp

  1174. #

  1175. ######################################################################

  1176. 

  1177. ######################################################################

  1178. #

  1179. # matrix-sms-bridge

  1180. #

  1181. ######################################################################

  1182. 

  1183. # We don't enable bridges by default.

  1184. matrix_sms_bridge_enabled: false

  1185. 

  1186. matrix_sms_bridge_systemd_required_services_list: |

  1187.   {{

  1188.     ['docker.service']

  1189.     +

  1190.     ['matrix-' + matrix_homeserver_implementation + '.service']

  1191.     +

  1192.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1193.   }}

  1194. 

  1195. matrix_sms_bridge_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'sms.as.token', rounds=655555) | to_uuid }}"

  1196. 

  1197. matrix_sms_bridge_homeserver_port: "{{ matrix_synapse_container_client_api_port }}"

  1198. matrix_sms_bridge_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'sms.hs.token', rounds=655555) | to_uuid }}"

  1199. 

  1200. ######################################################################

  1201. #

  1202. # /matrix-sms-bridge

  1203. #

  1204. ######################################################################

  1205. 

  1206. ######################################################################

  1207. #

  1208. # matrix-bridge-heisenbridge

  1209. #

  1210. ######################################################################

  1211. 

  1212. # We don't enable bridges by default.

  1213. matrix_heisenbridge_enabled: false

  1214. 

  1215. matrix_heisenbridge_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'heisen.as.tok', rounds=655555) | to_uuid }}"

  1216. 

  1217. matrix_heisenbridge_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'heisen.hs.tok', rounds=655555) | to_uuid }}"

  1218. 

  1219. matrix_heisenbridge_systemd_wanted_services_list: |

  1220.   {{

  1221.     ['matrix-' + matrix_homeserver_implementation + '.service']

  1222.     +

  1223.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1224.   }}

  1225. 

  1226. ######################################################################

  1227. #

  1228. # /matrix-bridge-heisenbridge

  1229. #

  1230. ######################################################################

  1231. 

  1232. ######################################################################

  1233. #

  1234. # matrix-bridge-hookshot

  1235. #

  1236. ######################################################################

  1237. 

  1238. # We don't enable bridges by default.

  1239. matrix_hookshot_enabled: false

  1240. 

  1241. matrix_hookshot_container_image_self_build: "{{ matrix_architecture not in ['arm64', 'amd64'] }}"

  1242. 

  1243. matrix_hookshot_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'hookshot.as.tok', rounds=655555) | to_uuid }}"

  1244. 

  1245. matrix_hookshot_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'hookshot.hs.tok', rounds=655555) | to_uuid }}"

  1246. 

  1247. matrix_hookshot_systemd_wanted_services_list: |

  1248.   {{

  1249.     (['matrix-' + matrix_homeserver_implementation + '.service'])

  1250.     +

  1251.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1252.   }}

  1253. 

  1254. matrix_hookshot_container_http_host_bind_ports_defaultmapping:

  1255.   - "127.0.0.1:{{ matrix_hookshot_appservice_port }}:{{ matrix_hookshot_appservice_port }}"

  1256.   - "127.0.0.1:{{ matrix_hookshot_metrics_port }}:{{ matrix_hookshot_metrics_port }}"

  1257.   - "127.0.0.1:{{ matrix_hookshot_webhook_port }}:{{ matrix_hookshot_webhook_port }}"

  1258.   - "127.0.0.1:{{ matrix_hookshot_provisioning_port }}:{{ matrix_hookshot_provisioning_port }}"

  1259. 

  1260. matrix_hookshot_container_http_host_bind_ports: "{{ [] if matrix_nginx_proxy_enabled else matrix_hookshot_container_http_host_bind_ports_defaultmapping }}"

  1261. 

  1262. matrix_hookshot_provisioning_enabled: "{{ matrix_hookshot_provisioning_secret and matrix_dimension_enabled }}"

  1263. 

  1264. # We only enable metrics (locally, in the container network) for the bridge if Prometheus is enabled.

  1265. #

  1266. # People using an external Prometheus server will need to toggle all of these to be able to consume metrics remotely:

  1267. # - `matrix_hookshot_metrics_enabled`

  1268. # - `matrix_hookshot_metrics_proxying_enabled`

  1269. # - `matrix_nginx_proxy_proxy_matrix_metrics_enabled`

  1270. matrix_hookshot_metrics_enabled: "{{ matrix_prometheus_enabled }}"

  1271. 

  1272. matrix_hookshot_urlprefix_port_enabled: "{{ matrix_nginx_proxy_container_https_host_bind_port == 443 if matrix_nginx_proxy_https_enabled else matrix_nginx_proxy_container_https_host_bind_port == 80 }}"

  1273. matrix_hookshot_urlprefix_port: ":{{ matrix_nginx_proxy_container_https_host_bind_port if matrix_nginx_proxy_https_enabled else matrix_nginx_proxy_container_http_host_bind_port }}"

  1274. matrix_hookshot_urlprefix: "http{{ 's' if matrix_nginx_proxy_https_enabled else '' }}://{{ matrix_server_fqn_matrix }}{{ matrix_hookshot_urlprefix_port if matrix_hookshot_urlprefix_port_enabled else '' }}"

  1275. 

  1276. ######################################################################

  1277. #

  1278. # /matrix-bridge-hookshot

  1279. #

  1280. ######################################################################

  1281. 

  1282. 

  1283. ######################################################################

  1284. #

  1285. # matrix-bridge-mx-puppet-slack

  1286. #

  1287. ######################################################################

  1288. 

  1289. # We don't enable bridges by default.

  1290. matrix_mx_puppet_slack_enabled: false

  1291. 

  1292. matrix_mx_puppet_slack_container_image_self_build: "{{ matrix_architecture != 'amd64' }}"

  1293. 

  1294. matrix_mx_puppet_slack_systemd_required_services_list: |

  1295.   {{

  1296.     ['docker.service']

  1297.     +

  1298.     ['matrix-' + matrix_homeserver_implementation + '.service']

  1299.     +

  1300.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  1301.     +

  1302.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1303.   }}

  1304. 

  1305. matrix_mx_puppet_slack_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxslk.as.tok', rounds=655555) | to_uuid }}"

  1306. 

  1307. matrix_mx_puppet_slack_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxslk.hs.tok', rounds=655555) | to_uuid }}"

  1308. 

  1309. matrix_mx_puppet_slack_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  1310. 

  1311. # Postgres is the default, except if not using internal Postgres server

  1312. matrix_mx_puppet_slack_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  1313. matrix_mx_puppet_slack_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1314. matrix_mx_puppet_slack_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxpup.slack.db', rounds=655555) | to_uuid }}"

  1315. 

  1316. ######################################################################

  1317. #

  1318. # /matrix-bridge-mx-puppet-slack

  1319. #

  1320. ######################################################################

  1321. 

  1322. ######################################################################

  1323. #

  1324. # matrix-bridge-mx-puppet-twitter

  1325. #

  1326. ######################################################################

  1327. 

  1328. # We don't enable bridges by default.

  1329. matrix_mx_puppet_twitter_enabled: false

  1330. 

  1331. matrix_mx_puppet_twitter_container_image_self_build: "{{ matrix_architecture != 'amd64' }}"

  1332. 

  1333. matrix_mx_puppet_twitter_systemd_required_services_list: |

  1334.   {{

  1335.     ['docker.service']

  1336.     +

  1337.     ['matrix-' + matrix_homeserver_implementation + '.service']

  1338.     +

  1339.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  1340.     +

  1341.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1342.   }}

  1343. 

  1344. matrix_mx_puppet_twitter_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxtwt.as.tok', rounds=655555) | to_uuid }}"

  1345. 

  1346. matrix_mx_puppet_twitter_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxtwt.hs.tok', rounds=655555) | to_uuid }}"

  1347. 

  1348. matrix_mx_puppet_twitter_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  1349. 

  1350. matrix_mx_puppet_twitter_container_http_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else ('127.0.0.1:' ~ matrix_mx_puppet_twitter_appservice_port) }}"

  1351. 

  1352. # Postgres is the default, except if not using internal Postgres server

  1353. matrix_mx_puppet_twitter_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  1354. matrix_mx_puppet_twitter_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1355. matrix_mx_puppet_twitter_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxpup.twitter.db', rounds=655555) | to_uuid }}"

  1356. 

  1357. ######################################################################

  1358. #

  1359. # /matrix-bridge-mx-puppet-twitter

  1360. #

  1361. ######################################################################

  1362. 

  1363. 

  1364. ######################################################################

  1365. #

  1366. # matrix-bridge-mx-puppet-instagram

  1367. #

  1368. ######################################################################

  1369. 

  1370. # We don't enable bridges by default.

  1371. matrix_mx_puppet_instagram_enabled: false

  1372. 

  1373. matrix_mx_puppet_instagram_container_image_self_build: "{{ matrix_architecture != 'amd64' }}"

  1374. 

  1375. matrix_mx_puppet_instagram_systemd_required_services_list: |

  1376.   {{

  1377.     ['docker.service']

  1378.     +

  1379.     ['matrix-' + matrix_homeserver_implementation + '.service']

  1380.     +

  1381.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  1382.     +

  1383.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1384.   }}

  1385. 

  1386. matrix_mx_puppet_instagram_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxig.as.tok', rounds=655555) | to_uuid }}"

  1387. 

  1388. matrix_mx_puppet_instagram_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxig.hs.tok', rounds=655555) | to_uuid }}"

  1389. 

  1390. matrix_mx_puppet_instagram_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  1391. 

  1392. # Postgres is the default, except if not using internal Postgres server

  1393. matrix_mx_puppet_instagram_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  1394. matrix_mx_puppet_instagram_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1395. matrix_mx_puppet_instagram_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxpup.ig.db', rounds=655555) | to_uuid }}"

  1396. 

  1397. ######################################################################

  1398. #

  1399. # /matrix-bridge-mx-puppet-instagram

  1400. #

  1401. ######################################################################

  1402. 

  1403. ######################################################################

  1404. #

  1405. # matrix-bridge-mx-puppet-discord

  1406. #

  1407. ######################################################################

  1408. 

  1409. # We don't enable bridges by default.

  1410. matrix_mx_puppet_discord_enabled: false

  1411. 

  1412. matrix_mx_puppet_discord_container_image_self_build: "{{ matrix_architecture != 'amd64' }}"

  1413. 

  1414. matrix_mx_puppet_discord_systemd_required_services_list: |

  1415.   {{

  1416.     ['docker.service']

  1417.     +

  1418.     ['matrix-' + matrix_homeserver_implementation + '.service']

  1419.     +

  1420.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  1421.     +

  1422.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1423.   }}

  1424. 

  1425. matrix_mx_puppet_discord_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxdsc.as.tok', rounds=655555) | to_uuid }}"

  1426. 

  1427. matrix_mx_puppet_discord_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxdsc.hs.tok', rounds=655555) | to_uuid }}"

  1428. 

  1429. matrix_mx_puppet_discord_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  1430. 

  1431. # Postgres is the default, except if not using internal Postgres server

  1432. matrix_mx_puppet_discord_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  1433. matrix_mx_puppet_discord_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1434. matrix_mx_puppet_discord_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxpup.dsc.db', rounds=655555) | to_uuid }}"

  1435. 

  1436. ######################################################################

  1437. #

  1438. # /matrix-bridge-mx-puppet-discord

  1439. #

  1440. ######################################################################

  1441. 

  1442. ######################################################################

  1443. #

  1444. # matrix-bridge-mx-puppet-steam

  1445. #

  1446. ######################################################################

  1447. 

  1448. # We don't enable bridges by default.

  1449. matrix_mx_puppet_steam_enabled: false

  1450. 

  1451. matrix_mx_puppet_steam_container_image_self_build: "{{ matrix_architecture not in ['arm64', 'amd64'] }}"

  1452. 

  1453. matrix_mx_puppet_steam_systemd_required_services_list: |

  1454.   {{

  1455.     ['docker.service']

  1456.     +

  1457.     ['matrix-' + matrix_homeserver_implementation + '.service']

  1458.     +

  1459.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  1460.     +

  1461.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1462.   }}

  1463. 

  1464. matrix_mx_puppet_steam_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxste.as.tok', rounds=655555) | to_uuid }}"

  1465. 

  1466. matrix_mx_puppet_steam_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxste.hs.tok', rounds=655555) | to_uuid }}"

  1467. 

  1468. matrix_mx_puppet_steam_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  1469. 

  1470. # Postgres is the default, except if not using internal Postgres server

  1471. matrix_mx_puppet_steam_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  1472. matrix_mx_puppet_steam_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1473. matrix_mx_puppet_steam_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxpup.steam.db', rounds=655555) | to_uuid }}"

  1474. 

  1475. ######################################################################

  1476. #

  1477. # /matrix-bridge-mx-puppet-steam

  1478. #

  1479. ######################################################################

  1480. 

  1481. ######################################################################

  1482. #

  1483. # matrix-bridge-mx-puppet-groupme

  1484. #

  1485. ######################################################################

  1486. 

  1487. # We don't enable bridges by default.

  1488. matrix_mx_puppet_groupme_enabled: false

  1489. 

  1490. matrix_mx_puppet_groupme_container_image_self_build: "{{ matrix_architecture != 'amd64' }}"

  1491. 

  1492. matrix_mx_puppet_groupme_systemd_required_services_list: |

  1493.   {{

  1494.     ['docker.service']

  1495.     +

  1496.     ['matrix-' + matrix_homeserver_implementation + '.service']

  1497.     +

  1498.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  1499.     +

  1500.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1501.   }}

  1502. 

  1503. matrix_mx_puppet_groupme_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxgro.as.tok', rounds=655555) | to_uuid }}"

  1504. 

  1505. matrix_mx_puppet_groupme_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxgro.hs.tok', rounds=655555) | to_uuid }}"

  1506. 

  1507. matrix_mx_puppet_groupme_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  1508. 

  1509. # Postgres is the default, except if not using internal Postgres server

  1510. matrix_mx_puppet_groupme_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  1511. matrix_mx_puppet_groupme_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1512. matrix_mx_puppet_groupme_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxpup.groupme.db', rounds=655555) | to_uuid }}"

  1513. 

  1514. ######################################################################

  1515. #

  1516. # /matrix-bridge-mx-puppet-groupme

  1517. #

  1518. ######################################################################

  1519. 

  1520. ######################################################################

  1521. #

  1522. # matrix-bot-matrix-reminder-bot

  1523. #

  1524. ######################################################################

  1525. 

  1526. # We don't enable bots by default.

  1527. matrix_bot_matrix_reminder_bot_enabled: false

  1528. 

  1529. matrix_bot_matrix_reminder_bot_systemd_required_services_list: |

  1530.   {{

  1531.     ['docker.service']

  1532.     +

  1533.     ['matrix-' + matrix_homeserver_implementation + '.service']

  1534.     +

  1535.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  1536.     +

  1537.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1538.   }}

  1539. 

  1540. # Postgres is the default, except if not using internal Postgres server

  1541. matrix_bot_matrix_reminder_bot_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  1542. matrix_bot_matrix_reminder_bot_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1543. matrix_bot_matrix_reminder_bot_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'reminder.bot.db', rounds=655555) | to_uuid }}"

  1544. matrix_bot_matrix_reminder_bot_container_image_self_build: "{{ matrix_architecture != 'amd64' }}"

  1545. 

  1546. ######################################################################

  1547. #

  1548. # /matrix-bot-matrix-reminder-bot

  1549. #

  1550. ######################################################################

  1551. 

  1552. 

  1553. ######################################################################

  1554. #

  1555. # matrix-bot-matrix-registration-bot

  1556. #

  1557. ######################################################################

  1558. 

  1559. # We don't enable bots by default.

  1560. matrix_bot_matrix_registration_bot_enabled: false

  1561. 

  1562. matrix_bot_matrix_registration_bot_container_image_self_build: "{{ matrix_architecture not in ['amd64'] }}"

  1563. 

  1564. matrix_bot_matrix_registration_bot_systemd_required_services_list: |

  1565.   {{

  1566.     ['docker.service']

  1567.     +

  1568.     ['matrix-' + matrix_homeserver_implementation + '.service']

  1569.     +

  1570.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1571.   }}

  1572. 

  1573. 

  1574. ######################################################################

  1575. #

  1576. # /matrix-bot-matrix-registration-bot

  1577. #

  1578. ######################################################################

  1579. 

  1580. ######################################################################

  1581. #

  1582. # matrix-bot-maubot

  1583. #

  1584. ######################################################################

  1585. 

  1586. # We don't enable bots by default.

  1587. matrix_bot_maubot_enabled: false

  1588. 

  1589. matrix_bot_maubot_container_image_self_build: "{{ matrix_architecture not in ['amd64'] }}"

  1590. 

  1591. matrix_bot_maubot_systemd_required_services_list: |

  1592.   {{

  1593.     ['docker.service']

  1594.     +

  1595.     ['matrix-' + matrix_homeserver_implementation + '.service']

  1596.     +

  1597.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  1598.     +

  1599.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1600.   }}

  1601. 

  1602. matrix_bot_maubot_registration_shared_secret: |-

  1603.   {{

  1604.     {

  1605.       'synapse': matrix_synapse_registration_shared_secret,

  1606.       'dendrite': matrix_dendrite_client_api_registration_shared_secret,

  1607.     }[matrix_homeserver_implementation]

  1608.   }}

  1609. 

  1610. matrix_bot_maubot_management_interface_http_bind_port: "{{ '' if matrix_nginx_proxy_enabled else ('127.0.0.1:' + matrix_bot_maubot_management_interface_port | string) }}"

  1611. 

  1612. # Postgres is the default, except if not using internal Postgres server

  1613. matrix_bot_maubot_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  1614. matrix_bot_maubot_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1615. matrix_bot_maubot_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxpup.dsc.db', rounds=655555) | to_uuid }}"

  1616. 

  1617. ######################################################################

  1618. #

  1619. # /matrix-bot-maubot

  1620. #

  1621. ######################################################################

  1622. 

  1623. 

  1624. ######################################################################

  1625. #

  1626. # matrix-bot-honoroit

  1627. #

  1628. ######################################################################

  1629. 

  1630. # We don't enable bots by default.

  1631. matrix_bot_honoroit_enabled: false

  1632. 

  1633. matrix_bot_honoroit_systemd_required_services_list: |

  1634.   {{

  1635.     ['docker.service']

  1636.     +

  1637.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  1638.     +

  1639.     (['matrix-synapse.service'] if matrix_synapse_enabled else [])

  1640.     +

  1641.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1642.   }}

  1643. 

  1644. # Postgres is the default, except if not using internal Postgres server

  1645. matrix_bot_honoroit_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  1646. matrix_bot_honoroit_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1647. matrix_bot_honoroit_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'honoroit.bot.db', rounds=655555) | to_uuid }}"

  1648. matrix_bot_honoroit_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"

  1649. 

  1650. ######################################################################

  1651. #

  1652. # /matrix-bot-honoroit

  1653. #

  1654. ######################################################################

  1655. 

  1656. ######################################################################

  1657. #

  1658. # matrix-bot-buscarron

  1659. #

  1660. ######################################################################

  1661. 

  1662. # We don't enable bots by default.

  1663. matrix_bot_buscarron_enabled: false

  1664. 

  1665. matrix_bot_buscarron_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"

  1666. 

  1667. matrix_bot_buscarron_systemd_required_services_list: |

  1668.   {{

  1669.     ['docker.service']

  1670.     +

  1671.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  1672.     +

  1673.     (['matrix-synapse.service'] if matrix_synapse_enabled else [])

  1674.     +

  1675.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1676.   }}

  1677. 

  1678. # Postgres is the default, except if not using internal Postgres server

  1679. matrix_bot_buscarron_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  1680. matrix_bot_buscarron_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1681. matrix_bot_buscarron_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'buscarron.bot.db', rounds=655555) | to_uuid }}"

  1682. 

  1683. ######################################################################

  1684. #

  1685. # /matrix-bot-buscarron

  1686. #

  1687. ######################################################################

  1688. 

  1689. ######################################################################

  1690. #

  1691. # matrix-bot-postmoogle

  1692. #

  1693. ######################################################################

  1694. 

  1695. # We don't enable bots by default.

  1696. matrix_bot_postmoogle_enabled: false

  1697. 

  1698. matrix_bot_postmoogle_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"

  1699. 

  1700. matrix_bot_postmoogle_ssl_path: |-

  1701.   {{

  1702.     {

  1703.       'nginx-proxy': (matrix_ssl_config_dir_path if matrix_playbook_ssl_retrieval_method != 'none' else ''),

  1704.       'traefik': devture_traefik_certs_dumper_dumped_certificates_dir_path,

  1705.       'none': '',

  1706.     }[matrix_playbook_reverse_proxy_type]

  1707.   }}

  1708. 

  1709. matrix_playbook_bot_postmoogle_nginx_proxy_tls_cert: "{% for domain in matrix_bot_postmoogle_domains %}/ssl/live/{{ domain }}/fullchain.pem {% endfor %}"

  1710. matrix_playbook_bot_postmoogle_nginx_proxy_key: "{% for domain in matrix_bot_postmoogle_domains %}/ssl/live/{{ domain }}/privkey.pem {% endfor %}"

  1711. 

  1712. matrix_playbook_bot_postmoogle_traefik_tls_cert: "{% for domain in matrix_bot_postmoogle_domains %}/ssl/{{ domain }}/certificate.crt {% endfor %}"

  1713. matrix_playbook_bot_postmoogle_traefik_key: "{% for domain in matrix_bot_postmoogle_domains %}/ssl/{{ domain }}/privatekey.key {% endfor %}"

  1714. 

  1715. matrix_bot_postmoogle_tls_cert: |-

  1716.   {{

  1717.     {

  1718.       'nginx-proxy': (matrix_playbook_bot_postmoogle_nginx_proxy_tls_cert if matrix_playbook_ssl_retrieval_method != 'none' else ''),

  1719.       'traefik': matrix_playbook_bot_postmoogle_traefik_tls_cert,

  1720.       'none': '',

  1721.     }[matrix_playbook_reverse_proxy_type]

  1722.   }}

  1723. 

  1724. matrix_bot_postmoogle_tls_key: |-

  1725.   {{

  1726.     {

  1727.       'nginx-proxy': (matrix_playbook_bot_postmoogle_nginx_proxy_key if matrix_playbook_ssl_retrieval_method != 'none' else ''),

  1728.       'traefik': matrix_playbook_bot_postmoogle_traefik_key,

  1729.       'none': '',

  1730.     }[matrix_playbook_reverse_proxy_type]

  1731.   }}

  1732. 

  1733. matrix_playbook_bot_postmoogle_traefik_certs_dumper_waiter_services: "{% for domain in matrix_bot_postmoogle_domains %}{{ devture_traefik_certs_dumper_identifier }}-wait-for-domain@{{ domain }}.service {% endfor %}"

  1734. 

  1735. matrix_bot_postmoogle_systemd_required_services_list: |

  1736.   {{

  1737.     ['docker.service']

  1738.     +

  1739.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  1740.     +

  1741.     (['matrix-synapse.service'] if matrix_synapse_enabled else [])

  1742.     +

  1743.     (matrix_playbook_bot_postmoogle_traefik_certs_dumper_waiter_services | trim | split(' ') if matrix_playbook_reverse_proxy_type == 'traefik' and matrix_playbook_traefik_certs_dumper_role_enabled else [])

  1744.   }}

  1745. 

  1746. # Postgres is the default, except if not using internal Postgres server

  1747. matrix_bot_postmoogle_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  1748. matrix_bot_postmoogle_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1749. matrix_bot_postmoogle_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'postmoogle.db', rounds=655555) | to_uuid }}"

  1750. 

  1751. ######################################################################

  1752. #

  1753. # /matrix-bot-postmoogle

  1754. #

  1755. ######################################################################

  1756. 

  1757. 

  1758. ######################################################################

  1759. #

  1760. # matrix-bot-chatgpt

  1761. #

  1762. ######################################################################

  1763. 

  1764. # We don't enable bots by default.

  1765. matrix_bot_chatgpt_enabled: false

  1766. 

  1767. matrix_bot_chatgpt_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"

  1768. 

  1769. ######################################################################

  1770. #

  1771. # /matrix-bot-chatgpt

  1772. #

  1773. ######################################################################

  1774. 

  1775. 

  1776. ######################################################################

  1777. #

  1778. # matrix-bot-go-neb

  1779. #

  1780. ######################################################################

  1781. 

  1782. # We don't enable bots by default.

  1783. matrix_bot_go_neb_enabled: false

  1784. 

  1785. matrix_bot_go_neb_systemd_required_services_list: |

  1786.   {{

  1787.     ['docker.service']

  1788.     +

  1789.     ['matrix-' + matrix_homeserver_implementation + '.service']

  1790.     +

  1791.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1792.   }}

  1793. 

  1794. matrix_bot_go_neb_container_http_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else '127.0.0.1:4050' }}"

  1795. 

  1796. ######################################################################

  1797. #

  1798. # /matrix-bot-go-neb

  1799. #

  1800. ######################################################################

  1801. 

  1802. 

  1803. ######################################################################

  1804. #

  1805. # matrix-bot-mjolnir

  1806. #

  1807. ######################################################################

  1808. 

  1809. # We don't enable bots by default.

  1810. matrix_bot_mjolnir_enabled: false

  1811. 

  1812. matrix_bot_mjolnir_container_image_self_build: "{{ matrix_architecture != 'amd64' }}"

  1813. 

  1814. matrix_bot_mjolnir_systemd_required_services_list: |

  1815.   {{

  1816.     ['docker.service']

  1817.     +

  1818.     ['matrix-' + matrix_homeserver_implementation + '.service']

  1819.     +

  1820.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  1821.     +

  1822.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1823.   }}

  1824. 

  1825. ######################################################################

  1826. #

  1827. # /matrix-bot-mjolnir

  1828. #

  1829. ######################################################################

  1830. 

  1831. ######################################################################

  1832. #

  1833. # matrix-bot-draupnir

  1834. #

  1835. ######################################################################

  1836. 

  1837. # We don't enable bots by default.

  1838. matrix_bot_draupnir_enabled: false

  1839. 

  1840. matrix_bot_draupnir_container_image_self_build: "{{ matrix_architecture != 'amd64' }}"

  1841. 

  1842. matrix_bot_draupnir_systemd_required_services_list: |

  1843.   {{

  1844.     ['docker.service']

  1845.     +

  1846.     ['matrix-' + matrix_homeserver_implementation + '.service']

  1847.     +

  1848.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  1849.     +

  1850.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1851.   }}

  1852. 

  1853. ######################################################################

  1854. #

  1855. # /matrix-bot-draupnir

  1856. #

  1857. ######################################################################

  1858. 

  1859. ######################################################################

  1860. #

  1861. # matrix-backup-borg

  1862. #

  1863. ######################################################################

  1864. 

  1865. matrix_backup_borg_enabled: false

  1866. 

  1867. matrix_backup_borg_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm32', 'arm64'] }}"

  1868. 

  1869. matrix_backup_borg_postgresql_enabled: "{{ devture_postgres_enabled }}"

  1870. matrix_backup_borg_postgresql_databases_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1871. matrix_backup_borg_postgresql_databases_username: "{{ devture_postgres_connection_username if devture_postgres_enabled else '' }}"

  1872. matrix_backup_borg_postgresql_databases_password: "{{ devture_postgres_connection_password if devture_postgres_enabled else '' }}"

  1873. matrix_backup_borg_postgresql_databases_port: "{{ devture_postgres_connection_port if devture_postgres_enabled else 5432 }}"

  1874. matrix_backup_borg_postgresql_databases: "{{ devture_postgres_managed_databases | map(attribute='name') if devture_postgres_enabled else [] }}"

  1875. 

  1876. matrix_backup_borg_location_source_directories:

  1877.   - "{{ matrix_base_data_path }}"

  1878. 

  1879. matrix_backup_borg_location_exclude_patterns: |

  1880.   {{

  1881.     ([matrix_synapse_media_store_path + '/local_thumbnails', matrix_synapse_media_store_path + '/remote_thumbnail', matrix_synapse_media_store_path + '/url_cache', matrix_synapse_media_store_path + '/url_cache_thumbnails'] if matrix_homeserver_implementation == 'synapse' else [])

  1882.     +

  1883.     ([devture_postgres_data_path] if devture_postgres_enabled else [])

  1884.   }}

  1885. 

  1886. matrix_backup_borg_systemd_required_services_list: |

  1887.   {{

  1888.     ['docker.service']

  1889.     +

  1890.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  1891.   }}

  1892. 

  1893. ######################################################################

  1894. #

  1895. # /matrix-backup-borg

  1896. #

  1897. ######################################################################

  1898. ######################################################################

  1899. #

  1900. # matrix-cactus-comments

  1901. #

  1902. ######################################################################

  1903. 

  1904. matrix_cactus_comments_enabled: false

  1905. 

  1906. # Derive secret values from homeserver secret

  1907. matrix_cactus_comments_as_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'cactus.as.token', rounds=655555) | to_uuid }}"

  1908. matrix_cactus_comments_hs_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'cactus.hs.token', rounds=655555) | to_uuid }}"

  1909. 

  1910. matrix_cactus_comments_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm32', 'arm64'] }}"

  1911. matrix_cactus_comments_systemd_required_services_list: |

  1912.   {{

  1913.     (['docker.service'])

  1914.     +

  1915.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1916.     +

  1917.     (['matrix-' + matrix_homeserver_implementation + '.service'])

  1918.   }}

  1919. 

  1920. matrix_cactus_comments_client_nginx_path: "{{ '/cactus-comments/' if matrix_nginx_proxy_enabled else matrix_cactus_comments_client_path + '/' }}"

  1921. 

  1922. ######################################################################

  1923. #

  1924. # /matrix-cactus-comments

  1925. #

  1926. ######################################################################

  1927. 

  1928. ######################################################################

  1929. #

  1930. # matrix-corporal

  1931. #

  1932. ######################################################################

  1933. 

  1934. matrix_corporal_enabled: false

  1935. 

  1936. matrix_corporal_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm32', 'arm64'] }}"

  1937. 

  1938. # Normally, matrix-nginx-proxy is enabled and nginx can reach matrix-corporal over the container network.

  1939. # If matrix-nginx-proxy is not enabled, or you otherwise have a need for it, you can expose

  1940. # matrix-corporal's web-server ports to the local host.

  1941. matrix_corporal_container_http_gateway_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else '127.0.0.1:41080' }}"

  1942. matrix_corporal_container_http_api_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else '127.0.0.1:41081' }}"

  1943. 

  1944. matrix_corporal_systemd_required_services_list: |

  1945.   {{

  1946.     (['docker.service'])

  1947.     +

  1948.     (['matrix-' + matrix_homeserver_implementation + '.service'])

  1949.   }}

  1950. 

  1951. matrix_corporal_matrix_homeserver_api_endpoint: "{{ matrix_homeserver_container_url }}"

  1952. 

  1953. matrix_corporal_matrix_auth_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret }}"

  1954. 

  1955. # This is only useful if there's REST auth provider to make use of it.

  1956. matrix_corporal_http_gateway_internal_rest_auth_enabled: "{{ matrix_synapse_ext_password_provider_rest_auth_enabled }}"

  1957. 

  1958. matrix_corporal_matrix_registration_shared_secret: "{{ matrix_synapse_registration_shared_secret }}"

  1959. 

  1960. ######################################################################

  1961. #

  1962. # /matrix-corporal

  1963. #

  1964. ######################################################################

  1965. 

  1966. ######################################################################

  1967. #

  1968. # matrix-coturn

  1969. #

  1970. ######################################################################

  1971. 

  1972. matrix_coturn_enabled: true

  1973. 

  1974. matrix_coturn_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm32', 'arm64'] }}"

  1975. 

  1976. matrix_coturn_turn_external_ip_address: "{{ ansible_host }}"

  1977. 

  1978. matrix_coturn_turn_static_auth_secret: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'coturn.sas', rounds=655555) | to_uuid }}"

  1979. 

  1980. matrix_coturn_tls_enabled: "{{ matrix_playbook_ssl_retrieval_method != 'none' }}"

  1981. 

  1982. matrix_coturn_tls_cert_path: |-

  1983.   {{

  1984.     {

  1985.       'nginx-proxy': '/fullchain.pem',

  1986.       'traefik': '/certificate.crt',

  1987.       'none': '',

  1988.     }[matrix_playbook_reverse_proxy_type]

  1989.   }}

  1990. 

  1991. matrix_coturn_tls_key_path: |-

  1992.   {{

  1993.     {

  1994.       'nginx-proxy': '/privkey.pem',

  1995.       'traefik': '/privatekey.key',

  1996.       'none': '',

  1997.     }[matrix_playbook_reverse_proxy_type]

  1998.   }}

  1999. 

  2000. matrix_coturn_container_additional_volumes: |

  2001.   {{

  2002.     (

  2003.       [

  2004.        {

  2005.          'src': (matrix_ssl_config_dir_path + '/live/' + matrix_server_fqn_matrix + '/fullchain.pem'),

  2006.          'dst': '/fullchain.pem',

  2007.          'options': 'ro',

  2008.        },

  2009.        {

  2010.          'src': (matrix_ssl_config_dir_path + '/live/' + matrix_server_fqn_matrix + '/privkey.pem'),

  2011.          'dst': '/privkey.pem',

  2012.          'options': 'ro',

  2013.        },

  2014.       ] if matrix_playbook_reverse_proxy_type == 'nginx-proxy' else []

  2015.     )

  2016.     +

  2017.     (

  2018.       [

  2019.        {

  2020.          'src': (devture_traefik_certs_dumper_dumped_certificates_dir_path +  '/' + matrix_server_fqn_matrix + '/certificate.crt'),

  2021.          'dst': '/certificate.crt',

  2022.          'options': 'ro',

  2023.        },

  2024.        {

  2025.          'src': (devture_traefik_certs_dumper_dumped_certificates_dir_path +  '/' + matrix_server_fqn_matrix + '/privatekey.key'),

  2026.          'dst': '/privatekey.key',

  2027.          'options': 'ro',

  2028.        },

  2029.       ] if matrix_playbook_reverse_proxy_type == 'traefik' and matrix_playbook_traefik_certs_dumper_role_enabled else []

  2030.     )

  2031.   }}

  2032. 

  2033. matrix_coturn_systemd_required_services_list: |

  2034.   {{

  2035.     ['docker.service']

  2036.     +

  2037.     ([devture_traefik_certs_dumper_identifier + '-wait-for-domain@' + matrix_server_fqn_matrix + '.service'] if matrix_playbook_reverse_proxy_type == 'traefik' and matrix_playbook_traefik_certs_dumper_role_enabled else [])

  2038.   }}

  2039. 

  2040. ######################################################################

  2041. #

  2042. # /matrix-coturn

  2043. #

  2044. ######################################################################

  2045. 

  2046. ######################################################################

  2047. #

  2048. # matrix-dimension

  2049. #

  2050. ######################################################################

  2051. 

  2052. matrix_dimension_enabled: false

  2053. 

  2054. matrix_dimension_container_image_self_build: "{{ matrix_architecture != 'amd64' }}"

  2055. 

  2056. # Normally, matrix-nginx-proxy is enabled and nginx can reach Dimension over the container network.

  2057. # If matrix-nginx-proxy is not enabled, or you otherwise have a need for it, you can expose

  2058. # the Dimension HTTP port to the local host.

  2059. matrix_dimension_container_http_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else '127.0.0.1:8184' }}"

  2060. 

  2061. matrix_dimension_homeserver_federationUrl: "{{ matrix_homeserver_container_federation_url }}"

  2062. 

  2063. matrix_dimension_systemd_required_services_list: |

  2064.   {{

  2065.     ['docker.service']

  2066.     +

  2067.     ['matrix-' + matrix_homeserver_implementation + '.service']

  2068.     +

  2069.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  2070.     +

  2071.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  2072.   }}

  2073. 

  2074. # Postgres is the default, except if not using internal Postgres server

  2075. matrix_dimension_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  2076. matrix_dimension_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  2077. matrix_dimension_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'dimension.db', rounds=655555) | to_uuid }}"

  2078. 

  2079. ######################################################################

  2080. #

  2081. # /matrix-dimension

  2082. #

  2083. ######################################################################

  2084. 

  2085. ######################################################################

  2086. #

  2087. # matrix-etherpad

  2088. #

  2089. ######################################################################

  2090. 

  2091. matrix_etherpad_enabled: false

  2092. 

  2093. matrix_etherpad_container_http_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else '127.0.0.1:9001' }}"

  2094. 

  2095. matrix_etherpad_base_url: "{{ 'https://' + matrix_server_fqn_dimension + matrix_etherpad_public_endpoint if matrix_etherpad_mode == 'dimension' else 'https://' + matrix_server_fqn_etherpad + '/' }}"

  2096. 

  2097. matrix_etherpad_systemd_required_services_list: |

  2098.   {{

  2099.     ['docker.service']

  2100.     +

  2101.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  2102.   }}

  2103. 

  2104. matrix_etherpad_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  2105. matrix_etherpad_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'etherpad.db', rounds=655555) | to_uuid }}"

  2106. 

  2107. ######################################################################

  2108. #

  2109. # /matrix-etherpad

  2110. #

  2111. ######################################################################

  2112. 

  2113. ######################################################################

  2114. #

  2115. # matrix-dynamic-dns

  2116. #

  2117. ######################################################################

  2118. 

  2119. matrix_dynamic_dns_enabled: false

  2120. 

  2121. ######################################################################

  2122. #

  2123. # /matrix-dynamic-dns

  2124. #

  2125. ######################################################################

  2126. 

  2127. ######################################################################

  2128. #

  2129. # matrix-email2matrix

  2130. #

  2131. ######################################################################

  2132. 

  2133. matrix_email2matrix_enabled: false

  2134. 

  2135. matrix_email2matrix_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm32', 'arm64'] }}"

  2136. 

  2137. ######################################################################

  2138. #

  2139. # /matrix-email2matrix

  2140. #

  2141. ######################################################################

  2142. 

  2143. ######################################################################

  2144. #

  2145. # matrix-jitsi

  2146. #

  2147. ######################################################################

  2148. 

  2149. matrix_jitsi_enabled: false

  2150. 

  2151. # Normally, matrix-nginx-proxy is enabled and nginx can reach jitsi/web over the container network.

  2152. # If matrix-nginx-proxy is not enabled, or you otherwise have a need for it, you can expose

  2153. # the Jitsi HTTP port to the local host.

  2154. matrix_jitsi_web_container_http_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else '127.0.0.1:13080' }}"

  2155. 

  2156. matrix_jitsi_jvb_container_colibri_ws_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else '127.0.0.1:13090' }}"

  2157. 

  2158. matrix_jitsi_prosody_container_http_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else '127.0.0.1:5280' }}"

  2159. 

  2160. matrix_jitsi_jibri_xmpp_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'jibri', rounds=655555) | to_uuid }}"

  2161. matrix_jitsi_jicofo_auth_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'jicofo', rounds=655555) | to_uuid }}"

  2162. matrix_jitsi_jvb_auth_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'jvb', rounds=655555) | to_uuid }}"

  2163. 

  2164. matrix_jitsi_web_stun_servers: |

  2165.   {{

  2166.     [

  2167.       'stun:' + matrix_server_fqn_matrix + ':5349',

  2168.       'stun:' + matrix_server_fqn_matrix + ':3478',

  2169.     ]

  2170.     if matrix_coturn_enabled

  2171.     else [ 'stun:meet-jit-si-turnrelay.jitsi.net:443']

  2172.   }}

  2173. 

  2174. # If the self-hosted Etherpad instance is available, it will also show up in Jitsi conferences,

  2175. # unless explicitly disabled by setting `matrix_jitsi_etherpad_enabled` to false.

  2176. # Falls back to the scalar.vector.im etherpad in case someone sets `matrix_jitsi_etherpad_enabled` to true,

  2177. # while also setting `matrix_etherpad_enabled` to false.

  2178. matrix_jitsi_etherpad_enabled: "{{ matrix_etherpad_enabled }}"

  2179. matrix_jitsi_etherpad_base: "{{ matrix_etherpad_base_url if matrix_etherpad_enabled else 'https://scalar.vector.im/etherpad' }}"

  2180. 

  2181. # Allow verification using JWT and matrix-UVS

  2182. matrix_jitsi_prosody_auth_matrix_uvs_auth_token: "{{ matrix_user_verification_service_uvs_auth_token }}"

  2183. matrix_jitsi_prosody_auth_matrix_uvs_location: "{{ matrix_user_verification_service_container_url }}"

  2184. 

  2185. matrix_jitsi_self_check_validate_certificates: "{{ false if matrix_ssl_retrieval_method == 'self-signed' else true }}"

  2186. 

  2187. ######################################################################

  2188. #

  2189. # /matrix-jitsi

  2190. #

  2191. ######################################################################

  2192. ######################################################################

  2193. #

  2194. # matrix-ldap-registration-proxy

  2195. #

  2196. ######################################################################

  2197. 

  2198. # This is only for users with a specific LDAP setup

  2199. matrix_ldap_registration_proxy_enabled: false

  2200. 

  2201. ######################################################################

  2202. #

  2203. # /matrix-ldap-registration-proxy

  2204. #

  2205. ######################################################################

  2206. 

  2207. ######################################################################

  2208. #

  2209. # matrix-mailer

  2210. #

  2211. ######################################################################

  2212. 

  2213. # By default, this playbook sets up an exim mailer server (running in a container).

  2214. # This is so that Synapse can send email reminders for unread messages.

  2215. # Other services (like ma1sd), also use the mailer.

  2216. matrix_mailer_enabled: true

  2217. 

  2218. matrix_mailer_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm32', 'arm64'] }}"

  2219. 

  2220. ######################################################################

  2221. #

  2222. # /matrix-mailer

  2223. #

  2224. ######################################################################

  2225. 

  2226. ######################################################################

  2227. #

  2228. # matrix-ma1sd

  2229. #

  2230. ######################################################################

  2231. 

  2232. # We no longer install the ma1sd identity server by default.

  2233. #

  2234. # The main reason we used to install ma1sd by default in the past was to

  2235. # prevent Element from talking to the `matrix.org` / `vector.im` identity servers,

  2236. # by forcing it to talk to our own self-hosted (but otherwise useless) identity server instead,

  2237. # thus preventing contact list leaks.

  2238. #

  2239. # Since Element no longer defaults to using a public identity server if another one is not provided,

  2240. # we can stop installing ma1sd.

  2241. matrix_ma1sd_enabled: false

  2242. 

  2243. matrix_ma1sd_container_image_self_build: "{{ matrix_architecture != 'amd64' }}"

  2244. 

  2245. # Normally, matrix-nginx-proxy is enabled and nginx can reach ma1sd over the container network.

  2246. # If matrix-nginx-proxy is not enabled, or you otherwise have a need for it, you can expose

  2247. # ma1sd's web-server port.

  2248. matrix_ma1sd_container_http_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else '127.0.0.1:' + matrix_ma1sd_container_port | string }}"

  2249. 

  2250. 

  2251. # We enable Synapse integration via its Postgres database by default.

  2252. # When using another Identity store, you might wish to disable this and define

  2253. # your own configuration in `matrix_ma1sd_configuration_extension_yaml`.

  2254. matrix_ma1sd_synapsesql_enabled: true

  2255. matrix_ma1sd_synapsesql_type: postgresql

  2256. matrix_ma1sd_synapsesql_connection: //{{ matrix_synapse_database_host }}/{{ matrix_synapse_database_database }}?user={{ matrix_synapse_database_user | urlencode() }}&password={{ matrix_synapse_database_password | urlencode() }}

  2257. 

  2258. matrix_ma1sd_dns_overwrite_enabled: true

  2259. matrix_ma1sd_dns_overwrite_homeserver_client_name: "{{ matrix_server_fqn_matrix }}"

  2260. # The `matrix_ma1sd_dns_overwrite_homeserver_client_value` value when matrix_nginx_proxy_enabled is false covers the general case,

  2261. # but may be inaccurate if matrix-corporal is enabled.

  2262. matrix_ma1sd_dns_overwrite_homeserver_client_value: "{{ ('http://' + matrix_nginx_proxy_proxy_matrix_client_api_addr_with_container) if matrix_nginx_proxy_enabled else matrix_homeserver_container_url }}"

  2263. 

  2264. # By default, we send mail through the `matrix-mailer` service.

  2265. matrix_ma1sd_threepid_medium_email_identity_from: "{{ matrix_mailer_sender_address }}"

  2266. matrix_ma1sd_threepid_medium_email_connectors_smtp_host: "matrix-mailer"

  2267. matrix_ma1sd_threepid_medium_email_connectors_smtp_port: 8025

  2268. matrix_ma1sd_threepid_medium_email_connectors_smtp_tls: 0

  2269. 

  2270. matrix_ma1sd_self_check_validate_certificates: "{{ false if matrix_playbook_ssl_retrieval_method == 'self-signed' else true }}"

  2271. 

  2272. matrix_ma1sd_systemd_required_services_list: |

  2273.   {{

  2274.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  2275.   }}

  2276. 

  2277. matrix_ma1sd_systemd_wanted_services_list: |

  2278.   {{

  2279.     (['matrix-corporal.service'] if matrix_corporal_enabled else ['matrix-' + matrix_homeserver_implementation + '.service'])

  2280.     +

  2281.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  2282.     +

  2283.     (['matrix-mailer.service'] if matrix_mailer_enabled else [])

  2284.   }}

  2285. 

  2286. # Postgres is the default, except if not using internal Postgres server

  2287. matrix_ma1sd_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  2288. matrix_ma1sd_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  2289. matrix_ma1sd_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'ma1sd.db', rounds=655555) | to_uuid }}"

  2290. 

  2291. ######################################################################

  2292. #

  2293. # /matrix-ma1sd

  2294. #

  2295. ######################################################################

  2296. 

  2297. 

  2298. ######################################################################

  2299. #

  2300. # matrix-nginx-proxy

  2301. #

  2302. ######################################################################

  2303. 

  2304. # By default, this playbook sets up a reverse-proxy nginx proxy server on TCP ports 80, 443 and 8448.

  2305. # This is fine if you're dedicating the whole server to Matrix.

  2306. # If that's not the case, you may wish to disable this and take care of proxying yourself.

  2307. matrix_nginx_proxy_enabled: true

  2308. 

  2309. matrix_nginx_proxy_container_additional_networks: "{{ [matrix_playbook_reverse_proxyable_services_additional_network] if matrix_playbook_reverse_proxyable_services_additional_network else [] }}"

  2310. 

  2311. matrix_nginx_proxy_proxy_matrix_client_api_addr_with_container: "{{ 'matrix-corporal:41080' if matrix_corporal_enabled else 'matrix-nginx-proxy:12080' }}"

  2312. matrix_nginx_proxy_proxy_matrix_client_api_addr_sans_container: "{{ '127.0.0.1:41080' if matrix_corporal_enabled else '127.0.0.1:12080' }}"

  2313. matrix_nginx_proxy_proxy_matrix_client_api_client_max_body_size_mb: |-

  2314.   {{

  2315.     {

  2316.       'synapse': matrix_synapse_max_upload_size_mb,

  2317.       'dendrite': (matrix_dendrite_max_file_size_bytes / 1024 / 1024) | round,

  2318.       'conduit': (matrix_conduit_max_request_size / 1024 / 1024) | round,

  2319.     }[matrix_homeserver_implementation]|int

  2320.   }}

  2321. 

  2322. matrix_nginx_proxy_proxy_matrix_client_api_forwarded_location_synapse_admin_api_enabled: "{{ matrix_synapse_admin_enabled or matrix_bot_matrix_registration_bot_enabled }}"

  2323. 

  2324. matrix_nginx_proxy_proxy_matrix_client_redirect_root_uri_to_domain: "{{ matrix_server_fqn_element if matrix_client_element_enabled else '' }}"

  2325. 

  2326. matrix_nginx_proxy_proxy_matrix_enabled: true

  2327. matrix_nginx_proxy_proxy_element_enabled: "{{ matrix_client_element_enabled }}"

  2328. matrix_nginx_proxy_proxy_hydrogen_enabled: "{{ matrix_client_hydrogen_enabled }}"

  2329. matrix_nginx_proxy_proxy_cinny_enabled: "{{ matrix_client_cinny_enabled }}"

  2330. matrix_nginx_proxy_proxy_buscarron_enabled: "{{ matrix_bot_buscarron_enabled }}"

  2331. matrix_nginx_proxy_proxy_dimension_enabled: "{{ matrix_dimension_enabled }}"

  2332. matrix_nginx_proxy_proxy_etherpad_enabled: "{{ matrix_etherpad_enabled and matrix_etherpad_mode == 'standalone' }}"

  2333. matrix_nginx_proxy_proxy_bot_go_neb_enabled: "{{ matrix_bot_go_neb_enabled }}"

  2334. 

  2335. matrix_nginx_proxy_proxy_jitsi_enabled: "{{ matrix_jitsi_enabled }}"

  2336. matrix_nginx_proxy_proxy_jitsi_manage_wellknown: "{{ matrix_jitsi_require_well_known }}"

  2337. 

  2338. matrix_nginx_proxy_proxy_grafana_enabled: "{{ matrix_grafana_enabled }}"

  2339. matrix_nginx_proxy_proxy_sygnal_enabled: "{{ matrix_sygnal_enabled }}"

  2340. matrix_nginx_proxy_proxy_ntfy_enabled: "{{ matrix_ntfy_enabled }}"

  2341. 

  2342. matrix_nginx_proxy_container_labels_traefik_enabled: "{{ matrix_playbook_traefik_labels_enabled }}"

  2343. matrix_nginx_proxy_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  2344. matrix_nginx_proxy_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  2345. 

  2346. matrix_nginx_proxy_container_labels_traefik_proxy_matrix_enabled: true

  2347. matrix_nginx_proxy_container_labels_traefik_proxy_element_enabled: "{{ matrix_client_element_enabled }}"

  2348. matrix_nginx_proxy_container_labels_traefik_proxy_hydrogen_enabled: "{{ matrix_client_hydrogen_enabled }}"

  2349. matrix_nginx_proxy_container_labels_traefik_proxy_cinny_enabled: "{{ matrix_client_cinny_enabled }}"

  2350. matrix_nginx_proxy_container_labels_traefik_proxy_buscarron_enabled: "{{ matrix_bot_buscarron_enabled }}"

  2351. matrix_nginx_proxy_container_labels_traefik_proxy_dimension_enabled: "{{ matrix_dimension_enabled }}"

  2352. matrix_nginx_proxy_container_labels_traefik_proxy_etherpad_enabled: "{{ matrix_etherpad_enabled and matrix_etherpad_mode == 'standalone' }}"

  2353. matrix_nginx_proxy_container_labels_traefik_proxy_bot_go_neb_enabled: "{{ matrix_bot_go_neb_enabled }}"

  2354. matrix_nginx_proxy_container_labels_traefik_proxy_jitsi_enabled: "{{ matrix_jitsi_enabled }}"

  2355. matrix_nginx_proxy_container_labels_traefik_proxy_grafana_enabled: "{{ matrix_grafana_enabled }}"

  2356. matrix_nginx_proxy_container_labels_traefik_proxy_sygnal_enabled: "{{ matrix_sygnal_enabled }}"

  2357. matrix_nginx_proxy_container_labels_traefik_proxy_ntfy_enabled: "{{ matrix_ntfy_enabled }}"

  2358. 

  2359. matrix_nginx_proxy_proxy_matrix_corporal_api_enabled: "{{ matrix_corporal_enabled and matrix_corporal_http_api_enabled }}"

  2360. matrix_nginx_proxy_proxy_matrix_corporal_api_addr_with_container: "matrix-corporal:41081"

  2361. matrix_nginx_proxy_proxy_matrix_corporal_api_addr_sans_container: "127.0.0.1:41081"

  2362. 

  2363. matrix_nginx_proxy_proxy_matrix_identity_api_enabled: "{{ matrix_ma1sd_enabled }}"

  2364. matrix_nginx_proxy_proxy_matrix_identity_api_addr_with_container: "matrix-ma1sd:{{ matrix_ma1sd_container_port }}"

  2365. matrix_nginx_proxy_proxy_matrix_identity_api_addr_sans_container: "127.0.0.1:{{ matrix_ma1sd_container_port }}"

  2366. 

  2367. # By default, we do TLS termination for the Matrix Federation API (port 8448) at matrix-nginx-proxy.

  2368. # Unless this is handled there OR Synapse's federation listener port is disabled, we'll reverse-proxy.

  2369. matrix_nginx_proxy_proxy_matrix_federation_api_enabled: |-

  2370.   {{

  2371.     {

  2372.       'synapse': (matrix_synapse_federation_port_enabled and not matrix_synapse_tls_federation_listener_enabled),

  2373.       'dendrite': matrix_dendrite_federation_enabled,

  2374.       'conduit': matrix_conduit_allow_federation,

  2375.     }[matrix_homeserver_implementation]|bool

  2376.   }}

  2377. 

  2378. matrix_nginx_proxy_proxy_matrix_federation_api_addr_with_container: "matrix-nginx-proxy:12088"

  2379. matrix_nginx_proxy_proxy_matrix_federation_api_addr_sans_container: "127.0.0.1:12088"

  2380. 

  2381. matrix_nginx_proxy_proxy_synapse_enabled: "{{ matrix_synapse_enabled }}"

  2382. matrix_nginx_proxy_proxy_synapse_client_api_addr_with_container: "{{ 'matrix-synapse-reverse-proxy-companion:8008' if matrix_synapse_reverse_proxy_companion_enabled else 'matrix-synapse:8008' }}"

  2383. matrix_nginx_proxy_proxy_synapse_client_api_addr_sans_container: "127.0.0.1:8008"

  2384. matrix_nginx_proxy_proxy_synapse_federation_api_addr_with_container: "{{ 'matrix-synapse-reverse-proxy-companion:8048' if matrix_synapse_reverse_proxy_companion_enabled else 'matrix-synapse:8048' }}"

  2385. matrix_nginx_proxy_proxy_synapse_federation_api_addr_sans_container: "127.0.0.1:8048"

  2386. 

  2387. matrix_nginx_proxy_proxy_dendrite_enabled: "{{ matrix_dendrite_enabled }}"

  2388. matrix_nginx_proxy_proxy_dendrite_client_api_addr_with_container: "matrix-dendrite:{{ matrix_dendrite_http_bind_port | string }}"

  2389. matrix_nginx_proxy_proxy_dendrite_client_api_addr_sans_container: "127.0.0.1:{{ matrix_dendrite_http_bind_port | string }}"

  2390. matrix_nginx_proxy_proxy_dendrite_federation_api_addr_with_container: "matrix-dendrite:{{ matrix_dendrite_http_bind_port | string }}"

  2391. matrix_nginx_proxy_proxy_dendrite_federation_api_addr_sans_container: "127.0.0.1:{{ matrix_dendrite_http_bind_port | string }}"

  2392. 

  2393. matrix_nginx_proxy_proxy_conduit_enabled: "{{ matrix_conduit_enabled }}"

  2394. matrix_nginx_proxy_proxy_conduit_client_api_addr_with_container: "matrix-conduit:{{ matrix_conduit_port_number|string }}"

  2395. matrix_nginx_proxy_proxy_conduit_client_api_addr_sans_container: "127.0.0.1:{{ matrix_conduit_port_number|string }}"

  2396. matrix_nginx_proxy_proxy_conduit_federation_api_addr_with_container: "matrix-conduit:{{ matrix_conduit_port_number|string }}"

  2397. matrix_nginx_proxy_proxy_conduit_federation_api_addr_sans_container: "127.0.0.1:{{ matrix_conduit_port_number|string }}"

  2398. 

  2399. # When matrix-nginx-proxy is disabled, the actual port number that the vhost uses may begin to matter.

  2400. matrix_nginx_proxy_proxy_matrix_federation_port: "{{ matrix_federation_public_port }}"

  2401. 

  2402. matrix_nginx_proxy_container_federation_host_bind_port: "{{ matrix_federation_public_port }}"

  2403. 

  2404. matrix_nginx_proxy_proxy_matrix_user_directory_search_enabled: "{{ matrix_ma1sd_enabled }}"

  2405. matrix_nginx_proxy_proxy_matrix_user_directory_search_addr_with_container: "{{ matrix_nginx_proxy_proxy_matrix_identity_api_addr_with_container }}"

  2406. matrix_nginx_proxy_proxy_matrix_user_directory_search_addr_sans_container: "{{ matrix_nginx_proxy_proxy_matrix_identity_api_addr_sans_container }}"

  2407. 

  2408. matrix_nginx_proxy_self_check_validate_certificates: "{{ false if matrix_playbook_ssl_retrieval_method == 'self-signed' else true }}"

  2409. 

  2410. # OCSP stapling does not make sense when self-signed certificates are used.

  2411. # See https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1073

  2412. # and https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1074

  2413. matrix_nginx_proxy_ocsp_stapling_enabled: "{{ matrix_playbook_ssl_retrieval_method != 'self-signed' }}"

  2414. 

  2415. matrix_nginx_proxy_systemd_wanted_services_list: |

  2416.   {{

  2417.     ['matrix-' + matrix_homeserver_implementation + '.service']

  2418.     +

  2419.     (matrix_synapse_webserving_workers_systemd_services_list if matrix_homeserver_implementation == 'synapse' and matrix_synapse_workers_enabled else [])

  2420.     +

  2421.     (['matrix-synapse-reverse-proxy-companion.service'] if matrix_synapse_reverse_proxy_companion_enabled else [])

  2422.     +

  2423.     (['matrix-corporal.service'] if matrix_corporal_enabled else [])

  2424.     +

  2425.     (['matrix-ma1sd.service'] if matrix_ma1sd_enabled else [])

  2426.     +

  2427.     (['matrix-client-cinny.service'] if matrix_client_cinny_enabled else [])

  2428.     +

  2429.     (['matrix-bot-buscarron.service'] if matrix_bot_buscarron_enabled else [])

  2430.     +

  2431.     (['matrix-client-element.service'] if matrix_client_element_enabled else [])

  2432.     +

  2433.     (['matrix-client-hydrogen.service'] if matrix_client_hydrogen_enabled else [])

  2434.     +

  2435.     (['matrix-grafana.service'] if matrix_grafana_enabled else [])

  2436.     +

  2437.     (['matrix-dimension.service'] if matrix_dimension_enabled else [])

  2438.     +

  2439.     (['matrix-sygnal.service'] if matrix_sygnal_enabled else [])

  2440.     +

  2441.     (['matrix-ntfy.service'] if matrix_ntfy_enabled else [])

  2442.     +

  2443.     (['matrix-jitsi.service'] if matrix_jitsi_enabled else [])

  2444.     +

  2445.     (['matrix-bot-go-neb.service'] if matrix_bot_go_neb_enabled else [])

  2446.     +

  2447.     (['matrix-etherpad.service'] if matrix_etherpad_enabled else [])

  2448.     +

  2449.     (['matrix-hookshot.service'] if matrix_hookshot_enabled else [])

  2450.   }}

  2451. 

  2452. matrix_ssl_domains_to_obtain_certificates_for: |

  2453.   {{

  2454.     ([matrix_server_fqn_matrix])

  2455.     +

  2456.     ([matrix_server_fqn_element] if matrix_client_element_enabled else [])

  2457.     +

  2458.     ([matrix_nginx_proxy_proxy_riot_compat_redirect_hostname] if matrix_nginx_proxy_proxy_riot_compat_redirect_enabled else [])

  2459.     +

  2460.     ([matrix_server_fqn_hydrogen] if matrix_client_hydrogen_enabled else [])

  2461.     +

  2462.     ([matrix_server_fqn_cinny] if matrix_client_cinny_enabled else [])

  2463.     +

  2464.     ([matrix_server_fqn_buscarron] if matrix_bot_buscarron_enabled else [])

  2465.     +

  2466.     ([matrix_server_fqn_dimension] if matrix_dimension_enabled else [])

  2467.     +

  2468.     ([matrix_server_fqn_etherpad] if (matrix_etherpad_enabled and matrix_etherpad_mode == 'standalone') else [])

  2469.     +

  2470.     ([matrix_server_fqn_bot_go_neb] if matrix_bot_go_neb_enabled else [])

  2471.     +

  2472.     ([matrix_server_fqn_jitsi] if matrix_jitsi_enabled else [])

  2473.     +

  2474.     ([matrix_server_fqn_grafana] if matrix_grafana_enabled else [])

  2475.     +

  2476.     ([matrix_server_fqn_sygnal] if matrix_sygnal_enabled else [])

  2477.     +

  2478.     ([matrix_server_fqn_ntfy] if matrix_ntfy_enabled else [])

  2479.     +

  2480.     (matrix_bot_postmoogle_domains if matrix_bot_postmoogle_enabled else [])

  2481.     +

  2482.     ([matrix_domain] if matrix_nginx_proxy_base_domain_serving_enabled else [])

  2483.     +

  2484.     matrix_ssl_additional_domains_to_obtain_certificates_for

  2485.   }}

  2486. 

  2487. matrix_ssl_architecture: "{{

  2488. 	{

  2489. 		'amd64': 'amd64',

  2490. 		'arm32': 'arm32v6',

  2491. 		'arm64': 'arm64v8',

  2492. 	}[matrix_architecture]

  2493. }}"

  2494. 

  2495. matrix_ssl_pre_obtaining_required_service_name: "{{ 'matrix-dynamic-dns' if matrix_dynamic_dns_enabled else '' }}"

  2496. 

  2497. matrix_nginx_proxy_access_log_syslog_integration_enabled: "{{ matrix_prometheus_nginxlog_exporter_enabled }}"

  2498. matrix_nginx_proxy_access_log_syslog_integration_server_port: "{{ (matrix_prometheus_nginxlog_exporter_container_hostname | string +':'+ matrix_prometheus_nginxlog_exporter_container_syslog_port | string) | default('') }}"

  2499. 

  2500. ######################################################################

  2501. #

  2502. # /matrix-nginx-proxy

  2503. #

  2504. ######################################################################

  2505. 

  2506. 

  2507. ########################################################################

  2508. #                                                                      #

  2509. # com.devture.ansible.role.postgres                                    #

  2510. #                                                                      #

  2511. ########################################################################

  2512. 

  2513. # To completely disable installing Postgres, use `devture_postgres_enabled: false`.

  2514. 

  2515. devture_postgres_identifier: matrix-postgres

  2516. 

  2517. devture_postgres_architecture: "{{ matrix_architecture }}"

  2518. 

  2519. devture_postgres_base_path: "{{ matrix_base_data_path }}/postgres"

  2520. 

  2521. devture_postgres_container_network: "{{ matrix_docker_network }}"

  2522. 

  2523. devture_postgres_uid: "{{ matrix_user_uid }}"

  2524. devture_postgres_gid: "{{ matrix_user_gid }}"

  2525. 

  2526. devture_postgres_connection_username: matrix

  2527. devture_postgres_db_name: matrix

  2528. 

  2529. devture_postgres_systemd_services_to_stop_for_maintenance_list: |

  2530.   {{

  2531.     ['matrix-' + matrix_homeserver_implementation + '.service']

  2532.   }}

  2533. 

  2534. devture_postgres_managed_databases_auto: |

  2535.   {{

  2536.     ([{

  2537.       'name': matrix_synapse_database_database,

  2538.       'username': matrix_synapse_database_user,

  2539.       'password': matrix_synapse_database_password,

  2540.     }] if (matrix_synapse_enabled and matrix_synapse_database_host == devture_postgres_connection_hostname) else [])

  2541.     +

  2542.     ([{

  2543.       'name': matrix_dendrite_federationapi_database,

  2544.       'username': matrix_dendrite_database_user,

  2545.       'password': matrix_dendrite_database_password,

  2546.     },{

  2547.       'name': matrix_dendrite_keyserver_database,

  2548.       'username': matrix_dendrite_database_user,

  2549.       'password': matrix_dendrite_database_password,

  2550.     },{

  2551.       'name': matrix_dendrite_mediaapi_database,

  2552.       'username': matrix_dendrite_database_user,

  2553.       'password': matrix_dendrite_database_password,

  2554.     },{

  2555.       'name': matrix_dendrite_room_database,

  2556.       'username': matrix_dendrite_database_user,

  2557.       'password': matrix_dendrite_database_password,

  2558.     },{

  2559.       'name': matrix_dendrite_syncapi_database,

  2560.       'username': matrix_dendrite_database_user,

  2561.       'password': matrix_dendrite_database_password,

  2562.     },{

  2563.       'name': matrix_dendrite_userapi_database,

  2564.       'username': matrix_dendrite_database_user,

  2565.       'password': matrix_dendrite_database_password,

  2566.     },{

  2567.       'name': matrix_dendrite_pushserver_database,

  2568.       'username': matrix_dendrite_database_user,

  2569.       'password': matrix_dendrite_database_password,

  2570.     },{

  2571.       'name': matrix_dendrite_mscs_database,

  2572.       'username': matrix_dendrite_database_user,

  2573.       'password': matrix_dendrite_database_password,

  2574.     }] if (matrix_dendrite_enabled and matrix_dendrite_database_hostname == devture_postgres_connection_hostname) else [])

  2575.     +

  2576.     ([{

  2577.       'name': matrix_ma1sd_database_name,

  2578.       'username': matrix_ma1sd_database_username,

  2579.       'password': matrix_ma1sd_database_password,

  2580.     }] if (matrix_ma1sd_enabled and matrix_ma1sd_database_engine == 'postgres' and matrix_ma1sd_database_hostname == devture_postgres_connection_hostname) else [])

  2581.     +

  2582.     ([{

  2583.       'name': matrix_bot_matrix_reminder_bot_database_name,

  2584.       'username': matrix_bot_matrix_reminder_bot_database_username,

  2585.       'password': matrix_bot_matrix_reminder_bot_database_password,

  2586.     }] if (matrix_bot_matrix_reminder_bot_enabled and matrix_bot_matrix_reminder_bot_database_engine == 'postgres' and matrix_bot_matrix_reminder_bot_database_hostname == devture_postgres_connection_hostname) else [])

  2587.     +

  2588.     ([{

  2589.       'name': matrix_bot_honoroit_database_name,

  2590.       'username': matrix_bot_honoroit_database_username,

  2591.       'password': matrix_bot_honoroit_database_password,

  2592.     }] if (matrix_bot_honoroit_enabled and matrix_bot_honoroit_database_engine == 'postgres' and matrix_bot_honoroit_database_hostname == devture_postgres_connection_hostname) else [])

  2593.     +

  2594.     ([{

  2595.       'name': matrix_bot_postmoogle_database_name,

  2596.       'username': matrix_bot_postmoogle_database_username,

  2597.       'password': matrix_bot_postmoogle_database_password,

  2598.     }] if (matrix_bot_postmoogle_enabled and matrix_bot_postmoogle_database_engine == 'postgres' and matrix_bot_postmoogle_database_hostname == devture_postgres_connection_hostname) else [])

  2599.     +

  2600.     ([{

  2601.       'name': matrix_bot_maubot_database_name,

  2602.       'username': matrix_bot_maubot_database_username,

  2603.       'password': matrix_bot_maubot_database_password,

  2604.     }] if (matrix_bot_maubot_enabled  and matrix_bot_maubot_database_engine == 'postgres' and matrix_bot_maubot_database_hostname == devture_postgres_connection_hostname) else [])

  2605.     +

  2606.     ([{

  2607.       'name': matrix_bot_buscarron_database_name,

  2608.       'username': matrix_bot_buscarron_database_username,

  2609.       'password': matrix_bot_buscarron_database_password,

  2610.     }] if (matrix_bot_buscarron_enabled and matrix_bot_buscarron_database_engine == 'postgres' and matrix_bot_buscarron_database_hostname == devture_postgres_connection_hostname) else [])

  2611.     +

  2612.     ([{

  2613.       'name': matrix_registration_database_name,

  2614.       'username': matrix_registration_database_username,

  2615.       'password': matrix_registration_database_password,

  2616.     }] if (matrix_registration_enabled and matrix_registration_database_engine == 'postgres' and matrix_registration_database_hostname == devture_postgres_connection_hostname) else [])

  2617.     +

  2618.     ([{

  2619.       'name': matrix_appservice_discord_database_name,

  2620.       'username': matrix_appservice_discord_database_username,

  2621.       'password': matrix_appservice_discord_database_password,

  2622.     }] if (matrix_appservice_discord_enabled and matrix_appservice_discord_database_engine == 'postgres' and matrix_appservice_discord_database_hostname == devture_postgres_connection_hostname) else [])

  2623.     +

  2624.     ([{

  2625.       'name': matrix_appservice_slack_database_name,

  2626.       'username': matrix_appservice_slack_database_username,

  2627.       'password': matrix_appservice_slack_database_password,

  2628.     }] if (matrix_appservice_slack_enabled and matrix_appservice_slack_database_engine == 'postgres' and matrix_appservice_slack_database_hostname == devture_postgres_connection_hostname) else [])

  2629.     +

  2630.     ([{

  2631.       'name': matrix_appservice_irc_database_name,

  2632.       'username': matrix_appservice_irc_database_username,

  2633.       'password': matrix_appservice_irc_database_password,

  2634.     }] if (matrix_appservice_irc_enabled and matrix_appservice_irc_database_engine == 'postgres' and matrix_appservice_irc_database_hostname == devture_postgres_connection_hostname) else [])

  2635.     +

  2636.     ([{

  2637.       'name': matrix_appservice_kakaotalk_database_name,

  2638.       'username': matrix_appservice_kakaotalk_database_username,

  2639.       'password': matrix_appservice_kakaotalk_database_password,

  2640.     }] if (matrix_appservice_kakaotalk_enabled and matrix_appservice_kakaotalk_database_engine == 'postgres' and matrix_appservice_kakaotalk_database_hostname == devture_postgres_connection_hostname) else [])

  2641.     +

  2642.     ([{

  2643.       'name': matrix_beeper_linkedin_database_name,

  2644.       'username': matrix_beeper_linkedin_database_username,

  2645.       'password': matrix_beeper_linkedin_database_password,

  2646.     }] if (matrix_beeper_linkedin_enabled and matrix_beeper_linkedin_database_engine == 'postgres' and matrix_beeper_linkedin_database_hostname == devture_postgres_connection_hostname) else [])

  2647.     +

  2648.     ([{

  2649.       'name': matrix_go_skype_bridge_database_name,

  2650.       'username': matrix_go_skype_bridge_database_username,

  2651.       'password': matrix_go_skype_bridge_database_password,

  2652.     }] if (matrix_go_skype_bridge_enabled and matrix_go_skype_bridge_database_engine == 'postgres' and matrix_go_skype_bridge_database_hostname == devture_postgres_connection_hostname) else [])

  2653.     +

  2654.     ([{

  2655.       'name': matrix_mautrix_facebook_database_name,

  2656.       'username': matrix_mautrix_facebook_database_username,

  2657.       'password': matrix_mautrix_facebook_database_password,

  2658.     }] if (matrix_mautrix_facebook_enabled and matrix_mautrix_facebook_database_engine == 'postgres' and matrix_mautrix_facebook_database_hostname == devture_postgres_connection_hostname) else [])

  2659.     +

  2660.     ([{

  2661.       'name': matrix_mautrix_hangouts_database_name,

  2662.       'username': matrix_mautrix_hangouts_database_username,

  2663.       'password': matrix_mautrix_hangouts_database_password,

  2664.     }] if (matrix_mautrix_hangouts_enabled and matrix_mautrix_hangouts_database_engine == 'postgres' and matrix_mautrix_hangouts_database_hostname == devture_postgres_connection_hostname) else [])

  2665.     +

  2666.     ([{

  2667.       'name': matrix_mautrix_googlechat_database_name,

  2668.       'username': matrix_mautrix_googlechat_database_username,

  2669.       'password': matrix_mautrix_googlechat_database_password,

  2670.     }] if (matrix_mautrix_googlechat_enabled and matrix_mautrix_googlechat_database_engine == 'postgres' and matrix_mautrix_googlechat_database_hostname == devture_postgres_connection_hostname) else [])

  2671.     +

  2672.     ([{

  2673.       'name': matrix_mautrix_instagram_database_name,

  2674.       'username': matrix_mautrix_instagram_database_username,

  2675.       'password': matrix_mautrix_instagram_database_password,

  2676.     }] if (matrix_mautrix_instagram_enabled and matrix_mautrix_instagram_database_engine == 'postgres' and matrix_mautrix_instagram_database_hostname == devture_postgres_connection_hostname) else [])

  2677.     +

  2678.     ([{

  2679.       'name': matrix_mautrix_signal_database_name,

  2680.       'username': matrix_mautrix_signal_database_username,

  2681.       'password': matrix_mautrix_signal_database_password,

  2682.     }] if (matrix_mautrix_signal_enabled and matrix_mautrix_signal_database_engine == 'postgres' and matrix_mautrix_signal_database_hostname == devture_postgres_connection_hostname) else [])

  2683.     +

  2684.     ([{

  2685.       'name': matrix_mautrix_telegram_database_name,

  2686.       'username': matrix_mautrix_telegram_database_username,

  2687.       'password': matrix_mautrix_telegram_database_password,

  2688.     }] if (matrix_mautrix_telegram_enabled and matrix_mautrix_telegram_database_engine == 'postgres' and matrix_mautrix_telegram_database_hostname == devture_postgres_connection_hostname) else [])

  2689.     +

  2690.     ([{

  2691.       'name': matrix_mautrix_twitter_database_name,

  2692.       'username': matrix_mautrix_twitter_database_username,

  2693.       'password': matrix_mautrix_twitter_database_password,

  2694.     }] if (matrix_mautrix_twitter_enabled and matrix_mautrix_twitter_database_engine == 'postgres' and matrix_mautrix_twitter_database_hostname == devture_postgres_connection_hostname) else [])

  2695.     +

  2696.     ([{

  2697.       'name': matrix_mautrix_whatsapp_database_name,

  2698.       'username': matrix_mautrix_whatsapp_database_username,

  2699.       'password': matrix_mautrix_whatsapp_database_password,

  2700.     }] if (matrix_mautrix_whatsapp_enabled and matrix_mautrix_whatsapp_database_engine == 'postgres' and matrix_mautrix_whatsapp_database_hostname == devture_postgres_connection_hostname) else [])

  2701.     +

  2702.     ([{

  2703.       'name': matrix_mautrix_discord_database_name,

  2704.       'username': matrix_mautrix_discord_database_username,

  2705.       'password': matrix_mautrix_discord_database_password,

  2706.     }] if (matrix_mautrix_discord_enabled and matrix_mautrix_discord_database_engine == 'postgres' and matrix_mautrix_discord_database_hostname == devture_postgres_connection_hostname) else [])

  2707.     +

  2708.     ([{

  2709.       'name': matrix_mautrix_slack_database_name,

  2710.       'username': matrix_mautrix_slack_database_username,

  2711.       'password': matrix_mautrix_slack_database_password,

  2712.     }] if (matrix_mautrix_slack_enabled and matrix_mautrix_slack_database_engine == 'postgres' and matrix_mautrix_slack_database_hostname == devture_postgres_connection_hostname) else [])

  2713.     +

  2714.     ([{

  2715.       'name': matrix_mx_puppet_slack_database_name,

  2716.       'username': matrix_mx_puppet_slack_database_username,

  2717.       'password': matrix_mx_puppet_slack_database_password,

  2718.     }] if (matrix_mx_puppet_slack_enabled and matrix_mx_puppet_slack_database_engine == 'postgres' and matrix_mx_puppet_slack_database_hostname == devture_postgres_connection_hostname) else [])

  2719.     +

  2720.     ([{

  2721.       'name': matrix_mx_puppet_twitter_database_name,

  2722.       'username': matrix_mx_puppet_twitter_database_username,

  2723.       'password': matrix_mx_puppet_twitter_database_password,

  2724.     }] if (matrix_mx_puppet_twitter_enabled and matrix_mx_puppet_twitter_database_engine == 'postgres' and matrix_mx_puppet_twitter_database_hostname == devture_postgres_connection_hostname) else [])

  2725.     +

  2726.     ([{

  2727.       'name': matrix_mx_puppet_instagram_database_name,

  2728.       'username': matrix_mx_puppet_instagram_database_username,

  2729.       'password': matrix_mx_puppet_instagram_database_password,

  2730.     }] if (matrix_mx_puppet_instagram_enabled and matrix_mx_puppet_instagram_database_engine == 'postgres' and matrix_mx_puppet_instagram_database_hostname == devture_postgres_connection_hostname) else [])

  2731.     +

  2732.     ([{

  2733.       'name': matrix_mx_puppet_discord_database_name,

  2734.       'username': matrix_mx_puppet_discord_database_username,

  2735.       'password': matrix_mx_puppet_discord_database_password,

  2736.     }] if (matrix_mx_puppet_discord_enabled  and matrix_mx_puppet_discord_database_engine == 'postgres' and matrix_mx_puppet_discord_database_hostname == devture_postgres_connection_hostname) else [])

  2737.     +

  2738.     ([{

  2739.       'name': matrix_mx_puppet_steam_database_name,

  2740.       'username': matrix_mx_puppet_steam_database_username,

  2741.       'password': matrix_mx_puppet_steam_database_password,

  2742.     }] if (matrix_mx_puppet_steam_enabled and matrix_mx_puppet_steam_database_engine == 'postgres' and matrix_mx_puppet_steam_database_hostname == devture_postgres_connection_hostname) else [])

  2743.     +

  2744.     ([{

  2745.       'name': matrix_mx_puppet_groupme_database_name,

  2746.       'username': matrix_mx_puppet_groupme_database_username,

  2747.       'password': matrix_mx_puppet_groupme_database_password,

  2748.     }] if (matrix_mx_puppet_groupme_enabled and matrix_mx_puppet_groupme_database_engine == 'postgres' and matrix_mx_puppet_groupme_database_hostname == devture_postgres_connection_hostname) else [])

  2749.     +

  2750.     ([{

  2751.       'name': matrix_dimension_database_name,

  2752.       'username': matrix_dimension_database_username,

  2753.       'password': matrix_dimension_database_password,

  2754.     }] if (matrix_dimension_enabled and matrix_dimension_database_engine == 'postgres' and matrix_dimension_database_hostname == devture_postgres_connection_hostname) else [])

  2755.     +

  2756.     ([{

  2757.       'name': matrix_etherpad_database_name,

  2758.       'username': matrix_etherpad_database_username,

  2759.       'password': matrix_etherpad_database_password,

  2760.     }] if (matrix_etherpad_enabled and matrix_etherpad_database_engine == 'postgres' and matrix_etherpad_database_hostname == devture_postgres_connection_hostname) else [])

  2761.     +

  2762.     ([{

  2763.       'name': prometheus_postgres_exporter_database_name,

  2764.       'username': prometheus_postgres_exporter_database_username,

  2765.       'password': prometheus_postgres_exporter_database_password,

  2766.     }] if (prometheus_postgres_exporter_enabled and prometheus_postgres_exporter_database_hostname == devture_postgres_connection_hostname) else [])

  2767. 

  2768.    }}

  2769. 

  2770. ########################################################################

  2771. #                                                                      #

  2772. # /com.devture.ansible.role.postgres                                   #

  2773. #                                                                      #

  2774. ########################################################################

  2775. 

  2776. 

  2777. ########################################################################

  2778. #                                                                      #

  2779. # com.devture.ansible.role.postgres_backup                             #

  2780. #                                                                      #

  2781. ########################################################################

  2782. 

  2783. devture_postgres_backup_enabled: false

  2784. 

  2785. devture_postgres_backup_identifier: matrix-postgres-backup

  2786. 

  2787. devture_postgres_backup_architecture: "{{ matrix_architecture }}"

  2788. 

  2789. devture_postgres_backup_base_path: "{{ matrix_base_data_path }}/postgres-backup"

  2790. 

  2791. devture_postgres_backup_systemd_required_services_list: |

  2792.   {{

  2793.     (['docker.service'])

  2794.     +

  2795.     ([(devture_postgres_identifier + '.service')] if devture_postgres_enabled else [])

  2796.   }}

  2797. 

  2798. devture_postgres_backup_container_network: "{{ matrix_docker_network }}"

  2799. 

  2800. devture_postgres_backup_uid: "{{ matrix_user_uid }}"

  2801. devture_postgres_backup_gid: "{{ matrix_user_gid }}"

  2802. 

  2803. devture_postgres_backup_connection_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  2804. devture_postgres_backup_connection_port: "{{ devture_postgres_connection_port if devture_postgres_enabled else 5432 }}"

  2805. devture_postgres_backup_connection_username: "{{ devture_postgres_connection_username if devture_postgres_enabled else '' }}"

  2806. devture_postgres_backup_connection_password: "{{ devture_postgres_connection_password if devture_postgres_enabled else '' }}"

  2807. 

  2808. devture_postgres_backup_postgres_data_path: "{{ devture_postgres_data_path if devture_postgres_enabled else '' }}"

  2809. 

  2810. devture_postgres_backup_databases: "{{ devture_postgres_managed_databases | map(attribute='name') if devture_postgres_enabled else [] }}"

  2811. 

  2812. ########################################################################

  2813. #                                                                      #

  2814. # /com.devture.ansible.role.postgres_backup                            #

  2815. #                                                                      #

  2816. ########################################################################

  2817. 

  2818. 

  2819. ######################################################################

  2820. #

  2821. # matrix-sygnal

  2822. #

  2823. ######################################################################

  2824. 

  2825. # Most people don't need their own push-server, because they also need their own app to utilize it from.

  2826. matrix_sygnal_enabled: false

  2827. 

  2828. # If someone instals Prometheus via the playbook, they most likely wish to monitor Sygnal.

  2829. matrix_sygnal_metrics_prometheus_enabled: "{{ matrix_prometheus_enabled }}"

  2830. 

  2831. matrix_sygnal_container_http_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else '127.0.0.1:6000' }}"

  2832. 

  2833. ######################################################################

  2834. #

  2835. # /matrix-sygnal

  2836. #

  2837. ######################################################################

  2838. 

  2839. ######################################################################

  2840. #

  2841. # matrix-ntfy

  2842. #

  2843. ######################################################################

  2844. 

  2845. matrix_ntfy_enabled: false

  2846. 

  2847. matrix_ntfy_container_http_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else '127.0.0.1:2586' }}"

  2848. 

  2849. ######################################################################

  2850. #

  2851. # /matrix-ntfy

  2852. #

  2853. ######################################################################

  2854. 

  2855. ######################################################################

  2856. #

  2857. # matrix-redis

  2858. #

  2859. ######################################################################

  2860. 

  2861. matrix_redis_enabled: "{{ matrix_synapse_workers_enabled }}"

  2862. 

  2863. ######################################################################

  2864. #

  2865. # /matrix-redis

  2866. #

  2867. ######################################################################

  2868. 

  2869. ######################################################################

  2870. #

  2871. # matrix-client-element

  2872. #

  2873. ######################################################################

  2874. 

  2875. # By default, this playbook installs the Element web UI on the `matrix_server_fqn_element` domain.

  2876. # If you wish to connect to your Matrix server by other means, you may wish to disable this.

  2877. matrix_client_element_enabled: true

  2878. 

  2879. matrix_client_element_container_image_self_build: "{{ matrix_architecture not in ['arm64', 'amd64'] }}"

  2880. 

  2881. # Normally, matrix-nginx-proxy is enabled and nginx can reach Element over the container network.

  2882. # If matrix-nginx-proxy is not enabled, or you otherwise have a need for it, you can expose

  2883. # the Element HTTP port to the local host.

  2884. matrix_client_element_container_http_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else '127.0.0.1:8765' }}"

  2885. 

  2886. matrix_client_element_default_hs_url: "{{ matrix_homeserver_url }}"

  2887. matrix_client_element_default_is_url: "{{ matrix_identity_server_url }}"

  2888. 

  2889. # Use Dimension if enabled, otherwise fall back to Scalar

  2890. matrix_client_element_integrations_ui_url: "{{ matrix_dimension_integrations_ui_url if matrix_dimension_enabled else 'https://scalar.vector.im/' }}"

  2891. matrix_client_element_integrations_rest_url: "{{ matrix_dimension_integrations_rest_url if matrix_dimension_enabled else 'https://scalar.vector.im/api' }}"

  2892. matrix_client_element_integrations_widgets_urls: "{{ matrix_dimension_integrations_widgets_urls if matrix_dimension_enabled else ['https://scalar.vector.im/api'] }}"

  2893. matrix_client_element_integrations_jitsi_widget_url: "{{ matrix_dimension_integrations_jitsi_widget_url if matrix_dimension_enabled else 'https://scalar.vector.im/api/widgets/jitsi.html' }}"

  2894. 

  2895. matrix_client_element_self_check_validate_certificates: "{{ false if matrix_playbook_ssl_retrieval_method == 'self-signed' else true }}"

  2896. 

  2897. matrix_client_element_registration_enabled: "{{ matrix_synapse_enable_registration }}"

  2898. 

  2899. matrix_client_element_enable_presence_by_hs_url: |

  2900.   {{

  2901.     none

  2902.     if matrix_synapse_presence_enabled

  2903.     else {matrix_client_element_default_hs_url: false}

  2904.   }}

  2905. 

  2906. matrix_client_element_welcome_user_id: ~

  2907. 

  2908. matrix_client_element_jitsi_preferredDomain: "{{ matrix_server_fqn_jitsi if matrix_jitsi_enabled else '' }}"

  2909. 

  2910. ######################################################################

  2911. #

  2912. # /matrix-client-element

  2913. #

  2914. ######################################################################

  2915. 

  2916. ######################################################################

  2917. #

  2918. # matrix-client-hydrogen

  2919. #

  2920. ######################################################################

  2921. 

  2922. matrix_client_hydrogen_enabled: false

  2923. 

  2924. matrix_client_hydrogen_container_image_self_build: "{{ matrix_architecture not in ['amd64'] }}"

  2925. 

  2926. # Normally, matrix-nginx-proxy is enabled and nginx can reach Hydrogen over the container network.

  2927. # If matrix-nginx-proxy is not enabled, or you otherwise have a need for it, you can expose

  2928. # the HTTP port to the local host.

  2929. matrix_client_hydrogen_container_http_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else '127.0.0.1:8768' }}"

  2930. 

  2931. matrix_client_hydrogen_default_hs_url: "{{ matrix_homeserver_url }}"

  2932. 

  2933. matrix_client_hydrogen_self_check_validate_certificates: "{{ false if matrix_playbook_ssl_retrieval_method == 'self-signed' else true }}"

  2934. 

  2935. ######################################################################

  2936. #

  2937. # /matrix-client-hydrogen

  2938. #

  2939. ######################################################################

  2940. 

  2941. ######################################################################

  2942. #

  2943. # matrix-client-cinny

  2944. #

  2945. ######################################################################

  2946. 

  2947. matrix_client_cinny_enabled: false

  2948. 

  2949. matrix_client_cinny_container_image_self_build: "{{ matrix_architecture not in ['arm64', 'amd64'] }}"

  2950. 

  2951. # Normally, matrix-nginx-proxy is enabled and nginx can reach Cinny over the container network.

  2952. # If matrix-nginx-proxy is not enabled, or you otherwise have a need for it, you can expose

  2953. # the HTTP port to the local host.

  2954. matrix_client_cinny_container_http_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else '127.0.0.1:8080' }}"

  2955. 

  2956. matrix_client_cinny_default_hs_url: "{{ matrix_homeserver_url }}"

  2957. 

  2958. matrix_client_cinny_self_check_validate_certificates: "{{ false if matrix_playbook_ssl_retrieval_method == 'self-signed' else true }}"

  2959. 

  2960. ######################################################################

  2961. #

  2962. # /matrix-client-cinny

  2963. #

  2964. ######################################################################

  2965. 

  2966. ######################################################################

  2967. #

  2968. # matrix-synapse

  2969. #

  2970. ######################################################################

  2971. 

  2972. matrix_synapse_enabled: "{{ matrix_homeserver_implementation == 'synapse' }}"

  2973. 

  2974. matrix_synapse_container_image_self_build: "{{ matrix_architecture not in ['arm64', 'amd64'] }}"

  2975. 

  2976. # When ma1sd is enabled, we can use it to validate phone numbers. It's something that the homeserver cannot do by itself.

  2977. matrix_synapse_account_threepid_delegates_msisdn: "{{ 'http://matrix-ma1sd:' + matrix_ma1sd_container_port | string if matrix_ma1sd_enabled else '' }}"

  2978. 

  2979. # For exposing the Matrix Federation API's TLS port (HTTPS) to the internet on all network interfaces.

  2980. matrix_synapse_container_federation_api_tls_host_bind_port: "{{ matrix_federation_public_port if (matrix_synapse_federation_enabled and matrix_synapse_tls_federation_listener_enabled) else '' }}"

  2981. #

  2982. # For exposing the Synapse Metrics API's port (plain HTTP) to the local host.

  2983. matrix_synapse_container_metrics_api_host_bind_port: "{{ '127.0.0.1:9100' if (matrix_synapse_metrics_enabled and not matrix_nginx_proxy_enabled) else '' }}"

  2984. #

  2985. # For exposing the Synapse Manhole port (plain HTTP) to the local host.

  2986. matrix_synapse_container_manhole_api_host_bind_port: "{{ '127.0.0.1:9000' if matrix_synapse_manhole_enabled else '' }}"

  2987. #

  2988. # For exposing the Synapse worker (and metrics) ports to the local host.

  2989. matrix_synapse_workers_container_host_bind_address: "{{ '127.0.0.1' if (matrix_synapse_workers_enabled and not matrix_nginx_proxy_enabled) else '' }}"

  2990. 

  2991. matrix_synapse_database_host: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  2992. matrix_synapse_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'synapse.db', rounds=655555) | to_uuid }}"

  2993. 

  2994. matrix_synapse_macaroon_secret_key: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'synapse.mac', rounds=655555) | to_uuid }}"

  2995. 

  2996. # We do not enable TLS in Synapse by default.

  2997. # TLS is handled by the matrix-nginx-proxy, which proxies the requests to Synapse.

  2998. matrix_synapse_tls_federation_listener_enabled: false

  2999. matrix_synapse_tls_certificate_path: ~

  3000. matrix_synapse_tls_private_key_path: ~

  3001. 

  3002. matrix_synapse_federation_port_openid_resource_required: "{{ not matrix_synapse_federation_enabled and (matrix_dimension_enabled or matrix_ma1sd_enabled or matrix_user_verification_service_enabled) }}"

  3003. 

  3004. # If someone instals Prometheus via the playbook, they most likely wish to monitor Synapse.

  3005. matrix_synapse_metrics_enabled: "{{ matrix_prometheus_enabled }}"

  3006. 

  3007. matrix_synapse_email_enabled: "{{ matrix_mailer_enabled }}"

  3008. matrix_synapse_email_smtp_host: "matrix-mailer"

  3009. matrix_synapse_email_smtp_port: 8025

  3010. matrix_synapse_email_smtp_require_transport_security: false

  3011. matrix_synapse_email_notif_from: "Matrix <{{ matrix_mailer_sender_address }}>"

  3012. 

  3013. # Even if TURN doesn't support TLS (it does by default),

  3014. # it doesn't hurt to try a secure connection anyway.

  3015. #

  3016. # When Let's Encrypt certificates are used (the default case),

  3017. # we don't enable `turns` endpoints, because WebRTC in Element can't talk to them.

  3018. # Learn more here: https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1145

  3019. matrix_synapse_turn_uris: |

  3020.   {{

  3021.     []

  3022.     +

  3023.     [

  3024.       'turns:' + matrix_server_fqn_matrix + '?transport=udp',

  3025.       'turns:' + matrix_server_fqn_matrix + '?transport=tcp',

  3026.     ] if matrix_coturn_enabled and matrix_coturn_tls_enabled and matrix_playbook_ssl_retrieval_method != 'lets-encrypt' else []

  3027.     +

  3028.     [

  3029.       'turn:' + matrix_server_fqn_matrix + '?transport=udp',

  3030.       'turn:' + matrix_server_fqn_matrix + '?transport=tcp',

  3031.     ] if matrix_coturn_enabled else []

  3032.   }}

  3033. 

  3034. matrix_synapse_turn_shared_secret: "{{ matrix_coturn_turn_static_auth_secret if matrix_coturn_enabled else '' }}"

  3035. 

  3036. matrix_synapse_self_check_validate_certificates: "{{ false if matrix_playbook_ssl_retrieval_method == 'self-signed' else true }}"

  3037. 

  3038. matrix_synapse_systemd_required_services_list: |

  3039.   {{

  3040.     (['docker.service'])

  3041.     +

  3042.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  3043.     +

  3044.     (['matrix-goofys.service'] if matrix_s3_media_store_enabled else [])

  3045.   }}

  3046. 

  3047. matrix_synapse_systemd_wanted_services_list: |

  3048.   {{

  3049.     (['matrix-coturn.service'] if matrix_coturn_enabled else [])

  3050.     +

  3051.     (['matrix-mailer.service'] if matrix_mailer_enabled else [])

  3052.   }}

  3053. 

  3054. # Synapse workers (used for parallel load-scaling) need Redis for IPC.

  3055. matrix_synapse_redis_enabled: "{{ matrix_redis_enabled }}"

  3056. matrix_synapse_redis_host: "{{ 'matrix-redis' if matrix_redis_enabled else '' }}"

  3057. matrix_synapse_redis_password: "{{ matrix_redis_connection_password if matrix_redis_enabled else '' }}"

  3058. 

  3059. matrix_synapse_container_extra_arguments_auto: "{{ matrix_homeserver_container_extra_arguments_auto }}"

  3060. matrix_synapse_app_service_config_files_auto: "{{ matrix_homeserver_app_service_config_files_auto }}"

  3061. 

  3062. ######################################################################

  3063. #

  3064. # /matrix-synapse

  3065. #

  3066. ######################################################################

  3067. 

  3068. ######################################################################

  3069. #

  3070. # matrix-synapse-reverse-proxy-companion

  3071. #

  3072. ######################################################################

  3073. 

  3074. matrix_synapse_reverse_proxy_companion_enabled: "{{ matrix_synapse_enabled }}"

  3075. 

  3076. matrix_synapse_reverse_proxy_companion_client_api_client_max_body_size_mb: "{{ matrix_synapse_max_upload_size_mb }}"

  3077. 

  3078. matrix_synapse_reverse_proxy_companion_container_client_api_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else '127.0.0.1:8008' }}"

  3079. matrix_synapse_reverse_proxy_companion_container_federation_api_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else '127.0.0.1:8048' }}"

  3080. 

  3081. matrix_synapse_reverse_proxy_companion_synapse_workers_enabled: "{{ matrix_synapse_workers_enabled }}"

  3082. matrix_synapse_reverse_proxy_companion_synapse_workers_list: "{{ matrix_synapse_workers_enabled_list }}"

  3083. matrix_synapse_reverse_proxy_companion_synapse_generic_worker_client_server_locations: "{{ matrix_synapse_workers_generic_worker_client_server_endpoints }}"

  3084. matrix_synapse_reverse_proxy_companion_synapse_generic_worker_federation_locations: "{{ matrix_synapse_workers_generic_worker_federation_endpoints }}"

  3085. matrix_synapse_reverse_proxy_companion_synapse_stream_writer_typing_stream_worker_client_server_locations: "{{ matrix_synapse_workers_stream_writer_typing_stream_worker_client_server_endpoints }}"

  3086. matrix_synapse_reverse_proxy_companion_synapse_stream_writer_to_device_stream_worker_client_server_locations: "{{ matrix_synapse_workers_stream_writer_to_device_stream_worker_client_server_endpoints }}"

  3087. matrix_synapse_reverse_proxy_companion_synapse_stream_writer_account_data_stream_worker_client_server_locations: "{{ matrix_synapse_workers_stream_writer_account_data_stream_worker_client_server_endpoints }}"

  3088. matrix_synapse_reverse_proxy_companion_synapse_stream_writer_receipts_stream_worker_client_server_locations: "{{ matrix_synapse_workers_stream_writer_receipts_stream_worker_client_server_endpoints }}"

  3089. matrix_synapse_reverse_proxy_companion_synapse_stream_writer_presence_stream_worker_client_server_locations: "{{ matrix_synapse_workers_stream_writer_presence_stream_worker_client_server_endpoints }}"

  3090. matrix_synapse_reverse_proxy_companion_synapse_media_repository_locations: "{{matrix_synapse_workers_media_repository_endpoints|default([]) }}"

  3091. matrix_synapse_reverse_proxy_companion_synapse_user_dir_locations: "{{ matrix_synapse_workers_user_dir_worker_client_server_endpoints|default([]) }}"

  3092. 

  3093. matrix_synapse_reverse_proxy_companion_access_log_syslog_integration_enabled: "{{ matrix_prometheus_nginxlog_exporter_enabled }}"

  3094. matrix_synapse_reverse_proxy_companion_access_log_syslog_integration_server_port: "{{ (matrix_prometheus_nginxlog_exporter_container_hostname | string +':'+ matrix_prometheus_nginxlog_exporter_container_syslog_port | string) | default('') }}"

  3095. 

  3096. ######################################################################

  3097. #

  3098. # /matrix-synapse-reverse-proxy-companion

  3099. #

  3100. ######################################################################

  3101. 

  3102. ######################################################################

  3103. #

  3104. # matrix-synapse-admin

  3105. #

  3106. ######################################################################

  3107. 

  3108. matrix_synapse_admin_enabled: false

  3109. 

  3110. # Normally, matrix-nginx-proxy is enabled and nginx can reach Synapse Admin over the container network.

  3111. # If matrix-nginx-proxy is not enabled, or you otherwise have a need for it, you can expose

  3112. # Synapse Admin's HTTP port to the local host.

  3113. matrix_synapse_admin_container_http_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else '127.0.0.1:8766' }}"

  3114. 

  3115. matrix_synapse_admin_container_image_self_build: "{{ matrix_architecture not in ['arm64', 'amd64'] }}"

  3116. 

  3117. ######################################################################

  3118. #

  3119. # /matrix-synapse-admin

  3120. #

  3121. ######################################################################

  3122. 

  3123. ######################################################################

  3124. #

  3125. # etke/prometheus_node_exporter

  3126. #

  3127. ######################################################################

  3128. 

  3129. prometheus_node_exporter_enabled: false

  3130. 

  3131. prometheus_node_exporter_identifier: matrix-prometheus-node-exporter

  3132. 

  3133. prometheus_node_exporter_base_path: "{{ matrix_base_data_path }}/prometheus-node-exporter"

  3134. 

  3135. prometheus_node_exporter_uid: "{{ matrix_user_uid }}"

  3136. prometheus_node_exporter_gid: "{{ matrix_user_gid }}"

  3137. 

  3138. prometheus_node_exporter_server_fqn: "{{ matrix_server_fqn_matrix }}"

  3139. 

  3140. prometheus_node_exporter_container_network: "{{ matrix_docker_network }}"

  3141. 

  3142. prometheus_node_exporter_container_additional_networks: "{{ [matrix_playbook_reverse_proxyable_services_additional_network] if matrix_playbook_reverse_proxyable_services_additional_network else [] }}"

  3143. 

  3144. prometheus_node_exporter_container_labels_traefik_enabled: false

  3145. prometheus_node_exporter_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  3146. prometheus_node_exporter_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  3147. 

  3148. ######################################################################

  3149. #

  3150. # /etke/prometheus_node_exporter

  3151. #

  3152. ######################################################################

  3153. 

  3154. ######################################################################

  3155. #

  3156. # etke/prometheus_postgres_exporter

  3157. #

  3158. ######################################################################

  3159. 

  3160. prometheus_postgres_exporter_enabled: false

  3161. 

  3162. prometheus_postgres_exporter_identifier: matrix-prometheus-postgres-exporter

  3163. 

  3164. prometheus_postgres_exporter_base_path: "{{ matrix_base_data_path }}/prometheus-postgres-exporter"

  3165. 

  3166. prometheus_postgres_exporter_uid: "{{ matrix_user_uid }}"

  3167. prometheus_postgres_exporter_gid: "{{ matrix_user_gid }}"

  3168. 

  3169. prometheus_postgres_exporter_server_fqn: "{{ matrix_server_fqn_matrix }}"

  3170. 

  3171. prometheus_postgres_exporter_container_network: "{{ matrix_docker_network }}"

  3172. 

  3173. prometheus_postgres_exporter_container_additional_networks: "{{ [matrix_playbook_reverse_proxyable_services_additional_network] if matrix_playbook_reverse_proxyable_services_additional_network else [] }}"

  3174. 

  3175. prometheus_postgres_exporter_container_labels_traefik_enabled: false

  3176. prometheus_postgres_exporter_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  3177. prometheus_postgres_exporter_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  3178. 

  3179. prometheus_postgres_exporter_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  3180. prometheus_postgres_exporter_database_username: matrix_prometheus_postgres_exporter

  3181. prometheus_postgres_exporter_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'prometheus.pg.db', rounds=655555) | to_uuid }}"

  3182. prometheus_postgres_exporter_database_name: matrix_prometheus_postgres_exporter

  3183. 

  3184. prometheus_postgres_exporter_systemd_required_services_list: |

  3185.   {{

  3186.     ['docker.service']

  3187.     +

  3188.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  3189.   }}

  3190. 

  3191. ######################################################################

  3192. #

  3193. # /etke/prometheus_postgres_exporter

  3194. #

  3195. ######################################################################

  3196. 

  3197. ######################################################################

  3198. #

  3199. # matrix-prometheus-nginxlog-exporter

  3200. #

  3201. ######################################################################

  3202. 

  3203. matrix_prometheus_nginxlog_exporter_enabled: false

  3204. 

  3205. ######################################################################

  3206. #

  3207. # /matrix-prometheus-nginxlog-exporter

  3208. #

  3209. ######################################################################

  3210. 

  3211. ######################################################################

  3212. #

  3213. # matrix-prometheus

  3214. #

  3215. ######################################################################

  3216. 

  3217. matrix_prometheus_enabled: false

  3218. 

  3219. # Normally, matrix-nginx-proxy is enabled and nginx can reach Prometheus over the container network.

  3220. # If matrix-nginx-proxy is not enabled, or you otherwise have a need for it, you can expose

  3221. # Prometheus' HTTP port to the local host.

  3222. matrix_prometheus_container_http_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else '127.0.0.1:9090' }}"

  3223. 

  3224. matrix_prometheus_scraper_synapse_enabled: "{{ matrix_synapse_enabled and matrix_synapse_metrics_enabled }}"

  3225. matrix_prometheus_scraper_synapse_targets: ['matrix-synapse:{{ matrix_synapse_metrics_port }}']

  3226. matrix_prometheus_scraper_synapse_workers_enabled_list: "{{ matrix_synapse_workers_enabled_list }}"

  3227. matrix_prometheus_scraper_synapse_rules_synapse_tag: "{{ matrix_synapse_docker_image_tag }}"

  3228. 

  3229. matrix_prometheus_scraper_node_enabled: "{{ prometheus_node_exporter_enabled }}"

  3230. matrix_prometheus_scraper_node_targets: "{{ [prometheus_node_exporter_identifier + ':9100'] if prometheus_node_exporter_enabled else [] }}"

  3231. 

  3232. matrix_prometheus_scraper_postgres_enabled: "{{ prometheus_postgres_exporter_enabled }}"

  3233. matrix_prometheus_scraper_postgres_targets: "{{ [prometheus_postgres_exporter_identifier + ':' + prometheus_postgres_exporter_port | string] if matrix_prometheus_scraper_postgres_enabled else [] }}"

  3234. 

  3235. matrix_prometheus_scraper_hookshot_enabled: "{{ matrix_hookshot_metrics_enabled|default(false) }}"

  3236. matrix_prometheus_scraper_hookshot_targets: "{{ [matrix_hookshot_container_url | string +':'+ matrix_hookshot_metrics_port | string] if matrix_hookshot_metrics_enabled else [] }}"

  3237. 

  3238. matrix_prometheus_scraper_nginxlog_enabled: "{{ matrix_prometheus_nginxlog_exporter_enabled }}"

  3239. matrix_prometheus_scraper_nginxlog_server_port: "{{ (matrix_prometheus_nginxlog_exporter_container_hostname | string +':'+ matrix_prometheus_nginxlog_exporter_container_metrics_port | string)

  3240. | default('') }}"

  3241. 

  3242. ######################################################################

  3243. #

  3244. # /matrix-prometheus

  3245. #

  3246. ######################################################################

  3247. 

  3248. ######################################################################

  3249. #

  3250. # matrix-grafana

  3251. #

  3252. ######################################################################

  3253. 

  3254. matrix_grafana_enabled: false

  3255. 

  3256. # Normally, matrix-nginx-proxy is enabled and nginx can reach Grafana over the container network.

  3257. # If matrix-nginx-proxy is not enabled, or you otherwise have a need for it, you can expose

  3258. # Grafana's HTTP port to the local host.

  3259. matrix_grafana_container_http_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else '127.0.0.1:3000' }}"

  3260. 

  3261. matrix_grafana_dashboard_download_urls: |

  3262.   {{

  3263.     (matrix_synapse_grafana_dashboard_urls if matrix_homeserver_implementation == 'synapse' and matrix_synapse_metrics_enabled else [])

  3264.     +

  3265.     (prometheus_node_exporter_dashboard_urls if prometheus_node_exporter_enabled else [])

  3266.     +

  3267.     (prometheus_postgres_exporter_dashboard_urls if prometheus_postgres_exporter_enabled else [])

  3268.     +

  3269.     (matrix_prometheus_nginxlog_exporter_dashboard_urls if matrix_prometheus_nginxlog_exporter_enabled else [])

  3270.   }}

  3271. 

  3272. matrix_grafana_default_home_dashboard_path: |-

  3273.   {{

  3274.     {

  3275.       'synapse': ('/etc/grafana/dashboards/synapse.json' if matrix_synapse_metrics_enabled else '/etc/grafana/dashboards/node-exporter-full.json'),

  3276.       'dendrite': '/etc/grafana/dashboards/node-exporter-full.json',

  3277.       'conduit': '/etc/grafana/dashboards/node-exporter-full.json',

  3278.     }[matrix_homeserver_implementation]

  3279.   }}

  3280. 

  3281. ######################################################################

  3282. #

  3283. # /matrix-grafana

  3284. #

  3285. ######################################################################

  3286. 

  3287. ######################################################################

  3288. #

  3289. # matrix-registration

  3290. #

  3291. ######################################################################

  3292. 

  3293. matrix_registration_enabled: false

  3294. 

  3295. # Normally, matrix-nginx-proxy is enabled and nginx can reach matrix-registration over the container network.

  3296. # If matrix-nginx-proxy is not enabled, or you otherwise have a need for it, you can expose

  3297. # matrix-registration's HTTP port to the local host.

  3298. matrix_registration_container_http_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else '127.0.0.1:8767' }}"

  3299. 

  3300. matrix_registration_riot_instance: "{{ ('https://' + matrix_server_fqn_element) if matrix_client_element_enabled else 'https://riot.im/app/' }}"

  3301. 

  3302. matrix_registration_shared_secret: |-

  3303.   {{

  3304.     {

  3305.       'synapse': matrix_synapse_registration_shared_secret,

  3306.       'dendrite': matrix_dendrite_client_api_registration_shared_secret,

  3307.       'conduit': '',

  3308.     }[matrix_homeserver_implementation]

  3309.   }}

  3310. 

  3311. matrix_registration_server_location: "{{ matrix_homeserver_container_url }}"

  3312. 

  3313. matrix_registration_api_validate_certs: "{{ false if matrix_playbook_ssl_retrieval_method == 'self-signed' else true }}"

  3314. 

  3315. matrix_registration_container_image_self_build: "{{ matrix_architecture != 'amd64' }}"

  3316. 

  3317. matrix_registration_systemd_required_services_list: |

  3318.   {{

  3319.     ['docker.service']

  3320.     +

  3321.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  3322.   }}

  3323. 

  3324. # Postgres is the default, except if not using internal Postgres server

  3325. matrix_registration_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  3326. matrix_registration_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  3327. matrix_registration_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mx.registr.db', rounds=655555) | to_uuid }}"

  3328. 

  3329. ######################################################################

  3330. #

  3331. # /matrix-registration

  3332. #

  3333. ######################################################################

  3334. 

  3335. 

  3336. ######################################################################

  3337. #

  3338. # matrix-dendrite

  3339. #

  3340. ######################################################################

  3341. 

  3342. matrix_dendrite_enabled: "{{ matrix_homeserver_implementation == 'dendrite' }}"

  3343. 

  3344. # Normally, matrix-nginx-proxy is enabled and nginx can reach Dendrite over the container network.

  3345. # If matrix-nginx-proxy is not enabled, or you otherwise have a need for it,

  3346. # you can expose Dendrite's ports to the host.

  3347. #

  3348. # For exposing Dendrite's plain HTTP server to the local host.

  3349. matrix_dendrite_container_http_host_bind_address: "{{ '' if matrix_nginx_proxy_enabled else ('127.0.0.1:' + matrix_dendrite_http_bind_port | string) }}"

  3350. #

  3351. # For exposing Dendrite's HTTPS server to the local host.

  3352. matrix_dendrite_container_https_host_bind_address: "{{ '' if matrix_nginx_proxy_enabled or not matrix_dendrite_https_bind_port else ('127.0.0.1:' + matrix_dendrite_https_bind_port | string) }}"

  3353. 

  3354. matrix_dendrite_sync_api_real_ip_header: "{{ 'X-Forwarded-For' if matrix_nginx_proxy_enabled else '' }}"

  3355. 

  3356. matrix_dendrite_client_api_registration_shared_secret: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'dendrite.rss', rounds=655555) | to_uuid }}"

  3357. 

  3358. matrix_dendrite_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  3359. 

  3360. matrix_dendrite_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'dendrite.db', rounds=655555) | to_uuid }}"

  3361. 

  3362. # Even if TURN doesn't support TLS (it does by default),

  3363. # it doesn't hurt to try a secure connection anyway.

  3364. matrix_dendrite_client_api_turn_uris: |

  3365.   {{

  3366.     [

  3367.       'turns:' + matrix_server_fqn_matrix + '?transport=udp',

  3368.       'turns:' + matrix_server_fqn_matrix + '?transport=tcp',

  3369.       'turn:' + matrix_server_fqn_matrix + '?transport=udp',

  3370.       'turn:' + matrix_server_fqn_matrix + '?transport=tcp',

  3371.     ]

  3372.     if matrix_coturn_enabled

  3373.     else []

  3374.   }}

  3375. 

  3376. matrix_dendrite_client_api_turn_shared_secret: "{{ matrix_coturn_turn_static_auth_secret if matrix_coturn_enabled else '' }}"

  3377. 

  3378. matrix_dendrite_disable_tls_validation: "{{ true if matrix_playbook_ssl_retrieval_method == 'self-signed' else false }}"

  3379. 

  3380. matrix_dendrite_self_check_validate_certificates: "{{ false if matrix_playbook_ssl_retrieval_method == 'self-signed' else true }}"

  3381. 

  3382. matrix_dendrite_trusted_id_servers: "{{ [matrix_server_fqn_matrix] if matrix_ma1sd_enabled else ['matrix.org', 'vector.im'] }}"

  3383. 

  3384. matrix_dendrite_systemd_required_services_list: |

  3385.   {{

  3386.     (['docker.service'])

  3387.     +

  3388.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  3389.     +

  3390.     (['matrix-goofys.service'] if matrix_s3_media_store_enabled else [])

  3391.   }}

  3392. 

  3393. matrix_dendrite_systemd_wanted_services_list: |

  3394.   {{

  3395.     (['matrix-coturn.service'] if matrix_coturn_enabled else [])

  3396.   }}

  3397. 

  3398. matrix_dendrite_container_extra_arguments_auto: "{{ matrix_homeserver_container_extra_arguments_auto }}"

  3399. matrix_dendrite_app_service_config_files_auto: "{{ matrix_homeserver_app_service_config_files_auto }}"

  3400. 

  3401. ######################################################################

  3402. #

  3403. # /matrix-dendrite

  3404. #

  3405. ######################################################################

  3406. 

  3407. ######################################################################

  3408. #

  3409. # matrix-conduit

  3410. #

  3411. ######################################################################

  3412. 

  3413. matrix_conduit_enabled: "{{ matrix_homeserver_implementation == 'conduit' }}"

  3414. 

  3415. matrix_conduit_systemd_required_services_list: |

  3416.   {{

  3417.     (['docker.service'])

  3418.   }}

  3419. 

  3420. 

  3421. ######################################################################

  3422. #

  3423. # /matrix-conduit

  3424. #

  3425. ######################################################################

  3426. 

  3427. 

  3428. ######################################################################

  3429. #

  3430. # matrix-user-creator

  3431. #

  3432. ######################################################################

  3433. 

  3434. matrix_user_creator_users_auto: |

  3435.   {{

  3436.     ([{

  3437.       'username': matrix_bot_matrix_reminder_bot_matrix_user_id_localpart,

  3438.       'initial_password': matrix_bot_matrix_reminder_bot_matrix_user_password,

  3439.       'initial_type': 'bot',

  3440.     }] if matrix_bot_matrix_reminder_bot_enabled else [])

  3441.     +

  3442.     ([{

  3443.       'username': matrix_bot_honoroit_login,

  3444.       'initial_password': matrix_bot_honoroit_password,

  3445.       'initial_type': 'bot',

  3446.     }] if matrix_bot_honoroit_enabled else [])

  3447.     +

  3448.     ([{

  3449.       'username': matrix_bot_postmoogle_login,

  3450.       'initial_password': matrix_bot_postmoogle_password,

  3451.       'initial_type': 'bot',

  3452.     }] if matrix_bot_postmoogle_enabled else [])

  3453.     +

  3454.     ([{

  3455.       'username': matrix_bot_buscarron_login,

  3456.       'initial_password': matrix_bot_buscarron_password,

  3457.       'initial_type': 'bot',

  3458.     }] if matrix_bot_buscarron_enabled else [])

  3459.   }}

  3460. 

  3461. ######################################################################

  3462. #

  3463. # /matrix-user-creator

  3464. #

  3465. ######################################################################

  3466. 

  3467. 

  3468. ######################################################################

  3469. #

  3470. # matrix-user-verification-service

  3471. #

  3472. ######################################################################

  3473. 

  3474. ## FIXME: Needs to be updated when there is a proper release by upstream.

  3475. matrix_user_verification_service_docker_image: "{{ matrix_user_verification_service_docker_image_name_prefix }}matrixdotorg/matrix-user-verification-service@sha256:d2aabc984dd69d258c91900c36928972d7aaef19d776caa3cd6a0fbc0e307270"

  3476. 

  3477. matrix_user_verification_service_enabled: false

  3478. matrix_user_verification_service_systemd_required_services_list: |

  3479.       {{

  3480.         ['docker.service']

  3481.         +

  3482.         (['matrix-synapse.service'] if matrix_synapse_enabled else [])

  3483.         +

  3484.         ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  3485.       }}

  3486. 

  3487. # If Jitsi is managed by this playbook we can use the docker network - no need to expose a port.

  3488. # If Jitsi is not managed by this playbook, or you otherwise have a need for it, you can expose

  3489. # matrix-user-verfification-services's client-server port to the local host port 3003.

  3490. # By default Matrix-User-Verification-Service binds to port 3000, which collides with grafana, therefore this uses port 3003.

  3491. matrix_user_verification_service_container_http_host_bind_port: "{{  '' if (matrix_jitsi_enabled | bool and matrix_jitsi_enable_auth | bool and matrix_jitsi_auth_type == 'matrix') else '127.0.0.1:3003' }}"

  3492. 

  3493. # URL exposed in the docker network

  3494. matrix_user_verification_service_container_url: "http://{{  matrix_user_verification_service_container_name }}:3000"

  3495. 

  3496. # We connect via the container network (private IPs), so we need to disable IP checks

  3497. matrix_user_verification_service_uvs_disable_ip_blacklist: "{{'true' if matrix_synapse_enabled else 'false'}}"

  3498. 

  3499. matrix_user_verification_service_uvs_auth_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'uvs.auth.token', rounds=655555) | to_uuid }}"

  3500. 

  3501. ######################################################################

  3502. #

  3503. # /matrix-user-verification-service

  3504. #

  3505. ######################################################################

  3506. 

  3507. 

  3508. ########################################################################

  3509. #                                                                      #

  3510. # com.devture.ansible.role.traefik                                     #

  3511. #                                                                      #

  3512. ########################################################################

  3513. 

  3514. # To completely disable the Traefik role from running, use `matrix_playbook_traefik_role_enabled: false`.

  3515. # See the comment there for more details about why we have both `devture_traefik_enabled` and `matrix_playbook_traefik_role_enabled`.

  3516. devture_traefik_enabled: "{{ matrix_playbook_traefik_role_enabled }}"

  3517. 

  3518. devture_traefik_uid: "{{ matrix_user_uid }}"

  3519. devture_traefik_gid: "{{ matrix_user_gid }}"

  3520. 

  3521. devture_traefik_additional_entrypoints_auto:

  3522.   - name: matrix-federation

  3523.     port: "{{ matrix_federation_public_port }}"

  3524.     host_bind_port: "{{ matrix_federation_public_port }}"

  3525.     config: {}

  3526. 

  3527. devture_traefik_additional_domains_to_obtain_certificates_for: "{{ matrix_ssl_additional_domains_to_obtain_certificates_for }}"

  3528. 

  3529. ########################################################################

  3530. #                                                                      #

  3531. # /com.devture.ansible.role.traefik                                    #

  3532. #                                                                      #

  3533. ########################################################################

  3534. 

  3535. 

  3536. ########################################################################

  3537. #                                                                      #

  3538. # com.devture.ansible.role.traefik_certs_dumper                        #

  3539. #                                                                      #

  3540. ########################################################################

  3541. 

  3542. # To completely disable the Traefik certs dumper role from running, use `matrix_playbook_traefik_certs_dumper_role_enabled: false`.

  3543. # See the comment there for more details about why we have both `devture_traefik_certs_dumper_enabled` and `matrix_playbook_traefik_certs_dumper_role_enabled`.

  3544. devture_traefik_certs_dumper_enabled: "{{ matrix_playbook_traefik_certs_dumper_role_enabled and devture_traefik_enabled }}"

  3545. 

  3546. devture_traefik_certs_dumper_identifier: matrix-traefik-certs-dumper

  3547. 

  3548. devture_traefik_certs_dumper_base_path: "{{ matrix_base_data_path }}/traefik-certs-dumper"

  3549. 

  3550. devture_traefik_certs_dumper_uid: "{{ matrix_user_uid }}"

  3551. devture_traefik_certs_dumper_gid: "{{ matrix_user_gid }}"

  3552. 

  3553. devture_traefik_certs_dumper_ssl_dir_path: "{{ devture_traefik_ssl_dir_path }}"

  3554. 

  3555. ########################################################################

  3556. #                                                                      #

  3557. # /com.devture.ansible.role.traefik_certs_dumper                       #

  3558. #                                                                      #

  3559. ########################################################################