overmind
/
matrix-docker-ansible-deploy
miroir de https://github.com/spantaleev/matrix-docker-ansible-deploy
1
0
Bifurcation 0
Code Tickets 0 Versions 0 Wiki Activité
Matrix Docker Ansible eploy
Vous ne pouvez pas sélectionner plus de 25 sujets Les noms de sujets doivent commencer par une lettre ou un nombre, peuvent contenir des tirets ('-') et peuvent comporter jusqu'à 35 caractères.
7734 Révisions
13 Branches
487 MiB
 
 
Aborescence: 09d9db5617
Branches Tags
${ item.name }
Créer la branche ${ searchTerm }
de '09d9db5617'
${ noResults }
matrix-docker-ansible-deploy/group_vars/matrix_servers

5371 lignes
292 KiB
Brut Annotations Historique 

  1. ---

  2. 

  3. # This variables file wires together the various components (roles) used by the playbook.

  4. #

  5. # Roles used by playbook are pretty minimal and kept independent of one another as much as possible.

  6. # To deliver a turnkey fully-featured Matrix server, this playbook needs

  7. # to connect them all together. It does so by overriding role variables.

  8. #

  9. # You can also override ANY variable (seen here or in any given role),

  10. # by re-defining it in your own configuration file (`inventory/host_vars/matrix.<your-domain>`).

  11. 

  12. ########################################################################

  13. #                                                                      #

  14. # Playbook                                                             #

  15. #                                                                      #

  16. ########################################################################

  17. 

  18. # Controls whether to install Docker or not

  19. # Also see `devture_docker_sdk_for_python_installation_enabled`.

  20. matrix_playbook_docker_installation_enabled: true

  21. 

  22. matrix_playbook_docker_installation_daemon_options: "{{ matrix_playbook_docker_installation_daemon_options_auto | combine(matrix_playbook_docker_installation_daemon_options_custom, recursive=True) }}"

  23. 

  24. matrix_playbook_docker_installation_daemon_options_auto:

  25.   experimental: "{{ devture_systemd_docker_base_ipv6_enabled }}"

  26.   ip6tables: "{{ devture_systemd_docker_base_ipv6_enabled }}"

  27. 

  28. matrix_playbook_docker_installation_daemon_options_custom: {}

  29. 

  30. # Controls whether to attach Traefik labels to services.

  31. # This is separate from `devture_traefik_enabled`, because you may wish to disable Traefik installation by the playbook,

  32. # yet still use Traefik installed in another way.

  33. matrix_playbook_traefik_labels_enabled: "{{ matrix_playbook_reverse_proxy_type in ['playbook-managed-traefik', 'other-traefik-container'] }}"

  34. 

  35. matrix_playbook_reverse_proxy_container_network: "{{ devture_traefik_container_network if devture_traefik_enabled else 'traefik' }}"

  36. matrix_playbook_reverse_proxy_hostname: "{{ devture_traefik_identifier if devture_traefik_enabled else 'traefik' }}"

  37. 

  38. # A separate Matrix Federation entrypoint is always enabled, unless the federation port matches one of the ports for existing (default) entrypoints

  39. matrix_playbook_public_matrix_federation_api_traefik_entrypoint_enabled: "{{ matrix_federation_public_port not in [devture_traefik_config_entrypoint_web_port, devture_traefik_config_entrypoint_web_secure_port] }}"

  40. 

  41. # `devture_traefik_config_entrypoint_web_secure_enabled` is the variable we currently follow to determine if SSL is enabled or not.

  42. # `matrix_playbook_ssl_enabled` is merely an indicator if (when looked at it publicly), the server supports SSL or not,

  43. # and affects how services configure their public URLs.

  44. matrix_federation_traefik_entrypoint_tls: "{{ devture_traefik_config_entrypoint_web_secure_enabled }}"

  45. 

  46. ########################################################################

  47. #                                                                      #

  48. # /Playbook                                                            #

  49. #                                                                      #

  50. ########################################################################

  51. 

  52. 

  53. ########################################################################

  54. #                                                                      #

  55. # aux                                                                  #

  56. #                                                                      #

  57. ########################################################################

  58. 

  59. aux_directory_default_owner: "{{ matrix_user_username }}"

  60. aux_directory_default_group: "{{ matrix_user_groupname }}"

  61. 

  62. aux_file_default_owner: "{{ matrix_user_username }}"

  63. aux_file_default_group: "{{ matrix_user_groupname }}"

  64. 

  65. ########################################################################

  66. #                                                                      #

  67. # /aux                                                                 #

  68. #                                                                      #

  69. ########################################################################

  70. 

  71. 

  72. ########################################################################

  73. #                                                                      #

  74. # base                                                                 #

  75. #                                                                      #

  76. ########################################################################

  77. 

  78. matrix_homeserver_container_extra_arguments_auto: |

  79.   {{

  80.     (['--mount type=bind,src=' + matrix_appservice_discord_config_path + '/registration.yaml,dst=/matrix-appservice-discord-registration.yaml,ro'] if matrix_appservice_discord_enabled else [])

  81.     +

  82.     (['--mount type=bind,src=' + matrix_appservice_draupnir_for_all_config_path + '/draupnir-for-all-registration.yaml,dst=/matrix-appservice-draupnir-for-all-registration.yaml,ro'] if matrix_appservice_draupnir_for_all_enabled else [])

  83.     +

  84.     (['--mount type=bind,src=' + matrix_appservice_irc_config_path + '/registration.yaml,dst=/matrix-appservice-irc-registration.yaml,ro'] if matrix_appservice_irc_enabled else [])

  85.     +

  86.     (['--mount type=bind,src=' + matrix_appservice_kakaotalk_config_path + '/registration.yaml,dst=/matrix-appservice-kakaotalk-registration.yaml,ro'] if matrix_appservice_kakaotalk_enabled else [])

  87.     +

  88.     (['--mount type=bind,src=' + matrix_appservice_slack_config_path + '/slack-registration.yaml,dst=/matrix-appservice-slack-registration.yaml,ro'] if matrix_appservice_slack_enabled else [])

  89.     +

  90.     (['--mount type=bind,src=' + matrix_appservice_webhooks_config_path + '/webhooks-registration.yaml,dst=/matrix-appservice-webhooks-registration.yaml,ro'] if matrix_appservice_webhooks_enabled else [])

  91.     +

  92.     (['--mount type=bind,src=' + matrix_beeper_linkedin_config_path + '/registration.yaml,dst=/matrix-beeper-linkedin-registration.yaml,ro'] if matrix_beeper_linkedin_enabled else [])

  93.     +

  94.     (['--mount type=bind,src=' + matrix_go_skype_bridge_config_path + '/registration.yaml,dst=/matrix-go-skype-bridge-registration.yaml,ro'] if matrix_go_skype_bridge_enabled else [])

  95.     +

  96.     (['--mount type=bind,src=' + matrix_wechat_config_path + '/registration.yaml,dst=/matrix-wechat-registration.yaml,ro'] if matrix_wechat_enabled else [])

  97.     +

  98.     (['--mount type=bind,src=' + matrix_heisenbridge_base_path + '/registration.yaml,dst=/heisenbridge-registration.yaml,ro'] if matrix_heisenbridge_enabled else [])

  99.     +

  100.     (['--mount type=bind,src=' + matrix_hookshot_base_path + '/registration.yml,dst=/hookshot-registration.yml,ro'] if matrix_hookshot_enabled else [])

  101.     +

  102.     (['--mount type=bind,src=' + matrix_mautrix_discord_config_path + '/registration.yaml,dst=/matrix-mautrix-discord-registration.yaml,ro'] if matrix_mautrix_discord_enabled else [])

  103.     +

  104.     (['--mount type=bind,src=' + matrix_mautrix_slack_config_path + '/registration.yaml,dst=/matrix-mautrix-slack-registration.yaml,ro'] if matrix_mautrix_slack_enabled else [])

  105.     +

  106.     (['--mount type=bind,src=' + matrix_mautrix_facebook_config_path + '/registration.yaml,dst=/matrix-mautrix-facebook-registration.yaml,ro'] if matrix_mautrix_facebook_enabled else [])

  107.     +

  108.     (['--mount type=bind,src=' + matrix_mautrix_googlechat_config_path + '/registration.yaml,dst=/matrix-mautrix-googlechat-registration.yaml,ro'] if matrix_mautrix_googlechat_enabled else [])

  109.     +

  110.     (['--mount type=bind,src=' + matrix_mautrix_hangouts_config_path + '/registration.yaml,dst=/matrix-mautrix-hangouts-registration.yaml,ro'] if matrix_mautrix_hangouts_enabled else [])

  111.     +

  112.     (['--mount type=bind,src=' + matrix_mautrix_instagram_config_path + '/registration.yaml,dst=/matrix-mautrix-instagram-registration.yaml,ro'] if matrix_mautrix_instagram_enabled else [])

  113.     +

  114.     (['--mount type=bind,src=' + matrix_mautrix_signal_config_path + '/registration.yaml,dst=/matrix-mautrix-signal-registration.yaml,ro'] if matrix_mautrix_signal_enabled else [])

  115.     +

  116.     (['--mount type=bind,src=' + matrix_mautrix_meta_messenger_config_path + '/registration.yaml,dst=/matrix-mautrix-meta-messenger-registration.yaml,ro'] if matrix_mautrix_meta_messenger_enabled else [])

  117.     +

  118.     (['--mount type=bind,src=' + matrix_mautrix_meta_instagram_config_path + '/registration.yaml,dst=/matrix-mautrix-meta-instagram-registration.yaml,ro'] if matrix_mautrix_meta_instagram_enabled else [])

  119.     +

  120.     (['--mount type=bind,src=' + matrix_mautrix_telegram_config_path + '/registration.yaml,dst=/matrix-mautrix-telegram-registration.yaml,ro'] if matrix_mautrix_telegram_enabled else [])

  121.     +

  122.     (['--mount type=bind,src=' + matrix_mautrix_twitter_config_path + '/registration.yaml,dst=/matrix-mautrix-twitter-registration.yaml,ro'] if matrix_mautrix_twitter_enabled else [])

  123.     +

  124.     (['--mount type=bind,src=' + matrix_mautrix_gmessages_config_path + '/registration.yaml,dst=/matrix-mautrix-gmessages-registration.yaml,ro'] if matrix_mautrix_gmessages_enabled else [])

  125.     +

  126.     (['--mount type=bind,src=' + matrix_mautrix_whatsapp_config_path + '/registration.yaml,dst=/matrix-mautrix-whatsapp-registration.yaml,ro'] if matrix_mautrix_whatsapp_enabled else [])

  127.     +

  128.     (['--mount type=bind,src=' + matrix_mautrix_wsproxy_config_path + '/androidsms-registration.yaml,dst=/matrix-mautrix-androidsms-registration.yaml,ro'] if matrix_mautrix_wsproxy_enabled else [])

  129.     +

  130.     (['--mount type=bind,src=' + matrix_mautrix_wsproxy_config_path + '/imessage-registration.yaml,dst=/matrix-mautrix-imessage-registration.yaml,ro'] if matrix_mautrix_wsproxy_enabled else [])

  131.     +

  132.     (['--mount type=bind,src=' + matrix_mx_puppet_discord_config_path + '/registration.yaml,dst=/matrix-mx-puppet-discord-registration.yaml,ro'] if matrix_mx_puppet_discord_enabled else [])

  133.     +

  134.     (['--mount type=bind,src=' + matrix_mx_puppet_groupme_config_path + '/registration.yaml,dst=/matrix-mx-puppet-groupme-registration.yaml,ro'] if matrix_mx_puppet_groupme_enabled else [])

  135.     +

  136.     (['--mount type=bind,src=' + matrix_mx_puppet_instagram_config_path + '/registration.yaml,dst=/matrix-mx-puppet-instagram-registration.yaml,ro'] if matrix_mx_puppet_instagram_enabled else [])

  137.     +

  138.     (['--mount type=bind,src=' + matrix_mx_puppet_slack_config_path + '/registration.yaml,dst=/matrix-mx-puppet-slack-registration.yaml,ro'] if matrix_mx_puppet_slack_enabled else [])

  139.     +

  140.     (['--mount type=bind,src=' + matrix_mx_puppet_steam_config_path + '/registration.yaml,dst=/matrix-mx-puppet-steam-registration.yaml,ro'] if matrix_mx_puppet_steam_enabled else [])

  141.     +

  142.     (['--mount type=bind,src=' + matrix_mx_puppet_twitter_config_path + '/registration.yaml,dst=/matrix-mx-puppet-twitter-registration.yaml,ro'] if matrix_mx_puppet_twitter_enabled else [])

  143.     +

  144.     (['--mount type=bind,src=' + matrix_sms_bridge_config_path + '/registration.yaml,dst=/matrix-sms-bridge-registration.yaml,ro'] if matrix_sms_bridge_enabled else [])

  145.     +

  146.     (['--mount type=bind,src=' + matrix_cactus_comments_app_service_config_file + ',dst=/matrix-cactus-comments.yaml,ro'] if matrix_cactus_comments_enabled else [])

  147.   }}

  148. 

  149. matrix_homeserver_app_service_config_files_auto: |

  150.   {{

  151.     (['/matrix-appservice-discord-registration.yaml'] if matrix_appservice_discord_enabled else [])

  152.     +

  153.     (['/matrix-appservice-draupnir-for-all-registration.yaml'] if matrix_appservice_draupnir_for_all_enabled else [])

  154.     +

  155.     (['/matrix-appservice-irc-registration.yaml'] if matrix_appservice_irc_enabled else [])

  156.     +

  157.     (['/matrix-appservice-kakaotalk-registration.yaml'] if matrix_appservice_kakaotalk_enabled else [])

  158.     +

  159.     (['/matrix-appservice-slack-registration.yaml'] if matrix_appservice_slack_enabled else [])

  160.     +

  161.     (['/matrix-appservice-webhooks-registration.yaml'] if matrix_appservice_webhooks_enabled else [])

  162.     +

  163.     (['/matrix-beeper-linkedin-registration.yaml'] if matrix_beeper_linkedin_enabled else [])

  164.     +

  165.     (['/matrix-go-skype-bridge-registration.yaml'] if matrix_go_skype_bridge_enabled else [])

  166.     +

  167.     (['/matrix-wechat-registration.yaml'] if matrix_wechat_enabled else [])

  168.     +

  169.     (['/heisenbridge-registration.yaml'] if matrix_heisenbridge_enabled else [])

  170.     +

  171.     (['/hookshot-registration.yml'] if matrix_hookshot_enabled else [])

  172.     +

  173.     (['/matrix-mautrix-discord-registration.yaml'] if matrix_mautrix_discord_enabled else [])

  174.     +

  175.     (['/matrix-mautrix-slack-registration.yaml'] if matrix_mautrix_slack_enabled else [])

  176.     +

  177.     (['/matrix-mautrix-facebook-registration.yaml'] if matrix_mautrix_facebook_enabled else [])

  178.     +

  179.     (['/matrix-mautrix-googlechat-registration.yaml'] if matrix_mautrix_googlechat_enabled else [])

  180.     +

  181.     (['/matrix-mautrix-hangouts-registration.yaml'] if matrix_mautrix_hangouts_enabled else [])

  182.     +

  183.     (['/matrix-mautrix-instagram-registration.yaml'] if matrix_mautrix_instagram_enabled else [])

  184.     +

  185.     (['/matrix-mautrix-signal-registration.yaml'] if matrix_mautrix_signal_enabled else [])

  186.     +

  187.     (['/matrix-mautrix-meta-messenger-registration.yaml'] if matrix_mautrix_meta_messenger_enabled else [])

  188.     +

  189.     (['/matrix-mautrix-meta-instagram-registration.yaml'] if matrix_mautrix_meta_instagram_enabled else [])

  190.     +

  191.     (['/matrix-mautrix-telegram-registration.yaml'] if matrix_mautrix_telegram_enabled else [])

  192.     +

  193.     (['/matrix-mautrix-twitter-registration.yaml'] if matrix_mautrix_twitter_enabled else [])

  194.     +

  195.     (['/matrix-mautrix-gmessages-registration.yaml'] if matrix_mautrix_gmessages_enabled else [])

  196.     +

  197.     (['/matrix-mautrix-whatsapp-registration.yaml'] if matrix_mautrix_whatsapp_enabled else [])

  198.     +

  199.     (['/matrix-mautrix-androidsms-registration.yaml'] if matrix_mautrix_wsproxy_enabled else [])

  200.     +

  201.     (['/matrix-mautrix-imessage-registration.yaml'] if matrix_mautrix_wsproxy_enabled else [])

  202.     +

  203.     (['/matrix-mx-puppet-discord-registration.yaml'] if matrix_mx_puppet_discord_enabled else [])

  204.     +

  205.     (['/matrix-mx-puppet-groupme-registration.yaml'] if matrix_mx_puppet_groupme_enabled else [])

  206.     +

  207.     (['/matrix-mx-puppet-instagram-registration.yaml'] if matrix_mx_puppet_instagram_enabled else [])

  208.     +

  209.     (['/matrix-mx-puppet-slack-registration.yaml'] if matrix_mx_puppet_slack_enabled else [])

  210.     +

  211.     (['/matrix-mx-puppet-steam-registration.yaml'] if matrix_mx_puppet_steam_enabled else [])

  212.     +

  213.     (['/matrix-mx-puppet-twitter-registration.yaml'] if matrix_mx_puppet_twitter_enabled else [])

  214.     +

  215.     (['/matrix-sms-bridge-registration.yaml'] if matrix_sms_bridge_enabled else [])

  216.     +

  217.     (['/matrix-cactus-comments.yaml'] if matrix_cactus_comments_enabled else [])

  218.   }}

  219. 

  220. matrix_addons_homeserver_container_network: "{{ matrix_playbook_reverse_proxy_container_network if matrix_playbook_internal_matrix_client_api_traefik_entrypoint_enabled else matrix_homeserver_container_network }}"

  221. matrix_addons_homeserver_client_api_url: "{{ ('http://' + matrix_playbook_reverse_proxy_hostname + ':' + matrix_playbook_internal_matrix_client_api_traefik_entrypoint_port | string) if matrix_playbook_internal_matrix_client_api_traefik_entrypoint_enabled else matrix_homeserver_container_url }}"

  222. matrix_addons_homeserver_systemd_services_list: "{{ ([devture_traefik_identifier + '.service'] if matrix_playbook_reverse_proxy_type == 'playbook-managed-traefik' else []) if matrix_playbook_internal_matrix_client_api_traefik_entrypoint_enabled else matrix_homeserver_systemd_services_list }}"

  223. 

  224. # Starting from version `0.6.0` conduit natively supports some sync v3 (sliding-sync) features.

  225. matrix_homeserver_sliding_sync_url: "{{ matrix_sliding_sync_base_url if matrix_sliding_sync_enabled else (matrix_homeserver_url if matrix_homeserver_implementation in ['conduit'] else '') }}"

  226. 

  227. ########################################################################

  228. #                                                                      #

  229. # /base                                                                #

  230. #                                                                      #

  231. ########################################################################

  232. 

  233. 

  234. ########################################################################

  235. #                                                                      #

  236. # com.devture.ansible.role.systemd_service_manager                     #

  237. #                                                                      #

  238. ########################################################################

  239. 

  240. # This list is not exhaustive and final.

  241. # Synapse workers are still injected into the list at runtime.

  242. # Additional JVB workers (jitsi_jvb.yml -- roles/galaxy/jitsi/tasks/init_additional_jvb.yml) override this variable at runtime as well.

  243. #

  244. # Priority levels are like this:

  245. # - Traefik starts first with a level of 250, so that:

  246. #   - it can get an early start on obtaining SSL certificates and routing to other services as soon as they start (later)

  247. #   - so that addon services (starting later) can communicte with the homeserver via Traefik's internal entrypoint

  248. #     (see `matrix_playbook_internal_matrix_client_api_traefik_entrypoint_enabled`)

  249. # - core services (the homeserver) get a level of ~1000

  250. # - services that the homeserver depends on (database, Redis, ntfy, Coturn, etc.) get a lower level - between 500 and 1000

  251. # - Coturn gets a higher level if `devture_systemd_service_manager_service_restart_mode == 'one-by-one'` to intentionally delay it, because:

  252. #  - starting services one by one means that the service manager role waits for each service to fully start before proceeding to the next one

  253. #  - if Coturn has a lower priority than the homeserver, it would be started before it

  254. #  - since Coturn is started before the homeserver, there's no container label telling Traefik to get a `matrix.DOMAIN` certificate

  255. #  - thus, Coturn would spin and wait for a certificate until it fails. We'd get a playbook failure due to it, but service manager will proceed to start all other services anyway.

  256. #  - only later, when the homeserver actually starts, would that certificate be fetched and dumped

  257. # - reverse-proxying services get level 3000

  258. # - Matrix utility services (bridges, bots) get a level of 2000/2200, so that:

  259. #   - they can start before the reverse-proxy

  260. #   - so that, when the reverse-proxy is up (Matrix is up), all bots and bridges can be interacted with

  261. # - monitoring services (Prometheus, Grafana, ..) get a level of 4000 - they can start later than all-of-Matrix

  262. # - services which aren't time-sensitive (various crons and timers) get a level of 5000 - they can start later than all-of-Matrix

  263. devture_systemd_service_manager_services_list_auto: |

  264.   {{

  265.     ([{'name': (backup_borg_identifier + '.timer'), 'priority': 5000, 'groups': ['matrix', 'backup', 'borg']}] if backup_borg_enabled else [])

  266.     +

  267.     ([{'name': 'matrix-bot-buscarron.service', 'priority': 2200, 'groups': ['matrix', 'bots', 'buscarron', 'bot-buscarron']}] if matrix_bot_buscarron_enabled else [])

  268.     +

  269.     ([{'name': 'matrix-bot-go-neb.service', 'priority': 2200, 'groups': ['matrix', 'bots', 'go-neb', 'bot-go-neb']}] if matrix_bot_go_neb_enabled else [])

  270.     +

  271.     ([{'name': 'matrix-bot-honoroit.service', 'priority': 2200, 'groups': ['matrix', 'bots', 'honoroit', 'bot-honoroit']}] if matrix_bot_honoroit_enabled else [])

  272.     +

  273.     ([{'name': 'matrix-bot-matrix-registration-bot.service', 'priority': 2200, 'groups': ['matrix', 'bots', 'registration-bot', 'bot-matrix-registration-bot']}] if matrix_bot_matrix_registration_bot_enabled else [])

  274.     +

  275.     ([{'name': 'matrix-bot-matrix-reminder-bot.service', 'priority': 2200, 'groups': ['matrix', 'bots', 'reminder-bot', 'bot-matrix-reminder-bot']}] if matrix_bot_matrix_reminder_bot_enabled else [])

  276.     +

  277.     ([{'name': 'matrix-bot-maubot.service', 'priority': 2200, 'groups': ['matrix', 'bots', 'maubot', 'bot-maubot']}] if matrix_bot_maubot_enabled else [])

  278.     +

  279.     ([{'name': 'matrix-bot-mjolnir.service', 'priority': 4000, 'groups': ['matrix', 'bots', 'mjolnir', 'bot-mjolnir']}] if matrix_bot_mjolnir_enabled else [])

  280.     +

  281.     ([{'name': 'matrix-bot-draupnir.service', 'priority': 4000, 'groups': ['matrix', 'bots', 'draupnir', 'bot-draupnir']}] if matrix_bot_draupnir_enabled else [])

  282.     +

  283.     ([{'name': 'matrix-bot-postmoogle.service', 'priority': 2200, 'groups': ['matrix', 'bots', 'postmoogle', 'bot-postmoogle']}] if matrix_bot_postmoogle_enabled else [])

  284.     +

  285.     ([{'name': 'matrix-bot-chatgpt.service', 'priority': 2200, 'groups': ['matrix', 'bots', 'chatgpt', 'bot-chatgpt']}] if matrix_bot_chatgpt_enabled else [])

  286.     +

  287.     ([{'name': 'matrix-appservice-discord.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'appservice-discord']}] if matrix_appservice_discord_enabled else [])

  288.     +

  289.     ([{'name': 'matrix-appservice-draupnir-for-all.service', 'priority': 4000, 'groups': ['matrix', 'bridges', 'draupnir-for-all', 'appservice-draupnir-for-all']}] if matrix_appservice_draupnir_for_all_enabled else [])

  290.     +

  291.     ([{'name': 'matrix-appservice-irc.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'appservice-irc']}] if matrix_appservice_irc_enabled else [])

  292.     +

  293.     ([{'name': 'matrix-appservice-kakaotalk.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'appservice-kakaotalk']}] if matrix_appservice_kakaotalk_enabled else [])

  294.     +

  295.     ([{'name': 'matrix-appservice-kakaotalk-node.service', 'priority': 1900, 'groups': ['matrix', 'bridges', 'appservice-kakaotalk', 'appservice-kakaotalk-node']}] if matrix_appservice_kakaotalk_enabled else [])

  296.     +

  297.     ([{'name': 'matrix-appservice-slack.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'appservice-slack']}] if matrix_appservice_slack_enabled else [])

  298.     +

  299.     ([{'name': 'matrix-appservice-webhooks.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'appservice-webhooks']}] if matrix_appservice_webhooks_enabled else [])

  300.     +

  301.     ([{'name': 'matrix-beeper-linkedin.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'beeper-linkedin']}] if matrix_beeper_linkedin_enabled else [])

  302.     +

  303.     ([{'name': 'matrix-go-skype-bridge.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'go-skype']}] if matrix_go_skype_bridge_enabled else [])

  304.     +

  305.     ([{'name': 'matrix-wechat.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'wechat']}] if matrix_wechat_enabled else [])

  306.     +

  307.     ([{'name': 'matrix-wechat-agent.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'wechat']}] if matrix_wechat_enabled else [])

  308.     +

  309.     ([{'name': 'matrix-heisenbridge.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'heisenbridge']}] if matrix_heisenbridge_enabled else [])

  310.     +

  311.     ([{'name': 'matrix-hookshot.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'hookshot', 'bridge-hookshot']}] if matrix_hookshot_enabled else [])

  312.     +

  313.     ([{'name': 'matrix-mautrix-discord.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mautrix-discord']}] if matrix_mautrix_discord_enabled else [])

  314.     +

  315.     ([{'name': 'matrix-mautrix-slack.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mautrix-slack']}] if matrix_mautrix_slack_enabled else [])

  316.     +

  317.     ([{'name': 'matrix-mautrix-facebook.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mautrix-facebook']}] if matrix_mautrix_facebook_enabled else [])

  318.     +

  319.     ([{'name': 'matrix-mautrix-googlechat.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mautrix-googlechat']}] if matrix_mautrix_googlechat_enabled else [])

  320.     +

  321.     ([{'name': 'matrix-mautrix-hangouts.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mautrix-hangouts']}] if matrix_mautrix_hangouts_enabled else [])

  322.     +

  323.     ([{'name': 'matrix-mautrix-instagram.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mautrix-instagram']}] if matrix_mautrix_instagram_enabled else [])

  324.     +

  325.     ([{'name': 'matrix-mautrix-signal.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mautrix-signal', 'mautrix-signal']}] if matrix_mautrix_signal_enabled else [])

  326.     +

  327.     ([{'name': (matrix_mautrix_meta_messenger_identifier + '.service'), 'priority': 2000, 'groups': ['matrix', 'bridges', 'mautrix-meta', 'mautrix-meta-messenger']}] if matrix_mautrix_meta_messenger_enabled else [])

  328.     +

  329.     ([{'name': (matrix_mautrix_meta_instagram_identifier + '.service'), 'priority': 2000, 'groups': ['matrix', 'bridges', 'mautrix-meta', 'mautrix-meta-instagram']}] if matrix_mautrix_meta_instagram_enabled else [])

  330.     +

  331.     ([{'name': 'matrix-mautrix-telegram.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mautrix-telegram']}] if matrix_mautrix_telegram_enabled else [])

  332.     +

  333.     ([{'name': 'matrix-mautrix-twitter.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mautrix-twitter']}] if matrix_mautrix_twitter_enabled else [])

  334.     +

  335.     ([{'name': 'matrix-mautrix-gmessages.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mautrix-gmessages']}] if matrix_mautrix_gmessages_enabled else [])

  336.     +

  337.     ([{'name': 'matrix-mautrix-whatsapp.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mautrix-whatsapp']}] if matrix_mautrix_whatsapp_enabled else [])

  338.     +

  339.     ([{'name': 'matrix-mautrix-wsproxy.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mautrix-wsproxy']}] if matrix_mautrix_wsproxy_enabled else [])

  340.     +

  341.     ([{'name': 'matrix-mautrix-wsproxy-syncproxy.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mautrix-wsproxy-syncproxy']}] if matrix_mautrix_wsproxy_enabled else [])

  342.     +

  343.     ([{'name': 'matrix-mx-puppet-discord.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mx-puppet-discord']}] if matrix_mx_puppet_discord_enabled else [])

  344.     +

  345.     ([{'name': 'matrix-mx-puppet-groupme.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mx-puppet-groupme']}] if matrix_mx_puppet_groupme_enabled else [])

  346.     +

  347.     ([{'name': 'matrix-mx-puppet-instagram.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mx-puppet-instagram']}] if matrix_mx_puppet_instagram_enabled else [])

  348.     +

  349.     ([{'name': 'matrix-mx-puppet-slack.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mx-puppet-slack']}] if matrix_mx_puppet_slack_enabled else [])

  350.     +

  351.     ([{'name': 'matrix-mx-puppet-steam.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mx-puppet-steam']}] if matrix_mx_puppet_steam_enabled else [])

  352.     +

  353.     ([{'name': 'matrix-mx-puppet-twitter.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mx-puppet-twitter']}] if matrix_mx_puppet_twitter_enabled else [])

  354.     +

  355.     ([{'name': 'matrix-sms-bridge.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'sms']}] if matrix_sms_bridge_enabled else [])

  356.     +

  357.     ([{'name': 'matrix-cactus-comments.service', 'priority': 2000, 'groups': ['matrix', 'cactus-comments']}] if matrix_cactus_comments_enabled else [])

  358.     +

  359.     ([{'name': 'matrix-cactus-comments-client.service', 'priority': 2000, 'groups': ['matrix', 'cactus-comments-client']}] if matrix_cactus_comments_client_enabled else [])

  360.     +

  361.     ([{'name': 'matrix-client-cinny.service', 'priority': 2000, 'groups': ['matrix', 'clients', 'cinny', 'client-cinny']}] if matrix_client_cinny_enabled else [])

  362.     +

  363.     ([{'name': 'matrix-client-element.service', 'priority': 2000, 'groups': ['matrix', 'clients', 'element', 'client-element']}] if matrix_client_element_enabled else [])

  364.     +

  365.     ([{'name': 'matrix-client-hydrogen.service', 'priority': 2000, 'groups': ['matrix', 'clients', 'hydrogen', 'client-hydrogen']}] if matrix_client_hydrogen_enabled else [])

  366.     +

  367.     ([{'name': 'matrix-client-schildichat.service', 'priority': 2000, 'groups': ['matrix', 'clients', 'schildichat', 'client-schildichat']}] if matrix_client_schildichat_enabled else [])

  368.     +

  369.     ([{'name': ('matrix-' + matrix_homeserver_implementation + '.service'), 'priority': 1000, 'groups': ['matrix', 'homeservers', matrix_homeserver_implementation]}] if matrix_homeserver_enabled else [])

  370.     +

  371.     ([{'name': 'matrix-corporal.service', 'priority': 1500, 'groups': ['matrix', 'corporal']}] if matrix_corporal_enabled else [])

  372.     +

  373.     ([{'name': 'matrix-coturn.service', 'priority': (900 if devture_systemd_service_manager_service_restart_mode == 'clean-stop-start' else 1500), 'groups': ['matrix', 'coturn']}] if matrix_coturn_enabled else [])

  374.     +

  375.     ([{'name': 'matrix-rageshake.service', 'priority': 4000, 'groups': ['matrix', 'rageshake']}] if matrix_rageshake_enabled else [])

  376.     +

  377.     ([{'name': 'matrix-coturn-reload.timer', 'priority': 5000, 'groups': ['matrix', 'coturn']}] if (matrix_coturn_enabled and matrix_coturn_tls_enabled) else [])

  378.     +

  379.     ([{'name': 'matrix-dimension.service', 'priority': 4000, 'groups': ['matrix', 'integration-managers', 'dimension']}] if matrix_dimension_enabled else [])

  380.     +

  381.     ([{'name': 'matrix-dynamic-dns.service', 'priority': 5000, 'groups': ['matrix', 'dynamic-dns']}] if matrix_dynamic_dns_enabled else [])

  382.     +

  383.     ([{'name': 'matrix-email2matrix.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'email2matrix']}] if matrix_email2matrix_enabled else [])

  384.     +

  385.     ([{'name': (etherpad_identifier + '.service'), 'priority': 4000, 'groups': ['matrix', 'etherpad']}] if etherpad_enabled else [])

  386.     +

  387.     ([{'name': (grafana_identifier + '.service'), 'priority': 4000, 'groups': ['matrix', 'monitoring', 'grafana']}] if grafana_enabled else [])

  388.     +

  389.     ([{'name': (jitsi_identifier + '-web.service'), 'priority': 4200, 'groups': ['matrix', 'jitsi', 'jitsi-web']}] if jitsi_enabled else [])

  390.     +

  391.     ([{'name': (jitsi_identifier + '-prosody.service'), 'priority': 4000, 'groups': ['matrix', 'jitsi', 'jitsi-prosody']}] if jitsi_enabled else [])

  392.     +

  393.     ([{'name': (jitsi_identifier + '-jicofo.service'), 'priority': 4100, 'groups': ['matrix', 'jitsi', 'jitsi-jicofo']}] if jitsi_enabled else [])

  394.     +

  395.     ([{'name': (jitsi_identifier + '-jvb.service'), 'priority': 4100, 'groups': ['matrix', 'jitsi', 'jitsi-jvb']}] if jitsi_enabled else [])

  396.     +

  397.     ([{'name': 'matrix-ldap-registration-proxy.service', 'priority': 2000, 'groups': ['matrix', 'ldap-registration-proxy']}] if matrix_ldap_registration_proxy_enabled else [])

  398.     +

  399.     ([{'name': 'matrix-ma1sd.service', 'priority': 2000, 'groups': ['matrix', 'ma1sd']}] if matrix_ma1sd_enabled else [])

  400.     +

  401.     ([{'name': (matrix_media_repo_identifier + '.service'), 'priority': 4000, 'groups': ['matrix', 'matrix-media-repo']}] if matrix_media_repo_enabled else [])

  402.     +

  403.     ([{'name': (exim_relay_identifier ~ '.service'), 'priority': 800, 'groups': ['matrix', 'mailer', 'exim-relay']}] if exim_relay_enabled else [])

  404.     +

  405.     ([{'name': (ntfy_identifier + '.service'), 'priority': 800, 'groups': ['matrix', 'ntfy']}] if ntfy_enabled else [])

  406.     +

  407.     ([{'name': (devture_postgres_identifier + '.service'), 'priority': 500, 'groups': ['matrix', 'postgres']}] if devture_postgres_enabled else [])

  408.     +

  409.     ([{'name': (devture_postgres_backup_identifier + '.service'), 'priority': 5000, 'groups': ['matrix', 'backup', 'postgres-backup']}] if devture_postgres_backup_enabled else [])

  410.     +

  411.     ([{'name': (prometheus_identifier + '.service'), 'priority': 4000, 'groups': ['matrix', 'monitoring', 'prometheus']}] if prometheus_enabled else [])

  412.     +

  413.     ([{'name': (prometheus_node_exporter_identifier + '.service'), 'priority': 3900, 'groups': ['matrix', 'monitoring', 'prometheus-exporters', 'prometheus-node-exporter']}] if prometheus_node_exporter_enabled else [])

  414.     +

  415.     ([{'name': (prometheus_postgres_exporter_identifier + '.service'), 'priority': 3900, 'groups': ['matrix', 'monitoring', 'prometheus-exporters', 'prometheus-postgres-exporter']}] if prometheus_postgres_exporter_enabled else [])

  416.     +

  417.     ([{'name': 'matrix-prometheus-nginxlog-exporter.service', 'priority': 3900, 'groups': ['matrix', 'monitoring', 'prometheus-exporters', 'prometheus-nginxlog-exporter']}] if matrix_prometheus_nginxlog_exporter_enabled else [])

  418.     +

  419.     ([{'name': (redis_identifier + '.service'), 'priority': 750, 'groups': ['matrix', 'redis']}] if redis_enabled else [])

  420.     +

  421.     ([{'name': (keydb_identifier + '.service'), 'priority': 750, 'groups': ['matrix', 'keydb']}] if keydb_enabled else [])

  422.     +

  423.     ([{'name': 'matrix-pantalaimon.service', 'priority': 4000, 'groups': ['matrix', 'pantalaimon']}] if matrix_pantalaimon_enabled else [])

  424.     +

  425.     ([{'name': 'matrix-registration.service', 'priority': 4000, 'groups': ['matrix', 'registration', 'matrix-registration']}] if matrix_registration_enabled else [])

  426.     +

  427.     ([{'name': 'matrix-sliding-sync.service', 'priority': 1500, 'groups': ['matrix', 'sliding-sync']}] if matrix_sliding_sync_enabled else [])

  428.     +

  429.     ([{'name': 'matrix-sygnal.service', 'priority': 800, 'groups': ['matrix', 'sygnal']}] if matrix_sygnal_enabled else [])

  430.     +

  431.     ([{'name': 'matrix-goofys.service', 'priority': 800, 'groups': ['matrix', 'goofys']}] if matrix_s3_media_store_enabled else [])

  432.     +

  433.     ([{'name': 'matrix-synapse-s3-storage-provider-migrate.timer', 'priority': 5000, 'groups': ['matrix']}] if matrix_synapse_ext_synapse_s3_storage_provider_enabled else [])

  434.     +

  435.     ([{'name': 'matrix-synapse-auto-compressor.timer', 'priority': 5000, 'groups': ['matrix', 'synapse-auto-compressor']}] if matrix_synapse_auto_compressor_enabled else [])

  436.     +

  437.     ([{'name': 'matrix-synapse-admin.service', 'priority': 4000, 'groups': ['matrix', 'synapse-admin']}] if matrix_synapse_admin_enabled else [])

  438.     +

  439.     ([{'name': 'matrix-synapse-reverse-proxy-companion.service', 'priority': 1500, 'groups': ['matrix', 'homeservers', 'synapse', 'synapse-reverse-proxy-companion', 'reverse-proxies']}] if matrix_synapse_reverse_proxy_companion_enabled else [])

  440.     +

  441.     ([{'name': 'matrix-user-verification-service.service', 'priority': 800, 'groups': ['matrix', 'matrix-user-verification-service']}] if matrix_user_verification_service_enabled else [])

  442.     +

  443.     ([{'name': (matrix_static_files_identifier + '.service'), 'priority': 4000, 'groups': ['matrix', 'matrix-static-files']}] if matrix_static_files_enabled else [])

  444.     +

  445.     ([{'name': (devture_container_socket_proxy_identifier + '.service'), 'priority': 200, 'groups': ['matrix', 'reverse-proxies', 'container-socket-proxy']}] if devture_container_socket_proxy_enabled else [])

  446.     +

  447.     ([{'name': (devture_traefik_identifier + '.service'), 'priority': 250, 'groups': ['matrix', 'traefik', 'reverse-proxies']}] if devture_traefik_enabled else [])

  448.     +

  449.     ([{'name': (devture_traefik_certs_dumper_identifier + '.service'), 'priority': 300, 'groups': ['matrix', 'traefik-certs-dumper']}] if devture_traefik_certs_dumper_enabled else [])

  450.   }}

  451. 

  452. ########################################################################

  453. #                                                                      #

  454. # /com.devture.ansible.role.systemd_service_manager                    #

  455. #                                                                      #

  456. ########################################################################

  457. 

  458. 

  459. ########################################################################

  460. #                                                                      #

  461. # com.devture.ansible.role.timesync                                    #

  462. #                                                                      #

  463. ########################################################################

  464. 

  465. # To completely disable installing systemd-timesyncd/ntpd, use `devture_timesync_installation_enabled: false`.

  466. 

  467. ########################################################################

  468. #                                                                      #

  469. # /com.devture.ansible.role.timesync                                   #

  470. #                                                                      #

  471. ########################################################################

  472. 

  473. 

  474. ######################################################################

  475. #

  476. # com.devture.ansible.role.playbook_state_preserver

  477. #

  478. ######################################################################

  479. 

  480. # To completely disable this feature, use `devture_playbook_state_preserver_enabled: false`.

  481. 

  482. devture_playbook_state_preserver_uid: "{{ matrix_user_uid }}"

  483. devture_playbook_state_preserver_gid: "{{ matrix_user_gid }}"

  484. 

  485. devture_playbook_state_preserver_vars_preservation_dst: "{{ matrix_base_data_path }}/vars.yml"

  486. 

  487. devture_playbook_state_preserver_commit_hash_preservation_dst: "{{ matrix_base_data_path }}/git_hash.yml"

  488. 

  489. ######################################################################

  490. #

  491. # /com.devture.ansible.role.playbook_state_preserver

  492. #

  493. ######################################################################

  494. 

  495. 

  496. ########################################################################

  497. #                                                                      #

  498. # geerlingguy/ansible-role-docker                                      #

  499. #                                                                      #

  500. ########################################################################

  501. 

  502. docker_daemon_options: "{{ matrix_playbook_docker_installation_daemon_options }}"

  503. 

  504. ########################################################################

  505. #                                                                      #

  506. # /geerlingguy/ansible-role-docker                                     #

  507. #                                                                      #

  508. ########################################################################

  509. 

  510. 

  511. ######################################################################

  512. #

  513. # matrix-base

  514. #

  515. ######################################################################

  516. 

  517. matrix_identity_server_url: "{{ (('https://' if matrix_playbook_ssl_enabled else 'http://') + matrix_server_fqn_matrix) if matrix_ma1sd_enabled else None }}"

  518. 

  519. matrix_homeserver_systemd_services_list: |-

  520.   {{

  521.     (

  522.       ([('matrix-' + matrix_homeserver_implementation + '.service')] if matrix_homeserver_implementation != 'synapse' else [])

  523.       +

  524.       ([('matrix-' + matrix_homeserver_implementation + '.service')] if matrix_homeserver_implementation == 'synapse' and not matrix_synapse_reverse_proxy_companion_enabled else [])

  525.       +

  526.       (['matrix-synapse-reverse-proxy-companion.service'] if matrix_synapse_reverse_proxy_companion_enabled else [])

  527.     ) | unique

  528.   }}

  529. 

  530. matrix_homeserver_container_client_api_endpoint: |-

  531.   {{

  532.     {

  533.       'synapse': ('matrix-synapse-reverse-proxy-companion:8008' if matrix_synapse_reverse_proxy_companion_enabled | default(false) else ('matrix-synapse:'+ matrix_synapse_container_client_api_port | default('8008') | string)),

  534.       'dendrite': ('matrix-dendrite:' + matrix_dendrite_http_bind_port | default('8008') | string),

  535.       'conduit': ('matrix-conduit:' + matrix_conduit_port_number | default('8008') | string),

  536.     }[matrix_homeserver_implementation]

  537.   }}

  538. 

  539. matrix_homeserver_container_federation_api_endpoint: |-

  540.   {{

  541.     {

  542.       'synapse': ('matrix-synapse-reverse-proxy-companion:8048' if matrix_synapse_reverse_proxy_companion_enabled else ('matrix-synapse:'+ matrix_synapse_container_federation_api_plain_port | default('8008') | string)),

  543.       'dendrite': ('matrix-dendrite:' + matrix_dendrite_http_bind_port | default('8008') | string),

  544.       'conduit': ('matrix-conduit:' + matrix_conduit_port_number | default('8008') | string),

  545.     }[matrix_homeserver_implementation]

  546.   }}

  547. 

  548. matrix_integration_manager_rest_url: "{{ matrix_dimension_integrations_rest_url if matrix_dimension_enabled else None }}"

  549. matrix_integration_manager_ui_url: "{{ matrix_dimension_integrations_ui_url if matrix_dimension_enabled else None }}"

  550. 

  551. ######################################################################

  552. #

  553. # /matrix-base

  554. #

  555. ######################################################################

  556. 

  557. 

  558. ######################################################################

  559. #

  560. # matrix-bridge-appservice-discord

  561. #

  562. ######################################################################

  563. 

  564. # We don't enable bridges by default.

  565. matrix_appservice_discord_enabled: false

  566. 

  567. matrix_appservice_discord_systemd_required_services_list_auto: |

  568.   {{

  569.     matrix_addons_homeserver_systemd_services_list

  570.     +

  571.     ([devture_postgres_identifier ~ '.service'] if (devture_postgres_enabled and matrix_appservice_discord_database_hostname == devture_postgres_connection_hostname) else [])

  572.   }}

  573. 

  574. matrix_appservice_discord_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '9005') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  575. 

  576. matrix_appservice_discord_container_network: "{{ matrix_addons_container_network }}"

  577. 

  578. matrix_appservice_discord_container_additional_networks_auto: |-

  579.   {{

  580.     (

  581.       ([] if matrix_addons_homeserver_container_network == '' else [matrix_addons_homeserver_container_network])

  582.       +

  583.       ([devture_postgres_container_network] if (devture_postgres_enabled and matrix_appservice_discord_database_hostname == devture_postgres_connection_hostname and matrix_appservice_discord_container_network != devture_postgres_container_network) else [])

  584.     ) | unique

  585.   }}

  586. 

  587. # If the homeserver disables presence, it's likely better (less wasteful) to also disable presence on the bridge side.

  588. matrix_appservice_discord_bridge_disablePresence: "{{ not matrix_synapse_presence_enabled }}"

  589. 

  590. matrix_appservice_discord_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'discord.as.token', rounds=655555) | to_uuid }}"

  591. 

  592. matrix_appservice_discord_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'discord.hs.token', rounds=655555) | to_uuid }}"

  593. 

  594. # We only make this use Postgres if our own Postgres server is enabled.

  595. # It's only then (for now) that we can automatically create the necessary database and user for this service.

  596. matrix_appservice_discord_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  597. matrix_appservice_discord_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  598. matrix_appservice_discord_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'as.discord.db', rounds=655555) | to_uuid }}"

  599. 

  600. ######################################################################

  601. #

  602. # /matrix-bridge-appservice-discord

  603. #

  604. ######################################################################

  605. 

  606. 

  607. ######################################################################

  608. #

  609. # matrix-appservice-webhooks

  610. #

  611. ######################################################################

  612. 

  613. # We don't enable bridges by default.

  614. matrix_appservice_webhooks_enabled: false

  615. 

  616. matrix_appservice_webhooks_hostname: "{{ matrix_server_fqn_matrix }}"

  617. 

  618. matrix_appservice_webhooks_systemd_required_services_list_auto: |

  619.   {{

  620.     matrix_addons_homeserver_systemd_services_list

  621.   }}

  622. 

  623. matrix_appservice_webhooks_container_image_self_build: "{{ matrix_architecture != 'amd64' }}"

  624. 

  625. matrix_appservice_webhooks_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ matrix_appservice_webhooks_matrix_port) if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  626. 

  627. matrix_appservice_webhooks_container_network: "{{ matrix_addons_container_network }}"

  628. 

  629. matrix_appservice_webhooks_container_additional_networks_auto: |-

  630.   {{

  631.     (

  632.       ([] if matrix_addons_homeserver_container_network == '' else [matrix_addons_homeserver_container_network])

  633.       +

  634.       ([matrix_playbook_reverse_proxyable_services_additional_network] if (matrix_playbook_reverse_proxyable_services_additional_network and matrix_appservice_webhooks_container_labels_traefik_enabled) else [])

  635.     ) | unique

  636.   }}

  637. 

  638. matrix_appservice_webhooks_container_labels_traefik_enabled: "{{ matrix_playbook_reverse_proxy_type in ['playbook-managed-traefik', 'other-traefik-container'] }}"

  639. matrix_appservice_webhooks_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  640. matrix_appservice_webhooks_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  641. matrix_appservice_webhooks_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  642. 

  643. matrix_appservice_webhooks_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'webhook.as.token', rounds=655555) | to_uuid }}"

  644. 

  645. matrix_appservice_webhooks_homeserver_url: "{{ matrix_addons_homeserver_client_api_url }}"

  646. matrix_appservice_webhooks_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'webhook.hs.token', rounds=655555) | to_uuid }}"

  647. 

  648. matrix_appservice_webhooks_id_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'webhook.id.token', rounds=655555) | to_uuid }}"

  649. 

  650. ######################################################################

  651. #

  652. # /matrix-appservice-webhooks

  653. #

  654. ######################################################################

  655. 

  656. 

  657. ######################################################################

  658. #

  659. # matrix-appservice-slack

  660. #

  661. ######################################################################

  662. 

  663. # We don't enable bridges by default.

  664. matrix_appservice_slack_enabled: false

  665. 

  666. matrix_appservice_slack_hostname: "{{ matrix_server_fqn_matrix }}"

  667. 

  668. matrix_appservice_slack_systemd_required_services_list_auto: |

  669.   {{

  670.     matrix_addons_homeserver_systemd_services_list

  671.     +

  672.     ([devture_postgres_identifier ~ '.service'] if (devture_postgres_enabled and matrix_appservice_slack_database_hostname == devture_postgres_connection_hostname) else [])

  673.   }}

  674. 

  675. matrix_appservice_slack_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"

  676. 

  677. matrix_appservice_slack_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ matrix_appservice_slack_slack_port) if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  678. 

  679. matrix_appservice_slack_container_network: "{{ matrix_addons_container_network }}"

  680. 

  681. matrix_appservice_slack_container_additional_networks_auto: |-

  682.   {{

  683.     (

  684.       ([] if matrix_addons_homeserver_container_network == '' else [matrix_addons_homeserver_container_network])

  685.       +

  686.       ([devture_postgres_container_network] if (devture_postgres_enabled and matrix_appservice_slack_database_hostname == devture_postgres_connection_hostname and matrix_appservice_slack_container_network != devture_postgres_container_network) else [])

  687.       +

  688.       ([matrix_playbook_reverse_proxyable_services_additional_network] if (matrix_playbook_reverse_proxyable_services_additional_network and matrix_appservice_slack_container_labels_traefik_enabled) else [])

  689.     ) | unique

  690.   }}

  691. 

  692. matrix_appservice_slack_container_labels_traefik_enabled: "{{ matrix_playbook_reverse_proxy_type in ['playbook-managed-traefik', 'other-traefik-container'] }}"

  693. matrix_appservice_slack_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  694. matrix_appservice_slack_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  695. matrix_appservice_slack_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  696. 

  697. matrix_appservice_slack_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'slack.as.token', rounds=655555) | to_uuid }}"

  698. 

  699. matrix_appservice_slack_homeserver_url: "{{ matrix_addons_homeserver_client_api_url }}"

  700. matrix_appservice_slack_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'slack.hs.token', rounds=655555) | to_uuid }}"

  701. 

  702. matrix_appservice_slack_id_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'slack.id.token', rounds=655555) | to_uuid }}"

  703. 

  704. # Postgres is the default, except if not using internal Postgres server

  705. matrix_appservice_slack_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'nedb' }}"

  706. matrix_appservice_slack_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  707. matrix_appservice_slack_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'as.slack.db', rounds=655555) | to_uuid }}"

  708. matrix_appservice_slack_database_container_network: "{{ devture_postgres_container_network if devture_postgres_enabled else '' }}"

  709. 

  710. ######################################################################

  711. #

  712. # /matrix-bridge-appservice-slack

  713. #

  714. ######################################################################

  715. 

  716. ######################################################################

  717. #

  718. # matrix-bridge-appservice-irc

  719. #

  720. ######################################################################

  721. 

  722. # We don't enable bridges by default.

  723. matrix_appservice_irc_enabled: false

  724. 

  725. matrix_appservice_irc_systemd_required_services_list_auto: |

  726.   {{

  727.     matrix_addons_homeserver_systemd_services_list

  728.     +

  729.     ([devture_postgres_identifier ~ '.service'] if (devture_postgres_enabled and matrix_appservice_irc_database_hostname == devture_postgres_connection_hostname) else [])

  730.   }}

  731. 

  732. matrix_appservice_irc_container_image_self_build: "{{ matrix_architecture != 'amd64' }}"

  733. 

  734. matrix_appservice_irc_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '9999') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  735. 

  736. matrix_appservice_irc_container_network: "{{ matrix_addons_container_network }}"

  737. 

  738. matrix_appservice_irc_container_additional_networks_auto: |-

  739.   {{

  740.     (

  741.       ([] if matrix_addons_homeserver_container_network == '' else [matrix_addons_homeserver_container_network])

  742.       +

  743.       ([devture_postgres_container_network] if (devture_postgres_enabled and matrix_appservice_irc_database_hostname == devture_postgres_connection_hostname and matrix_appservice_irc_container_network != devture_postgres_container_network) else [])

  744.     ) | unique

  745.   }}

  746. 

  747. # The IRC bridge docs say that if homeserver presence is disabled, it's better to also disable

  748. # IRC bridge presence, for performance reasons.

  749. matrix_appservice_irc_homeserver_enablePresence: "{{ matrix_synapse_presence_enabled }}"

  750. 

  751. matrix_appservice_irc_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'irc.as.token', rounds=655555) | to_uuid }}"

  752. 

  753. matrix_appservice_irc_homeserver_url: "{{ matrix_addons_homeserver_client_api_url }}"

  754. matrix_appservice_irc_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'irc.hs.token', rounds=655555) | to_uuid }}"

  755. 

  756. matrix_appservice_irc_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'nedb' }}"

  757. matrix_appservice_irc_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  758. matrix_appservice_irc_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'as.irc.db', rounds=655555) | to_uuid }}"

  759. matrix_appservice_irc_database_container_network: "{{ devture_postgres_container_network if devture_postgres_enabled else '' }}"

  760. 

  761. ######################################################################

  762. #

  763. # /matrix-bridge-appservice-irc

  764. #

  765. ######################################################################

  766. 

  767. ######################################################################

  768. #

  769. # matrix-bridge-appservice-kakaotalk

  770. #

  771. ######################################################################

  772. 

  773. # We don't enable bridges by default.

  774. matrix_appservice_kakaotalk_enabled: false

  775. 

  776. matrix_appservice_kakaotalk_systemd_required_services_list_auto: |

  777.   {{

  778.     matrix_addons_homeserver_systemd_services_list

  779.     +

  780.     ([devture_postgres_identifier ~ '.service'] if (devture_postgres_enabled and matrix_appservice_kakaotalk_database_hostname == devture_postgres_connection_hostname) else [])

  781.   }}

  782. 

  783. matrix_appservice_kakaotalk_container_network: "{{ matrix_addons_container_network }}"

  784. 

  785. matrix_appservice_kakaotalk_container_additional_networks_auto: |-

  786.   {{

  787.     (

  788.       ([] if matrix_addons_homeserver_container_network == '' else [matrix_addons_homeserver_container_network])

  789.       +

  790.       ([devture_postgres_container_network] if (devture_postgres_enabled and matrix_appservice_kakaotalk_database_hostname == devture_postgres_connection_hostname and matrix_appservice_kakaotalk_container_network != devture_postgres_container_network) else [])

  791.     ) | unique

  792.   }}

  793. 

  794. matrix_appservice_kakaotalk_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'as.kakao.hs', rounds=655555) | to_uuid }}"

  795. 

  796. matrix_appservice_kakaotalk_homeserver_address: "{{ matrix_addons_homeserver_client_api_url }}"

  797. matrix_appservice_kakaotalk_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'as.kakao.hs', rounds=655555) | to_uuid }}"

  798. 

  799. matrix_appservice_kakaotalk_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  800. 

  801. matrix_appservice_kakaotalk_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  802. matrix_appservice_kakaotalk_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  803. matrix_appservice_kakaotalk_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'as.kakao.db', rounds=655555) | to_uuid }}"

  804. 

  805. ######################################################################

  806. #

  807. # /matrix-bridge-appservice-kakaotalk

  808. #

  809. ######################################################################

  810. 

  811. 

  812. ######################################################################

  813. #

  814. # matrix-bridge-beeper-linkedin

  815. #

  816. ######################################################################

  817. 

  818. # We don't enable bridges by default.

  819. matrix_beeper_linkedin_enabled: false

  820. 

  821. matrix_beeper_linkedin_systemd_required_services_list_auto: |

  822.   {{

  823.     matrix_addons_homeserver_systemd_services_list

  824.     +

  825.     ([devture_postgres_identifier ~ '.service'] if (devture_postgres_enabled and matrix_beeper_linkedin_database_hostname == devture_postgres_connection_hostname) else [])

  826.   }}

  827. 

  828. matrix_beeper_linkedin_container_image_self_build: "{{ matrix_architecture not in ['amd64'] }}"

  829. 

  830. matrix_beeper_linkedin_container_network: "{{ matrix_addons_container_network }}"

  831. 

  832. matrix_beeper_linkedin_container_additional_networks_auto: |-

  833.   {{

  834.     (

  835.       ([] if matrix_addons_homeserver_container_network == '' else [matrix_addons_homeserver_container_network])

  836.       +

  837.       ([devture_postgres_container_network] if (devture_postgres_enabled and matrix_beeper_linkedin_database_hostname == devture_postgres_connection_hostname and matrix_beeper_linkedin_container_network != devture_postgres_container_network) else [])

  838.     ) | unique

  839.   }}

  840. 

  841. matrix_beeper_linkedin_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'linked.as.token', rounds=655555) | to_uuid }}"

  842. 

  843. matrix_beeper_linkedin_homeserver_address: "{{ matrix_addons_homeserver_client_api_url }}"

  844. matrix_beeper_linkedin_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'linked.hs.token', rounds=655555) | to_uuid }}"

  845. 

  846. matrix_beeper_linkedin_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  847. 

  848. matrix_beeper_linkedin_bridge_presence: "{{ matrix_synapse_presence_enabled if matrix_synapse_enabled else true }}"

  849. 

  850. matrix_beeper_linkedin_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  851. matrix_beeper_linkedin_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'maulinkedin.db', rounds=655555) | to_uuid }}"

  852. 

  853. ######################################################################

  854. #

  855. # /matrix-bridge-beeper-linkedin

  856. #

  857. ######################################################################

  858. 

  859. 

  860. ######################################################################

  861. #

  862. # matrix-bridge-go-skype-bridge

  863. #

  864. ######################################################################

  865. 

  866. # We don't enable bridges by default.

  867. matrix_go_skype_bridge_enabled: false

  868. 

  869. matrix_go_skype_bridge_systemd_required_services_list_auto: |

  870.   {{

  871.     matrix_addons_homeserver_systemd_services_list

  872.     +

  873.     ([devture_postgres_identifier ~ '.service'] if (devture_postgres_enabled and matrix_go_skype_bridge_database_hostname == devture_postgres_connection_hostname) else [])

  874.   }}

  875. 

  876. matrix_go_skype_bridge_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"

  877. 

  878. matrix_go_skype_bridge_container_network: "{{ matrix_addons_container_network }}"

  879. 

  880. matrix_go_skype_bridge_container_additional_networks_auto: |-

  881.   {{

  882.     (

  883.       ([] if matrix_addons_homeserver_container_network == '' else [matrix_addons_homeserver_container_network])

  884.       +

  885.       ([devture_postgres_container_network] if (devture_postgres_enabled and matrix_go_skype_bridge_database_hostname == devture_postgres_connection_hostname and matrix_go_skype_bridge_container_network != devture_postgres_container_network) else [])

  886.     ) | unique

  887.   }}

  888. 

  889. matrix_go_skype_bridge_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'skype.as.token', rounds=655555) | to_uuid }}"

  890. 

  891. matrix_go_skype_bridge_homeserver_address: "{{ matrix_addons_homeserver_client_api_url }}"

  892. matrix_go_skype_bridge_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'skype.hs.token', rounds=655555) | to_uuid }}"

  893. 

  894. matrix_go_skype_bridge_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  895. 

  896. # Postgres is the default, except if not using internal Postgres server

  897. matrix_go_skype_bridge_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  898. matrix_go_skype_bridge_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  899. matrix_go_skype_bridge_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'goskype.db', rounds=655555) | to_uuid }}"

  900. 

  901. ######################################################################

  902. #

  903. # /matrix-bridge-go-skype-bridge

  904. #

  905. ######################################################################

  906. 

  907. 

  908. ######################################################################

  909. #

  910. # matrix-bridge-mautrix-discord

  911. #

  912. ######################################################################

  913. 

  914. # We don't enable bridges by default.

  915. matrix_mautrix_discord_enabled: false

  916. 

  917. matrix_mautrix_discord_container_image_self_build: "{{ matrix_architecture not in ['arm64', 'amd64'] }}"

  918. 

  919. matrix_mautrix_discord_container_network: "{{ matrix_addons_container_network }}"

  920. 

  921. matrix_mautrix_discord_container_additional_networks_auto: |-

  922.   {{

  923.     (

  924.       ([] if matrix_addons_homeserver_container_network == '' else [matrix_addons_homeserver_container_network])

  925.       +

  926.       ([devture_postgres_container_network] if devture_postgres_enabled and matrix_mautrix_facebook_database_hostname == devture_postgres_connection_hostname else [])

  927.     ) | unique

  928.   }}

  929. 

  930. matrix_mautrix_discord_systemd_required_services_list_auto: |

  931.   {{

  932.     matrix_addons_homeserver_systemd_services_list

  933.     +

  934.     ([devture_postgres_identifier ~ '.service'] if (devture_postgres_enabled and matrix_mautrix_discord_database_hostname == devture_postgres_connection_hostname) else [])

  935.   }}

  936. 

  937. matrix_mautrix_discord_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'maudisc.as.tok', rounds=655555) | to_uuid }}"

  938. 

  939. matrix_mautrix_discord_homeserver_address: "{{ matrix_addons_homeserver_client_api_url }}"

  940. matrix_mautrix_discord_homeserver_public_address: "{{ 'https' if matrix_playbook_ssl_enabled else 'http' }}://{{ matrix_server_fqn_matrix }}"

  941. matrix_mautrix_discord_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'maudisc.hs.tok', rounds=655555) | to_uuid }}"

  942. 

  943. matrix_mautrix_discord_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  944. 

  945. # Postgres is the default, except if not using internal Postgres server

  946. matrix_mautrix_discord_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  947. matrix_mautrix_discord_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  948. matrix_mautrix_discord_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'maudiscord.db', rounds=655555) | to_uuid }}"

  949. 

  950. ######################################################################

  951. #

  952. # /matrix-bridge-mautrix-discord

  953. #

  954. ######################################################################

  955. 

  956. 

  957. ######################################################################

  958. #

  959. # matrix-bridge-mautrix-slack

  960. #

  961. ######################################################################

  962. 

  963. # We don't enable bridges by default.

  964. matrix_mautrix_slack_enabled: false

  965. 

  966. matrix_mautrix_slack_systemd_required_services_list_auto: |

  967.   {{

  968.     matrix_addons_homeserver_systemd_services_list

  969.     +

  970.     ([devture_postgres_identifier ~ '.service'] if (devture_postgres_enabled and matrix_mautrix_slack_database_hostname == devture_postgres_connection_hostname) else [])

  971.   }}

  972. 

  973. matrix_mautrix_slack_container_image_self_build: "{{ matrix_architecture not in ['arm64', 'amd64'] }}"

  974. 

  975. matrix_mautrix_slack_container_network: "{{ matrix_addons_container_network }}"

  976. 

  977. matrix_mautrix_slack_container_additional_networks_auto: |-

  978.   {{

  979.     (

  980.       ([] if matrix_addons_homeserver_container_network == '' else [matrix_addons_homeserver_container_network])

  981.       +

  982.       ([devture_postgres_container_network] if (devture_postgres_enabled and matrix_mautrix_slack_database_hostname == devture_postgres_connection_hostname and matrix_mautrix_slack_container_network != devture_postgres_container_network) else [])

  983.     ) | unique

  984.   }}

  985. 

  986. matrix_mautrix_slack_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mauslack.as.tok', rounds=655555) | to_uuid }}"

  987. 

  988. matrix_mautrix_slack_homeserver_address: "{{ matrix_addons_homeserver_client_api_url }}"

  989. matrix_mautrix_slack_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mauslack.hs.tok', rounds=655555) | to_uuid }}"

  990. 

  991. matrix_mautrix_slack_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  992. 

  993. # Postgres is the default, except if not using internal Postgres server

  994. matrix_mautrix_slack_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  995. matrix_mautrix_slack_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  996. matrix_mautrix_slack_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mauslack.db', rounds=655555) | to_uuid }}"

  997. 

  998. ######################################################################

  999. #

  1000. # /matrix-bridge-mautrix-slack

  1001. #

  1002. ######################################################################

  1003. 

  1004. 

  1005. ######################################################################

  1006. #

  1007. # matrix-bridge-mautrix-facebook

  1008. #

  1009. ######################################################################

  1010. 

  1011. # We don't enable bridges by default.

  1012. matrix_mautrix_facebook_enabled: false

  1013. 

  1014. matrix_mautrix_facebook_systemd_required_services_list_auto: |

  1015.   {{

  1016.     matrix_addons_homeserver_systemd_services_list

  1017.     +

  1018.     ([devture_postgres_identifier ~ '.service'] if (devture_postgres_enabled and matrix_mautrix_facebook_database_hostname == devture_postgres_connection_hostname) else [])

  1019.   }}

  1020. 

  1021. matrix_mautrix_facebook_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"

  1022. 

  1023. matrix_mautrix_facebook_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '9008') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  1024. 

  1025. matrix_mautrix_facebook_container_network: "{{ matrix_addons_container_network }}"

  1026. 

  1027. matrix_mautrix_facebook_container_additional_networks_auto: |-

  1028.   {{

  1029.     (

  1030.       ([] if matrix_addons_homeserver_container_network == '' else [matrix_addons_homeserver_container_network])

  1031.       +

  1032.       ([devture_postgres_container_network] if (devture_postgres_enabled and matrix_mautrix_facebook_database_hostname == devture_postgres_connection_hostname and matrix_mautrix_facebook_container_network != devture_postgres_container_network) else [])

  1033.       +

  1034.       ([matrix_playbook_reverse_proxyable_services_additional_network] if (matrix_playbook_reverse_proxyable_services_additional_network and matrix_mautrix_facebook_container_labels_traefik_enabled) else [])

  1035.     ) | unique

  1036.   }}

  1037. 

  1038. matrix_mautrix_facebook_container_labels_traefik_enabled: "{{ matrix_playbook_reverse_proxy_type in ['playbook-managed-traefik', 'other-traefik-container'] }}"

  1039. matrix_mautrix_facebook_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  1040. matrix_mautrix_facebook_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  1041. matrix_mautrix_facebook_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  1042. 

  1043. matrix_mautrix_facebook_container_labels_metrics_middleware_basic_auth_enabled: "{{ matrix_metrics_exposure_http_basic_auth_enabled }}"

  1044. matrix_mautrix_facebook_container_labels_metrics_middleware_basic_auth_users: "{{ matrix_metrics_exposure_http_basic_auth_users }}"

  1045. 

  1046. matrix_mautrix_facebook_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'fb.as.token', rounds=655555) | to_uuid }}"

  1047. 

  1048. matrix_mautrix_facebook_homeserver_address: "{{ matrix_addons_homeserver_client_api_url }}"

  1049. 

  1050. matrix_mautrix_facebook_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'fb.hs.token', rounds=655555) | to_uuid }}"

  1051. 

  1052. matrix_mautrix_facebook_appservice_public_enabled: true

  1053. matrix_mautrix_facebook_appservice_public_hostname: "{{ matrix_server_fqn_matrix }}"

  1054. matrix_mautrix_facebook_appservice_public_prefix: "/{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'facebook', rounds=655555) | to_uuid }}"

  1055. 

  1056. matrix_mautrix_facebook_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  1057. 

  1058. matrix_mautrix_facebook_bridge_presence: "{{ matrix_synapse_presence_enabled if matrix_synapse_enabled else true }}"

  1059. 

  1060. matrix_mautrix_facebook_metrics_enabled: "{{ prometheus_enabled or matrix_metrics_exposure_enabled }}"

  1061. 

  1062. matrix_mautrix_facebook_metrics_proxying_enabled: "{{ matrix_mautrix_facebook_metrics_enabled and matrix_metrics_exposure_enabled }}"

  1063. matrix_mautrix_facebook_metrics_proxying_hostname: "{{ matrix_metrics_exposure_hostname }}"

  1064. matrix_mautrix_facebook_metrics_proxying_path_prefix: "{{ matrix_metrics_exposure_path_prefix }}/mautrix-facebook"

  1065. 

  1066. # We'd like to force-set people with external Postgres to SQLite, so the bridge role can complain

  1067. # and point them to a migration path.

  1068. matrix_mautrix_facebook_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  1069. matrix_mautrix_facebook_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1070. matrix_mautrix_facebook_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mau.fb.db', rounds=655555) | to_uuid }}"

  1071. 

  1072. ######################################################################

  1073. #

  1074. # /matrix-bridge-mautrix-facebook

  1075. #

  1076. ######################################################################

  1077. 

  1078. 

  1079. ######################################################################

  1080. #

  1081. # matrix-bridge-mautrix-googlechat

  1082. #

  1083. ######################################################################

  1084. 

  1085. # We don't enable bridges by default.

  1086. matrix_mautrix_googlechat_enabled: false

  1087. 

  1088. matrix_mautrix_googlechat_systemd_required_services_list_auto: |

  1089.   {{

  1090.     matrix_addons_homeserver_systemd_services_list

  1091.     +

  1092.     ([devture_postgres_identifier ~ '.service'] if (devture_postgres_enabled and matrix_mautrix_googlechat_database_hostname == devture_postgres_connection_hostname) else [])

  1093.   }}

  1094. 

  1095. matrix_mautrix_googlechat_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"

  1096. 

  1097. matrix_mautrix_googlechat_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '9007') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  1098. 

  1099. matrix_mautrix_googlechat_container_network: "{{ matrix_addons_container_network }}"

  1100. 

  1101. matrix_mautrix_googlechat_container_additional_networks_auto: |-

  1102.   {{

  1103.     (

  1104.       ([] if matrix_addons_homeserver_container_network == '' else [matrix_addons_homeserver_container_network])

  1105.       +

  1106.       ([devture_postgres_container_network] if (devture_postgres_enabled and matrix_mautrix_googlechat_database_hostname == devture_postgres_connection_hostname and matrix_mautrix_googlechat_container_network != devture_postgres_container_network) else [])

  1107.       +

  1108.       ([matrix_playbook_reverse_proxyable_services_additional_network] if (matrix_playbook_reverse_proxyable_services_additional_network and matrix_mautrix_gmessages_container_labels_traefik_enabled) else [])

  1109.     ) | unique

  1110.   }}

  1111. 

  1112. matrix_mautrix_googlechat_container_labels_traefik_enabled: "{{ matrix_playbook_reverse_proxy_type in ['playbook-managed-traefik', 'other-traefik-container'] }}"

  1113. matrix_mautrix_googlechat_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  1114. matrix_mautrix_googlechat_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  1115. matrix_mautrix_googlechat_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  1116. 

  1117. matrix_mautrix_googlechat_container_labels_public_endpoint_hostname: "{{ matrix_server_fqn_matrix }}"

  1118. 

  1119. matrix_mautrix_googlechat_container_labels_metrics_middleware_basic_auth_enabled: "{{ matrix_metrics_exposure_http_basic_auth_enabled }}"

  1120. matrix_mautrix_googlechat_container_labels_metrics_middleware_basic_auth_users: "{{ matrix_metrics_exposure_http_basic_auth_users }}"

  1121. 

  1122. matrix_mautrix_googlechat_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'gc.as.token', rounds=655555) | to_uuid }}"

  1123. 

  1124. matrix_mautrix_googlechat_homeserver_address: "{{ matrix_addons_homeserver_client_api_url }}"

  1125. matrix_mautrix_googlechat_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'gc.hs.token', rounds=655555) | to_uuid }}"

  1126. 

  1127. matrix_mautrix_googlechat_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  1128. 

  1129. matrix_mautrix_googlechat_metrics_enabled: "{{ prometheus_enabled or matrix_metrics_exposure_enabled }}"

  1130. 

  1131. matrix_mautrix_googlechat_metrics_proxying_enabled: "{{ matrix_mautrix_googlechat_metrics_enabled and matrix_metrics_exposure_enabled }}"

  1132. matrix_mautrix_googlechat_metrics_proxying_hostname: "{{ matrix_metrics_exposure_hostname }}"

  1133. matrix_mautrix_googlechat_metrics_proxying_path_prefix: "{{ matrix_metrics_exposure_path_prefix }}/mautrix-googlechat"

  1134. 

  1135. # Postgres is the default, except if not using internal Postgres server

  1136. matrix_mautrix_googlechat_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  1137. matrix_mautrix_googlechat_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1138. matrix_mautrix_googlechat_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mau.gc.db', rounds=655555) | to_uuid }}"

  1139. 

  1140. ######################################################################

  1141. #

  1142. # /matrix-bridge-mautrix-googlechat

  1143. #

  1144. ######################################################################

  1145. 

  1146. 

  1147. ######################################################################

  1148. #

  1149. # matrix-bridge-mautrix-hangouts

  1150. #

  1151. ######################################################################

  1152. 

  1153. # We don't enable bridges by default.

  1154. matrix_mautrix_hangouts_enabled: false

  1155. 

  1156. matrix_mautrix_hangouts_systemd_required_services_list_auto: |

  1157.   {{

  1158.     matrix_addons_homeserver_systemd_services_list

  1159.     +

  1160.     ([devture_postgres_identifier ~ '.service'] if (devture_postgres_enabled and matrix_mautrix_hangouts_database_hostname == devture_postgres_connection_hostname) else [])

  1161.   }}

  1162. 

  1163. matrix_mautrix_hangouts_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"

  1164. 

  1165. matrix_mautrix_hangouts_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '9007') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  1166. 

  1167. matrix_mautrix_hangouts_container_network: "{{ matrix_addons_container_network }}"

  1168. 

  1169. matrix_mautrix_hangouts_container_additional_networks_auto: |-

  1170.   {{

  1171.     (

  1172.       ([] if matrix_addons_homeserver_container_network == '' else [matrix_addons_homeserver_container_network])

  1173.       +

  1174.       ([devture_postgres_container_network] if (devture_postgres_enabled and matrix_mautrix_hangouts_database_hostname == devture_postgres_connection_hostname and matrix_mautrix_hangouts_container_network != devture_postgres_container_network) else [])

  1175.       +

  1176.       ([matrix_playbook_reverse_proxyable_services_additional_network] if (matrix_playbook_reverse_proxyable_services_additional_network and matrix_mautrix_gmessages_container_labels_traefik_enabled) else [])

  1177.     ) | unique

  1178.   }}

  1179. 

  1180. matrix_mautrix_hangouts_container_labels_traefik_enabled: "{{ matrix_playbook_reverse_proxy_type in ['playbook-managed-traefik', 'other-traefik-container'] }}"

  1181. matrix_mautrix_hangouts_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  1182. matrix_mautrix_hangouts_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  1183. matrix_mautrix_hangouts_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  1184. 

  1185. matrix_mautrix_hangouts_container_labels_public_endpoint_hostname: "{{ matrix_server_fqn_matrix }}"

  1186. 

  1187. matrix_mautrix_hangouts_container_labels_metrics_middleware_basic_auth_enabled: "{{ matrix_metrics_exposure_http_basic_auth_enabled }}"

  1188. matrix_mautrix_hangouts_container_labels_metrics_middleware_basic_auth_users: "{{ matrix_metrics_exposure_http_basic_auth_users }}"

  1189. 

  1190. matrix_mautrix_hangouts_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'ho.as.token', rounds=655555) | to_uuid }}"

  1191. 

  1192. matrix_mautrix_hangouts_homeserver_address: "{{ matrix_addons_homeserver_client_api_url }}"

  1193. matrix_mautrix_hangouts_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'ho.hs.token', rounds=655555) | to_uuid }}"

  1194. 

  1195. matrix_mautrix_hangouts_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  1196. 

  1197. matrix_mautrix_hangouts_metrics_enabled: "{{ prometheus_enabled or matrix_metrics_exposure_enabled }}"

  1198. 

  1199. matrix_mautrix_hangouts_metrics_proxying_enabled: "{{ matrix_mautrix_hangouts_metrics_enabled and matrix_metrics_exposure_enabled }}"

  1200. matrix_mautrix_hangouts_metrics_proxying_hostname: "{{ matrix_metrics_exposure_hostname }}"

  1201. matrix_mautrix_hangouts_metrics_proxying_path_prefix: "{{ matrix_metrics_exposure_path_prefix }}/mautrix-hangouts"

  1202. 

  1203. # Postgres is the default, except if not using internal Postgres server

  1204. matrix_mautrix_hangouts_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  1205. matrix_mautrix_hangouts_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1206. matrix_mautrix_hangouts_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mau.hangouts.db', rounds=655555) | to_uuid }}"

  1207. 

  1208. ######################################################################

  1209. #

  1210. # /matrix-bridge-mautrix-hangouts

  1211. #

  1212. ######################################################################

  1213. 

  1214. 

  1215. ######################################################################

  1216. #

  1217. # matrix-bridge-mautrix-instagram

  1218. #

  1219. ######################################################################

  1220. 

  1221. # We don't enable bridges by default.

  1222. matrix_mautrix_instagram_enabled: false

  1223. 

  1224. matrix_mautrix_instagram_systemd_required_services_list_auto: |

  1225.   {{

  1226.     matrix_addons_homeserver_systemd_services_list

  1227.     +

  1228.     ([devture_postgres_identifier ~ '.service'] if (devture_postgres_enabled and matrix_mautrix_instagram_database_hostname == devture_postgres_connection_hostname) else [])

  1229.   }}

  1230. 

  1231. matrix_mautrix_instagram_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"

  1232. 

  1233. matrix_mautrix_instagram_container_network: "{{ matrix_addons_container_network }}"

  1234. 

  1235. matrix_mautrix_instagram_container_additional_networks_auto: |-

  1236.   {{

  1237.     (

  1238.       ([] if matrix_addons_homeserver_container_network == '' else [matrix_addons_homeserver_container_network])

  1239.       +

  1240.       ([devture_postgres_container_network] if (devture_postgres_enabled and matrix_mautrix_instagram_database_hostname == devture_postgres_connection_hostname and matrix_mautrix_instagram_container_network != devture_postgres_container_network) else [])

  1241.       +

  1242.       ([matrix_playbook_reverse_proxyable_services_additional_network] if matrix_playbook_reverse_proxyable_services_additional_network and matrix_mautrix_instagram_container_labels_traefik_enabled else [])

  1243.     ) | unique

  1244.   }}

  1245. 

  1246. matrix_mautrix_instagram_container_labels_traefik_enabled: "{{ matrix_playbook_reverse_proxy_type in ['playbook-managed-traefik', 'other-traefik-container'] }}"

  1247. matrix_mautrix_instagram_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  1248. matrix_mautrix_instagram_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  1249. matrix_mautrix_instagram_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  1250. 

  1251. matrix_mautrix_instagram_container_labels_metrics_middleware_basic_auth_enabled: "{{ matrix_metrics_exposure_http_basic_auth_enabled }}"

  1252. matrix_mautrix_instagram_container_labels_metrics_middleware_basic_auth_users: "{{ matrix_metrics_exposure_http_basic_auth_users }}"

  1253. 

  1254. matrix_mautrix_instagram_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'ig.as.token', rounds=655555) | to_uuid }}"

  1255. 

  1256. matrix_mautrix_instagram_homeserver_address: "{{ matrix_addons_homeserver_client_api_url }}"

  1257. matrix_mautrix_instagram_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'ig.hs.token', rounds=655555) | to_uuid }}"

  1258. 

  1259. matrix_mautrix_instagram_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  1260. 

  1261. matrix_mautrix_instagram_bridge_presence: "{{ matrix_synapse_presence_enabled if matrix_synapse_enabled else true }}"

  1262. 

  1263. matrix_mautrix_instagram_metrics_enabled: "{{ prometheus_enabled or matrix_metrics_exposure_enabled }}"

  1264. 

  1265. matrix_mautrix_instagram_metrics_proxying_enabled: "{{ matrix_mautrix_instagram_metrics_enabled and matrix_metrics_exposure_enabled }}"

  1266. matrix_mautrix_instagram_metrics_proxying_hostname: "{{ matrix_metrics_exposure_hostname }}"

  1267. matrix_mautrix_instagram_metrics_proxying_path_prefix: "{{ matrix_metrics_exposure_path_prefix }}/mautrix-instagram"

  1268. 

  1269. # We'd like to force-set people with external Postgres to SQLite, so the bridge role can complain

  1270. # and point them to a migration path.

  1271. matrix_mautrix_instagram_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  1272. matrix_mautrix_instagram_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1273. matrix_mautrix_instagram_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mau.ig.db', rounds=655555) | to_uuid }}"

  1274. 

  1275. ######################################################################

  1276. #

  1277. # /matrix-bridge-mautrix-instagram

  1278. #

  1279. ######################################################################

  1280. 

  1281. ######################################################################

  1282. #

  1283. # matrix-bridge-mautrix-signal

  1284. #

  1285. ######################################################################

  1286. 

  1287. # We don't enable bridges by default.

  1288. matrix_mautrix_signal_enabled: false

  1289. 

  1290. matrix_mautrix_signal_systemd_required_services_list_auto: |

  1291.   {{

  1292.     matrix_addons_homeserver_systemd_services_list

  1293.     +

  1294.     ([devture_postgres_identifier ~ '.service'] if (devture_postgres_enabled and matrix_mautrix_signal_database_hostname == devture_postgres_connection_hostname) else [])

  1295.   }}

  1296. 

  1297. matrix_mautrix_signal_container_image_self_build: "{{ matrix_architecture not in ['arm64', 'amd64'] }}"

  1298. 

  1299. matrix_mautrix_signal_container_network: "{{ matrix_addons_container_network }}"

  1300. 

  1301. matrix_mautrix_signal_container_additional_networks_auto: |-

  1302.   {{

  1303.     (

  1304.       ([] if matrix_addons_homeserver_container_network == '' else [matrix_addons_homeserver_container_network])

  1305.       +

  1306.       ([devture_postgres_container_network] if (devture_postgres_enabled and matrix_mautrix_signal_database_hostname == devture_postgres_connection_hostname and matrix_mautrix_signal_container_network != devture_postgres_container_network) else [])

  1307.       +

  1308.       ([matrix_playbook_reverse_proxyable_services_additional_network] if matrix_playbook_reverse_proxyable_services_additional_network and matrix_mautrix_signal_container_labels_traefik_enabled else [])

  1309.     ) | unique

  1310.   }}

  1311. 

  1312. matrix_mautrix_signal_container_labels_traefik_enabled: "{{ matrix_playbook_reverse_proxy_type in ['playbook-managed-traefik', 'other-traefik-container'] }}"

  1313. matrix_mautrix_signal_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  1314. matrix_mautrix_signal_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  1315. matrix_mautrix_signal_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  1316. 

  1317. matrix_mautrix_signal_container_labels_metrics_middleware_basic_auth_enabled: "{{ matrix_metrics_exposure_http_basic_auth_enabled }}"

  1318. matrix_mautrix_signal_container_labels_metrics_middleware_basic_auth_users: "{{ matrix_metrics_exposure_http_basic_auth_users }}"

  1319. 

  1320. matrix_mautrix_signal_homeserver_domain: '{{ matrix_domain }}'

  1321. matrix_mautrix_signal_homeserver_address: "{{ matrix_addons_homeserver_client_api_url }}"

  1322. matrix_mautrix_signal_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'si.hs.token', rounds=655555) | to_uuid }}"

  1323. 

  1324. matrix_mautrix_signal_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'si.as.token', rounds=655555) | to_uuid }}"

  1325. 

  1326. matrix_mautrix_signal_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  1327. 

  1328. matrix_mautrix_signal_metrics_enabled: "{{ prometheus_enabled or matrix_metrics_exposure_enabled }}"

  1329. 

  1330. matrix_mautrix_signal_metrics_proxying_enabled: "{{ matrix_mautrix_signal_metrics_enabled and matrix_metrics_exposure_enabled }}"

  1331. matrix_mautrix_signal_metrics_proxying_hostname: "{{ matrix_metrics_exposure_hostname }}"

  1332. matrix_mautrix_signal_metrics_proxying_path_prefix: "{{ matrix_metrics_exposure_path_prefix }}/mautrix-signal"

  1333. 

  1334. matrix_mautrix_signal_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  1335. matrix_mautrix_signal_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1336. matrix_mautrix_signal_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mau.signal.db', rounds=655555) | to_uuid }}"

  1337. 

  1338. ######################################################################

  1339. #

  1340. # /matrix-bridge-mautrix-signal

  1341. #

  1342. ######################################################################

  1343. 

  1344. 

  1345. ######################################################################

  1346. #

  1347. # matrix-bridge-mautrix-meta-messenger

  1348. #

  1349. ######################################################################

  1350. 

  1351. # We don't enable bridges by default.

  1352. matrix_mautrix_meta_messenger_enabled: false

  1353. 

  1354. matrix_mautrix_meta_messenger_systemd_required_services_list_auto: |

  1355.   {{

  1356.     matrix_addons_homeserver_systemd_services_list

  1357.     +

  1358.     ([devture_postgres_identifier ~ '.service'] if (devture_postgres_enabled and matrix_mautrix_meta_messenger_database_hostname == devture_postgres_connection_hostname) else [])

  1359.   }}

  1360. 

  1361. matrix_mautrix_meta_messenger_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"

  1362. 

  1363. matrix_mautrix_meta_messenger_container_network: "{{ matrix_addons_container_network }}"

  1364. 

  1365. matrix_mautrix_meta_messenger_container_additional_networks_auto: |-

  1366.   {{

  1367.     (

  1368.       ([] if matrix_addons_homeserver_container_network == '' else [matrix_addons_homeserver_container_network])

  1369.       +

  1370.       ([devture_postgres_container_network] if (devture_postgres_enabled and matrix_mautrix_meta_messenger_database_hostname == devture_postgres_connection_hostname and matrix_mautrix_meta_messenger_container_network != devture_postgres_container_network) else [])

  1371.       +

  1372.       ([matrix_playbook_reverse_proxyable_services_additional_network] if (matrix_playbook_reverse_proxyable_services_additional_network and matrix_mautrix_meta_messenger_container_labels_traefik_enabled) else [])

  1373.     ) | unique

  1374.   }}

  1375. 

  1376. matrix_mautrix_meta_messenger_container_labels_traefik_enabled: "{{ matrix_playbook_reverse_proxy_type in ['playbook-managed-traefik', 'other-traefik-container'] }}"

  1377. matrix_mautrix_meta_messenger_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  1378. matrix_mautrix_meta_messenger_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  1379. matrix_mautrix_meta_messenger_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  1380. 

  1381. matrix_mautrix_meta_messenger_container_labels_metrics_middleware_basic_auth_enabled: "{{ matrix_metrics_exposure_http_basic_auth_enabled }}"

  1382. matrix_mautrix_meta_messenger_container_labels_metrics_middleware_basic_auth_users: "{{ matrix_metrics_exposure_http_basic_auth_users }}"

  1383. 

  1384. matrix_mautrix_meta_messenger_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mau.meta.fb.as', rounds=655555) | to_uuid }}"

  1385. 

  1386. matrix_mautrix_meta_messenger_homeserver_address: "{{ matrix_addons_homeserver_client_api_url }}"

  1387. 

  1388. matrix_mautrix_meta_messenger_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mau.meta.fb.hs', rounds=655555) | to_uuid }}"

  1389. 

  1390. matrix_mautrix_meta_messenger_bridge_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  1391. 

  1392. matrix_mautrix_meta_messenger_metrics_enabled: "{{ prometheus_enabled or matrix_metrics_exposure_enabled }}"

  1393. 

  1394. matrix_mautrix_meta_messenger_metrics_proxying_enabled: "{{ matrix_mautrix_meta_messenger_metrics_enabled and matrix_metrics_exposure_enabled }}"

  1395. matrix_mautrix_meta_messenger_metrics_proxying_hostname: "{{ matrix_metrics_exposure_hostname }}"

  1396. matrix_mautrix_meta_messenger_metrics_proxying_path_prefix: "{{ matrix_metrics_exposure_path_prefix }}/mautrix-meta-messenger"

  1397. 

  1398. # We'd like to force-set people with external Postgres to SQLite, so the bridge role can complain

  1399. # and point them to a migration path.

  1400. matrix_mautrix_meta_messenger_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite3-fk-wal' }}"

  1401. matrix_mautrix_meta_messenger_database_hostname: "{{ devture_postgres_connection_hostname if (devture_postgres_enabled and matrix_mautrix_meta_messenger_database_engine == 'postgres') else '' }}"

  1402. matrix_mautrix_meta_messenger_database_password: "{{ ('%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mau.fb.db', rounds=655555) | to_uuid) if (devture_postgres_enabled and matrix_mautrix_meta_messenger_database_engine == 'postgres') else '' }}"

  1403. 

  1404. ######################################################################

  1405. #

  1406. # /matrix-bridge-mautrix-meta-messenger

  1407. #

  1408. ######################################################################

  1409. 

  1410. 

  1411. 

  1412. ######################################################################

  1413. #

  1414. # matrix-bridge-mautrix-meta-instagram

  1415. #

  1416. ######################################################################

  1417. 

  1418. # We don't enable bridges by default.

  1419. matrix_mautrix_meta_instagram_enabled: false

  1420. 

  1421. matrix_mautrix_meta_instagram_systemd_required_services_list_auto: |

  1422.   {{

  1423.     matrix_addons_homeserver_systemd_services_list

  1424.     +

  1425.     ([devture_postgres_identifier ~ '.service'] if (devture_postgres_enabled and matrix_mautrix_meta_instagram_database_hostname == devture_postgres_connection_hostname) else [])

  1426.   }}

  1427. 

  1428. matrix_mautrix_meta_instagram_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"

  1429. 

  1430. matrix_mautrix_meta_instagram_container_network: "{{ matrix_addons_container_network }}"

  1431. 

  1432. matrix_mautrix_meta_instagram_container_additional_networks_auto: |-

  1433.   {{

  1434.     (

  1435.       ([] if matrix_addons_homeserver_container_network == '' else [matrix_addons_homeserver_container_network])

  1436.       +

  1437.       ([devture_postgres_container_network] if (devture_postgres_enabled and matrix_mautrix_meta_instagram_database_hostname == devture_postgres_connection_hostname and matrix_mautrix_meta_instagram_container_network != devture_postgres_container_network) else [])

  1438.       +

  1439.       ([matrix_playbook_reverse_proxyable_services_additional_network] if (matrix_playbook_reverse_proxyable_services_additional_network and matrix_mautrix_meta_instagram_container_labels_traefik_enabled) else [])

  1440.     ) | unique

  1441.   }}

  1442. 

  1443. matrix_mautrix_meta_instagram_container_labels_traefik_enabled: "{{ matrix_playbook_reverse_proxy_type in ['playbook-managed-traefik', 'other-traefik-container'] }}"

  1444. matrix_mautrix_meta_instagram_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  1445. matrix_mautrix_meta_instagram_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  1446. matrix_mautrix_meta_instagram_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  1447. 

  1448. matrix_mautrix_meta_instagram_container_labels_metrics_middleware_basic_auth_enabled: "{{ matrix_metrics_exposure_http_basic_auth_enabled }}"

  1449. matrix_mautrix_meta_instagram_container_labels_metrics_middleware_basic_auth_users: "{{ matrix_metrics_exposure_http_basic_auth_users }}"

  1450. 

  1451. matrix_mautrix_meta_instagram_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mau.meta.ig.as', rounds=655555) | to_uuid }}"

  1452. 

  1453. matrix_mautrix_meta_instagram_homeserver_address: "{{ matrix_addons_homeserver_client_api_url }}"

  1454. 

  1455. matrix_mautrix_meta_instagram_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mau.meta.ig.hs', rounds=655555) | to_uuid }}"

  1456. 

  1457. matrix_mautrix_meta_instagram_bridge_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  1458. 

  1459. matrix_mautrix_meta_instagram_metrics_enabled: "{{ prometheus_enabled or matrix_metrics_exposure_enabled }}"

  1460. 

  1461. matrix_mautrix_meta_instagram_metrics_proxying_enabled: "{{ matrix_mautrix_meta_instagram_metrics_enabled and matrix_metrics_exposure_enabled }}"

  1462. matrix_mautrix_meta_instagram_metrics_proxying_hostname: "{{ matrix_metrics_exposure_hostname }}"

  1463. matrix_mautrix_meta_instagram_metrics_proxying_path_prefix: "{{ matrix_metrics_exposure_path_prefix }}/mautrix-meta-instagram"

  1464. 

  1465. # We'd like to force-set people with external Postgres to SQLite, so the bridge role can complain

  1466. # and point them to a migration path.

  1467. matrix_mautrix_meta_instagram_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite3-fk-wal' }}"

  1468. matrix_mautrix_meta_instagram_database_hostname: "{{ devture_postgres_connection_hostname if (devture_postgres_enabled and matrix_mautrix_meta_instagram_database_engine == 'postgres') else '' }}"

  1469. matrix_mautrix_meta_instagram_database_password: "{{ ('%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mau.fb.db', rounds=655555) | to_uuid) if (devture_postgres_enabled and matrix_mautrix_meta_instagram_database_engine == 'postgres') else '' }}"

  1470. 

  1471. ######################################################################

  1472. #

  1473. # /matrix-bridge-mautrix-meta-instagram

  1474. #

  1475. ######################################################################

  1476. 

  1477. 

  1478. ######################################################################

  1479. #

  1480. # matrix-bridge-mautrix-telegram

  1481. #

  1482. ######################################################################

  1483. 

  1484. # We don't enable bridges by default.

  1485. matrix_mautrix_telegram_enabled: false

  1486. 

  1487. matrix_mautrix_telegram_hostname: "{{ matrix_server_fqn_matrix }}"

  1488. matrix_mautrix_telegram_path_prefix: "/{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'telegram', rounds=655555) | to_uuid }}"

  1489. 

  1490. matrix_mautrix_telegram_systemd_required_services_list_auto: |

  1491.   {{

  1492.     matrix_addons_homeserver_systemd_services_list

  1493.     +

  1494.     ([devture_postgres_identifier ~ '.service'] if (devture_postgres_enabled and matrix_mautrix_telegram_database_hostname == devture_postgres_connection_hostname) else [])

  1495.   }}

  1496. 

  1497. # Images are multi-arch (amd64 and arm64, but not arm32).

  1498. matrix_mautrix_telegram_container_image_self_build: "{{ matrix_architecture not in ['arm64', 'amd64'] }}"

  1499. matrix_telegram_lottieconverter_container_image_self_build: "{{ matrix_architecture not in ['arm64', 'amd64'] }}"

  1500. matrix_telegram_lottieconverter_container_image_self_build_mask_arch: "{{ matrix_architecture != 'amd64' }}"

  1501. 

  1502. matrix_mautrix_telegram_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '9006') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  1503. 

  1504. matrix_mautrix_telegram_container_network: "{{ matrix_addons_container_network }}"

  1505. 

  1506. matrix_mautrix_telegram_container_additional_networks_auto: |-

  1507.   {{

  1508.     (

  1509.       ([] if matrix_addons_homeserver_container_network == '' else [matrix_addons_homeserver_container_network])

  1510.       +

  1511.       ([devture_postgres_container_network] if (devture_postgres_enabled and matrix_mautrix_telegram_database_hostname == devture_postgres_connection_hostname and matrix_mautrix_telegram_container_network != devture_postgres_container_network) else [])

  1512.       +

  1513.       ([matrix_playbook_reverse_proxyable_services_additional_network] if (matrix_playbook_reverse_proxyable_services_additional_network and matrix_mautrix_telegram_container_labels_traefik_enabled) else [])

  1514.     ) | unique

  1515.   }}

  1516. 

  1517. matrix_mautrix_telegram_container_labels_traefik_enabled: "{{ matrix_playbook_reverse_proxy_type in ['playbook-managed-traefik', 'other-traefik-container'] }}"

  1518. matrix_mautrix_telegram_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  1519. matrix_mautrix_telegram_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  1520. matrix_mautrix_telegram_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  1521. 

  1522. matrix_mautrix_telegram_container_labels_metrics_middleware_basic_auth_enabled: "{{ matrix_metrics_exposure_http_basic_auth_enabled }}"

  1523. matrix_mautrix_telegram_container_labels_metrics_middleware_basic_auth_users: "{{ matrix_metrics_exposure_http_basic_auth_users }}"

  1524. 

  1525. matrix_mautrix_telegram_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'telegr.as.token', rounds=655555) | to_uuid }}"

  1526. 

  1527. matrix_mautrix_telegram_homeserver_domain: "{{ matrix_domain }}"

  1528. matrix_mautrix_telegram_homeserver_address: "{{ matrix_addons_homeserver_client_api_url }}"

  1529. matrix_mautrix_telegram_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'telegr.hs.token', rounds=655555) | to_uuid }}"

  1530. 

  1531. matrix_mautrix_telegram_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  1532. 

  1533. matrix_mautrix_telegram_metrics_enabled: "{{ prometheus_enabled or matrix_metrics_exposure_enabled }}"

  1534. 

  1535. matrix_mautrix_telegram_metrics_proxying_enabled: "{{ matrix_mautrix_telegram_metrics_enabled and matrix_metrics_exposure_enabled }}"

  1536. matrix_mautrix_telegram_metrics_proxying_hostname: "{{ matrix_metrics_exposure_hostname }}"

  1537. matrix_mautrix_telegram_metrics_proxying_path_prefix: "{{ matrix_metrics_exposure_path_prefix }}/mautrix-telegram"

  1538. 

  1539. # Postgres is the default, except if not using internal Postgres server

  1540. matrix_mautrix_telegram_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  1541. matrix_mautrix_telegram_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1542. matrix_mautrix_telegram_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mau.telegram.db', rounds=655555) | to_uuid }}"

  1543. 

  1544. ######################################################################

  1545. #

  1546. # /matrix-bridge-mautrix-telegram

  1547. #

  1548. ######################################################################

  1549. 

  1550. ######################################################################

  1551. #

  1552. # matrix-bridge-mautrix-twitter

  1553. #

  1554. ######################################################################

  1555. 

  1556. # We don't enable bridges by default.

  1557. matrix_mautrix_twitter_enabled: false

  1558. 

  1559. matrix_mautrix_twitter_systemd_required_services_list_auto: |

  1560.   {{

  1561.     matrix_addons_homeserver_systemd_services_list

  1562.     +

  1563.     ([devture_postgres_identifier ~ '.service'] if (devture_postgres_enabled and matrix_mautrix_twitter_database_hostname == devture_postgres_connection_hostname) else [])

  1564.   }}

  1565. 

  1566. matrix_mautrix_twitter_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"

  1567. 

  1568. matrix_mautrix_twitter_container_network: "{{ matrix_addons_container_network }}"

  1569. 

  1570. matrix_mautrix_twitter_container_additional_networks_auto: |-

  1571.   {{

  1572.     (

  1573.       ([] if matrix_addons_homeserver_container_network == '' else [matrix_addons_homeserver_container_network])

  1574.       +

  1575.       ([devture_postgres_container_network] if (devture_postgres_enabled and matrix_mautrix_twitter_database_hostname == devture_postgres_connection_hostname and matrix_mautrix_twitter_container_network != devture_postgres_container_network) else [])

  1576.       +

  1577.       ([matrix_playbook_reverse_proxyable_services_additional_network] if matrix_playbook_reverse_proxyable_services_additional_network and matrix_mautrix_twitter_container_labels_traefik_enabled else [])

  1578.     ) | unique

  1579.   }}

  1580. 

  1581. matrix_mautrix_twitter_container_labels_traefik_enabled: "{{ matrix_playbook_reverse_proxy_type in ['playbook-managed-traefik', 'other-traefik-container'] }}"

  1582. matrix_mautrix_twitter_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  1583. matrix_mautrix_twitter_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  1584. matrix_mautrix_twitter_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  1585. 

  1586. matrix_mautrix_twitter_container_labels_metrics_middleware_basic_auth_enabled: "{{ matrix_metrics_exposure_http_basic_auth_enabled }}"

  1587. matrix_mautrix_twitter_container_labels_metrics_middleware_basic_auth_users: "{{ matrix_metrics_exposure_http_basic_auth_users }}"

  1588. 

  1589. matrix_mautrix_twitter_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'twt.as.token', rounds=655555) | to_uuid }}"

  1590. 

  1591. matrix_mautrix_twitter_homeserver_address: "{{ matrix_addons_homeserver_client_api_url }}"

  1592. matrix_mautrix_twitter_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'twt.hs.token', rounds=655555) | to_uuid }}"

  1593. 

  1594. matrix_mautrix_twitter_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  1595. 

  1596. matrix_mautrix_twitter_metrics_enabled: "{{ prometheus_enabled or matrix_metrics_exposure_enabled }}"

  1597. 

  1598. matrix_mautrix_twitter_metrics_proxying_enabled: "{{ matrix_mautrix_twitter_metrics_enabled and matrix_metrics_exposure_enabled }}"

  1599. matrix_mautrix_twitter_metrics_proxying_hostname: "{{ matrix_metrics_exposure_hostname }}"

  1600. matrix_mautrix_twitter_metrics_proxying_path_prefix: "{{ matrix_metrics_exposure_path_prefix }}/mautrix-twitter"

  1601. 

  1602. matrix_mautrix_twitter_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1603. matrix_mautrix_twitter_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mau.twt.db', rounds=655555) | to_uuid if devture_postgres_enabled else '' }}"

  1604. 

  1605. ######################################################################

  1606. #

  1607. # /matrix-bridge-mautrix-twitter

  1608. #

  1609. ######################################################################

  1610. 

  1611. ######################################################################

  1612. #

  1613. # matrix-bridge-mautrix-gmessages

  1614. #

  1615. ######################################################################

  1616. 

  1617. # We don't enable bridges by default.

  1618. matrix_mautrix_gmessages_enabled: false

  1619. 

  1620. matrix_mautrix_gmessages_systemd_required_services_list_auto: |

  1621.   {{

  1622.     matrix_addons_homeserver_systemd_services_list

  1623.     +

  1624.     ([devture_postgres_identifier ~ '.service'] if (devture_postgres_enabled and matrix_mautrix_facebook_database_hostname == devture_postgres_connection_hostname) else [])

  1625.   }}

  1626. 

  1627. matrix_mautrix_gmessages_container_image_self_build: "{{ matrix_architecture not in ['arm64', 'amd64'] }}"

  1628. 

  1629. matrix_mautrix_gmessages_container_network: "{{ matrix_addons_container_network }}"

  1630. 

  1631. matrix_mautrix_gmessages_container_additional_networks_auto: |-

  1632.   {{

  1633.     (

  1634.       ([] if matrix_addons_homeserver_container_network == '' else [matrix_addons_homeserver_container_network])

  1635.       +

  1636.       ([devture_postgres_container_network] if (devture_postgres_enabled and matrix_mautrix_gmessages_database_hostname == devture_postgres_connection_hostname and matrix_mautrix_gmessages_container_network != devture_postgres_container_network) else [])

  1637.       +

  1638.       ([matrix_playbook_reverse_proxyable_services_additional_network] if (matrix_playbook_reverse_proxyable_services_additional_network and matrix_mautrix_gmessages_container_labels_traefik_enabled) else [])

  1639.     ) | unique

  1640.   }}

  1641. 

  1642. matrix_mautrix_gmessages_container_labels_traefik_enabled: "{{ matrix_playbook_reverse_proxy_type in ['playbook-managed-traefik', 'other-traefik-container'] }}"

  1643. matrix_mautrix_gmessages_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  1644. matrix_mautrix_gmessages_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  1645. matrix_mautrix_gmessages_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  1646. 

  1647. matrix_mautrix_gmessages_container_labels_metrics_middleware_basic_auth_enabled: "{{ matrix_metrics_exposure_http_basic_auth_enabled }}"

  1648. matrix_mautrix_gmessages_container_labels_metrics_middleware_basic_auth_users: "{{ matrix_metrics_exposure_http_basic_auth_users }}"

  1649. 

  1650. matrix_mautrix_gmessages_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'gmessa.as.token', rounds=655555) | to_uuid }}"

  1651. 

  1652. matrix_mautrix_gmessages_homeserver_address: "{{ matrix_addons_homeserver_client_api_url }}"

  1653. matrix_mautrix_gmessages_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'gmessa.hs.token', rounds=655555) | to_uuid }}"

  1654. 

  1655. matrix_mautrix_gmessages_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  1656. 

  1657. matrix_mautrix_gmessages_metrics_enabled: "{{ prometheus_enabled or matrix_metrics_exposure_enabled }}"

  1658. 

  1659. matrix_mautrix_gmessages_metrics_proxying_enabled: "{{ matrix_mautrix_gmessages_metrics_enabled and matrix_metrics_exposure_enabled }}"

  1660. matrix_mautrix_gmessages_metrics_proxying_hostname: "{{ matrix_metrics_exposure_hostname }}"

  1661. matrix_mautrix_gmessages_metrics_proxying_path_prefix: "{{ matrix_metrics_exposure_path_prefix }}/mautrix-gmessages"

  1662. 

  1663. # Postgres is the default, except if not using internal Postgres server

  1664. matrix_mautrix_gmessages_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  1665. matrix_mautrix_gmessages_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1666. matrix_mautrix_gmessages_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'maugmessages.db', rounds=655555) | to_uuid }}"

  1667. 

  1668. ######################################################################

  1669. #

  1670. # /matrix-bridge-mautrix-gmessages

  1671. #

  1672. ######################################################################

  1673. 

  1674. ######################################################################

  1675. #

  1676. # matrix-bridge-mautrix-wsproxy

  1677. #

  1678. ######################################################################

  1679. 

  1680. # We don't enable bridges by default.

  1681. matrix_mautrix_wsproxy_enabled: false

  1682. 

  1683. matrix_mautrix_wsproxy_systemd_required_services_list_default: |

  1684.   {{

  1685.     matrix_addons_homeserver_systemd_services_list

  1686.     +

  1687.     ([devture_postgres_identifier ~ '.service'] if (devture_postgres_enabled and matrix_mautrix_wsproxy_syncproxy_database_hostname == devture_postgres_connection_hostname) else [])

  1688.   }}

  1689. 

  1690. matrix_mautrix_wsproxy_homeserver_domain: "{{ matrix_domain }}"

  1691. matrix_mautrix_wsproxy_homeserver_address: "{{ matrix_addons_homeserver_client_api_url }}"

  1692. 

  1693. matrix_mautrix_wsproxy_hostname: "wsproxy.{{ matrix_mautrix_wsproxy_homeserver_domain }}"

  1694. 

  1695. matrix_mautrix_wsproxy_syncproxy_homeserver_url: "{{ matrix_addons_homeserver_client_api_url }}"

  1696. 

  1697. matrix_mautrix_wsproxy_container_network: "{{ matrix_addons_container_network }}"

  1698. 

  1699. matrix_mautrix_wsproxy_container_additional_networks: |

  1700.   {{

  1701.     (

  1702.       ([] if matrix_addons_homeserver_container_network == '' else [matrix_addons_homeserver_container_network])

  1703.       +

  1704.       ([matrix_playbook_reverse_proxyable_services_additional_network] if matrix_playbook_reverse_proxyable_services_additional_network else [])

  1705.       +

  1706.       ([devture_postgres_container_network] if (devture_postgres_enabled and matrix_mautrix_wsproxy_syncproxy_database_hostname == devture_postgres_connection_hostname and devture_postgres_container_network != matrix_mautrix_wsproxy_container_network) else [])

  1707.     ) | unique

  1708.   }}

  1709. 

  1710. matrix_mautrix_wsproxy_container_labels_traefik_enabled: "{{ matrix_playbook_reverse_proxy_type in ['playbook-managed-traefik', 'other-traefik-container'] }}"

  1711. matrix_mautrix_wsproxy_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  1712. matrix_mautrix_wsproxy_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  1713. matrix_mautrix_wsproxy_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  1714. 

  1715. matrix_mautrix_wsproxy_syncproxy_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1716. matrix_mautrix_wsproxy_syncproxy_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'wsproxy.db', rounds=655555) | to_uuid }}"

  1717. 

  1718. ######################################################################

  1719. #

  1720. # /matrix-bridge-mautrix-wsproxy

  1721. #

  1722. ######################################################################

  1723. 

  1724. ######################################################################

  1725. #

  1726. # matrix-bridge-wechat

  1727. #

  1728. ######################################################################

  1729. 

  1730. # We don't enable bridges by default.

  1731. matrix_wechat_enabled: false

  1732. 

  1733. matrix_wechat_systemd_required_services_list_auto: |

  1734.   {{

  1735.     matrix_addons_homeserver_systemd_services_list

  1736.     +

  1737.     ([devture_postgres_identifier ~ '.service'] if (devture_postgres_enabled and matrix_wechat_database_hostname == devture_postgres_connection_hostname) else [])

  1738.   }}

  1739. 

  1740. matrix_wechat_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"

  1741. 

  1742. matrix_wechat_agent_container_image_self_build: "{{ matrix_architecture not in ['amd64'] }}"

  1743. 

  1744. matrix_wechat_container_network: "{{ matrix_addons_container_network }}"

  1745. 

  1746. matrix_wechat_container_additional_networks_auto: |-

  1747.   {{

  1748.     (

  1749.       ([] if matrix_addons_homeserver_container_network == '' else [matrix_addons_homeserver_container_network])

  1750.       +

  1751.       ([devture_postgres_container_network] if (devture_postgres_enabled and matrix_wechat_database_hostname == devture_postgres_connection_hostname and matrix_wechat_container_network != devture_postgres_container_network) else [])

  1752.     ) | unique

  1753.   }}

  1754. 

  1755. matrix_wechat_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'wechat.as.token', rounds=655555) | to_uuid }}"

  1756. 

  1757. matrix_wechat_homeserver_address: "{{ matrix_addons_homeserver_client_api_url }}"

  1758. matrix_wechat_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'wechat.hs.token', rounds=655555) | to_uuid }}"

  1759. 

  1760. matrix_wechat_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  1761. 

  1762. matrix_wechat_bridge_listen_secret: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'wechat.lstn', rounds=655555) | to_uuid }}"

  1763. 

  1764. # Postgres is the default, except if not using internal Postgres server

  1765. matrix_wechat_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  1766. matrix_wechat_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1767. matrix_wechat_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'gowechat.db', rounds=655555) | to_uuid }}"

  1768. 

  1769. ######################################################################

  1770. #

  1771. # /matrix-bridge-wechat

  1772. #

  1773. ######################################################################

  1774. 

  1775. ######################################################################

  1776. #

  1777. # matrix-bridge-mautrix-whatsapp

  1778. #

  1779. ######################################################################

  1780. 

  1781. # We don't enable bridges by default.

  1782. matrix_mautrix_whatsapp_enabled: false

  1783. 

  1784. matrix_mautrix_whatsapp_container_image_self_build: "{{ matrix_architecture not in ['arm64', 'amd64'] }}"

  1785. 

  1786. matrix_mautrix_whatsapp_container_network: "{{ matrix_addons_container_network }}"

  1787. 

  1788. matrix_mautrix_whatsapp_container_additional_networks_auto: |-

  1789.   {{

  1790.     (

  1791.       ([] if matrix_addons_homeserver_container_network == '' else [matrix_addons_homeserver_container_network])

  1792.       +

  1793.       ([devture_postgres_container_network] if devture_postgres_enabled and matrix_mautrix_whatsapp_database_hostname == devture_postgres_connection_hostname else [])

  1794.       +

  1795.       ([matrix_playbook_reverse_proxyable_services_additional_network] if matrix_playbook_reverse_proxyable_services_additional_network and matrix_mautrix_whatsapp_container_labels_traefik_enabled else [])

  1796.     ) | unique

  1797.   }}

  1798. 

  1799. matrix_mautrix_whatsapp_container_labels_traefik_enabled: "{{ matrix_playbook_reverse_proxy_type in ['playbook-managed-traefik', 'other-traefik-container'] }}"

  1800. matrix_mautrix_whatsapp_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  1801. matrix_mautrix_whatsapp_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  1802. matrix_mautrix_whatsapp_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  1803. 

  1804. matrix_mautrix_whatsapp_container_labels_metrics_middleware_basic_auth_enabled: "{{ matrix_metrics_exposure_http_basic_auth_enabled }}"

  1805. matrix_mautrix_whatsapp_container_labels_metrics_middleware_basic_auth_users: "{{ matrix_metrics_exposure_http_basic_auth_users }}"

  1806. 

  1807. matrix_mautrix_whatsapp_systemd_required_services_list_auto: |

  1808.   {{

  1809.     matrix_addons_homeserver_systemd_services_list

  1810.     +

  1811.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled and matrix_mautrix_whatsapp_database_hostname == devture_postgres_connection_hostname else [])

  1812.   }}

  1813. 

  1814. matrix_mautrix_whatsapp_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'whats.as.token', rounds=655555) | to_uuid }}"

  1815. 

  1816. matrix_mautrix_whatsapp_homeserver_address: "{{ matrix_addons_homeserver_client_api_url }}"

  1817. matrix_mautrix_whatsapp_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'whats.hs.token', rounds=655555) | to_uuid }}"

  1818. 

  1819. matrix_mautrix_whatsapp_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  1820. 

  1821. matrix_mautrix_whatsapp_metrics_enabled: "{{ prometheus_enabled or matrix_metrics_exposure_enabled }}"

  1822. 

  1823. matrix_mautrix_whatsapp_metrics_proxying_enabled: "{{ matrix_mautrix_whatsapp_metrics_enabled and matrix_metrics_exposure_enabled }}"

  1824. matrix_mautrix_whatsapp_metrics_proxying_hostname: "{{ matrix_metrics_exposure_hostname }}"

  1825. matrix_mautrix_whatsapp_metrics_proxying_path_prefix: "{{ matrix_metrics_exposure_path_prefix }}/mautrix-whatsapp"

  1826. 

  1827. # Postgres is the default, except if not using internal Postgres server

  1828. matrix_mautrix_whatsapp_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  1829. matrix_mautrix_whatsapp_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1830. matrix_mautrix_whatsapp_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mauwhatsapp.db', rounds=655555) | to_uuid }}"

  1831. 

  1832. ######################################################################

  1833. #

  1834. # /matrix-bridge-mautrix-whatsapp

  1835. #

  1836. ######################################################################

  1837. 

  1838. ######################################################################

  1839. #

  1840. # matrix-sms-bridge

  1841. #

  1842. ######################################################################

  1843. 

  1844. # We don't enable bridges by default.

  1845. matrix_sms_bridge_enabled: false

  1846. 

  1847. matrix_sms_bridge_systemd_required_services_list_auto: |

  1848.   {{

  1849.     matrix_addons_homeserver_systemd_services_list

  1850.     +

  1851.     ([devture_postgres_identifier ~ '.service'] if (devture_postgres_enabled and matrix_mautrix_facebook_database_hostname == devture_postgres_connection_hostname) else [])

  1852.   }}

  1853. 

  1854. matrix_sms_bridge_container_network: "{{ matrix_addons_container_network }}"

  1855. 

  1856. matrix_sms_bridge_container_additional_networks_auto: |-

  1857.   {{

  1858.     ([] if matrix_addons_homeserver_container_network == '' else [matrix_addons_homeserver_container_network])

  1859.   }}

  1860. 

  1861. matrix_sms_bridge_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'sms.as.token', rounds=655555) | to_uuid }}"

  1862. 

  1863. matrix_sms_bridge_homeserver_hostname: "{{ (matrix_homeserver_container_client_api_endpoint | split(':'))[0] }}"

  1864. matrix_sms_bridge_homeserver_port: "{{ (matrix_homeserver_container_client_api_endpoint | split(':'))[1] }}"

  1865. matrix_sms_bridge_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'sms.hs.token', rounds=655555) | to_uuid }}"

  1866. 

  1867. ######################################################################

  1868. #

  1869. # /matrix-sms-bridge

  1870. #

  1871. ######################################################################

  1872. 

  1873. ######################################################################

  1874. #

  1875. # matrix-bridge-heisenbridge

  1876. #

  1877. ######################################################################

  1878. 

  1879. # We don't enable bridges by default.

  1880. matrix_heisenbridge_enabled: false

  1881. 

  1882. matrix_heisenbridge_systemd_required_services_list_auto: |

  1883.   {{

  1884.     matrix_addons_homeserver_systemd_services_list

  1885.   }}

  1886. 

  1887. matrix_heisenbridge_container_network: "{{ matrix_addons_container_network }}"

  1888. 

  1889. matrix_heisenbridge_container_additional_networks_auto: |-

  1890.   {{

  1891.     ([] if matrix_addons_homeserver_container_network == '' else [matrix_addons_homeserver_container_network])

  1892.   }}

  1893. 

  1894. matrix_heisenbridge_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'heisen.as.tok', rounds=655555) | to_uuid }}"

  1895. 

  1896. matrix_heisenbridge_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'heisen.hs.tok', rounds=655555) | to_uuid }}"

  1897. 

  1898. matrix_heisenbridge_homeserver_url: "{{ matrix_addons_homeserver_client_api_url }}"

  1899. 

  1900. ######################################################################

  1901. #

  1902. # /matrix-bridge-heisenbridge

  1903. #

  1904. ######################################################################

  1905. 

  1906. ######################################################################

  1907. #

  1908. # matrix-bridge-hookshot

  1909. #

  1910. ######################################################################

  1911. 

  1912. # We don't enable bridges by default.

  1913. matrix_hookshot_enabled: false

  1914. 

  1915. matrix_hookshot_container_image_self_build: "{{ matrix_architecture not in ['arm64', 'amd64'] }}"

  1916. 

  1917. matrix_hookshot_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'hookshot.as.tok', rounds=655555) | to_uuid }}"

  1918. 

  1919. matrix_hookshot_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'hookshot.hs.tok', rounds=655555) | to_uuid }}"

  1920. 

  1921. matrix_hookshot_homeserver_address: "{{ matrix_addons_homeserver_client_api_url }}"

  1922. 

  1923. matrix_hookshot_systemd_wanted_services_list: |

  1924.   {{

  1925.     matrix_addons_homeserver_systemd_services_list

  1926.     +

  1927.     ([(redis_identifier + '.service')] if redis_enabled and matrix_hookshot_cache_redis_host == redis_identifier else [])

  1928.     +

  1929.     ([(keydb_identifier + '.service')] if keydb_enabled and matrix_hookshot_cache_redis_host == keydb_identifier else [])

  1930.   }}

  1931. 

  1932. # Hookshot's experimental encryption feature (and possibly others) may benefit from Redis, if available.

  1933. # We only connect to Redis if encryption is enabled (not for everyone who has Redis enabled),

  1934. # because connectivity is still potentially troublesome and is to be investigated.

  1935. matrix_hookshot_cache_redis_host: "{{ redis_identifier if redis_enabled and matrix_hookshot_experimental_encryption_enabled else (keydb_identifier if keydb_enabled and matrix_hookshot_experimental_encryption_enabled else '') }}"

  1936. 

  1937. matrix_hookshot_container_network: "{{ matrix_addons_container_network }}"

  1938. 

  1939. matrix_hookshot_container_additional_networks_auto: |

  1940.   {{

  1941.     (

  1942.       ([] if matrix_addons_homeserver_container_network == '' else [matrix_addons_homeserver_container_network])

  1943.       +

  1944.       ([redis_container_network] if redis_enabled and matrix_hookshot_cache_redis_host == redis_identifier else [])

  1945.       +

  1946.       ([keydb_container_network] if keydb_enabled and matrix_hookshot_cache_redis_host == keydb_identifier else [])

  1947.       +

  1948.       ([matrix_playbook_reverse_proxyable_services_additional_network] if matrix_playbook_reverse_proxyable_services_additional_network and matrix_hookshot_container_labels_traefik_enabled else [])

  1949.     ) | unique

  1950.   }}

  1951. 

  1952. matrix_hookshot_container_http_host_bind_ports_defaultmapping:

  1953.   - "{{ matrix_playbook_service_host_bind_interface_prefix }}{{ matrix_hookshot_appservice_port }}:{{ matrix_hookshot_appservice_port }}"

  1954.   - "{{ matrix_playbook_service_host_bind_interface_prefix }}{{ matrix_hookshot_metrics_port }}:{{ matrix_hookshot_metrics_port }}"

  1955.   - "{{ matrix_playbook_service_host_bind_interface_prefix }}{{ matrix_hookshot_webhook_port }}:{{ matrix_hookshot_webhook_port }}"

  1956.   - "{{ matrix_playbook_service_host_bind_interface_prefix }}{{ matrix_hookshot_provisioning_port }}:{{ matrix_hookshot_provisioning_port }}"

  1957. 

  1958. matrix_hookshot_container_http_host_bind_ports: "{{ matrix_hookshot_container_http_host_bind_ports_defaultmapping if matrix_playbook_service_host_bind_interface_prefix else [] }}"

  1959. 

  1960. matrix_hookshot_container_labels_traefik_enabled: "{{ matrix_playbook_reverse_proxy_type in ['playbook-managed-traefik', 'other-traefik-container'] }}"

  1961. matrix_hookshot_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  1962. matrix_hookshot_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  1963. matrix_hookshot_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  1964. 

  1965. matrix_hookshot_provisioning_enabled: "{{ matrix_hookshot_provisioning_secret and matrix_dimension_enabled }}"

  1966. 

  1967. matrix_hookshot_metrics_enabled: "{{ prometheus_enabled or matrix_metrics_exposure_enabled }}"

  1968. 

  1969. matrix_hookshot_metrics_proxying_enabled: "{{ matrix_hookshot_metrics_enabled and matrix_metrics_exposure_enabled }}"

  1970. matrix_hookshot_metrics_proxying_hostname: "{{ matrix_metrics_exposure_hostname }}"

  1971. matrix_hookshot_metrics_proxying_path_prefix: "{{ matrix_metrics_exposure_path_prefix }}/hookshot"

  1972. matrix_hookshot_container_labels_metrics_middleware_basic_auth_enabled: "{{ matrix_metrics_exposure_http_basic_auth_enabled }}"

  1973. matrix_hookshot_container_labels_metrics_middleware_basic_auth_users: "{{ matrix_metrics_exposure_http_basic_auth_users }}"

  1974. 

  1975. matrix_hookshot_public_scheme: "{{ 'https' if matrix_playbook_ssl_enabled else 'http' }}"

  1976. matrix_hookshot_public_hostname: "{{ matrix_server_fqn_matrix }}"

  1977. 

  1978. ######################################################################

  1979. #

  1980. # /matrix-bridge-hookshot

  1981. #

  1982. ######################################################################

  1983. 

  1984. 

  1985. ######################################################################

  1986. #

  1987. # matrix-bridge-mx-puppet-slack

  1988. #

  1989. ######################################################################

  1990. 

  1991. # We don't enable bridges by default.

  1992. matrix_mx_puppet_slack_enabled: false

  1993. 

  1994. matrix_mx_puppet_slack_hostname: "{{ matrix_server_fqn_matrix }}"

  1995. 

  1996. matrix_mx_puppet_slack_systemd_required_services_list_auto: |

  1997.   {{

  1998.     matrix_addons_homeserver_systemd_services_list

  1999.     +

  2000.     ([devture_postgres_identifier ~ '.service'] if (devture_postgres_enabled and matrix_mx_puppet_slack_database_hostname == devture_postgres_connection_hostname) else [])

  2001.   }}

  2002. 

  2003. matrix_mx_puppet_slack_container_image_self_build: "{{ matrix_architecture != 'amd64' }}"

  2004. 

  2005. matrix_mx_puppet_slack_container_network: "{{ matrix_addons_container_network }}"

  2006. 

  2007. matrix_mx_puppet_slack_container_additional_networks_auto: |-

  2008.   {{

  2009.     (

  2010.       ([] if matrix_addons_homeserver_container_network == '' else [matrix_addons_homeserver_container_network])

  2011.       +

  2012.       ([devture_postgres_container_network] if (devture_postgres_enabled and matrix_mx_puppet_slack_database_hostname == devture_postgres_connection_hostname and matrix_mx_puppet_slack_container_network != devture_postgres_container_network) else [])

  2013.       +

  2014.       ([matrix_playbook_reverse_proxyable_services_additional_network] if (matrix_playbook_reverse_proxyable_services_additional_network and matrix_mx_puppet_slack_container_labels_traefik_enabled) else [])

  2015.     ) | unique

  2016.   }}

  2017. 

  2018. matrix_mx_puppet_slack_container_labels_traefik_enabled: "{{ matrix_playbook_reverse_proxy_type in ['playbook-managed-traefik', 'other-traefik-container'] }}"

  2019. matrix_mx_puppet_slack_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  2020. matrix_mx_puppet_slack_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  2021. matrix_mx_puppet_slack_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  2022. 

  2023. matrix_mx_puppet_slack_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxslk.as.tok', rounds=655555) | to_uuid }}"

  2024. 

  2025. matrix_mx_puppet_slack_homeserver_address: "{{ matrix_addons_homeserver_client_api_url }}"

  2026. matrix_mx_puppet_slack_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxslk.hs.tok', rounds=655555) | to_uuid }}"

  2027. 

  2028. matrix_mx_puppet_slack_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  2029. 

  2030. matrix_mx_puppet_slack_presence_enabled: "{{ matrix_homeserver_implementation != 'synapse' or matrix_synapse_presence_enabled }}"

  2031. 

  2032. # Postgres is the default, except if not using internal Postgres server

  2033. matrix_mx_puppet_slack_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  2034. matrix_mx_puppet_slack_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  2035. matrix_mx_puppet_slack_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxpup.slack.db', rounds=655555) | to_uuid }}"

  2036. 

  2037. ######################################################################

  2038. #

  2039. # /matrix-bridge-mx-puppet-slack

  2040. #

  2041. ######################################################################

  2042. 

  2043. ######################################################################

  2044. #

  2045. # matrix-bridge-mx-puppet-twitter

  2046. #

  2047. ######################################################################

  2048. 

  2049. # We don't enable bridges by default.

  2050. matrix_mx_puppet_twitter_enabled: false

  2051. 

  2052. matrix_mx_puppet_twitter_hostname: "{{ matrix_server_fqn_matrix }}"

  2053. 

  2054. matrix_mx_puppet_twitter_systemd_required_services_list_auto: |

  2055.   {{

  2056.     matrix_addons_homeserver_systemd_services_list

  2057.     +

  2058.     ([devture_postgres_identifier ~ '.service'] if (devture_postgres_enabled and matrix_mx_puppet_twitter_database_hostname == devture_postgres_connection_hostname) else [])

  2059.   }}

  2060. 

  2061. matrix_mx_puppet_twitter_container_image_self_build: "{{ matrix_architecture != 'amd64' }}"

  2062. 

  2063. matrix_mx_puppet_twitter_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '' ~ matrix_mx_puppet_twitter_appservice_port) if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  2064. 

  2065. matrix_mx_puppet_twitter_container_network: "{{ matrix_addons_container_network }}"

  2066. 

  2067. matrix_mx_puppet_twitter_container_additional_networks_auto: |-

  2068.   {{

  2069.     (

  2070.       ([] if matrix_addons_homeserver_container_network == '' else [matrix_addons_homeserver_container_network])

  2071.       +

  2072.       ([devture_postgres_container_network] if (devture_postgres_enabled and matrix_mx_puppet_twitter_database_hostname == devture_postgres_connection_hostname and matrix_mx_puppet_twitter_container_network != devture_postgres_container_network) else [])

  2073.       +

  2074.       ([matrix_playbook_reverse_proxyable_services_additional_network] if (matrix_playbook_reverse_proxyable_services_additional_network and matrix_mx_puppet_twitter_container_labels_traefik_enabled) else [])

  2075.     ) | unique

  2076.   }}

  2077. 

  2078. matrix_mx_puppet_twitter_container_labels_traefik_enabled: "{{ matrix_playbook_reverse_proxy_type in ['playbook-managed-traefik', 'other-traefik-container'] }}"

  2079. matrix_mx_puppet_twitter_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  2080. matrix_mx_puppet_twitter_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  2081. matrix_mx_puppet_twitter_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  2082. 

  2083. matrix_mx_puppet_twitter_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxtwt.as.tok', rounds=655555) | to_uuid }}"

  2084. 

  2085. matrix_mx_puppet_twitter_homeserver_address: "{{ matrix_addons_homeserver_client_api_url }}"

  2086. matrix_mx_puppet_twitter_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxtwt.hs.tok', rounds=655555) | to_uuid }}"

  2087. 

  2088. matrix_mx_puppet_twitter_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  2089. 

  2090. matrix_mx_puppet_twitter_presence_enabled: "{{ matrix_homeserver_implementation != 'synapse' or matrix_synapse_presence_enabled }}"

  2091. 

  2092. # Postgres is the default, except if not using internal Postgres server

  2093. matrix_mx_puppet_twitter_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  2094. matrix_mx_puppet_twitter_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  2095. matrix_mx_puppet_twitter_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxpup.twitter.db', rounds=655555) | to_uuid }}"

  2096. 

  2097. ######################################################################

  2098. #

  2099. # /matrix-bridge-mx-puppet-twitter

  2100. #

  2101. ######################################################################

  2102. 

  2103. 

  2104. ######################################################################

  2105. #

  2106. # matrix-bridge-mx-puppet-instagram

  2107. #

  2108. ######################################################################

  2109. 

  2110. # We don't enable bridges by default.

  2111. matrix_mx_puppet_instagram_enabled: false

  2112. 

  2113. matrix_mx_puppet_instagram_systemd_required_services_list_auto: |

  2114.   {{

  2115.     matrix_addons_homeserver_systemd_services_list

  2116.     +

  2117.     ([devture_postgres_identifier ~ '.service'] if (devture_postgres_enabled and matrix_mx_puppet_instagram_database_hostname == devture_postgres_connection_hostname) else [])

  2118.   }}

  2119. 

  2120. matrix_mx_puppet_instagram_container_image_self_build: "{{ matrix_architecture != 'amd64' }}"

  2121. 

  2122. matrix_mx_puppet_instagram_container_network: "{{ matrix_addons_container_network }}"

  2123. 

  2124. matrix_mx_puppet_instagram_container_additional_networks_auto: |-

  2125.   {{

  2126.     (

  2127.       ([] if matrix_addons_homeserver_container_network == '' else [matrix_addons_homeserver_container_network])

  2128.       +

  2129.       ([devture_postgres_container_network] if (devture_postgres_enabled and matrix_mx_puppet_instagram_database_hostname == devture_postgres_connection_hostname and matrix_mx_puppet_instagram_container_network != devture_postgres_container_network) else [])

  2130.     ) | unique

  2131.   }}

  2132. 

  2133. matrix_mx_puppet_instagram_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxig.as.tok', rounds=655555) | to_uuid }}"

  2134. 

  2135. matrix_mx_puppet_instagram_homeserver_address: "{{ matrix_addons_homeserver_client_api_url }}"

  2136. matrix_mx_puppet_instagram_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxig.hs.tok', rounds=655555) | to_uuid }}"

  2137. 

  2138. matrix_mx_puppet_instagram_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  2139. 

  2140. matrix_mx_puppet_instagram_presence_enabled: "{{ matrix_homeserver_implementation != 'synapse' or matrix_synapse_presence_enabled }}"

  2141. 

  2142. # Postgres is the default, except if not using internal Postgres server

  2143. matrix_mx_puppet_instagram_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  2144. matrix_mx_puppet_instagram_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  2145. matrix_mx_puppet_instagram_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxpup.ig.db', rounds=655555) | to_uuid }}"

  2146. 

  2147. ######################################################################

  2148. #

  2149. # /matrix-bridge-mx-puppet-instagram

  2150. #

  2151. ######################################################################

  2152. 

  2153. ######################################################################

  2154. #

  2155. # matrix-bridge-mx-puppet-discord

  2156. #

  2157. ######################################################################

  2158. 

  2159. # We don't enable bridges by default.

  2160. matrix_mx_puppet_discord_enabled: false

  2161. 

  2162. matrix_mx_puppet_discord_systemd_required_services_list_auto: |

  2163.   {{

  2164.     matrix_addons_homeserver_systemd_services_list

  2165.     +

  2166.     ([devture_postgres_identifier ~ '.service'] if (devture_postgres_enabled and matrix_mx_puppet_discord_database_hostname == devture_postgres_connection_hostname) else [])

  2167.   }}

  2168. 

  2169. matrix_mx_puppet_discord_container_image_self_build: "{{ matrix_architecture != 'amd64' }}"

  2170. 

  2171. matrix_mx_puppet_discord_container_network: "{{ matrix_addons_container_network }}"

  2172. 

  2173. matrix_mx_puppet_discord_container_additional_networks_auto: |-

  2174.   {{

  2175.     (

  2176.       ([] if matrix_addons_homeserver_container_network == '' else [matrix_addons_homeserver_container_network])

  2177.       +

  2178.       ([devture_postgres_container_network] if (devture_postgres_enabled and matrix_mx_puppet_discord_database_hostname == devture_postgres_connection_hostname and matrix_mx_puppet_discord_container_network != devture_postgres_container_network) else [])

  2179.     ) | unique

  2180.   }}

  2181. 

  2182. matrix_mx_puppet_discord_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxdsc.as.tok', rounds=655555) | to_uuid }}"

  2183. 

  2184. matrix_mx_puppet_discord_homeserver_address: "{{ matrix_addons_homeserver_client_api_url }}"

  2185. matrix_mx_puppet_discord_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxdsc.hs.tok', rounds=655555) | to_uuid }}"

  2186. 

  2187. matrix_mx_puppet_discord_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  2188. 

  2189. matrix_mx_puppet_discord_presence_enabled: "{{ matrix_homeserver_implementation != 'synapse' or matrix_synapse_presence_enabled }}"

  2190. 

  2191. # Postgres is the default, except if not using internal Postgres server

  2192. matrix_mx_puppet_discord_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  2193. matrix_mx_puppet_discord_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  2194. matrix_mx_puppet_discord_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxpup.dsc.db', rounds=655555) | to_uuid }}"

  2195. 

  2196. ######################################################################

  2197. #

  2198. # /matrix-bridge-mx-puppet-discord

  2199. #

  2200. ######################################################################

  2201. 

  2202. ######################################################################

  2203. #

  2204. # matrix-bridge-mx-puppet-steam

  2205. #

  2206. ######################################################################

  2207. 

  2208. # We don't enable bridges by default.

  2209. matrix_mx_puppet_steam_enabled: false

  2210. 

  2211. matrix_mx_puppet_steam_systemd_required_services_list_auto: |

  2212.   {{

  2213.     matrix_addons_homeserver_systemd_services_list

  2214.     +

  2215.     ([devture_postgres_identifier ~ '.service'] if (devture_postgres_enabled and matrix_mx_puppet_steam_database_hostname == devture_postgres_connection_hostname) else [])

  2216.   }}

  2217. 

  2218. matrix_mx_puppet_steam_container_image_self_build: "{{ matrix_architecture not in ['arm64', 'amd64'] }}"

  2219. 

  2220. matrix_mx_puppet_steam_container_network: "{{ matrix_addons_container_network }}"

  2221. 

  2222. matrix_mx_puppet_steam_container_additional_networks_auto: |-

  2223.   {{

  2224.     (

  2225.       ([] if matrix_addons_homeserver_container_network == '' else [matrix_addons_homeserver_container_network])

  2226.       +

  2227.       ([devture_postgres_container_network] if (devture_postgres_enabled and matrix_mx_puppet_steam_database_hostname == devture_postgres_connection_hostname and matrix_mx_puppet_steam_container_network != devture_postgres_container_network) else [])

  2228.     ) | unique

  2229.   }}

  2230. 

  2231. matrix_mx_puppet_steam_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxste.as.tok', rounds=655555) | to_uuid }}"

  2232. 

  2233. matrix_mx_puppet_steam_homeserver_address: "{{ matrix_addons_homeserver_client_api_url }}"

  2234. matrix_mx_puppet_steam_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxste.hs.tok', rounds=655555) | to_uuid }}"

  2235. 

  2236. matrix_mx_puppet_steam_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  2237. 

  2238. matrix_mx_puppet_steam_presence_enabled: "{{ matrix_homeserver_implementation != 'synapse' or matrix_synapse_presence_enabled }}"

  2239. 

  2240. # Postgres is the default, except if not using internal Postgres server

  2241. matrix_mx_puppet_steam_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  2242. matrix_mx_puppet_steam_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  2243. matrix_mx_puppet_steam_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxpup.steam.db', rounds=655555) | to_uuid }}"

  2244. 

  2245. ######################################################################

  2246. #

  2247. # /matrix-bridge-mx-puppet-steam

  2248. #

  2249. ######################################################################

  2250. 

  2251. 

  2252. ######################################################################

  2253. #

  2254. # matrix-bridge-mx-puppet-groupme

  2255. #

  2256. ######################################################################

  2257. 

  2258. # We don't enable bridges by default.

  2259. matrix_mx_puppet_groupme_enabled: false

  2260. 

  2261. matrix_mx_puppet_groupme_systemd_required_services_list_auto: |

  2262.   {{

  2263.     matrix_addons_homeserver_systemd_services_list

  2264.     +

  2265.     ([devture_postgres_identifier ~ '.service'] if (devture_postgres_enabled and matrix_mx_puppet_groupme_database_hostname == devture_postgres_connection_hostname) else [])

  2266.   }}

  2267. 

  2268. matrix_mx_puppet_groupme_container_image_self_build: "{{ matrix_architecture != 'amd64' }}"

  2269. 

  2270. matrix_mx_puppet_groupme_container_network: "{{ matrix_addons_container_network }}"

  2271. 

  2272. matrix_mx_puppet_groupme_container_additional_networks_auto: |-

  2273.   {{

  2274.     (

  2275.       ([] if matrix_addons_homeserver_container_network == '' else [matrix_addons_homeserver_container_network])

  2276.       +

  2277.       ([devture_postgres_container_network] if (devture_postgres_enabled and matrix_mx_puppet_groupme_database_hostname == devture_postgres_connection_hostname and matrix_mx_puppet_groupme_container_network != devture_postgres_container_network) else [])

  2278.     ) | unique

  2279.   }}

  2280. 

  2281. matrix_mx_puppet_groupme_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxgro.as.tok', rounds=655555) | to_uuid }}"

  2282. 

  2283. matrix_mx_puppet_groupme_homeserver_address: "{{ matrix_addons_homeserver_client_api_url }}"

  2284. matrix_mx_puppet_groupme_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxgro.hs.tok', rounds=655555) | to_uuid }}"

  2285. 

  2286. matrix_mx_puppet_groupme_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  2287. 

  2288. matrix_mx_puppet_groupme_presence_enabled: "{{ matrix_homeserver_implementation != 'synapse' or matrix_synapse_presence_enabled }}"

  2289. 

  2290. # Postgres is the default, except if not using internal Postgres server

  2291. matrix_mx_puppet_groupme_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  2292. matrix_mx_puppet_groupme_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  2293. matrix_mx_puppet_groupme_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxpup.groupme.db', rounds=655555) | to_uuid }}"

  2294. 

  2295. ######################################################################

  2296. #

  2297. # /matrix-bridge-mx-puppet-groupme

  2298. #

  2299. ######################################################################

  2300. 

  2301. 

  2302. ######################################################################

  2303. #

  2304. # matrix-bot-matrix-reminder-bot

  2305. #

  2306. ######################################################################

  2307. 

  2308. # We don't enable bots by default.

  2309. matrix_bot_matrix_reminder_bot_enabled: false

  2310. 

  2311. matrix_bot_matrix_reminder_bot_systemd_required_services_list_auto: |

  2312.   {{

  2313.     matrix_addons_homeserver_systemd_services_list

  2314.     +

  2315.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled and matrix_bot_matrix_reminder_bot_database_hostname == devture_postgres_connection_hostname else [])

  2316.   }}

  2317. 

  2318. matrix_bot_matrix_reminder_bot_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"

  2319. 

  2320. matrix_bot_matrix_reminder_bot_container_network: "{{ matrix_addons_container_network }}"

  2321. 

  2322. matrix_bot_matrix_reminder_bot_container_additional_networks_auto: |-

  2323.   {{

  2324.     (

  2325.       ([] if matrix_addons_homeserver_container_network == '' else [matrix_addons_homeserver_container_network])

  2326.       +

  2327.       ([devture_postgres_container_network] if devture_postgres_enabled and matrix_bot_matrix_reminder_bot_database_hostname == devture_postgres_connection_hostname else [])

  2328.     ) | unique

  2329.   }}

  2330. 

  2331. matrix_bot_matrix_reminder_bot_matrix_homeserver_url: "{{ matrix_addons_homeserver_client_api_url }}"

  2332. 

  2333. # Postgres is the default, except if not using internal Postgres server

  2334. matrix_bot_matrix_reminder_bot_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  2335. matrix_bot_matrix_reminder_bot_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  2336. matrix_bot_matrix_reminder_bot_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'reminder.bot.db', rounds=655555) | to_uuid }}"

  2337. 

  2338. matrix_bot_matrix_reminder_bot_allowlist_enabled: true

  2339. matrix_bot_matrix_reminder_bot_allowlist_regexes_auto:

  2340.   - "@[a-z0-9-_.]+:{{ matrix_domain }}"

  2341. 

  2342. ######################################################################

  2343. #

  2344. # /matrix-bot-matrix-reminder-bot

  2345. #

  2346. ######################################################################

  2347. 

  2348. 

  2349. ######################################################################

  2350. #

  2351. # matrix-bot-matrix-registration-bot

  2352. #

  2353. ######################################################################

  2354. 

  2355. # We don't enable bots by default.

  2356. matrix_bot_matrix_registration_bot_enabled: false

  2357. 

  2358. matrix_bot_matrix_registration_bot_systemd_required_services_list_auto: |

  2359.   {{

  2360.     matrix_addons_homeserver_systemd_services_list

  2361.   }}

  2362. 

  2363. matrix_bot_matrix_registration_bot_container_image_self_build: "{{ matrix_architecture not in ['amd64'] }}"

  2364. 

  2365. matrix_bot_matrix_registration_bot_container_network: "{{ matrix_addons_container_network }}"

  2366. 

  2367. matrix_bot_matrix_registration_bot_container_additional_networks_auto: |-

  2368.   {{

  2369.     ([] if matrix_addons_homeserver_container_network == '' else [matrix_addons_homeserver_container_network])

  2370.   }}

  2371. 

  2372. matrix_bot_matrix_registration_bot_matrix_homeserver_url: "{{ matrix_addons_homeserver_client_api_url }}"

  2373. 

  2374. ######################################################################

  2375. #

  2376. # /matrix-bot-matrix-registration-bot

  2377. #

  2378. ######################################################################

  2379. 

  2380. ######################################################################

  2381. #

  2382. # matrix-bot-maubot

  2383. #

  2384. ######################################################################

  2385. 

  2386. # We don't enable bots by default.

  2387. matrix_bot_maubot_enabled: false

  2388. 

  2389. matrix_bot_maubot_systemd_required_services_list_auto: |

  2390.   {{

  2391.     matrix_addons_homeserver_systemd_services_list

  2392.     +

  2393.     ([devture_postgres_identifier ~ '.service'] if (devture_postgres_enabled and matrix_bot_maubot_database_hostname == devture_postgres_connection_hostname) else [])

  2394.   }}

  2395. 

  2396. matrix_bot_maubot_hostname: "{{ matrix_server_fqn_matrix }}"

  2397. 

  2398. matrix_bot_maubot_homeserver_url: "{{ matrix_addons_homeserver_client_api_url }}"

  2399. 

  2400. matrix_bot_maubot_homeserver_secret: |-

  2401.   {{

  2402.     {

  2403.       'synapse': matrix_synapse_registration_shared_secret | default(''),

  2404.       'dendrite': matrix_dendrite_client_api_registration_shared_secret | default(''),

  2405.     }[matrix_homeserver_implementation]

  2406.   }}

  2407. 

  2408. matrix_bot_maubot_container_image_self_build: "{{ matrix_architecture not in ['amd64'] }}"

  2409. 

  2410. matrix_bot_maubot_container_management_interface_http_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '' ~ matrix_bot_maubot_server_port | string) if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  2411. 

  2412. matrix_bot_maubot_container_network: "{{ matrix_addons_container_network }}"

  2413. 

  2414. matrix_bot_maubot_container_additional_networks_auto: |-

  2415.   {{

  2416.     (

  2417.       ([] if matrix_addons_homeserver_container_network == '' else [matrix_addons_homeserver_container_network])

  2418.       +

  2419.       ([devture_postgres_container_network] if (devture_postgres_enabled and matrix_bot_maubot_database_hostname == devture_postgres_connection_hostname and matrix_bot_maubot_container_network != devture_postgres_container_network) else [])

  2420.       +

  2421.       ([matrix_playbook_reverse_proxyable_services_additional_network] if matrix_playbook_reverse_proxyable_services_additional_network and matrix_bot_maubot_container_labels_traefik_enabled else [])

  2422.     ) | unique

  2423.   }}

  2424. 

  2425. matrix_bot_maubot_container_labels_traefik_enabled: "{{ matrix_playbook_reverse_proxy_type in ['playbook-managed-traefik', 'other-traefik-container'] }}"

  2426. matrix_bot_maubot_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  2427. matrix_bot_maubot_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  2428. matrix_bot_maubot_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  2429. 

  2430. matrix_bot_maubot_container_labels_management_hostname: "{{ matrix_server_fqn_matrix }}"

  2431. 

  2432. # Postgres is the default, except if not using internal Postgres server

  2433. matrix_bot_maubot_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  2434. matrix_bot_maubot_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  2435. matrix_bot_maubot_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxpup.dsc.db', rounds=655555) | to_uuid }}"

  2436. 

  2437. ######################################################################

  2438. #

  2439. # /matrix-bot-maubot

  2440. #

  2441. ######################################################################

  2442. 

  2443. 

  2444. ######################################################################

  2445. #

  2446. # matrix-bot-honoroit

  2447. #

  2448. ######################################################################

  2449. 

  2450. # We don't enable bots by default.

  2451. matrix_bot_honoroit_enabled: false

  2452. 

  2453. matrix_bot_honoroit_hostname: "{{ matrix_server_fqn_matrix }}"

  2454. 

  2455. matrix_bot_honoroit_path_prefix: /honoroit

  2456. 

  2457. matrix_bot_honoroit_systemd_required_services_list_auto: |

  2458.   {{

  2459.     matrix_addons_homeserver_systemd_services_list

  2460.     +

  2461.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled and matrix_bot_honoroit_database_hostname == devture_postgres_connection_hostname else [])

  2462.   }}

  2463. 

  2464. matrix_bot_honoroit_container_network: "{{ matrix_addons_container_network }}"

  2465. 

  2466. matrix_bot_honoroit_container_additional_networks: |

  2467.   {{

  2468.     (

  2469.       ([] if matrix_addons_homeserver_container_network == '' else [matrix_addons_homeserver_container_network])

  2470.       +

  2471.       ([devture_postgres_container_network] if (devture_postgres_enabled and matrix_bot_honoroit_database_hostname == devture_postgres_connection_hostname and matrix_bot_honoroit_container_network != devture_postgres_container_network) else [])

  2472.       +

  2473.       ([matrix_playbook_reverse_proxyable_services_additional_network] if matrix_playbook_reverse_proxyable_services_additional_network and matrix_bot_honoroit_container_labels_traefik_enabled else [])

  2474.     ) | unique

  2475.   }}

  2476. 

  2477. matrix_bot_honoroit_container_labels_traefik_enabled: "{{ matrix_playbook_traefik_labels_enabled }}"

  2478. matrix_bot_honoroit_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  2479. matrix_bot_honoroit_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  2480. matrix_bot_honoroit_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  2481. 

  2482. # For consistency with other things hosted at the matrix FQN, we adjust the metrics endpoint

  2483. # so that metrics would be served at something like `/metrics/SERVICE_NAME`, and not at the default path for the role (`PREFIX/metrics`).

  2484. matrix_bot_honoroit_container_labels_traefik_metrics_path: "{{ matrix_metrics_exposure_path_prefix }}/honoroit"

  2485. 

  2486. matrix_bot_honoroit_homeserver: "{{ matrix_addons_homeserver_client_api_url }}"

  2487. 

  2488. # Postgres is the default, except if not using internal Postgres server

  2489. matrix_bot_honoroit_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  2490. matrix_bot_honoroit_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  2491. matrix_bot_honoroit_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'honoroit.bot.db', rounds=655555) | to_uuid }}"

  2492. matrix_bot_honoroit_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"

  2493. 

  2494. ######################################################################

  2495. #

  2496. # /matrix-bot-honoroit

  2497. #

  2498. ######################################################################

  2499. 

  2500. ######################################################################

  2501. #

  2502. # matrix-bot-buscarron

  2503. #

  2504. ######################################################################

  2505. 

  2506. # We don't enable bots by default.

  2507. matrix_bot_buscarron_enabled: false

  2508. 

  2509. matrix_bot_buscarron_hostname: "{{ matrix_server_fqn_buscarron }}"

  2510. 

  2511. matrix_bot_buscarron_systemd_required_services_list_auto: |

  2512.   {{

  2513.     matrix_addons_homeserver_systemd_services_list

  2514.     +

  2515.     ([devture_postgres_identifier ~ '.service'] if (devture_postgres_enabled and matrix_bot_buscarron_database_hostname == devture_postgres_connection_hostname) else [])

  2516.   }}

  2517. 

  2518. matrix_bot_buscarron_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"

  2519. 

  2520. matrix_bot_buscarron_container_network: "{{ matrix_addons_container_network }}"

  2521. 

  2522. matrix_bot_buscarron_container_additional_networks_auto: |-

  2523.   {{

  2524.     (

  2525.       ([] if matrix_addons_homeserver_container_network == '' else [matrix_addons_homeserver_container_network])

  2526.       +

  2527.       ([devture_postgres_container_network] if (devture_postgres_enabled and matrix_bot_buscarron_database_hostname == devture_postgres_connection_hostname and matrix_bot_buscarron_container_network != devture_postgres_container_network) else [])

  2528.       +

  2529.       ([matrix_playbook_reverse_proxyable_services_additional_network] if matrix_playbook_reverse_proxyable_services_additional_network and matrix_bot_buscarron_container_labels_traefik_enabled else [])

  2530.     ) | unique

  2531.   }}

  2532. 

  2533. matrix_bot_buscarron_container_labels_traefik_enabled: "{{ matrix_playbook_traefik_labels_enabled }}"

  2534. matrix_bot_buscarron_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  2535. matrix_bot_buscarron_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  2536. matrix_bot_buscarron_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  2537. 

  2538. matrix_bot_buscarron_homeserver: "{{ matrix_addons_homeserver_client_api_url }}"

  2539. 

  2540. # Postgres is the default, except if not using internal Postgres server

  2541. matrix_bot_buscarron_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  2542. matrix_bot_buscarron_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  2543. matrix_bot_buscarron_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'buscarron.bot.db', rounds=655555) | to_uuid }}"

  2544. 

  2545. ######################################################################

  2546. #

  2547. # /matrix-bot-buscarron

  2548. #

  2549. ######################################################################

  2550. 

  2551. ######################################################################

  2552. #

  2553. # matrix-bot-postmoogle

  2554. #

  2555. ######################################################################

  2556. 

  2557. # We don't enable bots by default.

  2558. matrix_bot_postmoogle_enabled: false

  2559. 

  2560. matrix_bot_postmoogle_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"

  2561. 

  2562. matrix_bot_postmoogle_ssl_path: |-

  2563.   {{

  2564.     {

  2565.       'playbook-managed-traefik': (devture_traefik_certs_dumper_dumped_certificates_dir_path if devture_traefik_certs_dumper_enabled else ''),

  2566.       'other-traefik-container': (devture_traefik_certs_dumper_dumped_certificates_dir_path if devture_traefik_certs_dumper_enabled else ''),

  2567.       'none': '',

  2568.     }[matrix_playbook_reverse_proxy_type]

  2569.   }}

  2570. 

  2571. matrix_playbook_bot_postmoogle_traefik_tls_cert: "{% for domain in matrix_bot_postmoogle_domains %}/ssl/{{ domain }}/certificate.crt {% endfor %}"

  2572. matrix_playbook_bot_postmoogle_traefik_key: "{% for domain in matrix_bot_postmoogle_domains %}/ssl/{{ domain }}/privatekey.key {% endfor %}"

  2573. 

  2574. matrix_bot_postmoogle_tls_cert: |-

  2575.   {{

  2576.     {

  2577.       'playbook-managed-traefik': (matrix_playbook_bot_postmoogle_traefik_tls_cert if devture_traefik_certs_dumper_enabled else ''),

  2578.       'other-traefik-container': (matrix_playbook_bot_postmoogle_traefik_tls_cert if devture_traefik_certs_dumper_enabled else ''),

  2579.       'none': '',

  2580.     }[matrix_playbook_reverse_proxy_type]

  2581.   }}

  2582. 

  2583. matrix_bot_postmoogle_tls_key: |-

  2584.   {{

  2585.     {

  2586.       'playbook-managed-traefik': (matrix_playbook_bot_postmoogle_traefik_key if devture_traefik_certs_dumper_enabled else ''),

  2587.       'other-traefik-container': (matrix_playbook_bot_postmoogle_traefik_key if devture_traefik_certs_dumper_enabled else ''),

  2588.       'none': '',

  2589.     }[matrix_playbook_reverse_proxy_type]

  2590.   }}

  2591. 

  2592. matrix_playbook_bot_postmoogle_traefik_certs_dumper_waiter_services: "{% for domain in matrix_bot_postmoogle_domains %}{{ devture_traefik_certs_dumper_identifier }}-wait-for-domain@{{ domain }}.service {% endfor %}"

  2593. 

  2594. matrix_bot_postmoogle_systemd_required_services_list_auto: |

  2595.   {{

  2596.     matrix_addons_homeserver_systemd_services_list

  2597.     +

  2598.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled and matrix_bot_postmoogle_database_hostname == matrix_bot_postmoogle_database_hostname else [])

  2599.     +

  2600.     (matrix_playbook_bot_postmoogle_traefik_certs_dumper_waiter_services | trim | split(' ') if matrix_playbook_reverse_proxy_type in ['playbook-managed-traefik', 'other-traefik-container'] and devture_traefik_certs_dumper_enabled else [])

  2601.   }}

  2602. 

  2603. # Postgres is the default, except if not using internal Postgres server

  2604. matrix_bot_postmoogle_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  2605. matrix_bot_postmoogle_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  2606. matrix_bot_postmoogle_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'postmoogle.db', rounds=655555) | to_uuid }}"

  2607. 

  2608. matrix_bot_postmoogle_homeserver: "{{ matrix_addons_homeserver_client_api_url }}"

  2609. 

  2610. matrix_bot_postmoogle_container_network: "{{ matrix_addons_container_network }}"

  2611. 

  2612. matrix_bot_postmoogle_container_additional_networks_auto: |-

  2613.   {{

  2614.     (

  2615.       ([] if matrix_addons_homeserver_container_network == '' else [matrix_addons_homeserver_container_network])

  2616.       +

  2617.       ([devture_postgres_container_network] if devture_postgres_enabled and matrix_bot_matrix_reminder_bot_database_hostname == devture_postgres_connection_hostname else [])

  2618.     ) | unique

  2619.   }}

  2620. 

  2621. ######################################################################

  2622. #

  2623. # /matrix-bot-postmoogle

  2624. #

  2625. ######################################################################

  2626. 

  2627. 

  2628. ######################################################################

  2629. #

  2630. # matrix-bot-chatgpt

  2631. #

  2632. ######################################################################

  2633. 

  2634. # We don't enable bots by default.

  2635. matrix_bot_chatgpt_enabled: false

  2636. 

  2637. matrix_bot_chatgpt_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"

  2638. 

  2639. matrix_bot_chatgpt_container_network: "{{ matrix_addons_container_network }}"

  2640. matrix_bot_chatgpt_container_additional_networks_auto: "{{ [] if matrix_addons_homeserver_container_network == '' else [matrix_addons_homeserver_container_network] }}"

  2641. 

  2642. matrix_bot_chatgpt_matrix_homeserver_url: "{{ matrix_addons_homeserver_client_api_url }}"

  2643. 

  2644. matrix_bot_chatgpt_systemd_required_services_list_auto: "{{ matrix_addons_homeserver_systemd_services_list }}"

  2645. 

  2646. ######################################################################

  2647. #

  2648. # /matrix-bot-chatgpt

  2649. #

  2650. ######################################################################

  2651. 

  2652. 

  2653. ######################################################################

  2654. #

  2655. # matrix-bot-go-neb

  2656. #

  2657. ######################################################################

  2658. 

  2659. # We don't enable bots by default.

  2660. matrix_bot_go_neb_enabled: false

  2661. 

  2662. matrix_bot_go_neb_scheme: "{{ 'https' if matrix_playbook_ssl_enabled else 'http' }}"

  2663. 

  2664. matrix_bot_go_neb_hostname: "{{ matrix_server_fqn_bot_go_neb }}"

  2665. 

  2666. matrix_bot_go_neb_systemd_required_services_list_auto: |

  2667.   {{

  2668.     matrix_addons_homeserver_systemd_services_list

  2669.   }}

  2670. 

  2671. matrix_bot_go_neb_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '4050') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  2672. 

  2673. matrix_bot_go_neb_container_network: "{{ matrix_addons_container_network }}"

  2674. 

  2675. matrix_bot_go_neb_container_additional_networks: |

  2676.   {{

  2677.     (

  2678.       ([] if matrix_addons_homeserver_container_network == '' else [matrix_addons_homeserver_container_network])

  2679.       +

  2680.       ([matrix_playbook_reverse_proxyable_services_additional_network] if matrix_playbook_reverse_proxyable_services_additional_network and matrix_bot_go_neb_container_labels_traefik_enabled else [])

  2681.     ) | unique

  2682.   }}

  2683. 

  2684. matrix_bot_go_neb_container_labels_traefik_enabled: "{{ matrix_playbook_traefik_labels_enabled }}"

  2685. matrix_bot_go_neb_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  2686. matrix_bot_go_neb_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  2687. matrix_bot_go_neb_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  2688. 

  2689. ######################################################################

  2690. #

  2691. # /matrix-bot-go-neb

  2692. #

  2693. ######################################################################

  2694. 

  2695. 

  2696. ######################################################################

  2697. #

  2698. # matrix-bot-mjolnir

  2699. #

  2700. ######################################################################

  2701. 

  2702. # We don't enable bots by default.

  2703. matrix_bot_mjolnir_enabled: false

  2704. 

  2705. matrix_bot_mjolnir_systemd_required_services_list_auto: |

  2706.   {{

  2707.     matrix_addons_homeserver_systemd_services_list

  2708.     +

  2709.     (['matrix-pantalaimon.service'] if matrix_bot_mjolnir_pantalaimon_use else [])

  2710.   }}

  2711. 

  2712. matrix_bot_mjolnir_container_image_self_build: "{{ matrix_architecture != 'amd64' }}"

  2713. 

  2714. matrix_bot_mjolnir_container_network: "{{ matrix_addons_container_network }}"

  2715. 

  2716. matrix_bot_mjolnir_container_additional_networks_auto: |-

  2717.   {{

  2718.     ([] if matrix_addons_homeserver_container_network == '' else [matrix_addons_homeserver_container_network])

  2719.   }}

  2720. 

  2721. matrix_bot_mjolnir_homeserver_url: "{{ 'http://matrix-pantalaimon:8009' if matrix_bot_mjolnir_pantalaimon_use else matrix_addons_homeserver_client_api_url }}"

  2722. matrix_bot_mjolnir_raw_homeserver_url: "{{ matrix_addons_homeserver_client_api_url }}"

  2723. ######################################################################

  2724. #

  2725. # /matrix-bot-mjolnir

  2726. #

  2727. ######################################################################

  2728. 

  2729. 

  2730. ######################################################################

  2731. #

  2732. # matrix-bot-draupnir

  2733. #

  2734. ######################################################################

  2735. 

  2736. # We don't enable bots by default.

  2737. matrix_bot_draupnir_enabled: false

  2738. 

  2739. matrix_bot_draupnir_systemd_required_services_list_auto: |

  2740.   {{

  2741.     matrix_addons_homeserver_systemd_services_list

  2742.     +

  2743.     (['matrix-pantalaimon.service'] if matrix_bot_draupnir_pantalaimon_use else [])

  2744.   }}

  2745. 

  2746. matrix_bot_draupnir_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"

  2747. 

  2748. matrix_bot_draupnir_container_network: "{{ matrix_addons_container_network }}"

  2749. 

  2750. matrix_bot_draupnir_container_additional_networks_auto: |-

  2751.   {{

  2752.     ([] if matrix_addons_homeserver_container_network == '' else [matrix_addons_homeserver_container_network])

  2753.   }}

  2754. 

  2755. matrix_bot_draupnir_homeserver_url: "{{ 'http://matrix-pantalaimon:8009' if matrix_bot_draupnir_pantalaimon_use else matrix_addons_homeserver_client_api_url }}"

  2756. matrix_bot_draupnir_raw_homeserver_url: "{{ matrix_addons_homeserver_client_api_url }}"

  2757. 

  2758. ######################################################################

  2759. #

  2760. # /matrix-bot-draupnir

  2761. #

  2762. ######################################################################

  2763. 

  2764. 

  2765. ######################################################################

  2766. #

  2767. # matrix-appservice-draupnir-for-all

  2768. #

  2769. ######################################################################

  2770. 

  2771. # We don't enable bots by default.

  2772. matrix_appservice_draupnir_for_all_enabled: false

  2773. 

  2774. matrix_appservice_draupnir_for_all_systemd_required_services_list_auto: |

  2775.   {{

  2776.     matrix_addons_homeserver_systemd_services_list

  2777.     +

  2778.     ([devture_postgres_identifier ~ '.service'] if (devture_postgres_enabled and matrix_appservice_draupnir_for_all_database_hostname == devture_postgres_connection_hostname) else [])

  2779.   }}

  2780. 

  2781. matrix_appservice_draupnir_for_all_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"

  2782. 

  2783. matrix_appservice_draupnir_for_all_container_network: "{{ matrix_addons_container_network }}"

  2784. 

  2785. matrix_appservice_draupnir_for_all_container_additional_networks_auto: |-

  2786.   {{

  2787.     (

  2788.       ([] if matrix_addons_homeserver_container_network == '' else [matrix_addons_homeserver_container_network])

  2789.       +

  2790.       ([devture_postgres_container_network] if (devture_postgres_enabled and matrix_appservice_draupnir_for_all_database_hostname == devture_postgres_connection_hostname and matrix_appservice_draupnir_for_all_container_network != devture_postgres_container_network) else [])

  2791.     ) | unique

  2792.   }}

  2793. 

  2794. matrix_appservice_draupnir_for_all_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'd4a.as.token', rounds=655555) | to_uuid }}"

  2795. matrix_appservice_draupnir_for_all_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'd4a.hs.token', rounds=655555) | to_uuid }}"

  2796. 

  2797. matrix_appservice_draupnir_for_all_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  2798. matrix_appservice_draupnir_for_all_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'as.d4a.db', rounds=655555) | to_uuid }}"

  2799. 

  2800. ######################################################################

  2801. #

  2802. # /matrix-appservice-draupnir-for-all

  2803. #

  2804. ######################################################################

  2805. 

  2806. 

  2807. ######################################################################

  2808. #

  2809. # matrix-pantalaimon

  2810. #

  2811. ######################################################################

  2812. 

  2813. matrix_pantalaimon_enabled: false

  2814. 

  2815. matrix_pantalaimon_systemd_required_services_list_auto: |

  2816.   {{

  2817.     matrix_addons_homeserver_systemd_services_list

  2818.   }}

  2819. 

  2820. matrix_pantalaimon_container_network: "{{ matrix_homeserver_container_network }}"

  2821. 

  2822. matrix_pantalaimon_container_image_self_build: "{{ matrix_architecture not in ['amd64'] }}"

  2823. 

  2824. matrix_pantalaimon_homeserver_url: "{{ matrix_addons_homeserver_client_api_url }}"

  2825. 

  2826. ######################################################################

  2827. #

  2828. # /matrix-pantalaimon

  2829. #

  2830. ######################################################################

  2831. 

  2832. 

  2833. ######################################################################

  2834. #

  2835. # etke/backup_borg

  2836. #

  2837. ######################################################################

  2838. 

  2839. backup_borg_enabled: false

  2840. 

  2841. backup_borg_identifier: matrix-backup-borg

  2842. backup_borg_retention_prefix: matrix-

  2843. backup_borg_storage_archive_name_format: matrix-{now:%Y-%m-%d-%H%M%S}

  2844. 

  2845. backup_borg_base_path: "{{ matrix_base_data_path }}/backup-borg"

  2846. 

  2847. backup_borg_username: "{{ matrix_user_username }}"

  2848. backup_borg_uid: "{{ matrix_user_uid }}"

  2849. backup_borg_gid: "{{ matrix_user_gid }}"

  2850. 

  2851. backup_borg_container_network: "{{ devture_postgres_container_network if devture_postgres_enabled else backup_borg_identifier }}"

  2852. 

  2853. backup_borg_postgresql_version_detection_devture_postgres_role_name: "{{ 'galaxy/postgres' if devture_postgres_enabled else '' }}"

  2854. 

  2855. backup_borg_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm32', 'arm64'] }}"

  2856. 

  2857. backup_borg_postgresql_enabled: "{{ devture_postgres_enabled }}"

  2858. backup_borg_postgresql_databases_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  2859. backup_borg_postgresql_databases_username: "{{ devture_postgres_connection_username if devture_postgres_enabled else '' }}"

  2860. backup_borg_postgresql_databases_password: "{{ devture_postgres_connection_password if devture_postgres_enabled else '' }}"

  2861. backup_borg_postgresql_databases_port: "{{ devture_postgres_connection_port if devture_postgres_enabled else 5432 }}"

  2862. backup_borg_postgresql_databases: "{{ devture_postgres_managed_databases | map(attribute='name') if devture_postgres_enabled else [] }}"

  2863. 

  2864. backup_borg_location_source_directories:

  2865.   - "{{ matrix_base_data_path }}"

  2866. 

  2867. backup_borg_location_exclude_patterns: |

  2868.   {{

  2869.     ([matrix_synapse_media_store_path + '/local_thumbnails', matrix_synapse_media_store_path + '/remote_thumbnail', matrix_synapse_media_store_path + '/url_cache', matrix_synapse_media_store_path + '/url_cache_thumbnails'] if matrix_homeserver_implementation == 'synapse' else [])

  2870.     +

  2871.     ([devture_postgres_data_path] if devture_postgres_enabled else [])

  2872.   }}

  2873. 

  2874. backup_borg_systemd_required_services_list: |

  2875.   {{

  2876.     [devture_systemd_docker_base_docker_service_name]

  2877.     +

  2878.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  2879.   }}

  2880. 

  2881. ######################################################################

  2882. #

  2883. # /etke/backup_borg

  2884. #

  2885. ######################################################################

  2886. 

  2887. 

  2888. ######################################################################

  2889. #

  2890. # matrix-cactus-comments

  2891. #

  2892. ######################################################################

  2893. 

  2894. matrix_cactus_comments_enabled: false

  2895. 

  2896. matrix_cactus_comments_systemd_required_services_list_auto: |

  2897.   {{

  2898.     matrix_addons_homeserver_systemd_services_list

  2899.   }}

  2900. 

  2901. matrix_cactus_comments_container_image_self_build: "{{ matrix_architecture not in ['amd64'] }}"

  2902. 

  2903. matrix_cactus_comments_container_network: "{{ matrix_addons_container_network }}"

  2904. 

  2905. matrix_cactus_comments_container_additional_networks_auto: |-

  2906.   {{

  2907.     ([] if matrix_addons_homeserver_container_network == '' else [matrix_addons_homeserver_container_network])

  2908.   }}

  2909. 

  2910. matrix_cactus_comments_as_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'cactus.as.token', rounds=655555) | to_uuid }}"

  2911. matrix_cactus_comments_hs_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'cactus.hs.token', rounds=655555) | to_uuid }}"

  2912. 

  2913. matrix_cactus_comments_homeserver_url: "{{ matrix_addons_homeserver_client_api_url }}"

  2914. 

  2915. ######################################################################

  2916. #

  2917. # /matrix-cactus-comments

  2918. #

  2919. ######################################################################

  2920. 

  2921. ######################################################################

  2922. #

  2923. # matrix-cactus-comments-client

  2924. #

  2925. ######################################################################

  2926. 

  2927. matrix_cactus_comments_client_enabled: "{{ matrix_cactus_comments_enabled }}"

  2928. 

  2929. matrix_cactus_comments_client_hostname: "{{ matrix_server_fqn_matrix }}"

  2930. 

  2931. matrix_cactus_comments_client_container_network: "{{ matrix_addons_container_network }}"

  2932. 

  2933. matrix_cactus_comments_client_container_additional_networks_auto: |-

  2934.   {{

  2935.     (

  2936.       ([matrix_playbook_reverse_proxyable_services_additional_network] if (matrix_playbook_reverse_proxyable_services_additional_network and matrix_cactus_comments_client_container_labels_traefik_enabled) else [])

  2937.     ) | unique

  2938.   }}

  2939. 

  2940. matrix_cactus_comments_client_container_labels_traefik_enabled: "{{ matrix_playbook_reverse_proxy_type in ['playbook-managed-traefik', 'other-traefik-container'] }}"

  2941. matrix_cactus_comments_client_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  2942. matrix_cactus_comments_client_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  2943. matrix_cactus_comments_client_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  2944. 

  2945. ######################################################################

  2946. #

  2947. # /matrix-cactus-comments-client

  2948. #

  2949. ######################################################################

  2950. 

  2951. ######################################################################

  2952. #

  2953. # matrix-corporal

  2954. #

  2955. ######################################################################

  2956. 

  2957. matrix_corporal_enabled: false

  2958. 

  2959. matrix_corporal_systemd_required_services_list_auto: |

  2960.   {{

  2961.     (['matrix-' + matrix_homeserver_implementation + '.service'])

  2962.   }}

  2963. 

  2964. matrix_corporal_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm32', 'arm64'] }}"

  2965. 

  2966. matrix_corporal_container_http_gateway_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '41080') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  2967. matrix_corporal_container_http_api_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '41081') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  2968. 

  2969. matrix_corporal_container_network: matrix-corporal

  2970. 

  2971. matrix_corporal_container_additional_networks: |

  2972.   {{

  2973.     (

  2974.       ([matrix_playbook_reverse_proxyable_services_additional_network] if matrix_playbook_reverse_proxyable_services_additional_network else [])

  2975.       +

  2976.       ([matrix_homeserver_container_network] if matrix_corporal_container_network != matrix_homeserver_container_network else [])

  2977.     ) | unique

  2978.   }}

  2979. 

  2980. matrix_corporal_container_labels_traefik_enabled: "{{ matrix_playbook_reverse_proxy_type in ['playbook-managed-traefik', 'other-traefik-container'] }}"

  2981. matrix_corporal_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  2982. matrix_corporal_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  2983. matrix_corporal_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  2984. 

  2985. matrix_corporal_matrix_homeserver_scheme: "{{ 'https' if matrix_playbook_ssl_enabled else 'http' }}"

  2986. 

  2987. matrix_corporal_matrix_homeserver_api_endpoint: "{{ matrix_homeserver_container_url }}"

  2988. 

  2989. matrix_corporal_matrix_auth_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret }}"

  2990. 

  2991. # This is only useful if there's REST auth provider to make use of it.

  2992. matrix_corporal_http_gateway_internal_rest_auth_enabled: "{{ matrix_synapse_ext_password_provider_rest_auth_enabled }}"

  2993. 

  2994. matrix_corporal_matrix_registration_shared_secret: "{{ matrix_synapse_registration_shared_secret }}"

  2995. 

  2996. ######################################################################

  2997. #

  2998. # /matrix-corporal

  2999. #

  3000. ######################################################################

  3001. 

  3002. 

  3003. ######################################################################

  3004. #

  3005. # matrix-rageshake

  3006. #

  3007. ######################################################################

  3008. 

  3009. # We don't enable rageshake by default.

  3010. matrix_rageshake_enabled: false

  3011. 

  3012. matrix_rageshake_container_image_self_build: "{{ matrix_architecture not in ['amd64'] }}"

  3013. 

  3014. matrix_rageshake_hostname: "{{ matrix_server_fqn_rageshake }}"

  3015. 

  3016. matrix_rageshake_container_network: matrix-rageshake

  3017. 

  3018. matrix_rageshake_container_additional_networks: "{{ [matrix_playbook_reverse_proxyable_services_additional_network] if matrix_playbook_reverse_proxyable_services_additional_network else [] }}"

  3019. 

  3020. matrix_rageshake_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '9110') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  3021. 

  3022. matrix_rageshake_container_labels_traefik_enabled: "{{ matrix_playbook_traefik_labels_enabled }}"

  3023. matrix_rageshake_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  3024. matrix_rageshake_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  3025. matrix_rageshake_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  3026. 

  3027. ######################################################################

  3028. #

  3029. # /matrix-rageshake

  3030. #

  3031. ######################################################################

  3032. 

  3033. ######################################################################

  3034. #

  3035. # matrix-coturn

  3036. #

  3037. ######################################################################

  3038. 

  3039. matrix_coturn_enabled: true

  3040. 

  3041. matrix_coturn_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm32', 'arm64'] }}"

  3042. 

  3043. # We make the assumption that `ansible_host` points to an external IP address, which may not always be the case.

  3044. # Users are free to set `matrix_coturn_turn_external_ip_address` to an empty string

  3045. # to allow auto-detection (via an EchoIP service) to happen at runtime.

  3046. matrix_coturn_turn_external_ip_address: "{{ ansible_host }}"

  3047. 

  3048. matrix_coturn_turn_static_auth_secret: "{{ ('%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'coturn.sas', rounds=655555) | to_uuid) if matrix_coturn_authentication_method == 'auth-secret' else '' }}"

  3049. 

  3050. matrix_coturn_lt_cred_mech_username: "{{ ('%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'coturn.user', rounds=655555) | to_uuid) if matrix_coturn_authentication_method == 'lt-cred-mech' else '' }}"

  3051. matrix_coturn_lt_cred_mech_password: "{{ ('%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'coturn.pass', rounds=655555) | to_uuid) if matrix_coturn_authentication_method == 'lt-cred-mech' else '' }}"

  3052. 

  3053. matrix_coturn_tls_enabled: "{{ matrix_playbook_ssl_enabled }}"

  3054. 

  3055. matrix_coturn_tls_cert_path: |-

  3056.   {{

  3057.     {

  3058.       'playbook-managed-traefik': ('/certificate.crt' if devture_traefik_certs_dumper_enabled else ''),

  3059.       'other-traefik-container': ('/certificate.crt' if devture_traefik_certs_dumper_enabled else ''),

  3060.       'none': '',

  3061.     }[matrix_playbook_reverse_proxy_type]

  3062.   }}

  3063. 

  3064. matrix_coturn_tls_key_path: |-

  3065.   {{

  3066.     {

  3067.       'playbook-managed-traefik': ('/privatekey.key' if devture_traefik_certs_dumper_enabled else ''),

  3068.       'other-traefik-container': ('/privatekey.key' if devture_traefik_certs_dumper_enabled else ''),

  3069.       'none': '',

  3070.     }[matrix_playbook_reverse_proxy_type]

  3071.   }}

  3072. 

  3073. matrix_coturn_container_additional_volumes: |

  3074.   {{

  3075.     (

  3076.       [

  3077.        {

  3078.          'src': (devture_traefik_certs_dumper_dumped_certificates_dir_path +  '/' + matrix_server_fqn_matrix + '/certificate.crt'),

  3079.          'dst': '/certificate.crt',

  3080.          'options': 'ro',

  3081.        },

  3082.        {

  3083.          'src': (devture_traefik_certs_dumper_dumped_certificates_dir_path +  '/' + matrix_server_fqn_matrix + '/privatekey.key'),

  3084.          'dst': '/privatekey.key',

  3085.          'options': 'ro',

  3086.        },

  3087.       ] if (matrix_playbook_reverse_proxy_type in ['playbook-managed-traefik', 'other-traefik-container'] and devture_traefik_certs_dumper_enabled and matrix_coturn_tls_enabled and (matrix_coturn_tls_cert_path and matrix_coturn_tls_key_path)) else []

  3088.     )

  3089.   }}

  3090. 

  3091. matrix_coturn_systemd_required_services_list: |

  3092.   {{

  3093.     [devture_systemd_docker_base_docker_service_name]

  3094.     +

  3095.     ([devture_traefik_certs_dumper_identifier + '-wait-for-domain@' + matrix_server_fqn_matrix + '.service'] if matrix_playbook_reverse_proxy_type in ['playbook-managed-traefik', 'other-traefik-container'] and devture_traefik_certs_dumper_enabled and matrix_coturn_tls_enabled else [])

  3096.   }}

  3097. 

  3098. ######################################################################

  3099. #

  3100. # /matrix-coturn

  3101. #

  3102. ######################################################################

  3103. 

  3104. ######################################################################

  3105. #

  3106. # matrix-dimension

  3107. #

  3108. ######################################################################

  3109. 

  3110. matrix_dimension_enabled: false

  3111. 

  3112. matrix_dimension_container_image_self_build: "{{ matrix_architecture != 'amd64' }}"

  3113. 

  3114. matrix_dimension_scheme: "{{ 'https' if matrix_playbook_ssl_enabled else 'http' }}"

  3115. matrix_dimension_hostname: "{{ matrix_server_fqn_dimension }}"

  3116. 

  3117. matrix_dimension_container_network: "{{ matrix_addons_container_network }}"

  3118. 

  3119. # Dimension is connected both to `matrix_addons_homeserver_container_network` and `matrix_homeserver_container_network`,

  3120. # because `matrix_dimension_homeserver_clientServerUrl` and `matrix_dimension_homeserver_federationUrl` are potentially

  3121. # going to different places.

  3122. matrix_dimension_container_additional_networks: |

  3123.   {{

  3124.     (

  3125.       ([] if matrix_addons_homeserver_container_network == '' else [matrix_addons_homeserver_container_network])

  3126.       +

  3127.       ([matrix_homeserver_container_network] if matrix_homeserver_container_network != matrix_dimension_container_network else [])

  3128.       +

  3129.       ([devture_postgres_container_network] if (devture_postgres_enabled and matrix_dimension_database_hostname == devture_postgres_connection_hostname and devture_postgres_container_network != matrix_dimension_container_network) else [])

  3130.       +

  3131.       ([matrix_playbook_reverse_proxyable_services_additional_network] if matrix_playbook_reverse_proxyable_services_additional_network else [])

  3132.     ) | unique

  3133.   }}

  3134. 

  3135. matrix_dimension_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '8184') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  3136. 

  3137. matrix_dimension_container_labels_traefik_enabled: "{{ matrix_playbook_traefik_labels_enabled }}"

  3138. matrix_dimension_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  3139. matrix_dimension_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  3140. matrix_dimension_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  3141. 

  3142. matrix_dimension_homeserver_clientServerUrl: "{{ matrix_addons_homeserver_client_api_url }}"

  3143. matrix_dimension_homeserver_federationUrl: "{{ matrix_homeserver_container_federation_url }}"

  3144. matrix_dimension_homeserver_mediaUrl: "{{ ('https' if matrix_playbook_ssl_enabled else 'http') }}://{{ matrix_server_fqn_matrix }}"

  3145. 

  3146. # Dimension depends both on `matrix_addons_homeserver_systemd_services_list` and on the homeserver service,

  3147. # because `matrix_dimension_homeserver_clientServerUrl` and `matrix_dimension_homeserver_federationUrl` are potentially

  3148. # going to different places.

  3149. matrix_dimension_systemd_required_services_list_auto: |

  3150.   {{

  3151.     (

  3152.       matrix_addons_homeserver_systemd_services_list

  3153.       +

  3154.       ['matrix-' + matrix_homeserver_implementation + '.service']

  3155.       +

  3156.       ([devture_postgres_identifier ~ '.service'] if (devture_postgres_enabled and matrix_dimension_database_hostname == devture_postgres_connection_hostname) else [])

  3157.     ) | unique

  3158.   }}

  3159. 

  3160. # Postgres is the default, except if not using internal Postgres server

  3161. matrix_dimension_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  3162. matrix_dimension_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  3163. matrix_dimension_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'dimension.db', rounds=655555) | to_uuid }}"

  3164. 

  3165. ######################################################################

  3166. #

  3167. # /matrix-dimension

  3168. #

  3169. ######################################################################

  3170. 

  3171. ######################################################################

  3172. #

  3173. # etke/etherpad

  3174. #

  3175. ######################################################################

  3176. 

  3177. etherpad_enabled: false

  3178. 

  3179. etherpad_identifier: matrix-etherpad

  3180. 

  3181. etherpad_scheme: "{{ 'https' if matrix_playbook_ssl_enabled else 'http' }}"

  3182. 

  3183. etherpad_base_path: "{{ matrix_base_data_path }}/etherpad"

  3184. 

  3185. etherpad_framing_enabled: "{{ matrix_dimension_enabled or jitsi_enabled }}"

  3186. 

  3187. etherpad_hostname: "{{ matrix_server_fqn_etherpad }}"

  3188. 

  3189. etherpad_container_image_self_build: "{{ matrix_architecture not in ['amd64'] }}"

  3190. 

  3191. etherpad_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '9001') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  3192. 

  3193. etherpad_container_network: "{{ matrix_addons_container_network }}"

  3194. 

  3195. etherpad_container_additional_networks: |

  3196.   {{

  3197.     (

  3198.       ([matrix_playbook_reverse_proxyable_services_additional_network] if matrix_playbook_reverse_proxyable_services_additional_network else [])

  3199.       +

  3200.       ([devture_postgres_container_network] if devture_postgres_enabled and devture_postgres_container_network != etherpad_container_network else [])

  3201.     ) | unique

  3202.   }}

  3203. 

  3204. etherpad_container_labels_traefik_enabled: "{{ matrix_playbook_reverse_proxy_type in ['playbook-managed-traefik', 'other-traefik-container'] }}"

  3205. etherpad_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  3206. etherpad_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  3207. etherpad_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  3208. 

  3209. etherpad_systemd_required_services_list: |

  3210.   {{

  3211.     [devture_systemd_docker_base_docker_service_name]

  3212.     +

  3213.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  3214.   }}

  3215. 

  3216. etherpad_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  3217. etherpad_database_name: matrix_etherpad

  3218. etherpad_database_username: matrix_etherpad

  3219. etherpad_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'etherpad.db', rounds=655555) | to_uuid }}"

  3220. 

  3221. ######################################################################

  3222. #

  3223. # /etke/etherpad

  3224. #

  3225. ######################################################################

  3226. 

  3227. ######################################################################

  3228. #

  3229. # matrix-dynamic-dns

  3230. #

  3231. ######################################################################

  3232. 

  3233. matrix_dynamic_dns_enabled: false

  3234. 

  3235. matrix_dynamic_dns_container_network: matrix-dynamic-dns

  3236. 

  3237. ######################################################################

  3238. #

  3239. # /matrix-dynamic-dns

  3240. #

  3241. ######################################################################

  3242. 

  3243. ######################################################################

  3244. #

  3245. # matrix-email2matrix

  3246. #

  3247. ######################################################################

  3248. 

  3249. matrix_email2matrix_enabled: false

  3250. 

  3251. matrix_email2matrix_systemd_required_services_list_auto: |

  3252.   {{

  3253.     matrix_addons_homeserver_systemd_services_list

  3254.   }}

  3255. 

  3256. matrix_email2matrix_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm32', 'arm64'] }}"

  3257. 

  3258. matrix_email2matrix_container_network: "{{ matrix_addons_container_network }}"

  3259. 

  3260. matrix_email2matrix_container_additional_networks_auto: |-

  3261.   {{

  3262.     ([] if matrix_addons_homeserver_container_network == '' else [matrix_addons_homeserver_container_network])

  3263.   }}

  3264. 

  3265. ######################################################################

  3266. #

  3267. # /matrix-email2matrix

  3268. #

  3269. ######################################################################

  3270. 

  3271. ######################################################################

  3272. #

  3273. # jitsi

  3274. #

  3275. ######################################################################

  3276. 

  3277. jitsi_enabled: false

  3278. 

  3279. jitsi_architecture: "{{ matrix_architecture }}"

  3280. 

  3281. jitsi_hostname: "{{ matrix_server_fqn_jitsi }}"

  3282. 

  3283. jitsi_identifier: matrix-jitsi

  3284. 

  3285. jitsi_base_path: "{{ matrix_base_data_path }}/jitsi"

  3286. 

  3287. jitsi_uid: "{{ matrix_user_uid }}"

  3288. jitsi_gid: "{{ matrix_user_gid }}"

  3289. 

  3290. jitsi_user_username: "{{ matrix_user_username }}"

  3291. 

  3292. jitsi_web_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '13080') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  3293. 

  3294. jitsi_web_container_additional_networks_auto: |

  3295.   {{

  3296.     ([matrix_playbook_reverse_proxyable_services_additional_network] if matrix_playbook_reverse_proxyable_services_additional_network else [])

  3297.   }}

  3298. 

  3299. jitsi_jvb_container_colibri_ws_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '13090') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  3300. 

  3301. jitsi_jvb_container_additional_networks_auto: |

  3302.   {{

  3303.     ([matrix_playbook_reverse_proxyable_services_additional_network] if matrix_playbook_reverse_proxyable_services_additional_network else [])

  3304.   }}

  3305. 

  3306. jitsi_prosody_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '5280') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  3307. 

  3308. jitsi_prosody_container_additional_networks_auto: |

  3309.   {{

  3310.     ([matrix_playbook_reverse_proxyable_services_additional_network] if matrix_playbook_reverse_proxyable_services_additional_network else [])

  3311.   }}

  3312. 

  3313. jitsi_container_labels_traefik_enabled: "{{ matrix_playbook_traefik_labels_enabled }}"

  3314. jitsi_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  3315. jitsi_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  3316. jitsi_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  3317. 

  3318. jitsi_jibri_xmpp_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'jibri', rounds=655555) | to_uuid }}"

  3319. jitsi_jicofo_auth_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'jicofo', rounds=655555) | to_uuid }}"

  3320. jitsi_jvb_auth_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'jvb', rounds=655555) | to_uuid }}"

  3321. 

  3322. jitsi_web_stun_servers: |

  3323.   {{

  3324.     [

  3325.       'stun:' + matrix_server_fqn_matrix + ':5349',

  3326.       'stun:' + matrix_server_fqn_matrix + ':3478',

  3327.     ]

  3328.     if matrix_coturn_enabled

  3329.     else [ 'stun:meet-jit-si-turnrelay.jitsi.net:443']

  3330.   }}

  3331. 

  3332. # The Jitsi instance installed by this playbook is meant for embedding into Matrix clients, so framing is allowed.

  3333. jitsi_web_framing_enabled: true

  3334. 

  3335. # Jitsi (Prosody) only seems to support authenticating with Coturn using `auth-secret`, not `lt-cred-mech`.

  3336. # See: https://prosody.im/doc/coturn

  3337. jitsi_turn_credentials: "{{ matrix_coturn_turn_static_auth_secret if (matrix_coturn_enabled and matrix_coturn_authentication_method == 'auth-secret') else '' }}"

  3338. jitsi_turn_host: "{{ ('turn.' + matrix_server_fqn_matrix) if matrix_coturn_enabled else '' }}"

  3339. jitsi_turns_host: "{{ ('turn.' + matrix_server_fqn_matrix) if matrix_coturn_enabled else '' }}"

  3340. jitsi_turn_port: "{{ matrix_coturn_container_stun_plain_host_bind_port if matrix_coturn_enabled else '' }}"

  3341. jitsi_turns_port: "{{ matrix_coturn_container_stun_tls_host_bind_port if matrix_coturn_enabled else '' }}"

  3342. 

  3343. # If the self-hosted Etherpad instance is available, it will also show up in Jitsi conferences,

  3344. # unless explicitly disabled by setting `jitsi_etherpad_enabled` to false.

  3345. # Falls back to the scalar.vector.im etherpad in case someone sets `jitsi_etherpad_enabled` to true,

  3346. # while also setting `etherpad_enabled` to false.

  3347. jitsi_etherpad_enabled: "{{ etherpad_enabled }}"

  3348. jitsi_etherpad_base: "{{ etherpad_base_url if etherpad_enabled else 'https://scalar.vector.im/etherpad' }}"

  3349. 

  3350. # Allow verification using JWT and matrix-UVS

  3351. jitsi_prosody_auth_matrix_uvs_sync_power_levels: "{{ matrix_user_verification_service_enabled }}"

  3352. jitsi_prosody_auth_matrix_uvs_auth_token: "{{ matrix_user_verification_service_uvs_auth_token }}"

  3353. jitsi_prosody_auth_matrix_uvs_location: "{{ matrix_user_verification_service_container_url }}"

  3354. 

  3355. jitsi_self_check_validate_certificates: "{{ matrix_playbook_ssl_enabled }}"

  3356. 

  3357. # Gravatar is enabled by default upstream, but there's no need to leak data there needlessly

  3358. # when embedding Jitsi in Matrix rooms.

  3359. jitsi_disable_gravatar: true

  3360. 

  3361. ######################################################################

  3362. #

  3363. # /jitsi

  3364. #

  3365. ######################################################################

  3366. 

  3367. 

  3368. ######################################################################

  3369. #

  3370. # matrix-ldap-registration-proxy

  3371. #

  3372. ######################################################################

  3373. 

  3374. # This is only for users with a specific LDAP setup

  3375. matrix_ldap_registration_proxy_enabled: false

  3376. 

  3377. matrix_ldap_registration_proxy_hostname: "{{ matrix_server_fqn_matrix }}"

  3378. 

  3379. matrix_ldap_registration_proxy_matrix_server_url: "{{ matrix_addons_homeserver_client_api_url }}"

  3380. 

  3381. matrix_ldap_registration_proxy_systemd_required_services_list_auto: |

  3382.   {{

  3383.     matrix_addons_homeserver_systemd_services_list

  3384.   }}

  3385. 

  3386. matrix_ldap_registration_proxy_container_network: "{{ matrix_addons_container_network }}"

  3387. 

  3388. matrix_ldap_registration_proxy_container_additional_networks_auto: |-

  3389.   {{

  3390.     (

  3391.       ([] if matrix_addons_homeserver_container_network == '' else [matrix_addons_homeserver_container_network])

  3392.       +

  3393.       ([matrix_playbook_reverse_proxyable_services_additional_network] if (matrix_playbook_reverse_proxyable_services_additional_network and matrix_ldap_registration_proxy_container_labels_traefik_enabled) else [])

  3394.     ) | unique

  3395.   }}

  3396. 

  3397. matrix_ldap_registration_proxy_container_labels_traefik_enabled: "{{ matrix_playbook_reverse_proxy_type in ['playbook-managed-traefik', 'other-traefik-container'] }}"

  3398. matrix_ldap_registration_proxy_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  3399. matrix_ldap_registration_proxy_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  3400. matrix_ldap_registration_proxy_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  3401. 

  3402. ######################################################################

  3403. #

  3404. # /matrix-ldap-registration-proxy

  3405. #

  3406. ######################################################################

  3407. 

  3408. 

  3409. ########################################################################

  3410. #                                                                      #

  3411. # exim-relay                                                           #

  3412. #                                                                      #

  3413. ########################################################################

  3414. 

  3415. # We set up an Exim email relay by default.

  3416. # This is so that the homeserver and various other services can send emails through it.

  3417. # To completely disable this service, use: `exim_relay_enabled: false`

  3418. 

  3419. exim_relay_identifier: "matrix-exim-relay"

  3420. 

  3421. exim_relay_base_path: "{{ matrix_base_data_path }}/exim-relay"

  3422. 

  3423. exim_relay_uid: "{{ matrix_user_uid }}"

  3424. exim_relay_gid: "{{ matrix_user_gid }}"

  3425. 

  3426. exim_relay_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm32', 'arm64'] }}"

  3427. 

  3428. exim_relay_hostname: "{{ matrix_server_fqn_matrix }}"

  3429. 

  3430. exim_relay_sender_address: "matrix@{{ exim_relay_hostname }}"

  3431. 

  3432. ########################################################################

  3433. #                                                                      #

  3434. # /exim-relay                                                          #

  3435. #                                                                      #

  3436. ########################################################################

  3437. 

  3438. 

  3439. ######################################################################

  3440. #

  3441. # matrix-ma1sd

  3442. #

  3443. ######################################################################

  3444. 

  3445. # We no longer install the ma1sd identity server by default.

  3446. #

  3447. # The main reason we used to install ma1sd by default in the past was to

  3448. # prevent Element from talking to the `matrix.org` / `vector.im` identity servers,

  3449. # by forcing it to talk to our own self-hosted (but otherwise useless) identity server instead,

  3450. # thus preventing contact list leaks.

  3451. #

  3452. # Since Element no longer defaults to using a public identity server if another one is not provided,

  3453. # we can stop installing ma1sd.

  3454. matrix_ma1sd_enabled: false

  3455. 

  3456. matrix_ma1sd_scheme: "{{ 'https' if matrix_playbook_ssl_enabled else 'http' }}"

  3457. matrix_ma1sd_hostname: "{{ matrix_server_fqn_matrix }}"

  3458. 

  3459. matrix_ma1sd_container_image_self_build: "{{ matrix_architecture != 'amd64' }}"

  3460. 

  3461. matrix_ma1sd_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '' ~ matrix_ma1sd_container_port | string) if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  3462. 

  3463. matrix_ma1sd_container_network: "{{ matrix_homeserver_container_network }}"

  3464. 

  3465. matrix_ma1sd_container_additional_networks_auto: |

  3466.   {{

  3467.     (

  3468.       ([matrix_homeserver_container_network] if (matrix_ma1sd_container_network != matrix_homeserver_container_network) else [])

  3469.       +

  3470.       ([devture_postgres_container_network] if (devture_postgres_enabled and matrix_ma1sd_database_hostname == devture_postgres_connection_hostname and matrix_ma1sd_container_network != devture_postgres_container_network) else [])

  3471.       +

  3472.       ([exim_relay_container_network] if (exim_relay_enabled and matrix_ma1sd_threepid_medium_email_connectors_smtp_host == exim_relay_identifier and matrix_ma1sd_container_network != exim_relay_container_network) else [])

  3473.       +

  3474.       ([matrix_playbook_reverse_proxyable_services_additional_network] if (matrix_playbook_reverse_proxyable_services_additional_network and matrix_ma1sd_container_labels_traefik_enabled) else [])

  3475.     ) | unique

  3476.   }}

  3477. 

  3478. matrix_ma1sd_container_labels_traefik_enabled: "{{ matrix_playbook_reverse_proxy_type in ['playbook-managed-traefik', 'other-traefik-container'] }}"

  3479. matrix_ma1sd_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  3480. matrix_ma1sd_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  3481. matrix_ma1sd_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  3482. 

  3483. # We enable Synapse integration via its Postgres database by default.

  3484. # When using another Identity store, you might wish to disable this and define

  3485. # your own configuration in `matrix_ma1sd_configuration_extension_yaml`.

  3486. matrix_ma1sd_synapsesql_enabled: true

  3487. matrix_ma1sd_synapsesql_type: postgresql

  3488. matrix_ma1sd_synapsesql_connection: //{{ matrix_synapse_database_host }}/{{ matrix_synapse_database_database }}?user={{ matrix_synapse_database_user | urlencode() }}&password={{ matrix_synapse_database_password | urlencode() }}

  3489. 

  3490. matrix_ma1sd_dns_overwrite_enabled: true

  3491. matrix_ma1sd_dns_overwrite_homeserver_client_name: "{{ matrix_server_fqn_matrix }}"

  3492. matrix_ma1sd_dns_overwrite_homeserver_client_value: "{{ matrix_addons_homeserver_client_api_url }}"

  3493. 

  3494. # By default, we send mail through the exim relay service.

  3495. matrix_ma1sd_threepid_medium_email_identity_from: "{{ exim_relay_sender_address }}"

  3496. matrix_ma1sd_threepid_medium_email_connectors_smtp_host: "{{ exim_relay_identifier }}"

  3497. matrix_ma1sd_threepid_medium_email_connectors_smtp_port: 8025

  3498. matrix_ma1sd_threepid_medium_email_connectors_smtp_tls: 0

  3499. 

  3500. matrix_ma1sd_self_check_validate_certificates: "{{ matrix_playbook_ssl_enabled }}"

  3501. 

  3502. matrix_ma1sd_systemd_required_services_list_auto: |

  3503.   {{

  3504.     matrix_addons_homeserver_systemd_services_list

  3505.     +

  3506.     ([devture_postgres_identifier ~ '.service'] if (devture_postgres_enabled and matrix_ma1sd_database_hostname == devture_postgres_connection_hostname) else [])

  3507.   }}

  3508. 

  3509. matrix_ma1sd_systemd_wanted_services_list_auto: |

  3510.   {{

  3511.     ([exim_relay_identifier ~ '.service'] if (exim_relay_enabled and matrix_ma1sd_threepid_medium_email_connectors_smtp_host == exim_relay_identifier) else [])

  3512.   }}

  3513. 

  3514. # Postgres is the default, except if not using internal Postgres server

  3515. matrix_ma1sd_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  3516. matrix_ma1sd_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  3517. matrix_ma1sd_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'ma1sd.db', rounds=655555) | to_uuid }}"

  3518. 

  3519. ######################################################################

  3520. #

  3521. # /matrix-ma1sd

  3522. #

  3523. ######################################################################

  3524. 

  3525. ######################################################################

  3526. #

  3527. # matrix-media-repo

  3528. #

  3529. ######################################################################

  3530. 

  3531. matrix_media_repo_enabled: false

  3532. 

  3533. matrix_media_repo_container_network: "{{ matrix_homeserver_container_network }}"

  3534. 

  3535. matrix_media_repo_container_additional_networks: |

  3536.   {{

  3537.     (

  3538.       ([matrix_homeserver_container_network] if (matrix_media_repo_container_network != matrix_homeserver_container_network) else [])

  3539.       +

  3540.       ([devture_postgres_container_network] if (devture_postgres_enabled and matrix_media_repo_database_hostname == devture_postgres_connection_hostname and devture_postgres_container_network != matrix_media_repo_container_network) else [])

  3541.       +

  3542.       ([matrix_playbook_reverse_proxyable_services_additional_network] if (matrix_playbook_reverse_proxyable_services_additional_network and matrix_media_repo_container_labels_traefik_enabled) else [])

  3543.     ) | unique

  3544.   }}

  3545. 

  3546. matrix_media_repo_container_labels_traefik_enabled: "{{ matrix_playbook_traefik_labels_enabled }}"

  3547. matrix_media_repo_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  3548. matrix_media_repo_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  3549. matrix_media_repo_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  3550. 

  3551. matrix_media_repo_container_labels_traefik_internal_media_enabled: "{{ matrix_playbook_internal_matrix_client_api_traefik_entrypoint_enabled }}"

  3552. matrix_media_repo_container_labels_traefik_internal_media_entrypoints: "{{ matrix_playbook_internal_matrix_client_api_traefik_entrypoint_name }}"

  3553. 

  3554. matrix_media_repo_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  3555. matrix_media_repo_database_username: matrix_media_repo

  3556. matrix_media_repo_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mediarepo.db', rounds=655555) | to_uuid }}"

  3557. matrix_media_repo_database_name: matrix_media_repo

  3558. 

  3559. matrix_media_repo_systemd_required_services_list_auto: |

  3560.   {{

  3561.     matrix_addons_homeserver_systemd_services_list

  3562.     +

  3563.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled and matrix_media_repo_database_hostname == devture_postgres_connection_hostname else [])

  3564.   }}

  3565. 

  3566. # Auto configured server setup by the playbook

  3567. matrix_media_repo_homeservers_auto:

  3568.   -  # Keep the dash from this line.

  3569. 

  3570.     # This should match the server_name of your homeserver, and the Host header

  3571.     # provided to the media repo.

  3572.     name: "{{ matrix_domain }}"

  3573. 

  3574.     # The base URL to where the homeserver can actually be reached by MMR.

  3575.     csApi: "{{ matrix_homeserver_container_url }}"

  3576. 

  3577.     # The number of consecutive failures in calling this homeserver before the

  3578.     # media repository will start backing off. This defaults to 10 if not given.

  3579.     backoffAt: 10

  3580. 

  3581.     # The admin API interface supported by the homeserver. MMR uses a subset of the admin API

  3582.     # during certain operations, like attempting to purge media from a room or validating server

  3583.     # admin status. This should be set to one of "synapse", "dendrite", or "matrix". When set

  3584.     # to "matrix", most functionality requiring the admin API will not work.

  3585.     adminApiKind: "{{ 'synapse' if matrix_homeserver_implementation == 'synapse' else ('dendrite' if matrix_homeserver_implementation == 'dendrite' else 'matrix') }}"

  3586. 

  3587. matrix_media_repo_homeserver_federation_enabled: "{{ matrix_homeserver_federation_enabled }}"

  3588. 

  3589. ######################################################################

  3590. #

  3591. # /matrix-media-repo

  3592. #

  3593. ######################################################################

  3594. 

  3595. 

  3596. ########################################################################

  3597. #                                                                      #

  3598. # com.devture.ansible.role.postgres                                    #

  3599. #                                                                      #

  3600. ########################################################################

  3601. 

  3602. # To completely disable installing Postgres, use `devture_postgres_enabled: false`.

  3603. 

  3604. devture_postgres_identifier: matrix-postgres

  3605. 

  3606. devture_postgres_architecture: "{{ matrix_architecture }}"

  3607. 

  3608. devture_postgres_base_path: "{{ matrix_base_data_path }}/postgres"

  3609. 

  3610. devture_postgres_uid: "{{ matrix_user_uid }}"

  3611. devture_postgres_gid: "{{ matrix_user_gid }}"

  3612. 

  3613. devture_postgres_connection_username: matrix

  3614. devture_postgres_db_name: matrix

  3615. 

  3616. devture_postgres_systemd_services_to_stop_for_maintenance_list_auto: "{{ devture_systemd_service_manager_services_list_auto | map(attribute='name') | reject('equalto', (devture_postgres_identifier + '.service')) }}"

  3617. 

  3618. devture_postgres_max_connections: "{{ 500 if matrix_synapse_workers_enabled else 200 }}"

  3619. 

  3620. devture_postgres_managed_databases_auto: |

  3621.   {{

  3622.     ([{

  3623.       'name': matrix_synapse_database_database,

  3624.       'username': matrix_synapse_database_user,

  3625.       'password': matrix_synapse_database_password,

  3626.     }] if (matrix_synapse_enabled and matrix_synapse_database_host == devture_postgres_connection_hostname) else [])

  3627.     +

  3628.     ([{

  3629.       'name': matrix_dendrite_federation_api_database,

  3630.       'username': matrix_dendrite_database_user,

  3631.       'password': matrix_dendrite_database_password,

  3632.     },{

  3633.       'name': matrix_dendrite_key_server_database,

  3634.       'username': matrix_dendrite_database_user,

  3635.       'password': matrix_dendrite_database_password,

  3636.     },{

  3637.       'name': matrix_dendrite_media_api_database,

  3638.       'username': matrix_dendrite_database_user,

  3639.       'password': matrix_dendrite_database_password,

  3640.     },{

  3641.       'name': matrix_dendrite_room_database,

  3642.       'username': matrix_dendrite_database_user,

  3643.       'password': matrix_dendrite_database_password,

  3644.     },{

  3645.       'name': matrix_dendrite_sync_api_database,

  3646.       'username': matrix_dendrite_database_user,

  3647.       'password': matrix_dendrite_database_password,

  3648.     },{

  3649.       'name': matrix_dendrite_user_api_database,

  3650.       'username': matrix_dendrite_database_user,

  3651.       'password': matrix_dendrite_database_password,

  3652.     },{

  3653.       'name': matrix_dendrite_relay_api_database,

  3654.       'username': matrix_dendrite_database_user,

  3655.       'password': matrix_dendrite_database_password,

  3656.     },{

  3657.       'name': matrix_dendrite_push_server_database,

  3658.       'username': matrix_dendrite_database_user,

  3659.       'password': matrix_dendrite_database_password,

  3660.     },{

  3661.       'name': matrix_dendrite_mscs_database,

  3662.       'username': matrix_dendrite_database_user,

  3663.       'password': matrix_dendrite_database_password,

  3664.     }] if (matrix_dendrite_enabled and matrix_dendrite_database_hostname == devture_postgres_connection_hostname) else [])

  3665.     +

  3666.     ([{

  3667.       'name': matrix_sliding_sync_database_name,

  3668.       'username': matrix_sliding_sync_database_username,

  3669.       'password': matrix_sliding_sync_database_password,

  3670.     }] if (matrix_sliding_sync_enabled) else [])

  3671.     +

  3672.     ([{

  3673.       'name': matrix_ma1sd_database_name,

  3674.       'username': matrix_ma1sd_database_username,

  3675.       'password': matrix_ma1sd_database_password,

  3676.     }] if (matrix_ma1sd_enabled and matrix_ma1sd_database_engine == 'postgres' and matrix_ma1sd_database_hostname == devture_postgres_connection_hostname) else [])

  3677.     +

  3678.     ([{

  3679.       'name': matrix_bot_matrix_reminder_bot_database_name,

  3680.       'username': matrix_bot_matrix_reminder_bot_database_username,

  3681.       'password': matrix_bot_matrix_reminder_bot_database_password,

  3682.     }] if (matrix_bot_matrix_reminder_bot_enabled and matrix_bot_matrix_reminder_bot_database_engine == 'postgres' and matrix_bot_matrix_reminder_bot_database_hostname == devture_postgres_connection_hostname) else [])

  3683.     +

  3684.     ([{

  3685.       'name': matrix_bot_honoroit_database_name,

  3686.       'username': matrix_bot_honoroit_database_username,

  3687.       'password': matrix_bot_honoroit_database_password,

  3688.     }] if (matrix_bot_honoroit_enabled and matrix_bot_honoroit_database_engine == 'postgres' and matrix_bot_honoroit_database_hostname == devture_postgres_connection_hostname) else [])

  3689.     +

  3690.     ([{

  3691.       'name': matrix_bot_postmoogle_database_name,

  3692.       'username': matrix_bot_postmoogle_database_username,

  3693.       'password': matrix_bot_postmoogle_database_password,

  3694.     }] if (matrix_bot_postmoogle_enabled and matrix_bot_postmoogle_database_engine == 'postgres' and matrix_bot_postmoogle_database_hostname == devture_postgres_connection_hostname) else [])

  3695.     +

  3696.     ([{

  3697.       'name': matrix_bot_maubot_database_name,

  3698.       'username': matrix_bot_maubot_database_username,

  3699.       'password': matrix_bot_maubot_database_password,

  3700.     }] if (matrix_bot_maubot_enabled  and matrix_bot_maubot_database_engine == 'postgres' and matrix_bot_maubot_database_hostname == devture_postgres_connection_hostname) else [])

  3701.     +

  3702.     ([{

  3703.       'name': matrix_bot_buscarron_database_name,

  3704.       'username': matrix_bot_buscarron_database_username,

  3705.       'password': matrix_bot_buscarron_database_password,

  3706.     }] if (matrix_bot_buscarron_enabled and matrix_bot_buscarron_database_engine == 'postgres' and matrix_bot_buscarron_database_hostname == devture_postgres_connection_hostname) else [])

  3707.     +

  3708.     ([{

  3709.       'name': matrix_registration_database_name,

  3710.       'username': matrix_registration_database_username,

  3711.       'password': matrix_registration_database_password,

  3712.     }] if (matrix_registration_enabled and matrix_registration_database_engine == 'postgres' and matrix_registration_database_hostname == devture_postgres_connection_hostname) else [])

  3713.     +

  3714.     ([{

  3715.       'name': matrix_appservice_discord_database_name,

  3716.       'username': matrix_appservice_discord_database_username,

  3717.       'password': matrix_appservice_discord_database_password,

  3718.     }] if (matrix_appservice_discord_enabled and matrix_appservice_discord_database_engine == 'postgres' and matrix_appservice_discord_database_hostname == devture_postgres_connection_hostname) else [])

  3719.     +

  3720.     ([{

  3721.       'name': matrix_appservice_draupnir_for_all_database_name,

  3722.       'username': matrix_appservice_draupnir_for_all_database_username,

  3723.       'password': matrix_appservice_draupnir_for_all_database_password,

  3724.     }] if (matrix_appservice_draupnir_for_all_enabled and matrix_appservice_draupnir_for_all_database_hostname == devture_postgres_connection_hostname) else [])

  3725.     +

  3726.     ([{

  3727.       'name': matrix_appservice_slack_database_name,

  3728.       'username': matrix_appservice_slack_database_username,

  3729.       'password': matrix_appservice_slack_database_password,

  3730.     }] if (matrix_appservice_slack_enabled and matrix_appservice_slack_database_engine == 'postgres' and matrix_appservice_slack_database_hostname == devture_postgres_connection_hostname) else [])

  3731.     +

  3732.     ([{

  3733.       'name': matrix_appservice_irc_database_name,

  3734.       'username': matrix_appservice_irc_database_username,

  3735.       'password': matrix_appservice_irc_database_password,

  3736.     }] if (matrix_appservice_irc_enabled and matrix_appservice_irc_database_engine == 'postgres' and matrix_appservice_irc_database_hostname == devture_postgres_connection_hostname) else [])

  3737.     +

  3738.     ([{

  3739.       'name': matrix_appservice_kakaotalk_database_name,

  3740.       'username': matrix_appservice_kakaotalk_database_username,

  3741.       'password': matrix_appservice_kakaotalk_database_password,

  3742.     }] if (matrix_appservice_kakaotalk_enabled and matrix_appservice_kakaotalk_database_engine == 'postgres' and matrix_appservice_kakaotalk_database_hostname == devture_postgres_connection_hostname) else [])

  3743.     +

  3744.     ([{

  3745.       'name': matrix_beeper_linkedin_database_name,

  3746.       'username': matrix_beeper_linkedin_database_username,

  3747.       'password': matrix_beeper_linkedin_database_password,

  3748.     }] if (matrix_beeper_linkedin_enabled and matrix_beeper_linkedin_database_engine == 'postgres' and matrix_beeper_linkedin_database_hostname == devture_postgres_connection_hostname) else [])

  3749.     +

  3750.     ([{

  3751.       'name': matrix_go_skype_bridge_database_name,

  3752.       'username': matrix_go_skype_bridge_database_username,

  3753.       'password': matrix_go_skype_bridge_database_password,

  3754.     }] if (matrix_go_skype_bridge_enabled and matrix_go_skype_bridge_database_engine == 'postgres' and matrix_go_skype_bridge_database_hostname == devture_postgres_connection_hostname) else [])

  3755.     +

  3756.     ([{

  3757.       'name': matrix_wechat_database_name,

  3758.       'username': matrix_wechat_database_username,

  3759.       'password': matrix_wechat_database_password,

  3760.     }] if (matrix_wechat_enabled and matrix_wechat_database_engine == 'postgres' and matrix_wechat_database_hostname == devture_postgres_connection_hostname) else [])

  3761.     +

  3762.     ([{

  3763.       'name': matrix_mautrix_facebook_database_name,

  3764.       'username': matrix_mautrix_facebook_database_username,

  3765.       'password': matrix_mautrix_facebook_database_password,

  3766.     }] if (matrix_mautrix_facebook_enabled and matrix_mautrix_facebook_database_engine == 'postgres' and matrix_mautrix_facebook_database_hostname == devture_postgres_connection_hostname) else [])

  3767.     +

  3768.     ([{

  3769.       'name': matrix_mautrix_hangouts_database_name,

  3770.       'username': matrix_mautrix_hangouts_database_username,

  3771.       'password': matrix_mautrix_hangouts_database_password,

  3772.     }] if (matrix_mautrix_hangouts_enabled and matrix_mautrix_hangouts_database_engine == 'postgres' and matrix_mautrix_hangouts_database_hostname == devture_postgres_connection_hostname) else [])

  3773.     +

  3774.     ([{

  3775.       'name': matrix_mautrix_googlechat_database_name,

  3776.       'username': matrix_mautrix_googlechat_database_username,

  3777.       'password': matrix_mautrix_googlechat_database_password,

  3778.     }] if (matrix_mautrix_googlechat_enabled and matrix_mautrix_googlechat_database_engine == 'postgres' and matrix_mautrix_googlechat_database_hostname == devture_postgres_connection_hostname) else [])

  3779.     +

  3780.     ([{

  3781.       'name': matrix_mautrix_instagram_database_name,

  3782.       'username': matrix_mautrix_instagram_database_username,

  3783.       'password': matrix_mautrix_instagram_database_password,

  3784.     }] if (matrix_mautrix_instagram_enabled and matrix_mautrix_instagram_database_engine == 'postgres' and matrix_mautrix_instagram_database_hostname == devture_postgres_connection_hostname) else [])

  3785.     +

  3786.     ([{

  3787.       'name': matrix_mautrix_signal_database_name,

  3788.       'username': matrix_mautrix_signal_database_username,

  3789.       'password': matrix_mautrix_signal_database_password,

  3790.     }] if (matrix_mautrix_signal_enabled and matrix_mautrix_signal_database_engine == 'postgres' and matrix_mautrix_signal_database_hostname == devture_postgres_connection_hostname) else [])

  3791.     +

  3792.     ([{

  3793.       'name': matrix_mautrix_meta_messenger_database_name,

  3794.       'username': matrix_mautrix_meta_messenger_database_username,

  3795.       'password': matrix_mautrix_meta_messenger_database_password,

  3796.     }] if (matrix_mautrix_meta_messenger_enabled and matrix_mautrix_meta_messenger_database_engine == 'postgres' and matrix_mautrix_meta_messenger_database_hostname == devture_postgres_connection_hostname) else [])

  3797.     +

  3798.     ([{

  3799.       'name': matrix_mautrix_meta_instagram_database_name,

  3800.       'username': matrix_mautrix_meta_instagram_database_username,

  3801.       'password': matrix_mautrix_meta_instagram_database_password,

  3802.     }] if (matrix_mautrix_meta_instagram_enabled and matrix_mautrix_meta_instagram_database_engine == 'postgres' and matrix_mautrix_meta_instagram_database_hostname == devture_postgres_connection_hostname) else [])

  3803.     +

  3804.     ([{

  3805.       'name': matrix_mautrix_wsproxy_syncproxy_database_name,

  3806.       'username': matrix_mautrix_wsproxy_syncproxy_database_username,

  3807.       'password': matrix_mautrix_wsproxy_syncproxy_database_password,

  3808.     }] if (matrix_mautrix_wsproxy_enabled and matrix_mautrix_wsproxy_syncproxy_database_engine == 'postgres' and matrix_mautrix_wsproxy_syncproxy_database_hostname == 'matrix-postgres') else [])

  3809.     +

  3810.     ([{

  3811.       'name': matrix_mautrix_telegram_database_name,

  3812.       'username': matrix_mautrix_telegram_database_username,

  3813.       'password': matrix_mautrix_telegram_database_password,

  3814.     }] if (matrix_mautrix_telegram_enabled and matrix_mautrix_telegram_database_engine == 'postgres' and matrix_mautrix_telegram_database_hostname == devture_postgres_connection_hostname) else [])

  3815.     +

  3816.     ([{

  3817.       'name': matrix_mautrix_twitter_database_name,

  3818.       'username': matrix_mautrix_twitter_database_username,

  3819.       'password': matrix_mautrix_twitter_database_password,

  3820.     }] if (matrix_mautrix_twitter_enabled and matrix_mautrix_twitter_database_engine == 'postgres' and matrix_mautrix_twitter_database_hostname == devture_postgres_connection_hostname) else [])

  3821.     +

  3822.     ([{

  3823.       'name': matrix_mautrix_gmessages_database_name,

  3824.       'username': matrix_mautrix_gmessages_database_username,

  3825.       'password': matrix_mautrix_gmessages_database_password,

  3826.     }] if (matrix_mautrix_gmessages_enabled and matrix_mautrix_gmessages_database_engine == 'postgres' and matrix_mautrix_gmessages_database_hostname == devture_postgres_connection_hostname) else [])

  3827.     +

  3828.     ([{

  3829.       'name': matrix_mautrix_whatsapp_database_name,

  3830.       'username': matrix_mautrix_whatsapp_database_username,

  3831.       'password': matrix_mautrix_whatsapp_database_password,

  3832.     }] if (matrix_mautrix_whatsapp_enabled and matrix_mautrix_whatsapp_database_engine == 'postgres' and matrix_mautrix_whatsapp_database_hostname == devture_postgres_connection_hostname) else [])

  3833.     +

  3834.     ([{

  3835.       'name': matrix_mautrix_discord_database_name,

  3836.       'username': matrix_mautrix_discord_database_username,

  3837.       'password': matrix_mautrix_discord_database_password,

  3838.     }] if (matrix_mautrix_discord_enabled and matrix_mautrix_discord_database_engine == 'postgres' and matrix_mautrix_discord_database_hostname == devture_postgres_connection_hostname) else [])

  3839.     +

  3840.     ([{

  3841.       'name': matrix_mautrix_slack_database_name,

  3842.       'username': matrix_mautrix_slack_database_username,

  3843.       'password': matrix_mautrix_slack_database_password,

  3844.     }] if (matrix_mautrix_slack_enabled and matrix_mautrix_slack_database_engine == 'postgres' and matrix_mautrix_slack_database_hostname == devture_postgres_connection_hostname) else [])

  3845.     +

  3846.     ([{

  3847.       'name': matrix_mx_puppet_slack_database_name,

  3848.       'username': matrix_mx_puppet_slack_database_username,

  3849.       'password': matrix_mx_puppet_slack_database_password,

  3850.     }] if (matrix_mx_puppet_slack_enabled and matrix_mx_puppet_slack_database_engine == 'postgres' and matrix_mx_puppet_slack_database_hostname == devture_postgres_connection_hostname) else [])

  3851.     +

  3852.     ([{

  3853.       'name': matrix_mx_puppet_twitter_database_name,

  3854.       'username': matrix_mx_puppet_twitter_database_username,

  3855.       'password': matrix_mx_puppet_twitter_database_password,

  3856.     }] if (matrix_mx_puppet_twitter_enabled and matrix_mx_puppet_twitter_database_engine == 'postgres' and matrix_mx_puppet_twitter_database_hostname == devture_postgres_connection_hostname) else [])

  3857.     +

  3858.     ([{

  3859.       'name': matrix_mx_puppet_instagram_database_name,

  3860.       'username': matrix_mx_puppet_instagram_database_username,

  3861.       'password': matrix_mx_puppet_instagram_database_password,

  3862.     }] if (matrix_mx_puppet_instagram_enabled and matrix_mx_puppet_instagram_database_engine == 'postgres' and matrix_mx_puppet_instagram_database_hostname == devture_postgres_connection_hostname) else [])

  3863.     +

  3864.     ([{

  3865.       'name': matrix_mx_puppet_discord_database_name,

  3866.       'username': matrix_mx_puppet_discord_database_username,

  3867.       'password': matrix_mx_puppet_discord_database_password,

  3868.     }] if (matrix_mx_puppet_discord_enabled  and matrix_mx_puppet_discord_database_engine == 'postgres' and matrix_mx_puppet_discord_database_hostname == devture_postgres_connection_hostname) else [])

  3869.     +

  3870.     ([{

  3871.       'name': matrix_mx_puppet_steam_database_name,

  3872.       'username': matrix_mx_puppet_steam_database_username,

  3873.       'password': matrix_mx_puppet_steam_database_password,

  3874.     }] if (matrix_mx_puppet_steam_enabled and matrix_mx_puppet_steam_database_engine == 'postgres' and matrix_mx_puppet_steam_database_hostname == devture_postgres_connection_hostname) else [])

  3875.     +

  3876.     ([{

  3877.       'name': matrix_mx_puppet_groupme_database_name,

  3878.       'username': matrix_mx_puppet_groupme_database_username,

  3879.       'password': matrix_mx_puppet_groupme_database_password,

  3880.     }] if (matrix_mx_puppet_groupme_enabled and matrix_mx_puppet_groupme_database_engine == 'postgres' and matrix_mx_puppet_groupme_database_hostname == devture_postgres_connection_hostname) else [])

  3881.     +

  3882.     ([{

  3883.       'name': matrix_dimension_database_name,

  3884.       'username': matrix_dimension_database_username,

  3885.       'password': matrix_dimension_database_password,

  3886.     }] if (matrix_dimension_enabled and matrix_dimension_database_engine == 'postgres' and matrix_dimension_database_hostname == devture_postgres_connection_hostname) else [])

  3887.     +

  3888.     ([{

  3889.       'name': etherpad_database_name,

  3890.       'username': etherpad_database_username,

  3891.       'password': etherpad_database_password,

  3892.     }] if (etherpad_enabled and etherpad_database_engine == 'postgres' and etherpad_database_hostname == devture_postgres_connection_hostname) else [])

  3893.     +

  3894.     ([{

  3895.       'name': prometheus_postgres_exporter_database_name,

  3896.       'username': prometheus_postgres_exporter_database_username,

  3897.       'password': prometheus_postgres_exporter_database_password,

  3898.     }] if (prometheus_postgres_exporter_enabled and prometheus_postgres_exporter_database_hostname == devture_postgres_connection_hostname) else [])

  3899.     +

  3900.     ([{

  3901.       'name': matrix_media_repo_database_name,

  3902.       'username': matrix_media_repo_database_username,

  3903.       'password': matrix_media_repo_database_password,

  3904.     }] if (matrix_media_repo_enabled and matrix_media_repo_database_hostname == devture_postgres_connection_hostname) else [])

  3905. 

  3906.    }}

  3907. 

  3908. ########################################################################

  3909. #                                                                      #

  3910. # /com.devture.ansible.role.postgres                                   #

  3911. #                                                                      #

  3912. ########################################################################

  3913. 

  3914. 

  3915. ########################################################################

  3916. #                                                                      #

  3917. # com.devture.ansible.role.postgres_backup                             #

  3918. #                                                                      #

  3919. ########################################################################

  3920. 

  3921. devture_postgres_backup_enabled: false

  3922. 

  3923. devture_postgres_backup_identifier: matrix-postgres-backup

  3924. 

  3925. devture_postgres_backup_architecture: "{{ matrix_architecture }}"

  3926. 

  3927. devture_postgres_backup_base_path: "{{ matrix_base_data_path }}/postgres-backup"

  3928. 

  3929. devture_postgres_backup_systemd_required_services_list_auto: |

  3930.   {{

  3931.     ([(devture_postgres_identifier + '.service')] if (devture_postgres_enabled and devture_postgres_backup_connection_hostname == devture_postgres_connection_hostname) else [])

  3932.   }}

  3933. 

  3934. devture_postgres_backup_container_network: "{{ (devture_postgres_container_network if (devture_postgres_enabled and devture_postgres_backup_connection_hostname == devture_postgres_connection_hostname) else devture_postgres_backup_identifier) }}"

  3935. 

  3936. devture_postgres_backup_container_additional_networks_auto: |-

  3937.   {{

  3938.       ([devture_postgres_container_network] if (devture_postgres_enabled and devture_postgres_backup_connection_hostname == devture_postgres_connection_hostname and devture_postgres_backup_container_network != devture_postgres_container_network) else [])

  3939.   }}

  3940. 

  3941. devture_postgres_backup_uid: "{{ matrix_user_uid }}"

  3942. devture_postgres_backup_gid: "{{ matrix_user_gid }}"

  3943. 

  3944. devture_postgres_backup_connection_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  3945. devture_postgres_backup_connection_port: "{{ devture_postgres_connection_port if devture_postgres_enabled else 5432 }}"

  3946. devture_postgres_backup_connection_username: "{{ devture_postgres_connection_username if devture_postgres_enabled else '' }}"

  3947. devture_postgres_backup_connection_password: "{{ devture_postgres_connection_password if devture_postgres_enabled else '' }}"

  3948. 

  3949. devture_postgres_backup_postgres_data_path: "{{ devture_postgres_data_path if devture_postgres_enabled else '' }}"

  3950. devture_postgres_backup_postgres_role_include_name: galaxy/postgres

  3951. 

  3952. devture_postgres_backup_databases: "{{ devture_postgres_managed_databases | map(attribute='name') if devture_postgres_enabled else [] }}"

  3953. 

  3954. ########################################################################

  3955. #                                                                      #

  3956. # /com.devture.ansible.role.postgres_backup                            #

  3957. #                                                                      #

  3958. ########################################################################

  3959. 

  3960. 

  3961. ######################################################################

  3962. #

  3963. # matrix-sygnal

  3964. #

  3965. ######################################################################

  3966. 

  3967. # Most people don't need their own push-server, because they also need their own app to utilize it from.

  3968. matrix_sygnal_enabled: false

  3969. 

  3970. matrix_sygnal_metrics_prometheus_enabled: "{{ prometheus_enabled or matrix_metrics_exposure_enabled }}"

  3971. 

  3972. matrix_sygnal_hostname: "{{ matrix_server_fqn_sygnal }}"

  3973. 

  3974. matrix_sygnal_container_network: "{{ matrix_homeserver_container_network }}"

  3975. 

  3976. matrix_sygnal_container_additional_networks: "{{ [matrix_playbook_reverse_proxyable_services_additional_network] if matrix_playbook_reverse_proxyable_services_additional_network else [] }}"

  3977. 

  3978. matrix_sygnal_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '6000') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  3979. 

  3980. matrix_sygnal_container_labels_traefik_enabled: "{{ matrix_playbook_traefik_labels_enabled }}"

  3981. matrix_sygnal_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  3982. matrix_sygnal_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  3983. matrix_sygnal_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  3984. 

  3985. ######################################################################

  3986. #

  3987. # /matrix-sygnal

  3988. #

  3989. ######################################################################

  3990. 

  3991. ######################################################################

  3992. #

  3993. # etke/ntfy

  3994. #

  3995. ######################################################################

  3996. 

  3997. ntfy_enabled: false

  3998. 

  3999. ntfy_identifier: matrix-ntfy

  4000. 

  4001. ntfy_base_path: "{{ matrix_base_data_path }}/ntfy"

  4002. 

  4003. ntfy_uid: "{{ matrix_user_uid }}"

  4004. ntfy_gid: "{{ matrix_user_gid }}"

  4005. 

  4006. ntfy_hostname: "{{ matrix_server_fqn_ntfy }}"

  4007. 

  4008. ntfy_container_additional_networks: "{{ [matrix_playbook_reverse_proxyable_services_additional_network] if matrix_playbook_reverse_proxyable_services_additional_network else [] }}"

  4009. 

  4010. ntfy_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '2586') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  4011. 

  4012. ntfy_container_labels_traefik_enabled: "{{ matrix_playbook_traefik_labels_enabled }}"

  4013. ntfy_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  4014. ntfy_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  4015. ntfy_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  4016. 

  4017. ntfy_visitor_request_limit_exempt_hosts_hostnames_auto: |

  4018.   {{

  4019.     [matrix_server_fqn_matrix]

  4020.   }}

  4021. 

  4022. ######################################################################

  4023. #

  4024. # /etky/ntfy

  4025. #

  4026. ######################################################################

  4027. 

  4028. ######################################################################

  4029. #

  4030. # etke/redis

  4031. #

  4032. ######################################################################

  4033. 

  4034. redis_enabled: "{{ not keydb_enabled and (matrix_synapse_workers_enabled or (matrix_hookshot_enabled and matrix_hookshot_experimental_encryption_enabled)) }}"

  4035. 

  4036. redis_identifier: matrix-redis

  4037. 

  4038. redis_uid: "{{ matrix_user_uid }}"

  4039. redis_gid: "{{ matrix_user_gid }}"

  4040. 

  4041. redis_base_path: "{{ matrix_base_data_path }}/redis"

  4042. 

  4043. ######################################################################

  4044. #

  4045. # /etke/redis

  4046. #

  4047. ######################################################################

  4048. 

  4049. ######################################################################

  4050. #

  4051. # keydb

  4052. #

  4053. ######################################################################

  4054. 

  4055. keydb_enabled: "{{ matrix_synapse_workers_enabled or (matrix_hookshot_enabled and matrix_hookshot_experimental_encryption_enabled) }}"

  4056. 

  4057. keydb_identifier: matrix-keydb

  4058. 

  4059. keydb_uid: "{{ matrix_user_uid }}"

  4060. keydb_gid: "{{ matrix_user_gid }}"

  4061. 

  4062. keydb_base_path: "{{ matrix_base_data_path }}/keydb"

  4063. 

  4064. keydb_arch: |-

  4065.   {{

  4066.     ({

  4067.       'amd64': 'x86_64',

  4068.       'arm32': 'arm32',

  4069.       'arm64': 'arm64',

  4070.     })[matrix_architecture]

  4071.   }}

  4072. 

  4073. ######################################################################

  4074. #

  4075. # keydb

  4076. #

  4077. ######################################################################

  4078. 

  4079. ######################################################################

  4080. #

  4081. # matrix-client-element

  4082. #

  4083. ######################################################################

  4084. 

  4085. # By default, this playbook installs the Element web UI on the `matrix_server_fqn_element` domain.

  4086. # If you wish to connect to your Matrix server by other means, you may wish to disable this.

  4087. matrix_client_element_enabled: true

  4088. 

  4089. matrix_client_element_scheme: "{{ 'https' if matrix_playbook_ssl_enabled else 'http' }}"

  4090. 

  4091. matrix_client_element_container_image_self_build: "{{ matrix_architecture not in ['arm64', 'amd64'] }}"

  4092. 

  4093. matrix_client_element_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '8765') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  4094. 

  4095. matrix_client_element_container_network: "{{ matrix_addons_container_network }}"

  4096. 

  4097. matrix_client_element_container_additional_networks: "{{ [matrix_playbook_reverse_proxyable_services_additional_network] if (matrix_client_element_container_labels_traefik_enabled and matrix_playbook_reverse_proxyable_services_additional_network) else [] }}"

  4098. 

  4099. matrix_client_element_container_labels_traefik_enabled: "{{ matrix_playbook_reverse_proxy_type in ['playbook-managed-traefik', 'other-traefik-container'] }}"

  4100. matrix_client_element_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  4101. matrix_client_element_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  4102. matrix_client_element_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  4103. 

  4104. matrix_client_element_default_hs_url: "{{ matrix_homeserver_url }}"

  4105. matrix_client_element_default_is_url: "{{ matrix_identity_server_url }}"

  4106. 

  4107. # Use Dimension if enabled, otherwise fall back to Scalar

  4108. matrix_client_element_integrations_ui_url: "{{ matrix_dimension_integrations_ui_url if matrix_dimension_enabled else 'https://scalar.vector.im/' }}"

  4109. matrix_client_element_integrations_rest_url: "{{ matrix_dimension_integrations_rest_url if matrix_dimension_enabled else 'https://scalar.vector.im/api' }}"

  4110. matrix_client_element_integrations_widgets_urls: "{{ matrix_dimension_integrations_widgets_urls if matrix_dimension_enabled else ['https://scalar.vector.im/api'] }}"

  4111. matrix_client_element_integrations_jitsi_widget_url: "{{ matrix_dimension_integrations_jitsi_widget_url if matrix_dimension_enabled else 'https://scalar.vector.im/api/widgets/jitsi.html' }}"

  4112. 

  4113. matrix_client_element_self_check_validate_certificates: "{{ matrix_playbook_ssl_enabled }}"

  4114. 

  4115. matrix_client_element_registration_enabled: "{{ matrix_synapse_enable_registration }}"

  4116. 

  4117. matrix_client_element_enable_presence_by_hs_url: |-

  4118.   {{

  4119.     none

  4120.     if matrix_synapse_presence_enabled

  4121.     else {matrix_client_element_default_hs_url: false}

  4122.   }}

  4123. 

  4124. matrix_client_element_jitsi_preferred_domain: "{{ matrix_server_fqn_jitsi if jitsi_enabled else '' }}"

  4125. 

  4126. ######################################################################

  4127. #

  4128. # /matrix-client-element

  4129. #

  4130. ######################################################################

  4131. 

  4132. ######################################################################

  4133. #

  4134. # matrix-client-hydrogen

  4135. #

  4136. ######################################################################

  4137. 

  4138. matrix_client_hydrogen_enabled: false

  4139. 

  4140. matrix_client_hydrogen_container_image_self_build: "{{ matrix_architecture not in ['amd64'] }}"

  4141. 

  4142. matrix_client_hydrogen_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '8768') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  4143. 

  4144. matrix_client_hydrogen_container_network: "{{ matrix_addons_container_network }}"

  4145. 

  4146. matrix_client_hydrogen_container_additional_networks: "{{ [matrix_playbook_reverse_proxyable_services_additional_network] if (matrix_client_hydrogen_container_labels_traefik_enabled and matrix_playbook_reverse_proxyable_services_additional_network) else [] }}"

  4147. 

  4148. matrix_client_hydrogen_container_labels_traefik_enabled: "{{ matrix_playbook_reverse_proxy_type in ['playbook-managed-traefik', 'other-traefik-container'] }}"

  4149. matrix_client_hydrogen_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  4150. matrix_client_hydrogen_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  4151. matrix_client_hydrogen_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  4152. 

  4153. matrix_client_hydrogen_scheme: "{{ 'https' if matrix_playbook_ssl_enabled else 'http' }}"

  4154. 

  4155. matrix_client_hydrogen_default_hs_url: "{{ matrix_homeserver_url }}"

  4156. 

  4157. matrix_client_hydrogen_self_check_validate_certificates: "{{ matrix_playbook_ssl_enabled }}"

  4158. 

  4159. ######################################################################

  4160. #

  4161. # /matrix-client-hydrogen

  4162. #

  4163. ######################################################################

  4164. 

  4165. ######################################################################

  4166. #

  4167. # matrix-client-cinny

  4168. #

  4169. ######################################################################

  4170. 

  4171. matrix_client_cinny_enabled: false

  4172. 

  4173. matrix_client_cinny_container_image_self_build: "{{ matrix_architecture not in ['arm64', 'amd64'] }}"

  4174. 

  4175. matrix_client_cinny_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '8080') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  4176. 

  4177. matrix_client_cinny_container_network: "{{ matrix_addons_container_network }}"

  4178. 

  4179. matrix_client_cinny_container_additional_networks: "{{ [matrix_playbook_reverse_proxyable_services_additional_network] if (matrix_client_cinny_container_labels_traefik_enabled and matrix_playbook_reverse_proxyable_services_additional_network) else [] }}"

  4180. 

  4181. matrix_client_cinny_container_labels_traefik_enabled: "{{ matrix_playbook_reverse_proxy_type in ['playbook-managed-traefik', 'other-traefik-container'] }}"

  4182. matrix_client_cinny_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  4183. matrix_client_cinny_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  4184. matrix_client_cinny_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  4185. 

  4186. matrix_client_cinny_scheme: "{{ 'https' if matrix_playbook_ssl_enabled else 'http' }}"

  4187. 

  4188. matrix_client_cinny_default_hs_url: "{{ matrix_homeserver_url }}"

  4189. 

  4190. matrix_client_cinny_self_check_validate_certificates: "{{ matrix_playbook_ssl_enabled }}"

  4191. 

  4192. ######################################################################

  4193. #

  4194. # /matrix-client-cinny

  4195. #

  4196. ######################################################################

  4197. 

  4198. ######################################################################

  4199. #

  4200. # matrix-client-schildichat

  4201. #

  4202. ######################################################################

  4203. 

  4204. matrix_client_schildichat_enabled: false

  4205. 

  4206. matrix_client_schildichat_scheme: "{{ 'https' if matrix_playbook_ssl_enabled else 'http' }}"

  4207. 

  4208. matrix_client_schildichat_container_image_self_build: "{{ matrix_architecture not in ['arm64', 'amd64'] }}"

  4209. 

  4210. matrix_client_schildichat_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '8765') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  4211. 

  4212. matrix_client_schildichat_container_network: "{{ matrix_addons_container_network }}"

  4213. 

  4214. matrix_client_schildichat_container_additional_networks: "{{ [matrix_playbook_reverse_proxyable_services_additional_network] if (matrix_client_schildichat_container_labels_traefik_enabled and matrix_playbook_reverse_proxyable_services_additional_network) else [] }}"

  4215. 

  4216. matrix_client_schildichat_container_labels_traefik_enabled: "{{ matrix_playbook_reverse_proxy_type in ['playbook-managed-traefik', 'other-traefik-container'] }}"

  4217. matrix_client_schildichat_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  4218. matrix_client_schildichat_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  4219. matrix_client_schildichat_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  4220. 

  4221. matrix_client_schildichat_default_hs_url: "{{ matrix_homeserver_url }}"

  4222. matrix_client_schildichat_default_is_url: "{{ matrix_identity_server_url }}"

  4223. 

  4224. # Use Dimension if enabled, otherwise fall back to Scalar

  4225. matrix_client_schildichat_integrations_ui_url: "{{ matrix_dimension_integrations_ui_url if matrix_dimension_enabled else 'https://scalar.vector.im/' }}"

  4226. matrix_client_schildichat_integrations_rest_url: "{{ matrix_dimension_integrations_rest_url if matrix_dimension_enabled else 'https://scalar.vector.im/api' }}"

  4227. matrix_client_schildichat_integrations_widgets_urls: "{{ matrix_dimension_integrations_widgets_urls if matrix_dimension_enabled else ['https://scalar.vector.im/api'] }}"

  4228. matrix_client_schildichat_integrations_jitsi_widget_url: "{{ matrix_dimension_integrations_jitsi_widget_url if matrix_dimension_enabled else 'https://scalar.vector.im/api/widgets/jitsi.html' }}"

  4229. 

  4230. matrix_client_schildichat_self_check_validate_certificates: "{{ matrix_playbook_ssl_enabled }}"

  4231. 

  4232. matrix_client_schildichat_registration_enabled: "{{ matrix_synapse_enable_registration }}"

  4233. 

  4234. matrix_client_schildichat_enable_presence_by_hs_url: |-

  4235.   {{

  4236.     none

  4237.     if matrix_synapse_presence_enabled

  4238.     else {matrix_client_schildichat_default_hs_url: false}

  4239.   }}

  4240. 

  4241. matrix_client_schildichat_jitsi_preferred_domain: "{{ matrix_server_fqn_jitsi if jitsi_enabled else '' }}"

  4242. 

  4243. ######################################################################

  4244. #

  4245. # /matrix-client-schildichat

  4246. #

  4247. ######################################################################

  4248. 

  4249. ######################################################################

  4250. #

  4251. # matrix-synapse

  4252. #

  4253. ######################################################################

  4254. 

  4255. matrix_synapse_enabled: "{{ matrix_homeserver_implementation == 'synapse' }}"

  4256. 

  4257. matrix_synapse_username: "{{ matrix_user_username }}"

  4258. matrix_synapse_uid: "{{ matrix_user_uid }}"

  4259. matrix_synapse_gid: "{{ matrix_user_gid }}"

  4260. 

  4261. matrix_synapse_federation_enabled: "{{ matrix_homeserver_federation_enabled }}"

  4262. 

  4263. matrix_synapse_container_image_self_build: "{{ matrix_architecture not in ['arm64', 'amd64'] }}"

  4264. 

  4265. matrix_synapse_account_threepid_delegates_msisdn_mas1sd_url: "{{ ('http://matrix-ma1sd:' + matrix_ma1sd_container_port| string) }}"

  4266. 

  4267. # When ma1sd is enabled, we can use it to validate phone numbers. It's something that the homeserver cannot do by itself.

  4268. matrix_synapse_account_threepid_delegates_msisdn: "{{ matrix_synapse_account_threepid_delegates_msisdn_mas1sd_url if matrix_ma1sd_enabled else '' }}"

  4269. 

  4270. # For exposing the Matrix Federation API's TLS port (HTTPS) to the internet on all network interfaces.

  4271. matrix_synapse_container_federation_api_tls_host_bind_port: "{{ matrix_federation_public_port if (matrix_synapse_federation_enabled and matrix_synapse_tls_federation_listener_enabled) else '' }}"

  4272. #

  4273. # For exposing the Synapse Metrics API's port (plain HTTP) to the local host.

  4274. matrix_synapse_container_metrics_api_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '9100') if matrix_synapse_metrics_enabled and matrix_playbook_service_host_bind_interface_prefix else '' }}"

  4275. #

  4276. # For exposing the Synapse Manhole port (plain HTTP) to the local host.

  4277. matrix_synapse_container_manhole_api_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '9000') if matrix_synapse_metrics_enabled and matrix_playbook_service_host_bind_interface_prefix else '' }}"

  4278. 

  4279. matrix_synapse_container_network: "{{ matrix_homeserver_container_network }}"

  4280. 

  4281. matrix_synapse_container_additional_networks_auto: |

  4282.   {{

  4283.     (

  4284.       ([matrix_playbook_reverse_proxyable_services_additional_network] if matrix_synapse_container_labels_traefik_enabled and matrix_playbook_reverse_proxyable_services_additional_network else [])

  4285.       +

  4286.       ([devture_postgres_container_network] if (devture_postgres_enabled and devture_postgres_container_network != matrix_synapse_container_network and matrix_synapse_database_host == devture_postgres_connection_hostname) else [])

  4287.       +

  4288.       ([redis_container_network] if matrix_synapse_redis_enabled and matrix_synapse_redis_host == redis_identifier else [])

  4289.       +

  4290.       ([keydb_container_network] if matrix_synapse_redis_enabled and matrix_synapse_redis_host == keydb_identifier else [])

  4291.       +

  4292.       ([exim_relay_container_network] if (exim_relay_enabled and matrix_synapse_email_enabled and matrix_synapse_email_smtp_host == exim_relay_identifier and matrix_synapse_container_network != exim_relay_container_network) else [])

  4293.       +

  4294.       ([matrix_ma1sd_container_network] if (matrix_ma1sd_enabled and matrix_synapse_account_threepid_delegates_msisdn == matrix_synapse_account_threepid_delegates_msisdn_mas1sd_url and matrix_synapse_container_network != matrix_ma1sd_container_network) else [])

  4295.     ) | unique

  4296.   }}

  4297. 

  4298. matrix_synapse_container_labels_traefik_enabled: "{{ matrix_playbook_reverse_proxy_type in ['playbook-managed-traefik', 'other-traefik-container'] }}"

  4299. matrix_synapse_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  4300. matrix_synapse_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  4301. matrix_synapse_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  4302. matrix_synapse_container_labels_traefik_hostname: "{{ matrix_server_fqn_matrix }}"

  4303. 

  4304. matrix_synapse_container_labels_matrix_labels_enabled: "{{ not matrix_synapse_workers_enabled }}"

  4305. 

  4306. matrix_synapse_container_labels_public_client_root_redirection_enabled: "{{ matrix_synapse_container_labels_public_client_root_redirection_url != '' }}"

  4307. matrix_synapse_container_labels_public_client_root_redirection_url: "{{ (('https://' if matrix_playbook_ssl_enabled else 'http://') + matrix_server_fqn_element) if matrix_client_element_enabled else '' }}"

  4308. 

  4309. matrix_synapse_container_labels_public_client_synapse_admin_api_enabled: "{{ matrix_synapse_admin_enabled }}"

  4310. 

  4311. matrix_synapse_container_labels_public_federation_api_traefik_hostname: "{{ matrix_server_fqn_matrix_federation }}"

  4312. matrix_synapse_container_labels_public_federation_api_traefik_entrypoints: "{{ matrix_federation_traefik_entrypoint_name }}"

  4313. matrix_synapse_container_labels_public_federation_api_traefik_tls: "{{ matrix_federation_traefik_entrypoint_tls }}"

  4314. matrix_synapse_container_labels_public_federation_api_traefik_tls_certResolver: "{{ matrix_synapse_container_labels_traefik_tls_certResolver }}"  # noqa var-naming

  4315. 

  4316. matrix_synapse_container_labels_public_metrics_middleware_basic_auth_enabled: "{{ matrix_metrics_exposure_http_basic_auth_enabled }}"

  4317. matrix_synapse_container_labels_public_metrics_middleware_basic_auth_users: "{{ matrix_metrics_exposure_http_basic_auth_users }}"

  4318. 

  4319. matrix_synapse_container_labels_internal_client_api_enabled: "{{ matrix_playbook_internal_matrix_client_api_traefik_entrypoint_enabled }}"

  4320. matrix_synapse_container_labels_internal_client_api_traefik_entrypoints: "{{ matrix_playbook_internal_matrix_client_api_traefik_entrypoint_name }}"

  4321. 

  4322. # For exposing the Synapse worker (and metrics) ports to the local host.

  4323. matrix_synapse_workers_container_host_bind_address: "{{ matrix_playbook_service_host_bind_interface_prefix[0:-1] if (matrix_synapse_workers_enabled and matrix_playbook_service_host_bind_interface_prefix) else '' }}"

  4324. 

  4325. matrix_synapse_database_host: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  4326. matrix_synapse_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'synapse.db', rounds=655555) | to_uuid }}"

  4327. 

  4328. matrix_synapse_macaroon_secret_key: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'synapse.mac', rounds=655555) | to_uuid }}"

  4329. 

  4330. # We do not enable TLS in Synapse by default, since it's handled by Traefik.

  4331. matrix_synapse_tls_federation_listener_enabled: false

  4332. matrix_synapse_tls_certificate_path: ~

  4333. matrix_synapse_tls_private_key_path: ~

  4334. 

  4335. matrix_synapse_federation_port_openid_resource_required: "{{ not matrix_synapse_federation_enabled and (matrix_dimension_enabled or matrix_ma1sd_enabled or matrix_user_verification_service_enabled) }}"

  4336. 

  4337. matrix_synapse_metrics_enabled: "{{ prometheus_enabled or matrix_metrics_exposure_enabled }}"

  4338. 

  4339. matrix_synapse_metrics_proxying_enabled: "{{ matrix_synapse_metrics_enabled and matrix_metrics_exposure_enabled }}"

  4340. matrix_synapse_metrics_proxying_hostname: "{{ matrix_metrics_exposure_hostname }}"

  4341. matrix_synapse_metrics_proxying_path_prefix: "{{ matrix_metrics_exposure_path_prefix }}/synapse"

  4342. 

  4343. matrix_synapse_email_enabled: "{{ exim_relay_enabled }}"

  4344. matrix_synapse_email_smtp_host: "{{ exim_relay_identifier }}"

  4345. matrix_synapse_email_smtp_port: 8025

  4346. matrix_synapse_email_smtp_require_transport_security: false

  4347. matrix_synapse_email_notif_from: "Matrix <{{ exim_relay_sender_address }}>"

  4348. 

  4349. matrix_synapse_turn_uris: |

  4350.   {{

  4351.     ([

  4352.       'turns:' + matrix_server_fqn_matrix + '?transport=udp',

  4353.       'turns:' + matrix_server_fqn_matrix + '?transport=tcp',

  4354.     ] if matrix_coturn_enabled and matrix_coturn_tls_enabled else [])

  4355.     +

  4356.     ([

  4357.       'turn:' + matrix_server_fqn_matrix + '?transport=udp',

  4358.       'turn:' + matrix_server_fqn_matrix + '?transport=tcp',

  4359.     ] if matrix_coturn_enabled else [])

  4360.   }}

  4361. 

  4362. matrix_synapse_turn_shared_secret: "{{ matrix_coturn_turn_static_auth_secret if (matrix_coturn_enabled and matrix_coturn_authentication_method == 'auth-secret') else '' }}"

  4363. matrix_synapse_turn_username: "{{ matrix_coturn_lt_cred_mech_username if (matrix_coturn_enabled and matrix_coturn_authentication_method == 'lt-cred-mech') else '' }}"

  4364. matrix_synapse_turn_password: "{{ matrix_coturn_lt_cred_mech_password if (matrix_coturn_enabled and matrix_coturn_authentication_method == 'lt-cred-mech') else '' }}"

  4365. 

  4366. matrix_synapse_self_check_validate_certificates: "{{ matrix_playbook_ssl_enabled }}"

  4367. 

  4368. matrix_synapse_systemd_required_services_list_auto: |

  4369.   {{

  4370.     ([devture_postgres_identifier ~ '.service'] if (devture_postgres_enabled and devture_postgres_container_network != matrix_synapse_container_network and matrix_synapse_database_host == devture_postgres_connection_hostname) else [])

  4371.     +

  4372.     ([redis_identifier ~ '.service'] if matrix_synapse_redis_enabled and matrix_synapse_redis_host == redis_identifier else [])

  4373.     +

  4374.     ([keydb_identifier ~ '.service'] if matrix_synapse_redis_enabled and matrix_synapse_redis_host == keydb_identifier else [])

  4375.     +

  4376.     (['matrix-goofys.service'] if matrix_s3_media_store_enabled else [])

  4377.   }}

  4378. 

  4379. matrix_synapse_systemd_wanted_services_list_auto: |

  4380.   {{

  4381.     (['matrix-coturn.service'] if matrix_coturn_enabled else [])

  4382.     +

  4383.     ([exim_relay_identifier ~ '.service'] if exim_relay_enabled else [])

  4384.   }}

  4385. 

  4386. # Synapse workers (used for parallel load-scaling) need Redis for IPC.

  4387. matrix_synapse_redis_enabled: "{{ redis_enabled or keydb_enabled }}"

  4388. matrix_synapse_redis_host: "{{ redis_identifier if redis_enabled else (keydb_identifier if keydb_enabled else '') }}"

  4389. matrix_synapse_redis_password: "{{ redis_connection_password if redis_enabled else (keydb_connection_password if keydb_enabled else '') }}"

  4390. 

  4391. matrix_synapse_container_extra_arguments_auto: "{{ matrix_homeserver_container_extra_arguments_auto }}"

  4392. matrix_synapse_app_service_config_files_auto: "{{ matrix_homeserver_app_service_config_files_auto }}"

  4393. 

  4394. # Disable creation of media repository Synapse worker when using media-repo

  4395. matrix_synapse_ext_media_repo_enabled: "{{ matrix_media_repo_enabled }}"

  4396. 

  4397. ######################################################################

  4398. #

  4399. # /matrix-synapse

  4400. #

  4401. ######################################################################

  4402. 

  4403. 

  4404. ######################################################################

  4405. #

  4406. # matrix-synapse-auto-compressor

  4407. #

  4408. ######################################################################

  4409. 

  4410. # Not enabled by default, for now

  4411. matrix_synapse_auto_compressor_enabled: false

  4412. 

  4413. matrix_synapse_auto_compressor_container_image_self_build: "{{ matrix_architecture not in ['amd64'] }}"

  4414. 

  4415. matrix_synapse_auto_compressor_container_network: "{{ (devture_postgres_container_network if (devture_postgres_enabled and matrix_synapse_auto_compressor_database_hostname == matrix_synapse_database_host and matrix_synapse_database_host == devture_postgres_connection_hostname) else 'matrix-synapse-auto-compressor') }}"

  4416. 

  4417. matrix_synapse_auto_compressor_database_username: "{{ matrix_synapse_database_user if matrix_synapse_enabled else '' }}"

  4418. matrix_synapse_auto_compressor_database_password: "{{ matrix_synapse_database_password if matrix_synapse_enabled else '' }}"

  4419. matrix_synapse_auto_compressor_database_hostname: "{{ matrix_synapse_database_host if matrix_synapse_enabled else '' }}"

  4420. matrix_synapse_auto_compressor_database_port: "{{ matrix_synapse_database_port if matrix_synapse_enabled else '5432' }}"

  4421. matrix_synapse_auto_compressor_database_name: "{{ matrix_synapse_database_database if matrix_synapse_enabled else '' }}"

  4422. 

  4423. matrix_synapse_auto_compressor_systemd_required_services_list_auto: |

  4424.   {{

  4425.     ([devture_postgres_identifier ~ '.service'] if (matrix_synapse_auto_compressor_container_network == devture_postgres_container_network) else [])

  4426.   }}

  4427. 

  4428. ######################################################################

  4429. #

  4430. # /matrix-synapse-auto-compressor

  4431. #

  4432. ######################################################################

  4433. 

  4434. 

  4435. ######################################################################

  4436. #

  4437. # matrix-synapse-reverse-proxy-companion

  4438. #

  4439. ######################################################################

  4440. 

  4441. matrix_synapse_reverse_proxy_companion_enabled: "{{ matrix_synapse_enabled and matrix_synapse_workers_enabled }}"

  4442. 

  4443. matrix_synapse_reverse_proxy_companion_container_network: "{{ matrix_synapse_container_network }}"

  4444. 

  4445. matrix_synapse_reverse_proxy_companion_container_additional_networks_auto: |

  4446.   {{

  4447.     (

  4448.       ([matrix_playbook_reverse_proxyable_services_additional_network] if matrix_synapse_reverse_proxy_companion_container_labels_traefik_enabled and matrix_playbook_reverse_proxyable_services_additional_network else [])

  4449.       +

  4450.       ([matrix_prometheus_nginxlog_exporter_container_network] if (matrix_prometheus_nginxlog_exporter_enabled and matrix_prometheus_nginxlog_exporter_container_network != matrix_synapse_reverse_proxy_companion_container_network) else [])

  4451.       +

  4452.       ([] if matrix_homeserver_container_network in ['', matrix_synapse_reverse_proxy_companion_container_network] else [matrix_homeserver_container_network])

  4453.     ) | unique

  4454.   }}

  4455. 

  4456. matrix_synapse_reverse_proxy_companion_client_api_client_max_body_size_mb: "{{ matrix_synapse_max_upload_size_mb }}"

  4457. 

  4458. matrix_synapse_reverse_proxy_companion_container_client_api_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '8008') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  4459. matrix_synapse_reverse_proxy_companion_container_federation_api_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '8048') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  4460. 

  4461. matrix_synapse_reverse_proxy_companion_container_labels_traefik_enabled: "{{ matrix_playbook_reverse_proxy_type in ['playbook-managed-traefik', 'other-traefik-container'] }}"

  4462. matrix_synapse_reverse_proxy_companion_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  4463. matrix_synapse_reverse_proxy_companion_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  4464. matrix_synapse_reverse_proxy_companion_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  4465. matrix_synapse_reverse_proxy_companion_container_labels_traefik_hostname: "{{ matrix_server_fqn_matrix }}"

  4466. 

  4467. matrix_synapse_reverse_proxy_companion_container_labels_public_client_synapse_client_api_enabled: "{{ matrix_synapse_container_labels_public_client_synapse_client_api_enabled }}"

  4468. matrix_synapse_reverse_proxy_companion_container_labels_public_client_synapse_admin_api_enabled: "{{ matrix_synapse_container_labels_public_client_synapse_admin_api_enabled }}"

  4469. 

  4470. matrix_synapse_reverse_proxy_companion_container_labels_public_federation_api_traefik_entrypoints: "{{ matrix_synapse_container_labels_public_federation_api_traefik_entrypoints }}"

  4471. matrix_synapse_reverse_proxy_companion_container_labels_public_federation_api_traefik_tls: "{{ matrix_synapse_container_labels_public_federation_api_traefik_tls }}"

  4472. 

  4473. matrix_synapse_reverse_proxy_companion_container_labels_internal_client_api_enabled: "{{ matrix_synapse_container_labels_internal_client_api_enabled }}"

  4474. matrix_synapse_reverse_proxy_companion_container_labels_internal_client_api_traefik_entrypoints: "{{ matrix_synapse_container_labels_internal_client_api_traefik_entrypoints }}"

  4475. 

  4476. matrix_synapse_reverse_proxy_companion_synapse_workers_enabled: "{{ matrix_synapse_workers_enabled }}"

  4477. matrix_synapse_reverse_proxy_companion_synapse_workers_list: "{{ matrix_synapse_workers_enabled_list }}"

  4478. matrix_synapse_reverse_proxy_companion_synapse_room_worker_client_server_locations: "{{ matrix_synapse_workers_room_worker_client_server_endpoints }}"

  4479. matrix_synapse_reverse_proxy_companion_synapse_room_worker_federation_locations: "{{ matrix_synapse_workers_room_worker_federation_endpoints }}"

  4480. matrix_synapse_reverse_proxy_companion_synapse_sync_worker_client_server_locations: "{{ matrix_synapse_workers_sync_worker_client_server_endpoints }}"

  4481. matrix_synapse_reverse_proxy_companion_synapse_client_reader_client_server_locations: "{{ matrix_synapse_workers_client_reader_client_server_endpoints }}"

  4482. matrix_synapse_reverse_proxy_companion_synapse_federation_reader_federation_locations: "{{ matrix_synapse_workers_federation_reader_federation_endpoints }}"

  4483. matrix_synapse_reverse_proxy_companion_synapse_generic_worker_client_server_locations: "{{ matrix_synapse_workers_generic_worker_client_server_endpoints }}"

  4484. matrix_synapse_reverse_proxy_companion_synapse_generic_worker_federation_locations: "{{ matrix_synapse_workers_generic_worker_federation_endpoints }}"

  4485. matrix_synapse_reverse_proxy_companion_synapse_stream_writer_typing_stream_worker_client_server_locations: "{{ matrix_synapse_workers_stream_writer_typing_stream_worker_client_server_endpoints }}"

  4486. matrix_synapse_reverse_proxy_companion_synapse_stream_writer_to_device_stream_worker_client_server_locations: "{{ matrix_synapse_workers_stream_writer_to_device_stream_worker_client_server_endpoints }}"

  4487. matrix_synapse_reverse_proxy_companion_synapse_stream_writer_account_data_stream_worker_client_server_locations: "{{ matrix_synapse_workers_stream_writer_account_data_stream_worker_client_server_endpoints }}"

  4488. matrix_synapse_reverse_proxy_companion_synapse_stream_writer_receipts_stream_worker_client_server_locations: "{{ matrix_synapse_workers_stream_writer_receipts_stream_worker_client_server_endpoints }}"

  4489. matrix_synapse_reverse_proxy_companion_synapse_stream_writer_presence_stream_worker_client_server_locations: "{{ matrix_synapse_workers_stream_writer_presence_stream_worker_client_server_endpoints }}"

  4490. matrix_synapse_reverse_proxy_companion_synapse_media_repository_locations: "{{matrix_synapse_workers_media_repository_endpoints|default([]) }}"

  4491. matrix_synapse_reverse_proxy_companion_synapse_user_dir_locations: "{{ matrix_synapse_workers_user_dir_worker_client_server_endpoints|default([]) }}"

  4492. 

  4493. matrix_synapse_reverse_proxy_companion_access_log_syslog_integration_enabled: "{{ matrix_prometheus_nginxlog_exporter_enabled }}"

  4494. matrix_synapse_reverse_proxy_companion_access_log_syslog_integration_server_port: "{{ (matrix_prometheus_nginxlog_exporter_identifier | string +':'+ matrix_prometheus_nginxlog_exporter_container_syslog_port | string) | default('') }}"

  4495. 

  4496. ######################################################################

  4497. #

  4498. # /matrix-synapse-reverse-proxy-companion

  4499. #

  4500. ######################################################################

  4501. 

  4502. ######################################################################

  4503. #

  4504. # matrix-synapse-admin

  4505. #

  4506. ######################################################################

  4507. 

  4508. matrix_synapse_admin_enabled: false

  4509. 

  4510. matrix_synapse_admin_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '8766') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  4511. 

  4512. matrix_synapse_admin_container_image_self_build: "{{ matrix_architecture not in ['arm64', 'amd64'] }}"

  4513. 

  4514. matrix_synapse_admin_container_network: "{{ matrix_addons_container_network }}"

  4515. 

  4516. matrix_synapse_admin_container_additional_networks: "{{ [matrix_playbook_reverse_proxyable_services_additional_network] if matrix_playbook_reverse_proxyable_services_additional_network else [] }}"

  4517. 

  4518. matrix_synapse_admin_container_labels_traefik_enabled: "{{ matrix_playbook_reverse_proxy_type in ['playbook-managed-traefik', 'other-traefik-container'] }}"

  4519. matrix_synapse_admin_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  4520. matrix_synapse_admin_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  4521. matrix_synapse_admin_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  4522. 

  4523. ######################################################################

  4524. #

  4525. # /matrix-synapse-admin

  4526. #

  4527. ######################################################################

  4528. 

  4529. 

  4530. ######################################################################

  4531. #

  4532. # etke/prometheus_node_exporter

  4533. #

  4534. ######################################################################

  4535. 

  4536. prometheus_node_exporter_enabled: false

  4537. 

  4538. prometheus_node_exporter_identifier: matrix-prometheus-node-exporter

  4539. 

  4540. prometheus_node_exporter_base_path: "{{ matrix_base_data_path }}/prometheus-node-exporter"

  4541. 

  4542. prometheus_node_exporter_uid: "{{ matrix_user_uid }}"

  4543. prometheus_node_exporter_gid: "{{ matrix_user_gid }}"

  4544. 

  4545. prometheus_node_exporter_hostname: "{{ matrix_server_fqn_matrix }}"

  4546. 

  4547. prometheus_node_exporter_container_network: "{{ matrix_monitoring_container_network }}"

  4548. 

  4549. prometheus_node_exporter_container_additional_networks: "{{ [matrix_playbook_reverse_proxyable_services_additional_network] if matrix_playbook_reverse_proxyable_services_additional_network else [] }}"

  4550. 

  4551. prometheus_node_exporter_container_labels_traefik_enabled: "{{ matrix_metrics_exposure_enabled }}"

  4552. prometheus_node_exporter_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  4553. prometheus_node_exporter_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  4554. prometheus_node_exporter_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  4555. 

  4556. prometheus_node_exporter_container_labels_metrics_middleware_basic_auth_enabled: "{{ matrix_metrics_exposure_http_basic_auth_enabled }}"

  4557. prometheus_node_exporter_container_labels_metrics_middleware_basic_auth_users: "{{ matrix_metrics_exposure_http_basic_auth_users }}"

  4558. 

  4559. ######################################################################

  4560. #

  4561. # /etke/prometheus_node_exporter

  4562. #

  4563. ######################################################################

  4564. 

  4565. 

  4566. ######################################################################

  4567. #

  4568. # etke/prometheus_postgres_exporter

  4569. #

  4570. ######################################################################

  4571. 

  4572. prometheus_postgres_exporter_enabled: false

  4573. 

  4574. prometheus_postgres_exporter_identifier: matrix-prometheus-postgres-exporter

  4575. 

  4576. prometheus_postgres_exporter_base_path: "{{ matrix_base_data_path }}/prometheus-postgres-exporter"

  4577. 

  4578. prometheus_postgres_exporter_uid: "{{ matrix_user_uid }}"

  4579. prometheus_postgres_exporter_gid: "{{ matrix_user_gid }}"

  4580. 

  4581. prometheus_postgres_exporter_hostname: "{{ matrix_server_fqn_matrix }}"

  4582. 

  4583. prometheus_postgres_exporter_container_network: "{{ matrix_monitoring_container_network }}"

  4584. 

  4585. prometheus_postgres_exporter_container_additional_networks: |

  4586.   {{

  4587.     ([devture_postgres_container_network] if (devture_postgres_enabled and prometheus_postgres_exporter_database_hostname == devture_postgres_connection_hostname and prometheus_postgres_exporter_container_network != devture_postgres_container_network) else [])

  4588.     +

  4589.     ([matrix_playbook_reverse_proxyable_services_additional_network] if matrix_playbook_reverse_proxyable_services_additional_network and prometheus_postgres_exporter_container_labels_traefik_enabled else [])

  4590.   }}

  4591. 

  4592. prometheus_postgres_exporter_container_labels_traefik_enabled: "{{ matrix_metrics_exposure_enabled }}"

  4593. prometheus_postgres_exporter_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  4594. prometheus_postgres_exporter_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  4595. prometheus_postgres_exporter_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  4596. 

  4597. prometheus_postgres_exporter_container_labels_metrics_middleware_basic_auth_enabled: "{{ matrix_metrics_exposure_http_basic_auth_enabled }}"

  4598. prometheus_postgres_exporter_container_labels_metrics_middleware_basic_auth_users: "{{ matrix_metrics_exposure_http_basic_auth_users }}"

  4599. 

  4600. prometheus_postgres_exporter_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  4601. prometheus_postgres_exporter_database_username: matrix_prometheus_postgres_exporter

  4602. prometheus_postgres_exporter_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'prometheus.pg.db', rounds=655555) | to_uuid }}"

  4603. prometheus_postgres_exporter_database_name: matrix_prometheus_postgres_exporter

  4604. 

  4605. prometheus_postgres_exporter_systemd_required_services_list_auto: |

  4606.   {{

  4607.     ([devture_postgres_identifier ~ '.service'] if (devture_postgres_enabled and prometheus_postgres_exporter_database_hostname == devture_postgres_connection_hostname) else [])

  4608.   }}

  4609. 

  4610. ######################################################################

  4611. #

  4612. # /etke/prometheus_postgres_exporter

  4613. #

  4614. ######################################################################

  4615. 

  4616. 

  4617. ######################################################################

  4618. #

  4619. # matrix-prometheus-nginxlog-exporter

  4620. #

  4621. ######################################################################

  4622. 

  4623. matrix_prometheus_nginxlog_exporter_enabled: false

  4624. 

  4625. matrix_prometheus_nginxlog_exporter_identifier: matrix-prometheus-nginxlog-exporter

  4626. 

  4627. matrix_prometheus_nginxlog_exporter_hostname: "{{ matrix_server_fqn_matrix }}"

  4628. 

  4629. matrix_prometheus_nginxlog_exporter_container_network: "{{ matrix_monitoring_container_network }}"

  4630. 

  4631. matrix_prometheus_nginxlog_exporter_container_additional_networks_auto: |-

  4632.   {{

  4633.     ([matrix_playbook_reverse_proxyable_services_additional_network] if (matrix_playbook_reverse_proxyable_services_additional_network and matrix_prometheus_nginxlog_exporter_container_labels_traefik_enabled) else [])

  4634.   }}

  4635. 

  4636. matrix_prometheus_nginxlog_exporter_container_labels_traefik_enabled: "{{ matrix_metrics_exposure_enabled }}"

  4637. matrix_prometheus_nginxlog_exporter_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  4638. matrix_prometheus_nginxlog_exporter_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  4639. matrix_prometheus_nginxlog_exporter_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  4640. 

  4641. matrix_prometheus_nginxlog_exporter_container_labels_metrics_middleware_basic_auth_enabled: "{{ matrix_metrics_exposure_http_basic_auth_enabled }}"

  4642. matrix_prometheus_nginxlog_exporter_container_labels_metrics_middleware_basic_auth_users: "{{ matrix_metrics_exposure_http_basic_auth_users }}"

  4643. 

  4644. matrix_prometheus_nginxlog_exporter_config_namespaces_matrix_source_tags_auto: |

  4645.   {{

  4646.     ([matrix_synapse_reverse_proxy_companion_access_log_syslog_integration_tag] if matrix_synapse_reverse_proxy_companion_access_log_syslog_integration_enabled else [])

  4647.   }}

  4648. 

  4649. ######################################################################

  4650. #

  4651. # /matrix-prometheus-nginxlog-exporter

  4652. #

  4653. ######################################################################

  4654. 

  4655. 

  4656. ######################################################################

  4657. #

  4658. # prometheus

  4659. #

  4660. ######################################################################

  4661. 

  4662. prometheus_enabled: false

  4663. 

  4664. prometheus_identifier: matrix-prometheus

  4665. 

  4666. prometheus_base_path: "{{ matrix_base_data_path }}/prometheus"

  4667. 

  4668. prometheus_uid: "{{ matrix_user_uid }}"

  4669. prometheus_gid: "{{ matrix_user_gid }}"

  4670. 

  4671. prometheus_container_network: "{{ matrix_monitoring_container_network }}"

  4672. 

  4673. prometheus_container_additional_networks_auto: |

  4674.   {{

  4675.     (

  4676.       ([prometheus_node_exporter_container_network] if prometheus_self_node_scraper_enabled and prometheus_node_exporter_container_network != prometheus_container_network else [])

  4677.       +

  4678.       ([matrix_synapse_container_network] if matrix_prometheus_services_connect_scraper_synapse_enabled and matrix_synapse_container_network != prometheus_container_network else [])

  4679.       +

  4680.       ([prometheus_postgres_exporter_container_network] if matrix_prometheus_services_connect_scraper_postgres_enabled and prometheus_postgres_exporter_container_network != prometheus_container_network else [])

  4681.       +

  4682.       ([matrix_hookshot_container_network] if matrix_prometheus_services_connect_scraper_hookshot_enabled and matrix_hookshot_container_network != prometheus_container_network else [])

  4683.       +

  4684.       ([matrix_prometheus_nginxlog_exporter_container_network] if matrix_prometheus_services_connect_scraper_nginxlog_enabled and matrix_prometheus_nginxlog_exporter_container_network != prometheus_container_network else [])

  4685.       +

  4686.       ([matrix_media_repo_container_network] if matrix_prometheus_services_connect_scraper_media_repo_enabled and matrix_media_repo_container_network != prometheus_container_network else [])

  4687.     ) | unique

  4688.   }}

  4689. 

  4690. prometheus_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '9090') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  4691. 

  4692. prometheus_config_rule_files_auto: |

  4693.   {{

  4694.     (['synapse-v2.rules'] if matrix_prometheus_services_connect_synapse_rules_enabled else [])

  4695.   }}

  4696. 

  4697. prometheus_self_node_scraper_enabled: "{{ prometheus_node_exporter_enabled }}"

  4698. prometheus_self_node_scraper_static_configs_target: "{{ (prometheus_node_exporter_identifier + ':9100') if prometheus_node_exporter_enabled else '' }}"

  4699. 

  4700. prometheus_config_scrape_configs_auto: |

  4701.   {{

  4702.     (matrix_prometheus_services_connect_scraper_synapse_configs if matrix_prometheus_services_connect_scraper_synapse_enabled else [])

  4703.     +

  4704.     (matrix_prometheus_services_connect_scraper_postgres_scrape_configs if matrix_prometheus_services_connect_scraper_postgres_enabled else [])

  4705.     +

  4706.     (matrix_prometheus_services_connect_scraper_hookshot_scrape_configs if matrix_prometheus_services_connect_scraper_hookshot_enabled else [])

  4707.     +

  4708.     (matrix_prometheus_services_connect_scraper_nginxlog_scrape_configs if matrix_prometheus_services_connect_scraper_nginxlog_enabled else [])

  4709.     +

  4710.     (matrix_prometheus_services_connect_scraper_media_repo_scrape_configs if matrix_prometheus_services_connect_scraper_media_repo_enabled else [])

  4711.   }}

  4712. 

  4713. ######################################################################

  4714. #

  4715. # /prometheus

  4716. #

  4717. ######################################################################

  4718. 

  4719. 

  4720. ######################################################################

  4721. #

  4722. # matrix-prometheus-services-connect

  4723. #

  4724. ######################################################################

  4725. 

  4726. matrix_prometheus_services_connect_synapse_enabled: "{{ prometheus_enabled and matrix_synapse_enabled }}"

  4727. 

  4728. matrix_prometheus_services_connect_synapse_rules_download_synapse_tag: "{{ matrix_synapse_docker_image_tag }}"

  4729. matrix_prometheus_services_connect_synapse_rules_download_dir_path: "{{ prometheus_config_path }}"

  4730. matrix_prometheus_services_connect_synapse_rules_download_owner: "{{ prometheus_uid }}"

  4731. matrix_prometheus_services_connect_synapse_rules_download_group: "{{ prometheus_gid }}"

  4732. 

  4733. matrix_prometheus_services_connect_scraper_synapse_enabled: "{{ matrix_synapse_enabled and matrix_synapse_metrics_enabled }}"

  4734. matrix_prometheus_services_connect_scraper_synapse_main_process_static_configs_target: "matrix-synapse:{{ matrix_synapse_metrics_port }}"

  4735. matrix_prometheus_services_connect_scraper_synapse_workers_enabled_list: "{{ matrix_synapse_workers_enabled_list }}"

  4736. 

  4737. matrix_prometheus_services_connect_scraper_postgres_enabled: "{{ prometheus_postgres_exporter_enabled }}"

  4738. matrix_prometheus_services_connect_scraper_postgres_static_configs_target: "{{ prometheus_postgres_exporter_identifier }}:{{ prometheus_postgres_exporter_port | string }}"

  4739. 

  4740. matrix_prometheus_services_connect_scraper_hookshot_enabled: "{{ matrix_hookshot_enabled and matrix_hookshot_metrics_enabled }}"

  4741. matrix_prometheus_services_connect_scraper_hookshot_static_configs_target: "{{ matrix_hookshot_container_url }}:{{ matrix_hookshot_metrics_port | string }}"

  4742. 

  4743. matrix_prometheus_services_connect_scraper_nginxlog_enabled: "{{ matrix_prometheus_nginxlog_exporter_enabled }}"

  4744. matrix_prometheus_services_connect_scraper_nginxlog_static_configs_target: "{{ matrix_prometheus_nginxlog_exporter_identifier }}:{{ matrix_prometheus_nginxlog_exporter_container_metrics_port | string }}"

  4745. 

  4746. matrix_prometheus_services_connect_scraper_media_repo_enabled: "{{ matrix_media_repo_enabled and matrix_media_repo_metrics_enabled }}"

  4747. matrix_prometheus_services_connect_scraper_media_repo_static_configs_target: "{{ matrix_media_repo_identifier }}:{{ matrix_media_repo_metrics_port }}"

  4748. 

  4749. ######################################################################

  4750. #

  4751. # /matrix-prometheus-services-connect

  4752. #

  4753. ######################################################################

  4754. 

  4755. 

  4756. ######################################################################

  4757. #

  4758. # etke/grafana

  4759. #

  4760. ######################################################################

  4761. 

  4762. grafana_enabled: false

  4763. 

  4764. grafana_identifier: matrix-grafana

  4765. 

  4766. grafana_uid: "{{ matrix_user_uid }}"

  4767. grafana_gid: "{{ matrix_user_gid }}"

  4768. 

  4769. grafana_hostname: "{{ matrix_server_fqn_grafana }}"

  4770. 

  4771. grafana_base_path: "{{ matrix_base_data_path }}/grafana"

  4772. 

  4773. grafana_container_network: "{{ matrix_monitoring_container_network }}"

  4774. 

  4775. grafana_container_additional_networks_auto: |

  4776.   {{

  4777.     (

  4778.       ([matrix_playbook_reverse_proxyable_services_additional_network] if matrix_playbook_reverse_proxyable_services_additional_network and grafana_container_labels_traefik_enabled else [])

  4779.       +

  4780.       ([prometheus_container_network] if prometheus_enabled and prometheus_container_network != grafana_container_network else [])

  4781.     ) | unique

  4782.   }}

  4783. 

  4784. grafana_container_labels_traefik_enabled: "{{ matrix_playbook_traefik_labels_enabled }}"

  4785. grafana_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  4786. grafana_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  4787. grafana_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  4788. 

  4789. grafana_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '3000') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  4790. 

  4791. grafana_provisioning_datasources: |

  4792.   {{

  4793.     ([{

  4794.       'name': (matrix_server_fqn_matrix + ' - Prometheus'),

  4795.       'type': 'prometheus',

  4796.       'access': 'proxy',

  4797.       'url': ('http://' + prometheus_identifier + ':9090'),

  4798.     }] if prometheus_enabled else [])

  4799.   }}

  4800. 

  4801. grafana_dashboard_download_urls: |

  4802.   {{

  4803.     (matrix_synapse_grafana_dashboard_urls if matrix_homeserver_implementation == 'synapse' and matrix_synapse_metrics_enabled else [])

  4804.     +

  4805.     (prometheus_node_exporter_dashboard_urls if prometheus_node_exporter_enabled else [])

  4806.     +

  4807.     (prometheus_postgres_exporter_dashboard_urls if prometheus_postgres_exporter_enabled else [])

  4808.     +

  4809.     (matrix_prometheus_nginxlog_exporter_dashboard_urls if matrix_prometheus_nginxlog_exporter_enabled else [])

  4810.     +

  4811.     (matrix_media_repo_dashboard_urls if matrix_media_repo_metrics_enabled else [])

  4812.   }}

  4813. 

  4814. grafana_provisioning_dashboard_template_files: |

  4815.   {{

  4816.     ([{

  4817.         'path': 'roles/custom/matrix-prometheus-nginxlog-exporter/templates/grafana/nginx-proxy.json',

  4818.         'name': 'nginx-proxy.json',

  4819.     }] if matrix_prometheus_nginxlog_exporter_enabled else [])

  4820.     +

  4821.     ([{

  4822.         'path': 'roles/custom/matrix-media-repo/templates/grafana/media-repo.json',

  4823.         'name': 'media-repo.json',

  4824.     }] if matrix_media_repo_metrics_enabled else [])

  4825.   }}

  4826. 

  4827. grafana_default_home_dashboard_path: |-

  4828.   {{

  4829.     {

  4830.       'synapse': ('/etc/grafana/dashboards/synapse.json' if matrix_synapse_metrics_enabled and matrix_synapse_metrics_enabled else ('/etc/grafana/dashboards/node-exporter-full.json' if prometheus_node_exporter_enabled else '')),

  4831.       'dendrite': ('/etc/grafana/dashboards/node-exporter-full.json' if prometheus_node_exporter_enabled else ''),

  4832.       'conduit': ('/etc/grafana/dashboards/node-exporter-full.json' if prometheus_node_exporter_enabled else ''),

  4833.     }[matrix_homeserver_implementation]

  4834.   }}

  4835. 

  4836. ######################################################################

  4837. #

  4838. # /etke/grafana

  4839. #

  4840. ######################################################################

  4841. 

  4842. 

  4843. ######################################################################

  4844. #

  4845. # matrix-registration

  4846. #

  4847. ######################################################################

  4848. 

  4849. matrix_registration_enabled: false

  4850. 

  4851. matrix_registration_scheme: "{{ 'https' if matrix_playbook_ssl_enabled else 'http' }}"

  4852. matrix_registration_hostname: "{{ matrix_server_fqn_matrix }}"

  4853. matrix_registration_path_prefix: /matrix-registration

  4854. 

  4855. matrix_registration_systemd_required_services_list_auto: |

  4856.   {{

  4857.     ([devture_postgres_identifier ~ '.service'] if (devture_postgres_enabled and matrix_registration_database_hostname == devture_postgres_connection_hostname) else [])

  4858.   }}

  4859. 

  4860. matrix_registration_container_image_self_build: "{{ matrix_architecture != 'amd64' }}"

  4861. 

  4862. matrix_registration_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '8767') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  4863. 

  4864. matrix_registration_container_network: "{{ matrix_addons_container_network }}"

  4865. 

  4866. matrix_registration_container_additional_networks_auto: |-

  4867.   {{

  4868.     (

  4869.       ([] if matrix_addons_homeserver_container_network == '' else [matrix_addons_homeserver_container_network])

  4870.       +

  4871.       ([devture_postgres_container_network] if (devture_postgres_enabled and matrix_registration_database_hostname == devture_postgres_connection_hostname and matrix_mautrix_facebook_container_network != devture_postgres_container_network) else [])

  4872.       +

  4873.       ([matrix_playbook_reverse_proxyable_services_additional_network] if (matrix_playbook_reverse_proxyable_services_additional_network and matrix_registration_container_labels_traefik_enabled) else [])

  4874.     ) | unique

  4875.   }}

  4876. 

  4877. matrix_registration_container_labels_traefik_enabled: "{{ matrix_playbook_reverse_proxy_type in ['playbook-managed-traefik', 'other-traefik-container'] }}"

  4878. matrix_registration_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  4879. matrix_registration_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  4880. matrix_registration_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  4881. 

  4882. matrix_registration_riot_instance: "{{ (('https://' if matrix_playbook_ssl_enabled else 'http://') + matrix_server_fqn_element) if matrix_client_element_enabled else 'https://element.io/app/' }}"

  4883. 

  4884. matrix_registration_shared_secret: |-

  4885.   {{

  4886.     {

  4887.       'synapse': matrix_synapse_registration_shared_secret | default (''),

  4888.       'dendrite': matrix_dendrite_client_api_registration_shared_secret | default (''),

  4889.       'conduit': '',

  4890.     }[matrix_homeserver_implementation]

  4891.   }}

  4892. 

  4893. matrix_registration_server_location: "{{ matrix_addons_homeserver_client_api_url }}"

  4894. 

  4895. matrix_registration_api_validate_certs: "{{ matrix_playbook_ssl_enabled }}"

  4896. 

  4897. # Postgres is the default, except if not using internal Postgres server

  4898. matrix_registration_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  4899. matrix_registration_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  4900. matrix_registration_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mx.registr.db', rounds=655555) | to_uuid }}"

  4901. 

  4902. ######################################################################

  4903. #

  4904. # /matrix-registration

  4905. #

  4906. ######################################################################

  4907. 

  4908. 

  4909. ######################################################################

  4910. #

  4911. # matrix-sliding-sync

  4912. #

  4913. ######################################################################

  4914. 

  4915. # We don't enable the sliding sync proxy by default.

  4916. matrix_sliding_sync_enabled: false

  4917. 

  4918. matrix_sliding_sync_scheme: "{{ 'https' if matrix_playbook_ssl_enabled else 'http' }}"

  4919. 

  4920. matrix_sliding_sync_hostname: "{{ matrix_server_fqn_matrix }}"

  4921. 

  4922. matrix_sliding_sync_path_prefix: /sliding-sync

  4923. 

  4924. matrix_sliding_sync_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"

  4925. 

  4926. matrix_sliding_sync_container_network: "{{ matrix_homeserver_container_network }}"

  4927. 

  4928. matrix_sliding_sync_container_additional_networks: |

  4929.   {{

  4930.     (

  4931.       ([matrix_playbook_reverse_proxyable_services_additional_network] if matrix_sliding_sync_container_labels_traefik_enabled and matrix_playbook_reverse_proxyable_services_additional_network else [])

  4932.       +

  4933.       ([] if matrix_homeserver_container_network in ['', matrix_sliding_sync_container_network] else [matrix_homeserver_container_network])

  4934.       +

  4935.       ([devture_postgres_container_network] if devture_postgres_enabled and devture_postgres_container_network != matrix_sliding_sync_container_network else [])

  4936.     ) | unique

  4937.   }}

  4938. 

  4939. matrix_sliding_sync_container_labels_traefik_enabled: "{{ matrix_playbook_reverse_proxy_type in ['playbook-managed-traefik', 'other-traefik-container'] }}"

  4940. matrix_sliding_sync_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  4941. matrix_sliding_sync_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  4942. matrix_sliding_sync_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  4943. 

  4944. matrix_sliding_sync_container_labels_public_metrics_middleware_basic_auth_enabled: "{{ matrix_metrics_exposure_http_basic_auth_enabled }}"

  4945. matrix_sliding_sync_container_labels_public_metrics_middleware_basic_auth_users: "{{ matrix_metrics_exposure_http_basic_auth_users }}"

  4946. 

  4947. matrix_sliding_sync_systemd_required_services_list_auto: |

  4948.   {{

  4949.     matrix_homeserver_systemd_services_list

  4950.     +

  4951.     ([devture_postgres_identifier ~ '.service'] if (devture_postgres_enabled and matrix_sliding_sync_database_hostname == devture_postgres_connection_hostname) else [])

  4952.   }}

  4953. 

  4954. matrix_sliding_sync_environment_variable_syncv3_server: "{{ matrix_homeserver_container_url }}"

  4955. matrix_sliding_sync_environment_variable_syncv3_secret: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'ss.secret', rounds=655555) | to_uuid }}"

  4956. 

  4957. matrix_sliding_sync_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  4958. matrix_sliding_sync_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'ss.db', rounds=655555) | to_uuid }}"

  4959. 

  4960. matrix_sliding_sync_metrics_enabled: "{{ prometheus_enabled or matrix_metrics_exposure_enabled }}"

  4961. 

  4962. matrix_sliding_sync_metrics_proxying_enabled: "{{ matrix_sliding_sync_metrics_enabled and matrix_metrics_exposure_enabled }}"

  4963. matrix_sliding_sync_metrics_proxying_hostname: "{{ matrix_metrics_exposure_hostname }}"

  4964. matrix_sliding_sync_metrics_proxying_path_prefix: "{{ matrix_metrics_exposure_path_prefix }}/sliding-sync"

  4965. 

  4966. #####################################################################

  4967. #

  4968. # /matrix-sliding-sync

  4969. #

  4970. ######################################################################

  4971. 

  4972. 

  4973. ######################################################################

  4974. #

  4975. # matrix-dendrite

  4976. #

  4977. ######################################################################

  4978. 

  4979. matrix_dendrite_enabled: "{{ matrix_homeserver_implementation == 'dendrite' }}"

  4980. 

  4981. matrix_dendrite_hostname: "{{ matrix_server_fqn_matrix }}"

  4982. 

  4983. matrix_dendrite_federation_enabled: "{{ matrix_homeserver_federation_enabled }}"

  4984. 

  4985. matrix_dendrite_container_network: "{{ matrix_homeserver_container_network }}"

  4986. 

  4987. matrix_dendrite_container_additional_networks_auto: |

  4988.   {{

  4989.     (

  4990.       ([matrix_playbook_reverse_proxyable_services_additional_network] if matrix_dendrite_container_labels_traefik_enabled and matrix_playbook_reverse_proxyable_services_additional_network else [])

  4991.       +

  4992.       ([devture_postgres_container_network] if (devture_postgres_enabled and matrix_dendrite_database_hostname == devture_postgres_connection_hostname and devture_postgres_container_network != matrix_dendrite_container_network) else [])

  4993.     ) | unique

  4994.   }}

  4995. 

  4996. matrix_dendrite_container_http_host_bind_address: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ matrix_dendrite_http_bind_port | string) if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  4997. matrix_dendrite_container_https_host_bind_address: "{{ '' if not matrix_dendrite_https_bind_port or not matrix_playbook_service_host_bind_interface_prefix else (matrix_playbook_service_host_bind_interface_prefix + matrix_dendrite_https_bind_port | string) }}"

  4998. 

  4999. matrix_dendrite_container_labels_traefik_enabled: "{{ matrix_playbook_reverse_proxy_type in ['playbook-managed-traefik', 'other-traefik-container'] and not matrix_synapse_workers_enabled }}"

  5000. matrix_dendrite_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  5001. matrix_dendrite_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  5002. matrix_dendrite_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  5003. 

  5004. matrix_dendrite_container_labels_public_client_synapse_admin_api_enabled: "{{ matrix_synapse_admin_enabled }}"

  5005. 

  5006. matrix_dendrite_container_labels_public_client_root_redirection_enabled: "{{ matrix_dendrite_container_labels_public_client_root_redirection_url != '' }}"

  5007. matrix_dendrite_container_labels_public_client_root_redirection_url: "{{ (('https://' if matrix_playbook_ssl_enabled else 'http://') + matrix_server_fqn_element) if matrix_client_element_enabled else '' }}"

  5008. 

  5009. matrix_dendrite_container_labels_public_federation_api_traefik_hostname: "{{ matrix_server_fqn_matrix_federation }}"

  5010. matrix_dendrite_container_labels_public_federation_api_traefik_entrypoints: "{{ matrix_federation_traefik_entrypoint_name }}"

  5011. matrix_dendrite_container_labels_public_federation_api_traefik_tls: "{{ matrix_federation_traefik_entrypoint_tls }}"

  5012. 

  5013. matrix_dendrite_container_labels_public_metrics_middleware_basic_auth_enabled: "{{ matrix_metrics_exposure_http_basic_auth_enabled }}"

  5014. matrix_dendrite_container_labels_public_metrics_middleware_basic_auth_users: "{{ matrix_metrics_exposure_http_basic_auth_users }}"

  5015. 

  5016. matrix_dendrite_metrics_enabled: "{{ prometheus_enabled or matrix_metrics_exposure_enabled }}"

  5017. 

  5018. matrix_dendrite_metrics_proxying_enabled: "{{ matrix_dendrite_metrics_enabled and matrix_metrics_exposure_enabled }}"

  5019. matrix_dendrite_metrics_proxying_hostname: "{{ matrix_metrics_exposure_hostname }}"

  5020. matrix_dendrite_metrics_proxying_path_prefix: "{{ matrix_metrics_exposure_path_prefix }}/dendrite"

  5021. 

  5022. matrix_dendrite_client_api_registration_shared_secret: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'dendrite.rss', rounds=655555) | to_uuid }}"

  5023. 

  5024. matrix_dendrite_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  5025. 

  5026. matrix_dendrite_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'dendrite.db', rounds=655555) | to_uuid }}"

  5027. 

  5028. # Even if TURN doesn't support TLS (it does by default),

  5029. # it doesn't hurt to try a secure connection anyway.

  5030. matrix_dendrite_client_api_turn_uris: |

  5031.   {{

  5032.     [

  5033.       'turns:' + matrix_server_fqn_matrix + '?transport=udp',

  5034.       'turns:' + matrix_server_fqn_matrix + '?transport=tcp',

  5035.       'turn:' + matrix_server_fqn_matrix + '?transport=udp',

  5036.       'turn:' + matrix_server_fqn_matrix + '?transport=tcp',

  5037.     ]

  5038.     if matrix_coturn_enabled

  5039.     else []

  5040.   }}

  5041. 

  5042. matrix_dendrite_client_api_turn_shared_secret: "{{ matrix_coturn_turn_static_auth_secret if (matrix_coturn_enabled and matrix_coturn_authentication_method == 'auth-secret') else '' }}"

  5043. matrix_dendrite_client_api_turn_username: "{{ matrix_coturn_lt_cred_mech_username if (matrix_coturn_enabled and matrix_coturn_authentication_method == 'lt-cred-mech') else '' }}"

  5044. matrix_dendrite_client_api_turn_password: "{{ matrix_coturn_lt_cred_mech_password if (matrix_coturn_enabled and matrix_coturn_authentication_method == 'lt-cred-mech') else '' }}"

  5045. 

  5046. matrix_dendrite_disable_tls_validation: "{{ not matrix_playbook_ssl_enabled }}"

  5047. 

  5048. matrix_dendrite_self_check_validate_certificates: "{{ matrix_playbook_ssl_enabled }}"

  5049. 

  5050. matrix_dendrite_trusted_id_servers: "{{ [matrix_server_fqn_matrix] if matrix_ma1sd_enabled else ['matrix.org', 'vector.im'] }}"

  5051. 

  5052. matrix_dendrite_systemd_required_services_list_auto: |

  5053.   {{

  5054.     ([devture_postgres_identifier ~ '.service'] if (devture_postgres_enabled and matrix_dendrite_database_hostname == devture_postgres_connection_hostname) else [])

  5055.     +

  5056.     (['matrix-goofys.service'] if matrix_s3_media_store_enabled else [])

  5057.   }}

  5058. 

  5059. matrix_dendrite_systemd_wanted_services_list_auto: |

  5060.   {{

  5061.     (['matrix-coturn.service'] if matrix_coturn_enabled else [])

  5062.   }}

  5063. 

  5064. matrix_dendrite_container_extra_arguments_auto: "{{ matrix_homeserver_container_extra_arguments_auto }}"

  5065. matrix_dendrite_app_service_config_files_auto: "{{ matrix_homeserver_app_service_config_files_auto }}"

  5066. 

  5067. ######################################################################

  5068. #

  5069. # /matrix-dendrite

  5070. #

  5071. ######################################################################

  5072. 

  5073. 

  5074. ######################################################################

  5075. #

  5076. # matrix-conduit

  5077. #

  5078. ######################################################################

  5079. 

  5080. matrix_conduit_enabled: "{{ matrix_homeserver_implementation == 'conduit' }}"

  5081. 

  5082. matrix_conduit_hostname: "{{ matrix_server_fqn_matrix }}"

  5083. 

  5084. matrix_conduit_allow_federation: "{{ matrix_homeserver_federation_enabled }}"

  5085. 

  5086. matrix_conduit_container_network: "{{ matrix_homeserver_container_network }}"

  5087. 

  5088. matrix_conduit_container_additional_networks_auto: |

  5089.   {{

  5090.     (

  5091.       ([matrix_playbook_reverse_proxyable_services_additional_network] if matrix_conduit_container_labels_traefik_enabled and matrix_playbook_reverse_proxyable_services_additional_network else [])

  5092.     ) | unique

  5093.   }}

  5094. 

  5095. matrix_conduit_container_labels_traefik_enabled: "{{ matrix_playbook_reverse_proxy_type in ['playbook-managed-traefik', 'other-traefik-container'] and not matrix_synapse_workers_enabled }}"

  5096. matrix_conduit_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  5097. matrix_conduit_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  5098. matrix_conduit_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  5099. 

  5100. matrix_conduit_container_labels_public_client_root_redirection_enabled: "{{ matrix_conduit_container_labels_public_client_root_redirection_url != '' }}"

  5101. matrix_conduit_container_labels_public_client_root_redirection_url: "{{ (('https://' if matrix_playbook_ssl_enabled else 'http://') + matrix_server_fqn_element) if matrix_client_element_enabled else '' }}"

  5102. 

  5103. matrix_conduit_container_labels_public_federation_api_traefik_hostname: "{{ matrix_server_fqn_matrix_federation }}"

  5104. matrix_conduit_container_labels_public_federation_api_traefik_entrypoints: "{{ matrix_federation_traefik_entrypoint_name }}"

  5105. matrix_conduit_container_labels_public_federation_api_traefik_tls: "{{ matrix_federation_traefik_entrypoint_tls }}"

  5106. 

  5107. matrix_conduit_container_labels_internal_client_api_enabled: "{{ matrix_playbook_internal_matrix_client_api_traefik_entrypoint_enabled }}"

  5108. matrix_conduit_container_labels_internal_client_api_traefik_entrypoints: "{{ matrix_playbook_internal_matrix_client_api_traefik_entrypoint_name }}"

  5109. 

  5110. matrix_conduit_turn_uris: |

  5111.   {{

  5112.     ([

  5113.       'turns:' + matrix_server_fqn_matrix + '?transport=udp',

  5114.       'turns:' + matrix_server_fqn_matrix + '?transport=tcp',

  5115.     ] if matrix_coturn_enabled and matrix_coturn_tls_enabled else [])

  5116.     +

  5117.     ([

  5118.       'turn:' + matrix_server_fqn_matrix + '?transport=udp',

  5119.       'turn:' + matrix_server_fqn_matrix + '?transport=tcp',

  5120.     ] if matrix_coturn_enabled else [])

  5121.   }}

  5122. 

  5123. matrix_conduit_turn_secret: "{{ matrix_coturn_turn_static_auth_secret if (matrix_coturn_enabled and matrix_coturn_authentication_method == 'auth-secret') else '' }}"

  5124. matrix_conduit_turn_username: "{{ matrix_coturn_lt_cred_mech_username if (matrix_coturn_enabled and matrix_coturn_authentication_method == 'lt-cred-mech') else '' }}"

  5125. matrix_conduit_turn_password: "{{ matrix_coturn_lt_cred_mech_password if (matrix_coturn_enabled and matrix_coturn_authentication_method == 'lt-cred-mech') else '' }}"

  5126. 

  5127. ######################################################################

  5128. #

  5129. # /matrix-conduit

  5130. #

  5131. ######################################################################

  5132. 

  5133. 

  5134. ######################################################################

  5135. #

  5136. # matrix-user-creator

  5137. #

  5138. ######################################################################

  5139. 

  5140. matrix_user_creator_users_auto: |

  5141.   {{

  5142.     ([{

  5143.       'username': matrix_bot_matrix_registration_bot_matrix_user_id_localpart,

  5144.       'initial_password': matrix_bot_matrix_registration_bot_bot_password,

  5145.       'initial_type': 'admin',

  5146.     }] if matrix_bot_matrix_registration_bot_enabled else [])

  5147.     +

  5148.     ([{

  5149.       'username': matrix_bot_chatgpt_matrix_bot_username_localpart,

  5150.       'initial_password': matrix_bot_chatgpt_matrix_bot_password,

  5151.       'initial_type': 'bot',

  5152.     }] if matrix_bot_chatgpt_enabled and matrix_bot_chatgpt_matrix_bot_password | length > 0 else [])

  5153.     +

  5154.     ([{

  5155.       'username': matrix_bot_matrix_reminder_bot_matrix_user_id_localpart,

  5156.       'initial_password': matrix_bot_matrix_reminder_bot_matrix_user_password,

  5157.       'initial_type': 'bot',

  5158.     }] if matrix_bot_matrix_reminder_bot_enabled else [])

  5159.     +

  5160.     ([{

  5161.       'username': matrix_bot_honoroit_login,

  5162.       'initial_password': matrix_bot_honoroit_password,

  5163.       'initial_type': 'bot',

  5164.     }] if matrix_bot_honoroit_enabled else [])

  5165.     +

  5166.     ([{

  5167.       'username': matrix_bot_postmoogle_login,

  5168.       'initial_password': matrix_bot_postmoogle_password,

  5169.       'initial_type': 'bot',

  5170.     }] if matrix_bot_postmoogle_enabled else [])

  5171.     +

  5172.     ([{

  5173.       'username': matrix_bot_buscarron_login,

  5174.       'initial_password': matrix_bot_buscarron_password,

  5175.       'initial_type': 'bot',

  5176.     }] if matrix_bot_buscarron_enabled else [])

  5177.   }}

  5178. 

  5179. ######################################################################

  5180. #

  5181. # /matrix-user-creator

  5182. #

  5183. ######################################################################

  5184. 

  5185. 

  5186. ######################################################################

  5187. #

  5188. # matrix-user-verification-service

  5189. #

  5190. ######################################################################

  5191. 

  5192. matrix_user_verification_service_enabled: false

  5193. 

  5194. matrix_user_verification_service_systemd_required_services_list: |

  5195.   {{

  5196.     [devture_systemd_docker_base_docker_service_name]

  5197.     +

  5198.     (['matrix-' + matrix_homeserver_implementation + '.service'])

  5199.   }}

  5200. 

  5201. matrix_user_verification_service_container_network: "{{ matrix_addons_container_network }}"

  5202. 

  5203. matrix_user_verification_service_container_additional_networks: |

  5204.   {{

  5205.     (

  5206.       ([matrix_playbook_reverse_proxyable_services_additional_network] if matrix_playbook_reverse_proxyable_services_additional_network else [])

  5207.       +

  5208.       ([matrix_homeserver_container_network] if matrix_homeserver_container_network != matrix_user_verification_service_container_network else [])

  5209.     ) | unique

  5210.   }}

  5211. 

  5212. # If Jitsi is managed by this playbook we can use the docker network - no need to expose a port.

  5213. # If Jitsi is not managed by this playbook, or you otherwise have a need for it, you can expose

  5214. # matrix-user-verfification-services's client-server port to port 3003.

  5215. # By default Matrix-User-Verification-Service binds to port 3000, which collides with grafana, therefore this uses port 3003.

  5216. matrix_user_verification_service_container_http_host_bind_port: "{{  '' if (jitsi_enabled | bool and jitsi_enable_auth | bool and jitsi_auth_type == 'matrix') else matrix_playbook_service_host_bind_interface_prefix ~ '3003' }}"

  5217. 

  5218. # URL exposed in the docker network

  5219. matrix_user_verification_service_container_url: "http://{{  matrix_user_verification_service_container_name }}:3000"

  5220. 

  5221. matrix_user_verification_service_uvs_homeserver_url: "{{ matrix_addons_homeserver_client_api_url }}"

  5222. 

  5223. # We connect via the container network (private IPs), so we need to disable IP checks

  5224. matrix_user_verification_service_uvs_disable_ip_blacklist: "{{'true' if matrix_synapse_enabled else 'false'}}"

  5225. 

  5226. matrix_user_verification_service_uvs_auth_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'uvs.auth.token', rounds=655555) | to_uuid }}"

  5227. 

  5228. ######################################################################

  5229. #

  5230. # /matrix-user-verification-service

  5231. #

  5232. ######################################################################

  5233. 

  5234. 

  5235. ########################################################################

  5236. #                                                                      #

  5237. # matrix-static-files                                                  #

  5238. #                                                                      #

  5239. ########################################################################

  5240. 

  5241. matrix_static_files_enabled: true

  5242. 

  5243. matrix_static_files_container_network: "{{ (matrix_static_files_identifier if matrix_playbook_reverse_proxy_type == 'none' else matrix_playbook_reverse_proxy_container_network) }}"

  5244. 

  5245. matrix_static_files_container_labels_traefik_enabled: "{{ matrix_playbook_traefik_labels_enabled }}"

  5246. matrix_static_files_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  5247. matrix_static_files_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  5248. matrix_static_files_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  5249. 

  5250. matrix_static_files_container_labels_well_known_matrix_endpoint_traefik_hostname: "{{ matrix_server_fqn_matrix }}"

  5251. 

  5252. # Base domain serving is not enabled by default (see `matrix_static_files_container_labels_base_domain_enabled`),

  5253. # but we pass the hostname, so that enabling it is easy.

  5254. matrix_static_files_container_labels_base_domain_traefik_hostname: "{{ matrix_domain }}"

  5255. 

  5256. # If we're not serving a static webpage, serve a redirect instead of a 404.

  5257. matrix_static_files_container_labels_base_domain_root_path_redirection_enabled: "{{ not matrix_static_files_file_index_html_enabled }}"

  5258. matrix_static_files_container_labels_base_domain_root_path_redirection_url: "{{ ('https://' if matrix_playbook_ssl_enabled else 'http://') + matrix_server_fqn_matrix }}"

  5259. 

  5260. matrix_static_files_file_matrix_client_property_io_element_jitsi_preferred_domain: "{{ matrix_server_fqn_jitsi if jitsi_enabled else '' }}"

  5261. 

  5262. matrix_static_files_file_matrix_client_property_org_matrix_msc3575_proxy_url: "{{ matrix_homeserver_sliding_sync_url }}"

  5263. 

  5264. matrix_static_files_file_matrix_client_property_m_tile_server_entries_enabled: "{{ matrix_client_element_location_sharing_enabled }}"

  5265. matrix_static_files_file_matrix_client_property_m_tile_server_map_style_url: "{{ ('https://' if matrix_playbook_ssl_enabled else 'http://') + matrix_server_fqn_element }}/map_style.json"

  5266. 

  5267. matrix_static_files_file_matrix_server_property_m_server: "{{ matrix_server_fqn_matrix_federation }}:{{ matrix_federation_public_port }}"

  5268. 

  5269. matrix_static_files_scheme: "{{ 'https' if matrix_playbook_ssl_enabled else 'http' }}"

  5270. 

  5271. matrix_static_files_self_check_hostname_matrix: "{{ matrix_server_fqn_matrix }}"

  5272. matrix_static_files_self_check_hostname_identity: "{{ matrix_domain }}"

  5273. 

  5274. ########################################################################

  5275. #                                                                      #

  5276. # /matrix-static-files                                                 #

  5277. #                                                                      #

  5278. ########################################################################

  5279. 

  5280. 

  5281. ########################################################################

  5282. #                                                                      #

  5283. # com.devture.ansible.role.container_socket_proxy                      #

  5284. #                                                                      #

  5285. ########################################################################

  5286. 

  5287. devture_container_socket_proxy_enabled: "{{ matrix_playbook_reverse_proxy_type == 'playbook-managed-traefik' }}"

  5288. 

  5289. devture_container_socket_proxy_identifier: matrix-container-socket-proxy

  5290. 

  5291. devture_container_socket_proxy_base_path: "{{ matrix_base_data_path }}/container-socket-proxy"

  5292. 

  5293. devture_container_socket_proxy_uid: "{{ matrix_user_uid }}"

  5294. devture_container_socket_proxy_gid: "{{ matrix_user_gid }}"

  5295. 

  5296. # Traefik requires read access to the containers APIs to do its job

  5297. devture_container_socket_proxy_api_containers_enabled: true

  5298. 

  5299. ########################################################################

  5300. #                                                                      #

  5301. # /com.devture.ansible.role.container_socket_proxy                     #

  5302. #                                                                      #

  5303. ########################################################################

  5304. 

  5305. 

  5306. ########################################################################

  5307. #                                                                      #

  5308. # com.devture.ansible.role.traefik                                     #

  5309. #                                                                      #

  5310. ########################################################################

  5311. 

  5312. devture_traefik_enabled: "{{ matrix_playbook_reverse_proxy_type == 'playbook-managed-traefik' }}"

  5313. 

  5314. devture_traefik_identifier: matrix-traefik

  5315. 

  5316. devture_traefik_base_path: "{{ matrix_base_data_path }}/traefik"

  5317. 

  5318. devture_traefik_uid: "{{ matrix_user_uid }}"

  5319. devture_traefik_gid: "{{ matrix_user_gid }}"

  5320. 

  5321. devture_traefik_additional_entrypoints_auto: |

  5322.   {{

  5323.     ([matrix_playbook_public_matrix_federation_api_traefik_entrypoint_definition] if matrix_playbook_public_matrix_federation_api_traefik_entrypoint_enabled else [])

  5324.     +

  5325.     ([matrix_playbook_internal_matrix_client_api_traefik_entrypoint_definition] if matrix_playbook_internal_matrix_client_api_traefik_entrypoint_enabled else [])

  5326.   }}

  5327. 

  5328. devture_traefik_config_providers_docker_endpoint: "{{ devture_container_socket_proxy_endpoint if devture_container_socket_proxy_enabled else 'unix:///var/run/docker.sock' }}"

  5329. 

  5330. devture_traefik_container_additional_networks_auto: |

  5331.   {{

  5332.     ([devture_container_socket_proxy_container_network] if devture_container_socket_proxy_enabled else [])

  5333.   }}

  5334. 

  5335. devture_traefik_systemd_required_services_list: |

  5336.   {{

  5337.     ([devture_systemd_docker_base_docker_service_name])

  5338.     +

  5339.     ([devture_container_socket_proxy_identifier + '.service'] if devture_container_socket_proxy_enabled else [])

  5340.   }}

  5341. 

  5342. ########################################################################

  5343. #                                                                      #

  5344. # /com.devture.ansible.role.traefik                                    #

  5345. #                                                                      #

  5346. ########################################################################

  5347. 

  5348. 

  5349. ########################################################################

  5350. #                                                                      #

  5351. # com.devture.ansible.role.traefik_certs_dumper                        #

  5352. #                                                                      #

  5353. ########################################################################

  5354. 

  5355. devture_traefik_certs_dumper_enabled: "{{ (matrix_playbook_reverse_proxy_type == 'playbook-managed-traefik' and devture_traefik_config_entrypoint_web_secure_enabled and devture_traefik_config_certificatesResolvers_acme_enabled) or matrix_playbook_reverse_proxy_type == 'other-traefik-container' }}"

  5356. 

  5357. devture_traefik_certs_dumper_identifier: matrix-traefik-certs-dumper

  5358. 

  5359. devture_traefik_certs_dumper_base_path: "{{ matrix_base_data_path }}/traefik-certs-dumper"

  5360. 

  5361. devture_traefik_certs_dumper_uid: "{{ matrix_user_uid }}"

  5362. devture_traefik_certs_dumper_gid: "{{ matrix_user_gid }}"

  5363. 

  5364. devture_traefik_certs_dumper_ssl_dir_path: "{{ devture_traefik_ssl_dir_path if devture_traefik_enabled else '' }}"

  5365. 

  5366. ########################################################################

  5367. #                                                                      #

  5368. # /com.devture.ansible.role.traefik_certs_dumper                       #

  5369. #                                                                      #

  5370. ########################################################################