overmind
/
matrix-docker-ansible-deploy
zrcadlo https://github.com/spantaleev/matrix-docker-ansible-deploy
1
0
Rozštěpit 0
Zdrojový kód Úkoly 0 Vydání 0 Wiki Aktivita
Matrix Docker Ansible eploy
Nelze vybrat více než 25 témat Téma musí začínat písmenem nebo číslem, může obsahovat pomlčky („-“) a může být dlouhé až 35 znaků.
5671 Revize
13 Větve
36 MiB
 
 
Strom: 28d2eb593c
Větve Značky
${ item.name }
Vytvořit větev ${ searchTerm }
z „28d2eb593c“
${ noResults }
matrix-docker-ansible-deploy/group_vars/matrix_servers

3588 řádky
178 KiB
Surový Blame Historie 

  1. ---

  2. 

  3. # This variables file wires together the various components (roles) used by the playbook.

  4. #

  5. # Roles used by playbook are pretty minimal and kept independent of one another as much as possible.

  6. # To deliver a turnkey fully-featured Matrix server, this playbook needs

  7. # to connect them all together. It does so by overriding role variables.

  8. #

  9. # You can also override ANY variable (seen here or in any given role),

  10. # by re-defining it in your own configuration file (`inventory/host_vars/matrix.<your-domain>`).

  11. 

  12. ########################################################################

  13. #                                                                      #

  14. # Playbook                                                             #

  15. #                                                                      #

  16. ########################################################################

  17. 

  18. # Controls whether to install Docker or not

  19. # Also see `devture_docker_sdk_for_python_installation_enabled`.

  20. matrix_playbook_docker_installation_enabled: true

  21. 

  22. # Controls whether to run the Traefik role or not

  23. # See the `com.devture.ansible.role.traefik` section below for role configuration.

  24. #

  25. # There's a difference between `devture_traefik_enabled` and `matrix_playbook_traefik_role_enabled`.

  26. # `devture_traefik_enabled` controls what the Traefik role would do - when not enabled, it will run uninstall tasks, etc.

  27. # `matrix_playbook_traefik_role_enabled` controls if the Traefik role would even run at all.

  28. #

  29. # Sometimes, you're installing Traefik via a different (related playbook) which uses the same role.

  30. # In such cases, you'd like to disable the role in this playbook from bothering with Traefik at all (`matrix_playbook_traefik_role_enabled: false`).

  31. # If you used `devture_traefik_enabled: false` + `matrix_playbook_traefik_role_enabled: true` instead, you'd see the Treafik role here

  32. # try to delete Traefik data (`/devture-traefik`) installed by the other playbook.

  33. matrix_playbook_traefik_role_enabled: true

  34. 

  35. # Controls whether to attach Traefik labels to services.

  36. # This is separate from `devture_traefik_enabled` and `matrix_playbook_traefik_role_enabled`,

  37. # because you may wish to disable Traefik installation by the playbook, yet still use Traefik

  38. # installed in another way.

  39. matrix_playbook_traefik_labels_enabled: "{{ matrix_playbook_reverse_proxy_type in ['playbook-installed-traefik', 'other-traefik-container'] }}"

  40. 

  41. matrix_playbook_traefik_certs_dumper_role_enabled: "{{ matrix_playbook_reverse_proxy_type in ['playbook-installed-traefik', 'other-traefik-container'] }}"

  42. 

  43. # Controls the additional network that reverse-proxyable services will be connected to.

  44. matrix_playbook_reverse_proxyable_services_additional_network: "{{ devture_traefik_container_network if devture_traefik_enabled else '' }}"

  45. 

  46. matrix_playbook_ssl_retrieval_method: "{{ 'lets-encrypt' if matrix_playbook_traefik_certs_dumper_role_enabled else matrix_ssl_retrieval_method }}"

  47. 

  48. ########################################################################

  49. #                                                                      #

  50. # /Playbook                                                            #

  51. #                                                                      #

  52. ########################################################################

  53. 

  54. ########################################################################

  55. #                                                                      #

  56. # base                                                                 #

  57. #                                                                      #

  58. ########################################################################

  59. 

  60. matrix_homeserver_container_extra_arguments_auto: |

  61.   {{

  62.     (['--mount type=bind,src=' + matrix_appservice_discord_config_path + '/registration.yaml,dst=/matrix-appservice-discord-registration.yaml,ro'] if matrix_appservice_discord_enabled else [])

  63.     +

  64.     (['--mount type=bind,src=' + matrix_appservice_irc_config_path + '/registration.yaml,dst=/matrix-appservice-irc-registration.yaml,ro'] if matrix_appservice_irc_enabled else [])

  65.     +

  66.     (['--mount type=bind,src=' + matrix_appservice_kakaotalk_config_path + '/registration.yaml,dst=/matrix-appservice-kakaotalk-registration.yaml,ro'] if matrix_appservice_kakaotalk_enabled else [])

  67.     +

  68.     (['--mount type=bind,src=' + matrix_appservice_slack_config_path + '/slack-registration.yaml,dst=/matrix-appservice-slack-registration.yaml,ro'] if matrix_appservice_slack_enabled else [])

  69.     +

  70.     (['--mount type=bind,src=' + matrix_appservice_webhooks_config_path + '/webhooks-registration.yaml,dst=/matrix-appservice-webhooks-registration.yaml,ro'] if matrix_appservice_webhooks_enabled else [])

  71.     +

  72.     (['--mount type=bind,src=' + matrix_beeper_linkedin_config_path + '/registration.yaml,dst=/matrix-beeper-linkedin-registration.yaml,ro'] if matrix_beeper_linkedin_enabled else [])

  73.     +

  74.     (['--mount type=bind,src=' + matrix_go_skype_bridge_config_path + '/registration.yaml,dst=/matrix-go-skype-bridge-registration.yaml,ro'] if matrix_go_skype_bridge_enabled else [])

  75.     +

  76.     (['--mount type=bind,src=' + matrix_heisenbridge_base_path + '/registration.yaml,dst=/heisenbridge-registration.yaml,ro'] if matrix_heisenbridge_enabled else [])

  77.     +

  78.     (['--mount type=bind,src=' + matrix_hookshot_base_path + '/registration.yml,dst=/hookshot-registration.yml,ro'] if matrix_hookshot_enabled else [])

  79.     +

  80.     (['--mount type=bind,src=' + matrix_mautrix_discord_config_path + '/registration.yaml,dst=/matrix-mautrix-discord-registration.yaml,ro'] if matrix_mautrix_discord_enabled else [])

  81.     +

  82.     (['--mount type=bind,src=' + matrix_mautrix_slack_config_path + '/registration.yaml,dst=/matrix-mautrix-slack-registration.yaml,ro'] if matrix_mautrix_slack_enabled else [])

  83.     +

  84.     (['--mount type=bind,src=' + matrix_mautrix_facebook_config_path + '/registration.yaml,dst=/matrix-mautrix-facebook-registration.yaml,ro'] if matrix_mautrix_facebook_enabled else [])

  85.     +

  86.     (['--mount type=bind,src=' + matrix_mautrix_googlechat_config_path + '/registration.yaml,dst=/matrix-mautrix-googlechat-registration.yaml,ro'] if matrix_mautrix_googlechat_enabled else [])

  87.     +

  88.     (['--mount type=bind,src=' + matrix_mautrix_hangouts_config_path + '/registration.yaml,dst=/matrix-mautrix-hangouts-registration.yaml,ro'] if matrix_mautrix_hangouts_enabled else [])

  89.     +

  90.     (['--mount type=bind,src=' + matrix_mautrix_instagram_config_path + '/registration.yaml,dst=/matrix-mautrix-instagram-registration.yaml,ro'] if matrix_mautrix_instagram_enabled else [])

  91.     +

  92.     (['--mount type=bind,src=' + matrix_mautrix_signal_config_path + '/registration.yaml,dst=/matrix-mautrix-signal-registration.yaml,ro'] if matrix_mautrix_signal_enabled else [])

  93.     +

  94.     (['--mount type=bind,src=' + matrix_mautrix_telegram_config_path + '/registration.yaml,dst=/matrix-mautrix-telegram-registration.yaml,ro'] if matrix_mautrix_telegram_enabled else [])

  95.     +

  96.     (['--mount type=bind,src=' + matrix_mautrix_twitter_config_path + '/registration.yaml,dst=/matrix-mautrix-twitter-registration.yaml,ro'] if matrix_mautrix_twitter_enabled else [])

  97.     +

  98.     (['--mount type=bind,src=' + matrix_mautrix_whatsapp_config_path + '/registration.yaml,dst=/matrix-mautrix-whatsapp-registration.yaml,ro'] if matrix_mautrix_whatsapp_enabled else [])

  99.     +

  100.     (['--mount type=bind,src=' + matrix_mx_puppet_discord_config_path + '/registration.yaml,dst=/matrix-mx-puppet-discord-registration.yaml,ro'] if matrix_mx_puppet_discord_enabled else [])

  101.     +

  102.     (['--mount type=bind,src=' + matrix_mx_puppet_groupme_config_path + '/registration.yaml,dst=/matrix-mx-puppet-groupme-registration.yaml,ro'] if matrix_mx_puppet_groupme_enabled else [])

  103.     +

  104.     (['--mount type=bind,src=' + matrix_mx_puppet_instagram_config_path + '/registration.yaml,dst=/matrix-mx-puppet-instagram-registration.yaml,ro'] if matrix_mx_puppet_instagram_enabled else [])

  105.     +

  106.     (['--mount type=bind,src=' + matrix_mx_puppet_slack_config_path + '/registration.yaml,dst=/matrix-mx-puppet-slack-registration.yaml,ro'] if matrix_mx_puppet_slack_enabled else [])

  107.     +

  108.     (['--mount type=bind,src=' + matrix_mx_puppet_steam_config_path + '/registration.yaml,dst=/matrix-mx-puppet-steam-registration.yaml,ro'] if matrix_mx_puppet_steam_enabled else [])

  109.     +

  110.     (['--mount type=bind,src=' + matrix_mx_puppet_twitter_config_path + '/registration.yaml,dst=/matrix-mx-puppet-twitter-registration.yaml,ro'] if matrix_mx_puppet_twitter_enabled else [])

  111.     +

  112.     (['--mount type=bind,src=' + matrix_sms_bridge_config_path + '/registration.yaml,dst=/matrix-sms-bridge-registration.yaml,ro'] if matrix_sms_bridge_enabled else [])

  113.     +

  114.     (['--mount type=bind,src=' + matrix_cactus_comments_app_service_config_file + ',dst=/matrix-cactus-comments.yaml,ro'] if matrix_cactus_comments_enabled else [])

  115.   }}

  116. 

  117. matrix_homeserver_app_service_config_files_auto: |

  118.   {{

  119.     (['/matrix-appservice-discord-registration.yaml'] if matrix_appservice_discord_enabled else [])

  120.     +

  121.     (['/matrix-appservice-irc-registration.yaml'] if matrix_appservice_irc_enabled else [])

  122.     +

  123.     (['/matrix-appservice-kakaotalk-registration.yaml'] if matrix_appservice_kakaotalk_enabled else [])

  124.     +

  125.     (['/matrix-appservice-slack-registration.yaml'] if matrix_appservice_slack_enabled else [])

  126.     +

  127.     (['/matrix-appservice-webhooks-registration.yaml'] if matrix_appservice_webhooks_enabled else [])

  128.     +

  129.     (['/matrix-beeper-linkedin-registration.yaml'] if matrix_beeper_linkedin_enabled else [])

  130.     +

  131.     (['/matrix-go-skype-bridge-registration.yaml'] if matrix_go_skype_bridge_enabled else [])

  132.     +

  133.     (['/heisenbridge-registration.yaml'] if matrix_heisenbridge_enabled else [])

  134.     +

  135.     (['/hookshot-registration.yml'] if matrix_hookshot_enabled else [])

  136.     +

  137.     (['/matrix-mautrix-discord-registration.yaml'] if matrix_mautrix_discord_enabled else [])

  138.     +

  139.     (['/matrix-mautrix-slack-registration.yaml'] if matrix_mautrix_slack_enabled else [])

  140.     +

  141.     (['/matrix-mautrix-facebook-registration.yaml'] if matrix_mautrix_facebook_enabled else [])

  142.     +

  143.     (['/matrix-mautrix-googlechat-registration.yaml'] if matrix_mautrix_googlechat_enabled else [])

  144.     +

  145.     (['/matrix-mautrix-hangouts-registration.yaml'] if matrix_mautrix_hangouts_enabled else [])

  146.     +

  147.     (['/matrix-mautrix-instagram-registration.yaml'] if matrix_mautrix_instagram_enabled else [])

  148.     +

  149.     (['/matrix-mautrix-signal-registration.yaml'] if matrix_mautrix_signal_enabled else [])

  150.     +

  151.     (['/matrix-mautrix-telegram-registration.yaml'] if matrix_mautrix_telegram_enabled else [])

  152.     +

  153.     (['/matrix-mautrix-twitter-registration.yaml'] if matrix_mautrix_twitter_enabled else [])

  154.     +

  155.     (['/matrix-mautrix-whatsapp-registration.yaml'] if matrix_mautrix_whatsapp_enabled else [])

  156.     +

  157.     (['/matrix-mx-puppet-discord-registration.yaml'] if matrix_mx_puppet_discord_enabled else [])

  158.     +

  159.     (['/matrix-mx-puppet-groupme-registration.yaml'] if matrix_mx_puppet_groupme_enabled else [])

  160.     +

  161.     (['/matrix-mx-puppet-instagram-registration.yaml'] if matrix_mx_puppet_instagram_enabled else [])

  162.     +

  163.     (['/matrix-mx-puppet-slack-registration.yaml'] if matrix_mx_puppet_slack_enabled else [])

  164.     +

  165.     (['/matrix-mx-puppet-steam-registration.yaml'] if matrix_mx_puppet_steam_enabled else [])

  166.     +

  167.     (['/matrix-mx-puppet-twitter-registration.yaml'] if matrix_mx_puppet_twitter_enabled else [])

  168.     +

  169.     (['/matrix-sms-bridge-registration.yaml'] if matrix_sms_bridge_enabled else [])

  170.     +

  171.     (['/matrix-cactus-comments.yaml'] if matrix_cactus_comments_enabled else [])

  172.   }}

  173. 

  174. ########################################################################

  175. #                                                                      #

  176. # /base                                                                #

  177. #                                                                      #

  178. ########################################################################

  179. 

  180. 

  181. ########################################################################

  182. #                                                                      #

  183. # com.devture.ansible.role.systemd_service_manager                     #

  184. #                                                                      #

  185. ########################################################################

  186. 

  187. # This list is not exhaustive and final.

  188. # Synapse workers are still injected into the list at runtime.

  189. # Additional JVB workers (playbooks/jitsi_jvb.yml -- roles/custom/matrix-jitsi/tasks/init_additional_jvb.yml) override this variable at runtime as well.

  190. #

  191. # Priority levels are like this:

  192. # - core services (the homeserver) get a level of ~1000

  193. # - services that core services depend on (database, Redis, ntfy, etc.) get a lower level - between 500 and 1000

  194. # - reverse-proxying services get level 3000

  195. # - Matrix utility services (bridges, bots) get a level of 2000/2200, so that:

  196. #   - they can start before the reverse-proxy

  197. #   - so that, when the reverse-proxy is up (Matrix is up), all bots and bridges can be interacted with

  198. # - monitoring services (Prometheus, Grafana, ..) get a level of 4000 - they can start later than all-of-Matrix

  199. # - services which aren't time-sensitive (various crons and timers) get a level of 5000 - they can start later than all-of-Matrix

  200. devture_systemd_service_manager_services_list_auto: |

  201.   {{

  202.     ([{'name': 'matrix-backup-borg.timer', 'priority': 5000, 'groups': ['matrix', 'backup', 'borg']}] if matrix_backup_borg_enabled else [])

  203.     +

  204.     ([{'name': 'matrix-bot-buscarron.service', 'priority': 2200, 'groups': ['matrix', 'bots', 'buscarron']}] if matrix_bot_buscarron_enabled else [])

  205.     +

  206.     ([{'name': 'matrix-bot-go-neb.service', 'priority': 2200, 'groups': ['matrix', 'bots', 'go-neb']}] if matrix_bot_go_neb_enabled else [])

  207.     +

  208.     ([{'name': 'matrix-bot-honoroit.service', 'priority': 2200, 'groups': ['matrix', 'bots', 'honoroit']}] if matrix_bot_honoroit_enabled else [])

  209.     +

  210.     ([{'name': 'matrix-bot-matrix-registration-bot.service', 'priority': 2200, 'groups': ['matrix', 'bots', 'registration-bot']}] if matrix_bot_matrix_registration_bot_enabled else [])

  211.     +

  212.     ([{'name': 'matrix-bot-matrix-reminder-bot.service', 'priority': 2200, 'groups': ['matrix', 'bots', 'reminder-bot']}] if matrix_bot_matrix_reminder_bot_enabled else [])

  213.     +

  214.     ([{'name': 'matrix-bot-maubot.service', 'priority': 2200, 'groups': ['matrix', 'bots', 'maubot']}] if matrix_bot_maubot_enabled else [])

  215.     +

  216.     ([{'name': 'matrix-bot-mjolnir.service', 'priority': 2200, 'groups': ['matrix', 'bots', 'mjolnir']}] if matrix_bot_mjolnir_enabled else [])

  217.     +

  218.     ([{'name': 'matrix-bot-draupnir.service', 'priority': 2200, 'groups': ['matrix', 'bots', 'draupnir']}] if matrix_bot_draupnir_enabled else [])

  219.     +

  220.     ([{'name': 'matrix-bot-postmoogle.service', 'priority': 2200, 'groups': ['matrix', 'bots', 'postmoogle']}] if matrix_bot_postmoogle_enabled else [])

  221.     +

  222.     ([{'name': 'matrix-bot-chatgpt.service', 'priority': 2200, 'groups': ['matrix', 'bots', 'chatgpt']}] if matrix_bot_chatgpt_enabled else [])

  223.     +

  224.     ([{'name': 'matrix-appservice-discord.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'appservice-discord']}] if matrix_appservice_discord_enabled else [])

  225.     +

  226.     ([{'name': 'matrix-appservice-irc.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'appservice-irc']}] if matrix_appservice_irc_enabled else [])

  227.     +

  228.     ([{'name': 'matrix-appservice-kakaotalk.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'appservice-kakaotalk']}] if matrix_appservice_kakaotalk_enabled else [])

  229.     +

  230.     ([{'name': 'matrix-appservice-kakaotalk-node.service', 'priority': 1900, 'groups': ['matrix', 'bridges', 'appservice-kakaotalk', 'appservice-kakaotalk-node']}] if matrix_appservice_kakaotalk_enabled else [])

  231.     +

  232.     ([{'name': 'matrix-appservice-slack.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'appservice-slack']}] if matrix_appservice_slack_enabled else [])

  233.     +

  234.     ([{'name': 'matrix-appservice-webhooks.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'appservice-webhooks']}] if matrix_appservice_webhooks_enabled else [])

  235.     +

  236.     ([{'name': 'matrix-beeper-linkedin.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'beeper-linkedin']}] if matrix_beeper_linkedin_enabled else [])

  237.     +

  238.     ([{'name': 'matrix-go-skype-bridge.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'go-skype']}] if matrix_go_skype_bridge_enabled else [])

  239.     +

  240.     ([{'name': 'matrix-heisenbridge.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'heisenbridge']}] if matrix_heisenbridge_enabled else [])

  241.     +

  242.     ([{'name': 'matrix-hookshot.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'hookshot']}] if matrix_hookshot_enabled else [])

  243.     +

  244.     ([{'name': 'matrix-mautrix-discord.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mautrix-discord']}] if matrix_mautrix_discord_enabled else [])

  245.     +

  246.     ([{'name': 'matrix-mautrix-slack.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mautrix-slack']}] if matrix_mautrix_slack_enabled else [])

  247.     +

  248.     ([{'name': 'matrix-mautrix-facebook.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mautrix-facebook']}] if matrix_mautrix_facebook_enabled else [])

  249.     +

  250.     ([{'name': 'matrix-mautrix-googlechat.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mautrix-googlechat']}] if matrix_mautrix_googlechat_enabled else [])

  251.     +

  252.     ([{'name': 'matrix-mautrix-hangouts.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mautrix-hangouts']}] if matrix_mautrix_hangouts_enabled else [])

  253.     +

  254.     ([{'name': 'matrix-mautrix-instagram.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mautrix-instagram']}] if matrix_mautrix_instagram_enabled else [])

  255.     +

  256.     ([{'name': 'matrix-mautrix-signal.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mautrix-signal']}] if matrix_mautrix_signal_enabled else [])

  257.     +

  258.     ([{'name': 'matrix-mautrix-signal-daemon.service', 'priority': 1900, 'groups': ['matrix', 'bridges', 'mautrix-signal', 'mautrix-signal-daemon']}] if matrix_mautrix_signal_enabled else [])

  259.     +

  260.     ([{'name': 'matrix-mautrix-telegram.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mautrix-telegram']}] if matrix_mautrix_telegram_enabled else [])

  261.     +

  262.     ([{'name': 'matrix-mautrix-twitter.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mautrix-twitter']}] if matrix_mautrix_twitter_enabled else [])

  263.     +

  264.     ([{'name': 'matrix-mautrix-whatsapp.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mautrix-whatsapp']}] if matrix_mautrix_whatsapp_enabled else [])

  265.     +

  266.     ([{'name': 'matrix-mx-puppet-discord.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mx-puppet-discord']}] if matrix_mx_puppet_discord_enabled else [])

  267.     +

  268.     ([{'name': 'matrix-mx-puppet-groupme.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mx-puppet-groupme']}] if matrix_mx_puppet_groupme_enabled else [])

  269.     +

  270.     ([{'name': 'matrix-mx-puppet-instagram.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mx-puppet-instagram']}] if matrix_mx_puppet_instagram_enabled else [])

  271.     +

  272.     ([{'name': 'matrix-mx-puppet-slack.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mx-puppet-slack']}] if matrix_mx_puppet_slack_enabled else [])

  273.     +

  274.     ([{'name': 'matrix-mx-puppet-steam.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mx-puppet-steam']}] if matrix_mx_puppet_steam_enabled else [])

  275.     +

  276.     ([{'name': 'matrix-mx-puppet-twitter.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mx-puppet-twitter']}] if matrix_mx_puppet_twitter_enabled else [])

  277.     +

  278.     ([{'name': 'matrix-sms-bridge.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'sms']}] if matrix_sms_bridge_enabled else [])

  279.     +

  280.     ([{'name': 'matrix-cactus-comments.service', 'priority': 2000, 'groups': ['matrix', 'cactus-comments']}] if matrix_cactus_comments_enabled else [])

  281.     +

  282.     ([{'name': 'matrix-client-cinny.service', 'priority': 2000, 'groups': ['matrix', 'clients', 'cinny']}] if matrix_client_cinny_enabled else [])

  283.     +

  284.     ([{'name': 'matrix-client-element.service', 'priority': 2000, 'groups': ['matrix', 'clients', 'element']}] if matrix_client_element_enabled else [])

  285.     +

  286.     ([{'name': 'matrix-client-hydrogen.service', 'priority': 2000, 'groups': ['matrix', 'clients', 'hydrogen']}] if matrix_client_hydrogen_enabled else [])

  287.     +

  288.     ([{'name': ('matrix-' + matrix_homeserver_implementation + '.service'), 'priority': 1000, 'groups': ['matrix', 'homeservers', matrix_homeserver_implementation]}] if matrix_homeserver_enabled else [])

  289.     +

  290.     ([{'name': 'matrix-corporal.service', 'priority': 1500, 'groups': ['matrix', 'corporal']}] if matrix_corporal_enabled else [])

  291.     +

  292.     ([{'name': 'matrix-coturn.service', 'priority': 4000, 'groups': ['matrix', 'coturn']}] if matrix_coturn_enabled else [])

  293.     +

  294.     ([{'name': 'matrix-coturn-reload.timer', 'priority': 5000, 'groups': ['matrix', 'coturn']}] if (matrix_coturn_enabled and matrix_coturn_tls_enabled) else [])

  295.     +

  296.     ([{'name': 'matrix-dimension.service', 'priority': 2500, 'groups': ['matrix', 'integration-managers', 'dimension']}] if matrix_dimension_enabled else [])

  297.     +

  298.     ([{'name': 'matrix-dynamic-dns.service', 'priority': 5000, 'groups': ['matrix', 'dynamic-dns']}] if matrix_dynamic_dns_enabled else [])

  299.     +

  300.     ([{'name': 'matrix-email2matrix.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'email2matrix']}] if matrix_email2matrix_enabled else [])

  301.     +

  302.     ([{'name': 'matrix-etherpad.service', 'priority': 4000, 'groups': ['matrix', 'etherpad']}] if matrix_etherpad_enabled else [])

  303.     +

  304.     ([{'name': 'matrix-grafana.service', 'priority': 4000, 'groups': ['matrix', 'monitoring', 'grafana']}] if matrix_grafana_enabled else [])

  305.     +

  306.     ([{'name': 'matrix-jitsi-web.service', 'priority': 4200, 'groups': ['matrix', 'jitsi', 'jitsi-web']}] if matrix_jitsi_enabled else [])

  307.     +

  308.     ([{'name': 'matrix-jitsi-prosody.service', 'priority': 4000, 'groups': ['matrix', 'jitsi', 'jitsi-prosody']}] if matrix_jitsi_enabled else [])

  309.     +

  310.     ([{'name': 'matrix-jitsi-jicofo.service', 'priority': 4100, 'groups': ['matrix', 'jitsi', 'jitsi-jicofo']}] if matrix_jitsi_enabled else [])

  311.     +

  312.     ([{'name': 'matrix-jitsi-jvb.service', 'priority': 4100, 'groups': ['matrix', 'jitsi', 'jitsi-jvb']}] if matrix_jitsi_enabled else [])

  313.     +

  314.     ([{'name': 'matrix-ldap-registration-proxy.service', 'priority': 2000, 'groups': ['matrix', 'ldap-registration-proxy']}] if matrix_ldap_registration_proxy_enabled else [])

  315.     +

  316.     ([{'name': 'matrix-ma1sd.service', 'priority': 2000, 'groups': ['matrix', 'ma1sd']}] if matrix_ma1sd_enabled else [])

  317.     +

  318.     ([{'name': 'matrix-mailer.service', 'priority': 2000, 'groups': ['matrix', 'mailer']}] if matrix_mailer_enabled else [])

  319.     +

  320.     ([{'name': 'matrix-nginx-proxy.service', 'priority': 3000, 'groups': ['matrix', 'nginx', 'reverse-proxies']}] if matrix_nginx_proxy_enabled else [])

  321.     +

  322.     (matrix_ssl_renewal_systemd_units_list | selectattr('applicable') | selectattr('enableable') | list )

  323.     +

  324.     ([{'name': 'matrix-ntfy.service', 'priority': 800, 'groups': ['matrix', 'ntfy']}] if matrix_ntfy_enabled else [])

  325.     +

  326.     ([{'name': (devture_postgres_identifier + '.service'), 'priority': 500, 'groups': ['matrix', 'postgres']}] if devture_postgres_enabled else [])

  327.     +

  328.     ([{'name': (devture_postgres_backup_identifier + '.service'), 'priority': 5000, 'groups': ['matrix', 'backup', 'postgres-backup']}] if devture_postgres_backup_enabled else [])

  329.     +

  330.     ([{'name': 'matrix-prometheus.service', 'priority': 4000, 'groups': ['matrix', 'monitoring', 'prometheus', 'prometheus-core']}] if matrix_prometheus_enabled else [])

  331.     +

  332.     ([{'name': (prometheus_node_exporter_identifier + '.service'), 'priority': 3900, 'groups': ['matrix', 'monitoring', 'prometheus', 'prometheus-exporters']}] if prometheus_node_exporter_enabled else [])

  333.     +

  334.     ([{'name': (prometheus_postgres_exporter_identifier + '.service'), 'priority': 3900, 'groups': ['matrix', 'monitoring', 'prometheus', 'prometheus-exporters']}] if prometheus_postgres_exporter_enabled else [])

  335.     +

  336.     ([{'name': 'matrix-prometheus-nginxlog-exporter.service', 'priority': 3900, 'groups': ['matrix', 'monitoring', 'prometheus', 'prometheus-exporters']}] if matrix_prometheus_nginxlog_exporter_enabled else [])

  337.     +

  338.     ([{'name': 'matrix-redis', 'priority': 750, 'groups': ['matrix', 'redis']}] if matrix_redis_enabled else [])

  339.     +

  340.     ([{'name': 'matrix-registration.service', 'priority': 4000, 'groups': ['matrix', 'registration']}] if matrix_registration_enabled else [])

  341.     +

  342.     ([{'name': 'matrix-sygnal.service', 'priority': 800, 'groups': ['matrix', 'sygnal']}] if matrix_sygnal_enabled else [])

  343.     +

  344.     ([{'name': 'matrix-goofys.service', 'priority': 800, 'groups': ['matrix', 'goofys']}] if matrix_s3_media_store_enabled else [])

  345.     +

  346.     ([{'name': 'matrix-synapse-s3-storage-provider-migrate.timer', 'priority': 5000, 'groups': ['matrix']}] if matrix_synapse_ext_synapse_s3_storage_provider_enabled else [])

  347.     +

  348.     ([{'name': 'matrix-synapse-admin.service', 'priority': 4000, 'groups': ['matrix', 'synapse-admin']}] if matrix_synapse_admin_enabled else [])

  349.     +

  350.     ([{'name': 'matrix-synapse-reverse-proxy-companion.service', 'priority': 1500, 'groups': ['matrix', 'homeservers', 'synapse', 'reverse-proxies']}] if matrix_synapse_reverse_proxy_companion_enabled else [])

  351.     +

  352.     ([{'name': 'matrix-user-verification-service.service', 'priority': 800, 'groups': ['matrix', 'matrix-user-verification-service']}] if matrix_user_verification_service_enabled else [])

  353.     +

  354.     ([{'name': 'devture-traefik.service', 'priority': 3000, 'groups': ['matrix', 'traefik', 'reverse-proxies']}] if matrix_playbook_traefik_role_enabled else [])

  355.     +

  356.     ([{'name': (devture_traefik_certs_dumper_identifier + '.service'), 'priority': 3500, 'groups': ['matrix', 'traefik-certs-dumper']}] if matrix_playbook_traefik_certs_dumper_role_enabled else [])

  357.   }}

  358. 

  359. ########################################################################

  360. #                                                                      #

  361. # /com.devture.ansible.role.systemd_service_manager                    #

  362. #                                                                      #

  363. ########################################################################

  364. 

  365. 

  366. ########################################################################

  367. #                                                                      #

  368. # com.devture.ansible.role.timesync                                    #

  369. #                                                                      #

  370. ########################################################################

  371. 

  372. # To completely disable installing systemd-timesyncd/ntpd, use `devture_timesync_installation_enabled: false`.

  373. 

  374. ########################################################################

  375. #                                                                      #

  376. # /com.devture.ansible.role.timesync                                   #

  377. #                                                                      #

  378. ########################################################################

  379. 

  380. 

  381. 

  382. ######################################################################

  383. #

  384. # com.devture.ansible.role.playbook_state_preserver

  385. #

  386. ######################################################################

  387. 

  388. # To completely disable this feature, use `devture_playbook_state_preserver_enabled: false`.

  389. 

  390. devture_playbook_state_preserver_uid: "{{ matrix_user_uid }}"

  391. devture_playbook_state_preserver_gid: "{{ matrix_user_gid }}"

  392. 

  393. devture_playbook_state_preserver_vars_preservation_dst: "{{ matrix_base_data_path }}/vars.yml"

  394. 

  395. devture_playbook_state_preserver_commit_hash_preservation_dst: "{{ matrix_base_data_path }}/git_hash.yml"

  396. 

  397. ######################################################################

  398. #

  399. # /com.devture.ansible.role.playbook_state_preserver

  400. #

  401. ######################################################################

  402. 

  403. 

  404. 

  405. ######################################################################

  406. #

  407. # matrix-base

  408. #

  409. ######################################################################

  410. 

  411. matrix_identity_server_url: "{{ ('https://' + matrix_server_fqn_matrix) if matrix_ma1sd_enabled else None }}"

  412. 

  413. matrix_homeserver_container_url: |-

  414.   {{

  415.     'http://matrix-nginx-proxy:12080' if matrix_nginx_proxy_enabled else {

  416.       'synapse': ('http://matrix-synapse-reverse-proxy-companion:8008' if matrix_synapse_reverse_proxy_companion_enabled else 'http://matrix-synapse:'+ matrix_synapse_container_client_api_port|string),

  417.       'dendrite': ('http://matrix-dendrite:' + matrix_dendrite_http_bind_port|string),

  418.       'conduit': ('http://matrix-conduit:' + matrix_conduit_port_number|string),

  419.     }[matrix_homeserver_implementation]

  420.   }}

  421. 

  422. matrix_homeserver_container_federation_url: |-

  423.   {{

  424.     'http://matrix-nginx-proxy:12088' if matrix_nginx_proxy_enabled else {

  425.       'synapse': ('http://matrix-synapse-reverse-proxy-companion:8048' if matrix_synapse_reverse_proxy_companion_enabled else 'http://matrix-synapse:'+ matrix_synapse_container_federation_api_plain_port|string),

  426.       'dendrite': ('http://matrix-dendrite:' + matrix_dendrite_http_bind_port|string),

  427.       'conduit': ('http://matrix-conduit:' + matrix_conduit_port_number|string),

  428.     }[matrix_homeserver_implementation]

  429.   }}

  430. 

  431. matrix_integration_manager_rest_url: "{{ matrix_dimension_integrations_rest_url if matrix_dimension_enabled else None }}"

  432. matrix_integration_manager_ui_url: "{{ matrix_dimension_integrations_ui_url if matrix_dimension_enabled else None }}"

  433. 

  434. ######################################################################

  435. #

  436. # /matrix-base

  437. #

  438. ######################################################################

  439. 

  440. 

  441. ######################################################################

  442. #

  443. # matrix-bridge-appservice-discord

  444. #

  445. ######################################################################

  446. 

  447. # We don't enable bridges by default.

  448. matrix_appservice_discord_enabled: false

  449. 

  450. # Normally, matrix-nginx-proxy is enabled and nginx can reach matrix-appservice-discord over the container network.

  451. # If matrix-nginx-proxy is not enabled, or you otherwise have a need for it, you can expose

  452. # matrix-appservice-discord's client-server port to the local host.

  453. matrix_appservice_discord_container_http_host_bind_port: "{{ matrix_playbook_service_host_bind_interface_prefix + ':9005' if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  454. 

  455. # If the homeserver disables presence, it's likely better (less wasteful) to also disable presence on the bridge side.

  456. matrix_appservice_discord_bridge_disablePresence: "{{ not matrix_synapse_presence_enabled }}"

  457. 

  458. matrix_appservice_discord_systemd_required_services_list: |

  459.   {{

  460.     ['docker.service']

  461.     +

  462.     ['matrix-' + matrix_homeserver_implementation + '.service']

  463.     +

  464.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  465.     +

  466.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  467.   }}

  468. 

  469. matrix_appservice_discord_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'discord.as.token', rounds=655555) | to_uuid }}"

  470. 

  471. matrix_appservice_discord_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'discord.hs.token', rounds=655555) | to_uuid }}"

  472. 

  473. # We only make this use Postgres if our own Postgres server is enabled.

  474. # It's only then (for now) that we can automatically create the necessary database and user for this service.

  475. matrix_appservice_discord_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  476. matrix_appservice_discord_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  477. matrix_appservice_discord_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'as.discord.db', rounds=655555) | to_uuid }}"

  478. 

  479. ######################################################################

  480. #

  481. # /matrix-bridge-appservice-discord

  482. #

  483. ######################################################################

  484. 

  485. 

  486. ######################################################################

  487. #

  488. # matrix-appservice-webhooks

  489. #

  490. ######################################################################

  491. 

  492. # We don't enable bridges by default.

  493. matrix_appservice_webhooks_enabled: false

  494. 

  495. matrix_appservice_webhooks_container_image_self_build: "{{ matrix_architecture != 'amd64' }}"

  496. 

  497. # Normally, matrix-nginx-proxy is enabled and nginx can reach matrix-appservice-webhooks over the container network.

  498. # If matrix-nginx-proxy is not enabled, or you otherwise have a need for it, you can expose

  499. # matrix-appservice-webhooks' client-server port to the local host.

  500. matrix_appservice_webhooks_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ ':' ~ matrix_appservice_webhooks_matrix_port) if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  501. 

  502. matrix_appservice_webhooks_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'webhook.as.token', rounds=655555) | to_uuid }}"

  503. 

  504. matrix_appservice_webhooks_homeserver_url: "{{ matrix_homeserver_container_url }}"

  505. matrix_appservice_webhooks_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'webhook.hs.token', rounds=655555) | to_uuid }}"

  506. 

  507. matrix_appservice_webhooks_id_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'webhook.id.token', rounds=655555) | to_uuid }}"

  508. 

  509. matrix_appservice_webhooks_systemd_required_services_list: |

  510.   {{

  511.     ['docker.service']

  512.     +

  513.     ['matrix-' + matrix_homeserver_implementation + '.service']

  514.     +

  515.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  516.   }}

  517. 

  518. ######################################################################

  519. #

  520. # /matrix-appservice-webhooks

  521. #

  522. ######################################################################

  523. 

  524. 

  525. ######################################################################

  526. #

  527. # matrix-appservice-slack

  528. #

  529. ######################################################################

  530. 

  531. # We don't enable bridges by default.

  532. matrix_appservice_slack_enabled: false

  533. 

  534. matrix_appservice_slack_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"

  535. 

  536. # Normally, matrix-nginx-proxy is enabled and nginx can reach matrix-appservice-slack over the container network.

  537. # If matrix-nginx-proxy is not enabled, or you otherwise have a need for it, you can expose

  538. # matrix-appservice-slack's client-server port to the local host.

  539. matrix_appservice_slack_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix + ':' ~ matrix_appservice_slack_slack_port) if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  540. 

  541. matrix_appservice_slack_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'slack.as.token', rounds=655555) | to_uuid }}"

  542. 

  543. matrix_appservice_slack_homeserver_url: "{{ matrix_homeserver_container_url }}"

  544. matrix_appservice_slack_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'slack.hs.token', rounds=655555) | to_uuid }}"

  545. 

  546. matrix_appservice_slack_id_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'slack.id.token', rounds=655555) | to_uuid }}"

  547. 

  548. matrix_appservice_slack_systemd_required_services_list: |

  549.   {{

  550.     ['docker.service']

  551.     +

  552.     ['matrix-' + matrix_homeserver_implementation + '.service']

  553.     +

  554.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  555.   }}

  556. 

  557. # Postgres is the default, except if not using internal Postgres server

  558. matrix_appservice_slack_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'nedb' }}"

  559. matrix_appservice_slack_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  560. matrix_appservice_slack_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'as.slack.db', rounds=655555) | to_uuid }}"

  561. 

  562. ######################################################################

  563. #

  564. # /matrix-bridge-appservice-slack

  565. #

  566. ######################################################################

  567. 

  568. ######################################################################

  569. #

  570. # matrix-bridge-appservice-irc

  571. #

  572. ######################################################################

  573. 

  574. # We don't enable bridges by default.

  575. matrix_appservice_irc_enabled: false

  576. 

  577. matrix_appservice_irc_container_image_self_build: "{{ matrix_architecture != 'amd64' }}"

  578. 

  579. # Normally, matrix-nginx-proxy is enabled and nginx can reach matrix-appservice-irc over the container network.

  580. # If matrix-nginx-proxy is not enabled, or you otherwise have a need for it, you can expose

  581. # matrix-appservice-irc's client-server port to the local host.

  582. matrix_appservice_irc_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ ':9999') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  583. 

  584. # The IRC bridge docs say that if homeserver presence is disabled, it's better to also disable

  585. # IRC bridge presence, for performance reasons.

  586. matrix_appservice_irc_homeserver_enablePresence: "{{ matrix_synapse_presence_enabled }}"

  587. 

  588. matrix_appservice_irc_systemd_required_services_list: |

  589.   {{

  590.     ['docker.service']

  591.     +

  592.     ['matrix-' + matrix_homeserver_implementation + '.service']

  593.     +

  594.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  595.   }}

  596. 

  597. matrix_appservice_irc_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'irc.as.token', rounds=655555) | to_uuid }}"

  598. 

  599. matrix_appservice_irc_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'irc.hs.token', rounds=655555) | to_uuid }}"

  600. 

  601. matrix_appservice_irc_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'nedb' }}"

  602. matrix_appservice_irc_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  603. matrix_appservice_irc_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'as.irc.db', rounds=655555) | to_uuid }}"

  604. 

  605. 

  606. ######################################################################

  607. #

  608. # /matrix-bridge-appservice-irc

  609. #

  610. ######################################################################

  611. 

  612. ######################################################################

  613. #

  614. # matrix-bridge-appservice-kakaotalk

  615. #

  616. ######################################################################

  617. 

  618. # We don't enable bridges by default.

  619. matrix_appservice_kakaotalk_enabled: false

  620. 

  621. matrix_appservice_kakaotalk_systemd_required_services_list: |

  622.   {{

  623.     ['docker.service']

  624.     +

  625.     ['matrix-appservice-kakaotalk-node.service']

  626.     +

  627.     ['matrix-' + matrix_homeserver_implementation + '.service']

  628.     +

  629.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  630.     +

  631.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  632.   }}

  633. 

  634. matrix_appservice_kakaotalk_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'as.kakao.hs', rounds=655555) | to_uuid }}"

  635. 

  636. matrix_appservice_kakaotalk_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'as.kakao.hs', rounds=655555) | to_uuid }}"

  637. 

  638. matrix_appservice_kakaotalk_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  639. 

  640. matrix_appservice_kakaotalk_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  641. matrix_appservice_kakaotalk_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  642. matrix_appservice_kakaotalk_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'as.kakao.db', rounds=655555) | to_uuid }}"

  643. 

  644. ######################################################################

  645. #

  646. # /matrix-bridge-appservice-kakaotalk

  647. #

  648. ######################################################################

  649. 

  650. 

  651. ######################################################################

  652. #

  653. # matrix-bridge-beeper-linkedin

  654. #

  655. ######################################################################

  656. 

  657. # We don't enable bridges by default.

  658. matrix_beeper_linkedin_enabled: false

  659. 

  660. matrix_beeper_linkedin_container_image_self_build: "{{ matrix_architecture not in ['amd64'] }}"

  661. 

  662. matrix_beeper_linkedin_systemd_required_services_list: |

  663.   {{

  664.     ['docker.service']

  665.     +

  666.     ['matrix-' + matrix_homeserver_implementation + '.service']

  667.     +

  668.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  669.     +

  670.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  671.   }}

  672. 

  673. matrix_beeper_linkedin_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'linked.as.token', rounds=655555) | to_uuid }}"

  674. 

  675. matrix_beeper_linkedin_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'linked.hs.token', rounds=655555) | to_uuid }}"

  676. 

  677. matrix_beeper_linkedin_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  678. 

  679. matrix_beeper_linkedin_bridge_presence: "{{ matrix_synapse_presence_enabled if matrix_synapse_enabled else true }}"

  680. 

  681. matrix_beeper_linkedin_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  682. matrix_beeper_linkedin_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'maulinkedin.db', rounds=655555) | to_uuid }}"

  683. 

  684. ######################################################################

  685. #

  686. # /matrix-bridge-beeper-linkedin

  687. #

  688. ######################################################################

  689. 

  690. ######################################################################

  691. #

  692. # matrix-bridge-go-skype-bridge

  693. #

  694. ######################################################################

  695. 

  696. # We don't enable bridges by default.

  697. matrix_go_skype_bridge_enabled: false

  698. 

  699. matrix_go_skype_bridge_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"

  700. 

  701. matrix_go_skype_bridge_systemd_required_services_list: |

  702.   {{

  703.     ['docker.service']

  704.     +

  705.     ['matrix-' + matrix_homeserver_implementation + '.service']

  706.     +

  707.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  708.     +

  709.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  710.   }}

  711. 

  712. matrix_go_skype_bridge_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'skype.as.token', rounds=655555) | to_uuid }}"

  713. 

  714. matrix_go_skype_bridge_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'skype.hs.token', rounds=655555) | to_uuid }}"

  715. 

  716. matrix_go_skype_bridge_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  717. 

  718. # Postgres is the default, except if not using internal Postgres server

  719. matrix_go_skype_bridge_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  720. matrix_go_skype_bridge_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  721. matrix_go_skype_bridge_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'goskype.db', rounds=655555) | to_uuid }}"

  722. 

  723. ######################################################################

  724. #

  725. # /matrix-bridge-go-skype-bridge

  726. #

  727. ######################################################################

  728. 

  729. 

  730. ######################################################################

  731. #

  732. # matrix-bridge-mautrix-discord

  733. #

  734. ######################################################################

  735. 

  736. # We don't enable bridges by default.

  737. matrix_mautrix_discord_enabled: false

  738. 

  739. matrix_mautrix_discord_container_image_self_build: "{{ matrix_architecture not in ['arm64', 'amd64'] }}"

  740. 

  741. matrix_mautrix_discord_systemd_required_services_list: |

  742.   {{

  743.     ['docker.service']

  744.     +

  745.     ['matrix-' + matrix_homeserver_implementation + '.service']

  746.     +

  747.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  748.     +

  749.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  750.   }}

  751. 

  752. matrix_mautrix_discord_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'maudisc.as.tok', rounds=655555) | to_uuid }}"

  753. 

  754. matrix_mautrix_discord_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'maudisc.hs.tok', rounds=655555) | to_uuid }}"

  755. 

  756. matrix_mautrix_discord_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  757. 

  758. # Postgres is the default, except if not using internal Postgres server

  759. matrix_mautrix_discord_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  760. matrix_mautrix_discord_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  761. matrix_mautrix_discord_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'maudiscord.db', rounds=655555) | to_uuid }}"

  762. 

  763. ######################################################################

  764. #

  765. # /matrix-bridge-mautrix-discord

  766. #

  767. ######################################################################

  768. 

  769. 

  770. ######################################################################

  771. #

  772. # matrix-bridge-mautrix-slack

  773. #

  774. ######################################################################

  775. 

  776. # We don't enable bridges by default.

  777. matrix_mautrix_slack_enabled: false

  778. 

  779. matrix_mautrix_slack_container_image_self_build: "{{ matrix_architecture not in ['arm64', 'amd64'] }}"

  780. 

  781. matrix_mautrix_slack_systemd_required_services_list: |

  782.   {{

  783.     ['docker.service']

  784.     +

  785.     ['matrix-' + matrix_homeserver_implementation + '.service']

  786.     +

  787.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  788.     +

  789.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  790.   }}

  791. 

  792. matrix_mautrix_slack_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mauslack.as.tok', rounds=655555) | to_uuid }}"

  793. 

  794. matrix_mautrix_slack_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mauslack.hs.tok', rounds=655555) | to_uuid }}"

  795. 

  796. matrix_mautrix_slack_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  797. 

  798. # Postgres is the default, except if not using internal Postgres server

  799. matrix_mautrix_slack_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  800. matrix_mautrix_slack_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  801. matrix_mautrix_slack_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mauslack.db', rounds=655555) | to_uuid }}"

  802. 

  803. ######################################################################

  804. #

  805. # /matrix-bridge-mautrix-slack

  806. #

  807. ######################################################################

  808. 

  809. 

  810. ######################################################################

  811. #

  812. # matrix-bridge-mautrix-facebook

  813. #

  814. ######################################################################

  815. 

  816. # We don't enable bridges by default.

  817. matrix_mautrix_facebook_enabled: false

  818. 

  819. matrix_mautrix_facebook_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"

  820. 

  821. matrix_mautrix_facebook_systemd_required_services_list: |

  822.   {{

  823.     ['docker.service']

  824.     +

  825.     ['matrix-' + matrix_homeserver_implementation + '.service']

  826.     +

  827.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  828.     +

  829.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  830.   }}

  831. 

  832. matrix_mautrix_facebook_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'fb.as.token', rounds=655555) | to_uuid }}"

  833. 

  834. matrix_mautrix_facebook_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'fb.hs.token', rounds=655555) | to_uuid }}"

  835. 

  836. matrix_mautrix_facebook_public_endpoint: "/{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'facebook', rounds=655555) | to_uuid }}"

  837. 

  838. matrix_mautrix_facebook_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ ':9008') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  839. 

  840. matrix_mautrix_facebook_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  841. 

  842. matrix_mautrix_facebook_bridge_presence: "{{ matrix_synapse_presence_enabled if matrix_synapse_enabled else true }}"

  843. 

  844. # People using an external Prometheus server will need to toggle all of these to be able to consume metrics remotely:

  845. # - `matrix_mautrix_facebook_metrics_enabled`

  846. # - `matrix_mautrix_facebook_proxying_metrics_enabled`

  847. # - `matrix_nginx_proxy_proxy_matrix_metrics_enabled`

  848. matrix_mautrix_facebook_metrics_enabled: "{{ matrix_prometheus_enabled }}"

  849. 

  850. # We'd like to force-set people with external Postgres to SQLite, so the bridge role can complain

  851. # and point them to a migration path.

  852. matrix_mautrix_facebook_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  853. matrix_mautrix_facebook_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  854. matrix_mautrix_facebook_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mau.fb.db', rounds=655555) | to_uuid }}"

  855. 

  856. ######################################################################

  857. #

  858. # /matrix-bridge-mautrix-facebook

  859. #

  860. ######################################################################

  861. 

  862. 

  863. ######################################################################

  864. #

  865. # matrix-bridge-mautrix-googlechat

  866. #

  867. ######################################################################

  868. 

  869. # We don't enable bridges by default.

  870. matrix_mautrix_googlechat_enabled: false

  871. 

  872. matrix_mautrix_googlechat_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"

  873. 

  874. matrix_mautrix_googlechat_systemd_required_services_list: |

  875.   {{

  876.     ['docker.service']

  877.     +

  878.     ['matrix-' + matrix_homeserver_implementation + '.service']

  879.     +

  880.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  881.     +

  882.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  883.   }}

  884. 

  885. matrix_mautrix_googlechat_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'gc.as.token', rounds=655555) | to_uuid }}"

  886. 

  887. matrix_mautrix_googlechat_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'gc.hs.token', rounds=655555) | to_uuid }}"

  888. 

  889. matrix_mautrix_googlechat_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ ':9007') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  890. 

  891. matrix_mautrix_googlechat_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  892. 

  893. # Postgres is the default, except if not using internal Postgres server

  894. matrix_mautrix_googlechat_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  895. matrix_mautrix_googlechat_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  896. matrix_mautrix_googlechat_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mau.gc.db', rounds=655555) | to_uuid }}"

  897. 

  898. ######################################################################

  899. #

  900. # /matrix-bridge-mautrix-googlechat

  901. #

  902. ######################################################################

  903. 

  904. 

  905. ######################################################################

  906. #

  907. # matrix-bridge-mautrix-hangouts

  908. #

  909. ######################################################################

  910. 

  911. # We don't enable bridges by default.

  912. matrix_mautrix_hangouts_enabled: false

  913. 

  914. matrix_mautrix_hangouts_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"

  915. 

  916. matrix_mautrix_hangouts_systemd_required_services_list: |

  917.   {{

  918.     ['docker.service']

  919.     +

  920.     ['matrix-' + matrix_homeserver_implementation + '.service']

  921.     +

  922.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  923.     +

  924.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  925.   }}

  926. 

  927. matrix_mautrix_hangouts_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'ho.as.token', rounds=655555) | to_uuid }}"

  928. 

  929. matrix_mautrix_hangouts_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'ho.hs.token', rounds=655555) | to_uuid }}"

  930. 

  931. matrix_mautrix_hangouts_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ ':9007') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  932. 

  933. matrix_mautrix_hangouts_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  934. 

  935. # Postgres is the default, except if not using internal Postgres server

  936. matrix_mautrix_hangouts_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  937. matrix_mautrix_hangouts_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  938. matrix_mautrix_hangouts_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mau.hangouts.db', rounds=655555) | to_uuid }}"

  939. 

  940. ######################################################################

  941. #

  942. # /matrix-bridge-mautrix-hangouts

  943. #

  944. ######################################################################

  945. 

  946. 

  947. ######################################################################

  948. #

  949. # matrix-bridge-mautrix-instagram

  950. #

  951. ######################################################################

  952. 

  953. # We don't enable bridges by default.

  954. matrix_mautrix_instagram_enabled: false

  955. 

  956. matrix_mautrix_instagram_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"

  957. 

  958. matrix_mautrix_instagram_systemd_required_services_list: |

  959.   {{

  960.     ['docker.service']

  961.     +

  962.     ['matrix-' + matrix_homeserver_implementation + '.service']

  963.     +

  964.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  965.     +

  966.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  967.   }}

  968. 

  969. matrix_mautrix_instagram_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'ig.as.token', rounds=655555) | to_uuid }}"

  970. 

  971. matrix_mautrix_instagram_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'ig.hs.token', rounds=655555) | to_uuid }}"

  972. 

  973. matrix_mautrix_instagram_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  974. 

  975. matrix_mautrix_instagram_bridge_presence: "{{ matrix_synapse_presence_enabled if matrix_synapse_enabled else true }}"

  976. 

  977. # People using an external Prometheus server will need to toggle all of these to be able to consume metrics remotely:

  978. # - `matrix_mautrix_instagram_metrics_enabled`

  979. # - `matrix_mautrix_instagram_proxying_metrics_enabled`

  980. # - `matrix_nginx_proxy_proxy_matrix_metrics_enabled`

  981. matrix_mautrix_instagram_metrics_enabled: "{{ matrix_prometheus_enabled }}"

  982. 

  983. # We'd like to force-set people with external Postgres to SQLite, so the bridge role can complain

  984. # and point them to a migration path.

  985. matrix_mautrix_instagram_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  986. matrix_mautrix_instagram_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  987. matrix_mautrix_instagram_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mau.ig.db', rounds=655555) | to_uuid }}"

  988. 

  989. ######################################################################

  990. #

  991. # /matrix-bridge-mautrix-instagram

  992. #

  993. ######################################################################

  994. 

  995. 

  996. ######################################################################

  997. #

  998. # matrix-bridge-mautrix-signal

  999. #

  1000. ######################################################################

  1001. 

  1002. # We don't enable bridges by default.

  1003. matrix_mautrix_signal_enabled: false

  1004. 

  1005. matrix_mautrix_signal_systemd_required_services_list: |

  1006.   {{

  1007.     ['docker.service']

  1008.     +

  1009.     ['matrix-' + matrix_homeserver_implementation + '.service']

  1010.     +

  1011.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  1012.     +

  1013.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1014.     +

  1015.     ['matrix-mautrix-signal-daemon.service']

  1016.   }}

  1017. 

  1018. matrix_mautrix_signal_homeserver_domain: '{{ matrix_domain }}'

  1019. 

  1020. matrix_mautrix_signal_homeserver_address: "{{ matrix_homeserver_container_url }}"

  1021. 

  1022. matrix_mautrix_signal_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'si.hs.token', rounds=655555) | to_uuid }}"

  1023. 

  1024. matrix_mautrix_signal_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'si.as.token', rounds=655555) | to_uuid }}"

  1025. 

  1026. matrix_mautrix_signal_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  1027. 

  1028. # People using an external Prometheus server will need to toggle all of these to be able to consume metrics remotely:

  1029. # - `matrix_mautrix_signal_metrics_enabled`

  1030. # - `matrix_mautrix_signal_proxying_metrics_enabled`

  1031. # - `matrix_nginx_proxy_proxy_matrix_metrics_enabled`

  1032. matrix_mautrix_signal_metrics_enabled: "{{ matrix_prometheus_enabled }}"

  1033. 

  1034. matrix_mautrix_signal_database_engine: 'postgres'

  1035. matrix_mautrix_signal_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1036. matrix_mautrix_signal_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mau.signal.db', rounds=655555) | to_uuid }}"

  1037. 

  1038. matrix_mautrix_signal_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"

  1039. matrix_mautrix_signal_daemon_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"

  1040. 

  1041. ######################################################################

  1042. #

  1043. # /matrix-bridge-mautrix-signal

  1044. #

  1045. ######################################################################

  1046. 

  1047. ######################################################################

  1048. #

  1049. # matrix-bridge-mautrix-telegram

  1050. #

  1051. ######################################################################

  1052. 

  1053. # We don't enable bridges by default.

  1054. matrix_mautrix_telegram_enabled: false

  1055. 

  1056. # Images are multi-arch (amd64 and arm64, but not arm32).

  1057. matrix_mautrix_telegram_container_image_self_build: "{{ matrix_architecture not in ['arm64', 'amd64'] }}"

  1058. matrix_telegram_lottieconverter_container_image_self_build: "{{ matrix_architecture not in ['arm64', 'amd64'] }}"

  1059. matrix_telegram_lottieconverter_container_image_self_build_mask_arch: "{{ matrix_architecture != 'amd64' }}"

  1060. 

  1061. matrix_mautrix_telegram_systemd_required_services_list: |

  1062.   {{

  1063.     ['docker.service']

  1064.     +

  1065.     ['matrix-' + matrix_homeserver_implementation + '.service']

  1066.     +

  1067.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  1068.     +

  1069.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1070.   }}

  1071. 

  1072. matrix_mautrix_telegram_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'telegr.as.token', rounds=655555) | to_uuid }}"

  1073. 

  1074. matrix_mautrix_telegram_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'telegr.hs.token', rounds=655555) | to_uuid }}"

  1075. 

  1076. matrix_mautrix_telegram_public_endpoint: "/{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'telegram', rounds=655555) | to_uuid }}"

  1077. 

  1078. matrix_mautrix_telegram_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ ':9006') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  1079. 

  1080. matrix_mautrix_telegram_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  1081. 

  1082. # Postgres is the default, except if not using internal Postgres server

  1083. matrix_mautrix_telegram_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  1084. matrix_mautrix_telegram_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1085. matrix_mautrix_telegram_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mau.telegram.db', rounds=655555) | to_uuid }}"

  1086. 

  1087. ######################################################################

  1088. #

  1089. # /matrix-bridge-mautrix-telegram

  1090. #

  1091. ######################################################################

  1092. 

  1093. ######################################################################

  1094. #

  1095. # matrix-bridge-mautrix-twitter

  1096. #

  1097. ######################################################################

  1098. 

  1099. # We don't enable bridges by default.

  1100. matrix_mautrix_twitter_enabled: false

  1101. 

  1102. matrix_mautrix_twitter_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"

  1103. 

  1104. matrix_mautrix_twitter_systemd_required_services_list: |

  1105.   {{

  1106.     ['docker.service']

  1107.     +

  1108.     ['matrix-' + matrix_homeserver_implementation + '.service']

  1109.     +

  1110.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  1111.     +

  1112.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1113.   }}

  1114. 

  1115. matrix_mautrix_twitter_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'twt.as.token', rounds=655555) | to_uuid }}"

  1116. 

  1117. matrix_mautrix_twitter_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'twt.hs.token', rounds=655555) | to_uuid }}"

  1118. 

  1119. matrix_mautrix_twitter_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  1120. 

  1121. matrix_mautrix_twitter_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1122. matrix_mautrix_twitter_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mau.twt.db', rounds=655555) | to_uuid if devture_postgres_enabled else '' }}"

  1123. 

  1124. ######################################################################

  1125. #

  1126. # /matrix-bridge-mautrix-twitter

  1127. #

  1128. ######################################################################

  1129. 

  1130. ######################################################################

  1131. #

  1132. # matrix-bridge-mautrix-whatsapp

  1133. #

  1134. ######################################################################

  1135. 

  1136. # We don't enable bridges by default.

  1137. matrix_mautrix_whatsapp_enabled: false

  1138. 

  1139. matrix_mautrix_whatsapp_container_image_self_build: "{{ matrix_architecture not in ['arm64', 'amd64'] }}"

  1140. 

  1141. matrix_mautrix_whatsapp_systemd_required_services_list: |

  1142.   {{

  1143.     ['docker.service']

  1144.     +

  1145.     ['matrix-' + matrix_homeserver_implementation + '.service']

  1146.     +

  1147.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  1148.     +

  1149.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1150.   }}

  1151. 

  1152. matrix_mautrix_whatsapp_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'whats.as.token', rounds=655555) | to_uuid }}"

  1153. 

  1154. matrix_mautrix_whatsapp_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'whats.hs.token', rounds=655555) | to_uuid }}"

  1155. 

  1156. matrix_mautrix_whatsapp_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  1157. 

  1158. # People using an external Prometheus server will need to toggle all of these to be able to consume metrics remotely:

  1159. # - `matrix_mautrix_twitter_metrics_enabled`

  1160. # - `matrix_mautrix_twitter_proxying_metrics_enabled`

  1161. # - `matrix_nginx_proxy_proxy_matrix_metrics_enabled`

  1162. matrix_mautrix_twitter_metrics_enabled: "{{ matrix_prometheus_enabled }}"

  1163. 

  1164. # Postgres is the default, except if not using internal Postgres server

  1165. matrix_mautrix_whatsapp_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  1166. matrix_mautrix_whatsapp_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1167. matrix_mautrix_whatsapp_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mauwhatsapp.db', rounds=655555) | to_uuid }}"

  1168. 

  1169. ######################################################################

  1170. #

  1171. # /matrix-bridge-mautrix-whatsapp

  1172. #

  1173. ######################################################################

  1174. 

  1175. ######################################################################

  1176. #

  1177. # matrix-sms-bridge

  1178. #

  1179. ######################################################################

  1180. 

  1181. # We don't enable bridges by default.

  1182. matrix_sms_bridge_enabled: false

  1183. 

  1184. matrix_sms_bridge_systemd_required_services_list: |

  1185.   {{

  1186.     ['docker.service']

  1187.     +

  1188.     ['matrix-' + matrix_homeserver_implementation + '.service']

  1189.     +

  1190.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1191.   }}

  1192. 

  1193. matrix_sms_bridge_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'sms.as.token', rounds=655555) | to_uuid }}"

  1194. 

  1195. matrix_sms_bridge_homeserver_port: "{{ matrix_synapse_container_client_api_port }}"

  1196. matrix_sms_bridge_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'sms.hs.token', rounds=655555) | to_uuid }}"

  1197. 

  1198. ######################################################################

  1199. #

  1200. # /matrix-sms-bridge

  1201. #

  1202. ######################################################################

  1203. 

  1204. ######################################################################

  1205. #

  1206. # matrix-bridge-heisenbridge

  1207. #

  1208. ######################################################################

  1209. 

  1210. # We don't enable bridges by default.

  1211. matrix_heisenbridge_enabled: false

  1212. 

  1213. matrix_heisenbridge_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'heisen.as.tok', rounds=655555) | to_uuid }}"

  1214. 

  1215. matrix_heisenbridge_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'heisen.hs.tok', rounds=655555) | to_uuid }}"

  1216. 

  1217. matrix_heisenbridge_systemd_wanted_services_list: |

  1218.   {{

  1219.     ['matrix-' + matrix_homeserver_implementation + '.service']

  1220.     +

  1221.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1222.   }}

  1223. 

  1224. ######################################################################

  1225. #

  1226. # /matrix-bridge-heisenbridge

  1227. #

  1228. ######################################################################

  1229. 

  1230. ######################################################################

  1231. #

  1232. # matrix-bridge-hookshot

  1233. #

  1234. ######################################################################

  1235. 

  1236. # We don't enable bridges by default.

  1237. matrix_hookshot_enabled: false

  1238. 

  1239. matrix_hookshot_container_image_self_build: "{{ matrix_architecture not in ['arm64', 'amd64'] }}"

  1240. 

  1241. matrix_hookshot_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'hookshot.as.tok', rounds=655555) | to_uuid }}"

  1242. 

  1243. matrix_hookshot_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'hookshot.hs.tok', rounds=655555) | to_uuid }}"

  1244. 

  1245. matrix_hookshot_systemd_wanted_services_list: |

  1246.   {{

  1247.     (['matrix-' + matrix_homeserver_implementation + '.service'])

  1248.     +

  1249.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1250.   }}

  1251. 

  1252. matrix_hookshot_container_http_host_bind_ports_defaultmapping:

  1253.   - "{{ matrix_playbook_service_host_bind_interface_prefix }}{{ matrix_hookshot_appservice_port }}:{{ matrix_hookshot_appservice_port }}"

  1254.   - "{{ matrix_playbook_service_host_bind_interface_prefix }}{{ matrix_hookshot_metrics_port }}:{{ matrix_hookshot_metrics_port }}"

  1255.   - "{{ matrix_playbook_service_host_bind_interface_prefix }}{{ matrix_hookshot_webhook_port }}:{{ matrix_hookshot_webhook_port }}"

  1256.   - "{{ matrix_playbook_service_host_bind_interface_prefix }}{{ matrix_hookshot_provisioning_port }}:{{ matrix_hookshot_provisioning_port }}"

  1257. 

  1258. matrix_hookshot_container_http_host_bind_ports: "{{ matrix_hookshot_container_http_host_bind_ports_defaultmapping if matrix_playbook_service_host_bind_interface_prefix else [] }}"

  1259. 

  1260. matrix_hookshot_provisioning_enabled: "{{ matrix_hookshot_provisioning_secret and matrix_dimension_enabled }}"

  1261. 

  1262. # We only enable metrics (locally, in the container network) for the bridge if Prometheus is enabled.

  1263. #

  1264. # People using an external Prometheus server will need to toggle all of these to be able to consume metrics remotely:

  1265. # - `matrix_hookshot_metrics_enabled`

  1266. # - `matrix_hookshot_metrics_proxying_enabled`

  1267. # - `matrix_nginx_proxy_proxy_matrix_metrics_enabled`

  1268. matrix_hookshot_metrics_enabled: "{{ matrix_prometheus_enabled }}"

  1269. 

  1270. matrix_hookshot_urlprefix_port_enabled: "{{ matrix_nginx_proxy_container_https_host_bind_port == 443 if matrix_nginx_proxy_https_enabled else matrix_nginx_proxy_container_https_host_bind_port == 80 }}"

  1271. matrix_hookshot_urlprefix_port: ":{{ matrix_nginx_proxy_container_https_host_bind_port if matrix_nginx_proxy_https_enabled else matrix_nginx_proxy_container_http_host_bind_port }}"

  1272. matrix_hookshot_urlprefix: "http{{ 's' if matrix_nginx_proxy_https_enabled else '' }}://{{ matrix_server_fqn_matrix }}{{ matrix_hookshot_urlprefix_port if matrix_hookshot_urlprefix_port_enabled else '' }}"

  1273. 

  1274. ######################################################################

  1275. #

  1276. # /matrix-bridge-hookshot

  1277. #

  1278. ######################################################################

  1279. 

  1280. 

  1281. ######################################################################

  1282. #

  1283. # matrix-bridge-mx-puppet-slack

  1284. #

  1285. ######################################################################

  1286. 

  1287. # We don't enable bridges by default.

  1288. matrix_mx_puppet_slack_enabled: false

  1289. 

  1290. matrix_mx_puppet_slack_container_image_self_build: "{{ matrix_architecture != 'amd64' }}"

  1291. 

  1292. matrix_mx_puppet_slack_systemd_required_services_list: |

  1293.   {{

  1294.     ['docker.service']

  1295.     +

  1296.     ['matrix-' + matrix_homeserver_implementation + '.service']

  1297.     +

  1298.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  1299.     +

  1300.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1301.   }}

  1302. 

  1303. matrix_mx_puppet_slack_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxslk.as.tok', rounds=655555) | to_uuid }}"

  1304. 

  1305. matrix_mx_puppet_slack_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxslk.hs.tok', rounds=655555) | to_uuid }}"

  1306. 

  1307. matrix_mx_puppet_slack_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  1308. 

  1309. # Postgres is the default, except if not using internal Postgres server

  1310. matrix_mx_puppet_slack_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  1311. matrix_mx_puppet_slack_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1312. matrix_mx_puppet_slack_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxpup.slack.db', rounds=655555) | to_uuid }}"

  1313. 

  1314. ######################################################################

  1315. #

  1316. # /matrix-bridge-mx-puppet-slack

  1317. #

  1318. ######################################################################

  1319. 

  1320. ######################################################################

  1321. #

  1322. # matrix-bridge-mx-puppet-twitter

  1323. #

  1324. ######################################################################

  1325. 

  1326. # We don't enable bridges by default.

  1327. matrix_mx_puppet_twitter_enabled: false

  1328. 

  1329. matrix_mx_puppet_twitter_container_image_self_build: "{{ matrix_architecture != 'amd64' }}"

  1330. 

  1331. matrix_mx_puppet_twitter_systemd_required_services_list: |

  1332.   {{

  1333.     ['docker.service']

  1334.     +

  1335.     ['matrix-' + matrix_homeserver_implementation + '.service']

  1336.     +

  1337.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  1338.     +

  1339.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1340.   }}

  1341. 

  1342. matrix_mx_puppet_twitter_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxtwt.as.tok', rounds=655555) | to_uuid }}"

  1343. 

  1344. matrix_mx_puppet_twitter_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxtwt.hs.tok', rounds=655555) | to_uuid }}"

  1345. 

  1346. matrix_mx_puppet_twitter_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  1347. 

  1348. matrix_mx_puppet_twitter_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ ':' ~ matrix_mx_puppet_twitter_appservice_port) if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  1349. 

  1350. # Postgres is the default, except if not using internal Postgres server

  1351. matrix_mx_puppet_twitter_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  1352. matrix_mx_puppet_twitter_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1353. matrix_mx_puppet_twitter_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxpup.twitter.db', rounds=655555) | to_uuid }}"

  1354. 

  1355. ######################################################################

  1356. #

  1357. # /matrix-bridge-mx-puppet-twitter

  1358. #

  1359. ######################################################################

  1360. 

  1361. 

  1362. ######################################################################

  1363. #

  1364. # matrix-bridge-mx-puppet-instagram

  1365. #

  1366. ######################################################################

  1367. 

  1368. # We don't enable bridges by default.

  1369. matrix_mx_puppet_instagram_enabled: false

  1370. 

  1371. matrix_mx_puppet_instagram_container_image_self_build: "{{ matrix_architecture != 'amd64' }}"

  1372. 

  1373. matrix_mx_puppet_instagram_systemd_required_services_list: |

  1374.   {{

  1375.     ['docker.service']

  1376.     +

  1377.     ['matrix-' + matrix_homeserver_implementation + '.service']

  1378.     +

  1379.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  1380.     +

  1381.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1382.   }}

  1383. 

  1384. matrix_mx_puppet_instagram_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxig.as.tok', rounds=655555) | to_uuid }}"

  1385. 

  1386. matrix_mx_puppet_instagram_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxig.hs.tok', rounds=655555) | to_uuid }}"

  1387. 

  1388. matrix_mx_puppet_instagram_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  1389. 

  1390. # Postgres is the default, except if not using internal Postgres server

  1391. matrix_mx_puppet_instagram_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  1392. matrix_mx_puppet_instagram_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1393. matrix_mx_puppet_instagram_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxpup.ig.db', rounds=655555) | to_uuid }}"

  1394. 

  1395. ######################################################################

  1396. #

  1397. # /matrix-bridge-mx-puppet-instagram

  1398. #

  1399. ######################################################################

  1400. 

  1401. ######################################################################

  1402. #

  1403. # matrix-bridge-mx-puppet-discord

  1404. #

  1405. ######################################################################

  1406. 

  1407. # We don't enable bridges by default.

  1408. matrix_mx_puppet_discord_enabled: false

  1409. 

  1410. matrix_mx_puppet_discord_container_image_self_build: "{{ matrix_architecture != 'amd64' }}"

  1411. 

  1412. matrix_mx_puppet_discord_systemd_required_services_list: |

  1413.   {{

  1414.     ['docker.service']

  1415.     +

  1416.     ['matrix-' + matrix_homeserver_implementation + '.service']

  1417.     +

  1418.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  1419.     +

  1420.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1421.   }}

  1422. 

  1423. matrix_mx_puppet_discord_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxdsc.as.tok', rounds=655555) | to_uuid }}"

  1424. 

  1425. matrix_mx_puppet_discord_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxdsc.hs.tok', rounds=655555) | to_uuid }}"

  1426. 

  1427. matrix_mx_puppet_discord_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  1428. 

  1429. # Postgres is the default, except if not using internal Postgres server

  1430. matrix_mx_puppet_discord_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  1431. matrix_mx_puppet_discord_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1432. matrix_mx_puppet_discord_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxpup.dsc.db', rounds=655555) | to_uuid }}"

  1433. 

  1434. ######################################################################

  1435. #

  1436. # /matrix-bridge-mx-puppet-discord

  1437. #

  1438. ######################################################################

  1439. 

  1440. ######################################################################

  1441. #

  1442. # matrix-bridge-mx-puppet-steam

  1443. #

  1444. ######################################################################

  1445. 

  1446. # We don't enable bridges by default.

  1447. matrix_mx_puppet_steam_enabled: false

  1448. 

  1449. matrix_mx_puppet_steam_container_image_self_build: "{{ matrix_architecture not in ['arm64', 'amd64'] }}"

  1450. 

  1451. matrix_mx_puppet_steam_systemd_required_services_list: |

  1452.   {{

  1453.     ['docker.service']

  1454.     +

  1455.     ['matrix-' + matrix_homeserver_implementation + '.service']

  1456.     +

  1457.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  1458.     +

  1459.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1460.   }}

  1461. 

  1462. matrix_mx_puppet_steam_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxste.as.tok', rounds=655555) | to_uuid }}"

  1463. 

  1464. matrix_mx_puppet_steam_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxste.hs.tok', rounds=655555) | to_uuid }}"

  1465. 

  1466. matrix_mx_puppet_steam_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  1467. 

  1468. # Postgres is the default, except if not using internal Postgres server

  1469. matrix_mx_puppet_steam_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  1470. matrix_mx_puppet_steam_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1471. matrix_mx_puppet_steam_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxpup.steam.db', rounds=655555) | to_uuid }}"

  1472. 

  1473. ######################################################################

  1474. #

  1475. # /matrix-bridge-mx-puppet-steam

  1476. #

  1477. ######################################################################

  1478. 

  1479. ######################################################################

  1480. #

  1481. # matrix-bridge-mx-puppet-groupme

  1482. #

  1483. ######################################################################

  1484. 

  1485. # We don't enable bridges by default.

  1486. matrix_mx_puppet_groupme_enabled: false

  1487. 

  1488. matrix_mx_puppet_groupme_container_image_self_build: "{{ matrix_architecture != 'amd64' }}"

  1489. 

  1490. matrix_mx_puppet_groupme_systemd_required_services_list: |

  1491.   {{

  1492.     ['docker.service']

  1493.     +

  1494.     ['matrix-' + matrix_homeserver_implementation + '.service']

  1495.     +

  1496.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  1497.     +

  1498.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1499.   }}

  1500. 

  1501. matrix_mx_puppet_groupme_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxgro.as.tok', rounds=655555) | to_uuid }}"

  1502. 

  1503. matrix_mx_puppet_groupme_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxgro.hs.tok', rounds=655555) | to_uuid }}"

  1504. 

  1505. matrix_mx_puppet_groupme_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  1506. 

  1507. # Postgres is the default, except if not using internal Postgres server

  1508. matrix_mx_puppet_groupme_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  1509. matrix_mx_puppet_groupme_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1510. matrix_mx_puppet_groupme_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxpup.groupme.db', rounds=655555) | to_uuid }}"

  1511. 

  1512. ######################################################################

  1513. #

  1514. # /matrix-bridge-mx-puppet-groupme

  1515. #

  1516. ######################################################################

  1517. 

  1518. ######################################################################

  1519. #

  1520. # matrix-bot-matrix-reminder-bot

  1521. #

  1522. ######################################################################

  1523. 

  1524. # We don't enable bots by default.

  1525. matrix_bot_matrix_reminder_bot_enabled: false

  1526. 

  1527. matrix_bot_matrix_reminder_bot_systemd_required_services_list: |

  1528.   {{

  1529.     ['docker.service']

  1530.     +

  1531.     ['matrix-' + matrix_homeserver_implementation + '.service']

  1532.     +

  1533.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  1534.     +

  1535.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1536.   }}

  1537. 

  1538. # Postgres is the default, except if not using internal Postgres server

  1539. matrix_bot_matrix_reminder_bot_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  1540. matrix_bot_matrix_reminder_bot_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1541. matrix_bot_matrix_reminder_bot_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'reminder.bot.db', rounds=655555) | to_uuid }}"

  1542. matrix_bot_matrix_reminder_bot_container_image_self_build: "{{ matrix_architecture != 'amd64' }}"

  1543. 

  1544. ######################################################################

  1545. #

  1546. # /matrix-bot-matrix-reminder-bot

  1547. #

  1548. ######################################################################

  1549. 

  1550. 

  1551. ######################################################################

  1552. #

  1553. # matrix-bot-matrix-registration-bot

  1554. #

  1555. ######################################################################

  1556. 

  1557. # We don't enable bots by default.

  1558. matrix_bot_matrix_registration_bot_enabled: false

  1559. 

  1560. matrix_bot_matrix_registration_bot_container_image_self_build: "{{ matrix_architecture not in ['amd64'] }}"

  1561. 

  1562. matrix_bot_matrix_registration_bot_systemd_required_services_list: |

  1563.   {{

  1564.     ['docker.service']

  1565.     +

  1566.     ['matrix-' + matrix_homeserver_implementation + '.service']

  1567.     +

  1568.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1569.   }}

  1570. 

  1571. 

  1572. ######################################################################

  1573. #

  1574. # /matrix-bot-matrix-registration-bot

  1575. #

  1576. ######################################################################

  1577. 

  1578. ######################################################################

  1579. #

  1580. # matrix-bot-maubot

  1581. #

  1582. ######################################################################

  1583. 

  1584. # We don't enable bots by default.

  1585. matrix_bot_maubot_enabled: false

  1586. 

  1587. matrix_bot_maubot_container_image_self_build: "{{ matrix_architecture not in ['amd64'] }}"

  1588. 

  1589. matrix_bot_maubot_systemd_required_services_list: |

  1590.   {{

  1591.     ['docker.service']

  1592.     +

  1593.     ['matrix-' + matrix_homeserver_implementation + '.service']

  1594.     +

  1595.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  1596.     +

  1597.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1598.   }}

  1599. 

  1600. matrix_bot_maubot_registration_shared_secret: |-

  1601.   {{

  1602.     {

  1603.       'synapse': matrix_synapse_registration_shared_secret,

  1604.       'dendrite': matrix_dendrite_client_api_registration_shared_secret,

  1605.     }[matrix_homeserver_implementation]

  1606.   }}

  1607. 

  1608. matrix_bot_maubot_management_interface_http_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ ':' ~ matrix_bot_maubot_management_interface_port | string) if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  1609. 

  1610. # Postgres is the default, except if not using internal Postgres server

  1611. matrix_bot_maubot_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  1612. matrix_bot_maubot_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1613. matrix_bot_maubot_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxpup.dsc.db', rounds=655555) | to_uuid }}"

  1614. 

  1615. ######################################################################

  1616. #

  1617. # /matrix-bot-maubot

  1618. #

  1619. ######################################################################

  1620. 

  1621. 

  1622. ######################################################################

  1623. #

  1624. # matrix-bot-honoroit

  1625. #

  1626. ######################################################################

  1627. 

  1628. # We don't enable bots by default.

  1629. matrix_bot_honoroit_enabled: false

  1630. 

  1631. matrix_bot_honoroit_systemd_required_services_list: |

  1632.   {{

  1633.     ['docker.service']

  1634.     +

  1635.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  1636.     +

  1637.     (['matrix-synapse.service'] if matrix_synapse_enabled else [])

  1638.     +

  1639.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1640.   }}

  1641. 

  1642. # Postgres is the default, except if not using internal Postgres server

  1643. matrix_bot_honoroit_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  1644. matrix_bot_honoroit_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1645. matrix_bot_honoroit_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'honoroit.bot.db', rounds=655555) | to_uuid }}"

  1646. matrix_bot_honoroit_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"

  1647. 

  1648. ######################################################################

  1649. #

  1650. # /matrix-bot-honoroit

  1651. #

  1652. ######################################################################

  1653. 

  1654. ######################################################################

  1655. #

  1656. # matrix-bot-buscarron

  1657. #

  1658. ######################################################################

  1659. 

  1660. # We don't enable bots by default.

  1661. matrix_bot_buscarron_enabled: false

  1662. 

  1663. matrix_bot_buscarron_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"

  1664. 

  1665. matrix_bot_buscarron_systemd_required_services_list: |

  1666.   {{

  1667.     ['docker.service']

  1668.     +

  1669.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  1670.     +

  1671.     (['matrix-synapse.service'] if matrix_synapse_enabled else [])

  1672.     +

  1673.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1674.   }}

  1675. 

  1676. # Postgres is the default, except if not using internal Postgres server

  1677. matrix_bot_buscarron_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  1678. matrix_bot_buscarron_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1679. matrix_bot_buscarron_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'buscarron.bot.db', rounds=655555) | to_uuid }}"

  1680. 

  1681. ######################################################################

  1682. #

  1683. # /matrix-bot-buscarron

  1684. #

  1685. ######################################################################

  1686. 

  1687. ######################################################################

  1688. #

  1689. # matrix-bot-postmoogle

  1690. #

  1691. ######################################################################

  1692. 

  1693. # We don't enable bots by default.

  1694. matrix_bot_postmoogle_enabled: false

  1695. 

  1696. matrix_bot_postmoogle_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"

  1697. 

  1698. matrix_bot_postmoogle_ssl_path: |-

  1699.   {{

  1700.     {

  1701.       'playbook-installed-traefik': devture_traefik_certs_dumper_dumped_certificates_dir_path,

  1702.       'other-traefik-container': devture_traefik_certs_dumper_dumped_certificates_dir_path,

  1703.       'playbook-installed-nginx': (matrix_ssl_config_dir_path if matrix_playbook_ssl_retrieval_method != 'none' else ''),

  1704.       'other-nginx-non-container': (matrix_ssl_config_dir_path if matrix_playbook_ssl_retrieval_method != 'none' else ''),

  1705.       'other-on-same-host': '',

  1706.       'other-on-another-host': '',

  1707.       'none': '',

  1708.     }[matrix_playbook_reverse_proxy_type]

  1709.   }}

  1710. 

  1711. matrix_playbook_bot_postmoogle_nginx_proxy_tls_cert: "{% for domain in matrix_bot_postmoogle_domains %}/ssl/live/{{ domain }}/fullchain.pem {% endfor %}"

  1712. matrix_playbook_bot_postmoogle_nginx_proxy_key: "{% for domain in matrix_bot_postmoogle_domains %}/ssl/live/{{ domain }}/privkey.pem {% endfor %}"

  1713. 

  1714. matrix_playbook_bot_postmoogle_traefik_tls_cert: "{% for domain in matrix_bot_postmoogle_domains %}/ssl/{{ domain }}/certificate.crt {% endfor %}"

  1715. matrix_playbook_bot_postmoogle_traefik_key: "{% for domain in matrix_bot_postmoogle_domains %}/ssl/{{ domain }}/privatekey.key {% endfor %}"

  1716. 

  1717. matrix_bot_postmoogle_tls_cert: |-

  1718.   {{

  1719.     {

  1720.       'playbook-installed-traefik': matrix_playbook_bot_postmoogle_traefik_tls_cert,

  1721.       'other-traefik-container': matrix_playbook_bot_postmoogle_traefik_tls_cert,

  1722.       'playbook-installed-nginx': (matrix_playbook_bot_postmoogle_nginx_proxy_tls_cert if matrix_playbook_ssl_retrieval_method != 'none' else ''),

  1723.       'other-nginx-non-container': (matrix_playbook_bot_postmoogle_nginx_proxy_tls_cert if matrix_playbook_ssl_retrieval_method != 'none' else ''),

  1724.       'other-on-same-host': '',

  1725.       'other-on-another-host': '',

  1726.       'none': '',

  1727.     }[matrix_playbook_reverse_proxy_type]

  1728.   }}

  1729. 

  1730. matrix_bot_postmoogle_tls_key: |-

  1731.   {{

  1732.     {

  1733.       'playbook-installed-traefik': matrix_playbook_bot_postmoogle_traefik_key,

  1734.       'other-traefik-container': matrix_playbook_bot_postmoogle_traefik_key,

  1735.       'playbook-installed-nginx': (matrix_playbook_bot_postmoogle_nginx_proxy_key if matrix_playbook_ssl_retrieval_method != 'none' else ''),

  1736.       'other-nginx-non-container': (matrix_playbook_bot_postmoogle_nginx_proxy_key if matrix_playbook_ssl_retrieval_method != 'none' else ''),

  1737.       'other-on-same-host': '',

  1738.       'other-on-another-host': '',

  1739.       'none': '',

  1740.     }[matrix_playbook_reverse_proxy_type]

  1741.   }}

  1742. 

  1743. matrix_playbook_bot_postmoogle_traefik_certs_dumper_waiter_services: "{% for domain in matrix_bot_postmoogle_domains %}{{ devture_traefik_certs_dumper_identifier }}-wait-for-domain@{{ domain }}.service {% endfor %}"

  1744. 

  1745. matrix_bot_postmoogle_systemd_required_services_list: |

  1746.   {{

  1747.     ['docker.service']

  1748.     +

  1749.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  1750.     +

  1751.     (['matrix-synapse.service'] if matrix_synapse_enabled else [])

  1752.     +

  1753.     (matrix_playbook_bot_postmoogle_traefik_certs_dumper_waiter_services | trim | split(' ') if matrix_playbook_reverse_proxy_type in ['playbook-installed-traefik', 'other-traefik-container'] and matrix_playbook_traefik_certs_dumper_role_enabled else [])

  1754.   }}

  1755. 

  1756. # Postgres is the default, except if not using internal Postgres server

  1757. matrix_bot_postmoogle_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  1758. matrix_bot_postmoogle_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1759. matrix_bot_postmoogle_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'postmoogle.db', rounds=655555) | to_uuid }}"

  1760. 

  1761. ######################################################################

  1762. #

  1763. # /matrix-bot-postmoogle

  1764. #

  1765. ######################################################################

  1766. 

  1767. 

  1768. ######################################################################

  1769. #

  1770. # matrix-bot-chatgpt

  1771. #

  1772. ######################################################################

  1773. 

  1774. # We don't enable bots by default.

  1775. matrix_bot_chatgpt_enabled: false

  1776. 

  1777. matrix_bot_chatgpt_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"

  1778. 

  1779. ######################################################################

  1780. #

  1781. # /matrix-bot-chatgpt

  1782. #

  1783. ######################################################################

  1784. 

  1785. 

  1786. ######################################################################

  1787. #

  1788. # matrix-bot-go-neb

  1789. #

  1790. ######################################################################

  1791. 

  1792. # We don't enable bots by default.

  1793. matrix_bot_go_neb_enabled: false

  1794. 

  1795. matrix_bot_go_neb_systemd_required_services_list: |

  1796.   {{

  1797.     ['docker.service']

  1798.     +

  1799.     ['matrix-' + matrix_homeserver_implementation + '.service']

  1800.     +

  1801.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1802.   }}

  1803. 

  1804. matrix_bot_go_neb_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ ':4050') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  1805. 

  1806. ######################################################################

  1807. #

  1808. # /matrix-bot-go-neb

  1809. #

  1810. ######################################################################

  1811. 

  1812. 

  1813. ######################################################################

  1814. #

  1815. # matrix-bot-mjolnir

  1816. #

  1817. ######################################################################

  1818. 

  1819. # We don't enable bots by default.

  1820. matrix_bot_mjolnir_enabled: false

  1821. 

  1822. matrix_bot_mjolnir_container_image_self_build: "{{ matrix_architecture != 'amd64' }}"

  1823. 

  1824. matrix_bot_mjolnir_systemd_required_services_list: |

  1825.   {{

  1826.     ['docker.service']

  1827.     +

  1828.     ['matrix-' + matrix_homeserver_implementation + '.service']

  1829.     +

  1830.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  1831.     +

  1832.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1833.   }}

  1834. 

  1835. ######################################################################

  1836. #

  1837. # /matrix-bot-mjolnir

  1838. #

  1839. ######################################################################

  1840. 

  1841. ######################################################################

  1842. #

  1843. # matrix-bot-draupnir

  1844. #

  1845. ######################################################################

  1846. 

  1847. # We don't enable bots by default.

  1848. matrix_bot_draupnir_enabled: false

  1849. 

  1850. matrix_bot_draupnir_container_image_self_build: "{{ matrix_architecture != 'amd64' }}"

  1851. 

  1852. matrix_bot_draupnir_systemd_required_services_list: |

  1853.   {{

  1854.     ['docker.service']

  1855.     +

  1856.     ['matrix-' + matrix_homeserver_implementation + '.service']

  1857.     +

  1858.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  1859.     +

  1860.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1861.   }}

  1862. 

  1863. ######################################################################

  1864. #

  1865. # /matrix-bot-draupnir

  1866. #

  1867. ######################################################################

  1868. 

  1869. ######################################################################

  1870. #

  1871. # matrix-backup-borg

  1872. #

  1873. ######################################################################

  1874. 

  1875. matrix_backup_borg_enabled: false

  1876. 

  1877. matrix_backup_borg_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm32', 'arm64'] }}"

  1878. 

  1879. matrix_backup_borg_postgresql_enabled: "{{ devture_postgres_enabled }}"

  1880. matrix_backup_borg_postgresql_databases_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1881. matrix_backup_borg_postgresql_databases_username: "{{ devture_postgres_connection_username if devture_postgres_enabled else '' }}"

  1882. matrix_backup_borg_postgresql_databases_password: "{{ devture_postgres_connection_password if devture_postgres_enabled else '' }}"

  1883. matrix_backup_borg_postgresql_databases_port: "{{ devture_postgres_connection_port if devture_postgres_enabled else 5432 }}"

  1884. matrix_backup_borg_postgresql_databases: "{{ devture_postgres_managed_databases | map(attribute='name') if devture_postgres_enabled else [] }}"

  1885. 

  1886. matrix_backup_borg_location_source_directories:

  1887.   - "{{ matrix_base_data_path }}"

  1888. 

  1889. matrix_backup_borg_location_exclude_patterns: |

  1890.   {{

  1891.     ([matrix_synapse_media_store_path + '/local_thumbnails', matrix_synapse_media_store_path + '/remote_thumbnail', matrix_synapse_media_store_path + '/url_cache', matrix_synapse_media_store_path + '/url_cache_thumbnails'] if matrix_homeserver_implementation == 'synapse' else [])

  1892.     +

  1893.     ([devture_postgres_data_path] if devture_postgres_enabled else [])

  1894.   }}

  1895. 

  1896. matrix_backup_borg_systemd_required_services_list: |

  1897.   {{

  1898.     ['docker.service']

  1899.     +

  1900.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  1901.   }}

  1902. 

  1903. ######################################################################

  1904. #

  1905. # /matrix-backup-borg

  1906. #

  1907. ######################################################################

  1908. ######################################################################

  1909. #

  1910. # matrix-cactus-comments

  1911. #

  1912. ######################################################################

  1913. 

  1914. matrix_cactus_comments_enabled: false

  1915. 

  1916. # Derive secret values from homeserver secret

  1917. matrix_cactus_comments_as_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'cactus.as.token', rounds=655555) | to_uuid }}"

  1918. matrix_cactus_comments_hs_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'cactus.hs.token', rounds=655555) | to_uuid }}"

  1919. 

  1920. matrix_cactus_comments_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm32', 'arm64'] }}"

  1921. matrix_cactus_comments_systemd_required_services_list: |

  1922.   {{

  1923.     (['docker.service'])

  1924.     +

  1925.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1926.     +

  1927.     (['matrix-' + matrix_homeserver_implementation + '.service'])

  1928.   }}

  1929. 

  1930. matrix_cactus_comments_client_nginx_path: "{{ '/cactus-comments/' if matrix_nginx_proxy_enabled else matrix_cactus_comments_client_path + '/' }}"

  1931. 

  1932. ######################################################################

  1933. #

  1934. # /matrix-cactus-comments

  1935. #

  1936. ######################################################################

  1937. 

  1938. ######################################################################

  1939. #

  1940. # matrix-corporal

  1941. #

  1942. ######################################################################

  1943. 

  1944. matrix_corporal_enabled: false

  1945. 

  1946. matrix_corporal_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm32', 'arm64'] }}"

  1947. 

  1948. # Normally, matrix-nginx-proxy is enabled and nginx can reach matrix-corporal over the container network.

  1949. # If matrix-nginx-proxy is not enabled, or you otherwise have a need for it, you can expose

  1950. # matrix-corporal's web-server ports to the local host.

  1951. matrix_corporal_container_http_gateway_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ ':41080') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  1952. matrix_corporal_container_http_api_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ ':41081') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  1953. 

  1954. matrix_corporal_systemd_required_services_list: |

  1955.   {{

  1956.     (['docker.service'])

  1957.     +

  1958.     (['matrix-' + matrix_homeserver_implementation + '.service'])

  1959.   }}

  1960. 

  1961. matrix_corporal_matrix_homeserver_api_endpoint: "{{ matrix_homeserver_container_url }}"

  1962. 

  1963. matrix_corporal_matrix_auth_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret }}"

  1964. 

  1965. # This is only useful if there's REST auth provider to make use of it.

  1966. matrix_corporal_http_gateway_internal_rest_auth_enabled: "{{ matrix_synapse_ext_password_provider_rest_auth_enabled }}"

  1967. 

  1968. matrix_corporal_matrix_registration_shared_secret: "{{ matrix_synapse_registration_shared_secret }}"

  1969. 

  1970. ######################################################################

  1971. #

  1972. # /matrix-corporal

  1973. #

  1974. ######################################################################

  1975. 

  1976. ######################################################################

  1977. #

  1978. # matrix-coturn

  1979. #

  1980. ######################################################################

  1981. 

  1982. matrix_coturn_enabled: true

  1983. 

  1984. matrix_coturn_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm32', 'arm64'] }}"

  1985. 

  1986. matrix_coturn_turn_external_ip_address: "{{ ansible_host }}"

  1987. 

  1988. matrix_coturn_turn_static_auth_secret: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'coturn.sas', rounds=655555) | to_uuid }}"

  1989. 

  1990. matrix_coturn_tls_enabled: "{{ matrix_playbook_ssl_retrieval_method != 'none' }}"

  1991. 

  1992. matrix_coturn_tls_cert_path: |-

  1993.   {{

  1994.     {

  1995.       'playbook-installed-traefik': '/certificate.crt',

  1996.       'other-traefik-container': '/certificate.crt',

  1997.       'playbook-installed-nginx': '/fullchain.pem',

  1998.       'other-nginx-non-container': '/fullchain.pem',

  1999.       'other-on-same-host': '',

  2000.       'other-on-another-host': '',

  2001.       'none': '',

  2002.     }[matrix_playbook_reverse_proxy_type]

  2003.   }}

  2004. 

  2005. matrix_coturn_tls_key_path: |-

  2006.   {{

  2007.     {

  2008.       'playbook-installed-traefik': '/privatekey.key',

  2009.       'other-traefik-container': '/privatekey.key',

  2010.       'playbook-installed-nginx': '/privkey.pem',

  2011.       'other-nginx-non-container': '/privkey.pem',

  2012.       'other-on-same-host': '',

  2013.       'other-on-another-host': '',

  2014.       'none': '',

  2015.     }[matrix_playbook_reverse_proxy_type]

  2016.   }}

  2017. 

  2018. matrix_coturn_container_additional_volumes: |

  2019.   {{

  2020.     (

  2021.       [

  2022.        {

  2023.          'src': (matrix_ssl_config_dir_path + '/live/' + matrix_server_fqn_matrix + '/fullchain.pem'),

  2024.          'dst': '/fullchain.pem',

  2025.          'options': 'ro',

  2026.        },

  2027.        {

  2028.          'src': (matrix_ssl_config_dir_path + '/live/' + matrix_server_fqn_matrix + '/privkey.pem'),

  2029.          'dst': '/privkey.pem',

  2030.          'options': 'ro',

  2031.        },

  2032.       ] if matrix_playbook_reverse_proxy_type in ['playbook-installed-nginx', 'other-nginx-non-container'] else []

  2033.     )

  2034.     +

  2035.     (

  2036.       [

  2037.        {

  2038.          'src': (devture_traefik_certs_dumper_dumped_certificates_dir_path +  '/' + matrix_server_fqn_matrix + '/certificate.crt'),

  2039.          'dst': '/certificate.crt',

  2040.          'options': 'ro',

  2041.        },

  2042.        {

  2043.          'src': (devture_traefik_certs_dumper_dumped_certificates_dir_path +  '/' + matrix_server_fqn_matrix + '/privatekey.key'),

  2044.          'dst': '/privatekey.key',

  2045.          'options': 'ro',

  2046.        },

  2047.       ] if matrix_playbook_reverse_proxy_type in ['playbook-installed-traefik', 'other-traefik-container'] and matrix_playbook_traefik_certs_dumper_role_enabled else []

  2048.     )

  2049.   }}

  2050. 

  2051. matrix_coturn_systemd_required_services_list: |

  2052.   {{

  2053.     ['docker.service']

  2054.     +

  2055.     ([devture_traefik_certs_dumper_identifier + '-wait-for-domain@' + matrix_server_fqn_matrix + '.service'] if matrix_playbook_reverse_proxy_type in ['playbook-installed-traefik', 'other-traefik-container'] and matrix_playbook_traefik_certs_dumper_role_enabled else [])

  2056.   }}

  2057. 

  2058. ######################################################################

  2059. #

  2060. # /matrix-coturn

  2061. #

  2062. ######################################################################

  2063. 

  2064. ######################################################################

  2065. #

  2066. # matrix-dimension

  2067. #

  2068. ######################################################################

  2069. 

  2070. matrix_dimension_enabled: false

  2071. 

  2072. matrix_dimension_container_image_self_build: "{{ matrix_architecture != 'amd64' }}"

  2073. 

  2074. # Normally, matrix-nginx-proxy is enabled and nginx can reach Dimension over the container network.

  2075. # If matrix-nginx-proxy is not enabled, or you otherwise have a need for it, you can expose

  2076. # the Dimension HTTP port to the local host.

  2077. matrix_dimension_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ ':8184') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  2078. 

  2079. matrix_dimension_homeserver_federationUrl: "{{ matrix_homeserver_container_federation_url }}"

  2080. 

  2081. matrix_dimension_systemd_required_services_list: |

  2082.   {{

  2083.     ['docker.service']

  2084.     +

  2085.     ['matrix-' + matrix_homeserver_implementation + '.service']

  2086.     +

  2087.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  2088.     +

  2089.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  2090.   }}

  2091. 

  2092. # Postgres is the default, except if not using internal Postgres server

  2093. matrix_dimension_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  2094. matrix_dimension_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  2095. matrix_dimension_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'dimension.db', rounds=655555) | to_uuid }}"

  2096. 

  2097. ######################################################################

  2098. #

  2099. # /matrix-dimension

  2100. #

  2101. ######################################################################

  2102. 

  2103. ######################################################################

  2104. #

  2105. # matrix-etherpad

  2106. #

  2107. ######################################################################

  2108. 

  2109. matrix_etherpad_enabled: false

  2110. 

  2111. matrix_etherpad_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ ':9001') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  2112. 

  2113. matrix_etherpad_base_url: "{{ 'https://' + matrix_server_fqn_dimension + matrix_etherpad_public_endpoint if matrix_etherpad_mode == 'dimension' else 'https://' + matrix_server_fqn_etherpad + '/' }}"

  2114. 

  2115. matrix_etherpad_systemd_required_services_list: |

  2116.   {{

  2117.     ['docker.service']

  2118.     +

  2119.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  2120.   }}

  2121. 

  2122. matrix_etherpad_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  2123. matrix_etherpad_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'etherpad.db', rounds=655555) | to_uuid }}"

  2124. 

  2125. ######################################################################

  2126. #

  2127. # /matrix-etherpad

  2128. #

  2129. ######################################################################

  2130. 

  2131. ######################################################################

  2132. #

  2133. # matrix-dynamic-dns

  2134. #

  2135. ######################################################################

  2136. 

  2137. matrix_dynamic_dns_enabled: false

  2138. 

  2139. ######################################################################

  2140. #

  2141. # /matrix-dynamic-dns

  2142. #

  2143. ######################################################################

  2144. 

  2145. ######################################################################

  2146. #

  2147. # matrix-email2matrix

  2148. #

  2149. ######################################################################

  2150. 

  2151. matrix_email2matrix_enabled: false

  2152. 

  2153. matrix_email2matrix_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm32', 'arm64'] }}"

  2154. 

  2155. ######################################################################

  2156. #

  2157. # /matrix-email2matrix

  2158. #

  2159. ######################################################################

  2160. 

  2161. ######################################################################

  2162. #

  2163. # matrix-jitsi

  2164. #

  2165. ######################################################################

  2166. 

  2167. matrix_jitsi_enabled: false

  2168. 

  2169. # Normally, matrix-nginx-proxy is enabled and nginx can reach jitsi/web over the container network.

  2170. # If matrix-nginx-proxy is not enabled, or you otherwise have a need for it, you can expose

  2171. # the Jitsi HTTP port to the local host.

  2172. matrix_jitsi_web_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ ':13080') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  2173. 

  2174. matrix_jitsi_jvb_container_colibri_ws_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ ':13090') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  2175. 

  2176. matrix_jitsi_prosody_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ ':5280') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  2177. 

  2178. matrix_jitsi_jibri_xmpp_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'jibri', rounds=655555) | to_uuid }}"

  2179. matrix_jitsi_jicofo_auth_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'jicofo', rounds=655555) | to_uuid }}"

  2180. matrix_jitsi_jvb_auth_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'jvb', rounds=655555) | to_uuid }}"

  2181. 

  2182. matrix_jitsi_web_stun_servers: |

  2183.   {{

  2184.     [

  2185.       'stun:' + matrix_server_fqn_matrix + ':5349',

  2186.       'stun:' + matrix_server_fqn_matrix + ':3478',

  2187.     ]

  2188.     if matrix_coturn_enabled

  2189.     else [ 'stun:meet-jit-si-turnrelay.jitsi.net:443']

  2190.   }}

  2191. 

  2192. # If the self-hosted Etherpad instance is available, it will also show up in Jitsi conferences,

  2193. # unless explicitly disabled by setting `matrix_jitsi_etherpad_enabled` to false.

  2194. # Falls back to the scalar.vector.im etherpad in case someone sets `matrix_jitsi_etherpad_enabled` to true,

  2195. # while also setting `matrix_etherpad_enabled` to false.

  2196. matrix_jitsi_etherpad_enabled: "{{ matrix_etherpad_enabled }}"

  2197. matrix_jitsi_etherpad_base: "{{ matrix_etherpad_base_url if matrix_etherpad_enabled else 'https://scalar.vector.im/etherpad' }}"

  2198. 

  2199. # Allow verification using JWT and matrix-UVS

  2200. matrix_jitsi_prosody_auth_matrix_uvs_auth_token: "{{ matrix_user_verification_service_uvs_auth_token }}"

  2201. matrix_jitsi_prosody_auth_matrix_uvs_location: "{{ matrix_user_verification_service_container_url }}"

  2202. 

  2203. matrix_jitsi_self_check_validate_certificates: "{{ false if matrix_ssl_retrieval_method == 'self-signed' else true }}"

  2204. 

  2205. ######################################################################

  2206. #

  2207. # /matrix-jitsi

  2208. #

  2209. ######################################################################

  2210. ######################################################################

  2211. #

  2212. # matrix-ldap-registration-proxy

  2213. #

  2214. ######################################################################

  2215. 

  2216. # This is only for users with a specific LDAP setup

  2217. matrix_ldap_registration_proxy_enabled: false

  2218. 

  2219. ######################################################################

  2220. #

  2221. # /matrix-ldap-registration-proxy

  2222. #

  2223. ######################################################################

  2224. 

  2225. ######################################################################

  2226. #

  2227. # matrix-mailer

  2228. #

  2229. ######################################################################

  2230. 

  2231. # By default, this playbook sets up an exim mailer server (running in a container).

  2232. # This is so that Synapse can send email reminders for unread messages.

  2233. # Other services (like ma1sd), also use the mailer.

  2234. matrix_mailer_enabled: true

  2235. 

  2236. matrix_mailer_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm32', 'arm64'] }}"

  2237. 

  2238. ######################################################################

  2239. #

  2240. # /matrix-mailer

  2241. #

  2242. ######################################################################

  2243. 

  2244. ######################################################################

  2245. #

  2246. # matrix-ma1sd

  2247. #

  2248. ######################################################################

  2249. 

  2250. # We no longer install the ma1sd identity server by default.

  2251. #

  2252. # The main reason we used to install ma1sd by default in the past was to

  2253. # prevent Element from talking to the `matrix.org` / `vector.im` identity servers,

  2254. # by forcing it to talk to our own self-hosted (but otherwise useless) identity server instead,

  2255. # thus preventing contact list leaks.

  2256. #

  2257. # Since Element no longer defaults to using a public identity server if another one is not provided,

  2258. # we can stop installing ma1sd.

  2259. matrix_ma1sd_enabled: false

  2260. 

  2261. matrix_ma1sd_container_image_self_build: "{{ matrix_architecture != 'amd64' }}"

  2262. 

  2263. # Normally, matrix-nginx-proxy is enabled and nginx can reach ma1sd over the container network.

  2264. # If matrix-nginx-proxy is not enabled, or you otherwise have a need for it, you can expose

  2265. # ma1sd's web-server port.

  2266. matrix_ma1sd_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ ':' ~ matrix_ma1sd_container_port | string) if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  2267. 

  2268. 

  2269. # We enable Synapse integration via its Postgres database by default.

  2270. # When using another Identity store, you might wish to disable this and define

  2271. # your own configuration in `matrix_ma1sd_configuration_extension_yaml`.

  2272. matrix_ma1sd_synapsesql_enabled: true

  2273. matrix_ma1sd_synapsesql_type: postgresql

  2274. matrix_ma1sd_synapsesql_connection: //{{ matrix_synapse_database_host }}/{{ matrix_synapse_database_database }}?user={{ matrix_synapse_database_user | urlencode() }}&password={{ matrix_synapse_database_password | urlencode() }}

  2275. 

  2276. matrix_ma1sd_dns_overwrite_enabled: true

  2277. matrix_ma1sd_dns_overwrite_homeserver_client_name: "{{ matrix_server_fqn_matrix }}"

  2278. # The `matrix_ma1sd_dns_overwrite_homeserver_client_value` value when matrix_nginx_proxy_enabled is false covers the general case,

  2279. # but may be inaccurate if matrix-corporal is enabled.

  2280. matrix_ma1sd_dns_overwrite_homeserver_client_value: "{{ matrix_homeserver_container_url }}"

  2281. 

  2282. # By default, we send mail through the `matrix-mailer` service.

  2283. matrix_ma1sd_threepid_medium_email_identity_from: "{{ matrix_mailer_sender_address }}"

  2284. matrix_ma1sd_threepid_medium_email_connectors_smtp_host: "matrix-mailer"

  2285. matrix_ma1sd_threepid_medium_email_connectors_smtp_port: 8025

  2286. matrix_ma1sd_threepid_medium_email_connectors_smtp_tls: 0

  2287. 

  2288. matrix_ma1sd_self_check_validate_certificates: "{{ false if matrix_playbook_ssl_retrieval_method == 'self-signed' else true }}"

  2289. 

  2290. matrix_ma1sd_systemd_required_services_list: |

  2291.   {{

  2292.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  2293.   }}

  2294. 

  2295. matrix_ma1sd_systemd_wanted_services_list: |

  2296.   {{

  2297.     (['matrix-corporal.service'] if matrix_corporal_enabled else ['matrix-' + matrix_homeserver_implementation + '.service'])

  2298.     +

  2299.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  2300.     +

  2301.     (['matrix-mailer.service'] if matrix_mailer_enabled else [])

  2302.   }}

  2303. 

  2304. # Postgres is the default, except if not using internal Postgres server

  2305. matrix_ma1sd_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  2306. matrix_ma1sd_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  2307. matrix_ma1sd_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'ma1sd.db', rounds=655555) | to_uuid }}"

  2308. 

  2309. ######################################################################

  2310. #

  2311. # /matrix-ma1sd

  2312. #

  2313. ######################################################################

  2314. 

  2315. 

  2316. ######################################################################

  2317. #

  2318. # matrix-nginx-proxy

  2319. #

  2320. ######################################################################

  2321. 

  2322. # This playbook installs its own nginx if

  2323. # - it's explicitly enabled

  2324. # - Traefik is in use. Not all services are Traefik-native yet, so we use reverse-proxy to some via a local-only matrix-nginx-proxy

  2325. matrix_nginx_proxy_enabled: "{{ matrix_playbook_reverse_proxy_type in ['playbook-installed-nginx', 'playbook-installed-traefik', 'other-traefik-container'] }}"

  2326. 

  2327. # matrix-nginx-proxy is only to handle HTTPS only if it's the chosen reverse-proxy.

  2328. # It may be enabled even if it's not chosen. See `matrix_nginx_proxy_enabled`.

  2329. matrix_ssl_retrieval_method: "{{ 'lets-encrypt' if matrix_playbook_reverse_proxy_type == 'playbook-installed-nginx' else 'none' }}"

  2330. matrix_nginx_proxy_https_enabled: "{{ matrix_playbook_reverse_proxy_type == 'playbook-installed-nginx' }}"

  2331. 

  2332. # matrix-nginx-proxy is to publish ports only if it's the chosen reverse-proxy.

  2333. # It may be enabled even if it's not chosen. See `matrix_nginx_proxy_enabled`.

  2334. matrix_nginx_proxy_container_http_host_bind_port: "{{ '80' if matrix_playbook_reverse_proxy_type == 'playbook-installed-nginx' else '' }}"

  2335. matrix_nginx_proxy_container_federation_host_bind_port: "{{ matrix_federation_public_port if matrix_playbook_reverse_proxy_type == 'playbook-installed-nginx' else '' }}"

  2336. 

  2337. # matrix-nginx-proxy is to trust reverse-proxy forwarded protocol and headers, unless it's the "main" (chosen) reverse-proxy

  2338. matrix_nginx_proxy_trust_forwarded_proto: "{{ matrix_playbook_reverse_proxy_type != 'playbook-installed-nginx' }}"

  2339. matrix_nginx_proxy_x_forwarded_for: "{{ '$remote_addr' if matrix_playbook_reverse_proxy_type == 'playbook-installed-nginx' else '$proxy_add_x_forwarded_for' }}"

  2340. 

  2341. matrix_nginx_proxy_container_additional_networks: "{{ [matrix_playbook_reverse_proxyable_services_additional_network] if matrix_playbook_reverse_proxyable_services_additional_network else [] }}"

  2342. 

  2343. matrix_nginx_proxy_proxy_matrix_client_api_addr_with_container: "{{ 'matrix-corporal:41080' if matrix_corporal_enabled else 'matrix-nginx-proxy:12080' }}"

  2344. matrix_nginx_proxy_proxy_matrix_client_api_addr_sans_container: "{{ '127.0.0.1:41080' if matrix_corporal_enabled else '127.0.0.1:12080' }}"

  2345. matrix_nginx_proxy_proxy_matrix_client_api_client_max_body_size_mb: |-

  2346.   {{

  2347.     {

  2348.       'synapse': matrix_synapse_max_upload_size_mb,

  2349.       'dendrite': (matrix_dendrite_max_file_size_bytes / 1024 / 1024) | round,

  2350.       'conduit': (matrix_conduit_max_request_size / 1024 / 1024) | round,

  2351.     }[matrix_homeserver_implementation]|int

  2352.   }}

  2353. 

  2354. matrix_nginx_proxy_proxy_matrix_client_api_forwarded_location_synapse_admin_api_enabled: "{{ matrix_synapse_admin_enabled or matrix_bot_matrix_registration_bot_enabled }}"

  2355. 

  2356. matrix_nginx_proxy_proxy_matrix_client_redirect_root_uri_to_domain: "{{ matrix_server_fqn_element if matrix_client_element_enabled else '' }}"

  2357. 

  2358. matrix_nginx_proxy_proxy_matrix_enabled: true

  2359. matrix_nginx_proxy_proxy_element_enabled: "{{ matrix_client_element_enabled }}"

  2360. matrix_nginx_proxy_proxy_hydrogen_enabled: "{{ matrix_client_hydrogen_enabled }}"

  2361. matrix_nginx_proxy_proxy_cinny_enabled: "{{ matrix_client_cinny_enabled }}"

  2362. matrix_nginx_proxy_proxy_buscarron_enabled: "{{ matrix_bot_buscarron_enabled }}"

  2363. matrix_nginx_proxy_proxy_dimension_enabled: "{{ matrix_dimension_enabled }}"

  2364. matrix_nginx_proxy_proxy_etherpad_enabled: "{{ matrix_etherpad_enabled and matrix_etherpad_mode == 'standalone' }}"

  2365. matrix_nginx_proxy_proxy_bot_go_neb_enabled: "{{ matrix_bot_go_neb_enabled }}"

  2366. 

  2367. matrix_nginx_proxy_proxy_jitsi_enabled: "{{ matrix_jitsi_enabled }}"

  2368. matrix_nginx_proxy_proxy_jitsi_manage_wellknown: "{{ matrix_jitsi_require_well_known }}"

  2369. 

  2370. matrix_nginx_proxy_proxy_grafana_enabled: "{{ matrix_grafana_enabled }}"

  2371. matrix_nginx_proxy_proxy_sygnal_enabled: "{{ matrix_sygnal_enabled }}"

  2372. matrix_nginx_proxy_proxy_ntfy_enabled: "{{ matrix_ntfy_enabled }}"

  2373. 

  2374. matrix_nginx_proxy_container_labels_traefik_enabled: "{{ matrix_playbook_traefik_labels_enabled }}"

  2375. matrix_nginx_proxy_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  2376. matrix_nginx_proxy_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  2377. 

  2378. matrix_nginx_proxy_container_labels_traefik_proxy_matrix_enabled: true

  2379. matrix_nginx_proxy_container_labels_traefik_proxy_element_enabled: "{{ matrix_client_element_enabled }}"

  2380. matrix_nginx_proxy_container_labels_traefik_proxy_hydrogen_enabled: "{{ matrix_client_hydrogen_enabled }}"

  2381. matrix_nginx_proxy_container_labels_traefik_proxy_cinny_enabled: "{{ matrix_client_cinny_enabled }}"

  2382. matrix_nginx_proxy_container_labels_traefik_proxy_buscarron_enabled: "{{ matrix_bot_buscarron_enabled }}"

  2383. matrix_nginx_proxy_container_labels_traefik_proxy_dimension_enabled: "{{ matrix_dimension_enabled }}"

  2384. matrix_nginx_proxy_container_labels_traefik_proxy_etherpad_enabled: "{{ matrix_etherpad_enabled and matrix_etherpad_mode == 'standalone' }}"

  2385. matrix_nginx_proxy_container_labels_traefik_proxy_bot_go_neb_enabled: "{{ matrix_bot_go_neb_enabled }}"

  2386. matrix_nginx_proxy_container_labels_traefik_proxy_jitsi_enabled: "{{ matrix_jitsi_enabled }}"

  2387. matrix_nginx_proxy_container_labels_traefik_proxy_grafana_enabled: "{{ matrix_grafana_enabled }}"

  2388. matrix_nginx_proxy_container_labels_traefik_proxy_sygnal_enabled: "{{ matrix_sygnal_enabled }}"

  2389. matrix_nginx_proxy_container_labels_traefik_proxy_ntfy_enabled: "{{ matrix_ntfy_enabled }}"

  2390. 

  2391. matrix_nginx_proxy_proxy_matrix_corporal_api_enabled: "{{ matrix_corporal_enabled and matrix_corporal_http_api_enabled }}"

  2392. matrix_nginx_proxy_proxy_matrix_corporal_api_addr_with_container: "matrix-corporal:41081"

  2393. matrix_nginx_proxy_proxy_matrix_corporal_api_addr_sans_container: "127.0.0.1:41081"

  2394. 

  2395. matrix_nginx_proxy_proxy_matrix_identity_api_enabled: "{{ matrix_ma1sd_enabled }}"

  2396. matrix_nginx_proxy_proxy_matrix_identity_api_addr_with_container: "matrix-ma1sd:{{ matrix_ma1sd_container_port }}"

  2397. matrix_nginx_proxy_proxy_matrix_identity_api_addr_sans_container: "127.0.0.1:{{ matrix_ma1sd_container_port }}"

  2398. 

  2399. # By default, we do TLS termination for the Matrix Federation API (port 8448) at matrix-nginx-proxy.

  2400. # Unless this is handled there OR Synapse's federation listener port is disabled, we'll reverse-proxy.

  2401. matrix_nginx_proxy_proxy_matrix_federation_api_enabled: |-

  2402.   {{

  2403.     {

  2404.       'synapse': (matrix_synapse_federation_port_enabled and not matrix_synapse_tls_federation_listener_enabled),

  2405.       'dendrite': matrix_dendrite_federation_enabled,

  2406.       'conduit': matrix_conduit_allow_federation,

  2407.     }[matrix_homeserver_implementation]|bool

  2408.   }}

  2409. 

  2410. matrix_nginx_proxy_proxy_matrix_federation_api_addr_with_container: "matrix-nginx-proxy:12088"

  2411. matrix_nginx_proxy_proxy_matrix_federation_api_addr_sans_container: "127.0.0.1:12088"

  2412. 

  2413. matrix_nginx_proxy_proxy_synapse_enabled: "{{ matrix_synapse_enabled }}"

  2414. matrix_nginx_proxy_proxy_synapse_client_api_addr_with_container: "{{ 'matrix-synapse-reverse-proxy-companion:8008' if matrix_synapse_reverse_proxy_companion_enabled else 'matrix-synapse:8008' }}"

  2415. matrix_nginx_proxy_proxy_synapse_client_api_addr_sans_container: "127.0.0.1:8008"

  2416. matrix_nginx_proxy_proxy_synapse_federation_api_addr_with_container: "{{ 'matrix-synapse-reverse-proxy-companion:8048' if matrix_synapse_reverse_proxy_companion_enabled else 'matrix-synapse:8048' }}"

  2417. matrix_nginx_proxy_proxy_synapse_federation_api_addr_sans_container: "127.0.0.1:8048"

  2418. 

  2419. matrix_nginx_proxy_proxy_dendrite_enabled: "{{ matrix_dendrite_enabled }}"

  2420. matrix_nginx_proxy_proxy_dendrite_client_api_addr_with_container: "matrix-dendrite:{{ matrix_dendrite_http_bind_port | string }}"

  2421. matrix_nginx_proxy_proxy_dendrite_client_api_addr_sans_container: "127.0.0.1:{{ matrix_dendrite_http_bind_port | string }}"

  2422. matrix_nginx_proxy_proxy_dendrite_federation_api_addr_with_container: "matrix-dendrite:{{ matrix_dendrite_http_bind_port | string }}"

  2423. matrix_nginx_proxy_proxy_dendrite_federation_api_addr_sans_container: "127.0.0.1:{{ matrix_dendrite_http_bind_port | string }}"

  2424. 

  2425. matrix_nginx_proxy_proxy_conduit_enabled: "{{ matrix_conduit_enabled }}"

  2426. matrix_nginx_proxy_proxy_conduit_client_api_addr_with_container: "matrix-conduit:{{ matrix_conduit_port_number|string }}"

  2427. matrix_nginx_proxy_proxy_conduit_client_api_addr_sans_container: "127.0.0.1:{{ matrix_conduit_port_number|string }}"

  2428. matrix_nginx_proxy_proxy_conduit_federation_api_addr_with_container: "matrix-conduit:{{ matrix_conduit_port_number|string }}"

  2429. matrix_nginx_proxy_proxy_conduit_federation_api_addr_sans_container: "127.0.0.1:{{ matrix_conduit_port_number|string }}"

  2430. 

  2431. # When matrix-nginx-proxy is disabled, the actual port number that the vhost uses may begin to matter.

  2432. matrix_nginx_proxy_proxy_matrix_federation_port: "{{ matrix_federation_public_port }}"

  2433. 

  2434. matrix_nginx_proxy_proxy_matrix_user_directory_search_enabled: "{{ matrix_ma1sd_enabled }}"

  2435. matrix_nginx_proxy_proxy_matrix_user_directory_search_addr_with_container: "{{ matrix_nginx_proxy_proxy_matrix_identity_api_addr_with_container }}"

  2436. matrix_nginx_proxy_proxy_matrix_user_directory_search_addr_sans_container: "{{ matrix_nginx_proxy_proxy_matrix_identity_api_addr_sans_container }}"

  2437. 

  2438. matrix_nginx_proxy_self_check_validate_certificates: "{{ false if matrix_playbook_ssl_retrieval_method == 'self-signed' else true }}"

  2439. 

  2440. # OCSP stapling does not make sense when self-signed certificates are used.

  2441. # See https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1073

  2442. # and https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1074

  2443. matrix_nginx_proxy_ocsp_stapling_enabled: "{{ matrix_playbook_ssl_retrieval_method != 'self-signed' }}"

  2444. 

  2445. matrix_nginx_proxy_systemd_wanted_services_list: |

  2446.   {{

  2447.     ['matrix-' + matrix_homeserver_implementation + '.service']

  2448.     +

  2449.     (matrix_synapse_webserving_workers_systemd_services_list if matrix_homeserver_implementation == 'synapse' and matrix_synapse_workers_enabled else [])

  2450.     +

  2451.     (['matrix-synapse-reverse-proxy-companion.service'] if matrix_synapse_reverse_proxy_companion_enabled else [])

  2452.     +

  2453.     (['matrix-corporal.service'] if matrix_corporal_enabled else [])

  2454.     +

  2455.     (['matrix-ma1sd.service'] if matrix_ma1sd_enabled else [])

  2456.     +

  2457.     (['matrix-client-cinny.service'] if matrix_client_cinny_enabled else [])

  2458.     +

  2459.     (['matrix-bot-buscarron.service'] if matrix_bot_buscarron_enabled else [])

  2460.     +

  2461.     (['matrix-client-element.service'] if matrix_client_element_enabled else [])

  2462.     +

  2463.     (['matrix-client-hydrogen.service'] if matrix_client_hydrogen_enabled else [])

  2464.     +

  2465.     (['matrix-grafana.service'] if matrix_grafana_enabled else [])

  2466.     +

  2467.     (['matrix-dimension.service'] if matrix_dimension_enabled else [])

  2468.     +

  2469.     (['matrix-sygnal.service'] if matrix_sygnal_enabled else [])

  2470.     +

  2471.     (['matrix-ntfy.service'] if matrix_ntfy_enabled else [])

  2472.     +

  2473.     (['matrix-jitsi.service'] if matrix_jitsi_enabled else [])

  2474.     +

  2475.     (['matrix-bot-go-neb.service'] if matrix_bot_go_neb_enabled else [])

  2476.     +

  2477.     (['matrix-etherpad.service'] if matrix_etherpad_enabled else [])

  2478.     +

  2479.     (['matrix-hookshot.service'] if matrix_hookshot_enabled else [])

  2480.   }}

  2481. 

  2482. matrix_ssl_domains_to_obtain_certificates_for: |

  2483.   {{

  2484.     ([matrix_server_fqn_matrix])

  2485.     +

  2486.     ([matrix_server_fqn_element] if matrix_client_element_enabled else [])

  2487.     +

  2488.     ([matrix_nginx_proxy_proxy_riot_compat_redirect_hostname] if matrix_nginx_proxy_proxy_riot_compat_redirect_enabled else [])

  2489.     +

  2490.     ([matrix_server_fqn_hydrogen] if matrix_client_hydrogen_enabled else [])

  2491.     +

  2492.     ([matrix_server_fqn_cinny] if matrix_client_cinny_enabled else [])

  2493.     +

  2494.     ([matrix_server_fqn_buscarron] if matrix_bot_buscarron_enabled else [])

  2495.     +

  2496.     ([matrix_server_fqn_dimension] if matrix_dimension_enabled else [])

  2497.     +

  2498.     ([matrix_server_fqn_etherpad] if (matrix_etherpad_enabled and matrix_etherpad_mode == 'standalone') else [])

  2499.     +

  2500.     ([matrix_server_fqn_bot_go_neb] if matrix_bot_go_neb_enabled else [])

  2501.     +

  2502.     ([matrix_server_fqn_jitsi] if matrix_jitsi_enabled else [])

  2503.     +

  2504.     ([matrix_server_fqn_grafana] if matrix_grafana_enabled else [])

  2505.     +

  2506.     ([matrix_server_fqn_sygnal] if matrix_sygnal_enabled else [])

  2507.     +

  2508.     ([matrix_server_fqn_ntfy] if matrix_ntfy_enabled else [])

  2509.     +

  2510.     (matrix_bot_postmoogle_domains if matrix_bot_postmoogle_enabled else [])

  2511.     +

  2512.     ([matrix_domain] if matrix_nginx_proxy_base_domain_serving_enabled else [])

  2513.     +

  2514.     matrix_ssl_additional_domains_to_obtain_certificates_for

  2515.   }}

  2516. 

  2517. matrix_ssl_architecture: "{{

  2518. 	{

  2519. 		'amd64': 'amd64',

  2520. 		'arm32': 'arm32v6',

  2521. 		'arm64': 'arm64v8',

  2522. 	}[matrix_architecture]

  2523. }}"

  2524. 

  2525. matrix_ssl_pre_obtaining_required_service_name: "{{ 'matrix-dynamic-dns' if matrix_dynamic_dns_enabled else '' }}"

  2526. 

  2527. matrix_nginx_proxy_access_log_syslog_integration_enabled: "{{ matrix_prometheus_nginxlog_exporter_enabled }}"

  2528. matrix_nginx_proxy_access_log_syslog_integration_server_port: "{{ (matrix_prometheus_nginxlog_exporter_container_hostname | string +':'+ matrix_prometheus_nginxlog_exporter_container_syslog_port | string) | default('') }}"

  2529. 

  2530. ######################################################################

  2531. #

  2532. # /matrix-nginx-proxy

  2533. #

  2534. ######################################################################

  2535. 

  2536. 

  2537. ########################################################################

  2538. #                                                                      #

  2539. # com.devture.ansible.role.postgres                                    #

  2540. #                                                                      #

  2541. ########################################################################

  2542. 

  2543. # To completely disable installing Postgres, use `devture_postgres_enabled: false`.

  2544. 

  2545. devture_postgres_identifier: matrix-postgres

  2546. 

  2547. devture_postgres_architecture: "{{ matrix_architecture }}"

  2548. 

  2549. devture_postgres_base_path: "{{ matrix_base_data_path }}/postgres"

  2550. 

  2551. devture_postgres_container_network: "{{ matrix_docker_network }}"

  2552. 

  2553. devture_postgres_uid: "{{ matrix_user_uid }}"

  2554. devture_postgres_gid: "{{ matrix_user_gid }}"

  2555. 

  2556. devture_postgres_connection_username: matrix

  2557. devture_postgres_db_name: matrix

  2558. 

  2559. devture_postgres_systemd_services_to_stop_for_maintenance_list: |

  2560.   {{

  2561.     ['matrix-' + matrix_homeserver_implementation + '.service']

  2562.   }}

  2563. 

  2564. devture_postgres_managed_databases_auto: |

  2565.   {{

  2566.     ([{

  2567.       'name': matrix_synapse_database_database,

  2568.       'username': matrix_synapse_database_user,

  2569.       'password': matrix_synapse_database_password,

  2570.     }] if (matrix_synapse_enabled and matrix_synapse_database_host == devture_postgres_connection_hostname) else [])

  2571.     +

  2572.     ([{

  2573.       'name': matrix_dendrite_federationapi_database,

  2574.       'username': matrix_dendrite_database_user,

  2575.       'password': matrix_dendrite_database_password,

  2576.     },{

  2577.       'name': matrix_dendrite_keyserver_database,

  2578.       'username': matrix_dendrite_database_user,

  2579.       'password': matrix_dendrite_database_password,

  2580.     },{

  2581.       'name': matrix_dendrite_mediaapi_database,

  2582.       'username': matrix_dendrite_database_user,

  2583.       'password': matrix_dendrite_database_password,

  2584.     },{

  2585.       'name': matrix_dendrite_room_database,

  2586.       'username': matrix_dendrite_database_user,

  2587.       'password': matrix_dendrite_database_password,

  2588.     },{

  2589.       'name': matrix_dendrite_syncapi_database,

  2590.       'username': matrix_dendrite_database_user,

  2591.       'password': matrix_dendrite_database_password,

  2592.     },{

  2593.       'name': matrix_dendrite_userapi_database,

  2594.       'username': matrix_dendrite_database_user,

  2595.       'password': matrix_dendrite_database_password,

  2596.     },{

  2597.       'name': matrix_dendrite_pushserver_database,

  2598.       'username': matrix_dendrite_database_user,

  2599.       'password': matrix_dendrite_database_password,

  2600.     },{

  2601.       'name': matrix_dendrite_mscs_database,

  2602.       'username': matrix_dendrite_database_user,

  2603.       'password': matrix_dendrite_database_password,

  2604.     }] if (matrix_dendrite_enabled and matrix_dendrite_database_hostname == devture_postgres_connection_hostname) else [])

  2605.     +

  2606.     ([{

  2607.       'name': matrix_ma1sd_database_name,

  2608.       'username': matrix_ma1sd_database_username,

  2609.       'password': matrix_ma1sd_database_password,

  2610.     }] if (matrix_ma1sd_enabled and matrix_ma1sd_database_engine == 'postgres' and matrix_ma1sd_database_hostname == devture_postgres_connection_hostname) else [])

  2611.     +

  2612.     ([{

  2613.       'name': matrix_bot_matrix_reminder_bot_database_name,

  2614.       'username': matrix_bot_matrix_reminder_bot_database_username,

  2615.       'password': matrix_bot_matrix_reminder_bot_database_password,

  2616.     }] if (matrix_bot_matrix_reminder_bot_enabled and matrix_bot_matrix_reminder_bot_database_engine == 'postgres' and matrix_bot_matrix_reminder_bot_database_hostname == devture_postgres_connection_hostname) else [])

  2617.     +

  2618.     ([{

  2619.       'name': matrix_bot_honoroit_database_name,

  2620.       'username': matrix_bot_honoroit_database_username,

  2621.       'password': matrix_bot_honoroit_database_password,

  2622.     }] if (matrix_bot_honoroit_enabled and matrix_bot_honoroit_database_engine == 'postgres' and matrix_bot_honoroit_database_hostname == devture_postgres_connection_hostname) else [])

  2623.     +

  2624.     ([{

  2625.       'name': matrix_bot_postmoogle_database_name,

  2626.       'username': matrix_bot_postmoogle_database_username,

  2627.       'password': matrix_bot_postmoogle_database_password,

  2628.     }] if (matrix_bot_postmoogle_enabled and matrix_bot_postmoogle_database_engine == 'postgres' and matrix_bot_postmoogle_database_hostname == devture_postgres_connection_hostname) else [])

  2629.     +

  2630.     ([{

  2631.       'name': matrix_bot_maubot_database_name,

  2632.       'username': matrix_bot_maubot_database_username,

  2633.       'password': matrix_bot_maubot_database_password,

  2634.     }] if (matrix_bot_maubot_enabled  and matrix_bot_maubot_database_engine == 'postgres' and matrix_bot_maubot_database_hostname == devture_postgres_connection_hostname) else [])

  2635.     +

  2636.     ([{

  2637.       'name': matrix_bot_buscarron_database_name,

  2638.       'username': matrix_bot_buscarron_database_username,

  2639.       'password': matrix_bot_buscarron_database_password,

  2640.     }] if (matrix_bot_buscarron_enabled and matrix_bot_buscarron_database_engine == 'postgres' and matrix_bot_buscarron_database_hostname == devture_postgres_connection_hostname) else [])

  2641.     +

  2642.     ([{

  2643.       'name': matrix_registration_database_name,

  2644.       'username': matrix_registration_database_username,

  2645.       'password': matrix_registration_database_password,

  2646.     }] if (matrix_registration_enabled and matrix_registration_database_engine == 'postgres' and matrix_registration_database_hostname == devture_postgres_connection_hostname) else [])

  2647.     +

  2648.     ([{

  2649.       'name': matrix_appservice_discord_database_name,

  2650.       'username': matrix_appservice_discord_database_username,

  2651.       'password': matrix_appservice_discord_database_password,

  2652.     }] if (matrix_appservice_discord_enabled and matrix_appservice_discord_database_engine == 'postgres' and matrix_appservice_discord_database_hostname == devture_postgres_connection_hostname) else [])

  2653.     +

  2654.     ([{

  2655.       'name': matrix_appservice_slack_database_name,

  2656.       'username': matrix_appservice_slack_database_username,

  2657.       'password': matrix_appservice_slack_database_password,

  2658.     }] if (matrix_appservice_slack_enabled and matrix_appservice_slack_database_engine == 'postgres' and matrix_appservice_slack_database_hostname == devture_postgres_connection_hostname) else [])

  2659.     +

  2660.     ([{

  2661.       'name': matrix_appservice_irc_database_name,

  2662.       'username': matrix_appservice_irc_database_username,

  2663.       'password': matrix_appservice_irc_database_password,

  2664.     }] if (matrix_appservice_irc_enabled and matrix_appservice_irc_database_engine == 'postgres' and matrix_appservice_irc_database_hostname == devture_postgres_connection_hostname) else [])

  2665.     +

  2666.     ([{

  2667.       'name': matrix_appservice_kakaotalk_database_name,

  2668.       'username': matrix_appservice_kakaotalk_database_username,

  2669.       'password': matrix_appservice_kakaotalk_database_password,

  2670.     }] if (matrix_appservice_kakaotalk_enabled and matrix_appservice_kakaotalk_database_engine == 'postgres' and matrix_appservice_kakaotalk_database_hostname == devture_postgres_connection_hostname) else [])

  2671.     +

  2672.     ([{

  2673.       'name': matrix_beeper_linkedin_database_name,

  2674.       'username': matrix_beeper_linkedin_database_username,

  2675.       'password': matrix_beeper_linkedin_database_password,

  2676.     }] if (matrix_beeper_linkedin_enabled and matrix_beeper_linkedin_database_engine == 'postgres' and matrix_beeper_linkedin_database_hostname == devture_postgres_connection_hostname) else [])

  2677.     +

  2678.     ([{

  2679.       'name': matrix_go_skype_bridge_database_name,

  2680.       'username': matrix_go_skype_bridge_database_username,

  2681.       'password': matrix_go_skype_bridge_database_password,

  2682.     }] if (matrix_go_skype_bridge_enabled and matrix_go_skype_bridge_database_engine == 'postgres' and matrix_go_skype_bridge_database_hostname == devture_postgres_connection_hostname) else [])

  2683.     +

  2684.     ([{

  2685.       'name': matrix_mautrix_facebook_database_name,

  2686.       'username': matrix_mautrix_facebook_database_username,

  2687.       'password': matrix_mautrix_facebook_database_password,

  2688.     }] if (matrix_mautrix_facebook_enabled and matrix_mautrix_facebook_database_engine == 'postgres' and matrix_mautrix_facebook_database_hostname == devture_postgres_connection_hostname) else [])

  2689.     +

  2690.     ([{

  2691.       'name': matrix_mautrix_hangouts_database_name,

  2692.       'username': matrix_mautrix_hangouts_database_username,

  2693.       'password': matrix_mautrix_hangouts_database_password,

  2694.     }] if (matrix_mautrix_hangouts_enabled and matrix_mautrix_hangouts_database_engine == 'postgres' and matrix_mautrix_hangouts_database_hostname == devture_postgres_connection_hostname) else [])

  2695.     +

  2696.     ([{

  2697.       'name': matrix_mautrix_googlechat_database_name,

  2698.       'username': matrix_mautrix_googlechat_database_username,

  2699.       'password': matrix_mautrix_googlechat_database_password,

  2700.     }] if (matrix_mautrix_googlechat_enabled and matrix_mautrix_googlechat_database_engine == 'postgres' and matrix_mautrix_googlechat_database_hostname == devture_postgres_connection_hostname) else [])

  2701.     +

  2702.     ([{

  2703.       'name': matrix_mautrix_instagram_database_name,

  2704.       'username': matrix_mautrix_instagram_database_username,

  2705.       'password': matrix_mautrix_instagram_database_password,

  2706.     }] if (matrix_mautrix_instagram_enabled and matrix_mautrix_instagram_database_engine == 'postgres' and matrix_mautrix_instagram_database_hostname == devture_postgres_connection_hostname) else [])

  2707.     +

  2708.     ([{

  2709.       'name': matrix_mautrix_signal_database_name,

  2710.       'username': matrix_mautrix_signal_database_username,

  2711.       'password': matrix_mautrix_signal_database_password,

  2712.     }] if (matrix_mautrix_signal_enabled and matrix_mautrix_signal_database_engine == 'postgres' and matrix_mautrix_signal_database_hostname == devture_postgres_connection_hostname) else [])

  2713.     +

  2714.     ([{

  2715.       'name': matrix_mautrix_telegram_database_name,

  2716.       'username': matrix_mautrix_telegram_database_username,

  2717.       'password': matrix_mautrix_telegram_database_password,

  2718.     }] if (matrix_mautrix_telegram_enabled and matrix_mautrix_telegram_database_engine == 'postgres' and matrix_mautrix_telegram_database_hostname == devture_postgres_connection_hostname) else [])

  2719.     +

  2720.     ([{

  2721.       'name': matrix_mautrix_twitter_database_name,

  2722.       'username': matrix_mautrix_twitter_database_username,

  2723.       'password': matrix_mautrix_twitter_database_password,

  2724.     }] if (matrix_mautrix_twitter_enabled and matrix_mautrix_twitter_database_engine == 'postgres' and matrix_mautrix_twitter_database_hostname == devture_postgres_connection_hostname) else [])

  2725.     +

  2726.     ([{

  2727.       'name': matrix_mautrix_whatsapp_database_name,

  2728.       'username': matrix_mautrix_whatsapp_database_username,

  2729.       'password': matrix_mautrix_whatsapp_database_password,

  2730.     }] if (matrix_mautrix_whatsapp_enabled and matrix_mautrix_whatsapp_database_engine == 'postgres' and matrix_mautrix_whatsapp_database_hostname == devture_postgres_connection_hostname) else [])

  2731.     +

  2732.     ([{

  2733.       'name': matrix_mautrix_discord_database_name,

  2734.       'username': matrix_mautrix_discord_database_username,

  2735.       'password': matrix_mautrix_discord_database_password,

  2736.     }] if (matrix_mautrix_discord_enabled and matrix_mautrix_discord_database_engine == 'postgres' and matrix_mautrix_discord_database_hostname == devture_postgres_connection_hostname) else [])

  2737.     +

  2738.     ([{

  2739.       'name': matrix_mautrix_slack_database_name,

  2740.       'username': matrix_mautrix_slack_database_username,

  2741.       'password': matrix_mautrix_slack_database_password,

  2742.     }] if (matrix_mautrix_slack_enabled and matrix_mautrix_slack_database_engine == 'postgres' and matrix_mautrix_slack_database_hostname == devture_postgres_connection_hostname) else [])

  2743.     +

  2744.     ([{

  2745.       'name': matrix_mx_puppet_slack_database_name,

  2746.       'username': matrix_mx_puppet_slack_database_username,

  2747.       'password': matrix_mx_puppet_slack_database_password,

  2748.     }] if (matrix_mx_puppet_slack_enabled and matrix_mx_puppet_slack_database_engine == 'postgres' and matrix_mx_puppet_slack_database_hostname == devture_postgres_connection_hostname) else [])

  2749.     +

  2750.     ([{

  2751.       'name': matrix_mx_puppet_twitter_database_name,

  2752.       'username': matrix_mx_puppet_twitter_database_username,

  2753.       'password': matrix_mx_puppet_twitter_database_password,

  2754.     }] if (matrix_mx_puppet_twitter_enabled and matrix_mx_puppet_twitter_database_engine == 'postgres' and matrix_mx_puppet_twitter_database_hostname == devture_postgres_connection_hostname) else [])

  2755.     +

  2756.     ([{

  2757.       'name': matrix_mx_puppet_instagram_database_name,

  2758.       'username': matrix_mx_puppet_instagram_database_username,

  2759.       'password': matrix_mx_puppet_instagram_database_password,

  2760.     }] if (matrix_mx_puppet_instagram_enabled and matrix_mx_puppet_instagram_database_engine == 'postgres' and matrix_mx_puppet_instagram_database_hostname == devture_postgres_connection_hostname) else [])

  2761.     +

  2762.     ([{

  2763.       'name': matrix_mx_puppet_discord_database_name,

  2764.       'username': matrix_mx_puppet_discord_database_username,

  2765.       'password': matrix_mx_puppet_discord_database_password,

  2766.     }] if (matrix_mx_puppet_discord_enabled  and matrix_mx_puppet_discord_database_engine == 'postgres' and matrix_mx_puppet_discord_database_hostname == devture_postgres_connection_hostname) else [])

  2767.     +

  2768.     ([{

  2769.       'name': matrix_mx_puppet_steam_database_name,

  2770.       'username': matrix_mx_puppet_steam_database_username,

  2771.       'password': matrix_mx_puppet_steam_database_password,

  2772.     }] if (matrix_mx_puppet_steam_enabled and matrix_mx_puppet_steam_database_engine == 'postgres' and matrix_mx_puppet_steam_database_hostname == devture_postgres_connection_hostname) else [])

  2773.     +

  2774.     ([{

  2775.       'name': matrix_mx_puppet_groupme_database_name,

  2776.       'username': matrix_mx_puppet_groupme_database_username,

  2777.       'password': matrix_mx_puppet_groupme_database_password,

  2778.     }] if (matrix_mx_puppet_groupme_enabled and matrix_mx_puppet_groupme_database_engine == 'postgres' and matrix_mx_puppet_groupme_database_hostname == devture_postgres_connection_hostname) else [])

  2779.     +

  2780.     ([{

  2781.       'name': matrix_dimension_database_name,

  2782.       'username': matrix_dimension_database_username,

  2783.       'password': matrix_dimension_database_password,

  2784.     }] if (matrix_dimension_enabled and matrix_dimension_database_engine == 'postgres' and matrix_dimension_database_hostname == devture_postgres_connection_hostname) else [])

  2785.     +

  2786.     ([{

  2787.       'name': matrix_etherpad_database_name,

  2788.       'username': matrix_etherpad_database_username,

  2789.       'password': matrix_etherpad_database_password,

  2790.     }] if (matrix_etherpad_enabled and matrix_etherpad_database_engine == 'postgres' and matrix_etherpad_database_hostname == devture_postgres_connection_hostname) else [])

  2791.     +

  2792.     ([{

  2793.       'name': prometheus_postgres_exporter_database_name,

  2794.       'username': prometheus_postgres_exporter_database_username,

  2795.       'password': prometheus_postgres_exporter_database_password,

  2796.     }] if (prometheus_postgres_exporter_enabled and prometheus_postgres_exporter_database_hostname == devture_postgres_connection_hostname) else [])

  2797. 

  2798.    }}

  2799. 

  2800. ########################################################################

  2801. #                                                                      #

  2802. # /com.devture.ansible.role.postgres                                   #

  2803. #                                                                      #

  2804. ########################################################################

  2805. 

  2806. 

  2807. ########################################################################

  2808. #                                                                      #

  2809. # com.devture.ansible.role.postgres_backup                             #

  2810. #                                                                      #

  2811. ########################################################################

  2812. 

  2813. devture_postgres_backup_enabled: false

  2814. 

  2815. devture_postgres_backup_identifier: matrix-postgres-backup

  2816. 

  2817. devture_postgres_backup_architecture: "{{ matrix_architecture }}"

  2818. 

  2819. devture_postgres_backup_base_path: "{{ matrix_base_data_path }}/postgres-backup"

  2820. 

  2821. devture_postgres_backup_systemd_required_services_list: |

  2822.   {{

  2823.     (['docker.service'])

  2824.     +

  2825.     ([(devture_postgres_identifier + '.service')] if devture_postgres_enabled else [])

  2826.   }}

  2827. 

  2828. devture_postgres_backup_container_network: "{{ matrix_docker_network }}"

  2829. 

  2830. devture_postgres_backup_uid: "{{ matrix_user_uid }}"

  2831. devture_postgres_backup_gid: "{{ matrix_user_gid }}"

  2832. 

  2833. devture_postgres_backup_connection_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  2834. devture_postgres_backup_connection_port: "{{ devture_postgres_connection_port if devture_postgres_enabled else 5432 }}"

  2835. devture_postgres_backup_connection_username: "{{ devture_postgres_connection_username if devture_postgres_enabled else '' }}"

  2836. devture_postgres_backup_connection_password: "{{ devture_postgres_connection_password if devture_postgres_enabled else '' }}"

  2837. 

  2838. devture_postgres_backup_postgres_data_path: "{{ devture_postgres_data_path if devture_postgres_enabled else '' }}"

  2839. 

  2840. devture_postgres_backup_databases: "{{ devture_postgres_managed_databases | map(attribute='name') if devture_postgres_enabled else [] }}"

  2841. 

  2842. ########################################################################

  2843. #                                                                      #

  2844. # /com.devture.ansible.role.postgres_backup                            #

  2845. #                                                                      #

  2846. ########################################################################

  2847. 

  2848. 

  2849. ######################################################################

  2850. #

  2851. # matrix-sygnal

  2852. #

  2853. ######################################################################

  2854. 

  2855. # Most people don't need their own push-server, because they also need their own app to utilize it from.

  2856. matrix_sygnal_enabled: false

  2857. 

  2858. # If someone instals Prometheus via the playbook, they most likely wish to monitor Sygnal.

  2859. matrix_sygnal_metrics_prometheus_enabled: "{{ matrix_prometheus_enabled }}"

  2860. 

  2861. matrix_sygnal_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ ':6000') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  2862. 

  2863. ######################################################################

  2864. #

  2865. # /matrix-sygnal

  2866. #

  2867. ######################################################################

  2868. 

  2869. ######################################################################

  2870. #

  2871. # matrix-ntfy

  2872. #

  2873. ######################################################################

  2874. 

  2875. matrix_ntfy_enabled: false

  2876. 

  2877. matrix_ntfy_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ ':2586') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  2878. 

  2879. ######################################################################

  2880. #

  2881. # /matrix-ntfy

  2882. #

  2883. ######################################################################

  2884. 

  2885. ######################################################################

  2886. #

  2887. # matrix-redis

  2888. #

  2889. ######################################################################

  2890. 

  2891. matrix_redis_enabled: "{{ matrix_synapse_workers_enabled }}"

  2892. 

  2893. ######################################################################

  2894. #

  2895. # /matrix-redis

  2896. #

  2897. ######################################################################

  2898. 

  2899. ######################################################################

  2900. #

  2901. # matrix-client-element

  2902. #

  2903. ######################################################################

  2904. 

  2905. # By default, this playbook installs the Element web UI on the `matrix_server_fqn_element` domain.

  2906. # If you wish to connect to your Matrix server by other means, you may wish to disable this.

  2907. matrix_client_element_enabled: true

  2908. 

  2909. matrix_client_element_container_image_self_build: "{{ matrix_architecture not in ['arm64', 'amd64'] }}"

  2910. 

  2911. # Normally, matrix-nginx-proxy is enabled and nginx can reach Element over the container network.

  2912. # If matrix-nginx-proxy is not enabled, or you otherwise have a need for it, you can expose

  2913. # the Element HTTP port to the local host.

  2914. matrix_client_element_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ ':8765') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  2915. 

  2916. matrix_client_element_default_hs_url: "{{ matrix_homeserver_url }}"

  2917. matrix_client_element_default_is_url: "{{ matrix_identity_server_url }}"

  2918. 

  2919. # Use Dimension if enabled, otherwise fall back to Scalar

  2920. matrix_client_element_integrations_ui_url: "{{ matrix_dimension_integrations_ui_url if matrix_dimension_enabled else 'https://scalar.vector.im/' }}"

  2921. matrix_client_element_integrations_rest_url: "{{ matrix_dimension_integrations_rest_url if matrix_dimension_enabled else 'https://scalar.vector.im/api' }}"

  2922. matrix_client_element_integrations_widgets_urls: "{{ matrix_dimension_integrations_widgets_urls if matrix_dimension_enabled else ['https://scalar.vector.im/api'] }}"

  2923. matrix_client_element_integrations_jitsi_widget_url: "{{ matrix_dimension_integrations_jitsi_widget_url if matrix_dimension_enabled else 'https://scalar.vector.im/api/widgets/jitsi.html' }}"

  2924. 

  2925. matrix_client_element_self_check_validate_certificates: "{{ false if matrix_playbook_ssl_retrieval_method == 'self-signed' else true }}"

  2926. 

  2927. matrix_client_element_registration_enabled: "{{ matrix_synapse_enable_registration }}"

  2928. 

  2929. matrix_client_element_enable_presence_by_hs_url: |

  2930.   {{

  2931.     none

  2932.     if matrix_synapse_presence_enabled

  2933.     else {matrix_client_element_default_hs_url: false}

  2934.   }}

  2935. 

  2936. matrix_client_element_welcome_user_id: ~

  2937. 

  2938. matrix_client_element_jitsi_preferredDomain: "{{ matrix_server_fqn_jitsi if matrix_jitsi_enabled else '' }}"

  2939. 

  2940. ######################################################################

  2941. #

  2942. # /matrix-client-element

  2943. #

  2944. ######################################################################

  2945. 

  2946. ######################################################################

  2947. #

  2948. # matrix-client-hydrogen

  2949. #

  2950. ######################################################################

  2951. 

  2952. matrix_client_hydrogen_enabled: false

  2953. 

  2954. matrix_client_hydrogen_container_image_self_build: "{{ matrix_architecture not in ['amd64'] }}"

  2955. 

  2956. # Normally, matrix-nginx-proxy is enabled and nginx can reach Hydrogen over the container network.

  2957. # If matrix-nginx-proxy is not enabled, or you otherwise have a need for it, you can expose

  2958. # the HTTP port to the local host.

  2959. matrix_client_hydrogen_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ ':8768') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  2960. 

  2961. matrix_client_hydrogen_default_hs_url: "{{ matrix_homeserver_url }}"

  2962. 

  2963. matrix_client_hydrogen_self_check_validate_certificates: "{{ false if matrix_playbook_ssl_retrieval_method == 'self-signed' else true }}"

  2964. 

  2965. ######################################################################

  2966. #

  2967. # /matrix-client-hydrogen

  2968. #

  2969. ######################################################################

  2970. 

  2971. ######################################################################

  2972. #

  2973. # matrix-client-cinny

  2974. #

  2975. ######################################################################

  2976. 

  2977. matrix_client_cinny_enabled: false

  2978. 

  2979. matrix_client_cinny_container_image_self_build: "{{ matrix_architecture not in ['arm64', 'amd64'] }}"

  2980. 

  2981. # Normally, matrix-nginx-proxy is enabled and nginx can reach Cinny over the container network.

  2982. # If matrix-nginx-proxy is not enabled, or you otherwise have a need for it, you can expose

  2983. # the HTTP port to the local host.

  2984. matrix_client_cinny_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ ':8080') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  2985. 

  2986. matrix_client_cinny_default_hs_url: "{{ matrix_homeserver_url }}"

  2987. 

  2988. matrix_client_cinny_self_check_validate_certificates: "{{ false if matrix_playbook_ssl_retrieval_method == 'self-signed' else true }}"

  2989. 

  2990. ######################################################################

  2991. #

  2992. # /matrix-client-cinny

  2993. #

  2994. ######################################################################

  2995. 

  2996. ######################################################################

  2997. #

  2998. # matrix-synapse

  2999. #

  3000. ######################################################################

  3001. 

  3002. matrix_synapse_enabled: "{{ matrix_homeserver_implementation == 'synapse' }}"

  3003. 

  3004. matrix_synapse_container_image_self_build: "{{ matrix_architecture not in ['arm64', 'amd64'] }}"

  3005. 

  3006. # When ma1sd is enabled, we can use it to validate phone numbers. It's something that the homeserver cannot do by itself.

  3007. matrix_synapse_account_threepid_delegates_msisdn: "{{ 'http://matrix-ma1sd:' + matrix_ma1sd_container_port | string if matrix_ma1sd_enabled else '' }}"

  3008. 

  3009. # For exposing the Matrix Federation API's TLS port (HTTPS) to the internet on all network interfaces.

  3010. matrix_synapse_container_federation_api_tls_host_bind_port: "{{ matrix_federation_public_port if (matrix_synapse_federation_enabled and matrix_synapse_tls_federation_listener_enabled) else '' }}"

  3011. #

  3012. # For exposing the Synapse Metrics API's port (plain HTTP) to the local host.

  3013. matrix_synapse_container_metrics_api_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ ':9100') if matrix_synapse_metrics_enabled and matrix_playbook_service_host_bind_interface_prefix else '' }}"

  3014. #

  3015. # For exposing the Synapse Manhole port (plain HTTP) to the local host.

  3016. matrix_synapse_container_manhole_api_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ ':9000') if matrix_synapse_metrics_enabled and matrix_playbook_service_host_bind_interface_prefix else '' }}"

  3017. #

  3018. # For exposing the Synapse worker (and metrics) ports to the local host.

  3019. matrix_synapse_workers_container_host_bind_address: "{{ matrix_playbook_service_host_bind_interface_prefix[0:-1] if (matrix_synapse_workers_enabled and matrix_playbook_service_host_bind_interface_prefix) else '' }}"

  3020. 

  3021. matrix_synapse_database_host: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  3022. matrix_synapse_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'synapse.db', rounds=655555) | to_uuid }}"

  3023. 

  3024. matrix_synapse_macaroon_secret_key: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'synapse.mac', rounds=655555) | to_uuid }}"

  3025. 

  3026. # We do not enable TLS in Synapse by default.

  3027. # TLS is handled by the matrix-nginx-proxy, which proxies the requests to Synapse.

  3028. matrix_synapse_tls_federation_listener_enabled: false

  3029. matrix_synapse_tls_certificate_path: ~

  3030. matrix_synapse_tls_private_key_path: ~

  3031. 

  3032. matrix_synapse_federation_port_openid_resource_required: "{{ not matrix_synapse_federation_enabled and (matrix_dimension_enabled or matrix_ma1sd_enabled or matrix_user_verification_service_enabled) }}"

  3033. 

  3034. # If someone instals Prometheus via the playbook, they most likely wish to monitor Synapse.

  3035. matrix_synapse_metrics_enabled: "{{ matrix_prometheus_enabled }}"

  3036. 

  3037. matrix_synapse_email_enabled: "{{ matrix_mailer_enabled }}"

  3038. matrix_synapse_email_smtp_host: "matrix-mailer"

  3039. matrix_synapse_email_smtp_port: 8025

  3040. matrix_synapse_email_smtp_require_transport_security: false

  3041. matrix_synapse_email_notif_from: "Matrix <{{ matrix_mailer_sender_address }}>"

  3042. 

  3043. # Even if TURN doesn't support TLS (it does by default),

  3044. # it doesn't hurt to try a secure connection anyway.

  3045. #

  3046. # When Let's Encrypt certificates are used (the default case),

  3047. # we don't enable `turns` endpoints, because WebRTC in Element can't talk to them.

  3048. # Learn more here: https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1145

  3049. matrix_synapse_turn_uris: |

  3050.   {{

  3051.     []

  3052.     +

  3053.     [

  3054.       'turns:' + matrix_server_fqn_matrix + '?transport=udp',

  3055.       'turns:' + matrix_server_fqn_matrix + '?transport=tcp',

  3056.     ] if matrix_coturn_enabled and matrix_coturn_tls_enabled and matrix_playbook_ssl_retrieval_method != 'lets-encrypt' else []

  3057.     +

  3058.     [

  3059.       'turn:' + matrix_server_fqn_matrix + '?transport=udp',

  3060.       'turn:' + matrix_server_fqn_matrix + '?transport=tcp',

  3061.     ] if matrix_coturn_enabled else []

  3062.   }}

  3063. 

  3064. matrix_synapse_turn_shared_secret: "{{ matrix_coturn_turn_static_auth_secret if matrix_coturn_enabled else '' }}"

  3065. 

  3066. matrix_synapse_self_check_validate_certificates: "{{ false if matrix_playbook_ssl_retrieval_method == 'self-signed' else true }}"

  3067. 

  3068. matrix_synapse_systemd_required_services_list: |

  3069.   {{

  3070.     (['docker.service'])

  3071.     +

  3072.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  3073.     +

  3074.     (['matrix-goofys.service'] if matrix_s3_media_store_enabled else [])

  3075.   }}

  3076. 

  3077. matrix_synapse_systemd_wanted_services_list: |

  3078.   {{

  3079.     (['matrix-coturn.service'] if matrix_coturn_enabled else [])

  3080.     +

  3081.     (['matrix-mailer.service'] if matrix_mailer_enabled else [])

  3082.   }}

  3083. 

  3084. # Synapse workers (used for parallel load-scaling) need Redis for IPC.

  3085. matrix_synapse_redis_enabled: "{{ matrix_redis_enabled }}"

  3086. matrix_synapse_redis_host: "{{ 'matrix-redis' if matrix_redis_enabled else '' }}"

  3087. matrix_synapse_redis_password: "{{ matrix_redis_connection_password if matrix_redis_enabled else '' }}"

  3088. 

  3089. matrix_synapse_container_extra_arguments_auto: "{{ matrix_homeserver_container_extra_arguments_auto }}"

  3090. matrix_synapse_app_service_config_files_auto: "{{ matrix_homeserver_app_service_config_files_auto }}"

  3091. 

  3092. ######################################################################

  3093. #

  3094. # /matrix-synapse

  3095. #

  3096. ######################################################################

  3097. 

  3098. ######################################################################

  3099. #

  3100. # matrix-synapse-reverse-proxy-companion

  3101. #

  3102. ######################################################################

  3103. 

  3104. matrix_synapse_reverse_proxy_companion_enabled: "{{ matrix_synapse_enabled }}"

  3105. 

  3106. matrix_synapse_reverse_proxy_companion_client_api_client_max_body_size_mb: "{{ matrix_synapse_max_upload_size_mb }}"

  3107. 

  3108. matrix_synapse_reverse_proxy_companion_container_client_api_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ ':8008') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  3109. matrix_synapse_reverse_proxy_companion_container_federation_api_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ ':8048') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  3110. 

  3111. matrix_synapse_reverse_proxy_companion_synapse_workers_enabled: "{{ matrix_synapse_workers_enabled }}"

  3112. matrix_synapse_reverse_proxy_companion_synapse_workers_list: "{{ matrix_synapse_workers_enabled_list }}"

  3113. matrix_synapse_reverse_proxy_companion_synapse_generic_worker_client_server_locations: "{{ matrix_synapse_workers_generic_worker_client_server_endpoints }}"

  3114. matrix_synapse_reverse_proxy_companion_synapse_generic_worker_federation_locations: "{{ matrix_synapse_workers_generic_worker_federation_endpoints }}"

  3115. matrix_synapse_reverse_proxy_companion_synapse_stream_writer_typing_stream_worker_client_server_locations: "{{ matrix_synapse_workers_stream_writer_typing_stream_worker_client_server_endpoints }}"

  3116. matrix_synapse_reverse_proxy_companion_synapse_stream_writer_to_device_stream_worker_client_server_locations: "{{ matrix_synapse_workers_stream_writer_to_device_stream_worker_client_server_endpoints }}"

  3117. matrix_synapse_reverse_proxy_companion_synapse_stream_writer_account_data_stream_worker_client_server_locations: "{{ matrix_synapse_workers_stream_writer_account_data_stream_worker_client_server_endpoints }}"

  3118. matrix_synapse_reverse_proxy_companion_synapse_stream_writer_receipts_stream_worker_client_server_locations: "{{ matrix_synapse_workers_stream_writer_receipts_stream_worker_client_server_endpoints }}"

  3119. matrix_synapse_reverse_proxy_companion_synapse_stream_writer_presence_stream_worker_client_server_locations: "{{ matrix_synapse_workers_stream_writer_presence_stream_worker_client_server_endpoints }}"

  3120. matrix_synapse_reverse_proxy_companion_synapse_media_repository_locations: "{{matrix_synapse_workers_media_repository_endpoints|default([]) }}"

  3121. matrix_synapse_reverse_proxy_companion_synapse_user_dir_locations: "{{ matrix_synapse_workers_user_dir_worker_client_server_endpoints|default([]) }}"

  3122. 

  3123. matrix_synapse_reverse_proxy_companion_access_log_syslog_integration_enabled: "{{ matrix_prometheus_nginxlog_exporter_enabled }}"

  3124. matrix_synapse_reverse_proxy_companion_access_log_syslog_integration_server_port: "{{ (matrix_prometheus_nginxlog_exporter_container_hostname | string +':'+ matrix_prometheus_nginxlog_exporter_container_syslog_port | string) | default('') }}"

  3125. 

  3126. ######################################################################

  3127. #

  3128. # /matrix-synapse-reverse-proxy-companion

  3129. #

  3130. ######################################################################

  3131. 

  3132. ######################################################################

  3133. #

  3134. # matrix-synapse-admin

  3135. #

  3136. ######################################################################

  3137. 

  3138. matrix_synapse_admin_enabled: false

  3139. 

  3140. # Normally, matrix-nginx-proxy is enabled and nginx can reach Synapse Admin over the container network.

  3141. # If matrix-nginx-proxy is not enabled, or you otherwise have a need for it, you can expose

  3142. # Synapse Admin's HTTP port to the local host.

  3143. matrix_synapse_admin_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ ':8766') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  3144. 

  3145. matrix_synapse_admin_container_image_self_build: "{{ matrix_architecture not in ['arm64', 'amd64'] }}"

  3146. 

  3147. ######################################################################

  3148. #

  3149. # /matrix-synapse-admin

  3150. #

  3151. ######################################################################

  3152. 

  3153. ######################################################################

  3154. #

  3155. # etke/prometheus_node_exporter

  3156. #

  3157. ######################################################################

  3158. 

  3159. prometheus_node_exporter_enabled: false

  3160. 

  3161. prometheus_node_exporter_identifier: matrix-prometheus-node-exporter

  3162. 

  3163. prometheus_node_exporter_base_path: "{{ matrix_base_data_path }}/prometheus-node-exporter"

  3164. 

  3165. prometheus_node_exporter_uid: "{{ matrix_user_uid }}"

  3166. prometheus_node_exporter_gid: "{{ matrix_user_gid }}"

  3167. 

  3168. prometheus_node_exporter_server_fqn: "{{ matrix_server_fqn_matrix }}"

  3169. 

  3170. prometheus_node_exporter_container_network: "{{ matrix_docker_network }}"

  3171. 

  3172. prometheus_node_exporter_container_additional_networks: "{{ [matrix_playbook_reverse_proxyable_services_additional_network] if matrix_playbook_reverse_proxyable_services_additional_network else [] }}"

  3173. 

  3174. prometheus_node_exporter_container_labels_traefik_enabled: false

  3175. prometheus_node_exporter_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  3176. prometheus_node_exporter_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  3177. 

  3178. ######################################################################

  3179. #

  3180. # /etke/prometheus_node_exporter

  3181. #

  3182. ######################################################################

  3183. 

  3184. ######################################################################

  3185. #

  3186. # etke/prometheus_postgres_exporter

  3187. #

  3188. ######################################################################

  3189. 

  3190. prometheus_postgres_exporter_enabled: false

  3191. 

  3192. prometheus_postgres_exporter_identifier: matrix-prometheus-postgres-exporter

  3193. 

  3194. prometheus_postgres_exporter_base_path: "{{ matrix_base_data_path }}/prometheus-postgres-exporter"

  3195. 

  3196. prometheus_postgres_exporter_uid: "{{ matrix_user_uid }}"

  3197. prometheus_postgres_exporter_gid: "{{ matrix_user_gid }}"

  3198. 

  3199. prometheus_postgres_exporter_server_fqn: "{{ matrix_server_fqn_matrix }}"

  3200. 

  3201. prometheus_postgres_exporter_container_network: "{{ matrix_docker_network }}"

  3202. 

  3203. prometheus_postgres_exporter_container_additional_networks: "{{ [matrix_playbook_reverse_proxyable_services_additional_network] if matrix_playbook_reverse_proxyable_services_additional_network else [] }}"

  3204. 

  3205. prometheus_postgres_exporter_container_labels_traefik_enabled: false

  3206. prometheus_postgres_exporter_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  3207. prometheus_postgres_exporter_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  3208. 

  3209. prometheus_postgres_exporter_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  3210. prometheus_postgres_exporter_database_username: matrix_prometheus_postgres_exporter

  3211. prometheus_postgres_exporter_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'prometheus.pg.db', rounds=655555) | to_uuid }}"

  3212. prometheus_postgres_exporter_database_name: matrix_prometheus_postgres_exporter

  3213. 

  3214. prometheus_postgres_exporter_systemd_required_services_list: |

  3215.   {{

  3216.     ['docker.service']

  3217.     +

  3218.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  3219.   }}

  3220. 

  3221. ######################################################################

  3222. #

  3223. # /etke/prometheus_postgres_exporter

  3224. #

  3225. ######################################################################

  3226. 

  3227. ######################################################################

  3228. #

  3229. # matrix-prometheus-nginxlog-exporter

  3230. #

  3231. ######################################################################

  3232. 

  3233. matrix_prometheus_nginxlog_exporter_enabled: false

  3234. 

  3235. ######################################################################

  3236. #

  3237. # /matrix-prometheus-nginxlog-exporter

  3238. #

  3239. ######################################################################

  3240. 

  3241. ######################################################################

  3242. #

  3243. # matrix-prometheus

  3244. #

  3245. ######################################################################

  3246. 

  3247. matrix_prometheus_enabled: false

  3248. 

  3249. # Normally, matrix-nginx-proxy is enabled and nginx can reach Prometheus over the container network.

  3250. # If matrix-nginx-proxy is not enabled, or you otherwise have a need for it, you can expose

  3251. # Prometheus' HTTP port to the local host.

  3252. matrix_prometheus_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ ':99090005') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  3253. 

  3254. matrix_prometheus_scraper_synapse_enabled: "{{ matrix_synapse_enabled and matrix_synapse_metrics_enabled }}"

  3255. matrix_prometheus_scraper_synapse_targets: ['matrix-synapse:{{ matrix_synapse_metrics_port }}']

  3256. matrix_prometheus_scraper_synapse_workers_enabled_list: "{{ matrix_synapse_workers_enabled_list }}"

  3257. matrix_prometheus_scraper_synapse_rules_synapse_tag: "{{ matrix_synapse_docker_image_tag }}"

  3258. 

  3259. matrix_prometheus_scraper_node_enabled: "{{ prometheus_node_exporter_enabled }}"

  3260. matrix_prometheus_scraper_node_targets: "{{ [prometheus_node_exporter_identifier + ':9100'] if prometheus_node_exporter_enabled else [] }}"

  3261. 

  3262. matrix_prometheus_scraper_postgres_enabled: "{{ prometheus_postgres_exporter_enabled }}"

  3263. matrix_prometheus_scraper_postgres_targets: "{{ [prometheus_postgres_exporter_identifier + ':' + prometheus_postgres_exporter_port | string] if matrix_prometheus_scraper_postgres_enabled else [] }}"

  3264. 

  3265. matrix_prometheus_scraper_hookshot_enabled: "{{ matrix_hookshot_metrics_enabled|default(false) }}"

  3266. matrix_prometheus_scraper_hookshot_targets: "{{ [matrix_hookshot_container_url | string +':'+ matrix_hookshot_metrics_port | string] if matrix_hookshot_metrics_enabled else [] }}"

  3267. 

  3268. matrix_prometheus_scraper_nginxlog_enabled: "{{ matrix_prometheus_nginxlog_exporter_enabled }}"

  3269. matrix_prometheus_scraper_nginxlog_server_port: "{{ (matrix_prometheus_nginxlog_exporter_container_hostname | string +':'+ matrix_prometheus_nginxlog_exporter_container_metrics_port | string)

  3270. | default('') }}"

  3271. 

  3272. ######################################################################

  3273. #

  3274. # /matrix-prometheus

  3275. #

  3276. ######################################################################

  3277. 

  3278. ######################################################################

  3279. #

  3280. # matrix-grafana

  3281. #

  3282. ######################################################################

  3283. 

  3284. matrix_grafana_enabled: false

  3285. 

  3286. # Normally, matrix-nginx-proxy is enabled and nginx can reach Grafana over the container network.

  3287. # If matrix-nginx-proxy is not enabled, or you otherwise have a need for it, you can expose

  3288. # Grafana's HTTP port to the local host.

  3289. matrix_grafana_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ ':3000') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  3290. 

  3291. matrix_grafana_dashboard_download_urls: |

  3292.   {{

  3293.     (matrix_synapse_grafana_dashboard_urls if matrix_homeserver_implementation == 'synapse' and matrix_synapse_metrics_enabled else [])

  3294.     +

  3295.     (prometheus_node_exporter_dashboard_urls if prometheus_node_exporter_enabled else [])

  3296.     +

  3297.     (prometheus_postgres_exporter_dashboard_urls if prometheus_postgres_exporter_enabled else [])

  3298.     +

  3299.     (matrix_prometheus_nginxlog_exporter_dashboard_urls if matrix_prometheus_nginxlog_exporter_enabled else [])

  3300.   }}

  3301. 

  3302. matrix_grafana_default_home_dashboard_path: |-

  3303.   {{

  3304.     {

  3305.       'synapse': ('/etc/grafana/dashboards/synapse.json' if matrix_synapse_metrics_enabled else '/etc/grafana/dashboards/node-exporter-full.json'),

  3306.       'dendrite': '/etc/grafana/dashboards/node-exporter-full.json',

  3307.       'conduit': '/etc/grafana/dashboards/node-exporter-full.json',

  3308.     }[matrix_homeserver_implementation]

  3309.   }}

  3310. 

  3311. ######################################################################

  3312. #

  3313. # /matrix-grafana

  3314. #

  3315. ######################################################################

  3316. 

  3317. ######################################################################

  3318. #

  3319. # matrix-registration

  3320. #

  3321. ######################################################################

  3322. 

  3323. matrix_registration_enabled: false

  3324. 

  3325. # Normally, matrix-nginx-proxy is enabled and nginx can reach matrix-registration over the container network.

  3326. # If matrix-nginx-proxy is not enabled, or you otherwise have a need for it, you can expose

  3327. # matrix-registration's HTTP port to the local host.

  3328. matrix_registration_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ ':8767') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  3329. 

  3330. matrix_registration_riot_instance: "{{ ('https://' + matrix_server_fqn_element) if matrix_client_element_enabled else 'https://riot.im/app/' }}"

  3331. 

  3332. matrix_registration_shared_secret: |-

  3333.   {{

  3334.     {

  3335.       'synapse': matrix_synapse_registration_shared_secret,

  3336.       'dendrite': matrix_dendrite_client_api_registration_shared_secret,

  3337.       'conduit': '',

  3338.     }[matrix_homeserver_implementation]

  3339.   }}

  3340. 

  3341. matrix_registration_server_location: "{{ matrix_homeserver_container_url }}"

  3342. 

  3343. matrix_registration_api_validate_certs: "{{ false if matrix_playbook_ssl_retrieval_method == 'self-signed' else true }}"

  3344. 

  3345. matrix_registration_container_image_self_build: "{{ matrix_architecture != 'amd64' }}"

  3346. 

  3347. matrix_registration_systemd_required_services_list: |

  3348.   {{

  3349.     ['docker.service']

  3350.     +

  3351.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  3352.   }}

  3353. 

  3354. # Postgres is the default, except if not using internal Postgres server

  3355. matrix_registration_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  3356. matrix_registration_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  3357. matrix_registration_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mx.registr.db', rounds=655555) | to_uuid }}"

  3358. 

  3359. ######################################################################

  3360. #

  3361. # /matrix-registration

  3362. #

  3363. ######################################################################

  3364. 

  3365. 

  3366. ######################################################################

  3367. #

  3368. # matrix-dendrite

  3369. #

  3370. ######################################################################

  3371. 

  3372. matrix_dendrite_enabled: "{{ matrix_homeserver_implementation == 'dendrite' }}"

  3373. 

  3374. # Normally, matrix-nginx-proxy is enabled and nginx can reach Dendrite over the container network.

  3375. # If matrix-nginx-proxy is not enabled, or you otherwise have a need for it,

  3376. # you can expose Dendrite's ports to the host.

  3377. #

  3378. # For exposing Dendrite's plain HTTP server to the local host.

  3379. matrix_dendrite_container_http_host_bind_address: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ ':' ~ matrix_dendrite_http_bind_port | string) if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  3380. #

  3381. # For exposing Dendrite's HTTPS server to the local host.

  3382. matrix_dendrite_container_https_host_bind_address: "{{ '' if not matrix_dendrite_https_bind_port or not matrix_playbook_service_host_bind_interface_prefix else (matrix_playbook_service_host_bind_interface_prefix + matrix_dendrite_https_bind_port | string) }}"

  3383. 

  3384. matrix_dendrite_client_api_registration_shared_secret: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'dendrite.rss', rounds=655555) | to_uuid }}"

  3385. 

  3386. matrix_dendrite_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  3387. 

  3388. matrix_dendrite_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'dendrite.db', rounds=655555) | to_uuid }}"

  3389. 

  3390. # Even if TURN doesn't support TLS (it does by default),

  3391. # it doesn't hurt to try a secure connection anyway.

  3392. matrix_dendrite_client_api_turn_uris: |

  3393.   {{

  3394.     [

  3395.       'turns:' + matrix_server_fqn_matrix + '?transport=udp',

  3396.       'turns:' + matrix_server_fqn_matrix + '?transport=tcp',

  3397.       'turn:' + matrix_server_fqn_matrix + '?transport=udp',

  3398.       'turn:' + matrix_server_fqn_matrix + '?transport=tcp',

  3399.     ]

  3400.     if matrix_coturn_enabled

  3401.     else []

  3402.   }}

  3403. 

  3404. matrix_dendrite_client_api_turn_shared_secret: "{{ matrix_coturn_turn_static_auth_secret if matrix_coturn_enabled else '' }}"

  3405. 

  3406. matrix_dendrite_disable_tls_validation: "{{ true if matrix_playbook_ssl_retrieval_method == 'self-signed' else false }}"

  3407. 

  3408. matrix_dendrite_self_check_validate_certificates: "{{ false if matrix_playbook_ssl_retrieval_method == 'self-signed' else true }}"

  3409. 

  3410. matrix_dendrite_trusted_id_servers: "{{ [matrix_server_fqn_matrix] if matrix_ma1sd_enabled else ['matrix.org', 'vector.im'] }}"

  3411. 

  3412. matrix_dendrite_systemd_required_services_list: |

  3413.   {{

  3414.     (['docker.service'])

  3415.     +

  3416.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  3417.     +

  3418.     (['matrix-goofys.service'] if matrix_s3_media_store_enabled else [])

  3419.   }}

  3420. 

  3421. matrix_dendrite_systemd_wanted_services_list: |

  3422.   {{

  3423.     (['matrix-coturn.service'] if matrix_coturn_enabled else [])

  3424.   }}

  3425. 

  3426. matrix_dendrite_container_extra_arguments_auto: "{{ matrix_homeserver_container_extra_arguments_auto }}"

  3427. matrix_dendrite_app_service_config_files_auto: "{{ matrix_homeserver_app_service_config_files_auto }}"

  3428. 

  3429. ######################################################################

  3430. #

  3431. # /matrix-dendrite

  3432. #

  3433. ######################################################################

  3434. 

  3435. ######################################################################

  3436. #

  3437. # matrix-conduit

  3438. #

  3439. ######################################################################

  3440. 

  3441. matrix_conduit_enabled: "{{ matrix_homeserver_implementation == 'conduit' }}"

  3442. 

  3443. matrix_conduit_systemd_required_services_list: |

  3444.   {{

  3445.     (['docker.service'])

  3446.   }}

  3447. 

  3448. 

  3449. ######################################################################

  3450. #

  3451. # /matrix-conduit

  3452. #

  3453. ######################################################################

  3454. 

  3455. 

  3456. ######################################################################

  3457. #

  3458. # matrix-user-creator

  3459. #

  3460. ######################################################################

  3461. 

  3462. matrix_user_creator_users_auto: |

  3463.   {{

  3464.     ([{

  3465.       'username': matrix_bot_matrix_reminder_bot_matrix_user_id_localpart,

  3466.       'initial_password': matrix_bot_matrix_reminder_bot_matrix_user_password,

  3467.       'initial_type': 'bot',

  3468.     }] if matrix_bot_matrix_reminder_bot_enabled else [])

  3469.     +

  3470.     ([{

  3471.       'username': matrix_bot_honoroit_login,

  3472.       'initial_password': matrix_bot_honoroit_password,

  3473.       'initial_type': 'bot',

  3474.     }] if matrix_bot_honoroit_enabled else [])

  3475.     +

  3476.     ([{

  3477.       'username': matrix_bot_postmoogle_login,

  3478.       'initial_password': matrix_bot_postmoogle_password,

  3479.       'initial_type': 'bot',

  3480.     }] if matrix_bot_postmoogle_enabled else [])

  3481.     +

  3482.     ([{

  3483.       'username': matrix_bot_buscarron_login,

  3484.       'initial_password': matrix_bot_buscarron_password,

  3485.       'initial_type': 'bot',

  3486.     }] if matrix_bot_buscarron_enabled else [])

  3487.   }}

  3488. 

  3489. ######################################################################

  3490. #

  3491. # /matrix-user-creator

  3492. #

  3493. ######################################################################

  3494. 

  3495. 

  3496. ######################################################################

  3497. #

  3498. # matrix-user-verification-service

  3499. #

  3500. ######################################################################

  3501. 

  3502. ## FIXME: Needs to be updated when there is a proper release by upstream.

  3503. matrix_user_verification_service_docker_image: "{{ matrix_user_verification_service_docker_image_name_prefix }}matrixdotorg/matrix-user-verification-service@sha256:d2aabc984dd69d258c91900c36928972d7aaef19d776caa3cd6a0fbc0e307270"

  3504. 

  3505. matrix_user_verification_service_enabled: false

  3506. matrix_user_verification_service_systemd_required_services_list: |

  3507.       {{

  3508.         ['docker.service']

  3509.         +

  3510.         (['matrix-synapse.service'] if matrix_synapse_enabled else [])

  3511.         +

  3512.         ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  3513.       }}

  3514. 

  3515. # If Jitsi is managed by this playbook we can use the docker network - no need to expose a port.

  3516. # If Jitsi is not managed by this playbook, or you otherwise have a need for it, you can expose

  3517. # matrix-user-verfification-services's client-server port to port 3003.

  3518. # By default Matrix-User-Verification-Service binds to port 3000, which collides with grafana, therefore this uses port 3003.

  3519. matrix_user_verification_service_container_http_host_bind_port: "{{  '' if (matrix_jitsi_enabled | bool and matrix_jitsi_enable_auth | bool and matrix_jitsi_auth_type == 'matrix') else matrix_playbook_service_host_bind_interface_prefix ~ ':3003' }}"

  3520. 

  3521. # URL exposed in the docker network

  3522. matrix_user_verification_service_container_url: "http://{{  matrix_user_verification_service_container_name }}:3000"

  3523. 

  3524. # We connect via the container network (private IPs), so we need to disable IP checks

  3525. matrix_user_verification_service_uvs_disable_ip_blacklist: "{{'true' if matrix_synapse_enabled else 'false'}}"

  3526. 

  3527. matrix_user_verification_service_uvs_auth_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'uvs.auth.token', rounds=655555) | to_uuid }}"

  3528. 

  3529. ######################################################################

  3530. #

  3531. # /matrix-user-verification-service

  3532. #

  3533. ######################################################################

  3534. 

  3535. 

  3536. ########################################################################

  3537. #                                                                      #

  3538. # com.devture.ansible.role.traefik                                     #

  3539. #                                                                      #

  3540. ########################################################################

  3541. 

  3542. # To completely disable the Traefik role from running, use `matrix_playbook_traefik_role_enabled: false`.

  3543. # See the comment there for more details about why we have both `devture_traefik_enabled` and `matrix_playbook_traefik_role_enabled`.

  3544. devture_traefik_enabled: "{{ matrix_playbook_reverse_proxy_type == 'playbook-installed-traefik' }}"

  3545. 

  3546. devture_traefik_uid: "{{ matrix_user_uid }}"

  3547. devture_traefik_gid: "{{ matrix_user_gid }}"

  3548. 

  3549. devture_traefik_additional_entrypoints_auto:

  3550.   - name: matrix-federation

  3551.     port: "{{ matrix_federation_public_port }}"

  3552.     host_bind_port: "{{ matrix_federation_public_port }}"

  3553.     config: {}

  3554. 

  3555. devture_traefik_additional_domains_to_obtain_certificates_for: "{{ matrix_ssl_additional_domains_to_obtain_certificates_for }}"

  3556. 

  3557. ########################################################################

  3558. #                                                                      #

  3559. # /com.devture.ansible.role.traefik                                    #

  3560. #                                                                      #

  3561. ########################################################################

  3562. 

  3563. 

  3564. ########################################################################

  3565. #                                                                      #

  3566. # com.devture.ansible.role.traefik_certs_dumper                        #

  3567. #                                                                      #

  3568. ########################################################################

  3569. 

  3570. # To completely disable the Traefik certs dumper role from running, use `matrix_playbook_traefik_certs_dumper_role_enabled: false`.

  3571. # See the comment there for more details about why we have both `devture_traefik_certs_dumper_enabled` and `matrix_playbook_traefik_certs_dumper_role_enabled`.

  3572. devture_traefik_certs_dumper_enabled: "{{ matrix_playbook_traefik_certs_dumper_role_enabled and devture_traefik_enabled }}"

  3573. 

  3574. devture_traefik_certs_dumper_identifier: matrix-traefik-certs-dumper

  3575. 

  3576. devture_traefik_certs_dumper_base_path: "{{ matrix_base_data_path }}/traefik-certs-dumper"

  3577. 

  3578. devture_traefik_certs_dumper_uid: "{{ matrix_user_uid }}"

  3579. devture_traefik_certs_dumper_gid: "{{ matrix_user_gid }}"

  3580. 

  3581. devture_traefik_certs_dumper_ssl_dir_path: "{{ devture_traefik_ssl_dir_path }}"

  3582. 

  3583. ########################################################################

  3584. #                                                                      #

  3585. # /com.devture.ansible.role.traefik_certs_dumper                       #

  3586. #                                                                      #

  3587. ########################################################################