overmind
/
matrix-docker-ansible-deploy
mirror of https://github.com/spantaleev/matrix-docker-ansible-deploy
1
0
Fork 0
Code Issues 0 Releases 0 Wiki Activity
Matrix Docker Ansible eploy
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
2865 Commits
14 Branches
502 MiB
 
 
Tree: 2d9ba82337
Branches Tags
${ item.name }
Create branch ${ searchTerm }
from '2d9ba82337'
${ noResults }
matrix-docker-ansible-deploy/roles/matrix-awx/tasks/set_variables_synapse.yml

227 lines
8.9 KiB
Raw Blame History 

  1. 

  2. - name: Limit max upload size to 100MB part 1

  3.   set_fact:

  4.     matrix_synapse_max_upload_size_mb: "100"

  5.   when: matrix_synapse_max_upload_size_mb_raw|int >= 100

  6. 

  7. - name: Limit max upload size to 100MB part 2

  8.   set_fact:

  9.     matrix_synapse_max_upload_size_mb: "{{ matrix_synapse_max_upload_size_mb_raw }}"

  10.   when: matrix_synapse_max_upload_size_mb_raw|int < 100

  11. 

  12. - name: Record Synapse variables locally on AWX

  13.   delegate_to: 127.0.0.1

  14.   lineinfile:

  15.     path: '{{ awx_cached_matrix_vars }}'

  16.     regexp: "^#? *{{ item.key | regex_escape() }}:"

  17.     line: "{{ item.key }}: {{ item.value }}"

  18.     insertafter: '# Synapse Settings Start'

  19.   with_dict:

  20.     'matrix_synapse_allow_public_rooms_over_federation': '{{ matrix_synapse_allow_public_rooms_over_federation }}'

  21.     'matrix_synapse_enable_registration': '{{ matrix_synapse_enable_registration }}'

  22.     'matrix_synapse_federation_enabled': '{{ matrix_synapse_federation_enabled }}'

  23.     'matrix_synapse_enable_group_creation': '{{ matrix_synapse_enable_group_creation }}'

  24.     'matrix_synapse_presence_enabled': '{{ matrix_synapse_presence_enabled }}'

  25.     'matrix_synapse_max_upload_size_mb': '{{ matrix_synapse_max_upload_size_mb }}'

  26.     'matrix_synapse_url_preview_enabled': '{{ matrix_synapse_url_preview_enabled }}'

  27.     'matrix_synapse_allow_guest_access': '{{ matrix_synapse_allow_guest_access }}'

  28. 

  29. - name: Empty Synapse variable 'matrix_synapse_auto_join_rooms' locally on AWX, if raw inputs empty

  30.   delegate_to: 127.0.0.1

  31.   replace:

  32.     path: '{{ awx_cached_matrix_vars }}'

  33.     regexp: "^matrix_synapse_auto_join_rooms: .*$"

  34.     replace: "matrix_synapse_auto_join_rooms: []"

  35.   when: matrix_synapse_auto_join_rooms_raw|length == 0

  36. 

  37. - name: If the raw inputs is not empty start constructing parsed auto_join_rooms list

  38.   set_fact:

  39.     matrix_synapse_auto_join_rooms_array: |-

  40.       {{ matrix_synapse_auto_join_rooms_raw.splitlines() | to_json }}

  41.   when: matrix_synapse_auto_join_rooms_raw|length > 0

  42. 

  43. - name: Record Synapse variable 'matrix_synapse_auto_join_rooms' locally on AWX, if it's not blank

  44.   delegate_to: 127.0.0.1

  45.   lineinfile:

  46.     path: '{{ awx_cached_matrix_vars }}'

  47.     regexp: "^#? *{{ item.key | regex_escape() }}:"

  48.     line: "{{ item.key }}: {{ item.value }}"

  49.     insertafter: '# Synapse Settings Start'

  50.   with_dict:

  51.     "matrix_synapse_auto_join_rooms": "{{ matrix_synapse_auto_join_rooms_array }}"

  52.   when: matrix_synapse_auto_join_rooms_raw|length > 0

  53. 

  54. - name: Record Synapse Shared Secret if it's defined

  55.   delegate_to: 127.0.0.1

  56.   lineinfile:

  57.     path: '{{ awx_cached_matrix_vars }}'

  58.     regexp: "^#? *{{ item.key | regex_escape() }}:"

  59.     line: "{{ item.key }}: {{ item.value }}"

  60.     insertafter: '# Synapse Settings Start'

  61.   with_dict:

  62.     'matrix_synapse_registration_shared_secret': '{{ ext_matrix_synapse_registration_shared_secret }}'

  63.   when: ext_matrix_synapse_registration_shared_secret|length > 0

  64. 

  65. - name: Record registations_require_3pid extra variable if true

  66.   delegate_to: 127.0.0.1

  67.   lineinfile:

  68.     path: '{{ awx_cached_matrix_vars }}'

  69.     regexp: "{{ item }}:"

  70.     line: "{{ item }}"

  71.     insertbefore: '# Synapse Extension End'

  72.   with_items:

  73.     - "  registrations_require_3pid:"

  74.     - "    - email"

  75.   when: ext_registrations_require_3pid|bool

  76. 

  77. - name: Remove registrations_require_3pid extra variable if false

  78.   delegate_to: 127.0.0.1

  79.   lineinfile:

  80.     path: '{{ awx_cached_matrix_vars }}'

  81.     regexp: "{{ item }}:"

  82.     line: "{{ item }}"

  83.     insertbefore: '# Synapse Extension End'

  84.     state: absent

  85.   with_items:

  86.     - "  registrations_require_3pid:"

  87.     - "    - email"

  88.   when: not ext_registrations_require_3pid|bool

  89. 

  90. - name: Remove URL Languages

  91.   delegate_to: 127.0.0.1

  92.   replace:

  93.     path: '{{ awx_cached_matrix_vars }}'

  94.     regexp: '^(?!.*\bemail\b)    - [a-zA-Z\-]{2,5}\n'

  95.     after: '  url_preview_accept_language:'

  96.     before: '# Synapse Extension End'

  97. 

  98. - name: Set URL languages default if raw inputs empty

  99.   set_fact:

  100.     ext_url_preview_accept_language_default: 'en'

  101.   when: ext_url_preview_accept_language_raw|length == 0

  102. 

  103. - name: Set URL languages default if raw inputs not empty

  104.   set_fact:

  105.     ext_url_preview_accept_language_default: "{{ ext_url_preview_accept_language_raw }}"

  106.   when: ext_url_preview_accept_language_raw|length > 0

  107. 

  108. - name: Set URL languages if raw inputs empty

  109.   delegate_to: 127.0.0.1

  110.   lineinfile:

  111.     path: '{{ awx_cached_matrix_vars }}'

  112.     insertafter: '^  url_preview_accept_language:'

  113.     line: "    - {{ ext_url_preview_accept_language_default }}"

  114.   when: ext_url_preview_accept_language_raw|length == 0

  115. 

  116. - name: Set URL languages if raw inputs not empty

  117.   delegate_to: 127.0.0.1

  118.   lineinfile:

  119.     path: '{{ awx_cached_matrix_vars }}'

  120.     insertafter: '^  url_preview_accept_language:'

  121.     line: "    - {{ item }}"

  122.   with_items: "{{ ext_url_preview_accept_language_raw.splitlines() }}"

  123.   when: ext_url_preview_accept_language_raw|length > 0

  124. 

  125. - name: Remove Federation Whitelisting 1

  126.   delegate_to: 127.0.0.1

  127.   replace:

  128.     path: '{{ awx_cached_matrix_vars }}'

  129.     regexp: '^    - [a-z0-9]+\.[a-z0-9.]+\n'

  130.     after: '  federation_domain_whitelist:'

  131.     before: '# Synapse Extension End'

  132. 

  133. - name: Remove Federation Whitelisting 2

  134.   delegate_to: 127.0.0.1

  135.   lineinfile:

  136.     path: '{{ awx_cached_matrix_vars }}'

  137.     line: "  federation_domain_whitelist:"

  138.     state: absent

  139. 

  140. - name: Set Federation Whitelisting 1

  141.   delegate_to: 127.0.0.1

  142.   lineinfile:

  143.     path: '{{ awx_cached_matrix_vars }}'

  144.     insertafter: '^matrix_synapse_configuration_extension_yaml: \|'

  145.     line: "  federation_domain_whitelist:"

  146.   when: ext_federation_whitelist_raw|length > 0

  147. 

  148. - name: Set Federation Whitelisting 2

  149.   delegate_to: 127.0.0.1

  150.   lineinfile:

  151.     path: '{{ awx_cached_matrix_vars }}'

  152.     insertafter: '^  federation_domain_whitelist:'

  153.     line: "    - {{ item }}"

  154.   with_items: "{{ ext_federation_whitelist_raw.splitlines() }}"

  155.   when: ext_federation_whitelist_raw|length > 0

  156. 

  157. - name: Record Synapse Custom variables locally on AWX

  158.   delegate_to: 127.0.0.1

  159.   lineinfile:

  160.     path: '{{ awx_cached_matrix_vars }}'

  161.     regexp: "^#? *{{ item.key | regex_escape() }}:"

  162.     line: "{{ item.key }}: {{ item.value }}"

  163.     insertafter: '# Custom Settings Start'

  164.   with_dict:

  165.     'ext_federation_whitelist_raw': '{{ ext_federation_whitelist_raw.splitlines() | to_json }}'

  166.     'ext_url_preview_accept_language_default': '{{ ext_url_preview_accept_language_default.splitlines() | to_json }}'

  167. 

  168. - name: Set ext_recaptcha_public_key to a 'public-key' if undefined

  169.   set_fact: ext_recaptcha_public_key="public-key"

  170.   when: (ext_recaptcha_public_key is not defined) or (ext_recaptcha_public_key|length == 0)

  171. 

  172. - name: Set ext_recaptcha_private_key to a 'private-key' if undefined

  173.   set_fact: ext_recaptcha_private_key="private-key"

  174.   when: (ext_recaptcha_private_key is not defined) or (ext_recaptcha_private_key|length == 0)

  175. 

  176. - name: Record Synapse Extension variables locally on AWX

  177.   delegate_to: 127.0.0.1

  178.   lineinfile:

  179.     path: '{{ awx_cached_matrix_vars }}'

  180.     regexp: "^#? *{{ item.key | regex_escape() }}:"

  181.     line: "{{ item.key }}: {{ item.value }}"

  182.     insertbefore: '# Synapse Extension End'

  183.   with_dict:

  184.     '  enable_registration_captcha': '{{ ext_enable_registration_captcha }}'

  185.     '  recaptcha_public_key': '{{ ext_recaptcha_public_key }}'

  186.     '  recaptcha_private_key': '{{ ext_recaptcha_private_key }}'

  187. 

  188. - name: Save new 'Configure Synapse' survey.json to the AWX tower, template

  189.   delegate_to: 127.0.0.1

  190.   template:

  191.     src: 'roles/matrix-awx/surveys/configure_synapse.json.j2'

  192.     dest: '/var/lib/awx/projects/clients/{{ member_id }}/{{ subscription_id }}//configure_synapse.json'

  193. 

  194. - name: Copy new 'Configure Synapse' survey.json to target machine

  195.   copy:

  196.     src: '/var/lib/awx/projects/clients/{{ member_id }}/{{ subscription_id }}/configure_synapse.json'

  197.     dest:  '/matrix/awx/configure_synapse.json'

  198.     mode: '0660'

  199. 

  200. - name: Collect AWX admin token the hard way!

  201.   delegate_to: 127.0.0.1

  202.   shell: |

  203.       curl -sku {{ tower_username }}:{{ tower_password }} -H "Content-Type: application/json" -X POST -d '{"description":"Tower CLI", "application":null, "scope":"write"}' https://{{ tower_host }}/api/v2/users/1/personal_tokens/ | jq '.token' | sed -r 's/\"//g'

  204.   register: tower_token

  205.   no_log: True

  206. 

  207. - name: Recreate 'Configure Synapse' job template

  208.   delegate_to: 127.0.0.1

  209.   awx.awx.tower_job_template:

  210.     name: "{{ matrix_domain }} - 1 - Configure Synapse"

  211.     description: "Configure Synapse (homeserver) settings."

  212.     extra_vars: "{{ lookup('file', '/var/lib/awx/projects/clients/{{ member_id }}/{{ subscription_id }}/extra_vars.json') }}"

  213.     job_type: run

  214.     job_tags: "start,setup-synapse"

  215.     inventory: "{{ member_id }}"

  216.     project: "{{ member_id }} - Matrix Docker Ansible Deploy"

  217.     playbook: setup.yml

  218.     credential: "{{ member_id }} - AWX SSH Key"

  219.     survey_enabled: true

  220.     survey_spec: "{{ lookup('file', '/var/lib/awx/projects/clients/{{ member_id }}/{{ subscription_id }}/configure_synapse.json') }}"

  221.     become_enabled: yes

  222.     state: present

  223.     verbosity: 1

  224.     tower_host: "https://{{ tower_host }}"

  225.     tower_oauthtoken: "{{ tower_token.stdout }}"

  226.     validate_certs: yes