overmind
/
matrix-docker-ansible-deploy
réplica de https://github.com/spantaleev/matrix-docker-ansible-deploy
1
0
Fork 0
Código Incidencias 0 Lanzamientos 0 Wiki Actividad
Matrix Docker Ansible eploy
No puede seleccionar más de 25 temas Los temas deben comenzar con una letra o número, pueden incluir guiones ('-') y pueden tener hasta 35 caracteres de largo.
5447 Commits
14 Ramas
66 MiB
 
 
Árbol: 2e0dfb2dc1
Ramas Etiquetas
${ item.name }
Crear rama ${ searchTerm }
desde '2e0dfb2dc1'
${ noResults }
matrix-docker-ansible-deploy/group_vars/matrix_servers

3221 líneas
156 KiB
Original Blame Histórico 

  1. ---

  2. 

  3. # This variables file wires together the various components (roles) used by the playbook.

  4. #

  5. # Roles used by playbook are pretty minimal and kept independent of one another as much as possible.

  6. # To deliver a turnkey fully-featured Matrix server, this playbook needs

  7. # to connect them all together. It does so by overriding role variables.

  8. #

  9. # You can also override ANY variable (seen here or in any given role),

  10. # by re-defining it in your own configuration file (`inventory/host_vars/matrix.<your-domain>`).

  11. 

  12. ########################################################################

  13. #                                                                      #

  14. # Playbook                                                             #

  15. #                                                                      #

  16. ########################################################################

  17. 

  18. # Controls whether to install Docker or not

  19. # Also see `devture_docker_sdk_for_python_installation_enabled`.

  20. matrix_playbook_docker_installation_enabled: true

  21. 

  22. ########################################################################

  23. #                                                                      #

  24. # /Playbook                                                            #

  25. #                                                                      #

  26. ########################################################################

  27. 

  28. ########################################################################

  29. #                                                                      #

  30. # base                                                                 #

  31. #                                                                      #

  32. ########################################################################

  33. 

  34. matrix_homeserver_container_extra_arguments_auto: |

  35.   {{

  36.     (['--mount type=bind,src=' + matrix_appservice_discord_config_path + '/registration.yaml,dst=/matrix-appservice-discord-registration.yaml,ro'] if matrix_appservice_discord_enabled else [])

  37.     +

  38.     (['--mount type=bind,src=' + matrix_appservice_irc_config_path + '/registration.yaml,dst=/matrix-appservice-irc-registration.yaml,ro'] if matrix_appservice_irc_enabled else [])

  39.     +

  40.     (['--mount type=bind,src=' + matrix_appservice_kakaotalk_config_path + '/registration.yaml,dst=/matrix-appservice-kakaotalk-registration.yaml,ro'] if matrix_appservice_kakaotalk_enabled else [])

  41.     +

  42.     (['--mount type=bind,src=' + matrix_appservice_slack_config_path + '/slack-registration.yaml,dst=/matrix-appservice-slack-registration.yaml,ro'] if matrix_appservice_slack_enabled else [])

  43.     +

  44.     (['--mount type=bind,src=' + matrix_appservice_webhooks_config_path + '/webhooks-registration.yaml,dst=/matrix-appservice-webhooks-registration.yaml,ro'] if matrix_appservice_webhooks_enabled else [])

  45.     +

  46.     (['--mount type=bind,src=' + matrix_beeper_linkedin_config_path + '/registration.yaml,dst=/matrix-beeper-linkedin-registration.yaml,ro'] if matrix_beeper_linkedin_enabled else [])

  47.     +

  48.     (['--mount type=bind,src=' + matrix_go_skype_bridge_config_path + '/registration.yaml,dst=/matrix-go-skype-bridge-registration.yaml,ro'] if matrix_go_skype_bridge_enabled else [])

  49.     +

  50.     (['--mount type=bind,src=' + matrix_heisenbridge_base_path + '/registration.yaml,dst=/heisenbridge-registration.yaml,ro'] if matrix_heisenbridge_enabled else [])

  51.     +

  52.     (['--mount type=bind,src=' + matrix_hookshot_base_path + '/registration.yml,dst=/hookshot-registration.yml,ro'] if matrix_hookshot_enabled else [])

  53.     +

  54.     (['--mount type=bind,src=' + matrix_mautrix_discord_config_path + '/registration.yaml,dst=/matrix-mautrix-discord-registration.yaml,ro'] if matrix_mautrix_discord_enabled else [])

  55.     +

  56.     (['--mount type=bind,src=' + matrix_mautrix_slack_config_path + '/registration.yaml,dst=/matrix-mautrix-slack-registration.yaml,ro'] if matrix_mautrix_slack_enabled else [])

  57.     +

  58.     (['--mount type=bind,src=' + matrix_mautrix_facebook_config_path + '/registration.yaml,dst=/matrix-mautrix-facebook-registration.yaml,ro'] if matrix_mautrix_facebook_enabled else [])

  59.     +

  60.     (['--mount type=bind,src=' + matrix_mautrix_googlechat_config_path + '/registration.yaml,dst=/matrix-mautrix-googlechat-registration.yaml,ro'] if matrix_mautrix_googlechat_enabled else [])

  61.     +

  62.     (['--mount type=bind,src=' + matrix_mautrix_hangouts_config_path + '/registration.yaml,dst=/matrix-mautrix-hangouts-registration.yaml,ro'] if matrix_mautrix_hangouts_enabled else [])

  63.     +

  64.     (['--mount type=bind,src=' + matrix_mautrix_instagram_config_path + '/registration.yaml,dst=/matrix-mautrix-instagram-registration.yaml,ro'] if matrix_mautrix_instagram_enabled else [])

  65.     +

  66.     (['--mount type=bind,src=' + matrix_mautrix_signal_config_path + '/registration.yaml,dst=/matrix-mautrix-signal-registration.yaml,ro'] if matrix_mautrix_signal_enabled else [])

  67.     +

  68.     (['--mount type=bind,src=' + matrix_mautrix_telegram_config_path + '/registration.yaml,dst=/matrix-mautrix-telegram-registration.yaml,ro'] if matrix_mautrix_telegram_enabled else [])

  69.     +

  70.     (['--mount type=bind,src=' + matrix_mautrix_twitter_config_path + '/registration.yaml,dst=/matrix-mautrix-twitter-registration.yaml,ro'] if matrix_mautrix_twitter_enabled else [])

  71.     +

  72.     (['--mount type=bind,src=' + matrix_mautrix_whatsapp_config_path + '/registration.yaml,dst=/matrix-mautrix-whatsapp-registration.yaml,ro'] if matrix_mautrix_whatsapp_enabled else [])

  73.     +

  74.     (['--mount type=bind,src=' + matrix_mx_puppet_discord_config_path + '/registration.yaml,dst=/matrix-mx-puppet-discord-registration.yaml,ro'] if matrix_mx_puppet_discord_enabled else [])

  75.     +

  76.     (['--mount type=bind,src=' + matrix_mx_puppet_groupme_config_path + '/registration.yaml,dst=/matrix-mx-puppet-groupme-registration.yaml,ro'] if matrix_mx_puppet_groupme_enabled else [])

  77.     +

  78.     (['--mount type=bind,src=' + matrix_mx_puppet_instagram_config_path + '/registration.yaml,dst=/matrix-mx-puppet-instagram-registration.yaml,ro'] if matrix_mx_puppet_instagram_enabled else [])

  79.     +

  80.     (['--mount type=bind,src=' + matrix_mx_puppet_slack_config_path + '/registration.yaml,dst=/matrix-mx-puppet-slack-registration.yaml,ro'] if matrix_mx_puppet_slack_enabled else [])

  81.     +

  82.     (['--mount type=bind,src=' + matrix_mx_puppet_steam_config_path + '/registration.yaml,dst=/matrix-mx-puppet-steam-registration.yaml,ro'] if matrix_mx_puppet_steam_enabled else [])

  83.     +

  84.     (['--mount type=bind,src=' + matrix_mx_puppet_twitter_config_path + '/registration.yaml,dst=/matrix-mx-puppet-twitter-registration.yaml,ro'] if matrix_mx_puppet_twitter_enabled else [])

  85.     +

  86.     (['--mount type=bind,src=' + matrix_sms_bridge_config_path + '/registration.yaml,dst=/matrix-sms-bridge-registration.yaml,ro'] if matrix_sms_bridge_enabled else [])

  87.     +

  88.     (['--mount type=bind,src=' + matrix_cactus_comments_app_service_config_file + ',dst=/matrix-cactus-comments.yaml,ro'] if matrix_cactus_comments_enabled else [])

  89.   }}

  90. 

  91. matrix_homeserver_app_service_config_files_auto: |

  92.   {{

  93.     (['/matrix-appservice-discord-registration.yaml'] if matrix_appservice_discord_enabled else [])

  94.     +

  95.     (['/matrix-appservice-irc-registration.yaml'] if matrix_appservice_irc_enabled else [])

  96.     +

  97.     (['/matrix-appservice-kakaotalk-registration.yaml'] if matrix_appservice_kakaotalk_enabled else [])

  98.     +

  99.     (['/matrix-appservice-slack-registration.yaml'] if matrix_appservice_slack_enabled else [])

  100.     +

  101.     (['/matrix-appservice-webhooks-registration.yaml'] if matrix_appservice_webhooks_enabled else [])

  102.     +

  103.     (['/matrix-beeper-linkedin-registration.yaml'] if matrix_beeper_linkedin_enabled else [])

  104.     +

  105.     (['/matrix-go-skype-bridge-registration.yaml'] if matrix_go_skype_bridge_enabled else [])

  106.     +

  107.     (['/heisenbridge-registration.yaml'] if matrix_heisenbridge_enabled else [])

  108.     +

  109.     (['/hookshot-registration.yml'] if matrix_hookshot_enabled else [])

  110.     +

  111.     (['/matrix-mautrix-discord-registration.yaml'] if matrix_mautrix_discord_enabled else [])

  112.     +

  113.     (['/matrix-mautrix-slack-registration.yaml'] if matrix_mautrix_slack_enabled else [])

  114.     +

  115.     (['/matrix-mautrix-facebook-registration.yaml'] if matrix_mautrix_facebook_enabled else [])

  116.     +

  117.     (['/matrix-mautrix-googlechat-registration.yaml'] if matrix_mautrix_googlechat_enabled else [])

  118.     +

  119.     (['/matrix-mautrix-hangouts-registration.yaml'] if matrix_mautrix_hangouts_enabled else [])

  120.     +

  121.     (['/matrix-mautrix-instagram-registration.yaml'] if matrix_mautrix_instagram_enabled else [])

  122.     +

  123.     (['/matrix-mautrix-signal-registration.yaml'] if matrix_mautrix_signal_enabled else [])

  124.     +

  125.     (['/matrix-mautrix-telegram-registration.yaml'] if matrix_mautrix_telegram_enabled else [])

  126.     +

  127.     (['/matrix-mautrix-twitter-registration.yaml'] if matrix_mautrix_twitter_enabled else [])

  128.     +

  129.     (['/matrix-mautrix-whatsapp-registration.yaml'] if matrix_mautrix_whatsapp_enabled else [])

  130.     +

  131.     (['/matrix-mx-puppet-discord-registration.yaml'] if matrix_mx_puppet_discord_enabled else [])

  132.     +

  133.     (['/matrix-mx-puppet-groupme-registration.yaml'] if matrix_mx_puppet_groupme_enabled else [])

  134.     +

  135.     (['/matrix-mx-puppet-instagram-registration.yaml'] if matrix_mx_puppet_instagram_enabled else [])

  136.     +

  137.     (['/matrix-mx-puppet-slack-registration.yaml'] if matrix_mx_puppet_slack_enabled else [])

  138.     +

  139.     (['/matrix-mx-puppet-steam-registration.yaml'] if matrix_mx_puppet_steam_enabled else [])

  140.     +

  141.     (['/matrix-mx-puppet-twitter-registration.yaml'] if matrix_mx_puppet_twitter_enabled else [])

  142.     +

  143.     (['/matrix-sms-bridge-registration.yaml'] if matrix_sms_bridge_enabled else [])

  144.     +

  145.     (['/matrix-cactus-comments.yaml'] if matrix_cactus_comments_enabled else [])

  146.   }}

  147. 

  148. ########################################################################

  149. #                                                                      #

  150. # /base                                                                #

  151. #                                                                      #

  152. ########################################################################

  153. 

  154. 

  155. ########################################################################

  156. #                                                                      #

  157. # com.devture.ansible.role.systemd_service_manager                     #

  158. #                                                                      #

  159. ########################################################################

  160. 

  161. # This list is not exhaustive and final.

  162. # Synapse workers are still injected into the list at runtime.

  163. # Additional JVB workers (playbooks/jitsi_jvb.yml -- roles/custom/matrix-jitsi/tasks/init_additional_jvb.yml) override this variable at runtime as well.

  164. #

  165. # Priority levels are like this:

  166. # - core services (the homeserver) get a level of ~1000

  167. # - services that core services depend on (database, Redis, ntfy, etc.) get a lower level - between 500 and 1000

  168. # - reverse-proxying services get level 3000

  169. # - Matrix utility services (bridges, bots) get a level of 2000/2200, so that:

  170. #   - they can start before the reverse-proxy

  171. #   - so that, when the reverse-proxy is up (Matrix is up), all bots and bridges can be interacted with

  172. # - monitoring services (Prometheus, Grafana, ..) get a level of 4000 - they can start later than all-of-Matrix

  173. # - services which aren't time-sensitive (various crons and timers) get a level of 5000 - they can start later than all-of-Matrix

  174. devture_systemd_service_manager_services_list_auto: |

  175.   {{

  176.     ([{'name': 'matrix-backup-borg.timer', 'priority': 5000, 'groups': ['matrix', 'backup', 'borg']}] if matrix_backup_borg_enabled else [])

  177.     +

  178.     ([{'name': 'matrix-bot-buscarron.service', 'priority': 2200, 'groups': ['matrix', 'bots', 'buscarron']}] if matrix_bot_buscarron_enabled else [])

  179.     +

  180.     ([{'name': 'matrix-bot-go-neb.service', 'priority': 2200, 'groups': ['matrix', 'bots', 'go-neb']}] if matrix_bot_go_neb_enabled else [])

  181.     +

  182.     ([{'name': 'matrix-bot-honoroit.service', 'priority': 2200, 'groups': ['matrix', 'bots', 'honoroit']}] if matrix_bot_honoroit_enabled else [])

  183.     +

  184.     ([{'name': 'matrix-bot-matrix-registration-bot.service', 'priority': 2200, 'groups': ['matrix', 'bots', 'registration-bot']}] if matrix_bot_matrix_registration_bot_enabled else [])

  185.     +

  186.     ([{'name': 'matrix-bot-matrix-reminder-bot.service', 'priority': 2200, 'groups': ['matrix', 'bots', 'reminder-bot']}] if matrix_bot_matrix_reminder_bot_enabled else [])

  187.     +

  188.     ([{'name': 'matrix-bot-maubot.service', 'priority': 2200, 'groups': ['matrix', 'bots', 'maubot']}] if matrix_bot_maubot_enabled else [])

  189.     +

  190.     ([{'name': 'matrix-bot-mjolnir.service', 'priority': 2200, 'groups': ['matrix', 'bots', 'mjolnir']}] if matrix_bot_mjolnir_enabled else [])

  191.     +

  192.     ([{'name': 'matrix-bot-postmoogle.service', 'priority': 2200, 'groups': ['matrix', 'bots', 'postmoogle']}] if matrix_bot_postmoogle_enabled else [])

  193.     +

  194.     ([{'name': 'matrix-appservice-discord.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'appservice-discord']}] if matrix_appservice_discord_enabled else [])

  195.     +

  196.     ([{'name': 'matrix-appservice-irc.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'appservice-irc']}] if matrix_appservice_irc_enabled else [])

  197.     +

  198.     ([{'name': 'matrix-appservice-kakaotalk.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'appservice-kakaotalk']}] if matrix_appservice_kakaotalk_enabled else [])

  199.     +

  200.     ([{'name': 'matrix-appservice-kakaotalk-node.service', 'priority': 1900, 'groups': ['matrix', 'bridges', 'appservice-kakaotalk', 'appservice-kakaotalk-node']}] if matrix_appservice_kakaotalk_enabled else [])

  201.     +

  202.     ([{'name': 'matrix-appservice-slack.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'appservice-slack']}] if matrix_appservice_slack_enabled else [])

  203.     +

  204.     ([{'name': 'matrix-appservice-webhooks.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'appservice-webhooks']}] if matrix_appservice_webhooks_enabled else [])

  205.     +

  206.     ([{'name': 'matrix-beeper-linkedin.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'beeper-linkedin']}] if matrix_beeper_linkedin_enabled else [])

  207.     +

  208.     ([{'name': 'matrix-go-skype-bridge.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'go-skype']}] if matrix_go_skype_bridge_enabled else [])

  209.     +

  210.     ([{'name': 'matrix-heisenbridge.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'heisenbridge']}] if matrix_heisenbridge_enabled else [])

  211.     +

  212.     ([{'name': 'matrix-hookshot.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'hookshot']}] if matrix_hookshot_enabled else [])

  213.     +

  214.     ([{'name': 'matrix-mautrix-discord.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mautrix-discord']}] if matrix_mautrix_discord_enabled else [])

  215.     +

  216.     ([{'name': 'matrix-mautrix-slack.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mautrix-slack']}] if matrix_mautrix_slack_enabled else [])

  217.     +

  218.     ([{'name': 'matrix-mautrix-facebook.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mautrix-facebook']}] if matrix_mautrix_facebook_enabled else [])

  219.     +

  220.     ([{'name': 'matrix-mautrix-googlechat.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mautrix-googlechat']}] if matrix_mautrix_googlechat_enabled else [])

  221.     +

  222.     ([{'name': 'matrix-mautrix-hangouts.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mautrix-hangouts']}] if matrix_mautrix_hangouts_enabled else [])

  223.     +

  224.     ([{'name': 'matrix-mautrix-instagram.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mautrix-instagram']}] if matrix_mautrix_instagram_enabled else [])

  225.     +

  226.     ([{'name': 'matrix-mautrix-signal.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mautrix-signal']}] if matrix_mautrix_signal_enabled else [])

  227.     +

  228.     ([{'name': 'matrix-mautrix-signal-daemon.service', 'priority': 1900, 'groups': ['matrix', 'bridges', 'mautrix-signal', 'mautrix-signal-daemon']}] if matrix_mautrix_signal_enabled else [])

  229.     +

  230.     ([{'name': 'matrix-mautrix-telegram.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mautrix-telegram']}] if matrix_mautrix_telegram_enabled else [])

  231.     +

  232.     ([{'name': 'matrix-mautrix-twitter.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mautrix-twitter']}] if matrix_mautrix_twitter_enabled else [])

  233.     +

  234.     ([{'name': 'matrix-mautrix-whatsapp.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mautrix-whatsapp']}] if matrix_mautrix_whatsapp_enabled else [])

  235.     +

  236.     ([{'name': 'matrix-mx-puppet-discord.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mx-puppet-discord']}] if matrix_mx_puppet_discord_enabled else [])

  237.     +

  238.     ([{'name': 'matrix-mx-puppet-groupme.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mx-puppet-groupme']}] if matrix_mx_puppet_groupme_enabled else [])

  239.     +

  240.     ([{'name': 'matrix-mx-puppet-instagram.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mx-puppet-instagram']}] if matrix_mx_puppet_instagram_enabled else [])

  241.     +

  242.     ([{'name': 'matrix-mx-puppet-slack.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mx-puppet-slack']}] if matrix_mx_puppet_slack_enabled else [])

  243.     +

  244.     ([{'name': 'matrix-mx-puppet-steam.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mx-puppet-steam']}] if matrix_mx_puppet_steam_enabled else [])

  245.     +

  246.     ([{'name': 'matrix-mx-puppet-twitter.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mx-puppet-twitter']}] if matrix_mx_puppet_twitter_enabled else [])

  247.     +

  248.     ([{'name': 'matrix-sms-bridge.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'sms']}] if matrix_sms_bridge_enabled else [])

  249.     +

  250.     ([{'name': 'matrix-cactus-comments.service', 'priority': 2000, 'groups': ['matrix', 'cactus-comments']}] if matrix_cactus_comments_enabled else [])

  251.     +

  252.     ([{'name': 'matrix-client-cinny.service', 'priority': 2000, 'groups': ['matrix', 'clients', 'cinny']}] if matrix_client_cinny_enabled else [])

  253.     +

  254.     ([{'name': 'matrix-client-element.service', 'priority': 2000, 'groups': ['matrix', 'clients', 'element']}] if matrix_client_element_enabled else [])

  255.     +

  256.     ([{'name': 'matrix-client-hydrogen.service', 'priority': 2000, 'groups': ['matrix', 'clients', 'hydrogen']}] if matrix_client_hydrogen_enabled else [])

  257.     +

  258.     ([{'name': ('matrix-' + matrix_homeserver_implementation + '.service'), 'priority': 1000, 'groups': ['matrix', 'homeservers', matrix_homeserver_implementation]}] if matrix_homeserver_enabled else [])

  259.     +

  260.     ([{'name': 'matrix-corporal.service', 'priority': 1500, 'groups': ['matrix', 'corporal']}] if matrix_corporal_enabled else [])

  261.     +

  262.     ([{'name': 'matrix-coturn.service', 'priority': 4000, 'groups': ['matrix', 'coturn']}] if matrix_coturn_enabled else [])

  263.     +

  264.     ([{'name': 'matrix-coturn-reload.timer', 'priority': 5000, 'groups': ['matrix', 'coturn']}] if (matrix_coturn_enabled and matrix_coturn_tls_enabled) else [])

  265.     +

  266.     ([{'name': 'matrix-dimension.service', 'priority': 2500, 'groups': ['matrix', 'integration-managers', 'dimension']}] if matrix_dimension_enabled else [])

  267.     +

  268.     ([{'name': 'matrix-dynamic-dns.service', 'priority': 5000, 'groups': ['matrix', 'dynamic-dns']}] if matrix_dynamic_dns_enabled else [])

  269.     +

  270.     ([{'name': 'matrix-email2matrix.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'email2matrix']}] if matrix_email2matrix_enabled else [])

  271.     +

  272.     ([{'name': 'matrix-etherpad.service', 'priority': 4000, 'groups': ['matrix', 'etherpad']}] if matrix_etherpad_enabled else [])

  273.     +

  274.     ([{'name': 'matrix-grafana.service', 'priority': 4000, 'groups': ['matrix', 'monitoring', 'grafana']}] if matrix_grafana_enabled else [])

  275.     +

  276.     ([{'name': 'matrix-jitsi-web.service', 'priority': 4200, 'groups': ['matrix', 'jitsi', 'jitsi-web']}] if matrix_jitsi_enabled else [])

  277.     +

  278.     ([{'name': 'matrix-jitsi-prosody.service', 'priority': 4000, 'groups': ['matrix', 'jitsi', 'jitsi-prosody']}] if matrix_jitsi_enabled else [])

  279.     +

  280.     ([{'name': 'matrix-jitsi-jicofo.service', 'priority': 4100, 'groups': ['matrix', 'jitsi', 'jitsi-jicofo']}] if matrix_jitsi_enabled else [])

  281.     +

  282.     ([{'name': 'matrix-jitsi-jvb.service', 'priority': 4100, 'groups': ['matrix', 'jitsi', 'jitsi-jvb']}] if matrix_jitsi_enabled else [])

  283.     +

  284.     ([{'name': 'matrix-ldap-registration-proxy.service', 'priority': 2000, 'groups': ['matrix', 'ldap-registration-proxy']}] if matrix_ldap_registration_proxy_enabled else [])

  285.     +

  286.     ([{'name': 'matrix-ma1sd.service', 'priority': 2000, 'groups': ['matrix', 'ma1sd']}] if matrix_ma1sd_enabled else [])

  287.     +

  288.     ([{'name': 'matrix-mailer.service', 'priority': 2000, 'groups': ['matrix', 'mailer']}] if matrix_mailer_enabled else [])

  289.     +

  290.     ([{'name': 'matrix-nginx-proxy.service', 'priority': 3000, 'groups': ['matrix', 'nginx', 'reverse-proxies']}] if matrix_nginx_proxy_enabled else [])

  291.     +

  292.     (matrix_ssl_renewal_systemd_units_list | selectattr('applicable') | selectattr('enableable'))

  293.     +

  294.     ([{'name': 'matrix-ntfy.service', 'priority': 800, 'groups': ['matrix', 'ntfy']}] if matrix_ntfy_enabled else [])

  295.     +

  296.     ([{'name': (devture_postgres_identifier + '.service'), 'priority': 500, 'groups': ['matrix', 'postgres']}] if devture_postgres_enabled else [])

  297.     +

  298.     ([{'name': (devture_postgres_backup_identifier + '.service'), 'priority': 5000, 'groups': ['matrix', 'backup', 'postgres-backup']}] if devture_postgres_backup_enabled else [])

  299.     +

  300.     ([{'name': 'matrix-prometheus.service', 'priority': 4000, 'groups': ['matrix', 'monitoring', 'prometheus', 'prometheus-core']}] if matrix_prometheus_enabled else [])

  301.     +

  302.     ([{'name': 'matrix-prometheus-node-exporter.service', 'priority': 3900, 'groups': ['matrix', 'monitoring', 'prometheus', 'prometheus-node-exporters']}] if matrix_prometheus_node_exporter_enabled else [])

  303.     +

  304.     ([{'name': 'matrix-prometheus-postgres-exporter.service', 'priority': 3900, 'groups': ['matrix', 'monitoring', 'prometheus', 'prometheus-node-exporters']}] if matrix_prometheus_postgres_exporter_enabled else [])

  305.     +

  306.     ([{'name': 'matrix-prometheus-nginxlog-exporter.service', 'priority': 3900, 'groups': ['matrix', 'monitoring', 'prometheus', 'prometheus-node-exporters']}] if matrix_prometheus_nginxlog_exporter_enabled else [])

  307.     +

  308.     ([{'name': 'matrix-redis', 'priority': 750, 'groups': ['matrix', 'redis']}] if matrix_redis_enabled else [])

  309.     +

  310.     ([{'name': 'matrix-registration.service', 'priority': 4000, 'groups': ['matrix', 'registration']}] if matrix_registration_enabled else [])

  311.     +

  312.     ([{'name': 'matrix-sygnal.service', 'priority': 800, 'groups': ['matrix', 'sygnal']}] if matrix_sygnal_enabled else [])

  313.     +

  314.     ([{'name': 'matrix-goofys.service', 'priority': 800, 'groups': ['matrix', 'goofys']}] if matrix_s3_media_store_enabled else [])

  315.     +

  316.     ([{'name': 'matrix-synapse-s3-storage-provider-migrate.timer', 'priority': 5000, 'groups': ['matrix']}] if matrix_synapse_ext_synapse_s3_storage_provider_enabled else [])

  317.     +

  318.     ([{'name': 'matrix-synapse-admin.service', 'priority': 4000, 'groups': ['matrix', 'synapse-admin']}] if matrix_synapse_admin_enabled else [])

  319.     +

  320.     ([{'name': 'matrix-synapse-reverse-proxy-companion.service', 'priority': 1500, 'groups': ['matrix', 'homeservers', 'synapse', 'reverse-proxies']}] if matrix_synapse_reverse_proxy_companion_enabled else [])

  321.   }}

  322. 

  323. ########################################################################

  324. #                                                                      #

  325. # /com.devture.ansible.role.systemd_service_manager                    #

  326. #                                                                      #

  327. ########################################################################

  328. 

  329. 

  330. ########################################################################

  331. #                                                                      #

  332. # com.devture.ansible.role.timesync                                    #

  333. #                                                                      #

  334. ########################################################################

  335. 

  336. # To completely disable installing systemd-timesyncd/ntpd, use `devture_timesync_installation_enabled: false`.

  337. 

  338. ########################################################################

  339. #                                                                      #

  340. # /com.devture.ansible.role.timesync                                   #

  341. #                                                                      #

  342. ########################################################################

  343. 

  344. 

  345. 

  346. ######################################################################

  347. #

  348. # com.devture.ansible.role.playbook_state_preserver

  349. #

  350. ######################################################################

  351. 

  352. # To completely disable this feature, use `devture_playbook_state_preserver_enabled: false`.

  353. 

  354. devture_playbook_state_preserver_uid: "{{ matrix_user_uid }}"

  355. devture_playbook_state_preserver_gid: "{{ matrix_user_gid }}"

  356. 

  357. devture_playbook_state_preserver_vars_preservation_dst: "{{ matrix_base_data_path }}/vars.yml"

  358. 

  359. devture_playbook_state_preserver_commit_hash_preservation_dst: "{{ matrix_base_data_path }}/git_hash.yml"

  360. 

  361. ######################################################################

  362. #

  363. # /com.devture.ansible.role.playbook_state_preserver

  364. #

  365. ######################################################################

  366. 

  367. 

  368. 

  369. ######################################################################

  370. #

  371. # matrix-base

  372. #

  373. ######################################################################

  374. 

  375. matrix_identity_server_url: "{{ ('https://' + matrix_server_fqn_matrix) if matrix_ma1sd_enabled else None }}"

  376. 

  377. matrix_homeserver_container_url: |-

  378.   {{

  379.     'http://matrix-nginx-proxy:12080' if matrix_nginx_proxy_enabled else {

  380.       'synapse': ('http://matrix-synapse-reverse-proxy-companion:8008' if matrix_synapse_reverse_proxy_companion_enabled else 'http://matrix-synapse:'+ matrix_synapse_container_client_api_port|string),

  381.       'dendrite': ('http://matrix-dendrite:' + matrix_dendrite_http_bind_port|string),

  382.       'conduit': ('http://matrix-conduit:' + matrix_conduit_port_number|string),

  383.     }[matrix_homeserver_implementation]

  384.   }}

  385. 

  386. matrix_homeserver_container_federation_url: |-

  387.   {{

  388.     'http://matrix-nginx-proxy:12088' if matrix_nginx_proxy_enabled else {

  389.       'synapse': ('http://matrix-synapse-reverse-proxy-companion:8048' if matrix_synapse_reverse_proxy_companion_enabled else 'http://matrix-synapse:'+ matrix_synapse_container_federation_api_plain_port|string),

  390.       'dendrite': ('http://matrix-dendrite:' + matrix_dendrite_http_bind_port|string),

  391.       'conduit': ('http://matrix-conduit:' + matrix_conduit_port_number|string),

  392.     }[matrix_homeserver_implementation]

  393.   }}

  394. 

  395. matrix_integration_manager_rest_url: "{{ matrix_dimension_integrations_rest_url if matrix_dimension_enabled else None }}"

  396. matrix_integration_manager_ui_url: "{{ matrix_dimension_integrations_ui_url if matrix_dimension_enabled else None }}"

  397. 

  398. ######################################################################

  399. #

  400. # /matrix-base

  401. #

  402. ######################################################################

  403. 

  404. 

  405. ######################################################################

  406. #

  407. # matrix-bridge-appservice-discord

  408. #

  409. ######################################################################

  410. 

  411. # We don't enable bridges by default.

  412. matrix_appservice_discord_enabled: false

  413. 

  414. # Normally, matrix-nginx-proxy is enabled and nginx can reach matrix-appservice-discord over the container network.

  415. # If matrix-nginx-proxy is not enabled, or you otherwise have a need for it, you can expose

  416. # matrix-appservice-discord's client-server port to the local host.

  417. matrix_appservice_discord_container_http_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else '127.0.0.1:9005' }}"

  418. 

  419. # If the homeserver disables presence, it's likely better (less wasteful) to also disable presence on the bridge side.

  420. matrix_appservice_discord_bridge_disablePresence: "{{ not matrix_synapse_presence_enabled }}"

  421. 

  422. matrix_appservice_discord_systemd_required_services_list: |

  423.   {{

  424.     ['docker.service']

  425.     +

  426.     ['matrix-' + matrix_homeserver_implementation + '.service']

  427.     +

  428.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  429.     +

  430.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  431.   }}

  432. 

  433. matrix_appservice_discord_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'discord.as.token', rounds=655555) | to_uuid }}"

  434. 

  435. matrix_appservice_discord_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'discord.hs.token', rounds=655555) | to_uuid }}"

  436. 

  437. # We only make this use Postgres if our own Postgres server is enabled.

  438. # It's only then (for now) that we can automatically create the necessary database and user for this service.

  439. matrix_appservice_discord_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  440. matrix_appservice_discord_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  441. matrix_appservice_discord_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'as.discord.db', rounds=655555) | to_uuid }}"

  442. 

  443. ######################################################################

  444. #

  445. # /matrix-bridge-appservice-discord

  446. #

  447. ######################################################################

  448. 

  449. 

  450. ######################################################################

  451. #

  452. # matrix-appservice-webhooks

  453. #

  454. ######################################################################

  455. 

  456. # We don't enable bridges by default.

  457. matrix_appservice_webhooks_enabled: false

  458. 

  459. matrix_appservice_webhooks_container_image_self_build: "{{ matrix_architecture != 'amd64' }}"

  460. 

  461. # Normally, matrix-nginx-proxy is enabled and nginx can reach matrix-appservice-webhooks over the container network.

  462. # If matrix-nginx-proxy is not enabled, or you otherwise have a need for it, you can expose

  463. # matrix-appservice-webhooks' client-server port to the local host.

  464. matrix_appservice_webhooks_container_http_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else ('127.0.0.1:' ~ matrix_appservice_webhooks_matrix_port) }}"

  465. 

  466. matrix_appservice_webhooks_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'webhook.as.token', rounds=655555) | to_uuid }}"

  467. 

  468. matrix_appservice_webhooks_homeserver_url: "{{ matrix_homeserver_container_url }}"

  469. matrix_appservice_webhooks_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'webhook.hs.token', rounds=655555) | to_uuid }}"

  470. 

  471. matrix_appservice_webhooks_id_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'webhook.id.token', rounds=655555) | to_uuid }}"

  472. 

  473. matrix_appservice_webhooks_systemd_required_services_list: |

  474.   {{

  475.     ['docker.service']

  476.     +

  477.     ['matrix-' + matrix_homeserver_implementation + '.service']

  478.     +

  479.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  480.   }}

  481. 

  482. ######################################################################

  483. #

  484. # /matrix-appservice-webhooks

  485. #

  486. ######################################################################

  487. 

  488. 

  489. ######################################################################

  490. #

  491. # matrix-appservice-slack

  492. #

  493. ######################################################################

  494. 

  495. # We don't enable bridges by default.

  496. matrix_appservice_slack_enabled: false

  497. 

  498. matrix_appservice_slack_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"

  499. 

  500. # Normally, matrix-nginx-proxy is enabled and nginx can reach matrix-appservice-slack over the container network.

  501. # If matrix-nginx-proxy is not enabled, or you otherwise have a need for it, you can expose

  502. # matrix-appservice-slack's client-server port to the local host.

  503. matrix_appservice_slack_container_http_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else ('127.0.0.1:' ~ matrix_appservice_slack_slack_port) }}"

  504. 

  505. matrix_appservice_slack_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'slack.as.token', rounds=655555) | to_uuid }}"

  506. 

  507. matrix_appservice_slack_homeserver_url: "{{ matrix_homeserver_container_url }}"

  508. matrix_appservice_slack_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'slack.hs.token', rounds=655555) | to_uuid }}"

  509. 

  510. matrix_appservice_slack_id_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'slack.id.token', rounds=655555) | to_uuid }}"

  511. 

  512. matrix_appservice_slack_systemd_required_services_list: |

  513.   {{

  514.     ['docker.service']

  515.     +

  516.     ['matrix-' + matrix_homeserver_implementation + '.service']

  517.     +

  518.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  519.   }}

  520. 

  521. # Postgres is the default, except if not using internal Postgres server

  522. matrix_appservice_slack_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'nedb' }}"

  523. matrix_appservice_slack_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  524. matrix_appservice_slack_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'as.slack.db', rounds=655555) | to_uuid }}"

  525. 

  526. ######################################################################

  527. #

  528. # /matrix-bridge-appservice-slack

  529. #

  530. ######################################################################

  531. 

  532. ######################################################################

  533. #

  534. # matrix-bridge-appservice-irc

  535. #

  536. ######################################################################

  537. 

  538. # We don't enable bridges by default.

  539. matrix_appservice_irc_enabled: false

  540. 

  541. matrix_appservice_irc_container_image_self_build: "{{ matrix_architecture != 'amd64' }}"

  542. 

  543. # Normally, matrix-nginx-proxy is enabled and nginx can reach matrix-appservice-irc over the container network.

  544. # If matrix-nginx-proxy is not enabled, or you otherwise have a need for it, you can expose

  545. # matrix-appservice-irc's client-server port to the local host.

  546. matrix_appservice_irc_container_http_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else '127.0.0.1:9999' }}"

  547. 

  548. # The IRC bridge docs say that if homeserver presence is disabled, it's better to also disable

  549. # IRC bridge presence, for performance reasons.

  550. matrix_appservice_irc_homeserver_enablePresence: "{{ matrix_synapse_presence_enabled }}"

  551. 

  552. matrix_appservice_irc_systemd_required_services_list: |

  553.   {{

  554.     ['docker.service']

  555.     +

  556.     ['matrix-' + matrix_homeserver_implementation + '.service']

  557.     +

  558.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  559.   }}

  560. 

  561. matrix_appservice_irc_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'irc.as.token', rounds=655555) | to_uuid }}"

  562. 

  563. matrix_appservice_irc_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'irc.hs.token', rounds=655555) | to_uuid }}"

  564. 

  565. matrix_appservice_irc_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'nedb' }}"

  566. matrix_appservice_irc_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  567. matrix_appservice_irc_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'as.irc.db', rounds=655555) | to_uuid }}"

  568. 

  569. 

  570. ######################################################################

  571. #

  572. # /matrix-bridge-appservice-irc

  573. #

  574. ######################################################################

  575. 

  576. ######################################################################

  577. #

  578. # matrix-bridge-appservice-kakaotalk

  579. #

  580. ######################################################################

  581. 

  582. # We don't enable bridges by default.

  583. matrix_appservice_kakaotalk_enabled: false

  584. 

  585. matrix_appservice_kakaotalk_systemd_required_services_list: |

  586.   {{

  587.     ['docker.service']

  588.     +

  589.     ['matrix-appservice-kakaotalk-node.service']

  590.     +

  591.     ['matrix-' + matrix_homeserver_implementation + '.service']

  592.     +

  593.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  594.     +

  595.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  596.   }}

  597. 

  598. matrix_appservice_kakaotalk_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'as.kakao.hs', rounds=655555) | to_uuid }}"

  599. 

  600. matrix_appservice_kakaotalk_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'as.kakao.hs', rounds=655555) | to_uuid }}"

  601. 

  602. matrix_appservice_kakaotalk_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  603. 

  604. matrix_appservice_kakaotalk_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  605. matrix_appservice_kakaotalk_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  606. matrix_appservice_kakaotalk_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'as.kakao.db', rounds=655555) | to_uuid }}"

  607. 

  608. ######################################################################

  609. #

  610. # /matrix-bridge-appservice-kakaotalk

  611. #

  612. ######################################################################

  613. 

  614. 

  615. ######################################################################

  616. #

  617. # matrix-bridge-beeper-linkedin

  618. #

  619. ######################################################################

  620. 

  621. # We don't enable bridges by default.

  622. matrix_beeper_linkedin_enabled: false

  623. 

  624. matrix_beeper_linkedin_container_image_self_build: "{{ matrix_architecture not in ['amd64'] }}"

  625. 

  626. matrix_beeper_linkedin_systemd_required_services_list: |

  627.   {{

  628.     ['docker.service']

  629.     +

  630.     ['matrix-' + matrix_homeserver_implementation + '.service']

  631.     +

  632.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  633.     +

  634.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  635.   }}

  636. 

  637. matrix_beeper_linkedin_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'linked.as.token', rounds=655555) | to_uuid }}"

  638. 

  639. matrix_beeper_linkedin_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'linked.hs.token', rounds=655555) | to_uuid }}"

  640. 

  641. matrix_beeper_linkedin_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  642. 

  643. matrix_beeper_linkedin_bridge_presence: "{{ matrix_synapse_presence_enabled if matrix_synapse_enabled else true }}"

  644. 

  645. matrix_beeper_linkedin_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  646. matrix_beeper_linkedin_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'maulinkedin.db', rounds=655555) | to_uuid }}"

  647. 

  648. ######################################################################

  649. #

  650. # /matrix-bridge-beeper-linkedin

  651. #

  652. ######################################################################

  653. 

  654. ######################################################################

  655. #

  656. # matrix-bridge-go-skype-bridge

  657. #

  658. ######################################################################

  659. 

  660. # We don't enable bridges by default.

  661. matrix_go_skype_bridge_enabled: false

  662. 

  663. matrix_go_skype_bridge_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"

  664. 

  665. matrix_go_skype_bridge_systemd_required_services_list: |

  666.   {{

  667.     ['docker.service']

  668.     +

  669.     ['matrix-' + matrix_homeserver_implementation + '.service']

  670.     +

  671.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  672.     +

  673.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  674.   }}

  675. 

  676. matrix_go_skype_bridge_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'skype.as.token', rounds=655555) | to_uuid }}"

  677. 

  678. matrix_go_skype_bridge_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'skype.hs.token', rounds=655555) | to_uuid }}"

  679. 

  680. matrix_go_skype_bridge_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  681. 

  682. # Postgres is the default, except if not using internal Postgres server

  683. matrix_go_skype_bridge_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  684. matrix_go_skype_bridge_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  685. matrix_go_skype_bridge_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'goskype.db', rounds=655555) | to_uuid }}"

  686. 

  687. ######################################################################

  688. #

  689. # /matrix-bridge-go-skype-bridge

  690. #

  691. ######################################################################

  692. 

  693. 

  694. ######################################################################

  695. #

  696. # matrix-bridge-mautrix-discord

  697. #

  698. ######################################################################

  699. 

  700. # We don't enable bridges by default.

  701. matrix_mautrix_discord_enabled: false

  702. 

  703. matrix_mautrix_discord_container_image_self_build: "{{ matrix_architecture not in ['arm64', 'amd64'] }}"

  704. 

  705. matrix_mautrix_discord_systemd_required_services_list: |

  706.   {{

  707.     ['docker.service']

  708.     +

  709.     ['matrix-' + matrix_homeserver_implementation + '.service']

  710.     +

  711.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  712.     +

  713.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  714.   }}

  715. 

  716. matrix_mautrix_discord_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'maudisc.as.tok', rounds=655555) | to_uuid }}"

  717. 

  718. matrix_mautrix_discord_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'maudisc.hs.tok', rounds=655555) | to_uuid }}"

  719. 

  720. matrix_mautrix_discord_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  721. 

  722. # Postgres is the default, except if not using internal Postgres server

  723. matrix_mautrix_discord_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  724. matrix_mautrix_discord_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  725. matrix_mautrix_discord_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'maudiscord.db', rounds=655555) | to_uuid }}"

  726. 

  727. ######################################################################

  728. #

  729. # /matrix-bridge-mautrix-discord

  730. #

  731. ######################################################################

  732. 

  733. 

  734. ######################################################################

  735. #

  736. # matrix-bridge-mautrix-slack

  737. #

  738. ######################################################################

  739. 

  740. # We don't enable bridges by default.

  741. matrix_mautrix_slack_enabled: false

  742. 

  743. matrix_mautrix_slack_container_image_self_build: "{{ matrix_architecture not in ['arm64', 'amd64'] }}"

  744. 

  745. matrix_mautrix_slack_systemd_required_services_list: |

  746.   {{

  747.     ['docker.service']

  748.     +

  749.     ['matrix-' + matrix_homeserver_implementation + '.service']

  750.     +

  751.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  752.     +

  753.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  754.   }}

  755. 

  756. matrix_mautrix_slack_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mauslack.as.tok', rounds=655555) | to_uuid }}"

  757. 

  758. matrix_mautrix_slack_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mauslack.hs.tok', rounds=655555) | to_uuid }}"

  759. 

  760. matrix_mautrix_slack_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  761. 

  762. # Postgres is the default, except if not using internal Postgres server

  763. matrix_mautrix_slack_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  764. matrix_mautrix_slack_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  765. matrix_mautrix_slack_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mauslack.db', rounds=655555) | to_uuid }}"

  766. 

  767. ######################################################################

  768. #

  769. # /matrix-bridge-mautrix-slack

  770. #

  771. ######################################################################

  772. 

  773. 

  774. ######################################################################

  775. #

  776. # matrix-bridge-mautrix-facebook

  777. #

  778. ######################################################################

  779. 

  780. # We don't enable bridges by default.

  781. matrix_mautrix_facebook_enabled: false

  782. 

  783. matrix_mautrix_facebook_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"

  784. 

  785. matrix_mautrix_facebook_systemd_required_services_list: |

  786.   {{

  787.     ['docker.service']

  788.     +

  789.     ['matrix-' + matrix_homeserver_implementation + '.service']

  790.     +

  791.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  792.     +

  793.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  794.   }}

  795. 

  796. matrix_mautrix_facebook_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'fb.as.token', rounds=655555) | to_uuid }}"

  797. 

  798. matrix_mautrix_facebook_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'fb.hs.token', rounds=655555) | to_uuid }}"

  799. 

  800. matrix_mautrix_facebook_public_endpoint: "/{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'facebook', rounds=655555) | to_uuid }}"

  801. 

  802. matrix_mautrix_facebook_container_http_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else '127.0.0.1:9008' }}"

  803. 

  804. matrix_mautrix_facebook_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  805. 

  806. matrix_mautrix_facebook_bridge_presence: "{{ matrix_synapse_presence_enabled if matrix_synapse_enabled else true }}"

  807. 

  808. # We'd like to force-set people with external Postgres to SQLite, so the bridge role can complain

  809. # and point them to a migration path.

  810. matrix_mautrix_facebook_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  811. matrix_mautrix_facebook_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  812. matrix_mautrix_facebook_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mau.fb.db', rounds=655555) | to_uuid }}"

  813. 

  814. ######################################################################

  815. #

  816. # /matrix-bridge-mautrix-facebook

  817. #

  818. ######################################################################

  819. 

  820. 

  821. ######################################################################

  822. #

  823. # matrix-bridge-mautrix-googlechat

  824. #

  825. ######################################################################

  826. 

  827. # We don't enable bridges by default.

  828. matrix_mautrix_googlechat_enabled: false

  829. 

  830. matrix_mautrix_googlechat_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"

  831. 

  832. matrix_mautrix_googlechat_systemd_required_services_list: |

  833.   {{

  834.     ['docker.service']

  835.     +

  836.     ['matrix-' + matrix_homeserver_implementation + '.service']

  837.     +

  838.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  839.     +

  840.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  841.   }}

  842. 

  843. matrix_mautrix_googlechat_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'gc.as.token', rounds=655555) | to_uuid }}"

  844. 

  845. matrix_mautrix_googlechat_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'gc.hs.token', rounds=655555) | to_uuid }}"

  846. 

  847. matrix_mautrix_googlechat_container_http_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else '127.0.0.1:9007' }}"

  848. 

  849. matrix_mautrix_googlechat_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  850. 

  851. # Postgres is the default, except if not using internal Postgres server

  852. matrix_mautrix_googlechat_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  853. matrix_mautrix_googlechat_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  854. matrix_mautrix_googlechat_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mau.gc.db', rounds=655555) | to_uuid }}"

  855. 

  856. ######################################################################

  857. #

  858. # /matrix-bridge-mautrix-googlechat

  859. #

  860. ######################################################################

  861. 

  862. 

  863. ######################################################################

  864. #

  865. # matrix-bridge-mautrix-hangouts

  866. #

  867. ######################################################################

  868. 

  869. # We don't enable bridges by default.

  870. matrix_mautrix_hangouts_enabled: false

  871. 

  872. matrix_mautrix_hangouts_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"

  873. 

  874. matrix_mautrix_hangouts_systemd_required_services_list: |

  875.   {{

  876.     ['docker.service']

  877.     +

  878.     ['matrix-' + matrix_homeserver_implementation + '.service']

  879.     +

  880.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  881.     +

  882.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  883.   }}

  884. 

  885. matrix_mautrix_hangouts_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'ho.as.token', rounds=655555) | to_uuid }}"

  886. 

  887. matrix_mautrix_hangouts_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'ho.hs.token', rounds=655555) | to_uuid }}"

  888. 

  889. matrix_mautrix_hangouts_container_http_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else '127.0.0.1:9007' }}"

  890. 

  891. matrix_mautrix_hangouts_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  892. 

  893. # Postgres is the default, except if not using internal Postgres server

  894. matrix_mautrix_hangouts_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  895. matrix_mautrix_hangouts_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  896. matrix_mautrix_hangouts_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mau.hangouts.db', rounds=655555) | to_uuid }}"

  897. 

  898. ######################################################################

  899. #

  900. # /matrix-bridge-mautrix-hangouts

  901. #

  902. ######################################################################

  903. 

  904. 

  905. ######################################################################

  906. #

  907. # matrix-bridge-mautrix-instagram

  908. #

  909. ######################################################################

  910. 

  911. # We don't enable bridges by default.

  912. matrix_mautrix_instagram_enabled: false

  913. 

  914. matrix_mautrix_instagram_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"

  915. 

  916. matrix_mautrix_instagram_systemd_required_services_list: |

  917.   {{

  918.     ['docker.service']

  919.     +

  920.     ['matrix-' + matrix_homeserver_implementation + '.service']

  921.     +

  922.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  923.     +

  924.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  925.   }}

  926. 

  927. matrix_mautrix_instagram_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'ig.as.token', rounds=655555) | to_uuid }}"

  928. 

  929. matrix_mautrix_instagram_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'ig.hs.token', rounds=655555) | to_uuid }}"

  930. 

  931. matrix_mautrix_instagram_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  932. 

  933. matrix_mautrix_instagram_bridge_presence: "{{ matrix_synapse_presence_enabled if matrix_synapse_enabled else true }}"

  934. 

  935. # We'd like to force-set people with external Postgres to SQLite, so the bridge role can complain

  936. # and point them to a migration path.

  937. matrix_mautrix_instagram_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  938. matrix_mautrix_instagram_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  939. matrix_mautrix_instagram_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mau.ig.db', rounds=655555) | to_uuid }}"

  940. 

  941. ######################################################################

  942. #

  943. # /matrix-bridge-mautrix-instagram

  944. #

  945. ######################################################################

  946. 

  947. 

  948. ######################################################################

  949. #

  950. # matrix-bridge-mautrix-signal

  951. #

  952. ######################################################################

  953. 

  954. # We don't enable bridges by default.

  955. matrix_mautrix_signal_enabled: false

  956. 

  957. matrix_mautrix_signal_systemd_required_services_list: |

  958.   {{

  959.     ['docker.service']

  960.     +

  961.     ['matrix-' + matrix_homeserver_implementation + '.service']

  962.     +

  963.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  964.     +

  965.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  966.     +

  967.     ['matrix-mautrix-signal-daemon.service']

  968.   }}

  969. 

  970. matrix_mautrix_signal_homeserver_domain: '{{ matrix_domain }}'

  971. 

  972. matrix_mautrix_signal_homeserver_address: "{{ matrix_homeserver_container_url }}"

  973. 

  974. matrix_mautrix_signal_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'si.hs.token', rounds=655555) | to_uuid }}"

  975. 

  976. matrix_mautrix_signal_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'si.as.token', rounds=655555) | to_uuid }}"

  977. 

  978. matrix_mautrix_signal_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  979. 

  980. matrix_mautrix_signal_database_engine: 'postgres'

  981. matrix_mautrix_signal_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  982. matrix_mautrix_signal_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mau.signal.db', rounds=655555) | to_uuid }}"

  983. 

  984. matrix_mautrix_signal_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"

  985. matrix_mautrix_signal_daemon_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"

  986. 

  987. ######################################################################

  988. #

  989. # /matrix-bridge-mautrix-signal

  990. #

  991. ######################################################################

  992. 

  993. ######################################################################

  994. #

  995. # matrix-bridge-mautrix-telegram

  996. #

  997. ######################################################################

  998. 

  999. # We don't enable bridges by default.

  1000. matrix_mautrix_telegram_enabled: false

  1001. 

  1002. # Images are multi-arch (amd64 and arm64, but not arm32).

  1003. matrix_mautrix_telegram_container_image_self_build: "{{ matrix_architecture not in ['arm64', 'amd64'] }}"

  1004. matrix_telegram_lottieconverter_container_image_self_build: "{{ matrix_architecture not in ['arm64', 'amd64'] }}"

  1005. matrix_telegram_lottieconverter_container_image_self_build_mask_arch: "{{ matrix_architecture != 'amd64' }}"

  1006. 

  1007. matrix_mautrix_telegram_systemd_required_services_list: |

  1008.   {{

  1009.     ['docker.service']

  1010.     +

  1011.     ['matrix-' + matrix_homeserver_implementation + '.service']

  1012.     +

  1013.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  1014.     +

  1015.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1016.   }}

  1017. 

  1018. matrix_mautrix_telegram_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'telegr.as.token', rounds=655555) | to_uuid }}"

  1019. 

  1020. matrix_mautrix_telegram_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'telegr.hs.token', rounds=655555) | to_uuid }}"

  1021. 

  1022. matrix_mautrix_telegram_public_endpoint: "/{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'telegram', rounds=655555) | to_uuid }}"

  1023. 

  1024. matrix_mautrix_telegram_container_http_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else '127.0.0.1:9006' }}"

  1025. 

  1026. matrix_mautrix_telegram_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  1027. 

  1028. # Postgres is the default, except if not using internal Postgres server

  1029. matrix_mautrix_telegram_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  1030. matrix_mautrix_telegram_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1031. matrix_mautrix_telegram_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mau.telegram.db', rounds=655555) | to_uuid }}"

  1032. 

  1033. ######################################################################

  1034. #

  1035. # /matrix-bridge-mautrix-telegram

  1036. #

  1037. ######################################################################

  1038. 

  1039. ######################################################################

  1040. #

  1041. # matrix-bridge-mautrix-twitter

  1042. #

  1043. ######################################################################

  1044. 

  1045. # We don't enable bridges by default.

  1046. matrix_mautrix_twitter_enabled: false

  1047. 

  1048. matrix_mautrix_twitter_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"

  1049. 

  1050. matrix_mautrix_twitter_systemd_required_services_list: |

  1051.   {{

  1052.     ['docker.service']

  1053.     +

  1054.     ['matrix-' + matrix_homeserver_implementation + '.service']

  1055.     +

  1056.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  1057.     +

  1058.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1059.   }}

  1060. 

  1061. matrix_mautrix_twitter_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'twt.as.token', rounds=655555) | to_uuid }}"

  1062. 

  1063. matrix_mautrix_twitter_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'twt.hs.token', rounds=655555) | to_uuid }}"

  1064. 

  1065. matrix_mautrix_twitter_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  1066. 

  1067. matrix_mautrix_twitter_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1068. matrix_mautrix_twitter_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mau.twt.db', rounds=655555) | to_uuid if devture_postgres_enabled else '' }}"

  1069. 

  1070. ######################################################################

  1071. #

  1072. # /matrix-bridge-mautrix-twitter

  1073. #

  1074. ######################################################################

  1075. 

  1076. ######################################################################

  1077. #

  1078. # matrix-bridge-mautrix-whatsapp

  1079. #

  1080. ######################################################################

  1081. 

  1082. # We don't enable bridges by default.

  1083. matrix_mautrix_whatsapp_enabled: false

  1084. 

  1085. matrix_mautrix_whatsapp_container_image_self_build: "{{ matrix_architecture not in ['arm64', 'amd64'] }}"

  1086. 

  1087. matrix_mautrix_whatsapp_systemd_required_services_list: |

  1088.   {{

  1089.     ['docker.service']

  1090.     +

  1091.     ['matrix-' + matrix_homeserver_implementation + '.service']

  1092.     +

  1093.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  1094.     +

  1095.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1096.   }}

  1097. 

  1098. matrix_mautrix_whatsapp_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'whats.as.token', rounds=655555) | to_uuid }}"

  1099. 

  1100. matrix_mautrix_whatsapp_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'whats.hs.token', rounds=655555) | to_uuid }}"

  1101. 

  1102. matrix_mautrix_whatsapp_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  1103. 

  1104. # Postgres is the default, except if not using internal Postgres server

  1105. matrix_mautrix_whatsapp_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  1106. matrix_mautrix_whatsapp_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1107. matrix_mautrix_whatsapp_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mauwhatsapp.db', rounds=655555) | to_uuid }}"

  1108. 

  1109. ######################################################################

  1110. #

  1111. # /matrix-bridge-mautrix-whatsapp

  1112. #

  1113. ######################################################################

  1114. 

  1115. ######################################################################

  1116. #

  1117. # matrix-sms-bridge

  1118. #

  1119. ######################################################################

  1120. 

  1121. # We don't enable bridges by default.

  1122. matrix_sms_bridge_enabled: false

  1123. 

  1124. matrix_sms_bridge_systemd_required_services_list: |

  1125.   {{

  1126.     ['docker.service']

  1127.     +

  1128.     ['matrix-' + matrix_homeserver_implementation + '.service']

  1129.     +

  1130.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1131.   }}

  1132. 

  1133. matrix_sms_bridge_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'sms.as.token', rounds=655555) | to_uuid }}"

  1134. 

  1135. matrix_sms_bridge_homeserver_port: "{{ matrix_synapse_container_client_api_port }}"

  1136. matrix_sms_bridge_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'sms.hs.token', rounds=655555) | to_uuid }}"

  1137. 

  1138. ######################################################################

  1139. #

  1140. # /matrix-sms-bridge

  1141. #

  1142. ######################################################################

  1143. 

  1144. ######################################################################

  1145. #

  1146. # matrix-bridge-heisenbridge

  1147. #

  1148. ######################################################################

  1149. 

  1150. # We don't enable bridges by default.

  1151. matrix_heisenbridge_enabled: false

  1152. 

  1153. matrix_heisenbridge_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'heisen.as.tok', rounds=655555) | to_uuid }}"

  1154. 

  1155. matrix_heisenbridge_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'heisen.hs.tok', rounds=655555) | to_uuid }}"

  1156. 

  1157. matrix_heisenbridge_systemd_wanted_services_list: |

  1158.   {{

  1159.     ['matrix-' + matrix_homeserver_implementation + '.service']

  1160.     +

  1161.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1162.   }}

  1163. 

  1164. ######################################################################

  1165. #

  1166. # /matrix-bridge-heisenbridge

  1167. #

  1168. ######################################################################

  1169. 

  1170. ######################################################################

  1171. #

  1172. # matrix-bridge-hookshot

  1173. #

  1174. ######################################################################

  1175. 

  1176. # We don't enable bridges by default.

  1177. matrix_hookshot_enabled: false

  1178. 

  1179. matrix_hookshot_container_image_self_build: "{{ matrix_architecture not in ['arm64', 'amd64'] }}"

  1180. 

  1181. matrix_hookshot_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'hookshot.as.tok', rounds=655555) | to_uuid }}"

  1182. 

  1183. matrix_hookshot_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'hookshot.hs.tok', rounds=655555) | to_uuid }}"

  1184. 

  1185. matrix_hookshot_systemd_wanted_services_list: |

  1186.   {{

  1187.     (['matrix-' + matrix_homeserver_implementation + '.service'])

  1188.     +

  1189.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1190.   }}

  1191. 

  1192. matrix_hookshot_container_http_host_bind_ports_defaultmapping:

  1193.   - "127.0.0.1:{{ matrix_hookshot_appservice_port }}:{{ matrix_hookshot_appservice_port }}"

  1194.   - "127.0.0.1:{{ matrix_hookshot_metrics_port }}:{{ matrix_hookshot_metrics_port }}"

  1195.   - "127.0.0.1:{{ matrix_hookshot_webhook_port }}:{{ matrix_hookshot_webhook_port }}"

  1196.   - "127.0.0.1:{{ matrix_hookshot_provisioning_port }}:{{ matrix_hookshot_provisioning_port }}"

  1197. 

  1198. matrix_hookshot_container_http_host_bind_ports: "{{ [] if matrix_nginx_proxy_enabled else matrix_hookshot_container_http_host_bind_ports_defaultmapping }}"

  1199. 

  1200. matrix_hookshot_provisioning_enabled: "{{ matrix_hookshot_provisioning_secret and matrix_dimension_enabled }}"

  1201. 

  1202. # We only enable metrics (locally, in the container network) for the bridge if Prometheus is enabled.

  1203. #

  1204. # People using an external Prometheus server will need to toggle all of these to be able to consume metrics remotely:

  1205. # - `matrix_hookshot_metrics_enabled`

  1206. # - `matrix_hookshot_metrics_proxying_enabled`

  1207. # - `matrix_nginx_proxy_proxy_matrix_metrics_enabled`

  1208. matrix_hookshot_metrics_enabled: "{{ matrix_prometheus_enabled }}"

  1209. 

  1210. matrix_hookshot_urlprefix_port_enabled: "{{ matrix_nginx_proxy_container_https_host_bind_port == 443 if matrix_nginx_proxy_https_enabled else matrix_nginx_proxy_container_https_host_bind_port == 80 }}"

  1211. matrix_hookshot_urlprefix_port: ":{{ matrix_nginx_proxy_container_https_host_bind_port if matrix_nginx_proxy_https_enabled else matrix_nginx_proxy_container_http_host_bind_port }}"

  1212. matrix_hookshot_urlprefix: "http{{ 's' if matrix_nginx_proxy_https_enabled else '' }}://{{ matrix_server_fqn_matrix }}{{ matrix_hookshot_urlprefix_port if matrix_hookshot_urlprefix_port_enabled else '' }}"

  1213. 

  1214. ######################################################################

  1215. #

  1216. # /matrix-bridge-hookshot

  1217. #

  1218. ######################################################################

  1219. 

  1220. 

  1221. ######################################################################

  1222. #

  1223. # matrix-bridge-mx-puppet-slack

  1224. #

  1225. ######################################################################

  1226. 

  1227. # We don't enable bridges by default.

  1228. matrix_mx_puppet_slack_enabled: false

  1229. 

  1230. matrix_mx_puppet_slack_container_image_self_build: "{{ matrix_architecture != 'amd64' }}"

  1231. 

  1232. matrix_mx_puppet_slack_systemd_required_services_list: |

  1233.   {{

  1234.     ['docker.service']

  1235.     +

  1236.     ['matrix-' + matrix_homeserver_implementation + '.service']

  1237.     +

  1238.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  1239.     +

  1240.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1241.   }}

  1242. 

  1243. matrix_mx_puppet_slack_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxslk.as.tok', rounds=655555) | to_uuid }}"

  1244. 

  1245. matrix_mx_puppet_slack_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxslk.hs.tok', rounds=655555) | to_uuid }}"

  1246. 

  1247. matrix_mx_puppet_slack_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  1248. 

  1249. # Postgres is the default, except if not using internal Postgres server

  1250. matrix_mx_puppet_slack_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  1251. matrix_mx_puppet_slack_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1252. matrix_mx_puppet_slack_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxpup.slack.db', rounds=655555) | to_uuid }}"

  1253. 

  1254. ######################################################################

  1255. #

  1256. # /matrix-bridge-mx-puppet-slack

  1257. #

  1258. ######################################################################

  1259. 

  1260. ######################################################################

  1261. #

  1262. # matrix-bridge-mx-puppet-twitter

  1263. #

  1264. ######################################################################

  1265. 

  1266. # We don't enable bridges by default.

  1267. matrix_mx_puppet_twitter_enabled: false

  1268. 

  1269. matrix_mx_puppet_twitter_container_image_self_build: "{{ matrix_architecture != 'amd64' }}"

  1270. 

  1271. matrix_mx_puppet_twitter_systemd_required_services_list: |

  1272.   {{

  1273.     ['docker.service']

  1274.     +

  1275.     ['matrix-' + matrix_homeserver_implementation + '.service']

  1276.     +

  1277.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  1278.     +

  1279.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1280.   }}

  1281. 

  1282. matrix_mx_puppet_twitter_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxtwt.as.tok', rounds=655555) | to_uuid }}"

  1283. 

  1284. matrix_mx_puppet_twitter_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxtwt.hs.tok', rounds=655555) | to_uuid }}"

  1285. 

  1286. matrix_mx_puppet_twitter_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  1287. 

  1288. matrix_mx_puppet_twitter_container_http_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else ('127.0.0.1:' ~ matrix_mx_puppet_twitter_appservice_port) }}"

  1289. 

  1290. # Postgres is the default, except if not using internal Postgres server

  1291. matrix_mx_puppet_twitter_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  1292. matrix_mx_puppet_twitter_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1293. matrix_mx_puppet_twitter_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxpup.twitter.db', rounds=655555) | to_uuid }}"

  1294. 

  1295. ######################################################################

  1296. #

  1297. # /matrix-bridge-mx-puppet-twitter

  1298. #

  1299. ######################################################################

  1300. 

  1301. 

  1302. ######################################################################

  1303. #

  1304. # matrix-bridge-mx-puppet-instagram

  1305. #

  1306. ######################################################################

  1307. 

  1308. # We don't enable bridges by default.

  1309. matrix_mx_puppet_instagram_enabled: false

  1310. 

  1311. matrix_mx_puppet_instagram_container_image_self_build: "{{ matrix_architecture != 'amd64' }}"

  1312. 

  1313. matrix_mx_puppet_instagram_systemd_required_services_list: |

  1314.   {{

  1315.     ['docker.service']

  1316.     +

  1317.     ['matrix-' + matrix_homeserver_implementation + '.service']

  1318.     +

  1319.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  1320.     +

  1321.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1322.   }}

  1323. 

  1324. matrix_mx_puppet_instagram_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxig.as.tok', rounds=655555) | to_uuid }}"

  1325. 

  1326. matrix_mx_puppet_instagram_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxig.hs.tok', rounds=655555) | to_uuid }}"

  1327. 

  1328. matrix_mx_puppet_instagram_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  1329. 

  1330. # Postgres is the default, except if not using internal Postgres server

  1331. matrix_mx_puppet_instagram_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  1332. matrix_mx_puppet_instagram_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1333. matrix_mx_puppet_instagram_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxpup.ig.db', rounds=655555) | to_uuid }}"

  1334. 

  1335. ######################################################################

  1336. #

  1337. # /matrix-bridge-mx-puppet-instagram

  1338. #

  1339. ######################################################################

  1340. 

  1341. ######################################################################

  1342. #

  1343. # matrix-bridge-mx-puppet-discord

  1344. #

  1345. ######################################################################

  1346. 

  1347. # We don't enable bridges by default.

  1348. matrix_mx_puppet_discord_enabled: false

  1349. 

  1350. matrix_mx_puppet_discord_container_image_self_build: "{{ matrix_architecture != 'amd64' }}"

  1351. 

  1352. matrix_mx_puppet_discord_systemd_required_services_list: |

  1353.   {{

  1354.     ['docker.service']

  1355.     +

  1356.     ['matrix-' + matrix_homeserver_implementation + '.service']

  1357.     +

  1358.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  1359.     +

  1360.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1361.   }}

  1362. 

  1363. matrix_mx_puppet_discord_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxdsc.as.tok', rounds=655555) | to_uuid }}"

  1364. 

  1365. matrix_mx_puppet_discord_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxdsc.hs.tok', rounds=655555) | to_uuid }}"

  1366. 

  1367. matrix_mx_puppet_discord_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  1368. 

  1369. # Postgres is the default, except if not using internal Postgres server

  1370. matrix_mx_puppet_discord_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  1371. matrix_mx_puppet_discord_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1372. matrix_mx_puppet_discord_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxpup.dsc.db', rounds=655555) | to_uuid }}"

  1373. 

  1374. ######################################################################

  1375. #

  1376. # /matrix-bridge-mx-puppet-discord

  1377. #

  1378. ######################################################################

  1379. 

  1380. ######################################################################

  1381. #

  1382. # matrix-bridge-mx-puppet-steam

  1383. #

  1384. ######################################################################

  1385. 

  1386. # We don't enable bridges by default.

  1387. matrix_mx_puppet_steam_enabled: false

  1388. 

  1389. matrix_mx_puppet_steam_container_image_self_build: "{{ matrix_architecture not in ['arm64', 'amd64'] }}"

  1390. 

  1391. matrix_mx_puppet_steam_systemd_required_services_list: |

  1392.   {{

  1393.     ['docker.service']

  1394.     +

  1395.     ['matrix-' + matrix_homeserver_implementation + '.service']

  1396.     +

  1397.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  1398.     +

  1399.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1400.   }}

  1401. 

  1402. matrix_mx_puppet_steam_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxste.as.tok', rounds=655555) | to_uuid }}"

  1403. 

  1404. matrix_mx_puppet_steam_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxste.hs.tok', rounds=655555) | to_uuid }}"

  1405. 

  1406. matrix_mx_puppet_steam_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  1407. 

  1408. # Postgres is the default, except if not using internal Postgres server

  1409. matrix_mx_puppet_steam_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  1410. matrix_mx_puppet_steam_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1411. matrix_mx_puppet_steam_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxpup.steam.db', rounds=655555) | to_uuid }}"

  1412. 

  1413. ######################################################################

  1414. #

  1415. # /matrix-bridge-mx-puppet-steam

  1416. #

  1417. ######################################################################

  1418. 

  1419. ######################################################################

  1420. #

  1421. # matrix-bridge-mx-puppet-groupme

  1422. #

  1423. ######################################################################

  1424. 

  1425. # We don't enable bridges by default.

  1426. matrix_mx_puppet_groupme_enabled: false

  1427. 

  1428. matrix_mx_puppet_groupme_container_image_self_build: "{{ matrix_architecture != 'amd64' }}"

  1429. 

  1430. matrix_mx_puppet_groupme_systemd_required_services_list: |

  1431.   {{

  1432.     ['docker.service']

  1433.     +

  1434.     ['matrix-' + matrix_homeserver_implementation + '.service']

  1435.     +

  1436.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  1437.     +

  1438.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1439.   }}

  1440. 

  1441. matrix_mx_puppet_groupme_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxgro.as.tok', rounds=655555) | to_uuid }}"

  1442. 

  1443. matrix_mx_puppet_groupme_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxgro.hs.tok', rounds=655555) | to_uuid }}"

  1444. 

  1445. matrix_mx_puppet_groupme_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  1446. 

  1447. # Postgres is the default, except if not using internal Postgres server

  1448. matrix_mx_puppet_groupme_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  1449. matrix_mx_puppet_groupme_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1450. matrix_mx_puppet_groupme_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxpup.groupme.db', rounds=655555) | to_uuid }}"

  1451. 

  1452. ######################################################################

  1453. #

  1454. # /matrix-bridge-mx-puppet-groupme

  1455. #

  1456. ######################################################################

  1457. 

  1458. ######################################################################

  1459. #

  1460. # matrix-bot-matrix-reminder-bot

  1461. #

  1462. ######################################################################

  1463. 

  1464. # We don't enable bots by default.

  1465. matrix_bot_matrix_reminder_bot_enabled: false

  1466. 

  1467. matrix_bot_matrix_reminder_bot_systemd_required_services_list: |

  1468.   {{

  1469.     ['docker.service']

  1470.     +

  1471.     ['matrix-' + matrix_homeserver_implementation + '.service']

  1472.     +

  1473.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  1474.     +

  1475.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1476.   }}

  1477. 

  1478. # Postgres is the default, except if not using internal Postgres server

  1479. matrix_bot_matrix_reminder_bot_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  1480. matrix_bot_matrix_reminder_bot_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1481. matrix_bot_matrix_reminder_bot_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'reminder.bot.db', rounds=655555) | to_uuid }}"

  1482. matrix_bot_matrix_reminder_bot_container_image_self_build: "{{ matrix_architecture != 'amd64' }}"

  1483. 

  1484. ######################################################################

  1485. #

  1486. # /matrix-bot-matrix-reminder-bot

  1487. #

  1488. ######################################################################

  1489. 

  1490. 

  1491. ######################################################################

  1492. #

  1493. # matrix-bot-matrix-registration-bot

  1494. #

  1495. ######################################################################

  1496. 

  1497. # We don't enable bots by default.

  1498. matrix_bot_matrix_registration_bot_enabled: false

  1499. 

  1500. matrix_bot_matrix_registration_bot_container_image_self_build: "{{ matrix_architecture not in ['amd64'] }}"

  1501. 

  1502. matrix_bot_matrix_registration_bot_systemd_required_services_list: |

  1503.   {{

  1504.     ['docker.service']

  1505.     +

  1506.     ['matrix-' + matrix_homeserver_implementation + '.service']

  1507.     +

  1508.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1509.   }}

  1510. 

  1511. 

  1512. ######################################################################

  1513. #

  1514. # /matrix-bot-matrix-registration-bot

  1515. #

  1516. ######################################################################

  1517. 

  1518. ######################################################################

  1519. #

  1520. # matrix-bot-maubot

  1521. #

  1522. ######################################################################

  1523. 

  1524. # We don't enable bots by default.

  1525. matrix_bot_maubot_enabled: false

  1526. 

  1527. matrix_bot_maubot_container_image_self_build: "{{ matrix_architecture not in ['amd64'] }}"

  1528. 

  1529. matrix_bot_maubot_systemd_required_services_list: |

  1530.   {{

  1531.     ['docker.service']

  1532.     +

  1533.     ['matrix-' + matrix_homeserver_implementation + '.service']

  1534.     +

  1535.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  1536.     +

  1537.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1538.   }}

  1539. 

  1540. matrix_bot_maubot_registration_shared_secret: |-

  1541.   {{

  1542.     {

  1543.       'synapse': matrix_synapse_registration_shared_secret,

  1544.       'dendrite': matrix_dendrite_client_api_registration_shared_secret,

  1545.     }[matrix_homeserver_implementation]

  1546.   }}

  1547. 

  1548. matrix_bot_maubot_management_interface_http_bind_port: "{{ '' if matrix_nginx_proxy_enabled else ('127.0.0.1:' + matrix_bot_maubot_management_interface_port | string) }}"

  1549. 

  1550. # Postgres is the default, except if not using internal Postgres server

  1551. matrix_bot_maubot_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  1552. matrix_bot_maubot_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1553. matrix_bot_maubot_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxpup.dsc.db', rounds=655555) | to_uuid }}"

  1554. 

  1555. ######################################################################

  1556. #

  1557. # /matrix-bot-maubot

  1558. #

  1559. ######################################################################

  1560. 

  1561. 

  1562. ######################################################################

  1563. #

  1564. # matrix-bot-honoroit

  1565. #

  1566. ######################################################################

  1567. 

  1568. # We don't enable bots by default.

  1569. matrix_bot_honoroit_enabled: false

  1570. 

  1571. matrix_bot_honoroit_systemd_required_services_list: |

  1572.   {{

  1573.     ['docker.service']

  1574.     +

  1575.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  1576.     +

  1577.     (['matrix-synapse.service'] if matrix_synapse_enabled else [])

  1578.     +

  1579.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1580.   }}

  1581. 

  1582. # Postgres is the default, except if not using internal Postgres server

  1583. matrix_bot_honoroit_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  1584. matrix_bot_honoroit_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1585. matrix_bot_honoroit_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'honoroit.bot.db', rounds=655555) | to_uuid }}"

  1586. matrix_bot_honoroit_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"

  1587. 

  1588. ######################################################################

  1589. #

  1590. # /matrix-bot-honoroit

  1591. #

  1592. ######################################################################

  1593. 

  1594. ######################################################################

  1595. #

  1596. # matrix-bot-buscarron

  1597. #

  1598. ######################################################################

  1599. 

  1600. # We don't enable bots by default.

  1601. matrix_bot_buscarron_enabled: false

  1602. 

  1603. matrix_bot_buscarron_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"

  1604. 

  1605. matrix_bot_buscarron_systemd_required_services_list: |

  1606.   {{

  1607.     ['docker.service']

  1608.     +

  1609.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  1610.     +

  1611.     (['matrix-synapse.service'] if matrix_synapse_enabled else [])

  1612.     +

  1613.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1614.   }}

  1615. 

  1616. # Postgres is the default, except if not using internal Postgres server

  1617. matrix_bot_buscarron_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  1618. matrix_bot_buscarron_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1619. matrix_bot_buscarron_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'buscarron.bot.db', rounds=655555) | to_uuid }}"

  1620. 

  1621. ######################################################################

  1622. #

  1623. # /matrix-bot-buscarron

  1624. #

  1625. ######################################################################

  1626. 

  1627. ######################################################################

  1628. #

  1629. # matrix-bot-postmoogle

  1630. #

  1631. ######################################################################

  1632. 

  1633. # We don't enable bots by default.

  1634. matrix_bot_postmoogle_enabled: false

  1635. 

  1636. matrix_bot_postmoogle_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"

  1637. 

  1638. matrix_bot_postmoogle_ssl_path: "{{ matrix_ssl_config_dir_path }}"

  1639. matrix_bot_postmoogle_tls_cert: "{% for domain in matrix_bot_postmoogle_domains %}/ssl/live/{{ domain }}/fullchain.pem {% endfor %}"

  1640. matrix_bot_postmoogle_tls_key: "{% for domain in matrix_bot_postmoogle_domains %}/ssl/live/{{ domain }}/privkey.pem {% endfor %}"

  1641. 

  1642. matrix_bot_postmoogle_systemd_required_services_list: |

  1643.   {{

  1644.     ['docker.service']

  1645.     +

  1646.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  1647.     +

  1648.     (['matrix-synapse.service'] if matrix_synapse_enabled else [])

  1649.   }}

  1650. 

  1651. # Postgres is the default, except if not using internal Postgres server

  1652. matrix_bot_postmoogle_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  1653. matrix_bot_postmoogle_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1654. matrix_bot_postmoogle_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'postmoogle.db', rounds=655555) | to_uuid }}"

  1655. 

  1656. ######################################################################

  1657. #

  1658. # /matrix-bot-postmoogle

  1659. #

  1660. ######################################################################

  1661. 

  1662. 

  1663. ######################################################################

  1664. #

  1665. # matrix-bot-go-neb

  1666. #

  1667. ######################################################################

  1668. 

  1669. # We don't enable bots by default.

  1670. matrix_bot_go_neb_enabled: false

  1671. 

  1672. matrix_bot_go_neb_systemd_required_services_list: |

  1673.   {{

  1674.     ['docker.service']

  1675.     +

  1676.     ['matrix-' + matrix_homeserver_implementation + '.service']

  1677.     +

  1678.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1679.   }}

  1680. 

  1681. matrix_bot_go_neb_container_http_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else '127.0.0.1:4050' }}"

  1682. 

  1683. ######################################################################

  1684. #

  1685. # /matrix-bot-go-neb

  1686. #

  1687. ######################################################################

  1688. 

  1689. 

  1690. ######################################################################

  1691. #

  1692. # matrix-bot-mjolnir

  1693. #

  1694. ######################################################################

  1695. 

  1696. # We don't enable bots by default.

  1697. matrix_bot_mjolnir_enabled: false

  1698. 

  1699. matrix_bot_mjolnir_container_image_self_build: "{{ matrix_architecture != 'amd64' }}"

  1700. 

  1701. matrix_bot_mjolnir_systemd_required_services_list: |

  1702.   {{

  1703.     ['docker.service']

  1704.     +

  1705.     ['matrix-' + matrix_homeserver_implementation + '.service']

  1706.     +

  1707.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  1708.     +

  1709.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1710.   }}

  1711. 

  1712. ######################################################################

  1713. #

  1714. # /matrix-bot-mjolnir

  1715. #

  1716. ######################################################################

  1717. 

  1718. ######################################################################

  1719. #

  1720. # matrix-backup-borg

  1721. #

  1722. ######################################################################

  1723. 

  1724. matrix_backup_borg_enabled: false

  1725. 

  1726. matrix_backup_borg_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm32', 'arm64'] }}"

  1727. 

  1728. matrix_backup_borg_postgresql_enabled: "{{ devture_postgres_enabled }}"

  1729. matrix_backup_borg_postgresql_databases_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1730. matrix_backup_borg_postgresql_databases_username: "{{ devture_postgres_connection_username if devture_postgres_enabled else '' }}"

  1731. matrix_backup_borg_postgresql_databases_password: "{{ devture_postgres_connection_password if devture_postgres_enabled else '' }}"

  1732. matrix_backup_borg_postgresql_databases_port: "{{ devture_postgres_connection_port if devture_postgres_enabled else 5432 }}"

  1733. matrix_backup_borg_postgresql_databases: "{{ devture_postgres_managed_databases | map(attribute='name') if devture_postgres_enabled else [] }}"

  1734. 

  1735. matrix_backup_borg_location_source_directories:

  1736.   - "{{ matrix_base_data_path }}"

  1737. 

  1738. matrix_backup_borg_location_exclude_patterns: |

  1739.   {{

  1740.     ([matrix_synapse_media_store_path + '/local_thumbnails', matrix_synapse_media_store_path + '/remote_thumbnail', matrix_synapse_media_store_path + '/url_cache', matrix_synapse_media_store_path + '/url_cache_thumbnails'] if matrix_homeserver_implementation == 'synapse' else [])

  1741.     +

  1742.     ([devture_postgres_data_path] if devture_postgres_enabled else [])

  1743.   }}

  1744. 

  1745. matrix_backup_borg_systemd_required_services_list: |

  1746.   {{

  1747.     ['docker.service']

  1748.     +

  1749.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  1750.   }}

  1751. 

  1752. ######################################################################

  1753. #

  1754. # /matrix-backup-borg

  1755. #

  1756. ######################################################################

  1757. ######################################################################

  1758. #

  1759. # matrix-cactus-comments

  1760. #

  1761. ######################################################################

  1762. 

  1763. matrix_cactus_comments_enabled: false

  1764. 

  1765. # Derive secret values from homeserver secret

  1766. matrix_cactus_comments_as_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'cactus.as.token', rounds=655555) | to_uuid }}"

  1767. matrix_cactus_comments_hs_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'cactus.hs.token', rounds=655555) | to_uuid }}"

  1768. 

  1769. matrix_cactus_comments_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm32', 'arm64'] }}"

  1770. matrix_cactus_comments_systemd_required_services_list: |

  1771.   {{

  1772.     (['docker.service'])

  1773.     +

  1774.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1775.     +

  1776.     (['matrix-' + matrix_homeserver_implementation + '.service'])

  1777.   }}

  1778. 

  1779. matrix_cactus_comments_client_nginx_path: "{{ '/cactus-comments/' if matrix_nginx_proxy_enabled else matrix_cactus_comments_client_path + '/' }}"

  1780. 

  1781. ######################################################################

  1782. #

  1783. # /matrix-cactus-comments

  1784. #

  1785. ######################################################################

  1786. 

  1787. ######################################################################

  1788. #

  1789. # matrix-corporal

  1790. #

  1791. ######################################################################

  1792. 

  1793. matrix_corporal_enabled: false

  1794. 

  1795. matrix_corporal_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm32', 'arm64'] }}"

  1796. 

  1797. # Normally, matrix-nginx-proxy is enabled and nginx can reach matrix-corporal over the container network.

  1798. # If matrix-nginx-proxy is not enabled, or you otherwise have a need for it, you can expose

  1799. # matrix-corporal's web-server ports to the local host.

  1800. matrix_corporal_container_http_gateway_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else '127.0.0.1:41080' }}"

  1801. matrix_corporal_container_http_api_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else '127.0.0.1:41081' }}"

  1802. 

  1803. matrix_corporal_systemd_required_services_list: |

  1804.   {{

  1805.     (['docker.service'])

  1806.     +

  1807.     (['matrix-' + matrix_homeserver_implementation + '.service'])

  1808.   }}

  1809. 

  1810. matrix_corporal_matrix_homeserver_api_endpoint: "{{ matrix_homeserver_container_url }}"

  1811. 

  1812. matrix_corporal_matrix_auth_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret }}"

  1813. 

  1814. # This is only useful if there's REST auth provider to make use of it.

  1815. matrix_corporal_http_gateway_internal_rest_auth_enabled: "{{ matrix_synapse_ext_password_provider_rest_auth_enabled }}"

  1816. 

  1817. matrix_corporal_matrix_registration_shared_secret: "{{ matrix_synapse_registration_shared_secret }}"

  1818. 

  1819. ######################################################################

  1820. #

  1821. # /matrix-corporal

  1822. #

  1823. ######################################################################

  1824. 

  1825. ######################################################################

  1826. #

  1827. # matrix-coturn

  1828. #

  1829. ######################################################################

  1830. 

  1831. matrix_coturn_enabled: true

  1832. 

  1833. matrix_coturn_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm32', 'arm64'] }}"

  1834. 

  1835. matrix_coturn_turn_external_ip_address: "{{ ansible_host }}"

  1836. 

  1837. matrix_coturn_turn_static_auth_secret: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'coturn.sas', rounds=655555) | to_uuid }}"

  1838. 

  1839. matrix_coturn_tls_enabled: "{{ matrix_ssl_retrieval_method != 'none' }}"

  1840. matrix_coturn_tls_cert_path: "{{ matrix_ssl_config_dir_path }}/live/{{ matrix_server_fqn_matrix }}/fullchain.pem"

  1841. matrix_coturn_tls_key_path: "{{ matrix_ssl_config_dir_path }}/live/{{ matrix_server_fqn_matrix }}/privkey.pem"

  1842. matrix_coturn_container_additional_volumes: |

  1843.   {{

  1844.     ([] if matrix_ssl_retrieval_method == 'none' else [

  1845.         {

  1846.             'src': matrix_ssl_config_dir_path,

  1847.             'dst': matrix_ssl_config_dir_path,

  1848.             'options': 'ro',

  1849.         }

  1850.     ])

  1851.   }}

  1852. 

  1853. ######################################################################

  1854. #

  1855. # /matrix-coturn

  1856. #

  1857. ######################################################################

  1858. 

  1859. ######################################################################

  1860. #

  1861. # matrix-dimension

  1862. #

  1863. ######################################################################

  1864. 

  1865. matrix_dimension_enabled: false

  1866. 

  1867. matrix_dimension_container_image_self_build: "{{ matrix_architecture != 'amd64' }}"

  1868. 

  1869. # Normally, matrix-nginx-proxy is enabled and nginx can reach Dimension over the container network.

  1870. # If matrix-nginx-proxy is not enabled, or you otherwise have a need for it, you can expose

  1871. # the Dimension HTTP port to the local host.

  1872. matrix_dimension_container_http_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else '127.0.0.1:8184' }}"

  1873. 

  1874. matrix_dimension_homeserver_federationUrl: "{{ matrix_homeserver_container_federation_url }}"

  1875. 

  1876. matrix_dimension_systemd_required_services_list: |

  1877.   {{

  1878.     ['docker.service']

  1879.     +

  1880.     ['matrix-' + matrix_homeserver_implementation + '.service']

  1881.     +

  1882.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  1883.     +

  1884.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1885.   }}

  1886. 

  1887. # Postgres is the default, except if not using internal Postgres server

  1888. matrix_dimension_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  1889. matrix_dimension_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1890. matrix_dimension_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'dimension.db', rounds=655555) | to_uuid }}"

  1891. 

  1892. ######################################################################

  1893. #

  1894. # /matrix-dimension

  1895. #

  1896. ######################################################################

  1897. 

  1898. ######################################################################

  1899. #

  1900. # matrix-etherpad

  1901. #

  1902. ######################################################################

  1903. 

  1904. matrix_etherpad_enabled: false

  1905. 

  1906. matrix_etherpad_container_http_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else '127.0.0.1:9001' }}"

  1907. 

  1908. matrix_etherpad_base_url: "{{ 'https://' + matrix_server_fqn_dimension + matrix_etherpad_public_endpoint if matrix_etherpad_mode == 'dimension' else 'https://' + matrix_server_fqn_etherpad + '/' }}"

  1909. 

  1910. matrix_etherpad_systemd_required_services_list: |

  1911.   {{

  1912.     ['docker.service']

  1913.     +

  1914.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  1915.   }}

  1916. 

  1917. matrix_etherpad_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1918. matrix_etherpad_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'etherpad.db', rounds=655555) | to_uuid }}"

  1919. 

  1920. ######################################################################

  1921. #

  1922. # /matrix-etherpad

  1923. #

  1924. ######################################################################

  1925. 

  1926. ######################################################################

  1927. #

  1928. # matrix-dynamic-dns

  1929. #

  1930. ######################################################################

  1931. 

  1932. matrix_dynamic_dns_enabled: false

  1933. 

  1934. ######################################################################

  1935. #

  1936. # /matrix-dynamic-dns

  1937. #

  1938. ######################################################################

  1939. 

  1940. ######################################################################

  1941. #

  1942. # matrix-email2matrix

  1943. #

  1944. ######################################################################

  1945. 

  1946. matrix_email2matrix_enabled: false

  1947. 

  1948. matrix_email2matrix_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm32', 'arm64'] }}"

  1949. 

  1950. ######################################################################

  1951. #

  1952. # /matrix-email2matrix

  1953. #

  1954. ######################################################################

  1955. 

  1956. ######################################################################

  1957. #

  1958. # matrix-jitsi

  1959. #

  1960. ######################################################################

  1961. 

  1962. matrix_jitsi_enabled: false

  1963. 

  1964. # Normally, matrix-nginx-proxy is enabled and nginx can reach jitsi/web over the container network.

  1965. # If matrix-nginx-proxy is not enabled, or you otherwise have a need for it, you can expose

  1966. # the Jitsi HTTP port to the local host.

  1967. matrix_jitsi_web_container_http_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else '127.0.0.1:13080' }}"

  1968. 

  1969. matrix_jitsi_jvb_container_colibri_ws_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else '127.0.0.1:13090' }}"

  1970. 

  1971. matrix_jitsi_prosody_container_http_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else '127.0.0.1:5280' }}"

  1972. 

  1973. matrix_jitsi_jibri_xmpp_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'jibri', rounds=655555) | to_uuid }}"

  1974. matrix_jitsi_jicofo_auth_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'jicofo', rounds=655555) | to_uuid }}"

  1975. matrix_jitsi_jvb_auth_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'jvb', rounds=655555) | to_uuid }}"

  1976. 

  1977. matrix_jitsi_web_stun_servers: |

  1978.   {{

  1979.     [

  1980.       'stun:' + matrix_server_fqn_matrix + ':5349',

  1981.       'stun:' + matrix_server_fqn_matrix + ':3478',

  1982.     ]

  1983.     if matrix_coturn_enabled

  1984.     else [ 'stun:meet-jit-si-turnrelay.jitsi.net:443']

  1985.   }}

  1986. 

  1987. # If the self-hosted Etherpad instance is available, it will also show up in Jitsi conferences,

  1988. # unless explicitly disabled by setting `matrix_jitsi_etherpad_enabled` to false.

  1989. # Falls back to the scalar.vector.im etherpad in case someone sets `matrix_jitsi_etherpad_enabled` to true,

  1990. # while also setting `matrix_etherpad_enabled` to false.

  1991. matrix_jitsi_etherpad_enabled: "{{ matrix_etherpad_enabled }}"

  1992. matrix_jitsi_etherpad_base: "{{ matrix_etherpad_base_url if matrix_etherpad_enabled else 'https://scalar.vector.im/etherpad' }}"

  1993. 

  1994. ######################################################################

  1995. #

  1996. # /matrix-jitsi

  1997. #

  1998. ######################################################################

  1999. ######################################################################

  2000. #

  2001. # matrix-ldap-registration-proxy

  2002. #

  2003. ######################################################################

  2004. 

  2005. # This is only for users with a specific LDAP setup

  2006. matrix_ldap_registration_proxy_enabled: false

  2007. 

  2008. ######################################################################

  2009. #

  2010. # /matrix-ldap-registration-proxy

  2011. #

  2012. ######################################################################

  2013. 

  2014. ######################################################################

  2015. #

  2016. # matrix-mailer

  2017. #

  2018. ######################################################################

  2019. 

  2020. # By default, this playbook sets up an exim mailer server (running in a container).

  2021. # This is so that Synapse can send email reminders for unread messages.

  2022. # Other services (like ma1sd), also use the mailer.

  2023. matrix_mailer_enabled: true

  2024. 

  2025. matrix_mailer_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm32', 'arm64'] }}"

  2026. 

  2027. ######################################################################

  2028. #

  2029. # /matrix-mailer

  2030. #

  2031. ######################################################################

  2032. 

  2033. ######################################################################

  2034. #

  2035. # matrix-ma1sd

  2036. #

  2037. ######################################################################

  2038. 

  2039. # We no longer install the ma1sd identity server by default.

  2040. #

  2041. # The main reason we used to install ma1sd by default in the past was to

  2042. # prevent Element from talking to the `matrix.org` / `vector.im` identity servers,

  2043. # by forcing it to talk to our own self-hosted (but otherwise useless) identity server instead,

  2044. # thus preventing contact list leaks.

  2045. #

  2046. # Since Element no longer defaults to using a public identity server if another one is not provided,

  2047. # we can stop installing ma1sd.

  2048. matrix_ma1sd_enabled: false

  2049. 

  2050. matrix_ma1sd_container_image_self_build: "{{ matrix_architecture != 'amd64' }}"

  2051. 

  2052. # Normally, matrix-nginx-proxy is enabled and nginx can reach ma1sd over the container network.

  2053. # If matrix-nginx-proxy is not enabled, or you otherwise have a need for it, you can expose

  2054. # ma1sd's web-server port.

  2055. matrix_ma1sd_container_http_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else '127.0.0.1:' + matrix_ma1sd_container_port | string }}"

  2056. 

  2057. 

  2058. # We enable Synapse integration via its Postgres database by default.

  2059. # When using another Identity store, you might wish to disable this and define

  2060. # your own configuration in `matrix_ma1sd_configuration_extension_yaml`.

  2061. matrix_ma1sd_synapsesql_enabled: true

  2062. matrix_ma1sd_synapsesql_type: postgresql

  2063. matrix_ma1sd_synapsesql_connection: //{{ matrix_synapse_database_host }}/{{ matrix_synapse_database_database }}?user={{ matrix_synapse_database_user | urlencode() }}&password={{ matrix_synapse_database_password | urlencode() }}

  2064. 

  2065. matrix_ma1sd_dns_overwrite_enabled: true

  2066. matrix_ma1sd_dns_overwrite_homeserver_client_name: "{{ matrix_server_fqn_matrix }}"

  2067. # The `matrix_ma1sd_dns_overwrite_homeserver_client_value` value when matrix_nginx_proxy_enabled is false covers the general case,

  2068. # but may be inaccurate if matrix-corporal is enabled.

  2069. matrix_ma1sd_dns_overwrite_homeserver_client_value: "{{ ('http://' + matrix_nginx_proxy_proxy_matrix_client_api_addr_with_container) if matrix_nginx_proxy_enabled else matrix_homeserver_container_url }}"

  2070. 

  2071. # By default, we send mail through the `matrix-mailer` service.

  2072. matrix_ma1sd_threepid_medium_email_identity_from: "{{ matrix_mailer_sender_address }}"

  2073. matrix_ma1sd_threepid_medium_email_connectors_smtp_host: "matrix-mailer"

  2074. matrix_ma1sd_threepid_medium_email_connectors_smtp_port: 8025

  2075. matrix_ma1sd_threepid_medium_email_connectors_smtp_tls: 0

  2076. 

  2077. matrix_ma1sd_self_check_validate_certificates: "{{ false if matrix_ssl_retrieval_method == 'self-signed' else true }}"

  2078. 

  2079. matrix_ma1sd_systemd_required_services_list: |

  2080.   {{

  2081.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  2082.   }}

  2083. 

  2084. matrix_ma1sd_systemd_wanted_services_list: |

  2085.   {{

  2086.     (['matrix-corporal.service'] if matrix_corporal_enabled else ['matrix-' + matrix_homeserver_implementation + '.service'])

  2087.     +

  2088.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  2089.     +

  2090.     (['matrix-mailer.service'] if matrix_mailer_enabled else [])

  2091.   }}

  2092. 

  2093. # Postgres is the default, except if not using internal Postgres server

  2094. matrix_ma1sd_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  2095. matrix_ma1sd_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  2096. matrix_ma1sd_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'ma1sd.db', rounds=655555) | to_uuid }}"

  2097. 

  2098. ######################################################################

  2099. #

  2100. # /matrix-ma1sd

  2101. #

  2102. ######################################################################

  2103. 

  2104. 

  2105. ######################################################################

  2106. #

  2107. # matrix-nginx-proxy

  2108. #

  2109. ######################################################################

  2110. 

  2111. # By default, this playbook sets up a reverse-proxy nginx proxy server on TCP ports 80, 443 and 8448.

  2112. # This is fine if you're dedicating the whole server to Matrix.

  2113. # If that's not the case, you may wish to disable this and take care of proxying yourself.

  2114. matrix_nginx_proxy_enabled: true

  2115. 

  2116. matrix_nginx_proxy_proxy_matrix_client_api_addr_with_container: "{{ 'matrix-corporal:41080' if matrix_corporal_enabled else 'matrix-nginx-proxy:12080' }}"

  2117. matrix_nginx_proxy_proxy_matrix_client_api_addr_sans_container: "{{ '127.0.0.1:41080' if matrix_corporal_enabled else '127.0.0.1:12080' }}"

  2118. matrix_nginx_proxy_proxy_matrix_client_api_client_max_body_size_mb: |-

  2119.   {{

  2120.     {

  2121.       'synapse': matrix_synapse_max_upload_size_mb,

  2122.       'dendrite': (matrix_dendrite_max_file_size_bytes / 1024 / 1024) | round,

  2123.       'conduit': (matrix_conduit_max_request_size / 1024 / 1024) | round,

  2124.     }[matrix_homeserver_implementation]|int

  2125.   }}

  2126. 

  2127. matrix_nginx_proxy_proxy_matrix_client_api_forwarded_location_synapse_admin_api_enabled: "{{ matrix_synapse_admin_enabled or matrix_bot_matrix_registration_bot_enabled }}"

  2128. 

  2129. matrix_nginx_proxy_proxy_matrix_client_redirect_root_uri_to_domain: "{{ matrix_server_fqn_element if matrix_client_element_enabled else '' }}"

  2130. 

  2131. matrix_nginx_proxy_proxy_matrix_enabled: true

  2132. matrix_nginx_proxy_proxy_element_enabled: "{{ matrix_client_element_enabled }}"

  2133. matrix_nginx_proxy_proxy_hydrogen_enabled: "{{ matrix_client_hydrogen_enabled }}"

  2134. matrix_nginx_proxy_proxy_cinny_enabled: "{{ matrix_client_cinny_enabled }}"

  2135. matrix_nginx_proxy_proxy_buscarron_enabled: "{{ matrix_bot_buscarron_enabled }}"

  2136. matrix_nginx_proxy_proxy_dimension_enabled: "{{ matrix_dimension_enabled }}"

  2137. matrix_nginx_proxy_proxy_etherpad_enabled: "{{ matrix_etherpad_enabled and matrix_etherpad_mode == 'standalone' }}"

  2138. matrix_nginx_proxy_proxy_bot_go_neb_enabled: "{{ matrix_bot_go_neb_enabled }}"

  2139. matrix_nginx_proxy_proxy_jitsi_enabled: "{{ matrix_jitsi_enabled }}"

  2140. matrix_nginx_proxy_proxy_grafana_enabled: "{{ matrix_grafana_enabled }}"

  2141. matrix_nginx_proxy_proxy_sygnal_enabled: "{{ matrix_sygnal_enabled }}"

  2142. matrix_nginx_proxy_proxy_ntfy_enabled: "{{ matrix_ntfy_enabled }}"

  2143. 

  2144. matrix_nginx_proxy_proxy_matrix_corporal_api_enabled: "{{ matrix_corporal_enabled and matrix_corporal_http_api_enabled }}"

  2145. matrix_nginx_proxy_proxy_matrix_corporal_api_addr_with_container: "matrix-corporal:41081"

  2146. matrix_nginx_proxy_proxy_matrix_corporal_api_addr_sans_container: "127.0.0.1:41081"

  2147. 

  2148. matrix_nginx_proxy_proxy_matrix_identity_api_enabled: "{{ matrix_ma1sd_enabled }}"

  2149. matrix_nginx_proxy_proxy_matrix_identity_api_addr_with_container: "matrix-ma1sd:{{ matrix_ma1sd_container_port }}"

  2150. matrix_nginx_proxy_proxy_matrix_identity_api_addr_sans_container: "127.0.0.1:{{ matrix_ma1sd_container_port }}"

  2151. 

  2152. # By default, we do TLS termination for the Matrix Federation API (port 8448) at matrix-nginx-proxy.

  2153. # Unless this is handled there OR Synapse's federation listener port is disabled, we'll reverse-proxy.

  2154. matrix_nginx_proxy_proxy_matrix_federation_api_enabled: |-

  2155.   {{

  2156.     {

  2157.       'synapse': (matrix_synapse_federation_port_enabled and not matrix_synapse_tls_federation_listener_enabled),

  2158.       'dendrite': matrix_dendrite_federation_enabled,

  2159.       'conduit': matrix_conduit_allow_federation,

  2160.     }[matrix_homeserver_implementation]|bool

  2161.   }}

  2162. 

  2163. matrix_nginx_proxy_proxy_matrix_federation_api_addr_with_container: "matrix-nginx-proxy:12088"

  2164. matrix_nginx_proxy_proxy_matrix_federation_api_addr_sans_container: "127.0.0.1:12088"

  2165. 

  2166. matrix_nginx_proxy_proxy_synapse_enabled: "{{ matrix_synapse_enabled }}"

  2167. matrix_nginx_proxy_proxy_synapse_client_api_addr_with_container: "{{ 'matrix-synapse-reverse-proxy-companion:8008' if matrix_synapse_reverse_proxy_companion_enabled else 'matrix-synapse:8008' }}"

  2168. matrix_nginx_proxy_proxy_synapse_client_api_addr_sans_container: "127.0.0.1:8008"

  2169. matrix_nginx_proxy_proxy_synapse_federation_api_addr_with_container: "{{ 'matrix-synapse-reverse-proxy-companion:8048' if matrix_synapse_reverse_proxy_companion_enabled else 'matrix-synapse:8048' }}"

  2170. matrix_nginx_proxy_proxy_synapse_federation_api_addr_sans_container: "127.0.0.1:8048"

  2171. 

  2172. matrix_nginx_proxy_proxy_dendrite_enabled: "{{ matrix_dendrite_enabled }}"

  2173. matrix_nginx_proxy_proxy_dendrite_client_api_addr_with_container: "matrix-dendrite:{{ matrix_dendrite_http_bind_port | string }}"

  2174. matrix_nginx_proxy_proxy_dendrite_client_api_addr_sans_container: "127.0.0.1:{{ matrix_dendrite_http_bind_port | string }}"

  2175. matrix_nginx_proxy_proxy_dendrite_federation_api_addr_with_container: "matrix-dendrite:{{ matrix_dendrite_http_bind_port | string }}"

  2176. matrix_nginx_proxy_proxy_dendrite_federation_api_addr_sans_container: "127.0.0.1:{{ matrix_dendrite_http_bind_port | string }}"

  2177. 

  2178. matrix_nginx_proxy_proxy_conduit_enabled: "{{ matrix_conduit_enabled }}"

  2179. matrix_nginx_proxy_proxy_conduit_client_api_addr_with_container: "matrix-conduit:{{ matrix_conduit_port_number|string }}"

  2180. matrix_nginx_proxy_proxy_conduit_client_api_addr_sans_container: "127.0.0.1:{{ matrix_conduit_port_number|string }}"

  2181. matrix_nginx_proxy_proxy_conduit_federation_api_addr_with_container: "matrix-conduit:{{ matrix_conduit_port_number|string }}"

  2182. matrix_nginx_proxy_proxy_conduit_federation_api_addr_sans_container: "127.0.0.1:{{ matrix_conduit_port_number|string }}"

  2183. 

  2184. # When matrix-nginx-proxy is disabled, the actual port number that the vhost uses may begin to matter.

  2185. matrix_nginx_proxy_proxy_matrix_federation_port: "{{ matrix_federation_public_port }}"

  2186. 

  2187. matrix_nginx_proxy_container_federation_host_bind_port: "{{ matrix_federation_public_port }}"

  2188. 

  2189. matrix_nginx_proxy_proxy_matrix_user_directory_search_enabled: "{{ matrix_ma1sd_enabled }}"

  2190. matrix_nginx_proxy_proxy_matrix_user_directory_search_addr_with_container: "{{ matrix_nginx_proxy_proxy_matrix_identity_api_addr_with_container }}"

  2191. matrix_nginx_proxy_proxy_matrix_user_directory_search_addr_sans_container: "{{ matrix_nginx_proxy_proxy_matrix_identity_api_addr_sans_container }}"

  2192. 

  2193. matrix_nginx_proxy_self_check_validate_certificates: "{{ false if matrix_ssl_retrieval_method == 'self-signed' else true }}"

  2194. 

  2195. # OCSP stapling does not make sense when self-signed certificates are used.

  2196. # See https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1073

  2197. # and https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1074

  2198. matrix_nginx_proxy_ocsp_stapling_enabled: "{{ matrix_ssl_retrieval_method != 'self-signed' }}"

  2199. 

  2200. matrix_nginx_proxy_systemd_wanted_services_list: |

  2201.   {{

  2202.     ['matrix-' + matrix_homeserver_implementation + '.service']

  2203.     +

  2204.     (matrix_synapse_webserving_workers_systemd_services_list if matrix_homeserver_implementation == 'synapse' and matrix_synapse_workers_enabled else [])

  2205.     +

  2206.     (['matrix-synapse-reverse-proxy-companion.service'] if matrix_synapse_reverse_proxy_companion_enabled else [])

  2207.     +

  2208.     (['matrix-corporal.service'] if matrix_corporal_enabled else [])

  2209.     +

  2210.     (['matrix-ma1sd.service'] if matrix_ma1sd_enabled else [])

  2211.     +

  2212.     (['matrix-client-cinny.service'] if matrix_client_cinny_enabled else [])

  2213.     +

  2214.     (['matrix-bot-buscarron.service'] if matrix_bot_buscarron_enabled else [])

  2215.     +

  2216.     (['matrix-client-element.service'] if matrix_client_element_enabled else [])

  2217.     +

  2218.     (['matrix-client-hydrogen.service'] if matrix_client_hydrogen_enabled else [])

  2219.     +

  2220.     (['matrix-grafana.service'] if matrix_grafana_enabled else [])

  2221.     +

  2222.     (['matrix-dimension.service'] if matrix_dimension_enabled else [])

  2223.     +

  2224.     (['matrix-sygnal.service'] if matrix_sygnal_enabled else [])

  2225.     +

  2226.     (['matrix-ntfy.service'] if matrix_ntfy_enabled else [])

  2227.     +

  2228.     (['matrix-jitsi.service'] if matrix_jitsi_enabled else [])

  2229.     +

  2230.     (['matrix-bot-go-neb.service'] if matrix_bot_go_neb_enabled else [])

  2231.     +

  2232.     (['matrix-etherpad.service'] if matrix_etherpad_enabled else [])

  2233.     +

  2234.     (['matrix-hookshot.service'] if matrix_hookshot_enabled else [])

  2235.   }}

  2236. 

  2237. matrix_ssl_domains_to_obtain_certificates_for: |

  2238.   {{

  2239.     ([matrix_server_fqn_matrix])

  2240.     +

  2241.     ([matrix_server_fqn_element] if matrix_client_element_enabled else [])

  2242.     +

  2243.     ([matrix_nginx_proxy_proxy_riot_compat_redirect_hostname] if matrix_nginx_proxy_proxy_riot_compat_redirect_enabled else [])

  2244.     +

  2245.     ([matrix_server_fqn_hydrogen] if matrix_client_hydrogen_enabled else [])

  2246.     +

  2247.     ([matrix_server_fqn_cinny] if matrix_client_cinny_enabled else [])

  2248.     +

  2249.     ([matrix_server_fqn_buscarron] if matrix_bot_buscarron_enabled else [])

  2250.     +

  2251.     ([matrix_server_fqn_dimension] if matrix_dimension_enabled else [])

  2252.     +

  2253.     ([matrix_server_fqn_etherpad] if (matrix_etherpad_enabled and matrix_etherpad_mode == 'standalone') else [])

  2254.     +

  2255.     ([matrix_server_fqn_bot_go_neb] if matrix_bot_go_neb_enabled else [])

  2256.     +

  2257.     ([matrix_server_fqn_jitsi] if matrix_jitsi_enabled else [])

  2258.     +

  2259.     ([matrix_server_fqn_grafana] if matrix_grafana_enabled else [])

  2260.     +

  2261.     ([matrix_server_fqn_sygnal] if matrix_sygnal_enabled else [])

  2262.     +

  2263.     ([matrix_server_fqn_ntfy] if matrix_ntfy_enabled else [])

  2264.     +

  2265.     ([matrix_bot_postmoogle_domain] if matrix_bot_postmoogle_enabled else [])

  2266.     +

  2267.     ([matrix_domain] if matrix_nginx_proxy_base_domain_serving_enabled else [])

  2268.     +

  2269.     matrix_ssl_additional_domains_to_obtain_certificates_for

  2270.   }}

  2271. 

  2272. matrix_ssl_architecture: "{{

  2273. 	{

  2274. 		'amd64': 'amd64',

  2275. 		'arm32': 'arm32v6',

  2276. 		'arm64': 'arm64v8',

  2277. 	}[matrix_architecture]

  2278. }}"

  2279. 

  2280. matrix_ssl_pre_obtaining_required_service_name: "{{ 'matrix-dynamic-dns' if matrix_dynamic_dns_enabled else '' }}"

  2281. 

  2282. matrix_nginx_proxy_access_log_syslog_integration_enabled: "{{ matrix_prometheus_nginxlog_exporter_enabled }}"

  2283. matrix_nginx_proxy_access_log_syslog_integration_server_port: "{{ (matrix_prometheus_nginxlog_exporter_container_hostname | string +':'+ matrix_prometheus_nginxlog_exporter_container_syslog_port | string) | default('') }}"

  2284. 

  2285. ######################################################################

  2286. #

  2287. # /matrix-nginx-proxy

  2288. #

  2289. ######################################################################

  2290. 

  2291. 

  2292. ########################################################################

  2293. #                                                                      #

  2294. # com.devture.ansible.role.postgres                                    #

  2295. #                                                                      #

  2296. ########################################################################

  2297. 

  2298. # To completely disable installing Postgres, use `devture_postgres_enabled: false`.

  2299. 

  2300. devture_postgres_identifier: matrix-postgres

  2301. 

  2302. devture_postgres_architecture: "{{ matrix_architecture }}"

  2303. 

  2304. devture_postgres_base_path: "{{ matrix_base_data_path }}/postgres"

  2305. 

  2306. devture_postgres_container_network: "{{ matrix_docker_network }}"

  2307. 

  2308. devture_postgres_uid: "{{ matrix_user_uid }}"

  2309. devture_postgres_gid: "{{ matrix_user_gid }}"

  2310. 

  2311. devture_postgres_connection_username: matrix

  2312. devture_postgres_db_name: matrix

  2313. 

  2314. devture_postgres_systemd_services_to_stop_for_maintenance_list: |

  2315.   {{

  2316.     ['matrix-' + matrix_homeserver_implementation + '.service']

  2317.   }}

  2318. 

  2319. devture_postgres_managed_databases_auto: |

  2320.   {{

  2321.     ([{

  2322.       'name': matrix_synapse_database_database,

  2323.       'username': matrix_synapse_database_user,

  2324.       'password': matrix_synapse_database_password,

  2325.     }] if (matrix_synapse_enabled and matrix_synapse_database_host == devture_postgres_connection_hostname) else [])

  2326.     +

  2327.     ([{

  2328.       'name': matrix_dendrite_federationapi_database,

  2329.       'username': matrix_dendrite_database_user,

  2330.       'password': matrix_dendrite_database_password,

  2331.     },{

  2332.       'name': matrix_dendrite_keyserver_database,

  2333.       'username': matrix_dendrite_database_user,

  2334.       'password': matrix_dendrite_database_password,

  2335.     },{

  2336.       'name': matrix_dendrite_mediaapi_database,

  2337.       'username': matrix_dendrite_database_user,

  2338.       'password': matrix_dendrite_database_password,

  2339.     },{

  2340.       'name': matrix_dendrite_room_database,

  2341.       'username': matrix_dendrite_database_user,

  2342.       'password': matrix_dendrite_database_password,

  2343.     },{

  2344.       'name': matrix_dendrite_syncapi_database,

  2345.       'username': matrix_dendrite_database_user,

  2346.       'password': matrix_dendrite_database_password,

  2347.     },{

  2348.       'name': matrix_dendrite_userapi_database,

  2349.       'username': matrix_dendrite_database_user,

  2350.       'password': matrix_dendrite_database_password,

  2351.     },{

  2352.       'name': matrix_dendrite_pushserver_database,

  2353.       'username': matrix_dendrite_database_user,

  2354.       'password': matrix_dendrite_database_password,

  2355.     },{

  2356.       'name': matrix_dendrite_mscs_database,

  2357.       'username': matrix_dendrite_database_user,

  2358.       'password': matrix_dendrite_database_password,

  2359.     }] if (matrix_dendrite_enabled and matrix_dendrite_database_hostname == devture_postgres_connection_hostname) else [])

  2360.     +

  2361.     ([{

  2362.       'name': matrix_ma1sd_database_name,

  2363.       'username': matrix_ma1sd_database_username,

  2364.       'password': matrix_ma1sd_database_password,

  2365.     }] if (matrix_ma1sd_enabled and matrix_ma1sd_database_engine == 'postgres' and matrix_ma1sd_database_hostname == devture_postgres_connection_hostname) else [])

  2366.     +

  2367.     ([{

  2368.       'name': matrix_bot_matrix_reminder_bot_database_name,

  2369.       'username': matrix_bot_matrix_reminder_bot_database_username,

  2370.       'password': matrix_bot_matrix_reminder_bot_database_password,

  2371.     }] if (matrix_bot_matrix_reminder_bot_enabled and matrix_bot_matrix_reminder_bot_database_engine == 'postgres' and matrix_bot_matrix_reminder_bot_database_hostname == devture_postgres_connection_hostname) else [])

  2372.     +

  2373.     ([{

  2374.       'name': matrix_bot_honoroit_database_name,

  2375.       'username': matrix_bot_honoroit_database_username,

  2376.       'password': matrix_bot_honoroit_database_password,

  2377.     }] if (matrix_bot_honoroit_enabled and matrix_bot_honoroit_database_engine == 'postgres' and matrix_bot_honoroit_database_hostname == devture_postgres_connection_hostname) else [])

  2378.     +

  2379.     ([{

  2380.       'name': matrix_bot_postmoogle_database_name,

  2381.       'username': matrix_bot_postmoogle_database_username,

  2382.       'password': matrix_bot_postmoogle_database_password,

  2383.     }] if (matrix_bot_postmoogle_enabled and matrix_bot_postmoogle_database_engine == 'postgres' and matrix_bot_postmoogle_database_hostname == devture_postgres_connection_hostname) else [])

  2384.     +

  2385.     ([{

  2386.       'name': matrix_bot_maubot_database_name,

  2387.       'username': matrix_bot_maubot_database_username,

  2388.       'password': matrix_bot_maubot_database_password,

  2389.     }] if (matrix_bot_maubot_enabled  and matrix_bot_maubot_database_engine == 'postgres' and matrix_bot_maubot_database_hostname == devture_postgres_connection_hostname) else [])

  2390.     +

  2391.     ([{

  2392.       'name': matrix_bot_buscarron_database_name,

  2393.       'username': matrix_bot_buscarron_database_username,

  2394.       'password': matrix_bot_buscarron_database_password,

  2395.     }] if (matrix_bot_buscarron_enabled and matrix_bot_buscarron_database_engine == 'postgres' and matrix_bot_buscarron_database_hostname == devture_postgres_connection_hostname) else [])

  2396.     +

  2397.     ([{

  2398.       'name': matrix_registration_database_name,

  2399.       'username': matrix_registration_database_username,

  2400.       'password': matrix_registration_database_password,

  2401.     }] if (matrix_registration_enabled and matrix_registration_database_engine == 'postgres' and matrix_registration_database_hostname == devture_postgres_connection_hostname) else [])

  2402.     +

  2403.     ([{

  2404.       'name': matrix_appservice_discord_database_name,

  2405.       'username': matrix_appservice_discord_database_username,

  2406.       'password': matrix_appservice_discord_database_password,

  2407.     }] if (matrix_appservice_discord_enabled and matrix_appservice_discord_database_engine == 'postgres' and matrix_appservice_discord_database_hostname == devture_postgres_connection_hostname) else [])

  2408.     +

  2409.     ([{

  2410.       'name': matrix_appservice_slack_database_name,

  2411.       'username': matrix_appservice_slack_database_username,

  2412.       'password': matrix_appservice_slack_database_password,

  2413.     }] if (matrix_appservice_slack_enabled and matrix_appservice_slack_database_engine == 'postgres' and matrix_appservice_slack_database_hostname == devture_postgres_connection_hostname) else [])

  2414.     +

  2415.     ([{

  2416.       'name': matrix_appservice_irc_database_name,

  2417.       'username': matrix_appservice_irc_database_username,

  2418.       'password': matrix_appservice_irc_database_password,

  2419.     }] if (matrix_appservice_irc_enabled and matrix_appservice_irc_database_engine == 'postgres' and matrix_appservice_irc_database_hostname == devture_postgres_connection_hostname) else [])

  2420.     +

  2421.     ([{

  2422.       'name': matrix_appservice_kakaotalk_database_name,

  2423.       'username': matrix_appservice_kakaotalk_database_username,

  2424.       'password': matrix_appservice_kakaotalk_database_password,

  2425.     }] if (matrix_appservice_kakaotalk_enabled and matrix_appservice_kakaotalk_database_engine == 'postgres' and matrix_appservice_kakaotalk_database_hostname == devture_postgres_connection_hostname) else [])

  2426.     +

  2427.     ([{

  2428.       'name': matrix_beeper_linkedin_database_name,

  2429.       'username': matrix_beeper_linkedin_database_username,

  2430.       'password': matrix_beeper_linkedin_database_password,

  2431.     }] if (matrix_beeper_linkedin_enabled and matrix_beeper_linkedin_database_engine == 'postgres' and matrix_beeper_linkedin_database_hostname == devture_postgres_connection_hostname) else [])

  2432.     +

  2433.     ([{

  2434.       'name': matrix_go_skype_bridge_database_name,

  2435.       'username': matrix_go_skype_bridge_database_username,

  2436.       'password': matrix_go_skype_bridge_database_password,

  2437.     }] if (matrix_go_skype_bridge_enabled and matrix_go_skype_bridge_database_engine == 'postgres' and matrix_go_skype_bridge_database_hostname == devture_postgres_connection_hostname) else [])

  2438.     +

  2439.     ([{

  2440.       'name': matrix_mautrix_facebook_database_name,

  2441.       'username': matrix_mautrix_facebook_database_username,

  2442.       'password': matrix_mautrix_facebook_database_password,

  2443.     }] if (matrix_mautrix_facebook_enabled and matrix_mautrix_facebook_database_engine == 'postgres' and matrix_mautrix_facebook_database_hostname == devture_postgres_connection_hostname) else [])

  2444.     +

  2445.     ([{

  2446.       'name': matrix_mautrix_hangouts_database_name,

  2447.       'username': matrix_mautrix_hangouts_database_username,

  2448.       'password': matrix_mautrix_hangouts_database_password,

  2449.     }] if (matrix_mautrix_hangouts_enabled and matrix_mautrix_hangouts_database_engine == 'postgres' and matrix_mautrix_hangouts_database_hostname == devture_postgres_connection_hostname) else [])

  2450.     +

  2451.     ([{

  2452.       'name': matrix_mautrix_googlechat_database_name,

  2453.       'username': matrix_mautrix_googlechat_database_username,

  2454.       'password': matrix_mautrix_googlechat_database_password,

  2455.     }] if (matrix_mautrix_googlechat_enabled and matrix_mautrix_googlechat_database_engine == 'postgres' and matrix_mautrix_googlechat_database_hostname == devture_postgres_connection_hostname) else [])

  2456.     +

  2457.     ([{

  2458.       'name': matrix_mautrix_instagram_database_name,

  2459.       'username': matrix_mautrix_instagram_database_username,

  2460.       'password': matrix_mautrix_instagram_database_password,

  2461.     }] if (matrix_mautrix_instagram_enabled and matrix_mautrix_instagram_database_engine == 'postgres' and matrix_mautrix_instagram_database_hostname == devture_postgres_connection_hostname) else [])

  2462.     +

  2463.     ([{

  2464.       'name': matrix_mautrix_signal_database_name,

  2465.       'username': matrix_mautrix_signal_database_username,

  2466.       'password': matrix_mautrix_signal_database_password,

  2467.     }] if (matrix_mautrix_signal_enabled and matrix_mautrix_signal_database_engine == 'postgres' and matrix_mautrix_signal_database_hostname == devture_postgres_connection_hostname) else [])

  2468.     +

  2469.     ([{

  2470.       'name': matrix_mautrix_telegram_database_name,

  2471.       'username': matrix_mautrix_telegram_database_username,

  2472.       'password': matrix_mautrix_telegram_database_password,

  2473.     }] if (matrix_mautrix_telegram_enabled and matrix_mautrix_telegram_database_engine == 'postgres' and matrix_mautrix_telegram_database_hostname == devture_postgres_connection_hostname) else [])

  2474.     +

  2475.     ([{

  2476.       'name': matrix_mautrix_twitter_database_name,

  2477.       'username': matrix_mautrix_twitter_database_username,

  2478.       'password': matrix_mautrix_twitter_database_password,

  2479.     }] if (matrix_mautrix_twitter_enabled and matrix_mautrix_twitter_database_engine == 'postgres' and matrix_mautrix_twitter_database_hostname == devture_postgres_connection_hostname) else [])

  2480.     +

  2481.     ([{

  2482.       'name': matrix_mautrix_whatsapp_database_name,

  2483.       'username': matrix_mautrix_whatsapp_database_username,

  2484.       'password': matrix_mautrix_whatsapp_database_password,

  2485.     }] if (matrix_mautrix_whatsapp_enabled and matrix_mautrix_whatsapp_database_engine == 'postgres' and matrix_mautrix_whatsapp_database_hostname == devture_postgres_connection_hostname) else [])

  2486.     +

  2487.     ([{

  2488.       'name': matrix_mautrix_discord_database_name,

  2489.       'username': matrix_mautrix_discord_database_username,

  2490.       'password': matrix_mautrix_discord_database_password,

  2491.     }] if (matrix_mautrix_discord_enabled and matrix_mautrix_discord_database_engine == 'postgres' and matrix_mautrix_discord_database_hostname == devture_postgres_connection_hostname) else [])

  2492.     +

  2493.     ([{

  2494.       'name': matrix_mautrix_slack_database_name,

  2495.       'username': matrix_mautrix_slack_database_username,

  2496.       'password': matrix_mautrix_slack_database_password,

  2497.     }] if (matrix_mautrix_slack_enabled and matrix_mautrix_slack_database_engine == 'postgres' and matrix_mautrix_slack_database_hostname == devture_postgres_connection_hostname) else [])

  2498.     +

  2499.     ([{

  2500.       'name': matrix_mx_puppet_slack_database_name,

  2501.       'username': matrix_mx_puppet_slack_database_username,

  2502.       'password': matrix_mx_puppet_slack_database_password,

  2503.     }] if (matrix_mx_puppet_slack_enabled and matrix_mx_puppet_slack_database_engine == 'postgres' and matrix_mx_puppet_slack_database_hostname == devture_postgres_connection_hostname) else [])

  2504.     +

  2505.     ([{

  2506.       'name': matrix_mx_puppet_twitter_database_name,

  2507.       'username': matrix_mx_puppet_twitter_database_username,

  2508.       'password': matrix_mx_puppet_twitter_database_password,

  2509.     }] if (matrix_mx_puppet_twitter_enabled and matrix_mx_puppet_twitter_database_engine == 'postgres' and matrix_mx_puppet_twitter_database_hostname == devture_postgres_connection_hostname) else [])

  2510.     +

  2511.     ([{

  2512.       'name': matrix_mx_puppet_instagram_database_name,

  2513.       'username': matrix_mx_puppet_instagram_database_username,

  2514.       'password': matrix_mx_puppet_instagram_database_password,

  2515.     }] if (matrix_mx_puppet_instagram_enabled and matrix_mx_puppet_instagram_database_engine == 'postgres' and matrix_mx_puppet_instagram_database_hostname == devture_postgres_connection_hostname) else [])

  2516.     +

  2517.     ([{

  2518.       'name': matrix_mx_puppet_discord_database_name,

  2519.       'username': matrix_mx_puppet_discord_database_username,

  2520.       'password': matrix_mx_puppet_discord_database_password,

  2521.     }] if (matrix_mx_puppet_discord_enabled  and matrix_mx_puppet_discord_database_engine == 'postgres' and matrix_mx_puppet_discord_database_hostname == devture_postgres_connection_hostname) else [])

  2522.     +

  2523.     ([{

  2524.       'name': matrix_mx_puppet_steam_database_name,

  2525.       'username': matrix_mx_puppet_steam_database_username,

  2526.       'password': matrix_mx_puppet_steam_database_password,

  2527.     }] if (matrix_mx_puppet_steam_enabled and matrix_mx_puppet_steam_database_engine == 'postgres' and matrix_mx_puppet_steam_database_hostname == devture_postgres_connection_hostname) else [])

  2528.     +

  2529.     ([{

  2530.       'name': matrix_mx_puppet_groupme_database_name,

  2531.       'username': matrix_mx_puppet_groupme_database_username,

  2532.       'password': matrix_mx_puppet_groupme_database_password,

  2533.     }] if (matrix_mx_puppet_groupme_enabled and matrix_mx_puppet_groupme_database_engine == 'postgres' and matrix_mx_puppet_groupme_database_hostname == devture_postgres_connection_hostname) else [])

  2534.     +

  2535.     ([{

  2536.       'name': matrix_dimension_database_name,

  2537.       'username': matrix_dimension_database_username,

  2538.       'password': matrix_dimension_database_password,

  2539.     }] if (matrix_dimension_enabled and matrix_dimension_database_engine == 'postgres' and matrix_dimension_database_hostname == devture_postgres_connection_hostname) else [])

  2540.     +

  2541.     ([{

  2542.       'name': matrix_etherpad_database_name,

  2543.       'username': matrix_etherpad_database_username,

  2544.       'password': matrix_etherpad_database_password,

  2545.     }] if (matrix_etherpad_enabled and matrix_etherpad_database_engine == 'postgres' and matrix_etherpad_database_hostname == devture_postgres_connection_hostname) else [])

  2546.     +

  2547.     ([{

  2548.       'name': matrix_prometheus_postgres_exporter_database_name,

  2549.       'username': matrix_prometheus_postgres_exporter_database_username,

  2550.       'password': matrix_prometheus_postgres_exporter_database_password,

  2551.     }] if (matrix_prometheus_postgres_exporter_enabled and matrix_prometheus_postgres_exporter_database_hostname == devture_postgres_connection_hostname) else [])

  2552. 

  2553.    }}

  2554. 

  2555. ########################################################################

  2556. #                                                                      #

  2557. # /com.devture.ansible.role.postgres                                   #

  2558. #                                                                      #

  2559. ########################################################################

  2560. 

  2561. 

  2562. ########################################################################

  2563. #                                                                      #

  2564. # com.devture.ansible.role.postgres_backup                             #

  2565. #                                                                      #

  2566. ########################################################################

  2567. 

  2568. devture_postgres_backup_enabled: false

  2569. 

  2570. devture_postgres_backup_identifier: matrix-postgres-backup

  2571. 

  2572. devture_postgres_backup_architecture: "{{ matrix_architecture }}"

  2573. 

  2574. devture_postgres_backup_base_path: "{{ matrix_base_data_path }}/postgres-backup"

  2575. 

  2576. devture_postgres_backup_systemd_required_services_list: |

  2577.   {{

  2578.     (['docker.service'])

  2579.     +

  2580.     ([(devture_postgres_identifier + '.service')] if devture_postgres_enabled else [])

  2581.   }}

  2582. 

  2583. devture_postgres_backup_container_network: "{{ matrix_docker_network }}"

  2584. 

  2585. devture_postgres_backup_uid: "{{ matrix_user_uid }}"

  2586. devture_postgres_backup_gid: "{{ matrix_user_gid }}"

  2587. 

  2588. devture_postgres_backup_connection_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  2589. devture_postgres_backup_connection_port: "{{ devture_postgres_connection_port if devture_postgres_enabled else 5432 }}"

  2590. devture_postgres_backup_connection_username: "{{ devture_postgres_connection_username if devture_postgres_enabled else '' }}"

  2591. devture_postgres_backup_connection_password: "{{ devture_postgres_connection_password if devture_postgres_enabled else '' }}"

  2592. 

  2593. devture_postgres_backup_postgres_data_path: "{{ devture_postgres_data_path if devture_postgres_enabled else '' }}"

  2594. 

  2595. devture_postgres_backup_databases: "{{ devture_postgres_managed_databases | map(attribute='name') if devture_postgres_enabled else [] }}"

  2596. 

  2597. ########################################################################

  2598. #                                                                      #

  2599. # /com.devture.ansible.role.postgres_backup                            #

  2600. #                                                                      #

  2601. ########################################################################

  2602. 

  2603. 

  2604. ######################################################################

  2605. #

  2606. # matrix-sygnal

  2607. #

  2608. ######################################################################

  2609. 

  2610. # Most people don't need their own push-server, because they also need their own app to utilize it from.

  2611. matrix_sygnal_enabled: false

  2612. 

  2613. # If someone instals Prometheus via the playbook, they most likely wish to monitor Sygnal.

  2614. matrix_sygnal_metrics_prometheus_enabled: "{{ matrix_prometheus_enabled }}"

  2615. 

  2616. matrix_sygnal_container_http_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else '127.0.0.1:6000' }}"

  2617. 

  2618. ######################################################################

  2619. #

  2620. # /matrix-sygnal

  2621. #

  2622. ######################################################################

  2623. 

  2624. ######################################################################

  2625. #

  2626. # matrix-ntfy

  2627. #

  2628. ######################################################################

  2629. 

  2630. matrix_ntfy_enabled: false

  2631. 

  2632. matrix_ntfy_container_http_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else '127.0.0.1:2586' }}"

  2633. 

  2634. ######################################################################

  2635. #

  2636. # /matrix-ntfy

  2637. #

  2638. ######################################################################

  2639. 

  2640. ######################################################################

  2641. #

  2642. # matrix-redis

  2643. #

  2644. ######################################################################

  2645. 

  2646. matrix_redis_enabled: "{{ matrix_synapse_workers_enabled }}"

  2647. 

  2648. ######################################################################

  2649. #

  2650. # /matrix-redis

  2651. #

  2652. ######################################################################

  2653. 

  2654. ######################################################################

  2655. #

  2656. # matrix-client-element

  2657. #

  2658. ######################################################################

  2659. 

  2660. # By default, this playbook installs the Element web UI on the `matrix_server_fqn_element` domain.

  2661. # If you wish to connect to your Matrix server by other means, you may wish to disable this.

  2662. matrix_client_element_enabled: true

  2663. 

  2664. matrix_client_element_container_image_self_build: "{{ matrix_architecture not in ['arm64', 'amd64'] }}"

  2665. 

  2666. # Normally, matrix-nginx-proxy is enabled and nginx can reach Element over the container network.

  2667. # If matrix-nginx-proxy is not enabled, or you otherwise have a need for it, you can expose

  2668. # the Element HTTP port to the local host.

  2669. matrix_client_element_container_http_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else '127.0.0.1:8765' }}"

  2670. 

  2671. matrix_client_element_default_hs_url: "{{ matrix_homeserver_url }}"

  2672. matrix_client_element_default_is_url: "{{ matrix_identity_server_url }}"

  2673. 

  2674. # Use Dimension if enabled, otherwise fall back to Scalar

  2675. matrix_client_element_integrations_ui_url: "{{ matrix_dimension_integrations_ui_url if matrix_dimension_enabled else 'https://scalar.vector.im/' }}"

  2676. matrix_client_element_integrations_rest_url: "{{ matrix_dimension_integrations_rest_url if matrix_dimension_enabled else 'https://scalar.vector.im/api' }}"

  2677. matrix_client_element_integrations_widgets_urls: "{{ matrix_dimension_integrations_widgets_urls if matrix_dimension_enabled else ['https://scalar.vector.im/api'] }}"

  2678. matrix_client_element_integrations_jitsi_widget_url: "{{ matrix_dimension_integrations_jitsi_widget_url if matrix_dimension_enabled else 'https://scalar.vector.im/api/widgets/jitsi.html' }}"

  2679. 

  2680. matrix_client_element_self_check_validate_certificates: "{{ false if matrix_ssl_retrieval_method == 'self-signed' else true }}"

  2681. 

  2682. matrix_client_element_registration_enabled: "{{ matrix_synapse_enable_registration }}"

  2683. 

  2684. matrix_client_element_enable_presence_by_hs_url: |

  2685.   {{

  2686.     none

  2687.     if matrix_synapse_presence_enabled

  2688.     else {matrix_client_element_default_hs_url: false}

  2689.   }}

  2690. 

  2691. matrix_client_element_welcome_user_id: ~

  2692. 

  2693. matrix_client_element_jitsi_preferredDomain: "{{ matrix_server_fqn_jitsi if matrix_jitsi_enabled else '' }}"

  2694. 

  2695. ######################################################################

  2696. #

  2697. # /matrix-client-element

  2698. #

  2699. ######################################################################

  2700. 

  2701. ######################################################################

  2702. #

  2703. # matrix-client-hydrogen

  2704. #

  2705. ######################################################################

  2706. 

  2707. matrix_client_hydrogen_enabled: false

  2708. 

  2709. matrix_client_hydrogen_container_image_self_build: "{{ matrix_architecture not in ['amd64'] }}"

  2710. 

  2711. # Normally, matrix-nginx-proxy is enabled and nginx can reach Hydrogen over the container network.

  2712. # If matrix-nginx-proxy is not enabled, or you otherwise have a need for it, you can expose

  2713. # the HTTP port to the local host.

  2714. matrix_client_hydrogen_container_http_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else '127.0.0.1:8768' }}"

  2715. 

  2716. matrix_client_hydrogen_default_hs_url: "{{ matrix_homeserver_url }}"

  2717. 

  2718. matrix_client_hydrogen_self_check_validate_certificates: "{{ false if matrix_ssl_retrieval_method == 'self-signed' else true }}"

  2719. 

  2720. ######################################################################

  2721. #

  2722. # /matrix-client-hydrogen

  2723. #

  2724. ######################################################################

  2725. 

  2726. ######################################################################

  2727. #

  2728. # matrix-client-cinny

  2729. #

  2730. ######################################################################

  2731. 

  2732. matrix_client_cinny_enabled: false

  2733. 

  2734. matrix_client_cinny_container_image_self_build: "{{ matrix_architecture not in ['arm64', 'amd64'] }}"

  2735. 

  2736. # Normally, matrix-nginx-proxy is enabled and nginx can reach Cinny over the container network.

  2737. # If matrix-nginx-proxy is not enabled, or you otherwise have a need for it, you can expose

  2738. # the HTTP port to the local host.

  2739. matrix_client_cinny_container_http_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else '127.0.0.1:8080' }}"

  2740. 

  2741. matrix_client_cinny_default_hs_url: "{{ matrix_homeserver_url }}"

  2742. 

  2743. matrix_client_cinny_self_check_validate_certificates: "{{ false if matrix_ssl_retrieval_method == 'self-signed' else true }}"

  2744. 

  2745. ######################################################################

  2746. #

  2747. # /matrix-client-cinny

  2748. #

  2749. ######################################################################

  2750. 

  2751. ######################################################################

  2752. #

  2753. # matrix-synapse

  2754. #

  2755. ######################################################################

  2756. 

  2757. matrix_synapse_enabled: "{{ matrix_homeserver_implementation == 'synapse' }}"

  2758. 

  2759. matrix_synapse_container_image_self_build: "{{ matrix_architecture not in ['arm64', 'amd64'] }}"

  2760. 

  2761. # When ma1sd is enabled, we can use it to validate phone numbers. It's something that the homeserver cannot do by itself.

  2762. matrix_synapse_account_threepid_delegates_msisdn: "{{ 'http://matrix-ma1sd:' + matrix_ma1sd_container_port | string if matrix_ma1sd_enabled else '' }}"

  2763. 

  2764. # For exposing the Matrix Federation API's TLS port (HTTPS) to the internet on all network interfaces.

  2765. matrix_synapse_container_federation_api_tls_host_bind_port: "{{ matrix_federation_public_port if (matrix_synapse_federation_enabled and matrix_synapse_tls_federation_listener_enabled) else '' }}"

  2766. #

  2767. # For exposing the Synapse Metrics API's port (plain HTTP) to the local host.

  2768. matrix_synapse_container_metrics_api_host_bind_port: "{{ '127.0.0.1:9100' if (matrix_synapse_metrics_enabled and not matrix_nginx_proxy_enabled) else '' }}"

  2769. #

  2770. # For exposing the Synapse Manhole port (plain HTTP) to the local host.

  2771. matrix_synapse_container_manhole_api_host_bind_port: "{{ '127.0.0.1:9000' if matrix_synapse_manhole_enabled else '' }}"

  2772. #

  2773. # For exposing the Synapse worker (and metrics) ports to the local host.

  2774. matrix_synapse_workers_container_host_bind_address: "{{ '127.0.0.1' if (matrix_synapse_workers_enabled and not matrix_nginx_proxy_enabled) else '' }}"

  2775. 

  2776. matrix_synapse_database_host: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  2777. matrix_synapse_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'synapse.db', rounds=655555) | to_uuid }}"

  2778. 

  2779. matrix_synapse_macaroon_secret_key: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'synapse.mac', rounds=655555) | to_uuid }}"

  2780. 

  2781. # We do not enable TLS in Synapse by default.

  2782. # TLS is handled by the matrix-nginx-proxy, which proxies the requests to Synapse.

  2783. matrix_synapse_tls_federation_listener_enabled: false

  2784. matrix_synapse_tls_certificate_path: ~

  2785. matrix_synapse_tls_private_key_path: ~

  2786. 

  2787. matrix_synapse_federation_port_openid_resource_required: "{{ not matrix_synapse_federation_enabled and (matrix_dimension_enabled or matrix_ma1sd_enabled) }}"

  2788. 

  2789. # If someone instals Prometheus via the playbook, they most likely wish to monitor Synapse.

  2790. matrix_synapse_metrics_enabled: "{{ matrix_prometheus_enabled }}"

  2791. 

  2792. matrix_synapse_email_enabled: "{{ matrix_mailer_enabled }}"

  2793. matrix_synapse_email_smtp_host: "matrix-mailer"

  2794. matrix_synapse_email_smtp_port: 8025

  2795. matrix_synapse_email_smtp_require_transport_security: false

  2796. matrix_synapse_email_notif_from: "Matrix <{{ matrix_mailer_sender_address }}>"

  2797. 

  2798. # Even if TURN doesn't support TLS (it does by default),

  2799. # it doesn't hurt to try a secure connection anyway.

  2800. #

  2801. # When Let's Encrypt certificates are used (the default case),

  2802. # we don't enable `turns` endpoints, because WebRTC in Element can't talk to them.

  2803. # Learn more here: https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1145

  2804. matrix_synapse_turn_uris: |

  2805.   {{

  2806.     []

  2807.     +

  2808.     [

  2809.       'turns:' + matrix_server_fqn_matrix + '?transport=udp',

  2810.       'turns:' + matrix_server_fqn_matrix + '?transport=tcp',

  2811.     ] if matrix_coturn_enabled and matrix_coturn_tls_enabled and matrix_ssl_retrieval_method != 'lets-encrypt' else []

  2812.     +

  2813.     [

  2814.       'turn:' + matrix_server_fqn_matrix + '?transport=udp',

  2815.       'turn:' + matrix_server_fqn_matrix + '?transport=tcp',

  2816.     ] if matrix_coturn_enabled else []

  2817.   }}

  2818. 

  2819. matrix_synapse_turn_shared_secret: "{{ matrix_coturn_turn_static_auth_secret if matrix_coturn_enabled else '' }}"

  2820. 

  2821. matrix_synapse_self_check_validate_certificates: "{{ false if matrix_ssl_retrieval_method == 'self-signed' else true }}"

  2822. 

  2823. matrix_synapse_systemd_required_services_list: |

  2824.   {{

  2825.     (['docker.service'])

  2826.     +

  2827.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  2828.     +

  2829.     (['matrix-goofys.service'] if matrix_s3_media_store_enabled else [])

  2830.   }}

  2831. 

  2832. matrix_synapse_systemd_wanted_services_list: |

  2833.   {{

  2834.     (['matrix-coturn.service'] if matrix_coturn_enabled else [])

  2835.     +

  2836.     (['matrix-mailer.service'] if matrix_mailer_enabled else [])

  2837.   }}

  2838. 

  2839. # Synapse workers (used for parallel load-scaling) need Redis for IPC.

  2840. matrix_synapse_redis_enabled: "{{ matrix_redis_enabled }}"

  2841. matrix_synapse_redis_host: "{{ 'matrix-redis' if matrix_redis_enabled else '' }}"

  2842. matrix_synapse_redis_password: "{{ matrix_redis_connection_password if matrix_redis_enabled else '' }}"

  2843. 

  2844. matrix_synapse_container_extra_arguments_auto: "{{ matrix_homeserver_container_extra_arguments_auto }}"

  2845. matrix_synapse_app_service_config_files_auto: "{{ matrix_homeserver_app_service_config_files_auto }}"

  2846. 

  2847. ######################################################################

  2848. #

  2849. # /matrix-synapse

  2850. #

  2851. ######################################################################

  2852. 

  2853. ######################################################################

  2854. #

  2855. # matrix-synapse-reverse-proxy-companion

  2856. #

  2857. ######################################################################

  2858. 

  2859. matrix_synapse_reverse_proxy_companion_enabled: "{{ matrix_synapse_enabled }}"

  2860. 

  2861. matrix_synapse_reverse_proxy_companion_client_api_client_max_body_size_mb: "{{ matrix_synapse_max_upload_size_mb }}"

  2862. 

  2863. matrix_synapse_reverse_proxy_companion_container_client_api_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else '127.0.0.1:8008' }}"

  2864. matrix_synapse_reverse_proxy_companion_container_federation_api_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else '127.0.0.1:8048' }}"

  2865. 

  2866. matrix_synapse_reverse_proxy_companion_synapse_workers_enabled: "{{ matrix_synapse_workers_enabled }}"

  2867. matrix_synapse_reverse_proxy_companion_synapse_workers_list: "{{ matrix_synapse_workers_enabled_list }}"

  2868. matrix_synapse_reverse_proxy_companion_synapse_generic_worker_client_server_locations: "{{ matrix_synapse_workers_generic_worker_client_server_endpoints }}"

  2869. matrix_synapse_reverse_proxy_companion_synapse_generic_worker_federation_locations: "{{ matrix_synapse_workers_generic_worker_federation_endpoints }}"

  2870. matrix_synapse_reverse_proxy_companion_synapse_stream_writer_typing_stream_worker_client_server_locations: "{{ matrix_synapse_workers_stream_writer_typing_stream_worker_client_server_endpoints }}"

  2871. matrix_synapse_reverse_proxy_companion_synapse_stream_writer_to_device_stream_worker_client_server_locations: "{{ matrix_synapse_workers_stream_writer_to_device_stream_worker_client_server_endpoints }}"

  2872. matrix_synapse_reverse_proxy_companion_synapse_stream_writer_account_data_stream_worker_client_server_locations: "{{ matrix_synapse_workers_stream_writer_account_data_stream_worker_client_server_endpoints }}"

  2873. matrix_synapse_reverse_proxy_companion_synapse_stream_writer_receipts_stream_worker_client_server_locations: "{{ matrix_synapse_workers_stream_writer_receipts_stream_worker_client_server_endpoints }}"

  2874. matrix_synapse_reverse_proxy_companion_synapse_stream_writer_presence_stream_worker_client_server_locations: "{{ matrix_synapse_workers_stream_writer_presence_stream_worker_client_server_endpoints }}"

  2875. matrix_synapse_reverse_proxy_companion_synapse_media_repository_locations: "{{matrix_synapse_workers_media_repository_endpoints|default([]) }}"

  2876. matrix_synapse_reverse_proxy_companion_synapse_user_dir_locations: "{{ matrix_synapse_workers_user_dir_worker_client_server_endpoints|default([]) }}"

  2877. 

  2878. matrix_synapse_reverse_proxy_companion_access_log_syslog_integration_enabled: "{{ matrix_prometheus_nginxlog_exporter_enabled }}"

  2879. matrix_synapse_reverse_proxy_companion_access_log_syslog_integration_server_port: "{{ (matrix_prometheus_nginxlog_exporter_container_hostname | string +':'+ matrix_prometheus_nginxlog_exporter_container_syslog_port | string) | default('') }}"

  2880. 

  2881. ######################################################################

  2882. #

  2883. # /matrix-synapse-reverse-proxy-companion

  2884. #

  2885. ######################################################################

  2886. 

  2887. ######################################################################

  2888. #

  2889. # matrix-synapse-admin

  2890. #

  2891. ######################################################################

  2892. 

  2893. matrix_synapse_admin_enabled: false

  2894. 

  2895. # Normally, matrix-nginx-proxy is enabled and nginx can reach Synapse Admin over the container network.

  2896. # If matrix-nginx-proxy is not enabled, or you otherwise have a need for it, you can expose

  2897. # Synapse Admin's HTTP port to the local host.

  2898. matrix_synapse_admin_container_http_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else '127.0.0.1:8766' }}"

  2899. 

  2900. matrix_synapse_admin_container_image_self_build: "{{ matrix_architecture not in ['arm64', 'amd64'] }}"

  2901. 

  2902. ######################################################################

  2903. #

  2904. # /matrix-synapse-admin

  2905. #

  2906. ######################################################################

  2907. 

  2908. ######################################################################

  2909. #

  2910. # matrix-prometheus-node-exporter

  2911. #

  2912. ######################################################################

  2913. 

  2914. matrix_prometheus_node_exporter_enabled: false

  2915. 

  2916. ######################################################################

  2917. #

  2918. # /matrix-prometheus-node-exporter

  2919. #

  2920. ######################################################################

  2921. 

  2922. ######################################################################

  2923. #

  2924. # matrix-prometheus-nginxlog-exporter

  2925. #

  2926. ######################################################################

  2927. 

  2928. matrix_prometheus_nginxlog_exporter_enabled: false

  2929. 

  2930. ######################################################################

  2931. #

  2932. # /matrix-prometheus-nginxlog-exporter

  2933. #

  2934. ######################################################################

  2935. 

  2936. ######################################################################

  2937. #

  2938. # matrix-prometheus

  2939. #

  2940. ######################################################################

  2941. 

  2942. matrix_prometheus_enabled: false

  2943. 

  2944. # Normally, matrix-nginx-proxy is enabled and nginx can reach Prometheus over the container network.

  2945. # If matrix-nginx-proxy is not enabled, or you otherwise have a need for it, you can expose

  2946. # Prometheus' HTTP port to the local host.

  2947. matrix_prometheus_container_http_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else '127.0.0.1:9090' }}"

  2948. 

  2949. matrix_prometheus_scraper_synapse_enabled: "{{ matrix_synapse_enabled and matrix_synapse_metrics_enabled }}"

  2950. matrix_prometheus_scraper_synapse_targets: ['matrix-synapse:{{ matrix_synapse_metrics_port }}']

  2951. matrix_prometheus_scraper_synapse_workers_enabled_list: "{{ matrix_synapse_workers_enabled_list }}"

  2952. matrix_prometheus_scraper_synapse_rules_synapse_tag: "{{ matrix_synapse_docker_image_tag }}"

  2953. 

  2954. matrix_prometheus_scraper_node_enabled: "{{ matrix_prometheus_node_exporter_enabled }}"

  2955. matrix_prometheus_scraper_node_targets: "{{ ['matrix-prometheus-node-exporter:9100'] if matrix_prometheus_node_exporter_enabled else [] }}"

  2956. 

  2957. matrix_prometheus_scraper_postgres_enabled: "{{ matrix_prometheus_postgres_exporter_enabled }}"

  2958. matrix_prometheus_scraper_postgres_targets: "{{ ['matrix-prometheus-postgres-exporter:'+ matrix_prometheus_postgres_exporter_port | string] if matrix_prometheus_scraper_postgres_enabled else [] }}"

  2959. 

  2960. matrix_prometheus_scraper_hookshot_enabled: "{{ matrix_hookshot_metrics_enabled|default(false) }}"

  2961. matrix_prometheus_scraper_hookshot_targets: "{{ [matrix_hookshot_container_url | string +':'+ matrix_hookshot_metrics_port | string] if matrix_hookshot_metrics_enabled else [] }}"

  2962. 

  2963. matrix_prometheus_scraper_nginxlog_enabled: "{{ matrix_prometheus_nginxlog_exporter_enabled }}"

  2964. matrix_prometheus_scraper_nginxlog_server_port: "{{ (matrix_prometheus_nginxlog_exporter_container_hostname | string +':'+ matrix_prometheus_nginxlog_exporter_container_metrics_port | string)

  2965. | default('') }}"

  2966. 

  2967. ######################################################################

  2968. #

  2969. # /matrix-prometheus

  2970. #

  2971. ######################################################################

  2972. 

  2973. ######################################################################

  2974. #

  2975. # matrix-prometheus-postgres-exporter

  2976. #

  2977. ######################################################################

  2978. 

  2979. matrix_prometheus_postgres_exporter_enabled: false

  2980. matrix_prometheus_postgres_exporter_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  2981. matrix_prometheus_postgres_exporter_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'prometheus.pg.db', rounds=655555) | to_uuid }}"

  2982. 

  2983. matrix_prometheus_postgres_exporter_systemd_required_services_list: |

  2984.   {{

  2985.     ['docker.service']

  2986.     +

  2987.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  2988.   }}

  2989. 

  2990. ######################################################################

  2991. #

  2992. # /matrix-prometheus-postgres-exporter

  2993. #

  2994. ######################################################################

  2995. 

  2996. ######################################################################

  2997. #

  2998. # matrix-grafana

  2999. #

  3000. ######################################################################

  3001. 

  3002. matrix_grafana_enabled: false

  3003. 

  3004. # Normally, matrix-nginx-proxy is enabled and nginx can reach Grafana over the container network.

  3005. # If matrix-nginx-proxy is not enabled, or you otherwise have a need for it, you can expose

  3006. # Grafana's HTTP port to the local host.

  3007. matrix_grafana_container_http_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else '127.0.0.1:3000' }}"

  3008. 

  3009. matrix_grafana_dashboard_download_urls: |

  3010.   {{

  3011.     (matrix_synapse_grafana_dashboard_urls if matrix_homeserver_implementation == 'synapse' and matrix_synapse_metrics_enabled else [])

  3012.     +

  3013.     (matrix_prometheus_node_exporter_dashboard_urls if matrix_prometheus_node_exporter_enabled else [])

  3014.     +

  3015.     (matrix_prometheus_postgres_exporter_dashboard_urls if matrix_prometheus_postgres_exporter_enabled else [])

  3016.     +

  3017.     (matrix_prometheus_nginxlog_exporter_dashboard_urls if matrix_prometheus_nginxlog_exporter_enabled else [])

  3018.   }}

  3019. 

  3020. matrix_grafana_default_home_dashboard_path: |-

  3021.   {{

  3022.     {

  3023.       'synapse': ('/etc/grafana/dashboards/synapse.json' if matrix_synapse_metrics_enabled else '/etc/grafana/dashboards/node-exporter-full.json'),

  3024.       'dendrite': '/etc/grafana/dashboards/node-exporter-full.json',

  3025.       'conduit': '/etc/grafana/dashboards/node-exporter-full.json',

  3026.     }[matrix_homeserver_implementation]

  3027.   }}

  3028. 

  3029. matrix_grafana_systemd_wanted_services_list: |

  3030.   {{

  3031.     []

  3032.     +

  3033.     (['matrix-prometheus-postgres-exporter.service'] if matrix_prometheus_postgres_exporter_enabled else [])

  3034.   }}

  3035. 

  3036. ######################################################################

  3037. #

  3038. # /matrix-grafana

  3039. #

  3040. ######################################################################

  3041. 

  3042. ######################################################################

  3043. #

  3044. # matrix-registration

  3045. #

  3046. ######################################################################

  3047. 

  3048. matrix_registration_enabled: false

  3049. 

  3050. # Normally, matrix-nginx-proxy is enabled and nginx can reach matrix-registration over the container network.

  3051. # If matrix-nginx-proxy is not enabled, or you otherwise have a need for it, you can expose

  3052. # matrix-registration's HTTP port to the local host.

  3053. matrix_registration_container_http_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else '127.0.0.1:8767' }}"

  3054. 

  3055. matrix_registration_riot_instance: "{{ ('https://' + matrix_server_fqn_element) if matrix_client_element_enabled else 'https://riot.im/app/' }}"

  3056. 

  3057. matrix_registration_shared_secret: |-

  3058.   {{

  3059.     {

  3060.       'synapse': matrix_synapse_registration_shared_secret,

  3061.       'dendrite': matrix_dendrite_client_api_registration_shared_secret,

  3062.       'conduit': '',

  3063.     }[matrix_homeserver_implementation]

  3064.   }}

  3065. 

  3066. matrix_registration_server_location: "{{ matrix_homeserver_container_url }}"

  3067. 

  3068. matrix_registration_api_validate_certs: "{{ false if matrix_ssl_retrieval_method == 'self-signed' else true }}"

  3069. 

  3070. matrix_registration_container_image_self_build: "{{ matrix_architecture != 'amd64' }}"

  3071. 

  3072. matrix_registration_systemd_required_services_list: |

  3073.   {{

  3074.     ['docker.service']

  3075.     +

  3076.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  3077.   }}

  3078. 

  3079. # Postgres is the default, except if not using internal Postgres server

  3080. matrix_registration_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  3081. matrix_registration_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  3082. matrix_registration_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mx.registr.db', rounds=655555) | to_uuid }}"

  3083. 

  3084. ######################################################################

  3085. #

  3086. # /matrix-registration

  3087. #

  3088. ######################################################################

  3089. 

  3090. 

  3091. ######################################################################

  3092. #

  3093. # matrix-dendrite

  3094. #

  3095. ######################################################################

  3096. 

  3097. matrix_dendrite_enabled: "{{ matrix_homeserver_implementation == 'dendrite' }}"

  3098. 

  3099. # Normally, matrix-nginx-proxy is enabled and nginx can reach Dendrite over the container network.

  3100. # If matrix-nginx-proxy is not enabled, or you otherwise have a need for it,

  3101. # you can expose Dendrite's ports to the host.

  3102. #

  3103. # For exposing Dendrite's plain HTTP server to the local host.

  3104. matrix_dendrite_container_http_host_bind_address: "{{ '' if matrix_nginx_proxy_enabled else ('127.0.0.1:' + matrix_dendrite_http_bind_port | string) }}"

  3105. #

  3106. # For exposing Dendrite's HTTPS server to the local host.

  3107. matrix_dendrite_container_https_host_bind_address: "{{ '' if matrix_nginx_proxy_enabled or not matrix_dendrite_https_bind_port else ('127.0.0.1:' + matrix_dendrite_https_bind_port | string) }}"

  3108. 

  3109. matrix_dendrite_sync_api_real_ip_header: "{{ 'X-Forwarded-For' if matrix_nginx_proxy_enabled else '' }}"

  3110. 

  3111. matrix_dendrite_client_api_registration_shared_secret: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'dendrite.rss', rounds=655555) | to_uuid }}"

  3112. 

  3113. matrix_dendrite_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  3114. 

  3115. matrix_dendrite_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'dendrite.db', rounds=655555) | to_uuid }}"

  3116. 

  3117. # Even if TURN doesn't support TLS (it does by default),

  3118. # it doesn't hurt to try a secure connection anyway.

  3119. matrix_dendrite_client_api_turn_uris: |

  3120.   {{

  3121.     [

  3122.       'turns:' + matrix_server_fqn_matrix + '?transport=udp',

  3123.       'turns:' + matrix_server_fqn_matrix + '?transport=tcp',

  3124.       'turn:' + matrix_server_fqn_matrix + '?transport=udp',

  3125.       'turn:' + matrix_server_fqn_matrix + '?transport=tcp',

  3126.     ]

  3127.     if matrix_coturn_enabled

  3128.     else []

  3129.   }}

  3130. 

  3131. matrix_dendrite_client_api_turn_shared_secret: "{{ matrix_coturn_turn_static_auth_secret if matrix_coturn_enabled else '' }}"

  3132. 

  3133. matrix_dendrite_disable_tls_validation: "{{ true if matrix_ssl_retrieval_method == 'self-signed' else false }}"

  3134. 

  3135. matrix_dendrite_self_check_validate_certificates: "{{ false if matrix_ssl_retrieval_method == 'self-signed' else true }}"

  3136. 

  3137. matrix_dendrite_trusted_id_servers: "{{ [matrix_server_fqn_matrix] if matrix_ma1sd_enabled else ['matrix.org', 'vector.im'] }}"

  3138. 

  3139. matrix_dendrite_systemd_required_services_list: |

  3140.   {{

  3141.     (['docker.service'])

  3142.     +

  3143.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  3144.     +

  3145.     (['matrix-goofys.service'] if matrix_s3_media_store_enabled else [])

  3146.   }}

  3147. 

  3148. matrix_dendrite_systemd_wanted_services_list: |

  3149.   {{

  3150.     (['matrix-coturn.service'] if matrix_coturn_enabled else [])

  3151.   }}

  3152. 

  3153. matrix_dendrite_container_extra_arguments_auto: "{{ matrix_homeserver_container_extra_arguments_auto }}"

  3154. matrix_dendrite_app_service_config_files_auto: "{{ matrix_homeserver_app_service_config_files_auto }}"

  3155. 

  3156. ######################################################################

  3157. #

  3158. # /matrix-dendrite

  3159. #

  3160. ######################################################################

  3161. 

  3162. ######################################################################

  3163. #

  3164. # matrix-conduit

  3165. #

  3166. ######################################################################

  3167. 

  3168. matrix_conduit_enabled: "{{ matrix_homeserver_implementation == 'conduit' }}"

  3169. 

  3170. matrix_conduit_systemd_required_services_list: |

  3171.   {{

  3172.     (['docker.service'])

  3173.   }}

  3174. 

  3175. 

  3176. ######################################################################

  3177. #

  3178. # /matrix-conduit

  3179. #

  3180. ######################################################################

  3181. 

  3182. 

  3183. ######################################################################

  3184. #

  3185. # matrix-user-creator

  3186. #

  3187. ######################################################################

  3188. 

  3189. matrix_user_creator_users_auto: |

  3190.   {{

  3191.     ([{

  3192.       'username': matrix_bot_matrix_reminder_bot_matrix_user_id_localpart,

  3193.       'initial_password': matrix_bot_matrix_reminder_bot_matrix_user_password,

  3194.       'initial_type': 'bot',

  3195.     }] if matrix_bot_matrix_reminder_bot_enabled else [])

  3196.     +

  3197.     ([{

  3198.       'username': matrix_bot_honoroit_login,

  3199.       'initial_password': matrix_bot_honoroit_password,

  3200.       'initial_type': 'bot',

  3201.     }] if matrix_bot_honoroit_enabled else [])

  3202.     +

  3203.     ([{

  3204.       'username': matrix_bot_postmoogle_login,

  3205.       'initial_password': matrix_bot_postmoogle_password,

  3206.       'initial_type': 'bot',

  3207.     }] if matrix_bot_postmoogle_enabled else [])

  3208.     +

  3209.     ([{

  3210.       'username': matrix_bot_buscarron_login,

  3211.       'initial_password': matrix_bot_buscarron_password,

  3212.       'initial_type': 'bot',

  3213.     }] if matrix_bot_buscarron_enabled else [])

  3214.   }}

  3215. 

  3216. ######################################################################

  3217. #

  3218. # /matrix-user-creator

  3219. #

  3220. ######################################################################