Matrix Docker Ansible eploy
Вы не можете выбрать более 25 тем Темы должны начинаться с буквы или цифры, могут содержать дефисы(-) и должны содержать не более 35 символов.

225 строки
12 KiB

  1. # The bare domain name which represents your Matrix identity.
  2. # Matrix user ids for your server will be of the form (`@user:<matrix-domain>`).
  3. #
  4. # Note: this playbook does not touch the server referenced here.
  5. # Installation happens on another server ("matrix.<matrix-domain>", see `matrix_server_fqn_matrix`).
  6. #
  7. # Example value: example.com
  8. matrix_domain: ~
  9. # This is where your data lives and what we set up.
  10. # This and the Element FQN (see below) are expected to be on the same server.
  11. matrix_server_fqn_matrix: "matrix.{{ matrix_domain }}"
  12. # This is where you access federation API.
  13. matrix_server_fqn_matrix_federation: '{{ matrix_server_fqn_matrix }}'
  14. # This is where you access the Element web UI from (if enabled via matrix_client_element_enabled; enabled by default).
  15. # This and the Matrix FQN (see above) are expected to be on the same server.
  16. matrix_server_fqn_element: "element.{{ matrix_domain }}"
  17. # This is where you access the Hydrogen web client from (if enabled via matrix_client_hydrogen_enabled; disabled by default).
  18. matrix_server_fqn_hydrogen: "hydrogen.{{ matrix_domain }}"
  19. # This is where you access the Dimension.
  20. matrix_server_fqn_dimension: "dimension.{{ matrix_domain }}"
  21. # For use with Go-NEB! (github callback url for example)
  22. matrix_server_fqn_bot_go_neb: "goneb.{{ matrix_domain }}"
  23. # This is where you access Jitsi.
  24. matrix_server_fqn_jitsi: "jitsi.{{ matrix_domain }}"
  25. # This is where you access Grafana.
  26. matrix_server_fqn_grafana: "stats.{{ matrix_domain }}"
  27. # This is where you access the Sygnal push gateway.
  28. matrix_server_fqn_sygnal: "sygnal.{{ matrix_domain }}"
  29. matrix_federation_public_port: 8448
  30. # The architecture that your server runs.
  31. # Recognized values by us are 'amd64', 'arm32' and 'arm64'.
  32. # Not all architectures support all services, so your experience (on non-amd64) may vary.
  33. # See docs/alternative-architectures.md
  34. matrix_architecture: amd64
  35. # The architecture for Debian packages.
  36. # See: https://wiki.debian.org/SupportedArchitectures
  37. # We just remap from our `matrix_architecture` values to what Debian and possibly other distros call things.
  38. matrix_debian_arch: "{{ 'armhf' if matrix_architecture == 'arm32' else matrix_architecture }}"
  39. matrix_user_username: "matrix"
  40. matrix_user_groupname: "matrix"
  41. # By default, the playbook creates the user (`matrix_user_username`)
  42. # and group (`matrix_user_groupname`) with a random id.
  43. # To use a specific user/group id, override these variables.
  44. matrix_user_uid: ~
  45. matrix_user_gid: ~
  46. matrix_base_data_path: "/matrix"
  47. matrix_base_data_path_mode: "750"
  48. matrix_static_files_base_path: "{{ matrix_base_data_path }}/static-files"
  49. matrix_systemd_path: "/etc/systemd/system"
  50. # Specifies the path to use for the `HOME` environment variable for systemd unit files.
  51. # Docker 20.10 complains with `WARNING: Error loading config file: .dockercfg: $HOME is not defined`
  52. # if `$HOME` is not defined, so we define something to make it happy.
  53. matrix_systemd_unit_home_path: /root
  54. # This is now unused. We keep it so that cleanup tasks can use it.
  55. # To be removed in the future.
  56. matrix_cron_path: "/etc/cron.d"
  57. matrix_local_bin_path: "/usr/local/bin"
  58. matrix_host_command_docker: "/usr/bin/env docker"
  59. matrix_host_command_sleep: "/usr/bin/env sleep"
  60. matrix_host_command_chown: "/usr/bin/env chown"
  61. matrix_host_command_fusermount: "/usr/bin/env fusermount"
  62. matrix_host_command_openssl: "/usr/bin/env openssl"
  63. matrix_host_command_systemctl: "/usr/bin/env systemctl"
  64. matrix_host_command_sh: "/usr/bin/env sh"
  65. matrix_ntpd_package: "{{ 'systemd-timesyncd' if (ansible_distribution == 'CentOS' and ansible_distribution_major_version > '7') or (ansible_distribution == 'Ubuntu' and ansible_distribution_major_version > '18') else ( 'systemd' if ansible_os_family == 'Suse' else 'ntp' ) }}"
  66. matrix_ntpd_service: "{{ 'systemd-timesyncd' if (ansible_distribution == 'CentOS' and ansible_distribution_major_version > '7') or (ansible_distribution == 'Ubuntu' and ansible_distribution_major_version > '18') or ansible_distribution == 'Archlinux' or ansible_os_family == 'Suse' else ('ntpd' if ansible_os_family == 'RedHat' else 'ntp') }}"
  67. matrix_homeserver_url: "https://{{ matrix_server_fqn_matrix }}"
  68. # Specifies where the homeserver is on the container network.
  69. # Where this is depends on whether there's a reverse-proxy in front of it, etc.
  70. # This likely gets overriden elsewhere.
  71. matrix_homeserver_container_url: ""
  72. matrix_identity_server_url: ~
  73. matrix_integration_manager_rest_url: ~
  74. matrix_integration_manager_ui_url: ~
  75. # The domain name where a Jitsi server is self-hosted.
  76. # If set, `/.well-known/matrix/client` will suggest Element clients to use that Jitsi server.
  77. # See: https://github.com/vector-im/element-web/blob/develop/docs/jitsi.md#configuring-element-to-use-your-self-hosted-jitsi-server
  78. matrix_client_element_jitsi_preferredDomain: ''
  79. # Controls whether Element should use End-to-End Encryption by default.
  80. # Setting this to false will update `/.well-known/matrix/client` and tell Element clients to avoid E2EE.
  81. # See: https://github.com/vector-im/element-web/blob/develop/docs/e2ee.md
  82. matrix_client_element_e2ee_default: true
  83. # Controls whether Element should require a secure backup set up before Element can be used.
  84. # Setting this to true will update `/.well-known/matrix/client` and tell Element require a secure backup.
  85. # See: https://github.com/vector-im/element-web/blob/develop/docs/e2ee.md
  86. matrix_client_element_e2ee_secure_backup_required: false
  87. # Controls which backup methods from ["key", "passphrase"] should be used, both is the default.
  88. # Setting this to other then empty will update `/.well-known/matrix/client` and tell Element which method to use
  89. # See: https://github.com/vector-im/element-web/blob/develop/docs/e2ee.md
  90. matrix_client_element_e2ee_secure_backup_setup_methods: []
  91. # Default `/.well-known/matrix/client` configuration - it covers the generic use case.
  92. # You can customize it by controlling the various variables inside the template file that it references.
  93. #
  94. # For a more advanced customization, you can extend the default (see `matrix_well_known_matrix_client_configuration_extension_json`)
  95. # or completely replace this variable with your own template.
  96. #
  97. # The side-effect of this lookup is that Ansible would even parse the JSON for us, returning a dict.
  98. # This is unlike what it does when looking up YAML template files (no automatic parsing there).
  99. matrix_well_known_matrix_client_configuration_default: "{{ lookup('template', 'templates/static-files/well-known/matrix-client.j2') }}"
  100. # Your custom JSON configuration for `/.well-known/matrix/client` should go to `matrix_well_known_matrix_client_configuration_extension_json`.
  101. # This configuration extends the default starting configuration (`matrix_well_known_matrix_client_configuration_default`).
  102. #
  103. # You can override individual variables from the default configuration, or introduce new ones.
  104. #
  105. # If you need something more special, you can take full control by
  106. # completely redefining `matrix_well_known_matrix_client_configuration`.
  107. #
  108. # Example configuration extension follows:
  109. #
  110. # matrix_well_known_matrix_client_configuration_extension_json: |
  111. # {
  112. # "io.element.call_behaviour": {
  113. # "widget_build_url": "https://dimension.example.com/api/v1/dimension/bigbluebutton/widget_state"
  114. # }
  115. # }
  116. matrix_well_known_matrix_client_configuration_extension_json: '{}'
  117. matrix_well_known_matrix_client_configuration_extension: "{{ matrix_well_known_matrix_client_configuration_extension_json|from_json if matrix_well_known_matrix_client_configuration_extension_json|from_json is mapping else {} }}"
  118. # Holds the final `/.well-known/matrix/client` configuration (a combination of the default and its extension).
  119. # You most likely don't need to touch this variable. Instead, see `matrix_well_known_matrix_client_configuration_default` and `matrix_well_known_matrix_client_configuration_extension_json`.
  120. matrix_well_known_matrix_client_configuration: "{{ matrix_well_known_matrix_client_configuration_default|combine(matrix_well_known_matrix_client_configuration_extension, recursive=True) }}"
  121. # Default `/.well-known/matrix/server` configuration - it covers the generic use case.
  122. # You can customize it by controlling the various variables inside the template file that it references.
  123. #
  124. # For a more advanced customization, you can extend the default (see `matrix_well_known_matrix_server_configuration_extension_json`)
  125. # or completely replace this variable with your own template.
  126. #
  127. # The side-effect of this lookup is that Ansible would even parse the JSON for us, returning a dict.
  128. # This is unlike what it does when looking up YAML template files (no automatic parsing there).
  129. matrix_well_known_matrix_server_configuration_default: "{{ lookup('template', 'templates/static-files/well-known/matrix-server.j2') }}"
  130. # Your custom JSON configuration for `/.well-known/matrix/server` should go to `matrix_well_known_matrix_server_configuration_extension_json`.
  131. # This configuration extends the default starting configuration (`matrix_well_known_matrix_server_configuration_default`).
  132. #
  133. # You can override individual variables from the default configuration, or introduce new ones.
  134. #
  135. # If you need something more special, you can take full control by
  136. # completely redefining `matrix_well_known_matrix_server_configuration`.
  137. #
  138. # Example configuration extension follows:
  139. #
  140. # matrix_well_known_matrix_server_configuration_extension_json: |
  141. # {
  142. # "something": "another"
  143. # }
  144. matrix_well_known_matrix_server_configuration_extension_json: '{}'
  145. matrix_well_known_matrix_server_configuration_extension: "{{ matrix_well_known_matrix_server_configuration_extension_json|from_json if matrix_well_known_matrix_server_configuration_extension_json|from_json is mapping else {} }}"
  146. # Holds the final `/.well-known/matrix/server` configuration (a combination of the default and its extension).
  147. # You most likely don't need to touch this variable. Instead, see `matrix_well_known_matrix_server_configuration_default` and `matrix_well_known_matrix_server_configuration_extension_json`.
  148. matrix_well_known_matrix_server_configuration: "{{ matrix_well_known_matrix_server_configuration_default|combine(matrix_well_known_matrix_server_configuration_extension, recursive=True) }}"
  149. # The Docker network that all services would be put into
  150. matrix_docker_network: "matrix"
  151. # Controls whether we'll preserve the vars.yml file on the Matrix server.
  152. # If you have a differently organized inventory, you may wish to disable this feature,
  153. # or to repoint `matrix_vars_yml_snapshotting_src` to the file you'd like to preserve.
  154. matrix_vars_yml_snapshotting_enabled: true
  155. matrix_vars_yml_snapshotting_src: "{{ inventory_dir }}/host_vars/{{ inventory_hostname }}/vars.yml"
  156. # Controls whether a `/.well-known/matrix/server` file is generated and used at all.
  157. #
  158. # If you wish to rely on DNS SRV records only, you can disable this.
  159. # Using DNS SRV records implies that you'll be handling Matrix Federation API traffic (tcp/8448)
  160. # using certificates for the base domain (`matrix_domain`) and not for the
  161. # matrix domain (`matrix_server_fqn_matrix`).
  162. matrix_well_known_matrix_server_enabled: true
  163. # Controls whether Docker is automatically installed.
  164. # If you change this to false you must install and update Docker manually. You also need to install the docker (https://pypi.org/project/docker/) Python package.
  165. matrix_docker_installation_enabled: true
  166. # Controls the Docker package that is installed.
  167. # Possible values are "docker-ce" (default) and "docker.io" (Debian).
  168. matrix_docker_package_name: docker-ce
  169. # Variables to Control which parts of our roles run.
  170. run_postgres_import: true
  171. run_postgres_upgrade: true
  172. run_postgres_import_sqlite_db: true
  173. run_postgres_vacuum: true
  174. run_synapse_register_user: true
  175. run_synapse_update_user_password: true
  176. run_synapse_import_media_store: true
  177. run_synapse_rust_synapse_compress_state: true
  178. run_setup: true
  179. run_self_check: true
  180. run_start: true
  181. run_stop: true