overmind
/
matrix-docker-ansible-deploy
réplica de https://github.com/spantaleev/matrix-docker-ansible-deploy
1
0
Fork 0
Código Incidencias 0 Lanzamientos 0 Wiki Actividad
Matrix Docker Ansible eploy
No puede seleccionar más de 25 temas Los temas deben comenzar con una letra o número, pueden incluir guiones ('-') y pueden tener hasta 35 caracteres de largo.
5547 Commits
13 Ramas
509 MiB
 
 
Árbol: 39b0300797
Ramas Etiquetas
${ item.name }
Crear rama ${ searchTerm }
desde '39b0300797'
${ noResults }
matrix-docker-ansible-deploy/group_vars/matrix_servers

3254 líneas
157 KiB
Original Blame Histórico 

  1. ---

  2. 

  3. # This variables file wires together the various components (roles) used by the playbook.

  4. #

  5. # Roles used by playbook are pretty minimal and kept independent of one another as much as possible.

  6. # To deliver a turnkey fully-featured Matrix server, this playbook needs

  7. # to connect them all together. It does so by overriding role variables.

  8. #

  9. # You can also override ANY variable (seen here or in any given role),

  10. # by re-defining it in your own configuration file (`inventory/host_vars/matrix.<your-domain>`).

  11. 

  12. ########################################################################

  13. #                                                                      #

  14. # Playbook                                                             #

  15. #                                                                      #

  16. ########################################################################

  17. 

  18. # Controls whether to install Docker or not

  19. # Also see `devture_docker_sdk_for_python_installation_enabled`.

  20. matrix_playbook_docker_installation_enabled: true

  21. 

  22. ########################################################################

  23. #                                                                      #

  24. # /Playbook                                                            #

  25. #                                                                      #

  26. ########################################################################

  27. 

  28. ########################################################################

  29. #                                                                      #

  30. # base                                                                 #

  31. #                                                                      #

  32. ########################################################################

  33. 

  34. matrix_homeserver_container_extra_arguments_auto: |

  35.   {{

  36.     (['--mount type=bind,src=' + matrix_appservice_discord_config_path + '/registration.yaml,dst=/matrix-appservice-discord-registration.yaml,ro'] if matrix_appservice_discord_enabled else [])

  37.     +

  38.     (['--mount type=bind,src=' + matrix_appservice_irc_config_path + '/registration.yaml,dst=/matrix-appservice-irc-registration.yaml,ro'] if matrix_appservice_irc_enabled else [])

  39.     +

  40.     (['--mount type=bind,src=' + matrix_appservice_kakaotalk_config_path + '/registration.yaml,dst=/matrix-appservice-kakaotalk-registration.yaml,ro'] if matrix_appservice_kakaotalk_enabled else [])

  41.     +

  42.     (['--mount type=bind,src=' + matrix_appservice_slack_config_path + '/slack-registration.yaml,dst=/matrix-appservice-slack-registration.yaml,ro'] if matrix_appservice_slack_enabled else [])

  43.     +

  44.     (['--mount type=bind,src=' + matrix_appservice_webhooks_config_path + '/webhooks-registration.yaml,dst=/matrix-appservice-webhooks-registration.yaml,ro'] if matrix_appservice_webhooks_enabled else [])

  45.     +

  46.     (['--mount type=bind,src=' + matrix_beeper_linkedin_config_path + '/registration.yaml,dst=/matrix-beeper-linkedin-registration.yaml,ro'] if matrix_beeper_linkedin_enabled else [])

  47.     +

  48.     (['--mount type=bind,src=' + matrix_go_skype_bridge_config_path + '/registration.yaml,dst=/matrix-go-skype-bridge-registration.yaml,ro'] if matrix_go_skype_bridge_enabled else [])

  49.     +

  50.     (['--mount type=bind,src=' + matrix_heisenbridge_base_path + '/registration.yaml,dst=/heisenbridge-registration.yaml,ro'] if matrix_heisenbridge_enabled else [])

  51.     +

  52.     (['--mount type=bind,src=' + matrix_hookshot_base_path + '/registration.yml,dst=/hookshot-registration.yml,ro'] if matrix_hookshot_enabled else [])

  53.     +

  54.     (['--mount type=bind,src=' + matrix_mautrix_discord_config_path + '/registration.yaml,dst=/matrix-mautrix-discord-registration.yaml,ro'] if matrix_mautrix_discord_enabled else [])

  55.     +

  56.     (['--mount type=bind,src=' + matrix_mautrix_slack_config_path + '/registration.yaml,dst=/matrix-mautrix-slack-registration.yaml,ro'] if matrix_mautrix_slack_enabled else [])

  57.     +

  58.     (['--mount type=bind,src=' + matrix_mautrix_facebook_config_path + '/registration.yaml,dst=/matrix-mautrix-facebook-registration.yaml,ro'] if matrix_mautrix_facebook_enabled else [])

  59.     +

  60.     (['--mount type=bind,src=' + matrix_mautrix_googlechat_config_path + '/registration.yaml,dst=/matrix-mautrix-googlechat-registration.yaml,ro'] if matrix_mautrix_googlechat_enabled else [])

  61.     +

  62.     (['--mount type=bind,src=' + matrix_mautrix_hangouts_config_path + '/registration.yaml,dst=/matrix-mautrix-hangouts-registration.yaml,ro'] if matrix_mautrix_hangouts_enabled else [])

  63.     +

  64.     (['--mount type=bind,src=' + matrix_mautrix_instagram_config_path + '/registration.yaml,dst=/matrix-mautrix-instagram-registration.yaml,ro'] if matrix_mautrix_instagram_enabled else [])

  65.     +

  66.     (['--mount type=bind,src=' + matrix_mautrix_signal_config_path + '/registration.yaml,dst=/matrix-mautrix-signal-registration.yaml,ro'] if matrix_mautrix_signal_enabled else [])

  67.     +

  68.     (['--mount type=bind,src=' + matrix_mautrix_telegram_config_path + '/registration.yaml,dst=/matrix-mautrix-telegram-registration.yaml,ro'] if matrix_mautrix_telegram_enabled else [])

  69.     +

  70.     (['--mount type=bind,src=' + matrix_mautrix_twitter_config_path + '/registration.yaml,dst=/matrix-mautrix-twitter-registration.yaml,ro'] if matrix_mautrix_twitter_enabled else [])

  71.     +

  72.     (['--mount type=bind,src=' + matrix_mautrix_whatsapp_config_path + '/registration.yaml,dst=/matrix-mautrix-whatsapp-registration.yaml,ro'] if matrix_mautrix_whatsapp_enabled else [])

  73.     +

  74.     (['--mount type=bind,src=' + matrix_mx_puppet_discord_config_path + '/registration.yaml,dst=/matrix-mx-puppet-discord-registration.yaml,ro'] if matrix_mx_puppet_discord_enabled else [])

  75.     +

  76.     (['--mount type=bind,src=' + matrix_mx_puppet_groupme_config_path + '/registration.yaml,dst=/matrix-mx-puppet-groupme-registration.yaml,ro'] if matrix_mx_puppet_groupme_enabled else [])

  77.     +

  78.     (['--mount type=bind,src=' + matrix_mx_puppet_instagram_config_path + '/registration.yaml,dst=/matrix-mx-puppet-instagram-registration.yaml,ro'] if matrix_mx_puppet_instagram_enabled else [])

  79.     +

  80.     (['--mount type=bind,src=' + matrix_mx_puppet_slack_config_path + '/registration.yaml,dst=/matrix-mx-puppet-slack-registration.yaml,ro'] if matrix_mx_puppet_slack_enabled else [])

  81.     +

  82.     (['--mount type=bind,src=' + matrix_mx_puppet_steam_config_path + '/registration.yaml,dst=/matrix-mx-puppet-steam-registration.yaml,ro'] if matrix_mx_puppet_steam_enabled else [])

  83.     +

  84.     (['--mount type=bind,src=' + matrix_mx_puppet_twitter_config_path + '/registration.yaml,dst=/matrix-mx-puppet-twitter-registration.yaml,ro'] if matrix_mx_puppet_twitter_enabled else [])

  85.     +

  86.     (['--mount type=bind,src=' + matrix_sms_bridge_config_path + '/registration.yaml,dst=/matrix-sms-bridge-registration.yaml,ro'] if matrix_sms_bridge_enabled else [])

  87.     +

  88.     (['--mount type=bind,src=' + matrix_cactus_comments_app_service_config_file + ',dst=/matrix-cactus-comments.yaml,ro'] if matrix_cactus_comments_enabled else [])

  89.   }}

  90. 

  91. matrix_homeserver_app_service_config_files_auto: |

  92.   {{

  93.     (['/matrix-appservice-discord-registration.yaml'] if matrix_appservice_discord_enabled else [])

  94.     +

  95.     (['/matrix-appservice-irc-registration.yaml'] if matrix_appservice_irc_enabled else [])

  96.     +

  97.     (['/matrix-appservice-kakaotalk-registration.yaml'] if matrix_appservice_kakaotalk_enabled else [])

  98.     +

  99.     (['/matrix-appservice-slack-registration.yaml'] if matrix_appservice_slack_enabled else [])

  100.     +

  101.     (['/matrix-appservice-webhooks-registration.yaml'] if matrix_appservice_webhooks_enabled else [])

  102.     +

  103.     (['/matrix-beeper-linkedin-registration.yaml'] if matrix_beeper_linkedin_enabled else [])

  104.     +

  105.     (['/matrix-go-skype-bridge-registration.yaml'] if matrix_go_skype_bridge_enabled else [])

  106.     +

  107.     (['/heisenbridge-registration.yaml'] if matrix_heisenbridge_enabled else [])

  108.     +

  109.     (['/hookshot-registration.yml'] if matrix_hookshot_enabled else [])

  110.     +

  111.     (['/matrix-mautrix-discord-registration.yaml'] if matrix_mautrix_discord_enabled else [])

  112.     +

  113.     (['/matrix-mautrix-slack-registration.yaml'] if matrix_mautrix_slack_enabled else [])

  114.     +

  115.     (['/matrix-mautrix-facebook-registration.yaml'] if matrix_mautrix_facebook_enabled else [])

  116.     +

  117.     (['/matrix-mautrix-googlechat-registration.yaml'] if matrix_mautrix_googlechat_enabled else [])

  118.     +

  119.     (['/matrix-mautrix-hangouts-registration.yaml'] if matrix_mautrix_hangouts_enabled else [])

  120.     +

  121.     (['/matrix-mautrix-instagram-registration.yaml'] if matrix_mautrix_instagram_enabled else [])

  122.     +

  123.     (['/matrix-mautrix-signal-registration.yaml'] if matrix_mautrix_signal_enabled else [])

  124.     +

  125.     (['/matrix-mautrix-telegram-registration.yaml'] if matrix_mautrix_telegram_enabled else [])

  126.     +

  127.     (['/matrix-mautrix-twitter-registration.yaml'] if matrix_mautrix_twitter_enabled else [])

  128.     +

  129.     (['/matrix-mautrix-whatsapp-registration.yaml'] if matrix_mautrix_whatsapp_enabled else [])

  130.     +

  131.     (['/matrix-mx-puppet-discord-registration.yaml'] if matrix_mx_puppet_discord_enabled else [])

  132.     +

  133.     (['/matrix-mx-puppet-groupme-registration.yaml'] if matrix_mx_puppet_groupme_enabled else [])

  134.     +

  135.     (['/matrix-mx-puppet-instagram-registration.yaml'] if matrix_mx_puppet_instagram_enabled else [])

  136.     +

  137.     (['/matrix-mx-puppet-slack-registration.yaml'] if matrix_mx_puppet_slack_enabled else [])

  138.     +

  139.     (['/matrix-mx-puppet-steam-registration.yaml'] if matrix_mx_puppet_steam_enabled else [])

  140.     +

  141.     (['/matrix-mx-puppet-twitter-registration.yaml'] if matrix_mx_puppet_twitter_enabled else [])

  142.     +

  143.     (['/matrix-sms-bridge-registration.yaml'] if matrix_sms_bridge_enabled else [])

  144.     +

  145.     (['/matrix-cactus-comments.yaml'] if matrix_cactus_comments_enabled else [])

  146.   }}

  147. 

  148. ########################################################################

  149. #                                                                      #

  150. # /base                                                                #

  151. #                                                                      #

  152. ########################################################################

  153. 

  154. 

  155. ########################################################################

  156. #                                                                      #

  157. # com.devture.ansible.role.systemd_service_manager                     #

  158. #                                                                      #

  159. ########################################################################

  160. 

  161. # This list is not exhaustive and final.

  162. # Synapse workers are still injected into the list at runtime.

  163. # Additional JVB workers (playbooks/jitsi_jvb.yml -- roles/custom/matrix-jitsi/tasks/init_additional_jvb.yml) override this variable at runtime as well.

  164. #

  165. # Priority levels are like this:

  166. # - core services (the homeserver) get a level of ~1000

  167. # - services that core services depend on (database, Redis, ntfy, etc.) get a lower level - between 500 and 1000

  168. # - reverse-proxying services get level 3000

  169. # - Matrix utility services (bridges, bots) get a level of 2000/2200, so that:

  170. #   - they can start before the reverse-proxy

  171. #   - so that, when the reverse-proxy is up (Matrix is up), all bots and bridges can be interacted with

  172. # - monitoring services (Prometheus, Grafana, ..) get a level of 4000 - they can start later than all-of-Matrix

  173. # - services which aren't time-sensitive (various crons and timers) get a level of 5000 - they can start later than all-of-Matrix

  174. devture_systemd_service_manager_services_list_auto: |

  175.   {{

  176.     ([{'name': 'matrix-backup-borg.timer', 'priority': 5000, 'groups': ['matrix', 'backup', 'borg']}] if matrix_backup_borg_enabled else [])

  177.     +

  178.     ([{'name': 'matrix-bot-buscarron.service', 'priority': 2200, 'groups': ['matrix', 'bots', 'buscarron']}] if matrix_bot_buscarron_enabled else [])

  179.     +

  180.     ([{'name': 'matrix-bot-go-neb.service', 'priority': 2200, 'groups': ['matrix', 'bots', 'go-neb']}] if matrix_bot_go_neb_enabled else [])

  181.     +

  182.     ([{'name': 'matrix-bot-honoroit.service', 'priority': 2200, 'groups': ['matrix', 'bots', 'honoroit']}] if matrix_bot_honoroit_enabled else [])

  183.     +

  184.     ([{'name': 'matrix-bot-matrix-registration-bot.service', 'priority': 2200, 'groups': ['matrix', 'bots', 'registration-bot']}] if matrix_bot_matrix_registration_bot_enabled else [])

  185.     +

  186.     ([{'name': 'matrix-bot-matrix-reminder-bot.service', 'priority': 2200, 'groups': ['matrix', 'bots', 'reminder-bot']}] if matrix_bot_matrix_reminder_bot_enabled else [])

  187.     +

  188.     ([{'name': 'matrix-bot-maubot.service', 'priority': 2200, 'groups': ['matrix', 'bots', 'maubot']}] if matrix_bot_maubot_enabled else [])

  189.     +

  190.     ([{'name': 'matrix-bot-mjolnir.service', 'priority': 2200, 'groups': ['matrix', 'bots', 'mjolnir']}] if matrix_bot_mjolnir_enabled else [])

  191.     +

  192.     ([{'name': 'matrix-bot-postmoogle.service', 'priority': 2200, 'groups': ['matrix', 'bots', 'postmoogle']}] if matrix_bot_postmoogle_enabled else [])

  193.     +

  194.     ([{'name': 'matrix-bot-chatgpt.service', 'priority': 2200, 'groups': ['matrix', 'bots', 'chatgpt']}] if matrix_bot_chatgpt_enabled else [])

  195.     +

  196.     ([{'name': 'matrix-appservice-discord.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'appservice-discord']}] if matrix_appservice_discord_enabled else [])

  197.     +

  198.     ([{'name': 'matrix-appservice-irc.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'appservice-irc']}] if matrix_appservice_irc_enabled else [])

  199.     +

  200.     ([{'name': 'matrix-appservice-kakaotalk.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'appservice-kakaotalk']}] if matrix_appservice_kakaotalk_enabled else [])

  201.     +

  202.     ([{'name': 'matrix-appservice-kakaotalk-node.service', 'priority': 1900, 'groups': ['matrix', 'bridges', 'appservice-kakaotalk', 'appservice-kakaotalk-node']}] if matrix_appservice_kakaotalk_enabled else [])

  203.     +

  204.     ([{'name': 'matrix-appservice-slack.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'appservice-slack']}] if matrix_appservice_slack_enabled else [])

  205.     +

  206.     ([{'name': 'matrix-appservice-webhooks.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'appservice-webhooks']}] if matrix_appservice_webhooks_enabled else [])

  207.     +

  208.     ([{'name': 'matrix-beeper-linkedin.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'beeper-linkedin']}] if matrix_beeper_linkedin_enabled else [])

  209.     +

  210.     ([{'name': 'matrix-go-skype-bridge.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'go-skype']}] if matrix_go_skype_bridge_enabled else [])

  211.     +

  212.     ([{'name': 'matrix-heisenbridge.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'heisenbridge']}] if matrix_heisenbridge_enabled else [])

  213.     +

  214.     ([{'name': 'matrix-hookshot.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'hookshot']}] if matrix_hookshot_enabled else [])

  215.     +

  216.     ([{'name': 'matrix-mautrix-discord.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mautrix-discord']}] if matrix_mautrix_discord_enabled else [])

  217.     +

  218.     ([{'name': 'matrix-mautrix-slack.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mautrix-slack']}] if matrix_mautrix_slack_enabled else [])

  219.     +

  220.     ([{'name': 'matrix-mautrix-facebook.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mautrix-facebook']}] if matrix_mautrix_facebook_enabled else [])

  221.     +

  222.     ([{'name': 'matrix-mautrix-googlechat.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mautrix-googlechat']}] if matrix_mautrix_googlechat_enabled else [])

  223.     +

  224.     ([{'name': 'matrix-mautrix-hangouts.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mautrix-hangouts']}] if matrix_mautrix_hangouts_enabled else [])

  225.     +

  226.     ([{'name': 'matrix-mautrix-instagram.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mautrix-instagram']}] if matrix_mautrix_instagram_enabled else [])

  227.     +

  228.     ([{'name': 'matrix-mautrix-signal.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mautrix-signal']}] if matrix_mautrix_signal_enabled else [])

  229.     +

  230.     ([{'name': 'matrix-mautrix-signal-daemon.service', 'priority': 1900, 'groups': ['matrix', 'bridges', 'mautrix-signal', 'mautrix-signal-daemon']}] if matrix_mautrix_signal_enabled else [])

  231.     +

  232.     ([{'name': 'matrix-mautrix-telegram.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mautrix-telegram']}] if matrix_mautrix_telegram_enabled else [])

  233.     +

  234.     ([{'name': 'matrix-mautrix-twitter.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mautrix-twitter']}] if matrix_mautrix_twitter_enabled else [])

  235.     +

  236.     ([{'name': 'matrix-mautrix-whatsapp.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mautrix-whatsapp']}] if matrix_mautrix_whatsapp_enabled else [])

  237.     +

  238.     ([{'name': 'matrix-mx-puppet-discord.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mx-puppet-discord']}] if matrix_mx_puppet_discord_enabled else [])

  239.     +

  240.     ([{'name': 'matrix-mx-puppet-groupme.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mx-puppet-groupme']}] if matrix_mx_puppet_groupme_enabled else [])

  241.     +

  242.     ([{'name': 'matrix-mx-puppet-instagram.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mx-puppet-instagram']}] if matrix_mx_puppet_instagram_enabled else [])

  243.     +

  244.     ([{'name': 'matrix-mx-puppet-slack.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mx-puppet-slack']}] if matrix_mx_puppet_slack_enabled else [])

  245.     +

  246.     ([{'name': 'matrix-mx-puppet-steam.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mx-puppet-steam']}] if matrix_mx_puppet_steam_enabled else [])

  247.     +

  248.     ([{'name': 'matrix-mx-puppet-twitter.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mx-puppet-twitter']}] if matrix_mx_puppet_twitter_enabled else [])

  249.     +

  250.     ([{'name': 'matrix-sms-bridge.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'sms']}] if matrix_sms_bridge_enabled else [])

  251.     +

  252.     ([{'name': 'matrix-cactus-comments.service', 'priority': 2000, 'groups': ['matrix', 'cactus-comments']}] if matrix_cactus_comments_enabled else [])

  253.     +

  254.     ([{'name': 'matrix-client-cinny.service', 'priority': 2000, 'groups': ['matrix', 'clients', 'cinny']}] if matrix_client_cinny_enabled else [])

  255.     +

  256.     ([{'name': 'matrix-client-element.service', 'priority': 2000, 'groups': ['matrix', 'clients', 'element']}] if matrix_client_element_enabled else [])

  257.     +

  258.     ([{'name': 'matrix-client-hydrogen.service', 'priority': 2000, 'groups': ['matrix', 'clients', 'hydrogen']}] if matrix_client_hydrogen_enabled else [])

  259.     +

  260.     ([{'name': ('matrix-' + matrix_homeserver_implementation + '.service'), 'priority': 1000, 'groups': ['matrix', 'homeservers', matrix_homeserver_implementation]}] if matrix_homeserver_enabled else [])

  261.     +

  262.     ([{'name': 'matrix-corporal.service', 'priority': 1500, 'groups': ['matrix', 'corporal']}] if matrix_corporal_enabled else [])

  263.     +

  264.     ([{'name': 'matrix-coturn.service', 'priority': 4000, 'groups': ['matrix', 'coturn']}] if matrix_coturn_enabled else [])

  265.     +

  266.     ([{'name': 'matrix-coturn-reload.timer', 'priority': 5000, 'groups': ['matrix', 'coturn']}] if (matrix_coturn_enabled and matrix_coturn_tls_enabled) else [])

  267.     +

  268.     ([{'name': 'matrix-dimension.service', 'priority': 2500, 'groups': ['matrix', 'integration-managers', 'dimension']}] if matrix_dimension_enabled else [])

  269.     +

  270.     ([{'name': 'matrix-dynamic-dns.service', 'priority': 5000, 'groups': ['matrix', 'dynamic-dns']}] if matrix_dynamic_dns_enabled else [])

  271.     +

  272.     ([{'name': 'matrix-email2matrix.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'email2matrix']}] if matrix_email2matrix_enabled else [])

  273.     +

  274.     ([{'name': 'matrix-etherpad.service', 'priority': 4000, 'groups': ['matrix', 'etherpad']}] if matrix_etherpad_enabled else [])

  275.     +

  276.     ([{'name': 'matrix-grafana.service', 'priority': 4000, 'groups': ['matrix', 'monitoring', 'grafana']}] if matrix_grafana_enabled else [])

  277.     +

  278.     ([{'name': 'matrix-jitsi-web.service', 'priority': 4200, 'groups': ['matrix', 'jitsi', 'jitsi-web']}] if matrix_jitsi_enabled else [])

  279.     +

  280.     ([{'name': 'matrix-jitsi-prosody.service', 'priority': 4000, 'groups': ['matrix', 'jitsi', 'jitsi-prosody']}] if matrix_jitsi_enabled else [])

  281.     +

  282.     ([{'name': 'matrix-jitsi-jicofo.service', 'priority': 4100, 'groups': ['matrix', 'jitsi', 'jitsi-jicofo']}] if matrix_jitsi_enabled else [])

  283.     +

  284.     ([{'name': 'matrix-jitsi-jvb.service', 'priority': 4100, 'groups': ['matrix', 'jitsi', 'jitsi-jvb']}] if matrix_jitsi_enabled else [])

  285.     +

  286.     ([{'name': 'matrix-ldap-registration-proxy.service', 'priority': 2000, 'groups': ['matrix', 'ldap-registration-proxy']}] if matrix_ldap_registration_proxy_enabled else [])

  287.     +

  288.     ([{'name': 'matrix-ma1sd.service', 'priority': 2000, 'groups': ['matrix', 'ma1sd']}] if matrix_ma1sd_enabled else [])

  289.     +

  290.     ([{'name': 'matrix-mailer.service', 'priority': 2000, 'groups': ['matrix', 'mailer']}] if matrix_mailer_enabled else [])

  291.     +

  292.     ([{'name': 'matrix-nginx-proxy.service', 'priority': 3000, 'groups': ['matrix', 'nginx', 'reverse-proxies']}] if matrix_nginx_proxy_enabled else [])

  293.     +

  294.     (matrix_ssl_renewal_systemd_units_list | selectattr('applicable') | selectattr('enableable') | list )

  295.     +

  296.     ([{'name': 'matrix-ntfy.service', 'priority': 800, 'groups': ['matrix', 'ntfy']}] if matrix_ntfy_enabled else [])

  297.     +

  298.     ([{'name': (devture_postgres_identifier + '.service'), 'priority': 500, 'groups': ['matrix', 'postgres']}] if devture_postgres_enabled else [])

  299.     +

  300.     ([{'name': (devture_postgres_backup_identifier + '.service'), 'priority': 5000, 'groups': ['matrix', 'backup', 'postgres-backup']}] if devture_postgres_backup_enabled else [])

  301.     +

  302.     ([{'name': 'matrix-prometheus.service', 'priority': 4000, 'groups': ['matrix', 'monitoring', 'prometheus', 'prometheus-core']}] if matrix_prometheus_enabled else [])

  303.     +

  304.     ([{'name': (prometheus_node_exporter_identifier + '.service'), 'priority': 3900, 'groups': ['matrix', 'monitoring', 'prometheus', 'prometheus-node-exporters']}] if prometheus_node_exporter_enabled else [])

  305.     +

  306.     ([{'name': 'matrix-prometheus-postgres-exporter.service', 'priority': 3900, 'groups': ['matrix', 'monitoring', 'prometheus', 'prometheus-node-exporters']}] if matrix_prometheus_postgres_exporter_enabled else [])

  307.     +

  308.     ([{'name': 'matrix-prometheus-nginxlog-exporter.service', 'priority': 3900, 'groups': ['matrix', 'monitoring', 'prometheus', 'prometheus-node-exporters']}] if matrix_prometheus_nginxlog_exporter_enabled else [])

  309.     +

  310.     ([{'name': 'matrix-redis', 'priority': 750, 'groups': ['matrix', 'redis']}] if matrix_redis_enabled else [])

  311.     +

  312.     ([{'name': 'matrix-registration.service', 'priority': 4000, 'groups': ['matrix', 'registration']}] if matrix_registration_enabled else [])

  313.     +

  314.     ([{'name': 'matrix-sygnal.service', 'priority': 800, 'groups': ['matrix', 'sygnal']}] if matrix_sygnal_enabled else [])

  315.     +

  316.     ([{'name': 'matrix-goofys.service', 'priority': 800, 'groups': ['matrix', 'goofys']}] if matrix_s3_media_store_enabled else [])

  317.     +

  318.     ([{'name': 'matrix-synapse-s3-storage-provider-migrate.timer', 'priority': 5000, 'groups': ['matrix']}] if matrix_synapse_ext_synapse_s3_storage_provider_enabled else [])

  319.     +

  320.     ([{'name': 'matrix-synapse-admin.service', 'priority': 4000, 'groups': ['matrix', 'synapse-admin']}] if matrix_synapse_admin_enabled else [])

  321.     +

  322.     ([{'name': 'matrix-synapse-reverse-proxy-companion.service', 'priority': 1500, 'groups': ['matrix', 'homeservers', 'synapse', 'reverse-proxies']}] if matrix_synapse_reverse_proxy_companion_enabled else [])

  323.   }}

  324. 

  325. ########################################################################

  326. #                                                                      #

  327. # /com.devture.ansible.role.systemd_service_manager                    #

  328. #                                                                      #

  329. ########################################################################

  330. 

  331. 

  332. ########################################################################

  333. #                                                                      #

  334. # com.devture.ansible.role.timesync                                    #

  335. #                                                                      #

  336. ########################################################################

  337. 

  338. # To completely disable installing systemd-timesyncd/ntpd, use `devture_timesync_installation_enabled: false`.

  339. 

  340. ########################################################################

  341. #                                                                      #

  342. # /com.devture.ansible.role.timesync                                   #

  343. #                                                                      #

  344. ########################################################################

  345. 

  346. 

  347. 

  348. ######################################################################

  349. #

  350. # com.devture.ansible.role.playbook_state_preserver

  351. #

  352. ######################################################################

  353. 

  354. # To completely disable this feature, use `devture_playbook_state_preserver_enabled: false`.

  355. 

  356. devture_playbook_state_preserver_uid: "{{ matrix_user_uid }}"

  357. devture_playbook_state_preserver_gid: "{{ matrix_user_gid }}"

  358. 

  359. devture_playbook_state_preserver_vars_preservation_dst: "{{ matrix_base_data_path }}/vars.yml"

  360. 

  361. devture_playbook_state_preserver_commit_hash_preservation_dst: "{{ matrix_base_data_path }}/git_hash.yml"

  362. 

  363. ######################################################################

  364. #

  365. # /com.devture.ansible.role.playbook_state_preserver

  366. #

  367. ######################################################################

  368. 

  369. 

  370. 

  371. ######################################################################

  372. #

  373. # matrix-base

  374. #

  375. ######################################################################

  376. 

  377. matrix_identity_server_url: "{{ ('https://' + matrix_server_fqn_matrix) if matrix_ma1sd_enabled else None }}"

  378. 

  379. matrix_homeserver_container_url: |-

  380.   {{

  381.     'http://matrix-nginx-proxy:12080' if matrix_nginx_proxy_enabled else {

  382.       'synapse': ('http://matrix-synapse-reverse-proxy-companion:8008' if matrix_synapse_reverse_proxy_companion_enabled else 'http://matrix-synapse:'+ matrix_synapse_container_client_api_port|string),

  383.       'dendrite': ('http://matrix-dendrite:' + matrix_dendrite_http_bind_port|string),

  384.       'conduit': ('http://matrix-conduit:' + matrix_conduit_port_number|string),

  385.     }[matrix_homeserver_implementation]

  386.   }}

  387. 

  388. matrix_homeserver_container_federation_url: |-

  389.   {{

  390.     'http://matrix-nginx-proxy:12088' if matrix_nginx_proxy_enabled else {

  391.       'synapse': ('http://matrix-synapse-reverse-proxy-companion:8048' if matrix_synapse_reverse_proxy_companion_enabled else 'http://matrix-synapse:'+ matrix_synapse_container_federation_api_plain_port|string),

  392.       'dendrite': ('http://matrix-dendrite:' + matrix_dendrite_http_bind_port|string),

  393.       'conduit': ('http://matrix-conduit:' + matrix_conduit_port_number|string),

  394.     }[matrix_homeserver_implementation]

  395.   }}

  396. 

  397. matrix_integration_manager_rest_url: "{{ matrix_dimension_integrations_rest_url if matrix_dimension_enabled else None }}"

  398. matrix_integration_manager_ui_url: "{{ matrix_dimension_integrations_ui_url if matrix_dimension_enabled else None }}"

  399. 

  400. ######################################################################

  401. #

  402. # /matrix-base

  403. #

  404. ######################################################################

  405. 

  406. 

  407. ######################################################################

  408. #

  409. # matrix-bridge-appservice-discord

  410. #

  411. ######################################################################

  412. 

  413. # We don't enable bridges by default.

  414. matrix_appservice_discord_enabled: false

  415. 

  416. # Normally, matrix-nginx-proxy is enabled and nginx can reach matrix-appservice-discord over the container network.

  417. # If matrix-nginx-proxy is not enabled, or you otherwise have a need for it, you can expose

  418. # matrix-appservice-discord's client-server port to the local host.

  419. matrix_appservice_discord_container_http_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else '127.0.0.1:9005' }}"

  420. 

  421. # If the homeserver disables presence, it's likely better (less wasteful) to also disable presence on the bridge side.

  422. matrix_appservice_discord_bridge_disablePresence: "{{ not matrix_synapse_presence_enabled }}"

  423. 

  424. matrix_appservice_discord_systemd_required_services_list: |

  425.   {{

  426.     ['docker.service']

  427.     +

  428.     ['matrix-' + matrix_homeserver_implementation + '.service']

  429.     +

  430.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  431.     +

  432.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  433.   }}

  434. 

  435. matrix_appservice_discord_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'discord.as.token', rounds=655555) | to_uuid }}"

  436. 

  437. matrix_appservice_discord_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'discord.hs.token', rounds=655555) | to_uuid }}"

  438. 

  439. # We only make this use Postgres if our own Postgres server is enabled.

  440. # It's only then (for now) that we can automatically create the necessary database and user for this service.

  441. matrix_appservice_discord_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  442. matrix_appservice_discord_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  443. matrix_appservice_discord_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'as.discord.db', rounds=655555) | to_uuid }}"

  444. 

  445. ######################################################################

  446. #

  447. # /matrix-bridge-appservice-discord

  448. #

  449. ######################################################################

  450. 

  451. 

  452. ######################################################################

  453. #

  454. # matrix-appservice-webhooks

  455. #

  456. ######################################################################

  457. 

  458. # We don't enable bridges by default.

  459. matrix_appservice_webhooks_enabled: false

  460. 

  461. matrix_appservice_webhooks_container_image_self_build: "{{ matrix_architecture != 'amd64' }}"

  462. 

  463. # Normally, matrix-nginx-proxy is enabled and nginx can reach matrix-appservice-webhooks over the container network.

  464. # If matrix-nginx-proxy is not enabled, or you otherwise have a need for it, you can expose

  465. # matrix-appservice-webhooks' client-server port to the local host.

  466. matrix_appservice_webhooks_container_http_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else ('127.0.0.1:' ~ matrix_appservice_webhooks_matrix_port) }}"

  467. 

  468. matrix_appservice_webhooks_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'webhook.as.token', rounds=655555) | to_uuid }}"

  469. 

  470. matrix_appservice_webhooks_homeserver_url: "{{ matrix_homeserver_container_url }}"

  471. matrix_appservice_webhooks_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'webhook.hs.token', rounds=655555) | to_uuid }}"

  472. 

  473. matrix_appservice_webhooks_id_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'webhook.id.token', rounds=655555) | to_uuid }}"

  474. 

  475. matrix_appservice_webhooks_systemd_required_services_list: |

  476.   {{

  477.     ['docker.service']

  478.     +

  479.     ['matrix-' + matrix_homeserver_implementation + '.service']

  480.     +

  481.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  482.   }}

  483. 

  484. ######################################################################

  485. #

  486. # /matrix-appservice-webhooks

  487. #

  488. ######################################################################

  489. 

  490. 

  491. ######################################################################

  492. #

  493. # matrix-appservice-slack

  494. #

  495. ######################################################################

  496. 

  497. # We don't enable bridges by default.

  498. matrix_appservice_slack_enabled: false

  499. 

  500. matrix_appservice_slack_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"

  501. 

  502. # Normally, matrix-nginx-proxy is enabled and nginx can reach matrix-appservice-slack over the container network.

  503. # If matrix-nginx-proxy is not enabled, or you otherwise have a need for it, you can expose

  504. # matrix-appservice-slack's client-server port to the local host.

  505. matrix_appservice_slack_container_http_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else ('127.0.0.1:' ~ matrix_appservice_slack_slack_port) }}"

  506. 

  507. matrix_appservice_slack_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'slack.as.token', rounds=655555) | to_uuid }}"

  508. 

  509. matrix_appservice_slack_homeserver_url: "{{ matrix_homeserver_container_url }}"

  510. matrix_appservice_slack_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'slack.hs.token', rounds=655555) | to_uuid }}"

  511. 

  512. matrix_appservice_slack_id_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'slack.id.token', rounds=655555) | to_uuid }}"

  513. 

  514. matrix_appservice_slack_systemd_required_services_list: |

  515.   {{

  516.     ['docker.service']

  517.     +

  518.     ['matrix-' + matrix_homeserver_implementation + '.service']

  519.     +

  520.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  521.   }}

  522. 

  523. # Postgres is the default, except if not using internal Postgres server

  524. matrix_appservice_slack_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'nedb' }}"

  525. matrix_appservice_slack_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  526. matrix_appservice_slack_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'as.slack.db', rounds=655555) | to_uuid }}"

  527. 

  528. ######################################################################

  529. #

  530. # /matrix-bridge-appservice-slack

  531. #

  532. ######################################################################

  533. 

  534. ######################################################################

  535. #

  536. # matrix-bridge-appservice-irc

  537. #

  538. ######################################################################

  539. 

  540. # We don't enable bridges by default.

  541. matrix_appservice_irc_enabled: false

  542. 

  543. matrix_appservice_irc_container_image_self_build: "{{ matrix_architecture != 'amd64' }}"

  544. 

  545. # Normally, matrix-nginx-proxy is enabled and nginx can reach matrix-appservice-irc over the container network.

  546. # If matrix-nginx-proxy is not enabled, or you otherwise have a need for it, you can expose

  547. # matrix-appservice-irc's client-server port to the local host.

  548. matrix_appservice_irc_container_http_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else '127.0.0.1:9999' }}"

  549. 

  550. # The IRC bridge docs say that if homeserver presence is disabled, it's better to also disable

  551. # IRC bridge presence, for performance reasons.

  552. matrix_appservice_irc_homeserver_enablePresence: "{{ matrix_synapse_presence_enabled }}"

  553. 

  554. matrix_appservice_irc_systemd_required_services_list: |

  555.   {{

  556.     ['docker.service']

  557.     +

  558.     ['matrix-' + matrix_homeserver_implementation + '.service']

  559.     +

  560.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  561.   }}

  562. 

  563. matrix_appservice_irc_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'irc.as.token', rounds=655555) | to_uuid }}"

  564. 

  565. matrix_appservice_irc_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'irc.hs.token', rounds=655555) | to_uuid }}"

  566. 

  567. matrix_appservice_irc_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'nedb' }}"

  568. matrix_appservice_irc_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  569. matrix_appservice_irc_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'as.irc.db', rounds=655555) | to_uuid }}"

  570. 

  571. 

  572. ######################################################################

  573. #

  574. # /matrix-bridge-appservice-irc

  575. #

  576. ######################################################################

  577. 

  578. ######################################################################

  579. #

  580. # matrix-bridge-appservice-kakaotalk

  581. #

  582. ######################################################################

  583. 

  584. # We don't enable bridges by default.

  585. matrix_appservice_kakaotalk_enabled: false

  586. 

  587. matrix_appservice_kakaotalk_systemd_required_services_list: |

  588.   {{

  589.     ['docker.service']

  590.     +

  591.     ['matrix-appservice-kakaotalk-node.service']

  592.     +

  593.     ['matrix-' + matrix_homeserver_implementation + '.service']

  594.     +

  595.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  596.     +

  597.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  598.   }}

  599. 

  600. matrix_appservice_kakaotalk_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'as.kakao.hs', rounds=655555) | to_uuid }}"

  601. 

  602. matrix_appservice_kakaotalk_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'as.kakao.hs', rounds=655555) | to_uuid }}"

  603. 

  604. matrix_appservice_kakaotalk_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  605. 

  606. matrix_appservice_kakaotalk_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  607. matrix_appservice_kakaotalk_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  608. matrix_appservice_kakaotalk_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'as.kakao.db', rounds=655555) | to_uuid }}"

  609. 

  610. ######################################################################

  611. #

  612. # /matrix-bridge-appservice-kakaotalk

  613. #

  614. ######################################################################

  615. 

  616. 

  617. ######################################################################

  618. #

  619. # matrix-bridge-beeper-linkedin

  620. #

  621. ######################################################################

  622. 

  623. # We don't enable bridges by default.

  624. matrix_beeper_linkedin_enabled: false

  625. 

  626. matrix_beeper_linkedin_container_image_self_build: "{{ matrix_architecture not in ['amd64'] }}"

  627. 

  628. matrix_beeper_linkedin_systemd_required_services_list: |

  629.   {{

  630.     ['docker.service']

  631.     +

  632.     ['matrix-' + matrix_homeserver_implementation + '.service']

  633.     +

  634.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  635.     +

  636.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  637.   }}

  638. 

  639. matrix_beeper_linkedin_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'linked.as.token', rounds=655555) | to_uuid }}"

  640. 

  641. matrix_beeper_linkedin_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'linked.hs.token', rounds=655555) | to_uuid }}"

  642. 

  643. matrix_beeper_linkedin_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  644. 

  645. matrix_beeper_linkedin_bridge_presence: "{{ matrix_synapse_presence_enabled if matrix_synapse_enabled else true }}"

  646. 

  647. matrix_beeper_linkedin_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  648. matrix_beeper_linkedin_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'maulinkedin.db', rounds=655555) | to_uuid }}"

  649. 

  650. ######################################################################

  651. #

  652. # /matrix-bridge-beeper-linkedin

  653. #

  654. ######################################################################

  655. 

  656. ######################################################################

  657. #

  658. # matrix-bridge-go-skype-bridge

  659. #

  660. ######################################################################

  661. 

  662. # We don't enable bridges by default.

  663. matrix_go_skype_bridge_enabled: false

  664. 

  665. matrix_go_skype_bridge_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"

  666. 

  667. matrix_go_skype_bridge_systemd_required_services_list: |

  668.   {{

  669.     ['docker.service']

  670.     +

  671.     ['matrix-' + matrix_homeserver_implementation + '.service']

  672.     +

  673.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  674.     +

  675.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  676.   }}

  677. 

  678. matrix_go_skype_bridge_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'skype.as.token', rounds=655555) | to_uuid }}"

  679. 

  680. matrix_go_skype_bridge_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'skype.hs.token', rounds=655555) | to_uuid }}"

  681. 

  682. matrix_go_skype_bridge_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  683. 

  684. # Postgres is the default, except if not using internal Postgres server

  685. matrix_go_skype_bridge_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  686. matrix_go_skype_bridge_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  687. matrix_go_skype_bridge_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'goskype.db', rounds=655555) | to_uuid }}"

  688. 

  689. ######################################################################

  690. #

  691. # /matrix-bridge-go-skype-bridge

  692. #

  693. ######################################################################

  694. 

  695. 

  696. ######################################################################

  697. #

  698. # matrix-bridge-mautrix-discord

  699. #

  700. ######################################################################

  701. 

  702. # We don't enable bridges by default.

  703. matrix_mautrix_discord_enabled: false

  704. 

  705. matrix_mautrix_discord_container_image_self_build: "{{ matrix_architecture not in ['arm64', 'amd64'] }}"

  706. 

  707. matrix_mautrix_discord_systemd_required_services_list: |

  708.   {{

  709.     ['docker.service']

  710.     +

  711.     ['matrix-' + matrix_homeserver_implementation + '.service']

  712.     +

  713.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  714.     +

  715.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  716.   }}

  717. 

  718. matrix_mautrix_discord_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'maudisc.as.tok', rounds=655555) | to_uuid }}"

  719. 

  720. matrix_mautrix_discord_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'maudisc.hs.tok', rounds=655555) | to_uuid }}"

  721. 

  722. matrix_mautrix_discord_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  723. 

  724. # Postgres is the default, except if not using internal Postgres server

  725. matrix_mautrix_discord_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  726. matrix_mautrix_discord_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  727. matrix_mautrix_discord_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'maudiscord.db', rounds=655555) | to_uuid }}"

  728. 

  729. ######################################################################

  730. #

  731. # /matrix-bridge-mautrix-discord

  732. #

  733. ######################################################################

  734. 

  735. 

  736. ######################################################################

  737. #

  738. # matrix-bridge-mautrix-slack

  739. #

  740. ######################################################################

  741. 

  742. # We don't enable bridges by default.

  743. matrix_mautrix_slack_enabled: false

  744. 

  745. matrix_mautrix_slack_container_image_self_build: "{{ matrix_architecture not in ['arm64', 'amd64'] }}"

  746. 

  747. matrix_mautrix_slack_systemd_required_services_list: |

  748.   {{

  749.     ['docker.service']

  750.     +

  751.     ['matrix-' + matrix_homeserver_implementation + '.service']

  752.     +

  753.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  754.     +

  755.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  756.   }}

  757. 

  758. matrix_mautrix_slack_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mauslack.as.tok', rounds=655555) | to_uuid }}"

  759. 

  760. matrix_mautrix_slack_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mauslack.hs.tok', rounds=655555) | to_uuid }}"

  761. 

  762. matrix_mautrix_slack_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  763. 

  764. # Postgres is the default, except if not using internal Postgres server

  765. matrix_mautrix_slack_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  766. matrix_mautrix_slack_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  767. matrix_mautrix_slack_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mauslack.db', rounds=655555) | to_uuid }}"

  768. 

  769. ######################################################################

  770. #

  771. # /matrix-bridge-mautrix-slack

  772. #

  773. ######################################################################

  774. 

  775. 

  776. ######################################################################

  777. #

  778. # matrix-bridge-mautrix-facebook

  779. #

  780. ######################################################################

  781. 

  782. # We don't enable bridges by default.

  783. matrix_mautrix_facebook_enabled: false

  784. 

  785. matrix_mautrix_facebook_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"

  786. 

  787. matrix_mautrix_facebook_systemd_required_services_list: |

  788.   {{

  789.     ['docker.service']

  790.     +

  791.     ['matrix-' + matrix_homeserver_implementation + '.service']

  792.     +

  793.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  794.     +

  795.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  796.   }}

  797. 

  798. matrix_mautrix_facebook_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'fb.as.token', rounds=655555) | to_uuid }}"

  799. 

  800. matrix_mautrix_facebook_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'fb.hs.token', rounds=655555) | to_uuid }}"

  801. 

  802. matrix_mautrix_facebook_public_endpoint: "/{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'facebook', rounds=655555) | to_uuid }}"

  803. 

  804. matrix_mautrix_facebook_container_http_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else '127.0.0.1:9008' }}"

  805. 

  806. matrix_mautrix_facebook_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  807. 

  808. matrix_mautrix_facebook_bridge_presence: "{{ matrix_synapse_presence_enabled if matrix_synapse_enabled else true }}"

  809. 

  810. # We'd like to force-set people with external Postgres to SQLite, so the bridge role can complain

  811. # and point them to a migration path.

  812. matrix_mautrix_facebook_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  813. matrix_mautrix_facebook_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  814. matrix_mautrix_facebook_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mau.fb.db', rounds=655555) | to_uuid }}"

  815. 

  816. ######################################################################

  817. #

  818. # /matrix-bridge-mautrix-facebook

  819. #

  820. ######################################################################

  821. 

  822. 

  823. ######################################################################

  824. #

  825. # matrix-bridge-mautrix-googlechat

  826. #

  827. ######################################################################

  828. 

  829. # We don't enable bridges by default.

  830. matrix_mautrix_googlechat_enabled: false

  831. 

  832. matrix_mautrix_googlechat_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"

  833. 

  834. matrix_mautrix_googlechat_systemd_required_services_list: |

  835.   {{

  836.     ['docker.service']

  837.     +

  838.     ['matrix-' + matrix_homeserver_implementation + '.service']

  839.     +

  840.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  841.     +

  842.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  843.   }}

  844. 

  845. matrix_mautrix_googlechat_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'gc.as.token', rounds=655555) | to_uuid }}"

  846. 

  847. matrix_mautrix_googlechat_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'gc.hs.token', rounds=655555) | to_uuid }}"

  848. 

  849. matrix_mautrix_googlechat_container_http_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else '127.0.0.1:9007' }}"

  850. 

  851. matrix_mautrix_googlechat_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  852. 

  853. # Postgres is the default, except if not using internal Postgres server

  854. matrix_mautrix_googlechat_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  855. matrix_mautrix_googlechat_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  856. matrix_mautrix_googlechat_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mau.gc.db', rounds=655555) | to_uuid }}"

  857. 

  858. ######################################################################

  859. #

  860. # /matrix-bridge-mautrix-googlechat

  861. #

  862. ######################################################################

  863. 

  864. 

  865. ######################################################################

  866. #

  867. # matrix-bridge-mautrix-hangouts

  868. #

  869. ######################################################################

  870. 

  871. # We don't enable bridges by default.

  872. matrix_mautrix_hangouts_enabled: false

  873. 

  874. matrix_mautrix_hangouts_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"

  875. 

  876. matrix_mautrix_hangouts_systemd_required_services_list: |

  877.   {{

  878.     ['docker.service']

  879.     +

  880.     ['matrix-' + matrix_homeserver_implementation + '.service']

  881.     +

  882.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  883.     +

  884.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  885.   }}

  886. 

  887. matrix_mautrix_hangouts_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'ho.as.token', rounds=655555) | to_uuid }}"

  888. 

  889. matrix_mautrix_hangouts_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'ho.hs.token', rounds=655555) | to_uuid }}"

  890. 

  891. matrix_mautrix_hangouts_container_http_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else '127.0.0.1:9007' }}"

  892. 

  893. matrix_mautrix_hangouts_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  894. 

  895. # Postgres is the default, except if not using internal Postgres server

  896. matrix_mautrix_hangouts_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  897. matrix_mautrix_hangouts_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  898. matrix_mautrix_hangouts_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mau.hangouts.db', rounds=655555) | to_uuid }}"

  899. 

  900. ######################################################################

  901. #

  902. # /matrix-bridge-mautrix-hangouts

  903. #

  904. ######################################################################

  905. 

  906. 

  907. ######################################################################

  908. #

  909. # matrix-bridge-mautrix-instagram

  910. #

  911. ######################################################################

  912. 

  913. # We don't enable bridges by default.

  914. matrix_mautrix_instagram_enabled: false

  915. 

  916. matrix_mautrix_instagram_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"

  917. 

  918. matrix_mautrix_instagram_systemd_required_services_list: |

  919.   {{

  920.     ['docker.service']

  921.     +

  922.     ['matrix-' + matrix_homeserver_implementation + '.service']

  923.     +

  924.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  925.     +

  926.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  927.   }}

  928. 

  929. matrix_mautrix_instagram_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'ig.as.token', rounds=655555) | to_uuid }}"

  930. 

  931. matrix_mautrix_instagram_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'ig.hs.token', rounds=655555) | to_uuid }}"

  932. 

  933. matrix_mautrix_instagram_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  934. 

  935. matrix_mautrix_instagram_bridge_presence: "{{ matrix_synapse_presence_enabled if matrix_synapse_enabled else true }}"

  936. 

  937. # We'd like to force-set people with external Postgres to SQLite, so the bridge role can complain

  938. # and point them to a migration path.

  939. matrix_mautrix_instagram_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  940. matrix_mautrix_instagram_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  941. matrix_mautrix_instagram_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mau.ig.db', rounds=655555) | to_uuid }}"

  942. 

  943. ######################################################################

  944. #

  945. # /matrix-bridge-mautrix-instagram

  946. #

  947. ######################################################################

  948. 

  949. 

  950. ######################################################################

  951. #

  952. # matrix-bridge-mautrix-signal

  953. #

  954. ######################################################################

  955. 

  956. # We don't enable bridges by default.

  957. matrix_mautrix_signal_enabled: false

  958. 

  959. matrix_mautrix_signal_systemd_required_services_list: |

  960.   {{

  961.     ['docker.service']

  962.     +

  963.     ['matrix-' + matrix_homeserver_implementation + '.service']

  964.     +

  965.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  966.     +

  967.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  968.     +

  969.     ['matrix-mautrix-signal-daemon.service']

  970.   }}

  971. 

  972. matrix_mautrix_signal_homeserver_domain: '{{ matrix_domain }}'

  973. 

  974. matrix_mautrix_signal_homeserver_address: "{{ matrix_homeserver_container_url }}"

  975. 

  976. matrix_mautrix_signal_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'si.hs.token', rounds=655555) | to_uuid }}"

  977. 

  978. matrix_mautrix_signal_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'si.as.token', rounds=655555) | to_uuid }}"

  979. 

  980. matrix_mautrix_signal_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  981. 

  982. matrix_mautrix_signal_database_engine: 'postgres'

  983. matrix_mautrix_signal_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  984. matrix_mautrix_signal_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mau.signal.db', rounds=655555) | to_uuid }}"

  985. 

  986. matrix_mautrix_signal_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"

  987. matrix_mautrix_signal_daemon_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"

  988. 

  989. ######################################################################

  990. #

  991. # /matrix-bridge-mautrix-signal

  992. #

  993. ######################################################################

  994. 

  995. ######################################################################

  996. #

  997. # matrix-bridge-mautrix-telegram

  998. #

  999. ######################################################################

  1000. 

  1001. # We don't enable bridges by default.

  1002. matrix_mautrix_telegram_enabled: false

  1003. 

  1004. # Images are multi-arch (amd64 and arm64, but not arm32).

  1005. matrix_mautrix_telegram_container_image_self_build: "{{ matrix_architecture not in ['arm64', 'amd64'] }}"

  1006. matrix_telegram_lottieconverter_container_image_self_build: "{{ matrix_architecture not in ['arm64', 'amd64'] }}"

  1007. matrix_telegram_lottieconverter_container_image_self_build_mask_arch: "{{ matrix_architecture != 'amd64' }}"

  1008. 

  1009. matrix_mautrix_telegram_systemd_required_services_list: |

  1010.   {{

  1011.     ['docker.service']

  1012.     +

  1013.     ['matrix-' + matrix_homeserver_implementation + '.service']

  1014.     +

  1015.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  1016.     +

  1017.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1018.   }}

  1019. 

  1020. matrix_mautrix_telegram_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'telegr.as.token', rounds=655555) | to_uuid }}"

  1021. 

  1022. matrix_mautrix_telegram_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'telegr.hs.token', rounds=655555) | to_uuid }}"

  1023. 

  1024. matrix_mautrix_telegram_public_endpoint: "/{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'telegram', rounds=655555) | to_uuid }}"

  1025. 

  1026. matrix_mautrix_telegram_container_http_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else '127.0.0.1:9006' }}"

  1027. 

  1028. matrix_mautrix_telegram_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  1029. 

  1030. # Postgres is the default, except if not using internal Postgres server

  1031. matrix_mautrix_telegram_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  1032. matrix_mautrix_telegram_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1033. matrix_mautrix_telegram_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mau.telegram.db', rounds=655555) | to_uuid }}"

  1034. 

  1035. ######################################################################

  1036. #

  1037. # /matrix-bridge-mautrix-telegram

  1038. #

  1039. ######################################################################

  1040. 

  1041. ######################################################################

  1042. #

  1043. # matrix-bridge-mautrix-twitter

  1044. #

  1045. ######################################################################

  1046. 

  1047. # We don't enable bridges by default.

  1048. matrix_mautrix_twitter_enabled: false

  1049. 

  1050. matrix_mautrix_twitter_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"

  1051. 

  1052. matrix_mautrix_twitter_systemd_required_services_list: |

  1053.   {{

  1054.     ['docker.service']

  1055.     +

  1056.     ['matrix-' + matrix_homeserver_implementation + '.service']

  1057.     +

  1058.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  1059.     +

  1060.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1061.   }}

  1062. 

  1063. matrix_mautrix_twitter_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'twt.as.token', rounds=655555) | to_uuid }}"

  1064. 

  1065. matrix_mautrix_twitter_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'twt.hs.token', rounds=655555) | to_uuid }}"

  1066. 

  1067. matrix_mautrix_twitter_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  1068. 

  1069. matrix_mautrix_twitter_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1070. matrix_mautrix_twitter_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mau.twt.db', rounds=655555) | to_uuid if devture_postgres_enabled else '' }}"

  1071. 

  1072. ######################################################################

  1073. #

  1074. # /matrix-bridge-mautrix-twitter

  1075. #

  1076. ######################################################################

  1077. 

  1078. ######################################################################

  1079. #

  1080. # matrix-bridge-mautrix-whatsapp

  1081. #

  1082. ######################################################################

  1083. 

  1084. # We don't enable bridges by default.

  1085. matrix_mautrix_whatsapp_enabled: false

  1086. 

  1087. matrix_mautrix_whatsapp_container_image_self_build: "{{ matrix_architecture not in ['arm64', 'amd64'] }}"

  1088. 

  1089. matrix_mautrix_whatsapp_systemd_required_services_list: |

  1090.   {{

  1091.     ['docker.service']

  1092.     +

  1093.     ['matrix-' + matrix_homeserver_implementation + '.service']

  1094.     +

  1095.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  1096.     +

  1097.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1098.   }}

  1099. 

  1100. matrix_mautrix_whatsapp_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'whats.as.token', rounds=655555) | to_uuid }}"

  1101. 

  1102. matrix_mautrix_whatsapp_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'whats.hs.token', rounds=655555) | to_uuid }}"

  1103. 

  1104. matrix_mautrix_whatsapp_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  1105. 

  1106. # Postgres is the default, except if not using internal Postgres server

  1107. matrix_mautrix_whatsapp_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  1108. matrix_mautrix_whatsapp_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1109. matrix_mautrix_whatsapp_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mauwhatsapp.db', rounds=655555) | to_uuid }}"

  1110. 

  1111. ######################################################################

  1112. #

  1113. # /matrix-bridge-mautrix-whatsapp

  1114. #

  1115. ######################################################################

  1116. 

  1117. ######################################################################

  1118. #

  1119. # matrix-sms-bridge

  1120. #

  1121. ######################################################################

  1122. 

  1123. # We don't enable bridges by default.

  1124. matrix_sms_bridge_enabled: false

  1125. 

  1126. matrix_sms_bridge_systemd_required_services_list: |

  1127.   {{

  1128.     ['docker.service']

  1129.     +

  1130.     ['matrix-' + matrix_homeserver_implementation + '.service']

  1131.     +

  1132.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1133.   }}

  1134. 

  1135. matrix_sms_bridge_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'sms.as.token', rounds=655555) | to_uuid }}"

  1136. 

  1137. matrix_sms_bridge_homeserver_port: "{{ matrix_synapse_container_client_api_port }}"

  1138. matrix_sms_bridge_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'sms.hs.token', rounds=655555) | to_uuid }}"

  1139. 

  1140. ######################################################################

  1141. #

  1142. # /matrix-sms-bridge

  1143. #

  1144. ######################################################################

  1145. 

  1146. ######################################################################

  1147. #

  1148. # matrix-bridge-heisenbridge

  1149. #

  1150. ######################################################################

  1151. 

  1152. # We don't enable bridges by default.

  1153. matrix_heisenbridge_enabled: false

  1154. 

  1155. matrix_heisenbridge_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'heisen.as.tok', rounds=655555) | to_uuid }}"

  1156. 

  1157. matrix_heisenbridge_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'heisen.hs.tok', rounds=655555) | to_uuid }}"

  1158. 

  1159. matrix_heisenbridge_systemd_wanted_services_list: |

  1160.   {{

  1161.     ['matrix-' + matrix_homeserver_implementation + '.service']

  1162.     +

  1163.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1164.   }}

  1165. 

  1166. ######################################################################

  1167. #

  1168. # /matrix-bridge-heisenbridge

  1169. #

  1170. ######################################################################

  1171. 

  1172. ######################################################################

  1173. #

  1174. # matrix-bridge-hookshot

  1175. #

  1176. ######################################################################

  1177. 

  1178. # We don't enable bridges by default.

  1179. matrix_hookshot_enabled: false

  1180. 

  1181. matrix_hookshot_container_image_self_build: "{{ matrix_architecture not in ['arm64', 'amd64'] }}"

  1182. 

  1183. matrix_hookshot_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'hookshot.as.tok', rounds=655555) | to_uuid }}"

  1184. 

  1185. matrix_hookshot_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'hookshot.hs.tok', rounds=655555) | to_uuid }}"

  1186. 

  1187. matrix_hookshot_systemd_wanted_services_list: |

  1188.   {{

  1189.     (['matrix-' + matrix_homeserver_implementation + '.service'])

  1190.     +

  1191.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1192.   }}

  1193. 

  1194. matrix_hookshot_container_http_host_bind_ports_defaultmapping:

  1195.   - "127.0.0.1:{{ matrix_hookshot_appservice_port }}:{{ matrix_hookshot_appservice_port }}"

  1196.   - "127.0.0.1:{{ matrix_hookshot_metrics_port }}:{{ matrix_hookshot_metrics_port }}"

  1197.   - "127.0.0.1:{{ matrix_hookshot_webhook_port }}:{{ matrix_hookshot_webhook_port }}"

  1198.   - "127.0.0.1:{{ matrix_hookshot_provisioning_port }}:{{ matrix_hookshot_provisioning_port }}"

  1199. 

  1200. matrix_hookshot_container_http_host_bind_ports: "{{ [] if matrix_nginx_proxy_enabled else matrix_hookshot_container_http_host_bind_ports_defaultmapping }}"

  1201. 

  1202. matrix_hookshot_provisioning_enabled: "{{ matrix_hookshot_provisioning_secret and matrix_dimension_enabled }}"

  1203. 

  1204. # We only enable metrics (locally, in the container network) for the bridge if Prometheus is enabled.

  1205. #

  1206. # People using an external Prometheus server will need to toggle all of these to be able to consume metrics remotely:

  1207. # - `matrix_hookshot_metrics_enabled`

  1208. # - `matrix_hookshot_metrics_proxying_enabled`

  1209. # - `matrix_nginx_proxy_proxy_matrix_metrics_enabled`

  1210. matrix_hookshot_metrics_enabled: "{{ matrix_prometheus_enabled }}"

  1211. 

  1212. matrix_hookshot_urlprefix_port_enabled: "{{ matrix_nginx_proxy_container_https_host_bind_port == 443 if matrix_nginx_proxy_https_enabled else matrix_nginx_proxy_container_https_host_bind_port == 80 }}"

  1213. matrix_hookshot_urlprefix_port: ":{{ matrix_nginx_proxy_container_https_host_bind_port if matrix_nginx_proxy_https_enabled else matrix_nginx_proxy_container_http_host_bind_port }}"

  1214. matrix_hookshot_urlprefix: "http{{ 's' if matrix_nginx_proxy_https_enabled else '' }}://{{ matrix_server_fqn_matrix }}{{ matrix_hookshot_urlprefix_port if matrix_hookshot_urlprefix_port_enabled else '' }}"

  1215. 

  1216. ######################################################################

  1217. #

  1218. # /matrix-bridge-hookshot

  1219. #

  1220. ######################################################################

  1221. 

  1222. 

  1223. ######################################################################

  1224. #

  1225. # matrix-bridge-mx-puppet-slack

  1226. #

  1227. ######################################################################

  1228. 

  1229. # We don't enable bridges by default.

  1230. matrix_mx_puppet_slack_enabled: false

  1231. 

  1232. matrix_mx_puppet_slack_container_image_self_build: "{{ matrix_architecture != 'amd64' }}"

  1233. 

  1234. matrix_mx_puppet_slack_systemd_required_services_list: |

  1235.   {{

  1236.     ['docker.service']

  1237.     +

  1238.     ['matrix-' + matrix_homeserver_implementation + '.service']

  1239.     +

  1240.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  1241.     +

  1242.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1243.   }}

  1244. 

  1245. matrix_mx_puppet_slack_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxslk.as.tok', rounds=655555) | to_uuid }}"

  1246. 

  1247. matrix_mx_puppet_slack_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxslk.hs.tok', rounds=655555) | to_uuid }}"

  1248. 

  1249. matrix_mx_puppet_slack_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  1250. 

  1251. # Postgres is the default, except if not using internal Postgres server

  1252. matrix_mx_puppet_slack_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  1253. matrix_mx_puppet_slack_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1254. matrix_mx_puppet_slack_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxpup.slack.db', rounds=655555) | to_uuid }}"

  1255. 

  1256. ######################################################################

  1257. #

  1258. # /matrix-bridge-mx-puppet-slack

  1259. #

  1260. ######################################################################

  1261. 

  1262. ######################################################################

  1263. #

  1264. # matrix-bridge-mx-puppet-twitter

  1265. #

  1266. ######################################################################

  1267. 

  1268. # We don't enable bridges by default.

  1269. matrix_mx_puppet_twitter_enabled: false

  1270. 

  1271. matrix_mx_puppet_twitter_container_image_self_build: "{{ matrix_architecture != 'amd64' }}"

  1272. 

  1273. matrix_mx_puppet_twitter_systemd_required_services_list: |

  1274.   {{

  1275.     ['docker.service']

  1276.     +

  1277.     ['matrix-' + matrix_homeserver_implementation + '.service']

  1278.     +

  1279.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  1280.     +

  1281.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1282.   }}

  1283. 

  1284. matrix_mx_puppet_twitter_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxtwt.as.tok', rounds=655555) | to_uuid }}"

  1285. 

  1286. matrix_mx_puppet_twitter_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxtwt.hs.tok', rounds=655555) | to_uuid }}"

  1287. 

  1288. matrix_mx_puppet_twitter_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  1289. 

  1290. matrix_mx_puppet_twitter_container_http_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else ('127.0.0.1:' ~ matrix_mx_puppet_twitter_appservice_port) }}"

  1291. 

  1292. # Postgres is the default, except if not using internal Postgres server

  1293. matrix_mx_puppet_twitter_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  1294. matrix_mx_puppet_twitter_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1295. matrix_mx_puppet_twitter_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxpup.twitter.db', rounds=655555) | to_uuid }}"

  1296. 

  1297. ######################################################################

  1298. #

  1299. # /matrix-bridge-mx-puppet-twitter

  1300. #

  1301. ######################################################################

  1302. 

  1303. 

  1304. ######################################################################

  1305. #

  1306. # matrix-bridge-mx-puppet-instagram

  1307. #

  1308. ######################################################################

  1309. 

  1310. # We don't enable bridges by default.

  1311. matrix_mx_puppet_instagram_enabled: false

  1312. 

  1313. matrix_mx_puppet_instagram_container_image_self_build: "{{ matrix_architecture != 'amd64' }}"

  1314. 

  1315. matrix_mx_puppet_instagram_systemd_required_services_list: |

  1316.   {{

  1317.     ['docker.service']

  1318.     +

  1319.     ['matrix-' + matrix_homeserver_implementation + '.service']

  1320.     +

  1321.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  1322.     +

  1323.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1324.   }}

  1325. 

  1326. matrix_mx_puppet_instagram_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxig.as.tok', rounds=655555) | to_uuid }}"

  1327. 

  1328. matrix_mx_puppet_instagram_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxig.hs.tok', rounds=655555) | to_uuid }}"

  1329. 

  1330. matrix_mx_puppet_instagram_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  1331. 

  1332. # Postgres is the default, except if not using internal Postgres server

  1333. matrix_mx_puppet_instagram_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  1334. matrix_mx_puppet_instagram_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1335. matrix_mx_puppet_instagram_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxpup.ig.db', rounds=655555) | to_uuid }}"

  1336. 

  1337. ######################################################################

  1338. #

  1339. # /matrix-bridge-mx-puppet-instagram

  1340. #

  1341. ######################################################################

  1342. 

  1343. ######################################################################

  1344. #

  1345. # matrix-bridge-mx-puppet-discord

  1346. #

  1347. ######################################################################

  1348. 

  1349. # We don't enable bridges by default.

  1350. matrix_mx_puppet_discord_enabled: false

  1351. 

  1352. matrix_mx_puppet_discord_container_image_self_build: "{{ matrix_architecture != 'amd64' }}"

  1353. 

  1354. matrix_mx_puppet_discord_systemd_required_services_list: |

  1355.   {{

  1356.     ['docker.service']

  1357.     +

  1358.     ['matrix-' + matrix_homeserver_implementation + '.service']

  1359.     +

  1360.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  1361.     +

  1362.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1363.   }}

  1364. 

  1365. matrix_mx_puppet_discord_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxdsc.as.tok', rounds=655555) | to_uuid }}"

  1366. 

  1367. matrix_mx_puppet_discord_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxdsc.hs.tok', rounds=655555) | to_uuid }}"

  1368. 

  1369. matrix_mx_puppet_discord_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  1370. 

  1371. # Postgres is the default, except if not using internal Postgres server

  1372. matrix_mx_puppet_discord_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  1373. matrix_mx_puppet_discord_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1374. matrix_mx_puppet_discord_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxpup.dsc.db', rounds=655555) | to_uuid }}"

  1375. 

  1376. ######################################################################

  1377. #

  1378. # /matrix-bridge-mx-puppet-discord

  1379. #

  1380. ######################################################################

  1381. 

  1382. ######################################################################

  1383. #

  1384. # matrix-bridge-mx-puppet-steam

  1385. #

  1386. ######################################################################

  1387. 

  1388. # We don't enable bridges by default.

  1389. matrix_mx_puppet_steam_enabled: false

  1390. 

  1391. matrix_mx_puppet_steam_container_image_self_build: "{{ matrix_architecture not in ['arm64', 'amd64'] }}"

  1392. 

  1393. matrix_mx_puppet_steam_systemd_required_services_list: |

  1394.   {{

  1395.     ['docker.service']

  1396.     +

  1397.     ['matrix-' + matrix_homeserver_implementation + '.service']

  1398.     +

  1399.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  1400.     +

  1401.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1402.   }}

  1403. 

  1404. matrix_mx_puppet_steam_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxste.as.tok', rounds=655555) | to_uuid }}"

  1405. 

  1406. matrix_mx_puppet_steam_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxste.hs.tok', rounds=655555) | to_uuid }}"

  1407. 

  1408. matrix_mx_puppet_steam_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  1409. 

  1410. # Postgres is the default, except if not using internal Postgres server

  1411. matrix_mx_puppet_steam_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  1412. matrix_mx_puppet_steam_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1413. matrix_mx_puppet_steam_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxpup.steam.db', rounds=655555) | to_uuid }}"

  1414. 

  1415. ######################################################################

  1416. #

  1417. # /matrix-bridge-mx-puppet-steam

  1418. #

  1419. ######################################################################

  1420. 

  1421. ######################################################################

  1422. #

  1423. # matrix-bridge-mx-puppet-groupme

  1424. #

  1425. ######################################################################

  1426. 

  1427. # We don't enable bridges by default.

  1428. matrix_mx_puppet_groupme_enabled: false

  1429. 

  1430. matrix_mx_puppet_groupme_container_image_self_build: "{{ matrix_architecture != 'amd64' }}"

  1431. 

  1432. matrix_mx_puppet_groupme_systemd_required_services_list: |

  1433.   {{

  1434.     ['docker.service']

  1435.     +

  1436.     ['matrix-' + matrix_homeserver_implementation + '.service']

  1437.     +

  1438.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  1439.     +

  1440.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1441.   }}

  1442. 

  1443. matrix_mx_puppet_groupme_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxgro.as.tok', rounds=655555) | to_uuid }}"

  1444. 

  1445. matrix_mx_puppet_groupme_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxgro.hs.tok', rounds=655555) | to_uuid }}"

  1446. 

  1447. matrix_mx_puppet_groupme_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  1448. 

  1449. # Postgres is the default, except if not using internal Postgres server

  1450. matrix_mx_puppet_groupme_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  1451. matrix_mx_puppet_groupme_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1452. matrix_mx_puppet_groupme_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxpup.groupme.db', rounds=655555) | to_uuid }}"

  1453. 

  1454. ######################################################################

  1455. #

  1456. # /matrix-bridge-mx-puppet-groupme

  1457. #

  1458. ######################################################################

  1459. 

  1460. ######################################################################

  1461. #

  1462. # matrix-bot-matrix-reminder-bot

  1463. #

  1464. ######################################################################

  1465. 

  1466. # We don't enable bots by default.

  1467. matrix_bot_matrix_reminder_bot_enabled: false

  1468. 

  1469. matrix_bot_matrix_reminder_bot_systemd_required_services_list: |

  1470.   {{

  1471.     ['docker.service']

  1472.     +

  1473.     ['matrix-' + matrix_homeserver_implementation + '.service']

  1474.     +

  1475.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  1476.     +

  1477.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1478.   }}

  1479. 

  1480. # Postgres is the default, except if not using internal Postgres server

  1481. matrix_bot_matrix_reminder_bot_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  1482. matrix_bot_matrix_reminder_bot_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1483. matrix_bot_matrix_reminder_bot_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'reminder.bot.db', rounds=655555) | to_uuid }}"

  1484. matrix_bot_matrix_reminder_bot_container_image_self_build: "{{ matrix_architecture != 'amd64' }}"

  1485. 

  1486. ######################################################################

  1487. #

  1488. # /matrix-bot-matrix-reminder-bot

  1489. #

  1490. ######################################################################

  1491. 

  1492. 

  1493. ######################################################################

  1494. #

  1495. # matrix-bot-matrix-registration-bot

  1496. #

  1497. ######################################################################

  1498. 

  1499. # We don't enable bots by default.

  1500. matrix_bot_matrix_registration_bot_enabled: false

  1501. 

  1502. matrix_bot_matrix_registration_bot_container_image_self_build: "{{ matrix_architecture not in ['amd64'] }}"

  1503. 

  1504. matrix_bot_matrix_registration_bot_systemd_required_services_list: |

  1505.   {{

  1506.     ['docker.service']

  1507.     +

  1508.     ['matrix-' + matrix_homeserver_implementation + '.service']

  1509.     +

  1510.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1511.   }}

  1512. 

  1513. 

  1514. ######################################################################

  1515. #

  1516. # /matrix-bot-matrix-registration-bot

  1517. #

  1518. ######################################################################

  1519. 

  1520. ######################################################################

  1521. #

  1522. # matrix-bot-maubot

  1523. #

  1524. ######################################################################

  1525. 

  1526. # We don't enable bots by default.

  1527. matrix_bot_maubot_enabled: false

  1528. 

  1529. matrix_bot_maubot_container_image_self_build: "{{ matrix_architecture not in ['amd64'] }}"

  1530. 

  1531. matrix_bot_maubot_systemd_required_services_list: |

  1532.   {{

  1533.     ['docker.service']

  1534.     +

  1535.     ['matrix-' + matrix_homeserver_implementation + '.service']

  1536.     +

  1537.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  1538.     +

  1539.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1540.   }}

  1541. 

  1542. matrix_bot_maubot_registration_shared_secret: |-

  1543.   {{

  1544.     {

  1545.       'synapse': matrix_synapse_registration_shared_secret,

  1546.       'dendrite': matrix_dendrite_client_api_registration_shared_secret,

  1547.     }[matrix_homeserver_implementation]

  1548.   }}

  1549. 

  1550. matrix_bot_maubot_management_interface_http_bind_port: "{{ '' if matrix_nginx_proxy_enabled else ('127.0.0.1:' + matrix_bot_maubot_management_interface_port | string) }}"

  1551. 

  1552. # Postgres is the default, except if not using internal Postgres server

  1553. matrix_bot_maubot_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  1554. matrix_bot_maubot_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1555. matrix_bot_maubot_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxpup.dsc.db', rounds=655555) | to_uuid }}"

  1556. 

  1557. ######################################################################

  1558. #

  1559. # /matrix-bot-maubot

  1560. #

  1561. ######################################################################

  1562. 

  1563. 

  1564. ######################################################################

  1565. #

  1566. # matrix-bot-honoroit

  1567. #

  1568. ######################################################################

  1569. 

  1570. # We don't enable bots by default.

  1571. matrix_bot_honoroit_enabled: false

  1572. 

  1573. matrix_bot_honoroit_systemd_required_services_list: |

  1574.   {{

  1575.     ['docker.service']

  1576.     +

  1577.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  1578.     +

  1579.     (['matrix-synapse.service'] if matrix_synapse_enabled else [])

  1580.     +

  1581.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1582.   }}

  1583. 

  1584. # Postgres is the default, except if not using internal Postgres server

  1585. matrix_bot_honoroit_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  1586. matrix_bot_honoroit_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1587. matrix_bot_honoroit_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'honoroit.bot.db', rounds=655555) | to_uuid }}"

  1588. matrix_bot_honoroit_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"

  1589. 

  1590. ######################################################################

  1591. #

  1592. # /matrix-bot-honoroit

  1593. #

  1594. ######################################################################

  1595. 

  1596. ######################################################################

  1597. #

  1598. # matrix-bot-buscarron

  1599. #

  1600. ######################################################################

  1601. 

  1602. # We don't enable bots by default.

  1603. matrix_bot_buscarron_enabled: false

  1604. 

  1605. matrix_bot_buscarron_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"

  1606. 

  1607. matrix_bot_buscarron_systemd_required_services_list: |

  1608.   {{

  1609.     ['docker.service']

  1610.     +

  1611.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  1612.     +

  1613.     (['matrix-synapse.service'] if matrix_synapse_enabled else [])

  1614.     +

  1615.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1616.   }}

  1617. 

  1618. # Postgres is the default, except if not using internal Postgres server

  1619. matrix_bot_buscarron_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  1620. matrix_bot_buscarron_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1621. matrix_bot_buscarron_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'buscarron.bot.db', rounds=655555) | to_uuid }}"

  1622. 

  1623. ######################################################################

  1624. #

  1625. # /matrix-bot-buscarron

  1626. #

  1627. ######################################################################

  1628. 

  1629. ######################################################################

  1630. #

  1631. # matrix-bot-postmoogle

  1632. #

  1633. ######################################################################

  1634. 

  1635. # We don't enable bots by default.

  1636. matrix_bot_postmoogle_enabled: false

  1637. 

  1638. matrix_bot_postmoogle_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"

  1639. 

  1640. matrix_bot_postmoogle_ssl_path: "{{ matrix_ssl_config_dir_path }}"

  1641. matrix_bot_postmoogle_tls_cert: "{% for domain in matrix_bot_postmoogle_domains %}/ssl/live/{{ domain }}/fullchain.pem {% endfor %}"

  1642. matrix_bot_postmoogle_tls_key: "{% for domain in matrix_bot_postmoogle_domains %}/ssl/live/{{ domain }}/privkey.pem {% endfor %}"

  1643. 

  1644. matrix_bot_postmoogle_systemd_required_services_list: |

  1645.   {{

  1646.     ['docker.service']

  1647.     +

  1648.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  1649.     +

  1650.     (['matrix-synapse.service'] if matrix_synapse_enabled else [])

  1651.   }}

  1652. 

  1653. # Postgres is the default, except if not using internal Postgres server

  1654. matrix_bot_postmoogle_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  1655. matrix_bot_postmoogle_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1656. matrix_bot_postmoogle_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'postmoogle.db', rounds=655555) | to_uuid }}"

  1657. 

  1658. ######################################################################

  1659. #

  1660. # /matrix-bot-postmoogle

  1661. #

  1662. ######################################################################

  1663. 

  1664. 

  1665. ######################################################################

  1666. #

  1667. # matrix-bot-chatgpt

  1668. #

  1669. ######################################################################

  1670. 

  1671. # We don't enable bots by default.

  1672. matrix_bot_chatgpt_enabled: false

  1673. 

  1674. matrix_bot_chatgpt_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"

  1675. 

  1676. ######################################################################

  1677. #

  1678. # /matrix-bot-chatgpt

  1679. #

  1680. ######################################################################

  1681. 

  1682. 

  1683. ######################################################################

  1684. #

  1685. # matrix-bot-go-neb

  1686. #

  1687. ######################################################################

  1688. 

  1689. # We don't enable bots by default.

  1690. matrix_bot_go_neb_enabled: false

  1691. 

  1692. matrix_bot_go_neb_systemd_required_services_list: |

  1693.   {{

  1694.     ['docker.service']

  1695.     +

  1696.     ['matrix-' + matrix_homeserver_implementation + '.service']

  1697.     +

  1698.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1699.   }}

  1700. 

  1701. matrix_bot_go_neb_container_http_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else '127.0.0.1:4050' }}"

  1702. 

  1703. ######################################################################

  1704. #

  1705. # /matrix-bot-go-neb

  1706. #

  1707. ######################################################################

  1708. 

  1709. 

  1710. ######################################################################

  1711. #

  1712. # matrix-bot-mjolnir

  1713. #

  1714. ######################################################################

  1715. 

  1716. # We don't enable bots by default.

  1717. matrix_bot_mjolnir_enabled: false

  1718. 

  1719. matrix_bot_mjolnir_container_image_self_build: "{{ matrix_architecture != 'amd64' }}"

  1720. 

  1721. matrix_bot_mjolnir_systemd_required_services_list: |

  1722.   {{

  1723.     ['docker.service']

  1724.     +

  1725.     ['matrix-' + matrix_homeserver_implementation + '.service']

  1726.     +

  1727.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  1728.     +

  1729.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1730.   }}

  1731. 

  1732. ######################################################################

  1733. #

  1734. # /matrix-bot-mjolnir

  1735. #

  1736. ######################################################################

  1737. 

  1738. ######################################################################

  1739. #

  1740. # matrix-backup-borg

  1741. #

  1742. ######################################################################

  1743. 

  1744. matrix_backup_borg_enabled: false

  1745. 

  1746. matrix_backup_borg_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm32', 'arm64'] }}"

  1747. 

  1748. matrix_backup_borg_postgresql_enabled: "{{ devture_postgres_enabled }}"

  1749. matrix_backup_borg_postgresql_databases_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1750. matrix_backup_borg_postgresql_databases_username: "{{ devture_postgres_connection_username if devture_postgres_enabled else '' }}"

  1751. matrix_backup_borg_postgresql_databases_password: "{{ devture_postgres_connection_password if devture_postgres_enabled else '' }}"

  1752. matrix_backup_borg_postgresql_databases_port: "{{ devture_postgres_connection_port if devture_postgres_enabled else 5432 }}"

  1753. matrix_backup_borg_postgresql_databases: "{{ devture_postgres_managed_databases | map(attribute='name') if devture_postgres_enabled else [] }}"

  1754. 

  1755. matrix_backup_borg_location_source_directories:

  1756.   - "{{ matrix_base_data_path }}"

  1757. 

  1758. matrix_backup_borg_location_exclude_patterns: |

  1759.   {{

  1760.     ([matrix_synapse_media_store_path + '/local_thumbnails', matrix_synapse_media_store_path + '/remote_thumbnail', matrix_synapse_media_store_path + '/url_cache', matrix_synapse_media_store_path + '/url_cache_thumbnails'] if matrix_homeserver_implementation == 'synapse' else [])

  1761.     +

  1762.     ([devture_postgres_data_path] if devture_postgres_enabled else [])

  1763.   }}

  1764. 

  1765. matrix_backup_borg_systemd_required_services_list: |

  1766.   {{

  1767.     ['docker.service']

  1768.     +

  1769.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  1770.   }}

  1771. 

  1772. ######################################################################

  1773. #

  1774. # /matrix-backup-borg

  1775. #

  1776. ######################################################################

  1777. ######################################################################

  1778. #

  1779. # matrix-cactus-comments

  1780. #

  1781. ######################################################################

  1782. 

  1783. matrix_cactus_comments_enabled: false

  1784. 

  1785. # Derive secret values from homeserver secret

  1786. matrix_cactus_comments_as_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'cactus.as.token', rounds=655555) | to_uuid }}"

  1787. matrix_cactus_comments_hs_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'cactus.hs.token', rounds=655555) | to_uuid }}"

  1788. 

  1789. matrix_cactus_comments_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm32', 'arm64'] }}"

  1790. matrix_cactus_comments_systemd_required_services_list: |

  1791.   {{

  1792.     (['docker.service'])

  1793.     +

  1794.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1795.     +

  1796.     (['matrix-' + matrix_homeserver_implementation + '.service'])

  1797.   }}

  1798. 

  1799. matrix_cactus_comments_client_nginx_path: "{{ '/cactus-comments/' if matrix_nginx_proxy_enabled else matrix_cactus_comments_client_path + '/' }}"

  1800. 

  1801. ######################################################################

  1802. #

  1803. # /matrix-cactus-comments

  1804. #

  1805. ######################################################################

  1806. 

  1807. ######################################################################

  1808. #

  1809. # matrix-corporal

  1810. #

  1811. ######################################################################

  1812. 

  1813. matrix_corporal_enabled: false

  1814. 

  1815. matrix_corporal_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm32', 'arm64'] }}"

  1816. 

  1817. # Normally, matrix-nginx-proxy is enabled and nginx can reach matrix-corporal over the container network.

  1818. # If matrix-nginx-proxy is not enabled, or you otherwise have a need for it, you can expose

  1819. # matrix-corporal's web-server ports to the local host.

  1820. matrix_corporal_container_http_gateway_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else '127.0.0.1:41080' }}"

  1821. matrix_corporal_container_http_api_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else '127.0.0.1:41081' }}"

  1822. 

  1823. matrix_corporal_systemd_required_services_list: |

  1824.   {{

  1825.     (['docker.service'])

  1826.     +

  1827.     (['matrix-' + matrix_homeserver_implementation + '.service'])

  1828.   }}

  1829. 

  1830. matrix_corporal_matrix_homeserver_api_endpoint: "{{ matrix_homeserver_container_url }}"

  1831. 

  1832. matrix_corporal_matrix_auth_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret }}"

  1833. 

  1834. # This is only useful if there's REST auth provider to make use of it.

  1835. matrix_corporal_http_gateway_internal_rest_auth_enabled: "{{ matrix_synapse_ext_password_provider_rest_auth_enabled }}"

  1836. 

  1837. matrix_corporal_matrix_registration_shared_secret: "{{ matrix_synapse_registration_shared_secret }}"

  1838. 

  1839. ######################################################################

  1840. #

  1841. # /matrix-corporal

  1842. #

  1843. ######################################################################

  1844. 

  1845. ######################################################################

  1846. #

  1847. # matrix-coturn

  1848. #

  1849. ######################################################################

  1850. 

  1851. matrix_coturn_enabled: true

  1852. 

  1853. matrix_coturn_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm32', 'arm64'] }}"

  1854. 

  1855. matrix_coturn_turn_external_ip_address: "{{ ansible_host }}"

  1856. 

  1857. matrix_coturn_turn_static_auth_secret: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'coturn.sas', rounds=655555) | to_uuid }}"

  1858. 

  1859. matrix_coturn_tls_enabled: "{{ matrix_ssl_retrieval_method != 'none' }}"

  1860. matrix_coturn_tls_cert_path: "{{ matrix_ssl_config_dir_path }}/live/{{ matrix_server_fqn_matrix }}/fullchain.pem"

  1861. matrix_coturn_tls_key_path: "{{ matrix_ssl_config_dir_path }}/live/{{ matrix_server_fqn_matrix }}/privkey.pem"

  1862. matrix_coturn_container_additional_volumes: |

  1863.   {{

  1864.     ([] if matrix_ssl_retrieval_method == 'none' else [

  1865.         {

  1866.             'src': matrix_ssl_config_dir_path,

  1867.             'dst': matrix_ssl_config_dir_path,

  1868.             'options': 'ro',

  1869.         }

  1870.     ])

  1871.   }}

  1872. 

  1873. ######################################################################

  1874. #

  1875. # /matrix-coturn

  1876. #

  1877. ######################################################################

  1878. 

  1879. ######################################################################

  1880. #

  1881. # matrix-dimension

  1882. #

  1883. ######################################################################

  1884. 

  1885. matrix_dimension_enabled: false

  1886. 

  1887. matrix_dimension_container_image_self_build: "{{ matrix_architecture != 'amd64' }}"

  1888. 

  1889. # Normally, matrix-nginx-proxy is enabled and nginx can reach Dimension over the container network.

  1890. # If matrix-nginx-proxy is not enabled, or you otherwise have a need for it, you can expose

  1891. # the Dimension HTTP port to the local host.

  1892. matrix_dimension_container_http_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else '127.0.0.1:8184' }}"

  1893. 

  1894. matrix_dimension_homeserver_federationUrl: "{{ matrix_homeserver_container_federation_url }}"

  1895. 

  1896. matrix_dimension_systemd_required_services_list: |

  1897.   {{

  1898.     ['docker.service']

  1899.     +

  1900.     ['matrix-' + matrix_homeserver_implementation + '.service']

  1901.     +

  1902.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  1903.     +

  1904.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1905.   }}

  1906. 

  1907. # Postgres is the default, except if not using internal Postgres server

  1908. matrix_dimension_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  1909. matrix_dimension_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1910. matrix_dimension_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'dimension.db', rounds=655555) | to_uuid }}"

  1911. 

  1912. ######################################################################

  1913. #

  1914. # /matrix-dimension

  1915. #

  1916. ######################################################################

  1917. 

  1918. ######################################################################

  1919. #

  1920. # matrix-etherpad

  1921. #

  1922. ######################################################################

  1923. 

  1924. matrix_etherpad_enabled: false

  1925. 

  1926. matrix_etherpad_container_http_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else '127.0.0.1:9001' }}"

  1927. 

  1928. matrix_etherpad_base_url: "{{ 'https://' + matrix_server_fqn_dimension + matrix_etherpad_public_endpoint if matrix_etherpad_mode == 'dimension' else 'https://' + matrix_server_fqn_etherpad + '/' }}"

  1929. 

  1930. matrix_etherpad_systemd_required_services_list: |

  1931.   {{

  1932.     ['docker.service']

  1933.     +

  1934.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  1935.   }}

  1936. 

  1937. matrix_etherpad_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1938. matrix_etherpad_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'etherpad.db', rounds=655555) | to_uuid }}"

  1939. 

  1940. ######################################################################

  1941. #

  1942. # /matrix-etherpad

  1943. #

  1944. ######################################################################

  1945. 

  1946. ######################################################################

  1947. #

  1948. # matrix-dynamic-dns

  1949. #

  1950. ######################################################################

  1951. 

  1952. matrix_dynamic_dns_enabled: false

  1953. 

  1954. ######################################################################

  1955. #

  1956. # /matrix-dynamic-dns

  1957. #

  1958. ######################################################################

  1959. 

  1960. ######################################################################

  1961. #

  1962. # matrix-email2matrix

  1963. #

  1964. ######################################################################

  1965. 

  1966. matrix_email2matrix_enabled: false

  1967. 

  1968. matrix_email2matrix_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm32', 'arm64'] }}"

  1969. 

  1970. ######################################################################

  1971. #

  1972. # /matrix-email2matrix

  1973. #

  1974. ######################################################################

  1975. 

  1976. ######################################################################

  1977. #

  1978. # matrix-jitsi

  1979. #

  1980. ######################################################################

  1981. 

  1982. matrix_jitsi_enabled: false

  1983. 

  1984. # Normally, matrix-nginx-proxy is enabled and nginx can reach jitsi/web over the container network.

  1985. # If matrix-nginx-proxy is not enabled, or you otherwise have a need for it, you can expose

  1986. # the Jitsi HTTP port to the local host.

  1987. matrix_jitsi_web_container_http_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else '127.0.0.1:13080' }}"

  1988. 

  1989. matrix_jitsi_jvb_container_colibri_ws_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else '127.0.0.1:13090' }}"

  1990. 

  1991. matrix_jitsi_prosody_container_http_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else '127.0.0.1:5280' }}"

  1992. 

  1993. matrix_jitsi_jibri_xmpp_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'jibri', rounds=655555) | to_uuid }}"

  1994. matrix_jitsi_jicofo_auth_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'jicofo', rounds=655555) | to_uuid }}"

  1995. matrix_jitsi_jvb_auth_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'jvb', rounds=655555) | to_uuid }}"

  1996. 

  1997. matrix_jitsi_web_stun_servers: |

  1998.   {{

  1999.     [

  2000.       'stun:' + matrix_server_fqn_matrix + ':5349',

  2001.       'stun:' + matrix_server_fqn_matrix + ':3478',

  2002.     ]

  2003.     if matrix_coturn_enabled

  2004.     else [ 'stun:meet-jit-si-turnrelay.jitsi.net:443']

  2005.   }}

  2006. 

  2007. # If the self-hosted Etherpad instance is available, it will also show up in Jitsi conferences,

  2008. # unless explicitly disabled by setting `matrix_jitsi_etherpad_enabled` to false.

  2009. # Falls back to the scalar.vector.im etherpad in case someone sets `matrix_jitsi_etherpad_enabled` to true,

  2010. # while also setting `matrix_etherpad_enabled` to false.

  2011. matrix_jitsi_etherpad_enabled: "{{ matrix_etherpad_enabled }}"

  2012. matrix_jitsi_etherpad_base: "{{ matrix_etherpad_base_url if matrix_etherpad_enabled else 'https://scalar.vector.im/etherpad' }}"

  2013. 

  2014. ######################################################################

  2015. #

  2016. # /matrix-jitsi

  2017. #

  2018. ######################################################################

  2019. ######################################################################

  2020. #

  2021. # matrix-ldap-registration-proxy

  2022. #

  2023. ######################################################################

  2024. 

  2025. # This is only for users with a specific LDAP setup

  2026. matrix_ldap_registration_proxy_enabled: false

  2027. 

  2028. ######################################################################

  2029. #

  2030. # /matrix-ldap-registration-proxy

  2031. #

  2032. ######################################################################

  2033. 

  2034. ######################################################################

  2035. #

  2036. # matrix-mailer

  2037. #

  2038. ######################################################################

  2039. 

  2040. # By default, this playbook sets up an exim mailer server (running in a container).

  2041. # This is so that Synapse can send email reminders for unread messages.

  2042. # Other services (like ma1sd), also use the mailer.

  2043. matrix_mailer_enabled: true

  2044. 

  2045. matrix_mailer_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm32', 'arm64'] }}"

  2046. 

  2047. ######################################################################

  2048. #

  2049. # /matrix-mailer

  2050. #

  2051. ######################################################################

  2052. 

  2053. ######################################################################

  2054. #

  2055. # matrix-ma1sd

  2056. #

  2057. ######################################################################

  2058. 

  2059. # We no longer install the ma1sd identity server by default.

  2060. #

  2061. # The main reason we used to install ma1sd by default in the past was to

  2062. # prevent Element from talking to the `matrix.org` / `vector.im` identity servers,

  2063. # by forcing it to talk to our own self-hosted (but otherwise useless) identity server instead,

  2064. # thus preventing contact list leaks.

  2065. #

  2066. # Since Element no longer defaults to using a public identity server if another one is not provided,

  2067. # we can stop installing ma1sd.

  2068. matrix_ma1sd_enabled: false

  2069. 

  2070. matrix_ma1sd_container_image_self_build: "{{ matrix_architecture != 'amd64' }}"

  2071. 

  2072. # Normally, matrix-nginx-proxy is enabled and nginx can reach ma1sd over the container network.

  2073. # If matrix-nginx-proxy is not enabled, or you otherwise have a need for it, you can expose

  2074. # ma1sd's web-server port.

  2075. matrix_ma1sd_container_http_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else '127.0.0.1:' + matrix_ma1sd_container_port | string }}"

  2076. 

  2077. 

  2078. # We enable Synapse integration via its Postgres database by default.

  2079. # When using another Identity store, you might wish to disable this and define

  2080. # your own configuration in `matrix_ma1sd_configuration_extension_yaml`.

  2081. matrix_ma1sd_synapsesql_enabled: true

  2082. matrix_ma1sd_synapsesql_type: postgresql

  2083. matrix_ma1sd_synapsesql_connection: //{{ matrix_synapse_database_host }}/{{ matrix_synapse_database_database }}?user={{ matrix_synapse_database_user | urlencode() }}&password={{ matrix_synapse_database_password | urlencode() }}

  2084. 

  2085. matrix_ma1sd_dns_overwrite_enabled: true

  2086. matrix_ma1sd_dns_overwrite_homeserver_client_name: "{{ matrix_server_fqn_matrix }}"

  2087. # The `matrix_ma1sd_dns_overwrite_homeserver_client_value` value when matrix_nginx_proxy_enabled is false covers the general case,

  2088. # but may be inaccurate if matrix-corporal is enabled.

  2089. matrix_ma1sd_dns_overwrite_homeserver_client_value: "{{ ('http://' + matrix_nginx_proxy_proxy_matrix_client_api_addr_with_container) if matrix_nginx_proxy_enabled else matrix_homeserver_container_url }}"

  2090. 

  2091. # By default, we send mail through the `matrix-mailer` service.

  2092. matrix_ma1sd_threepid_medium_email_identity_from: "{{ matrix_mailer_sender_address }}"

  2093. matrix_ma1sd_threepid_medium_email_connectors_smtp_host: "matrix-mailer"

  2094. matrix_ma1sd_threepid_medium_email_connectors_smtp_port: 8025

  2095. matrix_ma1sd_threepid_medium_email_connectors_smtp_tls: 0

  2096. 

  2097. matrix_ma1sd_self_check_validate_certificates: "{{ false if matrix_ssl_retrieval_method == 'self-signed' else true }}"

  2098. 

  2099. matrix_ma1sd_systemd_required_services_list: |

  2100.   {{

  2101.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  2102.   }}

  2103. 

  2104. matrix_ma1sd_systemd_wanted_services_list: |

  2105.   {{

  2106.     (['matrix-corporal.service'] if matrix_corporal_enabled else ['matrix-' + matrix_homeserver_implementation + '.service'])

  2107.     +

  2108.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  2109.     +

  2110.     (['matrix-mailer.service'] if matrix_mailer_enabled else [])

  2111.   }}

  2112. 

  2113. # Postgres is the default, except if not using internal Postgres server

  2114. matrix_ma1sd_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  2115. matrix_ma1sd_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  2116. matrix_ma1sd_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'ma1sd.db', rounds=655555) | to_uuid }}"

  2117. 

  2118. ######################################################################

  2119. #

  2120. # /matrix-ma1sd

  2121. #

  2122. ######################################################################

  2123. 

  2124. 

  2125. ######################################################################

  2126. #

  2127. # matrix-nginx-proxy

  2128. #

  2129. ######################################################################

  2130. 

  2131. # By default, this playbook sets up a reverse-proxy nginx proxy server on TCP ports 80, 443 and 8448.

  2132. # This is fine if you're dedicating the whole server to Matrix.

  2133. # If that's not the case, you may wish to disable this and take care of proxying yourself.

  2134. matrix_nginx_proxy_enabled: true

  2135. 

  2136. matrix_nginx_proxy_proxy_matrix_client_api_addr_with_container: "{{ 'matrix-corporal:41080' if matrix_corporal_enabled else 'matrix-nginx-proxy:12080' }}"

  2137. matrix_nginx_proxy_proxy_matrix_client_api_addr_sans_container: "{{ '127.0.0.1:41080' if matrix_corporal_enabled else '127.0.0.1:12080' }}"

  2138. matrix_nginx_proxy_proxy_matrix_client_api_client_max_body_size_mb: |-

  2139.   {{

  2140.     {

  2141.       'synapse': matrix_synapse_max_upload_size_mb,

  2142.       'dendrite': (matrix_dendrite_max_file_size_bytes / 1024 / 1024) | round,

  2143.       'conduit': (matrix_conduit_max_request_size / 1024 / 1024) | round,

  2144.     }[matrix_homeserver_implementation]|int

  2145.   }}

  2146. 

  2147. matrix_nginx_proxy_proxy_matrix_client_api_forwarded_location_synapse_admin_api_enabled: "{{ matrix_synapse_admin_enabled or matrix_bot_matrix_registration_bot_enabled }}"

  2148. 

  2149. matrix_nginx_proxy_proxy_matrix_client_redirect_root_uri_to_domain: "{{ matrix_server_fqn_element if matrix_client_element_enabled else '' }}"

  2150. 

  2151. matrix_nginx_proxy_proxy_matrix_enabled: true

  2152. matrix_nginx_proxy_proxy_element_enabled: "{{ matrix_client_element_enabled }}"

  2153. matrix_nginx_proxy_proxy_hydrogen_enabled: "{{ matrix_client_hydrogen_enabled }}"

  2154. matrix_nginx_proxy_proxy_cinny_enabled: "{{ matrix_client_cinny_enabled }}"

  2155. matrix_nginx_proxy_proxy_buscarron_enabled: "{{ matrix_bot_buscarron_enabled }}"

  2156. matrix_nginx_proxy_proxy_dimension_enabled: "{{ matrix_dimension_enabled }}"

  2157. matrix_nginx_proxy_proxy_etherpad_enabled: "{{ matrix_etherpad_enabled and matrix_etherpad_mode == 'standalone' }}"

  2158. matrix_nginx_proxy_proxy_bot_go_neb_enabled: "{{ matrix_bot_go_neb_enabled }}"

  2159. matrix_nginx_proxy_proxy_jitsi_enabled: "{{ matrix_jitsi_enabled }}"

  2160. matrix_nginx_proxy_proxy_grafana_enabled: "{{ matrix_grafana_enabled }}"

  2161. matrix_nginx_proxy_proxy_sygnal_enabled: "{{ matrix_sygnal_enabled }}"

  2162. matrix_nginx_proxy_proxy_ntfy_enabled: "{{ matrix_ntfy_enabled }}"

  2163. 

  2164. matrix_nginx_proxy_proxy_matrix_corporal_api_enabled: "{{ matrix_corporal_enabled and matrix_corporal_http_api_enabled }}"

  2165. matrix_nginx_proxy_proxy_matrix_corporal_api_addr_with_container: "matrix-corporal:41081"

  2166. matrix_nginx_proxy_proxy_matrix_corporal_api_addr_sans_container: "127.0.0.1:41081"

  2167. 

  2168. matrix_nginx_proxy_proxy_matrix_identity_api_enabled: "{{ matrix_ma1sd_enabled }}"

  2169. matrix_nginx_proxy_proxy_matrix_identity_api_addr_with_container: "matrix-ma1sd:{{ matrix_ma1sd_container_port }}"

  2170. matrix_nginx_proxy_proxy_matrix_identity_api_addr_sans_container: "127.0.0.1:{{ matrix_ma1sd_container_port }}"

  2171. 

  2172. # By default, we do TLS termination for the Matrix Federation API (port 8448) at matrix-nginx-proxy.

  2173. # Unless this is handled there OR Synapse's federation listener port is disabled, we'll reverse-proxy.

  2174. matrix_nginx_proxy_proxy_matrix_federation_api_enabled: |-

  2175.   {{

  2176.     {

  2177.       'synapse': (matrix_synapse_federation_port_enabled and not matrix_synapse_tls_federation_listener_enabled),

  2178.       'dendrite': matrix_dendrite_federation_enabled,

  2179.       'conduit': matrix_conduit_allow_federation,

  2180.     }[matrix_homeserver_implementation]|bool

  2181.   }}

  2182. 

  2183. matrix_nginx_proxy_proxy_matrix_federation_api_addr_with_container: "matrix-nginx-proxy:12088"

  2184. matrix_nginx_proxy_proxy_matrix_federation_api_addr_sans_container: "127.0.0.1:12088"

  2185. 

  2186. matrix_nginx_proxy_proxy_synapse_enabled: "{{ matrix_synapse_enabled }}"

  2187. matrix_nginx_proxy_proxy_synapse_client_api_addr_with_container: "{{ 'matrix-synapse-reverse-proxy-companion:8008' if matrix_synapse_reverse_proxy_companion_enabled else 'matrix-synapse:8008' }}"

  2188. matrix_nginx_proxy_proxy_synapse_client_api_addr_sans_container: "127.0.0.1:8008"

  2189. matrix_nginx_proxy_proxy_synapse_federation_api_addr_with_container: "{{ 'matrix-synapse-reverse-proxy-companion:8048' if matrix_synapse_reverse_proxy_companion_enabled else 'matrix-synapse:8048' }}"

  2190. matrix_nginx_proxy_proxy_synapse_federation_api_addr_sans_container: "127.0.0.1:8048"

  2191. 

  2192. matrix_nginx_proxy_proxy_dendrite_enabled: "{{ matrix_dendrite_enabled }}"

  2193. matrix_nginx_proxy_proxy_dendrite_client_api_addr_with_container: "matrix-dendrite:{{ matrix_dendrite_http_bind_port | string }}"

  2194. matrix_nginx_proxy_proxy_dendrite_client_api_addr_sans_container: "127.0.0.1:{{ matrix_dendrite_http_bind_port | string }}"

  2195. matrix_nginx_proxy_proxy_dendrite_federation_api_addr_with_container: "matrix-dendrite:{{ matrix_dendrite_http_bind_port | string }}"

  2196. matrix_nginx_proxy_proxy_dendrite_federation_api_addr_sans_container: "127.0.0.1:{{ matrix_dendrite_http_bind_port | string }}"

  2197. 

  2198. matrix_nginx_proxy_proxy_conduit_enabled: "{{ matrix_conduit_enabled }}"

  2199. matrix_nginx_proxy_proxy_conduit_client_api_addr_with_container: "matrix-conduit:{{ matrix_conduit_port_number|string }}"

  2200. matrix_nginx_proxy_proxy_conduit_client_api_addr_sans_container: "127.0.0.1:{{ matrix_conduit_port_number|string }}"

  2201. matrix_nginx_proxy_proxy_conduit_federation_api_addr_with_container: "matrix-conduit:{{ matrix_conduit_port_number|string }}"

  2202. matrix_nginx_proxy_proxy_conduit_federation_api_addr_sans_container: "127.0.0.1:{{ matrix_conduit_port_number|string }}"

  2203. 

  2204. # When matrix-nginx-proxy is disabled, the actual port number that the vhost uses may begin to matter.

  2205. matrix_nginx_proxy_proxy_matrix_federation_port: "{{ matrix_federation_public_port }}"

  2206. 

  2207. matrix_nginx_proxy_container_federation_host_bind_port: "{{ matrix_federation_public_port }}"

  2208. 

  2209. matrix_nginx_proxy_proxy_matrix_user_directory_search_enabled: "{{ matrix_ma1sd_enabled }}"

  2210. matrix_nginx_proxy_proxy_matrix_user_directory_search_addr_with_container: "{{ matrix_nginx_proxy_proxy_matrix_identity_api_addr_with_container }}"

  2211. matrix_nginx_proxy_proxy_matrix_user_directory_search_addr_sans_container: "{{ matrix_nginx_proxy_proxy_matrix_identity_api_addr_sans_container }}"

  2212. 

  2213. matrix_nginx_proxy_self_check_validate_certificates: "{{ false if matrix_ssl_retrieval_method == 'self-signed' else true }}"

  2214. 

  2215. # OCSP stapling does not make sense when self-signed certificates are used.

  2216. # See https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1073

  2217. # and https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1074

  2218. matrix_nginx_proxy_ocsp_stapling_enabled: "{{ matrix_ssl_retrieval_method != 'self-signed' }}"

  2219. 

  2220. matrix_nginx_proxy_systemd_wanted_services_list: |

  2221.   {{

  2222.     ['matrix-' + matrix_homeserver_implementation + '.service']

  2223.     +

  2224.     (matrix_synapse_webserving_workers_systemd_services_list if matrix_homeserver_implementation == 'synapse' and matrix_synapse_workers_enabled else [])

  2225.     +

  2226.     (['matrix-synapse-reverse-proxy-companion.service'] if matrix_synapse_reverse_proxy_companion_enabled else [])

  2227.     +

  2228.     (['matrix-corporal.service'] if matrix_corporal_enabled else [])

  2229.     +

  2230.     (['matrix-ma1sd.service'] if matrix_ma1sd_enabled else [])

  2231.     +

  2232.     (['matrix-client-cinny.service'] if matrix_client_cinny_enabled else [])

  2233.     +

  2234.     (['matrix-bot-buscarron.service'] if matrix_bot_buscarron_enabled else [])

  2235.     +

  2236.     (['matrix-client-element.service'] if matrix_client_element_enabled else [])

  2237.     +

  2238.     (['matrix-client-hydrogen.service'] if matrix_client_hydrogen_enabled else [])

  2239.     +

  2240.     (['matrix-grafana.service'] if matrix_grafana_enabled else [])

  2241.     +

  2242.     (['matrix-dimension.service'] if matrix_dimension_enabled else [])

  2243.     +

  2244.     (['matrix-sygnal.service'] if matrix_sygnal_enabled else [])

  2245.     +

  2246.     (['matrix-ntfy.service'] if matrix_ntfy_enabled else [])

  2247.     +

  2248.     (['matrix-jitsi.service'] if matrix_jitsi_enabled else [])

  2249.     +

  2250.     (['matrix-bot-go-neb.service'] if matrix_bot_go_neb_enabled else [])

  2251.     +

  2252.     (['matrix-etherpad.service'] if matrix_etherpad_enabled else [])

  2253.     +

  2254.     (['matrix-hookshot.service'] if matrix_hookshot_enabled else [])

  2255.   }}

  2256. 

  2257. matrix_ssl_domains_to_obtain_certificates_for: |

  2258.   {{

  2259.     ([matrix_server_fqn_matrix])

  2260.     +

  2261.     ([matrix_server_fqn_element] if matrix_client_element_enabled else [])

  2262.     +

  2263.     ([matrix_nginx_proxy_proxy_riot_compat_redirect_hostname] if matrix_nginx_proxy_proxy_riot_compat_redirect_enabled else [])

  2264.     +

  2265.     ([matrix_server_fqn_hydrogen] if matrix_client_hydrogen_enabled else [])

  2266.     +

  2267.     ([matrix_server_fqn_cinny] if matrix_client_cinny_enabled else [])

  2268.     +

  2269.     ([matrix_server_fqn_buscarron] if matrix_bot_buscarron_enabled else [])

  2270.     +

  2271.     ([matrix_server_fqn_dimension] if matrix_dimension_enabled else [])

  2272.     +

  2273.     ([matrix_server_fqn_etherpad] if (matrix_etherpad_enabled and matrix_etherpad_mode == 'standalone') else [])

  2274.     +

  2275.     ([matrix_server_fqn_bot_go_neb] if matrix_bot_go_neb_enabled else [])

  2276.     +

  2277.     ([matrix_server_fqn_jitsi] if matrix_jitsi_enabled else [])

  2278.     +

  2279.     ([matrix_server_fqn_grafana] if matrix_grafana_enabled else [])

  2280.     +

  2281.     ([matrix_server_fqn_sygnal] if matrix_sygnal_enabled else [])

  2282.     +

  2283.     ([matrix_server_fqn_ntfy] if matrix_ntfy_enabled else [])

  2284.     +

  2285.     ([matrix_bot_postmoogle_domain] if matrix_bot_postmoogle_enabled else [])

  2286.     +

  2287.     ([matrix_domain] if matrix_nginx_proxy_base_domain_serving_enabled else [])

  2288.     +

  2289.     matrix_ssl_additional_domains_to_obtain_certificates_for

  2290.   }}

  2291. 

  2292. matrix_ssl_architecture: "{{

  2293. 	{

  2294. 		'amd64': 'amd64',

  2295. 		'arm32': 'arm32v6',

  2296. 		'arm64': 'arm64v8',

  2297. 	}[matrix_architecture]

  2298. }}"

  2299. 

  2300. matrix_ssl_pre_obtaining_required_service_name: "{{ 'matrix-dynamic-dns' if matrix_dynamic_dns_enabled else '' }}"

  2301. 

  2302. matrix_nginx_proxy_access_log_syslog_integration_enabled: "{{ matrix_prometheus_nginxlog_exporter_enabled }}"

  2303. matrix_nginx_proxy_access_log_syslog_integration_server_port: "{{ (matrix_prometheus_nginxlog_exporter_container_hostname | string +':'+ matrix_prometheus_nginxlog_exporter_container_syslog_port | string) | default('') }}"

  2304. 

  2305. ######################################################################

  2306. #

  2307. # /matrix-nginx-proxy

  2308. #

  2309. ######################################################################

  2310. 

  2311. 

  2312. ########################################################################

  2313. #                                                                      #

  2314. # com.devture.ansible.role.postgres                                    #

  2315. #                                                                      #

  2316. ########################################################################

  2317. 

  2318. # To completely disable installing Postgres, use `devture_postgres_enabled: false`.

  2319. 

  2320. devture_postgres_identifier: matrix-postgres

  2321. 

  2322. devture_postgres_architecture: "{{ matrix_architecture }}"

  2323. 

  2324. devture_postgres_base_path: "{{ matrix_base_data_path }}/postgres"

  2325. 

  2326. devture_postgres_container_network: "{{ matrix_docker_network }}"

  2327. 

  2328. devture_postgres_uid: "{{ matrix_user_uid }}"

  2329. devture_postgres_gid: "{{ matrix_user_gid }}"

  2330. 

  2331. devture_postgres_connection_username: matrix

  2332. devture_postgres_db_name: matrix

  2333. 

  2334. devture_postgres_systemd_services_to_stop_for_maintenance_list: |

  2335.   {{

  2336.     ['matrix-' + matrix_homeserver_implementation + '.service']

  2337.   }}

  2338. 

  2339. devture_postgres_managed_databases_auto: |

  2340.   {{

  2341.     ([{

  2342.       'name': matrix_synapse_database_database,

  2343.       'username': matrix_synapse_database_user,

  2344.       'password': matrix_synapse_database_password,

  2345.     }] if (matrix_synapse_enabled and matrix_synapse_database_host == devture_postgres_connection_hostname) else [])

  2346.     +

  2347.     ([{

  2348.       'name': matrix_dendrite_federationapi_database,

  2349.       'username': matrix_dendrite_database_user,

  2350.       'password': matrix_dendrite_database_password,

  2351.     },{

  2352.       'name': matrix_dendrite_keyserver_database,

  2353.       'username': matrix_dendrite_database_user,

  2354.       'password': matrix_dendrite_database_password,

  2355.     },{

  2356.       'name': matrix_dendrite_mediaapi_database,

  2357.       'username': matrix_dendrite_database_user,

  2358.       'password': matrix_dendrite_database_password,

  2359.     },{

  2360.       'name': matrix_dendrite_room_database,

  2361.       'username': matrix_dendrite_database_user,

  2362.       'password': matrix_dendrite_database_password,

  2363.     },{

  2364.       'name': matrix_dendrite_syncapi_database,

  2365.       'username': matrix_dendrite_database_user,

  2366.       'password': matrix_dendrite_database_password,

  2367.     },{

  2368.       'name': matrix_dendrite_userapi_database,

  2369.       'username': matrix_dendrite_database_user,

  2370.       'password': matrix_dendrite_database_password,

  2371.     },{

  2372.       'name': matrix_dendrite_pushserver_database,

  2373.       'username': matrix_dendrite_database_user,

  2374.       'password': matrix_dendrite_database_password,

  2375.     },{

  2376.       'name': matrix_dendrite_mscs_database,

  2377.       'username': matrix_dendrite_database_user,

  2378.       'password': matrix_dendrite_database_password,

  2379.     }] if (matrix_dendrite_enabled and matrix_dendrite_database_hostname == devture_postgres_connection_hostname) else [])

  2380.     +

  2381.     ([{

  2382.       'name': matrix_ma1sd_database_name,

  2383.       'username': matrix_ma1sd_database_username,

  2384.       'password': matrix_ma1sd_database_password,

  2385.     }] if (matrix_ma1sd_enabled and matrix_ma1sd_database_engine == 'postgres' and matrix_ma1sd_database_hostname == devture_postgres_connection_hostname) else [])

  2386.     +

  2387.     ([{

  2388.       'name': matrix_bot_matrix_reminder_bot_database_name,

  2389.       'username': matrix_bot_matrix_reminder_bot_database_username,

  2390.       'password': matrix_bot_matrix_reminder_bot_database_password,

  2391.     }] if (matrix_bot_matrix_reminder_bot_enabled and matrix_bot_matrix_reminder_bot_database_engine == 'postgres' and matrix_bot_matrix_reminder_bot_database_hostname == devture_postgres_connection_hostname) else [])

  2392.     +

  2393.     ([{

  2394.       'name': matrix_bot_honoroit_database_name,

  2395.       'username': matrix_bot_honoroit_database_username,

  2396.       'password': matrix_bot_honoroit_database_password,

  2397.     }] if (matrix_bot_honoroit_enabled and matrix_bot_honoroit_database_engine == 'postgres' and matrix_bot_honoroit_database_hostname == devture_postgres_connection_hostname) else [])

  2398.     +

  2399.     ([{

  2400.       'name': matrix_bot_postmoogle_database_name,

  2401.       'username': matrix_bot_postmoogle_database_username,

  2402.       'password': matrix_bot_postmoogle_database_password,

  2403.     }] if (matrix_bot_postmoogle_enabled and matrix_bot_postmoogle_database_engine == 'postgres' and matrix_bot_postmoogle_database_hostname == devture_postgres_connection_hostname) else [])

  2404.     +

  2405.     ([{

  2406.       'name': matrix_bot_maubot_database_name,

  2407.       'username': matrix_bot_maubot_database_username,

  2408.       'password': matrix_bot_maubot_database_password,

  2409.     }] if (matrix_bot_maubot_enabled  and matrix_bot_maubot_database_engine == 'postgres' and matrix_bot_maubot_database_hostname == devture_postgres_connection_hostname) else [])

  2410.     +

  2411.     ([{

  2412.       'name': matrix_bot_buscarron_database_name,

  2413.       'username': matrix_bot_buscarron_database_username,

  2414.       'password': matrix_bot_buscarron_database_password,

  2415.     }] if (matrix_bot_buscarron_enabled and matrix_bot_buscarron_database_engine == 'postgres' and matrix_bot_buscarron_database_hostname == devture_postgres_connection_hostname) else [])

  2416.     +

  2417.     ([{

  2418.       'name': matrix_registration_database_name,

  2419.       'username': matrix_registration_database_username,

  2420.       'password': matrix_registration_database_password,

  2421.     }] if (matrix_registration_enabled and matrix_registration_database_engine == 'postgres' and matrix_registration_database_hostname == devture_postgres_connection_hostname) else [])

  2422.     +

  2423.     ([{

  2424.       'name': matrix_appservice_discord_database_name,

  2425.       'username': matrix_appservice_discord_database_username,

  2426.       'password': matrix_appservice_discord_database_password,

  2427.     }] if (matrix_appservice_discord_enabled and matrix_appservice_discord_database_engine == 'postgres' and matrix_appservice_discord_database_hostname == devture_postgres_connection_hostname) else [])

  2428.     +

  2429.     ([{

  2430.       'name': matrix_appservice_slack_database_name,

  2431.       'username': matrix_appservice_slack_database_username,

  2432.       'password': matrix_appservice_slack_database_password,

  2433.     }] if (matrix_appservice_slack_enabled and matrix_appservice_slack_database_engine == 'postgres' and matrix_appservice_slack_database_hostname == devture_postgres_connection_hostname) else [])

  2434.     +

  2435.     ([{

  2436.       'name': matrix_appservice_irc_database_name,

  2437.       'username': matrix_appservice_irc_database_username,

  2438.       'password': matrix_appservice_irc_database_password,

  2439.     }] if (matrix_appservice_irc_enabled and matrix_appservice_irc_database_engine == 'postgres' and matrix_appservice_irc_database_hostname == devture_postgres_connection_hostname) else [])

  2440.     +

  2441.     ([{

  2442.       'name': matrix_appservice_kakaotalk_database_name,

  2443.       'username': matrix_appservice_kakaotalk_database_username,

  2444.       'password': matrix_appservice_kakaotalk_database_password,

  2445.     }] if (matrix_appservice_kakaotalk_enabled and matrix_appservice_kakaotalk_database_engine == 'postgres' and matrix_appservice_kakaotalk_database_hostname == devture_postgres_connection_hostname) else [])

  2446.     +

  2447.     ([{

  2448.       'name': matrix_beeper_linkedin_database_name,

  2449.       'username': matrix_beeper_linkedin_database_username,

  2450.       'password': matrix_beeper_linkedin_database_password,

  2451.     }] if (matrix_beeper_linkedin_enabled and matrix_beeper_linkedin_database_engine == 'postgres' and matrix_beeper_linkedin_database_hostname == devture_postgres_connection_hostname) else [])

  2452.     +

  2453.     ([{

  2454.       'name': matrix_go_skype_bridge_database_name,

  2455.       'username': matrix_go_skype_bridge_database_username,

  2456.       'password': matrix_go_skype_bridge_database_password,

  2457.     }] if (matrix_go_skype_bridge_enabled and matrix_go_skype_bridge_database_engine == 'postgres' and matrix_go_skype_bridge_database_hostname == devture_postgres_connection_hostname) else [])

  2458.     +

  2459.     ([{

  2460.       'name': matrix_mautrix_facebook_database_name,

  2461.       'username': matrix_mautrix_facebook_database_username,

  2462.       'password': matrix_mautrix_facebook_database_password,

  2463.     }] if (matrix_mautrix_facebook_enabled and matrix_mautrix_facebook_database_engine == 'postgres' and matrix_mautrix_facebook_database_hostname == devture_postgres_connection_hostname) else [])

  2464.     +

  2465.     ([{

  2466.       'name': matrix_mautrix_hangouts_database_name,

  2467.       'username': matrix_mautrix_hangouts_database_username,

  2468.       'password': matrix_mautrix_hangouts_database_password,

  2469.     }] if (matrix_mautrix_hangouts_enabled and matrix_mautrix_hangouts_database_engine == 'postgres' and matrix_mautrix_hangouts_database_hostname == devture_postgres_connection_hostname) else [])

  2470.     +

  2471.     ([{

  2472.       'name': matrix_mautrix_googlechat_database_name,

  2473.       'username': matrix_mautrix_googlechat_database_username,

  2474.       'password': matrix_mautrix_googlechat_database_password,

  2475.     }] if (matrix_mautrix_googlechat_enabled and matrix_mautrix_googlechat_database_engine == 'postgres' and matrix_mautrix_googlechat_database_hostname == devture_postgres_connection_hostname) else [])

  2476.     +

  2477.     ([{

  2478.       'name': matrix_mautrix_instagram_database_name,

  2479.       'username': matrix_mautrix_instagram_database_username,

  2480.       'password': matrix_mautrix_instagram_database_password,

  2481.     }] if (matrix_mautrix_instagram_enabled and matrix_mautrix_instagram_database_engine == 'postgres' and matrix_mautrix_instagram_database_hostname == devture_postgres_connection_hostname) else [])

  2482.     +

  2483.     ([{

  2484.       'name': matrix_mautrix_signal_database_name,

  2485.       'username': matrix_mautrix_signal_database_username,

  2486.       'password': matrix_mautrix_signal_database_password,

  2487.     }] if (matrix_mautrix_signal_enabled and matrix_mautrix_signal_database_engine == 'postgres' and matrix_mautrix_signal_database_hostname == devture_postgres_connection_hostname) else [])

  2488.     +

  2489.     ([{

  2490.       'name': matrix_mautrix_telegram_database_name,

  2491.       'username': matrix_mautrix_telegram_database_username,

  2492.       'password': matrix_mautrix_telegram_database_password,

  2493.     }] if (matrix_mautrix_telegram_enabled and matrix_mautrix_telegram_database_engine == 'postgres' and matrix_mautrix_telegram_database_hostname == devture_postgres_connection_hostname) else [])

  2494.     +

  2495.     ([{

  2496.       'name': matrix_mautrix_twitter_database_name,

  2497.       'username': matrix_mautrix_twitter_database_username,

  2498.       'password': matrix_mautrix_twitter_database_password,

  2499.     }] if (matrix_mautrix_twitter_enabled and matrix_mautrix_twitter_database_engine == 'postgres' and matrix_mautrix_twitter_database_hostname == devture_postgres_connection_hostname) else [])

  2500.     +

  2501.     ([{

  2502.       'name': matrix_mautrix_whatsapp_database_name,

  2503.       'username': matrix_mautrix_whatsapp_database_username,

  2504.       'password': matrix_mautrix_whatsapp_database_password,

  2505.     }] if (matrix_mautrix_whatsapp_enabled and matrix_mautrix_whatsapp_database_engine == 'postgres' and matrix_mautrix_whatsapp_database_hostname == devture_postgres_connection_hostname) else [])

  2506.     +

  2507.     ([{

  2508.       'name': matrix_mautrix_discord_database_name,

  2509.       'username': matrix_mautrix_discord_database_username,

  2510.       'password': matrix_mautrix_discord_database_password,

  2511.     }] if (matrix_mautrix_discord_enabled and matrix_mautrix_discord_database_engine == 'postgres' and matrix_mautrix_discord_database_hostname == devture_postgres_connection_hostname) else [])

  2512.     +

  2513.     ([{

  2514.       'name': matrix_mautrix_slack_database_name,

  2515.       'username': matrix_mautrix_slack_database_username,

  2516.       'password': matrix_mautrix_slack_database_password,

  2517.     }] if (matrix_mautrix_slack_enabled and matrix_mautrix_slack_database_engine == 'postgres' and matrix_mautrix_slack_database_hostname == devture_postgres_connection_hostname) else [])

  2518.     +

  2519.     ([{

  2520.       'name': matrix_mx_puppet_slack_database_name,

  2521.       'username': matrix_mx_puppet_slack_database_username,

  2522.       'password': matrix_mx_puppet_slack_database_password,

  2523.     }] if (matrix_mx_puppet_slack_enabled and matrix_mx_puppet_slack_database_engine == 'postgres' and matrix_mx_puppet_slack_database_hostname == devture_postgres_connection_hostname) else [])

  2524.     +

  2525.     ([{

  2526.       'name': matrix_mx_puppet_twitter_database_name,

  2527.       'username': matrix_mx_puppet_twitter_database_username,

  2528.       'password': matrix_mx_puppet_twitter_database_password,

  2529.     }] if (matrix_mx_puppet_twitter_enabled and matrix_mx_puppet_twitter_database_engine == 'postgres' and matrix_mx_puppet_twitter_database_hostname == devture_postgres_connection_hostname) else [])

  2530.     +

  2531.     ([{

  2532.       'name': matrix_mx_puppet_instagram_database_name,

  2533.       'username': matrix_mx_puppet_instagram_database_username,

  2534.       'password': matrix_mx_puppet_instagram_database_password,

  2535.     }] if (matrix_mx_puppet_instagram_enabled and matrix_mx_puppet_instagram_database_engine == 'postgres' and matrix_mx_puppet_instagram_database_hostname == devture_postgres_connection_hostname) else [])

  2536.     +

  2537.     ([{

  2538.       'name': matrix_mx_puppet_discord_database_name,

  2539.       'username': matrix_mx_puppet_discord_database_username,

  2540.       'password': matrix_mx_puppet_discord_database_password,

  2541.     }] if (matrix_mx_puppet_discord_enabled  and matrix_mx_puppet_discord_database_engine == 'postgres' and matrix_mx_puppet_discord_database_hostname == devture_postgres_connection_hostname) else [])

  2542.     +

  2543.     ([{

  2544.       'name': matrix_mx_puppet_steam_database_name,

  2545.       'username': matrix_mx_puppet_steam_database_username,

  2546.       'password': matrix_mx_puppet_steam_database_password,

  2547.     }] if (matrix_mx_puppet_steam_enabled and matrix_mx_puppet_steam_database_engine == 'postgres' and matrix_mx_puppet_steam_database_hostname == devture_postgres_connection_hostname) else [])

  2548.     +

  2549.     ([{

  2550.       'name': matrix_mx_puppet_groupme_database_name,

  2551.       'username': matrix_mx_puppet_groupme_database_username,

  2552.       'password': matrix_mx_puppet_groupme_database_password,

  2553.     }] if (matrix_mx_puppet_groupme_enabled and matrix_mx_puppet_groupme_database_engine == 'postgres' and matrix_mx_puppet_groupme_database_hostname == devture_postgres_connection_hostname) else [])

  2554.     +

  2555.     ([{

  2556.       'name': matrix_dimension_database_name,

  2557.       'username': matrix_dimension_database_username,

  2558.       'password': matrix_dimension_database_password,

  2559.     }] if (matrix_dimension_enabled and matrix_dimension_database_engine == 'postgres' and matrix_dimension_database_hostname == devture_postgres_connection_hostname) else [])

  2560.     +

  2561.     ([{

  2562.       'name': matrix_etherpad_database_name,

  2563.       'username': matrix_etherpad_database_username,

  2564.       'password': matrix_etherpad_database_password,

  2565.     }] if (matrix_etherpad_enabled and matrix_etherpad_database_engine == 'postgres' and matrix_etherpad_database_hostname == devture_postgres_connection_hostname) else [])

  2566.     +

  2567.     ([{

  2568.       'name': matrix_prometheus_postgres_exporter_database_name,

  2569.       'username': matrix_prometheus_postgres_exporter_database_username,

  2570.       'password': matrix_prometheus_postgres_exporter_database_password,

  2571.     }] if (matrix_prometheus_postgres_exporter_enabled and matrix_prometheus_postgres_exporter_database_hostname == devture_postgres_connection_hostname) else [])

  2572. 

  2573.    }}

  2574. 

  2575. ########################################################################

  2576. #                                                                      #

  2577. # /com.devture.ansible.role.postgres                                   #

  2578. #                                                                      #

  2579. ########################################################################

  2580. 

  2581. 

  2582. ########################################################################

  2583. #                                                                      #

  2584. # com.devture.ansible.role.postgres_backup                             #

  2585. #                                                                      #

  2586. ########################################################################

  2587. 

  2588. devture_postgres_backup_enabled: false

  2589. 

  2590. devture_postgres_backup_identifier: matrix-postgres-backup

  2591. 

  2592. devture_postgres_backup_architecture: "{{ matrix_architecture }}"

  2593. 

  2594. devture_postgres_backup_base_path: "{{ matrix_base_data_path }}/postgres-backup"

  2595. 

  2596. devture_postgres_backup_systemd_required_services_list: |

  2597.   {{

  2598.     (['docker.service'])

  2599.     +

  2600.     ([(devture_postgres_identifier + '.service')] if devture_postgres_enabled else [])

  2601.   }}

  2602. 

  2603. devture_postgres_backup_container_network: "{{ matrix_docker_network }}"

  2604. 

  2605. devture_postgres_backup_uid: "{{ matrix_user_uid }}"

  2606. devture_postgres_backup_gid: "{{ matrix_user_gid }}"

  2607. 

  2608. devture_postgres_backup_connection_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  2609. devture_postgres_backup_connection_port: "{{ devture_postgres_connection_port if devture_postgres_enabled else 5432 }}"

  2610. devture_postgres_backup_connection_username: "{{ devture_postgres_connection_username if devture_postgres_enabled else '' }}"

  2611. devture_postgres_backup_connection_password: "{{ devture_postgres_connection_password if devture_postgres_enabled else '' }}"

  2612. 

  2613. devture_postgres_backup_postgres_data_path: "{{ devture_postgres_data_path if devture_postgres_enabled else '' }}"

  2614. 

  2615. devture_postgres_backup_databases: "{{ devture_postgres_managed_databases | map(attribute='name') if devture_postgres_enabled else [] }}"

  2616. 

  2617. ########################################################################

  2618. #                                                                      #

  2619. # /com.devture.ansible.role.postgres_backup                            #

  2620. #                                                                      #

  2621. ########################################################################

  2622. 

  2623. 

  2624. ######################################################################

  2625. #

  2626. # matrix-sygnal

  2627. #

  2628. ######################################################################

  2629. 

  2630. # Most people don't need their own push-server, because they also need their own app to utilize it from.

  2631. matrix_sygnal_enabled: false

  2632. 

  2633. # If someone instals Prometheus via the playbook, they most likely wish to monitor Sygnal.

  2634. matrix_sygnal_metrics_prometheus_enabled: "{{ matrix_prometheus_enabled }}"

  2635. 

  2636. matrix_sygnal_container_http_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else '127.0.0.1:6000' }}"

  2637. 

  2638. ######################################################################

  2639. #

  2640. # /matrix-sygnal

  2641. #

  2642. ######################################################################

  2643. 

  2644. ######################################################################

  2645. #

  2646. # matrix-ntfy

  2647. #

  2648. ######################################################################

  2649. 

  2650. matrix_ntfy_enabled: false

  2651. 

  2652. matrix_ntfy_container_http_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else '127.0.0.1:2586' }}"

  2653. 

  2654. ######################################################################

  2655. #

  2656. # /matrix-ntfy

  2657. #

  2658. ######################################################################

  2659. 

  2660. ######################################################################

  2661. #

  2662. # matrix-redis

  2663. #

  2664. ######################################################################

  2665. 

  2666. matrix_redis_enabled: "{{ matrix_synapse_workers_enabled }}"

  2667. 

  2668. ######################################################################

  2669. #

  2670. # /matrix-redis

  2671. #

  2672. ######################################################################

  2673. 

  2674. ######################################################################

  2675. #

  2676. # matrix-client-element

  2677. #

  2678. ######################################################################

  2679. 

  2680. # By default, this playbook installs the Element web UI on the `matrix_server_fqn_element` domain.

  2681. # If you wish to connect to your Matrix server by other means, you may wish to disable this.

  2682. matrix_client_element_enabled: true

  2683. 

  2684. matrix_client_element_container_image_self_build: "{{ matrix_architecture not in ['arm64', 'amd64'] }}"

  2685. 

  2686. # Normally, matrix-nginx-proxy is enabled and nginx can reach Element over the container network.

  2687. # If matrix-nginx-proxy is not enabled, or you otherwise have a need for it, you can expose

  2688. # the Element HTTP port to the local host.

  2689. matrix_client_element_container_http_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else '127.0.0.1:8765' }}"

  2690. 

  2691. matrix_client_element_default_hs_url: "{{ matrix_homeserver_url }}"

  2692. matrix_client_element_default_is_url: "{{ matrix_identity_server_url }}"

  2693. 

  2694. # Use Dimension if enabled, otherwise fall back to Scalar

  2695. matrix_client_element_integrations_ui_url: "{{ matrix_dimension_integrations_ui_url if matrix_dimension_enabled else 'https://scalar.vector.im/' }}"

  2696. matrix_client_element_integrations_rest_url: "{{ matrix_dimension_integrations_rest_url if matrix_dimension_enabled else 'https://scalar.vector.im/api' }}"

  2697. matrix_client_element_integrations_widgets_urls: "{{ matrix_dimension_integrations_widgets_urls if matrix_dimension_enabled else ['https://scalar.vector.im/api'] }}"

  2698. matrix_client_element_integrations_jitsi_widget_url: "{{ matrix_dimension_integrations_jitsi_widget_url if matrix_dimension_enabled else 'https://scalar.vector.im/api/widgets/jitsi.html' }}"

  2699. 

  2700. matrix_client_element_self_check_validate_certificates: "{{ false if matrix_ssl_retrieval_method == 'self-signed' else true }}"

  2701. 

  2702. matrix_client_element_registration_enabled: "{{ matrix_synapse_enable_registration }}"

  2703. 

  2704. matrix_client_element_enable_presence_by_hs_url: |

  2705.   {{

  2706.     none

  2707.     if matrix_synapse_presence_enabled

  2708.     else {matrix_client_element_default_hs_url: false}

  2709.   }}

  2710. 

  2711. matrix_client_element_welcome_user_id: ~

  2712. 

  2713. matrix_client_element_jitsi_preferredDomain: "{{ matrix_server_fqn_jitsi if matrix_jitsi_enabled else '' }}"

  2714. 

  2715. ######################################################################

  2716. #

  2717. # /matrix-client-element

  2718. #

  2719. ######################################################################

  2720. 

  2721. ######################################################################

  2722. #

  2723. # matrix-client-hydrogen

  2724. #

  2725. ######################################################################

  2726. 

  2727. matrix_client_hydrogen_enabled: false

  2728. 

  2729. matrix_client_hydrogen_container_image_self_build: "{{ matrix_architecture not in ['amd64'] }}"

  2730. 

  2731. # Normally, matrix-nginx-proxy is enabled and nginx can reach Hydrogen over the container network.

  2732. # If matrix-nginx-proxy is not enabled, or you otherwise have a need for it, you can expose

  2733. # the HTTP port to the local host.

  2734. matrix_client_hydrogen_container_http_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else '127.0.0.1:8768' }}"

  2735. 

  2736. matrix_client_hydrogen_default_hs_url: "{{ matrix_homeserver_url }}"

  2737. 

  2738. matrix_client_hydrogen_self_check_validate_certificates: "{{ false if matrix_ssl_retrieval_method == 'self-signed' else true }}"

  2739. 

  2740. ######################################################################

  2741. #

  2742. # /matrix-client-hydrogen

  2743. #

  2744. ######################################################################

  2745. 

  2746. ######################################################################

  2747. #

  2748. # matrix-client-cinny

  2749. #

  2750. ######################################################################

  2751. 

  2752. matrix_client_cinny_enabled: false

  2753. 

  2754. matrix_client_cinny_container_image_self_build: "{{ matrix_architecture not in ['arm64', 'amd64'] }}"

  2755. 

  2756. # Normally, matrix-nginx-proxy is enabled and nginx can reach Cinny over the container network.

  2757. # If matrix-nginx-proxy is not enabled, or you otherwise have a need for it, you can expose

  2758. # the HTTP port to the local host.

  2759. matrix_client_cinny_container_http_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else '127.0.0.1:8080' }}"

  2760. 

  2761. matrix_client_cinny_default_hs_url: "{{ matrix_homeserver_url }}"

  2762. 

  2763. matrix_client_cinny_self_check_validate_certificates: "{{ false if matrix_ssl_retrieval_method == 'self-signed' else true }}"

  2764. 

  2765. ######################################################################

  2766. #

  2767. # /matrix-client-cinny

  2768. #

  2769. ######################################################################

  2770. 

  2771. ######################################################################

  2772. #

  2773. # matrix-synapse

  2774. #

  2775. ######################################################################

  2776. 

  2777. matrix_synapse_enabled: "{{ matrix_homeserver_implementation == 'synapse' }}"

  2778. 

  2779. matrix_synapse_container_image_self_build: "{{ matrix_architecture not in ['arm64', 'amd64'] }}"

  2780. 

  2781. # When ma1sd is enabled, we can use it to validate phone numbers. It's something that the homeserver cannot do by itself.

  2782. matrix_synapse_account_threepid_delegates_msisdn: "{{ 'http://matrix-ma1sd:' + matrix_ma1sd_container_port | string if matrix_ma1sd_enabled else '' }}"

  2783. 

  2784. # For exposing the Matrix Federation API's TLS port (HTTPS) to the internet on all network interfaces.

  2785. matrix_synapse_container_federation_api_tls_host_bind_port: "{{ matrix_federation_public_port if (matrix_synapse_federation_enabled and matrix_synapse_tls_federation_listener_enabled) else '' }}"

  2786. #

  2787. # For exposing the Synapse Metrics API's port (plain HTTP) to the local host.

  2788. matrix_synapse_container_metrics_api_host_bind_port: "{{ '127.0.0.1:9100' if (matrix_synapse_metrics_enabled and not matrix_nginx_proxy_enabled) else '' }}"

  2789. #

  2790. # For exposing the Synapse Manhole port (plain HTTP) to the local host.

  2791. matrix_synapse_container_manhole_api_host_bind_port: "{{ '127.0.0.1:9000' if matrix_synapse_manhole_enabled else '' }}"

  2792. #

  2793. # For exposing the Synapse worker (and metrics) ports to the local host.

  2794. matrix_synapse_workers_container_host_bind_address: "{{ '127.0.0.1' if (matrix_synapse_workers_enabled and not matrix_nginx_proxy_enabled) else '' }}"

  2795. 

  2796. matrix_synapse_database_host: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  2797. matrix_synapse_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'synapse.db', rounds=655555) | to_uuid }}"

  2798. 

  2799. matrix_synapse_macaroon_secret_key: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'synapse.mac', rounds=655555) | to_uuid }}"

  2800. 

  2801. # We do not enable TLS in Synapse by default.

  2802. # TLS is handled by the matrix-nginx-proxy, which proxies the requests to Synapse.

  2803. matrix_synapse_tls_federation_listener_enabled: false

  2804. matrix_synapse_tls_certificate_path: ~

  2805. matrix_synapse_tls_private_key_path: ~

  2806. 

  2807. matrix_synapse_federation_port_openid_resource_required: "{{ not matrix_synapse_federation_enabled and (matrix_dimension_enabled or matrix_ma1sd_enabled) }}"

  2808. 

  2809. # If someone instals Prometheus via the playbook, they most likely wish to monitor Synapse.

  2810. matrix_synapse_metrics_enabled: "{{ matrix_prometheus_enabled }}"

  2811. 

  2812. matrix_synapse_email_enabled: "{{ matrix_mailer_enabled }}"

  2813. matrix_synapse_email_smtp_host: "matrix-mailer"

  2814. matrix_synapse_email_smtp_port: 8025

  2815. matrix_synapse_email_smtp_require_transport_security: false

  2816. matrix_synapse_email_notif_from: "Matrix <{{ matrix_mailer_sender_address }}>"

  2817. 

  2818. # Even if TURN doesn't support TLS (it does by default),

  2819. # it doesn't hurt to try a secure connection anyway.

  2820. #

  2821. # When Let's Encrypt certificates are used (the default case),

  2822. # we don't enable `turns` endpoints, because WebRTC in Element can't talk to them.

  2823. # Learn more here: https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1145

  2824. matrix_synapse_turn_uris: |

  2825.   {{

  2826.     []

  2827.     +

  2828.     [

  2829.       'turns:' + matrix_server_fqn_matrix + '?transport=udp',

  2830.       'turns:' + matrix_server_fqn_matrix + '?transport=tcp',

  2831.     ] if matrix_coturn_enabled and matrix_coturn_tls_enabled and matrix_ssl_retrieval_method != 'lets-encrypt' else []

  2832.     +

  2833.     [

  2834.       'turn:' + matrix_server_fqn_matrix + '?transport=udp',

  2835.       'turn:' + matrix_server_fqn_matrix + '?transport=tcp',

  2836.     ] if matrix_coturn_enabled else []

  2837.   }}

  2838. 

  2839. matrix_synapse_turn_shared_secret: "{{ matrix_coturn_turn_static_auth_secret if matrix_coturn_enabled else '' }}"

  2840. 

  2841. matrix_synapse_self_check_validate_certificates: "{{ false if matrix_ssl_retrieval_method == 'self-signed' else true }}"

  2842. 

  2843. matrix_synapse_systemd_required_services_list: |

  2844.   {{

  2845.     (['docker.service'])

  2846.     +

  2847.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  2848.     +

  2849.     (['matrix-goofys.service'] if matrix_s3_media_store_enabled else [])

  2850.   }}

  2851. 

  2852. matrix_synapse_systemd_wanted_services_list: |

  2853.   {{

  2854.     (['matrix-coturn.service'] if matrix_coturn_enabled else [])

  2855.     +

  2856.     (['matrix-mailer.service'] if matrix_mailer_enabled else [])

  2857.   }}

  2858. 

  2859. # Synapse workers (used for parallel load-scaling) need Redis for IPC.

  2860. matrix_synapse_redis_enabled: "{{ matrix_redis_enabled }}"

  2861. matrix_synapse_redis_host: "{{ 'matrix-redis' if matrix_redis_enabled else '' }}"

  2862. matrix_synapse_redis_password: "{{ matrix_redis_connection_password if matrix_redis_enabled else '' }}"

  2863. 

  2864. matrix_synapse_container_extra_arguments_auto: "{{ matrix_homeserver_container_extra_arguments_auto }}"

  2865. matrix_synapse_app_service_config_files_auto: "{{ matrix_homeserver_app_service_config_files_auto }}"

  2866. 

  2867. ######################################################################

  2868. #

  2869. # /matrix-synapse

  2870. #

  2871. ######################################################################

  2872. 

  2873. ######################################################################

  2874. #

  2875. # matrix-synapse-reverse-proxy-companion

  2876. #

  2877. ######################################################################

  2878. 

  2879. matrix_synapse_reverse_proxy_companion_enabled: "{{ matrix_synapse_enabled }}"

  2880. 

  2881. matrix_synapse_reverse_proxy_companion_client_api_client_max_body_size_mb: "{{ matrix_synapse_max_upload_size_mb }}"

  2882. 

  2883. matrix_synapse_reverse_proxy_companion_container_client_api_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else '127.0.0.1:8008' }}"

  2884. matrix_synapse_reverse_proxy_companion_container_federation_api_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else '127.0.0.1:8048' }}"

  2885. 

  2886. matrix_synapse_reverse_proxy_companion_synapse_workers_enabled: "{{ matrix_synapse_workers_enabled }}"

  2887. matrix_synapse_reverse_proxy_companion_synapse_workers_list: "{{ matrix_synapse_workers_enabled_list }}"

  2888. matrix_synapse_reverse_proxy_companion_synapse_generic_worker_client_server_locations: "{{ matrix_synapse_workers_generic_worker_client_server_endpoints }}"

  2889. matrix_synapse_reverse_proxy_companion_synapse_generic_worker_federation_locations: "{{ matrix_synapse_workers_generic_worker_federation_endpoints }}"

  2890. matrix_synapse_reverse_proxy_companion_synapse_stream_writer_typing_stream_worker_client_server_locations: "{{ matrix_synapse_workers_stream_writer_typing_stream_worker_client_server_endpoints }}"

  2891. matrix_synapse_reverse_proxy_companion_synapse_stream_writer_to_device_stream_worker_client_server_locations: "{{ matrix_synapse_workers_stream_writer_to_device_stream_worker_client_server_endpoints }}"

  2892. matrix_synapse_reverse_proxy_companion_synapse_stream_writer_account_data_stream_worker_client_server_locations: "{{ matrix_synapse_workers_stream_writer_account_data_stream_worker_client_server_endpoints }}"

  2893. matrix_synapse_reverse_proxy_companion_synapse_stream_writer_receipts_stream_worker_client_server_locations: "{{ matrix_synapse_workers_stream_writer_receipts_stream_worker_client_server_endpoints }}"

  2894. matrix_synapse_reverse_proxy_companion_synapse_stream_writer_presence_stream_worker_client_server_locations: "{{ matrix_synapse_workers_stream_writer_presence_stream_worker_client_server_endpoints }}"

  2895. matrix_synapse_reverse_proxy_companion_synapse_media_repository_locations: "{{matrix_synapse_workers_media_repository_endpoints|default([]) }}"

  2896. matrix_synapse_reverse_proxy_companion_synapse_user_dir_locations: "{{ matrix_synapse_workers_user_dir_worker_client_server_endpoints|default([]) }}"

  2897. 

  2898. matrix_synapse_reverse_proxy_companion_access_log_syslog_integration_enabled: "{{ matrix_prometheus_nginxlog_exporter_enabled }}"

  2899. matrix_synapse_reverse_proxy_companion_access_log_syslog_integration_server_port: "{{ (matrix_prometheus_nginxlog_exporter_container_hostname | string +':'+ matrix_prometheus_nginxlog_exporter_container_syslog_port | string) | default('') }}"

  2900. 

  2901. ######################################################################

  2902. #

  2903. # /matrix-synapse-reverse-proxy-companion

  2904. #

  2905. ######################################################################

  2906. 

  2907. ######################################################################

  2908. #

  2909. # matrix-synapse-admin

  2910. #

  2911. ######################################################################

  2912. 

  2913. matrix_synapse_admin_enabled: false

  2914. 

  2915. # Normally, matrix-nginx-proxy is enabled and nginx can reach Synapse Admin over the container network.

  2916. # If matrix-nginx-proxy is not enabled, or you otherwise have a need for it, you can expose

  2917. # Synapse Admin's HTTP port to the local host.

  2918. matrix_synapse_admin_container_http_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else '127.0.0.1:8766' }}"

  2919. 

  2920. matrix_synapse_admin_container_image_self_build: "{{ matrix_architecture not in ['arm64', 'amd64'] }}"

  2921. 

  2922. ######################################################################

  2923. #

  2924. # /matrix-synapse-admin

  2925. #

  2926. ######################################################################

  2927. 

  2928. ######################################################################

  2929. #

  2930. # etke/prometheus_node_exporter

  2931. #

  2932. ######################################################################

  2933. 

  2934. prometheus_node_exporter_enabled: false

  2935. 

  2936. prometheus_node_exporter_identifier: matrix-prometheus-node-exporter

  2937. 

  2938. prometheus_node_exporter_base_path: "{{ matrix_base_data_path }}/prometheus-node-exporter"

  2939. 

  2940. prometheus_node_exporter_uid: "{{ matrix_user_uid }}"

  2941. prometheus_node_exporter_gid: "{{ matrix_user_gid }}"

  2942. 

  2943. prometheus_node_exporter_server_fqn: "{{ matrix_server_fqn_matrix }}"

  2944. 

  2945. prometheus_node_exporter_container_network: "{{ matrix_docker_network }}"

  2946. 

  2947. prometheus_node_exporter_container_labels_traefik_enabled: false

  2948. 

  2949. ######################################################################

  2950. #

  2951. # /etke/prometheus_node_exporter

  2952. #

  2953. ######################################################################

  2954. 

  2955. ######################################################################

  2956. #

  2957. # matrix-prometheus-nginxlog-exporter

  2958. #

  2959. ######################################################################

  2960. 

  2961. matrix_prometheus_nginxlog_exporter_enabled: false

  2962. 

  2963. ######################################################################

  2964. #

  2965. # /matrix-prometheus-nginxlog-exporter

  2966. #

  2967. ######################################################################

  2968. 

  2969. ######################################################################

  2970. #

  2971. # matrix-prometheus

  2972. #

  2973. ######################################################################

  2974. 

  2975. matrix_prometheus_enabled: false

  2976. 

  2977. # Normally, matrix-nginx-proxy is enabled and nginx can reach Prometheus over the container network.

  2978. # If matrix-nginx-proxy is not enabled, or you otherwise have a need for it, you can expose

  2979. # Prometheus' HTTP port to the local host.

  2980. matrix_prometheus_container_http_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else '127.0.0.1:9090' }}"

  2981. 

  2982. matrix_prometheus_scraper_synapse_enabled: "{{ matrix_synapse_enabled and matrix_synapse_metrics_enabled }}"

  2983. matrix_prometheus_scraper_synapse_targets: ['matrix-synapse:{{ matrix_synapse_metrics_port }}']

  2984. matrix_prometheus_scraper_synapse_workers_enabled_list: "{{ matrix_synapse_workers_enabled_list }}"

  2985. matrix_prometheus_scraper_synapse_rules_synapse_tag: "{{ matrix_synapse_docker_image_tag }}"

  2986. 

  2987. matrix_prometheus_scraper_node_enabled: "{{ prometheus_node_exporter_enabled }}"

  2988. matrix_prometheus_scraper_node_targets: "{{ [prometheus_node_exporter_identifier + ':9100'] if prometheus_node_exporter_enabled else [] }}"

  2989. 

  2990. matrix_prometheus_scraper_postgres_enabled: "{{ matrix_prometheus_postgres_exporter_enabled }}"

  2991. matrix_prometheus_scraper_postgres_targets: "{{ ['matrix-prometheus-postgres-exporter:'+ matrix_prometheus_postgres_exporter_port | string] if matrix_prometheus_scraper_postgres_enabled else [] }}"

  2992. 

  2993. matrix_prometheus_scraper_hookshot_enabled: "{{ matrix_hookshot_metrics_enabled|default(false) }}"

  2994. matrix_prometheus_scraper_hookshot_targets: "{{ [matrix_hookshot_container_url | string +':'+ matrix_hookshot_metrics_port | string] if matrix_hookshot_metrics_enabled else [] }}"

  2995. 

  2996. matrix_prometheus_scraper_nginxlog_enabled: "{{ matrix_prometheus_nginxlog_exporter_enabled }}"

  2997. matrix_prometheus_scraper_nginxlog_server_port: "{{ (matrix_prometheus_nginxlog_exporter_container_hostname | string +':'+ matrix_prometheus_nginxlog_exporter_container_metrics_port | string)

  2998. | default('') }}"

  2999. 

  3000. ######################################################################

  3001. #

  3002. # /matrix-prometheus

  3003. #

  3004. ######################################################################

  3005. 

  3006. ######################################################################

  3007. #

  3008. # matrix-prometheus-postgres-exporter

  3009. #

  3010. ######################################################################

  3011. 

  3012. matrix_prometheus_postgres_exporter_enabled: false

  3013. matrix_prometheus_postgres_exporter_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  3014. matrix_prometheus_postgres_exporter_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'prometheus.pg.db', rounds=655555) | to_uuid }}"

  3015. 

  3016. matrix_prometheus_postgres_exporter_systemd_required_services_list: |

  3017.   {{

  3018.     ['docker.service']

  3019.     +

  3020.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  3021.   }}

  3022. 

  3023. ######################################################################

  3024. #

  3025. # /matrix-prometheus-postgres-exporter

  3026. #

  3027. ######################################################################

  3028. 

  3029. ######################################################################

  3030. #

  3031. # matrix-grafana

  3032. #

  3033. ######################################################################

  3034. 

  3035. matrix_grafana_enabled: false

  3036. 

  3037. # Normally, matrix-nginx-proxy is enabled and nginx can reach Grafana over the container network.

  3038. # If matrix-nginx-proxy is not enabled, or you otherwise have a need for it, you can expose

  3039. # Grafana's HTTP port to the local host.

  3040. matrix_grafana_container_http_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else '127.0.0.1:3000' }}"

  3041. 

  3042. matrix_grafana_dashboard_download_urls: |

  3043.   {{

  3044.     (matrix_synapse_grafana_dashboard_urls if matrix_homeserver_implementation == 'synapse' and matrix_synapse_metrics_enabled else [])

  3045.     +

  3046.     (prometheus_node_exporter_dashboard_urls if prometheus_node_exporter_enabled else [])

  3047.     +

  3048.     (matrix_prometheus_postgres_exporter_dashboard_urls if matrix_prometheus_postgres_exporter_enabled else [])

  3049.     +

  3050.     (matrix_prometheus_nginxlog_exporter_dashboard_urls if matrix_prometheus_nginxlog_exporter_enabled else [])

  3051.   }}

  3052. 

  3053. matrix_grafana_default_home_dashboard_path: |-

  3054.   {{

  3055.     {

  3056.       'synapse': ('/etc/grafana/dashboards/synapse.json' if matrix_synapse_metrics_enabled else '/etc/grafana/dashboards/node-exporter-full.json'),

  3057.       'dendrite': '/etc/grafana/dashboards/node-exporter-full.json',

  3058.       'conduit': '/etc/grafana/dashboards/node-exporter-full.json',

  3059.     }[matrix_homeserver_implementation]

  3060.   }}

  3061. 

  3062. matrix_grafana_systemd_wanted_services_list: |

  3063.   {{

  3064.     []

  3065.     +

  3066.     (['matrix-prometheus-postgres-exporter.service'] if matrix_prometheus_postgres_exporter_enabled else [])

  3067.   }}

  3068. 

  3069. ######################################################################

  3070. #

  3071. # /matrix-grafana

  3072. #

  3073. ######################################################################

  3074. 

  3075. ######################################################################

  3076. #

  3077. # matrix-registration

  3078. #

  3079. ######################################################################

  3080. 

  3081. matrix_registration_enabled: false

  3082. 

  3083. # Normally, matrix-nginx-proxy is enabled and nginx can reach matrix-registration over the container network.

  3084. # If matrix-nginx-proxy is not enabled, or you otherwise have a need for it, you can expose

  3085. # matrix-registration's HTTP port to the local host.

  3086. matrix_registration_container_http_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else '127.0.0.1:8767' }}"

  3087. 

  3088. matrix_registration_riot_instance: "{{ ('https://' + matrix_server_fqn_element) if matrix_client_element_enabled else 'https://riot.im/app/' }}"

  3089. 

  3090. matrix_registration_shared_secret: |-

  3091.   {{

  3092.     {

  3093.       'synapse': matrix_synapse_registration_shared_secret,

  3094.       'dendrite': matrix_dendrite_client_api_registration_shared_secret,

  3095.       'conduit': '',

  3096.     }[matrix_homeserver_implementation]

  3097.   }}

  3098. 

  3099. matrix_registration_server_location: "{{ matrix_homeserver_container_url }}"

  3100. 

  3101. matrix_registration_api_validate_certs: "{{ false if matrix_ssl_retrieval_method == 'self-signed' else true }}"

  3102. 

  3103. matrix_registration_container_image_self_build: "{{ matrix_architecture != 'amd64' }}"

  3104. 

  3105. matrix_registration_systemd_required_services_list: |

  3106.   {{

  3107.     ['docker.service']

  3108.     +

  3109.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  3110.   }}

  3111. 

  3112. # Postgres is the default, except if not using internal Postgres server

  3113. matrix_registration_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  3114. matrix_registration_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  3115. matrix_registration_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mx.registr.db', rounds=655555) | to_uuid }}"

  3116. 

  3117. ######################################################################

  3118. #

  3119. # /matrix-registration

  3120. #

  3121. ######################################################################

  3122. 

  3123. 

  3124. ######################################################################

  3125. #

  3126. # matrix-dendrite

  3127. #

  3128. ######################################################################

  3129. 

  3130. matrix_dendrite_enabled: "{{ matrix_homeserver_implementation == 'dendrite' }}"

  3131. 

  3132. # Normally, matrix-nginx-proxy is enabled and nginx can reach Dendrite over the container network.

  3133. # If matrix-nginx-proxy is not enabled, or you otherwise have a need for it,

  3134. # you can expose Dendrite's ports to the host.

  3135. #

  3136. # For exposing Dendrite's plain HTTP server to the local host.

  3137. matrix_dendrite_container_http_host_bind_address: "{{ '' if matrix_nginx_proxy_enabled else ('127.0.0.1:' + matrix_dendrite_http_bind_port | string) }}"

  3138. #

  3139. # For exposing Dendrite's HTTPS server to the local host.

  3140. matrix_dendrite_container_https_host_bind_address: "{{ '' if matrix_nginx_proxy_enabled or not matrix_dendrite_https_bind_port else ('127.0.0.1:' + matrix_dendrite_https_bind_port | string) }}"

  3141. 

  3142. matrix_dendrite_sync_api_real_ip_header: "{{ 'X-Forwarded-For' if matrix_nginx_proxy_enabled else '' }}"

  3143. 

  3144. matrix_dendrite_client_api_registration_shared_secret: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'dendrite.rss', rounds=655555) | to_uuid }}"

  3145. 

  3146. matrix_dendrite_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  3147. 

  3148. matrix_dendrite_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'dendrite.db', rounds=655555) | to_uuid }}"

  3149. 

  3150. # Even if TURN doesn't support TLS (it does by default),

  3151. # it doesn't hurt to try a secure connection anyway.

  3152. matrix_dendrite_client_api_turn_uris: |

  3153.   {{

  3154.     [

  3155.       'turns:' + matrix_server_fqn_matrix + '?transport=udp',

  3156.       'turns:' + matrix_server_fqn_matrix + '?transport=tcp',

  3157.       'turn:' + matrix_server_fqn_matrix + '?transport=udp',

  3158.       'turn:' + matrix_server_fqn_matrix + '?transport=tcp',

  3159.     ]

  3160.     if matrix_coturn_enabled

  3161.     else []

  3162.   }}

  3163. 

  3164. matrix_dendrite_client_api_turn_shared_secret: "{{ matrix_coturn_turn_static_auth_secret if matrix_coturn_enabled else '' }}"

  3165. 

  3166. matrix_dendrite_disable_tls_validation: "{{ true if matrix_ssl_retrieval_method == 'self-signed' else false }}"

  3167. 

  3168. matrix_dendrite_self_check_validate_certificates: "{{ false if matrix_ssl_retrieval_method == 'self-signed' else true }}"

  3169. 

  3170. matrix_dendrite_trusted_id_servers: "{{ [matrix_server_fqn_matrix] if matrix_ma1sd_enabled else ['matrix.org', 'vector.im'] }}"

  3171. 

  3172. matrix_dendrite_systemd_required_services_list: |

  3173.   {{

  3174.     (['docker.service'])

  3175.     +

  3176.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  3177.     +

  3178.     (['matrix-goofys.service'] if matrix_s3_media_store_enabled else [])

  3179.   }}

  3180. 

  3181. matrix_dendrite_systemd_wanted_services_list: |

  3182.   {{

  3183.     (['matrix-coturn.service'] if matrix_coturn_enabled else [])

  3184.   }}

  3185. 

  3186. matrix_dendrite_container_extra_arguments_auto: "{{ matrix_homeserver_container_extra_arguments_auto }}"

  3187. matrix_dendrite_app_service_config_files_auto: "{{ matrix_homeserver_app_service_config_files_auto }}"

  3188. 

  3189. ######################################################################

  3190. #

  3191. # /matrix-dendrite

  3192. #

  3193. ######################################################################

  3194. 

  3195. ######################################################################

  3196. #

  3197. # matrix-conduit

  3198. #

  3199. ######################################################################

  3200. 

  3201. matrix_conduit_enabled: "{{ matrix_homeserver_implementation == 'conduit' }}"

  3202. 

  3203. matrix_conduit_systemd_required_services_list: |

  3204.   {{

  3205.     (['docker.service'])

  3206.   }}

  3207. 

  3208. 

  3209. ######################################################################

  3210. #

  3211. # /matrix-conduit

  3212. #

  3213. ######################################################################

  3214. 

  3215. 

  3216. ######################################################################

  3217. #

  3218. # matrix-user-creator

  3219. #

  3220. ######################################################################

  3221. 

  3222. matrix_user_creator_users_auto: |

  3223.   {{

  3224.     ([{

  3225.       'username': matrix_bot_matrix_reminder_bot_matrix_user_id_localpart,

  3226.       'initial_password': matrix_bot_matrix_reminder_bot_matrix_user_password,

  3227.       'initial_type': 'bot',

  3228.     }] if matrix_bot_matrix_reminder_bot_enabled else [])

  3229.     +

  3230.     ([{

  3231.       'username': matrix_bot_honoroit_login,

  3232.       'initial_password': matrix_bot_honoroit_password,

  3233.       'initial_type': 'bot',

  3234.     }] if matrix_bot_honoroit_enabled else [])

  3235.     +

  3236.     ([{

  3237.       'username': matrix_bot_postmoogle_login,

  3238.       'initial_password': matrix_bot_postmoogle_password,

  3239.       'initial_type': 'bot',

  3240.     }] if matrix_bot_postmoogle_enabled else [])

  3241.     +

  3242.     ([{

  3243.       'username': matrix_bot_buscarron_login,

  3244.       'initial_password': matrix_bot_buscarron_password,

  3245.       'initial_type': 'bot',

  3246.     }] if matrix_bot_buscarron_enabled else [])

  3247.   }}

  3248. 

  3249. ######################################################################

  3250. #

  3251. # /matrix-user-creator

  3252. #

  3253. ######################################################################