Matrix Docker Ansible eploy
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
 
 

76 lines
4.4 KiB

  1. ---
  2. # Set this to the display name for ansible used in Output e.g. fail_msg
  3. matrix_user_verification_service_ansible_name: "Matrix User Verification Service"
  4. # Enable by default. This is overwritten in provided group vars.
  5. matrix_user_verification_service_enabled: true
  6. matrix_user_verification_service_container_image_self_build: "{{ matrix_architecture != 'amd64' }}"
  7. matrix_user_verification_service_container_image_self_build_repo: "https://github.com/matrix-org/matrix-user-verification-service"
  8. matrix_user_verification_service_container_image_self_build_branch: "{{ 'master' if matrix_registration_version == 'latest' else matrix_user_verification_service_version }}"
  9. # Fix version tag
  10. # renovate: datasource=docker depName=matrixdotorg/matrix-user-verification-service
  11. matrix_user_verification_service_version: "v3.0.0"
  12. # Paths
  13. matrix_user_verification_service_base_path: "{{ matrix_base_data_path }}/user-verification-service"
  14. matrix_user_verification_service_config_path: "{{ matrix_user_verification_service_base_path }}/config"
  15. matrix_user_verification_service_config_env_file: "{{ matrix_user_verification_service_config_path }}/.env"
  16. matrix_user_verification_service_docker_src_files_path: "{{ matrix_user_verification_service_base_path }}/docker-src"
  17. # Docker
  18. matrix_user_verification_service_docker_image_name_prefix: "{{ matrix_container_global_registry_prefix }}"
  19. matrix_user_verification_service_docker_image: "{{ matrix_user_verification_service_docker_image_name_prefix }}matrixdotorg/matrix-user-verification-service:{{ matrix_user_verification_service_version }}"
  20. matrix_user_verification_service_docker_image_force_pull: "{{ matrix_user_verification_service_docker_image.endswith(':latest') }}"
  21. # The base container network. It will be auto-created by this role if it doesn't exist already.
  22. matrix_user_verification_service_container_network: ""
  23. # A list of additional container networks that the container would be connected to.
  24. # The role does not create these networks, so make sure they already exist.
  25. # Use this to expose this container to another reverse proxy, which runs in a different container network.
  26. matrix_user_verification_service_container_additional_networks: []
  27. matrix_user_verification_service_container_name: "matrix-user-verification-service"
  28. # This will be set in group vars
  29. matrix_user_verification_service_container_http_host_bind_port: ''
  30. matrix_user_verification_service_container_extra_arguments: []
  31. # Systemd
  32. matrix_user_verification_service_systemd_required_services_list: []
  33. matrix_user_verification_service_systemd_wanted_services_list: []
  34. matrix_user_verification_service_systemd_service_basename: "matrix-user-verification-service"
  35. matrix_user_verification_service_systemd_service_name: "{{ matrix_user_verification_service_systemd_service_basename }}.service"
  36. # Matrix User Verification Service Configuration
  37. ## REQUIRED
  38. # Homeserver client API admin token (synapse only)- Required for the service to verify room membership
  39. matrix_user_verification_service_uvs_access_token: ''
  40. # homeserver client api url
  41. matrix_user_verification_service_uvs_homeserver_url: ""
  42. # disable check for non private ip range of homeserver. e.g. set to `true` if your homeserver domain resolves to a private ip.
  43. matrix_user_verification_service_uvs_disable_ip_blacklist: false
  44. ## OPTIONAL
  45. # Require an Auth-Token with API calls. If set to false, UVS will reply to any API call.
  46. # The Auth-Token is defined via: matrix_user_verification_service_uvs_auth_token
  47. matrix_user_verification_service_uvs_require_auth: true
  48. # Auth token to protect the API
  49. # If enabled any calls to the provided API endpoints need have the header "Authorization: Bearer TOKEN".
  50. # A Token will be derived from matrix_homeserver_generic_secret_key in group_vars/matrix_servers
  51. matrix_user_verification_service_uvs_auth_token: ''
  52. # Pin UVS to only check openId Tokens for the matrix_server_name configured by this playbook.
  53. matrix_user_verification_service_uvs_pin_openid_verify_server_name: true
  54. # Matrix server name to verify OpenID tokens against.
  55. # This is not the homeserverURL, but rather the domain in the matrix "user ID"
  56. # UVS can also be instructed to verify against the Matrix server name passed in the token, to enable set to ""
  57. matrix_user_verification_service_uvs_openid_verify_server_name: "{{ matrix_domain }}"
  58. # Log level
  59. # See choices here: https://github.com/winstonjs/winston#logging-levels
  60. matrix_user_verification_service_uvs_log_level: info