overmind
/
matrix-docker-ansible-deploy
зеркало из https://github.com/spantaleev/matrix-docker-ansible-deploy
1
0
Форкнуть 0
Код Задачи 0 Релизы 0 Вики Активность
Matrix Docker Ansible eploy
Вы не можете выбрать более 25 тем Темы должны начинаться с буквы или цифры, могут содержать дефисы(-) и должны содержать не более 35 символов.
5658 коммитов
13 Ветки
509 MiB
 
 
Дерево: 6db3c8f2ad
Ветки Теги
${ item.name }
Создать ветку ${ searchTerm }
из '6db3c8f2ad'
${ noResults }
matrix-docker-ansible-deploy/group_vars/matrix_servers

3368 строки
162 KiB
Исходник Вина История 

  1. ---

  2. 

  3. # This variables file wires together the various components (roles) used by the playbook.

  4. #

  5. # Roles used by playbook are pretty minimal and kept independent of one another as much as possible.

  6. # To deliver a turnkey fully-featured Matrix server, this playbook needs

  7. # to connect them all together. It does so by overriding role variables.

  8. #

  9. # You can also override ANY variable (seen here or in any given role),

  10. # by re-defining it in your own configuration file (`inventory/host_vars/matrix.<your-domain>`).

  11. 

  12. ########################################################################

  13. #                                                                      #

  14. # Playbook                                                             #

  15. #                                                                      #

  16. ########################################################################

  17. 

  18. # Controls whether to install Docker or not

  19. # Also see `devture_docker_sdk_for_python_installation_enabled`.

  20. matrix_playbook_docker_installation_enabled: true

  21. 

  22. ########################################################################

  23. #                                                                      #

  24. # /Playbook                                                            #

  25. #                                                                      #

  26. ########################################################################

  27. 

  28. ########################################################################

  29. #                                                                      #

  30. # base                                                                 #

  31. #                                                                      #

  32. ########################################################################

  33. 

  34. matrix_homeserver_container_extra_arguments_auto: |

  35.   {{

  36.     (['--mount type=bind,src=' + matrix_appservice_discord_config_path + '/registration.yaml,dst=/matrix-appservice-discord-registration.yaml,ro'] if matrix_appservice_discord_enabled else [])

  37.     +

  38.     (['--mount type=bind,src=' + matrix_appservice_irc_config_path + '/registration.yaml,dst=/matrix-appservice-irc-registration.yaml,ro'] if matrix_appservice_irc_enabled else [])

  39.     +

  40.     (['--mount type=bind,src=' + matrix_appservice_kakaotalk_config_path + '/registration.yaml,dst=/matrix-appservice-kakaotalk-registration.yaml,ro'] if matrix_appservice_kakaotalk_enabled else [])

  41.     +

  42.     (['--mount type=bind,src=' + matrix_appservice_slack_config_path + '/slack-registration.yaml,dst=/matrix-appservice-slack-registration.yaml,ro'] if matrix_appservice_slack_enabled else [])

  43.     +

  44.     (['--mount type=bind,src=' + matrix_appservice_webhooks_config_path + '/webhooks-registration.yaml,dst=/matrix-appservice-webhooks-registration.yaml,ro'] if matrix_appservice_webhooks_enabled else [])

  45.     +

  46.     (['--mount type=bind,src=' + matrix_beeper_linkedin_config_path + '/registration.yaml,dst=/matrix-beeper-linkedin-registration.yaml,ro'] if matrix_beeper_linkedin_enabled else [])

  47.     +

  48.     (['--mount type=bind,src=' + matrix_go_skype_bridge_config_path + '/registration.yaml,dst=/matrix-go-skype-bridge-registration.yaml,ro'] if matrix_go_skype_bridge_enabled else [])

  49.     +

  50.     (['--mount type=bind,src=' + matrix_heisenbridge_base_path + '/registration.yaml,dst=/heisenbridge-registration.yaml,ro'] if matrix_heisenbridge_enabled else [])

  51.     +

  52.     (['--mount type=bind,src=' + matrix_hookshot_base_path + '/registration.yml,dst=/hookshot-registration.yml,ro'] if matrix_hookshot_enabled else [])

  53.     +

  54.     (['--mount type=bind,src=' + matrix_mautrix_discord_config_path + '/registration.yaml,dst=/matrix-mautrix-discord-registration.yaml,ro'] if matrix_mautrix_discord_enabled else [])

  55.     +

  56.     (['--mount type=bind,src=' + matrix_mautrix_slack_config_path + '/registration.yaml,dst=/matrix-mautrix-slack-registration.yaml,ro'] if matrix_mautrix_slack_enabled else [])

  57.     +

  58.     (['--mount type=bind,src=' + matrix_mautrix_facebook_config_path + '/registration.yaml,dst=/matrix-mautrix-facebook-registration.yaml,ro'] if matrix_mautrix_facebook_enabled else [])

  59.     +

  60.     (['--mount type=bind,src=' + matrix_mautrix_googlechat_config_path + '/registration.yaml,dst=/matrix-mautrix-googlechat-registration.yaml,ro'] if matrix_mautrix_googlechat_enabled else [])

  61.     +

  62.     (['--mount type=bind,src=' + matrix_mautrix_hangouts_config_path + '/registration.yaml,dst=/matrix-mautrix-hangouts-registration.yaml,ro'] if matrix_mautrix_hangouts_enabled else [])

  63.     +

  64.     (['--mount type=bind,src=' + matrix_mautrix_instagram_config_path + '/registration.yaml,dst=/matrix-mautrix-instagram-registration.yaml,ro'] if matrix_mautrix_instagram_enabled else [])

  65.     +

  66.     (['--mount type=bind,src=' + matrix_mautrix_signal_config_path + '/registration.yaml,dst=/matrix-mautrix-signal-registration.yaml,ro'] if matrix_mautrix_signal_enabled else [])

  67.     +

  68.     (['--mount type=bind,src=' + matrix_mautrix_telegram_config_path + '/registration.yaml,dst=/matrix-mautrix-telegram-registration.yaml,ro'] if matrix_mautrix_telegram_enabled else [])

  69.     +

  70.     (['--mount type=bind,src=' + matrix_mautrix_twitter_config_path + '/registration.yaml,dst=/matrix-mautrix-twitter-registration.yaml,ro'] if matrix_mautrix_twitter_enabled else [])

  71.     +

  72.     (['--mount type=bind,src=' + matrix_mautrix_whatsapp_config_path + '/registration.yaml,dst=/matrix-mautrix-whatsapp-registration.yaml,ro'] if matrix_mautrix_whatsapp_enabled else [])

  73.     +

  74.     (['--mount type=bind,src=' + matrix_mx_puppet_discord_config_path + '/registration.yaml,dst=/matrix-mx-puppet-discord-registration.yaml,ro'] if matrix_mx_puppet_discord_enabled else [])

  75.     +

  76.     (['--mount type=bind,src=' + matrix_mx_puppet_groupme_config_path + '/registration.yaml,dst=/matrix-mx-puppet-groupme-registration.yaml,ro'] if matrix_mx_puppet_groupme_enabled else [])

  77.     +

  78.     (['--mount type=bind,src=' + matrix_mx_puppet_instagram_config_path + '/registration.yaml,dst=/matrix-mx-puppet-instagram-registration.yaml,ro'] if matrix_mx_puppet_instagram_enabled else [])

  79.     +

  80.     (['--mount type=bind,src=' + matrix_mx_puppet_slack_config_path + '/registration.yaml,dst=/matrix-mx-puppet-slack-registration.yaml,ro'] if matrix_mx_puppet_slack_enabled else [])

  81.     +

  82.     (['--mount type=bind,src=' + matrix_mx_puppet_steam_config_path + '/registration.yaml,dst=/matrix-mx-puppet-steam-registration.yaml,ro'] if matrix_mx_puppet_steam_enabled else [])

  83.     +

  84.     (['--mount type=bind,src=' + matrix_mx_puppet_twitter_config_path + '/registration.yaml,dst=/matrix-mx-puppet-twitter-registration.yaml,ro'] if matrix_mx_puppet_twitter_enabled else [])

  85.     +

  86.     (['--mount type=bind,src=' + matrix_sms_bridge_config_path + '/registration.yaml,dst=/matrix-sms-bridge-registration.yaml,ro'] if matrix_sms_bridge_enabled else [])

  87.     +

  88.     (['--mount type=bind,src=' + matrix_cactus_comments_app_service_config_file + ',dst=/matrix-cactus-comments.yaml,ro'] if matrix_cactus_comments_enabled else [])

  89.   }}

  90. 

  91. matrix_homeserver_app_service_config_files_auto: |

  92.   {{

  93.     (['/matrix-appservice-discord-registration.yaml'] if matrix_appservice_discord_enabled else [])

  94.     +

  95.     (['/matrix-appservice-irc-registration.yaml'] if matrix_appservice_irc_enabled else [])

  96.     +

  97.     (['/matrix-appservice-kakaotalk-registration.yaml'] if matrix_appservice_kakaotalk_enabled else [])

  98.     +

  99.     (['/matrix-appservice-slack-registration.yaml'] if matrix_appservice_slack_enabled else [])

  100.     +

  101.     (['/matrix-appservice-webhooks-registration.yaml'] if matrix_appservice_webhooks_enabled else [])

  102.     +

  103.     (['/matrix-beeper-linkedin-registration.yaml'] if matrix_beeper_linkedin_enabled else [])

  104.     +

  105.     (['/matrix-go-skype-bridge-registration.yaml'] if matrix_go_skype_bridge_enabled else [])

  106.     +

  107.     (['/heisenbridge-registration.yaml'] if matrix_heisenbridge_enabled else [])

  108.     +

  109.     (['/hookshot-registration.yml'] if matrix_hookshot_enabled else [])

  110.     +

  111.     (['/matrix-mautrix-discord-registration.yaml'] if matrix_mautrix_discord_enabled else [])

  112.     +

  113.     (['/matrix-mautrix-slack-registration.yaml'] if matrix_mautrix_slack_enabled else [])

  114.     +

  115.     (['/matrix-mautrix-facebook-registration.yaml'] if matrix_mautrix_facebook_enabled else [])

  116.     +

  117.     (['/matrix-mautrix-googlechat-registration.yaml'] if matrix_mautrix_googlechat_enabled else [])

  118.     +

  119.     (['/matrix-mautrix-hangouts-registration.yaml'] if matrix_mautrix_hangouts_enabled else [])

  120.     +

  121.     (['/matrix-mautrix-instagram-registration.yaml'] if matrix_mautrix_instagram_enabled else [])

  122.     +

  123.     (['/matrix-mautrix-signal-registration.yaml'] if matrix_mautrix_signal_enabled else [])

  124.     +

  125.     (['/matrix-mautrix-telegram-registration.yaml'] if matrix_mautrix_telegram_enabled else [])

  126.     +

  127.     (['/matrix-mautrix-twitter-registration.yaml'] if matrix_mautrix_twitter_enabled else [])

  128.     +

  129.     (['/matrix-mautrix-whatsapp-registration.yaml'] if matrix_mautrix_whatsapp_enabled else [])

  130.     +

  131.     (['/matrix-mx-puppet-discord-registration.yaml'] if matrix_mx_puppet_discord_enabled else [])

  132.     +

  133.     (['/matrix-mx-puppet-groupme-registration.yaml'] if matrix_mx_puppet_groupme_enabled else [])

  134.     +

  135.     (['/matrix-mx-puppet-instagram-registration.yaml'] if matrix_mx_puppet_instagram_enabled else [])

  136.     +

  137.     (['/matrix-mx-puppet-slack-registration.yaml'] if matrix_mx_puppet_slack_enabled else [])

  138.     +

  139.     (['/matrix-mx-puppet-steam-registration.yaml'] if matrix_mx_puppet_steam_enabled else [])

  140.     +

  141.     (['/matrix-mx-puppet-twitter-registration.yaml'] if matrix_mx_puppet_twitter_enabled else [])

  142.     +

  143.     (['/matrix-sms-bridge-registration.yaml'] if matrix_sms_bridge_enabled else [])

  144.     +

  145.     (['/matrix-cactus-comments.yaml'] if matrix_cactus_comments_enabled else [])

  146.   }}

  147. 

  148. ########################################################################

  149. #                                                                      #

  150. # /base                                                                #

  151. #                                                                      #

  152. ########################################################################

  153. 

  154. 

  155. ########################################################################

  156. #                                                                      #

  157. # com.devture.ansible.role.systemd_service_manager                     #

  158. #                                                                      #

  159. ########################################################################

  160. 

  161. # This list is not exhaustive and final.

  162. # Synapse workers are still injected into the list at runtime.

  163. # Additional JVB workers (playbooks/jitsi_jvb.yml -- roles/custom/matrix-jitsi/tasks/init_additional_jvb.yml) override this variable at runtime as well.

  164. #

  165. # Priority levels are like this:

  166. # - core services (the homeserver) get a level of ~1000

  167. # - services that core services depend on (database, Redis, ntfy, etc.) get a lower level - between 500 and 1000

  168. # - reverse-proxying services get level 3000

  169. # - Matrix utility services (bridges, bots) get a level of 2000/2200, so that:

  170. #   - they can start before the reverse-proxy

  171. #   - so that, when the reverse-proxy is up (Matrix is up), all bots and bridges can be interacted with

  172. # - monitoring services (Prometheus, Grafana, ..) get a level of 4000 - they can start later than all-of-Matrix

  173. # - services which aren't time-sensitive (various crons and timers) get a level of 5000 - they can start later than all-of-Matrix

  174. devture_systemd_service_manager_services_list_auto: |

  175.   {{

  176.     ([{'name': 'matrix-backup-borg.timer', 'priority': 5000, 'groups': ['matrix', 'backup', 'borg']}] if matrix_backup_borg_enabled else [])

  177.     +

  178.     ([{'name': 'matrix-bot-buscarron.service', 'priority': 2200, 'groups': ['matrix', 'bots', 'buscarron']}] if matrix_bot_buscarron_enabled else [])

  179.     +

  180.     ([{'name': 'matrix-bot-go-neb.service', 'priority': 2200, 'groups': ['matrix', 'bots', 'go-neb']}] if matrix_bot_go_neb_enabled else [])

  181.     +

  182.     ([{'name': 'matrix-bot-honoroit.service', 'priority': 2200, 'groups': ['matrix', 'bots', 'honoroit']}] if matrix_bot_honoroit_enabled else [])

  183.     +

  184.     ([{'name': 'matrix-bot-matrix-registration-bot.service', 'priority': 2200, 'groups': ['matrix', 'bots', 'registration-bot']}] if matrix_bot_matrix_registration_bot_enabled else [])

  185.     +

  186.     ([{'name': 'matrix-bot-matrix-reminder-bot.service', 'priority': 2200, 'groups': ['matrix', 'bots', 'reminder-bot']}] if matrix_bot_matrix_reminder_bot_enabled else [])

  187.     +

  188.     ([{'name': 'matrix-bot-maubot.service', 'priority': 2200, 'groups': ['matrix', 'bots', 'maubot']}] if matrix_bot_maubot_enabled else [])

  189.     +

  190.     ([{'name': 'matrix-bot-mjolnir.service', 'priority': 2200, 'groups': ['matrix', 'bots', 'mjolnir']}] if matrix_bot_mjolnir_enabled else [])

  191.     +

  192.     ([{'name': 'matrix-bot-draupnir.service', 'priority': 2200, 'groups': ['matrix', 'bots', 'draupnir']}] if matrix_bot_draupnir_enabled else [])

  193.     +

  194.     ([{'name': 'matrix-bot-postmoogle.service', 'priority': 2200, 'groups': ['matrix', 'bots', 'postmoogle']}] if matrix_bot_postmoogle_enabled else [])

  195.     +

  196.     ([{'name': 'matrix-bot-chatgpt.service', 'priority': 2200, 'groups': ['matrix', 'bots', 'chatgpt']}] if matrix_bot_chatgpt_enabled else [])

  197.     +

  198.     ([{'name': 'matrix-appservice-discord.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'appservice-discord']}] if matrix_appservice_discord_enabled else [])

  199.     +

  200.     ([{'name': 'matrix-appservice-irc.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'appservice-irc']}] if matrix_appservice_irc_enabled else [])

  201.     +

  202.     ([{'name': 'matrix-appservice-kakaotalk.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'appservice-kakaotalk']}] if matrix_appservice_kakaotalk_enabled else [])

  203.     +

  204.     ([{'name': 'matrix-appservice-kakaotalk-node.service', 'priority': 1900, 'groups': ['matrix', 'bridges', 'appservice-kakaotalk', 'appservice-kakaotalk-node']}] if matrix_appservice_kakaotalk_enabled else [])

  205.     +

  206.     ([{'name': 'matrix-appservice-slack.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'appservice-slack']}] if matrix_appservice_slack_enabled else [])

  207.     +

  208.     ([{'name': 'matrix-appservice-webhooks.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'appservice-webhooks']}] if matrix_appservice_webhooks_enabled else [])

  209.     +

  210.     ([{'name': 'matrix-beeper-linkedin.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'beeper-linkedin']}] if matrix_beeper_linkedin_enabled else [])

  211.     +

  212.     ([{'name': 'matrix-go-skype-bridge.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'go-skype']}] if matrix_go_skype_bridge_enabled else [])

  213.     +

  214.     ([{'name': 'matrix-heisenbridge.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'heisenbridge']}] if matrix_heisenbridge_enabled else [])

  215.     +

  216.     ([{'name': 'matrix-hookshot.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'hookshot']}] if matrix_hookshot_enabled else [])

  217.     +

  218.     ([{'name': 'matrix-mautrix-discord.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mautrix-discord']}] if matrix_mautrix_discord_enabled else [])

  219.     +

  220.     ([{'name': 'matrix-mautrix-slack.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mautrix-slack']}] if matrix_mautrix_slack_enabled else [])

  221.     +

  222.     ([{'name': 'matrix-mautrix-facebook.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mautrix-facebook']}] if matrix_mautrix_facebook_enabled else [])

  223.     +

  224.     ([{'name': 'matrix-mautrix-googlechat.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mautrix-googlechat']}] if matrix_mautrix_googlechat_enabled else [])

  225.     +

  226.     ([{'name': 'matrix-mautrix-hangouts.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mautrix-hangouts']}] if matrix_mautrix_hangouts_enabled else [])

  227.     +

  228.     ([{'name': 'matrix-mautrix-instagram.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mautrix-instagram']}] if matrix_mautrix_instagram_enabled else [])

  229.     +

  230.     ([{'name': 'matrix-mautrix-signal.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mautrix-signal']}] if matrix_mautrix_signal_enabled else [])

  231.     +

  232.     ([{'name': 'matrix-mautrix-signal-daemon.service', 'priority': 1900, 'groups': ['matrix', 'bridges', 'mautrix-signal', 'mautrix-signal-daemon']}] if matrix_mautrix_signal_enabled else [])

  233.     +

  234.     ([{'name': 'matrix-mautrix-telegram.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mautrix-telegram']}] if matrix_mautrix_telegram_enabled else [])

  235.     +

  236.     ([{'name': 'matrix-mautrix-twitter.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mautrix-twitter']}] if matrix_mautrix_twitter_enabled else [])

  237.     +

  238.     ([{'name': 'matrix-mautrix-whatsapp.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mautrix-whatsapp']}] if matrix_mautrix_whatsapp_enabled else [])

  239.     +

  240.     ([{'name': 'matrix-mx-puppet-discord.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mx-puppet-discord']}] if matrix_mx_puppet_discord_enabled else [])

  241.     +

  242.     ([{'name': 'matrix-mx-puppet-groupme.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mx-puppet-groupme']}] if matrix_mx_puppet_groupme_enabled else [])

  243.     +

  244.     ([{'name': 'matrix-mx-puppet-instagram.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mx-puppet-instagram']}] if matrix_mx_puppet_instagram_enabled else [])

  245.     +

  246.     ([{'name': 'matrix-mx-puppet-slack.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mx-puppet-slack']}] if matrix_mx_puppet_slack_enabled else [])

  247.     +

  248.     ([{'name': 'matrix-mx-puppet-steam.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mx-puppet-steam']}] if matrix_mx_puppet_steam_enabled else [])

  249.     +

  250.     ([{'name': 'matrix-mx-puppet-twitter.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mx-puppet-twitter']}] if matrix_mx_puppet_twitter_enabled else [])

  251.     +

  252.     ([{'name': 'matrix-sms-bridge.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'sms']}] if matrix_sms_bridge_enabled else [])

  253.     +

  254.     ([{'name': 'matrix-cactus-comments.service', 'priority': 2000, 'groups': ['matrix', 'cactus-comments']}] if matrix_cactus_comments_enabled else [])

  255.     +

  256.     ([{'name': 'matrix-client-cinny.service', 'priority': 2000, 'groups': ['matrix', 'clients', 'cinny']}] if matrix_client_cinny_enabled else [])

  257.     +

  258.     ([{'name': 'matrix-client-element.service', 'priority': 2000, 'groups': ['matrix', 'clients', 'element']}] if matrix_client_element_enabled else [])

  259.     +

  260.     ([{'name': 'matrix-client-hydrogen.service', 'priority': 2000, 'groups': ['matrix', 'clients', 'hydrogen']}] if matrix_client_hydrogen_enabled else [])

  261.     +

  262.     ([{'name': ('matrix-' + matrix_homeserver_implementation + '.service'), 'priority': 1000, 'groups': ['matrix', 'homeservers', matrix_homeserver_implementation]}] if matrix_homeserver_enabled else [])

  263.     +

  264.     ([{'name': 'matrix-corporal.service', 'priority': 1500, 'groups': ['matrix', 'corporal']}] if matrix_corporal_enabled else [])

  265.     +

  266.     ([{'name': 'matrix-coturn.service', 'priority': 4000, 'groups': ['matrix', 'coturn']}] if matrix_coturn_enabled else [])

  267.     +

  268.     ([{'name': 'matrix-coturn-reload.timer', 'priority': 5000, 'groups': ['matrix', 'coturn']}] if (matrix_coturn_enabled and matrix_coturn_tls_enabled) else [])

  269.     +

  270.     ([{'name': 'matrix-dimension.service', 'priority': 2500, 'groups': ['matrix', 'integration-managers', 'dimension']}] if matrix_dimension_enabled else [])

  271.     +

  272.     ([{'name': 'matrix-dynamic-dns.service', 'priority': 5000, 'groups': ['matrix', 'dynamic-dns']}] if matrix_dynamic_dns_enabled else [])

  273.     +

  274.     ([{'name': 'matrix-email2matrix.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'email2matrix']}] if matrix_email2matrix_enabled else [])

  275.     +

  276.     ([{'name': 'matrix-etherpad.service', 'priority': 4000, 'groups': ['matrix', 'etherpad']}] if matrix_etherpad_enabled else [])

  277.     +

  278.     ([{'name': 'matrix-grafana.service', 'priority': 4000, 'groups': ['matrix', 'monitoring', 'grafana']}] if matrix_grafana_enabled else [])

  279.     +

  280.     ([{'name': 'matrix-jitsi-web.service', 'priority': 4200, 'groups': ['matrix', 'jitsi', 'jitsi-web']}] if matrix_jitsi_enabled else [])

  281.     +

  282.     ([{'name': 'matrix-jitsi-prosody.service', 'priority': 4000, 'groups': ['matrix', 'jitsi', 'jitsi-prosody']}] if matrix_jitsi_enabled else [])

  283.     +

  284.     ([{'name': 'matrix-jitsi-jicofo.service', 'priority': 4100, 'groups': ['matrix', 'jitsi', 'jitsi-jicofo']}] if matrix_jitsi_enabled else [])

  285.     +

  286.     ([{'name': 'matrix-jitsi-jvb.service', 'priority': 4100, 'groups': ['matrix', 'jitsi', 'jitsi-jvb']}] if matrix_jitsi_enabled else [])

  287.     +

  288.     ([{'name': 'matrix-ldap-registration-proxy.service', 'priority': 2000, 'groups': ['matrix', 'ldap-registration-proxy']}] if matrix_ldap_registration_proxy_enabled else [])

  289.     +

  290.     ([{'name': 'matrix-ma1sd.service', 'priority': 2000, 'groups': ['matrix', 'ma1sd']}] if matrix_ma1sd_enabled else [])

  291.     +

  292.     ([{'name': 'matrix-mailer.service', 'priority': 2000, 'groups': ['matrix', 'mailer']}] if matrix_mailer_enabled else [])

  293.     +

  294.     ([{'name': 'matrix-nginx-proxy.service', 'priority': 3000, 'groups': ['matrix', 'nginx', 'reverse-proxies']}] if matrix_nginx_proxy_enabled else [])

  295.     +

  296.     (matrix_ssl_renewal_systemd_units_list | selectattr('applicable') | selectattr('enableable') | list )

  297.     +

  298.     ([{'name': 'matrix-ntfy.service', 'priority': 800, 'groups': ['matrix', 'ntfy']}] if matrix_ntfy_enabled else [])

  299.     +

  300.     ([{'name': (devture_postgres_identifier + '.service'), 'priority': 500, 'groups': ['matrix', 'postgres']}] if devture_postgres_enabled else [])

  301.     +

  302.     ([{'name': (devture_postgres_backup_identifier + '.service'), 'priority': 5000, 'groups': ['matrix', 'backup', 'postgres-backup']}] if devture_postgres_backup_enabled else [])

  303.     +

  304.     ([{'name': 'matrix-prometheus.service', 'priority': 4000, 'groups': ['matrix', 'monitoring', 'prometheus', 'prometheus-core']}] if matrix_prometheus_enabled else [])

  305.     +

  306.     ([{'name': (prometheus_node_exporter_identifier + '.service'), 'priority': 3900, 'groups': ['matrix', 'monitoring', 'prometheus', 'prometheus-exporters']}] if prometheus_node_exporter_enabled else [])

  307.     +

  308.     ([{'name': (prometheus_postgres_exporter_identifier + '.service'), 'priority': 3900, 'groups': ['matrix', 'monitoring', 'prometheus', 'prometheus-exporters']}] if prometheus_postgres_exporter_enabled else [])

  309.     +

  310.     ([{'name': 'matrix-prometheus-nginxlog-exporter.service', 'priority': 3900, 'groups': ['matrix', 'monitoring', 'prometheus', 'prometheus-exporters']}] if matrix_prometheus_nginxlog_exporter_enabled else [])

  311.     +

  312.     ([{'name': 'matrix-redis', 'priority': 750, 'groups': ['matrix', 'redis']}] if matrix_redis_enabled else [])

  313.     +

  314.     ([{'name': 'matrix-registration.service', 'priority': 4000, 'groups': ['matrix', 'registration']}] if matrix_registration_enabled else [])

  315.     +

  316.     ([{'name': 'matrix-sygnal.service', 'priority': 800, 'groups': ['matrix', 'sygnal']}] if matrix_sygnal_enabled else [])

  317.     +

  318.     ([{'name': 'matrix-goofys.service', 'priority': 800, 'groups': ['matrix', 'goofys']}] if matrix_s3_media_store_enabled else [])

  319.     +

  320.     ([{'name': 'matrix-synapse-s3-storage-provider-migrate.timer', 'priority': 5000, 'groups': ['matrix']}] if matrix_synapse_ext_synapse_s3_storage_provider_enabled else [])

  321.     +

  322.     ([{'name': 'matrix-synapse-admin.service', 'priority': 4000, 'groups': ['matrix', 'synapse-admin']}] if matrix_synapse_admin_enabled else [])

  323.     +

  324.     ([{'name': 'matrix-synapse-reverse-proxy-companion.service', 'priority': 1500, 'groups': ['matrix', 'homeservers', 'synapse', 'reverse-proxies']}] if matrix_synapse_reverse_proxy_companion_enabled else [])

  325.     +

  326.     ([{'name': 'matrix-user-verification-service.service', 'priority': 800, 'groups': ['matrix', 'matrix-user-verification-service']}] if matrix_user_verification_service_enabled else [])

  327.   }}

  328. 

  329. ########################################################################

  330. #                                                                      #

  331. # /com.devture.ansible.role.systemd_service_manager                    #

  332. #                                                                      #

  333. ########################################################################

  334. 

  335. 

  336. ########################################################################

  337. #                                                                      #

  338. # com.devture.ansible.role.timesync                                    #

  339. #                                                                      #

  340. ########################################################################

  341. 

  342. # To completely disable installing systemd-timesyncd/ntpd, use `devture_timesync_installation_enabled: false`.

  343. 

  344. ########################################################################

  345. #                                                                      #

  346. # /com.devture.ansible.role.timesync                                   #

  347. #                                                                      #

  348. ########################################################################

  349. 

  350. 

  351. 

  352. ######################################################################

  353. #

  354. # com.devture.ansible.role.playbook_state_preserver

  355. #

  356. ######################################################################

  357. 

  358. # To completely disable this feature, use `devture_playbook_state_preserver_enabled: false`.

  359. 

  360. devture_playbook_state_preserver_uid: "{{ matrix_user_uid }}"

  361. devture_playbook_state_preserver_gid: "{{ matrix_user_gid }}"

  362. 

  363. devture_playbook_state_preserver_vars_preservation_dst: "{{ matrix_base_data_path }}/vars.yml"

  364. 

  365. devture_playbook_state_preserver_commit_hash_preservation_dst: "{{ matrix_base_data_path }}/git_hash.yml"

  366. 

  367. ######################################################################

  368. #

  369. # /com.devture.ansible.role.playbook_state_preserver

  370. #

  371. ######################################################################

  372. 

  373. 

  374. 

  375. ######################################################################

  376. #

  377. # matrix-base

  378. #

  379. ######################################################################

  380. 

  381. matrix_identity_server_url: "{{ ('https://' + matrix_server_fqn_matrix) if matrix_ma1sd_enabled else None }}"

  382. 

  383. matrix_homeserver_container_url: |-

  384.   {{

  385.     'http://matrix-nginx-proxy:12080' if matrix_nginx_proxy_enabled else {

  386.       'synapse': ('http://matrix-synapse-reverse-proxy-companion:8008' if matrix_synapse_reverse_proxy_companion_enabled else 'http://matrix-synapse:'+ matrix_synapse_container_client_api_port|string),

  387.       'dendrite': ('http://matrix-dendrite:' + matrix_dendrite_http_bind_port|string),

  388.       'conduit': ('http://matrix-conduit:' + matrix_conduit_port_number|string),

  389.     }[matrix_homeserver_implementation]

  390.   }}

  391. 

  392. matrix_homeserver_container_federation_url: |-

  393.   {{

  394.     'http://matrix-nginx-proxy:12088' if matrix_nginx_proxy_enabled else {

  395.       'synapse': ('http://matrix-synapse-reverse-proxy-companion:8048' if matrix_synapse_reverse_proxy_companion_enabled else 'http://matrix-synapse:'+ matrix_synapse_container_federation_api_plain_port|string),

  396.       'dendrite': ('http://matrix-dendrite:' + matrix_dendrite_http_bind_port|string),

  397.       'conduit': ('http://matrix-conduit:' + matrix_conduit_port_number|string),

  398.     }[matrix_homeserver_implementation]

  399.   }}

  400. 

  401. matrix_integration_manager_rest_url: "{{ matrix_dimension_integrations_rest_url if matrix_dimension_enabled else None }}"

  402. matrix_integration_manager_ui_url: "{{ matrix_dimension_integrations_ui_url if matrix_dimension_enabled else None }}"

  403. 

  404. ######################################################################

  405. #

  406. # /matrix-base

  407. #

  408. ######################################################################

  409. 

  410. 

  411. ######################################################################

  412. #

  413. # matrix-bridge-appservice-discord

  414. #

  415. ######################################################################

  416. 

  417. # We don't enable bridges by default.

  418. matrix_appservice_discord_enabled: false

  419. 

  420. # Normally, matrix-nginx-proxy is enabled and nginx can reach matrix-appservice-discord over the container network.

  421. # If matrix-nginx-proxy is not enabled, or you otherwise have a need for it, you can expose

  422. # matrix-appservice-discord's client-server port to the local host.

  423. matrix_appservice_discord_container_http_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else '127.0.0.1:9005' }}"

  424. 

  425. # If the homeserver disables presence, it's likely better (less wasteful) to also disable presence on the bridge side.

  426. matrix_appservice_discord_bridge_disablePresence: "{{ not matrix_synapse_presence_enabled }}"

  427. 

  428. matrix_appservice_discord_systemd_required_services_list: |

  429.   {{

  430.     ['docker.service']

  431.     +

  432.     ['matrix-' + matrix_homeserver_implementation + '.service']

  433.     +

  434.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  435.     +

  436.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  437.   }}

  438. 

  439. matrix_appservice_discord_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'discord.as.token', rounds=655555) | to_uuid }}"

  440. 

  441. matrix_appservice_discord_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'discord.hs.token', rounds=655555) | to_uuid }}"

  442. 

  443. # We only make this use Postgres if our own Postgres server is enabled.

  444. # It's only then (for now) that we can automatically create the necessary database and user for this service.

  445. matrix_appservice_discord_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  446. matrix_appservice_discord_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  447. matrix_appservice_discord_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'as.discord.db', rounds=655555) | to_uuid }}"

  448. 

  449. ######################################################################

  450. #

  451. # /matrix-bridge-appservice-discord

  452. #

  453. ######################################################################

  454. 

  455. 

  456. ######################################################################

  457. #

  458. # matrix-appservice-webhooks

  459. #

  460. ######################################################################

  461. 

  462. # We don't enable bridges by default.

  463. matrix_appservice_webhooks_enabled: false

  464. 

  465. matrix_appservice_webhooks_container_image_self_build: "{{ matrix_architecture != 'amd64' }}"

  466. 

  467. # Normally, matrix-nginx-proxy is enabled and nginx can reach matrix-appservice-webhooks over the container network.

  468. # If matrix-nginx-proxy is not enabled, or you otherwise have a need for it, you can expose

  469. # matrix-appservice-webhooks' client-server port to the local host.

  470. matrix_appservice_webhooks_container_http_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else ('127.0.0.1:' ~ matrix_appservice_webhooks_matrix_port) }}"

  471. 

  472. matrix_appservice_webhooks_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'webhook.as.token', rounds=655555) | to_uuid }}"

  473. 

  474. matrix_appservice_webhooks_homeserver_url: "{{ matrix_homeserver_container_url }}"

  475. matrix_appservice_webhooks_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'webhook.hs.token', rounds=655555) | to_uuid }}"

  476. 

  477. matrix_appservice_webhooks_id_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'webhook.id.token', rounds=655555) | to_uuid }}"

  478. 

  479. matrix_appservice_webhooks_systemd_required_services_list: |

  480.   {{

  481.     ['docker.service']

  482.     +

  483.     ['matrix-' + matrix_homeserver_implementation + '.service']

  484.     +

  485.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  486.   }}

  487. 

  488. ######################################################################

  489. #

  490. # /matrix-appservice-webhooks

  491. #

  492. ######################################################################

  493. 

  494. 

  495. ######################################################################

  496. #

  497. # matrix-appservice-slack

  498. #

  499. ######################################################################

  500. 

  501. # We don't enable bridges by default.

  502. matrix_appservice_slack_enabled: false

  503. 

  504. matrix_appservice_slack_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"

  505. 

  506. # Normally, matrix-nginx-proxy is enabled and nginx can reach matrix-appservice-slack over the container network.

  507. # If matrix-nginx-proxy is not enabled, or you otherwise have a need for it, you can expose

  508. # matrix-appservice-slack's client-server port to the local host.

  509. matrix_appservice_slack_container_http_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else ('127.0.0.1:' ~ matrix_appservice_slack_slack_port) }}"

  510. 

  511. matrix_appservice_slack_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'slack.as.token', rounds=655555) | to_uuid }}"

  512. 

  513. matrix_appservice_slack_homeserver_url: "{{ matrix_homeserver_container_url }}"

  514. matrix_appservice_slack_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'slack.hs.token', rounds=655555) | to_uuid }}"

  515. 

  516. matrix_appservice_slack_id_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'slack.id.token', rounds=655555) | to_uuid }}"

  517. 

  518. matrix_appservice_slack_systemd_required_services_list: |

  519.   {{

  520.     ['docker.service']

  521.     +

  522.     ['matrix-' + matrix_homeserver_implementation + '.service']

  523.     +

  524.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  525.   }}

  526. 

  527. # Postgres is the default, except if not using internal Postgres server

  528. matrix_appservice_slack_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'nedb' }}"

  529. matrix_appservice_slack_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  530. matrix_appservice_slack_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'as.slack.db', rounds=655555) | to_uuid }}"

  531. 

  532. ######################################################################

  533. #

  534. # /matrix-bridge-appservice-slack

  535. #

  536. ######################################################################

  537. 

  538. ######################################################################

  539. #

  540. # matrix-bridge-appservice-irc

  541. #

  542. ######################################################################

  543. 

  544. # We don't enable bridges by default.

  545. matrix_appservice_irc_enabled: false

  546. 

  547. matrix_appservice_irc_container_image_self_build: "{{ matrix_architecture != 'amd64' }}"

  548. 

  549. # Normally, matrix-nginx-proxy is enabled and nginx can reach matrix-appservice-irc over the container network.

  550. # If matrix-nginx-proxy is not enabled, or you otherwise have a need for it, you can expose

  551. # matrix-appservice-irc's client-server port to the local host.

  552. matrix_appservice_irc_container_http_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else '127.0.0.1:9999' }}"

  553. 

  554. # The IRC bridge docs say that if homeserver presence is disabled, it's better to also disable

  555. # IRC bridge presence, for performance reasons.

  556. matrix_appservice_irc_homeserver_enablePresence: "{{ matrix_synapse_presence_enabled }}"

  557. 

  558. matrix_appservice_irc_systemd_required_services_list: |

  559.   {{

  560.     ['docker.service']

  561.     +

  562.     ['matrix-' + matrix_homeserver_implementation + '.service']

  563.     +

  564.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  565.   }}

  566. 

  567. matrix_appservice_irc_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'irc.as.token', rounds=655555) | to_uuid }}"

  568. 

  569. matrix_appservice_irc_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'irc.hs.token', rounds=655555) | to_uuid }}"

  570. 

  571. matrix_appservice_irc_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'nedb' }}"

  572. matrix_appservice_irc_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  573. matrix_appservice_irc_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'as.irc.db', rounds=655555) | to_uuid }}"

  574. 

  575. 

  576. ######################################################################

  577. #

  578. # /matrix-bridge-appservice-irc

  579. #

  580. ######################################################################

  581. 

  582. ######################################################################

  583. #

  584. # matrix-bridge-appservice-kakaotalk

  585. #

  586. ######################################################################

  587. 

  588. # We don't enable bridges by default.

  589. matrix_appservice_kakaotalk_enabled: false

  590. 

  591. matrix_appservice_kakaotalk_systemd_required_services_list: |

  592.   {{

  593.     ['docker.service']

  594.     +

  595.     ['matrix-appservice-kakaotalk-node.service']

  596.     +

  597.     ['matrix-' + matrix_homeserver_implementation + '.service']

  598.     +

  599.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  600.     +

  601.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  602.   }}

  603. 

  604. matrix_appservice_kakaotalk_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'as.kakao.hs', rounds=655555) | to_uuid }}"

  605. 

  606. matrix_appservice_kakaotalk_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'as.kakao.hs', rounds=655555) | to_uuid }}"

  607. 

  608. matrix_appservice_kakaotalk_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  609. 

  610. matrix_appservice_kakaotalk_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  611. matrix_appservice_kakaotalk_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  612. matrix_appservice_kakaotalk_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'as.kakao.db', rounds=655555) | to_uuid }}"

  613. 

  614. ######################################################################

  615. #

  616. # /matrix-bridge-appservice-kakaotalk

  617. #

  618. ######################################################################

  619. 

  620. 

  621. ######################################################################

  622. #

  623. # matrix-bridge-beeper-linkedin

  624. #

  625. ######################################################################

  626. 

  627. # We don't enable bridges by default.

  628. matrix_beeper_linkedin_enabled: false

  629. 

  630. matrix_beeper_linkedin_container_image_self_build: "{{ matrix_architecture not in ['amd64'] }}"

  631. 

  632. matrix_beeper_linkedin_systemd_required_services_list: |

  633.   {{

  634.     ['docker.service']

  635.     +

  636.     ['matrix-' + matrix_homeserver_implementation + '.service']

  637.     +

  638.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  639.     +

  640.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  641.   }}

  642. 

  643. matrix_beeper_linkedin_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'linked.as.token', rounds=655555) | to_uuid }}"

  644. 

  645. matrix_beeper_linkedin_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'linked.hs.token', rounds=655555) | to_uuid }}"

  646. 

  647. matrix_beeper_linkedin_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  648. 

  649. matrix_beeper_linkedin_bridge_presence: "{{ matrix_synapse_presence_enabled if matrix_synapse_enabled else true }}"

  650. 

  651. matrix_beeper_linkedin_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  652. matrix_beeper_linkedin_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'maulinkedin.db', rounds=655555) | to_uuid }}"

  653. 

  654. ######################################################################

  655. #

  656. # /matrix-bridge-beeper-linkedin

  657. #

  658. ######################################################################

  659. 

  660. ######################################################################

  661. #

  662. # matrix-bridge-go-skype-bridge

  663. #

  664. ######################################################################

  665. 

  666. # We don't enable bridges by default.

  667. matrix_go_skype_bridge_enabled: false

  668. 

  669. matrix_go_skype_bridge_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"

  670. 

  671. matrix_go_skype_bridge_systemd_required_services_list: |

  672.   {{

  673.     ['docker.service']

  674.     +

  675.     ['matrix-' + matrix_homeserver_implementation + '.service']

  676.     +

  677.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  678.     +

  679.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  680.   }}

  681. 

  682. matrix_go_skype_bridge_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'skype.as.token', rounds=655555) | to_uuid }}"

  683. 

  684. matrix_go_skype_bridge_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'skype.hs.token', rounds=655555) | to_uuid }}"

  685. 

  686. matrix_go_skype_bridge_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  687. 

  688. # Postgres is the default, except if not using internal Postgres server

  689. matrix_go_skype_bridge_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  690. matrix_go_skype_bridge_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  691. matrix_go_skype_bridge_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'goskype.db', rounds=655555) | to_uuid }}"

  692. 

  693. ######################################################################

  694. #

  695. # /matrix-bridge-go-skype-bridge

  696. #

  697. ######################################################################

  698. 

  699. 

  700. ######################################################################

  701. #

  702. # matrix-bridge-mautrix-discord

  703. #

  704. ######################################################################

  705. 

  706. # We don't enable bridges by default.

  707. matrix_mautrix_discord_enabled: false

  708. 

  709. matrix_mautrix_discord_container_image_self_build: "{{ matrix_architecture not in ['arm64', 'amd64'] }}"

  710. 

  711. matrix_mautrix_discord_systemd_required_services_list: |

  712.   {{

  713.     ['docker.service']

  714.     +

  715.     ['matrix-' + matrix_homeserver_implementation + '.service']

  716.     +

  717.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  718.     +

  719.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  720.   }}

  721. 

  722. matrix_mautrix_discord_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'maudisc.as.tok', rounds=655555) | to_uuid }}"

  723. 

  724. matrix_mautrix_discord_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'maudisc.hs.tok', rounds=655555) | to_uuid }}"

  725. 

  726. matrix_mautrix_discord_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  727. 

  728. # Postgres is the default, except if not using internal Postgres server

  729. matrix_mautrix_discord_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  730. matrix_mautrix_discord_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  731. matrix_mautrix_discord_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'maudiscord.db', rounds=655555) | to_uuid }}"

  732. 

  733. ######################################################################

  734. #

  735. # /matrix-bridge-mautrix-discord

  736. #

  737. ######################################################################

  738. 

  739. 

  740. ######################################################################

  741. #

  742. # matrix-bridge-mautrix-slack

  743. #

  744. ######################################################################

  745. 

  746. # We don't enable bridges by default.

  747. matrix_mautrix_slack_enabled: false

  748. 

  749. matrix_mautrix_slack_container_image_self_build: "{{ matrix_architecture not in ['arm64', 'amd64'] }}"

  750. 

  751. matrix_mautrix_slack_systemd_required_services_list: |

  752.   {{

  753.     ['docker.service']

  754.     +

  755.     ['matrix-' + matrix_homeserver_implementation + '.service']

  756.     +

  757.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  758.     +

  759.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  760.   }}

  761. 

  762. matrix_mautrix_slack_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mauslack.as.tok', rounds=655555) | to_uuid }}"

  763. 

  764. matrix_mautrix_slack_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mauslack.hs.tok', rounds=655555) | to_uuid }}"

  765. 

  766. matrix_mautrix_slack_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  767. 

  768. # Postgres is the default, except if not using internal Postgres server

  769. matrix_mautrix_slack_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  770. matrix_mautrix_slack_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  771. matrix_mautrix_slack_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mauslack.db', rounds=655555) | to_uuid }}"

  772. 

  773. ######################################################################

  774. #

  775. # /matrix-bridge-mautrix-slack

  776. #

  777. ######################################################################

  778. 

  779. 

  780. ######################################################################

  781. #

  782. # matrix-bridge-mautrix-facebook

  783. #

  784. ######################################################################

  785. 

  786. # We don't enable bridges by default.

  787. matrix_mautrix_facebook_enabled: false

  788. 

  789. matrix_mautrix_facebook_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"

  790. 

  791. matrix_mautrix_facebook_systemd_required_services_list: |

  792.   {{

  793.     ['docker.service']

  794.     +

  795.     ['matrix-' + matrix_homeserver_implementation + '.service']

  796.     +

  797.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  798.     +

  799.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  800.   }}

  801. 

  802. matrix_mautrix_facebook_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'fb.as.token', rounds=655555) | to_uuid }}"

  803. 

  804. matrix_mautrix_facebook_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'fb.hs.token', rounds=655555) | to_uuid }}"

  805. 

  806. matrix_mautrix_facebook_public_endpoint: "/{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'facebook', rounds=655555) | to_uuid }}"

  807. 

  808. matrix_mautrix_facebook_container_http_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else '127.0.0.1:9008' }}"

  809. 

  810. matrix_mautrix_facebook_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  811. 

  812. matrix_mautrix_facebook_bridge_presence: "{{ matrix_synapse_presence_enabled if matrix_synapse_enabled else true }}"

  813. 

  814. # People using an external Prometheus server will need to toggle all of these to be able to consume metrics remotely:

  815. # - `matrix_mautrix_facebook_metrics_enabled`

  816. # - `matrix_mautrix_facebook_proxying_metrics_enabled`

  817. # - `matrix_nginx_proxy_proxy_matrix_metrics_enabled`

  818. matrix_mautrix_facebook_metrics_enabled: "{{ matrix_prometheus_enabled }}"

  819. 

  820. # We'd like to force-set people with external Postgres to SQLite, so the bridge role can complain

  821. # and point them to a migration path.

  822. matrix_mautrix_facebook_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  823. matrix_mautrix_facebook_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  824. matrix_mautrix_facebook_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mau.fb.db', rounds=655555) | to_uuid }}"

  825. 

  826. ######################################################################

  827. #

  828. # /matrix-bridge-mautrix-facebook

  829. #

  830. ######################################################################

  831. 

  832. 

  833. ######################################################################

  834. #

  835. # matrix-bridge-mautrix-googlechat

  836. #

  837. ######################################################################

  838. 

  839. # We don't enable bridges by default.

  840. matrix_mautrix_googlechat_enabled: false

  841. 

  842. matrix_mautrix_googlechat_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"

  843. 

  844. matrix_mautrix_googlechat_systemd_required_services_list: |

  845.   {{

  846.     ['docker.service']

  847.     +

  848.     ['matrix-' + matrix_homeserver_implementation + '.service']

  849.     +

  850.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  851.     +

  852.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  853.   }}

  854. 

  855. matrix_mautrix_googlechat_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'gc.as.token', rounds=655555) | to_uuid }}"

  856. 

  857. matrix_mautrix_googlechat_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'gc.hs.token', rounds=655555) | to_uuid }}"

  858. 

  859. matrix_mautrix_googlechat_container_http_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else '127.0.0.1:9007' }}"

  860. 

  861. matrix_mautrix_googlechat_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  862. 

  863. # Postgres is the default, except if not using internal Postgres server

  864. matrix_mautrix_googlechat_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  865. matrix_mautrix_googlechat_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  866. matrix_mautrix_googlechat_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mau.gc.db', rounds=655555) | to_uuid }}"

  867. 

  868. ######################################################################

  869. #

  870. # /matrix-bridge-mautrix-googlechat

  871. #

  872. ######################################################################

  873. 

  874. 

  875. ######################################################################

  876. #

  877. # matrix-bridge-mautrix-hangouts

  878. #

  879. ######################################################################

  880. 

  881. # We don't enable bridges by default.

  882. matrix_mautrix_hangouts_enabled: false

  883. 

  884. matrix_mautrix_hangouts_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"

  885. 

  886. matrix_mautrix_hangouts_systemd_required_services_list: |

  887.   {{

  888.     ['docker.service']

  889.     +

  890.     ['matrix-' + matrix_homeserver_implementation + '.service']

  891.     +

  892.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  893.     +

  894.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  895.   }}

  896. 

  897. matrix_mautrix_hangouts_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'ho.as.token', rounds=655555) | to_uuid }}"

  898. 

  899. matrix_mautrix_hangouts_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'ho.hs.token', rounds=655555) | to_uuid }}"

  900. 

  901. matrix_mautrix_hangouts_container_http_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else '127.0.0.1:9007' }}"

  902. 

  903. matrix_mautrix_hangouts_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  904. 

  905. # Postgres is the default, except if not using internal Postgres server

  906. matrix_mautrix_hangouts_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  907. matrix_mautrix_hangouts_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  908. matrix_mautrix_hangouts_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mau.hangouts.db', rounds=655555) | to_uuid }}"

  909. 

  910. ######################################################################

  911. #

  912. # /matrix-bridge-mautrix-hangouts

  913. #

  914. ######################################################################

  915. 

  916. 

  917. ######################################################################

  918. #

  919. # matrix-bridge-mautrix-instagram

  920. #

  921. ######################################################################

  922. 

  923. # We don't enable bridges by default.

  924. matrix_mautrix_instagram_enabled: false

  925. 

  926. matrix_mautrix_instagram_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"

  927. 

  928. matrix_mautrix_instagram_systemd_required_services_list: |

  929.   {{

  930.     ['docker.service']

  931.     +

  932.     ['matrix-' + matrix_homeserver_implementation + '.service']

  933.     +

  934.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  935.     +

  936.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  937.   }}

  938. 

  939. matrix_mautrix_instagram_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'ig.as.token', rounds=655555) | to_uuid }}"

  940. 

  941. matrix_mautrix_instagram_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'ig.hs.token', rounds=655555) | to_uuid }}"

  942. 

  943. matrix_mautrix_instagram_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  944. 

  945. matrix_mautrix_instagram_bridge_presence: "{{ matrix_synapse_presence_enabled if matrix_synapse_enabled else true }}"

  946. 

  947. # People using an external Prometheus server will need to toggle all of these to be able to consume metrics remotely:

  948. # - `matrix_mautrix_instagram_metrics_enabled`

  949. # - `matrix_mautrix_instagram_proxying_metrics_enabled`

  950. # - `matrix_nginx_proxy_proxy_matrix_metrics_enabled`

  951. matrix_mautrix_instagram_metrics_enabled: "{{ matrix_prometheus_enabled }}"

  952. 

  953. # We'd like to force-set people with external Postgres to SQLite, so the bridge role can complain

  954. # and point them to a migration path.

  955. matrix_mautrix_instagram_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  956. matrix_mautrix_instagram_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  957. matrix_mautrix_instagram_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mau.ig.db', rounds=655555) | to_uuid }}"

  958. 

  959. ######################################################################

  960. #

  961. # /matrix-bridge-mautrix-instagram

  962. #

  963. ######################################################################

  964. 

  965. 

  966. ######################################################################

  967. #

  968. # matrix-bridge-mautrix-signal

  969. #

  970. ######################################################################

  971. 

  972. # We don't enable bridges by default.

  973. matrix_mautrix_signal_enabled: false

  974. 

  975. matrix_mautrix_signal_systemd_required_services_list: |

  976.   {{

  977.     ['docker.service']

  978.     +

  979.     ['matrix-' + matrix_homeserver_implementation + '.service']

  980.     +

  981.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  982.     +

  983.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  984.     +

  985.     ['matrix-mautrix-signal-daemon.service']

  986.   }}

  987. 

  988. matrix_mautrix_signal_homeserver_domain: '{{ matrix_domain }}'

  989. 

  990. matrix_mautrix_signal_homeserver_address: "{{ matrix_homeserver_container_url }}"

  991. 

  992. matrix_mautrix_signal_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'si.hs.token', rounds=655555) | to_uuid }}"

  993. 

  994. matrix_mautrix_signal_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'si.as.token', rounds=655555) | to_uuid }}"

  995. 

  996. matrix_mautrix_signal_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  997. 

  998. # People using an external Prometheus server will need to toggle all of these to be able to consume metrics remotely:

  999. # - `matrix_mautrix_signal_metrics_enabled`

  1000. # - `matrix_mautrix_signal_proxying_metrics_enabled`

  1001. # - `matrix_nginx_proxy_proxy_matrix_metrics_enabled`

  1002. matrix_mautrix_signal_metrics_enabled: "{{ matrix_prometheus_enabled }}"

  1003. 

  1004. matrix_mautrix_signal_database_engine: 'postgres'

  1005. matrix_mautrix_signal_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1006. matrix_mautrix_signal_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mau.signal.db', rounds=655555) | to_uuid }}"

  1007. 

  1008. matrix_mautrix_signal_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"

  1009. matrix_mautrix_signal_daemon_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"

  1010. 

  1011. ######################################################################

  1012. #

  1013. # /matrix-bridge-mautrix-signal

  1014. #

  1015. ######################################################################

  1016. 

  1017. ######################################################################

  1018. #

  1019. # matrix-bridge-mautrix-telegram

  1020. #

  1021. ######################################################################

  1022. 

  1023. # We don't enable bridges by default.

  1024. matrix_mautrix_telegram_enabled: false

  1025. 

  1026. # Images are multi-arch (amd64 and arm64, but not arm32).

  1027. matrix_mautrix_telegram_container_image_self_build: "{{ matrix_architecture not in ['arm64', 'amd64'] }}"

  1028. matrix_telegram_lottieconverter_container_image_self_build: "{{ matrix_architecture not in ['arm64', 'amd64'] }}"

  1029. matrix_telegram_lottieconverter_container_image_self_build_mask_arch: "{{ matrix_architecture != 'amd64' }}"

  1030. 

  1031. matrix_mautrix_telegram_systemd_required_services_list: |

  1032.   {{

  1033.     ['docker.service']

  1034.     +

  1035.     ['matrix-' + matrix_homeserver_implementation + '.service']

  1036.     +

  1037.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  1038.     +

  1039.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1040.   }}

  1041. 

  1042. matrix_mautrix_telegram_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'telegr.as.token', rounds=655555) | to_uuid }}"

  1043. 

  1044. matrix_mautrix_telegram_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'telegr.hs.token', rounds=655555) | to_uuid }}"

  1045. 

  1046. matrix_mautrix_telegram_public_endpoint: "/{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'telegram', rounds=655555) | to_uuid }}"

  1047. 

  1048. matrix_mautrix_telegram_container_http_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else '127.0.0.1:9006' }}"

  1049. 

  1050. matrix_mautrix_telegram_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  1051. 

  1052. # Postgres is the default, except if not using internal Postgres server

  1053. matrix_mautrix_telegram_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  1054. matrix_mautrix_telegram_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1055. matrix_mautrix_telegram_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mau.telegram.db', rounds=655555) | to_uuid }}"

  1056. 

  1057. ######################################################################

  1058. #

  1059. # /matrix-bridge-mautrix-telegram

  1060. #

  1061. ######################################################################

  1062. 

  1063. ######################################################################

  1064. #

  1065. # matrix-bridge-mautrix-twitter

  1066. #

  1067. ######################################################################

  1068. 

  1069. # We don't enable bridges by default.

  1070. matrix_mautrix_twitter_enabled: false

  1071. 

  1072. matrix_mautrix_twitter_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"

  1073. 

  1074. matrix_mautrix_twitter_systemd_required_services_list: |

  1075.   {{

  1076.     ['docker.service']

  1077.     +

  1078.     ['matrix-' + matrix_homeserver_implementation + '.service']

  1079.     +

  1080.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  1081.     +

  1082.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1083.   }}

  1084. 

  1085. matrix_mautrix_twitter_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'twt.as.token', rounds=655555) | to_uuid }}"

  1086. 

  1087. matrix_mautrix_twitter_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'twt.hs.token', rounds=655555) | to_uuid }}"

  1088. 

  1089. matrix_mautrix_twitter_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  1090. 

  1091. matrix_mautrix_twitter_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1092. matrix_mautrix_twitter_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mau.twt.db', rounds=655555) | to_uuid if devture_postgres_enabled else '' }}"

  1093. 

  1094. ######################################################################

  1095. #

  1096. # /matrix-bridge-mautrix-twitter

  1097. #

  1098. ######################################################################

  1099. 

  1100. ######################################################################

  1101. #

  1102. # matrix-bridge-mautrix-whatsapp

  1103. #

  1104. ######################################################################

  1105. 

  1106. # We don't enable bridges by default.

  1107. matrix_mautrix_whatsapp_enabled: false

  1108. 

  1109. matrix_mautrix_whatsapp_container_image_self_build: "{{ matrix_architecture not in ['arm64', 'amd64'] }}"

  1110. 

  1111. matrix_mautrix_whatsapp_systemd_required_services_list: |

  1112.   {{

  1113.     ['docker.service']

  1114.     +

  1115.     ['matrix-' + matrix_homeserver_implementation + '.service']

  1116.     +

  1117.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  1118.     +

  1119.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1120.   }}

  1121. 

  1122. matrix_mautrix_whatsapp_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'whats.as.token', rounds=655555) | to_uuid }}"

  1123. 

  1124. matrix_mautrix_whatsapp_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'whats.hs.token', rounds=655555) | to_uuid }}"

  1125. 

  1126. matrix_mautrix_whatsapp_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  1127. 

  1128. # People using an external Prometheus server will need to toggle all of these to be able to consume metrics remotely:

  1129. # - `matrix_mautrix_twitter_metrics_enabled`

  1130. # - `matrix_mautrix_twitter_proxying_metrics_enabled`

  1131. # - `matrix_nginx_proxy_proxy_matrix_metrics_enabled`

  1132. matrix_mautrix_twitter_metrics_enabled: "{{ matrix_prometheus_enabled }}"

  1133. 

  1134. # Postgres is the default, except if not using internal Postgres server

  1135. matrix_mautrix_whatsapp_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  1136. matrix_mautrix_whatsapp_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1137. matrix_mautrix_whatsapp_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mauwhatsapp.db', rounds=655555) | to_uuid }}"

  1138. 

  1139. ######################################################################

  1140. #

  1141. # /matrix-bridge-mautrix-whatsapp

  1142. #

  1143. ######################################################################

  1144. 

  1145. ######################################################################

  1146. #

  1147. # matrix-sms-bridge

  1148. #

  1149. ######################################################################

  1150. 

  1151. # We don't enable bridges by default.

  1152. matrix_sms_bridge_enabled: false

  1153. 

  1154. matrix_sms_bridge_systemd_required_services_list: |

  1155.   {{

  1156.     ['docker.service']

  1157.     +

  1158.     ['matrix-' + matrix_homeserver_implementation + '.service']

  1159.     +

  1160.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1161.   }}

  1162. 

  1163. matrix_sms_bridge_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'sms.as.token', rounds=655555) | to_uuid }}"

  1164. 

  1165. matrix_sms_bridge_homeserver_port: "{{ matrix_synapse_container_client_api_port }}"

  1166. matrix_sms_bridge_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'sms.hs.token', rounds=655555) | to_uuid }}"

  1167. 

  1168. ######################################################################

  1169. #

  1170. # /matrix-sms-bridge

  1171. #

  1172. ######################################################################

  1173. 

  1174. ######################################################################

  1175. #

  1176. # matrix-bridge-heisenbridge

  1177. #

  1178. ######################################################################

  1179. 

  1180. # We don't enable bridges by default.

  1181. matrix_heisenbridge_enabled: false

  1182. 

  1183. matrix_heisenbridge_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'heisen.as.tok', rounds=655555) | to_uuid }}"

  1184. 

  1185. matrix_heisenbridge_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'heisen.hs.tok', rounds=655555) | to_uuid }}"

  1186. 

  1187. matrix_heisenbridge_systemd_wanted_services_list: |

  1188.   {{

  1189.     ['matrix-' + matrix_homeserver_implementation + '.service']

  1190.     +

  1191.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1192.   }}

  1193. 

  1194. ######################################################################

  1195. #

  1196. # /matrix-bridge-heisenbridge

  1197. #

  1198. ######################################################################

  1199. 

  1200. ######################################################################

  1201. #

  1202. # matrix-bridge-hookshot

  1203. #

  1204. ######################################################################

  1205. 

  1206. # We don't enable bridges by default.

  1207. matrix_hookshot_enabled: false

  1208. 

  1209. matrix_hookshot_container_image_self_build: "{{ matrix_architecture not in ['arm64', 'amd64'] }}"

  1210. 

  1211. matrix_hookshot_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'hookshot.as.tok', rounds=655555) | to_uuid }}"

  1212. 

  1213. matrix_hookshot_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'hookshot.hs.tok', rounds=655555) | to_uuid }}"

  1214. 

  1215. matrix_hookshot_systemd_wanted_services_list: |

  1216.   {{

  1217.     (['matrix-' + matrix_homeserver_implementation + '.service'])

  1218.     +

  1219.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1220.   }}

  1221. 

  1222. matrix_hookshot_container_http_host_bind_ports_defaultmapping:

  1223.   - "127.0.0.1:{{ matrix_hookshot_appservice_port }}:{{ matrix_hookshot_appservice_port }}"

  1224.   - "127.0.0.1:{{ matrix_hookshot_metrics_port }}:{{ matrix_hookshot_metrics_port }}"

  1225.   - "127.0.0.1:{{ matrix_hookshot_webhook_port }}:{{ matrix_hookshot_webhook_port }}"

  1226.   - "127.0.0.1:{{ matrix_hookshot_provisioning_port }}:{{ matrix_hookshot_provisioning_port }}"

  1227. 

  1228. matrix_hookshot_container_http_host_bind_ports: "{{ [] if matrix_nginx_proxy_enabled else matrix_hookshot_container_http_host_bind_ports_defaultmapping }}"

  1229. 

  1230. matrix_hookshot_provisioning_enabled: "{{ matrix_hookshot_provisioning_secret and matrix_dimension_enabled }}"

  1231. 

  1232. # We only enable metrics (locally, in the container network) for the bridge if Prometheus is enabled.

  1233. #

  1234. # People using an external Prometheus server will need to toggle all of these to be able to consume metrics remotely:

  1235. # - `matrix_hookshot_metrics_enabled`

  1236. # - `matrix_hookshot_metrics_proxying_enabled`

  1237. # - `matrix_nginx_proxy_proxy_matrix_metrics_enabled`

  1238. matrix_hookshot_metrics_enabled: "{{ matrix_prometheus_enabled }}"

  1239. 

  1240. matrix_hookshot_urlprefix_port_enabled: "{{ matrix_nginx_proxy_container_https_host_bind_port == 443 if matrix_nginx_proxy_https_enabled else matrix_nginx_proxy_container_https_host_bind_port == 80 }}"

  1241. matrix_hookshot_urlprefix_port: ":{{ matrix_nginx_proxy_container_https_host_bind_port if matrix_nginx_proxy_https_enabled else matrix_nginx_proxy_container_http_host_bind_port }}"

  1242. matrix_hookshot_urlprefix: "http{{ 's' if matrix_nginx_proxy_https_enabled else '' }}://{{ matrix_server_fqn_matrix }}{{ matrix_hookshot_urlprefix_port if matrix_hookshot_urlprefix_port_enabled else '' }}"

  1243. 

  1244. ######################################################################

  1245. #

  1246. # /matrix-bridge-hookshot

  1247. #

  1248. ######################################################################

  1249. 

  1250. 

  1251. ######################################################################

  1252. #

  1253. # matrix-bridge-mx-puppet-slack

  1254. #

  1255. ######################################################################

  1256. 

  1257. # We don't enable bridges by default.

  1258. matrix_mx_puppet_slack_enabled: false

  1259. 

  1260. matrix_mx_puppet_slack_container_image_self_build: "{{ matrix_architecture != 'amd64' }}"

  1261. 

  1262. matrix_mx_puppet_slack_systemd_required_services_list: |

  1263.   {{

  1264.     ['docker.service']

  1265.     +

  1266.     ['matrix-' + matrix_homeserver_implementation + '.service']

  1267.     +

  1268.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  1269.     +

  1270.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1271.   }}

  1272. 

  1273. matrix_mx_puppet_slack_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxslk.as.tok', rounds=655555) | to_uuid }}"

  1274. 

  1275. matrix_mx_puppet_slack_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxslk.hs.tok', rounds=655555) | to_uuid }}"

  1276. 

  1277. matrix_mx_puppet_slack_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  1278. 

  1279. # Postgres is the default, except if not using internal Postgres server

  1280. matrix_mx_puppet_slack_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  1281. matrix_mx_puppet_slack_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1282. matrix_mx_puppet_slack_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxpup.slack.db', rounds=655555) | to_uuid }}"

  1283. 

  1284. ######################################################################

  1285. #

  1286. # /matrix-bridge-mx-puppet-slack

  1287. #

  1288. ######################################################################

  1289. 

  1290. ######################################################################

  1291. #

  1292. # matrix-bridge-mx-puppet-twitter

  1293. #

  1294. ######################################################################

  1295. 

  1296. # We don't enable bridges by default.

  1297. matrix_mx_puppet_twitter_enabled: false

  1298. 

  1299. matrix_mx_puppet_twitter_container_image_self_build: "{{ matrix_architecture != 'amd64' }}"

  1300. 

  1301. matrix_mx_puppet_twitter_systemd_required_services_list: |

  1302.   {{

  1303.     ['docker.service']

  1304.     +

  1305.     ['matrix-' + matrix_homeserver_implementation + '.service']

  1306.     +

  1307.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  1308.     +

  1309.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1310.   }}

  1311. 

  1312. matrix_mx_puppet_twitter_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxtwt.as.tok', rounds=655555) | to_uuid }}"

  1313. 

  1314. matrix_mx_puppet_twitter_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxtwt.hs.tok', rounds=655555) | to_uuid }}"

  1315. 

  1316. matrix_mx_puppet_twitter_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  1317. 

  1318. matrix_mx_puppet_twitter_container_http_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else ('127.0.0.1:' ~ matrix_mx_puppet_twitter_appservice_port) }}"

  1319. 

  1320. # Postgres is the default, except if not using internal Postgres server

  1321. matrix_mx_puppet_twitter_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  1322. matrix_mx_puppet_twitter_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1323. matrix_mx_puppet_twitter_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxpup.twitter.db', rounds=655555) | to_uuid }}"

  1324. 

  1325. ######################################################################

  1326. #

  1327. # /matrix-bridge-mx-puppet-twitter

  1328. #

  1329. ######################################################################

  1330. 

  1331. 

  1332. ######################################################################

  1333. #

  1334. # matrix-bridge-mx-puppet-instagram

  1335. #

  1336. ######################################################################

  1337. 

  1338. # We don't enable bridges by default.

  1339. matrix_mx_puppet_instagram_enabled: false

  1340. 

  1341. matrix_mx_puppet_instagram_container_image_self_build: "{{ matrix_architecture != 'amd64' }}"

  1342. 

  1343. matrix_mx_puppet_instagram_systemd_required_services_list: |

  1344.   {{

  1345.     ['docker.service']

  1346.     +

  1347.     ['matrix-' + matrix_homeserver_implementation + '.service']

  1348.     +

  1349.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  1350.     +

  1351.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1352.   }}

  1353. 

  1354. matrix_mx_puppet_instagram_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxig.as.tok', rounds=655555) | to_uuid }}"

  1355. 

  1356. matrix_mx_puppet_instagram_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxig.hs.tok', rounds=655555) | to_uuid }}"

  1357. 

  1358. matrix_mx_puppet_instagram_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  1359. 

  1360. # Postgres is the default, except if not using internal Postgres server

  1361. matrix_mx_puppet_instagram_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  1362. matrix_mx_puppet_instagram_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1363. matrix_mx_puppet_instagram_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxpup.ig.db', rounds=655555) | to_uuid }}"

  1364. 

  1365. ######################################################################

  1366. #

  1367. # /matrix-bridge-mx-puppet-instagram

  1368. #

  1369. ######################################################################

  1370. 

  1371. ######################################################################

  1372. #

  1373. # matrix-bridge-mx-puppet-discord

  1374. #

  1375. ######################################################################

  1376. 

  1377. # We don't enable bridges by default.

  1378. matrix_mx_puppet_discord_enabled: false

  1379. 

  1380. matrix_mx_puppet_discord_container_image_self_build: "{{ matrix_architecture != 'amd64' }}"

  1381. 

  1382. matrix_mx_puppet_discord_systemd_required_services_list: |

  1383.   {{

  1384.     ['docker.service']

  1385.     +

  1386.     ['matrix-' + matrix_homeserver_implementation + '.service']

  1387.     +

  1388.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  1389.     +

  1390.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1391.   }}

  1392. 

  1393. matrix_mx_puppet_discord_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxdsc.as.tok', rounds=655555) | to_uuid }}"

  1394. 

  1395. matrix_mx_puppet_discord_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxdsc.hs.tok', rounds=655555) | to_uuid }}"

  1396. 

  1397. matrix_mx_puppet_discord_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  1398. 

  1399. # Postgres is the default, except if not using internal Postgres server

  1400. matrix_mx_puppet_discord_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  1401. matrix_mx_puppet_discord_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1402. matrix_mx_puppet_discord_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxpup.dsc.db', rounds=655555) | to_uuid }}"

  1403. 

  1404. ######################################################################

  1405. #

  1406. # /matrix-bridge-mx-puppet-discord

  1407. #

  1408. ######################################################################

  1409. 

  1410. ######################################################################

  1411. #

  1412. # matrix-bridge-mx-puppet-steam

  1413. #

  1414. ######################################################################

  1415. 

  1416. # We don't enable bridges by default.

  1417. matrix_mx_puppet_steam_enabled: false

  1418. 

  1419. matrix_mx_puppet_steam_container_image_self_build: "{{ matrix_architecture not in ['arm64', 'amd64'] }}"

  1420. 

  1421. matrix_mx_puppet_steam_systemd_required_services_list: |

  1422.   {{

  1423.     ['docker.service']

  1424.     +

  1425.     ['matrix-' + matrix_homeserver_implementation + '.service']

  1426.     +

  1427.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  1428.     +

  1429.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1430.   }}

  1431. 

  1432. matrix_mx_puppet_steam_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxste.as.tok', rounds=655555) | to_uuid }}"

  1433. 

  1434. matrix_mx_puppet_steam_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxste.hs.tok', rounds=655555) | to_uuid }}"

  1435. 

  1436. matrix_mx_puppet_steam_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  1437. 

  1438. # Postgres is the default, except if not using internal Postgres server

  1439. matrix_mx_puppet_steam_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  1440. matrix_mx_puppet_steam_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1441. matrix_mx_puppet_steam_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxpup.steam.db', rounds=655555) | to_uuid }}"

  1442. 

  1443. ######################################################################

  1444. #

  1445. # /matrix-bridge-mx-puppet-steam

  1446. #

  1447. ######################################################################

  1448. 

  1449. ######################################################################

  1450. #

  1451. # matrix-bridge-mx-puppet-groupme

  1452. #

  1453. ######################################################################

  1454. 

  1455. # We don't enable bridges by default.

  1456. matrix_mx_puppet_groupme_enabled: false

  1457. 

  1458. matrix_mx_puppet_groupme_container_image_self_build: "{{ matrix_architecture != 'amd64' }}"

  1459. 

  1460. matrix_mx_puppet_groupme_systemd_required_services_list: |

  1461.   {{

  1462.     ['docker.service']

  1463.     +

  1464.     ['matrix-' + matrix_homeserver_implementation + '.service']

  1465.     +

  1466.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  1467.     +

  1468.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1469.   }}

  1470. 

  1471. matrix_mx_puppet_groupme_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxgro.as.tok', rounds=655555) | to_uuid }}"

  1472. 

  1473. matrix_mx_puppet_groupme_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxgro.hs.tok', rounds=655555) | to_uuid }}"

  1474. 

  1475. matrix_mx_puppet_groupme_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  1476. 

  1477. # Postgres is the default, except if not using internal Postgres server

  1478. matrix_mx_puppet_groupme_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  1479. matrix_mx_puppet_groupme_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1480. matrix_mx_puppet_groupme_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxpup.groupme.db', rounds=655555) | to_uuid }}"

  1481. 

  1482. ######################################################################

  1483. #

  1484. # /matrix-bridge-mx-puppet-groupme

  1485. #

  1486. ######################################################################

  1487. 

  1488. ######################################################################

  1489. #

  1490. # matrix-bot-matrix-reminder-bot

  1491. #

  1492. ######################################################################

  1493. 

  1494. # We don't enable bots by default.

  1495. matrix_bot_matrix_reminder_bot_enabled: false

  1496. 

  1497. matrix_bot_matrix_reminder_bot_systemd_required_services_list: |

  1498.   {{

  1499.     ['docker.service']

  1500.     +

  1501.     ['matrix-' + matrix_homeserver_implementation + '.service']

  1502.     +

  1503.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  1504.     +

  1505.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1506.   }}

  1507. 

  1508. # Postgres is the default, except if not using internal Postgres server

  1509. matrix_bot_matrix_reminder_bot_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  1510. matrix_bot_matrix_reminder_bot_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1511. matrix_bot_matrix_reminder_bot_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'reminder.bot.db', rounds=655555) | to_uuid }}"

  1512. matrix_bot_matrix_reminder_bot_container_image_self_build: "{{ matrix_architecture != 'amd64' }}"

  1513. 

  1514. ######################################################################

  1515. #

  1516. # /matrix-bot-matrix-reminder-bot

  1517. #

  1518. ######################################################################

  1519. 

  1520. 

  1521. ######################################################################

  1522. #

  1523. # matrix-bot-matrix-registration-bot

  1524. #

  1525. ######################################################################

  1526. 

  1527. # We don't enable bots by default.

  1528. matrix_bot_matrix_registration_bot_enabled: false

  1529. 

  1530. matrix_bot_matrix_registration_bot_container_image_self_build: "{{ matrix_architecture not in ['amd64'] }}"

  1531. 

  1532. matrix_bot_matrix_registration_bot_systemd_required_services_list: |

  1533.   {{

  1534.     ['docker.service']

  1535.     +

  1536.     ['matrix-' + matrix_homeserver_implementation + '.service']

  1537.     +

  1538.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1539.   }}

  1540. 

  1541. 

  1542. ######################################################################

  1543. #

  1544. # /matrix-bot-matrix-registration-bot

  1545. #

  1546. ######################################################################

  1547. 

  1548. ######################################################################

  1549. #

  1550. # matrix-bot-maubot

  1551. #

  1552. ######################################################################

  1553. 

  1554. # We don't enable bots by default.

  1555. matrix_bot_maubot_enabled: false

  1556. 

  1557. matrix_bot_maubot_container_image_self_build: "{{ matrix_architecture not in ['amd64'] }}"

  1558. 

  1559. matrix_bot_maubot_systemd_required_services_list: |

  1560.   {{

  1561.     ['docker.service']

  1562.     +

  1563.     ['matrix-' + matrix_homeserver_implementation + '.service']

  1564.     +

  1565.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  1566.     +

  1567.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1568.   }}

  1569. 

  1570. matrix_bot_maubot_registration_shared_secret: |-

  1571.   {{

  1572.     {

  1573.       'synapse': matrix_synapse_registration_shared_secret,

  1574.       'dendrite': matrix_dendrite_client_api_registration_shared_secret,

  1575.     }[matrix_homeserver_implementation]

  1576.   }}

  1577. 

  1578. matrix_bot_maubot_management_interface_http_bind_port: "{{ '' if matrix_nginx_proxy_enabled else ('127.0.0.1:' + matrix_bot_maubot_management_interface_port | string) }}"

  1579. 

  1580. # Postgres is the default, except if not using internal Postgres server

  1581. matrix_bot_maubot_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  1582. matrix_bot_maubot_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1583. matrix_bot_maubot_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxpup.dsc.db', rounds=655555) | to_uuid }}"

  1584. 

  1585. ######################################################################

  1586. #

  1587. # /matrix-bot-maubot

  1588. #

  1589. ######################################################################

  1590. 

  1591. 

  1592. ######################################################################

  1593. #

  1594. # matrix-bot-honoroit

  1595. #

  1596. ######################################################################

  1597. 

  1598. # We don't enable bots by default.

  1599. matrix_bot_honoroit_enabled: false

  1600. 

  1601. matrix_bot_honoroit_systemd_required_services_list: |

  1602.   {{

  1603.     ['docker.service']

  1604.     +

  1605.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  1606.     +

  1607.     (['matrix-synapse.service'] if matrix_synapse_enabled else [])

  1608.     +

  1609.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1610.   }}

  1611. 

  1612. # Postgres is the default, except if not using internal Postgres server

  1613. matrix_bot_honoroit_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  1614. matrix_bot_honoroit_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1615. matrix_bot_honoroit_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'honoroit.bot.db', rounds=655555) | to_uuid }}"

  1616. matrix_bot_honoroit_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"

  1617. 

  1618. ######################################################################

  1619. #

  1620. # /matrix-bot-honoroit

  1621. #

  1622. ######################################################################

  1623. 

  1624. ######################################################################

  1625. #

  1626. # matrix-bot-buscarron

  1627. #

  1628. ######################################################################

  1629. 

  1630. # We don't enable bots by default.

  1631. matrix_bot_buscarron_enabled: false

  1632. 

  1633. matrix_bot_buscarron_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"

  1634. 

  1635. matrix_bot_buscarron_systemd_required_services_list: |

  1636.   {{

  1637.     ['docker.service']

  1638.     +

  1639.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  1640.     +

  1641.     (['matrix-synapse.service'] if matrix_synapse_enabled else [])

  1642.     +

  1643.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1644.   }}

  1645. 

  1646. # Postgres is the default, except if not using internal Postgres server

  1647. matrix_bot_buscarron_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  1648. matrix_bot_buscarron_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1649. matrix_bot_buscarron_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'buscarron.bot.db', rounds=655555) | to_uuid }}"

  1650. 

  1651. ######################################################################

  1652. #

  1653. # /matrix-bot-buscarron

  1654. #

  1655. ######################################################################

  1656. 

  1657. ######################################################################

  1658. #

  1659. # matrix-bot-postmoogle

  1660. #

  1661. ######################################################################

  1662. 

  1663. # We don't enable bots by default.

  1664. matrix_bot_postmoogle_enabled: false

  1665. 

  1666. matrix_bot_postmoogle_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"

  1667. 

  1668. matrix_bot_postmoogle_ssl_path: "{{ matrix_ssl_config_dir_path }}"

  1669. matrix_bot_postmoogle_tls_cert: "{% for domain in matrix_bot_postmoogle_domains %}/ssl/live/{{ domain }}/fullchain.pem {% endfor %}"

  1670. matrix_bot_postmoogle_tls_key: "{% for domain in matrix_bot_postmoogle_domains %}/ssl/live/{{ domain }}/privkey.pem {% endfor %}"

  1671. 

  1672. matrix_bot_postmoogle_systemd_required_services_list: |

  1673.   {{

  1674.     ['docker.service']

  1675.     +

  1676.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  1677.     +

  1678.     (['matrix-synapse.service'] if matrix_synapse_enabled else [])

  1679.   }}

  1680. 

  1681. # Postgres is the default, except if not using internal Postgres server

  1682. matrix_bot_postmoogle_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  1683. matrix_bot_postmoogle_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1684. matrix_bot_postmoogle_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'postmoogle.db', rounds=655555) | to_uuid }}"

  1685. 

  1686. ######################################################################

  1687. #

  1688. # /matrix-bot-postmoogle

  1689. #

  1690. ######################################################################

  1691. 

  1692. 

  1693. ######################################################################

  1694. #

  1695. # matrix-bot-chatgpt

  1696. #

  1697. ######################################################################

  1698. 

  1699. # We don't enable bots by default.

  1700. matrix_bot_chatgpt_enabled: false

  1701. 

  1702. matrix_bot_chatgpt_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"

  1703. 

  1704. ######################################################################

  1705. #

  1706. # /matrix-bot-chatgpt

  1707. #

  1708. ######################################################################

  1709. 

  1710. 

  1711. ######################################################################

  1712. #

  1713. # matrix-bot-go-neb

  1714. #

  1715. ######################################################################

  1716. 

  1717. # We don't enable bots by default.

  1718. matrix_bot_go_neb_enabled: false

  1719. 

  1720. matrix_bot_go_neb_systemd_required_services_list: |

  1721.   {{

  1722.     ['docker.service']

  1723.     +

  1724.     ['matrix-' + matrix_homeserver_implementation + '.service']

  1725.     +

  1726.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1727.   }}

  1728. 

  1729. matrix_bot_go_neb_container_http_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else '127.0.0.1:4050' }}"

  1730. 

  1731. ######################################################################

  1732. #

  1733. # /matrix-bot-go-neb

  1734. #

  1735. ######################################################################

  1736. 

  1737. 

  1738. ######################################################################

  1739. #

  1740. # matrix-bot-mjolnir

  1741. #

  1742. ######################################################################

  1743. 

  1744. # We don't enable bots by default.

  1745. matrix_bot_mjolnir_enabled: false

  1746. 

  1747. matrix_bot_mjolnir_container_image_self_build: "{{ matrix_architecture != 'amd64' }}"

  1748. 

  1749. matrix_bot_mjolnir_systemd_required_services_list: |

  1750.   {{

  1751.     ['docker.service']

  1752.     +

  1753.     ['matrix-' + matrix_homeserver_implementation + '.service']

  1754.     +

  1755.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  1756.     +

  1757.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1758.   }}

  1759. 

  1760. ######################################################################

  1761. #

  1762. # /matrix-bot-mjolnir

  1763. #

  1764. ######################################################################

  1765. 

  1766. ######################################################################

  1767. #

  1768. # matrix-bot-draupnir

  1769. #

  1770. ######################################################################

  1771. 

  1772. # We don't enable bots by default.

  1773. matrix_bot_draupnir_enabled: false

  1774. 

  1775. matrix_bot_draupnir_container_image_self_build: "{{ matrix_architecture != 'amd64' }}"

  1776. 

  1777. matrix_bot_draupnir_systemd_required_services_list: |

  1778.   {{

  1779.     ['docker.service']

  1780.     +

  1781.     ['matrix-' + matrix_homeserver_implementation + '.service']

  1782.     +

  1783.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  1784.     +

  1785.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1786.   }}

  1787. 

  1788. ######################################################################

  1789. #

  1790. # /matrix-bot-draupnir

  1791. #

  1792. ######################################################################

  1793. 

  1794. ######################################################################

  1795. #

  1796. # matrix-backup-borg

  1797. #

  1798. ######################################################################

  1799. 

  1800. matrix_backup_borg_enabled: false

  1801. 

  1802. matrix_backup_borg_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm32', 'arm64'] }}"

  1803. 

  1804. matrix_backup_borg_postgresql_enabled: "{{ devture_postgres_enabled }}"

  1805. matrix_backup_borg_postgresql_databases_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1806. matrix_backup_borg_postgresql_databases_username: "{{ devture_postgres_connection_username if devture_postgres_enabled else '' }}"

  1807. matrix_backup_borg_postgresql_databases_password: "{{ devture_postgres_connection_password if devture_postgres_enabled else '' }}"

  1808. matrix_backup_borg_postgresql_databases_port: "{{ devture_postgres_connection_port if devture_postgres_enabled else 5432 }}"

  1809. matrix_backup_borg_postgresql_databases: "{{ devture_postgres_managed_databases | map(attribute='name') if devture_postgres_enabled else [] }}"

  1810. 

  1811. matrix_backup_borg_location_source_directories:

  1812.   - "{{ matrix_base_data_path }}"

  1813. 

  1814. matrix_backup_borg_location_exclude_patterns: |

  1815.   {{

  1816.     ([matrix_synapse_media_store_path + '/local_thumbnails', matrix_synapse_media_store_path + '/remote_thumbnail', matrix_synapse_media_store_path + '/url_cache', matrix_synapse_media_store_path + '/url_cache_thumbnails'] if matrix_homeserver_implementation == 'synapse' else [])

  1817.     +

  1818.     ([devture_postgres_data_path] if devture_postgres_enabled else [])

  1819.   }}

  1820. 

  1821. matrix_backup_borg_systemd_required_services_list: |

  1822.   {{

  1823.     ['docker.service']

  1824.     +

  1825.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  1826.   }}

  1827. 

  1828. ######################################################################

  1829. #

  1830. # /matrix-backup-borg

  1831. #

  1832. ######################################################################

  1833. ######################################################################

  1834. #

  1835. # matrix-cactus-comments

  1836. #

  1837. ######################################################################

  1838. 

  1839. matrix_cactus_comments_enabled: false

  1840. 

  1841. # Derive secret values from homeserver secret

  1842. matrix_cactus_comments_as_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'cactus.as.token', rounds=655555) | to_uuid }}"

  1843. matrix_cactus_comments_hs_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'cactus.hs.token', rounds=655555) | to_uuid }}"

  1844. 

  1845. matrix_cactus_comments_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm32', 'arm64'] }}"

  1846. matrix_cactus_comments_systemd_required_services_list: |

  1847.   {{

  1848.     (['docker.service'])

  1849.     +

  1850.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1851.     +

  1852.     (['matrix-' + matrix_homeserver_implementation + '.service'])

  1853.   }}

  1854. 

  1855. matrix_cactus_comments_client_nginx_path: "{{ '/cactus-comments/' if matrix_nginx_proxy_enabled else matrix_cactus_comments_client_path + '/' }}"

  1856. 

  1857. ######################################################################

  1858. #

  1859. # /matrix-cactus-comments

  1860. #

  1861. ######################################################################

  1862. 

  1863. ######################################################################

  1864. #

  1865. # matrix-corporal

  1866. #

  1867. ######################################################################

  1868. 

  1869. matrix_corporal_enabled: false

  1870. 

  1871. matrix_corporal_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm32', 'arm64'] }}"

  1872. 

  1873. # Normally, matrix-nginx-proxy is enabled and nginx can reach matrix-corporal over the container network.

  1874. # If matrix-nginx-proxy is not enabled, or you otherwise have a need for it, you can expose

  1875. # matrix-corporal's web-server ports to the local host.

  1876. matrix_corporal_container_http_gateway_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else '127.0.0.1:41080' }}"

  1877. matrix_corporal_container_http_api_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else '127.0.0.1:41081' }}"

  1878. 

  1879. matrix_corporal_systemd_required_services_list: |

  1880.   {{

  1881.     (['docker.service'])

  1882.     +

  1883.     (['matrix-' + matrix_homeserver_implementation + '.service'])

  1884.   }}

  1885. 

  1886. matrix_corporal_matrix_homeserver_api_endpoint: "{{ matrix_homeserver_container_url }}"

  1887. 

  1888. matrix_corporal_matrix_auth_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret }}"

  1889. 

  1890. # This is only useful if there's REST auth provider to make use of it.

  1891. matrix_corporal_http_gateway_internal_rest_auth_enabled: "{{ matrix_synapse_ext_password_provider_rest_auth_enabled }}"

  1892. 

  1893. matrix_corporal_matrix_registration_shared_secret: "{{ matrix_synapse_registration_shared_secret }}"

  1894. 

  1895. ######################################################################

  1896. #

  1897. # /matrix-corporal

  1898. #

  1899. ######################################################################

  1900. 

  1901. ######################################################################

  1902. #

  1903. # matrix-coturn

  1904. #

  1905. ######################################################################

  1906. 

  1907. matrix_coturn_enabled: true

  1908. 

  1909. matrix_coturn_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm32', 'arm64'] }}"

  1910. 

  1911. matrix_coturn_turn_external_ip_address: "{{ ansible_host }}"

  1912. 

  1913. matrix_coturn_turn_static_auth_secret: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'coturn.sas', rounds=655555) | to_uuid }}"

  1914. 

  1915. matrix_coturn_tls_enabled: "{{ matrix_ssl_retrieval_method != 'none' }}"

  1916. matrix_coturn_tls_cert_path: "{{ matrix_ssl_config_dir_path }}/live/{{ matrix_server_fqn_matrix }}/fullchain.pem"

  1917. matrix_coturn_tls_key_path: "{{ matrix_ssl_config_dir_path }}/live/{{ matrix_server_fqn_matrix }}/privkey.pem"

  1918. matrix_coturn_container_additional_volumes: |

  1919.   {{

  1920.     ([] if matrix_ssl_retrieval_method == 'none' else [

  1921.         {

  1922.             'src': matrix_ssl_config_dir_path,

  1923.             'dst': matrix_ssl_config_dir_path,

  1924.             'options': 'ro',

  1925.         }

  1926.     ])

  1927.   }}

  1928. 

  1929. ######################################################################

  1930. #

  1931. # /matrix-coturn

  1932. #

  1933. ######################################################################

  1934. 

  1935. ######################################################################

  1936. #

  1937. # matrix-dimension

  1938. #

  1939. ######################################################################

  1940. 

  1941. matrix_dimension_enabled: false

  1942. 

  1943. matrix_dimension_container_image_self_build: "{{ matrix_architecture != 'amd64' }}"

  1944. 

  1945. # Normally, matrix-nginx-proxy is enabled and nginx can reach Dimension over the container network.

  1946. # If matrix-nginx-proxy is not enabled, or you otherwise have a need for it, you can expose

  1947. # the Dimension HTTP port to the local host.

  1948. matrix_dimension_container_http_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else '127.0.0.1:8184' }}"

  1949. 

  1950. matrix_dimension_homeserver_federationUrl: "{{ matrix_homeserver_container_federation_url }}"

  1951. 

  1952. matrix_dimension_systemd_required_services_list: |

  1953.   {{

  1954.     ['docker.service']

  1955.     +

  1956.     ['matrix-' + matrix_homeserver_implementation + '.service']

  1957.     +

  1958.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  1959.     +

  1960.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1961.   }}

  1962. 

  1963. # Postgres is the default, except if not using internal Postgres server

  1964. matrix_dimension_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  1965. matrix_dimension_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1966. matrix_dimension_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'dimension.db', rounds=655555) | to_uuid }}"

  1967. 

  1968. ######################################################################

  1969. #

  1970. # /matrix-dimension

  1971. #

  1972. ######################################################################

  1973. 

  1974. ######################################################################

  1975. #

  1976. # matrix-etherpad

  1977. #

  1978. ######################################################################

  1979. 

  1980. matrix_etherpad_enabled: false

  1981. 

  1982. matrix_etherpad_container_http_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else '127.0.0.1:9001' }}"

  1983. 

  1984. matrix_etherpad_base_url: "{{ 'https://' + matrix_server_fqn_dimension + matrix_etherpad_public_endpoint if matrix_etherpad_mode == 'dimension' else 'https://' + matrix_server_fqn_etherpad + '/' }}"

  1985. 

  1986. matrix_etherpad_systemd_required_services_list: |

  1987.   {{

  1988.     ['docker.service']

  1989.     +

  1990.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  1991.   }}

  1992. 

  1993. matrix_etherpad_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1994. matrix_etherpad_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'etherpad.db', rounds=655555) | to_uuid }}"

  1995. 

  1996. ######################################################################

  1997. #

  1998. # /matrix-etherpad

  1999. #

  2000. ######################################################################

  2001. 

  2002. ######################################################################

  2003. #

  2004. # matrix-dynamic-dns

  2005. #

  2006. ######################################################################

  2007. 

  2008. matrix_dynamic_dns_enabled: false

  2009. 

  2010. ######################################################################

  2011. #

  2012. # /matrix-dynamic-dns

  2013. #

  2014. ######################################################################

  2015. 

  2016. ######################################################################

  2017. #

  2018. # matrix-email2matrix

  2019. #

  2020. ######################################################################

  2021. 

  2022. matrix_email2matrix_enabled: false

  2023. 

  2024. matrix_email2matrix_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm32', 'arm64'] }}"

  2025. 

  2026. ######################################################################

  2027. #

  2028. # /matrix-email2matrix

  2029. #

  2030. ######################################################################

  2031. 

  2032. ######################################################################

  2033. #

  2034. # matrix-jitsi

  2035. #

  2036. ######################################################################

  2037. 

  2038. matrix_jitsi_enabled: false

  2039. 

  2040. # Normally, matrix-nginx-proxy is enabled and nginx can reach jitsi/web over the container network.

  2041. # If matrix-nginx-proxy is not enabled, or you otherwise have a need for it, you can expose

  2042. # the Jitsi HTTP port to the local host.

  2043. matrix_jitsi_web_container_http_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else '127.0.0.1:13080' }}"

  2044. 

  2045. matrix_jitsi_jvb_container_colibri_ws_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else '127.0.0.1:13090' }}"

  2046. 

  2047. matrix_jitsi_prosody_container_http_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else '127.0.0.1:5280' }}"

  2048. 

  2049. matrix_jitsi_jibri_xmpp_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'jibri', rounds=655555) | to_uuid }}"

  2050. matrix_jitsi_jicofo_auth_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'jicofo', rounds=655555) | to_uuid }}"

  2051. matrix_jitsi_jvb_auth_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'jvb', rounds=655555) | to_uuid }}"

  2052. 

  2053. matrix_jitsi_web_stun_servers: |

  2054.   {{

  2055.     [

  2056.       'stun:' + matrix_server_fqn_matrix + ':5349',

  2057.       'stun:' + matrix_server_fqn_matrix + ':3478',

  2058.     ]

  2059.     if matrix_coturn_enabled

  2060.     else [ 'stun:meet-jit-si-turnrelay.jitsi.net:443']

  2061.   }}

  2062. 

  2063. # If the self-hosted Etherpad instance is available, it will also show up in Jitsi conferences,

  2064. # unless explicitly disabled by setting `matrix_jitsi_etherpad_enabled` to false.

  2065. # Falls back to the scalar.vector.im etherpad in case someone sets `matrix_jitsi_etherpad_enabled` to true,

  2066. # while also setting `matrix_etherpad_enabled` to false.

  2067. matrix_jitsi_etherpad_enabled: "{{ matrix_etherpad_enabled }}"

  2068. matrix_jitsi_etherpad_base: "{{ matrix_etherpad_base_url if matrix_etherpad_enabled else 'https://scalar.vector.im/etherpad' }}"

  2069. 

  2070. # Allow verification using JWT and matrix-UVS

  2071. matrix_jitsi_prosody_auth_matrix_uvs_auth_token: "{{ matrix_user_verification_service_uvs_auth_token }}"

  2072. matrix_jitsi_prosody_auth_matrix_uvs_location: "{{ matrix_user_verification_service_container_url }}"

  2073. 

  2074. matrix_jitsi_self_check_validate_certificates: "{{ false if matrix_ssl_retrieval_method == 'self-signed' else true }}"

  2075. 

  2076. ######################################################################

  2077. #

  2078. # /matrix-jitsi

  2079. #

  2080. ######################################################################

  2081. ######################################################################

  2082. #

  2083. # matrix-ldap-registration-proxy

  2084. #

  2085. ######################################################################

  2086. 

  2087. # This is only for users with a specific LDAP setup

  2088. matrix_ldap_registration_proxy_enabled: false

  2089. 

  2090. ######################################################################

  2091. #

  2092. # /matrix-ldap-registration-proxy

  2093. #

  2094. ######################################################################

  2095. 

  2096. ######################################################################

  2097. #

  2098. # matrix-mailer

  2099. #

  2100. ######################################################################

  2101. 

  2102. # By default, this playbook sets up an exim mailer server (running in a container).

  2103. # This is so that Synapse can send email reminders for unread messages.

  2104. # Other services (like ma1sd), also use the mailer.

  2105. matrix_mailer_enabled: true

  2106. 

  2107. matrix_mailer_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm32', 'arm64'] }}"

  2108. 

  2109. ######################################################################

  2110. #

  2111. # /matrix-mailer

  2112. #

  2113. ######################################################################

  2114. 

  2115. ######################################################################

  2116. #

  2117. # matrix-ma1sd

  2118. #

  2119. ######################################################################

  2120. 

  2121. # We no longer install the ma1sd identity server by default.

  2122. #

  2123. # The main reason we used to install ma1sd by default in the past was to

  2124. # prevent Element from talking to the `matrix.org` / `vector.im` identity servers,

  2125. # by forcing it to talk to our own self-hosted (but otherwise useless) identity server instead,

  2126. # thus preventing contact list leaks.

  2127. #

  2128. # Since Element no longer defaults to using a public identity server if another one is not provided,

  2129. # we can stop installing ma1sd.

  2130. matrix_ma1sd_enabled: false

  2131. 

  2132. matrix_ma1sd_container_image_self_build: "{{ matrix_architecture != 'amd64' }}"

  2133. 

  2134. # Normally, matrix-nginx-proxy is enabled and nginx can reach ma1sd over the container network.

  2135. # If matrix-nginx-proxy is not enabled, or you otherwise have a need for it, you can expose

  2136. # ma1sd's web-server port.

  2137. matrix_ma1sd_container_http_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else '127.0.0.1:' + matrix_ma1sd_container_port | string }}"

  2138. 

  2139. 

  2140. # We enable Synapse integration via its Postgres database by default.

  2141. # When using another Identity store, you might wish to disable this and define

  2142. # your own configuration in `matrix_ma1sd_configuration_extension_yaml`.

  2143. matrix_ma1sd_synapsesql_enabled: true

  2144. matrix_ma1sd_synapsesql_type: postgresql

  2145. matrix_ma1sd_synapsesql_connection: //{{ matrix_synapse_database_host }}/{{ matrix_synapse_database_database }}?user={{ matrix_synapse_database_user | urlencode() }}&password={{ matrix_synapse_database_password | urlencode() }}

  2146. 

  2147. matrix_ma1sd_dns_overwrite_enabled: true

  2148. matrix_ma1sd_dns_overwrite_homeserver_client_name: "{{ matrix_server_fqn_matrix }}"

  2149. # The `matrix_ma1sd_dns_overwrite_homeserver_client_value` value when matrix_nginx_proxy_enabled is false covers the general case,

  2150. # but may be inaccurate if matrix-corporal is enabled.

  2151. matrix_ma1sd_dns_overwrite_homeserver_client_value: "{{ ('http://' + matrix_nginx_proxy_proxy_matrix_client_api_addr_with_container) if matrix_nginx_proxy_enabled else matrix_homeserver_container_url }}"

  2152. 

  2153. # By default, we send mail through the `matrix-mailer` service.

  2154. matrix_ma1sd_threepid_medium_email_identity_from: "{{ matrix_mailer_sender_address }}"

  2155. matrix_ma1sd_threepid_medium_email_connectors_smtp_host: "matrix-mailer"

  2156. matrix_ma1sd_threepid_medium_email_connectors_smtp_port: 8025

  2157. matrix_ma1sd_threepid_medium_email_connectors_smtp_tls: 0

  2158. 

  2159. matrix_ma1sd_self_check_validate_certificates: "{{ false if matrix_ssl_retrieval_method == 'self-signed' else true }}"

  2160. 

  2161. matrix_ma1sd_systemd_required_services_list: |

  2162.   {{

  2163.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  2164.   }}

  2165. 

  2166. matrix_ma1sd_systemd_wanted_services_list: |

  2167.   {{

  2168.     (['matrix-corporal.service'] if matrix_corporal_enabled else ['matrix-' + matrix_homeserver_implementation + '.service'])

  2169.     +

  2170.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  2171.     +

  2172.     (['matrix-mailer.service'] if matrix_mailer_enabled else [])

  2173.   }}

  2174. 

  2175. # Postgres is the default, except if not using internal Postgres server

  2176. matrix_ma1sd_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  2177. matrix_ma1sd_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  2178. matrix_ma1sd_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'ma1sd.db', rounds=655555) | to_uuid }}"

  2179. 

  2180. ######################################################################

  2181. #

  2182. # /matrix-ma1sd

  2183. #

  2184. ######################################################################

  2185. 

  2186. 

  2187. ######################################################################

  2188. #

  2189. # matrix-nginx-proxy

  2190. #

  2191. ######################################################################

  2192. 

  2193. # By default, this playbook sets up a reverse-proxy nginx proxy server on TCP ports 80, 443 and 8448.

  2194. # This is fine if you're dedicating the whole server to Matrix.

  2195. # If that's not the case, you may wish to disable this and take care of proxying yourself.

  2196. matrix_nginx_proxy_enabled: true

  2197. 

  2198. matrix_nginx_proxy_proxy_matrix_client_api_addr_with_container: "{{ 'matrix-corporal:41080' if matrix_corporal_enabled else 'matrix-nginx-proxy:12080' }}"

  2199. matrix_nginx_proxy_proxy_matrix_client_api_addr_sans_container: "{{ '127.0.0.1:41080' if matrix_corporal_enabled else '127.0.0.1:12080' }}"

  2200. matrix_nginx_proxy_proxy_matrix_client_api_client_max_body_size_mb: |-

  2201.   {{

  2202.     {

  2203.       'synapse': matrix_synapse_max_upload_size_mb,

  2204.       'dendrite': (matrix_dendrite_max_file_size_bytes / 1024 / 1024) | round,

  2205.       'conduit': (matrix_conduit_max_request_size / 1024 / 1024) | round,

  2206.     }[matrix_homeserver_implementation]|int

  2207.   }}

  2208. 

  2209. matrix_nginx_proxy_proxy_matrix_client_api_forwarded_location_synapse_admin_api_enabled: "{{ matrix_synapse_admin_enabled or matrix_bot_matrix_registration_bot_enabled }}"

  2210. 

  2211. matrix_nginx_proxy_proxy_matrix_client_redirect_root_uri_to_domain: "{{ matrix_server_fqn_element if matrix_client_element_enabled else '' }}"

  2212. 

  2213. matrix_nginx_proxy_proxy_matrix_enabled: true

  2214. matrix_nginx_proxy_proxy_element_enabled: "{{ matrix_client_element_enabled }}"

  2215. matrix_nginx_proxy_proxy_hydrogen_enabled: "{{ matrix_client_hydrogen_enabled }}"

  2216. matrix_nginx_proxy_proxy_cinny_enabled: "{{ matrix_client_cinny_enabled }}"

  2217. matrix_nginx_proxy_proxy_buscarron_enabled: "{{ matrix_bot_buscarron_enabled }}"

  2218. matrix_nginx_proxy_proxy_dimension_enabled: "{{ matrix_dimension_enabled }}"

  2219. matrix_nginx_proxy_proxy_etherpad_enabled: "{{ matrix_etherpad_enabled and matrix_etherpad_mode == 'standalone' }}"

  2220. matrix_nginx_proxy_proxy_bot_go_neb_enabled: "{{ matrix_bot_go_neb_enabled }}"

  2221. 

  2222. matrix_nginx_proxy_proxy_jitsi_enabled: "{{ matrix_jitsi_enabled }}"

  2223. matrix_nginx_proxy_proxy_jitsi_manage_wellknown: "{{ matrix_jitsi_require_well_known }}"

  2224. 

  2225. matrix_nginx_proxy_proxy_grafana_enabled: "{{ matrix_grafana_enabled }}"

  2226. matrix_nginx_proxy_proxy_sygnal_enabled: "{{ matrix_sygnal_enabled }}"

  2227. matrix_nginx_proxy_proxy_ntfy_enabled: "{{ matrix_ntfy_enabled }}"

  2228. 

  2229. matrix_nginx_proxy_proxy_matrix_corporal_api_enabled: "{{ matrix_corporal_enabled and matrix_corporal_http_api_enabled }}"

  2230. matrix_nginx_proxy_proxy_matrix_corporal_api_addr_with_container: "matrix-corporal:41081"

  2231. matrix_nginx_proxy_proxy_matrix_corporal_api_addr_sans_container: "127.0.0.1:41081"

  2232. 

  2233. matrix_nginx_proxy_proxy_matrix_identity_api_enabled: "{{ matrix_ma1sd_enabled }}"

  2234. matrix_nginx_proxy_proxy_matrix_identity_api_addr_with_container: "matrix-ma1sd:{{ matrix_ma1sd_container_port }}"

  2235. matrix_nginx_proxy_proxy_matrix_identity_api_addr_sans_container: "127.0.0.1:{{ matrix_ma1sd_container_port }}"

  2236. 

  2237. # By default, we do TLS termination for the Matrix Federation API (port 8448) at matrix-nginx-proxy.

  2238. # Unless this is handled there OR Synapse's federation listener port is disabled, we'll reverse-proxy.

  2239. matrix_nginx_proxy_proxy_matrix_federation_api_enabled: |-

  2240.   {{

  2241.     {

  2242.       'synapse': (matrix_synapse_federation_port_enabled and not matrix_synapse_tls_federation_listener_enabled),

  2243.       'dendrite': matrix_dendrite_federation_enabled,

  2244.       'conduit': matrix_conduit_allow_federation,

  2245.     }[matrix_homeserver_implementation]|bool

  2246.   }}

  2247. 

  2248. matrix_nginx_proxy_proxy_matrix_federation_api_addr_with_container: "matrix-nginx-proxy:12088"

  2249. matrix_nginx_proxy_proxy_matrix_federation_api_addr_sans_container: "127.0.0.1:12088"

  2250. 

  2251. matrix_nginx_proxy_proxy_synapse_enabled: "{{ matrix_synapse_enabled }}"

  2252. matrix_nginx_proxy_proxy_synapse_client_api_addr_with_container: "{{ 'matrix-synapse-reverse-proxy-companion:8008' if matrix_synapse_reverse_proxy_companion_enabled else 'matrix-synapse:8008' }}"

  2253. matrix_nginx_proxy_proxy_synapse_client_api_addr_sans_container: "127.0.0.1:8008"

  2254. matrix_nginx_proxy_proxy_synapse_federation_api_addr_with_container: "{{ 'matrix-synapse-reverse-proxy-companion:8048' if matrix_synapse_reverse_proxy_companion_enabled else 'matrix-synapse:8048' }}"

  2255. matrix_nginx_proxy_proxy_synapse_federation_api_addr_sans_container: "127.0.0.1:8048"

  2256. 

  2257. matrix_nginx_proxy_proxy_dendrite_enabled: "{{ matrix_dendrite_enabled }}"

  2258. matrix_nginx_proxy_proxy_dendrite_client_api_addr_with_container: "matrix-dendrite:{{ matrix_dendrite_http_bind_port | string }}"

  2259. matrix_nginx_proxy_proxy_dendrite_client_api_addr_sans_container: "127.0.0.1:{{ matrix_dendrite_http_bind_port | string }}"

  2260. matrix_nginx_proxy_proxy_dendrite_federation_api_addr_with_container: "matrix-dendrite:{{ matrix_dendrite_http_bind_port | string }}"

  2261. matrix_nginx_proxy_proxy_dendrite_federation_api_addr_sans_container: "127.0.0.1:{{ matrix_dendrite_http_bind_port | string }}"

  2262. 

  2263. matrix_nginx_proxy_proxy_conduit_enabled: "{{ matrix_conduit_enabled }}"

  2264. matrix_nginx_proxy_proxy_conduit_client_api_addr_with_container: "matrix-conduit:{{ matrix_conduit_port_number|string }}"

  2265. matrix_nginx_proxy_proxy_conduit_client_api_addr_sans_container: "127.0.0.1:{{ matrix_conduit_port_number|string }}"

  2266. matrix_nginx_proxy_proxy_conduit_federation_api_addr_with_container: "matrix-conduit:{{ matrix_conduit_port_number|string }}"

  2267. matrix_nginx_proxy_proxy_conduit_federation_api_addr_sans_container: "127.0.0.1:{{ matrix_conduit_port_number|string }}"

  2268. 

  2269. # When matrix-nginx-proxy is disabled, the actual port number that the vhost uses may begin to matter.

  2270. matrix_nginx_proxy_proxy_matrix_federation_port: "{{ matrix_federation_public_port }}"

  2271. 

  2272. matrix_nginx_proxy_container_federation_host_bind_port: "{{ matrix_federation_public_port }}"

  2273. 

  2274. matrix_nginx_proxy_proxy_matrix_user_directory_search_enabled: "{{ matrix_ma1sd_enabled }}"

  2275. matrix_nginx_proxy_proxy_matrix_user_directory_search_addr_with_container: "{{ matrix_nginx_proxy_proxy_matrix_identity_api_addr_with_container }}"

  2276. matrix_nginx_proxy_proxy_matrix_user_directory_search_addr_sans_container: "{{ matrix_nginx_proxy_proxy_matrix_identity_api_addr_sans_container }}"

  2277. 

  2278. matrix_nginx_proxy_self_check_validate_certificates: "{{ false if matrix_ssl_retrieval_method == 'self-signed' else true }}"

  2279. 

  2280. # OCSP stapling does not make sense when self-signed certificates are used.

  2281. # See https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1073

  2282. # and https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1074

  2283. matrix_nginx_proxy_ocsp_stapling_enabled: "{{ matrix_ssl_retrieval_method != 'self-signed' }}"

  2284. 

  2285. matrix_nginx_proxy_systemd_wanted_services_list: |

  2286.   {{

  2287.     ['matrix-' + matrix_homeserver_implementation + '.service']

  2288.     +

  2289.     (matrix_synapse_webserving_workers_systemd_services_list if matrix_homeserver_implementation == 'synapse' and matrix_synapse_workers_enabled else [])

  2290.     +

  2291.     (['matrix-synapse-reverse-proxy-companion.service'] if matrix_synapse_reverse_proxy_companion_enabled else [])

  2292.     +

  2293.     (['matrix-corporal.service'] if matrix_corporal_enabled else [])

  2294.     +

  2295.     (['matrix-ma1sd.service'] if matrix_ma1sd_enabled else [])

  2296.     +

  2297.     (['matrix-client-cinny.service'] if matrix_client_cinny_enabled else [])

  2298.     +

  2299.     (['matrix-bot-buscarron.service'] if matrix_bot_buscarron_enabled else [])

  2300.     +

  2301.     (['matrix-client-element.service'] if matrix_client_element_enabled else [])

  2302.     +

  2303.     (['matrix-client-hydrogen.service'] if matrix_client_hydrogen_enabled else [])

  2304.     +

  2305.     (['matrix-grafana.service'] if matrix_grafana_enabled else [])

  2306.     +

  2307.     (['matrix-dimension.service'] if matrix_dimension_enabled else [])

  2308.     +

  2309.     (['matrix-sygnal.service'] if matrix_sygnal_enabled else [])

  2310.     +

  2311.     (['matrix-ntfy.service'] if matrix_ntfy_enabled else [])

  2312.     +

  2313.     (['matrix-jitsi.service'] if matrix_jitsi_enabled else [])

  2314.     +

  2315.     (['matrix-bot-go-neb.service'] if matrix_bot_go_neb_enabled else [])

  2316.     +

  2317.     (['matrix-etherpad.service'] if matrix_etherpad_enabled else [])

  2318.     +

  2319.     (['matrix-hookshot.service'] if matrix_hookshot_enabled else [])

  2320.   }}

  2321. 

  2322. matrix_ssl_domains_to_obtain_certificates_for: |

  2323.   {{

  2324.     ([matrix_server_fqn_matrix])

  2325.     +

  2326.     ([matrix_server_fqn_element] if matrix_client_element_enabled else [])

  2327.     +

  2328.     ([matrix_nginx_proxy_proxy_riot_compat_redirect_hostname] if matrix_nginx_proxy_proxy_riot_compat_redirect_enabled else [])

  2329.     +

  2330.     ([matrix_server_fqn_hydrogen] if matrix_client_hydrogen_enabled else [])

  2331.     +

  2332.     ([matrix_server_fqn_cinny] if matrix_client_cinny_enabled else [])

  2333.     +

  2334.     ([matrix_server_fqn_buscarron] if matrix_bot_buscarron_enabled else [])

  2335.     +

  2336.     ([matrix_server_fqn_dimension] if matrix_dimension_enabled else [])

  2337.     +

  2338.     ([matrix_server_fqn_etherpad] if (matrix_etherpad_enabled and matrix_etherpad_mode == 'standalone') else [])

  2339.     +

  2340.     ([matrix_server_fqn_bot_go_neb] if matrix_bot_go_neb_enabled else [])

  2341.     +

  2342.     ([matrix_server_fqn_jitsi] if matrix_jitsi_enabled else [])

  2343.     +

  2344.     ([matrix_server_fqn_grafana] if matrix_grafana_enabled else [])

  2345.     +

  2346.     ([matrix_server_fqn_sygnal] if matrix_sygnal_enabled else [])

  2347.     +

  2348.     ([matrix_server_fqn_ntfy] if matrix_ntfy_enabled else [])

  2349.     +

  2350.     (matrix_bot_postmoogle_domains if matrix_bot_postmoogle_enabled else [])

  2351.     +

  2352.     ([matrix_domain] if matrix_nginx_proxy_base_domain_serving_enabled else [])

  2353.     +

  2354.     matrix_ssl_additional_domains_to_obtain_certificates_for

  2355.   }}

  2356. 

  2357. matrix_ssl_architecture: "{{

  2358. 	{

  2359. 		'amd64': 'amd64',

  2360. 		'arm32': 'arm32v6',

  2361. 		'arm64': 'arm64v8',

  2362. 	}[matrix_architecture]

  2363. }}"

  2364. 

  2365. matrix_ssl_pre_obtaining_required_service_name: "{{ 'matrix-dynamic-dns' if matrix_dynamic_dns_enabled else '' }}"

  2366. 

  2367. matrix_nginx_proxy_access_log_syslog_integration_enabled: "{{ matrix_prometheus_nginxlog_exporter_enabled }}"

  2368. matrix_nginx_proxy_access_log_syslog_integration_server_port: "{{ (matrix_prometheus_nginxlog_exporter_container_hostname | string +':'+ matrix_prometheus_nginxlog_exporter_container_syslog_port | string) | default('') }}"

  2369. 

  2370. ######################################################################

  2371. #

  2372. # /matrix-nginx-proxy

  2373. #

  2374. ######################################################################

  2375. 

  2376. 

  2377. ########################################################################

  2378. #                                                                      #

  2379. # com.devture.ansible.role.postgres                                    #

  2380. #                                                                      #

  2381. ########################################################################

  2382. 

  2383. # To completely disable installing Postgres, use `devture_postgres_enabled: false`.

  2384. 

  2385. devture_postgres_identifier: matrix-postgres

  2386. 

  2387. devture_postgres_architecture: "{{ matrix_architecture }}"

  2388. 

  2389. devture_postgres_base_path: "{{ matrix_base_data_path }}/postgres"

  2390. 

  2391. devture_postgres_container_network: "{{ matrix_docker_network }}"

  2392. 

  2393. devture_postgres_uid: "{{ matrix_user_uid }}"

  2394. devture_postgres_gid: "{{ matrix_user_gid }}"

  2395. 

  2396. devture_postgres_connection_username: matrix

  2397. devture_postgres_db_name: matrix

  2398. 

  2399. devture_postgres_systemd_services_to_stop_for_maintenance_list: |

  2400.   {{

  2401.     ['matrix-' + matrix_homeserver_implementation + '.service']

  2402.   }}

  2403. 

  2404. devture_postgres_managed_databases_auto: |

  2405.   {{

  2406.     ([{

  2407.       'name': matrix_synapse_database_database,

  2408.       'username': matrix_synapse_database_user,

  2409.       'password': matrix_synapse_database_password,

  2410.     }] if (matrix_synapse_enabled and matrix_synapse_database_host == devture_postgres_connection_hostname) else [])

  2411.     +

  2412.     ([{

  2413.       'name': matrix_dendrite_federationapi_database,

  2414.       'username': matrix_dendrite_database_user,

  2415.       'password': matrix_dendrite_database_password,

  2416.     },{

  2417.       'name': matrix_dendrite_keyserver_database,

  2418.       'username': matrix_dendrite_database_user,

  2419.       'password': matrix_dendrite_database_password,

  2420.     },{

  2421.       'name': matrix_dendrite_mediaapi_database,

  2422.       'username': matrix_dendrite_database_user,

  2423.       'password': matrix_dendrite_database_password,

  2424.     },{

  2425.       'name': matrix_dendrite_room_database,

  2426.       'username': matrix_dendrite_database_user,

  2427.       'password': matrix_dendrite_database_password,

  2428.     },{

  2429.       'name': matrix_dendrite_syncapi_database,

  2430.       'username': matrix_dendrite_database_user,

  2431.       'password': matrix_dendrite_database_password,

  2432.     },{

  2433.       'name': matrix_dendrite_userapi_database,

  2434.       'username': matrix_dendrite_database_user,

  2435.       'password': matrix_dendrite_database_password,

  2436.     },{

  2437.       'name': matrix_dendrite_pushserver_database,

  2438.       'username': matrix_dendrite_database_user,

  2439.       'password': matrix_dendrite_database_password,

  2440.     },{

  2441.       'name': matrix_dendrite_mscs_database,

  2442.       'username': matrix_dendrite_database_user,

  2443.       'password': matrix_dendrite_database_password,

  2444.     }] if (matrix_dendrite_enabled and matrix_dendrite_database_hostname == devture_postgres_connection_hostname) else [])

  2445.     +

  2446.     ([{

  2447.       'name': matrix_ma1sd_database_name,

  2448.       'username': matrix_ma1sd_database_username,

  2449.       'password': matrix_ma1sd_database_password,

  2450.     }] if (matrix_ma1sd_enabled and matrix_ma1sd_database_engine == 'postgres' and matrix_ma1sd_database_hostname == devture_postgres_connection_hostname) else [])

  2451.     +

  2452.     ([{

  2453.       'name': matrix_bot_matrix_reminder_bot_database_name,

  2454.       'username': matrix_bot_matrix_reminder_bot_database_username,

  2455.       'password': matrix_bot_matrix_reminder_bot_database_password,

  2456.     }] if (matrix_bot_matrix_reminder_bot_enabled and matrix_bot_matrix_reminder_bot_database_engine == 'postgres' and matrix_bot_matrix_reminder_bot_database_hostname == devture_postgres_connection_hostname) else [])

  2457.     +

  2458.     ([{

  2459.       'name': matrix_bot_honoroit_database_name,

  2460.       'username': matrix_bot_honoroit_database_username,

  2461.       'password': matrix_bot_honoroit_database_password,

  2462.     }] if (matrix_bot_honoroit_enabled and matrix_bot_honoroit_database_engine == 'postgres' and matrix_bot_honoroit_database_hostname == devture_postgres_connection_hostname) else [])

  2463.     +

  2464.     ([{

  2465.       'name': matrix_bot_postmoogle_database_name,

  2466.       'username': matrix_bot_postmoogle_database_username,

  2467.       'password': matrix_bot_postmoogle_database_password,

  2468.     }] if (matrix_bot_postmoogle_enabled and matrix_bot_postmoogle_database_engine == 'postgres' and matrix_bot_postmoogle_database_hostname == devture_postgres_connection_hostname) else [])

  2469.     +

  2470.     ([{

  2471.       'name': matrix_bot_maubot_database_name,

  2472.       'username': matrix_bot_maubot_database_username,

  2473.       'password': matrix_bot_maubot_database_password,

  2474.     }] if (matrix_bot_maubot_enabled  and matrix_bot_maubot_database_engine == 'postgres' and matrix_bot_maubot_database_hostname == devture_postgres_connection_hostname) else [])

  2475.     +

  2476.     ([{

  2477.       'name': matrix_bot_buscarron_database_name,

  2478.       'username': matrix_bot_buscarron_database_username,

  2479.       'password': matrix_bot_buscarron_database_password,

  2480.     }] if (matrix_bot_buscarron_enabled and matrix_bot_buscarron_database_engine == 'postgres' and matrix_bot_buscarron_database_hostname == devture_postgres_connection_hostname) else [])

  2481.     +

  2482.     ([{

  2483.       'name': matrix_registration_database_name,

  2484.       'username': matrix_registration_database_username,

  2485.       'password': matrix_registration_database_password,

  2486.     }] if (matrix_registration_enabled and matrix_registration_database_engine == 'postgres' and matrix_registration_database_hostname == devture_postgres_connection_hostname) else [])

  2487.     +

  2488.     ([{

  2489.       'name': matrix_appservice_discord_database_name,

  2490.       'username': matrix_appservice_discord_database_username,

  2491.       'password': matrix_appservice_discord_database_password,

  2492.     }] if (matrix_appservice_discord_enabled and matrix_appservice_discord_database_engine == 'postgres' and matrix_appservice_discord_database_hostname == devture_postgres_connection_hostname) else [])

  2493.     +

  2494.     ([{

  2495.       'name': matrix_appservice_slack_database_name,

  2496.       'username': matrix_appservice_slack_database_username,

  2497.       'password': matrix_appservice_slack_database_password,

  2498.     }] if (matrix_appservice_slack_enabled and matrix_appservice_slack_database_engine == 'postgres' and matrix_appservice_slack_database_hostname == devture_postgres_connection_hostname) else [])

  2499.     +

  2500.     ([{

  2501.       'name': matrix_appservice_irc_database_name,

  2502.       'username': matrix_appservice_irc_database_username,

  2503.       'password': matrix_appservice_irc_database_password,

  2504.     }] if (matrix_appservice_irc_enabled and matrix_appservice_irc_database_engine == 'postgres' and matrix_appservice_irc_database_hostname == devture_postgres_connection_hostname) else [])

  2505.     +

  2506.     ([{

  2507.       'name': matrix_appservice_kakaotalk_database_name,

  2508.       'username': matrix_appservice_kakaotalk_database_username,

  2509.       'password': matrix_appservice_kakaotalk_database_password,

  2510.     }] if (matrix_appservice_kakaotalk_enabled and matrix_appservice_kakaotalk_database_engine == 'postgres' and matrix_appservice_kakaotalk_database_hostname == devture_postgres_connection_hostname) else [])

  2511.     +

  2512.     ([{

  2513.       'name': matrix_beeper_linkedin_database_name,

  2514.       'username': matrix_beeper_linkedin_database_username,

  2515.       'password': matrix_beeper_linkedin_database_password,

  2516.     }] if (matrix_beeper_linkedin_enabled and matrix_beeper_linkedin_database_engine == 'postgres' and matrix_beeper_linkedin_database_hostname == devture_postgres_connection_hostname) else [])

  2517.     +

  2518.     ([{

  2519.       'name': matrix_go_skype_bridge_database_name,

  2520.       'username': matrix_go_skype_bridge_database_username,

  2521.       'password': matrix_go_skype_bridge_database_password,

  2522.     }] if (matrix_go_skype_bridge_enabled and matrix_go_skype_bridge_database_engine == 'postgres' and matrix_go_skype_bridge_database_hostname == devture_postgres_connection_hostname) else [])

  2523.     +

  2524.     ([{

  2525.       'name': matrix_mautrix_facebook_database_name,

  2526.       'username': matrix_mautrix_facebook_database_username,

  2527.       'password': matrix_mautrix_facebook_database_password,

  2528.     }] if (matrix_mautrix_facebook_enabled and matrix_mautrix_facebook_database_engine == 'postgres' and matrix_mautrix_facebook_database_hostname == devture_postgres_connection_hostname) else [])

  2529.     +

  2530.     ([{

  2531.       'name': matrix_mautrix_hangouts_database_name,

  2532.       'username': matrix_mautrix_hangouts_database_username,

  2533.       'password': matrix_mautrix_hangouts_database_password,

  2534.     }] if (matrix_mautrix_hangouts_enabled and matrix_mautrix_hangouts_database_engine == 'postgres' and matrix_mautrix_hangouts_database_hostname == devture_postgres_connection_hostname) else [])

  2535.     +

  2536.     ([{

  2537.       'name': matrix_mautrix_googlechat_database_name,

  2538.       'username': matrix_mautrix_googlechat_database_username,

  2539.       'password': matrix_mautrix_googlechat_database_password,

  2540.     }] if (matrix_mautrix_googlechat_enabled and matrix_mautrix_googlechat_database_engine == 'postgres' and matrix_mautrix_googlechat_database_hostname == devture_postgres_connection_hostname) else [])

  2541.     +

  2542.     ([{

  2543.       'name': matrix_mautrix_instagram_database_name,

  2544.       'username': matrix_mautrix_instagram_database_username,

  2545.       'password': matrix_mautrix_instagram_database_password,

  2546.     }] if (matrix_mautrix_instagram_enabled and matrix_mautrix_instagram_database_engine == 'postgres' and matrix_mautrix_instagram_database_hostname == devture_postgres_connection_hostname) else [])

  2547.     +

  2548.     ([{

  2549.       'name': matrix_mautrix_signal_database_name,

  2550.       'username': matrix_mautrix_signal_database_username,

  2551.       'password': matrix_mautrix_signal_database_password,

  2552.     }] if (matrix_mautrix_signal_enabled and matrix_mautrix_signal_database_engine == 'postgres' and matrix_mautrix_signal_database_hostname == devture_postgres_connection_hostname) else [])

  2553.     +

  2554.     ([{

  2555.       'name': matrix_mautrix_telegram_database_name,

  2556.       'username': matrix_mautrix_telegram_database_username,

  2557.       'password': matrix_mautrix_telegram_database_password,

  2558.     }] if (matrix_mautrix_telegram_enabled and matrix_mautrix_telegram_database_engine == 'postgres' and matrix_mautrix_telegram_database_hostname == devture_postgres_connection_hostname) else [])

  2559.     +

  2560.     ([{

  2561.       'name': matrix_mautrix_twitter_database_name,

  2562.       'username': matrix_mautrix_twitter_database_username,

  2563.       'password': matrix_mautrix_twitter_database_password,

  2564.     }] if (matrix_mautrix_twitter_enabled and matrix_mautrix_twitter_database_engine == 'postgres' and matrix_mautrix_twitter_database_hostname == devture_postgres_connection_hostname) else [])

  2565.     +

  2566.     ([{

  2567.       'name': matrix_mautrix_whatsapp_database_name,

  2568.       'username': matrix_mautrix_whatsapp_database_username,

  2569.       'password': matrix_mautrix_whatsapp_database_password,

  2570.     }] if (matrix_mautrix_whatsapp_enabled and matrix_mautrix_whatsapp_database_engine == 'postgres' and matrix_mautrix_whatsapp_database_hostname == devture_postgres_connection_hostname) else [])

  2571.     +

  2572.     ([{

  2573.       'name': matrix_mautrix_discord_database_name,

  2574.       'username': matrix_mautrix_discord_database_username,

  2575.       'password': matrix_mautrix_discord_database_password,

  2576.     }] if (matrix_mautrix_discord_enabled and matrix_mautrix_discord_database_engine == 'postgres' and matrix_mautrix_discord_database_hostname == devture_postgres_connection_hostname) else [])

  2577.     +

  2578.     ([{

  2579.       'name': matrix_mautrix_slack_database_name,

  2580.       'username': matrix_mautrix_slack_database_username,

  2581.       'password': matrix_mautrix_slack_database_password,

  2582.     }] if (matrix_mautrix_slack_enabled and matrix_mautrix_slack_database_engine == 'postgres' and matrix_mautrix_slack_database_hostname == devture_postgres_connection_hostname) else [])

  2583.     +

  2584.     ([{

  2585.       'name': matrix_mx_puppet_slack_database_name,

  2586.       'username': matrix_mx_puppet_slack_database_username,

  2587.       'password': matrix_mx_puppet_slack_database_password,

  2588.     }] if (matrix_mx_puppet_slack_enabled and matrix_mx_puppet_slack_database_engine == 'postgres' and matrix_mx_puppet_slack_database_hostname == devture_postgres_connection_hostname) else [])

  2589.     +

  2590.     ([{

  2591.       'name': matrix_mx_puppet_twitter_database_name,

  2592.       'username': matrix_mx_puppet_twitter_database_username,

  2593.       'password': matrix_mx_puppet_twitter_database_password,

  2594.     }] if (matrix_mx_puppet_twitter_enabled and matrix_mx_puppet_twitter_database_engine == 'postgres' and matrix_mx_puppet_twitter_database_hostname == devture_postgres_connection_hostname) else [])

  2595.     +

  2596.     ([{

  2597.       'name': matrix_mx_puppet_instagram_database_name,

  2598.       'username': matrix_mx_puppet_instagram_database_username,

  2599.       'password': matrix_mx_puppet_instagram_database_password,

  2600.     }] if (matrix_mx_puppet_instagram_enabled and matrix_mx_puppet_instagram_database_engine == 'postgres' and matrix_mx_puppet_instagram_database_hostname == devture_postgres_connection_hostname) else [])

  2601.     +

  2602.     ([{

  2603.       'name': matrix_mx_puppet_discord_database_name,

  2604.       'username': matrix_mx_puppet_discord_database_username,

  2605.       'password': matrix_mx_puppet_discord_database_password,

  2606.     }] if (matrix_mx_puppet_discord_enabled  and matrix_mx_puppet_discord_database_engine == 'postgres' and matrix_mx_puppet_discord_database_hostname == devture_postgres_connection_hostname) else [])

  2607.     +

  2608.     ([{

  2609.       'name': matrix_mx_puppet_steam_database_name,

  2610.       'username': matrix_mx_puppet_steam_database_username,

  2611.       'password': matrix_mx_puppet_steam_database_password,

  2612.     }] if (matrix_mx_puppet_steam_enabled and matrix_mx_puppet_steam_database_engine == 'postgres' and matrix_mx_puppet_steam_database_hostname == devture_postgres_connection_hostname) else [])

  2613.     +

  2614.     ([{

  2615.       'name': matrix_mx_puppet_groupme_database_name,

  2616.       'username': matrix_mx_puppet_groupme_database_username,

  2617.       'password': matrix_mx_puppet_groupme_database_password,

  2618.     }] if (matrix_mx_puppet_groupme_enabled and matrix_mx_puppet_groupme_database_engine == 'postgres' and matrix_mx_puppet_groupme_database_hostname == devture_postgres_connection_hostname) else [])

  2619.     +

  2620.     ([{

  2621.       'name': matrix_dimension_database_name,

  2622.       'username': matrix_dimension_database_username,

  2623.       'password': matrix_dimension_database_password,

  2624.     }] if (matrix_dimension_enabled and matrix_dimension_database_engine == 'postgres' and matrix_dimension_database_hostname == devture_postgres_connection_hostname) else [])

  2625.     +

  2626.     ([{

  2627.       'name': matrix_etherpad_database_name,

  2628.       'username': matrix_etherpad_database_username,

  2629.       'password': matrix_etherpad_database_password,

  2630.     }] if (matrix_etherpad_enabled and matrix_etherpad_database_engine == 'postgres' and matrix_etherpad_database_hostname == devture_postgres_connection_hostname) else [])

  2631.     +

  2632.     ([{

  2633.       'name': prometheus_postgres_exporter_database_name,

  2634.       'username': prometheus_postgres_exporter_database_username,

  2635.       'password': prometheus_postgres_exporter_database_password,

  2636.     }] if (prometheus_postgres_exporter_enabled and prometheus_postgres_exporter_database_hostname == devture_postgres_connection_hostname) else [])

  2637. 

  2638.    }}

  2639. 

  2640. ########################################################################

  2641. #                                                                      #

  2642. # /com.devture.ansible.role.postgres                                   #

  2643. #                                                                      #

  2644. ########################################################################

  2645. 

  2646. 

  2647. ########################################################################

  2648. #                                                                      #

  2649. # com.devture.ansible.role.postgres_backup                             #

  2650. #                                                                      #

  2651. ########################################################################

  2652. 

  2653. devture_postgres_backup_enabled: false

  2654. 

  2655. devture_postgres_backup_identifier: matrix-postgres-backup

  2656. 

  2657. devture_postgres_backup_architecture: "{{ matrix_architecture }}"

  2658. 

  2659. devture_postgres_backup_base_path: "{{ matrix_base_data_path }}/postgres-backup"

  2660. 

  2661. devture_postgres_backup_systemd_required_services_list: |

  2662.   {{

  2663.     (['docker.service'])

  2664.     +

  2665.     ([(devture_postgres_identifier + '.service')] if devture_postgres_enabled else [])

  2666.   }}

  2667. 

  2668. devture_postgres_backup_container_network: "{{ matrix_docker_network }}"

  2669. 

  2670. devture_postgres_backup_uid: "{{ matrix_user_uid }}"

  2671. devture_postgres_backup_gid: "{{ matrix_user_gid }}"

  2672. 

  2673. devture_postgres_backup_connection_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  2674. devture_postgres_backup_connection_port: "{{ devture_postgres_connection_port if devture_postgres_enabled else 5432 }}"

  2675. devture_postgres_backup_connection_username: "{{ devture_postgres_connection_username if devture_postgres_enabled else '' }}"

  2676. devture_postgres_backup_connection_password: "{{ devture_postgres_connection_password if devture_postgres_enabled else '' }}"

  2677. 

  2678. devture_postgres_backup_postgres_data_path: "{{ devture_postgres_data_path if devture_postgres_enabled else '' }}"

  2679. 

  2680. devture_postgres_backup_databases: "{{ devture_postgres_managed_databases | map(attribute='name') if devture_postgres_enabled else [] }}"

  2681. 

  2682. ########################################################################

  2683. #                                                                      #

  2684. # /com.devture.ansible.role.postgres_backup                            #

  2685. #                                                                      #

  2686. ########################################################################

  2687. 

  2688. 

  2689. ######################################################################

  2690. #

  2691. # matrix-sygnal

  2692. #

  2693. ######################################################################

  2694. 

  2695. # Most people don't need their own push-server, because they also need their own app to utilize it from.

  2696. matrix_sygnal_enabled: false

  2697. 

  2698. # If someone instals Prometheus via the playbook, they most likely wish to monitor Sygnal.

  2699. matrix_sygnal_metrics_prometheus_enabled: "{{ matrix_prometheus_enabled }}"

  2700. 

  2701. matrix_sygnal_container_http_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else '127.0.0.1:6000' }}"

  2702. 

  2703. ######################################################################

  2704. #

  2705. # /matrix-sygnal

  2706. #

  2707. ######################################################################

  2708. 

  2709. ######################################################################

  2710. #

  2711. # matrix-ntfy

  2712. #

  2713. ######################################################################

  2714. 

  2715. matrix_ntfy_enabled: false

  2716. 

  2717. matrix_ntfy_container_http_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else '127.0.0.1:2586' }}"

  2718. 

  2719. ######################################################################

  2720. #

  2721. # /matrix-ntfy

  2722. #

  2723. ######################################################################

  2724. 

  2725. ######################################################################

  2726. #

  2727. # matrix-redis

  2728. #

  2729. ######################################################################

  2730. 

  2731. matrix_redis_enabled: "{{ matrix_synapse_workers_enabled }}"

  2732. 

  2733. ######################################################################

  2734. #

  2735. # /matrix-redis

  2736. #

  2737. ######################################################################

  2738. 

  2739. ######################################################################

  2740. #

  2741. # matrix-client-element

  2742. #

  2743. ######################################################################

  2744. 

  2745. # By default, this playbook installs the Element web UI on the `matrix_server_fqn_element` domain.

  2746. # If you wish to connect to your Matrix server by other means, you may wish to disable this.

  2747. matrix_client_element_enabled: true

  2748. 

  2749. matrix_client_element_container_image_self_build: "{{ matrix_architecture not in ['arm64', 'amd64'] }}"

  2750. 

  2751. # Normally, matrix-nginx-proxy is enabled and nginx can reach Element over the container network.

  2752. # If matrix-nginx-proxy is not enabled, or you otherwise have a need for it, you can expose

  2753. # the Element HTTP port to the local host.

  2754. matrix_client_element_container_http_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else '127.0.0.1:8765' }}"

  2755. 

  2756. matrix_client_element_default_hs_url: "{{ matrix_homeserver_url }}"

  2757. matrix_client_element_default_is_url: "{{ matrix_identity_server_url }}"

  2758. 

  2759. # Use Dimension if enabled, otherwise fall back to Scalar

  2760. matrix_client_element_integrations_ui_url: "{{ matrix_dimension_integrations_ui_url if matrix_dimension_enabled else 'https://scalar.vector.im/' }}"

  2761. matrix_client_element_integrations_rest_url: "{{ matrix_dimension_integrations_rest_url if matrix_dimension_enabled else 'https://scalar.vector.im/api' }}"

  2762. matrix_client_element_integrations_widgets_urls: "{{ matrix_dimension_integrations_widgets_urls if matrix_dimension_enabled else ['https://scalar.vector.im/api'] }}"

  2763. matrix_client_element_integrations_jitsi_widget_url: "{{ matrix_dimension_integrations_jitsi_widget_url if matrix_dimension_enabled else 'https://scalar.vector.im/api/widgets/jitsi.html' }}"

  2764. 

  2765. matrix_client_element_self_check_validate_certificates: "{{ false if matrix_ssl_retrieval_method == 'self-signed' else true }}"

  2766. 

  2767. matrix_client_element_registration_enabled: "{{ matrix_synapse_enable_registration }}"

  2768. 

  2769. matrix_client_element_enable_presence_by_hs_url: |

  2770.   {{

  2771.     none

  2772.     if matrix_synapse_presence_enabled

  2773.     else {matrix_client_element_default_hs_url: false}

  2774.   }}

  2775. 

  2776. matrix_client_element_welcome_user_id: ~

  2777. 

  2778. matrix_client_element_jitsi_preferredDomain: "{{ matrix_server_fqn_jitsi if matrix_jitsi_enabled else '' }}"

  2779. 

  2780. ######################################################################

  2781. #

  2782. # /matrix-client-element

  2783. #

  2784. ######################################################################

  2785. 

  2786. ######################################################################

  2787. #

  2788. # matrix-client-hydrogen

  2789. #

  2790. ######################################################################

  2791. 

  2792. matrix_client_hydrogen_enabled: false

  2793. 

  2794. matrix_client_hydrogen_container_image_self_build: "{{ matrix_architecture not in ['amd64'] }}"

  2795. 

  2796. # Normally, matrix-nginx-proxy is enabled and nginx can reach Hydrogen over the container network.

  2797. # If matrix-nginx-proxy is not enabled, or you otherwise have a need for it, you can expose

  2798. # the HTTP port to the local host.

  2799. matrix_client_hydrogen_container_http_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else '127.0.0.1:8768' }}"

  2800. 

  2801. matrix_client_hydrogen_default_hs_url: "{{ matrix_homeserver_url }}"

  2802. 

  2803. matrix_client_hydrogen_self_check_validate_certificates: "{{ false if matrix_ssl_retrieval_method == 'self-signed' else true }}"

  2804. 

  2805. ######################################################################

  2806. #

  2807. # /matrix-client-hydrogen

  2808. #

  2809. ######################################################################

  2810. 

  2811. ######################################################################

  2812. #

  2813. # matrix-client-cinny

  2814. #

  2815. ######################################################################

  2816. 

  2817. matrix_client_cinny_enabled: false

  2818. 

  2819. matrix_client_cinny_container_image_self_build: "{{ matrix_architecture not in ['arm64', 'amd64'] }}"

  2820. 

  2821. # Normally, matrix-nginx-proxy is enabled and nginx can reach Cinny over the container network.

  2822. # If matrix-nginx-proxy is not enabled, or you otherwise have a need for it, you can expose

  2823. # the HTTP port to the local host.

  2824. matrix_client_cinny_container_http_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else '127.0.0.1:8080' }}"

  2825. 

  2826. matrix_client_cinny_default_hs_url: "{{ matrix_homeserver_url }}"

  2827. 

  2828. matrix_client_cinny_self_check_validate_certificates: "{{ false if matrix_ssl_retrieval_method == 'self-signed' else true }}"

  2829. 

  2830. ######################################################################

  2831. #

  2832. # /matrix-client-cinny

  2833. #

  2834. ######################################################################

  2835. 

  2836. ######################################################################

  2837. #

  2838. # matrix-synapse

  2839. #

  2840. ######################################################################

  2841. 

  2842. matrix_synapse_enabled: "{{ matrix_homeserver_implementation == 'synapse' }}"

  2843. 

  2844. matrix_synapse_container_image_self_build: "{{ matrix_architecture not in ['arm64', 'amd64'] }}"

  2845. 

  2846. # When ma1sd is enabled, we can use it to validate phone numbers. It's something that the homeserver cannot do by itself.

  2847. matrix_synapse_account_threepid_delegates_msisdn: "{{ 'http://matrix-ma1sd:' + matrix_ma1sd_container_port | string if matrix_ma1sd_enabled else '' }}"

  2848. 

  2849. # For exposing the Matrix Federation API's TLS port (HTTPS) to the internet on all network interfaces.

  2850. matrix_synapse_container_federation_api_tls_host_bind_port: "{{ matrix_federation_public_port if (matrix_synapse_federation_enabled and matrix_synapse_tls_federation_listener_enabled) else '' }}"

  2851. #

  2852. # For exposing the Synapse Metrics API's port (plain HTTP) to the local host.

  2853. matrix_synapse_container_metrics_api_host_bind_port: "{{ '127.0.0.1:9100' if (matrix_synapse_metrics_enabled and not matrix_nginx_proxy_enabled) else '' }}"

  2854. #

  2855. # For exposing the Synapse Manhole port (plain HTTP) to the local host.

  2856. matrix_synapse_container_manhole_api_host_bind_port: "{{ '127.0.0.1:9000' if matrix_synapse_manhole_enabled else '' }}"

  2857. #

  2858. # For exposing the Synapse worker (and metrics) ports to the local host.

  2859. matrix_synapse_workers_container_host_bind_address: "{{ '127.0.0.1' if (matrix_synapse_workers_enabled and not matrix_nginx_proxy_enabled) else '' }}"

  2860. 

  2861. matrix_synapse_database_host: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  2862. matrix_synapse_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'synapse.db', rounds=655555) | to_uuid }}"

  2863. 

  2864. matrix_synapse_macaroon_secret_key: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'synapse.mac', rounds=655555) | to_uuid }}"

  2865. 

  2866. # We do not enable TLS in Synapse by default.

  2867. # TLS is handled by the matrix-nginx-proxy, which proxies the requests to Synapse.

  2868. matrix_synapse_tls_federation_listener_enabled: false

  2869. matrix_synapse_tls_certificate_path: ~

  2870. matrix_synapse_tls_private_key_path: ~

  2871. 

  2872. matrix_synapse_federation_port_openid_resource_required: "{{ not matrix_synapse_federation_enabled and (matrix_dimension_enabled or matrix_ma1sd_enabled or matrix_user_verification_service_enabled) }}"

  2873. 

  2874. # If someone instals Prometheus via the playbook, they most likely wish to monitor Synapse.

  2875. matrix_synapse_metrics_enabled: "{{ matrix_prometheus_enabled }}"

  2876. 

  2877. matrix_synapse_email_enabled: "{{ matrix_mailer_enabled }}"

  2878. matrix_synapse_email_smtp_host: "matrix-mailer"

  2879. matrix_synapse_email_smtp_port: 8025

  2880. matrix_synapse_email_smtp_require_transport_security: false

  2881. matrix_synapse_email_notif_from: "Matrix <{{ matrix_mailer_sender_address }}>"

  2882. 

  2883. # Even if TURN doesn't support TLS (it does by default),

  2884. # it doesn't hurt to try a secure connection anyway.

  2885. #

  2886. # When Let's Encrypt certificates are used (the default case),

  2887. # we don't enable `turns` endpoints, because WebRTC in Element can't talk to them.

  2888. # Learn more here: https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1145

  2889. matrix_synapse_turn_uris: |

  2890.   {{

  2891.     []

  2892.     +

  2893.     [

  2894.       'turns:' + matrix_server_fqn_matrix + '?transport=udp',

  2895.       'turns:' + matrix_server_fqn_matrix + '?transport=tcp',

  2896.     ] if matrix_coturn_enabled and matrix_coturn_tls_enabled and matrix_ssl_retrieval_method != 'lets-encrypt' else []

  2897.     +

  2898.     [

  2899.       'turn:' + matrix_server_fqn_matrix + '?transport=udp',

  2900.       'turn:' + matrix_server_fqn_matrix + '?transport=tcp',

  2901.     ] if matrix_coturn_enabled else []

  2902.   }}

  2903. 

  2904. matrix_synapse_turn_shared_secret: "{{ matrix_coturn_turn_static_auth_secret if matrix_coturn_enabled else '' }}"

  2905. 

  2906. matrix_synapse_self_check_validate_certificates: "{{ false if matrix_ssl_retrieval_method == 'self-signed' else true }}"

  2907. 

  2908. matrix_synapse_systemd_required_services_list: |

  2909.   {{

  2910.     (['docker.service'])

  2911.     +

  2912.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  2913.     +

  2914.     (['matrix-goofys.service'] if matrix_s3_media_store_enabled else [])

  2915.   }}

  2916. 

  2917. matrix_synapse_systemd_wanted_services_list: |

  2918.   {{

  2919.     (['matrix-coturn.service'] if matrix_coturn_enabled else [])

  2920.     +

  2921.     (['matrix-mailer.service'] if matrix_mailer_enabled else [])

  2922.   }}

  2923. 

  2924. # Synapse workers (used for parallel load-scaling) need Redis for IPC.

  2925. matrix_synapse_redis_enabled: "{{ matrix_redis_enabled }}"

  2926. matrix_synapse_redis_host: "{{ 'matrix-redis' if matrix_redis_enabled else '' }}"

  2927. matrix_synapse_redis_password: "{{ matrix_redis_connection_password if matrix_redis_enabled else '' }}"

  2928. 

  2929. matrix_synapse_container_extra_arguments_auto: "{{ matrix_homeserver_container_extra_arguments_auto }}"

  2930. matrix_synapse_app_service_config_files_auto: "{{ matrix_homeserver_app_service_config_files_auto }}"

  2931. 

  2932. ######################################################################

  2933. #

  2934. # /matrix-synapse

  2935. #

  2936. ######################################################################

  2937. 

  2938. ######################################################################

  2939. #

  2940. # matrix-synapse-reverse-proxy-companion

  2941. #

  2942. ######################################################################

  2943. 

  2944. matrix_synapse_reverse_proxy_companion_enabled: "{{ matrix_synapse_enabled }}"

  2945. 

  2946. matrix_synapse_reverse_proxy_companion_client_api_client_max_body_size_mb: "{{ matrix_synapse_max_upload_size_mb }}"

  2947. 

  2948. matrix_synapse_reverse_proxy_companion_container_client_api_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else '127.0.0.1:8008' }}"

  2949. matrix_synapse_reverse_proxy_companion_container_federation_api_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else '127.0.0.1:8048' }}"

  2950. 

  2951. matrix_synapse_reverse_proxy_companion_synapse_workers_enabled: "{{ matrix_synapse_workers_enabled }}"

  2952. matrix_synapse_reverse_proxy_companion_synapse_workers_list: "{{ matrix_synapse_workers_enabled_list }}"

  2953. matrix_synapse_reverse_proxy_companion_synapse_generic_worker_client_server_locations: "{{ matrix_synapse_workers_generic_worker_client_server_endpoints }}"

  2954. matrix_synapse_reverse_proxy_companion_synapse_generic_worker_federation_locations: "{{ matrix_synapse_workers_generic_worker_federation_endpoints }}"

  2955. matrix_synapse_reverse_proxy_companion_synapse_stream_writer_typing_stream_worker_client_server_locations: "{{ matrix_synapse_workers_stream_writer_typing_stream_worker_client_server_endpoints }}"

  2956. matrix_synapse_reverse_proxy_companion_synapse_stream_writer_to_device_stream_worker_client_server_locations: "{{ matrix_synapse_workers_stream_writer_to_device_stream_worker_client_server_endpoints }}"

  2957. matrix_synapse_reverse_proxy_companion_synapse_stream_writer_account_data_stream_worker_client_server_locations: "{{ matrix_synapse_workers_stream_writer_account_data_stream_worker_client_server_endpoints }}"

  2958. matrix_synapse_reverse_proxy_companion_synapse_stream_writer_receipts_stream_worker_client_server_locations: "{{ matrix_synapse_workers_stream_writer_receipts_stream_worker_client_server_endpoints }}"

  2959. matrix_synapse_reverse_proxy_companion_synapse_stream_writer_presence_stream_worker_client_server_locations: "{{ matrix_synapse_workers_stream_writer_presence_stream_worker_client_server_endpoints }}"

  2960. matrix_synapse_reverse_proxy_companion_synapse_media_repository_locations: "{{matrix_synapse_workers_media_repository_endpoints|default([]) }}"

  2961. matrix_synapse_reverse_proxy_companion_synapse_user_dir_locations: "{{ matrix_synapse_workers_user_dir_worker_client_server_endpoints|default([]) }}"

  2962. 

  2963. matrix_synapse_reverse_proxy_companion_access_log_syslog_integration_enabled: "{{ matrix_prometheus_nginxlog_exporter_enabled }}"

  2964. matrix_synapse_reverse_proxy_companion_access_log_syslog_integration_server_port: "{{ (matrix_prometheus_nginxlog_exporter_container_hostname | string +':'+ matrix_prometheus_nginxlog_exporter_container_syslog_port | string) | default('') }}"

  2965. 

  2966. ######################################################################

  2967. #

  2968. # /matrix-synapse-reverse-proxy-companion

  2969. #

  2970. ######################################################################

  2971. 

  2972. ######################################################################

  2973. #

  2974. # matrix-synapse-admin

  2975. #

  2976. ######################################################################

  2977. 

  2978. matrix_synapse_admin_enabled: false

  2979. 

  2980. # Normally, matrix-nginx-proxy is enabled and nginx can reach Synapse Admin over the container network.

  2981. # If matrix-nginx-proxy is not enabled, or you otherwise have a need for it, you can expose

  2982. # Synapse Admin's HTTP port to the local host.

  2983. matrix_synapse_admin_container_http_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else '127.0.0.1:8766' }}"

  2984. 

  2985. matrix_synapse_admin_container_image_self_build: "{{ matrix_architecture not in ['arm64', 'amd64'] }}"

  2986. 

  2987. ######################################################################

  2988. #

  2989. # /matrix-synapse-admin

  2990. #

  2991. ######################################################################

  2992. 

  2993. ######################################################################

  2994. #

  2995. # etke/prometheus_node_exporter

  2996. #

  2997. ######################################################################

  2998. 

  2999. prometheus_node_exporter_enabled: false

  3000. 

  3001. prometheus_node_exporter_identifier: matrix-prometheus-node-exporter

  3002. 

  3003. prometheus_node_exporter_base_path: "{{ matrix_base_data_path }}/prometheus-node-exporter"

  3004. 

  3005. prometheus_node_exporter_uid: "{{ matrix_user_uid }}"

  3006. prometheus_node_exporter_gid: "{{ matrix_user_gid }}"

  3007. 

  3008. prometheus_node_exporter_server_fqn: "{{ matrix_server_fqn_matrix }}"

  3009. 

  3010. prometheus_node_exporter_container_network: "{{ matrix_docker_network }}"

  3011. 

  3012. prometheus_node_exporter_container_labels_traefik_enabled: false

  3013. 

  3014. ######################################################################

  3015. #

  3016. # /etke/prometheus_node_exporter

  3017. #

  3018. ######################################################################

  3019. 

  3020. ######################################################################

  3021. #

  3022. # etke/prometheus_postgres_exporter

  3023. #

  3024. ######################################################################

  3025. 

  3026. prometheus_postgres_exporter_enabled: false

  3027. 

  3028. prometheus_postgres_exporter_identifier: matrix-prometheus-postgres-exporter

  3029. 

  3030. prometheus_postgres_exporter_base_path: "{{ matrix_base_data_path }}/prometheus-postgres-exporter"

  3031. 

  3032. prometheus_postgres_exporter_uid: "{{ matrix_user_uid }}"

  3033. prometheus_postgres_exporter_gid: "{{ matrix_user_gid }}"

  3034. 

  3035. prometheus_postgres_exporter_server_fqn: "{{ matrix_server_fqn_matrix }}"

  3036. 

  3037. prometheus_postgres_exporter_container_network: "{{ matrix_docker_network }}"

  3038. 

  3039. prometheus_postgres_exporter_container_labels_traefik_enabled: false

  3040. 

  3041. prometheus_postgres_exporter_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  3042. prometheus_postgres_exporter_database_username: matrix_prometheus_postgres_exporter

  3043. prometheus_postgres_exporter_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'prometheus.pg.db', rounds=655555) | to_uuid }}"

  3044. prometheus_postgres_exporter_database_name: matrix_prometheus_postgres_exporter

  3045. 

  3046. prometheus_postgres_exporter_systemd_required_services_list: |

  3047.   {{

  3048.     ['docker.service']

  3049.     +

  3050.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  3051.   }}

  3052. 

  3053. ######################################################################

  3054. #

  3055. # /etke/prometheus_postgres_exporter

  3056. #

  3057. ######################################################################

  3058. 

  3059. ######################################################################

  3060. #

  3061. # matrix-prometheus-nginxlog-exporter

  3062. #

  3063. ######################################################################

  3064. 

  3065. matrix_prometheus_nginxlog_exporter_enabled: false

  3066. 

  3067. ######################################################################

  3068. #

  3069. # /matrix-prometheus-nginxlog-exporter

  3070. #

  3071. ######################################################################

  3072. 

  3073. ######################################################################

  3074. #

  3075. # matrix-prometheus

  3076. #

  3077. ######################################################################

  3078. 

  3079. matrix_prometheus_enabled: false

  3080. 

  3081. # Normally, matrix-nginx-proxy is enabled and nginx can reach Prometheus over the container network.

  3082. # If matrix-nginx-proxy is not enabled, or you otherwise have a need for it, you can expose

  3083. # Prometheus' HTTP port to the local host.

  3084. matrix_prometheus_container_http_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else '127.0.0.1:9090' }}"

  3085. 

  3086. matrix_prometheus_scraper_synapse_enabled: "{{ matrix_synapse_enabled and matrix_synapse_metrics_enabled }}"

  3087. matrix_prometheus_scraper_synapse_targets: ['matrix-synapse:{{ matrix_synapse_metrics_port }}']

  3088. matrix_prometheus_scraper_synapse_workers_enabled_list: "{{ matrix_synapse_workers_enabled_list }}"

  3089. matrix_prometheus_scraper_synapse_rules_synapse_tag: "{{ matrix_synapse_docker_image_tag }}"

  3090. 

  3091. matrix_prometheus_scraper_node_enabled: "{{ prometheus_node_exporter_enabled }}"

  3092. matrix_prometheus_scraper_node_targets: "{{ [prometheus_node_exporter_identifier + ':9100'] if prometheus_node_exporter_enabled else [] }}"

  3093. 

  3094. matrix_prometheus_scraper_postgres_enabled: "{{ prometheus_postgres_exporter_enabled }}"

  3095. matrix_prometheus_scraper_postgres_targets: "{{ [prometheus_postgres_exporter_identifier + ':' + prometheus_postgres_exporter_port | string] if matrix_prometheus_scraper_postgres_enabled else [] }}"

  3096. 

  3097. matrix_prometheus_scraper_hookshot_enabled: "{{ matrix_hookshot_metrics_enabled|default(false) }}"

  3098. matrix_prometheus_scraper_hookshot_targets: "{{ [matrix_hookshot_container_url | string +':'+ matrix_hookshot_metrics_port | string] if matrix_hookshot_metrics_enabled else [] }}"

  3099. 

  3100. matrix_prometheus_scraper_nginxlog_enabled: "{{ matrix_prometheus_nginxlog_exporter_enabled }}"

  3101. matrix_prometheus_scraper_nginxlog_server_port: "{{ (matrix_prometheus_nginxlog_exporter_container_hostname | string +':'+ matrix_prometheus_nginxlog_exporter_container_metrics_port | string)

  3102. | default('') }}"

  3103. 

  3104. ######################################################################

  3105. #

  3106. # /matrix-prometheus

  3107. #

  3108. ######################################################################

  3109. 

  3110. ######################################################################

  3111. #

  3112. # matrix-grafana

  3113. #

  3114. ######################################################################

  3115. 

  3116. matrix_grafana_enabled: false

  3117. 

  3118. # Normally, matrix-nginx-proxy is enabled and nginx can reach Grafana over the container network.

  3119. # If matrix-nginx-proxy is not enabled, or you otherwise have a need for it, you can expose

  3120. # Grafana's HTTP port to the local host.

  3121. matrix_grafana_container_http_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else '127.0.0.1:3000' }}"

  3122. 

  3123. matrix_grafana_dashboard_download_urls: |

  3124.   {{

  3125.     (matrix_synapse_grafana_dashboard_urls if matrix_homeserver_implementation == 'synapse' and matrix_synapse_metrics_enabled else [])

  3126.     +

  3127.     (prometheus_node_exporter_dashboard_urls if prometheus_node_exporter_enabled else [])

  3128.     +

  3129.     (prometheus_postgres_exporter_dashboard_urls if prometheus_postgres_exporter_enabled else [])

  3130.     +

  3131.     (matrix_prometheus_nginxlog_exporter_dashboard_urls if matrix_prometheus_nginxlog_exporter_enabled else [])

  3132.   }}

  3133. 

  3134. matrix_grafana_default_home_dashboard_path: |-

  3135.   {{

  3136.     {

  3137.       'synapse': ('/etc/grafana/dashboards/synapse.json' if matrix_synapse_metrics_enabled else '/etc/grafana/dashboards/node-exporter-full.json'),

  3138.       'dendrite': '/etc/grafana/dashboards/node-exporter-full.json',

  3139.       'conduit': '/etc/grafana/dashboards/node-exporter-full.json',

  3140.     }[matrix_homeserver_implementation]

  3141.   }}

  3142. 

  3143. ######################################################################

  3144. #

  3145. # /matrix-grafana

  3146. #

  3147. ######################################################################

  3148. 

  3149. ######################################################################

  3150. #

  3151. # matrix-registration

  3152. #

  3153. ######################################################################

  3154. 

  3155. matrix_registration_enabled: false

  3156. 

  3157. # Normally, matrix-nginx-proxy is enabled and nginx can reach matrix-registration over the container network.

  3158. # If matrix-nginx-proxy is not enabled, or you otherwise have a need for it, you can expose

  3159. # matrix-registration's HTTP port to the local host.

  3160. matrix_registration_container_http_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else '127.0.0.1:8767' }}"

  3161. 

  3162. matrix_registration_riot_instance: "{{ ('https://' + matrix_server_fqn_element) if matrix_client_element_enabled else 'https://riot.im/app/' }}"

  3163. 

  3164. matrix_registration_shared_secret: |-

  3165.   {{

  3166.     {

  3167.       'synapse': matrix_synapse_registration_shared_secret,

  3168.       'dendrite': matrix_dendrite_client_api_registration_shared_secret,

  3169.       'conduit': '',

  3170.     }[matrix_homeserver_implementation]

  3171.   }}

  3172. 

  3173. matrix_registration_server_location: "{{ matrix_homeserver_container_url }}"

  3174. 

  3175. matrix_registration_api_validate_certs: "{{ false if matrix_ssl_retrieval_method == 'self-signed' else true }}"

  3176. 

  3177. matrix_registration_container_image_self_build: "{{ matrix_architecture != 'amd64' }}"

  3178. 

  3179. matrix_registration_systemd_required_services_list: |

  3180.   {{

  3181.     ['docker.service']

  3182.     +

  3183.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  3184.   }}

  3185. 

  3186. # Postgres is the default, except if not using internal Postgres server

  3187. matrix_registration_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  3188. matrix_registration_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  3189. matrix_registration_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mx.registr.db', rounds=655555) | to_uuid }}"

  3190. 

  3191. ######################################################################

  3192. #

  3193. # /matrix-registration

  3194. #

  3195. ######################################################################

  3196. 

  3197. 

  3198. ######################################################################

  3199. #

  3200. # matrix-dendrite

  3201. #

  3202. ######################################################################

  3203. 

  3204. matrix_dendrite_enabled: "{{ matrix_homeserver_implementation == 'dendrite' }}"

  3205. 

  3206. # Normally, matrix-nginx-proxy is enabled and nginx can reach Dendrite over the container network.

  3207. # If matrix-nginx-proxy is not enabled, or you otherwise have a need for it,

  3208. # you can expose Dendrite's ports to the host.

  3209. #

  3210. # For exposing Dendrite's plain HTTP server to the local host.

  3211. matrix_dendrite_container_http_host_bind_address: "{{ '' if matrix_nginx_proxy_enabled else ('127.0.0.1:' + matrix_dendrite_http_bind_port | string) }}"

  3212. #

  3213. # For exposing Dendrite's HTTPS server to the local host.

  3214. matrix_dendrite_container_https_host_bind_address: "{{ '' if matrix_nginx_proxy_enabled or not matrix_dendrite_https_bind_port else ('127.0.0.1:' + matrix_dendrite_https_bind_port | string) }}"

  3215. 

  3216. matrix_dendrite_sync_api_real_ip_header: "{{ 'X-Forwarded-For' if matrix_nginx_proxy_enabled else '' }}"

  3217. 

  3218. matrix_dendrite_client_api_registration_shared_secret: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'dendrite.rss', rounds=655555) | to_uuid }}"

  3219. 

  3220. matrix_dendrite_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  3221. 

  3222. matrix_dendrite_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'dendrite.db', rounds=655555) | to_uuid }}"

  3223. 

  3224. # Even if TURN doesn't support TLS (it does by default),

  3225. # it doesn't hurt to try a secure connection anyway.

  3226. matrix_dendrite_client_api_turn_uris: |

  3227.   {{

  3228.     [

  3229.       'turns:' + matrix_server_fqn_matrix + '?transport=udp',

  3230.       'turns:' + matrix_server_fqn_matrix + '?transport=tcp',

  3231.       'turn:' + matrix_server_fqn_matrix + '?transport=udp',

  3232.       'turn:' + matrix_server_fqn_matrix + '?transport=tcp',

  3233.     ]

  3234.     if matrix_coturn_enabled

  3235.     else []

  3236.   }}

  3237. 

  3238. matrix_dendrite_client_api_turn_shared_secret: "{{ matrix_coturn_turn_static_auth_secret if matrix_coturn_enabled else '' }}"

  3239. 

  3240. matrix_dendrite_disable_tls_validation: "{{ true if matrix_ssl_retrieval_method == 'self-signed' else false }}"

  3241. 

  3242. matrix_dendrite_self_check_validate_certificates: "{{ false if matrix_ssl_retrieval_method == 'self-signed' else true }}"

  3243. 

  3244. matrix_dendrite_trusted_id_servers: "{{ [matrix_server_fqn_matrix] if matrix_ma1sd_enabled else ['matrix.org', 'vector.im'] }}"

  3245. 

  3246. matrix_dendrite_systemd_required_services_list: |

  3247.   {{

  3248.     (['docker.service'])

  3249.     +

  3250.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  3251.     +

  3252.     (['matrix-goofys.service'] if matrix_s3_media_store_enabled else [])

  3253.   }}

  3254. 

  3255. matrix_dendrite_systemd_wanted_services_list: |

  3256.   {{

  3257.     (['matrix-coturn.service'] if matrix_coturn_enabled else [])

  3258.   }}

  3259. 

  3260. matrix_dendrite_container_extra_arguments_auto: "{{ matrix_homeserver_container_extra_arguments_auto }}"

  3261. matrix_dendrite_app_service_config_files_auto: "{{ matrix_homeserver_app_service_config_files_auto }}"

  3262. 

  3263. ######################################################################

  3264. #

  3265. # /matrix-dendrite

  3266. #

  3267. ######################################################################

  3268. 

  3269. ######################################################################

  3270. #

  3271. # matrix-conduit

  3272. #

  3273. ######################################################################

  3274. 

  3275. matrix_conduit_enabled: "{{ matrix_homeserver_implementation == 'conduit' }}"

  3276. 

  3277. matrix_conduit_systemd_required_services_list: |

  3278.   {{

  3279.     (['docker.service'])

  3280.   }}

  3281. 

  3282. 

  3283. ######################################################################

  3284. #

  3285. # /matrix-conduit

  3286. #

  3287. ######################################################################

  3288. 

  3289. 

  3290. ######################################################################

  3291. #

  3292. # matrix-user-creator

  3293. #

  3294. ######################################################################

  3295. 

  3296. matrix_user_creator_users_auto: |

  3297.   {{

  3298.     ([{

  3299.       'username': matrix_bot_matrix_reminder_bot_matrix_user_id_localpart,

  3300.       'initial_password': matrix_bot_matrix_reminder_bot_matrix_user_password,

  3301.       'initial_type': 'bot',

  3302.     }] if matrix_bot_matrix_reminder_bot_enabled else [])

  3303.     +

  3304.     ([{

  3305.       'username': matrix_bot_honoroit_login,

  3306.       'initial_password': matrix_bot_honoroit_password,

  3307.       'initial_type': 'bot',

  3308.     }] if matrix_bot_honoroit_enabled else [])

  3309.     +

  3310.     ([{

  3311.       'username': matrix_bot_postmoogle_login,

  3312.       'initial_password': matrix_bot_postmoogle_password,

  3313.       'initial_type': 'bot',

  3314.     }] if matrix_bot_postmoogle_enabled else [])

  3315.     +

  3316.     ([{

  3317.       'username': matrix_bot_buscarron_login,

  3318.       'initial_password': matrix_bot_buscarron_password,

  3319.       'initial_type': 'bot',

  3320.     }] if matrix_bot_buscarron_enabled else [])

  3321.   }}

  3322. 

  3323. ######################################################################

  3324. #

  3325. # /matrix-user-creator

  3326. #

  3327. ######################################################################

  3328. 

  3329. 

  3330. ######################################################################

  3331. #

  3332. # matrix-user-verification-service

  3333. #

  3334. ######################################################################

  3335. 

  3336. ## FIXME: Needs to be updated when there is a proper release by upstream.

  3337. matrix_user_verification_service_docker_image: "{{ matrix_user_verification_service_docker_image_name_prefix }}matrixdotorg/matrix-user-verification-service@sha256:d2aabc984dd69d258c91900c36928972d7aaef19d776caa3cd6a0fbc0e307270"

  3338. 

  3339. matrix_user_verification_service_enabled: false

  3340. matrix_user_verification_service_systemd_required_services_list: |

  3341.       {{

  3342.         ['docker.service']

  3343.         +

  3344.         (['matrix-synapse.service'] if matrix_synapse_enabled else [])

  3345.         +

  3346.         ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  3347.       }}

  3348. 

  3349. # If Jitsi is managed by this playbook we can use the docker network - no need to expose a port.

  3350. # If Jitsi is not managed by this playbook, or you otherwise have a need for it, you can expose

  3351. # matrix-user-verfification-services's client-server port to the local host port 3003.

  3352. # By default Matrix-User-Verification-Service binds to port 3000, which collides with grafana, therefore this uses port 3003.

  3353. matrix_user_verification_service_container_http_host_bind_port: "{{  '' if (matrix_jitsi_enabled | bool and matrix_jitsi_enable_auth | bool and matrix_jitsi_auth_type == 'matrix') else '127.0.0.1:3003' }}"

  3354. 

  3355. # URL exposed in the docker network

  3356. matrix_user_verification_service_container_url: "http://{{  matrix_user_verification_service_container_name }}:3000"

  3357. 

  3358. # We connect via the container network (private IPs), so we need to disable IP checks

  3359. matrix_user_verification_service_uvs_disable_ip_blacklist: "{{'true' if matrix_synapse_enabled else 'false'}}"

  3360. 

  3361. matrix_user_verification_service_uvs_auth_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'uvs.auth.token', rounds=655555) | to_uuid }}"

  3362. 

  3363. ######################################################################

  3364. #

  3365. # /matrix-user-verification-service

  3366. #

  3367. ######################################################################