overmind
/
matrix-docker-ansible-deploy
зеркало из https://github.com/spantaleev/matrix-docker-ansible-deploy
1
0
Форкнуть 0
Код Задачи 0 Релизы 0 Вики Активность
Matrix Docker Ansible eploy
Вы не можете выбрать более 25 тем Темы должны начинаться с буквы или цифры, могут содержать дефисы(-) и должны содержать не более 35 символов.
5917 коммитов
14 Ветки
66 MiB
 
 
Дерево: 6e3aab6594
Ветки Теги
${ item.name }
Создать ветку ${ searchTerm }
из '6e3aab6594'
${ noResults }
matrix-docker-ansible-deploy/group_vars/matrix_servers

3903 строки
195 KiB
Исходник Вина История 

  1. ---

  2. 

  3. # This variables file wires together the various components (roles) used by the playbook.

  4. #

  5. # Roles used by playbook are pretty minimal and kept independent of one another as much as possible.

  6. # To deliver a turnkey fully-featured Matrix server, this playbook needs

  7. # to connect them all together. It does so by overriding role variables.

  8. #

  9. # You can also override ANY variable (seen here or in any given role),

  10. # by re-defining it in your own configuration file (`inventory/host_vars/matrix.<your-domain>`).

  11. 

  12. ########################################################################

  13. #                                                                      #

  14. # Playbook                                                             #

  15. #                                                                      #

  16. ########################################################################

  17. 

  18. # Controls whether to install Docker or not

  19. # Also see `devture_docker_sdk_for_python_installation_enabled`.

  20. matrix_playbook_docker_installation_enabled: true

  21. 

  22. # Controls whether to attach Traefik labels to services.

  23. # This is separate from `devture_traefik_enabled`, because you may wish to disable Traefik installation by the playbook,

  24. # yet still use Traefik installed in another way.

  25. matrix_playbook_traefik_labels_enabled: "{{ matrix_playbook_reverse_proxy_type in ['playbook-managed-traefik', 'other-traefik-container'] }}"

  26. 

  27. # Controls the additional network that reverse-proxyable services will be connected to.

  28. matrix_playbook_reverse_proxyable_services_additional_network: "{{ devture_traefik_container_network if devture_traefik_enabled else '' }}"

  29. 

  30. matrix_playbook_ssl_retrieval_method: "{{ 'lets-encrypt' if devture_traefik_certs_dumper_enabled else matrix_ssl_retrieval_method }}"

  31. 

  32. matrix_playbook_ssl_enabled: "{{ matrix_playbook_ssl_retrieval_method in ['lets-encrypt', 'self-signed', 'manually-managed'] }}"

  33. 

  34. ########################################################################

  35. #                                                                      #

  36. # /Playbook                                                            #

  37. #                                                                      #

  38. ########################################################################

  39. 

  40. ########################################################################

  41. #                                                                      #

  42. # base                                                                 #

  43. #                                                                      #

  44. ########################################################################

  45. 

  46. matrix_homeserver_container_extra_arguments_auto: |

  47.   {{

  48.     (['--mount type=bind,src=' + matrix_appservice_discord_config_path + '/registration.yaml,dst=/matrix-appservice-discord-registration.yaml,ro'] if matrix_appservice_discord_enabled else [])

  49.     +

  50.     (['--mount type=bind,src=' + matrix_appservice_irc_config_path + '/registration.yaml,dst=/matrix-appservice-irc-registration.yaml,ro'] if matrix_appservice_irc_enabled else [])

  51.     +

  52.     (['--mount type=bind,src=' + matrix_appservice_kakaotalk_config_path + '/registration.yaml,dst=/matrix-appservice-kakaotalk-registration.yaml,ro'] if matrix_appservice_kakaotalk_enabled else [])

  53.     +

  54.     (['--mount type=bind,src=' + matrix_appservice_slack_config_path + '/slack-registration.yaml,dst=/matrix-appservice-slack-registration.yaml,ro'] if matrix_appservice_slack_enabled else [])

  55.     +

  56.     (['--mount type=bind,src=' + matrix_appservice_webhooks_config_path + '/webhooks-registration.yaml,dst=/matrix-appservice-webhooks-registration.yaml,ro'] if matrix_appservice_webhooks_enabled else [])

  57.     +

  58.     (['--mount type=bind,src=' + matrix_beeper_linkedin_config_path + '/registration.yaml,dst=/matrix-beeper-linkedin-registration.yaml,ro'] if matrix_beeper_linkedin_enabled else [])

  59.     +

  60.     (['--mount type=bind,src=' + matrix_go_skype_bridge_config_path + '/registration.yaml,dst=/matrix-go-skype-bridge-registration.yaml,ro'] if matrix_go_skype_bridge_enabled else [])

  61.     +

  62.     (['--mount type=bind,src=' + matrix_heisenbridge_base_path + '/registration.yaml,dst=/heisenbridge-registration.yaml,ro'] if matrix_heisenbridge_enabled else [])

  63.     +

  64.     (['--mount type=bind,src=' + matrix_hookshot_base_path + '/registration.yml,dst=/hookshot-registration.yml,ro'] if matrix_hookshot_enabled else [])

  65.     +

  66.     (['--mount type=bind,src=' + matrix_mautrix_discord_config_path + '/registration.yaml,dst=/matrix-mautrix-discord-registration.yaml,ro'] if matrix_mautrix_discord_enabled else [])

  67.     +

  68.     (['--mount type=bind,src=' + matrix_mautrix_slack_config_path + '/registration.yaml,dst=/matrix-mautrix-slack-registration.yaml,ro'] if matrix_mautrix_slack_enabled else [])

  69.     +

  70.     (['--mount type=bind,src=' + matrix_mautrix_facebook_config_path + '/registration.yaml,dst=/matrix-mautrix-facebook-registration.yaml,ro'] if matrix_mautrix_facebook_enabled else [])

  71.     +

  72.     (['--mount type=bind,src=' + matrix_mautrix_googlechat_config_path + '/registration.yaml,dst=/matrix-mautrix-googlechat-registration.yaml,ro'] if matrix_mautrix_googlechat_enabled else [])

  73.     +

  74.     (['--mount type=bind,src=' + matrix_mautrix_hangouts_config_path + '/registration.yaml,dst=/matrix-mautrix-hangouts-registration.yaml,ro'] if matrix_mautrix_hangouts_enabled else [])

  75.     +

  76.     (['--mount type=bind,src=' + matrix_mautrix_instagram_config_path + '/registration.yaml,dst=/matrix-mautrix-instagram-registration.yaml,ro'] if matrix_mautrix_instagram_enabled else [])

  77.     +

  78.     (['--mount type=bind,src=' + matrix_mautrix_signal_config_path + '/registration.yaml,dst=/matrix-mautrix-signal-registration.yaml,ro'] if matrix_mautrix_signal_enabled else [])

  79.     +

  80.     (['--mount type=bind,src=' + matrix_mautrix_telegram_config_path + '/registration.yaml,dst=/matrix-mautrix-telegram-registration.yaml,ro'] if matrix_mautrix_telegram_enabled else [])

  81.     +

  82.     (['--mount type=bind,src=' + matrix_mautrix_twitter_config_path + '/registration.yaml,dst=/matrix-mautrix-twitter-registration.yaml,ro'] if matrix_mautrix_twitter_enabled else [])

  83.     +

  84.     (['--mount type=bind,src=' + matrix_mautrix_whatsapp_config_path + '/registration.yaml,dst=/matrix-mautrix-whatsapp-registration.yaml,ro'] if matrix_mautrix_whatsapp_enabled else [])

  85.     +

  86.     (['--mount type=bind,src=' + matrix_mx_puppet_discord_config_path + '/registration.yaml,dst=/matrix-mx-puppet-discord-registration.yaml,ro'] if matrix_mx_puppet_discord_enabled else [])

  87.     +

  88.     (['--mount type=bind,src=' + matrix_mx_puppet_groupme_config_path + '/registration.yaml,dst=/matrix-mx-puppet-groupme-registration.yaml,ro'] if matrix_mx_puppet_groupme_enabled else [])

  89.     +

  90.     (['--mount type=bind,src=' + matrix_mx_puppet_instagram_config_path + '/registration.yaml,dst=/matrix-mx-puppet-instagram-registration.yaml,ro'] if matrix_mx_puppet_instagram_enabled else [])

  91.     +

  92.     (['--mount type=bind,src=' + matrix_mx_puppet_slack_config_path + '/registration.yaml,dst=/matrix-mx-puppet-slack-registration.yaml,ro'] if matrix_mx_puppet_slack_enabled else [])

  93.     +

  94.     (['--mount type=bind,src=' + matrix_mx_puppet_steam_config_path + '/registration.yaml,dst=/matrix-mx-puppet-steam-registration.yaml,ro'] if matrix_mx_puppet_steam_enabled else [])

  95.     +

  96.     (['--mount type=bind,src=' + matrix_mx_puppet_twitter_config_path + '/registration.yaml,dst=/matrix-mx-puppet-twitter-registration.yaml,ro'] if matrix_mx_puppet_twitter_enabled else [])

  97.     +

  98.     (['--mount type=bind,src=' + matrix_sms_bridge_config_path + '/registration.yaml,dst=/matrix-sms-bridge-registration.yaml,ro'] if matrix_sms_bridge_enabled else [])

  99.     +

  100.     (['--mount type=bind,src=' + matrix_cactus_comments_app_service_config_file + ',dst=/matrix-cactus-comments.yaml,ro'] if matrix_cactus_comments_enabled else [])

  101.   }}

  102. 

  103. matrix_homeserver_app_service_config_files_auto: |

  104.   {{

  105.     (['/matrix-appservice-discord-registration.yaml'] if matrix_appservice_discord_enabled else [])

  106.     +

  107.     (['/matrix-appservice-irc-registration.yaml'] if matrix_appservice_irc_enabled else [])

  108.     +

  109.     (['/matrix-appservice-kakaotalk-registration.yaml'] if matrix_appservice_kakaotalk_enabled else [])

  110.     +

  111.     (['/matrix-appservice-slack-registration.yaml'] if matrix_appservice_slack_enabled else [])

  112.     +

  113.     (['/matrix-appservice-webhooks-registration.yaml'] if matrix_appservice_webhooks_enabled else [])

  114.     +

  115.     (['/matrix-beeper-linkedin-registration.yaml'] if matrix_beeper_linkedin_enabled else [])

  116.     +

  117.     (['/matrix-go-skype-bridge-registration.yaml'] if matrix_go_skype_bridge_enabled else [])

  118.     +

  119.     (['/heisenbridge-registration.yaml'] if matrix_heisenbridge_enabled else [])

  120.     +

  121.     (['/hookshot-registration.yml'] if matrix_hookshot_enabled else [])

  122.     +

  123.     (['/matrix-mautrix-discord-registration.yaml'] if matrix_mautrix_discord_enabled else [])

  124.     +

  125.     (['/matrix-mautrix-slack-registration.yaml'] if matrix_mautrix_slack_enabled else [])

  126.     +

  127.     (['/matrix-mautrix-facebook-registration.yaml'] if matrix_mautrix_facebook_enabled else [])

  128.     +

  129.     (['/matrix-mautrix-googlechat-registration.yaml'] if matrix_mautrix_googlechat_enabled else [])

  130.     +

  131.     (['/matrix-mautrix-hangouts-registration.yaml'] if matrix_mautrix_hangouts_enabled else [])

  132.     +

  133.     (['/matrix-mautrix-instagram-registration.yaml'] if matrix_mautrix_instagram_enabled else [])

  134.     +

  135.     (['/matrix-mautrix-signal-registration.yaml'] if matrix_mautrix_signal_enabled else [])

  136.     +

  137.     (['/matrix-mautrix-telegram-registration.yaml'] if matrix_mautrix_telegram_enabled else [])

  138.     +

  139.     (['/matrix-mautrix-twitter-registration.yaml'] if matrix_mautrix_twitter_enabled else [])

  140.     +

  141.     (['/matrix-mautrix-whatsapp-registration.yaml'] if matrix_mautrix_whatsapp_enabled else [])

  142.     +

  143.     (['/matrix-mx-puppet-discord-registration.yaml'] if matrix_mx_puppet_discord_enabled else [])

  144.     +

  145.     (['/matrix-mx-puppet-groupme-registration.yaml'] if matrix_mx_puppet_groupme_enabled else [])

  146.     +

  147.     (['/matrix-mx-puppet-instagram-registration.yaml'] if matrix_mx_puppet_instagram_enabled else [])

  148.     +

  149.     (['/matrix-mx-puppet-slack-registration.yaml'] if matrix_mx_puppet_slack_enabled else [])

  150.     +

  151.     (['/matrix-mx-puppet-steam-registration.yaml'] if matrix_mx_puppet_steam_enabled else [])

  152.     +

  153.     (['/matrix-mx-puppet-twitter-registration.yaml'] if matrix_mx_puppet_twitter_enabled else [])

  154.     +

  155.     (['/matrix-sms-bridge-registration.yaml'] if matrix_sms_bridge_enabled else [])

  156.     +

  157.     (['/matrix-cactus-comments.yaml'] if matrix_cactus_comments_enabled else [])

  158.   }}

  159. 

  160. ########################################################################

  161. #                                                                      #

  162. # /base                                                                #

  163. #                                                                      #

  164. ########################################################################

  165. 

  166. 

  167. ########################################################################

  168. #                                                                      #

  169. # com.devture.ansible.role.systemd_service_manager                     #

  170. #                                                                      #

  171. ########################################################################

  172. 

  173. # This list is not exhaustive and final.

  174. # Synapse workers are still injected into the list at runtime.

  175. # Additional JVB workers (playbooks/jitsi_jvb.yml -- roles/custom/matrix-jitsi/tasks/init_additional_jvb.yml) override this variable at runtime as well.

  176. #

  177. # Priority levels are like this:

  178. # - core services (the homeserver) get a level of ~1000

  179. # - services that core services depend on (database, Redis, ntfy, etc.) get a lower level - between 500 and 1000

  180. # - reverse-proxying services get level 3000

  181. # - Matrix utility services (bridges, bots) get a level of 2000/2200, so that:

  182. #   - they can start before the reverse-proxy

  183. #   - so that, when the reverse-proxy is up (Matrix is up), all bots and bridges can be interacted with

  184. # - monitoring services (Prometheus, Grafana, ..) get a level of 4000 - they can start later than all-of-Matrix

  185. # - services which aren't time-sensitive (various crons and timers) get a level of 5000 - they can start later than all-of-Matrix

  186. #

  187. # `matrix-bot-postmoogle.service` has a higher priority number (4000), unlike other bots' priority (2200),

  188. # because it requires SSL certificates. If Traefik is used, then Postmoogle needs to start at least after Traefik (3500) and Traefik certs dumper (3500).

  189. devture_systemd_service_manager_services_list_auto: |

  190.   {{

  191.     ([{'name': (backup_borg_identifier + '.timer'), 'priority': 5000, 'groups': ['matrix', 'backup', 'borg']}] if backup_borg_enabled else [])

  192.     +

  193.     ([{'name': 'matrix-bot-buscarron.service', 'priority': 2200, 'groups': ['matrix', 'bots', 'buscarron']}] if matrix_bot_buscarron_enabled else [])

  194.     +

  195.     ([{'name': 'matrix-bot-go-neb.service', 'priority': 2200, 'groups': ['matrix', 'bots', 'go-neb']}] if matrix_bot_go_neb_enabled else [])

  196.     +

  197.     ([{'name': 'matrix-bot-honoroit.service', 'priority': 2200, 'groups': ['matrix', 'bots', 'honoroit']}] if matrix_bot_honoroit_enabled else [])

  198.     +

  199.     ([{'name': 'matrix-bot-matrix-registration-bot.service', 'priority': 2200, 'groups': ['matrix', 'bots', 'registration-bot']}] if matrix_bot_matrix_registration_bot_enabled else [])

  200.     +

  201.     ([{'name': 'matrix-bot-matrix-reminder-bot.service', 'priority': 2200, 'groups': ['matrix', 'bots', 'reminder-bot']}] if matrix_bot_matrix_reminder_bot_enabled else [])

  202.     +

  203.     ([{'name': 'matrix-bot-maubot.service', 'priority': 2200, 'groups': ['matrix', 'bots', 'maubot']}] if matrix_bot_maubot_enabled else [])

  204.     +

  205.     ([{'name': 'matrix-bot-mjolnir.service', 'priority': 4000, 'groups': ['matrix', 'bots', 'mjolnir']}] if matrix_bot_mjolnir_enabled else [])

  206.     +

  207.     ([{'name': 'matrix-bot-draupnir.service', 'priority': 4000, 'groups': ['matrix', 'bots', 'draupnir']}] if matrix_bot_draupnir_enabled else [])

  208.     +

  209.     ([{'name': 'matrix-bot-postmoogle.service', 'priority': 4000, 'groups': ['matrix', 'bots', 'postmoogle']}] if matrix_bot_postmoogle_enabled else [])

  210.     +

  211.     ([{'name': 'matrix-bot-chatgpt.service', 'priority': 2200, 'groups': ['matrix', 'bots', 'chatgpt']}] if matrix_bot_chatgpt_enabled else [])

  212.     +

  213.     ([{'name': 'matrix-appservice-discord.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'appservice-discord']}] if matrix_appservice_discord_enabled else [])

  214.     +

  215.     ([{'name': 'matrix-appservice-irc.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'appservice-irc']}] if matrix_appservice_irc_enabled else [])

  216.     +

  217.     ([{'name': 'matrix-appservice-kakaotalk.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'appservice-kakaotalk']}] if matrix_appservice_kakaotalk_enabled else [])

  218.     +

  219.     ([{'name': 'matrix-appservice-kakaotalk-node.service', 'priority': 1900, 'groups': ['matrix', 'bridges', 'appservice-kakaotalk', 'appservice-kakaotalk-node']}] if matrix_appservice_kakaotalk_enabled else [])

  220.     +

  221.     ([{'name': 'matrix-appservice-slack.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'appservice-slack']}] if matrix_appservice_slack_enabled else [])

  222.     +

  223.     ([{'name': 'matrix-appservice-webhooks.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'appservice-webhooks']}] if matrix_appservice_webhooks_enabled else [])

  224.     +

  225.     ([{'name': 'matrix-beeper-linkedin.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'beeper-linkedin']}] if matrix_beeper_linkedin_enabled else [])

  226.     +

  227.     ([{'name': 'matrix-go-skype-bridge.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'go-skype']}] if matrix_go_skype_bridge_enabled else [])

  228.     +

  229.     ([{'name': 'matrix-heisenbridge.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'heisenbridge']}] if matrix_heisenbridge_enabled else [])

  230.     +

  231.     ([{'name': 'matrix-hookshot.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'hookshot']}] if matrix_hookshot_enabled else [])

  232.     +

  233.     ([{'name': 'matrix-mautrix-discord.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mautrix-discord']}] if matrix_mautrix_discord_enabled else [])

  234.     +

  235.     ([{'name': 'matrix-mautrix-slack.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mautrix-slack']}] if matrix_mautrix_slack_enabled else [])

  236.     +

  237.     ([{'name': 'matrix-mautrix-facebook.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mautrix-facebook']}] if matrix_mautrix_facebook_enabled else [])

  238.     +

  239.     ([{'name': 'matrix-mautrix-googlechat.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mautrix-googlechat']}] if matrix_mautrix_googlechat_enabled else [])

  240.     +

  241.     ([{'name': 'matrix-mautrix-hangouts.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mautrix-hangouts']}] if matrix_mautrix_hangouts_enabled else [])

  242.     +

  243.     ([{'name': 'matrix-mautrix-instagram.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mautrix-instagram']}] if matrix_mautrix_instagram_enabled else [])

  244.     +

  245.     ([{'name': 'matrix-mautrix-signal.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mautrix-signal']}] if matrix_mautrix_signal_enabled else [])

  246.     +

  247.     ([{'name': 'matrix-mautrix-signal-daemon.service', 'priority': 1900, 'groups': ['matrix', 'bridges', 'mautrix-signal', 'mautrix-signal-daemon']}] if matrix_mautrix_signal_enabled else [])

  248.     +

  249.     ([{'name': 'matrix-mautrix-telegram.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mautrix-telegram']}] if matrix_mautrix_telegram_enabled else [])

  250.     +

  251.     ([{'name': 'matrix-mautrix-twitter.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mautrix-twitter']}] if matrix_mautrix_twitter_enabled else [])

  252.     +

  253.     ([{'name': 'matrix-mautrix-whatsapp.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mautrix-whatsapp']}] if matrix_mautrix_whatsapp_enabled else [])

  254.     +

  255.     ([{'name': 'matrix-mx-puppet-discord.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mx-puppet-discord']}] if matrix_mx_puppet_discord_enabled else [])

  256.     +

  257.     ([{'name': 'matrix-mx-puppet-groupme.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mx-puppet-groupme']}] if matrix_mx_puppet_groupme_enabled else [])

  258.     +

  259.     ([{'name': 'matrix-mx-puppet-instagram.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mx-puppet-instagram']}] if matrix_mx_puppet_instagram_enabled else [])

  260.     +

  261.     ([{'name': 'matrix-mx-puppet-slack.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mx-puppet-slack']}] if matrix_mx_puppet_slack_enabled else [])

  262.     +

  263.     ([{'name': 'matrix-mx-puppet-steam.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mx-puppet-steam']}] if matrix_mx_puppet_steam_enabled else [])

  264.     +

  265.     ([{'name': 'matrix-mx-puppet-twitter.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mx-puppet-twitter']}] if matrix_mx_puppet_twitter_enabled else [])

  266.     +

  267.     ([{'name': 'matrix-sms-bridge.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'sms']}] if matrix_sms_bridge_enabled else [])

  268.     +

  269.     ([{'name': 'matrix-cactus-comments.service', 'priority': 2000, 'groups': ['matrix', 'cactus-comments']}] if matrix_cactus_comments_enabled else [])

  270.     +

  271.     ([{'name': 'matrix-client-cinny.service', 'priority': 2000, 'groups': ['matrix', 'clients', 'cinny']}] if matrix_client_cinny_enabled else [])

  272.     +

  273.     ([{'name': 'matrix-client-element.service', 'priority': 2000, 'groups': ['matrix', 'clients', 'element']}] if matrix_client_element_enabled else [])

  274.     +

  275.     ([{'name': 'matrix-client-hydrogen.service', 'priority': 2000, 'groups': ['matrix', 'clients', 'hydrogen']}] if matrix_client_hydrogen_enabled else [])

  276.     +

  277.     ([{'name': ('matrix-' + matrix_homeserver_implementation + '.service'), 'priority': 1000, 'groups': ['matrix', 'homeservers', matrix_homeserver_implementation]}] if matrix_homeserver_enabled else [])

  278.     +

  279.     ([{'name': 'matrix-corporal.service', 'priority': 1500, 'groups': ['matrix', 'corporal']}] if matrix_corporal_enabled else [])

  280.     +

  281.     ([{'name': 'matrix-coturn.service', 'priority': 4000, 'groups': ['matrix', 'coturn']}] if matrix_coturn_enabled else [])

  282.     +

  283.     ([{'name': 'matrix-rageshake.service', 'priority': 4000, 'groups': ['matrix', 'rageshake']}] if matrix_rageshake_enabled else [])

  284.     +

  285.     ([{'name': 'matrix-coturn-reload.timer', 'priority': 5000, 'groups': ['matrix', 'coturn']}] if (matrix_coturn_enabled and matrix_coturn_tls_enabled) else [])

  286.     +

  287.     ([{'name': 'matrix-dimension.service', 'priority': 4000, 'groups': ['matrix', 'integration-managers', 'dimension']}] if matrix_dimension_enabled else [])

  288.     +

  289.     ([{'name': 'matrix-dynamic-dns.service', 'priority': 5000, 'groups': ['matrix', 'dynamic-dns']}] if matrix_dynamic_dns_enabled else [])

  290.     +

  291.     ([{'name': 'matrix-email2matrix.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'email2matrix']}] if matrix_email2matrix_enabled else [])

  292.     +

  293.     ([{'name': (etherpad_identifier + '.service'), 'priority': 4000, 'groups': ['matrix', 'etherpad']}] if etherpad_enabled else [])

  294.     +

  295.     ([{'name': (grafana_identifier + '.service'), 'priority': 4000, 'groups': ['matrix', 'monitoring', 'grafana']}] if grafana_enabled else [])

  296.     +

  297.     ([{'name': 'matrix-jitsi-web.service', 'priority': 4200, 'groups': ['matrix', 'jitsi', 'jitsi-web']}] if matrix_jitsi_enabled else [])

  298.     +

  299.     ([{'name': 'matrix-jitsi-prosody.service', 'priority': 4000, 'groups': ['matrix', 'jitsi', 'jitsi-prosody']}] if matrix_jitsi_enabled else [])

  300.     +

  301.     ([{'name': 'matrix-jitsi-jicofo.service', 'priority': 4100, 'groups': ['matrix', 'jitsi', 'jitsi-jicofo']}] if matrix_jitsi_enabled else [])

  302.     +

  303.     ([{'name': 'matrix-jitsi-jvb.service', 'priority': 4100, 'groups': ['matrix', 'jitsi', 'jitsi-jvb']}] if matrix_jitsi_enabled else [])

  304.     +

  305.     ([{'name': 'matrix-ldap-registration-proxy.service', 'priority': 2000, 'groups': ['matrix', 'ldap-registration-proxy']}] if matrix_ldap_registration_proxy_enabled else [])

  306.     +

  307.     ([{'name': 'matrix-ma1sd.service', 'priority': 2000, 'groups': ['matrix', 'ma1sd']}] if matrix_ma1sd_enabled else [])

  308.     +

  309.     ([{'name': 'matrix-mailer.service', 'priority': 2000, 'groups': ['matrix', 'mailer']}] if matrix_mailer_enabled else [])

  310.     +

  311.     ([{'name': 'matrix-nginx-proxy.service', 'priority': 3000, 'groups': ['matrix', 'nginx', 'reverse-proxies']}] if matrix_nginx_proxy_enabled else [])

  312.     +

  313.     (matrix_ssl_renewal_systemd_units_list | selectattr('applicable') | selectattr('enableable') | list )

  314.     +

  315.     ([{'name': (ntfy_identifier + '.service'), 'priority': 800, 'groups': ['matrix', 'ntfy']}] if ntfy_enabled else [])

  316.     +

  317.     ([{'name': (devture_postgres_identifier + '.service'), 'priority': 500, 'groups': ['matrix', 'postgres']}] if devture_postgres_enabled else [])

  318.     +

  319.     ([{'name': (devture_postgres_backup_identifier + '.service'), 'priority': 5000, 'groups': ['matrix', 'backup', 'postgres-backup']}] if devture_postgres_backup_enabled else [])

  320.     +

  321.     ([{'name': 'matrix-prometheus.service', 'priority': 4000, 'groups': ['matrix', 'monitoring', 'prometheus', 'prometheus-core']}] if matrix_prometheus_enabled else [])

  322.     +

  323.     ([{'name': (prometheus_node_exporter_identifier + '.service'), 'priority': 3900, 'groups': ['matrix', 'monitoring', 'prometheus', 'prometheus-exporters']}] if prometheus_node_exporter_enabled else [])

  324.     +

  325.     ([{'name': (prometheus_postgres_exporter_identifier + '.service'), 'priority': 3900, 'groups': ['matrix', 'monitoring', 'prometheus', 'prometheus-exporters']}] if prometheus_postgres_exporter_enabled else [])

  326.     +

  327.     ([{'name': 'matrix-prometheus-nginxlog-exporter.service', 'priority': 3900, 'groups': ['matrix', 'monitoring', 'prometheus', 'prometheus-exporters']}] if matrix_prometheus_nginxlog_exporter_enabled else [])

  328.     +

  329.     ([{'name': (redis_identifier + '.service'), 'priority': 750, 'groups': ['matrix', 'redis']}] if redis_enabled else [])

  330.     +

  331.     ([{'name': 'matrix-registration.service', 'priority': 4000, 'groups': ['matrix', 'registration']}] if matrix_registration_enabled else [])

  332.     +

  333.     ([{'name': 'matrix-sygnal.service', 'priority': 800, 'groups': ['matrix', 'sygnal']}] if matrix_sygnal_enabled else [])

  334.     +

  335.     ([{'name': 'matrix-goofys.service', 'priority': 800, 'groups': ['matrix', 'goofys']}] if matrix_s3_media_store_enabled else [])

  336.     +

  337.     ([{'name': 'matrix-synapse-s3-storage-provider-migrate.timer', 'priority': 5000, 'groups': ['matrix']}] if matrix_synapse_ext_synapse_s3_storage_provider_enabled else [])

  338.     +

  339.     ([{'name': 'matrix-synapse-admin.service', 'priority': 4000, 'groups': ['matrix', 'synapse-admin']}] if matrix_synapse_admin_enabled else [])

  340.     +

  341.     ([{'name': 'matrix-synapse-reverse-proxy-companion.service', 'priority': 1500, 'groups': ['matrix', 'homeservers', 'synapse', 'reverse-proxies']}] if matrix_synapse_reverse_proxy_companion_enabled else [])

  342.     +

  343.     ([{'name': 'matrix-user-verification-service.service', 'priority': 800, 'groups': ['matrix', 'matrix-user-verification-service']}] if matrix_user_verification_service_enabled else [])

  344.     +

  345.     ([{'name': (devture_container_socket_proxy_identifier + '.service'), 'priority': 2900, 'groups': ['matrix', 'reverse-proxies', 'container-socket-proxy']}] if devture_container_socket_proxy_enabled else [])

  346.     +

  347.     ([{'name': (devture_traefik_identifier + '.service'), 'priority': 3000, 'groups': ['matrix', 'traefik', 'reverse-proxies']}] if devture_traefik_enabled else [])

  348.     +

  349.     ([{'name': (devture_traefik_certs_dumper_identifier + '.service'), 'priority': 3500, 'groups': ['matrix', 'traefik-certs-dumper']}] if devture_traefik_certs_dumper_enabled else [])

  350.   }}

  351. 

  352. ########################################################################

  353. #                                                                      #

  354. # /com.devture.ansible.role.systemd_service_manager                    #

  355. #                                                                      #

  356. ########################################################################

  357. 

  358. 

  359. ########################################################################

  360. #                                                                      #

  361. # com.devture.ansible.role.timesync                                    #

  362. #                                                                      #

  363. ########################################################################

  364. 

  365. # To completely disable installing systemd-timesyncd/ntpd, use `devture_timesync_installation_enabled: false`.

  366. 

  367. ########################################################################

  368. #                                                                      #

  369. # /com.devture.ansible.role.timesync                                   #

  370. #                                                                      #

  371. ########################################################################

  372. 

  373. 

  374. 

  375. ######################################################################

  376. #

  377. # com.devture.ansible.role.playbook_state_preserver

  378. #

  379. ######################################################################

  380. 

  381. # To completely disable this feature, use `devture_playbook_state_preserver_enabled: false`.

  382. 

  383. devture_playbook_state_preserver_uid: "{{ matrix_user_uid }}"

  384. devture_playbook_state_preserver_gid: "{{ matrix_user_gid }}"

  385. 

  386. devture_playbook_state_preserver_vars_preservation_dst: "{{ matrix_base_data_path }}/vars.yml"

  387. 

  388. devture_playbook_state_preserver_commit_hash_preservation_dst: "{{ matrix_base_data_path }}/git_hash.yml"

  389. 

  390. ######################################################################

  391. #

  392. # /com.devture.ansible.role.playbook_state_preserver

  393. #

  394. ######################################################################

  395. 

  396. 

  397. 

  398. ######################################################################

  399. #

  400. # matrix-base

  401. #

  402. ######################################################################

  403. 

  404. matrix_identity_server_url: "{{ ('https://' + matrix_server_fqn_matrix) if matrix_ma1sd_enabled else None }}"

  405. 

  406. matrix_homeserver_container_url: |-

  407.   {{

  408.     'http://matrix-nginx-proxy:12080' if matrix_nginx_proxy_enabled else {

  409.       'synapse': ('http://matrix-synapse-reverse-proxy-companion:8008' if matrix_synapse_reverse_proxy_companion_enabled else 'http://matrix-synapse:'+ matrix_synapse_container_client_api_port|string),

  410.       'dendrite': ('http://matrix-dendrite:' + matrix_dendrite_http_bind_port|string),

  411.       'conduit': ('http://matrix-conduit:' + matrix_conduit_port_number|string),

  412.     }[matrix_homeserver_implementation]

  413.   }}

  414. 

  415. matrix_homeserver_container_federation_url: |-

  416.   {{

  417.     'http://matrix-nginx-proxy:12088' if matrix_nginx_proxy_enabled else {

  418.       'synapse': ('http://matrix-synapse-reverse-proxy-companion:8048' if matrix_synapse_reverse_proxy_companion_enabled else 'http://matrix-synapse:'+ matrix_synapse_container_federation_api_plain_port|string),

  419.       'dendrite': ('http://matrix-dendrite:' + matrix_dendrite_http_bind_port|string),

  420.       'conduit': ('http://matrix-conduit:' + matrix_conduit_port_number|string),

  421.     }[matrix_homeserver_implementation]

  422.   }}

  423. 

  424. matrix_homeserver_container_network: |-

  425.   {{

  426.     matrix_nginx_proxy_container_network if matrix_nginx_proxy_enabled else {

  427.       'synapse': matrix_synapse_container_network,

  428.       'dendrite': matrix_dendrite_container_network,

  429.       'conduit': matrix_conduit_container_network,

  430.     }[matrix_homeserver_implementation]

  431.   }}

  432. 

  433. matrix_integration_manager_rest_url: "{{ matrix_dimension_integrations_rest_url if matrix_dimension_enabled else None }}"

  434. matrix_integration_manager_ui_url: "{{ matrix_dimension_integrations_ui_url if matrix_dimension_enabled else None }}"

  435. 

  436. ######################################################################

  437. #

  438. # /matrix-base

  439. #

  440. ######################################################################

  441. 

  442. 

  443. ######################################################################

  444. #

  445. # matrix-bridge-appservice-discord

  446. #

  447. ######################################################################

  448. 

  449. # We don't enable bridges by default.

  450. matrix_appservice_discord_enabled: false

  451. 

  452. # Normally, matrix-nginx-proxy is enabled and nginx can reach matrix-appservice-discord over the container network.

  453. # If matrix-nginx-proxy is not enabled, or you otherwise have a need for it, you can expose

  454. # matrix-appservice-discord's client-server port to the local host.

  455. matrix_appservice_discord_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '9005') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  456. 

  457. # If the homeserver disables presence, it's likely better (less wasteful) to also disable presence on the bridge side.

  458. matrix_appservice_discord_bridge_disablePresence: "{{ not matrix_synapse_presence_enabled }}"

  459. 

  460. matrix_appservice_discord_systemd_required_services_list: |

  461.   {{

  462.     ['docker.service']

  463.     +

  464.     ['matrix-' + matrix_homeserver_implementation + '.service']

  465.     +

  466.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  467.     +

  468.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  469.   }}

  470. 

  471. matrix_appservice_discord_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'discord.as.token', rounds=655555) | to_uuid }}"

  472. 

  473. matrix_appservice_discord_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'discord.hs.token', rounds=655555) | to_uuid }}"

  474. 

  475. # We only make this use Postgres if our own Postgres server is enabled.

  476. # It's only then (for now) that we can automatically create the necessary database and user for this service.

  477. matrix_appservice_discord_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  478. matrix_appservice_discord_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  479. matrix_appservice_discord_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'as.discord.db', rounds=655555) | to_uuid }}"

  480. 

  481. ######################################################################

  482. #

  483. # /matrix-bridge-appservice-discord

  484. #

  485. ######################################################################

  486. 

  487. 

  488. ######################################################################

  489. #

  490. # matrix-appservice-webhooks

  491. #

  492. ######################################################################

  493. 

  494. # We don't enable bridges by default.

  495. matrix_appservice_webhooks_enabled: false

  496. 

  497. matrix_appservice_webhooks_container_image_self_build: "{{ matrix_architecture != 'amd64' }}"

  498. 

  499. # Normally, matrix-nginx-proxy is enabled and nginx can reach matrix-appservice-webhooks over the container network.

  500. # If matrix-nginx-proxy is not enabled, or you otherwise have a need for it, you can expose

  501. # matrix-appservice-webhooks' client-server port to the local host.

  502. matrix_appservice_webhooks_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ matrix_appservice_webhooks_matrix_port) if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  503. 

  504. matrix_appservice_webhooks_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'webhook.as.token', rounds=655555) | to_uuid }}"

  505. 

  506. matrix_appservice_webhooks_homeserver_url: "{{ matrix_homeserver_container_url }}"

  507. matrix_appservice_webhooks_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'webhook.hs.token', rounds=655555) | to_uuid }}"

  508. 

  509. matrix_appservice_webhooks_id_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'webhook.id.token', rounds=655555) | to_uuid }}"

  510. 

  511. matrix_appservice_webhooks_systemd_required_services_list: |

  512.   {{

  513.     ['docker.service']

  514.     +

  515.     ['matrix-' + matrix_homeserver_implementation + '.service']

  516.     +

  517.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  518.   }}

  519. 

  520. ######################################################################

  521. #

  522. # /matrix-appservice-webhooks

  523. #

  524. ######################################################################

  525. 

  526. 

  527. ######################################################################

  528. #

  529. # matrix-appservice-slack

  530. #

  531. ######################################################################

  532. 

  533. # We don't enable bridges by default.

  534. matrix_appservice_slack_enabled: false

  535. 

  536. matrix_appservice_slack_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"

  537. 

  538. # Normally, matrix-nginx-proxy is enabled and nginx can reach matrix-appservice-slack over the container network.

  539. # If matrix-nginx-proxy is not enabled, or you otherwise have a need for it, you can expose

  540. # matrix-appservice-slack's client-server port to the local host.

  541. matrix_appservice_slack_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ matrix_appservice_slack_slack_port) if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  542. 

  543. matrix_appservice_slack_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'slack.as.token', rounds=655555) | to_uuid }}"

  544. 

  545. matrix_appservice_slack_homeserver_url: "{{ matrix_homeserver_container_url }}"

  546. matrix_appservice_slack_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'slack.hs.token', rounds=655555) | to_uuid }}"

  547. 

  548. matrix_appservice_slack_id_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'slack.id.token', rounds=655555) | to_uuid }}"

  549. 

  550. matrix_appservice_slack_systemd_required_services_list: |

  551.   {{

  552.     ['docker.service']

  553.     +

  554.     ['matrix-' + matrix_homeserver_implementation + '.service']

  555.     +

  556.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  557.   }}

  558. 

  559. # Postgres is the default, except if not using internal Postgres server

  560. matrix_appservice_slack_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'nedb' }}"

  561. matrix_appservice_slack_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  562. matrix_appservice_slack_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'as.slack.db', rounds=655555) | to_uuid }}"

  563. 

  564. ######################################################################

  565. #

  566. # /matrix-bridge-appservice-slack

  567. #

  568. ######################################################################

  569. 

  570. ######################################################################

  571. #

  572. # matrix-bridge-appservice-irc

  573. #

  574. ######################################################################

  575. 

  576. # We don't enable bridges by default.

  577. matrix_appservice_irc_enabled: false

  578. 

  579. matrix_appservice_irc_container_image_self_build: "{{ matrix_architecture != 'amd64' }}"

  580. 

  581. # Normally, matrix-nginx-proxy is enabled and nginx can reach matrix-appservice-irc over the container network.

  582. # If matrix-nginx-proxy is not enabled, or you otherwise have a need for it, you can expose

  583. # matrix-appservice-irc's client-server port to the local host.

  584. matrix_appservice_irc_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '9999') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  585. 

  586. # The IRC bridge docs say that if homeserver presence is disabled, it's better to also disable

  587. # IRC bridge presence, for performance reasons.

  588. matrix_appservice_irc_homeserver_enablePresence: "{{ matrix_synapse_presence_enabled }}"

  589. 

  590. matrix_appservice_irc_systemd_required_services_list: |

  591.   {{

  592.     ['docker.service']

  593.     +

  594.     ['matrix-' + matrix_homeserver_implementation + '.service']

  595.     +

  596.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  597.   }}

  598. 

  599. matrix_appservice_irc_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'irc.as.token', rounds=655555) | to_uuid }}"

  600. 

  601. matrix_appservice_irc_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'irc.hs.token', rounds=655555) | to_uuid }}"

  602. 

  603. matrix_appservice_irc_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'nedb' }}"

  604. matrix_appservice_irc_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  605. matrix_appservice_irc_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'as.irc.db', rounds=655555) | to_uuid }}"

  606. 

  607. 

  608. ######################################################################

  609. #

  610. # /matrix-bridge-appservice-irc

  611. #

  612. ######################################################################

  613. 

  614. ######################################################################

  615. #

  616. # matrix-bridge-appservice-kakaotalk

  617. #

  618. ######################################################################

  619. 

  620. # We don't enable bridges by default.

  621. matrix_appservice_kakaotalk_enabled: false

  622. 

  623. matrix_appservice_kakaotalk_systemd_required_services_list: |

  624.   {{

  625.     ['docker.service']

  626.     +

  627.     ['matrix-appservice-kakaotalk-node.service']

  628.     +

  629.     ['matrix-' + matrix_homeserver_implementation + '.service']

  630.     +

  631.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  632.     +

  633.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  634.   }}

  635. 

  636. matrix_appservice_kakaotalk_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'as.kakao.hs', rounds=655555) | to_uuid }}"

  637. 

  638. matrix_appservice_kakaotalk_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'as.kakao.hs', rounds=655555) | to_uuid }}"

  639. 

  640. matrix_appservice_kakaotalk_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  641. 

  642. matrix_appservice_kakaotalk_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  643. matrix_appservice_kakaotalk_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  644. matrix_appservice_kakaotalk_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'as.kakao.db', rounds=655555) | to_uuid }}"

  645. 

  646. ######################################################################

  647. #

  648. # /matrix-bridge-appservice-kakaotalk

  649. #

  650. ######################################################################

  651. 

  652. 

  653. ######################################################################

  654. #

  655. # matrix-bridge-beeper-linkedin

  656. #

  657. ######################################################################

  658. 

  659. # We don't enable bridges by default.

  660. matrix_beeper_linkedin_enabled: false

  661. 

  662. matrix_beeper_linkedin_container_image_self_build: "{{ matrix_architecture not in ['amd64'] }}"

  663. 

  664. matrix_beeper_linkedin_systemd_required_services_list: |

  665.   {{

  666.     ['docker.service']

  667.     +

  668.     ['matrix-' + matrix_homeserver_implementation + '.service']

  669.     +

  670.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  671.     +

  672.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  673.   }}

  674. 

  675. matrix_beeper_linkedin_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'linked.as.token', rounds=655555) | to_uuid }}"

  676. 

  677. matrix_beeper_linkedin_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'linked.hs.token', rounds=655555) | to_uuid }}"

  678. 

  679. matrix_beeper_linkedin_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  680. 

  681. matrix_beeper_linkedin_bridge_presence: "{{ matrix_synapse_presence_enabled if matrix_synapse_enabled else true }}"

  682. 

  683. matrix_beeper_linkedin_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  684. matrix_beeper_linkedin_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'maulinkedin.db', rounds=655555) | to_uuid }}"

  685. 

  686. ######################################################################

  687. #

  688. # /matrix-bridge-beeper-linkedin

  689. #

  690. ######################################################################

  691. 

  692. ######################################################################

  693. #

  694. # matrix-bridge-go-skype-bridge

  695. #

  696. ######################################################################

  697. 

  698. # We don't enable bridges by default.

  699. matrix_go_skype_bridge_enabled: false

  700. 

  701. matrix_go_skype_bridge_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"

  702. 

  703. matrix_go_skype_bridge_systemd_required_services_list: |

  704.   {{

  705.     ['docker.service']

  706.     +

  707.     ['matrix-' + matrix_homeserver_implementation + '.service']

  708.     +

  709.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  710.     +

  711.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  712.   }}

  713. 

  714. matrix_go_skype_bridge_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'skype.as.token', rounds=655555) | to_uuid }}"

  715. 

  716. matrix_go_skype_bridge_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'skype.hs.token', rounds=655555) | to_uuid }}"

  717. 

  718. matrix_go_skype_bridge_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  719. 

  720. # Postgres is the default, except if not using internal Postgres server

  721. matrix_go_skype_bridge_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  722. matrix_go_skype_bridge_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  723. matrix_go_skype_bridge_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'goskype.db', rounds=655555) | to_uuid }}"

  724. 

  725. ######################################################################

  726. #

  727. # /matrix-bridge-go-skype-bridge

  728. #

  729. ######################################################################

  730. 

  731. 

  732. ######################################################################

  733. #

  734. # matrix-bridge-mautrix-discord

  735. #

  736. ######################################################################

  737. 

  738. # We don't enable bridges by default.

  739. matrix_mautrix_discord_enabled: false

  740. 

  741. matrix_mautrix_discord_container_image_self_build: "{{ matrix_architecture not in ['arm64', 'amd64'] }}"

  742. 

  743. matrix_mautrix_discord_systemd_required_services_list: |

  744.   {{

  745.     ['docker.service']

  746.     +

  747.     ['matrix-' + matrix_homeserver_implementation + '.service']

  748.     +

  749.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  750.     +

  751.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  752.   }}

  753. 

  754. matrix_mautrix_discord_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'maudisc.as.tok', rounds=655555) | to_uuid }}"

  755. 

  756. matrix_mautrix_discord_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'maudisc.hs.tok', rounds=655555) | to_uuid }}"

  757. 

  758. matrix_mautrix_discord_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  759. 

  760. # Postgres is the default, except if not using internal Postgres server

  761. matrix_mautrix_discord_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  762. matrix_mautrix_discord_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  763. matrix_mautrix_discord_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'maudiscord.db', rounds=655555) | to_uuid }}"

  764. 

  765. ######################################################################

  766. #

  767. # /matrix-bridge-mautrix-discord

  768. #

  769. ######################################################################

  770. 

  771. 

  772. ######################################################################

  773. #

  774. # matrix-bridge-mautrix-slack

  775. #

  776. ######################################################################

  777. 

  778. # We don't enable bridges by default.

  779. matrix_mautrix_slack_enabled: false

  780. 

  781. matrix_mautrix_slack_container_image_self_build: "{{ matrix_architecture not in ['arm64', 'amd64'] }}"

  782. 

  783. matrix_mautrix_slack_systemd_required_services_list: |

  784.   {{

  785.     ['docker.service']

  786.     +

  787.     ['matrix-' + matrix_homeserver_implementation + '.service']

  788.     +

  789.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  790.     +

  791.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  792.   }}

  793. 

  794. matrix_mautrix_slack_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mauslack.as.tok', rounds=655555) | to_uuid }}"

  795. 

  796. matrix_mautrix_slack_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mauslack.hs.tok', rounds=655555) | to_uuid }}"

  797. 

  798. matrix_mautrix_slack_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  799. 

  800. # Postgres is the default, except if not using internal Postgres server

  801. matrix_mautrix_slack_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  802. matrix_mautrix_slack_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  803. matrix_mautrix_slack_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mauslack.db', rounds=655555) | to_uuid }}"

  804. 

  805. ######################################################################

  806. #

  807. # /matrix-bridge-mautrix-slack

  808. #

  809. ######################################################################

  810. 

  811. 

  812. ######################################################################

  813. #

  814. # matrix-bridge-mautrix-facebook

  815. #

  816. ######################################################################

  817. 

  818. # We don't enable bridges by default.

  819. matrix_mautrix_facebook_enabled: false

  820. 

  821. matrix_mautrix_facebook_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"

  822. 

  823. matrix_mautrix_facebook_systemd_required_services_list: |

  824.   {{

  825.     ['docker.service']

  826.     +

  827.     ['matrix-' + matrix_homeserver_implementation + '.service']

  828.     +

  829.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  830.     +

  831.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  832.   }}

  833. 

  834. matrix_mautrix_facebook_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'fb.as.token', rounds=655555) | to_uuid }}"

  835. 

  836. matrix_mautrix_facebook_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'fb.hs.token', rounds=655555) | to_uuid }}"

  837. 

  838. matrix_mautrix_facebook_public_endpoint: "/{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'facebook', rounds=655555) | to_uuid }}"

  839. 

  840. matrix_mautrix_facebook_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '9008') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  841. 

  842. matrix_mautrix_facebook_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  843. 

  844. matrix_mautrix_facebook_bridge_presence: "{{ matrix_synapse_presence_enabled if matrix_synapse_enabled else true }}"

  845. 

  846. # People using an external Prometheus server will need to toggle all of these to be able to consume metrics remotely:

  847. # - `matrix_mautrix_facebook_metrics_enabled`

  848. # - `matrix_mautrix_facebook_proxying_metrics_enabled`

  849. # - `matrix_nginx_proxy_proxy_matrix_metrics_enabled`

  850. matrix_mautrix_facebook_metrics_enabled: "{{ matrix_prometheus_enabled }}"

  851. 

  852. # We'd like to force-set people with external Postgres to SQLite, so the bridge role can complain

  853. # and point them to a migration path.

  854. matrix_mautrix_facebook_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  855. matrix_mautrix_facebook_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  856. matrix_mautrix_facebook_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mau.fb.db', rounds=655555) | to_uuid }}"

  857. 

  858. ######################################################################

  859. #

  860. # /matrix-bridge-mautrix-facebook

  861. #

  862. ######################################################################

  863. 

  864. 

  865. ######################################################################

  866. #

  867. # matrix-bridge-mautrix-googlechat

  868. #

  869. ######################################################################

  870. 

  871. # We don't enable bridges by default.

  872. matrix_mautrix_googlechat_enabled: false

  873. 

  874. matrix_mautrix_googlechat_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"

  875. 

  876. matrix_mautrix_googlechat_systemd_required_services_list: |

  877.   {{

  878.     ['docker.service']

  879.     +

  880.     ['matrix-' + matrix_homeserver_implementation + '.service']

  881.     +

  882.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  883.     +

  884.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  885.   }}

  886. 

  887. matrix_mautrix_googlechat_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'gc.as.token', rounds=655555) | to_uuid }}"

  888. 

  889. matrix_mautrix_googlechat_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'gc.hs.token', rounds=655555) | to_uuid }}"

  890. 

  891. matrix_mautrix_googlechat_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '9007') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  892. 

  893. matrix_mautrix_googlechat_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  894. 

  895. # Postgres is the default, except if not using internal Postgres server

  896. matrix_mautrix_googlechat_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  897. matrix_mautrix_googlechat_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  898. matrix_mautrix_googlechat_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mau.gc.db', rounds=655555) | to_uuid }}"

  899. 

  900. ######################################################################

  901. #

  902. # /matrix-bridge-mautrix-googlechat

  903. #

  904. ######################################################################

  905. 

  906. 

  907. ######################################################################

  908. #

  909. # matrix-bridge-mautrix-hangouts

  910. #

  911. ######################################################################

  912. 

  913. # We don't enable bridges by default.

  914. matrix_mautrix_hangouts_enabled: false

  915. 

  916. matrix_mautrix_hangouts_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"

  917. 

  918. matrix_mautrix_hangouts_systemd_required_services_list: |

  919.   {{

  920.     ['docker.service']

  921.     +

  922.     ['matrix-' + matrix_homeserver_implementation + '.service']

  923.     +

  924.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  925.     +

  926.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  927.   }}

  928. 

  929. matrix_mautrix_hangouts_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'ho.as.token', rounds=655555) | to_uuid }}"

  930. 

  931. matrix_mautrix_hangouts_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'ho.hs.token', rounds=655555) | to_uuid }}"

  932. 

  933. matrix_mautrix_hangouts_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '9007') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  934. 

  935. matrix_mautrix_hangouts_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  936. 

  937. # Postgres is the default, except if not using internal Postgres server

  938. matrix_mautrix_hangouts_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  939. matrix_mautrix_hangouts_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  940. matrix_mautrix_hangouts_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mau.hangouts.db', rounds=655555) | to_uuid }}"

  941. 

  942. ######################################################################

  943. #

  944. # /matrix-bridge-mautrix-hangouts

  945. #

  946. ######################################################################

  947. 

  948. 

  949. ######################################################################

  950. #

  951. # matrix-bridge-mautrix-instagram

  952. #

  953. ######################################################################

  954. 

  955. # We don't enable bridges by default.

  956. matrix_mautrix_instagram_enabled: false

  957. 

  958. matrix_mautrix_instagram_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"

  959. 

  960. matrix_mautrix_instagram_systemd_required_services_list: |

  961.   {{

  962.     ['docker.service']

  963.     +

  964.     ['matrix-' + matrix_homeserver_implementation + '.service']

  965.     +

  966.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  967.     +

  968.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  969.   }}

  970. 

  971. matrix_mautrix_instagram_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'ig.as.token', rounds=655555) | to_uuid }}"

  972. 

  973. matrix_mautrix_instagram_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'ig.hs.token', rounds=655555) | to_uuid }}"

  974. 

  975. matrix_mautrix_instagram_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  976. 

  977. matrix_mautrix_instagram_bridge_presence: "{{ matrix_synapse_presence_enabled if matrix_synapse_enabled else true }}"

  978. 

  979. # People using an external Prometheus server will need to toggle all of these to be able to consume metrics remotely:

  980. # - `matrix_mautrix_instagram_metrics_enabled`

  981. # - `matrix_mautrix_instagram_proxying_metrics_enabled`

  982. # - `matrix_nginx_proxy_proxy_matrix_metrics_enabled`

  983. matrix_mautrix_instagram_metrics_enabled: "{{ matrix_prometheus_enabled }}"

  984. 

  985. # We'd like to force-set people with external Postgres to SQLite, so the bridge role can complain

  986. # and point them to a migration path.

  987. matrix_mautrix_instagram_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  988. matrix_mautrix_instagram_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  989. matrix_mautrix_instagram_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mau.ig.db', rounds=655555) | to_uuid }}"

  990. 

  991. ######################################################################

  992. #

  993. # /matrix-bridge-mautrix-instagram

  994. #

  995. ######################################################################

  996. 

  997. 

  998. ######################################################################

  999. #

  1000. # matrix-bridge-mautrix-signal

  1001. #

  1002. ######################################################################

  1003. 

  1004. # We don't enable bridges by default.

  1005. matrix_mautrix_signal_enabled: false

  1006. 

  1007. matrix_mautrix_signal_systemd_required_services_list: |

  1008.   {{

  1009.     ['docker.service']

  1010.     +

  1011.     ['matrix-' + matrix_homeserver_implementation + '.service']

  1012.     +

  1013.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  1014.     +

  1015.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1016.     +

  1017.     ['matrix-mautrix-signal-daemon.service']

  1018.   }}

  1019. 

  1020. matrix_mautrix_signal_homeserver_domain: '{{ matrix_domain }}'

  1021. 

  1022. matrix_mautrix_signal_homeserver_address: "{{ matrix_homeserver_container_url }}"

  1023. 

  1024. matrix_mautrix_signal_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'si.hs.token', rounds=655555) | to_uuid }}"

  1025. 

  1026. matrix_mautrix_signal_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'si.as.token', rounds=655555) | to_uuid }}"

  1027. 

  1028. matrix_mautrix_signal_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  1029. 

  1030. # People using an external Prometheus server will need to toggle all of these to be able to consume metrics remotely:

  1031. # - `matrix_mautrix_signal_metrics_enabled`

  1032. # - `matrix_mautrix_signal_proxying_metrics_enabled`

  1033. # - `matrix_nginx_proxy_proxy_matrix_metrics_enabled`

  1034. matrix_mautrix_signal_metrics_enabled: "{{ matrix_prometheus_enabled }}"

  1035. 

  1036. matrix_mautrix_signal_database_engine: 'postgres'

  1037. matrix_mautrix_signal_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1038. matrix_mautrix_signal_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mau.signal.db', rounds=655555) | to_uuid }}"

  1039. 

  1040. matrix_mautrix_signal_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"

  1041. matrix_mautrix_signal_daemon_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"

  1042. 

  1043. ######################################################################

  1044. #

  1045. # /matrix-bridge-mautrix-signal

  1046. #

  1047. ######################################################################

  1048. 

  1049. ######################################################################

  1050. #

  1051. # matrix-bridge-mautrix-telegram

  1052. #

  1053. ######################################################################

  1054. 

  1055. # We don't enable bridges by default.

  1056. matrix_mautrix_telegram_enabled: false

  1057. 

  1058. # Images are multi-arch (amd64 and arm64, but not arm32).

  1059. matrix_mautrix_telegram_container_image_self_build: "{{ matrix_architecture not in ['arm64', 'amd64'] }}"

  1060. matrix_telegram_lottieconverter_container_image_self_build: "{{ matrix_architecture not in ['arm64', 'amd64'] }}"

  1061. matrix_telegram_lottieconverter_container_image_self_build_mask_arch: "{{ matrix_architecture != 'amd64' }}"

  1062. 

  1063. matrix_mautrix_telegram_systemd_required_services_list: |

  1064.   {{

  1065.     ['docker.service']

  1066.     +

  1067.     ['matrix-' + matrix_homeserver_implementation + '.service']

  1068.     +

  1069.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  1070.     +

  1071.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1072.   }}

  1073. 

  1074. matrix_mautrix_telegram_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'telegr.as.token', rounds=655555) | to_uuid }}"

  1075. 

  1076. matrix_mautrix_telegram_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'telegr.hs.token', rounds=655555) | to_uuid }}"

  1077. 

  1078. matrix_mautrix_telegram_public_endpoint: "/{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'telegram', rounds=655555) | to_uuid }}"

  1079. 

  1080. matrix_mautrix_telegram_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '9006') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  1081. 

  1082. matrix_mautrix_telegram_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  1083. 

  1084. # Postgres is the default, except if not using internal Postgres server

  1085. matrix_mautrix_telegram_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  1086. matrix_mautrix_telegram_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1087. matrix_mautrix_telegram_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mau.telegram.db', rounds=655555) | to_uuid }}"

  1088. 

  1089. ######################################################################

  1090. #

  1091. # /matrix-bridge-mautrix-telegram

  1092. #

  1093. ######################################################################

  1094. 

  1095. ######################################################################

  1096. #

  1097. # matrix-bridge-mautrix-twitter

  1098. #

  1099. ######################################################################

  1100. 

  1101. # We don't enable bridges by default.

  1102. matrix_mautrix_twitter_enabled: false

  1103. 

  1104. matrix_mautrix_twitter_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"

  1105. 

  1106. matrix_mautrix_twitter_systemd_required_services_list: |

  1107.   {{

  1108.     ['docker.service']

  1109.     +

  1110.     ['matrix-' + matrix_homeserver_implementation + '.service']

  1111.     +

  1112.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  1113.     +

  1114.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1115.   }}

  1116. 

  1117. matrix_mautrix_twitter_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'twt.as.token', rounds=655555) | to_uuid }}"

  1118. 

  1119. matrix_mautrix_twitter_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'twt.hs.token', rounds=655555) | to_uuid }}"

  1120. 

  1121. matrix_mautrix_twitter_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  1122. 

  1123. matrix_mautrix_twitter_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1124. matrix_mautrix_twitter_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mau.twt.db', rounds=655555) | to_uuid if devture_postgres_enabled else '' }}"

  1125. 

  1126. ######################################################################

  1127. #

  1128. # /matrix-bridge-mautrix-twitter

  1129. #

  1130. ######################################################################

  1131. 

  1132. ######################################################################

  1133. #

  1134. # matrix-bridge-mautrix-whatsapp

  1135. #

  1136. ######################################################################

  1137. 

  1138. # We don't enable bridges by default.

  1139. matrix_mautrix_whatsapp_enabled: false

  1140. 

  1141. matrix_mautrix_whatsapp_container_image_self_build: "{{ matrix_architecture not in ['arm64', 'amd64'] }}"

  1142. 

  1143. matrix_mautrix_whatsapp_systemd_required_services_list: |

  1144.   {{

  1145.     ['docker.service']

  1146.     +

  1147.     ['matrix-' + matrix_homeserver_implementation + '.service']

  1148.     +

  1149.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  1150.     +

  1151.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1152.   }}

  1153. 

  1154. matrix_mautrix_whatsapp_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'whats.as.token', rounds=655555) | to_uuid }}"

  1155. 

  1156. matrix_mautrix_whatsapp_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'whats.hs.token', rounds=655555) | to_uuid }}"

  1157. 

  1158. matrix_mautrix_whatsapp_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  1159. 

  1160. # People using an external Prometheus server will need to toggle all of these to be able to consume metrics remotely:

  1161. # - `matrix_mautrix_twitter_metrics_enabled`

  1162. # - `matrix_mautrix_twitter_proxying_metrics_enabled`

  1163. # - `matrix_nginx_proxy_proxy_matrix_metrics_enabled`

  1164. matrix_mautrix_twitter_metrics_enabled: "{{ matrix_prometheus_enabled }}"

  1165. 

  1166. # Postgres is the default, except if not using internal Postgres server

  1167. matrix_mautrix_whatsapp_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  1168. matrix_mautrix_whatsapp_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1169. matrix_mautrix_whatsapp_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mauwhatsapp.db', rounds=655555) | to_uuid }}"

  1170. 

  1171. ######################################################################

  1172. #

  1173. # /matrix-bridge-mautrix-whatsapp

  1174. #

  1175. ######################################################################

  1176. 

  1177. ######################################################################

  1178. #

  1179. # matrix-sms-bridge

  1180. #

  1181. ######################################################################

  1182. 

  1183. # We don't enable bridges by default.

  1184. matrix_sms_bridge_enabled: false

  1185. 

  1186. matrix_sms_bridge_systemd_required_services_list: |

  1187.   {{

  1188.     ['docker.service']

  1189.     +

  1190.     ['matrix-' + matrix_homeserver_implementation + '.service']

  1191.     +

  1192.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1193.   }}

  1194. 

  1195. matrix_sms_bridge_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'sms.as.token', rounds=655555) | to_uuid }}"

  1196. 

  1197. matrix_sms_bridge_homeserver_port: "{{ matrix_synapse_container_client_api_port }}"

  1198. matrix_sms_bridge_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'sms.hs.token', rounds=655555) | to_uuid }}"

  1199. 

  1200. ######################################################################

  1201. #

  1202. # /matrix-sms-bridge

  1203. #

  1204. ######################################################################

  1205. 

  1206. ######################################################################

  1207. #

  1208. # matrix-bridge-heisenbridge

  1209. #

  1210. ######################################################################

  1211. 

  1212. # We don't enable bridges by default.

  1213. matrix_heisenbridge_enabled: false

  1214. 

  1215. matrix_heisenbridge_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'heisen.as.tok', rounds=655555) | to_uuid }}"

  1216. 

  1217. matrix_heisenbridge_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'heisen.hs.tok', rounds=655555) | to_uuid }}"

  1218. 

  1219. matrix_heisenbridge_systemd_wanted_services_list: |

  1220.   {{

  1221.     ['matrix-' + matrix_homeserver_implementation + '.service']

  1222.     +

  1223.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1224.   }}

  1225. 

  1226. ######################################################################

  1227. #

  1228. # /matrix-bridge-heisenbridge

  1229. #

  1230. ######################################################################

  1231. 

  1232. ######################################################################

  1233. #

  1234. # matrix-bridge-hookshot

  1235. #

  1236. ######################################################################

  1237. 

  1238. # We don't enable bridges by default.

  1239. matrix_hookshot_enabled: false

  1240. 

  1241. matrix_hookshot_container_image_self_build: "{{ matrix_architecture not in ['arm64', 'amd64'] }}"

  1242. 

  1243. matrix_hookshot_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'hookshot.as.tok', rounds=655555) | to_uuid }}"

  1244. 

  1245. matrix_hookshot_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'hookshot.hs.tok', rounds=655555) | to_uuid }}"

  1246. 

  1247. matrix_hookshot_systemd_wanted_services_list: |

  1248.   {{

  1249.     (['matrix-' + matrix_homeserver_implementation + '.service'])

  1250.     +

  1251.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1252.   }}

  1253. 

  1254. matrix_hookshot_container_http_host_bind_ports_defaultmapping:

  1255.   - "{{ matrix_playbook_service_host_bind_interface_prefix }}{{ matrix_hookshot_appservice_port }}:{{ matrix_hookshot_appservice_port }}"

  1256.   - "{{ matrix_playbook_service_host_bind_interface_prefix }}{{ matrix_hookshot_metrics_port }}:{{ matrix_hookshot_metrics_port }}"

  1257.   - "{{ matrix_playbook_service_host_bind_interface_prefix }}{{ matrix_hookshot_webhook_port }}:{{ matrix_hookshot_webhook_port }}"

  1258.   - "{{ matrix_playbook_service_host_bind_interface_prefix }}{{ matrix_hookshot_provisioning_port }}:{{ matrix_hookshot_provisioning_port }}"

  1259. 

  1260. matrix_hookshot_container_http_host_bind_ports: "{{ matrix_hookshot_container_http_host_bind_ports_defaultmapping if matrix_playbook_service_host_bind_interface_prefix else [] }}"

  1261. 

  1262. matrix_hookshot_provisioning_enabled: "{{ matrix_hookshot_provisioning_secret and matrix_dimension_enabled }}"

  1263. 

  1264. # We only enable metrics (locally, in the container network) for the bridge if Prometheus is enabled.

  1265. #

  1266. # People using an external Prometheus server will need to toggle all of these to be able to consume metrics remotely:

  1267. # - `matrix_hookshot_metrics_enabled`

  1268. # - `matrix_hookshot_metrics_proxying_enabled`

  1269. # - `matrix_nginx_proxy_proxy_matrix_metrics_enabled`

  1270. matrix_hookshot_metrics_enabled: "{{ matrix_prometheus_enabled }}"

  1271. 

  1272. matrix_hookshot_urlprefix_port_enabled: "{{ matrix_nginx_proxy_container_https_host_bind_port == 443 if matrix_nginx_proxy_https_enabled else matrix_nginx_proxy_container_https_host_bind_port == 80 }}"

  1273. matrix_hookshot_urlprefix_port: ":{{ matrix_nginx_proxy_container_https_host_bind_port if matrix_nginx_proxy_https_enabled else matrix_nginx_proxy_container_http_host_bind_port }}"

  1274. matrix_hookshot_urlprefix: "{{ 'https' if matrix_playbook_ssl_enabled else 'http' }}://{{ matrix_server_fqn_matrix }}{{ matrix_hookshot_urlprefix_port if matrix_hookshot_urlprefix_port_enabled else '' }}"

  1275. 

  1276. ######################################################################

  1277. #

  1278. # /matrix-bridge-hookshot

  1279. #

  1280. ######################################################################

  1281. 

  1282. 

  1283. ######################################################################

  1284. #

  1285. # matrix-bridge-mx-puppet-slack

  1286. #

  1287. ######################################################################

  1288. 

  1289. # We don't enable bridges by default.

  1290. matrix_mx_puppet_slack_enabled: false

  1291. 

  1292. matrix_mx_puppet_slack_container_image_self_build: "{{ matrix_architecture != 'amd64' }}"

  1293. 

  1294. matrix_mx_puppet_slack_systemd_required_services_list: |

  1295.   {{

  1296.     ['docker.service']

  1297.     +

  1298.     ['matrix-' + matrix_homeserver_implementation + '.service']

  1299.     +

  1300.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  1301.     +

  1302.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1303.   }}

  1304. 

  1305. matrix_mx_puppet_slack_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxslk.as.tok', rounds=655555) | to_uuid }}"

  1306. 

  1307. matrix_mx_puppet_slack_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxslk.hs.tok', rounds=655555) | to_uuid }}"

  1308. 

  1309. matrix_mx_puppet_slack_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  1310. 

  1311. # Postgres is the default, except if not using internal Postgres server

  1312. matrix_mx_puppet_slack_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  1313. matrix_mx_puppet_slack_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1314. matrix_mx_puppet_slack_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxpup.slack.db', rounds=655555) | to_uuid }}"

  1315. 

  1316. ######################################################################

  1317. #

  1318. # /matrix-bridge-mx-puppet-slack

  1319. #

  1320. ######################################################################

  1321. 

  1322. ######################################################################

  1323. #

  1324. # matrix-bridge-mx-puppet-twitter

  1325. #

  1326. ######################################################################

  1327. 

  1328. # We don't enable bridges by default.

  1329. matrix_mx_puppet_twitter_enabled: false

  1330. 

  1331. matrix_mx_puppet_twitter_container_image_self_build: "{{ matrix_architecture != 'amd64' }}"

  1332. 

  1333. matrix_mx_puppet_twitter_systemd_required_services_list: |

  1334.   {{

  1335.     ['docker.service']

  1336.     +

  1337.     ['matrix-' + matrix_homeserver_implementation + '.service']

  1338.     +

  1339.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  1340.     +

  1341.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1342.   }}

  1343. 

  1344. matrix_mx_puppet_twitter_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxtwt.as.tok', rounds=655555) | to_uuid }}"

  1345. 

  1346. matrix_mx_puppet_twitter_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxtwt.hs.tok', rounds=655555) | to_uuid }}"

  1347. 

  1348. matrix_mx_puppet_twitter_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  1349. 

  1350. matrix_mx_puppet_twitter_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '' ~ matrix_mx_puppet_twitter_appservice_port) if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  1351. 

  1352. # Postgres is the default, except if not using internal Postgres server

  1353. matrix_mx_puppet_twitter_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  1354. matrix_mx_puppet_twitter_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1355. matrix_mx_puppet_twitter_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxpup.twitter.db', rounds=655555) | to_uuid }}"

  1356. 

  1357. ######################################################################

  1358. #

  1359. # /matrix-bridge-mx-puppet-twitter

  1360. #

  1361. ######################################################################

  1362. 

  1363. 

  1364. ######################################################################

  1365. #

  1366. # matrix-bridge-mx-puppet-instagram

  1367. #

  1368. ######################################################################

  1369. 

  1370. # We don't enable bridges by default.

  1371. matrix_mx_puppet_instagram_enabled: false

  1372. 

  1373. matrix_mx_puppet_instagram_container_image_self_build: "{{ matrix_architecture != 'amd64' }}"

  1374. 

  1375. matrix_mx_puppet_instagram_systemd_required_services_list: |

  1376.   {{

  1377.     ['docker.service']

  1378.     +

  1379.     ['matrix-' + matrix_homeserver_implementation + '.service']

  1380.     +

  1381.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  1382.     +

  1383.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1384.   }}

  1385. 

  1386. matrix_mx_puppet_instagram_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxig.as.tok', rounds=655555) | to_uuid }}"

  1387. 

  1388. matrix_mx_puppet_instagram_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxig.hs.tok', rounds=655555) | to_uuid }}"

  1389. 

  1390. matrix_mx_puppet_instagram_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  1391. 

  1392. # Postgres is the default, except if not using internal Postgres server

  1393. matrix_mx_puppet_instagram_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  1394. matrix_mx_puppet_instagram_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1395. matrix_mx_puppet_instagram_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxpup.ig.db', rounds=655555) | to_uuid }}"

  1396. 

  1397. ######################################################################

  1398. #

  1399. # /matrix-bridge-mx-puppet-instagram

  1400. #

  1401. ######################################################################

  1402. 

  1403. ######################################################################

  1404. #

  1405. # matrix-bridge-mx-puppet-discord

  1406. #

  1407. ######################################################################

  1408. 

  1409. # We don't enable bridges by default.

  1410. matrix_mx_puppet_discord_enabled: false

  1411. 

  1412. matrix_mx_puppet_discord_container_image_self_build: "{{ matrix_architecture != 'amd64' }}"

  1413. 

  1414. matrix_mx_puppet_discord_systemd_required_services_list: |

  1415.   {{

  1416.     ['docker.service']

  1417.     +

  1418.     ['matrix-' + matrix_homeserver_implementation + '.service']

  1419.     +

  1420.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  1421.     +

  1422.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1423.   }}

  1424. 

  1425. matrix_mx_puppet_discord_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxdsc.as.tok', rounds=655555) | to_uuid }}"

  1426. 

  1427. matrix_mx_puppet_discord_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxdsc.hs.tok', rounds=655555) | to_uuid }}"

  1428. 

  1429. matrix_mx_puppet_discord_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  1430. 

  1431. # Postgres is the default, except if not using internal Postgres server

  1432. matrix_mx_puppet_discord_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  1433. matrix_mx_puppet_discord_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1434. matrix_mx_puppet_discord_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxpup.dsc.db', rounds=655555) | to_uuid }}"

  1435. 

  1436. ######################################################################

  1437. #

  1438. # /matrix-bridge-mx-puppet-discord

  1439. #

  1440. ######################################################################

  1441. 

  1442. ######################################################################

  1443. #

  1444. # matrix-bridge-mx-puppet-steam

  1445. #

  1446. ######################################################################

  1447. 

  1448. # We don't enable bridges by default.

  1449. matrix_mx_puppet_steam_enabled: false

  1450. 

  1451. matrix_mx_puppet_steam_container_image_self_build: "{{ matrix_architecture not in ['arm64', 'amd64'] }}"

  1452. 

  1453. matrix_mx_puppet_steam_systemd_required_services_list: |

  1454.   {{

  1455.     ['docker.service']

  1456.     +

  1457.     ['matrix-' + matrix_homeserver_implementation + '.service']

  1458.     +

  1459.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  1460.     +

  1461.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1462.   }}

  1463. 

  1464. matrix_mx_puppet_steam_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxste.as.tok', rounds=655555) | to_uuid }}"

  1465. 

  1466. matrix_mx_puppet_steam_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxste.hs.tok', rounds=655555) | to_uuid }}"

  1467. 

  1468. matrix_mx_puppet_steam_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  1469. 

  1470. # Postgres is the default, except if not using internal Postgres server

  1471. matrix_mx_puppet_steam_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  1472. matrix_mx_puppet_steam_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1473. matrix_mx_puppet_steam_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxpup.steam.db', rounds=655555) | to_uuid }}"

  1474. 

  1475. ######################################################################

  1476. #

  1477. # /matrix-bridge-mx-puppet-steam

  1478. #

  1479. ######################################################################

  1480. 

  1481. ######################################################################

  1482. #

  1483. # matrix-bridge-mx-puppet-groupme

  1484. #

  1485. ######################################################################

  1486. 

  1487. # We don't enable bridges by default.

  1488. matrix_mx_puppet_groupme_enabled: false

  1489. 

  1490. matrix_mx_puppet_groupme_container_image_self_build: "{{ matrix_architecture != 'amd64' }}"

  1491. 

  1492. matrix_mx_puppet_groupme_systemd_required_services_list: |

  1493.   {{

  1494.     ['docker.service']

  1495.     +

  1496.     ['matrix-' + matrix_homeserver_implementation + '.service']

  1497.     +

  1498.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  1499.     +

  1500.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1501.   }}

  1502. 

  1503. matrix_mx_puppet_groupme_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxgro.as.tok', rounds=655555) | to_uuid }}"

  1504. 

  1505. matrix_mx_puppet_groupme_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxgro.hs.tok', rounds=655555) | to_uuid }}"

  1506. 

  1507. matrix_mx_puppet_groupme_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  1508. 

  1509. # Postgres is the default, except if not using internal Postgres server

  1510. matrix_mx_puppet_groupme_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  1511. matrix_mx_puppet_groupme_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1512. matrix_mx_puppet_groupme_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxpup.groupme.db', rounds=655555) | to_uuid }}"

  1513. 

  1514. ######################################################################

  1515. #

  1516. # /matrix-bridge-mx-puppet-groupme

  1517. #

  1518. ######################################################################

  1519. 

  1520. ######################################################################

  1521. #

  1522. # matrix-bot-matrix-reminder-bot

  1523. #

  1524. ######################################################################

  1525. 

  1526. # We don't enable bots by default.

  1527. matrix_bot_matrix_reminder_bot_enabled: false

  1528. 

  1529. matrix_bot_matrix_reminder_bot_systemd_required_services_list: |

  1530.   {{

  1531.     ['docker.service']

  1532.     +

  1533.     ['matrix-' + matrix_homeserver_implementation + '.service']

  1534.     +

  1535.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  1536.     +

  1537.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1538.   }}

  1539. 

  1540. # Postgres is the default, except if not using internal Postgres server

  1541. matrix_bot_matrix_reminder_bot_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  1542. matrix_bot_matrix_reminder_bot_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1543. matrix_bot_matrix_reminder_bot_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'reminder.bot.db', rounds=655555) | to_uuid }}"

  1544. matrix_bot_matrix_reminder_bot_container_image_self_build: "{{ matrix_architecture != 'amd64' }}"

  1545. 

  1546. ######################################################################

  1547. #

  1548. # /matrix-bot-matrix-reminder-bot

  1549. #

  1550. ######################################################################

  1551. 

  1552. 

  1553. ######################################################################

  1554. #

  1555. # matrix-bot-matrix-registration-bot

  1556. #

  1557. ######################################################################

  1558. 

  1559. # We don't enable bots by default.

  1560. matrix_bot_matrix_registration_bot_enabled: false

  1561. 

  1562. matrix_bot_matrix_registration_bot_container_image_self_build: "{{ matrix_architecture not in ['amd64'] }}"

  1563. 

  1564. matrix_bot_matrix_registration_bot_systemd_required_services_list: |

  1565.   {{

  1566.     ['docker.service']

  1567.     +

  1568.     ['matrix-' + matrix_homeserver_implementation + '.service']

  1569.     +

  1570.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1571.   }}

  1572. 

  1573. 

  1574. ######################################################################

  1575. #

  1576. # /matrix-bot-matrix-registration-bot

  1577. #

  1578. ######################################################################

  1579. 

  1580. ######################################################################

  1581. #

  1582. # matrix-bot-maubot

  1583. #

  1584. ######################################################################

  1585. 

  1586. # We don't enable bots by default.

  1587. matrix_bot_maubot_enabled: false

  1588. 

  1589. matrix_bot_maubot_container_image_self_build: "{{ matrix_architecture not in ['amd64'] }}"

  1590. 

  1591. matrix_bot_maubot_systemd_required_services_list: |

  1592.   {{

  1593.     ['docker.service']

  1594.     +

  1595.     ['matrix-' + matrix_homeserver_implementation + '.service']

  1596.     +

  1597.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  1598.     +

  1599.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1600.   }}

  1601. 

  1602. matrix_bot_maubot_registration_shared_secret: |-

  1603.   {{

  1604.     {

  1605.       'synapse': matrix_synapse_registration_shared_secret,

  1606.       'dendrite': matrix_dendrite_client_api_registration_shared_secret,

  1607.     }[matrix_homeserver_implementation]

  1608.   }}

  1609. 

  1610. matrix_bot_maubot_management_interface_http_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '' ~ matrix_bot_maubot_management_interface_port | string) if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  1611. 

  1612. # Postgres is the default, except if not using internal Postgres server

  1613. matrix_bot_maubot_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  1614. matrix_bot_maubot_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1615. matrix_bot_maubot_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxpup.dsc.db', rounds=655555) | to_uuid }}"

  1616. 

  1617. ######################################################################

  1618. #

  1619. # /matrix-bot-maubot

  1620. #

  1621. ######################################################################

  1622. 

  1623. 

  1624. ######################################################################

  1625. #

  1626. # matrix-bot-honoroit

  1627. #

  1628. ######################################################################

  1629. 

  1630. # We don't enable bots by default.

  1631. matrix_bot_honoroit_enabled: false

  1632. 

  1633. matrix_bot_honoroit_systemd_required_services_list: |

  1634.   {{

  1635.     ['docker.service']

  1636.     +

  1637.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  1638.     +

  1639.     (['matrix-synapse.service'] if matrix_synapse_enabled else [])

  1640.     +

  1641.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1642.   }}

  1643. 

  1644. # Postgres is the default, except if not using internal Postgres server

  1645. matrix_bot_honoroit_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  1646. matrix_bot_honoroit_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1647. matrix_bot_honoroit_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'honoroit.bot.db', rounds=655555) | to_uuid }}"

  1648. matrix_bot_honoroit_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"

  1649. 

  1650. ######################################################################

  1651. #

  1652. # /matrix-bot-honoroit

  1653. #

  1654. ######################################################################

  1655. 

  1656. ######################################################################

  1657. #

  1658. # matrix-bot-buscarron

  1659. #

  1660. ######################################################################

  1661. 

  1662. # We don't enable bots by default.

  1663. matrix_bot_buscarron_enabled: false

  1664. 

  1665. matrix_bot_buscarron_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"

  1666. 

  1667. matrix_bot_buscarron_systemd_required_services_list: |

  1668.   {{

  1669.     ['docker.service']

  1670.     +

  1671.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  1672.     +

  1673.     (['matrix-synapse.service'] if matrix_synapse_enabled else [])

  1674.     +

  1675.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1676.   }}

  1677. 

  1678. # Postgres is the default, except if not using internal Postgres server

  1679. matrix_bot_buscarron_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  1680. matrix_bot_buscarron_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1681. matrix_bot_buscarron_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'buscarron.bot.db', rounds=655555) | to_uuid }}"

  1682. 

  1683. matrix_bot_buscarron_hostname: "{{ matrix_server_fqn_buscarron }}"

  1684. 

  1685. matrix_bot_buscarron_container_network: "{{ matrix_docker_network if matrix_playbook_reverse_proxy_type == 'playbook-managed-nginx' else 'matrix-bot-buscarron' }}"

  1686. 

  1687. # For now, we attach this to the matrix-nginx-proxy network (unless that's the same network as the main one for us),

  1688. # because that's where the homeserver is expected to be accessed from.

  1689. # In the future, this will need to be redone.

  1690. matrix_bot_buscarron_container_additional_networks: |

  1691.   {{

  1692.     (

  1693.       ([matrix_playbook_reverse_proxyable_services_additional_network] if matrix_playbook_reverse_proxyable_services_additional_network else [])

  1694.       +

  1695.       ([matrix_nginx_proxy_container_network] if matrix_nginx_proxy_enabled and matrix_bot_buscarron_container_network != matrix_nginx_proxy_container_network else [])

  1696.       +

  1697.       ([devture_postgres_container_network] if devture_postgres_enabled and devture_postgres_container_network != matrix_bot_buscarron_container_network else [])

  1698.     ) | unique

  1699.   }}

  1700. 

  1701. matrix_bot_buscarron_container_labels_traefik_enabled: "{{ matrix_playbook_traefik_labels_enabled }}"

  1702. matrix_bot_buscarron_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  1703. matrix_bot_buscarron_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  1704. matrix_bot_buscarron_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  1705. 

  1706. ######################################################################

  1707. #

  1708. # /matrix-bot-buscarron

  1709. #

  1710. ######################################################################

  1711. 

  1712. ######################################################################

  1713. #

  1714. # matrix-bot-postmoogle

  1715. #

  1716. ######################################################################

  1717. 

  1718. # We don't enable bots by default.

  1719. matrix_bot_postmoogle_enabled: false

  1720. 

  1721. matrix_bot_postmoogle_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"

  1722. 

  1723. matrix_bot_postmoogle_ssl_path: |-

  1724.   {{

  1725.     {

  1726.       'playbook-managed-traefik': devture_traefik_certs_dumper_dumped_certificates_dir_path,

  1727.       'other-traefik-container': devture_traefik_certs_dumper_dumped_certificates_dir_path,

  1728.       'playbook-managed-nginx': (matrix_ssl_config_dir_path if matrix_playbook_ssl_retrieval_method != 'none' else ''),

  1729.       'other-nginx-non-container': (matrix_ssl_config_dir_path if matrix_playbook_ssl_retrieval_method != 'none' else ''),

  1730.       'other-on-same-host': '',

  1731.       'other-on-another-host': '',

  1732.       'none': '',

  1733.     }[matrix_playbook_reverse_proxy_type]

  1734.   }}

  1735. 

  1736. matrix_playbook_bot_postmoogle_nginx_proxy_tls_cert: "{% for domain in matrix_bot_postmoogle_domains %}/ssl/live/{{ domain }}/fullchain.pem {% endfor %}"

  1737. matrix_playbook_bot_postmoogle_nginx_proxy_key: "{% for domain in matrix_bot_postmoogle_domains %}/ssl/live/{{ domain }}/privkey.pem {% endfor %}"

  1738. 

  1739. matrix_playbook_bot_postmoogle_traefik_tls_cert: "{% for domain in matrix_bot_postmoogle_domains %}/ssl/{{ domain }}/certificate.crt {% endfor %}"

  1740. matrix_playbook_bot_postmoogle_traefik_key: "{% for domain in matrix_bot_postmoogle_domains %}/ssl/{{ domain }}/privatekey.key {% endfor %}"

  1741. 

  1742. matrix_bot_postmoogle_tls_cert: |-

  1743.   {{

  1744.     {

  1745.       'playbook-managed-traefik': matrix_playbook_bot_postmoogle_traefik_tls_cert,

  1746.       'other-traefik-container': matrix_playbook_bot_postmoogle_traefik_tls_cert,

  1747.       'playbook-managed-nginx': (matrix_playbook_bot_postmoogle_nginx_proxy_tls_cert if matrix_playbook_ssl_retrieval_method != 'none' else ''),

  1748.       'other-nginx-non-container': (matrix_playbook_bot_postmoogle_nginx_proxy_tls_cert if matrix_playbook_ssl_retrieval_method != 'none' else ''),

  1749.       'other-on-same-host': '',

  1750.       'other-on-another-host': '',

  1751.       'none': '',

  1752.     }[matrix_playbook_reverse_proxy_type]

  1753.   }}

  1754. 

  1755. matrix_bot_postmoogle_tls_key: |-

  1756.   {{

  1757.     {

  1758.       'playbook-managed-traefik': matrix_playbook_bot_postmoogle_traefik_key,

  1759.       'other-traefik-container': matrix_playbook_bot_postmoogle_traefik_key,

  1760.       'playbook-managed-nginx': (matrix_playbook_bot_postmoogle_nginx_proxy_key if matrix_playbook_ssl_retrieval_method != 'none' else ''),

  1761.       'other-nginx-non-container': (matrix_playbook_bot_postmoogle_nginx_proxy_key if matrix_playbook_ssl_retrieval_method != 'none' else ''),

  1762.       'other-on-same-host': '',

  1763.       'other-on-another-host': '',

  1764.       'none': '',

  1765.     }[matrix_playbook_reverse_proxy_type]

  1766.   }}

  1767. 

  1768. matrix_playbook_bot_postmoogle_traefik_certs_dumper_waiter_services: "{% for domain in matrix_bot_postmoogle_domains %}{{ devture_traefik_certs_dumper_identifier }}-wait-for-domain@{{ domain }}.service {% endfor %}"

  1769. 

  1770. matrix_bot_postmoogle_systemd_required_services_list: |

  1771.   {{

  1772.     ['docker.service']

  1773.     +

  1774.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  1775.     +

  1776.     (['matrix-synapse.service'] if matrix_synapse_enabled else [])

  1777.     +

  1778.     (matrix_playbook_bot_postmoogle_traefik_certs_dumper_waiter_services | trim | split(' ') if matrix_playbook_reverse_proxy_type in ['playbook-managed-traefik', 'other-traefik-container'] and devture_traefik_certs_dumper_enabled else [])

  1779.   }}

  1780. 

  1781. # Postgres is the default, except if not using internal Postgres server

  1782. matrix_bot_postmoogle_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  1783. matrix_bot_postmoogle_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1784. matrix_bot_postmoogle_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'postmoogle.db', rounds=655555) | to_uuid }}"

  1785. 

  1786. ######################################################################

  1787. #

  1788. # /matrix-bot-postmoogle

  1789. #

  1790. ######################################################################

  1791. 

  1792. 

  1793. ######################################################################

  1794. #

  1795. # matrix-bot-chatgpt

  1796. #

  1797. ######################################################################

  1798. 

  1799. # We don't enable bots by default.

  1800. matrix_bot_chatgpt_enabled: false

  1801. 

  1802. matrix_bot_chatgpt_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"

  1803. 

  1804. ######################################################################

  1805. #

  1806. # /matrix-bot-chatgpt

  1807. #

  1808. ######################################################################

  1809. 

  1810. 

  1811. ######################################################################

  1812. #

  1813. # matrix-bot-go-neb

  1814. #

  1815. ######################################################################

  1816. 

  1817. # We don't enable bots by default.

  1818. matrix_bot_go_neb_enabled: false

  1819. 

  1820. matrix_bot_go_neb_scheme: "{{ 'https' if matrix_playbook_ssl_enabled else 'http' }}"

  1821. 

  1822. matrix_bot_go_neb_hostname: "{{ matrix_server_fqn_bot_go_neb }}"

  1823. 

  1824. matrix_bot_go_neb_container_network: "{{ matrix_nginx_proxy_container_network if matrix_playbook_reverse_proxy_type == 'playbook-managed-nginx' else 'matrix-bot-go-neb' }}"

  1825. 

  1826. matrix_bot_go_neb_container_additional_networks: |

  1827.   {{

  1828.     (

  1829.       ([matrix_playbook_reverse_proxyable_services_additional_network] if matrix_playbook_reverse_proxyable_services_additional_network else [])

  1830.       +

  1831.       ([matrix_homeserver_container_network] if matrix_homeserver_container_network != matrix_bot_go_neb_container_network else [])

  1832.       +

  1833.       ([devture_postgres_container_network] if devture_postgres_enabled and devture_postgres_container_network != matrix_bot_go_neb_container_network else [])

  1834.     ) | unique

  1835.   }}

  1836. 

  1837. matrix_bot_go_neb_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '4050') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  1838. 

  1839. matrix_bot_go_neb_container_labels_traefik_enabled: "{{ matrix_playbook_traefik_labels_enabled }}"

  1840. matrix_bot_go_neb_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  1841. matrix_bot_go_neb_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  1842. matrix_bot_go_neb_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  1843. 

  1844. matrix_bot_go_neb_systemd_required_services_list: |

  1845.   {{

  1846.     ['docker.service']

  1847.     +

  1848.     ['matrix-' + matrix_homeserver_implementation + '.service']

  1849.     +

  1850.     ([devture_postgres_identifier + '.service'] if devture_postgres_enabled else [])

  1851.     +

  1852.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1853.   }}

  1854. 

  1855. ######################################################################

  1856. #

  1857. # /matrix-bot-go-neb

  1858. #

  1859. ######################################################################

  1860. 

  1861. 

  1862. ######################################################################

  1863. #

  1864. # matrix-bot-mjolnir

  1865. #

  1866. ######################################################################

  1867. 

  1868. # We don't enable bots by default.

  1869. matrix_bot_mjolnir_enabled: false

  1870. 

  1871. matrix_bot_mjolnir_container_image_self_build: "{{ matrix_architecture != 'amd64' }}"

  1872. 

  1873. matrix_bot_mjolnir_systemd_required_services_list: |

  1874.   {{

  1875.     ['docker.service']

  1876.     +

  1877.     ['matrix-' + matrix_homeserver_implementation + '.service']

  1878.     +

  1879.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  1880.     +

  1881.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1882.   }}

  1883. 

  1884. ######################################################################

  1885. #

  1886. # /matrix-bot-mjolnir

  1887. #

  1888. ######################################################################

  1889. 

  1890. ######################################################################

  1891. #

  1892. # matrix-bot-draupnir

  1893. #

  1894. ######################################################################

  1895. 

  1896. # We don't enable bots by default.

  1897. matrix_bot_draupnir_enabled: false

  1898. 

  1899. matrix_bot_draupnir_container_image_self_build: "{{ matrix_architecture != 'amd64' }}"

  1900. 

  1901. matrix_bot_draupnir_systemd_required_services_list: |

  1902.   {{

  1903.     ['docker.service']

  1904.     +

  1905.     ['matrix-' + matrix_homeserver_implementation + '.service']

  1906.     +

  1907.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  1908.     +

  1909.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1910.   }}

  1911. 

  1912. ######################################################################

  1913. #

  1914. # /matrix-bot-draupnir

  1915. #

  1916. ######################################################################

  1917. 

  1918. 

  1919. ######################################################################

  1920. #

  1921. # etke/backup_borg

  1922. #

  1923. ######################################################################

  1924. 

  1925. backup_borg_enabled: false

  1926. 

  1927. backup_borg_identifier: matrix-backup-borg

  1928. backup_borg_retention_prefix: matrix-

  1929. backup_borg_storage_archive_name_format: matrix-{now:%Y-%m-%d-%H%M%S}

  1930. 

  1931. backup_borg_base_path: "{{ matrix_base_data_path }}/backup-borg"

  1932. 

  1933. backup_borg_username: "{{ matrix_user_username }}"

  1934. backup_borg_uid: "{{ matrix_user_uid }}"

  1935. backup_borg_gid: "{{ matrix_user_gid }}"

  1936. 

  1937. backup_borg_container_network: "{{ devture_postgres_container_network if devture_postgres_enabled else backup_borg_identifier }}"

  1938. 

  1939. backup_borg_postgresql_version_detection_devture_postgres_role_name: "{{ 'galaxy/com.devture.ansible.role.postgres' if devture_postgres_enabled else '' }}"

  1940. 

  1941. backup_borg_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm32', 'arm64'] }}"

  1942. 

  1943. backup_borg_postgresql_enabled: "{{ devture_postgres_enabled }}"

  1944. backup_borg_postgresql_databases_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1945. backup_borg_postgresql_databases_username: "{{ devture_postgres_connection_username if devture_postgres_enabled else '' }}"

  1946. backup_borg_postgresql_databases_password: "{{ devture_postgres_connection_password if devture_postgres_enabled else '' }}"

  1947. backup_borg_postgresql_databases_port: "{{ devture_postgres_connection_port if devture_postgres_enabled else 5432 }}"

  1948. backup_borg_postgresql_databases: "{{ devture_postgres_managed_databases | map(attribute='name') if devture_postgres_enabled else [] }}"

  1949. 

  1950. backup_borg_location_source_directories:

  1951.   - "{{ matrix_base_data_path }}"

  1952. 

  1953. backup_borg_location_exclude_patterns: |

  1954.   {{

  1955.     ([matrix_synapse_media_store_path + '/local_thumbnails', matrix_synapse_media_store_path + '/remote_thumbnail', matrix_synapse_media_store_path + '/url_cache', matrix_synapse_media_store_path + '/url_cache_thumbnails'] if matrix_homeserver_implementation == 'synapse' else [])

  1956.     +

  1957.     ([devture_postgres_data_path] if devture_postgres_enabled else [])

  1958.   }}

  1959. 

  1960. backup_borg_systemd_required_services_list: |

  1961.   {{

  1962.     ['docker.service']

  1963.     +

  1964.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  1965.   }}

  1966. 

  1967. ######################################################################

  1968. #

  1969. # /etke/backup_borg

  1970. #

  1971. ######################################################################

  1972. 

  1973. 

  1974. ######################################################################

  1975. #

  1976. # matrix-cactus-comments

  1977. #

  1978. ######################################################################

  1979. 

  1980. matrix_cactus_comments_enabled: false

  1981. 

  1982. # Derive secret values from homeserver secret

  1983. matrix_cactus_comments_as_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'cactus.as.token', rounds=655555) | to_uuid }}"

  1984. matrix_cactus_comments_hs_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'cactus.hs.token', rounds=655555) | to_uuid }}"

  1985. 

  1986. matrix_cactus_comments_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm32', 'arm64'] }}"

  1987. matrix_cactus_comments_systemd_required_services_list: |

  1988.   {{

  1989.     (['docker.service'])

  1990.     +

  1991.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1992.     +

  1993.     (['matrix-' + matrix_homeserver_implementation + '.service'])

  1994.   }}

  1995. 

  1996. matrix_cactus_comments_client_nginx_path: "{{ '/cactus-comments/' if matrix_nginx_proxy_enabled else matrix_cactus_comments_client_path + '/' }}"

  1997. 

  1998. ######################################################################

  1999. #

  2000. # /matrix-cactus-comments

  2001. #

  2002. ######################################################################

  2003. 

  2004. ######################################################################

  2005. #

  2006. # matrix-corporal

  2007. #

  2008. ######################################################################

  2009. 

  2010. matrix_corporal_enabled: false

  2011. 

  2012. matrix_corporal_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm32', 'arm64'] }}"

  2013. 

  2014. # Normally, matrix-nginx-proxy is enabled and nginx can reach matrix-corporal over the container network.

  2015. # If matrix-nginx-proxy is not enabled, or you otherwise have a need for it, you can expose

  2016. # matrix-corporal's web-server ports to the local host.

  2017. matrix_corporal_container_http_gateway_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '41080') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  2018. matrix_corporal_container_http_api_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '41081') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  2019. 

  2020. matrix_corporal_systemd_required_services_list: |

  2021.   {{

  2022.     (['docker.service'])

  2023.     +

  2024.     (['matrix-' + matrix_homeserver_implementation + '.service'])

  2025.   }}

  2026. 

  2027. matrix_corporal_matrix_homeserver_api_endpoint: "{{ matrix_homeserver_container_url }}"

  2028. 

  2029. matrix_corporal_matrix_auth_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret }}"

  2030. 

  2031. # This is only useful if there's REST auth provider to make use of it.

  2032. matrix_corporal_http_gateway_internal_rest_auth_enabled: "{{ matrix_synapse_ext_password_provider_rest_auth_enabled }}"

  2033. 

  2034. matrix_corporal_matrix_registration_shared_secret: "{{ matrix_synapse_registration_shared_secret }}"

  2035. 

  2036. ######################################################################

  2037. #

  2038. # /matrix-corporal

  2039. #

  2040. ######################################################################

  2041. 

  2042. 

  2043. ######################################################################

  2044. #

  2045. # matrix-rageshake

  2046. #

  2047. ######################################################################

  2048. 

  2049. # We don't enable rageshake by default.

  2050. matrix_rageshake_enabled: false

  2051. 

  2052. matrix_rageshake_container_image_self_build: "{{ matrix_architecture not in ['amd64'] }}"

  2053. 

  2054. matrix_rageshake_hostname: "{{ matrix_server_fqn_rageshake }}"

  2055. 

  2056. matrix_rageshake_container_network: "{{ matrix_docker_network if matrix_playbook_reverse_proxy_type == 'playbook-managed-nginx' else 'matrix-rageshake' }}"

  2057. 

  2058. matrix_rageshake_container_additional_networks: "{{ [matrix_playbook_reverse_proxyable_services_additional_network] if matrix_playbook_reverse_proxyable_services_additional_network else [] }}"

  2059. 

  2060. matrix_rageshake_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '9110') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  2061. 

  2062. matrix_rageshake_container_labels_traefik_enabled: "{{ matrix_playbook_traefik_labels_enabled }}"

  2063. matrix_rageshake_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  2064. matrix_rageshake_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  2065. matrix_rageshake_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  2066. 

  2067. ######################################################################

  2068. #

  2069. # /matrix-rageshake

  2070. #

  2071. ######################################################################

  2072. 

  2073. ######################################################################

  2074. #

  2075. # matrix-coturn

  2076. #

  2077. ######################################################################

  2078. 

  2079. matrix_coturn_enabled: true

  2080. 

  2081. matrix_coturn_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm32', 'arm64'] }}"

  2082. 

  2083. matrix_coturn_turn_external_ip_address: "{{ ansible_host }}"

  2084. 

  2085. matrix_coturn_turn_static_auth_secret: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'coturn.sas', rounds=655555) | to_uuid }}"

  2086. 

  2087. matrix_coturn_tls_enabled: "{{ matrix_playbook_ssl_retrieval_method != 'none' }}"

  2088. 

  2089. matrix_coturn_tls_cert_path: |-

  2090.   {{

  2091.     {

  2092.       'playbook-managed-traefik': '/certificate.crt',

  2093.       'other-traefik-container': '/certificate.crt',

  2094.       'playbook-managed-nginx': '/fullchain.pem',

  2095.       'other-nginx-non-container': '/fullchain.pem',

  2096.       'other-on-same-host': '',

  2097.       'other-on-another-host': '',

  2098.       'none': '',

  2099.     }[matrix_playbook_reverse_proxy_type]

  2100.   }}

  2101. 

  2102. matrix_coturn_tls_key_path: |-

  2103.   {{

  2104.     {

  2105.       'playbook-managed-traefik': '/privatekey.key',

  2106.       'other-traefik-container': '/privatekey.key',

  2107.       'playbook-managed-nginx': '/privkey.pem',

  2108.       'other-nginx-non-container': '/privkey.pem',

  2109.       'other-on-same-host': '',

  2110.       'other-on-another-host': '',

  2111.       'none': '',

  2112.     }[matrix_playbook_reverse_proxy_type]

  2113.   }}

  2114. 

  2115. matrix_coturn_container_additional_volumes: |

  2116.   {{

  2117.     (

  2118.       [

  2119.        {

  2120.          'src': (matrix_ssl_config_dir_path + '/live/' + matrix_server_fqn_matrix + '/fullchain.pem'),

  2121.          'dst': '/fullchain.pem',

  2122.          'options': 'ro',

  2123.        },

  2124.        {

  2125.          'src': (matrix_ssl_config_dir_path + '/live/' + matrix_server_fqn_matrix + '/privkey.pem'),

  2126.          'dst': '/privkey.pem',

  2127.          'options': 'ro',

  2128.        },

  2129.       ] if matrix_playbook_reverse_proxy_type in ['playbook-managed-nginx', 'other-nginx-non-container'] and matrix_coturn_tls_enabled else []

  2130.     )

  2131.     +

  2132.     (

  2133.       [

  2134.        {

  2135.          'src': (devture_traefik_certs_dumper_dumped_certificates_dir_path +  '/' + matrix_server_fqn_matrix + '/certificate.crt'),

  2136.          'dst': '/certificate.crt',

  2137.          'options': 'ro',

  2138.        },

  2139.        {

  2140.          'src': (devture_traefik_certs_dumper_dumped_certificates_dir_path +  '/' + matrix_server_fqn_matrix + '/privatekey.key'),

  2141.          'dst': '/privatekey.key',

  2142.          'options': 'ro',

  2143.        },

  2144.       ] if matrix_playbook_reverse_proxy_type in ['playbook-managed-traefik', 'other-traefik-container'] and devture_traefik_certs_dumper_enabled and matrix_coturn_tls_enabled else []

  2145.     )

  2146.   }}

  2147. 

  2148. matrix_coturn_systemd_required_services_list: |

  2149.   {{

  2150.     ['docker.service']

  2151.     +

  2152.     ([devture_traefik_certs_dumper_identifier + '-wait-for-domain@' + matrix_server_fqn_matrix + '.service'] if matrix_playbook_reverse_proxy_type in ['playbook-managed-traefik', 'other-traefik-container'] and devture_traefik_certs_dumper_enabled and matrix_coturn_tls_enabled else [])

  2153.   }}

  2154. 

  2155. ######################################################################

  2156. #

  2157. # /matrix-coturn

  2158. #

  2159. ######################################################################

  2160. 

  2161. ######################################################################

  2162. #

  2163. # matrix-dimension

  2164. #

  2165. ######################################################################

  2166. 

  2167. matrix_dimension_enabled: false

  2168. 

  2169. matrix_dimension_container_image_self_build: "{{ matrix_architecture != 'amd64' }}"

  2170. 

  2171. matrix_dimension_scheme: "{{ 'https' if matrix_playbook_ssl_enabled else 'http' }}"

  2172. 

  2173. matrix_dimension_hostname: "{{ matrix_server_fqn_dimension }}"

  2174. 

  2175. matrix_dimension_container_network: "{{ matrix_nginx_proxy_container_network if matrix_playbook_reverse_proxy_type == 'playbook-managed-nginx' else 'matrix-dimension' }}"

  2176. 

  2177. matrix_dimension_container_additional_networks: |

  2178.   {{

  2179.     (

  2180.       ([matrix_playbook_reverse_proxyable_services_additional_network] if matrix_playbook_reverse_proxyable_services_additional_network else [])

  2181.       +

  2182.       ([matrix_homeserver_container_network] if matrix_homeserver_container_network != matrix_dimension_container_network else [])

  2183.       +

  2184.       ([devture_postgres_container_network] if devture_postgres_enabled and devture_postgres_container_network != matrix_dimension_container_network else [])

  2185.     ) | unique

  2186.   }}

  2187. 

  2188. matrix_dimension_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '8184') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  2189. 

  2190. matrix_dimension_container_labels_traefik_enabled: "{{ matrix_playbook_traefik_labels_enabled }}"

  2191. matrix_dimension_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  2192. matrix_dimension_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  2193. matrix_dimension_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  2194. 

  2195. matrix_dimension_homeserver_clientServerUrl: "{{ matrix_homeserver_container_url }}"

  2196. matrix_dimension_homeserver_federationUrl: "{{ matrix_homeserver_container_federation_url }}"

  2197. matrix_dimension_homeserver_mediaUrl: "https://{{ matrix_server_fqn_matrix }}"

  2198. 

  2199. matrix_dimension_systemd_required_services_list: |

  2200.   {{

  2201.     ['docker.service']

  2202.     +

  2203.     ['matrix-' + matrix_homeserver_implementation + '.service']

  2204.     +

  2205.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  2206.     +

  2207.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  2208.   }}

  2209. 

  2210. # Postgres is the default, except if not using internal Postgres server

  2211. matrix_dimension_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  2212. matrix_dimension_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  2213. matrix_dimension_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'dimension.db', rounds=655555) | to_uuid }}"

  2214. 

  2215. ######################################################################

  2216. #

  2217. # /matrix-dimension

  2218. #

  2219. ######################################################################

  2220. 

  2221. ######################################################################

  2222. #

  2223. # etke/etherpad

  2224. #

  2225. ######################################################################

  2226. 

  2227. etherpad_enabled: false

  2228. 

  2229. etherpad_identifier: matrix-etherpad

  2230. 

  2231. etherpad_scheme: "{{ 'https' if matrix_playbook_ssl_enabled else 'http' }}"

  2232. 

  2233. etherpad_base_path: "{{ matrix_base_data_path }}/etherpad"

  2234. 

  2235. etherpad_framing_enabled: "{{ matrix_dimension_enabled or matrix_jitsi_enabled }}"

  2236. 

  2237. etherpad_hostname: "{{ matrix_server_fqn_etherpad }}"

  2238. 

  2239. etherpad_container_image_self_build: "{{ matrix_architecture not in ['amd64'] }}"

  2240. 

  2241. etherpad_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '9001') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  2242. 

  2243. etherpad_container_network: "{{ matrix_nginx_proxy_container_network if matrix_playbook_reverse_proxy_type == 'playbook-managed-nginx' else etherpad_identifier }}"

  2244. 

  2245. etherpad_container_additional_networks: |

  2246.   {{

  2247.     (

  2248.       ([matrix_playbook_reverse_proxyable_services_additional_network] if matrix_playbook_reverse_proxyable_services_additional_network else [])

  2249.       +

  2250.       ([devture_postgres_container_network] if devture_postgres_enabled and devture_postgres_container_network != etherpad_container_network else [])

  2251.     ) | unique

  2252.   }}

  2253. 

  2254. etherpad_container_labels_traefik_enabled: "{{ matrix_playbook_reverse_proxy_type in ['playbook-managed-traefik', 'other-traefik-container'] }}"

  2255. etherpad_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  2256. etherpad_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  2257. etherpad_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  2258. 

  2259. etherpad_systemd_required_services_list: |

  2260.   {{

  2261.     ['docker.service']

  2262.     +

  2263.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  2264.   }}

  2265. 

  2266. etherpad_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  2267. etherpad_database_name: matrix_etherpad

  2268. etherpad_database_username: matrix_etherpad

  2269. etherpad_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'etherpad.db', rounds=655555) | to_uuid }}"

  2270. 

  2271. ######################################################################

  2272. #

  2273. # /etke/etherpad

  2274. #

  2275. ######################################################################

  2276. 

  2277. ######################################################################

  2278. #

  2279. # matrix-dynamic-dns

  2280. #

  2281. ######################################################################

  2282. 

  2283. matrix_dynamic_dns_enabled: false

  2284. 

  2285. ######################################################################

  2286. #

  2287. # /matrix-dynamic-dns

  2288. #

  2289. ######################################################################

  2290. 

  2291. ######################################################################

  2292. #

  2293. # matrix-email2matrix

  2294. #

  2295. ######################################################################

  2296. 

  2297. matrix_email2matrix_enabled: false

  2298. 

  2299. matrix_email2matrix_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm32', 'arm64'] }}"

  2300. 

  2301. ######################################################################

  2302. #

  2303. # /matrix-email2matrix

  2304. #

  2305. ######################################################################

  2306. 

  2307. ######################################################################

  2308. #

  2309. # matrix-jitsi

  2310. #

  2311. ######################################################################

  2312. 

  2313. matrix_jitsi_enabled: false

  2314. 

  2315. # Normally, matrix-nginx-proxy is enabled and nginx can reach jitsi/web over the container network.

  2316. # If matrix-nginx-proxy is not enabled, or you otherwise have a need for it, you can expose

  2317. # the Jitsi HTTP port to the local host.

  2318. matrix_jitsi_web_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '13080') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  2319. 

  2320. matrix_jitsi_jvb_container_colibri_ws_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '13090') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  2321. 

  2322. matrix_jitsi_prosody_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '5280') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  2323. 

  2324. matrix_jitsi_jibri_xmpp_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'jibri', rounds=655555) | to_uuid }}"

  2325. matrix_jitsi_jicofo_auth_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'jicofo', rounds=655555) | to_uuid }}"

  2326. matrix_jitsi_jvb_auth_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'jvb', rounds=655555) | to_uuid }}"

  2327. 

  2328. matrix_jitsi_web_stun_servers: |

  2329.   {{

  2330.     [

  2331.       'stun:' + matrix_server_fqn_matrix + ':5349',

  2332.       'stun:' + matrix_server_fqn_matrix + ':3478',

  2333.     ]

  2334.     if matrix_coturn_enabled

  2335.     else [ 'stun:meet-jit-si-turnrelay.jitsi.net:443']

  2336.   }}

  2337. 

  2338. # If the self-hosted Etherpad instance is available, it will also show up in Jitsi conferences,

  2339. # unless explicitly disabled by setting `matrix_jitsi_etherpad_enabled` to false.

  2340. # Falls back to the scalar.vector.im etherpad in case someone sets `matrix_jitsi_etherpad_enabled` to true,

  2341. # while also setting `etherpad_enabled` to false.

  2342. matrix_jitsi_etherpad_enabled: "{{ etherpad_enabled }}"

  2343. matrix_jitsi_etherpad_base: "{{ etherpad_base_url if etherpad_enabled else 'https://scalar.vector.im/etherpad' }}"

  2344. 

  2345. # Allow verification using JWT and matrix-UVS

  2346. matrix_jitsi_prosody_auth_matrix_uvs_auth_token: "{{ matrix_user_verification_service_uvs_auth_token }}"

  2347. matrix_jitsi_prosody_auth_matrix_uvs_location: "{{ matrix_user_verification_service_container_url }}"

  2348. 

  2349. matrix_jitsi_self_check_validate_certificates: "{{ false if matrix_ssl_retrieval_method == 'self-signed' else true }}"

  2350. 

  2351. ######################################################################

  2352. #

  2353. # /matrix-jitsi

  2354. #

  2355. ######################################################################

  2356. ######################################################################

  2357. #

  2358. # matrix-ldap-registration-proxy

  2359. #

  2360. ######################################################################

  2361. 

  2362. # This is only for users with a specific LDAP setup

  2363. matrix_ldap_registration_proxy_enabled: false

  2364. 

  2365. ######################################################################

  2366. #

  2367. # /matrix-ldap-registration-proxy

  2368. #

  2369. ######################################################################

  2370. 

  2371. ######################################################################

  2372. #

  2373. # matrix-mailer

  2374. #

  2375. ######################################################################

  2376. 

  2377. # By default, this playbook sets up an exim mailer server (running in a container).

  2378. # This is so that Synapse can send email reminders for unread messages.

  2379. # Other services (like ma1sd), also use the mailer.

  2380. matrix_mailer_enabled: true

  2381. 

  2382. matrix_mailer_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm32', 'arm64'] }}"

  2383. 

  2384. ######################################################################

  2385. #

  2386. # /matrix-mailer

  2387. #

  2388. ######################################################################

  2389. 

  2390. ######################################################################

  2391. #

  2392. # matrix-ma1sd

  2393. #

  2394. ######################################################################

  2395. 

  2396. # We no longer install the ma1sd identity server by default.

  2397. #

  2398. # The main reason we used to install ma1sd by default in the past was to

  2399. # prevent Element from talking to the `matrix.org` / `vector.im` identity servers,

  2400. # by forcing it to talk to our own self-hosted (but otherwise useless) identity server instead,

  2401. # thus preventing contact list leaks.

  2402. #

  2403. # Since Element no longer defaults to using a public identity server if another one is not provided,

  2404. # we can stop installing ma1sd.

  2405. matrix_ma1sd_enabled: false

  2406. 

  2407. matrix_ma1sd_container_image_self_build: "{{ matrix_architecture != 'amd64' }}"

  2408. 

  2409. # Normally, matrix-nginx-proxy is enabled and nginx can reach ma1sd over the container network.

  2410. # If matrix-nginx-proxy is not enabled, or you otherwise have a need for it, you can expose

  2411. # ma1sd's web-server port.

  2412. matrix_ma1sd_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '' ~ matrix_ma1sd_container_port | string) if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  2413. 

  2414. 

  2415. # We enable Synapse integration via its Postgres database by default.

  2416. # When using another Identity store, you might wish to disable this and define

  2417. # your own configuration in `matrix_ma1sd_configuration_extension_yaml`.

  2418. matrix_ma1sd_synapsesql_enabled: true

  2419. matrix_ma1sd_synapsesql_type: postgresql

  2420. matrix_ma1sd_synapsesql_connection: //{{ matrix_synapse_database_host }}/{{ matrix_synapse_database_database }}?user={{ matrix_synapse_database_user | urlencode() }}&password={{ matrix_synapse_database_password | urlencode() }}

  2421. 

  2422. matrix_ma1sd_dns_overwrite_enabled: true

  2423. matrix_ma1sd_dns_overwrite_homeserver_client_name: "{{ matrix_server_fqn_matrix }}"

  2424. # The `matrix_ma1sd_dns_overwrite_homeserver_client_value` value when matrix_nginx_proxy_enabled is false covers the general case,

  2425. # but may be inaccurate if matrix-corporal is enabled.

  2426. matrix_ma1sd_dns_overwrite_homeserver_client_value: "{{ matrix_homeserver_container_url }}"

  2427. 

  2428. # By default, we send mail through the `matrix-mailer` service.

  2429. matrix_ma1sd_threepid_medium_email_identity_from: "{{ matrix_mailer_sender_address }}"

  2430. matrix_ma1sd_threepid_medium_email_connectors_smtp_host: "matrix-mailer"

  2431. matrix_ma1sd_threepid_medium_email_connectors_smtp_port: 8025

  2432. matrix_ma1sd_threepid_medium_email_connectors_smtp_tls: 0

  2433. 

  2434. matrix_ma1sd_self_check_validate_certificates: "{{ false if matrix_playbook_ssl_retrieval_method == 'self-signed' else true }}"

  2435. 

  2436. matrix_ma1sd_systemd_required_services_list: |

  2437.   {{

  2438.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  2439.   }}

  2440. 

  2441. matrix_ma1sd_systemd_wanted_services_list: |

  2442.   {{

  2443.     (['matrix-corporal.service'] if matrix_corporal_enabled else ['matrix-' + matrix_homeserver_implementation + '.service'])

  2444.     +

  2445.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  2446.     +

  2447.     (['matrix-mailer.service'] if matrix_mailer_enabled else [])

  2448.   }}

  2449. 

  2450. # Postgres is the default, except if not using internal Postgres server

  2451. matrix_ma1sd_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  2452. matrix_ma1sd_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  2453. matrix_ma1sd_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'ma1sd.db', rounds=655555) | to_uuid }}"

  2454. 

  2455. ######################################################################

  2456. #

  2457. # /matrix-ma1sd

  2458. #

  2459. ######################################################################

  2460. 

  2461. 

  2462. ######################################################################

  2463. #

  2464. # matrix-nginx-proxy

  2465. #

  2466. ######################################################################

  2467. 

  2468. # This playbook installs its own nginx if

  2469. # - it's explicitly enabled

  2470. # - Traefik is in use. Not all services are Traefik-native yet, so we use reverse-proxy to some via a local-only matrix-nginx-proxy

  2471. matrix_nginx_proxy_enabled: "{{ matrix_playbook_reverse_proxy_type in ['playbook-managed-nginx', 'playbook-managed-traefik', 'other-traefik-container'] }}"

  2472. 

  2473. # matrix-nginx-proxy is only to handle HTTPS only if it's the chosen reverse-proxy.

  2474. # It may be enabled even if it's not chosen. See `matrix_nginx_proxy_enabled`.

  2475. matrix_ssl_retrieval_method: "{{ 'lets-encrypt' if matrix_playbook_reverse_proxy_type == 'playbook-managed-nginx' else 'none' }}"

  2476. matrix_nginx_proxy_https_enabled: "{{ matrix_playbook_reverse_proxy_type == 'playbook-managed-nginx' }}"

  2477. 

  2478. # matrix-nginx-proxy is to publish ports only if it's the chosen reverse-proxy.

  2479. # It may be enabled even if it's not chosen. See `matrix_nginx_proxy_enabled`.

  2480. matrix_nginx_proxy_container_http_host_bind_port: "{{ '80' if matrix_playbook_reverse_proxy_type == 'playbook-managed-nginx' else '' }}"

  2481. matrix_nginx_proxy_container_federation_host_bind_port: "{{ matrix_federation_public_port if matrix_playbook_reverse_proxy_type == 'playbook-managed-nginx' else '' }}"

  2482. 

  2483. # matrix-nginx-proxy is to trust reverse-proxy forwarded protocol and headers, unless it's the "main" (chosen) reverse-proxy

  2484. matrix_nginx_proxy_trust_forwarded_proto: "{{ matrix_playbook_reverse_proxy_type != 'playbook-managed-nginx' }}"

  2485. matrix_nginx_proxy_x_forwarded_for: "{{ '$remote_addr' if matrix_playbook_reverse_proxy_type == 'playbook-managed-nginx' else '$proxy_add_x_forwarded_for' }}"

  2486. 

  2487. matrix_nginx_proxy_container_additional_networks: "{{ [matrix_playbook_reverse_proxyable_services_additional_network] if matrix_playbook_reverse_proxyable_services_additional_network else [] }}"

  2488. 

  2489. matrix_nginx_proxy_proxy_matrix_client_api_addr_with_container: "{{ 'matrix-corporal:41080' if matrix_corporal_enabled else 'matrix-nginx-proxy:12080' }}"

  2490. matrix_nginx_proxy_proxy_matrix_client_api_addr_sans_container: "{{ '127.0.0.1:41080' if matrix_corporal_enabled else '127.0.0.1:12080' }}"

  2491. matrix_nginx_proxy_proxy_matrix_client_api_client_max_body_size_mb: |-

  2492.   {{

  2493.     {

  2494.       'synapse': matrix_synapse_max_upload_size_mb,

  2495.       'dendrite': (matrix_dendrite_max_file_size_bytes / 1024 / 1024) | round,

  2496.       'conduit': (matrix_conduit_max_request_size / 1024 / 1024) | round,

  2497.     }[matrix_homeserver_implementation]|int

  2498.   }}

  2499. 

  2500. matrix_nginx_proxy_proxy_matrix_client_api_forwarded_location_synapse_admin_api_enabled: "{{ matrix_synapse_admin_enabled or matrix_bot_matrix_registration_bot_enabled }}"

  2501. 

  2502. matrix_nginx_proxy_proxy_matrix_client_redirect_root_uri_to_domain: "{{ matrix_server_fqn_element if matrix_client_element_enabled else '' }}"

  2503. 

  2504. matrix_nginx_proxy_proxy_matrix_enabled: true

  2505. matrix_nginx_proxy_proxy_element_enabled: "{{ matrix_client_element_enabled and matrix_playbook_reverse_proxy_type in ['playbook-managed-nginx', 'other-nginx-non-container'] }}"

  2506. matrix_nginx_proxy_proxy_hydrogen_enabled: "{{ matrix_client_hydrogen_enabled and matrix_playbook_reverse_proxy_type in ['playbook-managed-nginx', 'other-nginx-non-container'] }}"

  2507. matrix_nginx_proxy_proxy_cinny_enabled: "{{ matrix_client_cinny_enabled and matrix_playbook_reverse_proxy_type in ['playbook-managed-nginx', 'other-nginx-non-container'] }}"

  2508. matrix_nginx_proxy_proxy_buscarron_enabled: "{{ matrix_bot_buscarron_enabled and matrix_playbook_reverse_proxy_type in ['playbook-managed-nginx', 'other-nginx-non-container'] }}"

  2509. matrix_nginx_proxy_proxy_dimension_enabled: "{{ matrix_dimension_enabled and matrix_playbook_reverse_proxy_type in ['playbook-managed-nginx', 'other-nginx-non-container'] }}"

  2510. matrix_nginx_proxy_proxy_rageshake_enabled: "{{ matrix_rageshake_enabled and matrix_playbook_reverse_proxy_type in ['playbook-managed-nginx', 'other-nginx-non-container'] }}"

  2511. matrix_nginx_proxy_proxy_etherpad_enabled: "{{ etherpad_enabled and not etherpad_nginx_proxy_dimension_integration_enabled and matrix_playbook_reverse_proxy_type in ['playbook-managed-nginx', 'other-nginx-non-container'] }}"

  2512. matrix_nginx_proxy_proxy_bot_go_neb_enabled: "{{ matrix_bot_go_neb_enabled and matrix_playbook_reverse_proxy_type in ['playbook-managed-nginx', 'other-nginx-non-container'] }}"

  2513. 

  2514. matrix_nginx_proxy_proxy_jitsi_enabled: "{{ matrix_jitsi_enabled }}"

  2515. matrix_nginx_proxy_proxy_jitsi_manage_wellknown: "{{ matrix_jitsi_require_well_known }}"

  2516. 

  2517. matrix_nginx_proxy_proxy_grafana_enabled: "{{ grafana_enabled and matrix_playbook_reverse_proxy_type in ['playbook-managed-nginx', 'other-nginx-non-container'] }}"

  2518. matrix_nginx_proxy_proxy_sygnal_enabled: "{{ matrix_sygnal_enabled and matrix_playbook_reverse_proxy_type in ['playbook-managed-nginx', 'other-nginx-non-container'] }}"

  2519. matrix_nginx_proxy_proxy_ntfy_enabled: "{{ ntfy_enabled and matrix_playbook_reverse_proxy_type in ['playbook-managed-nginx', 'other-nginx-non-container'] }}"

  2520. 

  2521. matrix_nginx_proxy_container_labels_traefik_enabled: "{{ matrix_playbook_traefik_labels_enabled }}"

  2522. matrix_nginx_proxy_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  2523. matrix_nginx_proxy_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  2524. matrix_nginx_proxy_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  2525. 

  2526. matrix_nginx_proxy_container_labels_traefik_proxy_matrix_enabled: true

  2527. matrix_nginx_proxy_container_labels_traefik_proxy_jitsi_enabled: "{{ matrix_jitsi_enabled }}"

  2528. 

  2529. matrix_nginx_proxy_proxy_matrix_corporal_api_enabled: "{{ matrix_corporal_enabled and matrix_corporal_http_api_enabled }}"

  2530. matrix_nginx_proxy_proxy_matrix_corporal_api_addr_with_container: "matrix-corporal:41081"

  2531. matrix_nginx_proxy_proxy_matrix_corporal_api_addr_sans_container: "127.0.0.1:41081"

  2532. 

  2533. matrix_nginx_proxy_proxy_matrix_identity_api_enabled: "{{ matrix_ma1sd_enabled }}"

  2534. matrix_nginx_proxy_proxy_matrix_identity_api_addr_with_container: "matrix-ma1sd:{{ matrix_ma1sd_container_port }}"

  2535. matrix_nginx_proxy_proxy_matrix_identity_api_addr_sans_container: "127.0.0.1:{{ matrix_ma1sd_container_port }}"

  2536. 

  2537. # By default, we do TLS termination for the Matrix Federation API (port 8448) at matrix-nginx-proxy.

  2538. # Unless this is handled there OR Synapse's federation listener port is disabled, we'll reverse-proxy.

  2539. matrix_nginx_proxy_proxy_matrix_federation_api_enabled: |-

  2540.   {{

  2541.     {

  2542.       'synapse': (matrix_synapse_federation_port_enabled and not matrix_synapse_tls_federation_listener_enabled),

  2543.       'dendrite': matrix_dendrite_federation_enabled,

  2544.       'conduit': matrix_conduit_allow_federation,

  2545.     }[matrix_homeserver_implementation]|bool

  2546.   }}

  2547. 

  2548. matrix_nginx_proxy_proxy_matrix_federation_api_addr_with_container: "matrix-nginx-proxy:12088"

  2549. matrix_nginx_proxy_proxy_matrix_federation_api_addr_sans_container: "127.0.0.1:12088"

  2550. 

  2551. matrix_nginx_proxy_proxy_synapse_enabled: "{{ matrix_synapse_enabled }}"

  2552. matrix_nginx_proxy_proxy_synapse_client_api_addr_with_container: "{{ 'matrix-synapse-reverse-proxy-companion:8008' if matrix_synapse_reverse_proxy_companion_enabled else 'matrix-synapse:8008' }}"

  2553. matrix_nginx_proxy_proxy_synapse_client_api_addr_sans_container: "127.0.0.1:8008"

  2554. matrix_nginx_proxy_proxy_synapse_federation_api_addr_with_container: "{{ 'matrix-synapse-reverse-proxy-companion:8048' if matrix_synapse_reverse_proxy_companion_enabled else 'matrix-synapse:8048' }}"

  2555. matrix_nginx_proxy_proxy_synapse_federation_api_addr_sans_container: "127.0.0.1:8048"

  2556. 

  2557. matrix_nginx_proxy_proxy_dendrite_enabled: "{{ matrix_dendrite_enabled }}"

  2558. matrix_nginx_proxy_proxy_dendrite_client_api_addr_with_container: "matrix-dendrite:{{ matrix_dendrite_http_bind_port | string }}"

  2559. matrix_nginx_proxy_proxy_dendrite_client_api_addr_sans_container: "127.0.0.1:{{ matrix_dendrite_http_bind_port | string }}"

  2560. matrix_nginx_proxy_proxy_dendrite_federation_api_addr_with_container: "matrix-dendrite:{{ matrix_dendrite_http_bind_port | string }}"

  2561. matrix_nginx_proxy_proxy_dendrite_federation_api_addr_sans_container: "127.0.0.1:{{ matrix_dendrite_http_bind_port | string }}"

  2562. 

  2563. matrix_nginx_proxy_proxy_conduit_enabled: "{{ matrix_conduit_enabled }}"

  2564. matrix_nginx_proxy_proxy_conduit_client_api_addr_with_container: "matrix-conduit:{{ matrix_conduit_port_number|string }}"

  2565. matrix_nginx_proxy_proxy_conduit_client_api_addr_sans_container: "127.0.0.1:{{ matrix_conduit_port_number|string }}"

  2566. matrix_nginx_proxy_proxy_conduit_federation_api_addr_with_container: "matrix-conduit:{{ matrix_conduit_port_number|string }}"

  2567. matrix_nginx_proxy_proxy_conduit_federation_api_addr_sans_container: "127.0.0.1:{{ matrix_conduit_port_number|string }}"

  2568. 

  2569. # When matrix-nginx-proxy is disabled, the actual port number that the vhost uses may begin to matter.

  2570. matrix_nginx_proxy_proxy_matrix_federation_port: "{{ matrix_federation_public_port }}"

  2571. 

  2572. matrix_nginx_proxy_proxy_matrix_user_directory_search_enabled: "{{ matrix_ma1sd_enabled }}"

  2573. matrix_nginx_proxy_proxy_matrix_user_directory_search_addr_with_container: "{{ matrix_nginx_proxy_proxy_matrix_identity_api_addr_with_container }}"

  2574. matrix_nginx_proxy_proxy_matrix_user_directory_search_addr_sans_container: "{{ matrix_nginx_proxy_proxy_matrix_identity_api_addr_sans_container }}"

  2575. 

  2576. matrix_nginx_proxy_self_check_validate_certificates: "{{ false if matrix_playbook_ssl_retrieval_method == 'self-signed' else true }}"

  2577. 

  2578. # OCSP stapling does not make sense when self-signed certificates are used.

  2579. # See https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1073

  2580. # and https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1074

  2581. matrix_nginx_proxy_ocsp_stapling_enabled: "{{ matrix_playbook_ssl_retrieval_method != 'self-signed' }}"

  2582. 

  2583. matrix_nginx_proxy_systemd_wanted_services_list: |

  2584.   {{

  2585.     ['matrix-' + matrix_homeserver_implementation + '.service']

  2586.     +

  2587.     (matrix_synapse_webserving_workers_systemd_services_list if matrix_homeserver_implementation == 'synapse' and matrix_synapse_workers_enabled else [])

  2588.     +

  2589.     (['matrix-synapse-reverse-proxy-companion.service'] if matrix_synapse_reverse_proxy_companion_enabled else [])

  2590.     +

  2591.     (['matrix-corporal.service'] if matrix_corporal_enabled else [])

  2592.     +

  2593.     (['matrix-ma1sd.service'] if matrix_ma1sd_enabled else [])

  2594.     +

  2595.     (['matrix-client-cinny.service'] if matrix_client_cinny_enabled else [])

  2596.     +

  2597.     (['matrix-bot-buscarron.service'] if matrix_bot_buscarron_enabled else [])

  2598.     +

  2599.     (['matrix-client-element.service'] if matrix_client_element_enabled else [])

  2600.     +

  2601.     (['matrix-client-hydrogen.service'] if matrix_client_hydrogen_enabled else [])

  2602.     +

  2603.     ([(grafana_identifier + '.service')] if grafana_enabled else [])

  2604.     +

  2605.     (['matrix-dimension.service'] if matrix_dimension_enabled else [])

  2606.     +

  2607.     (['matrix-rageshake.service'] if matrix_rageshake_enabled else [])

  2608.     +

  2609.     (['matrix-sygnal.service'] if matrix_sygnal_enabled else [])

  2610.     +

  2611.     ([(ntfy_identifier + '.service')] if ntfy_enabled else [])

  2612.     +

  2613.     (['matrix-jitsi.service'] if matrix_jitsi_enabled else [])

  2614.     +

  2615.     (['matrix-bot-go-neb.service'] if matrix_bot_go_neb_enabled else [])

  2616.     +

  2617.     ([etherpad_identifier + '.service'] if etherpad_enabled else [])

  2618.     +

  2619.     (['matrix-hookshot.service'] if matrix_hookshot_enabled else [])

  2620.   }}

  2621. 

  2622. matrix_ssl_domains_to_obtain_certificates_for: |

  2623.   {{

  2624.     ([matrix_server_fqn_matrix])

  2625.     +

  2626.     ([matrix_server_fqn_element] if matrix_client_element_enabled else [])

  2627.     +

  2628.     ([matrix_nginx_proxy_proxy_riot_compat_redirect_hostname] if matrix_nginx_proxy_proxy_riot_compat_redirect_enabled else [])

  2629.     +

  2630.     ([matrix_server_fqn_hydrogen] if matrix_client_hydrogen_enabled else [])

  2631.     +

  2632.     ([matrix_server_fqn_cinny] if matrix_client_cinny_enabled else [])

  2633.     +

  2634.     ([matrix_server_fqn_buscarron] if matrix_bot_buscarron_enabled else [])

  2635.     +

  2636.     ([matrix_server_fqn_dimension] if matrix_dimension_enabled else [])

  2637.     +

  2638.     ([matrix_server_fqn_etherpad] if (etherpad_enabled and not etherpad_nginx_proxy_dimension_integration_enabled) else [])

  2639.     +

  2640.     ([matrix_server_fqn_bot_go_neb] if matrix_bot_go_neb_enabled else [])

  2641.     +

  2642.     ([matrix_server_fqn_jitsi] if matrix_jitsi_enabled else [])

  2643.     +

  2644.     ([matrix_server_fqn_grafana] if grafana_enabled else [])

  2645.     +

  2646.     ([matrix_server_fqn_sygnal] if matrix_sygnal_enabled else [])

  2647.     +

  2648.     ([ntfy_hostname] if ntfy_enabled else [])

  2649.     +

  2650.     ([matrix_server_fqn_rageshake] if matrix_rageshake_enabled else [])

  2651.     +

  2652.     (matrix_bot_postmoogle_domains if matrix_bot_postmoogle_enabled else [])

  2653.     +

  2654.     ([matrix_domain] if matrix_nginx_proxy_base_domain_serving_enabled else [])

  2655.     +

  2656.     matrix_ssl_additional_domains_to_obtain_certificates_for

  2657.   }}

  2658. 

  2659. matrix_ssl_architecture: "{{

  2660. 	{

  2661. 		'amd64': 'amd64',

  2662. 		'arm32': 'arm32v6',

  2663. 		'arm64': 'arm64v8',

  2664. 	}[matrix_architecture]

  2665. }}"

  2666. 

  2667. matrix_ssl_pre_obtaining_required_service_name: "{{ 'matrix-dynamic-dns' if matrix_dynamic_dns_enabled else '' }}"

  2668. 

  2669. matrix_nginx_proxy_access_log_syslog_integration_enabled: "{{ matrix_prometheus_nginxlog_exporter_enabled }}"

  2670. matrix_nginx_proxy_access_log_syslog_integration_server_port: "{{ (matrix_prometheus_nginxlog_exporter_container_hostname | string +':'+ matrix_prometheus_nginxlog_exporter_container_syslog_port | string) | default('') }}"

  2671. 

  2672. ######################################################################

  2673. #

  2674. # /matrix-nginx-proxy

  2675. #

  2676. ######################################################################

  2677. 

  2678. 

  2679. ########################################################################

  2680. #                                                                      #

  2681. # com.devture.ansible.role.postgres                                    #

  2682. #                                                                      #

  2683. ########################################################################

  2684. 

  2685. # To completely disable installing Postgres, use `devture_postgres_enabled: false`.

  2686. 

  2687. devture_postgres_identifier: matrix-postgres

  2688. 

  2689. devture_postgres_architecture: "{{ matrix_architecture }}"

  2690. 

  2691. devture_postgres_base_path: "{{ matrix_base_data_path }}/postgres"

  2692. 

  2693. devture_postgres_container_network: "{{ matrix_docker_network }}"

  2694. 

  2695. devture_postgres_uid: "{{ matrix_user_uid }}"

  2696. devture_postgres_gid: "{{ matrix_user_gid }}"

  2697. 

  2698. devture_postgres_connection_username: matrix

  2699. devture_postgres_db_name: matrix

  2700. 

  2701. devture_postgres_systemd_services_to_stop_for_maintenance_list: |

  2702.   {{

  2703.     ['matrix-' + matrix_homeserver_implementation + '.service']

  2704.   }}

  2705. 

  2706. devture_postgres_managed_databases_auto: |

  2707.   {{

  2708.     ([{

  2709.       'name': matrix_synapse_database_database,

  2710.       'username': matrix_synapse_database_user,

  2711.       'password': matrix_synapse_database_password,

  2712.     }] if (matrix_synapse_enabled and matrix_synapse_database_host == devture_postgres_connection_hostname) else [])

  2713.     +

  2714.     ([{

  2715.       'name': matrix_dendrite_federationapi_database,

  2716.       'username': matrix_dendrite_database_user,

  2717.       'password': matrix_dendrite_database_password,

  2718.     },{

  2719.       'name': matrix_dendrite_keyserver_database,

  2720.       'username': matrix_dendrite_database_user,

  2721.       'password': matrix_dendrite_database_password,

  2722.     },{

  2723.       'name': matrix_dendrite_mediaapi_database,

  2724.       'username': matrix_dendrite_database_user,

  2725.       'password': matrix_dendrite_database_password,

  2726.     },{

  2727.       'name': matrix_dendrite_room_database,

  2728.       'username': matrix_dendrite_database_user,

  2729.       'password': matrix_dendrite_database_password,

  2730.     },{

  2731.       'name': matrix_dendrite_syncapi_database,

  2732.       'username': matrix_dendrite_database_user,

  2733.       'password': matrix_dendrite_database_password,

  2734.     },{

  2735.       'name': matrix_dendrite_userapi_database,

  2736.       'username': matrix_dendrite_database_user,

  2737.       'password': matrix_dendrite_database_password,

  2738.     },{

  2739.       'name': matrix_dendrite_pushserver_database,

  2740.       'username': matrix_dendrite_database_user,

  2741.       'password': matrix_dendrite_database_password,

  2742.     },{

  2743.       'name': matrix_dendrite_mscs_database,

  2744.       'username': matrix_dendrite_database_user,

  2745.       'password': matrix_dendrite_database_password,

  2746.     }] if (matrix_dendrite_enabled and matrix_dendrite_database_hostname == devture_postgres_connection_hostname) else [])

  2747.     +

  2748.     ([{

  2749.       'name': matrix_ma1sd_database_name,

  2750.       'username': matrix_ma1sd_database_username,

  2751.       'password': matrix_ma1sd_database_password,

  2752.     }] if (matrix_ma1sd_enabled and matrix_ma1sd_database_engine == 'postgres' and matrix_ma1sd_database_hostname == devture_postgres_connection_hostname) else [])

  2753.     +

  2754.     ([{

  2755.       'name': matrix_bot_matrix_reminder_bot_database_name,

  2756.       'username': matrix_bot_matrix_reminder_bot_database_username,

  2757.       'password': matrix_bot_matrix_reminder_bot_database_password,

  2758.     }] if (matrix_bot_matrix_reminder_bot_enabled and matrix_bot_matrix_reminder_bot_database_engine == 'postgres' and matrix_bot_matrix_reminder_bot_database_hostname == devture_postgres_connection_hostname) else [])

  2759.     +

  2760.     ([{

  2761.       'name': matrix_bot_honoroit_database_name,

  2762.       'username': matrix_bot_honoroit_database_username,

  2763.       'password': matrix_bot_honoroit_database_password,

  2764.     }] if (matrix_bot_honoroit_enabled and matrix_bot_honoroit_database_engine == 'postgres' and matrix_bot_honoroit_database_hostname == devture_postgres_connection_hostname) else [])

  2765.     +

  2766.     ([{

  2767.       'name': matrix_bot_postmoogle_database_name,

  2768.       'username': matrix_bot_postmoogle_database_username,

  2769.       'password': matrix_bot_postmoogle_database_password,

  2770.     }] if (matrix_bot_postmoogle_enabled and matrix_bot_postmoogle_database_engine == 'postgres' and matrix_bot_postmoogle_database_hostname == devture_postgres_connection_hostname) else [])

  2771.     +

  2772.     ([{

  2773.       'name': matrix_bot_maubot_database_name,

  2774.       'username': matrix_bot_maubot_database_username,

  2775.       'password': matrix_bot_maubot_database_password,

  2776.     }] if (matrix_bot_maubot_enabled  and matrix_bot_maubot_database_engine == 'postgres' and matrix_bot_maubot_database_hostname == devture_postgres_connection_hostname) else [])

  2777.     +

  2778.     ([{

  2779.       'name': matrix_bot_buscarron_database_name,

  2780.       'username': matrix_bot_buscarron_database_username,

  2781.       'password': matrix_bot_buscarron_database_password,

  2782.     }] if (matrix_bot_buscarron_enabled and matrix_bot_buscarron_database_engine == 'postgres' and matrix_bot_buscarron_database_hostname == devture_postgres_connection_hostname) else [])

  2783.     +

  2784.     ([{

  2785.       'name': matrix_registration_database_name,

  2786.       'username': matrix_registration_database_username,

  2787.       'password': matrix_registration_database_password,

  2788.     }] if (matrix_registration_enabled and matrix_registration_database_engine == 'postgres' and matrix_registration_database_hostname == devture_postgres_connection_hostname) else [])

  2789.     +

  2790.     ([{

  2791.       'name': matrix_appservice_discord_database_name,

  2792.       'username': matrix_appservice_discord_database_username,

  2793.       'password': matrix_appservice_discord_database_password,

  2794.     }] if (matrix_appservice_discord_enabled and matrix_appservice_discord_database_engine == 'postgres' and matrix_appservice_discord_database_hostname == devture_postgres_connection_hostname) else [])

  2795.     +

  2796.     ([{

  2797.       'name': matrix_appservice_slack_database_name,

  2798.       'username': matrix_appservice_slack_database_username,

  2799.       'password': matrix_appservice_slack_database_password,

  2800.     }] if (matrix_appservice_slack_enabled and matrix_appservice_slack_database_engine == 'postgres' and matrix_appservice_slack_database_hostname == devture_postgres_connection_hostname) else [])

  2801.     +

  2802.     ([{

  2803.       'name': matrix_appservice_irc_database_name,

  2804.       'username': matrix_appservice_irc_database_username,

  2805.       'password': matrix_appservice_irc_database_password,

  2806.     }] if (matrix_appservice_irc_enabled and matrix_appservice_irc_database_engine == 'postgres' and matrix_appservice_irc_database_hostname == devture_postgres_connection_hostname) else [])

  2807.     +

  2808.     ([{

  2809.       'name': matrix_appservice_kakaotalk_database_name,

  2810.       'username': matrix_appservice_kakaotalk_database_username,

  2811.       'password': matrix_appservice_kakaotalk_database_password,

  2812.     }] if (matrix_appservice_kakaotalk_enabled and matrix_appservice_kakaotalk_database_engine == 'postgres' and matrix_appservice_kakaotalk_database_hostname == devture_postgres_connection_hostname) else [])

  2813.     +

  2814.     ([{

  2815.       'name': matrix_beeper_linkedin_database_name,

  2816.       'username': matrix_beeper_linkedin_database_username,

  2817.       'password': matrix_beeper_linkedin_database_password,

  2818.     }] if (matrix_beeper_linkedin_enabled and matrix_beeper_linkedin_database_engine == 'postgres' and matrix_beeper_linkedin_database_hostname == devture_postgres_connection_hostname) else [])

  2819.     +

  2820.     ([{

  2821.       'name': matrix_go_skype_bridge_database_name,

  2822.       'username': matrix_go_skype_bridge_database_username,

  2823.       'password': matrix_go_skype_bridge_database_password,

  2824.     }] if (matrix_go_skype_bridge_enabled and matrix_go_skype_bridge_database_engine == 'postgres' and matrix_go_skype_bridge_database_hostname == devture_postgres_connection_hostname) else [])

  2825.     +

  2826.     ([{

  2827.       'name': matrix_mautrix_facebook_database_name,

  2828.       'username': matrix_mautrix_facebook_database_username,

  2829.       'password': matrix_mautrix_facebook_database_password,

  2830.     }] if (matrix_mautrix_facebook_enabled and matrix_mautrix_facebook_database_engine == 'postgres' and matrix_mautrix_facebook_database_hostname == devture_postgres_connection_hostname) else [])

  2831.     +

  2832.     ([{

  2833.       'name': matrix_mautrix_hangouts_database_name,

  2834.       'username': matrix_mautrix_hangouts_database_username,

  2835.       'password': matrix_mautrix_hangouts_database_password,

  2836.     }] if (matrix_mautrix_hangouts_enabled and matrix_mautrix_hangouts_database_engine == 'postgres' and matrix_mautrix_hangouts_database_hostname == devture_postgres_connection_hostname) else [])

  2837.     +

  2838.     ([{

  2839.       'name': matrix_mautrix_googlechat_database_name,

  2840.       'username': matrix_mautrix_googlechat_database_username,

  2841.       'password': matrix_mautrix_googlechat_database_password,

  2842.     }] if (matrix_mautrix_googlechat_enabled and matrix_mautrix_googlechat_database_engine == 'postgres' and matrix_mautrix_googlechat_database_hostname == devture_postgres_connection_hostname) else [])

  2843.     +

  2844.     ([{

  2845.       'name': matrix_mautrix_instagram_database_name,

  2846.       'username': matrix_mautrix_instagram_database_username,

  2847.       'password': matrix_mautrix_instagram_database_password,

  2848.     }] if (matrix_mautrix_instagram_enabled and matrix_mautrix_instagram_database_engine == 'postgres' and matrix_mautrix_instagram_database_hostname == devture_postgres_connection_hostname) else [])

  2849.     +

  2850.     ([{

  2851.       'name': matrix_mautrix_signal_database_name,

  2852.       'username': matrix_mautrix_signal_database_username,

  2853.       'password': matrix_mautrix_signal_database_password,

  2854.     }] if (matrix_mautrix_signal_enabled and matrix_mautrix_signal_database_engine == 'postgres' and matrix_mautrix_signal_database_hostname == devture_postgres_connection_hostname) else [])

  2855.     +

  2856.     ([{

  2857.       'name': matrix_mautrix_telegram_database_name,

  2858.       'username': matrix_mautrix_telegram_database_username,

  2859.       'password': matrix_mautrix_telegram_database_password,

  2860.     }] if (matrix_mautrix_telegram_enabled and matrix_mautrix_telegram_database_engine == 'postgres' and matrix_mautrix_telegram_database_hostname == devture_postgres_connection_hostname) else [])

  2861.     +

  2862.     ([{

  2863.       'name': matrix_mautrix_twitter_database_name,

  2864.       'username': matrix_mautrix_twitter_database_username,

  2865.       'password': matrix_mautrix_twitter_database_password,

  2866.     }] if (matrix_mautrix_twitter_enabled and matrix_mautrix_twitter_database_engine == 'postgres' and matrix_mautrix_twitter_database_hostname == devture_postgres_connection_hostname) else [])

  2867.     +

  2868.     ([{

  2869.       'name': matrix_mautrix_whatsapp_database_name,

  2870.       'username': matrix_mautrix_whatsapp_database_username,

  2871.       'password': matrix_mautrix_whatsapp_database_password,

  2872.     }] if (matrix_mautrix_whatsapp_enabled and matrix_mautrix_whatsapp_database_engine == 'postgres' and matrix_mautrix_whatsapp_database_hostname == devture_postgres_connection_hostname) else [])

  2873.     +

  2874.     ([{

  2875.       'name': matrix_mautrix_discord_database_name,

  2876.       'username': matrix_mautrix_discord_database_username,

  2877.       'password': matrix_mautrix_discord_database_password,

  2878.     }] if (matrix_mautrix_discord_enabled and matrix_mautrix_discord_database_engine == 'postgres' and matrix_mautrix_discord_database_hostname == devture_postgres_connection_hostname) else [])

  2879.     +

  2880.     ([{

  2881.       'name': matrix_mautrix_slack_database_name,

  2882.       'username': matrix_mautrix_slack_database_username,

  2883.       'password': matrix_mautrix_slack_database_password,

  2884.     }] if (matrix_mautrix_slack_enabled and matrix_mautrix_slack_database_engine == 'postgres' and matrix_mautrix_slack_database_hostname == devture_postgres_connection_hostname) else [])

  2885.     +

  2886.     ([{

  2887.       'name': matrix_mx_puppet_slack_database_name,

  2888.       'username': matrix_mx_puppet_slack_database_username,

  2889.       'password': matrix_mx_puppet_slack_database_password,

  2890.     }] if (matrix_mx_puppet_slack_enabled and matrix_mx_puppet_slack_database_engine == 'postgres' and matrix_mx_puppet_slack_database_hostname == devture_postgres_connection_hostname) else [])

  2891.     +

  2892.     ([{

  2893.       'name': matrix_mx_puppet_twitter_database_name,

  2894.       'username': matrix_mx_puppet_twitter_database_username,

  2895.       'password': matrix_mx_puppet_twitter_database_password,

  2896.     }] if (matrix_mx_puppet_twitter_enabled and matrix_mx_puppet_twitter_database_engine == 'postgres' and matrix_mx_puppet_twitter_database_hostname == devture_postgres_connection_hostname) else [])

  2897.     +

  2898.     ([{

  2899.       'name': matrix_mx_puppet_instagram_database_name,

  2900.       'username': matrix_mx_puppet_instagram_database_username,

  2901.       'password': matrix_mx_puppet_instagram_database_password,

  2902.     }] if (matrix_mx_puppet_instagram_enabled and matrix_mx_puppet_instagram_database_engine == 'postgres' and matrix_mx_puppet_instagram_database_hostname == devture_postgres_connection_hostname) else [])

  2903.     +

  2904.     ([{

  2905.       'name': matrix_mx_puppet_discord_database_name,

  2906.       'username': matrix_mx_puppet_discord_database_username,

  2907.       'password': matrix_mx_puppet_discord_database_password,

  2908.     }] if (matrix_mx_puppet_discord_enabled  and matrix_mx_puppet_discord_database_engine == 'postgres' and matrix_mx_puppet_discord_database_hostname == devture_postgres_connection_hostname) else [])

  2909.     +

  2910.     ([{

  2911.       'name': matrix_mx_puppet_steam_database_name,

  2912.       'username': matrix_mx_puppet_steam_database_username,

  2913.       'password': matrix_mx_puppet_steam_database_password,

  2914.     }] if (matrix_mx_puppet_steam_enabled and matrix_mx_puppet_steam_database_engine == 'postgres' and matrix_mx_puppet_steam_database_hostname == devture_postgres_connection_hostname) else [])

  2915.     +

  2916.     ([{

  2917.       'name': matrix_mx_puppet_groupme_database_name,

  2918.       'username': matrix_mx_puppet_groupme_database_username,

  2919.       'password': matrix_mx_puppet_groupme_database_password,

  2920.     }] if (matrix_mx_puppet_groupme_enabled and matrix_mx_puppet_groupme_database_engine == 'postgres' and matrix_mx_puppet_groupme_database_hostname == devture_postgres_connection_hostname) else [])

  2921.     +

  2922.     ([{

  2923.       'name': matrix_dimension_database_name,

  2924.       'username': matrix_dimension_database_username,

  2925.       'password': matrix_dimension_database_password,

  2926.     }] if (matrix_dimension_enabled and matrix_dimension_database_engine == 'postgres' and matrix_dimension_database_hostname == devture_postgres_connection_hostname) else [])

  2927.     +

  2928.     ([{

  2929.       'name': etherpad_database_name,

  2930.       'username': etherpad_database_username,

  2931.       'password': etherpad_database_password,

  2932.     }] if (etherpad_enabled and etherpad_database_engine == 'postgres' and etherpad_database_hostname == devture_postgres_connection_hostname) else [])

  2933.     +

  2934.     ([{

  2935.       'name': prometheus_postgres_exporter_database_name,

  2936.       'username': prometheus_postgres_exporter_database_username,

  2937.       'password': prometheus_postgres_exporter_database_password,

  2938.     }] if (prometheus_postgres_exporter_enabled and prometheus_postgres_exporter_database_hostname == devture_postgres_connection_hostname) else [])

  2939. 

  2940.    }}

  2941. 

  2942. ########################################################################

  2943. #                                                                      #

  2944. # /com.devture.ansible.role.postgres                                   #

  2945. #                                                                      #

  2946. ########################################################################

  2947. 

  2948. 

  2949. ########################################################################

  2950. #                                                                      #

  2951. # com.devture.ansible.role.postgres_backup                             #

  2952. #                                                                      #

  2953. ########################################################################

  2954. 

  2955. devture_postgres_backup_enabled: false

  2956. 

  2957. devture_postgres_backup_identifier: matrix-postgres-backup

  2958. 

  2959. devture_postgres_backup_architecture: "{{ matrix_architecture }}"

  2960. 

  2961. devture_postgres_backup_base_path: "{{ matrix_base_data_path }}/postgres-backup"

  2962. 

  2963. devture_postgres_backup_systemd_required_services_list: |

  2964.   {{

  2965.     (['docker.service'])

  2966.     +

  2967.     ([(devture_postgres_identifier + '.service')] if devture_postgres_enabled else [])

  2968.   }}

  2969. 

  2970. devture_postgres_backup_container_network: "{{ matrix_docker_network }}"

  2971. 

  2972. devture_postgres_backup_uid: "{{ matrix_user_uid }}"

  2973. devture_postgres_backup_gid: "{{ matrix_user_gid }}"

  2974. 

  2975. devture_postgres_backup_connection_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  2976. devture_postgres_backup_connection_port: "{{ devture_postgres_connection_port if devture_postgres_enabled else 5432 }}"

  2977. devture_postgres_backup_connection_username: "{{ devture_postgres_connection_username if devture_postgres_enabled else '' }}"

  2978. devture_postgres_backup_connection_password: "{{ devture_postgres_connection_password if devture_postgres_enabled else '' }}"

  2979. 

  2980. devture_postgres_backup_postgres_data_path: "{{ devture_postgres_data_path if devture_postgres_enabled else '' }}"

  2981. 

  2982. devture_postgres_backup_databases: "{{ devture_postgres_managed_databases | map(attribute='name') if devture_postgres_enabled else [] }}"

  2983. 

  2984. ########################################################################

  2985. #                                                                      #

  2986. # /com.devture.ansible.role.postgres_backup                            #

  2987. #                                                                      #

  2988. ########################################################################

  2989. 

  2990. 

  2991. ######################################################################

  2992. #

  2993. # matrix-sygnal

  2994. #

  2995. ######################################################################

  2996. 

  2997. # Most people don't need their own push-server, because they also need their own app to utilize it from.

  2998. matrix_sygnal_enabled: false

  2999. 

  3000. # If someone instals Prometheus via the playbook, they most likely wish to monitor Sygnal.

  3001. matrix_sygnal_metrics_prometheus_enabled: "{{ matrix_prometheus_enabled }}"

  3002. 

  3003. matrix_sygnal_hostname: "{{ matrix_server_fqn_sygnal }}"

  3004. 

  3005. matrix_sygnal_container_network: "{{ matrix_nginx_proxy_container_network if matrix_playbook_reverse_proxy_type == 'playbook-managed-nginx' else 'matrix-sygnal' }}"

  3006. 

  3007. matrix_sygnal_container_additional_networks: "{{ [matrix_playbook_reverse_proxyable_services_additional_network] if matrix_playbook_reverse_proxyable_services_additional_network else [] }}"

  3008. 

  3009. matrix_sygnal_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '6000') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  3010. 

  3011. matrix_sygnal_container_labels_traefik_enabled: "{{ matrix_playbook_traefik_labels_enabled }}"

  3012. matrix_sygnal_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  3013. matrix_sygnal_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  3014. matrix_sygnal_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  3015. 

  3016. ######################################################################

  3017. #

  3018. # /matrix-sygnal

  3019. #

  3020. ######################################################################

  3021. 

  3022. ######################################################################

  3023. #

  3024. # etke/ntfy

  3025. #

  3026. ######################################################################

  3027. 

  3028. ntfy_enabled: false

  3029. 

  3030. ntfy_identifier: matrix-ntfy

  3031. 

  3032. ntfy_base_path: "{{ matrix_base_data_path }}/ntfy"

  3033. 

  3034. ntfy_uid: "{{ matrix_user_uid }}"

  3035. ntfy_gid: "{{ matrix_user_gid }}"

  3036. 

  3037. ntfy_hostname: "{{ matrix_server_fqn_ntfy }}"

  3038. 

  3039. ntfy_container_network: "{{ matrix_nginx_proxy_container_network if matrix_playbook_reverse_proxy_type == 'playbook-managed-nginx' else ntfy_identifier }}"

  3040. 

  3041. ntfy_container_additional_networks: "{{ [matrix_playbook_reverse_proxyable_services_additional_network] if matrix_playbook_reverse_proxyable_services_additional_network else [] }}"

  3042. 

  3043. ntfy_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '2586') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  3044. 

  3045. ntfy_container_labels_traefik_enabled: "{{ matrix_playbook_traefik_labels_enabled }}"

  3046. ntfy_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  3047. ntfy_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  3048. ntfy_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  3049. 

  3050. ntfy_visitor_request_limit_exempt_hosts_hostnames_auto: |

  3051.   {{

  3052.     [matrix_server_fqn_matrix]

  3053.   }}

  3054. 

  3055. ######################################################################

  3056. #

  3057. # /etky/ntfy

  3058. #

  3059. ######################################################################

  3060. 

  3061. ######################################################################

  3062. #

  3063. # etke/redis

  3064. #

  3065. ######################################################################

  3066. 

  3067. redis_enabled: "{{ matrix_synapse_workers_enabled }}"

  3068. 

  3069. redis_identifier: matrix-redis

  3070. 

  3071. redis_uid: "{{ matrix_user_uid }}"

  3072. redis_gid: "{{ matrix_user_gid }}"

  3073. 

  3074. redis_base_path: "{{ matrix_base_data_path }}/redis"

  3075. 

  3076. ######################################################################

  3077. #

  3078. # /etle/redis

  3079. #

  3080. ######################################################################

  3081. 

  3082. ######################################################################

  3083. #

  3084. # matrix-client-element

  3085. #

  3086. ######################################################################

  3087. 

  3088. # By default, this playbook installs the Element web UI on the `matrix_server_fqn_element` domain.

  3089. # If you wish to connect to your Matrix server by other means, you may wish to disable this.

  3090. matrix_client_element_enabled: true

  3091. 

  3092. matrix_client_element_container_image_self_build: "{{ matrix_architecture not in ['arm64', 'amd64'] }}"

  3093. 

  3094. # Normally, matrix-nginx-proxy is enabled and nginx can reach Element over the container network.

  3095. # If matrix-nginx-proxy is not enabled, or you otherwise have a need for it, you can expose

  3096. # the Element HTTP port to the local host.

  3097. matrix_client_element_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '8765') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  3098. 

  3099. matrix_client_element_container_network: "{{ matrix_nginx_proxy_container_network if matrix_playbook_reverse_proxy_type == 'playbook-managed-nginx' else 'matrix-client-element' }}"

  3100. 

  3101. matrix_client_element_container_additional_networks: "{{ [matrix_playbook_reverse_proxyable_services_additional_network] if matrix_playbook_reverse_proxyable_services_additional_network else [] }}"

  3102. 

  3103. matrix_client_element_container_labels_traefik_enabled: "{{ matrix_playbook_reverse_proxy_type in ['playbook-managed-traefik', 'other-traefik-container'] }}"

  3104. matrix_client_element_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  3105. matrix_client_element_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  3106. matrix_client_element_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  3107. 

  3108. matrix_client_element_default_hs_url: "{{ matrix_homeserver_url }}"

  3109. matrix_client_element_default_is_url: "{{ matrix_identity_server_url }}"

  3110. 

  3111. # Use Dimension if enabled, otherwise fall back to Scalar

  3112. matrix_client_element_integrations_ui_url: "{{ matrix_dimension_integrations_ui_url if matrix_dimension_enabled else 'https://scalar.vector.im/' }}"

  3113. matrix_client_element_integrations_rest_url: "{{ matrix_dimension_integrations_rest_url if matrix_dimension_enabled else 'https://scalar.vector.im/api' }}"

  3114. matrix_client_element_integrations_widgets_urls: "{{ matrix_dimension_integrations_widgets_urls if matrix_dimension_enabled else ['https://scalar.vector.im/api'] }}"

  3115. matrix_client_element_integrations_jitsi_widget_url: "{{ matrix_dimension_integrations_jitsi_widget_url if matrix_dimension_enabled else 'https://scalar.vector.im/api/widgets/jitsi.html' }}"

  3116. 

  3117. matrix_client_element_self_check_validate_certificates: "{{ false if matrix_playbook_ssl_retrieval_method == 'self-signed' else true }}"

  3118. 

  3119. matrix_client_element_registration_enabled: "{{ matrix_synapse_enable_registration }}"

  3120. 

  3121. matrix_client_element_enable_presence_by_hs_url: |

  3122.   {{

  3123.     none

  3124.     if matrix_synapse_presence_enabled

  3125.     else {matrix_client_element_default_hs_url: false}

  3126.   }}

  3127. 

  3128. matrix_client_element_welcome_user_id: ~

  3129. 

  3130. matrix_client_element_jitsi_preferredDomain: "{{ matrix_server_fqn_jitsi if matrix_jitsi_enabled else '' }}"

  3131. 

  3132. ######################################################################

  3133. #

  3134. # /matrix-client-element

  3135. #

  3136. ######################################################################

  3137. 

  3138. ######################################################################

  3139. #

  3140. # matrix-client-hydrogen

  3141. #

  3142. ######################################################################

  3143. 

  3144. matrix_client_hydrogen_enabled: false

  3145. 

  3146. matrix_client_hydrogen_container_image_self_build: "{{ matrix_architecture not in ['amd64'] }}"

  3147. 

  3148. # Normally, matrix-nginx-proxy is enabled and nginx can reach Hydrogen over the container network.

  3149. # If matrix-nginx-proxy is not enabled, or you otherwise have a need for it, you can expose

  3150. # the HTTP port to the local host.

  3151. matrix_client_hydrogen_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '8768') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  3152. 

  3153. matrix_client_hydrogen_container_network: "{{ matrix_nginx_proxy_container_network if matrix_playbook_reverse_proxy_type == 'playbook-managed-nginx' else 'matrix-client-hydrogen' }}"

  3154. 

  3155. matrix_client_hydrogen_container_additional_networks: "{{ [matrix_playbook_reverse_proxyable_services_additional_network] if matrix_playbook_reverse_proxyable_services_additional_network else [] }}"

  3156. 

  3157. matrix_client_hydrogen_container_labels_traefik_enabled: "{{ matrix_playbook_reverse_proxy_type in ['playbook-managed-traefik', 'other-traefik-container'] }}"

  3158. matrix_client_hydrogen_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  3159. matrix_client_hydrogen_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  3160. matrix_client_hydrogen_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  3161. 

  3162. matrix_client_hydrogen_default_hs_url: "{{ matrix_homeserver_url }}"

  3163. 

  3164. matrix_client_hydrogen_self_check_validate_certificates: "{{ false if matrix_playbook_ssl_retrieval_method == 'self-signed' else true }}"

  3165. 

  3166. ######################################################################

  3167. #

  3168. # /matrix-client-hydrogen

  3169. #

  3170. ######################################################################

  3171. 

  3172. ######################################################################

  3173. #

  3174. # matrix-client-cinny

  3175. #

  3176. ######################################################################

  3177. 

  3178. matrix_client_cinny_enabled: false

  3179. 

  3180. matrix_client_cinny_container_image_self_build: "{{ matrix_architecture not in ['arm64', 'amd64'] }}"

  3181. 

  3182. # Normally, matrix-nginx-proxy is enabled and nginx can reach Cinny over the container network.

  3183. # If matrix-nginx-proxy is not enabled, or you otherwise have a need for it, you can expose

  3184. # the HTTP port to the local host.

  3185. matrix_client_cinny_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '8080') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  3186. 

  3187. matrix_client_cinny_container_network: "{{ matrix_nginx_proxy_container_network if matrix_playbook_reverse_proxy_type == 'playbook-managed-nginx' else 'matrix-client-cinny' }}"

  3188. 

  3189. matrix_client_cinny_container_additional_networks: "{{ [matrix_playbook_reverse_proxyable_services_additional_network] if matrix_playbook_reverse_proxyable_services_additional_network else [] }}"

  3190. 

  3191. matrix_client_cinny_container_labels_traefik_enabled: "{{ matrix_playbook_reverse_proxy_type in ['playbook-managed-traefik', 'other-traefik-container'] }}"

  3192. matrix_client_cinny_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  3193. matrix_client_cinny_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  3194. matrix_client_cinny_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  3195. 

  3196. matrix_client_cinny_default_hs_url: "{{ matrix_homeserver_url }}"

  3197. 

  3198. matrix_client_cinny_self_check_validate_certificates: "{{ false if matrix_playbook_ssl_retrieval_method == 'self-signed' else true }}"

  3199. 

  3200. ######################################################################

  3201. #

  3202. # /matrix-client-cinny

  3203. #

  3204. ######################################################################

  3205. 

  3206. ######################################################################

  3207. #

  3208. # matrix-synapse

  3209. #

  3210. ######################################################################

  3211. 

  3212. matrix_synapse_enabled: "{{ matrix_homeserver_implementation == 'synapse' }}"

  3213. 

  3214. matrix_synapse_username: "{{ matrix_user_username }}"

  3215. matrix_synapse_uid: "{{ matrix_user_uid }}"

  3216. matrix_synapse_gid: "{{ matrix_user_gid }}"

  3217. 

  3218. matrix_synapse_container_image_self_build: "{{ matrix_architecture not in ['arm64', 'amd64'] }}"

  3219. 

  3220. # When ma1sd is enabled, we can use it to validate phone numbers. It's something that the homeserver cannot do by itself.

  3221. matrix_synapse_account_threepid_delegates_msisdn: "{{ 'http://matrix-ma1sd:' + matrix_ma1sd_container_port | string if matrix_ma1sd_enabled else '' }}"

  3222. 

  3223. # For exposing the Matrix Federation API's TLS port (HTTPS) to the internet on all network interfaces.

  3224. matrix_synapse_container_federation_api_tls_host_bind_port: "{{ matrix_federation_public_port if (matrix_synapse_federation_enabled and matrix_synapse_tls_federation_listener_enabled) else '' }}"

  3225. #

  3226. # For exposing the Synapse Metrics API's port (plain HTTP) to the local host.

  3227. matrix_synapse_container_metrics_api_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '9100') if matrix_synapse_metrics_enabled and matrix_playbook_service_host_bind_interface_prefix else '' }}"

  3228. #

  3229. # For exposing the Synapse Manhole port (plain HTTP) to the local host.

  3230. matrix_synapse_container_manhole_api_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '9000') if matrix_synapse_metrics_enabled and matrix_playbook_service_host_bind_interface_prefix else '' }}"

  3231. 

  3232. matrix_synapse_container_additional_networks: |

  3233.   {{

  3234.     ([redis_container_network] if matrix_synapse_redis_enabled and matrix_synapse_redis_host == redis_identifier else [])

  3235.   }}

  3236. 

  3237. # For exposing the Synapse worker (and metrics) ports to the local host.

  3238. matrix_synapse_workers_container_host_bind_address: "{{ matrix_playbook_service_host_bind_interface_prefix[0:-1] if (matrix_synapse_workers_enabled and matrix_playbook_service_host_bind_interface_prefix) else '' }}"

  3239. 

  3240. matrix_synapse_database_host: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  3241. matrix_synapse_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'synapse.db', rounds=655555) | to_uuid }}"

  3242. 

  3243. matrix_synapse_macaroon_secret_key: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'synapse.mac', rounds=655555) | to_uuid }}"

  3244. 

  3245. # We do not enable TLS in Synapse by default.

  3246. # TLS is handled by the matrix-nginx-proxy, which proxies the requests to Synapse.

  3247. matrix_synapse_tls_federation_listener_enabled: false

  3248. matrix_synapse_tls_certificate_path: ~

  3249. matrix_synapse_tls_private_key_path: ~

  3250. 

  3251. matrix_synapse_federation_port_openid_resource_required: "{{ not matrix_synapse_federation_enabled and (matrix_dimension_enabled or matrix_ma1sd_enabled or matrix_user_verification_service_enabled) }}"

  3252. 

  3253. # If someone instals Prometheus via the playbook, they most likely wish to monitor Synapse.

  3254. matrix_synapse_metrics_enabled: "{{ matrix_prometheus_enabled }}"

  3255. 

  3256. matrix_synapse_email_enabled: "{{ matrix_mailer_enabled }}"

  3257. matrix_synapse_email_smtp_host: "matrix-mailer"

  3258. matrix_synapse_email_smtp_port: 8025

  3259. matrix_synapse_email_smtp_require_transport_security: false

  3260. matrix_synapse_email_notif_from: "Matrix <{{ matrix_mailer_sender_address }}>"

  3261. 

  3262. # Even if TURN doesn't support TLS (it does by default),

  3263. # it doesn't hurt to try a secure connection anyway.

  3264. #

  3265. # When Let's Encrypt certificates are used (the default case),

  3266. # we don't enable `turns` endpoints, because WebRTC in Element can't talk to them.

  3267. # Learn more here: https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1145

  3268. matrix_synapse_turn_uris: |

  3269.   {{

  3270.     []

  3271.     +

  3272.     [

  3273.       'turns:' + matrix_server_fqn_matrix + '?transport=udp',

  3274.       'turns:' + matrix_server_fqn_matrix + '?transport=tcp',

  3275.     ] if matrix_coturn_enabled and matrix_coturn_tls_enabled and matrix_playbook_ssl_retrieval_method != 'lets-encrypt' else []

  3276.     +

  3277.     [

  3278.       'turn:' + matrix_server_fqn_matrix + '?transport=udp',

  3279.       'turn:' + matrix_server_fqn_matrix + '?transport=tcp',

  3280.     ] if matrix_coturn_enabled else []

  3281.   }}

  3282. 

  3283. matrix_synapse_turn_shared_secret: "{{ matrix_coturn_turn_static_auth_secret if matrix_coturn_enabled else '' }}"

  3284. 

  3285. matrix_synapse_self_check_validate_certificates: "{{ false if matrix_playbook_ssl_retrieval_method == 'self-signed' else true }}"

  3286. 

  3287. matrix_synapse_systemd_required_services_list: |

  3288.   {{

  3289.     (['docker.service'])

  3290.     +

  3291.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  3292.     +

  3293.     ([redis_identifier ~ '.service'] if matrix_synapse_redis_enabled and matrix_synapse_redis_host == redis_identifier else [])

  3294.     +

  3295.     (['matrix-goofys.service'] if matrix_s3_media_store_enabled else [])

  3296.   }}

  3297. 

  3298. matrix_synapse_systemd_wanted_services_list: |

  3299.   {{

  3300.     (['matrix-coturn.service'] if matrix_coturn_enabled else [])

  3301.     +

  3302.     (['matrix-mailer.service'] if matrix_mailer_enabled else [])

  3303.   }}

  3304. 

  3305. # Synapse workers (used for parallel load-scaling) need Redis for IPC.

  3306. matrix_synapse_redis_enabled: "{{ redis_enabled }}"

  3307. matrix_synapse_redis_host: "{{ redis_identifier if redis_enabled else '' }}"

  3308. matrix_synapse_redis_password: "{{ redis_connection_password if redis_enabled else '' }}"

  3309. 

  3310. matrix_synapse_container_extra_arguments_auto: "{{ matrix_homeserver_container_extra_arguments_auto }}"

  3311. matrix_synapse_app_service_config_files_auto: "{{ matrix_homeserver_app_service_config_files_auto }}"

  3312. 

  3313. ######################################################################

  3314. #

  3315. # /matrix-synapse

  3316. #

  3317. ######################################################################

  3318. 

  3319. ######################################################################

  3320. #

  3321. # matrix-synapse-reverse-proxy-companion

  3322. #

  3323. ######################################################################

  3324. 

  3325. matrix_synapse_reverse_proxy_companion_enabled: "{{ matrix_synapse_enabled }}"

  3326. 

  3327. matrix_synapse_reverse_proxy_companion_client_api_client_max_body_size_mb: "{{ matrix_synapse_max_upload_size_mb }}"

  3328. 

  3329. matrix_synapse_reverse_proxy_companion_container_client_api_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '8008') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  3330. matrix_synapse_reverse_proxy_companion_container_federation_api_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '8048') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  3331. 

  3332. matrix_synapse_reverse_proxy_companion_synapse_workers_enabled: "{{ matrix_synapse_workers_enabled }}"

  3333. matrix_synapse_reverse_proxy_companion_synapse_workers_list: "{{ matrix_synapse_workers_enabled_list }}"

  3334. matrix_synapse_reverse_proxy_companion_synapse_generic_worker_client_server_locations: "{{ matrix_synapse_workers_generic_worker_client_server_endpoints }}"

  3335. matrix_synapse_reverse_proxy_companion_synapse_generic_worker_federation_locations: "{{ matrix_synapse_workers_generic_worker_federation_endpoints }}"

  3336. matrix_synapse_reverse_proxy_companion_synapse_stream_writer_typing_stream_worker_client_server_locations: "{{ matrix_synapse_workers_stream_writer_typing_stream_worker_client_server_endpoints }}"

  3337. matrix_synapse_reverse_proxy_companion_synapse_stream_writer_to_device_stream_worker_client_server_locations: "{{ matrix_synapse_workers_stream_writer_to_device_stream_worker_client_server_endpoints }}"

  3338. matrix_synapse_reverse_proxy_companion_synapse_stream_writer_account_data_stream_worker_client_server_locations: "{{ matrix_synapse_workers_stream_writer_account_data_stream_worker_client_server_endpoints }}"

  3339. matrix_synapse_reverse_proxy_companion_synapse_stream_writer_receipts_stream_worker_client_server_locations: "{{ matrix_synapse_workers_stream_writer_receipts_stream_worker_client_server_endpoints }}"

  3340. matrix_synapse_reverse_proxy_companion_synapse_stream_writer_presence_stream_worker_client_server_locations: "{{ matrix_synapse_workers_stream_writer_presence_stream_worker_client_server_endpoints }}"

  3341. matrix_synapse_reverse_proxy_companion_synapse_media_repository_locations: "{{matrix_synapse_workers_media_repository_endpoints|default([]) }}"

  3342. matrix_synapse_reverse_proxy_companion_synapse_user_dir_locations: "{{ matrix_synapse_workers_user_dir_worker_client_server_endpoints|default([]) }}"

  3343. 

  3344. matrix_synapse_reverse_proxy_companion_access_log_syslog_integration_enabled: "{{ matrix_prometheus_nginxlog_exporter_enabled }}"

  3345. matrix_synapse_reverse_proxy_companion_access_log_syslog_integration_server_port: "{{ (matrix_prometheus_nginxlog_exporter_container_hostname | string +':'+ matrix_prometheus_nginxlog_exporter_container_syslog_port | string) | default('') }}"

  3346. 

  3347. ######################################################################

  3348. #

  3349. # /matrix-synapse-reverse-proxy-companion

  3350. #

  3351. ######################################################################

  3352. 

  3353. ######################################################################

  3354. #

  3355. # matrix-synapse-admin

  3356. #

  3357. ######################################################################

  3358. 

  3359. matrix_synapse_admin_enabled: false

  3360. 

  3361. matrix_synapse_admin_nginx_proxy_integration_enabled: "{{ matrix_playbook_reverse_proxy_type in ['playbook-managed-nginx', 'other-nginx-non-container'] }}"

  3362. 

  3363. matrix_synapse_admin_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '8766') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  3364. 

  3365. matrix_synapse_admin_container_image_self_build: "{{ matrix_architecture not in ['arm64', 'amd64'] }}"

  3366. 

  3367. matrix_synapse_admin_container_network: "{{ matrix_nginx_proxy_container_network if matrix_playbook_reverse_proxy_type == 'playbook-managed-nginx' else 'matrix-synapse-admin' }}"

  3368. 

  3369. matrix_synapse_admin_container_additional_networks: "{{ [matrix_playbook_reverse_proxyable_services_additional_network] if matrix_playbook_reverse_proxyable_services_additional_network else [] }}"

  3370. 

  3371. matrix_synapse_admin_container_labels_traefik_enabled: "{{ matrix_playbook_reverse_proxy_type in ['playbook-managed-traefik', 'other-traefik-container'] }}"

  3372. matrix_synapse_admin_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  3373. matrix_synapse_admin_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  3374. matrix_synapse_admin_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  3375. 

  3376. ######################################################################

  3377. #

  3378. # /matrix-synapse-admin

  3379. #

  3380. ######################################################################

  3381. 

  3382. ######################################################################

  3383. #

  3384. # etke/prometheus_node_exporter

  3385. #

  3386. ######################################################################

  3387. 

  3388. prometheus_node_exporter_enabled: false

  3389. 

  3390. prometheus_node_exporter_identifier: matrix-prometheus-node-exporter

  3391. 

  3392. prometheus_node_exporter_base_path: "{{ matrix_base_data_path }}/prometheus-node-exporter"

  3393. 

  3394. prometheus_node_exporter_uid: "{{ matrix_user_uid }}"

  3395. prometheus_node_exporter_gid: "{{ matrix_user_gid }}"

  3396. 

  3397. prometheus_node_exporter_server_fqn: "{{ matrix_server_fqn_matrix }}"

  3398. 

  3399. prometheus_node_exporter_container_network: "{{ matrix_docker_network }}"

  3400. 

  3401. prometheus_node_exporter_container_additional_networks: "{{ [matrix_playbook_reverse_proxyable_services_additional_network] if matrix_playbook_reverse_proxyable_services_additional_network else [] }}"

  3402. 

  3403. prometheus_node_exporter_container_labels_traefik_enabled: false

  3404. prometheus_node_exporter_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  3405. prometheus_node_exporter_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  3406. prometheus_node_exporter_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  3407. 

  3408. ######################################################################

  3409. #

  3410. # /etke/prometheus_node_exporter

  3411. #

  3412. ######################################################################

  3413. 

  3414. ######################################################################

  3415. #

  3416. # etke/prometheus_postgres_exporter

  3417. #

  3418. ######################################################################

  3419. 

  3420. prometheus_postgres_exporter_enabled: false

  3421. 

  3422. prometheus_postgres_exporter_identifier: matrix-prometheus-postgres-exporter

  3423. 

  3424. prometheus_postgres_exporter_base_path: "{{ matrix_base_data_path }}/prometheus-postgres-exporter"

  3425. 

  3426. prometheus_postgres_exporter_uid: "{{ matrix_user_uid }}"

  3427. prometheus_postgres_exporter_gid: "{{ matrix_user_gid }}"

  3428. 

  3429. prometheus_postgres_exporter_server_fqn: "{{ matrix_server_fqn_matrix }}"

  3430. 

  3431. prometheus_postgres_exporter_container_network: "{{ matrix_docker_network }}"

  3432. 

  3433. prometheus_postgres_exporter_container_additional_networks: "{{ [matrix_playbook_reverse_proxyable_services_additional_network] if matrix_playbook_reverse_proxyable_services_additional_network else [] }}"

  3434. 

  3435. prometheus_postgres_exporter_container_labels_traefik_enabled: false

  3436. prometheus_postgres_exporter_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  3437. prometheus_postgres_exporter_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  3438. prometheus_postgres_exporter_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  3439. 

  3440. prometheus_postgres_exporter_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  3441. prometheus_postgres_exporter_database_username: matrix_prometheus_postgres_exporter

  3442. prometheus_postgres_exporter_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'prometheus.pg.db', rounds=655555) | to_uuid }}"

  3443. prometheus_postgres_exporter_database_name: matrix_prometheus_postgres_exporter

  3444. 

  3445. prometheus_postgres_exporter_systemd_required_services_list: |

  3446.   {{

  3447.     ['docker.service']

  3448.     +

  3449.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  3450.   }}

  3451. 

  3452. ######################################################################

  3453. #

  3454. # /etke/prometheus_postgres_exporter

  3455. #

  3456. ######################################################################

  3457. 

  3458. ######################################################################

  3459. #

  3460. # matrix-prometheus-nginxlog-exporter

  3461. #

  3462. ######################################################################

  3463. 

  3464. matrix_prometheus_nginxlog_exporter_enabled: false

  3465. 

  3466. ######################################################################

  3467. #

  3468. # /matrix-prometheus-nginxlog-exporter

  3469. #

  3470. ######################################################################

  3471. 

  3472. ######################################################################

  3473. #

  3474. # matrix-prometheus

  3475. #

  3476. ######################################################################

  3477. 

  3478. matrix_prometheus_enabled: false

  3479. 

  3480. matrix_prometheus_container_network: "{{ matrix_docker_network }}"

  3481. 

  3482. # Normally, matrix-nginx-proxy is enabled and nginx can reach Prometheus over the container network.

  3483. # If matrix-nginx-proxy is not enabled, or you otherwise have a need for it, you can expose

  3484. # Prometheus' HTTP port to the local host.

  3485. matrix_prometheus_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '9090') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  3486. 

  3487. matrix_prometheus_scraper_synapse_enabled: "{{ matrix_synapse_enabled and matrix_synapse_metrics_enabled }}"

  3488. matrix_prometheus_scraper_synapse_targets: ['matrix-synapse:{{ matrix_synapse_metrics_port }}']

  3489. matrix_prometheus_scraper_synapse_workers_enabled_list: "{{ matrix_synapse_workers_enabled_list }}"

  3490. matrix_prometheus_scraper_synapse_rules_synapse_tag: "{{ matrix_synapse_docker_image_tag }}"

  3491. 

  3492. matrix_prometheus_scraper_node_enabled: "{{ prometheus_node_exporter_enabled }}"

  3493. matrix_prometheus_scraper_node_targets: "{{ [prometheus_node_exporter_identifier + ':9100'] if prometheus_node_exporter_enabled else [] }}"

  3494. 

  3495. matrix_prometheus_scraper_postgres_enabled: "{{ prometheus_postgres_exporter_enabled }}"

  3496. matrix_prometheus_scraper_postgres_targets: "{{ [prometheus_postgres_exporter_identifier + ':' + prometheus_postgres_exporter_port | string] if matrix_prometheus_scraper_postgres_enabled else [] }}"

  3497. 

  3498. matrix_prometheus_scraper_hookshot_enabled: "{{ matrix_hookshot_metrics_enabled|default(false) }}"

  3499. matrix_prometheus_scraper_hookshot_targets: "{{ [matrix_hookshot_container_url | string +':'+ matrix_hookshot_metrics_port | string] if matrix_hookshot_metrics_enabled else [] }}"

  3500. 

  3501. matrix_prometheus_scraper_nginxlog_enabled: "{{ matrix_prometheus_nginxlog_exporter_enabled }}"

  3502. matrix_prometheus_scraper_nginxlog_server_port: "{{ (matrix_prometheus_nginxlog_exporter_container_hostname | string +':'+ matrix_prometheus_nginxlog_exporter_container_metrics_port | string)

  3503. | default('') }}"

  3504. 

  3505. ######################################################################

  3506. #

  3507. # /matrix-prometheus

  3508. #

  3509. ######################################################################

  3510. 

  3511. ######################################################################

  3512. #

  3513. # etke/grafana

  3514. #

  3515. ######################################################################

  3516. 

  3517. grafana_enabled: false

  3518. 

  3519. grafana_identifier: matrix-grafana

  3520. 

  3521. grafana_uid: "{{ matrix_user_uid }}"

  3522. grafana_gid: "{{ matrix_user_gid }}"

  3523. 

  3524. grafana_hostname: "{{ matrix_server_fqn_grafana }}"

  3525. 

  3526. grafana_base_path: "{{ matrix_base_data_path }}/grafana"

  3527. 

  3528. grafana_container_network: "{{ matrix_nginx_proxy_container_network if matrix_playbook_reverse_proxy_type == 'playbook-managed-nginx' else grafana_identifier }}"

  3529. 

  3530. grafana_container_additional_networks: |

  3531.   {{

  3532.     (

  3533.       ([matrix_playbook_reverse_proxyable_services_additional_network] if matrix_playbook_reverse_proxyable_services_additional_network else [])

  3534.       +

  3535.       ([matrix_prometheus_container_network] if matrix_prometheus_enabled and matrix_prometheus_container_network != grafana_container_network else [])

  3536.     ) | unique

  3537.   }}

  3538. 

  3539. grafana_container_labels_traefik_enabled: "{{ matrix_playbook_traefik_labels_enabled }}"

  3540. grafana_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  3541. grafana_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  3542. grafana_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  3543. 

  3544. # Normally, matrix-nginx-proxy is enabled and nginx can reach Grafana over the container network.

  3545. # If matrix-nginx-proxy is not enabled, or you otherwise have a need for it, you can expose

  3546. # Grafana's HTTP port to the local host.

  3547. grafana_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '3000') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  3548. 

  3549. grafana_provisioning_datasources: |

  3550.   {{

  3551.     ([{

  3552.       'name': (matrix_server_fqn_matrix + ' - Prometheus'),

  3553.       'type': 'prometheus',

  3554.       'access': 'proxy',

  3555.       'url': 'http://matrix-prometheus:9090',

  3556.     }] if matrix_prometheus_enabled else [])

  3557.   }}

  3558. 

  3559. grafana_dashboard_download_urls: |

  3560.   {{

  3561.     (matrix_synapse_grafana_dashboard_urls if matrix_homeserver_implementation == 'synapse' and matrix_synapse_metrics_enabled else [])

  3562.     +

  3563.     (prometheus_node_exporter_dashboard_urls if prometheus_node_exporter_enabled else [])

  3564.     +

  3565.     (prometheus_postgres_exporter_dashboard_urls if prometheus_postgres_exporter_enabled else [])

  3566.     +

  3567.     (matrix_prometheus_nginxlog_exporter_dashboard_urls if matrix_prometheus_nginxlog_exporter_enabled else [])

  3568.   }}

  3569. 

  3570. grafana_provisioning_dashboard_template_files: |

  3571.   {{

  3572.     ([{

  3573.         'path': 'roles/custom/matrix-prometheus-nginxlog-exporter/templates/grafana/nginx-proxy.json',

  3574.         'name': 'nginx-proxy.json',

  3575.     }] if matrix_prometheus_nginxlog_exporter_enabled else [])

  3576.   }}

  3577. 

  3578. grafana_default_home_dashboard_path: |-

  3579.   {{

  3580.     {

  3581.       'synapse': ('/etc/grafana/dashboards/synapse.json' if matrix_synapse_metrics_enabled and matrix_synapse_metrics_enabled else ('/etc/grafana/dashboards/node-exporter-full.json' if prometheus_node_exporter_enabled else '')),

  3582.       'dendrite': ('/etc/grafana/dashboards/node-exporter-full.json' if prometheus_node_exporter_enabled else ''),

  3583.       'conduit': ('/etc/grafana/dashboards/node-exporter-full.json' if prometheus_node_exporter_enabled else ''),

  3584.     }[matrix_homeserver_implementation]

  3585.   }}

  3586. 

  3587. ######################################################################

  3588. #

  3589. # /etke/grafana

  3590. #

  3591. ######################################################################

  3592. 

  3593. ######################################################################

  3594. #

  3595. # matrix-registration

  3596. #

  3597. ######################################################################

  3598. 

  3599. matrix_registration_enabled: false

  3600. 

  3601. # Normally, matrix-nginx-proxy is enabled and nginx can reach matrix-registration over the container network.

  3602. # If matrix-nginx-proxy is not enabled, or you otherwise have a need for it, you can expose

  3603. # matrix-registration's HTTP port to the local host.

  3604. matrix_registration_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '8767') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  3605. 

  3606. matrix_registration_riot_instance: "{{ ('https://' + matrix_server_fqn_element) if matrix_client_element_enabled else 'https://riot.im/app/' }}"

  3607. 

  3608. matrix_registration_shared_secret: |-

  3609.   {{

  3610.     {

  3611.       'synapse': matrix_synapse_registration_shared_secret,

  3612.       'dendrite': matrix_dendrite_client_api_registration_shared_secret,

  3613.       'conduit': '',

  3614.     }[matrix_homeserver_implementation]

  3615.   }}

  3616. 

  3617. matrix_registration_server_location: "{{ matrix_homeserver_container_url }}"

  3618. 

  3619. matrix_registration_api_validate_certs: "{{ false if matrix_playbook_ssl_retrieval_method == 'self-signed' else true }}"

  3620. 

  3621. matrix_registration_container_image_self_build: "{{ matrix_architecture != 'amd64' }}"

  3622. 

  3623. matrix_registration_systemd_required_services_list: |

  3624.   {{

  3625.     ['docker.service']

  3626.     +

  3627.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  3628.   }}

  3629. 

  3630. # Postgres is the default, except if not using internal Postgres server

  3631. matrix_registration_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  3632. matrix_registration_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  3633. matrix_registration_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mx.registr.db', rounds=655555) | to_uuid }}"

  3634. 

  3635. ######################################################################

  3636. #

  3637. # /matrix-registration

  3638. #

  3639. ######################################################################

  3640. 

  3641. 

  3642. ######################################################################

  3643. #

  3644. # matrix-dendrite

  3645. #

  3646. ######################################################################

  3647. 

  3648. matrix_dendrite_enabled: "{{ matrix_homeserver_implementation == 'dendrite' }}"

  3649. 

  3650. # Normally, matrix-nginx-proxy is enabled and nginx can reach Dendrite over the container network.

  3651. # If matrix-nginx-proxy is not enabled, or you otherwise have a need for it,

  3652. # you can expose Dendrite's ports to the host.

  3653. #

  3654. # For exposing Dendrite's plain HTTP server to the local host.

  3655. matrix_dendrite_container_http_host_bind_address: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ matrix_dendrite_http_bind_port | string) if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  3656. #

  3657. # For exposing Dendrite's HTTPS server to the local host.

  3658. matrix_dendrite_container_https_host_bind_address: "{{ '' if not matrix_dendrite_https_bind_port or not matrix_playbook_service_host_bind_interface_prefix else (matrix_playbook_service_host_bind_interface_prefix + matrix_dendrite_https_bind_port | string) }}"

  3659. 

  3660. matrix_dendrite_client_api_registration_shared_secret: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'dendrite.rss', rounds=655555) | to_uuid }}"

  3661. 

  3662. matrix_dendrite_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  3663. 

  3664. matrix_dendrite_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'dendrite.db', rounds=655555) | to_uuid }}"

  3665. 

  3666. # Even if TURN doesn't support TLS (it does by default),

  3667. # it doesn't hurt to try a secure connection anyway.

  3668. matrix_dendrite_client_api_turn_uris: |

  3669.   {{

  3670.     [

  3671.       'turns:' + matrix_server_fqn_matrix + '?transport=udp',

  3672.       'turns:' + matrix_server_fqn_matrix + '?transport=tcp',

  3673.       'turn:' + matrix_server_fqn_matrix + '?transport=udp',

  3674.       'turn:' + matrix_server_fqn_matrix + '?transport=tcp',

  3675.     ]

  3676.     if matrix_coturn_enabled

  3677.     else []

  3678.   }}

  3679. 

  3680. matrix_dendrite_client_api_turn_shared_secret: "{{ matrix_coturn_turn_static_auth_secret if matrix_coturn_enabled else '' }}"

  3681. 

  3682. matrix_dendrite_disable_tls_validation: "{{ true if matrix_playbook_ssl_retrieval_method == 'self-signed' else false }}"

  3683. 

  3684. matrix_dendrite_self_check_validate_certificates: "{{ false if matrix_playbook_ssl_retrieval_method == 'self-signed' else true }}"

  3685. 

  3686. matrix_dendrite_trusted_id_servers: "{{ [matrix_server_fqn_matrix] if matrix_ma1sd_enabled else ['matrix.org', 'vector.im'] }}"

  3687. 

  3688. matrix_dendrite_systemd_required_services_list: |

  3689.   {{

  3690.     (['docker.service'])

  3691.     +

  3692.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  3693.     +

  3694.     (['matrix-goofys.service'] if matrix_s3_media_store_enabled else [])

  3695.   }}

  3696. 

  3697. matrix_dendrite_systemd_wanted_services_list: |

  3698.   {{

  3699.     (['matrix-coturn.service'] if matrix_coturn_enabled else [])

  3700.   }}

  3701. 

  3702. matrix_dendrite_container_extra_arguments_auto: "{{ matrix_homeserver_container_extra_arguments_auto }}"

  3703. matrix_dendrite_app_service_config_files_auto: "{{ matrix_homeserver_app_service_config_files_auto }}"

  3704. 

  3705. ######################################################################

  3706. #

  3707. # /matrix-dendrite

  3708. #

  3709. ######################################################################

  3710. 

  3711. ######################################################################

  3712. #

  3713. # matrix-conduit

  3714. #

  3715. ######################################################################

  3716. 

  3717. matrix_conduit_enabled: "{{ matrix_homeserver_implementation == 'conduit' }}"

  3718. 

  3719. matrix_conduit_systemd_required_services_list: |

  3720.   {{

  3721.     (['docker.service'])

  3722.   }}

  3723. 

  3724. 

  3725. ######################################################################

  3726. #

  3727. # /matrix-conduit

  3728. #

  3729. ######################################################################

  3730. 

  3731. 

  3732. ######################################################################

  3733. #

  3734. # matrix-user-creator

  3735. #

  3736. ######################################################################

  3737. 

  3738. matrix_user_creator_users_auto: |

  3739.   {{

  3740.     ([{

  3741.       'username': matrix_bot_matrix_reminder_bot_matrix_user_id_localpart,

  3742.       'initial_password': matrix_bot_matrix_reminder_bot_matrix_user_password,

  3743.       'initial_type': 'bot',

  3744.     }] if matrix_bot_matrix_reminder_bot_enabled else [])

  3745.     +

  3746.     ([{

  3747.       'username': matrix_bot_honoroit_login,

  3748.       'initial_password': matrix_bot_honoroit_password,

  3749.       'initial_type': 'bot',

  3750.     }] if matrix_bot_honoroit_enabled else [])

  3751.     +

  3752.     ([{

  3753.       'username': matrix_bot_postmoogle_login,

  3754.       'initial_password': matrix_bot_postmoogle_password,

  3755.       'initial_type': 'bot',

  3756.     }] if matrix_bot_postmoogle_enabled else [])

  3757.     +

  3758.     ([{

  3759.       'username': matrix_bot_buscarron_login,

  3760.       'initial_password': matrix_bot_buscarron_password,

  3761.       'initial_type': 'bot',

  3762.     }] if matrix_bot_buscarron_enabled else [])

  3763.   }}

  3764. 

  3765. ######################################################################

  3766. #

  3767. # /matrix-user-creator

  3768. #

  3769. ######################################################################

  3770. 

  3771. 

  3772. ######################################################################

  3773. #

  3774. # matrix-user-verification-service

  3775. #

  3776. ######################################################################

  3777. 

  3778. ## FIXME: Needs to be updated when there is a proper release by upstream.

  3779. matrix_user_verification_service_docker_image: "{{ matrix_user_verification_service_docker_image_name_prefix }}matrixdotorg/matrix-user-verification-service@sha256:d2aabc984dd69d258c91900c36928972d7aaef19d776caa3cd6a0fbc0e307270"

  3780. 

  3781. matrix_user_verification_service_enabled: false

  3782. matrix_user_verification_service_systemd_required_services_list: |

  3783.       {{

  3784.         ['docker.service']

  3785.         +

  3786.         (['matrix-synapse.service'] if matrix_synapse_enabled else [])

  3787.         +

  3788.         ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  3789.       }}

  3790. 

  3791. # If Jitsi is managed by this playbook we can use the docker network - no need to expose a port.

  3792. # If Jitsi is not managed by this playbook, or you otherwise have a need for it, you can expose

  3793. # matrix-user-verfification-services's client-server port to port 3003.

  3794. # By default Matrix-User-Verification-Service binds to port 3000, which collides with grafana, therefore this uses port 3003.

  3795. matrix_user_verification_service_container_http_host_bind_port: "{{  '' if (matrix_jitsi_enabled | bool and matrix_jitsi_enable_auth | bool and matrix_jitsi_auth_type == 'matrix') else matrix_playbook_service_host_bind_interface_prefix ~ '3003' }}"

  3796. 

  3797. # URL exposed in the docker network

  3798. matrix_user_verification_service_container_url: "http://{{  matrix_user_verification_service_container_name }}:3000"

  3799. 

  3800. # We connect via the container network (private IPs), so we need to disable IP checks

  3801. matrix_user_verification_service_uvs_disable_ip_blacklist: "{{'true' if matrix_synapse_enabled else 'false'}}"

  3802. 

  3803. matrix_user_verification_service_uvs_auth_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'uvs.auth.token', rounds=655555) | to_uuid }}"

  3804. 

  3805. ######################################################################

  3806. #

  3807. # /matrix-user-verification-service

  3808. #

  3809. ######################################################################

  3810. 

  3811. 

  3812. ########################################################################

  3813. #                                                                      #

  3814. # com.devture.ansible.role.container_socket_proxy                      #

  3815. #                                                                      #

  3816. ########################################################################

  3817. 

  3818. devture_container_socket_proxy_enabled: "{{ matrix_playbook_reverse_proxy_type == 'playbook-managed-traefik' }}"

  3819. 

  3820. devture_container_socket_proxy_identifier: matrix-container-socket-proxy

  3821. 

  3822. devture_container_socket_proxy_base_path: "{{ matrix_base_data_path }}/container-socket-proxy"

  3823. 

  3824. devture_container_socket_proxy_uid: "{{ matrix_user_uid }}"

  3825. devture_container_socket_proxy_gid: "{{ matrix_user_gid }}"

  3826. 

  3827. # Traefik requires read access to the containers APIs to do its job

  3828. devture_container_socket_proxy_api_containers_enabled: true

  3829. 

  3830. ########################################################################

  3831. #                                                                      #

  3832. # /com.devture.ansible.role.container_socket_proxy                     #

  3833. #                                                                      #

  3834. ########################################################################

  3835. 

  3836. 

  3837. ########################################################################

  3838. #                                                                      #

  3839. # com.devture.ansible.role.traefik                                     #

  3840. #                                                                      #

  3841. ########################################################################

  3842. 

  3843. devture_traefik_enabled: "{{ matrix_playbook_reverse_proxy_type == 'playbook-managed-traefik' }}"

  3844. 

  3845. devture_traefik_identifier: matrix-traefik

  3846. 

  3847. devture_traefik_base_path: "{{ matrix_base_data_path }}/traefik"

  3848. 

  3849. devture_traefik_uid: "{{ matrix_user_uid }}"

  3850. devture_traefik_gid: "{{ matrix_user_gid }}"

  3851. 

  3852. devture_traefik_additional_entrypoints_auto:

  3853.   - name: matrix-federation

  3854.     port: "{{ matrix_federation_public_port }}"

  3855.     host_bind_port: "{{ matrix_federation_public_port }}"

  3856.     config: {}

  3857. 

  3858. devture_traefik_additional_domains_to_obtain_certificates_for: "{{ matrix_ssl_additional_domains_to_obtain_certificates_for }}"

  3859. 

  3860. devture_traefik_config_providers_docker_endpoint: "{{ devture_container_socket_proxy_endpoint if devture_container_socket_proxy_enabled else 'unix:///var/run/docker.sock' }}"

  3861. 

  3862. devture_traefik_container_additional_networks: |

  3863.   {{

  3864.     ([devture_container_socket_proxy_container_network] if devture_container_socket_proxy_enabled else [])

  3865.   }}

  3866. 

  3867. devture_traefik_systemd_required_services_list: |

  3868.   {{

  3869.     (['docker.service'])

  3870.     +

  3871.     ([devture_container_socket_proxy_identifier + '.service'] if devture_container_socket_proxy_enabled else [])

  3872.   }}

  3873. 

  3874. ########################################################################

  3875. #                                                                      #

  3876. # /com.devture.ansible.role.traefik                                    #

  3877. #                                                                      #

  3878. ########################################################################

  3879. 

  3880. 

  3881. ########################################################################

  3882. #                                                                      #

  3883. # com.devture.ansible.role.traefik_certs_dumper                        #

  3884. #                                                                      #

  3885. ########################################################################

  3886. 

  3887. devture_traefik_certs_dumper_enabled: "{{ (matrix_playbook_reverse_proxy_type == 'playbook-managed-traefik' and devture_traefik_config_entrypoint_web_secure_enabled and devture_traefik_config_certificatesResolvers_acme_enabled) or matrix_playbook_reverse_proxy_type == 'other-traefik-container' }}"

  3888. 

  3889. devture_traefik_certs_dumper_identifier: matrix-traefik-certs-dumper

  3890. 

  3891. devture_traefik_certs_dumper_base_path: "{{ matrix_base_data_path }}/traefik-certs-dumper"

  3892. 

  3893. devture_traefik_certs_dumper_uid: "{{ matrix_user_uid }}"

  3894. devture_traefik_certs_dumper_gid: "{{ matrix_user_gid }}"

  3895. 

  3896. devture_traefik_certs_dumper_ssl_dir_path: "{{ devture_traefik_ssl_dir_path if devture_traefik_enabled else '' }}"

  3897. 

  3898. ########################################################################

  3899. #                                                                      #

  3900. # /com.devture.ansible.role.traefik_certs_dumper                       #

  3901. #                                                                      #

  3902. ########################################################################