overmind
/
matrix-docker-ansible-deploy
mirror of https://github.com/spantaleev/matrix-docker-ansible-deploy
1
0
Fork 0
Code Issues 0 Releases 0 Wiki Activity
Matrix Docker Ansible eploy
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
3825 Commits
14 Branches
502 MiB
 
 
Tree: 7330992b20
Branches Tags
${ item.name }
Create branch ${ searchTerm }
from '7330992b20'
${ noResults }
matrix-docker-ansible-deploy/roles/matrix-nginx-proxy/tasks/setup_nginx_proxy.yml

315 lines
12 KiB
Raw Blame History 

  1. ---

  2. 

  3. #

  4. # Generic tasks that we always want to happen, regardless

  5. # if the user wants matrix-nginx-proxy or not.

  6. #

  7. # If the user would set up their own nginx proxy server,

  8. # the config files from matrix-nginx-proxy can be reused.

  9. #

  10. # It doesn't hurt to put them in place, even if they turn out

  11. # to be unnecessary.

  12. #

  13. - name: Ensure Matrix nginx-proxy paths exist

  14.   file:

  15.     path: "{{ item }}"

  16.     state: directory

  17.     mode: 0750

  18.     owner: "{{ matrix_user_username }}"

  19.     group: "{{ matrix_user_groupname }}"

  20.   with_items:

  21.     - "{{ matrix_nginx_proxy_base_path }}"

  22.     - "{{ matrix_nginx_proxy_data_path }}"

  23.     - "{{ matrix_nginx_proxy_confd_path }}"

  24. 

  25. - name: Ensure Matrix nginx-proxy configured (main config override)

  26.   template:

  27.     src: "{{ role_path }}/templates/nginx/nginx.conf.j2"

  28.     dest: "{{ matrix_nginx_proxy_base_path }}/nginx.conf"

  29.     mode: 0644

  30.   when: matrix_nginx_proxy_enabled|bool

  31. 

  32. - name: Ensure matrix-synapse-metrics-htpasswd is present (protecting /_synapse/metrics URI)

  33.   template:

  34.     src: "{{ role_path }}/templates/nginx/matrix-synapse-metrics-htpasswd.j2"

  35.     dest: "{{ matrix_nginx_proxy_data_path }}/matrix-synapse-metrics-htpasswd"

  36.     owner: "{{ matrix_user_username }}"

  37.     group: "{{ matrix_user_groupname }}"

  38.     mode: 0400

  39.   when: "matrix_nginx_proxy_proxy_synapse_metrics_basic_auth_enabled|bool and matrix_nginx_proxy_proxy_synapse_metrics|bool"

  40. 

  41. - name: Generate sample prometheus.yml for external scraping

  42.   template:

  43.     src: "{{ role_path }}/templates/prometheus/external_prometheus.yml.example.j2"

  44.     dest: "{{ matrix_base_data_path }}/external_prometheus.yml.example"

  45.     owner: "{{ matrix_user_username }}"

  46.     group: "{{ matrix_user_groupname }}"

  47.     mode: 0644

  48.   when: matrix_nginx_proxy_proxy_synapse_metrics|bool

  49. 

  50. - name: Ensure Matrix nginx-proxy configured (generic)

  51.   template:

  52.     src: "{{ role_path }}/templates/nginx/conf.d/nginx-http.conf.j2"

  53.     dest: "{{ matrix_nginx_proxy_confd_path }}/nginx-http.conf"

  54.     mode: 0644

  55.   when: matrix_nginx_proxy_enabled|bool

  56. 

  57. - name: Ensure Matrix nginx-proxy configuration for matrix-synapse exists

  58.   template:

  59.     src: "{{ role_path }}/templates/nginx/conf.d/matrix-synapse.conf.j2"

  60.     dest: "{{ matrix_nginx_proxy_confd_path }}/matrix-synapse.conf"

  61.     mode: 0644

  62.   when: matrix_nginx_proxy_proxy_synapse_enabled|bool

  63. 

  64. - name: Ensure Matrix nginx-proxy configuration for matrix-synapse deleted

  65.   file:

  66.     path: "{{ matrix_nginx_proxy_confd_path }}/matrix-synapse.conf"

  67.     state: absent

  68.   when: "not matrix_nginx_proxy_proxy_synapse_enabled|bool"

  69. 

  70. - name: Ensure Matrix nginx-proxy configuration for matrix-dendrite exists

  71.   template:

  72.     src: "{{ role_path }}/templates/nginx/conf.d/matrix-dendrite.conf.j2"

  73.     dest: "{{ matrix_nginx_proxy_confd_path }}/matrix-dendrite.conf"

  74.     mode: 0644

  75.   when: matrix_nginx_proxy_proxy_dendrite_enabled|bool

  76. 

  77. - name: Ensure Matrix nginx-proxy configuration for matrix-dendrite deleted

  78.   file:

  79.     path: "{{ matrix_nginx_proxy_confd_path }}/matrix-dendrite.conf"

  80.     state: absent

  81.   when: "not matrix_nginx_proxy_proxy_dendrite_enabled|bool"

  82. 

  83. - name: Ensure Matrix nginx-proxy configuration for Element domain exists

  84.   template:

  85.     src: "{{ role_path }}/templates/nginx/conf.d/matrix-client-element.conf.j2"

  86.     dest: "{{ matrix_nginx_proxy_confd_path }}/matrix-client-element.conf"

  87.     mode: 0644

  88.   when: matrix_nginx_proxy_proxy_element_enabled|bool

  89. 

  90. - name: Ensure Matrix nginx-proxy configuration for riot domain exists

  91.   template:

  92.     src: "{{ role_path }}/templates/nginx/conf.d/matrix-riot-web.conf.j2"

  93.     dest: "{{ matrix_nginx_proxy_confd_path }}/matrix-riot-web.conf"

  94.     mode: 0644

  95.   when: matrix_nginx_proxy_proxy_riot_compat_redirect_enabled|bool

  96. 

  97. - name: Ensure Matrix nginx-proxy configuration for Hydrogen domain exists

  98.   template:

  99.     src: "{{ role_path }}/templates/nginx/conf.d/matrix-client-hydrogen.conf.j2"

  100.     dest: "{{ matrix_nginx_proxy_confd_path }}/matrix-client-hydrogen.conf"

  101.     mode: 0644

  102.   when: matrix_nginx_proxy_proxy_hydrogen_enabled|bool

  103. 

  104. - name: Ensure Matrix nginx-proxy configuration for Cinny domain exists

  105.   template:

  106.     src: "{{ role_path }}/templates/nginx/conf.d/matrix-client-cinny.conf.j2"

  107.     dest: "{{ matrix_nginx_proxy_confd_path }}/matrix-client-cinny.conf"

  108.     mode: 0644

  109.   when: matrix_nginx_proxy_proxy_cinny_enabled|bool

  110. 

  111. - name: Ensure Matrix nginx-proxy configuration for dimension domain exists

  112.   template:

  113.     src: "{{ role_path }}/templates/nginx/conf.d/matrix-dimension.conf.j2"

  114.     dest: "{{ matrix_nginx_proxy_confd_path }}/matrix-dimension.conf"

  115.     mode: 0644

  116.   when: matrix_nginx_proxy_proxy_dimension_enabled|bool

  117. 

  118. - name: Ensure Matrix nginx-proxy configuration for goneb domain exists

  119.   template:

  120.     src: "{{ role_path }}/templates/nginx/conf.d/matrix-bot-go-neb.conf.j2"

  121.     dest: "{{ matrix_nginx_proxy_confd_path }}/matrix-bot-go-neb.conf"

  122.     mode: 0644

  123.   when: matrix_nginx_proxy_proxy_bot_go_neb_enabled|bool

  124. 

  125. - name: Ensure Matrix nginx-proxy configuration for jitsi domain exists

  126.   template:

  127.     src: "{{ role_path }}/templates/nginx/conf.d/matrix-jitsi.conf.j2"

  128.     dest: "{{ matrix_nginx_proxy_confd_path }}/matrix-jitsi.conf"

  129.     mode: 0644

  130.   when: matrix_nginx_proxy_proxy_jitsi_enabled|bool

  131. 

  132. - name: Ensure Matrix nginx-proxy configuration for grafana domain exists

  133.   template:

  134.     src: "{{ role_path }}/templates/nginx/conf.d/matrix-grafana.conf.j2"

  135.     dest: "{{ matrix_nginx_proxy_confd_path }}/matrix-grafana.conf"

  136.     mode: 0644

  137.   when: matrix_nginx_proxy_proxy_grafana_enabled|bool

  138. 

  139. - name: Ensure Matrix nginx-proxy configuration for sygnal domain exists

  140.   template:

  141.     src: "{{ role_path }}/templates/nginx/conf.d/matrix-sygnal.conf.j2"

  142.     dest: "{{ matrix_nginx_proxy_confd_path }}/matrix-sygnal.conf"

  143.     mode: 0644

  144.   when: matrix_nginx_proxy_proxy_sygnal_enabled|bool

  145. 

  146. - name: Ensure Matrix nginx-proxy configuration for Matrix domain exists

  147.   template:

  148.     src: "{{ role_path }}/templates/nginx/conf.d/matrix-domain.conf.j2"

  149.     dest: "{{ matrix_nginx_proxy_confd_path }}/matrix-domain.conf"

  150.     mode: 0644

  151. 

  152. - name: Ensure Matrix nginx-proxy data directory for base domain exists

  153.   file:

  154.     path: "{{ matrix_nginx_proxy_data_path }}/matrix-domain"

  155.     state: directory

  156.     mode: 0750

  157.     owner: "{{ matrix_user_username }}"

  158.     group: "{{ matrix_user_groupname }}"

  159.   when: matrix_nginx_proxy_base_domain_serving_enabled|bool and matrix_nginx_proxy_base_domain_create_directory|bool

  160. 

  161. - name: Ensure Matrix nginx-proxy homepage for base domain exists

  162.   copy:

  163.     content: "{{ matrix_nginx_proxy_base_domain_homepage_template }}"

  164.     dest: "{{ matrix_nginx_proxy_data_path }}/matrix-domain/index.html"

  165.     mode: 0644

  166.     owner: "{{ matrix_user_username }}"

  167.     group: "{{ matrix_user_groupname }}"

  168.   when: matrix_nginx_proxy_base_domain_serving_enabled|bool and matrix_nginx_proxy_base_domain_homepage_enabled|bool and matrix_nginx_proxy_base_domain_create_directory|bool

  169. 

  170. - name: Ensure Matrix nginx-proxy configuration for base domain exists

  171.   template:

  172.     src: "{{ role_path }}/templates/nginx/conf.d/matrix-base-domain.conf.j2"

  173.     dest: "{{ matrix_nginx_proxy_confd_path }}/matrix-base-domain.conf"

  174.     mode: 0644

  175.   when: matrix_nginx_proxy_base_domain_serving_enabled|bool

  176. 

  177. #

  178. # Tasks related to setting up matrix-nginx-proxy

  179. #

  180. - name: Ensure nginx Docker image is pulled

  181.   docker_image:

  182.     name: "{{ matrix_nginx_proxy_docker_image }}"

  183.     source: "{{ 'pull' if ansible_version.major > 2 or ansible_version.minor > 7 else omit }}"

  184.     force_source: "{{ matrix_nginx_proxy_docker_image_force_pull if ansible_version.major > 2 or ansible_version.minor >= 8 else omit }}"

  185.     force: "{{ omit if ansible_version.major > 2 or ansible_version.minor >= 8 else matrix_nginx_proxy_docker_image_force_pull }}"

  186.   when: matrix_nginx_proxy_enabled|bool

  187. 

  188. - name: Ensure matrix-nginx-proxy.service installed

  189.   template:

  190.     src: "{{ role_path }}/templates/systemd/matrix-nginx-proxy.service.j2"

  191.     dest: "{{ matrix_systemd_path }}/matrix-nginx-proxy.service"

  192.     mode: 0644

  193.   register: matrix_nginx_proxy_systemd_service_result

  194.   when: matrix_nginx_proxy_enabled|bool

  195. 

  196. - name: Ensure systemd reloaded after matrix-nginx-proxy.service installation

  197.   service:

  198.     daemon_reload: true

  199.   when: "matrix_nginx_proxy_enabled and matrix_nginx_proxy_systemd_service_result.changed"

  200. 

  201. 

  202. #

  203. # Tasks related to getting rid of matrix-nginx-proxy (if it was previously enabled)

  204. #

  205. 

  206. - name: Check existence of matrix-nginx-proxy service

  207.   stat:

  208.     path: "{{ matrix_systemd_path }}/matrix-nginx-proxy.service"

  209.   register: matrix_nginx_proxy_service_stat

  210.   when: "not matrix_nginx_proxy_enabled|bool"

  211. 

  212. - name: Ensure matrix-nginx-proxy is stopped

  213.   service:

  214.     name: matrix-nginx-proxy

  215.     state: stopped

  216.     enabled: false

  217.     daemon_reload: true

  218.   register: stopping_result

  219.   when: "not matrix_nginx_proxy_enabled|bool and matrix_nginx_proxy_service_stat.stat.exists"

  220. 

  221. - name: Ensure matrix-nginx-proxy.service doesn't exist

  222.   file:

  223.     path: "{{ matrix_systemd_path }}/matrix-nginx-proxy.service"

  224.     state: absent

  225.   when: "not matrix_nginx_proxy_enabled|bool and matrix_nginx_proxy_service_stat.stat.exists"

  226. 

  227. - name: Ensure systemd reloaded after matrix-nginx-proxy.service removal

  228.   service:

  229.     daemon_reload: true

  230.   when: "not matrix_nginx_proxy_enabled|bool and matrix_nginx_proxy_service_stat.stat.exists"

  231. 

  232. - name: Ensure Matrix nginx-proxy configuration for matrix domain deleted

  233.   file:

  234.     path: "{{ matrix_nginx_proxy_confd_path }}/matrix-domain.conf"

  235.     state: absent

  236.   when: "not matrix_nginx_proxy_proxy_matrix_enabled|bool"

  237. 

  238. - name: Ensure Matrix nginx-proxy configuration for riot domain deleted

  239.   file:

  240.     path: "{{ matrix_nginx_proxy_confd_path }}/matrix-riot-web.conf"

  241.     state: absent

  242.   when: "not matrix_nginx_proxy_proxy_riot_compat_redirect_enabled|bool"

  243. 

  244. - name: Ensure Matrix nginx-proxy configuration for Hydrogen domain deleted

  245.   file:

  246.     path: "{{ matrix_nginx_proxy_confd_path }}/matrix-client-hydrogen.conf"

  247.     state: absent

  248.   when: "not matrix_nginx_proxy_proxy_hydrogen_enabled|bool"

  249. 

  250. - name: Ensure Matrix nginx-proxy configuration for Cinny domain deleted

  251.   file:

  252.     path: "{{ matrix_nginx_proxy_confd_path }}/matrix-client-cinny.conf"

  253.     state: absent

  254.   when: "not matrix_nginx_proxy_proxy_cinny_enabled|bool"

  255. 

  256. - name: Ensure Matrix nginx-proxy configuration for dimension domain deleted

  257.   file:

  258.     path: "{{ matrix_nginx_proxy_confd_path }}/matrix-dimension.conf"

  259.     state: absent

  260.   when: "not matrix_nginx_proxy_proxy_dimension_enabled|bool"

  261. 

  262. - name: Ensure Matrix nginx-proxy configuration for goneb domain deleted

  263.   file:

  264.     path: "{{ matrix_nginx_proxy_confd_path }}/matrix-bot-go-neb.conf"

  265.     state: absent

  266.   when: "not matrix_nginx_proxy_proxy_bot_go_neb_enabled|bool"

  267. 

  268. - name: Ensure Matrix nginx-proxy configuration for jitsi domain deleted

  269.   file:

  270.     path: "{{ matrix_nginx_proxy_confd_path }}/matrix-jitsi.conf"

  271.     state: absent

  272.   when: "not matrix_nginx_proxy_proxy_jitsi_enabled|bool"

  273. 

  274. - name: Ensure Matrix nginx-proxy configuration for grafana domain deleted

  275.   file:

  276.     path: "{{ matrix_nginx_proxy_confd_path }}/matrix-grafana.conf"

  277.     state: absent

  278.   when: "not matrix_nginx_proxy_proxy_grafana_enabled|bool"

  279. 

  280. - name: Ensure Matrix nginx-proxy configuration for sygnal domain deleted

  281.   file:

  282.     path: "{{ matrix_nginx_proxy_confd_path }}/matrix-sygnal.conf"

  283.     state: absent

  284.   when: "not matrix_nginx_proxy_proxy_sygnal_enabled|bool"

  285. 

  286. - name: Ensure Matrix nginx-proxy homepage for base domain deleted

  287.   file:

  288.     path: "{{ matrix_nginx_proxy_data_path }}/matrix-domain/index.html"

  289.     state: absent

  290.   when: "not matrix_nginx_proxy_base_domain_serving_enabled|bool"

  291. 

  292. - name: Ensure Matrix nginx-proxy configuration for base domain deleted

  293.   file:

  294.     path: "{{ matrix_nginx_proxy_confd_path }}/matrix-base-domain.conf"

  295.     state: absent

  296.   when: "not matrix_nginx_proxy_base_domain_serving_enabled|bool"

  297. 

  298. - name: Ensure Matrix nginx-proxy configuration for main config override deleted

  299.   file:

  300.     path: "{{ matrix_nginx_proxy_base_path }}/nginx.conf"

  301.     state: absent

  302.   when: "not matrix_nginx_proxy_enabled|bool"

  303. 

  304. - name: Ensure Matrix nginx-proxy htpasswd is deleted (protecting /_synapse/metrics URI)

  305.   file:

  306.     path: "{{ matrix_nginx_proxy_data_path }}/matrix-synapse-metrics-htpasswd"

  307.     state: absent

  308.   when: "not matrix_nginx_proxy_proxy_synapse_metrics_basic_auth_enabled|bool or not matrix_nginx_proxy_proxy_synapse_metrics|bool"

  309. 

  310. - name: Ensure sample prometheus.yml for external scraping is deleted

  311.   file:

  312.     path: "{{ matrix_base_data_path }}/external_prometheus.yml.example"

  313.     state: absent

  314.   when: "not matrix_nginx_proxy_proxy_synapse_metrics|bool"