overmind
/
matrix-docker-ansible-deploy
зеркало из https://github.com/spantaleev/matrix-docker-ansible-deploy
1
0
Форкнуть 0
Код Задачи 0 Релизы 0 Вики Активность
Matrix Docker Ansible eploy
Вы не можете выбрать более 25 тем Темы должны начинаться с буквы или цифры, могут содержать дефисы(-) и должны содержать не более 35 символов.
7783 коммитов
14 Ветки
491 MiB
 
 
Дерево: aad167561a
Ветки Теги
${ item.name }
Создать ветку ${ searchTerm }
из 'aad167561a'
${ noResults }
matrix-docker-ansible-deploy/group_vars/matrix_servers

5380 строки
293 KiB
Исходник Вина История 

  1. ---

  2. 

  3. # This variables file wires together the various components (roles) used by the playbook.

  4. #

  5. # Roles used by playbook are pretty minimal and kept independent of one another as much as possible.

  6. # To deliver a turnkey fully-featured Matrix server, this playbook needs

  7. # to connect them all together. It does so by overriding role variables.

  8. #

  9. # You can also override ANY variable (seen here or in any given role),

  10. # by re-defining it in your own configuration file (`inventory/host_vars/matrix.<your-domain>`).

  11. 

  12. ########################################################################

  13. #                                                                      #

  14. # Playbook                                                             #

  15. #                                                                      #

  16. ########################################################################

  17. 

  18. # Controls whether to install Docker or not

  19. # Also see `devture_docker_sdk_for_python_installation_enabled`.

  20. matrix_playbook_docker_installation_enabled: true

  21. 

  22. matrix_playbook_docker_installation_daemon_options: "{{ matrix_playbook_docker_installation_daemon_options_auto | combine(matrix_playbook_docker_installation_daemon_options_custom, recursive=True) }}"

  23. 

  24. matrix_playbook_docker_installation_daemon_options_auto:

  25.   experimental: "{{ devture_systemd_docker_base_ipv6_enabled }}"

  26.   ip6tables: "{{ devture_systemd_docker_base_ipv6_enabled }}"

  27. 

  28. matrix_playbook_docker_installation_daemon_options_custom: {}

  29. 

  30. # Controls whether to attach Traefik labels to services.

  31. # This is separate from `devture_traefik_enabled`, because you may wish to disable Traefik installation by the playbook,

  32. # yet still use Traefik installed in another way.

  33. matrix_playbook_traefik_labels_enabled: "{{ matrix_playbook_reverse_proxy_type in ['playbook-managed-traefik', 'other-traefik-container'] }}"

  34. 

  35. matrix_playbook_reverse_proxy_container_network: "{{ devture_traefik_container_network if devture_traefik_enabled else 'traefik' }}"

  36. matrix_playbook_reverse_proxy_hostname: "{{ devture_traefik_identifier if devture_traefik_enabled else 'traefik' }}"

  37. 

  38. # A separate Matrix Federation entrypoint is always enabled, unless the federation port matches one of the ports for existing (default) entrypoints

  39. matrix_playbook_public_matrix_federation_api_traefik_entrypoint_enabled: "{{ matrix_federation_public_port not in [devture_traefik_config_entrypoint_web_port, devture_traefik_config_entrypoint_web_secure_port] }}"

  40. 

  41. # We only enable HTTP/3 on the federation entrypoint if the main web-secure entrypoint has it enabled.

  42. matrix_playbook_public_matrix_federation_api_traefik_entrypoint_config_http3_enabled: "{{ devture_traefik_config_entrypoint_web_secure_http3_enabled }}"

  43. 

  44. # `devture_traefik_config_entrypoint_web_secure_enabled` is the variable we currently follow to determine if SSL is enabled or not.

  45. # `matrix_playbook_ssl_enabled` is merely an indicator if (when looked at it publicly), the server supports SSL or not,

  46. # and affects how services configure their public URLs.

  47. matrix_federation_traefik_entrypoint_tls: "{{ devture_traefik_config_entrypoint_web_secure_enabled }}"

  48. 

  49. ########################################################################

  50. #                                                                      #

  51. # /Playbook                                                            #

  52. #                                                                      #

  53. ########################################################################

  54. 

  55. 

  56. ########################################################################

  57. #                                                                      #

  58. # aux                                                                  #

  59. #                                                                      #

  60. ########################################################################

  61. 

  62. aux_directory_default_owner: "{{ matrix_user_username }}"

  63. aux_directory_default_group: "{{ matrix_user_groupname }}"

  64. 

  65. aux_file_default_owner: "{{ matrix_user_username }}"

  66. aux_file_default_group: "{{ matrix_user_groupname }}"

  67. 

  68. ########################################################################

  69. #                                                                      #

  70. # /aux                                                                 #

  71. #                                                                      #

  72. ########################################################################

  73. 

  74. 

  75. ########################################################################

  76. #                                                                      #

  77. # base                                                                 #

  78. #                                                                      #

  79. ########################################################################

  80. 

  81. matrix_homeserver_container_extra_arguments_auto: |

  82.   {{

  83.     (['--mount type=bind,src=' + matrix_appservice_discord_config_path + '/registration.yaml,dst=/matrix-appservice-discord-registration.yaml,ro'] if matrix_appservice_discord_enabled else [])

  84.     +

  85.     (['--mount type=bind,src=' + matrix_appservice_draupnir_for_all_config_path + '/draupnir-for-all-registration.yaml,dst=/matrix-appservice-draupnir-for-all-registration.yaml,ro'] if matrix_appservice_draupnir_for_all_enabled else [])

  86.     +

  87.     (['--mount type=bind,src=' + matrix_appservice_irc_config_path + '/registration.yaml,dst=/matrix-appservice-irc-registration.yaml,ro'] if matrix_appservice_irc_enabled else [])

  88.     +

  89.     (['--mount type=bind,src=' + matrix_appservice_kakaotalk_config_path + '/registration.yaml,dst=/matrix-appservice-kakaotalk-registration.yaml,ro'] if matrix_appservice_kakaotalk_enabled else [])

  90.     +

  91.     (['--mount type=bind,src=' + matrix_appservice_slack_config_path + '/slack-registration.yaml,dst=/matrix-appservice-slack-registration.yaml,ro'] if matrix_appservice_slack_enabled else [])

  92.     +

  93.     (['--mount type=bind,src=' + matrix_appservice_webhooks_config_path + '/webhooks-registration.yaml,dst=/matrix-appservice-webhooks-registration.yaml,ro'] if matrix_appservice_webhooks_enabled else [])

  94.     +

  95.     (['--mount type=bind,src=' + matrix_beeper_linkedin_config_path + '/registration.yaml,dst=/matrix-beeper-linkedin-registration.yaml,ro'] if matrix_beeper_linkedin_enabled else [])

  96.     +

  97.     (['--mount type=bind,src=' + matrix_go_skype_bridge_config_path + '/registration.yaml,dst=/matrix-go-skype-bridge-registration.yaml,ro'] if matrix_go_skype_bridge_enabled else [])

  98.     +

  99.     (['--mount type=bind,src=' + matrix_wechat_config_path + '/registration.yaml,dst=/matrix-wechat-registration.yaml,ro'] if matrix_wechat_enabled else [])

  100.     +

  101.     (['--mount type=bind,src=' + matrix_heisenbridge_base_path + '/registration.yaml,dst=/heisenbridge-registration.yaml,ro'] if matrix_heisenbridge_enabled else [])

  102.     +

  103.     (['--mount type=bind,src=' + matrix_hookshot_base_path + '/registration.yml,dst=/hookshot-registration.yml,ro'] if matrix_hookshot_enabled else [])

  104.     +

  105.     (['--mount type=bind,src=' + matrix_mautrix_discord_config_path + '/registration.yaml,dst=/matrix-mautrix-discord-registration.yaml,ro'] if matrix_mautrix_discord_enabled else [])

  106.     +

  107.     (['--mount type=bind,src=' + matrix_mautrix_slack_config_path + '/registration.yaml,dst=/matrix-mautrix-slack-registration.yaml,ro'] if matrix_mautrix_slack_enabled else [])

  108.     +

  109.     (['--mount type=bind,src=' + matrix_mautrix_facebook_config_path + '/registration.yaml,dst=/matrix-mautrix-facebook-registration.yaml,ro'] if matrix_mautrix_facebook_enabled else [])

  110.     +

  111.     (['--mount type=bind,src=' + matrix_mautrix_googlechat_config_path + '/registration.yaml,dst=/matrix-mautrix-googlechat-registration.yaml,ro'] if matrix_mautrix_googlechat_enabled else [])

  112.     +

  113.     (['--mount type=bind,src=' + matrix_mautrix_hangouts_config_path + '/registration.yaml,dst=/matrix-mautrix-hangouts-registration.yaml,ro'] if matrix_mautrix_hangouts_enabled else [])

  114.     +

  115.     (['--mount type=bind,src=' + matrix_mautrix_instagram_config_path + '/registration.yaml,dst=/matrix-mautrix-instagram-registration.yaml,ro'] if matrix_mautrix_instagram_enabled else [])

  116.     +

  117.     (['--mount type=bind,src=' + matrix_mautrix_signal_config_path + '/registration.yaml,dst=/matrix-mautrix-signal-registration.yaml,ro'] if matrix_mautrix_signal_enabled else [])

  118.     +

  119.     (['--mount type=bind,src=' + matrix_mautrix_meta_messenger_config_path + '/registration.yaml,dst=/matrix-mautrix-meta-messenger-registration.yaml,ro'] if matrix_mautrix_meta_messenger_enabled else [])

  120.     +

  121.     (['--mount type=bind,src=' + matrix_mautrix_meta_instagram_config_path + '/registration.yaml,dst=/matrix-mautrix-meta-instagram-registration.yaml,ro'] if matrix_mautrix_meta_instagram_enabled else [])

  122.     +

  123.     (['--mount type=bind,src=' + matrix_mautrix_telegram_config_path + '/registration.yaml,dst=/matrix-mautrix-telegram-registration.yaml,ro'] if matrix_mautrix_telegram_enabled else [])

  124.     +

  125.     (['--mount type=bind,src=' + matrix_mautrix_twitter_config_path + '/registration.yaml,dst=/matrix-mautrix-twitter-registration.yaml,ro'] if matrix_mautrix_twitter_enabled else [])

  126.     +

  127.     (['--mount type=bind,src=' + matrix_mautrix_gmessages_config_path + '/registration.yaml,dst=/matrix-mautrix-gmessages-registration.yaml,ro'] if matrix_mautrix_gmessages_enabled else [])

  128.     +

  129.     (['--mount type=bind,src=' + matrix_mautrix_whatsapp_config_path + '/registration.yaml,dst=/matrix-mautrix-whatsapp-registration.yaml,ro'] if matrix_mautrix_whatsapp_enabled else [])

  130.     +

  131.     (['--mount type=bind,src=' + matrix_mautrix_wsproxy_config_path + '/androidsms-registration.yaml,dst=/matrix-mautrix-androidsms-registration.yaml,ro'] if matrix_mautrix_wsproxy_enabled else [])

  132.     +

  133.     (['--mount type=bind,src=' + matrix_mautrix_wsproxy_config_path + '/imessage-registration.yaml,dst=/matrix-mautrix-imessage-registration.yaml,ro'] if matrix_mautrix_wsproxy_enabled else [])

  134.     +

  135.     (['--mount type=bind,src=' + matrix_mx_puppet_discord_config_path + '/registration.yaml,dst=/matrix-mx-puppet-discord-registration.yaml,ro'] if matrix_mx_puppet_discord_enabled else [])

  136.     +

  137.     (['--mount type=bind,src=' + matrix_mx_puppet_groupme_config_path + '/registration.yaml,dst=/matrix-mx-puppet-groupme-registration.yaml,ro'] if matrix_mx_puppet_groupme_enabled else [])

  138.     +

  139.     (['--mount type=bind,src=' + matrix_mx_puppet_instagram_config_path + '/registration.yaml,dst=/matrix-mx-puppet-instagram-registration.yaml,ro'] if matrix_mx_puppet_instagram_enabled else [])

  140.     +

  141.     (['--mount type=bind,src=' + matrix_mx_puppet_slack_config_path + '/registration.yaml,dst=/matrix-mx-puppet-slack-registration.yaml,ro'] if matrix_mx_puppet_slack_enabled else [])

  142.     +

  143.     (['--mount type=bind,src=' + matrix_mx_puppet_steam_config_path + '/registration.yaml,dst=/matrix-mx-puppet-steam-registration.yaml,ro'] if matrix_mx_puppet_steam_enabled else [])

  144.     +

  145.     (['--mount type=bind,src=' + matrix_mx_puppet_twitter_config_path + '/registration.yaml,dst=/matrix-mx-puppet-twitter-registration.yaml,ro'] if matrix_mx_puppet_twitter_enabled else [])

  146.     +

  147.     (['--mount type=bind,src=' + matrix_sms_bridge_config_path + '/registration.yaml,dst=/matrix-sms-bridge-registration.yaml,ro'] if matrix_sms_bridge_enabled else [])

  148.     +

  149.     (['--mount type=bind,src=' + matrix_cactus_comments_app_service_config_file + ',dst=/matrix-cactus-comments.yaml,ro'] if matrix_cactus_comments_enabled else [])

  150.   }}

  151. 

  152. matrix_homeserver_app_service_config_files_auto: |

  153.   {{

  154.     (['/matrix-appservice-discord-registration.yaml'] if matrix_appservice_discord_enabled else [])

  155.     +

  156.     (['/matrix-appservice-draupnir-for-all-registration.yaml'] if matrix_appservice_draupnir_for_all_enabled else [])

  157.     +

  158.     (['/matrix-appservice-irc-registration.yaml'] if matrix_appservice_irc_enabled else [])

  159.     +

  160.     (['/matrix-appservice-kakaotalk-registration.yaml'] if matrix_appservice_kakaotalk_enabled else [])

  161.     +

  162.     (['/matrix-appservice-slack-registration.yaml'] if matrix_appservice_slack_enabled else [])

  163.     +

  164.     (['/matrix-appservice-webhooks-registration.yaml'] if matrix_appservice_webhooks_enabled else [])

  165.     +

  166.     (['/matrix-beeper-linkedin-registration.yaml'] if matrix_beeper_linkedin_enabled else [])

  167.     +

  168.     (['/matrix-go-skype-bridge-registration.yaml'] if matrix_go_skype_bridge_enabled else [])

  169.     +

  170.     (['/matrix-wechat-registration.yaml'] if matrix_wechat_enabled else [])

  171.     +

  172.     (['/heisenbridge-registration.yaml'] if matrix_heisenbridge_enabled else [])

  173.     +

  174.     (['/hookshot-registration.yml'] if matrix_hookshot_enabled else [])

  175.     +

  176.     (['/matrix-mautrix-discord-registration.yaml'] if matrix_mautrix_discord_enabled else [])

  177.     +

  178.     (['/matrix-mautrix-slack-registration.yaml'] if matrix_mautrix_slack_enabled else [])

  179.     +

  180.     (['/matrix-mautrix-facebook-registration.yaml'] if matrix_mautrix_facebook_enabled else [])

  181.     +

  182.     (['/matrix-mautrix-googlechat-registration.yaml'] if matrix_mautrix_googlechat_enabled else [])

  183.     +

  184.     (['/matrix-mautrix-hangouts-registration.yaml'] if matrix_mautrix_hangouts_enabled else [])

  185.     +

  186.     (['/matrix-mautrix-instagram-registration.yaml'] if matrix_mautrix_instagram_enabled else [])

  187.     +

  188.     (['/matrix-mautrix-signal-registration.yaml'] if matrix_mautrix_signal_enabled else [])

  189.     +

  190.     (['/matrix-mautrix-meta-messenger-registration.yaml'] if matrix_mautrix_meta_messenger_enabled else [])

  191.     +

  192.     (['/matrix-mautrix-meta-instagram-registration.yaml'] if matrix_mautrix_meta_instagram_enabled else [])

  193.     +

  194.     (['/matrix-mautrix-telegram-registration.yaml'] if matrix_mautrix_telegram_enabled else [])

  195.     +

  196.     (['/matrix-mautrix-twitter-registration.yaml'] if matrix_mautrix_twitter_enabled else [])

  197.     +

  198.     (['/matrix-mautrix-gmessages-registration.yaml'] if matrix_mautrix_gmessages_enabled else [])

  199.     +

  200.     (['/matrix-mautrix-whatsapp-registration.yaml'] if matrix_mautrix_whatsapp_enabled else [])

  201.     +

  202.     (['/matrix-mautrix-androidsms-registration.yaml'] if matrix_mautrix_wsproxy_enabled else [])

  203.     +

  204.     (['/matrix-mautrix-imessage-registration.yaml'] if matrix_mautrix_wsproxy_enabled else [])

  205.     +

  206.     (['/matrix-mx-puppet-discord-registration.yaml'] if matrix_mx_puppet_discord_enabled else [])

  207.     +

  208.     (['/matrix-mx-puppet-groupme-registration.yaml'] if matrix_mx_puppet_groupme_enabled else [])

  209.     +

  210.     (['/matrix-mx-puppet-instagram-registration.yaml'] if matrix_mx_puppet_instagram_enabled else [])

  211.     +

  212.     (['/matrix-mx-puppet-slack-registration.yaml'] if matrix_mx_puppet_slack_enabled else [])

  213.     +

  214.     (['/matrix-mx-puppet-steam-registration.yaml'] if matrix_mx_puppet_steam_enabled else [])

  215.     +

  216.     (['/matrix-mx-puppet-twitter-registration.yaml'] if matrix_mx_puppet_twitter_enabled else [])

  217.     +

  218.     (['/matrix-sms-bridge-registration.yaml'] if matrix_sms_bridge_enabled else [])

  219.     +

  220.     (['/matrix-cactus-comments.yaml'] if matrix_cactus_comments_enabled else [])

  221.   }}

  222. 

  223. matrix_addons_homeserver_container_network: "{{ matrix_playbook_reverse_proxy_container_network if matrix_playbook_internal_matrix_client_api_traefik_entrypoint_enabled else matrix_homeserver_container_network }}"

  224. matrix_addons_homeserver_client_api_url: "{{ ('http://' + matrix_playbook_reverse_proxy_hostname + ':' + matrix_playbook_internal_matrix_client_api_traefik_entrypoint_port | string) if matrix_playbook_internal_matrix_client_api_traefik_entrypoint_enabled else matrix_homeserver_container_url }}"

  225. matrix_addons_homeserver_systemd_services_list: "{{ ([devture_traefik_identifier + '.service'] if matrix_playbook_reverse_proxy_type == 'playbook-managed-traefik' else []) if matrix_playbook_internal_matrix_client_api_traefik_entrypoint_enabled else matrix_homeserver_systemd_services_list }}"

  226. 

  227. # Starting from version `0.6.0` conduit natively supports some sync v3 (sliding-sync) features.

  228. matrix_homeserver_sliding_sync_url: "{{ matrix_sliding_sync_base_url if matrix_sliding_sync_enabled else (matrix_homeserver_url if matrix_homeserver_implementation in ['conduit'] else '') }}"

  229. 

  230. ########################################################################

  231. #                                                                      #

  232. # /base                                                                #

  233. #                                                                      #

  234. ########################################################################

  235. 

  236. 

  237. ########################################################################

  238. #                                                                      #

  239. # com.devture.ansible.role.systemd_service_manager                     #

  240. #                                                                      #

  241. ########################################################################

  242. 

  243. # This list is not exhaustive and final.

  244. # Synapse workers are still injected into the list at runtime.

  245. # Additional JVB workers (jitsi_jvb.yml -- roles/galaxy/jitsi/tasks/init_additional_jvb.yml) override this variable at runtime as well.

  246. #

  247. # Priority levels are like this:

  248. # - Traefik starts first with a level of 250, so that:

  249. #   - it can get an early start on obtaining SSL certificates and routing to other services as soon as they start (later)

  250. #   - so that addon services (starting later) can communicte with the homeserver via Traefik's internal entrypoint

  251. #     (see `matrix_playbook_internal_matrix_client_api_traefik_entrypoint_enabled`)

  252. # - core services (the homeserver) get a level of ~1000

  253. # - services that the homeserver depends on (database, Redis, ntfy, Coturn, etc.) get a lower level - between 500 and 1000

  254. # - Coturn gets a higher level if `devture_systemd_service_manager_service_restart_mode == 'one-by-one'` to intentionally delay it, because:

  255. #  - starting services one by one means that the service manager role waits for each service to fully start before proceeding to the next one

  256. #  - if Coturn has a lower priority than the homeserver, it would be started before it

  257. #  - since Coturn is started before the homeserver, there's no container label telling Traefik to get a `matrix.DOMAIN` certificate

  258. #  - thus, Coturn would spin and wait for a certificate until it fails. We'd get a playbook failure due to it, but service manager will proceed to start all other services anyway.

  259. #  - only later, when the homeserver actually starts, would that certificate be fetched and dumped

  260. # - reverse-proxying services get level 3000

  261. # - Matrix utility services (bridges, bots) get a level of 2000/2200, so that:

  262. #   - they can start before the reverse-proxy

  263. #   - so that, when the reverse-proxy is up (Matrix is up), all bots and bridges can be interacted with

  264. # - monitoring services (Prometheus, Grafana, ..) get a level of 4000 - they can start later than all-of-Matrix

  265. # - services which aren't time-sensitive (various crons and timers) get a level of 5000 - they can start later than all-of-Matrix

  266. devture_systemd_service_manager_services_list_auto: |

  267.   {{

  268.     ([{'name': (backup_borg_identifier + '.timer'), 'priority': 5000, 'groups': ['matrix', 'backup', 'borg']}] if backup_borg_enabled else [])

  269.     +

  270.     ([{'name': 'matrix-bot-buscarron.service', 'priority': 2200, 'groups': ['matrix', 'bots', 'buscarron', 'bot-buscarron']}] if matrix_bot_buscarron_enabled else [])

  271.     +

  272.     ([{'name': 'matrix-bot-go-neb.service', 'priority': 2200, 'groups': ['matrix', 'bots', 'go-neb', 'bot-go-neb']}] if matrix_bot_go_neb_enabled else [])

  273.     +

  274.     ([{'name': 'matrix-bot-honoroit.service', 'priority': 2200, 'groups': ['matrix', 'bots', 'honoroit', 'bot-honoroit']}] if matrix_bot_honoroit_enabled else [])

  275.     +

  276.     ([{'name': 'matrix-bot-matrix-registration-bot.service', 'priority': 2200, 'groups': ['matrix', 'bots', 'registration-bot', 'bot-matrix-registration-bot']}] if matrix_bot_matrix_registration_bot_enabled else [])

  277.     +

  278.     ([{'name': 'matrix-bot-matrix-reminder-bot.service', 'priority': 2200, 'groups': ['matrix', 'bots', 'reminder-bot', 'bot-matrix-reminder-bot']}] if matrix_bot_matrix_reminder_bot_enabled else [])

  279.     +

  280.     ([{'name': 'matrix-bot-maubot.service', 'priority': 2200, 'groups': ['matrix', 'bots', 'maubot', 'bot-maubot']}] if matrix_bot_maubot_enabled else [])

  281.     +

  282.     ([{'name': 'matrix-bot-mjolnir.service', 'priority': 4000, 'groups': ['matrix', 'bots', 'mjolnir', 'bot-mjolnir']}] if matrix_bot_mjolnir_enabled else [])

  283.     +

  284.     ([{'name': 'matrix-bot-draupnir.service', 'priority': 4000, 'groups': ['matrix', 'bots', 'draupnir', 'bot-draupnir']}] if matrix_bot_draupnir_enabled else [])

  285.     +

  286.     ([{'name': 'matrix-bot-postmoogle.service', 'priority': 2200, 'groups': ['matrix', 'bots', 'postmoogle', 'bot-postmoogle']}] if matrix_bot_postmoogle_enabled else [])

  287.     +

  288.     ([{'name': 'matrix-bot-chatgpt.service', 'priority': 2200, 'groups': ['matrix', 'bots', 'chatgpt', 'bot-chatgpt']}] if matrix_bot_chatgpt_enabled else [])

  289.     +

  290.     ([{'name': 'matrix-appservice-discord.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'appservice-discord']}] if matrix_appservice_discord_enabled else [])

  291.     +

  292.     ([{'name': 'matrix-appservice-draupnir-for-all.service', 'priority': 4000, 'groups': ['matrix', 'bridges', 'draupnir-for-all', 'appservice-draupnir-for-all']}] if matrix_appservice_draupnir_for_all_enabled else [])

  293.     +

  294.     ([{'name': 'matrix-appservice-irc.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'appservice-irc']}] if matrix_appservice_irc_enabled else [])

  295.     +

  296.     ([{'name': 'matrix-appservice-kakaotalk.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'appservice-kakaotalk']}] if matrix_appservice_kakaotalk_enabled else [])

  297.     +

  298.     ([{'name': 'matrix-appservice-kakaotalk-node.service', 'priority': 1900, 'groups': ['matrix', 'bridges', 'appservice-kakaotalk', 'appservice-kakaotalk-node']}] if matrix_appservice_kakaotalk_enabled else [])

  299.     +

  300.     ([{'name': 'matrix-appservice-slack.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'appservice-slack']}] if matrix_appservice_slack_enabled else [])

  301.     +

  302.     ([{'name': 'matrix-appservice-webhooks.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'appservice-webhooks']}] if matrix_appservice_webhooks_enabled else [])

  303.     +

  304.     ([{'name': 'matrix-beeper-linkedin.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'beeper-linkedin']}] if matrix_beeper_linkedin_enabled else [])

  305.     +

  306.     ([{'name': 'matrix-go-skype-bridge.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'go-skype']}] if matrix_go_skype_bridge_enabled else [])

  307.     +

  308.     ([{'name': 'matrix-wechat.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'wechat']}] if matrix_wechat_enabled else [])

  309.     +

  310.     ([{'name': 'matrix-wechat-agent.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'wechat']}] if matrix_wechat_enabled else [])

  311.     +

  312.     ([{'name': 'matrix-heisenbridge.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'heisenbridge']}] if matrix_heisenbridge_enabled else [])

  313.     +

  314.     ([{'name': 'matrix-hookshot.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'hookshot', 'bridge-hookshot']}] if matrix_hookshot_enabled else [])

  315.     +

  316.     ([{'name': 'matrix-mautrix-discord.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mautrix-discord']}] if matrix_mautrix_discord_enabled else [])

  317.     +

  318.     ([{'name': 'matrix-mautrix-slack.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mautrix-slack']}] if matrix_mautrix_slack_enabled else [])

  319.     +

  320.     ([{'name': 'matrix-mautrix-facebook.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mautrix-facebook']}] if matrix_mautrix_facebook_enabled else [])

  321.     +

  322.     ([{'name': 'matrix-mautrix-googlechat.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mautrix-googlechat']}] if matrix_mautrix_googlechat_enabled else [])

  323.     +

  324.     ([{'name': 'matrix-mautrix-hangouts.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mautrix-hangouts']}] if matrix_mautrix_hangouts_enabled else [])

  325.     +

  326.     ([{'name': 'matrix-mautrix-instagram.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mautrix-instagram']}] if matrix_mautrix_instagram_enabled else [])

  327.     +

  328.     ([{'name': 'matrix-mautrix-signal.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mautrix-signal', 'mautrix-signal']}] if matrix_mautrix_signal_enabled else [])

  329.     +

  330.     ([{'name': (matrix_mautrix_meta_messenger_identifier + '.service'), 'priority': 2000, 'groups': ['matrix', 'bridges', 'mautrix-meta', 'mautrix-meta-messenger']}] if matrix_mautrix_meta_messenger_enabled else [])

  331.     +

  332.     ([{'name': (matrix_mautrix_meta_instagram_identifier + '.service'), 'priority': 2000, 'groups': ['matrix', 'bridges', 'mautrix-meta', 'mautrix-meta-instagram']}] if matrix_mautrix_meta_instagram_enabled else [])

  333.     +

  334.     ([{'name': 'matrix-mautrix-telegram.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mautrix-telegram']}] if matrix_mautrix_telegram_enabled else [])

  335.     +

  336.     ([{'name': 'matrix-mautrix-twitter.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mautrix-twitter']}] if matrix_mautrix_twitter_enabled else [])

  337.     +

  338.     ([{'name': 'matrix-mautrix-gmessages.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mautrix-gmessages']}] if matrix_mautrix_gmessages_enabled else [])

  339.     +

  340.     ([{'name': 'matrix-mautrix-whatsapp.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mautrix-whatsapp']}] if matrix_mautrix_whatsapp_enabled else [])

  341.     +

  342.     ([{'name': 'matrix-mautrix-wsproxy.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mautrix-wsproxy']}] if matrix_mautrix_wsproxy_enabled else [])

  343.     +

  344.     ([{'name': 'matrix-mautrix-wsproxy-syncproxy.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mautrix-wsproxy-syncproxy']}] if matrix_mautrix_wsproxy_enabled else [])

  345.     +

  346.     ([{'name': 'matrix-mx-puppet-discord.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mx-puppet-discord']}] if matrix_mx_puppet_discord_enabled else [])

  347.     +

  348.     ([{'name': 'matrix-mx-puppet-groupme.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mx-puppet-groupme']}] if matrix_mx_puppet_groupme_enabled else [])

  349.     +

  350.     ([{'name': 'matrix-mx-puppet-instagram.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mx-puppet-instagram']}] if matrix_mx_puppet_instagram_enabled else [])

  351.     +

  352.     ([{'name': 'matrix-mx-puppet-slack.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mx-puppet-slack']}] if matrix_mx_puppet_slack_enabled else [])

  353.     +

  354.     ([{'name': 'matrix-mx-puppet-steam.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mx-puppet-steam']}] if matrix_mx_puppet_steam_enabled else [])

  355.     +

  356.     ([{'name': 'matrix-mx-puppet-twitter.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mx-puppet-twitter']}] if matrix_mx_puppet_twitter_enabled else [])

  357.     +

  358.     ([{'name': 'matrix-sms-bridge.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'sms']}] if matrix_sms_bridge_enabled else [])

  359.     +

  360.     ([{'name': 'matrix-cactus-comments.service', 'priority': 2000, 'groups': ['matrix', 'cactus-comments']}] if matrix_cactus_comments_enabled else [])

  361.     +

  362.     ([{'name': 'matrix-cactus-comments-client.service', 'priority': 2000, 'groups': ['matrix', 'cactus-comments-client']}] if matrix_cactus_comments_client_enabled else [])

  363.     +

  364.     ([{'name': 'matrix-client-cinny.service', 'priority': 2000, 'groups': ['matrix', 'clients', 'cinny', 'client-cinny']}] if matrix_client_cinny_enabled else [])

  365.     +

  366.     ([{'name': 'matrix-client-element.service', 'priority': 2000, 'groups': ['matrix', 'clients', 'element', 'client-element']}] if matrix_client_element_enabled else [])

  367.     +

  368.     ([{'name': 'matrix-client-hydrogen.service', 'priority': 2000, 'groups': ['matrix', 'clients', 'hydrogen', 'client-hydrogen']}] if matrix_client_hydrogen_enabled else [])

  369.     +

  370.     ([{'name': 'matrix-client-schildichat.service', 'priority': 2000, 'groups': ['matrix', 'clients', 'schildichat', 'client-schildichat']}] if matrix_client_schildichat_enabled else [])

  371.     +

  372.     ([{'name': ('matrix-' + matrix_homeserver_implementation + '.service'), 'priority': 1000, 'groups': ['matrix', 'homeservers', matrix_homeserver_implementation]}] if matrix_homeserver_enabled else [])

  373.     +

  374.     ([{'name': 'matrix-corporal.service', 'priority': 1500, 'groups': ['matrix', 'corporal']}] if matrix_corporal_enabled else [])

  375.     +

  376.     ([{'name': 'matrix-coturn.service', 'priority': (900 if devture_systemd_service_manager_service_restart_mode == 'clean-stop-start' else 1500), 'groups': ['matrix', 'coturn']}] if matrix_coturn_enabled else [])

  377.     +

  378.     ([{'name': 'matrix-rageshake.service', 'priority': 4000, 'groups': ['matrix', 'rageshake']}] if matrix_rageshake_enabled else [])

  379.     +

  380.     ([{'name': 'matrix-coturn-reload.timer', 'priority': 5000, 'groups': ['matrix', 'coturn']}] if (matrix_coturn_enabled and matrix_coturn_tls_enabled) else [])

  381.     +

  382.     ([{'name': 'matrix-dimension.service', 'priority': 4000, 'groups': ['matrix', 'integration-managers', 'dimension']}] if matrix_dimension_enabled else [])

  383.     +

  384.     ([{'name': 'matrix-dynamic-dns.service', 'priority': 5000, 'groups': ['matrix', 'dynamic-dns']}] if matrix_dynamic_dns_enabled else [])

  385.     +

  386.     ([{'name': 'matrix-email2matrix.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'email2matrix']}] if matrix_email2matrix_enabled else [])

  387.     +

  388.     ([{'name': (etherpad_identifier + '.service'), 'priority': 4000, 'groups': ['matrix', 'etherpad']}] if etherpad_enabled else [])

  389.     +

  390.     ([{'name': (grafana_identifier + '.service'), 'priority': 4000, 'groups': ['matrix', 'monitoring', 'grafana']}] if grafana_enabled else [])

  391.     +

  392.     ([{'name': (jitsi_identifier + '-web.service'), 'priority': 4200, 'groups': ['matrix', 'jitsi', 'jitsi-web']}] if jitsi_enabled else [])

  393.     +

  394.     ([{'name': (jitsi_identifier + '-prosody.service'), 'priority': 4000, 'groups': ['matrix', 'jitsi', 'jitsi-prosody']}] if jitsi_enabled else [])

  395.     +

  396.     ([{'name': (jitsi_identifier + '-jicofo.service'), 'priority': 4100, 'groups': ['matrix', 'jitsi', 'jitsi-jicofo']}] if jitsi_enabled else [])

  397.     +

  398.     ([{'name': (jitsi_identifier + '-jvb.service'), 'priority': 4100, 'groups': ['matrix', 'jitsi', 'jitsi-jvb']}] if jitsi_enabled else [])

  399.     +

  400.     ([{'name': 'matrix-ldap-registration-proxy.service', 'priority': 2000, 'groups': ['matrix', 'ldap-registration-proxy']}] if matrix_ldap_registration_proxy_enabled else [])

  401.     +

  402.     ([{'name': 'matrix-ma1sd.service', 'priority': 2000, 'groups': ['matrix', 'ma1sd']}] if matrix_ma1sd_enabled else [])

  403.     +

  404.     ([{'name': (matrix_media_repo_identifier + '.service'), 'priority': 4000, 'groups': ['matrix', 'matrix-media-repo']}] if matrix_media_repo_enabled else [])

  405.     +

  406.     ([{'name': (exim_relay_identifier ~ '.service'), 'priority': 800, 'groups': ['matrix', 'mailer', 'exim-relay']}] if exim_relay_enabled else [])

  407.     +

  408.     ([{'name': (ntfy_identifier + '.service'), 'priority': 800, 'groups': ['matrix', 'ntfy']}] if ntfy_enabled else [])

  409.     +

  410.     ([{'name': (devture_postgres_identifier + '.service'), 'priority': 500, 'groups': ['matrix', 'postgres']}] if devture_postgres_enabled else [])

  411.     +

  412.     ([{'name': (devture_postgres_backup_identifier + '.service'), 'priority': 5000, 'groups': ['matrix', 'backup', 'postgres-backup']}] if devture_postgres_backup_enabled else [])

  413.     +

  414.     ([{'name': (prometheus_identifier + '.service'), 'priority': 4000, 'groups': ['matrix', 'monitoring', 'prometheus']}] if prometheus_enabled else [])

  415.     +

  416.     ([{'name': (prometheus_node_exporter_identifier + '.service'), 'priority': 3900, 'groups': ['matrix', 'monitoring', 'prometheus-exporters', 'prometheus-node-exporter']}] if prometheus_node_exporter_enabled else [])

  417.     +

  418.     ([{'name': (prometheus_postgres_exporter_identifier + '.service'), 'priority': 3900, 'groups': ['matrix', 'monitoring', 'prometheus-exporters', 'prometheus-postgres-exporter']}] if prometheus_postgres_exporter_enabled else [])

  419.     +

  420.     ([{'name': 'matrix-prometheus-nginxlog-exporter.service', 'priority': 3900, 'groups': ['matrix', 'monitoring', 'prometheus-exporters', 'prometheus-nginxlog-exporter']}] if matrix_prometheus_nginxlog_exporter_enabled else [])

  421.     +

  422.     ([{'name': (redis_identifier + '.service'), 'priority': 750, 'groups': ['matrix', 'redis']}] if redis_enabled else [])

  423.     +

  424.     ([{'name': (keydb_identifier + '.service'), 'priority': 750, 'groups': ['matrix', 'keydb']}] if keydb_enabled else [])

  425.     +

  426.     ([{'name': 'matrix-pantalaimon.service', 'priority': 4000, 'groups': ['matrix', 'pantalaimon']}] if matrix_pantalaimon_enabled else [])

  427.     +

  428.     ([{'name': 'matrix-registration.service', 'priority': 4000, 'groups': ['matrix', 'registration', 'matrix-registration']}] if matrix_registration_enabled else [])

  429.     +

  430.     ([{'name': 'matrix-sliding-sync.service', 'priority': 1500, 'groups': ['matrix', 'sliding-sync']}] if matrix_sliding_sync_enabled else [])

  431.     +

  432.     ([{'name': 'matrix-sygnal.service', 'priority': 800, 'groups': ['matrix', 'sygnal']}] if matrix_sygnal_enabled else [])

  433.     +

  434.     ([{'name': 'matrix-goofys.service', 'priority': 800, 'groups': ['matrix', 'goofys']}] if matrix_s3_media_store_enabled else [])

  435.     +

  436.     ([{'name': 'matrix-synapse-s3-storage-provider-migrate.timer', 'priority': 5000, 'groups': ['matrix']}] if matrix_synapse_ext_synapse_s3_storage_provider_enabled else [])

  437.     +

  438.     ([{'name': 'matrix-synapse-auto-compressor.timer', 'priority': 5000, 'groups': ['matrix', 'synapse-auto-compressor']}] if matrix_synapse_auto_compressor_enabled else [])

  439.     +

  440.     ([{'name': 'matrix-synapse-admin.service', 'priority': 4000, 'groups': ['matrix', 'synapse-admin']}] if matrix_synapse_admin_enabled else [])

  441.     +

  442.     ([{'name': 'matrix-synapse-reverse-proxy-companion.service', 'priority': 1500, 'groups': ['matrix', 'homeservers', 'synapse', 'synapse-reverse-proxy-companion', 'reverse-proxies']}] if matrix_synapse_reverse_proxy_companion_enabled else [])

  443.     +

  444.     ([{'name': 'matrix-user-verification-service.service', 'priority': 800, 'groups': ['matrix', 'matrix-user-verification-service']}] if matrix_user_verification_service_enabled else [])

  445.     +

  446.     ([{'name': (matrix_static_files_identifier + '.service'), 'priority': 4000, 'groups': ['matrix', 'matrix-static-files']}] if matrix_static_files_enabled else [])

  447.     +

  448.     ([{'name': (devture_container_socket_proxy_identifier + '.service'), 'priority': 200, 'groups': ['matrix', 'reverse-proxies', 'container-socket-proxy']}] if devture_container_socket_proxy_enabled else [])

  449.     +

  450.     ([{'name': (devture_traefik_identifier + '.service'), 'priority': 250, 'groups': ['matrix', 'traefik', 'reverse-proxies']}] if devture_traefik_enabled else [])

  451.     +

  452.     ([{'name': (devture_traefik_certs_dumper_identifier + '.service'), 'priority': 300, 'groups': ['matrix', 'traefik-certs-dumper']}] if devture_traefik_certs_dumper_enabled else [])

  453.   }}

  454. 

  455. ########################################################################

  456. #                                                                      #

  457. # /com.devture.ansible.role.systemd_service_manager                    #

  458. #                                                                      #

  459. ########################################################################

  460. 

  461. 

  462. ########################################################################

  463. #                                                                      #

  464. # com.devture.ansible.role.timesync                                    #

  465. #                                                                      #

  466. ########################################################################

  467. 

  468. # To completely disable installing systemd-timesyncd/ntpd, use `devture_timesync_installation_enabled: false`.

  469. 

  470. ########################################################################

  471. #                                                                      #

  472. # /com.devture.ansible.role.timesync                                   #

  473. #                                                                      #

  474. ########################################################################

  475. 

  476. 

  477. ######################################################################

  478. #

  479. # com.devture.ansible.role.playbook_state_preserver

  480. #

  481. ######################################################################

  482. 

  483. # To completely disable this feature, use `devture_playbook_state_preserver_enabled: false`.

  484. 

  485. devture_playbook_state_preserver_uid: "{{ matrix_user_uid }}"

  486. devture_playbook_state_preserver_gid: "{{ matrix_user_gid }}"

  487. 

  488. devture_playbook_state_preserver_vars_preservation_dst: "{{ matrix_base_data_path }}/vars.yml"

  489. 

  490. devture_playbook_state_preserver_commit_hash_preservation_dst: "{{ matrix_base_data_path }}/git_hash.yml"

  491. 

  492. ######################################################################

  493. #

  494. # /com.devture.ansible.role.playbook_state_preserver

  495. #

  496. ######################################################################

  497. 

  498. 

  499. ########################################################################

  500. #                                                                      #

  501. # geerlingguy/ansible-role-docker                                      #

  502. #                                                                      #

  503. ########################################################################

  504. 

  505. docker_daemon_options: "{{ matrix_playbook_docker_installation_daemon_options }}"

  506. 

  507. ########################################################################

  508. #                                                                      #

  509. # /geerlingguy/ansible-role-docker                                     #

  510. #                                                                      #

  511. ########################################################################

  512. 

  513. 

  514. ######################################################################

  515. #

  516. # matrix-base

  517. #

  518. ######################################################################

  519. 

  520. matrix_identity_server_url: "{{ (('https://' if matrix_playbook_ssl_enabled else 'http://') + matrix_server_fqn_matrix) if matrix_ma1sd_enabled else None }}"

  521. 

  522. matrix_homeserver_systemd_services_list: |-

  523.   {{

  524.     (

  525.       ([('matrix-' + matrix_homeserver_implementation + '.service')] if matrix_homeserver_implementation != 'synapse' else [])

  526.       +

  527.       ([('matrix-' + matrix_homeserver_implementation + '.service')] if matrix_homeserver_implementation == 'synapse' and not matrix_synapse_reverse_proxy_companion_enabled else [])

  528.       +

  529.       (['matrix-synapse-reverse-proxy-companion.service'] if matrix_synapse_reverse_proxy_companion_enabled else [])

  530.     ) | unique

  531.   }}

  532. 

  533. matrix_homeserver_container_client_api_endpoint: |-

  534.   {{

  535.     {

  536.       'synapse': ('matrix-synapse-reverse-proxy-companion:8008' if matrix_synapse_reverse_proxy_companion_enabled | default(false) else ('matrix-synapse:'+ matrix_synapse_container_client_api_port | default('8008') | string)),

  537.       'dendrite': ('matrix-dendrite:' + matrix_dendrite_http_bind_port | default('8008') | string),

  538.       'conduit': ('matrix-conduit:' + matrix_conduit_port_number | default('8008') | string),

  539.     }[matrix_homeserver_implementation]

  540.   }}

  541. 

  542. matrix_homeserver_container_federation_api_endpoint: |-

  543.   {{

  544.     {

  545.       'synapse': ('matrix-synapse-reverse-proxy-companion:8048' if matrix_synapse_reverse_proxy_companion_enabled else ('matrix-synapse:'+ matrix_synapse_container_federation_api_plain_port | default('8008') | string)),

  546.       'dendrite': ('matrix-dendrite:' + matrix_dendrite_http_bind_port | default('8008') | string),

  547.       'conduit': ('matrix-conduit:' + matrix_conduit_port_number | default('8008') | string),

  548.     }[matrix_homeserver_implementation]

  549.   }}

  550. 

  551. matrix_integration_manager_rest_url: "{{ matrix_dimension_integrations_rest_url if matrix_dimension_enabled else None }}"

  552. matrix_integration_manager_ui_url: "{{ matrix_dimension_integrations_ui_url if matrix_dimension_enabled else None }}"

  553. 

  554. ######################################################################

  555. #

  556. # /matrix-base

  557. #

  558. ######################################################################

  559. 

  560. 

  561. ######################################################################

  562. #

  563. # matrix-bridge-appservice-discord

  564. #

  565. ######################################################################

  566. 

  567. # We don't enable bridges by default.

  568. matrix_appservice_discord_enabled: false

  569. 

  570. matrix_appservice_discord_systemd_required_services_list_auto: |

  571.   {{

  572.     matrix_addons_homeserver_systemd_services_list

  573.     +

  574.     ([devture_postgres_identifier ~ '.service'] if (devture_postgres_enabled and matrix_appservice_discord_database_hostname == devture_postgres_connection_hostname) else [])

  575.   }}

  576. 

  577. matrix_appservice_discord_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '9005') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  578. 

  579. matrix_appservice_discord_container_network: "{{ matrix_addons_container_network }}"

  580. 

  581. matrix_appservice_discord_container_additional_networks_auto: |-

  582.   {{

  583.     (

  584.       ([] if matrix_addons_homeserver_container_network == '' else [matrix_addons_homeserver_container_network])

  585.       +

  586.       ([devture_postgres_container_network] if (devture_postgres_enabled and matrix_appservice_discord_database_hostname == devture_postgres_connection_hostname and matrix_appservice_discord_container_network != devture_postgres_container_network) else [])

  587.     ) | unique

  588.   }}

  589. 

  590. # If the homeserver disables presence, it's likely better (less wasteful) to also disable presence on the bridge side.

  591. matrix_appservice_discord_bridge_disablePresence: "{{ not matrix_synapse_presence_enabled }}"

  592. 

  593. matrix_appservice_discord_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'discord.as.token', rounds=655555) | to_uuid }}"

  594. 

  595. matrix_appservice_discord_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'discord.hs.token', rounds=655555) | to_uuid }}"

  596. 

  597. # We only make this use Postgres if our own Postgres server is enabled.

  598. # It's only then (for now) that we can automatically create the necessary database and user for this service.

  599. matrix_appservice_discord_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  600. matrix_appservice_discord_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  601. matrix_appservice_discord_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'as.discord.db', rounds=655555) | to_uuid }}"

  602. 

  603. ######################################################################

  604. #

  605. # /matrix-bridge-appservice-discord

  606. #

  607. ######################################################################

  608. 

  609. 

  610. ######################################################################

  611. #

  612. # matrix-appservice-webhooks

  613. #

  614. ######################################################################

  615. 

  616. # We don't enable bridges by default.

  617. matrix_appservice_webhooks_enabled: false

  618. 

  619. matrix_appservice_webhooks_hostname: "{{ matrix_server_fqn_matrix }}"

  620. 

  621. matrix_appservice_webhooks_systemd_required_services_list_auto: |

  622.   {{

  623.     matrix_addons_homeserver_systemd_services_list

  624.   }}

  625. 

  626. matrix_appservice_webhooks_container_image_self_build: "{{ matrix_architecture != 'amd64' }}"

  627. 

  628. matrix_appservice_webhooks_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ matrix_appservice_webhooks_matrix_port) if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  629. 

  630. matrix_appservice_webhooks_container_network: "{{ matrix_addons_container_network }}"

  631. 

  632. matrix_appservice_webhooks_container_additional_networks_auto: |-

  633.   {{

  634.     (

  635.       ([] if matrix_addons_homeserver_container_network == '' else [matrix_addons_homeserver_container_network])

  636.       +

  637.       ([matrix_playbook_reverse_proxyable_services_additional_network] if (matrix_playbook_reverse_proxyable_services_additional_network and matrix_appservice_webhooks_container_labels_traefik_enabled) else [])

  638.     ) | unique

  639.   }}

  640. 

  641. matrix_appservice_webhooks_container_labels_traefik_enabled: "{{ matrix_playbook_reverse_proxy_type in ['playbook-managed-traefik', 'other-traefik-container'] }}"

  642. matrix_appservice_webhooks_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  643. matrix_appservice_webhooks_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  644. matrix_appservice_webhooks_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  645. 

  646. matrix_appservice_webhooks_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'webhook.as.token', rounds=655555) | to_uuid }}"

  647. 

  648. matrix_appservice_webhooks_homeserver_url: "{{ matrix_addons_homeserver_client_api_url }}"

  649. matrix_appservice_webhooks_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'webhook.hs.token', rounds=655555) | to_uuid }}"

  650. 

  651. matrix_appservice_webhooks_id_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'webhook.id.token', rounds=655555) | to_uuid }}"

  652. 

  653. ######################################################################

  654. #

  655. # /matrix-appservice-webhooks

  656. #

  657. ######################################################################

  658. 

  659. 

  660. ######################################################################

  661. #

  662. # matrix-appservice-slack

  663. #

  664. ######################################################################

  665. 

  666. # We don't enable bridges by default.

  667. matrix_appservice_slack_enabled: false

  668. 

  669. matrix_appservice_slack_hostname: "{{ matrix_server_fqn_matrix }}"

  670. 

  671. matrix_appservice_slack_systemd_required_services_list_auto: |

  672.   {{

  673.     matrix_addons_homeserver_systemd_services_list

  674.     +

  675.     ([devture_postgres_identifier ~ '.service'] if (devture_postgres_enabled and matrix_appservice_slack_database_hostname == devture_postgres_connection_hostname) else [])

  676.   }}

  677. 

  678. matrix_appservice_slack_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"

  679. 

  680. matrix_appservice_slack_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ matrix_appservice_slack_slack_port) if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  681. 

  682. matrix_appservice_slack_container_network: "{{ matrix_addons_container_network }}"

  683. 

  684. matrix_appservice_slack_container_additional_networks_auto: |-

  685.   {{

  686.     (

  687.       ([] if matrix_addons_homeserver_container_network == '' else [matrix_addons_homeserver_container_network])

  688.       +

  689.       ([devture_postgres_container_network] if (devture_postgres_enabled and matrix_appservice_slack_database_hostname == devture_postgres_connection_hostname and matrix_appservice_slack_container_network != devture_postgres_container_network) else [])

  690.       +

  691.       ([matrix_playbook_reverse_proxyable_services_additional_network] if (matrix_playbook_reverse_proxyable_services_additional_network and matrix_appservice_slack_container_labels_traefik_enabled) else [])

  692.     ) | unique

  693.   }}

  694. 

  695. matrix_appservice_slack_container_labels_traefik_enabled: "{{ matrix_playbook_reverse_proxy_type in ['playbook-managed-traefik', 'other-traefik-container'] }}"

  696. matrix_appservice_slack_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  697. matrix_appservice_slack_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  698. matrix_appservice_slack_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  699. 

  700. matrix_appservice_slack_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'slack.as.token', rounds=655555) | to_uuid }}"

  701. 

  702. matrix_appservice_slack_homeserver_url: "{{ matrix_addons_homeserver_client_api_url }}"

  703. matrix_appservice_slack_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'slack.hs.token', rounds=655555) | to_uuid }}"

  704. 

  705. matrix_appservice_slack_id_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'slack.id.token', rounds=655555) | to_uuid }}"

  706. 

  707. # Postgres is the default, except if not using internal Postgres server

  708. matrix_appservice_slack_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'nedb' }}"

  709. matrix_appservice_slack_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  710. matrix_appservice_slack_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'as.slack.db', rounds=655555) | to_uuid }}"

  711. matrix_appservice_slack_database_container_network: "{{ devture_postgres_container_network if devture_postgres_enabled else '' }}"

  712. 

  713. ######################################################################

  714. #

  715. # /matrix-bridge-appservice-slack

  716. #

  717. ######################################################################

  718. 

  719. ######################################################################

  720. #

  721. # matrix-bridge-appservice-irc

  722. #

  723. ######################################################################

  724. 

  725. # We don't enable bridges by default.

  726. matrix_appservice_irc_enabled: false

  727. 

  728. matrix_appservice_irc_systemd_required_services_list_auto: |

  729.   {{

  730.     matrix_addons_homeserver_systemd_services_list

  731.     +

  732.     ([devture_postgres_identifier ~ '.service'] if (devture_postgres_enabled and matrix_appservice_irc_database_hostname == devture_postgres_connection_hostname) else [])

  733.   }}

  734. 

  735. matrix_appservice_irc_container_image_self_build: "{{ matrix_architecture != 'amd64' }}"

  736. 

  737. matrix_appservice_irc_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '9999') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  738. 

  739. matrix_appservice_irc_container_network: "{{ matrix_addons_container_network }}"

  740. 

  741. matrix_appservice_irc_container_additional_networks_auto: |-

  742.   {{

  743.     (

  744.       ([] if matrix_addons_homeserver_container_network == '' else [matrix_addons_homeserver_container_network])

  745.       +

  746.       ([devture_postgres_container_network] if (devture_postgres_enabled and matrix_appservice_irc_database_hostname == devture_postgres_connection_hostname and matrix_appservice_irc_container_network != devture_postgres_container_network) else [])

  747.     ) | unique

  748.   }}

  749. 

  750. # The IRC bridge docs say that if homeserver presence is disabled, it's better to also disable

  751. # IRC bridge presence, for performance reasons.

  752. matrix_appservice_irc_homeserver_enablePresence: "{{ matrix_synapse_presence_enabled }}"

  753. 

  754. matrix_appservice_irc_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'irc.as.token', rounds=655555) | to_uuid }}"

  755. 

  756. matrix_appservice_irc_homeserver_url: "{{ matrix_addons_homeserver_client_api_url }}"

  757. matrix_appservice_irc_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'irc.hs.token', rounds=655555) | to_uuid }}"

  758. 

  759. matrix_appservice_irc_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'nedb' }}"

  760. matrix_appservice_irc_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  761. matrix_appservice_irc_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'as.irc.db', rounds=655555) | to_uuid }}"

  762. matrix_appservice_irc_database_container_network: "{{ devture_postgres_container_network if devture_postgres_enabled else '' }}"

  763. 

  764. ######################################################################

  765. #

  766. # /matrix-bridge-appservice-irc

  767. #

  768. ######################################################################

  769. 

  770. ######################################################################

  771. #

  772. # matrix-bridge-appservice-kakaotalk

  773. #

  774. ######################################################################

  775. 

  776. # We don't enable bridges by default.

  777. matrix_appservice_kakaotalk_enabled: false

  778. 

  779. matrix_appservice_kakaotalk_systemd_required_services_list_auto: |

  780.   {{

  781.     matrix_addons_homeserver_systemd_services_list

  782.     +

  783.     ([devture_postgres_identifier ~ '.service'] if (devture_postgres_enabled and matrix_appservice_kakaotalk_database_hostname == devture_postgres_connection_hostname) else [])

  784.   }}

  785. 

  786. matrix_appservice_kakaotalk_container_network: "{{ matrix_addons_container_network }}"

  787. 

  788. matrix_appservice_kakaotalk_container_additional_networks_auto: |-

  789.   {{

  790.     (

  791.       ([] if matrix_addons_homeserver_container_network == '' else [matrix_addons_homeserver_container_network])

  792.       +

  793.       ([devture_postgres_container_network] if (devture_postgres_enabled and matrix_appservice_kakaotalk_database_hostname == devture_postgres_connection_hostname and matrix_appservice_kakaotalk_container_network != devture_postgres_container_network) else [])

  794.     ) | unique

  795.   }}

  796. 

  797. matrix_appservice_kakaotalk_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'as.kakao.hs', rounds=655555) | to_uuid }}"

  798. 

  799. matrix_appservice_kakaotalk_homeserver_address: "{{ matrix_addons_homeserver_client_api_url }}"

  800. matrix_appservice_kakaotalk_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'as.kakao.hs', rounds=655555) | to_uuid }}"

  801. 

  802. matrix_appservice_kakaotalk_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  803. 

  804. matrix_appservice_kakaotalk_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  805. matrix_appservice_kakaotalk_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  806. matrix_appservice_kakaotalk_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'as.kakao.db', rounds=655555) | to_uuid }}"

  807. 

  808. ######################################################################

  809. #

  810. # /matrix-bridge-appservice-kakaotalk

  811. #

  812. ######################################################################

  813. 

  814. 

  815. ######################################################################

  816. #

  817. # matrix-bridge-beeper-linkedin

  818. #

  819. ######################################################################

  820. 

  821. # We don't enable bridges by default.

  822. matrix_beeper_linkedin_enabled: false

  823. 

  824. matrix_beeper_linkedin_systemd_required_services_list_auto: |

  825.   {{

  826.     matrix_addons_homeserver_systemd_services_list

  827.     +

  828.     ([devture_postgres_identifier ~ '.service'] if (devture_postgres_enabled and matrix_beeper_linkedin_database_hostname == devture_postgres_connection_hostname) else [])

  829.   }}

  830. 

  831. matrix_beeper_linkedin_container_image_self_build: "{{ matrix_architecture not in ['amd64'] }}"

  832. 

  833. matrix_beeper_linkedin_container_network: "{{ matrix_addons_container_network }}"

  834. 

  835. matrix_beeper_linkedin_container_additional_networks_auto: |-

  836.   {{

  837.     (

  838.       ([] if matrix_addons_homeserver_container_network == '' else [matrix_addons_homeserver_container_network])

  839.       +

  840.       ([devture_postgres_container_network] if (devture_postgres_enabled and matrix_beeper_linkedin_database_hostname == devture_postgres_connection_hostname and matrix_beeper_linkedin_container_network != devture_postgres_container_network) else [])

  841.     ) | unique

  842.   }}

  843. 

  844. matrix_beeper_linkedin_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'linked.as.token', rounds=655555) | to_uuid }}"

  845. 

  846. matrix_beeper_linkedin_homeserver_address: "{{ matrix_addons_homeserver_client_api_url }}"

  847. matrix_beeper_linkedin_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'linked.hs.token', rounds=655555) | to_uuid }}"

  848. 

  849. matrix_beeper_linkedin_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  850. 

  851. matrix_beeper_linkedin_bridge_presence: "{{ matrix_synapse_presence_enabled if matrix_synapse_enabled else true }}"

  852. 

  853. matrix_beeper_linkedin_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  854. matrix_beeper_linkedin_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'maulinkedin.db', rounds=655555) | to_uuid }}"

  855. 

  856. ######################################################################

  857. #

  858. # /matrix-bridge-beeper-linkedin

  859. #

  860. ######################################################################

  861. 

  862. 

  863. ######################################################################

  864. #

  865. # matrix-bridge-go-skype-bridge

  866. #

  867. ######################################################################

  868. 

  869. # We don't enable bridges by default.

  870. matrix_go_skype_bridge_enabled: false

  871. 

  872. matrix_go_skype_bridge_systemd_required_services_list_auto: |

  873.   {{

  874.     matrix_addons_homeserver_systemd_services_list

  875.     +

  876.     ([devture_postgres_identifier ~ '.service'] if (devture_postgres_enabled and matrix_go_skype_bridge_database_hostname == devture_postgres_connection_hostname) else [])

  877.   }}

  878. 

  879. matrix_go_skype_bridge_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"

  880. 

  881. matrix_go_skype_bridge_container_network: "{{ matrix_addons_container_network }}"

  882. 

  883. matrix_go_skype_bridge_container_additional_networks_auto: |-

  884.   {{

  885.     (

  886.       ([] if matrix_addons_homeserver_container_network == '' else [matrix_addons_homeserver_container_network])

  887.       +

  888.       ([devture_postgres_container_network] if (devture_postgres_enabled and matrix_go_skype_bridge_database_hostname == devture_postgres_connection_hostname and matrix_go_skype_bridge_container_network != devture_postgres_container_network) else [])

  889.     ) | unique

  890.   }}

  891. 

  892. matrix_go_skype_bridge_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'skype.as.token', rounds=655555) | to_uuid }}"

  893. 

  894. matrix_go_skype_bridge_homeserver_address: "{{ matrix_addons_homeserver_client_api_url }}"

  895. matrix_go_skype_bridge_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'skype.hs.token', rounds=655555) | to_uuid }}"

  896. 

  897. matrix_go_skype_bridge_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  898. 

  899. # Postgres is the default, except if not using internal Postgres server

  900. matrix_go_skype_bridge_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  901. matrix_go_skype_bridge_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  902. matrix_go_skype_bridge_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'goskype.db', rounds=655555) | to_uuid }}"

  903. 

  904. ######################################################################

  905. #

  906. # /matrix-bridge-go-skype-bridge

  907. #

  908. ######################################################################

  909. 

  910. 

  911. ######################################################################

  912. #

  913. # matrix-bridge-mautrix-discord

  914. #

  915. ######################################################################

  916. 

  917. # We don't enable bridges by default.

  918. matrix_mautrix_discord_enabled: false

  919. 

  920. matrix_mautrix_discord_container_image_self_build: "{{ matrix_architecture not in ['arm64', 'amd64'] }}"

  921. 

  922. matrix_mautrix_discord_container_network: "{{ matrix_addons_container_network }}"

  923. 

  924. matrix_mautrix_discord_container_additional_networks_auto: |-

  925.   {{

  926.     (

  927.       ([] if matrix_addons_homeserver_container_network == '' else [matrix_addons_homeserver_container_network])

  928.       +

  929.       ([devture_postgres_container_network] if devture_postgres_enabled and matrix_mautrix_facebook_database_hostname == devture_postgres_connection_hostname else [])

  930.     ) | unique

  931.   }}

  932. 

  933. matrix_mautrix_discord_systemd_required_services_list_auto: |

  934.   {{

  935.     matrix_addons_homeserver_systemd_services_list

  936.     +

  937.     ([devture_postgres_identifier ~ '.service'] if (devture_postgres_enabled and matrix_mautrix_discord_database_hostname == devture_postgres_connection_hostname) else [])

  938.   }}

  939. 

  940. matrix_mautrix_discord_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'maudisc.as.tok', rounds=655555) | to_uuid }}"

  941. 

  942. matrix_mautrix_discord_homeserver_address: "{{ matrix_addons_homeserver_client_api_url }}"

  943. matrix_mautrix_discord_homeserver_public_address: "{{ 'https' if matrix_playbook_ssl_enabled else 'http' }}://{{ matrix_server_fqn_matrix }}"

  944. matrix_mautrix_discord_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'maudisc.hs.tok', rounds=655555) | to_uuid }}"

  945. 

  946. matrix_mautrix_discord_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  947. 

  948. # Postgres is the default, except if not using internal Postgres server

  949. matrix_mautrix_discord_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  950. matrix_mautrix_discord_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  951. matrix_mautrix_discord_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'maudiscord.db', rounds=655555) | to_uuid }}"

  952. 

  953. ######################################################################

  954. #

  955. # /matrix-bridge-mautrix-discord

  956. #

  957. ######################################################################

  958. 

  959. 

  960. ######################################################################

  961. #

  962. # matrix-bridge-mautrix-slack

  963. #

  964. ######################################################################

  965. 

  966. # We don't enable bridges by default.

  967. matrix_mautrix_slack_enabled: false

  968. 

  969. matrix_mautrix_slack_systemd_required_services_list_auto: |

  970.   {{

  971.     matrix_addons_homeserver_systemd_services_list

  972.     +

  973.     ([devture_postgres_identifier ~ '.service'] if (devture_postgres_enabled and matrix_mautrix_slack_database_hostname == devture_postgres_connection_hostname) else [])

  974.   }}

  975. 

  976. matrix_mautrix_slack_container_image_self_build: "{{ matrix_architecture not in ['arm64', 'amd64'] }}"

  977. 

  978. matrix_mautrix_slack_container_network: "{{ matrix_addons_container_network }}"

  979. 

  980. matrix_mautrix_slack_container_additional_networks_auto: |-

  981.   {{

  982.     (

  983.       ([] if matrix_addons_homeserver_container_network == '' else [matrix_addons_homeserver_container_network])

  984.       +

  985.       ([devture_postgres_container_network] if (devture_postgres_enabled and matrix_mautrix_slack_database_hostname == devture_postgres_connection_hostname and matrix_mautrix_slack_container_network != devture_postgres_container_network) else [])

  986.     ) | unique

  987.   }}

  988. 

  989. matrix_mautrix_slack_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mauslack.as.tok', rounds=655555) | to_uuid }}"

  990. 

  991. matrix_mautrix_slack_homeserver_address: "{{ matrix_addons_homeserver_client_api_url }}"

  992. matrix_mautrix_slack_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mauslack.hs.tok', rounds=655555) | to_uuid }}"

  993. 

  994. matrix_mautrix_slack_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  995. 

  996. # Postgres is the default, except if not using internal Postgres server

  997. matrix_mautrix_slack_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  998. matrix_mautrix_slack_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  999. matrix_mautrix_slack_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mauslack.db', rounds=655555) | to_uuid }}"

  1000. 

  1001. ######################################################################

  1002. #

  1003. # /matrix-bridge-mautrix-slack

  1004. #

  1005. ######################################################################

  1006. 

  1007. 

  1008. ######################################################################

  1009. #

  1010. # matrix-bridge-mautrix-facebook

  1011. #

  1012. ######################################################################

  1013. 

  1014. # We don't enable bridges by default.

  1015. matrix_mautrix_facebook_enabled: false

  1016. 

  1017. matrix_mautrix_facebook_systemd_required_services_list_auto: |

  1018.   {{

  1019.     matrix_addons_homeserver_systemd_services_list

  1020.     +

  1021.     ([devture_postgres_identifier ~ '.service'] if (devture_postgres_enabled and matrix_mautrix_facebook_database_hostname == devture_postgres_connection_hostname) else [])

  1022.   }}

  1023. 

  1024. matrix_mautrix_facebook_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"

  1025. 

  1026. matrix_mautrix_facebook_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '9008') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  1027. 

  1028. matrix_mautrix_facebook_container_network: "{{ matrix_addons_container_network }}"

  1029. 

  1030. matrix_mautrix_facebook_container_additional_networks_auto: |-

  1031.   {{

  1032.     (

  1033.       ([] if matrix_addons_homeserver_container_network == '' else [matrix_addons_homeserver_container_network])

  1034.       +

  1035.       ([devture_postgres_container_network] if (devture_postgres_enabled and matrix_mautrix_facebook_database_hostname == devture_postgres_connection_hostname and matrix_mautrix_facebook_container_network != devture_postgres_container_network) else [])

  1036.       +

  1037.       ([matrix_playbook_reverse_proxyable_services_additional_network] if (matrix_playbook_reverse_proxyable_services_additional_network and matrix_mautrix_facebook_container_labels_traefik_enabled) else [])

  1038.     ) | unique

  1039.   }}

  1040. 

  1041. matrix_mautrix_facebook_container_labels_traefik_enabled: "{{ matrix_playbook_reverse_proxy_type in ['playbook-managed-traefik', 'other-traefik-container'] }}"

  1042. matrix_mautrix_facebook_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  1043. matrix_mautrix_facebook_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  1044. matrix_mautrix_facebook_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  1045. 

  1046. matrix_mautrix_facebook_container_labels_metrics_middleware_basic_auth_enabled: "{{ matrix_metrics_exposure_http_basic_auth_enabled }}"

  1047. matrix_mautrix_facebook_container_labels_metrics_middleware_basic_auth_users: "{{ matrix_metrics_exposure_http_basic_auth_users }}"

  1048. 

  1049. matrix_mautrix_facebook_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'fb.as.token', rounds=655555) | to_uuid }}"

  1050. 

  1051. matrix_mautrix_facebook_homeserver_address: "{{ matrix_addons_homeserver_client_api_url }}"

  1052. 

  1053. matrix_mautrix_facebook_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'fb.hs.token', rounds=655555) | to_uuid }}"

  1054. 

  1055. matrix_mautrix_facebook_appservice_public_enabled: true

  1056. matrix_mautrix_facebook_appservice_public_hostname: "{{ matrix_server_fqn_matrix }}"

  1057. matrix_mautrix_facebook_appservice_public_prefix: "/{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'facebook', rounds=655555) | to_uuid }}"

  1058. 

  1059. matrix_mautrix_facebook_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  1060. 

  1061. matrix_mautrix_facebook_bridge_presence: "{{ matrix_synapse_presence_enabled if matrix_synapse_enabled else true }}"

  1062. 

  1063. matrix_mautrix_facebook_metrics_enabled: "{{ prometheus_enabled or matrix_metrics_exposure_enabled }}"

  1064. 

  1065. matrix_mautrix_facebook_metrics_proxying_enabled: "{{ matrix_mautrix_facebook_metrics_enabled and matrix_metrics_exposure_enabled }}"

  1066. matrix_mautrix_facebook_metrics_proxying_hostname: "{{ matrix_metrics_exposure_hostname }}"

  1067. matrix_mautrix_facebook_metrics_proxying_path_prefix: "{{ matrix_metrics_exposure_path_prefix }}/mautrix-facebook"

  1068. 

  1069. # We'd like to force-set people with external Postgres to SQLite, so the bridge role can complain

  1070. # and point them to a migration path.

  1071. matrix_mautrix_facebook_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  1072. matrix_mautrix_facebook_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1073. matrix_mautrix_facebook_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mau.fb.db', rounds=655555) | to_uuid }}"

  1074. 

  1075. ######################################################################

  1076. #

  1077. # /matrix-bridge-mautrix-facebook

  1078. #

  1079. ######################################################################

  1080. 

  1081. 

  1082. ######################################################################

  1083. #

  1084. # matrix-bridge-mautrix-googlechat

  1085. #

  1086. ######################################################################

  1087. 

  1088. # We don't enable bridges by default.

  1089. matrix_mautrix_googlechat_enabled: false

  1090. 

  1091. matrix_mautrix_googlechat_systemd_required_services_list_auto: |

  1092.   {{

  1093.     matrix_addons_homeserver_systemd_services_list

  1094.     +

  1095.     ([devture_postgres_identifier ~ '.service'] if (devture_postgres_enabled and matrix_mautrix_googlechat_database_hostname == devture_postgres_connection_hostname) else [])

  1096.   }}

  1097. 

  1098. matrix_mautrix_googlechat_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"

  1099. 

  1100. matrix_mautrix_googlechat_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '9007') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  1101. 

  1102. matrix_mautrix_googlechat_container_network: "{{ matrix_addons_container_network }}"

  1103. 

  1104. matrix_mautrix_googlechat_container_additional_networks_auto: |-

  1105.   {{

  1106.     (

  1107.       ([] if matrix_addons_homeserver_container_network == '' else [matrix_addons_homeserver_container_network])

  1108.       +

  1109.       ([devture_postgres_container_network] if (devture_postgres_enabled and matrix_mautrix_googlechat_database_hostname == devture_postgres_connection_hostname and matrix_mautrix_googlechat_container_network != devture_postgres_container_network) else [])

  1110.       +

  1111.       ([matrix_playbook_reverse_proxyable_services_additional_network] if (matrix_playbook_reverse_proxyable_services_additional_network and matrix_mautrix_gmessages_container_labels_traefik_enabled) else [])

  1112.     ) | unique

  1113.   }}

  1114. 

  1115. matrix_mautrix_googlechat_container_labels_traefik_enabled: "{{ matrix_playbook_reverse_proxy_type in ['playbook-managed-traefik', 'other-traefik-container'] }}"

  1116. matrix_mautrix_googlechat_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  1117. matrix_mautrix_googlechat_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  1118. matrix_mautrix_googlechat_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  1119. 

  1120. matrix_mautrix_googlechat_container_labels_public_endpoint_hostname: "{{ matrix_server_fqn_matrix }}"

  1121. 

  1122. matrix_mautrix_googlechat_container_labels_metrics_middleware_basic_auth_enabled: "{{ matrix_metrics_exposure_http_basic_auth_enabled }}"

  1123. matrix_mautrix_googlechat_container_labels_metrics_middleware_basic_auth_users: "{{ matrix_metrics_exposure_http_basic_auth_users }}"

  1124. 

  1125. matrix_mautrix_googlechat_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'gc.as.token', rounds=655555) | to_uuid }}"

  1126. 

  1127. matrix_mautrix_googlechat_homeserver_address: "{{ matrix_addons_homeserver_client_api_url }}"

  1128. matrix_mautrix_googlechat_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'gc.hs.token', rounds=655555) | to_uuid }}"

  1129. 

  1130. matrix_mautrix_googlechat_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  1131. 

  1132. matrix_mautrix_googlechat_metrics_enabled: "{{ prometheus_enabled or matrix_metrics_exposure_enabled }}"

  1133. 

  1134. matrix_mautrix_googlechat_metrics_proxying_enabled: "{{ matrix_mautrix_googlechat_metrics_enabled and matrix_metrics_exposure_enabled }}"

  1135. matrix_mautrix_googlechat_metrics_proxying_hostname: "{{ matrix_metrics_exposure_hostname }}"

  1136. matrix_mautrix_googlechat_metrics_proxying_path_prefix: "{{ matrix_metrics_exposure_path_prefix }}/mautrix-googlechat"

  1137. 

  1138. # Postgres is the default, except if not using internal Postgres server

  1139. matrix_mautrix_googlechat_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  1140. matrix_mautrix_googlechat_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1141. matrix_mautrix_googlechat_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mau.gc.db', rounds=655555) | to_uuid }}"

  1142. 

  1143. ######################################################################

  1144. #

  1145. # /matrix-bridge-mautrix-googlechat

  1146. #

  1147. ######################################################################

  1148. 

  1149. 

  1150. ######################################################################

  1151. #

  1152. # matrix-bridge-mautrix-hangouts

  1153. #

  1154. ######################################################################

  1155. 

  1156. # We don't enable bridges by default.

  1157. matrix_mautrix_hangouts_enabled: false

  1158. 

  1159. matrix_mautrix_hangouts_systemd_required_services_list_auto: |

  1160.   {{

  1161.     matrix_addons_homeserver_systemd_services_list

  1162.     +

  1163.     ([devture_postgres_identifier ~ '.service'] if (devture_postgres_enabled and matrix_mautrix_hangouts_database_hostname == devture_postgres_connection_hostname) else [])

  1164.   }}

  1165. 

  1166. matrix_mautrix_hangouts_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"

  1167. 

  1168. matrix_mautrix_hangouts_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '9007') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  1169. 

  1170. matrix_mautrix_hangouts_container_network: "{{ matrix_addons_container_network }}"

  1171. 

  1172. matrix_mautrix_hangouts_container_additional_networks_auto: |-

  1173.   {{

  1174.     (

  1175.       ([] if matrix_addons_homeserver_container_network == '' else [matrix_addons_homeserver_container_network])

  1176.       +

  1177.       ([devture_postgres_container_network] if (devture_postgres_enabled and matrix_mautrix_hangouts_database_hostname == devture_postgres_connection_hostname and matrix_mautrix_hangouts_container_network != devture_postgres_container_network) else [])

  1178.       +

  1179.       ([matrix_playbook_reverse_proxyable_services_additional_network] if (matrix_playbook_reverse_proxyable_services_additional_network and matrix_mautrix_gmessages_container_labels_traefik_enabled) else [])

  1180.     ) | unique

  1181.   }}

  1182. 

  1183. matrix_mautrix_hangouts_container_labels_traefik_enabled: "{{ matrix_playbook_reverse_proxy_type in ['playbook-managed-traefik', 'other-traefik-container'] }}"

  1184. matrix_mautrix_hangouts_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  1185. matrix_mautrix_hangouts_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  1186. matrix_mautrix_hangouts_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  1187. 

  1188. matrix_mautrix_hangouts_container_labels_public_endpoint_hostname: "{{ matrix_server_fqn_matrix }}"

  1189. 

  1190. matrix_mautrix_hangouts_container_labels_metrics_middleware_basic_auth_enabled: "{{ matrix_metrics_exposure_http_basic_auth_enabled }}"

  1191. matrix_mautrix_hangouts_container_labels_metrics_middleware_basic_auth_users: "{{ matrix_metrics_exposure_http_basic_auth_users }}"

  1192. 

  1193. matrix_mautrix_hangouts_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'ho.as.token', rounds=655555) | to_uuid }}"

  1194. 

  1195. matrix_mautrix_hangouts_homeserver_address: "{{ matrix_addons_homeserver_client_api_url }}"

  1196. matrix_mautrix_hangouts_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'ho.hs.token', rounds=655555) | to_uuid }}"

  1197. 

  1198. matrix_mautrix_hangouts_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  1199. 

  1200. matrix_mautrix_hangouts_metrics_enabled: "{{ prometheus_enabled or matrix_metrics_exposure_enabled }}"

  1201. 

  1202. matrix_mautrix_hangouts_metrics_proxying_enabled: "{{ matrix_mautrix_hangouts_metrics_enabled and matrix_metrics_exposure_enabled }}"

  1203. matrix_mautrix_hangouts_metrics_proxying_hostname: "{{ matrix_metrics_exposure_hostname }}"

  1204. matrix_mautrix_hangouts_metrics_proxying_path_prefix: "{{ matrix_metrics_exposure_path_prefix }}/mautrix-hangouts"

  1205. 

  1206. # Postgres is the default, except if not using internal Postgres server

  1207. matrix_mautrix_hangouts_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  1208. matrix_mautrix_hangouts_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1209. matrix_mautrix_hangouts_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mau.hangouts.db', rounds=655555) | to_uuid }}"

  1210. 

  1211. ######################################################################

  1212. #

  1213. # /matrix-bridge-mautrix-hangouts

  1214. #

  1215. ######################################################################

  1216. 

  1217. 

  1218. ######################################################################

  1219. #

  1220. # matrix-bridge-mautrix-instagram

  1221. #

  1222. ######################################################################

  1223. 

  1224. # We don't enable bridges by default.

  1225. matrix_mautrix_instagram_enabled: false

  1226. 

  1227. matrix_mautrix_instagram_systemd_required_services_list_auto: |

  1228.   {{

  1229.     matrix_addons_homeserver_systemd_services_list

  1230.     +

  1231.     ([devture_postgres_identifier ~ '.service'] if (devture_postgres_enabled and matrix_mautrix_instagram_database_hostname == devture_postgres_connection_hostname) else [])

  1232.   }}

  1233. 

  1234. matrix_mautrix_instagram_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"

  1235. 

  1236. matrix_mautrix_instagram_container_network: "{{ matrix_addons_container_network }}"

  1237. 

  1238. matrix_mautrix_instagram_container_additional_networks_auto: |-

  1239.   {{

  1240.     (

  1241.       ([] if matrix_addons_homeserver_container_network == '' else [matrix_addons_homeserver_container_network])

  1242.       +

  1243.       ([devture_postgres_container_network] if (devture_postgres_enabled and matrix_mautrix_instagram_database_hostname == devture_postgres_connection_hostname and matrix_mautrix_instagram_container_network != devture_postgres_container_network) else [])

  1244.       +

  1245.       ([matrix_playbook_reverse_proxyable_services_additional_network] if matrix_playbook_reverse_proxyable_services_additional_network and matrix_mautrix_instagram_container_labels_traefik_enabled else [])

  1246.     ) | unique

  1247.   }}

  1248. 

  1249. matrix_mautrix_instagram_container_labels_traefik_enabled: "{{ matrix_playbook_reverse_proxy_type in ['playbook-managed-traefik', 'other-traefik-container'] }}"

  1250. matrix_mautrix_instagram_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  1251. matrix_mautrix_instagram_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  1252. matrix_mautrix_instagram_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  1253. 

  1254. matrix_mautrix_instagram_container_labels_metrics_middleware_basic_auth_enabled: "{{ matrix_metrics_exposure_http_basic_auth_enabled }}"

  1255. matrix_mautrix_instagram_container_labels_metrics_middleware_basic_auth_users: "{{ matrix_metrics_exposure_http_basic_auth_users }}"

  1256. 

  1257. matrix_mautrix_instagram_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'ig.as.token', rounds=655555) | to_uuid }}"

  1258. 

  1259. matrix_mautrix_instagram_homeserver_address: "{{ matrix_addons_homeserver_client_api_url }}"

  1260. matrix_mautrix_instagram_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'ig.hs.token', rounds=655555) | to_uuid }}"

  1261. 

  1262. matrix_mautrix_instagram_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  1263. 

  1264. matrix_mautrix_instagram_bridge_presence: "{{ matrix_synapse_presence_enabled if matrix_synapse_enabled else true }}"

  1265. 

  1266. matrix_mautrix_instagram_metrics_enabled: "{{ prometheus_enabled or matrix_metrics_exposure_enabled }}"

  1267. 

  1268. matrix_mautrix_instagram_metrics_proxying_enabled: "{{ matrix_mautrix_instagram_metrics_enabled and matrix_metrics_exposure_enabled }}"

  1269. matrix_mautrix_instagram_metrics_proxying_hostname: "{{ matrix_metrics_exposure_hostname }}"

  1270. matrix_mautrix_instagram_metrics_proxying_path_prefix: "{{ matrix_metrics_exposure_path_prefix }}/mautrix-instagram"

  1271. 

  1272. # We'd like to force-set people with external Postgres to SQLite, so the bridge role can complain

  1273. # and point them to a migration path.

  1274. matrix_mautrix_instagram_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  1275. matrix_mautrix_instagram_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1276. matrix_mautrix_instagram_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mau.ig.db', rounds=655555) | to_uuid }}"

  1277. 

  1278. ######################################################################

  1279. #

  1280. # /matrix-bridge-mautrix-instagram

  1281. #

  1282. ######################################################################

  1283. 

  1284. ######################################################################

  1285. #

  1286. # matrix-bridge-mautrix-signal

  1287. #

  1288. ######################################################################

  1289. 

  1290. # We don't enable bridges by default.

  1291. matrix_mautrix_signal_enabled: false

  1292. 

  1293. matrix_mautrix_signal_systemd_required_services_list_auto: |

  1294.   {{

  1295.     matrix_addons_homeserver_systemd_services_list

  1296.     +

  1297.     ([devture_postgres_identifier ~ '.service'] if (devture_postgres_enabled and matrix_mautrix_signal_database_hostname == devture_postgres_connection_hostname) else [])

  1298.   }}

  1299. 

  1300. matrix_mautrix_signal_container_image_self_build: "{{ matrix_architecture not in ['arm64', 'amd64'] }}"

  1301. 

  1302. matrix_mautrix_signal_container_network: "{{ matrix_addons_container_network }}"

  1303. 

  1304. matrix_mautrix_signal_container_additional_networks_auto: |-

  1305.   {{

  1306.     (

  1307.       ([] if matrix_addons_homeserver_container_network == '' else [matrix_addons_homeserver_container_network])

  1308.       +

  1309.       ([devture_postgres_container_network] if (devture_postgres_enabled and matrix_mautrix_signal_database_hostname == devture_postgres_connection_hostname and matrix_mautrix_signal_container_network != devture_postgres_container_network) else [])

  1310.       +

  1311.       ([matrix_playbook_reverse_proxyable_services_additional_network] if matrix_playbook_reverse_proxyable_services_additional_network and matrix_mautrix_signal_container_labels_traefik_enabled else [])

  1312.     ) | unique

  1313.   }}

  1314. 

  1315. matrix_mautrix_signal_container_labels_traefik_enabled: "{{ matrix_playbook_reverse_proxy_type in ['playbook-managed-traefik', 'other-traefik-container'] }}"

  1316. matrix_mautrix_signal_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  1317. matrix_mautrix_signal_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  1318. matrix_mautrix_signal_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  1319. 

  1320. matrix_mautrix_signal_container_labels_metrics_middleware_basic_auth_enabled: "{{ matrix_metrics_exposure_http_basic_auth_enabled }}"

  1321. matrix_mautrix_signal_container_labels_metrics_middleware_basic_auth_users: "{{ matrix_metrics_exposure_http_basic_auth_users }}"

  1322. 

  1323. matrix_mautrix_signal_homeserver_domain: '{{ matrix_domain }}'

  1324. matrix_mautrix_signal_homeserver_address: "{{ matrix_addons_homeserver_client_api_url }}"

  1325. matrix_mautrix_signal_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'si.hs.token', rounds=655555) | to_uuid }}"

  1326. 

  1327. matrix_mautrix_signal_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'si.as.token', rounds=655555) | to_uuid }}"

  1328. 

  1329. matrix_mautrix_signal_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  1330. 

  1331. matrix_mautrix_signal_metrics_enabled: "{{ prometheus_enabled or matrix_metrics_exposure_enabled }}"

  1332. 

  1333. matrix_mautrix_signal_metrics_proxying_enabled: "{{ matrix_mautrix_signal_metrics_enabled and matrix_metrics_exposure_enabled }}"

  1334. matrix_mautrix_signal_metrics_proxying_hostname: "{{ matrix_metrics_exposure_hostname }}"

  1335. matrix_mautrix_signal_metrics_proxying_path_prefix: "{{ matrix_metrics_exposure_path_prefix }}/mautrix-signal"

  1336. 

  1337. matrix_mautrix_signal_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  1338. matrix_mautrix_signal_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1339. matrix_mautrix_signal_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mau.signal.db', rounds=655555) | to_uuid }}"

  1340. 

  1341. ######################################################################

  1342. #

  1343. # /matrix-bridge-mautrix-signal

  1344. #

  1345. ######################################################################

  1346. 

  1347. 

  1348. ######################################################################

  1349. #

  1350. # matrix-bridge-mautrix-meta-messenger

  1351. #

  1352. ######################################################################

  1353. 

  1354. # We don't enable bridges by default.

  1355. matrix_mautrix_meta_messenger_enabled: false

  1356. 

  1357. matrix_mautrix_meta_messenger_systemd_required_services_list_auto: |

  1358.   {{

  1359.     matrix_addons_homeserver_systemd_services_list

  1360.     +

  1361.     ([devture_postgres_identifier ~ '.service'] if (devture_postgres_enabled and matrix_mautrix_meta_messenger_database_hostname == devture_postgres_connection_hostname) else [])

  1362.   }}

  1363. 

  1364. matrix_mautrix_meta_messenger_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"

  1365. 

  1366. matrix_mautrix_meta_messenger_container_network: "{{ matrix_addons_container_network }}"

  1367. 

  1368. matrix_mautrix_meta_messenger_container_additional_networks_auto: |-

  1369.   {{

  1370.     (

  1371.       ([] if matrix_addons_homeserver_container_network == '' else [matrix_addons_homeserver_container_network])

  1372.       +

  1373.       ([devture_postgres_container_network] if (devture_postgres_enabled and matrix_mautrix_meta_messenger_database_hostname == devture_postgres_connection_hostname and matrix_mautrix_meta_messenger_container_network != devture_postgres_container_network) else [])

  1374.       +

  1375.       ([matrix_playbook_reverse_proxyable_services_additional_network] if (matrix_playbook_reverse_proxyable_services_additional_network and matrix_mautrix_meta_messenger_container_labels_traefik_enabled) else [])

  1376.     ) | unique

  1377.   }}

  1378. 

  1379. matrix_mautrix_meta_messenger_container_labels_traefik_enabled: "{{ matrix_playbook_reverse_proxy_type in ['playbook-managed-traefik', 'other-traefik-container'] }}"

  1380. matrix_mautrix_meta_messenger_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  1381. matrix_mautrix_meta_messenger_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  1382. matrix_mautrix_meta_messenger_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  1383. 

  1384. matrix_mautrix_meta_messenger_container_labels_metrics_middleware_basic_auth_enabled: "{{ matrix_metrics_exposure_http_basic_auth_enabled }}"

  1385. matrix_mautrix_meta_messenger_container_labels_metrics_middleware_basic_auth_users: "{{ matrix_metrics_exposure_http_basic_auth_users }}"

  1386. 

  1387. matrix_mautrix_meta_messenger_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mau.meta.fb.as', rounds=655555) | to_uuid }}"

  1388. 

  1389. matrix_mautrix_meta_messenger_homeserver_address: "{{ matrix_addons_homeserver_client_api_url }}"

  1390. 

  1391. matrix_mautrix_meta_messenger_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mau.meta.fb.hs', rounds=655555) | to_uuid }}"

  1392. 

  1393. matrix_mautrix_meta_messenger_bridge_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  1394. 

  1395. matrix_mautrix_meta_messenger_metrics_enabled: "{{ prometheus_enabled or matrix_metrics_exposure_enabled }}"

  1396. 

  1397. matrix_mautrix_meta_messenger_metrics_proxying_enabled: "{{ matrix_mautrix_meta_messenger_metrics_enabled and matrix_metrics_exposure_enabled }}"

  1398. matrix_mautrix_meta_messenger_metrics_proxying_hostname: "{{ matrix_metrics_exposure_hostname }}"

  1399. matrix_mautrix_meta_messenger_metrics_proxying_path_prefix: "{{ matrix_metrics_exposure_path_prefix }}/mautrix-meta-messenger"

  1400. 

  1401. # We'd like to force-set people with external Postgres to SQLite, so the bridge role can complain

  1402. # and point them to a migration path.

  1403. matrix_mautrix_meta_messenger_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite3-fk-wal' }}"

  1404. matrix_mautrix_meta_messenger_database_hostname: "{{ devture_postgres_connection_hostname if (devture_postgres_enabled and matrix_mautrix_meta_messenger_database_engine == 'postgres') else '' }}"

  1405. matrix_mautrix_meta_messenger_database_password: "{{ ('%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mau.fb.db', rounds=655555) | to_uuid) if (devture_postgres_enabled and matrix_mautrix_meta_messenger_database_engine == 'postgres') else '' }}"

  1406. 

  1407. ######################################################################

  1408. #

  1409. # /matrix-bridge-mautrix-meta-messenger

  1410. #

  1411. ######################################################################

  1412. 

  1413. 

  1414. 

  1415. ######################################################################

  1416. #

  1417. # matrix-bridge-mautrix-meta-instagram

  1418. #

  1419. ######################################################################

  1420. 

  1421. # We don't enable bridges by default.

  1422. matrix_mautrix_meta_instagram_enabled: false

  1423. 

  1424. matrix_mautrix_meta_instagram_systemd_required_services_list_auto: |

  1425.   {{

  1426.     matrix_addons_homeserver_systemd_services_list

  1427.     +

  1428.     ([devture_postgres_identifier ~ '.service'] if (devture_postgres_enabled and matrix_mautrix_meta_instagram_database_hostname == devture_postgres_connection_hostname) else [])

  1429.   }}

  1430. 

  1431. matrix_mautrix_meta_instagram_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"

  1432. 

  1433. matrix_mautrix_meta_instagram_container_network: "{{ matrix_addons_container_network }}"

  1434. 

  1435. matrix_mautrix_meta_instagram_container_additional_networks_auto: |-

  1436.   {{

  1437.     (

  1438.       ([] if matrix_addons_homeserver_container_network == '' else [matrix_addons_homeserver_container_network])

  1439.       +

  1440.       ([devture_postgres_container_network] if (devture_postgres_enabled and matrix_mautrix_meta_instagram_database_hostname == devture_postgres_connection_hostname and matrix_mautrix_meta_instagram_container_network != devture_postgres_container_network) else [])

  1441.       +

  1442.       ([matrix_playbook_reverse_proxyable_services_additional_network] if (matrix_playbook_reverse_proxyable_services_additional_network and matrix_mautrix_meta_instagram_container_labels_traefik_enabled) else [])

  1443.     ) | unique

  1444.   }}

  1445. 

  1446. matrix_mautrix_meta_instagram_container_labels_traefik_enabled: "{{ matrix_playbook_reverse_proxy_type in ['playbook-managed-traefik', 'other-traefik-container'] }}"

  1447. matrix_mautrix_meta_instagram_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  1448. matrix_mautrix_meta_instagram_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  1449. matrix_mautrix_meta_instagram_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  1450. 

  1451. matrix_mautrix_meta_instagram_container_labels_metrics_middleware_basic_auth_enabled: "{{ matrix_metrics_exposure_http_basic_auth_enabled }}"

  1452. matrix_mautrix_meta_instagram_container_labels_metrics_middleware_basic_auth_users: "{{ matrix_metrics_exposure_http_basic_auth_users }}"

  1453. 

  1454. matrix_mautrix_meta_instagram_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mau.meta.ig.as', rounds=655555) | to_uuid }}"

  1455. 

  1456. matrix_mautrix_meta_instagram_homeserver_address: "{{ matrix_addons_homeserver_client_api_url }}"

  1457. 

  1458. matrix_mautrix_meta_instagram_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mau.meta.ig.hs', rounds=655555) | to_uuid }}"

  1459. 

  1460. matrix_mautrix_meta_instagram_bridge_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  1461. 

  1462. matrix_mautrix_meta_instagram_metrics_enabled: "{{ prometheus_enabled or matrix_metrics_exposure_enabled }}"

  1463. 

  1464. matrix_mautrix_meta_instagram_metrics_proxying_enabled: "{{ matrix_mautrix_meta_instagram_metrics_enabled and matrix_metrics_exposure_enabled }}"

  1465. matrix_mautrix_meta_instagram_metrics_proxying_hostname: "{{ matrix_metrics_exposure_hostname }}"

  1466. matrix_mautrix_meta_instagram_metrics_proxying_path_prefix: "{{ matrix_metrics_exposure_path_prefix }}/mautrix-meta-instagram"

  1467. 

  1468. # We'd like to force-set people with external Postgres to SQLite, so the bridge role can complain

  1469. # and point them to a migration path.

  1470. matrix_mautrix_meta_instagram_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite3-fk-wal' }}"

  1471. matrix_mautrix_meta_instagram_database_hostname: "{{ devture_postgres_connection_hostname if (devture_postgres_enabled and matrix_mautrix_meta_instagram_database_engine == 'postgres') else '' }}"

  1472. matrix_mautrix_meta_instagram_database_password: "{{ ('%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mau.fb.db', rounds=655555) | to_uuid) if (devture_postgres_enabled and matrix_mautrix_meta_instagram_database_engine == 'postgres') else '' }}"

  1473. 

  1474. ######################################################################

  1475. #

  1476. # /matrix-bridge-mautrix-meta-instagram

  1477. #

  1478. ######################################################################

  1479. 

  1480. 

  1481. ######################################################################

  1482. #

  1483. # matrix-bridge-mautrix-telegram

  1484. #

  1485. ######################################################################

  1486. 

  1487. # We don't enable bridges by default.

  1488. matrix_mautrix_telegram_enabled: false

  1489. 

  1490. matrix_mautrix_telegram_hostname: "{{ matrix_server_fqn_matrix }}"

  1491. matrix_mautrix_telegram_path_prefix: "/{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'telegram', rounds=655555) | to_uuid }}"

  1492. 

  1493. matrix_mautrix_telegram_systemd_required_services_list_auto: |

  1494.   {{

  1495.     matrix_addons_homeserver_systemd_services_list

  1496.     +

  1497.     ([devture_postgres_identifier ~ '.service'] if (devture_postgres_enabled and matrix_mautrix_telegram_database_hostname == devture_postgres_connection_hostname) else [])

  1498.   }}

  1499. 

  1500. # Images are multi-arch (amd64 and arm64, but not arm32).

  1501. matrix_mautrix_telegram_container_image_self_build: "{{ matrix_architecture not in ['arm64', 'amd64'] }}"

  1502. matrix_telegram_lottieconverter_container_image_self_build: "{{ matrix_architecture not in ['arm64', 'amd64'] }}"

  1503. matrix_telegram_lottieconverter_container_image_self_build_mask_arch: "{{ matrix_architecture != 'amd64' }}"

  1504. 

  1505. matrix_mautrix_telegram_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '9006') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  1506. 

  1507. matrix_mautrix_telegram_container_network: "{{ matrix_addons_container_network }}"

  1508. 

  1509. matrix_mautrix_telegram_container_additional_networks_auto: |-

  1510.   {{

  1511.     (

  1512.       ([] if matrix_addons_homeserver_container_network == '' else [matrix_addons_homeserver_container_network])

  1513.       +

  1514.       ([devture_postgres_container_network] if (devture_postgres_enabled and matrix_mautrix_telegram_database_hostname == devture_postgres_connection_hostname and matrix_mautrix_telegram_container_network != devture_postgres_container_network) else [])

  1515.       +

  1516.       ([matrix_playbook_reverse_proxyable_services_additional_network] if (matrix_playbook_reverse_proxyable_services_additional_network and matrix_mautrix_telegram_container_labels_traefik_enabled) else [])

  1517.     ) | unique

  1518.   }}

  1519. 

  1520. matrix_mautrix_telegram_container_labels_traefik_enabled: "{{ matrix_playbook_reverse_proxy_type in ['playbook-managed-traefik', 'other-traefik-container'] }}"

  1521. matrix_mautrix_telegram_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  1522. matrix_mautrix_telegram_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  1523. matrix_mautrix_telegram_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  1524. 

  1525. matrix_mautrix_telegram_container_labels_metrics_middleware_basic_auth_enabled: "{{ matrix_metrics_exposure_http_basic_auth_enabled }}"

  1526. matrix_mautrix_telegram_container_labels_metrics_middleware_basic_auth_users: "{{ matrix_metrics_exposure_http_basic_auth_users }}"

  1527. 

  1528. matrix_mautrix_telegram_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'telegr.as.token', rounds=655555) | to_uuid }}"

  1529. 

  1530. matrix_mautrix_telegram_homeserver_domain: "{{ matrix_domain }}"

  1531. matrix_mautrix_telegram_homeserver_address: "{{ matrix_addons_homeserver_client_api_url }}"

  1532. matrix_mautrix_telegram_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'telegr.hs.token', rounds=655555) | to_uuid }}"

  1533. 

  1534. matrix_mautrix_telegram_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  1535. 

  1536. matrix_mautrix_telegram_metrics_enabled: "{{ prometheus_enabled or matrix_metrics_exposure_enabled }}"

  1537. 

  1538. matrix_mautrix_telegram_metrics_proxying_enabled: "{{ matrix_mautrix_telegram_metrics_enabled and matrix_metrics_exposure_enabled }}"

  1539. matrix_mautrix_telegram_metrics_proxying_hostname: "{{ matrix_metrics_exposure_hostname }}"

  1540. matrix_mautrix_telegram_metrics_proxying_path_prefix: "{{ matrix_metrics_exposure_path_prefix }}/mautrix-telegram"

  1541. 

  1542. # Postgres is the default, except if not using internal Postgres server

  1543. matrix_mautrix_telegram_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  1544. matrix_mautrix_telegram_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1545. matrix_mautrix_telegram_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mau.telegram.db', rounds=655555) | to_uuid }}"

  1546. 

  1547. ######################################################################

  1548. #

  1549. # /matrix-bridge-mautrix-telegram

  1550. #

  1551. ######################################################################

  1552. 

  1553. ######################################################################

  1554. #

  1555. # matrix-bridge-mautrix-twitter

  1556. #

  1557. ######################################################################

  1558. 

  1559. # We don't enable bridges by default.

  1560. matrix_mautrix_twitter_enabled: false

  1561. 

  1562. matrix_mautrix_twitter_systemd_required_services_list_auto: |

  1563.   {{

  1564.     matrix_addons_homeserver_systemd_services_list

  1565.     +

  1566.     ([devture_postgres_identifier ~ '.service'] if (devture_postgres_enabled and matrix_mautrix_twitter_database_hostname == devture_postgres_connection_hostname) else [])

  1567.   }}

  1568. 

  1569. matrix_mautrix_twitter_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"

  1570. 

  1571. matrix_mautrix_twitter_container_network: "{{ matrix_addons_container_network }}"

  1572. 

  1573. matrix_mautrix_twitter_container_additional_networks_auto: |-

  1574.   {{

  1575.     (

  1576.       ([] if matrix_addons_homeserver_container_network == '' else [matrix_addons_homeserver_container_network])

  1577.       +

  1578.       ([devture_postgres_container_network] if (devture_postgres_enabled and matrix_mautrix_twitter_database_hostname == devture_postgres_connection_hostname and matrix_mautrix_twitter_container_network != devture_postgres_container_network) else [])

  1579.       +

  1580.       ([matrix_playbook_reverse_proxyable_services_additional_network] if matrix_playbook_reverse_proxyable_services_additional_network and matrix_mautrix_twitter_container_labels_traefik_enabled else [])

  1581.     ) | unique

  1582.   }}

  1583. 

  1584. matrix_mautrix_twitter_container_labels_traefik_enabled: "{{ matrix_playbook_reverse_proxy_type in ['playbook-managed-traefik', 'other-traefik-container'] }}"

  1585. matrix_mautrix_twitter_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  1586. matrix_mautrix_twitter_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  1587. matrix_mautrix_twitter_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  1588. 

  1589. matrix_mautrix_twitter_container_labels_metrics_middleware_basic_auth_enabled: "{{ matrix_metrics_exposure_http_basic_auth_enabled }}"

  1590. matrix_mautrix_twitter_container_labels_metrics_middleware_basic_auth_users: "{{ matrix_metrics_exposure_http_basic_auth_users }}"

  1591. 

  1592. matrix_mautrix_twitter_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'twt.as.token', rounds=655555) | to_uuid }}"

  1593. 

  1594. matrix_mautrix_twitter_homeserver_address: "{{ matrix_addons_homeserver_client_api_url }}"

  1595. matrix_mautrix_twitter_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'twt.hs.token', rounds=655555) | to_uuid }}"

  1596. 

  1597. matrix_mautrix_twitter_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  1598. 

  1599. matrix_mautrix_twitter_metrics_enabled: "{{ prometheus_enabled or matrix_metrics_exposure_enabled }}"

  1600. 

  1601. matrix_mautrix_twitter_metrics_proxying_enabled: "{{ matrix_mautrix_twitter_metrics_enabled and matrix_metrics_exposure_enabled }}"

  1602. matrix_mautrix_twitter_metrics_proxying_hostname: "{{ matrix_metrics_exposure_hostname }}"

  1603. matrix_mautrix_twitter_metrics_proxying_path_prefix: "{{ matrix_metrics_exposure_path_prefix }}/mautrix-twitter"

  1604. 

  1605. matrix_mautrix_twitter_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1606. matrix_mautrix_twitter_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mau.twt.db', rounds=655555) | to_uuid if devture_postgres_enabled else '' }}"

  1607. 

  1608. ######################################################################

  1609. #

  1610. # /matrix-bridge-mautrix-twitter

  1611. #

  1612. ######################################################################

  1613. 

  1614. ######################################################################

  1615. #

  1616. # matrix-bridge-mautrix-gmessages

  1617. #

  1618. ######################################################################

  1619. 

  1620. # We don't enable bridges by default.

  1621. matrix_mautrix_gmessages_enabled: false

  1622. 

  1623. matrix_mautrix_gmessages_systemd_required_services_list_auto: |

  1624.   {{

  1625.     matrix_addons_homeserver_systemd_services_list

  1626.     +

  1627.     ([devture_postgres_identifier ~ '.service'] if (devture_postgres_enabled and matrix_mautrix_facebook_database_hostname == devture_postgres_connection_hostname) else [])

  1628.   }}

  1629. 

  1630. matrix_mautrix_gmessages_container_image_self_build: "{{ matrix_architecture not in ['arm64', 'amd64'] }}"

  1631. 

  1632. matrix_mautrix_gmessages_container_network: "{{ matrix_addons_container_network }}"

  1633. 

  1634. matrix_mautrix_gmessages_container_additional_networks_auto: |-

  1635.   {{

  1636.     (

  1637.       ([] if matrix_addons_homeserver_container_network == '' else [matrix_addons_homeserver_container_network])

  1638.       +

  1639.       ([devture_postgres_container_network] if (devture_postgres_enabled and matrix_mautrix_gmessages_database_hostname == devture_postgres_connection_hostname and matrix_mautrix_gmessages_container_network != devture_postgres_container_network) else [])

  1640.       +

  1641.       ([matrix_playbook_reverse_proxyable_services_additional_network] if (matrix_playbook_reverse_proxyable_services_additional_network and matrix_mautrix_gmessages_container_labels_traefik_enabled) else [])

  1642.     ) | unique

  1643.   }}

  1644. 

  1645. matrix_mautrix_gmessages_container_labels_traefik_enabled: "{{ matrix_playbook_reverse_proxy_type in ['playbook-managed-traefik', 'other-traefik-container'] }}"

  1646. matrix_mautrix_gmessages_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  1647. matrix_mautrix_gmessages_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  1648. matrix_mautrix_gmessages_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  1649. 

  1650. matrix_mautrix_gmessages_container_labels_metrics_middleware_basic_auth_enabled: "{{ matrix_metrics_exposure_http_basic_auth_enabled }}"

  1651. matrix_mautrix_gmessages_container_labels_metrics_middleware_basic_auth_users: "{{ matrix_metrics_exposure_http_basic_auth_users }}"

  1652. 

  1653. matrix_mautrix_gmessages_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'gmessa.as.token', rounds=655555) | to_uuid }}"

  1654. 

  1655. matrix_mautrix_gmessages_homeserver_address: "{{ matrix_addons_homeserver_client_api_url }}"

  1656. matrix_mautrix_gmessages_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'gmessa.hs.token', rounds=655555) | to_uuid }}"

  1657. 

  1658. matrix_mautrix_gmessages_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  1659. 

  1660. matrix_mautrix_gmessages_metrics_enabled: "{{ prometheus_enabled or matrix_metrics_exposure_enabled }}"

  1661. 

  1662. matrix_mautrix_gmessages_metrics_proxying_enabled: "{{ matrix_mautrix_gmessages_metrics_enabled and matrix_metrics_exposure_enabled }}"

  1663. matrix_mautrix_gmessages_metrics_proxying_hostname: "{{ matrix_metrics_exposure_hostname }}"

  1664. matrix_mautrix_gmessages_metrics_proxying_path_prefix: "{{ matrix_metrics_exposure_path_prefix }}/mautrix-gmessages"

  1665. 

  1666. # Postgres is the default, except if not using internal Postgres server

  1667. matrix_mautrix_gmessages_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  1668. matrix_mautrix_gmessages_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1669. matrix_mautrix_gmessages_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'maugmessages.db', rounds=655555) | to_uuid }}"

  1670. 

  1671. ######################################################################

  1672. #

  1673. # /matrix-bridge-mautrix-gmessages

  1674. #

  1675. ######################################################################

  1676. 

  1677. ######################################################################

  1678. #

  1679. # matrix-bridge-mautrix-wsproxy

  1680. #

  1681. ######################################################################

  1682. 

  1683. # We don't enable bridges by default.

  1684. matrix_mautrix_wsproxy_enabled: false

  1685. 

  1686. matrix_mautrix_wsproxy_systemd_required_services_list_default: |

  1687.   {{

  1688.     matrix_addons_homeserver_systemd_services_list

  1689.     +

  1690.     ([devture_postgres_identifier ~ '.service'] if (devture_postgres_enabled and matrix_mautrix_wsproxy_syncproxy_database_hostname == devture_postgres_connection_hostname) else [])

  1691.   }}

  1692. 

  1693. matrix_mautrix_wsproxy_homeserver_domain: "{{ matrix_domain }}"

  1694. matrix_mautrix_wsproxy_homeserver_address: "{{ matrix_addons_homeserver_client_api_url }}"

  1695. 

  1696. matrix_mautrix_wsproxy_hostname: "wsproxy.{{ matrix_mautrix_wsproxy_homeserver_domain }}"

  1697. 

  1698. matrix_mautrix_wsproxy_syncproxy_homeserver_url: "{{ matrix_addons_homeserver_client_api_url }}"

  1699. 

  1700. matrix_mautrix_wsproxy_container_network: "{{ matrix_addons_container_network }}"

  1701. 

  1702. matrix_mautrix_wsproxy_container_additional_networks: |

  1703.   {{

  1704.     (

  1705.       ([] if matrix_addons_homeserver_container_network == '' else [matrix_addons_homeserver_container_network])

  1706.       +

  1707.       ([matrix_playbook_reverse_proxyable_services_additional_network] if matrix_playbook_reverse_proxyable_services_additional_network else [])

  1708.       +

  1709.       ([devture_postgres_container_network] if (devture_postgres_enabled and matrix_mautrix_wsproxy_syncproxy_database_hostname == devture_postgres_connection_hostname and devture_postgres_container_network != matrix_mautrix_wsproxy_container_network) else [])

  1710.     ) | unique

  1711.   }}

  1712. 

  1713. matrix_mautrix_wsproxy_container_labels_traefik_enabled: "{{ matrix_playbook_reverse_proxy_type in ['playbook-managed-traefik', 'other-traefik-container'] }}"

  1714. matrix_mautrix_wsproxy_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  1715. matrix_mautrix_wsproxy_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  1716. matrix_mautrix_wsproxy_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  1717. 

  1718. matrix_mautrix_wsproxy_syncproxy_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1719. matrix_mautrix_wsproxy_syncproxy_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'wsproxy.db', rounds=655555) | to_uuid }}"

  1720. 

  1721. ######################################################################

  1722. #

  1723. # /matrix-bridge-mautrix-wsproxy

  1724. #

  1725. ######################################################################

  1726. 

  1727. ######################################################################

  1728. #

  1729. # matrix-bridge-wechat

  1730. #

  1731. ######################################################################

  1732. 

  1733. # We don't enable bridges by default.

  1734. matrix_wechat_enabled: false

  1735. 

  1736. matrix_wechat_systemd_required_services_list_auto: |

  1737.   {{

  1738.     matrix_addons_homeserver_systemd_services_list

  1739.     +

  1740.     ([devture_postgres_identifier ~ '.service'] if (devture_postgres_enabled and matrix_wechat_database_hostname == devture_postgres_connection_hostname) else [])

  1741.   }}

  1742. 

  1743. matrix_wechat_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"

  1744. 

  1745. matrix_wechat_agent_container_image_self_build: "{{ matrix_architecture not in ['amd64'] }}"

  1746. 

  1747. matrix_wechat_container_network: "{{ matrix_addons_container_network }}"

  1748. 

  1749. matrix_wechat_container_additional_networks_auto: |-

  1750.   {{

  1751.     (

  1752.       ([] if matrix_addons_homeserver_container_network == '' else [matrix_addons_homeserver_container_network])

  1753.       +

  1754.       ([devture_postgres_container_network] if (devture_postgres_enabled and matrix_wechat_database_hostname == devture_postgres_connection_hostname and matrix_wechat_container_network != devture_postgres_container_network) else [])

  1755.     ) | unique

  1756.   }}

  1757. 

  1758. matrix_wechat_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'wechat.as.token', rounds=655555) | to_uuid }}"

  1759. 

  1760. matrix_wechat_homeserver_address: "{{ matrix_addons_homeserver_client_api_url }}"

  1761. matrix_wechat_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'wechat.hs.token', rounds=655555) | to_uuid }}"

  1762. 

  1763. matrix_wechat_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  1764. 

  1765. matrix_wechat_bridge_listen_secret: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'wechat.lstn', rounds=655555) | to_uuid }}"

  1766. 

  1767. # Postgres is the default, except if not using internal Postgres server

  1768. matrix_wechat_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  1769. matrix_wechat_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1770. matrix_wechat_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'gowechat.db', rounds=655555) | to_uuid }}"

  1771. 

  1772. ######################################################################

  1773. #

  1774. # /matrix-bridge-wechat

  1775. #

  1776. ######################################################################

  1777. 

  1778. ######################################################################

  1779. #

  1780. # matrix-bridge-mautrix-whatsapp

  1781. #

  1782. ######################################################################

  1783. 

  1784. # We don't enable bridges by default.

  1785. matrix_mautrix_whatsapp_enabled: false

  1786. 

  1787. matrix_mautrix_whatsapp_container_image_self_build: "{{ matrix_architecture not in ['arm64', 'amd64'] }}"

  1788. 

  1789. matrix_mautrix_whatsapp_container_network: "{{ matrix_addons_container_network }}"

  1790. 

  1791. matrix_mautrix_whatsapp_container_additional_networks_auto: |-

  1792.   {{

  1793.     (

  1794.       ([] if matrix_addons_homeserver_container_network == '' else [matrix_addons_homeserver_container_network])

  1795.       +

  1796.       ([devture_postgres_container_network] if devture_postgres_enabled and matrix_mautrix_whatsapp_database_hostname == devture_postgres_connection_hostname else [])

  1797.       +

  1798.       ([matrix_playbook_reverse_proxyable_services_additional_network] if matrix_playbook_reverse_proxyable_services_additional_network and matrix_mautrix_whatsapp_container_labels_traefik_enabled else [])

  1799.     ) | unique

  1800.   }}

  1801. 

  1802. matrix_mautrix_whatsapp_container_labels_traefik_enabled: "{{ matrix_playbook_reverse_proxy_type in ['playbook-managed-traefik', 'other-traefik-container'] }}"

  1803. matrix_mautrix_whatsapp_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  1804. matrix_mautrix_whatsapp_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  1805. matrix_mautrix_whatsapp_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  1806. 

  1807. matrix_mautrix_whatsapp_container_labels_metrics_middleware_basic_auth_enabled: "{{ matrix_metrics_exposure_http_basic_auth_enabled }}"

  1808. matrix_mautrix_whatsapp_container_labels_metrics_middleware_basic_auth_users: "{{ matrix_metrics_exposure_http_basic_auth_users }}"

  1809. 

  1810. matrix_mautrix_whatsapp_systemd_required_services_list_auto: |

  1811.   {{

  1812.     matrix_addons_homeserver_systemd_services_list

  1813.     +

  1814.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled and matrix_mautrix_whatsapp_database_hostname == devture_postgres_connection_hostname else [])

  1815.   }}

  1816. 

  1817. matrix_mautrix_whatsapp_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'whats.as.token', rounds=655555) | to_uuid }}"

  1818. 

  1819. matrix_mautrix_whatsapp_homeserver_address: "{{ matrix_addons_homeserver_client_api_url }}"

  1820. matrix_mautrix_whatsapp_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'whats.hs.token', rounds=655555) | to_uuid }}"

  1821. 

  1822. matrix_mautrix_whatsapp_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  1823. 

  1824. matrix_mautrix_whatsapp_metrics_enabled: "{{ prometheus_enabled or matrix_metrics_exposure_enabled }}"

  1825. 

  1826. matrix_mautrix_whatsapp_metrics_proxying_enabled: "{{ matrix_mautrix_whatsapp_metrics_enabled and matrix_metrics_exposure_enabled }}"

  1827. matrix_mautrix_whatsapp_metrics_proxying_hostname: "{{ matrix_metrics_exposure_hostname }}"

  1828. matrix_mautrix_whatsapp_metrics_proxying_path_prefix: "{{ matrix_metrics_exposure_path_prefix }}/mautrix-whatsapp"

  1829. 

  1830. # Postgres is the default, except if not using internal Postgres server

  1831. matrix_mautrix_whatsapp_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  1832. matrix_mautrix_whatsapp_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1833. matrix_mautrix_whatsapp_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mauwhatsapp.db', rounds=655555) | to_uuid }}"

  1834. 

  1835. ######################################################################

  1836. #

  1837. # /matrix-bridge-mautrix-whatsapp

  1838. #

  1839. ######################################################################

  1840. 

  1841. ######################################################################

  1842. #

  1843. # matrix-sms-bridge

  1844. #

  1845. ######################################################################

  1846. 

  1847. # We don't enable bridges by default.

  1848. matrix_sms_bridge_enabled: false

  1849. 

  1850. matrix_sms_bridge_systemd_required_services_list_auto: |

  1851.   {{

  1852.     matrix_addons_homeserver_systemd_services_list

  1853.     +

  1854.     ([devture_postgres_identifier ~ '.service'] if (devture_postgres_enabled and matrix_mautrix_facebook_database_hostname == devture_postgres_connection_hostname) else [])

  1855.   }}

  1856. 

  1857. matrix_sms_bridge_container_network: "{{ matrix_addons_container_network }}"

  1858. 

  1859. matrix_sms_bridge_container_additional_networks_auto: |-

  1860.   {{

  1861.     ([] if matrix_addons_homeserver_container_network == '' else [matrix_addons_homeserver_container_network])

  1862.   }}

  1863. 

  1864. matrix_sms_bridge_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'sms.as.token', rounds=655555) | to_uuid }}"

  1865. 

  1866. matrix_sms_bridge_homeserver_hostname: "{{ (matrix_homeserver_container_client_api_endpoint | split(':'))[0] }}"

  1867. matrix_sms_bridge_homeserver_port: "{{ (matrix_homeserver_container_client_api_endpoint | split(':'))[1] }}"

  1868. matrix_sms_bridge_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'sms.hs.token', rounds=655555) | to_uuid }}"

  1869. 

  1870. ######################################################################

  1871. #

  1872. # /matrix-sms-bridge

  1873. #

  1874. ######################################################################

  1875. 

  1876. ######################################################################

  1877. #

  1878. # matrix-bridge-heisenbridge

  1879. #

  1880. ######################################################################

  1881. 

  1882. # We don't enable bridges by default.

  1883. matrix_heisenbridge_enabled: false

  1884. 

  1885. matrix_heisenbridge_systemd_required_services_list_auto: |

  1886.   {{

  1887.     matrix_addons_homeserver_systemd_services_list

  1888.   }}

  1889. 

  1890. matrix_heisenbridge_container_network: "{{ matrix_addons_container_network }}"

  1891. 

  1892. matrix_heisenbridge_container_additional_networks_auto: |-

  1893.   {{

  1894.     ([] if matrix_addons_homeserver_container_network == '' else [matrix_addons_homeserver_container_network])

  1895.   }}

  1896. 

  1897. matrix_heisenbridge_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'heisen.as.tok', rounds=655555) | to_uuid }}"

  1898. 

  1899. matrix_heisenbridge_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'heisen.hs.tok', rounds=655555) | to_uuid }}"

  1900. 

  1901. matrix_heisenbridge_homeserver_url: "{{ matrix_addons_homeserver_client_api_url }}"

  1902. 

  1903. ######################################################################

  1904. #

  1905. # /matrix-bridge-heisenbridge

  1906. #

  1907. ######################################################################

  1908. 

  1909. ######################################################################

  1910. #

  1911. # matrix-bridge-hookshot

  1912. #

  1913. ######################################################################

  1914. 

  1915. # We don't enable bridges by default.

  1916. matrix_hookshot_enabled: false

  1917. 

  1918. matrix_hookshot_container_image_self_build: "{{ matrix_architecture not in ['arm64', 'amd64'] }}"

  1919. 

  1920. matrix_hookshot_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'hookshot.as.tok', rounds=655555) | to_uuid }}"

  1921. 

  1922. matrix_hookshot_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'hookshot.hs.tok', rounds=655555) | to_uuid }}"

  1923. 

  1924. matrix_hookshot_homeserver_address: "{{ matrix_addons_homeserver_client_api_url }}"

  1925. 

  1926. matrix_hookshot_systemd_wanted_services_list: |

  1927.   {{

  1928.     matrix_addons_homeserver_systemd_services_list

  1929.     +

  1930.     ([(redis_identifier + '.service')] if redis_enabled and matrix_hookshot_cache_redis_host == redis_identifier else [])

  1931.     +

  1932.     ([(keydb_identifier + '.service')] if keydb_enabled and matrix_hookshot_cache_redis_host == keydb_identifier else [])

  1933.   }}

  1934. 

  1935. # Hookshot's experimental encryption feature (and possibly others) may benefit from Redis, if available.

  1936. # We only connect to Redis if encryption is enabled (not for everyone who has Redis enabled),

  1937. # because connectivity is still potentially troublesome and is to be investigated.

  1938. matrix_hookshot_cache_redis_host: "{{ redis_identifier if redis_enabled and matrix_hookshot_experimental_encryption_enabled else (keydb_identifier if keydb_enabled and matrix_hookshot_experimental_encryption_enabled else '') }}"

  1939. 

  1940. matrix_hookshot_container_network: "{{ matrix_addons_container_network }}"

  1941. 

  1942. matrix_hookshot_container_additional_networks_auto: |

  1943.   {{

  1944.     (

  1945.       ([] if matrix_addons_homeserver_container_network == '' else [matrix_addons_homeserver_container_network])

  1946.       +

  1947.       ([redis_container_network] if redis_enabled and matrix_hookshot_cache_redis_host == redis_identifier else [])

  1948.       +

  1949.       ([keydb_container_network] if keydb_enabled and matrix_hookshot_cache_redis_host == keydb_identifier else [])

  1950.       +

  1951.       ([matrix_playbook_reverse_proxyable_services_additional_network] if matrix_playbook_reverse_proxyable_services_additional_network and matrix_hookshot_container_labels_traefik_enabled else [])

  1952.     ) | unique

  1953.   }}

  1954. 

  1955. matrix_hookshot_container_http_host_bind_ports_defaultmapping:

  1956.   - "{{ matrix_playbook_service_host_bind_interface_prefix }}{{ matrix_hookshot_appservice_port }}:{{ matrix_hookshot_appservice_port }}"

  1957.   - "{{ matrix_playbook_service_host_bind_interface_prefix }}{{ matrix_hookshot_metrics_port }}:{{ matrix_hookshot_metrics_port }}"

  1958.   - "{{ matrix_playbook_service_host_bind_interface_prefix }}{{ matrix_hookshot_webhook_port }}:{{ matrix_hookshot_webhook_port }}"

  1959.   - "{{ matrix_playbook_service_host_bind_interface_prefix }}{{ matrix_hookshot_provisioning_port }}:{{ matrix_hookshot_provisioning_port }}"

  1960. 

  1961. matrix_hookshot_container_http_host_bind_ports: "{{ matrix_hookshot_container_http_host_bind_ports_defaultmapping if matrix_playbook_service_host_bind_interface_prefix else [] }}"

  1962. 

  1963. matrix_hookshot_container_labels_traefik_enabled: "{{ matrix_playbook_reverse_proxy_type in ['playbook-managed-traefik', 'other-traefik-container'] }}"

  1964. matrix_hookshot_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  1965. matrix_hookshot_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  1966. matrix_hookshot_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  1967. 

  1968. matrix_hookshot_provisioning_enabled: "{{ matrix_hookshot_provisioning_secret and matrix_dimension_enabled }}"

  1969. 

  1970. matrix_hookshot_metrics_enabled: "{{ prometheus_enabled or matrix_metrics_exposure_enabled }}"

  1971. 

  1972. matrix_hookshot_metrics_proxying_enabled: "{{ matrix_hookshot_metrics_enabled and matrix_metrics_exposure_enabled }}"

  1973. matrix_hookshot_metrics_proxying_hostname: "{{ matrix_metrics_exposure_hostname }}"

  1974. matrix_hookshot_metrics_proxying_path_prefix: "{{ matrix_metrics_exposure_path_prefix }}/hookshot"

  1975. matrix_hookshot_container_labels_metrics_middleware_basic_auth_enabled: "{{ matrix_metrics_exposure_http_basic_auth_enabled }}"

  1976. matrix_hookshot_container_labels_metrics_middleware_basic_auth_users: "{{ matrix_metrics_exposure_http_basic_auth_users }}"

  1977. 

  1978. matrix_hookshot_public_scheme: "{{ 'https' if matrix_playbook_ssl_enabled else 'http' }}"

  1979. matrix_hookshot_public_hostname: "{{ matrix_server_fqn_matrix }}"

  1980. 

  1981. ######################################################################

  1982. #

  1983. # /matrix-bridge-hookshot

  1984. #

  1985. ######################################################################

  1986. 

  1987. 

  1988. ######################################################################

  1989. #

  1990. # matrix-bridge-mx-puppet-slack

  1991. #

  1992. ######################################################################

  1993. 

  1994. # We don't enable bridges by default.

  1995. matrix_mx_puppet_slack_enabled: false

  1996. 

  1997. matrix_mx_puppet_slack_hostname: "{{ matrix_server_fqn_matrix }}"

  1998. 

  1999. matrix_mx_puppet_slack_systemd_required_services_list_auto: |

  2000.   {{

  2001.     matrix_addons_homeserver_systemd_services_list

  2002.     +

  2003.     ([devture_postgres_identifier ~ '.service'] if (devture_postgres_enabled and matrix_mx_puppet_slack_database_hostname == devture_postgres_connection_hostname) else [])

  2004.   }}

  2005. 

  2006. matrix_mx_puppet_slack_container_image_self_build: "{{ matrix_architecture != 'amd64' }}"

  2007. 

  2008. matrix_mx_puppet_slack_container_network: "{{ matrix_addons_container_network }}"

  2009. 

  2010. matrix_mx_puppet_slack_container_additional_networks_auto: |-

  2011.   {{

  2012.     (

  2013.       ([] if matrix_addons_homeserver_container_network == '' else [matrix_addons_homeserver_container_network])

  2014.       +

  2015.       ([devture_postgres_container_network] if (devture_postgres_enabled and matrix_mx_puppet_slack_database_hostname == devture_postgres_connection_hostname and matrix_mx_puppet_slack_container_network != devture_postgres_container_network) else [])

  2016.       +

  2017.       ([matrix_playbook_reverse_proxyable_services_additional_network] if (matrix_playbook_reverse_proxyable_services_additional_network and matrix_mx_puppet_slack_container_labels_traefik_enabled) else [])

  2018.     ) | unique

  2019.   }}

  2020. 

  2021. matrix_mx_puppet_slack_container_labels_traefik_enabled: "{{ matrix_playbook_reverse_proxy_type in ['playbook-managed-traefik', 'other-traefik-container'] }}"

  2022. matrix_mx_puppet_slack_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  2023. matrix_mx_puppet_slack_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  2024. matrix_mx_puppet_slack_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  2025. 

  2026. matrix_mx_puppet_slack_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxslk.as.tok', rounds=655555) | to_uuid }}"

  2027. 

  2028. matrix_mx_puppet_slack_homeserver_address: "{{ matrix_addons_homeserver_client_api_url }}"

  2029. matrix_mx_puppet_slack_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxslk.hs.tok', rounds=655555) | to_uuid }}"

  2030. 

  2031. matrix_mx_puppet_slack_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  2032. 

  2033. matrix_mx_puppet_slack_presence_enabled: "{{ matrix_homeserver_implementation != 'synapse' or matrix_synapse_presence_enabled }}"

  2034. 

  2035. # Postgres is the default, except if not using internal Postgres server

  2036. matrix_mx_puppet_slack_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  2037. matrix_mx_puppet_slack_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  2038. matrix_mx_puppet_slack_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxpup.slack.db', rounds=655555) | to_uuid }}"

  2039. 

  2040. ######################################################################

  2041. #

  2042. # /matrix-bridge-mx-puppet-slack

  2043. #

  2044. ######################################################################

  2045. 

  2046. ######################################################################

  2047. #

  2048. # matrix-bridge-mx-puppet-twitter

  2049. #

  2050. ######################################################################

  2051. 

  2052. # We don't enable bridges by default.

  2053. matrix_mx_puppet_twitter_enabled: false

  2054. 

  2055. matrix_mx_puppet_twitter_hostname: "{{ matrix_server_fqn_matrix }}"

  2056. 

  2057. matrix_mx_puppet_twitter_systemd_required_services_list_auto: |

  2058.   {{

  2059.     matrix_addons_homeserver_systemd_services_list

  2060.     +

  2061.     ([devture_postgres_identifier ~ '.service'] if (devture_postgres_enabled and matrix_mx_puppet_twitter_database_hostname == devture_postgres_connection_hostname) else [])

  2062.   }}

  2063. 

  2064. matrix_mx_puppet_twitter_container_image_self_build: "{{ matrix_architecture != 'amd64' }}"

  2065. 

  2066. matrix_mx_puppet_twitter_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '' ~ matrix_mx_puppet_twitter_appservice_port) if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  2067. 

  2068. matrix_mx_puppet_twitter_container_network: "{{ matrix_addons_container_network }}"

  2069. 

  2070. matrix_mx_puppet_twitter_container_additional_networks_auto: |-

  2071.   {{

  2072.     (

  2073.       ([] if matrix_addons_homeserver_container_network == '' else [matrix_addons_homeserver_container_network])

  2074.       +

  2075.       ([devture_postgres_container_network] if (devture_postgres_enabled and matrix_mx_puppet_twitter_database_hostname == devture_postgres_connection_hostname and matrix_mx_puppet_twitter_container_network != devture_postgres_container_network) else [])

  2076.       +

  2077.       ([matrix_playbook_reverse_proxyable_services_additional_network] if (matrix_playbook_reverse_proxyable_services_additional_network and matrix_mx_puppet_twitter_container_labels_traefik_enabled) else [])

  2078.     ) | unique

  2079.   }}

  2080. 

  2081. matrix_mx_puppet_twitter_container_labels_traefik_enabled: "{{ matrix_playbook_reverse_proxy_type in ['playbook-managed-traefik', 'other-traefik-container'] }}"

  2082. matrix_mx_puppet_twitter_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  2083. matrix_mx_puppet_twitter_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  2084. matrix_mx_puppet_twitter_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  2085. 

  2086. matrix_mx_puppet_twitter_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxtwt.as.tok', rounds=655555) | to_uuid }}"

  2087. 

  2088. matrix_mx_puppet_twitter_homeserver_address: "{{ matrix_addons_homeserver_client_api_url }}"

  2089. matrix_mx_puppet_twitter_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxtwt.hs.tok', rounds=655555) | to_uuid }}"

  2090. 

  2091. matrix_mx_puppet_twitter_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  2092. 

  2093. matrix_mx_puppet_twitter_presence_enabled: "{{ matrix_homeserver_implementation != 'synapse' or matrix_synapse_presence_enabled }}"

  2094. 

  2095. # Postgres is the default, except if not using internal Postgres server

  2096. matrix_mx_puppet_twitter_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  2097. matrix_mx_puppet_twitter_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  2098. matrix_mx_puppet_twitter_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxpup.twitter.db', rounds=655555) | to_uuid }}"

  2099. 

  2100. ######################################################################

  2101. #

  2102. # /matrix-bridge-mx-puppet-twitter

  2103. #

  2104. ######################################################################

  2105. 

  2106. 

  2107. ######################################################################

  2108. #

  2109. # matrix-bridge-mx-puppet-instagram

  2110. #

  2111. ######################################################################

  2112. 

  2113. # We don't enable bridges by default.

  2114. matrix_mx_puppet_instagram_enabled: false

  2115. 

  2116. matrix_mx_puppet_instagram_systemd_required_services_list_auto: |

  2117.   {{

  2118.     matrix_addons_homeserver_systemd_services_list

  2119.     +

  2120.     ([devture_postgres_identifier ~ '.service'] if (devture_postgres_enabled and matrix_mx_puppet_instagram_database_hostname == devture_postgres_connection_hostname) else [])

  2121.   }}

  2122. 

  2123. matrix_mx_puppet_instagram_container_image_self_build: "{{ matrix_architecture != 'amd64' }}"

  2124. 

  2125. matrix_mx_puppet_instagram_container_network: "{{ matrix_addons_container_network }}"

  2126. 

  2127. matrix_mx_puppet_instagram_container_additional_networks_auto: |-

  2128.   {{

  2129.     (

  2130.       ([] if matrix_addons_homeserver_container_network == '' else [matrix_addons_homeserver_container_network])

  2131.       +

  2132.       ([devture_postgres_container_network] if (devture_postgres_enabled and matrix_mx_puppet_instagram_database_hostname == devture_postgres_connection_hostname and matrix_mx_puppet_instagram_container_network != devture_postgres_container_network) else [])

  2133.     ) | unique

  2134.   }}

  2135. 

  2136. matrix_mx_puppet_instagram_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxig.as.tok', rounds=655555) | to_uuid }}"

  2137. 

  2138. matrix_mx_puppet_instagram_homeserver_address: "{{ matrix_addons_homeserver_client_api_url }}"

  2139. matrix_mx_puppet_instagram_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxig.hs.tok', rounds=655555) | to_uuid }}"

  2140. 

  2141. matrix_mx_puppet_instagram_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  2142. 

  2143. matrix_mx_puppet_instagram_presence_enabled: "{{ matrix_homeserver_implementation != 'synapse' or matrix_synapse_presence_enabled }}"

  2144. 

  2145. # Postgres is the default, except if not using internal Postgres server

  2146. matrix_mx_puppet_instagram_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  2147. matrix_mx_puppet_instagram_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  2148. matrix_mx_puppet_instagram_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxpup.ig.db', rounds=655555) | to_uuid }}"

  2149. 

  2150. ######################################################################

  2151. #

  2152. # /matrix-bridge-mx-puppet-instagram

  2153. #

  2154. ######################################################################

  2155. 

  2156. ######################################################################

  2157. #

  2158. # matrix-bridge-mx-puppet-discord

  2159. #

  2160. ######################################################################

  2161. 

  2162. # We don't enable bridges by default.

  2163. matrix_mx_puppet_discord_enabled: false

  2164. 

  2165. matrix_mx_puppet_discord_systemd_required_services_list_auto: |

  2166.   {{

  2167.     matrix_addons_homeserver_systemd_services_list

  2168.     +

  2169.     ([devture_postgres_identifier ~ '.service'] if (devture_postgres_enabled and matrix_mx_puppet_discord_database_hostname == devture_postgres_connection_hostname) else [])

  2170.   }}

  2171. 

  2172. matrix_mx_puppet_discord_container_image_self_build: "{{ matrix_architecture != 'amd64' }}"

  2173. 

  2174. matrix_mx_puppet_discord_container_network: "{{ matrix_addons_container_network }}"

  2175. 

  2176. matrix_mx_puppet_discord_container_additional_networks_auto: |-

  2177.   {{

  2178.     (

  2179.       ([] if matrix_addons_homeserver_container_network == '' else [matrix_addons_homeserver_container_network])

  2180.       +

  2181.       ([devture_postgres_container_network] if (devture_postgres_enabled and matrix_mx_puppet_discord_database_hostname == devture_postgres_connection_hostname and matrix_mx_puppet_discord_container_network != devture_postgres_container_network) else [])

  2182.     ) | unique

  2183.   }}

  2184. 

  2185. matrix_mx_puppet_discord_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxdsc.as.tok', rounds=655555) | to_uuid }}"

  2186. 

  2187. matrix_mx_puppet_discord_homeserver_address: "{{ matrix_addons_homeserver_client_api_url }}"

  2188. matrix_mx_puppet_discord_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxdsc.hs.tok', rounds=655555) | to_uuid }}"

  2189. 

  2190. matrix_mx_puppet_discord_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  2191. 

  2192. matrix_mx_puppet_discord_presence_enabled: "{{ matrix_homeserver_implementation != 'synapse' or matrix_synapse_presence_enabled }}"

  2193. 

  2194. # Postgres is the default, except if not using internal Postgres server

  2195. matrix_mx_puppet_discord_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  2196. matrix_mx_puppet_discord_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  2197. matrix_mx_puppet_discord_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxpup.dsc.db', rounds=655555) | to_uuid }}"

  2198. 

  2199. ######################################################################

  2200. #

  2201. # /matrix-bridge-mx-puppet-discord

  2202. #

  2203. ######################################################################

  2204. 

  2205. ######################################################################

  2206. #

  2207. # matrix-bridge-mx-puppet-steam

  2208. #

  2209. ######################################################################

  2210. 

  2211. # We don't enable bridges by default.

  2212. matrix_mx_puppet_steam_enabled: false

  2213. 

  2214. matrix_mx_puppet_steam_systemd_required_services_list_auto: |

  2215.   {{

  2216.     matrix_addons_homeserver_systemd_services_list

  2217.     +

  2218.     ([devture_postgres_identifier ~ '.service'] if (devture_postgres_enabled and matrix_mx_puppet_steam_database_hostname == devture_postgres_connection_hostname) else [])

  2219.   }}

  2220. 

  2221. matrix_mx_puppet_steam_container_image_self_build: "{{ matrix_architecture not in ['arm64', 'amd64'] }}"

  2222. 

  2223. matrix_mx_puppet_steam_container_network: "{{ matrix_addons_container_network }}"

  2224. 

  2225. matrix_mx_puppet_steam_container_additional_networks_auto: |-

  2226.   {{

  2227.     (

  2228.       ([] if matrix_addons_homeserver_container_network == '' else [matrix_addons_homeserver_container_network])

  2229.       +

  2230.       ([devture_postgres_container_network] if (devture_postgres_enabled and matrix_mx_puppet_steam_database_hostname == devture_postgres_connection_hostname and matrix_mx_puppet_steam_container_network != devture_postgres_container_network) else [])

  2231.     ) | unique

  2232.   }}

  2233. 

  2234. matrix_mx_puppet_steam_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxste.as.tok', rounds=655555) | to_uuid }}"

  2235. 

  2236. matrix_mx_puppet_steam_homeserver_address: "{{ matrix_addons_homeserver_client_api_url }}"

  2237. matrix_mx_puppet_steam_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxste.hs.tok', rounds=655555) | to_uuid }}"

  2238. 

  2239. matrix_mx_puppet_steam_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  2240. 

  2241. matrix_mx_puppet_steam_presence_enabled: "{{ matrix_homeserver_implementation != 'synapse' or matrix_synapse_presence_enabled }}"

  2242. 

  2243. # Postgres is the default, except if not using internal Postgres server

  2244. matrix_mx_puppet_steam_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  2245. matrix_mx_puppet_steam_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  2246. matrix_mx_puppet_steam_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxpup.steam.db', rounds=655555) | to_uuid }}"

  2247. 

  2248. ######################################################################

  2249. #

  2250. # /matrix-bridge-mx-puppet-steam

  2251. #

  2252. ######################################################################

  2253. 

  2254. 

  2255. ######################################################################

  2256. #

  2257. # matrix-bridge-mx-puppet-groupme

  2258. #

  2259. ######################################################################

  2260. 

  2261. # We don't enable bridges by default.

  2262. matrix_mx_puppet_groupme_enabled: false

  2263. 

  2264. matrix_mx_puppet_groupme_systemd_required_services_list_auto: |

  2265.   {{

  2266.     matrix_addons_homeserver_systemd_services_list

  2267.     +

  2268.     ([devture_postgres_identifier ~ '.service'] if (devture_postgres_enabled and matrix_mx_puppet_groupme_database_hostname == devture_postgres_connection_hostname) else [])

  2269.   }}

  2270. 

  2271. matrix_mx_puppet_groupme_container_image_self_build: "{{ matrix_architecture != 'amd64' }}"

  2272. 

  2273. matrix_mx_puppet_groupme_container_network: "{{ matrix_addons_container_network }}"

  2274. 

  2275. matrix_mx_puppet_groupme_container_additional_networks_auto: |-

  2276.   {{

  2277.     (

  2278.       ([] if matrix_addons_homeserver_container_network == '' else [matrix_addons_homeserver_container_network])

  2279.       +

  2280.       ([devture_postgres_container_network] if (devture_postgres_enabled and matrix_mx_puppet_groupme_database_hostname == devture_postgres_connection_hostname and matrix_mx_puppet_groupme_container_network != devture_postgres_container_network) else [])

  2281.     ) | unique

  2282.   }}

  2283. 

  2284. matrix_mx_puppet_groupme_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxgro.as.tok', rounds=655555) | to_uuid }}"

  2285. 

  2286. matrix_mx_puppet_groupme_homeserver_address: "{{ matrix_addons_homeserver_client_api_url }}"

  2287. matrix_mx_puppet_groupme_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxgro.hs.tok', rounds=655555) | to_uuid }}"

  2288. 

  2289. matrix_mx_puppet_groupme_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  2290. 

  2291. matrix_mx_puppet_groupme_presence_enabled: "{{ matrix_homeserver_implementation != 'synapse' or matrix_synapse_presence_enabled }}"

  2292. 

  2293. # Postgres is the default, except if not using internal Postgres server

  2294. matrix_mx_puppet_groupme_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  2295. matrix_mx_puppet_groupme_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  2296. matrix_mx_puppet_groupme_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxpup.groupme.db', rounds=655555) | to_uuid }}"

  2297. 

  2298. ######################################################################

  2299. #

  2300. # /matrix-bridge-mx-puppet-groupme

  2301. #

  2302. ######################################################################

  2303. 

  2304. 

  2305. ######################################################################

  2306. #

  2307. # matrix-bot-matrix-reminder-bot

  2308. #

  2309. ######################################################################

  2310. 

  2311. # We don't enable bots by default.

  2312. matrix_bot_matrix_reminder_bot_enabled: false

  2313. 

  2314. matrix_bot_matrix_reminder_bot_systemd_required_services_list_auto: |

  2315.   {{

  2316.     matrix_addons_homeserver_systemd_services_list

  2317.     +

  2318.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled and matrix_bot_matrix_reminder_bot_database_hostname == devture_postgres_connection_hostname else [])

  2319.   }}

  2320. 

  2321. matrix_bot_matrix_reminder_bot_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"

  2322. 

  2323. matrix_bot_matrix_reminder_bot_container_network: "{{ matrix_addons_container_network }}"

  2324. 

  2325. matrix_bot_matrix_reminder_bot_container_additional_networks_auto: |-

  2326.   {{

  2327.     (

  2328.       ([] if matrix_addons_homeserver_container_network == '' else [matrix_addons_homeserver_container_network])

  2329.       +

  2330.       ([devture_postgres_container_network] if devture_postgres_enabled and matrix_bot_matrix_reminder_bot_database_hostname == devture_postgres_connection_hostname else [])

  2331.     ) | unique

  2332.   }}

  2333. 

  2334. matrix_bot_matrix_reminder_bot_matrix_homeserver_url: "{{ matrix_addons_homeserver_client_api_url }}"

  2335. 

  2336. # Postgres is the default, except if not using internal Postgres server

  2337. matrix_bot_matrix_reminder_bot_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  2338. matrix_bot_matrix_reminder_bot_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  2339. matrix_bot_matrix_reminder_bot_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'reminder.bot.db', rounds=655555) | to_uuid }}"

  2340. 

  2341. matrix_bot_matrix_reminder_bot_allowlist_enabled: true

  2342. matrix_bot_matrix_reminder_bot_allowlist_regexes_auto:

  2343.   - "@[a-z0-9-_.]+:{{ matrix_domain }}"

  2344. 

  2345. ######################################################################

  2346. #

  2347. # /matrix-bot-matrix-reminder-bot

  2348. #

  2349. ######################################################################

  2350. 

  2351. 

  2352. ######################################################################

  2353. #

  2354. # matrix-bot-matrix-registration-bot

  2355. #

  2356. ######################################################################

  2357. 

  2358. # We don't enable bots by default.

  2359. matrix_bot_matrix_registration_bot_enabled: false

  2360. 

  2361. matrix_bot_matrix_registration_bot_systemd_required_services_list_auto: |

  2362.   {{

  2363.     matrix_addons_homeserver_systemd_services_list

  2364.   }}

  2365. 

  2366. matrix_bot_matrix_registration_bot_container_image_self_build: "{{ matrix_architecture not in ['amd64'] }}"

  2367. 

  2368. matrix_bot_matrix_registration_bot_container_network: "{{ matrix_addons_container_network }}"

  2369. 

  2370. matrix_bot_matrix_registration_bot_container_additional_networks_auto: |-

  2371.   {{

  2372.     ([] if matrix_addons_homeserver_container_network == '' else [matrix_addons_homeserver_container_network])

  2373.   }}

  2374. 

  2375. matrix_bot_matrix_registration_bot_matrix_homeserver_url: "{{ matrix_addons_homeserver_client_api_url }}"

  2376. 

  2377. ######################################################################

  2378. #

  2379. # /matrix-bot-matrix-registration-bot

  2380. #

  2381. ######################################################################

  2382. 

  2383. ######################################################################

  2384. #

  2385. # matrix-bot-maubot

  2386. #

  2387. ######################################################################

  2388. 

  2389. # We don't enable bots by default.

  2390. matrix_bot_maubot_enabled: false

  2391. 

  2392. matrix_bot_maubot_systemd_required_services_list_auto: |

  2393.   {{

  2394.     matrix_addons_homeserver_systemd_services_list

  2395.     +

  2396.     ([devture_postgres_identifier ~ '.service'] if (devture_postgres_enabled and matrix_bot_maubot_database_hostname == devture_postgres_connection_hostname) else [])

  2397.   }}

  2398. 

  2399. matrix_bot_maubot_hostname: "{{ matrix_server_fqn_matrix }}"

  2400. 

  2401. matrix_bot_maubot_homeserver_url: "{{ matrix_addons_homeserver_client_api_url }}"

  2402. 

  2403. matrix_bot_maubot_homeserver_secret: |-

  2404.   {{

  2405.     {

  2406.       'synapse': matrix_synapse_registration_shared_secret | default(''),

  2407.       'dendrite': matrix_dendrite_client_api_registration_shared_secret | default(''),

  2408.     }[matrix_homeserver_implementation]

  2409.   }}

  2410. 

  2411. matrix_bot_maubot_container_image_self_build: "{{ matrix_architecture not in ['amd64'] }}"

  2412. 

  2413. matrix_bot_maubot_container_management_interface_http_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '' ~ matrix_bot_maubot_server_port | string) if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  2414. 

  2415. matrix_bot_maubot_container_network: "{{ matrix_addons_container_network }}"

  2416. 

  2417. matrix_bot_maubot_container_additional_networks_auto: |-

  2418.   {{

  2419.     (

  2420.       ([] if matrix_addons_homeserver_container_network == '' else [matrix_addons_homeserver_container_network])

  2421.       +

  2422.       ([devture_postgres_container_network] if (devture_postgres_enabled and matrix_bot_maubot_database_hostname == devture_postgres_connection_hostname and matrix_bot_maubot_container_network != devture_postgres_container_network) else [])

  2423.       +

  2424.       ([matrix_playbook_reverse_proxyable_services_additional_network] if matrix_playbook_reverse_proxyable_services_additional_network and matrix_bot_maubot_container_labels_traefik_enabled else [])

  2425.     ) | unique

  2426.   }}

  2427. 

  2428. matrix_bot_maubot_container_labels_traefik_enabled: "{{ matrix_playbook_reverse_proxy_type in ['playbook-managed-traefik', 'other-traefik-container'] }}"

  2429. matrix_bot_maubot_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  2430. matrix_bot_maubot_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  2431. matrix_bot_maubot_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  2432. 

  2433. matrix_bot_maubot_container_labels_management_hostname: "{{ matrix_server_fqn_matrix }}"

  2434. 

  2435. # Postgres is the default, except if not using internal Postgres server

  2436. matrix_bot_maubot_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  2437. matrix_bot_maubot_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  2438. matrix_bot_maubot_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxpup.dsc.db', rounds=655555) | to_uuid }}"

  2439. 

  2440. ######################################################################

  2441. #

  2442. # /matrix-bot-maubot

  2443. #

  2444. ######################################################################

  2445. 

  2446. 

  2447. ######################################################################

  2448. #

  2449. # matrix-bot-honoroit

  2450. #

  2451. ######################################################################

  2452. 

  2453. # We don't enable bots by default.

  2454. matrix_bot_honoroit_enabled: false

  2455. 

  2456. matrix_bot_honoroit_hostname: "{{ matrix_server_fqn_matrix }}"

  2457. 

  2458. matrix_bot_honoroit_path_prefix: /honoroit

  2459. 

  2460. matrix_bot_honoroit_systemd_required_services_list_auto: |

  2461.   {{

  2462.     matrix_addons_homeserver_systemd_services_list

  2463.     +

  2464.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled and matrix_bot_honoroit_database_hostname == devture_postgres_connection_hostname else [])

  2465.   }}

  2466. 

  2467. matrix_bot_honoroit_container_network: "{{ matrix_addons_container_network }}"

  2468. 

  2469. matrix_bot_honoroit_container_additional_networks: |

  2470.   {{

  2471.     (

  2472.       ([] if matrix_addons_homeserver_container_network == '' else [matrix_addons_homeserver_container_network])

  2473.       +

  2474.       ([devture_postgres_container_network] if (devture_postgres_enabled and matrix_bot_honoroit_database_hostname == devture_postgres_connection_hostname and matrix_bot_honoroit_container_network != devture_postgres_container_network) else [])

  2475.       +

  2476.       ([matrix_playbook_reverse_proxyable_services_additional_network] if matrix_playbook_reverse_proxyable_services_additional_network and matrix_bot_honoroit_container_labels_traefik_enabled else [])

  2477.     ) | unique

  2478.   }}

  2479. 

  2480. matrix_bot_honoroit_container_labels_traefik_enabled: "{{ matrix_playbook_traefik_labels_enabled }}"

  2481. matrix_bot_honoroit_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  2482. matrix_bot_honoroit_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  2483. matrix_bot_honoroit_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  2484. 

  2485. # For consistency with other things hosted at the matrix FQN, we adjust the metrics endpoint

  2486. # so that metrics would be served at something like `/metrics/SERVICE_NAME`, and not at the default path for the role (`PREFIX/metrics`).

  2487. matrix_bot_honoroit_container_labels_traefik_metrics_path: "{{ matrix_metrics_exposure_path_prefix }}/honoroit"

  2488. 

  2489. matrix_bot_honoroit_homeserver: "{{ matrix_addons_homeserver_client_api_url }}"

  2490. 

  2491. # Postgres is the default, except if not using internal Postgres server

  2492. matrix_bot_honoroit_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  2493. matrix_bot_honoroit_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  2494. matrix_bot_honoroit_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'honoroit.bot.db', rounds=655555) | to_uuid }}"

  2495. matrix_bot_honoroit_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"

  2496. 

  2497. ######################################################################

  2498. #

  2499. # /matrix-bot-honoroit

  2500. #

  2501. ######################################################################

  2502. 

  2503. ######################################################################

  2504. #

  2505. # matrix-bot-buscarron

  2506. #

  2507. ######################################################################

  2508. 

  2509. # We don't enable bots by default.

  2510. matrix_bot_buscarron_enabled: false

  2511. 

  2512. matrix_bot_buscarron_hostname: "{{ matrix_server_fqn_buscarron }}"

  2513. 

  2514. matrix_bot_buscarron_systemd_required_services_list_auto: |

  2515.   {{

  2516.     matrix_addons_homeserver_systemd_services_list

  2517.     +

  2518.     ([devture_postgres_identifier ~ '.service'] if (devture_postgres_enabled and matrix_bot_buscarron_database_hostname == devture_postgres_connection_hostname) else [])

  2519.   }}

  2520. 

  2521. matrix_bot_buscarron_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"

  2522. 

  2523. matrix_bot_buscarron_container_network: "{{ matrix_addons_container_network }}"

  2524. 

  2525. matrix_bot_buscarron_container_additional_networks_auto: |-

  2526.   {{

  2527.     (

  2528.       ([] if matrix_addons_homeserver_container_network == '' else [matrix_addons_homeserver_container_network])

  2529.       +

  2530.       ([devture_postgres_container_network] if (devture_postgres_enabled and matrix_bot_buscarron_database_hostname == devture_postgres_connection_hostname and matrix_bot_buscarron_container_network != devture_postgres_container_network) else [])

  2531.       +

  2532.       ([matrix_playbook_reverse_proxyable_services_additional_network] if matrix_playbook_reverse_proxyable_services_additional_network and matrix_bot_buscarron_container_labels_traefik_enabled else [])

  2533.     ) | unique

  2534.   }}

  2535. 

  2536. matrix_bot_buscarron_container_labels_traefik_enabled: "{{ matrix_playbook_traefik_labels_enabled }}"

  2537. matrix_bot_buscarron_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  2538. matrix_bot_buscarron_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  2539. matrix_bot_buscarron_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  2540. 

  2541. matrix_bot_buscarron_homeserver: "{{ matrix_addons_homeserver_client_api_url }}"

  2542. 

  2543. # Postgres is the default, except if not using internal Postgres server

  2544. matrix_bot_buscarron_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  2545. matrix_bot_buscarron_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  2546. matrix_bot_buscarron_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'buscarron.bot.db', rounds=655555) | to_uuid }}"

  2547. 

  2548. ######################################################################

  2549. #

  2550. # /matrix-bot-buscarron

  2551. #

  2552. ######################################################################

  2553. 

  2554. ######################################################################

  2555. #

  2556. # matrix-bot-postmoogle

  2557. #

  2558. ######################################################################

  2559. 

  2560. # We don't enable bots by default.

  2561. matrix_bot_postmoogle_enabled: false

  2562. 

  2563. matrix_bot_postmoogle_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"

  2564. 

  2565. matrix_bot_postmoogle_ssl_path: |-

  2566.   {{

  2567.     {

  2568.       'playbook-managed-traefik': (devture_traefik_certs_dumper_dumped_certificates_dir_path if devture_traefik_certs_dumper_enabled else ''),

  2569.       'other-traefik-container': (devture_traefik_certs_dumper_dumped_certificates_dir_path if devture_traefik_certs_dumper_enabled else ''),

  2570.       'none': '',

  2571.     }[matrix_playbook_reverse_proxy_type]

  2572.   }}

  2573. 

  2574. matrix_playbook_bot_postmoogle_traefik_tls_cert: "{% for domain in matrix_bot_postmoogle_domains %}/ssl/{{ domain }}/certificate.crt {% endfor %}"

  2575. matrix_playbook_bot_postmoogle_traefik_key: "{% for domain in matrix_bot_postmoogle_domains %}/ssl/{{ domain }}/privatekey.key {% endfor %}"

  2576. 

  2577. matrix_bot_postmoogle_tls_cert: |-

  2578.   {{

  2579.     {

  2580.       'playbook-managed-traefik': (matrix_playbook_bot_postmoogle_traefik_tls_cert if devture_traefik_certs_dumper_enabled else ''),

  2581.       'other-traefik-container': (matrix_playbook_bot_postmoogle_traefik_tls_cert if devture_traefik_certs_dumper_enabled else ''),

  2582.       'none': '',

  2583.     }[matrix_playbook_reverse_proxy_type]

  2584.   }}

  2585. 

  2586. matrix_bot_postmoogle_tls_key: |-

  2587.   {{

  2588.     {

  2589.       'playbook-managed-traefik': (matrix_playbook_bot_postmoogle_traefik_key if devture_traefik_certs_dumper_enabled else ''),

  2590.       'other-traefik-container': (matrix_playbook_bot_postmoogle_traefik_key if devture_traefik_certs_dumper_enabled else ''),

  2591.       'none': '',

  2592.     }[matrix_playbook_reverse_proxy_type]

  2593.   }}

  2594. 

  2595. matrix_playbook_bot_postmoogle_traefik_certs_dumper_waiter_services: "{% for domain in matrix_bot_postmoogle_domains %}{{ devture_traefik_certs_dumper_identifier }}-wait-for-domain@{{ domain }}.service {% endfor %}"

  2596. 

  2597. matrix_bot_postmoogle_systemd_required_services_list_auto: |

  2598.   {{

  2599.     matrix_addons_homeserver_systemd_services_list

  2600.     +

  2601.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled and matrix_bot_postmoogle_database_hostname == matrix_bot_postmoogle_database_hostname else [])

  2602.     +

  2603.     (matrix_playbook_bot_postmoogle_traefik_certs_dumper_waiter_services | trim | split(' ') if matrix_playbook_reverse_proxy_type in ['playbook-managed-traefik', 'other-traefik-container'] and devture_traefik_certs_dumper_enabled else [])

  2604.   }}

  2605. 

  2606. # Postgres is the default, except if not using internal Postgres server

  2607. matrix_bot_postmoogle_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  2608. matrix_bot_postmoogle_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  2609. matrix_bot_postmoogle_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'postmoogle.db', rounds=655555) | to_uuid }}"

  2610. 

  2611. matrix_bot_postmoogle_homeserver: "{{ matrix_addons_homeserver_client_api_url }}"

  2612. 

  2613. matrix_bot_postmoogle_container_network: "{{ matrix_addons_container_network }}"

  2614. 

  2615. matrix_bot_postmoogle_container_additional_networks_auto: |-

  2616.   {{

  2617.     (

  2618.       ([] if matrix_addons_homeserver_container_network == '' else [matrix_addons_homeserver_container_network])

  2619.       +

  2620.       ([devture_postgres_container_network] if devture_postgres_enabled and matrix_bot_matrix_reminder_bot_database_hostname == devture_postgres_connection_hostname else [])

  2621.     ) | unique

  2622.   }}

  2623. 

  2624. ######################################################################

  2625. #

  2626. # /matrix-bot-postmoogle

  2627. #

  2628. ######################################################################

  2629. 

  2630. 

  2631. ######################################################################

  2632. #

  2633. # matrix-bot-chatgpt

  2634. #

  2635. ######################################################################

  2636. 

  2637. # We don't enable bots by default.

  2638. matrix_bot_chatgpt_enabled: false

  2639. 

  2640. matrix_bot_chatgpt_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"

  2641. 

  2642. matrix_bot_chatgpt_container_network: "{{ matrix_addons_container_network }}"

  2643. matrix_bot_chatgpt_container_additional_networks_auto: "{{ [] if matrix_addons_homeserver_container_network == '' else [matrix_addons_homeserver_container_network] }}"

  2644. 

  2645. matrix_bot_chatgpt_matrix_homeserver_url: "{{ matrix_addons_homeserver_client_api_url }}"

  2646. 

  2647. matrix_bot_chatgpt_systemd_required_services_list_auto: "{{ matrix_addons_homeserver_systemd_services_list }}"

  2648. 

  2649. ######################################################################

  2650. #

  2651. # /matrix-bot-chatgpt

  2652. #

  2653. ######################################################################

  2654. 

  2655. 

  2656. ######################################################################

  2657. #

  2658. # matrix-bot-go-neb

  2659. #

  2660. ######################################################################

  2661. 

  2662. # We don't enable bots by default.

  2663. matrix_bot_go_neb_enabled: false

  2664. 

  2665. matrix_bot_go_neb_scheme: "{{ 'https' if matrix_playbook_ssl_enabled else 'http' }}"

  2666. 

  2667. matrix_bot_go_neb_hostname: "{{ matrix_server_fqn_bot_go_neb }}"

  2668. 

  2669. matrix_bot_go_neb_systemd_required_services_list_auto: |

  2670.   {{

  2671.     matrix_addons_homeserver_systemd_services_list

  2672.   }}

  2673. 

  2674. matrix_bot_go_neb_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '4050') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  2675. 

  2676. matrix_bot_go_neb_container_network: "{{ matrix_addons_container_network }}"

  2677. 

  2678. matrix_bot_go_neb_container_additional_networks: |

  2679.   {{

  2680.     (

  2681.       ([] if matrix_addons_homeserver_container_network == '' else [matrix_addons_homeserver_container_network])

  2682.       +

  2683.       ([matrix_playbook_reverse_proxyable_services_additional_network] if matrix_playbook_reverse_proxyable_services_additional_network and matrix_bot_go_neb_container_labels_traefik_enabled else [])

  2684.     ) | unique

  2685.   }}

  2686. 

  2687. matrix_bot_go_neb_container_labels_traefik_enabled: "{{ matrix_playbook_traefik_labels_enabled }}"

  2688. matrix_bot_go_neb_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  2689. matrix_bot_go_neb_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  2690. matrix_bot_go_neb_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  2691. 

  2692. ######################################################################

  2693. #

  2694. # /matrix-bot-go-neb

  2695. #

  2696. ######################################################################

  2697. 

  2698. 

  2699. ######################################################################

  2700. #

  2701. # matrix-bot-mjolnir

  2702. #

  2703. ######################################################################

  2704. 

  2705. # We don't enable bots by default.

  2706. matrix_bot_mjolnir_enabled: false

  2707. 

  2708. matrix_bot_mjolnir_systemd_required_services_list_auto: |

  2709.   {{

  2710.     matrix_addons_homeserver_systemd_services_list

  2711.     +

  2712.     (['matrix-pantalaimon.service'] if matrix_bot_mjolnir_pantalaimon_use else [])

  2713.   }}

  2714. 

  2715. matrix_bot_mjolnir_container_image_self_build: "{{ matrix_architecture != 'amd64' }}"

  2716. 

  2717. matrix_bot_mjolnir_container_network: "{{ matrix_addons_container_network }}"

  2718. 

  2719. matrix_bot_mjolnir_container_additional_networks_auto: |-

  2720.   {{

  2721.     ([] if matrix_addons_homeserver_container_network == '' else [matrix_addons_homeserver_container_network])

  2722.   }}

  2723. 

  2724. matrix_bot_mjolnir_homeserver_url: "{{ 'http://matrix-pantalaimon:8009' if matrix_bot_mjolnir_pantalaimon_use else matrix_addons_homeserver_client_api_url }}"

  2725. matrix_bot_mjolnir_raw_homeserver_url: "{{ matrix_addons_homeserver_client_api_url }}"

  2726. ######################################################################

  2727. #

  2728. # /matrix-bot-mjolnir

  2729. #

  2730. ######################################################################

  2731. 

  2732. 

  2733. ######################################################################

  2734. #

  2735. # matrix-bot-draupnir

  2736. #

  2737. ######################################################################

  2738. 

  2739. # We don't enable bots by default.

  2740. matrix_bot_draupnir_enabled: false

  2741. 

  2742. matrix_bot_draupnir_systemd_required_services_list_auto: |

  2743.   {{

  2744.     matrix_addons_homeserver_systemd_services_list

  2745.     +

  2746.     (['matrix-pantalaimon.service'] if matrix_bot_draupnir_pantalaimon_use else [])

  2747.   }}

  2748. 

  2749. matrix_bot_draupnir_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"

  2750. 

  2751. matrix_bot_draupnir_container_network: "{{ matrix_addons_container_network }}"

  2752. 

  2753. matrix_bot_draupnir_container_additional_networks_auto: |-

  2754.   {{

  2755.     ([] if matrix_addons_homeserver_container_network == '' else [matrix_addons_homeserver_container_network])

  2756.   }}

  2757. 

  2758. matrix_bot_draupnir_homeserver_url: "{{ 'http://matrix-pantalaimon:8009' if matrix_bot_draupnir_pantalaimon_use else matrix_addons_homeserver_client_api_url }}"

  2759. matrix_bot_draupnir_raw_homeserver_url: "{{ matrix_addons_homeserver_client_api_url }}"

  2760. 

  2761. ######################################################################

  2762. #

  2763. # /matrix-bot-draupnir

  2764. #

  2765. ######################################################################

  2766. 

  2767. 

  2768. ######################################################################

  2769. #

  2770. # matrix-appservice-draupnir-for-all

  2771. #

  2772. ######################################################################

  2773. 

  2774. # We don't enable bots by default.

  2775. matrix_appservice_draupnir_for_all_enabled: false

  2776. 

  2777. matrix_appservice_draupnir_for_all_systemd_required_services_list_auto: |

  2778.   {{

  2779.     matrix_addons_homeserver_systemd_services_list

  2780.     +

  2781.     ([devture_postgres_identifier ~ '.service'] if (devture_postgres_enabled and matrix_appservice_draupnir_for_all_database_hostname == devture_postgres_connection_hostname) else [])

  2782.   }}

  2783. 

  2784. matrix_appservice_draupnir_for_all_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"

  2785. 

  2786. matrix_appservice_draupnir_for_all_container_network: "{{ matrix_addons_container_network }}"

  2787. 

  2788. matrix_appservice_draupnir_for_all_container_additional_networks_auto: |-

  2789.   {{

  2790.     (

  2791.       ([] if matrix_addons_homeserver_container_network == '' else [matrix_addons_homeserver_container_network])

  2792.       +

  2793.       ([devture_postgres_container_network] if (devture_postgres_enabled and matrix_appservice_draupnir_for_all_database_hostname == devture_postgres_connection_hostname and matrix_appservice_draupnir_for_all_container_network != devture_postgres_container_network) else [])

  2794.     ) | unique

  2795.   }}

  2796. 

  2797. matrix_appservice_draupnir_for_all_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'd4a.as.token', rounds=655555) | to_uuid }}"

  2798. matrix_appservice_draupnir_for_all_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'd4a.hs.token', rounds=655555) | to_uuid }}"

  2799. 

  2800. matrix_appservice_draupnir_for_all_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  2801. matrix_appservice_draupnir_for_all_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'as.d4a.db', rounds=655555) | to_uuid }}"

  2802. 

  2803. ######################################################################

  2804. #

  2805. # /matrix-appservice-draupnir-for-all

  2806. #

  2807. ######################################################################

  2808. 

  2809. 

  2810. ######################################################################

  2811. #

  2812. # matrix-pantalaimon

  2813. #

  2814. ######################################################################

  2815. 

  2816. matrix_pantalaimon_enabled: false

  2817. 

  2818. matrix_pantalaimon_systemd_required_services_list_auto: |

  2819.   {{

  2820.     matrix_addons_homeserver_systemd_services_list

  2821.   }}

  2822. 

  2823. matrix_pantalaimon_container_network: "{{ matrix_homeserver_container_network }}"

  2824. 

  2825. matrix_pantalaimon_container_image_self_build: "{{ matrix_architecture not in ['amd64'] }}"

  2826. 

  2827. matrix_pantalaimon_homeserver_url: "{{ matrix_addons_homeserver_client_api_url }}"

  2828. 

  2829. ######################################################################

  2830. #

  2831. # /matrix-pantalaimon

  2832. #

  2833. ######################################################################

  2834. 

  2835. 

  2836. ######################################################################

  2837. #

  2838. # etke/backup_borg

  2839. #

  2840. ######################################################################

  2841. 

  2842. backup_borg_enabled: false

  2843. 

  2844. backup_borg_identifier: matrix-backup-borg

  2845. backup_borg_retention_prefix: matrix-

  2846. backup_borg_storage_archive_name_format: matrix-{now:%Y-%m-%d-%H%M%S}

  2847. 

  2848. backup_borg_base_path: "{{ matrix_base_data_path }}/backup-borg"

  2849. 

  2850. backup_borg_username: "{{ matrix_user_username }}"

  2851. backup_borg_uid: "{{ matrix_user_uid }}"

  2852. backup_borg_gid: "{{ matrix_user_gid }}"

  2853. 

  2854. backup_borg_container_network: "{{ devture_postgres_container_network if devture_postgres_enabled else backup_borg_identifier }}"

  2855. 

  2856. backup_borg_postgresql_version_detection_devture_postgres_role_name: "{{ 'galaxy/postgres' if devture_postgres_enabled else '' }}"

  2857. 

  2858. backup_borg_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm32', 'arm64'] }}"

  2859. 

  2860. backup_borg_postgresql_enabled: "{{ devture_postgres_enabled }}"

  2861. backup_borg_postgresql_databases_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  2862. backup_borg_postgresql_databases_username: "{{ devture_postgres_connection_username if devture_postgres_enabled else '' }}"

  2863. backup_borg_postgresql_databases_password: "{{ devture_postgres_connection_password if devture_postgres_enabled else '' }}"

  2864. backup_borg_postgresql_databases_port: "{{ devture_postgres_connection_port if devture_postgres_enabled else 5432 }}"

  2865. backup_borg_postgresql_databases: "{{ devture_postgres_managed_databases | map(attribute='name') if devture_postgres_enabled else [] }}"

  2866. 

  2867. backup_borg_location_source_directories:

  2868.   - "{{ matrix_base_data_path }}"

  2869. 

  2870. backup_borg_location_exclude_patterns: |

  2871.   {{

  2872.     ([matrix_synapse_media_store_path + '/local_thumbnails', matrix_synapse_media_store_path + '/remote_thumbnail', matrix_synapse_media_store_path + '/url_cache', matrix_synapse_media_store_path + '/url_cache_thumbnails'] if matrix_homeserver_implementation == 'synapse' else [])

  2873.     +

  2874.     ([devture_postgres_data_path] if devture_postgres_enabled else [])

  2875.   }}

  2876. 

  2877. backup_borg_systemd_required_services_list: |

  2878.   {{

  2879.     [devture_systemd_docker_base_docker_service_name]

  2880.     +

  2881.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  2882.   }}

  2883. 

  2884. ######################################################################

  2885. #

  2886. # /etke/backup_borg

  2887. #

  2888. ######################################################################

  2889. 

  2890. 

  2891. ######################################################################

  2892. #

  2893. # matrix-cactus-comments

  2894. #

  2895. ######################################################################

  2896. 

  2897. matrix_cactus_comments_enabled: false

  2898. 

  2899. matrix_cactus_comments_systemd_required_services_list_auto: |

  2900.   {{

  2901.     matrix_addons_homeserver_systemd_services_list

  2902.   }}

  2903. 

  2904. matrix_cactus_comments_container_image_self_build: "{{ matrix_architecture not in ['amd64'] }}"

  2905. 

  2906. matrix_cactus_comments_container_network: "{{ matrix_addons_container_network }}"

  2907. 

  2908. matrix_cactus_comments_container_additional_networks_auto: |-

  2909.   {{

  2910.     ([] if matrix_addons_homeserver_container_network == '' else [matrix_addons_homeserver_container_network])

  2911.   }}

  2912. 

  2913. matrix_cactus_comments_as_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'cactus.as.token', rounds=655555) | to_uuid }}"

  2914. matrix_cactus_comments_hs_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'cactus.hs.token', rounds=655555) | to_uuid }}"

  2915. 

  2916. matrix_cactus_comments_homeserver_url: "{{ matrix_addons_homeserver_client_api_url }}"

  2917. 

  2918. ######################################################################

  2919. #

  2920. # /matrix-cactus-comments

  2921. #

  2922. ######################################################################

  2923. 

  2924. ######################################################################

  2925. #

  2926. # matrix-cactus-comments-client

  2927. #

  2928. ######################################################################

  2929. 

  2930. matrix_cactus_comments_client_enabled: "{{ matrix_cactus_comments_enabled }}"

  2931. 

  2932. matrix_cactus_comments_client_hostname: "{{ matrix_server_fqn_matrix }}"

  2933. 

  2934. matrix_cactus_comments_client_container_network: "{{ matrix_addons_container_network }}"

  2935. 

  2936. matrix_cactus_comments_client_container_additional_networks_auto: |-

  2937.   {{

  2938.     (

  2939.       ([matrix_playbook_reverse_proxyable_services_additional_network] if (matrix_playbook_reverse_proxyable_services_additional_network and matrix_cactus_comments_client_container_labels_traefik_enabled) else [])

  2940.     ) | unique

  2941.   }}

  2942. 

  2943. matrix_cactus_comments_client_container_labels_traefik_enabled: "{{ matrix_playbook_reverse_proxy_type in ['playbook-managed-traefik', 'other-traefik-container'] }}"

  2944. matrix_cactus_comments_client_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  2945. matrix_cactus_comments_client_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  2946. matrix_cactus_comments_client_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  2947. 

  2948. ######################################################################

  2949. #

  2950. # /matrix-cactus-comments-client

  2951. #

  2952. ######################################################################

  2953. 

  2954. ######################################################################

  2955. #

  2956. # matrix-corporal

  2957. #

  2958. ######################################################################

  2959. 

  2960. matrix_corporal_enabled: false

  2961. 

  2962. matrix_corporal_systemd_required_services_list_auto: |

  2963.   {{

  2964.     (['matrix-' + matrix_homeserver_implementation + '.service'])

  2965.   }}

  2966. 

  2967. matrix_corporal_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm32', 'arm64'] }}"

  2968. 

  2969. matrix_corporal_container_http_gateway_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '41080') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  2970. matrix_corporal_container_http_api_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '41081') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  2971. 

  2972. matrix_corporal_container_network: matrix-corporal

  2973. 

  2974. matrix_corporal_container_additional_networks: |

  2975.   {{

  2976.     (

  2977.       ([matrix_playbook_reverse_proxyable_services_additional_network] if matrix_playbook_reverse_proxyable_services_additional_network else [])

  2978.       +

  2979.       ([matrix_homeserver_container_network] if matrix_corporal_container_network != matrix_homeserver_container_network else [])

  2980.     ) | unique

  2981.   }}

  2982. 

  2983. matrix_corporal_container_labels_traefik_enabled: "{{ matrix_playbook_reverse_proxy_type in ['playbook-managed-traefik', 'other-traefik-container'] }}"

  2984. matrix_corporal_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  2985. matrix_corporal_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  2986. matrix_corporal_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  2987. 

  2988. matrix_corporal_matrix_homeserver_scheme: "{{ 'https' if matrix_playbook_ssl_enabled else 'http' }}"

  2989. 

  2990. matrix_corporal_matrix_homeserver_api_endpoint: "{{ matrix_homeserver_container_url }}"

  2991. 

  2992. matrix_corporal_matrix_auth_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret }}"

  2993. 

  2994. # This is only useful if there's REST auth provider to make use of it.

  2995. matrix_corporal_http_gateway_internal_rest_auth_enabled: "{{ matrix_synapse_ext_password_provider_rest_auth_enabled }}"

  2996. 

  2997. matrix_corporal_matrix_registration_shared_secret: "{{ matrix_synapse_registration_shared_secret }}"

  2998. 

  2999. ######################################################################

  3000. #

  3001. # /matrix-corporal

  3002. #

  3003. ######################################################################

  3004. 

  3005. 

  3006. ######################################################################

  3007. #

  3008. # matrix-rageshake

  3009. #

  3010. ######################################################################

  3011. 

  3012. # We don't enable rageshake by default.

  3013. matrix_rageshake_enabled: false

  3014. 

  3015. matrix_rageshake_container_image_self_build: "{{ matrix_architecture not in ['amd64'] }}"

  3016. 

  3017. matrix_rageshake_hostname: "{{ matrix_server_fqn_rageshake }}"

  3018. 

  3019. matrix_rageshake_container_network: matrix-rageshake

  3020. 

  3021. matrix_rageshake_container_additional_networks: "{{ [matrix_playbook_reverse_proxyable_services_additional_network] if matrix_playbook_reverse_proxyable_services_additional_network else [] }}"

  3022. 

  3023. matrix_rageshake_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '9110') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  3024. 

  3025. matrix_rageshake_container_labels_traefik_enabled: "{{ matrix_playbook_traefik_labels_enabled }}"

  3026. matrix_rageshake_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  3027. matrix_rageshake_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  3028. matrix_rageshake_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  3029. 

  3030. ######################################################################

  3031. #

  3032. # /matrix-rageshake

  3033. #

  3034. ######################################################################

  3035. 

  3036. ######################################################################

  3037. #

  3038. # matrix-coturn

  3039. #

  3040. ######################################################################

  3041. 

  3042. matrix_coturn_enabled: true

  3043. 

  3044. matrix_coturn_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm32', 'arm64'] }}"

  3045. 

  3046. # We make the assumption that `ansible_host` points to an external IP address, which may not always be the case.

  3047. # Users are free to set `matrix_coturn_turn_external_ip_address` to an empty string

  3048. # to allow auto-detection (via an EchoIP service) to happen at runtime.

  3049. matrix_coturn_turn_external_ip_address: "{{ ansible_host }}"

  3050. 

  3051. matrix_coturn_turn_static_auth_secret: "{{ ('%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'coturn.sas', rounds=655555) | to_uuid) if matrix_coturn_authentication_method == 'auth-secret' else '' }}"

  3052. 

  3053. matrix_coturn_lt_cred_mech_username: "{{ ('%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'coturn.user', rounds=655555) | to_uuid) if matrix_coturn_authentication_method == 'lt-cred-mech' else '' }}"

  3054. matrix_coturn_lt_cred_mech_password: "{{ ('%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'coturn.pass', rounds=655555) | to_uuid) if matrix_coturn_authentication_method == 'lt-cred-mech' else '' }}"

  3055. 

  3056. matrix_coturn_tls_enabled: "{{ matrix_playbook_ssl_enabled }}"

  3057. 

  3058. matrix_coturn_tls_cert_path: |-

  3059.   {{

  3060.     {

  3061.       'playbook-managed-traefik': ('/certificate.crt' if devture_traefik_certs_dumper_enabled else ''),

  3062.       'other-traefik-container': ('/certificate.crt' if devture_traefik_certs_dumper_enabled else ''),

  3063.       'none': '',

  3064.     }[matrix_playbook_reverse_proxy_type]

  3065.   }}

  3066. 

  3067. matrix_coturn_tls_key_path: |-

  3068.   {{

  3069.     {

  3070.       'playbook-managed-traefik': ('/privatekey.key' if devture_traefik_certs_dumper_enabled else ''),

  3071.       'other-traefik-container': ('/privatekey.key' if devture_traefik_certs_dumper_enabled else ''),

  3072.       'none': '',

  3073.     }[matrix_playbook_reverse_proxy_type]

  3074.   }}

  3075. 

  3076. matrix_coturn_container_additional_volumes: |

  3077.   {{

  3078.     (

  3079.       [

  3080.        {

  3081.          'src': (devture_traefik_certs_dumper_dumped_certificates_dir_path +  '/' + matrix_server_fqn_matrix + '/certificate.crt'),

  3082.          'dst': '/certificate.crt',

  3083.          'options': 'ro',

  3084.        },

  3085.        {

  3086.          'src': (devture_traefik_certs_dumper_dumped_certificates_dir_path +  '/' + matrix_server_fqn_matrix + '/privatekey.key'),

  3087.          'dst': '/privatekey.key',

  3088.          'options': 'ro',

  3089.        },

  3090.       ] if (matrix_playbook_reverse_proxy_type in ['playbook-managed-traefik', 'other-traefik-container'] and devture_traefik_certs_dumper_enabled and matrix_coturn_tls_enabled and (matrix_coturn_tls_cert_path and matrix_coturn_tls_key_path)) else []

  3091.     )

  3092.   }}

  3093. 

  3094. matrix_coturn_systemd_required_services_list: |

  3095.   {{

  3096.     [devture_systemd_docker_base_docker_service_name]

  3097.     +

  3098.     ([devture_traefik_certs_dumper_identifier + '-wait-for-domain@' + matrix_server_fqn_matrix + '.service'] if matrix_playbook_reverse_proxy_type in ['playbook-managed-traefik', 'other-traefik-container'] and devture_traefik_certs_dumper_enabled and matrix_coturn_tls_enabled else [])

  3099.   }}

  3100. 

  3101. ######################################################################

  3102. #

  3103. # /matrix-coturn

  3104. #

  3105. ######################################################################

  3106. 

  3107. ######################################################################

  3108. #

  3109. # matrix-dimension

  3110. #

  3111. ######################################################################

  3112. 

  3113. matrix_dimension_enabled: false

  3114. 

  3115. matrix_dimension_container_image_self_build: "{{ matrix_architecture != 'amd64' }}"

  3116. 

  3117. matrix_dimension_scheme: "{{ 'https' if matrix_playbook_ssl_enabled else 'http' }}"

  3118. matrix_dimension_hostname: "{{ matrix_server_fqn_dimension }}"

  3119. 

  3120. matrix_dimension_container_network: "{{ matrix_addons_container_network }}"

  3121. 

  3122. # Dimension is connected both to `matrix_addons_homeserver_container_network` and `matrix_homeserver_container_network`,

  3123. # because `matrix_dimension_homeserver_clientServerUrl` and `matrix_dimension_homeserver_federationUrl` are potentially

  3124. # going to different places.

  3125. matrix_dimension_container_additional_networks: |

  3126.   {{

  3127.     (

  3128.       ([] if matrix_addons_homeserver_container_network == '' else [matrix_addons_homeserver_container_network])

  3129.       +

  3130.       ([matrix_homeserver_container_network] if matrix_homeserver_container_network != matrix_dimension_container_network else [])

  3131.       +

  3132.       ([devture_postgres_container_network] if (devture_postgres_enabled and matrix_dimension_database_hostname == devture_postgres_connection_hostname and devture_postgres_container_network != matrix_dimension_container_network) else [])

  3133.       +

  3134.       ([matrix_playbook_reverse_proxyable_services_additional_network] if matrix_playbook_reverse_proxyable_services_additional_network else [])

  3135.     ) | unique

  3136.   }}

  3137. 

  3138. matrix_dimension_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '8184') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  3139. 

  3140. matrix_dimension_container_labels_traefik_enabled: "{{ matrix_playbook_traefik_labels_enabled }}"

  3141. matrix_dimension_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  3142. matrix_dimension_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  3143. matrix_dimension_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  3144. 

  3145. matrix_dimension_homeserver_clientServerUrl: "{{ matrix_addons_homeserver_client_api_url }}"

  3146. matrix_dimension_homeserver_federationUrl: "{{ matrix_homeserver_container_federation_url }}"

  3147. matrix_dimension_homeserver_mediaUrl: "{{ ('https' if matrix_playbook_ssl_enabled else 'http') }}://{{ matrix_server_fqn_matrix }}"

  3148. 

  3149. # Dimension depends both on `matrix_addons_homeserver_systemd_services_list` and on the homeserver service,

  3150. # because `matrix_dimension_homeserver_clientServerUrl` and `matrix_dimension_homeserver_federationUrl` are potentially

  3151. # going to different places.

  3152. matrix_dimension_systemd_required_services_list_auto: |

  3153.   {{

  3154.     (

  3155.       matrix_addons_homeserver_systemd_services_list

  3156.       +

  3157.       ['matrix-' + matrix_homeserver_implementation + '.service']

  3158.       +

  3159.       ([devture_postgres_identifier ~ '.service'] if (devture_postgres_enabled and matrix_dimension_database_hostname == devture_postgres_connection_hostname) else [])

  3160.     ) | unique

  3161.   }}

  3162. 

  3163. # Postgres is the default, except if not using internal Postgres server

  3164. matrix_dimension_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  3165. matrix_dimension_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  3166. matrix_dimension_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'dimension.db', rounds=655555) | to_uuid }}"

  3167. 

  3168. ######################################################################

  3169. #

  3170. # /matrix-dimension

  3171. #

  3172. ######################################################################

  3173. 

  3174. ######################################################################

  3175. #

  3176. # etke/etherpad

  3177. #

  3178. ######################################################################

  3179. 

  3180. etherpad_enabled: false

  3181. 

  3182. etherpad_identifier: matrix-etherpad

  3183. 

  3184. etherpad_scheme: "{{ 'https' if matrix_playbook_ssl_enabled else 'http' }}"

  3185. 

  3186. etherpad_base_path: "{{ matrix_base_data_path }}/etherpad"

  3187. 

  3188. etherpad_framing_enabled: "{{ matrix_dimension_enabled or jitsi_enabled }}"

  3189. 

  3190. etherpad_hostname: "{{ matrix_server_fqn_etherpad }}"

  3191. 

  3192. etherpad_container_image_self_build: "{{ matrix_architecture not in ['amd64'] }}"

  3193. 

  3194. etherpad_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '9001') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  3195. 

  3196. etherpad_container_network: "{{ matrix_addons_container_network }}"

  3197. 

  3198. etherpad_container_additional_networks: |

  3199.   {{

  3200.     (

  3201.       ([matrix_playbook_reverse_proxyable_services_additional_network] if matrix_playbook_reverse_proxyable_services_additional_network else [])

  3202.       +

  3203.       ([devture_postgres_container_network] if devture_postgres_enabled and devture_postgres_container_network != etherpad_container_network else [])

  3204.     ) | unique

  3205.   }}

  3206. 

  3207. etherpad_container_labels_traefik_enabled: "{{ matrix_playbook_reverse_proxy_type in ['playbook-managed-traefik', 'other-traefik-container'] }}"

  3208. etherpad_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  3209. etherpad_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  3210. etherpad_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  3211. 

  3212. etherpad_systemd_required_services_list: |

  3213.   {{

  3214.     [devture_systemd_docker_base_docker_service_name]

  3215.     +

  3216.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  3217.   }}

  3218. 

  3219. etherpad_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  3220. etherpad_database_name: matrix_etherpad

  3221. etherpad_database_username: matrix_etherpad

  3222. etherpad_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'etherpad.db', rounds=655555) | to_uuid }}"

  3223. 

  3224. ######################################################################

  3225. #

  3226. # /etke/etherpad

  3227. #

  3228. ######################################################################

  3229. 

  3230. ######################################################################

  3231. #

  3232. # matrix-dynamic-dns

  3233. #

  3234. ######################################################################

  3235. 

  3236. matrix_dynamic_dns_enabled: false

  3237. 

  3238. matrix_dynamic_dns_container_network: matrix-dynamic-dns

  3239. 

  3240. ######################################################################

  3241. #

  3242. # /matrix-dynamic-dns

  3243. #

  3244. ######################################################################

  3245. 

  3246. ######################################################################

  3247. #

  3248. # matrix-email2matrix

  3249. #

  3250. ######################################################################

  3251. 

  3252. matrix_email2matrix_enabled: false

  3253. 

  3254. matrix_email2matrix_systemd_required_services_list_auto: |

  3255.   {{

  3256.     matrix_addons_homeserver_systemd_services_list

  3257.   }}

  3258. 

  3259. matrix_email2matrix_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm32', 'arm64'] }}"

  3260. 

  3261. matrix_email2matrix_container_network: "{{ matrix_addons_container_network }}"

  3262. 

  3263. matrix_email2matrix_container_additional_networks_auto: |-

  3264.   {{

  3265.     ([] if matrix_addons_homeserver_container_network == '' else [matrix_addons_homeserver_container_network])

  3266.   }}

  3267. 

  3268. ######################################################################

  3269. #

  3270. # /matrix-email2matrix

  3271. #

  3272. ######################################################################

  3273. 

  3274. ######################################################################

  3275. #

  3276. # jitsi

  3277. #

  3278. ######################################################################

  3279. 

  3280. jitsi_enabled: false

  3281. 

  3282. jitsi_architecture: "{{ matrix_architecture }}"

  3283. 

  3284. jitsi_hostname: "{{ matrix_server_fqn_jitsi }}"

  3285. 

  3286. jitsi_identifier: matrix-jitsi

  3287. 

  3288. jitsi_base_path: "{{ matrix_base_data_path }}/jitsi"

  3289. 

  3290. jitsi_uid: "{{ matrix_user_uid }}"

  3291. jitsi_gid: "{{ matrix_user_gid }}"

  3292. 

  3293. jitsi_user_username: "{{ matrix_user_username }}"

  3294. 

  3295. jitsi_web_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '13080') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  3296. 

  3297. jitsi_web_container_additional_networks_auto: |

  3298.   {{

  3299.     ([matrix_playbook_reverse_proxyable_services_additional_network] if matrix_playbook_reverse_proxyable_services_additional_network else [])

  3300.   }}

  3301. 

  3302. jitsi_jvb_container_colibri_ws_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '13090') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  3303. 

  3304. jitsi_jvb_container_additional_networks_auto: |

  3305.   {{

  3306.     ([matrix_playbook_reverse_proxyable_services_additional_network] if matrix_playbook_reverse_proxyable_services_additional_network else [])

  3307.   }}

  3308. 

  3309. jitsi_prosody_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '5280') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  3310. 

  3311. jitsi_prosody_container_additional_networks_auto: |

  3312.   {{

  3313.     ([matrix_playbook_reverse_proxyable_services_additional_network] if matrix_playbook_reverse_proxyable_services_additional_network else [])

  3314.   }}

  3315. 

  3316. jitsi_container_labels_traefik_enabled: "{{ matrix_playbook_traefik_labels_enabled }}"

  3317. jitsi_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  3318. jitsi_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  3319. jitsi_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  3320. 

  3321. jitsi_jibri_xmpp_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'jibri', rounds=655555) | to_uuid }}"

  3322. jitsi_jicofo_auth_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'jicofo', rounds=655555) | to_uuid }}"

  3323. jitsi_jvb_auth_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'jvb', rounds=655555) | to_uuid }}"

  3324. 

  3325. jitsi_web_stun_servers: |

  3326.   {{

  3327.     [

  3328.       'stun:' + matrix_server_fqn_matrix + ':5349',

  3329.       'stun:' + matrix_server_fqn_matrix + ':3478',

  3330.     ]

  3331.     if matrix_coturn_enabled

  3332.     else [ 'stun:meet-jit-si-turnrelay.jitsi.net:443']

  3333.   }}

  3334. 

  3335. # The Jitsi instance installed by this playbook is meant for embedding into Matrix clients, so framing is allowed.

  3336. jitsi_web_framing_enabled: true

  3337. 

  3338. # Jitsi (Prosody) only seems to support authenticating with Coturn using `auth-secret`, not `lt-cred-mech`.

  3339. # See: https://prosody.im/doc/coturn

  3340. jitsi_turn_credentials: "{{ matrix_coturn_turn_static_auth_secret if (matrix_coturn_enabled and matrix_coturn_authentication_method == 'auth-secret') else '' }}"

  3341. jitsi_turn_host: "{{ ('turn.' + matrix_server_fqn_matrix) if matrix_coturn_enabled else '' }}"

  3342. jitsi_turns_host: "{{ ('turn.' + matrix_server_fqn_matrix) if matrix_coturn_enabled else '' }}"

  3343. jitsi_turn_port: "{{ matrix_coturn_container_stun_plain_host_bind_port if matrix_coturn_enabled else '' }}"

  3344. jitsi_turns_port: "{{ matrix_coturn_container_stun_tls_host_bind_port if matrix_coturn_enabled else '' }}"

  3345. 

  3346. # If the self-hosted Etherpad instance is available, it will also show up in Jitsi conferences,

  3347. # unless explicitly disabled by setting `jitsi_etherpad_enabled` to false.

  3348. # Falls back to the scalar.vector.im etherpad in case someone sets `jitsi_etherpad_enabled` to true,

  3349. # while also setting `etherpad_enabled` to false.

  3350. jitsi_etherpad_enabled: "{{ etherpad_enabled }}"

  3351. jitsi_etherpad_base: "{{ etherpad_base_url if etherpad_enabled else 'https://scalar.vector.im/etherpad' }}"

  3352. 

  3353. # Allow verification using JWT and matrix-UVS

  3354. jitsi_prosody_auth_matrix_uvs_sync_power_levels: "{{ matrix_user_verification_service_enabled }}"

  3355. jitsi_prosody_auth_matrix_uvs_auth_token: "{{ matrix_user_verification_service_uvs_auth_token }}"

  3356. jitsi_prosody_auth_matrix_uvs_location: "{{ matrix_user_verification_service_container_url }}"

  3357. 

  3358. jitsi_self_check_validate_certificates: "{{ matrix_playbook_ssl_enabled }}"

  3359. 

  3360. # Gravatar is enabled by default upstream, but there's no need to leak data there needlessly

  3361. # when embedding Jitsi in Matrix rooms.

  3362. jitsi_disable_gravatar: true

  3363. 

  3364. ######################################################################

  3365. #

  3366. # /jitsi

  3367. #

  3368. ######################################################################

  3369. 

  3370. 

  3371. ######################################################################

  3372. #

  3373. # matrix-ldap-registration-proxy

  3374. #

  3375. ######################################################################

  3376. 

  3377. # This is only for users with a specific LDAP setup

  3378. matrix_ldap_registration_proxy_enabled: false

  3379. 

  3380. matrix_ldap_registration_proxy_hostname: "{{ matrix_server_fqn_matrix }}"

  3381. 

  3382. matrix_ldap_registration_proxy_matrix_server_url: "{{ matrix_addons_homeserver_client_api_url }}"

  3383. 

  3384. matrix_ldap_registration_proxy_systemd_required_services_list_auto: |

  3385.   {{

  3386.     matrix_addons_homeserver_systemd_services_list

  3387.   }}

  3388. 

  3389. matrix_ldap_registration_proxy_container_network: "{{ matrix_addons_container_network }}"

  3390. 

  3391. matrix_ldap_registration_proxy_container_additional_networks_auto: |-

  3392.   {{

  3393.     (

  3394.       ([] if matrix_addons_homeserver_container_network == '' else [matrix_addons_homeserver_container_network])

  3395.       +

  3396.       ([matrix_playbook_reverse_proxyable_services_additional_network] if (matrix_playbook_reverse_proxyable_services_additional_network and matrix_ldap_registration_proxy_container_labels_traefik_enabled) else [])

  3397.     ) | unique

  3398.   }}

  3399. 

  3400. matrix_ldap_registration_proxy_container_labels_traefik_enabled: "{{ matrix_playbook_reverse_proxy_type in ['playbook-managed-traefik', 'other-traefik-container'] }}"

  3401. matrix_ldap_registration_proxy_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  3402. matrix_ldap_registration_proxy_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  3403. matrix_ldap_registration_proxy_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  3404. 

  3405. ######################################################################

  3406. #

  3407. # /matrix-ldap-registration-proxy

  3408. #

  3409. ######################################################################

  3410. 

  3411. 

  3412. ########################################################################

  3413. #                                                                      #

  3414. # exim-relay                                                           #

  3415. #                                                                      #

  3416. ########################################################################

  3417. 

  3418. # We set up an Exim email relay by default.

  3419. # This is so that the homeserver and various other services can send emails through it.

  3420. # To completely disable this service, use: `exim_relay_enabled: false`

  3421. 

  3422. exim_relay_identifier: "matrix-exim-relay"

  3423. 

  3424. exim_relay_base_path: "{{ matrix_base_data_path }}/exim-relay"

  3425. 

  3426. exim_relay_uid: "{{ matrix_user_uid }}"

  3427. exim_relay_gid: "{{ matrix_user_gid }}"

  3428. 

  3429. exim_relay_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm32', 'arm64'] }}"

  3430. 

  3431. exim_relay_hostname: "{{ matrix_server_fqn_matrix }}"

  3432. 

  3433. exim_relay_sender_address: "matrix@{{ exim_relay_hostname }}"

  3434. 

  3435. ########################################################################

  3436. #                                                                      #

  3437. # /exim-relay                                                          #

  3438. #                                                                      #

  3439. ########################################################################

  3440. 

  3441. 

  3442. ######################################################################

  3443. #

  3444. # matrix-ma1sd

  3445. #

  3446. ######################################################################

  3447. 

  3448. # We no longer install the ma1sd identity server by default.

  3449. #

  3450. # The main reason we used to install ma1sd by default in the past was to

  3451. # prevent Element from talking to the `matrix.org` / `vector.im` identity servers,

  3452. # by forcing it to talk to our own self-hosted (but otherwise useless) identity server instead,

  3453. # thus preventing contact list leaks.

  3454. #

  3455. # Since Element no longer defaults to using a public identity server if another one is not provided,

  3456. # we can stop installing ma1sd.

  3457. matrix_ma1sd_enabled: false

  3458. 

  3459. matrix_ma1sd_scheme: "{{ 'https' if matrix_playbook_ssl_enabled else 'http' }}"

  3460. matrix_ma1sd_hostname: "{{ matrix_server_fqn_matrix }}"

  3461. 

  3462. matrix_ma1sd_container_image_self_build: "{{ matrix_architecture != 'amd64' }}"

  3463. 

  3464. matrix_ma1sd_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '' ~ matrix_ma1sd_container_port | string) if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  3465. 

  3466. matrix_ma1sd_container_network: "{{ matrix_homeserver_container_network }}"

  3467. 

  3468. matrix_ma1sd_container_additional_networks_auto: |

  3469.   {{

  3470.     (

  3471.       ([matrix_homeserver_container_network] if (matrix_ma1sd_container_network != matrix_homeserver_container_network) else [])

  3472.       +

  3473.       ([devture_postgres_container_network] if (devture_postgres_enabled and matrix_ma1sd_database_hostname == devture_postgres_connection_hostname and matrix_ma1sd_container_network != devture_postgres_container_network) else [])

  3474.       +

  3475.       ([exim_relay_container_network] if (exim_relay_enabled and matrix_ma1sd_threepid_medium_email_connectors_smtp_host == exim_relay_identifier and matrix_ma1sd_container_network != exim_relay_container_network) else [])

  3476.       +

  3477.       ([matrix_playbook_reverse_proxyable_services_additional_network] if (matrix_playbook_reverse_proxyable_services_additional_network and matrix_ma1sd_container_labels_traefik_enabled) else [])

  3478.     ) | unique

  3479.   }}

  3480. 

  3481. matrix_ma1sd_container_labels_traefik_enabled: "{{ matrix_playbook_reverse_proxy_type in ['playbook-managed-traefik', 'other-traefik-container'] }}"

  3482. matrix_ma1sd_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  3483. matrix_ma1sd_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  3484. matrix_ma1sd_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  3485. 

  3486. # We enable Synapse integration via its Postgres database by default.

  3487. # When using another Identity store, you might wish to disable this and define

  3488. # your own configuration in `matrix_ma1sd_configuration_extension_yaml`.

  3489. matrix_ma1sd_synapsesql_enabled: true

  3490. matrix_ma1sd_synapsesql_type: postgresql

  3491. matrix_ma1sd_synapsesql_connection: //{{ matrix_synapse_database_host }}/{{ matrix_synapse_database_database }}?user={{ matrix_synapse_database_user | urlencode() }}&password={{ matrix_synapse_database_password | urlencode() }}

  3492. 

  3493. matrix_ma1sd_dns_overwrite_enabled: true

  3494. matrix_ma1sd_dns_overwrite_homeserver_client_name: "{{ matrix_server_fqn_matrix }}"

  3495. matrix_ma1sd_dns_overwrite_homeserver_client_value: "{{ matrix_addons_homeserver_client_api_url }}"

  3496. 

  3497. # By default, we send mail through the exim relay service.

  3498. matrix_ma1sd_threepid_medium_email_identity_from: "{{ exim_relay_sender_address }}"

  3499. matrix_ma1sd_threepid_medium_email_connectors_smtp_host: "{{ exim_relay_identifier }}"

  3500. matrix_ma1sd_threepid_medium_email_connectors_smtp_port: 8025

  3501. matrix_ma1sd_threepid_medium_email_connectors_smtp_tls: 0

  3502. 

  3503. matrix_ma1sd_self_check_validate_certificates: "{{ matrix_playbook_ssl_enabled }}"

  3504. 

  3505. matrix_ma1sd_systemd_required_services_list_auto: |

  3506.   {{

  3507.     matrix_addons_homeserver_systemd_services_list

  3508.     +

  3509.     ([devture_postgres_identifier ~ '.service'] if (devture_postgres_enabled and matrix_ma1sd_database_hostname == devture_postgres_connection_hostname) else [])

  3510.   }}

  3511. 

  3512. matrix_ma1sd_systemd_wanted_services_list_auto: |

  3513.   {{

  3514.     ([exim_relay_identifier ~ '.service'] if (exim_relay_enabled and matrix_ma1sd_threepid_medium_email_connectors_smtp_host == exim_relay_identifier) else [])

  3515.   }}

  3516. 

  3517. # Postgres is the default, except if not using internal Postgres server

  3518. matrix_ma1sd_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  3519. matrix_ma1sd_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  3520. matrix_ma1sd_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'ma1sd.db', rounds=655555) | to_uuid }}"

  3521. 

  3522. ######################################################################

  3523. #

  3524. # /matrix-ma1sd

  3525. #

  3526. ######################################################################

  3527. 

  3528. ######################################################################

  3529. #

  3530. # matrix-media-repo

  3531. #

  3532. ######################################################################

  3533. 

  3534. matrix_media_repo_enabled: false

  3535. 

  3536. matrix_media_repo_container_network: "{{ matrix_homeserver_container_network }}"

  3537. 

  3538. matrix_media_repo_container_additional_networks: |

  3539.   {{

  3540.     (

  3541.       ([matrix_homeserver_container_network] if (matrix_media_repo_container_network != matrix_homeserver_container_network) else [])

  3542.       +

  3543.       ([devture_postgres_container_network] if (devture_postgres_enabled and matrix_media_repo_database_hostname == devture_postgres_connection_hostname and devture_postgres_container_network != matrix_media_repo_container_network) else [])

  3544.       +

  3545.       ([matrix_playbook_reverse_proxyable_services_additional_network] if (matrix_playbook_reverse_proxyable_services_additional_network and matrix_media_repo_container_labels_traefik_enabled) else [])

  3546.     ) | unique

  3547.   }}

  3548. 

  3549. matrix_media_repo_container_labels_traefik_enabled: "{{ matrix_playbook_traefik_labels_enabled }}"

  3550. matrix_media_repo_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  3551. matrix_media_repo_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  3552. matrix_media_repo_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  3553. 

  3554. matrix_media_repo_container_labels_traefik_internal_media_enabled: "{{ matrix_playbook_internal_matrix_client_api_traefik_entrypoint_enabled }}"

  3555. matrix_media_repo_container_labels_traefik_internal_media_entrypoints: "{{ matrix_playbook_internal_matrix_client_api_traefik_entrypoint_name }}"

  3556. 

  3557. matrix_media_repo_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  3558. matrix_media_repo_database_username: matrix_media_repo

  3559. matrix_media_repo_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mediarepo.db', rounds=655555) | to_uuid }}"

  3560. matrix_media_repo_database_name: matrix_media_repo

  3561. 

  3562. matrix_media_repo_systemd_required_services_list_auto: |

  3563.   {{

  3564.     matrix_addons_homeserver_systemd_services_list

  3565.     +

  3566.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled and matrix_media_repo_database_hostname == devture_postgres_connection_hostname else [])

  3567.   }}

  3568. 

  3569. # Auto configured server setup by the playbook

  3570. matrix_media_repo_homeservers_auto:

  3571.   -  # Keep the dash from this line.

  3572. 

  3573.     # This should match the server_name of your homeserver, and the Host header

  3574.     # provided to the media repo.

  3575.     name: "{{ matrix_domain }}"

  3576. 

  3577.     # The base URL to where the homeserver can actually be reached by MMR.

  3578.     csApi: "{{ matrix_homeserver_container_url }}"

  3579. 

  3580.     # The number of consecutive failures in calling this homeserver before the

  3581.     # media repository will start backing off. This defaults to 10 if not given.

  3582.     backoffAt: 10

  3583. 

  3584.     # The admin API interface supported by the homeserver. MMR uses a subset of the admin API

  3585.     # during certain operations, like attempting to purge media from a room or validating server

  3586.     # admin status. This should be set to one of "synapse", "dendrite", or "matrix". When set

  3587.     # to "matrix", most functionality requiring the admin API will not work.

  3588.     adminApiKind: "{{ 'synapse' if matrix_homeserver_implementation == 'synapse' else ('dendrite' if matrix_homeserver_implementation == 'dendrite' else 'matrix') }}"

  3589. 

  3590. matrix_media_repo_homeserver_federation_enabled: "{{ matrix_homeserver_federation_enabled }}"

  3591. 

  3592. ######################################################################

  3593. #

  3594. # /matrix-media-repo

  3595. #

  3596. ######################################################################

  3597. 

  3598. 

  3599. ########################################################################

  3600. #                                                                      #

  3601. # com.devture.ansible.role.postgres                                    #

  3602. #                                                                      #

  3603. ########################################################################

  3604. 

  3605. # To completely disable installing Postgres, use `devture_postgres_enabled: false`.

  3606. 

  3607. devture_postgres_identifier: matrix-postgres

  3608. 

  3609. devture_postgres_architecture: "{{ matrix_architecture }}"

  3610. 

  3611. devture_postgres_base_path: "{{ matrix_base_data_path }}/postgres"

  3612. 

  3613. devture_postgres_uid: "{{ matrix_user_uid }}"

  3614. devture_postgres_gid: "{{ matrix_user_gid }}"

  3615. 

  3616. devture_postgres_connection_username: matrix

  3617. devture_postgres_db_name: matrix

  3618. 

  3619. devture_postgres_systemd_services_to_stop_for_maintenance_list_auto: "{{ devture_systemd_service_manager_services_list_auto | map(attribute='name') | reject('equalto', (devture_postgres_identifier + '.service')) }}"

  3620. 

  3621. devture_postgres_max_connections: "{{ 500 if matrix_synapse_workers_enabled else 200 }}"

  3622. 

  3623. devture_postgres_managed_databases_auto: |

  3624.   {{

  3625.     ([{

  3626.       'name': matrix_synapse_database_database,

  3627.       'username': matrix_synapse_database_user,

  3628.       'password': matrix_synapse_database_password,

  3629.     }] if (matrix_synapse_enabled and matrix_synapse_database_host == devture_postgres_connection_hostname) else [])

  3630.     +

  3631.     ([{

  3632.       'name': matrix_dendrite_federation_api_database,

  3633.       'username': matrix_dendrite_database_user,

  3634.       'password': matrix_dendrite_database_password,

  3635.     },{

  3636.       'name': matrix_dendrite_key_server_database,

  3637.       'username': matrix_dendrite_database_user,

  3638.       'password': matrix_dendrite_database_password,

  3639.     },{

  3640.       'name': matrix_dendrite_media_api_database,

  3641.       'username': matrix_dendrite_database_user,

  3642.       'password': matrix_dendrite_database_password,

  3643.     },{

  3644.       'name': matrix_dendrite_room_database,

  3645.       'username': matrix_dendrite_database_user,

  3646.       'password': matrix_dendrite_database_password,

  3647.     },{

  3648.       'name': matrix_dendrite_sync_api_database,

  3649.       'username': matrix_dendrite_database_user,

  3650.       'password': matrix_dendrite_database_password,

  3651.     },{

  3652.       'name': matrix_dendrite_user_api_database,

  3653.       'username': matrix_dendrite_database_user,

  3654.       'password': matrix_dendrite_database_password,

  3655.     },{

  3656.       'name': matrix_dendrite_relay_api_database,

  3657.       'username': matrix_dendrite_database_user,

  3658.       'password': matrix_dendrite_database_password,

  3659.     },{

  3660.       'name': matrix_dendrite_push_server_database,

  3661.       'username': matrix_dendrite_database_user,

  3662.       'password': matrix_dendrite_database_password,

  3663.     },{

  3664.       'name': matrix_dendrite_mscs_database,

  3665.       'username': matrix_dendrite_database_user,

  3666.       'password': matrix_dendrite_database_password,

  3667.     }] if (matrix_dendrite_enabled and matrix_dendrite_database_hostname == devture_postgres_connection_hostname) else [])

  3668.     +

  3669.     ([{

  3670.       'name': matrix_sliding_sync_database_name,

  3671.       'username': matrix_sliding_sync_database_username,

  3672.       'password': matrix_sliding_sync_database_password,

  3673.     }] if (matrix_sliding_sync_enabled) else [])

  3674.     +

  3675.     ([{

  3676.       'name': matrix_ma1sd_database_name,

  3677.       'username': matrix_ma1sd_database_username,

  3678.       'password': matrix_ma1sd_database_password,

  3679.     }] if (matrix_ma1sd_enabled and matrix_ma1sd_database_engine == 'postgres' and matrix_ma1sd_database_hostname == devture_postgres_connection_hostname) else [])

  3680.     +

  3681.     ([{

  3682.       'name': matrix_bot_matrix_reminder_bot_database_name,

  3683.       'username': matrix_bot_matrix_reminder_bot_database_username,

  3684.       'password': matrix_bot_matrix_reminder_bot_database_password,

  3685.     }] if (matrix_bot_matrix_reminder_bot_enabled and matrix_bot_matrix_reminder_bot_database_engine == 'postgres' and matrix_bot_matrix_reminder_bot_database_hostname == devture_postgres_connection_hostname) else [])

  3686.     +

  3687.     ([{

  3688.       'name': matrix_bot_honoroit_database_name,

  3689.       'username': matrix_bot_honoroit_database_username,

  3690.       'password': matrix_bot_honoroit_database_password,

  3691.     }] if (matrix_bot_honoroit_enabled and matrix_bot_honoroit_database_engine == 'postgres' and matrix_bot_honoroit_database_hostname == devture_postgres_connection_hostname) else [])

  3692.     +

  3693.     ([{

  3694.       'name': matrix_bot_postmoogle_database_name,

  3695.       'username': matrix_bot_postmoogle_database_username,

  3696.       'password': matrix_bot_postmoogle_database_password,

  3697.     }] if (matrix_bot_postmoogle_enabled and matrix_bot_postmoogle_database_engine == 'postgres' and matrix_bot_postmoogle_database_hostname == devture_postgres_connection_hostname) else [])

  3698.     +

  3699.     ([{

  3700.       'name': matrix_bot_maubot_database_name,

  3701.       'username': matrix_bot_maubot_database_username,

  3702.       'password': matrix_bot_maubot_database_password,

  3703.     }] if (matrix_bot_maubot_enabled  and matrix_bot_maubot_database_engine == 'postgres' and matrix_bot_maubot_database_hostname == devture_postgres_connection_hostname) else [])

  3704.     +

  3705.     ([{

  3706.       'name': matrix_bot_buscarron_database_name,

  3707.       'username': matrix_bot_buscarron_database_username,

  3708.       'password': matrix_bot_buscarron_database_password,

  3709.     }] if (matrix_bot_buscarron_enabled and matrix_bot_buscarron_database_engine == 'postgres' and matrix_bot_buscarron_database_hostname == devture_postgres_connection_hostname) else [])

  3710.     +

  3711.     ([{

  3712.       'name': matrix_registration_database_name,

  3713.       'username': matrix_registration_database_username,

  3714.       'password': matrix_registration_database_password,

  3715.     }] if (matrix_registration_enabled and matrix_registration_database_engine == 'postgres' and matrix_registration_database_hostname == devture_postgres_connection_hostname) else [])

  3716.     +

  3717.     ([{

  3718.       'name': matrix_appservice_discord_database_name,

  3719.       'username': matrix_appservice_discord_database_username,

  3720.       'password': matrix_appservice_discord_database_password,

  3721.     }] if (matrix_appservice_discord_enabled and matrix_appservice_discord_database_engine == 'postgres' and matrix_appservice_discord_database_hostname == devture_postgres_connection_hostname) else [])

  3722.     +

  3723.     ([{

  3724.       'name': matrix_appservice_draupnir_for_all_database_name,

  3725.       'username': matrix_appservice_draupnir_for_all_database_username,

  3726.       'password': matrix_appservice_draupnir_for_all_database_password,

  3727.     }] if (matrix_appservice_draupnir_for_all_enabled and matrix_appservice_draupnir_for_all_database_hostname == devture_postgres_connection_hostname) else [])

  3728.     +

  3729.     ([{

  3730.       'name': matrix_appservice_slack_database_name,

  3731.       'username': matrix_appservice_slack_database_username,

  3732.       'password': matrix_appservice_slack_database_password,

  3733.     }] if (matrix_appservice_slack_enabled and matrix_appservice_slack_database_engine == 'postgres' and matrix_appservice_slack_database_hostname == devture_postgres_connection_hostname) else [])

  3734.     +

  3735.     ([{

  3736.       'name': matrix_appservice_irc_database_name,

  3737.       'username': matrix_appservice_irc_database_username,

  3738.       'password': matrix_appservice_irc_database_password,

  3739.     }] if (matrix_appservice_irc_enabled and matrix_appservice_irc_database_engine == 'postgres' and matrix_appservice_irc_database_hostname == devture_postgres_connection_hostname) else [])

  3740.     +

  3741.     ([{

  3742.       'name': matrix_appservice_kakaotalk_database_name,

  3743.       'username': matrix_appservice_kakaotalk_database_username,

  3744.       'password': matrix_appservice_kakaotalk_database_password,

  3745.     }] if (matrix_appservice_kakaotalk_enabled and matrix_appservice_kakaotalk_database_engine == 'postgres' and matrix_appservice_kakaotalk_database_hostname == devture_postgres_connection_hostname) else [])

  3746.     +

  3747.     ([{

  3748.       'name': matrix_beeper_linkedin_database_name,

  3749.       'username': matrix_beeper_linkedin_database_username,

  3750.       'password': matrix_beeper_linkedin_database_password,

  3751.     }] if (matrix_beeper_linkedin_enabled and matrix_beeper_linkedin_database_engine == 'postgres' and matrix_beeper_linkedin_database_hostname == devture_postgres_connection_hostname) else [])

  3752.     +

  3753.     ([{

  3754.       'name': matrix_go_skype_bridge_database_name,

  3755.       'username': matrix_go_skype_bridge_database_username,

  3756.       'password': matrix_go_skype_bridge_database_password,

  3757.     }] if (matrix_go_skype_bridge_enabled and matrix_go_skype_bridge_database_engine == 'postgres' and matrix_go_skype_bridge_database_hostname == devture_postgres_connection_hostname) else [])

  3758.     +

  3759.     ([{

  3760.       'name': matrix_wechat_database_name,

  3761.       'username': matrix_wechat_database_username,

  3762.       'password': matrix_wechat_database_password,

  3763.     }] if (matrix_wechat_enabled and matrix_wechat_database_engine == 'postgres' and matrix_wechat_database_hostname == devture_postgres_connection_hostname) else [])

  3764.     +

  3765.     ([{

  3766.       'name': matrix_mautrix_facebook_database_name,

  3767.       'username': matrix_mautrix_facebook_database_username,

  3768.       'password': matrix_mautrix_facebook_database_password,

  3769.     }] if (matrix_mautrix_facebook_enabled and matrix_mautrix_facebook_database_engine == 'postgres' and matrix_mautrix_facebook_database_hostname == devture_postgres_connection_hostname) else [])

  3770.     +

  3771.     ([{

  3772.       'name': matrix_mautrix_hangouts_database_name,

  3773.       'username': matrix_mautrix_hangouts_database_username,

  3774.       'password': matrix_mautrix_hangouts_database_password,

  3775.     }] if (matrix_mautrix_hangouts_enabled and matrix_mautrix_hangouts_database_engine == 'postgres' and matrix_mautrix_hangouts_database_hostname == devture_postgres_connection_hostname) else [])

  3776.     +

  3777.     ([{

  3778.       'name': matrix_mautrix_googlechat_database_name,

  3779.       'username': matrix_mautrix_googlechat_database_username,

  3780.       'password': matrix_mautrix_googlechat_database_password,

  3781.     }] if (matrix_mautrix_googlechat_enabled and matrix_mautrix_googlechat_database_engine == 'postgres' and matrix_mautrix_googlechat_database_hostname == devture_postgres_connection_hostname) else [])

  3782.     +

  3783.     ([{

  3784.       'name': matrix_mautrix_instagram_database_name,

  3785.       'username': matrix_mautrix_instagram_database_username,

  3786.       'password': matrix_mautrix_instagram_database_password,

  3787.     }] if (matrix_mautrix_instagram_enabled and matrix_mautrix_instagram_database_engine == 'postgres' and matrix_mautrix_instagram_database_hostname == devture_postgres_connection_hostname) else [])

  3788.     +

  3789.     ([{

  3790.       'name': matrix_mautrix_signal_database_name,

  3791.       'username': matrix_mautrix_signal_database_username,

  3792.       'password': matrix_mautrix_signal_database_password,

  3793.     }] if (matrix_mautrix_signal_enabled and matrix_mautrix_signal_database_engine == 'postgres' and matrix_mautrix_signal_database_hostname == devture_postgres_connection_hostname) else [])

  3794.     +

  3795.     ([{

  3796.       'name': matrix_mautrix_meta_messenger_database_name,

  3797.       'username': matrix_mautrix_meta_messenger_database_username,

  3798.       'password': matrix_mautrix_meta_messenger_database_password,

  3799.     }] if (matrix_mautrix_meta_messenger_enabled and matrix_mautrix_meta_messenger_database_engine == 'postgres' and matrix_mautrix_meta_messenger_database_hostname == devture_postgres_connection_hostname) else [])

  3800.     +

  3801.     ([{

  3802.       'name': matrix_mautrix_meta_instagram_database_name,

  3803.       'username': matrix_mautrix_meta_instagram_database_username,

  3804.       'password': matrix_mautrix_meta_instagram_database_password,

  3805.     }] if (matrix_mautrix_meta_instagram_enabled and matrix_mautrix_meta_instagram_database_engine == 'postgres' and matrix_mautrix_meta_instagram_database_hostname == devture_postgres_connection_hostname) else [])

  3806.     +

  3807.     ([{

  3808.       'name': matrix_mautrix_wsproxy_syncproxy_database_name,

  3809.       'username': matrix_mautrix_wsproxy_syncproxy_database_username,

  3810.       'password': matrix_mautrix_wsproxy_syncproxy_database_password,

  3811.     }] if (matrix_mautrix_wsproxy_enabled and matrix_mautrix_wsproxy_syncproxy_database_engine == 'postgres' and matrix_mautrix_wsproxy_syncproxy_database_hostname == 'matrix-postgres') else [])

  3812.     +

  3813.     ([{

  3814.       'name': matrix_mautrix_telegram_database_name,

  3815.       'username': matrix_mautrix_telegram_database_username,

  3816.       'password': matrix_mautrix_telegram_database_password,

  3817.     }] if (matrix_mautrix_telegram_enabled and matrix_mautrix_telegram_database_engine == 'postgres' and matrix_mautrix_telegram_database_hostname == devture_postgres_connection_hostname) else [])

  3818.     +

  3819.     ([{

  3820.       'name': matrix_mautrix_twitter_database_name,

  3821.       'username': matrix_mautrix_twitter_database_username,

  3822.       'password': matrix_mautrix_twitter_database_password,

  3823.     }] if (matrix_mautrix_twitter_enabled and matrix_mautrix_twitter_database_engine == 'postgres' and matrix_mautrix_twitter_database_hostname == devture_postgres_connection_hostname) else [])

  3824.     +

  3825.     ([{

  3826.       'name': matrix_mautrix_gmessages_database_name,

  3827.       'username': matrix_mautrix_gmessages_database_username,

  3828.       'password': matrix_mautrix_gmessages_database_password,

  3829.     }] if (matrix_mautrix_gmessages_enabled and matrix_mautrix_gmessages_database_engine == 'postgres' and matrix_mautrix_gmessages_database_hostname == devture_postgres_connection_hostname) else [])

  3830.     +

  3831.     ([{

  3832.       'name': matrix_mautrix_whatsapp_database_name,

  3833.       'username': matrix_mautrix_whatsapp_database_username,

  3834.       'password': matrix_mautrix_whatsapp_database_password,

  3835.     }] if (matrix_mautrix_whatsapp_enabled and matrix_mautrix_whatsapp_database_engine == 'postgres' and matrix_mautrix_whatsapp_database_hostname == devture_postgres_connection_hostname) else [])

  3836.     +

  3837.     ([{

  3838.       'name': matrix_mautrix_discord_database_name,

  3839.       'username': matrix_mautrix_discord_database_username,

  3840.       'password': matrix_mautrix_discord_database_password,

  3841.     }] if (matrix_mautrix_discord_enabled and matrix_mautrix_discord_database_engine == 'postgres' and matrix_mautrix_discord_database_hostname == devture_postgres_connection_hostname) else [])

  3842.     +

  3843.     ([{

  3844.       'name': matrix_mautrix_slack_database_name,

  3845.       'username': matrix_mautrix_slack_database_username,

  3846.       'password': matrix_mautrix_slack_database_password,

  3847.     }] if (matrix_mautrix_slack_enabled and matrix_mautrix_slack_database_engine == 'postgres' and matrix_mautrix_slack_database_hostname == devture_postgres_connection_hostname) else [])

  3848.     +

  3849.     ([{

  3850.       'name': matrix_mx_puppet_slack_database_name,

  3851.       'username': matrix_mx_puppet_slack_database_username,

  3852.       'password': matrix_mx_puppet_slack_database_password,

  3853.     }] if (matrix_mx_puppet_slack_enabled and matrix_mx_puppet_slack_database_engine == 'postgres' and matrix_mx_puppet_slack_database_hostname == devture_postgres_connection_hostname) else [])

  3854.     +

  3855.     ([{

  3856.       'name': matrix_mx_puppet_twitter_database_name,

  3857.       'username': matrix_mx_puppet_twitter_database_username,

  3858.       'password': matrix_mx_puppet_twitter_database_password,

  3859.     }] if (matrix_mx_puppet_twitter_enabled and matrix_mx_puppet_twitter_database_engine == 'postgres' and matrix_mx_puppet_twitter_database_hostname == devture_postgres_connection_hostname) else [])

  3860.     +

  3861.     ([{

  3862.       'name': matrix_mx_puppet_instagram_database_name,

  3863.       'username': matrix_mx_puppet_instagram_database_username,

  3864.       'password': matrix_mx_puppet_instagram_database_password,

  3865.     }] if (matrix_mx_puppet_instagram_enabled and matrix_mx_puppet_instagram_database_engine == 'postgres' and matrix_mx_puppet_instagram_database_hostname == devture_postgres_connection_hostname) else [])

  3866.     +

  3867.     ([{

  3868.       'name': matrix_mx_puppet_discord_database_name,

  3869.       'username': matrix_mx_puppet_discord_database_username,

  3870.       'password': matrix_mx_puppet_discord_database_password,

  3871.     }] if (matrix_mx_puppet_discord_enabled  and matrix_mx_puppet_discord_database_engine == 'postgres' and matrix_mx_puppet_discord_database_hostname == devture_postgres_connection_hostname) else [])

  3872.     +

  3873.     ([{

  3874.       'name': matrix_mx_puppet_steam_database_name,

  3875.       'username': matrix_mx_puppet_steam_database_username,

  3876.       'password': matrix_mx_puppet_steam_database_password,

  3877.     }] if (matrix_mx_puppet_steam_enabled and matrix_mx_puppet_steam_database_engine == 'postgres' and matrix_mx_puppet_steam_database_hostname == devture_postgres_connection_hostname) else [])

  3878.     +

  3879.     ([{

  3880.       'name': matrix_mx_puppet_groupme_database_name,

  3881.       'username': matrix_mx_puppet_groupme_database_username,

  3882.       'password': matrix_mx_puppet_groupme_database_password,

  3883.     }] if (matrix_mx_puppet_groupme_enabled and matrix_mx_puppet_groupme_database_engine == 'postgres' and matrix_mx_puppet_groupme_database_hostname == devture_postgres_connection_hostname) else [])

  3884.     +

  3885.     ([{

  3886.       'name': matrix_dimension_database_name,

  3887.       'username': matrix_dimension_database_username,

  3888.       'password': matrix_dimension_database_password,

  3889.     }] if (matrix_dimension_enabled and matrix_dimension_database_engine == 'postgres' and matrix_dimension_database_hostname == devture_postgres_connection_hostname) else [])

  3890.     +

  3891.     ([{

  3892.       'name': etherpad_database_name,

  3893.       'username': etherpad_database_username,

  3894.       'password': etherpad_database_password,

  3895.     }] if (etherpad_enabled and etherpad_database_engine == 'postgres' and etherpad_database_hostname == devture_postgres_connection_hostname) else [])

  3896.     +

  3897.     ([{

  3898.       'name': prometheus_postgres_exporter_database_name,

  3899.       'username': prometheus_postgres_exporter_database_username,

  3900.       'password': prometheus_postgres_exporter_database_password,

  3901.     }] if (prometheus_postgres_exporter_enabled and prometheus_postgres_exporter_database_hostname == devture_postgres_connection_hostname) else [])

  3902.     +

  3903.     ([{

  3904.       'name': matrix_media_repo_database_name,

  3905.       'username': matrix_media_repo_database_username,

  3906.       'password': matrix_media_repo_database_password,

  3907.     }] if (matrix_media_repo_enabled and matrix_media_repo_database_hostname == devture_postgres_connection_hostname) else [])

  3908. 

  3909.    }}

  3910. 

  3911. ########################################################################

  3912. #                                                                      #

  3913. # /com.devture.ansible.role.postgres                                   #

  3914. #                                                                      #

  3915. ########################################################################

  3916. 

  3917. 

  3918. ########################################################################

  3919. #                                                                      #

  3920. # com.devture.ansible.role.postgres_backup                             #

  3921. #                                                                      #

  3922. ########################################################################

  3923. 

  3924. devture_postgres_backup_enabled: false

  3925. 

  3926. devture_postgres_backup_identifier: matrix-postgres-backup

  3927. 

  3928. devture_postgres_backup_architecture: "{{ matrix_architecture }}"

  3929. 

  3930. devture_postgres_backup_base_path: "{{ matrix_base_data_path }}/postgres-backup"

  3931. 

  3932. devture_postgres_backup_systemd_required_services_list_auto: |

  3933.   {{

  3934.     ([(devture_postgres_identifier + '.service')] if (devture_postgres_enabled and devture_postgres_backup_connection_hostname == devture_postgres_connection_hostname) else [])

  3935.   }}

  3936. 

  3937. devture_postgres_backup_container_network: "{{ (devture_postgres_container_network if (devture_postgres_enabled and devture_postgres_backup_connection_hostname == devture_postgres_connection_hostname) else devture_postgres_backup_identifier) }}"

  3938. 

  3939. devture_postgres_backup_container_additional_networks_auto: |-

  3940.   {{

  3941.       ([devture_postgres_container_network] if (devture_postgres_enabled and devture_postgres_backup_connection_hostname == devture_postgres_connection_hostname and devture_postgres_backup_container_network != devture_postgres_container_network) else [])

  3942.   }}

  3943. 

  3944. devture_postgres_backup_uid: "{{ matrix_user_uid }}"

  3945. devture_postgres_backup_gid: "{{ matrix_user_gid }}"

  3946. 

  3947. devture_postgres_backup_connection_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  3948. devture_postgres_backup_connection_port: "{{ devture_postgres_connection_port if devture_postgres_enabled else 5432 }}"

  3949. devture_postgres_backup_connection_username: "{{ devture_postgres_connection_username if devture_postgres_enabled else '' }}"

  3950. devture_postgres_backup_connection_password: "{{ devture_postgres_connection_password if devture_postgres_enabled else '' }}"

  3951. 

  3952. devture_postgres_backup_postgres_data_path: "{{ devture_postgres_data_path if devture_postgres_enabled else '' }}"

  3953. devture_postgres_backup_postgres_role_include_name: galaxy/postgres

  3954. 

  3955. devture_postgres_backup_databases: "{{ devture_postgres_managed_databases | map(attribute='name') if devture_postgres_enabled else [] }}"

  3956. 

  3957. ########################################################################

  3958. #                                                                      #

  3959. # /com.devture.ansible.role.postgres_backup                            #

  3960. #                                                                      #

  3961. ########################################################################

  3962. 

  3963. 

  3964. ######################################################################

  3965. #

  3966. # matrix-sygnal

  3967. #

  3968. ######################################################################

  3969. 

  3970. # Most people don't need their own push-server, because they also need their own app to utilize it from.

  3971. matrix_sygnal_enabled: false

  3972. 

  3973. matrix_sygnal_metrics_prometheus_enabled: "{{ prometheus_enabled or matrix_metrics_exposure_enabled }}"

  3974. 

  3975. matrix_sygnal_hostname: "{{ matrix_server_fqn_sygnal }}"

  3976. 

  3977. matrix_sygnal_container_network: "{{ matrix_homeserver_container_network }}"

  3978. 

  3979. matrix_sygnal_container_additional_networks: "{{ [matrix_playbook_reverse_proxyable_services_additional_network] if matrix_playbook_reverse_proxyable_services_additional_network else [] }}"

  3980. 

  3981. matrix_sygnal_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '6000') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  3982. 

  3983. matrix_sygnal_container_labels_traefik_enabled: "{{ matrix_playbook_traefik_labels_enabled }}"

  3984. matrix_sygnal_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  3985. matrix_sygnal_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  3986. matrix_sygnal_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  3987. 

  3988. ######################################################################

  3989. #

  3990. # /matrix-sygnal

  3991. #

  3992. ######################################################################

  3993. 

  3994. ######################################################################

  3995. #

  3996. # etke/ntfy

  3997. #

  3998. ######################################################################

  3999. 

  4000. ntfy_enabled: false

  4001. 

  4002. ntfy_identifier: matrix-ntfy

  4003. 

  4004. ntfy_base_path: "{{ matrix_base_data_path }}/ntfy"

  4005. 

  4006. ntfy_uid: "{{ matrix_user_uid }}"

  4007. ntfy_gid: "{{ matrix_user_gid }}"

  4008. 

  4009. ntfy_hostname: "{{ matrix_server_fqn_ntfy }}"

  4010. 

  4011. ntfy_container_additional_networks: "{{ [matrix_playbook_reverse_proxyable_services_additional_network] if matrix_playbook_reverse_proxyable_services_additional_network else [] }}"

  4012. 

  4013. ntfy_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '2586') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  4014. 

  4015. ntfy_container_labels_traefik_enabled: "{{ matrix_playbook_traefik_labels_enabled }}"

  4016. ntfy_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  4017. ntfy_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  4018. ntfy_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  4019. 

  4020. ntfy_visitor_request_limit_exempt_hosts_hostnames_auto: |

  4021.   {{

  4022.     [matrix_server_fqn_matrix]

  4023.   }}

  4024. 

  4025. ######################################################################

  4026. #

  4027. # /etky/ntfy

  4028. #

  4029. ######################################################################

  4030. 

  4031. ######################################################################

  4032. #

  4033. # etke/redis

  4034. #

  4035. ######################################################################

  4036. 

  4037. redis_enabled: "{{ not keydb_enabled and (matrix_synapse_workers_enabled or (matrix_hookshot_enabled and matrix_hookshot_experimental_encryption_enabled)) }}"

  4038. 

  4039. redis_identifier: matrix-redis

  4040. 

  4041. redis_uid: "{{ matrix_user_uid }}"

  4042. redis_gid: "{{ matrix_user_gid }}"

  4043. 

  4044. redis_base_path: "{{ matrix_base_data_path }}/redis"

  4045. 

  4046. ######################################################################

  4047. #

  4048. # /etke/redis

  4049. #

  4050. ######################################################################

  4051. 

  4052. ######################################################################

  4053. #

  4054. # keydb

  4055. #

  4056. ######################################################################

  4057. 

  4058. keydb_enabled: "{{ matrix_synapse_workers_enabled or (matrix_hookshot_enabled and matrix_hookshot_experimental_encryption_enabled) }}"

  4059. 

  4060. keydb_identifier: matrix-keydb

  4061. 

  4062. keydb_uid: "{{ matrix_user_uid }}"

  4063. keydb_gid: "{{ matrix_user_gid }}"

  4064. 

  4065. keydb_base_path: "{{ matrix_base_data_path }}/keydb"

  4066. 

  4067. keydb_arch: |-

  4068.   {{

  4069.     ({

  4070.       'amd64': 'x86_64',

  4071.       'arm32': 'arm32',

  4072.       'arm64': 'arm64',

  4073.     })[matrix_architecture]

  4074.   }}

  4075. 

  4076. ######################################################################

  4077. #

  4078. # keydb

  4079. #

  4080. ######################################################################

  4081. 

  4082. ######################################################################

  4083. #

  4084. # matrix-client-element

  4085. #

  4086. ######################################################################

  4087. 

  4088. # By default, this playbook installs the Element web UI on the `matrix_server_fqn_element` domain.

  4089. # If you wish to connect to your Matrix server by other means, you may wish to disable this.

  4090. matrix_client_element_enabled: true

  4091. 

  4092. matrix_client_element_scheme: "{{ 'https' if matrix_playbook_ssl_enabled else 'http' }}"

  4093. 

  4094. matrix_client_element_container_image_self_build: "{{ matrix_architecture not in ['arm64', 'amd64'] }}"

  4095. 

  4096. matrix_client_element_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '8765') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  4097. 

  4098. matrix_client_element_container_network: "{{ matrix_addons_container_network }}"

  4099. 

  4100. matrix_client_element_container_additional_networks: "{{ [matrix_playbook_reverse_proxyable_services_additional_network] if (matrix_client_element_container_labels_traefik_enabled and matrix_playbook_reverse_proxyable_services_additional_network) else [] }}"

  4101. 

  4102. matrix_client_element_container_labels_traefik_enabled: "{{ matrix_playbook_reverse_proxy_type in ['playbook-managed-traefik', 'other-traefik-container'] }}"

  4103. matrix_client_element_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  4104. matrix_client_element_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  4105. matrix_client_element_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  4106. 

  4107. matrix_client_element_default_hs_url: "{{ matrix_homeserver_url }}"

  4108. matrix_client_element_default_is_url: "{{ matrix_identity_server_url }}"

  4109. 

  4110. # Use Dimension if enabled, otherwise fall back to Scalar

  4111. matrix_client_element_integrations_ui_url: "{{ matrix_dimension_integrations_ui_url if matrix_dimension_enabled else 'https://scalar.vector.im/' }}"

  4112. matrix_client_element_integrations_rest_url: "{{ matrix_dimension_integrations_rest_url if matrix_dimension_enabled else 'https://scalar.vector.im/api' }}"

  4113. matrix_client_element_integrations_widgets_urls: "{{ matrix_dimension_integrations_widgets_urls if matrix_dimension_enabled else ['https://scalar.vector.im/api'] }}"

  4114. matrix_client_element_integrations_jitsi_widget_url: "{{ matrix_dimension_integrations_jitsi_widget_url if matrix_dimension_enabled else 'https://scalar.vector.im/api/widgets/jitsi.html' }}"

  4115. 

  4116. matrix_client_element_self_check_validate_certificates: "{{ matrix_playbook_ssl_enabled }}"

  4117. 

  4118. matrix_client_element_registration_enabled: "{{ matrix_synapse_enable_registration }}"

  4119. 

  4120. matrix_client_element_enable_presence_by_hs_url: |-

  4121.   {{

  4122.     none

  4123.     if matrix_synapse_presence_enabled

  4124.     else {matrix_client_element_default_hs_url: false}

  4125.   }}

  4126. 

  4127. matrix_client_element_jitsi_preferred_domain: "{{ matrix_server_fqn_jitsi if jitsi_enabled else '' }}"

  4128. 

  4129. ######################################################################

  4130. #

  4131. # /matrix-client-element

  4132. #

  4133. ######################################################################

  4134. 

  4135. ######################################################################

  4136. #

  4137. # matrix-client-hydrogen

  4138. #

  4139. ######################################################################

  4140. 

  4141. matrix_client_hydrogen_enabled: false

  4142. 

  4143. matrix_client_hydrogen_container_image_self_build: "{{ matrix_architecture not in ['amd64'] }}"

  4144. 

  4145. matrix_client_hydrogen_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '8768') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  4146. 

  4147. matrix_client_hydrogen_container_network: "{{ matrix_addons_container_network }}"

  4148. 

  4149. matrix_client_hydrogen_container_additional_networks: "{{ [matrix_playbook_reverse_proxyable_services_additional_network] if (matrix_client_hydrogen_container_labels_traefik_enabled and matrix_playbook_reverse_proxyable_services_additional_network) else [] }}"

  4150. 

  4151. matrix_client_hydrogen_container_labels_traefik_enabled: "{{ matrix_playbook_reverse_proxy_type in ['playbook-managed-traefik', 'other-traefik-container'] }}"

  4152. matrix_client_hydrogen_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  4153. matrix_client_hydrogen_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  4154. matrix_client_hydrogen_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  4155. 

  4156. matrix_client_hydrogen_scheme: "{{ 'https' if matrix_playbook_ssl_enabled else 'http' }}"

  4157. 

  4158. matrix_client_hydrogen_default_hs_url: "{{ matrix_homeserver_url }}"

  4159. 

  4160. matrix_client_hydrogen_self_check_validate_certificates: "{{ matrix_playbook_ssl_enabled }}"

  4161. 

  4162. ######################################################################

  4163. #

  4164. # /matrix-client-hydrogen

  4165. #

  4166. ######################################################################

  4167. 

  4168. ######################################################################

  4169. #

  4170. # matrix-client-cinny

  4171. #

  4172. ######################################################################

  4173. 

  4174. matrix_client_cinny_enabled: false

  4175. 

  4176. matrix_client_cinny_container_image_self_build: "{{ matrix_architecture not in ['arm64', 'amd64'] }}"

  4177. 

  4178. matrix_client_cinny_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '8080') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  4179. 

  4180. matrix_client_cinny_container_network: "{{ matrix_addons_container_network }}"

  4181. 

  4182. matrix_client_cinny_container_additional_networks: "{{ [matrix_playbook_reverse_proxyable_services_additional_network] if (matrix_client_cinny_container_labels_traefik_enabled and matrix_playbook_reverse_proxyable_services_additional_network) else [] }}"

  4183. 

  4184. matrix_client_cinny_container_labels_traefik_enabled: "{{ matrix_playbook_reverse_proxy_type in ['playbook-managed-traefik', 'other-traefik-container'] }}"

  4185. matrix_client_cinny_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  4186. matrix_client_cinny_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  4187. matrix_client_cinny_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  4188. 

  4189. matrix_client_cinny_scheme: "{{ 'https' if matrix_playbook_ssl_enabled else 'http' }}"

  4190. 

  4191. matrix_client_cinny_default_hs_url: "{{ matrix_homeserver_url }}"

  4192. 

  4193. matrix_client_cinny_self_check_validate_certificates: "{{ matrix_playbook_ssl_enabled }}"

  4194. 

  4195. ######################################################################

  4196. #

  4197. # /matrix-client-cinny

  4198. #

  4199. ######################################################################

  4200. 

  4201. ######################################################################

  4202. #

  4203. # matrix-client-schildichat

  4204. #

  4205. ######################################################################

  4206. 

  4207. matrix_client_schildichat_enabled: false

  4208. 

  4209. matrix_client_schildichat_scheme: "{{ 'https' if matrix_playbook_ssl_enabled else 'http' }}"

  4210. 

  4211. matrix_client_schildichat_container_image_self_build: "{{ matrix_architecture not in ['arm64', 'amd64'] }}"

  4212. 

  4213. matrix_client_schildichat_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '8765') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  4214. 

  4215. matrix_client_schildichat_container_network: "{{ matrix_addons_container_network }}"

  4216. 

  4217. matrix_client_schildichat_container_additional_networks: "{{ [matrix_playbook_reverse_proxyable_services_additional_network] if (matrix_client_schildichat_container_labels_traefik_enabled and matrix_playbook_reverse_proxyable_services_additional_network) else [] }}"

  4218. 

  4219. matrix_client_schildichat_container_labels_traefik_enabled: "{{ matrix_playbook_reverse_proxy_type in ['playbook-managed-traefik', 'other-traefik-container'] }}"

  4220. matrix_client_schildichat_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  4221. matrix_client_schildichat_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  4222. matrix_client_schildichat_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  4223. 

  4224. matrix_client_schildichat_default_hs_url: "{{ matrix_homeserver_url }}"

  4225. matrix_client_schildichat_default_is_url: "{{ matrix_identity_server_url }}"

  4226. 

  4227. # Use Dimension if enabled, otherwise fall back to Scalar

  4228. matrix_client_schildichat_integrations_ui_url: "{{ matrix_dimension_integrations_ui_url if matrix_dimension_enabled else 'https://scalar.vector.im/' }}"

  4229. matrix_client_schildichat_integrations_rest_url: "{{ matrix_dimension_integrations_rest_url if matrix_dimension_enabled else 'https://scalar.vector.im/api' }}"

  4230. matrix_client_schildichat_integrations_widgets_urls: "{{ matrix_dimension_integrations_widgets_urls if matrix_dimension_enabled else ['https://scalar.vector.im/api'] }}"

  4231. matrix_client_schildichat_integrations_jitsi_widget_url: "{{ matrix_dimension_integrations_jitsi_widget_url if matrix_dimension_enabled else 'https://scalar.vector.im/api/widgets/jitsi.html' }}"

  4232. 

  4233. matrix_client_schildichat_self_check_validate_certificates: "{{ matrix_playbook_ssl_enabled }}"

  4234. 

  4235. matrix_client_schildichat_registration_enabled: "{{ matrix_synapse_enable_registration }}"

  4236. 

  4237. matrix_client_schildichat_enable_presence_by_hs_url: |-

  4238.   {{

  4239.     none

  4240.     if matrix_synapse_presence_enabled

  4241.     else {matrix_client_schildichat_default_hs_url: false}

  4242.   }}

  4243. 

  4244. matrix_client_schildichat_jitsi_preferred_domain: "{{ matrix_server_fqn_jitsi if jitsi_enabled else '' }}"

  4245. 

  4246. ######################################################################

  4247. #

  4248. # /matrix-client-schildichat

  4249. #

  4250. ######################################################################

  4251. 

  4252. ######################################################################

  4253. #

  4254. # matrix-synapse

  4255. #

  4256. ######################################################################

  4257. 

  4258. matrix_synapse_enabled: "{{ matrix_homeserver_implementation == 'synapse' }}"

  4259. 

  4260. matrix_synapse_username: "{{ matrix_user_username }}"

  4261. matrix_synapse_uid: "{{ matrix_user_uid }}"

  4262. matrix_synapse_gid: "{{ matrix_user_gid }}"

  4263. 

  4264. matrix_synapse_federation_enabled: "{{ matrix_homeserver_federation_enabled }}"

  4265. 

  4266. matrix_synapse_container_image_self_build: "{{ matrix_architecture not in ['arm64', 'amd64'] }}"

  4267. 

  4268. matrix_synapse_account_threepid_delegates_msisdn_mas1sd_url: "{{ ('http://matrix-ma1sd:' + matrix_ma1sd_container_port| string) }}"

  4269. 

  4270. # When ma1sd is enabled, we can use it to validate phone numbers. It's something that the homeserver cannot do by itself.

  4271. matrix_synapse_account_threepid_delegates_msisdn: "{{ matrix_synapse_account_threepid_delegates_msisdn_mas1sd_url if matrix_ma1sd_enabled else '' }}"

  4272. 

  4273. # For exposing the Matrix Federation API's TLS port (HTTPS) to the internet on all network interfaces.

  4274. matrix_synapse_container_federation_api_tls_host_bind_port: "{{ matrix_federation_public_port if (matrix_synapse_federation_enabled and matrix_synapse_tls_federation_listener_enabled) else '' }}"

  4275. #

  4276. # For exposing the Synapse Metrics API's port (plain HTTP) to the local host.

  4277. matrix_synapse_container_metrics_api_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '9100') if matrix_synapse_metrics_enabled and matrix_playbook_service_host_bind_interface_prefix else '' }}"

  4278. #

  4279. # For exposing the Synapse Manhole port (plain HTTP) to the local host.

  4280. matrix_synapse_container_manhole_api_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '9000') if matrix_synapse_metrics_enabled and matrix_playbook_service_host_bind_interface_prefix else '' }}"

  4281. 

  4282. matrix_synapse_container_network: "{{ matrix_homeserver_container_network }}"

  4283. 

  4284. matrix_synapse_container_additional_networks_auto: |

  4285.   {{

  4286.     (

  4287.       ([matrix_playbook_reverse_proxyable_services_additional_network] if matrix_synapse_container_labels_traefik_enabled and matrix_playbook_reverse_proxyable_services_additional_network else [])

  4288.       +

  4289.       ([devture_postgres_container_network] if (devture_postgres_enabled and devture_postgres_container_network != matrix_synapse_container_network and matrix_synapse_database_host == devture_postgres_connection_hostname) else [])

  4290.       +

  4291.       ([redis_container_network] if matrix_synapse_redis_enabled and matrix_synapse_redis_host == redis_identifier else [])

  4292.       +

  4293.       ([keydb_container_network] if matrix_synapse_redis_enabled and matrix_synapse_redis_host == keydb_identifier else [])

  4294.       +

  4295.       ([exim_relay_container_network] if (exim_relay_enabled and matrix_synapse_email_enabled and matrix_synapse_email_smtp_host == exim_relay_identifier and matrix_synapse_container_network != exim_relay_container_network) else [])

  4296.       +

  4297.       ([matrix_ma1sd_container_network] if (matrix_ma1sd_enabled and matrix_synapse_account_threepid_delegates_msisdn == matrix_synapse_account_threepid_delegates_msisdn_mas1sd_url and matrix_synapse_container_network != matrix_ma1sd_container_network) else [])

  4298.     ) | unique

  4299.   }}

  4300. 

  4301. matrix_synapse_container_labels_traefik_enabled: "{{ matrix_playbook_reverse_proxy_type in ['playbook-managed-traefik', 'other-traefik-container'] }}"

  4302. matrix_synapse_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  4303. matrix_synapse_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  4304. matrix_synapse_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  4305. matrix_synapse_container_labels_traefik_hostname: "{{ matrix_server_fqn_matrix }}"

  4306. 

  4307. matrix_synapse_container_labels_matrix_labels_enabled: "{{ not matrix_synapse_workers_enabled }}"

  4308. 

  4309. matrix_synapse_container_labels_public_client_root_redirection_enabled: "{{ matrix_synapse_container_labels_public_client_root_redirection_url != '' }}"

  4310. matrix_synapse_container_labels_public_client_root_redirection_url: "{{ (('https://' if matrix_playbook_ssl_enabled else 'http://') + matrix_server_fqn_element) if matrix_client_element_enabled else '' }}"

  4311. 

  4312. matrix_synapse_container_labels_public_client_synapse_admin_api_enabled: "{{ matrix_synapse_admin_enabled }}"

  4313. 

  4314. matrix_synapse_container_labels_public_federation_api_traefik_hostname: "{{ matrix_server_fqn_matrix_federation }}"

  4315. matrix_synapse_container_labels_public_federation_api_traefik_entrypoints: "{{ matrix_federation_traefik_entrypoint_name }}"

  4316. matrix_synapse_container_labels_public_federation_api_traefik_tls: "{{ matrix_federation_traefik_entrypoint_tls }}"

  4317. matrix_synapse_container_labels_public_federation_api_traefik_tls_certResolver: "{{ matrix_synapse_container_labels_traefik_tls_certResolver }}"  # noqa var-naming

  4318. 

  4319. matrix_synapse_container_labels_public_metrics_middleware_basic_auth_enabled: "{{ matrix_metrics_exposure_http_basic_auth_enabled }}"

  4320. matrix_synapse_container_labels_public_metrics_middleware_basic_auth_users: "{{ matrix_metrics_exposure_http_basic_auth_users }}"

  4321. 

  4322. matrix_synapse_container_labels_internal_client_api_enabled: "{{ matrix_playbook_internal_matrix_client_api_traefik_entrypoint_enabled }}"

  4323. matrix_synapse_container_labels_internal_client_api_traefik_entrypoints: "{{ matrix_playbook_internal_matrix_client_api_traefik_entrypoint_name }}"

  4324. 

  4325. # For exposing the Synapse worker (and metrics) ports to the local host.

  4326. matrix_synapse_workers_container_host_bind_address: "{{ matrix_playbook_service_host_bind_interface_prefix[0:-1] if (matrix_synapse_workers_enabled and matrix_playbook_service_host_bind_interface_prefix) else '' }}"

  4327. 

  4328. matrix_synapse_database_host: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  4329. matrix_synapse_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'synapse.db', rounds=655555) | to_uuid }}"

  4330. 

  4331. matrix_synapse_macaroon_secret_key: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'synapse.mac', rounds=655555) | to_uuid }}"

  4332. 

  4333. # We do not enable TLS in Synapse by default, since it's handled by Traefik.

  4334. matrix_synapse_tls_federation_listener_enabled: false

  4335. matrix_synapse_tls_certificate_path: ~

  4336. matrix_synapse_tls_private_key_path: ~

  4337. 

  4338. matrix_synapse_federation_port_openid_resource_required: "{{ not matrix_synapse_federation_enabled and (matrix_dimension_enabled or matrix_ma1sd_enabled or matrix_user_verification_service_enabled) }}"

  4339. 

  4340. matrix_synapse_metrics_enabled: "{{ prometheus_enabled or matrix_metrics_exposure_enabled }}"

  4341. 

  4342. matrix_synapse_metrics_proxying_enabled: "{{ matrix_synapse_metrics_enabled and matrix_metrics_exposure_enabled }}"

  4343. matrix_synapse_metrics_proxying_hostname: "{{ matrix_metrics_exposure_hostname }}"

  4344. matrix_synapse_metrics_proxying_path_prefix: "{{ matrix_metrics_exposure_path_prefix }}/synapse"

  4345. 

  4346. matrix_synapse_email_enabled: "{{ exim_relay_enabled }}"

  4347. matrix_synapse_email_smtp_host: "{{ exim_relay_identifier }}"

  4348. matrix_synapse_email_smtp_port: 8025

  4349. matrix_synapse_email_smtp_require_transport_security: false

  4350. matrix_synapse_email_notif_from: "Matrix <{{ exim_relay_sender_address }}>"

  4351. 

  4352. matrix_synapse_turn_uris: |

  4353.   {{

  4354.     ([

  4355.       'turns:' + matrix_server_fqn_matrix + '?transport=udp',

  4356.       'turns:' + matrix_server_fqn_matrix + '?transport=tcp',

  4357.     ] if matrix_coturn_enabled and matrix_coturn_tls_enabled else [])

  4358.     +

  4359.     ([

  4360.       'turn:' + matrix_server_fqn_matrix + '?transport=udp',

  4361.       'turn:' + matrix_server_fqn_matrix + '?transport=tcp',

  4362.     ] if matrix_coturn_enabled else [])

  4363.   }}

  4364. 

  4365. matrix_synapse_turn_shared_secret: "{{ matrix_coturn_turn_static_auth_secret if (matrix_coturn_enabled and matrix_coturn_authentication_method == 'auth-secret') else '' }}"

  4366. matrix_synapse_turn_username: "{{ matrix_coturn_lt_cred_mech_username if (matrix_coturn_enabled and matrix_coturn_authentication_method == 'lt-cred-mech') else '' }}"

  4367. matrix_synapse_turn_password: "{{ matrix_coturn_lt_cred_mech_password if (matrix_coturn_enabled and matrix_coturn_authentication_method == 'lt-cred-mech') else '' }}"

  4368. 

  4369. matrix_synapse_self_check_validate_certificates: "{{ matrix_playbook_ssl_enabled }}"

  4370. 

  4371. matrix_synapse_systemd_required_services_list_auto: |

  4372.   {{

  4373.     ([devture_postgres_identifier ~ '.service'] if (devture_postgres_enabled and devture_postgres_container_network != matrix_synapse_container_network and matrix_synapse_database_host == devture_postgres_connection_hostname) else [])

  4374.     +

  4375.     ([redis_identifier ~ '.service'] if matrix_synapse_redis_enabled and matrix_synapse_redis_host == redis_identifier else [])

  4376.     +

  4377.     ([keydb_identifier ~ '.service'] if matrix_synapse_redis_enabled and matrix_synapse_redis_host == keydb_identifier else [])

  4378.     +

  4379.     (['matrix-goofys.service'] if matrix_s3_media_store_enabled else [])

  4380.   }}

  4381. 

  4382. matrix_synapse_systemd_wanted_services_list_auto: |

  4383.   {{

  4384.     (['matrix-coturn.service'] if matrix_coturn_enabled else [])

  4385.     +

  4386.     ([exim_relay_identifier ~ '.service'] if exim_relay_enabled else [])

  4387.   }}

  4388. 

  4389. # Synapse workers (used for parallel load-scaling) need Redis for IPC.

  4390. matrix_synapse_redis_enabled: "{{ redis_enabled or keydb_enabled }}"

  4391. matrix_synapse_redis_host: "{{ redis_identifier if redis_enabled else (keydb_identifier if keydb_enabled else '') }}"

  4392. matrix_synapse_redis_password: "{{ redis_connection_password if redis_enabled else (keydb_connection_password if keydb_enabled else '') }}"

  4393. 

  4394. matrix_synapse_container_extra_arguments_auto: "{{ matrix_homeserver_container_extra_arguments_auto }}"

  4395. matrix_synapse_app_service_config_files_auto: "{{ matrix_homeserver_app_service_config_files_auto }}"

  4396. 

  4397. # Disable creation of media repository Synapse worker when using media-repo

  4398. matrix_synapse_ext_media_repo_enabled: "{{ matrix_media_repo_enabled }}"

  4399. 

  4400. ######################################################################

  4401. #

  4402. # /matrix-synapse

  4403. #

  4404. ######################################################################

  4405. 

  4406. 

  4407. ######################################################################

  4408. #

  4409. # matrix-synapse-auto-compressor

  4410. #

  4411. ######################################################################

  4412. 

  4413. # Not enabled by default, for now

  4414. matrix_synapse_auto_compressor_enabled: false

  4415. 

  4416. matrix_synapse_auto_compressor_container_image_self_build: "{{ matrix_architecture not in ['amd64'] }}"

  4417. 

  4418. matrix_synapse_auto_compressor_container_network: "{{ (devture_postgres_container_network if (devture_postgres_enabled and matrix_synapse_auto_compressor_database_hostname == matrix_synapse_database_host and matrix_synapse_database_host == devture_postgres_connection_hostname) else 'matrix-synapse-auto-compressor') }}"

  4419. 

  4420. matrix_synapse_auto_compressor_database_username: "{{ matrix_synapse_database_user if matrix_synapse_enabled else '' }}"

  4421. matrix_synapse_auto_compressor_database_password: "{{ matrix_synapse_database_password if matrix_synapse_enabled else '' }}"

  4422. matrix_synapse_auto_compressor_database_hostname: "{{ matrix_synapse_database_host if matrix_synapse_enabled else '' }}"

  4423. matrix_synapse_auto_compressor_database_port: "{{ matrix_synapse_database_port if matrix_synapse_enabled else '5432' }}"

  4424. matrix_synapse_auto_compressor_database_name: "{{ matrix_synapse_database_database if matrix_synapse_enabled else '' }}"

  4425. 

  4426. matrix_synapse_auto_compressor_systemd_required_services_list_auto: |

  4427.   {{

  4428.     ([devture_postgres_identifier ~ '.service'] if (matrix_synapse_auto_compressor_container_network == devture_postgres_container_network) else [])

  4429.   }}

  4430. 

  4431. ######################################################################

  4432. #

  4433. # /matrix-synapse-auto-compressor

  4434. #

  4435. ######################################################################

  4436. 

  4437. 

  4438. ######################################################################

  4439. #

  4440. # matrix-synapse-reverse-proxy-companion

  4441. #

  4442. ######################################################################

  4443. 

  4444. matrix_synapse_reverse_proxy_companion_enabled: "{{ matrix_synapse_enabled and matrix_synapse_workers_enabled }}"

  4445. 

  4446. matrix_synapse_reverse_proxy_companion_container_network: "{{ matrix_synapse_container_network }}"

  4447. 

  4448. matrix_synapse_reverse_proxy_companion_container_additional_networks_auto: |

  4449.   {{

  4450.     (

  4451.       ([matrix_playbook_reverse_proxyable_services_additional_network] if matrix_synapse_reverse_proxy_companion_container_labels_traefik_enabled and matrix_playbook_reverse_proxyable_services_additional_network else [])

  4452.       +

  4453.       ([matrix_prometheus_nginxlog_exporter_container_network] if (matrix_prometheus_nginxlog_exporter_enabled and matrix_prometheus_nginxlog_exporter_container_network != matrix_synapse_reverse_proxy_companion_container_network) else [])

  4454.       +

  4455.       ([] if matrix_homeserver_container_network in ['', matrix_synapse_reverse_proxy_companion_container_network] else [matrix_homeserver_container_network])

  4456.     ) | unique

  4457.   }}

  4458. 

  4459. matrix_synapse_reverse_proxy_companion_client_api_client_max_body_size_mb: "{{ matrix_synapse_max_upload_size_mb }}"

  4460. 

  4461. matrix_synapse_reverse_proxy_companion_container_client_api_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '8008') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  4462. matrix_synapse_reverse_proxy_companion_container_federation_api_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '8048') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  4463. 

  4464. matrix_synapse_reverse_proxy_companion_container_labels_traefik_enabled: "{{ matrix_playbook_reverse_proxy_type in ['playbook-managed-traefik', 'other-traefik-container'] }}"

  4465. matrix_synapse_reverse_proxy_companion_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  4466. matrix_synapse_reverse_proxy_companion_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  4467. matrix_synapse_reverse_proxy_companion_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  4468. matrix_synapse_reverse_proxy_companion_container_labels_traefik_hostname: "{{ matrix_server_fqn_matrix }}"

  4469. 

  4470. matrix_synapse_reverse_proxy_companion_container_labels_public_client_synapse_client_api_enabled: "{{ matrix_synapse_container_labels_public_client_synapse_client_api_enabled }}"

  4471. matrix_synapse_reverse_proxy_companion_container_labels_public_client_synapse_admin_api_enabled: "{{ matrix_synapse_container_labels_public_client_synapse_admin_api_enabled }}"

  4472. 

  4473. matrix_synapse_reverse_proxy_companion_container_labels_public_federation_api_traefik_entrypoints: "{{ matrix_synapse_container_labels_public_federation_api_traefik_entrypoints }}"

  4474. matrix_synapse_reverse_proxy_companion_container_labels_public_federation_api_traefik_tls: "{{ matrix_synapse_container_labels_public_federation_api_traefik_tls }}"

  4475. 

  4476. matrix_synapse_reverse_proxy_companion_container_labels_internal_client_api_enabled: "{{ matrix_synapse_container_labels_internal_client_api_enabled }}"

  4477. matrix_synapse_reverse_proxy_companion_container_labels_internal_client_api_traefik_entrypoints: "{{ matrix_synapse_container_labels_internal_client_api_traefik_entrypoints }}"

  4478. 

  4479. matrix_synapse_reverse_proxy_companion_synapse_workers_enabled: "{{ matrix_synapse_workers_enabled }}"

  4480. matrix_synapse_reverse_proxy_companion_synapse_workers_list: "{{ matrix_synapse_workers_enabled_list }}"

  4481. matrix_synapse_reverse_proxy_companion_synapse_room_worker_client_server_locations: "{{ matrix_synapse_workers_room_worker_client_server_endpoints }}"

  4482. matrix_synapse_reverse_proxy_companion_synapse_room_worker_federation_locations: "{{ matrix_synapse_workers_room_worker_federation_endpoints }}"

  4483. matrix_synapse_reverse_proxy_companion_synapse_sync_worker_client_server_locations: "{{ matrix_synapse_workers_sync_worker_client_server_endpoints }}"

  4484. matrix_synapse_reverse_proxy_companion_synapse_client_reader_client_server_locations: "{{ matrix_synapse_workers_client_reader_client_server_endpoints }}"

  4485. matrix_synapse_reverse_proxy_companion_synapse_federation_reader_federation_locations: "{{ matrix_synapse_workers_federation_reader_federation_endpoints }}"

  4486. matrix_synapse_reverse_proxy_companion_synapse_generic_worker_client_server_locations: "{{ matrix_synapse_workers_generic_worker_client_server_endpoints }}"

  4487. matrix_synapse_reverse_proxy_companion_synapse_generic_worker_federation_locations: "{{ matrix_synapse_workers_generic_worker_federation_endpoints }}"

  4488. matrix_synapse_reverse_proxy_companion_synapse_stream_writer_typing_stream_worker_client_server_locations: "{{ matrix_synapse_workers_stream_writer_typing_stream_worker_client_server_endpoints }}"

  4489. matrix_synapse_reverse_proxy_companion_synapse_stream_writer_to_device_stream_worker_client_server_locations: "{{ matrix_synapse_workers_stream_writer_to_device_stream_worker_client_server_endpoints }}"

  4490. matrix_synapse_reverse_proxy_companion_synapse_stream_writer_account_data_stream_worker_client_server_locations: "{{ matrix_synapse_workers_stream_writer_account_data_stream_worker_client_server_endpoints }}"

  4491. matrix_synapse_reverse_proxy_companion_synapse_stream_writer_receipts_stream_worker_client_server_locations: "{{ matrix_synapse_workers_stream_writer_receipts_stream_worker_client_server_endpoints }}"

  4492. matrix_synapse_reverse_proxy_companion_synapse_stream_writer_presence_stream_worker_client_server_locations: "{{ matrix_synapse_workers_stream_writer_presence_stream_worker_client_server_endpoints }}"

  4493. matrix_synapse_reverse_proxy_companion_synapse_media_repository_locations: "{{matrix_synapse_workers_media_repository_endpoints|default([]) }}"

  4494. matrix_synapse_reverse_proxy_companion_synapse_user_dir_locations: "{{ matrix_synapse_workers_user_dir_worker_client_server_endpoints|default([]) }}"

  4495. 

  4496. matrix_synapse_reverse_proxy_companion_access_log_syslog_integration_enabled: "{{ matrix_prometheus_nginxlog_exporter_enabled }}"

  4497. matrix_synapse_reverse_proxy_companion_access_log_syslog_integration_server_port: "{{ (matrix_prometheus_nginxlog_exporter_identifier | string +':'+ matrix_prometheus_nginxlog_exporter_container_syslog_port | string) | default('') }}"

  4498. 

  4499. ######################################################################

  4500. #

  4501. # /matrix-synapse-reverse-proxy-companion

  4502. #

  4503. ######################################################################

  4504. 

  4505. ######################################################################

  4506. #

  4507. # matrix-synapse-admin

  4508. #

  4509. ######################################################################

  4510. 

  4511. matrix_synapse_admin_enabled: false

  4512. 

  4513. matrix_synapse_admin_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '8766') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  4514. 

  4515. matrix_synapse_admin_container_image_self_build: "{{ matrix_architecture not in ['arm64', 'amd64'] }}"

  4516. 

  4517. matrix_synapse_admin_container_network: "{{ matrix_addons_container_network }}"

  4518. 

  4519. matrix_synapse_admin_container_additional_networks: "{{ [matrix_playbook_reverse_proxyable_services_additional_network] if matrix_playbook_reverse_proxyable_services_additional_network else [] }}"

  4520. 

  4521. matrix_synapse_admin_container_labels_traefik_enabled: "{{ matrix_playbook_reverse_proxy_type in ['playbook-managed-traefik', 'other-traefik-container'] }}"

  4522. matrix_synapse_admin_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  4523. matrix_synapse_admin_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  4524. matrix_synapse_admin_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  4525. 

  4526. ######################################################################

  4527. #

  4528. # /matrix-synapse-admin

  4529. #

  4530. ######################################################################

  4531. 

  4532. 

  4533. ######################################################################

  4534. #

  4535. # etke/prometheus_node_exporter

  4536. #

  4537. ######################################################################

  4538. 

  4539. prometheus_node_exporter_enabled: false

  4540. 

  4541. prometheus_node_exporter_identifier: matrix-prometheus-node-exporter

  4542. 

  4543. prometheus_node_exporter_base_path: "{{ matrix_base_data_path }}/prometheus-node-exporter"

  4544. 

  4545. prometheus_node_exporter_uid: "{{ matrix_user_uid }}"

  4546. prometheus_node_exporter_gid: "{{ matrix_user_gid }}"

  4547. 

  4548. prometheus_node_exporter_hostname: "{{ matrix_server_fqn_matrix }}"

  4549. 

  4550. prometheus_node_exporter_container_network: "{{ matrix_monitoring_container_network }}"

  4551. 

  4552. prometheus_node_exporter_container_additional_networks: "{{ [matrix_playbook_reverse_proxyable_services_additional_network] if matrix_playbook_reverse_proxyable_services_additional_network else [] }}"

  4553. 

  4554. prometheus_node_exporter_container_labels_traefik_enabled: "{{ matrix_metrics_exposure_enabled }}"

  4555. prometheus_node_exporter_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  4556. prometheus_node_exporter_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  4557. prometheus_node_exporter_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  4558. 

  4559. prometheus_node_exporter_container_labels_metrics_middleware_basic_auth_enabled: "{{ matrix_metrics_exposure_http_basic_auth_enabled }}"

  4560. prometheus_node_exporter_container_labels_metrics_middleware_basic_auth_users: "{{ matrix_metrics_exposure_http_basic_auth_users }}"

  4561. 

  4562. ######################################################################

  4563. #

  4564. # /etke/prometheus_node_exporter

  4565. #

  4566. ######################################################################

  4567. 

  4568. 

  4569. ######################################################################

  4570. #

  4571. # etke/prometheus_postgres_exporter

  4572. #

  4573. ######################################################################

  4574. 

  4575. prometheus_postgres_exporter_enabled: false

  4576. 

  4577. prometheus_postgres_exporter_identifier: matrix-prometheus-postgres-exporter

  4578. 

  4579. prometheus_postgres_exporter_base_path: "{{ matrix_base_data_path }}/prometheus-postgres-exporter"

  4580. 

  4581. prometheus_postgres_exporter_uid: "{{ matrix_user_uid }}"

  4582. prometheus_postgres_exporter_gid: "{{ matrix_user_gid }}"

  4583. 

  4584. prometheus_postgres_exporter_hostname: "{{ matrix_server_fqn_matrix }}"

  4585. 

  4586. prometheus_postgres_exporter_container_network: "{{ matrix_monitoring_container_network }}"

  4587. 

  4588. prometheus_postgres_exporter_container_additional_networks: |

  4589.   {{

  4590.     ([devture_postgres_container_network] if (devture_postgres_enabled and prometheus_postgres_exporter_database_hostname == devture_postgres_connection_hostname and prometheus_postgres_exporter_container_network != devture_postgres_container_network) else [])

  4591.     +

  4592.     ([matrix_playbook_reverse_proxyable_services_additional_network] if matrix_playbook_reverse_proxyable_services_additional_network and prometheus_postgres_exporter_container_labels_traefik_enabled else [])

  4593.   }}

  4594. 

  4595. prometheus_postgres_exporter_container_labels_traefik_enabled: "{{ matrix_metrics_exposure_enabled }}"

  4596. prometheus_postgres_exporter_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  4597. prometheus_postgres_exporter_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  4598. prometheus_postgres_exporter_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  4599. 

  4600. prometheus_postgres_exporter_container_labels_metrics_middleware_basic_auth_enabled: "{{ matrix_metrics_exposure_http_basic_auth_enabled }}"

  4601. prometheus_postgres_exporter_container_labels_metrics_middleware_basic_auth_users: "{{ matrix_metrics_exposure_http_basic_auth_users }}"

  4602. 

  4603. prometheus_postgres_exporter_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  4604. prometheus_postgres_exporter_database_username: matrix_prometheus_postgres_exporter

  4605. prometheus_postgres_exporter_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'prometheus.pg.db', rounds=655555) | to_uuid }}"

  4606. prometheus_postgres_exporter_database_name: matrix_prometheus_postgres_exporter

  4607. 

  4608. prometheus_postgres_exporter_systemd_required_services_list_auto: |

  4609.   {{

  4610.     ([devture_postgres_identifier ~ '.service'] if (devture_postgres_enabled and prometheus_postgres_exporter_database_hostname == devture_postgres_connection_hostname) else [])

  4611.   }}

  4612. 

  4613. ######################################################################

  4614. #

  4615. # /etke/prometheus_postgres_exporter

  4616. #

  4617. ######################################################################

  4618. 

  4619. 

  4620. ######################################################################

  4621. #

  4622. # matrix-prometheus-nginxlog-exporter

  4623. #

  4624. ######################################################################

  4625. 

  4626. matrix_prometheus_nginxlog_exporter_enabled: false

  4627. 

  4628. matrix_prometheus_nginxlog_exporter_identifier: matrix-prometheus-nginxlog-exporter

  4629. 

  4630. matrix_prometheus_nginxlog_exporter_hostname: "{{ matrix_server_fqn_matrix }}"

  4631. 

  4632. matrix_prometheus_nginxlog_exporter_container_network: "{{ matrix_monitoring_container_network }}"

  4633. 

  4634. matrix_prometheus_nginxlog_exporter_container_additional_networks_auto: |-

  4635.   {{

  4636.     ([matrix_playbook_reverse_proxyable_services_additional_network] if (matrix_playbook_reverse_proxyable_services_additional_network and matrix_prometheus_nginxlog_exporter_container_labels_traefik_enabled) else [])

  4637.   }}

  4638. 

  4639. matrix_prometheus_nginxlog_exporter_container_labels_traefik_enabled: "{{ matrix_metrics_exposure_enabled }}"

  4640. matrix_prometheus_nginxlog_exporter_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  4641. matrix_prometheus_nginxlog_exporter_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  4642. matrix_prometheus_nginxlog_exporter_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  4643. 

  4644. matrix_prometheus_nginxlog_exporter_container_labels_metrics_middleware_basic_auth_enabled: "{{ matrix_metrics_exposure_http_basic_auth_enabled }}"

  4645. matrix_prometheus_nginxlog_exporter_container_labels_metrics_middleware_basic_auth_users: "{{ matrix_metrics_exposure_http_basic_auth_users }}"

  4646. 

  4647. matrix_prometheus_nginxlog_exporter_config_namespaces_matrix_source_tags_auto: |

  4648.   {{

  4649.     ([matrix_synapse_reverse_proxy_companion_access_log_syslog_integration_tag] if matrix_synapse_reverse_proxy_companion_access_log_syslog_integration_enabled else [])

  4650.   }}

  4651. 

  4652. ######################################################################

  4653. #

  4654. # /matrix-prometheus-nginxlog-exporter

  4655. #

  4656. ######################################################################

  4657. 

  4658. 

  4659. ######################################################################

  4660. #

  4661. # prometheus

  4662. #

  4663. ######################################################################

  4664. 

  4665. prometheus_enabled: false

  4666. 

  4667. prometheus_identifier: matrix-prometheus

  4668. 

  4669. prometheus_base_path: "{{ matrix_base_data_path }}/prometheus"

  4670. 

  4671. prometheus_uid: "{{ matrix_user_uid }}"

  4672. prometheus_gid: "{{ matrix_user_gid }}"

  4673. 

  4674. prometheus_container_network: "{{ matrix_monitoring_container_network }}"

  4675. 

  4676. prometheus_container_additional_networks_auto: |

  4677.   {{

  4678.     (

  4679.       ([prometheus_node_exporter_container_network] if prometheus_self_node_scraper_enabled and prometheus_node_exporter_container_network != prometheus_container_network else [])

  4680.       +

  4681.       ([matrix_synapse_container_network] if matrix_prometheus_services_connect_scraper_synapse_enabled and matrix_synapse_container_network != prometheus_container_network else [])

  4682.       +

  4683.       ([prometheus_postgres_exporter_container_network] if matrix_prometheus_services_connect_scraper_postgres_enabled and prometheus_postgres_exporter_container_network != prometheus_container_network else [])

  4684.       +

  4685.       ([matrix_hookshot_container_network] if matrix_prometheus_services_connect_scraper_hookshot_enabled and matrix_hookshot_container_network != prometheus_container_network else [])

  4686.       +

  4687.       ([matrix_prometheus_nginxlog_exporter_container_network] if matrix_prometheus_services_connect_scraper_nginxlog_enabled and matrix_prometheus_nginxlog_exporter_container_network != prometheus_container_network else [])

  4688.       +

  4689.       ([matrix_media_repo_container_network] if matrix_prometheus_services_connect_scraper_media_repo_enabled and matrix_media_repo_container_network != prometheus_container_network else [])

  4690.     ) | unique

  4691.   }}

  4692. 

  4693. prometheus_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '9090') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  4694. 

  4695. prometheus_config_rule_files_auto: |

  4696.   {{

  4697.     (['synapse-v2.rules'] if matrix_prometheus_services_connect_synapse_rules_enabled else [])

  4698.   }}

  4699. 

  4700. prometheus_self_node_scraper_enabled: "{{ prometheus_node_exporter_enabled }}"

  4701. prometheus_self_node_scraper_static_configs_target: "{{ (prometheus_node_exporter_identifier + ':9100') if prometheus_node_exporter_enabled else '' }}"

  4702. 

  4703. prometheus_config_scrape_configs_auto: |

  4704.   {{

  4705.     (matrix_prometheus_services_connect_scraper_synapse_configs if matrix_prometheus_services_connect_scraper_synapse_enabled else [])

  4706.     +

  4707.     (matrix_prometheus_services_connect_scraper_postgres_scrape_configs if matrix_prometheus_services_connect_scraper_postgres_enabled else [])

  4708.     +

  4709.     (matrix_prometheus_services_connect_scraper_hookshot_scrape_configs if matrix_prometheus_services_connect_scraper_hookshot_enabled else [])

  4710.     +

  4711.     (matrix_prometheus_services_connect_scraper_nginxlog_scrape_configs if matrix_prometheus_services_connect_scraper_nginxlog_enabled else [])

  4712.     +

  4713.     (matrix_prometheus_services_connect_scraper_media_repo_scrape_configs if matrix_prometheus_services_connect_scraper_media_repo_enabled else [])

  4714.   }}

  4715. 

  4716. ######################################################################

  4717. #

  4718. # /prometheus

  4719. #

  4720. ######################################################################

  4721. 

  4722. 

  4723. ######################################################################

  4724. #

  4725. # matrix-prometheus-services-connect

  4726. #

  4727. ######################################################################

  4728. 

  4729. matrix_prometheus_services_connect_synapse_enabled: "{{ prometheus_enabled and matrix_synapse_enabled }}"

  4730. 

  4731. matrix_prometheus_services_connect_synapse_rules_download_synapse_tag: "{{ matrix_synapse_docker_image_tag }}"

  4732. matrix_prometheus_services_connect_synapse_rules_download_dir_path: "{{ prometheus_config_path }}"

  4733. matrix_prometheus_services_connect_synapse_rules_download_owner: "{{ prometheus_uid }}"

  4734. matrix_prometheus_services_connect_synapse_rules_download_group: "{{ prometheus_gid }}"

  4735. 

  4736. matrix_prometheus_services_connect_scraper_synapse_enabled: "{{ matrix_synapse_enabled and matrix_synapse_metrics_enabled }}"

  4737. matrix_prometheus_services_connect_scraper_synapse_main_process_static_configs_target: "matrix-synapse:{{ matrix_synapse_metrics_port }}"

  4738. matrix_prometheus_services_connect_scraper_synapse_workers_enabled_list: "{{ matrix_synapse_workers_enabled_list }}"

  4739. 

  4740. matrix_prometheus_services_connect_scraper_postgres_enabled: "{{ prometheus_postgres_exporter_enabled }}"

  4741. matrix_prometheus_services_connect_scraper_postgres_static_configs_target: "{{ prometheus_postgres_exporter_identifier }}:{{ prometheus_postgres_exporter_port | string }}"

  4742. 

  4743. matrix_prometheus_services_connect_scraper_hookshot_enabled: "{{ matrix_hookshot_enabled and matrix_hookshot_metrics_enabled }}"

  4744. matrix_prometheus_services_connect_scraper_hookshot_static_configs_target: "{{ matrix_hookshot_container_url }}:{{ matrix_hookshot_metrics_port | string }}"

  4745. 

  4746. matrix_prometheus_services_connect_scraper_nginxlog_enabled: "{{ matrix_prometheus_nginxlog_exporter_enabled }}"

  4747. matrix_prometheus_services_connect_scraper_nginxlog_static_configs_target: "{{ matrix_prometheus_nginxlog_exporter_identifier }}:{{ matrix_prometheus_nginxlog_exporter_container_metrics_port | string }}"

  4748. 

  4749. matrix_prometheus_services_connect_scraper_media_repo_enabled: "{{ matrix_media_repo_enabled and matrix_media_repo_metrics_enabled }}"

  4750. matrix_prometheus_services_connect_scraper_media_repo_static_configs_target: "{{ matrix_media_repo_identifier }}:{{ matrix_media_repo_metrics_port }}"

  4751. 

  4752. ######################################################################

  4753. #

  4754. # /matrix-prometheus-services-connect

  4755. #

  4756. ######################################################################

  4757. 

  4758. 

  4759. ######################################################################

  4760. #

  4761. # etke/grafana

  4762. #

  4763. ######################################################################

  4764. 

  4765. grafana_enabled: false

  4766. 

  4767. grafana_identifier: matrix-grafana

  4768. 

  4769. grafana_uid: "{{ matrix_user_uid }}"

  4770. grafana_gid: "{{ matrix_user_gid }}"

  4771. 

  4772. grafana_hostname: "{{ matrix_server_fqn_grafana }}"

  4773. 

  4774. grafana_base_path: "{{ matrix_base_data_path }}/grafana"

  4775. 

  4776. grafana_container_network: "{{ matrix_monitoring_container_network }}"

  4777. 

  4778. grafana_container_additional_networks_auto: |

  4779.   {{

  4780.     (

  4781.       ([matrix_playbook_reverse_proxyable_services_additional_network] if matrix_playbook_reverse_proxyable_services_additional_network and grafana_container_labels_traefik_enabled else [])

  4782.       +

  4783.       ([prometheus_container_network] if prometheus_enabled and prometheus_container_network != grafana_container_network else [])

  4784.     ) | unique

  4785.   }}

  4786. 

  4787. grafana_container_labels_traefik_enabled: "{{ matrix_playbook_traefik_labels_enabled }}"

  4788. grafana_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  4789. grafana_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  4790. grafana_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  4791. 

  4792. grafana_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '3000') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  4793. 

  4794. grafana_provisioning_datasources: |

  4795.   {{

  4796.     ([{

  4797.       'name': (matrix_server_fqn_matrix + ' - Prometheus'),

  4798.       'type': 'prometheus',

  4799.       'access': 'proxy',

  4800.       'url': ('http://' + prometheus_identifier + ':9090'),

  4801.     }] if prometheus_enabled else [])

  4802.   }}

  4803. 

  4804. grafana_dashboard_download_urls: |

  4805.   {{

  4806.     (matrix_synapse_grafana_dashboard_urls if matrix_homeserver_implementation == 'synapse' and matrix_synapse_metrics_enabled else [])

  4807.     +

  4808.     (prometheus_node_exporter_dashboard_urls if prometheus_node_exporter_enabled else [])

  4809.     +

  4810.     (prometheus_postgres_exporter_dashboard_urls if prometheus_postgres_exporter_enabled else [])

  4811.     +

  4812.     (matrix_prometheus_nginxlog_exporter_dashboard_urls if matrix_prometheus_nginxlog_exporter_enabled else [])

  4813.     +

  4814.     (matrix_media_repo_dashboard_urls if matrix_media_repo_metrics_enabled else [])

  4815.   }}

  4816. 

  4817. grafana_provisioning_dashboard_template_files: |

  4818.   {{

  4819.     ([{

  4820.         'path': 'roles/custom/matrix-prometheus-nginxlog-exporter/templates/grafana/nginx-proxy.json',

  4821.         'name': 'nginx-proxy.json',

  4822.     }] if matrix_prometheus_nginxlog_exporter_enabled else [])

  4823.     +

  4824.     ([{

  4825.         'path': 'roles/custom/matrix-media-repo/templates/grafana/media-repo.json',

  4826.         'name': 'media-repo.json',

  4827.     }] if matrix_media_repo_metrics_enabled else [])

  4828.   }}

  4829. 

  4830. grafana_default_home_dashboard_path: |-

  4831.   {{

  4832.     {

  4833.       'synapse': ('/etc/grafana/dashboards/synapse.json' if matrix_synapse_metrics_enabled and matrix_synapse_metrics_enabled else ('/etc/grafana/dashboards/node-exporter-full.json' if prometheus_node_exporter_enabled else '')),

  4834.       'dendrite': ('/etc/grafana/dashboards/node-exporter-full.json' if prometheus_node_exporter_enabled else ''),

  4835.       'conduit': ('/etc/grafana/dashboards/node-exporter-full.json' if prometheus_node_exporter_enabled else ''),

  4836.     }[matrix_homeserver_implementation]

  4837.   }}

  4838. 

  4839. ######################################################################

  4840. #

  4841. # /etke/grafana

  4842. #

  4843. ######################################################################

  4844. 

  4845. 

  4846. ######################################################################

  4847. #

  4848. # matrix-registration

  4849. #

  4850. ######################################################################

  4851. 

  4852. matrix_registration_enabled: false

  4853. 

  4854. matrix_registration_scheme: "{{ 'https' if matrix_playbook_ssl_enabled else 'http' }}"

  4855. matrix_registration_hostname: "{{ matrix_server_fqn_matrix }}"

  4856. matrix_registration_path_prefix: /matrix-registration

  4857. 

  4858. matrix_registration_systemd_required_services_list_auto: |

  4859.   {{

  4860.     ([devture_postgres_identifier ~ '.service'] if (devture_postgres_enabled and matrix_registration_database_hostname == devture_postgres_connection_hostname) else [])

  4861.   }}

  4862. 

  4863. matrix_registration_container_image_self_build: "{{ matrix_architecture != 'amd64' }}"

  4864. 

  4865. matrix_registration_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '8767') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  4866. 

  4867. matrix_registration_container_network: "{{ matrix_addons_container_network }}"

  4868. 

  4869. matrix_registration_container_additional_networks_auto: |-

  4870.   {{

  4871.     (

  4872.       ([] if matrix_addons_homeserver_container_network == '' else [matrix_addons_homeserver_container_network])

  4873.       +

  4874.       ([devture_postgres_container_network] if (devture_postgres_enabled and matrix_registration_database_hostname == devture_postgres_connection_hostname and matrix_mautrix_facebook_container_network != devture_postgres_container_network) else [])

  4875.       +

  4876.       ([matrix_playbook_reverse_proxyable_services_additional_network] if (matrix_playbook_reverse_proxyable_services_additional_network and matrix_registration_container_labels_traefik_enabled) else [])

  4877.     ) | unique

  4878.   }}

  4879. 

  4880. matrix_registration_container_labels_traefik_enabled: "{{ matrix_playbook_reverse_proxy_type in ['playbook-managed-traefik', 'other-traefik-container'] }}"

  4881. matrix_registration_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  4882. matrix_registration_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  4883. matrix_registration_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  4884. 

  4885. matrix_registration_riot_instance: "{{ (('https://' if matrix_playbook_ssl_enabled else 'http://') + matrix_server_fqn_element) if matrix_client_element_enabled else 'https://element.io/app/' }}"

  4886. 

  4887. matrix_registration_shared_secret: |-

  4888.   {{

  4889.     {

  4890.       'synapse': matrix_synapse_registration_shared_secret | default (''),

  4891.       'dendrite': matrix_dendrite_client_api_registration_shared_secret | default (''),

  4892.       'conduit': '',

  4893.     }[matrix_homeserver_implementation]

  4894.   }}

  4895. 

  4896. matrix_registration_server_location: "{{ matrix_addons_homeserver_client_api_url }}"

  4897. 

  4898. matrix_registration_api_validate_certs: "{{ matrix_playbook_ssl_enabled }}"

  4899. 

  4900. # Postgres is the default, except if not using internal Postgres server

  4901. matrix_registration_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  4902. matrix_registration_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  4903. matrix_registration_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mx.registr.db', rounds=655555) | to_uuid }}"

  4904. 

  4905. ######################################################################

  4906. #

  4907. # /matrix-registration

  4908. #

  4909. ######################################################################

  4910. 

  4911. 

  4912. ######################################################################

  4913. #

  4914. # matrix-sliding-sync

  4915. #

  4916. ######################################################################

  4917. 

  4918. # We don't enable the sliding sync proxy by default.

  4919. matrix_sliding_sync_enabled: false

  4920. 

  4921. matrix_sliding_sync_scheme: "{{ 'https' if matrix_playbook_ssl_enabled else 'http' }}"

  4922. 

  4923. matrix_sliding_sync_hostname: "{{ matrix_server_fqn_matrix }}"

  4924. 

  4925. matrix_sliding_sync_path_prefix: /sliding-sync

  4926. 

  4927. matrix_sliding_sync_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"

  4928. 

  4929. matrix_sliding_sync_container_network: "{{ matrix_homeserver_container_network }}"

  4930. 

  4931. matrix_sliding_sync_container_additional_networks: |

  4932.   {{

  4933.     (

  4934.       ([matrix_playbook_reverse_proxyable_services_additional_network] if matrix_sliding_sync_container_labels_traefik_enabled and matrix_playbook_reverse_proxyable_services_additional_network else [])

  4935.       +

  4936.       ([] if matrix_homeserver_container_network in ['', matrix_sliding_sync_container_network] else [matrix_homeserver_container_network])

  4937.       +

  4938.       ([devture_postgres_container_network] if devture_postgres_enabled and devture_postgres_container_network != matrix_sliding_sync_container_network else [])

  4939.     ) | unique

  4940.   }}

  4941. 

  4942. matrix_sliding_sync_container_labels_traefik_enabled: "{{ matrix_playbook_reverse_proxy_type in ['playbook-managed-traefik', 'other-traefik-container'] }}"

  4943. matrix_sliding_sync_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  4944. matrix_sliding_sync_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  4945. matrix_sliding_sync_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  4946. 

  4947. matrix_sliding_sync_container_labels_public_metrics_middleware_basic_auth_enabled: "{{ matrix_metrics_exposure_http_basic_auth_enabled }}"

  4948. matrix_sliding_sync_container_labels_public_metrics_middleware_basic_auth_users: "{{ matrix_metrics_exposure_http_basic_auth_users }}"

  4949. 

  4950. matrix_sliding_sync_systemd_required_services_list_auto: |

  4951.   {{

  4952.     matrix_homeserver_systemd_services_list

  4953.     +

  4954.     ([devture_postgres_identifier ~ '.service'] if (devture_postgres_enabled and matrix_sliding_sync_database_hostname == devture_postgres_connection_hostname) else [])

  4955.   }}

  4956. 

  4957. matrix_sliding_sync_environment_variable_syncv3_server: "{{ matrix_homeserver_container_url }}"

  4958. matrix_sliding_sync_environment_variable_syncv3_secret: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'ss.secret', rounds=655555) | to_uuid }}"

  4959. 

  4960. matrix_sliding_sync_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  4961. matrix_sliding_sync_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'ss.db', rounds=655555) | to_uuid }}"

  4962. 

  4963. matrix_sliding_sync_metrics_enabled: "{{ prometheus_enabled or matrix_metrics_exposure_enabled }}"

  4964. 

  4965. matrix_sliding_sync_metrics_proxying_enabled: "{{ matrix_sliding_sync_metrics_enabled and matrix_metrics_exposure_enabled }}"

  4966. matrix_sliding_sync_metrics_proxying_hostname: "{{ matrix_metrics_exposure_hostname }}"

  4967. matrix_sliding_sync_metrics_proxying_path_prefix: "{{ matrix_metrics_exposure_path_prefix }}/sliding-sync"

  4968. 

  4969. #####################################################################

  4970. #

  4971. # /matrix-sliding-sync

  4972. #

  4973. ######################################################################

  4974. 

  4975. 

  4976. ######################################################################

  4977. #

  4978. # matrix-dendrite

  4979. #

  4980. ######################################################################

  4981. 

  4982. matrix_dendrite_enabled: "{{ matrix_homeserver_implementation == 'dendrite' }}"

  4983. 

  4984. matrix_dendrite_hostname: "{{ matrix_server_fqn_matrix }}"

  4985. 

  4986. matrix_dendrite_federation_enabled: "{{ matrix_homeserver_federation_enabled }}"

  4987. 

  4988. matrix_dendrite_container_network: "{{ matrix_homeserver_container_network }}"

  4989. 

  4990. matrix_dendrite_container_additional_networks_auto: |

  4991.   {{

  4992.     (

  4993.       ([matrix_playbook_reverse_proxyable_services_additional_network] if matrix_dendrite_container_labels_traefik_enabled and matrix_playbook_reverse_proxyable_services_additional_network else [])

  4994.       +

  4995.       ([devture_postgres_container_network] if (devture_postgres_enabled and matrix_dendrite_database_hostname == devture_postgres_connection_hostname and devture_postgres_container_network != matrix_dendrite_container_network) else [])

  4996.     ) | unique

  4997.   }}

  4998. 

  4999. matrix_dendrite_container_http_host_bind_address: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ matrix_dendrite_http_bind_port | string) if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  5000. matrix_dendrite_container_https_host_bind_address: "{{ '' if not matrix_dendrite_https_bind_port or not matrix_playbook_service_host_bind_interface_prefix else (matrix_playbook_service_host_bind_interface_prefix + matrix_dendrite_https_bind_port | string) }}"

  5001. 

  5002. matrix_dendrite_container_labels_traefik_enabled: "{{ matrix_playbook_reverse_proxy_type in ['playbook-managed-traefik', 'other-traefik-container'] and not matrix_synapse_workers_enabled }}"

  5003. matrix_dendrite_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  5004. matrix_dendrite_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  5005. matrix_dendrite_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  5006. 

  5007. matrix_dendrite_container_labels_public_client_synapse_admin_api_enabled: "{{ matrix_synapse_admin_enabled }}"

  5008. 

  5009. matrix_dendrite_container_labels_public_client_root_redirection_enabled: "{{ matrix_dendrite_container_labels_public_client_root_redirection_url != '' }}"

  5010. matrix_dendrite_container_labels_public_client_root_redirection_url: "{{ (('https://' if matrix_playbook_ssl_enabled else 'http://') + matrix_server_fqn_element) if matrix_client_element_enabled else '' }}"

  5011. 

  5012. matrix_dendrite_container_labels_public_federation_api_traefik_hostname: "{{ matrix_server_fqn_matrix_federation }}"

  5013. matrix_dendrite_container_labels_public_federation_api_traefik_entrypoints: "{{ matrix_federation_traefik_entrypoint_name }}"

  5014. matrix_dendrite_container_labels_public_federation_api_traefik_tls: "{{ matrix_federation_traefik_entrypoint_tls }}"

  5015. 

  5016. matrix_dendrite_container_labels_public_metrics_middleware_basic_auth_enabled: "{{ matrix_metrics_exposure_http_basic_auth_enabled }}"

  5017. matrix_dendrite_container_labels_public_metrics_middleware_basic_auth_users: "{{ matrix_metrics_exposure_http_basic_auth_users }}"

  5018. 

  5019. matrix_dendrite_metrics_enabled: "{{ prometheus_enabled or matrix_metrics_exposure_enabled }}"

  5020. 

  5021. matrix_dendrite_metrics_proxying_enabled: "{{ matrix_dendrite_metrics_enabled and matrix_metrics_exposure_enabled }}"

  5022. matrix_dendrite_metrics_proxying_hostname: "{{ matrix_metrics_exposure_hostname }}"

  5023. matrix_dendrite_metrics_proxying_path_prefix: "{{ matrix_metrics_exposure_path_prefix }}/dendrite"

  5024. 

  5025. matrix_dendrite_client_api_registration_shared_secret: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'dendrite.rss', rounds=655555) | to_uuid }}"

  5026. 

  5027. matrix_dendrite_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  5028. 

  5029. matrix_dendrite_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'dendrite.db', rounds=655555) | to_uuid }}"

  5030. 

  5031. # Even if TURN doesn't support TLS (it does by default),

  5032. # it doesn't hurt to try a secure connection anyway.

  5033. matrix_dendrite_client_api_turn_uris: |

  5034.   {{

  5035.     [

  5036.       'turns:' + matrix_server_fqn_matrix + '?transport=udp',

  5037.       'turns:' + matrix_server_fqn_matrix + '?transport=tcp',

  5038.       'turn:' + matrix_server_fqn_matrix + '?transport=udp',

  5039.       'turn:' + matrix_server_fqn_matrix + '?transport=tcp',

  5040.     ]

  5041.     if matrix_coturn_enabled

  5042.     else []

  5043.   }}

  5044. 

  5045. matrix_dendrite_client_api_turn_shared_secret: "{{ matrix_coturn_turn_static_auth_secret if (matrix_coturn_enabled and matrix_coturn_authentication_method == 'auth-secret') else '' }}"

  5046. matrix_dendrite_client_api_turn_username: "{{ matrix_coturn_lt_cred_mech_username if (matrix_coturn_enabled and matrix_coturn_authentication_method == 'lt-cred-mech') else '' }}"

  5047. matrix_dendrite_client_api_turn_password: "{{ matrix_coturn_lt_cred_mech_password if (matrix_coturn_enabled and matrix_coturn_authentication_method == 'lt-cred-mech') else '' }}"

  5048. 

  5049. matrix_dendrite_disable_tls_validation: "{{ not matrix_playbook_ssl_enabled }}"

  5050. 

  5051. matrix_dendrite_self_check_validate_certificates: "{{ matrix_playbook_ssl_enabled }}"

  5052. 

  5053. matrix_dendrite_trusted_id_servers: "{{ [matrix_server_fqn_matrix] if matrix_ma1sd_enabled else ['matrix.org', 'vector.im'] }}"

  5054. 

  5055. matrix_dendrite_systemd_required_services_list_auto: |

  5056.   {{

  5057.     ([devture_postgres_identifier ~ '.service'] if (devture_postgres_enabled and matrix_dendrite_database_hostname == devture_postgres_connection_hostname) else [])

  5058.     +

  5059.     (['matrix-goofys.service'] if matrix_s3_media_store_enabled else [])

  5060.   }}

  5061. 

  5062. matrix_dendrite_systemd_wanted_services_list_auto: |

  5063.   {{

  5064.     (['matrix-coturn.service'] if matrix_coturn_enabled else [])

  5065.   }}

  5066. 

  5067. matrix_dendrite_container_extra_arguments_auto: "{{ matrix_homeserver_container_extra_arguments_auto }}"

  5068. matrix_dendrite_app_service_config_files_auto: "{{ matrix_homeserver_app_service_config_files_auto }}"

  5069. 

  5070. ######################################################################

  5071. #

  5072. # /matrix-dendrite

  5073. #

  5074. ######################################################################

  5075. 

  5076. 

  5077. ######################################################################

  5078. #

  5079. # matrix-conduit

  5080. #

  5081. ######################################################################

  5082. 

  5083. matrix_conduit_enabled: "{{ matrix_homeserver_implementation == 'conduit' }}"

  5084. 

  5085. matrix_conduit_hostname: "{{ matrix_server_fqn_matrix }}"

  5086. 

  5087. matrix_conduit_allow_federation: "{{ matrix_homeserver_federation_enabled }}"

  5088. 

  5089. matrix_conduit_container_network: "{{ matrix_homeserver_container_network }}"

  5090. 

  5091. matrix_conduit_container_additional_networks_auto: |

  5092.   {{

  5093.     (

  5094.       ([matrix_playbook_reverse_proxyable_services_additional_network] if matrix_conduit_container_labels_traefik_enabled and matrix_playbook_reverse_proxyable_services_additional_network else [])

  5095.     ) | unique

  5096.   }}

  5097. 

  5098. matrix_conduit_container_labels_traefik_enabled: "{{ matrix_playbook_reverse_proxy_type in ['playbook-managed-traefik', 'other-traefik-container'] and not matrix_synapse_workers_enabled }}"

  5099. matrix_conduit_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  5100. matrix_conduit_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  5101. matrix_conduit_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  5102. 

  5103. matrix_conduit_container_labels_public_client_root_redirection_enabled: "{{ matrix_conduit_container_labels_public_client_root_redirection_url != '' }}"

  5104. matrix_conduit_container_labels_public_client_root_redirection_url: "{{ (('https://' if matrix_playbook_ssl_enabled else 'http://') + matrix_server_fqn_element) if matrix_client_element_enabled else '' }}"

  5105. 

  5106. matrix_conduit_container_labels_public_federation_api_traefik_hostname: "{{ matrix_server_fqn_matrix_federation }}"

  5107. matrix_conduit_container_labels_public_federation_api_traefik_entrypoints: "{{ matrix_federation_traefik_entrypoint_name }}"

  5108. matrix_conduit_container_labels_public_federation_api_traefik_tls: "{{ matrix_federation_traefik_entrypoint_tls }}"

  5109. 

  5110. matrix_conduit_container_labels_internal_client_api_enabled: "{{ matrix_playbook_internal_matrix_client_api_traefik_entrypoint_enabled }}"

  5111. matrix_conduit_container_labels_internal_client_api_traefik_entrypoints: "{{ matrix_playbook_internal_matrix_client_api_traefik_entrypoint_name }}"

  5112. 

  5113. matrix_conduit_turn_uris: |

  5114.   {{

  5115.     ([

  5116.       'turns:' + matrix_server_fqn_matrix + '?transport=udp',

  5117.       'turns:' + matrix_server_fqn_matrix + '?transport=tcp',

  5118.     ] if matrix_coturn_enabled and matrix_coturn_tls_enabled else [])

  5119.     +

  5120.     ([

  5121.       'turn:' + matrix_server_fqn_matrix + '?transport=udp',

  5122.       'turn:' + matrix_server_fqn_matrix + '?transport=tcp',

  5123.     ] if matrix_coturn_enabled else [])

  5124.   }}

  5125. 

  5126. matrix_conduit_turn_secret: "{{ matrix_coturn_turn_static_auth_secret if (matrix_coturn_enabled and matrix_coturn_authentication_method == 'auth-secret') else '' }}"

  5127. matrix_conduit_turn_username: "{{ matrix_coturn_lt_cred_mech_username if (matrix_coturn_enabled and matrix_coturn_authentication_method == 'lt-cred-mech') else '' }}"

  5128. matrix_conduit_turn_password: "{{ matrix_coturn_lt_cred_mech_password if (matrix_coturn_enabled and matrix_coturn_authentication_method == 'lt-cred-mech') else '' }}"

  5129. 

  5130. ######################################################################

  5131. #

  5132. # /matrix-conduit

  5133. #

  5134. ######################################################################

  5135. 

  5136. 

  5137. ######################################################################

  5138. #

  5139. # matrix-user-creator

  5140. #

  5141. ######################################################################

  5142. 

  5143. matrix_user_creator_users_auto: |

  5144.   {{

  5145.     ([{

  5146.       'username': matrix_bot_matrix_registration_bot_matrix_user_id_localpart,

  5147.       'initial_password': matrix_bot_matrix_registration_bot_bot_password,

  5148.       'initial_type': 'admin',

  5149.     }] if matrix_bot_matrix_registration_bot_enabled else [])

  5150.     +

  5151.     ([{

  5152.       'username': matrix_bot_chatgpt_matrix_bot_username_localpart,

  5153.       'initial_password': matrix_bot_chatgpt_matrix_bot_password,

  5154.       'initial_type': 'bot',

  5155.     }] if matrix_bot_chatgpt_enabled and matrix_bot_chatgpt_matrix_bot_password | length > 0 else [])

  5156.     +

  5157.     ([{

  5158.       'username': matrix_bot_matrix_reminder_bot_matrix_user_id_localpart,

  5159.       'initial_password': matrix_bot_matrix_reminder_bot_matrix_user_password,

  5160.       'initial_type': 'bot',

  5161.     }] if matrix_bot_matrix_reminder_bot_enabled else [])

  5162.     +

  5163.     ([{

  5164.       'username': matrix_bot_honoroit_login,

  5165.       'initial_password': matrix_bot_honoroit_password,

  5166.       'initial_type': 'bot',

  5167.     }] if matrix_bot_honoroit_enabled else [])

  5168.     +

  5169.     ([{

  5170.       'username': matrix_bot_postmoogle_login,

  5171.       'initial_password': matrix_bot_postmoogle_password,

  5172.       'initial_type': 'bot',

  5173.     }] if matrix_bot_postmoogle_enabled else [])

  5174.     +

  5175.     ([{

  5176.       'username': matrix_bot_buscarron_login,

  5177.       'initial_password': matrix_bot_buscarron_password,

  5178.       'initial_type': 'bot',

  5179.     }] if matrix_bot_buscarron_enabled else [])

  5180.     +

  5181.     ([{

  5182.       'username': matrix_bot_maubot_login,

  5183.       'initial_password': matrix_bot_maubot_initial_password,

  5184.       'initial_type': 'bot',

  5185.     }] if matrix_bot_maubot_enabled else [])

  5186.   }}

  5187. 

  5188. ######################################################################

  5189. #

  5190. # /matrix-user-creator

  5191. #

  5192. ######################################################################

  5193. 

  5194. 

  5195. ######################################################################

  5196. #

  5197. # matrix-user-verification-service

  5198. #

  5199. ######################################################################

  5200. 

  5201. matrix_user_verification_service_enabled: false

  5202. 

  5203. matrix_user_verification_service_systemd_required_services_list: |

  5204.   {{

  5205.     [devture_systemd_docker_base_docker_service_name]

  5206.     +

  5207.     (['matrix-' + matrix_homeserver_implementation + '.service'])

  5208.   }}

  5209. 

  5210. matrix_user_verification_service_container_network: "{{ matrix_addons_container_network }}"

  5211. 

  5212. matrix_user_verification_service_container_additional_networks: |

  5213.   {{

  5214.     (

  5215.       ([matrix_playbook_reverse_proxyable_services_additional_network] if matrix_playbook_reverse_proxyable_services_additional_network else [])

  5216.       +

  5217.       ([matrix_homeserver_container_network] if matrix_homeserver_container_network != matrix_user_verification_service_container_network else [])

  5218.     ) | unique

  5219.   }}

  5220. 

  5221. # If Jitsi is managed by this playbook we can use the docker network - no need to expose a port.

  5222. # If Jitsi is not managed by this playbook, or you otherwise have a need for it, you can expose

  5223. # matrix-user-verfification-services's client-server port to port 3003.

  5224. # By default Matrix-User-Verification-Service binds to port 3000, which collides with grafana, therefore this uses port 3003.

  5225. matrix_user_verification_service_container_http_host_bind_port: "{{  '' if (jitsi_enabled | bool and jitsi_enable_auth | bool and jitsi_auth_type == 'matrix') else matrix_playbook_service_host_bind_interface_prefix ~ '3003' }}"

  5226. 

  5227. # URL exposed in the docker network

  5228. matrix_user_verification_service_container_url: "http://{{  matrix_user_verification_service_container_name }}:3000"

  5229. 

  5230. matrix_user_verification_service_uvs_homeserver_url: "{{ matrix_addons_homeserver_client_api_url }}"

  5231. 

  5232. # We connect via the container network (private IPs), so we need to disable IP checks

  5233. matrix_user_verification_service_uvs_disable_ip_blacklist: "{{'true' if matrix_synapse_enabled else 'false'}}"

  5234. 

  5235. matrix_user_verification_service_uvs_auth_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'uvs.auth.token', rounds=655555) | to_uuid }}"

  5236. 

  5237. ######################################################################

  5238. #

  5239. # /matrix-user-verification-service

  5240. #

  5241. ######################################################################

  5242. 

  5243. 

  5244. ########################################################################

  5245. #                                                                      #

  5246. # matrix-static-files                                                  #

  5247. #                                                                      #

  5248. ########################################################################

  5249. 

  5250. matrix_static_files_enabled: true

  5251. 

  5252. matrix_static_files_container_network: "{{ (matrix_static_files_identifier if matrix_playbook_reverse_proxy_type == 'none' else matrix_playbook_reverse_proxy_container_network) }}"

  5253. 

  5254. matrix_static_files_container_labels_traefik_enabled: "{{ matrix_playbook_traefik_labels_enabled }}"

  5255. matrix_static_files_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  5256. matrix_static_files_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  5257. matrix_static_files_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  5258. 

  5259. matrix_static_files_container_labels_well_known_matrix_endpoint_traefik_hostname: "{{ matrix_server_fqn_matrix }}"

  5260. 

  5261. # Base domain serving is not enabled by default (see `matrix_static_files_container_labels_base_domain_enabled`),

  5262. # but we pass the hostname, so that enabling it is easy.

  5263. matrix_static_files_container_labels_base_domain_traefik_hostname: "{{ matrix_domain }}"

  5264. 

  5265. # If we're not serving a static webpage, serve a redirect instead of a 404.

  5266. matrix_static_files_container_labels_base_domain_root_path_redirection_enabled: "{{ not matrix_static_files_file_index_html_enabled }}"

  5267. matrix_static_files_container_labels_base_domain_root_path_redirection_url: "{{ ('https://' if matrix_playbook_ssl_enabled else 'http://') + matrix_server_fqn_matrix }}"

  5268. 

  5269. matrix_static_files_file_matrix_client_property_io_element_jitsi_preferred_domain: "{{ matrix_server_fqn_jitsi if jitsi_enabled else '' }}"

  5270. 

  5271. matrix_static_files_file_matrix_client_property_org_matrix_msc3575_proxy_url: "{{ matrix_homeserver_sliding_sync_url }}"

  5272. 

  5273. matrix_static_files_file_matrix_client_property_m_tile_server_entries_enabled: "{{ matrix_client_element_location_sharing_enabled }}"

  5274. matrix_static_files_file_matrix_client_property_m_tile_server_map_style_url: "{{ ('https://' if matrix_playbook_ssl_enabled else 'http://') + matrix_server_fqn_element }}/map_style.json"

  5275. 

  5276. matrix_static_files_file_matrix_server_property_m_server: "{{ matrix_server_fqn_matrix_federation }}:{{ matrix_federation_public_port }}"

  5277. 

  5278. matrix_static_files_scheme: "{{ 'https' if matrix_playbook_ssl_enabled else 'http' }}"

  5279. 

  5280. matrix_static_files_self_check_hostname_matrix: "{{ matrix_server_fqn_matrix }}"

  5281. matrix_static_files_self_check_hostname_identity: "{{ matrix_domain }}"

  5282. 

  5283. ########################################################################

  5284. #                                                                      #

  5285. # /matrix-static-files                                                 #

  5286. #                                                                      #

  5287. ########################################################################

  5288. 

  5289. 

  5290. ########################################################################

  5291. #                                                                      #

  5292. # com.devture.ansible.role.container_socket_proxy                      #

  5293. #                                                                      #

  5294. ########################################################################

  5295. 

  5296. devture_container_socket_proxy_enabled: "{{ matrix_playbook_reverse_proxy_type == 'playbook-managed-traefik' }}"

  5297. 

  5298. devture_container_socket_proxy_identifier: matrix-container-socket-proxy

  5299. 

  5300. devture_container_socket_proxy_base_path: "{{ matrix_base_data_path }}/container-socket-proxy"

  5301. 

  5302. devture_container_socket_proxy_uid: "{{ matrix_user_uid }}"

  5303. devture_container_socket_proxy_gid: "{{ matrix_user_gid }}"

  5304. 

  5305. # Traefik requires read access to the containers APIs to do its job

  5306. devture_container_socket_proxy_api_containers_enabled: true

  5307. 

  5308. ########################################################################

  5309. #                                                                      #

  5310. # /com.devture.ansible.role.container_socket_proxy                     #

  5311. #                                                                      #

  5312. ########################################################################

  5313. 

  5314. 

  5315. ########################################################################

  5316. #                                                                      #

  5317. # com.devture.ansible.role.traefik                                     #

  5318. #                                                                      #

  5319. ########################################################################

  5320. 

  5321. devture_traefik_enabled: "{{ matrix_playbook_reverse_proxy_type == 'playbook-managed-traefik' }}"

  5322. 

  5323. devture_traefik_identifier: matrix-traefik

  5324. 

  5325. devture_traefik_base_path: "{{ matrix_base_data_path }}/traefik"

  5326. 

  5327. devture_traefik_uid: "{{ matrix_user_uid }}"

  5328. devture_traefik_gid: "{{ matrix_user_gid }}"

  5329. 

  5330. devture_traefik_additional_entrypoints_auto: |

  5331.   {{

  5332.     ([matrix_playbook_public_matrix_federation_api_traefik_entrypoint_definition] if matrix_playbook_public_matrix_federation_api_traefik_entrypoint_enabled else [])

  5333.     +

  5334.     ([matrix_playbook_internal_matrix_client_api_traefik_entrypoint_definition] if matrix_playbook_internal_matrix_client_api_traefik_entrypoint_enabled else [])

  5335.   }}

  5336. 

  5337. devture_traefik_config_providers_docker_endpoint: "{{ devture_container_socket_proxy_endpoint if devture_container_socket_proxy_enabled else 'unix:///var/run/docker.sock' }}"

  5338. 

  5339. devture_traefik_container_additional_networks_auto: |

  5340.   {{

  5341.     ([devture_container_socket_proxy_container_network] if devture_container_socket_proxy_enabled else [])

  5342.   }}

  5343. 

  5344. devture_traefik_systemd_required_services_list: |

  5345.   {{

  5346.     ([devture_systemd_docker_base_docker_service_name])

  5347.     +

  5348.     ([devture_container_socket_proxy_identifier + '.service'] if devture_container_socket_proxy_enabled else [])

  5349.   }}

  5350. 

  5351. ########################################################################

  5352. #                                                                      #

  5353. # /com.devture.ansible.role.traefik                                    #

  5354. #                                                                      #

  5355. ########################################################################

  5356. 

  5357. 

  5358. ########################################################################

  5359. #                                                                      #

  5360. # com.devture.ansible.role.traefik_certs_dumper                        #

  5361. #                                                                      #

  5362. ########################################################################

  5363. 

  5364. devture_traefik_certs_dumper_enabled: "{{ (matrix_playbook_reverse_proxy_type == 'playbook-managed-traefik' and devture_traefik_config_entrypoint_web_secure_enabled and devture_traefik_config_certificatesResolvers_acme_enabled) or matrix_playbook_reverse_proxy_type == 'other-traefik-container' }}"

  5365. 

  5366. devture_traefik_certs_dumper_identifier: matrix-traefik-certs-dumper

  5367. 

  5368. devture_traefik_certs_dumper_base_path: "{{ matrix_base_data_path }}/traefik-certs-dumper"

  5369. 

  5370. devture_traefik_certs_dumper_uid: "{{ matrix_user_uid }}"

  5371. devture_traefik_certs_dumper_gid: "{{ matrix_user_gid }}"

  5372. 

  5373. devture_traefik_certs_dumper_ssl_dir_path: "{{ devture_traefik_ssl_dir_path if devture_traefik_enabled else '' }}"

  5374. 

  5375. ########################################################################

  5376. #                                                                      #

  5377. # /com.devture.ansible.role.traefik_certs_dumper                       #

  5378. #                                                                      #

  5379. ########################################################################