overmind
/
matrix-docker-ansible-deploy
mirror of https://github.com/spantaleev/matrix-docker-ansible-deploy
1
0
Fork 0
Code Issues 0 Releases 0 Wiki Activity
Matrix Docker Ansible eploy
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
4013 Commits
11 Branches
500 MiB
 
 
Tree: b6383909e3
Branches Tags
${ item.name }
Create branch ${ searchTerm }
from 'b6383909e3'
${ noResults }
matrix-docker-ansible-deploy/roles/matrix-nginx-proxy/tasks/setup_nginx_proxy.yml

332 lines
13 KiB
Raw Blame History 

  1. ---

  2. 

  3. #

  4. # Generic tasks that we always want to happen, regardless

  5. # if the user wants matrix-nginx-proxy or not.

  6. #

  7. # If the user would set up their own nginx proxy server,

  8. # the config files from matrix-nginx-proxy can be reused.

  9. #

  10. # It doesn't hurt to put them in place, even if they turn out

  11. # to be unnecessary.

  12. #

  13. - name: Ensure Matrix nginx-proxy paths exist

  14.   file:

  15.     path: "{{ item }}"

  16.     state: directory

  17.     mode: 0750

  18.     owner: "{{ matrix_user_username }}"

  19.     group: "{{ matrix_user_groupname }}"

  20.   with_items:

  21.     - "{{ matrix_nginx_proxy_base_path }}"

  22.     - "{{ matrix_nginx_proxy_data_path }}"

  23.     - "{{ matrix_nginx_proxy_confd_path }}"

  24. 

  25. - name: Ensure Matrix nginx-proxy configured (main config override)

  26.   template:

  27.     src: "{{ role_path }}/templates/nginx/nginx.conf.j2"

  28.     dest: "{{ matrix_nginx_proxy_base_path }}/nginx.conf"

  29.     mode: 0644

  30.   when: matrix_nginx_proxy_enabled|bool

  31. 

  32. - name: Ensure matrix-synapse-metrics-htpasswd is present (protecting /_synapse/metrics URI)

  33.   template:

  34.     src: "{{ role_path }}/templates/nginx/matrix-synapse-metrics-htpasswd.j2"

  35.     dest: "{{ matrix_nginx_proxy_data_path }}/matrix-synapse-metrics-htpasswd"

  36.     owner: "{{ matrix_user_username }}"

  37.     group: "{{ matrix_user_groupname }}"

  38.     mode: 0400

  39.   when: "matrix_nginx_proxy_proxy_synapse_metrics_basic_auth_enabled|bool and matrix_nginx_proxy_proxy_synapse_metrics|bool"

  40. 

  41. - name: Generate sample prometheus.yml for external scraping

  42.   template:

  43.     src: "{{ role_path }}/templates/prometheus/external_prometheus.yml.example.j2"

  44.     dest: "{{ matrix_base_data_path }}/external_prometheus.yml.example"

  45.     owner: "{{ matrix_user_username }}"

  46.     group: "{{ matrix_user_groupname }}"

  47.     mode: 0644

  48.   when: matrix_nginx_proxy_proxy_synapse_metrics|bool

  49. 

  50. - name: Ensure Matrix nginx-proxy configured (generic)

  51.   template:

  52.     src: "{{ role_path }}/templates/nginx/conf.d/nginx-http.conf.j2"

  53.     dest: "{{ matrix_nginx_proxy_confd_path }}/nginx-http.conf"

  54.     mode: 0644

  55.   when: matrix_nginx_proxy_enabled|bool

  56. 

  57. - name: Ensure Matrix nginx-proxy configuration for matrix-synapse exists

  58.   template:

  59.     src: "{{ role_path }}/templates/nginx/conf.d/matrix-synapse.conf.j2"

  60.     dest: "{{ matrix_nginx_proxy_confd_path }}/matrix-synapse.conf"

  61.     mode: 0644

  62.   when: matrix_nginx_proxy_proxy_synapse_enabled|bool

  63. 

  64. - name: Ensure Matrix nginx-proxy configuration for matrix-synapse deleted

  65.   file:

  66.     path: "{{ matrix_nginx_proxy_confd_path }}/matrix-synapse.conf"

  67.     state: absent

  68.   when: "not matrix_nginx_proxy_proxy_synapse_enabled|bool"

  69. 

  70. - name: Ensure Matrix nginx-proxy configuration for matrix-dendrite exists

  71.   template:

  72.     src: "{{ role_path }}/templates/nginx/conf.d/matrix-dendrite.conf.j2"

  73.     dest: "{{ matrix_nginx_proxy_confd_path }}/matrix-dendrite.conf"

  74.     mode: 0644

  75.   when: matrix_nginx_proxy_proxy_dendrite_enabled|bool

  76. 

  77. - name: Ensure Matrix nginx-proxy configuration for matrix-dendrite deleted

  78.   file:

  79.     path: "{{ matrix_nginx_proxy_confd_path }}/matrix-dendrite.conf"

  80.     state: absent

  81.   when: "not matrix_nginx_proxy_proxy_dendrite_enabled|bool"

  82. 

  83. - name: Ensure Matrix nginx-proxy configuration for Element domain exists

  84.   template:

  85.     src: "{{ role_path }}/templates/nginx/conf.d/matrix-client-element.conf.j2"

  86.     dest: "{{ matrix_nginx_proxy_confd_path }}/matrix-client-element.conf"

  87.     mode: 0644

  88.   when: matrix_nginx_proxy_proxy_element_enabled|bool

  89. 

  90. - name: Ensure Matrix nginx-proxy configuration for riot domain exists

  91.   template:

  92.     src: "{{ role_path }}/templates/nginx/conf.d/matrix-riot-web.conf.j2"

  93.     dest: "{{ matrix_nginx_proxy_confd_path }}/matrix-riot-web.conf"

  94.     mode: 0644

  95.   when: matrix_nginx_proxy_proxy_riot_compat_redirect_enabled|bool

  96. 

  97. - name: Ensure Matrix nginx-proxy configuration for Hydrogen domain exists

  98.   template:

  99.     src: "{{ role_path }}/templates/nginx/conf.d/matrix-client-hydrogen.conf.j2"

  100.     dest: "{{ matrix_nginx_proxy_confd_path }}/matrix-client-hydrogen.conf"

  101.     mode: 0644

  102.   when: matrix_nginx_proxy_proxy_hydrogen_enabled|bool

  103. 

  104. - name: Ensure Matrix nginx-proxy configuration for Cinny domain exists

  105.   template:

  106.     src: "{{ role_path }}/templates/nginx/conf.d/matrix-client-cinny.conf.j2"

  107.     dest: "{{ matrix_nginx_proxy_confd_path }}/matrix-client-cinny.conf"

  108.     mode: 0644

  109.   when: matrix_nginx_proxy_proxy_cinny_enabled|bool

  110. 

  111. - name: Ensure Matrix nginx-proxy configuration for dimension domain exists

  112.   template:

  113.     src: "{{ role_path }}/templates/nginx/conf.d/matrix-dimension.conf.j2"

  114.     dest: "{{ matrix_nginx_proxy_confd_path }}/matrix-dimension.conf"

  115.     mode: 0644

  116.   when: matrix_nginx_proxy_proxy_dimension_enabled|bool

  117. 

  118. - name: Ensure Matrix nginx-proxy configuration for goneb domain exists

  119.   template:

  120.     src: "{{ role_path }}/templates/nginx/conf.d/matrix-bot-go-neb.conf.j2"

  121.     dest: "{{ matrix_nginx_proxy_confd_path }}/matrix-bot-go-neb.conf"

  122.     mode: 0644

  123.   when: matrix_nginx_proxy_proxy_bot_go_neb_enabled|bool

  124. 

  125. - name: Ensure Matrix nginx-proxy configuration for jitsi domain exists

  126.   template:

  127.     src: "{{ role_path }}/templates/nginx/conf.d/matrix-jitsi.conf.j2"

  128.     dest: "{{ matrix_nginx_proxy_confd_path }}/matrix-jitsi.conf"

  129.     mode: 0644

  130.   when: matrix_nginx_proxy_proxy_jitsi_enabled|bool

  131. 

  132. - name: Ensure Matrix nginx-proxy configuration for grafana domain exists

  133.   template:

  134.     src: "{{ role_path }}/templates/nginx/conf.d/matrix-grafana.conf.j2"

  135.     dest: "{{ matrix_nginx_proxy_confd_path }}/matrix-grafana.conf"

  136.     mode: 0644

  137.   when: matrix_nginx_proxy_proxy_grafana_enabled|bool

  138. 

  139. - name: Ensure Matrix nginx-proxy configuration for sygnal domain exists

  140.   template:

  141.     src: "{{ role_path }}/templates/nginx/conf.d/matrix-sygnal.conf.j2"

  142.     dest: "{{ matrix_nginx_proxy_confd_path }}/matrix-sygnal.conf"

  143.     mode: 0644

  144.   when: matrix_nginx_proxy_proxy_sygnal_enabled|bool

  145. 

  146. - name: Ensure Matrix nginx-proxy configuration for mautrix wsproxy exists

  147.   template:

  148.     src: "{{ role_path }}/templates/nginx/conf.d/matrix-mautrix-wsproxy.conf.j2"

  149.     dest: "{{ matrix_nginx_proxy_confd_path }}/matrix-mautrix-wsproxy.conf"

  150.     mode: 0644

  151.   when: matrix_nginx_proxy_proxy_mautrix_wsproxy_enabled|bool

  152. 

  153. - name: Ensure Matrix nginx-proxy configuration for Matrix domain exists

  154.   template:

  155.     src: "{{ role_path }}/templates/nginx/conf.d/matrix-domain.conf.j2"

  156.     dest: "{{ matrix_nginx_proxy_confd_path }}/matrix-domain.conf"

  157.     mode: 0644

  158. 

  159. - name: Ensure Matrix nginx-proxy data directory for base domain exists

  160.   file:

  161.     path: "{{ matrix_nginx_proxy_data_path }}/matrix-domain"

  162.     state: directory

  163.     mode: 0750

  164.     owner: "{{ matrix_user_username }}"

  165.     group: "{{ matrix_user_groupname }}"

  166.   when: matrix_nginx_proxy_base_domain_serving_enabled|bool and matrix_nginx_proxy_base_domain_create_directory|bool

  167. 

  168. - name: Ensure Matrix nginx-proxy homepage for base domain exists

  169.   copy:

  170.     content: "{{ matrix_nginx_proxy_base_domain_homepage_template }}"

  171.     dest: "{{ matrix_nginx_proxy_data_path }}/matrix-domain/index.html"

  172.     mode: 0644

  173.     owner: "{{ matrix_user_username }}"

  174.     group: "{{ matrix_user_groupname }}"

  175.   when: matrix_nginx_proxy_base_domain_serving_enabled|bool and matrix_nginx_proxy_base_domain_homepage_enabled|bool and matrix_nginx_proxy_base_domain_create_directory|bool

  176. 

  177. - name: Ensure Matrix nginx-proxy configuration for base domain exists

  178.   template:

  179.     src: "{{ role_path }}/templates/nginx/conf.d/matrix-base-domain.conf.j2"

  180.     dest: "{{ matrix_nginx_proxy_confd_path }}/matrix-base-domain.conf"

  181.     mode: 0644

  182.   when: matrix_nginx_proxy_base_domain_serving_enabled|bool

  183. 

  184. #

  185. # Tasks related to setting up matrix-nginx-proxy

  186. #

  187. - name: Ensure nginx Docker image is pulled

  188.   docker_image:

  189.     name: "{{ matrix_nginx_proxy_docker_image }}"

  190.     source: "{{ 'pull' if ansible_version.major > 2 or ansible_version.minor > 7 else omit }}"

  191.     force_source: "{{ matrix_nginx_proxy_docker_image_force_pull if ansible_version.major > 2 or ansible_version.minor >= 8 else omit }}"

  192.     force: "{{ omit if ansible_version.major > 2 or ansible_version.minor >= 8 else matrix_nginx_proxy_docker_image_force_pull }}"

  193.   when: matrix_nginx_proxy_enabled|bool

  194.   register: result

  195.   retries: "{{ matrix_container_retries_count }}"

  196.   delay: "{{ matrix_container_retries_delay }}"

  197.   until: result is not failed

  198. 

  199. - name: Ensure matrix-nginx-proxy.service installed

  200.   template:

  201.     src: "{{ role_path }}/templates/systemd/matrix-nginx-proxy.service.j2"

  202.     dest: "{{ matrix_systemd_path }}/matrix-nginx-proxy.service"

  203.     mode: 0644

  204.   register: matrix_nginx_proxy_systemd_service_result

  205.   when: matrix_nginx_proxy_enabled|bool

  206. 

  207. - name: Ensure systemd reloaded after matrix-nginx-proxy.service installation

  208.   service:

  209.     daemon_reload: true

  210.   when: "matrix_nginx_proxy_enabled and matrix_nginx_proxy_systemd_service_result.changed"

  211. 

  212. 

  213. #

  214. # Tasks related to getting rid of matrix-nginx-proxy (if it was previously enabled)

  215. #

  216. 

  217. - name: Check existence of matrix-nginx-proxy service

  218.   stat:

  219.     path: "{{ matrix_systemd_path }}/matrix-nginx-proxy.service"

  220.   register: matrix_nginx_proxy_service_stat

  221.   when: "not matrix_nginx_proxy_enabled|bool"

  222. 

  223. - name: Ensure matrix-nginx-proxy is stopped

  224.   service:

  225.     name: matrix-nginx-proxy

  226.     state: stopped

  227.     enabled: false

  228.     daemon_reload: true

  229.   register: stopping_result

  230.   when: "not matrix_nginx_proxy_enabled|bool and matrix_nginx_proxy_service_stat.stat.exists"

  231. 

  232. - name: Ensure matrix-nginx-proxy.service doesn't exist

  233.   file:

  234.     path: "{{ matrix_systemd_path }}/matrix-nginx-proxy.service"

  235.     state: absent

  236.   when: "not matrix_nginx_proxy_enabled|bool and matrix_nginx_proxy_service_stat.stat.exists"

  237. 

  238. - name: Ensure systemd reloaded after matrix-nginx-proxy.service removal

  239.   service:

  240.     daemon_reload: true

  241.   when: "not matrix_nginx_proxy_enabled|bool and matrix_nginx_proxy_service_stat.stat.exists"

  242. 

  243. - name: Ensure Matrix nginx-proxy configuration for matrix domain deleted

  244.   file:

  245.     path: "{{ matrix_nginx_proxy_confd_path }}/matrix-domain.conf"

  246.     state: absent

  247.   when: "not matrix_nginx_proxy_proxy_matrix_enabled|bool"

  248. 

  249. - name: Ensure Matrix nginx-proxy configuration for riot domain deleted

  250.   file:

  251.     path: "{{ matrix_nginx_proxy_confd_path }}/matrix-riot-web.conf"

  252.     state: absent

  253.   when: "not matrix_nginx_proxy_proxy_riot_compat_redirect_enabled|bool"

  254. 

  255. - name: Ensure Matrix nginx-proxy configuration for Hydrogen domain deleted

  256.   file:

  257.     path: "{{ matrix_nginx_proxy_confd_path }}/matrix-client-hydrogen.conf"

  258.     state: absent

  259.   when: "not matrix_nginx_proxy_proxy_hydrogen_enabled|bool"

  260. 

  261. - name: Ensure Matrix nginx-proxy configuration for Cinny domain deleted

  262.   file:

  263.     path: "{{ matrix_nginx_proxy_confd_path }}/matrix-client-cinny.conf"

  264.     state: absent

  265.   when: "not matrix_nginx_proxy_proxy_cinny_enabled|bool"

  266. 

  267. - name: Ensure Matrix nginx-proxy configuration for dimension domain deleted

  268.   file:

  269.     path: "{{ matrix_nginx_proxy_confd_path }}/matrix-dimension.conf"

  270.     state: absent

  271.   when: "not matrix_nginx_proxy_proxy_dimension_enabled|bool"

  272. 

  273. - name: Ensure Matrix nginx-proxy configuration for goneb domain deleted

  274.   file:

  275.     path: "{{ matrix_nginx_proxy_confd_path }}/matrix-bot-go-neb.conf"

  276.     state: absent

  277.   when: "not matrix_nginx_proxy_proxy_bot_go_neb_enabled|bool"

  278. 

  279. - name: Ensure Matrix nginx-proxy configuration for jitsi domain deleted

  280.   file:

  281.     path: "{{ matrix_nginx_proxy_confd_path }}/matrix-jitsi.conf"

  282.     state: absent

  283.   when: "not matrix_nginx_proxy_proxy_jitsi_enabled|bool"

  284. 

  285. - name: Ensure Matrix nginx-proxy configuration for grafana domain deleted

  286.   file:

  287.     path: "{{ matrix_nginx_proxy_confd_path }}/matrix-grafana.conf"

  288.     state: absent

  289.   when: "not matrix_nginx_proxy_proxy_grafana_enabled|bool"

  290. 

  291. - name: Ensure Matrix nginx-proxy configuration for sygnal domain deleted

  292.   file:

  293.     path: "{{ matrix_nginx_proxy_confd_path }}/matrix-sygnal.conf"

  294.     state: absent

  295.   when: "not matrix_nginx_proxy_proxy_sygnal_enabled|bool"

  296. 

  297. - name: Ensure Matrix nginx-proxy configuration for mautrix wsproxy deleted

  298.   file:

  299.     path: "{{ matrix_nginx_proxy_confd_path }}/matrix-mautrix-wsproxy.conf"

  300.     state: absent

  301.   when: "not matrix_nginx_proxy_proxy_mautrix_wsproxy_enabled|bool"

  302. 

  303. - name: Ensure Matrix nginx-proxy homepage for base domain deleted

  304.   file:

  305.     path: "{{ matrix_nginx_proxy_data_path }}/matrix-domain/index.html"

  306.     state: absent

  307.   when: "not matrix_nginx_proxy_base_domain_serving_enabled|bool"

  308. 

  309. - name: Ensure Matrix nginx-proxy configuration for base domain deleted

  310.   file:

  311.     path: "{{ matrix_nginx_proxy_confd_path }}/matrix-base-domain.conf"

  312.     state: absent

  313.   when: "not matrix_nginx_proxy_base_domain_serving_enabled|bool"

  314. 

  315. - name: Ensure Matrix nginx-proxy configuration for main config override deleted

  316.   file:

  317.     path: "{{ matrix_nginx_proxy_base_path }}/nginx.conf"

  318.     state: absent

  319.   when: "not matrix_nginx_proxy_enabled|bool"

  320. 

  321. - name: Ensure Matrix nginx-proxy htpasswd is deleted (protecting /_synapse/metrics URI)

  322.   file:

  323.     path: "{{ matrix_nginx_proxy_data_path }}/matrix-synapse-metrics-htpasswd"

  324.     state: absent

  325.   when: "not matrix_nginx_proxy_proxy_synapse_metrics_basic_auth_enabled|bool or not matrix_nginx_proxy_proxy_synapse_metrics|bool"

  326. 

  327. - name: Ensure sample prometheus.yml for external scraping is deleted

  328.   file:

  329.     path: "{{ matrix_base_data_path }}/external_prometheus.yml.example"

  330.     state: absent

  331.   when: "not matrix_nginx_proxy_proxy_synapse_metrics|bool"