overmind
/
matrix-docker-ansible-deploy
зеркало из https://github.com/spantaleev/matrix-docker-ansible-deploy
1
0
Форкнуть 0
Код Задачи 0 Релизы 0 Вики Активность
Matrix Docker Ansible eploy
Вы не можете выбрать более 25 тем Темы должны начинаться с буквы или цифры, могут содержать дефисы(-) и должны содержать не более 35 символов.
5820 коммитов
13 Ветки
509 MiB
 
 
Дерево: c5dbeeae91
Ветки Теги
${ item.name }
Создать ветку ${ searchTerm }
из 'c5dbeeae91'
${ noResults }
matrix-docker-ansible-deploy/group_vars/matrix_servers

3757 строки
187 KiB
Исходник Вина История 

  1. ---

  2. 

  3. # This variables file wires together the various components (roles) used by the playbook.

  4. #

  5. # Roles used by playbook are pretty minimal and kept independent of one another as much as possible.

  6. # To deliver a turnkey fully-featured Matrix server, this playbook needs

  7. # to connect them all together. It does so by overriding role variables.

  8. #

  9. # You can also override ANY variable (seen here or in any given role),

  10. # by re-defining it in your own configuration file (`inventory/host_vars/matrix.<your-domain>`).

  11. 

  12. ########################################################################

  13. #                                                                      #

  14. # Playbook                                                             #

  15. #                                                                      #

  16. ########################################################################

  17. 

  18. # Controls whether to install Docker or not

  19. # Also see `devture_docker_sdk_for_python_installation_enabled`.

  20. matrix_playbook_docker_installation_enabled: true

  21. 

  22. # Controls whether to run the Traefik role or not

  23. # See the `com.devture.ansible.role.traefik` section below for role configuration.

  24. #

  25. # There's a difference between `devture_traefik_enabled` and `matrix_playbook_traefik_role_enabled`.

  26. # `devture_traefik_enabled` controls what the Traefik role would do - when not enabled, it will run uninstall tasks, etc.

  27. # `matrix_playbook_traefik_role_enabled` controls if the Traefik role would even run at all.

  28. #

  29. # Sometimes, you're installing Traefik via a different (related playbook) which uses the same role.

  30. # In such cases, you'd like to disable the role in this playbook from bothering with Traefik at all (`matrix_playbook_traefik_role_enabled: false`).

  31. # If you used `devture_traefik_enabled: false` + `matrix_playbook_traefik_role_enabled: true` instead, you'd see the Treafik role here

  32. # try to delete Traefik data (`/devture-traefik`) installed by the other playbook.

  33. matrix_playbook_traefik_role_enabled: "{{ matrix_playbook_reverse_proxy_type != 'other-traefik-container' }}"

  34. 

  35. # Controls whether to attach Traefik labels to services.

  36. # This is separate from `devture_traefik_enabled` and `matrix_playbook_traefik_role_enabled`,

  37. # because you may wish to disable Traefik installation by the playbook, yet still use Traefik

  38. # installed in another way.

  39. matrix_playbook_traefik_labels_enabled: "{{ matrix_playbook_reverse_proxy_type in ['playbook-managed-traefik', 'other-traefik-container'] }}"

  40. 

  41. matrix_playbook_traefik_certs_dumper_role_enabled: "{{ (matrix_playbook_reverse_proxy_type == 'playbook-managed-traefik' and devture_traefik_config_entrypoint_web_secure_enabled) or matrix_playbook_reverse_proxy_type == 'other-traefik-container' }}"

  42. 

  43. # Controls the additional network that reverse-proxyable services will be connected to.

  44. matrix_playbook_reverse_proxyable_services_additional_network: "{{ devture_traefik_container_network if devture_traefik_enabled else '' }}"

  45. 

  46. matrix_playbook_ssl_retrieval_method: "{{ 'lets-encrypt' if matrix_playbook_traefik_certs_dumper_role_enabled else matrix_ssl_retrieval_method }}"

  47. 

  48. matrix_playbook_ssl_enabled: "{{ matrix_playbook_ssl_retrieval_method in ['lets-encrypt', 'self-signed', 'manually-managed'] }}"

  49. 

  50. ########################################################################

  51. #                                                                      #

  52. # /Playbook                                                            #

  53. #                                                                      #

  54. ########################################################################

  55. 

  56. ########################################################################

  57. #                                                                      #

  58. # base                                                                 #

  59. #                                                                      #

  60. ########################################################################

  61. 

  62. matrix_homeserver_container_extra_arguments_auto: |

  63.   {{

  64.     (['--mount type=bind,src=' + matrix_appservice_discord_config_path + '/registration.yaml,dst=/matrix-appservice-discord-registration.yaml,ro'] if matrix_appservice_discord_enabled else [])

  65.     +

  66.     (['--mount type=bind,src=' + matrix_appservice_irc_config_path + '/registration.yaml,dst=/matrix-appservice-irc-registration.yaml,ro'] if matrix_appservice_irc_enabled else [])

  67.     +

  68.     (['--mount type=bind,src=' + matrix_appservice_kakaotalk_config_path + '/registration.yaml,dst=/matrix-appservice-kakaotalk-registration.yaml,ro'] if matrix_appservice_kakaotalk_enabled else [])

  69.     +

  70.     (['--mount type=bind,src=' + matrix_appservice_slack_config_path + '/slack-registration.yaml,dst=/matrix-appservice-slack-registration.yaml,ro'] if matrix_appservice_slack_enabled else [])

  71.     +

  72.     (['--mount type=bind,src=' + matrix_appservice_webhooks_config_path + '/webhooks-registration.yaml,dst=/matrix-appservice-webhooks-registration.yaml,ro'] if matrix_appservice_webhooks_enabled else [])

  73.     +

  74.     (['--mount type=bind,src=' + matrix_beeper_linkedin_config_path + '/registration.yaml,dst=/matrix-beeper-linkedin-registration.yaml,ro'] if matrix_beeper_linkedin_enabled else [])

  75.     +

  76.     (['--mount type=bind,src=' + matrix_go_skype_bridge_config_path + '/registration.yaml,dst=/matrix-go-skype-bridge-registration.yaml,ro'] if matrix_go_skype_bridge_enabled else [])

  77.     +

  78.     (['--mount type=bind,src=' + matrix_heisenbridge_base_path + '/registration.yaml,dst=/heisenbridge-registration.yaml,ro'] if matrix_heisenbridge_enabled else [])

  79.     +

  80.     (['--mount type=bind,src=' + matrix_hookshot_base_path + '/registration.yml,dst=/hookshot-registration.yml,ro'] if matrix_hookshot_enabled else [])

  81.     +

  82.     (['--mount type=bind,src=' + matrix_mautrix_discord_config_path + '/registration.yaml,dst=/matrix-mautrix-discord-registration.yaml,ro'] if matrix_mautrix_discord_enabled else [])

  83.     +

  84.     (['--mount type=bind,src=' + matrix_mautrix_slack_config_path + '/registration.yaml,dst=/matrix-mautrix-slack-registration.yaml,ro'] if matrix_mautrix_slack_enabled else [])

  85.     +

  86.     (['--mount type=bind,src=' + matrix_mautrix_facebook_config_path + '/registration.yaml,dst=/matrix-mautrix-facebook-registration.yaml,ro'] if matrix_mautrix_facebook_enabled else [])

  87.     +

  88.     (['--mount type=bind,src=' + matrix_mautrix_googlechat_config_path + '/registration.yaml,dst=/matrix-mautrix-googlechat-registration.yaml,ro'] if matrix_mautrix_googlechat_enabled else [])

  89.     +

  90.     (['--mount type=bind,src=' + matrix_mautrix_hangouts_config_path + '/registration.yaml,dst=/matrix-mautrix-hangouts-registration.yaml,ro'] if matrix_mautrix_hangouts_enabled else [])

  91.     +

  92.     (['--mount type=bind,src=' + matrix_mautrix_instagram_config_path + '/registration.yaml,dst=/matrix-mautrix-instagram-registration.yaml,ro'] if matrix_mautrix_instagram_enabled else [])

  93.     +

  94.     (['--mount type=bind,src=' + matrix_mautrix_signal_config_path + '/registration.yaml,dst=/matrix-mautrix-signal-registration.yaml,ro'] if matrix_mautrix_signal_enabled else [])

  95.     +

  96.     (['--mount type=bind,src=' + matrix_mautrix_telegram_config_path + '/registration.yaml,dst=/matrix-mautrix-telegram-registration.yaml,ro'] if matrix_mautrix_telegram_enabled else [])

  97.     +

  98.     (['--mount type=bind,src=' + matrix_mautrix_twitter_config_path + '/registration.yaml,dst=/matrix-mautrix-twitter-registration.yaml,ro'] if matrix_mautrix_twitter_enabled else [])

  99.     +

  100.     (['--mount type=bind,src=' + matrix_mautrix_whatsapp_config_path + '/registration.yaml,dst=/matrix-mautrix-whatsapp-registration.yaml,ro'] if matrix_mautrix_whatsapp_enabled else [])

  101.     +

  102.     (['--mount type=bind,src=' + matrix_mx_puppet_discord_config_path + '/registration.yaml,dst=/matrix-mx-puppet-discord-registration.yaml,ro'] if matrix_mx_puppet_discord_enabled else [])

  103.     +

  104.     (['--mount type=bind,src=' + matrix_mx_puppet_groupme_config_path + '/registration.yaml,dst=/matrix-mx-puppet-groupme-registration.yaml,ro'] if matrix_mx_puppet_groupme_enabled else [])

  105.     +

  106.     (['--mount type=bind,src=' + matrix_mx_puppet_instagram_config_path + '/registration.yaml,dst=/matrix-mx-puppet-instagram-registration.yaml,ro'] if matrix_mx_puppet_instagram_enabled else [])

  107.     +

  108.     (['--mount type=bind,src=' + matrix_mx_puppet_slack_config_path + '/registration.yaml,dst=/matrix-mx-puppet-slack-registration.yaml,ro'] if matrix_mx_puppet_slack_enabled else [])

  109.     +

  110.     (['--mount type=bind,src=' + matrix_mx_puppet_steam_config_path + '/registration.yaml,dst=/matrix-mx-puppet-steam-registration.yaml,ro'] if matrix_mx_puppet_steam_enabled else [])

  111.     +

  112.     (['--mount type=bind,src=' + matrix_mx_puppet_twitter_config_path + '/registration.yaml,dst=/matrix-mx-puppet-twitter-registration.yaml,ro'] if matrix_mx_puppet_twitter_enabled else [])

  113.     +

  114.     (['--mount type=bind,src=' + matrix_sms_bridge_config_path + '/registration.yaml,dst=/matrix-sms-bridge-registration.yaml,ro'] if matrix_sms_bridge_enabled else [])

  115.     +

  116.     (['--mount type=bind,src=' + matrix_cactus_comments_app_service_config_file + ',dst=/matrix-cactus-comments.yaml,ro'] if matrix_cactus_comments_enabled else [])

  117.   }}

  118. 

  119. matrix_homeserver_app_service_config_files_auto: |

  120.   {{

  121.     (['/matrix-appservice-discord-registration.yaml'] if matrix_appservice_discord_enabled else [])

  122.     +

  123.     (['/matrix-appservice-irc-registration.yaml'] if matrix_appservice_irc_enabled else [])

  124.     +

  125.     (['/matrix-appservice-kakaotalk-registration.yaml'] if matrix_appservice_kakaotalk_enabled else [])

  126.     +

  127.     (['/matrix-appservice-slack-registration.yaml'] if matrix_appservice_slack_enabled else [])

  128.     +

  129.     (['/matrix-appservice-webhooks-registration.yaml'] if matrix_appservice_webhooks_enabled else [])

  130.     +

  131.     (['/matrix-beeper-linkedin-registration.yaml'] if matrix_beeper_linkedin_enabled else [])

  132.     +

  133.     (['/matrix-go-skype-bridge-registration.yaml'] if matrix_go_skype_bridge_enabled else [])

  134.     +

  135.     (['/heisenbridge-registration.yaml'] if matrix_heisenbridge_enabled else [])

  136.     +

  137.     (['/hookshot-registration.yml'] if matrix_hookshot_enabled else [])

  138.     +

  139.     (['/matrix-mautrix-discord-registration.yaml'] if matrix_mautrix_discord_enabled else [])

  140.     +

  141.     (['/matrix-mautrix-slack-registration.yaml'] if matrix_mautrix_slack_enabled else [])

  142.     +

  143.     (['/matrix-mautrix-facebook-registration.yaml'] if matrix_mautrix_facebook_enabled else [])

  144.     +

  145.     (['/matrix-mautrix-googlechat-registration.yaml'] if matrix_mautrix_googlechat_enabled else [])

  146.     +

  147.     (['/matrix-mautrix-hangouts-registration.yaml'] if matrix_mautrix_hangouts_enabled else [])

  148.     +

  149.     (['/matrix-mautrix-instagram-registration.yaml'] if matrix_mautrix_instagram_enabled else [])

  150.     +

  151.     (['/matrix-mautrix-signal-registration.yaml'] if matrix_mautrix_signal_enabled else [])

  152.     +

  153.     (['/matrix-mautrix-telegram-registration.yaml'] if matrix_mautrix_telegram_enabled else [])

  154.     +

  155.     (['/matrix-mautrix-twitter-registration.yaml'] if matrix_mautrix_twitter_enabled else [])

  156.     +

  157.     (['/matrix-mautrix-whatsapp-registration.yaml'] if matrix_mautrix_whatsapp_enabled else [])

  158.     +

  159.     (['/matrix-mx-puppet-discord-registration.yaml'] if matrix_mx_puppet_discord_enabled else [])

  160.     +

  161.     (['/matrix-mx-puppet-groupme-registration.yaml'] if matrix_mx_puppet_groupme_enabled else [])

  162.     +

  163.     (['/matrix-mx-puppet-instagram-registration.yaml'] if matrix_mx_puppet_instagram_enabled else [])

  164.     +

  165.     (['/matrix-mx-puppet-slack-registration.yaml'] if matrix_mx_puppet_slack_enabled else [])

  166.     +

  167.     (['/matrix-mx-puppet-steam-registration.yaml'] if matrix_mx_puppet_steam_enabled else [])

  168.     +

  169.     (['/matrix-mx-puppet-twitter-registration.yaml'] if matrix_mx_puppet_twitter_enabled else [])

  170.     +

  171.     (['/matrix-sms-bridge-registration.yaml'] if matrix_sms_bridge_enabled else [])

  172.     +

  173.     (['/matrix-cactus-comments.yaml'] if matrix_cactus_comments_enabled else [])

  174.   }}

  175. 

  176. ########################################################################

  177. #                                                                      #

  178. # /base                                                                #

  179. #                                                                      #

  180. ########################################################################

  181. 

  182. 

  183. ########################################################################

  184. #                                                                      #

  185. # com.devture.ansible.role.systemd_service_manager                     #

  186. #                                                                      #

  187. ########################################################################

  188. 

  189. # This list is not exhaustive and final.

  190. # Synapse workers are still injected into the list at runtime.

  191. # Additional JVB workers (playbooks/jitsi_jvb.yml -- roles/custom/matrix-jitsi/tasks/init_additional_jvb.yml) override this variable at runtime as well.

  192. #

  193. # Priority levels are like this:

  194. # - core services (the homeserver) get a level of ~1000

  195. # - services that core services depend on (database, Redis, ntfy, etc.) get a lower level - between 500 and 1000

  196. # - reverse-proxying services get level 3000

  197. # - Matrix utility services (bridges, bots) get a level of 2000/2200, so that:

  198. #   - they can start before the reverse-proxy

  199. #   - so that, when the reverse-proxy is up (Matrix is up), all bots and bridges can be interacted with

  200. # - monitoring services (Prometheus, Grafana, ..) get a level of 4000 - they can start later than all-of-Matrix

  201. # - services which aren't time-sensitive (various crons and timers) get a level of 5000 - they can start later than all-of-Matrix

  202. #

  203. # `matrix-bot-postmoogle.service` has a higher priority number (4000), unlike other bots' priority (2200),

  204. # because it requires SSL certificates. If Traefik is used, then Postmoogle needs to start at least after Traefik (3500) and Traefik certs dumper (3500).

  205. devture_systemd_service_manager_services_list_auto: |

  206.   {{

  207.     ([{'name': (backup_borg_identifier + '.timer'), 'priority': 5000, 'groups': ['matrix', 'backup', 'borg']}] if backup_borg_enabled else [])

  208.     +

  209.     ([{'name': 'matrix-bot-buscarron.service', 'priority': 2200, 'groups': ['matrix', 'bots', 'buscarron']}] if matrix_bot_buscarron_enabled else [])

  210.     +

  211.     ([{'name': 'matrix-bot-go-neb.service', 'priority': 2200, 'groups': ['matrix', 'bots', 'go-neb']}] if matrix_bot_go_neb_enabled else [])

  212.     +

  213.     ([{'name': 'matrix-bot-honoroit.service', 'priority': 2200, 'groups': ['matrix', 'bots', 'honoroit']}] if matrix_bot_honoroit_enabled else [])

  214.     +

  215.     ([{'name': 'matrix-bot-matrix-registration-bot.service', 'priority': 2200, 'groups': ['matrix', 'bots', 'registration-bot']}] if matrix_bot_matrix_registration_bot_enabled else [])

  216.     +

  217.     ([{'name': 'matrix-bot-matrix-reminder-bot.service', 'priority': 2200, 'groups': ['matrix', 'bots', 'reminder-bot']}] if matrix_bot_matrix_reminder_bot_enabled else [])

  218.     +

  219.     ([{'name': 'matrix-bot-maubot.service', 'priority': 2200, 'groups': ['matrix', 'bots', 'maubot']}] if matrix_bot_maubot_enabled else [])

  220.     +

  221.     ([{'name': 'matrix-bot-mjolnir.service', 'priority': 4000, 'groups': ['matrix', 'bots', 'mjolnir']}] if matrix_bot_mjolnir_enabled else [])

  222.     +

  223.     ([{'name': 'matrix-bot-draupnir.service', 'priority': 4000, 'groups': ['matrix', 'bots', 'draupnir']}] if matrix_bot_draupnir_enabled else [])

  224.     +

  225.     ([{'name': 'matrix-bot-postmoogle.service', 'priority': 4000, 'groups': ['matrix', 'bots', 'postmoogle']}] if matrix_bot_postmoogle_enabled else [])

  226.     +

  227.     ([{'name': 'matrix-bot-chatgpt.service', 'priority': 2200, 'groups': ['matrix', 'bots', 'chatgpt']}] if matrix_bot_chatgpt_enabled else [])

  228.     +

  229.     ([{'name': 'matrix-appservice-discord.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'appservice-discord']}] if matrix_appservice_discord_enabled else [])

  230.     +

  231.     ([{'name': 'matrix-appservice-irc.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'appservice-irc']}] if matrix_appservice_irc_enabled else [])

  232.     +

  233.     ([{'name': 'matrix-appservice-kakaotalk.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'appservice-kakaotalk']}] if matrix_appservice_kakaotalk_enabled else [])

  234.     +

  235.     ([{'name': 'matrix-appservice-kakaotalk-node.service', 'priority': 1900, 'groups': ['matrix', 'bridges', 'appservice-kakaotalk', 'appservice-kakaotalk-node']}] if matrix_appservice_kakaotalk_enabled else [])

  236.     +

  237.     ([{'name': 'matrix-appservice-slack.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'appservice-slack']}] if matrix_appservice_slack_enabled else [])

  238.     +

  239.     ([{'name': 'matrix-appservice-webhooks.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'appservice-webhooks']}] if matrix_appservice_webhooks_enabled else [])

  240.     +

  241.     ([{'name': 'matrix-beeper-linkedin.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'beeper-linkedin']}] if matrix_beeper_linkedin_enabled else [])

  242.     +

  243.     ([{'name': 'matrix-go-skype-bridge.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'go-skype']}] if matrix_go_skype_bridge_enabled else [])

  244.     +

  245.     ([{'name': 'matrix-heisenbridge.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'heisenbridge']}] if matrix_heisenbridge_enabled else [])

  246.     +

  247.     ([{'name': 'matrix-hookshot.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'hookshot']}] if matrix_hookshot_enabled else [])

  248.     +

  249.     ([{'name': 'matrix-mautrix-discord.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mautrix-discord']}] if matrix_mautrix_discord_enabled else [])

  250.     +

  251.     ([{'name': 'matrix-mautrix-slack.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mautrix-slack']}] if matrix_mautrix_slack_enabled else [])

  252.     +

  253.     ([{'name': 'matrix-mautrix-facebook.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mautrix-facebook']}] if matrix_mautrix_facebook_enabled else [])

  254.     +

  255.     ([{'name': 'matrix-mautrix-googlechat.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mautrix-googlechat']}] if matrix_mautrix_googlechat_enabled else [])

  256.     +

  257.     ([{'name': 'matrix-mautrix-hangouts.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mautrix-hangouts']}] if matrix_mautrix_hangouts_enabled else [])

  258.     +

  259.     ([{'name': 'matrix-mautrix-instagram.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mautrix-instagram']}] if matrix_mautrix_instagram_enabled else [])

  260.     +

  261.     ([{'name': 'matrix-mautrix-signal.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mautrix-signal']}] if matrix_mautrix_signal_enabled else [])

  262.     +

  263.     ([{'name': 'matrix-mautrix-signal-daemon.service', 'priority': 1900, 'groups': ['matrix', 'bridges', 'mautrix-signal', 'mautrix-signal-daemon']}] if matrix_mautrix_signal_enabled else [])

  264.     +

  265.     ([{'name': 'matrix-mautrix-telegram.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mautrix-telegram']}] if matrix_mautrix_telegram_enabled else [])

  266.     +

  267.     ([{'name': 'matrix-mautrix-twitter.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mautrix-twitter']}] if matrix_mautrix_twitter_enabled else [])

  268.     +

  269.     ([{'name': 'matrix-mautrix-whatsapp.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mautrix-whatsapp']}] if matrix_mautrix_whatsapp_enabled else [])

  270.     +

  271.     ([{'name': 'matrix-mx-puppet-discord.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mx-puppet-discord']}] if matrix_mx_puppet_discord_enabled else [])

  272.     +

  273.     ([{'name': 'matrix-mx-puppet-groupme.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mx-puppet-groupme']}] if matrix_mx_puppet_groupme_enabled else [])

  274.     +

  275.     ([{'name': 'matrix-mx-puppet-instagram.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mx-puppet-instagram']}] if matrix_mx_puppet_instagram_enabled else [])

  276.     +

  277.     ([{'name': 'matrix-mx-puppet-slack.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mx-puppet-slack']}] if matrix_mx_puppet_slack_enabled else [])

  278.     +

  279.     ([{'name': 'matrix-mx-puppet-steam.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mx-puppet-steam']}] if matrix_mx_puppet_steam_enabled else [])

  280.     +

  281.     ([{'name': 'matrix-mx-puppet-twitter.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mx-puppet-twitter']}] if matrix_mx_puppet_twitter_enabled else [])

  282.     +

  283.     ([{'name': 'matrix-sms-bridge.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'sms']}] if matrix_sms_bridge_enabled else [])

  284.     +

  285.     ([{'name': 'matrix-cactus-comments.service', 'priority': 2000, 'groups': ['matrix', 'cactus-comments']}] if matrix_cactus_comments_enabled else [])

  286.     +

  287.     ([{'name': 'matrix-client-cinny.service', 'priority': 2000, 'groups': ['matrix', 'clients', 'cinny']}] if matrix_client_cinny_enabled else [])

  288.     +

  289.     ([{'name': 'matrix-client-element.service', 'priority': 2000, 'groups': ['matrix', 'clients', 'element']}] if matrix_client_element_enabled else [])

  290.     +

  291.     ([{'name': 'matrix-client-hydrogen.service', 'priority': 2000, 'groups': ['matrix', 'clients', 'hydrogen']}] if matrix_client_hydrogen_enabled else [])

  292.     +

  293.     ([{'name': ('matrix-' + matrix_homeserver_implementation + '.service'), 'priority': 1000, 'groups': ['matrix', 'homeservers', matrix_homeserver_implementation]}] if matrix_homeserver_enabled else [])

  294.     +

  295.     ([{'name': 'matrix-corporal.service', 'priority': 1500, 'groups': ['matrix', 'corporal']}] if matrix_corporal_enabled else [])

  296.     +

  297.     ([{'name': 'matrix-coturn.service', 'priority': 4000, 'groups': ['matrix', 'coturn']}] if matrix_coturn_enabled else [])

  298.     +

  299.     ([{'name': 'matrix-rageshake.service', 'priority': 4000, 'groups': ['matrix', 'rageshake']}] if matrix_rageshake_enabled else [])

  300.     +

  301.     ([{'name': 'matrix-coturn-reload.timer', 'priority': 5000, 'groups': ['matrix', 'coturn']}] if (matrix_coturn_enabled and matrix_coturn_tls_enabled) else [])

  302.     +

  303.     ([{'name': 'matrix-dimension.service', 'priority': 4000, 'groups': ['matrix', 'integration-managers', 'dimension']}] if matrix_dimension_enabled else [])

  304.     +

  305.     ([{'name': 'matrix-dynamic-dns.service', 'priority': 5000, 'groups': ['matrix', 'dynamic-dns']}] if matrix_dynamic_dns_enabled else [])

  306.     +

  307.     ([{'name': 'matrix-email2matrix.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'email2matrix']}] if matrix_email2matrix_enabled else [])

  308.     +

  309.     ([{'name': 'matrix-etherpad.service', 'priority': 4000, 'groups': ['matrix', 'etherpad']}] if matrix_etherpad_enabled else [])

  310.     +

  311.     ([{'name': (grafana_identifier + '.service'), 'priority': 4000, 'groups': ['matrix', 'monitoring', 'grafana']}] if grafana_enabled else [])

  312.     +

  313.     ([{'name': 'matrix-jitsi-web.service', 'priority': 4200, 'groups': ['matrix', 'jitsi', 'jitsi-web']}] if matrix_jitsi_enabled else [])

  314.     +

  315.     ([{'name': 'matrix-jitsi-prosody.service', 'priority': 4000, 'groups': ['matrix', 'jitsi', 'jitsi-prosody']}] if matrix_jitsi_enabled else [])

  316.     +

  317.     ([{'name': 'matrix-jitsi-jicofo.service', 'priority': 4100, 'groups': ['matrix', 'jitsi', 'jitsi-jicofo']}] if matrix_jitsi_enabled else [])

  318.     +

  319.     ([{'name': 'matrix-jitsi-jvb.service', 'priority': 4100, 'groups': ['matrix', 'jitsi', 'jitsi-jvb']}] if matrix_jitsi_enabled else [])

  320.     +

  321.     ([{'name': 'matrix-ldap-registration-proxy.service', 'priority': 2000, 'groups': ['matrix', 'ldap-registration-proxy']}] if matrix_ldap_registration_proxy_enabled else [])

  322.     +

  323.     ([{'name': 'matrix-ma1sd.service', 'priority': 2000, 'groups': ['matrix', 'ma1sd']}] if matrix_ma1sd_enabled else [])

  324.     +

  325.     ([{'name': 'matrix-mailer.service', 'priority': 2000, 'groups': ['matrix', 'mailer']}] if matrix_mailer_enabled else [])

  326.     +

  327.     ([{'name': 'matrix-nginx-proxy.service', 'priority': 3000, 'groups': ['matrix', 'nginx', 'reverse-proxies']}] if matrix_nginx_proxy_enabled else [])

  328.     +

  329.     (matrix_ssl_renewal_systemd_units_list | selectattr('applicable') | selectattr('enableable') | list )

  330.     +

  331.     ([{'name': (ntfy_identifier + '.service'), 'priority': 800, 'groups': ['matrix', 'ntfy']}] if ntfy_enabled else [])

  332.     +

  333.     ([{'name': (devture_postgres_identifier + '.service'), 'priority': 500, 'groups': ['matrix', 'postgres']}] if devture_postgres_enabled else [])

  334.     +

  335.     ([{'name': (devture_postgres_backup_identifier + '.service'), 'priority': 5000, 'groups': ['matrix', 'backup', 'postgres-backup']}] if devture_postgres_backup_enabled else [])

  336.     +

  337.     ([{'name': 'matrix-prometheus.service', 'priority': 4000, 'groups': ['matrix', 'monitoring', 'prometheus', 'prometheus-core']}] if matrix_prometheus_enabled else [])

  338.     +

  339.     ([{'name': (prometheus_node_exporter_identifier + '.service'), 'priority': 3900, 'groups': ['matrix', 'monitoring', 'prometheus', 'prometheus-exporters']}] if prometheus_node_exporter_enabled else [])

  340.     +

  341.     ([{'name': (prometheus_postgres_exporter_identifier + '.service'), 'priority': 3900, 'groups': ['matrix', 'monitoring', 'prometheus', 'prometheus-exporters']}] if prometheus_postgres_exporter_enabled else [])

  342.     +

  343.     ([{'name': 'matrix-prometheus-nginxlog-exporter.service', 'priority': 3900, 'groups': ['matrix', 'monitoring', 'prometheus', 'prometheus-exporters']}] if matrix_prometheus_nginxlog_exporter_enabled else [])

  344.     +

  345.     ([{'name': (redis_identifier + '.service'), 'priority': 750, 'groups': ['matrix', 'redis']}] if redis_enabled else [])

  346.     +

  347.     ([{'name': 'matrix-registration.service', 'priority': 4000, 'groups': ['matrix', 'registration']}] if matrix_registration_enabled else [])

  348.     +

  349.     ([{'name': 'matrix-sygnal.service', 'priority': 800, 'groups': ['matrix', 'sygnal']}] if matrix_sygnal_enabled else [])

  350.     +

  351.     ([{'name': 'matrix-goofys.service', 'priority': 800, 'groups': ['matrix', 'goofys']}] if matrix_s3_media_store_enabled else [])

  352.     +

  353.     ([{'name': 'matrix-synapse-s3-storage-provider-migrate.timer', 'priority': 5000, 'groups': ['matrix']}] if matrix_synapse_ext_synapse_s3_storage_provider_enabled else [])

  354.     +

  355.     ([{'name': 'matrix-synapse-admin.service', 'priority': 4000, 'groups': ['matrix', 'synapse-admin']}] if matrix_synapse_admin_enabled else [])

  356.     +

  357.     ([{'name': 'matrix-synapse-reverse-proxy-companion.service', 'priority': 1500, 'groups': ['matrix', 'homeservers', 'synapse', 'reverse-proxies']}] if matrix_synapse_reverse_proxy_companion_enabled else [])

  358.     +

  359.     ([{'name': 'matrix-user-verification-service.service', 'priority': 800, 'groups': ['matrix', 'matrix-user-verification-service']}] if matrix_user_verification_service_enabled else [])

  360.     +

  361.     ([{'name': 'devture-traefik.service', 'priority': 3000, 'groups': ['matrix', 'traefik', 'reverse-proxies']}] if devture_traefik_enabled else [])

  362.     +

  363.     ([{'name': (devture_traefik_certs_dumper_identifier + '.service'), 'priority': 3500, 'groups': ['matrix', 'traefik-certs-dumper']}] if matrix_playbook_traefik_certs_dumper_role_enabled else [])

  364.   }}

  365. 

  366. ########################################################################

  367. #                                                                      #

  368. # /com.devture.ansible.role.systemd_service_manager                    #

  369. #                                                                      #

  370. ########################################################################

  371. 

  372. 

  373. ########################################################################

  374. #                                                                      #

  375. # com.devture.ansible.role.timesync                                    #

  376. #                                                                      #

  377. ########################################################################

  378. 

  379. # To completely disable installing systemd-timesyncd/ntpd, use `devture_timesync_installation_enabled: false`.

  380. 

  381. ########################################################################

  382. #                                                                      #

  383. # /com.devture.ansible.role.timesync                                   #

  384. #                                                                      #

  385. ########################################################################

  386. 

  387. 

  388. 

  389. ######################################################################

  390. #

  391. # com.devture.ansible.role.playbook_state_preserver

  392. #

  393. ######################################################################

  394. 

  395. # To completely disable this feature, use `devture_playbook_state_preserver_enabled: false`.

  396. 

  397. devture_playbook_state_preserver_uid: "{{ matrix_user_uid }}"

  398. devture_playbook_state_preserver_gid: "{{ matrix_user_gid }}"

  399. 

  400. devture_playbook_state_preserver_vars_preservation_dst: "{{ matrix_base_data_path }}/vars.yml"

  401. 

  402. devture_playbook_state_preserver_commit_hash_preservation_dst: "{{ matrix_base_data_path }}/git_hash.yml"

  403. 

  404. ######################################################################

  405. #

  406. # /com.devture.ansible.role.playbook_state_preserver

  407. #

  408. ######################################################################

  409. 

  410. 

  411. 

  412. ######################################################################

  413. #

  414. # matrix-base

  415. #

  416. ######################################################################

  417. 

  418. matrix_identity_server_url: "{{ ('https://' + matrix_server_fqn_matrix) if matrix_ma1sd_enabled else None }}"

  419. 

  420. matrix_homeserver_container_url: |-

  421.   {{

  422.     'http://matrix-nginx-proxy:12080' if matrix_nginx_proxy_enabled else {

  423.       'synapse': ('http://matrix-synapse-reverse-proxy-companion:8008' if matrix_synapse_reverse_proxy_companion_enabled else 'http://matrix-synapse:'+ matrix_synapse_container_client_api_port|string),

  424.       'dendrite': ('http://matrix-dendrite:' + matrix_dendrite_http_bind_port|string),

  425.       'conduit': ('http://matrix-conduit:' + matrix_conduit_port_number|string),

  426.     }[matrix_homeserver_implementation]

  427.   }}

  428. 

  429. matrix_homeserver_container_federation_url: |-

  430.   {{

  431.     'http://matrix-nginx-proxy:12088' if matrix_nginx_proxy_enabled else {

  432.       'synapse': ('http://matrix-synapse-reverse-proxy-companion:8048' if matrix_synapse_reverse_proxy_companion_enabled else 'http://matrix-synapse:'+ matrix_synapse_container_federation_api_plain_port|string),

  433.       'dendrite': ('http://matrix-dendrite:' + matrix_dendrite_http_bind_port|string),

  434.       'conduit': ('http://matrix-conduit:' + matrix_conduit_port_number|string),

  435.     }[matrix_homeserver_implementation]

  436.   }}

  437. 

  438. matrix_integration_manager_rest_url: "{{ matrix_dimension_integrations_rest_url if matrix_dimension_enabled else None }}"

  439. matrix_integration_manager_ui_url: "{{ matrix_dimension_integrations_ui_url if matrix_dimension_enabled else None }}"

  440. 

  441. ######################################################################

  442. #

  443. # /matrix-base

  444. #

  445. ######################################################################

  446. 

  447. 

  448. ######################################################################

  449. #

  450. # matrix-bridge-appservice-discord

  451. #

  452. ######################################################################

  453. 

  454. # We don't enable bridges by default.

  455. matrix_appservice_discord_enabled: false

  456. 

  457. # Normally, matrix-nginx-proxy is enabled and nginx can reach matrix-appservice-discord over the container network.

  458. # If matrix-nginx-proxy is not enabled, or you otherwise have a need for it, you can expose

  459. # matrix-appservice-discord's client-server port to the local host.

  460. matrix_appservice_discord_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '9005') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  461. 

  462. # If the homeserver disables presence, it's likely better (less wasteful) to also disable presence on the bridge side.

  463. matrix_appservice_discord_bridge_disablePresence: "{{ not matrix_synapse_presence_enabled }}"

  464. 

  465. matrix_appservice_discord_systemd_required_services_list: |

  466.   {{

  467.     ['docker.service']

  468.     +

  469.     ['matrix-' + matrix_homeserver_implementation + '.service']

  470.     +

  471.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  472.     +

  473.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  474.   }}

  475. 

  476. matrix_appservice_discord_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'discord.as.token', rounds=655555) | to_uuid }}"

  477. 

  478. matrix_appservice_discord_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'discord.hs.token', rounds=655555) | to_uuid }}"

  479. 

  480. # We only make this use Postgres if our own Postgres server is enabled.

  481. # It's only then (for now) that we can automatically create the necessary database and user for this service.

  482. matrix_appservice_discord_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  483. matrix_appservice_discord_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  484. matrix_appservice_discord_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'as.discord.db', rounds=655555) | to_uuid }}"

  485. 

  486. ######################################################################

  487. #

  488. # /matrix-bridge-appservice-discord

  489. #

  490. ######################################################################

  491. 

  492. 

  493. ######################################################################

  494. #

  495. # matrix-appservice-webhooks

  496. #

  497. ######################################################################

  498. 

  499. # We don't enable bridges by default.

  500. matrix_appservice_webhooks_enabled: false

  501. 

  502. matrix_appservice_webhooks_container_image_self_build: "{{ matrix_architecture != 'amd64' }}"

  503. 

  504. # Normally, matrix-nginx-proxy is enabled and nginx can reach matrix-appservice-webhooks over the container network.

  505. # If matrix-nginx-proxy is not enabled, or you otherwise have a need for it, you can expose

  506. # matrix-appservice-webhooks' client-server port to the local host.

  507. matrix_appservice_webhooks_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ matrix_appservice_webhooks_matrix_port) if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  508. 

  509. matrix_appservice_webhooks_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'webhook.as.token', rounds=655555) | to_uuid }}"

  510. 

  511. matrix_appservice_webhooks_homeserver_url: "{{ matrix_homeserver_container_url }}"

  512. matrix_appservice_webhooks_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'webhook.hs.token', rounds=655555) | to_uuid }}"

  513. 

  514. matrix_appservice_webhooks_id_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'webhook.id.token', rounds=655555) | to_uuid }}"

  515. 

  516. matrix_appservice_webhooks_systemd_required_services_list: |

  517.   {{

  518.     ['docker.service']

  519.     +

  520.     ['matrix-' + matrix_homeserver_implementation + '.service']

  521.     +

  522.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  523.   }}

  524. 

  525. ######################################################################

  526. #

  527. # /matrix-appservice-webhooks

  528. #

  529. ######################################################################

  530. 

  531. 

  532. ######################################################################

  533. #

  534. # matrix-appservice-slack

  535. #

  536. ######################################################################

  537. 

  538. # We don't enable bridges by default.

  539. matrix_appservice_slack_enabled: false

  540. 

  541. matrix_appservice_slack_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"

  542. 

  543. # Normally, matrix-nginx-proxy is enabled and nginx can reach matrix-appservice-slack over the container network.

  544. # If matrix-nginx-proxy is not enabled, or you otherwise have a need for it, you can expose

  545. # matrix-appservice-slack's client-server port to the local host.

  546. matrix_appservice_slack_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ matrix_appservice_slack_slack_port) if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  547. 

  548. matrix_appservice_slack_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'slack.as.token', rounds=655555) | to_uuid }}"

  549. 

  550. matrix_appservice_slack_homeserver_url: "{{ matrix_homeserver_container_url }}"

  551. matrix_appservice_slack_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'slack.hs.token', rounds=655555) | to_uuid }}"

  552. 

  553. matrix_appservice_slack_id_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'slack.id.token', rounds=655555) | to_uuid }}"

  554. 

  555. matrix_appservice_slack_systemd_required_services_list: |

  556.   {{

  557.     ['docker.service']

  558.     +

  559.     ['matrix-' + matrix_homeserver_implementation + '.service']

  560.     +

  561.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  562.   }}

  563. 

  564. # Postgres is the default, except if not using internal Postgres server

  565. matrix_appservice_slack_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'nedb' }}"

  566. matrix_appservice_slack_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  567. matrix_appservice_slack_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'as.slack.db', rounds=655555) | to_uuid }}"

  568. 

  569. ######################################################################

  570. #

  571. # /matrix-bridge-appservice-slack

  572. #

  573. ######################################################################

  574. 

  575. ######################################################################

  576. #

  577. # matrix-bridge-appservice-irc

  578. #

  579. ######################################################################

  580. 

  581. # We don't enable bridges by default.

  582. matrix_appservice_irc_enabled: false

  583. 

  584. matrix_appservice_irc_container_image_self_build: "{{ matrix_architecture != 'amd64' }}"

  585. 

  586. # Normally, matrix-nginx-proxy is enabled and nginx can reach matrix-appservice-irc over the container network.

  587. # If matrix-nginx-proxy is not enabled, or you otherwise have a need for it, you can expose

  588. # matrix-appservice-irc's client-server port to the local host.

  589. matrix_appservice_irc_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '9999') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  590. 

  591. # The IRC bridge docs say that if homeserver presence is disabled, it's better to also disable

  592. # IRC bridge presence, for performance reasons.

  593. matrix_appservice_irc_homeserver_enablePresence: "{{ matrix_synapse_presence_enabled }}"

  594. 

  595. matrix_appservice_irc_systemd_required_services_list: |

  596.   {{

  597.     ['docker.service']

  598.     +

  599.     ['matrix-' + matrix_homeserver_implementation + '.service']

  600.     +

  601.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  602.   }}

  603. 

  604. matrix_appservice_irc_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'irc.as.token', rounds=655555) | to_uuid }}"

  605. 

  606. matrix_appservice_irc_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'irc.hs.token', rounds=655555) | to_uuid }}"

  607. 

  608. matrix_appservice_irc_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'nedb' }}"

  609. matrix_appservice_irc_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  610. matrix_appservice_irc_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'as.irc.db', rounds=655555) | to_uuid }}"

  611. 

  612. 

  613. ######################################################################

  614. #

  615. # /matrix-bridge-appservice-irc

  616. #

  617. ######################################################################

  618. 

  619. ######################################################################

  620. #

  621. # matrix-bridge-appservice-kakaotalk

  622. #

  623. ######################################################################

  624. 

  625. # We don't enable bridges by default.

  626. matrix_appservice_kakaotalk_enabled: false

  627. 

  628. matrix_appservice_kakaotalk_systemd_required_services_list: |

  629.   {{

  630.     ['docker.service']

  631.     +

  632.     ['matrix-appservice-kakaotalk-node.service']

  633.     +

  634.     ['matrix-' + matrix_homeserver_implementation + '.service']

  635.     +

  636.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  637.     +

  638.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  639.   }}

  640. 

  641. matrix_appservice_kakaotalk_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'as.kakao.hs', rounds=655555) | to_uuid }}"

  642. 

  643. matrix_appservice_kakaotalk_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'as.kakao.hs', rounds=655555) | to_uuid }}"

  644. 

  645. matrix_appservice_kakaotalk_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  646. 

  647. matrix_appservice_kakaotalk_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  648. matrix_appservice_kakaotalk_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  649. matrix_appservice_kakaotalk_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'as.kakao.db', rounds=655555) | to_uuid }}"

  650. 

  651. ######################################################################

  652. #

  653. # /matrix-bridge-appservice-kakaotalk

  654. #

  655. ######################################################################

  656. 

  657. 

  658. ######################################################################

  659. #

  660. # matrix-bridge-beeper-linkedin

  661. #

  662. ######################################################################

  663. 

  664. # We don't enable bridges by default.

  665. matrix_beeper_linkedin_enabled: false

  666. 

  667. matrix_beeper_linkedin_container_image_self_build: "{{ matrix_architecture not in ['amd64'] }}"

  668. 

  669. matrix_beeper_linkedin_systemd_required_services_list: |

  670.   {{

  671.     ['docker.service']

  672.     +

  673.     ['matrix-' + matrix_homeserver_implementation + '.service']

  674.     +

  675.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  676.     +

  677.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  678.   }}

  679. 

  680. matrix_beeper_linkedin_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'linked.as.token', rounds=655555) | to_uuid }}"

  681. 

  682. matrix_beeper_linkedin_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'linked.hs.token', rounds=655555) | to_uuid }}"

  683. 

  684. matrix_beeper_linkedin_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  685. 

  686. matrix_beeper_linkedin_bridge_presence: "{{ matrix_synapse_presence_enabled if matrix_synapse_enabled else true }}"

  687. 

  688. matrix_beeper_linkedin_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  689. matrix_beeper_linkedin_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'maulinkedin.db', rounds=655555) | to_uuid }}"

  690. 

  691. ######################################################################

  692. #

  693. # /matrix-bridge-beeper-linkedin

  694. #

  695. ######################################################################

  696. 

  697. ######################################################################

  698. #

  699. # matrix-bridge-go-skype-bridge

  700. #

  701. ######################################################################

  702. 

  703. # We don't enable bridges by default.

  704. matrix_go_skype_bridge_enabled: false

  705. 

  706. matrix_go_skype_bridge_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"

  707. 

  708. matrix_go_skype_bridge_systemd_required_services_list: |

  709.   {{

  710.     ['docker.service']

  711.     +

  712.     ['matrix-' + matrix_homeserver_implementation + '.service']

  713.     +

  714.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  715.     +

  716.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  717.   }}

  718. 

  719. matrix_go_skype_bridge_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'skype.as.token', rounds=655555) | to_uuid }}"

  720. 

  721. matrix_go_skype_bridge_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'skype.hs.token', rounds=655555) | to_uuid }}"

  722. 

  723. matrix_go_skype_bridge_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  724. 

  725. # Postgres is the default, except if not using internal Postgres server

  726. matrix_go_skype_bridge_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  727. matrix_go_skype_bridge_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  728. matrix_go_skype_bridge_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'goskype.db', rounds=655555) | to_uuid }}"

  729. 

  730. ######################################################################

  731. #

  732. # /matrix-bridge-go-skype-bridge

  733. #

  734. ######################################################################

  735. 

  736. 

  737. ######################################################################

  738. #

  739. # matrix-bridge-mautrix-discord

  740. #

  741. ######################################################################

  742. 

  743. # We don't enable bridges by default.

  744. matrix_mautrix_discord_enabled: false

  745. 

  746. matrix_mautrix_discord_container_image_self_build: "{{ matrix_architecture not in ['arm64', 'amd64'] }}"

  747. 

  748. matrix_mautrix_discord_systemd_required_services_list: |

  749.   {{

  750.     ['docker.service']

  751.     +

  752.     ['matrix-' + matrix_homeserver_implementation + '.service']

  753.     +

  754.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  755.     +

  756.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  757.   }}

  758. 

  759. matrix_mautrix_discord_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'maudisc.as.tok', rounds=655555) | to_uuid }}"

  760. 

  761. matrix_mautrix_discord_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'maudisc.hs.tok', rounds=655555) | to_uuid }}"

  762. 

  763. matrix_mautrix_discord_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  764. 

  765. # Postgres is the default, except if not using internal Postgres server

  766. matrix_mautrix_discord_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  767. matrix_mautrix_discord_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  768. matrix_mautrix_discord_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'maudiscord.db', rounds=655555) | to_uuid }}"

  769. 

  770. ######################################################################

  771. #

  772. # /matrix-bridge-mautrix-discord

  773. #

  774. ######################################################################

  775. 

  776. 

  777. ######################################################################

  778. #

  779. # matrix-bridge-mautrix-slack

  780. #

  781. ######################################################################

  782. 

  783. # We don't enable bridges by default.

  784. matrix_mautrix_slack_enabled: false

  785. 

  786. matrix_mautrix_slack_container_image_self_build: "{{ matrix_architecture not in ['arm64', 'amd64'] }}"

  787. 

  788. matrix_mautrix_slack_systemd_required_services_list: |

  789.   {{

  790.     ['docker.service']

  791.     +

  792.     ['matrix-' + matrix_homeserver_implementation + '.service']

  793.     +

  794.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  795.     +

  796.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  797.   }}

  798. 

  799. matrix_mautrix_slack_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mauslack.as.tok', rounds=655555) | to_uuid }}"

  800. 

  801. matrix_mautrix_slack_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mauslack.hs.tok', rounds=655555) | to_uuid }}"

  802. 

  803. matrix_mautrix_slack_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  804. 

  805. # Postgres is the default, except if not using internal Postgres server

  806. matrix_mautrix_slack_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  807. matrix_mautrix_slack_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  808. matrix_mautrix_slack_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mauslack.db', rounds=655555) | to_uuid }}"

  809. 

  810. ######################################################################

  811. #

  812. # /matrix-bridge-mautrix-slack

  813. #

  814. ######################################################################

  815. 

  816. 

  817. ######################################################################

  818. #

  819. # matrix-bridge-mautrix-facebook

  820. #

  821. ######################################################################

  822. 

  823. # We don't enable bridges by default.

  824. matrix_mautrix_facebook_enabled: false

  825. 

  826. matrix_mautrix_facebook_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"

  827. 

  828. matrix_mautrix_facebook_systemd_required_services_list: |

  829.   {{

  830.     ['docker.service']

  831.     +

  832.     ['matrix-' + matrix_homeserver_implementation + '.service']

  833.     +

  834.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  835.     +

  836.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  837.   }}

  838. 

  839. matrix_mautrix_facebook_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'fb.as.token', rounds=655555) | to_uuid }}"

  840. 

  841. matrix_mautrix_facebook_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'fb.hs.token', rounds=655555) | to_uuid }}"

  842. 

  843. matrix_mautrix_facebook_public_endpoint: "/{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'facebook', rounds=655555) | to_uuid }}"

  844. 

  845. matrix_mautrix_facebook_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '9008') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  846. 

  847. matrix_mautrix_facebook_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  848. 

  849. matrix_mautrix_facebook_bridge_presence: "{{ matrix_synapse_presence_enabled if matrix_synapse_enabled else true }}"

  850. 

  851. # People using an external Prometheus server will need to toggle all of these to be able to consume metrics remotely:

  852. # - `matrix_mautrix_facebook_metrics_enabled`

  853. # - `matrix_mautrix_facebook_proxying_metrics_enabled`

  854. # - `matrix_nginx_proxy_proxy_matrix_metrics_enabled`

  855. matrix_mautrix_facebook_metrics_enabled: "{{ matrix_prometheus_enabled }}"

  856. 

  857. # We'd like to force-set people with external Postgres to SQLite, so the bridge role can complain

  858. # and point them to a migration path.

  859. matrix_mautrix_facebook_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  860. matrix_mautrix_facebook_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  861. matrix_mautrix_facebook_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mau.fb.db', rounds=655555) | to_uuid }}"

  862. 

  863. ######################################################################

  864. #

  865. # /matrix-bridge-mautrix-facebook

  866. #

  867. ######################################################################

  868. 

  869. 

  870. ######################################################################

  871. #

  872. # matrix-bridge-mautrix-googlechat

  873. #

  874. ######################################################################

  875. 

  876. # We don't enable bridges by default.

  877. matrix_mautrix_googlechat_enabled: false

  878. 

  879. matrix_mautrix_googlechat_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"

  880. 

  881. matrix_mautrix_googlechat_systemd_required_services_list: |

  882.   {{

  883.     ['docker.service']

  884.     +

  885.     ['matrix-' + matrix_homeserver_implementation + '.service']

  886.     +

  887.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  888.     +

  889.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  890.   }}

  891. 

  892. matrix_mautrix_googlechat_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'gc.as.token', rounds=655555) | to_uuid }}"

  893. 

  894. matrix_mautrix_googlechat_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'gc.hs.token', rounds=655555) | to_uuid }}"

  895. 

  896. matrix_mautrix_googlechat_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '9007') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  897. 

  898. matrix_mautrix_googlechat_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  899. 

  900. # Postgres is the default, except if not using internal Postgres server

  901. matrix_mautrix_googlechat_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  902. matrix_mautrix_googlechat_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  903. matrix_mautrix_googlechat_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mau.gc.db', rounds=655555) | to_uuid }}"

  904. 

  905. ######################################################################

  906. #

  907. # /matrix-bridge-mautrix-googlechat

  908. #

  909. ######################################################################

  910. 

  911. 

  912. ######################################################################

  913. #

  914. # matrix-bridge-mautrix-hangouts

  915. #

  916. ######################################################################

  917. 

  918. # We don't enable bridges by default.

  919. matrix_mautrix_hangouts_enabled: false

  920. 

  921. matrix_mautrix_hangouts_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"

  922. 

  923. matrix_mautrix_hangouts_systemd_required_services_list: |

  924.   {{

  925.     ['docker.service']

  926.     +

  927.     ['matrix-' + matrix_homeserver_implementation + '.service']

  928.     +

  929.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  930.     +

  931.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  932.   }}

  933. 

  934. matrix_mautrix_hangouts_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'ho.as.token', rounds=655555) | to_uuid }}"

  935. 

  936. matrix_mautrix_hangouts_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'ho.hs.token', rounds=655555) | to_uuid }}"

  937. 

  938. matrix_mautrix_hangouts_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '9007') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  939. 

  940. matrix_mautrix_hangouts_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  941. 

  942. # Postgres is the default, except if not using internal Postgres server

  943. matrix_mautrix_hangouts_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  944. matrix_mautrix_hangouts_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  945. matrix_mautrix_hangouts_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mau.hangouts.db', rounds=655555) | to_uuid }}"

  946. 

  947. ######################################################################

  948. #

  949. # /matrix-bridge-mautrix-hangouts

  950. #

  951. ######################################################################

  952. 

  953. 

  954. ######################################################################

  955. #

  956. # matrix-bridge-mautrix-instagram

  957. #

  958. ######################################################################

  959. 

  960. # We don't enable bridges by default.

  961. matrix_mautrix_instagram_enabled: false

  962. 

  963. matrix_mautrix_instagram_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"

  964. 

  965. matrix_mautrix_instagram_systemd_required_services_list: |

  966.   {{

  967.     ['docker.service']

  968.     +

  969.     ['matrix-' + matrix_homeserver_implementation + '.service']

  970.     +

  971.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  972.     +

  973.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  974.   }}

  975. 

  976. matrix_mautrix_instagram_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'ig.as.token', rounds=655555) | to_uuid }}"

  977. 

  978. matrix_mautrix_instagram_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'ig.hs.token', rounds=655555) | to_uuid }}"

  979. 

  980. matrix_mautrix_instagram_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  981. 

  982. matrix_mautrix_instagram_bridge_presence: "{{ matrix_synapse_presence_enabled if matrix_synapse_enabled else true }}"

  983. 

  984. # People using an external Prometheus server will need to toggle all of these to be able to consume metrics remotely:

  985. # - `matrix_mautrix_instagram_metrics_enabled`

  986. # - `matrix_mautrix_instagram_proxying_metrics_enabled`

  987. # - `matrix_nginx_proxy_proxy_matrix_metrics_enabled`

  988. matrix_mautrix_instagram_metrics_enabled: "{{ matrix_prometheus_enabled }}"

  989. 

  990. # We'd like to force-set people with external Postgres to SQLite, so the bridge role can complain

  991. # and point them to a migration path.

  992. matrix_mautrix_instagram_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  993. matrix_mautrix_instagram_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  994. matrix_mautrix_instagram_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mau.ig.db', rounds=655555) | to_uuid }}"

  995. 

  996. ######################################################################

  997. #

  998. # /matrix-bridge-mautrix-instagram

  999. #

  1000. ######################################################################

  1001. 

  1002. 

  1003. ######################################################################

  1004. #

  1005. # matrix-bridge-mautrix-signal

  1006. #

  1007. ######################################################################

  1008. 

  1009. # We don't enable bridges by default.

  1010. matrix_mautrix_signal_enabled: false

  1011. 

  1012. matrix_mautrix_signal_systemd_required_services_list: |

  1013.   {{

  1014.     ['docker.service']

  1015.     +

  1016.     ['matrix-' + matrix_homeserver_implementation + '.service']

  1017.     +

  1018.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  1019.     +

  1020.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1021.     +

  1022.     ['matrix-mautrix-signal-daemon.service']

  1023.   }}

  1024. 

  1025. matrix_mautrix_signal_homeserver_domain: '{{ matrix_domain }}'

  1026. 

  1027. matrix_mautrix_signal_homeserver_address: "{{ matrix_homeserver_container_url }}"

  1028. 

  1029. matrix_mautrix_signal_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'si.hs.token', rounds=655555) | to_uuid }}"

  1030. 

  1031. matrix_mautrix_signal_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'si.as.token', rounds=655555) | to_uuid }}"

  1032. 

  1033. matrix_mautrix_signal_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  1034. 

  1035. # People using an external Prometheus server will need to toggle all of these to be able to consume metrics remotely:

  1036. # - `matrix_mautrix_signal_metrics_enabled`

  1037. # - `matrix_mautrix_signal_proxying_metrics_enabled`

  1038. # - `matrix_nginx_proxy_proxy_matrix_metrics_enabled`

  1039. matrix_mautrix_signal_metrics_enabled: "{{ matrix_prometheus_enabled }}"

  1040. 

  1041. matrix_mautrix_signal_database_engine: 'postgres'

  1042. matrix_mautrix_signal_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1043. matrix_mautrix_signal_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mau.signal.db', rounds=655555) | to_uuid }}"

  1044. 

  1045. matrix_mautrix_signal_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"

  1046. matrix_mautrix_signal_daemon_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"

  1047. 

  1048. ######################################################################

  1049. #

  1050. # /matrix-bridge-mautrix-signal

  1051. #

  1052. ######################################################################

  1053. 

  1054. ######################################################################

  1055. #

  1056. # matrix-bridge-mautrix-telegram

  1057. #

  1058. ######################################################################

  1059. 

  1060. # We don't enable bridges by default.

  1061. matrix_mautrix_telegram_enabled: false

  1062. 

  1063. # Images are multi-arch (amd64 and arm64, but not arm32).

  1064. matrix_mautrix_telegram_container_image_self_build: "{{ matrix_architecture not in ['arm64', 'amd64'] }}"

  1065. matrix_telegram_lottieconverter_container_image_self_build: "{{ matrix_architecture not in ['arm64', 'amd64'] }}"

  1066. matrix_telegram_lottieconverter_container_image_self_build_mask_arch: "{{ matrix_architecture != 'amd64' }}"

  1067. 

  1068. matrix_mautrix_telegram_systemd_required_services_list: |

  1069.   {{

  1070.     ['docker.service']

  1071.     +

  1072.     ['matrix-' + matrix_homeserver_implementation + '.service']

  1073.     +

  1074.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  1075.     +

  1076.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1077.   }}

  1078. 

  1079. matrix_mautrix_telegram_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'telegr.as.token', rounds=655555) | to_uuid }}"

  1080. 

  1081. matrix_mautrix_telegram_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'telegr.hs.token', rounds=655555) | to_uuid }}"

  1082. 

  1083. matrix_mautrix_telegram_public_endpoint: "/{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'telegram', rounds=655555) | to_uuid }}"

  1084. 

  1085. matrix_mautrix_telegram_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '9006') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  1086. 

  1087. matrix_mautrix_telegram_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  1088. 

  1089. # Postgres is the default, except if not using internal Postgres server

  1090. matrix_mautrix_telegram_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  1091. matrix_mautrix_telegram_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1092. matrix_mautrix_telegram_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mau.telegram.db', rounds=655555) | to_uuid }}"

  1093. 

  1094. ######################################################################

  1095. #

  1096. # /matrix-bridge-mautrix-telegram

  1097. #

  1098. ######################################################################

  1099. 

  1100. ######################################################################

  1101. #

  1102. # matrix-bridge-mautrix-twitter

  1103. #

  1104. ######################################################################

  1105. 

  1106. # We don't enable bridges by default.

  1107. matrix_mautrix_twitter_enabled: false

  1108. 

  1109. matrix_mautrix_twitter_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"

  1110. 

  1111. matrix_mautrix_twitter_systemd_required_services_list: |

  1112.   {{

  1113.     ['docker.service']

  1114.     +

  1115.     ['matrix-' + matrix_homeserver_implementation + '.service']

  1116.     +

  1117.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  1118.     +

  1119.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1120.   }}

  1121. 

  1122. matrix_mautrix_twitter_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'twt.as.token', rounds=655555) | to_uuid }}"

  1123. 

  1124. matrix_mautrix_twitter_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'twt.hs.token', rounds=655555) | to_uuid }}"

  1125. 

  1126. matrix_mautrix_twitter_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  1127. 

  1128. matrix_mautrix_twitter_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1129. matrix_mautrix_twitter_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mau.twt.db', rounds=655555) | to_uuid if devture_postgres_enabled else '' }}"

  1130. 

  1131. ######################################################################

  1132. #

  1133. # /matrix-bridge-mautrix-twitter

  1134. #

  1135. ######################################################################

  1136. 

  1137. ######################################################################

  1138. #

  1139. # matrix-bridge-mautrix-whatsapp

  1140. #

  1141. ######################################################################

  1142. 

  1143. # We don't enable bridges by default.

  1144. matrix_mautrix_whatsapp_enabled: false

  1145. 

  1146. matrix_mautrix_whatsapp_container_image_self_build: "{{ matrix_architecture not in ['arm64', 'amd64'] }}"

  1147. 

  1148. matrix_mautrix_whatsapp_systemd_required_services_list: |

  1149.   {{

  1150.     ['docker.service']

  1151.     +

  1152.     ['matrix-' + matrix_homeserver_implementation + '.service']

  1153.     +

  1154.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  1155.     +

  1156.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1157.   }}

  1158. 

  1159. matrix_mautrix_whatsapp_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'whats.as.token', rounds=655555) | to_uuid }}"

  1160. 

  1161. matrix_mautrix_whatsapp_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'whats.hs.token', rounds=655555) | to_uuid }}"

  1162. 

  1163. matrix_mautrix_whatsapp_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  1164. 

  1165. # People using an external Prometheus server will need to toggle all of these to be able to consume metrics remotely:

  1166. # - `matrix_mautrix_twitter_metrics_enabled`

  1167. # - `matrix_mautrix_twitter_proxying_metrics_enabled`

  1168. # - `matrix_nginx_proxy_proxy_matrix_metrics_enabled`

  1169. matrix_mautrix_twitter_metrics_enabled: "{{ matrix_prometheus_enabled }}"

  1170. 

  1171. # Postgres is the default, except if not using internal Postgres server

  1172. matrix_mautrix_whatsapp_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  1173. matrix_mautrix_whatsapp_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1174. matrix_mautrix_whatsapp_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mauwhatsapp.db', rounds=655555) | to_uuid }}"

  1175. 

  1176. ######################################################################

  1177. #

  1178. # /matrix-bridge-mautrix-whatsapp

  1179. #

  1180. ######################################################################

  1181. 

  1182. ######################################################################

  1183. #

  1184. # matrix-sms-bridge

  1185. #

  1186. ######################################################################

  1187. 

  1188. # We don't enable bridges by default.

  1189. matrix_sms_bridge_enabled: false

  1190. 

  1191. matrix_sms_bridge_systemd_required_services_list: |

  1192.   {{

  1193.     ['docker.service']

  1194.     +

  1195.     ['matrix-' + matrix_homeserver_implementation + '.service']

  1196.     +

  1197.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1198.   }}

  1199. 

  1200. matrix_sms_bridge_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'sms.as.token', rounds=655555) | to_uuid }}"

  1201. 

  1202. matrix_sms_bridge_homeserver_port: "{{ matrix_synapse_container_client_api_port }}"

  1203. matrix_sms_bridge_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'sms.hs.token', rounds=655555) | to_uuid }}"

  1204. 

  1205. ######################################################################

  1206. #

  1207. # /matrix-sms-bridge

  1208. #

  1209. ######################################################################

  1210. 

  1211. ######################################################################

  1212. #

  1213. # matrix-bridge-heisenbridge

  1214. #

  1215. ######################################################################

  1216. 

  1217. # We don't enable bridges by default.

  1218. matrix_heisenbridge_enabled: false

  1219. 

  1220. matrix_heisenbridge_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'heisen.as.tok', rounds=655555) | to_uuid }}"

  1221. 

  1222. matrix_heisenbridge_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'heisen.hs.tok', rounds=655555) | to_uuid }}"

  1223. 

  1224. matrix_heisenbridge_systemd_wanted_services_list: |

  1225.   {{

  1226.     ['matrix-' + matrix_homeserver_implementation + '.service']

  1227.     +

  1228.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1229.   }}

  1230. 

  1231. ######################################################################

  1232. #

  1233. # /matrix-bridge-heisenbridge

  1234. #

  1235. ######################################################################

  1236. 

  1237. ######################################################################

  1238. #

  1239. # matrix-bridge-hookshot

  1240. #

  1241. ######################################################################

  1242. 

  1243. # We don't enable bridges by default.

  1244. matrix_hookshot_enabled: false

  1245. 

  1246. matrix_hookshot_container_image_self_build: "{{ matrix_architecture not in ['arm64', 'amd64'] }}"

  1247. 

  1248. matrix_hookshot_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'hookshot.as.tok', rounds=655555) | to_uuid }}"

  1249. 

  1250. matrix_hookshot_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'hookshot.hs.tok', rounds=655555) | to_uuid }}"

  1251. 

  1252. matrix_hookshot_systemd_wanted_services_list: |

  1253.   {{

  1254.     (['matrix-' + matrix_homeserver_implementation + '.service'])

  1255.     +

  1256.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1257.   }}

  1258. 

  1259. matrix_hookshot_container_http_host_bind_ports_defaultmapping:

  1260.   - "{{ matrix_playbook_service_host_bind_interface_prefix }}{{ matrix_hookshot_appservice_port }}:{{ matrix_hookshot_appservice_port }}"

  1261.   - "{{ matrix_playbook_service_host_bind_interface_prefix }}{{ matrix_hookshot_metrics_port }}:{{ matrix_hookshot_metrics_port }}"

  1262.   - "{{ matrix_playbook_service_host_bind_interface_prefix }}{{ matrix_hookshot_webhook_port }}:{{ matrix_hookshot_webhook_port }}"

  1263.   - "{{ matrix_playbook_service_host_bind_interface_prefix }}{{ matrix_hookshot_provisioning_port }}:{{ matrix_hookshot_provisioning_port }}"

  1264. 

  1265. matrix_hookshot_container_http_host_bind_ports: "{{ matrix_hookshot_container_http_host_bind_ports_defaultmapping if matrix_playbook_service_host_bind_interface_prefix else [] }}"

  1266. 

  1267. matrix_hookshot_provisioning_enabled: "{{ matrix_hookshot_provisioning_secret and matrix_dimension_enabled }}"

  1268. 

  1269. # We only enable metrics (locally, in the container network) for the bridge if Prometheus is enabled.

  1270. #

  1271. # People using an external Prometheus server will need to toggle all of these to be able to consume metrics remotely:

  1272. # - `matrix_hookshot_metrics_enabled`

  1273. # - `matrix_hookshot_metrics_proxying_enabled`

  1274. # - `matrix_nginx_proxy_proxy_matrix_metrics_enabled`

  1275. matrix_hookshot_metrics_enabled: "{{ matrix_prometheus_enabled }}"

  1276. 

  1277. matrix_hookshot_urlprefix_port_enabled: "{{ matrix_nginx_proxy_container_https_host_bind_port == 443 if matrix_nginx_proxy_https_enabled else matrix_nginx_proxy_container_https_host_bind_port == 80 }}"

  1278. matrix_hookshot_urlprefix_port: ":{{ matrix_nginx_proxy_container_https_host_bind_port if matrix_nginx_proxy_https_enabled else matrix_nginx_proxy_container_http_host_bind_port }}"

  1279. matrix_hookshot_urlprefix: "{{ 'https' if matrix_playbook_ssl_enabled else 'http' }}://{{ matrix_server_fqn_matrix }}{{ matrix_hookshot_urlprefix_port if matrix_hookshot_urlprefix_port_enabled else '' }}"

  1280. 

  1281. ######################################################################

  1282. #

  1283. # /matrix-bridge-hookshot

  1284. #

  1285. ######################################################################

  1286. 

  1287. 

  1288. ######################################################################

  1289. #

  1290. # matrix-bridge-mx-puppet-slack

  1291. #

  1292. ######################################################################

  1293. 

  1294. # We don't enable bridges by default.

  1295. matrix_mx_puppet_slack_enabled: false

  1296. 

  1297. matrix_mx_puppet_slack_container_image_self_build: "{{ matrix_architecture != 'amd64' }}"

  1298. 

  1299. matrix_mx_puppet_slack_systemd_required_services_list: |

  1300.   {{

  1301.     ['docker.service']

  1302.     +

  1303.     ['matrix-' + matrix_homeserver_implementation + '.service']

  1304.     +

  1305.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  1306.     +

  1307.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1308.   }}

  1309. 

  1310. matrix_mx_puppet_slack_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxslk.as.tok', rounds=655555) | to_uuid }}"

  1311. 

  1312. matrix_mx_puppet_slack_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxslk.hs.tok', rounds=655555) | to_uuid }}"

  1313. 

  1314. matrix_mx_puppet_slack_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  1315. 

  1316. # Postgres is the default, except if not using internal Postgres server

  1317. matrix_mx_puppet_slack_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  1318. matrix_mx_puppet_slack_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1319. matrix_mx_puppet_slack_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxpup.slack.db', rounds=655555) | to_uuid }}"

  1320. 

  1321. ######################################################################

  1322. #

  1323. # /matrix-bridge-mx-puppet-slack

  1324. #

  1325. ######################################################################

  1326. 

  1327. ######################################################################

  1328. #

  1329. # matrix-bridge-mx-puppet-twitter

  1330. #

  1331. ######################################################################

  1332. 

  1333. # We don't enable bridges by default.

  1334. matrix_mx_puppet_twitter_enabled: false

  1335. 

  1336. matrix_mx_puppet_twitter_container_image_self_build: "{{ matrix_architecture != 'amd64' }}"

  1337. 

  1338. matrix_mx_puppet_twitter_systemd_required_services_list: |

  1339.   {{

  1340.     ['docker.service']

  1341.     +

  1342.     ['matrix-' + matrix_homeserver_implementation + '.service']

  1343.     +

  1344.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  1345.     +

  1346.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1347.   }}

  1348. 

  1349. matrix_mx_puppet_twitter_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxtwt.as.tok', rounds=655555) | to_uuid }}"

  1350. 

  1351. matrix_mx_puppet_twitter_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxtwt.hs.tok', rounds=655555) | to_uuid }}"

  1352. 

  1353. matrix_mx_puppet_twitter_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  1354. 

  1355. matrix_mx_puppet_twitter_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '' ~ matrix_mx_puppet_twitter_appservice_port) if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  1356. 

  1357. # Postgres is the default, except if not using internal Postgres server

  1358. matrix_mx_puppet_twitter_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  1359. matrix_mx_puppet_twitter_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1360. matrix_mx_puppet_twitter_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxpup.twitter.db', rounds=655555) | to_uuid }}"

  1361. 

  1362. ######################################################################

  1363. #

  1364. # /matrix-bridge-mx-puppet-twitter

  1365. #

  1366. ######################################################################

  1367. 

  1368. 

  1369. ######################################################################

  1370. #

  1371. # matrix-bridge-mx-puppet-instagram

  1372. #

  1373. ######################################################################

  1374. 

  1375. # We don't enable bridges by default.

  1376. matrix_mx_puppet_instagram_enabled: false

  1377. 

  1378. matrix_mx_puppet_instagram_container_image_self_build: "{{ matrix_architecture != 'amd64' }}"

  1379. 

  1380. matrix_mx_puppet_instagram_systemd_required_services_list: |

  1381.   {{

  1382.     ['docker.service']

  1383.     +

  1384.     ['matrix-' + matrix_homeserver_implementation + '.service']

  1385.     +

  1386.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  1387.     +

  1388.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1389.   }}

  1390. 

  1391. matrix_mx_puppet_instagram_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxig.as.tok', rounds=655555) | to_uuid }}"

  1392. 

  1393. matrix_mx_puppet_instagram_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxig.hs.tok', rounds=655555) | to_uuid }}"

  1394. 

  1395. matrix_mx_puppet_instagram_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  1396. 

  1397. # Postgres is the default, except if not using internal Postgres server

  1398. matrix_mx_puppet_instagram_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  1399. matrix_mx_puppet_instagram_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1400. matrix_mx_puppet_instagram_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxpup.ig.db', rounds=655555) | to_uuid }}"

  1401. 

  1402. ######################################################################

  1403. #

  1404. # /matrix-bridge-mx-puppet-instagram

  1405. #

  1406. ######################################################################

  1407. 

  1408. ######################################################################

  1409. #

  1410. # matrix-bridge-mx-puppet-discord

  1411. #

  1412. ######################################################################

  1413. 

  1414. # We don't enable bridges by default.

  1415. matrix_mx_puppet_discord_enabled: false

  1416. 

  1417. matrix_mx_puppet_discord_container_image_self_build: "{{ matrix_architecture != 'amd64' }}"

  1418. 

  1419. matrix_mx_puppet_discord_systemd_required_services_list: |

  1420.   {{

  1421.     ['docker.service']

  1422.     +

  1423.     ['matrix-' + matrix_homeserver_implementation + '.service']

  1424.     +

  1425.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  1426.     +

  1427.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1428.   }}

  1429. 

  1430. matrix_mx_puppet_discord_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxdsc.as.tok', rounds=655555) | to_uuid }}"

  1431. 

  1432. matrix_mx_puppet_discord_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxdsc.hs.tok', rounds=655555) | to_uuid }}"

  1433. 

  1434. matrix_mx_puppet_discord_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  1435. 

  1436. # Postgres is the default, except if not using internal Postgres server

  1437. matrix_mx_puppet_discord_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  1438. matrix_mx_puppet_discord_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1439. matrix_mx_puppet_discord_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxpup.dsc.db', rounds=655555) | to_uuid }}"

  1440. 

  1441. ######################################################################

  1442. #

  1443. # /matrix-bridge-mx-puppet-discord

  1444. #

  1445. ######################################################################

  1446. 

  1447. ######################################################################

  1448. #

  1449. # matrix-bridge-mx-puppet-steam

  1450. #

  1451. ######################################################################

  1452. 

  1453. # We don't enable bridges by default.

  1454. matrix_mx_puppet_steam_enabled: false

  1455. 

  1456. matrix_mx_puppet_steam_container_image_self_build: "{{ matrix_architecture not in ['arm64', 'amd64'] }}"

  1457. 

  1458. matrix_mx_puppet_steam_systemd_required_services_list: |

  1459.   {{

  1460.     ['docker.service']

  1461.     +

  1462.     ['matrix-' + matrix_homeserver_implementation + '.service']

  1463.     +

  1464.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  1465.     +

  1466.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1467.   }}

  1468. 

  1469. matrix_mx_puppet_steam_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxste.as.tok', rounds=655555) | to_uuid }}"

  1470. 

  1471. matrix_mx_puppet_steam_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxste.hs.tok', rounds=655555) | to_uuid }}"

  1472. 

  1473. matrix_mx_puppet_steam_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  1474. 

  1475. # Postgres is the default, except if not using internal Postgres server

  1476. matrix_mx_puppet_steam_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  1477. matrix_mx_puppet_steam_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1478. matrix_mx_puppet_steam_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxpup.steam.db', rounds=655555) | to_uuid }}"

  1479. 

  1480. ######################################################################

  1481. #

  1482. # /matrix-bridge-mx-puppet-steam

  1483. #

  1484. ######################################################################

  1485. 

  1486. ######################################################################

  1487. #

  1488. # matrix-bridge-mx-puppet-groupme

  1489. #

  1490. ######################################################################

  1491. 

  1492. # We don't enable bridges by default.

  1493. matrix_mx_puppet_groupme_enabled: false

  1494. 

  1495. matrix_mx_puppet_groupme_container_image_self_build: "{{ matrix_architecture != 'amd64' }}"

  1496. 

  1497. matrix_mx_puppet_groupme_systemd_required_services_list: |

  1498.   {{

  1499.     ['docker.service']

  1500.     +

  1501.     ['matrix-' + matrix_homeserver_implementation + '.service']

  1502.     +

  1503.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  1504.     +

  1505.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1506.   }}

  1507. 

  1508. matrix_mx_puppet_groupme_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxgro.as.tok', rounds=655555) | to_uuid }}"

  1509. 

  1510. matrix_mx_puppet_groupme_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxgro.hs.tok', rounds=655555) | to_uuid }}"

  1511. 

  1512. matrix_mx_puppet_groupme_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  1513. 

  1514. # Postgres is the default, except if not using internal Postgres server

  1515. matrix_mx_puppet_groupme_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  1516. matrix_mx_puppet_groupme_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1517. matrix_mx_puppet_groupme_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxpup.groupme.db', rounds=655555) | to_uuid }}"

  1518. 

  1519. ######################################################################

  1520. #

  1521. # /matrix-bridge-mx-puppet-groupme

  1522. #

  1523. ######################################################################

  1524. 

  1525. ######################################################################

  1526. #

  1527. # matrix-bot-matrix-reminder-bot

  1528. #

  1529. ######################################################################

  1530. 

  1531. # We don't enable bots by default.

  1532. matrix_bot_matrix_reminder_bot_enabled: false

  1533. 

  1534. matrix_bot_matrix_reminder_bot_systemd_required_services_list: |

  1535.   {{

  1536.     ['docker.service']

  1537.     +

  1538.     ['matrix-' + matrix_homeserver_implementation + '.service']

  1539.     +

  1540.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  1541.     +

  1542.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1543.   }}

  1544. 

  1545. # Postgres is the default, except if not using internal Postgres server

  1546. matrix_bot_matrix_reminder_bot_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  1547. matrix_bot_matrix_reminder_bot_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1548. matrix_bot_matrix_reminder_bot_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'reminder.bot.db', rounds=655555) | to_uuid }}"

  1549. matrix_bot_matrix_reminder_bot_container_image_self_build: "{{ matrix_architecture != 'amd64' }}"

  1550. 

  1551. ######################################################################

  1552. #

  1553. # /matrix-bot-matrix-reminder-bot

  1554. #

  1555. ######################################################################

  1556. 

  1557. 

  1558. ######################################################################

  1559. #

  1560. # matrix-bot-matrix-registration-bot

  1561. #

  1562. ######################################################################

  1563. 

  1564. # We don't enable bots by default.

  1565. matrix_bot_matrix_registration_bot_enabled: false

  1566. 

  1567. matrix_bot_matrix_registration_bot_container_image_self_build: "{{ matrix_architecture not in ['amd64'] }}"

  1568. 

  1569. matrix_bot_matrix_registration_bot_systemd_required_services_list: |

  1570.   {{

  1571.     ['docker.service']

  1572.     +

  1573.     ['matrix-' + matrix_homeserver_implementation + '.service']

  1574.     +

  1575.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1576.   }}

  1577. 

  1578. 

  1579. ######################################################################

  1580. #

  1581. # /matrix-bot-matrix-registration-bot

  1582. #

  1583. ######################################################################

  1584. 

  1585. ######################################################################

  1586. #

  1587. # matrix-bot-maubot

  1588. #

  1589. ######################################################################

  1590. 

  1591. # We don't enable bots by default.

  1592. matrix_bot_maubot_enabled: false

  1593. 

  1594. matrix_bot_maubot_container_image_self_build: "{{ matrix_architecture not in ['amd64'] }}"

  1595. 

  1596. matrix_bot_maubot_systemd_required_services_list: |

  1597.   {{

  1598.     ['docker.service']

  1599.     +

  1600.     ['matrix-' + matrix_homeserver_implementation + '.service']

  1601.     +

  1602.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  1603.     +

  1604.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1605.   }}

  1606. 

  1607. matrix_bot_maubot_registration_shared_secret: |-

  1608.   {{

  1609.     {

  1610.       'synapse': matrix_synapse_registration_shared_secret,

  1611.       'dendrite': matrix_dendrite_client_api_registration_shared_secret,

  1612.     }[matrix_homeserver_implementation]

  1613.   }}

  1614. 

  1615. matrix_bot_maubot_management_interface_http_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '' ~ matrix_bot_maubot_management_interface_port | string) if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  1616. 

  1617. # Postgres is the default, except if not using internal Postgres server

  1618. matrix_bot_maubot_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  1619. matrix_bot_maubot_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1620. matrix_bot_maubot_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxpup.dsc.db', rounds=655555) | to_uuid }}"

  1621. 

  1622. ######################################################################

  1623. #

  1624. # /matrix-bot-maubot

  1625. #

  1626. ######################################################################

  1627. 

  1628. 

  1629. ######################################################################

  1630. #

  1631. # matrix-bot-honoroit

  1632. #

  1633. ######################################################################

  1634. 

  1635. # We don't enable bots by default.

  1636. matrix_bot_honoroit_enabled: false

  1637. 

  1638. matrix_bot_honoroit_systemd_required_services_list: |

  1639.   {{

  1640.     ['docker.service']

  1641.     +

  1642.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  1643.     +

  1644.     (['matrix-synapse.service'] if matrix_synapse_enabled else [])

  1645.     +

  1646.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1647.   }}

  1648. 

  1649. # Postgres is the default, except if not using internal Postgres server

  1650. matrix_bot_honoroit_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  1651. matrix_bot_honoroit_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1652. matrix_bot_honoroit_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'honoroit.bot.db', rounds=655555) | to_uuid }}"

  1653. matrix_bot_honoroit_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"

  1654. 

  1655. ######################################################################

  1656. #

  1657. # /matrix-bot-honoroit

  1658. #

  1659. ######################################################################

  1660. 

  1661. ######################################################################

  1662. #

  1663. # matrix-bot-buscarron

  1664. #

  1665. ######################################################################

  1666. 

  1667. # We don't enable bots by default.

  1668. matrix_bot_buscarron_enabled: false

  1669. 

  1670. matrix_bot_buscarron_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"

  1671. 

  1672. matrix_bot_buscarron_systemd_required_services_list: |

  1673.   {{

  1674.     ['docker.service']

  1675.     +

  1676.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  1677.     +

  1678.     (['matrix-synapse.service'] if matrix_synapse_enabled else [])

  1679.     +

  1680.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1681.   }}

  1682. 

  1683. # Postgres is the default, except if not using internal Postgres server

  1684. matrix_bot_buscarron_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  1685. matrix_bot_buscarron_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1686. matrix_bot_buscarron_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'buscarron.bot.db', rounds=655555) | to_uuid }}"

  1687. 

  1688. ######################################################################

  1689. #

  1690. # /matrix-bot-buscarron

  1691. #

  1692. ######################################################################

  1693. 

  1694. ######################################################################

  1695. #

  1696. # matrix-bot-postmoogle

  1697. #

  1698. ######################################################################

  1699. 

  1700. # We don't enable bots by default.

  1701. matrix_bot_postmoogle_enabled: false

  1702. 

  1703. matrix_bot_postmoogle_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"

  1704. 

  1705. matrix_bot_postmoogle_ssl_path: |-

  1706.   {{

  1707.     {

  1708.       'playbook-managed-traefik': devture_traefik_certs_dumper_dumped_certificates_dir_path,

  1709.       'other-traefik-container': devture_traefik_certs_dumper_dumped_certificates_dir_path,

  1710.       'playbook-managed-nginx': (matrix_ssl_config_dir_path if matrix_playbook_ssl_retrieval_method != 'none' else ''),

  1711.       'other-nginx-non-container': (matrix_ssl_config_dir_path if matrix_playbook_ssl_retrieval_method != 'none' else ''),

  1712.       'other-on-same-host': '',

  1713.       'other-on-another-host': '',

  1714.       'none': '',

  1715.     }[matrix_playbook_reverse_proxy_type]

  1716.   }}

  1717. 

  1718. matrix_playbook_bot_postmoogle_nginx_proxy_tls_cert: "{% for domain in matrix_bot_postmoogle_domains %}/ssl/live/{{ domain }}/fullchain.pem {% endfor %}"

  1719. matrix_playbook_bot_postmoogle_nginx_proxy_key: "{% for domain in matrix_bot_postmoogle_domains %}/ssl/live/{{ domain }}/privkey.pem {% endfor %}"

  1720. 

  1721. matrix_playbook_bot_postmoogle_traefik_tls_cert: "{% for domain in matrix_bot_postmoogle_domains %}/ssl/{{ domain }}/certificate.crt {% endfor %}"

  1722. matrix_playbook_bot_postmoogle_traefik_key: "{% for domain in matrix_bot_postmoogle_domains %}/ssl/{{ domain }}/privatekey.key {% endfor %}"

  1723. 

  1724. matrix_bot_postmoogle_tls_cert: |-

  1725.   {{

  1726.     {

  1727.       'playbook-managed-traefik': matrix_playbook_bot_postmoogle_traefik_tls_cert,

  1728.       'other-traefik-container': matrix_playbook_bot_postmoogle_traefik_tls_cert,

  1729.       'playbook-managed-nginx': (matrix_playbook_bot_postmoogle_nginx_proxy_tls_cert if matrix_playbook_ssl_retrieval_method != 'none' else ''),

  1730.       'other-nginx-non-container': (matrix_playbook_bot_postmoogle_nginx_proxy_tls_cert if matrix_playbook_ssl_retrieval_method != 'none' else ''),

  1731.       'other-on-same-host': '',

  1732.       'other-on-another-host': '',

  1733.       'none': '',

  1734.     }[matrix_playbook_reverse_proxy_type]

  1735.   }}

  1736. 

  1737. matrix_bot_postmoogle_tls_key: |-

  1738.   {{

  1739.     {

  1740.       'playbook-managed-traefik': matrix_playbook_bot_postmoogle_traefik_key,

  1741.       'other-traefik-container': matrix_playbook_bot_postmoogle_traefik_key,

  1742.       'playbook-managed-nginx': (matrix_playbook_bot_postmoogle_nginx_proxy_key if matrix_playbook_ssl_retrieval_method != 'none' else ''),

  1743.       'other-nginx-non-container': (matrix_playbook_bot_postmoogle_nginx_proxy_key if matrix_playbook_ssl_retrieval_method != 'none' else ''),

  1744.       'other-on-same-host': '',

  1745.       'other-on-another-host': '',

  1746.       'none': '',

  1747.     }[matrix_playbook_reverse_proxy_type]

  1748.   }}

  1749. 

  1750. matrix_playbook_bot_postmoogle_traefik_certs_dumper_waiter_services: "{% for domain in matrix_bot_postmoogle_domains %}{{ devture_traefik_certs_dumper_identifier }}-wait-for-domain@{{ domain }}.service {% endfor %}"

  1751. 

  1752. matrix_bot_postmoogle_systemd_required_services_list: |

  1753.   {{

  1754.     ['docker.service']

  1755.     +

  1756.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  1757.     +

  1758.     (['matrix-synapse.service'] if matrix_synapse_enabled else [])

  1759.     +

  1760.     (matrix_playbook_bot_postmoogle_traefik_certs_dumper_waiter_services | trim | split(' ') if matrix_playbook_reverse_proxy_type in ['playbook-managed-traefik', 'other-traefik-container'] and matrix_playbook_traefik_certs_dumper_role_enabled else [])

  1761.   }}

  1762. 

  1763. # Postgres is the default, except if not using internal Postgres server

  1764. matrix_bot_postmoogle_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  1765. matrix_bot_postmoogle_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1766. matrix_bot_postmoogle_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'postmoogle.db', rounds=655555) | to_uuid }}"

  1767. 

  1768. ######################################################################

  1769. #

  1770. # /matrix-bot-postmoogle

  1771. #

  1772. ######################################################################

  1773. 

  1774. 

  1775. ######################################################################

  1776. #

  1777. # matrix-bot-chatgpt

  1778. #

  1779. ######################################################################

  1780. 

  1781. # We don't enable bots by default.

  1782. matrix_bot_chatgpt_enabled: false

  1783. 

  1784. matrix_bot_chatgpt_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"

  1785. 

  1786. ######################################################################

  1787. #

  1788. # /matrix-bot-chatgpt

  1789. #

  1790. ######################################################################

  1791. 

  1792. 

  1793. ######################################################################

  1794. #

  1795. # matrix-bot-go-neb

  1796. #

  1797. ######################################################################

  1798. 

  1799. # We don't enable bots by default.

  1800. matrix_bot_go_neb_enabled: false

  1801. 

  1802. matrix_bot_go_neb_systemd_required_services_list: |

  1803.   {{

  1804.     ['docker.service']

  1805.     +

  1806.     ['matrix-' + matrix_homeserver_implementation + '.service']

  1807.     +

  1808.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1809.   }}

  1810. 

  1811. matrix_bot_go_neb_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '4050') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  1812. 

  1813. ######################################################################

  1814. #

  1815. # /matrix-bot-go-neb

  1816. #

  1817. ######################################################################

  1818. 

  1819. 

  1820. ######################################################################

  1821. #

  1822. # matrix-bot-mjolnir

  1823. #

  1824. ######################################################################

  1825. 

  1826. # We don't enable bots by default.

  1827. matrix_bot_mjolnir_enabled: false

  1828. 

  1829. matrix_bot_mjolnir_container_image_self_build: "{{ matrix_architecture != 'amd64' }}"

  1830. 

  1831. matrix_bot_mjolnir_systemd_required_services_list: |

  1832.   {{

  1833.     ['docker.service']

  1834.     +

  1835.     ['matrix-' + matrix_homeserver_implementation + '.service']

  1836.     +

  1837.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  1838.     +

  1839.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1840.   }}

  1841. 

  1842. ######################################################################

  1843. #

  1844. # /matrix-bot-mjolnir

  1845. #

  1846. ######################################################################

  1847. 

  1848. ######################################################################

  1849. #

  1850. # matrix-bot-draupnir

  1851. #

  1852. ######################################################################

  1853. 

  1854. # We don't enable bots by default.

  1855. matrix_bot_draupnir_enabled: false

  1856. 

  1857. matrix_bot_draupnir_container_image_self_build: "{{ matrix_architecture != 'amd64' }}"

  1858. 

  1859. matrix_bot_draupnir_systemd_required_services_list: |

  1860.   {{

  1861.     ['docker.service']

  1862.     +

  1863.     ['matrix-' + matrix_homeserver_implementation + '.service']

  1864.     +

  1865.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  1866.     +

  1867.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1868.   }}

  1869. 

  1870. ######################################################################

  1871. #

  1872. # /matrix-bot-draupnir

  1873. #

  1874. ######################################################################

  1875. 

  1876. 

  1877. ######################################################################

  1878. #

  1879. # etke/backup_borg

  1880. #

  1881. ######################################################################

  1882. 

  1883. backup_borg_enabled: false

  1884. 

  1885. backup_borg_identifier: matrix-backup-borg

  1886. backup_borg_retention_prefix: matrix-

  1887. backup_borg_storage_archive_name_format: matrix-{now:%Y-%m-%d-%H%M%S}

  1888. 

  1889. backup_borg_base_path: "{{ matrix_base_data_path }}/backup-borg"

  1890. 

  1891. backup_borg_username: "{{ matrix_user_username }}"

  1892. backup_borg_uid: "{{ matrix_user_uid }}"

  1893. backup_borg_gid: "{{ matrix_user_gid }}"

  1894. 

  1895. backup_borg_container_network: "{{ devture_postgres_container_network if devture_postgres_enabled else backup_borg_identifier }}"

  1896. 

  1897. backup_borg_postgresql_version_detection_devture_postgres_role_name: "{{ 'galaxy/com.devture.ansible.role.postgres' if devture_postgres_enabled else '' }}"

  1898. 

  1899. backup_borg_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm32', 'arm64'] }}"

  1900. 

  1901. backup_borg_postgresql_enabled: "{{ devture_postgres_enabled }}"

  1902. backup_borg_postgresql_databases_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1903. backup_borg_postgresql_databases_username: "{{ devture_postgres_connection_username if devture_postgres_enabled else '' }}"

  1904. backup_borg_postgresql_databases_password: "{{ devture_postgres_connection_password if devture_postgres_enabled else '' }}"

  1905. backup_borg_postgresql_databases_port: "{{ devture_postgres_connection_port if devture_postgres_enabled else 5432 }}"

  1906. backup_borg_postgresql_databases: "{{ devture_postgres_managed_databases | map(attribute='name') if devture_postgres_enabled else [] }}"

  1907. 

  1908. backup_borg_location_source_directories:

  1909.   - "{{ matrix_base_data_path }}"

  1910. 

  1911. backup_borg_location_exclude_patterns: |

  1912.   {{

  1913.     ([matrix_synapse_media_store_path + '/local_thumbnails', matrix_synapse_media_store_path + '/remote_thumbnail', matrix_synapse_media_store_path + '/url_cache', matrix_synapse_media_store_path + '/url_cache_thumbnails'] if matrix_homeserver_implementation == 'synapse' else [])

  1914.     +

  1915.     ([devture_postgres_data_path] if devture_postgres_enabled else [])

  1916.   }}

  1917. 

  1918. backup_borg_systemd_required_services_list: |

  1919.   {{

  1920.     ['docker.service']

  1921.     +

  1922.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  1923.   }}

  1924. 

  1925. ######################################################################

  1926. #

  1927. # /etke/backup_borg

  1928. #

  1929. ######################################################################

  1930. 

  1931. 

  1932. ######################################################################

  1933. #

  1934. # matrix-cactus-comments

  1935. #

  1936. ######################################################################

  1937. 

  1938. matrix_cactus_comments_enabled: false

  1939. 

  1940. # Derive secret values from homeserver secret

  1941. matrix_cactus_comments_as_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'cactus.as.token', rounds=655555) | to_uuid }}"

  1942. matrix_cactus_comments_hs_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'cactus.hs.token', rounds=655555) | to_uuid }}"

  1943. 

  1944. matrix_cactus_comments_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm32', 'arm64'] }}"

  1945. matrix_cactus_comments_systemd_required_services_list: |

  1946.   {{

  1947.     (['docker.service'])

  1948.     +

  1949.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1950.     +

  1951.     (['matrix-' + matrix_homeserver_implementation + '.service'])

  1952.   }}

  1953. 

  1954. matrix_cactus_comments_client_nginx_path: "{{ '/cactus-comments/' if matrix_nginx_proxy_enabled else matrix_cactus_comments_client_path + '/' }}"

  1955. 

  1956. ######################################################################

  1957. #

  1958. # /matrix-cactus-comments

  1959. #

  1960. ######################################################################

  1961. 

  1962. ######################################################################

  1963. #

  1964. # matrix-corporal

  1965. #

  1966. ######################################################################

  1967. 

  1968. matrix_corporal_enabled: false

  1969. 

  1970. matrix_corporal_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm32', 'arm64'] }}"

  1971. 

  1972. # Normally, matrix-nginx-proxy is enabled and nginx can reach matrix-corporal over the container network.

  1973. # If matrix-nginx-proxy is not enabled, or you otherwise have a need for it, you can expose

  1974. # matrix-corporal's web-server ports to the local host.

  1975. matrix_corporal_container_http_gateway_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '41080') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  1976. matrix_corporal_container_http_api_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '41081') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  1977. 

  1978. matrix_corporal_systemd_required_services_list: |

  1979.   {{

  1980.     (['docker.service'])

  1981.     +

  1982.     (['matrix-' + matrix_homeserver_implementation + '.service'])

  1983.   }}

  1984. 

  1985. matrix_corporal_matrix_homeserver_api_endpoint: "{{ matrix_homeserver_container_url }}"

  1986. 

  1987. matrix_corporal_matrix_auth_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret }}"

  1988. 

  1989. # This is only useful if there's REST auth provider to make use of it.

  1990. matrix_corporal_http_gateway_internal_rest_auth_enabled: "{{ matrix_synapse_ext_password_provider_rest_auth_enabled }}"

  1991. 

  1992. matrix_corporal_matrix_registration_shared_secret: "{{ matrix_synapse_registration_shared_secret }}"

  1993. 

  1994. ######################################################################

  1995. #

  1996. # /matrix-corporal

  1997. #

  1998. ######################################################################

  1999. 

  2000. 

  2001. ######################################################################

  2002. #

  2003. # matrix-rageshake

  2004. #

  2005. ######################################################################

  2006. 

  2007. # We don't enable rageshake by default.

  2008. matrix_rageshake_enabled: false

  2009. 

  2010. matrix_rageshake_container_image_self_build: "{{ matrix_architecture not in ['amd64'] }}"

  2011. 

  2012. matrix_rageshake_hostname: "{{ matrix_server_fqn_rageshake }}"

  2013. 

  2014. matrix_rageshake_container_network: "{{ matrix_docker_network if matrix_playbook_reverse_proxy_type == 'playbook-managed-nginx' else 'matrix-rageshake' }}"

  2015. 

  2016. matrix_rageshake_container_additional_networks: "{{ [matrix_playbook_reverse_proxyable_services_additional_network] if matrix_playbook_reverse_proxyable_services_additional_network else [] }}"

  2017. 

  2018. matrix_rageshake_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '9110') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  2019. 

  2020. matrix_rageshake_container_labels_traefik_enabled: "{{ matrix_playbook_traefik_labels_enabled }}"

  2021. matrix_rageshake_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  2022. matrix_rageshake_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  2023. 

  2024. ######################################################################

  2025. #

  2026. # /matrix-rageshake

  2027. #

  2028. ######################################################################

  2029. 

  2030. ######################################################################

  2031. #

  2032. # matrix-coturn

  2033. #

  2034. ######################################################################

  2035. 

  2036. matrix_coturn_enabled: true

  2037. 

  2038. matrix_coturn_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm32', 'arm64'] }}"

  2039. 

  2040. matrix_coturn_turn_external_ip_address: "{{ ansible_host }}"

  2041. 

  2042. matrix_coturn_turn_static_auth_secret: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'coturn.sas', rounds=655555) | to_uuid }}"

  2043. 

  2044. matrix_coturn_tls_enabled: "{{ matrix_playbook_ssl_retrieval_method != 'none' }}"

  2045. 

  2046. matrix_coturn_tls_cert_path: |-

  2047.   {{

  2048.     {

  2049.       'playbook-managed-traefik': '/certificate.crt',

  2050.       'other-traefik-container': '/certificate.crt',

  2051.       'playbook-managed-nginx': '/fullchain.pem',

  2052.       'other-nginx-non-container': '/fullchain.pem',

  2053.       'other-on-same-host': '',

  2054.       'other-on-another-host': '',

  2055.       'none': '',

  2056.     }[matrix_playbook_reverse_proxy_type]

  2057.   }}

  2058. 

  2059. matrix_coturn_tls_key_path: |-

  2060.   {{

  2061.     {

  2062.       'playbook-managed-traefik': '/privatekey.key',

  2063.       'other-traefik-container': '/privatekey.key',

  2064.       'playbook-managed-nginx': '/privkey.pem',

  2065.       'other-nginx-non-container': '/privkey.pem',

  2066.       'other-on-same-host': '',

  2067.       'other-on-another-host': '',

  2068.       'none': '',

  2069.     }[matrix_playbook_reverse_proxy_type]

  2070.   }}

  2071. 

  2072. matrix_coturn_container_additional_volumes: |

  2073.   {{

  2074.     (

  2075.       [

  2076.        {

  2077.          'src': (matrix_ssl_config_dir_path + '/live/' + matrix_server_fqn_matrix + '/fullchain.pem'),

  2078.          'dst': '/fullchain.pem',

  2079.          'options': 'ro',

  2080.        },

  2081.        {

  2082.          'src': (matrix_ssl_config_dir_path + '/live/' + matrix_server_fqn_matrix + '/privkey.pem'),

  2083.          'dst': '/privkey.pem',

  2084.          'options': 'ro',

  2085.        },

  2086.       ] if matrix_playbook_reverse_proxy_type in ['playbook-managed-nginx', 'other-nginx-non-container'] and matrix_coturn_tls_enabled else []

  2087.     )

  2088.     +

  2089.     (

  2090.       [

  2091.        {

  2092.          'src': (devture_traefik_certs_dumper_dumped_certificates_dir_path +  '/' + matrix_server_fqn_matrix + '/certificate.crt'),

  2093.          'dst': '/certificate.crt',

  2094.          'options': 'ro',

  2095.        },

  2096.        {

  2097.          'src': (devture_traefik_certs_dumper_dumped_certificates_dir_path +  '/' + matrix_server_fqn_matrix + '/privatekey.key'),

  2098.          'dst': '/privatekey.key',

  2099.          'options': 'ro',

  2100.        },

  2101.       ] if matrix_playbook_reverse_proxy_type in ['playbook-managed-traefik', 'other-traefik-container'] and matrix_playbook_traefik_certs_dumper_role_enabled and matrix_coturn_tls_enabled else []

  2102.     )

  2103.   }}

  2104. 

  2105. matrix_coturn_systemd_required_services_list: |

  2106.   {{

  2107.     ['docker.service']

  2108.     +

  2109.     ([devture_traefik_certs_dumper_identifier + '-wait-for-domain@' + matrix_server_fqn_matrix + '.service'] if matrix_playbook_reverse_proxy_type in ['playbook-managed-traefik', 'other-traefik-container'] and matrix_playbook_traefik_certs_dumper_role_enabled and matrix_coturn_tls_enabled else [])

  2110.   }}

  2111. 

  2112. ######################################################################

  2113. #

  2114. # /matrix-coturn

  2115. #

  2116. ######################################################################

  2117. 

  2118. ######################################################################

  2119. #

  2120. # matrix-dimension

  2121. #

  2122. ######################################################################

  2123. 

  2124. matrix_dimension_enabled: false

  2125. 

  2126. matrix_dimension_container_image_self_build: "{{ matrix_architecture != 'amd64' }}"

  2127. 

  2128. # Normally, matrix-nginx-proxy is enabled and nginx can reach Dimension over the container network.

  2129. # If matrix-nginx-proxy is not enabled, or you otherwise have a need for it, you can expose

  2130. # the Dimension HTTP port to the local host.

  2131. matrix_dimension_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '8184') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  2132. 

  2133. matrix_dimension_homeserver_federationUrl: "{{ matrix_homeserver_container_federation_url }}"

  2134. 

  2135. matrix_dimension_systemd_required_services_list: |

  2136.   {{

  2137.     ['docker.service']

  2138.     +

  2139.     ['matrix-' + matrix_homeserver_implementation + '.service']

  2140.     +

  2141.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  2142.     +

  2143.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  2144.   }}

  2145. 

  2146. # Postgres is the default, except if not using internal Postgres server

  2147. matrix_dimension_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  2148. matrix_dimension_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  2149. matrix_dimension_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'dimension.db', rounds=655555) | to_uuid }}"

  2150. 

  2151. ######################################################################

  2152. #

  2153. # /matrix-dimension

  2154. #

  2155. ######################################################################

  2156. 

  2157. ######################################################################

  2158. #

  2159. # matrix-etherpad

  2160. #

  2161. ######################################################################

  2162. 

  2163. matrix_etherpad_enabled: false

  2164. 

  2165. matrix_etherpad_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '9001') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  2166. 

  2167. matrix_etherpad_base_url: "{{ 'https://' + matrix_server_fqn_dimension + matrix_etherpad_public_endpoint if matrix_etherpad_mode == 'dimension' else 'https://' + matrix_server_fqn_etherpad + '/' }}"

  2168. 

  2169. matrix_etherpad_systemd_required_services_list: |

  2170.   {{

  2171.     ['docker.service']

  2172.     +

  2173.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  2174.   }}

  2175. 

  2176. matrix_etherpad_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  2177. matrix_etherpad_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'etherpad.db', rounds=655555) | to_uuid }}"

  2178. 

  2179. ######################################################################

  2180. #

  2181. # /matrix-etherpad

  2182. #

  2183. ######################################################################

  2184. 

  2185. ######################################################################

  2186. #

  2187. # matrix-dynamic-dns

  2188. #

  2189. ######################################################################

  2190. 

  2191. matrix_dynamic_dns_enabled: false

  2192. 

  2193. ######################################################################

  2194. #

  2195. # /matrix-dynamic-dns

  2196. #

  2197. ######################################################################

  2198. 

  2199. ######################################################################

  2200. #

  2201. # matrix-email2matrix

  2202. #

  2203. ######################################################################

  2204. 

  2205. matrix_email2matrix_enabled: false

  2206. 

  2207. matrix_email2matrix_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm32', 'arm64'] }}"

  2208. 

  2209. ######################################################################

  2210. #

  2211. # /matrix-email2matrix

  2212. #

  2213. ######################################################################

  2214. 

  2215. ######################################################################

  2216. #

  2217. # matrix-jitsi

  2218. #

  2219. ######################################################################

  2220. 

  2221. matrix_jitsi_enabled: false

  2222. 

  2223. # Normally, matrix-nginx-proxy is enabled and nginx can reach jitsi/web over the container network.

  2224. # If matrix-nginx-proxy is not enabled, or you otherwise have a need for it, you can expose

  2225. # the Jitsi HTTP port to the local host.

  2226. matrix_jitsi_web_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '13080') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  2227. 

  2228. matrix_jitsi_jvb_container_colibri_ws_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '13090') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  2229. 

  2230. matrix_jitsi_prosody_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '5280') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  2231. 

  2232. matrix_jitsi_jibri_xmpp_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'jibri', rounds=655555) | to_uuid }}"

  2233. matrix_jitsi_jicofo_auth_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'jicofo', rounds=655555) | to_uuid }}"

  2234. matrix_jitsi_jvb_auth_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'jvb', rounds=655555) | to_uuid }}"

  2235. 

  2236. matrix_jitsi_web_stun_servers: |

  2237.   {{

  2238.     [

  2239.       'stun:' + matrix_server_fqn_matrix + ':5349',

  2240.       'stun:' + matrix_server_fqn_matrix + ':3478',

  2241.     ]

  2242.     if matrix_coturn_enabled

  2243.     else [ 'stun:meet-jit-si-turnrelay.jitsi.net:443']

  2244.   }}

  2245. 

  2246. # If the self-hosted Etherpad instance is available, it will also show up in Jitsi conferences,

  2247. # unless explicitly disabled by setting `matrix_jitsi_etherpad_enabled` to false.

  2248. # Falls back to the scalar.vector.im etherpad in case someone sets `matrix_jitsi_etherpad_enabled` to true,

  2249. # while also setting `matrix_etherpad_enabled` to false.

  2250. matrix_jitsi_etherpad_enabled: "{{ matrix_etherpad_enabled }}"

  2251. matrix_jitsi_etherpad_base: "{{ matrix_etherpad_base_url if matrix_etherpad_enabled else 'https://scalar.vector.im/etherpad' }}"

  2252. 

  2253. # Allow verification using JWT and matrix-UVS

  2254. matrix_jitsi_prosody_auth_matrix_uvs_auth_token: "{{ matrix_user_verification_service_uvs_auth_token }}"

  2255. matrix_jitsi_prosody_auth_matrix_uvs_location: "{{ matrix_user_verification_service_container_url }}"

  2256. 

  2257. matrix_jitsi_self_check_validate_certificates: "{{ false if matrix_ssl_retrieval_method == 'self-signed' else true }}"

  2258. 

  2259. ######################################################################

  2260. #

  2261. # /matrix-jitsi

  2262. #

  2263. ######################################################################

  2264. ######################################################################

  2265. #

  2266. # matrix-ldap-registration-proxy

  2267. #

  2268. ######################################################################

  2269. 

  2270. # This is only for users with a specific LDAP setup

  2271. matrix_ldap_registration_proxy_enabled: false

  2272. 

  2273. ######################################################################

  2274. #

  2275. # /matrix-ldap-registration-proxy

  2276. #

  2277. ######################################################################

  2278. 

  2279. ######################################################################

  2280. #

  2281. # matrix-mailer

  2282. #

  2283. ######################################################################

  2284. 

  2285. # By default, this playbook sets up an exim mailer server (running in a container).

  2286. # This is so that Synapse can send email reminders for unread messages.

  2287. # Other services (like ma1sd), also use the mailer.

  2288. matrix_mailer_enabled: true

  2289. 

  2290. matrix_mailer_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm32', 'arm64'] }}"

  2291. 

  2292. ######################################################################

  2293. #

  2294. # /matrix-mailer

  2295. #

  2296. ######################################################################

  2297. 

  2298. ######################################################################

  2299. #

  2300. # matrix-ma1sd

  2301. #

  2302. ######################################################################

  2303. 

  2304. # We no longer install the ma1sd identity server by default.

  2305. #

  2306. # The main reason we used to install ma1sd by default in the past was to

  2307. # prevent Element from talking to the `matrix.org` / `vector.im` identity servers,

  2308. # by forcing it to talk to our own self-hosted (but otherwise useless) identity server instead,

  2309. # thus preventing contact list leaks.

  2310. #

  2311. # Since Element no longer defaults to using a public identity server if another one is not provided,

  2312. # we can stop installing ma1sd.

  2313. matrix_ma1sd_enabled: false

  2314. 

  2315. matrix_ma1sd_container_image_self_build: "{{ matrix_architecture != 'amd64' }}"

  2316. 

  2317. # Normally, matrix-nginx-proxy is enabled and nginx can reach ma1sd over the container network.

  2318. # If matrix-nginx-proxy is not enabled, or you otherwise have a need for it, you can expose

  2319. # ma1sd's web-server port.

  2320. matrix_ma1sd_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '' ~ matrix_ma1sd_container_port | string) if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  2321. 

  2322. 

  2323. # We enable Synapse integration via its Postgres database by default.

  2324. # When using another Identity store, you might wish to disable this and define

  2325. # your own configuration in `matrix_ma1sd_configuration_extension_yaml`.

  2326. matrix_ma1sd_synapsesql_enabled: true

  2327. matrix_ma1sd_synapsesql_type: postgresql

  2328. matrix_ma1sd_synapsesql_connection: //{{ matrix_synapse_database_host }}/{{ matrix_synapse_database_database }}?user={{ matrix_synapse_database_user | urlencode() }}&password={{ matrix_synapse_database_password | urlencode() }}

  2329. 

  2330. matrix_ma1sd_dns_overwrite_enabled: true

  2331. matrix_ma1sd_dns_overwrite_homeserver_client_name: "{{ matrix_server_fqn_matrix }}"

  2332. # The `matrix_ma1sd_dns_overwrite_homeserver_client_value` value when matrix_nginx_proxy_enabled is false covers the general case,

  2333. # but may be inaccurate if matrix-corporal is enabled.

  2334. matrix_ma1sd_dns_overwrite_homeserver_client_value: "{{ matrix_homeserver_container_url }}"

  2335. 

  2336. # By default, we send mail through the `matrix-mailer` service.

  2337. matrix_ma1sd_threepid_medium_email_identity_from: "{{ matrix_mailer_sender_address }}"

  2338. matrix_ma1sd_threepid_medium_email_connectors_smtp_host: "matrix-mailer"

  2339. matrix_ma1sd_threepid_medium_email_connectors_smtp_port: 8025

  2340. matrix_ma1sd_threepid_medium_email_connectors_smtp_tls: 0

  2341. 

  2342. matrix_ma1sd_self_check_validate_certificates: "{{ false if matrix_playbook_ssl_retrieval_method == 'self-signed' else true }}"

  2343. 

  2344. matrix_ma1sd_systemd_required_services_list: |

  2345.   {{

  2346.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  2347.   }}

  2348. 

  2349. matrix_ma1sd_systemd_wanted_services_list: |

  2350.   {{

  2351.     (['matrix-corporal.service'] if matrix_corporal_enabled else ['matrix-' + matrix_homeserver_implementation + '.service'])

  2352.     +

  2353.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  2354.     +

  2355.     (['matrix-mailer.service'] if matrix_mailer_enabled else [])

  2356.   }}

  2357. 

  2358. # Postgres is the default, except if not using internal Postgres server

  2359. matrix_ma1sd_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  2360. matrix_ma1sd_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  2361. matrix_ma1sd_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'ma1sd.db', rounds=655555) | to_uuid }}"

  2362. 

  2363. ######################################################################

  2364. #

  2365. # /matrix-ma1sd

  2366. #

  2367. ######################################################################

  2368. 

  2369. 

  2370. ######################################################################

  2371. #

  2372. # matrix-nginx-proxy

  2373. #

  2374. ######################################################################

  2375. 

  2376. # This playbook installs its own nginx if

  2377. # - it's explicitly enabled

  2378. # - Traefik is in use. Not all services are Traefik-native yet, so we use reverse-proxy to some via a local-only matrix-nginx-proxy

  2379. matrix_nginx_proxy_enabled: "{{ matrix_playbook_reverse_proxy_type in ['playbook-managed-nginx', 'playbook-managed-traefik', 'other-traefik-container'] }}"

  2380. 

  2381. # matrix-nginx-proxy is only to handle HTTPS only if it's the chosen reverse-proxy.

  2382. # It may be enabled even if it's not chosen. See `matrix_nginx_proxy_enabled`.

  2383. matrix_ssl_retrieval_method: "{{ 'lets-encrypt' if matrix_playbook_reverse_proxy_type == 'playbook-managed-nginx' else 'none' }}"

  2384. matrix_nginx_proxy_https_enabled: "{{ matrix_playbook_reverse_proxy_type == 'playbook-managed-nginx' }}"

  2385. 

  2386. # matrix-nginx-proxy is to publish ports only if it's the chosen reverse-proxy.

  2387. # It may be enabled even if it's not chosen. See `matrix_nginx_proxy_enabled`.

  2388. matrix_nginx_proxy_container_http_host_bind_port: "{{ '80' if matrix_playbook_reverse_proxy_type == 'playbook-managed-nginx' else '' }}"

  2389. matrix_nginx_proxy_container_federation_host_bind_port: "{{ matrix_federation_public_port if matrix_playbook_reverse_proxy_type == 'playbook-managed-nginx' else '' }}"

  2390. 

  2391. # matrix-nginx-proxy is to trust reverse-proxy forwarded protocol and headers, unless it's the "main" (chosen) reverse-proxy

  2392. matrix_nginx_proxy_trust_forwarded_proto: "{{ matrix_playbook_reverse_proxy_type != 'playbook-managed-nginx' }}"

  2393. matrix_nginx_proxy_x_forwarded_for: "{{ '$remote_addr' if matrix_playbook_reverse_proxy_type == 'playbook-managed-nginx' else '$proxy_add_x_forwarded_for' }}"

  2394. 

  2395. matrix_nginx_proxy_container_additional_networks: "{{ [matrix_playbook_reverse_proxyable_services_additional_network] if matrix_playbook_reverse_proxyable_services_additional_network else [] }}"

  2396. 

  2397. matrix_nginx_proxy_proxy_matrix_client_api_addr_with_container: "{{ 'matrix-corporal:41080' if matrix_corporal_enabled else 'matrix-nginx-proxy:12080' }}"

  2398. matrix_nginx_proxy_proxy_matrix_client_api_addr_sans_container: "{{ '127.0.0.1:41080' if matrix_corporal_enabled else '127.0.0.1:12080' }}"

  2399. matrix_nginx_proxy_proxy_matrix_client_api_client_max_body_size_mb: |-

  2400.   {{

  2401.     {

  2402.       'synapse': matrix_synapse_max_upload_size_mb,

  2403.       'dendrite': (matrix_dendrite_max_file_size_bytes / 1024 / 1024) | round,

  2404.       'conduit': (matrix_conduit_max_request_size / 1024 / 1024) | round,

  2405.     }[matrix_homeserver_implementation]|int

  2406.   }}

  2407. 

  2408. matrix_nginx_proxy_proxy_matrix_client_api_forwarded_location_synapse_admin_api_enabled: "{{ matrix_synapse_admin_enabled or matrix_bot_matrix_registration_bot_enabled }}"

  2409. 

  2410. matrix_nginx_proxy_proxy_matrix_client_redirect_root_uri_to_domain: "{{ matrix_server_fqn_element if matrix_client_element_enabled else '' }}"

  2411. 

  2412. matrix_nginx_proxy_proxy_matrix_enabled: true

  2413. matrix_nginx_proxy_proxy_element_enabled: "{{ matrix_client_element_enabled and matrix_playbook_reverse_proxy_type in ['playbook-managed-nginx', 'other-nginx-non-container'] }}"

  2414. matrix_nginx_proxy_proxy_hydrogen_enabled: "{{ matrix_client_hydrogen_enabled and matrix_playbook_reverse_proxy_type in ['playbook-managed-nginx', 'other-nginx-non-container'] }}"

  2415. matrix_nginx_proxy_proxy_cinny_enabled: "{{ matrix_client_cinny_enabled and matrix_playbook_reverse_proxy_type in ['playbook-managed-nginx', 'other-nginx-non-container'] }}"

  2416. matrix_nginx_proxy_proxy_buscarron_enabled: "{{ matrix_bot_buscarron_enabled }}"

  2417. matrix_nginx_proxy_proxy_dimension_enabled: "{{ matrix_dimension_enabled }}"

  2418. matrix_nginx_proxy_proxy_rageshake_enabled: "{{ matrix_rageshake_enabled and matrix_playbook_reverse_proxy_type in ['playbook-managed-nginx', 'other-nginx-non-container'] }}"

  2419. matrix_nginx_proxy_proxy_etherpad_enabled: "{{ matrix_etherpad_enabled and matrix_etherpad_mode == 'standalone' }}"

  2420. matrix_nginx_proxy_proxy_bot_go_neb_enabled: "{{ matrix_bot_go_neb_enabled }}"

  2421. 

  2422. matrix_nginx_proxy_proxy_jitsi_enabled: "{{ matrix_jitsi_enabled }}"

  2423. matrix_nginx_proxy_proxy_jitsi_manage_wellknown: "{{ matrix_jitsi_require_well_known }}"

  2424. 

  2425. matrix_nginx_proxy_proxy_grafana_enabled: "{{ grafana_enabled and matrix_playbook_reverse_proxy_type in ['playbook-managed-nginx', 'other-nginx-non-container'] }}"

  2426. matrix_nginx_proxy_proxy_sygnal_enabled: "{{ matrix_sygnal_enabled }}"

  2427. matrix_nginx_proxy_proxy_ntfy_enabled: "{{ ntfy_enabled and matrix_playbook_reverse_proxy_type in ['playbook-managed-nginx', 'other-nginx-non-container'] }}"

  2428. 

  2429. matrix_nginx_proxy_container_labels_traefik_enabled: "{{ matrix_playbook_traefik_labels_enabled }}"

  2430. matrix_nginx_proxy_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  2431. matrix_nginx_proxy_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  2432. 

  2433. matrix_nginx_proxy_container_labels_traefik_proxy_matrix_enabled: true

  2434. matrix_nginx_proxy_container_labels_traefik_proxy_buscarron_enabled: "{{ matrix_bot_buscarron_enabled }}"

  2435. matrix_nginx_proxy_container_labels_traefik_proxy_dimension_enabled: "{{ matrix_dimension_enabled }}"

  2436. matrix_nginx_proxy_container_labels_traefik_proxy_etherpad_enabled: "{{ matrix_etherpad_enabled and matrix_etherpad_mode == 'standalone' }}"

  2437. matrix_nginx_proxy_container_labels_traefik_proxy_bot_go_neb_enabled: "{{ matrix_bot_go_neb_enabled }}"

  2438. matrix_nginx_proxy_container_labels_traefik_proxy_jitsi_enabled: "{{ matrix_jitsi_enabled }}"

  2439. matrix_nginx_proxy_container_labels_traefik_proxy_sygnal_enabled: "{{ matrix_sygnal_enabled }}"

  2440. 

  2441. matrix_nginx_proxy_proxy_matrix_corporal_api_enabled: "{{ matrix_corporal_enabled and matrix_corporal_http_api_enabled }}"

  2442. matrix_nginx_proxy_proxy_matrix_corporal_api_addr_with_container: "matrix-corporal:41081"

  2443. matrix_nginx_proxy_proxy_matrix_corporal_api_addr_sans_container: "127.0.0.1:41081"

  2444. 

  2445. matrix_nginx_proxy_proxy_matrix_identity_api_enabled: "{{ matrix_ma1sd_enabled }}"

  2446. matrix_nginx_proxy_proxy_matrix_identity_api_addr_with_container: "matrix-ma1sd:{{ matrix_ma1sd_container_port }}"

  2447. matrix_nginx_proxy_proxy_matrix_identity_api_addr_sans_container: "127.0.0.1:{{ matrix_ma1sd_container_port }}"

  2448. 

  2449. # By default, we do TLS termination for the Matrix Federation API (port 8448) at matrix-nginx-proxy.

  2450. # Unless this is handled there OR Synapse's federation listener port is disabled, we'll reverse-proxy.

  2451. matrix_nginx_proxy_proxy_matrix_federation_api_enabled: |-

  2452.   {{

  2453.     {

  2454.       'synapse': (matrix_synapse_federation_port_enabled and not matrix_synapse_tls_federation_listener_enabled),

  2455.       'dendrite': matrix_dendrite_federation_enabled,

  2456.       'conduit': matrix_conduit_allow_federation,

  2457.     }[matrix_homeserver_implementation]|bool

  2458.   }}

  2459. 

  2460. matrix_nginx_proxy_proxy_matrix_federation_api_addr_with_container: "matrix-nginx-proxy:12088"

  2461. matrix_nginx_proxy_proxy_matrix_federation_api_addr_sans_container: "127.0.0.1:12088"

  2462. 

  2463. matrix_nginx_proxy_proxy_synapse_enabled: "{{ matrix_synapse_enabled }}"

  2464. matrix_nginx_proxy_proxy_synapse_client_api_addr_with_container: "{{ 'matrix-synapse-reverse-proxy-companion:8008' if matrix_synapse_reverse_proxy_companion_enabled else 'matrix-synapse:8008' }}"

  2465. matrix_nginx_proxy_proxy_synapse_client_api_addr_sans_container: "127.0.0.1:8008"

  2466. matrix_nginx_proxy_proxy_synapse_federation_api_addr_with_container: "{{ 'matrix-synapse-reverse-proxy-companion:8048' if matrix_synapse_reverse_proxy_companion_enabled else 'matrix-synapse:8048' }}"

  2467. matrix_nginx_proxy_proxy_synapse_federation_api_addr_sans_container: "127.0.0.1:8048"

  2468. 

  2469. matrix_nginx_proxy_proxy_dendrite_enabled: "{{ matrix_dendrite_enabled }}"

  2470. matrix_nginx_proxy_proxy_dendrite_client_api_addr_with_container: "matrix-dendrite:{{ matrix_dendrite_http_bind_port | string }}"

  2471. matrix_nginx_proxy_proxy_dendrite_client_api_addr_sans_container: "127.0.0.1:{{ matrix_dendrite_http_bind_port | string }}"

  2472. matrix_nginx_proxy_proxy_dendrite_federation_api_addr_with_container: "matrix-dendrite:{{ matrix_dendrite_http_bind_port | string }}"

  2473. matrix_nginx_proxy_proxy_dendrite_federation_api_addr_sans_container: "127.0.0.1:{{ matrix_dendrite_http_bind_port | string }}"

  2474. 

  2475. matrix_nginx_proxy_proxy_conduit_enabled: "{{ matrix_conduit_enabled }}"

  2476. matrix_nginx_proxy_proxy_conduit_client_api_addr_with_container: "matrix-conduit:{{ matrix_conduit_port_number|string }}"

  2477. matrix_nginx_proxy_proxy_conduit_client_api_addr_sans_container: "127.0.0.1:{{ matrix_conduit_port_number|string }}"

  2478. matrix_nginx_proxy_proxy_conduit_federation_api_addr_with_container: "matrix-conduit:{{ matrix_conduit_port_number|string }}"

  2479. matrix_nginx_proxy_proxy_conduit_federation_api_addr_sans_container: "127.0.0.1:{{ matrix_conduit_port_number|string }}"

  2480. 

  2481. # When matrix-nginx-proxy is disabled, the actual port number that the vhost uses may begin to matter.

  2482. matrix_nginx_proxy_proxy_matrix_federation_port: "{{ matrix_federation_public_port }}"

  2483. 

  2484. matrix_nginx_proxy_proxy_matrix_user_directory_search_enabled: "{{ matrix_ma1sd_enabled }}"

  2485. matrix_nginx_proxy_proxy_matrix_user_directory_search_addr_with_container: "{{ matrix_nginx_proxy_proxy_matrix_identity_api_addr_with_container }}"

  2486. matrix_nginx_proxy_proxy_matrix_user_directory_search_addr_sans_container: "{{ matrix_nginx_proxy_proxy_matrix_identity_api_addr_sans_container }}"

  2487. 

  2488. matrix_nginx_proxy_self_check_validate_certificates: "{{ false if matrix_playbook_ssl_retrieval_method == 'self-signed' else true }}"

  2489. 

  2490. # OCSP stapling does not make sense when self-signed certificates are used.

  2491. # See https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1073

  2492. # and https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1074

  2493. matrix_nginx_proxy_ocsp_stapling_enabled: "{{ matrix_playbook_ssl_retrieval_method != 'self-signed' }}"

  2494. 

  2495. matrix_nginx_proxy_systemd_wanted_services_list: |

  2496.   {{

  2497.     ['matrix-' + matrix_homeserver_implementation + '.service']

  2498.     +

  2499.     (matrix_synapse_webserving_workers_systemd_services_list if matrix_homeserver_implementation == 'synapse' and matrix_synapse_workers_enabled else [])

  2500.     +

  2501.     (['matrix-synapse-reverse-proxy-companion.service'] if matrix_synapse_reverse_proxy_companion_enabled else [])

  2502.     +

  2503.     (['matrix-corporal.service'] if matrix_corporal_enabled else [])

  2504.     +

  2505.     (['matrix-ma1sd.service'] if matrix_ma1sd_enabled else [])

  2506.     +

  2507.     (['matrix-client-cinny.service'] if matrix_client_cinny_enabled else [])

  2508.     +

  2509.     (['matrix-bot-buscarron.service'] if matrix_bot_buscarron_enabled else [])

  2510.     +

  2511.     (['matrix-client-element.service'] if matrix_client_element_enabled else [])

  2512.     +

  2513.     (['matrix-client-hydrogen.service'] if matrix_client_hydrogen_enabled else [])

  2514.     +

  2515.     ([(grafana_identifier + '.service')] if grafana_enabled else [])

  2516.     +

  2517.     (['matrix-dimension.service'] if matrix_dimension_enabled else [])

  2518.     +

  2519.     (['matrix-rageshake.service'] if matrix_rageshake_enabled else [])

  2520.     +

  2521.     (['matrix-sygnal.service'] if matrix_sygnal_enabled else [])

  2522.     +

  2523.     ([(ntfy_identifier + '.service')] if ntfy_enabled else [])

  2524.     +

  2525.     (['matrix-jitsi.service'] if matrix_jitsi_enabled else [])

  2526.     +

  2527.     (['matrix-bot-go-neb.service'] if matrix_bot_go_neb_enabled else [])

  2528.     +

  2529.     (['matrix-etherpad.service'] if matrix_etherpad_enabled else [])

  2530.     +

  2531.     (['matrix-hookshot.service'] if matrix_hookshot_enabled else [])

  2532.   }}

  2533. 

  2534. matrix_ssl_domains_to_obtain_certificates_for: |

  2535.   {{

  2536.     ([matrix_server_fqn_matrix])

  2537.     +

  2538.     ([matrix_server_fqn_element] if matrix_client_element_enabled else [])

  2539.     +

  2540.     ([matrix_nginx_proxy_proxy_riot_compat_redirect_hostname] if matrix_nginx_proxy_proxy_riot_compat_redirect_enabled else [])

  2541.     +

  2542.     ([matrix_server_fqn_hydrogen] if matrix_client_hydrogen_enabled else [])

  2543.     +

  2544.     ([matrix_server_fqn_cinny] if matrix_client_cinny_enabled else [])

  2545.     +

  2546.     ([matrix_server_fqn_buscarron] if matrix_bot_buscarron_enabled else [])

  2547.     +

  2548.     ([matrix_server_fqn_dimension] if matrix_dimension_enabled else [])

  2549.     +

  2550.     ([matrix_server_fqn_etherpad] if (matrix_etherpad_enabled and matrix_etherpad_mode == 'standalone') else [])

  2551.     +

  2552.     ([matrix_server_fqn_bot_go_neb] if matrix_bot_go_neb_enabled else [])

  2553.     +

  2554.     ([matrix_server_fqn_jitsi] if matrix_jitsi_enabled else [])

  2555.     +

  2556.     ([matrix_server_fqn_grafana] if grafana_enabled else [])

  2557.     +

  2558.     ([matrix_server_fqn_sygnal] if matrix_sygnal_enabled else [])

  2559.     +

  2560.     ([ntfy_hostname] if ntfy_enabled else [])

  2561.     +

  2562.     ([matrix_server_fqn_rageshake] if matrix_rageshake_enabled else [])

  2563.     +

  2564.     (matrix_bot_postmoogle_domains if matrix_bot_postmoogle_enabled else [])

  2565.     +

  2566.     ([matrix_domain] if matrix_nginx_proxy_base_domain_serving_enabled else [])

  2567.     +

  2568.     matrix_ssl_additional_domains_to_obtain_certificates_for

  2569.   }}

  2570. 

  2571. matrix_ssl_architecture: "{{

  2572. 	{

  2573. 		'amd64': 'amd64',

  2574. 		'arm32': 'arm32v6',

  2575. 		'arm64': 'arm64v8',

  2576. 	}[matrix_architecture]

  2577. }}"

  2578. 

  2579. matrix_ssl_pre_obtaining_required_service_name: "{{ 'matrix-dynamic-dns' if matrix_dynamic_dns_enabled else '' }}"

  2580. 

  2581. matrix_nginx_proxy_access_log_syslog_integration_enabled: "{{ matrix_prometheus_nginxlog_exporter_enabled }}"

  2582. matrix_nginx_proxy_access_log_syslog_integration_server_port: "{{ (matrix_prometheus_nginxlog_exporter_container_hostname | string +':'+ matrix_prometheus_nginxlog_exporter_container_syslog_port | string) | default('') }}"

  2583. 

  2584. ######################################################################

  2585. #

  2586. # /matrix-nginx-proxy

  2587. #

  2588. ######################################################################

  2589. 

  2590. 

  2591. ########################################################################

  2592. #                                                                      #

  2593. # com.devture.ansible.role.postgres                                    #

  2594. #                                                                      #

  2595. ########################################################################

  2596. 

  2597. # To completely disable installing Postgres, use `devture_postgres_enabled: false`.

  2598. 

  2599. devture_postgres_identifier: matrix-postgres

  2600. 

  2601. devture_postgres_architecture: "{{ matrix_architecture }}"

  2602. 

  2603. devture_postgres_base_path: "{{ matrix_base_data_path }}/postgres"

  2604. 

  2605. devture_postgres_container_network: "{{ matrix_docker_network }}"

  2606. 

  2607. devture_postgres_uid: "{{ matrix_user_uid }}"

  2608. devture_postgres_gid: "{{ matrix_user_gid }}"

  2609. 

  2610. devture_postgres_connection_username: matrix

  2611. devture_postgres_db_name: matrix

  2612. 

  2613. devture_postgres_systemd_services_to_stop_for_maintenance_list: |

  2614.   {{

  2615.     ['matrix-' + matrix_homeserver_implementation + '.service']

  2616.   }}

  2617. 

  2618. devture_postgres_managed_databases_auto: |

  2619.   {{

  2620.     ([{

  2621.       'name': matrix_synapse_database_database,

  2622.       'username': matrix_synapse_database_user,

  2623.       'password': matrix_synapse_database_password,

  2624.     }] if (matrix_synapse_enabled and matrix_synapse_database_host == devture_postgres_connection_hostname) else [])

  2625.     +

  2626.     ([{

  2627.       'name': matrix_dendrite_federationapi_database,

  2628.       'username': matrix_dendrite_database_user,

  2629.       'password': matrix_dendrite_database_password,

  2630.     },{

  2631.       'name': matrix_dendrite_keyserver_database,

  2632.       'username': matrix_dendrite_database_user,

  2633.       'password': matrix_dendrite_database_password,

  2634.     },{

  2635.       'name': matrix_dendrite_mediaapi_database,

  2636.       'username': matrix_dendrite_database_user,

  2637.       'password': matrix_dendrite_database_password,

  2638.     },{

  2639.       'name': matrix_dendrite_room_database,

  2640.       'username': matrix_dendrite_database_user,

  2641.       'password': matrix_dendrite_database_password,

  2642.     },{

  2643.       'name': matrix_dendrite_syncapi_database,

  2644.       'username': matrix_dendrite_database_user,

  2645.       'password': matrix_dendrite_database_password,

  2646.     },{

  2647.       'name': matrix_dendrite_userapi_database,

  2648.       'username': matrix_dendrite_database_user,

  2649.       'password': matrix_dendrite_database_password,

  2650.     },{

  2651.       'name': matrix_dendrite_pushserver_database,

  2652.       'username': matrix_dendrite_database_user,

  2653.       'password': matrix_dendrite_database_password,

  2654.     },{

  2655.       'name': matrix_dendrite_mscs_database,

  2656.       'username': matrix_dendrite_database_user,

  2657.       'password': matrix_dendrite_database_password,

  2658.     }] if (matrix_dendrite_enabled and matrix_dendrite_database_hostname == devture_postgres_connection_hostname) else [])

  2659.     +

  2660.     ([{

  2661.       'name': matrix_ma1sd_database_name,

  2662.       'username': matrix_ma1sd_database_username,

  2663.       'password': matrix_ma1sd_database_password,

  2664.     }] if (matrix_ma1sd_enabled and matrix_ma1sd_database_engine == 'postgres' and matrix_ma1sd_database_hostname == devture_postgres_connection_hostname) else [])

  2665.     +

  2666.     ([{

  2667.       'name': matrix_bot_matrix_reminder_bot_database_name,

  2668.       'username': matrix_bot_matrix_reminder_bot_database_username,

  2669.       'password': matrix_bot_matrix_reminder_bot_database_password,

  2670.     }] if (matrix_bot_matrix_reminder_bot_enabled and matrix_bot_matrix_reminder_bot_database_engine == 'postgres' and matrix_bot_matrix_reminder_bot_database_hostname == devture_postgres_connection_hostname) else [])

  2671.     +

  2672.     ([{

  2673.       'name': matrix_bot_honoroit_database_name,

  2674.       'username': matrix_bot_honoroit_database_username,

  2675.       'password': matrix_bot_honoroit_database_password,

  2676.     }] if (matrix_bot_honoroit_enabled and matrix_bot_honoroit_database_engine == 'postgres' and matrix_bot_honoroit_database_hostname == devture_postgres_connection_hostname) else [])

  2677.     +

  2678.     ([{

  2679.       'name': matrix_bot_postmoogle_database_name,

  2680.       'username': matrix_bot_postmoogle_database_username,

  2681.       'password': matrix_bot_postmoogle_database_password,

  2682.     }] if (matrix_bot_postmoogle_enabled and matrix_bot_postmoogle_database_engine == 'postgres' and matrix_bot_postmoogle_database_hostname == devture_postgres_connection_hostname) else [])

  2683.     +

  2684.     ([{

  2685.       'name': matrix_bot_maubot_database_name,

  2686.       'username': matrix_bot_maubot_database_username,

  2687.       'password': matrix_bot_maubot_database_password,

  2688.     }] if (matrix_bot_maubot_enabled  and matrix_bot_maubot_database_engine == 'postgres' and matrix_bot_maubot_database_hostname == devture_postgres_connection_hostname) else [])

  2689.     +

  2690.     ([{

  2691.       'name': matrix_bot_buscarron_database_name,

  2692.       'username': matrix_bot_buscarron_database_username,

  2693.       'password': matrix_bot_buscarron_database_password,

  2694.     }] if (matrix_bot_buscarron_enabled and matrix_bot_buscarron_database_engine == 'postgres' and matrix_bot_buscarron_database_hostname == devture_postgres_connection_hostname) else [])

  2695.     +

  2696.     ([{

  2697.       'name': matrix_registration_database_name,

  2698.       'username': matrix_registration_database_username,

  2699.       'password': matrix_registration_database_password,

  2700.     }] if (matrix_registration_enabled and matrix_registration_database_engine == 'postgres' and matrix_registration_database_hostname == devture_postgres_connection_hostname) else [])

  2701.     +

  2702.     ([{

  2703.       'name': matrix_appservice_discord_database_name,

  2704.       'username': matrix_appservice_discord_database_username,

  2705.       'password': matrix_appservice_discord_database_password,

  2706.     }] if (matrix_appservice_discord_enabled and matrix_appservice_discord_database_engine == 'postgres' and matrix_appservice_discord_database_hostname == devture_postgres_connection_hostname) else [])

  2707.     +

  2708.     ([{

  2709.       'name': matrix_appservice_slack_database_name,

  2710.       'username': matrix_appservice_slack_database_username,

  2711.       'password': matrix_appservice_slack_database_password,

  2712.     }] if (matrix_appservice_slack_enabled and matrix_appservice_slack_database_engine == 'postgres' and matrix_appservice_slack_database_hostname == devture_postgres_connection_hostname) else [])

  2713.     +

  2714.     ([{

  2715.       'name': matrix_appservice_irc_database_name,

  2716.       'username': matrix_appservice_irc_database_username,

  2717.       'password': matrix_appservice_irc_database_password,

  2718.     }] if (matrix_appservice_irc_enabled and matrix_appservice_irc_database_engine == 'postgres' and matrix_appservice_irc_database_hostname == devture_postgres_connection_hostname) else [])

  2719.     +

  2720.     ([{

  2721.       'name': matrix_appservice_kakaotalk_database_name,

  2722.       'username': matrix_appservice_kakaotalk_database_username,

  2723.       'password': matrix_appservice_kakaotalk_database_password,

  2724.     }] if (matrix_appservice_kakaotalk_enabled and matrix_appservice_kakaotalk_database_engine == 'postgres' and matrix_appservice_kakaotalk_database_hostname == devture_postgres_connection_hostname) else [])

  2725.     +

  2726.     ([{

  2727.       'name': matrix_beeper_linkedin_database_name,

  2728.       'username': matrix_beeper_linkedin_database_username,

  2729.       'password': matrix_beeper_linkedin_database_password,

  2730.     }] if (matrix_beeper_linkedin_enabled and matrix_beeper_linkedin_database_engine == 'postgres' and matrix_beeper_linkedin_database_hostname == devture_postgres_connection_hostname) else [])

  2731.     +

  2732.     ([{

  2733.       'name': matrix_go_skype_bridge_database_name,

  2734.       'username': matrix_go_skype_bridge_database_username,

  2735.       'password': matrix_go_skype_bridge_database_password,

  2736.     }] if (matrix_go_skype_bridge_enabled and matrix_go_skype_bridge_database_engine == 'postgres' and matrix_go_skype_bridge_database_hostname == devture_postgres_connection_hostname) else [])

  2737.     +

  2738.     ([{

  2739.       'name': matrix_mautrix_facebook_database_name,

  2740.       'username': matrix_mautrix_facebook_database_username,

  2741.       'password': matrix_mautrix_facebook_database_password,

  2742.     }] if (matrix_mautrix_facebook_enabled and matrix_mautrix_facebook_database_engine == 'postgres' and matrix_mautrix_facebook_database_hostname == devture_postgres_connection_hostname) else [])

  2743.     +

  2744.     ([{

  2745.       'name': matrix_mautrix_hangouts_database_name,

  2746.       'username': matrix_mautrix_hangouts_database_username,

  2747.       'password': matrix_mautrix_hangouts_database_password,

  2748.     }] if (matrix_mautrix_hangouts_enabled and matrix_mautrix_hangouts_database_engine == 'postgres' and matrix_mautrix_hangouts_database_hostname == devture_postgres_connection_hostname) else [])

  2749.     +

  2750.     ([{

  2751.       'name': matrix_mautrix_googlechat_database_name,

  2752.       'username': matrix_mautrix_googlechat_database_username,

  2753.       'password': matrix_mautrix_googlechat_database_password,

  2754.     }] if (matrix_mautrix_googlechat_enabled and matrix_mautrix_googlechat_database_engine == 'postgres' and matrix_mautrix_googlechat_database_hostname == devture_postgres_connection_hostname) else [])

  2755.     +

  2756.     ([{

  2757.       'name': matrix_mautrix_instagram_database_name,

  2758.       'username': matrix_mautrix_instagram_database_username,

  2759.       'password': matrix_mautrix_instagram_database_password,

  2760.     }] if (matrix_mautrix_instagram_enabled and matrix_mautrix_instagram_database_engine == 'postgres' and matrix_mautrix_instagram_database_hostname == devture_postgres_connection_hostname) else [])

  2761.     +

  2762.     ([{

  2763.       'name': matrix_mautrix_signal_database_name,

  2764.       'username': matrix_mautrix_signal_database_username,

  2765.       'password': matrix_mautrix_signal_database_password,

  2766.     }] if (matrix_mautrix_signal_enabled and matrix_mautrix_signal_database_engine == 'postgres' and matrix_mautrix_signal_database_hostname == devture_postgres_connection_hostname) else [])

  2767.     +

  2768.     ([{

  2769.       'name': matrix_mautrix_telegram_database_name,

  2770.       'username': matrix_mautrix_telegram_database_username,

  2771.       'password': matrix_mautrix_telegram_database_password,

  2772.     }] if (matrix_mautrix_telegram_enabled and matrix_mautrix_telegram_database_engine == 'postgres' and matrix_mautrix_telegram_database_hostname == devture_postgres_connection_hostname) else [])

  2773.     +

  2774.     ([{

  2775.       'name': matrix_mautrix_twitter_database_name,

  2776.       'username': matrix_mautrix_twitter_database_username,

  2777.       'password': matrix_mautrix_twitter_database_password,

  2778.     }] if (matrix_mautrix_twitter_enabled and matrix_mautrix_twitter_database_engine == 'postgres' and matrix_mautrix_twitter_database_hostname == devture_postgres_connection_hostname) else [])

  2779.     +

  2780.     ([{

  2781.       'name': matrix_mautrix_whatsapp_database_name,

  2782.       'username': matrix_mautrix_whatsapp_database_username,

  2783.       'password': matrix_mautrix_whatsapp_database_password,

  2784.     }] if (matrix_mautrix_whatsapp_enabled and matrix_mautrix_whatsapp_database_engine == 'postgres' and matrix_mautrix_whatsapp_database_hostname == devture_postgres_connection_hostname) else [])

  2785.     +

  2786.     ([{

  2787.       'name': matrix_mautrix_discord_database_name,

  2788.       'username': matrix_mautrix_discord_database_username,

  2789.       'password': matrix_mautrix_discord_database_password,

  2790.     }] if (matrix_mautrix_discord_enabled and matrix_mautrix_discord_database_engine == 'postgres' and matrix_mautrix_discord_database_hostname == devture_postgres_connection_hostname) else [])

  2791.     +

  2792.     ([{

  2793.       'name': matrix_mautrix_slack_database_name,

  2794.       'username': matrix_mautrix_slack_database_username,

  2795.       'password': matrix_mautrix_slack_database_password,

  2796.     }] if (matrix_mautrix_slack_enabled and matrix_mautrix_slack_database_engine == 'postgres' and matrix_mautrix_slack_database_hostname == devture_postgres_connection_hostname) else [])

  2797.     +

  2798.     ([{

  2799.       'name': matrix_mx_puppet_slack_database_name,

  2800.       'username': matrix_mx_puppet_slack_database_username,

  2801.       'password': matrix_mx_puppet_slack_database_password,

  2802.     }] if (matrix_mx_puppet_slack_enabled and matrix_mx_puppet_slack_database_engine == 'postgres' and matrix_mx_puppet_slack_database_hostname == devture_postgres_connection_hostname) else [])

  2803.     +

  2804.     ([{

  2805.       'name': matrix_mx_puppet_twitter_database_name,

  2806.       'username': matrix_mx_puppet_twitter_database_username,

  2807.       'password': matrix_mx_puppet_twitter_database_password,

  2808.     }] if (matrix_mx_puppet_twitter_enabled and matrix_mx_puppet_twitter_database_engine == 'postgres' and matrix_mx_puppet_twitter_database_hostname == devture_postgres_connection_hostname) else [])

  2809.     +

  2810.     ([{

  2811.       'name': matrix_mx_puppet_instagram_database_name,

  2812.       'username': matrix_mx_puppet_instagram_database_username,

  2813.       'password': matrix_mx_puppet_instagram_database_password,

  2814.     }] if (matrix_mx_puppet_instagram_enabled and matrix_mx_puppet_instagram_database_engine == 'postgres' and matrix_mx_puppet_instagram_database_hostname == devture_postgres_connection_hostname) else [])

  2815.     +

  2816.     ([{

  2817.       'name': matrix_mx_puppet_discord_database_name,

  2818.       'username': matrix_mx_puppet_discord_database_username,

  2819.       'password': matrix_mx_puppet_discord_database_password,

  2820.     }] if (matrix_mx_puppet_discord_enabled  and matrix_mx_puppet_discord_database_engine == 'postgres' and matrix_mx_puppet_discord_database_hostname == devture_postgres_connection_hostname) else [])

  2821.     +

  2822.     ([{

  2823.       'name': matrix_mx_puppet_steam_database_name,

  2824.       'username': matrix_mx_puppet_steam_database_username,

  2825.       'password': matrix_mx_puppet_steam_database_password,

  2826.     }] if (matrix_mx_puppet_steam_enabled and matrix_mx_puppet_steam_database_engine == 'postgres' and matrix_mx_puppet_steam_database_hostname == devture_postgres_connection_hostname) else [])

  2827.     +

  2828.     ([{

  2829.       'name': matrix_mx_puppet_groupme_database_name,

  2830.       'username': matrix_mx_puppet_groupme_database_username,

  2831.       'password': matrix_mx_puppet_groupme_database_password,

  2832.     }] if (matrix_mx_puppet_groupme_enabled and matrix_mx_puppet_groupme_database_engine == 'postgres' and matrix_mx_puppet_groupme_database_hostname == devture_postgres_connection_hostname) else [])

  2833.     +

  2834.     ([{

  2835.       'name': matrix_dimension_database_name,

  2836.       'username': matrix_dimension_database_username,

  2837.       'password': matrix_dimension_database_password,

  2838.     }] if (matrix_dimension_enabled and matrix_dimension_database_engine == 'postgres' and matrix_dimension_database_hostname == devture_postgres_connection_hostname) else [])

  2839.     +

  2840.     ([{

  2841.       'name': matrix_etherpad_database_name,

  2842.       'username': matrix_etherpad_database_username,

  2843.       'password': matrix_etherpad_database_password,

  2844.     }] if (matrix_etherpad_enabled and matrix_etherpad_database_engine == 'postgres' and matrix_etherpad_database_hostname == devture_postgres_connection_hostname) else [])

  2845.     +

  2846.     ([{

  2847.       'name': prometheus_postgres_exporter_database_name,

  2848.       'username': prometheus_postgres_exporter_database_username,

  2849.       'password': prometheus_postgres_exporter_database_password,

  2850.     }] if (prometheus_postgres_exporter_enabled and prometheus_postgres_exporter_database_hostname == devture_postgres_connection_hostname) else [])

  2851. 

  2852.    }}

  2853. 

  2854. ########################################################################

  2855. #                                                                      #

  2856. # /com.devture.ansible.role.postgres                                   #

  2857. #                                                                      #

  2858. ########################################################################

  2859. 

  2860. 

  2861. ########################################################################

  2862. #                                                                      #

  2863. # com.devture.ansible.role.postgres_backup                             #

  2864. #                                                                      #

  2865. ########################################################################

  2866. 

  2867. devture_postgres_backup_enabled: false

  2868. 

  2869. devture_postgres_backup_identifier: matrix-postgres-backup

  2870. 

  2871. devture_postgres_backup_architecture: "{{ matrix_architecture }}"

  2872. 

  2873. devture_postgres_backup_base_path: "{{ matrix_base_data_path }}/postgres-backup"

  2874. 

  2875. devture_postgres_backup_systemd_required_services_list: |

  2876.   {{

  2877.     (['docker.service'])

  2878.     +

  2879.     ([(devture_postgres_identifier + '.service')] if devture_postgres_enabled else [])

  2880.   }}

  2881. 

  2882. devture_postgres_backup_container_network: "{{ matrix_docker_network }}"

  2883. 

  2884. devture_postgres_backup_uid: "{{ matrix_user_uid }}"

  2885. devture_postgres_backup_gid: "{{ matrix_user_gid }}"

  2886. 

  2887. devture_postgres_backup_connection_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  2888. devture_postgres_backup_connection_port: "{{ devture_postgres_connection_port if devture_postgres_enabled else 5432 }}"

  2889. devture_postgres_backup_connection_username: "{{ devture_postgres_connection_username if devture_postgres_enabled else '' }}"

  2890. devture_postgres_backup_connection_password: "{{ devture_postgres_connection_password if devture_postgres_enabled else '' }}"

  2891. 

  2892. devture_postgres_backup_postgres_data_path: "{{ devture_postgres_data_path if devture_postgres_enabled else '' }}"

  2893. 

  2894. devture_postgres_backup_databases: "{{ devture_postgres_managed_databases | map(attribute='name') if devture_postgres_enabled else [] }}"

  2895. 

  2896. ########################################################################

  2897. #                                                                      #

  2898. # /com.devture.ansible.role.postgres_backup                            #

  2899. #                                                                      #

  2900. ########################################################################

  2901. 

  2902. 

  2903. ######################################################################

  2904. #

  2905. # matrix-sygnal

  2906. #

  2907. ######################################################################

  2908. 

  2909. # Most people don't need their own push-server, because they also need their own app to utilize it from.

  2910. matrix_sygnal_enabled: false

  2911. 

  2912. # If someone instals Prometheus via the playbook, they most likely wish to monitor Sygnal.

  2913. matrix_sygnal_metrics_prometheus_enabled: "{{ matrix_prometheus_enabled }}"

  2914. 

  2915. matrix_sygnal_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '6000') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  2916. 

  2917. ######################################################################

  2918. #

  2919. # /matrix-sygnal

  2920. #

  2921. ######################################################################

  2922. 

  2923. ######################################################################

  2924. #

  2925. # etke/ntfy

  2926. #

  2927. ######################################################################

  2928. 

  2929. ntfy_enabled: false

  2930. 

  2931. ntfy_identifier: matrix-ntfy

  2932. 

  2933. ntfy_base_path: "{{ matrix_base_data_path }}/ntfy"

  2934. 

  2935. ntfy_uid: "{{ matrix_user_uid }}"

  2936. ntfy_gid: "{{ matrix_user_gid }}"

  2937. 

  2938. ntfy_hostname: "{{ matrix_server_fqn_ntfy }}"

  2939. 

  2940. ntfy_container_network: "{{ matrix_nginx_proxy_container_network if matrix_playbook_reverse_proxy_type == 'playbook-managed-nginx' else ntfy_identifier }}"

  2941. 

  2942. ntfy_container_additional_networks: "{{ [matrix_playbook_reverse_proxyable_services_additional_network] if matrix_playbook_reverse_proxyable_services_additional_network else [] }}"

  2943. 

  2944. ntfy_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '2586') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  2945. 

  2946. ntfy_container_labels_traefik_enabled: "{{ matrix_playbook_traefik_labels_enabled }}"

  2947. ntfy_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  2948. ntfy_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  2949. 

  2950. ntfy_visitor_request_limit_exempt_hosts_hostnames_auto: |

  2951.   {{

  2952.     [matrix_server_fqn_matrix]

  2953.   }}

  2954. 

  2955. ######################################################################

  2956. #

  2957. # /etky/ntfy

  2958. #

  2959. ######################################################################

  2960. 

  2961. ######################################################################

  2962. #

  2963. # etke/redis

  2964. #

  2965. ######################################################################

  2966. 

  2967. redis_enabled: "{{ matrix_synapse_workers_enabled }}"

  2968. 

  2969. redis_identifier: matrix-redis

  2970. 

  2971. redis_uid: "{{ matrix_user_uid }}"

  2972. redis_gid: "{{ matrix_user_gid }}"

  2973. 

  2974. redis_base_path: "{{ matrix_base_data_path }}/redis"

  2975. 

  2976. ######################################################################

  2977. #

  2978. # /etle/redis

  2979. #

  2980. ######################################################################

  2981. 

  2982. ######################################################################

  2983. #

  2984. # matrix-client-element

  2985. #

  2986. ######################################################################

  2987. 

  2988. # By default, this playbook installs the Element web UI on the `matrix_server_fqn_element` domain.

  2989. # If you wish to connect to your Matrix server by other means, you may wish to disable this.

  2990. matrix_client_element_enabled: true

  2991. 

  2992. matrix_client_element_container_image_self_build: "{{ matrix_architecture not in ['arm64', 'amd64'] }}"

  2993. 

  2994. # Normally, matrix-nginx-proxy is enabled and nginx can reach Element over the container network.

  2995. # If matrix-nginx-proxy is not enabled, or you otherwise have a need for it, you can expose

  2996. # the Element HTTP port to the local host.

  2997. matrix_client_element_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '8765') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  2998. 

  2999. matrix_client_element_container_network: "{{ matrix_nginx_proxy_container_network if matrix_playbook_reverse_proxy_type == 'playbook-managed-nginx' else 'matrix-client-element' }}"

  3000. 

  3001. matrix_client_element_container_additional_networks: "{{ [matrix_playbook_reverse_proxyable_services_additional_network] if matrix_playbook_reverse_proxyable_services_additional_network else [] }}"

  3002. 

  3003. matrix_client_element_container_labels_traefik_enabled: "{{ matrix_playbook_reverse_proxy_type in ['playbook-managed-traefik', 'other-traefik-container'] }}"

  3004. matrix_client_element_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  3005. matrix_client_element_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  3006. 

  3007. matrix_client_element_default_hs_url: "{{ matrix_homeserver_url }}"

  3008. matrix_client_element_default_is_url: "{{ matrix_identity_server_url }}"

  3009. 

  3010. # Use Dimension if enabled, otherwise fall back to Scalar

  3011. matrix_client_element_integrations_ui_url: "{{ matrix_dimension_integrations_ui_url if matrix_dimension_enabled else 'https://scalar.vector.im/' }}"

  3012. matrix_client_element_integrations_rest_url: "{{ matrix_dimension_integrations_rest_url if matrix_dimension_enabled else 'https://scalar.vector.im/api' }}"

  3013. matrix_client_element_integrations_widgets_urls: "{{ matrix_dimension_integrations_widgets_urls if matrix_dimension_enabled else ['https://scalar.vector.im/api'] }}"

  3014. matrix_client_element_integrations_jitsi_widget_url: "{{ matrix_dimension_integrations_jitsi_widget_url if matrix_dimension_enabled else 'https://scalar.vector.im/api/widgets/jitsi.html' }}"

  3015. 

  3016. matrix_client_element_self_check_validate_certificates: "{{ false if matrix_playbook_ssl_retrieval_method == 'self-signed' else true }}"

  3017. 

  3018. matrix_client_element_registration_enabled: "{{ matrix_synapse_enable_registration }}"

  3019. 

  3020. matrix_client_element_enable_presence_by_hs_url: |

  3021.   {{

  3022.     none

  3023.     if matrix_synapse_presence_enabled

  3024.     else {matrix_client_element_default_hs_url: false}

  3025.   }}

  3026. 

  3027. matrix_client_element_welcome_user_id: ~

  3028. 

  3029. matrix_client_element_jitsi_preferredDomain: "{{ matrix_server_fqn_jitsi if matrix_jitsi_enabled else '' }}"

  3030. 

  3031. ######################################################################

  3032. #

  3033. # /matrix-client-element

  3034. #

  3035. ######################################################################

  3036. 

  3037. ######################################################################

  3038. #

  3039. # matrix-client-hydrogen

  3040. #

  3041. ######################################################################

  3042. 

  3043. matrix_client_hydrogen_enabled: false

  3044. 

  3045. matrix_client_hydrogen_container_image_self_build: "{{ matrix_architecture not in ['amd64'] }}"

  3046. 

  3047. # Normally, matrix-nginx-proxy is enabled and nginx can reach Hydrogen over the container network.

  3048. # If matrix-nginx-proxy is not enabled, or you otherwise have a need for it, you can expose

  3049. # the HTTP port to the local host.

  3050. matrix_client_hydrogen_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '8768') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  3051. 

  3052. matrix_client_hydrogen_container_network: "{{ matrix_nginx_proxy_container_network if matrix_playbook_reverse_proxy_type == 'playbook-managed-nginx' else 'matrix-client-hydrogen' }}"

  3053. 

  3054. matrix_client_hydrogen_container_additional_networks: "{{ [matrix_playbook_reverse_proxyable_services_additional_network] if matrix_playbook_reverse_proxyable_services_additional_network else [] }}"

  3055. 

  3056. matrix_client_hydrogen_container_labels_traefik_enabled: "{{ matrix_playbook_reverse_proxy_type in ['playbook-managed-traefik', 'other-traefik-container'] }}"

  3057. matrix_client_hydrogen_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  3058. matrix_client_hydrogen_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  3059. 

  3060. matrix_client_hydrogen_default_hs_url: "{{ matrix_homeserver_url }}"

  3061. 

  3062. matrix_client_hydrogen_self_check_validate_certificates: "{{ false if matrix_playbook_ssl_retrieval_method == 'self-signed' else true }}"

  3063. 

  3064. ######################################################################

  3065. #

  3066. # /matrix-client-hydrogen

  3067. #

  3068. ######################################################################

  3069. 

  3070. ######################################################################

  3071. #

  3072. # matrix-client-cinny

  3073. #

  3074. ######################################################################

  3075. 

  3076. matrix_client_cinny_enabled: false

  3077. 

  3078. matrix_client_cinny_container_image_self_build: "{{ matrix_architecture not in ['arm64', 'amd64'] }}"

  3079. 

  3080. # Normally, matrix-nginx-proxy is enabled and nginx can reach Cinny over the container network.

  3081. # If matrix-nginx-proxy is not enabled, or you otherwise have a need for it, you can expose

  3082. # the HTTP port to the local host.

  3083. matrix_client_cinny_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '8080') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  3084. 

  3085. matrix_client_cinny_container_network: "{{ matrix_nginx_proxy_container_network if matrix_playbook_reverse_proxy_type == 'playbook-managed-nginx' else 'matrix-client-cinny' }}"

  3086. 

  3087. matrix_client_cinny_container_additional_networks: "{{ [matrix_playbook_reverse_proxyable_services_additional_network] if matrix_playbook_reverse_proxyable_services_additional_network else [] }}"

  3088. 

  3089. matrix_client_cinny_container_labels_traefik_enabled: "{{ matrix_playbook_reverse_proxy_type in ['playbook-managed-traefik', 'other-traefik-container'] }}"

  3090. matrix_client_cinny_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  3091. matrix_client_cinny_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  3092. 

  3093. matrix_client_cinny_default_hs_url: "{{ matrix_homeserver_url }}"

  3094. 

  3095. matrix_client_cinny_self_check_validate_certificates: "{{ false if matrix_playbook_ssl_retrieval_method == 'self-signed' else true }}"

  3096. 

  3097. ######################################################################

  3098. #

  3099. # /matrix-client-cinny

  3100. #

  3101. ######################################################################

  3102. 

  3103. ######################################################################

  3104. #

  3105. # matrix-synapse

  3106. #

  3107. ######################################################################

  3108. 

  3109. matrix_synapse_enabled: "{{ matrix_homeserver_implementation == 'synapse' }}"

  3110. 

  3111. matrix_synapse_username: "{{ matrix_user_username }}"

  3112. matrix_synapse_uid: "{{ matrix_user_uid }}"

  3113. matrix_synapse_gid: "{{ matrix_user_gid }}"

  3114. 

  3115. matrix_synapse_container_image_self_build: "{{ matrix_architecture not in ['arm64', 'amd64'] }}"

  3116. 

  3117. # When ma1sd is enabled, we can use it to validate phone numbers. It's something that the homeserver cannot do by itself.

  3118. matrix_synapse_account_threepid_delegates_msisdn: "{{ 'http://matrix-ma1sd:' + matrix_ma1sd_container_port | string if matrix_ma1sd_enabled else '' }}"

  3119. 

  3120. # For exposing the Matrix Federation API's TLS port (HTTPS) to the internet on all network interfaces.

  3121. matrix_synapse_container_federation_api_tls_host_bind_port: "{{ matrix_federation_public_port if (matrix_synapse_federation_enabled and matrix_synapse_tls_federation_listener_enabled) else '' }}"

  3122. #

  3123. # For exposing the Synapse Metrics API's port (plain HTTP) to the local host.

  3124. matrix_synapse_container_metrics_api_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '9100') if matrix_synapse_metrics_enabled and matrix_playbook_service_host_bind_interface_prefix else '' }}"

  3125. #

  3126. # For exposing the Synapse Manhole port (plain HTTP) to the local host.

  3127. matrix_synapse_container_manhole_api_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '9000') if matrix_synapse_metrics_enabled and matrix_playbook_service_host_bind_interface_prefix else '' }}"

  3128. 

  3129. matrix_synapse_container_additional_networks: |

  3130.   {{

  3131.     ([redis_container_network] if matrix_synapse_redis_enabled and matrix_synapse_redis_host == redis_identifier else [])

  3132.   }}

  3133. 

  3134. # For exposing the Synapse worker (and metrics) ports to the local host.

  3135. matrix_synapse_workers_container_host_bind_address: "{{ matrix_playbook_service_host_bind_interface_prefix[0:-1] if (matrix_synapse_workers_enabled and matrix_playbook_service_host_bind_interface_prefix) else '' }}"

  3136. 

  3137. matrix_synapse_database_host: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  3138. matrix_synapse_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'synapse.db', rounds=655555) | to_uuid }}"

  3139. 

  3140. matrix_synapse_macaroon_secret_key: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'synapse.mac', rounds=655555) | to_uuid }}"

  3141. 

  3142. # We do not enable TLS in Synapse by default.

  3143. # TLS is handled by the matrix-nginx-proxy, which proxies the requests to Synapse.

  3144. matrix_synapse_tls_federation_listener_enabled: false

  3145. matrix_synapse_tls_certificate_path: ~

  3146. matrix_synapse_tls_private_key_path: ~

  3147. 

  3148. matrix_synapse_federation_port_openid_resource_required: "{{ not matrix_synapse_federation_enabled and (matrix_dimension_enabled or matrix_ma1sd_enabled or matrix_user_verification_service_enabled) }}"

  3149. 

  3150. # If someone instals Prometheus via the playbook, they most likely wish to monitor Synapse.

  3151. matrix_synapse_metrics_enabled: "{{ matrix_prometheus_enabled }}"

  3152. 

  3153. matrix_synapse_email_enabled: "{{ matrix_mailer_enabled }}"

  3154. matrix_synapse_email_smtp_host: "matrix-mailer"

  3155. matrix_synapse_email_smtp_port: 8025

  3156. matrix_synapse_email_smtp_require_transport_security: false

  3157. matrix_synapse_email_notif_from: "Matrix <{{ matrix_mailer_sender_address }}>"

  3158. 

  3159. # Even if TURN doesn't support TLS (it does by default),

  3160. # it doesn't hurt to try a secure connection anyway.

  3161. #

  3162. # When Let's Encrypt certificates are used (the default case),

  3163. # we don't enable `turns` endpoints, because WebRTC in Element can't talk to them.

  3164. # Learn more here: https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1145

  3165. matrix_synapse_turn_uris: |

  3166.   {{

  3167.     []

  3168.     +

  3169.     [

  3170.       'turns:' + matrix_server_fqn_matrix + '?transport=udp',

  3171.       'turns:' + matrix_server_fqn_matrix + '?transport=tcp',

  3172.     ] if matrix_coturn_enabled and matrix_coturn_tls_enabled and matrix_playbook_ssl_retrieval_method != 'lets-encrypt' else []

  3173.     +

  3174.     [

  3175.       'turn:' + matrix_server_fqn_matrix + '?transport=udp',

  3176.       'turn:' + matrix_server_fqn_matrix + '?transport=tcp',

  3177.     ] if matrix_coturn_enabled else []

  3178.   }}

  3179. 

  3180. matrix_synapse_turn_shared_secret: "{{ matrix_coturn_turn_static_auth_secret if matrix_coturn_enabled else '' }}"

  3181. 

  3182. matrix_synapse_self_check_validate_certificates: "{{ false if matrix_playbook_ssl_retrieval_method == 'self-signed' else true }}"

  3183. 

  3184. matrix_synapse_systemd_required_services_list: |

  3185.   {{

  3186.     (['docker.service'])

  3187.     +

  3188.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  3189.     +

  3190.     ([redis_identifier ~ '.service'] if matrix_synapse_redis_enabled and matrix_synapse_redis_host == redis_identifier else [])

  3191.     +

  3192.     (['matrix-goofys.service'] if matrix_s3_media_store_enabled else [])

  3193.   }}

  3194. 

  3195. matrix_synapse_systemd_wanted_services_list: |

  3196.   {{

  3197.     (['matrix-coturn.service'] if matrix_coturn_enabled else [])

  3198.     +

  3199.     (['matrix-mailer.service'] if matrix_mailer_enabled else [])

  3200.   }}

  3201. 

  3202. # Synapse workers (used for parallel load-scaling) need Redis for IPC.

  3203. matrix_synapse_redis_enabled: "{{ redis_enabled }}"

  3204. matrix_synapse_redis_host: "{{ redis_identifier if redis_enabled else '' }}"

  3205. matrix_synapse_redis_password: "{{ redis_connection_password if redis_enabled else '' }}"

  3206. 

  3207. matrix_synapse_container_extra_arguments_auto: "{{ matrix_homeserver_container_extra_arguments_auto }}"

  3208. matrix_synapse_app_service_config_files_auto: "{{ matrix_homeserver_app_service_config_files_auto }}"

  3209. 

  3210. ######################################################################

  3211. #

  3212. # /matrix-synapse

  3213. #

  3214. ######################################################################

  3215. 

  3216. ######################################################################

  3217. #

  3218. # matrix-synapse-reverse-proxy-companion

  3219. #

  3220. ######################################################################

  3221. 

  3222. matrix_synapse_reverse_proxy_companion_enabled: "{{ matrix_synapse_enabled }}"

  3223. 

  3224. matrix_synapse_reverse_proxy_companion_client_api_client_max_body_size_mb: "{{ matrix_synapse_max_upload_size_mb }}"

  3225. 

  3226. matrix_synapse_reverse_proxy_companion_container_client_api_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '8008') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  3227. matrix_synapse_reverse_proxy_companion_container_federation_api_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '8048') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  3228. 

  3229. matrix_synapse_reverse_proxy_companion_synapse_workers_enabled: "{{ matrix_synapse_workers_enabled }}"

  3230. matrix_synapse_reverse_proxy_companion_synapse_workers_list: "{{ matrix_synapse_workers_enabled_list }}"

  3231. matrix_synapse_reverse_proxy_companion_synapse_generic_worker_client_server_locations: "{{ matrix_synapse_workers_generic_worker_client_server_endpoints }}"

  3232. matrix_synapse_reverse_proxy_companion_synapse_generic_worker_federation_locations: "{{ matrix_synapse_workers_generic_worker_federation_endpoints }}"

  3233. matrix_synapse_reverse_proxy_companion_synapse_stream_writer_typing_stream_worker_client_server_locations: "{{ matrix_synapse_workers_stream_writer_typing_stream_worker_client_server_endpoints }}"

  3234. matrix_synapse_reverse_proxy_companion_synapse_stream_writer_to_device_stream_worker_client_server_locations: "{{ matrix_synapse_workers_stream_writer_to_device_stream_worker_client_server_endpoints }}"

  3235. matrix_synapse_reverse_proxy_companion_synapse_stream_writer_account_data_stream_worker_client_server_locations: "{{ matrix_synapse_workers_stream_writer_account_data_stream_worker_client_server_endpoints }}"

  3236. matrix_synapse_reverse_proxy_companion_synapse_stream_writer_receipts_stream_worker_client_server_locations: "{{ matrix_synapse_workers_stream_writer_receipts_stream_worker_client_server_endpoints }}"

  3237. matrix_synapse_reverse_proxy_companion_synapse_stream_writer_presence_stream_worker_client_server_locations: "{{ matrix_synapse_workers_stream_writer_presence_stream_worker_client_server_endpoints }}"

  3238. matrix_synapse_reverse_proxy_companion_synapse_media_repository_locations: "{{matrix_synapse_workers_media_repository_endpoints|default([]) }}"

  3239. matrix_synapse_reverse_proxy_companion_synapse_user_dir_locations: "{{ matrix_synapse_workers_user_dir_worker_client_server_endpoints|default([]) }}"

  3240. 

  3241. matrix_synapse_reverse_proxy_companion_access_log_syslog_integration_enabled: "{{ matrix_prometheus_nginxlog_exporter_enabled }}"

  3242. matrix_synapse_reverse_proxy_companion_access_log_syslog_integration_server_port: "{{ (matrix_prometheus_nginxlog_exporter_container_hostname | string +':'+ matrix_prometheus_nginxlog_exporter_container_syslog_port | string) | default('') }}"

  3243. 

  3244. ######################################################################

  3245. #

  3246. # /matrix-synapse-reverse-proxy-companion

  3247. #

  3248. ######################################################################

  3249. 

  3250. ######################################################################

  3251. #

  3252. # matrix-synapse-admin

  3253. #

  3254. ######################################################################

  3255. 

  3256. matrix_synapse_admin_enabled: false

  3257. 

  3258. matrix_synapse_admin_nginx_proxy_integration_enabled: "{{ matrix_playbook_reverse_proxy_type in ['playbook-managed-nginx', 'other-nginx-non-container'] }}"

  3259. 

  3260. matrix_synapse_admin_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '8766') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  3261. 

  3262. matrix_synapse_admin_container_image_self_build: "{{ matrix_architecture not in ['arm64', 'amd64'] }}"

  3263. 

  3264. matrix_synapse_admin_container_network: "{{ matrix_nginx_proxy_container_network if matrix_playbook_reverse_proxy_type == 'playbook-managed-nginx' else 'matrix-synapse-admin' }}"

  3265. 

  3266. matrix_synapse_admin_container_additional_networks: "{{ [matrix_playbook_reverse_proxyable_services_additional_network] if matrix_playbook_reverse_proxyable_services_additional_network else [] }}"

  3267. 

  3268. matrix_synapse_admin_container_labels_traefik_enabled: "{{ matrix_playbook_reverse_proxy_type in ['playbook-managed-traefik', 'other-traefik-container'] }}"

  3269. matrix_synapse_admin_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  3270. matrix_synapse_admin_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  3271. 

  3272. ######################################################################

  3273. #

  3274. # /matrix-synapse-admin

  3275. #

  3276. ######################################################################

  3277. 

  3278. ######################################################################

  3279. #

  3280. # etke/prometheus_node_exporter

  3281. #

  3282. ######################################################################

  3283. 

  3284. prometheus_node_exporter_enabled: false

  3285. 

  3286. prometheus_node_exporter_identifier: matrix-prometheus-node-exporter

  3287. 

  3288. prometheus_node_exporter_base_path: "{{ matrix_base_data_path }}/prometheus-node-exporter"

  3289. 

  3290. prometheus_node_exporter_uid: "{{ matrix_user_uid }}"

  3291. prometheus_node_exporter_gid: "{{ matrix_user_gid }}"

  3292. 

  3293. prometheus_node_exporter_server_fqn: "{{ matrix_server_fqn_matrix }}"

  3294. 

  3295. prometheus_node_exporter_container_network: "{{ matrix_docker_network }}"

  3296. 

  3297. prometheus_node_exporter_container_additional_networks: "{{ [matrix_playbook_reverse_proxyable_services_additional_network] if matrix_playbook_reverse_proxyable_services_additional_network else [] }}"

  3298. 

  3299. prometheus_node_exporter_container_labels_traefik_enabled: false

  3300. prometheus_node_exporter_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  3301. prometheus_node_exporter_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  3302. 

  3303. ######################################################################

  3304. #

  3305. # /etke/prometheus_node_exporter

  3306. #

  3307. ######################################################################

  3308. 

  3309. ######################################################################

  3310. #

  3311. # etke/prometheus_postgres_exporter

  3312. #

  3313. ######################################################################

  3314. 

  3315. prometheus_postgres_exporter_enabled: false

  3316. 

  3317. prometheus_postgres_exporter_identifier: matrix-prometheus-postgres-exporter

  3318. 

  3319. prometheus_postgres_exporter_base_path: "{{ matrix_base_data_path }}/prometheus-postgres-exporter"

  3320. 

  3321. prometheus_postgres_exporter_uid: "{{ matrix_user_uid }}"

  3322. prometheus_postgres_exporter_gid: "{{ matrix_user_gid }}"

  3323. 

  3324. prometheus_postgres_exporter_server_fqn: "{{ matrix_server_fqn_matrix }}"

  3325. 

  3326. prometheus_postgres_exporter_container_network: "{{ matrix_docker_network }}"

  3327. 

  3328. prometheus_postgres_exporter_container_additional_networks: "{{ [matrix_playbook_reverse_proxyable_services_additional_network] if matrix_playbook_reverse_proxyable_services_additional_network else [] }}"

  3329. 

  3330. prometheus_postgres_exporter_container_labels_traefik_enabled: false

  3331. prometheus_postgres_exporter_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  3332. prometheus_postgres_exporter_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  3333. 

  3334. prometheus_postgres_exporter_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  3335. prometheus_postgres_exporter_database_username: matrix_prometheus_postgres_exporter

  3336. prometheus_postgres_exporter_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'prometheus.pg.db', rounds=655555) | to_uuid }}"

  3337. prometheus_postgres_exporter_database_name: matrix_prometheus_postgres_exporter

  3338. 

  3339. prometheus_postgres_exporter_systemd_required_services_list: |

  3340.   {{

  3341.     ['docker.service']

  3342.     +

  3343.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  3344.   }}

  3345. 

  3346. ######################################################################

  3347. #

  3348. # /etke/prometheus_postgres_exporter

  3349. #

  3350. ######################################################################

  3351. 

  3352. ######################################################################

  3353. #

  3354. # matrix-prometheus-nginxlog-exporter

  3355. #

  3356. ######################################################################

  3357. 

  3358. matrix_prometheus_nginxlog_exporter_enabled: false

  3359. 

  3360. ######################################################################

  3361. #

  3362. # /matrix-prometheus-nginxlog-exporter

  3363. #

  3364. ######################################################################

  3365. 

  3366. ######################################################################

  3367. #

  3368. # matrix-prometheus

  3369. #

  3370. ######################################################################

  3371. 

  3372. matrix_prometheus_enabled: false

  3373. 

  3374. matrix_prometheus_container_network: "{{ matrix_docker_network }}"

  3375. 

  3376. # Normally, matrix-nginx-proxy is enabled and nginx can reach Prometheus over the container network.

  3377. # If matrix-nginx-proxy is not enabled, or you otherwise have a need for it, you can expose

  3378. # Prometheus' HTTP port to the local host.

  3379. matrix_prometheus_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '9090') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  3380. 

  3381. matrix_prometheus_scraper_synapse_enabled: "{{ matrix_synapse_enabled and matrix_synapse_metrics_enabled }}"

  3382. matrix_prometheus_scraper_synapse_targets: ['matrix-synapse:{{ matrix_synapse_metrics_port }}']

  3383. matrix_prometheus_scraper_synapse_workers_enabled_list: "{{ matrix_synapse_workers_enabled_list }}"

  3384. matrix_prometheus_scraper_synapse_rules_synapse_tag: "{{ matrix_synapse_docker_image_tag }}"

  3385. 

  3386. matrix_prometheus_scraper_node_enabled: "{{ prometheus_node_exporter_enabled }}"

  3387. matrix_prometheus_scraper_node_targets: "{{ [prometheus_node_exporter_identifier + ':9100'] if prometheus_node_exporter_enabled else [] }}"

  3388. 

  3389. matrix_prometheus_scraper_postgres_enabled: "{{ prometheus_postgres_exporter_enabled }}"

  3390. matrix_prometheus_scraper_postgres_targets: "{{ [prometheus_postgres_exporter_identifier + ':' + prometheus_postgres_exporter_port | string] if matrix_prometheus_scraper_postgres_enabled else [] }}"

  3391. 

  3392. matrix_prometheus_scraper_hookshot_enabled: "{{ matrix_hookshot_metrics_enabled|default(false) }}"

  3393. matrix_prometheus_scraper_hookshot_targets: "{{ [matrix_hookshot_container_url | string +':'+ matrix_hookshot_metrics_port | string] if matrix_hookshot_metrics_enabled else [] }}"

  3394. 

  3395. matrix_prometheus_scraper_nginxlog_enabled: "{{ matrix_prometheus_nginxlog_exporter_enabled }}"

  3396. matrix_prometheus_scraper_nginxlog_server_port: "{{ (matrix_prometheus_nginxlog_exporter_container_hostname | string +':'+ matrix_prometheus_nginxlog_exporter_container_metrics_port | string)

  3397. | default('') }}"

  3398. 

  3399. ######################################################################

  3400. #

  3401. # /matrix-prometheus

  3402. #

  3403. ######################################################################

  3404. 

  3405. ######################################################################

  3406. #

  3407. # etke/grafana

  3408. #

  3409. ######################################################################

  3410. 

  3411. grafana_enabled: false

  3412. 

  3413. grafana_identifier: matrix-grafana

  3414. 

  3415. grafana_uid: "{{ matrix_user_uid }}"

  3416. grafana_gid: "{{ matrix_user_gid }}"

  3417. 

  3418. grafana_hostname: "{{ matrix_server_fqn_grafana }}"

  3419. 

  3420. grafana_base_path: "{{ matrix_base_data_path }}/grafana"

  3421. 

  3422. grafana_container_network: "{{ matrix_nginx_proxy_container_network if matrix_playbook_reverse_proxy_type == 'playbook-managed-nginx' else grafana_identifier }}"

  3423. 

  3424. grafana_container_additional_networks: |

  3425.   {{

  3426.     (

  3427.       ([matrix_playbook_reverse_proxyable_services_additional_network] if matrix_playbook_reverse_proxyable_services_additional_network else [])

  3428.       +

  3429.       ([matrix_prometheus_container_network] if matrix_prometheus_enabled and matrix_prometheus_container_network != grafana_container_network else [])

  3430.     ) | unique

  3431.   }}

  3432. 

  3433. grafana_container_labels_traefik_enabled: "{{ matrix_playbook_traefik_labels_enabled }}"

  3434. grafana_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  3435. grafana_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  3436. 

  3437. # Normally, matrix-nginx-proxy is enabled and nginx can reach Grafana over the container network.

  3438. # If matrix-nginx-proxy is not enabled, or you otherwise have a need for it, you can expose

  3439. # Grafana's HTTP port to the local host.

  3440. grafana_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '3000') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  3441. 

  3442. grafana_provisioning_datasources: |

  3443.   {{

  3444.     ([{

  3445.       'name': (matrix_server_fqn_matrix + ' - Prometheus'),

  3446.       'type': 'prometheus',

  3447.       'access': 'proxy',

  3448.       'url': 'http://matrix-prometheus:9090',

  3449.     }] if matrix_prometheus_enabled else [])

  3450.   }}

  3451. 

  3452. grafana_dashboard_download_urls: |

  3453.   {{

  3454.     (matrix_synapse_grafana_dashboard_urls if matrix_homeserver_implementation == 'synapse' and matrix_synapse_metrics_enabled else [])

  3455.     +

  3456.     (prometheus_node_exporter_dashboard_urls if prometheus_node_exporter_enabled else [])

  3457.     +

  3458.     (prometheus_postgres_exporter_dashboard_urls if prometheus_postgres_exporter_enabled else [])

  3459.     +

  3460.     (matrix_prometheus_nginxlog_exporter_dashboard_urls if matrix_prometheus_nginxlog_exporter_enabled else [])

  3461.   }}

  3462. 

  3463. grafana_provisioning_dashboard_template_files: |

  3464.   {{

  3465.     ([{

  3466.         'path': 'roles/custom/matrix-prometheus-nginxlog-exporter/templates/grafana/nginx-proxy.json',

  3467.         'name': 'nginx-proxy.json',

  3468.     }] if matrix_prometheus_nginxlog_exporter_enabled else [])

  3469.   }}

  3470. 

  3471. grafana_default_home_dashboard_path: |-

  3472.   {{

  3473.     {

  3474.       'synapse': ('/etc/grafana/dashboards/synapse.json' if matrix_synapse_metrics_enabled and matrix_synapse_metrics_enabled else ('/etc/grafana/dashboards/node-exporter-full.json' if prometheus_node_exporter_enabled else '')),

  3475.       'dendrite': ('/etc/grafana/dashboards/node-exporter-full.json' if prometheus_node_exporter_enabled else ''),

  3476.       'conduit': ('/etc/grafana/dashboards/node-exporter-full.json' if prometheus_node_exporter_enabled else ''),

  3477.     }[matrix_homeserver_implementation]

  3478.   }}

  3479. 

  3480. ######################################################################

  3481. #

  3482. # /etke/grafana

  3483. #

  3484. ######################################################################

  3485. 

  3486. ######################################################################

  3487. #

  3488. # matrix-registration

  3489. #

  3490. ######################################################################

  3491. 

  3492. matrix_registration_enabled: false

  3493. 

  3494. # Normally, matrix-nginx-proxy is enabled and nginx can reach matrix-registration over the container network.

  3495. # If matrix-nginx-proxy is not enabled, or you otherwise have a need for it, you can expose

  3496. # matrix-registration's HTTP port to the local host.

  3497. matrix_registration_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '8767') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  3498. 

  3499. matrix_registration_riot_instance: "{{ ('https://' + matrix_server_fqn_element) if matrix_client_element_enabled else 'https://riot.im/app/' }}"

  3500. 

  3501. matrix_registration_shared_secret: |-

  3502.   {{

  3503.     {

  3504.       'synapse': matrix_synapse_registration_shared_secret,

  3505.       'dendrite': matrix_dendrite_client_api_registration_shared_secret,

  3506.       'conduit': '',

  3507.     }[matrix_homeserver_implementation]

  3508.   }}

  3509. 

  3510. matrix_registration_server_location: "{{ matrix_homeserver_container_url }}"

  3511. 

  3512. matrix_registration_api_validate_certs: "{{ false if matrix_playbook_ssl_retrieval_method == 'self-signed' else true }}"

  3513. 

  3514. matrix_registration_container_image_self_build: "{{ matrix_architecture != 'amd64' }}"

  3515. 

  3516. matrix_registration_systemd_required_services_list: |

  3517.   {{

  3518.     ['docker.service']

  3519.     +

  3520.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  3521.   }}

  3522. 

  3523. # Postgres is the default, except if not using internal Postgres server

  3524. matrix_registration_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  3525. matrix_registration_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  3526. matrix_registration_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mx.registr.db', rounds=655555) | to_uuid }}"

  3527. 

  3528. ######################################################################

  3529. #

  3530. # /matrix-registration

  3531. #

  3532. ######################################################################

  3533. 

  3534. 

  3535. ######################################################################

  3536. #

  3537. # matrix-dendrite

  3538. #

  3539. ######################################################################

  3540. 

  3541. matrix_dendrite_enabled: "{{ matrix_homeserver_implementation == 'dendrite' }}"

  3542. 

  3543. # Normally, matrix-nginx-proxy is enabled and nginx can reach Dendrite over the container network.

  3544. # If matrix-nginx-proxy is not enabled, or you otherwise have a need for it,

  3545. # you can expose Dendrite's ports to the host.

  3546. #

  3547. # For exposing Dendrite's plain HTTP server to the local host.

  3548. matrix_dendrite_container_http_host_bind_address: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ matrix_dendrite_http_bind_port | string) if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  3549. #

  3550. # For exposing Dendrite's HTTPS server to the local host.

  3551. matrix_dendrite_container_https_host_bind_address: "{{ '' if not matrix_dendrite_https_bind_port or not matrix_playbook_service_host_bind_interface_prefix else (matrix_playbook_service_host_bind_interface_prefix + matrix_dendrite_https_bind_port | string) }}"

  3552. 

  3553. matrix_dendrite_client_api_registration_shared_secret: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'dendrite.rss', rounds=655555) | to_uuid }}"

  3554. 

  3555. matrix_dendrite_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  3556. 

  3557. matrix_dendrite_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'dendrite.db', rounds=655555) | to_uuid }}"

  3558. 

  3559. # Even if TURN doesn't support TLS (it does by default),

  3560. # it doesn't hurt to try a secure connection anyway.

  3561. matrix_dendrite_client_api_turn_uris: |

  3562.   {{

  3563.     [

  3564.       'turns:' + matrix_server_fqn_matrix + '?transport=udp',

  3565.       'turns:' + matrix_server_fqn_matrix + '?transport=tcp',

  3566.       'turn:' + matrix_server_fqn_matrix + '?transport=udp',

  3567.       'turn:' + matrix_server_fqn_matrix + '?transport=tcp',

  3568.     ]

  3569.     if matrix_coturn_enabled

  3570.     else []

  3571.   }}

  3572. 

  3573. matrix_dendrite_client_api_turn_shared_secret: "{{ matrix_coturn_turn_static_auth_secret if matrix_coturn_enabled else '' }}"

  3574. 

  3575. matrix_dendrite_disable_tls_validation: "{{ true if matrix_playbook_ssl_retrieval_method == 'self-signed' else false }}"

  3576. 

  3577. matrix_dendrite_self_check_validate_certificates: "{{ false if matrix_playbook_ssl_retrieval_method == 'self-signed' else true }}"

  3578. 

  3579. matrix_dendrite_trusted_id_servers: "{{ [matrix_server_fqn_matrix] if matrix_ma1sd_enabled else ['matrix.org', 'vector.im'] }}"

  3580. 

  3581. matrix_dendrite_systemd_required_services_list: |

  3582.   {{

  3583.     (['docker.service'])

  3584.     +

  3585.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  3586.     +

  3587.     (['matrix-goofys.service'] if matrix_s3_media_store_enabled else [])

  3588.   }}

  3589. 

  3590. matrix_dendrite_systemd_wanted_services_list: |

  3591.   {{

  3592.     (['matrix-coturn.service'] if matrix_coturn_enabled else [])

  3593.   }}

  3594. 

  3595. matrix_dendrite_container_extra_arguments_auto: "{{ matrix_homeserver_container_extra_arguments_auto }}"

  3596. matrix_dendrite_app_service_config_files_auto: "{{ matrix_homeserver_app_service_config_files_auto }}"

  3597. 

  3598. ######################################################################

  3599. #

  3600. # /matrix-dendrite

  3601. #

  3602. ######################################################################

  3603. 

  3604. ######################################################################

  3605. #

  3606. # matrix-conduit

  3607. #

  3608. ######################################################################

  3609. 

  3610. matrix_conduit_enabled: "{{ matrix_homeserver_implementation == 'conduit' }}"

  3611. 

  3612. matrix_conduit_systemd_required_services_list: |

  3613.   {{

  3614.     (['docker.service'])

  3615.   }}

  3616. 

  3617. 

  3618. ######################################################################

  3619. #

  3620. # /matrix-conduit

  3621. #

  3622. ######################################################################

  3623. 

  3624. 

  3625. ######################################################################

  3626. #

  3627. # matrix-user-creator

  3628. #

  3629. ######################################################################

  3630. 

  3631. matrix_user_creator_users_auto: |

  3632.   {{

  3633.     ([{

  3634.       'username': matrix_bot_matrix_reminder_bot_matrix_user_id_localpart,

  3635.       'initial_password': matrix_bot_matrix_reminder_bot_matrix_user_password,

  3636.       'initial_type': 'bot',

  3637.     }] if matrix_bot_matrix_reminder_bot_enabled else [])

  3638.     +

  3639.     ([{

  3640.       'username': matrix_bot_honoroit_login,

  3641.       'initial_password': matrix_bot_honoroit_password,

  3642.       'initial_type': 'bot',

  3643.     }] if matrix_bot_honoroit_enabled else [])

  3644.     +

  3645.     ([{

  3646.       'username': matrix_bot_postmoogle_login,

  3647.       'initial_password': matrix_bot_postmoogle_password,

  3648.       'initial_type': 'bot',

  3649.     }] if matrix_bot_postmoogle_enabled else [])

  3650.     +

  3651.     ([{

  3652.       'username': matrix_bot_buscarron_login,

  3653.       'initial_password': matrix_bot_buscarron_password,

  3654.       'initial_type': 'bot',

  3655.     }] if matrix_bot_buscarron_enabled else [])

  3656.   }}

  3657. 

  3658. ######################################################################

  3659. #

  3660. # /matrix-user-creator

  3661. #

  3662. ######################################################################

  3663. 

  3664. 

  3665. ######################################################################

  3666. #

  3667. # matrix-user-verification-service

  3668. #

  3669. ######################################################################

  3670. 

  3671. ## FIXME: Needs to be updated when there is a proper release by upstream.

  3672. matrix_user_verification_service_docker_image: "{{ matrix_user_verification_service_docker_image_name_prefix }}matrixdotorg/matrix-user-verification-service@sha256:d2aabc984dd69d258c91900c36928972d7aaef19d776caa3cd6a0fbc0e307270"

  3673. 

  3674. matrix_user_verification_service_enabled: false

  3675. matrix_user_verification_service_systemd_required_services_list: |

  3676.       {{

  3677.         ['docker.service']

  3678.         +

  3679.         (['matrix-synapse.service'] if matrix_synapse_enabled else [])

  3680.         +

  3681.         ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  3682.       }}

  3683. 

  3684. # If Jitsi is managed by this playbook we can use the docker network - no need to expose a port.

  3685. # If Jitsi is not managed by this playbook, or you otherwise have a need for it, you can expose

  3686. # matrix-user-verfification-services's client-server port to port 3003.

  3687. # By default Matrix-User-Verification-Service binds to port 3000, which collides with grafana, therefore this uses port 3003.

  3688. matrix_user_verification_service_container_http_host_bind_port: "{{  '' if (matrix_jitsi_enabled | bool and matrix_jitsi_enable_auth | bool and matrix_jitsi_auth_type == 'matrix') else matrix_playbook_service_host_bind_interface_prefix ~ '3003' }}"

  3689. 

  3690. # URL exposed in the docker network

  3691. matrix_user_verification_service_container_url: "http://{{  matrix_user_verification_service_container_name }}:3000"

  3692. 

  3693. # We connect via the container network (private IPs), so we need to disable IP checks

  3694. matrix_user_verification_service_uvs_disable_ip_blacklist: "{{'true' if matrix_synapse_enabled else 'false'}}"

  3695. 

  3696. matrix_user_verification_service_uvs_auth_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'uvs.auth.token', rounds=655555) | to_uuid }}"

  3697. 

  3698. ######################################################################

  3699. #

  3700. # /matrix-user-verification-service

  3701. #

  3702. ######################################################################

  3703. 

  3704. 

  3705. ########################################################################

  3706. #                                                                      #

  3707. # com.devture.ansible.role.traefik                                     #

  3708. #                                                                      #

  3709. ########################################################################

  3710. 

  3711. # To completely disable the Traefik role from running, use `matrix_playbook_traefik_role_enabled: false`.

  3712. # See the comment there for more details about why we have both `devture_traefik_enabled` and `matrix_playbook_traefik_role_enabled`.

  3713. devture_traefik_enabled: "{{ matrix_playbook_reverse_proxy_type == 'playbook-managed-traefik' }}"

  3714. 

  3715. devture_traefik_uid: "{{ matrix_user_uid }}"

  3716. devture_traefik_gid: "{{ matrix_user_gid }}"

  3717. 

  3718. devture_traefik_additional_entrypoints_auto:

  3719.   - name: matrix-federation

  3720.     port: "{{ matrix_federation_public_port }}"

  3721.     host_bind_port: "{{ matrix_federation_public_port }}"

  3722.     config: {}

  3723. 

  3724. devture_traefik_additional_domains_to_obtain_certificates_for: "{{ matrix_ssl_additional_domains_to_obtain_certificates_for }}"

  3725. 

  3726. ########################################################################

  3727. #                                                                      #

  3728. # /com.devture.ansible.role.traefik                                    #

  3729. #                                                                      #

  3730. ########################################################################

  3731. 

  3732. 

  3733. ########################################################################

  3734. #                                                                      #

  3735. # com.devture.ansible.role.traefik_certs_dumper                        #

  3736. #                                                                      #

  3737. ########################################################################

  3738. 

  3739. # To completely disable the Traefik certs dumper role from running, use `matrix_playbook_traefik_certs_dumper_role_enabled: false`.

  3740. # See the comment there for more details about why we have both `devture_traefik_certs_dumper_enabled` and `matrix_playbook_traefik_certs_dumper_role_enabled`.

  3741. devture_traefik_certs_dumper_enabled: "{{ matrix_playbook_traefik_certs_dumper_role_enabled }}"

  3742. 

  3743. devture_traefik_certs_dumper_identifier: matrix-traefik-certs-dumper

  3744. 

  3745. devture_traefik_certs_dumper_base_path: "{{ matrix_base_data_path }}/traefik-certs-dumper"

  3746. 

  3747. devture_traefik_certs_dumper_uid: "{{ matrix_user_uid }}"

  3748. devture_traefik_certs_dumper_gid: "{{ matrix_user_gid }}"

  3749. 

  3750. devture_traefik_certs_dumper_ssl_dir_path: "{{ devture_traefik_ssl_dir_path if devture_traefik_enabled else '' }}"

  3751. 

  3752. ########################################################################

  3753. #                                                                      #

  3754. # /com.devture.ansible.role.traefik_certs_dumper                       #

  3755. #                                                                      #

  3756. ########################################################################