overmind
/
matrix-docker-ansible-deploy
kopia lustrzana https://github.com/spantaleev/matrix-docker-ansible-deploy
1
0
Forkuj 0
Kod Zgłoszenia 0 Wydania 0 Wiki Aktywność
Matrix Docker Ansible eploy
Nie możesz wybrać więcej, niż 25 tematów Tematy muszą się zaczynać od litery lub cyfry, mogą zawierać myślniki ('-') i mogą mieć do 35 znaków.
11939 Commity
1 Gałąź
97 MiB
 
 
 
Drzewo: c8087f4f20
Gałęzie Tagi
${ item.name }
Utwórz gałąź ${ searchTerm }
z 'c8087f4f20'
${ noResults }
matrix-docker-ansible-deploy/roles/custom/matrix-bot-meowlnir/molecule/default/molecule.yml

156 wiersze
7.9 KiB
Czysty Wina Historia 

  1. # SPDX-FileCopyrightText: 2026 Slavi Pantaleev

  2. #

  3. # SPDX-License-Identifier: AGPL-3.0-or-later

  4. 

  5. ---

  6. dependency:

  7.   name: galaxy

  8.   options:

  9.     requirements-file: requirements.yml

  10.     force: true

  11. driver:

  12.   name: docker

  13. platforms:

  14.   - name: matrix-bot-meowlnir-${MOLECULE_DISTRO:-ubuntu2604}-default

  15.     image: "geerlingguy/docker-${MOLECULE_DISTRO:-ubuntu2604}-ansible:latest"

  16.     command: ${MOLECULE_DOCKER_COMMAND:-""}

  17.     volumes:

  18.       - /sys/fs/cgroup:/sys/fs/cgroup:rw

  19.     cgroupns_mode: host

  20.     privileged: true

  21.     pre_build_image: true

  22. provisioner:

  23.   name: ansible

  24.   config_options:

  25.     defaults:

  26.       callback_result_format: yaml

  27.   inventory:

  28.     group_vars:

  29.       all:

  30.         matrix_bot_meowlnir_container_network: matrix-bot-meowlnir-molecule

  31. 

  32.         # verify.yml is a separate play where role defaults are out of scope. Pin only

  33.         # paths it reads; the component version comes from the role's defaults directly.

  34.         matrix_bot_meowlnir_base_path: /matrix/meowlnir

  35.         matrix_bot_meowlnir_config_path: /matrix/meowlnir/config

  36.         matrix_bot_meowlnir_data_path: /matrix/meowlnir/data

  37. 

  38.         # A local stub is available for bounded Matrix API calls. The empty-roster

  39.         # startup used here currently makes no outbound homeserver request, so the

  40.         # weight-bearing appservice gate is the authenticated inbound transaction in

  41.         # verify.yml. No real Matrix or third-party account is involved.

  42.         matrix_bot_meowlnir_config_homeserver_address: http://matrix.molecule.local:8008

  43.         matrix_bot_meowlnir_config_homeserver_domain: molecule.local

  44.         matrix_bot_meowlnir_appservice_id: molecule-meowlnir

  45.         matrix_bot_meowlnir_appservice_sender_localpart: molecule_meowlnir_as

  46.         matrix_bot_meowlnir_user_prefix: molecule_meowlnir_bot_

  47.         matrix_bot_meowlnir_appservice_token: molecule_as_token_2cf519

  48.         matrix_bot_meowlnir_homeserver_token: molecule_hs_token_c20dc3

  49. 

  50.         # Real Postgres is the normal playbook path. The non-default credentials make its

  51.         # migrated schema evidence that Meowlnir consumed the URI assembled by the role.

  52.         matrix_bot_meowlnir_database_engine: postgres

  53.         matrix_bot_meowlnir_database_hostname: matrix-postgres-molecule

  54.         matrix_bot_meowlnir_database_name: molecule_meowlnir

  55.         matrix_bot_meowlnir_database_username: molecule_meowlnir

  56.         matrix_bot_meowlnir_database_password: molecule_pg_password_da31bc

  57.         matrix_bot_meowlnir_database_sslmode: disable

  58.         matrix_bot_meowlnir_config_database_max_open_conns: 13

  59.         matrix_bot_meowlnir_config_database_max_idle_conns: 3

  60.         matrix_bot_meowlnir_config_database_max_conn_idle_time: 47s

  61.         matrix_bot_meowlnir_config_database_max_conn_lifetime: 11m

  62. 

  63.         # These differ from both role and upstream defaults. The authenticated management

  64.         # API below proves that the running process accepted the listener and secret.

  65.         matrix_bot_meowlnir_config_meowlnir_port: 29439

  66.         matrix_bot_meowlnir_appservice_url: http://matrix-bot-meowlnir:29439

  67.         matrix_bot_meowlnir_config_meowlnir_management_secret: molecule_management_secret_a64528

  68.         matrix_bot_meowlnir_config_meowlnir_data_secret: molecule_data_secret_e8c7b4

  69.         matrix_bot_meowlnir_config_meowlnir_federation_auth: true

  70.         matrix_bot_meowlnir_config_meowlnir_dry_run: true

  71.         matrix_bot_meowlnir_config_meowlnir_untrusted: true

  72.         matrix_bot_meowlnir_config_meowlnir_report_room: "!molecule-reports:molecule.local"

  73.         matrix_bot_meowlnir_config_meowlnir_room_ban_room: "!molecule-bans:molecule.local"

  74.         matrix_bot_meowlnir_config_meowlnir_hacky_rule_filter_custom:

  75.           - '@trusted:molecule.local'

  76.           - trusted.invalid

  77.         matrix_bot_meowlnir_config_meowlnir_hacky_redact_patterns_custom:

  78.           - molecule-abuse-*

  79.         matrix_bot_meowlnir_config_meowlnir_admin_tokens:

  80.           '@molecule-admin:molecule.local': molecule_admin_token_7e6ce0

  81. 

  82.         matrix_bot_meowlnir_config_meowlnir4all_admin_room: "!molecule-provisioning:molecule.local"

  83.         matrix_bot_meowlnir_config_meowlnir4all_displayname: Molecule Provisioned Meowlnir

  84.         matrix_bot_meowlnir_config_meowlnir4all_avatar_url: mxc://molecule.local/meowlnir-avatar

  85.         matrix_bot_meowlnir_config_meowlnir4all_room_name: Molecule Meowlnir Control

  86.         matrix_bot_meowlnir_config_meowlnir4all_default_watched_lists_custom:

  87.           - name: Molecule policy list

  88.             room_id: "!molecule-policy:molecule.local"

  89.             shortcode: molecule

  90.             auto_unban: false

  91. 

  92.         matrix_bot_meowlnir_config_antispam_secret: molecule_antispam_secret_59d553

  93.         matrix_bot_meowlnir_config_antispam_filter_local_invites: true

  94.         matrix_bot_meowlnir_config_antispam_auto_reject_invites_token: molecule_reject_token_a9812f

  95.         matrix_bot_meowlnir_config_antispam_notify_management_room: true

  96.         matrix_bot_meowlnir_config_antispam_block_invites_to_custom:

  97.           - '@blocked:molecule.local'

  98. 

  99.         # Both integrations render public routing labels. Their real handlers are not the

  100.         # readiness gate; the management API and database provide stronger process evidence.

  101.         matrix_bot_meowlnir_policy_server_enabled: true

  102.         matrix_bot_meowlnir_config_policy_server_always_redact: false

  103.         matrix_bot_meowlnir_config_policy_server_signing_key: >-

  104.           ed25519 policy_server MDEyMzQ1Njc4OWFiY2RlZjAxMjM0NTY3ODlhYmNkZWY

  105.         matrix_bot_meowlnir_config_reporting_enabled: true

  106. 

  107.         matrix_bot_meowlnir_config_encryption_enable: false

  108.         matrix_bot_meowlnir_config_encryption_pickle_key: molecule_pickle_key_6f370e

  109.         matrix_bot_meowlnir_config_logging_min_level: debug

  110.         matrix_bot_meowlnir_config_logging_writers:

  111.           - type: stdout

  112.             format: json

  113. 

  114.         # No bot is declared: this avoids accepting provisioning behavior which is green only

  115.         # because a deliberately permissive homeserver stub papered over it.

  116.         matrix_bot_meowlnir_bots_custom: []

  117.         matrix_bot_meowlnir_bots_pruning_enabled: false

  118. 

  119.         # Traefik is not deployed. Distinct non-default routes still prove the role's label

  120.         # contract both on disk and in Docker's accepted container labels.

  121.         matrix_bot_meowlnir_container_labels_traefik_enabled: true

  122.         matrix_bot_meowlnir_container_labels_traefik_docker_network: matrix-bot-meowlnir-molecule

  123.         matrix_bot_meowlnir_container_labels_reporting_traefik_hostname: reports.molecule.local

  124.         matrix_bot_meowlnir_container_labels_reporting_traefik_path_regexp: ^/molecule-report/(rooms|users)/[^/]+$$

  125.         matrix_bot_meowlnir_container_labels_reporting_traefik_priority: 731

  126.         matrix_bot_meowlnir_container_labels_reporting_traefik_entrypoints: web

  127.         matrix_bot_meowlnir_container_labels_reporting_traefik_tls: false

  128.         matrix_bot_meowlnir_container_labels_policy_server_traefik_hostname: federation.molecule.local

  129.         matrix_bot_meowlnir_container_labels_policy_server_traefik_path_prefix: /molecule-policy

  130.         matrix_bot_meowlnir_container_labels_policy_server_traefik_priority: 733

  131.         matrix_bot_meowlnir_container_labels_policy_server_traefik_entrypoints: web

  132.         matrix_bot_meowlnir_container_labels_policy_server_traefik_tls: false

  133.         matrix_bot_meowlnir_container_labels_traefik_labels_additional_labels: |

  134.           molecule.meowlnir.coverage=enabled

  135. 

  136.         # Preserve the production-like no-host-port path; probes join its Docker network.

  137.         matrix_bot_meowlnir_container_http_host_bind_port: ''

  138.   env:

  139.     # Workaround for https://github.com/ansible/molecule/issues/4391

  140.     ANSIBLE_ROLES_PATH: ${MOLECULE_PROJECT_DIRECTORY}/../..:/.ansible/roles:/usr/share/ansible/roles:/etc/ansible/roles:${ANSIBLE_HOME:-~/.ansible}/roles

  141. scenario:

  142.   test_sequence:

  143.     - dependency

  144.     - cleanup

  145.     - destroy

  146.     - syntax

  147.     - create

  148.     - prepare

  149.     - converge

  150.     - idempotence

  151.     - verify

  152.     - cleanup

  153.     - destroy

  154. verifier:

  155.   name: ansible