overmind
/
matrix-docker-ansible-deploy
зеркало из https://github.com/spantaleev/matrix-docker-ansible-deploy
1
0
Форкнуть 0
Код Задачи 0 Релизы 0 Вики Активность
Matrix Docker Ansible eploy
Вы не можете выбрать более 25 тем Темы должны начинаться с буквы или цифры, могут содержать дефисы(-) и должны содержать не более 35 символов.
5596 коммитов
13 Ветки
91 MiB
 
 
Дерево: c8ce83c725
Ветки Теги
${ item.name }
Создать ветку ${ searchTerm }
из 'c8ce83c725'
${ noResults }
matrix-docker-ansible-deploy/group_vars/matrix_servers

3278 строки
158 KiB
Исходник Вина История 

  1. ---

  2. 

  3. # This variables file wires together the various components (roles) used by the playbook.

  4. #

  5. # Roles used by playbook are pretty minimal and kept independent of one another as much as possible.

  6. # To deliver a turnkey fully-featured Matrix server, this playbook needs

  7. # to connect them all together. It does so by overriding role variables.

  8. #

  9. # You can also override ANY variable (seen here or in any given role),

  10. # by re-defining it in your own configuration file (`inventory/host_vars/matrix.<your-domain>`).

  11. 

  12. ########################################################################

  13. #                                                                      #

  14. # Playbook                                                             #

  15. #                                                                      #

  16. ########################################################################

  17. 

  18. # Controls whether to install Docker or not

  19. # Also see `devture_docker_sdk_for_python_installation_enabled`.

  20. matrix_playbook_docker_installation_enabled: true

  21. 

  22. ########################################################################

  23. #                                                                      #

  24. # /Playbook                                                            #

  25. #                                                                      #

  26. ########################################################################

  27. 

  28. ########################################################################

  29. #                                                                      #

  30. # base                                                                 #

  31. #                                                                      #

  32. ########################################################################

  33. 

  34. matrix_homeserver_container_extra_arguments_auto: |

  35.   {{

  36.     (['--mount type=bind,src=' + matrix_appservice_discord_config_path + '/registration.yaml,dst=/matrix-appservice-discord-registration.yaml,ro'] if matrix_appservice_discord_enabled else [])

  37.     +

  38.     (['--mount type=bind,src=' + matrix_appservice_irc_config_path + '/registration.yaml,dst=/matrix-appservice-irc-registration.yaml,ro'] if matrix_appservice_irc_enabled else [])

  39.     +

  40.     (['--mount type=bind,src=' + matrix_appservice_kakaotalk_config_path + '/registration.yaml,dst=/matrix-appservice-kakaotalk-registration.yaml,ro'] if matrix_appservice_kakaotalk_enabled else [])

  41.     +

  42.     (['--mount type=bind,src=' + matrix_appservice_slack_config_path + '/slack-registration.yaml,dst=/matrix-appservice-slack-registration.yaml,ro'] if matrix_appservice_slack_enabled else [])

  43.     +

  44.     (['--mount type=bind,src=' + matrix_appservice_webhooks_config_path + '/webhooks-registration.yaml,dst=/matrix-appservice-webhooks-registration.yaml,ro'] if matrix_appservice_webhooks_enabled else [])

  45.     +

  46.     (['--mount type=bind,src=' + matrix_beeper_linkedin_config_path + '/registration.yaml,dst=/matrix-beeper-linkedin-registration.yaml,ro'] if matrix_beeper_linkedin_enabled else [])

  47.     +

  48.     (['--mount type=bind,src=' + matrix_go_skype_bridge_config_path + '/registration.yaml,dst=/matrix-go-skype-bridge-registration.yaml,ro'] if matrix_go_skype_bridge_enabled else [])

  49.     +

  50.     (['--mount type=bind,src=' + matrix_heisenbridge_base_path + '/registration.yaml,dst=/heisenbridge-registration.yaml,ro'] if matrix_heisenbridge_enabled else [])

  51.     +

  52.     (['--mount type=bind,src=' + matrix_hookshot_base_path + '/registration.yml,dst=/hookshot-registration.yml,ro'] if matrix_hookshot_enabled else [])

  53.     +

  54.     (['--mount type=bind,src=' + matrix_mautrix_discord_config_path + '/registration.yaml,dst=/matrix-mautrix-discord-registration.yaml,ro'] if matrix_mautrix_discord_enabled else [])

  55.     +

  56.     (['--mount type=bind,src=' + matrix_mautrix_slack_config_path + '/registration.yaml,dst=/matrix-mautrix-slack-registration.yaml,ro'] if matrix_mautrix_slack_enabled else [])

  57.     +

  58.     (['--mount type=bind,src=' + matrix_mautrix_facebook_config_path + '/registration.yaml,dst=/matrix-mautrix-facebook-registration.yaml,ro'] if matrix_mautrix_facebook_enabled else [])

  59.     +

  60.     (['--mount type=bind,src=' + matrix_mautrix_googlechat_config_path + '/registration.yaml,dst=/matrix-mautrix-googlechat-registration.yaml,ro'] if matrix_mautrix_googlechat_enabled else [])

  61.     +

  62.     (['--mount type=bind,src=' + matrix_mautrix_hangouts_config_path + '/registration.yaml,dst=/matrix-mautrix-hangouts-registration.yaml,ro'] if matrix_mautrix_hangouts_enabled else [])

  63.     +

  64.     (['--mount type=bind,src=' + matrix_mautrix_instagram_config_path + '/registration.yaml,dst=/matrix-mautrix-instagram-registration.yaml,ro'] if matrix_mautrix_instagram_enabled else [])

  65.     +

  66.     (['--mount type=bind,src=' + matrix_mautrix_signal_config_path + '/registration.yaml,dst=/matrix-mautrix-signal-registration.yaml,ro'] if matrix_mautrix_signal_enabled else [])

  67.     +

  68.     (['--mount type=bind,src=' + matrix_mautrix_telegram_config_path + '/registration.yaml,dst=/matrix-mautrix-telegram-registration.yaml,ro'] if matrix_mautrix_telegram_enabled else [])

  69.     +

  70.     (['--mount type=bind,src=' + matrix_mautrix_twitter_config_path + '/registration.yaml,dst=/matrix-mautrix-twitter-registration.yaml,ro'] if matrix_mautrix_twitter_enabled else [])

  71.     +

  72.     (['--mount type=bind,src=' + matrix_mautrix_whatsapp_config_path + '/registration.yaml,dst=/matrix-mautrix-whatsapp-registration.yaml,ro'] if matrix_mautrix_whatsapp_enabled else [])

  73.     +

  74.     (['--mount type=bind,src=' + matrix_mx_puppet_discord_config_path + '/registration.yaml,dst=/matrix-mx-puppet-discord-registration.yaml,ro'] if matrix_mx_puppet_discord_enabled else [])

  75.     +

  76.     (['--mount type=bind,src=' + matrix_mx_puppet_groupme_config_path + '/registration.yaml,dst=/matrix-mx-puppet-groupme-registration.yaml,ro'] if matrix_mx_puppet_groupme_enabled else [])

  77.     +

  78.     (['--mount type=bind,src=' + matrix_mx_puppet_instagram_config_path + '/registration.yaml,dst=/matrix-mx-puppet-instagram-registration.yaml,ro'] if matrix_mx_puppet_instagram_enabled else [])

  79.     +

  80.     (['--mount type=bind,src=' + matrix_mx_puppet_slack_config_path + '/registration.yaml,dst=/matrix-mx-puppet-slack-registration.yaml,ro'] if matrix_mx_puppet_slack_enabled else [])

  81.     +

  82.     (['--mount type=bind,src=' + matrix_mx_puppet_steam_config_path + '/registration.yaml,dst=/matrix-mx-puppet-steam-registration.yaml,ro'] if matrix_mx_puppet_steam_enabled else [])

  83.     +

  84.     (['--mount type=bind,src=' + matrix_mx_puppet_twitter_config_path + '/registration.yaml,dst=/matrix-mx-puppet-twitter-registration.yaml,ro'] if matrix_mx_puppet_twitter_enabled else [])

  85.     +

  86.     (['--mount type=bind,src=' + matrix_sms_bridge_config_path + '/registration.yaml,dst=/matrix-sms-bridge-registration.yaml,ro'] if matrix_sms_bridge_enabled else [])

  87.     +

  88.     (['--mount type=bind,src=' + matrix_cactus_comments_app_service_config_file + ',dst=/matrix-cactus-comments.yaml,ro'] if matrix_cactus_comments_enabled else [])

  89.   }}

  90. 

  91. matrix_homeserver_app_service_config_files_auto: |

  92.   {{

  93.     (['/matrix-appservice-discord-registration.yaml'] if matrix_appservice_discord_enabled else [])

  94.     +

  95.     (['/matrix-appservice-irc-registration.yaml'] if matrix_appservice_irc_enabled else [])

  96.     +

  97.     (['/matrix-appservice-kakaotalk-registration.yaml'] if matrix_appservice_kakaotalk_enabled else [])

  98.     +

  99.     (['/matrix-appservice-slack-registration.yaml'] if matrix_appservice_slack_enabled else [])

  100.     +

  101.     (['/matrix-appservice-webhooks-registration.yaml'] if matrix_appservice_webhooks_enabled else [])

  102.     +

  103.     (['/matrix-beeper-linkedin-registration.yaml'] if matrix_beeper_linkedin_enabled else [])

  104.     +

  105.     (['/matrix-go-skype-bridge-registration.yaml'] if matrix_go_skype_bridge_enabled else [])

  106.     +

  107.     (['/heisenbridge-registration.yaml'] if matrix_heisenbridge_enabled else [])

  108.     +

  109.     (['/hookshot-registration.yml'] if matrix_hookshot_enabled else [])

  110.     +

  111.     (['/matrix-mautrix-discord-registration.yaml'] if matrix_mautrix_discord_enabled else [])

  112.     +

  113.     (['/matrix-mautrix-slack-registration.yaml'] if matrix_mautrix_slack_enabled else [])

  114.     +

  115.     (['/matrix-mautrix-facebook-registration.yaml'] if matrix_mautrix_facebook_enabled else [])

  116.     +

  117.     (['/matrix-mautrix-googlechat-registration.yaml'] if matrix_mautrix_googlechat_enabled else [])

  118.     +

  119.     (['/matrix-mautrix-hangouts-registration.yaml'] if matrix_mautrix_hangouts_enabled else [])

  120.     +

  121.     (['/matrix-mautrix-instagram-registration.yaml'] if matrix_mautrix_instagram_enabled else [])

  122.     +

  123.     (['/matrix-mautrix-signal-registration.yaml'] if matrix_mautrix_signal_enabled else [])

  124.     +

  125.     (['/matrix-mautrix-telegram-registration.yaml'] if matrix_mautrix_telegram_enabled else [])

  126.     +

  127.     (['/matrix-mautrix-twitter-registration.yaml'] if matrix_mautrix_twitter_enabled else [])

  128.     +

  129.     (['/matrix-mautrix-whatsapp-registration.yaml'] if matrix_mautrix_whatsapp_enabled else [])

  130.     +

  131.     (['/matrix-mx-puppet-discord-registration.yaml'] if matrix_mx_puppet_discord_enabled else [])

  132.     +

  133.     (['/matrix-mx-puppet-groupme-registration.yaml'] if matrix_mx_puppet_groupme_enabled else [])

  134.     +

  135.     (['/matrix-mx-puppet-instagram-registration.yaml'] if matrix_mx_puppet_instagram_enabled else [])

  136.     +

  137.     (['/matrix-mx-puppet-slack-registration.yaml'] if matrix_mx_puppet_slack_enabled else [])

  138.     +

  139.     (['/matrix-mx-puppet-steam-registration.yaml'] if matrix_mx_puppet_steam_enabled else [])

  140.     +

  141.     (['/matrix-mx-puppet-twitter-registration.yaml'] if matrix_mx_puppet_twitter_enabled else [])

  142.     +

  143.     (['/matrix-sms-bridge-registration.yaml'] if matrix_sms_bridge_enabled else [])

  144.     +

  145.     (['/matrix-cactus-comments.yaml'] if matrix_cactus_comments_enabled else [])

  146.   }}

  147. 

  148. ########################################################################

  149. #                                                                      #

  150. # /base                                                                #

  151. #                                                                      #

  152. ########################################################################

  153. 

  154. 

  155. ########################################################################

  156. #                                                                      #

  157. # com.devture.ansible.role.systemd_service_manager                     #

  158. #                                                                      #

  159. ########################################################################

  160. 

  161. # This list is not exhaustive and final.

  162. # Synapse workers are still injected into the list at runtime.

  163. # Additional JVB workers (playbooks/jitsi_jvb.yml -- roles/custom/matrix-jitsi/tasks/init_additional_jvb.yml) override this variable at runtime as well.

  164. #

  165. # Priority levels are like this:

  166. # - core services (the homeserver) get a level of ~1000

  167. # - services that core services depend on (database, Redis, ntfy, etc.) get a lower level - between 500 and 1000

  168. # - reverse-proxying services get level 3000

  169. # - Matrix utility services (bridges, bots) get a level of 2000/2200, so that:

  170. #   - they can start before the reverse-proxy

  171. #   - so that, when the reverse-proxy is up (Matrix is up), all bots and bridges can be interacted with

  172. # - monitoring services (Prometheus, Grafana, ..) get a level of 4000 - they can start later than all-of-Matrix

  173. # - services which aren't time-sensitive (various crons and timers) get a level of 5000 - they can start later than all-of-Matrix

  174. devture_systemd_service_manager_services_list_auto: |

  175.   {{

  176.     ([{'name': 'matrix-backup-borg.timer', 'priority': 5000, 'groups': ['matrix', 'backup', 'borg']}] if matrix_backup_borg_enabled else [])

  177.     +

  178.     ([{'name': 'matrix-bot-buscarron.service', 'priority': 2200, 'groups': ['matrix', 'bots', 'buscarron']}] if matrix_bot_buscarron_enabled else [])

  179.     +

  180.     ([{'name': 'matrix-bot-go-neb.service', 'priority': 2200, 'groups': ['matrix', 'bots', 'go-neb']}] if matrix_bot_go_neb_enabled else [])

  181.     +

  182.     ([{'name': 'matrix-bot-honoroit.service', 'priority': 2200, 'groups': ['matrix', 'bots', 'honoroit']}] if matrix_bot_honoroit_enabled else [])

  183.     +

  184.     ([{'name': 'matrix-bot-matrix-registration-bot.service', 'priority': 2200, 'groups': ['matrix', 'bots', 'registration-bot']}] if matrix_bot_matrix_registration_bot_enabled else [])

  185.     +

  186.     ([{'name': 'matrix-bot-matrix-reminder-bot.service', 'priority': 2200, 'groups': ['matrix', 'bots', 'reminder-bot']}] if matrix_bot_matrix_reminder_bot_enabled else [])

  187.     +

  188.     ([{'name': 'matrix-bot-maubot.service', 'priority': 2200, 'groups': ['matrix', 'bots', 'maubot']}] if matrix_bot_maubot_enabled else [])

  189.     +

  190.     ([{'name': 'matrix-bot-mjolnir.service', 'priority': 2200, 'groups': ['matrix', 'bots', 'mjolnir']}] if matrix_bot_mjolnir_enabled else [])

  191.     +

  192.     ([{'name': 'matrix-bot-postmoogle.service', 'priority': 2200, 'groups': ['matrix', 'bots', 'postmoogle']}] if matrix_bot_postmoogle_enabled else [])

  193.     +

  194.     ([{'name': 'matrix-bot-chatgpt.service', 'priority': 2200, 'groups': ['matrix', 'bots', 'chatgpt']}] if matrix_bot_chatgpt_enabled else [])

  195.     +

  196.     ([{'name': 'matrix-appservice-discord.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'appservice-discord']}] if matrix_appservice_discord_enabled else [])

  197.     +

  198.     ([{'name': 'matrix-appservice-irc.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'appservice-irc']}] if matrix_appservice_irc_enabled else [])

  199.     +

  200.     ([{'name': 'matrix-appservice-kakaotalk.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'appservice-kakaotalk']}] if matrix_appservice_kakaotalk_enabled else [])

  201.     +

  202.     ([{'name': 'matrix-appservice-kakaotalk-node.service', 'priority': 1900, 'groups': ['matrix', 'bridges', 'appservice-kakaotalk', 'appservice-kakaotalk-node']}] if matrix_appservice_kakaotalk_enabled else [])

  203.     +

  204.     ([{'name': 'matrix-appservice-slack.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'appservice-slack']}] if matrix_appservice_slack_enabled else [])

  205.     +

  206.     ([{'name': 'matrix-appservice-webhooks.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'appservice-webhooks']}] if matrix_appservice_webhooks_enabled else [])

  207.     +

  208.     ([{'name': 'matrix-beeper-linkedin.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'beeper-linkedin']}] if matrix_beeper_linkedin_enabled else [])

  209.     +

  210.     ([{'name': 'matrix-go-skype-bridge.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'go-skype']}] if matrix_go_skype_bridge_enabled else [])

  211.     +

  212.     ([{'name': 'matrix-heisenbridge.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'heisenbridge']}] if matrix_heisenbridge_enabled else [])

  213.     +

  214.     ([{'name': 'matrix-hookshot.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'hookshot']}] if matrix_hookshot_enabled else [])

  215.     +

  216.     ([{'name': 'matrix-mautrix-discord.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mautrix-discord']}] if matrix_mautrix_discord_enabled else [])

  217.     +

  218.     ([{'name': 'matrix-mautrix-slack.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mautrix-slack']}] if matrix_mautrix_slack_enabled else [])

  219.     +

  220.     ([{'name': 'matrix-mautrix-facebook.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mautrix-facebook']}] if matrix_mautrix_facebook_enabled else [])

  221.     +

  222.     ([{'name': 'matrix-mautrix-googlechat.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mautrix-googlechat']}] if matrix_mautrix_googlechat_enabled else [])

  223.     +

  224.     ([{'name': 'matrix-mautrix-hangouts.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mautrix-hangouts']}] if matrix_mautrix_hangouts_enabled else [])

  225.     +

  226.     ([{'name': 'matrix-mautrix-instagram.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mautrix-instagram']}] if matrix_mautrix_instagram_enabled else [])

  227.     +

  228.     ([{'name': 'matrix-mautrix-signal.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mautrix-signal']}] if matrix_mautrix_signal_enabled else [])

  229.     +

  230.     ([{'name': 'matrix-mautrix-signal-daemon.service', 'priority': 1900, 'groups': ['matrix', 'bridges', 'mautrix-signal', 'mautrix-signal-daemon']}] if matrix_mautrix_signal_enabled else [])

  231.     +

  232.     ([{'name': 'matrix-mautrix-telegram.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mautrix-telegram']}] if matrix_mautrix_telegram_enabled else [])

  233.     +

  234.     ([{'name': 'matrix-mautrix-twitter.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mautrix-twitter']}] if matrix_mautrix_twitter_enabled else [])

  235.     +

  236.     ([{'name': 'matrix-mautrix-whatsapp.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mautrix-whatsapp']}] if matrix_mautrix_whatsapp_enabled else [])

  237.     +

  238.     ([{'name': 'matrix-mx-puppet-discord.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mx-puppet-discord']}] if matrix_mx_puppet_discord_enabled else [])

  239.     +

  240.     ([{'name': 'matrix-mx-puppet-groupme.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mx-puppet-groupme']}] if matrix_mx_puppet_groupme_enabled else [])

  241.     +

  242.     ([{'name': 'matrix-mx-puppet-instagram.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mx-puppet-instagram']}] if matrix_mx_puppet_instagram_enabled else [])

  243.     +

  244.     ([{'name': 'matrix-mx-puppet-slack.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mx-puppet-slack']}] if matrix_mx_puppet_slack_enabled else [])

  245.     +

  246.     ([{'name': 'matrix-mx-puppet-steam.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mx-puppet-steam']}] if matrix_mx_puppet_steam_enabled else [])

  247.     +

  248.     ([{'name': 'matrix-mx-puppet-twitter.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mx-puppet-twitter']}] if matrix_mx_puppet_twitter_enabled else [])

  249.     +

  250.     ([{'name': 'matrix-sms-bridge.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'sms']}] if matrix_sms_bridge_enabled else [])

  251.     +

  252.     ([{'name': 'matrix-cactus-comments.service', 'priority': 2000, 'groups': ['matrix', 'cactus-comments']}] if matrix_cactus_comments_enabled else [])

  253.     +

  254.     ([{'name': 'matrix-client-cinny.service', 'priority': 2000, 'groups': ['matrix', 'clients', 'cinny']}] if matrix_client_cinny_enabled else [])

  255.     +

  256.     ([{'name': 'matrix-client-element.service', 'priority': 2000, 'groups': ['matrix', 'clients', 'element']}] if matrix_client_element_enabled else [])

  257.     +

  258.     ([{'name': 'matrix-client-hydrogen.service', 'priority': 2000, 'groups': ['matrix', 'clients', 'hydrogen']}] if matrix_client_hydrogen_enabled else [])

  259.     +

  260.     ([{'name': ('matrix-' + matrix_homeserver_implementation + '.service'), 'priority': 1000, 'groups': ['matrix', 'homeservers', matrix_homeserver_implementation]}] if matrix_homeserver_enabled else [])

  261.     +

  262.     ([{'name': 'matrix-corporal.service', 'priority': 1500, 'groups': ['matrix', 'corporal']}] if matrix_corporal_enabled else [])

  263.     +

  264.     ([{'name': 'matrix-coturn.service', 'priority': 4000, 'groups': ['matrix', 'coturn']}] if matrix_coturn_enabled else [])

  265.     +

  266.     ([{'name': 'matrix-coturn-reload.timer', 'priority': 5000, 'groups': ['matrix', 'coturn']}] if (matrix_coturn_enabled and matrix_coturn_tls_enabled) else [])

  267.     +

  268.     ([{'name': 'matrix-dimension.service', 'priority': 2500, 'groups': ['matrix', 'integration-managers', 'dimension']}] if matrix_dimension_enabled else [])

  269.     +

  270.     ([{'name': 'matrix-dynamic-dns.service', 'priority': 5000, 'groups': ['matrix', 'dynamic-dns']}] if matrix_dynamic_dns_enabled else [])

  271.     +

  272.     ([{'name': 'matrix-email2matrix.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'email2matrix']}] if matrix_email2matrix_enabled else [])

  273.     +

  274.     ([{'name': 'matrix-etherpad.service', 'priority': 4000, 'groups': ['matrix', 'etherpad']}] if matrix_etherpad_enabled else [])

  275.     +

  276.     ([{'name': 'matrix-grafana.service', 'priority': 4000, 'groups': ['matrix', 'monitoring', 'grafana']}] if matrix_grafana_enabled else [])

  277.     +

  278.     ([{'name': 'matrix-jitsi-web.service', 'priority': 4200, 'groups': ['matrix', 'jitsi', 'jitsi-web']}] if matrix_jitsi_enabled else [])

  279.     +

  280.     ([{'name': 'matrix-jitsi-prosody.service', 'priority': 4000, 'groups': ['matrix', 'jitsi', 'jitsi-prosody']}] if matrix_jitsi_enabled else [])

  281.     +

  282.     ([{'name': 'matrix-jitsi-jicofo.service', 'priority': 4100, 'groups': ['matrix', 'jitsi', 'jitsi-jicofo']}] if matrix_jitsi_enabled else [])

  283.     +

  284.     ([{'name': 'matrix-jitsi-jvb.service', 'priority': 4100, 'groups': ['matrix', 'jitsi', 'jitsi-jvb']}] if matrix_jitsi_enabled else [])

  285.     +

  286.     ([{'name': 'matrix-ldap-registration-proxy.service', 'priority': 2000, 'groups': ['matrix', 'ldap-registration-proxy']}] if matrix_ldap_registration_proxy_enabled else [])

  287.     +

  288.     ([{'name': 'matrix-ma1sd.service', 'priority': 2000, 'groups': ['matrix', 'ma1sd']}] if matrix_ma1sd_enabled else [])

  289.     +

  290.     ([{'name': 'matrix-mailer.service', 'priority': 2000, 'groups': ['matrix', 'mailer']}] if matrix_mailer_enabled else [])

  291.     +

  292.     ([{'name': 'matrix-nginx-proxy.service', 'priority': 3000, 'groups': ['matrix', 'nginx', 'reverse-proxies']}] if matrix_nginx_proxy_enabled else [])

  293.     +

  294.     (matrix_ssl_renewal_systemd_units_list | selectattr('applicable') | selectattr('enableable') | list )

  295.     +

  296.     ([{'name': 'matrix-ntfy.service', 'priority': 800, 'groups': ['matrix', 'ntfy']}] if matrix_ntfy_enabled else [])

  297.     +

  298.     ([{'name': (devture_postgres_identifier + '.service'), 'priority': 500, 'groups': ['matrix', 'postgres']}] if devture_postgres_enabled else [])

  299.     +

  300.     ([{'name': (devture_postgres_backup_identifier + '.service'), 'priority': 5000, 'groups': ['matrix', 'backup', 'postgres-backup']}] if devture_postgres_backup_enabled else [])

  301.     +

  302.     ([{'name': 'matrix-prometheus.service', 'priority': 4000, 'groups': ['matrix', 'monitoring', 'prometheus', 'prometheus-core']}] if matrix_prometheus_enabled else [])

  303.     +

  304.     ([{'name': (prometheus_node_exporter_identifier + '.service'), 'priority': 3900, 'groups': ['matrix', 'monitoring', 'prometheus', 'prometheus-node-exporters']}] if prometheus_node_exporter_enabled else [])

  305.     +

  306.     ([{'name': 'matrix-prometheus-postgres-exporter.service', 'priority': 3900, 'groups': ['matrix', 'monitoring', 'prometheus', 'prometheus-node-exporters']}] if matrix_prometheus_postgres_exporter_enabled else [])

  307.     +

  308.     ([{'name': 'matrix-prometheus-nginxlog-exporter.service', 'priority': 3900, 'groups': ['matrix', 'monitoring', 'prometheus', 'prometheus-node-exporters']}] if matrix_prometheus_nginxlog_exporter_enabled else [])

  309.     +

  310.     ([{'name': 'matrix-redis', 'priority': 750, 'groups': ['matrix', 'redis']}] if matrix_redis_enabled else [])

  311.     +

  312.     ([{'name': 'matrix-registration.service', 'priority': 4000, 'groups': ['matrix', 'registration']}] if matrix_registration_enabled else [])

  313.     +

  314.     ([{'name': 'matrix-sygnal.service', 'priority': 800, 'groups': ['matrix', 'sygnal']}] if matrix_sygnal_enabled else [])

  315.     +

  316.     ([{'name': 'matrix-goofys.service', 'priority': 800, 'groups': ['matrix', 'goofys']}] if matrix_s3_media_store_enabled else [])

  317.     +

  318.     ([{'name': 'matrix-synapse-s3-storage-provider-migrate.timer', 'priority': 5000, 'groups': ['matrix']}] if matrix_synapse_ext_synapse_s3_storage_provider_enabled else [])

  319.     +

  320.     ([{'name': 'matrix-synapse-admin.service', 'priority': 4000, 'groups': ['matrix', 'synapse-admin']}] if matrix_synapse_admin_enabled else [])

  321.     +

  322.     ([{'name': 'matrix-synapse-reverse-proxy-companion.service', 'priority': 1500, 'groups': ['matrix', 'homeservers', 'synapse', 'reverse-proxies']}] if matrix_synapse_reverse_proxy_companion_enabled else [])

  323.   }}

  324. 

  325. ########################################################################

  326. #                                                                      #

  327. # /com.devture.ansible.role.systemd_service_manager                    #

  328. #                                                                      #

  329. ########################################################################

  330. 

  331. 

  332. ########################################################################

  333. #                                                                      #

  334. # com.devture.ansible.role.timesync                                    #

  335. #                                                                      #

  336. ########################################################################

  337. 

  338. # To completely disable installing systemd-timesyncd/ntpd, use `devture_timesync_installation_enabled: false`.

  339. 

  340. ########################################################################

  341. #                                                                      #

  342. # /com.devture.ansible.role.timesync                                   #

  343. #                                                                      #

  344. ########################################################################

  345. 

  346. 

  347. 

  348. ######################################################################

  349. #

  350. # com.devture.ansible.role.playbook_state_preserver

  351. #

  352. ######################################################################

  353. 

  354. # To completely disable this feature, use `devture_playbook_state_preserver_enabled: false`.

  355. 

  356. devture_playbook_state_preserver_uid: "{{ matrix_user_uid }}"

  357. devture_playbook_state_preserver_gid: "{{ matrix_user_gid }}"

  358. 

  359. devture_playbook_state_preserver_vars_preservation_dst: "{{ matrix_base_data_path }}/vars.yml"

  360. 

  361. devture_playbook_state_preserver_commit_hash_preservation_dst: "{{ matrix_base_data_path }}/git_hash.yml"

  362. 

  363. ######################################################################

  364. #

  365. # /com.devture.ansible.role.playbook_state_preserver

  366. #

  367. ######################################################################

  368. 

  369. 

  370. 

  371. ######################################################################

  372. #

  373. # matrix-base

  374. #

  375. ######################################################################

  376. 

  377. matrix_identity_server_url: "{{ ('https://' + matrix_server_fqn_matrix) if matrix_ma1sd_enabled else None }}"

  378. 

  379. matrix_homeserver_container_url: |-

  380.   {{

  381.     'http://matrix-nginx-proxy:12080' if matrix_nginx_proxy_enabled else {

  382.       'synapse': ('http://matrix-synapse-reverse-proxy-companion:8008' if matrix_synapse_reverse_proxy_companion_enabled else 'http://matrix-synapse:'+ matrix_synapse_container_client_api_port|string),

  383.       'dendrite': ('http://matrix-dendrite:' + matrix_dendrite_http_bind_port|string),

  384.       'conduit': ('http://matrix-conduit:' + matrix_conduit_port_number|string),

  385.     }[matrix_homeserver_implementation]

  386.   }}

  387. 

  388. matrix_homeserver_container_federation_url: |-

  389.   {{

  390.     'http://matrix-nginx-proxy:12088' if matrix_nginx_proxy_enabled else {

  391.       'synapse': ('http://matrix-synapse-reverse-proxy-companion:8048' if matrix_synapse_reverse_proxy_companion_enabled else 'http://matrix-synapse:'+ matrix_synapse_container_federation_api_plain_port|string),

  392.       'dendrite': ('http://matrix-dendrite:' + matrix_dendrite_http_bind_port|string),

  393.       'conduit': ('http://matrix-conduit:' + matrix_conduit_port_number|string),

  394.     }[matrix_homeserver_implementation]

  395.   }}

  396. 

  397. matrix_integration_manager_rest_url: "{{ matrix_dimension_integrations_rest_url if matrix_dimension_enabled else None }}"

  398. matrix_integration_manager_ui_url: "{{ matrix_dimension_integrations_ui_url if matrix_dimension_enabled else None }}"

  399. 

  400. ######################################################################

  401. #

  402. # /matrix-base

  403. #

  404. ######################################################################

  405. 

  406. 

  407. ######################################################################

  408. #

  409. # matrix-bridge-appservice-discord

  410. #

  411. ######################################################################

  412. 

  413. # We don't enable bridges by default.

  414. matrix_appservice_discord_enabled: false

  415. 

  416. # Normally, matrix-nginx-proxy is enabled and nginx can reach matrix-appservice-discord over the container network.

  417. # If matrix-nginx-proxy is not enabled, or you otherwise have a need for it, you can expose

  418. # matrix-appservice-discord's client-server port to the local host.

  419. matrix_appservice_discord_container_http_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else '127.0.0.1:9005' }}"

  420. 

  421. # If the homeserver disables presence, it's likely better (less wasteful) to also disable presence on the bridge side.

  422. matrix_appservice_discord_bridge_disablePresence: "{{ not matrix_synapse_presence_enabled }}"

  423. 

  424. matrix_appservice_discord_systemd_required_services_list: |

  425.   {{

  426.     ['docker.service']

  427.     +

  428.     ['matrix-' + matrix_homeserver_implementation + '.service']

  429.     +

  430.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  431.     +

  432.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  433.   }}

  434. 

  435. matrix_appservice_discord_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'discord.as.token', rounds=655555) | to_uuid }}"

  436. 

  437. matrix_appservice_discord_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'discord.hs.token', rounds=655555) | to_uuid }}"

  438. 

  439. # We only make this use Postgres if our own Postgres server is enabled.

  440. # It's only then (for now) that we can automatically create the necessary database and user for this service.

  441. matrix_appservice_discord_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  442. matrix_appservice_discord_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  443. matrix_appservice_discord_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'as.discord.db', rounds=655555) | to_uuid }}"

  444. 

  445. ######################################################################

  446. #

  447. # /matrix-bridge-appservice-discord

  448. #

  449. ######################################################################

  450. 

  451. 

  452. ######################################################################

  453. #

  454. # matrix-appservice-webhooks

  455. #

  456. ######################################################################

  457. 

  458. # We don't enable bridges by default.

  459. matrix_appservice_webhooks_enabled: false

  460. 

  461. matrix_appservice_webhooks_container_image_self_build: "{{ matrix_architecture != 'amd64' }}"

  462. 

  463. # Normally, matrix-nginx-proxy is enabled and nginx can reach matrix-appservice-webhooks over the container network.

  464. # If matrix-nginx-proxy is not enabled, or you otherwise have a need for it, you can expose

  465. # matrix-appservice-webhooks' client-server port to the local host.

  466. matrix_appservice_webhooks_container_http_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else ('127.0.0.1:' ~ matrix_appservice_webhooks_matrix_port) }}"

  467. 

  468. matrix_appservice_webhooks_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'webhook.as.token', rounds=655555) | to_uuid }}"

  469. 

  470. matrix_appservice_webhooks_homeserver_url: "{{ matrix_homeserver_container_url }}"

  471. matrix_appservice_webhooks_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'webhook.hs.token', rounds=655555) | to_uuid }}"

  472. 

  473. matrix_appservice_webhooks_id_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'webhook.id.token', rounds=655555) | to_uuid }}"

  474. 

  475. matrix_appservice_webhooks_systemd_required_services_list: |

  476.   {{

  477.     ['docker.service']

  478.     +

  479.     ['matrix-' + matrix_homeserver_implementation + '.service']

  480.     +

  481.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  482.   }}

  483. 

  484. ######################################################################

  485. #

  486. # /matrix-appservice-webhooks

  487. #

  488. ######################################################################

  489. 

  490. 

  491. ######################################################################

  492. #

  493. # matrix-appservice-slack

  494. #

  495. ######################################################################

  496. 

  497. # We don't enable bridges by default.

  498. matrix_appservice_slack_enabled: false

  499. 

  500. matrix_appservice_slack_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"

  501. 

  502. # Normally, matrix-nginx-proxy is enabled and nginx can reach matrix-appservice-slack over the container network.

  503. # If matrix-nginx-proxy is not enabled, or you otherwise have a need for it, you can expose

  504. # matrix-appservice-slack's client-server port to the local host.

  505. matrix_appservice_slack_container_http_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else ('127.0.0.1:' ~ matrix_appservice_slack_slack_port) }}"

  506. 

  507. matrix_appservice_slack_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'slack.as.token', rounds=655555) | to_uuid }}"

  508. 

  509. matrix_appservice_slack_homeserver_url: "{{ matrix_homeserver_container_url }}"

  510. matrix_appservice_slack_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'slack.hs.token', rounds=655555) | to_uuid }}"

  511. 

  512. matrix_appservice_slack_id_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'slack.id.token', rounds=655555) | to_uuid }}"

  513. 

  514. matrix_appservice_slack_systemd_required_services_list: |

  515.   {{

  516.     ['docker.service']

  517.     +

  518.     ['matrix-' + matrix_homeserver_implementation + '.service']

  519.     +

  520.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  521.   }}

  522. 

  523. # Postgres is the default, except if not using internal Postgres server

  524. matrix_appservice_slack_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'nedb' }}"

  525. matrix_appservice_slack_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  526. matrix_appservice_slack_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'as.slack.db', rounds=655555) | to_uuid }}"

  527. 

  528. ######################################################################

  529. #

  530. # /matrix-bridge-appservice-slack

  531. #

  532. ######################################################################

  533. 

  534. ######################################################################

  535. #

  536. # matrix-bridge-appservice-irc

  537. #

  538. ######################################################################

  539. 

  540. # We don't enable bridges by default.

  541. matrix_appservice_irc_enabled: false

  542. 

  543. matrix_appservice_irc_container_image_self_build: "{{ matrix_architecture != 'amd64' }}"

  544. 

  545. # Normally, matrix-nginx-proxy is enabled and nginx can reach matrix-appservice-irc over the container network.

  546. # If matrix-nginx-proxy is not enabled, or you otherwise have a need for it, you can expose

  547. # matrix-appservice-irc's client-server port to the local host.

  548. matrix_appservice_irc_container_http_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else '127.0.0.1:9999' }}"

  549. 

  550. # The IRC bridge docs say that if homeserver presence is disabled, it's better to also disable

  551. # IRC bridge presence, for performance reasons.

  552. matrix_appservice_irc_homeserver_enablePresence: "{{ matrix_synapse_presence_enabled }}"

  553. 

  554. matrix_appservice_irc_systemd_required_services_list: |

  555.   {{

  556.     ['docker.service']

  557.     +

  558.     ['matrix-' + matrix_homeserver_implementation + '.service']

  559.     +

  560.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  561.   }}

  562. 

  563. matrix_appservice_irc_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'irc.as.token', rounds=655555) | to_uuid }}"

  564. 

  565. matrix_appservice_irc_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'irc.hs.token', rounds=655555) | to_uuid }}"

  566. 

  567. matrix_appservice_irc_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'nedb' }}"

  568. matrix_appservice_irc_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  569. matrix_appservice_irc_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'as.irc.db', rounds=655555) | to_uuid }}"

  570. 

  571. 

  572. ######################################################################

  573. #

  574. # /matrix-bridge-appservice-irc

  575. #

  576. ######################################################################

  577. 

  578. ######################################################################

  579. #

  580. # matrix-bridge-appservice-kakaotalk

  581. #

  582. ######################################################################

  583. 

  584. # We don't enable bridges by default.

  585. matrix_appservice_kakaotalk_enabled: false

  586. 

  587. matrix_appservice_kakaotalk_systemd_required_services_list: |

  588.   {{

  589.     ['docker.service']

  590.     +

  591.     ['matrix-appservice-kakaotalk-node.service']

  592.     +

  593.     ['matrix-' + matrix_homeserver_implementation + '.service']

  594.     +

  595.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  596.     +

  597.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  598.   }}

  599. 

  600. matrix_appservice_kakaotalk_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'as.kakao.hs', rounds=655555) | to_uuid }}"

  601. 

  602. matrix_appservice_kakaotalk_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'as.kakao.hs', rounds=655555) | to_uuid }}"

  603. 

  604. matrix_appservice_kakaotalk_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  605. 

  606. matrix_appservice_kakaotalk_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  607. matrix_appservice_kakaotalk_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  608. matrix_appservice_kakaotalk_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'as.kakao.db', rounds=655555) | to_uuid }}"

  609. 

  610. ######################################################################

  611. #

  612. # /matrix-bridge-appservice-kakaotalk

  613. #

  614. ######################################################################

  615. 

  616. 

  617. ######################################################################

  618. #

  619. # matrix-bridge-beeper-linkedin

  620. #

  621. ######################################################################

  622. 

  623. # We don't enable bridges by default.

  624. matrix_beeper_linkedin_enabled: false

  625. 

  626. matrix_beeper_linkedin_container_image_self_build: "{{ matrix_architecture not in ['amd64'] }}"

  627. 

  628. matrix_beeper_linkedin_systemd_required_services_list: |

  629.   {{

  630.     ['docker.service']

  631.     +

  632.     ['matrix-' + matrix_homeserver_implementation + '.service']

  633.     +

  634.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  635.     +

  636.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  637.   }}

  638. 

  639. matrix_beeper_linkedin_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'linked.as.token', rounds=655555) | to_uuid }}"

  640. 

  641. matrix_beeper_linkedin_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'linked.hs.token', rounds=655555) | to_uuid }}"

  642. 

  643. matrix_beeper_linkedin_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  644. 

  645. matrix_beeper_linkedin_bridge_presence: "{{ matrix_synapse_presence_enabled if matrix_synapse_enabled else true }}"

  646. 

  647. matrix_beeper_linkedin_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  648. matrix_beeper_linkedin_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'maulinkedin.db', rounds=655555) | to_uuid }}"

  649. 

  650. ######################################################################

  651. #

  652. # /matrix-bridge-beeper-linkedin

  653. #

  654. ######################################################################

  655. 

  656. ######################################################################

  657. #

  658. # matrix-bridge-go-skype-bridge

  659. #

  660. ######################################################################

  661. 

  662. # We don't enable bridges by default.

  663. matrix_go_skype_bridge_enabled: false

  664. 

  665. matrix_go_skype_bridge_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"

  666. 

  667. matrix_go_skype_bridge_systemd_required_services_list: |

  668.   {{

  669.     ['docker.service']

  670.     +

  671.     ['matrix-' + matrix_homeserver_implementation + '.service']

  672.     +

  673.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  674.     +

  675.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  676.   }}

  677. 

  678. matrix_go_skype_bridge_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'skype.as.token', rounds=655555) | to_uuid }}"

  679. 

  680. matrix_go_skype_bridge_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'skype.hs.token', rounds=655555) | to_uuid }}"

  681. 

  682. matrix_go_skype_bridge_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  683. 

  684. # Postgres is the default, except if not using internal Postgres server

  685. matrix_go_skype_bridge_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  686. matrix_go_skype_bridge_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  687. matrix_go_skype_bridge_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'goskype.db', rounds=655555) | to_uuid }}"

  688. 

  689. ######################################################################

  690. #

  691. # /matrix-bridge-go-skype-bridge

  692. #

  693. ######################################################################

  694. 

  695. 

  696. ######################################################################

  697. #

  698. # matrix-bridge-mautrix-discord

  699. #

  700. ######################################################################

  701. 

  702. # We don't enable bridges by default.

  703. matrix_mautrix_discord_enabled: false

  704. 

  705. matrix_mautrix_discord_container_image_self_build: "{{ matrix_architecture not in ['arm64', 'amd64'] }}"

  706. 

  707. matrix_mautrix_discord_systemd_required_services_list: |

  708.   {{

  709.     ['docker.service']

  710.     +

  711.     ['matrix-' + matrix_homeserver_implementation + '.service']

  712.     +

  713.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  714.     +

  715.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  716.   }}

  717. 

  718. matrix_mautrix_discord_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'maudisc.as.tok', rounds=655555) | to_uuid }}"

  719. 

  720. matrix_mautrix_discord_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'maudisc.hs.tok', rounds=655555) | to_uuid }}"

  721. 

  722. matrix_mautrix_discord_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  723. 

  724. # Postgres is the default, except if not using internal Postgres server

  725. matrix_mautrix_discord_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  726. matrix_mautrix_discord_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  727. matrix_mautrix_discord_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'maudiscord.db', rounds=655555) | to_uuid }}"

  728. 

  729. ######################################################################

  730. #

  731. # /matrix-bridge-mautrix-discord

  732. #

  733. ######################################################################

  734. 

  735. 

  736. ######################################################################

  737. #

  738. # matrix-bridge-mautrix-slack

  739. #

  740. ######################################################################

  741. 

  742. # We don't enable bridges by default.

  743. matrix_mautrix_slack_enabled: false

  744. 

  745. matrix_mautrix_slack_container_image_self_build: "{{ matrix_architecture not in ['arm64', 'amd64'] }}"

  746. 

  747. matrix_mautrix_slack_systemd_required_services_list: |

  748.   {{

  749.     ['docker.service']

  750.     +

  751.     ['matrix-' + matrix_homeserver_implementation + '.service']

  752.     +

  753.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  754.     +

  755.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  756.   }}

  757. 

  758. matrix_mautrix_slack_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mauslack.as.tok', rounds=655555) | to_uuid }}"

  759. 

  760. matrix_mautrix_slack_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mauslack.hs.tok', rounds=655555) | to_uuid }}"

  761. 

  762. matrix_mautrix_slack_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  763. 

  764. # Postgres is the default, except if not using internal Postgres server

  765. matrix_mautrix_slack_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  766. matrix_mautrix_slack_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  767. matrix_mautrix_slack_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mauslack.db', rounds=655555) | to_uuid }}"

  768. 

  769. ######################################################################

  770. #

  771. # /matrix-bridge-mautrix-slack

  772. #

  773. ######################################################################

  774. 

  775. 

  776. ######################################################################

  777. #

  778. # matrix-bridge-mautrix-facebook

  779. #

  780. ######################################################################

  781. 

  782. # We don't enable bridges by default.

  783. matrix_mautrix_facebook_enabled: false

  784. 

  785. matrix_mautrix_facebook_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"

  786. 

  787. matrix_mautrix_facebook_systemd_required_services_list: |

  788.   {{

  789.     ['docker.service']

  790.     +

  791.     ['matrix-' + matrix_homeserver_implementation + '.service']

  792.     +

  793.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  794.     +

  795.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  796.   }}

  797. 

  798. matrix_mautrix_facebook_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'fb.as.token', rounds=655555) | to_uuid }}"

  799. 

  800. matrix_mautrix_facebook_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'fb.hs.token', rounds=655555) | to_uuid }}"

  801. 

  802. matrix_mautrix_facebook_public_endpoint: "/{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'facebook', rounds=655555) | to_uuid }}"

  803. 

  804. matrix_mautrix_facebook_container_http_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else '127.0.0.1:9008' }}"

  805. 

  806. matrix_mautrix_facebook_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  807. 

  808. matrix_mautrix_facebook_bridge_presence: "{{ matrix_synapse_presence_enabled if matrix_synapse_enabled else true }}"

  809. 

  810. # People using an external Prometheus server will need to toggle all of these to be able to consume metrics remotely:

  811. # - `matrix_mautrix_facebook_metrics_enabled`

  812. # - `matrix_mautrix_facebook_proxying_metrics_enabled`

  813. # - `matrix_nginx_proxy_proxy_matrix_metrics_enabled`

  814. matrix_mautrix_facebook_metrics_enabled: "{{ matrix_prometheus_enabled }}"

  815. 

  816. # We'd like to force-set people with external Postgres to SQLite, so the bridge role can complain

  817. # and point them to a migration path.

  818. matrix_mautrix_facebook_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  819. matrix_mautrix_facebook_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  820. matrix_mautrix_facebook_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mau.fb.db', rounds=655555) | to_uuid }}"

  821. 

  822. ######################################################################

  823. #

  824. # /matrix-bridge-mautrix-facebook

  825. #

  826. ######################################################################

  827. 

  828. 

  829. ######################################################################

  830. #

  831. # matrix-bridge-mautrix-googlechat

  832. #

  833. ######################################################################

  834. 

  835. # We don't enable bridges by default.

  836. matrix_mautrix_googlechat_enabled: false

  837. 

  838. matrix_mautrix_googlechat_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"

  839. 

  840. matrix_mautrix_googlechat_systemd_required_services_list: |

  841.   {{

  842.     ['docker.service']

  843.     +

  844.     ['matrix-' + matrix_homeserver_implementation + '.service']

  845.     +

  846.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  847.     +

  848.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  849.   }}

  850. 

  851. matrix_mautrix_googlechat_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'gc.as.token', rounds=655555) | to_uuid }}"

  852. 

  853. matrix_mautrix_googlechat_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'gc.hs.token', rounds=655555) | to_uuid }}"

  854. 

  855. matrix_mautrix_googlechat_container_http_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else '127.0.0.1:9007' }}"

  856. 

  857. matrix_mautrix_googlechat_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  858. 

  859. # Postgres is the default, except if not using internal Postgres server

  860. matrix_mautrix_googlechat_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  861. matrix_mautrix_googlechat_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  862. matrix_mautrix_googlechat_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mau.gc.db', rounds=655555) | to_uuid }}"

  863. 

  864. ######################################################################

  865. #

  866. # /matrix-bridge-mautrix-googlechat

  867. #

  868. ######################################################################

  869. 

  870. 

  871. ######################################################################

  872. #

  873. # matrix-bridge-mautrix-hangouts

  874. #

  875. ######################################################################

  876. 

  877. # We don't enable bridges by default.

  878. matrix_mautrix_hangouts_enabled: false

  879. 

  880. matrix_mautrix_hangouts_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"

  881. 

  882. matrix_mautrix_hangouts_systemd_required_services_list: |

  883.   {{

  884.     ['docker.service']

  885.     +

  886.     ['matrix-' + matrix_homeserver_implementation + '.service']

  887.     +

  888.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  889.     +

  890.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  891.   }}

  892. 

  893. matrix_mautrix_hangouts_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'ho.as.token', rounds=655555) | to_uuid }}"

  894. 

  895. matrix_mautrix_hangouts_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'ho.hs.token', rounds=655555) | to_uuid }}"

  896. 

  897. matrix_mautrix_hangouts_container_http_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else '127.0.0.1:9007' }}"

  898. 

  899. matrix_mautrix_hangouts_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  900. 

  901. # Postgres is the default, except if not using internal Postgres server

  902. matrix_mautrix_hangouts_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  903. matrix_mautrix_hangouts_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  904. matrix_mautrix_hangouts_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mau.hangouts.db', rounds=655555) | to_uuid }}"

  905. 

  906. ######################################################################

  907. #

  908. # /matrix-bridge-mautrix-hangouts

  909. #

  910. ######################################################################

  911. 

  912. 

  913. ######################################################################

  914. #

  915. # matrix-bridge-mautrix-instagram

  916. #

  917. ######################################################################

  918. 

  919. # We don't enable bridges by default.

  920. matrix_mautrix_instagram_enabled: false

  921. 

  922. matrix_mautrix_instagram_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"

  923. 

  924. matrix_mautrix_instagram_systemd_required_services_list: |

  925.   {{

  926.     ['docker.service']

  927.     +

  928.     ['matrix-' + matrix_homeserver_implementation + '.service']

  929.     +

  930.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  931.     +

  932.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  933.   }}

  934. 

  935. matrix_mautrix_instagram_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'ig.as.token', rounds=655555) | to_uuid }}"

  936. 

  937. matrix_mautrix_instagram_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'ig.hs.token', rounds=655555) | to_uuid }}"

  938. 

  939. matrix_mautrix_instagram_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  940. 

  941. matrix_mautrix_instagram_bridge_presence: "{{ matrix_synapse_presence_enabled if matrix_synapse_enabled else true }}"

  942. 

  943. # People using an external Prometheus server will need to toggle all of these to be able to consume metrics remotely:

  944. # - `matrix_mautrix_instagram_metrics_enabled`

  945. # - `matrix_mautrix_instagram_proxying_metrics_enabled`

  946. # - `matrix_nginx_proxy_proxy_matrix_metrics_enabled`

  947. matrix_mautrix_instagram_metrics_enabled: "{{ matrix_prometheus_enabled }}"

  948. 

  949. # We'd like to force-set people with external Postgres to SQLite, so the bridge role can complain

  950. # and point them to a migration path.

  951. matrix_mautrix_instagram_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  952. matrix_mautrix_instagram_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  953. matrix_mautrix_instagram_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mau.ig.db', rounds=655555) | to_uuid }}"

  954. 

  955. ######################################################################

  956. #

  957. # /matrix-bridge-mautrix-instagram

  958. #

  959. ######################################################################

  960. 

  961. 

  962. ######################################################################

  963. #

  964. # matrix-bridge-mautrix-signal

  965. #

  966. ######################################################################

  967. 

  968. # We don't enable bridges by default.

  969. matrix_mautrix_signal_enabled: false

  970. 

  971. matrix_mautrix_signal_systemd_required_services_list: |

  972.   {{

  973.     ['docker.service']

  974.     +

  975.     ['matrix-' + matrix_homeserver_implementation + '.service']

  976.     +

  977.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  978.     +

  979.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  980.     +

  981.     ['matrix-mautrix-signal-daemon.service']

  982.   }}

  983. 

  984. matrix_mautrix_signal_homeserver_domain: '{{ matrix_domain }}'

  985. 

  986. matrix_mautrix_signal_homeserver_address: "{{ matrix_homeserver_container_url }}"

  987. 

  988. matrix_mautrix_signal_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'si.hs.token', rounds=655555) | to_uuid }}"

  989. 

  990. matrix_mautrix_signal_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'si.as.token', rounds=655555) | to_uuid }}"

  991. 

  992. matrix_mautrix_signal_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  993. 

  994. # People using an external Prometheus server will need to toggle all of these to be able to consume metrics remotely:

  995. # - `matrix_mautrix_signal_metrics_enabled`

  996. # - `matrix_mautrix_signal_proxying_metrics_enabled`

  997. # - `matrix_nginx_proxy_proxy_matrix_metrics_enabled`

  998. matrix_mautrix_signal_metrics_enabled: "{{ matrix_prometheus_enabled }}"

  999. 

  1000. matrix_mautrix_signal_database_engine: 'postgres'

  1001. matrix_mautrix_signal_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1002. matrix_mautrix_signal_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mau.signal.db', rounds=655555) | to_uuid }}"

  1003. 

  1004. matrix_mautrix_signal_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"

  1005. matrix_mautrix_signal_daemon_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"

  1006. 

  1007. ######################################################################

  1008. #

  1009. # /matrix-bridge-mautrix-signal

  1010. #

  1011. ######################################################################

  1012. 

  1013. ######################################################################

  1014. #

  1015. # matrix-bridge-mautrix-telegram

  1016. #

  1017. ######################################################################

  1018. 

  1019. # We don't enable bridges by default.

  1020. matrix_mautrix_telegram_enabled: false

  1021. 

  1022. # Images are multi-arch (amd64 and arm64, but not arm32).

  1023. matrix_mautrix_telegram_container_image_self_build: "{{ matrix_architecture not in ['arm64', 'amd64'] }}"

  1024. matrix_telegram_lottieconverter_container_image_self_build: "{{ matrix_architecture not in ['arm64', 'amd64'] }}"

  1025. matrix_telegram_lottieconverter_container_image_self_build_mask_arch: "{{ matrix_architecture != 'amd64' }}"

  1026. 

  1027. matrix_mautrix_telegram_systemd_required_services_list: |

  1028.   {{

  1029.     ['docker.service']

  1030.     +

  1031.     ['matrix-' + matrix_homeserver_implementation + '.service']

  1032.     +

  1033.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  1034.     +

  1035.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1036.   }}

  1037. 

  1038. matrix_mautrix_telegram_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'telegr.as.token', rounds=655555) | to_uuid }}"

  1039. 

  1040. matrix_mautrix_telegram_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'telegr.hs.token', rounds=655555) | to_uuid }}"

  1041. 

  1042. matrix_mautrix_telegram_public_endpoint: "/{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'telegram', rounds=655555) | to_uuid }}"

  1043. 

  1044. matrix_mautrix_telegram_container_http_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else '127.0.0.1:9006' }}"

  1045. 

  1046. matrix_mautrix_telegram_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  1047. 

  1048. # Postgres is the default, except if not using internal Postgres server

  1049. matrix_mautrix_telegram_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  1050. matrix_mautrix_telegram_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1051. matrix_mautrix_telegram_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mau.telegram.db', rounds=655555) | to_uuid }}"

  1052. 

  1053. ######################################################################

  1054. #

  1055. # /matrix-bridge-mautrix-telegram

  1056. #

  1057. ######################################################################

  1058. 

  1059. ######################################################################

  1060. #

  1061. # matrix-bridge-mautrix-twitter

  1062. #

  1063. ######################################################################

  1064. 

  1065. # We don't enable bridges by default.

  1066. matrix_mautrix_twitter_enabled: false

  1067. 

  1068. matrix_mautrix_twitter_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"

  1069. 

  1070. matrix_mautrix_twitter_systemd_required_services_list: |

  1071.   {{

  1072.     ['docker.service']

  1073.     +

  1074.     ['matrix-' + matrix_homeserver_implementation + '.service']

  1075.     +

  1076.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  1077.     +

  1078.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1079.   }}

  1080. 

  1081. matrix_mautrix_twitter_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'twt.as.token', rounds=655555) | to_uuid }}"

  1082. 

  1083. matrix_mautrix_twitter_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'twt.hs.token', rounds=655555) | to_uuid }}"

  1084. 

  1085. matrix_mautrix_twitter_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  1086. 

  1087. matrix_mautrix_twitter_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1088. matrix_mautrix_twitter_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mau.twt.db', rounds=655555) | to_uuid if devture_postgres_enabled else '' }}"

  1089. 

  1090. ######################################################################

  1091. #

  1092. # /matrix-bridge-mautrix-twitter

  1093. #

  1094. ######################################################################

  1095. 

  1096. ######################################################################

  1097. #

  1098. # matrix-bridge-mautrix-whatsapp

  1099. #

  1100. ######################################################################

  1101. 

  1102. # We don't enable bridges by default.

  1103. matrix_mautrix_whatsapp_enabled: false

  1104. 

  1105. matrix_mautrix_whatsapp_container_image_self_build: "{{ matrix_architecture not in ['arm64', 'amd64'] }}"

  1106. 

  1107. matrix_mautrix_whatsapp_systemd_required_services_list: |

  1108.   {{

  1109.     ['docker.service']

  1110.     +

  1111.     ['matrix-' + matrix_homeserver_implementation + '.service']

  1112.     +

  1113.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  1114.     +

  1115.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1116.   }}

  1117. 

  1118. matrix_mautrix_whatsapp_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'whats.as.token', rounds=655555) | to_uuid }}"

  1119. 

  1120. matrix_mautrix_whatsapp_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'whats.hs.token', rounds=655555) | to_uuid }}"

  1121. 

  1122. matrix_mautrix_whatsapp_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  1123. 

  1124. # People using an external Prometheus server will need to toggle all of these to be able to consume metrics remotely:

  1125. # - `matrix_mautrix_twitter_metrics_enabled`

  1126. # - `matrix_mautrix_twitter_proxying_metrics_enabled`

  1127. # - `matrix_nginx_proxy_proxy_matrix_metrics_enabled`

  1128. matrix_mautrix_twitter_metrics_enabled: "{{ matrix_prometheus_enabled }}"

  1129. 

  1130. # Postgres is the default, except if not using internal Postgres server

  1131. matrix_mautrix_whatsapp_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  1132. matrix_mautrix_whatsapp_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1133. matrix_mautrix_whatsapp_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mauwhatsapp.db', rounds=655555) | to_uuid }}"

  1134. 

  1135. ######################################################################

  1136. #

  1137. # /matrix-bridge-mautrix-whatsapp

  1138. #

  1139. ######################################################################

  1140. 

  1141. ######################################################################

  1142. #

  1143. # matrix-sms-bridge

  1144. #

  1145. ######################################################################

  1146. 

  1147. # We don't enable bridges by default.

  1148. matrix_sms_bridge_enabled: false

  1149. 

  1150. matrix_sms_bridge_systemd_required_services_list: |

  1151.   {{

  1152.     ['docker.service']

  1153.     +

  1154.     ['matrix-' + matrix_homeserver_implementation + '.service']

  1155.     +

  1156.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1157.   }}

  1158. 

  1159. matrix_sms_bridge_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'sms.as.token', rounds=655555) | to_uuid }}"

  1160. 

  1161. matrix_sms_bridge_homeserver_port: "{{ matrix_synapse_container_client_api_port }}"

  1162. matrix_sms_bridge_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'sms.hs.token', rounds=655555) | to_uuid }}"

  1163. 

  1164. ######################################################################

  1165. #

  1166. # /matrix-sms-bridge

  1167. #

  1168. ######################################################################

  1169. 

  1170. ######################################################################

  1171. #

  1172. # matrix-bridge-heisenbridge

  1173. #

  1174. ######################################################################

  1175. 

  1176. # We don't enable bridges by default.

  1177. matrix_heisenbridge_enabled: false

  1178. 

  1179. matrix_heisenbridge_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'heisen.as.tok', rounds=655555) | to_uuid }}"

  1180. 

  1181. matrix_heisenbridge_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'heisen.hs.tok', rounds=655555) | to_uuid }}"

  1182. 

  1183. matrix_heisenbridge_systemd_wanted_services_list: |

  1184.   {{

  1185.     ['matrix-' + matrix_homeserver_implementation + '.service']

  1186.     +

  1187.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1188.   }}

  1189. 

  1190. ######################################################################

  1191. #

  1192. # /matrix-bridge-heisenbridge

  1193. #

  1194. ######################################################################

  1195. 

  1196. ######################################################################

  1197. #

  1198. # matrix-bridge-hookshot

  1199. #

  1200. ######################################################################

  1201. 

  1202. # We don't enable bridges by default.

  1203. matrix_hookshot_enabled: false

  1204. 

  1205. matrix_hookshot_container_image_self_build: "{{ matrix_architecture not in ['arm64', 'amd64'] }}"

  1206. 

  1207. matrix_hookshot_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'hookshot.as.tok', rounds=655555) | to_uuid }}"

  1208. 

  1209. matrix_hookshot_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'hookshot.hs.tok', rounds=655555) | to_uuid }}"

  1210. 

  1211. matrix_hookshot_systemd_wanted_services_list: |

  1212.   {{

  1213.     (['matrix-' + matrix_homeserver_implementation + '.service'])

  1214.     +

  1215.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1216.   }}

  1217. 

  1218. matrix_hookshot_container_http_host_bind_ports_defaultmapping:

  1219.   - "127.0.0.1:{{ matrix_hookshot_appservice_port }}:{{ matrix_hookshot_appservice_port }}"

  1220.   - "127.0.0.1:{{ matrix_hookshot_metrics_port }}:{{ matrix_hookshot_metrics_port }}"

  1221.   - "127.0.0.1:{{ matrix_hookshot_webhook_port }}:{{ matrix_hookshot_webhook_port }}"

  1222.   - "127.0.0.1:{{ matrix_hookshot_provisioning_port }}:{{ matrix_hookshot_provisioning_port }}"

  1223. 

  1224. matrix_hookshot_container_http_host_bind_ports: "{{ [] if matrix_nginx_proxy_enabled else matrix_hookshot_container_http_host_bind_ports_defaultmapping }}"

  1225. 

  1226. matrix_hookshot_provisioning_enabled: "{{ matrix_hookshot_provisioning_secret and matrix_dimension_enabled }}"

  1227. 

  1228. # We only enable metrics (locally, in the container network) for the bridge if Prometheus is enabled.

  1229. #

  1230. # People using an external Prometheus server will need to toggle all of these to be able to consume metrics remotely:

  1231. # - `matrix_hookshot_metrics_enabled`

  1232. # - `matrix_hookshot_metrics_proxying_enabled`

  1233. # - `matrix_nginx_proxy_proxy_matrix_metrics_enabled`

  1234. matrix_hookshot_metrics_enabled: "{{ matrix_prometheus_enabled }}"

  1235. 

  1236. matrix_hookshot_urlprefix_port_enabled: "{{ matrix_nginx_proxy_container_https_host_bind_port == 443 if matrix_nginx_proxy_https_enabled else matrix_nginx_proxy_container_https_host_bind_port == 80 }}"

  1237. matrix_hookshot_urlprefix_port: ":{{ matrix_nginx_proxy_container_https_host_bind_port if matrix_nginx_proxy_https_enabled else matrix_nginx_proxy_container_http_host_bind_port }}"

  1238. matrix_hookshot_urlprefix: "http{{ 's' if matrix_nginx_proxy_https_enabled else '' }}://{{ matrix_server_fqn_matrix }}{{ matrix_hookshot_urlprefix_port if matrix_hookshot_urlprefix_port_enabled else '' }}"

  1239. 

  1240. ######################################################################

  1241. #

  1242. # /matrix-bridge-hookshot

  1243. #

  1244. ######################################################################

  1245. 

  1246. 

  1247. ######################################################################

  1248. #

  1249. # matrix-bridge-mx-puppet-slack

  1250. #

  1251. ######################################################################

  1252. 

  1253. # We don't enable bridges by default.

  1254. matrix_mx_puppet_slack_enabled: false

  1255. 

  1256. matrix_mx_puppet_slack_container_image_self_build: "{{ matrix_architecture != 'amd64' }}"

  1257. 

  1258. matrix_mx_puppet_slack_systemd_required_services_list: |

  1259.   {{

  1260.     ['docker.service']

  1261.     +

  1262.     ['matrix-' + matrix_homeserver_implementation + '.service']

  1263.     +

  1264.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  1265.     +

  1266.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1267.   }}

  1268. 

  1269. matrix_mx_puppet_slack_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxslk.as.tok', rounds=655555) | to_uuid }}"

  1270. 

  1271. matrix_mx_puppet_slack_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxslk.hs.tok', rounds=655555) | to_uuid }}"

  1272. 

  1273. matrix_mx_puppet_slack_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  1274. 

  1275. # Postgres is the default, except if not using internal Postgres server

  1276. matrix_mx_puppet_slack_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  1277. matrix_mx_puppet_slack_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1278. matrix_mx_puppet_slack_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxpup.slack.db', rounds=655555) | to_uuid }}"

  1279. 

  1280. ######################################################################

  1281. #

  1282. # /matrix-bridge-mx-puppet-slack

  1283. #

  1284. ######################################################################

  1285. 

  1286. ######################################################################

  1287. #

  1288. # matrix-bridge-mx-puppet-twitter

  1289. #

  1290. ######################################################################

  1291. 

  1292. # We don't enable bridges by default.

  1293. matrix_mx_puppet_twitter_enabled: false

  1294. 

  1295. matrix_mx_puppet_twitter_container_image_self_build: "{{ matrix_architecture != 'amd64' }}"

  1296. 

  1297. matrix_mx_puppet_twitter_systemd_required_services_list: |

  1298.   {{

  1299.     ['docker.service']

  1300.     +

  1301.     ['matrix-' + matrix_homeserver_implementation + '.service']

  1302.     +

  1303.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  1304.     +

  1305.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1306.   }}

  1307. 

  1308. matrix_mx_puppet_twitter_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxtwt.as.tok', rounds=655555) | to_uuid }}"

  1309. 

  1310. matrix_mx_puppet_twitter_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxtwt.hs.tok', rounds=655555) | to_uuid }}"

  1311. 

  1312. matrix_mx_puppet_twitter_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  1313. 

  1314. matrix_mx_puppet_twitter_container_http_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else ('127.0.0.1:' ~ matrix_mx_puppet_twitter_appservice_port) }}"

  1315. 

  1316. # Postgres is the default, except if not using internal Postgres server

  1317. matrix_mx_puppet_twitter_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  1318. matrix_mx_puppet_twitter_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1319. matrix_mx_puppet_twitter_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxpup.twitter.db', rounds=655555) | to_uuid }}"

  1320. 

  1321. ######################################################################

  1322. #

  1323. # /matrix-bridge-mx-puppet-twitter

  1324. #

  1325. ######################################################################

  1326. 

  1327. 

  1328. ######################################################################

  1329. #

  1330. # matrix-bridge-mx-puppet-instagram

  1331. #

  1332. ######################################################################

  1333. 

  1334. # We don't enable bridges by default.

  1335. matrix_mx_puppet_instagram_enabled: false

  1336. 

  1337. matrix_mx_puppet_instagram_container_image_self_build: "{{ matrix_architecture != 'amd64' }}"

  1338. 

  1339. matrix_mx_puppet_instagram_systemd_required_services_list: |

  1340.   {{

  1341.     ['docker.service']

  1342.     +

  1343.     ['matrix-' + matrix_homeserver_implementation + '.service']

  1344.     +

  1345.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  1346.     +

  1347.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1348.   }}

  1349. 

  1350. matrix_mx_puppet_instagram_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxig.as.tok', rounds=655555) | to_uuid }}"

  1351. 

  1352. matrix_mx_puppet_instagram_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxig.hs.tok', rounds=655555) | to_uuid }}"

  1353. 

  1354. matrix_mx_puppet_instagram_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  1355. 

  1356. # Postgres is the default, except if not using internal Postgres server

  1357. matrix_mx_puppet_instagram_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  1358. matrix_mx_puppet_instagram_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1359. matrix_mx_puppet_instagram_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxpup.ig.db', rounds=655555) | to_uuid }}"

  1360. 

  1361. ######################################################################

  1362. #

  1363. # /matrix-bridge-mx-puppet-instagram

  1364. #

  1365. ######################################################################

  1366. 

  1367. ######################################################################

  1368. #

  1369. # matrix-bridge-mx-puppet-discord

  1370. #

  1371. ######################################################################

  1372. 

  1373. # We don't enable bridges by default.

  1374. matrix_mx_puppet_discord_enabled: false

  1375. 

  1376. matrix_mx_puppet_discord_container_image_self_build: "{{ matrix_architecture != 'amd64' }}"

  1377. 

  1378. matrix_mx_puppet_discord_systemd_required_services_list: |

  1379.   {{

  1380.     ['docker.service']

  1381.     +

  1382.     ['matrix-' + matrix_homeserver_implementation + '.service']

  1383.     +

  1384.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  1385.     +

  1386.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1387.   }}

  1388. 

  1389. matrix_mx_puppet_discord_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxdsc.as.tok', rounds=655555) | to_uuid }}"

  1390. 

  1391. matrix_mx_puppet_discord_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxdsc.hs.tok', rounds=655555) | to_uuid }}"

  1392. 

  1393. matrix_mx_puppet_discord_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  1394. 

  1395. # Postgres is the default, except if not using internal Postgres server

  1396. matrix_mx_puppet_discord_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  1397. matrix_mx_puppet_discord_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1398. matrix_mx_puppet_discord_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxpup.dsc.db', rounds=655555) | to_uuid }}"

  1399. 

  1400. ######################################################################

  1401. #

  1402. # /matrix-bridge-mx-puppet-discord

  1403. #

  1404. ######################################################################

  1405. 

  1406. ######################################################################

  1407. #

  1408. # matrix-bridge-mx-puppet-steam

  1409. #

  1410. ######################################################################

  1411. 

  1412. # We don't enable bridges by default.

  1413. matrix_mx_puppet_steam_enabled: false

  1414. 

  1415. matrix_mx_puppet_steam_container_image_self_build: "{{ matrix_architecture not in ['arm64', 'amd64'] }}"

  1416. 

  1417. matrix_mx_puppet_steam_systemd_required_services_list: |

  1418.   {{

  1419.     ['docker.service']

  1420.     +

  1421.     ['matrix-' + matrix_homeserver_implementation + '.service']

  1422.     +

  1423.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  1424.     +

  1425.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1426.   }}

  1427. 

  1428. matrix_mx_puppet_steam_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxste.as.tok', rounds=655555) | to_uuid }}"

  1429. 

  1430. matrix_mx_puppet_steam_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxste.hs.tok', rounds=655555) | to_uuid }}"

  1431. 

  1432. matrix_mx_puppet_steam_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  1433. 

  1434. # Postgres is the default, except if not using internal Postgres server

  1435. matrix_mx_puppet_steam_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  1436. matrix_mx_puppet_steam_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1437. matrix_mx_puppet_steam_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxpup.steam.db', rounds=655555) | to_uuid }}"

  1438. 

  1439. ######################################################################

  1440. #

  1441. # /matrix-bridge-mx-puppet-steam

  1442. #

  1443. ######################################################################

  1444. 

  1445. ######################################################################

  1446. #

  1447. # matrix-bridge-mx-puppet-groupme

  1448. #

  1449. ######################################################################

  1450. 

  1451. # We don't enable bridges by default.

  1452. matrix_mx_puppet_groupme_enabled: false

  1453. 

  1454. matrix_mx_puppet_groupme_container_image_self_build: "{{ matrix_architecture != 'amd64' }}"

  1455. 

  1456. matrix_mx_puppet_groupme_systemd_required_services_list: |

  1457.   {{

  1458.     ['docker.service']

  1459.     +

  1460.     ['matrix-' + matrix_homeserver_implementation + '.service']

  1461.     +

  1462.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  1463.     +

  1464.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1465.   }}

  1466. 

  1467. matrix_mx_puppet_groupme_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxgro.as.tok', rounds=655555) | to_uuid }}"

  1468. 

  1469. matrix_mx_puppet_groupme_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxgro.hs.tok', rounds=655555) | to_uuid }}"

  1470. 

  1471. matrix_mx_puppet_groupme_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  1472. 

  1473. # Postgres is the default, except if not using internal Postgres server

  1474. matrix_mx_puppet_groupme_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  1475. matrix_mx_puppet_groupme_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1476. matrix_mx_puppet_groupme_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxpup.groupme.db', rounds=655555) | to_uuid }}"

  1477. 

  1478. ######################################################################

  1479. #

  1480. # /matrix-bridge-mx-puppet-groupme

  1481. #

  1482. ######################################################################

  1483. 

  1484. ######################################################################

  1485. #

  1486. # matrix-bot-matrix-reminder-bot

  1487. #

  1488. ######################################################################

  1489. 

  1490. # We don't enable bots by default.

  1491. matrix_bot_matrix_reminder_bot_enabled: false

  1492. 

  1493. matrix_bot_matrix_reminder_bot_systemd_required_services_list: |

  1494.   {{

  1495.     ['docker.service']

  1496.     +

  1497.     ['matrix-' + matrix_homeserver_implementation + '.service']

  1498.     +

  1499.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  1500.     +

  1501.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1502.   }}

  1503. 

  1504. # Postgres is the default, except if not using internal Postgres server

  1505. matrix_bot_matrix_reminder_bot_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  1506. matrix_bot_matrix_reminder_bot_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1507. matrix_bot_matrix_reminder_bot_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'reminder.bot.db', rounds=655555) | to_uuid }}"

  1508. matrix_bot_matrix_reminder_bot_container_image_self_build: "{{ matrix_architecture != 'amd64' }}"

  1509. 

  1510. ######################################################################

  1511. #

  1512. # /matrix-bot-matrix-reminder-bot

  1513. #

  1514. ######################################################################

  1515. 

  1516. 

  1517. ######################################################################

  1518. #

  1519. # matrix-bot-matrix-registration-bot

  1520. #

  1521. ######################################################################

  1522. 

  1523. # We don't enable bots by default.

  1524. matrix_bot_matrix_registration_bot_enabled: false

  1525. 

  1526. matrix_bot_matrix_registration_bot_container_image_self_build: "{{ matrix_architecture not in ['amd64'] }}"

  1527. 

  1528. matrix_bot_matrix_registration_bot_systemd_required_services_list: |

  1529.   {{

  1530.     ['docker.service']

  1531.     +

  1532.     ['matrix-' + matrix_homeserver_implementation + '.service']

  1533.     +

  1534.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1535.   }}

  1536. 

  1537. 

  1538. ######################################################################

  1539. #

  1540. # /matrix-bot-matrix-registration-bot

  1541. #

  1542. ######################################################################

  1543. 

  1544. ######################################################################

  1545. #

  1546. # matrix-bot-maubot

  1547. #

  1548. ######################################################################

  1549. 

  1550. # We don't enable bots by default.

  1551. matrix_bot_maubot_enabled: false

  1552. 

  1553. matrix_bot_maubot_container_image_self_build: "{{ matrix_architecture not in ['amd64'] }}"

  1554. 

  1555. matrix_bot_maubot_systemd_required_services_list: |

  1556.   {{

  1557.     ['docker.service']

  1558.     +

  1559.     ['matrix-' + matrix_homeserver_implementation + '.service']

  1560.     +

  1561.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  1562.     +

  1563.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1564.   }}

  1565. 

  1566. matrix_bot_maubot_registration_shared_secret: |-

  1567.   {{

  1568.     {

  1569.       'synapse': matrix_synapse_registration_shared_secret,

  1570.       'dendrite': matrix_dendrite_client_api_registration_shared_secret,

  1571.     }[matrix_homeserver_implementation]

  1572.   }}

  1573. 

  1574. matrix_bot_maubot_management_interface_http_bind_port: "{{ '' if matrix_nginx_proxy_enabled else ('127.0.0.1:' + matrix_bot_maubot_management_interface_port | string) }}"

  1575. 

  1576. # Postgres is the default, except if not using internal Postgres server

  1577. matrix_bot_maubot_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  1578. matrix_bot_maubot_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1579. matrix_bot_maubot_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxpup.dsc.db', rounds=655555) | to_uuid }}"

  1580. 

  1581. ######################################################################

  1582. #

  1583. # /matrix-bot-maubot

  1584. #

  1585. ######################################################################

  1586. 

  1587. 

  1588. ######################################################################

  1589. #

  1590. # matrix-bot-honoroit

  1591. #

  1592. ######################################################################

  1593. 

  1594. # We don't enable bots by default.

  1595. matrix_bot_honoroit_enabled: false

  1596. 

  1597. matrix_bot_honoroit_systemd_required_services_list: |

  1598.   {{

  1599.     ['docker.service']

  1600.     +

  1601.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  1602.     +

  1603.     (['matrix-synapse.service'] if matrix_synapse_enabled else [])

  1604.     +

  1605.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1606.   }}

  1607. 

  1608. # Postgres is the default, except if not using internal Postgres server

  1609. matrix_bot_honoroit_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  1610. matrix_bot_honoroit_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1611. matrix_bot_honoroit_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'honoroit.bot.db', rounds=655555) | to_uuid }}"

  1612. matrix_bot_honoroit_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"

  1613. 

  1614. ######################################################################

  1615. #

  1616. # /matrix-bot-honoroit

  1617. #

  1618. ######################################################################

  1619. 

  1620. ######################################################################

  1621. #

  1622. # matrix-bot-buscarron

  1623. #

  1624. ######################################################################

  1625. 

  1626. # We don't enable bots by default.

  1627. matrix_bot_buscarron_enabled: false

  1628. 

  1629. matrix_bot_buscarron_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"

  1630. 

  1631. matrix_bot_buscarron_systemd_required_services_list: |

  1632.   {{

  1633.     ['docker.service']

  1634.     +

  1635.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  1636.     +

  1637.     (['matrix-synapse.service'] if matrix_synapse_enabled else [])

  1638.     +

  1639.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1640.   }}

  1641. 

  1642. # Postgres is the default, except if not using internal Postgres server

  1643. matrix_bot_buscarron_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  1644. matrix_bot_buscarron_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1645. matrix_bot_buscarron_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'buscarron.bot.db', rounds=655555) | to_uuid }}"

  1646. 

  1647. ######################################################################

  1648. #

  1649. # /matrix-bot-buscarron

  1650. #

  1651. ######################################################################

  1652. 

  1653. ######################################################################

  1654. #

  1655. # matrix-bot-postmoogle

  1656. #

  1657. ######################################################################

  1658. 

  1659. # We don't enable bots by default.

  1660. matrix_bot_postmoogle_enabled: false

  1661. 

  1662. matrix_bot_postmoogle_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"

  1663. 

  1664. matrix_bot_postmoogle_ssl_path: "{{ matrix_ssl_config_dir_path }}"

  1665. matrix_bot_postmoogle_tls_cert: "{% for domain in matrix_bot_postmoogle_domains %}/ssl/live/{{ domain }}/fullchain.pem {% endfor %}"

  1666. matrix_bot_postmoogle_tls_key: "{% for domain in matrix_bot_postmoogle_domains %}/ssl/live/{{ domain }}/privkey.pem {% endfor %}"

  1667. 

  1668. matrix_bot_postmoogle_systemd_required_services_list: |

  1669.   {{

  1670.     ['docker.service']

  1671.     +

  1672.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  1673.     +

  1674.     (['matrix-synapse.service'] if matrix_synapse_enabled else [])

  1675.   }}

  1676. 

  1677. # Postgres is the default, except if not using internal Postgres server

  1678. matrix_bot_postmoogle_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  1679. matrix_bot_postmoogle_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1680. matrix_bot_postmoogle_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'postmoogle.db', rounds=655555) | to_uuid }}"

  1681. 

  1682. ######################################################################

  1683. #

  1684. # /matrix-bot-postmoogle

  1685. #

  1686. ######################################################################

  1687. 

  1688. 

  1689. ######################################################################

  1690. #

  1691. # matrix-bot-chatgpt

  1692. #

  1693. ######################################################################

  1694. 

  1695. # We don't enable bots by default.

  1696. matrix_bot_chatgpt_enabled: false

  1697. 

  1698. matrix_bot_chatgpt_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"

  1699. 

  1700. ######################################################################

  1701. #

  1702. # /matrix-bot-chatgpt

  1703. #

  1704. ######################################################################

  1705. 

  1706. 

  1707. ######################################################################

  1708. #

  1709. # matrix-bot-go-neb

  1710. #

  1711. ######################################################################

  1712. 

  1713. # We don't enable bots by default.

  1714. matrix_bot_go_neb_enabled: false

  1715. 

  1716. matrix_bot_go_neb_systemd_required_services_list: |

  1717.   {{

  1718.     ['docker.service']

  1719.     +

  1720.     ['matrix-' + matrix_homeserver_implementation + '.service']

  1721.     +

  1722.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1723.   }}

  1724. 

  1725. matrix_bot_go_neb_container_http_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else '127.0.0.1:4050' }}"

  1726. 

  1727. ######################################################################

  1728. #

  1729. # /matrix-bot-go-neb

  1730. #

  1731. ######################################################################

  1732. 

  1733. 

  1734. ######################################################################

  1735. #

  1736. # matrix-bot-mjolnir

  1737. #

  1738. ######################################################################

  1739. 

  1740. # We don't enable bots by default.

  1741. matrix_bot_mjolnir_enabled: false

  1742. 

  1743. matrix_bot_mjolnir_container_image_self_build: "{{ matrix_architecture != 'amd64' }}"

  1744. 

  1745. matrix_bot_mjolnir_systemd_required_services_list: |

  1746.   {{

  1747.     ['docker.service']

  1748.     +

  1749.     ['matrix-' + matrix_homeserver_implementation + '.service']

  1750.     +

  1751.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  1752.     +

  1753.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1754.   }}

  1755. 

  1756. ######################################################################

  1757. #

  1758. # /matrix-bot-mjolnir

  1759. #

  1760. ######################################################################

  1761. 

  1762. ######################################################################

  1763. #

  1764. # matrix-backup-borg

  1765. #

  1766. ######################################################################

  1767. 

  1768. matrix_backup_borg_enabled: false

  1769. 

  1770. matrix_backup_borg_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm32', 'arm64'] }}"

  1771. 

  1772. matrix_backup_borg_postgresql_enabled: "{{ devture_postgres_enabled }}"

  1773. matrix_backup_borg_postgresql_databases_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1774. matrix_backup_borg_postgresql_databases_username: "{{ devture_postgres_connection_username if devture_postgres_enabled else '' }}"

  1775. matrix_backup_borg_postgresql_databases_password: "{{ devture_postgres_connection_password if devture_postgres_enabled else '' }}"

  1776. matrix_backup_borg_postgresql_databases_port: "{{ devture_postgres_connection_port if devture_postgres_enabled else 5432 }}"

  1777. matrix_backup_borg_postgresql_databases: "{{ devture_postgres_managed_databases | map(attribute='name') if devture_postgres_enabled else [] }}"

  1778. 

  1779. matrix_backup_borg_location_source_directories:

  1780.   - "{{ matrix_base_data_path }}"

  1781. 

  1782. matrix_backup_borg_location_exclude_patterns: |

  1783.   {{

  1784.     ([matrix_synapse_media_store_path + '/local_thumbnails', matrix_synapse_media_store_path + '/remote_thumbnail', matrix_synapse_media_store_path + '/url_cache', matrix_synapse_media_store_path + '/url_cache_thumbnails'] if matrix_homeserver_implementation == 'synapse' else [])

  1785.     +

  1786.     ([devture_postgres_data_path] if devture_postgres_enabled else [])

  1787.   }}

  1788. 

  1789. matrix_backup_borg_systemd_required_services_list: |

  1790.   {{

  1791.     ['docker.service']

  1792.     +

  1793.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  1794.   }}

  1795. 

  1796. ######################################################################

  1797. #

  1798. # /matrix-backup-borg

  1799. #

  1800. ######################################################################

  1801. ######################################################################

  1802. #

  1803. # matrix-cactus-comments

  1804. #

  1805. ######################################################################

  1806. 

  1807. matrix_cactus_comments_enabled: false

  1808. 

  1809. # Derive secret values from homeserver secret

  1810. matrix_cactus_comments_as_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'cactus.as.token', rounds=655555) | to_uuid }}"

  1811. matrix_cactus_comments_hs_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'cactus.hs.token', rounds=655555) | to_uuid }}"

  1812. 

  1813. matrix_cactus_comments_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm32', 'arm64'] }}"

  1814. matrix_cactus_comments_systemd_required_services_list: |

  1815.   {{

  1816.     (['docker.service'])

  1817.     +

  1818.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1819.     +

  1820.     (['matrix-' + matrix_homeserver_implementation + '.service'])

  1821.   }}

  1822. 

  1823. matrix_cactus_comments_client_nginx_path: "{{ '/cactus-comments/' if matrix_nginx_proxy_enabled else matrix_cactus_comments_client_path + '/' }}"

  1824. 

  1825. ######################################################################

  1826. #

  1827. # /matrix-cactus-comments

  1828. #

  1829. ######################################################################

  1830. 

  1831. ######################################################################

  1832. #

  1833. # matrix-corporal

  1834. #

  1835. ######################################################################

  1836. 

  1837. matrix_corporal_enabled: false

  1838. 

  1839. matrix_corporal_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm32', 'arm64'] }}"

  1840. 

  1841. # Normally, matrix-nginx-proxy is enabled and nginx can reach matrix-corporal over the container network.

  1842. # If matrix-nginx-proxy is not enabled, or you otherwise have a need for it, you can expose

  1843. # matrix-corporal's web-server ports to the local host.

  1844. matrix_corporal_container_http_gateway_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else '127.0.0.1:41080' }}"

  1845. matrix_corporal_container_http_api_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else '127.0.0.1:41081' }}"

  1846. 

  1847. matrix_corporal_systemd_required_services_list: |

  1848.   {{

  1849.     (['docker.service'])

  1850.     +

  1851.     (['matrix-' + matrix_homeserver_implementation + '.service'])

  1852.   }}

  1853. 

  1854. matrix_corporal_matrix_homeserver_api_endpoint: "{{ matrix_homeserver_container_url }}"

  1855. 

  1856. matrix_corporal_matrix_auth_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret }}"

  1857. 

  1858. # This is only useful if there's REST auth provider to make use of it.

  1859. matrix_corporal_http_gateway_internal_rest_auth_enabled: "{{ matrix_synapse_ext_password_provider_rest_auth_enabled }}"

  1860. 

  1861. matrix_corporal_matrix_registration_shared_secret: "{{ matrix_synapse_registration_shared_secret }}"

  1862. 

  1863. ######################################################################

  1864. #

  1865. # /matrix-corporal

  1866. #

  1867. ######################################################################

  1868. 

  1869. ######################################################################

  1870. #

  1871. # matrix-coturn

  1872. #

  1873. ######################################################################

  1874. 

  1875. matrix_coturn_enabled: true

  1876. 

  1877. matrix_coturn_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm32', 'arm64'] }}"

  1878. 

  1879. matrix_coturn_turn_external_ip_address: "{{ ansible_host }}"

  1880. 

  1881. matrix_coturn_turn_static_auth_secret: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'coturn.sas', rounds=655555) | to_uuid }}"

  1882. 

  1883. matrix_coturn_tls_enabled: "{{ matrix_ssl_retrieval_method != 'none' }}"

  1884. matrix_coturn_tls_cert_path: "{{ matrix_ssl_config_dir_path }}/live/{{ matrix_server_fqn_matrix }}/fullchain.pem"

  1885. matrix_coturn_tls_key_path: "{{ matrix_ssl_config_dir_path }}/live/{{ matrix_server_fqn_matrix }}/privkey.pem"

  1886. matrix_coturn_container_additional_volumes: |

  1887.   {{

  1888.     ([] if matrix_ssl_retrieval_method == 'none' else [

  1889.         {

  1890.             'src': matrix_ssl_config_dir_path,

  1891.             'dst': matrix_ssl_config_dir_path,

  1892.             'options': 'ro',

  1893.         }

  1894.     ])

  1895.   }}

  1896. 

  1897. ######################################################################

  1898. #

  1899. # /matrix-coturn

  1900. #

  1901. ######################################################################

  1902. 

  1903. ######################################################################

  1904. #

  1905. # matrix-dimension

  1906. #

  1907. ######################################################################

  1908. 

  1909. matrix_dimension_enabled: false

  1910. 

  1911. matrix_dimension_container_image_self_build: "{{ matrix_architecture != 'amd64' }}"

  1912. 

  1913. # Normally, matrix-nginx-proxy is enabled and nginx can reach Dimension over the container network.

  1914. # If matrix-nginx-proxy is not enabled, or you otherwise have a need for it, you can expose

  1915. # the Dimension HTTP port to the local host.

  1916. matrix_dimension_container_http_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else '127.0.0.1:8184' }}"

  1917. 

  1918. matrix_dimension_homeserver_federationUrl: "{{ matrix_homeserver_container_federation_url }}"

  1919. 

  1920. matrix_dimension_systemd_required_services_list: |

  1921.   {{

  1922.     ['docker.service']

  1923.     +

  1924.     ['matrix-' + matrix_homeserver_implementation + '.service']

  1925.     +

  1926.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  1927.     +

  1928.     (['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])

  1929.   }}

  1930. 

  1931. # Postgres is the default, except if not using internal Postgres server

  1932. matrix_dimension_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  1933. matrix_dimension_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1934. matrix_dimension_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'dimension.db', rounds=655555) | to_uuid }}"

  1935. 

  1936. ######################################################################

  1937. #

  1938. # /matrix-dimension

  1939. #

  1940. ######################################################################

  1941. 

  1942. ######################################################################

  1943. #

  1944. # matrix-etherpad

  1945. #

  1946. ######################################################################

  1947. 

  1948. matrix_etherpad_enabled: false

  1949. 

  1950. matrix_etherpad_container_http_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else '127.0.0.1:9001' }}"

  1951. 

  1952. matrix_etherpad_base_url: "{{ 'https://' + matrix_server_fqn_dimension + matrix_etherpad_public_endpoint if matrix_etherpad_mode == 'dimension' else 'https://' + matrix_server_fqn_etherpad + '/' }}"

  1953. 

  1954. matrix_etherpad_systemd_required_services_list: |

  1955.   {{

  1956.     ['docker.service']

  1957.     +

  1958.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  1959.   }}

  1960. 

  1961. matrix_etherpad_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1962. matrix_etherpad_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'etherpad.db', rounds=655555) | to_uuid }}"

  1963. 

  1964. ######################################################################

  1965. #

  1966. # /matrix-etherpad

  1967. #

  1968. ######################################################################

  1969. 

  1970. ######################################################################

  1971. #

  1972. # matrix-dynamic-dns

  1973. #

  1974. ######################################################################

  1975. 

  1976. matrix_dynamic_dns_enabled: false

  1977. 

  1978. ######################################################################

  1979. #

  1980. # /matrix-dynamic-dns

  1981. #

  1982. ######################################################################

  1983. 

  1984. ######################################################################

  1985. #

  1986. # matrix-email2matrix

  1987. #

  1988. ######################################################################

  1989. 

  1990. matrix_email2matrix_enabled: false

  1991. 

  1992. matrix_email2matrix_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm32', 'arm64'] }}"

  1993. 

  1994. ######################################################################

  1995. #

  1996. # /matrix-email2matrix

  1997. #

  1998. ######################################################################

  1999. 

  2000. ######################################################################

  2001. #

  2002. # matrix-jitsi

  2003. #

  2004. ######################################################################

  2005. 

  2006. matrix_jitsi_enabled: false

  2007. 

  2008. # Normally, matrix-nginx-proxy is enabled and nginx can reach jitsi/web over the container network.

  2009. # If matrix-nginx-proxy is not enabled, or you otherwise have a need for it, you can expose

  2010. # the Jitsi HTTP port to the local host.

  2011. matrix_jitsi_web_container_http_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else '127.0.0.1:13080' }}"

  2012. 

  2013. matrix_jitsi_jvb_container_colibri_ws_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else '127.0.0.1:13090' }}"

  2014. 

  2015. matrix_jitsi_prosody_container_http_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else '127.0.0.1:5280' }}"

  2016. 

  2017. matrix_jitsi_jibri_xmpp_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'jibri', rounds=655555) | to_uuid }}"

  2018. matrix_jitsi_jicofo_auth_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'jicofo', rounds=655555) | to_uuid }}"

  2019. matrix_jitsi_jvb_auth_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'jvb', rounds=655555) | to_uuid }}"

  2020. 

  2021. matrix_jitsi_web_stun_servers: |

  2022.   {{

  2023.     [

  2024.       'stun:' + matrix_server_fqn_matrix + ':5349',

  2025.       'stun:' + matrix_server_fqn_matrix + ':3478',

  2026.     ]

  2027.     if matrix_coturn_enabled

  2028.     else [ 'stun:meet-jit-si-turnrelay.jitsi.net:443']

  2029.   }}

  2030. 

  2031. # If the self-hosted Etherpad instance is available, it will also show up in Jitsi conferences,

  2032. # unless explicitly disabled by setting `matrix_jitsi_etherpad_enabled` to false.

  2033. # Falls back to the scalar.vector.im etherpad in case someone sets `matrix_jitsi_etherpad_enabled` to true,

  2034. # while also setting `matrix_etherpad_enabled` to false.

  2035. matrix_jitsi_etherpad_enabled: "{{ matrix_etherpad_enabled }}"

  2036. matrix_jitsi_etherpad_base: "{{ matrix_etherpad_base_url if matrix_etherpad_enabled else 'https://scalar.vector.im/etherpad' }}"

  2037. 

  2038. ######################################################################

  2039. #

  2040. # /matrix-jitsi

  2041. #

  2042. ######################################################################

  2043. ######################################################################

  2044. #

  2045. # matrix-ldap-registration-proxy

  2046. #

  2047. ######################################################################

  2048. 

  2049. # This is only for users with a specific LDAP setup

  2050. matrix_ldap_registration_proxy_enabled: false

  2051. 

  2052. ######################################################################

  2053. #

  2054. # /matrix-ldap-registration-proxy

  2055. #

  2056. ######################################################################

  2057. 

  2058. ######################################################################

  2059. #

  2060. # matrix-mailer

  2061. #

  2062. ######################################################################

  2063. 

  2064. # By default, this playbook sets up an exim mailer server (running in a container).

  2065. # This is so that Synapse can send email reminders for unread messages.

  2066. # Other services (like ma1sd), also use the mailer.

  2067. matrix_mailer_enabled: true

  2068. 

  2069. matrix_mailer_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm32', 'arm64'] }}"

  2070. 

  2071. ######################################################################

  2072. #

  2073. # /matrix-mailer

  2074. #

  2075. ######################################################################

  2076. 

  2077. ######################################################################

  2078. #

  2079. # matrix-ma1sd

  2080. #

  2081. ######################################################################

  2082. 

  2083. # We no longer install the ma1sd identity server by default.

  2084. #

  2085. # The main reason we used to install ma1sd by default in the past was to

  2086. # prevent Element from talking to the `matrix.org` / `vector.im` identity servers,

  2087. # by forcing it to talk to our own self-hosted (but otherwise useless) identity server instead,

  2088. # thus preventing contact list leaks.

  2089. #

  2090. # Since Element no longer defaults to using a public identity server if another one is not provided,

  2091. # we can stop installing ma1sd.

  2092. matrix_ma1sd_enabled: false

  2093. 

  2094. matrix_ma1sd_container_image_self_build: "{{ matrix_architecture != 'amd64' }}"

  2095. 

  2096. # Normally, matrix-nginx-proxy is enabled and nginx can reach ma1sd over the container network.

  2097. # If matrix-nginx-proxy is not enabled, or you otherwise have a need for it, you can expose

  2098. # ma1sd's web-server port.

  2099. matrix_ma1sd_container_http_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else '127.0.0.1:' + matrix_ma1sd_container_port | string }}"

  2100. 

  2101. 

  2102. # We enable Synapse integration via its Postgres database by default.

  2103. # When using another Identity store, you might wish to disable this and define

  2104. # your own configuration in `matrix_ma1sd_configuration_extension_yaml`.

  2105. matrix_ma1sd_synapsesql_enabled: true

  2106. matrix_ma1sd_synapsesql_type: postgresql

  2107. matrix_ma1sd_synapsesql_connection: //{{ matrix_synapse_database_host }}/{{ matrix_synapse_database_database }}?user={{ matrix_synapse_database_user | urlencode() }}&password={{ matrix_synapse_database_password | urlencode() }}

  2108. 

  2109. matrix_ma1sd_dns_overwrite_enabled: true

  2110. matrix_ma1sd_dns_overwrite_homeserver_client_name: "{{ matrix_server_fqn_matrix }}"

  2111. # The `matrix_ma1sd_dns_overwrite_homeserver_client_value` value when matrix_nginx_proxy_enabled is false covers the general case,

  2112. # but may be inaccurate if matrix-corporal is enabled.

  2113. matrix_ma1sd_dns_overwrite_homeserver_client_value: "{{ ('http://' + matrix_nginx_proxy_proxy_matrix_client_api_addr_with_container) if matrix_nginx_proxy_enabled else matrix_homeserver_container_url }}"

  2114. 

  2115. # By default, we send mail through the `matrix-mailer` service.

  2116. matrix_ma1sd_threepid_medium_email_identity_from: "{{ matrix_mailer_sender_address }}"

  2117. matrix_ma1sd_threepid_medium_email_connectors_smtp_host: "matrix-mailer"

  2118. matrix_ma1sd_threepid_medium_email_connectors_smtp_port: 8025

  2119. matrix_ma1sd_threepid_medium_email_connectors_smtp_tls: 0

  2120. 

  2121. matrix_ma1sd_self_check_validate_certificates: "{{ false if matrix_ssl_retrieval_method == 'self-signed' else true }}"

  2122. 

  2123. matrix_ma1sd_systemd_required_services_list: |

  2124.   {{

  2125.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  2126.   }}

  2127. 

  2128. matrix_ma1sd_systemd_wanted_services_list: |

  2129.   {{

  2130.     (['matrix-corporal.service'] if matrix_corporal_enabled else ['matrix-' + matrix_homeserver_implementation + '.service'])

  2131.     +

  2132.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  2133.     +

  2134.     (['matrix-mailer.service'] if matrix_mailer_enabled else [])

  2135.   }}

  2136. 

  2137. # Postgres is the default, except if not using internal Postgres server

  2138. matrix_ma1sd_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  2139. matrix_ma1sd_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  2140. matrix_ma1sd_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'ma1sd.db', rounds=655555) | to_uuid }}"

  2141. 

  2142. ######################################################################

  2143. #

  2144. # /matrix-ma1sd

  2145. #

  2146. ######################################################################

  2147. 

  2148. 

  2149. ######################################################################

  2150. #

  2151. # matrix-nginx-proxy

  2152. #

  2153. ######################################################################

  2154. 

  2155. # By default, this playbook sets up a reverse-proxy nginx proxy server on TCP ports 80, 443 and 8448.

  2156. # This is fine if you're dedicating the whole server to Matrix.

  2157. # If that's not the case, you may wish to disable this and take care of proxying yourself.

  2158. matrix_nginx_proxy_enabled: true

  2159. 

  2160. matrix_nginx_proxy_proxy_matrix_client_api_addr_with_container: "{{ 'matrix-corporal:41080' if matrix_corporal_enabled else 'matrix-nginx-proxy:12080' }}"

  2161. matrix_nginx_proxy_proxy_matrix_client_api_addr_sans_container: "{{ '127.0.0.1:41080' if matrix_corporal_enabled else '127.0.0.1:12080' }}"

  2162. matrix_nginx_proxy_proxy_matrix_client_api_client_max_body_size_mb: |-

  2163.   {{

  2164.     {

  2165.       'synapse': matrix_synapse_max_upload_size_mb,

  2166.       'dendrite': (matrix_dendrite_max_file_size_bytes / 1024 / 1024) | round,

  2167.       'conduit': (matrix_conduit_max_request_size / 1024 / 1024) | round,

  2168.     }[matrix_homeserver_implementation]|int

  2169.   }}

  2170. 

  2171. matrix_nginx_proxy_proxy_matrix_client_api_forwarded_location_synapse_admin_api_enabled: "{{ matrix_synapse_admin_enabled or matrix_bot_matrix_registration_bot_enabled }}"

  2172. 

  2173. matrix_nginx_proxy_proxy_matrix_client_redirect_root_uri_to_domain: "{{ matrix_server_fqn_element if matrix_client_element_enabled else '' }}"

  2174. 

  2175. matrix_nginx_proxy_proxy_matrix_enabled: true

  2176. matrix_nginx_proxy_proxy_element_enabled: "{{ matrix_client_element_enabled }}"

  2177. matrix_nginx_proxy_proxy_hydrogen_enabled: "{{ matrix_client_hydrogen_enabled }}"

  2178. matrix_nginx_proxy_proxy_cinny_enabled: "{{ matrix_client_cinny_enabled }}"

  2179. matrix_nginx_proxy_proxy_buscarron_enabled: "{{ matrix_bot_buscarron_enabled }}"

  2180. matrix_nginx_proxy_proxy_dimension_enabled: "{{ matrix_dimension_enabled }}"

  2181. matrix_nginx_proxy_proxy_etherpad_enabled: "{{ matrix_etherpad_enabled and matrix_etherpad_mode == 'standalone' }}"

  2182. matrix_nginx_proxy_proxy_bot_go_neb_enabled: "{{ matrix_bot_go_neb_enabled }}"

  2183. matrix_nginx_proxy_proxy_jitsi_enabled: "{{ matrix_jitsi_enabled }}"

  2184. matrix_nginx_proxy_proxy_grafana_enabled: "{{ matrix_grafana_enabled }}"

  2185. matrix_nginx_proxy_proxy_sygnal_enabled: "{{ matrix_sygnal_enabled }}"

  2186. matrix_nginx_proxy_proxy_ntfy_enabled: "{{ matrix_ntfy_enabled }}"

  2187. 

  2188. matrix_nginx_proxy_proxy_matrix_corporal_api_enabled: "{{ matrix_corporal_enabled and matrix_corporal_http_api_enabled }}"

  2189. matrix_nginx_proxy_proxy_matrix_corporal_api_addr_with_container: "matrix-corporal:41081"

  2190. matrix_nginx_proxy_proxy_matrix_corporal_api_addr_sans_container: "127.0.0.1:41081"

  2191. 

  2192. matrix_nginx_proxy_proxy_matrix_identity_api_enabled: "{{ matrix_ma1sd_enabled }}"

  2193. matrix_nginx_proxy_proxy_matrix_identity_api_addr_with_container: "matrix-ma1sd:{{ matrix_ma1sd_container_port }}"

  2194. matrix_nginx_proxy_proxy_matrix_identity_api_addr_sans_container: "127.0.0.1:{{ matrix_ma1sd_container_port }}"

  2195. 

  2196. # By default, we do TLS termination for the Matrix Federation API (port 8448) at matrix-nginx-proxy.

  2197. # Unless this is handled there OR Synapse's federation listener port is disabled, we'll reverse-proxy.

  2198. matrix_nginx_proxy_proxy_matrix_federation_api_enabled: |-

  2199.   {{

  2200.     {

  2201.       'synapse': (matrix_synapse_federation_port_enabled and not matrix_synapse_tls_federation_listener_enabled),

  2202.       'dendrite': matrix_dendrite_federation_enabled,

  2203.       'conduit': matrix_conduit_allow_federation,

  2204.     }[matrix_homeserver_implementation]|bool

  2205.   }}

  2206. 

  2207. matrix_nginx_proxy_proxy_matrix_federation_api_addr_with_container: "matrix-nginx-proxy:12088"

  2208. matrix_nginx_proxy_proxy_matrix_federation_api_addr_sans_container: "127.0.0.1:12088"

  2209. 

  2210. matrix_nginx_proxy_proxy_synapse_enabled: "{{ matrix_synapse_enabled }}"

  2211. matrix_nginx_proxy_proxy_synapse_client_api_addr_with_container: "{{ 'matrix-synapse-reverse-proxy-companion:8008' if matrix_synapse_reverse_proxy_companion_enabled else 'matrix-synapse:8008' }}"

  2212. matrix_nginx_proxy_proxy_synapse_client_api_addr_sans_container: "127.0.0.1:8008"

  2213. matrix_nginx_proxy_proxy_synapse_federation_api_addr_with_container: "{{ 'matrix-synapse-reverse-proxy-companion:8048' if matrix_synapse_reverse_proxy_companion_enabled else 'matrix-synapse:8048' }}"

  2214. matrix_nginx_proxy_proxy_synapse_federation_api_addr_sans_container: "127.0.0.1:8048"

  2215. 

  2216. matrix_nginx_proxy_proxy_dendrite_enabled: "{{ matrix_dendrite_enabled }}"

  2217. matrix_nginx_proxy_proxy_dendrite_client_api_addr_with_container: "matrix-dendrite:{{ matrix_dendrite_http_bind_port | string }}"

  2218. matrix_nginx_proxy_proxy_dendrite_client_api_addr_sans_container: "127.0.0.1:{{ matrix_dendrite_http_bind_port | string }}"

  2219. matrix_nginx_proxy_proxy_dendrite_federation_api_addr_with_container: "matrix-dendrite:{{ matrix_dendrite_http_bind_port | string }}"

  2220. matrix_nginx_proxy_proxy_dendrite_federation_api_addr_sans_container: "127.0.0.1:{{ matrix_dendrite_http_bind_port | string }}"

  2221. 

  2222. matrix_nginx_proxy_proxy_conduit_enabled: "{{ matrix_conduit_enabled }}"

  2223. matrix_nginx_proxy_proxy_conduit_client_api_addr_with_container: "matrix-conduit:{{ matrix_conduit_port_number|string }}"

  2224. matrix_nginx_proxy_proxy_conduit_client_api_addr_sans_container: "127.0.0.1:{{ matrix_conduit_port_number|string }}"

  2225. matrix_nginx_proxy_proxy_conduit_federation_api_addr_with_container: "matrix-conduit:{{ matrix_conduit_port_number|string }}"

  2226. matrix_nginx_proxy_proxy_conduit_federation_api_addr_sans_container: "127.0.0.1:{{ matrix_conduit_port_number|string }}"

  2227. 

  2228. # When matrix-nginx-proxy is disabled, the actual port number that the vhost uses may begin to matter.

  2229. matrix_nginx_proxy_proxy_matrix_federation_port: "{{ matrix_federation_public_port }}"

  2230. 

  2231. matrix_nginx_proxy_container_federation_host_bind_port: "{{ matrix_federation_public_port }}"

  2232. 

  2233. matrix_nginx_proxy_proxy_matrix_user_directory_search_enabled: "{{ matrix_ma1sd_enabled }}"

  2234. matrix_nginx_proxy_proxy_matrix_user_directory_search_addr_with_container: "{{ matrix_nginx_proxy_proxy_matrix_identity_api_addr_with_container }}"

  2235. matrix_nginx_proxy_proxy_matrix_user_directory_search_addr_sans_container: "{{ matrix_nginx_proxy_proxy_matrix_identity_api_addr_sans_container }}"

  2236. 

  2237. matrix_nginx_proxy_self_check_validate_certificates: "{{ false if matrix_ssl_retrieval_method == 'self-signed' else true }}"

  2238. 

  2239. # OCSP stapling does not make sense when self-signed certificates are used.

  2240. # See https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1073

  2241. # and https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1074

  2242. matrix_nginx_proxy_ocsp_stapling_enabled: "{{ matrix_ssl_retrieval_method != 'self-signed' }}"

  2243. 

  2244. matrix_nginx_proxy_systemd_wanted_services_list: |

  2245.   {{

  2246.     ['matrix-' + matrix_homeserver_implementation + '.service']

  2247.     +

  2248.     (matrix_synapse_webserving_workers_systemd_services_list if matrix_homeserver_implementation == 'synapse' and matrix_synapse_workers_enabled else [])

  2249.     +

  2250.     (['matrix-synapse-reverse-proxy-companion.service'] if matrix_synapse_reverse_proxy_companion_enabled else [])

  2251.     +

  2252.     (['matrix-corporal.service'] if matrix_corporal_enabled else [])

  2253.     +

  2254.     (['matrix-ma1sd.service'] if matrix_ma1sd_enabled else [])

  2255.     +

  2256.     (['matrix-client-cinny.service'] if matrix_client_cinny_enabled else [])

  2257.     +

  2258.     (['matrix-bot-buscarron.service'] if matrix_bot_buscarron_enabled else [])

  2259.     +

  2260.     (['matrix-client-element.service'] if matrix_client_element_enabled else [])

  2261.     +

  2262.     (['matrix-client-hydrogen.service'] if matrix_client_hydrogen_enabled else [])

  2263.     +

  2264.     (['matrix-grafana.service'] if matrix_grafana_enabled else [])

  2265.     +

  2266.     (['matrix-dimension.service'] if matrix_dimension_enabled else [])

  2267.     +

  2268.     (['matrix-sygnal.service'] if matrix_sygnal_enabled else [])

  2269.     +

  2270.     (['matrix-ntfy.service'] if matrix_ntfy_enabled else [])

  2271.     +

  2272.     (['matrix-jitsi.service'] if matrix_jitsi_enabled else [])

  2273.     +

  2274.     (['matrix-bot-go-neb.service'] if matrix_bot_go_neb_enabled else [])

  2275.     +

  2276.     (['matrix-etherpad.service'] if matrix_etherpad_enabled else [])

  2277.     +

  2278.     (['matrix-hookshot.service'] if matrix_hookshot_enabled else [])

  2279.   }}

  2280. 

  2281. matrix_ssl_domains_to_obtain_certificates_for: |

  2282.   {{

  2283.     ([matrix_server_fqn_matrix])

  2284.     +

  2285.     ([matrix_server_fqn_element] if matrix_client_element_enabled else [])

  2286.     +

  2287.     ([matrix_nginx_proxy_proxy_riot_compat_redirect_hostname] if matrix_nginx_proxy_proxy_riot_compat_redirect_enabled else [])

  2288.     +

  2289.     ([matrix_server_fqn_hydrogen] if matrix_client_hydrogen_enabled else [])

  2290.     +

  2291.     ([matrix_server_fqn_cinny] if matrix_client_cinny_enabled else [])

  2292.     +

  2293.     ([matrix_server_fqn_buscarron] if matrix_bot_buscarron_enabled else [])

  2294.     +

  2295.     ([matrix_server_fqn_dimension] if matrix_dimension_enabled else [])

  2296.     +

  2297.     ([matrix_server_fqn_etherpad] if (matrix_etherpad_enabled and matrix_etherpad_mode == 'standalone') else [])

  2298.     +

  2299.     ([matrix_server_fqn_bot_go_neb] if matrix_bot_go_neb_enabled else [])

  2300.     +

  2301.     ([matrix_server_fqn_jitsi] if matrix_jitsi_enabled else [])

  2302.     +

  2303.     ([matrix_server_fqn_grafana] if matrix_grafana_enabled else [])

  2304.     +

  2305.     ([matrix_server_fqn_sygnal] if matrix_sygnal_enabled else [])

  2306.     +

  2307.     ([matrix_server_fqn_ntfy] if matrix_ntfy_enabled else [])

  2308.     +

  2309.     ([matrix_bot_postmoogle_domain] if matrix_bot_postmoogle_enabled else [])

  2310.     +

  2311.     ([matrix_domain] if matrix_nginx_proxy_base_domain_serving_enabled else [])

  2312.     +

  2313.     matrix_ssl_additional_domains_to_obtain_certificates_for

  2314.   }}

  2315. 

  2316. matrix_ssl_architecture: "{{

  2317. 	{

  2318. 		'amd64': 'amd64',

  2319. 		'arm32': 'arm32v6',

  2320. 		'arm64': 'arm64v8',

  2321. 	}[matrix_architecture]

  2322. }}"

  2323. 

  2324. matrix_ssl_pre_obtaining_required_service_name: "{{ 'matrix-dynamic-dns' if matrix_dynamic_dns_enabled else '' }}"

  2325. 

  2326. matrix_nginx_proxy_access_log_syslog_integration_enabled: "{{ matrix_prometheus_nginxlog_exporter_enabled }}"

  2327. matrix_nginx_proxy_access_log_syslog_integration_server_port: "{{ (matrix_prometheus_nginxlog_exporter_container_hostname | string +':'+ matrix_prometheus_nginxlog_exporter_container_syslog_port | string) | default('') }}"

  2328. 

  2329. ######################################################################

  2330. #

  2331. # /matrix-nginx-proxy

  2332. #

  2333. ######################################################################

  2334. 

  2335. 

  2336. ########################################################################

  2337. #                                                                      #

  2338. # com.devture.ansible.role.postgres                                    #

  2339. #                                                                      #

  2340. ########################################################################

  2341. 

  2342. # To completely disable installing Postgres, use `devture_postgres_enabled: false`.

  2343. 

  2344. devture_postgres_identifier: matrix-postgres

  2345. 

  2346. devture_postgres_architecture: "{{ matrix_architecture }}"

  2347. 

  2348. devture_postgres_base_path: "{{ matrix_base_data_path }}/postgres"

  2349. 

  2350. devture_postgres_container_network: "{{ matrix_docker_network }}"

  2351. 

  2352. devture_postgres_uid: "{{ matrix_user_uid }}"

  2353. devture_postgres_gid: "{{ matrix_user_gid }}"

  2354. 

  2355. devture_postgres_connection_username: matrix

  2356. devture_postgres_db_name: matrix

  2357. 

  2358. devture_postgres_systemd_services_to_stop_for_maintenance_list: |

  2359.   {{

  2360.     ['matrix-' + matrix_homeserver_implementation + '.service']

  2361.   }}

  2362. 

  2363. devture_postgres_managed_databases_auto: |

  2364.   {{

  2365.     ([{

  2366.       'name': matrix_synapse_database_database,

  2367.       'username': matrix_synapse_database_user,

  2368.       'password': matrix_synapse_database_password,

  2369.     }] if (matrix_synapse_enabled and matrix_synapse_database_host == devture_postgres_connection_hostname) else [])

  2370.     +

  2371.     ([{

  2372.       'name': matrix_dendrite_federationapi_database,

  2373.       'username': matrix_dendrite_database_user,

  2374.       'password': matrix_dendrite_database_password,

  2375.     },{

  2376.       'name': matrix_dendrite_keyserver_database,

  2377.       'username': matrix_dendrite_database_user,

  2378.       'password': matrix_dendrite_database_password,

  2379.     },{

  2380.       'name': matrix_dendrite_mediaapi_database,

  2381.       'username': matrix_dendrite_database_user,

  2382.       'password': matrix_dendrite_database_password,

  2383.     },{

  2384.       'name': matrix_dendrite_room_database,

  2385.       'username': matrix_dendrite_database_user,

  2386.       'password': matrix_dendrite_database_password,

  2387.     },{

  2388.       'name': matrix_dendrite_syncapi_database,

  2389.       'username': matrix_dendrite_database_user,

  2390.       'password': matrix_dendrite_database_password,

  2391.     },{

  2392.       'name': matrix_dendrite_userapi_database,

  2393.       'username': matrix_dendrite_database_user,

  2394.       'password': matrix_dendrite_database_password,

  2395.     },{

  2396.       'name': matrix_dendrite_pushserver_database,

  2397.       'username': matrix_dendrite_database_user,

  2398.       'password': matrix_dendrite_database_password,

  2399.     },{

  2400.       'name': matrix_dendrite_mscs_database,

  2401.       'username': matrix_dendrite_database_user,

  2402.       'password': matrix_dendrite_database_password,

  2403.     }] if (matrix_dendrite_enabled and matrix_dendrite_database_hostname == devture_postgres_connection_hostname) else [])

  2404.     +

  2405.     ([{

  2406.       'name': matrix_ma1sd_database_name,

  2407.       'username': matrix_ma1sd_database_username,

  2408.       'password': matrix_ma1sd_database_password,

  2409.     }] if (matrix_ma1sd_enabled and matrix_ma1sd_database_engine == 'postgres' and matrix_ma1sd_database_hostname == devture_postgres_connection_hostname) else [])

  2410.     +

  2411.     ([{

  2412.       'name': matrix_bot_matrix_reminder_bot_database_name,

  2413.       'username': matrix_bot_matrix_reminder_bot_database_username,

  2414.       'password': matrix_bot_matrix_reminder_bot_database_password,

  2415.     }] if (matrix_bot_matrix_reminder_bot_enabled and matrix_bot_matrix_reminder_bot_database_engine == 'postgres' and matrix_bot_matrix_reminder_bot_database_hostname == devture_postgres_connection_hostname) else [])

  2416.     +

  2417.     ([{

  2418.       'name': matrix_bot_honoroit_database_name,

  2419.       'username': matrix_bot_honoroit_database_username,

  2420.       'password': matrix_bot_honoroit_database_password,

  2421.     }] if (matrix_bot_honoroit_enabled and matrix_bot_honoroit_database_engine == 'postgres' and matrix_bot_honoroit_database_hostname == devture_postgres_connection_hostname) else [])

  2422.     +

  2423.     ([{

  2424.       'name': matrix_bot_postmoogle_database_name,

  2425.       'username': matrix_bot_postmoogle_database_username,

  2426.       'password': matrix_bot_postmoogle_database_password,

  2427.     }] if (matrix_bot_postmoogle_enabled and matrix_bot_postmoogle_database_engine == 'postgres' and matrix_bot_postmoogle_database_hostname == devture_postgres_connection_hostname) else [])

  2428.     +

  2429.     ([{

  2430.       'name': matrix_bot_maubot_database_name,

  2431.       'username': matrix_bot_maubot_database_username,

  2432.       'password': matrix_bot_maubot_database_password,

  2433.     }] if (matrix_bot_maubot_enabled  and matrix_bot_maubot_database_engine == 'postgres' and matrix_bot_maubot_database_hostname == devture_postgres_connection_hostname) else [])

  2434.     +

  2435.     ([{

  2436.       'name': matrix_bot_buscarron_database_name,

  2437.       'username': matrix_bot_buscarron_database_username,

  2438.       'password': matrix_bot_buscarron_database_password,

  2439.     }] if (matrix_bot_buscarron_enabled and matrix_bot_buscarron_database_engine == 'postgres' and matrix_bot_buscarron_database_hostname == devture_postgres_connection_hostname) else [])

  2440.     +

  2441.     ([{

  2442.       'name': matrix_registration_database_name,

  2443.       'username': matrix_registration_database_username,

  2444.       'password': matrix_registration_database_password,

  2445.     }] if (matrix_registration_enabled and matrix_registration_database_engine == 'postgres' and matrix_registration_database_hostname == devture_postgres_connection_hostname) else [])

  2446.     +

  2447.     ([{

  2448.       'name': matrix_appservice_discord_database_name,

  2449.       'username': matrix_appservice_discord_database_username,

  2450.       'password': matrix_appservice_discord_database_password,

  2451.     }] if (matrix_appservice_discord_enabled and matrix_appservice_discord_database_engine == 'postgres' and matrix_appservice_discord_database_hostname == devture_postgres_connection_hostname) else [])

  2452.     +

  2453.     ([{

  2454.       'name': matrix_appservice_slack_database_name,

  2455.       'username': matrix_appservice_slack_database_username,

  2456.       'password': matrix_appservice_slack_database_password,

  2457.     }] if (matrix_appservice_slack_enabled and matrix_appservice_slack_database_engine == 'postgres' and matrix_appservice_slack_database_hostname == devture_postgres_connection_hostname) else [])

  2458.     +

  2459.     ([{

  2460.       'name': matrix_appservice_irc_database_name,

  2461.       'username': matrix_appservice_irc_database_username,

  2462.       'password': matrix_appservice_irc_database_password,

  2463.     }] if (matrix_appservice_irc_enabled and matrix_appservice_irc_database_engine == 'postgres' and matrix_appservice_irc_database_hostname == devture_postgres_connection_hostname) else [])

  2464.     +

  2465.     ([{

  2466.       'name': matrix_appservice_kakaotalk_database_name,

  2467.       'username': matrix_appservice_kakaotalk_database_username,

  2468.       'password': matrix_appservice_kakaotalk_database_password,

  2469.     }] if (matrix_appservice_kakaotalk_enabled and matrix_appservice_kakaotalk_database_engine == 'postgres' and matrix_appservice_kakaotalk_database_hostname == devture_postgres_connection_hostname) else [])

  2470.     +

  2471.     ([{

  2472.       'name': matrix_beeper_linkedin_database_name,

  2473.       'username': matrix_beeper_linkedin_database_username,

  2474.       'password': matrix_beeper_linkedin_database_password,

  2475.     }] if (matrix_beeper_linkedin_enabled and matrix_beeper_linkedin_database_engine == 'postgres' and matrix_beeper_linkedin_database_hostname == devture_postgres_connection_hostname) else [])

  2476.     +

  2477.     ([{

  2478.       'name': matrix_go_skype_bridge_database_name,

  2479.       'username': matrix_go_skype_bridge_database_username,

  2480.       'password': matrix_go_skype_bridge_database_password,

  2481.     }] if (matrix_go_skype_bridge_enabled and matrix_go_skype_bridge_database_engine == 'postgres' and matrix_go_skype_bridge_database_hostname == devture_postgres_connection_hostname) else [])

  2482.     +

  2483.     ([{

  2484.       'name': matrix_mautrix_facebook_database_name,

  2485.       'username': matrix_mautrix_facebook_database_username,

  2486.       'password': matrix_mautrix_facebook_database_password,

  2487.     }] if (matrix_mautrix_facebook_enabled and matrix_mautrix_facebook_database_engine == 'postgres' and matrix_mautrix_facebook_database_hostname == devture_postgres_connection_hostname) else [])

  2488.     +

  2489.     ([{

  2490.       'name': matrix_mautrix_hangouts_database_name,

  2491.       'username': matrix_mautrix_hangouts_database_username,

  2492.       'password': matrix_mautrix_hangouts_database_password,

  2493.     }] if (matrix_mautrix_hangouts_enabled and matrix_mautrix_hangouts_database_engine == 'postgres' and matrix_mautrix_hangouts_database_hostname == devture_postgres_connection_hostname) else [])

  2494.     +

  2495.     ([{

  2496.       'name': matrix_mautrix_googlechat_database_name,

  2497.       'username': matrix_mautrix_googlechat_database_username,

  2498.       'password': matrix_mautrix_googlechat_database_password,

  2499.     }] if (matrix_mautrix_googlechat_enabled and matrix_mautrix_googlechat_database_engine == 'postgres' and matrix_mautrix_googlechat_database_hostname == devture_postgres_connection_hostname) else [])

  2500.     +

  2501.     ([{

  2502.       'name': matrix_mautrix_instagram_database_name,

  2503.       'username': matrix_mautrix_instagram_database_username,

  2504.       'password': matrix_mautrix_instagram_database_password,

  2505.     }] if (matrix_mautrix_instagram_enabled and matrix_mautrix_instagram_database_engine == 'postgres' and matrix_mautrix_instagram_database_hostname == devture_postgres_connection_hostname) else [])

  2506.     +

  2507.     ([{

  2508.       'name': matrix_mautrix_signal_database_name,

  2509.       'username': matrix_mautrix_signal_database_username,

  2510.       'password': matrix_mautrix_signal_database_password,

  2511.     }] if (matrix_mautrix_signal_enabled and matrix_mautrix_signal_database_engine == 'postgres' and matrix_mautrix_signal_database_hostname == devture_postgres_connection_hostname) else [])

  2512.     +

  2513.     ([{

  2514.       'name': matrix_mautrix_telegram_database_name,

  2515.       'username': matrix_mautrix_telegram_database_username,

  2516.       'password': matrix_mautrix_telegram_database_password,

  2517.     }] if (matrix_mautrix_telegram_enabled and matrix_mautrix_telegram_database_engine == 'postgres' and matrix_mautrix_telegram_database_hostname == devture_postgres_connection_hostname) else [])

  2518.     +

  2519.     ([{

  2520.       'name': matrix_mautrix_twitter_database_name,

  2521.       'username': matrix_mautrix_twitter_database_username,

  2522.       'password': matrix_mautrix_twitter_database_password,

  2523.     }] if (matrix_mautrix_twitter_enabled and matrix_mautrix_twitter_database_engine == 'postgres' and matrix_mautrix_twitter_database_hostname == devture_postgres_connection_hostname) else [])

  2524.     +

  2525.     ([{

  2526.       'name': matrix_mautrix_whatsapp_database_name,

  2527.       'username': matrix_mautrix_whatsapp_database_username,

  2528.       'password': matrix_mautrix_whatsapp_database_password,

  2529.     }] if (matrix_mautrix_whatsapp_enabled and matrix_mautrix_whatsapp_database_engine == 'postgres' and matrix_mautrix_whatsapp_database_hostname == devture_postgres_connection_hostname) else [])

  2530.     +

  2531.     ([{

  2532.       'name': matrix_mautrix_discord_database_name,

  2533.       'username': matrix_mautrix_discord_database_username,

  2534.       'password': matrix_mautrix_discord_database_password,

  2535.     }] if (matrix_mautrix_discord_enabled and matrix_mautrix_discord_database_engine == 'postgres' and matrix_mautrix_discord_database_hostname == devture_postgres_connection_hostname) else [])

  2536.     +

  2537.     ([{

  2538.       'name': matrix_mautrix_slack_database_name,

  2539.       'username': matrix_mautrix_slack_database_username,

  2540.       'password': matrix_mautrix_slack_database_password,

  2541.     }] if (matrix_mautrix_slack_enabled and matrix_mautrix_slack_database_engine == 'postgres' and matrix_mautrix_slack_database_hostname == devture_postgres_connection_hostname) else [])

  2542.     +

  2543.     ([{

  2544.       'name': matrix_mx_puppet_slack_database_name,

  2545.       'username': matrix_mx_puppet_slack_database_username,

  2546.       'password': matrix_mx_puppet_slack_database_password,

  2547.     }] if (matrix_mx_puppet_slack_enabled and matrix_mx_puppet_slack_database_engine == 'postgres' and matrix_mx_puppet_slack_database_hostname == devture_postgres_connection_hostname) else [])

  2548.     +

  2549.     ([{

  2550.       'name': matrix_mx_puppet_twitter_database_name,

  2551.       'username': matrix_mx_puppet_twitter_database_username,

  2552.       'password': matrix_mx_puppet_twitter_database_password,

  2553.     }] if (matrix_mx_puppet_twitter_enabled and matrix_mx_puppet_twitter_database_engine == 'postgres' and matrix_mx_puppet_twitter_database_hostname == devture_postgres_connection_hostname) else [])

  2554.     +

  2555.     ([{

  2556.       'name': matrix_mx_puppet_instagram_database_name,

  2557.       'username': matrix_mx_puppet_instagram_database_username,

  2558.       'password': matrix_mx_puppet_instagram_database_password,

  2559.     }] if (matrix_mx_puppet_instagram_enabled and matrix_mx_puppet_instagram_database_engine == 'postgres' and matrix_mx_puppet_instagram_database_hostname == devture_postgres_connection_hostname) else [])

  2560.     +

  2561.     ([{

  2562.       'name': matrix_mx_puppet_discord_database_name,

  2563.       'username': matrix_mx_puppet_discord_database_username,

  2564.       'password': matrix_mx_puppet_discord_database_password,

  2565.     }] if (matrix_mx_puppet_discord_enabled  and matrix_mx_puppet_discord_database_engine == 'postgres' and matrix_mx_puppet_discord_database_hostname == devture_postgres_connection_hostname) else [])

  2566.     +

  2567.     ([{

  2568.       'name': matrix_mx_puppet_steam_database_name,

  2569.       'username': matrix_mx_puppet_steam_database_username,

  2570.       'password': matrix_mx_puppet_steam_database_password,

  2571.     }] if (matrix_mx_puppet_steam_enabled and matrix_mx_puppet_steam_database_engine == 'postgres' and matrix_mx_puppet_steam_database_hostname == devture_postgres_connection_hostname) else [])

  2572.     +

  2573.     ([{

  2574.       'name': matrix_mx_puppet_groupme_database_name,

  2575.       'username': matrix_mx_puppet_groupme_database_username,

  2576.       'password': matrix_mx_puppet_groupme_database_password,

  2577.     }] if (matrix_mx_puppet_groupme_enabled and matrix_mx_puppet_groupme_database_engine == 'postgres' and matrix_mx_puppet_groupme_database_hostname == devture_postgres_connection_hostname) else [])

  2578.     +

  2579.     ([{

  2580.       'name': matrix_dimension_database_name,

  2581.       'username': matrix_dimension_database_username,

  2582.       'password': matrix_dimension_database_password,

  2583.     }] if (matrix_dimension_enabled and matrix_dimension_database_engine == 'postgres' and matrix_dimension_database_hostname == devture_postgres_connection_hostname) else [])

  2584.     +

  2585.     ([{

  2586.       'name': matrix_etherpad_database_name,

  2587.       'username': matrix_etherpad_database_username,

  2588.       'password': matrix_etherpad_database_password,

  2589.     }] if (matrix_etherpad_enabled and matrix_etherpad_database_engine == 'postgres' and matrix_etherpad_database_hostname == devture_postgres_connection_hostname) else [])

  2590.     +

  2591.     ([{

  2592.       'name': matrix_prometheus_postgres_exporter_database_name,

  2593.       'username': matrix_prometheus_postgres_exporter_database_username,

  2594.       'password': matrix_prometheus_postgres_exporter_database_password,

  2595.     }] if (matrix_prometheus_postgres_exporter_enabled and matrix_prometheus_postgres_exporter_database_hostname == devture_postgres_connection_hostname) else [])

  2596. 

  2597.    }}

  2598. 

  2599. ########################################################################

  2600. #                                                                      #

  2601. # /com.devture.ansible.role.postgres                                   #

  2602. #                                                                      #

  2603. ########################################################################

  2604. 

  2605. 

  2606. ########################################################################

  2607. #                                                                      #

  2608. # com.devture.ansible.role.postgres_backup                             #

  2609. #                                                                      #

  2610. ########################################################################

  2611. 

  2612. devture_postgres_backup_enabled: false

  2613. 

  2614. devture_postgres_backup_identifier: matrix-postgres-backup

  2615. 

  2616. devture_postgres_backup_architecture: "{{ matrix_architecture }}"

  2617. 

  2618. devture_postgres_backup_base_path: "{{ matrix_base_data_path }}/postgres-backup"

  2619. 

  2620. devture_postgres_backup_systemd_required_services_list: |

  2621.   {{

  2622.     (['docker.service'])

  2623.     +

  2624.     ([(devture_postgres_identifier + '.service')] if devture_postgres_enabled else [])

  2625.   }}

  2626. 

  2627. devture_postgres_backup_container_network: "{{ matrix_docker_network }}"

  2628. 

  2629. devture_postgres_backup_uid: "{{ matrix_user_uid }}"

  2630. devture_postgres_backup_gid: "{{ matrix_user_gid }}"

  2631. 

  2632. devture_postgres_backup_connection_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  2633. devture_postgres_backup_connection_port: "{{ devture_postgres_connection_port if devture_postgres_enabled else 5432 }}"

  2634. devture_postgres_backup_connection_username: "{{ devture_postgres_connection_username if devture_postgres_enabled else '' }}"

  2635. devture_postgres_backup_connection_password: "{{ devture_postgres_connection_password if devture_postgres_enabled else '' }}"

  2636. 

  2637. devture_postgres_backup_postgres_data_path: "{{ devture_postgres_data_path if devture_postgres_enabled else '' }}"

  2638. 

  2639. devture_postgres_backup_databases: "{{ devture_postgres_managed_databases | map(attribute='name') if devture_postgres_enabled else [] }}"

  2640. 

  2641. ########################################################################

  2642. #                                                                      #

  2643. # /com.devture.ansible.role.postgres_backup                            #

  2644. #                                                                      #

  2645. ########################################################################

  2646. 

  2647. 

  2648. ######################################################################

  2649. #

  2650. # matrix-sygnal

  2651. #

  2652. ######################################################################

  2653. 

  2654. # Most people don't need their own push-server, because they also need their own app to utilize it from.

  2655. matrix_sygnal_enabled: false

  2656. 

  2657. # If someone instals Prometheus via the playbook, they most likely wish to monitor Sygnal.

  2658. matrix_sygnal_metrics_prometheus_enabled: "{{ matrix_prometheus_enabled }}"

  2659. 

  2660. matrix_sygnal_container_http_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else '127.0.0.1:6000' }}"

  2661. 

  2662. ######################################################################

  2663. #

  2664. # /matrix-sygnal

  2665. #

  2666. ######################################################################

  2667. 

  2668. ######################################################################

  2669. #

  2670. # matrix-ntfy

  2671. #

  2672. ######################################################################

  2673. 

  2674. matrix_ntfy_enabled: false

  2675. 

  2676. matrix_ntfy_container_http_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else '127.0.0.1:2586' }}"

  2677. 

  2678. ######################################################################

  2679. #

  2680. # /matrix-ntfy

  2681. #

  2682. ######################################################################

  2683. 

  2684. ######################################################################

  2685. #

  2686. # matrix-redis

  2687. #

  2688. ######################################################################

  2689. 

  2690. matrix_redis_enabled: "{{ matrix_synapse_workers_enabled }}"

  2691. 

  2692. ######################################################################

  2693. #

  2694. # /matrix-redis

  2695. #

  2696. ######################################################################

  2697. 

  2698. ######################################################################

  2699. #

  2700. # matrix-client-element

  2701. #

  2702. ######################################################################

  2703. 

  2704. # By default, this playbook installs the Element web UI on the `matrix_server_fqn_element` domain.

  2705. # If you wish to connect to your Matrix server by other means, you may wish to disable this.

  2706. matrix_client_element_enabled: true

  2707. 

  2708. matrix_client_element_container_image_self_build: "{{ matrix_architecture not in ['arm64', 'amd64'] }}"

  2709. 

  2710. # Normally, matrix-nginx-proxy is enabled and nginx can reach Element over the container network.

  2711. # If matrix-nginx-proxy is not enabled, or you otherwise have a need for it, you can expose

  2712. # the Element HTTP port to the local host.

  2713. matrix_client_element_container_http_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else '127.0.0.1:8765' }}"

  2714. 

  2715. matrix_client_element_default_hs_url: "{{ matrix_homeserver_url }}"

  2716. matrix_client_element_default_is_url: "{{ matrix_identity_server_url }}"

  2717. 

  2718. # Use Dimension if enabled, otherwise fall back to Scalar

  2719. matrix_client_element_integrations_ui_url: "{{ matrix_dimension_integrations_ui_url if matrix_dimension_enabled else 'https://scalar.vector.im/' }}"

  2720. matrix_client_element_integrations_rest_url: "{{ matrix_dimension_integrations_rest_url if matrix_dimension_enabled else 'https://scalar.vector.im/api' }}"

  2721. matrix_client_element_integrations_widgets_urls: "{{ matrix_dimension_integrations_widgets_urls if matrix_dimension_enabled else ['https://scalar.vector.im/api'] }}"

  2722. matrix_client_element_integrations_jitsi_widget_url: "{{ matrix_dimension_integrations_jitsi_widget_url if matrix_dimension_enabled else 'https://scalar.vector.im/api/widgets/jitsi.html' }}"

  2723. 

  2724. matrix_client_element_self_check_validate_certificates: "{{ false if matrix_ssl_retrieval_method == 'self-signed' else true }}"

  2725. 

  2726. matrix_client_element_registration_enabled: "{{ matrix_synapse_enable_registration }}"

  2727. 

  2728. matrix_client_element_enable_presence_by_hs_url: |

  2729.   {{

  2730.     none

  2731.     if matrix_synapse_presence_enabled

  2732.     else {matrix_client_element_default_hs_url: false}

  2733.   }}

  2734. 

  2735. matrix_client_element_welcome_user_id: ~

  2736. 

  2737. matrix_client_element_jitsi_preferredDomain: "{{ matrix_server_fqn_jitsi if matrix_jitsi_enabled else '' }}"

  2738. 

  2739. ######################################################################

  2740. #

  2741. # /matrix-client-element

  2742. #

  2743. ######################################################################

  2744. 

  2745. ######################################################################

  2746. #

  2747. # matrix-client-hydrogen

  2748. #

  2749. ######################################################################

  2750. 

  2751. matrix_client_hydrogen_enabled: false

  2752. 

  2753. matrix_client_hydrogen_container_image_self_build: "{{ matrix_architecture not in ['amd64'] }}"

  2754. 

  2755. # Normally, matrix-nginx-proxy is enabled and nginx can reach Hydrogen over the container network.

  2756. # If matrix-nginx-proxy is not enabled, or you otherwise have a need for it, you can expose

  2757. # the HTTP port to the local host.

  2758. matrix_client_hydrogen_container_http_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else '127.0.0.1:8768' }}"

  2759. 

  2760. matrix_client_hydrogen_default_hs_url: "{{ matrix_homeserver_url }}"

  2761. 

  2762. matrix_client_hydrogen_self_check_validate_certificates: "{{ false if matrix_ssl_retrieval_method == 'self-signed' else true }}"

  2763. 

  2764. ######################################################################

  2765. #

  2766. # /matrix-client-hydrogen

  2767. #

  2768. ######################################################################

  2769. 

  2770. ######################################################################

  2771. #

  2772. # matrix-client-cinny

  2773. #

  2774. ######################################################################

  2775. 

  2776. matrix_client_cinny_enabled: false

  2777. 

  2778. matrix_client_cinny_container_image_self_build: "{{ matrix_architecture not in ['arm64', 'amd64'] }}"

  2779. 

  2780. # Normally, matrix-nginx-proxy is enabled and nginx can reach Cinny over the container network.

  2781. # If matrix-nginx-proxy is not enabled, or you otherwise have a need for it, you can expose

  2782. # the HTTP port to the local host.

  2783. matrix_client_cinny_container_http_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else '127.0.0.1:8080' }}"

  2784. 

  2785. matrix_client_cinny_default_hs_url: "{{ matrix_homeserver_url }}"

  2786. 

  2787. matrix_client_cinny_self_check_validate_certificates: "{{ false if matrix_ssl_retrieval_method == 'self-signed' else true }}"

  2788. 

  2789. ######################################################################

  2790. #

  2791. # /matrix-client-cinny

  2792. #

  2793. ######################################################################

  2794. 

  2795. ######################################################################

  2796. #

  2797. # matrix-synapse

  2798. #

  2799. ######################################################################

  2800. 

  2801. matrix_synapse_enabled: "{{ matrix_homeserver_implementation == 'synapse' }}"

  2802. 

  2803. matrix_synapse_container_image_self_build: "{{ matrix_architecture not in ['arm64', 'amd64'] }}"

  2804. 

  2805. # When ma1sd is enabled, we can use it to validate phone numbers. It's something that the homeserver cannot do by itself.

  2806. matrix_synapse_account_threepid_delegates_msisdn: "{{ 'http://matrix-ma1sd:' + matrix_ma1sd_container_port | string if matrix_ma1sd_enabled else '' }}"

  2807. 

  2808. # For exposing the Matrix Federation API's TLS port (HTTPS) to the internet on all network interfaces.

  2809. matrix_synapse_container_federation_api_tls_host_bind_port: "{{ matrix_federation_public_port if (matrix_synapse_federation_enabled and matrix_synapse_tls_federation_listener_enabled) else '' }}"

  2810. #

  2811. # For exposing the Synapse Metrics API's port (plain HTTP) to the local host.

  2812. matrix_synapse_container_metrics_api_host_bind_port: "{{ '127.0.0.1:9100' if (matrix_synapse_metrics_enabled and not matrix_nginx_proxy_enabled) else '' }}"

  2813. #

  2814. # For exposing the Synapse Manhole port (plain HTTP) to the local host.

  2815. matrix_synapse_container_manhole_api_host_bind_port: "{{ '127.0.0.1:9000' if matrix_synapse_manhole_enabled else '' }}"

  2816. #

  2817. # For exposing the Synapse worker (and metrics) ports to the local host.

  2818. matrix_synapse_workers_container_host_bind_address: "{{ '127.0.0.1' if (matrix_synapse_workers_enabled and not matrix_nginx_proxy_enabled) else '' }}"

  2819. 

  2820. matrix_synapse_database_host: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  2821. matrix_synapse_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'synapse.db', rounds=655555) | to_uuid }}"

  2822. 

  2823. matrix_synapse_macaroon_secret_key: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'synapse.mac', rounds=655555) | to_uuid }}"

  2824. 

  2825. # We do not enable TLS in Synapse by default.

  2826. # TLS is handled by the matrix-nginx-proxy, which proxies the requests to Synapse.

  2827. matrix_synapse_tls_federation_listener_enabled: false

  2828. matrix_synapse_tls_certificate_path: ~

  2829. matrix_synapse_tls_private_key_path: ~

  2830. 

  2831. matrix_synapse_federation_port_openid_resource_required: "{{ not matrix_synapse_federation_enabled and (matrix_dimension_enabled or matrix_ma1sd_enabled) }}"

  2832. 

  2833. # If someone instals Prometheus via the playbook, they most likely wish to monitor Synapse.

  2834. matrix_synapse_metrics_enabled: "{{ matrix_prometheus_enabled }}"

  2835. 

  2836. matrix_synapse_email_enabled: "{{ matrix_mailer_enabled }}"

  2837. matrix_synapse_email_smtp_host: "matrix-mailer"

  2838. matrix_synapse_email_smtp_port: 8025

  2839. matrix_synapse_email_smtp_require_transport_security: false

  2840. matrix_synapse_email_notif_from: "Matrix <{{ matrix_mailer_sender_address }}>"

  2841. 

  2842. # Even if TURN doesn't support TLS (it does by default),

  2843. # it doesn't hurt to try a secure connection anyway.

  2844. #

  2845. # When Let's Encrypt certificates are used (the default case),

  2846. # we don't enable `turns` endpoints, because WebRTC in Element can't talk to them.

  2847. # Learn more here: https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1145

  2848. matrix_synapse_turn_uris: |

  2849.   {{

  2850.     []

  2851.     +

  2852.     [

  2853.       'turns:' + matrix_server_fqn_matrix + '?transport=udp',

  2854.       'turns:' + matrix_server_fqn_matrix + '?transport=tcp',

  2855.     ] if matrix_coturn_enabled and matrix_coturn_tls_enabled and matrix_ssl_retrieval_method != 'lets-encrypt' else []

  2856.     +

  2857.     [

  2858.       'turn:' + matrix_server_fqn_matrix + '?transport=udp',

  2859.       'turn:' + matrix_server_fqn_matrix + '?transport=tcp',

  2860.     ] if matrix_coturn_enabled else []

  2861.   }}

  2862. 

  2863. matrix_synapse_turn_shared_secret: "{{ matrix_coturn_turn_static_auth_secret if matrix_coturn_enabled else '' }}"

  2864. 

  2865. matrix_synapse_self_check_validate_certificates: "{{ false if matrix_ssl_retrieval_method == 'self-signed' else true }}"

  2866. 

  2867. matrix_synapse_systemd_required_services_list: |

  2868.   {{

  2869.     (['docker.service'])

  2870.     +

  2871.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  2872.     +

  2873.     (['matrix-goofys.service'] if matrix_s3_media_store_enabled else [])

  2874.   }}

  2875. 

  2876. matrix_synapse_systemd_wanted_services_list: |

  2877.   {{

  2878.     (['matrix-coturn.service'] if matrix_coturn_enabled else [])

  2879.     +

  2880.     (['matrix-mailer.service'] if matrix_mailer_enabled else [])

  2881.   }}

  2882. 

  2883. # Synapse workers (used for parallel load-scaling) need Redis for IPC.

  2884. matrix_synapse_redis_enabled: "{{ matrix_redis_enabled }}"

  2885. matrix_synapse_redis_host: "{{ 'matrix-redis' if matrix_redis_enabled else '' }}"

  2886. matrix_synapse_redis_password: "{{ matrix_redis_connection_password if matrix_redis_enabled else '' }}"

  2887. 

  2888. matrix_synapse_container_extra_arguments_auto: "{{ matrix_homeserver_container_extra_arguments_auto }}"

  2889. matrix_synapse_app_service_config_files_auto: "{{ matrix_homeserver_app_service_config_files_auto }}"

  2890. 

  2891. ######################################################################

  2892. #

  2893. # /matrix-synapse

  2894. #

  2895. ######################################################################

  2896. 

  2897. ######################################################################

  2898. #

  2899. # matrix-synapse-reverse-proxy-companion

  2900. #

  2901. ######################################################################

  2902. 

  2903. matrix_synapse_reverse_proxy_companion_enabled: "{{ matrix_synapse_enabled }}"

  2904. 

  2905. matrix_synapse_reverse_proxy_companion_client_api_client_max_body_size_mb: "{{ matrix_synapse_max_upload_size_mb }}"

  2906. 

  2907. matrix_synapse_reverse_proxy_companion_container_client_api_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else '127.0.0.1:8008' }}"

  2908. matrix_synapse_reverse_proxy_companion_container_federation_api_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else '127.0.0.1:8048' }}"

  2909. 

  2910. matrix_synapse_reverse_proxy_companion_synapse_workers_enabled: "{{ matrix_synapse_workers_enabled }}"

  2911. matrix_synapse_reverse_proxy_companion_synapse_workers_list: "{{ matrix_synapse_workers_enabled_list }}"

  2912. matrix_synapse_reverse_proxy_companion_synapse_generic_worker_client_server_locations: "{{ matrix_synapse_workers_generic_worker_client_server_endpoints }}"

  2913. matrix_synapse_reverse_proxy_companion_synapse_generic_worker_federation_locations: "{{ matrix_synapse_workers_generic_worker_federation_endpoints }}"

  2914. matrix_synapse_reverse_proxy_companion_synapse_stream_writer_typing_stream_worker_client_server_locations: "{{ matrix_synapse_workers_stream_writer_typing_stream_worker_client_server_endpoints }}"

  2915. matrix_synapse_reverse_proxy_companion_synapse_stream_writer_to_device_stream_worker_client_server_locations: "{{ matrix_synapse_workers_stream_writer_to_device_stream_worker_client_server_endpoints }}"

  2916. matrix_synapse_reverse_proxy_companion_synapse_stream_writer_account_data_stream_worker_client_server_locations: "{{ matrix_synapse_workers_stream_writer_account_data_stream_worker_client_server_endpoints }}"

  2917. matrix_synapse_reverse_proxy_companion_synapse_stream_writer_receipts_stream_worker_client_server_locations: "{{ matrix_synapse_workers_stream_writer_receipts_stream_worker_client_server_endpoints }}"

  2918. matrix_synapse_reverse_proxy_companion_synapse_stream_writer_presence_stream_worker_client_server_locations: "{{ matrix_synapse_workers_stream_writer_presence_stream_worker_client_server_endpoints }}"

  2919. matrix_synapse_reverse_proxy_companion_synapse_media_repository_locations: "{{matrix_synapse_workers_media_repository_endpoints|default([]) }}"

  2920. matrix_synapse_reverse_proxy_companion_synapse_user_dir_locations: "{{ matrix_synapse_workers_user_dir_worker_client_server_endpoints|default([]) }}"

  2921. 

  2922. matrix_synapse_reverse_proxy_companion_access_log_syslog_integration_enabled: "{{ matrix_prometheus_nginxlog_exporter_enabled }}"

  2923. matrix_synapse_reverse_proxy_companion_access_log_syslog_integration_server_port: "{{ (matrix_prometheus_nginxlog_exporter_container_hostname | string +':'+ matrix_prometheus_nginxlog_exporter_container_syslog_port | string) | default('') }}"

  2924. 

  2925. ######################################################################

  2926. #

  2927. # /matrix-synapse-reverse-proxy-companion

  2928. #

  2929. ######################################################################

  2930. 

  2931. ######################################################################

  2932. #

  2933. # matrix-synapse-admin

  2934. #

  2935. ######################################################################

  2936. 

  2937. matrix_synapse_admin_enabled: false

  2938. 

  2939. # Normally, matrix-nginx-proxy is enabled and nginx can reach Synapse Admin over the container network.

  2940. # If matrix-nginx-proxy is not enabled, or you otherwise have a need for it, you can expose

  2941. # Synapse Admin's HTTP port to the local host.

  2942. matrix_synapse_admin_container_http_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else '127.0.0.1:8766' }}"

  2943. 

  2944. matrix_synapse_admin_container_image_self_build: "{{ matrix_architecture not in ['arm64', 'amd64'] }}"

  2945. 

  2946. ######################################################################

  2947. #

  2948. # /matrix-synapse-admin

  2949. #

  2950. ######################################################################

  2951. 

  2952. ######################################################################

  2953. #

  2954. # etke/prometheus_node_exporter

  2955. #

  2956. ######################################################################

  2957. 

  2958. prometheus_node_exporter_enabled: false

  2959. 

  2960. prometheus_node_exporter_identifier: matrix-prometheus-node-exporter

  2961. 

  2962. prometheus_node_exporter_base_path: "{{ matrix_base_data_path }}/prometheus-node-exporter"

  2963. 

  2964. prometheus_node_exporter_uid: "{{ matrix_user_uid }}"

  2965. prometheus_node_exporter_gid: "{{ matrix_user_gid }}"

  2966. 

  2967. prometheus_node_exporter_server_fqn: "{{ matrix_server_fqn_matrix }}"

  2968. 

  2969. prometheus_node_exporter_container_network: "{{ matrix_docker_network }}"

  2970. 

  2971. prometheus_node_exporter_container_labels_traefik_enabled: false

  2972. 

  2973. ######################################################################

  2974. #

  2975. # /etke/prometheus_node_exporter

  2976. #

  2977. ######################################################################

  2978. 

  2979. ######################################################################

  2980. #

  2981. # matrix-prometheus-nginxlog-exporter

  2982. #

  2983. ######################################################################

  2984. 

  2985. matrix_prometheus_nginxlog_exporter_enabled: false

  2986. 

  2987. ######################################################################

  2988. #

  2989. # /matrix-prometheus-nginxlog-exporter

  2990. #

  2991. ######################################################################

  2992. 

  2993. ######################################################################

  2994. #

  2995. # matrix-prometheus

  2996. #

  2997. ######################################################################

  2998. 

  2999. matrix_prometheus_enabled: false

  3000. 

  3001. # Normally, matrix-nginx-proxy is enabled and nginx can reach Prometheus over the container network.

  3002. # If matrix-nginx-proxy is not enabled, or you otherwise have a need for it, you can expose

  3003. # Prometheus' HTTP port to the local host.

  3004. matrix_prometheus_container_http_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else '127.0.0.1:9090' }}"

  3005. 

  3006. matrix_prometheus_scraper_synapse_enabled: "{{ matrix_synapse_enabled and matrix_synapse_metrics_enabled }}"

  3007. matrix_prometheus_scraper_synapse_targets: ['matrix-synapse:{{ matrix_synapse_metrics_port }}']

  3008. matrix_prometheus_scraper_synapse_workers_enabled_list: "{{ matrix_synapse_workers_enabled_list }}"

  3009. matrix_prometheus_scraper_synapse_rules_synapse_tag: "{{ matrix_synapse_docker_image_tag }}"

  3010. 

  3011. matrix_prometheus_scraper_node_enabled: "{{ prometheus_node_exporter_enabled }}"

  3012. matrix_prometheus_scraper_node_targets: "{{ [prometheus_node_exporter_identifier + ':9100'] if prometheus_node_exporter_enabled else [] }}"

  3013. 

  3014. matrix_prometheus_scraper_postgres_enabled: "{{ matrix_prometheus_postgres_exporter_enabled }}"

  3015. matrix_prometheus_scraper_postgres_targets: "{{ ['matrix-prometheus-postgres-exporter:'+ matrix_prometheus_postgres_exporter_port | string] if matrix_prometheus_scraper_postgres_enabled else [] }}"

  3016. 

  3017. matrix_prometheus_scraper_hookshot_enabled: "{{ matrix_hookshot_metrics_enabled|default(false) }}"

  3018. matrix_prometheus_scraper_hookshot_targets: "{{ [matrix_hookshot_container_url | string +':'+ matrix_hookshot_metrics_port | string] if matrix_hookshot_metrics_enabled else [] }}"

  3019. 

  3020. matrix_prometheus_scraper_nginxlog_enabled: "{{ matrix_prometheus_nginxlog_exporter_enabled }}"

  3021. matrix_prometheus_scraper_nginxlog_server_port: "{{ (matrix_prometheus_nginxlog_exporter_container_hostname | string +':'+ matrix_prometheus_nginxlog_exporter_container_metrics_port | string)

  3022. | default('') }}"

  3023. 

  3024. ######################################################################

  3025. #

  3026. # /matrix-prometheus

  3027. #

  3028. ######################################################################

  3029. 

  3030. ######################################################################

  3031. #

  3032. # matrix-prometheus-postgres-exporter

  3033. #

  3034. ######################################################################

  3035. 

  3036. matrix_prometheus_postgres_exporter_enabled: false

  3037. matrix_prometheus_postgres_exporter_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  3038. matrix_prometheus_postgres_exporter_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'prometheus.pg.db', rounds=655555) | to_uuid }}"

  3039. 

  3040. matrix_prometheus_postgres_exporter_systemd_required_services_list: |

  3041.   {{

  3042.     ['docker.service']

  3043.     +

  3044.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  3045.   }}

  3046. 

  3047. ######################################################################

  3048. #

  3049. # /matrix-prometheus-postgres-exporter

  3050. #

  3051. ######################################################################

  3052. 

  3053. ######################################################################

  3054. #

  3055. # matrix-grafana

  3056. #

  3057. ######################################################################

  3058. 

  3059. matrix_grafana_enabled: false

  3060. 

  3061. # Normally, matrix-nginx-proxy is enabled and nginx can reach Grafana over the container network.

  3062. # If matrix-nginx-proxy is not enabled, or you otherwise have a need for it, you can expose

  3063. # Grafana's HTTP port to the local host.

  3064. matrix_grafana_container_http_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else '127.0.0.1:3000' }}"

  3065. 

  3066. matrix_grafana_dashboard_download_urls: |

  3067.   {{

  3068.     (matrix_synapse_grafana_dashboard_urls if matrix_homeserver_implementation == 'synapse' and matrix_synapse_metrics_enabled else [])

  3069.     +

  3070.     (prometheus_node_exporter_dashboard_urls if prometheus_node_exporter_enabled else [])

  3071.     +

  3072.     (matrix_prometheus_postgres_exporter_dashboard_urls if matrix_prometheus_postgres_exporter_enabled else [])

  3073.     +

  3074.     (matrix_prometheus_nginxlog_exporter_dashboard_urls if matrix_prometheus_nginxlog_exporter_enabled else [])

  3075.   }}

  3076. 

  3077. matrix_grafana_default_home_dashboard_path: |-

  3078.   {{

  3079.     {

  3080.       'synapse': ('/etc/grafana/dashboards/synapse.json' if matrix_synapse_metrics_enabled else '/etc/grafana/dashboards/node-exporter-full.json'),

  3081.       'dendrite': '/etc/grafana/dashboards/node-exporter-full.json',

  3082.       'conduit': '/etc/grafana/dashboards/node-exporter-full.json',

  3083.     }[matrix_homeserver_implementation]

  3084.   }}

  3085. 

  3086. matrix_grafana_systemd_wanted_services_list: |

  3087.   {{

  3088.     []

  3089.     +

  3090.     (['matrix-prometheus-postgres-exporter.service'] if matrix_prometheus_postgres_exporter_enabled else [])

  3091.   }}

  3092. 

  3093. ######################################################################

  3094. #

  3095. # /matrix-grafana

  3096. #

  3097. ######################################################################

  3098. 

  3099. ######################################################################

  3100. #

  3101. # matrix-registration

  3102. #

  3103. ######################################################################

  3104. 

  3105. matrix_registration_enabled: false

  3106. 

  3107. # Normally, matrix-nginx-proxy is enabled and nginx can reach matrix-registration over the container network.

  3108. # If matrix-nginx-proxy is not enabled, or you otherwise have a need for it, you can expose

  3109. # matrix-registration's HTTP port to the local host.

  3110. matrix_registration_container_http_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else '127.0.0.1:8767' }}"

  3111. 

  3112. matrix_registration_riot_instance: "{{ ('https://' + matrix_server_fqn_element) if matrix_client_element_enabled else 'https://riot.im/app/' }}"

  3113. 

  3114. matrix_registration_shared_secret: |-

  3115.   {{

  3116.     {

  3117.       'synapse': matrix_synapse_registration_shared_secret,

  3118.       'dendrite': matrix_dendrite_client_api_registration_shared_secret,

  3119.       'conduit': '',

  3120.     }[matrix_homeserver_implementation]

  3121.   }}

  3122. 

  3123. matrix_registration_server_location: "{{ matrix_homeserver_container_url }}"

  3124. 

  3125. matrix_registration_api_validate_certs: "{{ false if matrix_ssl_retrieval_method == 'self-signed' else true }}"

  3126. 

  3127. matrix_registration_container_image_self_build: "{{ matrix_architecture != 'amd64' }}"

  3128. 

  3129. matrix_registration_systemd_required_services_list: |

  3130.   {{

  3131.     ['docker.service']

  3132.     +

  3133.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  3134.   }}

  3135. 

  3136. # Postgres is the default, except if not using internal Postgres server

  3137. matrix_registration_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  3138. matrix_registration_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  3139. matrix_registration_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mx.registr.db', rounds=655555) | to_uuid }}"

  3140. 

  3141. ######################################################################

  3142. #

  3143. # /matrix-registration

  3144. #

  3145. ######################################################################

  3146. 

  3147. 

  3148. ######################################################################

  3149. #

  3150. # matrix-dendrite

  3151. #

  3152. ######################################################################

  3153. 

  3154. matrix_dendrite_enabled: "{{ matrix_homeserver_implementation == 'dendrite' }}"

  3155. 

  3156. # Normally, matrix-nginx-proxy is enabled and nginx can reach Dendrite over the container network.

  3157. # If matrix-nginx-proxy is not enabled, or you otherwise have a need for it,

  3158. # you can expose Dendrite's ports to the host.

  3159. #

  3160. # For exposing Dendrite's plain HTTP server to the local host.

  3161. matrix_dendrite_container_http_host_bind_address: "{{ '' if matrix_nginx_proxy_enabled else ('127.0.0.1:' + matrix_dendrite_http_bind_port | string) }}"

  3162. #

  3163. # For exposing Dendrite's HTTPS server to the local host.

  3164. matrix_dendrite_container_https_host_bind_address: "{{ '' if matrix_nginx_proxy_enabled or not matrix_dendrite_https_bind_port else ('127.0.0.1:' + matrix_dendrite_https_bind_port | string) }}"

  3165. 

  3166. matrix_dendrite_sync_api_real_ip_header: "{{ 'X-Forwarded-For' if matrix_nginx_proxy_enabled else '' }}"

  3167. 

  3168. matrix_dendrite_client_api_registration_shared_secret: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'dendrite.rss', rounds=655555) | to_uuid }}"

  3169. 

  3170. matrix_dendrite_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  3171. 

  3172. matrix_dendrite_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'dendrite.db', rounds=655555) | to_uuid }}"

  3173. 

  3174. # Even if TURN doesn't support TLS (it does by default),

  3175. # it doesn't hurt to try a secure connection anyway.

  3176. matrix_dendrite_client_api_turn_uris: |

  3177.   {{

  3178.     [

  3179.       'turns:' + matrix_server_fqn_matrix + '?transport=udp',

  3180.       'turns:' + matrix_server_fqn_matrix + '?transport=tcp',

  3181.       'turn:' + matrix_server_fqn_matrix + '?transport=udp',

  3182.       'turn:' + matrix_server_fqn_matrix + '?transport=tcp',

  3183.     ]

  3184.     if matrix_coturn_enabled

  3185.     else []

  3186.   }}

  3187. 

  3188. matrix_dendrite_client_api_turn_shared_secret: "{{ matrix_coturn_turn_static_auth_secret if matrix_coturn_enabled else '' }}"

  3189. 

  3190. matrix_dendrite_disable_tls_validation: "{{ true if matrix_ssl_retrieval_method == 'self-signed' else false }}"

  3191. 

  3192. matrix_dendrite_self_check_validate_certificates: "{{ false if matrix_ssl_retrieval_method == 'self-signed' else true }}"

  3193. 

  3194. matrix_dendrite_trusted_id_servers: "{{ [matrix_server_fqn_matrix] if matrix_ma1sd_enabled else ['matrix.org', 'vector.im'] }}"

  3195. 

  3196. matrix_dendrite_systemd_required_services_list: |

  3197.   {{

  3198.     (['docker.service'])

  3199.     +

  3200.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  3201.     +

  3202.     (['matrix-goofys.service'] if matrix_s3_media_store_enabled else [])

  3203.   }}

  3204. 

  3205. matrix_dendrite_systemd_wanted_services_list: |

  3206.   {{

  3207.     (['matrix-coturn.service'] if matrix_coturn_enabled else [])

  3208.   }}

  3209. 

  3210. matrix_dendrite_container_extra_arguments_auto: "{{ matrix_homeserver_container_extra_arguments_auto }}"

  3211. matrix_dendrite_app_service_config_files_auto: "{{ matrix_homeserver_app_service_config_files_auto }}"

  3212. 

  3213. ######################################################################

  3214. #

  3215. # /matrix-dendrite

  3216. #

  3217. ######################################################################

  3218. 

  3219. ######################################################################

  3220. #

  3221. # matrix-conduit

  3222. #

  3223. ######################################################################

  3224. 

  3225. matrix_conduit_enabled: "{{ matrix_homeserver_implementation == 'conduit' }}"

  3226. 

  3227. matrix_conduit_systemd_required_services_list: |

  3228.   {{

  3229.     (['docker.service'])

  3230.   }}

  3231. 

  3232. 

  3233. ######################################################################

  3234. #

  3235. # /matrix-conduit

  3236. #

  3237. ######################################################################

  3238. 

  3239. 

  3240. ######################################################################

  3241. #

  3242. # matrix-user-creator

  3243. #

  3244. ######################################################################

  3245. 

  3246. matrix_user_creator_users_auto: |

  3247.   {{

  3248.     ([{

  3249.       'username': matrix_bot_matrix_reminder_bot_matrix_user_id_localpart,

  3250.       'initial_password': matrix_bot_matrix_reminder_bot_matrix_user_password,

  3251.       'initial_type': 'bot',

  3252.     }] if matrix_bot_matrix_reminder_bot_enabled else [])

  3253.     +

  3254.     ([{

  3255.       'username': matrix_bot_honoroit_login,

  3256.       'initial_password': matrix_bot_honoroit_password,

  3257.       'initial_type': 'bot',

  3258.     }] if matrix_bot_honoroit_enabled else [])

  3259.     +

  3260.     ([{

  3261.       'username': matrix_bot_postmoogle_login,

  3262.       'initial_password': matrix_bot_postmoogle_password,

  3263.       'initial_type': 'bot',

  3264.     }] if matrix_bot_postmoogle_enabled else [])

  3265.     +

  3266.     ([{

  3267.       'username': matrix_bot_buscarron_login,

  3268.       'initial_password': matrix_bot_buscarron_password,

  3269.       'initial_type': 'bot',

  3270.     }] if matrix_bot_buscarron_enabled else [])

  3271.   }}

  3272. 

  3273. ######################################################################

  3274. #

  3275. # /matrix-user-creator

  3276. #

  3277. ######################################################################