overmind
/
matrix-docker-ansible-deploy
zrcadlo https://github.com/spantaleev/matrix-docker-ansible-deploy
1
0
Rozštěpit 0
Zdrojový kód Úkoly 0 Vydání 0 Wiki Aktivita
Matrix Docker Ansible eploy
Nelze vybrat více než 25 témat Téma musí začínat písmenem nebo číslem, může obsahovat pomlčky („-“) a může být dlouhé až 35 znaků.
3125 Revize
13 Větve
79 MiB
 
 
Strom: e4ea32b89f
Větve Značky
${ item.name }
Vytvořit větev ${ searchTerm }
z „e4ea32b89f“
${ noResults }
matrix-docker-ansible-deploy/roles/matrix-awx/tasks/set_variables_synapse.yml

230 řádky
9.1 KiB
Surový Blame Historie 

  1. 

  2. - name: Limit max upload size to 200MB part 1

  3.   set_fact:

  4.     matrix_synapse_max_upload_size_mb: "200"

  5.   when: matrix_synapse_max_upload_size_mb_raw|int >= 200

  6. 

  7. - name: Limit max upload size to 200MB part 2

  8.   set_fact:

  9.     matrix_synapse_max_upload_size_mb: "{{ matrix_synapse_max_upload_size_mb_raw }}"

  10.   when: matrix_synapse_max_upload_size_mb_raw|int < 200

  11. 

  12. - name: Record Synapse variables locally on AWX

  13.   delegate_to: 127.0.0.1

  14.   lineinfile:

  15.     path: '{{ awx_cached_matrix_vars }}'

  16.     regexp: "^#? *{{ item.key | regex_escape() }}:"

  17.     line: "{{ item.key }}: {{ item.value }}"

  18.     insertafter: '# Synapse Settings Start'

  19.   with_dict:

  20.     'matrix_synapse_allow_public_rooms_over_federation': '{{ matrix_synapse_allow_public_rooms_over_federation }}'

  21.     'matrix_synapse_enable_registration': '{{ matrix_synapse_enable_registration }}'

  22.     'matrix_synapse_federation_enabled': '{{ matrix_synapse_federation_enabled }}'

  23.     'matrix_synapse_enable_group_creation': '{{ matrix_synapse_enable_group_creation }}'

  24.     'matrix_synapse_presence_enabled': '{{ matrix_synapse_presence_enabled }}'

  25.     'matrix_synapse_max_upload_size_mb': '{{ matrix_synapse_max_upload_size_mb }}'

  26.     'matrix_synapse_url_preview_enabled': '{{ matrix_synapse_url_preview_enabled }}'

  27.     'matrix_synapse_allow_guest_access': '{{ matrix_synapse_allow_guest_access }}'

  28. 

  29. - name: Empty Synapse variable 'matrix_synapse_auto_join_rooms' locally on AWX, if raw inputs empty

  30.   delegate_to: 127.0.0.1

  31.   replace:

  32.     path: '{{ awx_cached_matrix_vars }}'

  33.     regexp: "^matrix_synapse_auto_join_rooms: .*$"

  34.     replace: "matrix_synapse_auto_join_rooms: []"

  35.   when: matrix_synapse_auto_join_rooms_raw|length == 0

  36. 

  37. - name: If the raw inputs is not empty start constructing parsed auto_join_rooms list

  38.   set_fact:

  39.     matrix_synapse_auto_join_rooms_array: |-

  40.       {{ matrix_synapse_auto_join_rooms_raw.splitlines() | to_json }}

  41.   when: matrix_synapse_auto_join_rooms_raw|length > 0

  42. 

  43. - name: Record Synapse variable 'matrix_synapse_auto_join_rooms' locally on AWX, if it's not blank

  44.   delegate_to: 127.0.0.1

  45.   lineinfile:

  46.     path: '{{ awx_cached_matrix_vars }}'

  47.     regexp: "^#? *{{ item.key | regex_escape() }}:"

  48.     line: "{{ item.key }}: {{ item.value }}"

  49.     insertafter: '# Synapse Settings Start'

  50.   with_dict:

  51.     "matrix_synapse_auto_join_rooms": "{{ matrix_synapse_auto_join_rooms_array }}"

  52.   when: matrix_synapse_auto_join_rooms_raw|length > 0

  53. 

  54. - name: Record Synapse Shared Secret if it's defined

  55.   delegate_to: 127.0.0.1

  56.   lineinfile:

  57.     path: '{{ awx_cached_matrix_vars }}'

  58.     regexp: "^#? *{{ item.key | regex_escape() }}:"

  59.     line: "{{ item.key }}: {{ item.value }}"

  60.     insertafter: '# Synapse Settings Start'

  61.   with_dict:

  62.     'matrix_synapse_registration_shared_secret': '{{ ext_matrix_synapse_registration_shared_secret }}'

  63.   when: ext_matrix_synapse_registration_shared_secret|length > 0

  64. 

  65. - name: Record registations_require_3pid extra variable if true

  66.   delegate_to: 127.0.0.1

  67.   lineinfile:

  68.     path: '{{ awx_cached_matrix_vars }}'

  69.     regexp: "{{ item }}"

  70.     line: "{{ item }}"

  71.     insertbefore: '# Synapse Extension End'

  72.   with_items:

  73.     - "  registrations_require_3pid:"

  74.     - "    - email"

  75.   when: ext_registrations_require_3pid|bool

  76. 

  77. - name: Remove registrations_require_3pid extra variable if false

  78.   delegate_to: 127.0.0.1

  79.   lineinfile:

  80.     path: '{{ awx_cached_matrix_vars }}'

  81.     regexp: "{{ item }}"

  82.     line: "{{ item }}"

  83.     insertbefore: '# Synapse Extension End'

  84.     state: absent

  85.   with_items:

  86.     - "  registrations_require_3pid:"

  87.     - "    - email"

  88.   when: not ext_registrations_require_3pid|bool

  89. 

  90. - name: Remove URL Languages

  91.   delegate_to: 127.0.0.1

  92.   replace:

  93.     path: '{{ awx_cached_matrix_vars }}'

  94.     regexp: '^(?!.*\bemail\b)    - [a-zA-Z\-]{2,5}\n'

  95.     after: '  url_preview_accept_language:'

  96.     before: '# Synapse Extension End'

  97. 

  98. - name: Set URL languages default if raw inputs empty

  99.   set_fact:

  100.     ext_url_preview_accept_language_default: 'en'

  101.   when: ext_url_preview_accept_language_raw|length == 0

  102. 

  103. - name: Set URL languages default if raw inputs not empty

  104.   set_fact:

  105.     ext_url_preview_accept_language_default: "{{ ext_url_preview_accept_language_raw }}"

  106.   when: ext_url_preview_accept_language_raw|length > 0

  107. 

  108. - name: Set URL languages if raw inputs empty

  109.   delegate_to: 127.0.0.1

  110.   lineinfile:

  111.     path: '{{ awx_cached_matrix_vars }}'

  112.     insertafter: '^  url_preview_accept_language:'

  113.     line: "    - {{ ext_url_preview_accept_language_default }}"

  114.   when: ext_url_preview_accept_language_raw|length == 0

  115. 

  116. - name: Set URL languages if raw inputs not empty

  117.   delegate_to: 127.0.0.1

  118.   lineinfile:

  119.     path: '{{ awx_cached_matrix_vars }}'

  120.     insertafter: '^  url_preview_accept_language:'

  121.     line: "    - {{ item }}"

  122.   with_items: "{{ ext_url_preview_accept_language_raw.splitlines() }}"

  123.   when: ext_url_preview_accept_language_raw|length > 0

  124. 

  125. - name: Remove Federation Whitelisting 1

  126.   delegate_to: 127.0.0.1

  127.   replace:

  128.     path: '{{ awx_cached_matrix_vars }}'

  129.     regexp: '^    - [a-z0-9]+\.[a-z0-9.]+\n'

  130.     after: '  federation_domain_whitelist:'

  131.     before: '# Synapse Extension End'

  132. 

  133. - name: Remove Federation Whitelisting 2

  134.   delegate_to: 127.0.0.1

  135.   lineinfile:

  136.     path: '{{ awx_cached_matrix_vars }}'

  137.     line: "  federation_domain_whitelist:"

  138.     state: absent

  139. 

  140. - name: Set Federation Whitelisting 1

  141.   delegate_to: 127.0.0.1

  142.   lineinfile:

  143.     path: '{{ awx_cached_matrix_vars }}'

  144.     insertafter: '^matrix_synapse_configuration_extension_yaml: \|'

  145.     line: "  federation_domain_whitelist:"

  146.   when: ext_federation_whitelist_raw|length > 0

  147. 

  148. - name: Set Federation Whitelisting 2

  149.   delegate_to: 127.0.0.1

  150.   lineinfile:

  151.     path: '{{ awx_cached_matrix_vars }}'

  152.     insertafter: '^  federation_domain_whitelist:'

  153.     line: "    - {{ item }}"

  154.   with_items: "{{ ext_federation_whitelist_raw.splitlines() }}"

  155.   when: ext_federation_whitelist_raw|length > 0

  156. 

  157. - name: Set ext_recaptcha_public_key to a 'public-key' if undefined

  158.   set_fact: ext_recaptcha_public_key="public-key"

  159.   when: (ext_recaptcha_public_key is not defined) or (ext_recaptcha_public_key|length == 0)

  160. 

  161. - name: Set ext_recaptcha_private_key to a 'private-key' if undefined

  162.   set_fact: ext_recaptcha_private_key="private-key"

  163.   when: (ext_recaptcha_private_key is not defined) or (ext_recaptcha_private_key|length == 0)

  164. 

  165. - name: Record Synapse Extension variables locally on AWX

  166.   delegate_to: 127.0.0.1

  167.   lineinfile:

  168.     path: '{{ awx_cached_matrix_vars }}'

  169.     regexp: "^#? *{{ item.key | regex_escape() }}:"

  170.     line: "{{ item.key }}: {{ item.value }}"

  171.     insertbefore: '# Synapse Extension End'

  172.   with_dict:

  173.     '  enable_registration_captcha': '{{ ext_enable_registration_captcha }}'

  174.     '  recaptcha_public_key': '{{ ext_recaptcha_public_key }}'

  175.     '  recaptcha_private_key': '{{ ext_recaptcha_private_key }}'

  176. 

  177. - name: Record Synapse Custom variables locally on AWX

  178.   delegate_to: 127.0.0.1

  179.   lineinfile:

  180.     path: '{{ awx_cached_matrix_vars }}'

  181.     regexp: "^#? *{{ item.key | regex_escape() }}:"

  182.     line: "{{ item.key }}: {{ item.value }}"

  183.     insertafter: '# Custom Settings Start'

  184.   with_dict:

  185.     'ext_federation_whitelist_raw': '{{ ext_federation_whitelist_raw.splitlines() | to_json }}'

  186.     'ext_url_preview_accept_language_default': '{{ ext_url_preview_accept_language_default.splitlines() | to_json }}'

  187.     'ext_enable_registration_captcha': '{{ ext_enable_registration_captcha }}'

  188.     'ext_recaptcha_public_key': '"{{ ext_recaptcha_public_key }}"'

  189.     'ext_recaptcha_private_key': '"{{ ext_recaptcha_private_key }}"'

  190. 

  191. - name: Save new 'Configure Synapse' survey.json to the AWX tower, template

  192.   delegate_to: 127.0.0.1

  193.   template:

  194.     src: 'roles/matrix-awx/surveys/configure_synapse.json.j2'

  195.     dest: '/var/lib/awx/projects/clients/{{ member_id }}/{{ subscription_id }}//configure_synapse.json'

  196. 

  197. - name: Copy new 'Configure Synapse' survey.json to target machine

  198.   copy:

  199.     src: '/var/lib/awx/projects/clients/{{ member_id }}/{{ subscription_id }}/configure_synapse.json'

  200.     dest:  '/matrix/awx/configure_synapse.json'

  201.     mode: '0660'

  202. 

  203. - name: Collect AWX admin token the hard way!

  204.   delegate_to: 127.0.0.1

  205.   shell: |

  206.       curl -sku {{ tower_username }}:{{ tower_password }} -H "Content-Type: application/json" -X POST -d '{"description":"Tower CLI", "application":null, "scope":"write"}' https://{{ tower_host }}/api/v2/users/1/personal_tokens/ | jq '.token' | sed -r 's/\"//g'

  207.   register: tower_token

  208.   no_log: True

  209. 

  210. - name: Recreate 'Configure Synapse' job template

  211.   delegate_to: 127.0.0.1

  212.   awx.awx.tower_job_template:

  213.     name: "{{ matrix_domain }} - 1 - Configure Synapse"

  214.     description: "Configure Synapse (homeserver) settings."

  215.     extra_vars: "{{ lookup('file', '/var/lib/awx/projects/clients/{{ member_id }}/{{ subscription_id }}/extra_vars.json') }}"

  216.     job_type: run

  217.     job_tags: "start,setup-synapse"

  218.     inventory: "{{ member_id }}"

  219.     project: "{{ member_id }} - Matrix Docker Ansible Deploy"

  220.     playbook: setup.yml

  221.     credential: "{{ member_id }} - AWX SSH Key"

  222.     survey_enabled: true

  223.     survey_spec: "{{ lookup('file', '/var/lib/awx/projects/clients/{{ member_id }}/{{ subscription_id }}/configure_synapse.json') }}"

  224.     become_enabled: yes

  225.     state: present

  226.     verbosity: 1

  227.     tower_host: "https://{{ tower_host }}"

  228.     tower_oauthtoken: "{{ tower_token.stdout }}"

  229.     validate_certs: yes