overmind
/
matrix-docker-ansible-deploy
зеркало из https://github.com/spantaleev/matrix-docker-ansible-deploy
1
0
Форкнуть 0
Код Задачи 0 Релизы 0 Вики Активность
Matrix Docker Ansible eploy
Вы не можете выбрать более 25 тем Темы должны начинаться с буквы или цифры, могут содержать дефисы(-) и должны содержать не более 35 символов.
7324 коммитов
12 Ветки
59 MiB
 
 
Дерево: e50db602ce
Ветки Теги
${ item.name }
Создать ветку ${ searchTerm }
из 'e50db602ce'
${ noResults }
matrix-docker-ansible-deploy/group_vars/matrix_servers

5016 строки
269 KiB
Исходник Вина История 

  1. ---

  2. 

  3. # This variables file wires together the various components (roles) used by the playbook.

  4. #

  5. # Roles used by playbook are pretty minimal and kept independent of one another as much as possible.

  6. # To deliver a turnkey fully-featured Matrix server, this playbook needs

  7. # to connect them all together. It does so by overriding role variables.

  8. #

  9. # You can also override ANY variable (seen here or in any given role),

  10. # by re-defining it in your own configuration file (`inventory/host_vars/matrix.<your-domain>`).

  11. 

  12. ########################################################################

  13. #                                                                      #

  14. # Playbook                                                             #

  15. #                                                                      #

  16. ########################################################################

  17. 

  18. # Controls whether to install Docker or not

  19. # Also see `devture_docker_sdk_for_python_installation_enabled`.

  20. matrix_playbook_docker_installation_enabled: true

  21. 

  22. # Controls whether to attach Traefik labels to services.

  23. # This is separate from `devture_traefik_enabled`, because you may wish to disable Traefik installation by the playbook,

  24. # yet still use Traefik installed in another way.

  25. matrix_playbook_traefik_labels_enabled: "{{ matrix_playbook_reverse_proxy_type in ['playbook-managed-traefik', 'other-traefik-container'] }}"

  26. 

  27. matrix_playbook_reverse_proxy_container_network: "{{ devture_traefik_container_network if devture_traefik_enabled else 'traefik' }}"

  28. matrix_playbook_reverse_proxy_hostname: "{{ devture_traefik_identifier if devture_traefik_enabled else 'traefik' }}"

  29. 

  30. # A separate Matrix Federation entrypoint is always enabled, unless the federation port matches one of the ports for existing (default) entrypoints

  31. matrix_playbook_public_matrix_federation_api_traefik_entrypoint_enabled: "{{ matrix_federation_public_port not in [devture_traefik_config_entrypoint_web_port, devture_traefik_config_entrypoint_web_secure_port] }}"

  32. 

  33. # `devture_traefik_config_entrypoint_web_secure_enabled` is the variable we currently follow to determine if SSL is enabled or not.

  34. # `matrix_playbook_ssl_enabled` is merely an indicator if (when looked at it publicly), the server supports SSL or not,

  35. # and affects how services configure their public URLs.

  36. matrix_federation_traefik_entrypoint_tls: "{{ devture_traefik_config_entrypoint_web_secure_enabled }}"

  37. 

  38. ########################################################################

  39. #                                                                      #

  40. # /Playbook                                                            #

  41. #                                                                      #

  42. ########################################################################

  43. 

  44. 

  45. ########################################################################

  46. #                                                                      #

  47. # aux                                                                  #

  48. #                                                                      #

  49. ########################################################################

  50. 

  51. aux_directory_default_owner: "{{ matrix_user_username }}"

  52. aux_directory_default_group: "{{ matrix_user_groupname }}"

  53. 

  54. aux_file_default_owner: "{{ matrix_user_username }}"

  55. aux_file_default_group: "{{ matrix_user_groupname }}"

  56. 

  57. ########################################################################

  58. #                                                                      #

  59. # /aux                                                                 #

  60. #                                                                      #

  61. ########################################################################

  62. 

  63. 

  64. ########################################################################

  65. #                                                                      #

  66. # base                                                                 #

  67. #                                                                      #

  68. ########################################################################

  69. 

  70. matrix_homeserver_container_extra_arguments_auto: |

  71.   {{

  72.     (['--mount type=bind,src=' + matrix_appservice_discord_config_path + '/registration.yaml,dst=/matrix-appservice-discord-registration.yaml,ro'] if matrix_appservice_discord_enabled else [])

  73.     +

  74.     (['--mount type=bind,src=' + matrix_appservice_irc_config_path + '/registration.yaml,dst=/matrix-appservice-irc-registration.yaml,ro'] if matrix_appservice_irc_enabled else [])

  75.     +

  76.     (['--mount type=bind,src=' + matrix_appservice_kakaotalk_config_path + '/registration.yaml,dst=/matrix-appservice-kakaotalk-registration.yaml,ro'] if matrix_appservice_kakaotalk_enabled else [])

  77.     +

  78.     (['--mount type=bind,src=' + matrix_appservice_slack_config_path + '/slack-registration.yaml,dst=/matrix-appservice-slack-registration.yaml,ro'] if matrix_appservice_slack_enabled else [])

  79.     +

  80.     (['--mount type=bind,src=' + matrix_appservice_webhooks_config_path + '/webhooks-registration.yaml,dst=/matrix-appservice-webhooks-registration.yaml,ro'] if matrix_appservice_webhooks_enabled else [])

  81.     +

  82.     (['--mount type=bind,src=' + matrix_appservice_polychat_config_path + '/registration.yaml,dst=/matrix-appservice-polychat-registration.yaml,ro'] if matrix_appservice_polychat_enabled else [])

  83.     +

  84.     (['--mount type=bind,src=' + matrix_beeper_linkedin_config_path + '/registration.yaml,dst=/matrix-beeper-linkedin-registration.yaml,ro'] if matrix_beeper_linkedin_enabled else [])

  85.     +

  86.     (['--mount type=bind,src=' + matrix_go_skype_bridge_config_path + '/registration.yaml,dst=/matrix-go-skype-bridge-registration.yaml,ro'] if matrix_go_skype_bridge_enabled else [])

  87.     +

  88.     (['--mount type=bind,src=' + matrix_heisenbridge_base_path + '/registration.yaml,dst=/heisenbridge-registration.yaml,ro'] if matrix_heisenbridge_enabled else [])

  89.     +

  90.     (['--mount type=bind,src=' + matrix_hookshot_base_path + '/registration.yml,dst=/hookshot-registration.yml,ro'] if matrix_hookshot_enabled else [])

  91.     +

  92.     (['--mount type=bind,src=' + matrix_mautrix_discord_config_path + '/registration.yaml,dst=/matrix-mautrix-discord-registration.yaml,ro'] if matrix_mautrix_discord_enabled else [])

  93.     +

  94.     (['--mount type=bind,src=' + matrix_mautrix_slack_config_path + '/registration.yaml,dst=/matrix-mautrix-slack-registration.yaml,ro'] if matrix_mautrix_slack_enabled else [])

  95.     +

  96.     (['--mount type=bind,src=' + matrix_mautrix_facebook_config_path + '/registration.yaml,dst=/matrix-mautrix-facebook-registration.yaml,ro'] if matrix_mautrix_facebook_enabled else [])

  97.     +

  98.     (['--mount type=bind,src=' + matrix_mautrix_googlechat_config_path + '/registration.yaml,dst=/matrix-mautrix-googlechat-registration.yaml,ro'] if matrix_mautrix_googlechat_enabled else [])

  99.     +

  100.     (['--mount type=bind,src=' + matrix_mautrix_hangouts_config_path + '/registration.yaml,dst=/matrix-mautrix-hangouts-registration.yaml,ro'] if matrix_mautrix_hangouts_enabled else [])

  101.     +

  102.     (['--mount type=bind,src=' + matrix_mautrix_instagram_config_path + '/registration.yaml,dst=/matrix-mautrix-instagram-registration.yaml,ro'] if matrix_mautrix_instagram_enabled else [])

  103.     +

  104.     (['--mount type=bind,src=' + matrix_mautrix_signal_config_path + '/registration.yaml,dst=/matrix-mautrix-signal-registration.yaml,ro'] if matrix_mautrix_signal_enabled else [])

  105.     +

  106.     (['--mount type=bind,src=' + matrix_mautrix_telegram_config_path + '/registration.yaml,dst=/matrix-mautrix-telegram-registration.yaml,ro'] if matrix_mautrix_telegram_enabled else [])

  107.     +

  108.     (['--mount type=bind,src=' + matrix_mautrix_twitter_config_path + '/registration.yaml,dst=/matrix-mautrix-twitter-registration.yaml,ro'] if matrix_mautrix_twitter_enabled else [])

  109.     +

  110.     (['--mount type=bind,src=' + matrix_mautrix_gmessages_config_path + '/registration.yaml,dst=/matrix-mautrix-gmessages-registration.yaml,ro'] if matrix_mautrix_gmessages_enabled else [])

  111.     +

  112.     (['--mount type=bind,src=' + matrix_mautrix_whatsapp_config_path + '/registration.yaml,dst=/matrix-mautrix-whatsapp-registration.yaml,ro'] if matrix_mautrix_whatsapp_enabled else [])

  113.     +

  114.     (['--mount type=bind,src=' + matrix_mautrix_wsproxy_config_path + '/androidsms-registration.yaml,dst=/matrix-mautrix-androidsms-registration.yaml,ro'] if matrix_mautrix_wsproxy_enabled else [])

  115.     +

  116.     (['--mount type=bind,src=' + matrix_mautrix_wsproxy_config_path + '/imessage-registration.yaml,dst=/matrix-mautrix-imessage-registration.yaml,ro'] if matrix_mautrix_wsproxy_enabled else [])

  117.     +

  118.     (['--mount type=bind,src=' + matrix_mx_puppet_discord_config_path + '/registration.yaml,dst=/matrix-mx-puppet-discord-registration.yaml,ro'] if matrix_mx_puppet_discord_enabled else [])

  119.     +

  120.     (['--mount type=bind,src=' + matrix_mx_puppet_groupme_config_path + '/registration.yaml,dst=/matrix-mx-puppet-groupme-registration.yaml,ro'] if matrix_mx_puppet_groupme_enabled else [])

  121.     +

  122.     (['--mount type=bind,src=' + matrix_mx_puppet_instagram_config_path + '/registration.yaml,dst=/matrix-mx-puppet-instagram-registration.yaml,ro'] if matrix_mx_puppet_instagram_enabled else [])

  123.     +

  124.     (['--mount type=bind,src=' + matrix_mx_puppet_slack_config_path + '/registration.yaml,dst=/matrix-mx-puppet-slack-registration.yaml,ro'] if matrix_mx_puppet_slack_enabled else [])

  125.     +

  126.     (['--mount type=bind,src=' + matrix_mx_puppet_steam_config_path + '/registration.yaml,dst=/matrix-mx-puppet-steam-registration.yaml,ro'] if matrix_mx_puppet_steam_enabled else [])

  127.     +

  128.     (['--mount type=bind,src=' + matrix_mx_puppet_twitter_config_path + '/registration.yaml,dst=/matrix-mx-puppet-twitter-registration.yaml,ro'] if matrix_mx_puppet_twitter_enabled else [])

  129.     +

  130.     (['--mount type=bind,src=' + matrix_sms_bridge_config_path + '/registration.yaml,dst=/matrix-sms-bridge-registration.yaml,ro'] if matrix_sms_bridge_enabled else [])

  131.     +

  132.     (['--mount type=bind,src=' + matrix_cactus_comments_app_service_config_file + ',dst=/matrix-cactus-comments.yaml,ro'] if matrix_cactus_comments_enabled else [])

  133.   }}

  134. 

  135. matrix_homeserver_app_service_config_files_auto: |

  136.   {{

  137.     (['/matrix-appservice-discord-registration.yaml'] if matrix_appservice_discord_enabled else [])

  138.     +

  139.     (['/matrix-appservice-irc-registration.yaml'] if matrix_appservice_irc_enabled else [])

  140.     +

  141.     (['/matrix-appservice-kakaotalk-registration.yaml'] if matrix_appservice_kakaotalk_enabled else [])

  142.     +

  143.     (['/matrix-appservice-slack-registration.yaml'] if matrix_appservice_slack_enabled else [])

  144.     +

  145.     (['/matrix-appservice-webhooks-registration.yaml'] if matrix_appservice_webhooks_enabled else [])

  146.     +

  147.     (['/matrix-appservice-polychat-registration.yaml'] if matrix_appservice_polychat_enabled else [])

  148.     +

  149.     (['/matrix-beeper-linkedin-registration.yaml'] if matrix_beeper_linkedin_enabled else [])

  150.     +

  151.     (['/matrix-go-skype-bridge-registration.yaml'] if matrix_go_skype_bridge_enabled else [])

  152.     +

  153.     (['/heisenbridge-registration.yaml'] if matrix_heisenbridge_enabled else [])

  154.     +

  155.     (['/hookshot-registration.yml'] if matrix_hookshot_enabled else [])

  156.     +

  157.     (['/matrix-mautrix-discord-registration.yaml'] if matrix_mautrix_discord_enabled else [])

  158.     +

  159.     (['/matrix-mautrix-slack-registration.yaml'] if matrix_mautrix_slack_enabled else [])

  160.     +

  161.     (['/matrix-mautrix-facebook-registration.yaml'] if matrix_mautrix_facebook_enabled else [])

  162.     +

  163.     (['/matrix-mautrix-googlechat-registration.yaml'] if matrix_mautrix_googlechat_enabled else [])

  164.     +

  165.     (['/matrix-mautrix-hangouts-registration.yaml'] if matrix_mautrix_hangouts_enabled else [])

  166.     +

  167.     (['/matrix-mautrix-instagram-registration.yaml'] if matrix_mautrix_instagram_enabled else [])

  168.     +

  169.     (['/matrix-mautrix-signal-registration.yaml'] if matrix_mautrix_signal_enabled else [])

  170.     +

  171.     (['/matrix-mautrix-telegram-registration.yaml'] if matrix_mautrix_telegram_enabled else [])

  172.     +

  173.     (['/matrix-mautrix-twitter-registration.yaml'] if matrix_mautrix_twitter_enabled else [])

  174.     +

  175.     (['/matrix-mautrix-gmessages-registration.yaml'] if matrix_mautrix_gmessages_enabled else [])

  176.     +

  177.     (['/matrix-mautrix-whatsapp-registration.yaml'] if matrix_mautrix_whatsapp_enabled else [])

  178.     +

  179.     (['/matrix-mautrix-androidsms-registration.yaml'] if matrix_mautrix_wsproxy_enabled else [])

  180.     +

  181.     (['/matrix-mautrix-imessage-registration.yaml'] if matrix_mautrix_wsproxy_enabled else [])

  182.     +

  183.     (['/matrix-mx-puppet-discord-registration.yaml'] if matrix_mx_puppet_discord_enabled else [])

  184.     +

  185.     (['/matrix-mx-puppet-groupme-registration.yaml'] if matrix_mx_puppet_groupme_enabled else [])

  186.     +

  187.     (['/matrix-mx-puppet-instagram-registration.yaml'] if matrix_mx_puppet_instagram_enabled else [])

  188.     +

  189.     (['/matrix-mx-puppet-slack-registration.yaml'] if matrix_mx_puppet_slack_enabled else [])

  190.     +

  191.     (['/matrix-mx-puppet-steam-registration.yaml'] if matrix_mx_puppet_steam_enabled else [])

  192.     +

  193.     (['/matrix-mx-puppet-twitter-registration.yaml'] if matrix_mx_puppet_twitter_enabled else [])

  194.     +

  195.     (['/matrix-sms-bridge-registration.yaml'] if matrix_sms_bridge_enabled else [])

  196.     +

  197.     (['/matrix-cactus-comments.yaml'] if matrix_cactus_comments_enabled else [])

  198.   }}

  199. 

  200. matrix_addons_homeserver_container_network: "{{ matrix_playbook_reverse_proxy_container_network if matrix_playbook_internal_matrix_client_api_traefik_entrypoint_enabled else matrix_homeserver_container_network }}"

  201. matrix_addons_homeserver_client_api_url: "{{ ('http://' + matrix_playbook_reverse_proxy_hostname + ':' + matrix_playbook_internal_matrix_client_api_traefik_entrypoint_port | string) if matrix_playbook_internal_matrix_client_api_traefik_entrypoint_enabled else matrix_homeserver_container_url }}"

  202. matrix_addons_homeserver_systemd_services_list: "{{ ([devture_traefik_identifier + '.service'] if matrix_playbook_reverse_proxy_type == 'playbook-managed-traefik' else []) if matrix_playbook_internal_matrix_client_api_traefik_entrypoint_enabled else matrix_homeserver_systemd_services_list }}"

  203. 

  204. # Starting from version `0.6.0` conduit natively supports some sync v3 (sliding-sync) features.

  205. matrix_homeserver_sliding_sync_url: "{{ matrix_sliding_sync_base_url if matrix_sliding_sync_enabled else (matrix_homeserver_url if matrix_homeserver_implementation in ['conduit'] else '') }}"

  206. 

  207. ########################################################################

  208. #                                                                      #

  209. # /base                                                                #

  210. #                                                                      #

  211. ########################################################################

  212. 

  213. 

  214. ########################################################################

  215. #                                                                      #

  216. # com.devture.ansible.role.systemd_service_manager                     #

  217. #                                                                      #

  218. ########################################################################

  219. 

  220. # This list is not exhaustive and final.

  221. # Synapse workers are still injected into the list at runtime.

  222. # Additional JVB workers (jitsi_jvb.yml -- roles/galaxy/jitsi/tasks/init_additional_jvb.yml) override this variable at runtime as well.

  223. #

  224. # Priority levels are like this:

  225. # - Traefik starts first with a level of 250, so that:

  226. #   - it can get an early start on obtaining SSL certificates and routing to other services as soon as they start (later)

  227. #   - so that addon services (starting later) can communicte with the homeserver via Traefik's internal entrypoint

  228. #     (see `matrix_playbook_internal_matrix_client_api_traefik_entrypoint_enabled`)

  229. # - core services (the homeserver) get a level of ~1000

  230. # - services that the homeserver depends on (database, Redis, ntfy, Coturn, etc.) get a lower level - between 500 and 1000

  231. # - reverse-proxying services get level 3000

  232. # - Matrix utility services (bridges, bots) get a level of 2000/2200, so that:

  233. #   - they can start before the reverse-proxy

  234. #   - so that, when the reverse-proxy is up (Matrix is up), all bots and bridges can be interacted with

  235. # - monitoring services (Prometheus, Grafana, ..) get a level of 4000 - they can start later than all-of-Matrix

  236. # - services which aren't time-sensitive (various crons and timers) get a level of 5000 - they can start later than all-of-Matrix

  237. devture_systemd_service_manager_services_list_auto: |

  238.   {{

  239.     ([{'name': (backup_borg_identifier + '.timer'), 'priority': 5000, 'groups': ['matrix', 'backup', 'borg']}] if backup_borg_enabled else [])

  240.     +

  241.     ([{'name': 'matrix-bot-buscarron.service', 'priority': 2200, 'groups': ['matrix', 'bots', 'buscarron', 'bot-buscarron']}] if matrix_bot_buscarron_enabled else [])

  242.     +

  243.     ([{'name': 'matrix-bot-go-neb.service', 'priority': 2200, 'groups': ['matrix', 'bots', 'go-neb', 'bot-go-neb']}] if matrix_bot_go_neb_enabled else [])

  244.     +

  245.     ([{'name': 'matrix-bot-honoroit.service', 'priority': 2200, 'groups': ['matrix', 'bots', 'honoroit', 'bot-honoroit']}] if matrix_bot_honoroit_enabled else [])

  246.     +

  247.     ([{'name': 'matrix-bot-matrix-registration-bot.service', 'priority': 2200, 'groups': ['matrix', 'bots', 'registration-bot', 'bot-matrix-registration-bot']}] if matrix_bot_matrix_registration_bot_enabled else [])

  248.     +

  249.     ([{'name': 'matrix-bot-matrix-reminder-bot.service', 'priority': 2200, 'groups': ['matrix', 'bots', 'reminder-bot', 'bot-matrix-reminder-bot']}] if matrix_bot_matrix_reminder_bot_enabled else [])

  250.     +

  251.     ([{'name': 'matrix-bot-maubot.service', 'priority': 2200, 'groups': ['matrix', 'bots', 'maubot', 'bot-maubot']}] if matrix_bot_maubot_enabled else [])

  252.     +

  253.     ([{'name': 'matrix-bot-mjolnir.service', 'priority': 4000, 'groups': ['matrix', 'bots', 'mjolnir', 'bot-mjolnir']}] if matrix_bot_mjolnir_enabled else [])

  254.     +

  255.     ([{'name': 'matrix-bot-draupnir.service', 'priority': 4000, 'groups': ['matrix', 'bots', 'draupnir', 'bot-draupnir']}] if matrix_bot_draupnir_enabled else [])

  256.     +

  257.     ([{'name': 'matrix-bot-postmoogle.service', 'priority': 2200, 'groups': ['matrix', 'bots', 'postmoogle', 'bot-postmoogle']}] if matrix_bot_postmoogle_enabled else [])

  258.     +

  259.     ([{'name': 'matrix-bot-chatgpt.service', 'priority': 2200, 'groups': ['matrix', 'bots', 'chatgpt', 'bot-chatgpt']}] if matrix_bot_chatgpt_enabled else [])

  260.     +

  261.     ([{'name': 'matrix-appservice-discord.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'appservice-discord']}] if matrix_appservice_discord_enabled else [])

  262.     +

  263.     ([{'name': 'matrix-appservice-irc.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'appservice-irc']}] if matrix_appservice_irc_enabled else [])

  264.     +

  265.     ([{'name': 'matrix-appservice-kakaotalk.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'appservice-kakaotalk']}] if matrix_appservice_kakaotalk_enabled else [])

  266.     +

  267.     ([{'name': 'matrix-appservice-kakaotalk-node.service', 'priority': 1900, 'groups': ['matrix', 'bridges', 'appservice-kakaotalk', 'appservice-kakaotalk-node']}] if matrix_appservice_kakaotalk_enabled else [])

  268.     +

  269.     ([{'name': 'matrix-appservice-slack.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'appservice-slack']}] if matrix_appservice_slack_enabled else [])

  270.     +

  271.     ([{'name': 'matrix-appservice-webhooks.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'appservice-webhooks']}] if matrix_appservice_webhooks_enabled else [])

  272.     +

  273.     ([{'name': 'matrix-appservice-polychat.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'appservice-polychat']}] if matrix_appservice_polychat_enabled else [])

  274.     +

  275.     ([{'name': 'matrix-beeper-linkedin.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'beeper-linkedin']}] if matrix_beeper_linkedin_enabled else [])

  276.     +

  277.     ([{'name': 'matrix-go-skype-bridge.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'go-skype']}] if matrix_go_skype_bridge_enabled else [])

  278.     +

  279.     ([{'name': 'matrix-heisenbridge.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'heisenbridge']}] if matrix_heisenbridge_enabled else [])

  280.     +

  281.     ([{'name': 'matrix-hookshot.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'hookshot', 'bridge-hookshot']}] if matrix_hookshot_enabled else [])

  282.     +

  283.     ([{'name': 'matrix-mautrix-discord.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mautrix-discord']}] if matrix_mautrix_discord_enabled else [])

  284.     +

  285.     ([{'name': 'matrix-mautrix-slack.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mautrix-slack']}] if matrix_mautrix_slack_enabled else [])

  286.     +

  287.     ([{'name': 'matrix-mautrix-facebook.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mautrix-facebook']}] if matrix_mautrix_facebook_enabled else [])

  288.     +

  289.     ([{'name': 'matrix-mautrix-googlechat.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mautrix-googlechat']}] if matrix_mautrix_googlechat_enabled else [])

  290.     +

  291.     ([{'name': 'matrix-mautrix-hangouts.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mautrix-hangouts']}] if matrix_mautrix_hangouts_enabled else [])

  292.     +

  293.     ([{'name': 'matrix-mautrix-instagram.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mautrix-instagram']}] if matrix_mautrix_instagram_enabled else [])

  294.     +

  295.     ([{'name': 'matrix-mautrix-signal.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mautrix-signal', 'mautrix-signal']}] if matrix_mautrix_signal_enabled else [])

  296.     +

  297.     ([{'name': 'matrix-mautrix-telegram.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mautrix-telegram']}] if matrix_mautrix_telegram_enabled else [])

  298.     +

  299.     ([{'name': 'matrix-mautrix-twitter.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mautrix-twitter']}] if matrix_mautrix_twitter_enabled else [])

  300.     +

  301.     ([{'name': 'matrix-mautrix-gmessages.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mautrix-gmessages']}] if matrix_mautrix_gmessages_enabled else [])

  302.     +

  303.     ([{'name': 'matrix-mautrix-whatsapp.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mautrix-whatsapp']}] if matrix_mautrix_whatsapp_enabled else [])

  304.     +

  305.     ([{'name': 'matrix-mautrix-wsproxy.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mautrix-wsproxy']}] if matrix_mautrix_wsproxy_enabled else [])

  306.     +

  307.     ([{'name': 'matrix-mautrix-wsproxy-syncproxy.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mautrix-wsproxy-syncproxy']}] if matrix_mautrix_wsproxy_enabled else [])

  308.     +

  309.     ([{'name': 'matrix-mx-puppet-discord.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mx-puppet-discord']}] if matrix_mx_puppet_discord_enabled else [])

  310.     +

  311.     ([{'name': 'matrix-mx-puppet-groupme.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mx-puppet-groupme']}] if matrix_mx_puppet_groupme_enabled else [])

  312.     +

  313.     ([{'name': 'matrix-mx-puppet-instagram.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mx-puppet-instagram']}] if matrix_mx_puppet_instagram_enabled else [])

  314.     +

  315.     ([{'name': 'matrix-mx-puppet-slack.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mx-puppet-slack']}] if matrix_mx_puppet_slack_enabled else [])

  316.     +

  317.     ([{'name': 'matrix-mx-puppet-steam.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mx-puppet-steam']}] if matrix_mx_puppet_steam_enabled else [])

  318.     +

  319.     ([{'name': 'matrix-mx-puppet-twitter.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'mx-puppet-twitter']}] if matrix_mx_puppet_twitter_enabled else [])

  320.     +

  321.     ([{'name': 'matrix-sms-bridge.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'sms']}] if matrix_sms_bridge_enabled else [])

  322.     +

  323.     ([{'name': 'matrix-cactus-comments.service', 'priority': 2000, 'groups': ['matrix', 'cactus-comments']}] if matrix_cactus_comments_enabled else [])

  324.     +

  325.     ([{'name': 'matrix-cactus-comments-client.service', 'priority': 2000, 'groups': ['matrix', 'cactus-comments-client']}] if matrix_cactus_comments_client_enabled else [])

  326.     +

  327.     ([{'name': 'matrix-client-cinny.service', 'priority': 2000, 'groups': ['matrix', 'clients', 'cinny', 'client-cinny']}] if matrix_client_cinny_enabled else [])

  328.     +

  329.     ([{'name': 'matrix-client-element.service', 'priority': 2000, 'groups': ['matrix', 'clients', 'element', 'client-element']}] if matrix_client_element_enabled else [])

  330.     +

  331.     ([{'name': 'matrix-client-hydrogen.service', 'priority': 2000, 'groups': ['matrix', 'clients', 'hydrogen', 'client-hydrogen']}] if matrix_client_hydrogen_enabled else [])

  332.     +

  333.     ([{'name': 'matrix-client-schildichat.service', 'priority': 2000, 'groups': ['matrix', 'clients', 'schildichat', 'client-schildichat']}] if matrix_client_schildichat_enabled else [])

  334.     +

  335.     ([{'name': ('matrix-' + matrix_homeserver_implementation + '.service'), 'priority': 1000, 'groups': ['matrix', 'homeservers', matrix_homeserver_implementation]}] if matrix_homeserver_enabled else [])

  336.     +

  337.     ([{'name': 'matrix-corporal.service', 'priority': 1500, 'groups': ['matrix', 'corporal']}] if matrix_corporal_enabled else [])

  338.     +

  339.     ([{'name': 'matrix-coturn.service', 'priority': 900, 'groups': ['matrix', 'coturn']}] if matrix_coturn_enabled else [])

  340.     +

  341.     ([{'name': 'matrix-rageshake.service', 'priority': 4000, 'groups': ['matrix', 'rageshake']}] if matrix_rageshake_enabled else [])

  342.     +

  343.     ([{'name': 'matrix-coturn-reload.timer', 'priority': 5000, 'groups': ['matrix', 'coturn']}] if (matrix_coturn_enabled and matrix_coturn_tls_enabled) else [])

  344.     +

  345.     ([{'name': 'matrix-dimension.service', 'priority': 4000, 'groups': ['matrix', 'integration-managers', 'dimension']}] if matrix_dimension_enabled else [])

  346.     +

  347.     ([{'name': 'matrix-dynamic-dns.service', 'priority': 5000, 'groups': ['matrix', 'dynamic-dns']}] if matrix_dynamic_dns_enabled else [])

  348.     +

  349.     ([{'name': 'matrix-email2matrix.service', 'priority': 2000, 'groups': ['matrix', 'bridges', 'email2matrix']}] if matrix_email2matrix_enabled else [])

  350.     +

  351.     ([{'name': (etherpad_identifier + '.service'), 'priority': 4000, 'groups': ['matrix', 'etherpad']}] if etherpad_enabled else [])

  352.     +

  353.     ([{'name': (grafana_identifier + '.service'), 'priority': 4000, 'groups': ['matrix', 'monitoring', 'grafana']}] if grafana_enabled else [])

  354.     +

  355.     ([{'name': (jitsi_identifier + '-web.service'), 'priority': 4200, 'groups': ['matrix', 'jitsi', 'jitsi-web']}] if jitsi_enabled else [])

  356.     +

  357.     ([{'name': (jitsi_identifier + '-prosody.service'), 'priority': 4000, 'groups': ['matrix', 'jitsi', 'jitsi-prosody']}] if jitsi_enabled else [])

  358.     +

  359.     ([{'name': (jitsi_identifier + '-jicofo.service'), 'priority': 4100, 'groups': ['matrix', 'jitsi', 'jitsi-jicofo']}] if jitsi_enabled else [])

  360.     +

  361.     ([{'name': (jitsi_identifier + '-jvb.service'), 'priority': 4100, 'groups': ['matrix', 'jitsi', 'jitsi-jvb']}] if jitsi_enabled else [])

  362.     +

  363.     ([{'name': 'matrix-ldap-registration-proxy.service', 'priority': 2000, 'groups': ['matrix', 'ldap-registration-proxy']}] if matrix_ldap_registration_proxy_enabled else [])

  364.     +

  365.     ([{'name': 'matrix-ma1sd.service', 'priority': 2000, 'groups': ['matrix', 'ma1sd']}] if matrix_ma1sd_enabled else [])

  366.     +

  367.     ([{'name': (matrix_media_repo_identifier + '.service'), 'priority': 4000, 'groups': ['matrix', 'matrix-media-repo']}] if matrix_media_repo_enabled else [])

  368.     +

  369.     ([{'name': (exim_relay_identifier ~ '.service'), 'priority': 800, 'groups': ['matrix', 'mailer', 'exim-relay']}] if exim_relay_enabled else [])

  370.     +

  371.     ([{'name': (ntfy_identifier + '.service'), 'priority': 800, 'groups': ['matrix', 'ntfy']}] if ntfy_enabled else [])

  372.     +

  373.     ([{'name': (devture_postgres_identifier + '.service'), 'priority': 500, 'groups': ['matrix', 'postgres']}] if devture_postgres_enabled else [])

  374.     +

  375.     ([{'name': (devture_postgres_backup_identifier + '.service'), 'priority': 5000, 'groups': ['matrix', 'backup', 'postgres-backup']}] if devture_postgres_backup_enabled else [])

  376.     +

  377.     ([{'name': (prometheus_identifier + '.service'), 'priority': 4000, 'groups': ['matrix', 'monitoring', 'prometheus']}] if prometheus_enabled else [])

  378.     +

  379.     ([{'name': (prometheus_node_exporter_identifier + '.service'), 'priority': 3900, 'groups': ['matrix', 'monitoring', 'prometheus-exporters', 'prometheus-node-exporter']}] if prometheus_node_exporter_enabled else [])

  380.     +

  381.     ([{'name': (prometheus_postgres_exporter_identifier + '.service'), 'priority': 3900, 'groups': ['matrix', 'monitoring', 'prometheus-exporters', 'prometheus-postgres-exporter']}] if prometheus_postgres_exporter_enabled else [])

  382.     +

  383.     ([{'name': 'matrix-prometheus-nginxlog-exporter.service', 'priority': 3900, 'groups': ['matrix', 'monitoring', 'prometheus-exporters', 'prometheus-nginxlog-exporter']}] if matrix_prometheus_nginxlog_exporter_enabled else [])

  384.     +

  385.     ([{'name': (redis_identifier + '.service'), 'priority': 750, 'groups': ['matrix', 'redis']}] if redis_enabled else [])

  386.     +

  387.     ([{'name': 'matrix-registration.service', 'priority': 4000, 'groups': ['matrix', 'registration', 'matrix-registration']}] if matrix_registration_enabled else [])

  388.     +

  389.     ([{'name': 'matrix-sliding-sync.service', 'priority': 1500, 'groups': ['matrix', 'sliding-sync']}] if matrix_sliding_sync_enabled else [])

  390.     +

  391.     ([{'name': 'matrix-sygnal.service', 'priority': 800, 'groups': ['matrix', 'sygnal']}] if matrix_sygnal_enabled else [])

  392.     +

  393.     ([{'name': 'matrix-goofys.service', 'priority': 800, 'groups': ['matrix', 'goofys']}] if matrix_s3_media_store_enabled else [])

  394.     +

  395.     ([{'name': 'matrix-synapse-s3-storage-provider-migrate.timer', 'priority': 5000, 'groups': ['matrix']}] if matrix_synapse_ext_synapse_s3_storage_provider_enabled else [])

  396.     +

  397.     ([{'name': 'matrix-synapse-auto-compressor.timer', 'priority': 5000, 'groups': ['matrix', 'synapse-auto-compressor']}] if matrix_synapse_auto_compressor_enabled else [])

  398.     +

  399.     ([{'name': 'matrix-synapse-admin.service', 'priority': 4000, 'groups': ['matrix', 'synapse-admin']}] if matrix_synapse_admin_enabled else [])

  400.     +

  401.     ([{'name': 'matrix-synapse-reverse-proxy-companion.service', 'priority': 1500, 'groups': ['matrix', 'homeservers', 'synapse', 'synapse-reverse-proxy-companion', 'reverse-proxies']}] if matrix_synapse_reverse_proxy_companion_enabled else [])

  402.     +

  403.     ([{'name': 'matrix-user-verification-service.service', 'priority': 800, 'groups': ['matrix', 'matrix-user-verification-service']}] if matrix_user_verification_service_enabled else [])

  404.     +

  405.     ([{'name': (matrix_static_files_identifier + '.service'), 'priority': 4000, 'groups': ['matrix', 'matrix-static-files']}] if matrix_static_files_enabled else [])

  406.     +

  407.     ([{'name': (devture_container_socket_proxy_identifier + '.service'), 'priority': 200, 'groups': ['matrix', 'reverse-proxies', 'container-socket-proxy']}] if devture_container_socket_proxy_enabled else [])

  408.     +

  409.     ([{'name': (devture_traefik_identifier + '.service'), 'priority': 250, 'groups': ['matrix', 'traefik', 'reverse-proxies']}] if devture_traefik_enabled else [])

  410.     +

  411.     ([{'name': (devture_traefik_certs_dumper_identifier + '.service'), 'priority': 300, 'groups': ['matrix', 'traefik-certs-dumper']}] if devture_traefik_certs_dumper_enabled else [])

  412.   }}

  413. 

  414. ########################################################################

  415. #                                                                      #

  416. # /com.devture.ansible.role.systemd_service_manager                    #

  417. #                                                                      #

  418. ########################################################################

  419. 

  420. 

  421. ########################################################################

  422. #                                                                      #

  423. # com.devture.ansible.role.timesync                                    #

  424. #                                                                      #

  425. ########################################################################

  426. 

  427. # To completely disable installing systemd-timesyncd/ntpd, use `devture_timesync_installation_enabled: false`.

  428. 

  429. ########################################################################

  430. #                                                                      #

  431. # /com.devture.ansible.role.timesync                                   #

  432. #                                                                      #

  433. ########################################################################

  434. 

  435. 

  436. ######################################################################

  437. #

  438. # com.devture.ansible.role.playbook_state_preserver

  439. #

  440. ######################################################################

  441. 

  442. # To completely disable this feature, use `devture_playbook_state_preserver_enabled: false`.

  443. 

  444. devture_playbook_state_preserver_uid: "{{ matrix_user_uid }}"

  445. devture_playbook_state_preserver_gid: "{{ matrix_user_gid }}"

  446. 

  447. devture_playbook_state_preserver_vars_preservation_dst: "{{ matrix_base_data_path }}/vars.yml"

  448. 

  449. devture_playbook_state_preserver_commit_hash_preservation_dst: "{{ matrix_base_data_path }}/git_hash.yml"

  450. 

  451. ######################################################################

  452. #

  453. # /com.devture.ansible.role.playbook_state_preserver

  454. #

  455. ######################################################################

  456. 

  457. 

  458. ######################################################################

  459. #

  460. # matrix-base

  461. #

  462. ######################################################################

  463. 

  464. matrix_identity_server_url: "{{ ('https://' + matrix_server_fqn_matrix) if matrix_ma1sd_enabled else None }}"

  465. 

  466. matrix_homeserver_systemd_services_list: |-

  467.   {{

  468.     (

  469.       ([('matrix-' + matrix_homeserver_implementation + '.service')] if matrix_homeserver_implementation != 'synapse' else [])

  470.       +

  471.       ([('matrix-' + matrix_homeserver_implementation + '.service')] if matrix_homeserver_implementation == 'synapse' and not matrix_synapse_reverse_proxy_companion_enabled else [])

  472.       +

  473.       (['matrix-synapse-reverse-proxy-companion.service'] if matrix_synapse_reverse_proxy_companion_enabled else [])

  474.     ) | unique

  475.   }}

  476. 

  477. matrix_homeserver_container_client_api_endpoint: |-

  478.   {{

  479.     {

  480.       'synapse': ('matrix-synapse-reverse-proxy-companion:8008' if matrix_synapse_reverse_proxy_companion_enabled | default(false) else ('matrix-synapse:'+ matrix_synapse_container_client_api_port | default('8008') | string)),

  481.       'dendrite': ('matrix-dendrite:' + matrix_dendrite_http_bind_port | default('8008') | string),

  482.       'conduit': ('matrix-conduit:' + matrix_conduit_port_number | default('8008') | string),

  483.     }[matrix_homeserver_implementation]

  484.   }}

  485. 

  486. matrix_homeserver_container_federation_api_endpoint: |-

  487.   {{

  488.     {

  489.       'synapse': ('matrix-synapse-reverse-proxy-companion:8048' if matrix_synapse_reverse_proxy_companion_enabled else ('matrix-synapse:'+ matrix_synapse_container_federation_api_plain_port | default('8008') | string)),

  490.       'dendrite': ('matrix-dendrite:' + matrix_dendrite_http_bind_port | default('8008') | string),

  491.       'conduit': ('matrix-conduit:' + matrix_conduit_port_number | default('8008') | string),

  492.     }[matrix_homeserver_implementation]

  493.   }}

  494. 

  495. matrix_integration_manager_rest_url: "{{ matrix_dimension_integrations_rest_url if matrix_dimension_enabled else None }}"

  496. matrix_integration_manager_ui_url: "{{ matrix_dimension_integrations_ui_url if matrix_dimension_enabled else None }}"

  497. 

  498. ######################################################################

  499. #

  500. # /matrix-base

  501. #

  502. ######################################################################

  503. 

  504. 

  505. ######################################################################

  506. #

  507. # matrix-bridge-appservice-discord

  508. #

  509. ######################################################################

  510. 

  511. # We don't enable bridges by default.

  512. matrix_appservice_discord_enabled: false

  513. 

  514. matrix_appservice_discord_systemd_required_services_list_auto: |

  515.   {{

  516.     matrix_addons_homeserver_systemd_services_list

  517.     +

  518.     ([devture_postgres_identifier ~ '.service'] if (devture_postgres_enabled and matrix_appservice_discord_database_hostname == devture_postgres_connection_hostname) else [])

  519.   }}

  520. 

  521. matrix_appservice_discord_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '9005') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  522. 

  523. matrix_appservice_discord_container_network: "{{ matrix_addons_container_network }}"

  524. 

  525. matrix_appservice_discord_container_additional_networks_auto: |-

  526.   {{

  527.     (

  528.       ([] if matrix_addons_homeserver_container_network == '' else [matrix_addons_homeserver_container_network])

  529.       +

  530.       ([devture_postgres_container_network] if (devture_postgres_enabled and matrix_appservice_discord_database_hostname == devture_postgres_connection_hostname and matrix_appservice_discord_container_network != devture_postgres_container_network) else [])

  531.     ) | unique

  532.   }}

  533. 

  534. # If the homeserver disables presence, it's likely better (less wasteful) to also disable presence on the bridge side.

  535. matrix_appservice_discord_bridge_disablePresence: "{{ not matrix_synapse_presence_enabled }}"

  536. 

  537. matrix_appservice_discord_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'discord.as.token', rounds=655555) | to_uuid }}"

  538. 

  539. matrix_appservice_discord_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'discord.hs.token', rounds=655555) | to_uuid }}"

  540. 

  541. # We only make this use Postgres if our own Postgres server is enabled.

  542. # It's only then (for now) that we can automatically create the necessary database and user for this service.

  543. matrix_appservice_discord_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  544. matrix_appservice_discord_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  545. matrix_appservice_discord_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'as.discord.db', rounds=655555) | to_uuid }}"

  546. 

  547. ######################################################################

  548. #

  549. # /matrix-bridge-appservice-discord

  550. #

  551. ######################################################################

  552. 

  553. 

  554. ######################################################################

  555. #

  556. # matrix-appservice-webhooks

  557. #

  558. ######################################################################

  559. 

  560. # We don't enable bridges by default.

  561. matrix_appservice_webhooks_enabled: false

  562. 

  563. matrix_appservice_webhooks_hostname: "{{ matrix_server_fqn_matrix }}"

  564. 

  565. matrix_appservice_webhooks_systemd_required_services_list_auto: |

  566.   {{

  567.     matrix_addons_homeserver_systemd_services_list

  568.   }}

  569. 

  570. matrix_appservice_webhooks_container_image_self_build: "{{ matrix_architecture != 'amd64' }}"

  571. 

  572. matrix_appservice_webhooks_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ matrix_appservice_webhooks_matrix_port) if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  573. 

  574. matrix_appservice_webhooks_container_network: "{{ matrix_addons_container_network }}"

  575. 

  576. matrix_appservice_webhooks_container_additional_networks_auto: |-

  577.   {{

  578.     (

  579.       ([] if matrix_addons_homeserver_container_network == '' else [matrix_addons_homeserver_container_network])

  580.       +

  581.       ([matrix_playbook_reverse_proxyable_services_additional_network] if (matrix_playbook_reverse_proxyable_services_additional_network and matrix_appservice_webhooks_container_labels_traefik_enabled) else [])

  582.     ) | unique

  583.   }}

  584. 

  585. matrix_appservice_webhooks_container_labels_traefik_enabled: "{{ matrix_playbook_reverse_proxy_type in ['playbook-managed-traefik', 'other-traefik-container'] }}"

  586. matrix_appservice_webhooks_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  587. matrix_appservice_webhooks_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  588. matrix_appservice_webhooks_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  589. 

  590. matrix_appservice_webhooks_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'webhook.as.token', rounds=655555) | to_uuid }}"

  591. 

  592. matrix_appservice_webhooks_homeserver_url: "{{ matrix_addons_homeserver_client_api_url }}"

  593. matrix_appservice_webhooks_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'webhook.hs.token', rounds=655555) | to_uuid }}"

  594. 

  595. matrix_appservice_webhooks_id_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'webhook.id.token', rounds=655555) | to_uuid }}"

  596. 

  597. ######################################################################

  598. #

  599. # /matrix-appservice-webhooks

  600. #

  601. ######################################################################

  602. 

  603. 

  604. ######################################################################

  605. #

  606. # matrix-appservice-polychat

  607. #

  608. ######################################################################

  609. 

  610. # We don't enable bridges by default.

  611. matrix_appservice_polychat_enabled: false

  612. 

  613. matrix_appservice_polychat_hostname: "{{ matrix_server_fqn_matrix }}"

  614. 

  615. matrix_appservice_polychat_systemd_required_services_list_auto: |

  616.   {{

  617.     matrix_addons_homeserver_systemd_services_list

  618.   }}

  619. 

  620. matrix_appservice_polychat_container_image_self_build: "{{ matrix_architecture != 'amd64' }}"

  621. 

  622. matrix_appservice_polychat_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ matrix_appservice_polychat_matrix_port) if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  623. 

  624. matrix_appservice_polychat_container_network: "{{ matrix_addons_container_network }}"

  625. 

  626. matrix_appservice_polychat_container_additional_networks_auto: |-

  627.   {{

  628.     (

  629.       ([] if matrix_addons_homeserver_container_network == '' else [matrix_addons_homeserver_container_network])

  630.       +

  631.       ([matrix_playbook_reverse_proxyable_services_additional_network] if (matrix_playbook_reverse_proxyable_services_additional_network and matrix_appservice_polychat_container_labels_traefik_enabled) else [])

  632.     ) | unique

  633.   }}

  634. 

  635. matrix_appservice_polychat_container_labels_traefik_enabled: "{{ matrix_playbook_reverse_proxy_type in ['playbook-managed-traefik', 'other-traefik-container'] }}"

  636. matrix_appservice_polychat_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  637. matrix_appservice_polychat_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  638. matrix_appservice_polychat_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  639. 

  640. matrix_appservice_polychat_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'webhook.as.token', rounds=655555) | to_uuid }}"

  641. 

  642. matrix_appservice_polychat_homeserver_url: "{{ matrix_addons_homeserver_client_api_url }}"

  643. matrix_appservice_polychat_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'webhook.hs.token', rounds=655555) | to_uuid }}"

  644. 

  645. matrix_appservice_polychat_id_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'webhook.id.token', rounds=655555) | to_uuid }}"

  646. 

  647. ######################################################################

  648. #

  649. # /matrix-appservice-polychat

  650. #

  651. ######################################################################

  652. 

  653. 

  654. 

  655. 

  656. ######################################################################

  657. #

  658. # matrix-appservice-slack

  659. #

  660. ######################################################################

  661. 

  662. # We don't enable bridges by default.

  663. matrix_appservice_slack_enabled: false

  664. 

  665. matrix_appservice_slack_hostname: "{{ matrix_server_fqn_matrix }}"

  666. 

  667. matrix_appservice_slack_systemd_required_services_list_auto: |

  668.   {{

  669.     matrix_addons_homeserver_systemd_services_list

  670.     +

  671.     ([devture_postgres_identifier ~ '.service'] if (devture_postgres_enabled and matrix_appservice_slack_database_hostname == devture_postgres_connection_hostname) else [])

  672.   }}

  673. 

  674. matrix_appservice_slack_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"

  675. 

  676. matrix_appservice_slack_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ matrix_appservice_slack_slack_port) if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  677. 

  678. matrix_appservice_slack_container_network: "{{ matrix_addons_container_network }}"

  679. 

  680. matrix_appservice_slack_container_additional_networks_auto: |-

  681.   {{

  682.     (

  683.       ([] if matrix_addons_homeserver_container_network == '' else [matrix_addons_homeserver_container_network])

  684.       +

  685.       ([devture_postgres_container_network] if (devture_postgres_enabled and matrix_appservice_slack_database_hostname == devture_postgres_connection_hostname and matrix_appservice_slack_container_network != devture_postgres_container_network) else [])

  686.       +

  687.       ([matrix_playbook_reverse_proxyable_services_additional_network] if (matrix_playbook_reverse_proxyable_services_additional_network and matrix_appservice_slack_container_labels_traefik_enabled) else [])

  688.     ) | unique

  689.   }}

  690. 

  691. matrix_appservice_slack_container_labels_traefik_enabled: "{{ matrix_playbook_reverse_proxy_type in ['playbook-managed-traefik', 'other-traefik-container'] }}"

  692. matrix_appservice_slack_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  693. matrix_appservice_slack_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  694. matrix_appservice_slack_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  695. 

  696. matrix_appservice_slack_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'slack.as.token', rounds=655555) | to_uuid }}"

  697. 

  698. matrix_appservice_slack_homeserver_url: "{{ matrix_addons_homeserver_client_api_url }}"

  699. matrix_appservice_slack_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'slack.hs.token', rounds=655555) | to_uuid }}"

  700. 

  701. matrix_appservice_slack_id_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'slack.id.token', rounds=655555) | to_uuid }}"

  702. 

  703. # Postgres is the default, except if not using internal Postgres server

  704. matrix_appservice_slack_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'nedb' }}"

  705. matrix_appservice_slack_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  706. matrix_appservice_slack_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'as.slack.db', rounds=655555) | to_uuid }}"

  707. matrix_appservice_slack_database_container_network: "{{ devture_postgres_container_network if devture_postgres_enabled else '' }}"

  708. 

  709. ######################################################################

  710. #

  711. # /matrix-bridge-appservice-slack

  712. #

  713. ######################################################################

  714. 

  715. ######################################################################

  716. #

  717. # matrix-bridge-appservice-irc

  718. #

  719. ######################################################################

  720. 

  721. # We don't enable bridges by default.

  722. matrix_appservice_irc_enabled: false

  723. 

  724. matrix_appservice_irc_systemd_required_services_list_auto: |

  725.   {{

  726.     matrix_addons_homeserver_systemd_services_list

  727.     +

  728.     ([devture_postgres_identifier ~ '.service'] if (devture_postgres_enabled and matrix_appservice_irc_database_hostname == devture_postgres_connection_hostname) else [])

  729.   }}

  730. 

  731. matrix_appservice_irc_container_image_self_build: "{{ matrix_architecture != 'amd64' }}"

  732. 

  733. matrix_appservice_irc_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '9999') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  734. 

  735. matrix_appservice_irc_container_network: "{{ matrix_addons_container_network }}"

  736. 

  737. matrix_appservice_irc_container_additional_networks_auto: |-

  738.   {{

  739.     (

  740.       ([] if matrix_addons_homeserver_container_network == '' else [matrix_addons_homeserver_container_network])

  741.       +

  742.       ([devture_postgres_container_network] if (devture_postgres_enabled and matrix_appservice_irc_database_hostname == devture_postgres_connection_hostname and matrix_appservice_irc_container_network != devture_postgres_container_network) else [])

  743.     ) | unique

  744.   }}

  745. 

  746. # The IRC bridge docs say that if homeserver presence is disabled, it's better to also disable

  747. # IRC bridge presence, for performance reasons.

  748. matrix_appservice_irc_homeserver_enablePresence: "{{ matrix_synapse_presence_enabled }}"

  749. 

  750. matrix_appservice_irc_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'irc.as.token', rounds=655555) | to_uuid }}"

  751. 

  752. matrix_appservice_irc_homeserver_url: "{{ matrix_addons_homeserver_client_api_url }}"

  753. matrix_appservice_irc_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'irc.hs.token', rounds=655555) | to_uuid }}"

  754. 

  755. matrix_appservice_irc_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'nedb' }}"

  756. matrix_appservice_irc_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  757. matrix_appservice_irc_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'as.irc.db', rounds=655555) | to_uuid }}"

  758. matrix_appservice_irc_database_container_network: "{{ devture_postgres_container_network if devture_postgres_enabled else '' }}"

  759. 

  760. ######################################################################

  761. #

  762. # /matrix-bridge-appservice-irc

  763. #

  764. ######################################################################

  765. 

  766. ######################################################################

  767. #

  768. # matrix-bridge-appservice-kakaotalk

  769. #

  770. ######################################################################

  771. 

  772. # We don't enable bridges by default.

  773. matrix_appservice_kakaotalk_enabled: false

  774. 

  775. matrix_appservice_kakaotalk_systemd_required_services_list_auto: |

  776.   {{

  777.     matrix_addons_homeserver_systemd_services_list

  778.     +

  779.     ([devture_postgres_identifier ~ '.service'] if (devture_postgres_enabled and matrix_appservice_kakaotalk_database_hostname == devture_postgres_connection_hostname) else [])

  780.   }}

  781. 

  782. matrix_appservice_kakaotalk_container_network: "{{ matrix_addons_container_network }}"

  783. 

  784. matrix_appservice_kakaotalk_container_additional_networks_auto: |-

  785.   {{

  786.     (

  787.       ([] if matrix_addons_homeserver_container_network == '' else [matrix_addons_homeserver_container_network])

  788.       +

  789.       ([devture_postgres_container_network] if (devture_postgres_enabled and matrix_appservice_kakaotalk_database_hostname == devture_postgres_connection_hostname and matrix_appservice_kakaotalk_container_network != devture_postgres_container_network) else [])

  790.     ) | unique

  791.   }}

  792. 

  793. matrix_appservice_kakaotalk_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'as.kakao.hs', rounds=655555) | to_uuid }}"

  794. 

  795. matrix_appservice_kakaotalk_homeserver_address: "{{ matrix_addons_homeserver_client_api_url }}"

  796. matrix_appservice_kakaotalk_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'as.kakao.hs', rounds=655555) | to_uuid }}"

  797. 

  798. matrix_appservice_kakaotalk_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  799. 

  800. matrix_appservice_kakaotalk_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  801. matrix_appservice_kakaotalk_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  802. matrix_appservice_kakaotalk_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'as.kakao.db', rounds=655555) | to_uuid }}"

  803. 

  804. ######################################################################

  805. #

  806. # /matrix-bridge-appservice-kakaotalk

  807. #

  808. ######################################################################

  809. 

  810. 

  811. ######################################################################

  812. #

  813. # matrix-bridge-beeper-linkedin

  814. #

  815. ######################################################################

  816. 

  817. # We don't enable bridges by default.

  818. matrix_beeper_linkedin_enabled: false

  819. 

  820. matrix_beeper_linkedin_systemd_required_services_list_auto: |

  821.   {{

  822.     matrix_addons_homeserver_systemd_services_list

  823.     +

  824.     ([devture_postgres_identifier ~ '.service'] if (devture_postgres_enabled and matrix_beeper_linkedin_database_hostname == devture_postgres_connection_hostname) else [])

  825.   }}

  826. 

  827. matrix_beeper_linkedin_container_image_self_build: "{{ matrix_architecture not in ['amd64'] }}"

  828. 

  829. matrix_beeper_linkedin_container_network: "{{ matrix_addons_container_network }}"

  830. 

  831. matrix_beeper_linkedin_container_additional_networks_auto: |-

  832.   {{

  833.     (

  834.       ([] if matrix_addons_homeserver_container_network == '' else [matrix_addons_homeserver_container_network])

  835.       +

  836.       ([devture_postgres_container_network] if (devture_postgres_enabled and matrix_beeper_linkedin_database_hostname == devture_postgres_connection_hostname and matrix_beeper_linkedin_container_network != devture_postgres_container_network) else [])

  837.     ) | unique

  838.   }}

  839. 

  840. matrix_beeper_linkedin_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'linked.as.token', rounds=655555) | to_uuid }}"

  841. 

  842. matrix_beeper_linkedin_homeserver_address: "{{ matrix_addons_homeserver_client_api_url }}"

  843. matrix_beeper_linkedin_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'linked.hs.token', rounds=655555) | to_uuid }}"

  844. 

  845. matrix_beeper_linkedin_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  846. 

  847. matrix_beeper_linkedin_bridge_presence: "{{ matrix_synapse_presence_enabled if matrix_synapse_enabled else true }}"

  848. 

  849. matrix_beeper_linkedin_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  850. matrix_beeper_linkedin_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'maulinkedin.db', rounds=655555) | to_uuid }}"

  851. 

  852. ######################################################################

  853. #

  854. # /matrix-bridge-beeper-linkedin

  855. #

  856. ######################################################################

  857. 

  858. 

  859. ######################################################################

  860. #

  861. # matrix-bridge-go-skype-bridge

  862. #

  863. ######################################################################

  864. 

  865. # We don't enable bridges by default.

  866. matrix_go_skype_bridge_enabled: false

  867. 

  868. matrix_go_skype_bridge_systemd_required_services_list_auto: |

  869.   {{

  870.     matrix_addons_homeserver_systemd_services_list

  871.     +

  872.     ([devture_postgres_identifier ~ '.service'] if (devture_postgres_enabled and matrix_go_skype_bridge_database_hostname == devture_postgres_connection_hostname) else [])

  873.   }}

  874. 

  875. matrix_go_skype_bridge_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"

  876. 

  877. matrix_go_skype_bridge_container_network: "{{ matrix_addons_container_network }}"

  878. 

  879. matrix_go_skype_bridge_container_additional_networks_auto: |-

  880.   {{

  881.     (

  882.       ([] if matrix_addons_homeserver_container_network == '' else [matrix_addons_homeserver_container_network])

  883.       +

  884.       ([devture_postgres_container_network] if (devture_postgres_enabled and matrix_go_skype_bridge_database_hostname == devture_postgres_connection_hostname and matrix_go_skype_bridge_container_network != devture_postgres_container_network) else [])

  885.     ) | unique

  886.   }}

  887. 

  888. matrix_go_skype_bridge_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'skype.as.token', rounds=655555) | to_uuid }}"

  889. 

  890. matrix_go_skype_bridge_homeserver_address: "{{ matrix_addons_homeserver_client_api_url }}"

  891. matrix_go_skype_bridge_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'skype.hs.token', rounds=655555) | to_uuid }}"

  892. 

  893. matrix_go_skype_bridge_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  894. 

  895. # Postgres is the default, except if not using internal Postgres server

  896. matrix_go_skype_bridge_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  897. matrix_go_skype_bridge_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  898. matrix_go_skype_bridge_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'goskype.db', rounds=655555) | to_uuid }}"

  899. 

  900. ######################################################################

  901. #

  902. # /matrix-bridge-go-skype-bridge

  903. #

  904. ######################################################################

  905. 

  906. 

  907. ######################################################################

  908. #

  909. # matrix-bridge-mautrix-discord

  910. #

  911. ######################################################################

  912. 

  913. # We don't enable bridges by default.

  914. matrix_mautrix_discord_enabled: false

  915. 

  916. matrix_mautrix_discord_container_image_self_build: "{{ matrix_architecture not in ['arm64', 'amd64'] }}"

  917. 

  918. matrix_mautrix_discord_container_network: "{{ matrix_addons_container_network }}"

  919. 

  920. matrix_mautrix_discord_container_additional_networks_auto: |-

  921.   {{

  922.     (

  923.       ([] if matrix_addons_homeserver_container_network == '' else [matrix_addons_homeserver_container_network])

  924.       +

  925.       ([devture_postgres_container_network] if devture_postgres_enabled and matrix_mautrix_facebook_database_hostname == devture_postgres_connection_hostname else [])

  926.     ) | unique

  927.   }}

  928. 

  929. matrix_mautrix_discord_systemd_required_services_list_auto: |

  930.   {{

  931.     matrix_addons_homeserver_systemd_services_list

  932.     +

  933.     ([devture_postgres_identifier ~ '.service'] if (devture_postgres_enabled and matrix_mautrix_discord_database_hostname == devture_postgres_connection_hostname) else [])

  934.   }}

  935. 

  936. matrix_mautrix_discord_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'maudisc.as.tok', rounds=655555) | to_uuid }}"

  937. 

  938. matrix_mautrix_discord_homeserver_address: "{{ matrix_addons_homeserver_client_api_url }}"

  939. matrix_mautrix_discord_homeserver_public_address: "{{ 'https' if matrix_playbook_ssl_enabled else 'http' }}://{{ matrix_server_fqn_matrix }}"

  940. matrix_mautrix_discord_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'maudisc.hs.tok', rounds=655555) | to_uuid }}"

  941. 

  942. matrix_mautrix_discord_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  943. 

  944. # Postgres is the default, except if not using internal Postgres server

  945. matrix_mautrix_discord_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  946. matrix_mautrix_discord_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  947. matrix_mautrix_discord_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'maudiscord.db', rounds=655555) | to_uuid }}"

  948. 

  949. ######################################################################

  950. #

  951. # /matrix-bridge-mautrix-discord

  952. #

  953. ######################################################################

  954. 

  955. 

  956. ######################################################################

  957. #

  958. # matrix-bridge-mautrix-slack

  959. #

  960. ######################################################################

  961. 

  962. # We don't enable bridges by default.

  963. matrix_mautrix_slack_enabled: false

  964. 

  965. matrix_mautrix_slack_systemd_required_services_list_auto: |

  966.   {{

  967.     matrix_addons_homeserver_systemd_services_list

  968.     +

  969.     ([devture_postgres_identifier ~ '.service'] if (devture_postgres_enabled and matrix_mautrix_slack_database_hostname == devture_postgres_connection_hostname) else [])

  970.   }}

  971. 

  972. matrix_mautrix_slack_container_image_self_build: "{{ matrix_architecture not in ['arm64', 'amd64'] }}"

  973. 

  974. matrix_mautrix_slack_container_network: "{{ matrix_addons_container_network }}"

  975. 

  976. matrix_mautrix_slack_container_additional_networks_auto: |-

  977.   {{

  978.     (

  979.       ([] if matrix_addons_homeserver_container_network == '' else [matrix_addons_homeserver_container_network])

  980.       +

  981.       ([devture_postgres_container_network] if (devture_postgres_enabled and matrix_mautrix_slack_database_hostname == devture_postgres_connection_hostname and matrix_mautrix_slack_container_network != devture_postgres_container_network) else [])

  982.     ) | unique

  983.   }}

  984. 

  985. matrix_mautrix_slack_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mauslack.as.tok', rounds=655555) | to_uuid }}"

  986. 

  987. matrix_mautrix_slack_homeserver_address: "{{ matrix_addons_homeserver_client_api_url }}"

  988. matrix_mautrix_slack_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mauslack.hs.tok', rounds=655555) | to_uuid }}"

  989. 

  990. matrix_mautrix_slack_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  991. 

  992. # Postgres is the default, except if not using internal Postgres server

  993. matrix_mautrix_slack_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  994. matrix_mautrix_slack_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  995. matrix_mautrix_slack_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mauslack.db', rounds=655555) | to_uuid }}"

  996. 

  997. ######################################################################

  998. #

  999. # /matrix-bridge-mautrix-slack

  1000. #

  1001. ######################################################################

  1002. 

  1003. 

  1004. ######################################################################

  1005. #

  1006. # matrix-bridge-mautrix-facebook

  1007. #

  1008. ######################################################################

  1009. 

  1010. # We don't enable bridges by default.

  1011. matrix_mautrix_facebook_enabled: false

  1012. 

  1013. matrix_mautrix_facebook_systemd_required_services_list_auto: |

  1014.   {{

  1015.     matrix_addons_homeserver_systemd_services_list

  1016.     +

  1017.     ([devture_postgres_identifier ~ '.service'] if (devture_postgres_enabled and matrix_mautrix_facebook_database_hostname == devture_postgres_connection_hostname) else [])

  1018.   }}

  1019. 

  1020. matrix_mautrix_facebook_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"

  1021. 

  1022. matrix_mautrix_facebook_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '9008') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  1023. 

  1024. matrix_mautrix_facebook_container_network: "{{ matrix_addons_container_network }}"

  1025. 

  1026. matrix_mautrix_facebook_container_additional_networks_auto: |-

  1027.   {{

  1028.     (

  1029.       ([] if matrix_addons_homeserver_container_network == '' else [matrix_addons_homeserver_container_network])

  1030.       +

  1031.       ([devture_postgres_container_network] if (devture_postgres_enabled and matrix_mautrix_facebook_database_hostname == devture_postgres_connection_hostname and matrix_mautrix_facebook_container_network != devture_postgres_container_network) else [])

  1032.       +

  1033.       ([matrix_playbook_reverse_proxyable_services_additional_network] if (matrix_playbook_reverse_proxyable_services_additional_network and matrix_mautrix_facebook_container_labels_traefik_enabled) else [])

  1034.     ) | unique

  1035.   }}

  1036. 

  1037. matrix_mautrix_facebook_container_labels_traefik_enabled: "{{ matrix_playbook_reverse_proxy_type in ['playbook-managed-traefik', 'other-traefik-container'] }}"

  1038. matrix_mautrix_facebook_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  1039. matrix_mautrix_facebook_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  1040. matrix_mautrix_facebook_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  1041. 

  1042. matrix_mautrix_facebook_container_labels_metrics_middleware_basic_auth_enabled: "{{ matrix_metrics_exposure_http_basic_auth_enabled }}"

  1043. matrix_mautrix_facebook_container_labels_metrics_middleware_basic_auth_users: "{{ matrix_metrics_exposure_http_basic_auth_users }}"

  1044. 

  1045. matrix_mautrix_facebook_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'fb.as.token', rounds=655555) | to_uuid }}"

  1046. 

  1047. matrix_mautrix_facebook_homeserver_address: "{{ matrix_addons_homeserver_client_api_url }}"

  1048. 

  1049. matrix_mautrix_facebook_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'fb.hs.token', rounds=655555) | to_uuid }}"

  1050. 

  1051. matrix_mautrix_facebook_appservice_public_enabled: true

  1052. matrix_mautrix_facebook_appservice_public_hostname: "{{ matrix_server_fqn_matrix }}"

  1053. matrix_mautrix_facebook_appservice_public_prefix: "/{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'facebook', rounds=655555) | to_uuid }}"

  1054. 

  1055. matrix_mautrix_facebook_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  1056. 

  1057. matrix_mautrix_facebook_bridge_presence: "{{ matrix_synapse_presence_enabled if matrix_synapse_enabled else true }}"

  1058. 

  1059. matrix_mautrix_facebook_metrics_enabled: "{{ prometheus_enabled }}"

  1060. 

  1061. matrix_mautrix_facebook_metrics_proxying_enabled: "{{ matrix_mautrix_facebook_metrics_enabled and matrix_metrics_exposure_enabled }}"

  1062. matrix_mautrix_facebook_metrics_proxying_hostname: "{{ matrix_metrics_exposure_hostname }}"

  1063. matrix_mautrix_facebook_metrics_proxying_path_prefix: "{{ matrix_metrics_exposure_path_prefix }}/mautrix-facebook"

  1064. 

  1065. # We'd like to force-set people with external Postgres to SQLite, so the bridge role can complain

  1066. # and point them to a migration path.

  1067. matrix_mautrix_facebook_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  1068. matrix_mautrix_facebook_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1069. matrix_mautrix_facebook_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mau.fb.db', rounds=655555) | to_uuid }}"

  1070. 

  1071. ######################################################################

  1072. #

  1073. # /matrix-bridge-mautrix-facebook

  1074. #

  1075. ######################################################################

  1076. 

  1077. 

  1078. ######################################################################

  1079. #

  1080. # matrix-bridge-mautrix-googlechat

  1081. #

  1082. ######################################################################

  1083. 

  1084. # We don't enable bridges by default.

  1085. matrix_mautrix_googlechat_enabled: false

  1086. 

  1087. matrix_mautrix_googlechat_systemd_required_services_list_auto: |

  1088.   {{

  1089.     matrix_addons_homeserver_systemd_services_list

  1090.     +

  1091.     ([devture_postgres_identifier ~ '.service'] if (devture_postgres_enabled and matrix_mautrix_googlechat_database_hostname == devture_postgres_connection_hostname) else [])

  1092.   }}

  1093. 

  1094. matrix_mautrix_googlechat_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"

  1095. 

  1096. matrix_mautrix_googlechat_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '9007') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  1097. 

  1098. matrix_mautrix_googlechat_container_network: "{{ matrix_addons_container_network }}"

  1099. 

  1100. matrix_mautrix_googlechat_container_additional_networks_auto: |-

  1101.   {{

  1102.     (

  1103.       ([] if matrix_addons_homeserver_container_network == '' else [matrix_addons_homeserver_container_network])

  1104.       +

  1105.       ([devture_postgres_container_network] if (devture_postgres_enabled and matrix_mautrix_googlechat_database_hostname == devture_postgres_connection_hostname and matrix_mautrix_googlechat_container_network != devture_postgres_container_network) else [])

  1106.       +

  1107.       ([matrix_playbook_reverse_proxyable_services_additional_network] if (matrix_playbook_reverse_proxyable_services_additional_network and matrix_mautrix_gmessages_container_labels_traefik_enabled) else [])

  1108.     ) | unique

  1109.   }}

  1110. 

  1111. matrix_mautrix_googlechat_container_labels_traefik_enabled: "{{ matrix_playbook_reverse_proxy_type in ['playbook-managed-traefik', 'other-traefik-container'] }}"

  1112. matrix_mautrix_googlechat_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  1113. matrix_mautrix_googlechat_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  1114. matrix_mautrix_googlechat_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  1115. 

  1116. matrix_mautrix_googlechat_container_labels_public_endpoint_hostname: "{{ matrix_server_fqn_matrix }}"

  1117. 

  1118. matrix_mautrix_googlechat_container_labels_metrics_middleware_basic_auth_enabled: "{{ matrix_metrics_exposure_http_basic_auth_enabled }}"

  1119. matrix_mautrix_googlechat_container_labels_metrics_middleware_basic_auth_users: "{{ matrix_metrics_exposure_http_basic_auth_users }}"

  1120. 

  1121. matrix_mautrix_googlechat_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'gc.as.token', rounds=655555) | to_uuid }}"

  1122. 

  1123. matrix_mautrix_googlechat_homeserver_address: "{{ matrix_addons_homeserver_client_api_url }}"

  1124. matrix_mautrix_googlechat_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'gc.hs.token', rounds=655555) | to_uuid }}"

  1125. 

  1126. matrix_mautrix_googlechat_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  1127. 

  1128. matrix_mautrix_googlechat_metrics_enabled: "{{ prometheus_enabled }}"

  1129. 

  1130. matrix_mautrix_googlechat_metrics_proxying_enabled: "{{ matrix_mautrix_googlechat_metrics_enabled and matrix_metrics_exposure_enabled }}"

  1131. matrix_mautrix_googlechat_metrics_proxying_hostname: "{{ matrix_metrics_exposure_hostname }}"

  1132. matrix_mautrix_googlechat_metrics_proxying_path_prefix: "{{ matrix_metrics_exposure_path_prefix }}/mautrix-googlechat"

  1133. 

  1134. # Postgres is the default, except if not using internal Postgres server

  1135. matrix_mautrix_googlechat_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  1136. matrix_mautrix_googlechat_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1137. matrix_mautrix_googlechat_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mau.gc.db', rounds=655555) | to_uuid }}"

  1138. 

  1139. ######################################################################

  1140. #

  1141. # /matrix-bridge-mautrix-googlechat

  1142. #

  1143. ######################################################################

  1144. 

  1145. 

  1146. ######################################################################

  1147. #

  1148. # matrix-bridge-mautrix-hangouts

  1149. #

  1150. ######################################################################

  1151. 

  1152. # We don't enable bridges by default.

  1153. matrix_mautrix_hangouts_enabled: false

  1154. 

  1155. matrix_mautrix_hangouts_systemd_required_services_list_auto: |

  1156.   {{

  1157.     matrix_addons_homeserver_systemd_services_list

  1158.     +

  1159.     ([devture_postgres_identifier ~ '.service'] if (devture_postgres_enabled and matrix_mautrix_hangouts_database_hostname == devture_postgres_connection_hostname) else [])

  1160.   }}

  1161. 

  1162. matrix_mautrix_hangouts_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"

  1163. 

  1164. matrix_mautrix_hangouts_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '9007') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  1165. 

  1166. matrix_mautrix_hangouts_container_network: "{{ matrix_addons_container_network }}"

  1167. 

  1168. matrix_mautrix_hangouts_container_additional_networks_auto: |-

  1169.   {{

  1170.     (

  1171.       ([] if matrix_addons_homeserver_container_network == '' else [matrix_addons_homeserver_container_network])

  1172.       +

  1173.       ([devture_postgres_container_network] if (devture_postgres_enabled and matrix_mautrix_hangouts_database_hostname == devture_postgres_connection_hostname and matrix_mautrix_hangouts_container_network != devture_postgres_container_network) else [])

  1174.       +

  1175.       ([matrix_playbook_reverse_proxyable_services_additional_network] if (matrix_playbook_reverse_proxyable_services_additional_network and matrix_mautrix_gmessages_container_labels_traefik_enabled) else [])

  1176.     ) | unique

  1177.   }}

  1178. 

  1179. matrix_mautrix_hangouts_container_labels_traefik_enabled: "{{ matrix_playbook_reverse_proxy_type in ['playbook-managed-traefik', 'other-traefik-container'] }}"

  1180. matrix_mautrix_hangouts_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  1181. matrix_mautrix_hangouts_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  1182. matrix_mautrix_hangouts_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  1183. 

  1184. matrix_mautrix_hangouts_container_labels_public_endpoint_hostname: "{{ matrix_server_fqn_matrix }}"

  1185. 

  1186. matrix_mautrix_hangouts_container_labels_metrics_middleware_basic_auth_enabled: "{{ matrix_metrics_exposure_http_basic_auth_enabled }}"

  1187. matrix_mautrix_hangouts_container_labels_metrics_middleware_basic_auth_users: "{{ matrix_metrics_exposure_http_basic_auth_users }}"

  1188. 

  1189. matrix_mautrix_hangouts_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'ho.as.token', rounds=655555) | to_uuid }}"

  1190. 

  1191. matrix_mautrix_hangouts_homeserver_address: "{{ matrix_addons_homeserver_client_api_url }}"

  1192. matrix_mautrix_hangouts_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'ho.hs.token', rounds=655555) | to_uuid }}"

  1193. 

  1194. matrix_mautrix_hangouts_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  1195. 

  1196. matrix_mautrix_hangouts_metrics_enabled: "{{ prometheus_enabled }}"

  1197. 

  1198. matrix_mautrix_hangouts_metrics_proxying_enabled: "{{ matrix_mautrix_hangouts_metrics_enabled and matrix_metrics_exposure_enabled }}"

  1199. matrix_mautrix_hangouts_metrics_proxying_hostname: "{{ matrix_metrics_exposure_hostname }}"

  1200. matrix_mautrix_hangouts_metrics_proxying_path_prefix: "{{ matrix_metrics_exposure_path_prefix }}/mautrix-hangouts"

  1201. 

  1202. # Postgres is the default, except if not using internal Postgres server

  1203. matrix_mautrix_hangouts_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  1204. matrix_mautrix_hangouts_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1205. matrix_mautrix_hangouts_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mau.hangouts.db', rounds=655555) | to_uuid }}"

  1206. 

  1207. ######################################################################

  1208. #

  1209. # /matrix-bridge-mautrix-hangouts

  1210. #

  1211. ######################################################################

  1212. 

  1213. 

  1214. ######################################################################

  1215. #

  1216. # matrix-bridge-mautrix-instagram

  1217. #

  1218. ######################################################################

  1219. 

  1220. # We don't enable bridges by default.

  1221. matrix_mautrix_instagram_enabled: false

  1222. 

  1223. matrix_mautrix_instagram_systemd_required_services_list_auto: |

  1224.   {{

  1225.     matrix_addons_homeserver_systemd_services_list

  1226.     +

  1227.     ([devture_postgres_identifier ~ '.service'] if (devture_postgres_enabled and matrix_mautrix_instagram_database_hostname == devture_postgres_connection_hostname) else [])

  1228.   }}

  1229. 

  1230. matrix_mautrix_instagram_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"

  1231. 

  1232. matrix_mautrix_instagram_container_network: "{{ matrix_addons_container_network }}"

  1233. 

  1234. matrix_mautrix_instagram_container_additional_networks_auto: |-

  1235.   {{

  1236.     (

  1237.       ([] if matrix_addons_homeserver_container_network == '' else [matrix_addons_homeserver_container_network])

  1238.       +

  1239.       ([devture_postgres_container_network] if (devture_postgres_enabled and matrix_mautrix_instagram_database_hostname == devture_postgres_connection_hostname and matrix_mautrix_instagram_container_network != devture_postgres_container_network) else [])

  1240.       +

  1241.       ([matrix_playbook_reverse_proxyable_services_additional_network] if matrix_playbook_reverse_proxyable_services_additional_network and matrix_mautrix_instagram_container_labels_traefik_enabled else [])

  1242.     ) | unique

  1243.   }}

  1244. 

  1245. matrix_mautrix_instagram_container_labels_traefik_enabled: "{{ matrix_playbook_reverse_proxy_type in ['playbook-managed-traefik', 'other-traefik-container'] }}"

  1246. matrix_mautrix_instagram_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  1247. matrix_mautrix_instagram_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  1248. matrix_mautrix_instagram_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  1249. 

  1250. matrix_mautrix_instagram_container_labels_metrics_middleware_basic_auth_enabled: "{{ matrix_metrics_exposure_http_basic_auth_enabled }}"

  1251. matrix_mautrix_instagram_container_labels_metrics_middleware_basic_auth_users: "{{ matrix_metrics_exposure_http_basic_auth_users }}"

  1252. 

  1253. matrix_mautrix_instagram_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'ig.as.token', rounds=655555) | to_uuid }}"

  1254. 

  1255. matrix_mautrix_instagram_homeserver_address: "{{ matrix_addons_homeserver_client_api_url }}"

  1256. matrix_mautrix_instagram_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'ig.hs.token', rounds=655555) | to_uuid }}"

  1257. 

  1258. matrix_mautrix_instagram_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  1259. 

  1260. matrix_mautrix_instagram_bridge_presence: "{{ matrix_synapse_presence_enabled if matrix_synapse_enabled else true }}"

  1261. 

  1262. matrix_mautrix_instagram_metrics_enabled: "{{ prometheus_enabled }}"

  1263. 

  1264. matrix_mautrix_instagram_metrics_proxying_enabled: "{{ matrix_mautrix_instagram_metrics_enabled and matrix_metrics_exposure_enabled }}"

  1265. matrix_mautrix_instagram_metrics_proxying_hostname: "{{ matrix_metrics_exposure_hostname }}"

  1266. matrix_mautrix_instagram_metrics_proxying_path_prefix: "{{ matrix_metrics_exposure_path_prefix }}/mautrix-instagram"

  1267. 

  1268. # We'd like to force-set people with external Postgres to SQLite, so the bridge role can complain

  1269. # and point them to a migration path.

  1270. matrix_mautrix_instagram_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  1271. matrix_mautrix_instagram_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1272. matrix_mautrix_instagram_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mau.ig.db', rounds=655555) | to_uuid }}"

  1273. 

  1274. ######################################################################

  1275. #

  1276. # /matrix-bridge-mautrix-instagram

  1277. #

  1278. ######################################################################

  1279. 

  1280. ######################################################################

  1281. #

  1282. # matrix-bridge-mautrix-signal

  1283. #

  1284. ######################################################################

  1285. 

  1286. # We don't enable bridges by default.

  1287. matrix_mautrix_signal_enabled: false

  1288. 

  1289. matrix_mautrix_signal_systemd_required_services_list_auto: |

  1290.   {{

  1291.     matrix_addons_homeserver_systemd_services_list

  1292.     +

  1293.     ([devture_postgres_identifier ~ '.service'] if (devture_postgres_enabled and matrix_mautrix_signal_database_hostname == devture_postgres_connection_hostname) else [])

  1294.   }}

  1295. 

  1296. matrix_mautrix_signal_container_image_self_build: "{{ matrix_architecture not in ['arm64', 'amd64'] }}"

  1297. 

  1298. matrix_mautrix_signal_container_network: "{{ matrix_addons_container_network }}"

  1299. 

  1300. matrix_mautrix_signal_container_additional_networks_auto: |-

  1301.   {{

  1302.     (

  1303.       ([] if matrix_addons_homeserver_container_network == '' else [matrix_addons_homeserver_container_network])

  1304.       +

  1305.       ([devture_postgres_container_network] if (devture_postgres_enabled and matrix_mautrix_signal_database_hostname == devture_postgres_connection_hostname and matrix_mautrix_signal_container_network != devture_postgres_container_network) else [])

  1306.       +

  1307.       ([matrix_playbook_reverse_proxyable_services_additional_network] if matrix_playbook_reverse_proxyable_services_additional_network and matrix_mautrix_signal_container_labels_traefik_enabled else [])

  1308.     ) | unique

  1309.   }}

  1310. 

  1311. matrix_mautrix_signal_container_labels_traefik_enabled: "{{ matrix_playbook_reverse_proxy_type in ['playbook-managed-traefik', 'other-traefik-container'] }}"

  1312. matrix_mautrix_signal_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  1313. matrix_mautrix_signal_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  1314. matrix_mautrix_signal_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  1315. 

  1316. matrix_mautrix_signal_container_labels_metrics_middleware_basic_auth_enabled: "{{ matrix_metrics_exposure_http_basic_auth_enabled }}"

  1317. matrix_mautrix_signal_container_labels_metrics_middleware_basic_auth_users: "{{ matrix_metrics_exposure_http_basic_auth_users }}"

  1318. 

  1319. matrix_mautrix_signal_homeserver_domain: '{{ matrix_domain }}'

  1320. matrix_mautrix_signal_homeserver_address: "{{ matrix_addons_homeserver_client_api_url }}"

  1321. matrix_mautrix_signal_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'si.hs.token', rounds=655555) | to_uuid }}"

  1322. 

  1323. matrix_mautrix_signal_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'si.as.token', rounds=655555) | to_uuid }}"

  1324. 

  1325. matrix_mautrix_signal_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  1326. 

  1327. matrix_mautrix_signal_metrics_enabled: "{{ prometheus_enabled }}"

  1328. 

  1329. matrix_mautrix_signal_metrics_proxying_enabled: "{{ matrix_mautrix_signal_metrics_enabled and matrix_metrics_exposure_enabled }}"

  1330. matrix_mautrix_signal_metrics_proxying_hostname: "{{ matrix_metrics_exposure_hostname }}"

  1331. matrix_mautrix_signal_metrics_proxying_path_prefix: "{{ matrix_metrics_exposure_path_prefix }}/mautrix-signal"

  1332. 

  1333. matrix_mautrix_signal_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  1334. matrix_mautrix_signal_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1335. matrix_mautrix_signal_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mau.signal.db', rounds=655555) | to_uuid }}"

  1336. 

  1337. ######################################################################

  1338. #

  1339. # /matrix-bridge-mautrix-signal

  1340. #

  1341. ######################################################################

  1342. 

  1343. ######################################################################

  1344. #

  1345. # matrix-bridge-mautrix-telegram

  1346. #

  1347. ######################################################################

  1348. 

  1349. # We don't enable bridges by default.

  1350. matrix_mautrix_telegram_enabled: false

  1351. 

  1352. matrix_mautrix_telegram_hostname: "{{ matrix_server_fqn_matrix }}"

  1353. matrix_mautrix_telegram_path_prefix: "/{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'telegram', rounds=655555) | to_uuid }}"

  1354. 

  1355. matrix_mautrix_telegram_systemd_required_services_list_auto: |

  1356.   {{

  1357.     matrix_addons_homeserver_systemd_services_list

  1358.     +

  1359.     ([devture_postgres_identifier ~ '.service'] if (devture_postgres_enabled and matrix_mautrix_telegram_database_hostname == devture_postgres_connection_hostname) else [])

  1360.   }}

  1361. 

  1362. # Images are multi-arch (amd64 and arm64, but not arm32).

  1363. matrix_mautrix_telegram_container_image_self_build: "{{ matrix_architecture not in ['arm64', 'amd64'] }}"

  1364. matrix_telegram_lottieconverter_container_image_self_build: "{{ matrix_architecture not in ['arm64', 'amd64'] }}"

  1365. matrix_telegram_lottieconverter_container_image_self_build_mask_arch: "{{ matrix_architecture != 'amd64' }}"

  1366. 

  1367. matrix_mautrix_telegram_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '9006') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  1368. 

  1369. matrix_mautrix_telegram_container_network: "{{ matrix_addons_container_network }}"

  1370. 

  1371. matrix_mautrix_telegram_container_additional_networks_auto: |-

  1372.   {{

  1373.     (

  1374.       ([] if matrix_addons_homeserver_container_network == '' else [matrix_addons_homeserver_container_network])

  1375.       +

  1376.       ([devture_postgres_container_network] if (devture_postgres_enabled and matrix_mautrix_telegram_database_hostname == devture_postgres_connection_hostname and matrix_mautrix_telegram_container_network != devture_postgres_container_network) else [])

  1377.       +

  1378.       ([matrix_playbook_reverse_proxyable_services_additional_network] if (matrix_playbook_reverse_proxyable_services_additional_network and matrix_mautrix_telegram_container_labels_traefik_enabled) else [])

  1379.     ) | unique

  1380.   }}

  1381. 

  1382. matrix_mautrix_telegram_container_labels_traefik_enabled: "{{ matrix_playbook_reverse_proxy_type in ['playbook-managed-traefik', 'other-traefik-container'] }}"

  1383. matrix_mautrix_telegram_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  1384. matrix_mautrix_telegram_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  1385. matrix_mautrix_telegram_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  1386. 

  1387. matrix_mautrix_telegram_container_labels_metrics_middleware_basic_auth_enabled: "{{ matrix_metrics_exposure_http_basic_auth_enabled }}"

  1388. matrix_mautrix_telegram_container_labels_metrics_middleware_basic_auth_users: "{{ matrix_metrics_exposure_http_basic_auth_users }}"

  1389. 

  1390. matrix_mautrix_telegram_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'telegr.as.token', rounds=655555) | to_uuid }}"

  1391. 

  1392. matrix_mautrix_telegram_homeserver_domain: "{{ matrix_domain }}"

  1393. matrix_mautrix_telegram_homeserver_address: "{{ matrix_addons_homeserver_client_api_url }}"

  1394. matrix_mautrix_telegram_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'telegr.hs.token', rounds=655555) | to_uuid }}"

  1395. 

  1396. matrix_mautrix_telegram_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  1397. 

  1398. matrix_mautrix_telegram_metrics_enabled: "{{ prometheus_enabled }}"

  1399. 

  1400. matrix_mautrix_telegram_metrics_proxying_enabled: "{{ matrix_mautrix_telegram_metrics_enabled and matrix_metrics_exposure_enabled }}"

  1401. matrix_mautrix_telegram_metrics_proxying_hostname: "{{ matrix_metrics_exposure_hostname }}"

  1402. matrix_mautrix_telegram_metrics_proxying_path_prefix: "{{ matrix_metrics_exposure_path_prefix }}/mautrix-telegram"

  1403. 

  1404. # Postgres is the default, except if not using internal Postgres server

  1405. matrix_mautrix_telegram_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  1406. matrix_mautrix_telegram_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1407. matrix_mautrix_telegram_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mau.telegram.db', rounds=655555) | to_uuid }}"

  1408. 

  1409. ######################################################################

  1410. #

  1411. # /matrix-bridge-mautrix-telegram

  1412. #

  1413. ######################################################################

  1414. 

  1415. ######################################################################

  1416. #

  1417. # matrix-bridge-mautrix-twitter

  1418. #

  1419. ######################################################################

  1420. 

  1421. # We don't enable bridges by default.

  1422. matrix_mautrix_twitter_enabled: false

  1423. 

  1424. matrix_mautrix_twitter_systemd_required_services_list_auto: |

  1425.   {{

  1426.     matrix_addons_homeserver_systemd_services_list

  1427.     +

  1428.     ([devture_postgres_identifier ~ '.service'] if (devture_postgres_enabled and matrix_mautrix_twitter_database_hostname == devture_postgres_connection_hostname) else [])

  1429.   }}

  1430. 

  1431. matrix_mautrix_twitter_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"

  1432. 

  1433. matrix_mautrix_twitter_container_network: "{{ matrix_addons_container_network }}"

  1434. 

  1435. matrix_mautrix_twitter_container_additional_networks_auto: |-

  1436.   {{

  1437.     (

  1438.       ([] if matrix_addons_homeserver_container_network == '' else [matrix_addons_homeserver_container_network])

  1439.       +

  1440.       ([devture_postgres_container_network] if (devture_postgres_enabled and matrix_mautrix_twitter_database_hostname == devture_postgres_connection_hostname and matrix_mautrix_twitter_container_network != devture_postgres_container_network) else [])

  1441.       +

  1442.       ([matrix_playbook_reverse_proxyable_services_additional_network] if matrix_playbook_reverse_proxyable_services_additional_network and matrix_mautrix_twitter_container_labels_traefik_enabled else [])

  1443.     ) | unique

  1444.   }}

  1445. 

  1446. matrix_mautrix_twitter_container_labels_traefik_enabled: "{{ matrix_playbook_reverse_proxy_type in ['playbook-managed-traefik', 'other-traefik-container'] }}"

  1447. matrix_mautrix_twitter_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  1448. matrix_mautrix_twitter_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  1449. matrix_mautrix_twitter_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  1450. 

  1451. matrix_mautrix_twitter_container_labels_metrics_middleware_basic_auth_enabled: "{{ matrix_metrics_exposure_http_basic_auth_enabled }}"

  1452. matrix_mautrix_twitter_container_labels_metrics_middleware_basic_auth_users: "{{ matrix_metrics_exposure_http_basic_auth_users }}"

  1453. 

  1454. matrix_mautrix_twitter_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'twt.as.token', rounds=655555) | to_uuid }}"

  1455. 

  1456. matrix_mautrix_twitter_homeserver_address: "{{ matrix_addons_homeserver_client_api_url }}"

  1457. matrix_mautrix_twitter_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'twt.hs.token', rounds=655555) | to_uuid }}"

  1458. 

  1459. matrix_mautrix_twitter_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  1460. 

  1461. matrix_mautrix_twitter_metrics_enabled: "{{ prometheus_enabled }}"

  1462. 

  1463. matrix_mautrix_twitter_metrics_proxying_enabled: "{{ matrix_mautrix_twitter_metrics_enabled and matrix_metrics_exposure_enabled }}"

  1464. matrix_mautrix_twitter_metrics_proxying_hostname: "{{ matrix_metrics_exposure_hostname }}"

  1465. matrix_mautrix_twitter_metrics_proxying_path_prefix: "{{ matrix_metrics_exposure_path_prefix }}/mautrix-twitter"

  1466. 

  1467. matrix_mautrix_twitter_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1468. matrix_mautrix_twitter_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mau.twt.db', rounds=655555) | to_uuid if devture_postgres_enabled else '' }}"

  1469. 

  1470. ######################################################################

  1471. #

  1472. # /matrix-bridge-mautrix-twitter

  1473. #

  1474. ######################################################################

  1475. 

  1476. ######################################################################

  1477. #

  1478. # matrix-bridge-mautrix-gmessages

  1479. #

  1480. ######################################################################

  1481. 

  1482. # We don't enable bridges by default.

  1483. matrix_mautrix_gmessages_enabled: false

  1484. 

  1485. matrix_mautrix_gmessages_systemd_required_services_list_auto: |

  1486.   {{

  1487.     matrix_addons_homeserver_systemd_services_list

  1488.     +

  1489.     ([devture_postgres_identifier ~ '.service'] if (devture_postgres_enabled and matrix_mautrix_facebook_database_hostname == devture_postgres_connection_hostname) else [])

  1490.   }}

  1491. 

  1492. matrix_mautrix_gmessages_container_image_self_build: "{{ matrix_architecture not in ['arm64', 'amd64'] }}"

  1493. 

  1494. matrix_mautrix_gmessages_container_network: "{{ matrix_addons_container_network }}"

  1495. 

  1496. matrix_mautrix_gmessages_container_additional_networks_auto: |-

  1497.   {{

  1498.     (

  1499.       ([] if matrix_addons_homeserver_container_network == '' else [matrix_addons_homeserver_container_network])

  1500.       +

  1501.       ([devture_postgres_container_network] if (devture_postgres_enabled and matrix_mautrix_gmessages_database_hostname == devture_postgres_connection_hostname and matrix_mautrix_gmessages_container_network != devture_postgres_container_network) else [])

  1502.       +

  1503.       ([matrix_playbook_reverse_proxyable_services_additional_network] if (matrix_playbook_reverse_proxyable_services_additional_network and matrix_mautrix_gmessages_container_labels_traefik_enabled) else [])

  1504.     ) | unique

  1505.   }}

  1506. 

  1507. matrix_mautrix_gmessages_container_labels_traefik_enabled: "{{ matrix_playbook_reverse_proxy_type in ['playbook-managed-traefik', 'other-traefik-container'] }}"

  1508. matrix_mautrix_gmessages_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  1509. matrix_mautrix_gmessages_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  1510. matrix_mautrix_gmessages_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  1511. 

  1512. matrix_mautrix_gmessages_container_labels_metrics_middleware_basic_auth_enabled: "{{ matrix_metrics_exposure_http_basic_auth_enabled }}"

  1513. matrix_mautrix_gmessages_container_labels_metrics_middleware_basic_auth_users: "{{ matrix_metrics_exposure_http_basic_auth_users }}"

  1514. 

  1515. matrix_mautrix_gmessages_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'gmessa.as.token', rounds=655555) | to_uuid }}"

  1516. 

  1517. matrix_mautrix_gmessages_homeserver_address: "{{ matrix_addons_homeserver_client_api_url }}"

  1518. matrix_mautrix_gmessages_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'gmessa.hs.token', rounds=655555) | to_uuid }}"

  1519. 

  1520. matrix_mautrix_gmessages_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  1521. 

  1522. matrix_mautrix_gmessages_metrics_enabled: "{{ prometheus_enabled }}"

  1523. 

  1524. matrix_mautrix_gmessages_metrics_proxying_enabled: "{{ matrix_mautrix_gmessages_metrics_enabled and matrix_metrics_exposure_enabled }}"

  1525. matrix_mautrix_gmessages_metrics_proxying_hostname: "{{ matrix_metrics_exposure_hostname }}"

  1526. matrix_mautrix_gmessages_metrics_proxying_path_prefix: "{{ matrix_metrics_exposure_path_prefix }}/mautrix-gmessages"

  1527. 

  1528. # Postgres is the default, except if not using internal Postgres server

  1529. matrix_mautrix_gmessages_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  1530. matrix_mautrix_gmessages_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1531. matrix_mautrix_gmessages_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'maugmessages.db', rounds=655555) | to_uuid }}"

  1532. 

  1533. ######################################################################

  1534. #

  1535. # /matrix-bridge-mautrix-gmessages

  1536. #

  1537. ######################################################################

  1538. 

  1539. ######################################################################

  1540. #

  1541. # matrix-bridge-mautrix-wsproxy

  1542. #

  1543. ######################################################################

  1544. 

  1545. # We don't enable bridges by default.

  1546. matrix_mautrix_wsproxy_enabled: false

  1547. 

  1548. matrix_mautrix_wsproxy_systemd_required_services_list_default: |

  1549.   {{

  1550.     matrix_addons_homeserver_systemd_services_list

  1551.     +

  1552.     ([devture_postgres_identifier ~ '.service'] if (devture_postgres_enabled and matrix_mautrix_wsproxy_syncproxy_database_hostname == devture_postgres_connection_hostname) else [])

  1553.   }}

  1554. 

  1555. matrix_mautrix_wsproxy_homeserver_domain: "{{ matrix_domain }}"

  1556. matrix_mautrix_wsproxy_homeserver_address: "{{ matrix_addons_homeserver_client_api_url }}"

  1557. 

  1558. matrix_mautrix_wsproxy_hostname: "wsproxy.{{ matrix_mautrix_wsproxy_homeserver_domain }}"

  1559. 

  1560. matrix_mautrix_wsproxy_syncproxy_homeserver_url: "{{ matrix_addons_homeserver_client_api_url }}"

  1561. 

  1562. matrix_mautrix_wsproxy_container_network: "{{ matrix_addons_container_network }}"

  1563. 

  1564. matrix_mautrix_wsproxy_container_additional_networks: |

  1565.   {{

  1566.     (

  1567.       ([] if matrix_addons_homeserver_container_network == '' else [matrix_addons_homeserver_container_network])

  1568.       +

  1569.       ([matrix_playbook_reverse_proxyable_services_additional_network] if matrix_playbook_reverse_proxyable_services_additional_network else [])

  1570.       +

  1571.       ([devture_postgres_container_network] if (devture_postgres_enabled and matrix_mautrix_wsproxy_syncproxy_database_hostname == devture_postgres_connection_hostname and devture_postgres_container_network != matrix_mautrix_wsproxy_container_network) else [])

  1572.     ) | unique

  1573.   }}

  1574. 

  1575. matrix_mautrix_wsproxy_container_labels_traefik_enabled: "{{ matrix_playbook_reverse_proxy_type in ['playbook-managed-traefik', 'other-traefik-container'] }}"

  1576. matrix_mautrix_wsproxy_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  1577. matrix_mautrix_wsproxy_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  1578. matrix_mautrix_wsproxy_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  1579. 

  1580. matrix_mautrix_wsproxy_syncproxy_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1581. matrix_mautrix_wsproxy_syncproxy_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'wsproxy.db', rounds=655555) | to_uuid }}"

  1582. 

  1583. ######################################################################

  1584. #

  1585. # /matrix-bridge-mautrix-wsproxy

  1586. #

  1587. ######################################################################

  1588. 

  1589. ######################################################################

  1590. #

  1591. # matrix-bridge-mautrix-whatsapp

  1592. #

  1593. ######################################################################

  1594. 

  1595. # We don't enable bridges by default.

  1596. matrix_mautrix_whatsapp_enabled: false

  1597. 

  1598. matrix_mautrix_whatsapp_container_image_self_build: "{{ matrix_architecture not in ['arm64', 'amd64'] }}"

  1599. 

  1600. matrix_mautrix_whatsapp_container_network: "{{ matrix_addons_container_network }}"

  1601. 

  1602. matrix_mautrix_whatsapp_container_additional_networks_auto: |-

  1603.   {{

  1604.     (

  1605.       ([] if matrix_addons_homeserver_container_network == '' else [matrix_addons_homeserver_container_network])

  1606.       +

  1607.       ([devture_postgres_container_network] if devture_postgres_enabled and matrix_mautrix_whatsapp_database_hostname == devture_postgres_connection_hostname else [])

  1608.       +

  1609.       ([matrix_playbook_reverse_proxyable_services_additional_network] if matrix_playbook_reverse_proxyable_services_additional_network and matrix_mautrix_whatsapp_container_labels_traefik_enabled else [])

  1610.     ) | unique

  1611.   }}

  1612. 

  1613. matrix_mautrix_whatsapp_container_labels_traefik_enabled: "{{ matrix_playbook_reverse_proxy_type in ['playbook-managed-traefik', 'other-traefik-container'] }}"

  1614. matrix_mautrix_whatsapp_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  1615. matrix_mautrix_whatsapp_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  1616. matrix_mautrix_whatsapp_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  1617. 

  1618. matrix_mautrix_whatsapp_container_labels_metrics_middleware_basic_auth_enabled: "{{ matrix_metrics_exposure_http_basic_auth_enabled }}"

  1619. matrix_mautrix_whatsapp_container_labels_metrics_middleware_basic_auth_users: "{{ matrix_metrics_exposure_http_basic_auth_users }}"

  1620. 

  1621. matrix_mautrix_whatsapp_systemd_required_services_list_auto: |

  1622.   {{

  1623.     matrix_addons_homeserver_systemd_services_list

  1624.     +

  1625.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled and matrix_mautrix_whatsapp_database_hostname == devture_postgres_connection_hostname else [])

  1626.   }}

  1627. 

  1628. matrix_mautrix_whatsapp_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'whats.as.token', rounds=655555) | to_uuid }}"

  1629. 

  1630. matrix_mautrix_whatsapp_homeserver_address: "{{ matrix_addons_homeserver_client_api_url }}"

  1631. matrix_mautrix_whatsapp_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'whats.hs.token', rounds=655555) | to_uuid }}"

  1632. 

  1633. matrix_mautrix_whatsapp_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  1634. 

  1635. matrix_mautrix_whatsapp_metrics_enabled: "{{ prometheus_enabled }}"

  1636. 

  1637. matrix_mautrix_whatsapp_metrics_proxying_enabled: "{{ matrix_mautrix_whatsapp_metrics_enabled and matrix_metrics_exposure_enabled }}"

  1638. matrix_mautrix_whatsapp_metrics_proxying_hostname: "{{ matrix_metrics_exposure_hostname }}"

  1639. matrix_mautrix_whatsapp_metrics_proxying_path_prefix: "{{ matrix_metrics_exposure_path_prefix }}/mautrix-whatsapp"

  1640. 

  1641. # Postgres is the default, except if not using internal Postgres server

  1642. matrix_mautrix_whatsapp_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  1643. matrix_mautrix_whatsapp_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1644. matrix_mautrix_whatsapp_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mauwhatsapp.db', rounds=655555) | to_uuid }}"

  1645. 

  1646. ######################################################################

  1647. #

  1648. # /matrix-bridge-mautrix-whatsapp

  1649. #

  1650. ######################################################################

  1651. 

  1652. ######################################################################

  1653. #

  1654. # matrix-sms-bridge

  1655. #

  1656. ######################################################################

  1657. 

  1658. # We don't enable bridges by default.

  1659. matrix_sms_bridge_enabled: false

  1660. 

  1661. matrix_sms_bridge_systemd_required_services_list_auto: |

  1662.   {{

  1663.     matrix_addons_homeserver_systemd_services_list

  1664.     +

  1665.     ([devture_postgres_identifier ~ '.service'] if (devture_postgres_enabled and matrix_mautrix_facebook_database_hostname == devture_postgres_connection_hostname) else [])

  1666.   }}

  1667. 

  1668. matrix_sms_bridge_container_network: "{{ matrix_addons_container_network }}"

  1669. 

  1670. matrix_sms_bridge_container_additional_networks_auto: |-

  1671.   {{

  1672.     ([] if matrix_addons_homeserver_container_network == '' else [matrix_addons_homeserver_container_network])

  1673.   }}

  1674. 

  1675. matrix_sms_bridge_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'sms.as.token', rounds=655555) | to_uuid }}"

  1676. 

  1677. matrix_sms_bridge_homeserver_hostname: "{{ (matrix_homeserver_container_client_api_endpoint | split(':'))[0] }}"

  1678. matrix_sms_bridge_homeserver_port: "{{ (matrix_homeserver_container_client_api_endpoint | split(':'))[1] }}"

  1679. matrix_sms_bridge_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'sms.hs.token', rounds=655555) | to_uuid }}"

  1680. 

  1681. ######################################################################

  1682. #

  1683. # /matrix-sms-bridge

  1684. #

  1685. ######################################################################

  1686. 

  1687. ######################################################################

  1688. #

  1689. # matrix-bridge-heisenbridge

  1690. #

  1691. ######################################################################

  1692. 

  1693. # We don't enable bridges by default.

  1694. matrix_heisenbridge_enabled: false

  1695. 

  1696. matrix_heisenbridge_systemd_required_services_list_auto: |

  1697.   {{

  1698.     matrix_addons_homeserver_systemd_services_list

  1699.   }}

  1700. 

  1701. matrix_heisenbridge_container_network: "{{ matrix_addons_container_network }}"

  1702. 

  1703. matrix_heisenbridge_container_additional_networks_auto: |-

  1704.   {{

  1705.     ([] if matrix_addons_homeserver_container_network == '' else [matrix_addons_homeserver_container_network])

  1706.   }}

  1707. 

  1708. matrix_heisenbridge_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'heisen.as.tok', rounds=655555) | to_uuid }}"

  1709. 

  1710. matrix_heisenbridge_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'heisen.hs.tok', rounds=655555) | to_uuid }}"

  1711. 

  1712. matrix_heisenbridge_homeserver_url: "{{ matrix_addons_homeserver_client_api_url }}"

  1713. 

  1714. ######################################################################

  1715. #

  1716. # /matrix-bridge-heisenbridge

  1717. #

  1718. ######################################################################

  1719. 

  1720. ######################################################################

  1721. #

  1722. # matrix-bridge-hookshot

  1723. #

  1724. ######################################################################

  1725. 

  1726. # We don't enable bridges by default.

  1727. matrix_hookshot_enabled: false

  1728. 

  1729. matrix_hookshot_container_image_self_build: "{{ matrix_architecture not in ['arm64', 'amd64'] }}"

  1730. 

  1731. matrix_hookshot_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'hookshot.as.tok', rounds=655555) | to_uuid }}"

  1732. 

  1733. matrix_hookshot_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'hookshot.hs.tok', rounds=655555) | to_uuid }}"

  1734. 

  1735. matrix_hookshot_homeserver_address: "{{ matrix_addons_homeserver_client_api_url }}"

  1736. 

  1737. matrix_hookshot_systemd_wanted_services_list: |

  1738.   {{

  1739.     matrix_addons_homeserver_systemd_services_list

  1740.     +

  1741.     ([(redis_identifier + '.service')] if redis_enabled and matrix_hookshot_queue_host == redis_identifier else [])

  1742.   }}

  1743. 

  1744. # Hookshot's experimental encryption feature (and possibly others) may benefit from Redis, if available.

  1745. # We only connect to Redis if encryption is enabled (not for everyone who has Redis enabled),

  1746. # because connectivity is still potentially troublesome and is to be investigated.

  1747. matrix_hookshot_queue_host: "{{ redis_identifier if redis_enabled and matrix_hookshot_experimental_encryption_enabled else '' }}"

  1748. 

  1749. matrix_hookshot_container_network: "{{ matrix_addons_container_network }}"

  1750. 

  1751. matrix_hookshot_container_additional_networks_auto: |

  1752.   {{

  1753.     (

  1754.       ([] if matrix_addons_homeserver_container_network == '' else [matrix_addons_homeserver_container_network])

  1755.       +

  1756.       ([redis_container_network] if redis_enabled and matrix_hookshot_queue_host == redis_identifier else [])

  1757.       +

  1758.       ([matrix_playbook_reverse_proxyable_services_additional_network] if matrix_playbook_reverse_proxyable_services_additional_network and matrix_hookshot_container_labels_traefik_enabled else [])

  1759.     ) | unique

  1760.   }}

  1761. 

  1762. matrix_hookshot_container_http_host_bind_ports_defaultmapping:

  1763.   - "{{ matrix_playbook_service_host_bind_interface_prefix }}{{ matrix_hookshot_appservice_port }}:{{ matrix_hookshot_appservice_port }}"

  1764.   - "{{ matrix_playbook_service_host_bind_interface_prefix }}{{ matrix_hookshot_metrics_port }}:{{ matrix_hookshot_metrics_port }}"

  1765.   - "{{ matrix_playbook_service_host_bind_interface_prefix }}{{ matrix_hookshot_webhook_port }}:{{ matrix_hookshot_webhook_port }}"

  1766.   - "{{ matrix_playbook_service_host_bind_interface_prefix }}{{ matrix_hookshot_provisioning_port }}:{{ matrix_hookshot_provisioning_port }}"

  1767. 

  1768. matrix_hookshot_container_http_host_bind_ports: "{{ matrix_hookshot_container_http_host_bind_ports_defaultmapping if matrix_playbook_service_host_bind_interface_prefix else [] }}"

  1769. 

  1770. matrix_hookshot_container_labels_traefik_enabled: "{{ matrix_playbook_reverse_proxy_type in ['playbook-managed-traefik', 'other-traefik-container'] }}"

  1771. matrix_hookshot_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  1772. matrix_hookshot_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  1773. matrix_hookshot_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  1774. 

  1775. matrix_hookshot_provisioning_enabled: "{{ matrix_hookshot_provisioning_secret and matrix_dimension_enabled }}"

  1776. 

  1777. # We only enable metrics (locally, in the container network) for the bridge if Prometheus is enabled.

  1778. matrix_hookshot_metrics_enabled: "{{ prometheus_enabled }}"

  1779. 

  1780. matrix_hookshot_metrics_proxying_enabled: "{{ matrix_hookshot_metrics_enabled and matrix_metrics_exposure_enabled }}"

  1781. matrix_hookshot_metrics_proxying_hostname: "{{ matrix_metrics_exposure_hostname }}"

  1782. matrix_hookshot_metrics_proxying_path_prefix: "{{ matrix_metrics_exposure_path_prefix }}/hookshot"

  1783. matrix_hookshot_container_labels_metrics_middleware_basic_auth_enabled: "{{ matrix_metrics_exposure_http_basic_auth_enabled }}"

  1784. matrix_hookshot_container_labels_metrics_middleware_basic_auth_users: "{{ matrix_metrics_exposure_http_basic_auth_users }}"

  1785. 

  1786. matrix_hookshot_public_hostname: "{{ matrix_server_fqn_matrix }}"

  1787. matrix_hookshot_urlprefix: "{{ 'https' if matrix_playbook_ssl_enabled else 'http' }}://{{ matrix_server_fqn_matrix }}"

  1788. 

  1789. ######################################################################

  1790. #

  1791. # /matrix-bridge-hookshot

  1792. #

  1793. ######################################################################

  1794. 

  1795. 

  1796. ######################################################################

  1797. #

  1798. # matrix-bridge-mx-puppet-slack

  1799. #

  1800. ######################################################################

  1801. 

  1802. # We don't enable bridges by default.

  1803. matrix_mx_puppet_slack_enabled: false

  1804. 

  1805. matrix_mx_puppet_slack_hostname: "{{ matrix_server_fqn_matrix }}"

  1806. 

  1807. matrix_mx_puppet_slack_systemd_required_services_list_auto: |

  1808.   {{

  1809.     matrix_addons_homeserver_systemd_services_list

  1810.     +

  1811.     ([devture_postgres_identifier ~ '.service'] if (devture_postgres_enabled and matrix_mx_puppet_slack_database_hostname == devture_postgres_connection_hostname) else [])

  1812.   }}

  1813. 

  1814. matrix_mx_puppet_slack_container_image_self_build: "{{ matrix_architecture != 'amd64' }}"

  1815. 

  1816. matrix_mx_puppet_slack_container_network: "{{ matrix_addons_container_network }}"

  1817. 

  1818. matrix_mx_puppet_slack_container_additional_networks_auto: |-

  1819.   {{

  1820.     (

  1821.       ([] if matrix_addons_homeserver_container_network == '' else [matrix_addons_homeserver_container_network])

  1822.       +

  1823.       ([devture_postgres_container_network] if (devture_postgres_enabled and matrix_mx_puppet_slack_database_hostname == devture_postgres_connection_hostname and matrix_mx_puppet_slack_container_network != devture_postgres_container_network) else [])

  1824.       +

  1825.       ([matrix_playbook_reverse_proxyable_services_additional_network] if (matrix_playbook_reverse_proxyable_services_additional_network and matrix_mx_puppet_slack_container_labels_traefik_enabled) else [])

  1826.     ) | unique

  1827.   }}

  1828. 

  1829. matrix_mx_puppet_slack_container_labels_traefik_enabled: "{{ matrix_playbook_reverse_proxy_type in ['playbook-managed-traefik', 'other-traefik-container'] }}"

  1830. matrix_mx_puppet_slack_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  1831. matrix_mx_puppet_slack_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  1832. matrix_mx_puppet_slack_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  1833. 

  1834. matrix_mx_puppet_slack_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxslk.as.tok', rounds=655555) | to_uuid }}"

  1835. 

  1836. matrix_mx_puppet_slack_homeserver_address: "{{ matrix_addons_homeserver_client_api_url }}"

  1837. matrix_mx_puppet_slack_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxslk.hs.tok', rounds=655555) | to_uuid }}"

  1838. 

  1839. matrix_mx_puppet_slack_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  1840. 

  1841. matrix_mx_puppet_slack_presence_enabled: "{{ matrix_homeserver_implementation != 'synapse' or matrix_synapse_presence_enabled }}"

  1842. 

  1843. # Postgres is the default, except if not using internal Postgres server

  1844. matrix_mx_puppet_slack_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  1845. matrix_mx_puppet_slack_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1846. matrix_mx_puppet_slack_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxpup.slack.db', rounds=655555) | to_uuid }}"

  1847. 

  1848. ######################################################################

  1849. #

  1850. # /matrix-bridge-mx-puppet-slack

  1851. #

  1852. ######################################################################

  1853. 

  1854. ######################################################################

  1855. #

  1856. # matrix-bridge-mx-puppet-twitter

  1857. #

  1858. ######################################################################

  1859. 

  1860. # We don't enable bridges by default.

  1861. matrix_mx_puppet_twitter_enabled: false

  1862. 

  1863. matrix_mx_puppet_twitter_hostname: "{{ matrix_server_fqn_matrix }}"

  1864. 

  1865. matrix_mx_puppet_twitter_systemd_required_services_list_auto: |

  1866.   {{

  1867.     matrix_addons_homeserver_systemd_services_list

  1868.     +

  1869.     ([devture_postgres_identifier ~ '.service'] if (devture_postgres_enabled and matrix_mx_puppet_twitter_database_hostname == devture_postgres_connection_hostname) else [])

  1870.   }}

  1871. 

  1872. matrix_mx_puppet_twitter_container_image_self_build: "{{ matrix_architecture != 'amd64' }}"

  1873. 

  1874. matrix_mx_puppet_twitter_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '' ~ matrix_mx_puppet_twitter_appservice_port) if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  1875. 

  1876. matrix_mx_puppet_twitter_container_network: "{{ matrix_addons_container_network }}"

  1877. 

  1878. matrix_mx_puppet_twitter_container_additional_networks_auto: |-

  1879.   {{

  1880.     (

  1881.       ([] if matrix_addons_homeserver_container_network == '' else [matrix_addons_homeserver_container_network])

  1882.       +

  1883.       ([devture_postgres_container_network] if (devture_postgres_enabled and matrix_mx_puppet_twitter_database_hostname == devture_postgres_connection_hostname and matrix_mx_puppet_twitter_container_network != devture_postgres_container_network) else [])

  1884.       +

  1885.       ([matrix_playbook_reverse_proxyable_services_additional_network] if (matrix_playbook_reverse_proxyable_services_additional_network and matrix_mx_puppet_twitter_container_labels_traefik_enabled) else [])

  1886.     ) | unique

  1887.   }}

  1888. 

  1889. matrix_mx_puppet_twitter_container_labels_traefik_enabled: "{{ matrix_playbook_reverse_proxy_type in ['playbook-managed-traefik', 'other-traefik-container'] }}"

  1890. matrix_mx_puppet_twitter_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  1891. matrix_mx_puppet_twitter_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  1892. matrix_mx_puppet_twitter_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  1893. 

  1894. matrix_mx_puppet_twitter_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxtwt.as.tok', rounds=655555) | to_uuid }}"

  1895. 

  1896. matrix_mx_puppet_twitter_homeserver_address: "{{ matrix_addons_homeserver_client_api_url }}"

  1897. matrix_mx_puppet_twitter_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxtwt.hs.tok', rounds=655555) | to_uuid }}"

  1898. 

  1899. matrix_mx_puppet_twitter_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  1900. 

  1901. matrix_mx_puppet_twitter_presence_enabled: "{{ matrix_homeserver_implementation != 'synapse' or matrix_synapse_presence_enabled }}"

  1902. 

  1903. # Postgres is the default, except if not using internal Postgres server

  1904. matrix_mx_puppet_twitter_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  1905. matrix_mx_puppet_twitter_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1906. matrix_mx_puppet_twitter_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxpup.twitter.db', rounds=655555) | to_uuid }}"

  1907. 

  1908. ######################################################################

  1909. #

  1910. # /matrix-bridge-mx-puppet-twitter

  1911. #

  1912. ######################################################################

  1913. 

  1914. 

  1915. ######################################################################

  1916. #

  1917. # matrix-bridge-mx-puppet-instagram

  1918. #

  1919. ######################################################################

  1920. 

  1921. # We don't enable bridges by default.

  1922. matrix_mx_puppet_instagram_enabled: false

  1923. 

  1924. matrix_mx_puppet_instagram_systemd_required_services_list_auto: |

  1925.   {{

  1926.     matrix_addons_homeserver_systemd_services_list

  1927.     +

  1928.     ([devture_postgres_identifier ~ '.service'] if (devture_postgres_enabled and matrix_mx_puppet_instagram_database_hostname == devture_postgres_connection_hostname) else [])

  1929.   }}

  1930. 

  1931. matrix_mx_puppet_instagram_container_image_self_build: "{{ matrix_architecture != 'amd64' }}"

  1932. 

  1933. matrix_mx_puppet_instagram_container_network: "{{ matrix_addons_container_network }}"

  1934. 

  1935. matrix_mx_puppet_instagram_container_additional_networks_auto: |-

  1936.   {{

  1937.     (

  1938.       ([] if matrix_addons_homeserver_container_network == '' else [matrix_addons_homeserver_container_network])

  1939.       +

  1940.       ([devture_postgres_container_network] if (devture_postgres_enabled and matrix_mx_puppet_instagram_database_hostname == devture_postgres_connection_hostname and matrix_mx_puppet_instagram_container_network != devture_postgres_container_network) else [])

  1941.     ) | unique

  1942.   }}

  1943. 

  1944. matrix_mx_puppet_instagram_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxig.as.tok', rounds=655555) | to_uuid }}"

  1945. 

  1946. matrix_mx_puppet_instagram_homeserver_address: "{{ matrix_addons_homeserver_client_api_url }}"

  1947. matrix_mx_puppet_instagram_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxig.hs.tok', rounds=655555) | to_uuid }}"

  1948. 

  1949. matrix_mx_puppet_instagram_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  1950. 

  1951. matrix_mx_puppet_instagram_presence_enabled: "{{ matrix_homeserver_implementation != 'synapse' or matrix_synapse_presence_enabled }}"

  1952. 

  1953. # Postgres is the default, except if not using internal Postgres server

  1954. matrix_mx_puppet_instagram_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  1955. matrix_mx_puppet_instagram_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  1956. matrix_mx_puppet_instagram_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxpup.ig.db', rounds=655555) | to_uuid }}"

  1957. 

  1958. ######################################################################

  1959. #

  1960. # /matrix-bridge-mx-puppet-instagram

  1961. #

  1962. ######################################################################

  1963. 

  1964. ######################################################################

  1965. #

  1966. # matrix-bridge-mx-puppet-discord

  1967. #

  1968. ######################################################################

  1969. 

  1970. # We don't enable bridges by default.

  1971. matrix_mx_puppet_discord_enabled: false

  1972. 

  1973. matrix_mx_puppet_discord_systemd_required_services_list_auto: |

  1974.   {{

  1975.     matrix_addons_homeserver_systemd_services_list

  1976.     +

  1977.     ([devture_postgres_identifier ~ '.service'] if (devture_postgres_enabled and matrix_mx_puppet_discord_database_hostname == devture_postgres_connection_hostname) else [])

  1978.   }}

  1979. 

  1980. matrix_mx_puppet_discord_container_image_self_build: "{{ matrix_architecture != 'amd64' }}"

  1981. 

  1982. matrix_mx_puppet_discord_container_network: "{{ matrix_addons_container_network }}"

  1983. 

  1984. matrix_mx_puppet_discord_container_additional_networks_auto: |-

  1985.   {{

  1986.     (

  1987.       ([] if matrix_addons_homeserver_container_network == '' else [matrix_addons_homeserver_container_network])

  1988.       +

  1989.       ([devture_postgres_container_network] if (devture_postgres_enabled and matrix_mx_puppet_discord_database_hostname == devture_postgres_connection_hostname and matrix_mx_puppet_discord_container_network != devture_postgres_container_network) else [])

  1990.     ) | unique

  1991.   }}

  1992. 

  1993. matrix_mx_puppet_discord_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxdsc.as.tok', rounds=655555) | to_uuid }}"

  1994. 

  1995. matrix_mx_puppet_discord_homeserver_address: "{{ matrix_addons_homeserver_client_api_url }}"

  1996. matrix_mx_puppet_discord_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxdsc.hs.tok', rounds=655555) | to_uuid }}"

  1997. 

  1998. matrix_mx_puppet_discord_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  1999. 

  2000. matrix_mx_puppet_discord_presence_enabled: "{{ matrix_homeserver_implementation != 'synapse' or matrix_synapse_presence_enabled }}"

  2001. 

  2002. # Postgres is the default, except if not using internal Postgres server

  2003. matrix_mx_puppet_discord_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  2004. matrix_mx_puppet_discord_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  2005. matrix_mx_puppet_discord_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxpup.dsc.db', rounds=655555) | to_uuid }}"

  2006. 

  2007. ######################################################################

  2008. #

  2009. # /matrix-bridge-mx-puppet-discord

  2010. #

  2011. ######################################################################

  2012. 

  2013. ######################################################################

  2014. #

  2015. # matrix-bridge-mx-puppet-steam

  2016. #

  2017. ######################################################################

  2018. 

  2019. # We don't enable bridges by default.

  2020. matrix_mx_puppet_steam_enabled: false

  2021. 

  2022. matrix_mx_puppet_steam_systemd_required_services_list_auto: |

  2023.   {{

  2024.     matrix_addons_homeserver_systemd_services_list

  2025.     +

  2026.     ([devture_postgres_identifier ~ '.service'] if (devture_postgres_enabled and matrix_mx_puppet_steam_database_hostname == devture_postgres_connection_hostname) else [])

  2027.   }}

  2028. 

  2029. matrix_mx_puppet_steam_container_image_self_build: "{{ matrix_architecture not in ['arm64', 'amd64'] }}"

  2030. 

  2031. matrix_mx_puppet_steam_container_network: "{{ matrix_addons_container_network }}"

  2032. 

  2033. matrix_mx_puppet_steam_container_additional_networks_auto: |-

  2034.   {{

  2035.     (

  2036.       ([] if matrix_addons_homeserver_container_network == '' else [matrix_addons_homeserver_container_network])

  2037.       +

  2038.       ([devture_postgres_container_network] if (devture_postgres_enabled and matrix_mx_puppet_steam_database_hostname == devture_postgres_connection_hostname and matrix_mx_puppet_steam_container_network != devture_postgres_container_network) else [])

  2039.     ) | unique

  2040.   }}

  2041. 

  2042. matrix_mx_puppet_steam_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxste.as.tok', rounds=655555) | to_uuid }}"

  2043. 

  2044. matrix_mx_puppet_steam_homeserver_address: "{{ matrix_addons_homeserver_client_api_url }}"

  2045. matrix_mx_puppet_steam_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxste.hs.tok', rounds=655555) | to_uuid }}"

  2046. 

  2047. matrix_mx_puppet_steam_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  2048. 

  2049. matrix_mx_puppet_steam_presence_enabled: "{{ matrix_homeserver_implementation != 'synapse' or matrix_synapse_presence_enabled }}"

  2050. 

  2051. # Postgres is the default, except if not using internal Postgres server

  2052. matrix_mx_puppet_steam_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  2053. matrix_mx_puppet_steam_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  2054. matrix_mx_puppet_steam_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxpup.steam.db', rounds=655555) | to_uuid }}"

  2055. 

  2056. ######################################################################

  2057. #

  2058. # /matrix-bridge-mx-puppet-steam

  2059. #

  2060. ######################################################################

  2061. 

  2062. 

  2063. ######################################################################

  2064. #

  2065. # matrix-bridge-mx-puppet-groupme

  2066. #

  2067. ######################################################################

  2068. 

  2069. # We don't enable bridges by default.

  2070. matrix_mx_puppet_groupme_enabled: false

  2071. 

  2072. matrix_mx_puppet_groupme_systemd_required_services_list_auto: |

  2073.   {{

  2074.     matrix_addons_homeserver_systemd_services_list

  2075.     +

  2076.     ([devture_postgres_identifier ~ '.service'] if (devture_postgres_enabled and matrix_mx_puppet_groupme_database_hostname == devture_postgres_connection_hostname) else [])

  2077.   }}

  2078. 

  2079. matrix_mx_puppet_groupme_container_image_self_build: "{{ matrix_architecture != 'amd64' }}"

  2080. 

  2081. matrix_mx_puppet_groupme_container_network: "{{ matrix_addons_container_network }}"

  2082. 

  2083. matrix_mx_puppet_groupme_container_additional_networks_auto: |-

  2084.   {{

  2085.     (

  2086.       ([] if matrix_addons_homeserver_container_network == '' else [matrix_addons_homeserver_container_network])

  2087.       +

  2088.       ([devture_postgres_container_network] if (devture_postgres_enabled and matrix_mx_puppet_groupme_database_hostname == devture_postgres_connection_hostname and matrix_mx_puppet_groupme_container_network != devture_postgres_container_network) else [])

  2089.     ) | unique

  2090.   }}

  2091. 

  2092. matrix_mx_puppet_groupme_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxgro.as.tok', rounds=655555) | to_uuid }}"

  2093. 

  2094. matrix_mx_puppet_groupme_homeserver_address: "{{ matrix_addons_homeserver_client_api_url }}"

  2095. matrix_mx_puppet_groupme_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxgro.hs.tok', rounds=655555) | to_uuid }}"

  2096. 

  2097. matrix_mx_puppet_groupme_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"

  2098. 

  2099. matrix_mx_puppet_groupme_presence_enabled: "{{ matrix_homeserver_implementation != 'synapse' or matrix_synapse_presence_enabled }}"

  2100. 

  2101. # Postgres is the default, except if not using internal Postgres server

  2102. matrix_mx_puppet_groupme_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  2103. matrix_mx_puppet_groupme_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  2104. matrix_mx_puppet_groupme_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxpup.groupme.db', rounds=655555) | to_uuid }}"

  2105. 

  2106. ######################################################################

  2107. #

  2108. # /matrix-bridge-mx-puppet-groupme

  2109. #

  2110. ######################################################################

  2111. 

  2112. 

  2113. ######################################################################

  2114. #

  2115. # matrix-bot-matrix-reminder-bot

  2116. #

  2117. ######################################################################

  2118. 

  2119. # We don't enable bots by default.

  2120. matrix_bot_matrix_reminder_bot_enabled: false

  2121. 

  2122. matrix_bot_matrix_reminder_bot_systemd_required_services_list_auto: |

  2123.   {{

  2124.     matrix_addons_homeserver_systemd_services_list

  2125.     +

  2126.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled and matrix_bot_matrix_reminder_bot_database_hostname == devture_postgres_connection_hostname else [])

  2127.   }}

  2128. 

  2129. matrix_bot_matrix_reminder_bot_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"

  2130. 

  2131. matrix_bot_matrix_reminder_bot_container_network: "{{ matrix_addons_container_network }}"

  2132. 

  2133. matrix_bot_matrix_reminder_bot_container_additional_networks_auto: |-

  2134.   {{

  2135.     (

  2136.       ([] if matrix_addons_homeserver_container_network == '' else [matrix_addons_homeserver_container_network])

  2137.       +

  2138.       ([devture_postgres_container_network] if devture_postgres_enabled and matrix_bot_matrix_reminder_bot_database_hostname == devture_postgres_connection_hostname else [])

  2139.     ) | unique

  2140.   }}

  2141. 

  2142. matrix_bot_matrix_reminder_bot_matrix_homeserver_url: "{{ matrix_addons_homeserver_client_api_url }}"

  2143. 

  2144. # Postgres is the default, except if not using internal Postgres server

  2145. matrix_bot_matrix_reminder_bot_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  2146. matrix_bot_matrix_reminder_bot_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  2147. matrix_bot_matrix_reminder_bot_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'reminder.bot.db', rounds=655555) | to_uuid }}"

  2148. 

  2149. matrix_bot_matrix_reminder_bot_allowlist_enabled: true

  2150. matrix_bot_matrix_reminder_bot_allowlist_regexes_auto:

  2151.   - "@[a-z0-9-_.]+:{{ matrix_domain }}"

  2152. 

  2153. ######################################################################

  2154. #

  2155. # /matrix-bot-matrix-reminder-bot

  2156. #

  2157. ######################################################################

  2158. 

  2159. 

  2160. ######################################################################

  2161. #

  2162. # matrix-bot-matrix-registration-bot

  2163. #

  2164. ######################################################################

  2165. 

  2166. # We don't enable bots by default.

  2167. matrix_bot_matrix_registration_bot_enabled: false

  2168. 

  2169. matrix_bot_matrix_registration_bot_systemd_required_services_list_auto: |

  2170.   {{

  2171.     matrix_addons_homeserver_systemd_services_list

  2172.   }}

  2173. 

  2174. matrix_bot_matrix_registration_bot_container_image_self_build: "{{ matrix_architecture not in ['amd64'] }}"

  2175. 

  2176. matrix_bot_matrix_registration_bot_container_network: "{{ matrix_addons_container_network }}"

  2177. 

  2178. matrix_bot_matrix_registration_bot_container_additional_networks_auto: |-

  2179.   {{

  2180.     ([] if matrix_addons_homeserver_container_network == '' else [matrix_addons_homeserver_container_network])

  2181.   }}

  2182. 

  2183. matrix_bot_matrix_registration_bot_matrix_homeserver_url: "{{ matrix_addons_homeserver_client_api_url }}"

  2184. 

  2185. ######################################################################

  2186. #

  2187. # /matrix-bot-matrix-registration-bot

  2188. #

  2189. ######################################################################

  2190. 

  2191. ######################################################################

  2192. #

  2193. # matrix-bot-maubot

  2194. #

  2195. ######################################################################

  2196. 

  2197. # We don't enable bots by default.

  2198. matrix_bot_maubot_enabled: false

  2199. 

  2200. matrix_bot_maubot_systemd_required_services_list_auto: |

  2201.   {{

  2202.     matrix_addons_homeserver_systemd_services_list

  2203.     +

  2204.     ([devture_postgres_identifier ~ '.service'] if (devture_postgres_enabled and matrix_bot_maubot_database_hostname == devture_postgres_connection_hostname) else [])

  2205.   }}

  2206. 

  2207. matrix_bot_maubot_hostname: "{{ matrix_server_fqn_matrix }}"

  2208. 

  2209. matrix_bot_maubot_homeserver_url: "{{ matrix_addons_homeserver_client_api_url }}"

  2210. 

  2211. matrix_bot_maubot_homeserver_secret: |-

  2212.   {{

  2213.     {

  2214.       'synapse': matrix_synapse_registration_shared_secret | default(''),

  2215.       'dendrite': matrix_dendrite_client_api_registration_shared_secret | default(''),

  2216.     }[matrix_homeserver_implementation]

  2217.   }}

  2218. 

  2219. matrix_bot_maubot_container_image_self_build: "{{ matrix_architecture not in ['amd64'] }}"

  2220. 

  2221. matrix_bot_maubot_container_management_interface_http_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '' ~ matrix_bot_maubot_server_port | string) if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  2222. 

  2223. matrix_bot_maubot_container_network: "{{ matrix_addons_container_network }}"

  2224. 

  2225. matrix_bot_maubot_container_additional_networks_auto: |-

  2226.   {{

  2227.     (

  2228.       ([] if matrix_addons_homeserver_container_network == '' else [matrix_addons_homeserver_container_network])

  2229.       +

  2230.       ([devture_postgres_container_network] if (devture_postgres_enabled and matrix_bot_maubot_database_hostname == devture_postgres_connection_hostname and matrix_bot_maubot_container_network != devture_postgres_container_network) else [])

  2231.       +

  2232.       ([matrix_playbook_reverse_proxyable_services_additional_network] if matrix_playbook_reverse_proxyable_services_additional_network and matrix_bot_maubot_container_labels_traefik_enabled else [])

  2233.     ) | unique

  2234.   }}

  2235. 

  2236. matrix_bot_maubot_container_labels_traefik_enabled: "{{ matrix_playbook_reverse_proxy_type in ['playbook-managed-traefik', 'other-traefik-container'] }}"

  2237. matrix_bot_maubot_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  2238. matrix_bot_maubot_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  2239. matrix_bot_maubot_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  2240. 

  2241. matrix_bot_maubot_container_labels_management_hostname: "{{ matrix_server_fqn_matrix }}"

  2242. 

  2243. # Postgres is the default, except if not using internal Postgres server

  2244. matrix_bot_maubot_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  2245. matrix_bot_maubot_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  2246. matrix_bot_maubot_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxpup.dsc.db', rounds=655555) | to_uuid }}"

  2247. 

  2248. ######################################################################

  2249. #

  2250. # /matrix-bot-maubot

  2251. #

  2252. ######################################################################

  2253. 

  2254. 

  2255. ######################################################################

  2256. #

  2257. # matrix-bot-honoroit

  2258. #

  2259. ######################################################################

  2260. 

  2261. # We don't enable bots by default.

  2262. matrix_bot_honoroit_enabled: false

  2263. 

  2264. matrix_bot_honoroit_hostname: "{{ matrix_server_fqn_matrix }}"

  2265. 

  2266. matrix_bot_honoroit_path_prefix: /honoroit

  2267. 

  2268. matrix_bot_honoroit_systemd_required_services_list_auto: |

  2269.   {{

  2270.     matrix_addons_homeserver_systemd_services_list

  2271.     +

  2272.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled and matrix_bot_honoroit_database_hostname == devture_postgres_connection_hostname else [])

  2273.   }}

  2274. 

  2275. matrix_bot_honoroit_container_network: "{{ matrix_addons_container_network }}"

  2276. 

  2277. matrix_bot_honoroit_container_additional_networks: |

  2278.   {{

  2279.     (

  2280.       ([] if matrix_addons_homeserver_container_network == '' else [matrix_addons_homeserver_container_network])

  2281.       +

  2282.       ([devture_postgres_container_network] if (devture_postgres_enabled and matrix_bot_honoroit_database_hostname == devture_postgres_connection_hostname and matrix_bot_honoroit_container_network != devture_postgres_container_network) else [])

  2283.       +

  2284.       ([matrix_playbook_reverse_proxyable_services_additional_network] if matrix_playbook_reverse_proxyable_services_additional_network and matrix_bot_honoroit_container_labels_traefik_enabled else [])

  2285.     ) | unique

  2286.   }}

  2287. 

  2288. matrix_bot_honoroit_container_labels_traefik_enabled: "{{ matrix_playbook_traefik_labels_enabled }}"

  2289. matrix_bot_honoroit_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  2290. matrix_bot_honoroit_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  2291. matrix_bot_honoroit_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  2292. 

  2293. # For consistency with other things hosted at the matrix FQN, we adjust the metrics endpoint

  2294. # so that metrics would be served at something like `/metrics/SERVICE_NAME`, and not at the default path for the role (`PREFIX/metrics`).

  2295. matrix_bot_honoroit_container_labels_traefik_metrics_path: "{{ matrix_metrics_exposure_path_prefix }}/honoroit"

  2296. 

  2297. matrix_bot_honoroit_homeserver: "{{ matrix_addons_homeserver_client_api_url }}"

  2298. 

  2299. # Postgres is the default, except if not using internal Postgres server

  2300. matrix_bot_honoroit_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  2301. matrix_bot_honoroit_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  2302. matrix_bot_honoroit_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'honoroit.bot.db', rounds=655555) | to_uuid }}"

  2303. matrix_bot_honoroit_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"

  2304. 

  2305. ######################################################################

  2306. #

  2307. # /matrix-bot-honoroit

  2308. #

  2309. ######################################################################

  2310. 

  2311. ######################################################################

  2312. #

  2313. # matrix-bot-buscarron

  2314. #

  2315. ######################################################################

  2316. 

  2317. # We don't enable bots by default.

  2318. matrix_bot_buscarron_enabled: false

  2319. 

  2320. matrix_bot_buscarron_hostname: "{{ matrix_server_fqn_buscarron }}"

  2321. 

  2322. matrix_bot_buscarron_systemd_required_services_list_auto: |

  2323.   {{

  2324.     matrix_addons_homeserver_systemd_services_list

  2325.     +

  2326.     ([devture_postgres_identifier ~ '.service'] if (devture_postgres_enabled and matrix_bot_buscarron_database_hostname == devture_postgres_connection_hostname) else [])

  2327.   }}

  2328. 

  2329. matrix_bot_buscarron_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"

  2330. 

  2331. matrix_bot_buscarron_container_network: "{{ matrix_addons_container_network }}"

  2332. 

  2333. matrix_bot_buscarron_container_additional_networks_auto: |-

  2334.   {{

  2335.     (

  2336.       ([] if matrix_addons_homeserver_container_network == '' else [matrix_addons_homeserver_container_network])

  2337.       +

  2338.       ([devture_postgres_container_network] if (devture_postgres_enabled and matrix_bot_buscarron_database_hostname == devture_postgres_connection_hostname and matrix_bot_buscarron_container_network != devture_postgres_container_network) else [])

  2339.       +

  2340.       ([matrix_playbook_reverse_proxyable_services_additional_network] if matrix_playbook_reverse_proxyable_services_additional_network and matrix_bot_buscarron_container_labels_traefik_enabled else [])

  2341.     ) | unique

  2342.   }}

  2343. 

  2344. matrix_bot_buscarron_container_labels_traefik_enabled: "{{ matrix_playbook_traefik_labels_enabled }}"

  2345. matrix_bot_buscarron_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  2346. matrix_bot_buscarron_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  2347. matrix_bot_buscarron_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  2348. 

  2349. matrix_bot_buscarron_homeserver: "{{ matrix_addons_homeserver_client_api_url }}"

  2350. 

  2351. # Postgres is the default, except if not using internal Postgres server

  2352. matrix_bot_buscarron_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  2353. matrix_bot_buscarron_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  2354. matrix_bot_buscarron_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'buscarron.bot.db', rounds=655555) | to_uuid }}"

  2355. 

  2356. ######################################################################

  2357. #

  2358. # /matrix-bot-buscarron

  2359. #

  2360. ######################################################################

  2361. 

  2362. ######################################################################

  2363. #

  2364. # matrix-bot-postmoogle

  2365. #

  2366. ######################################################################

  2367. 

  2368. # We don't enable bots by default.

  2369. matrix_bot_postmoogle_enabled: false

  2370. 

  2371. matrix_bot_postmoogle_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"

  2372. 

  2373. matrix_bot_postmoogle_ssl_path: |-

  2374.   {{

  2375.     {

  2376.       'playbook-managed-traefik': (devture_traefik_certs_dumper_dumped_certificates_dir_path if devture_traefik_certs_dumper_enabled else ''),

  2377.       'other-traefik-container': (devture_traefik_certs_dumper_dumped_certificates_dir_path if devture_traefik_certs_dumper_enabled else ''),

  2378.       'none': '',

  2379.     }[matrix_playbook_reverse_proxy_type]

  2380.   }}

  2381. 

  2382. matrix_playbook_bot_postmoogle_traefik_tls_cert: "{% for domain in matrix_bot_postmoogle_domains %}/ssl/{{ domain }}/certificate.crt {% endfor %}"

  2383. matrix_playbook_bot_postmoogle_traefik_key: "{% for domain in matrix_bot_postmoogle_domains %}/ssl/{{ domain }}/privatekey.key {% endfor %}"

  2384. 

  2385. matrix_bot_postmoogle_tls_cert: |-

  2386.   {{

  2387.     {

  2388.       'playbook-managed-traefik': (matrix_playbook_bot_postmoogle_traefik_tls_cert if devture_traefik_certs_dumper_enabled else ''),

  2389.       'other-traefik-container': (matrix_playbook_bot_postmoogle_traefik_tls_cert if devture_traefik_certs_dumper_enabled else ''),

  2390.       'none': '',

  2391.     }[matrix_playbook_reverse_proxy_type]

  2392.   }}

  2393. 

  2394. matrix_bot_postmoogle_tls_key: |-

  2395.   {{

  2396.     {

  2397.       'playbook-managed-traefik': (matrix_playbook_bot_postmoogle_traefik_key if devture_traefik_certs_dumper_enabled else ''),

  2398.       'other-traefik-container': (matrix_playbook_bot_postmoogle_traefik_key if devture_traefik_certs_dumper_enabled else ''),

  2399.       'none': '',

  2400.     }[matrix_playbook_reverse_proxy_type]

  2401.   }}

  2402. 

  2403. matrix_playbook_bot_postmoogle_traefik_certs_dumper_waiter_services: "{% for domain in matrix_bot_postmoogle_domains %}{{ devture_traefik_certs_dumper_identifier }}-wait-for-domain@{{ domain }}.service {% endfor %}"

  2404. 

  2405. matrix_bot_postmoogle_systemd_required_services_list_auto: |

  2406.   {{

  2407.     matrix_addons_homeserver_systemd_services_list

  2408.     +

  2409.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled and matrix_bot_postmoogle_database_hostname == matrix_bot_postmoogle_database_hostname else [])

  2410.     +

  2411.     (matrix_playbook_bot_postmoogle_traefik_certs_dumper_waiter_services | trim | split(' ') if matrix_playbook_reverse_proxy_type in ['playbook-managed-traefik', 'other-traefik-container'] and devture_traefik_certs_dumper_enabled else [])

  2412.   }}

  2413. 

  2414. # Postgres is the default, except if not using internal Postgres server

  2415. matrix_bot_postmoogle_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  2416. matrix_bot_postmoogle_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  2417. matrix_bot_postmoogle_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'postmoogle.db', rounds=655555) | to_uuid }}"

  2418. 

  2419. matrix_bot_postmoogle_homeserver: "{{ matrix_addons_homeserver_client_api_url }}"

  2420. 

  2421. matrix_bot_postmoogle_container_network: "{{ matrix_addons_container_network }}"

  2422. 

  2423. matrix_bot_postmoogle_container_additional_networks_auto: |-

  2424.   {{

  2425.     (

  2426.       ([] if matrix_addons_homeserver_container_network == '' else [matrix_addons_homeserver_container_network])

  2427.       +

  2428.       ([devture_postgres_container_network] if devture_postgres_enabled and matrix_bot_matrix_reminder_bot_database_hostname == devture_postgres_connection_hostname else [])

  2429.     ) | unique

  2430.   }}

  2431. 

  2432. ######################################################################

  2433. #

  2434. # /matrix-bot-postmoogle

  2435. #

  2436. ######################################################################

  2437. 

  2438. 

  2439. ######################################################################

  2440. #

  2441. # matrix-bot-chatgpt

  2442. #

  2443. ######################################################################

  2444. 

  2445. # We don't enable bots by default.

  2446. matrix_bot_chatgpt_enabled: false

  2447. 

  2448. matrix_bot_chatgpt_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"

  2449. 

  2450. matrix_bot_chatgpt_container_network: "{{ matrix_addons_container_network }}"

  2451. matrix_bot_chatgpt_container_additional_networks_auto: "{{ [] if matrix_addons_homeserver_container_network == '' else [matrix_addons_homeserver_container_network] }}"

  2452. 

  2453. matrix_bot_chatgpt_matrix_homeserver_url: "{{ matrix_addons_homeserver_client_api_url }}"

  2454. 

  2455. matrix_bot_chatgpt_systemd_required_services_list_auto: "{{ matrix_addons_homeserver_systemd_services_list }}"

  2456. 

  2457. ######################################################################

  2458. #

  2459. # /matrix-bot-chatgpt

  2460. #

  2461. ######################################################################

  2462. 

  2463. 

  2464. ######################################################################

  2465. #

  2466. # matrix-bot-go-neb

  2467. #

  2468. ######################################################################

  2469. 

  2470. # We don't enable bots by default.

  2471. matrix_bot_go_neb_enabled: false

  2472. 

  2473. matrix_bot_go_neb_scheme: "{{ 'https' if matrix_playbook_ssl_enabled else 'http' }}"

  2474. 

  2475. matrix_bot_go_neb_hostname: "{{ matrix_server_fqn_bot_go_neb }}"

  2476. 

  2477. matrix_bot_go_neb_systemd_required_services_list_auto: |

  2478.   {{

  2479.     matrix_addons_homeserver_systemd_services_list

  2480.   }}

  2481. 

  2482. matrix_bot_go_neb_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '4050') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  2483. 

  2484. matrix_bot_go_neb_container_network: "{{ matrix_addons_container_network }}"

  2485. 

  2486. matrix_bot_go_neb_container_additional_networks: |

  2487.   {{

  2488.     (

  2489.       ([] if matrix_addons_homeserver_container_network == '' else [matrix_addons_homeserver_container_network])

  2490.       +

  2491.       ([matrix_playbook_reverse_proxyable_services_additional_network] if matrix_playbook_reverse_proxyable_services_additional_network and matrix_bot_go_neb_container_labels_traefik_enabled else [])

  2492.     ) | unique

  2493.   }}

  2494. 

  2495. matrix_bot_go_neb_container_labels_traefik_enabled: "{{ matrix_playbook_traefik_labels_enabled }}"

  2496. matrix_bot_go_neb_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  2497. matrix_bot_go_neb_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  2498. matrix_bot_go_neb_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  2499. 

  2500. ######################################################################

  2501. #

  2502. # /matrix-bot-go-neb

  2503. #

  2504. ######################################################################

  2505. 

  2506. 

  2507. ######################################################################

  2508. #

  2509. # matrix-bot-mjolnir

  2510. #

  2511. ######################################################################

  2512. 

  2513. # We don't enable bots by default.

  2514. matrix_bot_mjolnir_enabled: false

  2515. 

  2516. matrix_bot_mjolnir_systemd_required_services_list_auto: |

  2517.   {{

  2518.     matrix_addons_homeserver_systemd_services_list

  2519.   }}

  2520. 

  2521. matrix_bot_mjolnir_container_image_self_build: "{{ matrix_architecture != 'amd64' }}"

  2522. 

  2523. matrix_bot_mjolnir_container_network: "{{ matrix_addons_container_network }}"

  2524. 

  2525. matrix_bot_mjolnir_container_additional_networks_auto: |-

  2526.   {{

  2527.     ([] if matrix_addons_homeserver_container_network == '' else [matrix_addons_homeserver_container_network])

  2528.   }}

  2529. 

  2530. ######################################################################

  2531. #

  2532. # /matrix-bot-mjolnir

  2533. #

  2534. ######################################################################

  2535. 

  2536. ######################################################################

  2537. #

  2538. # matrix-bot-draupnir

  2539. #

  2540. ######################################################################

  2541. 

  2542. # We don't enable bots by default.

  2543. matrix_bot_draupnir_enabled: false

  2544. 

  2545. matrix_bot_draupnir_systemd_required_services_list_auto: |

  2546.   {{

  2547.     matrix_addons_homeserver_systemd_services_list

  2548.   }}

  2549. 

  2550. matrix_bot_draupnir_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"

  2551. 

  2552. matrix_bot_draupnir_container_network: "{{ matrix_addons_container_network }}"

  2553. 

  2554. matrix_bot_draupnir_container_additional_networks_auto: |-

  2555.   {{

  2556.     ([] if matrix_addons_homeserver_container_network == '' else [matrix_addons_homeserver_container_network])

  2557.   }}

  2558. 

  2559. ######################################################################

  2560. #

  2561. # /matrix-bot-draupnir

  2562. #

  2563. ######################################################################

  2564. 

  2565. 

  2566. ######################################################################

  2567. #

  2568. # etke/backup_borg

  2569. #

  2570. ######################################################################

  2571. 

  2572. backup_borg_enabled: false

  2573. 

  2574. backup_borg_identifier: matrix-backup-borg

  2575. backup_borg_retention_prefix: matrix-

  2576. backup_borg_storage_archive_name_format: matrix-{now:%Y-%m-%d-%H%M%S}

  2577. 

  2578. backup_borg_base_path: "{{ matrix_base_data_path }}/backup-borg"

  2579. 

  2580. backup_borg_username: "{{ matrix_user_username }}"

  2581. backup_borg_uid: "{{ matrix_user_uid }}"

  2582. backup_borg_gid: "{{ matrix_user_gid }}"

  2583. 

  2584. backup_borg_container_network: "{{ devture_postgres_container_network if devture_postgres_enabled else backup_borg_identifier }}"

  2585. 

  2586. backup_borg_postgresql_version_detection_devture_postgres_role_name: "{{ 'galaxy/postgres' if devture_postgres_enabled else '' }}"

  2587. 

  2588. backup_borg_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm32', 'arm64'] }}"

  2589. 

  2590. backup_borg_postgresql_enabled: "{{ devture_postgres_enabled }}"

  2591. backup_borg_postgresql_databases_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  2592. backup_borg_postgresql_databases_username: "{{ devture_postgres_connection_username if devture_postgres_enabled else '' }}"

  2593. backup_borg_postgresql_databases_password: "{{ devture_postgres_connection_password if devture_postgres_enabled else '' }}"

  2594. backup_borg_postgresql_databases_port: "{{ devture_postgres_connection_port if devture_postgres_enabled else 5432 }}"

  2595. backup_borg_postgresql_databases: "{{ devture_postgres_managed_databases | map(attribute='name') if devture_postgres_enabled else [] }}"

  2596. 

  2597. backup_borg_location_source_directories:

  2598.   - "{{ matrix_base_data_path }}"

  2599. 

  2600. backup_borg_location_exclude_patterns: |

  2601.   {{

  2602.     ([matrix_synapse_media_store_path + '/local_thumbnails', matrix_synapse_media_store_path + '/remote_thumbnail', matrix_synapse_media_store_path + '/url_cache', matrix_synapse_media_store_path + '/url_cache_thumbnails'] if matrix_homeserver_implementation == 'synapse' else [])

  2603.     +

  2604.     ([devture_postgres_data_path] if devture_postgres_enabled else [])

  2605.   }}

  2606. 

  2607. backup_borg_systemd_required_services_list: |

  2608.   {{

  2609.     ['docker.service']

  2610.     +

  2611.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  2612.   }}

  2613. 

  2614. ######################################################################

  2615. #

  2616. # /etke/backup_borg

  2617. #

  2618. ######################################################################

  2619. 

  2620. 

  2621. ######################################################################

  2622. #

  2623. # matrix-cactus-comments

  2624. #

  2625. ######################################################################

  2626. 

  2627. matrix_cactus_comments_enabled: false

  2628. 

  2629. matrix_cactus_comments_systemd_required_services_list_auto: |

  2630.   {{

  2631.     matrix_addons_homeserver_systemd_services_list

  2632.   }}

  2633. 

  2634. matrix_cactus_comments_container_image_self_build: "{{ matrix_architecture not in ['amd64'] }}"

  2635. 

  2636. matrix_cactus_comments_container_network: "{{ matrix_addons_container_network }}"

  2637. 

  2638. matrix_cactus_comments_container_additional_networks_auto: |-

  2639.   {{

  2640.     ([] if matrix_addons_homeserver_container_network == '' else [matrix_addons_homeserver_container_network])

  2641.   }}

  2642. 

  2643. matrix_cactus_comments_as_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'cactus.as.token', rounds=655555) | to_uuid }}"

  2644. matrix_cactus_comments_hs_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'cactus.hs.token', rounds=655555) | to_uuid }}"

  2645. 

  2646. matrix_cactus_comments_homeserver_url: "{{ matrix_addons_homeserver_client_api_url }}"

  2647. 

  2648. ######################################################################

  2649. #

  2650. # /matrix-cactus-comments

  2651. #

  2652. ######################################################################

  2653. 

  2654. ######################################################################

  2655. #

  2656. # matrix-cactus-comments-client

  2657. #

  2658. ######################################################################

  2659. 

  2660. matrix_cactus_comments_client_enabled: "{{ matrix_cactus_comments_enabled }}"

  2661. 

  2662. matrix_cactus_comments_client_hostname: "{{ matrix_server_fqn_matrix }}"

  2663. 

  2664. matrix_cactus_comments_client_container_network: "{{ matrix_addons_container_network }}"

  2665. 

  2666. matrix_cactus_comments_client_container_additional_networks_auto: |-

  2667.   {{

  2668.     (

  2669.       ([matrix_playbook_reverse_proxyable_services_additional_network] if (matrix_playbook_reverse_proxyable_services_additional_network and matrix_cactus_comments_client_container_labels_traefik_enabled) else [])

  2670.     ) | unique

  2671.   }}

  2672. 

  2673. matrix_cactus_comments_client_container_labels_traefik_enabled: "{{ matrix_playbook_reverse_proxy_type in ['playbook-managed-traefik', 'other-traefik-container'] }}"

  2674. matrix_cactus_comments_client_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  2675. matrix_cactus_comments_client_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  2676. matrix_cactus_comments_client_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  2677. 

  2678. ######################################################################

  2679. #

  2680. # /matrix-cactus-comments-client

  2681. #

  2682. ######################################################################

  2683. 

  2684. ######################################################################

  2685. #

  2686. # matrix-corporal

  2687. #

  2688. ######################################################################

  2689. 

  2690. matrix_corporal_enabled: false

  2691. 

  2692. matrix_corporal_systemd_required_services_list_auto: |

  2693.   {{

  2694.     (['matrix-' + matrix_homeserver_implementation + '.service'])

  2695.   }}

  2696. 

  2697. matrix_corporal_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm32', 'arm64'] }}"

  2698. 

  2699. matrix_corporal_container_http_gateway_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '41080') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  2700. matrix_corporal_container_http_api_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '41081') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  2701. 

  2702. matrix_corporal_container_network: matrix-corporal

  2703. 

  2704. matrix_corporal_container_additional_networks: |

  2705.   {{

  2706.     (

  2707.       ([matrix_playbook_reverse_proxyable_services_additional_network] if matrix_playbook_reverse_proxyable_services_additional_network else [])

  2708.       +

  2709.       ([matrix_homeserver_container_network] if matrix_corporal_container_network != matrix_homeserver_container_network else [])

  2710.     ) | unique

  2711.   }}

  2712. 

  2713. matrix_corporal_container_labels_traefik_enabled: "{{ matrix_playbook_reverse_proxy_type in ['playbook-managed-traefik', 'other-traefik-container'] }}"

  2714. matrix_corporal_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  2715. matrix_corporal_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  2716. matrix_corporal_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  2717. 

  2718. matrix_corporal_matrix_homeserver_api_endpoint: "{{ matrix_homeserver_container_url }}"

  2719. 

  2720. matrix_corporal_matrix_auth_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret }}"

  2721. 

  2722. # This is only useful if there's REST auth provider to make use of it.

  2723. matrix_corporal_http_gateway_internal_rest_auth_enabled: "{{ matrix_synapse_ext_password_provider_rest_auth_enabled }}"

  2724. 

  2725. matrix_corporal_matrix_registration_shared_secret: "{{ matrix_synapse_registration_shared_secret }}"

  2726. 

  2727. ######################################################################

  2728. #

  2729. # /matrix-corporal

  2730. #

  2731. ######################################################################

  2732. 

  2733. 

  2734. ######################################################################

  2735. #

  2736. # matrix-rageshake

  2737. #

  2738. ######################################################################

  2739. 

  2740. # We don't enable rageshake by default.

  2741. matrix_rageshake_enabled: false

  2742. 

  2743. matrix_rageshake_container_image_self_build: "{{ matrix_architecture not in ['amd64'] }}"

  2744. 

  2745. matrix_rageshake_hostname: "{{ matrix_server_fqn_rageshake }}"

  2746. 

  2747. matrix_rageshake_container_network: matrix-rageshake

  2748. 

  2749. matrix_rageshake_container_additional_networks: "{{ [matrix_playbook_reverse_proxyable_services_additional_network] if matrix_playbook_reverse_proxyable_services_additional_network else [] }}"

  2750. 

  2751. matrix_rageshake_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '9110') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  2752. 

  2753. matrix_rageshake_container_labels_traefik_enabled: "{{ matrix_playbook_traefik_labels_enabled }}"

  2754. matrix_rageshake_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  2755. matrix_rageshake_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  2756. matrix_rageshake_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  2757. 

  2758. ######################################################################

  2759. #

  2760. # /matrix-rageshake

  2761. #

  2762. ######################################################################

  2763. 

  2764. ######################################################################

  2765. #

  2766. # matrix-coturn

  2767. #

  2768. ######################################################################

  2769. 

  2770. matrix_coturn_enabled: true

  2771. 

  2772. matrix_coturn_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm32', 'arm64'] }}"

  2773. 

  2774. # We make the assumption that `ansible_host` points to an external IP address, which may not always be the case.

  2775. # Users are free to set `matrix_coturn_turn_external_ip_address` to an empty string

  2776. # to allow auto-detection (via an EchoIP service) to happen at runtime.

  2777. matrix_coturn_turn_external_ip_address: "{{ ansible_host }}"

  2778. 

  2779. matrix_coturn_turn_static_auth_secret: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'coturn.sas', rounds=655555) | to_uuid }}"

  2780. 

  2781. matrix_coturn_tls_enabled: "{{ matrix_playbook_ssl_enabled }}"

  2782. 

  2783. matrix_coturn_tls_cert_path: |-

  2784.   {{

  2785.     {

  2786.       'playbook-managed-traefik': ('/certificate.crt' if devture_traefik_certs_dumper_enabled else ''),

  2787.       'other-traefik-container': ('/certificate.crt' if devture_traefik_certs_dumper_enabled else ''),

  2788.       'none': '',

  2789.     }[matrix_playbook_reverse_proxy_type]

  2790.   }}

  2791. 

  2792. matrix_coturn_tls_key_path: |-

  2793.   {{

  2794.     {

  2795.       'playbook-managed-traefik': ('/privatekey.key' if devture_traefik_certs_dumper_enabled else ''),

  2796.       'other-traefik-container': ('/privatekey.key' if devture_traefik_certs_dumper_enabled else ''),

  2797.       'none': '',

  2798.     }[matrix_playbook_reverse_proxy_type]

  2799.   }}

  2800. 

  2801. matrix_coturn_container_additional_volumes: |

  2802.   {{

  2803.     (

  2804.       [

  2805.        {

  2806.          'src': (devture_traefik_certs_dumper_dumped_certificates_dir_path +  '/' + matrix_server_fqn_matrix + '/certificate.crt'),

  2807.          'dst': '/certificate.crt',

  2808.          'options': 'ro',

  2809.        },

  2810.        {

  2811.          'src': (devture_traefik_certs_dumper_dumped_certificates_dir_path +  '/' + matrix_server_fqn_matrix + '/privatekey.key'),

  2812.          'dst': '/privatekey.key',

  2813.          'options': 'ro',

  2814.        },

  2815.       ] if (matrix_playbook_reverse_proxy_type in ['playbook-managed-traefik', 'other-traefik-container'] and devture_traefik_certs_dumper_enabled and matrix_coturn_tls_enabled and (matrix_coturn_tls_cert_path and matrix_coturn_tls_key_path)) else []

  2816.     )

  2817.   }}

  2818. 

  2819. matrix_coturn_systemd_required_services_list: |

  2820.   {{

  2821.     ['docker.service']

  2822.     +

  2823.     ([devture_traefik_certs_dumper_identifier + '-wait-for-domain@' + matrix_server_fqn_matrix + '.service'] if matrix_playbook_reverse_proxy_type in ['playbook-managed-traefik', 'other-traefik-container'] and devture_traefik_certs_dumper_enabled and matrix_coturn_tls_enabled else [])

  2824.   }}

  2825. 

  2826. ######################################################################

  2827. #

  2828. # /matrix-coturn

  2829. #

  2830. ######################################################################

  2831. 

  2832. ######################################################################

  2833. #

  2834. # matrix-dimension

  2835. #

  2836. ######################################################################

  2837. 

  2838. matrix_dimension_enabled: false

  2839. 

  2840. matrix_dimension_container_image_self_build: "{{ matrix_architecture != 'amd64' }}"

  2841. 

  2842. matrix_dimension_scheme: "{{ 'https' if matrix_playbook_ssl_enabled else 'http' }}"

  2843. matrix_dimension_hostname: "{{ matrix_server_fqn_dimension }}"

  2844. 

  2845. matrix_dimension_container_network: "{{ matrix_addons_container_network }}"

  2846. 

  2847. # Dimension is connected both to `matrix_addons_homeserver_container_network` and `matrix_homeserver_container_network`,

  2848. # because `matrix_dimension_homeserver_clientServerUrl` and `matrix_dimension_homeserver_federationUrl` are potentially

  2849. # going to different places.

  2850. matrix_dimension_container_additional_networks: |

  2851.   {{

  2852.     (

  2853.       ([] if matrix_addons_homeserver_container_network == '' else [matrix_addons_homeserver_container_network])

  2854.       +

  2855.       ([matrix_homeserver_container_network] if matrix_homeserver_container_network != matrix_dimension_container_network else [])

  2856.       +

  2857.       ([devture_postgres_container_network] if (devture_postgres_enabled and matrix_dimension_database_hostname == devture_postgres_connection_hostname and devture_postgres_container_network != matrix_dimension_container_network) else [])

  2858.       +

  2859.       ([matrix_playbook_reverse_proxyable_services_additional_network] if matrix_playbook_reverse_proxyable_services_additional_network else [])

  2860.     ) | unique

  2861.   }}

  2862. 

  2863. matrix_dimension_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '8184') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  2864. 

  2865. matrix_dimension_container_labels_traefik_enabled: "{{ matrix_playbook_traefik_labels_enabled }}"

  2866. matrix_dimension_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  2867. matrix_dimension_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  2868. matrix_dimension_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  2869. 

  2870. matrix_dimension_homeserver_clientServerUrl: "{{ matrix_addons_homeserver_client_api_url }}"

  2871. matrix_dimension_homeserver_federationUrl: "{{ matrix_homeserver_container_federation_url }}"

  2872. matrix_dimension_homeserver_mediaUrl: "https://{{ matrix_server_fqn_matrix }}"

  2873. 

  2874. # Dimension depends both on `matrix_addons_homeserver_systemd_services_list` and on the homeserver service,

  2875. # because `matrix_dimension_homeserver_clientServerUrl` and `matrix_dimension_homeserver_federationUrl` are potentially

  2876. # going to different places.

  2877. matrix_dimension_systemd_required_services_list_auto: |

  2878.   {{

  2879.     (

  2880.       matrix_addons_homeserver_systemd_services_list

  2881.       +

  2882.       ['matrix-' + matrix_homeserver_implementation + '.service']

  2883.       +

  2884.       ([devture_postgres_identifier ~ '.service'] if (devture_postgres_enabled and matrix_dimension_database_hostname == devture_postgres_connection_hostname) else [])

  2885.     ) | unique

  2886.   }}

  2887. 

  2888. # Postgres is the default, except if not using internal Postgres server

  2889. matrix_dimension_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  2890. matrix_dimension_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  2891. matrix_dimension_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'dimension.db', rounds=655555) | to_uuid }}"

  2892. 

  2893. ######################################################################

  2894. #

  2895. # /matrix-dimension

  2896. #

  2897. ######################################################################

  2898. 

  2899. ######################################################################

  2900. #

  2901. # etke/etherpad

  2902. #

  2903. ######################################################################

  2904. 

  2905. etherpad_enabled: false

  2906. 

  2907. etherpad_identifier: matrix-etherpad

  2908. 

  2909. etherpad_scheme: "{{ 'https' if matrix_playbook_ssl_enabled else 'http' }}"

  2910. 

  2911. etherpad_base_path: "{{ matrix_base_data_path }}/etherpad"

  2912. 

  2913. etherpad_framing_enabled: "{{ matrix_dimension_enabled or jitsi_enabled }}"

  2914. 

  2915. etherpad_hostname: "{{ matrix_server_fqn_etherpad }}"

  2916. 

  2917. etherpad_container_image_self_build: "{{ matrix_architecture not in ['amd64'] }}"

  2918. 

  2919. etherpad_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '9001') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  2920. 

  2921. etherpad_container_network: "{{ matrix_addons_container_network }}"

  2922. 

  2923. etherpad_container_additional_networks: |

  2924.   {{

  2925.     (

  2926.       ([matrix_playbook_reverse_proxyable_services_additional_network] if matrix_playbook_reverse_proxyable_services_additional_network else [])

  2927.       +

  2928.       ([devture_postgres_container_network] if devture_postgres_enabled and devture_postgres_container_network != etherpad_container_network else [])

  2929.     ) | unique

  2930.   }}

  2931. 

  2932. etherpad_container_labels_traefik_enabled: "{{ matrix_playbook_reverse_proxy_type in ['playbook-managed-traefik', 'other-traefik-container'] }}"

  2933. etherpad_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  2934. etherpad_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  2935. etherpad_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  2936. 

  2937. etherpad_systemd_required_services_list: |

  2938.   {{

  2939.     ['docker.service']

  2940.     +

  2941.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])

  2942.   }}

  2943. 

  2944. etherpad_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  2945. etherpad_database_name: matrix_etherpad

  2946. etherpad_database_username: matrix_etherpad

  2947. etherpad_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'etherpad.db', rounds=655555) | to_uuid }}"

  2948. 

  2949. ######################################################################

  2950. #

  2951. # /etke/etherpad

  2952. #

  2953. ######################################################################

  2954. 

  2955. ######################################################################

  2956. #

  2957. # matrix-dynamic-dns

  2958. #

  2959. ######################################################################

  2960. 

  2961. matrix_dynamic_dns_enabled: false

  2962. 

  2963. matrix_dynamic_dns_container_network: matrix-dynamic-dns

  2964. 

  2965. ######################################################################

  2966. #

  2967. # /matrix-dynamic-dns

  2968. #

  2969. ######################################################################

  2970. 

  2971. ######################################################################

  2972. #

  2973. # matrix-email2matrix

  2974. #

  2975. ######################################################################

  2976. 

  2977. matrix_email2matrix_enabled: false

  2978. 

  2979. matrix_email2matrix_systemd_required_services_list_auto: |

  2980.   {{

  2981.     matrix_addons_homeserver_systemd_services_list

  2982.   }}

  2983. 

  2984. matrix_email2matrix_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm32', 'arm64'] }}"

  2985. 

  2986. matrix_email2matrix_container_network: "{{ matrix_addons_container_network }}"

  2987. 

  2988. matrix_email2matrix_container_additional_networks_auto: |-

  2989.   {{

  2990.     ([] if matrix_addons_homeserver_container_network == '' else [matrix_addons_homeserver_container_network])

  2991.   }}

  2992. 

  2993. ######################################################################

  2994. #

  2995. # /matrix-email2matrix

  2996. #

  2997. ######################################################################

  2998. 

  2999. ######################################################################

  3000. #

  3001. # jitsi

  3002. #

  3003. ######################################################################

  3004. 

  3005. jitsi_enabled: false

  3006. 

  3007. jitsi_architecture: "{{ matrix_architecture }}"

  3008. 

  3009. jitsi_hostname: "{{ matrix_server_fqn_jitsi }}"

  3010. 

  3011. jitsi_identifier: matrix-jitsi

  3012. 

  3013. jitsi_base_path: "{{ matrix_base_data_path }}/jitsi"

  3014. 

  3015. jitsi_uid: "{{ matrix_user_uid }}"

  3016. jitsi_gid: "{{ matrix_user_gid }}"

  3017. 

  3018. jitsi_user_username: "{{ matrix_user_username }}"

  3019. 

  3020. jitsi_web_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '13080') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  3021. 

  3022. jitsi_web_container_additional_networks_auto: |

  3023.   {{

  3024.     ([matrix_playbook_reverse_proxyable_services_additional_network] if matrix_playbook_reverse_proxyable_services_additional_network else [])

  3025.   }}

  3026. 

  3027. jitsi_jvb_container_colibri_ws_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '13090') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  3028. 

  3029. jitsi_jvb_container_additional_networks_auto: |

  3030.   {{

  3031.     ([matrix_playbook_reverse_proxyable_services_additional_network] if matrix_playbook_reverse_proxyable_services_additional_network else [])

  3032.   }}

  3033. 

  3034. jitsi_prosody_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '5280') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  3035. 

  3036. jitsi_prosody_container_additional_networks_auto: |

  3037.   {{

  3038.     ([matrix_playbook_reverse_proxyable_services_additional_network] if matrix_playbook_reverse_proxyable_services_additional_network else [])

  3039.   }}

  3040. 

  3041. jitsi_container_labels_traefik_enabled: "{{ matrix_playbook_traefik_labels_enabled }}"

  3042. jitsi_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  3043. jitsi_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  3044. jitsi_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  3045. 

  3046. jitsi_jibri_xmpp_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'jibri', rounds=655555) | to_uuid }}"

  3047. jitsi_jicofo_auth_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'jicofo', rounds=655555) | to_uuid }}"

  3048. jitsi_jvb_auth_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'jvb', rounds=655555) | to_uuid }}"

  3049. 

  3050. jitsi_web_stun_servers: |

  3051.   {{

  3052.     [

  3053.       'stun:' + matrix_server_fqn_matrix + ':5349',

  3054.       'stun:' + matrix_server_fqn_matrix + ':3478',

  3055.     ]

  3056.     if matrix_coturn_enabled

  3057.     else [ 'stun:meet-jit-si-turnrelay.jitsi.net:443']

  3058.   }}

  3059. 

  3060. # The Jitsi instance installed by this playbook is meant for embedding into Matrix clients, so framing is allowed.

  3061. jitsi_web_framing_enabled: true

  3062. 

  3063. jitsi_turn_credentials: "{{ matrix_coturn_turn_static_auth_secret if matrix_coturn_enabled else '' }}"

  3064. jitsi_turn_host: "{{ ('turn.' + matrix_server_fqn_matrix) if matrix_coturn_enabled else '' }}"

  3065. jitsi_turns_host: "{{ ('turn.' + matrix_server_fqn_matrix) if matrix_coturn_enabled else '' }}"

  3066. jitsi_turn_port: "{{ matrix_coturn_container_stun_plain_host_bind_port if matrix_coturn_enabled else '' }}"

  3067. jitsi_turns_port: "{{ matrix_coturn_container_stun_tls_host_bind_port if matrix_coturn_enabled else '' }}"

  3068. 

  3069. # If the self-hosted Etherpad instance is available, it will also show up in Jitsi conferences,

  3070. # unless explicitly disabled by setting `jitsi_etherpad_enabled` to false.

  3071. # Falls back to the scalar.vector.im etherpad in case someone sets `jitsi_etherpad_enabled` to true,

  3072. # while also setting `etherpad_enabled` to false.

  3073. jitsi_etherpad_enabled: "{{ etherpad_enabled }}"

  3074. jitsi_etherpad_base: "{{ etherpad_base_url if etherpad_enabled else 'https://scalar.vector.im/etherpad' }}"

  3075. 

  3076. # Allow verification using JWT and matrix-UVS

  3077. jitsi_prosody_auth_matrix_uvs_sync_power_levels: "{{ matrix_user_verification_service_enabled }}"

  3078. jitsi_prosody_auth_matrix_uvs_auth_token: "{{ matrix_user_verification_service_uvs_auth_token }}"

  3079. jitsi_prosody_auth_matrix_uvs_location: "{{ matrix_user_verification_service_container_url }}"

  3080. 

  3081. jitsi_self_check_validate_certificates: "{{ matrix_playbook_ssl_enabled }}"

  3082. 

  3083. # Gravatar is enabled by default upstream, but there's no need to leak data there needlessly

  3084. # when embedding Jitsi in Matrix rooms.

  3085. jitsi_disable_gravatar: true

  3086. 

  3087. ######################################################################

  3088. #

  3089. # /jitsi

  3090. #

  3091. ######################################################################

  3092. 

  3093. 

  3094. ######################################################################

  3095. #

  3096. # matrix-ldap-registration-proxy

  3097. #

  3098. ######################################################################

  3099. 

  3100. # This is only for users with a specific LDAP setup

  3101. matrix_ldap_registration_proxy_enabled: false

  3102. 

  3103. matrix_ldap_registration_proxy_hostname: "{{ matrix_server_fqn_matrix }}"

  3104. 

  3105. matrix_ldap_registration_proxy_matrix_server_url: "{{ matrix_addons_homeserver_client_api_url }}"

  3106. 

  3107. matrix_ldap_registration_proxy_systemd_required_services_list_auto: |

  3108.   {{

  3109.     matrix_addons_homeserver_systemd_services_list

  3110.   }}

  3111. 

  3112. matrix_ldap_registration_proxy_container_network: "{{ matrix_addons_container_network }}"

  3113. 

  3114. matrix_ldap_registration_proxy_container_additional_networks_auto: |-

  3115.   {{

  3116.     (

  3117.       ([] if matrix_addons_homeserver_container_network == '' else [matrix_addons_homeserver_container_network])

  3118.       +

  3119.       ([matrix_playbook_reverse_proxyable_services_additional_network] if (matrix_playbook_reverse_proxyable_services_additional_network and matrix_ldap_registration_proxy_container_labels_traefik_enabled) else [])

  3120.     ) | unique

  3121.   }}

  3122. 

  3123. matrix_ldap_registration_proxy_container_labels_traefik_enabled: "{{ matrix_playbook_reverse_proxy_type in ['playbook-managed-traefik', 'other-traefik-container'] }}"

  3124. matrix_ldap_registration_proxy_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  3125. matrix_ldap_registration_proxy_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  3126. matrix_ldap_registration_proxy_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  3127. 

  3128. ######################################################################

  3129. #

  3130. # /matrix-ldap-registration-proxy

  3131. #

  3132. ######################################################################

  3133. 

  3134. 

  3135. ########################################################################

  3136. #                                                                      #

  3137. # exim-relay                                                           #

  3138. #                                                                      #

  3139. ########################################################################

  3140. 

  3141. # We set up an Exim email relay by default.

  3142. # This is so that the homeserver and various other services can send emails through it.

  3143. # To completely disable this service, use: `exim_relay_enabled: false`

  3144. 

  3145. exim_relay_identifier: "matrix-exim-relay"

  3146. 

  3147. exim_relay_base_path: "{{ matrix_base_data_path }}/exim-relay"

  3148. 

  3149. exim_relay_uid: "{{ matrix_user_uid }}"

  3150. exim_relay_gid: "{{ matrix_user_gid }}"

  3151. 

  3152. exim_relay_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm32', 'arm64'] }}"

  3153. 

  3154. exim_relay_hostname: "{{ matrix_server_fqn_matrix }}"

  3155. 

  3156. exim_relay_sender_address: "matrix@{{ matrix_domain }}"

  3157. 

  3158. ########################################################################

  3159. #                                                                      #

  3160. # /exim-relay                                                          #

  3161. #                                                                      #

  3162. ########################################################################

  3163. 

  3164. 

  3165. ######################################################################

  3166. #

  3167. # matrix-ma1sd

  3168. #

  3169. ######################################################################

  3170. 

  3171. # We no longer install the ma1sd identity server by default.

  3172. #

  3173. # The main reason we used to install ma1sd by default in the past was to

  3174. # prevent Element from talking to the `matrix.org` / `vector.im` identity servers,

  3175. # by forcing it to talk to our own self-hosted (but otherwise useless) identity server instead,

  3176. # thus preventing contact list leaks.

  3177. #

  3178. # Since Element no longer defaults to using a public identity server if another one is not provided,

  3179. # we can stop installing ma1sd.

  3180. matrix_ma1sd_enabled: false

  3181. 

  3182. matrix_ma1sd_scheme: "{{ 'https' if matrix_playbook_ssl_enabled else 'http' }}"

  3183. matrix_ma1sd_hostname: "{{ matrix_server_fqn_matrix }}"

  3184. 

  3185. matrix_ma1sd_container_image_self_build: "{{ matrix_architecture != 'amd64' }}"

  3186. 

  3187. matrix_ma1sd_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '' ~ matrix_ma1sd_container_port | string) if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  3188. 

  3189. matrix_ma1sd_container_network: "{{ matrix_homeserver_container_network }}"

  3190. 

  3191. matrix_ma1sd_container_additional_networks_auto: |

  3192.   {{

  3193.     (

  3194.       ([matrix_homeserver_container_network] if (matrix_ma1sd_container_network != matrix_homeserver_container_network) else [])

  3195.       +

  3196.       ([devture_postgres_container_network] if (devture_postgres_enabled and matrix_ma1sd_database_hostname == devture_postgres_connection_hostname and matrix_ma1sd_container_network != devture_postgres_container_network) else [])

  3197.       +

  3198.       ([exim_relay_container_network] if (exim_relay_enabled and matrix_ma1sd_threepid_medium_email_connectors_smtp_host == exim_relay_identifier and matrix_ma1sd_container_network != exim_relay_container_network) else [])

  3199.       +

  3200.       ([matrix_playbook_reverse_proxyable_services_additional_network] if (matrix_playbook_reverse_proxyable_services_additional_network and matrix_ma1sd_container_labels_traefik_enabled) else [])

  3201.     ) | unique

  3202.   }}

  3203. 

  3204. matrix_ma1sd_container_labels_traefik_enabled: "{{ matrix_playbook_reverse_proxy_type in ['playbook-managed-traefik', 'other-traefik-container'] }}"

  3205. matrix_ma1sd_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  3206. matrix_ma1sd_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  3207. matrix_ma1sd_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  3208. 

  3209. # We enable Synapse integration via its Postgres database by default.

  3210. # When using another Identity store, you might wish to disable this and define

  3211. # your own configuration in `matrix_ma1sd_configuration_extension_yaml`.

  3212. matrix_ma1sd_synapsesql_enabled: true

  3213. matrix_ma1sd_synapsesql_type: postgresql

  3214. matrix_ma1sd_synapsesql_connection: //{{ matrix_synapse_database_host }}/{{ matrix_synapse_database_database }}?user={{ matrix_synapse_database_user | urlencode() }}&password={{ matrix_synapse_database_password | urlencode() }}

  3215. 

  3216. matrix_ma1sd_dns_overwrite_enabled: true

  3217. matrix_ma1sd_dns_overwrite_homeserver_client_name: "{{ matrix_server_fqn_matrix }}"

  3218. matrix_ma1sd_dns_overwrite_homeserver_client_value: "{{ matrix_addons_homeserver_client_api_url }}"

  3219. 

  3220. # By default, we send mail through the exim relay service.

  3221. matrix_ma1sd_threepid_medium_email_identity_from: "{{ exim_relay_sender_address }}"

  3222. matrix_ma1sd_threepid_medium_email_connectors_smtp_host: "{{ exim_relay_identifier }}"

  3223. matrix_ma1sd_threepid_medium_email_connectors_smtp_port: 8025

  3224. matrix_ma1sd_threepid_medium_email_connectors_smtp_tls: 0

  3225. 

  3226. matrix_ma1sd_self_check_validate_certificates: "{{ matrix_playbook_ssl_enabled }}"

  3227. 

  3228. matrix_ma1sd_systemd_required_services_list_auto: |

  3229.   {{

  3230.     matrix_addons_homeserver_systemd_services_list

  3231.     +

  3232.     ([devture_postgres_identifier ~ '.service'] if (devture_postgres_enabled and matrix_ma1sd_database_hostname == devture_postgres_connection_hostname) else [])

  3233.   }}

  3234. 

  3235. matrix_ma1sd_systemd_wanted_services_list_auto: |

  3236.   {{

  3237.     ([exim_relay_identifier ~ '.service'] if (exim_relay_enabled and matrix_ma1sd_threepid_medium_email_connectors_smtp_host == exim_relay_identifier) else [])

  3238.   }}

  3239. 

  3240. # Postgres is the default, except if not using internal Postgres server

  3241. matrix_ma1sd_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  3242. matrix_ma1sd_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  3243. matrix_ma1sd_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'ma1sd.db', rounds=655555) | to_uuid }}"

  3244. 

  3245. ######################################################################

  3246. #

  3247. # /matrix-ma1sd

  3248. #

  3249. ######################################################################

  3250. 

  3251. ######################################################################

  3252. #

  3253. # matrix-media-repo

  3254. #

  3255. ######################################################################

  3256. 

  3257. matrix_media_repo_enabled: false

  3258. 

  3259. matrix_media_repo_container_network: "{{ matrix_homeserver_container_network }}"

  3260. 

  3261. matrix_media_repo_container_additional_networks: |

  3262.   {{

  3263.     (

  3264.       ([matrix_homeserver_container_network] if (matrix_media_repo_container_network != matrix_homeserver_container_network) else [])

  3265.       +

  3266.       ([devture_postgres_container_network] if (devture_postgres_enabled and matrix_media_repo_database_hostname == devture_postgres_connection_hostname and devture_postgres_container_network != matrix_media_repo_container_network) else [])

  3267.       +

  3268.       ([matrix_playbook_reverse_proxyable_services_additional_network] if (matrix_playbook_reverse_proxyable_services_additional_network and matrix_media_repo_container_labels_traefik_enabled) else [])

  3269.     ) | unique

  3270.   }}

  3271. 

  3272. matrix_media_repo_container_labels_traefik_enabled: "{{ matrix_playbook_traefik_labels_enabled }}"

  3273. matrix_media_repo_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  3274. matrix_media_repo_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  3275. matrix_media_repo_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  3276. 

  3277. matrix_media_repo_container_labels_traefik_internal_media_enabled: "{{ matrix_playbook_internal_matrix_client_api_traefik_entrypoint_enabled }}"

  3278. matrix_media_repo_container_labels_traefik_internal_media_entrypoints: "{{ matrix_playbook_internal_matrix_client_api_traefik_entrypoint_name }}"

  3279. 

  3280. matrix_media_repo_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  3281. matrix_media_repo_database_username: matrix_media_repo

  3282. matrix_media_repo_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mediarepo.db', rounds=655555) | to_uuid }}"

  3283. matrix_media_repo_database_name: matrix_media_repo

  3284. 

  3285. matrix_media_repo_systemd_required_services_list_auto: |

  3286.   {{

  3287.     matrix_addons_homeserver_systemd_services_list

  3288.     +

  3289.     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled and matrix_media_repo_database_hostname == devture_postgres_connection_hostname else [])

  3290.   }}

  3291. 

  3292. # Auto configured server setup by the playbook

  3293. matrix_media_repo_homeservers_auto:

  3294.   -  # Keep the dash from this line.

  3295. 

  3296.     # This should match the server_name of your homeserver, and the Host header

  3297.     # provided to the media repo.

  3298.     name: "{{ matrix_domain }}"

  3299. 

  3300.     # The base URL to where the homeserver can actually be reached by MMR.

  3301.     csApi: "{{ matrix_homeserver_container_url }}"

  3302. 

  3303.     # The number of consecutive failures in calling this homeserver before the

  3304.     # media repository will start backing off. This defaults to 10 if not given.

  3305.     backoffAt: 10

  3306. 

  3307.     # The admin API interface supported by the homeserver. MMR uses a subset of the admin API

  3308.     # during certain operations, like attempting to purge media from a room or validating server

  3309.     # admin status. This should be set to one of "synapse", "dendrite", or "matrix". When set

  3310.     # to "matrix", most functionality requiring the admin API will not work.

  3311.     adminApiKind: "{{ 'synapse' if matrix_homeserver_implementation == 'synapse' else ('dendrite' if matrix_homeserver_implementation == 'dendrite' else 'matrix') }}"

  3312. 

  3313. matrix_media_repo_homeserver_federation_enabled: "{{ matrix_homeserver_federation_enabled }}"

  3314. 

  3315. ######################################################################

  3316. #

  3317. # /matrix-media-repo

  3318. #

  3319. ######################################################################

  3320. 

  3321. 

  3322. ########################################################################

  3323. #                                                                      #

  3324. # com.devture.ansible.role.postgres                                    #

  3325. #                                                                      #

  3326. ########################################################################

  3327. 

  3328. # To completely disable installing Postgres, use `devture_postgres_enabled: false`.

  3329. 

  3330. devture_postgres_identifier: matrix-postgres

  3331. 

  3332. devture_postgres_architecture: "{{ matrix_architecture }}"

  3333. 

  3334. devture_postgres_base_path: "{{ matrix_base_data_path }}/postgres"

  3335. 

  3336. devture_postgres_uid: "{{ matrix_user_uid }}"

  3337. devture_postgres_gid: "{{ matrix_user_gid }}"

  3338. 

  3339. devture_postgres_connection_username: matrix

  3340. devture_postgres_db_name: matrix

  3341. 

  3342. devture_postgres_systemd_services_to_stop_for_maintenance_list_auto: "{{ devture_systemd_service_manager_services_list_auto | map(attribute='name') | reject('equalto', (devture_postgres_identifier + '.service')) }}"

  3343. 

  3344. devture_postgres_max_connections: "{{ 500 if matrix_synapse_workers_enabled else 200 }}"

  3345. 

  3346. devture_postgres_managed_databases_auto: |

  3347.   {{

  3348.     ([{

  3349.       'name': matrix_synapse_database_database,

  3350.       'username': matrix_synapse_database_user,

  3351.       'password': matrix_synapse_database_password,

  3352.     }] if (matrix_synapse_enabled and matrix_synapse_database_host == devture_postgres_connection_hostname) else [])

  3353.     +

  3354.     ([{

  3355.       'name': matrix_dendrite_federation_api_database,

  3356.       'username': matrix_dendrite_database_user,

  3357.       'password': matrix_dendrite_database_password,

  3358.     },{

  3359.       'name': matrix_dendrite_key_server_database,

  3360.       'username': matrix_dendrite_database_user,

  3361.       'password': matrix_dendrite_database_password,

  3362.     },{

  3363.       'name': matrix_dendrite_media_api_database,

  3364.       'username': matrix_dendrite_database_user,

  3365.       'password': matrix_dendrite_database_password,

  3366.     },{

  3367.       'name': matrix_dendrite_room_database,

  3368.       'username': matrix_dendrite_database_user,

  3369.       'password': matrix_dendrite_database_password,

  3370.     },{

  3371.       'name': matrix_dendrite_sync_api_database,

  3372.       'username': matrix_dendrite_database_user,

  3373.       'password': matrix_dendrite_database_password,

  3374.     },{

  3375.       'name': matrix_dendrite_user_api_database,

  3376.       'username': matrix_dendrite_database_user,

  3377.       'password': matrix_dendrite_database_password,

  3378.     },{

  3379.       'name': matrix_dendrite_relay_api_database,

  3380.       'username': matrix_dendrite_database_user,

  3381.       'password': matrix_dendrite_database_password,

  3382.     },{

  3383.       'name': matrix_dendrite_push_server_database,

  3384.       'username': matrix_dendrite_database_user,

  3385.       'password': matrix_dendrite_database_password,

  3386.     },{

  3387.       'name': matrix_dendrite_mscs_database,

  3388.       'username': matrix_dendrite_database_user,

  3389.       'password': matrix_dendrite_database_password,

  3390.     }] if (matrix_dendrite_enabled and matrix_dendrite_database_hostname == devture_postgres_connection_hostname) else [])

  3391.     +

  3392.     ([{

  3393.       'name': matrix_sliding_sync_database_name,

  3394.       'username': matrix_sliding_sync_database_username,

  3395.       'password': matrix_sliding_sync_database_password,

  3396.     }] if (matrix_sliding_sync_enabled) else [])

  3397.     +

  3398.     ([{

  3399.       'name': matrix_ma1sd_database_name,

  3400.       'username': matrix_ma1sd_database_username,

  3401.       'password': matrix_ma1sd_database_password,

  3402.     }] if (matrix_ma1sd_enabled and matrix_ma1sd_database_engine == 'postgres' and matrix_ma1sd_database_hostname == devture_postgres_connection_hostname) else [])

  3403.     +

  3404.     ([{

  3405.       'name': matrix_bot_matrix_reminder_bot_database_name,

  3406.       'username': matrix_bot_matrix_reminder_bot_database_username,

  3407.       'password': matrix_bot_matrix_reminder_bot_database_password,

  3408.     }] if (matrix_bot_matrix_reminder_bot_enabled and matrix_bot_matrix_reminder_bot_database_engine == 'postgres' and matrix_bot_matrix_reminder_bot_database_hostname == devture_postgres_connection_hostname) else [])

  3409.     +

  3410.     ([{

  3411.       'name': matrix_bot_honoroit_database_name,

  3412.       'username': matrix_bot_honoroit_database_username,

  3413.       'password': matrix_bot_honoroit_database_password,

  3414.     }] if (matrix_bot_honoroit_enabled and matrix_bot_honoroit_database_engine == 'postgres' and matrix_bot_honoroit_database_hostname == devture_postgres_connection_hostname) else [])

  3415.     +

  3416.     ([{

  3417.       'name': matrix_bot_postmoogle_database_name,

  3418.       'username': matrix_bot_postmoogle_database_username,

  3419.       'password': matrix_bot_postmoogle_database_password,

  3420.     }] if (matrix_bot_postmoogle_enabled and matrix_bot_postmoogle_database_engine == 'postgres' and matrix_bot_postmoogle_database_hostname == devture_postgres_connection_hostname) else [])

  3421.     +

  3422.     ([{

  3423.       'name': matrix_bot_maubot_database_name,

  3424.       'username': matrix_bot_maubot_database_username,

  3425.       'password': matrix_bot_maubot_database_password,

  3426.     }] if (matrix_bot_maubot_enabled  and matrix_bot_maubot_database_engine == 'postgres' and matrix_bot_maubot_database_hostname == devture_postgres_connection_hostname) else [])

  3427.     +

  3428.     ([{

  3429.       'name': matrix_bot_buscarron_database_name,

  3430.       'username': matrix_bot_buscarron_database_username,

  3431.       'password': matrix_bot_buscarron_database_password,

  3432.     }] if (matrix_bot_buscarron_enabled and matrix_bot_buscarron_database_engine == 'postgres' and matrix_bot_buscarron_database_hostname == devture_postgres_connection_hostname) else [])

  3433.     +

  3434.     ([{

  3435.       'name': matrix_registration_database_name,

  3436.       'username': matrix_registration_database_username,

  3437.       'password': matrix_registration_database_password,

  3438.     }] if (matrix_registration_enabled and matrix_registration_database_engine == 'postgres' and matrix_registration_database_hostname == devture_postgres_connection_hostname) else [])

  3439.     +

  3440.     ([{

  3441.       'name': matrix_appservice_discord_database_name,

  3442.       'username': matrix_appservice_discord_database_username,

  3443.       'password': matrix_appservice_discord_database_password,

  3444.     }] if (matrix_appservice_discord_enabled and matrix_appservice_discord_database_engine == 'postgres' and matrix_appservice_discord_database_hostname == devture_postgres_connection_hostname) else [])

  3445.     +

  3446.     ([{

  3447.       'name': matrix_appservice_slack_database_name,

  3448.       'username': matrix_appservice_slack_database_username,

  3449.       'password': matrix_appservice_slack_database_password,

  3450.     }] if (matrix_appservice_slack_enabled and matrix_appservice_slack_database_engine == 'postgres' and matrix_appservice_slack_database_hostname == devture_postgres_connection_hostname) else [])

  3451.     +

  3452.     ([{

  3453.       'name': matrix_appservice_irc_database_name,

  3454.       'username': matrix_appservice_irc_database_username,

  3455.       'password': matrix_appservice_irc_database_password,

  3456.     }] if (matrix_appservice_irc_enabled and matrix_appservice_irc_database_engine == 'postgres' and matrix_appservice_irc_database_hostname == devture_postgres_connection_hostname) else [])

  3457.     +

  3458.     ([{

  3459.       'name': matrix_appservice_kakaotalk_database_name,

  3460.       'username': matrix_appservice_kakaotalk_database_username,

  3461.       'password': matrix_appservice_kakaotalk_database_password,

  3462.     }] if (matrix_appservice_kakaotalk_enabled and matrix_appservice_kakaotalk_database_engine == 'postgres' and matrix_appservice_kakaotalk_database_hostname == devture_postgres_connection_hostname) else [])

  3463.     +

  3464.     ([{

  3465.       'name': matrix_beeper_linkedin_database_name,

  3466.       'username': matrix_beeper_linkedin_database_username,

  3467.       'password': matrix_beeper_linkedin_database_password,

  3468.     }] if (matrix_beeper_linkedin_enabled and matrix_beeper_linkedin_database_engine == 'postgres' and matrix_beeper_linkedin_database_hostname == devture_postgres_connection_hostname) else [])

  3469.     +

  3470.     ([{

  3471.       'name': matrix_go_skype_bridge_database_name,

  3472.       'username': matrix_go_skype_bridge_database_username,

  3473.       'password': matrix_go_skype_bridge_database_password,

  3474.     }] if (matrix_go_skype_bridge_enabled and matrix_go_skype_bridge_database_engine == 'postgres' and matrix_go_skype_bridge_database_hostname == devture_postgres_connection_hostname) else [])

  3475.     +

  3476.     ([{

  3477.       'name': matrix_mautrix_facebook_database_name,

  3478.       'username': matrix_mautrix_facebook_database_username,

  3479.       'password': matrix_mautrix_facebook_database_password,

  3480.     }] if (matrix_mautrix_facebook_enabled and matrix_mautrix_facebook_database_engine == 'postgres' and matrix_mautrix_facebook_database_hostname == devture_postgres_connection_hostname) else [])

  3481.     +

  3482.     ([{

  3483.       'name': matrix_mautrix_hangouts_database_name,

  3484.       'username': matrix_mautrix_hangouts_database_username,

  3485.       'password': matrix_mautrix_hangouts_database_password,

  3486.     }] if (matrix_mautrix_hangouts_enabled and matrix_mautrix_hangouts_database_engine == 'postgres' and matrix_mautrix_hangouts_database_hostname == devture_postgres_connection_hostname) else [])

  3487.     +

  3488.     ([{

  3489.       'name': matrix_mautrix_googlechat_database_name,

  3490.       'username': matrix_mautrix_googlechat_database_username,

  3491.       'password': matrix_mautrix_googlechat_database_password,

  3492.     }] if (matrix_mautrix_googlechat_enabled and matrix_mautrix_googlechat_database_engine == 'postgres' and matrix_mautrix_googlechat_database_hostname == devture_postgres_connection_hostname) else [])

  3493.     +

  3494.     ([{

  3495.       'name': matrix_mautrix_instagram_database_name,

  3496.       'username': matrix_mautrix_instagram_database_username,

  3497.       'password': matrix_mautrix_instagram_database_password,

  3498.     }] if (matrix_mautrix_instagram_enabled and matrix_mautrix_instagram_database_engine == 'postgres' and matrix_mautrix_instagram_database_hostname == devture_postgres_connection_hostname) else [])

  3499.     +

  3500.     ([{

  3501.       'name': matrix_mautrix_signal_database_name,

  3502.       'username': matrix_mautrix_signal_database_username,

  3503.       'password': matrix_mautrix_signal_database_password,

  3504.     }] if (matrix_mautrix_signal_enabled and matrix_mautrix_signal_database_engine == 'postgres' and matrix_mautrix_signal_database_hostname == devture_postgres_connection_hostname) else [])

  3505.     +

  3506.     ([{

  3507.       'name': matrix_mautrix_wsproxy_syncproxy_database_name,

  3508.       'username': matrix_mautrix_wsproxy_syncproxy_database_username,

  3509.       'password': matrix_mautrix_wsproxy_syncproxy_database_password,

  3510.     }] if (matrix_mautrix_wsproxy_enabled and matrix_mautrix_wsproxy_syncproxy_database_engine == 'postgres' and matrix_mautrix_wsproxy_syncproxy_database_hostname == 'matrix-postgres') else [])

  3511.     +

  3512.     ([{

  3513.       'name': matrix_mautrix_telegram_database_name,

  3514.       'username': matrix_mautrix_telegram_database_username,

  3515.       'password': matrix_mautrix_telegram_database_password,

  3516.     }] if (matrix_mautrix_telegram_enabled and matrix_mautrix_telegram_database_engine == 'postgres' and matrix_mautrix_telegram_database_hostname == devture_postgres_connection_hostname) else [])

  3517.     +

  3518.     ([{

  3519.       'name': matrix_mautrix_twitter_database_name,

  3520.       'username': matrix_mautrix_twitter_database_username,

  3521.       'password': matrix_mautrix_twitter_database_password,

  3522.     }] if (matrix_mautrix_twitter_enabled and matrix_mautrix_twitter_database_engine == 'postgres' and matrix_mautrix_twitter_database_hostname == devture_postgres_connection_hostname) else [])

  3523.     +

  3524.     ([{

  3525.       'name': matrix_mautrix_gmessages_database_name,

  3526.       'username': matrix_mautrix_gmessages_database_username,

  3527.       'password': matrix_mautrix_gmessages_database_password,

  3528.     }] if (matrix_mautrix_gmessages_enabled and matrix_mautrix_gmessages_database_engine == 'postgres' and matrix_mautrix_gmessages_database_hostname == devture_postgres_connection_hostname) else [])

  3529.     +

  3530.     ([{

  3531.       'name': matrix_mautrix_whatsapp_database_name,

  3532.       'username': matrix_mautrix_whatsapp_database_username,

  3533.       'password': matrix_mautrix_whatsapp_database_password,

  3534.     }] if (matrix_mautrix_whatsapp_enabled and matrix_mautrix_whatsapp_database_engine == 'postgres' and matrix_mautrix_whatsapp_database_hostname == devture_postgres_connection_hostname) else [])

  3535.     +

  3536.     ([{

  3537.       'name': matrix_mautrix_discord_database_name,

  3538.       'username': matrix_mautrix_discord_database_username,

  3539.       'password': matrix_mautrix_discord_database_password,

  3540.     }] if (matrix_mautrix_discord_enabled and matrix_mautrix_discord_database_engine == 'postgres' and matrix_mautrix_discord_database_hostname == devture_postgres_connection_hostname) else [])

  3541.     +

  3542.     ([{

  3543.       'name': matrix_mautrix_slack_database_name,

  3544.       'username': matrix_mautrix_slack_database_username,

  3545.       'password': matrix_mautrix_slack_database_password,

  3546.     }] if (matrix_mautrix_slack_enabled and matrix_mautrix_slack_database_engine == 'postgres' and matrix_mautrix_slack_database_hostname == devture_postgres_connection_hostname) else [])

  3547.     +

  3548.     ([{

  3549.       'name': matrix_mx_puppet_slack_database_name,

  3550.       'username': matrix_mx_puppet_slack_database_username,

  3551.       'password': matrix_mx_puppet_slack_database_password,

  3552.     }] if (matrix_mx_puppet_slack_enabled and matrix_mx_puppet_slack_database_engine == 'postgres' and matrix_mx_puppet_slack_database_hostname == devture_postgres_connection_hostname) else [])

  3553.     +

  3554.     ([{

  3555.       'name': matrix_mx_puppet_twitter_database_name,

  3556.       'username': matrix_mx_puppet_twitter_database_username,

  3557.       'password': matrix_mx_puppet_twitter_database_password,

  3558.     }] if (matrix_mx_puppet_twitter_enabled and matrix_mx_puppet_twitter_database_engine == 'postgres' and matrix_mx_puppet_twitter_database_hostname == devture_postgres_connection_hostname) else [])

  3559.     +

  3560.     ([{

  3561.       'name': matrix_mx_puppet_instagram_database_name,

  3562.       'username': matrix_mx_puppet_instagram_database_username,

  3563.       'password': matrix_mx_puppet_instagram_database_password,

  3564.     }] if (matrix_mx_puppet_instagram_enabled and matrix_mx_puppet_instagram_database_engine == 'postgres' and matrix_mx_puppet_instagram_database_hostname == devture_postgres_connection_hostname) else [])

  3565.     +

  3566.     ([{

  3567.       'name': matrix_mx_puppet_discord_database_name,

  3568.       'username': matrix_mx_puppet_discord_database_username,

  3569.       'password': matrix_mx_puppet_discord_database_password,

  3570.     }] if (matrix_mx_puppet_discord_enabled  and matrix_mx_puppet_discord_database_engine == 'postgres' and matrix_mx_puppet_discord_database_hostname == devture_postgres_connection_hostname) else [])

  3571.     +

  3572.     ([{

  3573.       'name': matrix_mx_puppet_steam_database_name,

  3574.       'username': matrix_mx_puppet_steam_database_username,

  3575.       'password': matrix_mx_puppet_steam_database_password,

  3576.     }] if (matrix_mx_puppet_steam_enabled and matrix_mx_puppet_steam_database_engine == 'postgres' and matrix_mx_puppet_steam_database_hostname == devture_postgres_connection_hostname) else [])

  3577.     +

  3578.     ([{

  3579.       'name': matrix_mx_puppet_groupme_database_name,

  3580.       'username': matrix_mx_puppet_groupme_database_username,

  3581.       'password': matrix_mx_puppet_groupme_database_password,

  3582.     }] if (matrix_mx_puppet_groupme_enabled and matrix_mx_puppet_groupme_database_engine == 'postgres' and matrix_mx_puppet_groupme_database_hostname == devture_postgres_connection_hostname) else [])

  3583.     +

  3584.     ([{

  3585.       'name': matrix_dimension_database_name,

  3586.       'username': matrix_dimension_database_username,

  3587.       'password': matrix_dimension_database_password,

  3588.     }] if (matrix_dimension_enabled and matrix_dimension_database_engine == 'postgres' and matrix_dimension_database_hostname == devture_postgres_connection_hostname) else [])

  3589.     +

  3590.     ([{

  3591.       'name': etherpad_database_name,

  3592.       'username': etherpad_database_username,

  3593.       'password': etherpad_database_password,

  3594.     }] if (etherpad_enabled and etherpad_database_engine == 'postgres' and etherpad_database_hostname == devture_postgres_connection_hostname) else [])

  3595.     +

  3596.     ([{

  3597.       'name': prometheus_postgres_exporter_database_name,

  3598.       'username': prometheus_postgres_exporter_database_username,

  3599.       'password': prometheus_postgres_exporter_database_password,

  3600.     }] if (prometheus_postgres_exporter_enabled and prometheus_postgres_exporter_database_hostname == devture_postgres_connection_hostname) else [])

  3601.     +

  3602.     ([{

  3603.       'name': matrix_media_repo_database_name,

  3604.       'username': matrix_media_repo_database_username,

  3605.       'password': matrix_media_repo_database_password,

  3606.     }] if (matrix_media_repo_enabled and matrix_media_repo_database_hostname == devture_postgres_connection_hostname) else [])

  3607. 

  3608.    }}

  3609. 

  3610. ########################################################################

  3611. #                                                                      #

  3612. # /com.devture.ansible.role.postgres                                   #

  3613. #                                                                      #

  3614. ########################################################################

  3615. 

  3616. 

  3617. ########################################################################

  3618. #                                                                      #

  3619. # com.devture.ansible.role.postgres_backup                             #

  3620. #                                                                      #

  3621. ########################################################################

  3622. 

  3623. devture_postgres_backup_enabled: false

  3624. 

  3625. devture_postgres_backup_identifier: matrix-postgres-backup

  3626. 

  3627. devture_postgres_backup_architecture: "{{ matrix_architecture }}"

  3628. 

  3629. devture_postgres_backup_base_path: "{{ matrix_base_data_path }}/postgres-backup"

  3630. 

  3631. devture_postgres_backup_systemd_required_services_list_auto: |

  3632.   {{

  3633.     ([(devture_postgres_identifier + '.service')] if (devture_postgres_enabled and devture_postgres_backup_connection_hostname == devture_postgres_connection_hostname) else [])

  3634.   }}

  3635. 

  3636. devture_postgres_backup_container_network: "{{ (devture_postgres_container_network if (devture_postgres_enabled and devture_postgres_backup_connection_hostname == devture_postgres_connection_hostname) else devture_postgres_backup_identifier) }}"

  3637. 

  3638. devture_postgres_backup_container_additional_networks_auto: |-

  3639.   {{

  3640.       ([devture_postgres_container_network] if (devture_postgres_enabled and devture_postgres_backup_connection_hostname == devture_postgres_connection_hostname and devture_postgres_backup_container_network != devture_postgres_container_network) else [])

  3641.   }}

  3642. 

  3643. devture_postgres_backup_uid: "{{ matrix_user_uid }}"

  3644. devture_postgres_backup_gid: "{{ matrix_user_gid }}"

  3645. 

  3646. devture_postgres_backup_connection_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  3647. devture_postgres_backup_connection_port: "{{ devture_postgres_connection_port if devture_postgres_enabled else 5432 }}"

  3648. devture_postgres_backup_connection_username: "{{ devture_postgres_connection_username if devture_postgres_enabled else '' }}"

  3649. devture_postgres_backup_connection_password: "{{ devture_postgres_connection_password if devture_postgres_enabled else '' }}"

  3650. 

  3651. devture_postgres_backup_postgres_data_path: "{{ devture_postgres_data_path if devture_postgres_enabled else '' }}"

  3652. devture_postgres_backup_postgres_role_include_name: galaxy/postgres

  3653. 

  3654. devture_postgres_backup_databases: "{{ devture_postgres_managed_databases | map(attribute='name') if devture_postgres_enabled else [] }}"

  3655. 

  3656. ########################################################################

  3657. #                                                                      #

  3658. # /com.devture.ansible.role.postgres_backup                            #

  3659. #                                                                      #

  3660. ########################################################################

  3661. 

  3662. 

  3663. ######################################################################

  3664. #

  3665. # matrix-sygnal

  3666. #

  3667. ######################################################################

  3668. 

  3669. # Most people don't need their own push-server, because they also need their own app to utilize it from.

  3670. matrix_sygnal_enabled: false

  3671. 

  3672. # If someone instals Prometheus via the playbook, they most likely wish to monitor Sygnal.

  3673. matrix_sygnal_metrics_prometheus_enabled: "{{ prometheus_enabled }}"

  3674. 

  3675. matrix_sygnal_hostname: "{{ matrix_server_fqn_sygnal }}"

  3676. 

  3677. matrix_sygnal_container_network: "{{ matrix_homeserver_container_network }}"

  3678. 

  3679. matrix_sygnal_container_additional_networks: "{{ [matrix_playbook_reverse_proxyable_services_additional_network] if matrix_playbook_reverse_proxyable_services_additional_network else [] }}"

  3680. 

  3681. matrix_sygnal_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '6000') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  3682. 

  3683. matrix_sygnal_container_labels_traefik_enabled: "{{ matrix_playbook_traefik_labels_enabled }}"

  3684. matrix_sygnal_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  3685. matrix_sygnal_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  3686. matrix_sygnal_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  3687. 

  3688. ######################################################################

  3689. #

  3690. # /matrix-sygnal

  3691. #

  3692. ######################################################################

  3693. 

  3694. ######################################################################

  3695. #

  3696. # etke/ntfy

  3697. #

  3698. ######################################################################

  3699. 

  3700. ntfy_enabled: false

  3701. 

  3702. ntfy_identifier: matrix-ntfy

  3703. 

  3704. ntfy_base_path: "{{ matrix_base_data_path }}/ntfy"

  3705. 

  3706. ntfy_uid: "{{ matrix_user_uid }}"

  3707. ntfy_gid: "{{ matrix_user_gid }}"

  3708. 

  3709. ntfy_hostname: "{{ matrix_server_fqn_ntfy }}"

  3710. 

  3711. ntfy_container_additional_networks: "{{ [matrix_playbook_reverse_proxyable_services_additional_network] if matrix_playbook_reverse_proxyable_services_additional_network else [] }}"

  3712. 

  3713. ntfy_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '2586') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  3714. 

  3715. ntfy_container_labels_traefik_enabled: "{{ matrix_playbook_traefik_labels_enabled }}"

  3716. ntfy_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  3717. ntfy_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  3718. ntfy_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  3719. 

  3720. ntfy_visitor_request_limit_exempt_hosts_hostnames_auto: |

  3721.   {{

  3722.     [matrix_server_fqn_matrix]

  3723.   }}

  3724. 

  3725. ######################################################################

  3726. #

  3727. # /etky/ntfy

  3728. #

  3729. ######################################################################

  3730. 

  3731. ######################################################################

  3732. #

  3733. # etke/redis

  3734. #

  3735. ######################################################################

  3736. 

  3737. redis_enabled: "{{ matrix_synapse_workers_enabled or (matrix_hookshot_enabled and matrix_hookshot_experimental_encryption_enabled) }}"

  3738. 

  3739. redis_identifier: matrix-redis

  3740. 

  3741. redis_uid: "{{ matrix_user_uid }}"

  3742. redis_gid: "{{ matrix_user_gid }}"

  3743. 

  3744. redis_base_path: "{{ matrix_base_data_path }}/redis"

  3745. 

  3746. ######################################################################

  3747. #

  3748. # /etle/redis

  3749. #

  3750. ######################################################################

  3751. 

  3752. ######################################################################

  3753. #

  3754. # matrix-client-element

  3755. #

  3756. ######################################################################

  3757. 

  3758. # By default, this playbook installs the Element web UI on the `matrix_server_fqn_element` domain.

  3759. # If you wish to connect to your Matrix server by other means, you may wish to disable this.

  3760. matrix_client_element_enabled: true

  3761. 

  3762. matrix_client_element_container_image_self_build: "{{ matrix_architecture not in ['arm64', 'amd64'] }}"

  3763. 

  3764. matrix_client_element_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '8765') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  3765. 

  3766. matrix_client_element_container_network: "{{ matrix_addons_container_network }}"

  3767. 

  3768. matrix_client_element_container_additional_networks: "{{ [matrix_playbook_reverse_proxyable_services_additional_network] if (matrix_client_element_container_labels_traefik_enabled and matrix_playbook_reverse_proxyable_services_additional_network) else [] }}"

  3769. 

  3770. matrix_client_element_container_labels_traefik_enabled: "{{ matrix_playbook_reverse_proxy_type in ['playbook-managed-traefik', 'other-traefik-container'] }}"

  3771. matrix_client_element_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  3772. matrix_client_element_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  3773. matrix_client_element_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  3774. 

  3775. matrix_client_element_default_hs_url: "{{ matrix_homeserver_url }}"

  3776. matrix_client_element_default_is_url: "{{ matrix_identity_server_url }}"

  3777. 

  3778. # Use Dimension if enabled, otherwise fall back to Scalar

  3779. matrix_client_element_integrations_ui_url: "{{ matrix_dimension_integrations_ui_url if matrix_dimension_enabled else 'https://scalar.vector.im/' }}"

  3780. matrix_client_element_integrations_rest_url: "{{ matrix_dimension_integrations_rest_url if matrix_dimension_enabled else 'https://scalar.vector.im/api' }}"

  3781. matrix_client_element_integrations_widgets_urls: "{{ matrix_dimension_integrations_widgets_urls if matrix_dimension_enabled else ['https://scalar.vector.im/api'] }}"

  3782. matrix_client_element_integrations_jitsi_widget_url: "{{ matrix_dimension_integrations_jitsi_widget_url if matrix_dimension_enabled else 'https://scalar.vector.im/api/widgets/jitsi.html' }}"

  3783. 

  3784. matrix_client_element_self_check_validate_certificates: "{{ matrix_playbook_ssl_enabled }}"

  3785. 

  3786. matrix_client_element_registration_enabled: "{{ matrix_synapse_enable_registration }}"

  3787. 

  3788. matrix_client_element_enable_presence_by_hs_url: |

  3789.   {{

  3790.     none

  3791.     if matrix_synapse_presence_enabled

  3792.     else {matrix_client_element_default_hs_url: false}

  3793.   }}

  3794. 

  3795. matrix_client_element_welcome_user_id: ~

  3796. 

  3797. matrix_client_element_jitsi_preferred_domain: "{{ matrix_server_fqn_jitsi if jitsi_enabled else '' }}"

  3798. 

  3799. ######################################################################

  3800. #

  3801. # /matrix-client-element

  3802. #

  3803. ######################################################################

  3804. 

  3805. ######################################################################

  3806. #

  3807. # matrix-client-hydrogen

  3808. #

  3809. ######################################################################

  3810. 

  3811. matrix_client_hydrogen_enabled: false

  3812. 

  3813. matrix_client_hydrogen_container_image_self_build: "{{ matrix_architecture not in ['amd64'] }}"

  3814. 

  3815. matrix_client_hydrogen_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '8768') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  3816. 

  3817. matrix_client_hydrogen_container_network: "{{ matrix_addons_container_network }}"

  3818. 

  3819. matrix_client_hydrogen_container_additional_networks: "{{ [matrix_playbook_reverse_proxyable_services_additional_network] if (matrix_client_hydrogen_container_labels_traefik_enabled and matrix_playbook_reverse_proxyable_services_additional_network) else [] }}"

  3820. 

  3821. matrix_client_hydrogen_container_labels_traefik_enabled: "{{ matrix_playbook_reverse_proxy_type in ['playbook-managed-traefik', 'other-traefik-container'] }}"

  3822. matrix_client_hydrogen_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  3823. matrix_client_hydrogen_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  3824. matrix_client_hydrogen_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  3825. 

  3826. matrix_client_hydrogen_default_hs_url: "{{ matrix_homeserver_url }}"

  3827. 

  3828. matrix_client_hydrogen_self_check_validate_certificates: "{{ matrix_playbook_ssl_enabled }}"

  3829. 

  3830. ######################################################################

  3831. #

  3832. # /matrix-client-hydrogen

  3833. #

  3834. ######################################################################

  3835. 

  3836. ######################################################################

  3837. #

  3838. # matrix-client-cinny

  3839. #

  3840. ######################################################################

  3841. 

  3842. matrix_client_cinny_enabled: false

  3843. 

  3844. matrix_client_cinny_container_image_self_build: "{{ matrix_architecture not in ['arm64', 'amd64'] }}"

  3845. 

  3846. matrix_client_cinny_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '8080') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  3847. 

  3848. matrix_client_cinny_container_network: "{{ matrix_addons_container_network }}"

  3849. 

  3850. matrix_client_cinny_container_additional_networks: "{{ [matrix_playbook_reverse_proxyable_services_additional_network] if (matrix_client_cinny_container_labels_traefik_enabled and matrix_playbook_reverse_proxyable_services_additional_network) else [] }}"

  3851. 

  3852. matrix_client_cinny_container_labels_traefik_enabled: "{{ matrix_playbook_reverse_proxy_type in ['playbook-managed-traefik', 'other-traefik-container'] }}"

  3853. matrix_client_cinny_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  3854. matrix_client_cinny_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  3855. matrix_client_cinny_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  3856. 

  3857. matrix_client_cinny_default_hs_url: "{{ matrix_homeserver_url }}"

  3858. 

  3859. matrix_client_cinny_self_check_validate_certificates: "{{ matrix_playbook_ssl_enabled }}"

  3860. 

  3861. ######################################################################

  3862. #

  3863. # /matrix-client-cinny

  3864. #

  3865. ######################################################################

  3866. 

  3867. ######################################################################

  3868. #

  3869. # matrix-client-schildichat

  3870. #

  3871. ######################################################################

  3872. 

  3873. matrix_client_schildichat_enabled: false

  3874. 

  3875. matrix_client_schildichat_container_image_self_build: "{{ matrix_architecture not in ['arm64', 'amd64'] }}"

  3876. 

  3877. matrix_client_schildichat_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '8765') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  3878. 

  3879. matrix_client_schildichat_container_network: "{{ matrix_addons_container_network }}"

  3880. 

  3881. matrix_client_schildichat_container_additional_networks: "{{ [matrix_playbook_reverse_proxyable_services_additional_network] if (matrix_client_schildichat_container_labels_traefik_enabled and matrix_playbook_reverse_proxyable_services_additional_network) else [] }}"

  3882. 

  3883. matrix_client_schildichat_container_labels_traefik_enabled: "{{ matrix_playbook_reverse_proxy_type in ['playbook-managed-traefik', 'other-traefik-container'] }}"

  3884. matrix_client_schildichat_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  3885. matrix_client_schildichat_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  3886. matrix_client_schildichat_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  3887. 

  3888. matrix_client_schildichat_default_hs_url: "{{ matrix_homeserver_url }}"

  3889. matrix_client_schildichat_default_is_url: "{{ matrix_identity_server_url }}"

  3890. 

  3891. # Use Dimension if enabled, otherwise fall back to Scalar

  3892. matrix_client_schildichat_integrations_ui_url: "{{ matrix_dimension_integrations_ui_url if matrix_dimension_enabled else 'https://scalar.vector.im/' }}"

  3893. matrix_client_schildichat_integrations_rest_url: "{{ matrix_dimension_integrations_rest_url if matrix_dimension_enabled else 'https://scalar.vector.im/api' }}"

  3894. matrix_client_schildichat_integrations_widgets_urls: "{{ matrix_dimension_integrations_widgets_urls if matrix_dimension_enabled else ['https://scalar.vector.im/api'] }}"

  3895. matrix_client_schildichat_integrations_jitsi_widget_url: "{{ matrix_dimension_integrations_jitsi_widget_url if matrix_dimension_enabled else 'https://scalar.vector.im/api/widgets/jitsi.html' }}"

  3896. 

  3897. matrix_client_schildichat_self_check_validate_certificates: "{{ matrix_playbook_ssl_enabled }}"

  3898. 

  3899. matrix_client_schildichat_registration_enabled: "{{ matrix_synapse_enable_registration }}"

  3900. 

  3901. matrix_client_schildichat_enable_presence_by_hs_url: |

  3902.   {{

  3903.     none

  3904.     if matrix_synapse_presence_enabled

  3905.     else {matrix_client_schildichat_default_hs_url: false}

  3906.   }}

  3907. 

  3908. matrix_client_schildichat_welcome_user_id: ~

  3909. 

  3910. matrix_client_schildichat_jitsi_preferred_domain: "{{ matrix_server_fqn_jitsi if jitsi_enabled else '' }}"

  3911. 

  3912. ######################################################################

  3913. #

  3914. # /matrix-client-schildichat

  3915. #

  3916. ######################################################################

  3917. 

  3918. ######################################################################

  3919. #

  3920. # matrix-synapse

  3921. #

  3922. ######################################################################

  3923. 

  3924. matrix_synapse_enabled: "{{ matrix_homeserver_implementation == 'synapse' }}"

  3925. 

  3926. matrix_synapse_username: "{{ matrix_user_username }}"

  3927. matrix_synapse_uid: "{{ matrix_user_uid }}"

  3928. matrix_synapse_gid: "{{ matrix_user_gid }}"

  3929. 

  3930. matrix_synapse_federation_enabled: "{{ matrix_homeserver_federation_enabled }}"

  3931. 

  3932. matrix_synapse_container_image_self_build: "{{ matrix_architecture not in ['arm64', 'amd64'] }}"

  3933. 

  3934. matrix_synapse_account_threepid_delegates_msisdn_mas1sd_url: "{{ ('http://matrix-ma1sd:' + matrix_ma1sd_container_port| string) }}"

  3935. 

  3936. # When ma1sd is enabled, we can use it to validate phone numbers. It's something that the homeserver cannot do by itself.

  3937. matrix_synapse_account_threepid_delegates_msisdn: "{{ matrix_synapse_account_threepid_delegates_msisdn_mas1sd_url if matrix_ma1sd_enabled else '' }}"

  3938. 

  3939. # For exposing the Matrix Federation API's TLS port (HTTPS) to the internet on all network interfaces.

  3940. matrix_synapse_container_federation_api_tls_host_bind_port: "{{ matrix_federation_public_port if (matrix_synapse_federation_enabled and matrix_synapse_tls_federation_listener_enabled) else '' }}"

  3941. #

  3942. # For exposing the Synapse Metrics API's port (plain HTTP) to the local host.

  3943. matrix_synapse_container_metrics_api_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '9100') if matrix_synapse_metrics_enabled and matrix_playbook_service_host_bind_interface_prefix else '' }}"

  3944. #

  3945. # For exposing the Synapse Manhole port (plain HTTP) to the local host.

  3946. matrix_synapse_container_manhole_api_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '9000') if matrix_synapse_metrics_enabled and matrix_playbook_service_host_bind_interface_prefix else '' }}"

  3947. 

  3948. matrix_synapse_container_network: "{{ matrix_homeserver_container_network }}"

  3949. 

  3950. matrix_synapse_container_additional_networks: |

  3951.   {{

  3952.     (

  3953.       ([matrix_playbook_reverse_proxyable_services_additional_network] if matrix_synapse_container_labels_traefik_enabled and matrix_playbook_reverse_proxyable_services_additional_network else [])

  3954.       +

  3955.       ([devture_postgres_container_network] if (devture_postgres_enabled and devture_postgres_container_network != matrix_synapse_container_network and matrix_synapse_database_host == devture_postgres_connection_hostname) else [])

  3956.       +

  3957.       ([redis_container_network] if matrix_synapse_redis_enabled and matrix_synapse_redis_host == redis_identifier else [])

  3958.       +

  3959.       ([exim_relay_container_network] if (exim_relay_enabled and matrix_synapse_email_enabled and matrix_synapse_email_smtp_host == exim_relay_identifier and matrix_synapse_container_network != exim_relay_container_network) else [])

  3960.       +

  3961.       ([matrix_ma1sd_container_network] if (matrix_ma1sd_enabled and matrix_synapse_account_threepid_delegates_msisdn == matrix_synapse_account_threepid_delegates_msisdn_mas1sd_url and matrix_synapse_container_network != matrix_ma1sd_container_network) else [])

  3962.     ) | unique

  3963.   }}

  3964. 

  3965. matrix_synapse_container_labels_traefik_enabled: "{{ matrix_playbook_reverse_proxy_type in ['playbook-managed-traefik', 'other-traefik-container'] }}"

  3966. matrix_synapse_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  3967. matrix_synapse_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  3968. matrix_synapse_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  3969. matrix_synapse_container_labels_traefik_hostname: "{{ matrix_server_fqn_matrix }}"

  3970. 

  3971. matrix_synapse_container_labels_matrix_labels_enabled: "{{ not matrix_synapse_workers_enabled }}"

  3972. 

  3973. matrix_synapse_container_labels_public_client_root_redirection_enabled: "{{ matrix_synapse_container_labels_public_client_root_redirection_url != '' }}"

  3974. matrix_synapse_container_labels_public_client_root_redirection_url: "{{ (('https://' if matrix_playbook_ssl_enabled else 'http://') + matrix_server_fqn_element) if matrix_client_element_enabled else '' }}"

  3975. 

  3976. matrix_synapse_container_labels_public_client_synapse_admin_api_enabled: "{{ matrix_synapse_admin_enabled }}"

  3977. 

  3978. matrix_synapse_container_labels_public_federation_api_traefik_entrypoints: "{{ matrix_federation_traefik_entrypoint_name }}"

  3979. matrix_synapse_container_labels_public_federation_api_traefik_tls: "{{ matrix_federation_traefik_entrypoint_tls }}"

  3980. matrix_synapse_container_labels_public_federation_api_traefik_tls_certResolver: "{{ matrix_synapse_container_labels_traefik_tls_certResolver }}"  # noqa var-naming

  3981. 

  3982. matrix_synapse_container_labels_public_metrics_middleware_basic_auth_enabled: "{{ matrix_metrics_exposure_http_basic_auth_enabled }}"

  3983. matrix_synapse_container_labels_public_metrics_middleware_basic_auth_users: "{{ matrix_metrics_exposure_http_basic_auth_users }}"

  3984. 

  3985. matrix_synapse_container_labels_internal_client_api_enabled: "{{ matrix_playbook_internal_matrix_client_api_traefik_entrypoint_enabled }}"

  3986. matrix_synapse_container_labels_internal_client_api_traefik_entrypoints: "{{ matrix_playbook_internal_matrix_client_api_traefik_entrypoint_name }}"

  3987. 

  3988. # For exposing the Synapse worker (and metrics) ports to the local host.

  3989. matrix_synapse_workers_container_host_bind_address: "{{ matrix_playbook_service_host_bind_interface_prefix[0:-1] if (matrix_synapse_workers_enabled and matrix_playbook_service_host_bind_interface_prefix) else '' }}"

  3990. 

  3991. matrix_synapse_database_host: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  3992. matrix_synapse_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'synapse.db', rounds=655555) | to_uuid }}"

  3993. 

  3994. matrix_synapse_macaroon_secret_key: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'synapse.mac', rounds=655555) | to_uuid }}"

  3995. 

  3996. # We do not enable TLS in Synapse by default, since it's handled by Traefik.

  3997. matrix_synapse_tls_federation_listener_enabled: false

  3998. matrix_synapse_tls_certificate_path: ~

  3999. matrix_synapse_tls_private_key_path: ~

  4000. 

  4001. matrix_synapse_federation_port_openid_resource_required: "{{ not matrix_synapse_federation_enabled and (matrix_dimension_enabled or matrix_ma1sd_enabled or matrix_user_verification_service_enabled) }}"

  4002. 

  4003. # If someone instals Prometheus via the playbook, they most likely wish to monitor Synapse.

  4004. matrix_synapse_metrics_enabled: "{{ prometheus_enabled }}"

  4005. 

  4006. matrix_synapse_metrics_proxying_enabled: "{{ matrix_synapse_metrics_enabled and matrix_metrics_exposure_enabled }}"

  4007. matrix_synapse_metrics_proxying_hostname: "{{ matrix_metrics_exposure_hostname }}"

  4008. matrix_synapse_metrics_proxying_path_prefix: "{{ matrix_metrics_exposure_path_prefix }}/synapse"

  4009. 

  4010. matrix_synapse_email_enabled: "{{ exim_relay_enabled }}"

  4011. matrix_synapse_email_smtp_host: "{{ exim_relay_identifier }}"

  4012. matrix_synapse_email_smtp_port: 8025

  4013. matrix_synapse_email_smtp_require_transport_security: false

  4014. matrix_synapse_email_notif_from: "Matrix <{{ exim_relay_sender_address }}>"

  4015. 

  4016. matrix_synapse_turn_uris: |

  4017.   {{

  4018.     []

  4019.     +

  4020.     [

  4021.       'turns:' + matrix_server_fqn_matrix + '?transport=udp',

  4022.       'turns:' + matrix_server_fqn_matrix + '?transport=tcp',

  4023.     ] if matrix_coturn_enabled and matrix_coturn_tls_enabled else []

  4024.     +

  4025.     [

  4026.       'turn:' + matrix_server_fqn_matrix + '?transport=udp',

  4027.       'turn:' + matrix_server_fqn_matrix + '?transport=tcp',

  4028.     ] if matrix_coturn_enabled else []

  4029.   }}

  4030. 

  4031. matrix_synapse_turn_shared_secret: "{{ matrix_coturn_turn_static_auth_secret if matrix_coturn_enabled else '' }}"

  4032. 

  4033. matrix_synapse_self_check_validate_certificates: "{{ matrix_playbook_ssl_enabled }}"

  4034. 

  4035. matrix_synapse_systemd_required_services_list_auto: |

  4036.   {{

  4037.     ([devture_postgres_identifier ~ '.service'] if (devture_postgres_enabled and devture_postgres_container_network != matrix_synapse_container_network and matrix_synapse_database_host == devture_postgres_connection_hostname) else [])

  4038.     +

  4039.     ([redis_identifier ~ '.service'] if matrix_synapse_redis_enabled and matrix_synapse_redis_host == redis_identifier else [])

  4040.     +

  4041.     (['matrix-goofys.service'] if matrix_s3_media_store_enabled else [])

  4042.   }}

  4043. 

  4044. matrix_synapse_systemd_wanted_services_list_auto: |

  4045.   {{

  4046.     (['matrix-coturn.service'] if matrix_coturn_enabled else [])

  4047.     +

  4048.     ([exim_relay_identifier ~ '.service'] if exim_relay_enabled else [])

  4049.   }}

  4050. 

  4051. # Synapse workers (used for parallel load-scaling) need Redis for IPC.

  4052. matrix_synapse_redis_enabled: "{{ redis_enabled }}"

  4053. matrix_synapse_redis_host: "{{ redis_identifier if redis_enabled else '' }}"

  4054. matrix_synapse_redis_password: "{{ redis_connection_password if redis_enabled else '' }}"

  4055. 

  4056. matrix_synapse_container_extra_arguments_auto: "{{ matrix_homeserver_container_extra_arguments_auto }}"

  4057. matrix_synapse_app_service_config_files_auto: "{{ matrix_homeserver_app_service_config_files_auto }}"

  4058. 

  4059. # Disable creation of media repository Synapse worker when using media-repo

  4060. matrix_synapse_ext_media_repo_enabled: "{{ matrix_media_repo_enabled }}"

  4061. 

  4062. ######################################################################

  4063. #

  4064. # /matrix-synapse

  4065. #

  4066. ######################################################################

  4067. 

  4068. 

  4069. ######################################################################

  4070. #

  4071. # matrix-synapse-auto-compressor

  4072. #

  4073. ######################################################################

  4074. 

  4075. # Not enabled by default, for now

  4076. matrix_synapse_auto_compressor_enabled: false

  4077. 

  4078. matrix_synapse_auto_compressor_container_image_self_build: "{{ matrix_architecture not in ['amd64'] }}"

  4079. 

  4080. matrix_synapse_auto_compressor_container_network: "{{ (devture_postgres_container_network if (devture_postgres_enabled and matrix_synapse_auto_compressor_database_hostname == matrix_synapse_database_host and matrix_synapse_database_host == devture_postgres_connection_hostname) else 'matrix-synapse-auto-compressor') }}"

  4081. 

  4082. matrix_synapse_auto_compressor_database_username: "{{ matrix_synapse_database_user if matrix_synapse_enabled else '' }}"

  4083. matrix_synapse_auto_compressor_database_password: "{{ matrix_synapse_database_password if matrix_synapse_enabled else '' }}"

  4084. matrix_synapse_auto_compressor_database_hostname: "{{ matrix_synapse_database_host if matrix_synapse_enabled else '' }}"

  4085. matrix_synapse_auto_compressor_database_port: "{{ matrix_synapse_database_port if matrix_synapse_enabled else '5432' }}"

  4086. matrix_synapse_auto_compressor_database_name: "{{ matrix_synapse_database_database if matrix_synapse_enabled else '' }}"

  4087. 

  4088. matrix_synapse_auto_compressor_systemd_required_services_list_auto: |

  4089.   {{

  4090.     ([devture_postgres_identifier ~ '.service'] if (matrix_synapse_auto_compressor_container_network == devture_postgres_container_network) else [])

  4091.   }}

  4092. 

  4093. ######################################################################

  4094. #

  4095. # /matrix-synapse-auto-compressor

  4096. #

  4097. ######################################################################

  4098. 

  4099. 

  4100. ######################################################################

  4101. #

  4102. # matrix-synapse-reverse-proxy-companion

  4103. #

  4104. ######################################################################

  4105. 

  4106. matrix_synapse_reverse_proxy_companion_enabled: "{{ matrix_synapse_enabled and matrix_synapse_workers_enabled }}"

  4107. 

  4108. matrix_synapse_reverse_proxy_companion_container_network: "{{ matrix_synapse_container_network }}"

  4109. 

  4110. matrix_synapse_reverse_proxy_companion_container_additional_networks: |

  4111.   {{

  4112.     (

  4113.       ([matrix_playbook_reverse_proxyable_services_additional_network] if matrix_synapse_reverse_proxy_companion_container_labels_traefik_enabled and matrix_playbook_reverse_proxyable_services_additional_network else [])

  4114.       +

  4115.       ([matrix_prometheus_nginxlog_exporter_container_network] if (matrix_prometheus_nginxlog_exporter_enabled and matrix_prometheus_nginxlog_exporter_container_network != matrix_synapse_reverse_proxy_companion_container_network) else [])

  4116.       +

  4117.       ([] if matrix_homeserver_container_network in ['', matrix_synapse_reverse_proxy_companion_container_network] else [matrix_homeserver_container_network])

  4118.     ) | unique

  4119.   }}

  4120. 

  4121. matrix_synapse_reverse_proxy_companion_client_api_client_max_body_size_mb: "{{ matrix_synapse_max_upload_size_mb }}"

  4122. 

  4123. matrix_synapse_reverse_proxy_companion_container_client_api_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '8008') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  4124. matrix_synapse_reverse_proxy_companion_container_federation_api_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '8048') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  4125. 

  4126. matrix_synapse_reverse_proxy_companion_container_labels_traefik_enabled: "{{ matrix_playbook_reverse_proxy_type in ['playbook-managed-traefik', 'other-traefik-container'] }}"

  4127. matrix_synapse_reverse_proxy_companion_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  4128. matrix_synapse_reverse_proxy_companion_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  4129. matrix_synapse_reverse_proxy_companion_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  4130. matrix_synapse_reverse_proxy_companion_container_labels_traefik_hostname: "{{ matrix_server_fqn_matrix }}"

  4131. 

  4132. matrix_synapse_reverse_proxy_companion_container_labels_public_client_synapse_client_api_enabled: "{{ matrix_synapse_container_labels_public_client_synapse_client_api_enabled }}"

  4133. matrix_synapse_reverse_proxy_companion_container_labels_public_client_synapse_admin_api_enabled: "{{ matrix_synapse_container_labels_public_client_synapse_admin_api_enabled }}"

  4134. 

  4135. matrix_synapse_reverse_proxy_companion_container_labels_public_federation_api_traefik_entrypoints: "{{ matrix_synapse_container_labels_public_federation_api_traefik_entrypoints }}"

  4136. matrix_synapse_reverse_proxy_companion_container_labels_public_federation_api_traefik_tls: "{{ matrix_synapse_container_labels_public_federation_api_traefik_tls }}"

  4137. 

  4138. matrix_synapse_reverse_proxy_companion_container_labels_internal_client_api_enabled: "{{ matrix_synapse_container_labels_internal_client_api_enabled }}"

  4139. matrix_synapse_reverse_proxy_companion_container_labels_internal_client_api_traefik_entrypoints: "{{ matrix_synapse_container_labels_internal_client_api_traefik_entrypoints }}"

  4140. 

  4141. matrix_synapse_reverse_proxy_companion_synapse_workers_enabled: "{{ matrix_synapse_workers_enabled }}"

  4142. matrix_synapse_reverse_proxy_companion_synapse_workers_list: "{{ matrix_synapse_workers_enabled_list }}"

  4143. matrix_synapse_reverse_proxy_companion_synapse_room_worker_client_server_locations: "{{ matrix_synapse_workers_room_worker_client_server_endpoints }}"

  4144. matrix_synapse_reverse_proxy_companion_synapse_room_worker_federation_locations: "{{ matrix_synapse_workers_room_worker_federation_endpoints }}"

  4145. matrix_synapse_reverse_proxy_companion_synapse_sync_worker_client_server_locations: "{{ matrix_synapse_workers_sync_worker_client_server_endpoints }}"

  4146. matrix_synapse_reverse_proxy_companion_synapse_client_reader_client_server_locations: "{{ matrix_synapse_workers_client_reader_client_server_endpoints }}"

  4147. matrix_synapse_reverse_proxy_companion_synapse_federation_reader_federation_locations: "{{ matrix_synapse_workers_federation_reader_federation_endpoints }}"

  4148. matrix_synapse_reverse_proxy_companion_synapse_generic_worker_client_server_locations: "{{ matrix_synapse_workers_generic_worker_client_server_endpoints }}"

  4149. matrix_synapse_reverse_proxy_companion_synapse_generic_worker_federation_locations: "{{ matrix_synapse_workers_generic_worker_federation_endpoints }}"

  4150. matrix_synapse_reverse_proxy_companion_synapse_stream_writer_typing_stream_worker_client_server_locations: "{{ matrix_synapse_workers_stream_writer_typing_stream_worker_client_server_endpoints }}"

  4151. matrix_synapse_reverse_proxy_companion_synapse_stream_writer_to_device_stream_worker_client_server_locations: "{{ matrix_synapse_workers_stream_writer_to_device_stream_worker_client_server_endpoints }}"

  4152. matrix_synapse_reverse_proxy_companion_synapse_stream_writer_account_data_stream_worker_client_server_locations: "{{ matrix_synapse_workers_stream_writer_account_data_stream_worker_client_server_endpoints }}"

  4153. matrix_synapse_reverse_proxy_companion_synapse_stream_writer_receipts_stream_worker_client_server_locations: "{{ matrix_synapse_workers_stream_writer_receipts_stream_worker_client_server_endpoints }}"

  4154. matrix_synapse_reverse_proxy_companion_synapse_stream_writer_presence_stream_worker_client_server_locations: "{{ matrix_synapse_workers_stream_writer_presence_stream_worker_client_server_endpoints }}"

  4155. matrix_synapse_reverse_proxy_companion_synapse_media_repository_locations: "{{matrix_synapse_workers_media_repository_endpoints|default([]) }}"

  4156. matrix_synapse_reverse_proxy_companion_synapse_user_dir_locations: "{{ matrix_synapse_workers_user_dir_worker_client_server_endpoints|default([]) }}"

  4157. 

  4158. matrix_synapse_reverse_proxy_companion_access_log_syslog_integration_enabled: "{{ matrix_prometheus_nginxlog_exporter_enabled }}"

  4159. matrix_synapse_reverse_proxy_companion_access_log_syslog_integration_server_port: "{{ (matrix_prometheus_nginxlog_exporter_identifier | string +':'+ matrix_prometheus_nginxlog_exporter_container_syslog_port | string) | default('') }}"

  4160. 

  4161. ######################################################################

  4162. #

  4163. # /matrix-synapse-reverse-proxy-companion

  4164. #

  4165. ######################################################################

  4166. 

  4167. ######################################################################

  4168. #

  4169. # matrix-synapse-admin

  4170. #

  4171. ######################################################################

  4172. 

  4173. matrix_synapse_admin_enabled: false

  4174. 

  4175. matrix_synapse_admin_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '8766') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  4176. 

  4177. matrix_synapse_admin_container_image_self_build: "{{ matrix_architecture not in ['arm64', 'amd64'] }}"

  4178. 

  4179. matrix_synapse_admin_container_network: "{{ matrix_addons_container_network }}"

  4180. 

  4181. matrix_synapse_admin_container_additional_networks: "{{ [matrix_playbook_reverse_proxyable_services_additional_network] if matrix_playbook_reverse_proxyable_services_additional_network else [] }}"

  4182. 

  4183. matrix_synapse_admin_container_labels_traefik_enabled: "{{ matrix_playbook_reverse_proxy_type in ['playbook-managed-traefik', 'other-traefik-container'] }}"

  4184. matrix_synapse_admin_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  4185. matrix_synapse_admin_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  4186. matrix_synapse_admin_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  4187. 

  4188. ######################################################################

  4189. #

  4190. # /matrix-synapse-admin

  4191. #

  4192. ######################################################################

  4193. 

  4194. 

  4195. ######################################################################

  4196. #

  4197. # etke/prometheus_node_exporter

  4198. #

  4199. ######################################################################

  4200. 

  4201. prometheus_node_exporter_enabled: false

  4202. 

  4203. prometheus_node_exporter_identifier: matrix-prometheus-node-exporter

  4204. 

  4205. prometheus_node_exporter_base_path: "{{ matrix_base_data_path }}/prometheus-node-exporter"

  4206. 

  4207. prometheus_node_exporter_uid: "{{ matrix_user_uid }}"

  4208. prometheus_node_exporter_gid: "{{ matrix_user_gid }}"

  4209. 

  4210. prometheus_node_exporter_hostname: "{{ matrix_server_fqn_matrix }}"

  4211. 

  4212. prometheus_node_exporter_container_network: "{{ matrix_monitoring_container_network }}"

  4213. 

  4214. prometheus_node_exporter_container_additional_networks: "{{ [matrix_playbook_reverse_proxyable_services_additional_network] if matrix_playbook_reverse_proxyable_services_additional_network else [] }}"

  4215. 

  4216. prometheus_node_exporter_container_labels_traefik_enabled: "{{ matrix_metrics_exposure_enabled }}"

  4217. prometheus_node_exporter_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  4218. prometheus_node_exporter_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  4219. prometheus_node_exporter_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  4220. 

  4221. prometheus_node_exporter_container_labels_metrics_middleware_basic_auth_enabled: "{{ matrix_metrics_exposure_http_basic_auth_enabled }}"

  4222. prometheus_node_exporter_container_labels_metrics_middleware_basic_auth_users: "{{ matrix_metrics_exposure_http_basic_auth_users }}"

  4223. 

  4224. ######################################################################

  4225. #

  4226. # /etke/prometheus_node_exporter

  4227. #

  4228. ######################################################################

  4229. 

  4230. 

  4231. ######################################################################

  4232. #

  4233. # etke/prometheus_postgres_exporter

  4234. #

  4235. ######################################################################

  4236. 

  4237. prometheus_postgres_exporter_enabled: false

  4238. 

  4239. prometheus_postgres_exporter_identifier: matrix-prometheus-postgres-exporter

  4240. 

  4241. prometheus_postgres_exporter_base_path: "{{ matrix_base_data_path }}/prometheus-postgres-exporter"

  4242. 

  4243. prometheus_postgres_exporter_uid: "{{ matrix_user_uid }}"

  4244. prometheus_postgres_exporter_gid: "{{ matrix_user_gid }}"

  4245. 

  4246. prometheus_postgres_exporter_hostname: "{{ matrix_server_fqn_matrix }}"

  4247. 

  4248. prometheus_postgres_exporter_container_network: "{{ matrix_monitoring_container_network }}"

  4249. 

  4250. prometheus_postgres_exporter_container_additional_networks: |

  4251.   {{

  4252.     ([devture_postgres_container_network] if (devture_postgres_enabled and prometheus_postgres_exporter_database_hostname == devture_postgres_connection_hostname and prometheus_postgres_exporter_container_network != devture_postgres_container_network) else [])

  4253.     +

  4254.     ([matrix_playbook_reverse_proxyable_services_additional_network] if matrix_playbook_reverse_proxyable_services_additional_network and prometheus_postgres_exporter_container_labels_traefik_enabled else [])

  4255.   }}

  4256. 

  4257. prometheus_postgres_exporter_container_labels_traefik_enabled: "{{ matrix_metrics_exposure_enabled }}"

  4258. prometheus_postgres_exporter_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  4259. prometheus_postgres_exporter_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  4260. prometheus_postgres_exporter_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  4261. 

  4262. prometheus_postgres_exporter_container_labels_metrics_middleware_basic_auth_enabled: "{{ matrix_metrics_exposure_http_basic_auth_enabled }}"

  4263. prometheus_postgres_exporter_container_labels_metrics_middleware_basic_auth_users: "{{ matrix_metrics_exposure_http_basic_auth_users }}"

  4264. 

  4265. prometheus_postgres_exporter_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  4266. prometheus_postgres_exporter_database_username: matrix_prometheus_postgres_exporter

  4267. prometheus_postgres_exporter_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'prometheus.pg.db', rounds=655555) | to_uuid }}"

  4268. prometheus_postgres_exporter_database_name: matrix_prometheus_postgres_exporter

  4269. 

  4270. prometheus_postgres_exporter_systemd_required_services_list_auto: |

  4271.   {{

  4272.     ([devture_postgres_identifier ~ '.service'] if (devture_postgres_enabled and prometheus_postgres_exporter_database_hostname == devture_postgres_connection_hostname) else [])

  4273.   }}

  4274. 

  4275. ######################################################################

  4276. #

  4277. # /etke/prometheus_postgres_exporter

  4278. #

  4279. ######################################################################

  4280. 

  4281. 

  4282. ######################################################################

  4283. #

  4284. # matrix-prometheus-nginxlog-exporter

  4285. #

  4286. ######################################################################

  4287. 

  4288. matrix_prometheus_nginxlog_exporter_enabled: false

  4289. 

  4290. matrix_prometheus_nginxlog_exporter_identifier: matrix-prometheus-nginxlog-exporter

  4291. 

  4292. matrix_prometheus_nginxlog_exporter_hostname: "{{ matrix_server_fqn_matrix }}"

  4293. 

  4294. matrix_prometheus_nginxlog_exporter_container_network: "{{ matrix_monitoring_container_network }}"

  4295. 

  4296. matrix_prometheus_nginxlog_exporter_container_additional_networks_auto: |-

  4297.   {{

  4298.     ([matrix_playbook_reverse_proxyable_services_additional_network] if (matrix_playbook_reverse_proxyable_services_additional_network and matrix_prometheus_nginxlog_exporter_container_labels_traefik_enabled) else [])

  4299.   }}

  4300. 

  4301. matrix_prometheus_nginxlog_exporter_container_labels_traefik_enabled: "{{ matrix_metrics_exposure_enabled }}"

  4302. matrix_prometheus_nginxlog_exporter_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  4303. matrix_prometheus_nginxlog_exporter_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  4304. matrix_prometheus_nginxlog_exporter_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  4305. 

  4306. matrix_prometheus_nginxlog_exporter_container_labels_metrics_middleware_basic_auth_enabled: "{{ matrix_metrics_exposure_http_basic_auth_enabled }}"

  4307. matrix_prometheus_nginxlog_exporter_container_labels_metrics_middleware_basic_auth_users: "{{ matrix_metrics_exposure_http_basic_auth_users }}"

  4308. 

  4309. matrix_prometheus_nginxlog_exporter_config_namespaces_matrix_source_tags_auto: |

  4310.   {{

  4311.     ([matrix_synapse_reverse_proxy_companion_access_log_syslog_integration_tag] if matrix_synapse_reverse_proxy_companion_access_log_syslog_integration_enabled else [])

  4312.   }}

  4313. 

  4314. ######################################################################

  4315. #

  4316. # /matrix-prometheus-nginxlog-exporter

  4317. #

  4318. ######################################################################

  4319. 

  4320. 

  4321. ######################################################################

  4322. #

  4323. # prometheus

  4324. #

  4325. ######################################################################

  4326. 

  4327. prometheus_enabled: false

  4328. 

  4329. prometheus_identifier: matrix-prometheus

  4330. 

  4331. prometheus_base_path: "{{ matrix_base_data_path }}/prometheus"

  4332. 

  4333. prometheus_uid: "{{ matrix_user_uid }}"

  4334. prometheus_gid: "{{ matrix_user_gid }}"

  4335. 

  4336. prometheus_container_network: "{{ matrix_monitoring_container_network }}"

  4337. 

  4338. prometheus_container_additional_networks: |

  4339.   {{

  4340.     (

  4341.       ([prometheus_node_exporter_container_network] if prometheus_self_node_scraper_enabled and prometheus_node_exporter_container_network != prometheus_container_network else [])

  4342.       +

  4343.       ([matrix_synapse_container_network] if matrix_prometheus_services_connect_scraper_synapse_enabled and matrix_synapse_container_network != prometheus_container_network else [])

  4344.       +

  4345.       ([prometheus_postgres_exporter_container_network] if matrix_prometheus_services_connect_scraper_postgres_enabled and prometheus_postgres_exporter_container_network != prometheus_container_network else [])

  4346.       +

  4347.       ([matrix_hookshot_container_network] if matrix_prometheus_services_connect_scraper_hookshot_enabled and matrix_hookshot_container_network != prometheus_container_network else [])

  4348.       +

  4349.       ([matrix_prometheus_nginxlog_exporter_container_network] if matrix_prometheus_services_connect_scraper_nginxlog_enabled and matrix_prometheus_nginxlog_exporter_container_network != prometheus_container_network else [])

  4350.       +

  4351.       ([matrix_media_repo_container_network] if matrix_prometheus_services_connect_scraper_media_repo_enabled and matrix_media_repo_container_network != prometheus_container_network else [])

  4352.     ) | unique

  4353.   }}

  4354. 

  4355. prometheus_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '9090') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  4356. 

  4357. prometheus_config_rule_files_auto: |

  4358.   {{

  4359.     (['synapse-v2.rules'] if matrix_prometheus_services_connect_synapse_rules_enabled else [])

  4360.   }}

  4361. 

  4362. prometheus_self_node_scraper_enabled: "{{ prometheus_node_exporter_enabled }}"

  4363. prometheus_self_node_scraper_static_configs_target: "{{ (prometheus_node_exporter_identifier + ':9100') if prometheus_node_exporter_enabled else '' }}"

  4364. 

  4365. prometheus_config_scrape_configs_auto: |

  4366.   {{

  4367.     (matrix_prometheus_services_connect_scraper_synapse_configs if matrix_prometheus_services_connect_scraper_synapse_enabled else [])

  4368.     +

  4369.     (matrix_prometheus_services_connect_scraper_postgres_scrape_configs if matrix_prometheus_services_connect_scraper_postgres_enabled else [])

  4370.     +

  4371.     (matrix_prometheus_services_connect_scraper_hookshot_scrape_configs if matrix_prometheus_services_connect_scraper_hookshot_enabled else [])

  4372.     +

  4373.     (matrix_prometheus_services_connect_scraper_nginxlog_scrape_configs if matrix_prometheus_services_connect_scraper_nginxlog_enabled else [])

  4374.     +

  4375.     (matrix_prometheus_services_connect_scraper_media_repo_scrape_configs if matrix_prometheus_services_connect_scraper_media_repo_enabled else [])

  4376.   }}

  4377. 

  4378. ######################################################################

  4379. #

  4380. # /prometheus

  4381. #

  4382. ######################################################################

  4383. 

  4384. 

  4385. ######################################################################

  4386. #

  4387. # matrix-prometheus-services-connect

  4388. #

  4389. ######################################################################

  4390. 

  4391. matrix_prometheus_services_connect_synapse_enabled: "{{ prometheus_enabled and matrix_synapse_enabled }}"

  4392. 

  4393. matrix_prometheus_services_connect_synapse_rules_download_synapse_tag: "{{ matrix_synapse_docker_image_tag }}"

  4394. matrix_prometheus_services_connect_synapse_rules_download_dir_path: "{{ prometheus_config_path }}"

  4395. matrix_prometheus_services_connect_synapse_rules_download_owner: "{{ prometheus_uid }}"

  4396. matrix_prometheus_services_connect_synapse_rules_download_group: "{{ prometheus_gid }}"

  4397. 

  4398. matrix_prometheus_services_connect_scraper_synapse_enabled: "{{ matrix_synapse_enabled and matrix_synapse_metrics_enabled }}"

  4399. matrix_prometheus_services_connect_scraper_synapse_main_process_static_configs_target: "matrix-synapse:{{ matrix_synapse_metrics_port }}"

  4400. matrix_prometheus_services_connect_scraper_synapse_workers_enabled_list: "{{ matrix_synapse_workers_enabled_list }}"

  4401. 

  4402. matrix_prometheus_services_connect_scraper_postgres_enabled: "{{ prometheus_postgres_exporter_enabled }}"

  4403. matrix_prometheus_services_connect_scraper_postgres_static_configs_target: "{{ prometheus_postgres_exporter_identifier }}:{{ prometheus_postgres_exporter_port | string }}"

  4404. 

  4405. matrix_prometheus_services_connect_scraper_hookshot_enabled: "{{ matrix_hookshot_enabled and matrix_hookshot_metrics_enabled }}"

  4406. matrix_prometheus_services_connect_scraper_hookshot_static_configs_target: "{{ matrix_hookshot_container_url }}:{{ matrix_hookshot_metrics_port | string }}"

  4407. 

  4408. matrix_prometheus_services_connect_scraper_nginxlog_enabled: "{{ matrix_prometheus_nginxlog_exporter_enabled }}"

  4409. matrix_prometheus_services_connect_scraper_nginxlog_static_configs_target: "{{ matrix_prometheus_nginxlog_exporter_identifier }}:{{ matrix_prometheus_nginxlog_exporter_container_metrics_port | string }}"

  4410. 

  4411. matrix_prometheus_services_connect_scraper_media_repo_enabled: "{{ matrix_media_repo_enabled and matrix_media_repo_metrics_enabled }}"

  4412. matrix_prometheus_services_connect_scraper_media_repo_static_configs_target: "{{ matrix_media_repo_identifier }}:{{ matrix_media_repo_metrics_port }}"

  4413. 

  4414. ######################################################################

  4415. #

  4416. # /matrix-prometheus-services-connect

  4417. #

  4418. ######################################################################

  4419. 

  4420. 

  4421. ######################################################################

  4422. #

  4423. # etke/grafana

  4424. #

  4425. ######################################################################

  4426. 

  4427. grafana_enabled: false

  4428. 

  4429. grafana_identifier: matrix-grafana

  4430. 

  4431. grafana_uid: "{{ matrix_user_uid }}"

  4432. grafana_gid: "{{ matrix_user_gid }}"

  4433. 

  4434. grafana_hostname: "{{ matrix_server_fqn_grafana }}"

  4435. 

  4436. grafana_base_path: "{{ matrix_base_data_path }}/grafana"

  4437. 

  4438. grafana_container_network: "{{ matrix_monitoring_container_network }}"

  4439. 

  4440. grafana_container_additional_networks: |

  4441.   {{

  4442.     (

  4443.       ([matrix_playbook_reverse_proxyable_services_additional_network] if matrix_playbook_reverse_proxyable_services_additional_network else [])

  4444.       +

  4445.       ([prometheus_container_network] if prometheus_enabled and prometheus_container_network != grafana_container_network else [])

  4446.     ) | unique

  4447.   }}

  4448. 

  4449. grafana_container_labels_traefik_enabled: "{{ matrix_playbook_traefik_labels_enabled }}"

  4450. grafana_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  4451. grafana_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  4452. grafana_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  4453. 

  4454. grafana_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '3000') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  4455. 

  4456. grafana_provisioning_datasources: |

  4457.   {{

  4458.     ([{

  4459.       'name': (matrix_server_fqn_matrix + ' - Prometheus'),

  4460.       'type': 'prometheus',

  4461.       'access': 'proxy',

  4462.       'url': ('http://' + prometheus_identifier + ':9090'),

  4463.     }] if prometheus_enabled else [])

  4464.   }}

  4465. 

  4466. grafana_dashboard_download_urls: |

  4467.   {{

  4468.     (matrix_synapse_grafana_dashboard_urls if matrix_homeserver_implementation == 'synapse' and matrix_synapse_metrics_enabled else [])

  4469.     +

  4470.     (prometheus_node_exporter_dashboard_urls if prometheus_node_exporter_enabled else [])

  4471.     +

  4472.     (prometheus_postgres_exporter_dashboard_urls if prometheus_postgres_exporter_enabled else [])

  4473.     +

  4474.     (matrix_prometheus_nginxlog_exporter_dashboard_urls if matrix_prometheus_nginxlog_exporter_enabled else [])

  4475.     +

  4476.     (matrix_media_repo_dashboard_urls if matrix_media_repo_metrics_enabled else [])

  4477.   }}

  4478. 

  4479. grafana_provisioning_dashboard_template_files: |

  4480.   {{

  4481.     ([{

  4482.         'path': 'roles/custom/matrix-prometheus-nginxlog-exporter/templates/grafana/nginx-proxy.json',

  4483.         'name': 'nginx-proxy.json',

  4484.     }] if matrix_prometheus_nginxlog_exporter_enabled else [])

  4485.     +

  4486.     ([{

  4487.         'path': 'roles/custom/matrix-media-repo/templates/grafana/media-repo.json',

  4488.         'name': 'media-repo.json',

  4489.     }] if matrix_media_repo_metrics_enabled else [])

  4490.   }}

  4491. 

  4492. grafana_default_home_dashboard_path: |-

  4493.   {{

  4494.     {

  4495.       'synapse': ('/etc/grafana/dashboards/synapse.json' if matrix_synapse_metrics_enabled and matrix_synapse_metrics_enabled else ('/etc/grafana/dashboards/node-exporter-full.json' if prometheus_node_exporter_enabled else '')),

  4496.       'dendrite': ('/etc/grafana/dashboards/node-exporter-full.json' if prometheus_node_exporter_enabled else ''),

  4497.       'conduit': ('/etc/grafana/dashboards/node-exporter-full.json' if prometheus_node_exporter_enabled else ''),

  4498.     }[matrix_homeserver_implementation]

  4499.   }}

  4500. 

  4501. ######################################################################

  4502. #

  4503. # /etke/grafana

  4504. #

  4505. ######################################################################

  4506. 

  4507. 

  4508. ######################################################################

  4509. #

  4510. # matrix-registration

  4511. #

  4512. ######################################################################

  4513. 

  4514. matrix_registration_enabled: false

  4515. 

  4516. matrix_registration_scheme: "{{ 'https' if matrix_playbook_ssl_enabled else 'http' }}"

  4517. matrix_registration_hostname: "{{ matrix_server_fqn_matrix }}"

  4518. matrix_registration_path_prefix: /matrix-registration

  4519. 

  4520. matrix_registration_systemd_required_services_list_auto: |

  4521.   {{

  4522.     ([devture_postgres_identifier ~ '.service'] if (devture_postgres_enabled and matrix_registration_database_hostname == devture_postgres_connection_hostname) else [])

  4523.   }}

  4524. 

  4525. matrix_registration_container_image_self_build: "{{ matrix_architecture != 'amd64' }}"

  4526. 

  4527. matrix_registration_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '8767') if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  4528. 

  4529. matrix_registration_container_network: "{{ matrix_addons_container_network }}"

  4530. 

  4531. matrix_registration_container_additional_networks_auto: |-

  4532.   {{

  4533.     (

  4534.       ([] if matrix_addons_homeserver_container_network == '' else [matrix_addons_homeserver_container_network])

  4535.       +

  4536.       ([devture_postgres_container_network] if (devture_postgres_enabled and matrix_registration_database_hostname == devture_postgres_connection_hostname and matrix_mautrix_facebook_container_network != devture_postgres_container_network) else [])

  4537.       +

  4538.       ([matrix_playbook_reverse_proxyable_services_additional_network] if (matrix_playbook_reverse_proxyable_services_additional_network and matrix_registration_container_labels_traefik_enabled) else [])

  4539.     ) | unique

  4540.   }}

  4541. 

  4542. matrix_registration_container_labels_traefik_enabled: "{{ matrix_playbook_reverse_proxy_type in ['playbook-managed-traefik', 'other-traefik-container'] }}"

  4543. matrix_registration_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  4544. matrix_registration_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  4545. matrix_registration_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  4546. 

  4547. matrix_registration_riot_instance: "{{ ('https://' + matrix_server_fqn_element) if matrix_client_element_enabled else 'https://element.io/app/' }}"

  4548. 

  4549. matrix_registration_shared_secret: |-

  4550.   {{

  4551.     {

  4552.       'synapse': matrix_synapse_registration_shared_secret | default (''),

  4553.       'dendrite': matrix_dendrite_client_api_registration_shared_secret | default (''),

  4554.       'conduit': '',

  4555.     }[matrix_homeserver_implementation]

  4556.   }}

  4557. 

  4558. matrix_registration_server_location: "{{ matrix_addons_homeserver_client_api_url }}"

  4559. 

  4560. matrix_registration_api_validate_certs: "{{ matrix_playbook_ssl_enabled }}"

  4561. 

  4562. # Postgres is the default, except if not using internal Postgres server

  4563. matrix_registration_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"

  4564. matrix_registration_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  4565. matrix_registration_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mx.registr.db', rounds=655555) | to_uuid }}"

  4566. 

  4567. ######################################################################

  4568. #

  4569. # /matrix-registration

  4570. #

  4571. ######################################################################

  4572. 

  4573. 

  4574. ######################################################################

  4575. #

  4576. # matrix-sliding-sync

  4577. #

  4578. ######################################################################

  4579. 

  4580. # We don't enable the sliding sync proxy by default.

  4581. matrix_sliding_sync_enabled: false

  4582. 

  4583. matrix_sliding_sync_scheme: "{{ 'https' if matrix_playbook_ssl_enabled else 'http' }}"

  4584. 

  4585. matrix_sliding_sync_hostname: "{{ matrix_server_fqn_matrix }}"

  4586. 

  4587. matrix_sliding_sync_path_prefix: /sliding-sync

  4588. 

  4589. matrix_sliding_sync_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"

  4590. 

  4591. matrix_sliding_sync_container_network: "{{ matrix_homeserver_container_network }}"

  4592. 

  4593. matrix_sliding_sync_container_additional_networks: |

  4594.   {{

  4595.     (

  4596.       ([matrix_playbook_reverse_proxyable_services_additional_network] if matrix_sliding_sync_container_labels_traefik_enabled and matrix_playbook_reverse_proxyable_services_additional_network else [])

  4597.       +

  4598.       ([] if matrix_homeserver_container_network in ['', matrix_sliding_sync_container_network] else [matrix_homeserver_container_network])

  4599.       +

  4600.       ([devture_postgres_container_network] if devture_postgres_enabled and devture_postgres_container_network != matrix_sliding_sync_container_network else [])

  4601.     ) | unique

  4602.   }}

  4603. 

  4604. matrix_sliding_sync_container_labels_traefik_enabled: "{{ matrix_playbook_reverse_proxy_type in ['playbook-managed-traefik', 'other-traefik-container'] }}"

  4605. matrix_sliding_sync_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  4606. matrix_sliding_sync_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  4607. matrix_sliding_sync_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  4608. 

  4609. matrix_sliding_sync_systemd_required_services_list_auto: |

  4610.   {{

  4611.     matrix_homeserver_systemd_services_list

  4612.     +

  4613.     ([devture_postgres_identifier ~ '.service'] if (devture_postgres_enabled and matrix_sliding_sync_database_hostname == devture_postgres_connection_hostname) else [])

  4614.   }}

  4615. 

  4616. matrix_sliding_sync_environment_variable_syncv3_server: "{{ matrix_homeserver_container_url }}"

  4617. matrix_sliding_sync_environment_variable_syncv3_secret: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'ss.secret', rounds=655555) | to_uuid }}"

  4618. 

  4619. matrix_sliding_sync_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  4620. matrix_sliding_sync_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'ss.db', rounds=655555) | to_uuid }}"

  4621. 

  4622. ######################################################################

  4623. #

  4624. # /matrix-sliding-sync

  4625. #

  4626. ######################################################################

  4627. 

  4628. 

  4629. ######################################################################

  4630. #

  4631. # matrix-dendrite

  4632. #

  4633. ######################################################################

  4634. 

  4635. matrix_dendrite_enabled: "{{ matrix_homeserver_implementation == 'dendrite' }}"

  4636. 

  4637. matrix_dendrite_hostname: "{{ matrix_server_fqn_matrix }}"

  4638. 

  4639. matrix_dendrite_federation_enabled: "{{ matrix_homeserver_federation_enabled }}"

  4640. 

  4641. matrix_dendrite_container_network: "{{ matrix_homeserver_container_network }}"

  4642. 

  4643. matrix_dendrite_container_additional_networks: |

  4644.   {{

  4645.     (

  4646.       ([matrix_playbook_reverse_proxyable_services_additional_network] if matrix_dendrite_container_labels_traefik_enabled and matrix_playbook_reverse_proxyable_services_additional_network else [])

  4647.       +

  4648.       ([devture_postgres_container_network] if (devture_postgres_enabled and matrix_dendrite_database_hostname == devture_postgres_connection_hostname and devture_postgres_container_network != matrix_dendrite_container_network) else [])

  4649.     ) | unique

  4650.   }}

  4651. 

  4652. matrix_dendrite_container_http_host_bind_address: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ matrix_dendrite_http_bind_port | string) if matrix_playbook_service_host_bind_interface_prefix else '' }}"

  4653. matrix_dendrite_container_https_host_bind_address: "{{ '' if not matrix_dendrite_https_bind_port or not matrix_playbook_service_host_bind_interface_prefix else (matrix_playbook_service_host_bind_interface_prefix + matrix_dendrite_https_bind_port | string) }}"

  4654. 

  4655. matrix_dendrite_container_labels_traefik_enabled: "{{ matrix_playbook_reverse_proxy_type in ['playbook-managed-traefik', 'other-traefik-container'] and not matrix_synapse_workers_enabled }}"

  4656. matrix_dendrite_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  4657. matrix_dendrite_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  4658. matrix_dendrite_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  4659. 

  4660. matrix_dendrite_container_labels_public_client_synapse_admin_api_enabled: "{{ matrix_synapse_admin_enabled }}"

  4661. 

  4662. matrix_dendrite_container_labels_public_client_root_redirection_enabled: "{{ matrix_dendrite_container_labels_public_client_root_redirection_url != '' }}"

  4663. matrix_dendrite_container_labels_public_client_root_redirection_url: "{{ (('https://' if matrix_playbook_ssl_enabled else 'http://') + matrix_server_fqn_element) if matrix_client_element_enabled else '' }}"

  4664. 

  4665. matrix_dendrite_container_labels_public_federation_api_traefik_entrypoints: "{{ matrix_federation_traefik_entrypoint_name }}"

  4666. matrix_dendrite_container_labels_public_federation_api_traefik_tls: "{{ matrix_federation_traefik_entrypoint_tls }}"

  4667. 

  4668. matrix_dendrite_container_labels_public_metrics_middleware_basic_auth_enabled: "{{ matrix_metrics_exposure_http_basic_auth_enabled }}"

  4669. matrix_dendrite_container_labels_public_metrics_middleware_basic_auth_users: "{{ matrix_metrics_exposure_http_basic_auth_users }}"

  4670. 

  4671. matrix_dendrite_metrics_enabled: "{{ prometheus_enabled }}"

  4672. 

  4673. matrix_dendrite_metrics_proxying_enabled: "{{ matrix_dendrite_metrics_enabled and matrix_metrics_exposure_enabled }}"

  4674. matrix_dendrite_metrics_proxying_hostname: "{{ matrix_metrics_exposure_hostname }}"

  4675. matrix_dendrite_metrics_proxying_path_prefix: "{{ matrix_metrics_exposure_path_prefix }}/dendrite"

  4676. 

  4677. matrix_dendrite_client_api_registration_shared_secret: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'dendrite.rss', rounds=655555) | to_uuid }}"

  4678. 

  4679. matrix_dendrite_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"

  4680. 

  4681. matrix_dendrite_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'dendrite.db', rounds=655555) | to_uuid }}"

  4682. 

  4683. # Even if TURN doesn't support TLS (it does by default),

  4684. # it doesn't hurt to try a secure connection anyway.

  4685. matrix_dendrite_client_api_turn_uris: |

  4686.   {{

  4687.     [

  4688.       'turns:' + matrix_server_fqn_matrix + '?transport=udp',

  4689.       'turns:' + matrix_server_fqn_matrix + '?transport=tcp',

  4690.       'turn:' + matrix_server_fqn_matrix + '?transport=udp',

  4691.       'turn:' + matrix_server_fqn_matrix + '?transport=tcp',

  4692.     ]

  4693.     if matrix_coturn_enabled

  4694.     else []

  4695.   }}

  4696. 

  4697. matrix_dendrite_client_api_turn_shared_secret: "{{ matrix_coturn_turn_static_auth_secret if matrix_coturn_enabled else '' }}"

  4698. 

  4699. matrix_dendrite_disable_tls_validation: "{{ not matrix_playbook_ssl_enabled }}"

  4700. 

  4701. matrix_dendrite_self_check_validate_certificates: "{{ matrix_playbook_ssl_enabled }}"

  4702. 

  4703. matrix_dendrite_trusted_id_servers: "{{ [matrix_server_fqn_matrix] if matrix_ma1sd_enabled else ['matrix.org', 'vector.im'] }}"

  4704. 

  4705. matrix_dendrite_systemd_required_services_list_auto: |

  4706.   {{

  4707.     ([devture_postgres_identifier ~ '.service'] if (devture_postgres_enabled and matrix_dendrite_database_hostname == devture_postgres_connection_hostname) else [])

  4708.     +

  4709.     (['matrix-goofys.service'] if matrix_s3_media_store_enabled else [])

  4710.   }}

  4711. 

  4712. matrix_dendrite_systemd_wanted_services_list_auto: |

  4713.   {{

  4714.     (['matrix-coturn.service'] if matrix_coturn_enabled else [])

  4715.   }}

  4716. 

  4717. matrix_dendrite_app_service_config_files_auto: "{{ matrix_homeserver_app_service_config_files_auto }}"

  4718. 

  4719. ######################################################################

  4720. #

  4721. # /matrix-dendrite

  4722. #

  4723. ######################################################################

  4724. 

  4725. 

  4726. ######################################################################

  4727. #

  4728. # matrix-conduit

  4729. #

  4730. ######################################################################

  4731. 

  4732. matrix_conduit_enabled: "{{ matrix_homeserver_implementation == 'conduit' }}"

  4733. 

  4734. matrix_conduit_hostname: "{{ matrix_server_fqn_matrix }}"

  4735. 

  4736. matrix_conduit_allow_federation: "{{ matrix_homeserver_federation_enabled }}"

  4737. 

  4738. matrix_conduit_container_network: "{{ matrix_homeserver_container_network }}"

  4739. 

  4740. matrix_conduit_container_additional_networks_auto: |

  4741.   {{

  4742.     (

  4743.       ([matrix_playbook_reverse_proxyable_services_additional_network] if matrix_conduit_container_labels_traefik_enabled and matrix_playbook_reverse_proxyable_services_additional_network else [])

  4744.     ) | unique

  4745.   }}

  4746. 

  4747. matrix_conduit_container_labels_traefik_enabled: "{{ matrix_playbook_reverse_proxy_type in ['playbook-managed-traefik', 'other-traefik-container'] and not matrix_synapse_workers_enabled }}"

  4748. matrix_conduit_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  4749. matrix_conduit_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  4750. matrix_conduit_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  4751. 

  4752. matrix_conduit_container_labels_public_client_root_redirection_enabled: "{{ matrix_conduit_container_labels_public_client_root_redirection_url != '' }}"

  4753. matrix_conduit_container_labels_public_client_root_redirection_url: "{{ (('https://' if matrix_playbook_ssl_enabled else 'http://') + matrix_server_fqn_element) if matrix_client_element_enabled else '' }}"

  4754. 

  4755. matrix_conduit_container_labels_public_federation_api_traefik_entrypoints: "{{ matrix_federation_traefik_entrypoint_name }}"

  4756. matrix_conduit_container_labels_public_federation_api_traefik_tls: "{{ matrix_federation_traefik_entrypoint_tls }}"

  4757. 

  4758. matrix_conduit_container_labels_internal_client_api_enabled: "{{ matrix_playbook_internal_matrix_client_api_traefik_entrypoint_enabled }}"

  4759. matrix_conduit_container_labels_internal_client_api_traefik_entrypoints: "{{ matrix_playbook_internal_matrix_client_api_traefik_entrypoint_name }}"

  4760. 

  4761. matrix_conduit_turn_uris: |

  4762.   {{

  4763.     []

  4764.     +

  4765.     [

  4766.       'turns:' + matrix_server_fqn_matrix + '?transport=udp',

  4767.       'turns:' + matrix_server_fqn_matrix + '?transport=tcp',

  4768.     ] if matrix_coturn_enabled and matrix_coturn_tls_enabled else []

  4769.     +

  4770.     [

  4771.       'turn:' + matrix_server_fqn_matrix + '?transport=udp',

  4772.       'turn:' + matrix_server_fqn_matrix + '?transport=tcp',

  4773.     ] if matrix_coturn_enabled else []

  4774.   }}

  4775. 

  4776. matrix_conduit_turn_secret: "{{ matrix_coturn_turn_static_auth_secret if matrix_coturn_enabled else '' }}"

  4777. 

  4778. ######################################################################

  4779. #

  4780. # /matrix-conduit

  4781. #

  4782. ######################################################################

  4783. 

  4784. 

  4785. ######################################################################

  4786. #

  4787. # matrix-user-creator

  4788. #

  4789. ######################################################################

  4790. 

  4791. matrix_user_creator_users_auto: |

  4792.   {{

  4793.     ([{

  4794.       'username': matrix_bot_matrix_registration_bot_matrix_user_id_localpart,

  4795.       'initial_password': matrix_bot_matrix_registration_bot_bot_password,

  4796.       'initial_type': 'admin',

  4797.     }] if matrix_bot_matrix_registration_bot_enabled else [])

  4798.     +

  4799.     ([{

  4800.       'username': matrix_bot_chatgpt_matrix_bot_username_localpart,

  4801.       'initial_password': matrix_bot_chatgpt_matrix_bot_password,

  4802.       'initial_type': 'bot',

  4803.     }] if matrix_bot_chatgpt_enabled and matrix_bot_chatgpt_matrix_bot_password | length > 0 else [])

  4804.     +

  4805.     ([{

  4806.       'username': matrix_bot_matrix_reminder_bot_matrix_user_id_localpart,

  4807.       'initial_password': matrix_bot_matrix_reminder_bot_matrix_user_password,

  4808.       'initial_type': 'bot',

  4809.     }] if matrix_bot_matrix_reminder_bot_enabled else [])

  4810.     +

  4811.     ([{

  4812.       'username': matrix_bot_honoroit_login,

  4813.       'initial_password': matrix_bot_honoroit_password,

  4814.       'initial_type': 'bot',

  4815.     }] if matrix_bot_honoroit_enabled else [])

  4816.     +

  4817.     ([{

  4818.       'username': matrix_bot_postmoogle_login,

  4819.       'initial_password': matrix_bot_postmoogle_password,

  4820.       'initial_type': 'bot',

  4821.     }] if matrix_bot_postmoogle_enabled else [])

  4822.     +

  4823.     ([{

  4824.       'username': matrix_bot_buscarron_login,

  4825.       'initial_password': matrix_bot_buscarron_password,

  4826.       'initial_type': 'bot',

  4827.     }] if matrix_bot_buscarron_enabled else [])

  4828.   }}

  4829. 

  4830. ######################################################################

  4831. #

  4832. # /matrix-user-creator

  4833. #

  4834. ######################################################################

  4835. 

  4836. 

  4837. ######################################################################

  4838. #

  4839. # matrix-user-verification-service

  4840. #

  4841. ######################################################################

  4842. 

  4843. matrix_user_verification_service_enabled: false

  4844. 

  4845. matrix_user_verification_service_systemd_required_services_list: |

  4846.   {{

  4847.     ['docker.service']

  4848.     +

  4849.     (['matrix-' + matrix_homeserver_implementation + '.service'])

  4850.   }}

  4851. 

  4852. matrix_user_verification_service_container_network: "{{ matrix_addons_container_network }}"

  4853. 

  4854. matrix_user_verification_service_container_additional_networks: |

  4855.   {{

  4856.     (

  4857.       ([matrix_playbook_reverse_proxyable_services_additional_network] if matrix_playbook_reverse_proxyable_services_additional_network else [])

  4858.       +

  4859.       ([matrix_homeserver_container_network] if matrix_homeserver_container_network != matrix_user_verification_service_container_network else [])

  4860.     ) | unique

  4861.   }}

  4862. 

  4863. # If Jitsi is managed by this playbook we can use the docker network - no need to expose a port.

  4864. # If Jitsi is not managed by this playbook, or you otherwise have a need for it, you can expose

  4865. # matrix-user-verfification-services's client-server port to port 3003.

  4866. # By default Matrix-User-Verification-Service binds to port 3000, which collides with grafana, therefore this uses port 3003.

  4867. matrix_user_verification_service_container_http_host_bind_port: "{{  '' if (jitsi_enabled | bool and jitsi_enable_auth | bool and jitsi_auth_type == 'matrix') else matrix_playbook_service_host_bind_interface_prefix ~ '3003' }}"

  4868. 

  4869. # URL exposed in the docker network

  4870. matrix_user_verification_service_container_url: "http://{{  matrix_user_verification_service_container_name }}:3000"

  4871. 

  4872. matrix_user_verification_service_uvs_homeserver_url: "{{ matrix_addons_homeserver_client_api_url }}"

  4873. 

  4874. # We connect via the container network (private IPs), so we need to disable IP checks

  4875. matrix_user_verification_service_uvs_disable_ip_blacklist: "{{'true' if matrix_synapse_enabled else 'false'}}"

  4876. 

  4877. matrix_user_verification_service_uvs_auth_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'uvs.auth.token', rounds=655555) | to_uuid }}"

  4878. 

  4879. ######################################################################

  4880. #

  4881. # /matrix-user-verification-service

  4882. #

  4883. ######################################################################

  4884. 

  4885. 

  4886. ########################################################################

  4887. #                                                                      #

  4888. # matrix-static-files                                                  #

  4889. #                                                                      #

  4890. ########################################################################

  4891. 

  4892. matrix_static_files_enabled: true

  4893. 

  4894. matrix_static_files_container_network: "{{ (matrix_static_files_identifier if matrix_playbook_reverse_proxy_type == 'none' else matrix_playbook_reverse_proxy_container_network) }}"

  4895. 

  4896. matrix_static_files_container_labels_traefik_enabled: "{{ matrix_playbook_traefik_labels_enabled }}"

  4897. matrix_static_files_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"

  4898. matrix_static_files_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"

  4899. matrix_static_files_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"

  4900. 

  4901. matrix_static_files_container_labels_well_known_matrix_endpoint_traefik_hostname: "{{ matrix_server_fqn_matrix }}"

  4902. 

  4903. # Base domain serving is not enabled by default (see `matrix_static_files_container_labels_base_domain_enabled`),

  4904. # but we pass the hostname, so that enabling it is easy.

  4905. matrix_static_files_container_labels_base_domain_traefik_hostname: "{{ matrix_domain }}"

  4906. 

  4907. matrix_static_files_file_matrix_client_property_io_element_jitsi_preferred_domain: "{{ matrix_server_fqn_jitsi if jitsi_enabled else '' }}"

  4908. 

  4909. matrix_static_files_file_matrix_client_property_org_matrix_msc3575_proxy_url: "{{ matrix_homeserver_sliding_sync_url }}"

  4910. 

  4911. matrix_static_files_file_matrix_client_property_m_tile_server_entries_enabled: "{{ matrix_client_element_location_sharing_enabled }}"

  4912. matrix_static_files_file_matrix_client_property_m_tile_server_map_style_url: "https://{{ matrix_server_fqn_element }}/map_style.json"

  4913. 

  4914. matrix_static_files_file_matrix_server_property_m_server: "{{ matrix_server_fqn_matrix_federation }}:{{ matrix_federation_public_port }}"

  4915. 

  4916. matrix_static_files_self_check_hostname_matrix: "{{ matrix_server_fqn_matrix }}"

  4917. matrix_static_files_self_check_hostname_identity: "{{ matrix_domain }}"

  4918. 

  4919. ########################################################################

  4920. #                                                                      #

  4921. # /matrix-static-files                                                 #

  4922. #                                                                      #

  4923. ########################################################################

  4924. 

  4925. 

  4926. ########################################################################

  4927. #                                                                      #

  4928. # com.devture.ansible.role.container_socket_proxy                      #

  4929. #                                                                      #

  4930. ########################################################################

  4931. 

  4932. devture_container_socket_proxy_enabled: "{{ matrix_playbook_reverse_proxy_type == 'playbook-managed-traefik' }}"

  4933. 

  4934. devture_container_socket_proxy_identifier: matrix-container-socket-proxy

  4935. 

  4936. devture_container_socket_proxy_base_path: "{{ matrix_base_data_path }}/container-socket-proxy"

  4937. 

  4938. devture_container_socket_proxy_uid: "{{ matrix_user_uid }}"

  4939. devture_container_socket_proxy_gid: "{{ matrix_user_gid }}"

  4940. 

  4941. # Traefik requires read access to the containers APIs to do its job

  4942. devture_container_socket_proxy_api_containers_enabled: true

  4943. 

  4944. ########################################################################

  4945. #                                                                      #

  4946. # /com.devture.ansible.role.container_socket_proxy                     #

  4947. #                                                                      #

  4948. ########################################################################

  4949. 

  4950. 

  4951. ########################################################################

  4952. #                                                                      #

  4953. # com.devture.ansible.role.traefik                                     #

  4954. #                                                                      #

  4955. ########################################################################

  4956. 

  4957. devture_traefik_enabled: "{{ matrix_playbook_reverse_proxy_type == 'playbook-managed-traefik' }}"

  4958. 

  4959. devture_traefik_identifier: matrix-traefik

  4960. 

  4961. devture_traefik_base_path: "{{ matrix_base_data_path }}/traefik"

  4962. 

  4963. devture_traefik_uid: "{{ matrix_user_uid }}"

  4964. devture_traefik_gid: "{{ matrix_user_gid }}"

  4965. 

  4966. devture_traefik_additional_entrypoints_auto: |

  4967.   {{

  4968.     ([matrix_playbook_public_matrix_federation_api_traefik_entrypoint_definition] if matrix_playbook_public_matrix_federation_api_traefik_entrypoint_enabled else [])

  4969.     +

  4970.     ([matrix_playbook_internal_matrix_client_api_traefik_entrypoint_definition] if matrix_playbook_internal_matrix_client_api_traefik_entrypoint_enabled else [])

  4971.   }}

  4972. 

  4973. devture_traefik_config_providers_docker_endpoint: "{{ devture_container_socket_proxy_endpoint if devture_container_socket_proxy_enabled else 'unix:///var/run/docker.sock' }}"

  4974. 

  4975. devture_traefik_container_additional_networks_auto: |

  4976.   {{

  4977.     ([devture_container_socket_proxy_container_network] if devture_container_socket_proxy_enabled else [])

  4978.   }}

  4979. 

  4980. devture_traefik_systemd_required_services_list: |

  4981.   {{

  4982.     (['docker.service'])

  4983.     +

  4984.     ([devture_container_socket_proxy_identifier + '.service'] if devture_container_socket_proxy_enabled else [])

  4985.   }}

  4986. 

  4987. ########################################################################

  4988. #                                                                      #

  4989. # /com.devture.ansible.role.traefik                                    #

  4990. #                                                                      #

  4991. ########################################################################

  4992. 

  4993. 

  4994. ########################################################################

  4995. #                                                                      #

  4996. # com.devture.ansible.role.traefik_certs_dumper                        #

  4997. #                                                                      #

  4998. ########################################################################

  4999. 

  5000. devture_traefik_certs_dumper_enabled: "{{ (matrix_playbook_reverse_proxy_type == 'playbook-managed-traefik' and devture_traefik_config_entrypoint_web_secure_enabled and devture_traefik_config_certificatesResolvers_acme_enabled) or matrix_playbook_reverse_proxy_type == 'other-traefik-container' }}"

  5001. 

  5002. devture_traefik_certs_dumper_identifier: matrix-traefik-certs-dumper

  5003. 

  5004. devture_traefik_certs_dumper_base_path: "{{ matrix_base_data_path }}/traefik-certs-dumper"

  5005. 

  5006. devture_traefik_certs_dumper_uid: "{{ matrix_user_uid }}"

  5007. devture_traefik_certs_dumper_gid: "{{ matrix_user_gid }}"

  5008. 

  5009. devture_traefik_certs_dumper_ssl_dir_path: "{{ devture_traefik_ssl_dir_path if devture_traefik_enabled else '' }}"

  5010. 

  5011. ########################################################################

  5012. #                                                                      #

  5013. # /com.devture.ansible.role.traefik_certs_dumper                       #

  5014. #                                                                      #

  5015. ########################################################################