matrix-docker-ansible-deploy/roles/custom/matrix-base/tasks/setup_matrix_base.yml

# SPDX-FileCopyrightText: 2017 - 2025 Slavi Pantaleev
# SPDX-FileCopyrightText: 2018 - 2022 MDAD project contributors
# SPDX-FileCopyrightText: 2019 Stuart Mumford
# SPDX-FileCopyrightText: 2020 Béla Becker
# SPDX-FileCopyrightText: 2020 Chris van Dijk
# SPDX-FileCopyrightText: 2020 Horvath Gergely
# SPDX-FileCopyrightText: 2022 Sebastian Gumprich
# SPDX-FileCopyrightText: 2024 - 2025 Suguru Hirahara
# SPDX-FileCopyrightText: 2024 László Várady
# SPDX-FileCopyrightText: 2026 Chiu Ki Sit
#
# SPDX-License-Identifier: AGPL-3.0-or-later

---

# Snapshot ownership before any changes so we can decide whether a recursive
# chown is needed (only when uid/gid actually differs from expected).
- name: Check current ownership of Matrix base path (Synology)
  ansible.builtin.stat:
    path: "{{ matrix_base_data_path }}"
  register: matrix_base_data_path_stat
  when: matrix_base_host_is_synology

- name: Ensure Matrix base paths exists
  ansible.builtin.file:
    path: "{{ item }}"
    state: directory
    mode: "{{ matrix_base_data_path_mode }}"
    owner: "{{ matrix_user_name }}"
    group: "{{ matrix_group_name }}"
  with_items:
    - "{{ matrix_base_data_path }}"
    - "{{ matrix_bin_path }}"

- name: Ensure remove-all script created
  ansible.builtin.template:
    src: "{{ role_path }}/templates/bin/remove-all.j2"
    dest: "{{ matrix_bin_path }}/remove-all"
    mode: '0750'

# On Synology, name-based chown works for directly-touched paths but leaves
# existing sub-paths with stale numeric ownership when uid/gid changes between
# runs. We recurse only when the pre-task uid/gid didn't match, so normal runs
# skip the expensive tree walk entirely. chown -R is used instead of the file
# module's recurse option to avoid Ansible iterating every entry in Python.
- name: Ensure Matrix base path ownership is correct using numeric UID/GID (Synology)
  ansible.builtin.command: chown -R {{ matrix_user_uid }}:{{ matrix_user_gid }} {{ matrix_base_data_path }}
  changed_when: true
  when: >-
    matrix_base_host_is_synology and (
      not matrix_base_data_path_stat.stat.exists or
      matrix_base_data_path_stat.stat.uid | int != matrix_user_uid | int or
      matrix_base_data_path_stat.stat.gid | int != matrix_user_gid | int
    )