matrix-docker-ansible-deploy/setup.yml

---
- name: "Set up a Matrix server"
  hosts: "{{ target if target is defined else 'matrix_servers' }}"
  become: true

  vars_files:
    - roles/matrix-synapse/vars/workers.yml

  roles:
    - matrix-base
    - matrix-dynamic-dns
    - matrix-mailer
    - matrix-postgres
    - matrix-redis
    - matrix-corporal
    - matrix-bridge-appservice-discord
    - matrix-bridge-appservice-slack
    - matrix-bridge-appservice-webhooks
    - matrix-bridge-appservice-irc
    - matrix-bridge-appservice-kakaotalk
    - matrix-bridge-beeper-linkedin
    - matrix-bridge-go-skype-bridge
    - matrix-bridge-mautrix-facebook
    - matrix-bridge-mautrix-twitter
    - matrix-bridge-mautrix-hangouts
    - matrix-bridge-mautrix-googlechat
    - matrix-bridge-mautrix-instagram
    - matrix-bridge-mautrix-signal
    - matrix-bridge-mautrix-telegram
    - matrix-bridge-mautrix-whatsapp
    - matrix-bridge-mautrix-discord
    - matrix-bridge-mx-puppet-discord
    - matrix-bridge-mx-puppet-groupme
    - matrix-bridge-mx-puppet-steam
    - matrix-bridge-mx-puppet-slack
    - matrix-bridge-mx-puppet-twitter
    - matrix-bridge-mx-puppet-instagram
    - matrix-bridge-sms
    - matrix-bridge-heisenbridge
    - matrix-bridge-hookshot
    - matrix-bot-matrix-reminder-bot
    - matrix-bot-matrix-registration-bot
    - matrix-bot-maubot
    - matrix-bot-buscarron
    - matrix-bot-honoroit
    - matrix-bot-postmoogle
    - matrix-bot-go-neb
    - matrix-bot-mjolnir
    - matrix-cactus-comments
    - matrix-synapse
    - matrix-dendrite
    - matrix-conduit
    - matrix-synapse-admin
    - matrix-prometheus-node-exporter
    - matrix-prometheus-postgres-exporter
    - matrix-prometheus
    - matrix-grafana
    - matrix-registration
    - matrix-client-element
    - matrix-client-hydrogen
    - matrix-client-cinny
    - matrix-jitsi
    - matrix-ldap-registration-proxy
    - matrix-ma1sd
    - matrix-dimension
    - matrix-etherpad
    - matrix-email2matrix
    - matrix-sygnal
    - matrix-ntfy
    - matrix-nginx-proxy
    - matrix-coturn
    - matrix-aux
    - matrix-postgres-backup
    - matrix-backup-borg
    - matrix-common-after
sync with previous repo 3 years ago			`---`
			`- name: "Set up a Matrix server"`
			`hosts: "{{ target if target is defined else 'matrix_servers' }}"`
			`become: true`

			`vars_files:`
			`- roles/matrix-synapse/vars/workers.yml`

			`roles:`
			`- matrix-base`
			`- matrix-dynamic-dns`
			`- matrix-mailer`
			`- matrix-postgres`
			`- matrix-redis`
			`- matrix-corporal`
			`- matrix-bridge-appservice-discord`
			`- matrix-bridge-appservice-slack`
			`- matrix-bridge-appservice-webhooks`
			`- matrix-bridge-appservice-irc`
Add matrix-appservice-kakaotalk support Adds support for: https://src.miscworks.net/fair/matrix-appservice-kakaotalk This is pretty similar to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1977 which just appeared, but has mostly been done independently. I've taken some inspiration and did some fixups based on that PR. Thanks to https://github.com/hnarjis for taking the time to contribute! Notable differences between this branch compared to that PR: - better naming and documentation around the "configuration" variables - no unnecessary (5 sec.) intentional delay when starting `matrix-appservice-kakaotalk-node.service` - stores configuration in `config/`, not in `data/` - passes configuration as read-only and starts the bridge with (`--no-update`) to ensure no changes are made to it - starts containers more securely - with `matrix:matrix` user:group (not `root`) and reduced capabilities (`--cap-drop=ALL`) - uses `tcp` for communication between the "node" and the appservice (simpler than sharing unix sockets) - `registration.yaml` which is closer to the one generated by `matrix-appservice-kakaotalk` (no `de.sorunome.msc2409.push_ephemeral` stuff, etc.) - `registration.yaml` which is more customizable (customizable bot username and prefix for puppets - see `matrix_appservice_kakaotalk_appservice_bot_username` and `matrix_appservice_kakaotalk_user_prefix`) - less fragile and more extensible bridge permissions configuration via `matrix_appservice_kakaotalk_bridge_permissions`. Doing `{% if matrix_admin %}` in the bridge configuration sometimes causes syntax problems (I hit some myself) and is not ideal. Other bridges should be redone as well. - configurable command prefix for the bridge, instead of hardcoding `!kt` (see `matrix_appservice_kakaotalk_command_prefix`) - logging that is more consistent with the rest of the playbook (console / journald only, no logging to files), as well as configurable log level (via `matrix_appservice_kakaotalk_logging_level`) - somewhat more detailed documentation (`docs/configuring-playbook-bridge-appservice-kakaotalk.md`) - removed some dead code (data relocation tasks from `tasks/setup_install.yml`, as well as likely unnecessary SQLite -> Postgres migration) 2 years ago			`- matrix-bridge-appservice-kakaotalk`
add code for LinkedIn Bridge 3 years ago			`- matrix-bridge-beeper-linkedin`
Add Go Skype Bridge Based on mautrix-whatsapp, as that's what the bridge software is based on. 2 years ago			`- matrix-bridge-go-skype-bridge`
sync with previous repo 3 years ago			`- matrix-bridge-mautrix-facebook`
Set up vars for mautrix-twitter playbook * Copy/update mautrix_facebook group_vars to mautrix_twitter * Replace facebook -> twitter, fb -> twt, remove presence var * Enable playbook in setup.yml 4 years ago			`- matrix-bridge-mautrix-twitter`
sync with previous repo 3 years ago			`- matrix-bridge-mautrix-hangouts`
Added Mautrix Google Chat 3 years ago			`- matrix-bridge-mautrix-googlechat`
sync with previous repo 3 years ago			`- matrix-bridge-mautrix-instagram`
			`- matrix-bridge-mautrix-signal`
			`- matrix-bridge-mautrix-telegram`
			`- matrix-bridge-mautrix-whatsapp`
Add Mautrix Discord Bridge 2 years ago			`- matrix-bridge-mautrix-discord`
sync with previous repo 3 years ago			`- matrix-bridge-mx-puppet-discord`
			`- matrix-bridge-mx-puppet-groupme`
			`- matrix-bridge-mx-puppet-steam`
			`- matrix-bridge-mx-puppet-slack`
			`- matrix-bridge-mx-puppet-twitter`
			`- matrix-bridge-mx-puppet-instagram`
			`- matrix-bridge-sms`
			`- matrix-bridge-heisenbridge`
refine hookshot role using `--test` 3 years ago			`- matrix-bridge-hookshot`
sync with previous repo 3 years ago			`- matrix-bot-matrix-reminder-bot`
Add matrix-registration-bot (#1771) * Add matrix-registration-bot This adds an install and uninstall task plus helpers. The bot is disabled by default. This commit does not include documentation, yet. In short, the bot can be enabled by adding matrix_bot_matrix_registration_bot_enabled: true matrix_bot_matrix_registration_bot_matrix_user_password: "verysecret" matrix_bot_matrix_registration_bot_matrix_admin_token: "supersecret" to the host_vars * Change bot username to bot.matrix-registration-bot following convention * Address smaller remarks, fix local docker build * Switch to an env file * Add environment variables extension for additional config * Add documentation for the matrix-registration-bot * Add screenshot on how to obtain admin access token * Use bot as admin to only have one access token (bot and admin api) * Use cleaner setting of matrix_synapse_registration_requires_token * Use config file for cleaner more secure usage * Delete unneeded env * Rename vars to make usage clear * Fix typos/wording and add notice about logging out * Convert configuration to use \|to_json * Reorder role includes Nothing should be after `matrix-common-after`. `matrix-bot-matrix-registration-bot` can probably be anywhere, but it makes sense to put it next to the other `matrix-bot-` roles. Minor group_vars/matrix_servers touchups Co-authored-by: Slavi Pantaleev <slavi@devture.com> 3 years ago			`- matrix-bot-matrix-registration-bot`
Fix config error, add nginx 2 years ago			`- matrix-bot-maubot`
add matrix-bot-buscarron 3 years ago			`- matrix-bot-buscarron`
added honoroit 3 years ago			`- matrix-bot-honoroit`
add postmoogle 2 years ago			`- matrix-bot-postmoogle`
sync with previous repo 3 years ago			`- matrix-bot-go-neb`
			`- matrix-bot-mjolnir`
Cactus comments (#2089) * Add construct for cactus comments role * Adjust config files * Add docker self build to defaults * Adjust tasks * Fix smaller syntax errors * Fix env argument * Add tmp path to allow container writing there Background why I did this: https://docs.gunicorn.org/en/stable/settings.html#worker-tmp-dir * Change port back to 5000 as not configurable in container * Try to add appservice config file for synapse to use * Inject appservice file * Correct copied variable name * Comment out unused app service file injection would need mounting the appservice file to the synapse container i guess * Move role before synapse to be able to inject during runtime * Remove unused parts * Change default user id to mirror official docs * Add docs * Update roles/matrix-cactus-comments/tasks/setup_install.yml Co-authored-by: Slavi Pantaleev <slavi@devture.com> * Update roles/matrix-cactus-comments/templates/cactus_appservice.yaml.j2 Co-authored-by: Slavi Pantaleev <slavi@devture.com> * Generate secrets if necessary, adjust docs * Rename cactusbot userid * Shorten salt strings Co-authored-by: Slavi Pantaleev <slavi@devture.com> * Use tmpfs instead of persistent mount * Remove proxy option as it is nonsense * Add download and serving of cc-client files * Add documentation on client * Clarify docs a bit * Add nginx proxy to required services Signed-off-by: Julian-Samuel Gebühr <julian-samuel@gebuehr.net> * Use container address Signed-off-by: Julian-Samuel Gebühr <julian-samuel@gebuehr.net> * Correct comment of user id Signed-off-by: Julian-Samuel Gebühr <julian-samuel@gebuehr.net> * Use releases or local distributed client Signed-off-by: Julian-Samuel Gebühr <julian-samuel@gebuehr.net> * Move homeserver url to defaults Signed-off-by: Julian-Samuel Gebühr <julian-samuel@gebuehr.net> * Correct truth value Signed-off-by: Julian-Samuel Gebühr <julian-samuel@gebuehr.net> * Add documentation of variables Co-authored-by: Slavi Pantaleev <slavi@devture.com> * Tabs vs. spaces Co-authored-by: Slavi Pantaleev <slavi@devture.com> * Make nginx root configurable Signed-off-by: Julian-Samuel Gebühr <julian-samuel@gebuehr.net> * Complete ake nginx root configurable Signed-off-by: Julian-Samuel Gebühr <julian-samuel@gebuehr.net> * Fix file permission Signed-off-by: Julian-Samuel Gebühr <julian-samuel@gebuehr.net> * Fix lint errors Signed-off-by: Julian-Samuel Gebühr <julian-samuel@gebuehr.net> Signed-off-by: Julian-Samuel Gebühr <julian-samuel@gebuehr.net> Co-authored-by: Slavi Pantaleev <slavi@devture.com> 2 years ago			`- matrix-cactus-comments`
sync with previous repo 3 years ago			`- matrix-synapse`
Add initial role for Dendrite as alternative Matrix server 4 years ago			`- matrix-dendrite`
Fixes to enable Conduit in setup-all 2 years ago			`- matrix-conduit`
sync with previous repo 3 years ago			`- matrix-synapse-admin`
			`- matrix-prometheus-node-exporter`
(BC Break) Redo how metrics are exposed to external Prometheus servers 2 years ago			`- matrix-prometheus-postgres-exporter`
sync with previous repo 3 years ago			`- matrix-prometheus`
			`- matrix-grafana`
			`- matrix-registration`
			`- matrix-client-element`
			`- matrix-client-hydrogen`
added matrix-client-cinny 3 years ago			`- matrix-client-cinny`
sync with previous repo 3 years ago			`- matrix-jitsi`
Add role to setup.yml 2 years ago			`- matrix-ldap-registration-proxy`
sync with previous repo 3 years ago			`- matrix-ma1sd`
			`- matrix-dimension`
			`- matrix-etherpad`
			`- matrix-email2matrix`
			`- matrix-sygnal`
Add a role to install 'ntfy' push-notification server. This commit adds a 'matrix-ntfy' role that runs Ntfy server in Docker with simple configuration, and plumbing to add the role to the playbook. TODO: documentation, self-check, database persistence. 2 years ago			`- matrix-ntfy`
sync with previous repo 3 years ago			`- matrix-nginx-proxy`
			`- matrix-coturn`
			`- matrix-aux`
			`- matrix-postgres-backup`
matrix-backup-borg: integrate postgres backups, add extended borgmatic configuration 3 years ago			`- matrix-backup-borg`
add comment 3 years ago			`- matrix-common-after`