Mirrors/ansible-collection-famedly-matrix
2
0
Fork 0
mirror of https://github.com/famedly/ansible-collection-matrix synced 2024-12-15 05:32:26 +00:00
Code Issues Projects Releases Packages Wiki Activity
ansible-collection-famedly-.../roles/synapse/vars/main.yml

239 lines
8.5 KiB
YAML
Raw Normal View History

First draft of synapse configuration Configuration is now described in a variable. This reduces the amount of documentation needed in the role and allows for a better upstream compatibility
2019-02-12 01:30:50 +00:00
---
allow more mounts for docker container
2019-12-09 13:47:21 +00:00
matrix_synapse_docker_volumes: "{{ matrix_synapse_base_docker_volumes + matrix_synapse_extra_docker_volumes }}"
matrix_synapse_base_docker_volumes:
- "{{ matrix_synapse_config.media_store_path }}:{{ matrix_synapse_config.media_store_path }}"
- "{{ matrix_synapse_config.uploads_path }}:{{ matrix_synapse_config.uploads_path }}"
- "{{ matrix_synapse_base_path }}/homeserver.yaml:{{ matrix_synapse_base_path }}/homeserver.yaml"
- "{{ matrix_synapse_base_path }}/log.config:{{ matrix_synapse_base_path }}/log.config"
- "{{ matrix_synapse_base_path }}/tls:{{ matrix_synapse_base_path }}/tls"
fix matrix_synapse_extra_config
2019-02-16 10:25:04 +00:00
matrix_synapse_config: "{{ matrix_synapse_base_config | combine(matrix_synapse_extra_config, recursive=True) }}"
feat(synapse): add support for deploying workers Can deploy synapse workers and allow costum amounts of workers for each type. For documentation on how to use, see `roles/synapse/README.md`. In a docker deployment, each worker runs in their own docker container with respective listener configurations. Labels can be declared in `tasks/configure_workers.yml` for routing of requests. In systemd deployments, each worker runs in it's own systemd service, which are marked as being part of the main service, so restarting the main service will restart all the workers as well.
2020-10-02 07:49:51 +00:00
# Worker-specific config
matrix_synapse_media_worker_override: {}
matrix_synapse_fed_sender_override: {}
matrix_synapse_worker_fed_senders: []
matrix_synapse_worker_metrics_listener:
- type: metrics
port: "{{ matrix_synapse_worker_metrics_port }}"
matrix_synapse_worker_config:
start_pushers: "{{ not matrix_synapse_worker_push }}"
notify_appservices: "{{ not matrix_synapse_worker_appservice }}"
update_user_directory: "{{ not matrix_synapse_worker_user_search }}"
listeners:
- port: "{{ matrix_synapse_worker_replication_port }}"
bind_addresses:
- "{{ matrix_synapse_worker_replication_bind_ip }}"
type: http
resources:
- names: [ replication ]
# homeserver.yml
fix matrix_synapse_extra_config
2019-02-16 10:25:04 +00:00
matrix_synapse_base_config:
First draft of synapse configuration Configuration is now described in a variable. This reduces the amount of documentation needed in the role and allows for a better upstream compatibility
2019-02-12 01:30:50 +00:00
server_name: "{{ matrix_server_name }}"
feat(synapse): allow public_baseurl configuration
2021-02-08 05:20:48 +00:00
public_baseurl: "{{ matrix_synapse_public_baseurl }}"
Use matrix base path in task files
2019-02-21 22:17:57 +00:00
tls_certificate_path: "{{ matrix_synapse_base_path }}/tls/{{ matrix_server_name }}.crt"
tls_private_key_path: "{{ matrix_synapse_base_path }}/tls/{{ matrix_server_name }}.key"
First draft of synapse configuration Configuration is now described in a variable. This reduces the amount of documentation needed in the role and allows for a better upstream compatibility
2019-02-12 01:30:50 +00:00
acme:
chore: remove trailing whitespace
2021-01-22 20:07:31 +00:00
enabled: false
First draft of synapse configuration Configuration is now described in a variable. This reduces the amount of documentation needed in the role and allows for a better upstream compatibility
2019-02-12 01:30:50 +00:00
url: https://acme-v01.api.letsencrypt.org/directory
port: 80
Define a yaml file to configure synapse rather than templating it
2019-02-12 00:36:57 +00:00
bind_addresses: ['::', '0.0.0.0']
First draft of synapse configuration Configuration is now described in a variable. This reduces the amount of documentation needed in the role and allows for a better upstream compatibility
2019-02-12 01:30:50 +00:00
reprovision_threshold: 30
Extract skip tls from configuration
2019-02-17 20:52:15 +00:00
no_tls: false
First draft of synapse configuration Configuration is now described in a variable. This reduces the amount of documentation needed in the role and allows for a better upstream compatibility
2019-02-12 01:30:50 +00:00
tls_fingerprints: []
Use matrix base path in task files
2019-02-21 22:17:57 +00:00
pid_file: "{{ matrix_synapse_base_path }}/synapse.pid"
First draft of synapse configuration Configuration is now described in a variable. This reduces the amount of documentation needed in the role and allows for a better upstream compatibility
2019-02-12 01:30:50 +00:00
soft_file_limit: 0
use_presence: true
listeners:
- port: 8448
bind_addresses:
- '::'
- '0.0.0.0'
type: http
Extract skip tls from configuration
2019-02-17 20:52:15 +00:00
tls: true
First draft of synapse configuration Configuration is now described in a variable. This reduces the amount of documentation needed in the role and allows for a better upstream compatibility
2019-02-12 01:30:50 +00:00
x_forwarded: false
resources:
- names: [client]
compress: true
- names: [federation]
compress: false
- port: 8008
tls: false
Homogenise configuration
2019-02-17 20:53:05 +00:00
bind_addresses:
- '::'
- '0.0.0.0'
First draft of synapse configuration Configuration is now described in a variable. This reduces the amount of documentation needed in the role and allows for a better upstream compatibility
2019-02-12 01:30:50 +00:00
type: http
x_forwarded: false
resources:
- names: [client]
compress: true
- names: [federation]
compress: false
database:
name: "psycopg2"
args:
user: "{{ matrix_synapse_pg_user }}"
password: "{{ matrix_synapse_pg_pass }}"
database: "{{ matrix_synapse_pg_db }}"
host: "{{ matrix_synapse_pg_host }}"
cp_min: 5
cp_max: 10
feat(synapse): add support for deploying workers Can deploy synapse workers and allow costum amounts of workers for each type. For documentation on how to use, see `roles/synapse/README.md`. In a docker deployment, each worker runs in their own docker container with respective listener configurations. Labels can be declared in `tasks/configure_workers.yml` for routing of requests. In systemd deployments, each worker runs in it's own systemd service, which are marked as being part of the main service, so restarting the main service will restart all the workers as well.
2020-10-02 07:49:51 +00:00
redis:
enabled: "{{ matrix_synapse_redis_enabled }}"
host: "{{ matrix_synapse_redis_host }}"
port: "{{ matrix_synapse_redis_port }}"
password: "{{ matrix_synapse_redis_pass }}"
update synapse to v1.3.0 this includes changes to the logging configuration
2019-08-15 22:41:34 +00:00
log_config: "{{ matrix_synapse_base_path }}/log.config"
First draft of synapse configuration Configuration is now described in a variable. This reduces the amount of documentation needed in the role and allows for a better upstream compatibility
2019-02-12 01:30:50 +00:00
event_cache_size: "10K"
rc_messages_per_second: 0.2
rc_message_burst_count: 10.0
federation_rc_window_size: 1000
federation_rc_sleep_limit: 10
federation_rc_sleep_delay: 500
federation_rc_reject_limit: 50
federation_rc_concurrent: 3
Use matrix base path in task files
2019-02-21 22:17:57 +00:00
media_store_path: "{{ matrix_synapse_base_path }}/media_store"
uploads_path: "{{ matrix_synapse_base_path }}/uploads"
Adjust variable definitions
2019-02-14 23:24:21 +00:00
max_upload_size: "23M"
First draft of synapse configuration Configuration is now described in a variable. This reduces the amount of documentation needed in the role and allows for a better upstream compatibility
2019-02-12 01:30:50 +00:00
max_image_pixels: "32M"
dynamic_thumbnails: false
thumbnail_sizes:
- width: 32
height: 32
method: crop
- width: 96
height: 96
method: crop
- width: 320
height: 240
method: scale
- width: 640
height: 480
method: scale
- width: 800
height: 600
method: scale
chore: remove trailing whitespace
2021-01-22 20:07:31 +00:00
url_preview_enabled: true
First draft of synapse configuration Configuration is now described in a variable. This reduces the amount of documentation needed in the role and allows for a better upstream compatibility
2019-02-12 01:30:50 +00:00
url_preview_ip_range_blacklist:
- '127.0.0.0/8'
- '10.0.0.0/8'
- '172.16.0.0/12'
- '192.168.0.0/16'
- '100.64.0.0/10'
- '169.254.0.0/16'
- '::1/128'
- 'fe80::/64'
- 'fc00::/7'
url_preview_url_blacklist:
- username: '*'
- netloc: 'google.com'
- netloc: '*.google.com'
- netloc: 'twitter.com'
- netloc: '*.twitter.com'
- netloc: 't.co'
- netloc: '*.t.co'
max_spider_size: "10M"
enable_registration: False
fix(synapse): fix registration secret templating We had a problem with yaml strings here, which caused double quotes and additional newlines.
2021-01-22 19:35:38 +00:00
registration_shared_secret: >-
{{ registration_shared_secret_file.content | b64decode }}
Use generated/retrieved secrets in the config
2019-02-21 00:34:50 +00:00
form_secret: "{{ form_secret_file.content | b64decode }}"
First draft of synapse configuration Configuration is now described in a variable. This reduces the amount of documentation needed in the role and allows for a better upstream compatibility
2019-02-12 01:30:50 +00:00
bcrypt_rounds: 12
allow_guest_access: False
trusted_third_party_id_servers:
- matrix.org
- vector.im
autocreate_auto_join_rooms: true
enable_metrics: False
chore: remove trailing whitespace
2021-01-22 20:07:31 +00:00
report_stats: "{{ matrix_synapse_report_stats }}"
First draft of synapse configuration Configuration is now described in a variable. This reduces the amount of documentation needed in the role and allows for a better upstream compatibility
2019-02-12 01:30:50 +00:00
app_service_config_files: []
track_appservice_user_ips: False
Use generated/retrieved secrets in the config
2019-02-21 00:34:50 +00:00
macaroon_secret_key: "{{ macaroon_file.content | b64decode }}"
First draft of synapse configuration Configuration is now described in a variable. This reduces the amount of documentation needed in the role and allows for a better upstream compatibility
2019-02-12 01:30:50 +00:00
expire_access_token: False
signing_key_path: "{{ matrix_synapse_signing_key_path }}"
old_signing_keys: {}
key_refresh_interval: "1d" # 1 Day.
# TODO: More servers should be added
perspectives:
servers:
"matrix.org":
verify_keys:
"ed25519:auto":
key: "Noi6WqcDj0QmPxCNQqgezwTlBKrfqehY1u2FyWP9uYw"
password_config:
enabled: true
push:
chore: remove trailing whitespace
2021-01-22 20:07:31 +00:00
include_content: false
Finish the first draft of the configuration variable
2019-02-12 01:45:09 +00:00
enable_group_creation: true
First draft of synapse configuration Configuration is now described in a variable. This reduces the amount of documentation needed in the role and allows for a better upstream compatibility
2019-02-12 01:30:50 +00:00
alias_creation_rules:
- user_id: "*"
alias: "*"
action: allow
Add container label with synapse version
2020-06-22 18:35:26 +00:00
matrix_synapse_docker_labels_complete: "{{ matrix_synapse_docker_labels_base | combine(matrix_synapse_docker_labels) }}"
matrix_synapse_docker_labels_base:
fix(synapse): if not running a version, display the branch instead of displaying a wrong default
2021-04-28 09:11:57 +00:00
version: "{{ matrix_synapse_version if (matrix_synapse_container_tag == 'v' + matrix_synapse_version) else matrix_synapse_container_tag }}"
fix(synapse): combining labels broke for workers
2021-04-30 06:13:09 +00:00
matrix_synapse_worker_labels_base: "{{ matrix_synapse_docker_labels_base }}"
feat(synapse): add support for deploying workers Can deploy synapse workers and allow costum amounts of workers for each type. For documentation on how to use, see `roles/synapse/README.md`. In a docker deployment, each worker runs in their own docker container with respective listener configurations. Labels can be declared in `tasks/configure_workers.yml` for routing of requests. In systemd deployments, each worker runs in it's own systemd service, which are marked as being part of the main service, so restarting the main service will restart all the workers as well.
2020-10-02 07:49:51 +00:00
# Control where which paths get routed
matrix_synapse_worker_client_sync_endpoints:
- "/_matrix/client/(v2_alpha|r0)/sync$"
- "/_matrix/client/(api/v1|v2_alpha|r0)/events$"
- "/_matrix/client/(api/v1|r0)/initialSync$"
- "/_matrix/client/(api/v1|r0)/rooms/[^/]+/initialSync$"
matrix_synapse_worker_client_api_endpoints:
- "/_matrix/client/(api/v1|r0|unstable)/publicRooms$"
- "/_matrix/client/(api/v1|r0|unstable)/rooms/.*/joined_members$"
- "/_matrix/client/(api/v1|r0|unstable)/rooms/.*/context/.*$"
- "/_matrix/client/(api/v1|r0|unstable)/rooms/.*/members$"
- "/_matrix/client/(api/v1|r0|unstable)/rooms/.*/state$"
- "/_matrix/client/(api/v1|r0|unstable)/account/3pid$"
- "/_matrix/client/(api/v1|r0|unstable)/keys/query$"
- "/_matrix/client/(api/v1|r0|unstable)/keys/changes$"
- "/_matrix/client/versions$"
- "/_matrix/client/(api/v1|r0|unstable)/voip/turnServer$"
- "/_matrix/client/(api/v1|r0|unstable)/joined_groups$"
- "/_matrix/client/(api/v1|r0|unstable)/publicised_groups$"
- "/_matrix/client/(api/v1|r0|unstable)/publicised_groups/"
- "/_synapse/client/password_reset/email/submit_token$"
matrix_synapse_worker_client_send_endpoints:
- "/_matrix/client/(api/v1|r0|unstable)/rooms/.*/send"
- "/_matrix/client/(api/v1|r0|unstable)/rooms/.*/state/"
- "/_matrix/client/(api/v1|r0|unstable)/rooms/.*/(join|invite|leave|ban|unban|kick)$"
- "/_matrix/client/(api/v1|r0|unstable)/join/"
- "/_matrix/client/(api/v1|r0|unstable)/profile/"
matrix_synapse_worker_client_login_endpoints:
- "/_matrix/client/(api/v1|r0|unstable)/login$"
- "/_matrix/client/(r0|unstable)/register$"
- "/_matrix/client/(r0|unstable)/auth/.*/fallback/web$"
matrix_synapse_worker_federation_endpoints:
- "/_matrix/federation/v1/event/"
- "/_matrix/federation/v1/state/"
- "/_matrix/federation/v1/state_ids/"
- "/_matrix/federation/v1/backfill/"
- "/_matrix/federation/v1/get_missing_events/"
- "/_matrix/federation/v1/publicRooms"
- "/_matrix/federation/v1/query/"
- "/_matrix/federation/v1/make_join/"
- "/_matrix/federation/v1/make_leave/"
- "/_matrix/federation/v1/send_join/"
- "/_matrix/federation/v2/send_join/"
- "/_matrix/federation/v1/send_leave/"
- "/_matrix/federation/v2/send_leave/"
- "/_matrix/federation/v1/invite/"
- "/_matrix/federation/v2/invite/"
- "/_matrix/federation/v1/query_auth/"
- "/_matrix/federation/v1/event_auth/"
- "/_matrix/federation/v1/exchange_third_party_invite/"
- "/_matrix/federation/v1/user/devices/"
- "/_matrix/federation/v1/get_groups_publicised$"
- "/_matrix/key/v2/query"
- "/_matrix/federation/v1/send/"
matrix_synapse_worker_media_endpoints:
- "/_matrix/media/"
- "/_synapse/admin/v1/purge_media_cache$"
- "/_synapse/admin/v1/room/.*/media.*$"
- "/_synapse/admin/v1/user/.*/media.*$"
- "/_synapse/admin/v1/media/.*$"
- "/_synapse/admin/v1/quarantine_media/.*$"
matrix_synapse_worker_user_search_endpoints:
- "/_matrix/client/(api/v1|r0|unstable)/user_directory/search$"
Reference in a new issue Copy permalink