mirror of
https://github.com/famedly/ansible-collection-matrix
synced 2024-12-13 12:42:29 +00:00
69 lines
1.8 KiB
YAML
69 lines
1.8 KiB
YAML
---
|
|
- name: Create secrets directory
|
|
file:
|
|
path: "{{ matrix_synapse_secrets_path }}"
|
|
state: directory
|
|
owner: synapse
|
|
group: synapse
|
|
mode: 0750
|
|
tags: ['prepare', 'prepare-synapse']
|
|
|
|
- name: Generate secrets
|
|
include_tasks: generate_secret.yml
|
|
loop:
|
|
- file: "macaroon.key"
|
|
var: "macaroon_file"
|
|
- file: "registration.key"
|
|
var: "registration_shared_secret_file"
|
|
- file: "form.key"
|
|
var: "form_secret_file"
|
|
loop_control:
|
|
loop_var: secret
|
|
tags: ['deploy', 'deploy-synapse']
|
|
|
|
- name: Create directory for tls
|
|
file:
|
|
path: "{{ matrix_synapse_base_path }}/tls"
|
|
state: directory
|
|
owner: synapse
|
|
group: synapse
|
|
mode: 0770
|
|
tags: ['prepare', 'prepare-synapse']
|
|
|
|
- name: Create directories for media storage
|
|
file:
|
|
path: "{{ item }}"
|
|
state: directory
|
|
owner: synapse
|
|
group: synapse
|
|
mode: 0770
|
|
loop:
|
|
- "{{ matrix_synapse_config.media_store_path }}"
|
|
- "{{ matrix_synapse_config.uploads_path }}"
|
|
# Needs matrix_synapse_config which only the previous task poplulates fully, otherwise, the secrets are undefined and break at this point
|
|
tags: ['deploy', 'deploy-synapse']
|
|
|
|
- name: Merge replication listener config
|
|
set_fact:
|
|
matrix_synapse_config: "{{ matrix_synapse_config | combine(matrix_synapse_worker_config, recursive=True, list_merge='append') }}"
|
|
when: matrix_synapse_workers_enabled
|
|
tags: ['deploy', 'deploy-synapse']
|
|
|
|
- name: Deploy config
|
|
copy:
|
|
content: "{{ matrix_synapse_config | to_nice_yaml }}"
|
|
dest: "{{ matrix_synapse_base_path }}/homeserver.yaml"
|
|
owner: synapse
|
|
group: synapse
|
|
mode: 0660
|
|
notify:
|
|
- "restart matrix-synapse"
|
|
tags: ['deploy', 'deploy-synapse']
|
|
|
|
- name: Configure logging
|
|
include_tasks: logging.yml
|
|
tags: ['always']
|
|
|
|
- name: Create certificates
|
|
include_tasks: crypto.yml
|
|
tags: ['always']
|