You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
120 lines
2.8 KiB
120 lines
2.8 KiB
---
|
|
- name: 'install gnupg and ca-cert'
|
|
apt:
|
|
pkg:
|
|
- 'gnupg'
|
|
- 'ca-certificates'
|
|
tags:
|
|
- 'packages'
|
|
|
|
- name: 'add matrix gnupg key to apt'
|
|
apt_key:
|
|
id: 'AAF9AE843A7584B5A3E4CD2BCF45A512DE2DA058'
|
|
url: 'https://packages.matrix.org/debian/matrix-org-archive-keyring.gpg'
|
|
state: 'present'
|
|
tags:
|
|
- 'packages'
|
|
|
|
- name: 'add matrix apt repos'
|
|
apt_repository:
|
|
repo: '{{ item }}'
|
|
state: 'present'
|
|
loop:
|
|
- 'deb https://packages.matrix.org/debian/ buster main'
|
|
- 'deb-src https://packages.matrix.org/debian/ buster main'
|
|
tags:
|
|
- 'packages'
|
|
|
|
- name: 'set synapse server name'
|
|
debconf:
|
|
name: 'matrix-synapse-py3'
|
|
question: 'matrix-synapse/server-name'
|
|
vtype: 'string'
|
|
value: '{{ matrix_domain }}'
|
|
|
|
- name: 'install synapse'
|
|
include_role: name='service'
|
|
vars:
|
|
service_name: 'matrix-synapse'
|
|
service_packages:
|
|
- 'matrix-synapse-py3'
|
|
- 'postgresql'
|
|
- 'postgresql-contrib'
|
|
- 'python3-psycopg2'
|
|
|
|
- block:
|
|
- name: 'create synapse DB'
|
|
postgresql_db:
|
|
name: 'synapse'
|
|
encoding: 'UTF-8'
|
|
lc_collate: 'C'
|
|
lc_ctype: 'C'
|
|
template: 'template0'
|
|
- name: 'create synapse DB user'
|
|
postgresql_user:
|
|
name: 'matrix-synapse'
|
|
db: 'synapse'
|
|
priv: 'ALL'
|
|
become: true
|
|
become_method: 'su'
|
|
become_user: 'postgres'
|
|
|
|
#- name: fix synapse folders permissions
|
|
# file:
|
|
# path: "{{ item }}"
|
|
# owner: matrix-synapse
|
|
# group: nogroup
|
|
# mode: 0750
|
|
# state: directory
|
|
# with_items:
|
|
# - /etc/matrix-synapse
|
|
# - /etc/matrix-synapse/conf.d
|
|
|
|
- name: 'upload synapse reverse proxy conf'
|
|
template:
|
|
src: 'synapse.conf.j2'
|
|
dest: '/etc/nginx/locations/{{ server_fqdn }}/synapse.conf'
|
|
notify: 'restart nginx'
|
|
|
|
- name: 'generate matrix ldap password'
|
|
gen_passwd: 'length=32'
|
|
register: new_passwd
|
|
tags:
|
|
- 'service_password'
|
|
|
|
- name: 'set matrix ldap password in ldap'
|
|
delegate_to: 'localhost'
|
|
ldap_passwd:
|
|
dn: 'cn={{ ansible_hostname }},ou=Server,{{ ldap_basedn }}'
|
|
passwd: '{{ new_passwd.passwd }}'
|
|
server_uri: 'ldap://{{ ldap_server }}'
|
|
start_tls: true
|
|
bind_dn: '{{ ldap_admin_dn }}'
|
|
bind_pw: '{{ ldap_admin_pw }}'
|
|
tags:
|
|
- 'service_password'
|
|
|
|
- name: 'update tls ca'
|
|
copy:
|
|
content: '{{ tls_root_ca }}'
|
|
dest: '/etc/ldap/root_ca.crt'
|
|
|
|
- name: 'configure ldap client'
|
|
copy:
|
|
src: 'ldap.conf'
|
|
dest: '/etc/ldap/ldap.conf'
|
|
|
|
- name: 'get turn shared secret'
|
|
slurp:
|
|
path: '/etc/coturn_rest.secret'
|
|
register: coturn_secret
|
|
when: turn_integration
|
|
delegate_to: '{{ turn_host }}'
|
|
|
|
- name: 'upload synapse conf'
|
|
template:
|
|
src: 'homeserver.yaml.j2'
|
|
dest: '/etc/matrix-synapse/homeserver.yaml'
|
|
notify: 'reload matrix-synapse'
|
|
tags:
|
|
- 'service_password'
|