2017-07-31 22:07:30 +02:00
|
|
|
# The bare hostname which represents your identity.
|
|
|
|
# This is something like "example.com".
|
|
|
|
# Note: this playbook does not touch the server referenced here.
|
|
|
|
hostname_identity: "{{ host_specific_hostname_identity }}"
|
|
|
|
|
|
|
|
# This is where your data lives and what we set up here.
|
|
|
|
# This and the Riot hostname (see below) are expected to be on the same server.
|
|
|
|
hostname_matrix: "matrix.{{ hostname_identity }}"
|
|
|
|
|
|
|
|
# This is where you access the web UI from and what we set up here.
|
|
|
|
# This and the Matrix hostname (see above) are expected to be on the same server.
|
|
|
|
hostname_riot: "riot.{{ hostname_identity }}"
|
|
|
|
|
2018-11-01 08:46:47 +02:00
|
|
|
|
2017-07-31 22:07:30 +02:00
|
|
|
matrix_user_username: "matrix"
|
|
|
|
matrix_user_uid: 991
|
|
|
|
matrix_user_gid: 991
|
|
|
|
|
|
|
|
matrix_base_data_path: "/matrix"
|
|
|
|
matrix_environment_variables_data_path: "{{ matrix_base_data_path }}/environment-variables"
|
2018-11-01 08:46:47 +02:00
|
|
|
matrix_scratchpad_dir: "{{ matrix_base_data_path }}/scratchpad"
|
|
|
|
matrix_static_files_base_path: "{{ matrix_base_data_path }}/static-files"
|
|
|
|
|
|
|
|
matrix_homeserver_url: "https://{{ hostname_matrix }}"
|
|
|
|
matrix_identity_server_url: "https://{{ matrix_synapse_trusted_third_party_id_servers[0] }}"
|
|
|
|
|
|
|
|
# The Docker network that all services would be put into
|
|
|
|
matrix_docker_network: "matrix"
|
|
|
|
|
|
|
|
|
2018-11-01 12:50:33 +02:00
|
|
|
matrix_synapse_docker_image: "matrixdotorg/synapse:v0.33.8"
|
2018-06-26 20:05:59 +02:00
|
|
|
|
2017-09-07 11:12:31 +02:00
|
|
|
matrix_synapse_base_path: "{{ matrix_base_data_path }}/synapse"
|
|
|
|
matrix_synapse_config_dir_path: "{{ matrix_synapse_base_path }}/config"
|
|
|
|
matrix_synapse_run_path: "{{ matrix_synapse_base_path }}/run"
|
2018-02-20 21:36:08 +02:00
|
|
|
matrix_synapse_storage_path: "{{ matrix_synapse_base_path }}/storage"
|
|
|
|
matrix_synapse_media_store_path: "{{ matrix_synapse_storage_path }}/media-store"
|
2018-08-17 08:02:12 +02:00
|
|
|
matrix_synapse_ext_path: "{{ matrix_synapse_base_path }}/ext"
|
2018-06-26 20:05:59 +02:00
|
|
|
|
|
|
|
# Specifies which template files to use when configuring Synapse.
|
|
|
|
# If you'd like to have your own different configuration, feel free to copy and paste
|
|
|
|
# the original files into your inventory (e.g. in `inventory/host_vars/<host>/`)
|
|
|
|
# and then change the specific host's `vars.yaml` file like this:
|
|
|
|
# matrix_synapse_template_synapse_homeserver: "{{ playbook_dir }}/inventory/host_vars/<host>/homeserver.yaml.j2"
|
|
|
|
matrix_synapse_template_synapse_homeserver: "{{ role_path }}/templates/synapse/homeserver.yaml.j2"
|
|
|
|
matrix_synapse_template_synapse_log: "{{ role_path }}/templates/synapse/synapse.log.config.j2"
|
|
|
|
|
|
|
|
matrix_synapse_macaroon_secret_key: ""
|
|
|
|
matrix_synapse_registration_shared_secret: "{{ matrix_synapse_macaroon_secret_key }}"
|
|
|
|
matrix_synapse_form_secret: "{{ matrix_synapse_macaroon_secret_key }}"
|
|
|
|
|
2018-08-15 09:23:22 +02:00
|
|
|
# These are the identity servers that would be trusted by Synapse if mxisd is NOT enabled
|
|
|
|
matrix_synapse_id_servers_public: ['vector.im', 'riot.im', 'matrix.org']
|
|
|
|
|
|
|
|
# These are the identity servers that would be trusted by Synapse if mxisd IS enabled
|
|
|
|
matrix_synapse_id_servers_own: "['{{ hostname_matrix }}']"
|
|
|
|
|
|
|
|
# The final list of identity servers to use for Synapse.
|
|
|
|
# The first one would also be used as riot-web's default identity server.
|
|
|
|
matrix_synapse_trusted_third_party_id_servers: "{{ matrix_synapse_id_servers_own if matrix_mxisd_enabled else matrix_synapse_id_servers_public }}"
|
|
|
|
|
2018-08-08 08:17:18 +02:00
|
|
|
matrix_synapse_max_upload_size_mb: 10
|
|
|
|
matrix_synapse_max_log_file_size_mb: 100
|
|
|
|
matrix_synapse_max_log_files_count: 10
|
2018-06-26 20:05:59 +02:00
|
|
|
|
2018-08-20 20:24:54 +02:00
|
|
|
# Rate limits
|
|
|
|
matrix_synapse_rc_messages_per_second: 0.2
|
|
|
|
matrix_synapse_rc_message_burst_count: 10.0
|
|
|
|
|
2018-09-07 13:49:40 +02:00
|
|
|
# Enable this to allow Synapse to report utilization statistics about your server to matrix.org
|
|
|
|
# (things like number of users, number of messages sent, uptime, load, etc.)
|
|
|
|
matrix_synapse_report_stats: false
|
|
|
|
|
2018-10-05 09:32:43 +02:00
|
|
|
# Controls whether the Matrix server will track presence status (online, offline, unavailable) for users.
|
|
|
|
# If users participate in large rooms with many other servers,
|
|
|
|
# disabling this will decrease server load significantly.
|
|
|
|
matrix_synapse_use_presence: true
|
|
|
|
|
2018-09-07 14:01:38 +02:00
|
|
|
# Controls password-peppering for Matrix Synapse. Not to be changed after initial setup.
|
|
|
|
matrix_synapse_password_config_pepper: ""
|
|
|
|
|
2018-09-07 15:13:50 +02:00
|
|
|
# Controls the number of events that Matrix Synapse caches in memory.
|
|
|
|
matrix_synapse_event_cache_size: "100K"
|
|
|
|
|
2018-09-27 09:03:31 +02:00
|
|
|
# Controls cache sizes for Matrix Synapse via the SYNAPSE_CACHE_FACTOR environment variable.
|
|
|
|
# Raise this to increase cache sizes or lower it to potentially lower memory use.
|
|
|
|
# To learn more, see:
|
|
|
|
# - https://github.com/matrix-org/synapse#help-synapse-eats-all-my-ram
|
|
|
|
# - https://github.com/matrix-org/synapse/issues/3939
|
|
|
|
matrix_synapse_cache_factor: 0.5
|
|
|
|
|
2018-10-25 17:02:04 +02:00
|
|
|
# Controls whether Matrix Synapse will federate at all.
|
|
|
|
# Disable this to completely isolate your server from the rest of the Matrix network.
|
|
|
|
matrix_synapse_federation_enabled: true
|
|
|
|
|
|
|
|
# A list of domain names that are allowed to federate with the given Matrix Synapse server.
|
|
|
|
# An empty list value (`[]`) will also effectively stop federation, but if that's the desired
|
|
|
|
# result, it's better to accomplish it by changing `matrix_synapse_federation_enabled`.
|
|
|
|
matrix_synapse_federation_domain_whitelist: ~
|
|
|
|
|
2018-08-17 08:02:12 +02:00
|
|
|
# A list of additional "volumes" to mount in the container.
|
|
|
|
# This list gets populated dynamically based on Synapse extensions that have been enabled.
|
|
|
|
# Contains definition objects like this: `{"src": "/outside", "dst": "/inside", "options": "rw|ro|slave|.."}
|
|
|
|
matrix_synapse_container_additional_volumes: []
|
|
|
|
|
|
|
|
# A list of additional loggers to register in synapse.log.config.
|
|
|
|
# This list gets populated dynamically based on Synapse extensions that have been enabled.
|
|
|
|
# Contains definition objects like this: `{"name": "..", "level": "DEBUG"}
|
|
|
|
matrix_synapse_additional_loggers: []
|
|
|
|
|
2018-09-01 17:51:07 +02:00
|
|
|
# A list of service config files
|
|
|
|
# This list gets populated dynamically based on Synapse extensions that have been enabled.
|
2018-09-02 16:05:14 +02:00
|
|
|
# Contains fs paths
|
2018-09-01 17:51:07 +02:00
|
|
|
matrix_synapse_app_service_config_files: []
|
|
|
|
|
2018-08-17 08:02:12 +02:00
|
|
|
# This is set dynamically during execution depending on whether
|
|
|
|
# any password providers have been enabled or not.
|
|
|
|
matrix_synapse_password_providers_enabled: false
|
|
|
|
|
2018-11-01 08:46:47 +02:00
|
|
|
|
2018-08-17 08:25:52 +02:00
|
|
|
# Enable this to activate the REST auth password provider module.
|
2018-08-17 08:02:12 +02:00
|
|
|
# See: https://github.com/kamax-io/matrix-synapse-rest-auth
|
|
|
|
matrix_synapse_ext_password_provider_rest_auth_enabled: false
|
|
|
|
matrix_synapse_ext_password_provider_rest_auth_download_url: "https://raw.githubusercontent.com/kamax-io/matrix-synapse-rest-auth/v0.1.1/rest_auth_provider.py"
|
|
|
|
matrix_synapse_ext_password_provider_rest_auth_endpoint: ""
|
|
|
|
matrix_synapse_ext_password_provider_rest_auth_registration_enforce_lowercase: false
|
|
|
|
matrix_synapse_ext_password_provider_rest_auth_registration_profile_name_autofill: true
|
|
|
|
matrix_synapse_ext_password_provider_rest_auth_login_profile_name_autofill: false
|
|
|
|
|
2018-08-20 16:11:55 +02:00
|
|
|
# Enable this to activate the Shared Secret Auth password provider module.
|
|
|
|
# See: https://github.com/devture/matrix-synapse-shared-secret-auth
|
|
|
|
matrix_synapse_ext_password_provider_shared_secret_auth_enabled: false
|
|
|
|
matrix_synapse_ext_password_provider_shared_secret_auth_download_url: "https://raw.githubusercontent.com/devture/matrix-synapse-shared-secret-auth/1.0/shared_secret_authenticator.py"
|
|
|
|
matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret: ""
|
|
|
|
|
2018-11-01 08:46:47 +02:00
|
|
|
|
|
|
|
# The defaults below cause a postgres server to be configured (running within a container).
|
|
|
|
# Using an external server is possible by tweaking all of the parameters below.
|
|
|
|
matrix_postgres_use_external: false
|
|
|
|
matrix_postgres_connection_hostname: "matrix-postgres"
|
|
|
|
matrix_postgres_connection_username: "synapse"
|
|
|
|
matrix_postgres_connection_password: "synapse-password"
|
|
|
|
matrix_postgres_db_name: "homeserver"
|
|
|
|
|
2017-07-31 22:07:30 +02:00
|
|
|
matrix_postgres_data_path: "{{ matrix_base_data_path }}/postgres"
|
|
|
|
|
2018-11-01 08:46:47 +02:00
|
|
|
matrix_postgres_docker_image_v9: "postgres:9.6.10-alpine"
|
|
|
|
matrix_postgres_docker_image_v10: "postgres:10.5-alpine"
|
2018-11-10 10:41:10 +02:00
|
|
|
matrix_postgres_docker_image_v11: "postgres:11.1-alpine"
|
2018-11-01 09:48:20 +02:00
|
|
|
matrix_postgres_docker_image_latest: "{{ matrix_postgres_docker_image_v11 }}"
|
2018-05-28 13:47:09 +02:00
|
|
|
|
2017-07-31 22:07:30 +02:00
|
|
|
|
2018-11-01 08:46:47 +02:00
|
|
|
matrix_coturn_docker_image: "instrumentisto/coturn:4.5.0.8"
|
|
|
|
|
|
|
|
matrix_coturn_base_path: "{{ matrix_base_data_path }}/coturn"
|
|
|
|
matrix_coturn_config_path: "{{ matrix_coturn_base_path }}/turnserver.conf"
|
2018-05-28 13:47:09 +02:00
|
|
|
|
2018-05-25 20:58:53 +02:00
|
|
|
# A shared secret (between Synapse and Coturn) used for authentication.
|
|
|
|
# You can put any string here, but generating a strong one is preferred (e.g. `pwgen -s 64 1`).
|
|
|
|
matrix_coturn_turn_static_auth_secret: ""
|
|
|
|
|
2017-08-06 17:26:06 +02:00
|
|
|
# UDP port-range to use for TURN
|
|
|
|
matrix_coturn_turn_udp_min_port: 49152
|
|
|
|
matrix_coturn_turn_udp_max_port: 49172
|
|
|
|
|
2017-08-30 11:07:03 +02:00
|
|
|
matrix_coturn_turn_external_ip_address: "{{ ansible_host }}"
|
|
|
|
|
2018-08-15 09:23:22 +02:00
|
|
|
|
2017-09-07 17:26:41 +02:00
|
|
|
matrix_s3_media_store_enabled: false
|
2018-11-01 08:46:47 +02:00
|
|
|
matrix_s3_goofys_docker_image: "cloudproto/goofys:latest"
|
2017-09-07 17:26:41 +02:00
|
|
|
matrix_s3_media_store_bucket_name: "your-bucket-name"
|
|
|
|
matrix_s3_media_store_aws_access_key: "your-aws-access-key"
|
2017-09-08 15:53:24 +02:00
|
|
|
matrix_s3_media_store_aws_secret_key: "your-aws-secret-key"
|
2018-02-20 21:36:08 +02:00
|
|
|
matrix_s3_media_store_region: "eu-central-1"
|
2017-09-12 11:41:44 +02:00
|
|
|
|
2018-08-15 09:23:22 +02:00
|
|
|
|
2018-08-14 13:11:41 +02:00
|
|
|
# By default, this playbook sets up a postfix mailer server (running in a container).
|
|
|
|
# This is so that Matrix Synapse can send email reminders for unread messages.
|
2018-08-15 09:23:22 +02:00
|
|
|
# Other services (like mxisd), however, also use that mailer to send emails through it.
|
2018-08-14 13:11:41 +02:00
|
|
|
matrix_mailer_enabled: true
|
|
|
|
|
2018-11-01 08:46:47 +02:00
|
|
|
matrix_mailer_docker_image: "panubo/postfix:latest"
|
|
|
|
|
2018-08-14 13:11:41 +02:00
|
|
|
matrix_mailer_sender_address: "matrix@{{ hostname_identity }}"
|
|
|
|
matrix_mailer_relay_use: false
|
|
|
|
matrix_mailer_relay_host_name: "mail.example.com"
|
|
|
|
matrix_mailer_relay_host_port: 587
|
|
|
|
matrix_mailer_relay_auth: false
|
|
|
|
matrix_mailer_relay_auth_username: ""
|
|
|
|
matrix_mailer_relay_auth_password: ""
|
|
|
|
|
2018-08-15 09:23:22 +02:00
|
|
|
|
|
|
|
# By default, this playbook installs the mxisd identity server on the same domain as Synapse (`hostname_matrix`).
|
|
|
|
# If you wish to use the public identity servers (matrix.org, vector.im, riot.im) instead of your own,
|
|
|
|
# you may wish to disable this.
|
|
|
|
matrix_mxisd_enabled: true
|
2018-11-01 08:46:47 +02:00
|
|
|
matrix_mxisd_docker_image: "kamax/mxisd:1.1.1"
|
2018-08-15 09:23:22 +02:00
|
|
|
matrix_mxisd_base_path: "{{ matrix_base_data_path }}/mxisd"
|
|
|
|
matrix_mxisd_config_path: "{{ matrix_mxisd_base_path }}/config"
|
|
|
|
matrix_mxisd_data_path: "{{ matrix_mxisd_base_path }}/data"
|
|
|
|
|
|
|
|
# Your identity server is private by default.
|
|
|
|
# To ensure maximum discovery, you can make your identity server
|
|
|
|
# also forward lookups to the central matrix.org Identity server
|
|
|
|
# (at the cost of potentially leaking all your contacts information).
|
|
|
|
# Enabling this is discouraged. Learn more here: https://github.com/kamax-io/mxisd/blob/master/docs/features/identity.md#lookups
|
|
|
|
matrix_mxisd_matrixorg_forwarding_enabled: false
|
|
|
|
|
|
|
|
# Specifies which template files to use when configuring mxisd.
|
|
|
|
# If you'd like to have your own different configuration, feel free to copy and paste
|
|
|
|
# the original files into your inventory (e.g. in `inventory/host_vars/<host>/`)
|
|
|
|
# and then change the specific host's `vars.yaml` file like this:
|
|
|
|
# matrix_mxisd_template_config: "{{ playbook_dir }}/inventory/host_vars/<host>/mxisd.yaml.j2"
|
|
|
|
matrix_mxisd_template_config: "{{ role_path }}/templates/mxisd/mxisd.yaml.j2"
|
|
|
|
|
|
|
|
|
2018-08-21 12:34:34 +02:00
|
|
|
# Enable this to add support for matrix-corporal.
|
|
|
|
# See: https://github.com/devture/matrix-corporal
|
|
|
|
matrix_corporal_enabled: false
|
|
|
|
|
2018-09-20 09:34:11 +02:00
|
|
|
matrix_corporal_docker_image: "devture/matrix-corporal:1.2.1"
|
2018-08-21 12:34:34 +02:00
|
|
|
matrix_corporal_base_path: "{{ matrix_base_data_path }}/corporal"
|
|
|
|
matrix_corporal_config_dir_path: "{{ matrix_corporal_base_path }}/config"
|
|
|
|
matrix_corporal_cache_dir_path: "{{ matrix_corporal_base_path }}/cache"
|
|
|
|
matrix_corporal_var_dir_path: "{{ matrix_corporal_base_path }}/var"
|
|
|
|
|
|
|
|
matrix_corporal_matrix_timeout_milliseconds: 30000
|
|
|
|
|
|
|
|
matrix_corporal_reconciliation_retry_interval_milliseconds: 30000
|
|
|
|
matrix_corporal_reconciliation_user_id_local_part: "matrix-corporal"
|
|
|
|
|
|
|
|
matrix_corporal_http_api_enabled: false
|
|
|
|
matrix_corporal_http_api_auth_token: ""
|
|
|
|
|
|
|
|
# Matrix Corporal policy provider configuration (goes directly into the configuration's `PolicyProvider` value)
|
|
|
|
matrix_corporal_policy_provider_config: ""
|
|
|
|
|
|
|
|
matrix_corporal_debug: false
|
|
|
|
|
2018-11-01 08:46:47 +02:00
|
|
|
|
2017-09-12 11:41:44 +02:00
|
|
|
# By default, this playbook installs the Riot.IM web UI on the `hostname_riot` domain.
|
|
|
|
# If you wish to connect to your Matrix server by other means,
|
|
|
|
# you may wish to disable this.
|
|
|
|
matrix_riot_web_enabled: true
|
|
|
|
|
2018-11-01 08:46:47 +02:00
|
|
|
matrix_riot_web_docker_image: "avhost/docker-matrix-riot:v0.17.3"
|
|
|
|
|
|
|
|
matrix_riot_web_data_path: "{{ matrix_base_data_path }}/riot-web"
|
|
|
|
|
2018-11-03 03:14:03 +02:00
|
|
|
# Riot config.json customizations
|
|
|
|
matrix_riot_web_disable_custom_urls: true
|
|
|
|
matrix_riot_web_disable_guests: true
|
|
|
|
matrix_riot_web_integrations_ui_url: "https://scalar.vector.im/"
|
|
|
|
matrix_riot_web_integrations_rest_url: "https://scalar.vector.im/api"
|
|
|
|
matrix_riot_web_integrations_widgets_urls: "https://scalar.vector.im/api"
|
|
|
|
matrix_riot_web_integrations_jitsi_widget_url: "https://scalar.vector.im/api/widgets/jitsi.html"
|
|
|
|
|
2018-11-01 08:46:47 +02:00
|
|
|
|
2018-08-15 09:23:22 +02:00
|
|
|
|
2018-09-01 17:51:07 +02:00
|
|
|
# Matrix mautrix is a Matrix <-> Telegram bridge
|
2018-09-02 16:05:14 +02:00
|
|
|
# Enable telegram bridge
|
2018-09-01 17:51:07 +02:00
|
|
|
matrix_mautrix_telegram_enabled: false
|
2018-11-01 08:46:47 +02:00
|
|
|
|
|
|
|
matrix_mautrix_telegram_docker_image: "tulir/mautrix-telegram:v0.3.0"
|
|
|
|
|
|
|
|
matrix_mautrix_telegram_base_path: "{{ matrix_base_data_path }}/mautrix-telegram"
|
|
|
|
|
2018-09-02 16:05:14 +02:00
|
|
|
# Get your own API keys at https://my.telegram.org/apps
|
|
|
|
matrix_mautrix_telegram_api_id: YOUR_TELEGRAM_APP_ID
|
|
|
|
matrix_mautrix_telegram_api_hash: YOUR_TELEGRAM_API_HASH
|
2018-10-21 23:20:37 +02:00
|
|
|
# Mautrix telegram public endpoint to log in to telegram
|
|
|
|
# Use an uuid so it's not easily discoverable
|
|
|
|
matrix_mautrix_telegram_public_endpoint: "/{{ matrix_synapse_macaroon_secret_key | password_hash('sha512', 'telegram') | to_uuid }}"
|
2018-09-01 17:51:07 +02:00
|
|
|
|
2018-11-01 08:46:47 +02:00
|
|
|
|
2018-10-24 15:18:55 +02:00
|
|
|
# Matrix mautrix is a Matrix <-> Whatsapp bridge
|
|
|
|
# Enable whatsapp bridge
|
|
|
|
matrix_mautrix_whatsapp_enabled: false
|
2018-09-01 17:51:07 +02:00
|
|
|
|
2018-11-01 08:46:47 +02:00
|
|
|
matrix_mautrix_whatsapp_docker_image: "tulir/mautrix-whatsapp:latest"
|
|
|
|
|
|
|
|
matrix_mautrix_whatsapp_base_path: "{{ matrix_base_data_path }}/mautrix-whatsapp"
|
|
|
|
|
|
|
|
|
2017-09-12 11:41:44 +02:00
|
|
|
# By default, this playbook sets up its own nginx proxy server on port 80/443.
|
|
|
|
# This is fine if you're dedicating the whole server to Matrix.
|
|
|
|
# But in case that's not the case, you may wish to prevent that
|
|
|
|
# and take care of proxying by yourself.
|
|
|
|
matrix_nginx_proxy_enabled: true
|
2017-09-23 14:08:54 +02:00
|
|
|
|
2018-11-10 10:41:10 +02:00
|
|
|
matrix_nginx_proxy_docker_image: "nginx:1.15.6-alpine"
|
2018-11-01 08:46:47 +02:00
|
|
|
|
|
|
|
matrix_nginx_proxy_data_path: "{{ matrix_base_data_path }}/nginx-proxy"
|
|
|
|
matrix_nginx_proxy_confd_path: "{{ matrix_nginx_proxy_data_path }}/conf.d"
|
|
|
|
|
2018-08-21 12:34:34 +02:00
|
|
|
# The addresses where the Matrix Client API is.
|
|
|
|
# Certain extensions (like matrix-corporal) may override this in order to capture all traffic.
|
|
|
|
matrix_nginx_proxy_matrix_client_api_addr_with_proxy_container: "matrix-synapse:8008"
|
|
|
|
matrix_nginx_proxy_matrix_client_api_addr_sans_proxy_container: "localhost:8008"
|
|
|
|
|
2018-09-17 07:24:35 +02:00
|
|
|
# Specifies when to reload the matrix-nginx-proxy service so that
|
|
|
|
# a new SSL certificate could go into effect.
|
|
|
|
matrix_nginx_proxy_reload_cron_time_definition: "20 4 */5 * *"
|
|
|
|
|
2018-11-03 01:20:05 +02:00
|
|
|
# Specifies which SSL protocols to use when serving Riot and Synapse
|
|
|
|
# Note TLSv1.3 is not yet available in dockerized nginx
|
|
|
|
# See: https://github.com/nginxinc/docker-nginx/issues/190
|
|
|
|
matrix_nginx_proxy_ssl_protocols: "TLSv1.1 TLSv1.2"
|
|
|
|
|
2018-08-21 12:34:34 +02:00
|
|
|
|
2018-08-29 08:37:44 +02:00
|
|
|
matrix_ssl_base_path: "{{ matrix_base_data_path }}/ssl"
|
|
|
|
matrix_ssl_config_dir_path: "{{ matrix_ssl_base_path }}/config"
|
|
|
|
matrix_ssl_log_dir_path: "{{ matrix_ssl_base_path }}/log"
|
|
|
|
matrix_ssl_support_email: "{{ host_specific_matrix_ssl_support_email }}"
|
2018-11-10 10:41:10 +02:00
|
|
|
matrix_ssl_certbot_docker_image: "certbot/certbot:v0.28.0"
|
2018-08-29 08:37:44 +02:00
|
|
|
matrix_ssl_certbot_standalone_http_port: 2402
|
|
|
|
matrix_ssl_use_staging: false
|
|
|
|
|
2017-11-11 10:38:38 +02:00
|
|
|
# Specifies when to attempt to retrieve new SSL certificates from Let's Encrypt.
|
|
|
|
matrix_ssl_renew_cron_time_definition: "15 4 */5 * *"
|
2018-10-30 22:43:28 +02:00
|
|
|
|
|
|
|
# Variables to Control which parts of the role run.
|
|
|
|
run_setup: true
|
|
|
|
run_upgrade_postgres: true
|
|
|
|
run_start: true
|
|
|
|
run_register_user: true
|
|
|
|
run_import_sqlite_db: true
|
|
|
|
run_import_media_store: true
|
|
|
|
run_self_check: true
|