1.8 KiB
finallycoffee.fediverse.gotosocial ansible role
Configuration
The server name can be set using gotosocial_config_host, with gotosocial_config_account_domain being available when webfinger delegation is used:
gotosocial_config_host: gotosocial.example.org
gotosocial_config_account_domain: example.org
Database
The database can be configured using the gotosocial_config_db_[address|port|user|password|database] variables. the [...]_type defaults to postgres.
Built-in LetsEncrypt client
To use the built-in letsencrypt client, set gotosocial_config_letsencrypt_enabled: true.
You are required to fill in a valid administrative email address into
gotosocial_config_letsencrypt_email_address.
The port letsencrypt will listen on defaults to 80 and can be set using
gotosocial_config_letsencrypt_port (if f.ex. the container lacks the permission
to bind to ports < 1024). Note that when gotosocial_config_letsencrypt_enabled is
true, the gotosocial_config_letsencrypt_port will by default be mapped to
host port 80 on all interfaces!
This is fine when this is the only ACME client and allows easily changing
gotosocial_config_letsencrypt_port without breaking any functionality,
but with multiple acme clients all performing HTTP-01 challenges, you need to manually
overwrite gotosocial_container_ports to fit your needs.
Advanced configuration
OIDC
OIDC can be configured using gotosocial_config_oidc_* variables, disabled by default. A minimal configuration could look like this:
gotosocial_config_oidc_enabled: true
gotosocial_config_oidc_idp_name: "My fancy name for the configured IdP"
gotosocial_config_oidc_issuer: http://issuer/url
gotosocial_config_oidc_client_id: my_client_id
gotosocial_config_oidc_client_secret: my_client_secret