matrix-docker-ansible-deploy/roles/matrix-bot-maubot/tasks/setup_install.yml

---

- name: Ensure maubot paths exist
  file:
    path: "{{ item.path }}"
    state: directory
    mode: 0755
    owner: "{{ matrix_user_username }}"
    group: "{{ matrix_user_groupname }}"
  with_items:
    - {path: "{{ matrix_bot_maubot_base_path }}", when: true}
    - {path: "{{ matrix_bot_maubot_data_path }}", when: true}
    - {path: "{{ matrix_bot_maubot_docker_src_files_path }}", when: true}
  when: "item.when|bool"

- name: Ensure maubot configuration file created
  template:
    src: "{{ role_path }}/templates/config/config.yaml.j2"
    dest: "{{ matrix_bot_maubot_data_path }}/config.yaml"
    owner: "{{ matrix_user_username }}"
    group: "{{ matrix_user_groupname }}"
    mode: "u=rwx"

- name: Generate Maubot proxying configuration for matrix-nginx-proxy
  set_fact:
    matrix_bot_maubot_matrix_nginx_proxy_configuration: |
      location ~ ^/(_matrix/maubot/.*) {
      {% if matrix_nginx_proxy_enabled|default(False) %}
      	{# Use the embedded DNS resolver in Docker containers to discover the service #}
      	resolver 127.0.0.11 valid=5s;
      	set $backend "matrix-maubot:{{ matrix_bot_maubot_port }}/$1";
      	proxy_pass http://$backend;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "upgrade";
      {% else %}
      	{# Generic configuration for use outside of our container setup #}
      	proxy_pass http://127.0.0.1:{{ matrix_bot_maubot_port }}/$1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "upgrade";
      {% endif %}
      }
  when: matrix_bot_maubot_proxy_management_interface|bool

- name: Register Maubot's proxying configuration with matrix-nginx-proxy
  set_fact:
    matrix_nginx_proxy_proxy_matrix_additional_server_configuration_blocks: |
      {{
        matrix_nginx_proxy_proxy_matrix_additional_server_configuration_blocks|default([])
        +
        [matrix_bot_maubot_matrix_nginx_proxy_configuration]
      }}
  when: matrix_bot_maubot_proxy_management_interface|bool

- name: Warn about reverse-proxying if matrix-nginx-proxy not used
  debug:
    msg: >-
      NOTE: You've enabled Maubot but are not using the matrix-nginx-proxy
      reverse proxy.
      Please make sure that you're proxying the `/_matrix/maubot`
      URL endpoint to the matrix-maubot container.
  when: "matrix_bot_maubot_enabled|bool and matrix_bot_maubot_proxy_management_interface|bool and matrix_nginx_proxy_enabled is not defined"


- name: Ensure maubot image is pulled
  docker_image:
    name: "{{ matrix_bot_maubot_docker_image }}"
    source: "{{ 'pull' if ansible_version.major > 2 or ansible_version.minor > 7 else omit }}"
    force_source: "{{ matrix_bot_maubot_docker_image_force_pull if ansible_version.major > 2 or ansible_version.minor >= 8 else omit }}"
    force: "{{ omit if ansible_version.major > 2 or ansible_version.minor >= 8 else matrix_bot_maubot_docker_image_force_pull }}"
  when: "not matrix_bot_maubot_container_image_self_build|bool"
  register: result
  retries: "{{ matrix_container_retries_count }}"
  delay: "{{ matrix_container_retries_delay }}"
  until: result is not failed

- name: Ensure maubot repository is present on self-build
  git:
    repo: "{{ matrix_bot_maubot_docker_repo }}"
    dest: "{{ matrix_bot_maubot_docker_src_files_path }}"
    force: "yes"
  become: true
  become_user: "{{ matrix_user_username }}"
  register: matrix_bot_maubot_git_pull_results
  when: "matrix_bot_maubot_container_image_self_build|bool"

- name: Ensure maubot image is built
  docker_image:
    name: "{{ matrix_bot_maubot_docker_image }}"
    source: build
    force_source: "{{ matrix_bot_maubot_git_pull_results.changed if ansible_version.major > 2 or ansible_version.minor >= 8 else omit }}"
    force: "{{ omit if ansible_version.major > 2 or ansible_version.minor >= 8 else matrix_mailer_git_pull_results.changed }}"
    build:
      dockerfile: Dockerfile
      path: "{{ matrix_bot_maubot_docker_src_files_path }}"
      pull: true
  when: "matrix_bot_maubot_container_image_self_build|bool"

- name: Ensure matrix-maubot.service installed
  template:
    src: "{{ role_path }}/templates/systemd/matrix-maubot.service.j2"
    dest: "{{ matrix_systemd_path }}/matrix-maubot.service"
    mode: 0644
  register: matrix_bot_maubot_systemd_service_result

- name: Ensure systemd reloaded after matrix-maubot.service installation
  service:
    daemon_reload: true
  when: "matrix_bot_maubot_systemd_service_result.changed|bool"

- name: Ensure matrix-maubot.service restarted, if necessary
  service:
    name: "matrix-maubot.service"
    state: restarted