67 lines
2.5 KiB
YAML
67 lines
2.5 KiB
YAML
|
---
|
||
|
|
- name: Ensure synapse user '{{ synapse_user }}' is {{ synapse_state }}
|
||
|
|
ansible.builtin.user:
|
||
|
|
name: "{{ synapse_user }}"
|
||
|
|
state: "{{ synapse_state }}"
|
||
|
|
system: "{{ synapse_user_system | default(true, true) }}"
|
||
|
|
create_home: "{{ synapse_user_create_home | default(false, true) }}"
|
||
|
|
groups: "{{ synapse_user_groups | default(omit, true) }}"
|
||
|
|
append: "{{ (synapse_user_groups is defined) | ternary(true, omit) }}"
|
||
|
|
register: synapse_user_info
|
||
|
|
|
||
|
|
- name: Ensure directories for synapse are {{ synapse_state }}
|
||
|
|
ansible.builtin.file:
|
||
|
|
path: "{{ item.path }}"
|
||
|
|
state: "{{ (synapse_state == 'present') | ternary('directory', 'absent') }}"
|
||
|
|
mode: "{{ item.mode | default('0750') }}"
|
||
|
|
owner: "{{ item.owner | default(synapse_user_info.uid | default(synapse_user)) }}"
|
||
|
|
group: "{{ item.group | default(synapse_user_info.group | default(synapse_user)) }}"
|
||
|
|
loop:
|
||
|
|
- path: "{{ synapse_base_path }}"
|
||
|
|
mode: "0755"
|
||
|
|
- path: "{{ synapse_config_path }}"
|
||
|
|
mode: "0755"
|
||
|
|
- path: "{{ synapse_data_path }}"
|
||
|
|
mode: "0755"
|
||
|
|
- path: "{{ synapse_media_store_path }}"
|
||
|
|
mode: "0755"
|
||
|
|
- path: "{{ synapse_log_path }}"
|
||
|
|
mode: "0755"
|
||
|
|
loop_control:
|
||
|
|
label: "{{ item.path }}"
|
||
|
|
|
||
|
|
- name: Ensure synapse signing key is generated
|
||
|
|
finallycoffee.matrix.synapse_signing_key:
|
||
|
|
path: "{{ synapse_signing_key_file }}"
|
||
|
|
state: "{{ synapse_state }}"
|
||
|
|
when: synapse_role_generate_signing_key
|
||
|
|
notify:
|
||
|
|
- synapse-restart
|
||
|
|
|
||
|
|
- name: Ensure configuration files are templated
|
||
|
|
ansible.builtin.copy:
|
||
|
|
dest: "{{ config_file.path }}"
|
||
|
|
content: "{{ config_file.content }}"
|
||
|
|
mode: "{{ config_file.mode | default('0640') }}"
|
||
|
|
owner: "{{ config_file.owner | default(synapse_user_info.uid | default(synapse_user)) }}"
|
||
|
|
group: "{{ config_file.group | default(synapse_user_info.group | default(synapse_user)) }}"
|
||
|
|
loop: >-
|
||
|
|
{{ synapse_configs_to_write
|
||
|
|
+ (synapse_keys_to_write if not synapse_role_generate_signing_key else [])
|
||
|
|
+ synapse_configs | default([]) }}
|
||
|
|
loop_control:
|
||
|
|
loop_var: config_file
|
||
|
|
label: "{{ config_file.path }}"
|
||
|
|
vars:
|
||
|
|
synapse_configs_to_write:
|
||
|
|
- content: "{{ synapse_homeserver_config | to_nice_yaml(width=1000) }}"
|
||
|
|
path: "{{ synapse_homeserver_config_file }}"
|
||
|
|
- content: "{{ synapse_log_config | to_nice_yaml(width=1000) }}"
|
||
|
|
path: "{{ synapse_logging_config_file }}"
|
||
|
|
synapse_keys_to_write:
|
||
|
|
- content: "{{ synapse_signing_key }}"
|
||
|
|
path: "{{ synapse_signing_key_file }}"
|
||
|
|
mode: "0640"
|
||
|
|
notify:
|
||
|
|
- synapse-restart
|