feat(synapse): add deployment method virtualenv

roles/synapse/README.md

@@ -35,3 +35,6 @@ uses the `default.target` as it's `WantedBy`
 
 To only start synapse after, for example, services for redis and postgresql are up,
 set `synapse_systemd_unit_wants: [ "postgresql.service", "redis.service" ]`.
+
+> [!NOTE]
+> Requires `systemd >= 245` on the target machine

roles/synapse/defaults/main/main.yml

@@ -6,7 +6,7 @@ synapse_state: "present"
 synapse_deployment_method: "docker"
 
 synapse_base_path: /opt/synapse
-synapse_config_path: "{{ synapse_base_path }}/config"
+synapse_config_path: "/etc/synapse"
 synapse_data_path: "{{ synapse_base_path }}/data"
 synapse_media_store_path: "{{ synapse_data_path }}/media_store"
 synapse_log_path: "/var/log/synapse"

roles/synapse/handlers/main.yml

@@ -15,6 +15,16 @@
     force_restart: true
   when: synapse_deployment_method == 'podman'
 
+- name: Ensure synapse is restarted
+  listen: synapse-restart
+  ansible.builtin.systemd_service:
+    name: "{{ synapse_systemd_service_name }}"
+    state: restarted
+  when:
+    - synapse_deployment_method == 'virtualenv'
+    - ansible_facts['service_mgr'] == systemd
+    - synapse_state == 'started'
+
 - name: Ensure systemd units are reloaded
   listen: systemd-daemon-reload
   ansible.builtin.systemd:

roles/synapse/tasks/deploy-virtualenv.yml

@@ -38,11 +38,11 @@
 - meta: flush_handlers
 
 - name: Ensure systemd service is {{ synapse_state }}
-  ansible.builtin.systemd:
+  ansible.builtin.systemd_service:
     name: "{{ synapse_systemd_service_name }}"
     state: "{{ synapse_systemd_service_state }}"
 
 - name: Ensure systemd service is {{ synapse_systemd_service_enabled | ternary('enabled', 'disabled') }}
-  ansible.builtin.systemd:
+  ansible.builtin.systemd_service:
     name: "{{ synapse_systemd_service_name }}"
     enabled: "{{ synapse_systemd_service_enabled }}"

roles/synapse/templates/synapse.service.j2

@@ -34,9 +34,7 @@ RestrictSUIDSGID={{ synapse_systemd_service_restrict_suid_sgid }}
 {% for path in synapse_systemd_service_read_write_paths | default([]) %}
 ReadWritePaths={{ path }}
 {% endfor %}
-{% for addr_family in synapse_systemd_service_restrict_address_families | default([]) %}
+RestrictAddressFamilies={{ synapse_systemd_service_restrict_address_families | join(' ') }}
-RestrictAddressFamilies={{ addr_family }}
-{% endfor %}
 
 RemoveIPC={{ synapse_systemd_service_remove_ipc }}
 LockPersonality={{ synapse_systemd_service_lock_personality }}