feat(synapse): add deployment method virtualenv

plugins/modules/synapse_signing_key.md

@@ -8,7 +8,7 @@ Module to generate and manage synapse signing keys.
 ## Requirements
 
 - `python >= 3.9`
-- `signed_json >= 1.1.4`
+- (pip) `signed_json >= 1.1.4`
 
 
 ## Usage examples

roles/synapse/defaults/main/systemd.yml

@@ -1,12 +1,12 @@
 ---
-synapse_systemd_service_name: "synapse.service"
+synapse_systemd_name: "synapse.service"
 synapse_systemd_service_directory: /etc/systemd/system
 synapse_systemd_service_file: >-2
-  {{ synapse_systemd_service_directory }}/{{ synapse_systemd_service_name }}
+  {{ synapse_systemd_service_directory }}/{{ synapse_systemd_name }}
 
-synapse_systemd_service_state: >-2
+synapse_systemd_state: >-2
   {{ (synapse_state == 'present') | ternary('started', 'stopped') }}
-synapse_systemd_service_enabled: >-2
+synapse_systemd_enabled: >-2
   {{ (synapse_state == 'present') | bool }}
 
 synapse_systemd_unit_description: "Synapse matrix homeserver"

roles/synapse/tasks/configure.yml

@@ -71,3 +71,4 @@
         mode: "0640"
   notify:
     - synapse-restart
+  when: synapse_state != 'absent'

roles/synapse/tasks/deploy-virtualenv.yml

@@ -27,6 +27,13 @@
     virtualenv: "{{ synapse_venv_path }}"
   notify:
     - synapse-restart
+  when: synapse_state != 'absent'
+
+- name: Ensure synapse virtualenv is {{ synapse_state }}
+  ansible.builtin.file:
+    path: "{{ synapse_venv_path }}"
+    state: "{{ synapse_state }}"
+  when: synapse_state == 'absent'
 
 - name: Ensure systemd unit is {{ synapse_state }}
   ansible.builtin.template:
@@ -34,15 +41,27 @@
     dest: "{{ synapse_systemd_service_file }}"
   notify:
     - systemd-daemon-reload
+  when: synapse_state != 'absent'
 
-- meta: flush_handlers
+- name: Ensure systemd unit is {{ synapse_state }}
+  ansible.builtin.file:
+    path: "{{ synapse_systemd_service_file }}"
+    state: "{{ synapse_state }}"
+  when: synapse_state == 'absent'
+  notify:
+    - systemd-daemon-reload
 
-- name: Ensure systemd service is {{ synapse_state }}
+- name: Ensure handlers are flushed for systemd daemon reload and synapse service state propagation
+  meta: flush_handlers
+
+- name: Ensure systemd service is {{ synapse_systemd_state }}
   ansible.builtin.systemd_service:
-    name: "{{ synapse_systemd_service_name }}"
+    name: "{{ synapse_systemd_name }}"
-    state: "{{ synapse_systemd_service_state }}"
+    state: "{{ synapse_systemd_state }}"
+  when: synapse_state != 'absent'
 
-- name: Ensure systemd service is {{ synapse_systemd_service_enabled | ternary('enabled', 'disabled') }}
+- name: Ensure systemd service is {{ synapse_systemd_enabled | ternary('enabled', 'disabled') }}
   ansible.builtin.systemd_service:
-    name: "{{ synapse_systemd_service_name }}"
+    name: "{{ synapse_systemd_name }}"
-    enabled: "{{ synapse_systemd_service_enabled }}"
+    enabled: "{{ synapse_systemd_enabled }}"
+  when: synapse_state != 'absent'

roles/synapse/templates/synapse.service.j2

@@ -1,5 +1,5 @@
 [Unit]
-Description="{{ synapse_systemd_unit_description }}"
+Description={{ synapse_systemd_unit_description }}
 
 {% if synapse_systemd_unit_after | default([]) | length > 0 %}
 After={{ synapse_systemd_unit_after | join(' ') }}
@@ -38,7 +38,7 @@ RestrictAddressFamilies={{ synapse_systemd_service_restrict_address_families | j
 
 RemoveIPC={{ synapse_systemd_service_remove_ipc }}
 LockPersonality={{ synapse_systemd_service_lock_personality }}
-NoNewPersonalities={{ synapse_systemd_service_no_new_privileges }}
+NoNewPrivileges={{ synapse_systemd_service_no_new_privileges }}
 
 [Install]
 WantedBy={{ synapse_systemd_install_wanted_by }}