ghost
100 lines
2.0 KiB
YAML
100 lines
2.0 KiB
YAML
---
|
|
# Synapse homeserver installation and configuration
|
|
|
|
- name: Install dependencies
|
|
apt:
|
|
name:
|
|
- python3
|
|
- python3-pip
|
|
- python3-venv
|
|
- libpq-dev
|
|
- postgresql
|
|
- postgresql-contrib
|
|
- nginx
|
|
- certbot
|
|
- python3-certbot-nginx
|
|
state: present
|
|
|
|
- name: Add Matrix Synapse apt repository key
|
|
apt_key:
|
|
url: https://packages.matrix.org/debian/matrix-org-archive-keyring.gpg
|
|
state: present
|
|
|
|
- name: Add Matrix Synapse apt repository
|
|
apt_repository:
|
|
repo: "deb https://packages.matrix.org/debian/ {{ ansible_distribution_release }} main"
|
|
state: present
|
|
filename: matrix-org
|
|
|
|
- name: Install Synapse
|
|
apt:
|
|
name: matrix-synapse-py3
|
|
state: present
|
|
environment:
|
|
DEBIAN_FRONTEND: noninteractive
|
|
|
|
- name: Create PostgreSQL database
|
|
become_user: postgres
|
|
postgresql_db:
|
|
name: synapse
|
|
encoding: UTF-8
|
|
lc_collate: C
|
|
lc_ctype: C
|
|
template: template0
|
|
|
|
- name: Create PostgreSQL user
|
|
become_user: postgres
|
|
postgresql_user:
|
|
name: synapse
|
|
password: "{{ matrix_signing_key[:32] }}"
|
|
db: synapse
|
|
priv: ALL
|
|
|
|
- name: Deploy Synapse homeserver config
|
|
template:
|
|
src: ../templates/homeserver.yaml.j2
|
|
dest: /etc/matrix-synapse/homeserver.yaml
|
|
owner: matrix-synapse
|
|
group: matrix-synapse
|
|
mode: "0640"
|
|
notify: restart synapse
|
|
|
|
- name: Allow Matrix federation port through UFW
|
|
ufw:
|
|
rule: allow
|
|
port: "8448"
|
|
proto: tcp
|
|
|
|
- name: Allow HTTP/HTTPS through UFW
|
|
ufw:
|
|
rule: allow
|
|
port: "{{ item }}"
|
|
proto: tcp
|
|
loop:
|
|
- "80"
|
|
- "443"
|
|
|
|
- name: Enable and start Synapse
|
|
service:
|
|
name: matrix-synapse
|
|
state: started
|
|
enabled: true
|
|
|
|
- name: Wait for Synapse to be ready
|
|
wait_for:
|
|
port: 8008
|
|
host: 127.0.0.1
|
|
timeout: 30
|
|
|
|
- name: Create admin user
|
|
command: >
|
|
register_new_matrix_user
|
|
-u {{ matrix_admin }}
|
|
-p {{ matrix_admin_pass }}
|
|
-a
|
|
-c /etc/matrix-synapse/homeserver.yaml
|
|
http://localhost:8008
|
|
register: admin_create
|
|
failed_when: false
|
|
changed_when: admin_create.rc == 0
|