|
|
@ -6,8 +6,8 @@ tls_private_key_path: "{{ synapse_root_dir }}/etc/{{ synapse_server_name }}.tls. |
|
|
|
tls_dh_params_path: "{{ synapse_root_dir }}/etc/{{ synapse_server_name }}.tls.dh" |
|
|
|
tls_dh_params_path: "{{ synapse_root_dir }}/etc/{{ synapse_server_name }}.tls.dh" |
|
|
|
{% endif %} |
|
|
|
{% endif %} |
|
|
|
|
|
|
|
|
|
|
|
server_name: "{{ synapse_server_name }}" |
|
|
|
server_name: '{{ synapse_server_name }}' |
|
|
|
public_baseurl: {{ synapse_public_baseurl | default('https://matrix.' + synapse_server_name) }} |
|
|
|
public_baseurl: '{{ synapse_public_baseurl | default('https://matrix.' + synapse_server_name) }}' |
|
|
|
|
|
|
|
|
|
|
|
pid_file: {{ synapse_root_dir }}/tmp/homeserver.pid |
|
|
|
pid_file: {{ synapse_root_dir }}/tmp/homeserver.pid |
|
|
|
|
|
|
|
|
|
|
@ -39,23 +39,23 @@ listeners: |
|
|
|
database: |
|
|
|
database: |
|
|
|
name: psycopg2 |
|
|
|
name: psycopg2 |
|
|
|
args: |
|
|
|
args: |
|
|
|
database: {{ synapse_pg_db_name }} |
|
|
|
database: '{{ synapse_pg_db_name }}' |
|
|
|
host: {{ synapse_pg_db_server }} |
|
|
|
host: '{{ synapse_pg_db_server }}' |
|
|
|
user: {{ synapse_pg_db_user }} |
|
|
|
user: '{{ synapse_pg_db_user }}' |
|
|
|
password: {{ synapse_pg_db_pass }} |
|
|
|
password: '{{ synapse_pg_db_pass }}' |
|
|
|
cp_min: 5 |
|
|
|
cp_min: 5 |
|
|
|
cp_max: 10 |
|
|
|
cp_max: 10 |
|
|
|
|
|
|
|
|
|
|
|
event_cache_size: "10K" |
|
|
|
event_cache_size: '10K' |
|
|
|
|
|
|
|
|
|
|
|
verbose: 0 |
|
|
|
verbose: 0 |
|
|
|
log_config: "{{ synapse_root_dir }}/etc/logging.conf" |
|
|
|
log_config: '{{ synapse_root_dir }}/etc/logging.conf' |
|
|
|
|
|
|
|
|
|
|
|
{% if '*' not in synapse_federation_domain_whitelist %} |
|
|
|
{% if '*' not in synapse_federation_domain_whitelist %} |
|
|
|
{% if synapse_federation_domain_whitelist | length > 0 %} |
|
|
|
{% if synapse_federation_domain_whitelist | length > 0 %} |
|
|
|
federation_domain_whitelist: |
|
|
|
federation_domain_whitelist: |
|
|
|
{% for domain in synapse_federation_domain_whitelist %} |
|
|
|
{% for domain in synapse_federation_domain_whitelist %} |
|
|
|
- {{ domain }} |
|
|
|
- '{{ domain }}' |
|
|
|
{% endfor %} |
|
|
|
{% endfor %} |
|
|
|
{% else %} |
|
|
|
{% else %} |
|
|
|
federation_domain_whitelist: [] |
|
|
|
federation_domain_whitelist: [] |
|
|
@ -65,29 +65,29 @@ federation_domain_whitelist: [] |
|
|
|
{% if synapse_federation_ip_blacklist | length > 0 %} |
|
|
|
{% if synapse_federation_ip_blacklist | length > 0 %} |
|
|
|
federation_ip_range_blacklist: |
|
|
|
federation_ip_range_blacklist: |
|
|
|
{% for ip in synapse_federation_ip_blacklist %} |
|
|
|
{% for ip in synapse_federation_ip_blacklist %} |
|
|
|
- {{ ip }} |
|
|
|
- '{{ ip }}' |
|
|
|
{% endfor %} |
|
|
|
{% endfor %} |
|
|
|
{% else %} |
|
|
|
{% else %} |
|
|
|
federation_ip_range_blacklist: [] |
|
|
|
federation_ip_range_blacklist: [] |
|
|
|
{% endif %} |
|
|
|
{% endif %} |
|
|
|
|
|
|
|
|
|
|
|
media_store_path: "{{ synapse_root_dir }}/media_store" |
|
|
|
media_store_path: '{{ synapse_root_dir }}/media_store' |
|
|
|
uploads_path: "{{ synapse_root_dir }}/uploads" |
|
|
|
uploads_path: '{{ synapse_root_dir }}/uploads' |
|
|
|
max_upload_size: "{{ synapse_upload_max_size }}" |
|
|
|
max_upload_size: '{{ synapse_upload_max_size }}' |
|
|
|
|
|
|
|
|
|
|
|
{% if synapse_turn_uris is defined and synapse_turn_uris | length > 0 %} |
|
|
|
{% if synapse_turn_uris is defined and synapse_turn_uris | length > 0 %} |
|
|
|
turn_uris: |
|
|
|
turn_uris: |
|
|
|
{% for uri in synapse_turn_uris %} |
|
|
|
{% for uri in synapse_turn_uris %} |
|
|
|
- {{ uri }} |
|
|
|
- '{{ uri }}' |
|
|
|
{% endfor %} |
|
|
|
{% endfor %} |
|
|
|
turn_shared_secret: "{{ synapse_turn_shared_secret | default(turnserver_auth_secret) }}" |
|
|
|
turn_shared_secret: '{{ synapse_turn_shared_secret | default(turnserver_auth_secret) }}' |
|
|
|
turn_user_lifetime: "1h" |
|
|
|
turn_user_lifetime: '1h' |
|
|
|
turn_allow_guests: {{ synapse_turn_allow_guests | ternary('True', 'False') }} |
|
|
|
turn_allow_guests: {{ synapse_turn_allow_guests | ternary('True', 'False') }} |
|
|
|
{% endif %} |
|
|
|
{% endif %} |
|
|
|
|
|
|
|
|
|
|
|
enable_registration: {{ synapse_enable_registration | ternary('True', 'False') }} |
|
|
|
enable_registration: {{ synapse_enable_registration | ternary('True', 'False') }} |
|
|
|
{% if synapse_registration_shared_secret is defined %} |
|
|
|
{% if synapse_registration_shared_secret is defined %} |
|
|
|
registration_shared_secret: "{{ synapse_registration_shared_secret }}" |
|
|
|
registration_shared_secret: '{{ synapse_registration_shared_secret }}' |
|
|
|
{% endif %} |
|
|
|
{% endif %} |
|
|
|
bcrypt_rounds: 12 |
|
|
|
bcrypt_rounds: 12 |
|
|
|
allow_guest_access: {{ synapse_allow_guest_access | ternary('True', 'False') }} |
|
|
|
allow_guest_access: {{ synapse_allow_guest_access | ternary('True', 'False') }} |
|
|
@ -109,9 +109,9 @@ rc_login: |
|
|
|
enable_metrics: False |
|
|
|
enable_metrics: False |
|
|
|
report_stats: False |
|
|
|
report_stats: False |
|
|
|
|
|
|
|
|
|
|
|
default_identity_server: {{ synapse_public_baseurl | default('https://matrix.' + synapse_server_name) }} |
|
|
|
default_identity_server: '{{ synapse_public_baseurl | default('https://matrix.' + synapse_server_name) }}' |
|
|
|
|
|
|
|
|
|
|
|
macaroon_secret_key: "{{ synapse_macaroon_key }}" |
|
|
|
macaroon_secret_key: '{{ synapse_macaroon_key }}' |
|
|
|
|
|
|
|
|
|
|
|
expire_access_token: False |
|
|
|
expire_access_token: False |
|
|
|
|
|
|
|
|
|
|
@ -120,62 +120,62 @@ url_preview_enabled: True |
|
|
|
{% if synapse_url_preview_ip_range_blacklist is defined and synapse_url_preview_ip_range_blacklist | length > 0 %} |
|
|
|
{% if synapse_url_preview_ip_range_blacklist is defined and synapse_url_preview_ip_range_blacklist | length > 0 %} |
|
|
|
url_preview_ip_range_blacklist: |
|
|
|
url_preview_ip_range_blacklist: |
|
|
|
{% for ip in synapse_url_preview_ip_range_blacklist %} |
|
|
|
{% for ip in synapse_url_preview_ip_range_blacklist %} |
|
|
|
- {{ ip }} |
|
|
|
- '{{ ip }}' |
|
|
|
{% endfor %} |
|
|
|
{% endfor %} |
|
|
|
{% endif %} |
|
|
|
{% endif %} |
|
|
|
{% if synapse_url_preview_ip_range_whitelist is defined and synapse_url_preview_ip_range_whitelist | length > 0 %} |
|
|
|
{% if synapse_url_preview_ip_range_whitelist is defined and synapse_url_preview_ip_range_whitelist | length > 0 %} |
|
|
|
url_preview_ip_range_whitelist: |
|
|
|
url_preview_ip_range_whitelist: |
|
|
|
{% for ip in synapse_url_preview_ip_range_whitelist %} |
|
|
|
{% for ip in synapse_url_preview_ip_range_whitelist %} |
|
|
|
- {{ ip }} |
|
|
|
- '{{ ip }}' |
|
|
|
{% endfor %} |
|
|
|
{% endfor %} |
|
|
|
{% endif %} |
|
|
|
{% endif %} |
|
|
|
max_spider_size: {{ synapse_max_spider_size }} |
|
|
|
max_spider_size: {{ synapse_max_spider_size }} |
|
|
|
{% endif %} |
|
|
|
{% endif %} |
|
|
|
|
|
|
|
|
|
|
|
form_secret: "{{ synapse_form_secret }}" |
|
|
|
form_secret: '{{ synapse_form_secret }}' |
|
|
|
|
|
|
|
|
|
|
|
signing_key_path: "{{ synapse_root_dir }}/etc/{{ synapse_server_name }}.signing.key" |
|
|
|
signing_key_path: '{{ synapse_root_dir }}/etc/{{ synapse_server_name }}.signing.key' |
|
|
|
|
|
|
|
|
|
|
|
trusted_key_servers: |
|
|
|
trusted_key_servers: |
|
|
|
- server_name: "matrix.org" |
|
|
|
- server_name: 'matrix.org' |
|
|
|
suppress_key_server_warning: True |
|
|
|
suppress_key_server_warning: True |
|
|
|
|
|
|
|
|
|
|
|
email: |
|
|
|
email: |
|
|
|
enable_notifs: True |
|
|
|
enable_notifs: True |
|
|
|
smtp_host: "localhost" |
|
|
|
smtp_host: 'localhost' |
|
|
|
smtp_port: 25 |
|
|
|
smtp_port: 25 |
|
|
|
require_transport_security: False |
|
|
|
require_transport_security: False |
|
|
|
notif_from: "{{ synapse_smtp_from }}" |
|
|
|
notif_from: '{{ synapse_smtp_from }}' |
|
|
|
app_name: {{ synapse_app_name }} |
|
|
|
app_name: '{{ synapse_app_name }}' |
|
|
|
notif_for_new_users: True |
|
|
|
notif_for_new_users: True |
|
|
|
{% if synapse_client_url is defined %} |
|
|
|
{% if synapse_client_url is defined %} |
|
|
|
client_base_url: "{{ synapse_client_base_url }}" |
|
|
|
client_base_url: '{{ synapse_client_base_url }}' |
|
|
|
{% endif %} |
|
|
|
{% endif %} |
|
|
|
|
|
|
|
|
|
|
|
{% if synapse_auth == 'ldap' %} |
|
|
|
{% if synapse_auth == 'ldap' %} |
|
|
|
password_providers: |
|
|
|
password_providers: |
|
|
|
- module: "ldap_auth_provider.LdapAuthProvider" |
|
|
|
- module: 'ldap_auth_provider.LdapAuthProvider' |
|
|
|
config: |
|
|
|
config: |
|
|
|
enabled: True |
|
|
|
enabled: True |
|
|
|
uri: "{{ synapse_ldap_uri }}" |
|
|
|
uri: '{{ synapse_ldap_uri }}' |
|
|
|
start_tls: {{ synapse_ldap_start_tls | ternary('True', 'False') }} |
|
|
|
start_tls: {{ synapse_ldap_start_tls | ternary('True', 'False') }} |
|
|
|
base: "{{ synapse_ldap_user_base }}" |
|
|
|
base: '{{ synapse_ldap_user_base }}' |
|
|
|
attributes: |
|
|
|
attributes: |
|
|
|
uid: "{{ synapse_ldap_attr_uid }}" |
|
|
|
uid: '{{ synapse_ldap_attr_uid }}' |
|
|
|
mail: "{{ synapse_ldap_attr_email }}" |
|
|
|
mail: '{{ synapse_ldap_attr_email }}' |
|
|
|
name: "{{ synapse_ldap_attr_name }}" |
|
|
|
name: '{{ synapse_ldap_attr_name }}' |
|
|
|
{% if synapse_ldap_bind_dn is defined and synapse_ldap_bind_pass is defined %} |
|
|
|
{% if synapse_ldap_bind_dn is defined and synapse_ldap_bind_pass is defined %} |
|
|
|
bind_dn: {{ synapse_ldap_bind_dn }} |
|
|
|
bind_dn: '{{ synapse_ldap_bind_dn }}' |
|
|
|
bind_password: {{ synapse_ldap_bind_pass }} |
|
|
|
bind_password: '{{ synapse_ldap_bind_pass }}' |
|
|
|
{% endif %} |
|
|
|
{% endif %} |
|
|
|
{% if synapse_ldap_filter is defined %} |
|
|
|
{% if synapse_ldap_filter is defined %} |
|
|
|
filter: "{{ synapse_ldap_filter }}" |
|
|
|
filter: '{{ synapse_ldap_filter }}' |
|
|
|
{% endif %} |
|
|
|
{% endif %} |
|
|
|
{% elif synapse_auth == 'rest' %} |
|
|
|
{% elif synapse_auth == 'rest' %} |
|
|
|
password_providers: |
|
|
|
password_providers: |
|
|
|
- module: "rest_auth_provider.RestAuthProvider" |
|
|
|
- module: 'rest_auth_provider.RestAuthProvider' |
|
|
|
config: |
|
|
|
config: |
|
|
|
endpoint: "{{ synapse_auth_rest_uri }}" |
|
|
|
endpoint: '{{ synapse_auth_rest_uri }}' |
|
|
|
{% elif synapse_auth == 'oidc' %} |
|
|
|
{% elif synapse_auth == 'oidc' %} |
|
|
|
oidc_config: |
|
|
|
oidc_config: |
|
|
|
enabled: True |
|
|
|
enabled: True |
|
|
@ -184,9 +184,9 @@ oidc_config: |
|
|
|
client_secret: '{{ synapse_oidc_secret }}' |
|
|
|
client_secret: '{{ synapse_oidc_secret }}' |
|
|
|
user_mapping_provider: |
|
|
|
user_mapping_provider: |
|
|
|
config: |
|
|
|
config: |
|
|
|
localpart_template: {{ synapse_oidc_localpart }} |
|
|
|
localpart_template: '{{ synapse_oidc_localpart }}' |
|
|
|
{% if synapse_oidc_display_name is defined %} |
|
|
|
{% if synapse_oidc_display_name is defined %} |
|
|
|
display_name_template: {{ synapse_oidc_display_name }} |
|
|
|
display_name_template: '{{ synapse_oidc_display_name }}' |
|
|
|
{% endif %} |
|
|
|
{% endif %} |
|
|
|
|
|
|
|
|
|
|
|
sso: |
|
|
|
sso: |
|
|
@ -199,8 +199,8 @@ password_config: |
|
|
|
{% endif %} |
|
|
|
{% endif %} |
|
|
|
|
|
|
|
|
|
|
|
alias_creation_rules: |
|
|
|
alias_creation_rules: |
|
|
|
- user_id: "*" |
|
|
|
- user_id: '*' |
|
|
|
alias: "*" |
|
|
|
alias: '*' |
|
|
|
action: allow |
|
|
|
action: allow |
|
|
|
|
|
|
|
|
|
|
|
... |
|
|
|
... |
|
|
|