Switch from matrix-postgres to com.devture.ansible.role.postgres
This commit is contained in:
parent
dd9ae0d25c
commit
04b9483f0d
|
@ -10,7 +10,7 @@ If you'd like to use an external PostgreSQL server that you manage, you can edit
|
||||||
If you'd like to use an external Postgres server, use a custom `vars.yml` configuration like this:
|
If you'd like to use an external Postgres server, use a custom `vars.yml` configuration like this:
|
||||||
|
|
||||||
```yaml
|
```yaml
|
||||||
matrix_postgres_enabled: false
|
devture_postgres_enabled: false
|
||||||
|
|
||||||
# Rewire Synapse to use your external Postgres server
|
# Rewire Synapse to use your external Postgres server
|
||||||
matrix_synapse_database_host: "your-postgres-server-hostname"
|
matrix_synapse_database_host: "your-postgres-server-hostname"
|
||||||
|
|
|
@ -35,4 +35,4 @@ matrix_ssl_lets_encrypt_support_email: ''
|
||||||
#
|
#
|
||||||
# The playbook creates additional Postgres users and databases (one for each enabled service)
|
# The playbook creates additional Postgres users and databases (one for each enabled service)
|
||||||
# using this superuser account.
|
# using this superuser account.
|
||||||
matrix_postgres_connection_password: ''
|
devture_postgres_connection_password: ''
|
||||||
|
|
|
@ -287,7 +287,7 @@ devture_systemd_service_manager_services_list_auto: |
|
||||||
+
|
+
|
||||||
([{'name': 'matrix-ntfy.service', 'priority': 800, 'groups': ['matrix', 'ntfy']}] if matrix_ntfy_enabled else [])
|
([{'name': 'matrix-ntfy.service', 'priority': 800, 'groups': ['matrix', 'ntfy']}] if matrix_ntfy_enabled else [])
|
||||||
+
|
+
|
||||||
([{'name': 'matrix-postgres.service', 'priority': 500, 'groups': ['matrix', 'postgres']}] if matrix_postgres_enabled else [])
|
([{'name': (devture_postgres_identifier + '.service'), 'priority': 500, 'groups': ['matrix', 'postgres']}] if devture_postgres_enabled else [])
|
||||||
+
|
+
|
||||||
([{'name': 'matrix-postgres-backup.service', 'priority': 3000, 'groups': ['matrix', 'backup', 'postgres-backup']}] if matrix_postgres_backup_enabled else [])
|
([{'name': 'matrix-postgres-backup.service', 'priority': 3000, 'groups': ['matrix', 'backup', 'postgres-backup']}] if matrix_postgres_backup_enabled else [])
|
||||||
+
|
+
|
||||||
|
@ -417,7 +417,7 @@ matrix_appservice_discord_systemd_required_services_list: |
|
||||||
+
|
+
|
||||||
['matrix-' + matrix_homeserver_implementation + '.service']
|
['matrix-' + matrix_homeserver_implementation + '.service']
|
||||||
+
|
+
|
||||||
(['matrix-postgres.service'] if matrix_postgres_enabled else [])
|
([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])
|
||||||
+
|
+
|
||||||
(['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])
|
(['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])
|
||||||
}}
|
}}
|
||||||
|
@ -428,7 +428,7 @@ matrix_appservice_discord_homeserver_token: "{{ '%s' | format(matrix_homeserver_
|
||||||
|
|
||||||
# We only make this use Postgres if our own Postgres server is enabled.
|
# We only make this use Postgres if our own Postgres server is enabled.
|
||||||
# It's only then (for now) that we can automatically create the necessary database and user for this service.
|
# It's only then (for now) that we can automatically create the necessary database and user for this service.
|
||||||
matrix_appservice_discord_database_engine: "{{ 'postgres' if matrix_postgres_enabled else 'sqlite' }}"
|
matrix_appservice_discord_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"
|
||||||
matrix_appservice_discord_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'as.discord.db', rounds=655555) | to_uuid }}"
|
matrix_appservice_discord_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'as.discord.db', rounds=655555) | to_uuid }}"
|
||||||
|
|
||||||
######################################################################
|
######################################################################
|
||||||
|
@ -509,8 +509,8 @@ matrix_appservice_slack_systemd_required_services_list: |
|
||||||
(['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])
|
(['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])
|
||||||
}}
|
}}
|
||||||
|
|
||||||
# Postgres is the default, except if not using `matrix_postgres` (internal postgres)
|
# Postgres is the default, except if not using internal Postgres server
|
||||||
matrix_appservice_slack_database_engine: "{{ 'postgres' if matrix_postgres_enabled else 'nedb' }}"
|
matrix_appservice_slack_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'nedb' }}"
|
||||||
matrix_appservice_slack_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'as.slack.db', rounds=655555) | to_uuid }}"
|
matrix_appservice_slack_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'as.slack.db', rounds=655555) | to_uuid }}"
|
||||||
|
|
||||||
######################################################################
|
######################################################################
|
||||||
|
@ -552,7 +552,7 @@ matrix_appservice_irc_appservice_token: "{{ '%s' | format(matrix_homeserver_gene
|
||||||
|
|
||||||
matrix_appservice_irc_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'irc.hs.token', rounds=655555) | to_uuid }}"
|
matrix_appservice_irc_homeserver_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'irc.hs.token', rounds=655555) | to_uuid }}"
|
||||||
|
|
||||||
matrix_appservice_irc_database_engine: "{{ 'postgres' if matrix_postgres_enabled else 'nedb' }}"
|
matrix_appservice_irc_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'nedb' }}"
|
||||||
matrix_appservice_irc_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'as.irc.db', rounds=655555) | to_uuid }}"
|
matrix_appservice_irc_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'as.irc.db', rounds=655555) | to_uuid }}"
|
||||||
|
|
||||||
|
|
||||||
|
@ -581,7 +581,7 @@ matrix_appservice_kakaotalk_systemd_required_services_list: |
|
||||||
+
|
+
|
||||||
(['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])
|
(['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])
|
||||||
+
|
+
|
||||||
(['matrix-postgres.service'] if matrix_postgres_enabled else [])
|
([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])
|
||||||
}}
|
}}
|
||||||
|
|
||||||
matrix_appservice_kakaotalk_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'as.kakao.hs', rounds=655555) | to_uuid }}"
|
matrix_appservice_kakaotalk_appservice_token: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'as.kakao.hs', rounds=655555) | to_uuid }}"
|
||||||
|
@ -590,7 +590,7 @@ matrix_appservice_kakaotalk_homeserver_token: "{{ '%s' | format(matrix_homeserve
|
||||||
|
|
||||||
matrix_appservice_kakaotalk_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"
|
matrix_appservice_kakaotalk_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"
|
||||||
|
|
||||||
matrix_appservice_kakaotalk_database_engine: "{{ 'postgres' if matrix_postgres_enabled else 'sqlite' }}"
|
matrix_appservice_kakaotalk_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"
|
||||||
matrix_appservice_kakaotalk_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'as.kakao.db', rounds=655555) | to_uuid }}"
|
matrix_appservice_kakaotalk_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'as.kakao.db', rounds=655555) | to_uuid }}"
|
||||||
|
|
||||||
######################################################################
|
######################################################################
|
||||||
|
@ -617,7 +617,7 @@ matrix_beeper_linkedin_systemd_required_services_list: |
|
||||||
+
|
+
|
||||||
['matrix-' + matrix_homeserver_implementation + '.service']
|
['matrix-' + matrix_homeserver_implementation + '.service']
|
||||||
+
|
+
|
||||||
(['matrix-postgres.service'] if matrix_postgres_enabled else [])
|
([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])
|
||||||
+
|
+
|
||||||
(['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])
|
(['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])
|
||||||
}}
|
}}
|
||||||
|
@ -655,7 +655,7 @@ matrix_go_skype_bridge_systemd_required_services_list: |
|
||||||
+
|
+
|
||||||
['matrix-' + matrix_homeserver_implementation + '.service']
|
['matrix-' + matrix_homeserver_implementation + '.service']
|
||||||
+
|
+
|
||||||
(['matrix-postgres.service'] if matrix_postgres_enabled else [])
|
([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])
|
||||||
+
|
+
|
||||||
(['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])
|
(['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])
|
||||||
}}
|
}}
|
||||||
|
@ -666,8 +666,8 @@ matrix_go_skype_bridge_homeserver_token: "{{ '%s' | format(matrix_homeserver_gen
|
||||||
|
|
||||||
matrix_go_skype_bridge_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"
|
matrix_go_skype_bridge_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"
|
||||||
|
|
||||||
# Postgres is the default, except if not using `matrix_postgres` (internal postgres)
|
# Postgres is the default, except if not using internal Postgres server
|
||||||
matrix_go_skype_bridge_database_engine: "{{ 'postgres' if matrix_postgres_enabled else 'sqlite' }}"
|
matrix_go_skype_bridge_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"
|
||||||
matrix_go_skype_bridge_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'goskype.db', rounds=655555) | to_uuid }}"
|
matrix_go_skype_bridge_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'goskype.db', rounds=655555) | to_uuid }}"
|
||||||
|
|
||||||
######################################################################
|
######################################################################
|
||||||
|
@ -693,7 +693,7 @@ matrix_mautrix_facebook_systemd_required_services_list: |
|
||||||
+
|
+
|
||||||
['matrix-' + matrix_homeserver_implementation + '.service']
|
['matrix-' + matrix_homeserver_implementation + '.service']
|
||||||
+
|
+
|
||||||
(['matrix-postgres.service'] if matrix_postgres_enabled else [])
|
([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])
|
||||||
+
|
+
|
||||||
(['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])
|
(['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])
|
||||||
}}
|
}}
|
||||||
|
@ -712,7 +712,7 @@ matrix_mautrix_facebook_bridge_presence: "{{ matrix_synapse_presence_enabled if
|
||||||
|
|
||||||
# We'd like to force-set people with external Postgres to SQLite, so the bridge role can complain
|
# We'd like to force-set people with external Postgres to SQLite, so the bridge role can complain
|
||||||
# and point them to a migration path.
|
# and point them to a migration path.
|
||||||
matrix_mautrix_facebook_database_engine: "{{ 'postgres' if matrix_postgres_enabled else 'sqlite' }}"
|
matrix_mautrix_facebook_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"
|
||||||
matrix_mautrix_facebook_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mau.fb.db', rounds=655555) | to_uuid }}"
|
matrix_mautrix_facebook_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mau.fb.db', rounds=655555) | to_uuid }}"
|
||||||
|
|
||||||
######################################################################
|
######################################################################
|
||||||
|
@ -739,7 +739,7 @@ matrix_mautrix_hangouts_systemd_required_services_list: |
|
||||||
+
|
+
|
||||||
['matrix-' + matrix_homeserver_implementation + '.service']
|
['matrix-' + matrix_homeserver_implementation + '.service']
|
||||||
+
|
+
|
||||||
(['matrix-postgres.service'] if matrix_postgres_enabled else [])
|
([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])
|
||||||
+
|
+
|
||||||
(['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])
|
(['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])
|
||||||
}}
|
}}
|
||||||
|
@ -752,8 +752,8 @@ matrix_mautrix_hangouts_container_http_host_bind_port: "{{ '' if matrix_nginx_pr
|
||||||
|
|
||||||
matrix_mautrix_hangouts_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"
|
matrix_mautrix_hangouts_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"
|
||||||
|
|
||||||
# Postgres is the default, except if not using `matrix_postgres` (internal postgres)
|
# Postgres is the default, except if not using internal Postgres server
|
||||||
matrix_mautrix_hangouts_database_engine: "{{ 'postgres' if matrix_postgres_enabled else 'sqlite' }}"
|
matrix_mautrix_hangouts_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"
|
||||||
matrix_mautrix_hangouts_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mau.hangouts.db', rounds=655555) | to_uuid }}"
|
matrix_mautrix_hangouts_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mau.hangouts.db', rounds=655555) | to_uuid }}"
|
||||||
|
|
||||||
######################################################################
|
######################################################################
|
||||||
|
@ -780,7 +780,7 @@ matrix_mautrix_googlechat_systemd_required_services_list: |
|
||||||
+
|
+
|
||||||
['matrix-' + matrix_homeserver_implementation + '.service']
|
['matrix-' + matrix_homeserver_implementation + '.service']
|
||||||
+
|
+
|
||||||
(['matrix-postgres.service'] if matrix_postgres_enabled else [])
|
([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])
|
||||||
+
|
+
|
||||||
(['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])
|
(['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])
|
||||||
}}
|
}}
|
||||||
|
@ -793,8 +793,8 @@ matrix_mautrix_googlechat_container_http_host_bind_port: "{{ '' if matrix_nginx_
|
||||||
|
|
||||||
matrix_mautrix_googlechat_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"
|
matrix_mautrix_googlechat_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"
|
||||||
|
|
||||||
# Postgres is the default, except if not using `matrix_postgres` (internal postgres)
|
# Postgres is the default, except if not using internal Postgres server
|
||||||
matrix_mautrix_googlechat_database_engine: "{{ 'postgres' if matrix_postgres_enabled else 'sqlite' }}"
|
matrix_mautrix_googlechat_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"
|
||||||
matrix_mautrix_googlechat_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mau.gc.db', rounds=655555) | to_uuid }}"
|
matrix_mautrix_googlechat_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mau.gc.db', rounds=655555) | to_uuid }}"
|
||||||
|
|
||||||
######################################################################
|
######################################################################
|
||||||
|
@ -821,7 +821,7 @@ matrix_mautrix_instagram_systemd_required_services_list: |
|
||||||
+
|
+
|
||||||
['matrix-' + matrix_homeserver_implementation + '.service']
|
['matrix-' + matrix_homeserver_implementation + '.service']
|
||||||
+
|
+
|
||||||
(['matrix-postgres.service'] if matrix_postgres_enabled else [])
|
([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])
|
||||||
+
|
+
|
||||||
(['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])
|
(['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])
|
||||||
}}
|
}}
|
||||||
|
@ -836,7 +836,7 @@ matrix_mautrix_instagram_bridge_presence: "{{ matrix_synapse_presence_enabled if
|
||||||
|
|
||||||
# We'd like to force-set people with external Postgres to SQLite, so the bridge role can complain
|
# We'd like to force-set people with external Postgres to SQLite, so the bridge role can complain
|
||||||
# and point them to a migration path.
|
# and point them to a migration path.
|
||||||
matrix_mautrix_instagram_database_engine: "{{ 'postgres' if matrix_postgres_enabled else 'sqlite' }}"
|
matrix_mautrix_instagram_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"
|
||||||
matrix_mautrix_instagram_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mau.ig.db', rounds=655555) | to_uuid }}"
|
matrix_mautrix_instagram_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mau.ig.db', rounds=655555) | to_uuid }}"
|
||||||
|
|
||||||
######################################################################
|
######################################################################
|
||||||
|
@ -861,7 +861,7 @@ matrix_mautrix_signal_systemd_required_services_list: |
|
||||||
+
|
+
|
||||||
['matrix-' + matrix_homeserver_implementation + '.service']
|
['matrix-' + matrix_homeserver_implementation + '.service']
|
||||||
+
|
+
|
||||||
(['matrix-postgres.service'] if matrix_postgres_enabled else [])
|
([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])
|
||||||
+
|
+
|
||||||
(['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])
|
(['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])
|
||||||
+
|
+
|
||||||
|
@ -910,7 +910,7 @@ matrix_mautrix_telegram_systemd_required_services_list: |
|
||||||
+
|
+
|
||||||
['matrix-' + matrix_homeserver_implementation + '.service']
|
['matrix-' + matrix_homeserver_implementation + '.service']
|
||||||
+
|
+
|
||||||
(['matrix-postgres.service'] if matrix_postgres_enabled else [])
|
([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])
|
||||||
+
|
+
|
||||||
(['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])
|
(['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])
|
||||||
}}
|
}}
|
||||||
|
@ -925,8 +925,8 @@ matrix_mautrix_telegram_container_http_host_bind_port: "{{ '' if matrix_nginx_pr
|
||||||
|
|
||||||
matrix_mautrix_telegram_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"
|
matrix_mautrix_telegram_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"
|
||||||
|
|
||||||
# Postgres is the default, except if not using `matrix_postgres` (internal postgres)
|
# Postgres is the default, except if not using internal Postgres server
|
||||||
matrix_mautrix_telegram_database_engine: "{{ 'postgres' if matrix_postgres_enabled else 'sqlite' }}"
|
matrix_mautrix_telegram_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"
|
||||||
matrix_mautrix_telegram_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mau.telegram.db', rounds=655555) | to_uuid }}"
|
matrix_mautrix_telegram_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mau.telegram.db', rounds=655555) | to_uuid }}"
|
||||||
|
|
||||||
######################################################################
|
######################################################################
|
||||||
|
@ -952,7 +952,7 @@ matrix_mautrix_twitter_systemd_required_services_list: |
|
||||||
+
|
+
|
||||||
['matrix-' + matrix_homeserver_implementation + '.service']
|
['matrix-' + matrix_homeserver_implementation + '.service']
|
||||||
+
|
+
|
||||||
(['matrix-postgres.service'] if matrix_postgres_enabled else [])
|
([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])
|
||||||
+
|
+
|
||||||
(['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])
|
(['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])
|
||||||
}}
|
}}
|
||||||
|
@ -963,8 +963,8 @@ matrix_mautrix_twitter_homeserver_token: "{{ '%s' | format(matrix_homeserver_gen
|
||||||
|
|
||||||
matrix_mautrix_twitter_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"
|
matrix_mautrix_twitter_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"
|
||||||
|
|
||||||
matrix_mautrix_twitter_database_hostname: "{{ 'matrix-postgres' if matrix_postgres_enabled else '' }}"
|
matrix_mautrix_twitter_database_hostname: "{{ devture_postgres_identifier if devture_postgres_enabled else '' }}"
|
||||||
matrix_mautrix_twitter_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mau.twt.db', rounds=655555) | to_uuid if matrix_postgres_enabled else '' }}"
|
matrix_mautrix_twitter_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mau.twt.db', rounds=655555) | to_uuid if devture_postgres_enabled else '' }}"
|
||||||
|
|
||||||
######################################################################
|
######################################################################
|
||||||
#
|
#
|
||||||
|
@ -989,7 +989,7 @@ matrix_mautrix_whatsapp_systemd_required_services_list: |
|
||||||
+
|
+
|
||||||
['matrix-' + matrix_homeserver_implementation + '.service']
|
['matrix-' + matrix_homeserver_implementation + '.service']
|
||||||
+
|
+
|
||||||
(['matrix-postgres.service'] if matrix_postgres_enabled else [])
|
([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])
|
||||||
+
|
+
|
||||||
(['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])
|
(['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])
|
||||||
}}
|
}}
|
||||||
|
@ -1000,8 +1000,8 @@ matrix_mautrix_whatsapp_homeserver_token: "{{ '%s' | format(matrix_homeserver_ge
|
||||||
|
|
||||||
matrix_mautrix_whatsapp_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"
|
matrix_mautrix_whatsapp_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"
|
||||||
|
|
||||||
# Postgres is the default, except if not using `matrix_postgres` (internal postgres)
|
# Postgres is the default, except if not using internal Postgres server
|
||||||
matrix_mautrix_whatsapp_database_engine: "{{ 'postgres' if matrix_postgres_enabled else 'sqlite' }}"
|
matrix_mautrix_whatsapp_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"
|
||||||
matrix_mautrix_whatsapp_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mauwhatsapp.db', rounds=655555) | to_uuid }}"
|
matrix_mautrix_whatsapp_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mauwhatsapp.db', rounds=655555) | to_uuid }}"
|
||||||
|
|
||||||
######################################################################
|
######################################################################
|
||||||
|
@ -1027,7 +1027,7 @@ matrix_mautrix_discord_systemd_required_services_list: |
|
||||||
+
|
+
|
||||||
['matrix-' + matrix_homeserver_implementation + '.service']
|
['matrix-' + matrix_homeserver_implementation + '.service']
|
||||||
+
|
+
|
||||||
(['matrix-postgres.service'] if matrix_postgres_enabled else [])
|
([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])
|
||||||
+
|
+
|
||||||
(['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])
|
(['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])
|
||||||
}}
|
}}
|
||||||
|
@ -1038,8 +1038,8 @@ matrix_mautrix_discord_homeserver_token: "{{ '%s' | format(matrix_homeserver_gen
|
||||||
|
|
||||||
matrix_mautrix_discord_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"
|
matrix_mautrix_discord_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"
|
||||||
|
|
||||||
# Postgres is the default, except if not using `matrix_postgres` (internal postgres)
|
# Postgres is the default, except if not using internal Postgres server
|
||||||
matrix_mautrix_discord_database_engine: "{{ 'postgres' if matrix_postgres_enabled else 'sqlite' }}"
|
matrix_mautrix_discord_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"
|
||||||
matrix_mautrix_discord_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'maudiscord.db', rounds=655555) | to_uuid }}"
|
matrix_mautrix_discord_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'maudiscord.db', rounds=655555) | to_uuid }}"
|
||||||
|
|
||||||
# Enabling bridge.restricted_rooms for this bridge does not work well with Conduit, so we disable it by default.
|
# Enabling bridge.restricted_rooms for this bridge does not work well with Conduit, so we disable it by default.
|
||||||
|
@ -1175,7 +1175,7 @@ matrix_mx_puppet_slack_systemd_required_services_list: |
|
||||||
+
|
+
|
||||||
['matrix-' + matrix_homeserver_implementation + '.service']
|
['matrix-' + matrix_homeserver_implementation + '.service']
|
||||||
+
|
+
|
||||||
(['matrix-postgres.service'] if matrix_postgres_enabled else [])
|
([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])
|
||||||
+
|
+
|
||||||
(['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])
|
(['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])
|
||||||
}}
|
}}
|
||||||
|
@ -1186,8 +1186,8 @@ matrix_mx_puppet_slack_homeserver_token: "{{ '%s' | format(matrix_homeserver_gen
|
||||||
|
|
||||||
matrix_mx_puppet_slack_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"
|
matrix_mx_puppet_slack_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"
|
||||||
|
|
||||||
# Postgres is the default, except if not using `matrix_postgres` (internal postgres)
|
# Postgres is the default, except if not using internal Postgres server
|
||||||
matrix_mx_puppet_slack_database_engine: "{{ 'postgres' if matrix_postgres_enabled else 'sqlite' }}"
|
matrix_mx_puppet_slack_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"
|
||||||
matrix_mx_puppet_slack_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxpup.slack.db', rounds=655555) | to_uuid }}"
|
matrix_mx_puppet_slack_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxpup.slack.db', rounds=655555) | to_uuid }}"
|
||||||
|
|
||||||
######################################################################
|
######################################################################
|
||||||
|
@ -1213,7 +1213,7 @@ matrix_mx_puppet_twitter_systemd_required_services_list: |
|
||||||
+
|
+
|
||||||
['matrix-' + matrix_homeserver_implementation + '.service']
|
['matrix-' + matrix_homeserver_implementation + '.service']
|
||||||
+
|
+
|
||||||
(['matrix-postgres.service'] if matrix_postgres_enabled else [])
|
([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])
|
||||||
+
|
+
|
||||||
(['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])
|
(['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])
|
||||||
}}
|
}}
|
||||||
|
@ -1226,8 +1226,8 @@ matrix_mx_puppet_twitter_login_shared_secret: "{{ matrix_synapse_ext_password_pr
|
||||||
|
|
||||||
matrix_mx_puppet_twitter_container_http_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else ('127.0.0.1:' ~ matrix_mx_puppet_twitter_appservice_port) }}"
|
matrix_mx_puppet_twitter_container_http_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else ('127.0.0.1:' ~ matrix_mx_puppet_twitter_appservice_port) }}"
|
||||||
|
|
||||||
# Postgres is the default, except if not using `matrix_postgres` (internal postgres)
|
# Postgres is the default, except if not using internal Postgres server
|
||||||
matrix_mx_puppet_twitter_database_engine: "{{ 'postgres' if matrix_postgres_enabled else 'sqlite' }}"
|
matrix_mx_puppet_twitter_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"
|
||||||
matrix_mx_puppet_twitter_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxpup.twitter.db', rounds=655555) | to_uuid }}"
|
matrix_mx_puppet_twitter_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxpup.twitter.db', rounds=655555) | to_uuid }}"
|
||||||
|
|
||||||
######################################################################
|
######################################################################
|
||||||
|
@ -1254,7 +1254,7 @@ matrix_mx_puppet_instagram_systemd_required_services_list: |
|
||||||
+
|
+
|
||||||
['matrix-' + matrix_homeserver_implementation + '.service']
|
['matrix-' + matrix_homeserver_implementation + '.service']
|
||||||
+
|
+
|
||||||
(['matrix-postgres.service'] if matrix_postgres_enabled else [])
|
([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])
|
||||||
+
|
+
|
||||||
(['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])
|
(['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])
|
||||||
}}
|
}}
|
||||||
|
@ -1265,8 +1265,8 @@ matrix_mx_puppet_instagram_homeserver_token: "{{ '%s' | format(matrix_homeserver
|
||||||
|
|
||||||
matrix_mx_puppet_instagram_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"
|
matrix_mx_puppet_instagram_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"
|
||||||
|
|
||||||
# Postgres is the default, except if not using `matrix_postgres` (internal postgres)
|
# Postgres is the default, except if not using internal Postgres server
|
||||||
matrix_mx_puppet_instagram_database_engine: "{{ 'postgres' if matrix_postgres_enabled else 'sqlite' }}"
|
matrix_mx_puppet_instagram_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"
|
||||||
matrix_mx_puppet_instagram_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxpup.ig.db', rounds=655555) | to_uuid }}"
|
matrix_mx_puppet_instagram_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxpup.ig.db', rounds=655555) | to_uuid }}"
|
||||||
|
|
||||||
######################################################################
|
######################################################################
|
||||||
|
@ -1292,7 +1292,7 @@ matrix_mx_puppet_discord_systemd_required_services_list: |
|
||||||
+
|
+
|
||||||
['matrix-' + matrix_homeserver_implementation + '.service']
|
['matrix-' + matrix_homeserver_implementation + '.service']
|
||||||
+
|
+
|
||||||
(['matrix-postgres.service'] if matrix_postgres_enabled else [])
|
([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])
|
||||||
+
|
+
|
||||||
(['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])
|
(['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])
|
||||||
}}
|
}}
|
||||||
|
@ -1303,8 +1303,8 @@ matrix_mx_puppet_discord_homeserver_token: "{{ '%s' | format(matrix_homeserver_g
|
||||||
|
|
||||||
matrix_mx_puppet_discord_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"
|
matrix_mx_puppet_discord_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"
|
||||||
|
|
||||||
# Postgres is the default, except if not using `matrix_postgres` (internal postgres)
|
# Postgres is the default, except if not using internal Postgres server
|
||||||
matrix_mx_puppet_discord_database_engine: "{{ 'postgres' if matrix_postgres_enabled else 'sqlite' }}"
|
matrix_mx_puppet_discord_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"
|
||||||
matrix_mx_puppet_discord_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxpup.dsc.db', rounds=655555) | to_uuid }}"
|
matrix_mx_puppet_discord_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxpup.dsc.db', rounds=655555) | to_uuid }}"
|
||||||
|
|
||||||
######################################################################
|
######################################################################
|
||||||
|
@ -1330,7 +1330,7 @@ matrix_mx_puppet_steam_systemd_required_services_list: |
|
||||||
+
|
+
|
||||||
['matrix-' + matrix_homeserver_implementation + '.service']
|
['matrix-' + matrix_homeserver_implementation + '.service']
|
||||||
+
|
+
|
||||||
(['matrix-postgres.service'] if matrix_postgres_enabled else [])
|
([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])
|
||||||
+
|
+
|
||||||
(['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])
|
(['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])
|
||||||
}}
|
}}
|
||||||
|
@ -1341,8 +1341,8 @@ matrix_mx_puppet_steam_homeserver_token: "{{ '%s' | format(matrix_homeserver_gen
|
||||||
|
|
||||||
matrix_mx_puppet_steam_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"
|
matrix_mx_puppet_steam_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"
|
||||||
|
|
||||||
# Postgres is the default, except if not using `matrix_postgres` (internal postgres)
|
# Postgres is the default, except if not using internal Postgres server
|
||||||
matrix_mx_puppet_steam_database_engine: "{{ 'postgres' if matrix_postgres_enabled else 'sqlite' }}"
|
matrix_mx_puppet_steam_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"
|
||||||
matrix_mx_puppet_steam_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxpup.steam.db', rounds=655555) | to_uuid }}"
|
matrix_mx_puppet_steam_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxpup.steam.db', rounds=655555) | to_uuid }}"
|
||||||
|
|
||||||
######################################################################
|
######################################################################
|
||||||
|
@ -1368,7 +1368,7 @@ matrix_mx_puppet_groupme_systemd_required_services_list: |
|
||||||
+
|
+
|
||||||
['matrix-' + matrix_homeserver_implementation + '.service']
|
['matrix-' + matrix_homeserver_implementation + '.service']
|
||||||
+
|
+
|
||||||
(['matrix-postgres.service'] if matrix_postgres_enabled else [])
|
([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])
|
||||||
+
|
+
|
||||||
(['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])
|
(['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])
|
||||||
}}
|
}}
|
||||||
|
@ -1379,8 +1379,8 @@ matrix_mx_puppet_groupme_homeserver_token: "{{ '%s' | format(matrix_homeserver_g
|
||||||
|
|
||||||
matrix_mx_puppet_groupme_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"
|
matrix_mx_puppet_groupme_login_shared_secret: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret if matrix_synapse_ext_password_provider_shared_secret_auth_enabled else '' }}"
|
||||||
|
|
||||||
# Postgres is the default, except if not using `matrix_postgres` (internal postgres)
|
# Postgres is the default, except if not using internal Postgres server
|
||||||
matrix_mx_puppet_groupme_database_engine: "{{ 'postgres' if matrix_postgres_enabled else 'sqlite' }}"
|
matrix_mx_puppet_groupme_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"
|
||||||
matrix_mx_puppet_groupme_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxpup.groupme.db', rounds=655555) | to_uuid }}"
|
matrix_mx_puppet_groupme_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxpup.groupme.db', rounds=655555) | to_uuid }}"
|
||||||
|
|
||||||
######################################################################
|
######################################################################
|
||||||
|
@ -1404,13 +1404,13 @@ matrix_bot_matrix_reminder_bot_systemd_required_services_list: |
|
||||||
+
|
+
|
||||||
['matrix-' + matrix_homeserver_implementation + '.service']
|
['matrix-' + matrix_homeserver_implementation + '.service']
|
||||||
+
|
+
|
||||||
(['matrix-postgres.service'] if matrix_postgres_enabled else [])
|
([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])
|
||||||
+
|
+
|
||||||
(['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])
|
(['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])
|
||||||
}}
|
}}
|
||||||
|
|
||||||
# Postgres is the default, except if not using `matrix_postgres` (internal postgres)
|
# Postgres is the default, except if not using internal Postgres server
|
||||||
matrix_bot_matrix_reminder_bot_database_engine: "{{ 'postgres' if matrix_postgres_enabled else 'sqlite' }}"
|
matrix_bot_matrix_reminder_bot_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"
|
||||||
matrix_bot_matrix_reminder_bot_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'reminder.bot.db', rounds=655555) | to_uuid }}"
|
matrix_bot_matrix_reminder_bot_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'reminder.bot.db', rounds=655555) | to_uuid }}"
|
||||||
matrix_bot_matrix_reminder_bot_container_image_self_build: "{{ matrix_architecture != 'amd64' }}"
|
matrix_bot_matrix_reminder_bot_container_image_self_build: "{{ matrix_architecture != 'amd64' }}"
|
||||||
|
|
||||||
|
@ -1465,7 +1465,7 @@ matrix_bot_maubot_systemd_required_services_list: |
|
||||||
+
|
+
|
||||||
['matrix-' + matrix_homeserver_implementation + '.service']
|
['matrix-' + matrix_homeserver_implementation + '.service']
|
||||||
+
|
+
|
||||||
(['matrix-postgres.service'] if matrix_postgres_enabled else [])
|
([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])
|
||||||
+
|
+
|
||||||
(['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])
|
(['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])
|
||||||
}}
|
}}
|
||||||
|
@ -1480,8 +1480,8 @@ matrix_bot_maubot_registration_shared_secret: |-
|
||||||
|
|
||||||
matrix_bot_maubot_management_interface_http_bind_port: "{{ '' if matrix_nginx_proxy_enabled else ('127.0.0.1:' + matrix_bot_maubot_management_interface_port | string) }}"
|
matrix_bot_maubot_management_interface_http_bind_port: "{{ '' if matrix_nginx_proxy_enabled else ('127.0.0.1:' + matrix_bot_maubot_management_interface_port | string) }}"
|
||||||
|
|
||||||
# Postgres is the default, except if not using `matrix_postgres` (internal postgres)
|
# Postgres is the default, except if not using internal Postgres server
|
||||||
matrix_bot_maubot_database_engine: "{{ 'postgres' if matrix_postgres_enabled else 'sqlite' }}"
|
matrix_bot_maubot_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"
|
||||||
matrix_bot_maubot_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxpup.dsc.db', rounds=655555) | to_uuid }}"
|
matrix_bot_maubot_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mxpup.dsc.db', rounds=655555) | to_uuid }}"
|
||||||
|
|
||||||
######################################################################
|
######################################################################
|
||||||
|
@ -1504,15 +1504,15 @@ matrix_bot_honoroit_systemd_required_services_list: |
|
||||||
{{
|
{{
|
||||||
['docker.service']
|
['docker.service']
|
||||||
+
|
+
|
||||||
(['matrix-postgres.service'] if matrix_postgres_enabled else [])
|
([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])
|
||||||
+
|
+
|
||||||
(['matrix-synapse.service'] if matrix_synapse_enabled else [])
|
(['matrix-synapse.service'] if matrix_synapse_enabled else [])
|
||||||
+
|
+
|
||||||
(['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])
|
(['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])
|
||||||
}}
|
}}
|
||||||
|
|
||||||
# Postgres is the default, except if not using `matrix_postgres` (internal postgres)
|
# Postgres is the default, except if not using internal Postgres server
|
||||||
matrix_bot_honoroit_database_engine: "{{ 'postgres' if matrix_postgres_enabled else 'sqlite' }}"
|
matrix_bot_honoroit_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"
|
||||||
matrix_bot_honoroit_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'honoroit.bot.db', rounds=655555) | to_uuid }}"
|
matrix_bot_honoroit_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'honoroit.bot.db', rounds=655555) | to_uuid }}"
|
||||||
matrix_bot_honoroit_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"
|
matrix_bot_honoroit_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"
|
||||||
|
|
||||||
|
@ -1535,15 +1535,15 @@ matrix_bot_buscarron_systemd_required_services_list: |
|
||||||
{{
|
{{
|
||||||
['docker.service']
|
['docker.service']
|
||||||
+
|
+
|
||||||
(['matrix-postgres.service'] if matrix_postgres_enabled else [])
|
([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])
|
||||||
+
|
+
|
||||||
(['matrix-synapse.service'] if matrix_synapse_enabled else [])
|
(['matrix-synapse.service'] if matrix_synapse_enabled else [])
|
||||||
+
|
+
|
||||||
(['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])
|
(['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])
|
||||||
}}
|
}}
|
||||||
|
|
||||||
# Postgres is the default, except if not using `matrix_postgres` (internal postgres)
|
# Postgres is the default, except if not using internal Postgres server
|
||||||
matrix_bot_buscarron_database_engine: "{{ 'postgres' if matrix_postgres_enabled else 'sqlite' }}"
|
matrix_bot_buscarron_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"
|
||||||
matrix_bot_buscarron_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'buscarron.bot.db', rounds=655555) | to_uuid }}"
|
matrix_bot_buscarron_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'buscarron.bot.db', rounds=655555) | to_uuid }}"
|
||||||
matrix_bot_buscarron_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"
|
matrix_bot_buscarron_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"
|
||||||
|
|
||||||
|
@ -1569,13 +1569,13 @@ matrix_bot_postmoogle_systemd_required_services_list: |
|
||||||
{{
|
{{
|
||||||
['docker.service']
|
['docker.service']
|
||||||
+
|
+
|
||||||
(['matrix-postgres.service'] if matrix_postgres_enabled else [])
|
([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])
|
||||||
+
|
+
|
||||||
(['matrix-synapse.service'] if matrix_synapse_enabled else [])
|
(['matrix-synapse.service'] if matrix_synapse_enabled else [])
|
||||||
}}
|
}}
|
||||||
|
|
||||||
# Postgres is the default, except if not using `matrix_postgres` (internal postgres)
|
# Postgres is the default, except if not using internal Postgres server
|
||||||
matrix_bot_postmoogle_database_engine: "{{ 'postgres' if matrix_postgres_enabled else 'sqlite' }}"
|
matrix_bot_postmoogle_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"
|
||||||
matrix_bot_postmoogle_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'postmoogle.db', rounds=655555) | to_uuid }}"
|
matrix_bot_postmoogle_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'postmoogle.db', rounds=655555) | to_uuid }}"
|
||||||
|
|
||||||
matrix_bot_postmoogle_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"
|
matrix_bot_postmoogle_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"
|
||||||
|
@ -1631,7 +1631,7 @@ matrix_bot_mjolnir_systemd_required_services_list: |
|
||||||
+
|
+
|
||||||
['matrix-' + matrix_homeserver_implementation + '.service']
|
['matrix-' + matrix_homeserver_implementation + '.service']
|
||||||
+
|
+
|
||||||
(['matrix-postgres.service'] if matrix_postgres_enabled else [])
|
([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])
|
||||||
+
|
+
|
||||||
(['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])
|
(['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])
|
||||||
}}
|
}}
|
||||||
|
@ -1649,26 +1649,31 @@ matrix_bot_mjolnir_systemd_required_services_list: |
|
||||||
######################################################################
|
######################################################################
|
||||||
|
|
||||||
matrix_backup_borg_enabled: false
|
matrix_backup_borg_enabled: false
|
||||||
|
|
||||||
matrix_backup_borg_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm32', 'arm64'] }}"
|
matrix_backup_borg_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm32', 'arm64'] }}"
|
||||||
matrix_backup_borg_postgresql_enabled: "{{ matrix_postgres_enabled }}"
|
|
||||||
matrix_backup_borg_postgresql_databases_hostname: "{{ matrix_postgres_connection_hostname }}"
|
matrix_backup_borg_postgresql_enabled: "{{ devture_postgres_enabled }}"
|
||||||
matrix_backup_borg_postgresql_databases_username: "{{ matrix_postgres_connection_username }}"
|
matrix_backup_borg_postgresql_databases_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"
|
||||||
matrix_backup_borg_postgresql_databases_password: "{{ matrix_postgres_connection_password }}"
|
matrix_backup_borg_postgresql_databases_username: "{{ devture_postgres_connection_username if devture_postgres_enabled else '' }}"
|
||||||
matrix_backup_borg_postgresql_databases_port: "{{ matrix_postgres_connection_port }}"
|
matrix_backup_borg_postgresql_databases_password: "{{ devture_postgres_connection_password if devture_postgres_enabled else '' }}"
|
||||||
matrix_backup_borg_postgresql_databases: "{{ matrix_postgres_additional_databases | map(attribute='name') if matrix_postgres_enabled else [] }}"
|
matrix_backup_borg_postgresql_databases_port: "{{ devture_postgres_connection_port if devture_postgres_enabled else 5432 }}"
|
||||||
|
matrix_backup_borg_postgresql_databases: "{{ devture_postgres_additional_databases | map(attribute='name') if devture_postgres_enabled else [] }}"
|
||||||
|
|
||||||
matrix_backup_borg_location_source_directories:
|
matrix_backup_borg_location_source_directories:
|
||||||
- "{{ matrix_base_data_path }}"
|
- "{{ matrix_base_data_path }}"
|
||||||
|
|
||||||
matrix_backup_borg_location_exclude_patterns: |
|
matrix_backup_borg_location_exclude_patterns: |
|
||||||
{{
|
{{
|
||||||
([matrix_synapse_media_store_path + '/local_thumbnails', matrix_synapse_media_store_path + '/remote_thumbnail', matrix_synapse_media_store_path + '/url_cache', matrix_synapse_media_store_path + '/url_cache_thumbnails'] if matrix_homeserver_implementation == 'synapse' else [])
|
([matrix_synapse_media_store_path + '/local_thumbnails', matrix_synapse_media_store_path + '/remote_thumbnail', matrix_synapse_media_store_path + '/url_cache', matrix_synapse_media_store_path + '/url_cache_thumbnails'] if matrix_homeserver_implementation == 'synapse' else [])
|
||||||
+
|
+
|
||||||
([matrix_postgres_data_path] if matrix_postgres_enabled else [])
|
([devture_postgres_data_path] if devture_postgres_enabled else [])
|
||||||
}}
|
}}
|
||||||
|
|
||||||
matrix_backup_borg_systemd_required_services_list: |
|
matrix_backup_borg_systemd_required_services_list: |
|
||||||
{{
|
{{
|
||||||
['docker.service']
|
['docker.service']
|
||||||
+
|
+
|
||||||
(['matrix-postgres.service'] if matrix_postgres_enabled else [])
|
([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])
|
||||||
}}
|
}}
|
||||||
|
|
||||||
######################################################################
|
######################################################################
|
||||||
|
@ -1801,13 +1806,13 @@ matrix_dimension_systemd_required_services_list: |
|
||||||
+
|
+
|
||||||
['matrix-' + matrix_homeserver_implementation + '.service']
|
['matrix-' + matrix_homeserver_implementation + '.service']
|
||||||
+
|
+
|
||||||
(['matrix-postgres.service'] if matrix_postgres_enabled else [])
|
([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])
|
||||||
+
|
+
|
||||||
(['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])
|
(['matrix-nginx-proxy.service'] if matrix_nginx_proxy_enabled else [])
|
||||||
}}
|
}}
|
||||||
|
|
||||||
# Postgres is the default, except if not using `matrix_postgres` (internal postgres)
|
# Postgres is the default, except if not using internal Postgres server
|
||||||
matrix_dimension_database_engine: "{{ 'postgres' if matrix_postgres_enabled else 'sqlite' }}"
|
matrix_dimension_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"
|
||||||
matrix_dimension_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'dimension.db', rounds=655555) | to_uuid }}"
|
matrix_dimension_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'dimension.db', rounds=655555) | to_uuid }}"
|
||||||
|
|
||||||
######################################################################
|
######################################################################
|
||||||
|
@ -1826,15 +1831,17 @@ matrix_etherpad_enabled: false
|
||||||
|
|
||||||
matrix_etherpad_container_http_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else '127.0.0.1:9001' }}"
|
matrix_etherpad_container_http_host_bind_port: "{{ '' if matrix_nginx_proxy_enabled else '127.0.0.1:9001' }}"
|
||||||
|
|
||||||
matrix_etherpad_base_url: "{{ 'https://'+ matrix_server_fqn_dimension + matrix_etherpad_public_endpoint if matrix_etherpad_mode == 'dimension' else 'https://' + matrix_server_fqn_etherpad + '/' }}"
|
matrix_etherpad_base_url: "{{ 'https://' + matrix_server_fqn_dimension + matrix_etherpad_public_endpoint if matrix_etherpad_mode == 'dimension' else 'https://' + matrix_server_fqn_etherpad + '/' }}"
|
||||||
|
|
||||||
matrix_etherpad_systemd_required_services_list: |
|
matrix_etherpad_systemd_required_services_list: |
|
||||||
{{
|
{{
|
||||||
['docker.service']
|
['docker.service']
|
||||||
+
|
+
|
||||||
(['matrix-postgres.service'] if matrix_postgres_enabled else [])
|
([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])
|
||||||
}}
|
}}
|
||||||
|
|
||||||
|
matrix_etherpad_database_hostname: "{{ devture_postgres_identifier if devture_postgres_enabled else '' }}"
|
||||||
|
|
||||||
matrix_etherpad_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'etherpad.db', rounds=655555) | to_uuid }}"
|
matrix_etherpad_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'etherpad.db', rounds=655555) | to_uuid }}"
|
||||||
|
|
||||||
######################################################################
|
######################################################################
|
||||||
|
@ -1998,20 +2005,20 @@ matrix_ma1sd_self_check_validate_certificates: "{{ false if matrix_ssl_retrieval
|
||||||
|
|
||||||
matrix_ma1sd_systemd_required_services_list: |
|
matrix_ma1sd_systemd_required_services_list: |
|
||||||
{{
|
{{
|
||||||
(['matrix-postgres.service'] if matrix_postgres_enabled else [])
|
([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])
|
||||||
}}
|
}}
|
||||||
|
|
||||||
matrix_ma1sd_systemd_wanted_services_list: |
|
matrix_ma1sd_systemd_wanted_services_list: |
|
||||||
{{
|
{{
|
||||||
(['matrix-corporal.service'] if matrix_corporal_enabled else ['matrix-' + matrix_homeserver_implementation + '.service'])
|
(['matrix-corporal.service'] if matrix_corporal_enabled else ['matrix-' + matrix_homeserver_implementation + '.service'])
|
||||||
+
|
+
|
||||||
(['matrix-postgres.service'] if matrix_postgres_enabled else [])
|
([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])
|
||||||
+
|
+
|
||||||
(['matrix-mailer.service'] if matrix_mailer_enabled else [])
|
(['matrix-mailer.service'] if matrix_mailer_enabled else [])
|
||||||
}}
|
}}
|
||||||
|
|
||||||
# Postgres is the default, except if not using `matrix_postgres` (internal postgres)
|
# Postgres is the default, except if not using internal Postgres server
|
||||||
matrix_ma1sd_database_engine: "{{ 'postgres' if matrix_postgres_enabled else 'sqlite' }}"
|
matrix_ma1sd_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"
|
||||||
matrix_ma1sd_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'ma1sd.db', rounds=655555) | to_uuid }}"
|
matrix_ma1sd_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'ma1sd.db', rounds=655555) | to_uuid }}"
|
||||||
|
|
||||||
######################################################################
|
######################################################################
|
||||||
|
@ -2204,29 +2211,49 @@ matrix_ssl_pre_obtaining_required_service_name: "{{ 'matrix-dynamic-dns' if matr
|
||||||
#
|
#
|
||||||
######################################################################
|
######################################################################
|
||||||
|
|
||||||
######################################################################
|
########################################################################
|
||||||
#
|
# #
|
||||||
# matrix-postgres
|
# com.devture.ansible.role.postgres #
|
||||||
#
|
# #
|
||||||
######################################################################
|
########################################################################
|
||||||
|
|
||||||
matrix_postgres_enabled: true
|
# To completely disable installing Postgres, use `devture_postgres_enabled: false`.
|
||||||
|
|
||||||
matrix_postgres_architecture: "{{ matrix_architecture }}"
|
devture_postgres_identifier: matrix-postgres
|
||||||
|
|
||||||
# We unset this if internal Postgres disabled, which will cascade to some other variables
|
devture_postgres_architecture: "{{ matrix_architecture }}"
|
||||||
# and tell users they need to set it (either here or in those variables).
|
|
||||||
matrix_postgres_connection_hostname: "{{ 'matrix-postgres' if matrix_postgres_enabled else '' }}"
|
|
||||||
|
|
||||||
matrix_postgres_pgloader_container_image_self_build: "{{ matrix_architecture != 'amd64' }}"
|
devture_postgres_base_path: "{{ matrix_base_data_path }}/postgres"
|
||||||
|
|
||||||
matrix_postgres_additional_databases: |
|
devture_postgres_container_network: "{{ matrix_docker_network }}"
|
||||||
|
|
||||||
|
devture_postgres_uid: "{{ matrix_user_uid }}"
|
||||||
|
devture_postgres_gid: "{{ matrix_user_gid }}"
|
||||||
|
|
||||||
|
devture_postgres_connection_username: matrix
|
||||||
|
devture_postgres_db_name: matrix
|
||||||
|
|
||||||
|
devture_postgres_vacuum_default_databases_list: |
|
||||||
|
{{
|
||||||
|
(
|
||||||
|
([devture_postgres_db_name])
|
||||||
|
+
|
||||||
|
(devture_postgres_additional_databases | map(attribute='name'))
|
||||||
|
) | unique
|
||||||
|
}}
|
||||||
|
|
||||||
|
devture_postgres_systemd_services_to_stop_for_maintenance_list: |
|
||||||
|
{{
|
||||||
|
['matrix-' + matrix_homeserver_implementation + '.service']
|
||||||
|
}}
|
||||||
|
|
||||||
|
devture_postgres_additional_databases: |
|
||||||
{{
|
{{
|
||||||
([{
|
([{
|
||||||
'name': matrix_synapse_database_database,
|
'name': matrix_synapse_database_database,
|
||||||
'username': matrix_synapse_database_user,
|
'username': matrix_synapse_database_user,
|
||||||
'password': matrix_synapse_database_password,
|
'password': matrix_synapse_database_password,
|
||||||
}] if (matrix_synapse_enabled and matrix_synapse_database_database != matrix_postgres_db_name and matrix_synapse_database_host == 'matrix-postgres') else [])
|
}] if (matrix_synapse_enabled and matrix_synapse_database_host == devture_postgres_identifier) else [])
|
||||||
+
|
+
|
||||||
([{
|
([{
|
||||||
'name': matrix_dendrite_federationapi_database,
|
'name': matrix_dendrite_federationapi_database,
|
||||||
|
@ -2260,206 +2287,201 @@ matrix_postgres_additional_databases: |
|
||||||
'name': matrix_dendrite_mscs_database,
|
'name': matrix_dendrite_mscs_database,
|
||||||
'username': matrix_dendrite_database_user,
|
'username': matrix_dendrite_database_user,
|
||||||
'password': matrix_dendrite_database_password,
|
'password': matrix_dendrite_database_password,
|
||||||
}] if (matrix_dendrite_enabled and matrix_dendrite_database_hostname == 'matrix-postgres') else [])
|
}] if (matrix_dendrite_enabled and matrix_dendrite_database_hostname == devture_postgres_identifier) else [])
|
||||||
+
|
+
|
||||||
([{
|
([{
|
||||||
'name': matrix_ma1sd_database_name,
|
'name': matrix_ma1sd_database_name,
|
||||||
'username': matrix_ma1sd_database_username,
|
'username': matrix_ma1sd_database_username,
|
||||||
'password': matrix_ma1sd_database_password,
|
'password': matrix_ma1sd_database_password,
|
||||||
}] if (matrix_ma1sd_enabled and matrix_ma1sd_database_engine == 'postgres' and matrix_ma1sd_database_hostname == 'matrix-postgres') else [])
|
}] if (matrix_ma1sd_enabled and matrix_ma1sd_database_engine == 'postgres' and matrix_ma1sd_database_hostname == devture_postgres_identifier) else [])
|
||||||
+
|
+
|
||||||
([{
|
([{
|
||||||
'name': matrix_bot_matrix_reminder_bot_database_name,
|
'name': matrix_bot_matrix_reminder_bot_database_name,
|
||||||
'username': matrix_bot_matrix_reminder_bot_database_username,
|
'username': matrix_bot_matrix_reminder_bot_database_username,
|
||||||
'password': matrix_bot_matrix_reminder_bot_database_password,
|
'password': matrix_bot_matrix_reminder_bot_database_password,
|
||||||
}] if (matrix_bot_matrix_reminder_bot_enabled and matrix_bot_matrix_reminder_bot_database_engine == 'postgres' and matrix_bot_matrix_reminder_bot_database_hostname == 'matrix-postgres') else [])
|
}] if (matrix_bot_matrix_reminder_bot_enabled and matrix_bot_matrix_reminder_bot_database_engine == 'postgres' and matrix_bot_matrix_reminder_bot_database_hostname == devture_postgres_identifier) else [])
|
||||||
+
|
+
|
||||||
([{
|
([{
|
||||||
'name': matrix_bot_honoroit_database_name,
|
'name': matrix_bot_honoroit_database_name,
|
||||||
'username': matrix_bot_honoroit_database_username,
|
'username': matrix_bot_honoroit_database_username,
|
||||||
'password': matrix_bot_honoroit_database_password,
|
'password': matrix_bot_honoroit_database_password,
|
||||||
}] if (matrix_bot_honoroit_enabled and matrix_bot_honoroit_database_engine == 'postgres' and matrix_bot_honoroit_database_hostname == 'matrix-postgres') else [])
|
}] if (matrix_bot_honoroit_enabled and matrix_bot_honoroit_database_engine == 'postgres' and matrix_bot_honoroit_database_hostname == devture_postgres_identifier) else [])
|
||||||
+
|
+
|
||||||
([{
|
([{
|
||||||
'name': matrix_bot_postmoogle_database_name,
|
'name': matrix_bot_postmoogle_database_name,
|
||||||
'username': matrix_bot_postmoogle_database_username,
|
'username': matrix_bot_postmoogle_database_username,
|
||||||
'password': matrix_bot_postmoogle_database_password,
|
'password': matrix_bot_postmoogle_database_password,
|
||||||
}] if (matrix_bot_postmoogle_enabled and matrix_bot_postmoogle_database_engine == 'postgres' and matrix_bot_postmoogle_database_hostname == 'matrix-postgres') else [])
|
}] if (matrix_bot_postmoogle_enabled and matrix_bot_postmoogle_database_engine == 'postgres' and matrix_bot_postmoogle_database_hostname == devture_postgres_identifier) else [])
|
||||||
+
|
+
|
||||||
([{
|
([{
|
||||||
'name': matrix_bot_maubot_database_name,
|
'name': matrix_bot_maubot_database_name,
|
||||||
'username': matrix_bot_maubot_database_username,
|
'username': matrix_bot_maubot_database_username,
|
||||||
'password': matrix_bot_maubot_database_password,
|
'password': matrix_bot_maubot_database_password,
|
||||||
}] if (matrix_bot_maubot_enabled and matrix_bot_maubot_database_engine == 'postgres' and matrix_bot_maubot_database_hostname == 'matrix-postgres') else [])
|
}] if (matrix_bot_maubot_enabled and matrix_bot_maubot_database_engine == 'postgres' and matrix_bot_maubot_database_hostname == devture_postgres_identifier) else [])
|
||||||
+
|
+
|
||||||
([{
|
([{
|
||||||
'name': matrix_bot_buscarron_database_name,
|
'name': matrix_bot_buscarron_database_name,
|
||||||
'username': matrix_bot_buscarron_database_username,
|
'username': matrix_bot_buscarron_database_username,
|
||||||
'password': matrix_bot_buscarron_database_password,
|
'password': matrix_bot_buscarron_database_password,
|
||||||
}] if (matrix_bot_buscarron_enabled and matrix_bot_buscarron_database_engine == 'postgres' and matrix_bot_buscarron_database_hostname == 'matrix-postgres') else [])
|
}] if (matrix_bot_buscarron_enabled and matrix_bot_buscarron_database_engine == 'postgres' and matrix_bot_buscarron_database_hostname == devture_postgres_identifier) else [])
|
||||||
+
|
+
|
||||||
([{
|
([{
|
||||||
'name': matrix_registration_database_name,
|
'name': matrix_registration_database_name,
|
||||||
'username': matrix_registration_database_username,
|
'username': matrix_registration_database_username,
|
||||||
'password': matrix_registration_database_password,
|
'password': matrix_registration_database_password,
|
||||||
}] if (matrix_registration_enabled and matrix_registration_database_engine == 'postgres' and matrix_registration_database_hostname == 'matrix-postgres') else [])
|
}] if (matrix_registration_enabled and matrix_registration_database_engine == 'postgres' and matrix_registration_database_hostname == devture_postgres_identifier) else [])
|
||||||
+
|
+
|
||||||
([{
|
([{
|
||||||
'name': matrix_appservice_discord_database_name,
|
'name': matrix_appservice_discord_database_name,
|
||||||
'username': matrix_appservice_discord_database_username,
|
'username': matrix_appservice_discord_database_username,
|
||||||
'password': matrix_appservice_discord_database_password,
|
'password': matrix_appservice_discord_database_password,
|
||||||
}] if (matrix_appservice_discord_enabled and matrix_appservice_discord_database_engine == 'postgres' and matrix_appservice_discord_database_hostname == 'matrix-postgres') else [])
|
}] if (matrix_appservice_discord_enabled and matrix_appservice_discord_database_engine == 'postgres' and matrix_appservice_discord_database_hostname == devture_postgres_identifier) else [])
|
||||||
+
|
+
|
||||||
([{
|
([{
|
||||||
'name': matrix_appservice_slack_database_name,
|
'name': matrix_appservice_slack_database_name,
|
||||||
'username': matrix_appservice_slack_database_username,
|
'username': matrix_appservice_slack_database_username,
|
||||||
'password': matrix_appservice_slack_database_password,
|
'password': matrix_appservice_slack_database_password,
|
||||||
}] if (matrix_appservice_slack_enabled and matrix_appservice_slack_database_engine == 'postgres' and matrix_appservice_slack_database_hostname == 'matrix-postgres') else [])
|
}] if (matrix_appservice_slack_enabled and matrix_appservice_slack_database_engine == 'postgres' and matrix_appservice_slack_database_hostname == devture_postgres_identifier) else [])
|
||||||
+
|
+
|
||||||
([{
|
([{
|
||||||
'name': matrix_appservice_irc_database_name,
|
'name': matrix_appservice_irc_database_name,
|
||||||
'username': matrix_appservice_irc_database_username,
|
'username': matrix_appservice_irc_database_username,
|
||||||
'password': matrix_appservice_irc_database_password,
|
'password': matrix_appservice_irc_database_password,
|
||||||
}] if (matrix_appservice_irc_enabled and matrix_appservice_irc_database_engine == 'postgres' and matrix_appservice_irc_database_hostname == 'matrix-postgres') else [])
|
}] if (matrix_appservice_irc_enabled and matrix_appservice_irc_database_engine == 'postgres' and matrix_appservice_irc_database_hostname == devture_postgres_identifier) else [])
|
||||||
+
|
+
|
||||||
([{
|
([{
|
||||||
'name': matrix_appservice_kakaotalk_database_name,
|
'name': matrix_appservice_kakaotalk_database_name,
|
||||||
'username': matrix_appservice_kakaotalk_database_username,
|
'username': matrix_appservice_kakaotalk_database_username,
|
||||||
'password': matrix_appservice_kakaotalk_database_password,
|
'password': matrix_appservice_kakaotalk_database_password,
|
||||||
}] if (matrix_appservice_kakaotalk_enabled and matrix_appservice_kakaotalk_database_engine == 'postgres' and matrix_appservice_kakaotalk_database_hostname == 'matrix-postgres') else [])
|
}] if (matrix_appservice_kakaotalk_enabled and matrix_appservice_kakaotalk_database_engine == 'postgres' and matrix_appservice_kakaotalk_database_hostname == devture_postgres_identifier) else [])
|
||||||
+
|
+
|
||||||
([{
|
([{
|
||||||
'name': matrix_beeper_linkedin_database_name,
|
'name': matrix_beeper_linkedin_database_name,
|
||||||
'username': matrix_beeper_linkedin_database_username,
|
'username': matrix_beeper_linkedin_database_username,
|
||||||
'password': matrix_beeper_linkedin_database_password,
|
'password': matrix_beeper_linkedin_database_password,
|
||||||
}] if (matrix_beeper_linkedin_enabled and matrix_beeper_linkedin_database_engine == 'postgres' and matrix_beeper_linkedin_database_hostname == 'matrix-postgres') else [])
|
}] if (matrix_beeper_linkedin_enabled and matrix_beeper_linkedin_database_engine == 'postgres' and matrix_beeper_linkedin_database_hostname == devture_postgres_identifier) else [])
|
||||||
+
|
+
|
||||||
([{
|
([{
|
||||||
'name': matrix_go_skype_bridge_database_name,
|
'name': matrix_go_skype_bridge_database_name,
|
||||||
'username': matrix_go_skype_bridge_database_username,
|
'username': matrix_go_skype_bridge_database_username,
|
||||||
'password': matrix_go_skype_bridge_database_password,
|
'password': matrix_go_skype_bridge_database_password,
|
||||||
}] if (matrix_go_skype_bridge_enabled and matrix_go_skype_bridge_database_engine == 'postgres' and matrix_go_skype_bridge_database_hostname == 'matrix-postgres') else [])
|
}] if (matrix_go_skype_bridge_enabled and matrix_go_skype_bridge_database_engine == 'postgres' and matrix_go_skype_bridge_database_hostname == devture_postgres_identifier) else [])
|
||||||
+
|
+
|
||||||
([{
|
([{
|
||||||
'name': matrix_mautrix_facebook_database_name,
|
'name': matrix_mautrix_facebook_database_name,
|
||||||
'username': matrix_mautrix_facebook_database_username,
|
'username': matrix_mautrix_facebook_database_username,
|
||||||
'password': matrix_mautrix_facebook_database_password,
|
'password': matrix_mautrix_facebook_database_password,
|
||||||
}] if (matrix_mautrix_facebook_enabled and matrix_mautrix_facebook_database_engine == 'postgres' and matrix_mautrix_facebook_database_hostname == 'matrix-postgres') else [])
|
}] if (matrix_mautrix_facebook_enabled and matrix_mautrix_facebook_database_engine == 'postgres' and matrix_mautrix_facebook_database_hostname == devture_postgres_identifier) else [])
|
||||||
+
|
+
|
||||||
([{
|
([{
|
||||||
'name': matrix_mautrix_hangouts_database_name,
|
'name': matrix_mautrix_hangouts_database_name,
|
||||||
'username': matrix_mautrix_hangouts_database_username,
|
'username': matrix_mautrix_hangouts_database_username,
|
||||||
'password': matrix_mautrix_hangouts_database_password,
|
'password': matrix_mautrix_hangouts_database_password,
|
||||||
}] if (matrix_mautrix_hangouts_enabled and matrix_mautrix_hangouts_database_engine == 'postgres' and matrix_mautrix_hangouts_database_hostname == 'matrix-postgres') else [])
|
}] if (matrix_mautrix_hangouts_enabled and matrix_mautrix_hangouts_database_engine == 'postgres' and matrix_mautrix_hangouts_database_hostname == devture_postgres_identifier) else [])
|
||||||
+
|
+
|
||||||
([{
|
([{
|
||||||
'name': matrix_mautrix_googlechat_database_name,
|
'name': matrix_mautrix_googlechat_database_name,
|
||||||
'username': matrix_mautrix_googlechat_database_username,
|
'username': matrix_mautrix_googlechat_database_username,
|
||||||
'password': matrix_mautrix_googlechat_database_password,
|
'password': matrix_mautrix_googlechat_database_password,
|
||||||
}] if (matrix_mautrix_googlechat_enabled and matrix_mautrix_googlechat_database_engine == 'postgres' and matrix_mautrix_googlechat_database_hostname == 'matrix-postgres') else [])
|
}] if (matrix_mautrix_googlechat_enabled and matrix_mautrix_googlechat_database_engine == 'postgres' and matrix_mautrix_googlechat_database_hostname == devture_postgres_identifier) else [])
|
||||||
+
|
+
|
||||||
([{
|
([{
|
||||||
'name': matrix_mautrix_instagram_database_name,
|
'name': matrix_mautrix_instagram_database_name,
|
||||||
'username': matrix_mautrix_instagram_database_username,
|
'username': matrix_mautrix_instagram_database_username,
|
||||||
'password': matrix_mautrix_instagram_database_password,
|
'password': matrix_mautrix_instagram_database_password,
|
||||||
}] if (matrix_mautrix_instagram_enabled and matrix_mautrix_instagram_database_engine == 'postgres' and matrix_mautrix_instagram_database_hostname == 'matrix-postgres') else [])
|
}] if (matrix_mautrix_instagram_enabled and matrix_mautrix_instagram_database_engine == 'postgres' and matrix_mautrix_instagram_database_hostname == devture_postgres_identifier) else [])
|
||||||
+
|
+
|
||||||
([{
|
([{
|
||||||
'name': matrix_mautrix_signal_database_name,
|
'name': matrix_mautrix_signal_database_name,
|
||||||
'username': matrix_mautrix_signal_database_username,
|
'username': matrix_mautrix_signal_database_username,
|
||||||
'password': matrix_mautrix_signal_database_password,
|
'password': matrix_mautrix_signal_database_password,
|
||||||
}] if (matrix_mautrix_signal_enabled and matrix_mautrix_signal_database_engine == 'postgres' and matrix_mautrix_signal_database_hostname == 'matrix-postgres') else [])
|
}] if (matrix_mautrix_signal_enabled and matrix_mautrix_signal_database_engine == 'postgres' and matrix_mautrix_signal_database_hostname == devture_postgres_identifier) else [])
|
||||||
+
|
+
|
||||||
([{
|
([{
|
||||||
'name': matrix_mautrix_telegram_database_name,
|
'name': matrix_mautrix_telegram_database_name,
|
||||||
'username': matrix_mautrix_telegram_database_username,
|
'username': matrix_mautrix_telegram_database_username,
|
||||||
'password': matrix_mautrix_telegram_database_password,
|
'password': matrix_mautrix_telegram_database_password,
|
||||||
}] if (matrix_mautrix_telegram_enabled and matrix_mautrix_telegram_database_engine == 'postgres' and matrix_mautrix_telegram_database_hostname == 'matrix-postgres') else [])
|
}] if (matrix_mautrix_telegram_enabled and matrix_mautrix_telegram_database_engine == 'postgres' and matrix_mautrix_telegram_database_hostname == devture_postgres_identifier) else [])
|
||||||
+
|
+
|
||||||
([{
|
([{
|
||||||
'name': matrix_mautrix_twitter_database_name,
|
'name': matrix_mautrix_twitter_database_name,
|
||||||
'username': matrix_mautrix_twitter_database_username,
|
'username': matrix_mautrix_twitter_database_username,
|
||||||
'password': matrix_mautrix_twitter_database_password,
|
'password': matrix_mautrix_twitter_database_password,
|
||||||
}] if (matrix_mautrix_twitter_enabled and matrix_mautrix_twitter_database_engine == 'postgres' and matrix_mautrix_twitter_database_hostname == 'matrix-postgres') else [])
|
}] if (matrix_mautrix_twitter_enabled and matrix_mautrix_twitter_database_engine == 'postgres' and matrix_mautrix_twitter_database_hostname == devture_postgres_identifier) else [])
|
||||||
+
|
+
|
||||||
([{
|
([{
|
||||||
'name': matrix_mautrix_whatsapp_database_name,
|
'name': matrix_mautrix_whatsapp_database_name,
|
||||||
'username': matrix_mautrix_whatsapp_database_username,
|
'username': matrix_mautrix_whatsapp_database_username,
|
||||||
'password': matrix_mautrix_whatsapp_database_password,
|
'password': matrix_mautrix_whatsapp_database_password,
|
||||||
}] if (matrix_mautrix_whatsapp_enabled and matrix_mautrix_whatsapp_database_engine == 'postgres' and matrix_mautrix_whatsapp_database_hostname == 'matrix-postgres') else [])
|
}] if (matrix_mautrix_whatsapp_enabled and matrix_mautrix_whatsapp_database_engine == 'postgres' and matrix_mautrix_whatsapp_database_hostname == devture_postgres_identifier) else [])
|
||||||
+
|
+
|
||||||
([{
|
([{
|
||||||
'name': matrix_mautrix_discord_database_name,
|
'name': matrix_mautrix_discord_database_name,
|
||||||
'username': matrix_mautrix_discord_database_username,
|
'username': matrix_mautrix_discord_database_username,
|
||||||
'password': matrix_mautrix_discord_database_password,
|
'password': matrix_mautrix_discord_database_password,
|
||||||
}] if (matrix_mautrix_discord_enabled and matrix_mautrix_discord_database_engine == 'postgres' and matrix_mautrix_discord_database_hostname == 'matrix-postgres') else [])
|
}] if (matrix_mautrix_discord_enabled and matrix_mautrix_discord_database_engine == 'postgres' and matrix_mautrix_discord_database_hostname == devture_postgres_identifier) else [])
|
||||||
+
|
+
|
||||||
([{
|
([{
|
||||||
'name': matrix_mx_puppet_slack_database_name,
|
'name': matrix_mx_puppet_slack_database_name,
|
||||||
'username': matrix_mx_puppet_slack_database_username,
|
'username': matrix_mx_puppet_slack_database_username,
|
||||||
'password': matrix_mx_puppet_slack_database_password,
|
'password': matrix_mx_puppet_slack_database_password,
|
||||||
}] if (matrix_mx_puppet_slack_enabled and matrix_mx_puppet_slack_database_engine == 'postgres' and matrix_mx_puppet_slack_database_hostname == 'matrix-postgres') else [])
|
}] if (matrix_mx_puppet_slack_enabled and matrix_mx_puppet_slack_database_engine == 'postgres' and matrix_mx_puppet_slack_database_hostname == devture_postgres_identifier) else [])
|
||||||
+
|
+
|
||||||
([{
|
([{
|
||||||
'name': matrix_mx_puppet_twitter_database_name,
|
'name': matrix_mx_puppet_twitter_database_name,
|
||||||
'username': matrix_mx_puppet_twitter_database_username,
|
'username': matrix_mx_puppet_twitter_database_username,
|
||||||
'password': matrix_mx_puppet_twitter_database_password,
|
'password': matrix_mx_puppet_twitter_database_password,
|
||||||
}] if (matrix_mx_puppet_twitter_enabled and matrix_mx_puppet_twitter_database_engine == 'postgres' and matrix_mx_puppet_twitter_database_hostname == 'matrix-postgres') else [])
|
}] if (matrix_mx_puppet_twitter_enabled and matrix_mx_puppet_twitter_database_engine == 'postgres' and matrix_mx_puppet_twitter_database_hostname == devture_postgres_identifier) else [])
|
||||||
+
|
+
|
||||||
([{
|
([{
|
||||||
'name': matrix_mx_puppet_instagram_database_name,
|
'name': matrix_mx_puppet_instagram_database_name,
|
||||||
'username': matrix_mx_puppet_instagram_database_username,
|
'username': matrix_mx_puppet_instagram_database_username,
|
||||||
'password': matrix_mx_puppet_instagram_database_password,
|
'password': matrix_mx_puppet_instagram_database_password,
|
||||||
}] if (matrix_mx_puppet_instagram_enabled and matrix_mx_puppet_instagram_database_engine == 'postgres' and matrix_mx_puppet_instagram_database_hostname == 'matrix-postgres') else [])
|
}] if (matrix_mx_puppet_instagram_enabled and matrix_mx_puppet_instagram_database_engine == 'postgres' and matrix_mx_puppet_instagram_database_hostname == devture_postgres_identifier) else [])
|
||||||
+
|
+
|
||||||
([{
|
([{
|
||||||
'name': matrix_mx_puppet_discord_database_name,
|
'name': matrix_mx_puppet_discord_database_name,
|
||||||
'username': matrix_mx_puppet_discord_database_username,
|
'username': matrix_mx_puppet_discord_database_username,
|
||||||
'password': matrix_mx_puppet_discord_database_password,
|
'password': matrix_mx_puppet_discord_database_password,
|
||||||
}] if (matrix_mx_puppet_discord_enabled and matrix_mx_puppet_discord_database_engine == 'postgres' and matrix_mx_puppet_discord_database_hostname == 'matrix-postgres') else [])
|
}] if (matrix_mx_puppet_discord_enabled and matrix_mx_puppet_discord_database_engine == 'postgres' and matrix_mx_puppet_discord_database_hostname == devture_postgres_identifier) else [])
|
||||||
+
|
+
|
||||||
([{
|
([{
|
||||||
'name': matrix_mx_puppet_steam_database_name,
|
'name': matrix_mx_puppet_steam_database_name,
|
||||||
'username': matrix_mx_puppet_steam_database_username,
|
'username': matrix_mx_puppet_steam_database_username,
|
||||||
'password': matrix_mx_puppet_steam_database_password,
|
'password': matrix_mx_puppet_steam_database_password,
|
||||||
}] if (matrix_mx_puppet_steam_enabled and matrix_mx_puppet_steam_database_engine == 'postgres' and matrix_mx_puppet_steam_database_hostname == 'matrix-postgres') else [])
|
}] if (matrix_mx_puppet_steam_enabled and matrix_mx_puppet_steam_database_engine == 'postgres' and matrix_mx_puppet_steam_database_hostname == devture_postgres_identifier) else [])
|
||||||
+
|
+
|
||||||
([{
|
([{
|
||||||
'name': matrix_mx_puppet_groupme_database_name,
|
'name': matrix_mx_puppet_groupme_database_name,
|
||||||
'username': matrix_mx_puppet_groupme_database_username,
|
'username': matrix_mx_puppet_groupme_database_username,
|
||||||
'password': matrix_mx_puppet_groupme_database_password,
|
'password': matrix_mx_puppet_groupme_database_password,
|
||||||
}] if (matrix_mx_puppet_groupme_enabled and matrix_mx_puppet_groupme_database_engine == 'postgres' and matrix_mx_puppet_groupme_database_hostname == 'matrix-postgres') else [])
|
}] if (matrix_mx_puppet_groupme_enabled and matrix_mx_puppet_groupme_database_engine == 'postgres' and matrix_mx_puppet_groupme_database_hostname == devture_postgres_identifier) else [])
|
||||||
+
|
+
|
||||||
([{
|
([{
|
||||||
'name': matrix_dimension_database_name,
|
'name': matrix_dimension_database_name,
|
||||||
'username': matrix_dimension_database_username,
|
'username': matrix_dimension_database_username,
|
||||||
'password': matrix_dimension_database_password,
|
'password': matrix_dimension_database_password,
|
||||||
}] if (matrix_dimension_enabled and matrix_dimension_database_engine == 'postgres' and matrix_dimension_database_hostname == 'matrix-postgres') else [])
|
}] if (matrix_dimension_enabled and matrix_dimension_database_engine == 'postgres' and matrix_dimension_database_hostname == devture_postgres_identifier) else [])
|
||||||
+
|
+
|
||||||
([{
|
([{
|
||||||
'name': matrix_etherpad_database_name,
|
'name': matrix_etherpad_database_name,
|
||||||
'username': matrix_etherpad_database_username,
|
'username': matrix_etherpad_database_username,
|
||||||
'password': matrix_etherpad_database_password,
|
'password': matrix_etherpad_database_password,
|
||||||
}] if (matrix_etherpad_enabled and matrix_etherpad_database_engine == 'postgres' and matrix_etherpad_database_hostname == 'matrix-postgres') else [])
|
}] if (matrix_etherpad_enabled and matrix_etherpad_database_engine == 'postgres' and matrix_etherpad_database_hostname == devture_postgres_identifier) else [])
|
||||||
+
|
+
|
||||||
([{
|
([{
|
||||||
'name': matrix_prometheus_postgres_exporter_database_name,
|
'name': matrix_prometheus_postgres_exporter_database_name,
|
||||||
'username': matrix_prometheus_postgres_exporter_database_username,
|
'username': matrix_prometheus_postgres_exporter_database_username,
|
||||||
'password': matrix_prometheus_postgres_exporter_database_password,
|
'password': matrix_prometheus_postgres_exporter_database_password,
|
||||||
}] if (matrix_prometheus_postgres_exporter_enabled and matrix_prometheus_postgres_exporter_database_hostname == 'matrix-postgres') else [])
|
}] if (matrix_prometheus_postgres_exporter_enabled and matrix_prometheus_postgres_exporter_database_hostname == devture_postgres_identifier) else [])
|
||||||
|
|
||||||
}}
|
}}
|
||||||
|
|
||||||
matrix_postgres_systemd_services_to_stop_for_maintenance_list: |
|
########################################################################
|
||||||
{{
|
# #
|
||||||
['matrix-' + matrix_homeserver_implementation + '.service']
|
# /com.devture.ansible.role.postgres #
|
||||||
}}
|
# #
|
||||||
|
########################################################################
|
||||||
######################################################################
|
|
||||||
#
|
|
||||||
# /matrix-postgres
|
|
||||||
#
|
|
||||||
######################################################################
|
|
||||||
|
|
||||||
######################################################################
|
######################################################################
|
||||||
#
|
#
|
||||||
|
@ -2681,7 +2703,7 @@ matrix_synapse_systemd_required_services_list: |
|
||||||
{{
|
{{
|
||||||
(['docker.service'])
|
(['docker.service'])
|
||||||
+
|
+
|
||||||
(['matrix-postgres.service'] if matrix_postgres_enabled else [])
|
([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])
|
||||||
+
|
+
|
||||||
(['matrix-goofys.service'] if matrix_s3_media_store_enabled else [])
|
(['matrix-goofys.service'] if matrix_s3_media_store_enabled else [])
|
||||||
}}
|
}}
|
||||||
|
@ -2819,7 +2841,7 @@ matrix_prometheus_postgres_exporter_systemd_required_services_list: |
|
||||||
{{
|
{{
|
||||||
['docker.service']
|
['docker.service']
|
||||||
+
|
+
|
||||||
(['matrix-postgres.service'] if matrix_postgres_enabled else [])
|
([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])
|
||||||
}}
|
}}
|
||||||
|
|
||||||
######################################################################
|
######################################################################
|
||||||
|
@ -2906,11 +2928,11 @@ matrix_registration_systemd_required_services_list: |
|
||||||
{{
|
{{
|
||||||
['docker.service']
|
['docker.service']
|
||||||
+
|
+
|
||||||
(['matrix-postgres.service'] if matrix_postgres_enabled else [])
|
([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])
|
||||||
}}
|
}}
|
||||||
|
|
||||||
# Postgres is the default, except if not using `matrix_postgres` (internal postgres)
|
# Postgres is the default, except if not using internal Postgres server
|
||||||
matrix_registration_database_engine: "{{ 'postgres' if matrix_postgres_enabled else 'sqlite' }}"
|
matrix_registration_database_engine: "{{ 'postgres' if devture_postgres_enabled else 'sqlite' }}"
|
||||||
matrix_registration_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mx.registr.db', rounds=655555) | to_uuid }}"
|
matrix_registration_database_password: "{{ '%s' | format(matrix_homeserver_generic_secret_key) | password_hash('sha512', 'mx.registr.db', rounds=655555) | to_uuid }}"
|
||||||
|
|
||||||
######################################################################
|
######################################################################
|
||||||
|
@ -2925,14 +2947,14 @@ matrix_registration_database_password: "{{ '%s' | format(matrix_homeserver_gener
|
||||||
#
|
#
|
||||||
######################################################################
|
######################################################################
|
||||||
|
|
||||||
matrix_postgres_backup_connection_hostname: "{{ matrix_postgres_connection_hostname }}"
|
matrix_postgres_backup_connection_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"
|
||||||
matrix_postgres_backup_connection_port: "{{ matrix_postgres_connection_port }}"
|
matrix_postgres_backup_connection_port: "{{ devture_postgres_connection_port if devture_postgres_enabled else 5432 }}"
|
||||||
matrix_postgres_backup_connection_username: "{{ matrix_postgres_connection_username }}"
|
matrix_postgres_backup_connection_username: "{{ devture_postgres_connection_username if devture_postgres_enabled else '' }}"
|
||||||
matrix_postgres_backup_connection_password: "{{ matrix_postgres_connection_password }}"
|
matrix_postgres_backup_connection_password: "{{ devture_postgres_connection_password if devture_postgres_enabled else '' }}"
|
||||||
|
|
||||||
matrix_postgres_backup_postgres_data_path: "{{ matrix_postgres_data_path if matrix_postgres_enabled else '' }}"
|
matrix_postgres_backup_postgres_data_path: "{{ devture_postgres_data_path if devture_postgres_enabled else '' }}"
|
||||||
|
|
||||||
matrix_postgres_backup_databases: "{{ matrix_postgres_additional_databases | map(attribute='name') if matrix_postgres_enabled else [] }}"
|
matrix_postgres_backup_databases: "{{ devture_postgres_additional_databases | map(attribute='name') if devture_postgres_enabled else [] }}"
|
||||||
|
|
||||||
######################################################################
|
######################################################################
|
||||||
#
|
#
|
||||||
|
@ -2990,7 +3012,7 @@ matrix_dendrite_systemd_required_services_list: |
|
||||||
{{
|
{{
|
||||||
(['docker.service'])
|
(['docker.service'])
|
||||||
+
|
+
|
||||||
(['matrix-postgres.service'] if matrix_postgres_enabled else [])
|
([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])
|
||||||
+
|
+
|
||||||
(['matrix-goofys.service'] if matrix_s3_media_store_enabled else [])
|
(['matrix-goofys.service'] if matrix_s3_media_store_enabled else [])
|
||||||
}}
|
}}
|
||||||
|
|
|
@ -34,7 +34,9 @@
|
||||||
- custom/matrix-base
|
- custom/matrix-base
|
||||||
- custom/matrix-dynamic-dns
|
- custom/matrix-dynamic-dns
|
||||||
- custom/matrix-mailer
|
- custom/matrix-mailer
|
||||||
- custom/matrix-postgres
|
|
||||||
|
- role: galaxy/com.devture.ansible.role.postgres
|
||||||
|
|
||||||
- custom/matrix-redis
|
- custom/matrix-redis
|
||||||
- custom/matrix-corporal
|
- custom/matrix-corporal
|
||||||
- custom/matrix-bridge-appservice-discord
|
- custom/matrix-bridge-appservice-discord
|
||||||
|
|
|
@ -18,6 +18,9 @@
|
||||||
- src: git+https://github.com/devture/com.devture.ansible.role.playbook_state_preserver.git
|
- src: git+https://github.com/devture/com.devture.ansible.role.playbook_state_preserver.git
|
||||||
version: ff2fd42e1c1a9e28e3312bbd725395f9c2fc7f16
|
version: ff2fd42e1c1a9e28e3312bbd725395f9c2fc7f16
|
||||||
|
|
||||||
|
- src: git+https://github.com/devture/com.devture.ansible.role.postgres.git
|
||||||
|
version: f9f0519b2ccc6da7e0480c7cdfe8a67814728243
|
||||||
|
|
||||||
- src: git+https://github.com/devture/com.devture.ansible.role.systemd_service_manager.git
|
- src: git+https://github.com/devture/com.devture.ansible.role.systemd_service_manager.git
|
||||||
version: 6ccb88ac5fc27e1e70afcd48278ade4b564a9096
|
version: 6ccb88ac5fc27e1e70afcd48278ade4b564a9096
|
||||||
|
|
||||||
|
|
|
@ -5,22 +5,22 @@
|
||||||
- name: Fail with matrix_backup_borg_version advice if Postgres not enabled
|
- name: Fail with matrix_backup_borg_version advice if Postgres not enabled
|
||||||
ansible.builtin.fail:
|
ansible.builtin.fail:
|
||||||
msg: >-
|
msg: >-
|
||||||
You are not running a built-in Postgres server (`matrix_postgres_enabled: false`), so auto-detecting its version and setting `matrix_backup_borg_version` automatically based on that cannot happen.
|
You are not running a built-in Postgres server (`devture_postgres_enabled: false`), so auto-detecting its version and setting `matrix_backup_borg_version` automatically based on that cannot happen.
|
||||||
Consider setting `matrix_backup_borg_version` to your Postgres version manually.
|
Consider setting `matrix_backup_borg_version` to your Postgres version manually.
|
||||||
when: not matrix_postgres_enabled
|
when: not devture_postgres_enabled
|
||||||
|
|
||||||
- ansible.builtin.import_role:
|
- ansible.builtin.import_role:
|
||||||
name: custom/matrix-postgres
|
name: galaxy/com.devture.ansible.role.postgres
|
||||||
tasks_from: detect_existing_postgres_version
|
tasks_from: detect_existing_postgres_version
|
||||||
|
|
||||||
- name: Fail if detected Postgres version is unsupported
|
- name: Fail if detected Postgres version is unsupported
|
||||||
ansible.builtin.fail:
|
ansible.builtin.fail:
|
||||||
msg: "You cannot use borg backup with such an old version ({{ matrix_postgres_detected_version }}) of Postgres. Consider upgrading - link to docs for upgrading Postgres: docs/maintenance-postgres.md#upgrading-postgresql"
|
msg: "You cannot use borg backup with such an old version ({{ devture_postgres_detected_version }}) of Postgres. Consider upgrading - link to docs for upgrading Postgres: docs/maintenance-postgres.md#upgrading-postgresql"
|
||||||
when: "matrix_postgres_detected_version not in matrix_backup_borg_supported_postgres_versions"
|
when: "devture_postgres_detected_version not in matrix_backup_borg_supported_postgres_versions"
|
||||||
|
|
||||||
- name: Set the correct borg backup version to use
|
- name: Set the correct borg backup version to use
|
||||||
ansible.builtin.set_fact:
|
ansible.builtin.set_fact:
|
||||||
matrix_backup_borg_version: "{{ matrix_postgres_detected_version }}"
|
matrix_backup_borg_version: "{{ devture_postgres_detected_version }}"
|
||||||
|
|
||||||
- name: Ensure borg paths exist
|
- name: Ensure borg paths exist
|
||||||
ansible.builtin.file:
|
ansible.builtin.file:
|
||||||
|
|
|
@ -12,7 +12,7 @@
|
||||||
- when: "matrix_bot_buscarron_sqlite_database_path_local_stat_result.stat.exists | bool"
|
- when: "matrix_bot_buscarron_sqlite_database_path_local_stat_result.stat.exists | bool"
|
||||||
block:
|
block:
|
||||||
- ansible.builtin.set_fact:
|
- ansible.builtin.set_fact:
|
||||||
matrix_postgres_db_migration_request:
|
devture_postgres_db_migration_request:
|
||||||
src: "{{ matrix_bot_buscarron_sqlite_database_path_local }}"
|
src: "{{ matrix_bot_buscarron_sqlite_database_path_local }}"
|
||||||
dst: "{{ matrix_bot_buscarron_database_connection_string }}"
|
dst: "{{ matrix_bot_buscarron_database_connection_string }}"
|
||||||
caller: "{{ role_path | basename }}"
|
caller: "{{ role_path | basename }}"
|
||||||
|
@ -21,7 +21,7 @@
|
||||||
systemd_services_to_stop: ['matrix-bot-buscarron.service']
|
systemd_services_to_stop: ['matrix-bot-buscarron.service']
|
||||||
|
|
||||||
- ansible.builtin.import_role:
|
- ansible.builtin.import_role:
|
||||||
name: custom/matrix-postgres
|
name: galaxy/com.devture.ansible.role.postgres
|
||||||
tasks_from: migrate_db_to_postgres
|
tasks_from: migrate_db_to_postgres
|
||||||
|
|
||||||
- ansible.builtin.set_fact:
|
- ansible.builtin.set_fact:
|
||||||
|
|
|
@ -12,7 +12,7 @@
|
||||||
- when: "matrix_bot_honoroit_sqlite_database_path_local_stat_result.stat.exists | bool"
|
- when: "matrix_bot_honoroit_sqlite_database_path_local_stat_result.stat.exists | bool"
|
||||||
block:
|
block:
|
||||||
- ansible.builtin.set_fact:
|
- ansible.builtin.set_fact:
|
||||||
matrix_postgres_db_migration_request:
|
devture_postgres_db_migration_request:
|
||||||
src: "{{ matrix_bot_honoroit_sqlite_database_path_local }}"
|
src: "{{ matrix_bot_honoroit_sqlite_database_path_local }}"
|
||||||
dst: "{{ matrix_bot_honoroit_database_connection_string }}"
|
dst: "{{ matrix_bot_honoroit_database_connection_string }}"
|
||||||
caller: "{{ role_path | basename }}"
|
caller: "{{ role_path | basename }}"
|
||||||
|
@ -21,7 +21,7 @@
|
||||||
systemd_services_to_stop: ['matrix-bot-honoroit.service']
|
systemd_services_to_stop: ['matrix-bot-honoroit.service']
|
||||||
|
|
||||||
- ansible.builtin.import_role:
|
- ansible.builtin.import_role:
|
||||||
name: custom/matrix-postgres
|
name: galaxy/com.devture.ansible.role.postgres
|
||||||
tasks_from: migrate_db_to_postgres
|
tasks_from: migrate_db_to_postgres
|
||||||
|
|
||||||
- ansible.builtin.set_fact:
|
- ansible.builtin.set_fact:
|
||||||
|
|
|
@ -13,7 +13,7 @@
|
||||||
- when: "matrix_bot_matrix_reminder_bot_sqlite_database_path_local_stat_result.stat.exists | bool"
|
- when: "matrix_bot_matrix_reminder_bot_sqlite_database_path_local_stat_result.stat.exists | bool"
|
||||||
block:
|
block:
|
||||||
- ansible.builtin.set_fact:
|
- ansible.builtin.set_fact:
|
||||||
matrix_postgres_db_migration_request:
|
devture_postgres_db_migration_request:
|
||||||
src: "{{ matrix_bot_matrix_reminder_bot_sqlite_database_path_local }}"
|
src: "{{ matrix_bot_matrix_reminder_bot_sqlite_database_path_local }}"
|
||||||
dst: "{{ matrix_bot_matrix_reminder_bot_database_connection_string }}"
|
dst: "{{ matrix_bot_matrix_reminder_bot_database_connection_string }}"
|
||||||
caller: "{{ role_path | basename }}"
|
caller: "{{ role_path | basename }}"
|
||||||
|
@ -22,7 +22,7 @@
|
||||||
systemd_services_to_stop: ['matrix-bot-matrix-reminder-bot.service']
|
systemd_services_to_stop: ['matrix-bot-matrix-reminder-bot.service']
|
||||||
|
|
||||||
- ansible.builtin.import_role:
|
- ansible.builtin.import_role:
|
||||||
name: custom/matrix-postgres
|
name: galaxy/com.devture.ansible.role.postgres
|
||||||
tasks_from: migrate_db_to_postgres
|
tasks_from: migrate_db_to_postgres
|
||||||
|
|
||||||
- ansible.builtin.set_fact:
|
- ansible.builtin.set_fact:
|
||||||
|
|
|
@ -9,7 +9,7 @@
|
||||||
- when: "matrix_bot_postmoogle_sqlite_database_path_local_stat_result.stat.exists | bool"
|
- when: "matrix_bot_postmoogle_sqlite_database_path_local_stat_result.stat.exists | bool"
|
||||||
block:
|
block:
|
||||||
- ansible.builtin.set_fact:
|
- ansible.builtin.set_fact:
|
||||||
matrix_postgres_db_migration_request:
|
devture_postgres_db_migration_request:
|
||||||
src: "{{ matrix_bot_postmoogle_sqlite_database_path_local }}"
|
src: "{{ matrix_bot_postmoogle_sqlite_database_path_local }}"
|
||||||
dst: "{{ matrix_bot_postmoogle_database_connection_string }}"
|
dst: "{{ matrix_bot_postmoogle_database_connection_string }}"
|
||||||
caller: "{{ role_path | basename }}"
|
caller: "{{ role_path | basename }}"
|
||||||
|
@ -18,7 +18,7 @@
|
||||||
systemd_services_to_stop: ['matrix-bot-postmoogle.service']
|
systemd_services_to_stop: ['matrix-bot-postmoogle.service']
|
||||||
|
|
||||||
- ansible.builtin.import_role:
|
- ansible.builtin.import_role:
|
||||||
name: custom/matrix-postgres
|
name: galaxy/com.devture.ansible.role.postgres
|
||||||
tasks_from: migrate_db_to_postgres
|
tasks_from: migrate_db_to_postgres
|
||||||
|
|
||||||
- ansible.builtin.set_fact:
|
- ansible.builtin.set_fact:
|
||||||
|
|
|
@ -13,7 +13,7 @@
|
||||||
- when: "matrix_appservice_discord_sqlite_database_path_local_stat_result.stat.exists | bool"
|
- when: "matrix_appservice_discord_sqlite_database_path_local_stat_result.stat.exists | bool"
|
||||||
block:
|
block:
|
||||||
- ansible.builtin.set_fact:
|
- ansible.builtin.set_fact:
|
||||||
matrix_postgres_db_migration_request:
|
devture_postgres_db_migration_request:
|
||||||
src: "{{ matrix_appservice_discord_sqlite_database_path_local }}"
|
src: "{{ matrix_appservice_discord_sqlite_database_path_local }}"
|
||||||
dst: "{{ matrix_appservice_discord_database_connString }}"
|
dst: "{{ matrix_appservice_discord_database_connString }}"
|
||||||
caller: "{{ role_path | basename }}"
|
caller: "{{ role_path | basename }}"
|
||||||
|
@ -22,7 +22,7 @@
|
||||||
systemd_services_to_stop: ['matrix-appservice-discord.service']
|
systemd_services_to_stop: ['matrix-appservice-discord.service']
|
||||||
|
|
||||||
- ansible.builtin.import_role:
|
- ansible.builtin.import_role:
|
||||||
name: custom/matrix-postgres
|
name: galaxy/com.devture.ansible.role.postgres
|
||||||
tasks_from: migrate_db_to_postgres
|
tasks_from: migrate_db_to_postgres
|
||||||
|
|
||||||
- ansible.builtin.set_fact:
|
- ansible.builtin.set_fact:
|
||||||
|
|
|
@ -2,8 +2,8 @@
|
||||||
|
|
||||||
- name: Fail if Postgres not enabled
|
- name: Fail if Postgres not enabled
|
||||||
ansible.builtin.fail:
|
ansible.builtin.fail:
|
||||||
msg: "Postgres via the matrix-postgres role is not enabled (`matrix_postgres_enabled`). Cannot migrate."
|
msg: "Postgres via the com.devture.ansible.role.postgres role is not enabled (`devture_postgres_enabled`). Cannot migrate."
|
||||||
when: "not matrix_postgres_enabled | bool"
|
when: "not devture_postgres_enabled | bool"
|
||||||
|
|
||||||
# Defaults
|
# Defaults
|
||||||
|
|
||||||
|
@ -14,19 +14,19 @@
|
||||||
|
|
||||||
# Actual import work
|
# Actual import work
|
||||||
|
|
||||||
- name: Ensure matrix-postgres is started
|
- name: Ensure Postgres is started
|
||||||
ansible.builtin.service:
|
ansible.builtin.service:
|
||||||
name: matrix-postgres
|
name: "{{ devture_postgres_identifier }}"
|
||||||
state: started
|
state: started
|
||||||
daemon_reload: true
|
daemon_reload: true
|
||||||
register: matrix_postgres_service_start_result
|
register: postgres_service_start_result
|
||||||
|
|
||||||
- name: Wait a bit, so that Postgres can start
|
- name: Wait a bit, so that Postgres can start
|
||||||
ansible.builtin.wait_for:
|
ansible.builtin.wait_for:
|
||||||
timeout: "{{ postgres_start_wait_time }}"
|
timeout: "{{ postgres_start_wait_time }}"
|
||||||
delegate_to: 127.0.0.1
|
delegate_to: 127.0.0.1
|
||||||
become: false
|
become: false
|
||||||
when: "matrix_postgres_service_start_result.changed | bool"
|
when: postgres_service_start_result.changed | bool
|
||||||
|
|
||||||
- name: Check existence of matrix-appservice-irc service
|
- name: Check existence of matrix-appservice-irc service
|
||||||
ansible.builtin.stat:
|
ansible.builtin.stat:
|
||||||
|
|
|
@ -2,8 +2,8 @@
|
||||||
|
|
||||||
- name: Fail if Postgres not enabled
|
- name: Fail if Postgres not enabled
|
||||||
ansible.builtin.fail:
|
ansible.builtin.fail:
|
||||||
msg: "Postgres via the matrix-postgres role is not enabled (`matrix_postgres_enabled`). Cannot migrate."
|
msg: "Postgres via the com.devture.ansible.role.postgres role is not enabled (`devture_postgres_enabled`). Cannot migrate."
|
||||||
when: "not matrix_postgres_enabled | bool"
|
when: "not devture_postgres_enabled | bool"
|
||||||
|
|
||||||
# Defaults
|
# Defaults
|
||||||
|
|
||||||
|
@ -14,19 +14,19 @@
|
||||||
|
|
||||||
# Actual import work
|
# Actual import work
|
||||||
|
|
||||||
- name: Ensure matrix-postgres is started
|
- name: Ensure Postgres is started
|
||||||
ansible.builtin.service:
|
ansible.builtin.service:
|
||||||
name: matrix-postgres
|
name: "{{ devture_postgres_identifier }}"
|
||||||
state: started
|
state: started
|
||||||
daemon_reload: true
|
daemon_reload: true
|
||||||
register: matrix_postgres_service_start_result
|
register: postgres_service_start_result
|
||||||
|
|
||||||
- name: Wait a bit, so that Postgres can start
|
- name: Wait a bit, so that Postgres can start
|
||||||
ansible.builtin.wait_for:
|
ansible.builtin.wait_for:
|
||||||
timeout: "{{ postgres_start_wait_time }}"
|
timeout: "{{ postgres_start_wait_time }}"
|
||||||
delegate_to: 127.0.0.1
|
delegate_to: 127.0.0.1
|
||||||
become: false
|
become: false
|
||||||
when: "matrix_postgres_service_start_result.changed | bool"
|
when: "postgres_service_start_result.changed | bool"
|
||||||
|
|
||||||
- name: Ensure matrix-appservice-slack is stopped
|
- name: Ensure matrix-appservice-slack is stopped
|
||||||
ansible.builtin.service:
|
ansible.builtin.service:
|
||||||
|
|
|
@ -13,7 +13,7 @@
|
||||||
- when: "matrix_go_skype_bridge_sqlite_database_path_local_stat_result.stat.exists | bool"
|
- when: "matrix_go_skype_bridge_sqlite_database_path_local_stat_result.stat.exists | bool"
|
||||||
block:
|
block:
|
||||||
- ansible.builtin.set_fact:
|
- ansible.builtin.set_fact:
|
||||||
matrix_postgres_db_migration_request:
|
devture_postgres_db_migration_request:
|
||||||
src: "{{ matrix_go_skype_bridge_sqlite_database_path_local }}"
|
src: "{{ matrix_go_skype_bridge_sqlite_database_path_local }}"
|
||||||
dst: "{{ matrix_go_skype_bridge_database_connection_string }}"
|
dst: "{{ matrix_go_skype_bridge_database_connection_string }}"
|
||||||
caller: "{{ role_path | basename }}"
|
caller: "{{ role_path | basename }}"
|
||||||
|
@ -23,7 +23,7 @@
|
||||||
pgloader_options: ['--with "quote identifiers"']
|
pgloader_options: ['--with "quote identifiers"']
|
||||||
|
|
||||||
- ansible.builtin.import_role:
|
- ansible.builtin.import_role:
|
||||||
name: custom/matrix-postgres
|
name: galaxy/com.devture.ansible.role.postgres
|
||||||
tasks_from: migrate_db_to_postgres
|
tasks_from: migrate_db_to_postgres
|
||||||
|
|
||||||
- ansible.builtin.set_fact:
|
- ansible.builtin.set_fact:
|
||||||
|
|
|
@ -13,7 +13,7 @@
|
||||||
- when: "matrix_mautrix_discord_sqlite_database_path_local_stat_result.stat.exists | bool"
|
- when: "matrix_mautrix_discord_sqlite_database_path_local_stat_result.stat.exists | bool"
|
||||||
block:
|
block:
|
||||||
- ansible.builtin.set_fact:
|
- ansible.builtin.set_fact:
|
||||||
matrix_postgres_db_migration_request:
|
devture_postgres_db_migration_request:
|
||||||
src: "{{ matrix_mautrix_discord_sqlite_database_path_local }}"
|
src: "{{ matrix_mautrix_discord_sqlite_database_path_local }}"
|
||||||
dst: "{{ matrix_mautrix_discord_database_connection_string }}"
|
dst: "{{ matrix_mautrix_discord_database_connection_string }}"
|
||||||
caller: "{{ role_path | basename }}"
|
caller: "{{ role_path | basename }}"
|
||||||
|
@ -23,7 +23,7 @@
|
||||||
pgloader_options: ['--with "quote identifiers"']
|
pgloader_options: ['--with "quote identifiers"']
|
||||||
|
|
||||||
- ansible.builtin.import_role:
|
- ansible.builtin.import_role:
|
||||||
name: custom/matrix-postgres
|
name: galaxy/com.devture.ansible.role.postgres
|
||||||
tasks_from: migrate_db_to_postgres
|
tasks_from: migrate_db_to_postgres
|
||||||
|
|
||||||
- ansible.builtin.set_fact:
|
- ansible.builtin.set_fact:
|
||||||
|
|
|
@ -13,7 +13,7 @@
|
||||||
- when: "matrix_mautrix_facebook_sqlite_database_path_local_stat_result.stat.exists | bool"
|
- when: "matrix_mautrix_facebook_sqlite_database_path_local_stat_result.stat.exists | bool"
|
||||||
block:
|
block:
|
||||||
- ansible.builtin.set_fact:
|
- ansible.builtin.set_fact:
|
||||||
matrix_postgres_db_migration_request:
|
devture_postgres_db_migration_request:
|
||||||
src: "{{ matrix_mautrix_facebook_sqlite_database_path_local }}"
|
src: "{{ matrix_mautrix_facebook_sqlite_database_path_local }}"
|
||||||
dst: "{{ matrix_mautrix_facebook_database_connection_string }}"
|
dst: "{{ matrix_mautrix_facebook_database_connection_string }}"
|
||||||
caller: "{{ role_path | basename }}"
|
caller: "{{ role_path | basename }}"
|
||||||
|
@ -22,7 +22,7 @@
|
||||||
systemd_services_to_stop: ['matrix-mautrix-facebook.service']
|
systemd_services_to_stop: ['matrix-mautrix-facebook.service']
|
||||||
|
|
||||||
- ansible.builtin.import_role:
|
- ansible.builtin.import_role:
|
||||||
name: custom/matrix-postgres
|
name: galaxy/com.devture.ansible.role.postgres
|
||||||
tasks_from: migrate_db_to_postgres
|
tasks_from: migrate_db_to_postgres
|
||||||
|
|
||||||
- ansible.builtin.set_fact:
|
- ansible.builtin.set_fact:
|
||||||
|
|
|
@ -13,7 +13,7 @@
|
||||||
- when: "matrix_mautrix_googlechat_sqlite_database_path_local_stat_result.stat.exists | bool"
|
- when: "matrix_mautrix_googlechat_sqlite_database_path_local_stat_result.stat.exists | bool"
|
||||||
block:
|
block:
|
||||||
- ansible.builtin.set_fact:
|
- ansible.builtin.set_fact:
|
||||||
matrix_postgres_db_migration_request:
|
devture_postgres_db_migration_request:
|
||||||
src: "{{ matrix_mautrix_googlechat_sqlite_database_path_local }}"
|
src: "{{ matrix_mautrix_googlechat_sqlite_database_path_local }}"
|
||||||
dst: "{{ matrix_mautrix_googlechat_database_connection_string }}"
|
dst: "{{ matrix_mautrix_googlechat_database_connection_string }}"
|
||||||
caller: "{{ role_path | basename }}"
|
caller: "{{ role_path | basename }}"
|
||||||
|
@ -22,7 +22,7 @@
|
||||||
systemd_services_to_stop: ['matrix-mautrix-googlechat.service']
|
systemd_services_to_stop: ['matrix-mautrix-googlechat.service']
|
||||||
|
|
||||||
- ansible.builtin.import_role:
|
- ansible.builtin.import_role:
|
||||||
name: custom/matrix-postgres
|
name: galaxy/com.devture.ansible.role.postgres
|
||||||
tasks_from: migrate_db_to_postgres
|
tasks_from: migrate_db_to_postgres
|
||||||
|
|
||||||
- ansible.builtin.set_fact:
|
- ansible.builtin.set_fact:
|
||||||
|
|
|
@ -13,7 +13,7 @@
|
||||||
- when: "matrix_mautrix_hangouts_sqlite_database_path_local_stat_result.stat.exists | bool"
|
- when: "matrix_mautrix_hangouts_sqlite_database_path_local_stat_result.stat.exists | bool"
|
||||||
block:
|
block:
|
||||||
- ansible.builtin.set_fact:
|
- ansible.builtin.set_fact:
|
||||||
matrix_postgres_db_migration_request:
|
devture_postgres_db_migration_request:
|
||||||
src: "{{ matrix_mautrix_hangouts_sqlite_database_path_local }}"
|
src: "{{ matrix_mautrix_hangouts_sqlite_database_path_local }}"
|
||||||
dst: "{{ matrix_mautrix_hangouts_database_connection_string }}"
|
dst: "{{ matrix_mautrix_hangouts_database_connection_string }}"
|
||||||
caller: "{{ role_path | basename }}"
|
caller: "{{ role_path | basename }}"
|
||||||
|
@ -22,7 +22,7 @@
|
||||||
systemd_services_to_stop: ['matrix-mautrix-hangouts.service']
|
systemd_services_to_stop: ['matrix-mautrix-hangouts.service']
|
||||||
|
|
||||||
- ansible.builtin.import_role:
|
- ansible.builtin.import_role:
|
||||||
name: custom/matrix-postgres
|
name: galaxy/com.devture.ansible.role.postgres
|
||||||
tasks_from: migrate_db_to_postgres
|
tasks_from: migrate_db_to_postgres
|
||||||
|
|
||||||
- ansible.builtin.set_fact:
|
- ansible.builtin.set_fact:
|
||||||
|
|
|
@ -13,7 +13,7 @@
|
||||||
- when: "matrix_mautrix_telegram_sqlite_database_path_local_stat_result.stat.exists | bool"
|
- when: "matrix_mautrix_telegram_sqlite_database_path_local_stat_result.stat.exists | bool"
|
||||||
block:
|
block:
|
||||||
- ansible.builtin.set_fact:
|
- ansible.builtin.set_fact:
|
||||||
matrix_postgres_db_migration_request:
|
devture_postgres_db_migration_request:
|
||||||
src: "{{ matrix_mautrix_telegram_sqlite_database_path_local }}"
|
src: "{{ matrix_mautrix_telegram_sqlite_database_path_local }}"
|
||||||
dst: "{{ matrix_mautrix_telegram_database_connection_string }}"
|
dst: "{{ matrix_mautrix_telegram_database_connection_string }}"
|
||||||
caller: "{{ role_path | basename }}"
|
caller: "{{ role_path | basename }}"
|
||||||
|
@ -22,7 +22,7 @@
|
||||||
systemd_services_to_stop: ['matrix-mautrix-telegram.service']
|
systemd_services_to_stop: ['matrix-mautrix-telegram.service']
|
||||||
|
|
||||||
- ansible.builtin.import_role:
|
- ansible.builtin.import_role:
|
||||||
name: custom/matrix-postgres
|
name: galaxy/com.devture.ansible.role.postgres
|
||||||
tasks_from: migrate_db_to_postgres
|
tasks_from: migrate_db_to_postgres
|
||||||
|
|
||||||
- ansible.builtin.set_fact:
|
- ansible.builtin.set_fact:
|
||||||
|
|
|
@ -13,7 +13,7 @@
|
||||||
- when: "matrix_mautrix_whatsapp_sqlite_database_path_local_stat_result.stat.exists | bool"
|
- when: "matrix_mautrix_whatsapp_sqlite_database_path_local_stat_result.stat.exists | bool"
|
||||||
block:
|
block:
|
||||||
- ansible.builtin.set_fact:
|
- ansible.builtin.set_fact:
|
||||||
matrix_postgres_db_migration_request:
|
devture_postgres_db_migration_request:
|
||||||
src: "{{ matrix_mautrix_whatsapp_sqlite_database_path_local }}"
|
src: "{{ matrix_mautrix_whatsapp_sqlite_database_path_local }}"
|
||||||
dst: "{{ matrix_mautrix_whatsapp_database_connection_string }}"
|
dst: "{{ matrix_mautrix_whatsapp_database_connection_string }}"
|
||||||
caller: "{{ role_path | basename }}"
|
caller: "{{ role_path | basename }}"
|
||||||
|
@ -23,7 +23,7 @@
|
||||||
pgloader_options: ['--with "quote identifiers"']
|
pgloader_options: ['--with "quote identifiers"']
|
||||||
|
|
||||||
- ansible.builtin.import_role:
|
- ansible.builtin.import_role:
|
||||||
name: custom/matrix-postgres
|
name: galaxy/com.devture.ansible.role.postgres
|
||||||
tasks_from: migrate_db_to_postgres
|
tasks_from: migrate_db_to_postgres
|
||||||
|
|
||||||
- ansible.builtin.set_fact:
|
- ansible.builtin.set_fact:
|
||||||
|
|
|
@ -47,7 +47,7 @@
|
||||||
- when: "matrix_mx_puppet_discord_sqlite_database_path_local_stat_result.stat.exists | bool"
|
- when: "matrix_mx_puppet_discord_sqlite_database_path_local_stat_result.stat.exists | bool"
|
||||||
block:
|
block:
|
||||||
- ansible.builtin.set_fact:
|
- ansible.builtin.set_fact:
|
||||||
matrix_postgres_db_migration_request:
|
devture_postgres_db_migration_request:
|
||||||
src: "{{ matrix_mx_puppet_discord_sqlite_database_path_local }}"
|
src: "{{ matrix_mx_puppet_discord_sqlite_database_path_local }}"
|
||||||
dst: "{{ matrix_mx_puppet_discord_database_connection_string }}"
|
dst: "{{ matrix_mx_puppet_discord_database_connection_string }}"
|
||||||
caller: "{{ role_path | basename }}"
|
caller: "{{ role_path | basename }}"
|
||||||
|
@ -56,7 +56,7 @@
|
||||||
systemd_services_to_stop: ['matrix-mx-puppet-discord.service']
|
systemd_services_to_stop: ['matrix-mx-puppet-discord.service']
|
||||||
|
|
||||||
- ansible.builtin.import_role:
|
- ansible.builtin.import_role:
|
||||||
name: custom/matrix-postgres
|
name: galaxy/com.devture.ansible.role.postgres
|
||||||
tasks_from: migrate_db_to_postgres
|
tasks_from: migrate_db_to_postgres
|
||||||
|
|
||||||
- ansible.builtin.set_fact:
|
- ansible.builtin.set_fact:
|
||||||
|
|
|
@ -45,7 +45,7 @@
|
||||||
- when: "matrix_mx_puppet_groupme_sqlite_database_path_local_stat_result.stat.exists | bool"
|
- when: "matrix_mx_puppet_groupme_sqlite_database_path_local_stat_result.stat.exists | bool"
|
||||||
block:
|
block:
|
||||||
- ansible.builtin.set_fact:
|
- ansible.builtin.set_fact:
|
||||||
matrix_postgres_db_migration_request:
|
devture_postgres_db_migration_request:
|
||||||
src: "{{ matrix_mx_puppet_groupme_sqlite_database_path_local }}"
|
src: "{{ matrix_mx_puppet_groupme_sqlite_database_path_local }}"
|
||||||
dst: "{{ matrix_mx_puppet_groupme_database_connection_string }}"
|
dst: "{{ matrix_mx_puppet_groupme_database_connection_string }}"
|
||||||
caller: "{{ role_path | basename }}"
|
caller: "{{ role_path | basename }}"
|
||||||
|
@ -54,7 +54,7 @@
|
||||||
systemd_services_to_stop: ['matrix-mx-puppet-groupme.service']
|
systemd_services_to_stop: ['matrix-mx-puppet-groupme.service']
|
||||||
|
|
||||||
- ansible.builtin.import_role:
|
- ansible.builtin.import_role:
|
||||||
name: custom/matrix-postgres
|
name: galaxy/com.devture.ansible.role.postgres
|
||||||
tasks_from: migrate_db_to_postgres
|
tasks_from: migrate_db_to_postgres
|
||||||
|
|
||||||
- ansible.builtin.set_fact:
|
- ansible.builtin.set_fact:
|
||||||
|
|
|
@ -13,7 +13,7 @@
|
||||||
- when: "matrix_mx_puppet_instagram_sqlite_database_path_local_stat_result.stat.exists | bool"
|
- when: "matrix_mx_puppet_instagram_sqlite_database_path_local_stat_result.stat.exists | bool"
|
||||||
block:
|
block:
|
||||||
- ansible.builtin.set_fact:
|
- ansible.builtin.set_fact:
|
||||||
matrix_postgres_db_migration_request:
|
devture_postgres_db_migration_request:
|
||||||
src: "{{ matrix_mx_puppet_instagram_sqlite_database_path_local }}"
|
src: "{{ matrix_mx_puppet_instagram_sqlite_database_path_local }}"
|
||||||
dst: "{{ matrix_mx_puppet_instagram_database_connection_string }}"
|
dst: "{{ matrix_mx_puppet_instagram_database_connection_string }}"
|
||||||
caller: "{{ role_path | basename }}"
|
caller: "{{ role_path | basename }}"
|
||||||
|
@ -22,7 +22,7 @@
|
||||||
systemd_services_to_stop: ['matrix-mx-puppet-instagram.service']
|
systemd_services_to_stop: ['matrix-mx-puppet-instagram.service']
|
||||||
|
|
||||||
- ansible.builtin.import_role:
|
- ansible.builtin.import_role:
|
||||||
name: custom/matrix-postgres
|
name: galaxy/com.devture.ansible.role.postgres
|
||||||
tasks_from: migrate_db_to_postgres
|
tasks_from: migrate_db_to_postgres
|
||||||
|
|
||||||
- ansible.builtin.set_fact:
|
- ansible.builtin.set_fact:
|
||||||
|
|
|
@ -41,7 +41,7 @@
|
||||||
- when: "matrix_mx_puppet_slack_sqlite_database_path_local_stat_result.stat.exists | bool"
|
- when: "matrix_mx_puppet_slack_sqlite_database_path_local_stat_result.stat.exists | bool"
|
||||||
block:
|
block:
|
||||||
- ansible.builtin.set_fact:
|
- ansible.builtin.set_fact:
|
||||||
matrix_postgres_db_migration_request:
|
devture_postgres_db_migration_request:
|
||||||
src: "{{ matrix_mx_puppet_slack_sqlite_database_path_local }}"
|
src: "{{ matrix_mx_puppet_slack_sqlite_database_path_local }}"
|
||||||
dst: "{{ matrix_mx_puppet_slack_database_connection_string }}"
|
dst: "{{ matrix_mx_puppet_slack_database_connection_string }}"
|
||||||
caller: "{{ role_path | basename }}"
|
caller: "{{ role_path | basename }}"
|
||||||
|
@ -50,7 +50,7 @@
|
||||||
systemd_services_to_stop: ['matrix-mx-puppet-slack.service']
|
systemd_services_to_stop: ['matrix-mx-puppet-slack.service']
|
||||||
|
|
||||||
- ansible.builtin.import_role:
|
- ansible.builtin.import_role:
|
||||||
name: custom/matrix-postgres
|
name: galaxy/com.devture.ansible.role.postgres
|
||||||
tasks_from: migrate_db_to_postgres
|
tasks_from: migrate_db_to_postgres
|
||||||
|
|
||||||
- ansible.builtin.set_fact:
|
- ansible.builtin.set_fact:
|
||||||
|
|
|
@ -45,7 +45,7 @@
|
||||||
- when: "matrix_mx_puppet_steam_sqlite_database_path_local_stat_result.stat.exists | bool"
|
- when: "matrix_mx_puppet_steam_sqlite_database_path_local_stat_result.stat.exists | bool"
|
||||||
block:
|
block:
|
||||||
- ansible.builtin.set_fact:
|
- ansible.builtin.set_fact:
|
||||||
matrix_postgres_db_migration_request:
|
devture_postgres_db_migration_request:
|
||||||
src: "{{ matrix_mx_puppet_steam_sqlite_database_path_local }}"
|
src: "{{ matrix_mx_puppet_steam_sqlite_database_path_local }}"
|
||||||
dst: "{{ matrix_mx_puppet_steam_database_connection_string }}"
|
dst: "{{ matrix_mx_puppet_steam_database_connection_string }}"
|
||||||
caller: "{{ role_path | basename }}"
|
caller: "{{ role_path | basename }}"
|
||||||
|
@ -54,7 +54,7 @@
|
||||||
systemd_services_to_stop: ['matrix-mx-puppet-steam.service']
|
systemd_services_to_stop: ['matrix-mx-puppet-steam.service']
|
||||||
|
|
||||||
- ansible.builtin.import_role:
|
- ansible.builtin.import_role:
|
||||||
name: custom/matrix-postgres
|
name: galaxy/com.devture.ansible.role.postgres
|
||||||
tasks_from: migrate_db_to_postgres
|
tasks_from: migrate_db_to_postgres
|
||||||
|
|
||||||
- ansible.builtin.set_fact:
|
- ansible.builtin.set_fact:
|
||||||
|
|
|
@ -45,7 +45,7 @@
|
||||||
- when: "matrix_mx_puppet_twitter_sqlite_database_path_local_stat_result.stat.exists | bool"
|
- when: "matrix_mx_puppet_twitter_sqlite_database_path_local_stat_result.stat.exists | bool"
|
||||||
block:
|
block:
|
||||||
- ansible.builtin.set_fact:
|
- ansible.builtin.set_fact:
|
||||||
matrix_postgres_db_migration_request:
|
devture_postgres_db_migration_request:
|
||||||
src: "{{ matrix_mx_puppet_twitter_sqlite_database_path_local }}"
|
src: "{{ matrix_mx_puppet_twitter_sqlite_database_path_local }}"
|
||||||
dst: "{{ matrix_mx_puppet_twitter_database_connection_string }}"
|
dst: "{{ matrix_mx_puppet_twitter_database_connection_string }}"
|
||||||
caller: "{{ role_path | basename }}"
|
caller: "{{ role_path | basename }}"
|
||||||
|
@ -54,7 +54,7 @@
|
||||||
systemd_services_to_stop: ['matrix-mx-puppet-twitter.service']
|
systemd_services_to_stop: ['matrix-mx-puppet-twitter.service']
|
||||||
|
|
||||||
- ansible.builtin.import_role:
|
- ansible.builtin.import_role:
|
||||||
name: custom/matrix-postgres
|
name: galaxy/com.devture.ansible.role.postgres
|
||||||
tasks_from: migrate_db_to_postgres
|
tasks_from: migrate_db_to_postgres
|
||||||
|
|
||||||
- ansible.builtin.set_fact:
|
- ansible.builtin.set_fact:
|
||||||
|
|
|
@ -52,7 +52,7 @@
|
||||||
- {'table': 'dimension_bridges', 'column': 'isPublic', 'default': ''}
|
- {'table': 'dimension_bridges', 'column': 'isPublic', 'default': ''}
|
||||||
|
|
||||||
- ansible.builtin.set_fact:
|
- ansible.builtin.set_fact:
|
||||||
matrix_postgres_db_migration_request:
|
devture_postgres_db_migration_request:
|
||||||
src: "{{ matrix_dimension_sqlite_database_path_local }}"
|
src: "{{ matrix_dimension_sqlite_database_path_local }}"
|
||||||
dst: "{{ matrix_dimension_database_connection_string }}"
|
dst: "{{ matrix_dimension_database_connection_string }}"
|
||||||
caller: "{{ role_path | basename }}"
|
caller: "{{ role_path | basename }}"
|
||||||
|
@ -64,7 +64,7 @@
|
||||||
additional_psql_statements_db_name: "{{ matrix_dimension_database_name }}"
|
additional_psql_statements_db_name: "{{ matrix_dimension_database_name }}"
|
||||||
|
|
||||||
- ansible.builtin.import_role:
|
- ansible.builtin.import_role:
|
||||||
name: custom/matrix-postgres
|
name: galaxy/com.devture.ansible.role.postgres
|
||||||
tasks_from: migrate_db_to_postgres
|
tasks_from: migrate_db_to_postgres
|
||||||
|
|
||||||
- ansible.builtin.set_fact:
|
- ansible.builtin.set_fact:
|
||||||
|
|
|
@ -4,7 +4,7 @@
|
||||||
ansible.builtin.fail:
|
ansible.builtin.fail:
|
||||||
msg: >-
|
msg: >-
|
||||||
Etherpad requires a dedicated Postgres database. Please enable the built in one, or configure an external DB by redefining "matrix_etherpad_database_hostname"
|
Etherpad requires a dedicated Postgres database. Please enable the built in one, or configure an external DB by redefining "matrix_etherpad_database_hostname"
|
||||||
when: matrix_etherpad_database_hostname == "matrix-postgres" and not matrix_postgres_enabled
|
when: matrix_etherpad_database_hostname == ''
|
||||||
|
|
||||||
- name: Fail if wrong mode selected
|
- name: Fail if wrong mode selected
|
||||||
ansible.builtin.fail:
|
ansible.builtin.fail:
|
||||||
|
|
|
@ -28,7 +28,7 @@
|
||||||
- when: "matrix_ma1sd_sqlite_database_path_local_stat_result.stat.exists | bool"
|
- when: "matrix_ma1sd_sqlite_database_path_local_stat_result.stat.exists | bool"
|
||||||
block:
|
block:
|
||||||
- ansible.builtin.set_fact:
|
- ansible.builtin.set_fact:
|
||||||
matrix_postgres_db_migration_request:
|
devture_postgres_db_migration_request:
|
||||||
src: "{{ matrix_ma1sd_sqlite_database_path_local }}"
|
src: "{{ matrix_ma1sd_sqlite_database_path_local }}"
|
||||||
dst: "{{ matrix_ma1sd_database_connection_string }}"
|
dst: "{{ matrix_ma1sd_database_connection_string }}"
|
||||||
caller: "{{ role_path | basename }}"
|
caller: "{{ role_path | basename }}"
|
||||||
|
@ -38,7 +38,7 @@
|
||||||
pgloader_options: ['--with "quote identifiers"']
|
pgloader_options: ['--with "quote identifiers"']
|
||||||
|
|
||||||
- ansible.builtin.import_role:
|
- ansible.builtin.import_role:
|
||||||
name: custom/matrix-postgres
|
name: galaxy/com.devture.ansible.role.postgres
|
||||||
tasks_from: migrate_db_to_postgres
|
tasks_from: migrate_db_to_postgres
|
||||||
|
|
||||||
- ansible.builtin.set_fact:
|
- ansible.builtin.set_fact:
|
||||||
|
|
|
@ -2,7 +2,7 @@
|
||||||
|
|
||||||
|
|
||||||
- ansible.builtin.import_role:
|
- ansible.builtin.import_role:
|
||||||
name: custom/matrix-postgres
|
name: galaxy/com.devture.ansible.role.postgres
|
||||||
tasks_from: detect_existing_postgres_version
|
tasks_from: detect_existing_postgres_version
|
||||||
when: 'matrix_postgres_backup_postgres_data_path != ""'
|
when: 'matrix_postgres_backup_postgres_data_path != ""'
|
||||||
|
|
||||||
|
|
|
@ -1,133 +0,0 @@
|
||||||
---
|
|
||||||
# Project source code URL: https://github.com/postgres/postgres
|
|
||||||
|
|
||||||
# Controls if the Postgres server managed by the playbook is enabled.
|
|
||||||
# You can turn it off and use an external Postgres server by setting this to `false`.
|
|
||||||
# Doing this has various downsides. See `docs/configuring-playbook-external-postgres.md` to learn more.
|
|
||||||
matrix_postgres_enabled: true
|
|
||||||
|
|
||||||
matrix_postgres_connection_hostname: "matrix-postgres"
|
|
||||||
matrix_postgres_connection_port: 5432
|
|
||||||
matrix_postgres_connection_username: "matrix"
|
|
||||||
matrix_postgres_connection_password: ""
|
|
||||||
matrix_postgres_db_name: "matrix"
|
|
||||||
|
|
||||||
matrix_postgres_base_path: "{{ matrix_base_data_path }}/postgres"
|
|
||||||
matrix_postgres_data_path: "{{ matrix_postgres_base_path }}/data"
|
|
||||||
|
|
||||||
# matrix_postgres_systemd_services_to_stop_for_maintenance_list specifies the list of systemd services to stop before vacuuming or upgrading.
|
|
||||||
# These services will be restarted after the operation completes.
|
|
||||||
matrix_postgres_systemd_services_to_stop_for_maintenance_list: []
|
|
||||||
|
|
||||||
matrix_postgres_architecture: amd64
|
|
||||||
|
|
||||||
# matrix_postgres_docker_image_suffix controls whether we use Alpine-based images (`-alpine`) or the normal Debian-based images.
|
|
||||||
# Alpine-based Postgres images are smaller and we usually prefer them, but they don't work on ARM32 (tested on a Raspberry Pi 3 running Raspbian 10.7).
|
|
||||||
# On ARM32, `-alpine` images fail with the following error:
|
|
||||||
# > LOG: startup process (PID 37) was terminated by signal 11: Segmentation fault
|
|
||||||
matrix_postgres_docker_image_suffix: "{{ '-alpine' if matrix_postgres_architecture in ['amd64', 'arm64'] else '' }}"
|
|
||||||
|
|
||||||
matrix_postgres_docker_image_v9: "{{ matrix_container_global_registry_prefix }}postgres:9.6.24{{ matrix_postgres_docker_image_suffix }}"
|
|
||||||
matrix_postgres_docker_image_v10: "{{ matrix_container_global_registry_prefix }}postgres:10.22{{ matrix_postgres_docker_image_suffix }}"
|
|
||||||
matrix_postgres_docker_image_v11: "{{ matrix_container_global_registry_prefix }}postgres:11.17{{ matrix_postgres_docker_image_suffix }}"
|
|
||||||
matrix_postgres_docker_image_v12: "{{ matrix_container_global_registry_prefix }}postgres:12.12{{ matrix_postgres_docker_image_suffix }}"
|
|
||||||
matrix_postgres_docker_image_v13: "{{ matrix_container_global_registry_prefix }}postgres:13.8{{ matrix_postgres_docker_image_suffix }}"
|
|
||||||
matrix_postgres_docker_image_v14: "{{ matrix_container_global_registry_prefix }}postgres:14.5{{ matrix_postgres_docker_image_suffix }}"
|
|
||||||
matrix_postgres_docker_image_v15: "{{ matrix_container_global_registry_prefix }}postgres:15.0{{ matrix_postgres_docker_image_suffix }}"
|
|
||||||
matrix_postgres_docker_image_latest: "{{ matrix_postgres_docker_image_v15 }}"
|
|
||||||
|
|
||||||
# This variable is assigned at runtime. Overriding its value has no effect.
|
|
||||||
matrix_postgres_docker_image_to_use: '{{ matrix_postgres_docker_image_latest }}'
|
|
||||||
|
|
||||||
matrix_postgres_docker_image_force_pull: "{{ matrix_postgres_docker_image_to_use.endswith(':latest') }}"
|
|
||||||
|
|
||||||
# A list of extra arguments to pass to the container
|
|
||||||
matrix_postgres_container_extra_arguments: []
|
|
||||||
|
|
||||||
# A list of extra arguments to pass to the postgres process
|
|
||||||
# e.g. "-c 'max_connections=200'"
|
|
||||||
matrix_postgres_process_extra_arguments: []
|
|
||||||
|
|
||||||
# Controls whether the matrix-postgres container exposes a port (tcp/5432 in the
|
|
||||||
# container) that can be used to access the database from outside the container (e.g. with psql)
|
|
||||||
#
|
|
||||||
# psql postgresql://username:password@localhost:<port>/database_name
|
|
||||||
#
|
|
||||||
# Takes an "<ip>:<port>" or "<port>" value (e.g. "127.0.0.1:5432"), or empty string to not expose.
|
|
||||||
matrix_postgres_container_postgres_bind_port: ""
|
|
||||||
|
|
||||||
# A list of additional (databases and their credentials) to create.
|
|
||||||
#
|
|
||||||
# Example:
|
|
||||||
# matrix_postgres_additional_databases:
|
|
||||||
# - name: matrix_appservice_discord
|
|
||||||
# username: matrix_appservice_discord
|
|
||||||
# password: some_password
|
|
||||||
# - name: matrix_appservice_slack
|
|
||||||
# username: matrix_appservice_slack
|
|
||||||
# password: some_password
|
|
||||||
matrix_postgres_additional_databases: []
|
|
||||||
|
|
||||||
# A list of roles/users to avoid creating when importing (or upgrading) the database.
|
|
||||||
# If a dump file contains the roles and they've also been created beforehand (see `matrix_postgres_additional_databases`),
|
|
||||||
# importing would fail.
|
|
||||||
# We either need to not create them or to ignore the `CREATE ROLE` statements in the dump.
|
|
||||||
matrix_postgres_import_roles_to_ignore: |
|
|
||||||
{{
|
|
||||||
(
|
|
||||||
[matrix_postgres_connection_username]
|
|
||||||
+
|
|
||||||
matrix_postgres_additional_databases|map(attribute='username') | list
|
|
||||||
) | unique
|
|
||||||
}}
|
|
||||||
|
|
||||||
# When importing an existing Postgres database (when restoring a backup) or when doing a Postgres upgrade (which dumps & restores), we'd like to avoid:
|
|
||||||
# - creating users (`CREATE ROLE ..`)
|
|
||||||
# - updating passwords for users (`ALTER ROLE matrix WITH SUPERUSER INHERIT NOCREATEROLE NOCREATEDB LOGIN NOREPLICATION NOBYPASSRLS PASSWORD 'md5...`)
|
|
||||||
#
|
|
||||||
# Both of these operations are done by the playbook anyway.
|
|
||||||
# Updating passwords is especially undesirable, because older versions hash passwords using md5 and export them as md5 hashes in the dump file,
|
|
||||||
# which is unsupported by default by newer Postgres versions (v14+).
|
|
||||||
# When users are created and passwords are set by the playbook, they end up hashed as `scram-sha-256` on Postgres v14+.
|
|
||||||
# If an md5-hashed password is restored on top, Postgres v14+ will refuse to authenticate users with it by default.
|
|
||||||
#
|
|
||||||
# We also allow for the role name to be quoted, which is rare, but might happen for role names which are special keywords (e.g. `default`).
|
|
||||||
matrix_postgres_import_roles_ignore_regex: "^(CREATE|ALTER) ROLE \\\"?({{ matrix_postgres_import_roles_to_ignore | join('|') }})\\\"?(;| WITH)" # noqa jinja[spacing]
|
|
||||||
|
|
||||||
# A list of databases to avoid creating when importing (or upgrading) the database.
|
|
||||||
# If a dump file contains the databases and they've also been created beforehand (see `matrix_postgres_additional_databases`),
|
|
||||||
# importing would fail.
|
|
||||||
# We either need to not create them or to ignore the `CREATE DATABASE` statements in the dump.
|
|
||||||
matrix_postgres_import_databases_to_ignore: |
|
|
||||||
{{
|
|
||||||
(
|
|
||||||
[matrix_postgres_db_name]
|
|
||||||
+
|
|
||||||
matrix_postgres_additional_databases|map(attribute='name') | list
|
|
||||||
) | unique
|
|
||||||
}}
|
|
||||||
|
|
||||||
# We also allow for the database name to be quoted, which is rare, but might happen for database names which are special keywords (e.g. `default`).
|
|
||||||
matrix_postgres_import_databases_ignore_regex: "^CREATE DATABASE \\\"?({{ matrix_postgres_import_databases_to_ignore | join('|') }})\\\"?\\s" # noqa jinja[spacing]
|
|
||||||
|
|
||||||
# The number of seconds to wait after starting `matrix-postgres.service`
|
|
||||||
# and before trying to run queries for creating additional databases/users against it.
|
|
||||||
#
|
|
||||||
# For most (subsequent) runs, Postgres would already be running, so no waiting will be happening at all.
|
|
||||||
#
|
|
||||||
# On ARM, we wait some more. ARM32 devices are especially known for being slow.
|
|
||||||
# ARM64 likely don't need such a long delay, but it doesn't hurt too much having it.
|
|
||||||
matrix_postgres_additional_databases_postgres_start_wait_timeout_seconds: "{{ 45 if matrix_postgres_architecture in ['arm32', 'arm64'] else 15 }}"
|
|
||||||
|
|
||||||
|
|
||||||
matrix_postgres_pgloader_container_image_self_build: false
|
|
||||||
matrix_postgres_pgloader_container_image_self_build_repo: "https://github.com/illagrenan/pgloader-docker.git"
|
|
||||||
matrix_postgres_pgloader_container_image_self_build_repo_branch: "v{{ matrix_postgres_pgloader_docker_image_tag }}"
|
|
||||||
matrix_postgres_pgloader_container_image_self_build_src_path: "{{ matrix_postgres_base_path }}/pgloader-container-src"
|
|
||||||
|
|
||||||
# We use illagrenan/pgloader, instead of the more official dimitri/pgloader image,
|
|
||||||
# because the official one only provides a `latest` tag.
|
|
||||||
matrix_postgres_pgloader_docker_image: "{{ matrix_postgres_pgloader_docker_image_name_prefix }}illagrenan/pgloader:{{ matrix_postgres_pgloader_docker_image_tag }}"
|
|
||||||
matrix_postgres_pgloader_docker_image_name_prefix: "{{ 'localhost/' if matrix_postgres_pgloader_container_image_self_build else matrix_container_global_registry_prefix }}"
|
|
||||||
matrix_postgres_pgloader_docker_image_tag: "3.6.2"
|
|
||||||
matrix_postgres_pgloader_docker_image_force_pull: "{{ matrix_postgres_pgloader_docker_image.endswith(':latest') }}"
|
|
|
@ -1,75 +0,0 @@
|
||||||
---
|
|
||||||
|
|
||||||
# This utility aims to determine if there is some existing Postgres version in use or not.
|
|
||||||
# If there is, it also tries to detect the Docker image that corresponds to that version.
|
|
||||||
#
|
|
||||||
# This utility is intentionally not in `tasks/util`, because if it were, it wouldn't be possible
|
|
||||||
# to include it in other roles via the import_role module: https://docs.ansible.com/ansible/latest/collections/ansible/builtin/import_role_module.html
|
|
||||||
|
|
||||||
|
|
||||||
- name: Fail detection if expectation fails (Postgres not enabled)
|
|
||||||
ansible.builtin.fail:
|
|
||||||
msg: "Trying to detect the version of the built-in Postgres server, but Postgres installation is not enabled (`matrix_postgres_enabled: false`)"
|
|
||||||
when: not matrix_postgres_enabled
|
|
||||||
|
|
||||||
- name: Initialize Postgres version determination variables (default to empty)
|
|
||||||
ansible.builtin.set_fact:
|
|
||||||
matrix_postgres_detection_pg_version_path: "{{ matrix_postgres_data_path }}/PG_VERSION"
|
|
||||||
matrix_postgres_detected_existing: false
|
|
||||||
matrix_postgres_detected_version: ""
|
|
||||||
matrix_postgres_detected_version_corresponding_docker_image: ""
|
|
||||||
|
|
||||||
- name: Determine existing Postgres version (check PG_VERSION file)
|
|
||||||
ansible.builtin.stat:
|
|
||||||
path: "{{ matrix_postgres_detection_pg_version_path }}"
|
|
||||||
register: result_pg_version_stat
|
|
||||||
|
|
||||||
- ansible.builtin.set_fact:
|
|
||||||
matrix_postgres_detected_existing: true
|
|
||||||
when: "result_pg_version_stat.stat.exists"
|
|
||||||
|
|
||||||
- name: Determine existing Postgres version (read PG_VERSION file)
|
|
||||||
ansible.builtin.slurp:
|
|
||||||
src: "{{ matrix_postgres_detection_pg_version_path }}"
|
|
||||||
register: result_pg_version
|
|
||||||
when: matrix_postgres_detected_existing | bool
|
|
||||||
|
|
||||||
- name: Determine existing Postgres version (make sense of PG_VERSION file)
|
|
||||||
ansible.builtin.set_fact:
|
|
||||||
matrix_postgres_detected_version: "{{ result_pg_version['content'] | b64decode | replace('\n', '') }}"
|
|
||||||
when: matrix_postgres_detected_existing | bool
|
|
||||||
|
|
||||||
- name: Determine corresponding Docker image to detected version (assume default of latest)
|
|
||||||
ansible.builtin.set_fact:
|
|
||||||
matrix_postgres_detected_version_corresponding_docker_image: "{{ matrix_postgres_docker_image_latest }}"
|
|
||||||
when: "matrix_postgres_detected_version != ''"
|
|
||||||
|
|
||||||
- name: Determine corresponding Docker image to detected version (use 9.x, if detected)
|
|
||||||
ansible.builtin.set_fact:
|
|
||||||
matrix_postgres_detected_version_corresponding_docker_image: "{{ matrix_postgres_docker_image_v9 }}"
|
|
||||||
when: "matrix_postgres_detected_version.startswith('9.')"
|
|
||||||
|
|
||||||
- name: Determine corresponding Docker image to detected version (use 10.x, if detected)
|
|
||||||
ansible.builtin.set_fact:
|
|
||||||
matrix_postgres_detected_version_corresponding_docker_image: "{{ matrix_postgres_docker_image_v10 }}"
|
|
||||||
when: "matrix_postgres_detected_version == '10' or matrix_postgres_detected_version.startswith('10.')"
|
|
||||||
|
|
||||||
- name: Determine corresponding Docker image to detected version (use 11.x, if detected)
|
|
||||||
ansible.builtin.set_fact:
|
|
||||||
matrix_postgres_detected_version_corresponding_docker_image: "{{ matrix_postgres_docker_image_v11 }}"
|
|
||||||
when: "matrix_postgres_detected_version == '11' or matrix_postgres_detected_version.startswith('11.')"
|
|
||||||
|
|
||||||
- name: Determine corresponding Docker image to detected version (use 12.x, if detected)
|
|
||||||
ansible.builtin.set_fact:
|
|
||||||
matrix_postgres_detected_version_corresponding_docker_image: "{{ matrix_postgres_docker_image_v12 }}"
|
|
||||||
when: "matrix_postgres_detected_version == '12' or matrix_postgres_detected_version.startswith('12.')"
|
|
||||||
|
|
||||||
- name: Determine corresponding Docker image to detected version (use 13.x, if detected)
|
|
||||||
ansible.builtin.set_fact:
|
|
||||||
matrix_postgres_detected_version_corresponding_docker_image: "{{ matrix_postgres_docker_image_v13 }}"
|
|
||||||
when: "matrix_postgres_detected_version == '13' or matrix_postgres_detected_version.startswith('13.')"
|
|
||||||
|
|
||||||
- name: Determine corresponding Docker image to detected version (use 14.x, if detected)
|
|
||||||
ansible.builtin.set_fact:
|
|
||||||
matrix_postgres_detected_version_corresponding_docker_image: "{{ matrix_postgres_docker_image_v14 }}"
|
|
||||||
when: "matrix_postgres_detected_version == '14' or matrix_postgres_detected_version.startswith('14.')"
|
|
|
@ -1,102 +0,0 @@
|
||||||
---
|
|
||||||
|
|
||||||
# Pre-checks
|
|
||||||
|
|
||||||
- name: Fail if Postgres not enabled
|
|
||||||
ansible.builtin.fail:
|
|
||||||
msg: "Postgres via the matrix-postgres role is not enabled (`matrix_postgres_enabled`). Cannot import."
|
|
||||||
when: "not matrix_postgres_enabled | bool"
|
|
||||||
|
|
||||||
- name: Fail if playbook called incorrectly
|
|
||||||
ansible.builtin.fail:
|
|
||||||
msg: "The `sqlite_database_path` variable needs to be provided to this playbook, via --extra-vars"
|
|
||||||
when: "sqlite_database_path is not defined or sqlite_database_path.startswith('<')"
|
|
||||||
|
|
||||||
- name: Check if the provided SQLite database file exists
|
|
||||||
ansible.builtin.stat:
|
|
||||||
path: "{{ sqlite_database_path }}"
|
|
||||||
register: sqlite_database_path_stat_result
|
|
||||||
|
|
||||||
- name: Fail if provided SQLite database file doesn't exist
|
|
||||||
ansible.builtin.fail:
|
|
||||||
msg: "File cannot be found on the server at {{ sqlite_database_path }}"
|
|
||||||
when: "not sqlite_database_path_stat_result.stat.exists"
|
|
||||||
|
|
||||||
# We either expect `postgres_db_connection_string` specifying a full Postgres database connection string,
|
|
||||||
# or `postgres_connection_string_variable_name`, specifying a name of a variable, which contains a valid connection string.
|
|
||||||
|
|
||||||
- when: 'postgres_connection_string_variable_name is defined'
|
|
||||||
block:
|
|
||||||
- name: Fail if postgres_connection_string_variable_name points to an undefined variable
|
|
||||||
ansible.builtin.fail:
|
|
||||||
msg: "postgres_connection_string_variable_name is defined, but there is no variable with the name `{{ postgres_connection_string_variable_name }}`"
|
|
||||||
when: "postgres_connection_string_variable_name not in vars"
|
|
||||||
|
|
||||||
- name: Get Postgres connection string from variable
|
|
||||||
ansible.builtin.set_fact:
|
|
||||||
postgres_db_connection_string: "{{ lookup('vars', postgres_connection_string_variable_name) }}"
|
|
||||||
|
|
||||||
- name: Fail if playbook called incorrectly
|
|
||||||
ansible.builtin.fail:
|
|
||||||
msg: >-
|
|
||||||
Either a `postgres_db_connection_string` variable or a `postgres_connection_string_variable_name` needs to be provided to this playbook, via `--extra-vars`.
|
|
||||||
Example: `--extra-vars="postgres_db_connection_string=postgresql://username:password@localhost:<port>/database_name"` or `--extra-vars="postgres_connection_string_variable_name=matrix_appservice_discord_database_connString"`
|
|
||||||
when: "postgres_db_connection_string is not defined or not postgres_db_connection_string.startswith('postgresql://')"
|
|
||||||
|
|
||||||
|
|
||||||
# Defaults
|
|
||||||
|
|
||||||
- name: Set postgres_start_wait_time, if not provided
|
|
||||||
ansible.builtin.set_fact:
|
|
||||||
postgres_start_wait_time: 15
|
|
||||||
when: "postgres_start_wait_time | default('') == ''"
|
|
||||||
|
|
||||||
|
|
||||||
# Actual import work
|
|
||||||
|
|
||||||
- name: Ensure matrix-postgres is started
|
|
||||||
ansible.builtin.service:
|
|
||||||
name: matrix-postgres
|
|
||||||
state: started
|
|
||||||
daemon_reload: true
|
|
||||||
register: matrix_postgres_service_start_result
|
|
||||||
|
|
||||||
- name: Wait a bit, so that Postgres can start
|
|
||||||
ansible.builtin.wait_for:
|
|
||||||
timeout: "{{ postgres_start_wait_time }}"
|
|
||||||
delegate_to: 127.0.0.1
|
|
||||||
become: false
|
|
||||||
when: "matrix_postgres_service_start_result.changed | bool"
|
|
||||||
|
|
||||||
- name: Import SQLite database from {{ sqlite_database_path }} into Postgres # noqa name[template]
|
|
||||||
ansible.builtin.command:
|
|
||||||
cmd: >-
|
|
||||||
{{ devture_systemd_docker_base_host_command_docker }} run
|
|
||||||
--rm
|
|
||||||
--user={{ matrix_user_uid }}:{{ matrix_user_gid }}
|
|
||||||
--cap-drop=ALL
|
|
||||||
--network={{ matrix_docker_network }}
|
|
||||||
--mount type=bind,src={{ sqlite_database_path }},dst=/in.db,ro
|
|
||||||
--entrypoint=/bin/sh
|
|
||||||
{{ matrix_postgres_pgloader_docker_image }}
|
|
||||||
-c
|
|
||||||
'pgloader /in.db {{ postgres_db_connection_string }}'
|
|
||||||
register: matrix_postgres_import_generic_sqlite_db_import_result
|
|
||||||
changed_when: matrix_postgres_import_generic_sqlite_db_import_result.rc == 0
|
|
||||||
|
|
||||||
- name: Archive SQLite database ({{ sqlite_database_path }} -> {{ sqlite_database_path }}.backup) # noqa name[template]
|
|
||||||
ansible.builtin.command:
|
|
||||||
cmd: "mv {{ sqlite_database_path }} {{ sqlite_database_path }}.backup"
|
|
||||||
register: matrix_postgres_import_generic_sqlite_db_move_result
|
|
||||||
changed_when: matrix_postgres_import_generic_sqlite_db_move_result.rc == 0
|
|
||||||
|
|
||||||
- name: Inject result
|
|
||||||
ansible.builtin.set_fact:
|
|
||||||
devture_playbook_runtime_messages_list: |
|
|
||||||
{{
|
|
||||||
devture_playbook_runtime_messages_list | default([])
|
|
||||||
+
|
|
||||||
[
|
|
||||||
"NOTE: Your SQLite database file has been imported into Postgres. The original file has been moved from `{{ sqlite_database_path }}` to `{{ sqlite_database_path }}.backup`. When you've confirmed that the import went well and everything works, you should be able to safely delete this file."
|
|
||||||
]
|
|
||||||
}}
|
|
|
@ -1,114 +0,0 @@
|
||||||
---
|
|
||||||
|
|
||||||
# Pre-checks
|
|
||||||
|
|
||||||
- name: Fail if Postgres not enabled
|
|
||||||
ansible.builtin.fail:
|
|
||||||
msg: "Postgres via the matrix-postgres role is not enabled (`matrix_postgres_enabled`). Cannot import."
|
|
||||||
when: "not matrix_postgres_enabled | bool"
|
|
||||||
|
|
||||||
- name: Fail if playbook called incorrectly
|
|
||||||
ansible.builtin.fail:
|
|
||||||
msg: "The `server_path_postgres_dump` variable needs to be provided to this playbook, via --extra-vars"
|
|
||||||
when: "server_path_postgres_dump is not defined or server_path_postgres_dump.startswith('<')"
|
|
||||||
|
|
||||||
- name: Check if the provided Postgres dump file exists
|
|
||||||
ansible.builtin.stat:
|
|
||||||
path: "{{ server_path_postgres_dump }}"
|
|
||||||
register: result_server_path_postgres_dump_stat
|
|
||||||
|
|
||||||
- name: Fail if provided Postgres dump file doesn't exists
|
|
||||||
ansible.builtin.fail:
|
|
||||||
msg: "File cannot be found on the server at {{ server_path_postgres_dump }}"
|
|
||||||
when: "not result_server_path_postgres_dump_stat.stat.exists"
|
|
||||||
|
|
||||||
|
|
||||||
# Defaults
|
|
||||||
|
|
||||||
- name: Set postgres_start_wait_time, if not provided
|
|
||||||
ansible.builtin.set_fact:
|
|
||||||
postgres_start_wait_time: 15
|
|
||||||
when: "postgres_start_wait_time | default('') == ''"
|
|
||||||
|
|
||||||
- name: Set postgres_import_wait_time, if not provided
|
|
||||||
ansible.builtin.set_fact:
|
|
||||||
postgres_import_wait_time: "{{ 7 * 86400 }}"
|
|
||||||
when: "postgres_import_wait_time | default('') == ''"
|
|
||||||
|
|
||||||
# By default, we connect and import into the main (`matrix`) database.
|
|
||||||
# Single-database dumps for Synapse may wish to import into `synapse` instead.
|
|
||||||
- name: Set postgres_default_import_database, if not provided
|
|
||||||
ansible.builtin.set_fact:
|
|
||||||
postgres_default_import_database: "{{ matrix_postgres_db_name }}"
|
|
||||||
when: "postgres_default_import_database | default('') == ''"
|
|
||||||
|
|
||||||
# Actual import work
|
|
||||||
|
|
||||||
- name: Ensure matrix-postgres is started
|
|
||||||
ansible.builtin.service:
|
|
||||||
name: matrix-postgres
|
|
||||||
state: started
|
|
||||||
daemon_reload: true
|
|
||||||
register: matrix_postgres_import_start_result
|
|
||||||
|
|
||||||
- name: Wait a bit, so that Postgres can start
|
|
||||||
when: matrix_postgres_import_start_result.changed | bool
|
|
||||||
ansible.builtin.wait_for:
|
|
||||||
timeout: "{{ postgres_start_wait_time }}"
|
|
||||||
delegate_to: 127.0.0.1
|
|
||||||
become: false
|
|
||||||
|
|
||||||
- ansible.builtin.import_tasks: tasks/detect_existing_postgres_version.yml
|
|
||||||
|
|
||||||
- name: Abort, if no existing Postgres version detected
|
|
||||||
ansible.builtin.fail:
|
|
||||||
msg: "Could not find existing Postgres installation"
|
|
||||||
when: "not matrix_postgres_detected_existing | bool"
|
|
||||||
|
|
||||||
# Starting the database container had automatically created the default
|
|
||||||
# role (`matrix_postgres_connection_username`) and database (`matrix_postgres_db_name`).
|
|
||||||
# The dump most likely contains those same entries and would try to re-create them, leading to errors.
|
|
||||||
# We need to skip over those lines.
|
|
||||||
- name: Generate Postgres database import command
|
|
||||||
ansible.builtin.set_fact:
|
|
||||||
matrix_postgres_import_command: >-
|
|
||||||
{{ devture_systemd_docker_base_host_command_docker }} run --rm --name matrix-postgres-import
|
|
||||||
--log-driver=none
|
|
||||||
--user={{ matrix_user_uid }}:{{ matrix_user_gid }}
|
|
||||||
--cap-drop=ALL
|
|
||||||
--network={{ matrix_docker_network }}
|
|
||||||
--env-file={{ matrix_postgres_base_path }}/env-postgres-psql
|
|
||||||
--mount type=bind,src={{ server_path_postgres_dump }},dst=/{{ server_path_postgres_dump | basename }},ro
|
|
||||||
--entrypoint=/bin/sh
|
|
||||||
{{ matrix_postgres_docker_image_latest }}
|
|
||||||
-c "cat /{{ server_path_postgres_dump | basename }} |
|
|
||||||
{{ 'gunzip |' if server_path_postgres_dump.endswith('.gz') else '' }}
|
|
||||||
grep -vE '{{ matrix_postgres_import_roles_ignore_regex }}' |
|
|
||||||
grep -vE '{{ matrix_postgres_import_databases_ignore_regex }}' |
|
|
||||||
psql -v ON_ERROR_STOP=1 -h matrix-postgres --dbname={{ postgres_default_import_database }}"
|
|
||||||
tags:
|
|
||||||
- skip_ansible_lint
|
|
||||||
|
|
||||||
# This is a hack.
|
|
||||||
# See: https://ansibledaily.com/print-to-standard-output-without-escaping/
|
|
||||||
#
|
|
||||||
# We want to run `debug: msg=".."`, but that dumps it as JSON and escapes double quotes within it,
|
|
||||||
# which ruins the command (`matrix_postgres_import_command`)
|
|
||||||
- name: Note about Postgres importing alternative
|
|
||||||
ansible.builtin.set_fact:
|
|
||||||
dummy: true
|
|
||||||
with_items:
|
|
||||||
- >-
|
|
||||||
Importing Postgres database using the following command: `{{ matrix_postgres_import_command }}`.
|
|
||||||
If this crashes, you can stop Postgres (`systemctl stop matrix-postgres`),
|
|
||||||
delete its existing data (`rm -rf {{ matrix_postgres_data_path }}/*`), start it again (`systemctl start matrix-postgres`)
|
|
||||||
and manually run the above import command directly on the server.
|
|
||||||
|
|
||||||
- name: Perform Postgres database import
|
|
||||||
ansible.builtin.command:
|
|
||||||
cmd: "{{ matrix_postgres_import_command }}"
|
|
||||||
async: "{{ postgres_import_wait_time }}"
|
|
||||||
poll: 10
|
|
||||||
register: matrix_postgres_import_postgres_command_result
|
|
||||||
failed_when: not matrix_postgres_import_postgres_command_result.finished or matrix_postgres_import_postgres_command_result.rc != 0
|
|
||||||
changed_when: matrix_postgres_import_postgres_command_result.finished and matrix_postgres_import_postgres_command_result.rc == 0
|
|
|
@ -1,89 +0,0 @@
|
||||||
---
|
|
||||||
|
|
||||||
# Pre-checks
|
|
||||||
|
|
||||||
- name: Fail if Postgres not enabled
|
|
||||||
ansible.builtin.fail:
|
|
||||||
msg: "Postgres via the matrix-postgres role is not enabled (`matrix_postgres_enabled`). Cannot import."
|
|
||||||
when: "not matrix_postgres_enabled | bool"
|
|
||||||
|
|
||||||
- name: Fail if playbook called incorrectly
|
|
||||||
ansible.builtin.fail:
|
|
||||||
msg: "The `server_path_homeserver_db` variable needs to be provided to this playbook, via --extra-vars"
|
|
||||||
when: "server_path_homeserver_db is not defined or server_path_homeserver_db.startswith('<')"
|
|
||||||
|
|
||||||
- name: Check if the provided SQLite homeserver.db file exists
|
|
||||||
ansible.builtin.stat:
|
|
||||||
path: "{{ server_path_homeserver_db }}"
|
|
||||||
register: result_server_path_homeserver_db_stat
|
|
||||||
|
|
||||||
- name: Fail if provided SQLite homeserver.db file doesn't exist
|
|
||||||
ansible.builtin.fail:
|
|
||||||
msg: "File cannot be found on the server at {{ server_path_homeserver_db }}"
|
|
||||||
when: "not result_server_path_homeserver_db_stat.stat.exists"
|
|
||||||
|
|
||||||
|
|
||||||
# Defaults
|
|
||||||
|
|
||||||
- name: Set postgres_start_wait_time, if not provided
|
|
||||||
ansible.builtin.set_fact:
|
|
||||||
postgres_start_wait_time: 15
|
|
||||||
when: "postgres_start_wait_time | default('') == ''"
|
|
||||||
|
|
||||||
|
|
||||||
# Actual import work
|
|
||||||
|
|
||||||
- name: Ensure matrix-postgres is stopped
|
|
||||||
ansible.builtin.service:
|
|
||||||
name: matrix-postgres
|
|
||||||
state: stopped
|
|
||||||
daemon_reload: true
|
|
||||||
|
|
||||||
- name: Ensure postgres data is wiped out
|
|
||||||
ansible.builtin.file:
|
|
||||||
path: "{{ matrix_postgres_data_path }}"
|
|
||||||
state: absent
|
|
||||||
|
|
||||||
- name: Ensure postgres data path exists
|
|
||||||
ansible.builtin.file:
|
|
||||||
path: "{{ matrix_postgres_data_path }}"
|
|
||||||
state: directory
|
|
||||||
mode: 0700
|
|
||||||
owner: "{{ matrix_user_username }}"
|
|
||||||
group: "{{ matrix_user_groupname }}"
|
|
||||||
|
|
||||||
- name: Ensure matrix-postgres is started
|
|
||||||
ansible.builtin.service:
|
|
||||||
name: matrix-postgres
|
|
||||||
state: restarted
|
|
||||||
daemon_reload: true
|
|
||||||
|
|
||||||
- name: Wait a bit, so that Postgres can start
|
|
||||||
ansible.builtin.wait_for:
|
|
||||||
timeout: "{{ postgres_start_wait_time }}"
|
|
||||||
delegate_to: 127.0.0.1
|
|
||||||
become: false
|
|
||||||
|
|
||||||
# We don't use the `docker_container` module, because using it with `cap_drop` requires
|
|
||||||
# a very recent version, which is not available for a lot of people yet.
|
|
||||||
#
|
|
||||||
# Also, some old `docker_container` versions were buggy and would leave containers behind
|
|
||||||
# on failure, which we had to work around to allow retries (by re-running the playbook).
|
|
||||||
- name: Import SQLite database into Postgres
|
|
||||||
ansible.builtin.command:
|
|
||||||
cmd: |
|
|
||||||
docker run
|
|
||||||
--rm
|
|
||||||
--name=matrix-synapse-migrate
|
|
||||||
--log-driver=none
|
|
||||||
--user={{ matrix_user_uid }}:{{ matrix_user_gid }}
|
|
||||||
--cap-drop=ALL
|
|
||||||
--network={{ matrix_docker_network }}
|
|
||||||
--entrypoint=python
|
|
||||||
--mount type=bind,src={{ matrix_synapse_config_dir_path }},dst=/data
|
|
||||||
--mount type=bind,src={{ matrix_synapse_config_dir_path }},dst=/matrix-media-store-parent/media-store
|
|
||||||
--mount type=bind,src={{ server_path_homeserver_db }},dst=/{{ server_path_homeserver_db | basename }}
|
|
||||||
{{ matrix_synapse_docker_image_final }}
|
|
||||||
/usr/local/bin/synapse_port_db --sqlite-database /{{ server_path_homeserver_db | basename }} --postgres-config /data/homeserver.yaml
|
|
||||||
register: matrix_postgres_import_synapse_sqlite_db_result
|
|
||||||
changed_when: matrix_postgres_import_synapse_sqlite_db_result.rc == 0
|
|
|
@ -1,43 +0,0 @@
|
||||||
---
|
|
||||||
|
|
||||||
- ansible.builtin.import_tasks: "{{ role_path }}/tasks/validate_config.yml"
|
|
||||||
when: "run_setup | bool and matrix_postgres_enabled | bool"
|
|
||||||
tags:
|
|
||||||
- setup-all
|
|
||||||
- setup-postgres
|
|
||||||
- install-postgres
|
|
||||||
|
|
||||||
- ansible.builtin.import_tasks: "{{ role_path }}/tasks/setup_postgres.yml"
|
|
||||||
when: run_setup | bool
|
|
||||||
tags:
|
|
||||||
- setup-all
|
|
||||||
- setup-postgres
|
|
||||||
- install-postgres
|
|
||||||
|
|
||||||
- ansible.builtin.import_tasks: "{{ role_path }}/tasks/import_postgres.yml"
|
|
||||||
when: run_postgres_import | bool
|
|
||||||
tags:
|
|
||||||
- import-postgres
|
|
||||||
|
|
||||||
# The `run_postgres_import_sqlite_db` variable had better be renamed to be consistent,
|
|
||||||
# but that's a breaking change which may cause trouble for people.
|
|
||||||
- ansible.builtin.import_tasks: "{{ role_path }}/tasks/import_synapse_sqlite_db.yml"
|
|
||||||
when: run_postgres_import_sqlite_db | bool
|
|
||||||
tags:
|
|
||||||
- import-synapse-sqlite-db
|
|
||||||
|
|
||||||
# Perhaps we need a new variable here, instead of `run_postgres_import_sqlite_db`.
|
|
||||||
- ansible.builtin.import_tasks: "{{ role_path }}/tasks/import_generic_sqlite_db.yml"
|
|
||||||
when: run_postgres_import_sqlite_db | bool
|
|
||||||
tags:
|
|
||||||
- import-generic-sqlite-db
|
|
||||||
|
|
||||||
- ansible.builtin.import_tasks: "{{ role_path }}/tasks/upgrade_postgres.yml"
|
|
||||||
when: run_postgres_upgrade | bool
|
|
||||||
tags:
|
|
||||||
- upgrade-postgres
|
|
||||||
|
|
||||||
- ansible.builtin.import_tasks: "{{ role_path }}/tasks/run_vacuum.yml"
|
|
||||||
when: run_postgres_vacuum | bool
|
|
||||||
tags:
|
|
||||||
- run-postgres-vacuum
|
|
|
@ -1,176 +0,0 @@
|
||||||
---
|
|
||||||
|
|
||||||
- name: Fail if Postgres not enabled
|
|
||||||
ansible.builtin.fail:
|
|
||||||
msg: "Postgres via the matrix-postgres role is not enabled (`matrix_postgres_enabled`). Cannot migrate."
|
|
||||||
when: "not matrix_postgres_enabled | bool"
|
|
||||||
|
|
||||||
- name: Fail if util called incorrectly (missing matrix_postgres_db_migration_request)
|
|
||||||
ansible.builtin.fail:
|
|
||||||
msg: "The `matrix_postgres_db_migration_request` variable needs to be provided to this util."
|
|
||||||
when: "matrix_postgres_db_migration_request is not defined"
|
|
||||||
|
|
||||||
- name: Fail if util called incorrectly (invalid matrix_postgres_db_migration_request)
|
|
||||||
ansible.builtin.fail:
|
|
||||||
msg: "The `matrix_postgres_db_migration_request` variable needs to contain `{{ item }}`."
|
|
||||||
with_items:
|
|
||||||
- src
|
|
||||||
- dst
|
|
||||||
- caller
|
|
||||||
- engine_variable_name
|
|
||||||
- systemd_services_to_stop
|
|
||||||
when: "item not in matrix_postgres_db_migration_request"
|
|
||||||
|
|
||||||
- name: Check if the provided source database file exists
|
|
||||||
ansible.builtin.stat:
|
|
||||||
path: "{{ matrix_postgres_db_migration_request.src }}"
|
|
||||||
register: matrix_postgres_db_migration_request_src_stat_result
|
|
||||||
|
|
||||||
- name: Fail if provided source database file doesn't exist
|
|
||||||
ansible.builtin.fail:
|
|
||||||
msg: "File cannot be found on the server at {{ matrix_postgres_db_migration_request.src }}"
|
|
||||||
when: "not matrix_postgres_db_migration_request_src_stat_result.stat.exists"
|
|
||||||
|
|
||||||
- when: "matrix_postgres_pgloader_container_image_self_build | bool"
|
|
||||||
block:
|
|
||||||
- name: Ensure pgloader repository is present on self-build
|
|
||||||
ansible.builtin.git:
|
|
||||||
repo: "{{ matrix_postgres_pgloader_container_image_self_build_repo }}"
|
|
||||||
dest: "{{ matrix_postgres_pgloader_container_image_self_build_src_path }}"
|
|
||||||
version: "{{ matrix_postgres_pgloader_container_image_self_build_repo_branch }}"
|
|
||||||
force: "yes"
|
|
||||||
become: true
|
|
||||||
become_user: "{{ matrix_user_username }}"
|
|
||||||
register: matrix_postgres_pgloader_git_pull_results
|
|
||||||
|
|
||||||
# If `stable` is used, we hit an error when processing /opt/src/pgloader/build/quicklisp/dists/quicklisp/software/uax-15-20201220-git/data/CompositionExclusions.txt:
|
|
||||||
# > the octet sequence #(194) cannot be decoded
|
|
||||||
#
|
|
||||||
# The issue is described here and is not getting fixed for months: https://github.com/dimitri/pgloader/pull/1179
|
|
||||||
#
|
|
||||||
# Although we're not using the dimitri/pgloader image, the one we're using suffers from the same problem.
|
|
||||||
- name: Switch pgloader base image from Debian stable (likely 10.x/Buster) to Bullseye
|
|
||||||
ansible.builtin.lineinfile:
|
|
||||||
path: "{{ matrix_postgres_pgloader_container_image_self_build_src_path }}/Dockerfile"
|
|
||||||
regexp: "{{ item.match }}"
|
|
||||||
line: "{{ item.replace }}"
|
|
||||||
with_items:
|
|
||||||
- match: '^FROM debian:stable-slim as builder$'
|
|
||||||
replace: 'FROM debian:bullseye-slim as builder'
|
|
||||||
- match: '^FROM debian:stable-slim$'
|
|
||||||
replace: 'FROM debian:bullseye-slim'
|
|
||||||
|
|
||||||
- name: Ensure pgloader Docker image is built
|
|
||||||
community.docker.docker_image:
|
|
||||||
name: "{{ matrix_postgres_pgloader_docker_image }}"
|
|
||||||
source: build
|
|
||||||
force_source: "{{ matrix_postgres_pgloader_git_pull_results.changed if ansible_version.major > 2 or ansible_version.minor >= 8 else omit }}"
|
|
||||||
force: "{{ omit if ansible_version.major > 2 or ansible_version.minor >= 8 else matrix_postgres_pgloader_git_pull_results.changed }}"
|
|
||||||
build:
|
|
||||||
dockerfile: Dockerfile
|
|
||||||
path: "{{ matrix_postgres_pgloader_container_image_self_build_src_path }}"
|
|
||||||
pull: true
|
|
||||||
|
|
||||||
- name: Ensure pgloader Docker image is pulled
|
|
||||||
community.docker.docker_image:
|
|
||||||
name: "{{ matrix_postgres_pgloader_docker_image }}"
|
|
||||||
source: "{{ 'pull' if ansible_version.major > 2 or ansible_version.minor > 7 else omit }}"
|
|
||||||
force_source: "{{ matrix_postgres_pgloader_docker_image_force_pull if ansible_version.major > 2 or ansible_version.minor >= 8 else omit }}"
|
|
||||||
force: "{{ omit if ansible_version.major > 2 or ansible_version.minor >= 8 else matrix_postgres_pgloader_docker_image_force_pull }}"
|
|
||||||
when: "not matrix_postgres_pgloader_container_image_self_build"
|
|
||||||
|
|
||||||
# Defaults
|
|
||||||
|
|
||||||
- name: Set postgres_start_wait_time, if not provided
|
|
||||||
ansible.builtin.set_fact:
|
|
||||||
postgres_start_wait_time: 15
|
|
||||||
when: "postgres_start_wait_time | default('') == ''"
|
|
||||||
|
|
||||||
# Actual import work
|
|
||||||
|
|
||||||
# matrix-postgres is most likely started already
|
|
||||||
- name: Ensure matrix-postgres is started
|
|
||||||
ansible.builtin.service:
|
|
||||||
name: matrix-postgres
|
|
||||||
state: started
|
|
||||||
daemon_reload: true
|
|
||||||
register: matrix_postgres_service_start_result
|
|
||||||
|
|
||||||
- name: Wait a bit, so that Postgres can start
|
|
||||||
ansible.builtin.wait_for:
|
|
||||||
timeout: "{{ postgres_start_wait_time }}"
|
|
||||||
delegate_to: 127.0.0.1
|
|
||||||
become: false
|
|
||||||
when: "matrix_postgres_service_start_result.changed | bool"
|
|
||||||
|
|
||||||
# We only stop services here, leaving it to the caller to start them later.
|
|
||||||
#
|
|
||||||
# We can't start them, because they probably need to be reconfigured too (changing the configuration from using SQLite to Postgres, etc.),
|
|
||||||
# before starting.
|
|
||||||
#
|
|
||||||
# Since the caller will be starting them, it might make sense to leave stopping to it as well.
|
|
||||||
# However, we don't do it, because it's simpler having it here, and it also gets to happen only if we'll be doing an import.
|
|
||||||
# If we bailed out (somewhere above), nothing would have gotten stopped. It's nice to leave this running in such cases.
|
|
||||||
- name: Ensure systemd services blocking the database import are stopped
|
|
||||||
ansible.builtin.service:
|
|
||||||
name: "{{ item }}"
|
|
||||||
state: stopped
|
|
||||||
failed_when: false
|
|
||||||
with_items: "{{ matrix_postgres_db_migration_request.systemd_services_to_stop }}"
|
|
||||||
|
|
||||||
- name: Import {{ matrix_postgres_db_migration_request.engine_old }} database from {{ matrix_postgres_db_migration_request.src }} into Postgres # noqa name[template]
|
|
||||||
ansible.builtin.command:
|
|
||||||
cmd: >-
|
|
||||||
{{ devture_systemd_docker_base_host_command_docker }} run
|
|
||||||
--rm
|
|
||||||
--user={{ matrix_user_uid }}:{{ matrix_user_gid }}
|
|
||||||
--cap-drop=ALL
|
|
||||||
--network={{ matrix_docker_network }}
|
|
||||||
--mount type=bind,src={{ matrix_postgres_db_migration_request.src }},dst=/in.db,ro
|
|
||||||
--entrypoint=/bin/sh
|
|
||||||
{{ matrix_postgres_pgloader_docker_image }}
|
|
||||||
-c
|
|
||||||
'pgloader {{ matrix_postgres_db_migration_request.pgloader_options | default([]) | join(' ') }} /in.db {{ matrix_postgres_db_migration_request.dst }}'
|
|
||||||
register: matrix_postgres_migrate_db_to_postgres_import_result
|
|
||||||
changed_when: matrix_postgres_migrate_db_to_postgres_import_result.rc == 0
|
|
||||||
|
|
||||||
- when: "matrix_postgres_db_migration_request.additional_psql_statements_list | default([]) | length > 0"
|
|
||||||
block:
|
|
||||||
- ansible.builtin.import_role:
|
|
||||||
name: custom/matrix-postgres
|
|
||||||
tasks_from: detect_existing_postgres_version
|
|
||||||
|
|
||||||
- ansible.builtin.set_fact:
|
|
||||||
matrix_postgres_docker_image_to_use: "{{ matrix_postgres_docker_image_latest if matrix_postgres_detected_version_corresponding_docker_image == '' else matrix_postgres_detected_version_corresponding_docker_image }}"
|
|
||||||
|
|
||||||
- name: Execute additional Postgres SQL migration statements
|
|
||||||
ansible.builtin.command:
|
|
||||||
cmd: >-
|
|
||||||
{{ devture_systemd_docker_base_host_command_docker }} run
|
|
||||||
--rm
|
|
||||||
--user={{ matrix_user_uid }}:{{ matrix_user_gid }}
|
|
||||||
--cap-drop=ALL
|
|
||||||
--env-file={{ matrix_postgres_base_path }}/env-postgres-psql
|
|
||||||
--network={{ matrix_docker_network }}
|
|
||||||
{{ matrix_postgres_docker_image_to_use }}
|
|
||||||
psql --host=matrix-postgres --dbname={{ matrix_postgres_db_migration_request.additional_psql_statements_db_name }} --command='{{ item }}'
|
|
||||||
with_items: "{{ matrix_postgres_db_migration_request.additional_psql_statements_list }}"
|
|
||||||
register: matrix_postgres_migrate_db_to_postgres_additional_queries_result
|
|
||||||
changed_when: matrix_postgres_migrate_db_to_postgres_additional_queries_result.rc == 0
|
|
||||||
|
|
||||||
- name: Archive {{ matrix_postgres_db_migration_request.engine_old }} database ({{ matrix_postgres_db_migration_request.src }} -> {{ matrix_postgres_db_migration_request.src }}.backup) # noqa name[template]
|
|
||||||
ansible.builtin.command:
|
|
||||||
cmd: "mv {{ matrix_postgres_db_migration_request.src }} {{ matrix_postgres_db_migration_request.src }}.backup"
|
|
||||||
register: matrix_postgres_migrate_db_to_postgres_move_result
|
|
||||||
changed_when: matrix_postgres_migrate_db_to_postgres_move_result.rc == 0
|
|
||||||
|
|
||||||
- name: Inject result
|
|
||||||
ansible.builtin.set_fact:
|
|
||||||
devture_playbook_runtime_messages_list: |
|
|
||||||
{{
|
|
||||||
devture_playbook_runtime_messages_list | default([])
|
|
||||||
+
|
|
||||||
[
|
|
||||||
"NOTE: Your {{ matrix_postgres_db_migration_request.engine_old }} database file has been imported into Postgres. The original database file has been moved from `{{ matrix_postgres_db_migration_request.src }}` to `{{ matrix_postgres_db_migration_request.src }}.backup`. When you've confirmed that the import went well and everything works, you should be able to safely delete this file."
|
|
||||||
]
|
|
||||||
}}
|
|
|
@ -1,78 +0,0 @@
|
||||||
---
|
|
||||||
|
|
||||||
# We used to store Postgres data directly under `/matrix/postgres` (what is now considered `matrix_postgres_base_path`).
|
|
||||||
#
|
|
||||||
# From now on, we expect to store Postgres data one directory below now (`/matrix/postgres/data` - `matrix_postgres_data_path`).
|
|
||||||
# We wish to use the base directory for other purposes (storing environment variable files, etc.).
|
|
||||||
# Mixing those with the Postgres data is no good and it leads to Postgres's `initdb` complaining to initialize
|
|
||||||
# a database in a non-empty directory.
|
|
||||||
#
|
|
||||||
# For this reason, we store the Postgres data in `/matrix/postgres/data` and need to relocate any installations
|
|
||||||
# which still store it in the parent directory (`/matrix/postgres`).
|
|
||||||
#
|
|
||||||
# This utility is intentionally not in `tasks/util`, because if it were, it wouldn't be possible
|
|
||||||
# to include it in other roles via the import_role module: https://docs.ansible.com/ansible/latest/collections/ansible/builtin/import_role_module.html
|
|
||||||
|
|
||||||
- name: Check if old Postgres data directory is used
|
|
||||||
ansible.builtin.stat:
|
|
||||||
path: "{{ matrix_postgres_base_path }}/PG_VERSION"
|
|
||||||
register: result_pg_old_data_dir_stat
|
|
||||||
|
|
||||||
- name: Warn if old Postgres data directory detected
|
|
||||||
ansible.builtin.debug:
|
|
||||||
msg: >
|
|
||||||
Found that you have Postgres data in `{{ matrix_postgres_base_path }}`.
|
|
||||||
From now on, Postgres data is supposed to be stored in `{{ matrix_postgres_data_path }}` instead.
|
|
||||||
We'll stop Postgres and relocate the files there for you.
|
|
||||||
when: "result_pg_old_data_dir_stat.stat.exists"
|
|
||||||
|
|
||||||
# We should stop Postgres first, before building a list of files,
|
|
||||||
# as to ignore any `postmaster.pid` files, etc.
|
|
||||||
- name: Ensure matrix-postgres is stopped
|
|
||||||
ansible.builtin.service:
|
|
||||||
name: matrix-postgres
|
|
||||||
state: stopped
|
|
||||||
daemon_reload: true
|
|
||||||
when: "result_pg_old_data_dir_stat.stat.exists"
|
|
||||||
|
|
||||||
- name: Find files and directories in old Postgres data path
|
|
||||||
ansible.builtin.find:
|
|
||||||
paths: "{{ matrix_postgres_base_path }}"
|
|
||||||
file_type: any
|
|
||||||
excludes: ["data"]
|
|
||||||
register: "result_pg_old_data_dir_find"
|
|
||||||
when: "result_pg_old_data_dir_stat.stat.exists"
|
|
||||||
|
|
||||||
- name: Ensure new Postgres data path exists
|
|
||||||
ansible.builtin.file:
|
|
||||||
path: "{{ matrix_postgres_data_path }}"
|
|
||||||
state: directory
|
|
||||||
mode: 0700
|
|
||||||
owner: "{{ matrix_user_username }}"
|
|
||||||
group: "{{ matrix_user_groupname }}"
|
|
||||||
when: "result_pg_old_data_dir_stat.stat.exists"
|
|
||||||
|
|
||||||
- when: "result_pg_old_data_dir_stat.stat.exists"
|
|
||||||
block:
|
|
||||||
- name: Relocate Postgres data files from old directory to new
|
|
||||||
ansible.builtin.command:
|
|
||||||
cmd: "mv {{ item.path }} {{ matrix_postgres_data_path }}/{{ item.path | basename }}"
|
|
||||||
with_items: "{{ result_pg_old_data_dir_find.files }}"
|
|
||||||
register: matrix_postgres_migrate_postgres_data_directory_move_result
|
|
||||||
changed_when: matrix_postgres_migrate_postgres_data_directory_move_result.rc == 0
|
|
||||||
|
|
||||||
# Intentionally not starting matrix-postgres here.
|
|
||||||
# It likely needs to be updated to point to the new directory.
|
|
||||||
# In fact, let's even get rid of the outdated service, to ensure no one will start it
|
|
||||||
# and have it initialize a new database.
|
|
||||||
|
|
||||||
- name: Ensure outdated matrix-postgres.service doesn't exist
|
|
||||||
ansible.builtin.file:
|
|
||||||
path: "{{ devture_systemd_docker_base_systemd_path }}/matrix-postgres.service"
|
|
||||||
state: absent
|
|
||||||
when: "result_pg_old_data_dir_stat.stat.exists"
|
|
||||||
|
|
||||||
- name: Ensure systemd reloaded after getting rid of outdated matrix-postgres.service
|
|
||||||
ansible.builtin.service:
|
|
||||||
daemon_reload: true
|
|
||||||
when: "result_pg_old_data_dir_stat.stat.exists"
|
|
|
@ -1,96 +0,0 @@
|
||||||
---
|
|
||||||
|
|
||||||
# Pre-checks
|
|
||||||
|
|
||||||
- name: Fail if Postgres not enabled
|
|
||||||
ansible.builtin.fail:
|
|
||||||
msg: "Postgres via the matrix-postgres role is not enabled (`matrix_postgres_enabled`). Cannot run vacuum."
|
|
||||||
when: "not matrix_postgres_enabled | bool"
|
|
||||||
|
|
||||||
|
|
||||||
# Defaults
|
|
||||||
|
|
||||||
- name: Set postgres_start_wait_time, if not provided
|
|
||||||
ansible.builtin.set_fact:
|
|
||||||
postgres_start_wait_time: 15
|
|
||||||
when: "postgres_start_wait_time | default('') == ''"
|
|
||||||
|
|
||||||
- name: Set postgres_vacuum_wait_time, if not provided
|
|
||||||
ansible.builtin.set_fact:
|
|
||||||
postgres_vacuum_wait_time: "{{ 7 * 86400 }}"
|
|
||||||
when: "postgres_vacuum_wait_time | default('') == ''"
|
|
||||||
|
|
||||||
|
|
||||||
# Actual vacuuming work
|
|
||||||
|
|
||||||
- name: Ensure matrix-postgres is started
|
|
||||||
ansible.builtin.service:
|
|
||||||
name: matrix-postgres
|
|
||||||
state: started
|
|
||||||
daemon_reload: true
|
|
||||||
register: matrix_postgres_vacuum_start_result
|
|
||||||
|
|
||||||
- name: Wait a bit, so that Postgres can start
|
|
||||||
when: matrix_postgres_vacuum_start_result.changed | bool
|
|
||||||
ansible.builtin.wait_for:
|
|
||||||
timeout: "{{ postgres_start_wait_time }}"
|
|
||||||
delegate_to: 127.0.0.1
|
|
||||||
become: false
|
|
||||||
|
|
||||||
- ansible.builtin.import_tasks: tasks/detect_existing_postgres_version.yml
|
|
||||||
|
|
||||||
- name: Abort, if no existing Postgres version detected
|
|
||||||
ansible.builtin.fail:
|
|
||||||
msg: "Could not find existing Postgres installation"
|
|
||||||
when: "not matrix_postgres_detected_existing | bool"
|
|
||||||
|
|
||||||
- name: Generate Postgres database vacuum command
|
|
||||||
ansible.builtin.set_fact:
|
|
||||||
matrix_postgres_vacuum_command: >-
|
|
||||||
{{ devture_systemd_docker_base_host_command_docker }} run --rm --name matrix-postgres-synapse-vacuum
|
|
||||||
--user={{ matrix_user_uid }}:{{ matrix_user_gid }}
|
|
||||||
--cap-drop=ALL
|
|
||||||
--network={{ matrix_docker_network }}
|
|
||||||
--env-file={{ matrix_postgres_base_path }}/env-postgres-psql
|
|
||||||
{{ matrix_postgres_docker_image_latest }}
|
|
||||||
psql -v ON_ERROR_STOP=1 -h matrix-postgres {{ matrix_synapse_database_database }} -c 'VACUUM FULL VERBOSE'
|
|
||||||
|
|
||||||
- name: Note about Postgres vacuum alternative
|
|
||||||
ansible.builtin.debug:
|
|
||||||
msg: >-
|
|
||||||
Running vacuum with the following Postgres ansible.builtin.command: `{{ matrix_postgres_vacuum_command }}`.
|
|
||||||
If this crashes, you can stop all processes (`systemctl stop matrix-*`),
|
|
||||||
start Postgres only (`systemctl start matrix-postgres`)
|
|
||||||
and manually run the above command directly on the server.
|
|
||||||
|
|
||||||
- name: Populate service facts
|
|
||||||
ansible.builtin.service_facts:
|
|
||||||
|
|
||||||
- ansible.builtin.set_fact:
|
|
||||||
matrix_postgres_synapse_was_running: "{{ ansible_facts.services['matrix-synapse.service'] | default(none) is not none and ansible_facts.services['matrix-synapse.service'].state == 'running' }}"
|
|
||||||
|
|
||||||
- name: Ensure services are stopped
|
|
||||||
ansible.builtin.service:
|
|
||||||
name: "{{ item }}"
|
|
||||||
state: stopped
|
|
||||||
daemon_reload: true
|
|
||||||
with_items: "{{ matrix_postgres_systemd_services_to_stop_for_maintenance_list }}"
|
|
||||||
|
|
||||||
- name: Run Postgres vacuum command
|
|
||||||
ansible.builtin.command: "{{ matrix_postgres_vacuum_command }}"
|
|
||||||
async: "{{ postgres_vacuum_wait_time }}"
|
|
||||||
poll: 10
|
|
||||||
register: matrix_postgres_synapse_vacuum_result
|
|
||||||
failed_when: not matrix_postgres_synapse_vacuum_result.finished or matrix_postgres_synapse_vacuum_result.rc != 0
|
|
||||||
changed_when: matrix_postgres_synapse_vacuum_result.finished and matrix_postgres_synapse_vacuum_result.rc == 0
|
|
||||||
|
|
||||||
# Intentionally show the results
|
|
||||||
- ansible.builtin.debug:
|
|
||||||
var: "matrix_postgres_synapse_vacuum_result"
|
|
||||||
|
|
||||||
- name: Ensure services are started
|
|
||||||
ansible.builtin.service:
|
|
||||||
name: "{{ item }}"
|
|
||||||
state: started
|
|
||||||
daemon_reload: true
|
|
||||||
with_items: "{{ matrix_postgres_systemd_services_to_stop_for_maintenance_list }}"
|
|
|
@ -1,215 +0,0 @@
|
||||||
---
|
|
||||||
|
|
||||||
#
|
|
||||||
# Tasks related to setting up an internal postgres server
|
|
||||||
#
|
|
||||||
|
|
||||||
- ansible.builtin.import_tasks: "{{ role_path }}/tasks/migrate_postgres_data_directory.yml"
|
|
||||||
when: matrix_postgres_enabled | bool
|
|
||||||
|
|
||||||
- ansible.builtin.import_tasks: "{{ role_path }}/tasks/detect_existing_postgres_version.yml"
|
|
||||||
when: matrix_postgres_enabled | bool
|
|
||||||
|
|
||||||
# If we have found an existing version (installed from before), we use its corresponding Docker image.
|
|
||||||
# If not, we install using the latest Postgres.
|
|
||||||
#
|
|
||||||
# Upgrading is supposed to be performed separately and explicitly (see `upgrade_postgres.yml`).
|
|
||||||
- ansible.builtin.set_fact:
|
|
||||||
matrix_postgres_docker_image_to_use: "{{ matrix_postgres_docker_image_latest if matrix_postgres_detected_version_corresponding_docker_image == '' else matrix_postgres_detected_version_corresponding_docker_image }}"
|
|
||||||
when: matrix_postgres_enabled | bool
|
|
||||||
|
|
||||||
- name: Abort if on an unsupported Postgres version
|
|
||||||
ansible.builtin.fail:
|
|
||||||
msg: "You're on Postgres {{ matrix_postgres_detected_version }}, which is no longer supported. To upgrade, see docs/maintenance-postgres.md"
|
|
||||||
when: "matrix_postgres_enabled | bool and matrix_postgres_detected_version.startswith('9.')"
|
|
||||||
|
|
||||||
- name: Inject warning if on an old version of Postgres
|
|
||||||
ansible.builtin.set_fact:
|
|
||||||
devture_playbook_runtime_messages_list: |
|
|
||||||
{{
|
|
||||||
devture_playbook_runtime_messages_list | default([])
|
|
||||||
+
|
|
||||||
[
|
|
||||||
"NOTE: Your setup is on an old Postgres version ({{ matrix_postgres_docker_image_to_use }}), while {{ matrix_postgres_docker_image_latest }} is supported. You can upgrade using --tags=upgrade-postgres"
|
|
||||||
]
|
|
||||||
}}
|
|
||||||
when: "matrix_postgres_enabled | bool and matrix_postgres_docker_image_to_use != matrix_postgres_docker_image_latest"
|
|
||||||
|
|
||||||
# Even if we don't run the internal server, we still need this for running the CLI
|
|
||||||
- name: Ensure postgres Docker image is pulled
|
|
||||||
community.docker.docker_image:
|
|
||||||
name: "{{ matrix_postgres_docker_image_to_use }}"
|
|
||||||
source: "{{ 'pull' if ansible_version.major > 2 or ansible_version.minor > 7 else omit }}"
|
|
||||||
force_source: "{{ matrix_postgres_docker_image_force_pull if ansible_version.major > 2 or ansible_version.minor >= 8 else omit }}"
|
|
||||||
force: "{{ omit if ansible_version.major > 2 or ansible_version.minor >= 8 else matrix_postgres_docker_image_force_pull }}"
|
|
||||||
when: matrix_postgres_enabled | bool
|
|
||||||
register: result
|
|
||||||
retries: "{{ devture_playbook_help_container_retries_count }}"
|
|
||||||
delay: "{{ devture_playbook_help_container_retries_delay }}"
|
|
||||||
until: result is not failed
|
|
||||||
|
|
||||||
- name: Ensure Postgres paths exist
|
|
||||||
ansible.builtin.file:
|
|
||||||
path: "{{ item }}"
|
|
||||||
state: directory
|
|
||||||
mode: 0700
|
|
||||||
owner: "{{ matrix_user_username }}"
|
|
||||||
group: "{{ matrix_user_groupname }}"
|
|
||||||
with_items:
|
|
||||||
- "{{ matrix_postgres_base_path }}"
|
|
||||||
- "{{ matrix_postgres_data_path }}"
|
|
||||||
when: matrix_postgres_enabled | bool
|
|
||||||
|
|
||||||
# We do this as a separate task, because:
|
|
||||||
# - we'd like to do it for the data path only, not for the base path (which contains root-owned environment variable files we'd like to leave as-is)
|
|
||||||
# - we need to do it without `mode`, or we risk making certain `.conf` and other files's executable bit to flip to true
|
|
||||||
- name: Ensure Postgres data path ownership is correct
|
|
||||||
ansible.builtin.file:
|
|
||||||
path: "{{ matrix_postgres_data_path }}"
|
|
||||||
state: directory
|
|
||||||
owner: "{{ matrix_user_username }}"
|
|
||||||
group: "{{ matrix_user_groupname }}"
|
|
||||||
recurse: true
|
|
||||||
when: matrix_postgres_enabled | bool
|
|
||||||
|
|
||||||
- name: Ensure Postgres environment variables file created
|
|
||||||
ansible.builtin.template:
|
|
||||||
src: "{{ role_path }}/templates/{{ item }}.j2"
|
|
||||||
dest: "{{ matrix_postgres_base_path }}/{{ item }}"
|
|
||||||
owner: "{{ matrix_user_username }}"
|
|
||||||
group: "{{ matrix_user_groupname }}"
|
|
||||||
mode: 0640
|
|
||||||
with_items:
|
|
||||||
- "env-postgres-psql"
|
|
||||||
- "env-postgres-server"
|
|
||||||
when: matrix_postgres_enabled | bool
|
|
||||||
|
|
||||||
- name: Ensure matrix-postgres-cli script created
|
|
||||||
ansible.builtin.template:
|
|
||||||
src: "{{ role_path }}/templates/usr-local-bin/matrix-postgres-cli.j2"
|
|
||||||
dest: "{{ matrix_local_bin_path }}/matrix-postgres-cli"
|
|
||||||
mode: 0755
|
|
||||||
when: matrix_postgres_enabled | bool
|
|
||||||
|
|
||||||
- name: Ensure matrix-postgres-cli-non-interactive script created
|
|
||||||
ansible.builtin.template:
|
|
||||||
src: "{{ role_path }}/templates/usr-local-bin/matrix-postgres-cli-non-interactive.j2"
|
|
||||||
dest: "{{ matrix_local_bin_path }}/matrix-postgres-cli-non-interactive"
|
|
||||||
mode: 0755
|
|
||||||
when: matrix_postgres_enabled | bool
|
|
||||||
|
|
||||||
- name: Ensure matrix-change-user-admin-status script created
|
|
||||||
ansible.builtin.template:
|
|
||||||
src: "{{ role_path }}/templates/usr-local-bin/matrix-change-user-admin-status.j2"
|
|
||||||
dest: "{{ matrix_local_bin_path }}/matrix-change-user-admin-status"
|
|
||||||
mode: 0755
|
|
||||||
when: matrix_postgres_enabled | bool
|
|
||||||
|
|
||||||
- name: (Migration) Ensure old matrix-make-user-admin script deleted
|
|
||||||
ansible.builtin.file:
|
|
||||||
path: "{{ matrix_local_bin_path }}/matrix-make-user-admin"
|
|
||||||
state: absent
|
|
||||||
when: matrix_postgres_enabled | bool
|
|
||||||
|
|
||||||
- name: Ensure matrix-postgres-update-user-password-hash script created
|
|
||||||
ansible.builtin.template:
|
|
||||||
src: "{{ role_path }}/templates/usr-local-bin/matrix-postgres-update-user-password-hash.j2"
|
|
||||||
dest: "{{ matrix_local_bin_path }}/matrix-postgres-update-user-password-hash"
|
|
||||||
mode: 0755
|
|
||||||
when: matrix_postgres_enabled | bool
|
|
||||||
|
|
||||||
- name: Ensure matrix-postgres.service installed
|
|
||||||
ansible.builtin.template:
|
|
||||||
src: "{{ role_path }}/templates/systemd/matrix-postgres.service.j2"
|
|
||||||
dest: "{{ devture_systemd_docker_base_systemd_path }}/matrix-postgres.service"
|
|
||||||
mode: 0644
|
|
||||||
register: matrix_postgres_systemd_service_result
|
|
||||||
when: matrix_postgres_enabled | bool
|
|
||||||
|
|
||||||
- name: Ensure systemd reloaded after matrix-postgres.service installation
|
|
||||||
ansible.builtin.service:
|
|
||||||
daemon_reload: true
|
|
||||||
when: "matrix_postgres_enabled | bool and matrix_postgres_systemd_service_result.changed"
|
|
||||||
|
|
||||||
- ansible.builtin.include_tasks:
|
|
||||||
file: "{{ role_path }}/tasks/util/create_additional_databases.yml"
|
|
||||||
apply:
|
|
||||||
tags:
|
|
||||||
- always
|
|
||||||
when: "matrix_postgres_enabled | bool and matrix_postgres_additional_databases|length > 0"
|
|
||||||
|
|
||||||
- name: Check existence of matrix-postgres backup data path
|
|
||||||
ansible.builtin.stat:
|
|
||||||
path: "{{ matrix_postgres_data_path }}-auto-upgrade-backup"
|
|
||||||
register: matrix_postgres_data_backup_path_stat
|
|
||||||
when: "matrix_postgres_enabled | bool"
|
|
||||||
|
|
||||||
- name: Inject warning if backup data remains
|
|
||||||
ansible.builtin.set_fact:
|
|
||||||
devture_playbook_runtime_messages_list: |
|
|
||||||
{{
|
|
||||||
devture_playbook_runtime_messages_list | default([])
|
|
||||||
+
|
|
||||||
[
|
|
||||||
"NOTE: You have some Postgres backup data in `{{ matrix_postgres_data_path }}-auto-upgrade-backup`, which was created during the last major Postgres update you ran. If your setup works well after this upgrade, feel free to delete this whole directory."
|
|
||||||
]
|
|
||||||
}}
|
|
||||||
when: "matrix_postgres_enabled | bool and matrix_postgres_data_backup_path_stat.stat.exists"
|
|
||||||
|
|
||||||
|
|
||||||
#
|
|
||||||
# Tasks related to getting rid of the internal postgres server (if it was previously enabled)
|
|
||||||
#
|
|
||||||
|
|
||||||
- name: Check existence of matrix-postgres service
|
|
||||||
ansible.builtin.stat:
|
|
||||||
path: "{{ devture_systemd_docker_base_systemd_path }}/matrix-postgres.service"
|
|
||||||
register: matrix_postgres_service_stat
|
|
||||||
when: "not matrix_postgres_enabled | bool"
|
|
||||||
|
|
||||||
- name: Ensure matrix-postgres is stopped
|
|
||||||
ansible.builtin.service:
|
|
||||||
name: matrix-postgres
|
|
||||||
state: stopped
|
|
||||||
daemon_reload: true
|
|
||||||
when: "not matrix_postgres_enabled | bool and matrix_postgres_service_stat.stat.exists"
|
|
||||||
|
|
||||||
- name: Ensure matrix-postgres.service doesn't exist
|
|
||||||
ansible.builtin.file:
|
|
||||||
path: "{{ devture_systemd_docker_base_systemd_path }}/matrix-postgres.service"
|
|
||||||
state: absent
|
|
||||||
when: "not matrix_postgres_enabled | bool and matrix_postgres_service_stat.stat.exists"
|
|
||||||
|
|
||||||
- name: Ensure systemd reloaded after matrix-postgres.service removal
|
|
||||||
ansible.builtin.service:
|
|
||||||
daemon_reload: true
|
|
||||||
when: "not matrix_postgres_enabled | bool and matrix_postgres_service_stat.stat.exists"
|
|
||||||
|
|
||||||
- name: Check existence of matrix-postgres local data path
|
|
||||||
ansible.builtin.stat:
|
|
||||||
path: "{{ matrix_postgres_data_path }}"
|
|
||||||
register: matrix_postgres_data_path_stat
|
|
||||||
when: "not matrix_postgres_enabled | bool"
|
|
||||||
|
|
||||||
# We just want to notify the user. Deleting data is too destructive.
|
|
||||||
- name: Inject warning if matrix-postgres local data remains
|
|
||||||
ansible.builtin.set_fact:
|
|
||||||
devture_playbook_runtime_messages_list: |
|
|
||||||
{{
|
|
||||||
devture_playbook_runtime_messages_list | default([])
|
|
||||||
+
|
|
||||||
[
|
|
||||||
"NOTE: You are not using a local PostgreSQL database, but some old data remains from before in `{{ matrix_postgres_data_path }}`. Feel free to delete it."
|
|
||||||
]
|
|
||||||
}}
|
|
||||||
when: "not matrix_postgres_enabled | bool and matrix_postgres_data_path_stat.stat.exists"
|
|
||||||
|
|
||||||
- name: Remove Postgres scripts
|
|
||||||
ansible.builtin.file:
|
|
||||||
path: "{{ matrix_local_bin_path }}/{{ item }}"
|
|
||||||
state: absent
|
|
||||||
with_items:
|
|
||||||
- matrix-postgres-cli
|
|
||||||
- matrix-change-user-admin-status
|
|
||||||
- matrix-postgres-update-user-password-hash
|
|
||||||
when: "not matrix_postgres_enabled | bool"
|
|
|
@ -1,188 +0,0 @@
|
||||||
---
|
|
||||||
|
|
||||||
- name: Set default postgres_dump_dir, if not provided
|
|
||||||
ansible.builtin.set_fact:
|
|
||||||
postgres_dump_dir: "/tmp"
|
|
||||||
when: "postgres_dump_dir | default('') == ''"
|
|
||||||
|
|
||||||
- name: Set postgres_dump_name, if not provided
|
|
||||||
ansible.builtin.set_fact:
|
|
||||||
postgres_dump_name: "matrix-postgres-dump.sql.gz"
|
|
||||||
when: "postgres_dump_name | default('') == ''"
|
|
||||||
|
|
||||||
- name: Set postgres_auto_upgrade_backup_data_path, if not provided
|
|
||||||
ansible.builtin.set_fact:
|
|
||||||
postgres_auto_upgrade_backup_data_path: "{{ matrix_postgres_data_path }}-auto-upgrade-backup"
|
|
||||||
when: "postgres_auto_upgrade_backup_data_path | default('') == ''"
|
|
||||||
|
|
||||||
- name: Set postgres_start_wait_time, if not provided
|
|
||||||
ansible.builtin.set_fact:
|
|
||||||
postgres_start_wait_time: 15
|
|
||||||
when: "postgres_start_wait_time | default('') == ''"
|
|
||||||
|
|
||||||
- name: Set postgres_force_upgrade, if not provided
|
|
||||||
ansible.builtin.set_fact:
|
|
||||||
postgres_force_upgrade: false
|
|
||||||
when: "postgres_force_upgrade | default('') == ''"
|
|
||||||
|
|
||||||
- name: Fail, if trying to upgrade external Postgres database
|
|
||||||
ansible.builtin.fail:
|
|
||||||
msg: "Your configuration indicates that you're not using Postgres from this role. There is nothing to upgrade."
|
|
||||||
when: "not matrix_postgres_enabled | bool"
|
|
||||||
|
|
||||||
- name: Check Postgres auto-upgrade backup data directory
|
|
||||||
ansible.builtin.stat:
|
|
||||||
path: "{{ postgres_auto_upgrade_backup_data_path }}"
|
|
||||||
register: result_auto_upgrade_path
|
|
||||||
|
|
||||||
- name: Abort, if existing Postgres auto-upgrade data path detected
|
|
||||||
ansible.builtin.fail:
|
|
||||||
msg: "Detected that a left-over {{ postgres_auto_upgrade_backup_data_path }} exists. You should rename it to {{ matrix_postgres_data_path }} if the previous upgrade went wrong, or delete it if it went well."
|
|
||||||
when: "result_auto_upgrade_path.stat.exists"
|
|
||||||
|
|
||||||
- ansible.builtin.import_tasks: tasks/detect_existing_postgres_version.yml
|
|
||||||
|
|
||||||
- name: Abort, if no existing Postgres version detected
|
|
||||||
ansible.builtin.fail:
|
|
||||||
msg: "Could not find existing Postgres installation"
|
|
||||||
when: "not matrix_postgres_detected_existing | bool"
|
|
||||||
|
|
||||||
- name: Abort, if already at latest Postgres version
|
|
||||||
ansible.builtin.fail:
|
|
||||||
msg: "You are already running the latest Postgres version supported ({{ matrix_postgres_docker_image_latest }}). Nothing to do"
|
|
||||||
when: "matrix_postgres_detected_version_corresponding_docker_image == matrix_postgres_docker_image_latest and not postgres_force_upgrade"
|
|
||||||
|
|
||||||
- ansible.builtin.debug:
|
|
||||||
msg: "Upgrading database from {{ matrix_postgres_detected_version_corresponding_docker_image }} to {{ matrix_postgres_docker_image_latest }}"
|
|
||||||
|
|
||||||
- name: Ensure services are stopped
|
|
||||||
ansible.builtin.service:
|
|
||||||
name: "{{ item }}"
|
|
||||||
state: stopped
|
|
||||||
daemon_reload: true
|
|
||||||
with_items: "{{ matrix_postgres_systemd_services_to_stop_for_maintenance_list }}"
|
|
||||||
|
|
||||||
- name: Ensure matrix-postgres is started
|
|
||||||
ansible.builtin.service:
|
|
||||||
name: matrix-postgres
|
|
||||||
state: started
|
|
||||||
daemon_reload: true
|
|
||||||
|
|
||||||
- name: Wait a bit, so that Postgres can start
|
|
||||||
ansible.builtin.wait_for:
|
|
||||||
timeout: "{{ postgres_start_wait_time }}"
|
|
||||||
delegate_to: 127.0.0.1
|
|
||||||
become: false
|
|
||||||
|
|
||||||
# We dump all databases, roles, etc.
|
|
||||||
#
|
|
||||||
# Because we'll be importing into a new container which initializes the default
|
|
||||||
# role (`matrix_postgres_connection_username`) and database (`matrix_postgres_db_name`) by itself on startup,
|
|
||||||
# we need to remove these from the dump, or we'll get errors saying these already exist.
|
|
||||||
- name: Perform Postgres database dump
|
|
||||||
ansible.builtin.command:
|
|
||||||
cmd: >-
|
|
||||||
{{ devture_systemd_docker_base_host_command_docker }} run --rm --name matrix-postgres-dump
|
|
||||||
--log-driver=none
|
|
||||||
--user={{ matrix_user_uid }}:{{ matrix_user_gid }}
|
|
||||||
--network={{ matrix_docker_network }}
|
|
||||||
--env-file={{ matrix_postgres_base_path }}/env-postgres-psql
|
|
||||||
--entrypoint=/bin/sh
|
|
||||||
--mount type=bind,src={{ postgres_dump_dir }},dst=/out
|
|
||||||
{{ matrix_postgres_detected_version_corresponding_docker_image }}
|
|
||||||
-c "pg_dumpall -h matrix-postgres
|
|
||||||
{{ '| gzip -c ' if postgres_dump_name.endswith('.gz') else '' }}
|
|
||||||
> /out/{{ postgres_dump_name }}"
|
|
||||||
register: matrix_postgres_upgrade_postgres_dump_command_result
|
|
||||||
changed_when: matrix_postgres_upgrade_postgres_dump_command_result.rc == 0
|
|
||||||
tags:
|
|
||||||
- skip_ansible_lint
|
|
||||||
|
|
||||||
- name: Ensure matrix-postgres is stopped
|
|
||||||
ansible.builtin.service:
|
|
||||||
name: matrix-postgres
|
|
||||||
state: stopped
|
|
||||||
|
|
||||||
- name: Rename existing Postgres data directory
|
|
||||||
ansible.builtin.command:
|
|
||||||
cmd: "mv {{ matrix_postgres_data_path }} {{ postgres_auto_upgrade_backup_data_path }}"
|
|
||||||
register: matrix_postgres_upgrade_postgres_move_command_result
|
|
||||||
changed_when: matrix_postgres_upgrade_postgres_move_command_result.rc == 0
|
|
||||||
|
|
||||||
- ansible.builtin.debug:
|
|
||||||
msg: "NOTE: Your Postgres data directory has been moved from `{{ matrix_postgres_data_path }}` to `{{ postgres_auto_upgrade_backup_data_path }}`. In the event of failure, you can move it back and run the playbook with --tags=setup-postgres to restore operation."
|
|
||||||
|
|
||||||
- ansible.builtin.import_tasks: tasks/setup_postgres.yml
|
|
||||||
|
|
||||||
- name: Ensure matrix-postgres autoruns and is restarted
|
|
||||||
ansible.builtin.service:
|
|
||||||
name: matrix-postgres
|
|
||||||
enabled: true
|
|
||||||
state: restarted
|
|
||||||
daemon_reload: true
|
|
||||||
|
|
||||||
- name: Wait a bit, so that Postgres can start
|
|
||||||
ansible.builtin.wait_for:
|
|
||||||
timeout: "{{ postgres_start_wait_time }}"
|
|
||||||
delegate_to: 127.0.0.1
|
|
||||||
become: false
|
|
||||||
|
|
||||||
# Starting the database container had automatically created the default
|
|
||||||
# role (`matrix_postgres_connection_username`) and database (`matrix_postgres_db_name`).
|
|
||||||
# The dump most likely contains those same entries and would try to re-create them, leading to errors.
|
|
||||||
# We need to skip over those lines.
|
|
||||||
- name: Generate Postgres database import command
|
|
||||||
ansible.builtin.set_fact:
|
|
||||||
matrix_postgres_import_command: >-
|
|
||||||
{{ devture_systemd_docker_base_host_command_docker }} run --rm --name matrix-postgres-import
|
|
||||||
--log-driver=none
|
|
||||||
--user={{ matrix_user_uid }}:{{ matrix_user_gid }}
|
|
||||||
--cap-drop=ALL
|
|
||||||
--network={{ matrix_docker_network }}
|
|
||||||
--env-file={{ matrix_postgres_base_path }}/env-postgres-psql
|
|
||||||
--entrypoint=/bin/sh
|
|
||||||
--mount type=bind,src={{ postgres_dump_dir }},dst=/in,ro
|
|
||||||
{{ matrix_postgres_docker_image_latest }}
|
|
||||||
-c "cat /in/{{ postgres_dump_name }} |
|
|
||||||
{{ 'gunzip |' if postgres_dump_name.endswith('.gz') else '' }}
|
|
||||||
grep -vE '{{ matrix_postgres_import_roles_ignore_regex }}' |
|
|
||||||
grep -vE '{{ matrix_postgres_import_databases_ignore_regex }}' |
|
|
||||||
psql -v ON_ERROR_STOP=1 -h matrix-postgres"
|
|
||||||
tags:
|
|
||||||
- skip_ansible_lint
|
|
||||||
|
|
||||||
# This is a hack.
|
|
||||||
# See: https://ansibledaily.com/print-to-standard-output-without-escaping/
|
|
||||||
#
|
|
||||||
# We want to run `debug: msg=".."`, but that dumps it as JSON and escapes double quotes within it,
|
|
||||||
# which ruins the command (`matrix_postgres_import_command`)
|
|
||||||
- name: Note about Postgres importing
|
|
||||||
ansible.builtin.set_fact:
|
|
||||||
dummy: true
|
|
||||||
with_items:
|
|
||||||
- >-
|
|
||||||
Importing Postgres database using the following command: `{{ matrix_postgres_import_command }}`.
|
|
||||||
If this crashes, you can stop Postgres (`systemctl stop matrix-postgres`),
|
|
||||||
delete the new database data (`rm -rf {{ matrix_postgres_data_path }}`)
|
|
||||||
and restore the automatically-made backup (`mv {{ postgres_auto_upgrade_backup_data_path }} {{ matrix_postgres_data_path }}`).
|
|
||||||
|
|
||||||
- name: Perform Postgres database import
|
|
||||||
ansible.builtin.command:
|
|
||||||
cmd: "{{ matrix_postgres_import_command }}"
|
|
||||||
register: matrix_postgres_upgrade_postgres_import_command_result
|
|
||||||
changed_when: matrix_postgres_upgrade_postgres_import_command_result.rc == 0
|
|
||||||
|
|
||||||
- name: Delete Postgres database dump file
|
|
||||||
ansible.builtin.file:
|
|
||||||
path: "{{ postgres_dump_dir }}/{{ postgres_dump_name }}"
|
|
||||||
state: absent
|
|
||||||
|
|
||||||
- name: Ensure services are started
|
|
||||||
ansible.builtin.service:
|
|
||||||
name: "{{ item }}"
|
|
||||||
state: started
|
|
||||||
daemon_reload: true
|
|
||||||
with_items: "{{ matrix_postgres_systemd_services_to_stop_for_maintenance_list }}"
|
|
||||||
|
|
||||||
- ansible.builtin.debug:
|
|
||||||
msg: "NOTE: Your old Postgres data directory is preserved at `{{ postgres_auto_upgrade_backup_data_path }}`. You might want to get rid of it once you've confirmed that all is well."
|
|
|
@ -1,41 +0,0 @@
|
||||||
---
|
|
||||||
|
|
||||||
# It'd be better if this is belonged to `validate_config.yml`, but it would have to be some loop-within-a-loop there,
|
|
||||||
# and that's ugly. We also don't expect this to catch errors often. It's more of a defensive last-minute check.
|
|
||||||
- name: Fail if additional database data appears invalid
|
|
||||||
ansible.builtin.fail:
|
|
||||||
msg: "Additional database definition ({{ additional_db }} lacks a required key: {{ item }}"
|
|
||||||
when: "item not in additional_db"
|
|
||||||
with_items: "{{ ['name', 'username', 'password'] }}"
|
|
||||||
|
|
||||||
# The SQL statements that we'll run against Postgres are stored in a file that others can't read.
|
|
||||||
# This file will be mounted into the container and fed to Postgres.
|
|
||||||
# This way, we avoid passing sensitive data around in CLI commands that other users on the system can see.
|
|
||||||
- name: Create additional database initialization SQL file for {{ additional_db.name }}
|
|
||||||
ansible.builtin.template:
|
|
||||||
src: "{{ role_path }}/templates/sql/init-additional-db-user-and-role.sql.j2"
|
|
||||||
dest: "/tmp/matrix-postgres-init-additional-db-user-and-role.sql"
|
|
||||||
mode: 0600
|
|
||||||
owner: "{{ matrix_user_uid }}"
|
|
||||||
group: "{{ matrix_user_gid }}"
|
|
||||||
|
|
||||||
- name: Execute Postgres additional database initialization SQL file for {{ additional_db.name }}
|
|
||||||
ansible.builtin.command:
|
|
||||||
cmd: >-
|
|
||||||
{{ devture_systemd_docker_base_host_command_docker }} run
|
|
||||||
--rm
|
|
||||||
--user={{ matrix_user_uid }}:{{ matrix_user_gid }}
|
|
||||||
--cap-drop=ALL
|
|
||||||
--env-file={{ matrix_postgres_base_path }}/env-postgres-psql
|
|
||||||
--network {{ matrix_docker_network }}
|
|
||||||
--mount type=bind,src=/tmp/matrix-postgres-init-additional-db-user-and-role.sql,dst=/matrix-postgres-init-additional-db-user-and-role.sql,ro
|
|
||||||
--entrypoint=/bin/sh
|
|
||||||
{{ matrix_postgres_docker_image_to_use }}
|
|
||||||
-c
|
|
||||||
'psql -h {{ matrix_postgres_connection_hostname }} --file=/matrix-postgres-init-additional-db-user-and-role.sql'
|
|
||||||
changed_when: true
|
|
||||||
|
|
||||||
- name: Delete additional database initialization SQL file for {{ additional_db.name }}
|
|
||||||
ansible.builtin.file:
|
|
||||||
path: /tmp/matrix-postgres-init-additional-db-user-and-role.sql
|
|
||||||
state: absent
|
|
|
@ -1,23 +0,0 @@
|
||||||
---
|
|
||||||
|
|
||||||
- name: Ensure matrix-postgres is started
|
|
||||||
ansible.builtin.service:
|
|
||||||
name: matrix-postgres
|
|
||||||
state: started
|
|
||||||
daemon_reload: true
|
|
||||||
register: matrix_postgres_service_start_result
|
|
||||||
|
|
||||||
- name: Wait a bit, so that Postgres can start
|
|
||||||
ansible.builtin.wait_for:
|
|
||||||
timeout: "{{ matrix_postgres_additional_databases_postgres_start_wait_timeout_seconds }}"
|
|
||||||
delegate_to: 127.0.0.1
|
|
||||||
become: false
|
|
||||||
when: "matrix_postgres_service_start_result.changed | bool"
|
|
||||||
|
|
||||||
- name: Create additional Postgres user and database
|
|
||||||
ansible.builtin.include_tasks: "{{ role_path }}/tasks/util/create_additional_database.yml"
|
|
||||||
with_items: "{{ matrix_postgres_additional_databases }}"
|
|
||||||
loop_control:
|
|
||||||
loop_var: additional_db
|
|
||||||
# Suppress logging to avoid dumping the credentials to the shell
|
|
||||||
no_log: true
|
|
|
@ -1,39 +0,0 @@
|
||||||
---
|
|
||||||
|
|
||||||
- name: (Deprecation) Warn about matrix_postgres_use_external usage
|
|
||||||
ansible.builtin.fail:
|
|
||||||
msg: >
|
|
||||||
The `matrix_postgres_use_external` variable defined in your configuration is not used by this playbook anymore!
|
|
||||||
You'll need to adapt to the new way of using an external Postgres server.
|
|
||||||
It's a combination of `matrix_postgres_enabled: false` and specifying Postgres connection
|
|
||||||
details in a few `matrix_postgres_connection_` variables.
|
|
||||||
See the "Using an external PostgreSQL server (optional)" documentation page.
|
|
||||||
when: "'matrix_postgres_use_external' in vars"
|
|
||||||
|
|
||||||
# This is separate (from the other required variables below),
|
|
||||||
# because we'd like to have a friendlier message for our existing users.
|
|
||||||
- name: Fail if matrix_postgres_connection_password not defined
|
|
||||||
ansible.builtin.fail:
|
|
||||||
msg: >-
|
|
||||||
The playbook no longer has a default Postgres password defined in the `matrix_postgres_connection_password` variable, among lots of other Postgres changes.
|
|
||||||
You need to perform multiple manual steps to resolve this.
|
|
||||||
See our changelog for more details:
|
|
||||||
https://github.com/spantaleev/matrix-docker-ansible-deploy/blob/master/CHANGELOG.md#breaking-change-postgres-changes-that-require-manual-intervention
|
|
||||||
when: "matrix_postgres_connection_password == ''"
|
|
||||||
|
|
||||||
- name: Fail if required Postgres settings not defined
|
|
||||||
ansible.builtin.fail:
|
|
||||||
msg: >-
|
|
||||||
You need to define a required configuration setting (`{{ item }}`).
|
|
||||||
when: "vars[item] == ''"
|
|
||||||
with_items:
|
|
||||||
- "matrix_postgres_connection_hostname"
|
|
||||||
- "matrix_postgres_connection_port"
|
|
||||||
- "matrix_postgres_connection_username"
|
|
||||||
- "matrix_postgres_connection_password"
|
|
||||||
- "matrix_postgres_db_name"
|
|
||||||
|
|
||||||
- name: Fail if Postgres password length exceeded
|
|
||||||
ansible.builtin.fail:
|
|
||||||
msg: "The maximum `matrix_postgres_connection_password` length is 99 characters"
|
|
||||||
when: "matrix_postgres_connection_password | length > 99"
|
|
|
@ -1,8 +0,0 @@
|
||||||
#jinja2: lstrip_blocks: "True"
|
|
||||||
PGUSER={{ matrix_postgres_connection_username }}
|
|
||||||
PGPASSWORD={{ matrix_postgres_connection_password }}
|
|
||||||
PGDATABASE={{ matrix_postgres_db_name }}
|
|
||||||
# Prevent errors like this:
|
|
||||||
# > could not save history to file "//.psql_history": Permission denied
|
|
||||||
# .. due to Postgres not being able to write to the filesystem.
|
|
||||||
PSQL_HISTORY=/dev/null
|
|
|
@ -1,7 +0,0 @@
|
||||||
#jinja2: lstrip_blocks: "True"
|
|
||||||
POSTGRES_USER={{ matrix_postgres_connection_username }}
|
|
||||||
POSTGRES_PASSWORD={{ matrix_postgres_connection_password }}
|
|
||||||
POSTGRES_DB={{ matrix_postgres_db_name }}
|
|
||||||
# Synapse refuses to run if collation is not C.
|
|
||||||
# See https://github.com/matrix-org/synapse/issues/6722
|
|
||||||
POSTGRES_INITDB_ARGS=--lc-collate C --lc-ctype C --encoding UTF8
|
|
|
@ -1,19 +0,0 @@
|
||||||
-- `CREATE USER` does not support `IF NOT EXISTS`, so we use this workaround to prevent an error and raise a notice instead.
|
|
||||||
-- Seen here: https://stackoverflow.com/a/49858797
|
|
||||||
DO $$
|
|
||||||
BEGIN
|
|
||||||
CREATE USER "{{ additional_db.username }}";
|
|
||||||
EXCEPTION WHEN DUPLICATE_OBJECT THEN
|
|
||||||
RAISE NOTICE 'not creating user "{{ additional_db.username }}", since it already exists';
|
|
||||||
END
|
|
||||||
$$;
|
|
||||||
|
|
||||||
-- This is useful for initial user creation (since we don't assign a password above) and for handling subsequent password changes
|
|
||||||
-- TODO - we should escape quotes in the password.
|
|
||||||
ALTER ROLE "{{ additional_db.username }}" PASSWORD '{{ additional_db.password }}';
|
|
||||||
|
|
||||||
-- This will generate an error on subsequent execution
|
|
||||||
CREATE DATABASE "{{ additional_db.name }}" WITH LC_CTYPE 'C' LC_COLLATE 'C' OWNER "{{ additional_db.username }}";
|
|
||||||
|
|
||||||
-- This is useful for changing the database owner subsequently
|
|
||||||
ALTER DATABASE "{{ additional_db.name }}" OWNER TO "{{ additional_db.username }}";
|
|
|
@ -1,46 +0,0 @@
|
||||||
#jinja2: lstrip_blocks: "True"
|
|
||||||
[Unit]
|
|
||||||
Description=Matrix Postgres server
|
|
||||||
After=docker.service
|
|
||||||
Requires=docker.service
|
|
||||||
DefaultDependencies=no
|
|
||||||
|
|
||||||
[Service]
|
|
||||||
Type=simple
|
|
||||||
Environment="HOME={{ devture_systemd_docker_base_systemd_unit_home_path }}"
|
|
||||||
ExecStartPre=-{{ devture_systemd_docker_base_host_command_sh }} -c '{{ devture_systemd_docker_base_host_command_docker }} kill matrix-postgres 2>/dev/null || true'
|
|
||||||
ExecStartPre=-{{ devture_systemd_docker_base_host_command_sh }} -c '{{ devture_systemd_docker_base_host_command_docker }} rm matrix-postgres 2>/dev/null || true'
|
|
||||||
|
|
||||||
# We need /dev/shm to be larger than the default to allow VACUUM to work.
|
|
||||||
# See:
|
|
||||||
# - https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1362
|
|
||||||
# - https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1268
|
|
||||||
ExecStart={{ devture_systemd_docker_base_host_command_docker }} run --rm --name matrix-postgres \
|
|
||||||
--log-driver=none \
|
|
||||||
--user={{ matrix_user_uid }}:{{ matrix_user_gid }} \
|
|
||||||
--cap-drop=ALL \
|
|
||||||
--read-only \
|
|
||||||
--tmpfs=/tmp:rw,noexec,nosuid,size=100m \
|
|
||||||
--tmpfs=/run/postgresql:rw,noexec,nosuid,size=100m \
|
|
||||||
--shm-size=256m \
|
|
||||||
--network={{ matrix_docker_network }} \
|
|
||||||
{% if matrix_postgres_container_postgres_bind_port %}
|
|
||||||
-p {{ matrix_postgres_container_postgres_bind_port }}:5432 \
|
|
||||||
{% endif %}
|
|
||||||
--env-file={{ matrix_postgres_base_path }}/env-postgres-server \
|
|
||||||
--mount type=bind,src={{ matrix_postgres_data_path }},dst=/var/lib/postgresql/data \
|
|
||||||
--mount type=bind,src=/etc/passwd,dst=/etc/passwd,ro \
|
|
||||||
{% for arg in matrix_postgres_container_extra_arguments %}
|
|
||||||
{{ arg }} \
|
|
||||||
{% endfor %}
|
|
||||||
{{ matrix_postgres_docker_image_to_use }} \
|
|
||||||
postgres {{ matrix_postgres_process_extra_arguments|join(' ') }}
|
|
||||||
|
|
||||||
ExecStop=-{{ devture_systemd_docker_base_host_command_sh }} -c '{{ devture_systemd_docker_base_host_command_docker }} kill matrix-postgres 2>/dev/null || true'
|
|
||||||
ExecStop=-{{ devture_systemd_docker_base_host_command_sh }} -c '{{ devture_systemd_docker_base_host_command_docker }} rm matrix-postgres 2>/dev/null || true'
|
|
||||||
Restart=always
|
|
||||||
RestartSec=30
|
|
||||||
SyslogIdentifier=matrix-postgres
|
|
||||||
|
|
||||||
[Install]
|
|
||||||
WantedBy=multi-user.target
|
|
|
@ -1,19 +0,0 @@
|
||||||
#jinja2: lstrip_blocks: "True"
|
|
||||||
#!/bin/bash
|
|
||||||
|
|
||||||
if [ $# -ne 2 ]; then
|
|
||||||
echo "Usage: "$0" <username> <0/1>"
|
|
||||||
echo "Usage: 0 = non-admin"
|
|
||||||
echo "Usage: 1 = admin"
|
|
||||||
exit 1
|
|
||||||
fi
|
|
||||||
|
|
||||||
docker run \
|
|
||||||
-i \
|
|
||||||
--rm \
|
|
||||||
--user={{ matrix_user_uid }}:{{ matrix_user_gid }} \
|
|
||||||
--cap-drop=ALL \
|
|
||||||
--env-file={{ matrix_postgres_base_path }}/env-postgres-psql \
|
|
||||||
--network {{ matrix_docker_network }} \
|
|
||||||
{{ matrix_postgres_docker_image_to_use }} \
|
|
||||||
psql -h {{ matrix_postgres_connection_hostname }} --dbname={{ matrix_synapse_database_database }} -c "UPDATE users set admin=$2 WHERE name like '@$1:{{ matrix_domain }}'"
|
|
|
@ -1,12 +0,0 @@
|
||||||
#jinja2: lstrip_blocks: "True"
|
|
||||||
#!/bin/bash
|
|
||||||
|
|
||||||
docker run \
|
|
||||||
--rm \
|
|
||||||
--user={{ matrix_user_uid }}:{{ matrix_user_gid }} \
|
|
||||||
--cap-drop=ALL \
|
|
||||||
--env-file={{ matrix_postgres_base_path }}/env-postgres-psql \
|
|
||||||
--network {{ matrix_docker_network }} \
|
|
||||||
{{ matrix_postgres_docker_image_to_use }} \
|
|
||||||
psql -h {{ matrix_postgres_connection_hostname }} \
|
|
||||||
"$@"
|
|
|
@ -1,13 +0,0 @@
|
||||||
#jinja2: lstrip_blocks: "True"
|
|
||||||
#!/bin/bash
|
|
||||||
|
|
||||||
docker run \
|
|
||||||
-it \
|
|
||||||
--rm \
|
|
||||||
--user={{ matrix_user_uid }}:{{ matrix_user_gid }} \
|
|
||||||
--cap-drop=ALL \
|
|
||||||
--env-file={{ matrix_postgres_base_path }}/env-postgres-psql \
|
|
||||||
--network {{ matrix_docker_network }} \
|
|
||||||
{{ matrix_postgres_docker_image_to_use }} \
|
|
||||||
psql -h {{ matrix_postgres_connection_hostname }} \
|
|
||||||
"$@"
|
|
|
@ -1,16 +0,0 @@
|
||||||
#jinja2: lstrip_blocks: "True"
|
|
||||||
#!/bin/bash
|
|
||||||
|
|
||||||
if [ $# -ne 2 ]; then
|
|
||||||
echo "Usage: "$0" <username> <password_hash>"
|
|
||||||
exit 1
|
|
||||||
fi
|
|
||||||
|
|
||||||
docker run \
|
|
||||||
--rm \
|
|
||||||
--user={{ matrix_user_uid }}:{{ matrix_user_gid }} \
|
|
||||||
--cap-drop=ALL \
|
|
||||||
--env-file={{ matrix_postgres_base_path }}/env-postgres-psql \
|
|
||||||
--network {{ matrix_docker_network }} \
|
|
||||||
{{ matrix_postgres_docker_image_to_use }} \
|
|
||||||
psql -h {{ matrix_postgres_connection_hostname }} --dbname={{ matrix_synapse_database_database }} -c "UPDATE users set password_hash='$2' WHERE name = '@$1:{{ matrix_domain }}'"
|
|
|
@ -13,7 +13,7 @@
|
||||||
- when: "matrix_registration_sqlite_database_path_local_stat_result.stat.exists | bool"
|
- when: "matrix_registration_sqlite_database_path_local_stat_result.stat.exists | bool"
|
||||||
block:
|
block:
|
||||||
- ansible.builtin.set_fact:
|
- ansible.builtin.set_fact:
|
||||||
matrix_postgres_db_migration_request:
|
devture_postgres_db_migration_request:
|
||||||
src: "{{ matrix_registration_sqlite_database_path_local }}"
|
src: "{{ matrix_registration_sqlite_database_path_local }}"
|
||||||
dst: "{{ matrix_registration_database_connection_string }}"
|
dst: "{{ matrix_registration_database_connection_string }}"
|
||||||
caller: "{{ role_path | basename }}"
|
caller: "{{ role_path | basename }}"
|
||||||
|
@ -27,7 +27,7 @@
|
||||||
additional_psql_statements_db_name: "{{ matrix_registration_database_name }}"
|
additional_psql_statements_db_name: "{{ matrix_registration_database_name }}"
|
||||||
|
|
||||||
- ansible.builtin.import_role:
|
- ansible.builtin.import_role:
|
||||||
name: custom/matrix-postgres
|
name: galaxy/com.devture.ansible.role.postgres
|
||||||
tasks_from: migrate_db_to_postgres
|
tasks_from: migrate_db_to_postgres
|
||||||
|
|
||||||
- ansible.builtin.set_fact:
|
- ansible.builtin.set_fact:
|
||||||
|
|
|
@ -31,15 +31,15 @@
|
||||||
ansible.builtin.set_fact:
|
ansible.builtin.set_fact:
|
||||||
matrix_synapse_rust_synapse_compress_state_psql_import_command: >-
|
matrix_synapse_rust_synapse_compress_state_psql_import_command: >-
|
||||||
{{ devture_systemd_docker_base_host_command_docker }} run --rm --name matrix-rust-synapse-compress-state-psql-import
|
{{ devture_systemd_docker_base_host_command_docker }} run --rm --name matrix-rust-synapse-compress-state-psql-import
|
||||||
--user={{ matrix_user_uid }}:{{ matrix_user_gid }}
|
--user={{ devture_postgres_uid }}:{{ devture_postgres_gid }}
|
||||||
--cap-drop=ALL
|
--cap-drop=ALL
|
||||||
--network={{ matrix_docker_network }}
|
--network={{ devture_postgres_container_network }}
|
||||||
--env-file={{ matrix_postgres_base_path }}/env-postgres-psql
|
--env-file={{ devture_postgres_base_path }}/env-postgres-psql
|
||||||
--mount type=bind,src={{ matrix_synapse_rust_synapse_compress_state_base_path }},dst=/work,ro
|
--mount type=bind,src={{ matrix_synapse_rust_synapse_compress_state_base_path }},dst=/work,ro
|
||||||
--entrypoint=/bin/sh
|
--entrypoint=/bin/sh
|
||||||
{{ matrix_postgres_docker_image_latest }}
|
{{ devture_postgres_container_image_latest }}
|
||||||
-c "cat /work/state-compressor.sql |
|
-c "cat /work/state-compressor.sql |
|
||||||
psql -v ON_ERROR_STOP=1 -h matrix-postgres -d {{ matrix_synapse_database_database }}"
|
psql -v ON_ERROR_STOP=1 -h {{ devture_postgres_identifier }} -d {{ matrix_synapse_database_database }}"
|
||||||
|
|
||||||
- name: Import compression SQL into Postgres
|
- name: Import compression SQL into Postgres
|
||||||
ansible.builtin.command: "{{ matrix_synapse_rust_synapse_compress_state_psql_import_command }}"
|
ansible.builtin.command: "{{ matrix_synapse_rust_synapse_compress_state_psql_import_command }}"
|
||||||
|
|
|
@ -3,8 +3,8 @@
|
||||||
|
|
||||||
- name: Fail if Postgres not enabled
|
- name: Fail if Postgres not enabled
|
||||||
ansible.builtin.fail:
|
ansible.builtin.fail:
|
||||||
msg: "Postgres via the matrix-postgres role is not enabled (`matrix_postgres_enabled`). Cannot use rust-synapse-compress-state."
|
msg: "Postgres via the com.devture.ansible.role.postgres role is not enabled (`devture_postgres_enabled`). Cannot use rust-synapse-compress-state."
|
||||||
when: "not matrix_postgres_enabled | bool"
|
when: "not devture_postgres_enabled | bool"
|
||||||
|
|
||||||
|
|
||||||
# Defaults
|
# Defaults
|
||||||
|
@ -53,17 +53,11 @@
|
||||||
delay: "{{ devture_playbook_help_container_retries_delay }}"
|
delay: "{{ devture_playbook_help_container_retries_delay }}"
|
||||||
until: result is not failed
|
until: result is not failed
|
||||||
|
|
||||||
- name: Generate rust-synapse-compress-state room find command
|
|
||||||
|
- name: Generate rust-synapse-compress-state room find SQL command
|
||||||
ansible.builtin.set_fact:
|
ansible.builtin.set_fact:
|
||||||
matrix_synapse_rust_synapse_compress_state_find_rooms_command: >-
|
matrix_synapse_rust_synapse_compress_state_find_rooms_command: >-
|
||||||
{{ devture_systemd_docker_base_host_command_docker }} run --rm --name matrix-rust-synapse-compress-state-find-rooms
|
{{ devture_postgres_bin_path }}/cli-non-interactive --dbname={{ matrix_synapse_database_database | quote }} -c "SELECT array_to_json(array_agg(row_to_json (r))) FROM (SELECT room_id, count(*) AS count FROM state_groups_state GROUP BY room_id HAVING count(*) > {{ matrix_synapse_rust_synapse_compress_state_min_state_groups_required }} ORDER BY count DESC) r;"
|
||||||
--user={{ matrix_user_uid }}:{{ matrix_user_gid }}
|
|
||||||
--cap-drop=ALL
|
|
||||||
--network={{ matrix_docker_network }}
|
|
||||||
--env-file={{ matrix_postgres_base_path }}/env-postgres-psql
|
|
||||||
{{ matrix_postgres_docker_image_latest }}
|
|
||||||
psql -v ON_ERROR_STOP=1 -h matrix-postgres {{ matrix_synapse_database_database }} -c
|
|
||||||
'SELECT array_to_json(array_agg(row_to_json (r))) FROM (SELECT room_id, count(*) AS count FROM state_groups_state GROUP BY room_id HAVING count(*) > {{ matrix_synapse_rust_synapse_compress_state_min_state_groups_required }} ORDER BY count DESC) r;'
|
|
||||||
|
|
||||||
- name: Find rooms eligible for compression with rust-synapse-compress-state
|
- name: Find rooms eligible for compression with rust-synapse-compress-state
|
||||||
ansible.builtin.command: "{{ matrix_synapse_rust_synapse_compress_state_find_rooms_command }}"
|
ansible.builtin.command: "{{ matrix_synapse_rust_synapse_compress_state_find_rooms_command }}"
|
||||||
|
|
|
@ -10,37 +10,43 @@
|
||||||
msg: "The `password` variable needs to be provided to this playbook, via --extra-vars"
|
msg: "The `password` variable needs to be provided to this playbook, via --extra-vars"
|
||||||
when: "password is not defined or password == '<your-password>'"
|
when: "password is not defined or password == '<your-password>'"
|
||||||
|
|
||||||
- name: Fail if not using matrix-postgres container
|
- name: Fail if not using integrated Postgres database
|
||||||
ansible.builtin.fail:
|
ansible.builtin.fail:
|
||||||
msg: "This command is working only when matrix-postgres container is being used"
|
msg: "This command is working only when Postgres is installed via the the integrated com.devture.ansible.role.postgres role"
|
||||||
when: "not matrix_postgres_enabled | bool"
|
when: "not devture_postgres_enabled | bool"
|
||||||
|
|
||||||
- name: Ensure matrix-synapse is started
|
- name: Ensure Postgres is started
|
||||||
ansible.builtin.service:
|
ansible.builtin.service:
|
||||||
name: matrix-synapse
|
name: "{{ devture_postgres_identifier }}"
|
||||||
state: started
|
|
||||||
daemon_reload: true
|
|
||||||
register: start_result
|
|
||||||
|
|
||||||
- name: Ensure matrix-postgres is started
|
|
||||||
ansible.builtin.service:
|
|
||||||
name: matrix-postgres
|
|
||||||
state: started
|
state: started
|
||||||
daemon_reload: true
|
daemon_reload: true
|
||||||
register: postgres_start_result
|
register: postgres_start_result
|
||||||
|
|
||||||
|
- name: Ensure Synapse is started
|
||||||
|
ansible.builtin.service:
|
||||||
|
name: matrix-synapse
|
||||||
|
state: started
|
||||||
|
daemon_reload: true
|
||||||
|
register: synapse_start_result
|
||||||
|
|
||||||
- name: Wait a while, so that Matrix Synapse can manage to start
|
- name: Wait a while, so that Synapse and/or Postgres can manage to start
|
||||||
ansible.builtin.pause:
|
ansible.builtin.pause:
|
||||||
seconds: 7
|
seconds: 7
|
||||||
when: "start_result.changed or postgres_start_result.changed"
|
when: "synapse_start_result.changed or postgres_start_result.changed"
|
||||||
|
|
||||||
- name: Generate password hash
|
- name: Generate user password hash
|
||||||
ansible.builtin.shell: "{{ devture_systemd_docker_base_host_command_docker }} exec matrix-synapse /usr/local/bin/hash_password -c /data/homeserver.yaml -p {{ password | quote }}"
|
ansible.builtin.shell: "{{ devture_systemd_docker_base_host_command_docker }} exec matrix-synapse /usr/local/bin/hash_password -c /data/homeserver.yaml -p {{ password | quote }}"
|
||||||
register: password_hash
|
register: password_hash
|
||||||
changed_when: false
|
changed_when: false
|
||||||
|
|
||||||
|
- name: Generate user password-change SQL command
|
||||||
|
ansible.builtin.set_fact:
|
||||||
|
matrix_synapse_user_password_change_command: >-
|
||||||
|
{{ devture_postgres_bin_path }}/cli-non-interactive --dbname={{ matrix_synapse_database_database | quote }} -c "UPDATE users SET password_hash='{{ password_hash.stdout }}' WHERE name = '@{{ username }}:{{ matrix_domain }}'"
|
||||||
|
|
||||||
- name: Update user password hash
|
- name: Update user password hash
|
||||||
ansible.builtin.command: "{{ matrix_local_bin_path }}/matrix-postgres-update-user-password-hash {{ username | quote }} {{ password_hash.stdout | quote }}"
|
ansible.builtin.command:
|
||||||
|
cmd: "{{ matrix_synapse_user_password_change_command }}"
|
||||||
register: matrix_synapse_update_user_password_result
|
register: matrix_synapse_update_user_password_result
|
||||||
changed_when: matrix_synapse_update_user_password_result.rc == 0
|
changed_when: matrix_synapse_update_user_password_result.rc == 0
|
||||||
|
failed_when: "matrix_synapse_update_user_password_result.rc != 0 or matrix_synapse_update_user_password_result.stdout != 'UPDATE 1'"
|
||||||
|
|
|
@ -34,3 +34,15 @@
|
||||||
- {'old': 'matrix_systemd_services_list', 'new': 'devture_systemd_service_manager_services_list_additional'}
|
- {'old': 'matrix_systemd_services_list', 'new': 'devture_systemd_service_manager_services_list_additional'}
|
||||||
- {'old': 'matrix_common_after_systemd_service_start_wait_for_timeout_seconds', 'new': 'devture_systemd_service_manager_up_verification_delay_seconds'}
|
- {'old': 'matrix_common_after_systemd_service_start_wait_for_timeout_seconds', 'new': 'devture_systemd_service_manager_up_verification_delay_seconds'}
|
||||||
- {'old': 'matrix_systemd_services_autostart_enabled', 'new': 'devture_systemd_service_manager_services_autostart_enabled'}
|
- {'old': 'matrix_systemd_services_autostart_enabled', 'new': 'devture_systemd_service_manager_services_autostart_enabled'}
|
||||||
|
|
||||||
|
- name: (Deprecation) Catch and report matrix_postgres variables
|
||||||
|
ansible.builtin.fail:
|
||||||
|
msg: |-
|
||||||
|
The matrix-postgres role in the playbook has been replaced with the com.devture.ansible.role.postgres role (https://github.com/devture/com.devture.ansible.role.postgres).
|
||||||
|
The new role is pretty much the same, but uses differently named variables.
|
||||||
|
|
||||||
|
Please change your configuration (vars.yml) to rename all matrix-postgres variables (`matrix_postgres_*` -> `devture_postgres_*`).
|
||||||
|
Note that `matrix_postgres_backup_*` variables (used by the `matrix-postgres-backup` role) need to remain as they are for now. Do not rename those!
|
||||||
|
|
||||||
|
The following variables in your configuration need to be renamed: {{ vars | dict2items | rejectattr('key', 'match', 'matrix_postgres_backup_') | selectattr('key', 'match', 'matrix_postgres_.*') | map (attribute='key') | join(', ') }}
|
||||||
|
when: "vars | dict2items | rejectattr('key', 'match', 'matrix_postgres_backup_') | selectattr('key', 'match', 'matrix_postgres_.*') | list | items2dict"
|
||||||
|
|
Loading…
Reference in a new issue