162 lines
8 KiB
YAML
162 lines
8 KiB
YAML
# Dendrite is a second-generation Matrix homeserver currently in Beta
|
|
# See: https://github.com/matrix-org/dendrite
|
|
|
|
matrix_dendrite_enabled: false
|
|
|
|
matrix_dendrite_docker_image: "{{ matrix_dendrite_docker_image_name_prefix }}matrixdotorg/dendrite-monolith:{{ matrix_dendrite_docker_image_tag }}"
|
|
matrix_dendrite_docker_image_name_prefix: "docker.io/"
|
|
matrix_dendrite_docker_image_tag: "v0.5.1"
|
|
matrix_dendrite_docker_image_force_pull: "{{ matrix_dendrite_docker_image.endswith(':latest') }}"
|
|
|
|
matrix_dendrite_base_path: "{{ matrix_base_data_path }}/dendrite"
|
|
matrix_dendrite_config_dir_path: "{{ matrix_dendrite_base_path }}/config"
|
|
matrix_dendrite_storage_path: "{{ matrix_dendrite_base_path }}/storage"
|
|
matrix_dendrite_media_store_path: "{{ matrix_dendrite_storage_path }}/media-store"
|
|
matrix_dendrite_ext_path: "{{ matrix_dendrite_base_path }}/ext"
|
|
|
|
matrix_dendrite_container_http_bind_port: 8008
|
|
|
|
# This is passed as a flag `-http-bind-address` flag to the Dendrite server in the container
|
|
matrix_dendrite_container_http_bind_address: ":{{ matrix_dendrite_container_http_bind_port }}"
|
|
|
|
# Dendrite monolith exposes both the Client API and the Federation API on the same port
|
|
matrix_dendrite_container_client_api_port: "{{ matrix_dendrite_container_http_bind_port }}"
|
|
matrix_dendrite_container_federation_api_plain_port: "{{ matrix_dendrite_container_http_bind_port }}"
|
|
|
|
# Controls whether the matrix-dendrite container exposes the Client/Server API port (tcp/8008 in the container).
|
|
#
|
|
# Takes an "<ip>:<port>" or "<port>" value (e.g. "127.0.0.1:8008"), or empty string to not expose.
|
|
matrix_dendrite_container_client_api_host_bind_port: ""
|
|
|
|
# Controls whether the matrix-dendrite container exposes the tls (encrypted) Server/Server (Federation) API port (tcp/8448 in the container).
|
|
#
|
|
# Takes effect only if federation is enabled (matrix_dendrite_federation_enabled)
|
|
# and TLS support is enabled (matrix_dendrite_tls_federation_listener_enabled).
|
|
#
|
|
# Takes an "<ip>:<port>" or "<port>" value (e.g. "8448"), or empty string to not expose.
|
|
matrix_dendrite_container_federation_api_tls_host_bind_port: ""
|
|
|
|
# A list of extra arguments to pass to the container
|
|
matrix_dendrite_container_extra_arguments: []
|
|
|
|
# List of systemd services that matrix-dendrite.service depends on
|
|
matrix_dendrite_systemd_required_services_list: ["docker.service"]
|
|
|
|
# List of systemd services that matrix-dendrite.service wants
|
|
matrix_dendrite_systemd_wanted_services_list: []
|
|
|
|
# Specifies which template files to use when configuring Dendrite.
|
|
# If you'd like to have your own different configuration, feel free to copy and paste
|
|
# the original files into your inventory (e.g. in `inventory/host_vars/<host>/`)
|
|
# and then change the specific host's `vars.yaml` file like this:
|
|
# matrix_dendrite_template_dendrite_config: "{{ playbook_dir }}/inventory/host_vars/<host>/dendrite.yaml.j2"
|
|
matrix_dendrite_template_dendrite_config: "{{ role_path }}/templates/dendrite/dendrite.yaml.j2"
|
|
|
|
# A secret used to derive various other secrets
|
|
matrix_dendrite_generic_secret_key: ''
|
|
matrix_dendrite_registration_shared_secret: ''
|
|
matrix_dendrite_allow_guest_access: false
|
|
|
|
matrix_dendrite_max_file_size_bytes: 10485760
|
|
|
|
# The tmpfs at /tmp needs to be large enough to handle multiple concurrent file uploads.
|
|
matrix_dendrite_tmp_directory_size_mb: 500
|
|
|
|
# Rate limits
|
|
matrix_dendrite_rate_limiting_enabled: true
|
|
matrix_dendrite_rate_limiting_threshold: 5
|
|
matrix_dendrite_rate_limiting_cooloff_ms: 500
|
|
|
|
# Controls whether people with access to the homeserver can register by themselves.
|
|
matrix_dendrite_registration_disabled: false
|
|
|
|
# reCAPTCHA API for validating registration attempts
|
|
matrix_dendrite_enable_registration_captcha: false
|
|
matrix_dendrite_recaptcha_public_key: ""
|
|
matrix_dendrite_recaptcha_private_key: ""
|
|
|
|
# A list of additional "volumes" to mount in the container.
|
|
# This list gets populated dynamically based on Dendrite extensions that have been enabled.
|
|
# Contains definition objects like this: `{"src": "/outside", "dst": "/inside", "options": "rw|ro|slave|.."}
|
|
#
|
|
# Note: internally, this uses the `-v` flag for mounting the specified volumes.
|
|
# It's better (safer) to use the `--mount` flag for mounting volumes.
|
|
# To use `--mount`, specify it in `matrix_dendrite_container_extra_arguments`.
|
|
# Example: `matrix_dendrite_container_extra_arguments: ['--mount type=bind,src=/outside,dst=/inside,ro']
|
|
matrix_dendrite_container_additional_volumes: []
|
|
|
|
# A list of appservice config files (in-container filesystem paths).
|
|
# This list gets populated dynamically based on Dendrite extensions that have been enabled.
|
|
# You may wish to use this together with `matrix_dendrite_container_additional_volumes` or `matrix_dendrite_container_extra_arguments`.
|
|
matrix_dendrite_app_service_config_files: []
|
|
|
|
# Enable exposure of metrics
|
|
matrix_dendrite_metrics_enabled: false
|
|
matrix_dendrite_metrics_username: "metrics"
|
|
matrix_dendrite_metrics_password: "metrics"
|
|
|
|
# Postgres database information
|
|
matrix_dendrite_database_str: "postgresql://{{ matrix_dendrite_database_user }}:{{ matrix_dendrite_database_password }}@{{ matrix_dendrite_database_hostname }}"
|
|
matrix_dendrite_database_hostname: "matrix-postgres"
|
|
matrix_dendrite_database_user: "dendrite"
|
|
matrix_dendrite_database_password: "itsasecret"
|
|
matrix_dendrite_naffka_database: "dendrite_naffka"
|
|
matrix_dendrite_appservice_database: "dendrite_appservice"
|
|
matrix_dendrite_federationsender_database: "dendrite_federationsender"
|
|
matrix_dendrite_keyserver_database: "dendrite_keyserver"
|
|
matrix_dendrite_mediaapi_database: "dendrite_mediaapi"
|
|
matrix_dendrite_room_database: "dendrite_room"
|
|
matrix_dendrite_singingkeyserver_database: "dendrite_sigingkeyserver"
|
|
matrix_dendrite_syncapi_database: "dendrite_syncapi"
|
|
matrix_dendrite_account_database: "dendrite_account"
|
|
matrix_dendrite_device_database: "dendrite_device"
|
|
matrix_dendrite_mscs_database: "dendrite_mscs"
|
|
|
|
matrix_dendrite_turn_uris: []
|
|
matrix_dendrite_turn_shared_secret: ""
|
|
matrix_dendrite_turn_allow_guests: False
|
|
|
|
# Controls whether the self-check feature should validate TLS certificates.
|
|
matrix_dendrite_disable_tls_validation: false
|
|
|
|
matrix_dendrite_trusted_id_servers:
|
|
- "matrix.org"
|
|
- "vector.im"
|
|
|
|
# Controls whether Dendrite will federate at all.
|
|
# Disable this to completely isolate your server from the rest of the Matrix network.
|
|
matrix_dendrite_federation_enabled: true
|
|
|
|
# Controls whether the self-check feature should validate SSL certificates.
|
|
matrix_dendrite_self_check_validate_certificates: true
|
|
|
|
# Default Dendrite configuration template which covers the generic use case.
|
|
# You can customize it by controlling the various variables inside it.
|
|
#
|
|
# For a more advanced customization, you can extend the default (see `matrix_dendrite_configuration_extension_yaml`)
|
|
# or completely replace this variable with your own template.
|
|
matrix_dendrite_configuration_yaml: "{{ lookup('template', 'templates/dendrite/dendrite.yaml.j2') }}"
|
|
|
|
matrix_dendrite_configuration_extension_yaml: |
|
|
# Your custom YAML configuration for Dendrite goes here.
|
|
# This configuration extends the default starting configuration (`matrix_dendrite_configuration_yaml`).
|
|
#
|
|
# You can override individual variables from the default configuration, or introduce new ones.
|
|
#
|
|
# If you need something more special, you can take full control by
|
|
# completely redefining `matrix_dendrite_configuration_yaml`.
|
|
#
|
|
# Example configuration extension follows:
|
|
#
|
|
# server_notices:
|
|
# system_mxid_localpart: notices
|
|
# system_mxid_display_name: "Server Notices"
|
|
# system_mxid_avatar_url: "mxc://server.com/oumMVlgDnLYFaPVkExemNVVZ"
|
|
# room_name: "Server Notices"
|
|
|
|
matrix_dendrite_configuration_extension: "{{ matrix_dendrite_configuration_extension_yaml|from_yaml if matrix_dendrite_configuration_extension_yaml|from_yaml is mapping else {} }}"
|
|
|
|
# Holds the final Dendrite configuration (a combination of the default and its extension).
|
|
# You most likely don't need to touch this variable. Instead, see `matrix_dendrite_configuration_yaml`.
|
|
matrix_dendrite_configuration: "{{ matrix_dendrite_configuration_yaml|from_yaml|combine(matrix_dendrite_configuration_extension, recursive=True) }}"
|