70487061f4
This doesn't replace all usage of `-v`, but it's a start. People sometimes troubleshoot by deleting files (especially bridge config files). Restarting Synapse with a missing registration.yaml file for a given bridge, causes the `-v /something/registration.yaml:/something/registration.yaml:ro` option to force-create `/something/registration.yaml` as a directory. When a path that's provided to the `-v` option is missing, Docker auto-creates that path as a directory. This causes more breakage and confusion later on. We'd rather fail, instead of magically creating directories. Using `--mount`, instead of `-v` is the solution to this. From Docker's documentation: > When you use --mount with type=bind, the host-path must refer to an existing path on the host. > The path will not be created for you and the service will fail with an error if the path does not exist.
29 lines
1.1 KiB
YAML
29 lines
1.1 KiB
YAML
---
|
|
|
|
- name: Fail if Shared Secret Auth secret not set
|
|
fail:
|
|
msg: "Shared Secret Auth is enabled, but no secret has been set in matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret"
|
|
when: "matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret == ''"
|
|
|
|
- name: Download matrix-synapse-shared-secret-auth
|
|
get_url:
|
|
url: "{{ matrix_synapse_ext_password_provider_shared_secret_auth_download_url }}"
|
|
dest: "{{ matrix_synapse_ext_path }}/shared_secret_authenticator.py"
|
|
force: true
|
|
mode: 0440
|
|
owner: "{{ matrix_user_username }}"
|
|
group: "{{ matrix_user_username }}"
|
|
|
|
- set_fact:
|
|
matrix_synapse_password_providers_enabled: true
|
|
|
|
matrix_synapse_container_extra_arguments: >
|
|
{{ matrix_synapse_container_extra_arguments|default([]) }}
|
|
+
|
|
{{ ["--mount type=bind,src={{ matrix_synapse_ext_path }}/shared_secret_authenticator.py,dst={{ matrix_synapse_in_container_python_packages_path }}/shared_secret_authenticator.py,ro"] }}
|
|
|
|
matrix_synapse_additional_loggers: >
|
|
{{ matrix_synapse_additional_loggers }}
|
|
+
|
|
{{ [{'name': 'shared_secret_authenticator', 'level': 'INFO'}] }}
|