- name: ensure synapse is installed
  package:
    name: matrix-synapse
    state: present
  tags:
  - install

- name: ensure synapse is configured
  template:
    src: homeserver.yaml.j2
    dest: /etc/synapse/homeserver.yaml
    owner: root
    group: synapse
    mode: '0750'
  notify: restart synapse
  tags:
  - config

- name: ensure apache is configured to proxy for synapse
  template:
    src: matrix.httpd.conf.j2
    dest: /etc/httpd/conf.d/matrix.conf
    mode: '0644'
  notify: reload httpd
  tags: httpd-conf

- name: ensure apache can bind to synapse port
  seport:
    ports: 8448
    proto: tcp
    setype: http_port_t
    state: present
  tags:
  - selinux
  - seport

- name: ensure apache is allowed to proxy for synapse
  seboolean:
    name: httpd_can_network_connect
    persistent: true
    state: true
  tags:
  - selinux
  - seboolean

- name: ensure synapse.service drop-in configuration directory exists
  file:
    path: /etc/systemd/system/synapse.service.d
    owner: root
    group: root
    mode: u=rwx,go=rx
    state: directory
  tags:
  - systemd
- name: ensure synapse service timeout is set
  copy:
    src: timeout-start.conf
    dest: /etc/systemd/system/synapse.service.d/timeout-start.conf
    owner: root
    group: root
    mode: u=rw,go=r
  tags:
  - systemd
  notify:
  - reload systemd

- name: ensure synapse starts at boot
  service:
    name: synapse
    enabled: true