configpolicy/roles/synapse/tasks/main.yml

71 lines
1.4 KiB
YAML

- name: ensure synapse is installed
package:
name: matrix-synapse
state: present
tags:
- install
- name: ensure synapse is configured
template:
src: homeserver.yaml.j2
dest: /etc/synapse/homeserver.yaml
owner: root
group: synapse
mode: '0750'
notify: restart synapse
tags:
- config
- name: ensure apache is configured to proxy for synapse
template:
src: matrix.httpd.conf.j2
dest: /etc/httpd/conf.d/matrix.conf
mode: '0644'
notify: reload httpd
tags: httpd-conf
- name: ensure apache can bind to synapse port
seport:
ports: 8448
proto: tcp
setype: http_port_t
state: present
tags:
- selinux
- seport
- name: ensure apache is allowed to proxy for synapse
seboolean:
name: httpd_can_network_connect
persistent: true
state: true
tags:
- selinux
- seboolean
- name: ensure synapse.service drop-in configuration directory exists
file:
path: /etc/systemd/system/synapse.service.d
owner: root
group: root
mode: u=rwx,go=rx
state: directory
tags:
- systemd
- name: ensure synapse service timeout is set
copy:
src: timeout-start.conf
dest: /etc/systemd/system/synapse.service.d/timeout-start.conf
owner: root
group: root
mode: u=rw,go=r
tags:
- systemd
notify:
- reload systemd
- name: ensure synapse starts at boot
service:
name: synapse
enabled: true