Files
configpolicy/vault/synapse/hatch.chat
Dustin C. Hatch 371305bed4 roles/synapse: Deploy the Matrix homeserver
The *synapse* role and the corresponding `synapse.yml` playbook deploy
Synapse, the reference Matrix homeserver implementation.

Deploying Synapse itself is fairly straightforward: it is packaged by
Fedora and therefore can simply be installed via `dnf` and started by
`systemd`.  Making the service available on the Internet, however, is
more involved.  The Matrix protocol mostly works over HTTPS on the
standard port (443), so a typical reverse proxy deployment is mostly
sufficient.  Some parts of the Matrix protocol, however, involve
communication over an alternate port (8448).  This could be handled by a
reverse proxy as well, but since it is a fairly unique port, it could
also be handled by NAT/port forwarding.  In order to support both
deployment scenarios (as well as the hypothetical scenario wherein the
Synapse machine is directly accessible from the Internet), the *synapse*
role supports specifying an optional `matrix_tls_cert` variable.  If
this variable is set, it should contain the path to a certificate file
on the Ansible control machine that will be used for the "direct"
connections (i.e. on port 8448).  If it is not set, the default Apache
certificate will be used for both virtual hosts.

Synapse has a pretty extensive configuration schema, but most of the
options are set to their default values by the *synapse* role.  Other
than substituting secret keys, the only exposed configuration option is
the LDAP authentication provider.
2020-12-30 21:54:02 -06:00

19 lines
1.3 KiB
Plaintext

$ANSIBLE_VAULT;1.1;AES256
34636535316233646136616261343032313135656130353638623933663137346462633561646535
3361366164613237353862626136653266306563386233350a356637623666353335313361306333
35386532363863313533643037633664306134336362653462356561323562633734363931363530
3133366137336334360a336636393639653738623036356438616564373637316633393339396633
62386561623532393433376439386466383861313137363836323835393664393936663434633262
33363130363532653462666432323266386632616165353334353730313139663061356662383535
33633266613438373161313830393531363635633030373265616435636663613433336661636338
33363930316333323239383035616135383939343037373435626664323963316662613137313737
34396435343932653233616531353061393131353134623035393030383234343731333832633963
38376232356138366634303137303432313166643132313936633937353862393431353632613963
61353163333662643765373939666165616363656530353465323830623439623033396338663634
66343730613634383937613435316163336434363938366338653937356666666130663364376264
37353634643064613237646333623163643863643637313164643164393361323434373761633739
35643434303563663831363566653662303737653139393831343538656666333165316262326463
34316234616263636365363636373939373134333333666365333362643930666562616539643061
64613166366164646239383865376364393533633430336338376264363465333237303061663262
3436