matrix-docker-ansible-deploy/roles/matrix-nginx-proxy/vars/main.yml

---

# Tells whether this role had executed or not. Toggled to `true` during runtime.
matrix_nginx_proxy_role_executed: false

matrix_ssl_renewal_systemd_units_list:
  - name: matrix-ssl-lets-encrypt-certificates-renew.service
    applicable: "{{ matrix_ssl_retrieval_method == 'lets-encrypt' }}"
    enableable: false
  - name: matrix-ssl-lets-encrypt-certificates-renew.timer
    applicable: "{{ matrix_ssl_retrieval_method == 'lets-encrypt' }}"
    enableable: true
  - name: matrix-ssl-nginx-proxy-reload.service
    applicable: "{{ matrix_ssl_retrieval_method == 'lets-encrypt' and matrix_nginx_proxy_enabled|bool }}"
    enableable: false
  - name: matrix-ssl-nginx-proxy-reload.timer
    applicable: "{{ matrix_ssl_retrieval_method == 'lets-encrypt' and matrix_nginx_proxy_enabled|bool }}"
    enableable: true
Make matrix-nginx-proxy role independent of others The matrix-nginx-proxy role can now be used independently. This makes it consistent with all other roles, with the `matrix-base` role remaining as their only dependency. Separating matrix-nginx-proxy was relatively straightforward, with the exception of the Mautrix Telegram reverse-proxying configuration. Mautrix Telegram, being an extension/bridge, does not feel important enough to justify its own special handling in matrix-nginx-proxy. Thus, we've introduced the concept of "additional configuration blocks" (`matrix_nginx_proxy_proxy_matrix_additional_server_configuration_blocks`), where any module can register its own custom nginx server blocks. For such dynamic registration to work, the order of role execution becomes important. To make it possible for each module participating in dynamic registration to verify that the order of execution is correct, we've also introduced a `matrix_nginx_proxy_role_executed` variable. It should be noted that this doesn't make the matrix-synapse role dependent on matrix-nginx-proxy. It's optional runtime detection and registration, and it only happens in the matrix-synapse role when `matrix_mautrix_telegram_enabled: true`. 2019-01-17 11:32:46 +00:00			`---`

			# Tells whether this role had executed or not. Toggled to `true` during runtime.
Replace cronjobs with systemd timers Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/756 Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/737 I feel like timers are somewhat more complicated and dirty (compared to cronjobs), but they come with these benefits: - log output goes to journald - on newer systemd distros, you can see when the timer fired, when it will fire, etc. - we don't need to rely on cron (reducing our dependencies to just systemd + Docker) Cronjobs work well, but it's one more dependency that needs to be installed. We were even asking people to install it manually (in `docs/prerequisites.md`), which could have gone unnoticed. Once in a while someone says "my SSL certificates didn't renew" and it's likely because they forgot to install a cron daemon. Switching to systemd timers means that installation is simpler and more unified. 2021-01-14 21:23:46 +00:00			`matrix_nginx_proxy_role_executed: false`

			`matrix_ssl_renewal_systemd_units_list:`
			`- name: matrix-ssl-lets-encrypt-certificates-renew.service`
			`applicable: "{{ matrix_ssl_retrieval_method == 'lets-encrypt' }}"`
			`enableable: false`
			`- name: matrix-ssl-lets-encrypt-certificates-renew.timer`
			`applicable: "{{ matrix_ssl_retrieval_method == 'lets-encrypt' }}"`
			`enableable: true`
			`- name: matrix-ssl-nginx-proxy-reload.service`
			`applicable: "{{ matrix_ssl_retrieval_method == 'lets-encrypt' and matrix_nginx_proxy_enabled\|bool }}"`
			`enableable: false`
			`- name: matrix-ssl-nginx-proxy-reload.timer`
			`applicable: "{{ matrix_ssl_retrieval_method == 'lets-encrypt' and matrix_nginx_proxy_enabled\|bool }}"`
			`enableable: true`