From 4d260c0dd533a0cf6a87d113887759660472f898 Mon Sep 17 00:00:00 2001
From: Slavi Pantaleev <slavi@devture.com>
Date: Fri, 17 Apr 2020 09:44:48 +0300
Subject: [PATCH] Add encryption configuration defaults to Mautrix bridges

Related to #451 (Github Issue).
---
 .../matrix-bridge-mautrix-facebook/defaults/main.yml | 11 +++++++++++
 .../matrix-bridge-mautrix-hangouts/defaults/main.yml | 11 +++++++++++
 .../matrix-bridge-mautrix-telegram/defaults/main.yml | 12 ++++++++++++
 3 files changed, 34 insertions(+)

diff --git a/roles/matrix-bridge-mautrix-facebook/defaults/main.yml b/roles/matrix-bridge-mautrix-facebook/defaults/main.yml
index 30693bd5..3c09dafd 100644
--- a/roles/matrix-bridge-mautrix-facebook/defaults/main.yml
+++ b/roles/matrix-bridge-mautrix-facebook/defaults/main.yml
@@ -141,6 +141,17 @@ matrix_mautrix_facebook_configuration_yaml: |
       presence: true
       # Whether or not to update avatars when syncing all contacts at startup.
       update_avatar_initial_sync: true
+      # End-to-bridge encryption support options. These require matrix-nio to be installed with pip
+      # and login_shared_secret to be configured in order to get a device for the bridge bot.
+      #
+      # Additionally, https://github.com/matrix-org/synapse/pull/5758 is required if using a normal
+      # application service.
+      encryption:
+          # Allow encryption, work in group chat rooms with e2ee enabled
+          allow: false
+          # Default to encryption, force-enable encryption in all portals the bridge creates
+          # This will cause the bridge bot to be in private chats for the encryption to work properly.
+          default: false
 
       # Permissions for using the bridge.
       # Permitted values:
diff --git a/roles/matrix-bridge-mautrix-hangouts/defaults/main.yml b/roles/matrix-bridge-mautrix-hangouts/defaults/main.yml
index 5284bc82..8de4576f 100644
--- a/roles/matrix-bridge-mautrix-hangouts/defaults/main.yml
+++ b/roles/matrix-bridge-mautrix-hangouts/defaults/main.yml
@@ -124,6 +124,17 @@ matrix_mautrix_hangouts_configuration_yaml: |
       login_shared_secret: {{ matrix_mautrix_hangouts_login_shared_secret|to_json }}
       # Whether or not to update avatars when syncing all contacts at startup.
       update_avatar_initial_sync: true
+      # End-to-bridge encryption support options. These require matrix-nio to be installed with pip
+      # and login_shared_secret to be configured in order to get a device for the bridge bot.
+      #
+      # Additionally, https://github.com/matrix-org/synapse/pull/5758 is required if using a normal
+      # application service.
+      encryption:
+          # Allow encryption, work in group chat rooms with e2ee enabled
+          allow: false
+          # Default to encryption, force-enable encryption in all portals the bridge creates
+          # This will cause the bridge bot to be in private chats for the encryption to work properly.
+          default: false
 
       # Public website and API configs
       web:
diff --git a/roles/matrix-bridge-mautrix-telegram/defaults/main.yml b/roles/matrix-bridge-mautrix-telegram/defaults/main.yml
index 6cfa3abb..b491dce8 100644
--- a/roles/matrix-bridge-mautrix-telegram/defaults/main.yml
+++ b/roles/matrix-bridge-mautrix-telegram/defaults/main.yml
@@ -227,6 +227,18 @@ matrix_mautrix_telegram_configuration_yaml: |
               height: 256
               background: "020202"  # only for gif
               fps: 30               # only for webm
+      # End-to-bridge encryption support options. These require matrix-nio to be installed with pip
+      # and login_shared_secret to be configured in order to get a device for the bridge bot.
+      #
+      # Additionally, https://github.com/matrix-org/synapse/pull/5758 is required if using a normal
+      # application service.
+      encryption:
+          # Allow encryption, work in group chat rooms with e2ee enabled
+          allow: false
+          # Default to encryption, force-enable encryption in all portals the bridge creates
+          # This will cause the bridge bot to be in private chats for the encryption to work properly.
+          default: false
+
       # Overrides for base power levels.
       initial_power_level_overrides:
           user: {}