2df4349606
If the playbook were to run with `--tags=setup-nginx-proxy`, it wouldn't go into `setup_corporal.yml`, which meant it wouldn't perform a bunch of `set_fact` calls which override important nginx proxy configuration. We run these variable overrides on each call now (tagged with `always`) to avoid such problems in the future.
66 lines
2.3 KiB
YAML
66 lines
2.3 KiB
YAML
---
|
|
|
|
#
|
|
# Tasks related to setting up matrix-corporal
|
|
#
|
|
|
|
- name: Fail if Shared Secret Auth extension not enabled
|
|
fail:
|
|
msg: "To use matrix-corporal, you need to enable the Shared Secret Auth module for Synapse (see matrix_synapse_ext_password_provider_shared_secret_auth_enabled)"
|
|
when: "matrix_corporal_enabled and not matrix_synapse_ext_password_provider_shared_secret_auth_enabled"
|
|
|
|
- name: Fail if HTTP API enabled, but no token set
|
|
fail:
|
|
msg: "The Matrix Corporal HTTP API is enabled, but no auth token has been set in matrix_corporal_http_api_auth_token"
|
|
when: "matrix_corporal_enabled and matrix_corporal_http_api_enabled and matrix_corporal_http_api_auth_token == ''"
|
|
|
|
- name: Fail if policy provider configuration not set
|
|
fail:
|
|
msg: "The Matrix Corporal policy provider configuration has not been set in matrix_corporal_policy_provider_config"
|
|
when: "matrix_corporal_enabled and matrix_corporal_policy_provider_config == ''"
|
|
|
|
# There are some additional initialization tasks in setup_corporal_overrides.yml,
|
|
# which need to always run, no matter what tag the playbook is running with.
|
|
|
|
- name: Ensure Matrix Corporal paths exist
|
|
file:
|
|
path: "{{ item }}"
|
|
state: directory
|
|
mode: 0750
|
|
owner: "{{ matrix_user_username }}"
|
|
group: "{{ matrix_user_username }}"
|
|
with_items:
|
|
- "{{ matrix_corporal_config_dir_path }}"
|
|
- "{{ matrix_corporal_cache_dir_path }}"
|
|
- "{{ matrix_corporal_var_dir_path }}"
|
|
when: "matrix_corporal_enabled"
|
|
|
|
- name: Ensure Matrix Corporal Docker image is pulled
|
|
docker_image:
|
|
name: "{{ matrix_corporal_docker_image }}"
|
|
when: "matrix_corporal_enabled"
|
|
|
|
- name: Ensure Matrix Corporal config installed
|
|
template:
|
|
src: "{{ role_path }}/templates/corporal/config.json.j2"
|
|
dest: "{{ matrix_corporal_config_dir_path }}/config.json"
|
|
mode: 0644
|
|
when: "matrix_corporal_enabled"
|
|
|
|
- name: Ensure matrix-corporal.service installed
|
|
template:
|
|
src: "{{ role_path }}/templates/systemd/matrix-corporal.service.j2"
|
|
dest: "/etc/systemd/system/matrix-corporal.service"
|
|
mode: 0644
|
|
when: "matrix_corporal_enabled"
|
|
|
|
#
|
|
# Tasks related to getting rid of matrix-corporal (if it was previously enabled)
|
|
#
|
|
|
|
- name: Ensure matrix-corporal.service doesn't exist
|
|
file:
|
|
path: "/etc/systemd/system/matrix-corporal.service"
|
|
state: absent
|
|
when: "not matrix_corporal_enabled"
|