3fd6fd647f
Moving away from using the default bridge network to using our own. This isolates our services from other Docker containers running on the default network on the same host. The benefits are that: - isolation is a little better - we no longer share a default bridge network with any other containers that might be running on the host - there are no longer hard dependencies - we do service discovery by DNS name, and not via explicit `--link` usage during container start, so containers can start out of order and fail without bringing down others with them (`matrix-nginx-proxy` can continue running, even if one of the other services dies) In the future, when other services get introduced, the increased resilience and simplicity will help as well.
37 lines
883 B
YAML
37 lines
883 B
YAML
---
|
|
|
|
- name: Ensure Matrix group is created
|
|
group:
|
|
name: "{{ matrix_user_username }}"
|
|
gid: "{{ matrix_user_gid }}"
|
|
state: present
|
|
|
|
- name: Ensure Matrix user is created
|
|
user:
|
|
name: "{{ matrix_user_username }}"
|
|
uid: "{{ matrix_user_uid }}"
|
|
state: present
|
|
group: "{{ matrix_user_username }}"
|
|
|
|
- name: Ensure environment variables data path exists
|
|
file:
|
|
path: "{{ matrix_environment_variables_data_path }}"
|
|
state: directory
|
|
mode: 0700
|
|
|
|
- name: Ensure Matrix base path exists
|
|
file:
|
|
path: "{{ item }}"
|
|
state: directory
|
|
mode: 0750
|
|
owner: "{{ matrix_user_username }}"
|
|
group: "{{ matrix_user_username }}"
|
|
with_items:
|
|
- "{{ matrix_base_data_path }}"
|
|
- "{{ matrix_synapse_base_path }}"
|
|
|
|
- name: Ensure Matrix network is created in Docker
|
|
docker_network:
|
|
name: "{{ matrix_docker_network }}"
|
|
driver: bridge
|