diff --git a/matrix/ansible-playbook-config/inventory/host_vars/matrix.yourdomain/vars.yml b/matrix/ansible-playbook-config/inventory/host_vars/matrix.yourdomain/vars.yml index d3cffc3..a627caf 100644 --- a/matrix/ansible-playbook-config/inventory/host_vars/matrix.yourdomain/vars.yml +++ b/matrix/ansible-playbook-config/inventory/host_vars/matrix.yourdomain/vars.yml @@ -71,4 +71,44 @@ devture_postgres_connection_password: "{{ vault_devture_postgres_connection_pass # matrix_coturn_turn_external_ip_address: '' # No coturn needed for my own personal server -matrix_coturn_enabled: false \ No newline at end of file +matrix_coturn_enabled: false + +# Handle users with synapse admin +matrix_synapse_admin_enabled: true + +# Use Keycloak authentication +matrix_synapse_oidc_enabled: true + +matrix_synapse_oidc_providers: + - idp_id: keycloak + idp_name: "My KeyCloak server" + issuer: "{{ vault_issuer }}" + client_id: "Matrix" + client_secret: "{{ vault_synapse_keycloak }}" + scopes: ["openid", "profile"] + user_mapping_provider: + config: + localpart_template: "{% raw %}{{ user.preferred_username }}{% endraw %}" + display_name_template: "{% raw %}{{ user.name }}{% endraw %}" + email_template: "{% raw %}{{ user.email }}{% endraw %}" + allow_existing_users: true # Optional + backchannel_logout_enabled: true # Optional + +# Bridges +matrix_synapse_ext_password_provider_shared_secret_auth_enabled: true +matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret: "{{ vault_matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret }}" + +matrix_mautrix_whatsapp_enabled: true + +matrix_mautrix_telegram_enabled: true +matrix_mautrix_telegram_api_id: "{{ vault_matrix_mautrix_telegram_api_id }}" +matrix_mautrix_telegram_api_hash: "{{ vault_matrix_mautrix_telegram_api_hash }}" + +matrix_mautrix_signal_enabled: true + +matrix_appservice_slack_enabled: true +matrix_appservice_slack_control_room_id: "{{ vault_matrix_appservice_slack_control_room_id }}" +matrix_appservice_slack_puppeting_enabled: true +matrix_appservice_slack_puppeting_slackapp_client_id: "{{ vault_matrix_appservice_slack_puppeting_slackapp_client_id }}" +matrix_appservice_slack_puppeting_slackapp_client_secret: "{{ vault_matrix_appservice_slack_puppeting_slackapp_client_secret }}" +matrix_appservice_slack_team_sync_enabled: true \ No newline at end of file diff --git a/matrix/ansible-playbook-config/inventory/host_vars/matrix.yourdomain/vault.yml.example b/matrix/ansible-playbook-config/inventory/host_vars/matrix.yourdomain/vault.yml.example index 656d996..7c2d472 100644 --- a/matrix/ansible-playbook-config/inventory/host_vars/matrix.yourdomain/vault.yml.example +++ b/matrix/ansible-playbook-config/inventory/host_vars/matrix.yourdomain/vault.yml.example @@ -1,3 +1,19 @@ vault_matrix_domain: vault_matrix_homeserver_generic_secret_key: -vault_devture_postgres_connection_password: \ No newline at end of file +vault_devture_postgres_connection_password: + +# For OpenID connect +vault_issuer: +vault_synapse_keycloak: + +# For bridges +vault_matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret: + +# Telegram +vault_matrix_mautrix_telegram_api_id: +vault_matrix_mautrix_telegram_api_hash: + +# Slack +vault_matrix_appservice_slack_control_room_id: +vault_matrix_appservice_slack_puppeting_slackapp_client_id: +vault_matrix_appservice_slack_puppeting_slackapp_client_secret: \ No newline at end of file