Added bridges

matrix/ansible-playbook-config/inventory/host_vars/matrix.yourdomain/vars.yml

@@ -71,4 +71,44 @@ devture_postgres_connection_password: "{{ vault_devture_postgres_connection_pass
 # matrix_coturn_turn_external_ip_address: ''
 
 # No coturn needed for my own personal server
-matrix_coturn_enabled: false
+matrix_coturn_enabled: false
+
+# Handle users with synapse admin
+matrix_synapse_admin_enabled: true
+
+# Use Keycloak authentication
+matrix_synapse_oidc_enabled: true
+
+matrix_synapse_oidc_providers:
+  - idp_id: keycloak
+    idp_name: "My KeyCloak server"
+    issuer: "{{ vault_issuer }}"
+    client_id: "Matrix"
+    client_secret: "{{ vault_synapse_keycloak }}"
+    scopes: ["openid", "profile"]
+    user_mapping_provider:
+      config:
+        localpart_template: "{% raw %}{{ user.preferred_username }}{% endraw %}"
+        display_name_template: "{% raw %}{{ user.name }}{% endraw %}"
+        email_template: "{% raw %}{{ user.email }}{% endraw %}"
+    allow_existing_users: true # Optional
+    backchannel_logout_enabled: true # Optional
+
+# Bridges
+matrix_synapse_ext_password_provider_shared_secret_auth_enabled: true
+matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret: "{{ vault_matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret }}"
+
+matrix_mautrix_whatsapp_enabled: true
+
+matrix_mautrix_telegram_enabled: true
+matrix_mautrix_telegram_api_id: "{{ vault_matrix_mautrix_telegram_api_id }}"
+matrix_mautrix_telegram_api_hash: "{{ vault_matrix_mautrix_telegram_api_hash }}"
+
+matrix_mautrix_signal_enabled: true
+
+matrix_appservice_slack_enabled: true
+matrix_appservice_slack_control_room_id: "{{ vault_matrix_appservice_slack_control_room_id }}"
+matrix_appservice_slack_puppeting_enabled: true
+matrix_appservice_slack_puppeting_slackapp_client_id: "{{ vault_matrix_appservice_slack_puppeting_slackapp_client_id }}"
+matrix_appservice_slack_puppeting_slackapp_client_secret: "{{ vault_matrix_appservice_slack_puppeting_slackapp_client_secret }}"
+matrix_appservice_slack_team_sync_enabled: true

matrix/ansible-playbook-config/inventory/host_vars/matrix.yourdomain/vault.yml.example

@@ -1,3 +1,19 @@
 vault_matrix_domain:
 vault_matrix_homeserver_generic_secret_key: 
-vault_devture_postgres_connection_password:
+vault_devture_postgres_connection_password:
+
+# For OpenID connect 
+vault_issuer:
+vault_synapse_keycloak:
+
+# For bridges
+vault_matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret:
+
+# Telegram 
+vault_matrix_mautrix_telegram_api_id: 
+vault_matrix_mautrix_telegram_api_hash:
+
+# Slack
+vault_matrix_appservice_slack_control_room_id: 
+vault_matrix_appservice_slack_puppeting_slackapp_client_id: 
+vault_matrix_appservice_slack_puppeting_slackapp_client_secret: