bundles/matrix-synapse: auto-configure nginx vhost

bundles/matrix-synapse/metadata.py

@@ -1,3 +1,5 @@
+from json import dumps
+
 defaults = {
     'apt': {
         'repos': {
@@ -19,9 +21,6 @@ defaults = {
     'icinga2_api': {
         'matrix-synapse': {
             'services': {
-                'MATRIX-SYNAPSE HTTP ENDPOINT': {
-                    'command_on_monitored_host': '/usr/local/share/icinga/plugins/check_http_url_for_string http://[::1]:20080/_matrix/static/ "Synapse is running"',
-                },
                 'MATRIX-SYNAPSE PROCESS': {
                     'command_on_monitored_host': '/usr/lib/nagios/plugins/check_procs -a synapse.app.homeserver -c 1:',
                     'vars.notification.sms': True,
@@ -53,5 +52,78 @@ defaults = {
                 },
             },
         },
-    }
+    },
+    'zfs': {
+        'datasets': {
+            'tank/matrix-synapse': {
+                'mountpoint': '/var/lib/matrix-synapse',
+                'needed_by': {
+                    'pkg_apt:matrix-synapse-py3',
+                },
+            },
+        },
+    },
 }
+
+
+@metadata_reactor.provides(
+    'nginx/vhosts/matrix-synapse',
+)
+def nginx(metadata):
+    if not node.has_bundle('nginx'):
+        raise DoNotRunAgain
+
+    locations = {
+        '/_matrix': {
+            'target': 'http://[::1]:20080',
+        },
+        '/_synapse': {
+            'target': 'http://[::1]:20080',
+        },
+        '/.well-known/matrix/client': {
+            'return': dumps({
+                'm.homeserver': {
+                    'base_url': 'https://{}'.format(metadata.get('matrix-synapse/baseurl')),
+                },
+                'm.identity_server': {
+                    'base_url': metadata.get('matrix-synapse/identity_server', 'https://matrix.org'),
+                },
+                **metadata.get('matrix-synapse/additional_client_config', {}),
+            }, sort_keys=True),
+            'additional_config': {
+                'default_type application/json',
+                'add_header Access-Control-Allow-Origin *',
+            },
+        },
+        '/.well-known/matrix/server': {
+            'return': dumps({
+                'm.server':  '{}:443'.format(metadata.get('matrix-synapse/baseurl')),
+            }, sort_keys=True),
+            'additional_config': {
+                'default_type application/json',
+                'add_header Access-Control-Allow-Origin *',
+            },
+        },
+    }
+
+    if node.has_bundle('matrix-media-repo'):
+        locations['/_matrix/media'] = {
+            'target': 'http://localhost:20090',
+            'max_body_size': '{}M'.format(metadata.get('matrix-media-repo/upload_max_mb')),
+            # matrix-media-repo needs this to be the
+            # homeserver address.
+            'x_forwarded_host': metadata.get('matrix-synapse/server_name'),
+        }
+
+    return {
+        'nginx': {
+            'vhosts': {
+                'matrix-synapse': {
+                    'domain': metadata.get('matrix-synapse/baseurl'),
+                    'locations': locations,
+                    'website_check_path': '/_matrix/static/',
+                    'website_check_string': 'Synapse is running',
+                },
+            },
+        },
+    }