bundlewrap/bundles/matrix-synapse/metadata.py

158 lines
4.6 KiB
Python

from json import dumps
defaults = {
'apt': {
'repos': {
'matrix': {
'items': {
'deb https://packages.matrix.org/{os} {os_release} main',
},
},
},
'packages': {
'matrix-synapse-py3': {},
},
},
'backups': {
'paths': {
'/etc/matrix-synapse', # to backup the signing key
'/var/lib/matrix-synapse',
},
},
'icinga2_api': {
'matrix-synapse': {
'services': {
'MATRIX-SYNAPSE PROCESS': {
'command_on_monitored_host': '/usr/lib/nagios/plugins/check_procs -a synapse.app.homeserver -c 1:',
'vars.notification.sms': True,
},
},
},
},
'matrix-synapse': {
'registration_shared_secret': repo.vault.human_password_for('{} matrix-synapse registration_shared_secret'.format(node.name)),
'database': {
'user': 'synapse_user',
'password': repo.vault.password_for('{} postgresql synapse_user'.format(node.name)),
'database': 'synapse',
},
'appservice_configs': set(),
},
'postgresql': {
'roles': {
'synapse_user': {
'password': repo.vault.password_for('{} postgresql synapse_user'.format(node.name)),
},
},
'databases': {
'synapse': {
'owner': 'synapse_user',
'when_creating': {
'collation': 'C',
'ctype': 'C',
},
},
},
},
'zfs': {
'datasets': {
'tank/matrix-synapse': {
'mountpoint': '/var/lib/matrix-synapse',
'needed_by': {
'pkg_apt:matrix-synapse-py3',
},
},
},
},
}
if node.has_bundle('telegraf'):
defaults['telegraf'] = {
'input_plugins': {
'prometheus': {
'matrix_synapse': {
'urls': [
'http://[::1]:20081/_synapse/metrics'
],
'metric_version': 2,
},
},
},
}
@metadata_reactor.provides(
'nginx/vhosts',
)
def nginx(metadata):
if not node.has_bundle('nginx'):
raise DoNotRunAgain
wellknown = {
'/.well-known/matrix/client': {
'content': dumps({
'm.homeserver': {
'base_url': 'https://{}'.format(metadata.get('matrix-synapse/baseurl')),
},
'm.identity_server': {
'base_url': metadata.get('matrix-synapse/identity_server', 'https://matrix.org'),
},
**metadata.get('matrix-synapse/additional_client_config', {}),
}, sort_keys=True),
'return': 200,
'additional_config': {
'default_type application/json',
'add_header Access-Control-Allow-Origin *',
},
},
'/.well-known/matrix/server': {
'content': dumps({
'm.server': '{}:443'.format(metadata.get('matrix-synapse/baseurl')),
}, sort_keys=True),
'return': 200,
'additional_config': {
'default_type application/json',
'add_header Access-Control-Allow-Origin *',
},
},
}
locations = {
'/_matrix': {
'target': 'http://[::1]:20080',
'max_body_size': '50M',
},
'/_synapse': {
'target': 'http://[::1]:20080',
},
**wellknown,
}
if node.has_bundle('matrix-media-repo'):
locations['/_matrix/media'] = {
'target': 'http://localhost:20090',
'max_body_size': '{}M'.format(metadata.get('matrix-media-repo/upload_max_mb')),
# matrix-media-repo needs this to be the
# homeserver address.
'x_forwarded_host': metadata.get('matrix-synapse/server_name'),
}
vhosts = {
'matrix-synapse': {
'domain': metadata.get('matrix-synapse/baseurl'),
'locations': locations,
'website_check_path': '/_matrix/static/',
'website_check_string': 'Synapse is running',
},
}
for vname in metadata.get('matrix-synapse/wellknown_also_on_vhosts', set()):
vhosts[vname] = {
'locations': wellknown,
}
return {
'nginx': {
'vhosts': vhosts
},
}