Add native Traefik support to matrix-synapse

roles/custom/matrix-synapse/tasks/synapse/setup_install.yml

@@ -115,28 +115,29 @@
     owner: "{{ matrix_synapse_uid }}"
     group: "{{ matrix_synapse_gid }}"
 
-- name: Ensure Synapse log config installed
-  ansible.builtin.template:
-    src: "{{ matrix_synapse_template_synapse_log }}"
-    dest: "{{ matrix_synapse_config_dir_path }}/{{ matrix_server_fqn_matrix }}.log.config"
-    mode: 0644
-
 - name: Ensure Synapse container network is created
   community.general.docker_network:
     name: "{{ matrix_synapse_container_network }}"
     driver: bridge
 
-- name: Ensure matrix-synapse.service installed
+- name: Ensure Synapse support files installed
   ansible.builtin.template:
-    src: "{{ role_path }}/templates/synapse/systemd/matrix-synapse.service.j2"
-    dest: "{{ devture_systemd_docker_base_systemd_path }}/matrix-synapse.service"
-    mode: 0644
-
-- name: Ensure register-user script created
-  ansible.builtin.template:
-    src: "{{ role_path }}/templates/synapse/bin/register-user.j2"
-    dest: "{{ matrix_synapse_bin_path }}/register-user"
-    mode: 0755
+    src: "{{ item.src }}"
+    dest: "{{ item.dest }}"
+    mode: "{{ item.mode }}"
+  with_items:
+    - src: "{{ matrix_synapse_template_synapse_log }}"
+      dest: "{{ matrix_synapse_config_dir_path }}/{{ matrix_server_fqn_matrix }}.log.config"
+      mode: '0644'
+    - src: "{{ role_path }}/templates/synapse/bin/register-user.j2"
+      dest: "{{ matrix_synapse_bin_path }}/register-user"
+      mode: '0755'
+    - src: "{{ role_path }}/templates/synapse/labels.j2"
+      dest: "{{ matrix_synapse_base_path }}/labels"
+      mode: '0644'
+    - src: "{{ role_path }}/templates/synapse/systemd/matrix-synapse.service.j2"
+      dest: "{{ devture_systemd_docker_base_systemd_path }}/matrix-synapse.service"
+      mode: '0644'
 
 - name: Generate sample prometheus.yml for external scraping
   ansible.builtin.template:

roles/custom/matrix-synapse/tasks/validate_config.yml

@@ -3,18 +3,30 @@
 - name: Fail if required Synapse settings not defined
   ansible.builtin.fail:
     msg: >-
-      You need to define a required configuration setting (`{{ item }}`) for using Synapse.
-  when: "vars[item] == ''"
+      You need to define a required configuration setting (`{{ item.name }}`).
+  when: "item.when | bool and vars[item.name] == ''"
   with_items:
-    - matrix_synapse_username
-    - matrix_synapse_uid
-    - matrix_synapse_gid
-    - matrix_synapse_container_network
-    - matrix_synapse_macaroon_secret_key
-    - matrix_synapse_database_host
-    - matrix_synapse_database_user
-    - matrix_synapse_database_password
-    - matrix_synapse_database_database
+    - {'name': 'matrix_synapse_username', when: true}
+    - {'name': 'matrix_synapse_uid', when: true}
+    - {'name': 'matrix_synapse_gid', when: true}
+    - {'name': 'matrix_synapse_container_network', when: true}
+    - {'name': 'matrix_synapse_macaroon_secret_key', when: true}
+    - {'name': 'matrix_synapse_database_host', when: true}
+    - {'name': 'matrix_synapse_database_user', when: true}
+    - {'name': 'matrix_synapse_database_password', when: true}
+    - {'name': 'matrix_synapse_database_database', when: true}
+
+    - {'name': 'matrix_synapse_container_labels_client_root_traefik_hostname', when: "{{ matrix_synapse_container_labels_client_root_enabled }}"}
+    - {'name': 'matrix_synapse_container_labels_client_root_redirection_url', when: "{{ matrix_synapse_container_labels_client_root_redirection_enabled }}"}
+
+    - {'name': 'matrix_synapse_container_labels_client_api_traefik_hostname', when: "{{ matrix_synapse_container_labels_client_api_enabled }}"}
+
+    - {'name': 'matrix_synapse_container_labels_client_synapse_client_api_traefik_hostname', when: "{{ matrix_synapse_container_labels_client_synapse_client_api_enabled }}"}
+    - {'name': 'matrix_synapse_container_labels_client_synapse_oidc_api_traefik_hostname', when: "{{ matrix_synapse_container_labels_client_synapse_oidc_api_enabled }}"}
+    - {'name': 'matrix_synapse_container_labels_client_synapse_admin_api_traefik_hostname', when: "{{ matrix_synapse_container_labels_client_synapse_admin_api_enabled }}"}
+
+    - {'name': 'matrix_synapse_container_labels_federation_api_traefik_hostname', when: "{{ matrix_synapse_container_labels_federation_api_enabled }}"}
+    - {'name': 'matrix_synapse_container_labels_federation_api_traefik_entrypoints', when: "{{ matrix_synapse_container_labels_federation_api_enabled }}"}
 
 - name: Fail if asking for more than 1 instance of single-instance workers
   ansible.builtin.fail: