From 0b260a133f16b89ace38acd5fe1da2f7da28d232 Mon Sep 17 00:00:00 2001
From: Slavi Pantaleev <slavi@devture.com>
Date: Mon, 11 Jan 2021 22:15:13 +0200
Subject: [PATCH] Add matrix-aux role to help with managing auxiliary
files/directories
---
roles/matrix-aux/defaults/main.yml | 72 ++++++++++++++++++++++++++++++
roles/matrix-aux/tasks/main.yml | 5 +++
roles/matrix-aux/tasks/setup.yml | 19 ++++++++
setup.yml | 1 +
4 files changed, 97 insertions(+)
create mode 100644 roles/matrix-aux/defaults/main.yml
create mode 100644 roles/matrix-aux/tasks/main.yml
create mode 100644 roles/matrix-aux/tasks/setup.yml
diff --git a/roles/matrix-aux/defaults/main.yml b/roles/matrix-aux/defaults/main.yml
new file mode 100644
index 000000000..e4a4e8277
--- /dev/null
+++ b/roles/matrix-aux/defaults/main.yml
@@ -0,0 +1,72 @@
+---
+
+# matrix-aux is a role that manages auxiliary files and directories on your Matrix server.
+#
+# Certain components (like matrix-synapse, etc.) may sometimes require additional templates (email templates, privacy policies, etc.).
+# This role allows such files to be managed by the playbook.
+#
+# Note that files and directories created via this role are not automatically made available for containers to use.
+# If you use this role to put files in a directory that's already mounted into a container,
+# you can access the files without additional work.
+# Otherwise, you'd need to mount the file/directory to the container that needs it.
+# Roles usually provide a `matrix_*_additional_volumes` or `matrix_*_container_extra_arguments` variable
+# that you can use to mount an additional volume.
+
+# The default permission mode when creating directories using `matrix_aux_directory_definitions`
+matrix_aux_directory_default_mode: '0750'
+
+# Holds a list of directories to create on the server.
+#
+# By default, directories are:
+# - created with permissions as specified in `matrix_aux_directory_default_mode`
+# - owned by the `matrix_user_username` user and `matrix_user_groupname` group (usually `matrix:matrix`)
+#
+# Example:
+#
+# matrix_aux_directory_definitions:
+# - dest: /matrix/aux
+#
+# - dest: /matrix/another
+# mode: '0700'
+# owner: 'some-user'
+# group: 'some-group'
+matrix_aux_directory_definitions: []
+
+# The default permission mode when creating directories using `matrix_aux_directory_definitions`
+matrix_aux_file_default_mode: '0640'
+
+# Holds a list of files to create on the server.
+#
+# By default, files are:
+# - created with permissions as specified in `matrix_aux_file_default_mode`
+# - owned by the `matrix_user_username` user and `matrix_user_groupname` group (usually `matrix:matrix`)
+#
+# You can define the file content inline (in your `vars.yml` file) or as an external file (see the example below).
+# Defining the content inline in `vars.yml` has the benefit of not splitting your configuration into multiple files,
+# but rather keeping everything inside `vars.yml` (which also gets backed up on the server in `/matrix/vars.yml`).
+#
+# Note: parent paths for files must exist.
+# If you've defined a file with a destination of `/matrix/some/path/file.txt`,
+# then you likely need to add `/matrix/some/path` to `matrix_aux_directory_definitions` as well.
+# You don't need to do this for directories that the playbook already creates for you.
+#
+# Example:
+#
+# matrix_aux_file_definitions:
+# - dest: "{{ matrix_synapse_config_dir_path }}/something.html"
+# content: |
+# <!doctype html>
+# <html><body>Something</body></html>
+#
+# - dest: /matrix/aux/some-other-file.txt
+# content: "Something"
+# mode: '0600'
+# owner: 'some-user'
+# group: 'some-group'
+#
+# - dest: /matrix/aux/yet-another-file.txt
+# content: "{{ lookup('template', '/path/to/file.txt.j2') }}"
+# mode: '0600'
+# owner: 'some-user'
+# group: 'some-group'
+matrix_aux_file_definitions: []
diff --git a/roles/matrix-aux/tasks/main.yml b/roles/matrix-aux/tasks/main.yml
new file mode 100644
index 000000000..ee93f63ae
--- /dev/null
+++ b/roles/matrix-aux/tasks/main.yml
@@ -0,0 +1,5 @@
+- import_tasks: "{{ role_path }}/tasks/setup.yml"
+ when: run_stop|bool
+ tags:
+ - setup-all
+ - setup-aux-files
diff --git a/roles/matrix-aux/tasks/setup.yml b/roles/matrix-aux/tasks/setup.yml
new file mode 100644
index 000000000..949c0b4a5
--- /dev/null
+++ b/roles/matrix-aux/tasks/setup.yml
@@ -0,0 +1,19 @@
+---
+
+- name: Ensure AUX directories are created
+ file:
+ dest: "{{ item.dest }}"
+ state: directory
+ owner: "{{ item.owner|default(matrix_user_username) }}"
+ group: "{{ item.group|default(matrix_user_groupname) }}"
+ mode: "{{ item.mode|default(matrix_aux_directory_default_mode) }}"
+ with_items: "{{ matrix_aux_directory_definitions }}"
+
+- name: Ensure AUX files are created
+ copy:
+ dest: "{{ item.dest }}"
+ content: "{{ item.content }}"
+ owner: "{{ item.owner|default(matrix_user_username) }}"
+ group: "{{ item.group|default(matrix_user_groupname) }}"
+ mode: "{{ item.mode|default(matrix_aux_file_default_mode) }}"
+ with_items: "{{ matrix_aux_file_definitions }}"
diff --git a/setup.yml b/setup.yml
index cc913b652..d070bcae4 100755
--- a/setup.yml
+++ b/setup.yml
@@ -36,4 +36,5 @@
- matrix-email2matrix
- matrix-nginx-proxy
- matrix-coturn
+ - matrix-aux
- matrix-common-after