mirror of
https://github.com/spantaleev/matrix-docker-ansible-deploy.git
synced 2026-06-30 15:31:18 +00:00
Slavi Pantaleev
42c173c0b3
Auto-generate the provisioning shared secret (to enable the provisioning API), route the whole bridge HTTP port via Traefik under `<matrix-fqn>/bridges/meta-messenger`, and populate appservice.public_address, reusing the matrix_bridges_exposure_* mechanism. The labels template gate is widened so the exposure router is emitted even when metrics are disabled (the exposure router reuses the existing appservice Traefik service on port 29319). Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
90 lines
5.4 KiB
Django/Jinja
90 lines
5.4 KiB
Django/Jinja
{#
|
|
SPDX-FileCopyrightText: 2024 Slavi Pantaleev
|
|
|
|
SPDX-License-Identifier: AGPL-3.0-or-later
|
|
#}
|
|
|
|
{% if matrix_mautrix_meta_messenger_container_labels_traefik_enabled and (matrix_mautrix_meta_messenger_container_labels_metrics_enabled or matrix_mautrix_meta_messenger_container_labels_exposure_enabled) %}
|
|
traefik.enable=true
|
|
|
|
{% if matrix_mautrix_meta_messenger_container_labels_traefik_docker_network %}
|
|
traefik.docker.network={{ matrix_mautrix_meta_messenger_container_labels_traefik_docker_network }}
|
|
{% endif %}
|
|
|
|
{% if matrix_mautrix_meta_messenger_container_labels_exposure_enabled %}
|
|
traefik.http.services.{{ matrix_mautrix_meta_messenger_identifier }}-appservice.loadbalancer.server.port=29319
|
|
{% endif %}
|
|
{% if matrix_mautrix_meta_messenger_container_labels_metrics_enabled %}
|
|
traefik.http.services.{{ matrix_mautrix_meta_messenger_identifier }}-metrics.loadbalancer.server.port=8000
|
|
{% endif %}
|
|
|
|
|
|
{% if matrix_mautrix_meta_messenger_container_labels_metrics_enabled %}
|
|
############################################################
|
|
# #
|
|
# Metrics #
|
|
# #
|
|
############################################################
|
|
|
|
{% if matrix_mautrix_meta_messenger_container_labels_metrics_middleware_basic_auth_enabled %}
|
|
traefik.http.middlewares.{{ matrix_mautrix_meta_messenger_identifier }}-metrics-basic-auth.basicauth.users={{ matrix_mautrix_meta_messenger_container_labels_metrics_middleware_basic_auth_users }}
|
|
traefik.http.routers.{{ matrix_mautrix_meta_messenger_identifier }}-metrics.middlewares={{ matrix_mautrix_meta_messenger_identifier }}-metrics-basic-auth
|
|
{% endif %}
|
|
|
|
traefik.http.routers.{{ matrix_mautrix_meta_messenger_identifier }}-metrics.rule={{ matrix_mautrix_meta_messenger_container_labels_metrics_traefik_rule }}
|
|
|
|
{% if matrix_mautrix_meta_messenger_container_labels_metrics_traefik_priority | int > 0 %}
|
|
traefik.http.routers.{{ matrix_mautrix_meta_messenger_identifier }}-metrics.priority={{ matrix_mautrix_meta_messenger_container_labels_metrics_traefik_priority }}
|
|
{% endif %}
|
|
|
|
traefik.http.routers.{{ matrix_mautrix_meta_messenger_identifier }}-metrics.service={{ matrix_mautrix_meta_messenger_identifier }}-metrics
|
|
traefik.http.routers.{{ matrix_mautrix_meta_messenger_identifier }}-metrics.entrypoints={{ matrix_mautrix_meta_messenger_container_labels_metrics_traefik_entrypoints }}
|
|
|
|
traefik.http.routers.{{ matrix_mautrix_meta_messenger_identifier }}-metrics.tls={{ matrix_mautrix_meta_messenger_container_labels_metrics_traefik_tls | to_json }}
|
|
{% if matrix_mautrix_meta_messenger_container_labels_metrics_traefik_tls %}
|
|
traefik.http.routers.{{ matrix_mautrix_meta_messenger_identifier }}-metrics.tls.certResolver={{ matrix_mautrix_meta_messenger_container_labels_metrics_traefik_tls_certResolver }}
|
|
{% endif %}
|
|
|
|
############################################################
|
|
# #
|
|
# /Metrics #
|
|
# #
|
|
############################################################
|
|
{% endif %}
|
|
|
|
{% if matrix_mautrix_meta_messenger_container_labels_exposure_enabled %}
|
|
############################################################
|
|
# #
|
|
# Bridge API exposure #
|
|
# #
|
|
############################################################
|
|
|
|
traefik.http.middlewares.{{ matrix_mautrix_meta_messenger_identifier }}-exposure-strip-prefix.stripprefix.prefixes={{ matrix_mautrix_meta_messenger_exposure_path_prefix }}
|
|
traefik.http.routers.{{ matrix_mautrix_meta_messenger_identifier }}-exposure.middlewares={{ matrix_mautrix_meta_messenger_identifier }}-exposure-strip-prefix
|
|
|
|
traefik.http.routers.{{ matrix_mautrix_meta_messenger_identifier }}-exposure.rule={{ matrix_mautrix_meta_messenger_container_labels_exposure_traefik_rule }}
|
|
|
|
{% if matrix_mautrix_meta_messenger_container_labels_exposure_traefik_priority | int > 0 %}
|
|
traefik.http.routers.{{ matrix_mautrix_meta_messenger_identifier }}-exposure.priority={{ matrix_mautrix_meta_messenger_container_labels_exposure_traefik_priority }}
|
|
{% endif %}
|
|
|
|
traefik.http.routers.{{ matrix_mautrix_meta_messenger_identifier }}-exposure.service={{ matrix_mautrix_meta_messenger_identifier }}-appservice
|
|
traefik.http.routers.{{ matrix_mautrix_meta_messenger_identifier }}-exposure.entrypoints={{ matrix_mautrix_meta_messenger_container_labels_exposure_traefik_entrypoints }}
|
|
|
|
traefik.http.routers.{{ matrix_mautrix_meta_messenger_identifier }}-exposure.tls={{ matrix_mautrix_meta_messenger_container_labels_exposure_traefik_tls | to_json }}
|
|
{% if matrix_mautrix_meta_messenger_container_labels_exposure_traefik_tls %}
|
|
traefik.http.routers.{{ matrix_mautrix_meta_messenger_identifier }}-exposure.tls.certResolver={{ matrix_mautrix_meta_messenger_container_labels_exposure_traefik_tls_certResolver }}
|
|
{% endif %}
|
|
|
|
############################################################
|
|
# #
|
|
# /Bridge API exposure #
|
|
# #
|
|
############################################################
|
|
{% endif %}
|
|
|
|
|
|
{% endif %}
|
|
|
|
{{ matrix_mautrix_meta_messenger_container_labels_additional_labels }}
|