mirror of
https://github.com/spantaleev/matrix-docker-ansible-deploy.git
synced 2026-10-22 22:34:16 +00:00
QEDeDandSlavi Pantaleev
7b44e13276
With conditional restart (install-* tags), the homeserver entry for Synapse fell through to `restart_necessary: true`, and the worker entries carried no flag at all, which systemd_service_manager also treats as "restart". Every install-all and install-service synapse therefore restarted Synapse and all of its workers, even when nothing had changed. Without workers, systemd also restarted most bridges and bots, whose units require matrix-synapse.service. Compute matrix_synapse_restart_necessary from the tasks that install what Synapse runs: homeserver.yaml, the initial config and signing key, the log config, labels and systemd service, the container image (pulled, self-built or customized), each worker's config, labels and systemd service, and the downloaded or cloned extension modules. Workers follow the same decision, as they read the same files. Synapse also mounts the appservice registration files written by other roles. Add matrix_homeserver_app_service_registration_changed in group_vars/matrix_servers, which checks the registered result of each task installing one of the files listed in matrix_homeserver_container_extra_arguments_auto, so that a changed registration still restarts Synapse and its workers. The double-puppet role did not register its result; it does now. The Synapse image pull and three extension downloads all registered their result as `result`. The downloads run first, so the pull's result overwrote theirs before the restart decision could read them; they now use role-prefixed names.
44 lines
1.7 KiB
YAML
44 lines
1.7 KiB
YAML
# SPDX-FileCopyrightText: 2018 - 2023 Slavi Pantaleev
|
|
# SPDX-FileCopyrightText: 2019 Michael Haak
|
|
# SPDX-FileCopyrightText: 2020 Chris van Dijk
|
|
# SPDX-FileCopyrightText: 2022 Nikita Chernyi
|
|
#
|
|
# SPDX-License-Identifier: AGPL-3.0-or-later
|
|
|
|
---
|
|
|
|
- name: Fail if REST Auth endpoint not configured
|
|
ansible.builtin.fail:
|
|
msg: "You have enabled the REST Auth password provider, but have not configured its endpoint in the `matrix_synapse_ext_password_provider_rest_auth_endpoint` variable. Consult the documentation."
|
|
when: "matrix_synapse_ext_password_provider_rest_auth_endpoint == ''"
|
|
|
|
- name: Download matrix-synapse-rest-auth
|
|
ansible.builtin.get_url:
|
|
url: "{{ matrix_synapse_ext_password_provider_rest_auth_download_url }}"
|
|
dest: "{{ matrix_synapse_ext_path }}/rest_auth_provider.py"
|
|
force: true
|
|
mode: '0440'
|
|
owner: "{{ matrix_synapse_uid }}"
|
|
group: "{{ matrix_synapse_gid }}"
|
|
register: matrix_synapse_ext_password_provider_rest_auth_download_result
|
|
retries: "{{ devture_playbook_help_geturl_retries_count }}"
|
|
delay: "{{ devture_playbook_help_geturl_retries_delay }}"
|
|
until: matrix_synapse_ext_password_provider_rest_auth_download_result is not failed
|
|
|
|
- ansible.builtin.set_fact:
|
|
matrix_synapse_password_providers_enabled: true
|
|
|
|
matrix_synapse_container_extra_arguments: >
|
|
{{
|
|
matrix_synapse_container_extra_arguments | default([])
|
|
+
|
|
["--mount type=bind,src=" + matrix_synapse_ext_path + "/rest_auth_provider.py,dst=" + matrix_synapse_in_container_python_packages_path + "/rest_auth_provider.py,ro"]
|
|
}}
|
|
|
|
matrix_synapse_additional_loggers_auto: >
|
|
{{
|
|
matrix_synapse_additional_loggers_auto
|
|
+
|
|
[{'name': 'rest_auth_provider', 'level': 'INFO'}]
|
|
}}
|