Files
matrix-docker-ansible-deploy/roles/custom/matrix-bot-meowlnir/tasks/util/validate_bot_management_room.yml
T
Slavi PantaleevandClaude Opus 5 f9222dc70c Add support for Meowlnir
Meowlnir (https://github.com/maunium/meowlnir) is a Matrix moderation
bot which speaks the same policy-list protocol as Mjolnir and Draupnir,
but runs as an appservice and can override individual policies coming
from ban lists you do not control.

Bots and their management rooms live only in Meowlnir's own database —
nothing in its configuration file can declare one — so the role
provisions them through the management API from a declarative roster
(matrix_bot_meowlnir_bots_custom), applied under the
ensure-matrix-users-created tag. Management rooms may be declared or
created for you; bots and rooms no longer declared get pruned.

Wrapper scripts for driving the management API by hand are installed
to /matrix/meowlnir/bin.

Meowlnir re-runs its configuration upgrader in memory on every start,
so a literal `generate` value yields a new secret per restart. All
secrets are therefore rendered explicitly, validation rejects
`generate`, and the configuration directory is mounted read-only.

Draupnir and Meowlnir both want synapse-http-antispam, which the
playbook wires up to a single consumer. The wiring prefers Draupnir,
and both roles fail the run when each claims it.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
2026-08-13 06:05:30 +03:00

26 lines
996 B
YAML

# SPDX-FileCopyrightText: 2026 Slavi Pantaleev
#
# SPDX-License-Identifier: AGPL-3.0-or-later
---
- name: Fail if a Meowlnir management room definition lacks required fields
ansible.builtin.fail:
msg: >-
A `management_rooms` entry for the Meowlnir bot `{{ bot.username }}` is missing the
`{{ item }}` field. All fields are required on every entry.
Offending definition: {{ management_room | to_json }}
when: "item not in management_room"
with_items:
- id
- encrypted
- name: Fail if a Meowlnir management room ID does not look like a room ID
ansible.builtin.fail:
msg: >-
A `management_rooms` entry for the Meowlnir bot `{{ bot.username }}` has an `id` of
`{{ management_room.id }}`, which does not look like a room ID.
It needs to be a room ID (`!qporfwt:example.com`), not a room alias or a matrix.to URL.
You can find it in Element Web under the room's Settings -> Advanced.
when: "not management_room.id.startswith('!')"