vhost config file for matrix domain

roles/docker/defaults/main.yml

@@ -23,9 +23,11 @@ fider:
 
 matrix:
   domain: "matrix.{{ base_domain }}"
+  volume_folder: "{{ volume_root_folder }}/matrix"
 
 riot:
   domain: "riot.{{ base_domain }}"
+  volume_folder: "{{ volume_root_folder }}/riot"
 
 privatebin:
   domain: "paste.{{ base_domain }}"

roles/docker/files/configs/matrix/vhost-matrix

@@ -0,0 +1 @@
+listen 8008;

roles/docker/files/configs/matrix/vhost-root

@@ -0,0 +1,14 @@
+location /_matrix {
+      proxy_pass http://0.0.0.0:8008;
+      proxy_set_header X-Forwarded-For $remote_addr;
+}
+
+location /.well-known/matrix/server {
+      default_type application/json;
+      return 200 '{"m.server": "matrix.data.coop:443"}';
+}
+
+location /.well-known/matrix/client {
+      default_type application/json;
+      return 200 '{"m.homeserver": {"base_url": "https://matrix.data.coop"}}';
+}

roles/docker/files/configs/riot/config.json

@@ -23,7 +23,7 @@
         "feature_tabbed_settings": "enable",
         "feature_sas": "enable"
     },
-    "welcomeUserId": "@riot-bot:matrix.org",
+    "welcomeUserId": "",
     "piwik": false,
     "roomDirectory": {
         "servers": [

roles/docker/tasks/services/matrix_riot.yml

@@ -1,26 +1,45 @@
 ---
+- name: create matrix volume folders
+  file:
+    name: "{{ matrix.volume_folder }}/{{ volume }}"
+    state: directory
+  loop:
+    - "db"
+  loop_control:
+    loop_var: volume
+
+- name: create riot volume folders
+  file:
+    name: "{{ riot.volume_folder }}/{{ volume }}"
+    state: directory
+  loop:
+    - "data"
+  loop_control:
+    loop_var: volume
 
 - name: matrix network
   docker_network:
     name: matrix
 
-- name: matrix database volume
-  docker_volume:
-    name: matrix_db
-
-- name: riot volume
-  docker_volume:
-    name: riot_app
-
 - name: upload riot config.json
   template:
-    src: files/configs/riot-config.json
+    src: files/configs/riot/config.json
-    dest: /var/lib/docker/volumes/riot_app/_data/config.json
+    dest: "{{ riot.volume_folder }}/data/config.json"
 
 - name: upload riot.im.conf
   template:
-    src: files/configs/riot.im.conf
+    src: files/configs/riot/riot.im.conf
-    dest: /var/lib/docker/volumes/riot_app/_data/riot.im.conf
+    dest: "{{ riot.volume_folder }}/data/riot.im.conf"
+
+- name: upload vhost config for root domain
+  template:
+    src: files/configs/matrix/vhost-root
+    dest: "{{ nginx.volume_folder }}/vhost/{{ base_domain }}"
+
+- name: upload vhost config for matrix domain
+  template:
+    src: files/configs/matrix/vhost-matrix
+    dest: "{{ nginx.volume_folder }}/vhost/{{ matrix.domain }}"
 
 - name: matrix database container
   docker_container:
@@ -31,7 +50,7 @@
     networks:
       - name: matrix
     volumes:
-      - matrix_db:/var/lib/postgresql/data
+      - "{{ matrix.volume_folder }}/db:/var/lib/postgresql/data"
     env:
       POSTGRES_USER: "synapse"
       POSTGRES_PASSWORD: "{{ postgres_passwords.matrix }}"
@@ -44,8 +63,7 @@
     networks:
       - name: matrix
     published_ports:
-      - 8008:8008
+      - "8008"
-      - 8448:8448
     env:
       SYNAPSE_SERVER_NAME: "{{ base_domain }}"
       SYNAPSE_REPORT_STATS: "False"
@@ -69,13 +87,12 @@
     networks:
       - name: matrix
       - name: external_services
-    volumes:
-      - riot_app:/data
     published_ports:
-      - 8080
+      - "8080"
+    volumes:
+      - "{{ riot.volume_folder }}/data:/data"
     env:
       VIRTUAL_HOST: "{{ riot.domain }}"
       VIRTUAL_PORT: "8080"
       LETSENCRYPT_HOST: "{{ riot.domain }}"
       LETSENCRYPT_EMAIL: "{{ letsencrypt_email }}"
-