Added conduwuity matrix server

paybooks/matrix.yaml

@@ -0,0 +1,91 @@
+- name: Setup matrix server
+  hosts: berliet.medicenlutte.fr
+  tasks:
+
+    - name: Setup Continuwuity repository key
+      ansible.builtin.copy:
+        src: matrix/forgejo-continuwuation.asc
+        dest: /etc/apt/keyrings/forgejo-continuwuation.asc
+        owner: root
+        group: root
+        mode: u=rw,g=rw,o=r
+      become: true
+
+    - name: Setup Continuwuity repository
+      ansible.builtin.copy:
+        src: matrix/continuwuation.list
+        dest: /etc/apt/sources.list.d/continuwuation.list
+        owner: root
+        group: root
+        mode: u=rw,g=rw,o=r
+      become: true
+
+    - name: Install Continuwuity
+      ansible.builtin.apt:
+        name: continuwuity
+        state: present
+        update_cache: yes
+      become: true
+
+    - name: Setup Continuwuity config
+      ansible.builtin.copy:
+        src: matrix/conduwuit.toml
+        dest: /etc/conduwuit/conduwuit.toml
+        owner: root
+        group: root
+        mode: u=rw,g=rw,o=r
+      become: true
+
+    - name: Create conduwuit user
+      ansible.builtin.user:
+        name: conduwuit
+        state: present
+        create_home: false
+        home: /var/lib/conduwuit
+        shell: /usr/sbin/nologin
+        password: '!'
+        system: true
+      become: true
+      
+    - name: Start and Enable Continuwuity
+      ansible.builtin.systemd_service:
+        name: conduwuit
+        state: reloaded
+        enabled: true
+      become: true
+
+- name: Setup NGINX
+  ansible.builtin.import_playbook: nginx.yaml
+
+- name: Setup NGINX config for matrix server
+  hosts: berliet.medicenlutte.fr
+  tasks:
+
+    - name: Setup matrix.medicenlutte.fr site
+      ansible.builtin.copy:
+        src: matrix/matrix.medicenlutte.fr.conf
+        dest: /etc/nginx/sites-available/matrix.medicenlutte.fr.conf
+        owner: root
+        group: root
+        mode: u=rw,g=rw,o=r
+      become: true
+
+    - name: Add www-data to conduwuit group
+      ansible.builtin.user:
+        name: www-data
+        groups: conduwuit
+        append: true
+      become: true
+
+    - name: Enable matrix.medicenlutte.fr site
+      ansible.builtin.file:
+        path: /etc/nginx/sites-enabled/matrix.medicenlutte.fr.conf
+        state: link
+        src: ../sites-available/matrix.medicenlutte.fr.conf
+      become: true
+      
+    - name: Reload NGINX
+      ansible.builtin.systemd_service:
+        name: nginx
+        state: reloaded
+      become: true