Added conduwuity matrix server

paybooks/matrix.yaml

@@ -0,0 +1,91 @@
+- name: Setup matrix server
+  hosts: berliet.medicenlutte.fr
+  tasks:
+
+    - name: Setup Continuwuity repository key
+      ansible.builtin.copy:
+        src: matrix/forgejo-continuwuation.asc
+        dest: /etc/apt/keyrings/forgejo-continuwuation.asc
+        owner: root
+        group: root
+        mode: u=rw,g=rw,o=r
+      become: true
+
+    - name: Setup Continuwuity repository
+      ansible.builtin.copy:
+        src: matrix/continuwuation.list
+        dest: /etc/apt/sources.list.d/continuwuation.list
+        owner: root
+        group: root
+        mode: u=rw,g=rw,o=r
+      become: true
+
+    - name: Install Continuwuity
+      ansible.builtin.apt:
+        name: continuwuity
+        state: present
+        update_cache: yes
+      become: true
+
+    - name: Setup Continuwuity config
+      ansible.builtin.copy:
+        src: matrix/conduwuit.toml
+        dest: /etc/conduwuit/conduwuit.toml
+        owner: root
+        group: root
+        mode: u=rw,g=rw,o=r
+      become: true
+
+    - name: Create conduwuit user
+      ansible.builtin.user:
+        name: conduwuit
+        state: present
+        create_home: false
+        home: /var/lib/conduwuit
+        shell: /usr/sbin/nologin
+        password: '!'
+        system: true
+      become: true
+      
+    - name: Start and Enable Continuwuity
+      ansible.builtin.systemd_service:
+        name: conduwuit
+        state: reloaded
+        enabled: true
+      become: true
+
+- name: Setup NGINX
+  ansible.builtin.import_playbook: nginx.yaml
+
+- name: Setup NGINX config for matrix server
+  hosts: berliet.medicenlutte.fr
+  tasks:
+
+    - name: Setup matrix.medicenlutte.fr site
+      ansible.builtin.copy:
+        src: matrix/matrix.medicenlutte.fr.conf
+        dest: /etc/nginx/sites-available/matrix.medicenlutte.fr.conf
+        owner: root
+        group: root
+        mode: u=rw,g=rw,o=r
+      become: true
+
+    - name: Add www-data to conduwuit group
+      ansible.builtin.user:
+        name: www-data
+        groups: conduwuit
+        append: true
+      become: true
+
+    - name: Enable matrix.medicenlutte.fr site
+      ansible.builtin.file:
+        path: /etc/nginx/sites-enabled/matrix.medicenlutte.fr.conf
+        state: link
+        src: ../sites-available/matrix.medicenlutte.fr.conf
+      become: true
+      
+    - name: Reload NGINX
+      ansible.builtin.systemd_service:
+        name: nginx
+        state: reloaded
+      become: true

paybooks/matrix/continuwuation.list

@@ -0,0 +1 @@
+deb [signed-by=/etc/apt/keyrings/forgejo-continuwuation.asc] https://forgejo.ellis.link/api/packages/continuwuation/debian trixie stable

paybooks/matrix/forgejo-continuwuation.asc

@@ -0,0 +1,32 @@
+-----BEGIN PGP PUBLIC KEY BLOCK-----
+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+=wfVg
+-----END PGP PUBLIC KEY BLOCK-----

paybooks/matrix/matrix.medicenlutte.fr.conf

@@ -0,0 +1,12 @@
+server {
+	listen 80;
+	listen [::]:80;
+	server_name matrix.medicenlutte.fr;
+
+	client_max_body_size 5G;
+
+	location / {
+		include "proxy_params";
+		proxy_pass http://unix:/run/conduwuit/conduwuit.sock:$request_uri;
+	}
+}

paybooks/medicenlutte.fr/medicenlutte.fr.conf

@@ -3,4 +3,9 @@ server {
 	listen [::]:80;
 	server_name medicenlutte.fr;
     root /srv/www/medicenlutte.fr/;
+
+	location /.well-known/matrix {
+		include "proxy_params";
+		proxy_pass http://unix:/run/conduwuit/conduwuit.sock:$request_uri;
+	}
 }