---
matrix_version: 0.34.1.1

matrix_user: matrix
matrix_user_home: "/home/{{ matrix_user }}"
# matrix_uid: # defaults to not set
matrix_group: "{{ matrix_user }}"
# matrix_gid: # defaults to not set
matrix_extra_groups: []

# Ensure EPEL repo is available at this server
matrix_dependencies:
  - "@Development tools"
  - libtiff-devel
  - libjpeg-devel
  - libzip-devel
  - freetype-devel
  - lcms2-devel
  - libwebp-devel
  - tcl-devel
  - tk-devel
  - redhat-rpm-config
  - python-virtualenv
  - python36-devel
  - libffi-devel
  - openssl-devel

# Create separate LVM storage for matrix
matrix_lvm_enabled: False
# This variables are only necessary if matrix_lvm_enabled is 'True'
# Set physical volumes to use in LVM
# matrix_lvm_pvs: # ['/dev/sdb', '/dev/sdc']
# matrix_lvm_vg:  # "vg_matrix"
# matrix_lvm_lv: # "lv_matrix"
# matrix_lvm_fstype: # ext4
# matrix_lvm_size: # "50G"

matrix_base_dir: "/opt/matrix"
matrix_conf_dir: "{{ matrix_base_dir }}/config"
matrix_data_dir: "{{ matrix_base_dir }}/data"

matrix_base_url: http://localhost

matrix_http_bind_ips:
  - '::'
  - '0.0.0.0'
matrix_http_bind_port: 8008

matrix_https_bind_ips: "{{ matrix_http_bind_ips }}"
matrix_https_bind_port: 8448

matrix_postgres_enabled: False
matrix_postgres_ssl_mode: disable
matrix_postgres_server: postgres.example.com
matrix_postgres_port: 5432
matrix_postgres_superuser: postgres
matrix_postgres_password: secure

matrix_postgres_db:
  name: matrix
  lc_collate: en_US.UTF-8
  lc_ctype: en_US.UTF-8'
  encoding: UTF-8
  template: template0
  login_host: localhost
  login_user: "{{ matrix_postgres_superuser }}"
  login_password: "{{ matrix_postgres_password }}"
  # login_unix_socket: # defaults to not set
  port: "{{ matrix_postgres_port }}"
  # owner: # defaults to not set
  state: present

matrix_postgres_user:
  name: pgmatrix
  password: matrix
  encrypted: 'yes'
  # priv: # defaults to not set
  # role_attr_flags: # defaults to not set
  db: "{{ matrix_postgres_db.name }}"
  login_host: localhost
  login_user: "{{ matrix_postgres_superuser }}"
  login_password: "{{ matrix_postgres_password }}"
  # login_unix_socket: # defaults to not set
  port: "{{ matrix_postgres_port }}"
  state: present

matrix_iptables_enabled: False
matrix_open_ports:
  - name: allow_matrix_web
    rules: |
      -A INPUT -m state --state NEW -p tcp --dport {{ matrix_http_bind_port }} -j ACCEPT
    state: present

matrix_tls_enabled: False
matrix_tls_cert_path: "{{ matrix_base_dir }}/tls/certs/mycert.pem"
matrix_tls_key_path: "{{ matrix_base_dir }}/tls/private/mykey.pem"
matrix_tls_cert_source: mycert.pem
matrix_tls_key_source: mykey.pem

matrix_nginx_vhost_enabled: False
matrix_nginx_server: localhost
matrix_nginx_vhost_dir: /etc/nginx/sites-available
matrix_nginx_vhost_symlink: /etc/nginx/sites-enabled
matrix_nginx_iptables_enabled: False
matrix_nginx_tls_enabled: False
matrix_nginx_tls_cert_file: matrix-cert.pem
matrix_nginx_tls_key_file: matrix-key.pem
matrix_nginx_proxy_port: "{{ matrix_http_bind_port }}"
matrix_nginx_proxy_ip: "{{ matrix_http_bind_ips[0] }}"