---
# Matrix homeserver configuration
# {{ ansible_managed }}
no_tls: True
tls_fingerprints: []
pid_file: "/var/run/matrix-synapse.pid"
soft_file_limit: 0
public_baseurl: "https://im.{{ blsedomains_webdomain }}"
listeners:
  - port: 8008
    tls: false
    bind_addresses:
      - '::'
    type: http
    x_forwarded: true
    resources:
      - names: [client, webclient]
        compress: true
      - names: [federation]
        compress: false
database:
    name: psycopg2
    args:
        user: "{{ postgres_client['matrix'].username }}"
        password: "{{ postgres_client['matrix'].passwd }}"
        database: "{{ postgres_client['matrix'].database }}"
        host: "{{ postgres_client['matrix'].host }}"
        port: "{{ postgres_client['matrix'].port_readwrite }}"
        cp_min: 5
        cp_max: 10
event_cache_size: "10K"
log_config: "/etc/matrix-synapse/log.yaml"
rc_messages_per_second: 2.0
rc_message_burst_count: 10.0
federation_rc_window_size: 1000
federation_rc_sleep_limit: 10
federation_rc_sleep_delay: 500
federation_rc_reject_limit: 50
federation_rc_concurrent: 3
media_store_path: "/srv/matrix/media"
uploads_path: "/srv/matrix/uploads"
max_upload_size: "10M"
max_image_pixels: "32M"
dynamic_thumbnails: false
thumbnail_sizes:
  - width: 32
    height: 32
    method: crop
  - width: 96
    height: 96
    method: crop
  - width: 320
    height: 240
    method: scale
  - width: 640
    height: 480
    method: scale
  - width: 800
    height: 600
    method: scale
url_preview_enabled: False
max_spider_size: "10M"
enable_registration_captcha: False
enable_registration: False
bcrypt_rounds: 12
allow_guest_access: False
trusted_third_party_id_servers:
    - "im.{{ blsedomains_webdomain }}"
auto_join_rooms:
    - "#hallway:{{ blsedomains_webdomain }}"
    - "#fun:{{ blsedomains_webdomain }}"
    - "#games:{{ blsedomains_webdomain }}"
enable_metrics: False
room_invite_state_types:
    - "m.room.join_rules"
    - "m.room.canonical_alias"
    - "m.room.avatar"
    - "m.room.name"
app_service_config_files: []
expire_access_token: False
signing_key_path: "/etc/matrix-synapse/homeserver.signing.key"
old_signing_keys: {}
key_refresh_interval: "1d" # 1 Day.
perspectives:
  servers:
    "matrix.org":
      verify_keys:
        "ed25519:auto":
          key: "{{ matrixorg_verify_key }}"
password_config:
   enabled: true
email:
   enable_notifs: true
   smtp_host: "{{ blsecluster_smtphost }}"
   smtp_port: 587
   smtp_user: "{{ username_email_root }}"
   smtp_pass: "{{ passwd_email_root }}"
   require_transport_security: True
   notif_from: "The BLSE Matrix Server <matrix@{{ blsedomains_webdomain }}"
   app_name: Matrix
   template_dir: res/templates
   notif_template_html: notif_mail.html
   notif_template_text: notif_mail.txt
   notif_for_new_users: True
   riot_base_url: "https://riot.{{ blsedomains_webdomain }}"
password_providers:
  - module: "rest_auth_provider.RestAuthProvider"
    config:
      endpoint: "http://localhost:8090"
#  - module: "ldap_auth_provider.LdapAuthProvider"
#    config:
#      enabled: true
#      uri: "ldap://{{ blsecluster_ldaphost }}:389"
#      start_tls: false
#      base: "{{ ldap_basedn }}"
#      attributes:
#         uid: "uid"
#         mail: "mail"
#         name: "cn"
#      bind_dn: "{{ username_ldap_admin }}"
#      bind_password: "{{ passwd_ldap_admin }}"
#      filter: "(&(objectClass=mailUser)(accountStatus=active))"
enable_group_creation: false