Add synapse role

roles/synapse/tasks/main.yaml

@@ -0,0 +1,42 @@
+---
+- name: Assert complexity error is set if complexity limit is
+  ansible.builtin.assert:
+    that: synapse_room_complexity_limit == 0 or synapse_room_complexity_error | length > 0
+    fail_msg: "synapse_room_complexity_error must be set when synapse_room_complexity_limit is"
+    quiet: true
+- name: Assert turn shared secret is set if turn uris is
+  ansible.builtin.assert:
+    that: synapse_turn_uris | length == 0 or synapse_turn_shared_secret | length > 0
+    fail_msg: "synapse_turn_shared_secret must be set when synapse_turn_uris is"
+    quiet: true
+
+- name: Synapse container
+  ansible.builtin.include_role:
+    name: service
+  vars:
+    service_name: synapse
+    service_container_image: "{{ _synapse_image_name }}"
+    service_database_type: postgres
+    service_postgres_tag: "{{ synapse_postgres_tag }}"
+    service_container_mounts:
+      - type: template
+        source: homeserver.yaml.j2
+        destination: /data/homeserver.yaml
+      - type: template
+        source: log.yaml.j2
+        destination: /data/log.yaml
+      - type: volume
+        source: media
+        destination: /data/media
+        user: "991"
+        group: "991"
+    service_container_secrets:
+      - name: signing-key
+        value: "{{ synapse_signing_key }}"
+    service_container_env:
+      SYNAPSE_SERVER_NAME: "{{ synapse_server_name }}"
+      SYNAPSE_REPORT_STATS: "no"
+      UID: 991
+      GID: 991
+    service_container_http_port: 8008
+    service_domains: "{{ [synapse_public_base_domain] }}"