synapse: Add support for appservices and use secrets better

roles/synapse/tasks/main.yaml

@@ -15,26 +15,11 @@
     name: service
   vars:
     service_name: synapse
-    service_container_image: "{{ _synapse_image_name }}"
+    service_container_image: ghcr.io/element-hq/synapse:latest
     service_database_type: postgres
     service_postgres_tag: "{{ synapse_postgres_tag }}"
-    service_container_mounts:
-      - type: template
-        source: homeserver.yaml.j2
-        destination: /data/homeserver.yaml
-      - type: template
-        source: log.yaml.j2
-        destination: /data/log.yaml
-      - type: volume
-        source: media
-        destination: /data/media
-        user: "991"
-        group: "991"
-    service_container_secrets:
-      - name: signing-key
-        value: "{{ synapse_signing_key }}"
-      - name: mas-client-secret
-      - name: mas-homeserver-secret
+    service_container_mounts: "{{ _synapse_mounts }}"
+    service_container_secrets: "{{ _synapse_secrets }}"
     service_container_env:
       SYNAPSE_SERVER_NAME: "{{ synapse_server_name }}"
       SYNAPSE_REPORT_STATS: "no"
@@ -47,13 +32,14 @@
         proxy_target_socket: /run/matrix-authentication-service-caddy-socket-proxy.sock
     service_wants:
       - matrix-authentication-service.service
+    service_container_additional_networks: "{{ _synapse_additional_networks }}"
 
 - name: Matrix authentication service for synapse
   ansible.builtin.import_role:
     name: matrix_authentication_service
   vars:
     matrix_authentication_service_additional_networks:
-      - synapse
+      - synapse-mas
     matrix_authentication_service_secrets: "{{ synapse_mas_secrets }}"
     matrix_authentication_service_domain: "{{ synapse_mas_domain }}"
     matrix_authentication_service_homeserver_name: "{{ synapse_server_name }}"