synapse: Add support for appservices and use secrets better

roles/synapse/templates/appservice-registration.yaml.j2

@@ -0,0 +1,21 @@
+---
+# vim:ft=yaml
+# {{ ansible_managed }}
+{% set id = item.destination.split('/')[-1].split('-')[0] %}
+{% set appservice = synapse_appservices | selectattr('id', 'equalto', id) | first %}
+
+id: {{ id }}
+url: http://{{ appservice.host }}:8080
+as_token: {{ appservice.as_token }}
+hs_token: {{ appservice.hs_token }}
+sender_localpart: {{ id }}senderlocalpart
+rate_limited: false
+namespaces:
+    users:
+        - regex: ^@{{ id }}bot:{{ synapse_server_name | replace('.', '\.') }}$
+          exclusive: true
+        - regex: ^@{{ id }}_.*:{{ synapse_server_name | replace('.', '\.') }}$
+          exclusive: true
+de.sorunome.msc2409.push_ephemeral: true
+receive_ephemeral: true
+io.element.msc4190: true

roles/synapse/templates/doublepuppet-registration.yaml.j2

@@ -0,0 +1,15 @@
+---
+# vim:ft=yaml
+# {{ ansible_managed }}
+
+id: doublepuppet
+url:
+as_token: "{{ synapse_doublepuppet_token }}"
+hs_token: doublepuppethstoken
+sender_localpart: doublepuppetsenderlocalpart
+rate_limited: false
+
+namespaces:
+  users:
+    - regex: '@.*:{{ synapse_server_name | replace(".", "\.") }}'
+      exclusive: false

roles/synapse/templates/homeserver.yaml.j2

@@ -81,7 +81,7 @@ url_preview_ip_range_blacklist:
 
 turn_uris: {{ synapse_turn_uris }}
 {% if synapse_turn_uris | length > 0 %}
-turn_shared_secret: {{ synapse_turn_shared_secret }}
+turn_shared_secret_file: /run/secrets/turn-shared-secret
 {% endif %}
 turn_user_lifetime: 1d
 turn_allow_guests: false
@@ -109,4 +109,10 @@ autocreate_auto_join_rooms: false
 matrix_authentication_service:
   enabled: true
   endpoint: http://matrix-authentication-service:8080/
-  secret: "{{ service_podman_secrets['synapse-mas-homeserver-secret'] }}"
+  secret_path: /run/secrets/mas-homeserver-secret
+
+{% if synapse_appservices | length > 0 %}
+app_service_config_files:
+  - {{ _synapse_doublepuppet_registration_mount.destination }}
+  {{ _synapse_appservice_registration_mounts | map(attribute='destination') | to_nice_yaml | indent(2) }}
+{% endif %}