---
_synapse_additional_networks: >-
  {{
    ['synapse-mas']
    + (
      synapse_appservices
      | map(attribute='host')
      | map('regex_replace', '^', 'synapse-')
    )
  }}

_synapse_main_secrets:
  - name: signing-key
    value: "{{ synapse_signing_key }}"
  - name: mas-client-secret
  - name: mas-homeserver-secret
_synapse_turn_secrets:
  - name: turn-shared-secret
    value: "{{ synapse_turn_shared_secret }}"
_synapse_secrets: >-
  {{
    _synapse_main_secrets
    + (_synapse_turn_secrets if synapse_turn_uris | length > 0 else [])
  }}

_synapse_base_mounts:
  - type: template
    source: homeserver.yaml.j2
    destination: /data/homeserver.yaml
    template_validate_command: python -m synapse.config -c /data/homeserver.yaml --no-secrets-in-config
  - type: template
    source: log.yaml.j2
    destination: /data/log.yaml
  - type: volume
    source: media
    destination: /data/media
    user: "991"
    group: "991"
_synapse_doublepuppet_registration_mount:
  type: template
  source: doublepuppet-registration.yaml.j2
  destination: /data/doublepuppet-registration.yaml
_synapse_appservice_registration_mounts: >-
  {{
    ([{'type': 'template', 'source': 'appservice-registration.yaml.j2'}] * synapse_appservices | length)
    | zip(
      synapse_appservices
      | map(attribute='id')
      | map('regex_replace', '^', '/data/appservices/')
      | map('regex_replace', '$', '-registration.yaml')
      | map('community.general.dict_kv', 'destination')
    ) | map('combine')
  }}
_synapse_mounts: >-
  {{
    _synapse_base_mounts
    + ([_synapse_doublepuppet_registration_mount] if synapse_appservices | length > 0 else [])
    + _synapse_appservice_registration_mounts
  }}