Coturn support

tasks/main.yml

@@ -29,11 +29,22 @@
       matrixRTC:
         ingress:
           host: rtc.eom.dev
+        hostAliases:
+          - hostnames:
+            - eom.dev
+            - matrix.eom.dev
+            - rtc.eom.dev
+            - synapse.eom.dev
+            ip: 136.56.38.209
 
       elementWeb:
         ingress:
           host: element.eom.dev
 
+      elementAdmin:
+        ingress:
+          host: element-admin.eom.dev
+
       matrixAuthenticationService:
 
         ## Additional configuration to provide to Matrix Authentication Service.
@@ -54,7 +65,7 @@
           0-customConfig:
             config: |
               passwords:
-                enabled: false
+                enabled: true
               email:
                 from: '"Matrix Authentication Service" <matrix-authentication-service@eom.dev>'
                 reply_to: '"No reply" <no-reply@eom.dev>'
@@ -66,6 +77,26 @@
                 password: "{{ matrix_auth_service_admin_password }}"
               upstream_oauth2:
                 providers:
+                  - id: 01K96AQEZKKABW34PY3R6BVNJ4
+                    human_name: Dex
+                    brand_name: dex
+                    issuer: https://dex.eom.dev/
+                    client_id: "{{ matrix_dex_oidc_client_id }}"
+                    client_secret: "{{ matrix_dex_oidc_client_secret }}"
+                    token_endpoint_auth_method: client_secret_basic
+                    scope: openid profile email
+                    claims_imports:
+                      localpart:
+                        action: suggest
+                        template: "{{ '{{ user.uid }}' }}"
+                      displayname:
+                        action: require
+                        template: "{{ '{{ user.name }}' }}"
+                      email:
+                        action: require
+                        template: "{{ '{{ user.email }}' }}"
+                      account_name:
+                        template: "{{ '{{ user.email }}' }}"
                   - id: 01JG22H4F0G8PYCZ5HVTQVHBC4
                     human_name: Google
                     brand_name: google
@@ -135,6 +166,12 @@
               smtp_port: 587
               smtp_user: synapse
               smtp_pass: {{ synapse_admin_password }}
+              turn_uris: 
+                - turns:coturn.eom.dev?transport=udp
+                - turns:coturn.eom.dev?transport=tcp
+              turn_shared_secret: {{ coturn_shared_secret }}
+              turn_user_lifetime: 86400000
+              turn_allow_guests: false
               client_base_url: https://element.eom.dev/
               auto_join_rooms:
                 - "#main:eom.dev"