correcting key and key location

README.md

@@ -17,6 +17,15 @@ ansible-playbook deploy_matrix.yml -i inventory/hosts.yml
 ## Matrix Administration ##
 [synapse-admin on github](https://github.com/Awesome-Technologies/synapse-admin)
 
+- generate new certificate
+```
+podman run -it --rm \
+  -v ~/synapse-data:/data:Z \
+  -e SYNAPSE_SERVER_NAME=matrix.fpov.space \
+  -e SYNAPSE_REPORT_STATS=no \
+  matrixdotorg/synapse:latest generate
+```
+
 - Create User
 ```
 sudo podman exec -it synapse register_new_matrix_user -c /data/homeserver.yaml http://localhost:8008

deploy_matrix.yml

@@ -103,11 +103,11 @@
         dest: "{{ nginx_html_path }}"        
         mode: "0644"
 
-    # - name: Render Synapse Secret key
-    #   ansible.builtin.template:
-    #     src: matrix.fpov.space.signing.key
-    #     dest: "{{ synapse_secret_key_path }}"
-    #     mode: "0644"
+    - name: Render Synapse Secret key
+      ansible.builtin.template:
+        src: matrix.fpov.space.signing.key
+        dest: "{{ synapse_secret_key_path }}"
+        mode: "0644"
 
     - name: Render Synapse log config file
       ansible.builtin.template:
@@ -190,7 +190,7 @@
           - "{{ vol_synapse }}:/data:Z"
           - "{{ vol_media }}:/data/media_store:Z"
           - "{{ synapse_cfg_path }}:/data/homeserver.yaml:Z"
-          - "{{ synapse_secret_key_path }}:/data/key/matrix.fpov.space.signing.key:Z"
+          - "{{ synapse_secret_key_path }}:/data/matrix.fpov.space.signing.key:Z"
           - "{{ synapse_log_config }}:/data/matrix.fpov.space.log.config:Z"
         network: "{{ podman_network }}"
         restart_policy: always

templates/homeserver.yaml.j2

@@ -44,7 +44,7 @@ registration_shared_secret: "{{ registration_shared_secret }}"
 report_stats: false
 macaroon_secret_key: "{{ macaroon_secret_key }}"
 form_secret: "{{ form_secret }}"
-signing_key_path: "/data/key/matrix.fpov.space.signing.key"
+signing_key_path: "/data/matrix.fpov.space.signing.key"
 trusted_key_servers:
   - server_name: "{{ matrix_domain1 }}"
 

vars/vars.yml

@@ -79,6 +79,7 @@ vol_db: postgres_db
 vol_kc_db: kc_postgres
 keycloak_data: kc_data
 
+
 # --------------------------------------------------------------
 # Paths on the target host (temporary files)
 # --------------------------------------------------------------
@@ -87,7 +88,7 @@ dynamic_traefik_path: "/tmp/traefik_dynamic.yml"
 turn_conf_path:       "/tmp/turnserver.conf"
 synapse_cfg_path:     "/tmp/homeserver.yaml"
 nginx_html_path:      "/tmp/index.html"
-synapse_secret_key_path: "/tmp/matrix.fpov.space.signing.key"
+synapse_secret_key_path: "/opt/matrix.fpov.space.signing.key"
 synapse_log_config: "/tmp/matrix.fpov.space.log.config"
 element_config_path: "/tmp/config.json"