not tested no vault

README.md

@@ -16,6 +16,8 @@ curl https://{{ matrix_domain }}/_matrix/federation/v1/version
 ```
 
 
+
+
 | Area | Recommendation |
 |------|----------------|
 | **TLS** | Use Certbot + Nginx plugin (`community.general.acme` Ansible module) |
@@ -25,3 +27,16 @@ curl https://{{ matrix_domain }}/_matrix/federation/v1/version
 | **Coturn** | Deploy `coturn` (STUN/TURN) as separate container if needed |
 | **Backups** | Backup `/var/lib/matrix-synapse` regularly |
 | **Rootless Podman** | Use `podman user` namespaces + `podman system migrate` for portability |
+
+
+## Using Hugo to create site ##
+```
+# Create & build site locally (run ON CONTROL NODE)
+hugo new site mysite
+cd mysite
+echo 'theme = "ananke"' >> config.toml
+hugo new posts/my-first-post.md
+hugo  # builds to /public
+cp -r public ../fpov/roles/nginx-proxy/files/mysite/
+```
+

roles/nginx-proxy/tasks/main.yml

@@ -60,3 +60,45 @@
 
 - name: Run Synapse (PostgreSQL & all)
   # ... (existing synapse task from before)
+
+- name: Install Nginx
+  package:
+    name: nginx
+    state: present
+
+- name: Create web root for landing page
+  file:
+    path: "{{ nginx_webroot }}"
+    state: directory
+    mode: '0755'
+
+- name: Deploy landing page HTML
+  copy:
+    content: |
+      <!DOCTYPE html>
+      <html>
+      <head><title>Welcome</title></head>
+      <body>
+        <h1>Welcome to Matrix!</h1>
+        <p>Visit <a href="/_matrix">Matrix</a></p>
+      </body>
+      </html>
+    dest: "{{ nginx_webroot }}/index.html"
+    mode: '0644'
+
+- name: Deploy Nginx config
+  template:
+    src: nginx/default.conf.j2
+    dest: "/etc/nginx/conf.d/{{ matrix_domain }}.conf"
+    mode: '0644'
+
+- name: Remove default config (optional)
+  file:
+    path: "/etc/nginx/conf.d/default.conf"
+    state: absent
+
+- name: Restart & enable Nginx
+  service:
+    name: nginx
+    state: restarted
+    enabled: yes