deploy playbook after setup
```
ansible-playbook playbook.yml --ask-vault-pass
```

Check containers
```
ssh matrix.example.com
sudo podman ps
sudo podman logs synapse
```

test federation
```
curl https://{{ matrix_domain }}/_matrix/federation/v1/version
```




| Area | Recommendation |
|------|----------------|
| **TLS** | Use Certbot + Nginx plugin (`community.general.acme` Ansible module) |
| **Secrets** | Store DB passwords, secrets in **Ansible Vault** |
| **Updates** | Use `container_image: tag` with version pins (e.g., `v1.100.0`) |
| **Monitoring** | Add Prometheus metrics (`enable_metrics: true`) |
| **Coturn** | Deploy `coturn` (STUN/TURN) as separate container if needed |
| **Backups** | Backup `/var/lib/matrix-synapse` regularly |
| **Rootless Podman** | Use `podman user` namespaces + `podman system migrate` for portability |


## Using Hugo to create site ##
```
# Create & build site locally (run ON CONTROL NODE)
hugo new site mysite
cd mysite
echo 'theme = "ananke"' >> config.toml
hugo new posts/my-first-post.md
hugo  # builds to /public
cp -r public ../fpov/roles/nginx-proxy/files/mysite/
```