95 lines
3.7 KiB
YAML
95 lines
3.7 KiB
YAML
# --------------------------------------------------------------
|
||
# General
|
||
# --------------------------------------------------------------
|
||
public_ipv4: "15.204.117.53"
|
||
matrix_domain: "matrix.fpov.space"
|
||
landing_domain: "org.fpov.space"
|
||
teamspeak_domain: "ts.fpov.space"
|
||
matrix_email: "boxswappers@gmail.com"
|
||
|
||
# --------------------------------------------------------------
|
||
# Ports
|
||
# --------------------------------------------------------------
|
||
traefik_http_port: 80
|
||
traefik_https_port: 443
|
||
|
||
# --- TURN -------------------------------------------------------
|
||
turn_listen_port: 3478
|
||
turn_tls_port: 5349
|
||
turn_secret: "7A9F2C4E1B8D6035A2F7E9C1B4D68053"
|
||
|
||
# --- Synapse ----------------------------------------------------
|
||
synapse_http_port: 8008
|
||
|
||
# --- Matrix ------------------------------------------------------
|
||
registration_shared_secret: "1KFs@=d&l6BGPD0GAwa55ePu+bF7Vgtk@~x#l3tQyKl#_q0etp"
|
||
macaroon_secret_key: "5GongrU~_kQ9L1-f.nU21sdiz~e63+Wwq;iS7XdPA2giDqZ#xH"
|
||
form_secret: "Ubwo=AThaygGi0iySK*H4i9xUOORCQM#eDMd@E,DqW3DcfqYJG"
|
||
|
||
# --- Teamspeak ---------------------------------------------------
|
||
teamspeak_image: "docker.io/teamspeak:3.13.7"
|
||
teamspeak_container_name: teamspeak
|
||
teamspeak_udp_port: 9987 # voice (UDP) – exposed directly on the host
|
||
teamspeak_tcp_port: 10011 # query (TCP) – will be routed via Traefik
|
||
teamspeak_file_port: 30033 # file‑transfer (TCP) – optional, expose directly
|
||
|
||
#----Postgres-----------------------------------------------------
|
||
postgres_db: synapse
|
||
postgres_user: mMwHLfdO6tz5N
|
||
postgres_pw: 9mKeSFE7tH2eY
|
||
|
||
# --------------------------------------------------------------
|
||
# Container images
|
||
# --------------------------------------------------------------
|
||
posgres_image: "docker.io/postgres:16-alpine"
|
||
traefik_image: "docker.io/traefik:v3.6.11"
|
||
turn_image: "docker.io/coturn/coturn:4.9.0"
|
||
synapse_image: "docker.io/matrixdotorg/synapse:latest"
|
||
nginx_image: "docker.io/nginx:alpine"
|
||
|
||
# --------------------------------------------------------------
|
||
# Podman names & volumes
|
||
# --------------------------------------------------------------
|
||
podman_network: matrix_net
|
||
vol_traefik: traefik_data
|
||
vol_synapse: synapse_config
|
||
vol_media: synapse_media
|
||
vol_turn: turn_data
|
||
vol_nginx: nginx_html
|
||
vol_teamspeak: teamspeak_data
|
||
|
||
# --------------------------------------------------------------
|
||
# Paths on the target host (temporary files)
|
||
# --------------------------------------------------------------
|
||
static_traefik_path: "/tmp/traefik_static.toml"
|
||
dynamic_traefik_path: "/tmp/traefik_dynamic.yml"
|
||
turn_conf_path: "/tmp/turnserver.conf"
|
||
synapse_cfg_path: "/tmp/homeserver.yaml"
|
||
nginx_html_path: "/tmp/index.html"
|
||
synapse_secret_key_path: "/tmp/matrix.fpov.space.log.config"
|
||
synapse_log_config: "/tmp/matrix.fpov.space.log.config"
|
||
|
||
# -----------------------------------------------------------------
|
||
# NEW – Google OAuth2 (OpenID Connect) credentials
|
||
# -----------------------------------------------------------------
|
||
google_oidc_client_id: "YOUR_GOOGLE_CLIENT_ID"
|
||
google_oidc_client_secret: "YOUR_GOOGLE_CLIENT_SECRET"
|
||
|
||
# Optional – the scopes you want to request (the default works for most cases)
|
||
google_oidc_scopes:
|
||
- openid
|
||
- email
|
||
- profile
|
||
|
||
# --------------------------------------------------------------
|
||
# Landing page HTML
|
||
# --------------------------------------------------------------
|
||
matrix_domain: "matrix.example.com"
|
||
landing_title: "Welcome to {{ matrix_domain }}" # you can embed other vars here
|
||
landing_tagline: "Matrix + Traefik + Teamspeak – all in one stack"
|
||
landing_message: |
|
||
This host runs a Matrix homeserver (Synapse), a reverse‑proxy (Traefik) with
|
||
automatic Let’s Encrypt certificates, a TURN server for voice/video, and a
|
||
simple landing page.
|
||
|