deploy playbook after setup

ansible-playbook playbook.yml --ask-vault-pass

Check containers

ssh matrix.example.com
sudo podman ps
sudo podman logs synapse

test federation

curl https://{{ matrix_domain }}/_matrix/federation/v1/version

Area	Recommendation
TLS	Use Certbot + Nginx plugin (community.general.acme Ansible module)
Secrets	Store DB passwords, secrets in Ansible Vault
Updates	Use container_image: tag with version pins (e.g., v1.100.0)
Monitoring	Add Prometheus metrics (enable_metrics: true)
Coturn	Deploy coturn (STUN/TURN) as separate container if needed
Backups	Backup /var/lib/matrix-synapse regularly
Rootless Podman	Use podman user namespaces + podman system migrate for portability