include:
  {% if salt['grains.get']('include_secrets', True) %}
  - secrets.role.matrix
  {% endif %}
  - role.common.nginx

profile:
  matrix:
    database_host: 192.168.47.4
    database_name: matrix
    database_user: matrix
    appservices:
      discord:
        repo: https://github.com/Half-Shot/matrix-appservice-discord.git
        branch: develop
        client_id: 672058964707377152
        appservice_id: 330d1b6dcdf6a2217454f8227d2a960030d341a8baca5fa5c40f4081b6f40acd
        build: True
        script: /usr/bin/node build/src/discordas.js -c config.yaml -f discord-registration.yaml -p 9001
      webhook:
        repo: https://github.com/turt2live/matrix-appservice-webhooks.git
        appservice_id: f4de7550133374c703c4cd64c5898cf1b82b65d4a5c2aca93863ee1fb859df91
        build: False
        script: /usr/bin/node index.js -c config.yaml -f webhook-registration.yaml -p 9002
    telegram:
      appservice_id: oepzkscngbyqvopzn773ns7whfxyfslgjhy7mumy7syurqp3f4kvb4sgufz9nfsw
      api_id: 1331253
    matterbridge:
      servers:
        irc:
          libera:
            Server: "irc.libera.chat:6697"
            UseTLS: true
            Nick: "openSUSEBot"
            RemoteNickFormat: "<{NICK}> "
        matrix:
          openSUSE:
            Server: "https://matrix.opensuse.org"
            MxId: "@matterbridge:opensuse.org"
            RemoteNickFormat: "<{NICK}> "
        discord:
          openSUSE:
            Server: "ID:366985425371398146"
            AutoWebhooks: true
            UseUserName: true
            RemoteNickFormat: "{NICK}"
        telegram:
          default:
            UseFirstName: true
            RemoteNickFormat: "**{NICK}**: "
            MessageFormat: "MarkdownV2"
      gateways:
        # kiwi:
        #   matrix.openSUSE: "#kiwi:matrix.org"
        #   discord.openSUSE: "ID:669467339158454283"
        kubic:
          irc.libera: "#kubic"
        #   matrix.openSUSE: "#kubic:opensuse.org"
          discord.openSUSE: "ID:734445719825416216"
        microos-desktop:
          irc.libera: "microos-desktop"
        #   matrix.openSUSE: "#microos-desktop:opensuse.org"
          discord.openSUSE: "ID:734445753975570563"
        #   telegram.default: ""
        # openqa:
        #   matrix.openSUSE: "#openqa:opensuse.org"
        #   discord.openSUSE: "ID:817367056956653621"
        opensuse-admin:
          irc.libera: "#opensuse-admin"
          matrix.openSUSE: "#admin:opensuse.org"
          discord.openSUSE: "ID:700799844754784420"
        opensuse-artwork:
          irc.libera: "#opensuse-artwork"
        #   matrix.openSUSE: "#artwork:opensuse.org"
          discord.openSUSE: "ID:496049131928682506"
        opensuse-buildservice:
          irc.libera: "#opensuse-buildservice"
        #   matrix.openSUSE: "#obs:opensuse.org"
          discord.openSUSE: "ID:723545727816433664"
        opensuse-chat:
          irc.libera: "#opensuse-chat"
        #   matrix.openSUSE: "#chat:opensuse.org"
          discord.openSUSE: "ID:366989996101730304"
        #   telegram.default: ""
        opensuse-de:
          irc.libera: "#opensuse-de"
        #   matrix.openSUSE: "#de:opensuse.org"
          discord.openSUSE: "ID:561164428939100160"
        #   telegram.default: ""
        # opensuse-docs:
        #   matrix.openSUSE: "#docs:opensuse.org"
        #   discord.openSUSE: "ID:570871796132478976"
        #   telegram.default: ""
        opensuse-e:
          irc.libera: "#opensuse-e"
        #   matrix.openSUSE: "#e:opensuse.org"
          discord.openSUSE: "ID:582568672196034570"
        opensuse-es:
          irc.libera: "#opensuse-es"
        #   matrix.openSUSE: "#es:opensuse.org"
          discord.openSUSE: "ID:561190353030348810"
        #   telegram.default: ""
        opensuse-factory:
          irc.libera: "#opensuse-factory"
        #   matrix.openSUSE: "#factory:opensuse.org"
          discord.openSUSE: "ID:523947864439914496"
        opensuse-forums:
          irc.libera: "#opensuse-forums"
        #   matrix.openSUSE: "#forums:opensuse.org"
          discord.openSUSE: "ID:700825520668934284"
        # opensuse-fr:
        #   matrix.openSUSE: "#fr:opensuse.org"
        #   discord.openSUSE: "ID:664012710597492737"
        # opensuse-gaming:
        #   matrix.openSUSE: "#gaming:opensuse.org"
        #   discord.openSUSE: "ID:570871874481815572"
        opensuse-gnome:
          irc.libera: "#opensuse-gnome"
        #   matrix.openSUSE: "#gnome:opensuse.org"
          discord.openSUSE: "ID:523949043110379530"
        # opensuse-haskell:
        #   matrix.openSUSE: "#haskell:opensuse.org"
        #   discord.openSUSE: "ID:760556011395874856"
        # opensuse-it:
        #   matrix.openSUSE: "#it:opensuse.org"
        #   discord.openSUSE: "ID:561194459619000321"
        #   telegram.default: ""
        opensuse-kde:
          irc.libera: "#opensuse-kde"
        #   matrix.openSUSE: "#kde:opensuse.org"
          discord.openSUSE: "ID:523949061674369024"
        opensuse-marketing:
          irc.libera: "#opensuse-marketing"
        #   matrix.openSUSE: "#marketing:opensuse.org"
          discord.openSUSE: "ID:660902159910567966"
        #   telegram.default: ""
        # opensuse-newscom:
        #   matrix.openSUSE: "#newscom:opensuse.org"
        #   discord.openSUSE: "ID:806162338188361728"
        #   telegram.default: ""
        # opensuse-news:
        #   matrix.openSUSE: "#news:opensuse.org"
        #   discord.openSUSE: "ID:376527321869451271"
        # opensuse-nl:
        #   matrix.openSUSE: "#nl:opensuse.org"
        #   discord.openSUSE: "ID:605150216965849107"
        opensuse-packaging:
          irc.libera: "#opensuse-packaging"
        #   matrix.openSUSE: "#packaging:opensuse.org"
          discord.openSUSE: "ID:496005129959374868"
        # opensuse-pine:
        #   matrix.openSUSE: "#pine:opensuse.org"
        #   discord.openSUSE: "ID:794874055043710996"
        #   telegram.default: ""
        opensuse-pl:
          irc.libera: "#suse.pl"
        #   matrix.openSUSE: "#pl:opensuse.org"
          discord.openSUSE: "ID:561164407560863755"
        #   telegram.default: ""
        opensuse-project:
          irc.libera: "#opensuse-project"
        #   matrix.openSUSE: "#project:opensuse.org"
          discord.openSUSE: "ID:407993213425680384"
        #   telegram.default: ""
        # opensuse-reddit:
        #   matrix.openSUSE: "#reddit:opensuse.org"
        #   discord.openSUSE: "ID:619283903571820555"
        opensuse-support:
          irc.libera: "#opensuse"
        #   matrix.openSUSE: "#support:opensuse.org"
          discord.openSUSE: "ID:366987951734784012"
        # opensuse-telegram:
        #   matrix.openSUSE: "#telegram:opensuse.org"
        #   discord.openSUSE: "ID:557298959765209108"
        #   telegram.default: ""
        # opensuse-tumbleweed:
        #   matrix.openSUSE: "#snapshots:opensuse.org"
        #   discord.openSUSE: "ID:619284844865650698"
        # opensuse-twitter:
        #   matrix.openSUSE: "#twitter:opensuse.org"
        #   discord.openSUSE: "ID:619283940318117953"
        opensuse-xfce:
          irc.libera: "#opensuse-xfce"
        #   matrix.openSUSE: "#xfce:opensuse.org"
          discord.openSUSE: "ID:523949083241742336"
        #   telegram.default: ""
        # software-o-o:
        #   matrix.openSUSE: "#software-o-o:opensuse.org"
        #   discord.openSUSE: "ID:733713878055256155"
        uyuni:
          irc.libera: "#uyuni"
        #   matrix.openSUSE: "#uyuni:opensuse.org"
          discord.openSUSE: "ID:723546275915628585"
        yast:
          irc.libera: "#yast"
        #   matrix.openSUSE: "#yast:opensuse.org"
          discord.openSUSE: "ID:545922654570414090"

nginx:
  ng:
    servers:
      managed:
        chat.opensuse.org.conf:
          config:
            - server:
                - server_name: chat.opensuse.org
                - listen:
                    - 80
                    - default_server
                - root: /usr/share/element-web
                - gzip_vary: 'on'
                - gzip_min_length: 1000
                - gzip_comp_level: 5
                - gzip_types:
                    - text/plain
                    - text/xml
                    - text/x-js
                    - application/json
                    - text/css
                    - application/x-javascript
                    - application/javascript
                - location /:
                    - index:
                        - index.html
                        - index.htm
                - location /vector-icons/:
                    - rewrite: ^(.*?)\..*?(\..*?)$ $1$2 last
                    - proxy_set_header: Host static.opensuse.org
                    - proxy_pass: https://static.opensuse.org/chat/favicons/
                - location ~* \.(?:ttf|otf|eot|woff)$:
                    - add_header: Access-Control-Allow-Origin "*"
                - access_log: /var/log/nginx/chat.access.log combined
                - error_log: /var/log/nginx/chat.error.log
          enabled: True
        dimension.opensuse.org:
          config:
            - server:
                - server_name: dimension.opensuse.org
                - listen:
                    - 80
                - location /:
                    - return: 301 https://chat.opensuse.org
                - location ~ "/..*":
                    - proxy_set_header: X-Forwarded-For $remote_addr
                    - proxy_pass: http://localhost:8184
                - location /img/avatars/:
                    - proxy_set_header: Host static.opensuse.org
                    - proxy_pass: https://static.opensuse.org/chat/integrations/
          enabled: True
        matrix.opensuse.org:
          config:
            - server:
                - server_name: matrix.opensuse.org
                - listen:
                    - 80
                - location /:
                    - return: 301 https://chat.opensuse.org
                - location /_matrix:
                    - proxy_set_header: X-Forwarded-For $remote_addr
                    - proxy_pass: http://localhost:8008
          enabled: True
        webhook.opensuse.org:
          config:
            - server:
                - server_name: webhook.opensuse.org
                - listen:
                    - 80
                - location /:
                    - return: 301 https://chat.opensuse.org
                - location ~ "/..*":
                    - proxy_set_header: X-Forwarded-For $remote_addr
                    - proxy_pass: http://localhost:9002
          enabled: True

sudoers:
  included_files:
    /etc/sudoers.d/group_matrix-admins:
      groups:
        matrix-admins:
          - 'ALL=(ALL) ALL'

apparmor:
  profiles:
    matrix-synapse:
      source: salt://profile/matrix/files/matrix-synapse.apparmor

zypper:
  repositories:
    openSUSE:infrastructure:matrix:
      baseurl: http://download.infra.opensuse.org/repositories/openSUSE:/infrastructure:/matrix/openSUSE_Leap_$releasever/
      priority: 100
      refresh: True
    devel:languages:python:backports:
      baseurl: https://download.opensuse.org/repositories/devel:/languages:/python:/backports/openSUSE_Leap_$releasever/
      refresh: True