mattermost.yml

---

- hosts: homelab

  vars:
    application: mattermost

    docker_network: "{{ networks.pub }}"

  handlers:
    - name: Restart
      community.docker.docker_container:
        name: "{{ application }}"
        restart: true
        comparisons:
          '*': ignore

  tasks:
    - name: Create config directory
      ansible.builtin.file:
        path: "{{ config_directory }}"
        state: directory
        owner: "{{ common_user_id }}"
        group: "{{ common_root_group }}"
        mode: "0771"

    - name: Create postgres container
      ansible.builtin.include_role:
        name: postgres
      vars:
        postgres_version: 16
        postgres_password: !vault |
          $ANSIBLE_VAULT;1.1;AES256
          66636138626433383439313439353435373036616161646536333333363464383163336361613931
          3361653330393532623865393836336434363162663635330a323366346464326634373038366630
          38323236366237633331306434366464666564376337623930386163323466623538393037333131
          6234393131386537310a346562323563663637393763653961376137613538316638653165363637
          38646136363563656132303534333630343136363536343666663230633466333736

    - name: Create app directories
      ansible.builtin.file:
        path: "{{ config_directory }}/config/{{ item }}"
        state: directory
        recurse: true
        owner: "2000"
        group: "2000"
      loop:
        - config
        - data
        - logs
        - plugins
        - bleveindexes
        - client-plugins

    - name: Create container
      ansible.builtin.include_role:
        name: docker_container
      vars:
        image: mattermost/mattermost-team-edition:10.3.1
        volumes:
          - "{{ config_directory }}/config/config:/mattermost/config"
          - "{{ config_directory }}/config/data:/mattermost/data"
          - "{{ config_directory }}/config/logs:/mattermost/logs"
          - "{{ config_directory }}/config/plugins:/mattermost/plugins"
          - "{{ config_directory }}/config/bleveindexes:/mattermost/bleveindexes"
          - "{{ config_directory }}/config/client-plugins:/mattermost/client/plugins"
          - /etc/localtime:/etc/localtime:ro
        env:
          TZ: "{{ common_timezone }}"
        traefik:
          - port: 8065
        homepage:
          group: Collaboration
          weight: 500
          description: "Online chat"
        blackbox:
          path: /api/v4/system/ping

    - name: Configure
      json_patch: # noqa fqcn[action]
        src: "{{ config_directory }}/config/config/config.json"
        pretty: true
        operations:
          - op: add
            path: "{{ item.key }}"
            value: "{{ item.value }}"
      loop: "{{ _mattermost_configuration | dict2items }}"
      notify: Restart
      vars:
        _mattermost_configuration:
          # https://docs.mattermost.com/configure/environment-configuration-settings.html#site-url
          ServiceSettings/SiteURL: "https://{{ application }}.{{ common_tld }}"

          # https://docs.mattermost.com/configure/environment-configuration-settings.html#web-server-listen-address
          ServiceSettings/ListenAddress: ":8065"

          # https://docs.mattermost.com/configure/experimental-configuration-settings.html#enable-local-mode-for-mmctl
          ServiceSettings/EnableLocalMode: true

          # https://docs.mattermost.com/configure/environment-configuration-settings.html#database
          SqlSettings/DriverName: postgres
          SqlSettings/DataSource: "{{ _postgres_url }}?sslmode=disable\u0026connect_timeout=10"

          # https://docs.mattermost.com/configure/environment-configuration-settings.html#console-log-level
          LogSettings/ConsoleLevel: "INFO"

          # https://docs.mattermost.com/configure/environment-configuration-settings.html#smtp
          # https://docs.mattermost.com/configure/smtp-email.html#gmail
          EmailSettings/SMTPServer: "{{ common_email_server }}"
          EmailSettings/SMTPPort: "{{ common_email_port | string }}"
          EmailSettings/ConnectionSecurity: "STARTTLS"
          EmailSettings/EnableSMTPAuth: true
          EmailSettings/SMTPUsername: "{{ common_email_username }}"
          EmailSettings/SMTPPassword: "{{ common_email_password }}"

          # https://docs.mattermost.com/configure/experimental-configuration-settings.html#experimental-bleve-configuration-settings
          BleveSettings/EnableIndexing: true
          BleveSettings/IndexDir: "/mattermost/bleveindexes"
          BleveSettings/EnableSearching: true
          BleveSettings/EnableAutocomplete: true