Huge role refactoring/cleanup. Other commits will propably follow. Because some bugs will exist. Still important for longrun and also for auto docs/help/slideshow generation

roles/web-app-matrix/meta/main.yml

@@ -0,0 +1,27 @@
+---
+galaxy_info:
+  author: "Kevin Veen-Birkenbach"
+  description: "Step into the future of communication with Matrix, a dynamic and decentralized platform that delivers secure, real-time messaging and collaboration. Benefit from federation, end-to-end encryption, and versatile bridging that connects you globally while safeguarding your data."
+  license: "CyMaIS NonCommercial License (CNCL)"
+  license_url: "https://s.veen.world/cncl"
+  company: |
+    Kevin Veen-Birkenbach
+    Consulting & Coaching Solutions
+    https://www.veen.world
+  galaxy_tags:
+    - matrix
+    - docker
+    - federated
+    - decentralized
+    - real-time
+    - encrypted
+  repository: "https://s.veen.world/cymais"
+  issue_tracker_url: "https://s.veen.world/cymaisissues"
+  documentation: "https://s.veen.world/cymais"
+  logo:
+    class: "fa-solid fa-satellite-dish"
+  run_after:
+    - web-app-matomo
+    - web-app-keycloak
+    - web-app-mailu
+dependencies: []

roles/web-app-matrix/meta/schema.yml

@@ -0,0 +1,90 @@
+credentials:
+  administrator_password:
+    description: "Initial administrator password for the Matrix homeserver"
+    algorithm: "sha256"
+    validation: "^[a-f0-9]{64}$"
+
+  generic_secret_key:
+    description: "Generic secret used by Synapse for key signing and session management"
+    algorithm: "sha256"
+    validation: "^[a-f0-9]{64}$"
+
+  database_password:
+    description: "Password for the Matrix PostgreSQL database"
+    algorithm: "bcrypt"
+    validation: "^\\$2[aby]\\$.{56}$"
+
+  registration_shared_secret:
+    description: "Secret token used to allow shared registration from external sources"
+    algorithm: "sha256"
+    validation: "^[a-f0-9]{64}$"
+
+  macaroon_secret_key:
+    description: "Secret key used to sign macaroon tokens for authentication"
+    algorithm: "sha256"
+    validation: "^[a-f0-9]{64}$"
+
+  form_secret:
+    description: "Secret for form token protection (used in web registration flows)"
+    algorithm: "sha256"
+    validation: "^[a-f0-9]{64}$"
+
+  chatgpt_bridge_openai_api_key:
+    description: "API key for accessing OpenAI via the Matrix ChatGPT bridge"
+    algorithm: "plain"
+    validation: "^sk-[a-zA-Z0-9]{40,}$"
+
+  chatgpt_bridge_access_token:
+    description: "Access token used by the ChatGPT bridge for authentication"
+    algorithm: "plain"
+    validation: "^[a-zA-Z0-9-_]{20,}$"
+
+  chatgpt_bridge_user_password:
+    description: "Matrix user password used by the ChatGPT bridge"
+    algorithm: "sha256"
+    validation: "^[a-f0-9]{64}$"
+
+  mautrix_facebook_bridge_database_password:
+    description: "Database password for the mautrix-facebook bridge"
+    algorithm: "bcrypt"
+    validation: "^\\$2[aby]\\$.{56}$"
+
+  mautrix_instagram_bridge_database_password:
+    description: "Database password for the mautrix-instagram bridge"
+    algorithm: "bcrypt"
+    validation: "^\\$2[aby]\\$.{56}$"
+
+  mautrix_signal_bridge_database_password:
+    description: "Database password for the mautrix-signal bridge"
+    algorithm: "bcrypt"
+    validation: "^\\$2[aby]\\$.{56}$"
+
+  mautrix_slack_bridge_database_password:
+    description: "Database password for the mautrix-slack bridge"
+    algorithm: "bcrypt"
+    validation: "^\\$2[aby]\\$.{56}$"
+
+  mautrix_telegram_bridge_database_password:
+    description: "Database password for the mautrix-telegram bridge"
+    algorithm: "bcrypt"
+    validation: "^\\$2[aby]\\$.{56}$"
+
+  mautrix_telgegram_bridge_api_id:
+    description: "Telegram API ID for the mautrix-telegram bridge"
+    algorithm: "plain"
+    validation: "^\\d{5,}$"
+
+  mautrix_telgegram_bridge_api_pin:
+    description: "Telegram API hash or PIN for the mautrix-telegram bridge"
+    algorithm: "plain"
+    validation: "^[a-zA-Z0-9]{10,}$"
+
+  mautrix_whatsapp_bridge_database_password:
+    description: "Database password for the mautrix-whatsapp bridge"
+    algorithm: "bcrypt"
+    validation: "^\\$2[aby]\\$.{56}$"
+
+  mautrix_whatsapp_bridge_provisioning_shared_secret:
+    description: "Shared secret for the mautrix-whatsapp bridge provisioning endpoint"
+    algorithm: "sha256"
+    validation: "^[a-f0-9]{64}$"

roles/web-app-matrix/meta/users.yml

@@ -0,0 +1,3 @@
+users:
+  administrator:
+    username:         "administrator"