Files
computer-playbook/roles/web-app-matrix/meta/variants.yml
kevinveenbirkenbachandClaude Opus 5.5 df00ff0abf fix(web-app-matrix): turn off Element's forced verification in variant 1
4a56b4c19c set services.element.force_verification to false only for
the SSO variants 0 and 2, on the reasoning that only the SSO specs log
the same account in twice. The deploy's second pass logs the variant 1
administrator (ansible flavor, SSO off, password login) in again. PASS 1
bootstraps the account's cross-signing identity, so in PASS 2 Element
stops on "Confirm your digital identity" ("Use another device" / "Can't
confirm?" / "Remove this device", no skip), and the password-login spec
times out at _shared.js:436 (fork run 40979252521, job 123823820263,
Discourse#1 with web-app-matrix variant 1, all three retries).

Variant 1 now sets force_verification to false like the other two. The
services.yml default stays true, so production keeps forced
verification. No variant exercises true end to end any more; the
follow-up issue restores one.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-30 09:17:06 +01:00

151 lines
3.6 KiB
YAML

---
# nocheck: clearnet-variant-tor — on an onion pick MATRIX_ONION_PRIMARY drops Jitsi and Element Call from Element, so no clearnet call surface is advertised
- services:
container_backup:
enabled: true
element:
force_verification: false
matrix:
flavor: ansible
coturn:
enabled: true
shared: true
css:
enabled: true
shared: true
dashboard:
enabled: true
shared: true
email:
enabled: true
shared: true
jitsi:
shared: true
ldap:
enabled: true
shared: true
logout:
enabled: true
shared: true
matomo:
enabled: true
shared: true
postgres:
shared: true
litellm:
enabled: false
sso:
enabled: true
shared: true
prometheus:
enabled: true
shared: true
seaweedfs:
enabled: true
shared: true
tor:
enabled: true
- services:
container_backup:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
element:
force_verification: false
matrix:
flavor: ansible
coturn:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
css:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
dashboard:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
email:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
jitsi:
shared: false
ldap:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
logout:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
matomo:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
postgres:
shared: false # nocheck: variants-static-override backup shared stays literally true
litellm:
enabled: false
sso:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
prometheus:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
seaweedfs:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
tor:
enabled: true
- services:
container_backup:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
element:
force_verification: false
matrix:
flavor: compose
seaweedfs:
enabled: true
shared: true
coturn:
enabled: true
shared: true
css:
enabled: true
shared: true
dashboard:
enabled: true
shared: true
email:
enabled: true
shared: true
ldap:
enabled: true
shared: true
logout:
enabled: true
shared: true
matomo:
enabled: true
shared: true
postgres:
shared: true
litellm:
enabled: true
sso:
enabled: true
shared: true
prometheus:
enabled: true
shared: true
tor:
enabled: true
addons:
mautrix-whatsapp:
enabled: true
mautrix-telegram:
enabled: true
mautrix-signal:
enabled: true
mautrix-slack:
enabled: true
mautrix-meta:
enabled: true