Matrix: Deploy syncv3 proxy

ansible/plays/services/matrix/Caddyfile

@@ -7,7 +7,7 @@ http://{{ matrix.baseurl }} {
     Content-Type application/json
     Access-Control-Allow-Origin *
   }
-  respond /.well-known/matrix/client "{\"m.homeserver\": {\"base_url\": \"https://synapse.{{ matrix.baseurl }}\"} }" 200
+  respond /.well-known/matrix/client "{\"m.homeserver\": {\"base_url\": \"https://synapse.{{ matrix.baseurl }}\"}, \"org.matrix.msc3575.proxy\": { \"url\": \"https://syncv3.{{ matrix.baseurl }}\" } }" 200
   respond /.well-known/matrix/server "{\"m.server\": \"synapse.{{ matrix.baseurl }}:443\"}" 200
   respond /.well-known/matrix/support "{\"admins\":[{\"matrix_id\":\"@tobi:{{ matrix.baseurl }}\",\"email_address\":\"matrix@{{ matrix.baseurl }}\",\"role\":\"admin\"}]}" 200
 

ansible/plays/services/matrix/docker-compose.yaml

@@ -93,6 +93,46 @@ services:
     networks:
       - backend
 
+### SLIDING SYNC
+
+  syncv3-db:
+    image: postgres:15
+    restart: always
+    environment:
+      - POSTGRES_USER={{ matrix.syncv3.user }}
+      - POSTGRES_DB={{ matrix.syncv3.database }}
+      - POSTGRES_PASSWORD={{ matrix.syncv3.password }}
+      - POSTGRES_INITDB_ARGS=--encoding=UTF-8 --lc-collate=C --lc-ctype=C
+    networks:
+      - syncv3
+    volumes:
+      - syncv3_db_data:/var/lib/postgresql/data
+    healthcheck:
+      test: ["CMD-SHELL", "pg_isready"]
+      interval: 10s
+      timeout: 5s
+      retries: 5
+
+  syncv3-proxy:
+    image: ghcr.io/matrix-org/sliding-sync:latest
+    restart: always
+    environment:
+      - "SYNCV3_SERVER=https://synapse.{{ matrix.baseurl }}"
+      - "SYNCV3_SECRET={{ matrix.syncv3.secret }}"
+      - "SYNCV3_BINDADDR=:8008"
+      - "SYNCV3_PROM=:2112"
+      - "SYNCV3_DB=user={{ matrix.syncv3.user }} dbname={{ matrix.syncv3.database }} sslmode=disable host=syncv3-db password='{{ matrix.syncv3.password }}'"
+    labels:
+      - "traefik.enable=true"
+      - "traefik.http.routers.matrix-syncv3-proxy.rule=Host(`syncv3.{{ matrix.baseurl }}`)"
+      - "traefik.http.routers.matrix-syncv3-proxy.entrypoints=websecure"
+      - "traefik.http.services.matrix-syncv3-proxy.loadbalancer.server.port=8008"
+      - "prometheus-scrape.enabled=true"
+      - "prometheus-scrape.port=2112"
+    networks:
+      - syncv3
+      - default
+
 ### BRIDGES
 
 #### Telegram
@@ -212,11 +252,14 @@ services:
 networks:
   backend:
     internal: true
+  syncv3:
+    internal: true
   metrics:
     external: true
 
 volumes:
   synapse_data:
+  syncv3_db_data:
   bridge_tg_data:
   bridge_tg_db:
   bridge_slack_data: