Initial VPS operations handbook

ansible/roles/matrix_secret_contract/defaults/main.yml

@@ -0,0 +1,21 @@
+---
+matrix_namespace: matrix-system
+matrix_bootstrap_dir: /etc/matrix-bootstrap
+# This role validates only names, keys, types, ownership and modes. It never reads
+# bootstrap values or emits Kubernetes Secret contents.
+matrix_required_bootstrap_files:
+  - smtp-password
+  - synapse-db-password
+  - mas-db-password
+  - synapse-signing-key
+  - synapse-macaroon-secret
+  - synapse-form-secret
+  - mas-encryption-secret
+  - mas-signing-key
+matrix_required_kubernetes_secrets:
+  - name: matrix-synapse-master-config
+    keys: [homeserver.yaml, log.config, signing.key]
+  - name: matrix-authentication-config
+    keys: [mas-config.yaml]
+  - name: matrix-pgbouncer-userlist
+    keys: [userlist.txt]