phase in synapse admin

ansible/inventory/runa.yml

@@ -36,4 +36,10 @@ runa:
         mtx-redis-2.lat.internal.ru.com:
         mtx-redis-3.lat.internal.ru.com:
         mtx-mngm-1.lat.internal.ru.com:
+          has_ssl_certificates: false
+          docker_compose:
+            - synapse-admin
         mtx-mngm-2.lat.internal.ru.com:
+          has_ssl_certificates: false
+          docker_compose:
+            - synapse-admin

ansible/roles/docker-compose/files/synapse-admin/.env

@@ -0,0 +1,2 @@
+NGINX_VERSION=1.25.2-alpine
+SYNAPSE_ADMIN_VERSION=0.8.7

ansible/roles/docker-compose/files/synapse-admin/docker-compose.yaml

@@ -0,0 +1,16 @@
+version: '3.8'
+services:
+  synapse-admin:
+    image: awesometechnologies/synapse-admin:${SYNAPSE_ADMIN_VERSION}
+    restart: unless-stopped
+    ports:
+      - "8008:80/tcp"
+  # nginx:
+  #   image: nginx:${NGINX_VERSION}
+  #   ports:
+  #     - "80:80/tcp"
+  #     - "443:443/tcp"
+  #   volumes:
+  #     - ./nginx:/etc/nginx/conf.d
+  #     - /ssl:/ssl
+  #     - /www:/www

ansible/roles/docker-compose/files/synapse-admin/nginx/sa.conf

@@ -0,0 +1,27 @@
+server {
+
+    listen 443 ssl http2;
+    listen [::]:443 ssl http2;
+
+    ssl_certificate      /ssl/chain.crt;
+    ssl_certificate_key  /ssl/certificate.keyplain;
+
+    error_page 403 404 /403_404.html;
+    location = /403_404.html {
+	    default_type application/json;
+	    return 200 'You are not authorized to access this page.';
+    }
+
+    location / {
+      proxy_set_header X-Forwarded-For $remote_addr;
+      proxy_set_header X-Forwarded-Proto $scheme;
+      proxy_set_header Host $http_host;
+
+      proxy_connect_timeout 600s;
+      proxy_send_timeout 600s;
+      proxy_read_timeout 600s;
+      send_timeout 600s;
+
+      proxy_pass http://synapse-admin;
+    }
+}

ansible/roles/docker-compose/files/synapse-admin/turnserver.conf

@@ -0,0 +1,18 @@
+realm=turn-1.corp-serv.net
+no-tcp-relay
+listening-ip=0.0.0.0
+listening-port=3478
+min-port=49152
+max-port=65535
+
+external-ip=135.125.151.180/10.80.24.41
+
+log-file=stdout
+verbose
+pidfile=/var/tmp/turnserver.pid
+use-auth-secret
+static-auth-secret=ihaaCac6Oow3ohzuvequ6esoo9eegheex
+
+tls-listening-port=5349
+pkey=/ssl/certificate.keyplain
+cert=/ssl/chain.crt