Migrate Synapse database to postgres container.

env.yml

@@ -122,7 +122,6 @@ users:
   searxng: 977
   searxng_redis: 999
   synapse: 991
-  synapse_postgres: 70
   syncthing: 1001
   syncthing_discosrv: 1002
   syncthing_relaysrv: 1003
@@ -142,7 +141,6 @@ volumes:
   mailserver_tls_certificate_key_file: "/etc/letsencrypt/live/mail.{{ domain }}/privkey.pem"
   postgres_datadir: /mnt/postgresdata
   synapse_datadir: /mnt/synapsedata
-  synapse_postgres_datadir: /mnt/synapsepgdata
   syncthing_datadir: "{{ cifs_mounts['syncthing']['path'] }}"
   uptime_kuma_datadir: /mnt/uptimekumadata
   vaultwarden_datadir: /mnt/vwdata

roles/synapse/tasks/backup.yml

@@ -1,22 +1,15 @@
-- name: Backup PostgreSQL database
-  community.docker.docker_container_exec:
-    container: synapse-postgres
-    docker_host: "{{ docker_host }}"
-    command: |
-      pg_dump -c
-      -d synapse
-      -U synapse
-      -f /var/lib/postgresql/data/synapse-dump.sql
-
-- name: Create borg backup
-  command:
-    cmd: |
-      borg create
-      --compression=lzma
-      "{{ borg_repodir }}::{{ role_name }}-{now:%Y-%m-%d_%H-%M-%S}"
-      {{ volumes['synapse_datadir'] }}/media_store
-      {{ volumes['synapse_postgres_datadir'] }}/synapse-dump.sql
+- name: "Backup PostgreSQL synapse database & {{ volumes['synapse_datadir'] }} directory"
+  shell: >
+    docker exec postgres
+    pg_dump -c {{ role_name }} |
+    borg create
+    --compression lzma
+    "{{ borg_repodir }}::{{ role_name }}-{now:%Y-%m-%d_%H-%M-%S}"
+    "{{ volumes['synapse_datadir'] }}"
+    -
+    --stdin-name dump_{{ role_name }}.sql
   environment:
+    DOCKER_HOST: "{{ docker_host }}"
     BORG_PASSCOMMAND: "cat {{ borg_passphrase_file }}"
   become: true
 

roles/synapse/tasks/update.yml

@@ -36,15 +36,6 @@
     mode: '770'
   become: true
 
-- name: "Create directory {{ volumes['synapse_postgres_datadir'] }} with correct permissions"
-  file:
-    path: "{{ volumes['synapse_postgres_datadir'] }}"
-    state: directory
-    owner: "{{ users['synapse_postgres'] + uid_shift }}"
-    group: "{{ users['synapse_postgres'] + uid_shift }}"
-    mode: '700'
-  become: true
-
 - name: Pull project services
   community.docker.docker_compose:
     project_src: "{{ project_dir }}"

roles/synapse/templates/docker-compose.yaml

@@ -1,17 +1,4 @@
 services:
-  postgres:
-    container_name: synapse-postgres
-    image: docker.io/library/postgres:alpine
-    restart: always
-    user: {{ users['synapse_postgres'] }}:{{ users['synapse_postgres'] }}
-    environment:
-      LANG: C
-      POSTGRES_INITDB_ARGS: "--locale=C --encoding=UTF8"
-      POSTGRES_USER: synapse
-      POSTGRES_PASSWORD: {{ synapse_secrets['postgres_password'] }}
-    volumes:
-      - {{ volumes['synapse_postgres_datadir'] }}:/var/lib/postgresql/data
-
   synapse:
     container_name: synapse
     image: docker.io/matrixdotorg/synapse:latest

roles/synapse/templates/homeserver.yaml

@@ -33,10 +33,10 @@ max_avatar_size: 2M
 database:
   name: psycopg2
   args:
-    user: synapse
-    password: {{ synapse_secrets['postgres_password'] }}
+    user: '{{ synapse_secrets["postgres_user"] }}'
+    password: '{{ synapse_secrets["postgres_password"] }}'
     dbname: synapse
-    host: synapse-postgres
+    host: 'postgres.{{ domain }}'
     cp_min: 5
     cp_max: 10
 

secrets.yml.example

@@ -39,6 +39,7 @@ searxng_secrets:
 synapse_secrets:
   smtp_user:
   smtp_pass:
+  postgres_user:
   postgres_password:
   turn_shared_secret: "{{ coturn_secrets['static_auth_secret'] }}"
   macaroon_secret_key: