Update matrixdotorg/sygnal Docker tag to v0.17.0

2026-07-01 04:19:38 +03:00 · 2026-05-14 18:25:52 +00:00
317 changed files with 5593 additions and 6390 deletions
@@ -25,13 +25,6 @@
 				"https://github.com/devture/com.devture.ansible.role{/,}**",
 				"https://github.com/mother-of-all-self-hosting{/,}**"
 			]
 		},
 		{
 			"description": "mautrix images are dual-tagged (v0.YYMM.PATCH and vYY.MM[.PATCH]). Stick to the v0 scheme: it matches the git tags (needed for self-building) and has a consistent number of components (the calver tags do not, which makes Renovate stop offering updates).",
 			"matchPackageNames": [
 				"dock.mau.dev/mautrix/**"
 			],
 			"allowedVersions": "/^v0\\./"
 		}
 	],
 	"pre-commit": {
@@ -26,10 +26,10 @@ jobs:
        run: pacman -Sy --noconfirm git
      - name: Check out
-        uses: actions/checkout@v7
+        uses: actions/checkout@v6
      - name: Restore prek cache
-        uses: actions/cache@v6
+        uses: actions/cache@v5
        with:
          path: var/prek
          key: arch-prek-v1-${{ hashFiles('.pre-commit-config.yaml') }}
@@ -24,7 +24,7 @@ jobs:
    name: Update translations
    runs-on: ubuntu-latest
    steps:
-      - uses: actions/checkout@v7
+      - uses: actions/checkout@v6
      - uses: actions/setup-python@v6
        with:
@@ -32,7 +32,7 @@ jobs:
      # Setting up recommended prerequisites
      # See: i18n/README.md
-      - uses: astral-sh/setup-uv@v8.2.0
+      - uses: astral-sh/setup-uv@v8.1.0
      - uses: extractions/setup-just@v4
      # TODO: optimize when we start publishing translations and integrate a Weblate instance
@@ -1,95 +1,3 @@
 # 2026-06-29
 ## Support for running on Synology DSM
 Thanks to [cksit](https://github.com/cksit), the playbook can now run on [Synology DSM](https://www.synology.com/dsm) 7 and later.
 Synology hosts are detected automatically (via `/etc/synoinfo.conf`), so other systems are unaffected. On DSM, the playbook uses the platform's native user management (`synouser`/`synogroup`), works around a Docker SDK incompatibility, and installs a small boot-fix service that handles a few DSM-specific boot quirks.
 To get started, see the new [Configuring Synology DSM](./docs/configuring-playbook-synology.md) documentation page.
 ## Mautrix bridges now expose their API (for Mautrix Manager and similar tools)
 The playbook now exposes the HTTP API of each [mautrix](https://github.com/mautrix) bridge, so tools like [Mautrix Manager](https://github.com/mautrix/manager) can help you log into them. This is especially useful for [mautrix-gmessages](./docs/configuring-playbook-bridge-mautrix-gmessages.md): Google has removed its QR-code login, leaving a [manual cookie-extraction flow](https://docs.mau.fi/bridges/go/gmessages/authentication.html) that tools like Mautrix Manager can streamline.
 The API is exposed at `https://matrix.example.com/bridges/SERVICENAME` (for example, `https://matrix.example.com/bridges/gmessages`) and is advertised via a new `/.well-known/matrix/mautrix` file, so compatible tools can discover your bridges automatically. Such tools authenticate with your own Matrix access token, so no bridge secret needs to be shared with them.
 This affects all mautrix bridges based on the new bridge framework (bluesky, gmessages, meta-instagram, meta-messenger, signal, slack, telegram, twitter and whatsapp) and is enabled by default.
 To learn more (including how to turn it off), see the [Expose the bridge's API](./docs/configuring-playbook-bridge-mautrix-bridges.md#expose-the-bridges-api-for-mautrix-manager-and-similar-tools) section on our common mautrix bridges documentation page.
 # 2026-06-28
 ## baibot now supports Venice, our recommended provider
 [baibot](./docs/configuring-playbook-bot-baibot.md) now ships a preset for the [Venice](./docs/configuring-playbook-bot-baibot.md#venice) provider, and it's the one we recommend. It's the most capable provider baibot supports (text generation with vision, file inputs and web search, speech-to-text, text-to-speech, and image generation and editing), and the only one that runs inference with no logging and no training on your data.
 Enabling it takes a preset toggle and an API key:
 ```yaml
 matrix_bot_baibot_config_agents_static_definitions_venice_enabled: true
 matrix_bot_baibot_config_agents_static_definitions_venice_config_api_key: "YOUR_API_KEY_HERE"
 ```
 [OpenAI](https://openai.com/) and baibot's other providers remain fully supported. To get started, see the [Setting up baibot](./docs/configuring-playbook-bot-baibot.md#venice) documentation page.
 # 2026-06-24
 ## Support for bridging to iMessage via RustPush
 Thanks to [jasonlaguidice](https://github.com/jasonlaguidice), the playbook now supports bridging to [iMessage](https://support.apple.com/messages) via a new [RustPush](https://github.com/OpenBubbles/rustpush)-based bridge ([jasonlaguidice/imessage](https://github.com/jasonlaguidice/imessage)).
 Unlike the existing [mautrix-wsproxy](./docs/configuring-playbook-bridge-mautrix-wsproxy.md) iMessage bridge, this one talks directly to Apple's push notification service, so it needs neither a running Mac nor a wsproxy on the homeserver. Each user supplies a hardware key extracted from a Mac through the bridge bot's login flow.
 To learn more, see our [Setting up RustPush (iMessage) bridging](./docs/configuring-playbook-bridge-rustpush.md) documentation page.
 # 2026-05-24
 ## matrix-ldap-registration-proxy has been removed from the playbook
 The [matrix-ldap-registration-proxy](./docs/configuring-playbook-matrix-ldap-registration-proxy.md) service has been removed from the playbook, as the source code and the container image have become unavailable.
 The playbook will let you know if you're using any `matrix_ldap_registration_proxy_*` variables. You'll need to remove them from `vars.yml` and potentially [uninstall the component manually](./docs/configuring-playbook-matrix-ldap-registration-proxy.md#uninstalling-the-component-manually).
 # 2026-05-23
 ## Go-NEB has been removed from the playbook
 [Go-NEB](./docs/configuring-playbook-bot-go-neb.md) has been removed from the playbook, as it has been discontinued since June 2023.
 The playbook will let you know if you're using any `matrix_bot_go_neb_*` variables. You'll need to remove them from `vars.yml` and potentially [uninstall the bot manually](./docs/configuring-playbook-bot-go-neb.md#uninstalling-go-neb-manually).
 # 2026-05-19
 ## matrix-registration has been removed from the playbook
 The [matrix-registration](./docs/configuring-playbook-matrix-registration.md) service has been removed from the playbook, as it has been unmaintained (archived) since November, 2025.
 The playbook will let you know if you're using any `matrix_registration_*` variables. You'll need to remove them from `vars.yml` and potentially [uninstall the component manually](./docs/configuring-playbook-matrix-registration.md#uninstalling-the-component-manually).
 # 2026-05-18
 ## LiveKit Server has been upgraded to v1.12.0
 The playbook now ships [LiveKit Server](./docs/configuring-playbook-livekit-server.md) v1.12.0. See the [upstream release notes](https://github.com/livekit/livekit/releases/tag/v1.12.0) for details.
 This release tightens TURN security:
 - **TURN credentials now carry a TTL** (default: 300 seconds), exposed via `livekit_server_config_turn_ttl_seconds`.
 - **TURN no longer relays traffic to restricted peer CIDRs** (loopback, link-local, multicast, private, unspecified) by default. If your setup legitimately requires it, list the ranges in `livekit_server_config_turn_allow_restricted_peer_cidrs`.
    For example, to allow TURN to reach the common [RFC1918](https://www.rfc-editor.org/rfc/rfc1918) private ranges, add to your `vars.yml`:
    ```yaml
    livekit_server_config_turn_allow_restricted_peer_cidrs:
      - 10.0.0.0/8
      - 172.16.0.0/12
      - 192.168.0.0/16
    ```
    Adjust the ranges to match your network. To deny specific CIDRs (taking precedence over the allow list above), use `livekit_server_config_turn_deny_peer_cidrs` in the same shape.
 # 2026-05-07
 ## Tuwunel support
@@ -65,7 +65,7 @@ Web clients for Matrix that you can host on your own domains.
 | [Element Web](https://github.com/element-hq/element-web) | ✅ | Default Matrix web client, configured to connect to your own Synapse server | [Link](docs/configuring-playbook-client-element-web.md) |
 | [Hydrogen](https://github.com/element-hq/hydrogen-web) | ❌ | Lightweight Matrix client with legacy and mobile browser support | [Link](docs/configuring-playbook-client-hydrogen.md) |
 | [Cinny](https://github.com/ajbura/cinny) |  ❌ | Simple, elegant and secure web client | [Link](docs/configuring-playbook-client-cinny.md) |
-| [Sable](https://github.com/SableClient/Sable) | ❌ | Simple, elegant and secure web client | [Link](docs/configuring-playbook-client-sable.md) |
+| [Sable](https://github.com/7w1/sable) | ❌ | Simple, elegant and secure web client | [Link](docs/configuring-playbook-client-sable.md) |
 | [SchildiChat Web](https://schildi.chat/) | ❌ | Based on Element Web, with a more traditional instant messaging experience | [Link](docs/configuring-playbook-client-schildichat-web.md) |
 | [FluffyChat Web](https://fluffychat.im/) | ❌ | The cutest messenger in Matrix | [Link](docs/configuring-playbook-client-fluffychat-web.md) |
@@ -92,6 +92,8 @@ Extend and modify how users are authenticated on your homeserver.
 | [matrix-synapse-rest-auth](https://github.com/ma1uta/matrix-synapse-rest-password-provider) (advanced) | ❌ | REST authentication password provider module | [Link](docs/configuring-playbook-rest-auth.md) |
 |[matrix-synapse-shared-secret-auth](https://github.com/devture/matrix-synapse-shared-secret-auth) (advanced) | ❌ | Password provider module | [Link](docs/configuring-playbook-shared-secret-auth.md) |
 | [matrix-synapse-ldap3](https://github.com/matrix-org/matrix-synapse-ldap3) (advanced) | ❌ | LDAP Auth password provider module | [Link](docs/configuring-playbook-ldap-auth.md) |
 | [matrix-ldap-registration-proxy](https://gitlab.com/activism.international/matrix_ldap_registration_proxy) (advanced) | ❌ | Proxy that handles Matrix registration requests and forwards them to LDAP | [Link](docs/configuring-playbook-matrix-ldap-registration-proxy.md) |
 | [matrix-registration](https://github.com/ZerataX/matrix-registration) | ❌ | Simple python application to have a token based Matrix registration | [Link](docs/configuring-playbook-matrix-registration.md) |
 | [Matrix User Verification Service](https://github.com/matrix-org/matrix-user-verification-service) | ❌ | Service to verify details of a user based on an Open ID token | [Link](docs/configuring-playbook-user-verification-service.md) |
 | [synapse-simple-antispam](https://github.com/t2bot/synapse-simple-antispam) (advanced) | ❌ | Spam checker module | [Link](docs/configuring-playbook-synapse-simple-antispam.md) |
@@ -117,7 +119,6 @@ Bridges can be used to connect your Matrix installation with third-party communi
 | [mautrix-gmessages](https://github.com/mautrix/gmessages) | ❌ | Bridge to [Google Messages](https://messages.google.com/) | [Link](docs/configuring-playbook-bridge-mautrix-gmessages.md) |
 | [mautrix-whatsapp](https://github.com/mautrix/whatsapp) | ❌ | Bridge to [WhatsApp](https://www.whatsapp.com/) | [Link](docs/configuring-playbook-bridge-mautrix-whatsapp.md) |
 | [mautrix-wsproxy](https://github.com/mautrix/wsproxy) | ❌ | Bridge to Android SMS or Apple iMessage | [Link](docs/configuring-playbook-bridge-mautrix-wsproxy.md) |
 | [matrix-rustpush-bridge](https://github.com/jasonlaguidice/imessage) | ❌ | Bridge to [iMessage](https://support.apple.com/messages) via Apple Push Notification service | [Link](docs/configuring-playbook-bridge-rustpush.md) |
 | [mautrix-bluesky](https://github.com/mautrix/bluesky) | ❌ | Bridge to [Bluesky](https://bsky.social/) | [Link](docs/configuring-playbook-bridge-mautrix-bluesky.md) |
 | [mautrix-twitter](https://github.com/mautrix/twitter) | ❌ | Bridge to [Twitter](https://twitter.com/) | [Link](docs/configuring-playbook-bridge-mautrix-twitter.md) |
 | [mautrix-googlechat](https://github.com/mautrix/googlechat) | ❌ | Bridge to [Google Chat](https://en.wikipedia.org/wiki/Google_Chat) | [Link](docs/configuring-playbook-bridge-mautrix-googlechat.md) |
@@ -76,8 +76,6 @@ If your server and services experience issues, feel free to come to [our support
 - [Alternative architectures](alternative-architectures.md)
 - [Configuring Synology DSM](configuring-playbook-synology.md)
 - [Container images used by the playbook](container-images.md)
 - [Obtaining an Access Token](obtaining-access-tokens.md)
@@ -14,7 +14,7 @@ SPDX-License-Identifier: AGPL-3.0-or-later
 🤖 [baibot](https://github.com/etkecc/baibot) (pronounced bye-bot) is a [Matrix](https://matrix.org/) bot developed by [etke.cc](https://etke.cc/) that exposes the power of [AI](https://en.wikipedia.org/wiki/Artificial_intelligence) / [Large Language Models](https://en.wikipedia.org/wiki/Large_language_model) to you. 🤖
-It supports many [☁️ providers](https://github.com/etkecc/baibot/blob/main/docs/providers.md), including the privacy-first [Venice](#venice) we recommend, [OpenAI](https://openai.com/)'s [ChatGPT](https://openai.com/blog/chatgpt/) models, and more.
+It supports [OpenAI](https://openai.com/)'s [ChatGPT](https://openai.com/blog/chatgpt/) models, as many well as other [☁️ providers](https://github.com/etkecc/baibot/blob/main/docs/providers.md).
 It's designed as a more private and [✨ featureful](https://github.com/etkecc/baibot/?tab=readme-ov-file#-features) alternative to [matrix-chatgpt-bot](./configuring-playbook-bot-chatgpt.md). See the [baibot](https://github.com/etkecc/baibot) project and its documentation for more information.
@@ -159,38 +159,7 @@ Agents defined statically and those created dynamically (via chat) are named dif
 Depending on your propensity for [GitOps](https://en.wikipedia.org/wiki/DevOps#GitOps), you may prefer to define agents statically via Ansible, or you may wish to do it dynamically via chat.
-Before proceeding, we recommend reading the upstream documentation on [How to choose a provider](https://github.com/etkecc/baibot/blob/main/docs/providers.md#how-to-choose-a-provider) for a side-by-side of what each one can do. In short: we recommend [Venice](#venice), the most capable provider baibot supports and the only one that keeps no logs and trains on nothing. If you'd rather start with the most widely-used option, [OpenAI](#openai) is a solid, well-supported choice too.
+Before proceeding, we recommend reading the upstream documentation on [How to choose a provider](https://github.com/etkecc/baibot/blob/main/docs/providers.md#how-to-choose-a-provider). In short, it's probably best to go with [OpenAI](#openai).
 #### Venice
 [Venice](https://venice.ai/chat?ref=kpXDe6) _(ref link with a $10 bonus for you)_ is the provider we recommend. It's the most capable one baibot supports, and the only one that pairs that full feature set with real privacy: inference runs on Venice's own GPUs or on zero-data-retention partner hardware, so your prompts and replies are stored nowhere and never used for training. It serves both frontier proprietary models and the latest open-source ones.
 Venice also leaves the content policy to you instead of imposing its own. Its models answer without the reflexive refusals some hosted services apply, and both text and image generation can handle adult or otherwise sensitive subjects when you need them to. Image generation ships a `safe_mode` that blurs adult content by default; you can turn it off (see the sample config). This pairs naturally with the privacy above: a bot you can speak to candidly, that keeps nothing.
 Unlike the [OpenAI Compatible](#openai-compatible) provider (which can also point at Venice, but drops images and can't reach its audio or native image endpoints), this is a first-class integration that exposes Venice's full parameter set: text-generation with vision, file inputs, prompt caching and native web search, plus speech-to-text, text-to-speech, and image generation and editing.
 You can statically-define a single [🤖 agent](https://github.com/etkecc/baibot/blob/main/docs/agents.md) instance powered by the [Venice provider](https://github.com/etkecc/baibot/blob/main/docs/providers.md#venice) with the help of the playbook's preset variables.
 Here's an example **addition** to your `vars.yml` file:
 ```yaml
 matrix_bot_baibot_config_agents_static_definitions_venice_enabled: true
 matrix_bot_baibot_config_agents_static_definitions_venice_config_api_key: "YOUR_API_KEY_HERE"
 # The preset ships sensible defaults for every purpose, so changing only the API key above is enough
 # to get going. Uncomment and adjust any of these if you'd like to use different models:
 # matrix_bot_baibot_config_agents_static_definitions_venice_config_text_generation_model_id: kimi-k2-5
 # matrix_bot_baibot_config_agents_static_definitions_venice_config_image_generation_model_id: chroma
 ```
 Because this is a [statically](https://github.com/etkecc/baibot/blob/main/docs/configuration/README.md#static-configuration)-defined agent, it will be given a `static/` ID prefix and will be named `static/venice`.
 Every Venice knob (sampling, caching, reasoning, web-search behavior, voice and image controls) has a matching `matrix_bot_baibot_config_agents_static_definitions_venice_config_*` variable. The [fully-commented sample config](https://github.com/etkecc/baibot/blob/main/docs/sample-provider-configs/venice.yml) explains every one of them.
 If you'd like to use more than one model, take a look at the [Configuring additional agents (without a preset)](#configuring-additional-agents-without-a-preset) section below.
 💡 You may also wish to use this new agent for [🤝 Configuring initial default handlers](#-configuring-initial-default-handlers).
 #### Anthropic
@@ -405,7 +374,7 @@ Example **additional** `vars.yml` configuration:
 # As such, changing any of these values subsequently has no effect on the bot's behavior.
 # Once initially configured, the global configuration is managed via bot commands, not via Ansible.
-matrix_bot_baibot_config_initial_global_config_handler_catch_all: static/venice
+matrix_bot_baibot_config_initial_global_config_handler_catch_all: static/openai
 # In this example, there's no need to define any of these below.
 # Configuring the catch-all purpose handler is enough.
@@ -1,26 +1,267 @@
 <!--
-SPDX-FileCopyrightText: 2019-2025 Slavi Pantaleev
+SPDX-FileCopyrightText: 2021 - 2024 Slavi Pantaleev
 SPDX-FileCopyrightText: 2021 Yannick Goossens
 SPDX-FileCopyrightText: 2022 Dennis Ciba
-SPDX-FileCopyrightText: 2022 Nikita Chernyi
+SPDX-FileCopyrightText: 2024 - 2025 Suguru Hirahara
-SPDX-FileCopyrightText: 2023-2025 MDAD project contributors
+SPDX-FileCopyrightText: 2025 MDAD project contributors
 SPDX-FileCopyrightText: 2024-2026 Suguru Hirahara
 SPDX-License-Identifier: AGPL-3.0-or-later
 -->
-# Setting up Go-NEB (optional, removed)
+# Setting up Go-NEB (optional, unmaintained)
-🪦 The playbook used to be able to install and configure [Go-NEB](https://github.com/matrix-org/go-neb), but no longer includes this component as it has been discontinued.
+**Note**: [Go-NEB](https://github.com/matrix-org/go-neb) is now an archived (**unmaintained**) project. We recommend not bothering with installing it. While not a 1:1 replacement, the bridge's author suggests taking a look at [matrix-hookshot](https://github.com/matrix-org/matrix-hookshot) as a replacement, which can also be [installed using this playbook](configuring-playbook-bridge-hookshot.md). Consider using that bot instead of this one.
-While not a 1:1 replacement, the bot's author suggests taking a look at [matrix-hookshot](https://github.com/matrix-org/matrix-hookshot) as a replacement, which can also be [installed using this playbook](configuring-playbook-bridge-hookshot.md).
+The playbook can install and configure [Go-NEB](https://github.com/matrix-org/go-neb) for you.
-## Uninstalling Go-NEB manually
+Go-NEB is a Matrix bot written in Go. It is the successor to Matrix-NEB, the original Matrix bot written in Python.
-If you still have the Go-NEB component installed on your Matrix server, the playbook can no longer help you uninstall it and you will need to do it manually. To uninstall manually, run these commands on the server:
+See the project's [documentation](https://github.com/matrix-org/go-neb/blob/master/README.md) to learn what it does and why it might be useful to you.
 ## Prerequisites
 ### Register the bot account
 The playbook does not automatically create users for you. You **need to register the bot user manually** before setting up the bot.
 Generate a strong password for the bot. You can create one with a command like `pwgen -s 64 1`.
 You can use the playbook to [register a new user](registering-users.md):
 ```sh
-systemctl disable --now matrix-bot-go-neb.service
+ansible-playbook -i inventory/hosts setup.yml --extra-vars='username=bot.go-neb password=PASSWORD_FOR_THE_BOT admin=no' --tags=register-user
 rm -rf /matrix/go-neb
 ```
 ### Obtain an access token
 The bot requires an access token to be able to connect to your homeserver. Refer to the documentation on [how to obtain an access token](obtaining-access-tokens.md).
 > [!WARNING]
 > Access tokens are sensitive information. Do not include them in any bug reports, messages, or logs. Do not share the access token with anyone.
 ## Adjusting DNS records
 By default, this playbook installs Go-NEB on the `goneb.` subdomain (`goneb.example.com`) and requires you to create a CNAME record for `goneb`, which targets `matrix.example.com`.
 When setting, replace `example.com` with your own.
 ## Adjusting the playbook configuration
 To enable the bot, add the following configuration to your `inventory/host_vars/matrix.example.com/vars.yml` file. Make sure to replace `ACCESS_TOKEN_FOR_GONEB_HERE` and `ACCESS_TOKEN_FOR_ANOTHER_GONEB_HERE` with the ones created [above](#obtain-an-access-token).
 ```yaml
 matrix_bot_go_neb_enabled: true
 # You need at least 1 client.
 # Use the access token you obtained in the step above.
 matrix_bot_go_neb_clients:
  - UserID: "@goneb:{{ matrix_domain }}"
    AccessToken: "ACCESS_TOKEN_FOR_GONEB_HERE"
    DeviceID: "DEVICE1"
    HomeserverURL: "{{ matrix_addons_homeserver_client_api_url }}"
    Sync: true
    AutoJoinRooms: true
    DisplayName: "Go-NEB!"
    AcceptVerificationFromUsers: [":{{ matrix_domain }}"]
  - UserID: "@another_goneb:{{ matrix_domain }}"
    AccessToken: "ACCESS_TOKEN_FOR_ANOTHER_GONEB_HERE"
    DeviceID: "DEVICE2"
    HomeserverURL: "{{ matrix_addons_homeserver_client_api_url }}"
    Sync: false
    AutoJoinRooms: false
    DisplayName: "Go-NEB!"
    AcceptVerificationFromUsers: ["^@admin:{{ matrix_domain }}"]
 # Optional, for use with the github_cmd, github_webhooks or jira services
 matrix_bot_go_neb_realms:
  - ID: "github_realm"
    Type: "github"
    Config: {} # No need for client ID or Secret as Go-NEB isn't generating OAuth URLs
 # Optional. The list of *authenticated* sessions which Go-NEB is aware of.
 matrix_bot_go_neb_sessions:
  - SessionID: "your_github_session"
    RealmID: "github_realm"
    UserID: "@alice:{{ matrix_domain }}" # This needs to be the username of the person that's allowed to use the !github commands
    Config:
      # Populate these fields by generating a "Personal Access Token" on github.com
      AccessToken: "YOUR_GITHUB_ACCESS_TOKEN"
      Scopes: "admin:org_hook,admin:repo_hook,repo,user"
 # The list of services which Go-NEB is aware of.
 # Delete or modify this list as appropriate.
 # See the docs for /configureService for the full list of options:
 # https://matrix-org.github.io/go-neb/pkg/github.com/matrix-org/go-neb/api/index.html#ConfigureServiceRequest
 # You need at least 1 service.
 matrix_bot_go_neb_services:
  - ID: "echo_service"
    Type: "echo"
    UserID: "@goneb:{{ matrix_domain }}"
    Config: {}
 # Can be obtained from https://developers.giphy.com/dashboard/
  - ID: "giphy_service"
    Type: "giphy"
    UserID: "@goneb:{{ matrix_domain }}" # requires a Syncing client
    Config:
      api_key: "qwg4672vsuyfsfe"
      use_downsized: false
 # This service has been dead for over a year :/
  - ID: "guggy_service"
    Type: "guggy"
    UserID: "@goneb:{{ matrix_domain }}" # requires a Syncing client
    Config:
      api_key: "2356saaqfhgfe"
 # API Key via https://developers.google.com/custom-search/v1/introduction
 # CX via http://www.google.com/cse/manage/all
 # https://stackoverflow.com/questions/6562125/getting-a-cx-id-for-custom-search-google-api-python
 # 'Search the entire web' and 'Image search' enabled for best results
  - ID: "google_service"
    Type: "google"
    UserID: "@goneb:{{ matrix_domain }}" # requires a Syncing client
    Config:
      api_key: "AIzaSyA4FD39m9"
      cx: "AIASDFWSRRtrtr"
 # Obtain a key via https://api.imgur.com/oauth2/addclient
 # Select "oauth2 without callback url"
  - ID: "imgur_service"
    Type: "imgur"
    UserID: "@imgur:{{ matrix_domain }}" # requires a Syncing client
    Config:
      client_id: "AIzaSyA4FD39m9"
      client_secret: "somesecret"
  - ID: "wikipedia_service"
    Type: "wikipedia"
    UserID: "@goneb:{{ matrix_domain }}" # requires a Syncing client
    Config:
  - ID: "rss_service"
    Type: "rssbot"
    UserID: "@another_goneb:{{ matrix_domain }}"
    Config:
      feeds:
        "http://lorem-rss.herokuapp.com/feed?unit=second&interval=60":
          rooms: ["!qporfwt:{{ matrix_domain }}"]
          must_include:
            author:
              - author1
            description:
              - lorem
              - ipsum
          must_not_include:
            title:
              - Lorem
              - Ipsum
  - ID: "github_cmd_service"
    Type: "github"
    UserID: "@goneb:{{ matrix_domain }}" # requires a Syncing client
    Config:
      RealmID: "github_realm"
    # Make sure your BASE_URL can be accessed by Github!
  - ID: "github_webhook_service"
    Type: "github-webhook"
    UserID: "@another_goneb:{{ matrix_domain }}"
    Config:
      RealmID: "github_realm"
      ClientUserID: "@alice:{{ matrix_domain }}" # needs to be an authenticated user so Go-NEB can create webhooks. Check the UserID field in the github_realm in matrix_bot_go_neb_sessions.
      Rooms:
        "!qporfwt:example.com":
          Repos:
            "element-hq/synapse":
              Events: ["push", "issues"]
            "matrix-org/dendron":
              Events: ["pull_request"]
        "!aaabaa:example.com":
          Repos:
            "element-hq/synapse":
              Events: ["push", "issues"]
            "matrix-org/dendron":
              Events: ["pull_request"]
  - ID: "slackapi_service"
    Type: "slackapi"
    UserID: "@slackapi:{{ matrix_domain }}"
    Config:
      Hooks:
        "hook1":
          RoomID: "!qporfwt:example.com"
          MessageType: "m.text" # default is m.text
  - ID: "alertmanager_service"
    Type: "alertmanager"
    UserID: "@alertmanager:{{ matrix_domain }}"
    Config:
      # This is for information purposes only. It should point to Go-NEB path as follows:
      # `/services/hooks/<base64 encoded service ID>`
      # Where in this case "service ID" is "alertmanager_service"
      # Make sure your BASE_URL can be accessed by the Alertmanager instance!
      webhook_url: "http://localhost/services/hooks/YWxlcnRtYW5hZ2VyX3NlcnZpY2U"
      # Each room will get the notification with the alert rendered with the given template
      rooms:
        "!qporfwt:example.com":
          text_template: "{% raw %}{{range .Alerts -}} [{{ .Status }}] {{index .Labels \"alertname\" }}: {{index .Annotations \"description\"}} {{ end -}}{% endraw %}"
          html_template: "{% raw %}{{range .Alerts -}}  {{ $severity := index .Labels \"severity\" }}    {{ if eq .Status \"firing\" }}      {{ if eq $severity \"critical\"}}        <font color='red'><b>[FIRING - CRITICAL]</b></font>      {{ else if eq $severity \"warning\"}}        <font color='orange'><b>[FIRING - WARNING]</b></font>      {{ else }}        <b>[FIRING - {{ $severity }}]</b>      {{ end }}    {{ else }}      <font color='green'><b>[RESOLVED]</b></font>    {{ end }}  {{ index .Labels \"alertname\"}} : {{ index .Annotations \"description\"}}   <a href=\"{{ .GeneratorURL }}\">source</a><br/>{{end -}}{% endraw %}"
          msg_type: "m.text"  # Must be either `m.text` or `m.notice`
 ```
 ### Adjusting the Go-NEB URL (optional)
 By tweaking the `matrix_bot_go_neb_hostname` and `matrix_bot_go_neb_path_prefix` variables, you can easily make the service available at a **different hostname and/or path** than the default one.
 Example additional configuration for your `vars.yml` file:
 ```yaml
 # Switch to the domain used for Matrix services (`matrix.example.com`),
 # so we won't need to add additional DNS records for Go-NEB.
 matrix_bot_go_neb_hostname: "{{ matrix_server_fqn_matrix }}"
 # Expose under the /go-neb subpath
 matrix_bot_go_neb_path_prefix: /go-neb
 ```
 After changing the domain, **you may need to adjust your DNS** records to point the Go-NEB domain to the Matrix server.
 If you've decided to reuse the `matrix.` domain, you won't need to do any extra DNS configuration.
 ### Extending the configuration
 There are some additional things you may wish to configure about the bot.
 Take a look at:
 - `roles/custom/matrix-bot-go-neb/defaults/main.yml` for some variables that you can customize via your `vars.yml` file
 - `roles/custom/matrix-bot-go-neb/templates/config.yaml.j2` for the bot's default configuration. You can override settings (even those that don't have dedicated playbook variables) using the `matrix_bot_go_neb_configuration_extension_yaml` variable
 ## Installing
 After configuring the playbook and potentially [adjusting your DNS records](#adjusting-dns-records), run the playbook with [playbook tags](playbook-tags.md) as below:
 <!-- NOTE: let this conservative command run (instead of install-all) to make it clear that failure of the command means something is clearly broken. -->
 ```sh
 ansible-playbook -i inventory/hosts setup.yml --tags=setup-all,start
 ```
 The shortcut commands with the [`just` program](just.md) are also available: `just install-all` or `just setup-all`
 `just install-all` is useful for maintaining your setup quickly ([2x-5x faster](../CHANGELOG.md#2x-5x-performance-improvements-in-playbook-runtime) than `just setup-all`) when its components remain unchanged. If you adjust your `vars.yml` to remove other components, you'd need to run `just setup-all`, or these components will still remain installed. Note these shortcuts run the `ensure-matrix-users-created` tag too.
 ## Usage
 To use the bot, invite it to any existing Matrix room (`/invite @bot.go-neb:example.com` where `example.com` is your base domain, not the `matrix.` domain). Make sure you are granted with the sufficient permission if you are not the room owner.
 Basic usage is like this: `!echo hi` or `!imgur puppies` or `!giphy matrix`
 If you enabled the github_cmd service, send `!github help` to the bot in the room to see the available commands.
 You can also refer to the upstream [Documentation](https://github.com/matrix-org/go-neb).
 ## Troubleshooting
 As with all other services, you can find the logs in [systemd-journald](https://www.freedesktop.org/software/systemd/man/systemd-journald.service.html) by logging in to the server with SSH and running `journalctl -fu matrix-bot-go-neb`.
@@ -138,35 +138,6 @@ Replace `warn` with one of the following to control the verbosity of the logs ge
 If you have issues with a service, and are requesting support, the higher levels of logging (those that appear earlier in the list, like `trace`) will generally be more helpful.
 ### Expose the bridge's API (for Mautrix Manager and similar tools)
 Each mautrix bridge runs an HTTP API which tools like [Mautrix Manager](https://github.com/mautrix/manager) can use to help you log into the bridge. This is especially handy for bridges where logging in manually is cumbersome (like [mautrix-gmessages](configuring-playbook-bridge-mautrix-gmessages.md)).
 By default, the playbook exposes this API publicly at `https://matrix.example.com/bridges/SERVICENAME` (for example, `https://matrix.example.com/bridges/gmessages`). Such tools authenticate to the bridge with your own Matrix access token, so you never need to share any bridge secret with them.
 To make discovery easier, the playbook also serves a `/.well-known/matrix/mautrix` file which advertises all your exposed bridges. Mautrix Manager reads this file and offers your bridges automatically, so you don't need to enter their URLs by hand.
 This is all enabled by default. To **disable exposing the API for all bridges**, add the following configuration to your `vars.yml` file:
 ```yaml
 matrix_bridges_exposure_enabled: false
 ```
 **Alternatively**, to disable it for a specific bridge:
 ```yaml
 matrix_mautrix_SERVICENAME_exposure_enabled: false
 ```
 If you run additional bridges on the same server which are not managed by this playbook and would like compatible tools to discover them as well, you can advertise their base URLs in the `/.well-known/matrix/mautrix` file:
 ```yaml
 matrix_static_files_file_matrix_mautrix_property_fi_mau_bridges_custom:
  - https://matrix.example.com/bridges/SOME_OTHER_BRIDGE
 ```
 Only list bridges hosted on (and connected to) this server here, as compatible tools will send your Matrix access token to them. For bridges on other servers, take a look at the `fi.mau.external_bridge_servers` property described in the [Mautrix Manager](https://github.com/mautrix/manager) documentation, which you can add via `matrix_static_files_file_matrix_mautrix_configuration_extension_json`.
 ### Extending the configuration
 There are some additional things you may wish to configure about the bridge.
@@ -1,95 +0,0 @@
 <!--
 SPDX-FileCopyrightText: 2026 MDAD project contributors
 SPDX-FileCopyrightText: 2026 Jason LaGuidice
 SPDX-License-Identifier: AGPL-3.0-or-later
 -->
 # Setting up RustPush (iMessage) bridging (optional)
 > **Note:** This bridge is in early development and may have stability issues. It may not be desirable to deploy this to a large number of users. Your testing and feedback is appreciated.
 <sup>Refer the common guide for configuring mautrix bridges: [Setting up a Generic Mautrix Bridge](configuring-playbook-bridge-mautrix-bridges.md)</sup>
 The playbook can install and configure [RustPush bridge to iMessage](https://github.com/jasonlaguidice/imessage) for you using Apple's push notification service.
 See the project's [documentation](https://github.com/jasonlaguidice/imessage/blob/main/README.md) to learn what it does and why it might be useful to you.
 ## Prerequisites
 ### Hardware Key Extraction
 To use this bridge on Linux (Docker), each user needs a **hardware key** extracted from a real Mac. This key contains hardware identifiers needed for iMessage registration. Hardware keys can be shared by a number of users (approximately 20) before causing issues with Apple.
 The key is entered interactively through the bridge bot's login flow (not configured via Ansible variables). See the upstream [README](https://github.com/jasonlaguidice/imessage/blob/main/README.md) for instructions on extracting the key.
 If extracted from an Intel Mac, the Mac does not need to remain running after the key is extracted for this bridge to work. Apple Silicon Macs must run a NAC relay and thus must remain running.
 ### Phone Number Registration (optional)
 This bridge can **not** do phone number registration (PNR). The only way to have your phone number registered and used (instead of an Apple ID e-mail address) is to have an iPhone connected to your Apple account. Reference the [BlueBubbles Phone Number Registration Guide](https://docs.bluebubbles.app/server/advanced/registering-a-phone-number-with-your-imessage-account) for information on how to set this up.
 ### Enable Appservice Double Puppet (optional)
 If you want to set up [Double Puppeting](https://docs.mau.fi/bridges/general/double-puppeting.html) (hint: you most likely do) for this bridge automatically, you need to have enabled [Appservice Double Puppet](configuring-playbook-appservice-double-puppet.md) service for this playbook.
 See [this section](configuring-playbook-bridge-mautrix-bridges.md#set-up-double-puppeting-optional) on the [common guide for configuring mautrix bridges](configuring-playbook-bridge-mautrix-bridges.md) for details about setting up Double Puppeting.
 ## Adjusting the playbook configuration
 To enable the bridge, add the following configuration to your `inventory/host_vars/matrix.example.com/vars.yml` file:
 ```yaml
 matrix_rustpush_bridge_enabled: true
 ```
 ### Disable Backfill (optional)
 Backfill can be disabled globally if desired via config. By default, the bridge will backfill from iCloud (CloudKit) and APNS if available. Backfill from `chat.db` is only possible when the bridge is running on MacOS.
 ```yaml
 matrix_rustpush_bridge_backfill_enabled: false
 ```
 ### Extending the Configuration
 There are some additional things you may wish to configure about the bridge.
 See [this section](configuring-playbook-bridge-mautrix-bridges.md#extending-the-configuration) on the [common guide for configuring mautrix bridges](configuring-playbook-bridge-mautrix-bridges.md) for details about variables that you can customize and the bridge's default configuration, including [bridge permissions](configuring-playbook-bridge-mautrix-bridges.md#configure-bridge-permissions-optional), [encryption support](configuring-playbook-bridge-mautrix-bridges.md#enable-encryption-optional), [bot's username](configuring-playbook-bridge-mautrix-bridges.md#set-the-bots-username-optional), etc.
 ## Installing
 After configuring the playbook, run it with [playbook tags](playbook-tags.md) as below:
 <!-- NOTE: let this conservative command run (instead of install-all) to make it clear that failure of the command means something is clearly broken. -->
 ```sh
 ansible-playbook -i inventory/hosts setup.yml --tags=setup-all,start
 ```
 **Notes**:
 - The shortcut commands with the [`just` program](just.md) are also available: `just install-all` or `just setup-all`
  `just install-all` is useful for maintaining your setup quickly ([2x-5x faster](../CHANGELOG.md#2x-5x-performance-improvements-in-playbook-runtime) than `just setup-all`) when its components remain unchanged. If you adjust your `vars.yml` to remove other components, you'd need to run `just setup-all`, or these components will still remain installed.
 ## Usage
 To use the bridge, you need to start a chat with `@rustpushbot:example.com` (where `example.com` is your base domain, not the `matrix.` domain).
 After logging in, the bridge will start receiving iMessages and creating portal rooms.
 ## Troubleshooting
 As with all other services, you can find the logs in [systemd-journald](https://www.freedesktop.org/software/systemd/man/systemd-journald.service.html) by logging in to the server with SSH and running `journalctl -fu matrix-rustpush-bridge`.
 ### Increase logging verbosity
 The default logging level for this component is `warn`. If you want to increase the verbosity, add the following configuration to your `vars.yml` file and re-run the playbook:
 ```yaml
 # Valid values: fatal, error, warn, info, debug, trace
 matrix_rustpush_bridge_logging_level: 'debug'
 # Enable debug logging for RustPush
 matrix_rustpush_bridge_rust_log: "warn,rustpushgo=info,openabsinthe=debug"
 ```
@@ -8,7 +8,7 @@ SPDX-License-Identifier: AGPL-3.0-or-later
 # Setting up Sable (optional)
-The playbook can install and configure the [Sable](https://github.com/SableClient/Sable) Matrix web client for you.
+The playbook can install and configure the [Sable](https://github.com/7w1/sable) Matrix web client for you.
 Sable is a web client focusing primarily on simple, elegant and secure interface. It can be installed alongside or instead of [Element Web](./configuring-playbook-client-element-web.md), [Cinny](./configuring-playbook-client-cinny.md) and others.
@@ -13,14 +13,14 @@ SPDX-License-Identifier: AGPL-3.0-or-later
 # Setting up Ketesa (optional)
-The playbook can install and configure [Ketesa](https://ketesa.app) ([source code](https://github.com/etkecc/ketesa)) for you.
+The playbook can install and configure [Ketesa](https://github.com/etkecc/ketesa) for you.
 Ketesa is a fully-featured admin interface for Matrix homeservers — manage users, rooms, media, sessions, and more from one clean, responsive web UI. It is the evolution of [Awesome-Technologies/synapse-admin](https://github.com/Awesome-Technologies/synapse-admin): what began as a fork has grown into its own independent project with a redesigned interface, comprehensive Synapse and MAS API coverage, and multi-language support. See the [Ketesa v1.0.0 announcement](https://etke.cc/blog/introducing-ketesa/) for a full overview of what's new.
 >[!NOTE]
 >
 > - Ketesa does not work with other homeserver implementations than Synapse due to API's incompatibility.
-> - The latest version of Ketesa is hosted by [etke.cc](https://etke.cc/) at [cloud.ketesa.app](https://cloud.ketesa.app/). If you only need this service occasionally and trust giving your admin credentials to a 3rd party Single Page Application, you can consider using it from there and avoiding the (small) overhead of self-hosting.
+> - The latest version of Ketesa is hosted by [etke.cc](https://etke.cc/) at [admin.etke.cc](https://admin.etke.cc/). If you only need this service occasionally and trust giving your admin credentials to a 3rd party Single Page Application, you can consider using it from there and avoiding the (small) overhead of self-hosting.
 > - This playbook also supports an alternative management UI in the shape of [Element Admin](./configuring-playbook-element-admin.md). Please note that it's currently less feature-rich than Ketesa and requires [Matrix Authentication Service](./configuring-playbook-matrix-authentication-service.md).
 ## Adjusting DNS records (optional)
@@ -11,7 +11,7 @@ SPDX-License-Identifier: AGPL-3.0-or-later
 The playbook can install and configure the [matrix-synapse-ldap3](https://github.com/matrix-org/matrix-synapse-ldap3) LDAP Auth password provider for you.
-See the project's [documentation](https://github.com/matrix-org/matrix-synapse-ldap3/blob/main/README.md) to learn what it does and why it might be useful to you.
+See the project's [documentation](https://github.com/matrix-org/matrix-synapse-ldap3/blob/main/README.rst) to learn what it does and why it might be useful to you.
 ## Adjusting the playbook configuration
@@ -52,3 +52,9 @@ ansible-playbook -i inventory/hosts setup.yml --tags=setup-all,start
 The shortcut commands with the [`just` program](just.md) are also available: `just install-all` or `just setup-all`
 `just install-all` is useful for maintaining your setup quickly ([2x-5x faster](../CHANGELOG.md#2x-5x-performance-improvements-in-playbook-runtime) than `just setup-all`) when its components remain unchanged. If you adjust your `vars.yml` to remove other components, you'd need to run `just setup-all`, or these components will still remain installed. Note these shortcuts run the `ensure-matrix-users-created` tag too.
 ## Usage
 ### Handling user registration
 If you wish for users to also be able to make new registrations against LDAP, you may **also** wish to [set up the ldap-registration-proxy](configuring-playbook-matrix-ldap-registration-proxy.md).
@@ -61,12 +61,6 @@ livekit_server_container_labels_turn_traefik_entrypoints: "<your-livekit-turn-tr
 and configuring their own Traefik TCP entrypoint dedicated to LiveKit TURN traffic.
 ## TURN access controls
 LiveKit's embedded TURN server enforces a credential TTL and restricts which peer CIDRs it will relay to. The playbook leaves these at the role's secure defaults, which are appropriate for typical deployments where TURN peers live on the public Internet.
 If your setup needs TURN to relay to private/restricted ranges, or you want to override the credential TTL, see the [TURN access controls and credential TTL](https://github.com/mother-of-all-self-hosting/ansible-role-livekit-server/blob/main/docs/configuring-livekit-server.md#turn-access-controls-and-credential-ttl) section of the role's documentation.
 ## Limitations
 LiveKit Server's TURN listener behavior depends on where TLS is terminated:
@@ -1,32 +1,69 @@
 <!--
-SPDX-FileCopyrightText: 2019 Edgars Voroboks
+SPDX-FileCopyrightText: 2022 - 2024 Slavi Pantaleev
 SPDX-FileCopyrightText: 2019 Eduardo Beltrame
 SPDX-FileCopyrightText: 2019-2025 MDAD project contributors
 SPDX-FileCopyrightText: 2019-2025 Slavi Pantaleev
 SPDX-FileCopyrightText: 2020 Chris van Dijk
 SPDX-FileCopyrightText: 2020 Tulir Asokan
 SPDX-FileCopyrightText: 2020 jens quade
 SPDX-FileCopyrightText: 2022 Dennis Ciba
 SPDX-FileCopyrightText: 2022 Julian-Samuel Gebühr
-SPDX-FileCopyrightText: 2022 Kim Brose
+SPDX-FileCopyrightText: 2024 - 2025 Suguru Hirahara
 SPDX-FileCopyrightText: 2022 Travis Ralston
 SPDX-FileCopyrightText: 2022 Vladimir Panteleev
 SPDX-FileCopyrightText: 2022 Yan Minagawa
 SPDX-FileCopyrightText: 2024-2026 Suguru Hirahara
 SPDX-License-Identifier: AGPL-3.0-or-later
 -->
-# Setting up matrix-ldap-registration-proxy (optional, removed)
+# Setting up matrix-ldap-registration-proxy (optional)
-🪦 The playbook used to be able to install and configure [matrix-ldap-registration-proxy](https://gitlab.com/activism.international/matrix_ldap_registration_proxy), but no longer includes this component, as it has become unavailable.
+The playbook can install and configure [matrix-ldap-registration-proxy](https://gitlab.com/activism.international/matrix_ldap_registration_proxy) for you.
-## Uninstalling the component manually
+This proxy handles Matrix registration requests and forwards them to LDAP.
-If you still have matrix-ldap-registration-proxy installed on your Matrix server, the playbook can no longer help you uninstall it and you will need to do it manually. To uninstall manually, run these commands on the server:
+See the project's [documentation](https://gitlab.com/activism.international/matrix_ldap_registration_proxy/-/blob/main/README.md) to learn what it does and why it might be useful to you.
-```sh
+**Note**: This does support the full Matrix specification for registrations. It only provide a very coarse implementation of a basic password registration.
 systemctl disable --now matrix-ldap-registration-proxy.service
-rm -rf /matrix/matrix_ldap_registration_proxy
+## Adjusting the playbook configuration
 To enable the component, add the following configuration to your `inventory/host_vars/matrix.example.com/vars.yml` file (adapt to your needs):
 ```yaml
 matrix_ldap_registration_proxy_enabled: true
 # LDAP credentials
 matrix_ldap_registration_proxy_ldap_uri: YOUR_URI_HERE
 matrix_ldap_registration_proxy_ldap_base_dn: YOUR_DN_HERE
 matrix_ldap_registration_proxy_ldap_user: YOUR_USER_HERE
 matrix_ldap_registration_proxy_ldap_password: YOUR_PASSWORD_HERE
 ```
 If you already use the [synapse external password provider via LDAP](configuring-playbook-ldap-auth.md) (that is, you have `matrix_synapse_ext_password_provider_ldap_enabled: true` and other options in your configuration) you can use the following values as configuration:
 ```yaml
 # Use the LDAP values specified for the synapse role to setup LDAP proxy
 matrix_ldap_registration_proxy_ldap_uri: "{{ matrix_synapse_ext_password_provider_ldap_uri }}"
 matrix_ldap_registration_proxy_ldap_base_dn: "{{ matrix_synapse_ext_password_provider_ldap_base }}"
 matrix_ldap_registration_proxy_ldap_user: "{{ matrix_synapse_ext_password_provider_ldap_bind_dn }}"
 matrix_ldap_registration_proxy_ldap_password: "{{ matrix_synapse_ext_password_provider_ldap_bind_password }}"
 matrix_ldap_registration_proxy_systemd_wanted_services_list_custom:
  - matrix-synapse.service
 ```
 ### Extending the configuration
 There are some additional things you may wish to configure about the component.
 Take a look at:
 - `roles/custom/matrix-ldap-registration-proxy/defaults/main.yml` for some variables that you can customize via your `vars.yml` file
 ## Installing
 After configuring the playbook, run it with [playbook tags](playbook-tags.md) as below:
 <!-- NOTE: let this conservative command run (instead of install-all) to make it clear that failure of the command means something is clearly broken. -->
 ```sh
 ansible-playbook -i inventory/hosts setup.yml --tags=setup-all,start
 ```
 The shortcut commands with the [`just` program](just.md) are also available: `just install-all` or `just setup-all`
 `just install-all` is useful for maintaining your setup quickly ([2x-5x faster](../CHANGELOG.md#2x-5x-performance-improvements-in-playbook-runtime) than `just setup-all`) when its components remain unchanged. If you adjust your `vars.yml` to remove other components, you'd need to run `just setup-all`, or these components will still remain installed. Note these shortcuts run the `ensure-matrix-users-created` tag too.
 ## Troubleshooting
 As with all other services, you can find the logs in [systemd-journald](https://www.freedesktop.org/software/systemd/man/systemd-journald.service.html) by logging in to the server with SSH and running `journalctl -fu matrix-ldap-registration-proxy`.
@@ -1,36 +1,115 @@
 <!--
-SPDX-FileCopyrightText: 2019 Edgars Voroboks
+SPDX-FileCopyrightText: 2020 - 2022 Slavi Pantaleev
-SPDX-FileCopyrightText: 2019 Eduardo Beltrame
+SPDX-FileCopyrightText: 2022 MDAD project contributors
-SPDX-FileCopyrightText: 2019-2025 MDAD project contributors
+SPDX-FileCopyrightText: 2024 - 2025 Suguru Hirahara
 SPDX-FileCopyrightText: 2019-2025 Slavi Pantaleev
 SPDX-FileCopyrightText: 2020 Chris van Dijk
 SPDX-FileCopyrightText: 2020 Tulir Asokan
 SPDX-FileCopyrightText: 2020 jens quade
 SPDX-FileCopyrightText: 2022 Dennis Ciba
 SPDX-FileCopyrightText: 2022 Kim Brose
 SPDX-FileCopyrightText: 2022 Travis Ralston
 SPDX-FileCopyrightText: 2022 Vladimir Panteleev
 SPDX-FileCopyrightText: 2022 Yan Minagawa
 SPDX-FileCopyrightText: 2024-2026 Suguru Hirahara
 SPDX-License-Identifier: AGPL-3.0-or-later
 -->
-# Setting up matrix-registration (optional, removed)
+# Setting up matrix-registration (optional)
-> [!NOTE]
+> [!WARNING]
-> This is not related to [matrix-registration-bot](configuring-playbook-bot-matrix-registration-bot.md).
+> - This is a poorly maintained and buggy project. It's better to avoid using it.
 > - This is not related to [matrix-registration-bot](configuring-playbook-bot-matrix-registration-bot.md)
-🪦 The playbook used to be able to install and configure [matrix-registration](https://github.com/ZerataX/matrix-registration), but no longer includes this component, as it has been unmaintained since November, 2025.
+The playbook can install and configure [matrix-registration](https://github.com/ZerataX/matrix-registration) for you. It is a simple python application to have a token based Matrix registration.
-## Uninstalling the component manually
+Use matrix-registration to **create unique registration links**, which people can use to register on your Matrix server. It allows certain people (these having a special link) to register a user account, **keeping your server's registration closed (private)**.
-If you still have matrix-registration installed on your Matrix server, the playbook can no longer help you uninstall it and you will need to do it manually. To uninstall manually, run these commands on the server:
+**matrix-registration** provides 2 things:
 - **an API for creating registration tokens** (unique registration links). This API can be used via `curl` or via the playbook (see [Usage](#usage) below)
 - **a user registration page**, where people can use these registration tokens. By default, exposed at `https://matrix.example.com/matrix-registration`
 ## Adjusting DNS records (optional)
 By default, this playbook installs the matrix-registration on the `matrix.` subdomain, at the `/matrix-registration` path (https://matrix.example.com/matrix-registration). This makes it easy to install it, because it **doesn't require additional DNS records to be set up**. If that's okay, you can skip this section.
 If you wish to adjust it, see the section [below](#adjusting-the-matrix-registration-url-optional) for details about DNS configuration.
 ## Adjusting the playbook configuration
 To enable matrix-registration, add the following configuration to your `inventory/host_vars/matrix.example.com/vars.yml` file:
 ```yaml
 matrix_registration_enabled: true
 # Generate a strong secret here. You can create one with a command like `pwgen -s 64 1`.
 matrix_registration_admin_secret: "ENTER_SOME_SECRET_HERE"
 ```
 ### Adjusting the matrix-registration URL (optional)
 By tweaking the `matrix_registration_hostname` and `matrix_registration_path_prefix` variables, you can easily make the service available at a **different hostname and/or path** than the default one.
 Example additional configuration for your `vars.yml` file:
 ```yaml
 # Change the default hostname and path prefix
 matrix_registration_hostname: registration.example.com
 matrix_registration_path_prefix: /
 ```
 If you've changed the default hostname, you may need to create a CNAME record for the matrix-registration domain (`registration.example.com`), which targets `matrix.example.com`.
 When setting, replace `example.com` with your own.
 ### Extending the configuration
 There are some additional things you may wish to configure about the component.
 Take a look at:
 - `roles/custom/matrix-registration/defaults/main.yml` for some variables that you can customize via your `vars.yml` file
 - `roles/custom/matrix-registration/templates/config.yaml.j2` for the component's default configuration. You can override settings (even those that don't have dedicated playbook variables) using the `matrix_registration_configuration_extension_yaml` variable
 ## Installing
 After configuring the playbook and potentially [adjusting your DNS records](#adjusting-dns-records), run the playbook with [playbook tags](playbook-tags.md) as below:
 <!-- NOTE: let this conservative command run (instead of install-all) to make it clear that failure of the command means something is clearly broken. -->
 ```sh
 ansible-playbook -i inventory/hosts setup.yml --tags=setup-all,start
 ```
 The shortcut commands with the [`just` program](just.md) are also available: `just install-all` or `just setup-all`
 `just install-all` is useful for maintaining your setup quickly ([2x-5x faster](../CHANGELOG.md#2x-5x-performance-improvements-in-playbook-runtime) than `just setup-all`) when its components remain unchanged. If you adjust your `vars.yml` to remove other components, you'd need to run `just setup-all`, or these components will still remain installed. Note these shortcuts run the `ensure-matrix-users-created` tag too.
 ## Usage
 **matrix-registration** gets exposed at `https://matrix.example.com/matrix-registration`
 It provides various [APIs](https://github.com/ZerataX/matrix-registration/wiki/api) — for creating registration tokens, listing tokens, disabling tokens, etc. To make use of all of its capabilities, consider using `curl`.
 We make the most common APIs easy to use via the playbook (see below).
 ### Creating registration tokens
 To **create a new user registration token (link)**, use this command:
 ```sh
-systemctl disable --now matrix-registration.service
+ansible-playbook -i inventory/hosts setup.yml \
-
+--tags=generate-matrix-registration-token \
-rm -rf /matrix/matrix-registration
+--extra-vars="one_time=yes ex_date=2021-12-31"
 /matrix/postgres/bin/cli-non-interactive -c 'DROP DATABASE matrix_registration;'
 ```
 The above command creates and returns a **one-time use** token, which **expires** on the 31st of December 2021. Adjust the `one_time` and `ex_date` variables as you see fit.
 Share the unique registration link (generated by the command above) with users to let them register on your Matrix server.
 ### Listing registration tokens
 To **list the existing user registration tokens**, use this command:
 ```sh
 ansible-playbook -i inventory/hosts setup.yml \
 --tags=list-matrix-registration-tokens
 ```
 The shortcut command with `just` program is also available: `just run-tags list-matrix-registration-tokens`
 ## Troubleshooting
 As with all other services, you can find the logs in [systemd-journald](https://www.freedesktop.org/software/systemd/man/systemd-journald.service.html) by logging in to the server with SSH and running `journalctl -fu matrix-registration`.
@@ -1,179 +0,0 @@
 <!--
 SPDX-FileCopyrightText: 2026 Chiu Ki Sit
 SPDX-License-Identifier: AGPL-3.0-or-later
 -->
 # Configuring Synology DSM
 This document is a guide for preparing Synology DSM for the installation of the [Matrix Docker Ansible Deploy](https://github.com/spantaleev/matrix-docker-ansible-deploy) project.
 > **Note:** Synology DSM is a community-supported platform. It is not officially tested or maintained by the project maintainers. Use at your own discretion.
 **Intended audience:** Users already familiar with DSM, SSH, and this Ansible project.
 ## Assumptions
 - DSM version 7 or higher
 - `Volume1` is used as the default Docker storage location
 - You are using DSM's built-in reverse proxy for handling HTTPS
 ## How Synology Support Works
 The playbook automatically detects Synology DSM by checking for `/etc/synoinfo.conf`. When detected, it:
 - Uses `synouser` and `synogroup` (DSM-native tools) instead of standard Linux user management
 - Constrains the Python `requests` package to a version compatible with the Docker SDK
 - Ensures `/volume1` has shared mount propagation so container bind mounts work correctly
 - Deploys a `matrix-synology-boot-fix` service that runs on every boot after Docker is ready
 You can override auto-detection by setting `matrix_base_host_is_synology: true` or `false` in your `vars.yml`.
 ### Matrix Service Account
 The playbook creates a `matrix` system account using Synology's `synouser` tool. The account is secured as follows:
 - **Expired** (`expired=1`) — the account cannot be used to log in to DSM or any application
 You must set a password for this account via `matrix_synology_user_password` in your `vars.yml` (see [vars.yml Configuration](#varsyml-configuration)). The password cannot be used to log in because the account is expired, but a non-empty password is required as an additional security layer.
 > If you pre-create the `matrix` user manually before running the playbook, the playbook will not modify the existing account's settings — you are responsible for securing it.
 ### Boot-fix Service
 Synology DSM has two boot-time quirks that the boot-fix service addresses automatically:
 1. **`/volume1` shared mount propagation**
    Docker requires `/volume1` to be mounted as shared (`mount --make-shared /volume1`) for container bind mounts with `bind-propagation=slave` to work correctly (used by matrix-synapse for its media store). On Synology, this cannot be inserted into the systemd chain before Container Manager starts — doing so causes Container Manager to detect a broken dependency and prompt for repair on every boot. The playbook applies this during setup, and the boot-fix service re-applies it on every subsequent reboot, safely outside Container Manager's dependency chain.
 2. **Skipped services at boot**
    Synology's systemd drops services with multi-level dependency chains from the boot activation queue (e.g. `matrix-traefik → matrix-container-socket-proxy → docker`). These services show as `inactive` or `failed` after reboot even though they are enabled. The boot-fix service scans for any enabled `matrix-*.service` in either state and starts them automatically.
    > **If you previously configured a Task Scheduler entry** (`Control Panel > Task Scheduler`) to run `mount --make-shared /volume1` at boot-up, you can remove it — the boot-fix service now handles this.
 ## Synology GUI Preparation
 1. **Enable SSH**
   - `Control Panel` > `Terminal & SNMP` > `Enable SSH service`
 2. **Enable SFTP**
   - `Control Panel` > `File Service` > `FTP` > `Enable SFTP service` with default port
 3. **Enable User Home Directory**
   - `Control Panel` > `User & Group` > `Advanced` > `Enable user home service`
 4. **Install Container Manager**
   - Install from `Package Center`
 5. **Configure Reverse Proxy**
   - `Control Panel` > `Login Portal` > `Advanced` > `Reverse Proxy`
   - Create entries for each service you enable (e.g. Matrix, Element, admin page)
   - Example entry:
     - Source: `HTTPS` / `matrix.example.com` / port `443`
     - Destination: `HTTP` / `localhost` / port `81`
 ## SSH Preparation
 ### (Optional but Recommended) Enable SSH Key Authentication
 Configure key-based SSH login to avoid password prompts during Ansible runs.
 ### Set Up the Ansible Environment
 Create a project folder and Python virtual environment on the DSM host:
 ```shell
 mkdir ~/path/to/your/project/folder
 cd ~/path/to/your/project/folder
 python3 -m venv ./myenv
 # (optional) activate python virtual environment
 # source ./myenv/bin/activate
 ```
 ## Inventory Configuration
 In your `inventory/hosts` file, set the Python interpreter to your virtual environment:
 ```ini
 # SSH key authentication with empty passphrase example
 matrix.example.com ansible_host=<your-dsm-ip> ansible_ssh_user=<dsm-ssh-user> become=true become_user=root ansible_python_interpreter=/volume1/homes/path/to/your/project/folder/myenv/bin/python ansible_sudo_pass='your-password'
 ```
 ## vars.yml Configuration
 Add the following Synology-specific variables to your `vars.yml`:
 ```yaml
 # Synology-specific settings
 # Controls Synology DSM-specific handling. `null` means autodetect (via /etc/synoinfo.conf).
 # Set to `true`/`false` to force.
 # matrix_base_host_is_synology: true
 # Password for the Matrix service account created by the playbook.
 # The account is created as expired so this password cannot be used to log in.
 matrix_synology_user_password: "your-strong-password"
 # User and group that will be created automatically by the playbook
 matrix_user_name: "matrix"
 matrix_group_name: "matrix"
 # Data path on your Synology volume
 matrix_base_data_path: "/volume1/docker/matrix"
 # Use Synology Container Manager's Docker daemon instead of installing Docker
 matrix_playbook_docker_installation_enabled: false
 devture_systemd_docker_base_host_command_docker: "/var/packages/ContainerManager/target/usr/bin/docker"
 devture_systemd_docker_base_docker_service_name: "pkg-ContainerManager-dockerd.service"
 # Use Synology's NTP service
 devture_timesync_ntpd_service: "chronyd"
 # Reverse proxy settings — use HTTPS at the DSM reverse proxy level
 matrix_playbook_ssl_enabled: true
 traefik_config_entrypoint_web_secure_enabled: false
 # Bind to localhost only — DSM reverse proxy handles public traffic
 traefik_container_web_host_bind_port: '127.0.0.1:81'
 matrix_playbook_public_matrix_federation_api_traefik_entrypoint_host_bind_port: '127.0.0.1:8449'
 # Trust X-Forwarded-* headers from the local reverse proxy
 traefik_config_entrypoint_web_forwardedHeaders_insecure: true
 matrix_playbook_public_matrix_federation_api_traefik_entrypoint_config_custom:
  forwardedHeaders:
    insecure: true
 ```
 ## Running the Playbook
 ```shell
 # Full setup
 ansible-playbook -i inventory/hosts setup.yml --tags=setup-all
 # start
 ansible-playbook -i inventory/hosts setup.yml --tags=install-all,start
 # Stop all services
 ansible-playbook -i inventory/hosts setup.yml --tags=stop
 # Apply config changes (always include start to restart running containers)
 ansible-playbook -i inventory/hosts setup.yml --tags=stop,setup-all,start
 ```
 > **Important:** Always include `stop` before `setup-all,start` when changing configuration. Running `setup-all` alone does not restart already-running containers.
 ## Creating Matrix Users
 After the services are running, create your first Matrix user:
 ```shell
 # option 1:
 sudo docker exec -it matrix-synapse register_new_matrix_user http://localhost:8008 -c /data/homeserver.yaml -u your_username -p your_password
 # option 2:
 ansible-playbook -i inventory/hosts setup.yml --extra-vars='username=your_username password=your_password admin=yes|no' --tags=register-user
 ```
@@ -140,16 +140,15 @@ The S3 backend ships with native multipart upload, so no goofys/rclone sidecar i
 ### RocksDB and cache tuning
-Tuwunel embeds RocksDB. The defaults (`rocksdb_compression_algo: zstd`) suit most deployments. For high-throughput servers you may want to enable direct I/O, raise parallelism, and configure a backup path:
+Tuwunel embeds RocksDB. The defaults (`rocksdb_compression_algo: zstd`) suit most deployments. For high-throughput servers you may want to enable direct I/O, raise parallelism, and bump the cache modifier:
 ```yaml
 matrix_tuwunel_config_rocksdb_direct_io: true
 matrix_tuwunel_config_rocksdb_parallelism_threads: 8
 matrix_tuwunel_config_cache_capacity_modifier: 2.0
 matrix_tuwunel_config_database_backup_path: /var/lib/tuwunel/backups
 ```
 `matrix_tuwunel_config_cache_capacity_modifier` is left empty by default, so Tuwunel picks a value (`1.0` since v1.7.0, with rebalanced per-cache sizes that already raise memory use). Set it to `2.0` only on small hosts with four or fewer cores; on larger machines the default is recommended.
 If you run on ZFS, the [Tuwunel maintenance guide](https://matrix-construct.github.io/tuwunel/maintenance.html#zfs) lists the dataset properties (`recordsize`, `primarycache`, `compression`, `atime`, `logbias`) and config flags (`rocksdb_direct_io`, `rocksdb_allow_fallocate`) you need to adjust to avoid severe write amplification.
 To enable Sentry crash reporting, set `matrix_tuwunel_config_sentry_enabled: true`.
@@ -89,7 +89,7 @@ Web clients for Matrix that you can host on your own domains.
 - [Setting up Cinny](configuring-playbook-client-cinny.md), if you've enabled [Cinny](https://github.com/ajbura/cinny), a web client focusing primarily on simple, elegant and secure interface
- [Setting up Sable](configuring-playbook-client-sable.md), if you've enabled [Sable](https://github.com/SableClient/Sable), a web client focusing primarily on simple, elegant and secure interface
+- [Setting up Sable](configuring-playbook-client-sable.md), if you've enabled [Sable](https://github.com/7w1/sable), a web client focusing primarily on simple, elegant and secure interface
 - [Setting up SchildiChat Web](configuring-playbook-client-schildichat-web.md), if you've enabled [SchildiChat Web](https://schildi.chat/), a web client based on [Element Web](https://element.io/) with some extras and tweaks
@@ -106,12 +106,16 @@ Extend and modify how users are authenticated on your homeserver.
 - [Setting up Ketesa](configuring-playbook-ketesa.md)
 - [Setting up matrix-registration](configuring-playbook-matrix-registration.md)
 - [Setting up the REST authentication password provider module](configuring-playbook-rest-auth.md) (advanced)
 - [Setting up the Shared Secret Auth password provider module](configuring-playbook-shared-secret-auth.md) (advanced)
 - [Setting up the LDAP authentication password provider module](configuring-playbook-ldap-auth.md) (advanced)
 - [Setting up matrix-ldap-registration-proxy](configuring-playbook-matrix-ldap-registration-proxy.md) (advanced)
 - [Setting up Synapse Simple Antispam](configuring-playbook-synapse-simple-antispam.md) (advanced)
 - [Setting up Matrix User Verification Service](configuring-playbook-user-verification-service.md) (advanced)
@@ -158,8 +162,6 @@ Bridges can be used to connect your Matrix installation with third-party communi
 - [Setting up Mautrix wsproxy for bridging Android SMS or Apple iMessage](configuring-playbook-bridge-mautrix-wsproxy.md)
 - [Setting up RustPush (iMessage) bridging](configuring-playbook-bridge-rustpush.md)
 - [Setting up Appservice IRC bridging](configuring-playbook-bridge-appservice-irc.md)
 - [Setting up Appservice Discord bridging](configuring-playbook-bridge-appservice-discord.md)
@@ -190,7 +192,7 @@ Bridges can be used to connect your Matrix installation with third-party communi
 Bots provide various additional functionality to your installation.
- [Setting up baibot](configuring-playbook-bot-baibot.md) — a bot through which you can talk to various [AI](https://en.wikipedia.org/wiki/Artificial_intelligence) / [Large Language Models](https://en.wikipedia.org/wiki/Large_language_model) services (the privacy-first [Venice](configuring-playbook-bot-baibot.md#venice) we recommend, [OpenAI](https://openai.com/)'s [ChatGPT](https://openai.com/blog/chatgpt/), and [others](https://github.com/etkecc/baibot/blob/main/docs/providers.md))
+- [Setting up baibot](configuring-playbook-bot-baibot.md) — a bot through which you can talk to various [AI](https://en.wikipedia.org/wiki/Artificial_intelligence) / [Large Language Models](https://en.wikipedia.org/wiki/Large_language_model) services ([OpenAI](https://openai.com/)'s [ChatGPT](https://openai.com/blog/chatgpt/) and [others](https://github.com/etkecc/baibot/blob/main/docs/providers.md))
 - [Setting up matrix-reminder-bot](configuring-playbook-bot-matrix-reminder-bot.md) — a bot to remind you about stuff
@@ -279,10 +281,6 @@ Various services that don't fit any other categories.
 - [Setting up matrix-bot-chatgpt](configuring-playbook-bot-chatgpt.md) (unmaintained; the bridge's author suggests taking a look at [baibot](https://github.com/etkecc/baibot) as a replacement, which can also be [installed using this playbook](configuring-playbook-bot-baibot.md))
 - [Setting up matrix-ldap-registration-proxy](configuring-playbook-matrix-ldap-registration-proxy.md) (removed; the repository of the source code has been removed)
 - [Setting up matrix-registration](configuring-playbook-matrix-registration.md) (removed; this component has been unmaintained)
 - [Setting up Mautrix Facebook bridging](configuring-playbook-bridge-mautrix-facebook.md) (deprecated in favor of the Messenger/Instagram bridge with [mautrix-meta-messenger](configuring-playbook-bridge-mautrix-meta-messenger.md))
 - [Setting up Mautrix Instagram bridging](configuring-playbook-bridge-mautrix-instagram.md) (deprecated in favor of the Messenger/Instagram bridge with [mautrix-meta-instagram](configuring-playbook-bridge-mautrix-meta-instagram.md))
@@ -67,6 +67,8 @@ Extend and modify how users are authenticated on your homeserver.
 | [matrix-synapse-rest-auth](configuring-playbook-rest-auth.md) | (N/A) | ❌ | REST authentication password provider module |
 | [matrix-synapse-shared-secret-auth](configuring-playbook-shared-secret-auth.md) | (N/A) | ❌ | Password provider module |
 | [matrix-synapse-ldap3](configuring-playbook-ldap-auth.md) (advanced) | (N/A) | ❌ | LDAP Auth password provider module |
 | [matrix-ldap-registration-proxy](configuring-playbook-matrix-ldap-registration-proxy.md) | [activism.international/matrix_ldap_registration_proxy](https://gitlab.com/activism.international/matrix_ldap_registration_proxy/container_registry) | ❌ | Proxy that handles Matrix registration requests and forwards them to LDAP |
 | [matrix-registration](configuring-playbook-matrix-registration.md) | [zeratax/matrix-registration](https://hub.docker.com/r/devture/zeratax-matrix-registration/) | ❌ | Simple python application to have a token based Matrix registration |
 | [Matrix User Verification Service](configuring-playbook-user-verification-service.md) | [matrixdotorg/matrix-user-verification-service](https://hub.docker.com/r/atrixdotorg/matrix-user-verification-service) | ❌ | Service to verify details of a user based on an Open ID token |
 | [synapse-simple-antispam](configuring-playbook-synapse-simple-antispam.md) (advanced) | (N/A) | ❌ | Spam checker module |
@@ -107,7 +109,6 @@ Bridges can be used to connect your Matrix installation with third-party communi
 | [Heisenbridge](configuring-playbook-bridge-heisenbridge.md) | [hif1/heisenbridge](https://hub.docker.com/r/hif1/heisenbridge) | ❌ | Bouncer-style bridge to [IRC](https://wikipedia.org/wiki/Internet_Relay_Chat) |
 | [mx-puppet-groupme](configuring-playbook-bridge-mx-puppet-groupme.md) | [xangelix/mx-puppet-groupme](https://hub.docker.com/r/xangelix/mx-puppet-groupme) | ❌ | Bridge to [GroupMe](https://groupme.com/) |
 | [matrix-steam-bridge](configuring-playbook-bridge-steam.md) | [jasonlaguidice/matrix-steam-bridge](https://github.com/jasonlaguidice/matrix-steam-bridge/pkgs/container/matrix-steam-bridge) | ❌ | Bridge to [Steam](https://steampowered.com/) |
 | [matrix-rustpush-bridge](configuring-playbook-bridge-rustpush.md) | [jasonlaguidice/imessage](https://github.com/jasonlaguidice/imessage/pkgs/container/imessage) | ❌ | Bridge to [iMessage](https://support.apple.com/messages) via Apple Push Notification service |
 | [mx-puppet-steam](configuring-playbook-bridge-mx-puppet-steam.md) | [icewind1991/mx-puppet-steam](https://hub.docker.com/r/icewind1991/mx-puppet-steam) | ❌ | Bridge to [Steam](https://steamapp.com/) |
 | [Postmoogle](configuring-playbook-bridge-postmoogle.md) | [etke.cc/postmoogle](https://github.com/etkecc/postmoogle/container_registry) | ❌ | Email to Matrix bridge |
@@ -178,8 +179,6 @@ The list of the deprecated or unmaintained services is available [here](configur
 | [matrix-appservice-slack](configuring-playbook-bridge-appservice-slack.md) | [matrixdotorg/matrix-appservice-slack](https://hub.docker.com/r/matrixdotorg/matrix-appservice-slack) | ❌ | Bridge to [Slack](https://slack.com/) |
 | [matrix-appservice-webhooks](configuring-playbook-bridge-appservice-webhooks.md) | [turt2live/matrix-appservice-webhooks](https://hub.docker.com/r/turt2live/matrix-appservice-webhooks) | ❌ | Bridge for slack compatible webhooks ([ConcourseCI](https://concourse-ci.org/), [Slack](https://slack.com/) etc. pp.) |
 | [matrix-chatgpt-bot](configuring-playbook-bot-chatgpt.md) | [matrixgpt/matrix-chatgpt-bot](https://ghcr.io/matrixgpt/matrix-chatgpt-bot) | ❌ | Accessing ChatGPT via your favourite Matrix client |
 | [matrix-ldap-registration-proxy](configuring-playbook-matrix-ldap-registration-proxy.md) | [activism.international/matrix_ldap_registration_proxy](https://gitlab.com/activism.international/matrix_ldap_registration_proxy/container_registry) | ❌ | Proxy that handles Matrix registration requests and forwards them to LDAP |
 | [matrix-registration](configuring-playbook-matrix-registration.md) | [zeratax/matrix-registration](https://hub.docker.com/r/devture/zeratax-matrix-registration/) | ❌ | Simple python application to have a token based Matrix registration |
 | [mautrix-facebook](configuring-playbook-bridge-mautrix-facebook.md) | [mautrix/facebook](https://mau.dev/mautrix/facebook/container_registry) | ❌ | Bridge to [Facebook](https://facebook.com/) |
 | [mautrix-instagram](configuring-playbook-bridge-mautrix-instagram.md) | [mautrix/instagram](https://mau.dev/mautrix/instagram/container_registry) | ❌ | Bridge to [Instagram](https://instagram.com/) |
 | [mx-puppet-discord](configuring-playbook-bridge-mx-puppet-discord.md) | [mx-puppet/discord/mx-puppet-discord](https://gitlab.com/mx-puppet/discord/mx-puppet-discord/container_registry) | ❌ | Bridge to [Discord](https://discordapp.com/) |
@@ -23,7 +23,7 @@ Both methods have their place and will continue to do so. You only need to use j
 For simplicity reasons, this playbook recommends you to set up server delegation via a `/.well-known/matrix/server` file. However, that method may have some downsides that are not to your liking. Hence this guide about alternative ways to set up Server Delegation.
-**Note**: as an alternative, it is possible to install the server such that it uses only the `matrix.example.com` domain (instead of identifying as the shorter base domain — `example.com`). This should be helpful if you are not in control of anything on the base domain (`example.com`). In this case, you would not need to configure server delegation, but you would need to add other configuration. For more information, see [How do I install on matrix.example.com without involving the base domain?](faq.md#how-do-i-install-on-matrixexamplecom-without-involving-the-base-domain) on our FAQ.
+**Note**: as an alternative, it is possible to install the server such that it uses only the `matrix.example.com` domain (instead of identifying as the shorter base domain — `example.com`). This should be helpful if you are not in control of anything on the base domain (`example.com`). In this case, you would not need to configure server delegation, but you would need to add other configuration. For more information, see [How do I install on matrix.example.com without involving the base domain?](faq.md#how-do-i-install-on-matrix-example-com-without-involving-the-base-domain) on our FAQ.
 ## Server Delegation via a well-known file
@@ -1,13 +1,13 @@
 <!--
 SPDX-FileCopyrightText: 2018 - 2023 Slavi Pantaleev
 SPDX-FileCopyrightText: 2018 - 2024 MDAD project contributors
 SPDX-FileCopyrightText: 2018 Aaron Raimist
 SPDX-FileCopyrightText: 2018-2023 Slavi Pantaleev
 SPDX-FileCopyrightText: 2018-2024 MDAD project contributors
 SPDX-FileCopyrightText: 2019 Edgars Voroboks
 SPDX-FileCopyrightText: 2019 Michael Haak
 SPDX-FileCopyrightText: 2020 Kevin Lanni
 SPDX-FileCopyrightText: 2024 - 2025 Suguru Hirahara
 SPDX-FileCopyrightText: 2024 Mitja Jež
 SPDX-FileCopyrightText: 2024 Nikita Chernyi
 SPDX-FileCopyrightText: 2024-2026 Suguru Hirahara
 SPDX-License-Identifier: AGPL-3.0-or-later
 -->
@@ -150,12 +150,6 @@ After completing the installation, you can:
  * or come say Hi in our support room — [#matrix-docker-ansible-deploy:devture.com](https://matrix.to/#/#matrix-docker-ansible-deploy:devture.com). You might learn something or get to help someone else new to Matrix hosting.
 - or help make this playbook better by contributing (code, documentation, or [coffee/beer](https://liberapay.com/s.pantaleev/donate))
 ### Installing native Matrix clients on your computer
 As the playbook's aim is to help you to install and manage Matrix services on your server, if you are looking for dedicated native Matrix clients which run on your computer, you need to install ones by yourself. There is a convenient list which introduces known Matrix clients on this page: <https://matrix.org/ecosystem/clients/>
 If you feel overwhelmed by the variety and the number of the available clients, you might want to install [**Komai**](https://github.com/etkecc/komai), a desktop-first Matrix chat application maintained by the team behind the playbook. It is stable, and just works without quirks!
 ### ⚠️ Keep the playbook and services up-to-date
 While this playbook helps you to set up Matrix services and maintain them, it will **not** automatically run the maintenance task for you. You will need to update the playbook and re-run it **manually**.
@@ -97,6 +97,10 @@ This `register-user` script actually invokes the `mas-cli manage register-user`
 To manage users and your homeserver more easily (via a web interface), you can install [Ketesa](configuring-playbook-ketesa.md) — a fully-featured admin UI covering users, rooms, media, sessions, and MAS management.
 ## Letting certain users register on your private server
 If you'd rather **keep your server private** (public registration closed, as is the default), and **let certain people create accounts by themselves** (instead of creating user accounts manually like this), consider installing and making use of [matrix-registration](configuring-playbook-matrix-registration.md).
 ## Enabling public user registration
 To **open up user registration publicly** (usually **not recommended**), add the following configuration to your `inventory/host_vars/matrix.example.com/vars.yml` file:
@@ -31,6 +31,7 @@ Possibly outdated list of roles where self-building the Docker image is currentl
 - `hydrogen`
 - `cinny`
 - `sable`
 - `matrix-registration`
 - `coturn`
 - `matrix-corporal`
 - `exim-relay`
@@ -44,19 +44,27 @@ Custom Nginx Configuration:
 	client_max_body_size 50M;
 ```
-Then, under the 'Streams' page select `Add Stream`, this time for your federation traffic. Apply the configuration like this:
+Again, under the 'Proxy Hosts' page select `Add Proxy Host`, this time for your federation traffic. Apply the proxy's configuration like this:
 ```md
 # Details
 # Matrix Federation proxy config
-Incoming Port: 8448
+Domain Names: matrix.example.com:8448
-Forward Host/IP: IP-ADDRESS-OF-YOUR-MATRIX
+Scheme: http
 Forward Hostname/IP: IP-ADDRESS-OF-YOUR-MATRIX
 Forward Port: 8449
 Protocols: TCP
 # SSL
 # Either 'Request a new certificate' or select an existing one
 SSL Certificate: matrix.example.com or *.example.com
 Force SSL: true
 HTTP/2 Support: true
 # Advanced
 # Allows NPM to listen on the federation port
 Custom Nginx Configuration:
 	listen 8448 ssl http2;
 	client_max_body_size 50M;
 ```
 Also note, NPM would need to be configured for whatever other services you are using. For example, you would need to create additional proxy hosts for `element.example.com` or `jitsi.example.com`, which would use the forwarding port `81`.
@@ -2,7 +2,7 @@
 # This variable acknowledges that you've reviewed breaking changes up to this version.
 # The playbook will fail if this is outdated, guiding you through what changed.
 # See the changelog: https://github.com/spantaleev/matrix-docker-ansible-deploy/blob/master/CHANGELOG.md
-matrix_playbook_migration_validated_version: v2026.05.18.0
+matrix_playbook_migration_validated_version: v2026.04.24.0
 # The bare domain name which represents your Matrix identity.
 # Matrix user IDs for your server will be of the form (`@alice:example.com`).
@@ -114,8 +114,6 @@ matrix_homeserver_container_extra_arguments_auto: |
    +
    (['--mount type=bind,src=' + matrix_mautrix_bluesky_config_path + '/registration.yaml,dst=/matrix-mautrix-bluesky-registration.yaml,ro'] if matrix_mautrix_bluesky_enabled else [])
    +
    (['--mount type=bind,src=' + matrix_rustpush_bridge_config_path + '/registration.yaml,dst=/matrix-rustpush-bridge-registration.yaml,ro'] if matrix_rustpush_bridge_enabled else [])
    +
    (['--mount type=bind,src=' + matrix_mautrix_discord_config_path + '/registration.yaml,dst=/matrix-mautrix-discord-registration.yaml,ro'] if matrix_mautrix_discord_enabled else [])
    +
    (['--mount type=bind,src=' + matrix_mautrix_slack_config_path + '/registration.yaml,dst=/matrix-mautrix-slack-registration.yaml,ro'] if matrix_mautrix_slack_enabled else [])
@@ -173,8 +171,6 @@ matrix_homeserver_app_service_config_files_auto: |
    +
    (['/matrix-mautrix-bluesky-registration.yaml'] if matrix_mautrix_bluesky_enabled else [])
    +
    (['/matrix-rustpush-bridge-registration.yaml'] if matrix_rustpush_bridge_enabled else [])
    +
    (['/matrix-mautrix-discord-registration.yaml'] if matrix_mautrix_discord_enabled else [])
    +
    (['/matrix-mautrix-slack-registration.yaml'] if matrix_mautrix_slack_enabled else [])
@@ -314,6 +310,13 @@ devture_systemd_service_manager_services_list_auto: |
      'groups': ['matrix', 'bots', 'baibot', 'bot-baibot'],
    }] if matrix_bot_baibot_enabled else [])
    +
    ([{
      'name': 'matrix-bot-go-neb.service',
      'priority': 2200,
      'restart_necessary': (matrix_bot_go_neb_restart_necessary | bool),
      'groups': ['matrix', 'bots', 'go-neb', 'bot-go-neb'],
    }] if matrix_bot_go_neb_enabled else [])
    +
    ([{
      'name': 'matrix-bot-honoroit.service',
      'priority': 2200,
@@ -440,13 +443,6 @@ devture_systemd_service_manager_services_list_auto: |
      'groups': ['matrix', 'bridges', 'mautrix-bluesky'],
    }] if matrix_mautrix_bluesky_enabled else [])
    +
    ([{
      'name': 'matrix-rustpush-bridge.service',
      'priority': 2000,
      'restart_necessary': (matrix_rustpush_bridge_restart_necessary | bool),
      'groups': ['matrix', 'bridges', 'matrix-rustpush-bridge'],
    }] if matrix_rustpush_bridge_enabled else [])
    +
    ([{
      'name': 'matrix-mautrix-discord.service',
      'priority': 2000,
@@ -726,6 +722,13 @@ devture_systemd_service_manager_services_list_auto: |
      'groups': ['matrix', 'jitsi', 'jitsi-jvb'],
    }] if jitsi_enabled else [])
    +
    ([{
      'name': 'matrix-ldap-registration-proxy.service',
      'priority': 2000,
      'restart_necessary': (matrix_ldap_registration_proxy_restart_necessary | bool),
      'groups': ['matrix', 'ldap-registration-proxy'],
    }] if matrix_ldap_registration_proxy_enabled else [])
    +
    ([{
      'name': (matrix_media_repo_identifier + '.service'),
      'priority': 4000,
@@ -831,6 +834,13 @@ devture_systemd_service_manager_services_list_auto: |
      'groups': ['matrix', 'livekit-server'],
    }] if livekit_server_enabled else [])
    +
    ([{
      'name': 'matrix-registration.service',
      'priority': 4000,
      'restart_necessary': (matrix_registration_restart_necessary | bool),
      'groups': ['matrix', 'registration', 'matrix-registration'],
    }] if matrix_registration_enabled else [])
    +
    ([{
      'name': 'matrix-sygnal.service',
      'priority': 800,
@@ -1471,11 +1481,6 @@ matrix_mautrix_bluesky_metrics_proxying_enabled: "{{ matrix_mautrix_bluesky_metr
 matrix_mautrix_bluesky_metrics_proxying_hostname: "{{ matrix_metrics_exposure_hostname }}"
 matrix_mautrix_bluesky_metrics_proxying_path_prefix: "{{ matrix_metrics_exposure_path_prefix }}/mautrix-bluesky"
 matrix_mautrix_bluesky_scheme: "{{ 'https' if matrix_playbook_ssl_enabled else 'http' }}"
 matrix_mautrix_bluesky_exposure_enabled: "{{ matrix_bridges_exposure_enabled }}"
 matrix_mautrix_bluesky_exposure_hostname: "{{ matrix_bridges_exposure_hostname }}"
 matrix_mautrix_bluesky_exposure_path_prefix: "{{ matrix_bridges_exposure_path_prefix }}/bluesky"
 matrix_mautrix_bluesky_database_hostname: "{{ postgres_connection_hostname if postgres_enabled else '' }}"
 matrix_mautrix_bluesky_database_password: "{{ (matrix_homeserver_generic_secret_key + ':mau.twt.db') | hash('sha512') | to_uuid if postgres_enabled else '' }}"
@@ -1485,77 +1490,6 @@ matrix_mautrix_bluesky_database_password: "{{ (matrix_homeserver_generic_secret_
 #
 ######################################################################
 ######################################################################
 #
 # matrix-bridge-rustpush
 #
 ######################################################################
 # We don't enable bridges by default.
 matrix_rustpush_bridge_enabled: false
 matrix_rustpush_bridge_systemd_required_services_list_auto: |
  {{
    matrix_addons_homeserver_systemd_services_list
    +
    ([postgres_identifier ~ '.service'] if (postgres_enabled and matrix_rustpush_bridge_database_hostname == postgres_connection_hostname) else [])
  }}
 matrix_rustpush_bridge_container_network: "{{ matrix_addons_container_network }}"
 matrix_rustpush_bridge_container_additional_networks_auto: |-
  {{
    (
      ([] if matrix_addons_homeserver_container_network == '' else [matrix_addons_homeserver_container_network])
      +
      ([postgres_container_network] if (postgres_enabled and matrix_rustpush_bridge_database_hostname == postgres_connection_hostname and matrix_rustpush_bridge_container_network != postgres_container_network) else [])
      +
      ([matrix_playbook_reverse_proxyable_services_additional_network] if matrix_playbook_reverse_proxyable_services_additional_network and matrix_rustpush_bridge_container_labels_traefik_enabled else [])
    ) | unique
  }}
 matrix_rustpush_bridge_container_labels_traefik_enabled: "{{ matrix_playbook_reverse_proxy_type in ['playbook-managed-traefik', 'other-traefik-container'] }}"
 matrix_rustpush_bridge_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"
 matrix_rustpush_bridge_container_labels_traefik_entrypoints: "{{ traefik_entrypoint_primary }}"
 matrix_rustpush_bridge_container_labels_traefik_tls_certResolver: "{{ traefik_certResolver_primary }}"
 matrix_rustpush_bridge_container_labels_metrics_middleware_basic_auth_enabled: "{{ matrix_metrics_exposure_http_basic_auth_enabled }}"
 matrix_rustpush_bridge_container_labels_metrics_middleware_basic_auth_users: "{{ matrix_metrics_exposure_http_basic_auth_users }}"
 matrix_rustpush_bridge_appservice_token: "{{ (matrix_homeserver_generic_secret_key + ':imsg.as.token') | hash('sha512') | to_uuid }}"
 matrix_rustpush_bridge_homeserver_address: "{{ matrix_addons_homeserver_client_api_url }}"
 matrix_rustpush_bridge_homeserver_token: "{{ (matrix_homeserver_generic_secret_key + ':imsg.hs.token') | hash('sha512') | to_uuid }}"
 matrix_rustpush_bridge_homeserver_async_media: "{{ matrix_homeserver_implementation in ['synapse'] }}"
 matrix_rustpush_bridge_provisioning_shared_secret: "{{ (matrix_homeserver_generic_secret_key + ':mau.imsg.prov') | hash('sha512') | to_uuid }}"
 matrix_rustpush_bridge_double_puppet_secrets_auto: |-
  {{
    ({
      matrix_rustpush_bridge_homeserver_domain: ("as_token:" + matrix_appservice_double_puppet_registration_as_token)
    })
    if matrix_appservice_double_puppet_enabled
    else {}
  }}
 matrix_rustpush_bridge_metrics_enabled: "{{ prometheus_enabled or matrix_metrics_exposure_enabled }}"
 matrix_rustpush_bridge_metrics_proxying_enabled: "{{ matrix_rustpush_bridge_metrics_enabled and matrix_metrics_exposure_enabled }}"
 matrix_rustpush_bridge_metrics_proxying_hostname: "{{ matrix_metrics_exposure_hostname }}"
 matrix_rustpush_bridge_metrics_proxying_path_prefix: "{{ matrix_metrics_exposure_path_prefix }}/rustpush-bridge"
 matrix_rustpush_bridge_database_hostname: "{{ postgres_connection_hostname if postgres_enabled else '' }}"
 matrix_rustpush_bridge_database_password: "{{ (matrix_homeserver_generic_secret_key + ':mau.imsg.db') | hash('sha512') | to_uuid if postgres_enabled else '' }}"
 ######################################################################
 #
 # /matrix-bridge-rustpush
 #
 ######################################################################
 ######################################################################
 #
 # matrix-bridge-mautrix-discord
@@ -1659,16 +1593,9 @@ matrix_mautrix_slack_container_additional_networks_auto: |-
      ([] if matrix_addons_homeserver_container_network == '' else [matrix_addons_homeserver_container_network])
      +
      ([postgres_container_network] if (postgres_enabled and matrix_mautrix_slack_database_hostname == postgres_connection_hostname and matrix_mautrix_slack_container_network != postgres_container_network) else [])
      +
      ([matrix_playbook_reverse_proxyable_services_additional_network] if matrix_playbook_reverse_proxyable_services_additional_network and matrix_mautrix_slack_container_labels_traefik_enabled else [])
    ) | unique
  }}
 matrix_mautrix_slack_container_labels_traefik_enabled: "{{ matrix_playbook_reverse_proxy_type in ['playbook-managed-traefik', 'other-traefik-container'] }}"
 matrix_mautrix_slack_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"
 matrix_mautrix_slack_container_labels_traefik_entrypoints: "{{ traefik_entrypoint_primary }}"
 matrix_mautrix_slack_container_labels_traefik_tls_certResolver: "{{ traefik_certResolver_primary }}"
 matrix_mautrix_slack_appservice_token: "{{ (matrix_homeserver_generic_secret_key + ':mauslack.as.tok') | hash('sha512') | to_uuid }}"
 matrix_mautrix_slack_homeserver_address: "{{ matrix_addons_homeserver_client_api_url }}"
@@ -1693,11 +1620,6 @@ matrix_mautrix_slack_database_password: "{{ (matrix_homeserver_generic_secret_ke
 matrix_mautrix_slack_provisioning_shared_secret: "{{ (matrix_homeserver_generic_secret_key + ':mau.slack.prov') | hash('sha512') | to_uuid }}"
 matrix_mautrix_slack_public_media_signing_key: "{{ (matrix_homeserver_generic_secret_key + ':mau.slack.pmed') | hash('sha512') | to_uuid }}"
 matrix_mautrix_slack_scheme: "{{ 'https' if matrix_playbook_ssl_enabled else 'http' }}"
 matrix_mautrix_slack_exposure_enabled: "{{ matrix_bridges_exposure_enabled }}"
 matrix_mautrix_slack_exposure_hostname: "{{ matrix_bridges_exposure_hostname }}"
 matrix_mautrix_slack_exposure_path_prefix: "{{ matrix_bridges_exposure_path_prefix }}/slack"
 ######################################################################
 #
 # /matrix-bridge-mautrix-slack
@@ -1846,11 +1768,6 @@ matrix_mautrix_signal_metrics_proxying_enabled: "{{ matrix_mautrix_signal_metric
 matrix_mautrix_signal_metrics_proxying_hostname: "{{ matrix_metrics_exposure_hostname }}"
 matrix_mautrix_signal_metrics_proxying_path_prefix: "{{ matrix_metrics_exposure_path_prefix }}/mautrix-signal"
 matrix_mautrix_signal_scheme: "{{ 'https' if matrix_playbook_ssl_enabled else 'http' }}"
 matrix_mautrix_signal_exposure_enabled: "{{ matrix_bridges_exposure_enabled }}"
 matrix_mautrix_signal_exposure_hostname: "{{ matrix_bridges_exposure_hostname }}"
 matrix_mautrix_signal_exposure_path_prefix: "{{ matrix_bridges_exposure_path_prefix }}/signal"
 matrix_mautrix_signal_database_engine: "{{ 'postgres' if postgres_enabled else 'sqlite' }}"
 matrix_mautrix_signal_database_hostname: "{{ postgres_connection_hostname if postgres_enabled else '' }}"
 matrix_mautrix_signal_database_password: "{{ (matrix_homeserver_generic_secret_key + ':mau.signal.db') | hash('sha512') | to_uuid }}"
@@ -1911,7 +1828,6 @@ matrix_mautrix_meta_messenger_appservice_token: "{{ (matrix_homeserver_generic_s
 matrix_mautrix_meta_messenger_homeserver_address: "{{ matrix_addons_homeserver_client_api_url }}"
 matrix_mautrix_meta_messenger_homeserver_token: "{{ (matrix_homeserver_generic_secret_key + ':mau.meta.fb.hs') | hash('sha512') | to_uuid }}"
 matrix_mautrix_meta_messenger_provisioning_shared_secret: "{{ (matrix_homeserver_generic_secret_key + ':mau.meta.fb.prov') | hash('sha512') | to_uuid }}"
 matrix_mautrix_meta_messenger_homeserver_async_media: "{{ matrix_homeserver_implementation in ['synapse'] }}"
@@ -1930,11 +1846,6 @@ matrix_mautrix_meta_messenger_metrics_proxying_enabled: "{{ matrix_mautrix_meta_
 matrix_mautrix_meta_messenger_metrics_proxying_hostname: "{{ matrix_metrics_exposure_hostname }}"
 matrix_mautrix_meta_messenger_metrics_proxying_path_prefix: "{{ matrix_metrics_exposure_path_prefix }}/mautrix-meta-messenger"
 matrix_mautrix_meta_messenger_scheme: "{{ 'https' if matrix_playbook_ssl_enabled else 'http' }}"
 matrix_mautrix_meta_messenger_exposure_enabled: "{{ matrix_bridges_exposure_enabled }}"
 matrix_mautrix_meta_messenger_exposure_hostname: "{{ matrix_bridges_exposure_hostname }}"
 matrix_mautrix_meta_messenger_exposure_path_prefix: "{{ matrix_bridges_exposure_path_prefix }}/meta-messenger"
 # We'd like to force-set people with external Postgres to SQLite, so the bridge role can complain
 # and point them to a migration path.
 matrix_mautrix_meta_messenger_database_engine: "{{ 'postgres' if postgres_enabled else 'sqlite3-fk-wal' }}"
@@ -1995,7 +1906,6 @@ matrix_mautrix_meta_instagram_appservice_token: "{{ (matrix_homeserver_generic_s
 matrix_mautrix_meta_instagram_homeserver_address: "{{ matrix_addons_homeserver_client_api_url }}"
 matrix_mautrix_meta_instagram_homeserver_token: "{{ (matrix_homeserver_generic_secret_key + ':mau.meta.ig.hs') | hash('sha512') | to_uuid }}"
 matrix_mautrix_meta_instagram_provisioning_shared_secret: "{{ (matrix_homeserver_generic_secret_key + ':mau.meta.ig.prov') | hash('sha512') | to_uuid }}"
 matrix_mautrix_meta_instagram_homeserver_async_media: "{{ matrix_homeserver_implementation in ['synapse'] }}"
@@ -2014,11 +1924,6 @@ matrix_mautrix_meta_instagram_metrics_proxying_enabled: "{{ matrix_mautrix_meta_
 matrix_mautrix_meta_instagram_metrics_proxying_hostname: "{{ matrix_metrics_exposure_hostname }}"
 matrix_mautrix_meta_instagram_metrics_proxying_path_prefix: "{{ matrix_metrics_exposure_path_prefix }}/mautrix-meta-instagram"
 matrix_mautrix_meta_instagram_scheme: "{{ 'https' if matrix_playbook_ssl_enabled else 'http' }}"
 matrix_mautrix_meta_instagram_exposure_enabled: "{{ matrix_bridges_exposure_enabled }}"
 matrix_mautrix_meta_instagram_exposure_hostname: "{{ matrix_bridges_exposure_hostname }}"
 matrix_mautrix_meta_instagram_exposure_path_prefix: "{{ matrix_bridges_exposure_path_prefix }}/meta-instagram"
 # We'd like to force-set people with external Postgres to SQLite, so the bridge role can complain
 # and point them to a migration path.
 matrix_mautrix_meta_instagram_database_engine: "{{ 'postgres' if postgres_enabled else 'sqlite3-fk-wal' }}"
@@ -2098,11 +2003,6 @@ matrix_mautrix_telegram_metrics_proxying_enabled: "{{ matrix_mautrix_telegram_me
 matrix_mautrix_telegram_metrics_proxying_hostname: "{{ matrix_metrics_exposure_hostname }}"
 matrix_mautrix_telegram_metrics_proxying_path_prefix: "{{ matrix_metrics_exposure_path_prefix }}/mautrix-telegram"
 matrix_mautrix_telegram_scheme: "{{ 'https' if matrix_playbook_ssl_enabled else 'http' }}"
 matrix_mautrix_telegram_exposure_enabled: "{{ matrix_bridges_exposure_enabled }}"
 matrix_mautrix_telegram_exposure_hostname: "{{ matrix_bridges_exposure_hostname }}"
 matrix_mautrix_telegram_exposure_path_prefix: "{{ matrix_bridges_exposure_path_prefix }}/telegram"
 # Postgres is the default, except if not using internal Postgres server
 matrix_mautrix_telegram_database_engine: "{{ 'postgres' if postgres_enabled else 'sqlite' }}"
 matrix_mautrix_telegram_database_hostname: "{{ postgres_connection_hostname if postgres_enabled else '' }}"
@@ -2179,11 +2079,6 @@ matrix_mautrix_twitter_metrics_proxying_enabled: "{{ matrix_mautrix_twitter_metr
 matrix_mautrix_twitter_metrics_proxying_hostname: "{{ matrix_metrics_exposure_hostname }}"
 matrix_mautrix_twitter_metrics_proxying_path_prefix: "{{ matrix_metrics_exposure_path_prefix }}/mautrix-twitter"
 matrix_mautrix_twitter_scheme: "{{ 'https' if matrix_playbook_ssl_enabled else 'http' }}"
 matrix_mautrix_twitter_exposure_enabled: "{{ matrix_bridges_exposure_enabled }}"
 matrix_mautrix_twitter_exposure_hostname: "{{ matrix_bridges_exposure_hostname }}"
 matrix_mautrix_twitter_exposure_path_prefix: "{{ matrix_bridges_exposure_path_prefix }}/twitter"
 matrix_mautrix_twitter_database_hostname: "{{ postgres_connection_hostname if postgres_enabled else '' }}"
 matrix_mautrix_twitter_database_password: "{{ (matrix_homeserver_generic_secret_key + ':mau.twt.db') | hash('sha512') | to_uuid if postgres_enabled else '' }}"
@@ -2239,8 +2134,6 @@ matrix_mautrix_gmessages_appservice_token: "{{ (matrix_homeserver_generic_secret
 matrix_mautrix_gmessages_homeserver_address: "{{ matrix_addons_homeserver_client_api_url }}"
 matrix_mautrix_gmessages_homeserver_token: "{{ (matrix_homeserver_generic_secret_key + ':gmessa.hs.token') | hash('sha512') | to_uuid }}"
 matrix_mautrix_gmessages_provisioning_shared_secret: "{{ (matrix_homeserver_generic_secret_key + ':gmessa.prov') | hash('sha512') | to_uuid }}"
 matrix_mautrix_gmessages_homeserver_async_media: "{{ matrix_homeserver_implementation in ['synapse'] }}"
 matrix_mautrix_gmessages_double_puppet_secrets_auto: |-
@@ -2258,11 +2151,6 @@ matrix_mautrix_gmessages_metrics_proxying_enabled: "{{ matrix_mautrix_gmessages_
 matrix_mautrix_gmessages_metrics_proxying_hostname: "{{ matrix_metrics_exposure_hostname }}"
 matrix_mautrix_gmessages_metrics_proxying_path_prefix: "{{ matrix_metrics_exposure_path_prefix }}/mautrix-gmessages"
 matrix_mautrix_gmessages_scheme: "{{ 'https' if matrix_playbook_ssl_enabled else 'http' }}"
 matrix_mautrix_gmessages_exposure_enabled: "{{ matrix_bridges_exposure_enabled }}"
 matrix_mautrix_gmessages_exposure_hostname: "{{ matrix_bridges_exposure_hostname }}"
 matrix_mautrix_gmessages_exposure_path_prefix: "{{ matrix_bridges_exposure_path_prefix }}/gmessages"
 # Postgres is the default, except if not using internal Postgres server
 matrix_mautrix_gmessages_database_engine: "{{ 'postgres' if postgres_enabled else 'sqlite' }}"
 matrix_mautrix_gmessages_database_hostname: "{{ postgres_connection_hostname if postgres_enabled else '' }}"
@@ -2290,6 +2178,7 @@ matrix_mautrix_wsproxy_systemd_required_services_list_default: |
    ([postgres_identifier ~ '.service'] if (postgres_enabled and matrix_mautrix_wsproxy_syncproxy_database_hostname == postgres_connection_hostname) else [])
  }}
 matrix_mautrix_wsproxy_homeserver_domain: "{{ matrix_domain }}"
 matrix_mautrix_wsproxy_homeserver_address: "{{ matrix_addons_homeserver_client_api_url }}"
 matrix_mautrix_wsproxy_hostname: "wsproxy.{{ matrix_mautrix_wsproxy_homeserver_domain }}"
@@ -2427,7 +2316,6 @@ matrix_mautrix_whatsapp_appservice_token: "{{ (matrix_homeserver_generic_secret_
 matrix_mautrix_whatsapp_homeserver_address: "{{ matrix_addons_homeserver_client_api_url }}"
 matrix_mautrix_whatsapp_homeserver_token: "{{ (matrix_homeserver_generic_secret_key + ':wa.hs.token') | hash('sha512') | to_uuid }}"
 matrix_mautrix_whatsapp_provisioning_shared_secret: "{{ (matrix_homeserver_generic_secret_key + ':wa.prov') | hash('sha512') | to_uuid }}"
 matrix_mautrix_whatsapp_homeserver_async_media: "{{ matrix_homeserver_implementation in ['synapse'] }}"
@@ -2446,11 +2334,6 @@ matrix_mautrix_whatsapp_metrics_proxying_enabled: "{{ matrix_mautrix_whatsapp_me
 matrix_mautrix_whatsapp_metrics_proxying_hostname: "{{ matrix_metrics_exposure_hostname }}"
 matrix_mautrix_whatsapp_metrics_proxying_path_prefix: "{{ matrix_metrics_exposure_path_prefix }}/mautrix-whatsapp"
 matrix_mautrix_whatsapp_scheme: "{{ 'https' if matrix_playbook_ssl_enabled else 'http' }}"
 matrix_mautrix_whatsapp_exposure_enabled: "{{ matrix_bridges_exposure_enabled }}"
 matrix_mautrix_whatsapp_exposure_hostname: "{{ matrix_bridges_exposure_hostname }}"
 matrix_mautrix_whatsapp_exposure_path_prefix: "{{ matrix_bridges_exposure_path_prefix }}/whatsapp"
 # Postgres is the default, except if not using internal Postgres server
 matrix_mautrix_whatsapp_database_engine: "{{ 'postgres' if postgres_enabled else 'sqlite' }}"
 matrix_mautrix_whatsapp_database_hostname: "{{ postgres_connection_hostname if postgres_enabled else '' }}"
@@ -2608,6 +2491,7 @@ matrix_hookshot_container_labels_metrics_middleware_basic_auth_enabled: "{{ matr
 matrix_hookshot_container_labels_metrics_middleware_basic_auth_users: "{{ matrix_metrics_exposure_http_basic_auth_users }}"
 matrix_hookshot_public_scheme: "{{ 'https' if matrix_playbook_ssl_enabled else 'http' }}"
 matrix_hookshot_public_hostname: "{{ matrix_server_fqn_matrix }}"
 ######################################################################
 #
@@ -3202,6 +3086,51 @@ matrix_bot_baibot_container_additional_networks_auto: |-
 #
 ######################################################################
 ######################################################################
 #
 # matrix-bot-go-neb
 #
 ######################################################################
 # We don't enable bots by default.
 matrix_bot_go_neb_enabled: false
 matrix_bot_go_neb_scheme: "{{ 'https' if matrix_playbook_ssl_enabled else 'http' }}"
 matrix_bot_go_neb_hostname: "{{ matrix_server_fqn_bot_go_neb }}"
 matrix_bot_go_neb_systemd_required_services_list_auto: |
  {{
    matrix_addons_homeserver_systemd_services_list
  }}
 matrix_bot_go_neb_container_image_registry_prefix_upstream: "{{ matrix_container_global_registry_prefix_override if matrix_container_global_registry_prefix_override else matrix_bot_go_neb_container_image_registry_prefix_upstream_default }}"
 matrix_bot_go_neb_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '4050') if matrix_playbook_service_host_bind_interface_prefix else '' }}"
 matrix_bot_go_neb_container_network: "{{ matrix_addons_container_network }}"
 matrix_bot_go_neb_container_additional_networks: |
  {{
    (
      ([] if matrix_addons_homeserver_container_network == '' else [matrix_addons_homeserver_container_network])
      +
      ([matrix_playbook_reverse_proxyable_services_additional_network] if matrix_playbook_reverse_proxyable_services_additional_network and matrix_bot_go_neb_container_labels_traefik_enabled else [])
    ) | unique
  }}
 matrix_bot_go_neb_container_labels_traefik_enabled: "{{ matrix_playbook_traefik_labels_enabled }}"
 matrix_bot_go_neb_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"
 matrix_bot_go_neb_container_labels_traefik_entrypoints: "{{ traefik_entrypoint_primary }}"
 matrix_bot_go_neb_container_labels_traefik_tls_certResolver: "{{ traefik_certResolver_primary }}"
 ######################################################################
 #
 # /matrix-bot-go-neb
 #
 ######################################################################
 ######################################################################
 #
 # matrix-bot-mjolnir
@@ -3610,6 +3539,8 @@ matrix_rageshake_hostname: "{{ matrix_server_fqn_rageshake }}"
 matrix_rageshake_container_image_registry_prefix_upstream: "{{ matrix_container_global_registry_prefix_override if matrix_container_global_registry_prefix_override else matrix_rageshake_container_image_registry_prefix_upstream_default }}"
 matrix_rageshake_container_network: matrix-rageshake
 matrix_rageshake_container_additional_networks: "{{ [matrix_playbook_reverse_proxyable_services_additional_network] if matrix_playbook_reverse_proxyable_services_additional_network else [] }}"
 matrix_rageshake_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '9110') if matrix_playbook_service_host_bind_interface_prefix else '' }}"
@@ -3897,6 +3828,50 @@ jitsi_disable_gravatar: true
 #
 ######################################################################
 ######################################################################
 #
 # matrix-ldap-registration-proxy
 #
 ######################################################################
 # This is only for users with a specific LDAP setup
 matrix_ldap_registration_proxy_enabled: false
 matrix_ldap_registration_proxy_hostname: "{{ matrix_server_fqn_matrix }}"
 matrix_ldap_registration_proxy_matrix_server_url: "{{ matrix_addons_homeserver_client_api_url }}"
 matrix_ldap_registration_proxy_systemd_required_services_list_auto: |
  {{
    matrix_addons_homeserver_systemd_services_list
  }}
 matrix_ldap_registration_proxy_container_image_registry_prefix_upstream: "{{ matrix_container_global_registry_prefix_override if matrix_container_global_registry_prefix_override else matrix_ldap_registration_proxy_container_image_registry_prefix_upstream_default }}"
 matrix_ldap_registration_proxy_container_network: "{{ matrix_addons_container_network }}"
 matrix_ldap_registration_proxy_container_additional_networks_auto: |-
  {{
    (
      ([] if matrix_addons_homeserver_container_network == '' else [matrix_addons_homeserver_container_network])
      +
      ([matrix_playbook_reverse_proxyable_services_additional_network] if (matrix_playbook_reverse_proxyable_services_additional_network and matrix_ldap_registration_proxy_container_labels_traefik_enabled) else [])
    ) | unique
  }}
 matrix_ldap_registration_proxy_container_labels_traefik_enabled: "{{ matrix_playbook_reverse_proxy_type in ['playbook-managed-traefik', 'other-traefik-container'] }}"
 matrix_ldap_registration_proxy_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"
 matrix_ldap_registration_proxy_container_labels_traefik_entrypoints: "{{ traefik_entrypoint_primary }}"
 matrix_ldap_registration_proxy_container_labels_traefik_tls_certResolver: "{{ traefik_certResolver_primary }}"
 ######################################################################
 #
 # /matrix-ldap-registration-proxy
 #
 ######################################################################
 ########################################################################
 #                                                                      #
 # exim-relay                                                           #
@@ -4149,6 +4124,12 @@ postgres_managed_databases_auto: |
      'password': matrix_bot_buscarron_database_password,
    }] if (matrix_bot_buscarron_enabled and matrix_bot_buscarron_database_engine == 'postgres' and matrix_bot_buscarron_database_hostname == postgres_connection_hostname) else [])
    +
    ([{
      'name': matrix_registration_database_name,
      'username': matrix_registration_database_username,
      'password': matrix_registration_database_password,
    }] if (matrix_registration_enabled and matrix_registration_database_engine == 'postgres' and matrix_registration_database_hostname == postgres_connection_hostname) else [])
    +
    ([{
      'name': matrix_appservice_discord_database_name,
      'username': matrix_appservice_discord_database_username,
@@ -4191,12 +4172,6 @@ postgres_managed_databases_auto: |
      'password': matrix_mautrix_bluesky_database_password,
    }] if (matrix_mautrix_bluesky_enabled and matrix_mautrix_bluesky_database_engine == 'postgres' and matrix_mautrix_bluesky_database_hostname == postgres_connection_hostname) else [])
    +
    ([{
      'name': matrix_rustpush_bridge_database_name,
      'username': matrix_rustpush_bridge_database_username,
      'password': matrix_rustpush_bridge_database_password,
    }] if (matrix_rustpush_bridge_enabled and matrix_rustpush_bridge_database_engine == 'postgres' and matrix_rustpush_bridge_database_hostname == postgres_connection_hostname) else [])
    +
    ([{
      'name': matrix_mautrix_googlechat_database_name,
      'username': matrix_mautrix_googlechat_database_username,
@@ -4488,6 +4463,12 @@ matrix_client_element_container_labels_traefik_compression_middleware_name: "{{
 matrix_client_element_default_hs_url: "{{ matrix_homeserver_url }}"
 matrix_client_element_default_is_url: "{{ matrix_identity_server_url }}"
 # Use Scalar by default
 matrix_client_element_integrations_ui_url: "https://scalar.vector.im/"
 matrix_client_element_integrations_rest_url: "https://scalar.vector.im/api"
 matrix_client_element_integrations_widgets_urls: "{{ ['https://scalar.vector.im/api'] }}"
 matrix_client_element_integrations_jitsi_widget_url: "https://scalar.vector.im/api/widgets/jitsi.html"
 matrix_client_element_self_check_validate_certificates: "{{ matrix_playbook_ssl_enabled }}"
 matrix_client_element_registration_enabled: "{{ matrix_synapse_enable_registration }}"
@@ -4717,6 +4698,12 @@ matrix_client_schildichat_container_labels_traefik_tls_certResolver: "{{ traefik
 matrix_client_schildichat_default_hs_url: "{{ matrix_homeserver_url }}"
 matrix_client_schildichat_default_is_url: "{{ matrix_identity_server_url }}"
 # Use Scalar by default
 matrix_client_schildichat_integrations_ui_url: "https://scalar.vector.im/"
 matrix_client_schildichat_integrations_rest_url: "https://scalar.vector.im/api"
 matrix_client_schildichat_integrations_widgets_urls: "{{ ['https://scalar.vector.im/api'] }}"
 matrix_client_schildichat_integrations_jitsi_widget_url: "https://scalar.vector.im/api/widgets/jitsi.html"
 matrix_client_schildichat_self_check_validate_certificates: "{{ matrix_playbook_ssl_enabled }}"
 matrix_client_schildichat_registration_enabled: "{{ matrix_synapse_enable_registration }}"
@@ -4840,6 +4827,7 @@ matrix_synapse_container_labels_internal_client_synapse_admin_api_traefik_entryp
 matrix_synapse_container_labels_public_federation_api_traefik_hostname: "{{ matrix_server_fqn_matrix_federation }}"
 matrix_synapse_container_labels_public_federation_api_traefik_entrypoints: "{{ matrix_federation_traefik_entrypoint_name }}"
 matrix_synapse_container_labels_public_federation_api_traefik_tls: "{{ matrix_federation_traefik_entrypoint_tls }}"
 matrix_synapse_container_labels_public_federation_api_traefik_tls_certResolver: "{{ matrix_synapse_container_labels_traefik_tls_certResolver }}"  # noqa var-naming
 matrix_synapse_container_labels_public_metrics_middleware_basic_auth_enabled: "{{ matrix_metrics_exposure_http_basic_auth_enabled }}"
 matrix_synapse_container_labels_public_metrics_middleware_basic_auth_users: "{{ matrix_metrics_exposure_http_basic_auth_users }}"
@@ -4883,6 +4871,7 @@ matrix_synapse_metrics_proxying_path_prefix: "{{ matrix_metrics_exposure_path_pr
 matrix_synapse_email_enabled: "{{ exim_relay_enabled }}"
 matrix_synapse_email_smtp_host: "{{ exim_relay_identifier }}"
 matrix_synapse_email_smtp_port: 8025
 matrix_synapse_email_smtp_require_transport_security: false
 matrix_synapse_email_notif_from: "Matrix <{{ exim_relay_sender_address }}>"
 matrix_synapse_turn_uris: "{{ coturn_turn_uris if coturn_enabled else [] }}"
@@ -5137,11 +5126,6 @@ matrix_ketesa_config_asManagedUsers_auto: |
      '^@bluesky_[a-zA-Z0-9]+:'+(matrix_domain | regex_escape)+'$',
    ] if matrix_mautrix_bluesky_enabled else [])
    +
    ([
      '^@'+(matrix_rustpush_bridge_appservice_bot_username | default('') | regex_escape)+':'+(matrix_domain | regex_escape)+'$',
      '^@rustpush_[a-zA-Z0-9_.+-]+:'+(matrix_domain | regex_escape)+'$',
    ] if matrix_rustpush_bridge_enabled else [])
    +
    ([
      '^@'+(matrix_mautrix_discord_appservice_bot_username | default('') | regex_escape)+':'+(matrix_domain | regex_escape)+'$',
      '^@discord_[0-9]+:'+(matrix_domain | regex_escape)+'$',
@@ -5241,6 +5225,7 @@ matrix_synapse_usage_exporter_container_network: "{{ matrix_monitoring_container
 matrix_synapse_usage_exporter_container_additional_networks: "{{ [matrix_playbook_reverse_proxyable_services_additional_network] if matrix_playbook_reverse_proxyable_services_additional_network else [] }}"
 matrix_synapse_usage_exporter_container_labels_traefik_enabled: "{{ matrix_synapse_usage_exporter_proxying_enabled }}"
 matrix_synapse_usage_exporter_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"
 matrix_synapse_usage_exporter_container_labels_traefik_entrypoints: "{{ traefik_entrypoint_primary }}"
 matrix_synapse_usage_exporter_container_labels_traefik_tls_certResolver: "{{ traefik_certResolver_primary }}"
@@ -5586,6 +5571,76 @@ grafana_default_home_dashboard_path: |-
 #
 ######################################################################
 ######################################################################
 #
 # matrix-registration
 #
 ######################################################################
 matrix_registration_enabled: false
 matrix_registration_scheme: "{{ 'https' if matrix_playbook_ssl_enabled else 'http' }}"
 matrix_registration_hostname: "{{ matrix_server_fqn_matrix }}"
 matrix_registration_path_prefix: /matrix-registration
 matrix_registration_systemd_required_services_list_auto: |
  {{
    ([postgres_identifier ~ '.service'] if (postgres_enabled and matrix_registration_database_hostname == postgres_connection_hostname) else [])
  }}
 matrix_registration_container_image_registry_prefix_upstream: "{{ matrix_container_global_registry_prefix_override if matrix_container_global_registry_prefix_override else matrix_registration_container_image_registry_prefix_upstream_default }}"
 matrix_registration_container_image_self_build: "{{ matrix_architecture != 'amd64' }}"
 matrix_registration_container_http_host_bind_port: "{{ (matrix_playbook_service_host_bind_interface_prefix ~ '8767') if matrix_playbook_service_host_bind_interface_prefix else '' }}"
 matrix_registration_container_network: "{{ matrix_addons_container_network }}"
 matrix_registration_container_additional_networks_auto: |-
  {{
    (
      ([] if matrix_addons_homeserver_container_network == '' else [matrix_addons_homeserver_container_network])
      +
      ([postgres_container_network] if (postgres_enabled and matrix_registration_database_hostname == postgres_connection_hostname and matrix_registration_container_network != postgres_container_network) else [])
      +
      ([matrix_playbook_reverse_proxyable_services_additional_network] if (matrix_playbook_reverse_proxyable_services_additional_network and matrix_registration_container_labels_traefik_enabled) else [])
    ) | unique
  }}
 matrix_registration_container_labels_traefik_enabled: "{{ matrix_playbook_reverse_proxy_type in ['playbook-managed-traefik', 'other-traefik-container'] }}"
 matrix_registration_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"
 matrix_registration_container_labels_traefik_entrypoints: "{{ traefik_entrypoint_primary }}"
 matrix_registration_container_labels_traefik_tls_certResolver: "{{ traefik_certResolver_primary }}"
 matrix_registration_riot_instance: "{{ (('https://' if matrix_playbook_ssl_enabled else 'http://') + matrix_server_fqn_element) if matrix_client_element_enabled else 'https://element.io/app/' }}"
 matrix_registration_shared_secret: |-
  {{
    {
      'synapse': matrix_synapse_registration_shared_secret | default (''),
      'dendrite': matrix_dendrite_client_api_registration_shared_secret | default (''),
      'conduit': '',
      'continuwuity': '',
      'tuwunel': '',
    }[matrix_homeserver_implementation]
  }}
 matrix_registration_server_location: "{{ matrix_addons_homeserver_client_api_url }}"
 matrix_registration_api_validate_certs: "{{ matrix_playbook_ssl_enabled }}"
 # Postgres is the default, except if not using internal Postgres server
 matrix_registration_database_engine: "{{ 'postgres' if postgres_enabled else 'sqlite' }}"
 matrix_registration_database_hostname: "{{ postgres_connection_hostname if postgres_enabled else '' }}"
 matrix_registration_database_password: "{{ (matrix_homeserver_generic_secret_key + ':mx.registr.db') | hash('sha512') | to_uuid }}"
 ######################################################################
 #
 # /matrix-registration
 #
 ######################################################################
 ######################################################################
 #
 # matrix-dendrite
@@ -6019,24 +6074,6 @@ matrix_static_files_file_matrix_client_property_org_matrix_msc4143_rtc_foci_auto
    )
  }}
 # Advertise all enabled and exposed mautrix bridges for auto-discovery by tools like Mautrix Manager.
 # A bridge's public address is only reachable when the playbook attaches its Traefik labels and emits the exposure router,
 # so we gate on these in addition to the bridge being enabled.
 matrix_static_files_file_matrix_mautrix_property_fi_mau_bridges_auto: |-
  {{
    [
      matrix_mautrix_bluesky_appservice_public_address if (matrix_mautrix_bluesky_enabled and matrix_mautrix_bluesky_container_labels_traefik_enabled and matrix_mautrix_bluesky_container_labels_exposure_enabled) else '',
      matrix_mautrix_gmessages_bridge_public_address if (matrix_mautrix_gmessages_enabled and matrix_mautrix_gmessages_container_labels_traefik_enabled and matrix_mautrix_gmessages_container_labels_exposure_enabled) else '',
      matrix_mautrix_meta_instagram_bridge_public_address if (matrix_mautrix_meta_instagram_enabled and matrix_mautrix_meta_instagram_container_labels_traefik_enabled and matrix_mautrix_meta_instagram_container_labels_exposure_enabled) else '',
      matrix_mautrix_meta_messenger_bridge_public_address if (matrix_mautrix_meta_messenger_enabled and matrix_mautrix_meta_messenger_container_labels_traefik_enabled and matrix_mautrix_meta_messenger_container_labels_exposure_enabled) else '',
      matrix_mautrix_signal_bridge_public_address if (matrix_mautrix_signal_enabled and matrix_mautrix_signal_container_labels_traefik_enabled and matrix_mautrix_signal_container_labels_exposure_enabled) else '',
      matrix_mautrix_slack_bridge_public_address if (matrix_mautrix_slack_enabled and matrix_mautrix_slack_container_labels_traefik_enabled and matrix_mautrix_slack_container_labels_exposure_enabled) else '',
      matrix_mautrix_telegram_bridge_public_address if (matrix_mautrix_telegram_enabled and matrix_mautrix_telegram_container_labels_traefik_enabled and matrix_mautrix_telegram_container_labels_exposure_enabled) else '',
      matrix_mautrix_twitter_appservice_public_address if (matrix_mautrix_twitter_enabled and matrix_mautrix_twitter_container_labels_traefik_enabled and matrix_mautrix_twitter_container_labels_exposure_enabled) else '',
      matrix_mautrix_whatsapp_bridge_public_address if (matrix_mautrix_whatsapp_enabled and matrix_mautrix_whatsapp_container_labels_traefik_enabled and matrix_mautrix_whatsapp_container_labels_exposure_enabled) else '',
    ] | select | list
  }}
 matrix_static_files_file_matrix_server_property_m_server: "{{ matrix_server_fqn_matrix_federation }}:{{ matrix_federation_public_port }}"
 matrix_static_files_scheme: "{{ 'https' if matrix_playbook_ssl_enabled else 'http' }}"
@@ -6380,6 +6417,7 @@ matrix_livekit_jwt_service_enabled: "{{ matrix_rtc_enabled and livekit_server_en
 matrix_livekit_jwt_service_scheme: "{{ 'https' if matrix_playbook_ssl_enabled else 'http' }}"
 matrix_livekit_jwt_service_hostname: "{{ matrix_server_fqn_matrix }}"
 matrix_livekit_jwt_service_path_prefix: "/livekit-jwt-service"
 matrix_livekit_jwt_service_container_image_self_build: "{{ matrix_architecture not in ['amd64', 'arm64'] }}"
@@ -6403,6 +6441,8 @@ matrix_livekit_jwt_service_environment_variable_livekit_key: "{{ (matrix_homeser
 matrix_livekit_jwt_service_environment_variable_livekit_secret: "{{ (matrix_homeserver_generic_secret_key + ':lk.secret') | hash('sha512') | to_uuid }}"
 matrix_livekit_jwt_service_environment_variable_livekit_full_access_homeservers_list: ["{{ matrix_domain }}"]
 ########################################################################
 #                                                                      #
 # /matrix-livekit-jwt-service                                          #
@@ -1,24 +1,24 @@
 alabaster==1.0.0
 babel==2.18.0
-certifi==2026.6.17
+certifi==2026.4.22
 charset-normalizer==3.4.7
-click==8.4.2
+click==8.3.3
 docutils==0.22.4
-idna==3.18
+idna==3.13
 imagesize==2.0.0
 Jinja2==3.1.6
 linkify-it-py==2.1.0
 markdown-it-py==4.2.0
 MarkupSafe==3.0.3
-mdit-py-plugins==0.6.1
+mdit-py-plugins==0.6.0
 mdurl==0.1.2
-myst-parser==5.1.0
+myst-parser==5.0.0
 packaging==26.2
 Pygments==2.20.0
 PyYAML==6.0.3
-requests==2.34.2
+requests==2.33.1
 setuptools==82.0.1
-snowballstemmer==3.1.1
+snowballstemmer==3.0.1
 Sphinx==9.1.0
 sphinx-intl==2.3.2
 sphinx-markdown-builder==0.6.10
@@ -8,7 +8,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: matrix-docker-ansible-deploy \n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2026-06-29 17:11+0000\n"
+"POT-Creation-Date: 2026-05-07 11:16+0000\n"
 "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
 "Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
 "Language-Team: LANGUAGE <LL@li.org>\n"
@@ -41,7 +41,7 @@ msgid "🎯 Purpose"
 msgstr ""
 #: ../../../README.md:7
-msgid "This [Ansible](https://www.ansible.com/) playbook is meant to help you run your own [Matrix](http://matrix.org/) homeserver, along with the [various services](#-supported-services) related to that."
+msgid "This [Ansible](https://www.ansible.com/) playbook is meant to help you run your own [Matrix](http://matrix.org/) homeserver, along with the [various services](#supported-services) related to that."
 msgstr ""
 #: ../../../README.md:9
@@ -257,7 +257,7 @@ msgid "[Link](docs/configuring-playbook-client-cinny.md)"
 msgstr ""
 #: ../../../README.md:0
-msgid "[Sable](https://github.com/SableClient/Sable)"
+msgid "[Sable](https://github.com/7w1/sable)"
 msgstr ""
 #: ../../../README.md:0
@@ -424,6 +424,30 @@ msgstr ""
 msgid "[Link](docs/configuring-playbook-ldap-auth.md)"
 msgstr ""
 #: ../../../README.md:0
 msgid "[matrix-ldap-registration-proxy](https://gitlab.com/activism.international/matrix_ldap_registration_proxy) (advanced)"
 msgstr ""
 #: ../../../README.md:0
 msgid "Proxy that handles Matrix registration requests and forwards them to LDAP"
 msgstr ""
 #: ../../../README.md:0
 msgid "[Link](docs/configuring-playbook-matrix-ldap-registration-proxy.md)"
 msgstr ""
 #: ../../../README.md:0
 msgid "[matrix-registration](https://github.com/ZerataX/matrix-registration)"
 msgstr ""
 #: ../../../README.md:0
 msgid "Simple python application to have a token based Matrix registration"
 msgstr ""
 #: ../../../README.md:0
 msgid "[Link](docs/configuring-playbook-matrix-registration.md)"
 msgstr ""
 #: ../../../README.md:0
 msgid "[Matrix User Verification Service](https://github.com/matrix-org/matrix-user-verification-service)"
 msgstr ""
@@ -448,11 +472,11 @@ msgstr ""
 msgid "[Link](docs/configuring-playbook-synapse-simple-antispam.md)"
 msgstr ""
-#: ../../../README.md:98
+#: ../../../README.md:100
 msgid "File Storage"
 msgstr ""
-#: ../../../README.md:100
+#: ../../../README.md:102
 msgid "Use alternative file storage to the default `media_store` folder."
 msgstr ""
@@ -488,11 +512,11 @@ msgstr ""
 msgid "[Link](docs/configuring-playbook-matrix-media-repo.md)"
 msgstr ""
-#: ../../../README.md:108
+#: ../../../README.md:110
 msgid "Bridges"
 msgstr ""
-#: ../../../README.md:110
+#: ../../../README.md:112
 msgid "Bridges can be used to connect your Matrix installation with third-party communication networks."
 msgstr ""
@@ -568,18 +592,6 @@ msgstr ""
 msgid "[Link](docs/configuring-playbook-bridge-mautrix-wsproxy.md)"
 msgstr ""
 #: ../../../README.md:0
 msgid "[matrix-rustpush-bridge](https://github.com/jasonlaguidice/imessage)"
 msgstr ""
 #: ../../../README.md:0
 msgid "Bridge to [iMessage](https://support.apple.com/messages) via Apple Push Notification service"
 msgstr ""
 #: ../../../README.md:0
 msgid "[Link](docs/configuring-playbook-bridge-rustpush.md)"
 msgstr ""
 #: ../../../README.md:0
 msgid "[mautrix-bluesky](https://github.com/mautrix/bluesky)"
 msgstr ""
@@ -617,7 +629,7 @@ msgid "[Link](docs/configuring-playbook-bridge-mautrix-googlechat.md)"
 msgstr ""
 #: ../../../README.md:0
-msgid "[mautrix-meta](https://github.com/mautrix/meta)"
+msgid "[mautrix-meta](https://github.com/mautrix/instagram)"
 msgstr ""
 #: ../../../README.md:0
@@ -796,11 +808,11 @@ msgstr ""
 msgid "[Link](docs/configuring-playbook-bridge-postmoogle.md)"
 msgstr ""
-#: ../../../README.md:140
+#: ../../../README.md:141
 msgid "Bots"
 msgstr ""
-#: ../../../README.md:142
+#: ../../../README.md:143
 msgid "Bots provide various additional functionality to your installation."
 msgstr ""
@@ -900,11 +912,11 @@ msgstr ""
 msgid "[Link](docs/configuring-playbook-bot-buscarron.md)"
 msgstr ""
-#: ../../../README.md:155
+#: ../../../README.md:156
 msgid "Administration"
 msgstr ""
-#: ../../../README.md:157
+#: ../../../README.md:158
 msgid "Services that help you in administrating and monitoring your Matrix installation."
 msgstr ""
@@ -992,11 +1004,11 @@ msgstr ""
 msgid "[Link](docs/configuring-playbook-synapse-usage-exporter.md)"
 msgstr ""
-#: ../../../README.md:169
+#: ../../../README.md:170
 msgid "Misc"
 msgstr ""
-#: ../../../README.md:171
+#: ../../../README.md:172
 msgid "Various services that don't fit any other categories."
 msgstr ""
@@ -1120,54 +1132,54 @@ msgstr ""
 msgid "[Link](docs/configuring-playbook-element-call.md)"
 msgstr ""
-#: ../../../README.md:186
+#: ../../../README.md:187
 msgid "🆕 Changes"
 msgstr ""
-#: ../../../README.md:188
+#: ../../../README.md:189
 msgid "This playbook evolves over time, sometimes with backward-incompatible changes."
 msgstr ""
-#: ../../../README.md:190
+#: ../../../README.md:191
 msgid "When updating the playbook, refer to [the changelog](CHANGELOG.md) to catch up with what's new."
 msgstr ""
-#: ../../../README.md:192
+#: ../../../README.md:193
 msgid "🆘 Support"
 msgstr ""
-#: ../../../README.md:194
+#: ../../../README.md:195
 msgid "Matrix room: [#matrix-docker-ansible-deploy:devture.com](https://matrix.to/#/#matrix-docker-ansible-deploy:devture.com)"
 msgstr ""
-#: ../../../README.md:196
+#: ../../../README.md:197
 msgid "IRC channel: `#matrix-docker-ansible-deploy` on the [Libera Chat](https://libera.chat/) IRC network (irc.libera.chat:6697)"
 msgstr ""
-#: ../../../README.md:198
+#: ../../../README.md:199
 msgid "GitHub issues: [spantaleev/matrix-docker-ansible-deploy/issues](https://github.com/spantaleev/matrix-docker-ansible-deploy/issues)"
 msgstr ""
-#: ../../../README.md:200
+#: ../../../README.md:201
 msgid "🌐 Translation"
 msgstr ""
-#: ../../../README.md:202
+#: ../../../README.md:203
 msgid "See the [i18n/README.md](i18n/README.md) file for more information about translation."
 msgstr ""
-#: ../../../README.md:204
+#: ../../../README.md:205
 msgid "Translations are still work in progress."
 msgstr ""
-#: ../../../README.md:206
+#: ../../../README.md:207
 msgid "🤝 Related"
 msgstr ""
-#: ../../../README.md:208
+#: ../../../README.md:209
 msgid "You may also be interested in [mash-playbook](https://github.com/mother-of-all-self-hosting/mash-playbook) - another Ansible playbook for self-hosting non-Matrix services (see its [List of supported services](https://github.com/mother-of-all-self-hosting/mash-playbook/blob/main/docs/supported-services.md))."
 msgstr ""
-#: ../../../README.md:210
+#: ../../../README.md:211
 msgid "mash-playbook also makes use of [Traefik](./docs/configuring-playbook-traefik.md) as its reverse-proxy, so with minor [interoperability adjustments](https://github.com/mother-of-all-self-hosting/mash-playbook/blob/main/docs/interoperability.md), you can make matrix-docker-ansible-deploy and mash-playbook co-exist and host Matrix and non-Matrix services on the same server."
 msgstr ""
@@ -8,7 +8,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: matrix-docker-ansible-deploy \n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2026-06-29 17:11+0000\n"
+"POT-Creation-Date: 2026-02-13 10:32+0000\n"
 "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
 "Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
 "Language-Team: LANGUAGE <LL@li.org>\n"
@@ -133,41 +133,37 @@ msgid "[Alternative architectures](alternative-architectures.md)"
 msgstr ""
 #: ../../../docs/README.md:79
 msgid "[Configuring Synology DSM](configuring-playbook-synology.md)"
 msgstr ""
 #: ../../../docs/README.md:81
 msgid "[Container images used by the playbook](container-images.md)"
 msgstr ""
-#: ../../../docs/README.md:83
+#: ../../../docs/README.md:81
 msgid "[Obtaining an Access Token](obtaining-access-tokens.md)"
 msgstr ""
-#: ../../../docs/README.md:85
+#: ../../../docs/README.md:83
 msgid "[Playbook tags](playbook-tags.md)"
 msgstr ""
-#: ../../../docs/README.md:87
+#: ../../../docs/README.md:85
 msgid "[Registering users](registering-users.md)"
 msgstr ""
-#: ../../../docs/README.md:89
+#: ../../../docs/README.md:87
 msgid "[Running `just` commands](just.md)"
 msgstr ""
-#: ../../../docs/README.md:91
+#: ../../../docs/README.md:89
 msgid "[Self-building](self-building.md)"
 msgstr ""
-#: ../../../docs/README.md:93
+#: ../../../docs/README.md:91
 msgid "[Uninstalling](uninstalling.md)"
 msgstr ""
-#: ../../../docs/README.md:95
+#: ../../../docs/README.md:93
 msgid "[Updating users passwords](updating-users-passwords.md)"
 msgstr ""
-#: ../../../docs/README.md:97
+#: ../../../docs/README.md:95
 msgid "[Using Ansible for the playbook](ansible.md)"
 msgstr ""
@@ -8,7 +8,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: matrix-docker-ansible-deploy \n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2026-05-19 07:40+0000\n"
+"POT-Creation-Date: 2026-02-13 10:32+0000\n"
 "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
 "Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
 "Language-Team: LANGUAGE <LL@li.org>\n"
@@ -48,8 +48,8 @@ msgstr ""
 msgid "If your distro ships with an Ansible version older than this, you may run into issues. Consider [Upgrading Ansible](#upgrading-ansible) or [using Ansible via Docker](#using-ansible-via-docker)."
 msgstr ""
-#: ../../../docs/ansible.md:28
+#: ../../../docs/ansible.md:27
-msgid "One reason for the version requirement being as such is that the playbook by default installs Docker for you using [this Docker role](https://github.com/geerlingguy/ansible-role-docker) which [has a hard requirement on Ansible v2.15.1](https://github.com/geerlingguy/ansible-role-docker/commit/7f44a1d9ad8132819ea9852918bca5dab8757cd0). If you install Docker yourself another way, you can tell the playbook to skip running this role (by adding `matrix_playbook_docker_installation_enabled: false` to your `vars.yml` configuration). It may then be possible to get the playbook running on an older version of Ansible. Still, this is a complication and your mileage may vary. We recommend [upgrading Ansible](#upgrading-ansible) instead of going into uncharted territory."
+msgid "[!WARNING] One reason for the version requirement being as such is that the playbook by default installs Docker for you using [this Docker role](https://github.com/geerlingguy/ansible-role-docker) which [has a hard requirement on Ansible v2.15.1](https://github.com/geerlingguy/ansible-role-docker/commit/7f44a1d9ad8132819ea9852918bca5dab8757cd0). If you install Docker yourself another way, you can tell the playbook to skip running this role (by adding `matrix_playbook_docker_installation_enabled: false` to your `vars.yml` configuration). It may then be possible to get the playbook running on an older version of Ansible. Still, this is a complication and your mileage may vary. We recommend [upgrading Ansible](#upgrading-ansible) instead of going into uncharted territory."
 msgstr ""
 #: ../../../docs/ansible.md:30
@@ -8,7 +8,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: matrix-docker-ansible-deploy \n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2026-05-19 07:40+0000\n"
+"POT-Creation-Date: 2026-02-13 10:32+0000\n"
 "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
 "Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
 "Language-Team: LANGUAGE <LL@li.org>\n"
@@ -96,8 +96,8 @@ msgstr ""
 msgid "traffic destined for the IPv6 address of the server will be forwarded to the containers that handle (and publish) that specific port"
 msgstr ""
-#: ../../../docs/configuring-ipv6.md:60
+#: ../../../docs/configuring-ipv6.md:59
-msgid "Without enabling this and assuming you have IPv6 `AAAA` DNS records pointing to the server (see [Configuring DNS records for IPv6](#configuring-dns-records-for-ipv6)), IPv6 traffic will still be handled, but NAT64 will be used instead of NAT66. As such, containers will only have an IPv4 address and all IPv6 traffic that reaches them will seem to originate from a local IP. Containers also won't be able to make outgoing (even cross-container) IPv6 requests."
+msgid "[!WARNING] Without enabling this and assuming you have IPv6 `AAAA` DNS records pointing to the server (see [Configuring DNS records for IPv6](#configuring-dns-records-for-ipv6)), IPv6 traffic will still be handled, but NAT64 will be used instead of NAT66. As such, containers will only have an IPv4 address and all IPv6 traffic that reaches them will seem to originate from a local IP. Containers also won't be able to make outgoing (even cross-container) IPv6 requests."
 msgstr ""
 #: ../../../docs/configuring-ipv6.md:63
@@ -8,7 +8,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: matrix-docker-ansible-deploy \n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2026-05-19 07:40+0000\n"
+"POT-Creation-Date: 2026-02-13 10:32+0000\n"
 "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
 "Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
 "Language-Team: LANGUAGE <LL@li.org>\n"
@@ -64,8 +64,8 @@ msgstr ""
 msgid "The bot requires an access token to be able to connect to your homeserver. Refer to the documentation on [how to obtain an access token](obtaining-access-tokens.md)."
 msgstr ""
-#: ../../../docs/configuring-playbook-alertmanager-receiver.md:38
+#: ../../../docs/configuring-playbook-alertmanager-receiver.md:37
-msgid "Access tokens are sensitive information. Do not include them in any bug reports, messages, or logs. Do not share the access token with anyone."
+msgid "[!WARNING] Access tokens are sensitive information. Do not include them in any bug reports, messages, or logs. Do not share the access token with anyone."
 msgstr ""
 #: ../../../docs/configuring-playbook-alertmanager-receiver.md:40
@@ -8,7 +8,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: matrix-docker-ansible-deploy \n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2026-05-19 07:40+0000\n"
+"POT-Creation-Date: 2026-05-07 14:00+0000\n"
 "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
 "Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
 "Language-Team: LANGUAGE <LL@li.org>\n"
@@ -96,8 +96,8 @@ msgstr ""
 msgid "This admin room is used to control who has access to your D4A deployment. The room stores this data in the control room state, so your bot must have sufficient power level to send custom state events. This is `50` by default (moderator, as Element clients call this power level)."
 msgstr ""
-#: ../../../docs/configuring-playbook-appservice-draupnir-for-all.md:50
+#: ../../../docs/configuring-playbook-appservice-draupnir-for-all.md:49
-msgid "Anyone in this room can control the bot so it is important that you only invite trusted users to this room."
+msgid "[!WARNING] Anyone in this room can control the bot so it is important that you only invite trusted users to this room."
 msgstr ""
 #: ../../../docs/configuring-playbook-appservice-draupnir-for-all.md:52
@@ -8,7 +8,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: matrix-docker-ansible-deploy \n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2026-06-29 17:11+0000\n"
+"POT-Creation-Date: 2026-04-03 11:56+0100\n"
 "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
 "Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
 "Language-Team: LANGUAGE <LL@li.org>\n"
@@ -25,7 +25,7 @@ msgid "🤖 [baibot](https://github.com/etkecc/baibot) (pronounced bye-bot) is a
 msgstr ""
 #: ../../../docs/configuring-playbook-bot-baibot.md:17
-msgid "It supports many [☁️ providers](https://github.com/etkecc/baibot/blob/main/docs/providers.md), including the privacy-first [Venice](#venice) we recommend, [OpenAI](https://openai.com/)'s [ChatGPT](https://openai.com/blog/chatgpt/) models, and more."
+msgid "It supports [OpenAI](https://openai.com/)'s [ChatGPT](https://openai.com/blog/chatgpt/) models, as many well as other [☁️ providers](https://github.com/etkecc/baibot/blob/main/docs/providers.md)."
 msgstr ""
 #: ../../../docs/configuring-playbook-bot-baibot.md:19
@@ -183,321 +183,290 @@ msgid "Depending on your propensity for [GitOps](https://en.wikipedia.org/wiki/D
 msgstr ""
 #: ../../../docs/configuring-playbook-bot-baibot.md:162
-msgid "Before proceeding, we recommend reading the upstream documentation on [How to choose a provider](https://github.com/etkecc/baibot/blob/main/docs/providers.md#how-to-choose-a-provider) for a side-by-side of what each one can do. In short: we recommend [Venice](#venice), the most capable provider baibot supports and the only one that keeps no logs and trains on nothing. If you'd rather start with the most widely-used option, [OpenAI](#openai) is a solid, well-supported choice too."
+msgid "Before proceeding, we recommend reading the upstream documentation on [How to choose a provider](https://github.com/etkecc/baibot/blob/main/docs/providers.md#how-to-choose-a-provider). In short, it's probably best to go with [OpenAI](#openai)."
 msgstr ""
 #: ../../../docs/configuring-playbook-bot-baibot.md:164
 msgid "Venice"
 msgstr ""
 #: ../../../docs/configuring-playbook-bot-baibot.md:166
 msgid "[Venice](https://venice.ai/chat?ref=kpXDe6) _(ref link with a $10 bonus for you)_ is the provider we recommend. It's the most capable one baibot supports, and the only one that pairs that full feature set with real privacy: inference runs on Venice's own GPUs or on zero-data-retention partner hardware, so your prompts and replies are stored nowhere and never used for training. It serves both frontier proprietary models and the latest open-source ones."
 msgstr ""
 #: ../../../docs/configuring-playbook-bot-baibot.md:168
 msgid "Venice also leaves the content policy to you instead of imposing its own. Its models answer without the reflexive refusals some hosted services apply, and both text and image generation can handle adult or otherwise sensitive subjects when you need them to. Image generation ships a `safe_mode` that blurs adult content by default; you can turn it off (see the sample config). This pairs naturally with the privacy above: a bot you can speak to candidly, that keeps nothing."
 msgstr ""
 #: ../../../docs/configuring-playbook-bot-baibot.md:170
 msgid "Unlike the [OpenAI Compatible](#openai-compatible) provider (which can also point at Venice, but drops images and can't reach its audio or native image endpoints), this is a first-class integration that exposes Venice's full parameter set: text-generation with vision, file inputs, prompt caching and native web search, plus speech-to-text, text-to-speech, and image generation and editing."
 msgstr ""
 #: ../../../docs/configuring-playbook-bot-baibot.md:172
 msgid "You can statically-define a single [🤖 agent](https://github.com/etkecc/baibot/blob/main/docs/agents.md) instance powered by the [Venice provider](https://github.com/etkecc/baibot/blob/main/docs/providers.md#venice) with the help of the playbook's preset variables."
 msgstr ""
 #: ../../../docs/configuring-playbook-bot-baibot.md:174
 #: ../../../docs/configuring-playbook-bot-baibot.md:199
 #: ../../../docs/configuring-playbook-bot-baibot.md:223
 #: ../../../docs/configuring-playbook-bot-baibot.md:254
 #: ../../../docs/configuring-playbook-bot-baibot.md:282
 msgid "Here's an example **addition** to your `vars.yml` file:"
 msgstr ""
 #: ../../../docs/configuring-playbook-bot-baibot.md:187
 msgid "Because this is a [statically](https://github.com/etkecc/baibot/blob/main/docs/configuration/README.md#static-configuration)-defined agent, it will be given a `static/` ID prefix and will be named `static/venice`."
 msgstr ""
 #: ../../../docs/configuring-playbook-bot-baibot.md:189
 msgid "Every Venice knob (sampling, caching, reasoning, web-search behavior, voice and image controls) has a matching `matrix_bot_baibot_config_agents_static_definitions_venice_config_*` variable. The [fully-commented sample config](https://github.com/etkecc/baibot/blob/main/docs/sample-provider-configs/venice.yml) explains every one of them."
 msgstr ""
 #: ../../../docs/configuring-playbook-bot-baibot.md:191
 #: ../../../docs/configuring-playbook-bot-baibot.md:215
 #: ../../../docs/configuring-playbook-bot-baibot.md:246
 #: ../../../docs/configuring-playbook-bot-baibot.md:272
 #: ../../../docs/configuring-playbook-bot-baibot.md:306
 msgid "If you'd like to use more than one model, take a look at the [Configuring additional agents (without a preset)](#configuring-additional-agents-without-a-preset) section below."
 msgstr ""
 #: ../../../docs/configuring-playbook-bot-baibot.md:193
 #: ../../../docs/configuring-playbook-bot-baibot.md:217
 #: ../../../docs/configuring-playbook-bot-baibot.md:248
 #: ../../../docs/configuring-playbook-bot-baibot.md:274
 #: ../../../docs/configuring-playbook-bot-baibot.md:308
 msgid "💡 You may also wish to use this new agent for [🤝 Configuring initial default handlers](#-configuring-initial-default-handlers)."
 msgstr ""
 #: ../../../docs/configuring-playbook-bot-baibot.md:195
 msgid "Anthropic"
 msgstr ""
-#: ../../../docs/configuring-playbook-bot-baibot.md:197
+#: ../../../docs/configuring-playbook-bot-baibot.md:166
 msgid "You can statically-define a single [🤖 agent](https://github.com/etkecc/baibot/blob/main/docs/agents.md) instance powered by the [Anthropic provider](https://github.com/etkecc/baibot/blob/main/docs/providers.md#anthropic) with the help of the playbook's preset variables."
 msgstr ""
-#: ../../../docs/configuring-playbook-bot-baibot.md:219
+#: ../../../docs/configuring-playbook-bot-baibot.md:168
 #: ../../../docs/configuring-playbook-bot-baibot.md:192
 #: ../../../docs/configuring-playbook-bot-baibot.md:223
 #: ../../../docs/configuring-playbook-bot-baibot.md:251
 msgid "Here's an example **addition** to your `vars.yml` file:"
 msgstr ""
 #: ../../../docs/configuring-playbook-bot-baibot.md:184
 #: ../../../docs/configuring-playbook-bot-baibot.md:215
 #: ../../../docs/configuring-playbook-bot-baibot.md:241
 #: ../../../docs/configuring-playbook-bot-baibot.md:275
 msgid "If you'd like to use more than one model, take a look at the [Configuring additional agents (without a preset)](#configuring-additional-agents-without-a-preset) section below."
 msgstr ""
 #: ../../../docs/configuring-playbook-bot-baibot.md:186
 #: ../../../docs/configuring-playbook-bot-baibot.md:217
 #: ../../../docs/configuring-playbook-bot-baibot.md:243
 #: ../../../docs/configuring-playbook-bot-baibot.md:277
 msgid "💡 You may also wish to use this new agent for [🤝 Configuring initial default handlers](#-configuring-initial-default-handlers)."
 msgstr ""
 #: ../../../docs/configuring-playbook-bot-baibot.md:188
 msgid "Groq"
 msgstr ""
-#: ../../../docs/configuring-playbook-bot-baibot.md:221
+#: ../../../docs/configuring-playbook-bot-baibot.md:190
 msgid "You can statically-define a single [🤖 agent](https://github.com/etkecc/baibot/blob/main/docs/agents.md) instance powered by the [Groq provider](https://github.com/etkecc/baibot/blob/main/docs/providers.md#groq) with the help of the playbook's preset variables."
 msgstr ""
-#: ../../../docs/configuring-playbook-bot-baibot.md:244
+#: ../../../docs/configuring-playbook-bot-baibot.md:213
 msgid "Because this is a [statically](https://github.com/etkecc/baibot/blob/main/docs/configuration/README.md#static-configuration)-defined agent, it will be given a `static/` ID prefix and will be named `static/groq`."
 msgstr ""
-#: ../../../docs/configuring-playbook-bot-baibot.md:250
+#: ../../../docs/configuring-playbook-bot-baibot.md:219
 msgid "Mistral"
 msgstr ""
-#: ../../../docs/configuring-playbook-bot-baibot.md:252
+#: ../../../docs/configuring-playbook-bot-baibot.md:221
 msgid "You can statically-define a single [🤖 agent](https://github.com/etkecc/baibot/blob/main/docs/agents.md) instance powered by the [🇫🇷 Mistral provider](https://github.com/etkecc/baibot/blob/main/docs/providers.md#mistral) with the help of the playbook's preset variables."
 msgstr ""
-#: ../../../docs/configuring-playbook-bot-baibot.md:270
+#: ../../../docs/configuring-playbook-bot-baibot.md:239
 msgid "Because this is a [statically](https://github.com/etkecc/baibot/blob/main/docs/configuration/README.md#static-configuration)-defined agent, it will be given a `static/` ID prefix and will be named `static/mistral`."
 msgstr ""
-#: ../../../docs/configuring-playbook-bot-baibot.md:276
+#: ../../../docs/configuring-playbook-bot-baibot.md:245
 msgid "OpenAI"
 msgstr ""
-#: ../../../docs/configuring-playbook-bot-baibot.md:278
+#: ../../../docs/configuring-playbook-bot-baibot.md:247
 msgid "You can statically-define a single [🤖 agent](https://github.com/etkecc/baibot/blob/main/docs/agents.md) instance powered by the [OpenAI provider](https://github.com/etkecc/baibot/blob/main/docs/providers.md#openai) with the help of the playbook's preset variables."
 msgstr ""
-#: ../../../docs/configuring-playbook-bot-baibot.md:280
+#: ../../../docs/configuring-playbook-bot-baibot.md:249
 msgid "The OpenAI provider is **only meant to be used with OpenAI's official API** and compatibility with other services (which do not fully adhere to the OpenAI API spec completely) is limited. **If you're targeting an OpenAI-compatible service**, use the [OpenAI Compatible](#openai-compatible) provider instead."
 msgstr ""
-#: ../../../docs/configuring-playbook-bot-baibot.md:304
+#: ../../../docs/configuring-playbook-bot-baibot.md:273
 msgid "Because this is a [statically](https://github.com/etkecc/baibot/blob/main/docs/configuration/README.md#static-configuration)-defined agent, it will be given a `static/` ID prefix and will be named `static/openai`."
 msgstr ""
-#: ../../../docs/configuring-playbook-bot-baibot.md:310
+#: ../../../docs/configuring-playbook-bot-baibot.md:279
 msgid "OpenAI Compatible"
 msgstr ""
-#: ../../../docs/configuring-playbook-bot-baibot.md:312
+#: ../../../docs/configuring-playbook-bot-baibot.md:281
 msgid "You can statically-define a single [🤖 agent](https://github.com/etkecc/baibot/blob/main/docs/agents.md) instance powered by the [OpenAI Compatible provider](https://github.com/etkecc/baibot/blob/main/docs/providers.md#openai-compatible) with the help of the playbook's preset variables."
 msgstr ""
-#: ../../../docs/configuring-playbook-bot-baibot.md:314
+#: ../../../docs/configuring-playbook-bot-baibot.md:283
 msgid "This provider allows you to use OpenAI-compatible API services like [OpenRouter](https://github.com/etkecc/baibot/blob/main/docs/providers.md#openrouter), [Together AI](https://github.com/etkecc/baibot/blob/main/docs/providers.md#together-ai), etc."
 msgstr ""
-#: ../../../docs/configuring-playbook-bot-baibot.md:316
+#: ../../../docs/configuring-playbook-bot-baibot.md:285
 msgid "Some of these popular services already have **shortcut** providers (see [supported providers](https://github.com/etkecc/baibot/blob/main/docs/providers.md#supported-providers) leading to this one behind the scenes — this make it easier to get started."
 msgstr ""
-#: ../../../docs/configuring-playbook-bot-baibot.md:318
+#: ../../../docs/configuring-playbook-bot-baibot.md:287
 msgid "As of this moment, the playbook does not include presets for any of these services, so you'll need to [Configuring additional agents (without a preset)](#configuring-additional-agents-without-a-preset)."
 msgstr ""
-#: ../../../docs/configuring-playbook-bot-baibot.md:320
+#: ../../../docs/configuring-playbook-bot-baibot.md:289
 msgid "Configuring additional agents (without a preset)"
 msgstr ""
-#: ../../../docs/configuring-playbook-bot-baibot.md:322
+#: ../../../docs/configuring-playbook-bot-baibot.md:291
 msgid "The Ansible role may be lacking preset variables for some [☁️ provider](https://github.com/etkecc/baibot/blob/main/docs/providers.md), or you may wish to statically-define an agent on the same provider twice (or more) with different configuration."
 msgstr ""
-#: ../../../docs/configuring-playbook-bot-baibot.md:324
+#: ../../../docs/configuring-playbook-bot-baibot.md:293
 msgid "It's possible to inject your own agent configuration using the `matrix_bot_baibot_config_agents_static_definitions_custom` Ansible variable."
 msgstr ""
-#: ../../../docs/configuring-playbook-bot-baibot.md:326
+#: ../../../docs/configuring-playbook-bot-baibot.md:295
 msgid "You can also define providers at runtime, by chatting with the bot, so using Ansible is not a requirement."
 msgstr ""
-#: ../../../docs/configuring-playbook-bot-baibot.md:328
+#: ../../../docs/configuring-playbook-bot-baibot.md:297
 msgid "Below is an an **example** demonstrating **statically-defining agents via Ansible without using presets**:"
 msgstr ""
-#: ../../../docs/configuring-playbook-bot-baibot.md:367
+#: ../../../docs/configuring-playbook-bot-baibot.md:336
 msgid "Because these are [statically](https://github.com/etkecc/baibot/blob/main/docs/configuration/README.md#static-configuration)-defined agents, they will be given a `static/` ID prefix and will be named `static/my-openai-gpt-3.5-turbo-agent` and `static/my-ollama-agent`, respectively."
 msgstr ""
-#: ../../../docs/configuring-playbook-bot-baibot.md:369
+#: ../../../docs/configuring-playbook-bot-baibot.md:338
 msgid "💡 To figure out what to put in the `config` section, refer to the [☁️ provider](https://github.com/etkecc/baibot/blob/main/docs/providers.md) page, which contains **sample configuration YAML for each provider**."
 msgstr ""
-#: ../../../docs/configuring-playbook-bot-baibot.md:371
+#: ../../../docs/configuring-playbook-bot-baibot.md:340
 msgid "As with any [🤖 agent](https://github.com/etkecc/baibot/blob/main/docs/agents.md), defining them means they exist. To actually make use of them, they need to be configured as handlers globally or in a specific room — see [Mixing & matching models](https://github.com/etkecc/baibot/blob/main/docs/features.md#mixing--matching-models)."
 msgstr ""
-#: ../../../docs/configuring-playbook-bot-baibot.md:373
+#: ../../../docs/configuring-playbook-bot-baibot.md:342
 msgid "💡 You may also wish to use these new agents for [🤝 Configuring initial default handlers](#-configuring-initial-default-handlers)."
 msgstr ""
-#: ../../../docs/configuring-playbook-bot-baibot.md:375
+#: ../../../docs/configuring-playbook-bot-baibot.md:344
 msgid "🤝 Configuring initial default handlers"
 msgstr ""
-#: ../../../docs/configuring-playbook-bot-baibot.md:377
+#: ../../../docs/configuring-playbook-bot-baibot.md:346
 msgid "This section is only useful if you're [🤖 Configuring agents via Ansible](#-configuring-agents-via-ansible), as it lets you put these agents to use as soon as the bot starts (by adjusting the bot's **initial global configuration**)."
 msgstr ""
-#: ../../../docs/configuring-playbook-bot-baibot.md:379
+#: ../../../docs/configuring-playbook-bot-baibot.md:348
 msgid "If you're not configuring agents via Ansible, you can skip this section."
 msgstr ""
-#: ../../../docs/configuring-playbook-bot-baibot.md:381
+#: ../../../docs/configuring-playbook-bot-baibot.md:350
 msgid "This section is only useful the first time around. **Once initially configured the global configuration cannot be managed Ansible**, but only via bot commands."
 msgstr ""
-#: ../../../docs/configuring-playbook-bot-baibot.md:383
+#: ../../../docs/configuring-playbook-bot-baibot.md:352
 msgid "baibot supports [various purposes](https://github.com/etkecc/baibot/blob/main/docs/features.md):"
 msgstr ""
-#: ../../../docs/configuring-playbook-bot-baibot.md:385
+#: ../../../docs/configuring-playbook-bot-baibot.md:354
 msgid "[💬 text-generation](https://github.com/etkecc/baibot/blob/main/docs/features.md#-text-generation): communicating with you via text"
 msgstr ""
-#: ../../../docs/configuring-playbook-bot-baibot.md:387
+#: ../../../docs/configuring-playbook-bot-baibot.md:356
 msgid "[🦻 speech-to-text](https://github.com/etkecc/baibot/blob/main/docs/features.md#-speech-to-text): turning your voice messages into text"
 msgstr ""
-#: ../../../docs/configuring-playbook-bot-baibot.md:389
+#: ../../../docs/configuring-playbook-bot-baibot.md:358
 msgid "[🗣️ text-to-speech](https://github.com/etkecc/baibot/blob/main/docs/features.md#-text-to-speech): turning bot or users text messages into voice messages"
 msgstr ""
-#: ../../../docs/configuring-playbook-bot-baibot.md:391
+#: ../../../docs/configuring-playbook-bot-baibot.md:360
 msgid "[🖌️ image-generation](https://github.com/etkecc/baibot/blob/main/docs/features.md#-image-generation): generating images based on instructions"
 msgstr ""
-#: ../../../docs/configuring-playbook-bot-baibot.md:393
+#: ../../../docs/configuring-playbook-bot-baibot.md:362
 msgid "❓ catch-all: special purposes, indicating use as a fallback (when no specific handler is configured)"
 msgstr ""
-#: ../../../docs/configuring-playbook-bot-baibot.md:395
+#: ../../../docs/configuring-playbook-bot-baibot.md:364
 msgid "[Mixing & matching models](https://github.com/etkecc/baibot/blob/main/docs/features.md#mixing--matching-models) is made possible by the bot's ability to have different [🤝 handlers](https://github.com/etkecc/baibot/blob/main/docs/configuration/handlers.md) configured for different purposes."
 msgstr ""
-#: ../../../docs/configuring-playbook-bot-baibot.md:397
+#: ../../../docs/configuring-playbook-bot-baibot.md:366
 msgid "This configuration can be done as a global fallback, or per-room. Both of these [🛠️ configurations](https://github.com/etkecc/baibot/blob/main/docs/configuration/README.md) are managed at runtime (viat chat), but **the global configuration can have some initial defaults configured via Ansible**."
 msgstr ""
-#: ../../../docs/configuring-playbook-bot-baibot.md:399
+#: ../../../docs/configuring-playbook-bot-baibot.md:368
 msgid "You can configure the **initial values** for these via Ansible, via the `matrix_bot_baibot_config_initial_global_config_handler_*` variables."
 msgstr ""
-#: ../../../docs/configuring-playbook-bot-baibot.md:401
+#: ../../../docs/configuring-playbook-bot-baibot.md:370
 msgid "Example **additional** `vars.yml` configuration:"
 msgstr ""
-#: ../../../docs/configuring-playbook-bot-baibot.md:418
+#: ../../../docs/configuring-playbook-bot-baibot.md:387
 msgid "**Note**: these are initial defaults for the bot's global configuration. As such, changing any of these values subsequently has no effect on the bot's behavior. **Once initially configured the global configuration cannot be managed Ansible**, but only via bot commands."
 msgstr ""
-#: ../../../docs/configuring-playbook-bot-baibot.md:420
+#: ../../../docs/configuring-playbook-bot-baibot.md:389
 msgid "Extending the configuration"
 msgstr ""
-#: ../../../docs/configuring-playbook-bot-baibot.md:422
+#: ../../../docs/configuring-playbook-bot-baibot.md:391
 msgid "There are some additional things you may wish to configure about the bot."
 msgstr ""
-#: ../../../docs/configuring-playbook-bot-baibot.md:424
+#: ../../../docs/configuring-playbook-bot-baibot.md:393
 msgid "Take a look at:"
 msgstr ""
-#: ../../../docs/configuring-playbook-bot-baibot.md:426
+#: ../../../docs/configuring-playbook-bot-baibot.md:395
 msgid "`roles/custom/matrix-bot-baibot/defaults/main.yml` for some variables that you can customize via your `vars.yml` file"
 msgstr ""
-#: ../../../docs/configuring-playbook-bot-baibot.md:427
+#: ../../../docs/configuring-playbook-bot-baibot.md:396
 msgid "`roles/custom/matrix-bot-baibot/templates/config.yaml.j2` for the bot's default configuration. You can override settings (even those that don't have dedicated playbook variables) using the `matrix_bot_baibot_configuration_extension_yaml` variable"
 msgstr ""
-#: ../../../docs/configuring-playbook-bot-baibot.md:429
+#: ../../../docs/configuring-playbook-bot-baibot.md:398
 msgid "Installing"
 msgstr ""
-#: ../../../docs/configuring-playbook-bot-baibot.md:431
+#: ../../../docs/configuring-playbook-bot-baibot.md:400
 msgid "After configuring the playbook, run it with [playbook tags](playbook-tags.md) as below:"
 msgstr ""
-#: ../../../docs/configuring-playbook-bot-baibot.md:438
+#: ../../../docs/configuring-playbook-bot-baibot.md:407
 msgid "**Notes**:"
 msgstr ""
-#: ../../../docs/configuring-playbook-bot-baibot.md:440
+#: ../../../docs/configuring-playbook-bot-baibot.md:409
 msgid "The `ensure-matrix-users-created` playbook tag makes the playbook automatically create the bot's user account when password authentication is used."
 msgstr ""
-#: ../../../docs/configuring-playbook-bot-baibot.md:442
+#: ../../../docs/configuring-playbook-bot-baibot.md:411
 msgid "If you're using access-token authentication, the bot account must already exist and the configured token + device ID must match that account. This mode is mainly for MAS/OIDC setups where password-based bot login is not suitable."
 msgstr ""
-#: ../../../docs/configuring-playbook-bot-baibot.md:444
+#: ../../../docs/configuring-playbook-bot-baibot.md:413
 msgid "The shortcut commands with the [`just` program](just.md) are also available: `just install-all` or `just setup-all`"
 msgstr ""
-#: ../../../docs/configuring-playbook-bot-baibot.md:446
+#: ../../../docs/configuring-playbook-bot-baibot.md:415
 msgid "`just install-all` is useful for maintaining your setup quickly ([2x-5x faster](../CHANGELOG.md#2x-5x-performance-improvements-in-playbook-runtime) than `just setup-all`) when its components remain unchanged. If you adjust your `vars.yml` to remove other components, you'd need to run `just setup-all`, or these components will still remain installed."
 msgstr ""
-#: ../../../docs/configuring-playbook-bot-baibot.md:448
+#: ../../../docs/configuring-playbook-bot-baibot.md:417
 msgid "If you change the bot password (`matrix_bot_baibot_config_user_password` in your `vars.yml` file) subsequently, the bot user's credentials on the homeserver won't be updated automatically. If you'd like to change the bot user's password, use a tool like [Ketesa](configuring-playbook-ketesa.md) to change it, and then update `matrix_bot_baibot_config_user_password` to let the bot know its new password. (This note applies to password authentication mode.)"
 msgstr ""
-#: ../../../docs/configuring-playbook-bot-baibot.md:450
+#: ../../../docs/configuring-playbook-bot-baibot.md:419
 msgid "Usage"
 msgstr ""
-#: ../../../docs/configuring-playbook-bot-baibot.md:452
+#: ../../../docs/configuring-playbook-bot-baibot.md:421
 msgid "To use the bot, invite it to any existing Matrix room (`/invite @baibot:example.com` where `example.com` is your base domain, not the `matrix.` domain)."
 msgstr ""
-#: ../../../docs/configuring-playbook-bot-baibot.md:454
+#: ../../../docs/configuring-playbook-bot-baibot.md:423
 msgid "If you're an allowed bot [👥 user](https://github.com/etkecc/baibot/blob/main/docs/access.md#user) (see [👥 Initial users configuration](#-initial-users-configuration)), the bot will accept your invitation and join the room."
 msgstr ""
-#: ../../../docs/configuring-playbook-bot-baibot.md:456
+#: ../../../docs/configuring-playbook-bot-baibot.md:425
 msgid "After joining, the bot will introduce itself and show information about the [✨ features](https://github.com/etkecc/baibot/blob/main/docs/features.md) that are enabled for it."
 msgstr ""
-#: ../../../docs/configuring-playbook-bot-baibot.md:458
+#: ../../../docs/configuring-playbook-bot-baibot.md:427
 msgid "If you've [🤖 configured one or more agents via Ansible](#-configuring-agents-via-ansible) and have [🤝 configured initial default handlers](#configuring-initial-default-handlers), the bot will immediately be able to make use of these agents for this new room. Otherwise, you will need to configure agents and/or handlers via chat commands."
 msgstr ""
-#: ../../../docs/configuring-playbook-bot-baibot.md:460
+#: ../../../docs/configuring-playbook-bot-baibot.md:429
 msgid "Send `!bai help` to the bot in the room to see the available commands."
 msgstr ""
-#: ../../../docs/configuring-playbook-bot-baibot.md:462
+#: ../../../docs/configuring-playbook-bot-baibot.md:431
 msgid "You can also refer to the upstream [baibot](https://github.com/etkecc/baibot) project's documentation."
 msgstr ""
-#: ../../../docs/configuring-playbook-bot-baibot.md:464
+#: ../../../docs/configuring-playbook-bot-baibot.md:433
 msgid "Troubleshooting"
 msgstr ""
-#: ../../../docs/configuring-playbook-bot-baibot.md:466
+#: ../../../docs/configuring-playbook-bot-baibot.md:435
 msgid "As with all other services, you can find the logs in [systemd-journald](https://www.freedesktop.org/software/systemd/man/systemd-journald.service.html) by logging in to the server with SSH and running `journalctl -fu matrix-bot-baibot`."
 msgstr ""
-#: ../../../docs/configuring-playbook-bot-baibot.md:468
+#: ../../../docs/configuring-playbook-bot-baibot.md:437
 msgid "Increase logging verbosity"
 msgstr ""
-#: ../../../docs/configuring-playbook-bot-baibot.md:470
+#: ../../../docs/configuring-playbook-bot-baibot.md:439
 msgid "The default logging level for this service is `info`. If you want to increase the verbosity to `debug` (or even `trace`), add the following configuration to your `vars.yml` file and re-run the playbook:"
 msgstr ""
-#: ../../../docs/configuring-playbook-bot-baibot.md:484
+#: ../../../docs/configuring-playbook-bot-baibot.md:453
 msgid "**Alternatively**, you can use a single variable to set the logging level for all of the above (bot + all libraries):"
 msgstr ""
@@ -8,7 +8,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: matrix-docker-ansible-deploy \n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2026-05-19 07:40+0000\n"
+"POT-Creation-Date: 2026-05-07 14:00+0000\n"
 "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
 "Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
 "Language-Team: LANGUAGE <LL@li.org>\n"
@@ -72,8 +72,8 @@ msgstr ""
 msgid "Using your own account, create a new invite only room that you will use to manage the bot. This is the room where you will see the status of the bot and where you will send commands to the bot, such as the command to ban a user from another room."
 msgstr ""
-#: ../../../docs/configuring-playbook-bot-draupnir.md:38
+#: ../../../docs/configuring-playbook-bot-draupnir.md:37
-msgid "Anyone in this room can control the bot so it is important that you only invite trusted users to this room."
+msgid "[!WARNING] Anyone in this room can control the bot so it is important that you only invite trusted users to this room."
 msgstr ""
 #: ../../../docs/configuring-playbook-bot-draupnir.md:40
@@ -228,8 +228,8 @@ msgstr ""
 msgid "Manual access to Synapse's Admin APIs requires an access token for a homeserver admin account. Refer to the documentation on [how to obtain an access token](obtaining-access-tokens.md)."
 msgstr ""
-#: ../../../docs/configuring-playbook-bot-draupnir.md:165
+#: ../../../docs/configuring-playbook-bot-draupnir.md:164
-msgid "Access tokens are sensitive information. Do not include them in any bug reports, messages, or logs. Do not share the access token with anyone."
+msgid "[!WARNING] Access tokens are sensitive information. Do not include them in any bug reports, messages, or logs. Do not share the access token with anyone."
 msgstr ""
 #: ../../../docs/configuring-playbook-bot-draupnir.md:167
@@ -8,7 +8,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: matrix-docker-ansible-deploy \n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2026-05-23 05:22+0000\n"
+"POT-Creation-Date: 2026-02-13 10:32+0000\n"
 "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
 "Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
 "Language-Team: LANGUAGE <LL@li.org>\n"
@@ -16,22 +16,158 @@ msgstr ""
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
-#: ../../../docs/configuring-playbook-bot-go-neb.md:12
+#: ../../../docs/configuring-playbook-bot-go-neb.md:11
-msgid "Setting up Go-NEB (optional, removed)"
+msgid "Setting up Go-NEB (optional, unmaintained)"
 msgstr ""
-#: ../../../docs/configuring-playbook-bot-go-neb.md:14
+#: ../../../docs/configuring-playbook-bot-go-neb.md:13
-msgid "🪦 The playbook used to be able to install and configure [Go-NEB](https://github.com/matrix-org/go-neb), but no longer includes this component as it has been discontinued."
+msgid "**Note**: [Go-NEB](https://github.com/matrix-org/go-neb) is now an archived (**unmaintained**) project. We recommend not bothering with installing it. While not a 1:1 replacement, the bridge's author suggests taking a look at [matrix-hookshot](https://github.com/matrix-org/matrix-hookshot) as a replacement, which can also be [installed using this playbook](configuring-playbook-bridge-hookshot.md). Consider using that bot instead of this one."
 msgstr ""
-#: ../../../docs/configuring-playbook-bot-go-neb.md:16
+#: ../../../docs/configuring-playbook-bot-go-neb.md:15
-msgid "While not a 1:1 replacement, the bot's author suggests taking a look at [matrix-hookshot](https://github.com/matrix-org/matrix-hookshot) as a replacement, which can also be [installed using this playbook](configuring-playbook-bridge-hookshot.md)."
+msgid "The playbook can install and configure [Go-NEB](https://github.com/matrix-org/go-neb) for you."
 msgstr ""
-#: ../../../docs/configuring-playbook-bot-go-neb.md:18
+#: ../../../docs/configuring-playbook-bot-go-neb.md:17
-msgid "Uninstalling Go-NEB manually"
+msgid "Go-NEB is a Matrix bot written in Go. It is the successor to Matrix-NEB, the original Matrix bot written in Python."
 msgstr ""
-#: ../../../docs/configuring-playbook-bot-go-neb.md:20
+#: ../../../docs/configuring-playbook-bot-go-neb.md:19
-msgid "If you still have the Go-NEB component installed on your Matrix server, the playbook can no longer help you uninstall it and you will need to do it manually. To uninstall manually, run these commands on the server:"
+msgid "See the project's [documentation](https://github.com/matrix-org/go-neb/blob/master/README.md) to learn what it does and why it might be useful to you."
 msgstr ""
 #: ../../../docs/configuring-playbook-bot-go-neb.md:21
 msgid "Prerequisites"
 msgstr ""
 #: ../../../docs/configuring-playbook-bot-go-neb.md:23
 msgid "Register the bot account"
 msgstr ""
 #: ../../../docs/configuring-playbook-bot-go-neb.md:25
 msgid "The playbook does not automatically create users for you. You **need to register the bot user manually** before setting up the bot."
 msgstr ""
 #: ../../../docs/configuring-playbook-bot-go-neb.md:27
 msgid "Generate a strong password for the bot. You can create one with a command like `pwgen -s 64 1`."
 msgstr ""
 #: ../../../docs/configuring-playbook-bot-go-neb.md:29
 msgid "You can use the playbook to [register a new user](registering-users.md):"
 msgstr ""
 #: ../../../docs/configuring-playbook-bot-go-neb.md:35
 msgid "Obtain an access token"
 msgstr ""
 #: ../../../docs/configuring-playbook-bot-go-neb.md:37
 msgid "The bot requires an access token to be able to connect to your homeserver. Refer to the documentation on [how to obtain an access token](obtaining-access-tokens.md)."
 msgstr ""
 #: ../../../docs/configuring-playbook-bot-go-neb.md:39
 msgid "[!WARNING] Access tokens are sensitive information. Do not include them in any bug reports, messages, or logs. Do not share the access token with anyone."
 msgstr ""
 #: ../../../docs/configuring-playbook-bot-go-neb.md:42
 msgid "Adjusting DNS records"
 msgstr ""
 #: ../../../docs/configuring-playbook-bot-go-neb.md:44
 msgid "By default, this playbook installs Go-NEB on the `goneb.` subdomain (`goneb.example.com`) and requires you to create a CNAME record for `goneb`, which targets `matrix.example.com`."
 msgstr ""
 #: ../../../docs/configuring-playbook-bot-go-neb.md:46
 msgid "When setting, replace `example.com` with your own."
 msgstr ""
 #: ../../../docs/configuring-playbook-bot-go-neb.md:48
 msgid "Adjusting the playbook configuration"
 msgstr ""
 #: ../../../docs/configuring-playbook-bot-go-neb.md:50
 msgid "To enable the bot, add the following configuration to your `inventory/host_vars/matrix.example.com/vars.yml` file. Make sure to replace `ACCESS_TOKEN_FOR_GONEB_HERE` and `ACCESS_TOKEN_FOR_ANOTHER_GONEB_HERE` with the ones created [above](#obtain-an-access-token)."
 msgstr ""
 #: ../../../docs/configuring-playbook-bot-go-neb.md:214
 msgid "Adjusting the Go-NEB URL (optional)"
 msgstr ""
 #: ../../../docs/configuring-playbook-bot-go-neb.md:216
 msgid "By tweaking the `matrix_bot_go_neb_hostname` and `matrix_bot_go_neb_path_prefix` variables, you can easily make the service available at a **different hostname and/or path** than the default one."
 msgstr ""
 #: ../../../docs/configuring-playbook-bot-go-neb.md:218
 msgid "Example additional configuration for your `vars.yml` file:"
 msgstr ""
 #: ../../../docs/configuring-playbook-bot-go-neb.md:229
 msgid "After changing the domain, **you may need to adjust your DNS** records to point the Go-NEB domain to the Matrix server."
 msgstr ""
 #: ../../../docs/configuring-playbook-bot-go-neb.md:231
 msgid "If you've decided to reuse the `matrix.` domain, you won't need to do any extra DNS configuration."
 msgstr ""
 #: ../../../docs/configuring-playbook-bot-go-neb.md:233
 msgid "Extending the configuration"
 msgstr ""
 #: ../../../docs/configuring-playbook-bot-go-neb.md:235
 msgid "There are some additional things you may wish to configure about the bot."
 msgstr ""
 #: ../../../docs/configuring-playbook-bot-go-neb.md:237
 msgid "Take a look at:"
 msgstr ""
 #: ../../../docs/configuring-playbook-bot-go-neb.md:239
 msgid "`roles/custom/matrix-bot-go-neb/defaults/main.yml` for some variables that you can customize via your `vars.yml` file"
 msgstr ""
 #: ../../../docs/configuring-playbook-bot-go-neb.md:240
 msgid "`roles/custom/matrix-bot-go-neb/templates/config.yaml.j2` for the bot's default configuration. You can override settings (even those that don't have dedicated playbook variables) using the `matrix_bot_go_neb_configuration_extension_yaml` variable"
 msgstr ""
 #: ../../../docs/configuring-playbook-bot-go-neb.md:242
 msgid "Installing"
 msgstr ""
 #: ../../../docs/configuring-playbook-bot-go-neb.md:244
 msgid "After configuring the playbook and potentially [adjusting your DNS records](#adjusting-dns-records), run the playbook with [playbook tags](playbook-tags.md) as below:"
 msgstr ""
 #: ../../../docs/configuring-playbook-bot-go-neb.md:251
 msgid "The shortcut commands with the [`just` program](just.md) are also available: `just install-all` or `just setup-all`"
 msgstr ""
 #: ../../../docs/configuring-playbook-bot-go-neb.md:253
 msgid "`just install-all` is useful for maintaining your setup quickly ([2x-5x faster](../CHANGELOG.md#2x-5x-performance-improvements-in-playbook-runtime) than `just setup-all`) when its components remain unchanged. If you adjust your `vars.yml` to remove other components, you'd need to run `just setup-all`, or these components will still remain installed. Note these shortcuts run the `ensure-matrix-users-created` tag too."
 msgstr ""
 #: ../../../docs/configuring-playbook-bot-go-neb.md:255
 msgid "Usage"
 msgstr ""
 #: ../../../docs/configuring-playbook-bot-go-neb.md:257
 msgid "To use the bot, invite it to any existing Matrix room (`/invite @bot.go-neb:example.com` where `example.com` is your base domain, not the `matrix.` domain). Make sure you are granted with the sufficient permission if you are not the room owner."
 msgstr ""
 #: ../../../docs/configuring-playbook-bot-go-neb.md:259
 msgid "Basic usage is like this: `!echo hi` or `!imgur puppies` or `!giphy matrix`"
 msgstr ""
 #: ../../../docs/configuring-playbook-bot-go-neb.md:261
 msgid "If you enabled the github_cmd service, send `!github help` to the bot in the room to see the available commands."
 msgstr ""
 #: ../../../docs/configuring-playbook-bot-go-neb.md:263
 msgid "You can also refer to the upstream [Documentation](https://github.com/matrix-org/go-neb)."
 msgstr ""
 #: ../../../docs/configuring-playbook-bot-go-neb.md:265
 msgid "Troubleshooting"
 msgstr ""
 #: ../../../docs/configuring-playbook-bot-go-neb.md:267
 msgid "As with all other services, you can find the logs in [systemd-journald](https://www.freedesktop.org/software/systemd/man/systemd-journald.service.html) by logging in to the server with SSH and running `journalctl -fu matrix-bot-go-neb`."
 msgstr ""
@@ -8,7 +8,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: matrix-docker-ansible-deploy \n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2026-05-19 07:40+0000\n"
+"POT-Creation-Date: 2026-04-03 11:56+0100\n"
 "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
 "Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
 "Language-Team: LANGUAGE <LL@li.org>\n"
@@ -177,8 +177,8 @@ msgstr ""
 msgid "Alternatively, you can refer to the documentation on [how to obtain an access token](obtaining-access-tokens.md). Be aware that you'd better use the **Obtain an access token via curl** method (not **Obtain an access token via Element Web**) as the latter will causes issues to your bot in encrypted rooms. Read [more](https://docs.mau.fi/maubot/usage/basic.html#creating-clients)."
 msgstr ""
-#: ../../../docs/configuring-playbook-bot-maubot.md:124
+#: ../../../docs/configuring-playbook-bot-maubot.md:123
-msgid "Access tokens are sensitive information. Do not include them in any bug reports, messages, or logs. Do not share the access token with anyone."
+msgid "[!WARNING] Access tokens are sensitive information. Do not include them in any bug reports, messages, or logs. Do not share the access token with anyone."
 msgstr ""
 #: ../../../docs/configuring-playbook-bot-maubot.md:126
@@ -8,7 +8,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: matrix-docker-ansible-deploy \n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2026-05-19 07:40+0000\n"
+"POT-Creation-Date: 2026-04-03 11:56+0100\n"
 "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
 "Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
 "Language-Team: LANGUAGE <LL@li.org>\n"
@@ -60,9 +60,9 @@ msgstr ""
 msgid "The bot requires an access token to be able to connect to your homeserver. Refer to the documentation on [how to obtain an access token](obtaining-access-tokens.md)."
 msgstr ""
-#: ../../../docs/configuring-playbook-bot-mjolnir.md:39
+#: ../../../docs/configuring-playbook-bot-mjolnir.md:38
-#: ../../../docs/configuring-playbook-bot-mjolnir.md:64
+#: ../../../docs/configuring-playbook-bot-mjolnir.md:63
-msgid "Access tokens are sensitive information. Do not include them in any bug reports, messages, or logs. Do not share the access token with anyone."
+msgid "[!WARNING] Access tokens are sensitive information. Do not include them in any bug reports, messages, or logs. Do not share the access token with anyone."
 msgstr ""
 #: ../../../docs/configuring-playbook-bot-mjolnir.md:41
@@ -142,8 +142,8 @@ msgstr ""
 msgid "Using your own account, create a new invite only room that you will use to manage the bot. This is the room where you will see the status of the bot and where you will send commands to the bot, such as the command to ban a user from another room."
 msgstr ""
-#: ../../../docs/configuring-playbook-bot-mjolnir.md:87
+#: ../../../docs/configuring-playbook-bot-mjolnir.md:86
-msgid "Anyone in this room can control the bot so it is important that you only invite trusted users to this room."
+msgid "[!WARNING] Anyone in this room can control the bot so it is important that you only invite trusted users to this room."
 msgstr ""
 #: ../../../docs/configuring-playbook-bot-mjolnir.md:89
@@ -8,7 +8,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: matrix-docker-ansible-deploy \n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2026-05-19 07:40+0000\n"
+"POT-Creation-Date: 2026-02-13 10:32+0000\n"
 "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
 "Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
 "Language-Team: LANGUAGE <LL@li.org>\n"
@@ -28,8 +28,8 @@ msgstr ""
 msgid "See the project's [documentation](https://src.miscworks.net/fair/matrix-appservice-kakaotalk/src/branch/master/README.md) to learn what it does and why it might be useful to you."
 msgstr ""
-#: ../../../docs/configuring-playbook-bridge-appservice-kakaotalk.md:17
+#: ../../../docs/configuring-playbook-bridge-appservice-kakaotalk.md:16
-msgid "There have been recent reports (~2022-09-16) that **using this bridge may get your account banned**."
+msgid "[!WARNING] There have been recent reports (~2022-09-16) that **using this bridge may get your account banned**."
 msgstr ""
 #: ../../../docs/configuring-playbook-bridge-appservice-kakaotalk.md:19
@@ -8,7 +8,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: matrix-docker-ansible-deploy \n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2026-06-29 17:11+0000\n"
+"POT-Creation-Date: 2026-02-13 10:32+0000\n"
 "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
 "Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
 "Language-Team: LANGUAGE <LL@li.org>\n"
@@ -154,173 +154,141 @@ msgid "If you have issues with a service, and are requesting support, the higher
 msgstr ""
 #: ../../../docs/configuring-playbook-bridge-mautrix-bridges.md:141
 msgid "Expose the bridge's API (for Mautrix Manager and similar tools)"
 msgstr ""
 #: ../../../docs/configuring-playbook-bridge-mautrix-bridges.md:143
 msgid "Each mautrix bridge runs an HTTP API which tools like [Mautrix Manager](https://github.com/mautrix/manager) can use to help you log into the bridge. This is especially handy for bridges where logging in manually is cumbersome (like [mautrix-gmessages](configuring-playbook-bridge-mautrix-gmessages.md))."
 msgstr ""
 #: ../../../docs/configuring-playbook-bridge-mautrix-bridges.md:145
 msgid "By default, the playbook exposes this API publicly at `https://matrix.example.com/bridges/SERVICENAME` (for example, `https://matrix.example.com/bridges/gmessages`). Such tools authenticate to the bridge with your own Matrix access token, so you never need to share any bridge secret with them."
 msgstr ""
 #: ../../../docs/configuring-playbook-bridge-mautrix-bridges.md:147
 msgid "To make discovery easier, the playbook also serves a `/.well-known/matrix/mautrix` file which advertises all your exposed bridges. Mautrix Manager reads this file and offers your bridges automatically, so you don't need to enter their URLs by hand."
 msgstr ""
 #: ../../../docs/configuring-playbook-bridge-mautrix-bridges.md:149
 msgid "This is all enabled by default. To **disable exposing the API for all bridges**, add the following configuration to your `vars.yml` file:"
 msgstr ""
 #: ../../../docs/configuring-playbook-bridge-mautrix-bridges.md:155
 msgid "**Alternatively**, to disable it for a specific bridge:"
 msgstr ""
 #: ../../../docs/configuring-playbook-bridge-mautrix-bridges.md:161
 msgid "If you run additional bridges on the same server which are not managed by this playbook and would like compatible tools to discover them as well, you can advertise their base URLs in the `/.well-known/matrix/mautrix` file:"
 msgstr ""
 #: ../../../docs/configuring-playbook-bridge-mautrix-bridges.md:168
 msgid "Only list bridges hosted on (and connected to) this server here, as compatible tools will send your Matrix access token to them. For bridges on other servers, take a look at the `fi.mau.external_bridge_servers` property described in the [Mautrix Manager](https://github.com/mautrix/manager) documentation, which you can add via `matrix_static_files_file_matrix_mautrix_configuration_extension_json`."
 msgstr ""
 #: ../../../docs/configuring-playbook-bridge-mautrix-bridges.md:170
 msgid "Extending the configuration"
 msgstr ""
-#: ../../../docs/configuring-playbook-bridge-mautrix-bridges.md:172
+#: ../../../docs/configuring-playbook-bridge-mautrix-bridges.md:143
 msgid "There are some additional things you may wish to configure about the bridge."
 msgstr ""
-#: ../../../docs/configuring-playbook-bridge-mautrix-bridges.md:174
+#: ../../../docs/configuring-playbook-bridge-mautrix-bridges.md:145
 msgid "Take a look at:"
 msgstr ""
-#: ../../../docs/configuring-playbook-bridge-mautrix-bridges.md:176
+#: ../../../docs/configuring-playbook-bridge-mautrix-bridges.md:147
 msgid "`roles/custom/matrix-bridge-mautrix-SERVICENAME/defaults/main.yml` for some variables that you can customize via your `vars.yml` file"
 msgstr ""
-#: ../../../docs/configuring-playbook-bridge-mautrix-bridges.md:177
+#: ../../../docs/configuring-playbook-bridge-mautrix-bridges.md:148
 msgid "`roles/custom/matrix-bridge-mautrix-SERVICENAME/templates/config.yaml.j2` for the bridge's default configuration. You can override settings (even those that don't have dedicated playbook variables) using the `matrix_mautrix_SERVICENAME_configuration_extension_yaml` variable"
 msgstr ""
-#: ../../../docs/configuring-playbook-bridge-mautrix-bridges.md:179
+#: ../../../docs/configuring-playbook-bridge-mautrix-bridges.md:150
 msgid "Installing"
 msgstr ""
-#: ../../../docs/configuring-playbook-bridge-mautrix-bridges.md:181
+#: ../../../docs/configuring-playbook-bridge-mautrix-bridges.md:152
 msgid "After configuring the playbook, run it with [playbook tags](playbook-tags.md) as below:"
 msgstr ""
-#: ../../../docs/configuring-playbook-bridge-mautrix-bridges.md:188
+#: ../../../docs/configuring-playbook-bridge-mautrix-bridges.md:159
 msgid "The shortcut commands with the [`just` program](just.md) are also available: `just install-all` or `just setup-all`"
 msgstr ""
-#: ../../../docs/configuring-playbook-bridge-mautrix-bridges.md:190
+#: ../../../docs/configuring-playbook-bridge-mautrix-bridges.md:161
 msgid "`just install-all` is useful for maintaining your setup quickly ([2x-5x faster](../CHANGELOG.md#2x-5x-performance-improvements-in-playbook-runtime) than `just setup-all`) when its components remain unchanged. If you adjust your `vars.yml` to remove other components, you'd need to run `just setup-all`, or these components will still remain installed. Note these shortcuts run the `ensure-matrix-users-created` tag too."
 msgstr ""
-#: ../../../docs/configuring-playbook-bridge-mautrix-bridges.md:192
+#: ../../../docs/configuring-playbook-bridge-mautrix-bridges.md:163
 msgid "Usage"
 msgstr ""
-#: ../../../docs/configuring-playbook-bridge-mautrix-bridges.md:194
+#: ../../../docs/configuring-playbook-bridge-mautrix-bridges.md:165
 msgid "To use the bridge, you need to start a chat with `@SERVICENAMEbot:example.com` (where `example.com` is your base domain, not the `matrix.` domain)."
 msgstr ""
-#: ../../../docs/configuring-playbook-bridge-mautrix-bridges.md:196
+#: ../../../docs/configuring-playbook-bridge-mautrix-bridges.md:167
 msgid "For details about the next steps, refer to each bridge's individual documentation page."
 msgstr ""
-#: ../../../docs/configuring-playbook-bridge-mautrix-bridges.md:198
+#: ../../../docs/configuring-playbook-bridge-mautrix-bridges.md:169
 msgid "Send `help` to the bot to see the available commands."
 msgstr ""
-#: ../../../docs/configuring-playbook-bridge-mautrix-bridges.md:200
+#: ../../../docs/configuring-playbook-bridge-mautrix-bridges.md:171
 msgid "If you run into trouble, check the [Troubleshooting](#troubleshooting) section below."
 msgstr ""
-#: ../../../docs/configuring-playbook-bridge-mautrix-bridges.md:202
+#: ../../../docs/configuring-playbook-bridge-mautrix-bridges.md:173
 msgid "Set up Double Puppeting (optional)"
 msgstr ""
-#: ../../../docs/configuring-playbook-bridge-mautrix-bridges.md:204
+#: ../../../docs/configuring-playbook-bridge-mautrix-bridges.md:175
 msgid "After successfully enabling bridging, you may wish to set up [Double Puppeting](https://docs.mau.fi/bridges/general/double-puppeting.html) (hint: you most likely do)."
 msgstr ""
-#: ../../../docs/configuring-playbook-bridge-mautrix-bridges.md:206
+#: ../../../docs/configuring-playbook-bridge-mautrix-bridges.md:177
 msgid "To set it up, you have 2 ways of going about it."
 msgstr ""
-#: ../../../docs/configuring-playbook-bridge-mautrix-bridges.md:208
+#: ../../../docs/configuring-playbook-bridge-mautrix-bridges.md:179
 msgid "Method 1: automatically, by enabling Appservice Double Puppet (recommended)"
 msgstr ""
-#: ../../../docs/configuring-playbook-bridge-mautrix-bridges.md:210
+#: ../../../docs/configuring-playbook-bridge-mautrix-bridges.md:181
 msgid "To set up [Double Puppeting](https://docs.mau.fi/bridges/general/double-puppeting.html), you could enable the [Appservice Double Puppet](configuring-playbook-appservice-double-puppet.md) service for this playbook."
 msgstr ""
-#: ../../../docs/configuring-playbook-bridge-mautrix-bridges.md:212
+#: ../../../docs/configuring-playbook-bridge-mautrix-bridges.md:183
 msgid "Appservice Double Puppet is a homeserver appservice through which bridges (and potentially other services) can impersonate any user on the homeserver."
 msgstr ""
-#: ../../../docs/configuring-playbook-bridge-mautrix-bridges.md:214
+#: ../../../docs/configuring-playbook-bridge-mautrix-bridges.md:185
 msgid "To enable the Appservice Double Puppet service, add the following configuration to your `vars.yml` file:"
 msgstr ""
-#: ../../../docs/configuring-playbook-bridge-mautrix-bridges.md:220
+#: ../../../docs/configuring-playbook-bridge-mautrix-bridges.md:191
 msgid "When enabled, double puppeting will automatically be enabled for all bridges that support double puppeting via the appservice method."
 msgstr ""
-#: ../../../docs/configuring-playbook-bridge-mautrix-bridges.md:222
+#: ../../../docs/configuring-playbook-bridge-mautrix-bridges.md:193
 msgid "This is the recommended way of setting up Double Puppeting, as it's easier to accomplish, works for all your users automatically, and has less of a chance of breaking in the future."
 msgstr ""
-#: ../../../docs/configuring-playbook-bridge-mautrix-bridges.md:224
+#: ../../../docs/configuring-playbook-bridge-mautrix-bridges.md:195
 msgid "**Notes**:"
 msgstr ""
-#: ../../../docs/configuring-playbook-bridge-mautrix-bridges.md:226
+#: ../../../docs/configuring-playbook-bridge-mautrix-bridges.md:197
 msgid "Previously there were multiple different automatic double puppeting methods like one with the help of the [Shared Secret Auth password provider module](./configuring-playbook-shared-secret-auth.md), but they have been superseded by this Appservice Double Puppet method. Double puppeting with the Shared Secret Auth works at the time of writing, but is deprecated and will stop working in the future as the older methods were completely removed in the megabridge rewrites on [the upstream project](https://docs.mau.fi/bridges/general/double-puppeting.html#automatically)."
 msgstr ""
-#: ../../../docs/configuring-playbook-bridge-mautrix-bridges.md:229
+#: ../../../docs/configuring-playbook-bridge-mautrix-bridges.md:200
 msgid "Some bridges like [the deprecated Facebook mautrix bridge](configuring-playbook-bridge-mautrix-facebook.md) and [matrix-appservice-kakaotalk](configuring-playbook-bridge-appservice-kakaotalk.md), which is partially based on the Facebook bridge, are compatible with the Shared Secret Auth service only. These bridges automatically perform Double Puppeting if [Shared Secret Auth](configuring-playbook-shared-secret-auth.md) service is configured and enabled on the server for this playbook."
 msgstr ""
-#: ../../../docs/configuring-playbook-bridge-mautrix-bridges.md:231
+#: ../../../docs/configuring-playbook-bridge-mautrix-bridges.md:202
 msgid "Method 2: manually, by asking each user to provide a working access token"
 msgstr ""
-#: ../../../docs/configuring-playbook-bridge-mautrix-bridges.md:233
+#: ../../../docs/configuring-playbook-bridge-mautrix-bridges.md:204
 msgid "When using this method, **each user** that wishes to enable Double Puppeting needs to follow the following steps:"
 msgstr ""
-#: ../../../docs/configuring-playbook-bridge-mautrix-bridges.md:235
+#: ../../../docs/configuring-playbook-bridge-mautrix-bridges.md:206
 msgid "retrieve a Matrix access token for yourself. Refer to the documentation on [how to obtain one](obtaining-access-tokens.md)."
 msgstr ""
-#: ../../../docs/configuring-playbook-bridge-mautrix-bridges.md:237
+#: ../../../docs/configuring-playbook-bridge-mautrix-bridges.md:208
 msgid "send the access token to the bot. Example: `login-matrix MATRIX_ACCESS_TOKEN_HERE`"
 msgstr ""
-#: ../../../docs/configuring-playbook-bridge-mautrix-bridges.md:239
+#: ../../../docs/configuring-playbook-bridge-mautrix-bridges.md:210
 msgid "make sure you don't log out the session for which you obtained an access token some time in the future, as that would break the Double Puppeting feature"
 msgstr ""
-#: ../../../docs/configuring-playbook-bridge-mautrix-bridges.md:241
+#: ../../../docs/configuring-playbook-bridge-mautrix-bridges.md:212
 msgid "Troubleshooting"
 msgstr ""
-#: ../../../docs/configuring-playbook-bridge-mautrix-bridges.md:243
+#: ../../../docs/configuring-playbook-bridge-mautrix-bridges.md:214
 msgid "For troubleshooting information with a specific bridge, please see the playbook documentation about it (some other document in in `docs/`) and the upstream ([mautrix](https://github.com/mautrix)) bridge documentation for that specific bridge."
 msgstr ""
-#: ../../../docs/configuring-playbook-bridge-mautrix-bridges.md:245
+#: ../../../docs/configuring-playbook-bridge-mautrix-bridges.md:216
 msgid "If the bridge's bot doesn't accept the invite to a chat, refer [the official troubleshooting page](https://docs.mau.fi/bridges/general/troubleshooting.html) as well."
 msgstr ""
-#: ../../../docs/configuring-playbook-bridge-mautrix-bridges.md:247
+#: ../../../docs/configuring-playbook-bridge-mautrix-bridges.md:218
 msgid "If you found bugs in mautrix bridges, they should be reported to the upstream project, in the corresponding mautrix repository, not to us."
 msgstr ""
@@ -1,153 +0,0 @@
 # SOME DESCRIPTIVE TITLE.
 # Copyright (C) 2018-2026, Slavi Pantaleev, Aine Etke, MDAD community members
 # This file is distributed under the same license as the matrix-docker-ansible-deploy package.
 # FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
 #
 #, fuzzy
 msgid ""
 msgstr ""
 "Project-Id-Version: matrix-docker-ansible-deploy \n"
 "Report-Msgid-Bugs-To: \n"
 "POT-Creation-Date: 2026-06-29 17:11+0000\n"
 "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
 "Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
 "Language-Team: LANGUAGE <LL@li.org>\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
 #: ../../../docs/configuring-playbook-bridge-rustpush.md:8
 msgid "Setting up RustPush (iMessage) bridging (optional)"
 msgstr ""
 #: ../../../docs/configuring-playbook-bridge-rustpush.md:10
 msgid "**Note:** This bridge is in early development and may have stability issues. It may not be desirable to deploy this to a large number of users. Your testing and feedback is appreciated."
 msgstr ""
 #: ../../../docs/configuring-playbook-bridge-rustpush.md:12
 msgid "<sup>Refer the common guide for configuring mautrix bridges: [Setting up a Generic Mautrix Bridge](configuring-playbook-bridge-mautrix-bridges.md)</sup>"
 msgstr ""
 #: ../../../docs/configuring-playbook-bridge-rustpush.md:14
 msgid "The playbook can install and configure [RustPush bridge to iMessage](https://github.com/jasonlaguidice/imessage) for you using Apple's push notification service."
 msgstr ""
 #: ../../../docs/configuring-playbook-bridge-rustpush.md:16
 msgid "See the project's [documentation](https://github.com/jasonlaguidice/imessage/blob/main/README.md) to learn what it does and why it might be useful to you."
 msgstr ""
 #: ../../../docs/configuring-playbook-bridge-rustpush.md:18
 msgid "Prerequisites"
 msgstr ""
 #: ../../../docs/configuring-playbook-bridge-rustpush.md:20
 msgid "Hardware Key Extraction"
 msgstr ""
 #: ../../../docs/configuring-playbook-bridge-rustpush.md:22
 msgid "To use this bridge on Linux (Docker), each user needs a **hardware key** extracted from a real Mac. This key contains hardware identifiers needed for iMessage registration. Hardware keys can be shared by a number of users (approximately 20) before causing issues with Apple."
 msgstr ""
 #: ../../../docs/configuring-playbook-bridge-rustpush.md:24
 msgid "The key is entered interactively through the bridge bot's login flow (not configured via Ansible variables). See the upstream [README](https://github.com/jasonlaguidice/imessage/blob/main/README.md) for instructions on extracting the key."
 msgstr ""
 #: ../../../docs/configuring-playbook-bridge-rustpush.md:26
 msgid "If extracted from an Intel Mac, the Mac does not need to remain running after the key is extracted for this bridge to work. Apple Silicon Macs must run a NAC relay and thus must remain running."
 msgstr ""
 #: ../../../docs/configuring-playbook-bridge-rustpush.md:28
 msgid "Phone Number Registration (optional)"
 msgstr ""
 #: ../../../docs/configuring-playbook-bridge-rustpush.md:30
 msgid "This bridge can **not** do phone number registration (PNR). The only way to have your phone number registered and used (instead of an Apple ID e-mail address) is to have an iPhone connected to your Apple account. Reference the [BlueBubbles Phone Number Registration Guide](https://docs.bluebubbles.app/server/advanced/registering-a-phone-number-with-your-imessage-account) for information on how to set this up."
 msgstr ""
 #: ../../../docs/configuring-playbook-bridge-rustpush.md:32
 msgid "Enable Appservice Double Puppet (optional)"
 msgstr ""
 #: ../../../docs/configuring-playbook-bridge-rustpush.md:34
 msgid "If you want to set up [Double Puppeting](https://docs.mau.fi/bridges/general/double-puppeting.html) (hint: you most likely do) for this bridge automatically, you need to have enabled [Appservice Double Puppet](configuring-playbook-appservice-double-puppet.md) service for this playbook."
 msgstr ""
 #: ../../../docs/configuring-playbook-bridge-rustpush.md:36
 msgid "See [this section](configuring-playbook-bridge-mautrix-bridges.md#set-up-double-puppeting-optional) on the [common guide for configuring mautrix bridges](configuring-playbook-bridge-mautrix-bridges.md) for details about setting up Double Puppeting."
 msgstr ""
 #: ../../../docs/configuring-playbook-bridge-rustpush.md:38
 msgid "Adjusting the playbook configuration"
 msgstr ""
 #: ../../../docs/configuring-playbook-bridge-rustpush.md:40
 msgid "To enable the bridge, add the following configuration to your `inventory/host_vars/matrix.example.com/vars.yml` file:"
 msgstr ""
 #: ../../../docs/configuring-playbook-bridge-rustpush.md:46
 msgid "Disable Backfill (optional)"
 msgstr ""
 #: ../../../docs/configuring-playbook-bridge-rustpush.md:48
 msgid "Backfill can be disabled globally if desired via config. By default, the bridge will backfill from iCloud (CloudKit) and APNS if available. Backfill from `chat.db` is only possible when the bridge is running on MacOS."
 msgstr ""
 #: ../../../docs/configuring-playbook-bridge-rustpush.md:54
 msgid "Extending the Configuration"
 msgstr ""
 #: ../../../docs/configuring-playbook-bridge-rustpush.md:56
 msgid "There are some additional things you may wish to configure about the bridge."
 msgstr ""
 #: ../../../docs/configuring-playbook-bridge-rustpush.md:58
 msgid "See [this section](configuring-playbook-bridge-mautrix-bridges.md#extending-the-configuration) on the [common guide for configuring mautrix bridges](configuring-playbook-bridge-mautrix-bridges.md) for details about variables that you can customize and the bridge's default configuration, including [bridge permissions](configuring-playbook-bridge-mautrix-bridges.md#configure-bridge-permissions-optional), [encryption support](configuring-playbook-bridge-mautrix-bridges.md#enable-encryption-optional), [bot's username](configuring-playbook-bridge-mautrix-bridges.md#set-the-bots-username-optional), etc."
 msgstr ""
 #: ../../../docs/configuring-playbook-bridge-rustpush.md:60
 msgid "Installing"
 msgstr ""
 #: ../../../docs/configuring-playbook-bridge-rustpush.md:62
 msgid "After configuring the playbook, run it with [playbook tags](playbook-tags.md) as below:"
 msgstr ""
 #: ../../../docs/configuring-playbook-bridge-rustpush.md:69
 msgid "**Notes**:"
 msgstr ""
 #: ../../../docs/configuring-playbook-bridge-rustpush.md:71
 msgid "The shortcut commands with the [`just` program](just.md) are also available: `just install-all` or `just setup-all`"
 msgstr ""
 #: ../../../docs/configuring-playbook-bridge-rustpush.md:73
 msgid "`just install-all` is useful for maintaining your setup quickly ([2x-5x faster](../CHANGELOG.md#2x-5x-performance-improvements-in-playbook-runtime) than `just setup-all`) when its components remain unchanged. If you adjust your `vars.yml` to remove other components, you'd need to run `just setup-all`, or these components will still remain installed."
 msgstr ""
 #: ../../../docs/configuring-playbook-bridge-rustpush.md:75
 msgid "Usage"
 msgstr ""
 #: ../../../docs/configuring-playbook-bridge-rustpush.md:77
 msgid "To use the bridge, you need to start a chat with `@rustpushbot:example.com` (where `example.com` is your base domain, not the `matrix.` domain)."
 msgstr ""
 #: ../../../docs/configuring-playbook-bridge-rustpush.md:79
 msgid "After logging in, the bridge will start receiving iMessages and creating portal rooms."
 msgstr ""
 #: ../../../docs/configuring-playbook-bridge-rustpush.md:81
 msgid "Troubleshooting"
 msgstr ""
 #: ../../../docs/configuring-playbook-bridge-rustpush.md:83
 msgid "As with all other services, you can find the logs in [systemd-journald](https://www.freedesktop.org/software/systemd/man/systemd-journald.service.html) by logging in to the server with SSH and running `journalctl -fu matrix-rustpush-bridge`."
 msgstr ""
 #: ../../../docs/configuring-playbook-bridge-rustpush.md:85
 msgid "Increase logging verbosity"
 msgstr ""
 #: ../../../docs/configuring-playbook-bridge-rustpush.md:87
 msgid "The default logging level for this component is `warn`. If you want to increase the verbosity, add the following configuration to your `vars.yml` file and re-run the playbook:"
 msgstr ""
@@ -8,7 +8,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: matrix-docker-ansible-deploy \n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2026-05-19 07:40+0000\n"
+"POT-Creation-Date: 2026-02-13 10:32+0000\n"
 "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
 "Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
 "Language-Team: LANGUAGE <LL@li.org>\n"
@@ -28,8 +28,8 @@ msgstr ""
 msgid "See the project's [documentation](https://github.com/duo/matrix-wechat/blob/master/README.md) to learn what it does and why it might be useful to you."
 msgstr ""
-#: ../../../docs/configuring-playbook-bridge-wechat.md:15
+#: ../../../docs/configuring-playbook-bridge-wechat.md:14
-msgid "This bridge does not work against newer versions of Synapse anymore. See [this issue](https://github.com/duo/matrix-wechat/issues/33). Don't even bother installing it. Unless bridge maintenance is resumed and fixes this issue, we have no choice but to remove it from the playbook."
+msgid "[!WARNING] This bridge does not work against newer versions of Synapse anymore. See [this issue](https://github.com/duo/matrix-wechat/issues/33). Don't even bother installing it. Unless bridge maintenance is resumed and fixes this issue, we have no choice but to remove it from the playbook."
 msgstr ""
 #: ../../../docs/configuring-playbook-bridge-wechat.md:17
@@ -21,7 +21,7 @@ msgid "Setting up Sable (optional)"
 msgstr ""
 #: ../../../docs/configuring-playbook-client-sable.md:11
-msgid "The playbook can install and configure the [Sable](https://github.com/SableClient/Sable) Matrix web client for you."
+msgid "The playbook can install and configure the [Sable](https://github.com/7w1/sable) Matrix web client for you."
 msgstr ""
 #: ../../../docs/configuring-playbook-client-sable.md:13
@@ -8,7 +8,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: matrix-docker-ansible-deploy \n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2026-05-19 07:40+0000\n"
+"POT-Creation-Date: 2026-02-13 10:32+0000\n"
 "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
 "Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
 "Language-Team: LANGUAGE <LL@li.org>\n"
@@ -32,6 +32,10 @@ msgstr ""
 msgid "By default, the playbook installs [Synapse](https://github.com/element-hq/synapse) as it's the only full-featured Matrix server at the moment. If that's okay, you can skip this document."
 msgstr ""
 #: ../../../docs/configuring-playbook-conduit.md:16
 msgid "[!WARNING]"
 msgstr ""
 #: ../../../docs/configuring-playbook-conduit.md:17
 msgid "**You can't switch an existing Matrix server's implementation** (e.g. Synapse -> Conduit). Proceed below only if you're OK with losing data or you're dealing with a server on a new domain name, which hasn't participated in the Matrix federation yet."
 msgstr ""
@@ -8,7 +8,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: matrix-docker-ansible-deploy \n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2026-05-19 07:40+0000\n"
+"POT-Creation-Date: 2026-05-07 11:16+0000\n"
 "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
 "Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
 "Language-Team: LANGUAGE <LL@li.org>\n"
@@ -60,6 +60,6 @@ msgstr ""
 msgid "If you are not going to migrate to [Tuwunel](configuring-playbook-tuwunel.md) or [Continuwuity](configuring-playbook-continuwuity.md), you can remove data by running the command on the server:"
 msgstr ""
-#: ../../../docs/configuring-playbook-conduwuit.md:49
+#: ../../../docs/configuring-playbook-conduwuit.md:48
-msgid "Once you removing the path, there is no going back. Your data on the homeserver (including chat history, rooms, etc.) will be deleted and not be possible to restore them. Please be certain."
+msgid "[!WARNING] Once you removing the path, there is no going back. Your data on the homeserver (including chat history, rooms, etc.) will be deleted and not be possible to restore them. Please be certain."
 msgstr ""
@@ -8,7 +8,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: matrix-docker-ansible-deploy \n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2026-05-19 07:40+0000\n"
+"POT-Creation-Date: 2026-05-07 11:16+0000\n"
 "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
 "Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
 "Language-Team: LANGUAGE <LL@li.org>\n"
@@ -36,6 +36,10 @@ msgstr ""
 msgid "💡 **Note**: continuwuity is a fork of [conduwuit](./configuring-playbook-conduwuit.md), which the playbook has supported."
 msgstr ""
 #: ../../../docs/configuring-playbook-continuwuity.md:18
 msgid "[!WARNING]"
 msgstr ""
 #: ../../../docs/configuring-playbook-continuwuity.md:19
 msgid "**You can't switch an existing Matrix server's implementation** (e.g. Synapse -> Continuwuity). Proceed below only if you're OK with losing data or you're dealing with a server on a new domain name, which hasn't participated in the Matrix federation yet."
 msgstr ""
@@ -8,7 +8,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: matrix-docker-ansible-deploy \n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2026-05-19 07:40+0000\n"
+"POT-Creation-Date: 2026-02-13 10:32+0000\n"
 "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
 "Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
 "Language-Team: LANGUAGE <LL@li.org>\n"
@@ -32,6 +32,10 @@ msgstr ""
 msgid "By default, the playbook installs [Synapse](https://github.com/element-hq/synapse) as it's the only full-featured Matrix server at the moment. If that's okay, you can skip this document."
 msgstr ""
 #: ../../../docs/configuring-playbook-dendrite.md:17
 msgid "[!WARNING]"
 msgstr ""
 #: ../../../docs/configuring-playbook-dendrite.md:18
 msgid "**You can't switch an existing Matrix server's implementation** (e.g. Synapse -> Dendrite). Proceed below only if you're OK with losing data or you're dealing with a server on a new domain name, which hasn't participated in the Matrix federation yet."
 msgstr ""
@@ -8,7 +8,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: matrix-docker-ansible-deploy \n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2026-05-19 07:40+0000\n"
+"POT-Creation-Date: 2026-04-03 11:56+0100\n"
 "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
 "Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
 "Language-Team: LANGUAGE <LL@li.org>\n"
@@ -92,8 +92,8 @@ msgstr ""
 msgid "Example additional configuration for your `vars.yml` file:"
 msgstr ""
-#: ../../../docs/configuring-playbook-element-admin.md:54
+#: ../../../docs/configuring-playbook-element-admin.md:53
-msgid "A `matrix_element_admin_path_prefix` variable is also available and mean to let you configure a path prefix for the Element Admin service, but **Element Admin does not support running under a sub-path yet**."
+msgid "[!WARNING] A `matrix_element_admin_path_prefix` variable is also available and mean to let you configure a path prefix for the Element Admin service, but **Element Admin does not support running under a sub-path yet**."
 msgstr ""
 #: ../../../docs/configuring-playbook-element-admin.md:56
@@ -8,7 +8,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: matrix-docker-ansible-deploy \n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2026-05-19 07:40+0000\n"
+"POT-Creation-Date: 2026-02-13 10:32+0000\n"
 "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
 "Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
 "Language-Team: LANGUAGE <LL@li.org>\n"
@@ -52,8 +52,8 @@ msgstr ""
 msgid "(Optional) Guest accounts being enabled for your Matrix server, if you'd like guests to be able to use Element Call. See [Allowing guests to use Element Call](#allowing-guests-to-use-element-call-optional)"
 msgstr ""
-#: ../../../docs/configuring-playbook-element-call.md:24
+#: ../../../docs/configuring-playbook-element-call.md:23
-msgid "Because Element Call [requires](https://github.com/element-hq/element-call/blob/93ae2aed9841e0b066d515c56bd4c122d2b591b2/docs/self-hosting.md#a-matrix-homeserver) a few experimental features in the Matrix protocol, it's **very likely that it only works with the Synapse homeserver**."
+msgid "[!WARNING]  Because Element Call [requires](https://github.com/element-hq/element-call/blob/93ae2aed9841e0b066d515c56bd4c122d2b591b2/docs/self-hosting.md#a-matrix-homeserver) a few experimental features in the Matrix protocol, it's **very likely that it only works with the Synapse homeserver**."
 msgstr ""
 #: ../../../docs/configuring-playbook-element-call.md:26
@@ -192,8 +192,8 @@ msgstr ""
 msgid "Example additional configuration for your `vars.yml` file:"
 msgstr ""
-#: ../../../docs/configuring-playbook-element-call.md:83
+#: ../../../docs/configuring-playbook-element-call.md:82
-msgid "A `matrix_element_call_path_prefix` variable is also available and mean to let you configure a path prefix for the Element Call service, but [Element Call does not support running under a sub-path yet](https://github.com/element-hq/element-call/issues/3084)."
+msgid "[!WARNING] A `matrix_element_call_path_prefix` variable is also available and mean to let you configure a path prefix for the Element Call service, but [Element Call does not support running under a sub-path yet](https://github.com/element-hq/element-call/issues/3084)."
 msgstr ""
 #: ../../../docs/configuring-playbook-element-call.md:85
@@ -208,8 +208,8 @@ msgstr ""
 msgid "If you'd like guests to be able to use Element Call as well, you need to enable guest accounts support for your homeserver."
 msgstr ""
-#: ../../../docs/configuring-playbook-element-call.md:92
+#: ../../../docs/configuring-playbook-element-call.md:91
-msgid "Enabling guest accounts means that your homeserver's user database may get polluted with guest account signups (potentially made by bots). Guest accounts should be limited in what (damage) they can do to your server and the rest of the Matrix ecosystem, but it's better to not enable them unless necessary."
+msgid "[!WARNING] Enabling guest accounts means that your homeserver's user database may get polluted with guest account signups (potentially made by bots). Guest accounts should be limited in what (damage) they can do to your server and the rest of the Matrix ecosystem, but it's better to not enable them unless necessary."
 msgstr ""
 #: ../../../docs/configuring-playbook-element-call.md:95
@@ -8,7 +8,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: matrix-docker-ansible-deploy \n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2026-05-19 07:40+0000\n"
+"POT-Creation-Date: 2026-04-15 09:10+0000\n"
 "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
 "Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
 "Language-Team: LANGUAGE <LL@li.org>\n"
@@ -124,8 +124,8 @@ msgstr ""
 msgid "To enable the Gravatar service nevertheless, add the following configuration to your `vars.yml` file:"
 msgstr ""
-#: ../../../docs/configuring-playbook-jitsi.md:91
+#: ../../../docs/configuring-playbook-jitsi.md:90
-msgid "This will result in third party request leaking data to the Gravatar Service (`gravatar.com`, unless configured otherwise). Besides metadata, the Matrix user_id and possibly the room ID (via `referrer` header) will be also sent to the third party."
+msgid "[!WARNING] This will result in third party request leaking data to the Gravatar Service (`gravatar.com`, unless configured otherwise). Besides metadata, the Matrix user_id and possibly the room ID (via `referrer` header) will be also sent to the third party."
 msgstr ""
 #: ../../../docs/configuring-playbook-jitsi.md:93
@@ -8,7 +8,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: matrix-docker-ansible-deploy \n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2026-06-29 17:11+0000\n"
+"POT-Creation-Date: 2026-04-15 09:10+0000\n"
 "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
 "Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
 "Language-Team: LANGUAGE <LL@li.org>\n"
@@ -21,19 +21,23 @@ msgid "Setting up Ketesa (optional)"
 msgstr ""
 #: ../../../docs/configuring-playbook-ketesa.md:16
-msgid "The playbook can install and configure [Ketesa](https://ketesa.app) ([source code](https://github.com/etkecc/ketesa)) for you."
+msgid "The playbook can install and configure [Ketesa](https://github.com/etkecc/ketesa) for you."
 msgstr ""
 #: ../../../docs/configuring-playbook-ketesa.md:18
 msgid "Ketesa is a fully-featured admin interface for Matrix homeservers — manage users, rooms, media, sessions, and more from one clean, responsive web UI. It is the evolution of [Awesome-Technologies/synapse-admin](https://github.com/Awesome-Technologies/synapse-admin): what began as a fork has grown into its own independent project with a redesigned interface, comprehensive Synapse and MAS API coverage, and multi-language support. See the [Ketesa v1.0.0 announcement](https://etke.cc/blog/introducing-ketesa/) for a full overview of what's new."
 msgstr ""
 #: ../../../docs/configuring-playbook-ketesa.md:20
 msgid "[!NOTE]"
 msgstr ""
 #: ../../../docs/configuring-playbook-ketesa.md:22
 msgid "Ketesa does not work with other homeserver implementations than Synapse due to API's incompatibility."
 msgstr ""
 #: ../../../docs/configuring-playbook-ketesa.md:23
-msgid "The latest version of Ketesa is hosted by [etke.cc](https://etke.cc/) at [cloud.ketesa.app](https://cloud.ketesa.app/). If you only need this service occasionally and trust giving your admin credentials to a 3rd party Single Page Application, you can consider using it from there and avoiding the (small) overhead of self-hosting."
+msgid "The latest version of Ketesa is hosted by [etke.cc](https://etke.cc/) at [admin.etke.cc](https://admin.etke.cc/). If you only need this service occasionally and trust giving your admin credentials to a 3rd party Single Page Application, you can consider using it from there and avoiding the (small) overhead of self-hosting."
 msgstr ""
 #: ../../../docs/configuring-playbook-ketesa.md:24
@@ -8,7 +8,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: matrix-docker-ansible-deploy \n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2026-06-29 17:11+0000\n"
+"POT-Creation-Date: 2026-02-13 10:32+0000\n"
 "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
 "Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
 "Language-Team: LANGUAGE <LL@li.org>\n"
@@ -25,7 +25,7 @@ msgid "The playbook can install and configure the [matrix-synapse-ldap3](https:/
 msgstr ""
 #: ../../../docs/configuring-playbook-ldap-auth.md:14
-msgid "See the project's [documentation](https://github.com/matrix-org/matrix-synapse-ldap3/blob/main/README.md) to learn what it does and why it might be useful to you."
+msgid "See the project's [documentation](https://github.com/matrix-org/matrix-synapse-ldap3/blob/main/README.rst) to learn what it does and why it might be useful to you."
 msgstr ""
 #: ../../../docs/configuring-playbook-ldap-auth.md:16
@@ -59,3 +59,15 @@ msgstr ""
 #: ../../../docs/configuring-playbook-ldap-auth.md:54
 msgid "`just install-all` is useful for maintaining your setup quickly ([2x-5x faster](../CHANGELOG.md#2x-5x-performance-improvements-in-playbook-runtime) than `just setup-all`) when its components remain unchanged. If you adjust your `vars.yml` to remove other components, you'd need to run `just setup-all`, or these components will still remain installed. Note these shortcuts run the `ensure-matrix-users-created` tag too."
 msgstr ""
 #: ../../../docs/configuring-playbook-ldap-auth.md:56
 msgid "Usage"
 msgstr ""
 #: ../../../docs/configuring-playbook-ldap-auth.md:58
 msgid "Handling user registration"
 msgstr ""
 #: ../../../docs/configuring-playbook-ldap-auth.md:60
 msgid "If you wish for users to also be able to make new registrations against LDAP, you may **also** wish to [set up the ldap-registration-proxy](configuring-playbook-matrix-ldap-registration-proxy.md)."
 msgstr ""
@@ -8,7 +8,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: matrix-docker-ansible-deploy \n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2026-05-18 07:22+0000\n"
+"POT-Creation-Date: 2026-04-15 09:10+0000\n"
 "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
 "Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
 "Language-Team: LANGUAGE <LL@li.org>\n"
@@ -117,33 +117,21 @@ msgid "and configuring their own Traefik TCP entrypoint dedicated to LiveKit TUR
 msgstr ""
 #: ../../../docs/configuring-playbook-livekit-server.md:64
 msgid "TURN access controls"
 msgstr ""
 #: ../../../docs/configuring-playbook-livekit-server.md:66
 msgid "LiveKit's embedded TURN server enforces a credential TTL and restricts which peer CIDRs it will relay to. The playbook leaves these at the role's secure defaults, which are appropriate for typical deployments where TURN peers live on the public Internet."
 msgstr ""
 #: ../../../docs/configuring-playbook-livekit-server.md:68
 msgid "If your setup needs TURN to relay to private/restricted ranges, or you want to override the credential TTL, see the [TURN access controls and credential TTL](https://github.com/mother-of-all-self-hosting/ansible-role-livekit-server/blob/main/docs/configuring-livekit-server.md#turn-access-controls-and-credential-ttl) section of the role's documentation."
 msgstr ""
 #: ../../../docs/configuring-playbook-livekit-server.md:70
 msgid "Limitations"
 msgstr ""
-#: ../../../docs/configuring-playbook-livekit-server.md:72
+#: ../../../docs/configuring-playbook-livekit-server.md:66
 msgid "LiveKit Server's TURN listener behavior depends on where TLS is terminated:"
 msgstr ""
-#: ../../../docs/configuring-playbook-livekit-server.md:74
+#: ../../../docs/configuring-playbook-livekit-server.md:68
 msgid "Direct LiveKit TURN listeners (`livekit_server_config_turn_external_tls: false`) still use IPv4-only sockets for `3479/udp` and `5350/tcp`, so IPv6 connectivity to these endpoints is not possible."
 msgstr ""
-#: ../../../docs/configuring-playbook-livekit-server.md:75
+#: ../../../docs/configuring-playbook-livekit-server.md:69
 msgid "With [TURN TLS handling](#turn-tls-handling) (`livekit_server_config_turn_external_tls: true`), the playbook's dedicated `matrix-livekit-turn` TCP entrypoint can still listen on both IPv4 and IPv6. Traefik then forwards TURN/TCP to LiveKit."
 msgstr ""
-#: ../../../docs/configuring-playbook-livekit-server.md:77
+#: ../../../docs/configuring-playbook-livekit-server.md:71
 msgid "It appears that LiveKit Server intentionally only listens on `udp4` and `tcp4` in direct mode, as seen [here](https://github.com/livekit/livekit/blob/154b4d26b769c68a03c096124094b97bf61a996f/pkg/service/turn.go#L128) and [here](https://github.com/livekit/livekit/blob/154b4d26b769c68a03c096124094b97bf61a996f/pkg/service/turn.go#L92)."
 msgstr ""
@@ -8,7 +8,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: matrix-docker-ansible-deploy \n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2026-05-19 07:40+0000\n"
+"POT-Creation-Date: 2026-02-13 10:32+0000\n"
 "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
 "Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
 "Language-Team: LANGUAGE <LL@li.org>\n"
@@ -20,8 +20,8 @@ msgstr ""
 msgid "Setting up Matrix Corporal (optional, advanced)"
 msgstr ""
-#: ../../../docs/configuring-playbook-matrix-corporal.md:12
+#: ../../../docs/configuring-playbook-matrix-corporal.md:11
-msgid "This is an advanced feature! It requires prior experience with Matrix and a specific need for using [Matrix Corporal](https://github.com/devture/matrix-corporal). If you're unsure whether you have such a need, you most likely don't."
+msgid "[!WARNING] This is an advanced feature! It requires prior experience with Matrix and a specific need for using [Matrix Corporal](https://github.com/devture/matrix-corporal). If you're unsure whether you have such a need, you most likely don't."
 msgstr ""
 #: ../../../docs/configuring-playbook-matrix-corporal.md:14
@@ -8,7 +8,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: matrix-docker-ansible-deploy \n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2026-06-29 17:11+0000\n"
+"POT-Creation-Date: 2026-02-13 10:32+0000\n"
 "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
 "Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
 "Language-Team: LANGUAGE <LL@li.org>\n"
@@ -16,18 +16,74 @@ msgstr ""
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
-#: ../../../docs/configuring-playbook-matrix-ldap-registration-proxy.md:20
+#: ../../../docs/configuring-playbook-matrix-ldap-registration-proxy.md:9
-msgid "Setting up matrix-ldap-registration-proxy (optional, removed)"
+msgid "Setting up matrix-ldap-registration-proxy (optional)"
 msgstr ""
-#: ../../../docs/configuring-playbook-matrix-ldap-registration-proxy.md:22
+#: ../../../docs/configuring-playbook-matrix-ldap-registration-proxy.md:11
-msgid "🪦 The playbook used to be able to install and configure [matrix-ldap-registration-proxy](https://gitlab.com/activism.international/matrix_ldap_registration_proxy), but no longer includes this component, as it has become unavailable."
+msgid "The playbook can install and configure [matrix-ldap-registration-proxy](https://gitlab.com/activism.international/matrix_ldap_registration_proxy) for you."
 msgstr ""
-#: ../../../docs/configuring-playbook-matrix-ldap-registration-proxy.md:24
+#: ../../../docs/configuring-playbook-matrix-ldap-registration-proxy.md:13
-msgid "Uninstalling the component manually"
+msgid "This proxy handles Matrix registration requests and forwards them to LDAP."
 msgstr ""
-#: ../../../docs/configuring-playbook-matrix-ldap-registration-proxy.md:26
+#: ../../../docs/configuring-playbook-matrix-ldap-registration-proxy.md:15
-msgid "If you still have matrix-ldap-registration-proxy installed on your Matrix server, the playbook can no longer help you uninstall it and you will need to do it manually. To uninstall manually, run these commands on the server:"
+msgid "See the project's [documentation](https://gitlab.com/activism.international/matrix_ldap_registration_proxy/-/blob/main/README.md) to learn what it does and why it might be useful to you."
 msgstr ""
 #: ../../../docs/configuring-playbook-matrix-ldap-registration-proxy.md:17
 msgid "**Note**: This does support the full Matrix specification for registrations. It only provide a very coarse implementation of a basic password registration."
 msgstr ""
 #: ../../../docs/configuring-playbook-matrix-ldap-registration-proxy.md:19
 msgid "Adjusting the playbook configuration"
 msgstr ""
 #: ../../../docs/configuring-playbook-matrix-ldap-registration-proxy.md:21
 msgid "To enable the component, add the following configuration to your `inventory/host_vars/matrix.example.com/vars.yml` file (adapt to your needs):"
 msgstr ""
 #: ../../../docs/configuring-playbook-matrix-ldap-registration-proxy.md:33
 msgid "If you already use the [synapse external password provider via LDAP](configuring-playbook-ldap-auth.md) (that is, you have `matrix_synapse_ext_password_provider_ldap_enabled: true` and other options in your configuration) you can use the following values as configuration:"
 msgstr ""
 #: ../../../docs/configuring-playbook-matrix-ldap-registration-proxy.md:46
 msgid "Extending the configuration"
 msgstr ""
 #: ../../../docs/configuring-playbook-matrix-ldap-registration-proxy.md:48
 msgid "There are some additional things you may wish to configure about the component."
 msgstr ""
 #: ../../../docs/configuring-playbook-matrix-ldap-registration-proxy.md:50
 msgid "Take a look at:"
 msgstr ""
 #: ../../../docs/configuring-playbook-matrix-ldap-registration-proxy.md:52
 msgid "`roles/custom/matrix-ldap-registration-proxy/defaults/main.yml` for some variables that you can customize via your `vars.yml` file"
 msgstr ""
 #: ../../../docs/configuring-playbook-matrix-ldap-registration-proxy.md:54
 msgid "Installing"
 msgstr ""
 #: ../../../docs/configuring-playbook-matrix-ldap-registration-proxy.md:56
 msgid "After configuring the playbook, run it with [playbook tags](playbook-tags.md) as below:"
 msgstr ""
 #: ../../../docs/configuring-playbook-matrix-ldap-registration-proxy.md:63
 msgid "The shortcut commands with the [`just` program](just.md) are also available: `just install-all` or `just setup-all`"
 msgstr ""
 #: ../../../docs/configuring-playbook-matrix-ldap-registration-proxy.md:65
 msgid "`just install-all` is useful for maintaining your setup quickly ([2x-5x faster](../CHANGELOG.md#2x-5x-performance-improvements-in-playbook-runtime) than `just setup-all`) when its components remain unchanged. If you adjust your `vars.yml` to remove other components, you'd need to run `just setup-all`, or these components will still remain installed. Note these shortcuts run the `ensure-matrix-users-created` tag too."
 msgstr ""
 #: ../../../docs/configuring-playbook-matrix-ldap-registration-proxy.md:67
 msgid "Troubleshooting"
 msgstr ""
 #: ../../../docs/configuring-playbook-matrix-ldap-registration-proxy.md:69
 msgid "As with all other services, you can find the logs in [systemd-journald](https://www.freedesktop.org/software/systemd/man/systemd-journald.service.html) by logging in to the server with SSH and running `journalctl -fu matrix-ldap-registration-proxy`."
 msgstr ""
@@ -8,7 +8,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: matrix-docker-ansible-deploy \n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2026-05-19 07:40+0000\n"
+"POT-Creation-Date: 2026-02-13 10:32+0000\n"
 "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
 "Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
 "Language-Team: LANGUAGE <LL@li.org>\n"
@@ -16,22 +16,166 @@ msgstr ""
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
 #: ../../../docs/configuring-playbook-matrix-registration.md:9
 msgid "Setting up matrix-registration (optional)"
 msgstr ""
 #: ../../../docs/configuring-playbook-matrix-registration.md:11
 msgid "[!WARNING]"
 msgstr ""
 #: ../../../docs/configuring-playbook-matrix-registration.md:12
 msgid "This is a poorly maintained and buggy project. It's better to avoid using it."
 msgstr ""
 #: ../../../docs/configuring-playbook-matrix-registration.md:13
 msgid "This is not related to [matrix-registration-bot](configuring-playbook-bot-matrix-registration-bot.md)"
 msgstr ""
 #: ../../../docs/configuring-playbook-matrix-registration.md:15
 msgid "The playbook can install and configure [matrix-registration](https://github.com/ZerataX/matrix-registration) for you. It is a simple python application to have a token based Matrix registration."
 msgstr ""
 #: ../../../docs/configuring-playbook-matrix-registration.md:17
 msgid "Use matrix-registration to **create unique registration links**, which people can use to register on your Matrix server. It allows certain people (these having a special link) to register a user account, **keeping your server's registration closed (private)**."
 msgstr ""
 #: ../../../docs/configuring-playbook-matrix-registration.md:19
-msgid "Setting up matrix-registration (optional, removed)"
+msgid "**matrix-registration** provides 2 things:"
 msgstr ""
-#: ../../../docs/configuring-playbook-matrix-registration.md:22
+#: ../../../docs/configuring-playbook-matrix-registration.md:21
-msgid "This is not related to [matrix-registration-bot](configuring-playbook-bot-matrix-registration-bot.md)."
+msgid "**an API for creating registration tokens** (unique registration links). This API can be used via `curl` or via the playbook (see [Usage](#usage) below)"
 msgstr ""
-#: ../../../docs/configuring-playbook-matrix-registration.md:24
+#: ../../../docs/configuring-playbook-matrix-registration.md:23
-msgid "🪦 The playbook used to be able to install and configure [matrix-registration](https://github.com/ZerataX/matrix-registration), but no longer includes this component, as it has been unmaintained since November, 2025."
+msgid "**a user registration page**, where people can use these registration tokens. By default, exposed at `https://matrix.example.com/matrix-registration`"
 msgstr ""
-#: ../../../docs/configuring-playbook-matrix-registration.md:26
+#: ../../../docs/configuring-playbook-matrix-registration.md:25
-msgid "Uninstalling the component manually"
+msgid "Adjusting DNS records (optional)"
 msgstr ""
-#: ../../../docs/configuring-playbook-matrix-registration.md:28
+#: ../../../docs/configuring-playbook-matrix-registration.md:27
-msgid "If you still have matrix-registration installed on your Matrix server, the playbook can no longer help you uninstall it and you will need to do it manually. To uninstall manually, run these commands on the server:"
+msgid "By default, this playbook installs the matrix-registration on the `matrix.` subdomain, at the `/matrix-registration` path (https://matrix.example.com/matrix-registration). This makes it easy to install it, because it **doesn't require additional DNS records to be set up**. If that's okay, you can skip this section."
 msgstr ""
 #: ../../../docs/configuring-playbook-matrix-registration.md:29
 msgid "If you wish to adjust it, see the section [below](#adjusting-the-matrix-registration-url-optional) for details about DNS configuration."
 msgstr ""
 #: ../../../docs/configuring-playbook-matrix-registration.md:31
 msgid "Adjusting the playbook configuration"
 msgstr ""
 #: ../../../docs/configuring-playbook-matrix-registration.md:33
 msgid "To enable matrix-registration, add the following configuration to your `inventory/host_vars/matrix.example.com/vars.yml` file:"
 msgstr ""
 #: ../../../docs/configuring-playbook-matrix-registration.md:42
 msgid "Adjusting the matrix-registration URL (optional)"
 msgstr ""
 #: ../../../docs/configuring-playbook-matrix-registration.md:44
 msgid "By tweaking the `matrix_registration_hostname` and `matrix_registration_path_prefix` variables, you can easily make the service available at a **different hostname and/or path** than the default one."
 msgstr ""
 #: ../../../docs/configuring-playbook-matrix-registration.md:46
 msgid "Example additional configuration for your `vars.yml` file:"
 msgstr ""
 #: ../../../docs/configuring-playbook-matrix-registration.md:54
 msgid "If you've changed the default hostname, you may need to create a CNAME record for the matrix-registration domain (`registration.example.com`), which targets `matrix.example.com`."
 msgstr ""
 #: ../../../docs/configuring-playbook-matrix-registration.md:56
 msgid "When setting, replace `example.com` with your own."
 msgstr ""
 #: ../../../docs/configuring-playbook-matrix-registration.md:58
 msgid "Extending the configuration"
 msgstr ""
 #: ../../../docs/configuring-playbook-matrix-registration.md:60
 msgid "There are some additional things you may wish to configure about the component."
 msgstr ""
 #: ../../../docs/configuring-playbook-matrix-registration.md:62
 msgid "Take a look at:"
 msgstr ""
 #: ../../../docs/configuring-playbook-matrix-registration.md:64
 msgid "`roles/custom/matrix-registration/defaults/main.yml` for some variables that you can customize via your `vars.yml` file"
 msgstr ""
 #: ../../../docs/configuring-playbook-matrix-registration.md:65
 msgid "`roles/custom/matrix-registration/templates/config.yaml.j2` for the component's default configuration. You can override settings (even those that don't have dedicated playbook variables) using the `matrix_registration_configuration_extension_yaml` variable"
 msgstr ""
 #: ../../../docs/configuring-playbook-matrix-registration.md:67
 msgid "Installing"
 msgstr ""
 #: ../../../docs/configuring-playbook-matrix-registration.md:69
 msgid "After configuring the playbook and potentially [adjusting your DNS records](#adjusting-dns-records), run the playbook with [playbook tags](playbook-tags.md) as below:"
 msgstr ""
 #: ../../../docs/configuring-playbook-matrix-registration.md:76
 msgid "The shortcut commands with the [`just` program](just.md) are also available: `just install-all` or `just setup-all`"
 msgstr ""
 #: ../../../docs/configuring-playbook-matrix-registration.md:78
 msgid "`just install-all` is useful for maintaining your setup quickly ([2x-5x faster](../CHANGELOG.md#2x-5x-performance-improvements-in-playbook-runtime) than `just setup-all`) when its components remain unchanged. If you adjust your `vars.yml` to remove other components, you'd need to run `just setup-all`, or these components will still remain installed. Note these shortcuts run the `ensure-matrix-users-created` tag too."
 msgstr ""
 #: ../../../docs/configuring-playbook-matrix-registration.md:80
 msgid "Usage"
 msgstr ""
 #: ../../../docs/configuring-playbook-matrix-registration.md:82
 msgid "**matrix-registration** gets exposed at `https://matrix.example.com/matrix-registration`"
 msgstr ""
 #: ../../../docs/configuring-playbook-matrix-registration.md:84
 msgid "It provides various [APIs](https://github.com/ZerataX/matrix-registration/wiki/api) — for creating registration tokens, listing tokens, disabling tokens, etc. To make use of all of its capabilities, consider using `curl`."
 msgstr ""
 #: ../../../docs/configuring-playbook-matrix-registration.md:86
 msgid "We make the most common APIs easy to use via the playbook (see below)."
 msgstr ""
 #: ../../../docs/configuring-playbook-matrix-registration.md:88
 msgid "Creating registration tokens"
 msgstr ""
 #: ../../../docs/configuring-playbook-matrix-registration.md:90
 msgid "To **create a new user registration token (link)**, use this command:"
 msgstr ""
 #: ../../../docs/configuring-playbook-matrix-registration.md:98
 msgid "The above command creates and returns a **one-time use** token, which **expires** on the 31st of December 2021. Adjust the `one_time` and `ex_date` variables as you see fit."
 msgstr ""
 #: ../../../docs/configuring-playbook-matrix-registration.md:100
 msgid "Share the unique registration link (generated by the command above) with users to let them register on your Matrix server."
 msgstr ""
 #: ../../../docs/configuring-playbook-matrix-registration.md:102
 msgid "Listing registration tokens"
 msgstr ""
 #: ../../../docs/configuring-playbook-matrix-registration.md:104
 msgid "To **list the existing user registration tokens**, use this command:"
 msgstr ""
 #: ../../../docs/configuring-playbook-matrix-registration.md:111
 msgid "The shortcut command with `just` program is also available: `just run-tags list-matrix-registration-tokens`"
 msgstr ""
 #: ../../../docs/configuring-playbook-matrix-registration.md:113
 msgid "Troubleshooting"
 msgstr ""
 #: ../../../docs/configuring-playbook-matrix-registration.md:115
 msgid "As with all other services, you can find the logs in [systemd-journald](https://www.freedesktop.org/software/systemd/man/systemd-journald.service.html) by logging in to the server with SSH and running `journalctl -fu matrix-registration`."
 msgstr ""
@@ -8,7 +8,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: matrix-docker-ansible-deploy \n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2026-05-19 07:40+0000\n"
+"POT-Creation-Date: 2026-05-07 11:16+0000\n"
 "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
 "Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
 "Language-Team: LANGUAGE <LL@li.org>\n"
@@ -56,8 +56,8 @@ msgstr ""
 msgid "A client compatible with Element Call. As of 2025-03-15, that's just [Element Web](configuring-playbook-client-element-web.md) and the Element X mobile clients (iOS and Android)."
 msgstr ""
-#: ../../../docs/configuring-playbook-matrix-rtc.md:25
+#: ../../../docs/configuring-playbook-matrix-rtc.md:24
-msgid "Because Element Call [requires](https://github.com/element-hq/element-call/blob/93ae2aed9841e0b066d515c56bd4c122d2b591b2/docs/self-hosting.md#a-matrix-homeserver) a few experimental features in the Matrix protocol, it's **very likely that it only works with the Synapse homeserver**."
+msgid "[!WARNING]  Because Element Call [requires](https://github.com/element-hq/element-call/blob/93ae2aed9841e0b066d515c56bd4c122d2b591b2/docs/self-hosting.md#a-matrix-homeserver) a few experimental features in the Matrix protocol, it's **very likely that it only works with the Synapse homeserver**."
 msgstr ""
 #: ../../../docs/configuring-playbook-matrix-rtc.md:27
@@ -8,7 +8,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: matrix-docker-ansible-deploy \n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2026-05-19 07:40+0000\n"
+"POT-Creation-Date: 2026-04-15 09:10+0000\n"
 "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
 "Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
 "Language-Team: LANGUAGE <LL@li.org>\n"
@@ -24,8 +24,8 @@ msgstr ""
 msgid "The playbook can install [Prometheus](https://prometheus.io/) with [Grafana](https://grafana.com/) and configure performance metrics of your homeserver with graphs for you."
 msgstr ""
-#: ../../../docs/configuring-playbook-prometheus-grafana.md:19
+#: ../../../docs/configuring-playbook-prometheus-grafana.md:18
-msgid "Metrics and graphs contain a lot of information, and anyone who has access to them can make an educated guess about your server usage patterns. This especially applies to small personal/family scale homeservers, where the number of samples is fairly limited. Analyzing the metrics over time, one might be able to figure out your life cycle, such as when you wake up, go to bed, etc. Before enabling (anonymous) access, you should carefully evaluate the risk, and if you do enable it, it is highly recommended to change your Grafana password from the default one."
+msgid "[!WARNING] Metrics and graphs contain a lot of information, and anyone who has access to them can make an educated guess about your server usage patterns. This especially applies to small personal/family scale homeservers, where the number of samples is fairly limited. Analyzing the metrics over time, one might be able to figure out your life cycle, such as when you wake up, go to bed, etc. Before enabling (anonymous) access, you should carefully evaluate the risk, and if you do enable it, it is highly recommended to change your Grafana password from the default one."
 msgstr ""
 #: ../../../docs/configuring-playbook-prometheus-grafana.md:21
@@ -1,237 +0,0 @@
 # SOME DESCRIPTIVE TITLE.
 # Copyright (C) 2018-2026, Slavi Pantaleev, Aine Etke, MDAD community members
 # This file is distributed under the same license as the matrix-docker-ansible-deploy package.
 # FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
 #
 #, fuzzy
 msgid ""
 msgstr ""
 "Project-Id-Version: matrix-docker-ansible-deploy \n"
 "Report-Msgid-Bugs-To: \n"
 "POT-Creation-Date: 2026-06-29 17:11+0000\n"
 "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
 "Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
 "Language-Team: LANGUAGE <LL@li.org>\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
 #: ../../../docs/configuring-playbook-synology.md:7
 msgid "Configuring Synology DSM"
 msgstr ""
 #: ../../../docs/configuring-playbook-synology.md:9
 msgid "This document is a guide for preparing Synology DSM for the installation of the [Matrix Docker Ansible Deploy](https://github.com/spantaleev/matrix-docker-ansible-deploy) project."
 msgstr ""
 #: ../../../docs/configuring-playbook-synology.md:11
 msgid "**Note:** Synology DSM is a community-supported platform. It is not officially tested or maintained by the project maintainers. Use at your own discretion."
 msgstr ""
 #: ../../../docs/configuring-playbook-synology.md:13
 msgid "**Intended audience:** Users already familiar with DSM, SSH, and this Ansible project."
 msgstr ""
 #: ../../../docs/configuring-playbook-synology.md:15
 msgid "Assumptions"
 msgstr ""
 #: ../../../docs/configuring-playbook-synology.md:17
 msgid "DSM version 7 or higher"
 msgstr ""
 #: ../../../docs/configuring-playbook-synology.md:18
 msgid "`Volume1` is used as the default Docker storage location"
 msgstr ""
 #: ../../../docs/configuring-playbook-synology.md:19
 msgid "You are using DSM's built-in reverse proxy for handling HTTPS"
 msgstr ""
 #: ../../../docs/configuring-playbook-synology.md:21
 msgid "How Synology Support Works"
 msgstr ""
 #: ../../../docs/configuring-playbook-synology.md:23
 msgid "The playbook automatically detects Synology DSM by checking for `/etc/synoinfo.conf`. When detected, it:"
 msgstr ""
 #: ../../../docs/configuring-playbook-synology.md:25
 msgid "Uses `synouser` and `synogroup` (DSM-native tools) instead of standard Linux user management"
 msgstr ""
 #: ../../../docs/configuring-playbook-synology.md:26
 msgid "Constrains the Python `requests` package to a version compatible with the Docker SDK"
 msgstr ""
 #: ../../../docs/configuring-playbook-synology.md:27
 msgid "Ensures `/volume1` has shared mount propagation so container bind mounts work correctly"
 msgstr ""
 #: ../../../docs/configuring-playbook-synology.md:28
 msgid "Deploys a `matrix-synology-boot-fix` service that runs on every boot after Docker is ready"
 msgstr ""
 #: ../../../docs/configuring-playbook-synology.md:30
 msgid "You can override auto-detection by setting `matrix_base_host_is_synology: true` or `false` in your `vars.yml`."
 msgstr ""
 #: ../../../docs/configuring-playbook-synology.md:32
 msgid "Matrix Service Account"
 msgstr ""
 #: ../../../docs/configuring-playbook-synology.md:34
 msgid "The playbook creates a `matrix` system account using Synology's `synouser` tool. The account is secured as follows:"
 msgstr ""
 #: ../../../docs/configuring-playbook-synology.md:36
 msgid "**Expired** (`expired=1`) — the account cannot be used to log in to DSM or any application"
 msgstr ""
 #: ../../../docs/configuring-playbook-synology.md:38
 msgid "You must set a password for this account via `matrix_synology_user_password` in your `vars.yml` (see [vars.yml Configuration](#varsyml-configuration)). The password cannot be used to log in because the account is expired, but a non-empty password is required as an additional security layer."
 msgstr ""
 #: ../../../docs/configuring-playbook-synology.md:40
 msgid "If you pre-create the `matrix` user manually before running the playbook, the playbook will not modify the existing account's settings — you are responsible for securing it."
 msgstr ""
 #: ../../../docs/configuring-playbook-synology.md:42
 msgid "Boot-fix Service"
 msgstr ""
 #: ../../../docs/configuring-playbook-synology.md:44
 msgid "Synology DSM has two boot-time quirks that the boot-fix service addresses automatically:"
 msgstr ""
 #: ../../../docs/configuring-playbook-synology.md:46
 msgid "**`/volume1` shared mount propagation**"
 msgstr ""
 #: ../../../docs/configuring-playbook-synology.md:48
 msgid "Docker requires `/volume1` to be mounted as shared (`mount --make-shared /volume1`) for container bind mounts with `bind-propagation=slave` to work correctly (used by matrix-synapse for its media store). On Synology, this cannot be inserted into the systemd chain before Container Manager starts — doing so causes Container Manager to detect a broken dependency and prompt for repair on every boot. The playbook applies this during setup, and the boot-fix service re-applies it on every subsequent reboot, safely outside Container Manager's dependency chain."
 msgstr ""
 #: ../../../docs/configuring-playbook-synology.md:50
 msgid "**Skipped services at boot**"
 msgstr ""
 #: ../../../docs/configuring-playbook-synology.md:52
 msgid "Synology's systemd drops services with multi-level dependency chains from the boot activation queue (e.g. `matrix-traefik → matrix-container-socket-proxy → docker`). These services show as `inactive` or `failed` after reboot even though they are enabled. The boot-fix service scans for any enabled `matrix-*.service` in either state and starts them automatically."
 msgstr ""
 #: ../../../docs/configuring-playbook-synology.md:54
 msgid "**If you previously configured a Task Scheduler entry** (`Control Panel > Task Scheduler`) to run `mount --make-shared /volume1` at boot-up, you can remove it — the boot-fix service now handles this."
 msgstr ""
 #: ../../../docs/configuring-playbook-synology.md:56
 msgid "Synology GUI Preparation"
 msgstr ""
 #: ../../../docs/configuring-playbook-synology.md:58
 msgid "**Enable SSH**"
 msgstr ""
 #: ../../../docs/configuring-playbook-synology.md:59
 msgid "`Control Panel` > `Terminal & SNMP` > `Enable SSH service`"
 msgstr ""
 #: ../../../docs/configuring-playbook-synology.md:61
 msgid "**Enable SFTP**"
 msgstr ""
 #: ../../../docs/configuring-playbook-synology.md:62
 msgid "`Control Panel` > `File Service` > `FTP` > `Enable SFTP service` with default port"
 msgstr ""
 #: ../../../docs/configuring-playbook-synology.md:64
 msgid "**Enable User Home Directory**"
 msgstr ""
 #: ../../../docs/configuring-playbook-synology.md:65
 msgid "`Control Panel` > `User & Group` > `Advanced` > `Enable user home service`"
 msgstr ""
 #: ../../../docs/configuring-playbook-synology.md:67
 msgid "**Install Container Manager**"
 msgstr ""
 #: ../../../docs/configuring-playbook-synology.md:68
 msgid "Install from `Package Center`"
 msgstr ""
 #: ../../../docs/configuring-playbook-synology.md:70
 msgid "**Configure Reverse Proxy**"
 msgstr ""
 #: ../../../docs/configuring-playbook-synology.md:71
 msgid "`Control Panel` > `Login Portal` > `Advanced` > `Reverse Proxy`"
 msgstr ""
 #: ../../../docs/configuring-playbook-synology.md:72
 msgid "Create entries for each service you enable (e.g. Matrix, Element, admin page)"
 msgstr ""
 #: ../../../docs/configuring-playbook-synology.md:73
 msgid "Example entry:"
 msgstr ""
 #: ../../../docs/configuring-playbook-synology.md:74
 msgid "Source: `HTTPS` / `matrix.example.com` / port `443`"
 msgstr ""
 #: ../../../docs/configuring-playbook-synology.md:75
 msgid "Destination: `HTTP` / `localhost` / port `81`"
 msgstr ""
 #: ../../../docs/configuring-playbook-synology.md:77
 msgid "SSH Preparation"
 msgstr ""
 #: ../../../docs/configuring-playbook-synology.md:79
 msgid "(Optional but Recommended) Enable SSH Key Authentication"
 msgstr ""
 #: ../../../docs/configuring-playbook-synology.md:81
 msgid "Configure key-based SSH login to avoid password prompts during Ansible runs."
 msgstr ""
 #: ../../../docs/configuring-playbook-synology.md:83
 msgid "Set Up the Ansible Environment"
 msgstr ""
 #: ../../../docs/configuring-playbook-synology.md:85
 msgid "Create a project folder and Python virtual environment on the DSM host:"
 msgstr ""
 #: ../../../docs/configuring-playbook-synology.md:96
 msgid "Inventory Configuration"
 msgstr ""
 #: ../../../docs/configuring-playbook-synology.md:98
 msgid "In your `inventory/hosts` file, set the Python interpreter to your virtual environment:"
 msgstr ""
 #: ../../../docs/configuring-playbook-synology.md:105
 msgid "vars.yml Configuration"
 msgstr ""
 #: ../../../docs/configuring-playbook-synology.md:107
 msgid "Add the following Synology-specific variables to your `vars.yml`:"
 msgstr ""
 #: ../../../docs/configuring-playbook-synology.md:151
 msgid "Running the Playbook"
 msgstr ""
 #: ../../../docs/configuring-playbook-synology.md:167
 msgid "**Important:** Always include `stop` before `setup-all,start` when changing configuration. Running `setup-all` alone does not restart already-running containers."
 msgstr ""
 #: ../../../docs/configuring-playbook-synology.md:169
 msgid "Creating Matrix Users"
 msgstr ""
 #: ../../../docs/configuring-playbook-synology.md:171
 msgid "After the services are running, create your first Matrix user:"
 msgstr ""
@@ -8,7 +8,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: matrix-docker-ansible-deploy \n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2026-05-19 07:40+0000\n"
+"POT-Creation-Date: 2026-04-15 09:10+0000\n"
 "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
 "Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
 "Language-Team: LANGUAGE <LL@li.org>\n"
@@ -64,8 +64,8 @@ msgstr ""
 msgid "The role also supports the legacy `traefik_dashboard_basicauth_user` / `traefik_dashboard_basicauth_password` convenience variables, but that path depends on the `passlib` Python library on the Ansible controller, may be affected by passlib/bcrypt compatibility issues, and generates non-deterministic hashes which can lead to unnecessary changes."
 msgstr ""
-#: ../../../docs/configuring-playbook-traefik.md:54
+#: ../../../docs/configuring-playbook-traefik.md:53
-msgid "Enabling the dashboard on a hostname you use for something else (like `matrix_server_fqn_matrix` in the configuration above) may cause conflicts. Enabling the Traefik Dashboard makes Traefik capture all `/dashboard` and `/api` requests and forward them to itself. If any of the services hosted on the same hostname requires any of these 2 URL prefixes, you will experience problems. So far, we're not aware of any playbook services which occupy these endpoints and are likely to cause conflicts."
+msgid "[!WARNING] Enabling the dashboard on a hostname you use for something else (like `matrix_server_fqn_matrix` in the configuration above) may cause conflicts. Enabling the Traefik Dashboard makes Traefik capture all `/dashboard` and `/api` requests and forward them to itself. If any of the services hosted on the same hostname requires any of these 2 URL prefixes, you will experience problems. So far, we're not aware of any playbook services which occupy these endpoints and are likely to cause conflicts."
 msgstr ""
 #: ../../../docs/configuring-playbook-traefik.md:56
@@ -145,8 +145,8 @@ msgstr ""
 msgid "With these changes, all TCP traffic will be reverse-proxied to the target system."
 msgstr ""
-#: ../../../docs/configuring-playbook-traefik.md:171
+#: ../../../docs/configuring-playbook-traefik.md:170
-msgid "This configuration might lead to problems or need additional steps when a [certbot](https://certbot.eff.org/) behind Traefik also tries to manage [Let's Encrypt](https://letsencrypt.org/) certificates, as Traefik captures all traffic to ```PathPrefix(`/.well-known/acme-challenge/`)```."
+msgid "[!WARNING] This configuration might lead to problems or need additional steps when a [certbot](https://certbot.eff.org/) behind Traefik also tries to manage [Let's Encrypt](https://letsencrypt.org/) certificates, as Traefik captures all traffic to ```PathPrefix(`/.well-known/acme-challenge/`)```."
 msgstr ""
 #: ../../../docs/configuring-playbook-traefik.md:173
@@ -8,7 +8,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: matrix-docker-ansible-deploy \n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2026-05-19 07:40+0000\n"
+"POT-Creation-Date: 2026-04-15 09:10+0000\n"
 "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
 "Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
 "Language-Team: LANGUAGE <LL@li.org>\n"
@@ -92,8 +92,8 @@ msgstr ""
 msgid "If you'd like to rely on external IP address auto-detection (not recommended unless you need it), avoid configuring this variable. The playbook will automatically contact an [echoip](https://github.com/mpolden/echoip)-compatible service (`https://ifconfig.co/json` by default) to determine your server's IP address. This API endpoint is configurable via the `coturn_turn_external_ip_address_auto_detection_echoip_service_url` variable."
 msgstr ""
-#: ../../../docs/configuring-playbook-turn.md:58
+#: ../../../docs/configuring-playbook-turn.md:57
-msgid "You can self-host the echoip service by using the [Mother-of-All-Self-Hosting (MASH)](https://github.com/mother-of-all-self-hosting/mash-playbook) Ansible playbook. See [this page](https://github.com/mother-of-all-self-hosting/mash-playbook/blob/main/docs/services/echoip.md) for the instruction to install it with the playbook. If you are wondering how to use it for your Matrix server, refer to [this page](https://github.com/mother-of-all-self-hosting/mash-playbook/blob/main/docs/setting-up-services-on-mdad-server.md) for the overview."
+msgid "[!NOTE] You can self-host the echoip service by using the [Mother-of-All-Self-Hosting (MASH)](https://github.com/mother-of-all-self-hosting/mash-playbook) Ansible playbook. See [this page](https://github.com/mother-of-all-self-hosting/mash-playbook/blob/main/docs/services/echoip.md) for the instruction to install it with the playbook. If you are wondering how to use it for your Matrix server, refer to [this page](https://github.com/mother-of-all-self-hosting/mash-playbook/blob/main/docs/setting-up-services-on-mdad-server.md) for the overview."
 msgstr ""
 #: ../../../docs/configuring-playbook-turn.md:60
@@ -8,7 +8,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: matrix-docker-ansible-deploy \n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2026-05-21 19:21+0000\n"
+"POT-Creation-Date: 2026-05-09 06:50+0000\n"
 "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
 "Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
 "Language-Team: LANGUAGE <LL@li.org>\n"
@@ -32,6 +32,10 @@ msgstr ""
 msgid "By default, the playbook installs [Synapse](https://github.com/element-hq/synapse) as it's the only full-featured Matrix server at the moment. If that's okay, you can skip this document."
 msgstr ""
 #: ../../../docs/configuring-playbook-tuwunel.md:16
 msgid "[!WARNING]"
 msgstr ""
 #: ../../../docs/configuring-playbook-tuwunel.md:17
 msgid "**You can't switch an existing Matrix server's implementation** (e.g. Synapse → Tuwunel). Proceed below only if you're OK with starting over, or you're dealing with a server on a new domain name which hasn't participated in the Matrix federation yet. The one exception is migrating from conduwuit; see [Migrating from conduwuit](#migrating-from-conduwuit)."
 msgstr ""
@@ -120,8 +124,8 @@ msgstr ""
 msgid "Tuwunel can authenticate `m.login.password` requests against an LDAP directory and, in search-then-bind mode, keep admin status in sync with directory membership. The shipped image already includes the `ldap` build feature."
 msgstr ""
-#: ../../../docs/configuring-playbook-tuwunel.md:98
+#: ../../../docs/configuring-playbook-tuwunel.md:97
-msgid "`bind_password_file` is read **inside the container**. The role bind-mounts `/matrix/tuwunel/config` to `/etc/tuwunel` (read-only) and `/matrix/tuwunel/data` to `/var/lib/tuwunel`. To make the file available at the path above, drop it on the host at `/matrix/tuwunel/config/ldap.pw` (owned by `matrix:matrix`) before running the playbook; the role does not template secret files for you."
+msgid "[!NOTE] `bind_password_file` is read **inside the container**. The role bind-mounts `/matrix/tuwunel/config` to `/etc/tuwunel` (read-only) and `/matrix/tuwunel/data` to `/var/lib/tuwunel`. To make the file available at the path above, drop it on the host at `/matrix/tuwunel/config/ldap.pw` (owned by `matrix:matrix`) before running the playbook; the role does not template secret files for you."
 msgstr ""
 #: ../../../docs/configuring-playbook-tuwunel.md:100
@@ -152,8 +156,8 @@ msgstr ""
 msgid "The S3 backend ships with native multipart upload, so no goofys/rclone sidecar is required. MinIO, Cloudflare R2, and DigitalOcean Spaces all work; set `endpoint` and `use_vhost_request: false` as appropriate."
 msgstr ""
-#: ../../../docs/configuring-playbook-tuwunel.md:139
+#: ../../../docs/configuring-playbook-tuwunel.md:138
-msgid "Local provider paths must live under `/var/lib/tuwunel` (the container's data mount, persisted on the host at `/matrix/tuwunel/data`), or you must mount the target directory into the container yourself via `matrix_tuwunel_container_extra_arguments`. The container otherwise runs read-only."
+msgid "[!NOTE] Local provider paths must live under `/var/lib/tuwunel` (the container's data mount, persisted on the host at `/matrix/tuwunel/data`), or you must mount the target directory into the container yourself via `matrix_tuwunel_container_extra_arguments`. The container otherwise runs read-only."
 msgstr ""
 #: ../../../docs/configuring-playbook-tuwunel.md:141
@@ -161,109 +165,105 @@ msgid "RocksDB and cache tuning"
 msgstr ""
 #: ../../../docs/configuring-playbook-tuwunel.md:143
-msgid "Tuwunel embeds RocksDB. The defaults (`rocksdb_compression_algo: zstd`) suit most deployments. For high-throughput servers you may want to enable direct I/O, raise parallelism, and configure a backup path:"
+msgid "Tuwunel embeds RocksDB. The defaults (`rocksdb_compression_algo: zstd`) suit most deployments. For high-throughput servers you may want to enable direct I/O, raise parallelism, and bump the cache modifier:"
 msgstr ""
-#: ../../../docs/configuring-playbook-tuwunel.md:151
+#: ../../../docs/configuring-playbook-tuwunel.md:152
 msgid "`matrix_tuwunel_config_cache_capacity_modifier` is left empty by default, so Tuwunel picks a value (`1.0` since v1.7.0, with rebalanced per-cache sizes that already raise memory use). Set it to `2.0` only on small hosts with four or fewer cores; on larger machines the default is recommended."
 msgstr ""
 #: ../../../docs/configuring-playbook-tuwunel.md:153
 msgid "If you run on ZFS, the [Tuwunel maintenance guide](https://matrix-construct.github.io/tuwunel/maintenance.html#zfs) lists the dataset properties (`recordsize`, `primarycache`, `compression`, `atime`, `logbias`) and config flags (`rocksdb_direct_io`, `rocksdb_allow_fallocate`) you need to adjust to avoid severe write amplification."
 msgstr ""
-#: ../../../docs/configuring-playbook-tuwunel.md:155
+#: ../../../docs/configuring-playbook-tuwunel.md:154
 msgid "To enable Sentry crash reporting, set `matrix_tuwunel_config_sentry_enabled: true`."
 msgstr ""
-#: ../../../docs/configuring-playbook-tuwunel.md:157
+#: ../../../docs/configuring-playbook-tuwunel.md:156
 msgid "Federation gating"
 msgstr ""
-#: ../../../docs/configuring-playbook-tuwunel.md:159
+#: ../../../docs/configuring-playbook-tuwunel.md:158
 msgid "Tuwunel accepts regular-expression patterns at every level of remote-server filtering:"
 msgstr ""
-#: ../../../docs/configuring-playbook-tuwunel.md:170
+#: ../../../docs/configuring-playbook-tuwunel.md:169
 msgid "Tuwunel additionally implements [MSC4284 policy servers](https://github.com/matrix-org/matrix-spec-proposals/pull/4284) for room-level federation gating. The policy itself lives in room state, but enforcement is opt-in at the server level:"
 msgstr ""
-#: ../../../docs/configuring-playbook-tuwunel.md:177
+#: ../../../docs/configuring-playbook-tuwunel.md:176
 msgid "When enabled, rooms with a valid `m.room.policy` state event have outgoing events signed by the configured policy server before federation. Transient network or timeout failures fail open (with a warn log), so a policy-server outage will not silently take the room offline."
 msgstr ""
-#: ../../../docs/configuring-playbook-tuwunel.md:179
+#: ../../../docs/configuring-playbook-tuwunel.md:178
 msgid "Default room version"
 msgstr ""
-#: ../../../docs/configuring-playbook-tuwunel.md:181
+#: ../../../docs/configuring-playbook-tuwunel.md:180
 msgid "The role sets `default_room_version: '12'`, so newly created rooms default to Matrix [room version 12](https://github.com/matrix-org/matrix-spec-proposals/pull/4289) (\"Hydra\"). Override `matrix_tuwunel_config_default_room_version` if you need an earlier version for client compatibility."
 msgstr ""
-#: ../../../docs/configuring-playbook-tuwunel.md:183
+#: ../../../docs/configuring-playbook-tuwunel.md:182
 msgid "Creating the first user account"
 msgstr ""
-#: ../../../docs/configuring-playbook-tuwunel.md:185
+#: ../../../docs/configuring-playbook-tuwunel.md:184
 msgid "Unlike Synapse and Dendrite, Tuwunel does not register users from the command line or via the playbook. On first startup it logs a one-time-use registration token to its journal:"
 msgstr ""
-#: ../../../docs/configuring-playbook-tuwunel.md:192
+#: ../../../docs/configuring-playbook-tuwunel.md:191
 msgid "Use the token to create your first account from any client that supports token-gated registration (e.g. [Element Web](configuring-playbook-client-element-web.md)). The account is auto-promoted to admin and invited to the admin room together with the `@conduit:<server_name>` server bot. The bot keeps the legacy `conduit` localpart due to the project's lineage from Conduit."
 msgstr ""
-#: ../../../docs/configuring-playbook-tuwunel.md:194
+#: ../../../docs/configuring-playbook-tuwunel.md:193
 msgid "Configuring bridges and appservices"
 msgstr ""
-#: ../../../docs/configuring-playbook-tuwunel.md:196
+#: ../../../docs/configuring-playbook-tuwunel.md:195
 msgid "The playbook does not auto-register appservices for Tuwunel. After your bridge has produced its `registration.yaml` (e.g. `/matrix/mautrix-signal/bridge/registration.yaml`), register it manually by sending the contents to the admin room, prefixed with `!admin appservices register` and wrapped in a fenced code block:"
 msgstr ""
-#: ../../../docs/configuring-playbook-tuwunel.md:217
+#: ../../../docs/configuring-playbook-tuwunel.md:216
 msgid "Registrations stored this way are persisted in the database and survive restarts. Re-running the command with the same `id` replaces the existing entry. See [Application services](https://matrix-construct.github.io/tuwunel/appservices.html) for the full reference and admin commands."
 msgstr ""
-#: ../../../docs/configuring-playbook-tuwunel.md:219
+#: ../../../docs/configuring-playbook-tuwunel.md:218
 msgid "Migrating from conduwuit"
 msgstr ""
-#: ../../../docs/configuring-playbook-tuwunel.md:221
+#: ../../../docs/configuring-playbook-tuwunel.md:220
 msgid "Tuwunel is a \"binary swap\" for conduwuit; it reads conduwuit's RocksDB layout directly, so migration is a data move, not an export/import."
 msgstr ""
-#: ../../../docs/configuring-playbook-tuwunel.md:223
+#: ../../../docs/configuring-playbook-tuwunel.md:222
 msgid "Set `matrix_homeserver_implementation: tuwunel` on `vars.yml` and remove any `matrix_conduwuit_*` overrides."
 msgstr ""
-#: ../../../docs/configuring-playbook-tuwunel.md:224
+#: ../../../docs/configuring-playbook-tuwunel.md:223
 msgid "Run a full installation so that the new service is created and the old one removed (e.g. `just setup-all`)."
 msgstr ""
-#: ../../../docs/configuring-playbook-tuwunel.md:225
+#: ../../../docs/configuring-playbook-tuwunel.md:224
 msgid "Run `just run-tags tuwunel-migrate-from-conduwuit`."
 msgstr ""
-#: ../../../docs/configuring-playbook-tuwunel.md:227
+#: ../../../docs/configuring-playbook-tuwunel.md:226
 msgid "The migration stops `matrix-conduwuit.service`, copies `/matrix/conduwuit` into `/matrix/tuwunel`, renames the config file, and starts `matrix-tuwunel.service`. The freshly generated tuwunel data directory is preserved alongside as `/matrix/tuwunel_old` until you remove it manually."
 msgstr ""
-#: ../../../docs/configuring-playbook-tuwunel.md:230
+#: ../../../docs/configuring-playbook-tuwunel.md:228
-msgid "Migrating from any other Conduit derivative (Conduit itself, Continuwuity, or any other fork) is **not supported** and will corrupt your database. All Conduit forks share the same linear database version with no awareness of each other; switching between them produces unrecoverable damage. See the [upstream migration table](https://matrix-construct.github.io/tuwunel/#migrating-to-tuwunel)."
+msgid "[!CAUTION] Migrating from any other Conduit derivative (Conduit itself, Continuwuity, or any other fork) is **not supported** and will corrupt your database. All Conduit forks share the same linear database version with no awareness of each other; switching between them produces unrecoverable damage. See the [upstream migration table](https://matrix-construct.github.io/tuwunel/#migrating-to-tuwunel)."
 msgstr ""
-#: ../../../docs/configuring-playbook-tuwunel.md:232
+#: ../../../docs/configuring-playbook-tuwunel.md:231
 msgid "Troubleshooting"
 msgstr ""
-#: ../../../docs/configuring-playbook-tuwunel.md:234
+#: ../../../docs/configuring-playbook-tuwunel.md:233
 msgid "As with all other services, the logs are available via [systemd-journald](https://www.freedesktop.org/software/systemd/man/systemd-journald.service.html):"
 msgstr ""
-#: ../../../docs/configuring-playbook-tuwunel.md:240
+#: ../../../docs/configuring-playbook-tuwunel.md:239
 msgid "Logging verbosity is controlled by `matrix_tuwunel_config_log` in [`tracing-subscriber` env-filter syntax](https://docs.rs/tracing-subscriber/latest/tracing_subscriber/filter/struct.EnvFilter.html). The default (`info,state_res=warn`) is reasonable for production; for debugging, try `debug` or scope it tighter, e.g. `info,tuwunel_service::sending=debug`."
 msgstr ""
-#: ../../../docs/configuring-playbook-tuwunel.md:242
+#: ../../../docs/configuring-playbook-tuwunel.md:241
 msgid "For RocksDB-level issues, online backups, and offline backup procedures, see the [Tuwunel maintenance guide](https://matrix-construct.github.io/tuwunel/maintenance.html). For protocol-compliance state across MSCs, the spec, and Complement, the project's [compliance dashboard](https://matrix-construct.github.io/tuwunel/development/compliance.html) is the authoritative tracker."
 msgstr ""
@@ -8,7 +8,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: matrix-docker-ansible-deploy \n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2026-05-19 07:40+0000\n"
+"POT-Creation-Date: 2026-02-13 10:32+0000\n"
 "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
 "Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
 "Language-Team: LANGUAGE <LL@li.org>\n"
@@ -100,8 +100,8 @@ msgstr ""
 msgid "UVS requires an access token as an admin user to verify RoomMembership and PowerLevel against `matrix_user_verification_service_uvs_homeserver_url`. Refer to the documentation on [how to obtain an access token](obtaining-access-tokens.md)."
 msgstr ""
-#: ../../../docs/configuring-playbook-user-verification-service.md:54
+#: ../../../docs/configuring-playbook-user-verification-service.md:53
-msgid "Access tokens are sensitive information. Do not include them in any bug reports, messages, or logs. Do not share the access token with anyone."
+msgid "[!WARNING] Access tokens are sensitive information. Do not include them in any bug reports, messages, or logs. Do not share the access token with anyone."
 msgstr ""
 #: ../../../docs/configuring-playbook-user-verification-service.md:56
@@ -8,7 +8,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: matrix-docker-ansible-deploy \n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2026-06-29 17:11+0000\n"
+"POT-Creation-Date: 2026-05-07 11:16+0000\n"
 "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
 "Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
 "Language-Team: LANGUAGE <LL@li.org>\n"
@@ -173,7 +173,7 @@ msgid "[Setting up Cinny](configuring-playbook-client-cinny.md), if you've enabl
 msgstr ""
 #: ../../../docs/configuring-playbook.md:92
-msgid "[Setting up Sable](configuring-playbook-client-sable.md), if you've enabled [Sable](https://github.com/SableClient/Sable), a web client focusing primarily on simple, elegant and secure interface"
+msgid "[Setting up Sable](configuring-playbook-client-sable.md), if you've enabled [Sable](https://github.com/7w1/sable), a web client focusing primarily on simple, elegant and secure interface"
 msgstr ""
 #: ../../../docs/configuring-playbook.md:94
@@ -205,389 +205,385 @@ msgid "[Setting up Ketesa](configuring-playbook-ketesa.md)"
 msgstr ""
 #: ../../../docs/configuring-playbook.md:109
-msgid "[Setting up the REST authentication password provider module](configuring-playbook-rest-auth.md) (advanced)"
+msgid "[Setting up matrix-registration](configuring-playbook-matrix-registration.md)"
 msgstr ""
 #: ../../../docs/configuring-playbook.md:111
-msgid "[Setting up the Shared Secret Auth password provider module](configuring-playbook-shared-secret-auth.md) (advanced)"
+msgid "[Setting up the REST authentication password provider module](configuring-playbook-rest-auth.md) (advanced)"
 msgstr ""
 #: ../../../docs/configuring-playbook.md:113
-msgid "[Setting up the LDAP authentication password provider module](configuring-playbook-ldap-auth.md) (advanced)"
+msgid "[Setting up the Shared Secret Auth password provider module](configuring-playbook-shared-secret-auth.md) (advanced)"
 msgstr ""
 #: ../../../docs/configuring-playbook.md:115
-msgid "[Setting up Synapse Simple Antispam](configuring-playbook-synapse-simple-antispam.md) (advanced)"
+msgid "[Setting up the LDAP authentication password provider module](configuring-playbook-ldap-auth.md) (advanced)"
 msgstr ""
 #: ../../../docs/configuring-playbook.md:117
-msgid "[Setting up Matrix User Verification Service](configuring-playbook-user-verification-service.md) (advanced)"
+msgid "[Setting up matrix-ldap-registration-proxy](configuring-playbook-matrix-ldap-registration-proxy.md) (advanced)"
 msgstr ""
 #: ../../../docs/configuring-playbook.md:119
-msgid "File Storage"
+msgid "[Setting up Synapse Simple Antispam](configuring-playbook-synapse-simple-antispam.md) (advanced)"
 msgstr ""
 #: ../../../docs/configuring-playbook.md:121
-msgid "Use alternative file storage to the default `media_store` folder."
+msgid "[Setting up Matrix User Verification Service](configuring-playbook-user-verification-service.md) (advanced)"
 msgstr ""
 #: ../../../docs/configuring-playbook.md:123
-msgid "[Storing Matrix media files using matrix-media-repo](configuring-playbook-matrix-media-repo.md)"
+msgid "File Storage"
 msgstr ""
 #: ../../../docs/configuring-playbook.md:125
-msgid "[Storing Synapse media files on Amazon S3 or another compatible Object Storage](configuring-playbook-s3.md)"
+msgid "Use alternative file storage to the default `media_store` folder."
 msgstr ""
 #: ../../../docs/configuring-playbook.md:127
-msgid "[Storing Synapse media files on Amazon S3 with Goofys](configuring-playbook-s3-goofys.md)"
+msgid "[Storing Matrix media files using matrix-media-repo](configuring-playbook-matrix-media-repo.md)"
 msgstr ""
 #: ../../../docs/configuring-playbook.md:129
-msgid "[Storing Synapse media files on Amazon S3 with synapse-s3-storage-provider](configuring-playbook-synapse-s3-storage-provider.md)"
+msgid "[Storing Synapse media files on Amazon S3 or another compatible Object Storage](configuring-playbook-s3.md)"
 msgstr ""
 #: ../../../docs/configuring-playbook.md:131
-msgid "Bridging other networks"
+msgid "[Storing Synapse media files on Amazon S3 with Goofys](configuring-playbook-s3-goofys.md)"
 msgstr ""
 #: ../../../docs/configuring-playbook.md:133
-msgid "Bridges can be used to connect your Matrix installation with third-party communication networks."
+msgid "[Storing Synapse media files on Amazon S3 with synapse-s3-storage-provider](configuring-playbook-synapse-s3-storage-provider.md)"
 msgstr ""
 #: ../../../docs/configuring-playbook.md:135
-msgid "[Setting up a Generic Mautrix Bridge](configuring-playbook-bridge-mautrix-bridges.md) — a common guide for configuring mautrix bridges"
+msgid "Bridging other networks"
 msgstr ""
 #: ../../../docs/configuring-playbook.md:137
-msgid "[Setting up Mautrix Bluesky bridging](configuring-playbook-bridge-mautrix-bluesky.md)"
+msgid "Bridges can be used to connect your Matrix installation with third-party communication networks."
 msgstr ""
 #: ../../../docs/configuring-playbook.md:139
-msgid "[Setting up Mautrix Discord bridging](configuring-playbook-bridge-mautrix-discord.md)"
+msgid "[Setting up a Generic Mautrix Bridge](configuring-playbook-bridge-mautrix-bridges.md) — a common guide for configuring mautrix bridges"
 msgstr ""
 #: ../../../docs/configuring-playbook.md:141
-msgid "[Setting up Mautrix Telegram bridging](configuring-playbook-bridge-mautrix-telegram.md)"
+msgid "[Setting up Mautrix Bluesky bridging](configuring-playbook-bridge-mautrix-bluesky.md)"
 msgstr ""
 #: ../../../docs/configuring-playbook.md:143
-msgid "[Setting up Mautrix Slack bridging](configuring-playbook-bridge-mautrix-slack.md)"
+msgid "[Setting up Mautrix Discord bridging](configuring-playbook-bridge-mautrix-discord.md)"
 msgstr ""
 #: ../../../docs/configuring-playbook.md:145
-msgid "[Setting up Mautrix Google Messages bridging](configuring-playbook-bridge-mautrix-gmessages.md)"
+msgid "[Setting up Mautrix Telegram bridging](configuring-playbook-bridge-mautrix-telegram.md)"
 msgstr ""
 #: ../../../docs/configuring-playbook.md:147
-msgid "[Setting up Mautrix Whatsapp bridging](configuring-playbook-bridge-mautrix-whatsapp.md)"
+msgid "[Setting up Mautrix Slack bridging](configuring-playbook-bridge-mautrix-slack.md)"
 msgstr ""
 #: ../../../docs/configuring-playbook.md:149
-msgid "[Setting up Instagram bridging via Mautrix Meta](configuring-playbook-bridge-mautrix-meta-instagram.md)"
+msgid "[Setting up Mautrix Google Messages bridging](configuring-playbook-bridge-mautrix-gmessages.md)"
 msgstr ""
 #: ../../../docs/configuring-playbook.md:151
-msgid "[Setting up Messenger bridging via Mautrix Meta](configuring-playbook-bridge-mautrix-meta-messenger.md)"
+msgid "[Setting up Mautrix Whatsapp bridging](configuring-playbook-bridge-mautrix-whatsapp.md)"
 msgstr ""
 #: ../../../docs/configuring-playbook.md:153
-msgid "[Setting up Mautrix Google Chat bridging](configuring-playbook-bridge-mautrix-googlechat.md)"
+msgid "[Setting up Instagram bridging via Mautrix Meta](configuring-playbook-bridge-mautrix-meta-instagram.md)"
 msgstr ""
 #: ../../../docs/configuring-playbook.md:155
-msgid "[Setting up Mautrix Twitter bridging](configuring-playbook-bridge-mautrix-twitter.md)"
+msgid "[Setting up Messenger bridging via Mautrix Meta](configuring-playbook-bridge-mautrix-meta-messenger.md)"
 msgstr ""
 #: ../../../docs/configuring-playbook.md:157
-msgid "[Setting up Mautrix Signal bridging](configuring-playbook-bridge-mautrix-signal.md)"
+msgid "[Setting up Mautrix Google Chat bridging](configuring-playbook-bridge-mautrix-googlechat.md)"
 msgstr ""
 #: ../../../docs/configuring-playbook.md:159
-msgid "[Setting up Mautrix wsproxy for bridging Android SMS or Apple iMessage](configuring-playbook-bridge-mautrix-wsproxy.md)"
+msgid "[Setting up Mautrix Twitter bridging](configuring-playbook-bridge-mautrix-twitter.md)"
 msgstr ""
 #: ../../../docs/configuring-playbook.md:161
-msgid "[Setting up RustPush (iMessage) bridging](configuring-playbook-bridge-rustpush.md)"
+msgid "[Setting up Mautrix Signal bridging](configuring-playbook-bridge-mautrix-signal.md)"
 msgstr ""
 #: ../../../docs/configuring-playbook.md:163
-msgid "[Setting up Appservice IRC bridging](configuring-playbook-bridge-appservice-irc.md)"
+msgid "[Setting up Mautrix wsproxy for bridging Android SMS or Apple iMessage](configuring-playbook-bridge-mautrix-wsproxy.md)"
 msgstr ""
 #: ../../../docs/configuring-playbook.md:165
-msgid "[Setting up Appservice Discord bridging](configuring-playbook-bridge-appservice-discord.md)"
+msgid "[Setting up Appservice IRC bridging](configuring-playbook-bridge-appservice-irc.md)"
 msgstr ""
 #: ../../../docs/configuring-playbook.md:167
-msgid "[Setting up Appservice Kakaotalk bridging](configuring-playbook-bridge-appservice-kakaotalk.md)"
+msgid "[Setting up Appservice Discord bridging](configuring-playbook-bridge-appservice-discord.md)"
 msgstr ""
 #: ../../../docs/configuring-playbook.md:169
-msgid "[Setting up Beeper LinkedIn bridging](configuring-playbook-bridge-beeper-linkedin.md)"
+msgid "[Setting up Appservice Kakaotalk bridging](configuring-playbook-bridge-appservice-kakaotalk.md)"
 msgstr ""
 #: ../../../docs/configuring-playbook.md:171
-msgid "[Setting up matrix-hookshot](configuring-playbook-bridge-hookshot.md) — a bridge between Matrix and multiple project management services, such as [GitHub](https://github.com), [GitLab](https://about.gitlab.com) and [JIRA](https://www.atlassian.com/software/jira)."
+msgid "[Setting up Beeper LinkedIn bridging](configuring-playbook-bridge-beeper-linkedin.md)"
 msgstr ""
 #: ../../../docs/configuring-playbook.md:173
-msgid "[Setting up MX Puppet GroupMe bridging](configuring-playbook-bridge-mx-puppet-groupme.md)"
+msgid "[Setting up matrix-hookshot](configuring-playbook-bridge-hookshot.md) — a bridge between Matrix and multiple project management services, such as [GitHub](https://github.com), [GitLab](https://about.gitlab.com) and [JIRA](https://www.atlassian.com/software/jira)."
 msgstr ""
 #: ../../../docs/configuring-playbook.md:175
-msgid "[Setting up Steam bridging](configuring-playbook-bridge-steam.md)"
+msgid "[Setting up MX Puppet GroupMe bridging](configuring-playbook-bridge-mx-puppet-groupme.md)"
 msgstr ""
 #: ../../../docs/configuring-playbook.md:177
-msgid "[Setting up MX Puppet Steam bridging](configuring-playbook-bridge-mx-puppet-steam.md)"
+msgid "[Setting up Steam bridging](configuring-playbook-bridge-steam.md)"
 msgstr ""
 #: ../../../docs/configuring-playbook.md:179
-msgid "[Setting up Postmoogle email bridging](configuring-playbook-bridge-postmoogle.md)"
+msgid "[Setting up MX Puppet Steam bridging](configuring-playbook-bridge-mx-puppet-steam.md)"
 msgstr ""
 #: ../../../docs/configuring-playbook.md:181
-msgid "[Setting up Matrix SMS bridging](configuring-playbook-bridge-matrix-bridge-sms.md)"
+msgid "[Setting up Postmoogle email bridging](configuring-playbook-bridge-postmoogle.md)"
 msgstr ""
 #: ../../../docs/configuring-playbook.md:183
-msgid "[Setting up Heisenbridge bouncer-style IRC bridging](configuring-playbook-bridge-heisenbridge.md)"
+msgid "[Setting up Matrix SMS bridging](configuring-playbook-bridge-matrix-bridge-sms.md)"
 msgstr ""
 #: ../../../docs/configuring-playbook.md:185
-msgid "[Setting up a Matrix <-> Meshtastic bridge](configuring-playbook-bridge-meshtastic-relay.md)"
+msgid "[Setting up Heisenbridge bouncer-style IRC bridging](configuring-playbook-bridge-heisenbridge.md)"
 msgstr ""
 #: ../../../docs/configuring-playbook.md:187
-msgid "[Setting up WeChat bridging](configuring-playbook-bridge-wechat.md)"
+msgid "[Setting up a Matrix <-> Meshtastic bridge](configuring-playbook-bridge-meshtastic-relay.md)"
 msgstr ""
 #: ../../../docs/configuring-playbook.md:189
-msgid "Bots"
+msgid "[Setting up WeChat bridging](configuring-playbook-bridge-wechat.md)"
 msgstr ""
 #: ../../../docs/configuring-playbook.md:191
-msgid "Bots provide various additional functionality to your installation."
+msgid "Bots"
 msgstr ""
 #: ../../../docs/configuring-playbook.md:193
-msgid "[Setting up baibot](configuring-playbook-bot-baibot.md) — a bot through which you can talk to various [AI](https://en.wikipedia.org/wiki/Artificial_intelligence) / [Large Language Models](https://en.wikipedia.org/wiki/Large_language_model) services (the privacy-first [Venice](configuring-playbook-bot-baibot.md#venice) we recommend, [OpenAI](https://openai.com/)'s [ChatGPT](https://openai.com/blog/chatgpt/), and [others](https://github.com/etkecc/baibot/blob/main/docs/providers.md))"
+msgid "Bots provide various additional functionality to your installation."
 msgstr ""
 #: ../../../docs/configuring-playbook.md:195
-msgid "[Setting up matrix-reminder-bot](configuring-playbook-bot-matrix-reminder-bot.md) — a bot to remind you about stuff"
+msgid "[Setting up baibot](configuring-playbook-bot-baibot.md) — a bot through which you can talk to various [AI](https://en.wikipedia.org/wiki/Artificial_intelligence) / [Large Language Models](https://en.wikipedia.org/wiki/Large_language_model) services ([OpenAI](https://openai.com/)'s [ChatGPT](https://openai.com/blog/chatgpt/) and [others](https://github.com/etkecc/baibot/blob/main/docs/providers.md))"
 msgstr ""
 #: ../../../docs/configuring-playbook.md:197
-msgid "[Setting up matrix-registration-bot](configuring-playbook-bot-matrix-registration-bot.md) — a bot to create and manage registration tokens to invite users"
+msgid "[Setting up matrix-reminder-bot](configuring-playbook-bot-matrix-reminder-bot.md) — a bot to remind you about stuff"
 msgstr ""
 #: ../../../docs/configuring-playbook.md:199
-msgid "[Setting up maubot](configuring-playbook-bot-maubot.md) — a plugin-based Matrix bot system"
+msgid "[Setting up matrix-registration-bot](configuring-playbook-bot-matrix-registration-bot.md) — a bot to create and manage registration tokens to invite users"
 msgstr ""
 #: ../../../docs/configuring-playbook.md:201
-msgid "[Setting up Honoroit](configuring-playbook-bot-honoroit.md) — a helpdesk bot"
+msgid "[Setting up maubot](configuring-playbook-bot-maubot.md) — a plugin-based Matrix bot system"
 msgstr ""
 #: ../../../docs/configuring-playbook.md:203
-msgid "[Setting up Mjolnir](configuring-playbook-bot-mjolnir.md) — a moderation tool/bot"
+msgid "[Setting up Honoroit](configuring-playbook-bot-honoroit.md) — a helpdesk bot"
 msgstr ""
 #: ../../../docs/configuring-playbook.md:205
-msgid "[Setting up Draupnir](configuring-playbook-bot-draupnir.md) — a moderation tool/bot, forked from Mjolnir and maintained by its former leader developer"
+msgid "[Setting up Mjolnir](configuring-playbook-bot-mjolnir.md) — a moderation tool/bot"
 msgstr ""
 #: ../../../docs/configuring-playbook.md:207
-msgid "[Setting up Draupnir for all/D4A](configuring-playbook-appservice-draupnir-for-all.md) — like the [Draupnir bot](configuring-playbook-bot-draupnir.md) mentioned above, but running in appservice mode and supporting multiple instances"
+msgid "[Setting up Draupnir](configuring-playbook-bot-draupnir.md) — a moderation tool/bot, forked from Mjolnir and maintained by its former leader developer"
 msgstr ""
 #: ../../../docs/configuring-playbook.md:209
-msgid "[Setting up Buscarron](configuring-playbook-bot-buscarron.md) — a bot you can use to send any form (HTTP POST, HTML) to a (encrypted) Matrix room"
+msgid "[Setting up Draupnir for all/D4A](configuring-playbook-appservice-draupnir-for-all.md) — like the [Draupnir bot](configuring-playbook-bot-draupnir.md) mentioned above, but running in appservice mode and supporting multiple instances"
 msgstr ""
 #: ../../../docs/configuring-playbook.md:211
-msgid "Administration"
+msgid "[Setting up Buscarron](configuring-playbook-bot-buscarron.md) — a bot you can use to send any form (HTTP POST, HTML) to a (encrypted) Matrix room"
 msgstr ""
 #: ../../../docs/configuring-playbook.md:213
-msgid "Services that help you in administrating and monitoring your Matrix installation."
+msgid "Administration"
 msgstr ""
 #: ../../../docs/configuring-playbook.md:215
-msgid "[Setting up Prometheus Alertmanager integration via matrix-alertmanager-receiver](configuring-playbook-alertmanager-receiver.md)"
+msgid "Services that help you in administrating and monitoring your Matrix installation."
 msgstr ""
 #: ../../../docs/configuring-playbook.md:217
-msgid "[Enabling metrics and graphs (Prometheus, Grafana) for your Matrix server](configuring-playbook-prometheus-grafana.md)"
+msgid "[Setting up Prometheus Alertmanager integration via matrix-alertmanager-receiver](configuring-playbook-alertmanager-receiver.md)"
 msgstr ""
 #: ../../../docs/configuring-playbook.md:219
-msgid "[Setting up the rageshake bug report server](configuring-playbook-rageshake.md)"
+msgid "[Enabling metrics and graphs (Prometheus, Grafana) for your Matrix server](configuring-playbook-prometheus-grafana.md)"
 msgstr ""
 #: ../../../docs/configuring-playbook.md:221
-msgid "[Enabling synapse-usage-exporter for Synapse usage statistics](configuring-playbook-synapse-usage-exporter.md)"
+msgid "[Setting up the rageshake bug report server](configuring-playbook-rageshake.md)"
 msgstr ""
 #: ../../../docs/configuring-playbook.md:223
 msgid "[Enabling synapse-usage-exporter for Synapse usage statistics](configuring-playbook-synapse-usage-exporter.md)"
 msgstr ""
 #: ../../../docs/configuring-playbook.md:225
 msgid "Backups:"
 msgstr ""
-#: ../../../docs/configuring-playbook.md:224
+#: ../../../docs/configuring-playbook.md:226
 msgid "[Setting up BorgBackup](configuring-playbook-backup-borg.md) — a full Matrix server backup solution, including the Postgres database"
 msgstr ""
-#: ../../../docs/configuring-playbook.md:226
+#: ../../../docs/configuring-playbook.md:228
 msgid "[Setting up Postgres backup](configuring-playbook-postgres-backup.md) — a Postgres-database backup solution (note: does not include other files)"
 msgstr ""
-#: ../../../docs/configuring-playbook.md:228
+#: ../../../docs/configuring-playbook.md:230
 msgid "Other specialized services"
 msgstr ""
-#: ../../../docs/configuring-playbook.md:230
+#: ../../../docs/configuring-playbook.md:232
 msgid "Various services that don't fit any other categories."
 msgstr ""
-#: ../../../docs/configuring-playbook.md:232
+#: ../../../docs/configuring-playbook.md:234
 msgid "[Setting up Element Call](configuring-playbook-element-call.md) — a native Matrix video conferencing application, built on top of the [Matrix RTC stack](configuring-playbook-matrix-rtc.md) (optional)"
 msgstr ""
-#: ../../../docs/configuring-playbook.md:234
+#: ../../../docs/configuring-playbook.md:236
 msgid "[Setting up LiveKit JWT Service](configuring-playbook-livekit-jwt-service.md) - a component of the [Matrix RTC stack](configuring-playbook-matrix-rtc.md) (optional)"
 msgstr ""
-#: ../../../docs/configuring-playbook.md:236
+#: ../../../docs/configuring-playbook.md:238
 msgid "[Setting up LiveKit Server](configuring-playbook-livekit-server.md) - a component of the [Matrix RTC stack](configuring-playbook-matrix-rtc.md) (optional)"
 msgstr ""
-#: ../../../docs/configuring-playbook.md:238
+#: ../../../docs/configuring-playbook.md:240
 msgid "[Setting up Matrix RTC](configuring-playbook-matrix-rtc.md) (optional)"
 msgstr ""
-#: ../../../docs/configuring-playbook.md:240
+#: ../../../docs/configuring-playbook.md:242
 msgid "[Setting up synapse-auto-compressor](configuring-playbook-synapse-auto-compressor.md) for compressing the database on Synapse homeservers"
 msgstr ""
-#: ../../../docs/configuring-playbook.md:242
+#: ../../../docs/configuring-playbook.md:244
 msgid "[Setting up Matrix Corporal](configuring-playbook-matrix-corporal.md) (advanced)"
 msgstr ""
-#: ../../../docs/configuring-playbook.md:244
+#: ../../../docs/configuring-playbook.md:246
 msgid "[Setting up Matrix.to](configuring-playbook-matrixto.md)"
 msgstr ""
-#: ../../../docs/configuring-playbook.md:246
+#: ../../../docs/configuring-playbook.md:248
 msgid "[Setting up Etherpad](configuring-playbook-etherpad.md)"
 msgstr ""
-#: ../../../docs/configuring-playbook.md:248
+#: ../../../docs/configuring-playbook.md:250
 msgid "[Setting up the Jitsi video-conferencing platform](configuring-playbook-jitsi.md)"
 msgstr ""
-#: ../../../docs/configuring-playbook.md:250
+#: ../../../docs/configuring-playbook.md:252
 msgid "[Setting up Cactus Comments](configuring-playbook-cactus-comments.md) — a federated comment system built on Matrix"
 msgstr ""
-#: ../../../docs/configuring-playbook.md:252
+#: ../../../docs/configuring-playbook.md:254
 msgid "[Setting up Pantalaimon (E2EE aware proxy daemon)](configuring-playbook-pantalaimon.md) (advanced)"
 msgstr ""
-#: ../../../docs/configuring-playbook.md:254
+#: ../../../docs/configuring-playbook.md:256
 msgid "[Setting up the Sygnal push gateway](configuring-playbook-sygnal.md)"
 msgstr ""
-#: ../../../docs/configuring-playbook.md:256
+#: ../../../docs/configuring-playbook.md:258
 msgid "[Setting up the ntfy push notifications server](configuring-playbook-ntfy.md)"
 msgstr ""
-#: ../../../docs/configuring-playbook.md:258
+#: ../../../docs/configuring-playbook.md:260
 msgid "Deprecated / unmaintained / removed services"
 msgstr ""
-#: ../../../docs/configuring-playbook.md:260
+#: ../../../docs/configuring-playbook.md:262
 msgid "**Note**: since a deprecated or unmaintained service will not be updated, its bug or vulnerability will be unlikely to get patched. It is recommended to migrate from the service to an alternative if any, and make sure to do your own research before you decide to keep it running nonetheless."
 msgstr ""
-#: ../../../docs/configuring-playbook.md:262
+#: ../../../docs/configuring-playbook.md:264
 msgid "[Configuring conduwuit](configuring-playbook-conduwuit.md) (removed; this component has been abandoned and unmaintained)"
 msgstr ""
-#: ../../../docs/configuring-playbook.md:264
+#: ../../../docs/configuring-playbook.md:266
 msgid "[Setting up the Sliding Sync proxy](configuring-playbook-sliding-sync-proxy.md) for clients which require Sliding Sync support (like old Element X versions, before it got switched to Simplified Sliding Sync)"
 msgstr ""
-#: ../../../docs/configuring-playbook.md:266
+#: ../../../docs/configuring-playbook.md:268
 msgid "[Setting up Appservice Slack bridging](configuring-playbook-bridge-appservice-slack.md) (removed; this component has been discontinued)"
 msgstr ""
-#: ../../../docs/configuring-playbook.md:268
+#: ../../../docs/configuring-playbook.md:270
 msgid "[Setting up Appservice Webhooks bridging](configuring-playbook-bridge-appservice-webhooks.md) (deprecated; the bridge's author suggests taking a look at [matrix-hookshot](https://github.com/matrix-org/matrix-hookshot) as a replacement, which can also be [installed using this playbook](configuring-playbook-bridge-hookshot.md))"
 msgstr ""
-#: ../../../docs/configuring-playbook.md:270
+#: ../../../docs/configuring-playbook.md:272
 msgid "[Setting up the Dimension integration manager](configuring-playbook-dimension.md) ([unmaintained](https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/2806#issuecomment-1673559299); after [installing](installing.md))"
 msgstr ""
-#: ../../../docs/configuring-playbook.md:272
+#: ../../../docs/configuring-playbook.md:274
 msgid "[Setting up Email2Matrix](configuring-playbook-email2matrix.md) (removed; the author suggests taking a look at [Postmoogle](https://github.com/etkecc/postmoogle) as a replacement, which can also be [installed using this playbook](configuring-playbook-bridge-postmoogle.md))"
 msgstr ""
-#: ../../../docs/configuring-playbook.md:274
+#: ../../../docs/configuring-playbook.md:276
 msgid "[Setting up Go-NEB](configuring-playbook-bot-go-neb.md) (unmaintained; the bridge's author suggests taking a look at [matrix-hookshot](https://github.com/matrix-org/matrix-hookshot) as a replacement, which can also be [installed using this playbook](configuring-playbook-bridge-hookshot.md))"
 msgstr ""
-#: ../../../docs/configuring-playbook.md:276
+#: ../../../docs/configuring-playbook.md:278
 msgid "[Setting up Go Skype Bridge bridging](configuring-playbook-bridge-go-skype-bridge.md) (removed; Skype has been discontinued since May 2025)"
 msgstr ""
-#: ../../../docs/configuring-playbook.md:278
+#: ../../../docs/configuring-playbook.md:280
 msgid "[Setting up ma1sd Identity Server](configuring-playbook-ma1sd.md) (removed; this component has been unmaintained for a long time, so it has been removed from the playbook.)"
 msgstr ""
-#: ../../../docs/configuring-playbook.md:280
+#: ../../../docs/configuring-playbook.md:282
 msgid "[Setting up matrix-bot-chatgpt](configuring-playbook-bot-chatgpt.md) (unmaintained; the bridge's author suggests taking a look at [baibot](https://github.com/etkecc/baibot) as a replacement, which can also be [installed using this playbook](configuring-playbook-bot-baibot.md))"
 msgstr ""
 #: ../../../docs/configuring-playbook.md:282
 msgid "[Setting up matrix-ldap-registration-proxy](configuring-playbook-matrix-ldap-registration-proxy.md) (removed; the repository of the source code has been removed)"
 msgstr ""
 #: ../../../docs/configuring-playbook.md:284
 msgid "[Setting up matrix-registration](configuring-playbook-matrix-registration.md) (removed; this component has been unmaintained)"
 msgstr ""
 #: ../../../docs/configuring-playbook.md:286
 msgid "[Setting up Mautrix Facebook bridging](configuring-playbook-bridge-mautrix-facebook.md) (deprecated in favor of the Messenger/Instagram bridge with [mautrix-meta-messenger](configuring-playbook-bridge-mautrix-meta-messenger.md))"
 msgstr ""
-#: ../../../docs/configuring-playbook.md:288
+#: ../../../docs/configuring-playbook.md:286
 msgid "[Setting up Mautrix Instagram bridging](configuring-playbook-bridge-mautrix-instagram.md) (deprecated in favor of the Messenger/Instagram bridge with [mautrix-meta-instagram](configuring-playbook-bridge-mautrix-meta-instagram.md))"
 msgstr ""
-#: ../../../docs/configuring-playbook.md:290
+#: ../../../docs/configuring-playbook.md:288
 msgid "[Setting up MX Puppet Discord bridging](configuring-playbook-bridge-mx-puppet-discord.md) (removed; this component has been unmaintained for a long time, so it has been removed from the playbook. Consider [setting up Mautrix Discord bridging](configuring-playbook-bridge-mautrix-discord.md))"
 msgstr ""
-#: ../../../docs/configuring-playbook.md:292
+#: ../../../docs/configuring-playbook.md:290
 msgid "[Setting up MX Puppet Instagram bridging](configuring-playbook-bridge-mx-puppet-instagram.md) (removed; this component has been unmaintained for a long time, so it has been removed from the playbook. Consider [setting up Instagram bridging via Mautrix Meta](configuring-playbook-bridge-mautrix-meta-instagram.md))"
 msgstr ""
-#: ../../../docs/configuring-playbook.md:294
+#: ../../../docs/configuring-playbook.md:292
 msgid "[Setting up MX Puppet Skype bridging](configuring-playbook-bridge-mx-puppet-skype.md) (removed; this component has been broken for a long time, so it has been removed from the playbook. Consider [setting up Go Skype Bridge bridging](configuring-playbook-bridge-go-skype-bridge.md))"
 msgstr ""
-#: ../../../docs/configuring-playbook.md:296
+#: ../../../docs/configuring-playbook.md:294
 msgid "[Setting up MX Puppet Slack bridging](configuring-playbook-bridge-mx-puppet-slack.md) (removed; this component has been unmaintained for a long time, so it has been removed from the playbook. Consider [setting up Mautrix Slack bridging](configuring-playbook-bridge-mautrix-slack.md))"
 msgstr ""
-#: ../../../docs/configuring-playbook.md:298
+#: ../../../docs/configuring-playbook.md:296
 msgid "[Setting up MX Puppet Twitter bridging](configuring-playbook-bridge-mx-puppet-twitter.md) (removed; this component has been unmaintained for a long time, so it has been removed from the playbook. Consider [setting up Mautrix Twitter bridging](configuring-playbook-bridge-mautrix-twitter.md))"
 msgstr ""
-#: ../../../docs/configuring-playbook.md:300
+#: ../../../docs/configuring-playbook.md:298
 msgid "[Setting up Synapse Auto Invite Accept](configuring-playbook-synapse-auto-accept-invite.md) (removed; since Synapse [v1.109.0](https://github.com/element-hq/synapse/releases/tag/v1.109.0) the same feature is available natively.)"
 msgstr ""
@@ -8,7 +8,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: matrix-docker-ansible-deploy \n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2026-06-29 17:11+0000\n"
+"POT-Creation-Date: 2026-05-07 11:16+0000\n"
 "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
 "Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
 "Language-Team: LANGUAGE <LL@li.org>\n"
@@ -320,6 +320,30 @@ msgstr ""
 msgid "LDAP Auth password provider module"
 msgstr ""
 #: ../../../docs/container-images.md:0
 msgid "[matrix-ldap-registration-proxy](configuring-playbook-matrix-ldap-registration-proxy.md)"
 msgstr ""
 #: ../../../docs/container-images.md:0
 msgid "[activism.international/matrix_ldap_registration_proxy](https://gitlab.com/activism.international/matrix_ldap_registration_proxy/container_registry)"
 msgstr ""
 #: ../../../docs/container-images.md:0
 msgid "Proxy that handles Matrix registration requests and forwards them to LDAP"
 msgstr ""
 #: ../../../docs/container-images.md:0
 msgid "[matrix-registration](configuring-playbook-matrix-registration.md)"
 msgstr ""
 #: ../../../docs/container-images.md:0
 msgid "[zeratax/matrix-registration](https://hub.docker.com/r/devture/zeratax-matrix-registration/)"
 msgstr ""
 #: ../../../docs/container-images.md:0
 msgid "Simple python application to have a token based Matrix registration"
 msgstr ""
 #: ../../../docs/container-images.md:0
 msgid "[Matrix User Verification Service](configuring-playbook-user-verification-service.md)"
 msgstr ""
@@ -340,11 +364,11 @@ msgstr ""
 msgid "Spam checker module"
 msgstr ""
-#: ../../../docs/container-images.md:73
+#: ../../../docs/container-images.md:75
 msgid "File Storage"
 msgstr ""
-#: ../../../docs/container-images.md:75
+#: ../../../docs/container-images.md:77
 msgid "Use alternative file storage to the default `media_store` folder."
 msgstr ""
@@ -376,11 +400,11 @@ msgstr ""
 msgid "Highly customizable multi-domain media repository for Matrix. Intended for medium to large deployments, this media repo de-duplicates media while being fully compliant with the specification."
 msgstr ""
-#: ../../../docs/container-images.md:83
+#: ../../../docs/container-images.md:85
 msgid "Bridges"
 msgstr ""
-#: ../../../docs/container-images.md:85
+#: ../../../docs/container-images.md:87
 msgid "Bridges can be used to connect your Matrix installation with third-party communication networks."
 msgstr ""
@@ -636,18 +660,6 @@ msgstr ""
 msgid "Bridge to [Steam](https://steampowered.com/)"
 msgstr ""
 #: ../../../docs/container-images.md:0
 msgid "[matrix-rustpush-bridge](configuring-playbook-bridge-rustpush.md)"
 msgstr ""
 #: ../../../docs/container-images.md:0
 msgid "[jasonlaguidice/imessage](https://github.com/jasonlaguidice/imessage/pkgs/container/imessage)"
 msgstr ""
 #: ../../../docs/container-images.md:0
 msgid "Bridge to [iMessage](https://support.apple.com/messages) via Apple Push Notification service"
 msgstr ""
 #: ../../../docs/container-images.md:0
 msgid "[mx-puppet-steam](configuring-playbook-bridge-mx-puppet-steam.md)"
 msgstr ""
@@ -672,11 +684,11 @@ msgstr ""
 msgid "Email to Matrix bridge"
 msgstr ""
-#: ../../../docs/container-images.md:114
+#: ../../../docs/container-images.md:115
 msgid "Bots"
 msgstr ""
-#: ../../../docs/container-images.md:116
+#: ../../../docs/container-images.md:117
 msgid "Bots provide various additional functionality to your installation."
 msgstr ""
@@ -776,11 +788,11 @@ msgstr ""
 msgid "Web forms (HTTP POST) to Matrix"
 msgstr ""
-#: ../../../docs/container-images.md:129
+#: ../../../docs/container-images.md:130
 msgid "Administration"
 msgstr ""
-#: ../../../docs/container-images.md:131
+#: ../../../docs/container-images.md:132
 msgid "Services that help you in administrating and monitoring your Matrix installation."
 msgstr ""
@@ -900,11 +912,11 @@ msgstr ""
 msgid "Export the usage statistics of a Synapse homeserver to be scraped by Prometheus."
 msgstr ""
-#: ../../../docs/container-images.md:147
+#: ../../../docs/container-images.md:148
 msgid "Misc"
 msgstr ""
-#: ../../../docs/container-images.md:149
+#: ../../../docs/container-images.md:150
 msgid "Various services that don't fit any other categories."
 msgstr ""
@@ -1044,11 +1056,11 @@ msgstr ""
 msgid "A native Matrix video conferencing application"
 msgstr ""
-#: ../../../docs/container-images.md:167
+#: ../../../docs/container-images.md:168
 msgid "Container images of deprecated / unmaintained services"
 msgstr ""
-#: ../../../docs/container-images.md:169
+#: ../../../docs/container-images.md:170
 msgid "The list of the deprecated or unmaintained services is available [here](configuring-playbook.md#deprecated--unmaintained--removed-services)."
 msgstr ""
@@ -1144,30 +1156,6 @@ msgstr ""
 msgid "Accessing ChatGPT via your favourite Matrix client"
 msgstr ""
 #: ../../../docs/container-images.md:0
 msgid "[matrix-ldap-registration-proxy](configuring-playbook-matrix-ldap-registration-proxy.md)"
 msgstr ""
 #: ../../../docs/container-images.md:0
 msgid "[activism.international/matrix_ldap_registration_proxy](https://gitlab.com/activism.international/matrix_ldap_registration_proxy/container_registry)"
 msgstr ""
 #: ../../../docs/container-images.md:0
 msgid "Proxy that handles Matrix registration requests and forwards them to LDAP"
 msgstr ""
 #: ../../../docs/container-images.md:0
 msgid "[matrix-registration](configuring-playbook-matrix-registration.md)"
 msgstr ""
 #: ../../../docs/container-images.md:0
 msgid "[zeratax/matrix-registration](https://hub.docker.com/r/devture/zeratax-matrix-registration/)"
 msgstr ""
 #: ../../../docs/container-images.md:0
 msgid "Simple python application to have a token based Matrix registration"
 msgstr ""
 #: ../../../docs/container-images.md:0
 msgid "[mautrix-facebook](configuring-playbook-bridge-mautrix-facebook.md)"
 msgstr ""
@@ -8,7 +8,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: matrix-docker-ansible-deploy \n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2026-06-29 17:11+0000\n"
+"POT-Creation-Date: 2026-02-13 10:32+0000\n"
 "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
 "Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
 "Language-Team: LANGUAGE <LL@li.org>\n"
@@ -45,7 +45,7 @@ msgid "For simplicity reasons, this playbook recommends you to set up server del
 msgstr ""
 #: ../../../docs/howto-server-delegation.md:26
-msgid "**Note**: as an alternative, it is possible to install the server such that it uses only the `matrix.example.com` domain (instead of identifying as the shorter base domain — `example.com`). This should be helpful if you are not in control of anything on the base domain (`example.com`). In this case, you would not need to configure server delegation, but you would need to add other configuration. For more information, see [How do I install on matrix.example.com without involving the base domain?](faq.md#how-do-i-install-on-matrixexamplecom-without-involving-the-base-domain) on our FAQ."
+msgid "**Note**: as an alternative, it is possible to install the server such that it uses only the `matrix.example.com` domain (instead of identifying as the shorter base domain — `example.com`). This should be helpful if you are not in control of anything on the base domain (`example.com`). In this case, you would not need to configure server delegation, but you would need to add other configuration. For more information, see [How do I install on matrix.example.com without involving the base domain?](faq.md#how-do-i-install-on-matrix-example-com-without-involving-the-base-domain) on our FAQ."
 msgstr ""
 #: ../../../docs/howto-server-delegation.md:28
@@ -8,7 +8,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: matrix-docker-ansible-deploy \n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2026-06-29 17:50+0000\n"
+"POT-Creation-Date: 2026-05-07 11:16+0000\n"
 "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
 "Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
 "Language-Team: LANGUAGE <LL@li.org>\n"
@@ -112,8 +112,8 @@ msgstr ""
 msgid "To do the installation **without** starting services, run `ansible-playbook` with the `install-all` tag only:"
 msgstr ""
-#: ../../../docs/installing.md:71
+#: ../../../docs/installing.md:70
-msgid "Do not run the just \"recipe\" `just install-all` instead, because it automatically starts services at the end of execution. See: [Difference between playbook tags and shortcuts](just.md#difference-between-playbook-tags-and-shortcuts)"
+msgid "[!WARNING] Do not run the just \"recipe\" `just install-all` instead, because it automatically starts services at the end of execution. See: [Difference between playbook tags and shortcuts](just.md#difference-between-playbook-tags-and-shortcuts)"
 msgstr ""
 #: ../../../docs/installing.md:73
@@ -261,61 +261,49 @@ msgid "or help make this playbook better by contributing (code, documentation, o
 msgstr ""
 #: ../../../docs/installing.md:153
 msgid "Installing native Matrix clients on your computer"
 msgstr ""
 #: ../../../docs/installing.md:155
 msgid "As the playbook's aim is to help you to install and manage Matrix services on your server, if you are looking for dedicated native Matrix clients which run on your computer, you need to install ones by yourself. There is a convenient list which introduces known Matrix clients on this page: <https://matrix.org/ecosystem/clients/>"
 msgstr ""
 #: ../../../docs/installing.md:157
 msgid "If you feel overwhelmed by the variety and the number of the available clients, you might want to install [**Komai**](https://github.com/etkecc/komai), a desktop-first Matrix chat application maintained by the team behind the playbook. It is stable, and just works without quirks!"
 msgstr ""
 #: ../../../docs/installing.md:159
 msgid "⚠️ Keep the playbook and services up-to-date"
 msgstr ""
-#: ../../../docs/installing.md:161
+#: ../../../docs/installing.md:155
 msgid "While this playbook helps you to set up Matrix services and maintain them, it will **not** automatically run the maintenance task for you. You will need to update the playbook and re-run it **manually**."
 msgstr ""
-#: ../../../docs/installing.md:163
+#: ../../../docs/installing.md:157
 msgid "The upstream projects, which this playbook makes use of, occasionally if not often suffer from security vulnerabilities."
 msgstr ""
-#: ../../../docs/installing.md:165
+#: ../../../docs/installing.md:159
 msgid "Since it is unsafe to keep outdated services running on the server connected to the internet, please consider to update the playbook and re-run it periodically, in order to keep the services up-to-date."
 msgstr ""
-#: ../../../docs/installing.md:167
+#: ../../../docs/installing.md:161
 msgid "Also, do not forget to update your system regularly. While this playbook may install basic services, such as Docker, it will not interfere further with system maintenance. Keeping the system itself up-to-date is out of scope for this playbook."
 msgstr ""
-#: ../../../docs/installing.md:169
+#: ../../../docs/installing.md:163
 msgid "For more information about upgrading or maintaining services with the playbook, take a look at this page: [Upgrading the Matrix services](maintenance-upgrading-services.md)"
 msgstr ""
-#: ../../../docs/installing.md:171
+#: ../../../docs/installing.md:165
 msgid "Feel free to **re-run the setup command any time** you think something is wrong with the server configuration. Ansible will take your configuration and update your server to match."
 msgstr ""
-#: ../../../docs/installing.md:177
+#: ../../../docs/installing.md:171
 msgid "**Note**: see [this page on the playbook tags](playbook-tags.md) for more information about those tags."
 msgstr ""
-#: ../../../docs/installing.md:179
+#: ../../../docs/installing.md:173
 msgid "Make full use of `just` shortcut commands"
 msgstr ""
-#: ../../../docs/installing.md:181
+#: ../../../docs/installing.md:175
 msgid "After you get familiar with reconfiguring and re-running the playbook to maintain the server, upgrade its services, etc., you probably would like to make use of `just` shortcut commands for faster input."
 msgstr ""
-#: ../../../docs/installing.md:183
+#: ../../../docs/installing.md:177
 msgid "For example, `just install-all` is useful for maintaining your setup quickly ([2x-5x faster](../CHANGELOG.md#2x-5x-performance-improvements-in-playbook-runtime) than `just setup-all`) when its components remain unchanged. If you adjust your `vars.yml` to remove other components, you'd need to run `just setup-all`, or these components will still remain installed."
 msgstr ""
-#: ../../../docs/installing.md:185
+#: ../../../docs/installing.md:179
 msgid "You can learn about the shortcut commands on this page: [Running `just` commands](just.md)"
 msgstr ""
@@ -8,7 +8,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: matrix-docker-ansible-deploy \n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2026-05-19 07:40+0000\n"
+"POT-Creation-Date: 2026-02-13 10:32+0000\n"
 "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
 "Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
 "Language-Team: LANGUAGE <LL@li.org>\n"
@@ -76,8 +76,8 @@ msgstr ""
 msgid "You can then proceed to write queries. Example: `SELECT COUNT(*) FROM users;`"
 msgstr ""
-#: ../../../docs/maintenance-postgres.md:39
+#: ../../../docs/maintenance-postgres.md:38
-msgid "**Modifying the database directly (especially as services are running) is dangerous and may lead to irreversible database corruption.** When in doubt, consider [making a backup](#backing-up-postgresql)."
+msgid "[!WARNING] **Modifying the database directly (especially as services are running) is dangerous and may lead to irreversible database corruption.** When in doubt, consider [making a backup](#backing-up-postgresql)."
 msgstr ""
 #: ../../../docs/maintenance-postgres.md:41
@@ -8,7 +8,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: matrix-docker-ansible-deploy \n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2026-05-19 07:40+0000\n"
+"POT-Creation-Date: 2026-04-15 09:10+0000\n"
 "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
 "Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
 "Language-Team: LANGUAGE <LL@li.org>\n"
@@ -60,8 +60,8 @@ msgstr ""
 msgid "To make use of this Synapse Admin API, **you'll need an admin access token** first. Refer to the documentation on [how to obtain an access token](obtaining-access-tokens.md)."
 msgstr ""
-#: ../../../docs/maintenance-synapse.md:31
+#: ../../../docs/maintenance-synapse.md:30
-msgid "Access tokens are sensitive information. Do not include them in any bug reports, messages, or logs. Do not share the access token with anyone."
+msgid "[!WARNING] Access tokens are sensitive information. Do not include them in any bug reports, messages, or logs. Do not share the access token with anyone."
 msgstr ""
 #: ../../../docs/maintenance-synapse.md:33
@@ -8,7 +8,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: matrix-docker-ansible-deploy \n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2026-05-19 07:40+0000\n"
+"POT-Creation-Date: 2026-02-13 10:32+0000\n"
 "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
 "Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
 "Language-Team: LANGUAGE <LL@li.org>\n"
@@ -24,8 +24,8 @@ msgstr ""
 msgid "When setting up some optional features like bots and bridges you will need to provide an access token for some user. This document provides documentation on how to obtain such an access token."
 msgstr ""
-#: ../../../docs/obtaining-access-tokens.md:15
+#: ../../../docs/obtaining-access-tokens.md:14
-msgid "Access tokens are sensitive information. Do not include them in any bug reports, messages, or logs. Do not share the access token with anyone."
+msgid "[!WARNING] Access tokens are sensitive information. Do not include them in any bug reports, messages, or logs. Do not share the access token with anyone."
 msgstr ""
 #: ../../../docs/obtaining-access-tokens.md:17
@@ -8,7 +8,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: matrix-docker-ansible-deploy \n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2026-05-19 07:40+0000\n"
+"POT-Creation-Date: 2026-04-03 11:56+0100\n"
 "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
 "Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
 "Language-Team: LANGUAGE <LL@li.org>\n"
@@ -57,7 +57,7 @@ msgid "Registering users manually"
 msgstr ""
 #: ../../../docs/registering-users.md:25
-#: ../../../docs/registering-users.md:123
+#: ../../../docs/registering-users.md:127
 msgid "**Notes**:"
 msgstr ""
@@ -97,8 +97,8 @@ msgstr ""
 msgid "Feel free to register as many users (for friends, family, etc.) as you want. Still, perhaps you should grant full administrative access to your user account only (with `admin=yes`), and others should be created with `admin=no`."
 msgstr ""
-#: ../../../docs/registering-users.md:55
+#: ../../../docs/registering-users.md:54
-msgid "If you're registering users against Matrix Authentication Service, do note that it [still insists](https://github.com/element-hq/matrix-authentication-service/issues/1505) on having a verified email address for each user. Upon a user's first login, they will be asked to confirm their email address. This requires that email sending is [configured](./configuring-playbook-email.md). You can also consult the [Working around email deliverability issues](./configuring-playbook-matrix-authentication-service.md#working-around-email-deliverability-issues) section for more information."
+msgid "[!WARNING] If you're registering users against Matrix Authentication Service, do note that it [still insists](https://github.com/element-hq/matrix-authentication-service/issues/1505) on having a verified email address for each user. Upon a user's first login, they will be asked to confirm their email address. This requires that email sending is [configured](./configuring-playbook-email.md). You can also consult the [Working around email deliverability issues](./configuring-playbook-matrix-authentication-service.md#working-around-email-deliverability-issues) section for more information."
 msgstr ""
 #: ../../../docs/registering-users.md:57
@@ -129,8 +129,8 @@ msgstr ""
 msgid "This `register-user` script actually invokes the `mas-cli manage register-user` command under the hood. If you'd like more control over the registration process, consider invoking the `mas-cli` command directly:"
 msgstr ""
-#: ../../../docs/registering-users.md:94
+#: ../../../docs/registering-users.md:93
-msgid "Matrix Authentication Service [still insists](https://github.com/element-hq/matrix-authentication-service/issues/1505) on having a verified email address for each user. Upon a user's first login, they will be asked to confirm their email address. This requires that email sending is [configured](./configuring-playbook-email.md). You can also consult the [Working around email deliverability issues](./configuring-playbook-matrix-authentication-service.md#working-around-email-deliverability-issues) section for more information."
+msgid "[!WARNING] Matrix Authentication Service [still insists](https://github.com/element-hq/matrix-authentication-service/issues/1505) on having a verified email address for each user. Upon a user's first login, they will be asked to confirm their email address. This requires that email sending is [configured](./configuring-playbook-email.md). You can also consult the [Working around email deliverability issues](./configuring-playbook-matrix-authentication-service.md#working-around-email-deliverability-issues) section for more information."
 msgstr ""
 #: ../../../docs/registering-users.md:96
@@ -142,89 +142,97 @@ msgid "To manage users and your homeserver more easily (via a web interface), yo
 msgstr ""
 #: ../../../docs/registering-users.md:100
-msgid "Enabling public user registration"
+msgid "Letting certain users register on your private server"
 msgstr ""
 #: ../../../docs/registering-users.md:102
-msgid "To **open up user registration publicly** (usually **not recommended**), add the following configuration to your `inventory/host_vars/matrix.example.com/vars.yml` file:"
+msgid "If you'd rather **keep your server private** (public registration closed, as is the default), and **let certain people create accounts by themselves** (instead of creating user accounts manually like this), consider installing and making use of [matrix-registration](configuring-playbook-matrix-registration.md)."
 msgstr ""
 #: ../../../docs/registering-users.md:104
 msgid "Enabling public user registration"
 msgstr ""
 #: ../../../docs/registering-users.md:106
 msgid "To **open up user registration publicly** (usually **not recommended**), add the following configuration to your `inventory/host_vars/matrix.example.com/vars.yml` file:"
 msgstr ""
 #: ../../../docs/registering-users.md:108
 msgid "For Synapse:"
 msgstr ""
-#: ../../../docs/registering-users.md:110
+#: ../../../docs/registering-users.md:114
 msgid "For Dendrite:"
 msgstr ""
-#: ../../../docs/registering-users.md:116
+#: ../../../docs/registering-users.md:120
 msgid "After configuring the playbook, run it with [playbook tags](playbook-tags.md) as below:"
 msgstr ""
-#: ../../../docs/registering-users.md:125
+#: ../../../docs/registering-users.md:129
 msgid "The shortcut commands with the [`just` program](just.md) are also available: `just install-all` or `just setup-all`"
 msgstr ""
-#: ../../../docs/registering-users.md:127
+#: ../../../docs/registering-users.md:131
 msgid "`just install-all` is useful for maintaining your setup quickly ([2x-5x faster](../CHANGELOG.md#2x-5x-performance-improvements-in-playbook-runtime) than `just setup-all`) when its components remain unchanged. If you adjust your `vars.yml` to remove other components, you'd need to run `just setup-all`, or these components will still remain installed. Note these shortcuts run the `ensure-matrix-users-created` tag too."
 msgstr ""
-#: ../../../docs/registering-users.md:129
+#: ../../../docs/registering-users.md:133
 msgid "If you're opening up registrations publicly like this, you might also wish to [configure CAPTCHA protection](configuring-captcha.md)."
 msgstr ""
-#: ../../../docs/registering-users.md:131
+#: ../../../docs/registering-users.md:135
 msgid "Adding/Removing Administrator privileges to an existing user"
 msgstr ""
-#: ../../../docs/registering-users.md:133
+#: ../../../docs/registering-users.md:137
 msgid "Adding/Removing Administrator privileges to an existing user in Synapse"
 msgstr ""
-#: ../../../docs/registering-users.md:135
+#: ../../../docs/registering-users.md:139
 msgid "To change the admin privileges for a user in Synapse's local database, you need to run an SQL query like this against the `synapse` database:"
 msgstr ""
-#: ../../../docs/registering-users.md:141
+#: ../../../docs/registering-users.md:145
 msgid "where:"
 msgstr ""
-#: ../../../docs/registering-users.md:143
+#: ../../../docs/registering-users.md:147
 msgid "`ADMIN_VALUE` being either `0` (regular user) or `1` (admin)"
 msgstr ""
-#: ../../../docs/registering-users.md:144
+#: ../../../docs/registering-users.md:148
 msgid "`USER` and `example.com` pointing to a valid user on your server"
 msgstr ""
-#: ../../../docs/registering-users.md:146
+#: ../../../docs/registering-users.md:150
 msgid "If you're using the integrated Postgres server and not an [external Postgres server](configuring-playbook-external-postgres.md), you can launch a Postgres into the `synapse` database by:"
 msgstr ""
-#: ../../../docs/registering-users.md:148
+#: ../../../docs/registering-users.md:152
 msgid "running `/matrix/postgres/bin/cli` — to launch [`psql`](https://www.postgresql.org/docs/current/app-psql.html)"
 msgstr ""
-#: ../../../docs/registering-users.md:149
+#: ../../../docs/registering-users.md:153
 msgid "running `\\c synapse` — to change to the `synapse` database"
 msgstr ""
-#: ../../../docs/registering-users.md:151
+#: ../../../docs/registering-users.md:155
 msgid "You can then proceed to run the query above."
 msgstr ""
-#: ../../../docs/registering-users.md:153
+#: ../../../docs/registering-users.md:157
 msgid "**Note**: directly modifying the raw data of Synapse (or any other software) could cause the software to break. You've been warned!"
 msgstr ""
-#: ../../../docs/registering-users.md:155
+#: ../../../docs/registering-users.md:159
 msgid "Adding/Removing Administrator privileges to an existing user in Matrix Authentication Service"
 msgstr ""
-#: ../../../docs/registering-users.md:157
+#: ../../../docs/registering-users.md:161
 msgid "Promoting/demoting a user in Matrix Authentication Service can be done using the [`mas-cli`](./configuring-playbook-matrix-authentication-service.md#management) management tool's [`manage promote-admin`](https://element-hq.github.io/matrix-authentication-service/reference/cli/manage.html#manage-promote-admin) and [`manage demote-admin`](https://element-hq.github.io/matrix-authentication-service/reference/cli/manage.html#manage-demote-admin) commands. For example: `/matrix/matrix-authentication-service/bin/mas-cli manage promote-admin some.username`."
 msgstr ""
-#: ../../../docs/registering-users.md:159
+#: ../../../docs/registering-users.md:163
 msgid "You can also do it via the [MAS Admin API](https://element-hq.github.io/matrix-authentication-service/api/index.html)'s `POST /api/admin/v1/users/{id}/set-admin` endpoint."
 msgstr ""
@@ -8,7 +8,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: matrix-docker-ansible-deploy \n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2026-05-19 07:40+0000\n"
+"POT-Creation-Date: 2026-04-03 12:09+0100\n"
 "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
 "Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
 "Language-Team: LANGUAGE <LL@li.org>\n"
@@ -69,77 +69,81 @@ msgid "`sable`"
 msgstr ""
 #: ../../../docs/self-building.md:34
-msgid "`coturn`"
+msgid "`matrix-registration`"
 msgstr ""
 #: ../../../docs/self-building.md:35
-msgid "`matrix-corporal`"
+msgid "`coturn`"
 msgstr ""
 #: ../../../docs/self-building.md:36
-msgid "`exim-relay`"
+msgid "`matrix-corporal`"
 msgstr ""
 #: ../../../docs/self-building.md:37
-msgid "`matrix-bridge-hookshot`"
+msgid "`exim-relay`"
 msgstr ""
 #: ../../../docs/self-building.md:38
-msgid "`matrix-bridge-appservice-irc`"
+msgid "`matrix-bridge-hookshot`"
 msgstr ""
 #: ../../../docs/self-building.md:39
-msgid "`matrix-bridge-beeper-linkedin`"
+msgid "`matrix-bridge-appservice-irc`"
 msgstr ""
 #: ../../../docs/self-building.md:40
-msgid "`matrix-bridge-mautrix-googlechat`"
+msgid "`matrix-bridge-beeper-linkedin`"
 msgstr ""
 #: ../../../docs/self-building.md:41
-msgid "`matrix-bridge-mautrix-telegram`"
+msgid "`matrix-bridge-mautrix-googlechat`"
 msgstr ""
 #: ../../../docs/self-building.md:42
-msgid "`matrix-bridge-mautrix-signal`"
+msgid "`matrix-bridge-mautrix-telegram`"
 msgstr ""
 #: ../../../docs/self-building.md:43
-msgid "`matrix-bridge-mautrix-gmessages`"
+msgid "`matrix-bridge-mautrix-signal`"
 msgstr ""
 #: ../../../docs/self-building.md:44
-msgid "`matrix-bridge-mautrix-whatsapp`"
+msgid "`matrix-bridge-mautrix-gmessages`"
 msgstr ""
 #: ../../../docs/self-building.md:45
-msgid "`matrix-bridge-mx-puppet-steam`"
+msgid "`matrix-bridge-mautrix-whatsapp`"
 msgstr ""
 #: ../../../docs/self-building.md:46
-msgid "`matrix-bot-mjolnir`"
+msgid "`matrix-bridge-mx-puppet-steam`"
 msgstr ""
 #: ../../../docs/self-building.md:47
-msgid "`matrix-bot-honoroit`"
+msgid "`matrix-bot-mjolnir`"
 msgstr ""
 #: ../../../docs/self-building.md:48
-msgid "`matrix-bot-matrix-reminder-bot`"
+msgid "`matrix-bot-honoroit`"
 msgstr ""
 #: ../../../docs/self-building.md:49
-msgid "`matrix-bot-maubot`"
+msgid "`matrix-bot-matrix-reminder-bot`"
 msgstr ""
 #: ../../../docs/self-building.md:50
 msgid "`matrix-bot-maubot`"
 msgstr ""
 #: ../../../docs/self-building.md:51
 msgid "`matrix-pantalaimon`"
 msgstr ""
-#: ../../../docs/self-building.md:52
+#: ../../../docs/self-building.md:53
 msgid "Adding self-building support to other roles is welcome. Feel free to contribute!"
 msgstr ""
-#: ../../../docs/self-building.md:54
+#: ../../../docs/self-building.md:55
 msgid "If you'd like **to force self-building** even if an image is available for your architecture, look into the `matrix_*_self_build` variables provided by individual roles."
 msgstr ""
@@ -8,7 +8,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: matrix-docker-ansible-deploy \n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2026-05-19 07:40+0000\n"
+"POT-Creation-Date: 2026-02-13 10:32+0000\n"
 "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
 "Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
 "Language-Team: LANGUAGE <LL@li.org>\n"
@@ -20,6 +20,10 @@ msgstr ""
 msgid "Uninstalling"
 msgstr ""
 #: ../../../docs/uninstalling.md:11
 msgid "[!WARNING]"
 msgstr ""
 #: ../../../docs/uninstalling.md:12
 msgid "If your server federates with others, make sure to **leave any federated rooms before nuking your Matrix server's data**. Otherwise, the next time you set up a Matrix server for this domain (regardless of the installation method you use), you'll encounter trouble federating."
 msgstr ""
@@ -3,7 +3,7 @@
 # SPDX-License-Identifier: AGPL-3.0-or-later
 [tools]
-prek = "0.4.5"
+prek = "0.4.0"
 [settings]
 yes = true
@@ -1,13 +1,13 @@
 ---
 - src: git+https://github.com/mother-of-all-self-hosting/ansible-role-aux.git
-  version: v1.0.0-7
+  version: v1.0.0-6
  name: auxiliary
 - src: git+https://github.com/mother-of-all-self-hosting/ansible-role-backup_borg.git
  version: v1.4.4-2.1.4-1
  name: backup_borg
 - src: git+https://github.com/mother-of-all-self-hosting/ansible-role-cinny.git
-  version: v4.12.3-0
+  version: v4.11.1-2
  name: cinny
 - src: git+https://github.com/mother-of-all-self-hosting/ansible-role-container-socket-proxy.git
  version: v0.4.2-5
@@ -33,19 +33,19 @@
  version: v4.99.1-r0-2-1
  name: exim_relay
 - src: git+https://github.com/mother-of-all-self-hosting/ansible-role-grafana.git
-  version: v13.0.2-0
+  version: v11.6.5-10
  name: grafana
 - src: git+https://github.com/mother-of-all-self-hosting/ansible-role-hydrogen.git
-  version: v0.5.1-5
+  version: v0.5.1-4
  name: hydrogen
 - src: git+https://github.com/mother-of-all-self-hosting/ansible-role-jitsi.git
-  version: v11031-0
+  version: v10888-1
  name: jitsi
 - src: git+https://github.com/mother-of-all-self-hosting/ansible-role-livekit-server.git
-  version: v1.13.2-0
+  version: v1.11.0-2
  name: livekit_server
 - src: git+https://github.com/mother-of-all-self-hosting/ansible-role-ntfy.git
-  version: v2.25.0-0
+  version: v2.22.0-1
  name: ntfy
 - src: git+https://github.com/devture/com.devture.ansible.role.playbook_help.git
  version: ea8c5cc750c4e23d004c9a836dfd9eda82d45ff4
@@ -57,13 +57,13 @@
  version: dd6e15246b7a9a2d921e0b3f9cd8a4a917a1bb2f
  name: playbook_state_preserver
 - src: git+https://github.com/mother-of-all-self-hosting/ansible-role-postgres.git
-  version: v18.4-0
+  version: v18.3-5
  name: postgres
 - src: git+https://github.com/mother-of-all-self-hosting/ansible-role-postgres-backup.git
  version: v18-3
  name: postgres_backup
 - src: git+https://github.com/mother-of-all-self-hosting/ansible-role-prometheus.git
-  version: v3.12.0-1
+  version: v3.11.3-1
  name: prometheus
 - src: git+https://github.com/mother-of-all-self-hosting/ansible-role-prometheus-nginxlog-exporter.git
  version: v1.10.0-3
@@ -75,7 +75,7 @@
  version: v0.19.1-4
  name: prometheus_postgres_exporter
 - src: git+https://github.com/mother-of-all-self-hosting/ansible-role-sable.git
-  version: v1.18.3-0
+  version: v1.16.0-0
  name: sable
 - src: git+https://github.com/devture/com.devture.ansible.role.systemd_docker_base.git
  version: v1.5.0-0
@@ -87,11 +87,11 @@
  version: v1.1.0-1
  name: timesync
 - src: git+https://github.com/mother-of-all-self-hosting/ansible-role-traefik.git
-  version: v3.7.5-0
+  version: v3.7.1-0
  name: traefik
 - src: git+https://github.com/mother-of-all-self-hosting/ansible-role-traefik-certs-dumper.git
-  version: v2.11.4-0
+  version: v2.10.0-7
  name: traefik_certs_dumper
 - src: git+https://github.com/mother-of-all-self-hosting/ansible-role-valkey.git
-  version: v9.1.0-0
+  version: v9.0.4-0
  name: valkey
@@ -11,7 +11,7 @@
 matrix_alertmanager_receiver_enabled: true
 # renovate: datasource=docker depName=docker.io/metio/matrix-alertmanager-receiver
-matrix_alertmanager_receiver_version: 2026.6.24
+matrix_alertmanager_receiver_version: 2026.5.13
 matrix_alertmanager_receiver_scheme: https
@@ -73,7 +73,6 @@
      changed_when: true
 - name: Ensure matrix-alertmanager-receiver container network is created
  when: matrix_alertmanager_receiver_container_network != 'host'
  community.general.docker_network:
    enable_ipv6: "{{ devture_systemd_docker_base_ipv6_enabled }}"
    name: "{{ matrix_alertmanager_receiver_container_network }}"
@@ -33,11 +33,9 @@ ExecStartPre={{ devture_systemd_docker_base_host_command_docker }} create \
 			--config-path=/config/config.yml {{ matrix_alertmanager_receiver_container_process_extra_arguments | join(' ') }} \
 			--log-level={{ matrix_alertmanager_receiver_container_process_argument_log_level }}
 {% if matrix_alertmanager_receiver_container_network != 'host' %}
 {% for network in matrix_alertmanager_receiver_container_additional_networks %}
 ExecStartPre={{ devture_systemd_docker_base_host_command_docker }} network connect {{ network }} matrix-alertmanager-receiver
 {% endfor %}
 {% endif %}
 ExecStart={{ devture_systemd_docker_base_host_command_docker }} start --attach matrix-alertmanager-receiver
@@ -88,7 +88,6 @@
  register: matrix_appservice_draupnir_for_all_registration_config_result
 - name: Ensure matrix-appservice-draupnir-for-all container network is created
  when: matrix_appservice_draupnir_for_all_container_network != 'host'
  community.general.docker_network:
    enable_ipv6: "{{ devture_systemd_docker_base_ipv6_enabled }}"
    name: "{{ matrix_appservice_draupnir_for_all_container_network }}"
@@ -32,11 +32,9 @@ ExecStartPre={{ devture_systemd_docker_base_host_command_docker }} create \
 			{{ matrix_appservice_draupnir_for_all_container_image }} \
 			appservice -c /data/config/production-appservice.yaml -f /data/config/draupnir-for-all-registration.yaml -p {{ matrix_appservice_draupnir_for_all_appservice_port }} --draupnir-config /data/config/production-bots.yaml
 {% if matrix_appservice_draupnir_for_all_container_network != 'host' %}
 {% for network in matrix_appservice_draupnir_for_all_container_additional_networks %}
 ExecStartPre={{ devture_systemd_docker_base_host_command_docker }} network connect {{ network }} matrix-appservice-draupnir-for-all
 {% endfor %}
 {% endif %}
 ExecStart={{ devture_systemd_docker_base_host_command_docker }} start --attach matrix-appservice-draupnir-for-all
@@ -22,7 +22,7 @@ matrix_authentication_service_container_repo_version: "{{ 'main' if matrix_authe
 matrix_authentication_service_container_src_files_path: "{{ matrix_base_data_path }}/matrix-authentication-service/container-src"
 # renovate: datasource=docker depName=ghcr.io/element-hq/matrix-authentication-service
-matrix_authentication_service_version: 1.19.0
+matrix_authentication_service_version: 1.16.0
 matrix_authentication_service_container_image_registry_prefix: "{{ 'localhost/' if matrix_authentication_service_container_image_self_build else matrix_authentication_service_container_image_registry_prefix_upstream }}"
 matrix_authentication_service_container_image_registry_prefix_upstream: "{{ matrix_authentication_service_container_image_registry_prefix_upstream_default }}"
 matrix_authentication_service_container_image_registry_prefix_upstream_default: "ghcr.io/"
@@ -114,7 +114,6 @@
      changed_when: true
 - name: Ensure Matrix Authentication Service container network is created
  when: matrix_authentication_service_container_network != 'host'
  community.general.docker_network:
    enable_ipv6: "{{ devture_systemd_docker_base_ipv6_enabled }}"
    name: "{{ matrix_authentication_service_container_network }}"
@@ -36,11 +36,9 @@ ExecStartPre={{ devture_systemd_docker_base_host_command_docker }} create \
 			{% endfor %}
 			{{ matrix_authentication_service_container_image }}
 {% if matrix_authentication_service_container_network != 'host' %}
 {% for network in matrix_authentication_service_container_additional_networks %}
 ExecStartPre={{ devture_systemd_docker_base_host_command_docker }} network connect {{ network }} matrix-authentication-service
 {% endfor %}
 {% endif %}
 ExecStart={{ devture_systemd_docker_base_host_command_docker }} start --attach matrix-authentication-service
@@ -54,15 +54,6 @@ matrix_bridges_msc4190_enabled: "{{ matrix_authentication_service_enabled and ma
 # Global var for enabling bridge self-signing ( On supported bridges)
 matrix_bridges_self_sign_enabled: "{{ matrix_bridges_msc4190_enabled }}"
 # Global vars for exposing bridges' HTTP API publicly on the Matrix domain.
 # This is used by tools like mautrix-manager (https://github.com/mautrix/manager) to drive bridge login.
 # Each supported bridge's HTTP endpoint is exposed under `<path_prefix>/<bridge>` (e.g. `/bridges/gmessages`).
 # Requests are authenticated by the bridge itself (e.g. per-user Matrix access token for the provisioning API,
 # or the homeserver token for the appservice endpoints), not by us.
 matrix_bridges_exposure_enabled: true
 matrix_bridges_exposure_hostname: "{{ matrix_server_fqn_matrix }}"
 matrix_bridges_exposure_path_prefix: /bridges
 # Global var to enable/disable relay mode across all bridges with relay mode support
 matrix_bridges_relay_enabled: false
@@ -140,6 +131,9 @@ matrix_server_fqn_buscarron: "buscarron.{{ matrix_domain }}"
 # This is where you access the Etherpad (if enabled via etherpad_enabled; disabled by default).
 matrix_server_fqn_etherpad: "etherpad.{{ matrix_domain }}"
 # For use with Go-NEB! (github callback url for example)
 matrix_server_fqn_bot_go_neb: "goneb.{{ matrix_domain }}"
 # This is where you access Jitsi.
 matrix_server_fqn_jitsi: "jitsi.{{ matrix_domain }}"
@@ -204,26 +198,6 @@ matrix_group_system: true
 matrix_user_uid: ~
 matrix_user_gid: ~
 # Controls Synology DSM-specific handling. `null` means autodetect (via /etc/synoinfo.conf).
 # Set to `true`/`false` to force.
 matrix_base_host_is_synology: ~
 # Password for the Matrix service account on Synology DSM.
 # Must be set to a non-empty value in your vars.yml when running on Synology.
 # The account is created as expired so the password cannot be used to log in.
 matrix_synology_user_password: ""
 # Version constraint for the requests Python package installed on Synology hosts.
 # requests >= 2.32 dropped the http+docker URL scheme used by the Docker SDK,
 # causing "Not supported URL scheme http+docker" errors. Installed into the
 # system Python interpreter (ansible_python_interpreter) on the remote host.
 matrix_base_synology_requests_version_constraint: "requests<2.32"
 # Synology volume that needs shared mount propagation so that Docker
 # bind-propagation=slave mounts (used by matrix-synapse for its media store)
 # work correctly. Defaults to /volume1 (DSM's default Docker storage volume).
 matrix_base_synology_volume_path: "/volume1"
 matrix_base_data_path: "/matrix"
 matrix_base_data_path_mode: "750"
@@ -1,16 +0,0 @@
 # SPDX-FileCopyrightText: 2026 Chiu Ki Sit
 #
 # SPDX-License-Identifier: AGPL-3.0-or-later
 ---
 - name: Detect Synology DSM
  ansible.builtin.stat:
    path: /etc/synoinfo.conf
  register: matrix_base_synoinfo_conf_stat
  when: matrix_base_host_is_synology is none
 - name: Set matrix_base_host_is_synology from detection
  ansible.builtin.set_fact:
    matrix_base_host_is_synology: "{{ matrix_base_synoinfo_conf_stat.stat.exists }}"
  when: matrix_base_host_is_synology is none
@@ -4,7 +4,6 @@
 # SPDX-FileCopyrightText: 2020 Marcel Partap
 # SPDX-FileCopyrightText: 2022 Marko Weltzer
 # SPDX-FileCopyrightText: 2022 Warren Bailey
 # SPDX-FileCopyrightText: 2026 Chiu Ki Sit
 #
 # SPDX-License-Identifier: AGPL-3.0-or-later
@@ -16,11 +15,6 @@
  block:
    - ansible.builtin.include_tasks: "{{ role_path }}/tasks/validate_config.yml"
 - tags:
    - always
  block:
    - ansible.builtin.include_tasks: "{{ role_path }}/tasks/detect_platform.yml"
 # This needs to always run, because it populates `matrix_user_uid` and `matrix_user_gid`,
 # which are required by many other roles.
 - tags:
@@ -30,13 +24,6 @@
  block:
    - ansible.builtin.include_tasks: "{{ role_path }}/tasks/setup_matrix_user.yml"
 - tags:
    - setup-all
    - install-all
  block:
    - ansible.builtin.include_tasks: "{{ role_path }}/tasks/setup_synology_prerequisites.yml"
      when: matrix_base_host_is_synology
 - tags:
    - setup-all
    - install-all
@@ -7,20 +7,11 @@
 # SPDX-FileCopyrightText: 2022 Sebastian Gumprich
 # SPDX-FileCopyrightText: 2024 - 2025 Suguru Hirahara
 # SPDX-FileCopyrightText: 2024 László Várady
 # SPDX-FileCopyrightText: 2026 Chiu Ki Sit
 #
 # SPDX-License-Identifier: AGPL-3.0-or-later
 ---
 # Snapshot ownership before any changes so we can decide whether a recursive
 # chown is needed (only when uid/gid actually differs from expected).
 - name: Check current ownership of Matrix base path (Synology)
  ansible.builtin.stat:
    path: "{{ matrix_base_data_path }}"
  register: matrix_base_data_path_stat
  when: matrix_base_host_is_synology
 - name: Ensure Matrix base paths exists
  ansible.builtin.file:
    path: "{{ item }}"
@@ -37,18 +28,3 @@
    src: "{{ role_path }}/templates/bin/remove-all.j2"
    dest: "{{ matrix_bin_path }}/remove-all"
    mode: '0750'
 # On Synology, name-based chown works for directly-touched paths but leaves
 # existing sub-paths with stale numeric ownership when uid/gid changes between
 # runs. We recurse only when the pre-task uid/gid didn't match, so normal runs
 # skip the expensive tree walk entirely. chown -R is used instead of the file
 # module's recurse option to avoid Ansible iterating every entry in Python.
 - name: Ensure Matrix base path ownership is correct using numeric UID/GID (Synology)
  ansible.builtin.command: chown -R {{ matrix_user_uid }}:{{ matrix_user_gid }} {{ matrix_base_data_path }}
  changed_when: true
  when: >-
    matrix_base_host_is_synology and (
      not matrix_base_data_path_stat.stat.exists or
      matrix_base_data_path_stat.stat.uid | int != matrix_user_uid | int or
      matrix_base_data_path_stat.stat.gid | int != matrix_user_gid | int
    )
@@ -1,13 +1,31 @@
 # SPDX-FileCopyrightText: 2020 - 2022 Slavi Pantaleev
 # SPDX-FileCopyrightText: 2022 Marko Weltzer
 # SPDX-FileCopyrightText: 2026 Chiu Ki Sit
 #
 # SPDX-License-Identifier: AGPL-3.0-or-later
 ---
- ansible.builtin.include_tasks: "{{ role_path }}/tasks/setup_matrix_user_synology.yml"
+- name: Ensure Matrix group is created
-  when: matrix_base_host_is_synology
+  ansible.builtin.group:
    name: "{{ matrix_group_name }}"
    gid: "{{ omit if matrix_user_gid is none else matrix_user_gid }}"
    state: present
    system: "{{ matrix_group_system }}"
  register: matrix_group
- ansible.builtin.include_tasks: "{{ role_path }}/tasks/setup_matrix_user_linux.yml"
+- name: Ensure Matrix user is created
-  when: not matrix_base_host_is_synology
+  ansible.builtin.user:
    name: "{{ matrix_user_name }}"
    uid: "{{ omit if matrix_user_uid is none else matrix_user_uid }}"
    state: present
    group: "{{ matrix_group_name }}"
    home: "{{ matrix_base_data_path }}"
    create_home: false
    system: "{{ matrix_user_system }}"
    shell: "{{ matrix_user_shell }}"
  register: matrix_user
 - name: Initialize matrix_user_uid and matrix_user_gid
  ansible.builtin.set_fact:
    matrix_user_uid: "{{ matrix_user.uid }}"
    matrix_user_gid: "{{ matrix_group.gid }}"
@@ -1,31 +0,0 @@
 # SPDX-FileCopyrightText: 2020 - 2022 Slavi Pantaleev
 # SPDX-FileCopyrightText: 2022 Marko Weltzer
 #
 # SPDX-License-Identifier: AGPL-3.0-or-later
 ---
 - name: Ensure Matrix group is created
  ansible.builtin.group:
    name: "{{ matrix_group_name }}"
    gid: "{{ omit if matrix_user_gid is none else matrix_user_gid }}"
    state: present
    system: "{{ matrix_group_system }}"
  register: matrix_group
 - name: Ensure Matrix user is created
  ansible.builtin.user:
    name: "{{ matrix_user_name }}"
    uid: "{{ omit if matrix_user_uid is none else matrix_user_uid }}"
    state: present
    group: "{{ matrix_group_name }}"
    home: "{{ matrix_base_data_path }}"
    create_home: false
    system: "{{ matrix_user_system }}"
    shell: "{{ matrix_user_shell }}"
  register: matrix_user
 - name: Initialize matrix_user_uid and matrix_user_gid
  ansible.builtin.set_fact:
    matrix_user_uid: "{{ matrix_user.uid }}"
    matrix_user_gid: "{{ matrix_group.gid }}"
@@ -1,69 +0,0 @@
 # SPDX-FileCopyrightText: 2026 Chiu Ki Sit
 #
 # SPDX-License-Identifier: AGPL-3.0-or-later
 ---
 - name: Fail if matrix_synology_user_password is not set
  ansible.builtin.fail:
    msg: >-
      You must set `matrix_synology_user_password` to a non-empty value in your vars.yml.
      This password secures the Matrix service account on Synology DSM.
      The account is created as expired so the password cannot be used to log in.
  when: matrix_synology_user_password == '' or matrix_synology_user_password is none
 - name: Check if Matrix user exists (Synology)
  ansible.builtin.command: id {{ matrix_user_name }}
  register: matrix_user_check
  changed_when: false
  failed_when: false
 # Created with expired=1 (cannot log in)
 # as this is a service account. If you pre-create the user, you are responsible
 # for securing it; the playbook will not modify an existing account's settings.
 - name: Ensure Matrix user is created (Synology)
  ansible.builtin.command: >
    /usr/syno/sbin/synouser --add {{ matrix_user_name }}
    "{{ matrix_synology_user_password }}" "{{ matrix_user_name }}" 1 "" 0
  when: matrix_user_check.rc != 0
  changed_when: true
  no_log: true
 - name: Ensure Matrix user password is up to date (Synology)
  ansible.builtin.command: /usr/syno/sbin/synouser --setpw {{ matrix_user_name }} "{{ matrix_synology_user_password }}"
  when: matrix_user_check.rc == 0
  changed_when: false
  no_log: true
 - name: Check if Matrix group exists (Synology)
  ansible.builtin.command: /usr/syno/sbin/synogroup --get {{ matrix_group_name }}
  register: matrix_group_check
  changed_when: false
  failed_when: false
 - name: Ensure Matrix group is created (Synology)
  ansible.builtin.command: /usr/syno/sbin/synogroup --add {{ matrix_group_name }} {{ matrix_user_name }}
  when: matrix_group_check.rc != 0
  changed_when: true
 - name: Get Matrix user UID (Synology)
  ansible.builtin.command: id -u {{ matrix_user_name }}
  register: matrix_user_uid_result
  changed_when: false
 - name: Get Matrix group info (Synology)
  ansible.builtin.command: /usr/syno/sbin/synogroup --get {{ matrix_group_name }}
  register: matrix_synogroup_result
  changed_when: false
 - name: Initialize matrix_user_uid and matrix_user_gid
  ansible.builtin.set_fact:
    matrix_user_uid: "{{ matrix_user_uid_result.stdout }}"
    matrix_user_gid: >-
      {{
        matrix_synogroup_result.stdout_lines
        | select('match', '^Group ID:')
        | first
        | regex_search('\[(\d+)\]', '\1')
        | first
      }}
@@ -1,27 +0,0 @@
 # SPDX-FileCopyrightText: 2026 Chiu Ki Sit
 #
 # SPDX-License-Identifier: AGPL-3.0-or-later
 ---
 - name: Deploy Matrix boot recovery script (Synology)
  ansible.builtin.template:
    src: "{{ role_path }}/templates/bin/matrix-synology-boot-fix.j2"
    dest: "{{ matrix_bin_path }}/matrix-synology-boot-fix"
    mode: "0750"
    owner: root
    group: root
 - name: Deploy Matrix boot recovery service (Synology)
  ansible.builtin.template:
    src: "{{ role_path }}/templates/systemd/matrix-synology-boot-fix.service.j2"
    dest: /etc/systemd/system/matrix-synology-boot-fix.service
    mode: "0644"
  register: matrix_synology_boot_fix_service
 - name: Reload systemd and enable Matrix boot recovery service (Synology)
  ansible.builtin.systemd:
    name: matrix-synology-boot-fix.service
    daemon_reload: true
    enabled: true
  when: matrix_synology_boot_fix_service.changed
@@ -1,34 +0,0 @@
 # SPDX-FileCopyrightText: 2026 Chiu Ki Sit
 #
 # SPDX-License-Identifier: AGPL-3.0-or-later
 ---
 - name: Ensure requests Python package is constrained for Docker SDK compatibility (Synology)
  ansible.builtin.pip:
    name: "{{ matrix_base_synology_requests_version_constraint }}"
    state: present
 # Determine whether the volume is already a shared mount, so that the
 # make-shared command below only runs (and only reports `changed`) when it
 # actually needs to. We read /proc/self/mountinfo (always present on Linux)
 # and look for the ` shared:` optional tag on the volume's mount point line.
 # grep exits non-zero on no-match or any error, so the make-shared command is
 # skipped only when shared propagation is positively confirmed; every other
 # case falls through to running it (which is idempotent).
 - name: Determine current mount propagation of the Synology volume
  ansible.builtin.command: grep -E ' {{ matrix_base_synology_volume_path }} .* shared:' /proc/self/mountinfo
  register: matrix_base_synology_volume_propagation
  changed_when: false
  failed_when: false
 # Run immediately during setup so matrix services can start without a manual
 # step. The boot-fix service handles this on every subsequent reboot.
 # noqa command-instead-of-module: ansible.builtin.mount does not support
 # changing mount propagation (--make-shared); command is the only option here.
 - name: Ensure the Synology volume has shared mount propagation
  ansible.builtin.command: mount --make-shared {{ matrix_base_synology_volume_path }}  # noqa command-instead-of-module
  when: matrix_base_synology_volume_propagation.rc != 0
  changed_when: true
 - ansible.builtin.include_tasks: "{{ role_path }}/tasks/setup_synology_boot_fix.yml"
@@ -1,54 +0,0 @@
 #!/bin/sh
 # SPDX-FileCopyrightText: 2026 Chiu Ki Sit
 #
 # SPDX-License-Identifier: AGPL-3.0-or-later
 #
 # Boot recovery for Matrix services on Synology DSM.
 #
 # This script runs after multi-user.target (outside Container Manager's dependency
 # chain) and does two things:
 #
 # 1. Makes {{ matrix_base_synology_volume_path }} mount-shared so Docker bind-propagation=slave mounts work.
 #    Inserting this into the systemd chain Before=pkg-ContainerManager-dockerd.service
 #    causes Container Manager to detect a broken dependency and prompt for repair,
 #    so it must run here instead, after Docker is already up.
 #
 # 2. Starts any enabled matrix-*.service that systemd skipped at boot.
 #    Synology's systemd drops services with multi-level dependency chains
 #    (e.g. traefik -> socket-proxy -> docker) from the boot activation queue.
 #    Services that need bind-propagation=slave (e.g. matrix-synapse) are
 #    created after step 1, so the propagation is already in effect.
 # Wait up to 120s for Docker to be ready
 i=0
 while [ "$i" -lt 60 ]; do
    {{ devture_systemd_docker_base_host_command_docker }} info >/dev/null 2>&1 && break
    i=$((i + 1))
    sleep 2
 done
 if ! {{ devture_systemd_docker_base_host_command_docker }} info >/dev/null 2>&1; then
    echo "matrix-synology-boot-fix: Docker not ready after 120s, aborting" >&2
    exit 1
 fi
 # Make {{ matrix_base_synology_volume_path }} shared so Docker bind-propagation=slave mounts work correctly.
 # Must run after Docker is up to avoid interfering with Container Manager's
 # integrity checks, but before matrix-synapse (and any other service using
 # bind-propagation=slave) creates its containers.
 /bin/mount --make-shared {{ matrix_base_synology_volume_path }}
 echo "matrix-synology-boot-fix: {{ matrix_base_synology_volume_path }} set to shared mount propagation"
 # Start any enabled matrix-*.service that is inactive or failed.
 # Both states indicate the service did not come up at boot — either skipped by
 # Synology's boot ordering or failed due to Docker/mount-propagation not being
 # ready yet (the conditions above now satisfy those prerequisites).
 {{ devture_systemd_docker_base_host_command_systemctl }} list-unit-files 'matrix-*.service' --state=enabled --no-legend 2>/dev/null | \
    while read -r unit _state; do
        [ "$unit" = "matrix-synology-boot-fix.service" ] && continue
        status="$({{ devture_systemd_docker_base_host_command_systemctl }} is-active "$unit" 2>/dev/null)"
        if [ "$status" = "inactive" ] || [ "$status" = "failed" ]; then
            echo "matrix-synology-boot-fix: starting $unit (was $status)"
            {{ devture_systemd_docker_base_host_command_systemctl }} start "$unit"
        fi
    done
@@ -1,16 +0,0 @@
 # SPDX-FileCopyrightText: 2026 Chiu Ki Sit
 #
 # SPDX-License-Identifier: AGPL-3.0-or-later
 [Unit]
 Description=Matrix Services Boot Recovery (Synology)
 # Run after multi-user.target so all matrix services have been attempted first.
 After=multi-user.target
 [Service]
 Type=oneshot
 RemainAfterExit=yes
 ExecStart={{ matrix_bin_path }}/matrix-synology-boot-fix
 [Install]
 WantedBy=multi-user.target
@@ -17,7 +17,7 @@ matrix_bot_baibot_container_repo_version: "{{ 'main' if matrix_bot_baibot_versio
 matrix_bot_baibot_container_src_files_path: "{{ matrix_base_data_path }}/baibot/container-src"
 # renovate: datasource=docker depName=ghcr.io/etkecc/baibot
-matrix_bot_baibot_version: v1.25.0
+matrix_bot_baibot_version: v1.19.1
 matrix_bot_baibot_container_image: "{{ matrix_bot_baibot_container_image_registry_prefix }}etkecc/baibot:{{ matrix_bot_baibot_version }}"
 matrix_bot_baibot_container_image_registry_prefix: "{{ 'localhost/' if matrix_bot_baibot_container_image_self_build else matrix_bot_baibot_container_image_registry_prefix_upstream }}"
 matrix_bot_baibot_container_image_registry_prefix_upstream: "{{ matrix_bot_baibot_container_image_registry_prefix_upstream_default }}"
@@ -200,12 +200,6 @@ matrix_bot_baibot_config_agents_static_definitions_auto: |-
        'provider': matrix_bot_baibot_config_agents_static_definitions_openai_provider,
        'config': matrix_bot_baibot_config_agents_static_definitions_openai_config,
    }] if matrix_bot_baibot_config_agents_static_definitions_openai_enabled else [])
    +
    ([{
        'id': matrix_bot_baibot_config_agents_static_definitions_venice_id,
        'provider': matrix_bot_baibot_config_agents_static_definitions_venice_provider,
        'config': matrix_bot_baibot_config_agents_static_definitions_venice_config,
    }] if matrix_bot_baibot_config_agents_static_definitions_venice_enabled else [])
  }}
 matrix_bot_baibot_config_agents_static_definitions_custom: []
@@ -448,175 +442,6 @@ matrix_bot_baibot_config_agents_static_definitions_openai_config_image_generatio
 ########################################################################################
 ########################################################################################
 #                                                                                      #
 # Venice agent configuration                                                           #
 #                                                                                      #
 ########################################################################################
 matrix_bot_baibot_config_agents_static_definitions_venice_enabled: false
 matrix_bot_baibot_config_agents_static_definitions_venice_id: venice
 matrix_bot_baibot_config_agents_static_definitions_venice_provider: venice
 matrix_bot_baibot_config_agents_static_definitions_venice_config: "{{ matrix_bot_baibot_config_agents_static_definitions_venice_config_yaml | from_yaml | combine(matrix_bot_baibot_config_agents_static_definitions_venice_config_extension, recursive=True) }}"
 matrix_bot_baibot_config_agents_static_definitions_venice_config_yaml: "{{ lookup('template', 'templates/provider/venice-config.yml.j2') }}"
 matrix_bot_baibot_config_agents_static_definitions_venice_config_extension: "{{ matrix_bot_baibot_config_agents_static_definitions_venice_config_extension_yaml | from_yaml if matrix_bot_baibot_config_agents_static_definitions_venice_config_extension_yaml | from_yaml is mapping else {} }}"
 matrix_bot_baibot_config_agents_static_definitions_venice_config_extension_yaml: |
  # Your custom YAML configuration for this provider's configuration goes here.
  # This configuration extends the default starting configuration (`matrix_bot_baibot_config_agents_static_definitions_venice_config`).
  #
  # You can override individual variables from the default configuration, or introduce new ones.
  #
  # If you need something more special, you can take full control by
  # completely redefining `matrix_bot_baibot_config_agents_static_definitions_venice_config_yaml`.
  #
  # The fully-commented sample config (every Venice knob, with explanations) lives at:
  # https://github.com/etkecc/baibot/blob/main/docs/sample-provider-configs/venice.yml
  #
  # Example configuration extension follows:
  #
  # text_generation:
  #   venice_parameters:
  #     enable_web_search: "off"
 matrix_bot_baibot_config_agents_static_definitions_venice_config_base_url: https://api.venice.ai/api/v1
 matrix_bot_baibot_config_agents_static_definitions_venice_config_api_key: ""
 matrix_bot_baibot_config_agents_static_definitions_venice_config_text_generation_enabled: true
 # For valid model choices, see: https://docs.venice.ai/models/overview
 matrix_bot_baibot_config_agents_static_definitions_venice_config_text_generation_model_id: kimi-k2-5
 # The prompt text to use (can be null or empty to not use a prompt).
 matrix_bot_baibot_config_agents_static_definitions_venice_config_text_generation_prompt: "{{ matrix_bot_baibot_config_agents_static_definitions_prompt }}"
 matrix_bot_baibot_config_agents_static_definitions_venice_config_text_generation_temperature: 1.0
 matrix_bot_baibot_config_agents_static_definitions_venice_config_text_generation_max_response_tokens: 4096
 matrix_bot_baibot_config_agents_static_definitions_venice_config_text_generation_max_context_tokens: 128000
 # How long Venice keeps the prompt prefix cached: "default", "extended", or "24h".
 # "24h" makes a long, stable system prompt cheap across a day of conversations.
 matrix_bot_baibot_config_agents_static_definitions_venice_config_text_generation_prompt_cache_retention: 24h
 # The optional top-level sampling and reasoning knobs below default to null, meaning the knob is
 # omitted from the request and Venice applies its own server-side default. Set a value to override.
 # Nucleus sampling, 0.0-1.0 (an alternative to temperature).
 matrix_bot_baibot_config_agents_static_definitions_venice_config_text_generation_top_p: ~
 # Penalize tokens by how often they have already appeared, -2.0-2.0.
 matrix_bot_baibot_config_agents_static_definitions_venice_config_text_generation_frequency_penalty: ~
 # Penalize tokens that have appeared at all, -2.0-2.0.
 matrix_bot_baibot_config_agents_static_definitions_venice_config_text_generation_presence_penalty: ~
 # Penalize repetition; values above 1.0 discourage repeats.
 matrix_bot_baibot_config_agents_static_definitions_venice_config_text_generation_repetition_penalty: ~
 # Reasoning budget for models that support it: "low", "medium", or "high".
 matrix_bot_baibot_config_agents_static_definitions_venice_config_text_generation_reasoning_effort: ~
 # Append the model's reasoning below the answer as a collapsible "Reasoning" block (folded by default).
 matrix_bot_baibot_config_agents_static_definitions_venice_config_text_generation_show_reasoning: ~
 # Venice-specific request parameters (the `venice_parameters` bag). Each non-null knob below is sent;
 # a null knob is omitted, so Venice applies its own default. Omitting a knob is NOT the same as
 # setting it to `false` (which actively sends `false`).
 # Web search: "auto" (model decides), "on" (always), or "off".
 matrix_bot_baibot_config_agents_static_definitions_venice_config_text_generation_venice_parameters_enable_web_search: auto
 # Strip <think></think> blocks from reasoning models so the user sees only the answer.
 matrix_bot_baibot_config_agents_static_definitions_venice_config_text_generation_venice_parameters_strip_thinking_response: true
 # Run in TEE-only mode (works across all models) instead of end-to-end-encrypted inference (only
 # some models support it). TEE is still zero-retention private; this default keeps every model usable.
 matrix_bot_baibot_config_agents_static_definitions_venice_config_text_generation_venice_parameters_enable_e2ee: false
 # Render web-search sources as readable citations in the reply.
 matrix_bot_baibot_config_agents_static_definitions_venice_config_text_generation_venice_parameters_enable_web_citations: ~
 # Let web search read full page content, not just snippets.
 matrix_bot_baibot_config_agents_static_definitions_venice_config_text_generation_venice_parameters_enable_web_scraping: ~
 # Prepend Venice's own system prompt alongside yours.
 matrix_bot_baibot_config_agents_static_definitions_venice_config_text_generation_venice_parameters_include_venice_system_prompt: ~
 # Include search results inline in the streamed response.
 matrix_bot_baibot_config_agents_static_definitions_venice_config_text_generation_venice_parameters_include_search_results_in_stream: ~
 # Return search results as documents rather than inline text.
 matrix_bot_baibot_config_agents_static_definitions_venice_config_text_generation_venice_parameters_return_search_results_as_documents: ~
 # Allow web search to query X (Twitter).
 matrix_bot_baibot_config_agents_static_definitions_venice_config_text_generation_venice_parameters_enable_x_search: ~
 # Disable the model's thinking phase entirely.
 matrix_bot_baibot_config_agents_static_definitions_venice_config_text_generation_venice_parameters_disable_thinking: ~
 # Response verbosity for models that support it: "low", "medium", or "high".
 matrix_bot_baibot_config_agents_static_definitions_venice_config_text_generation_venice_parameters_verbosity: ~
 # Use a public Venice character by its slug.
 matrix_bot_baibot_config_agents_static_definitions_venice_config_text_generation_venice_parameters_character_slug: ~
 matrix_bot_baibot_config_agents_static_definitions_venice_config_speech_to_text_enabled: true
 matrix_bot_baibot_config_agents_static_definitions_venice_config_speech_to_text_model_id: nvidia/parakeet-tdt-0.6b-v3
 matrix_bot_baibot_config_agents_static_definitions_venice_config_text_to_speech_enabled: true
 # Other models include tts-qwen3-1-7b, tts-xai-v1, tts-elevenlabs-turbo-v2-5, tts-minimax-speech-02-hd.
 matrix_bot_baibot_config_agents_static_definitions_venice_config_text_to_speech_model_id: tts-kokoro
 # Voices are model-specific. Kokoro uses af_*/am_*/bf_*/bm_* (e.g. af_sky, am_adam). You can also pass
 # a cloned-voice handle (vv_<id>). An incompatible voice returns an error.
 matrix_bot_baibot_config_agents_static_definitions_venice_config_text_to_speech_voice: af_sky
 # Output audio format: mp3, opus, aac, flac, wav, or pcm. mp3 is the broadest Matrix-client fit.
 matrix_bot_baibot_config_agents_static_definitions_venice_config_text_to_speech_response_format: mp3
 # The optional knobs below default to null (omitted). Set a value to override Venice's default.
 # Playback speed, 0.25-4.0 (1.0 is normal).
 matrix_bot_baibot_config_agents_static_definitions_venice_config_text_to_speech_speed: ~
 # A style prompt steering emotion/delivery (e.g. "Excited and energetic."). Only Qwen 3 TTS uses it.
 matrix_bot_baibot_config_agents_static_definitions_venice_config_text_to_speech_prompt: ~
 # Sampling temperature, 0.0-2.0. Only Qwen 3 / Orpheus / Chatterbox HD use it.
 matrix_bot_baibot_config_agents_static_definitions_venice_config_text_to_speech_temperature: ~
 # Nucleus sampling, 0.0-1.0. Only Qwen 3 TTS uses it.
 matrix_bot_baibot_config_agents_static_definitions_venice_config_text_to_speech_top_p: ~
 matrix_bot_baibot_config_agents_static_definitions_venice_config_image_generation_enabled: true
 matrix_bot_baibot_config_agents_static_definitions_venice_config_image_generation_model_id: chroma
 # The optional generation knobs below default to null (omitted). Set a value to override Venice's
 # default. Omitting a knob is NOT the same as setting it: an omitted knob lets Venice apply its own
 # default, a set value is sent verbatim.
 # A description of what should NOT appear in the image.
 matrix_bot_baibot_config_agents_static_definitions_venice_config_image_generation_negative_prompt: ~
 # CFG scale, 0-20. Higher values make the image adhere more closely to the prompt.
 matrix_bot_baibot_config_agents_static_definitions_venice_config_image_generation_cfg_scale: ~
 # Number of inference steps. Model-specific; some models ignore it.
 matrix_bot_baibot_config_agents_static_definitions_venice_config_image_generation_steps: ~
 # A named style to apply (e.g. "3D Model"). See Venice's image-styles reference.
 matrix_bot_baibot_config_agents_static_definitions_venice_config_image_generation_style_preset: ~
 # Random seed, -999999999-999999999. Fix it for reproducible results; omit for a random seed.
 matrix_bot_baibot_config_agents_static_definitions_venice_config_image_generation_seed: ~
 # Blur images classified as adult content. Defaults to true.
 matrix_bot_baibot_config_agents_static_definitions_venice_config_image_generation_safe_mode: ~
 # Hide the Venice watermark. Venice may ignore this for certain generated content. Defaults to false.
 matrix_bot_baibot_config_agents_static_definitions_venice_config_image_generation_hide_watermark: ~
 # Output format: jpeg, png, or webp. webp is smallest; png is highest-quality. Defaults to webp.
 matrix_bot_baibot_config_agents_static_definitions_venice_config_image_generation_format: ~
 # Image dimensions in pixels, each 1-1280. Default 1024x1024.
 matrix_bot_baibot_config_agents_static_definitions_venice_config_image_generation_width: ~
 matrix_bot_baibot_config_agents_static_definitions_venice_config_image_generation_height: ~
 # Aspect ratio (used by certain models, e.g. Nano Banana): "1:1", "16:9". An alternative to width/height.
 matrix_bot_baibot_config_agents_static_definitions_venice_config_image_generation_aspect_ratio: ~
 # Resolution tier (used by certain models): "1K", "2K", "4K".
 matrix_bot_baibot_config_agents_static_definitions_venice_config_image_generation_resolution: ~
 # Output quality for supported models (e.g. GPT Image 2): low, medium, high. Higher can cost more.
 matrix_bot_baibot_config_agents_static_definitions_venice_config_image_generation_quality: ~
 # Lora strength, 0-100. Only applies if the model uses additional Loras.
 matrix_bot_baibot_config_agents_static_definitions_venice_config_image_generation_lora_strength: ~
 # Embed the generation prompt into the image's EXIF metadata. Defaults to false.
 matrix_bot_baibot_config_agents_static_definitions_venice_config_image_generation_embed_exif_metadata: ~
 # Let the model pull the latest info from the web for the image. Model-specific; costs extra credits.
 matrix_bot_baibot_config_agents_static_definitions_venice_config_image_generation_enable_web_search: ~
 # Image editing shares this image_generation config block; only the model differs.
 matrix_bot_baibot_config_agents_static_definitions_venice_config_image_generation_edit_model_id: firered-image-edit
 # The optional edit knobs below default to null (omitted). Set a value to override Venice's default.
 # Output format: jpeg, png, or webp. When omitted, Venice infers it (PNG at 1K, JPEG at 2K/4K).
 matrix_bot_baibot_config_agents_static_definitions_venice_config_image_generation_edit_output_format: ~
 # Aspect ratio of the result: auto, 1:1, 3:2, 16:9, 21:9, 9:16, 2:3, 3:4, 4:5 (model-specific).
 matrix_bot_baibot_config_agents_static_definitions_venice_config_image_generation_edit_aspect_ratio: ~
 # Resolution tier: 1K, 2K, 4K (model-specific). Defaults to 1K.
 matrix_bot_baibot_config_agents_static_definitions_venice_config_image_generation_edit_resolution: ~
 # Blur images classified as adult content. Defaults to true.
 matrix_bot_baibot_config_agents_static_definitions_venice_config_image_generation_edit_safe_mode: ~
 ########################################################################################
 #                                                                                      #
 # /Venice agent configuration                                                          #
 #                                                                                      #
 ########################################################################################
 # Controls the `initial_global_config.handler.catch_all` configuration setting.
 #
 # This is an initial global configuration setting.
@@ -69,7 +69,6 @@
      register: matrix_bot_baibot_container_image_build_result
 - name: Ensure baibot container network is created
  when: matrix_bot_baibot_container_network != 'host'
  community.general.docker_network:
    enable_ipv6: "{{ devture_systemd_docker_base_ipv6_enabled }}"
    name: "{{ matrix_bot_baibot_container_network }}"
@@ -25,8 +25,6 @@
    - {'name': 'matrix_bot_baibot_config_agents_static_definitions_openai_config_api_key', when: "{{ matrix_bot_baibot_config_agents_static_definitions_openai_enabled }}"}
    - {'name': 'matrix_bot_baibot_config_agents_static_definitions_venice_config_api_key', when: "{{ matrix_bot_baibot_config_agents_static_definitions_venice_enabled }}"}
 - name: Fail if baibot authentication mode is not configured
  ansible.builtin.fail:
    msg: >-
@@ -1,154 +0,0 @@
 #jinja2: lstrip_blocks: True
 base_url: {{ matrix_bot_baibot_config_agents_static_definitions_venice_config_base_url | to_json }}
 api_key: {{ matrix_bot_baibot_config_agents_static_definitions_venice_config_api_key | to_json }}
 {% if matrix_bot_baibot_config_agents_static_definitions_venice_config_text_generation_enabled %}
 text_generation:
  model_id: {{ matrix_bot_baibot_config_agents_static_definitions_venice_config_text_generation_model_id | to_json }}
  prompt: {{ matrix_bot_baibot_config_agents_static_definitions_venice_config_text_generation_prompt | to_json }}
  temperature: {{ matrix_bot_baibot_config_agents_static_definitions_venice_config_text_generation_temperature | to_json }}
  max_response_tokens: {{ matrix_bot_baibot_config_agents_static_definitions_venice_config_text_generation_max_response_tokens | int | to_json }}
  max_context_tokens: {{ matrix_bot_baibot_config_agents_static_definitions_venice_config_text_generation_max_context_tokens | int | to_json }}
  prompt_cache_retention: {{ matrix_bot_baibot_config_agents_static_definitions_venice_config_text_generation_prompt_cache_retention | to_json }}
  {% if matrix_bot_baibot_config_agents_static_definitions_venice_config_text_generation_top_p is not none %}
  top_p: {{ matrix_bot_baibot_config_agents_static_definitions_venice_config_text_generation_top_p | to_json }}
  {% endif %}
  {% if matrix_bot_baibot_config_agents_static_definitions_venice_config_text_generation_frequency_penalty is not none %}
  frequency_penalty: {{ matrix_bot_baibot_config_agents_static_definitions_venice_config_text_generation_frequency_penalty | to_json }}
  {% endif %}
  {% if matrix_bot_baibot_config_agents_static_definitions_venice_config_text_generation_presence_penalty is not none %}
  presence_penalty: {{ matrix_bot_baibot_config_agents_static_definitions_venice_config_text_generation_presence_penalty | to_json }}
  {% endif %}
  {% if matrix_bot_baibot_config_agents_static_definitions_venice_config_text_generation_repetition_penalty is not none %}
  repetition_penalty: {{ matrix_bot_baibot_config_agents_static_definitions_venice_config_text_generation_repetition_penalty | to_json }}
  {% endif %}
  {% if matrix_bot_baibot_config_agents_static_definitions_venice_config_text_generation_reasoning_effort is not none %}
  reasoning_effort: {{ matrix_bot_baibot_config_agents_static_definitions_venice_config_text_generation_reasoning_effort | to_json }}
  {% endif %}
  {% if matrix_bot_baibot_config_agents_static_definitions_venice_config_text_generation_show_reasoning is not none %}
  show_reasoning: {{ matrix_bot_baibot_config_agents_static_definitions_venice_config_text_generation_show_reasoning | to_json }}
  {% endif %}
  venice_parameters:
    enable_web_search: {{ matrix_bot_baibot_config_agents_static_definitions_venice_config_text_generation_venice_parameters_enable_web_search | to_json }}
    strip_thinking_response: {{ matrix_bot_baibot_config_agents_static_definitions_venice_config_text_generation_venice_parameters_strip_thinking_response | to_json }}
    enable_e2ee: {{ matrix_bot_baibot_config_agents_static_definitions_venice_config_text_generation_venice_parameters_enable_e2ee | to_json }}
    {% if matrix_bot_baibot_config_agents_static_definitions_venice_config_text_generation_venice_parameters_enable_web_citations is not none %}
    enable_web_citations: {{ matrix_bot_baibot_config_agents_static_definitions_venice_config_text_generation_venice_parameters_enable_web_citations | to_json }}
    {% endif %}
    {% if matrix_bot_baibot_config_agents_static_definitions_venice_config_text_generation_venice_parameters_enable_web_scraping is not none %}
    enable_web_scraping: {{ matrix_bot_baibot_config_agents_static_definitions_venice_config_text_generation_venice_parameters_enable_web_scraping | to_json }}
    {% endif %}
    {% if matrix_bot_baibot_config_agents_static_definitions_venice_config_text_generation_venice_parameters_include_venice_system_prompt is not none %}
    include_venice_system_prompt: {{ matrix_bot_baibot_config_agents_static_definitions_venice_config_text_generation_venice_parameters_include_venice_system_prompt | to_json }}
    {% endif %}
    {% if matrix_bot_baibot_config_agents_static_definitions_venice_config_text_generation_venice_parameters_include_search_results_in_stream is not none %}
    include_search_results_in_stream: {{ matrix_bot_baibot_config_agents_static_definitions_venice_config_text_generation_venice_parameters_include_search_results_in_stream | to_json }}
    {% endif %}
    {% if matrix_bot_baibot_config_agents_static_definitions_venice_config_text_generation_venice_parameters_return_search_results_as_documents is not none %}
    return_search_results_as_documents: {{ matrix_bot_baibot_config_agents_static_definitions_venice_config_text_generation_venice_parameters_return_search_results_as_documents | to_json }}
    {% endif %}
    {% if matrix_bot_baibot_config_agents_static_definitions_venice_config_text_generation_venice_parameters_enable_x_search is not none %}
    enable_x_search: {{ matrix_bot_baibot_config_agents_static_definitions_venice_config_text_generation_venice_parameters_enable_x_search | to_json }}
    {% endif %}
    {% if matrix_bot_baibot_config_agents_static_definitions_venice_config_text_generation_venice_parameters_disable_thinking is not none %}
    disable_thinking: {{ matrix_bot_baibot_config_agents_static_definitions_venice_config_text_generation_venice_parameters_disable_thinking | to_json }}
    {% endif %}
    {% if matrix_bot_baibot_config_agents_static_definitions_venice_config_text_generation_venice_parameters_verbosity is not none %}
    verbosity: {{ matrix_bot_baibot_config_agents_static_definitions_venice_config_text_generation_venice_parameters_verbosity | to_json }}
    {% endif %}
    {% if matrix_bot_baibot_config_agents_static_definitions_venice_config_text_generation_venice_parameters_character_slug is not none %}
    character_slug: {{ matrix_bot_baibot_config_agents_static_definitions_venice_config_text_generation_venice_parameters_character_slug | to_json }}
    {% endif %}
 {% endif %}
 {% if matrix_bot_baibot_config_agents_static_definitions_venice_config_speech_to_text_enabled %}
 speech_to_text:
  model_id: {{ matrix_bot_baibot_config_agents_static_definitions_venice_config_speech_to_text_model_id | to_json }}
 {% endif %}
 {% if matrix_bot_baibot_config_agents_static_definitions_venice_config_text_to_speech_enabled %}
 text_to_speech:
  model_id: {{ matrix_bot_baibot_config_agents_static_definitions_venice_config_text_to_speech_model_id | to_json }}
  voice: {{ matrix_bot_baibot_config_agents_static_definitions_venice_config_text_to_speech_voice | to_json }}
  response_format: {{ matrix_bot_baibot_config_agents_static_definitions_venice_config_text_to_speech_response_format | to_json }}
  {% if matrix_bot_baibot_config_agents_static_definitions_venice_config_text_to_speech_speed is not none %}
  speed: {{ matrix_bot_baibot_config_agents_static_definitions_venice_config_text_to_speech_speed | to_json }}
  {% endif %}
  {% if matrix_bot_baibot_config_agents_static_definitions_venice_config_text_to_speech_prompt is not none %}
  prompt: {{ matrix_bot_baibot_config_agents_static_definitions_venice_config_text_to_speech_prompt | to_json }}
  {% endif %}
  {% if matrix_bot_baibot_config_agents_static_definitions_venice_config_text_to_speech_temperature is not none %}
  temperature: {{ matrix_bot_baibot_config_agents_static_definitions_venice_config_text_to_speech_temperature | to_json }}
  {% endif %}
  {% if matrix_bot_baibot_config_agents_static_definitions_venice_config_text_to_speech_top_p is not none %}
  top_p: {{ matrix_bot_baibot_config_agents_static_definitions_venice_config_text_to_speech_top_p | to_json }}
  {% endif %}
 {% endif %}
 {% if matrix_bot_baibot_config_agents_static_definitions_venice_config_image_generation_enabled %}
 image_generation:
  model_id: {{ matrix_bot_baibot_config_agents_static_definitions_venice_config_image_generation_model_id | to_json }}
  {% if matrix_bot_baibot_config_agents_static_definitions_venice_config_image_generation_negative_prompt is not none %}
  negative_prompt: {{ matrix_bot_baibot_config_agents_static_definitions_venice_config_image_generation_negative_prompt | to_json }}
  {% endif %}
  {% if matrix_bot_baibot_config_agents_static_definitions_venice_config_image_generation_cfg_scale is not none %}
  cfg_scale: {{ matrix_bot_baibot_config_agents_static_definitions_venice_config_image_generation_cfg_scale | to_json }}
  {% endif %}
  {% if matrix_bot_baibot_config_agents_static_definitions_venice_config_image_generation_steps is not none %}
  steps: {{ matrix_bot_baibot_config_agents_static_definitions_venice_config_image_generation_steps | to_json }}
  {% endif %}
  {% if matrix_bot_baibot_config_agents_static_definitions_venice_config_image_generation_style_preset is not none %}
  style_preset: {{ matrix_bot_baibot_config_agents_static_definitions_venice_config_image_generation_style_preset | to_json }}
  {% endif %}
  {% if matrix_bot_baibot_config_agents_static_definitions_venice_config_image_generation_seed is not none %}
  seed: {{ matrix_bot_baibot_config_agents_static_definitions_venice_config_image_generation_seed | to_json }}
  {% endif %}
  {% if matrix_bot_baibot_config_agents_static_definitions_venice_config_image_generation_safe_mode is not none %}
  safe_mode: {{ matrix_bot_baibot_config_agents_static_definitions_venice_config_image_generation_safe_mode | to_json }}
  {% endif %}
  {% if matrix_bot_baibot_config_agents_static_definitions_venice_config_image_generation_hide_watermark is not none %}
  hide_watermark: {{ matrix_bot_baibot_config_agents_static_definitions_venice_config_image_generation_hide_watermark | to_json }}
  {% endif %}
  {% if matrix_bot_baibot_config_agents_static_definitions_venice_config_image_generation_format is not none %}
  format: {{ matrix_bot_baibot_config_agents_static_definitions_venice_config_image_generation_format | to_json }}
  {% endif %}
  {% if matrix_bot_baibot_config_agents_static_definitions_venice_config_image_generation_width is not none %}
  width: {{ matrix_bot_baibot_config_agents_static_definitions_venice_config_image_generation_width | to_json }}
  {% endif %}
  {% if matrix_bot_baibot_config_agents_static_definitions_venice_config_image_generation_height is not none %}
  height: {{ matrix_bot_baibot_config_agents_static_definitions_venice_config_image_generation_height | to_json }}
  {% endif %}
  {% if matrix_bot_baibot_config_agents_static_definitions_venice_config_image_generation_aspect_ratio is not none %}
  aspect_ratio: {{ matrix_bot_baibot_config_agents_static_definitions_venice_config_image_generation_aspect_ratio | to_json }}
  {% endif %}
  {% if matrix_bot_baibot_config_agents_static_definitions_venice_config_image_generation_resolution is not none %}
  resolution: {{ matrix_bot_baibot_config_agents_static_definitions_venice_config_image_generation_resolution | to_json }}
  {% endif %}
  {% if matrix_bot_baibot_config_agents_static_definitions_venice_config_image_generation_quality is not none %}
  quality: {{ matrix_bot_baibot_config_agents_static_definitions_venice_config_image_generation_quality | to_json }}
  {% endif %}
  {% if matrix_bot_baibot_config_agents_static_definitions_venice_config_image_generation_lora_strength is not none %}
  lora_strength: {{ matrix_bot_baibot_config_agents_static_definitions_venice_config_image_generation_lora_strength | to_json }}
  {% endif %}
  {% if matrix_bot_baibot_config_agents_static_definitions_venice_config_image_generation_embed_exif_metadata is not none %}
  embed_exif_metadata: {{ matrix_bot_baibot_config_agents_static_definitions_venice_config_image_generation_embed_exif_metadata | to_json }}
  {% endif %}
  {% if matrix_bot_baibot_config_agents_static_definitions_venice_config_image_generation_enable_web_search is not none %}
  enable_web_search: {{ matrix_bot_baibot_config_agents_static_definitions_venice_config_image_generation_enable_web_search | to_json }}
  {% endif %}
  edit:
    model_id: {{ matrix_bot_baibot_config_agents_static_definitions_venice_config_image_generation_edit_model_id | to_json }}
    {% if matrix_bot_baibot_config_agents_static_definitions_venice_config_image_generation_edit_output_format is not none %}
    output_format: {{ matrix_bot_baibot_config_agents_static_definitions_venice_config_image_generation_edit_output_format | to_json }}
    {% endif %}
    {% if matrix_bot_baibot_config_agents_static_definitions_venice_config_image_generation_edit_aspect_ratio is not none %}
    aspect_ratio: {{ matrix_bot_baibot_config_agents_static_definitions_venice_config_image_generation_edit_aspect_ratio | to_json }}
    {% endif %}
    {% if matrix_bot_baibot_config_agents_static_definitions_venice_config_image_generation_edit_resolution is not none %}
    resolution: {{ matrix_bot_baibot_config_agents_static_definitions_venice_config_image_generation_edit_resolution | to_json }}
    {% endif %}
    {% if matrix_bot_baibot_config_agents_static_definitions_venice_config_image_generation_edit_safe_mode is not none %}
    safe_mode: {{ matrix_bot_baibot_config_agents_static_definitions_venice_config_image_generation_edit_safe_mode | to_json }}
    {% endif %}
 {% endif %}
--- a/Show More
+++ b/Show More