baibot: add venice wiring

add link to Ketesa website <https://ketesa.app >
Add matrix_tuwunel_config_ip_range_denylist (mirrors tuwunel's upstream default)
2026-06-28 18:54:26 +03:00 · 2026-06-28 16:34:06 +01:00 · 2026-06-28 11:02:51 +01:00 · 2026-06-27 20:39:16 +03:00 · 2026-06-27 20:17:09 +03:00 · 2026-06-27 18:17:06 +03:00
193 changed files with 1712 additions and 84 deletions
@@ -25,6 +25,13 @@
 				"https://github.com/devture/com.devture.ansible.role{/,}**",
 				"https://github.com/mother-of-all-self-hosting{/,}**"
 			]
+		},
+		{
+			"description": "mautrix images are dual-tagged (v0.YYMM.PATCH and vYY.MM[.PATCH]). Stick to the v0 scheme: it matches the git tags (needed for self-building) and has a consistent number of components (the calver tags do not, which makes Renovate stop offering updates).",
+			"matchPackageNames": [
+				"dock.mau.dev/mautrix/**"
+			],
+			"allowedVersions": "/^v0\\./"
 		}
 	],
 	"pre-commit": {
@@ -26,10 +26,10 @@ jobs:
        run: pacman -Sy --noconfirm git

      - name: Check out
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7

      - name: Restore prek cache
-        uses: actions/cache@v5
+        uses: actions/cache@v6
        with:
          path: var/prek
          key: arch-prek-v1-${{ hashFiles('.pre-commit-config.yaml') }}
@@ -24,7 +24,7 @@ jobs:
    name: Update translations
    runs-on: ubuntu-latest
    steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7

      - uses: actions/setup-python@v6
        with:
@@ -32,7 +32,7 @@ jobs:

      # Setting up recommended prerequisites
      # See: i18n/README.md
-      - uses: astral-sh/setup-uv@v8.1.0
+      - uses: astral-sh/setup-uv@v8.2.0
      - uses: extractions/setup-just@v4

      # TODO: optimize when we start publishing translations and integrate a Weblate instance
@@ -1,3 +1,29 @@
+# 2026-06-28
+
+## baibot now supports Venice, our recommended provider
+
+[baibot](./docs/configuring-playbook-bot-baibot.md) now ships a preset for the [Venice](./docs/configuring-playbook-bot-baibot.md#venice) provider, and it's the one we recommend. It's the most capable provider baibot supports (text generation with vision, file inputs and web search, speech-to-text, text-to-speech, and image generation and editing), and the only one that runs inference with no logging and no training on your data.
+
+Enabling it takes a preset toggle and an API key:
+
+```yaml
+matrix_bot_baibot_config_agents_static_definitions_venice_enabled: true
+
+matrix_bot_baibot_config_agents_static_definitions_venice_config_api_key: "YOUR_API_KEY_HERE"
+```
+
+[OpenAI](https://openai.com/) and baibot's other providers remain fully supported. To get started, see the [Setting up baibot](./docs/configuring-playbook-bot-baibot.md#venice) documentation page.
+
+# 2026-06-24
+
+## Support for bridging to iMessage via RustPush
+
+Thanks to [jasonlaguidice](https://github.com/jasonlaguidice), the playbook now supports bridging to [iMessage](https://support.apple.com/messages) via a new [RustPush](https://github.com/OpenBubbles/rustpush)-based bridge ([jasonlaguidice/imessage](https://github.com/jasonlaguidice/imessage)).
+
+Unlike the existing [mautrix-wsproxy](./docs/configuring-playbook-bridge-mautrix-wsproxy.md) iMessage bridge, this one talks directly to Apple's push notification service, so it needs neither a running Mac nor a wsproxy on the homeserver. Each user supplies a hardware key extracted from a Mac through the bridge bot's login flow.
+
+To learn more, see our [Setting up RustPush (iMessage) bridging](./docs/configuring-playbook-bridge-rustpush.md) documentation page.
+
 # 2026-05-24

 ## matrix-ldap-registration-proxy has been removed from the playbook
@@ -65,7 +65,7 @@ Web clients for Matrix that you can host on your own domains.
 | [Element Web](https://github.com/element-hq/element-web) | ✅ | Default Matrix web client, configured to connect to your own Synapse server | [Link](docs/configuring-playbook-client-element-web.md) |
 | [Hydrogen](https://github.com/element-hq/hydrogen-web) | ❌ | Lightweight Matrix client with legacy and mobile browser support | [Link](docs/configuring-playbook-client-hydrogen.md) |
 | [Cinny](https://github.com/ajbura/cinny) |  ❌ | Simple, elegant and secure web client | [Link](docs/configuring-playbook-client-cinny.md) |
-| [Sable](https://github.com/7w1/sable) | ❌ | Simple, elegant and secure web client | [Link](docs/configuring-playbook-client-sable.md) |
+| [Sable](https://github.com/SableClient/Sable) | ❌ | Simple, elegant and secure web client | [Link](docs/configuring-playbook-client-sable.md) |
 | [SchildiChat Web](https://schildi.chat/) | ❌ | Based on Element Web, with a more traditional instant messaging experience | [Link](docs/configuring-playbook-client-schildichat-web.md) |
 | [FluffyChat Web](https://fluffychat.im/) | ❌ | The cutest messenger in Matrix | [Link](docs/configuring-playbook-client-fluffychat-web.md) |

@@ -117,6 +117,7 @@ Bridges can be used to connect your Matrix installation with third-party communi
 | [mautrix-gmessages](https://github.com/mautrix/gmessages) | ❌ | Bridge to [Google Messages](https://messages.google.com/) | [Link](docs/configuring-playbook-bridge-mautrix-gmessages.md) |
 | [mautrix-whatsapp](https://github.com/mautrix/whatsapp) | ❌ | Bridge to [WhatsApp](https://www.whatsapp.com/) | [Link](docs/configuring-playbook-bridge-mautrix-whatsapp.md) |
 | [mautrix-wsproxy](https://github.com/mautrix/wsproxy) | ❌ | Bridge to Android SMS or Apple iMessage | [Link](docs/configuring-playbook-bridge-mautrix-wsproxy.md) |
+| [matrix-rustpush-bridge](https://github.com/jasonlaguidice/imessage) | ❌ | Bridge to [iMessage](https://support.apple.com/messages) via Apple Push Notification service | [Link](docs/configuring-playbook-bridge-rustpush.md) |
 | [mautrix-bluesky](https://github.com/mautrix/bluesky) | ❌ | Bridge to [Bluesky](https://bsky.social/) | [Link](docs/configuring-playbook-bridge-mautrix-bluesky.md) |
 | [mautrix-twitter](https://github.com/mautrix/twitter) | ❌ | Bridge to [Twitter](https://twitter.com/) | [Link](docs/configuring-playbook-bridge-mautrix-twitter.md) |
 | [mautrix-googlechat](https://github.com/mautrix/googlechat) | ❌ | Bridge to [Google Chat](https://en.wikipedia.org/wiki/Google_Chat) | [Link](docs/configuring-playbook-bridge-mautrix-googlechat.md) |
@@ -14,7 +14,7 @@ SPDX-License-Identifier: AGPL-3.0-or-later

 🤖 [baibot](https://github.com/etkecc/baibot) (pronounced bye-bot) is a [Matrix](https://matrix.org/) bot developed by [etke.cc](https://etke.cc/) that exposes the power of [AI](https://en.wikipedia.org/wiki/Artificial_intelligence) / [Large Language Models](https://en.wikipedia.org/wiki/Large_language_model) to you. 🤖

-It supports [OpenAI](https://openai.com/)'s [ChatGPT](https://openai.com/blog/chatgpt/) models, as many well as other [☁️ providers](https://github.com/etkecc/baibot/blob/main/docs/providers.md).
+It supports many [☁️ providers](https://github.com/etkecc/baibot/blob/main/docs/providers.md), including the privacy-first [Venice](#venice) we recommend, [OpenAI](https://openai.com/)'s [ChatGPT](https://openai.com/blog/chatgpt/) models, and more.

 It's designed as a more private and [✨ featureful](https://github.com/etkecc/baibot/?tab=readme-ov-file#-features) alternative to [matrix-chatgpt-bot](./configuring-playbook-bot-chatgpt.md). See the [baibot](https://github.com/etkecc/baibot) project and its documentation for more information.

@@ -159,7 +159,38 @@ Agents defined statically and those created dynamically (via chat) are named dif

 Depending on your propensity for [GitOps](https://en.wikipedia.org/wiki/DevOps#GitOps), you may prefer to define agents statically via Ansible, or you may wish to do it dynamically via chat.

-Before proceeding, we recommend reading the upstream documentation on [How to choose a provider](https://github.com/etkecc/baibot/blob/main/docs/providers.md#how-to-choose-a-provider). In short, it's probably best to go with [OpenAI](#openai).
+Before proceeding, we recommend reading the upstream documentation on [How to choose a provider](https://github.com/etkecc/baibot/blob/main/docs/providers.md#how-to-choose-a-provider) for a side-by-side of what each one can do. In short: we recommend [Venice](#venice), the most capable provider baibot supports and the only one that keeps no logs and trains on nothing. If you'd rather start with the most widely-used option, [OpenAI](#openai) is a solid, well-supported choice too.
+
+#### Venice
+
+[Venice](https://venice.ai/chat?ref=kpXDe6) _(ref link with a $10 bonus for you)_ is the provider we recommend. It's the most capable one baibot supports, and the only one that pairs that full feature set with real privacy: inference runs on Venice's own GPUs or on zero-data-retention partner hardware, so your prompts and replies are stored nowhere and never used for training. It serves both frontier proprietary models and the latest open-source ones.
+
+Venice also leaves the content policy to you instead of imposing its own. Its models answer without the reflexive refusals some hosted services apply, and both text and image generation can handle adult or otherwise sensitive subjects when you need them to. Image generation ships a `safe_mode` that blurs adult content by default; you can turn it off (see the sample config). This pairs naturally with the privacy above: a bot you can speak to candidly, that keeps nothing.
+
+Unlike the [OpenAI Compatible](#openai-compatible) provider (which can also point at Venice, but drops images and can't reach its audio or native image endpoints), this is a first-class integration that exposes Venice's full parameter set: text-generation with vision, file inputs, prompt caching and native web search, plus speech-to-text, text-to-speech, and image generation and editing.
+
+You can statically-define a single [🤖 agent](https://github.com/etkecc/baibot/blob/main/docs/agents.md) instance powered by the [Venice provider](https://github.com/etkecc/baibot/blob/main/docs/providers.md#venice) with the help of the playbook's preset variables.
+
+Here's an example **addition** to your `vars.yml` file:
+
+```yaml
+matrix_bot_baibot_config_agents_static_definitions_venice_enabled: true
+
+matrix_bot_baibot_config_agents_static_definitions_venice_config_api_key: "YOUR_API_KEY_HERE"
+
+# The preset ships sensible defaults for every purpose, so changing only the API key above is enough
+# to get going. Uncomment and adjust any of these if you'd like to use different models:
+# matrix_bot_baibot_config_agents_static_definitions_venice_config_text_generation_model_id: kimi-k2-5
+# matrix_bot_baibot_config_agents_static_definitions_venice_config_image_generation_model_id: chroma
+```
+
+Because this is a [statically](https://github.com/etkecc/baibot/blob/main/docs/configuration/README.md#static-configuration)-defined agent, it will be given a `static/` ID prefix and will be named `static/venice`.
+
+Every Venice knob (sampling, caching, reasoning, web-search behavior, voice and image controls) has a matching `matrix_bot_baibot_config_agents_static_definitions_venice_config_*` variable. The [fully-commented sample config](https://github.com/etkecc/baibot/blob/main/docs/sample-provider-configs/venice.yml) explains every one of them.
+
+If you'd like to use more than one model, take a look at the [Configuring additional agents (without a preset)](#configuring-additional-agents-without-a-preset) section below.
+
+💡 You may also wish to use this new agent for [🤝 Configuring initial default handlers](#-configuring-initial-default-handlers).

 #### Anthropic

@@ -374,7 +405,7 @@ Example **additional** `vars.yml` configuration:
 # As such, changing any of these values subsequently has no effect on the bot's behavior.
 # Once initially configured, the global configuration is managed via bot commands, not via Ansible.

-matrix_bot_baibot_config_initial_global_config_handler_catch_all: static/openai
+matrix_bot_baibot_config_initial_global_config_handler_catch_all: static/venice

 # In this example, there's no need to define any of these below.
 # Configuring the catch-all purpose handler is enough.
@@ -0,0 +1,95 @@
+<!--
+SPDX-FileCopyrightText: 2026 MDAD project contributors
+SPDX-FileCopyrightText: 2026 Jason LaGuidice
+
+SPDX-License-Identifier: AGPL-3.0-or-later
+-->
+
+# Setting up RustPush (iMessage) bridging (optional)
+
+> **Note:** This bridge is in early development and may have stability issues. It may not be desirable to deploy this to a large number of users. Your testing and feedback is appreciated.
+
+<sup>Refer the common guide for configuring mautrix bridges: [Setting up a Generic Mautrix Bridge](configuring-playbook-bridge-mautrix-bridges.md)</sup>
+
+The playbook can install and configure [RustPush bridge to iMessage](https://github.com/jasonlaguidice/imessage) for you using Apple's push notification service.
+
+See the project's [documentation](https://github.com/jasonlaguidice/imessage/blob/main/README.md) to learn what it does and why it might be useful to you.
+
+## Prerequisites
+
+### Hardware Key Extraction
+
+To use this bridge on Linux (Docker), each user needs a **hardware key** extracted from a real Mac. This key contains hardware identifiers needed for iMessage registration. Hardware keys can be shared by a number of users (approximately 20) before causing issues with Apple.
+
+The key is entered interactively through the bridge bot's login flow (not configured via Ansible variables). See the upstream [README](https://github.com/jasonlaguidice/imessage/blob/main/README.md) for instructions on extracting the key.
+
+If extracted from an Intel Mac, the Mac does not need to remain running after the key is extracted for this bridge to work. Apple Silicon Macs must run a NAC relay and thus must remain running.
+
+### Phone Number Registration (optional)
+
+This bridge can **not** do phone number registration (PNR). The only way to have your phone number registered and used (instead of an Apple ID e-mail address) is to have an iPhone connected to your Apple account. Reference the [BlueBubbles Phone Number Registration Guide](https://docs.bluebubbles.app/server/advanced/registering-a-phone-number-with-your-imessage-account) for information on how to set this up.
+
+### Enable Appservice Double Puppet (optional)
+
+If you want to set up [Double Puppeting](https://docs.mau.fi/bridges/general/double-puppeting.html) (hint: you most likely do) for this bridge automatically, you need to have enabled [Appservice Double Puppet](configuring-playbook-appservice-double-puppet.md) service for this playbook.
+
+See [this section](configuring-playbook-bridge-mautrix-bridges.md#set-up-double-puppeting-optional) on the [common guide for configuring mautrix bridges](configuring-playbook-bridge-mautrix-bridges.md) for details about setting up Double Puppeting.
+
+## Adjusting the playbook configuration
+
+To enable the bridge, add the following configuration to your `inventory/host_vars/matrix.example.com/vars.yml` file:
+
+```yaml
+matrix_rustpush_bridge_enabled: true
+```
+
+### Disable Backfill (optional)
+
+Backfill can be disabled globally if desired via config. By default, the bridge will backfill from iCloud (CloudKit) and APNS if available. Backfill from `chat.db` is only possible when the bridge is running on MacOS.
+
+```yaml
+matrix_rustpush_bridge_backfill_enabled: false
+```
+
+### Extending the Configuration
+
+There are some additional things you may wish to configure about the bridge.
+
+See [this section](configuring-playbook-bridge-mautrix-bridges.md#extending-the-configuration) on the [common guide for configuring mautrix bridges](configuring-playbook-bridge-mautrix-bridges.md) for details about variables that you can customize and the bridge's default configuration, including [bridge permissions](configuring-playbook-bridge-mautrix-bridges.md#configure-bridge-permissions-optional), [encryption support](configuring-playbook-bridge-mautrix-bridges.md#enable-encryption-optional), [bot's username](configuring-playbook-bridge-mautrix-bridges.md#set-the-bots-username-optional), etc.
+
+## Installing
+
+After configuring the playbook, run it with [playbook tags](playbook-tags.md) as below:
+
+<!-- NOTE: let this conservative command run (instead of install-all) to make it clear that failure of the command means something is clearly broken. -->
+```sh
+ansible-playbook -i inventory/hosts setup.yml --tags=setup-all,start
+```
+
+**Notes**:
+
+- The shortcut commands with the [`just` program](just.md) are also available: `just install-all` or `just setup-all`
+
+  `just install-all` is useful for maintaining your setup quickly ([2x-5x faster](../CHANGELOG.md#2x-5x-performance-improvements-in-playbook-runtime) than `just setup-all`) when its components remain unchanged. If you adjust your `vars.yml` to remove other components, you'd need to run `just setup-all`, or these components will still remain installed.
+
+## Usage
+
+To use the bridge, you need to start a chat with `@rustpushbot:example.com` (where `example.com` is your base domain, not the `matrix.` domain).
+
+After logging in, the bridge will start receiving iMessages and creating portal rooms.
+
+## Troubleshooting
+
+As with all other services, you can find the logs in [systemd-journald](https://www.freedesktop.org/software/systemd/man/systemd-journald.service.html) by logging in to the server with SSH and running `journalctl -fu matrix-rustpush-bridge`.
+
+### Increase logging verbosity
+
+The default logging level for this component is `warn`. If you want to increase the verbosity, add the following configuration to your `vars.yml` file and re-run the playbook:
+
+```yaml
+# Valid values: fatal, error, warn, info, debug, trace
+matrix_rustpush_bridge_logging_level: 'debug'
+
+# Enable debug logging for RustPush
+matrix_rustpush_bridge_rust_log: "warn,rustpushgo=info,openabsinthe=debug"
+```
@@ -8,7 +8,7 @@ SPDX-License-Identifier: AGPL-3.0-or-later

 # Setting up Sable (optional)

-The playbook can install and configure the [Sable](https://github.com/7w1/sable) Matrix web client for you.
+The playbook can install and configure the [Sable](https://github.com/SableClient/Sable) Matrix web client for you.

 Sable is a web client focusing primarily on simple, elegant and secure interface. It can be installed alongside or instead of [Element Web](./configuring-playbook-client-element-web.md), [Cinny](./configuring-playbook-client-cinny.md) and others.

@@ -13,14 +13,14 @@ SPDX-License-Identifier: AGPL-3.0-or-later

 # Setting up Ketesa (optional)

-The playbook can install and configure [Ketesa](https://github.com/etkecc/ketesa) for you.
+The playbook can install and configure [Ketesa](https://ketesa.app) ([source code](https://github.com/etkecc/ketesa)) for you.

 Ketesa is a fully-featured admin interface for Matrix homeservers — manage users, rooms, media, sessions, and more from one clean, responsive web UI. It is the evolution of [Awesome-Technologies/synapse-admin](https://github.com/Awesome-Technologies/synapse-admin): what began as a fork has grown into its own independent project with a redesigned interface, comprehensive Synapse and MAS API coverage, and multi-language support. See the [Ketesa v1.0.0 announcement](https://etke.cc/blog/introducing-ketesa/) for a full overview of what's new.

 >[!NOTE]
 >
 > - Ketesa does not work with other homeserver implementations than Synapse due to API's incompatibility.
-> - The latest version of Ketesa is hosted by [etke.cc](https://etke.cc/) at [admin.etke.cc](https://admin.etke.cc/). If you only need this service occasionally and trust giving your admin credentials to a 3rd party Single Page Application, you can consider using it from there and avoiding the (small) overhead of self-hosting.
+> - The latest version of Ketesa is hosted by [etke.cc](https://etke.cc/) at [cloud.ketesa.app](https://cloud.ketesa.app/). If you only need this service occasionally and trust giving your admin credentials to a 3rd party Single Page Application, you can consider using it from there and avoiding the (small) overhead of self-hosting.
 > - This playbook also supports an alternative management UI in the shape of [Element Admin](./configuring-playbook-element-admin.md). Please note that it's currently less feature-rich than Ketesa and requires [Matrix Authentication Service](./configuring-playbook-matrix-authentication-service.md).

 ## Adjusting DNS records (optional)
@@ -89,7 +89,7 @@ Web clients for Matrix that you can host on your own domains.

 - [Setting up Cinny](configuring-playbook-client-cinny.md), if you've enabled [Cinny](https://github.com/ajbura/cinny), a web client focusing primarily on simple, elegant and secure interface

- [Setting up Sable](configuring-playbook-client-sable.md), if you've enabled [Sable](https://github.com/7w1/sable), a web client focusing primarily on simple, elegant and secure interface
+- [Setting up Sable](configuring-playbook-client-sable.md), if you've enabled [Sable](https://github.com/SableClient/Sable), a web client focusing primarily on simple, elegant and secure interface

 - [Setting up SchildiChat Web](configuring-playbook-client-schildichat-web.md), if you've enabled [SchildiChat Web](https://schildi.chat/), a web client based on [Element Web](https://element.io/) with some extras and tweaks

@@ -158,6 +158,8 @@ Bridges can be used to connect your Matrix installation with third-party communi

 - [Setting up Mautrix wsproxy for bridging Android SMS or Apple iMessage](configuring-playbook-bridge-mautrix-wsproxy.md)

+- [Setting up RustPush (iMessage) bridging](configuring-playbook-bridge-rustpush.md)
+
 - [Setting up Appservice IRC bridging](configuring-playbook-bridge-appservice-irc.md)

 - [Setting up Appservice Discord bridging](configuring-playbook-bridge-appservice-discord.md)
@@ -188,7 +190,7 @@ Bridges can be used to connect your Matrix installation with third-party communi

 Bots provide various additional functionality to your installation.

- [Setting up baibot](configuring-playbook-bot-baibot.md) — a bot through which you can talk to various [AI](https://en.wikipedia.org/wiki/Artificial_intelligence) / [Large Language Models](https://en.wikipedia.org/wiki/Large_language_model) services ([OpenAI](https://openai.com/)'s [ChatGPT](https://openai.com/blog/chatgpt/) and [others](https://github.com/etkecc/baibot/blob/main/docs/providers.md))
+- [Setting up baibot](configuring-playbook-bot-baibot.md) — a bot through which you can talk to various [AI](https://en.wikipedia.org/wiki/Artificial_intelligence) / [Large Language Models](https://en.wikipedia.org/wiki/Large_language_model) services (the privacy-first [Venice](configuring-playbook-bot-baibot.md#venice) we recommend, [OpenAI](https://openai.com/)'s [ChatGPT](https://openai.com/blog/chatgpt/), and [others](https://github.com/etkecc/baibot/blob/main/docs/providers.md))

 - [Setting up matrix-reminder-bot](configuring-playbook-bot-matrix-reminder-bot.md) — a bot to remind you about stuff

@@ -107,6 +107,7 @@ Bridges can be used to connect your Matrix installation with third-party communi
 | [Heisenbridge](configuring-playbook-bridge-heisenbridge.md) | [hif1/heisenbridge](https://hub.docker.com/r/hif1/heisenbridge) | ❌ | Bouncer-style bridge to [IRC](https://wikipedia.org/wiki/Internet_Relay_Chat) |
 | [mx-puppet-groupme](configuring-playbook-bridge-mx-puppet-groupme.md) | [xangelix/mx-puppet-groupme](https://hub.docker.com/r/xangelix/mx-puppet-groupme) | ❌ | Bridge to [GroupMe](https://groupme.com/) |
 | [matrix-steam-bridge](configuring-playbook-bridge-steam.md) | [jasonlaguidice/matrix-steam-bridge](https://github.com/jasonlaguidice/matrix-steam-bridge/pkgs/container/matrix-steam-bridge) | ❌ | Bridge to [Steam](https://steampowered.com/) |
+| [matrix-rustpush-bridge](configuring-playbook-bridge-rustpush.md) | [jasonlaguidice/imessage](https://github.com/jasonlaguidice/imessage/pkgs/container/imessage) | ❌ | Bridge to [iMessage](https://support.apple.com/messages) via Apple Push Notification service |
 | [mx-puppet-steam](configuring-playbook-bridge-mx-puppet-steam.md) | [icewind1991/mx-puppet-steam](https://hub.docker.com/r/icewind1991/mx-puppet-steam) | ❌ | Bridge to [Steam](https://steamapp.com/) |
 | [Postmoogle](configuring-playbook-bridge-postmoogle.md) | [etke.cc/postmoogle](https://github.com/etkecc/postmoogle/container_registry) | ❌ | Email to Matrix bridge |

@@ -23,7 +23,7 @@ Both methods have their place and will continue to do so. You only need to use j

 For simplicity reasons, this playbook recommends you to set up server delegation via a `/.well-known/matrix/server` file. However, that method may have some downsides that are not to your liking. Hence this guide about alternative ways to set up Server Delegation.

-**Note**: as an alternative, it is possible to install the server such that it uses only the `matrix.example.com` domain (instead of identifying as the shorter base domain — `example.com`). This should be helpful if you are not in control of anything on the base domain (`example.com`). In this case, you would not need to configure server delegation, but you would need to add other configuration. For more information, see [How do I install on matrix.example.com without involving the base domain?](faq.md#how-do-i-install-on-matrix-example-com-without-involving-the-base-domain) on our FAQ.
+**Note**: as an alternative, it is possible to install the server such that it uses only the `matrix.example.com` domain (instead of identifying as the shorter base domain — `example.com`). This should be helpful if you are not in control of anything on the base domain (`example.com`). In this case, you would not need to configure server delegation, but you would need to add other configuration. For more information, see [How do I install on matrix.example.com without involving the base domain?](faq.md#how-do-i-install-on-matrixexamplecom-without-involving-the-base-domain) on our FAQ.

 ## Server Delegation via a well-known file

@@ -44,27 +44,19 @@ Custom Nginx Configuration:
 	client_max_body_size 50M;
 ```

-Again, under the 'Proxy Hosts' page select `Add Proxy Host`, this time for your federation traffic. Apply the proxy's configuration like this:
+Then, under the 'Streams' page select `Add Stream`, this time for your federation traffic. Apply the configuration like this:

 ```md
 # Details
 # Matrix Federation proxy config
-Domain Names: matrix.example.com:8448
-Scheme: http
-Forward Hostname/IP: IP-ADDRESS-OF-YOUR-MATRIX
+Incoming Port: 8448
+Forward Host/IP: IP-ADDRESS-OF-YOUR-MATRIX
 Forward Port: 8449
+Protocols: TCP

 # SSL
 # Either 'Request a new certificate' or select an existing one
 SSL Certificate: matrix.example.com or *.example.com
-Force SSL: true
-HTTP/2 Support: true
-
-# Advanced
-# Allows NPM to listen on the federation port
-Custom Nginx Configuration:
-	listen 8448 ssl http2;
-	client_max_body_size 50M;
 ```

 Also note, NPM would need to be configured for whatever other services you are using. For example, you would need to create additional proxy hosts for `element.example.com` or `jitsi.example.com`, which would use the forwarding port `81`.
@@ -114,6 +114,8 @@ matrix_homeserver_container_extra_arguments_auto: |
    +
    (['--mount type=bind,src=' + matrix_mautrix_bluesky_config_path + '/registration.yaml,dst=/matrix-mautrix-bluesky-registration.yaml,ro'] if matrix_mautrix_bluesky_enabled else [])
    +
+    (['--mount type=bind,src=' + matrix_rustpush_bridge_config_path + '/registration.yaml,dst=/matrix-rustpush-bridge-registration.yaml,ro'] if matrix_rustpush_bridge_enabled else [])
+    +
    (['--mount type=bind,src=' + matrix_mautrix_discord_config_path + '/registration.yaml,dst=/matrix-mautrix-discord-registration.yaml,ro'] if matrix_mautrix_discord_enabled else [])
    +
    (['--mount type=bind,src=' + matrix_mautrix_slack_config_path + '/registration.yaml,dst=/matrix-mautrix-slack-registration.yaml,ro'] if matrix_mautrix_slack_enabled else [])
@@ -171,6 +173,8 @@ matrix_homeserver_app_service_config_files_auto: |
    +
    (['/matrix-mautrix-bluesky-registration.yaml'] if matrix_mautrix_bluesky_enabled else [])
    +
+    (['/matrix-rustpush-bridge-registration.yaml'] if matrix_rustpush_bridge_enabled else [])
+    +
    (['/matrix-mautrix-discord-registration.yaml'] if matrix_mautrix_discord_enabled else [])
    +
    (['/matrix-mautrix-slack-registration.yaml'] if matrix_mautrix_slack_enabled else [])
@@ -436,6 +440,13 @@ devture_systemd_service_manager_services_list_auto: |
      'groups': ['matrix', 'bridges', 'mautrix-bluesky'],
    }] if matrix_mautrix_bluesky_enabled else [])
    +
+    ([{
+      'name': 'matrix-rustpush-bridge.service',
+      'priority': 2000,
+      'restart_necessary': (matrix_rustpush_bridge_restart_necessary | bool),
+      'groups': ['matrix', 'bridges', 'matrix-rustpush-bridge'],
+    }] if matrix_rustpush_bridge_enabled else [])
+    +
    ([{
      'name': 'matrix-mautrix-discord.service',
      'priority': 2000,
@@ -1469,6 +1480,77 @@ matrix_mautrix_bluesky_database_password: "{{ (matrix_homeserver_generic_secret_
 #
 ######################################################################

+
+######################################################################
+#
+# matrix-bridge-rustpush
+#
+######################################################################
+
+# We don't enable bridges by default.
+matrix_rustpush_bridge_enabled: false
+
+matrix_rustpush_bridge_systemd_required_services_list_auto: |
+  {{
+    matrix_addons_homeserver_systemd_services_list
+    +
+    ([postgres_identifier ~ '.service'] if (postgres_enabled and matrix_rustpush_bridge_database_hostname == postgres_connection_hostname) else [])
+  }}
+
+matrix_rustpush_bridge_container_network: "{{ matrix_addons_container_network }}"
+
+matrix_rustpush_bridge_container_additional_networks_auto: |-
+  {{
+    (
+      ([] if matrix_addons_homeserver_container_network == '' else [matrix_addons_homeserver_container_network])
+      +
+      ([postgres_container_network] if (postgres_enabled and matrix_rustpush_bridge_database_hostname == postgres_connection_hostname and matrix_rustpush_bridge_container_network != postgres_container_network) else [])
+      +
+      ([matrix_playbook_reverse_proxyable_services_additional_network] if matrix_playbook_reverse_proxyable_services_additional_network and matrix_rustpush_bridge_container_labels_traefik_enabled else [])
+    ) | unique
+  }}
+
+matrix_rustpush_bridge_container_labels_traefik_enabled: "{{ matrix_playbook_reverse_proxy_type in ['playbook-managed-traefik', 'other-traefik-container'] }}"
+matrix_rustpush_bridge_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"
+matrix_rustpush_bridge_container_labels_traefik_entrypoints: "{{ traefik_entrypoint_primary }}"
+matrix_rustpush_bridge_container_labels_traefik_tls_certResolver: "{{ traefik_certResolver_primary }}"
+
+matrix_rustpush_bridge_container_labels_metrics_middleware_basic_auth_enabled: "{{ matrix_metrics_exposure_http_basic_auth_enabled }}"
+matrix_rustpush_bridge_container_labels_metrics_middleware_basic_auth_users: "{{ matrix_metrics_exposure_http_basic_auth_users }}"
+
+matrix_rustpush_bridge_appservice_token: "{{ (matrix_homeserver_generic_secret_key + ':imsg.as.token') | hash('sha512') | to_uuid }}"
+
+matrix_rustpush_bridge_homeserver_address: "{{ matrix_addons_homeserver_client_api_url }}"
+matrix_rustpush_bridge_homeserver_token: "{{ (matrix_homeserver_generic_secret_key + ':imsg.hs.token') | hash('sha512') | to_uuid }}"
+
+matrix_rustpush_bridge_homeserver_async_media: "{{ matrix_homeserver_implementation in ['synapse'] }}"
+
+matrix_rustpush_bridge_provisioning_shared_secret: "{{ (matrix_homeserver_generic_secret_key + ':mau.imsg.prov') | hash('sha512') | to_uuid }}"
+
+matrix_rustpush_bridge_double_puppet_secrets_auto: |-
+  {{
+    ({
+      matrix_rustpush_bridge_homeserver_domain: ("as_token:" + matrix_appservice_double_puppet_registration_as_token)
+    })
+    if matrix_appservice_double_puppet_enabled
+    else {}
+  }}
+
+matrix_rustpush_bridge_metrics_enabled: "{{ prometheus_enabled or matrix_metrics_exposure_enabled }}"
+
+matrix_rustpush_bridge_metrics_proxying_enabled: "{{ matrix_rustpush_bridge_metrics_enabled and matrix_metrics_exposure_enabled }}"
+matrix_rustpush_bridge_metrics_proxying_hostname: "{{ matrix_metrics_exposure_hostname }}"
+matrix_rustpush_bridge_metrics_proxying_path_prefix: "{{ matrix_metrics_exposure_path_prefix }}/rustpush-bridge"
+
+matrix_rustpush_bridge_database_hostname: "{{ postgres_connection_hostname if postgres_enabled else '' }}"
+matrix_rustpush_bridge_database_password: "{{ (matrix_homeserver_generic_secret_key + ':mau.imsg.db') | hash('sha512') | to_uuid if postgres_enabled else '' }}"
+
+######################################################################
+#
+# /matrix-bridge-rustpush
+#
+######################################################################
+
 ######################################################################
 #
 # matrix-bridge-mautrix-discord
@@ -4052,6 +4134,12 @@ postgres_managed_databases_auto: |
      'password': matrix_mautrix_bluesky_database_password,
    }] if (matrix_mautrix_bluesky_enabled and matrix_mautrix_bluesky_database_engine == 'postgres' and matrix_mautrix_bluesky_database_hostname == postgres_connection_hostname) else [])
    +
+    ([{
+      'name': matrix_rustpush_bridge_database_name,
+      'username': matrix_rustpush_bridge_database_username,
+      'password': matrix_rustpush_bridge_database_password,
+    }] if (matrix_rustpush_bridge_enabled and matrix_rustpush_bridge_database_engine == 'postgres' and matrix_rustpush_bridge_database_hostname == postgres_connection_hostname) else [])
+    +
    ([{
      'name': matrix_mautrix_googlechat_database_name,
      'username': matrix_mautrix_googlechat_database_username,
@@ -4992,6 +5080,11 @@ matrix_ketesa_config_asManagedUsers_auto: |
      '^@bluesky_[a-zA-Z0-9]+:'+(matrix_domain | regex_escape)+'$',
    ] if matrix_mautrix_bluesky_enabled else [])
    +
+    ([
+      '^@'+(matrix_rustpush_bridge_appservice_bot_username | default('') | regex_escape)+':'+(matrix_domain | regex_escape)+'$',
+      '^@rustpush_[a-zA-Z0-9_.+-]+:'+(matrix_domain | regex_escape)+'$',
+    ] if matrix_rustpush_bridge_enabled else [])
+    +
    ([
      '^@'+(matrix_mautrix_discord_appservice_bot_username | default('') | regex_escape)+':'+(matrix_domain | regex_escape)+'$',
      '^@discord_[0-9]+:'+(matrix_domain | regex_escape)+'$',
@@ -6235,8 +6328,6 @@ matrix_livekit_jwt_service_environment_variable_livekit_key: "{{ (matrix_homeser

 matrix_livekit_jwt_service_environment_variable_livekit_secret: "{{ (matrix_homeserver_generic_secret_key + ':lk.secret') | hash('sha512') | to_uuid }}"

-matrix_livekit_jwt_service_environment_variable_livekit_full_access_homeservers_list: ["{{ matrix_domain }}"]
-
 ########################################################################
 #                                                                      #
 # /matrix-livekit-jwt-service                                          #
@@ -1,10 +1,10 @@
 alabaster==1.0.0
 babel==2.18.0
-certifi==2026.5.20
+certifi==2026.6.17
 charset-normalizer==3.4.7
-click==8.4.1
-docutils==0.22.4
-idna==3.16
+click==8.4.2
+docutils==0.23
+idna==3.18
 imagesize==2.0.0
 Jinja2==3.1.6
 linkify-it-py==2.1.0
@@ -18,7 +18,7 @@ Pygments==2.20.0
 PyYAML==6.0.3
 requests==2.34.2
 setuptools==82.0.1
-snowballstemmer==3.1.0
+snowballstemmer==3.1.1
 Sphinx==9.1.0
 sphinx-intl==2.3.2
 sphinx-markdown-builder==0.6.10
@@ -257,7 +257,7 @@ msgid "[Link](docs/configuring-playbook-client-cinny.md)"
 msgstr ""

 #: ../../../README.md:0
-msgid "[Sable](https://github.com/7w1/sable)"
+msgid "[Sable](https://github.com/SableClient/Sable)"
 msgstr ""

 #: ../../../README.md:0
@@ -21,7 +21,7 @@ msgid "Setting up Sable (optional)"
 msgstr ""

 #: ../../../docs/configuring-playbook-client-sable.md:11
-msgid "The playbook can install and configure the [Sable](https://github.com/7w1/sable) Matrix web client for you."
+msgid "The playbook can install and configure the [Sable](https://github.com/SableClient/Sable) Matrix web client for you."
 msgstr ""

 #: ../../../docs/configuring-playbook-client-sable.md:13
@@ -173,7 +173,7 @@ msgid "[Setting up Cinny](configuring-playbook-client-cinny.md), if you've enabl
 msgstr ""

 #: ../../../docs/configuring-playbook.md:92
-msgid "[Setting up Sable](configuring-playbook-client-sable.md), if you've enabled [Sable](https://github.com/7w1/sable), a web client focusing primarily on simple, elegant and secure interface"
+msgid "[Setting up Sable](configuring-playbook-client-sable.md), if you've enabled [Sable](https://github.com/SableClient/Sable), a web client focusing primarily on simple, elegant and secure interface"
 msgstr ""

 #: ../../../docs/configuring-playbook.md:94
@@ -3,7 +3,7 @@
 # SPDX-License-Identifier: AGPL-3.0-or-later

 [tools]
-prek = "0.4.2"
+prek = "0.4.5"

 [settings]
 yes = true
@@ -7,7 +7,7 @@
  version: v1.4.4-2.1.4-1
  name: backup_borg
 - src: git+https://github.com/mother-of-all-self-hosting/ansible-role-cinny.git
-  version: v4.12.2-0
+  version: v4.12.3-0
  name: cinny
 - src: git+https://github.com/mother-of-all-self-hosting/ansible-role-container-socket-proxy.git
  version: v0.4.2-5
@@ -33,19 +33,19 @@
  version: v4.99.1-r0-2-1
  name: exim_relay
 - src: git+https://github.com/mother-of-all-self-hosting/ansible-role-grafana.git
-  version: v11.6.5-10
+  version: v13.0.2-0
  name: grafana
 - src: git+https://github.com/mother-of-all-self-hosting/ansible-role-hydrogen.git
  version: v0.5.1-5
  name: hydrogen
 - src: git+https://github.com/mother-of-all-self-hosting/ansible-role-jitsi.git
-  version: v10978-0
+  version: v11031-0
  name: jitsi
 - src: git+https://github.com/mother-of-all-self-hosting/ansible-role-livekit-server.git
-  version: v1.12.0-0
+  version: v1.13.2-0
  name: livekit_server
 - src: git+https://github.com/mother-of-all-self-hosting/ansible-role-ntfy.git
-  version: v2.22.0-1
+  version: v2.25.0-0
  name: ntfy
 - src: git+https://github.com/devture/com.devture.ansible.role.playbook_help.git
  version: ea8c5cc750c4e23d004c9a836dfd9eda82d45ff4
@@ -63,7 +63,7 @@
  version: v18-3
  name: postgres_backup
 - src: git+https://github.com/mother-of-all-self-hosting/ansible-role-prometheus.git
-  version: v3.11.3-1
+  version: v3.12.0-1
  name: prometheus
 - src: git+https://github.com/mother-of-all-self-hosting/ansible-role-prometheus-nginxlog-exporter.git
  version: v1.10.0-3
@@ -75,7 +75,7 @@
  version: v0.19.1-4
  name: prometheus_postgres_exporter
 - src: git+https://github.com/mother-of-all-self-hosting/ansible-role-sable.git
-  version: v1.17.0-0
+  version: v1.18.3-0
  name: sable
 - src: git+https://github.com/devture/com.devture.ansible.role.systemd_docker_base.git
  version: v1.5.0-0
@@ -87,10 +87,10 @@
  version: v1.1.0-1
  name: timesync
 - src: git+https://github.com/mother-of-all-self-hosting/ansible-role-traefik.git
-  version: v3.7.1-0
+  version: v3.7.5-0
  name: traefik
 - src: git+https://github.com/mother-of-all-self-hosting/ansible-role-traefik-certs-dumper.git
-  version: v2.10.0-7
+  version: v2.11.4-0
  name: traefik_certs_dumper
 - src: git+https://github.com/mother-of-all-self-hosting/ansible-role-valkey.git
  version: v9.1.0-0
@@ -11,7 +11,7 @@
 matrix_alertmanager_receiver_enabled: true

 # renovate: datasource=docker depName=docker.io/metio/matrix-alertmanager-receiver
-matrix_alertmanager_receiver_version: 2026.5.20
+matrix_alertmanager_receiver_version: 2026.6.24

 matrix_alertmanager_receiver_scheme: https

@@ -73,6 +73,7 @@
      changed_when: true

 - name: Ensure matrix-alertmanager-receiver container network is created
+  when: matrix_alertmanager_receiver_container_network != 'host'
  community.general.docker_network:
    enable_ipv6: "{{ devture_systemd_docker_base_ipv6_enabled }}"
    name: "{{ matrix_alertmanager_receiver_container_network }}"
@@ -33,9 +33,11 @@ ExecStartPre={{ devture_systemd_docker_base_host_command_docker }} create \
 			--config-path=/config/config.yml {{ matrix_alertmanager_receiver_container_process_extra_arguments | join(' ') }} \
 			--log-level={{ matrix_alertmanager_receiver_container_process_argument_log_level }}

+{% if matrix_alertmanager_receiver_container_network != 'host' %}
 {% for network in matrix_alertmanager_receiver_container_additional_networks %}
 ExecStartPre={{ devture_systemd_docker_base_host_command_docker }} network connect {{ network }} matrix-alertmanager-receiver
 {% endfor %}
+{% endif %}

 ExecStart={{ devture_systemd_docker_base_host_command_docker }} start --attach matrix-alertmanager-receiver

@@ -88,6 +88,7 @@
  register: matrix_appservice_draupnir_for_all_registration_config_result

 - name: Ensure matrix-appservice-draupnir-for-all container network is created
+  when: matrix_appservice_draupnir_for_all_container_network != 'host'
  community.general.docker_network:
    enable_ipv6: "{{ devture_systemd_docker_base_ipv6_enabled }}"
    name: "{{ matrix_appservice_draupnir_for_all_container_network }}"
@@ -32,9 +32,11 @@ ExecStartPre={{ devture_systemd_docker_base_host_command_docker }} create \
 			{{ matrix_appservice_draupnir_for_all_container_image }} \
 			appservice -c /data/config/production-appservice.yaml -f /data/config/draupnir-for-all-registration.yaml -p {{ matrix_appservice_draupnir_for_all_appservice_port }} --draupnir-config /data/config/production-bots.yaml

+{% if matrix_appservice_draupnir_for_all_container_network != 'host' %}
 {% for network in matrix_appservice_draupnir_for_all_container_additional_networks %}
 ExecStartPre={{ devture_systemd_docker_base_host_command_docker }} network connect {{ network }} matrix-appservice-draupnir-for-all
 {% endfor %}
+{% endif %}

 ExecStart={{ devture_systemd_docker_base_host_command_docker }} start --attach matrix-appservice-draupnir-for-all

@@ -22,7 +22,7 @@ matrix_authentication_service_container_repo_version: "{{ 'main' if matrix_authe
 matrix_authentication_service_container_src_files_path: "{{ matrix_base_data_path }}/matrix-authentication-service/container-src"

 # renovate: datasource=docker depName=ghcr.io/element-hq/matrix-authentication-service
-matrix_authentication_service_version: 1.17.0
+matrix_authentication_service_version: 1.19.0
 matrix_authentication_service_container_image_registry_prefix: "{{ 'localhost/' if matrix_authentication_service_container_image_self_build else matrix_authentication_service_container_image_registry_prefix_upstream }}"
 matrix_authentication_service_container_image_registry_prefix_upstream: "{{ matrix_authentication_service_container_image_registry_prefix_upstream_default }}"
 matrix_authentication_service_container_image_registry_prefix_upstream_default: "ghcr.io/"
@@ -114,6 +114,7 @@
      changed_when: true

 - name: Ensure Matrix Authentication Service container network is created
+  when: matrix_authentication_service_container_network != 'host'
  community.general.docker_network:
    enable_ipv6: "{{ devture_systemd_docker_base_ipv6_enabled }}"
    name: "{{ matrix_authentication_service_container_network }}"
@@ -36,9 +36,11 @@ ExecStartPre={{ devture_systemd_docker_base_host_command_docker }} create \
 			{% endfor %}
 			{{ matrix_authentication_service_container_image }}

+{% if matrix_authentication_service_container_network != 'host' %}
 {% for network in matrix_authentication_service_container_additional_networks %}
 ExecStartPre={{ devture_systemd_docker_base_host_command_docker }} network connect {{ network }} matrix-authentication-service
 {% endfor %}
+{% endif %}

 ExecStart={{ devture_systemd_docker_base_host_command_docker }} start --attach matrix-authentication-service

@@ -17,7 +17,7 @@ matrix_bot_baibot_container_repo_version: "{{ 'main' if matrix_bot_baibot_versio
 matrix_bot_baibot_container_src_files_path: "{{ matrix_base_data_path }}/baibot/container-src"

 # renovate: datasource=docker depName=ghcr.io/etkecc/baibot
-matrix_bot_baibot_version: v1.19.2
+matrix_bot_baibot_version: v1.24.0
 matrix_bot_baibot_container_image: "{{ matrix_bot_baibot_container_image_registry_prefix }}etkecc/baibot:{{ matrix_bot_baibot_version }}"
 matrix_bot_baibot_container_image_registry_prefix: "{{ 'localhost/' if matrix_bot_baibot_container_image_self_build else matrix_bot_baibot_container_image_registry_prefix_upstream }}"
 matrix_bot_baibot_container_image_registry_prefix_upstream: "{{ matrix_bot_baibot_container_image_registry_prefix_upstream_default }}"
@@ -200,6 +200,12 @@ matrix_bot_baibot_config_agents_static_definitions_auto: |-
        'provider': matrix_bot_baibot_config_agents_static_definitions_openai_provider,
        'config': matrix_bot_baibot_config_agents_static_definitions_openai_config,
    }] if matrix_bot_baibot_config_agents_static_definitions_openai_enabled else [])
+    +
+    ([{
+        'id': matrix_bot_baibot_config_agents_static_definitions_venice_id,
+        'provider': matrix_bot_baibot_config_agents_static_definitions_venice_provider,
+        'config': matrix_bot_baibot_config_agents_static_definitions_venice_config,
+    }] if matrix_bot_baibot_config_agents_static_definitions_venice_enabled else [])
  }}
 matrix_bot_baibot_config_agents_static_definitions_custom: []

@@ -442,6 +448,175 @@ matrix_bot_baibot_config_agents_static_definitions_openai_config_image_generatio
 ########################################################################################


+########################################################################################
+#                                                                                      #
+# Venice agent configuration                                                           #
+#                                                                                      #
+########################################################################################
+
+matrix_bot_baibot_config_agents_static_definitions_venice_enabled: false
+matrix_bot_baibot_config_agents_static_definitions_venice_id: venice
+matrix_bot_baibot_config_agents_static_definitions_venice_provider: venice
+
+matrix_bot_baibot_config_agents_static_definitions_venice_config: "{{ matrix_bot_baibot_config_agents_static_definitions_venice_config_yaml | from_yaml | combine(matrix_bot_baibot_config_agents_static_definitions_venice_config_extension, recursive=True) }}"
+
+matrix_bot_baibot_config_agents_static_definitions_venice_config_yaml: "{{ lookup('template', 'templates/provider/venice-config.yml.j2') }}"
+
+matrix_bot_baibot_config_agents_static_definitions_venice_config_extension: "{{ matrix_bot_baibot_config_agents_static_definitions_venice_config_extension_yaml | from_yaml if matrix_bot_baibot_config_agents_static_definitions_venice_config_extension_yaml | from_yaml is mapping else {} }}"
+
+matrix_bot_baibot_config_agents_static_definitions_venice_config_extension_yaml: |
+  # Your custom YAML configuration for this provider's configuration goes here.
+  # This configuration extends the default starting configuration (`matrix_bot_baibot_config_agents_static_definitions_venice_config`).
+  #
+  # You can override individual variables from the default configuration, or introduce new ones.
+  #
+  # If you need something more special, you can take full control by
+  # completely redefining `matrix_bot_baibot_config_agents_static_definitions_venice_config_yaml`.
+  #
+  # The fully-commented sample config (every Venice knob, with explanations) lives at:
+  # https://github.com/etkecc/baibot/blob/main/docs/sample-provider-configs/venice.yml
+  #
+  # Example configuration extension follows:
+  #
+  # text_generation:
+  #   venice_parameters:
+  #     enable_web_search: "off"
+
+matrix_bot_baibot_config_agents_static_definitions_venice_config_base_url: https://api.venice.ai/api/v1
+
+matrix_bot_baibot_config_agents_static_definitions_venice_config_api_key: ""
+
+matrix_bot_baibot_config_agents_static_definitions_venice_config_text_generation_enabled: true
+# For valid model choices, see: https://docs.venice.ai/models/overview
+matrix_bot_baibot_config_agents_static_definitions_venice_config_text_generation_model_id: kimi-k2-5
+# The prompt text to use (can be null or empty to not use a prompt).
+matrix_bot_baibot_config_agents_static_definitions_venice_config_text_generation_prompt: "{{ matrix_bot_baibot_config_agents_static_definitions_prompt }}"
+matrix_bot_baibot_config_agents_static_definitions_venice_config_text_generation_temperature: 1.0
+matrix_bot_baibot_config_agents_static_definitions_venice_config_text_generation_max_response_tokens: 4096
+matrix_bot_baibot_config_agents_static_definitions_venice_config_text_generation_max_context_tokens: 128000
+# How long Venice keeps the prompt prefix cached: "default", "extended", or "24h".
+# "24h" makes a long, stable system prompt cheap across a day of conversations.
+matrix_bot_baibot_config_agents_static_definitions_venice_config_text_generation_prompt_cache_retention: 24h
+# The optional top-level sampling and reasoning knobs below default to null, meaning the knob is
+# omitted from the request and Venice applies its own server-side default. Set a value to override.
+# Nucleus sampling, 0.0-1.0 (an alternative to temperature).
+matrix_bot_baibot_config_agents_static_definitions_venice_config_text_generation_top_p: ~
+# Penalize tokens by how often they have already appeared, -2.0-2.0.
+matrix_bot_baibot_config_agents_static_definitions_venice_config_text_generation_frequency_penalty: ~
+# Penalize tokens that have appeared at all, -2.0-2.0.
+matrix_bot_baibot_config_agents_static_definitions_venice_config_text_generation_presence_penalty: ~
+# Penalize repetition; values above 1.0 discourage repeats.
+matrix_bot_baibot_config_agents_static_definitions_venice_config_text_generation_repetition_penalty: ~
+# Reasoning budget for models that support it: "low", "medium", or "high".
+matrix_bot_baibot_config_agents_static_definitions_venice_config_text_generation_reasoning_effort: ~
+# Append the model's reasoning below the answer as a collapsible "Reasoning" block (folded by default).
+matrix_bot_baibot_config_agents_static_definitions_venice_config_text_generation_show_reasoning: ~
+
+# Venice-specific request parameters (the `venice_parameters` bag). Each non-null knob below is sent;
+# a null knob is omitted, so Venice applies its own default. Omitting a knob is NOT the same as
+# setting it to `false` (which actively sends `false`).
+# Web search: "auto" (model decides), "on" (always), or "off".
+matrix_bot_baibot_config_agents_static_definitions_venice_config_text_generation_venice_parameters_enable_web_search: auto
+# Strip <think></think> blocks from reasoning models so the user sees only the answer.
+matrix_bot_baibot_config_agents_static_definitions_venice_config_text_generation_venice_parameters_strip_thinking_response: true
+# Run in TEE-only mode (works across all models) instead of end-to-end-encrypted inference (only
+# some models support it). TEE is still zero-retention private; this default keeps every model usable.
+matrix_bot_baibot_config_agents_static_definitions_venice_config_text_generation_venice_parameters_enable_e2ee: false
+# Render web-search sources as readable citations in the reply.
+matrix_bot_baibot_config_agents_static_definitions_venice_config_text_generation_venice_parameters_enable_web_citations: ~
+# Let web search read full page content, not just snippets.
+matrix_bot_baibot_config_agents_static_definitions_venice_config_text_generation_venice_parameters_enable_web_scraping: ~
+# Prepend Venice's own system prompt alongside yours.
+matrix_bot_baibot_config_agents_static_definitions_venice_config_text_generation_venice_parameters_include_venice_system_prompt: ~
+# Include search results inline in the streamed response.
+matrix_bot_baibot_config_agents_static_definitions_venice_config_text_generation_venice_parameters_include_search_results_in_stream: ~
+# Return search results as documents rather than inline text.
+matrix_bot_baibot_config_agents_static_definitions_venice_config_text_generation_venice_parameters_return_search_results_as_documents: ~
+# Allow web search to query X (Twitter).
+matrix_bot_baibot_config_agents_static_definitions_venice_config_text_generation_venice_parameters_enable_x_search: ~
+# Disable the model's thinking phase entirely.
+matrix_bot_baibot_config_agents_static_definitions_venice_config_text_generation_venice_parameters_disable_thinking: ~
+# Response verbosity for models that support it: "low", "medium", or "high".
+matrix_bot_baibot_config_agents_static_definitions_venice_config_text_generation_venice_parameters_verbosity: ~
+# Use a public Venice character by its slug.
+matrix_bot_baibot_config_agents_static_definitions_venice_config_text_generation_venice_parameters_character_slug: ~
+
+matrix_bot_baibot_config_agents_static_definitions_venice_config_speech_to_text_enabled: true
+matrix_bot_baibot_config_agents_static_definitions_venice_config_speech_to_text_model_id: nvidia/parakeet-tdt-0.6b-v3
+
+matrix_bot_baibot_config_agents_static_definitions_venice_config_text_to_speech_enabled: true
+# Other models include tts-qwen3-1-7b, tts-xai-v1, tts-elevenlabs-turbo-v2-5, tts-minimax-speech-02-hd.
+matrix_bot_baibot_config_agents_static_definitions_venice_config_text_to_speech_model_id: tts-kokoro
+# Voices are model-specific. Kokoro uses af_*/am_*/bf_*/bm_* (e.g. af_sky, am_adam). You can also pass
+# a cloned-voice handle (vv_<id>). An incompatible voice returns an error.
+matrix_bot_baibot_config_agents_static_definitions_venice_config_text_to_speech_voice: af_sky
+# Output audio format: mp3, opus, aac, flac, wav, or pcm. mp3 is the broadest Matrix-client fit.
+matrix_bot_baibot_config_agents_static_definitions_venice_config_text_to_speech_response_format: mp3
+# The optional knobs below default to null (omitted). Set a value to override Venice's default.
+# Playback speed, 0.25-4.0 (1.0 is normal).
+matrix_bot_baibot_config_agents_static_definitions_venice_config_text_to_speech_speed: ~
+# A style prompt steering emotion/delivery (e.g. "Excited and energetic."). Only Qwen 3 TTS uses it.
+matrix_bot_baibot_config_agents_static_definitions_venice_config_text_to_speech_prompt: ~
+# Sampling temperature, 0.0-2.0. Only Qwen 3 / Orpheus / Chatterbox HD use it.
+matrix_bot_baibot_config_agents_static_definitions_venice_config_text_to_speech_temperature: ~
+# Nucleus sampling, 0.0-1.0. Only Qwen 3 TTS uses it.
+matrix_bot_baibot_config_agents_static_definitions_venice_config_text_to_speech_top_p: ~
+
+matrix_bot_baibot_config_agents_static_definitions_venice_config_image_generation_enabled: true
+matrix_bot_baibot_config_agents_static_definitions_venice_config_image_generation_model_id: chroma
+# The optional generation knobs below default to null (omitted). Set a value to override Venice's
+# default. Omitting a knob is NOT the same as setting it: an omitted knob lets Venice apply its own
+# default, a set value is sent verbatim.
+# A description of what should NOT appear in the image.
+matrix_bot_baibot_config_agents_static_definitions_venice_config_image_generation_negative_prompt: ~
+# CFG scale, 0-20. Higher values make the image adhere more closely to the prompt.
+matrix_bot_baibot_config_agents_static_definitions_venice_config_image_generation_cfg_scale: ~
+# Number of inference steps. Model-specific; some models ignore it.
+matrix_bot_baibot_config_agents_static_definitions_venice_config_image_generation_steps: ~
+# A named style to apply (e.g. "3D Model"). See Venice's image-styles reference.
+matrix_bot_baibot_config_agents_static_definitions_venice_config_image_generation_style_preset: ~
+# Random seed, -999999999-999999999. Fix it for reproducible results; omit for a random seed.
+matrix_bot_baibot_config_agents_static_definitions_venice_config_image_generation_seed: ~
+# Blur images classified as adult content. Defaults to true.
+matrix_bot_baibot_config_agents_static_definitions_venice_config_image_generation_safe_mode: ~
+# Hide the Venice watermark. Venice may ignore this for certain generated content. Defaults to false.
+matrix_bot_baibot_config_agents_static_definitions_venice_config_image_generation_hide_watermark: ~
+# Output format: jpeg, png, or webp. webp is smallest; png is highest-quality. Defaults to webp.
+matrix_bot_baibot_config_agents_static_definitions_venice_config_image_generation_format: ~
+# Image dimensions in pixels, each 1-1280. Default 1024x1024.
+matrix_bot_baibot_config_agents_static_definitions_venice_config_image_generation_width: ~
+matrix_bot_baibot_config_agents_static_definitions_venice_config_image_generation_height: ~
+# Aspect ratio (used by certain models, e.g. Nano Banana): "1:1", "16:9". An alternative to width/height.
+matrix_bot_baibot_config_agents_static_definitions_venice_config_image_generation_aspect_ratio: ~
+# Resolution tier (used by certain models): "1K", "2K", "4K".
+matrix_bot_baibot_config_agents_static_definitions_venice_config_image_generation_resolution: ~
+# Output quality for supported models (e.g. GPT Image 2): low, medium, high. Higher can cost more.
+matrix_bot_baibot_config_agents_static_definitions_venice_config_image_generation_quality: ~
+# Lora strength, 0-100. Only applies if the model uses additional Loras.
+matrix_bot_baibot_config_agents_static_definitions_venice_config_image_generation_lora_strength: ~
+# Embed the generation prompt into the image's EXIF metadata. Defaults to false.
+matrix_bot_baibot_config_agents_static_definitions_venice_config_image_generation_embed_exif_metadata: ~
+# Let the model pull the latest info from the web for the image. Model-specific; costs extra credits.
+matrix_bot_baibot_config_agents_static_definitions_venice_config_image_generation_enable_web_search: ~
+# Image editing shares this image_generation config block; only the model differs.
+matrix_bot_baibot_config_agents_static_definitions_venice_config_image_generation_edit_model_id: firered-image-edit
+# The optional edit knobs below default to null (omitted). Set a value to override Venice's default.
+# Output format: jpeg, png, or webp. When omitted, Venice infers it (PNG at 1K, JPEG at 2K/4K).
+matrix_bot_baibot_config_agents_static_definitions_venice_config_image_generation_edit_output_format: ~
+# Aspect ratio of the result: auto, 1:1, 3:2, 16:9, 21:9, 9:16, 2:3, 3:4, 4:5 (model-specific).
+matrix_bot_baibot_config_agents_static_definitions_venice_config_image_generation_edit_aspect_ratio: ~
+# Resolution tier: 1K, 2K, 4K (model-specific). Defaults to 1K.
+matrix_bot_baibot_config_agents_static_definitions_venice_config_image_generation_edit_resolution: ~
+# Blur images classified as adult content. Defaults to true.
+matrix_bot_baibot_config_agents_static_definitions_venice_config_image_generation_edit_safe_mode: ~
+
+########################################################################################
+#                                                                                      #
+# /Venice agent configuration                                                          #
+#                                                                                      #
+########################################################################################
+
+
 # Controls the `initial_global_config.handler.catch_all` configuration setting.
 #
 # This is an initial global configuration setting.
@@ -69,6 +69,7 @@
      register: matrix_bot_baibot_container_image_build_result

 - name: Ensure baibot container network is created
+  when: matrix_bot_baibot_container_network != 'host'
  community.general.docker_network:
    enable_ipv6: "{{ devture_systemd_docker_base_ipv6_enabled }}"
    name: "{{ matrix_bot_baibot_container_network }}"
@@ -25,6 +25,8 @@

    - {'name': 'matrix_bot_baibot_config_agents_static_definitions_openai_config_api_key', when: "{{ matrix_bot_baibot_config_agents_static_definitions_openai_enabled }}"}

+    - {'name': 'matrix_bot_baibot_config_agents_static_definitions_venice_config_api_key', when: "{{ matrix_bot_baibot_config_agents_static_definitions_venice_enabled }}"}
+
 - name: Fail if baibot authentication mode is not configured
  ansible.builtin.fail:
    msg: >-
@@ -0,0 +1,154 @@
+#jinja2: lstrip_blocks: True
+base_url: {{ matrix_bot_baibot_config_agents_static_definitions_venice_config_base_url | to_json }}
+
+api_key: {{ matrix_bot_baibot_config_agents_static_definitions_venice_config_api_key | to_json }}
+
+{% if matrix_bot_baibot_config_agents_static_definitions_venice_config_text_generation_enabled %}
+text_generation:
+  model_id: {{ matrix_bot_baibot_config_agents_static_definitions_venice_config_text_generation_model_id | to_json }}
+  prompt: {{ matrix_bot_baibot_config_agents_static_definitions_venice_config_text_generation_prompt | to_json }}
+  temperature: {{ matrix_bot_baibot_config_agents_static_definitions_venice_config_text_generation_temperature | to_json }}
+  max_response_tokens: {{ matrix_bot_baibot_config_agents_static_definitions_venice_config_text_generation_max_response_tokens | int | to_json }}
+  max_context_tokens: {{ matrix_bot_baibot_config_agents_static_definitions_venice_config_text_generation_max_context_tokens | int | to_json }}
+  prompt_cache_retention: {{ matrix_bot_baibot_config_agents_static_definitions_venice_config_text_generation_prompt_cache_retention | to_json }}
+  {% if matrix_bot_baibot_config_agents_static_definitions_venice_config_text_generation_top_p is not none %}
+  top_p: {{ matrix_bot_baibot_config_agents_static_definitions_venice_config_text_generation_top_p | to_json }}
+  {% endif %}
+  {% if matrix_bot_baibot_config_agents_static_definitions_venice_config_text_generation_frequency_penalty is not none %}
+  frequency_penalty: {{ matrix_bot_baibot_config_agents_static_definitions_venice_config_text_generation_frequency_penalty | to_json }}
+  {% endif %}
+  {% if matrix_bot_baibot_config_agents_static_definitions_venice_config_text_generation_presence_penalty is not none %}
+  presence_penalty: {{ matrix_bot_baibot_config_agents_static_definitions_venice_config_text_generation_presence_penalty | to_json }}
+  {% endif %}
+  {% if matrix_bot_baibot_config_agents_static_definitions_venice_config_text_generation_repetition_penalty is not none %}
+  repetition_penalty: {{ matrix_bot_baibot_config_agents_static_definitions_venice_config_text_generation_repetition_penalty | to_json }}
+  {% endif %}
+  {% if matrix_bot_baibot_config_agents_static_definitions_venice_config_text_generation_reasoning_effort is not none %}
+  reasoning_effort: {{ matrix_bot_baibot_config_agents_static_definitions_venice_config_text_generation_reasoning_effort | to_json }}
+  {% endif %}
+  {% if matrix_bot_baibot_config_agents_static_definitions_venice_config_text_generation_show_reasoning is not none %}
+  show_reasoning: {{ matrix_bot_baibot_config_agents_static_definitions_venice_config_text_generation_show_reasoning | to_json }}
+  {% endif %}
+  venice_parameters:
+    enable_web_search: {{ matrix_bot_baibot_config_agents_static_definitions_venice_config_text_generation_venice_parameters_enable_web_search | to_json }}
+    strip_thinking_response: {{ matrix_bot_baibot_config_agents_static_definitions_venice_config_text_generation_venice_parameters_strip_thinking_response | to_json }}
+    enable_e2ee: {{ matrix_bot_baibot_config_agents_static_definitions_venice_config_text_generation_venice_parameters_enable_e2ee | to_json }}
+    {% if matrix_bot_baibot_config_agents_static_definitions_venice_config_text_generation_venice_parameters_enable_web_citations is not none %}
+    enable_web_citations: {{ matrix_bot_baibot_config_agents_static_definitions_venice_config_text_generation_venice_parameters_enable_web_citations | to_json }}
+    {% endif %}
+    {% if matrix_bot_baibot_config_agents_static_definitions_venice_config_text_generation_venice_parameters_enable_web_scraping is not none %}
+    enable_web_scraping: {{ matrix_bot_baibot_config_agents_static_definitions_venice_config_text_generation_venice_parameters_enable_web_scraping | to_json }}
+    {% endif %}
+    {% if matrix_bot_baibot_config_agents_static_definitions_venice_config_text_generation_venice_parameters_include_venice_system_prompt is not none %}
+    include_venice_system_prompt: {{ matrix_bot_baibot_config_agents_static_definitions_venice_config_text_generation_venice_parameters_include_venice_system_prompt | to_json }}
+    {% endif %}
+    {% if matrix_bot_baibot_config_agents_static_definitions_venice_config_text_generation_venice_parameters_include_search_results_in_stream is not none %}
+    include_search_results_in_stream: {{ matrix_bot_baibot_config_agents_static_definitions_venice_config_text_generation_venice_parameters_include_search_results_in_stream | to_json }}
+    {% endif %}
+    {% if matrix_bot_baibot_config_agents_static_definitions_venice_config_text_generation_venice_parameters_return_search_results_as_documents is not none %}
+    return_search_results_as_documents: {{ matrix_bot_baibot_config_agents_static_definitions_venice_config_text_generation_venice_parameters_return_search_results_as_documents | to_json }}
+    {% endif %}
+    {% if matrix_bot_baibot_config_agents_static_definitions_venice_config_text_generation_venice_parameters_enable_x_search is not none %}
+    enable_x_search: {{ matrix_bot_baibot_config_agents_static_definitions_venice_config_text_generation_venice_parameters_enable_x_search | to_json }}
+    {% endif %}
+    {% if matrix_bot_baibot_config_agents_static_definitions_venice_config_text_generation_venice_parameters_disable_thinking is not none %}
+    disable_thinking: {{ matrix_bot_baibot_config_agents_static_definitions_venice_config_text_generation_venice_parameters_disable_thinking | to_json }}
+    {% endif %}
+    {% if matrix_bot_baibot_config_agents_static_definitions_venice_config_text_generation_venice_parameters_verbosity is not none %}
+    verbosity: {{ matrix_bot_baibot_config_agents_static_definitions_venice_config_text_generation_venice_parameters_verbosity | to_json }}
+    {% endif %}
+    {% if matrix_bot_baibot_config_agents_static_definitions_venice_config_text_generation_venice_parameters_character_slug is not none %}
+    character_slug: {{ matrix_bot_baibot_config_agents_static_definitions_venice_config_text_generation_venice_parameters_character_slug | to_json }}
+    {% endif %}
+{% endif %}
+
+{% if matrix_bot_baibot_config_agents_static_definitions_venice_config_speech_to_text_enabled %}
+speech_to_text:
+  model_id: {{ matrix_bot_baibot_config_agents_static_definitions_venice_config_speech_to_text_model_id | to_json }}
+{% endif %}
+
+{% if matrix_bot_baibot_config_agents_static_definitions_venice_config_text_to_speech_enabled %}
+text_to_speech:
+  model_id: {{ matrix_bot_baibot_config_agents_static_definitions_venice_config_text_to_speech_model_id | to_json }}
+  voice: {{ matrix_bot_baibot_config_agents_static_definitions_venice_config_text_to_speech_voice | to_json }}
+  response_format: {{ matrix_bot_baibot_config_agents_static_definitions_venice_config_text_to_speech_response_format | to_json }}
+  {% if matrix_bot_baibot_config_agents_static_definitions_venice_config_text_to_speech_speed is not none %}
+  speed: {{ matrix_bot_baibot_config_agents_static_definitions_venice_config_text_to_speech_speed | to_json }}
+  {% endif %}
+  {% if matrix_bot_baibot_config_agents_static_definitions_venice_config_text_to_speech_prompt is not none %}
+  prompt: {{ matrix_bot_baibot_config_agents_static_definitions_venice_config_text_to_speech_prompt | to_json }}
+  {% endif %}
+  {% if matrix_bot_baibot_config_agents_static_definitions_venice_config_text_to_speech_temperature is not none %}
+  temperature: {{ matrix_bot_baibot_config_agents_static_definitions_venice_config_text_to_speech_temperature | to_json }}
+  {% endif %}
+  {% if matrix_bot_baibot_config_agents_static_definitions_venice_config_text_to_speech_top_p is not none %}
+  top_p: {{ matrix_bot_baibot_config_agents_static_definitions_venice_config_text_to_speech_top_p | to_json }}
+  {% endif %}
+{% endif %}
+
+{% if matrix_bot_baibot_config_agents_static_definitions_venice_config_image_generation_enabled %}
+image_generation:
+  model_id: {{ matrix_bot_baibot_config_agents_static_definitions_venice_config_image_generation_model_id | to_json }}
+  {% if matrix_bot_baibot_config_agents_static_definitions_venice_config_image_generation_negative_prompt is not none %}
+  negative_prompt: {{ matrix_bot_baibot_config_agents_static_definitions_venice_config_image_generation_negative_prompt | to_json }}
+  {% endif %}
+  {% if matrix_bot_baibot_config_agents_static_definitions_venice_config_image_generation_cfg_scale is not none %}
+  cfg_scale: {{ matrix_bot_baibot_config_agents_static_definitions_venice_config_image_generation_cfg_scale | to_json }}
+  {% endif %}
+  {% if matrix_bot_baibot_config_agents_static_definitions_venice_config_image_generation_steps is not none %}
+  steps: {{ matrix_bot_baibot_config_agents_static_definitions_venice_config_image_generation_steps | to_json }}
+  {% endif %}
+  {% if matrix_bot_baibot_config_agents_static_definitions_venice_config_image_generation_style_preset is not none %}
+  style_preset: {{ matrix_bot_baibot_config_agents_static_definitions_venice_config_image_generation_style_preset | to_json }}
+  {% endif %}
+  {% if matrix_bot_baibot_config_agents_static_definitions_venice_config_image_generation_seed is not none %}
+  seed: {{ matrix_bot_baibot_config_agents_static_definitions_venice_config_image_generation_seed | to_json }}
+  {% endif %}
+  {% if matrix_bot_baibot_config_agents_static_definitions_venice_config_image_generation_safe_mode is not none %}
+  safe_mode: {{ matrix_bot_baibot_config_agents_static_definitions_venice_config_image_generation_safe_mode | to_json }}
+  {% endif %}
+  {% if matrix_bot_baibot_config_agents_static_definitions_venice_config_image_generation_hide_watermark is not none %}
+  hide_watermark: {{ matrix_bot_baibot_config_agents_static_definitions_venice_config_image_generation_hide_watermark | to_json }}
+  {% endif %}
+  {% if matrix_bot_baibot_config_agents_static_definitions_venice_config_image_generation_format is not none %}
+  format: {{ matrix_bot_baibot_config_agents_static_definitions_venice_config_image_generation_format | to_json }}
+  {% endif %}
+  {% if matrix_bot_baibot_config_agents_static_definitions_venice_config_image_generation_width is not none %}
+  width: {{ matrix_bot_baibot_config_agents_static_definitions_venice_config_image_generation_width | to_json }}
+  {% endif %}
+  {% if matrix_bot_baibot_config_agents_static_definitions_venice_config_image_generation_height is not none %}
+  height: {{ matrix_bot_baibot_config_agents_static_definitions_venice_config_image_generation_height | to_json }}
+  {% endif %}
+  {% if matrix_bot_baibot_config_agents_static_definitions_venice_config_image_generation_aspect_ratio is not none %}
+  aspect_ratio: {{ matrix_bot_baibot_config_agents_static_definitions_venice_config_image_generation_aspect_ratio | to_json }}
+  {% endif %}
+  {% if matrix_bot_baibot_config_agents_static_definitions_venice_config_image_generation_resolution is not none %}
+  resolution: {{ matrix_bot_baibot_config_agents_static_definitions_venice_config_image_generation_resolution | to_json }}
+  {% endif %}
+  {% if matrix_bot_baibot_config_agents_static_definitions_venice_config_image_generation_quality is not none %}
+  quality: {{ matrix_bot_baibot_config_agents_static_definitions_venice_config_image_generation_quality | to_json }}
+  {% endif %}
+  {% if matrix_bot_baibot_config_agents_static_definitions_venice_config_image_generation_lora_strength is not none %}
+  lora_strength: {{ matrix_bot_baibot_config_agents_static_definitions_venice_config_image_generation_lora_strength | to_json }}
+  {% endif %}
+  {% if matrix_bot_baibot_config_agents_static_definitions_venice_config_image_generation_embed_exif_metadata is not none %}
+  embed_exif_metadata: {{ matrix_bot_baibot_config_agents_static_definitions_venice_config_image_generation_embed_exif_metadata | to_json }}
+  {% endif %}
+  {% if matrix_bot_baibot_config_agents_static_definitions_venice_config_image_generation_enable_web_search is not none %}
+  enable_web_search: {{ matrix_bot_baibot_config_agents_static_definitions_venice_config_image_generation_enable_web_search | to_json }}
+  {% endif %}
+  edit:
+    model_id: {{ matrix_bot_baibot_config_agents_static_definitions_venice_config_image_generation_edit_model_id | to_json }}
+    {% if matrix_bot_baibot_config_agents_static_definitions_venice_config_image_generation_edit_output_format is not none %}
+    output_format: {{ matrix_bot_baibot_config_agents_static_definitions_venice_config_image_generation_edit_output_format | to_json }}
+    {% endif %}
+    {% if matrix_bot_baibot_config_agents_static_definitions_venice_config_image_generation_edit_aspect_ratio is not none %}
+    aspect_ratio: {{ matrix_bot_baibot_config_agents_static_definitions_venice_config_image_generation_edit_aspect_ratio | to_json }}
+    {% endif %}
+    {% if matrix_bot_baibot_config_agents_static_definitions_venice_config_image_generation_edit_resolution is not none %}
+    resolution: {{ matrix_bot_baibot_config_agents_static_definitions_venice_config_image_generation_edit_resolution | to_json }}
+    {% endif %}
+    {% if matrix_bot_baibot_config_agents_static_definitions_venice_config_image_generation_edit_safe_mode is not none %}
+    safe_mode: {{ matrix_bot_baibot_config_agents_static_definitions_venice_config_image_generation_edit_safe_mode | to_json }}
+    {% endif %}
+{% endif %}
@@ -0,0 +1,3 @@
+SPDX-FileCopyrightText: 2026 Nikita Chernyi
+
+SPDX-License-Identifier: AGPL-3.0-or-later
@@ -37,9 +37,11 @@ ExecStartPre={{ devture_systemd_docker_base_host_command_docker }} create \
 			{% endfor %}
 			{{ matrix_bot_baibot_container_image }}

+{% if matrix_bot_baibot_container_network != 'host' %}
 {% for network in matrix_bot_baibot_container_additional_networks %}
 ExecStartPre={{ devture_systemd_docker_base_host_command_docker }} network connect {{ network }} matrix-bot-baibot
 {% endfor %}
+{% endif %}

 ExecStart={{ devture_systemd_docker_base_host_command_docker }} start --attach matrix-bot-baibot

@@ -13,7 +13,7 @@
 matrix_bot_buscarron_enabled: true

 # renovate: datasource=docker depName=ghcr.io/etkecc/buscarron
-matrix_bot_buscarron_version: v1.4.3
+matrix_bot_buscarron_version: v1.5.0

 # The hostname at which Buscarron is served.
 matrix_bot_buscarron_hostname: ''
@@ -110,6 +110,7 @@
      }}

 - name: Ensure Buscarron container network is created
+  when: matrix_bot_buscarron_container_network != 'host'
  community.general.docker_network:
    enable_ipv6: "{{ devture_systemd_docker_base_ipv6_enabled }}"
    name: "{{ matrix_bot_buscarron_container_network }}"
@@ -32,9 +32,11 @@ ExecStartPre={{ devture_systemd_docker_base_host_command_docker }} create \
 			{% endfor %}
 			{{ matrix_bot_buscarron_container_image }}

+{% if matrix_bot_buscarron_container_network != 'host' %}
 {% for network in matrix_bot_buscarron_container_additional_networks %}
 ExecStartPre={{ devture_systemd_docker_base_host_command_docker }} network connect {{ network }} matrix-bot-buscarron
 {% endfor %}
+{% endif %}

 ExecStart={{ devture_systemd_docker_base_host_command_docker }} start --attach matrix-bot-buscarron

@@ -82,6 +82,7 @@
  register: matrix_bot_draupnir_config_result

 - name: Ensure matrix-bot-draupnir container network is created
+  when: matrix_bot_draupnir_container_network != 'host'
  community.general.docker_network:
    enable_ipv6: "{{ devture_systemd_docker_base_ipv6_enabled }}"
    name: "{{ matrix_bot_draupnir_container_network }}"
@@ -36,9 +36,11 @@ ExecStartPre={{ devture_systemd_docker_base_host_command_docker }} create \
 			{{ matrix_bot_draupnir_container_image }} \
 			bot --draupnir-config /data/config/production.yaml

+{% if matrix_bot_draupnir_container_network != 'host' %}
 {% for network in matrix_bot_draupnir_container_additional_networks %}
 ExecStartPre={{ devture_systemd_docker_base_host_command_docker }} network connect {{ network }} matrix-bot-draupnir
 {% endfor %}
+{% endif %}

 ExecStart={{ devture_systemd_docker_base_host_command_docker }} start --attach matrix-bot-draupnir

@@ -94,6 +94,7 @@
  register: matrix_bot_honoroit_container_image_build_result

 - name: Ensure Honoroit container network is created
+  when: matrix_bot_honoroit_container_network != 'host'
  community.general.docker_network:
    enable_ipv6: "{{ devture_systemd_docker_base_ipv6_enabled }}"
    name: "{{ matrix_bot_honoroit_container_network }}"
@@ -32,9 +32,11 @@ ExecStartPre={{ devture_systemd_docker_base_host_command_docker }} create \
 			{% endfor %}
 			{{ matrix_bot_honoroit_container_image }}

+{% if matrix_bot_honoroit_container_network != 'host' %}
 {% for network in matrix_bot_honoroit_container_additional_networks %}
 ExecStartPre={{ devture_systemd_docker_base_host_command_docker }} network connect {{ network }} matrix-bot-honoroit
 {% endfor %}
+{% endif %}

 ExecStart={{ devture_systemd_docker_base_host_command_docker }} start --attach matrix-bot-honoroit

@@ -62,6 +62,7 @@
      register: matrix_bot_matrix_registration_bot_container_image_build_result

 - name: Ensure matrix-registration-bot container network is created
+  when: matrix_bot_matrix_registration_bot_container_network != 'host'
  community.general.docker_network:
    enable_ipv6: "{{ devture_systemd_docker_base_ipv6_enabled }}"
    name: "{{ matrix_bot_matrix_registration_bot_container_network }}"
@@ -29,9 +29,11 @@ ExecStartPre={{ devture_systemd_docker_base_host_command_docker }} create \
 			--network={{ matrix_bot_matrix_registration_bot_container_network }} \
 			{{ matrix_bot_matrix_registration_bot_container_image }}

+{% if matrix_bot_matrix_registration_bot_container_network != 'host' %}
 {% for network in matrix_bot_matrix_registration_bot_container_additional_networks %}
 ExecStartPre={{ devture_systemd_docker_base_host_command_docker }} network connect {{ network }} matrix-bot-matrix-registration-bot
 {% endfor %}
+{% endif %}

 ExecStart={{ devture_systemd_docker_base_host_command_docker }} start --attach matrix-bot-matrix-registration-bot

@@ -93,6 +93,7 @@
  register: matrix_bot_matrix_reminder_bot_config_result

 - name: Ensure matrix-reminder-bot container network is created
+  when: matrix_bot_matrix_reminder_bot_container_network != 'host'
  community.general.docker_network:
    enable_ipv6: "{{ devture_systemd_docker_base_ipv6_enabled }}"
    name: "{{ matrix_bot_matrix_reminder_bot_container_network }}"
@@ -34,9 +34,11 @@ ExecStartPre={{ devture_systemd_docker_base_host_command_docker }} create \
 			{{ matrix_bot_matrix_reminder_bot_container_image }} \
 			-c "matrix-reminder-bot /config/config.yaml"

+{% if matrix_bot_matrix_reminder_bot_container_network != 'host' %}
 {% for network in matrix_bot_matrix_reminder_bot_container_additional_networks %}
 ExecStartPre={{ devture_systemd_docker_base_host_command_docker }} network connect {{ network }} matrix-bot-matrix-reminder-bot
 {% endfor %}
+{% endif %}

 ExecStart={{ devture_systemd_docker_base_host_command_docker }} start --attach matrix-bot-matrix-reminder-bot

@@ -98,6 +98,7 @@
  register: matrix_bot_maubot_support_files_result

 - name: Ensure maubot container network is created
+  when: matrix_bot_maubot_container_network != 'host'
  community.general.docker_network:
    enable_ipv6: "{{ devture_systemd_docker_base_ipv6_enabled }}"
    name: "{{ matrix_bot_maubot_container_network }}"
@@ -41,9 +41,11 @@ ExecStartPre={{ devture_systemd_docker_base_host_command_docker }} create \
 			{{ matrix_bot_maubot_container_image_final }} \
 			python3 -m maubot -c /config/config.yaml --no-update

+{% if matrix_bot_maubot_container_network != 'host' %}
 {% for network in matrix_bot_maubot_container_additional_networks %}
 ExecStartPre={{ devture_systemd_docker_base_host_command_docker }} network connect {{ network }} matrix-bot-maubot
 {% endfor %}
+{% endif %}

 ExecStart={{ devture_systemd_docker_base_host_command_docker }} start --attach matrix-bot-maubot

@@ -68,6 +68,7 @@
  register: matrix_bot_mjolnir_config_result

 - name: Ensure matrix-bot-mjolnir container network is created
+  when: matrix_bot_mjolnir_container_network != 'host'
  community.general.docker_network:
    enable_ipv6: "{{ devture_systemd_docker_base_ipv6_enabled }}"
    name: "{{ matrix_bot_mjolnir_container_network }}"
@@ -32,9 +32,11 @@ ExecStartPre={{ devture_systemd_docker_base_host_command_docker }} create \
 			{{ matrix_bot_mjolnir_container_image }} \
 			bot --mjolnir-config /data/config/production.yaml

+{% if matrix_bot_mjolnir_container_network != 'host' %}
 {% for network in matrix_bot_mjolnir_container_additional_networks %}
 ExecStartPre={{ devture_systemd_docker_base_host_command_docker }} network connect {{ network }} matrix-bot-mjolnir
 {% endfor %}
+{% endif %}

 ExecStart={{ devture_systemd_docker_base_host_command_docker }} start --attach matrix-bot-mjolnir

@@ -118,6 +118,7 @@
  changed_when: false

 - name: Ensure matrix-appservice-discord container network is created
+  when: matrix_appservice_discord_container_network != 'host'
  community.general.docker_network:
    enable_ipv6: "{{ devture_systemd_docker_base_ipv6_enabled }}"
    name: "{{ matrix_appservice_discord_container_network }}"
@@ -34,9 +34,11 @@ ExecStartPre={{ devture_systemd_docker_base_host_command_docker }} create \
 			{{ matrix_appservice_discord_container_image }} \
 			node /build/src/discordas.js -p 9005 -c /cfg/config.yaml -f /cfg/registration.yaml

+{% if matrix_appservice_discord_container_network != 'host' %}
 {% for network in matrix_appservice_discord_container_additional_networks %}
 ExecStartPre={{ devture_systemd_docker_base_host_command_docker }} network connect {{ network }} matrix-appservice-discord
 {% endfor %}
+{% endif %}

 ExecStart={{ devture_systemd_docker_base_host_command_docker }} start --attach matrix-appservice-discord

@@ -245,6 +245,7 @@
  register: matrix_appservice_irc_registration_result

 - name: Ensure matrix-appservice-irc container network is created
+  when: matrix_appservice_irc_container_network != 'host'
  community.general.docker_network:
    enable_ipv6: "{{ devture_systemd_docker_base_ipv6_enabled }}"
    name: "{{ matrix_appservice_irc_container_network }}"
@@ -39,9 +39,11 @@ ExecStartPre={{ devture_systemd_docker_base_host_command_docker }} create \
 			{{ matrix_appservice_irc_container_image }} \
 			-c 'node app.js -c /config/config.yaml -f /config/registration.yaml -p 9999'

+{% if matrix_appservice_irc_container_network != 'host' %}
 {% for network in matrix_appservice_irc_container_additional_networks %}
 ExecStartPre={{ devture_systemd_docker_base_host_command_docker }} network connect {{ network }} matrix-appservice-irc
 {% endfor %}
+{% endif %}

 ExecStart={{ devture_systemd_docker_base_host_command_docker }} start --attach matrix-appservice-irc

@@ -99,6 +99,7 @@
  register: matrix_appservice_kakaotalk_registration_result

 - name: Ensure matrix-appservice-kakaotalk container network is created
+  when: matrix_appservice_kakaotalk_container_network != 'host'
  community.general.docker_network:
    enable_ipv6: "{{ devture_systemd_docker_base_ipv6_enabled }}"
    name: "{{ matrix_appservice_kakaotalk_container_network }}"
@@ -30,9 +30,11 @@ ExecStartPre={{ devture_systemd_docker_base_host_command_docker }} create \
 			{{ matrix_appservice_kakaotalk_node_container_image }} \
 			node src/main.js --config /config.json

+{% if matrix_appservice_kakaotalk_container_network != 'host' %}
 {% for network in matrix_appservice_kakaotalk_container_additional_networks %}
 ExecStartPre={{ devture_systemd_docker_base_host_command_docker }} network connect {{ network }} matrix-appservice-kakaotalk-node
 {% endfor %}
+{% endif %}

 ExecStart={{ devture_systemd_docker_base_host_command_docker }} start --attach matrix-appservice-kakaotalk-node

@@ -31,9 +31,11 @@ ExecStartPre={{ devture_systemd_docker_base_host_command_docker }} create \
 			{{ matrix_appservice_kakaotalk_container_image }} \
 			python3 -m matrix_appservice_kakaotalk -c /config/config.yaml --no-update

-{% for network in matrix_appservice_discord_container_additional_networks %}
+{% if matrix_appservice_kakaotalk_container_network != 'host' %}
+{% for network in matrix_appservice_kakaotalk_container_additional_networks %}
 ExecStartPre={{ devture_systemd_docker_base_host_command_docker }} network connect {{ network }} matrix-appservice-kakaotalk
 {% endfor %}
+{% endif %}

 ExecStart={{ devture_systemd_docker_base_host_command_docker }} start --attach matrix-appservice-kakaotalk

@@ -92,6 +92,7 @@
      register: matrix_beeper_linkedin_container_image_build_result

 - name: Ensure beeper-linkedin container network is created
+  when: matrix_beeper_linkedin_container_network != 'host'
  community.general.docker_network:
    enable_ipv6: "{{ devture_systemd_docker_base_ipv6_enabled }}"
    name: "{{ matrix_beeper_linkedin_container_network }}"
@@ -31,9 +31,11 @@ ExecStartPre={{ devture_systemd_docker_base_host_command_docker }} create \
 			{{ matrix_beeper_linkedin_container_image }} \
 			python3 -m linkedin_matrix -c /config/config.yaml -r /config/registration.yaml --no-update

+{% if matrix_beeper_linkedin_container_network != 'host' %}
 {% for network in matrix_beeper_linkedin_container_additional_networks %}
 ExecStartPre={{ devture_systemd_docker_base_host_command_docker }} network connect {{ network }} matrix-beeper-linkedin
 {% endfor %}
+{% endif %}

 ExecStart={{ devture_systemd_docker_base_host_command_docker }} start --attach matrix-beeper-linkedin

@@ -50,6 +50,7 @@
  register: matrix_heisenbridge_support_files_result

 - name: Ensure Heisenbridge container network is created
+  when: matrix_heisenbridge_container_network != 'host'
  community.general.docker_network:
    enable_ipv6: "{{ devture_systemd_docker_base_ipv6_enabled }}"
    name: "{{ matrix_heisenbridge_container_network }}"
@@ -44,9 +44,11 @@ ExecStartPre={{ devture_systemd_docker_base_host_command_docker }} create \
 			--listen-port 9898 \
 			{{ matrix_heisenbridge_homeserver_url }}

+{% if matrix_heisenbridge_container_network != 'host' %}
 {% for network in matrix_heisenbridge_container_additional_networks %}
 ExecStartPre={{ devture_systemd_docker_base_host_command_docker }} network connect {{ network }} matrix-heisenbridge
 {% endfor %}
+{% endif %}

 ExecStart={{ devture_systemd_docker_base_host_command_docker }} start --attach matrix-heisenbridge

@@ -133,6 +133,7 @@
  register: matrix_hookshot_github_key_result

 - name: Ensure matrix-hookshot container network is created
+  when: matrix_hookshot_container_network != 'host'
  community.general.docker_network:
    enable_ipv6: "{{ devture_systemd_docker_base_ipv6_enabled }}"
    name: "{{ matrix_hookshot_container_network }}"
@@ -30,9 +30,11 @@ ExecStartPre={{ devture_systemd_docker_base_host_command_docker }} create --rm -
          {% endfor %}
          {{ matrix_hookshot_container_image }}

+{% if matrix_hookshot_container_network != 'host' %}
 {% for network in matrix_hookshot_container_additional_networks %}
 ExecStartPre={{ devture_systemd_docker_base_host_command_docker }} network connect {{ network }} {{ matrix_hookshot_identifier }}
 {% endfor %}
+{% endif %}

 ExecStart={{ devture_systemd_docker_base_host_command_docker }} start --attach {{ matrix_hookshot_identifier }}

@@ -82,6 +82,7 @@
  register: matrix_mautrix_bluesky_support_files_result

 - name: Ensure matrix-mautrix-bluesky container network is created
+  when: matrix_mautrix_bluesky_container_network != 'host'
  community.general.docker_network:
    enable_ipv6: "{{ devture_systemd_docker_base_ipv6_enabled }}"
    name: "{{ matrix_mautrix_bluesky_container_network }}"
@@ -32,9 +32,11 @@ ExecStartPre={{ devture_systemd_docker_base_host_command_docker }} create \
 			{{ matrix_mautrix_bluesky_container_image }} \
 			/usr/bin/mautrix-bluesky -c /config/config.yaml -r /config/registration.yaml --no-update

+{% if matrix_mautrix_bluesky_container_network != 'host' %}
 {% for network in matrix_mautrix_bluesky_container_additional_networks %}
 ExecStartPre={{ devture_systemd_docker_base_host_command_docker }} network connect {{ network }} matrix-mautrix-bluesky
 {% endfor %}
+{% endif %}

 ExecStart={{ devture_systemd_docker_base_host_command_docker }} start --attach matrix-mautrix-bluesky

@@ -110,6 +110,7 @@
  register: matrix_mautrix_discord_support_files_result

 - name: Ensure mautrix-discord container network is created
+  when: matrix_mautrix_discord_container_network != 'host'
  community.general.docker_network:
    enable_ipv6: "{{ devture_systemd_docker_base_ipv6_enabled }}"
    name: "{{ matrix_mautrix_discord_container_network }}"
@@ -33,9 +33,11 @@ ExecStartPre={{ devture_systemd_docker_base_host_command_docker }} create \
 			{{ matrix_mautrix_discord_container_image }} \
 			/usr/bin/mautrix-discord -c /config/config.yaml -r /config/registration.yaml --no-update

+{% if matrix_mautrix_discord_container_network != 'host' %}
 {% for network in matrix_mautrix_discord_container_additional_networks %}
 ExecStartPre={{ devture_systemd_docker_base_host_command_docker }} network connect {{ network }} matrix-mautrix-discord
 {% endfor %}
+{% endif %}

 ExecStart={{ devture_systemd_docker_base_host_command_docker }} start --attach matrix-mautrix-discord

@@ -150,6 +150,7 @@
  register: matrix_mautrix_gmessages_support_files_result

 - name: Ensure matrix-mautrix-gmessages container network is created
+  when: matrix_mautrix_gmessages_container_network != 'host'
  community.general.docker_network:
    enable_ipv6: "{{ devture_systemd_docker_base_ipv6_enabled }}"
    name: "{{ matrix_mautrix_gmessages_container_network }}"
@@ -33,9 +33,11 @@ ExecStartPre={{ devture_systemd_docker_base_host_command_docker }} create \
 			{{ matrix_mautrix_gmessages_container_image }} \
 			/usr/bin/mautrix-gmessages -c /config/config.yaml -r /config/registration.yaml --no-update

+{% if matrix_mautrix_gmessages_container_network != 'host' %}
 {% for network in matrix_mautrix_gmessages_container_additional_networks %}
 ExecStartPre={{ devture_systemd_docker_base_host_command_docker }} network connect {{ network }} matrix-mautrix-gmessages
 {% endfor %}
+{% endif %}

 ExecStart={{ devture_systemd_docker_base_host_command_docker }} start --attach matrix-mautrix-gmessages

@@ -133,6 +133,7 @@
  register: matrix_mautrix_googlechat_support_files_result

 - name: Ensure matrix-mautrix-googlechat container network is created
+  when: matrix_mautrix_googlechat_container_network != 'host'
  community.general.docker_network:
    enable_ipv6: "{{ devture_systemd_docker_base_ipv6_enabled }}"
    name: "{{ matrix_mautrix_googlechat_container_network }}"
@@ -35,9 +35,11 @@ ExecStartPre={{ devture_systemd_docker_base_host_command_docker }} create \
 			{{ matrix_mautrix_googlechat_container_image }} \
 			python3 -m mautrix_googlechat -c /config/config.yaml --no-update

+{% if matrix_mautrix_googlechat_container_network != 'host' %}
 {% for network in matrix_mautrix_googlechat_container_additional_networks %}
 ExecStartPre={{ devture_systemd_docker_base_host_command_docker }} network connect {{ network }} matrix-mautrix-googlechat
 {% endfor %}
+{% endif %}

 ExecStart={{ devture_systemd_docker_base_host_command_docker }} start --attach matrix-mautrix-googlechat

@@ -20,7 +20,7 @@ matrix_mautrix_meta_instagram_enabled: true
 matrix_mautrix_meta_instagram_identifier: matrix-mautrix-meta-instagram

 # renovate: datasource=docker depName=dock.mau.dev/mautrix/meta
-matrix_mautrix_meta_instagram_version: v0.2605.0
+matrix_mautrix_meta_instagram_version: v0.2606.0

 matrix_mautrix_meta_instagram_base_path: "{{ matrix_base_data_path }}/mautrix-meta-instagram"
 matrix_mautrix_meta_instagram_config_path: "{{ matrix_mautrix_meta_instagram_base_path }}/config"
@@ -107,6 +107,7 @@
  register: matrix_mautrix_meta_instagram_support_files_result

 - name: Ensure mautrix-meta-instagram container network is created
+  when: matrix_mautrix_meta_instagram_container_network != 'host'
  community.general.docker_network:
    enable_ipv6: "{{ devture_systemd_docker_base_ipv6_enabled }}"
    name: "{{ matrix_mautrix_meta_instagram_container_network }}"
@@ -35,9 +35,11 @@ ExecStartPre={{ devture_systemd_docker_base_host_command_docker }} create \
 			{{ matrix_mautrix_meta_instagram_container_image }} \
 			/usr/bin/mautrix-meta -c /config/config.yaml -r /config/registration.yaml --no-update

+{% if matrix_mautrix_meta_instagram_container_network != 'host' %}
 {% for network in matrix_mautrix_meta_instagram_container_additional_networks %}
 ExecStartPre={{ devture_systemd_docker_base_host_command_docker }} network connect {{ network }} {{ matrix_mautrix_meta_instagram_identifier }}
 {% endfor %}
+{% endif %}

 ExecStart={{ devture_systemd_docker_base_host_command_docker }} start --attach {{ matrix_mautrix_meta_instagram_identifier }}

@@ -20,7 +20,7 @@ matrix_mautrix_meta_messenger_enabled: true
 matrix_mautrix_meta_messenger_identifier: matrix-mautrix-meta-messenger

 # renovate: datasource=docker depName=dock.mau.dev/mautrix/meta
-matrix_mautrix_meta_messenger_version: v0.2605.0
+matrix_mautrix_meta_messenger_version: v0.2606.0

 matrix_mautrix_meta_messenger_base_path: "{{ matrix_base_data_path }}/mautrix-meta-messenger"
 matrix_mautrix_meta_messenger_config_path: "{{ matrix_mautrix_meta_messenger_base_path }}/config"
@@ -107,6 +107,7 @@
  register: matrix_mautrix_meta_messenger_support_files_result

 - name: Ensure mautrix-meta-messenger container network is created
+  when: matrix_mautrix_meta_messenger_container_network != 'host'
  community.general.docker_network:
    enable_ipv6: "{{ devture_systemd_docker_base_ipv6_enabled }}"
    name: "{{ matrix_mautrix_meta_messenger_container_network }}"
@@ -35,9 +35,11 @@ ExecStartPre={{ devture_systemd_docker_base_host_command_docker }} create \
 			{{ matrix_mautrix_meta_messenger_container_image }} \
 			/usr/bin/mautrix-meta -c /config/config.yaml -r /config/registration.yaml --no-update

+{% if matrix_mautrix_meta_messenger_container_network != 'host' %}
 {% for network in matrix_mautrix_meta_messenger_container_additional_networks %}
 ExecStartPre={{ devture_systemd_docker_base_host_command_docker }} network connect {{ network }} {{ matrix_mautrix_meta_messenger_identifier }}
 {% endfor %}
+{% endif %}

 ExecStart={{ devture_systemd_docker_base_host_command_docker }} start --attach {{ matrix_mautrix_meta_messenger_identifier }}

@@ -25,7 +25,7 @@ matrix_mautrix_signal_container_image_self_build_repo: "https://mau.dev/mautrix/
 matrix_mautrix_signal_container_image_self_build_branch: "{{ 'main' if matrix_mautrix_signal_version == 'latest' else matrix_mautrix_signal_version }}"

 # renovate: datasource=docker depName=dock.mau.dev/mautrix/signal
-matrix_mautrix_signal_version: v26.02.2
+matrix_mautrix_signal_version: v0.2606.0

 # See: https://mau.dev/mautrix/signal/container_registry
 matrix_mautrix_signal_container_image: "{{ matrix_mautrix_signal_container_image_registry_prefix }}mautrix/signal:{{ matrix_mautrix_signal_container_image_tag }}"
@@ -148,6 +148,7 @@
  register: matrix_mautrix_signal_support_files_result

 - name: Ensure matrix-mautrix-signal container network is created
+  when: matrix_mautrix_signal_container_network != 'host'
  community.general.docker_network:
    enable_ipv6: "{{ devture_systemd_docker_base_ipv6_enabled }}"
    name: "{{ matrix_mautrix_signal_container_network }}"
@@ -33,9 +33,11 @@ ExecStartPre={{ devture_systemd_docker_base_host_command_docker }} create \
 			{{ matrix_mautrix_signal_container_image }} \
 			/usr/bin/mautrix-signal -c /config/config.yaml -r /config/registration.yaml --no-update

+{% if matrix_mautrix_signal_container_network != 'host' %}
 {% for network in matrix_mautrix_signal_container_additional_networks %}
 ExecStartPre={{ devture_systemd_docker_base_host_command_docker }} network connect {{ network }} matrix-mautrix-signal
 {% endfor %}
+{% endif %}

 ExecStart={{ devture_systemd_docker_base_host_command_docker }} start --attach matrix-mautrix-signal

@@ -17,7 +17,7 @@ matrix_mautrix_slack_container_image_self_build_repo: "https://mau.dev/mautrix/s
 matrix_mautrix_slack_container_image_self_build_branch: "{{ 'main' if matrix_mautrix_slack_version == 'latest' else matrix_mautrix_slack_version }}"

 # renovate: datasource=docker depName=dock.mau.dev/mautrix/slack
-matrix_mautrix_slack_version: v0.2605.0
+matrix_mautrix_slack_version: v0.2606.0
 # See: https://mau.dev/mautrix/slack/container_registry
 matrix_mautrix_slack_container_image: "{{ matrix_mautrix_slack_container_image_registry_prefix }}mautrix/slack:{{ matrix_mautrix_slack_version }}"
 matrix_mautrix_slack_container_image_registry_prefix: "{{ 'localhost/' if matrix_mautrix_slack_container_image_self_build else matrix_mautrix_slack_container_image_registry_prefix_upstream }}"
@@ -98,6 +98,7 @@
  register: matrix_mautrix_slack_registration_result

 - name: Ensure matrix-mautrix-slack container network is created
+  when: matrix_mautrix_slack_container_network != 'host'
  community.general.docker_network:
    enable_ipv6: "{{ devture_systemd_docker_base_ipv6_enabled }}"
    name: "{{ matrix_mautrix_slack_container_network }}"
@@ -32,9 +32,11 @@ ExecStartPre={{ devture_systemd_docker_base_host_command_docker }} create \
 			{{ matrix_mautrix_slack_container_image }} \
 			/usr/bin/mautrix-slack -c /config/config.yaml -r /config/registration.yaml --no-update

+{% if matrix_mautrix_slack_container_network != 'host' %}
 {% for network in matrix_mautrix_slack_container_additional_networks %}
 ExecStartPre={{ devture_systemd_docker_base_host_command_docker }} network connect {{ network }} matrix-mautrix-slack
 {% endfor %}
+{% endif %}

 ExecStart={{ devture_systemd_docker_base_host_command_docker }} start --attach matrix-mautrix-slack

@@ -26,7 +26,7 @@ matrix_mautrix_telegram_container_image_self_build_repo: "https://mau.dev/mautri
 matrix_mautrix_telegram_container_image_self_build_branch: "{{ 'main' if matrix_mautrix_telegram_version == 'latest' else matrix_mautrix_telegram_version }}"

 # renovate: datasource=docker depName=dock.mau.dev/mautrix/telegram
-matrix_mautrix_telegram_version: v0.2605.0
+matrix_mautrix_telegram_version: v0.2606.0

 # See: https://mau.dev/mautrix/telegram/container_registry
 matrix_mautrix_telegram_container_image: "{{ matrix_mautrix_telegram_container_image_registry_prefix }}mautrix/telegram:{{ matrix_mautrix_telegram_version }}"
@@ -154,6 +154,7 @@
  register: matrix_mautrix_telegram_support_files_result

 - name: Ensure matrix-mautrix-telegram container network is created
+  when: matrix_mautrix_telegram_container_network != 'host'
  community.general.docker_network:
    enable_ipv6: "{{ devture_systemd_docker_base_ipv6_enabled }}"
    name: "{{ matrix_mautrix_telegram_container_network }}"
@@ -33,9 +33,11 @@ ExecStartPre={{ devture_systemd_docker_base_host_command_docker }} create \
 			{{ matrix_mautrix_telegram_container_image }} \
 			/usr/bin/mautrix-telegram -c /config/config.yaml -r /config/registration.yaml --no-update

+{% if matrix_mautrix_telegram_container_network != 'host' %}
 {% for network in matrix_mautrix_telegram_container_additional_networks %}
 ExecStartPre={{ devture_systemd_docker_base_host_command_docker }} network connect {{ network }} matrix-mautrix-telegram
 {% endfor %}
+{% endif %}

 ExecStart={{ devture_systemd_docker_base_host_command_docker }} start --attach matrix-mautrix-telegram

@@ -22,7 +22,7 @@ matrix_mautrix_twitter_container_image_self_build_repo: "https://github.com/maut
 matrix_mautrix_twitter_container_image_self_build_repo_version: "{{ 'master' if matrix_mautrix_twitter_version == 'latest' else matrix_mautrix_twitter_version }}"

 # renovate: datasource=docker depName=dock.mau.dev/mautrix/twitter
-matrix_mautrix_twitter_version: v0.2604.0
+matrix_mautrix_twitter_version: v0.2606.0
 # See: https://mau.dev/tulir/mautrix-twitter/container_registry
 matrix_mautrix_twitter_container_image: "{{ matrix_mautrix_twitter_container_image_registry_prefix }}mautrix/twitter:{{ matrix_mautrix_twitter_version }}"
 matrix_mautrix_twitter_container_image_registry_prefix: "{{ 'localhost/' if matrix_mautrix_twitter_container_image_self_build else matrix_mautrix_twitter_container_image_registry_prefix_upstream }}"
@@ -88,6 +88,7 @@
  register: matrix_mautrix_twitter_support_files_result

 - name: Ensure matrix-mautrix-twitter container network is created
+  when: matrix_mautrix_twitter_container_network != 'host'
  community.general.docker_network:
    enable_ipv6: "{{ devture_systemd_docker_base_ipv6_enabled }}"
    name: "{{ matrix_mautrix_twitter_container_network }}"
@@ -32,9 +32,11 @@ ExecStartPre={{ devture_systemd_docker_base_host_command_docker }} create \
 			{{ matrix_mautrix_twitter_container_image }} \
 			/usr/bin/mautrix-twitter -c /config/config.yaml -r /config/registration.yaml --no-update

+{% if matrix_mautrix_twitter_container_network != 'host' %}
 {% for network in matrix_mautrix_twitter_container_additional_networks %}
 ExecStartPre={{ devture_systemd_docker_base_host_command_docker }} network connect {{ network }} matrix-mautrix-twitter
 {% endfor %}
+{% endif %}

 ExecStart={{ devture_systemd_docker_base_host_command_docker }} start --attach matrix-mautrix-twitter

@@ -28,7 +28,7 @@ matrix_mautrix_whatsapp_container_image_self_build_repo: "https://mau.dev/mautri
 matrix_mautrix_whatsapp_container_image_self_build_branch: "{{ 'master' if matrix_mautrix_whatsapp_version == 'latest' else matrix_mautrix_whatsapp_version }}"

 # renovate: datasource=docker depName=dock.mau.dev/mautrix/whatsapp
-matrix_mautrix_whatsapp_version: v0.2605.0
+matrix_mautrix_whatsapp_version: v0.2606.0

 # See: https://mau.dev/mautrix/whatsapp/container_registry
 matrix_mautrix_whatsapp_container_image: "{{ matrix_mautrix_whatsapp_container_image_registry_prefix }}mautrix/whatsapp:{{ matrix_mautrix_whatsapp_version }}"
@@ -153,6 +153,7 @@
  register: matrix_mautrix_whatsapp_support_files_result

 - name: Ensure matrix-mautrix-whatsapp container network is created
+  when: matrix_mautrix_whatsapp_container_network != 'host'
  community.general.docker_network:
    enable_ipv6: "{{ devture_systemd_docker_base_ipv6_enabled }}"
    name: "{{ matrix_mautrix_whatsapp_container_network }}"
@@ -33,9 +33,11 @@ ExecStartPre={{ devture_systemd_docker_base_host_command_docker }} create \
 			{{ matrix_mautrix_whatsapp_container_image }} \
 			/usr/bin/mautrix-whatsapp -c /config/config.yaml -r /config/registration.yaml --no-update

+{% if matrix_mautrix_whatsapp_container_network != 'host' %}
 {% for network in matrix_mautrix_whatsapp_container_additional_networks %}
 ExecStartPre={{ devture_systemd_docker_base_host_command_docker }} network connect {{ network }} matrix-mautrix-whatsapp
 {% endfor %}
+{% endif %}

 ExecStart={{ devture_systemd_docker_base_host_command_docker }} start --attach matrix-mautrix-whatsapp

@@ -107,6 +107,7 @@
  register: matrix_mautrix_wsproxy_registration_imessage_result

 - name: Ensure mautrix-wsproxy container network is created
+  when: matrix_mautrix_wsproxy_container_network != 'host'
  community.general.docker_network:
    enable_ipv6: "{{ devture_systemd_docker_base_ipv6_enabled }}"
    name: "{{ matrix_mautrix_wsproxy_container_network }}"
@@ -29,9 +29,11 @@ ExecStartPre={{ devture_systemd_docker_base_host_command_docker }} create \
 			{% endfor %}
 			{{ matrix_mautrix_wsproxy_syncproxy_container_image }}

+{% if matrix_mautrix_wsproxy_container_network != 'host' %}
 {% for network in matrix_mautrix_wsproxy_container_additional_networks %}
 ExecStartPre={{ devture_systemd_docker_base_host_command_docker }} network connect {{ network }} matrix-mautrix-wsproxy-syncproxy
 {% endfor %}
+{% endif %}

 ExecStart={{ devture_systemd_docker_base_host_command_docker }} start --attach matrix-mautrix-wsproxy-syncproxy

@@ -32,9 +32,11 @@ ExecStartPre={{ devture_systemd_docker_base_host_command_docker }} create --rm -
 			{{ matrix_mautrix_wsproxy_container_image }} \
 			/usr/bin/mautrix-wsproxy -config /data/config.yaml

+{% if matrix_mautrix_wsproxy_container_network != 'host' %}
 {% for network in matrix_mautrix_wsproxy_container_additional_networks %}
 ExecStartPre={{ devture_systemd_docker_base_host_command_docker }} network connect {{ network }} matrix-mautrix-wsproxy
 {% endfor %}
+{% endif %}

 ExecStart={{ devture_systemd_docker_base_host_command_docker }} start --attach matrix-mautrix-wsproxy

@@ -10,7 +10,7 @@
 matrix_meshtastic_relay_enabled: true

 # renovate: datasource=docker depName=jeremiah-k/mmrelay packageName=ghcr.io/jeremiah-k/mmrelay
-matrix_meshtastic_relay_version: 1.3.7
+matrix_meshtastic_relay_version: 1.3.8
 matrix_meshtastic_relay_container_image: "{{ matrix_meshtastic_relay_container_image_registry_prefix }}jeremiah-k/mmrelay:{{ matrix_meshtastic_relay_version }}"
 matrix_meshtastic_relay_container_image_registry_prefix: "{{ matrix_meshtastic_relay_container_image_registry_prefix_upstream }}"
 matrix_meshtastic_relay_container_image_registry_prefix_upstream: "{{ matrix_meshtastic_relay_container_image_registry_prefix_upstream_default }}"
@@ -36,12 +36,14 @@
  register: matrix_meshtastic_relay_config_result

 - name: Ensure matrix-meshtastic-relay container network is created
+  when:
+    - matrix_meshtastic_relay_connection_type != 'ble'
+    - matrix_meshtastic_relay_container_network != 'host'
  community.general.docker_network:
    enable_ipv6: "{{ devture_systemd_docker_base_ipv6_enabled }}"
    name: "{{ matrix_meshtastic_relay_container_network }}"
    driver: bridge
    driver_options: "{{ devture_systemd_docker_base_container_networks_driver_options }}"
-  when: "matrix_meshtastic_relay_connection_type != 'ble'"

 - name: Ensure matrix-meshtastic-relay.service installed
  ansible.builtin.template:
@@ -43,9 +43,11 @@ ExecStartPre={{ devture_systemd_docker_base_host_command_docker }} create \
 			{{ matrix_meshtastic_relay_container_image }} \
 			mmrelay --config /config/config.yaml

+{% if matrix_meshtastic_relay_container_network != 'host' %}
 {% for network in matrix_meshtastic_relay_container_additional_networks %}
 ExecStartPre={{ devture_systemd_docker_base_host_command_docker }} network connect {{ network }} matrix-meshtastic-relay
 {% endfor %}
+{% endif %}

 ExecStart={{ devture_systemd_docker_base_host_command_docker }} start --attach matrix-meshtastic-relay

@@ -122,6 +122,7 @@
  register: matrix_mx_puppet_groupme_registration_result

 - name: Ensure mx-puppet-groupme container network is created
+  when: matrix_mx_puppet_groupme_container_network != 'host'
  community.general.docker_network:
    enable_ipv6: "{{ devture_systemd_docker_base_ipv6_enabled }}"
    name: "{{ matrix_mx_puppet_groupme_container_network }}"
@@ -32,9 +32,11 @@ ExecStartPre={{ devture_systemd_docker_base_host_command_docker }} create \
 			{% endfor %}
 			{{ matrix_mx_puppet_groupme_container_image }}

+{% if matrix_mx_puppet_groupme_container_network != 'host' %}
 {% for network in matrix_mx_puppet_groupme_container_additional_networks %}
 ExecStartPre={{ devture_systemd_docker_base_host_command_docker }} network connect {{ network }} matrix-mx-puppet-groupme
 {% endfor %}
+{% endif %}

 ExecStart={{ devture_systemd_docker_base_host_command_docker }} start --attach matrix-mx-puppet-groupme

@@ -124,6 +124,7 @@
  register: matrix_mx_puppet_steam_registration_result

 - name: Ensure mx-puppet-steam container network is created
+  when: matrix_mx_puppet_steam_container_network != 'host'
  community.general.docker_network:
    enable_ipv6: "{{ devture_systemd_docker_base_ipv6_enabled }}"
    name: "{{ matrix_mx_puppet_steam_container_network }}"
--- a/Show More
+++ b/Show More
Author	SHA1	Message	Date
Aine	cf396e5558	baibot: add venice wiring	2026-06-28 16:34:06 +01:00
Aine	3fed0f1bb4	add link to Ketesa website <https://ketesa.app >	2026-06-28 11:02:51 +01:00
Slavi Pantaleev	e43add179b	Add matrix_tuwunel_config_ip_range_denylist (mirrors tuwunel's upstream default) As of tuwunel v1.8.0, the ip_range_denylist applies to push gateway delivery as well, so surface it as an Ansible variable using the default/auto/custom merge pattern. The default mirrors tuwunel's own upstream denylist (RFC1918, loopback, multicast, and other unroutable ranges), matching the identical list already used for Synapse's matrix_synapse_url_preview_ip_range_blacklist. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>	2026-06-27 20:39:16 +03:00
renovate[bot]	129d4e74b4	Update ghcr.io/matrix-construct/tuwunel Docker tag to v1.8.0	2026-06-27 20:17:09 +03:00
renovate[bot]	5c390e137f	Update dependency livekit_server to v1.13.2-0	2026-06-27 18:17:06 +03:00
renovate[bot]	682eb2c280	Update ghcr.io/etkecc/baibot Docker tag to v1.24.0	2026-06-26 17:30:34 +03:00
Jason LaGuidice	4fae640b6c	Add renovate and bump version	2026-06-26 07:05:13 +03:00
renovate[bot]	adcae966ed	Update dependency ntfy to v2.25.0-0	2026-06-25 07:41:39 +03:00
renovate[bot]	0a46beb76c	Update dependency click to v8.4.2	2026-06-24 21:48:37 +03:00
renovate[bot]	7bee5f06dc	Update oci.element.io/element-admin Docker tag to v0.1.12	2026-06-24 21:44:11 +03:00
renovate[bot]	b67f7bd3fe	Update docker.io/metio/matrix-alertmanager-receiver Docker tag to v2026.6.24	2026-06-24 16:39:58 +03:00
Slavi Pantaleev	08c733d2e3	matrix-bridge-rustpush: build from upstream's own Dockerfile on self-build The role shipped its own copy of the bridge's Dockerfile and templated it over the cloned source before building. That copy had already drifted from upstream (e.g. missing libheif-plugin-libde265) and required separate maintenance (Renovate bumping the base image here instead of upstream). Build from the cloned repo's own Dockerfile instead, matching every other self-build role (e.g. matrix-bridge-steam). The Dockerfile now tracks the pinned bridge version automatically. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>	2026-06-24 12:13:04 +03:00
Slavi Pantaleev	424c323d03	Announce matrix-rustpush-bridge (iMessage) in the changelog Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>	2026-06-24 11:45:20 +03:00
Jason LaGuidice	11cd178cb2	Add matrix-rustpush-bridge (iMessage) Add the matrix-rustpush-bridge role, a Matrix <-> iMessage bridge built on the mautrix-go bridgev2 framework using RustPush (OpenBubbles backend). Unlike the existing mautrix-imessage/wsproxy bridge, it talks directly to Apple's push notification service, so it needs neither a running Mac nor a wsproxy on the homeserver. Each user supplies a hardware key extracted from a Mac through the bridge bot's login flow. The bridge uses its own bot username and puppet namespace (rustpushbot, rustpush_*) so it does not collide with the wsproxy iMessage bridge. This bridge is in early development and may have stability issues.	2026-06-24 11:17:09 +03:00
Aine	6f57ab8ba1	Baibot v1.23.1 <https://github.com/etkecc/baibot/blob/main/CHANGELOG.md#2026-06-24-version-1231 >	2026-06-24 07:28:07 +01:00
Slavi Pantaleev	4f00ad9bd4	Add support for additional volumes for the livekit-jwt-service component Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>	2026-06-24 07:38:22 +03:00
Hollie Hutchinson	753f8ca7db	Support additional container arguments for matrix-livekit-jwt	2026-06-24 07:36:36 +03:00
renovate[bot]	d06094ffc3	Update ghcr.io/element-hq/element-web Docker tag to v1.12.22	2026-06-24 07:31:58 +03:00
dependabot[bot]	dd37011ffb	Bump actions/cache from 5 to 6 Bumps [actions/cache](https://github.com/actions/cache) from 5 to 6. - [Release notes](https://github.com/actions/cache/releases) - [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md) - [Commits](https://github.com/actions/cache/compare/v5...v6) --- updated-dependencies: - dependency-name: actions/cache dependency-version: '6' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>	2026-06-24 07:31:47 +03:00
renovate[bot]	e3b37ac350	Update ghcr.io/etkecc/baibot Docker tag to v1.23.0 (#5353 ) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>	2026-06-23 07:22:40 +01:00
renovate[bot]	be68aaa870	Update dependency grafana to v13	2026-06-23 09:22:25 +03:00
renovate[bot]	36e94e4df7	Update ghcr.io/etkecc/fluffychat-web Docker tag to v2.7.2 (#5352 ) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>	2026-06-22 18:13:41 +01:00
renovate[bot]	37d8cf4f2c	Update ghcr.io/element-hq/element-call Docker tag to v0.20.2 (#5351 ) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>	2026-06-22 18:13:17 +01:00
renovate[bot]	fd340a14f9	Update dependency cinny to v4.12.3-0 (#5350 ) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>	2026-06-22 18:12:55 +01:00
LunarFox	73f8ca75b3	Update readme for NPM NPM "Proxy Hosts" page is only for http/https 80/443 - it is not possible to add a name such as "matrix.example.com:port". Instead, the Streams page might work for what is intended here (federation traffic) - to proxy stream anything on 8448 to 8449.	2026-06-22 10:11:54 +03:00
Aine	81e156b4bf	rollback etherpad to v2.7.2 (v2.7.3 is broken)	2026-06-21 13:40:23 +01:00
Aine	6ee65072ef	FluffyChat v2.7.0 <https://github.com/krille-chan/fluffychat/blob/main/CHANGELOG.md#v270 >	2026-06-21 11:45:59 +01:00
renovate[bot]	8b13017281	Update ghcr.io/etkecc/baibot Docker tag to v1.22.0	2026-06-21 09:10:18 +03:00
renovate[bot]	e0f37e3912	Update forgejo.ellis.link/continuwuation/continuwuity Docker tag to v0.5.10	2026-06-20 21:15:40 +03:00
Aine	4ff28586f4	Ketesa v1.3.0 <https://github.com/etkecc/ketesa/releases/tag/v1.3.0 >	2026-06-19 19:56:25 +01:00
Catalan Lover	19bcdc78fd	Gate Continuwuity ReCAPTCHA config on both keys being configured Continuwuity has no native enable-captcha toggle; it enables the ReCAPTCHA registration flow based on the presence of a private site key. The playbook previously always rendered empty `recaptcha_site_key`/`recaptcha_private_site_key` values, which made Continuwuity enable a broken captcha flow and break registration in some clients. The keys are now only rendered when both are configured, gated by a derived `matrix_continuwuity_recaptcha_enabled` flag in the role's `vars/main.yml`. A consistency check fails the play when exactly one of the two keys is set. Fixes #5329 Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>	2026-06-19 06:24:06 +03:00
renovate[bot]	914dd3ed62	Update actions/checkout action to v7	2026-06-19 05:51:12 +03:00
renovate[bot]	3250de7842	Update dependency sable to v1.18.3-0	2026-06-18 10:10:27 +03:00
renovate[bot]	af4d379573	Update dependency certifi to v2026.6.17	2026-06-18 09:58:58 +03:00
renovate[bot]	12e63739b9	Update ghcr.io/element-hq/matrix-authentication-service Docker tag to v1.19.0	2026-06-18 09:58:41 +03:00
renovate[bot]	6b76368a9c	Update nginx Docker tag to v1.31.2	2026-06-18 09:56:48 +03:00
renovate[bot]	b87fcc4674	Update ghcr.io/etkecc/buscarron Docker tag to v1.5.0	2026-06-18 09:56:34 +03:00
renovate[bot]	00e5aed0eb	Update dependency sable to v1.18.2-0	2026-06-17 21:09:47 +03:00
renovate[bot]	6926a04e07	Update docker.io/metio/matrix-alertmanager-receiver Docker tag to v2026.6.17	2026-06-17 21:09:15 +03:00
renovate[bot]	50408d699f	Update dock.mau.dev/mautrix/meta Docker tag to v0.2606.0	2026-06-17 06:20:14 +03:00
renovate[bot]	4bf6093a5d	Update ghcr.io/element-hq/synapse Docker tag to v1.155.0	2026-06-17 06:20:05 +03:00
renovate[bot]	f0fb23dfa9	Update dock.mau.dev/mautrix/signal Docker tag to v0.2606.0	2026-06-17 06:18:38 +03:00
renovate[bot]	8e41f04368	Update dock.mau.dev/mautrix/slack Docker tag to v0.2606.0	2026-06-17 06:18:29 +03:00
renovate[bot]	b863de00e8	Update dock.mau.dev/mautrix/telegram Docker tag to v0.2606.0	2026-06-17 06:18:21 +03:00
renovate[bot]	4f5904db0a	Update dock.mau.dev/mautrix/whatsapp Docker tag to v0.2606.0	2026-06-17 06:18:13 +03:00
renovate[bot]	802f687513	Update dock.mau.dev/mautrix/twitter Docker tag to v0.2606.0	2026-06-17 06:18:02 +03:00
renovate[bot]	b7b5dbf9c7	Update dependency traefik_certs_dumper to v2.11.4-0	2026-06-16 12:34:02 +03:00
renovate[bot]	a79b8034e6	Update dependency prek to v0.4.5	2026-06-15 17:36:58 +03:00
renovate[bot]	9acdc445a8	Update dependency sable to v1.18.1-0	2026-06-15 09:22:05 +03:00
Slavi Pantaleev	731804ba32	Update LiveKit Server (v1.12.0-0 → v1.13.1-0) Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>	2026-06-15 08:50:34 +03:00
renovate[bot]	b7969138dd	Update dependency sable to v1.18.0-0	2026-06-14 12:31:50 +03:00
Slavi Pantaleev	ec6e006b42	Update Prometheus (v3.12.0-0 → v3.12.0-1) Adds validation that catches old-style prometheus_process_extra_arguments overrides which lose the --config.file default. See https://github.com/mother-of-all-self-hosting/ansible-role-prometheus/issues/35 Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>	2026-06-12 08:47:26 +03:00
Bart van der Braak	36f3d4c4a5	Fix Dockerfile path when self building Element Web container image	2026-06-11 14:21:09 +03:00
renovate[bot]	fda7664a40	Update dependency traefik to v3.7.5-0	2026-06-11 09:06:38 +03:00
renovate[bot]	9d143f8865	Update joseluisq/static-web-server Docker tag to v2.43.0	2026-06-11 09:03:57 +03:00
Slavi Pantaleev	67663be7a9	Restrict Renovate to the v0 tag scheme for mautrix images Prevents Renovate from proposing "major" updates to the registry-only calver tags (vYY.MM[.PATCH]), which break further updates and self-building. See the previous commit for details. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>	2026-06-10 23:59:09 +03:00
Slavi Pantaleev	45c3b751d9	Switch mautrix-signal back to the v0 versioning scheme (v0.2605.0) mautrix publishes each release under two tag schemes: v0.YYMM.PATCH (also used for git tags, due to Go's module path requirements for major versions >= 2) and a calver vYY.MM[.PATCH] scheme that exists only on the Docker registry. We switched mautrix-signal to the calver scheme in `3564155a7`, which left it silently stuck at v26.02.2: the calver tags have an inconsistent number of components (v26.02.2 vs v26.05), and Renovate's docker versioning only offers updates between tags with the same number of dot-separated parts. It also broke self-building, which uses the version as a git ref, and calver tags do not exist in git. Going back to the v0 scheme (used by all other mautrix bridges) fixes both problems and upgrades signal from the February release to the current May one. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>	2026-06-10 23:58:30 +03:00
Slavi Pantaleev	ce8beb5e9d	Fix matrix-appservice-kakaotalk referencing appservice-discord network variables The additional-networks connect loop in the kakaotalk systemd unit template iterated over matrix_appservice_discord_container_additional_networks, a copy-paste leftover from the discord bridge role. The host-network guard added in #5310 mirrored the same wrong variable. This means the kakaotalk container was being connected to the networks computed for the discord bridge instead of its own, potentially leaving it without access to its homeserver/database networks depending on the discord bridge's configuration. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>	2026-06-10 23:50:11 +03:00
Kevin Veen-Birkenbach	bd6e08a93e	Allow host network mode for MDAD-managed containers (#5310 ) * feat: support container_network=host across all roles + systemd templates Mirror the pattern Slavi introduced for matrix-coturn (`aafa8f0`) across the fork: every 'Ensure X container network is created' task gets a 'when: <var> not in ["", "host"]' guard so MDAD does not try to docker_network create a network literally named 'host' (returns 403, since host is a pre-defined Docker network). Mirror the same guard in every systemd unit template that does 'ExecStartPre=docker network connect <addnet> <container>' loops over matrix_<role>_container_additional_networks: skip the connects when the container is on host networking (where additional --network attaches are invalid). Unblocks DiD setups where MDAD-managed containers share their host's network namespace (matrix-mdad outer compose service joined to central postgres/openldap networks) to reach external services on the outer Docker daemon. * Simplify container network guards (!= 'host') and fix duplicate when Guarding on the empty string ('') as well was misleading: systemd unit templates still render an unconditional --network= flag, so an empty network value produces a broken docker create command. Only 'host' is actually supported, so only guard on that. This also matches the existing convention in the Traefik role (when: traefik_container_network != 'host'). Also fix a duplicate when key in the meshtastic-relay role, where the network-creation task already had a when condition - the two are now combined into a list. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> --------- Co-authored-by: Slavi Pantaleev <slavi@devture.com> Co-authored-by: Claude Fable 5 <noreply@anthropic.com>	2026-06-10 23:48:03 +03:00
renovate[bot]	550fc03d60	Update docker.io/metio/matrix-alertmanager-receiver Docker tag to v2026.6.10	2026-06-10 16:42:25 +03:00
renovate[bot]	e1db9c7876	Update ghcr.io/element-hq/element-web Docker tag to v1.12.21	2026-06-10 09:18:37 +03:00
renovate[bot]	906de0a1a4	Update dependency jitsi to v11031	2026-06-09 08:12:34 +03:00
renovate[bot]	9342507f8a	Update ghcr.io/element-hq/element-call Docker tag to v0.20.1	2026-06-08 14:53:02 +03:00
renovate[bot]	4fd6183273	Update jeremiah-k/mmrelay Docker tag to v1.3.8	2026-06-07 23:43:04 +03:00
renovate[bot]	0ce46bae94	Update dependency traefik to v3.7.4-0	2026-06-06 08:09:03 +03:00
renovate[bot]	af37ca09cc	Update ghcr.io/matrix-construct/tuwunel Docker tag to v1.7.1	2026-06-06 07:16:06 +03:00
renovate[bot]	28165b5892	Update ghcr.io/etkecc/baibot Docker tag to v1.21.1	2026-06-05 13:16:27 +03:00
renovate[bot]	700976c47c	Update dependency ntfy to v2.24.0-0	2026-06-05 12:56:39 +03:00
renovate[bot]	66eabbb0ea	Update dependency traefik to v3.7.3-0	2026-06-05 12:56:21 +03:00
Suguru Hirahara	61a29cf718	Update links to the Sable repository Signed-off-by: Suguru Hirahara <did:key:z6MkvVZk1A3KBApWJXv2Ju4H14ErDfRGxh8zxdXSZ4vACDg5>	2026-06-04 23:57:39 -04:00
renovate[bot]	47a4037ea2	Update ghcr.io/element-hq/synapse Docker tag to v1.154.0	2026-06-04 22:12:03 +03:00
renovate[bot]	93ec9095d5	Update ghcr.io/element-hq/matrix-authentication-service Docker tag to v1.18.0	2026-06-04 18:50:49 +03:00
renovate[bot]	92b7fed717	Update dependency prek to v0.4.4	2026-06-04 13:00:46 +03:00
Slavi Pantaleev	a7be5a2088	Fix self-build git ref for LiveKit JWT Service matrix_livekit_jwt_service_container_repo_version interpolated livekit_server_version (the LiveKit Server role's version) instead of this role's own matrix_livekit_jwt_service_version, so self-builds checked out the wrong git tag. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>	2026-06-04 10:17:07 +03:00
Slavi Pantaleev	738bff7a00	Upgrade LiveKit JWT Service (lk-jwt-service) to v0.5.0 v0.5.0 makes LIVEKIT_FULL_ACCESS_HOMESERVERS a required setting and drops the implicit `*` wildcard default upstream. Split the full-access-homeservers list into _default/_auto/_custom parts (following the convention used for other variables in this role), with a sane _default of the homeserver's own domain. This also lets group_vars/matrix_servers drop its now-redundant override. Add a validate_config.yml check requiring the setting to be defined. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>	2026-06-04 10:08:26 +03:00
renovate[bot]	6b36fd5a03	Update docker.io/metio/matrix-alertmanager-receiver Docker tag to v2026.6.3	2026-06-04 07:10:26 +03:00
renovate[bot]	a9faa9e306	Update astral-sh/setup-uv action to v8.2.0	2026-06-04 07:10:05 +03:00
renovate[bot]	9634cc3f79	Update dependency snowballstemmer to v3.1.1	2026-06-03 07:41:47 +03:00
renovate[bot]	551c802122	Update ghcr.io/etkecc/baibot Docker tag to v1.20.0	2026-06-03 00:06:29 +03:00
renovate[bot]	3c7e67c7fc	Update dependency idna to v3.18	2026-06-02 23:52:17 +03:00
c-bg	612fac5bce	fixed typo in link to chapter	2026-06-01 20:00:22 +03:00
renovate[bot]	f3151efa08	Update dock.mau.dev/mautrix/meta Docker tag to v0.2605.1	2026-05-30 08:34:21 +03:00
Norman Ziegner	971c5b954c	Add Synapse support for MSC4429 Introduces the `matrix_synapse_experimental_features_msc4429_enabled` variable (disabled by default), allowing Synapse to notify clients using the legacy /sync endpoint of profile changes for other users. See <https://github.com/matrix-org/matrix-spec-proposals/pull/4429> Signed-off-by: Norman Ziegner <n.ziegner@hzdr.de>	2026-05-29 13:41:11 +03:00
renovate[bot]	079169809f	Update dependency prometheus to v3.12.0-0	2026-05-29 08:55:36 +03:00
renovate[bot]	60eb52d791	Update dependency idna to v3.17	2026-05-29 08:33:43 +03:00
renovate[bot]	ee0e74f1cf	Update dependency docutils to v0.23	2026-05-28 07:30:58 +03:00
renovate[bot]	f92c5fee18	Update ghcr.io/element-hq/element-web Docker tag to v1.12.20	2026-05-28 07:28:24 +03:00
renovate[bot]	a5ebb77eeb	Update ghcr.io/element-hq/element-web Docker tag to v1.12.19	2026-05-27 15:22:04 +03:00
renovate[bot]	27826e69ca	Update ghcr.io/etkecc/baibot Docker tag to v1.19.3	2026-05-27 10:37:41 +03:00
renovate[bot]	5125cb219c	Update ghcr.io/jasonlaguidice/matrix-steam-bridge Docker tag to v1.2.0	2026-05-27 10:18:39 +03:00
renovate[bot]	8afcb2ee2c	Update dependency prek to v0.4.3	2026-05-27 10:18:29 +03:00