This adds the [Matrix Authentication Service](https://element-hq.github.io/matrix-authentication-service/index.html) role and playbook.

It configures a slightly opinionated setup bound to running Synapse and without any mailing configuration.
The role installs MAS via podman quadlet with minimal perimssions along with a Postgres 18 instance.

Note:
- Secret configs need to be manually set up, before this role can be used
- Not all MAS configs can be configured via variables, only instance-specific settings are exposed (e.g. hostnames or secrets)
- Migrations from Synapse need to be done manually
- Config changes to Synapse also need to be done manually

@@ -0,0 +4,4 @@
+  listen: "matrix authentication service selinux context changed"
+
+- name: Restart matrix authentication service-postgres service.
+  ansible.builtin.systemd:

@@ -0,0 +79,4 @@
+      ansible.builtin.stat:
+        path: "{{ caddy_install_dir }}/config"
+      become: true
+      register: caddy_stat_config_dir

@@ -0,0 +13,4 @@
+
+HealthCmd = CMD pg_isready -U mas -d matrix_authentication_service
+
+# AutoUpdate = registry

@@ -0,0 +20,4 @@
+User = 70
+Group = 70
+
+# NoNewPrivileges = true

@@ -0,0 +13,4 @@
+Image = {{ matrix_authentication_service_containerimage }}:{{ matrix_authentication_service_image_tag }}
+ContainerName = matrix-authentication-service
+
+# AutoUpdate = registry