snapshot of https://github.com/RocketChat/Rocket.Chat.git (develop, 2026-09-16; blobs > 131072B omitted)

ee/packages/federation-matrix/docker-compose/element/config.json

@@ -0,0 +1,19 @@
+{
+	"default_server_config": {
+	  "m.homeserver": {
+		"base_url": "https://hs1",
+		"server_name": "hs1"
+	  },
+	  "m.identity_server": {
+		"base_url": "https://vector.im"
+	  }
+	},
+	"disable_password_rules": true,
+	"disable_custom_urls": false,
+	"disable_guests": false,
+	"brand": "Element",
+	"enable_presence_by_hs_url": {
+	  "https://hs1": false,
+	  "https://rc1": false
+	}
+}

ee/packages/federation-matrix/docker-compose/hs1/homeserver.yaml

@@ -0,0 +1,154 @@
+# Configuration file for Synapse.
+server_name: "hs1"
+pid_file: /data/hs1.pid
+
+listeners:
+  - port: 8008
+    tls: false
+    type: http
+    x_forwarded: true
+    resources:
+      - names: [client, federation]
+
+use_x_forwarded_for: true
+serve_server_wellknown: true
+
+database:
+  name: sqlite3
+  args:
+    database: /data/hs1.db
+
+log_config: "/data/hs1.log.config"
+media_store_path: /data/media_store
+
+registration_shared_secret: "3l5H.Y5urc5@gKwYMe2^abk@nf.U_M6iyMgP,j&OL6pcSGrUQE"
+report_stats: false
+macaroon_secret_key: "3II&OLx=,6RcC&E~iksWi:tUU4J.~reK:MdU&JAPhlaGIL*+IA"
+form_secret: "B2EuUMKfg&.BsU;#DZ9;E,baB^wc=lV--F_PwkRLZvk=LHk+U4"
+signing_key_path: "/data/hs1.signing.key"
+
+trusted_key_servers: []
+  # - server_name: "matrix.org"
+  #   accept_keys_insecurely: true
+
+federation_client_minimum_tls_version: 1.2
+federation_verify_certificates: false
+suppress_key_server_warning: true
+
+enable_registration: true
+enable_registration_without_verification: true
+allow_public_rooms_over_federation: true
+
+password_config:
+  enabled: true
+  localdb_enabled: true
+  policy:
+    minimum_length: 1
+    require_lowercase: false
+    require_uppercase: false
+    require_digit: false
+    require_symbol: false
+
+# Optionally, add your Docker network to the whitelist
+ip_range_whitelist:
+  - '0.0.0.0/0'
+
+# --------------------------------------------------------------------
+# Development rate limits (set very high)
+# --------------------------------------------------------------------
+
+# Messaging
+rc_message:
+  per_second: 10000
+  burst_count: 10000
+
+# Registration
+rc_registration:
+  per_second: 10000
+  burst_count: 10000
+
+# Registration token validity checks
+rc_registration_token_validity:
+  per_second: 10000
+  burst_count: 10000
+
+# Room creation
+rc_room_creation:
+  per_second: 10000
+  burst_count: 10000
+
+# Login (IP, account, and failed-attempt buckets)
+rc_login:
+  address:
+    per_second: 10000
+    burst_count: 10000
+  account:
+    per_second: 10000
+    burst_count: 10000
+  failed_attempts:
+    per_second: 10000
+    burst_count: 10000
+
+# Joins
+rc_joins:
+  local:
+    per_second: 10000
+    burst_count: 10000
+  remote:
+    per_second: 10000
+    burst_count: 10000
+
+# Limit recent joins per room
+rc_joins_per_room:
+  per_second: 10000
+  burst_count: 10000
+
+# Invites
+rc_invites:
+  per_room:
+    per_second: 10000
+    burst_count: 10000
+  per_user:
+    per_second: 10000
+    burst_count: 10000
+
+# 3PID validation (email/phone)
+rc_3pid_validation:
+  per_second: 10000
+  burst_count: 10000
+
+# To-device and key requests
+rc_to_device:
+  per_second: 10000
+  burst_count: 10000
+rc_key_requests:
+  per_second: 10000
+  burst_count: 10000
+
+# Presence / typing / receipts / read markers
+rc_presence:
+  per_second: 10000
+  burst_count: 10000
+rc_typing:
+  per_second: 10000
+  burst_count: 10000
+rc_read_receipts:
+  per_second: 10000
+  burst_count: 10000
+rc_read_markers:
+  per_second: 10000
+  burst_count: 10000
+
+# Room-admin redactions
+rc_admin_redaction:
+  per_second: 10000
+  burst_count: 10000
+
+# Federation (uses *different* keys, not per_second/burst_count)
+rc_federation:
+  window_size: 10000      # ms
+  sleep_limit: 10000
+  sleep_delay: 0          # ms
+  reject_limit: 10000
+  concurrent: 10000
+# vim:ft=yaml

ee/packages/federation-matrix/docker-compose/hs1/hs1.log.config

@@ -0,0 +1,39 @@
+version: 1
+
+formatters:
+  precise:
+
+    format: '%(asctime)s - %(name)s - %(lineno)d - %(levelname)s - %(request)s - %(message)s'
+
+
+handlers:
+
+
+  console:
+    class: logging.StreamHandler
+    formatter: precise
+
+loggers:
+    # This is just here so we can leave `loggers` in the config regardless of whether
+    # we configure other loggers below (avoid empty yaml dict error).
+    _placeholder:
+        level: "INFO"
+
+
+
+    synapse.storage.SQL:
+        # beware: increasing this to DEBUG will make synapse log sensitive
+        # information such as access tokens.
+        level: INFO
+
+
+
+
+root:
+    level: INFO
+
+
+    handlers: [console]
+
+
+disable_existing_loggers: false

ee/packages/federation-matrix/docker-compose/hs1/hs1.signing.key

@@ -0,0 +1 @@
+ed25519 a_HDhg WntaJ4JP5WbZZjDShjeuwqCybQ5huaZAiowji7tnIEw

ee/packages/federation-matrix/docker-compose/traefik/certs/.gitignore

@@ -0,0 +1,18 @@
+# Allow only the certificates needed for CI testing
+# Override the root .gitignore rule for *.pem
+
+# Allow rc1 certificates
+!rc1.pem
+!rc1-key.pem
+
+# Allow hs1 certificates
+!hs1.pem
+!hs1-key.pem
+
+# Allow element certificates
+!element.pem
+!element-key.pem
+
+# Keep ignoring all other .pem files
+*.pem
+

ee/packages/federation-matrix/docker-compose/traefik/certs/ca/rootCA.crt

@@ -0,0 +1,30 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

ee/packages/federation-matrix/docker-compose/traefik/dynamic_conf.yml

@@ -0,0 +1,13 @@
+tls:
+  certificates:
+    # synapse1
+    - certFile: "/etc/traefik/certs/hs1.pem"
+      keyFile: "/etc/traefik/certs/hs1-key.pem"
+
+    # rocket.chat rc1 (container)
+    - certFile: "/etc/traefik/certs/rc1.pem"
+      keyFile: "/etc/traefik/certs/rc1-key.pem"
+
+    # element
+    - certFile: "/etc/traefik/certs/element.pem"
+      keyFile: "/etc/traefik/certs/element-key.pem"

ee/packages/federation-matrix/docker-compose/traefik/traefik.yml

@@ -0,0 +1,20 @@
+entryPoints:
+  web:
+    address: ":80"
+  websecure:
+    address: ":443"
+
+providers:
+  docker:
+    exposedByDefault: false
+  file:
+    filename: "/etc/traefik/dynamic_conf.yml"
+
+api:
+  dashboard: false
+  insecure: false
+
+# accessLog:
+#   filePath: "/logs/access.log"
+#   bufferingSize: 100
+#   format: json