30810eecd7
Some checks failed
Create issues from TODOs / todos (push) Failing after 3s
Close inactive issues / close-issues (push) Has been cancelled
Deploy GitHub Pages / deploy-preview (push) Has been cancelled
CI / ⚙️ Variables Setup (push) Has been cancelled
CI / ⚙️ Test Guard (push) Has been cancelled
CI / 🚀 Notify external services - draft (push) Has been cancelled
CI / 📦 Build Packages (push) Has been cancelled
CI / 📦 Meteor Build (coverage) (push) Has been cancelled
CI / 📦 Meteor Build (production) (push) Has been cancelled
CI / 🚢 Build Docker (amd64, [account-service presence-service omnichannel-transcript-service], ${{ (github.event_name != 'release' && github.ref != 'refs/heads/develop') && 'coverage' || 'production' }}) (push) Has been cancelled
CI / 🚢 Build Docker (amd64, [account-service presence-service omnichannel-transcript-service], fips) (push) Has been cancelled
CI / 🚢 Build Docker (amd64, [authorization-service queue-worker-service ddp-streamer-service], ${{ (github.event_name != 'release' && github.ref != 'refs/heads/develop') && 'coverage' || 'production' }}) (push) Has been cancelled
CI / 🚢 Build Docker (amd64, [authorization-service queue-worker-service ddp-streamer-service], fips) (push) Has been cancelled
CI / 🚢 Build Docker (amd64, [rocketchat], ${{ (github.event_name != 'release' && github.ref != 'refs/heads/develop') && 'coverage' || 'production' }}) (push) Has been cancelled
CI / 🚢 Build Docker (amd64, [rocketchat], coverage) (push) Has been cancelled
CI / 🚢 Build Docker (amd64, [rocketchat], fips) (push) Has been cancelled
CI / 🚢 Build Docker (arm64, [account-service presence-service omnichannel-transcript-service], ${{ (github.event_name != 'release' && github.ref != 'refs/heads/develop') && 'coverage' || 'production' }}) (push) Has been cancelled
CI / 🚢 Build Docker (arm64, [authorization-service queue-worker-service ddp-streamer-service], ${{ (github.event_name != 'release' && github.ref != 'refs/heads/develop') && 'coverage' || 'production' }}) (push) Has been cancelled
CI / 🚢 Build Docker (arm64, [rocketchat], ${{ (github.event_name != 'release' && github.ref != 'refs/heads/develop') && 'coverage' || 'production' }}) (push) Has been cancelled
CI / 🚢 Build Docker (arm64, [rocketchat], coverage) (push) Has been cancelled
CI / 🚢 Publish Docker Images (ghcr.io) (push) Has been cancelled
CI / 📦 Track Image Sizes (push) Has been cancelled
CI / 🔎 Code Check - Action Lint (push) Has been cancelled
CI / 🔎 Code Check (push) Has been cancelled
CI / 🔨 Test Storybook (push) Has been cancelled
CI / 🔨 Test Unit (push) Has been cancelled
CI / 🔨 Test API (CE) (push) Has been cancelled
CI / 🔨 Test API Livechat (CE) (push) Has been cancelled
CI / 🔨 Test UI (CE) (push) Has been cancelled
CI / 🔨 Test API (EE) (push) Has been cancelled
CI / 🔨 Test API Livechat (EE) (push) Has been cancelled
CI / 🔨 Test API Apps (deno-runtime - EE) (push) Has been cancelled
CI / 🔨 Test UI (EE) (push) Has been cancelled
CI / 🔨 Test API (FIPS) (push) Has been cancelled
CI / 🔨 Test API Livechat (FIPS) (push) Has been cancelled
CI / 🔨 Test UI (FIPS) (push) Has been cancelled
CI / 🔨 Test Federation Matrix (push) Has been cancelled
CI / 📊 Report Coverage (push) Has been cancelled
CI / ✅ Tests Done (push) Has been cancelled
CI / 🚀 Publish build assets (push) Has been cancelled
CI / 🚀 Publish Docker Images (DockerHub) (push) Has been cancelled
CI / 🚀 Notify external services (push) Has been cancelled
CI / Update Version Durability (push) Has been cancelled
Release / Release (push) Has been cancelled
Auto-close duplicate issues / auto-close-duplicates (push) Failing after 1s
Code scanning - action / CodeQL-Build (push) Failing after 1s
154 lines
3.1 KiB
YAML
154 lines
3.1 KiB
YAML
# Configuration file for Synapse.
|
|
server_name: "hs1"
|
|
pid_file: /data/hs1.pid
|
|
|
|
listeners:
|
|
- port: 8008
|
|
tls: false
|
|
type: http
|
|
x_forwarded: true
|
|
resources:
|
|
- names: [client, federation]
|
|
|
|
use_x_forwarded_for: true
|
|
serve_server_wellknown: true
|
|
|
|
database:
|
|
name: sqlite3
|
|
args:
|
|
database: /data/hs1.db
|
|
|
|
log_config: "/data/hs1.log.config"
|
|
media_store_path: /data/media_store
|
|
|
|
registration_shared_secret: "3l5H.Y5urc5@gKwYMe2^abk@nf.U_M6iyMgP,j&OL6pcSGrUQE"
|
|
report_stats: false
|
|
macaroon_secret_key: "3II&OLx=,6RcC&E~iksWi:tUU4J.~reK:MdU&JAPhlaGIL*+IA"
|
|
form_secret: "B2EuUMKfg&.BsU;#DZ9;E,baB^wc=lV--F_PwkRLZvk=LHk+U4"
|
|
signing_key_path: "/data/hs1.signing.key"
|
|
|
|
trusted_key_servers: []
|
|
# - server_name: "matrix.org"
|
|
# accept_keys_insecurely: true
|
|
|
|
federation_client_minimum_tls_version: 1.2
|
|
federation_verify_certificates: false
|
|
suppress_key_server_warning: true
|
|
|
|
enable_registration: true
|
|
enable_registration_without_verification: true
|
|
allow_public_rooms_over_federation: true
|
|
|
|
password_config:
|
|
enabled: true
|
|
localdb_enabled: true
|
|
policy:
|
|
minimum_length: 1
|
|
require_lowercase: false
|
|
require_uppercase: false
|
|
require_digit: false
|
|
require_symbol: false
|
|
|
|
# Optionally, add your Docker network to the whitelist
|
|
ip_range_whitelist:
|
|
- '0.0.0.0/0'
|
|
|
|
# --------------------------------------------------------------------
|
|
# Development rate limits (set very high)
|
|
# --------------------------------------------------------------------
|
|
|
|
# Messaging
|
|
rc_message:
|
|
per_second: 10000
|
|
burst_count: 10000
|
|
|
|
# Registration
|
|
rc_registration:
|
|
per_second: 10000
|
|
burst_count: 10000
|
|
|
|
# Registration token validity checks
|
|
rc_registration_token_validity:
|
|
per_second: 10000
|
|
burst_count: 10000
|
|
|
|
# Room creation
|
|
rc_room_creation:
|
|
per_second: 10000
|
|
burst_count: 10000
|
|
|
|
# Login (IP, account, and failed-attempt buckets)
|
|
rc_login:
|
|
address:
|
|
per_second: 10000
|
|
burst_count: 10000
|
|
account:
|
|
per_second: 10000
|
|
burst_count: 10000
|
|
failed_attempts:
|
|
per_second: 10000
|
|
burst_count: 10000
|
|
|
|
# Joins
|
|
rc_joins:
|
|
local:
|
|
per_second: 10000
|
|
burst_count: 10000
|
|
remote:
|
|
per_second: 10000
|
|
burst_count: 10000
|
|
|
|
# Limit recent joins per room
|
|
rc_joins_per_room:
|
|
per_second: 10000
|
|
burst_count: 10000
|
|
|
|
# Invites
|
|
rc_invites:
|
|
per_room:
|
|
per_second: 10000
|
|
burst_count: 10000
|
|
per_user:
|
|
per_second: 10000
|
|
burst_count: 10000
|
|
|
|
# 3PID validation (email/phone)
|
|
rc_3pid_validation:
|
|
per_second: 10000
|
|
burst_count: 10000
|
|
|
|
# To-device and key requests
|
|
rc_to_device:
|
|
per_second: 10000
|
|
burst_count: 10000
|
|
rc_key_requests:
|
|
per_second: 10000
|
|
burst_count: 10000
|
|
|
|
# Presence / typing / receipts / read markers
|
|
rc_presence:
|
|
per_second: 10000
|
|
burst_count: 10000
|
|
rc_typing:
|
|
per_second: 10000
|
|
burst_count: 10000
|
|
rc_read_receipts:
|
|
per_second: 10000
|
|
burst_count: 10000
|
|
rc_read_markers:
|
|
per_second: 10000
|
|
burst_count: 10000
|
|
|
|
# Room-admin redactions
|
|
rc_admin_redaction:
|
|
per_second: 10000
|
|
burst_count: 10000
|
|
|
|
# Federation (uses *different* keys, not per_second/burst_count)
|
|
rc_federation:
|
|
window_size: 10000 # ms
|
|
sleep_limit: 10000
|
|
sleep_delay: 0 # ms
|
|
reject_limit: 10000
|
|
concurrent: 10000
|
|
# vim:ft=yaml |