You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
126 lines
3.0 KiB
126 lines
3.0 KiB
5 years ago
|
---
|
||
|
|
|
||
|
|
# Synapse version to deploy
|
||
|
|
synapse_version: 1.12.1
|
||
|
|
|
||
|
|
# Synapse install dir
|
||
|
|
synapse_root_dir: /opt/matrix/synapse
|
||
|
|
|
||
|
|
# User account which run the daemon
|
||
|
|
synapse_user: synapse
|
||
|
|
|
||
|
|
# Max amount of memory the daemon is allowed (in MB)
|
||
|
|
synapse_max_mem: 4096
|
||
|
|
|
||
|
|
# PostgreSQL
|
||
|
|
synapse_pg_create_db: True
|
||
|
|
synapse_pg_db_server: "{{ pg_server | default('localhost') }}"
|
||
|
|
synapse_pg_db_port: 5432
|
||
|
|
synapse_pg_db_name: synapse
|
||
|
|
synapse_pg_db_user: synapse
|
||
|
|
# synapse_pg_db_pass: secret
|
||
|
|
|
||
|
|
# Server name. Mandatory
|
||
|
|
# synapse_server_name:
|
||
|
|
# synapse_public_baseurl: https://matrix.example.com
|
||
|
|
|
||
|
|
# Should synapse handle TLS
|
||
|
|
synapse_tls: True
|
||
|
|
|
||
|
|
# Limit of events for get and sync. -1 for no limit
|
||
|
|
synapse_timeline_limit: -1
|
||
|
|
|
||
|
|
# Ports and bind addresses
|
||
|
|
synapse_tls_port: 8448
|
||
|
|
synapse_tls_listen_ip:
|
||
|
|
- 0.0.0.0
|
||
|
|
synapse_port: 8008
|
||
|
|
synapse_listen_ip:
|
||
|
|
- 0.0.0.0
|
||
|
|
# List of IP able to access the ports
|
||
|
|
synapse_tls_src_ip:
|
||
|
|
- 0.0.0.0/0
|
||
|
|
synapse_src_ip:
|
||
|
|
- 0.0.0.0/0
|
||
|
|
|
||
|
|
# You can restrict federation with a list of servers. * means everything
|
||
|
|
# Empty list means no federation is allowed
|
||
|
|
synapse_federation_domain_whitelist:
|
||
|
|
- '*'
|
||
|
|
|
||
|
|
synapse_federation_ip_blacklist:
|
||
|
|
- 127.0.0.0/8
|
||
|
|
- 100.64.0.0/10
|
||
|
|
- 169.254.0.0/16
|
||
|
|
|
||
|
|
# Limits
|
||
|
|
synapse_rc_message_per_sec: 30
|
||
|
|
synapse_rc_message_burst: 100.0
|
||
|
|
synapse_rc_login_per_sec: 3
|
||
|
|
synapse_rc_login_burst: 10
|
||
|
|
synapse_upload_max_size: 20M
|
||
|
|
|
||
|
|
# Registration settings
|
||
|
|
synapse_enable_registration: False
|
||
|
|
synapse_allow_guest_access: False
|
||
|
|
# If set, allow registration if you know this key. Even if registration is otherwise disabled
|
||
|
|
# synapse_registration_shared_secret:
|
||
|
|
# Set both public and private key to enable reCaptcha on registration
|
||
|
|
# synapse_recaptcha_public_key:
|
||
|
|
# synapse_recaptcha_private_key:
|
||
|
|
|
||
|
|
# URL Preview
|
||
|
|
synapse_url_preview: True
|
||
|
|
synapse_url_preview_ip_range_blacklist:
|
||
|
|
- '127.0.0.0/8'
|
||
|
|
- '10.0.0.0/8'
|
||
|
|
- '172.16.0.0/12'
|
||
|
|
- '192.168.0.0/16'
|
||
|
|
- '100.64.0.0/10'
|
||
|
|
- '169.254.0.0/16'
|
||
|
|
synapse_url_preview_ip_range_whitelist: []
|
||
|
|
synapse_max_spider_size: 10M
|
||
|
|
|
||
|
|
# Turn configuration, for VoIP/Video using WebRTC
|
||
|
|
# synapse_turn_uris:
|
||
|
|
# - turns:turn.example.com
|
||
|
|
# - turns:turn.example.com?transport=tcp
|
||
|
|
# synapse_turn_shared_secret:
|
||
|
|
# Set this to true if you want guests to do VoIP/Video calls too
|
||
|
|
synapse_turn_allow_guests: False
|
||
|
|
|
||
|
|
# Third party ID servers
|
||
|
|
synapse_trusted_third_party_id_servers:
|
||
|
|
- matrix.org
|
||
|
|
- vector.im
|
||
|
|
- riot.im
|
||
|
|
|
||
|
|
synapse_email_notifs: False
|
||
|
|
synapse_smtp_server: localhost
|
||
|
|
synapse_smtp_port: 25
|
||
|
|
# synapse_smtp_user:
|
||
|
|
# synapse_smtp_pass:
|
||
|
|
synapse_smtp_tls: False
|
||
|
|
synapse_smtp_from: "Your Friendly %(app)s Home Server <noreply@{{ ansible_domain }}>"
|
||
|
|
synapse_app_name: Matrix
|
||
|
|
#synapse_riot_base_url: https://messenger.example.com
|
||
|
|
|
||
|
|
# Log level
|
||
|
|
synapse_log_level: ERROR
|
||
|
|
|
||
|
|
# Can be internal, ldap or rest
|
||
|
|
synapse_auth: internal
|
||
|
|
|
||
|
|
# If auth is ldap
|
||
|
|
synapse_ldap_uri: ldap://ldap.example.com:389
|
||
|
|
synapse_ldap_start_tls: True
|
||
|
|
synapse_ldap_user_base: ou=Users,dc=example,dc=com
|
||
|
|
synapse_ldap_attr_uid: uid
|
||
|
|
synapse_ldap_attr_email: mail
|
||
|
|
synapse_ldap_attr_name: cn
|
||
|
|
synapse_ldap_filter: (objectClass=posixAccount)
|
||
|
|
|
||
|
|
# if auth is rest
|
||
|
|
synapse_auth_rest_uri: http://localhost:8083
|
||
|
|
|