Add synapse and database containers

config/homeserver.template.yml

@@ -0,0 +1,88 @@
+# Configuration file for Synapse.
+#
+# This is a YAML file: see [1] for a quick introduction. Note in particular
+# that *indentation is important*: all the elements of a list or dictionary
+# should have the same indentation.
+#
+# [1] https://docs.ansible.com/ansible/latest/reference_appendices/YAMLSyntax.html
+#
+# For more information on how to configure Synapse, including a complete accounting of
+# each option, go to docs/usage/configuration/config_documentation.md or
+# https://element-hq.github.io/synapse/latest/usage/configuration/config_documentation.html
+server_name: "smonk.ing"
+public_baseurl: "https://matrix.smonk.ing"
+pid_file: /data/homeserver.pid
+listeners:
+  - port: 8008
+    tls: false
+    type: http
+    x_forwarded: true
+    resources:
+      - names: [client, federation]
+        compress: false
+
+database:
+  name: psycopg2
+  args:
+    user: synapse
+    password: "${CFG_POSTGRES_PASSWORD}"
+    dbname: synapse
+    host: postgres
+    cp_min: 5
+    cp_max: 10
+    keepalives_idle: 10
+    keepalives_interval: 10
+    keepalives_count: 3
+
+log_config: "/data/log_config.yml"
+media_store_path: "/data/media_store"
+report_stats: false
+
+registration_shared_secret: "${CFG_REGISTRATION_SHARED_SECRET}"
+macaroon_secret_key: "${CFG_MACAROON_SECRET_KEY}"
+form_secret: "${CFG_FORM_SECRET}"
+signing_key_path: "/run/secrets/signing_key"
+
+trusted_key_servers:
+  - server_name: "matrix.org"
+
+enable_registration: false
+registration_requires_token: true
+enable_registration_without_verification: true
+
+allow_public_rooms_over_federation: true
+allow_public_rooms_without_auth: false
+enable_search: true
+push:
+  include_content: true
+  group_unread_count_by_room: true
+
+# Preview:
+url_preview_enabled: true
+url_preview_ip_range_blacklist:
+  - '127.0.0.0/8'
+  - '10.0.0.0/8'
+  - '172.16.0.0/12'
+  - '192.168.0.0/16'
+  - '100.64.0.0/10'
+  - '192.0.0.0/24'
+  - '169.254.0.0/16'
+  - '192.88.99.0/24'
+  - '198.18.0.0/15'
+  - '192.0.2.0/24'
+  - '198.51.100.0/24'
+  - '203.0.113.0/24'
+  - '224.0.0.0/4'
+  - '::1/128'
+  - 'fe80::/10'
+  - 'fc00::/7'
+  - '2001:db8::/32'
+  - 'ff00::/8'
+  - 'fec0::/10'
+
+# TODO: TURN
+#turn_uris: [ "turn:turn.smonk.ing?transport=udp", "turn:turn.smonk.ing?transport=tcp" ]
+#turn_shared_secret: ""
+#turn_user_lifetime: 864000000
+#turn_allow_guests: true
+

config/log_config.yml

@@ -0,0 +1,28 @@
+version: 1
+
+formatters:
+  precise:
+    format: '%(asctime)s - %(name)s - %(lineno)d - %(levelname)s - %(request)s - %(message)s'
+
+handlers:
+  console:
+    class: logging.StreamHandler
+    formatter: precise
+
+loggers:
+    # This is just here so we can leave `loggers` in the config regardless of whether
+    # we configure other loggers below (avoid empty yaml dict error).
+    _placeholder:
+        level: "INFO"
+
+    synapse.storage.SQL:
+        # beware: increasing this to DEBUG will make synapse log sensitive
+        # information such as access tokens.
+        level: INFO
+
+root:
+    level: INFO
+    handlers: [console]
+
+disable_existing_loggers: false
+