# Configuration file for Synapse.
#
# This is a YAML file: see [1] for a quick introduction. Note in particular
# that *indentation is important*: all the elements of a list or dictionary
# should have the same indentation.
#
# [1] https://docs.ansible.com/ansible/latest/reference_appendices/YAMLSyntax.html
#
# For more information on how to configure Synapse, including a complete accounting of
# each option, go to docs/usage/configuration/config_documentation.md or
# https://element-hq.github.io/synapse/latest/usage/configuration/config_documentation.html
server_name: "smonk.ing"
public_baseurl: "https://matrix.smonk.ing"
pid_file: /data/homeserver.pid
listeners:
  - port: 8008
    tls: false
    type: http
    x_forwarded: true
    resources:
      - names: [client, federation]
        compress: false

database:
  name: psycopg2
  args:
    user: synapse
    password: "${CFG_POSTGRES_PASSWORD}"
    dbname: synapse
    host: postgres
    cp_min: 5
    cp_max: 10
    keepalives_idle: 10
    keepalives_interval: 10
    keepalives_count: 3

log_config: "/data/log_config.yml"
media_store_path: "/data/media_store"
report_stats: false

registration_shared_secret: "${CFG_REGISTRATION_SHARED_SECRET}"
macaroon_secret_key: "${CFG_MACAROON_SECRET_KEY}"
form_secret: "${CFG_FORM_SECRET}"
signing_key_path: "/run/secrets/signing_key"

trusted_key_servers:
  - server_name: "matrix.org"

enable_registration: false
registration_requires_token: true
enable_registration_without_verification: true

allow_public_rooms_over_federation: true
allow_public_rooms_without_auth: false
enable_search: true
push:
  include_content: true
  group_unread_count_by_room: true

# Preview:
url_preview_enabled: true
url_preview_ip_range_blacklist:
  - '127.0.0.0/8'
  - '10.0.0.0/8'
  - '172.16.0.0/12'
  - '192.168.0.0/16'
  - '100.64.0.0/10'
  - '192.0.0.0/24'
  - '169.254.0.0/16'
  - '192.88.99.0/24'
  - '198.18.0.0/15'
  - '192.0.2.0/24'
  - '198.51.100.0/24'
  - '203.0.113.0/24'
  - '224.0.0.0/4'
  - '::1/128'
  - 'fe80::/10'
  - 'fc00::/7'
  - '2001:db8::/32'
  - 'ff00::/8'
  - 'fec0::/10'

# TODO: TURN
#turn_uris: [ "turn:turn.smonk.ing?transport=udp", "turn:turn.smonk.ing?transport=tcp" ]
#turn_shared_secret: ""
#turn_user_lifetime: 864000000
#turn_allow_guests: true