b9e334dc49
Synapse on Postgres plus the Element web client, on two subdomains: the homeserver on matrix.<domain> (which becomes server_name, so IDs read @alice:matrix.<domain>) and Element on element.<domain>. Two hosts rather than one because server_name then matches the host Traefik already terminates TLS for, so 'serve_server_wellknown: true' is all the federation delegation needed and nothing has to be published at the apex domain — which this app has no way to configure. CFG_MATRIX_AUTHELIA is pinned false and documented: forward-auth in front of /_matrix locks out every client and every federating peer, since they carry Matrix access tokens and cannot follow a redirect. Real SSO goes through the OIDC block in resources/homeserver.yaml instead. The install hook generates the signing key once via upstream's own 'generate' command and refuses to regenerate it over an existing install — a new key would be rejected by every server that had cached the old one. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
25 lines
661 B
JSON
25 lines
661 B
JSON
{
|
|
"default_server_config": {
|
|
"m.homeserver": {
|
|
"base_url": "https://ELEMENT_HOMESERVER_PLACEHOLDER",
|
|
"server_name": "ELEMENT_HOMESERVER_PLACEHOLDER"
|
|
}
|
|
},
|
|
"brand": "Element",
|
|
"disable_custom_urls": false,
|
|
"disable_guests": true,
|
|
"disable_login_language_selector": false,
|
|
"disable_3pid_login": false,
|
|
"default_country_code": "GB",
|
|
"show_labs_settings": true,
|
|
"room_directory": {
|
|
"servers": ["ELEMENT_HOMESERVER_PLACEHOLDER", "matrix.org"]
|
|
},
|
|
"setting_defaults": {
|
|
"breadcrumbs": true
|
|
},
|
|
"jitsi": {
|
|
"preferredDomain": "meet.element.io"
|
|
}
|
|
}
|