b9e334dc49
Synapse on Postgres plus the Element web client, on two subdomains: the homeserver on matrix.<domain> (which becomes server_name, so IDs read @alice:matrix.<domain>) and Element on element.<domain>. Two hosts rather than one because server_name then matches the host Traefik already terminates TLS for, so 'serve_server_wellknown: true' is all the federation delegation needed and nothing has to be published at the apex domain — which this app has no way to configure. CFG_MATRIX_AUTHELIA is pinned false and documented: forward-auth in front of /_matrix locks out every client and every federating peer, since they carry Matrix access tokens and cannot follow a redirect. Real SSO goes through the OIDC block in resources/homeserver.yaml instead. The install hook generates the signing key once via upstream's own 'generate' command and refuses to regenerate it over an existing install — a new key would be rejected by every server that had cached the old one. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
33 lines
790 B
Plaintext
33 lines
790 B
Plaintext
# Synapse logging configuration.
|
|
#
|
|
# Logs go to stdout only, so `docker logs matrix-synapse` and the LibrePortal
|
|
# log viewer both see them, and nothing accumulates inside the container that
|
|
# the host does not rotate.
|
|
|
|
version: 1
|
|
|
|
formatters:
|
|
precise:
|
|
format: '%(asctime)s - %(name)s - %(lineno)d - %(levelname)s - %(request)s - %(message)s'
|
|
|
|
handlers:
|
|
console:
|
|
class: logging.StreamHandler
|
|
formatter: precise
|
|
|
|
loggers:
|
|
synapse.storage.SQL:
|
|
# Set to INFO to log every database query — useful when chasing a slow
|
|
# server, far too noisy for normal running.
|
|
level: WARNING
|
|
|
|
# Very chatty at INFO, and rarely what you are looking for.
|
|
synapse.access.http.8008:
|
|
level: WARNING
|
|
|
|
root:
|
|
level: INFO
|
|
handlers: [console]
|
|
|
|
disable_existing_loggers: false
|