b9e334dc49
Synapse on Postgres plus the Element web client, on two subdomains: the homeserver on matrix.<domain> (which becomes server_name, so IDs read @alice:matrix.<domain>) and Element on element.<domain>. Two hosts rather than one because server_name then matches the host Traefik already terminates TLS for, so 'serve_server_wellknown: true' is all the federation delegation needed and nothing has to be published at the apex domain — which this app has no way to configure. CFG_MATRIX_AUTHELIA is pinned false and documented: forward-auth in front of /_matrix locks out every client and every federating peer, since they carry Matrix access tokens and cannot follow a redirect. Real SSO goes through the OIDC block in resources/homeserver.yaml instead. The install hook generates the signing key once via upstream's own 'generate' command and refuses to regenerate it over an existing install — a new key would be rejected by every server that had cached the old one. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
2 lines
631 B
XML
2 lines
631 B
XML
<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 256 256" width="256" height="256" role="img" aria-label="Matrix"><rect width="256" height="256" rx="28" fill="#0dbd8b" /><path fill="#fff" d="M62 40h30v10h-8a6 6 0 0 0-6 6v144a6 6 0 0 0 6 6h8v10H62a10 10 0 0 1-10-10V50a10 10 0 0 1 10-10m132 0a10 10 0 0 1 10 10v156a10 10 0 0 1-10 10h-30v-10h8a6 6 0 0 0 6-6V56a6 6 0 0 0-6-6h-8V40z" /><path fill="#fff" d="M104 96h14v11h.4c4-8.4 12-12.6 20.6-12.6 9 0 16.6 3.8 20.6 12.6 4.8-8 13.4-12.6 22.4-12.6h.2v14.6c-1.4-.2-3-.4-4.4-.4-11.6 0-17.6 6.6-17.6 19.4V160h-15v-38.8c0-8.6-2.6-13.4-10-13.4-8.6 0-13.6 6-13.6 18.6V160h-15z" /></svg>
|