Files
microdao-daarion/infra/matrix/synapse/homeserver.yaml

113 lines
2.3 KiB
YAML

# Synapse Homeserver Configuration for DAARION.city
# Version: 1.0.0
#
# ВАЖЛИВО: Замініть всі <PLACEHOLDER> значення перед запуском!
server_name: "daarion.space"
public_baseurl: "https://matrix.daarion.space/"
pid_file: /data/homeserver.pid
# Database configuration
database:
name: psycopg2
args:
user: synapse
password: "${SYNAPSE_DB_PASSWORD}"
database: synapse
host: dagi-postgres
port: 5432
cp_min: 5
cp_max: 10
# Listeners
listeners:
- port: 8008
tls: false
type: http
x_forwarded: true
bind_addresses: ['0.0.0.0']
resources:
- names: [client, federation]
compress: false
# Registration
enable_registration: false
registration_shared_secret: "${SYNAPSE_REGISTRATION_SECRET}"
# Allow registration via DAARION Auth
enable_registration_without_verification: false
# Media storage
media_store_path: /data/media_store
max_upload_size: 50M
url_preview_enabled: true
url_preview_ip_range_blacklist:
- '127.0.0.0/8'
- '10.0.0.0/8'
- '172.16.0.0/12'
- '192.168.0.0/16'
- '100.64.0.0/10'
- '192.0.0.0/24'
- '169.254.0.0/16'
- '198.51.100.0/24'
- '203.0.113.0/24'
- '224.0.0.0/4'
- '::1/128'
- 'fe80::/10'
- 'fc00::/7'
- '2001:db8::/32'
- 'ff00::/8'
- 'fec0::/10'
# Signing keys
signing_key_path: /data/signing.key
# Logging
log_config: /data/log.config
# Statistics reporting
report_stats: false
# Rate limiting
rc_messages_per_second: 0.2
rc_message_burst_count: 10
rc_registration:
per_second: 0.17
burst_count: 3
# Federation (disabled for MVP, enable in Phase 7)
# federation_domain_whitelist:
# - daarion.space
# Trusted key servers
trusted_key_servers:
- server_name: "matrix.org"
# Metrics (optional, for monitoring)
enable_metrics: true
# TURN server (for voice/video calls)
turn_uris:
- "turn:turn.daarion.space:3478?transport=udp"
- "turn:turn.daarion.space:3478?transport=tcp"
turn_shared_secret: "${TURN_SHARED_SECRET}"
turn_user_lifetime: 86400000
turn_allow_guests: false
# Room settings
default_room_version: "10"
# Presence
presence:
enabled: true
# Application services (for future DAARION Bridge)
# app_service_config_files:
# - /data/appservices/daarion-bridge.yaml
# Experimental features
experimental_features:
msc2716_enabled: false # Message history import
msc3202_device_masquerading: false