ansible/templates/homeserver.yaml.j2

cleanup_extremities_with_dummy_events: truepid_file: "/var/run/matrix-synapse.pid"
public_baseurl: "https://{{ matrix_server_name }}"
allow_public_rooms_over_federation: true

federation_ip_range_blacklist:
  - '127.0.0.0/8'
  - '10.0.0.0/8'
  - '172.16.0.0/12'
  - '192.168.0.0/16'
  - '100.64.0.0/10'
  - '169.254.0.0/16'
  - '::1/128'
  - 'fe80::/64'
  - 'fc00::/7'

listeners:

  - port: 8008
    tls: false
    type: http
    x_forwarded: true
    bind_addresses: ['::1', '127.0.0.1']

    resources:
      - names: [client, federation]
        compress: false

retention:

acme:
    enabled: false

    port: 80

    bind_addresses: ['::', '0.0.0.0']

    reprovision_threshold: 30

    account_key_file: /var/lib/matrix-synapse/acme_account.key

database:
    name: psycopg2
    args:
        user: synapse
        password: {{ synapse_postgres_password }}
        database: synapse
        host: localhost
        cp_min: 5
        cp_max: 10

log_config: "/etc/matrix-synapse/log.yaml"

media_store_path: "/var/lib/matrix-synapse/media"
max_upload_size: 100M
url_preview_enabled: true

url_preview_ip_range_blacklist:
  - '127.0.0.0/8'
  - '10.0.0.0/8'
  - '172.16.0.0/12'
  - '192.168.0.0/16'
  - '100.64.0.0/10'
  - '169.254.0.0/16'
  - '::1/128'
  - 'fe80::/64'
  - 'fc00::/7'

turn_uris: ["turn:matrix.fuz.re:3478?transport=udp", "turn:matrix.fuz.re:3478?transport=tcp"]

turn_shared_secret: "{{ synapse_turn_secret }}"
turn_user_lifetime: 86400000

turn_allow_guests: true

enable_registration: true

trusted_third_party_id_servers:
  - matrix.org
  - vector.im

signing_key_path: "/etc/matrix-synapse/homeserver.signing.key"

trusted_key_servers:
  - server_name: "matrix.org"

suppress_key_server_warning: true

email:
   smtp_host: "localhost"
   smtp_port: 25   require_transport_security: false
   notif_from: "Your Friendly %(app)s homeserver <noreply@fuz.re>"
   riot_base_url: "https://riot.fuz.re"