Matt Johnson
44f0257376
- Authentik -> edge2 CT 105 (Postgres pg_dump/restore; SECRET_KEY carried verbatim; zero-downtime until ~2s cutover) - Multi-block Caddy cutover: auth.echo6.co + notes.echo6.co outpost/forward_auth -> 100.64.0.36:9000 - runbook: add reboot tailscale-before-docker gotcha; clarify dnsmasq must NOT be repointed (points at Caddy host) - source left stopped + intact on Contabo as cold rollback Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
54 lines
1.1 KiB
Text
54 lines
1.1 KiB
Text
server_name: "echo6.co"
|
|
public_baseurl: "https://matrix.echo6.co/"
|
|
pid_file: /data/homeserver.pid
|
|
|
|
listeners:
|
|
- port: 8008
|
|
type: http
|
|
tls: false
|
|
x_forwarded: true
|
|
bind_addresses: ["0.0.0.0"]
|
|
resources:
|
|
- names: [client, federation]
|
|
compress: false
|
|
|
|
database:
|
|
name: psycopg2
|
|
args:
|
|
user: synapse
|
|
password: <REDACTED>
|
|
database: synapse
|
|
host: matrix-postgres
|
|
port: 5432
|
|
cp_min: 5
|
|
cp_max: 10
|
|
|
|
log_config: "/data/echo6.co.log.config"
|
|
media_store_path: /data/media_store
|
|
enable_registration: false
|
|
url_preview_enabled: true
|
|
url_preview_ip_range_blacklist:
|
|
- "127.0.0.0/8"
|
|
- "10.0.0.0/8"
|
|
- "172.16.0.0/12"
|
|
- "192.168.0.0/16"
|
|
- "100.64.0.0/10"
|
|
- "169.254.0.0/16"
|
|
- "::1/128"
|
|
- "fe80::/10"
|
|
- "fc00::/7"
|
|
|
|
registration_shared_secret: <REDACTED>
|
|
macaroon_secret_key: <REDACTED>
|
|
form_secret: <REDACTED>
|
|
signing_key_path: "/data/echo6.co.signing.key"
|
|
report_stats: false
|
|
|
|
trusted_key_servers:
|
|
- server_name: "matrix.org"
|
|
|
|
# MAS delegation - replaces oidc_providers
|
|
matrix_authentication_service:
|
|
enabled: true
|
|
endpoint: http://matrix-mas:8080/
|
|
secret: <REDACTED>
|