compose-matrix

Matrix Stack bestehend aus Matrix Server "Synapse" sowie dem Frontend "Element".

Inital setup

Copy env file: cp env.sample .env
Edit env file: nano .env
1. Basedir: Full path to dir with compose file (important for swarm shares)
2. Versionnumbers
3. DB settings
4. Domain! (no default)
Genreate inital config for synapse:
1. source .env
2. docker run -it --rm -v --env-file .env ${BASEDIR:-.}/files/:/data -e SYNAPSE_SERVER_NAME=$DOMAIN -e SYNAPSE_REPORT_STATS=no matrixdotorg/synapse:latest generate
  - This generate certs and basic inital config (homeserver.yml) for $DOMAIN only for first setup needed

Postgress by default not in use!
Default DB is SQLite.

(optional) Set db in config: nano $BASEDIR/files/synapse/homeserver.yaml
Edit element config: nano files/element-config.json
1. set "default_server_name" to your domain for Synapse
2. set "m.homeserver" => "base_url" to your domain for Element
3. Hint: by default connection to main servers of matrix.org is enabled
4. Hint: by default jitsi (cloud!) is uses for group videocalls
  - Hint: Jisi can be selfhost (no templace exist atm)
Run stack docker compose up

howto

enable registration

edit homeserver.yaml
1. set "enable_registration" to "True"
2. set "enable_registration_without_verification" to "True" # note: maybe not comming soon..

For disable ... well you know, set "enable_registration" to "False"

create user via cli

Import .env or set $DOMAIN manually
Set env $USERNAME and $USERPASS oder replace it directly

source .env
docker exec -it matrix_app_1 register_new_matrix_user -u $USERNAME -p $USERPASS -a -c /data/homeserver.yaml $DOMAIN

caddy config

synapse

synapse.example.com {
    reverse_proxy /_matrix/* $IPOFDOCKERHOST:8008
    reverse_proxy /_synapse/client/* $IPOFDOCKERHOST:8008

    header {
        X-Content-Type-Options nosniff
        Referrer-Policy strict-origin-when-cross-origin
        Strict-Transport-Security "max-age=63072000; includeSubDomains;"
        Permissions-Policy "accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=(), interest-cohort=()"
        X-Frame-Options SAMEORIGIN
        X-XSS-Protection 1
        X-Robots-Tag none
        -server
    }
}

element

element.example.com {
    encode zstd gzip
    reverse_proxy $IPOFDOCKERHOST:8080

    header {
        X-Content-Type-Options nosniff
        Referrer-Policy strict-origin-when-cross-origin
        Strict-Transport-Security "max-age=63072000; includeSubDomains;"
        Permissions-Policy "accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=(), interest-cohort=()"
        X-Frame-Options SAMEORIGIN
        X-XSS-Protection 1
        X-Robots-Tag none
        -server
    }
}

todo

setup script to auto edits
- db in homeserver.yml
- domain in config.json (element)

3.7 KiB Raw Blame History