synapse_ynh/config_panel.toml

version = "1.0"

[main]
name = "Main Settings"
services = ["__APP__"]

    [main.welcome]
    name = "Experience for new Users"

        [main.welcome.enable_registration]
        ask = "Enable Registration for new users"
        type = "boolean"
        yes = "true"
        no = "false"
        help = "Defaults to 'false'. If 'true', it is highly recommended to use either captcha, email, or token-based verification to avoid SPAM."

        # Disabled for matrix V2 because some client like Element X don't support cas and so require to have password authentication enabled
        # [main.welcome.password_enabled]
        # ask = "Enable Password Login"
        # type = "boolean"
        # yes = "true"
        # no = "false"
        # help = "If disabled, Login with Non-YunoHost Users impossible. But it simplies Login process if your Matrix server only has YunoHost SSO Users."
        # Temporary disable the visible flag due of https://github.com/YunoHost/issues/issues/2331
        # visible = "! enable_registration"

        [main.welcome.registrations_require_3pid]
        ask = "Registration requires all following 3PID personal identifier"
        type = "select"
        choices = ["email", "msisdn", "email&msisdn"]
        help = "! Warning msisdn (Phone number) registration require a third party service which send confirmation token by SMS.\nDo not select msisdn if you don't know what to do. And don't select user msisdn if you don't understand privacy flow\nDefaults to: 'email'."
        visible = "enable_registration"

        [main.welcome.allowed_local_3pids_email]
        ask = "Register only with given email formats"
        type = "tags"
        help = '( e.g. ^[^@]+@matrix\\.org$ )'
        visible = 'enable_registration && (registrations_require_3pid == "email" || registrations_require_3pid == "email&msisdn")'

        [main.welcome.allowed_local_3pids_msisdn]
        ask = "Register only with given phone number formats"
        type = "tags"
        help = '( e.g. \\+33 )'
        visible = 'enable_registration && (registrations_require_3pid == "email&msisdn" || registrations_require_3pid == "msisdn")'

        [main.welcome.disable_msisdn_registration]
        ask = "Disable asking Phone Number in Registration flow"
        type = "boolean"
        yes = "true"
        no = "false"
        help = "Overrides 3PID settings if MSISDNs are set as required."
        visible = "enable_registration"

        [main.welcome.account_threepid_delegates_msisdn]
        ask = "Specify a third party server to send confirmation code by SMS"
        type = "string"
        help = "That should be an URL with port or API."
        visible = 'enable_registration && (registrations_require_3pid == "email&msisdn" || registrations_require_3pid == "msisdn")'

        [main.welcome.auto_join_rooms]
        ask = "Auto Join new Users in following Rooms"
        type = "tags"
        help = "( e.g. #example:example.com ) Users who register on this homeserver will automatically be joined to these rooms. If the room already exists, the join rule must be set to 'public'. See also next setting."

        [main.welcome.autocreate_auto_join_rooms]
        ask = "Auto-Create room for Auto Join if not existing"
        type = "boolean"
        yes = "true"
        no = "false"
        help = "Setting to false means that if the rooms are not manually created, users cannot be auto-joined. Auto-created rooms will be public and federated by default, this can be customised in CLI with the settings auto_join_*."

        [main.welcome.notif_for_new_users]
        ask = "Enable email notifications for new users"
        type = "boolean"
        yes = "true"
        no = "false"
        help = "Defaults to 'true'."
        visible = "enable_notifs"

    [main.privacy]
    name = "Data Privacy"

        [main.privacy.text]
        ask = '''
        * "all": any locally-created room
        * "invite": any room created with the "private_chat" or "trusted_private_chat" room creation presets
        * "off": No encryption by default
        '''
        type = "markdown"

        [main.privacy.e2e_enabled_by_default]
        ask = "End-to-End Encryption by default for locally-created Rooms"
        type = "select"
        choices = ["all", "invite", "off"]
        help = "Note that encryption can always be turned on manually, even after creation."

        [main.privacy.allow_public_rooms_over_federation]
        ask = "Access Public Rooms Directory over Federation"
        type = "boolean"
        yes = "true"
        no = "false"
        help = "Disabled by default. If disabled, users on other homeserver will not be able to look for a public room on your homeserver. They will have to type the ID of the room to join."

        [main.privacy.push_include_content]
        ask = "Disable content sharing inside push notification"
        type = "boolean"
        yes = "true"
        no = "false"
        help = "Send content message and sender information in push notification. Set to false increase privacy when GAFAM notification service is used (ie: when element client is downloaded thrue Gplay store)."

    [main.experience]
    name = "User Experience"

        [main.experience.web_client_location]
        ask = "Element instance your HomeServer should redirect to"
        type = "url"
        help = "URL to the web client which / will redirect to."

        [main.experience.enable_group_creation]
        ask = "Allow non-server-admin Users to create Spaces"
        type = "boolean"
        yes = "true"
        no = "false"
        help = "Disabled by default: only server admins can create Spaces"

        [main.experience.enable_notifs]
        ask = "Enable sending emails for messages the user missed"
        type = "boolean"
        yes = "true"
        no = "false"
        help = "Defaults to 'false'."

        [main.experience.client_base_url]
        ask = "URL for client links within the email notifications"
        type = "url"
        help = "Used to be called 'riot_base_url', still supported"
        visible = "enable_notifs"

[resources]
name = "Resource Usage"
services = ["__APP__"]

    [resources.media]
    name = "Manage Media growth and clean-up"

        [resources.media.max_upload_size]
        ask = "Largest allowed media upload size in bytes"
        type = "string"
        help = "Defaults to: '10M' . Format : <value><[GMK]?>"

[advanced]
name = "Advanced Settings"
services = ["__APP__"]

    # Disabled as it don't work any more on bookworm
    #
    # [advanced.help]
    # name = "SETTINGS FOR EXPERTS IN SERVER ADMINISTRATION"
    #
    #     [advanced.help.text]
    #     ask = '''
    #     !!There are security and privacy risks if you change these settings without knowing what you do!!
    #     '''
    #     type = "markdown"

    [advanced.others]
    name = "Others"

            [advanced.others.report_stats]
            ask = "Server statistics"
            type = "boolean"
            yes = "true"
            no = "false"
            help = "Enable to send anonymous statistics to Synapse Developers to improve performance."

    [advanced.guests]
    name = "Experience for Guests / Anonymous"

        [advanced.guests.invite_client_location]
        ask = "Web client location to direct users to during an invite"
        type = "url"
        help = "This is passed to the identity server as the org.matrix.web_client_location key. Defaults to unset, giving no guidance to the identity server."

        [advanced.guests.allow_guest_access]
        ask = "Allow Users to Register as Guests"
        type = "boolean"
        yes = "true"
        no = "false"
        help = "Guests can participate on this server in rooms with guest access enabled, without a password/email/etc."

        [advanced.guests.auto_join_rooms_for_guests]
        ask = "Enable Auto Join Room for Guests"
        type = "boolean"
        yes = "true"
        no = "false"
        help = "Defaults to 'true'."
        visible = "allow_guest_access"

    [advanced.privacy]
    name = "Data Privacy"

            [advanced.privacy.enable_3pid_lookup]
            ask = "Allow discovering friends with phone number or email"
            type = "boolean"
            yes = "true"
            no = "false"
            help = "Enable 3PIDs lookup requests to identity servers from this server. See Settings->General->Discovery in Element."

            [advanced.privacy.default_identity_server]
            ask = "Identity server suggested to clients"
            type = "url"
            help = "Identity server allows to discover, be discovered and invite people you know with phone number or email. If not set, users will probably chose centralized vector.im. See Settings->General->Discovery in Element."

            [advanced.privacy.allow_public_rooms_without_auth]
            ask = "Access Public Rooms Directory without authentification"
            type = "boolean"
            yes = "true"
            no = "false"
            help = "Disabled by default. If enabled, anyone can query the Public Rooms Directory (access through the client API). This only makes sense if you want everyone to be able to scroll your public room to see what's interesting on your Homeserver"

    [advanced.registration]
    name = "Account Registration"

            [advanced.registration.registration_shared_secret]
            ask = "Shared Secret for Registration"
            type = "string"
            help = "Allows registration of standard or admin accounts, even if Registration disabled."

    [advanced.security]
    name = "Security"

            [advanced.security.enable_dtls_for_audio_video_turn_call]
            ask = "Enable TLS/DTLS on Audio/Video call"
            type = "boolean"
            yes = "true"
            no = "false"
            help = "Enabling TLS/DTLS is really recommanded but it could bring some issues depending of the server certificate. There are some known issues with let's encrypt (https://github.com/element-hq/element-android/issues/1533), so if you have issues it could be better to disable this feature."