mirror of
https://github.com/YunoHost-Apps/synapse_ynh.git
synced 2024-09-03 20:26:38 +02:00
Auto-update READMEs
This commit is contained in:
yunohost-bot
autoreadme_webhook
parent
d4c6f8f84b
commit
e688cf7b13
9 changed files with 1010 additions and 28 deletions
10
ALL_README.md
Normal file
10
ALL_README.md
Normal file
|
|
@ -0,0 +1,10 @@
|
||||||
|
# All available README files by language
|
||||||
|
|
||||||
|
- [Read the README in English](README.md)
|
||||||
|
- [Lea el README en español](README_es.md)
|
||||||
|
- [Irakurri README euskaraz](README_eu.md)
|
||||||
|
- [Lire le README en français](README_fr.md)
|
||||||
|
- [Le o README en galego](README_gl.md)
|
||||||
|
- [Baca README dalam bahasa bahasa Indonesia](README_id.md)
|
||||||
|
- [Прочитать README на русский](README_ru.md)
|
||||||
|
- [阅读中文（简体）的 README](README_zh_Hans.md)
|
||||||
24
README.md
24
README.md
|
|
@ -1,18 +1,18 @@
|
||||||
<!--
|
<!--
|
||||||
N.B.: This README was automatically generated by https://github.com/YunoHost/apps/tree/master/tools/readme_generator
|
N.B.: This README was automatically generated by <https://github.com/YunoHost/apps/tree/master/tools/readme_generator>
|
||||||
It shall NOT be edited by hand.
|
It shall NOT be edited by hand.
|
||||||
-->
|
-->
|
||||||
|
|
||||||
# Synapse for YunoHost
|
# Synapse for YunoHost
|
||||||
|
|
||||||
[](https://dash.yunohost.org/appci/app/synapse)  
|
[](https://ci-apps.yunohost.org/ci/apps/synapse/)  
|
||||||
|
|
||||||
[](https://install-app.yunohost.org/?app=synapse)
|
[](https://install-app.yunohost.org/?app=synapse)
|
||||||
|
|
||||||
*[Lire ce readme en français.](./README_fr.md)*
|
*[Read this README in other languages.](./ALL_README.md)*
|
||||||
|
|
||||||
> *This package allows you to install Synapse quickly and simply on a YunoHost server.
|
> *This package allows you to install Synapse quickly and simply on a YunoHost server.*
|
||||||
If you don't have YunoHost, please consult [the guide](https://yunohost.org/#/install) to learn how to install it.*
|
> *If you don't have YunoHost, please consult [the guide](https://yunohost.org/install) to learn how to install it.*
|
||||||
|
|
||||||
## Overview
|
## Overview
|
||||||
|
|
||||||
|
|
@ -142,18 +142,18 @@ Before installing a second instance of the app it's really recommended to update
|
||||||
|
|
||||||
## Documentation and resources
|
## Documentation and resources
|
||||||
|
|
||||||
* Official app website: <https://matrix.org/>
|
- Official app website: <https://matrix.org/>
|
||||||
* Upstream app code repository: <https://github.com/matrix-org/synapse>
|
- Upstream app code repository: <https://github.com/matrix-org/synapse>
|
||||||
* YunoHost Store: <https://apps.yunohost.org/app/synapse>
|
- YunoHost Store: <https://apps.yunohost.org/app/synapse>
|
||||||
* Report a bug: <https://github.com/YunoHost-Apps/synapse_ynh/issues>
|
- Report a bug: <https://github.com/YunoHost-Apps/synapse_ynh/issues>
|
||||||
|
|
||||||
## Developer info
|
## Developer info
|
||||||
|
|
||||||
Please send your pull request to the [testing branch](https://github.com/YunoHost-Apps/synapse_ynh/tree/testing).
|
Please send your pull request to the [`testing` branch](https://github.com/YunoHost-Apps/synapse_ynh/tree/testing).
|
||||||
|
|
||||||
To try the testing branch, please proceed like that.
|
To try the `testing` branch, please proceed like that:
|
||||||
|
|
||||||
``` bash
|
```bash
|
||||||
sudo yunohost app install https://github.com/YunoHost-Apps/synapse_ynh/tree/testing --debug
|
sudo yunohost app install https://github.com/YunoHost-Apps/synapse_ynh/tree/testing --debug
|
||||||
or
|
or
|
||||||
sudo yunohost app upgrade synapse -u https://github.com/YunoHost-Apps/synapse_ynh/tree/testing --debug
|
sudo yunohost app upgrade synapse -u https://github.com/YunoHost-Apps/synapse_ynh/tree/testing --debug
|
||||||
|
|
|
||||||
162
README_es.md
Normal file
162
README_es.md
Normal file
|
|
@ -0,0 +1,162 @@
|
||||||
|
<!--
|
||||||
|
Este archivo README esta generado automaticamente<https://github.com/YunoHost/apps/tree/master/tools/readme_generator>
|
||||||
|
No se debe editar a mano.
|
||||||
|
-->
|
||||||
|
|
||||||
|
# Synapse para Yunohost
|
||||||
|
|
||||||
|
[](https://ci-apps.yunohost.org/ci/apps/synapse/)  
|
||||||
|
|
||||||
|
[](https://install-app.yunohost.org/?app=synapse)
|
||||||
|
|
||||||
|
*[Leer este README en otros idiomas.](./ALL_README.md)*
|
||||||
|
|
||||||
|
> *Este paquete le permite instalarSynapse rapidamente y simplement en un servidor YunoHost.*
|
||||||
|
> *Si no tiene YunoHost, visita [the guide](https://yunohost.org/install) para aprender como instalarla.*
|
||||||
|
|
||||||
|
## Descripción general
|
||||||
|
|
||||||
|
Instant messaging server matrix network.
|
||||||
|
|
||||||
|
Yunohost chatroom with matrix : [https://riot.im/app/#/room/#yunohost:matrix.org](https://riot.im/app/#/room/#yunohost:matrix.org)
|
||||||
|
|
||||||
|
|
||||||
|
**Versión actual:** 1.61.0~ynh1
|
||||||
|
## informaciones importantes
|
||||||
|
|
||||||
|
## Configuration
|
||||||
|
|
||||||
|
### Install for ARM arch (or slow arch)
|
||||||
|
|
||||||
|
For all slow or arm architecture it's recommended to build the dh file before the install to have a quicker install.
|
||||||
|
You could build it by this cmd : `openssl dhparam -out /etc/ssl/private/dh2048.pem 2048 > /dev/null`
|
||||||
|
After that you can install it without problem.
|
||||||
|
|
||||||
|
The package uses a prebuilt python virtual environnement. The binary are taken from this repository: https://github.com/Josue-T/synapse_python_build
|
||||||
|
The script to build the binary is also available.
|
||||||
|
|
||||||
|
### Web client
|
||||||
|
|
||||||
|
If you want a web client you can also install Element with this package: https://github.com/YunoHost-Apps/element_ynh .
|
||||||
|
|
||||||
|
### Access by federation
|
||||||
|
|
||||||
|
If your server name is identical to the domain on which synapse is installed, and the default port 8448 is used, your server is normally already accessible by the federation.
|
||||||
|
|
||||||
|
If not, you can add the following line in the dns configuration but you normally don't need it as a .well-known file is edited during the install to declare your server name and port to the federation.
|
||||||
|
|
||||||
|
```
|
||||||
|
_matrix._tcp.<server_name.tld> <ttl> IN SRV 10 0 <port> <domain-or-subdomain-of-synapse.tld>
|
||||||
|
```
|
||||||
|
for example
|
||||||
|
```
|
||||||
|
_matrix._tcp.example.com. 3600 IN SRV 10 0 SYNAPSE_PORT synapse.example.com.
|
||||||
|
```
|
||||||
|
You need to replace SYNAPSE_PORT by the real port. This port can be obtained by the command: `yunohost app setting SYNAPSE_INSTANCE_NAME synapse_tls_port`
|
||||||
|
|
||||||
|
For more details, see : https://github.com/matrix-org/synapse/blob/master/docs/federate.md
|
||||||
|
|
||||||
|
If it is not automatically done, you need to open this in your ISP box.
|
||||||
|
|
||||||
|
You also need a valid TLS certificate for the domain used by synapse. To do that you can refer to the documentation here : https://yunohost.org/#/certificate_en
|
||||||
|
|
||||||
|
### Turnserver
|
||||||
|
|
||||||
|
For Voip and video conferencing a turnserver is also installed (and configured). The turnserver listens on two UDP and TCP ports. You can get them with these commands:
|
||||||
|
```
|
||||||
|
yunohost app setting synapse turnserver_tls_port
|
||||||
|
yunohost app setting synapse turnserver_alt_tls_port
|
||||||
|
|
||||||
|
```
|
||||||
|
The turnserver will also choose a port dynamically when a new call starts. The range is between 49153 - 49193.
|
||||||
|
|
||||||
|
For some security reason the ports range (49153 - 49193) isn't automatically open by default. If you want to use the synapse server for voip or conferencing you will need to open this port range manually. To do this just run this command:
|
||||||
|
|
||||||
|
```
|
||||||
|
yunohost firewall allow Both 49153:49193
|
||||||
|
```
|
||||||
|
|
||||||
|
You might also need to open these ports (if it is not automatically done) on your ISP box.
|
||||||
|
|
||||||
|
To prevent the situation when the server is behind a NAT, the public IP is written in the turnserver config. By this the turnserver can send its real public IP to the client. For more information see [the coturn example config file](https://github.com/coturn/coturn/blob/master/examples/etc/turnserver.conf#L102-L120).So if your IP changes, you could run the script `/opt/yunohost/__SYNAPSE_INSTANCE_NAME__/Coturn_config_rotate.sh` to update your config.
|
||||||
|
|
||||||
|
If you have a dynamic IP address, you also might need to update this config automatically. To do that just edit a file named `/etc/cron.d/coturn_config_rotate` and add the following content (just adapt the __SYNAPSE_INSTANCE_NAME__ which could be `synapse` or maybe `synapse__2`).
|
||||||
|
|
||||||
|
```
|
||||||
|
*/15 * * * * root bash /opt/yunohost/__SYNAPSE_INSTANCE_NAME__/Coturn_config_rotate.sh;
|
||||||
|
```
|
||||||
|
|
||||||
|
#### OpenVPN
|
||||||
|
|
||||||
|
In case of you have an OpenVPN server you might want than `coturn-synapse` restart when the VPN restart. To do this create a file named `/usr/local/bin/openvpn_up_script.sh` with this content:
|
||||||
|
```
|
||||||
|
#!/bin/bash
|
||||||
|
|
||||||
|
(
|
||||||
|
sleep 5
|
||||||
|
sudo systemctl restart coturn-synapse.service
|
||||||
|
) &
|
||||||
|
exit 0
|
||||||
|
```
|
||||||
|
|
||||||
|
Add this line in you sudo config file `/etc/sudoers`
|
||||||
|
```
|
||||||
|
openvpn ALL=(ALL) NOPASSWD: /bin/systemctl restart coturn-synapse.service
|
||||||
|
```
|
||||||
|
|
||||||
|
And add this line in your OpenVPN config file
|
||||||
|
```
|
||||||
|
ipchange /usr/local/bin/openvpn_up_script.sh
|
||||||
|
```
|
||||||
|
|
||||||
|
### Important Security Note
|
||||||
|
|
||||||
|
We do not recommend running Element from the same domain name as your Matrix
|
||||||
|
homeserver (synapse). The reason is the risk of XSS (cross-site-scripting)
|
||||||
|
vulnerabilities that could occur if someone caused Element to load and render
|
||||||
|
malicious user generated content from a Matrix API which then had trusted
|
||||||
|
access to Element (or other apps) due to sharing the same domain.
|
||||||
|
|
||||||
|
We have put some coarse mitigations into place to try to protect against this
|
||||||
|
situation, but it's still not a good practice to do it in the first place. See
|
||||||
|
https://github.com/vector-im/element-web/issues/1977 for more details.
|
||||||
|
|
||||||
|
## YunoHost specific features
|
||||||
|
|
||||||
|
## Limitations
|
||||||
|
|
||||||
|
Synapse uses a lot of ressource. So on slow architecture (like small ARM board), this app could take a lot of CPU and RAM.
|
||||||
|
|
||||||
|
This app doesn't provide any real good web interface. So it's recommended to use Element client to connect to this app. This app is available [here](https://github.com/YunoHost-Apps/element_ynh)
|
||||||
|
|
||||||
|
## Additional information
|
||||||
|
|
||||||
|
### Multi instance support
|
||||||
|
|
||||||
|
To give a possibility to have multiple domains you can use multiple instances of synapse. In this case all instances will run on different ports so it's really important to put a SRV record in your domain. You can get the port that you need to put in your SRV record with this following command:
|
||||||
|
```
|
||||||
|
yunohost app setting synapse__<instancenumber> synapse_tls_port
|
||||||
|
```
|
||||||
|
|
||||||
|
Before installing a second instance of the app it's really recommended to update all existing instances.
|
||||||
|
|
||||||
|
## Documentaciones y recursos
|
||||||
|
|
||||||
|
- Sitio web oficial: <https://matrix.org/>
|
||||||
|
- Repositorio del código fuente oficial de la aplicación : <https://github.com/matrix-org/synapse>
|
||||||
|
- Catálogo YunoHost: <https://apps.yunohost.org/app/synapse>
|
||||||
|
- Reportar un error: <https://github.com/YunoHost-Apps/synapse_ynh/issues>
|
||||||
|
|
||||||
|
## Información para desarrolladores
|
||||||
|
|
||||||
|
Por favor enviar sus correcciones a la [`branch testing`](https://github.com/YunoHost-Apps/synapse_ynh/tree/testing
|
||||||
|
|
||||||
|
Para probar la rama `testing`, sigue asÍ:
|
||||||
|
|
||||||
|
```bash
|
||||||
|
sudo yunohost app install https://github.com/YunoHost-Apps/synapse_ynh/tree/testing --debug
|
||||||
|
o
|
||||||
|
sudo yunohost app upgrade synapse -u https://github.com/YunoHost-Apps/synapse_ynh/tree/testing --debug
|
||||||
|
```
|
||||||
|
|
||||||
|
**Mas informaciones sobre el empaquetado de aplicaciones:** <https://yunohost.org/packaging_apps>
|
||||||
162
README_eu.md
Normal file
162
README_eu.md
Normal file
|
|
@ -0,0 +1,162 @@
|
||||||
|
<!--
|
||||||
|
Ohart ongi: README hau automatikoki sortu da <https://github.com/YunoHost/apps/tree/master/tools/readme_generator>ri esker
|
||||||
|
EZ editatu eskuz.
|
||||||
|
-->
|
||||||
|
|
||||||
|
# Synapse YunoHost-erako
|
||||||
|
|
||||||
|
[](https://ci-apps.yunohost.org/ci/apps/synapse/)  
|
||||||
|
|
||||||
|
[](https://install-app.yunohost.org/?app=synapse)
|
||||||
|
|
||||||
|
*[Irakurri README hau beste hizkuntzatan.](./ALL_README.md)*
|
||||||
|
|
||||||
|
> *Pakete honek Synapse YunoHost zerbitzari batean azkar eta zailtasunik gabe instalatzea ahalbidetzen dizu.*
|
||||||
|
> *YunoHost ez baduzu, kontsultatu [gida](https://yunohost.org/install) nola instalatu ikasteko.*
|
||||||
|
|
||||||
|
## Aurreikuspena
|
||||||
|
|
||||||
|
Instant messaging server matrix network.
|
||||||
|
|
||||||
|
Yunohost chatroom with matrix : [https://riot.im/app/#/room/#yunohost:matrix.org](https://riot.im/app/#/room/#yunohost:matrix.org)
|
||||||
|
|
||||||
|
|
||||||
|
**Paketatutako bertsioa:** 1.61.0~ynh1
|
||||||
|
## Ezespena / informazio garrantzitsua
|
||||||
|
|
||||||
|
## Configuration
|
||||||
|
|
||||||
|
### Install for ARM arch (or slow arch)
|
||||||
|
|
||||||
|
For all slow or arm architecture it's recommended to build the dh file before the install to have a quicker install.
|
||||||
|
You could build it by this cmd : `openssl dhparam -out /etc/ssl/private/dh2048.pem 2048 > /dev/null`
|
||||||
|
After that you can install it without problem.
|
||||||
|
|
||||||
|
The package uses a prebuilt python virtual environnement. The binary are taken from this repository: https://github.com/Josue-T/synapse_python_build
|
||||||
|
The script to build the binary is also available.
|
||||||
|
|
||||||
|
### Web client
|
||||||
|
|
||||||
|
If you want a web client you can also install Element with this package: https://github.com/YunoHost-Apps/element_ynh .
|
||||||
|
|
||||||
|
### Access by federation
|
||||||
|
|
||||||
|
If your server name is identical to the domain on which synapse is installed, and the default port 8448 is used, your server is normally already accessible by the federation.
|
||||||
|
|
||||||
|
If not, you can add the following line in the dns configuration but you normally don't need it as a .well-known file is edited during the install to declare your server name and port to the federation.
|
||||||
|
|
||||||
|
```
|
||||||
|
_matrix._tcp.<server_name.tld> <ttl> IN SRV 10 0 <port> <domain-or-subdomain-of-synapse.tld>
|
||||||
|
```
|
||||||
|
for example
|
||||||
|
```
|
||||||
|
_matrix._tcp.example.com. 3600 IN SRV 10 0 SYNAPSE_PORT synapse.example.com.
|
||||||
|
```
|
||||||
|
You need to replace SYNAPSE_PORT by the real port. This port can be obtained by the command: `yunohost app setting SYNAPSE_INSTANCE_NAME synapse_tls_port`
|
||||||
|
|
||||||
|
For more details, see : https://github.com/matrix-org/synapse/blob/master/docs/federate.md
|
||||||
|
|
||||||
|
If it is not automatically done, you need to open this in your ISP box.
|
||||||
|
|
||||||
|
You also need a valid TLS certificate for the domain used by synapse. To do that you can refer to the documentation here : https://yunohost.org/#/certificate_en
|
||||||
|
|
||||||
|
### Turnserver
|
||||||
|
|
||||||
|
For Voip and video conferencing a turnserver is also installed (and configured). The turnserver listens on two UDP and TCP ports. You can get them with these commands:
|
||||||
|
```
|
||||||
|
yunohost app setting synapse turnserver_tls_port
|
||||||
|
yunohost app setting synapse turnserver_alt_tls_port
|
||||||
|
|
||||||
|
```
|
||||||
|
The turnserver will also choose a port dynamically when a new call starts. The range is between 49153 - 49193.
|
||||||
|
|
||||||
|
For some security reason the ports range (49153 - 49193) isn't automatically open by default. If you want to use the synapse server for voip or conferencing you will need to open this port range manually. To do this just run this command:
|
||||||
|
|
||||||
|
```
|
||||||
|
yunohost firewall allow Both 49153:49193
|
||||||
|
```
|
||||||
|
|
||||||
|
You might also need to open these ports (if it is not automatically done) on your ISP box.
|
||||||
|
|
||||||
|
To prevent the situation when the server is behind a NAT, the public IP is written in the turnserver config. By this the turnserver can send its real public IP to the client. For more information see [the coturn example config file](https://github.com/coturn/coturn/blob/master/examples/etc/turnserver.conf#L102-L120).So if your IP changes, you could run the script `/opt/yunohost/__SYNAPSE_INSTANCE_NAME__/Coturn_config_rotate.sh` to update your config.
|
||||||
|
|
||||||
|
If you have a dynamic IP address, you also might need to update this config automatically. To do that just edit a file named `/etc/cron.d/coturn_config_rotate` and add the following content (just adapt the __SYNAPSE_INSTANCE_NAME__ which could be `synapse` or maybe `synapse__2`).
|
||||||
|
|
||||||
|
```
|
||||||
|
*/15 * * * * root bash /opt/yunohost/__SYNAPSE_INSTANCE_NAME__/Coturn_config_rotate.sh;
|
||||||
|
```
|
||||||
|
|
||||||
|
#### OpenVPN
|
||||||
|
|
||||||
|
In case of you have an OpenVPN server you might want than `coturn-synapse` restart when the VPN restart. To do this create a file named `/usr/local/bin/openvpn_up_script.sh` with this content:
|
||||||
|
```
|
||||||
|
#!/bin/bash
|
||||||
|
|
||||||
|
(
|
||||||
|
sleep 5
|
||||||
|
sudo systemctl restart coturn-synapse.service
|
||||||
|
) &
|
||||||
|
exit 0
|
||||||
|
```
|
||||||
|
|
||||||
|
Add this line in you sudo config file `/etc/sudoers`
|
||||||
|
```
|
||||||
|
openvpn ALL=(ALL) NOPASSWD: /bin/systemctl restart coturn-synapse.service
|
||||||
|
```
|
||||||
|
|
||||||
|
And add this line in your OpenVPN config file
|
||||||
|
```
|
||||||
|
ipchange /usr/local/bin/openvpn_up_script.sh
|
||||||
|
```
|
||||||
|
|
||||||
|
### Important Security Note
|
||||||
|
|
||||||
|
We do not recommend running Element from the same domain name as your Matrix
|
||||||
|
homeserver (synapse). The reason is the risk of XSS (cross-site-scripting)
|
||||||
|
vulnerabilities that could occur if someone caused Element to load and render
|
||||||
|
malicious user generated content from a Matrix API which then had trusted
|
||||||
|
access to Element (or other apps) due to sharing the same domain.
|
||||||
|
|
||||||
|
We have put some coarse mitigations into place to try to protect against this
|
||||||
|
situation, but it's still not a good practice to do it in the first place. See
|
||||||
|
https://github.com/vector-im/element-web/issues/1977 for more details.
|
||||||
|
|
||||||
|
## YunoHost specific features
|
||||||
|
|
||||||
|
## Limitations
|
||||||
|
|
||||||
|
Synapse uses a lot of ressource. So on slow architecture (like small ARM board), this app could take a lot of CPU and RAM.
|
||||||
|
|
||||||
|
This app doesn't provide any real good web interface. So it's recommended to use Element client to connect to this app. This app is available [here](https://github.com/YunoHost-Apps/element_ynh)
|
||||||
|
|
||||||
|
## Additional information
|
||||||
|
|
||||||
|
### Multi instance support
|
||||||
|
|
||||||
|
To give a possibility to have multiple domains you can use multiple instances of synapse. In this case all instances will run on different ports so it's really important to put a SRV record in your domain. You can get the port that you need to put in your SRV record with this following command:
|
||||||
|
```
|
||||||
|
yunohost app setting synapse__<instancenumber> synapse_tls_port
|
||||||
|
```
|
||||||
|
|
||||||
|
Before installing a second instance of the app it's really recommended to update all existing instances.
|
||||||
|
|
||||||
|
## Dokumentazioa eta baliabideak
|
||||||
|
|
||||||
|
- Aplikazioaren webgune ofiziala: <https://matrix.org/>
|
||||||
|
- Jatorrizko aplikazioaren kode-gordailua: <https://github.com/matrix-org/synapse>
|
||||||
|
- YunoHost Denda: <https://apps.yunohost.org/app/synapse>
|
||||||
|
- Eman errore baten berri: <https://github.com/YunoHost-Apps/synapse_ynh/issues>
|
||||||
|
|
||||||
|
## Garatzaileentzako informazioa
|
||||||
|
|
||||||
|
Bidali `pull request`a [`testing` abarrera](https://github.com/YunoHost-Apps/synapse_ynh/tree/testing).
|
||||||
|
|
||||||
|
`testing` abarra probatzeko, ondorengoa egin:
|
||||||
|
|
||||||
|
```bash
|
||||||
|
sudo yunohost app install https://github.com/YunoHost-Apps/synapse_ynh/tree/testing --debug
|
||||||
|
edo
|
||||||
|
sudo yunohost app upgrade synapse -u https://github.com/YunoHost-Apps/synapse_ynh/tree/testing --debug
|
||||||
|
```
|
||||||
|
|
||||||
|
**Informazio gehiago aplikazioaren paketatzeari buruz:** <https://yunohost.org/packaging_apps>
|
||||||
30
README_fr.md
30
README_fr.md
|
|
@ -1,18 +1,18 @@
|
||||||
<!--
|
<!--
|
||||||
N.B.: This README was automatically generated by https://github.com/YunoHost/apps/tree/master/tools/readme_generator
|
Nota bene : ce README est automatiquement généré par <https://github.com/YunoHost/apps/tree/master/tools/readme_generator>
|
||||||
It shall NOT be edited by hand.
|
Il NE doit PAS être modifié à la main.
|
||||||
-->
|
-->
|
||||||
|
|
||||||
# Synapse pour YunoHost
|
# Synapse pour YunoHost
|
||||||
|
|
||||||
[](https://dash.yunohost.org/appci/app/synapse)  
|
[](https://ci-apps.yunohost.org/ci/apps/synapse/)  
|
||||||
|
|
||||||
[](https://install-app.yunohost.org/?app=synapse)
|
[](https://install-app.yunohost.org/?app=synapse)
|
||||||
|
|
||||||
*[Read this readme in english.](./README.md)*
|
*[Lire le README dans d'autres langues.](./ALL_README.md)*
|
||||||
|
|
||||||
> *Ce package vous permet d’installer Synapse rapidement et simplement sur un serveur YunoHost.
|
> *Ce package vous permet d’installer Synapse rapidement et simplement sur un serveur YunoHost.*
|
||||||
Si vous n’avez pas YunoHost, regardez [ici](https://yunohost.org/#/install) pour savoir comment l’installer et en profiter.*
|
> *Si vous n’avez pas YunoHost, consultez [ce guide](https://yunohost.org/install) pour savoir comment l’installer et en profiter.*
|
||||||
|
|
||||||
## Vue d’ensemble
|
## Vue d’ensemble
|
||||||
|
|
||||||
|
|
@ -21,7 +21,7 @@ Instant messaging server matrix network.
|
||||||
Yunohost chatroom with matrix : [https://riot.im/app/#/room/#yunohost:matrix.org](https://riot.im/app/#/room/#yunohost:matrix.org)
|
Yunohost chatroom with matrix : [https://riot.im/app/#/room/#yunohost:matrix.org](https://riot.im/app/#/room/#yunohost:matrix.org)
|
||||||
|
|
||||||
|
|
||||||
**Version incluse :** 1.61.0~ynh1
|
**Version incluse :** 1.61.0~ynh1
|
||||||
## Avertissements / informations importantes
|
## Avertissements / informations importantes
|
||||||
|
|
||||||
## Configuration
|
## Configuration
|
||||||
|
|
@ -142,21 +142,21 @@ Before installing a second instance of the app it's really recommended to update
|
||||||
|
|
||||||
## Documentations et ressources
|
## Documentations et ressources
|
||||||
|
|
||||||
* Site officiel de l’app : <https://matrix.org/>
|
- Site officiel de l’app : <https://matrix.org/>
|
||||||
* Dépôt de code officiel de l’app : <https://github.com/matrix-org/synapse>
|
- Dépôt de code officiel de l’app : <https://github.com/matrix-org/synapse>
|
||||||
* YunoHost Store: <https://apps.yunohost.org/app/synapse>
|
- YunoHost Store : <https://apps.yunohost.org/app/synapse>
|
||||||
* Signaler un bug : <https://github.com/YunoHost-Apps/synapse_ynh/issues>
|
- Signaler un bug : <https://github.com/YunoHost-Apps/synapse_ynh/issues>
|
||||||
|
|
||||||
## Informations pour les développeurs
|
## Informations pour les développeurs
|
||||||
|
|
||||||
Merci de faire vos pull request sur la [branche testing](https://github.com/YunoHost-Apps/synapse_ynh/tree/testing).
|
Merci de faire vos pull request sur la [branche `testing`](https://github.com/YunoHost-Apps/synapse_ynh/tree/testing).
|
||||||
|
|
||||||
Pour essayer la branche testing, procédez comme suit.
|
Pour essayer la branche `testing`, procédez comme suit :
|
||||||
|
|
||||||
``` bash
|
```bash
|
||||||
sudo yunohost app install https://github.com/YunoHost-Apps/synapse_ynh/tree/testing --debug
|
sudo yunohost app install https://github.com/YunoHost-Apps/synapse_ynh/tree/testing --debug
|
||||||
ou
|
ou
|
||||||
sudo yunohost app upgrade synapse -u https://github.com/YunoHost-Apps/synapse_ynh/tree/testing --debug
|
sudo yunohost app upgrade synapse -u https://github.com/YunoHost-Apps/synapse_ynh/tree/testing --debug
|
||||||
```
|
```
|
||||||
|
|
||||||
**Plus d’infos sur le packaging d’applications :** <https://yunohost.org/packaging_apps>
|
**Plus d’infos sur le packaging d’applications :** <https://yunohost.org/packaging_apps>
|
||||||
|
|
|
||||||
162
README_gl.md
Normal file
162
README_gl.md
Normal file
|
|
@ -0,0 +1,162 @@
|
||||||
|
<!--
|
||||||
|
NOTA: Este README foi creado automáticamente por <https://github.com/YunoHost/apps/tree/master/tools/readme_generator>
|
||||||
|
NON debe editarse manualmente.
|
||||||
|
-->
|
||||||
|
|
||||||
|
# Synapse para YunoHost
|
||||||
|
|
||||||
|
[](https://ci-apps.yunohost.org/ci/apps/synapse/)  
|
||||||
|
|
||||||
|
[](https://install-app.yunohost.org/?app=synapse)
|
||||||
|
|
||||||
|
*[Le este README en outros idiomas.](./ALL_README.md)*
|
||||||
|
|
||||||
|
> *Este paquete permíteche instalar Synapse de xeito rápido e doado nun servidor YunoHost.*
|
||||||
|
> *Se non usas YunoHost, le a [documentación](https://yunohost.org/install) para saber como instalalo.*
|
||||||
|
|
||||||
|
## Vista xeral
|
||||||
|
|
||||||
|
Instant messaging server matrix network.
|
||||||
|
|
||||||
|
Yunohost chatroom with matrix : [https://riot.im/app/#/room/#yunohost:matrix.org](https://riot.im/app/#/room/#yunohost:matrix.org)
|
||||||
|
|
||||||
|
|
||||||
|
**Versión proporcionada:** 1.61.0~ynh1
|
||||||
|
## Avisos / información importante
|
||||||
|
|
||||||
|
## Configuration
|
||||||
|
|
||||||
|
### Install for ARM arch (or slow arch)
|
||||||
|
|
||||||
|
For all slow or arm architecture it's recommended to build the dh file before the install to have a quicker install.
|
||||||
|
You could build it by this cmd : `openssl dhparam -out /etc/ssl/private/dh2048.pem 2048 > /dev/null`
|
||||||
|
After that you can install it without problem.
|
||||||
|
|
||||||
|
The package uses a prebuilt python virtual environnement. The binary are taken from this repository: https://github.com/Josue-T/synapse_python_build
|
||||||
|
The script to build the binary is also available.
|
||||||
|
|
||||||
|
### Web client
|
||||||
|
|
||||||
|
If you want a web client you can also install Element with this package: https://github.com/YunoHost-Apps/element_ynh .
|
||||||
|
|
||||||
|
### Access by federation
|
||||||
|
|
||||||
|
If your server name is identical to the domain on which synapse is installed, and the default port 8448 is used, your server is normally already accessible by the federation.
|
||||||
|
|
||||||
|
If not, you can add the following line in the dns configuration but you normally don't need it as a .well-known file is edited during the install to declare your server name and port to the federation.
|
||||||
|
|
||||||
|
```
|
||||||
|
_matrix._tcp.<server_name.tld> <ttl> IN SRV 10 0 <port> <domain-or-subdomain-of-synapse.tld>
|
||||||
|
```
|
||||||
|
for example
|
||||||
|
```
|
||||||
|
_matrix._tcp.example.com. 3600 IN SRV 10 0 SYNAPSE_PORT synapse.example.com.
|
||||||
|
```
|
||||||
|
You need to replace SYNAPSE_PORT by the real port. This port can be obtained by the command: `yunohost app setting SYNAPSE_INSTANCE_NAME synapse_tls_port`
|
||||||
|
|
||||||
|
For more details, see : https://github.com/matrix-org/synapse/blob/master/docs/federate.md
|
||||||
|
|
||||||
|
If it is not automatically done, you need to open this in your ISP box.
|
||||||
|
|
||||||
|
You also need a valid TLS certificate for the domain used by synapse. To do that you can refer to the documentation here : https://yunohost.org/#/certificate_en
|
||||||
|
|
||||||
|
### Turnserver
|
||||||
|
|
||||||
|
For Voip and video conferencing a turnserver is also installed (and configured). The turnserver listens on two UDP and TCP ports. You can get them with these commands:
|
||||||
|
```
|
||||||
|
yunohost app setting synapse turnserver_tls_port
|
||||||
|
yunohost app setting synapse turnserver_alt_tls_port
|
||||||
|
|
||||||
|
```
|
||||||
|
The turnserver will also choose a port dynamically when a new call starts. The range is between 49153 - 49193.
|
||||||
|
|
||||||
|
For some security reason the ports range (49153 - 49193) isn't automatically open by default. If you want to use the synapse server for voip or conferencing you will need to open this port range manually. To do this just run this command:
|
||||||
|
|
||||||
|
```
|
||||||
|
yunohost firewall allow Both 49153:49193
|
||||||
|
```
|
||||||
|
|
||||||
|
You might also need to open these ports (if it is not automatically done) on your ISP box.
|
||||||
|
|
||||||
|
To prevent the situation when the server is behind a NAT, the public IP is written in the turnserver config. By this the turnserver can send its real public IP to the client. For more information see [the coturn example config file](https://github.com/coturn/coturn/blob/master/examples/etc/turnserver.conf#L102-L120).So if your IP changes, you could run the script `/opt/yunohost/__SYNAPSE_INSTANCE_NAME__/Coturn_config_rotate.sh` to update your config.
|
||||||
|
|
||||||
|
If you have a dynamic IP address, you also might need to update this config automatically. To do that just edit a file named `/etc/cron.d/coturn_config_rotate` and add the following content (just adapt the __SYNAPSE_INSTANCE_NAME__ which could be `synapse` or maybe `synapse__2`).
|
||||||
|
|
||||||
|
```
|
||||||
|
*/15 * * * * root bash /opt/yunohost/__SYNAPSE_INSTANCE_NAME__/Coturn_config_rotate.sh;
|
||||||
|
```
|
||||||
|
|
||||||
|
#### OpenVPN
|
||||||
|
|
||||||
|
In case of you have an OpenVPN server you might want than `coturn-synapse` restart when the VPN restart. To do this create a file named `/usr/local/bin/openvpn_up_script.sh` with this content:
|
||||||
|
```
|
||||||
|
#!/bin/bash
|
||||||
|
|
||||||
|
(
|
||||||
|
sleep 5
|
||||||
|
sudo systemctl restart coturn-synapse.service
|
||||||
|
) &
|
||||||
|
exit 0
|
||||||
|
```
|
||||||
|
|
||||||
|
Add this line in you sudo config file `/etc/sudoers`
|
||||||
|
```
|
||||||
|
openvpn ALL=(ALL) NOPASSWD: /bin/systemctl restart coturn-synapse.service
|
||||||
|
```
|
||||||
|
|
||||||
|
And add this line in your OpenVPN config file
|
||||||
|
```
|
||||||
|
ipchange /usr/local/bin/openvpn_up_script.sh
|
||||||
|
```
|
||||||
|
|
||||||
|
### Important Security Note
|
||||||
|
|
||||||
|
We do not recommend running Element from the same domain name as your Matrix
|
||||||
|
homeserver (synapse). The reason is the risk of XSS (cross-site-scripting)
|
||||||
|
vulnerabilities that could occur if someone caused Element to load and render
|
||||||
|
malicious user generated content from a Matrix API which then had trusted
|
||||||
|
access to Element (or other apps) due to sharing the same domain.
|
||||||
|
|
||||||
|
We have put some coarse mitigations into place to try to protect against this
|
||||||
|
situation, but it's still not a good practice to do it in the first place. See
|
||||||
|
https://github.com/vector-im/element-web/issues/1977 for more details.
|
||||||
|
|
||||||
|
## YunoHost specific features
|
||||||
|
|
||||||
|
## Limitations
|
||||||
|
|
||||||
|
Synapse uses a lot of ressource. So on slow architecture (like small ARM board), this app could take a lot of CPU and RAM.
|
||||||
|
|
||||||
|
This app doesn't provide any real good web interface. So it's recommended to use Element client to connect to this app. This app is available [here](https://github.com/YunoHost-Apps/element_ynh)
|
||||||
|
|
||||||
|
## Additional information
|
||||||
|
|
||||||
|
### Multi instance support
|
||||||
|
|
||||||
|
To give a possibility to have multiple domains you can use multiple instances of synapse. In this case all instances will run on different ports so it's really important to put a SRV record in your domain. You can get the port that you need to put in your SRV record with this following command:
|
||||||
|
```
|
||||||
|
yunohost app setting synapse__<instancenumber> synapse_tls_port
|
||||||
|
```
|
||||||
|
|
||||||
|
Before installing a second instance of the app it's really recommended to update all existing instances.
|
||||||
|
|
||||||
|
## Documentación e recursos
|
||||||
|
|
||||||
|
- Web oficial da app: <https://matrix.org/>
|
||||||
|
- Repositorio de orixe do código: <https://github.com/matrix-org/synapse>
|
||||||
|
- Tenda YunoHost: <https://apps.yunohost.org/app/synapse>
|
||||||
|
- Informar dun problema: <https://github.com/YunoHost-Apps/synapse_ynh/issues>
|
||||||
|
|
||||||
|
## Info de desenvolvemento
|
||||||
|
|
||||||
|
Envía a túa colaboración á [rama `testing`](https://github.com/YunoHost-Apps/synapse_ynh/tree/testing).
|
||||||
|
|
||||||
|
Para probar a rama `testing`, procede deste xeito:
|
||||||
|
|
||||||
|
```bash
|
||||||
|
sudo yunohost app install https://github.com/YunoHost-Apps/synapse_ynh/tree/testing --debug
|
||||||
|
ou
|
||||||
|
sudo yunohost app upgrade synapse -u https://github.com/YunoHost-Apps/synapse_ynh/tree/testing --debug
|
||||||
|
```
|
||||||
|
|
||||||
|
**Máis info sobre o empaquetado da app:** <https://yunohost.org/packaging_apps>
|
||||||
162
README_id.md
Normal file
162
README_id.md
Normal file
|
|
@ -0,0 +1,162 @@
|
||||||
|
<!--
|
||||||
|
N.B.: README ini dibuat secara otomatis oleh <https://github.com/YunoHost/apps/tree/master/tools/readme_generator>
|
||||||
|
Ini TIDAK boleh diedit dengan tangan.
|
||||||
|
-->
|
||||||
|
|
||||||
|
# Synapse untuk YunoHost
|
||||||
|
|
||||||
|
[](https://ci-apps.yunohost.org/ci/apps/synapse/)  
|
||||||
|
|
||||||
|
[](https://install-app.yunohost.org/?app=synapse)
|
||||||
|
|
||||||
|
*[Baca README ini dengan bahasa yang lain.](./ALL_README.md)*
|
||||||
|
|
||||||
|
> *Paket ini memperbolehkan Anda untuk memasang Synapse secara cepat dan mudah pada server YunoHost.*
|
||||||
|
> *Bila Anda tidak mempunyai YunoHost, silakan berkonsultasi dengan [panduan](https://yunohost.org/install) untuk mempelajari bagaimana untuk memasangnya.*
|
||||||
|
|
||||||
|
## Ringkasan
|
||||||
|
|
||||||
|
Instant messaging server matrix network.
|
||||||
|
|
||||||
|
Yunohost chatroom with matrix : [https://riot.im/app/#/room/#yunohost:matrix.org](https://riot.im/app/#/room/#yunohost:matrix.org)
|
||||||
|
|
||||||
|
|
||||||
|
**Versi terkirim:** 1.61.0~ynh1
|
||||||
|
## Sangkalan / informasi penting
|
||||||
|
|
||||||
|
## Configuration
|
||||||
|
|
||||||
|
### Install for ARM arch (or slow arch)
|
||||||
|
|
||||||
|
For all slow or arm architecture it's recommended to build the dh file before the install to have a quicker install.
|
||||||
|
You could build it by this cmd : `openssl dhparam -out /etc/ssl/private/dh2048.pem 2048 > /dev/null`
|
||||||
|
After that you can install it without problem.
|
||||||
|
|
||||||
|
The package uses a prebuilt python virtual environnement. The binary are taken from this repository: https://github.com/Josue-T/synapse_python_build
|
||||||
|
The script to build the binary is also available.
|
||||||
|
|
||||||
|
### Web client
|
||||||
|
|
||||||
|
If you want a web client you can also install Element with this package: https://github.com/YunoHost-Apps/element_ynh .
|
||||||
|
|
||||||
|
### Access by federation
|
||||||
|
|
||||||
|
If your server name is identical to the domain on which synapse is installed, and the default port 8448 is used, your server is normally already accessible by the federation.
|
||||||
|
|
||||||
|
If not, you can add the following line in the dns configuration but you normally don't need it as a .well-known file is edited during the install to declare your server name and port to the federation.
|
||||||
|
|
||||||
|
```
|
||||||
|
_matrix._tcp.<server_name.tld> <ttl> IN SRV 10 0 <port> <domain-or-subdomain-of-synapse.tld>
|
||||||
|
```
|
||||||
|
for example
|
||||||
|
```
|
||||||
|
_matrix._tcp.example.com. 3600 IN SRV 10 0 SYNAPSE_PORT synapse.example.com.
|
||||||
|
```
|
||||||
|
You need to replace SYNAPSE_PORT by the real port. This port can be obtained by the command: `yunohost app setting SYNAPSE_INSTANCE_NAME synapse_tls_port`
|
||||||
|
|
||||||
|
For more details, see : https://github.com/matrix-org/synapse/blob/master/docs/federate.md
|
||||||
|
|
||||||
|
If it is not automatically done, you need to open this in your ISP box.
|
||||||
|
|
||||||
|
You also need a valid TLS certificate for the domain used by synapse. To do that you can refer to the documentation here : https://yunohost.org/#/certificate_en
|
||||||
|
|
||||||
|
### Turnserver
|
||||||
|
|
||||||
|
For Voip and video conferencing a turnserver is also installed (and configured). The turnserver listens on two UDP and TCP ports. You can get them with these commands:
|
||||||
|
```
|
||||||
|
yunohost app setting synapse turnserver_tls_port
|
||||||
|
yunohost app setting synapse turnserver_alt_tls_port
|
||||||
|
|
||||||
|
```
|
||||||
|
The turnserver will also choose a port dynamically when a new call starts. The range is between 49153 - 49193.
|
||||||
|
|
||||||
|
For some security reason the ports range (49153 - 49193) isn't automatically open by default. If you want to use the synapse server for voip or conferencing you will need to open this port range manually. To do this just run this command:
|
||||||
|
|
||||||
|
```
|
||||||
|
yunohost firewall allow Both 49153:49193
|
||||||
|
```
|
||||||
|
|
||||||
|
You might also need to open these ports (if it is not automatically done) on your ISP box.
|
||||||
|
|
||||||
|
To prevent the situation when the server is behind a NAT, the public IP is written in the turnserver config. By this the turnserver can send its real public IP to the client. For more information see [the coturn example config file](https://github.com/coturn/coturn/blob/master/examples/etc/turnserver.conf#L102-L120).So if your IP changes, you could run the script `/opt/yunohost/__SYNAPSE_INSTANCE_NAME__/Coturn_config_rotate.sh` to update your config.
|
||||||
|
|
||||||
|
If you have a dynamic IP address, you also might need to update this config automatically. To do that just edit a file named `/etc/cron.d/coturn_config_rotate` and add the following content (just adapt the __SYNAPSE_INSTANCE_NAME__ which could be `synapse` or maybe `synapse__2`).
|
||||||
|
|
||||||
|
```
|
||||||
|
*/15 * * * * root bash /opt/yunohost/__SYNAPSE_INSTANCE_NAME__/Coturn_config_rotate.sh;
|
||||||
|
```
|
||||||
|
|
||||||
|
#### OpenVPN
|
||||||
|
|
||||||
|
In case of you have an OpenVPN server you might want than `coturn-synapse` restart when the VPN restart. To do this create a file named `/usr/local/bin/openvpn_up_script.sh` with this content:
|
||||||
|
```
|
||||||
|
#!/bin/bash
|
||||||
|
|
||||||
|
(
|
||||||
|
sleep 5
|
||||||
|
sudo systemctl restart coturn-synapse.service
|
||||||
|
) &
|
||||||
|
exit 0
|
||||||
|
```
|
||||||
|
|
||||||
|
Add this line in you sudo config file `/etc/sudoers`
|
||||||
|
```
|
||||||
|
openvpn ALL=(ALL) NOPASSWD: /bin/systemctl restart coturn-synapse.service
|
||||||
|
```
|
||||||
|
|
||||||
|
And add this line in your OpenVPN config file
|
||||||
|
```
|
||||||
|
ipchange /usr/local/bin/openvpn_up_script.sh
|
||||||
|
```
|
||||||
|
|
||||||
|
### Important Security Note
|
||||||
|
|
||||||
|
We do not recommend running Element from the same domain name as your Matrix
|
||||||
|
homeserver (synapse). The reason is the risk of XSS (cross-site-scripting)
|
||||||
|
vulnerabilities that could occur if someone caused Element to load and render
|
||||||
|
malicious user generated content from a Matrix API which then had trusted
|
||||||
|
access to Element (or other apps) due to sharing the same domain.
|
||||||
|
|
||||||
|
We have put some coarse mitigations into place to try to protect against this
|
||||||
|
situation, but it's still not a good practice to do it in the first place. See
|
||||||
|
https://github.com/vector-im/element-web/issues/1977 for more details.
|
||||||
|
|
||||||
|
## YunoHost specific features
|
||||||
|
|
||||||
|
## Limitations
|
||||||
|
|
||||||
|
Synapse uses a lot of ressource. So on slow architecture (like small ARM board), this app could take a lot of CPU and RAM.
|
||||||
|
|
||||||
|
This app doesn't provide any real good web interface. So it's recommended to use Element client to connect to this app. This app is available [here](https://github.com/YunoHost-Apps/element_ynh)
|
||||||
|
|
||||||
|
## Additional information
|
||||||
|
|
||||||
|
### Multi instance support
|
||||||
|
|
||||||
|
To give a possibility to have multiple domains you can use multiple instances of synapse. In this case all instances will run on different ports so it's really important to put a SRV record in your domain. You can get the port that you need to put in your SRV record with this following command:
|
||||||
|
```
|
||||||
|
yunohost app setting synapse__<instancenumber> synapse_tls_port
|
||||||
|
```
|
||||||
|
|
||||||
|
Before installing a second instance of the app it's really recommended to update all existing instances.
|
||||||
|
|
||||||
|
## Dokumentasi dan sumber daya
|
||||||
|
|
||||||
|
- Website aplikasi resmi: <https://matrix.org/>
|
||||||
|
- Depot kode aplikasi hulu: <https://github.com/matrix-org/synapse>
|
||||||
|
- Gudang YunoHost: <https://apps.yunohost.org/app/synapse>
|
||||||
|
- Laporkan bug: <https://github.com/YunoHost-Apps/synapse_ynh/issues>
|
||||||
|
|
||||||
|
## Info developer
|
||||||
|
|
||||||
|
Silakan kirim pull request ke [`testing` branch](https://github.com/YunoHost-Apps/synapse_ynh/tree/testing).
|
||||||
|
|
||||||
|
Untuk mencoba branch `testing`, silakan dilanjutkan seperti:
|
||||||
|
|
||||||
|
```bash
|
||||||
|
sudo yunohost app install https://github.com/YunoHost-Apps/synapse_ynh/tree/testing --debug
|
||||||
|
atau
|
||||||
|
sudo yunohost app upgrade synapse -u https://github.com/YunoHost-Apps/synapse_ynh/tree/testing --debug
|
||||||
|
```
|
||||||
|
|
||||||
|
**Info lebih lanjut mengenai pemaketan aplikasi:** <https://yunohost.org/packaging_apps>
|
||||||
162
README_ru.md
Normal file
162
README_ru.md
Normal file
|
|
@ -0,0 +1,162 @@
|
||||||
|
<!--
|
||||||
|
Важно: этот README был автоматически сгенерирован <https://github.com/YunoHost/apps/tree/master/tools/readme_generator>
|
||||||
|
Он НЕ ДОЛЖЕН редактироваться вручную.
|
||||||
|
-->
|
||||||
|
|
||||||
|
# Synapse для YunoHost
|
||||||
|
|
||||||
|
[](https://ci-apps.yunohost.org/ci/apps/synapse/)  
|
||||||
|
|
||||||
|
[](https://install-app.yunohost.org/?app=synapse)
|
||||||
|
|
||||||
|
*[Прочтите этот README на других языках.](./ALL_README.md)*
|
||||||
|
|
||||||
|
> *Этот пакет позволяет Вам установить Synapse быстро и просто на YunoHost-сервер.*
|
||||||
|
> *Если у Вас нет YunoHost, пожалуйста, посмотрите [инструкцию](https://yunohost.org/install), чтобы узнать, как установить его.*
|
||||||
|
|
||||||
|
## Обзор
|
||||||
|
|
||||||
|
Instant messaging server matrix network.
|
||||||
|
|
||||||
|
Yunohost chatroom with matrix : [https://riot.im/app/#/room/#yunohost:matrix.org](https://riot.im/app/#/room/#yunohost:matrix.org)
|
||||||
|
|
||||||
|
|
||||||
|
**Поставляемая версия:** 1.61.0~ynh1
|
||||||
|
## Дисклеймеры / важная информация
|
||||||
|
|
||||||
|
## Configuration
|
||||||
|
|
||||||
|
### Install for ARM arch (or slow arch)
|
||||||
|
|
||||||
|
For all slow or arm architecture it's recommended to build the dh file before the install to have a quicker install.
|
||||||
|
You could build it by this cmd : `openssl dhparam -out /etc/ssl/private/dh2048.pem 2048 > /dev/null`
|
||||||
|
After that you can install it without problem.
|
||||||
|
|
||||||
|
The package uses a prebuilt python virtual environnement. The binary are taken from this repository: https://github.com/Josue-T/synapse_python_build
|
||||||
|
The script to build the binary is also available.
|
||||||
|
|
||||||
|
### Web client
|
||||||
|
|
||||||
|
If you want a web client you can also install Element with this package: https://github.com/YunoHost-Apps/element_ynh .
|
||||||
|
|
||||||
|
### Access by federation
|
||||||
|
|
||||||
|
If your server name is identical to the domain on which synapse is installed, and the default port 8448 is used, your server is normally already accessible by the federation.
|
||||||
|
|
||||||
|
If not, you can add the following line in the dns configuration but you normally don't need it as a .well-known file is edited during the install to declare your server name and port to the federation.
|
||||||
|
|
||||||
|
```
|
||||||
|
_matrix._tcp.<server_name.tld> <ttl> IN SRV 10 0 <port> <domain-or-subdomain-of-synapse.tld>
|
||||||
|
```
|
||||||
|
for example
|
||||||
|
```
|
||||||
|
_matrix._tcp.example.com. 3600 IN SRV 10 0 SYNAPSE_PORT synapse.example.com.
|
||||||
|
```
|
||||||
|
You need to replace SYNAPSE_PORT by the real port. This port can be obtained by the command: `yunohost app setting SYNAPSE_INSTANCE_NAME synapse_tls_port`
|
||||||
|
|
||||||
|
For more details, see : https://github.com/matrix-org/synapse/blob/master/docs/federate.md
|
||||||
|
|
||||||
|
If it is not automatically done, you need to open this in your ISP box.
|
||||||
|
|
||||||
|
You also need a valid TLS certificate for the domain used by synapse. To do that you can refer to the documentation here : https://yunohost.org/#/certificate_en
|
||||||
|
|
||||||
|
### Turnserver
|
||||||
|
|
||||||
|
For Voip and video conferencing a turnserver is also installed (and configured). The turnserver listens on two UDP and TCP ports. You can get them with these commands:
|
||||||
|
```
|
||||||
|
yunohost app setting synapse turnserver_tls_port
|
||||||
|
yunohost app setting synapse turnserver_alt_tls_port
|
||||||
|
|
||||||
|
```
|
||||||
|
The turnserver will also choose a port dynamically when a new call starts. The range is between 49153 - 49193.
|
||||||
|
|
||||||
|
For some security reason the ports range (49153 - 49193) isn't automatically open by default. If you want to use the synapse server for voip or conferencing you will need to open this port range manually. To do this just run this command:
|
||||||
|
|
||||||
|
```
|
||||||
|
yunohost firewall allow Both 49153:49193
|
||||||
|
```
|
||||||
|
|
||||||
|
You might also need to open these ports (if it is not automatically done) on your ISP box.
|
||||||
|
|
||||||
|
To prevent the situation when the server is behind a NAT, the public IP is written in the turnserver config. By this the turnserver can send its real public IP to the client. For more information see [the coturn example config file](https://github.com/coturn/coturn/blob/master/examples/etc/turnserver.conf#L102-L120).So if your IP changes, you could run the script `/opt/yunohost/__SYNAPSE_INSTANCE_NAME__/Coturn_config_rotate.sh` to update your config.
|
||||||
|
|
||||||
|
If you have a dynamic IP address, you also might need to update this config automatically. To do that just edit a file named `/etc/cron.d/coturn_config_rotate` and add the following content (just adapt the __SYNAPSE_INSTANCE_NAME__ which could be `synapse` or maybe `synapse__2`).
|
||||||
|
|
||||||
|
```
|
||||||
|
*/15 * * * * root bash /opt/yunohost/__SYNAPSE_INSTANCE_NAME__/Coturn_config_rotate.sh;
|
||||||
|
```
|
||||||
|
|
||||||
|
#### OpenVPN
|
||||||
|
|
||||||
|
In case of you have an OpenVPN server you might want than `coturn-synapse` restart when the VPN restart. To do this create a file named `/usr/local/bin/openvpn_up_script.sh` with this content:
|
||||||
|
```
|
||||||
|
#!/bin/bash
|
||||||
|
|
||||||
|
(
|
||||||
|
sleep 5
|
||||||
|
sudo systemctl restart coturn-synapse.service
|
||||||
|
) &
|
||||||
|
exit 0
|
||||||
|
```
|
||||||
|
|
||||||
|
Add this line in you sudo config file `/etc/sudoers`
|
||||||
|
```
|
||||||
|
openvpn ALL=(ALL) NOPASSWD: /bin/systemctl restart coturn-synapse.service
|
||||||
|
```
|
||||||
|
|
||||||
|
And add this line in your OpenVPN config file
|
||||||
|
```
|
||||||
|
ipchange /usr/local/bin/openvpn_up_script.sh
|
||||||
|
```
|
||||||
|
|
||||||
|
### Important Security Note
|
||||||
|
|
||||||
|
We do not recommend running Element from the same domain name as your Matrix
|
||||||
|
homeserver (synapse). The reason is the risk of XSS (cross-site-scripting)
|
||||||
|
vulnerabilities that could occur if someone caused Element to load and render
|
||||||
|
malicious user generated content from a Matrix API which then had trusted
|
||||||
|
access to Element (or other apps) due to sharing the same domain.
|
||||||
|
|
||||||
|
We have put some coarse mitigations into place to try to protect against this
|
||||||
|
situation, but it's still not a good practice to do it in the first place. See
|
||||||
|
https://github.com/vector-im/element-web/issues/1977 for more details.
|
||||||
|
|
||||||
|
## YunoHost specific features
|
||||||
|
|
||||||
|
## Limitations
|
||||||
|
|
||||||
|
Synapse uses a lot of ressource. So on slow architecture (like small ARM board), this app could take a lot of CPU and RAM.
|
||||||
|
|
||||||
|
This app doesn't provide any real good web interface. So it's recommended to use Element client to connect to this app. This app is available [here](https://github.com/YunoHost-Apps/element_ynh)
|
||||||
|
|
||||||
|
## Additional information
|
||||||
|
|
||||||
|
### Multi instance support
|
||||||
|
|
||||||
|
To give a possibility to have multiple domains you can use multiple instances of synapse. In this case all instances will run on different ports so it's really important to put a SRV record in your domain. You can get the port that you need to put in your SRV record with this following command:
|
||||||
|
```
|
||||||
|
yunohost app setting synapse__<instancenumber> synapse_tls_port
|
||||||
|
```
|
||||||
|
|
||||||
|
Before installing a second instance of the app it's really recommended to update all existing instances.
|
||||||
|
|
||||||
|
## Документация и ресурсы
|
||||||
|
|
||||||
|
- Официальный веб-сайт приложения: <https://matrix.org/>
|
||||||
|
- Репозиторий кода главной ветки приложения: <https://github.com/matrix-org/synapse>
|
||||||
|
- Магазин YunoHost: <https://apps.yunohost.org/app/synapse>
|
||||||
|
- Сообщите об ошибке: <https://github.com/YunoHost-Apps/synapse_ynh/issues>
|
||||||
|
|
||||||
|
## Информация для разработчиков
|
||||||
|
|
||||||
|
Пришлите Ваш запрос на слияние в [ветку `testing`](https://github.com/YunoHost-Apps/synapse_ynh/tree/testing).
|
||||||
|
|
||||||
|
Чтобы попробовать ветку `testing`, пожалуйста, сделайте что-то вроде этого:
|
||||||
|
|
||||||
|
```bash
|
||||||
|
sudo yunohost app install https://github.com/YunoHost-Apps/synapse_ynh/tree/testing --debug
|
||||||
|
или
|
||||||
|
sudo yunohost app upgrade synapse -u https://github.com/YunoHost-Apps/synapse_ynh/tree/testing --debug
|
||||||
|
```
|
||||||
|
|
||||||
|
**Больше информации о пакетировании приложений:** <https://yunohost.org/packaging_apps>
|
||||||
162
README_zh_Hans.md
Normal file
162
README_zh_Hans.md
Normal file
|
|
@ -0,0 +1,162 @@
|
||||||
|
<!--
|
||||||
|
注意：此 README 由 <https://github.com/YunoHost/apps/tree/master/tools/readme_generator> 自动生成
|
||||||
|
请勿手动编辑。
|
||||||
|
-->
|
||||||
|
|
||||||
|
# YunoHost 上的 Synapse
|
||||||
|
|
||||||
|
[](https://ci-apps.yunohost.org/ci/apps/synapse/)  
|
||||||
|
|
||||||
|
[](https://install-app.yunohost.org/?app=synapse)
|
||||||
|
|
||||||
|
*[阅读此 README 的其它语言版本。](./ALL_README.md)*
|
||||||
|
|
||||||
|
> *通过此软件包，您可以在 YunoHost 服务器上快速、简单地安装 Synapse。*
|
||||||
|
> *如果您还没有 YunoHost，请参阅[指南](https://yunohost.org/install)了解如何安装它。*
|
||||||
|
|
||||||
|
## 概况
|
||||||
|
|
||||||
|
Instant messaging server matrix network.
|
||||||
|
|
||||||
|
Yunohost chatroom with matrix : [https://riot.im/app/#/room/#yunohost:matrix.org](https://riot.im/app/#/room/#yunohost:matrix.org)
|
||||||
|
|
||||||
|
|
||||||
|
**分发版本：** 1.61.0~ynh1
|
||||||
|
## 免责声明 / 重要信息
|
||||||
|
|
||||||
|
## Configuration
|
||||||
|
|
||||||
|
### Install for ARM arch (or slow arch)
|
||||||
|
|
||||||
|
For all slow or arm architecture it's recommended to build the dh file before the install to have a quicker install.
|
||||||
|
You could build it by this cmd : `openssl dhparam -out /etc/ssl/private/dh2048.pem 2048 > /dev/null`
|
||||||
|
After that you can install it without problem.
|
||||||
|
|
||||||
|
The package uses a prebuilt python virtual environnement. The binary are taken from this repository: https://github.com/Josue-T/synapse_python_build
|
||||||
|
The script to build the binary is also available.
|
||||||
|
|
||||||
|
### Web client
|
||||||
|
|
||||||
|
If you want a web client you can also install Element with this package: https://github.com/YunoHost-Apps/element_ynh .
|
||||||
|
|
||||||
|
### Access by federation
|
||||||
|
|
||||||
|
If your server name is identical to the domain on which synapse is installed, and the default port 8448 is used, your server is normally already accessible by the federation.
|
||||||
|
|
||||||
|
If not, you can add the following line in the dns configuration but you normally don't need it as a .well-known file is edited during the install to declare your server name and port to the federation.
|
||||||
|
|
||||||
|
```
|
||||||
|
_matrix._tcp.<server_name.tld> <ttl> IN SRV 10 0 <port> <domain-or-subdomain-of-synapse.tld>
|
||||||
|
```
|
||||||
|
for example
|
||||||
|
```
|
||||||
|
_matrix._tcp.example.com. 3600 IN SRV 10 0 SYNAPSE_PORT synapse.example.com.
|
||||||
|
```
|
||||||
|
You need to replace SYNAPSE_PORT by the real port. This port can be obtained by the command: `yunohost app setting SYNAPSE_INSTANCE_NAME synapse_tls_port`
|
||||||
|
|
||||||
|
For more details, see : https://github.com/matrix-org/synapse/blob/master/docs/federate.md
|
||||||
|
|
||||||
|
If it is not automatically done, you need to open this in your ISP box.
|
||||||
|
|
||||||
|
You also need a valid TLS certificate for the domain used by synapse. To do that you can refer to the documentation here : https://yunohost.org/#/certificate_en
|
||||||
|
|
||||||
|
### Turnserver
|
||||||
|
|
||||||
|
For Voip and video conferencing a turnserver is also installed (and configured). The turnserver listens on two UDP and TCP ports. You can get them with these commands:
|
||||||
|
```
|
||||||
|
yunohost app setting synapse turnserver_tls_port
|
||||||
|
yunohost app setting synapse turnserver_alt_tls_port
|
||||||
|
|
||||||
|
```
|
||||||
|
The turnserver will also choose a port dynamically when a new call starts. The range is between 49153 - 49193.
|
||||||
|
|
||||||
|
For some security reason the ports range (49153 - 49193) isn't automatically open by default. If you want to use the synapse server for voip or conferencing you will need to open this port range manually. To do this just run this command:
|
||||||
|
|
||||||
|
```
|
||||||
|
yunohost firewall allow Both 49153:49193
|
||||||
|
```
|
||||||
|
|
||||||
|
You might also need to open these ports (if it is not automatically done) on your ISP box.
|
||||||
|
|
||||||
|
To prevent the situation when the server is behind a NAT, the public IP is written in the turnserver config. By this the turnserver can send its real public IP to the client. For more information see [the coturn example config file](https://github.com/coturn/coturn/blob/master/examples/etc/turnserver.conf#L102-L120).So if your IP changes, you could run the script `/opt/yunohost/__SYNAPSE_INSTANCE_NAME__/Coturn_config_rotate.sh` to update your config.
|
||||||
|
|
||||||
|
If you have a dynamic IP address, you also might need to update this config automatically. To do that just edit a file named `/etc/cron.d/coturn_config_rotate` and add the following content (just adapt the __SYNAPSE_INSTANCE_NAME__ which could be `synapse` or maybe `synapse__2`).
|
||||||
|
|
||||||
|
```
|
||||||
|
*/15 * * * * root bash /opt/yunohost/__SYNAPSE_INSTANCE_NAME__/Coturn_config_rotate.sh;
|
||||||
|
```
|
||||||
|
|
||||||
|
#### OpenVPN
|
||||||
|
|
||||||
|
In case of you have an OpenVPN server you might want than `coturn-synapse` restart when the VPN restart. To do this create a file named `/usr/local/bin/openvpn_up_script.sh` with this content:
|
||||||
|
```
|
||||||
|
#!/bin/bash
|
||||||
|
|
||||||
|
(
|
||||||
|
sleep 5
|
||||||
|
sudo systemctl restart coturn-synapse.service
|
||||||
|
) &
|
||||||
|
exit 0
|
||||||
|
```
|
||||||
|
|
||||||
|
Add this line in you sudo config file `/etc/sudoers`
|
||||||
|
```
|
||||||
|
openvpn ALL=(ALL) NOPASSWD: /bin/systemctl restart coturn-synapse.service
|
||||||
|
```
|
||||||
|
|
||||||
|
And add this line in your OpenVPN config file
|
||||||
|
```
|
||||||
|
ipchange /usr/local/bin/openvpn_up_script.sh
|
||||||
|
```
|
||||||
|
|
||||||
|
### Important Security Note
|
||||||
|
|
||||||
|
We do not recommend running Element from the same domain name as your Matrix
|
||||||
|
homeserver (synapse). The reason is the risk of XSS (cross-site-scripting)
|
||||||
|
vulnerabilities that could occur if someone caused Element to load and render
|
||||||
|
malicious user generated content from a Matrix API which then had trusted
|
||||||
|
access to Element (or other apps) due to sharing the same domain.
|
||||||
|
|
||||||
|
We have put some coarse mitigations into place to try to protect against this
|
||||||
|
situation, but it's still not a good practice to do it in the first place. See
|
||||||
|
https://github.com/vector-im/element-web/issues/1977 for more details.
|
||||||
|
|
||||||
|
## YunoHost specific features
|
||||||
|
|
||||||
|
## Limitations
|
||||||
|
|
||||||
|
Synapse uses a lot of ressource. So on slow architecture (like small ARM board), this app could take a lot of CPU and RAM.
|
||||||
|
|
||||||
|
This app doesn't provide any real good web interface. So it's recommended to use Element client to connect to this app. This app is available [here](https://github.com/YunoHost-Apps/element_ynh)
|
||||||
|
|
||||||
|
## Additional information
|
||||||
|
|
||||||
|
### Multi instance support
|
||||||
|
|
||||||
|
To give a possibility to have multiple domains you can use multiple instances of synapse. In this case all instances will run on different ports so it's really important to put a SRV record in your domain. You can get the port that you need to put in your SRV record with this following command:
|
||||||
|
```
|
||||||
|
yunohost app setting synapse__<instancenumber> synapse_tls_port
|
||||||
|
```
|
||||||
|
|
||||||
|
Before installing a second instance of the app it's really recommended to update all existing instances.
|
||||||
|
|
||||||
|
## 文档与资源
|
||||||
|
|
||||||
|
- 官方应用网站： <https://matrix.org/>
|
||||||
|
- 上游应用代码库： <https://github.com/matrix-org/synapse>
|
||||||
|
- YunoHost 商店： <https://apps.yunohost.org/app/synapse>
|
||||||
|
- 报告 bug： <https://github.com/YunoHost-Apps/synapse_ynh/issues>
|
||||||
|
|
||||||
|
## 开发者信息
|
||||||
|
|
||||||
|
请向 [`testing` 分支](https://github.com/YunoHost-Apps/synapse_ynh/tree/testing) 发送拉取请求。
|
||||||
|
|
||||||
|
如要尝试 `testing` 分支，请这样操作：
|
||||||
|
|
||||||
|
```bash
|
||||||
|
sudo yunohost app install https://github.com/YunoHost-Apps/synapse_ynh/tree/testing --debug
|
||||||
|
或
|
||||||
|
sudo yunohost app upgrade synapse -u https://github.com/YunoHost-Apps/synapse_ynh/tree/testing --debug
|
||||||
|
```
|
||||||
|
|
||||||
|
**有关应用打包的更多信息：** <https://yunohost.org/packaging_apps>
|
||||||
Loading…
Reference in a new issue