423 Commits (03ad6bd4832ce23ac8d2f5d1308cb2caefc651e2)

Author	SHA1	Message	Date
Richard van der Hoff	8e9ca83537	Move admin API to a new prefix	6 years ago
Brendan Abolivier	031919dafb	Fix whole path for admin route	6 years ago
Brendan Abolivier	d8e357b7cf	Fix typo in account validity admin route	6 years ago
Andrew Morgan	6824ddd93d	Config option for verifying federation certificates (MSC 1711) (#4967)	6 years ago
Brendan Abolivier	eaf41a943b	Add management endpoints for account validity	6 years ago
Brendan Abolivier	20f0617e87	Send out emails with links to extend an account's validity period	6 years ago
Erik Johnston	ec638a1602	Only handle GET requests for /push_rules	6 years ago
Erik Johnston	d5adf297e6	Move some rest endpoints to client reader	6 years ago
Brendan Abolivier	747aa9f8ca	Add account expiration feature	6 years ago
Neil Johnson	b25e387c0d	add context to phonehome stats (#5020) ... add context to phonehome stats	6 years ago
Brendan Abolivier	8e85493b0c	Add config option to block users from looking up 3PIDs (#5010)	6 years ago
Erik Johnston	c192bf8970	Add admin API for group deletion	6 years ago
Andrew Morgan	bbd244c7b2	Support 3PID login in password providers (#4931) ... Adds a new method, check_3pid_auth, which gives password providers the chance to allow authentication with third-party identifiers such as email or msisdn.	6 years ago
Richard van der Hoff	7105057cf2	Fix nginx example in ACME doc. (#4923)	6 years ago
Colin W	ab4e4c6c2f	Update Apache Setup To Remove Location Syntax (#4870) ... This one should close #4841. Many thanks to @dev4223 for bringing it up and finding a solution. Signed-off-by: Colin White	6 years ago
Richard van der Hoff	a902d13180	Batch up outgoing read-receipts to reduce federation traffic. (#4890) ... Rate-limit outgoing read-receipts as per #4730.	6 years ago
Erik Johnston	cd8c5b91ad	Fix up sample config	6 years ago
Erik Johnston	926f29ea6d	Fix up config comments	6 years ago
Erik Johnston	213c98c00a	Add option to disable search room lists ... This disables both local and remote room list searching.	6 years ago
Erik Johnston	855bf4658d	Update sample config	6 years ago
Erik Johnston	b616a8717b	Add note on tuning postgres	6 years ago
Michael Kaye	9482a84c0a	Repoint docs for federation (#4881)	6 years ago
Richard van der Hoff	fd463b4f5d	Comment out most options in the generated config. (#4863) ... Make it so that most options in the config are optional, and commented out in the generated config. The reasons this is a good thing are as follows: * If we decide that we should change the default for an option, we can do so, and only those admins that have deliberately chosen to override that option will be stuck on the old setting. * It moves us towards a point where we can get rid of the super-surprising feature of synapse where the default settings for the config come from the generated yaml. * It makes setting up a test config for unit testing an order of magnitude easier (see forthcoming PR). * It makes the generated config more consistent, and hopefully easier for users to understand.	6 years ago
Brendan Abolivier	651ad8bc96	Add ratelimiting on failed login attempts (#4865)	6 years ago
Brendan Abolivier	899e523d6d	Add ratelimiting on login (#4821) ... Add two ratelimiters on login (per-IP address and per-userID).	6 years ago
Richard van der Hoff	9ffadcdbad	fix some typos in federate.md	6 years ago
Andrew Morgan	7998ca3a66	Document using a certificate with a full chain (#4849)	6 years ago
Neil Johnson	83193a9362	fix orphaned sentence	6 years ago
Neil Johnson	8b692bf7c2	Neilj/improved delegation doc 2 (#4832) ... Improved federation configuration docs. Specifically detailing .well-known and SRV based delegation methods. Inspiration Valentin Lab <valentin.lab@kalysto.org> for https://github.com/matrix-org/synapse/pull/4781	6 years ago
Aaron Raimist	8ea1b41a0e	Clarify what registration_shared_secret allows for (#2885) (#4844) ... * Clarify what registration_shared_secret allows for (#2885) Signed-off-by: Aaron Raimist <aaron@raim.ist> * Add changelog Signed-off-by: Aaron Raimist <aaron@raim.ist>	6 years ago
Matthew Hodgson	8f4b9f5210	Reword the sample config header to be less scary (#4801)	6 years ago
Brendan Abolivier	c23e8c3333	Update sample config	6 years ago
Brendan Abolivier	a4c3a361b7	Add rate-limiting on registration (#4735) ... * Rate-limiting for registration * Add unit test for registration rate limiting * Add config parameters for rate limiting on auth endpoints * Doc * Fix doc of rate limiting function Co-Authored-By: babolivier <contact@brendanabolivier.com> * Incorporate review * Fix config parsing * Fix linting errors * Set default config for auth rate limiting * Fix tests * Add changelog * Advance reactor instead of mocked clock * Move parameters to registration specific config and give them more sensible default values * Remove unused config options * Don't mock the rate limiter un MAU tests * Rename _register_with_store into register_with_store * Make CI happy * Remove unused import * Update sample config * Fix ratelimiting test for py2 * Add non-guest test	6 years ago
Erik Johnston	bfa7d46a10	Allow /keys/{changes,query} API to run on worker	6 years ago
Richard van der Hoff	8e28bc5eee	Include a default configuration file in the 'docs' directory. (#4791)	6 years ago
Seebi	aba5eeabd5	Fix v4v6 option in HAProxy example config (#4790) ... The v4v6 option only has a usage one ipv6 socket: https://serverfault.com/q/747895 Signed-off-by: Flakebi <flakebi@t-online.de>	6 years ago
Joseph Weston	144cbfd650	add API documentation ... Signed-off-by: Joseph Weston <joseph@weston.cloud>	6 years ago
Erik Johnston	54f9ce11a7	Move /account/3pid to client_reader	6 years ago
Erik Johnston	4cff9376f7	Move server key queries to federation reader	6 years ago
Paul Tötterman	4bc7483518	Fix apache reverse proxy example (#4742) ... So that it actually works. See https://httpd.apache.org/docs/2.4/mod/mod_proxy.html#proxypass Signed-off-by: Paul Tötterman <paul.totterman@iki.fi>	6 years ago
Erik Johnston	313987187e	Fix tightloop over connecting to replication server ... If the client failed to process incoming commands during the initial set up of the replication connection it would immediately disconnect and reconnect, resulting in a tightloop. This can happen, for example, when subscribing to a stream that has a row that is too long in the backlog. The fix here is to not consider the connection successfully set up until the client has succesfully subscribed and caught up with the streams. This ensures that the retry logic timers aren't reset until then, meaning that if an error does happen during start up the client will continue backing off before retrying again.	6 years ago
Richard van der Hoff	fcd6f01dc7	Minor tweaks to acme docs (#4689)	6 years ago
Benoît S	16e0680498	Added HAProxy example (#4660) ... * Added HAProxy example Proposal of an example with HAProxy. Asked by #4541. Signed-off-by: Benoît S. (“Benpro”) <gitlab@benpro.fr> * Following suggestions of @richvdh	6 years ago
Erik Johnston	62175a20e5	Docs	6 years ago
Erik Johnston	bc8fa1509d	Documentation	6 years ago
Erik Johnston	128902d60a	Update worker docs	6 years ago
Erik Johnston	8b9ae6d3a6	Update docs	6 years ago
Richard van der Hoff	c475275926	Clarifications for reverse proxy docs (#4607) ... Factor out the reverse proxy info to a separate file, add some more info on reverse-proxying the federation port.	6 years ago
Erik Johnston	4588b0d64a	Update MSC1711_certificates_FAQ.md ... Fix incorrect heading level	6 years ago
Erik Johnston	acb2ac5863	Update MSC1711 FAQ to be explicit about well-known (#4584) ... A surprising number of people are using the well-known method, and are simply copying the example configuration. This is problematic as the example includes an explicit port, which causes inbound federation requests to have the HTTP Host header include the port, upsetting some reverse proxies. Given that, we update the well-known example to be more explicit about the various ways you can set it up, and the consequence of using an explict port.	6 years ago