531 Commits (30af161af27146cc44152292060c7005a6b8546b)

Author	SHA1	Message	Date
Erik Johnston	60b912cf0d	Update docs/workers.rst ... E_TOO_MANY_NEGATIVES Co-Authored-By: Richard van der Hoff <1389908+richvdh@users.noreply.github.com>	6 years ago
Erik Johnston	f3ab533374	Support pagination API in client_reader worker	6 years ago
Amber Brown	32e7c9e7f2	Run Black. (#5482)	6 years ago
Amber Brown	eba7caf09f	Remove Postgres 9.4 support (#5448)	6 years ago
Brendan Abolivier	f874b16b2e	Add plugin APIs for implementations of custom event rules.	6 years ago
Neil Johnson	426218323b	Neilj/improve federation docs (#5419) ... Add FAQ questions to federate.md. Add a health warning making it clear that the 1711 upgrade FAQ is now out of date.	6 years ago
Neil Johnson	a11865016e	Set default room version to v4. (#5379) ... Set default room version to v4.	6 years ago
Andrew Morgan	3719680ee4	Add ability to perform password reset via email without trusting the identity server (#5377) ... Sends password reset emails from the homeserver instead of proxying to the identity server. This is now the default behaviour for security reasons. If you wish to continue proxying password reset requests to the identity server you must now enable the email.trust_identity_server_for_password_resets option. This PR is a culmination of 3 smaller PRs which have each been separately reviewed: * #5308 * #5345 * #5368	6 years ago
Richard van der Hoff	9fbb20a531	Stop hardcoding trust of old matrix.org key (#5374) ... There are a few changes going on here: * We make checking the signature on a key server response optional: if no verify_keys are specified, we trust to TLS to validate the connection. * We change the default config so that it does not require responses to be signed by the old key. * We replace the old 'perspectives' config with 'trusted_key_servers', which is also formatted slightly differently. * We emit a warning to the logs every time we trust a key server response signed by the old key.	6 years ago
Neil Johnson	833c406b9b	Neilj/1.0 upgrade notes (#5371) ... 1.0 upgrade/install notes	6 years ago
Richard van der Hoff	b4f1cd31f4	Update sample config	6 years ago
Richard van der Hoff	95ab2eb4a1	Fix notes about well-known and acme (#5357) ... fixes #4951	6 years ago
Neil Johnson	26713515de	Neilj/mau tracking config explainer (#5284) ... Improve documentation of monthly active user blocking and mau_trial_days	6 years ago
Ike Johnson	145f57897d	Update HAProxy example rules ... These new rules allow a user to instead route only matrix traffic, allowing them to run matrix on the domain without affecting their existing websites	6 years ago
Brendan Abolivier	e975b15101	Sample config	6 years ago
Brendan Abolivier	6bfc5ad3a1	Sample config	6 years ago
Travis Ralston	3e1af5109c	Clarify that the admin change password endpoint logs them out (#5303)	6 years ago
Amber Brown	0729ef01f8	regenerate sample config	6 years ago
Aaron Raimist	f795595e95	Specify the type of reCAPTCHA key to use (#5013) ... Signed-off-by: Aaron Raimist <aaron@raim.ist>	6 years ago
Aaron Raimist	9b6f72663e	Fix docs on resetting the user directory (#5036) ... Signed-off-by: Aaron Raimist <aaron@raim.ist>	6 years ago
Brendan Abolivier	4aba561c65	Config and changelog	6 years ago
Richard van der Hoff	dba9152d15	Add missing blank line in config (#5249)	6 years ago
Andrew Morgan	6368150a74	Add config option for setting homeserver's default room version (#5223) ... Replaces DEFAULT_ROOM_VERSION constant with a method that first checks the config, then returns a hardcoded value if the option is not present. That hardcoded value is now located in the server.py config file.	6 years ago
Amber Brown	4a30e4acb4	Room Statistics (#4338)	6 years ago
Brendan Abolivier	384122efa8	Doc	6 years ago
Richard van der Hoff	7ce1f97a13	Stop telling people to install the optional dependencies. (#5197) ... * Stop telling people to install the optional dependencies. They're optional. Also update the postgres docs a bit for clarity(?)	6 years ago
Brendan Abolivier	a5fe16c5a7	Changelog + sample config	6 years ago
Amber Brown	f1e5b41388	Make all the rate limiting options more consistent (#5181)	6 years ago
Andrew Morgan	5a4b328f52	Add ability to blacklist ip ranges for federation traffic (#5043)	6 years ago
Richard van der Hoff	a78996cc4a	fix sample config	6 years ago
Gergely Polonkai	cd3f30014a	Make Prometheus snippet less confusing on the metrics collection doc (#4288) ... Signed-off-by: Gergely Polonkai <gergely@polonkai.eu>	6 years ago
colonelkrud	d9a02d1201	Add AllowEncodedSlashes to apache (#5068) ... * Add AllowEncodedSlashes to apache Add `AllowEncodedSlashes On` to apache config to support encoding for v3 rooms. "The AllowEncodedSlashes setting is not inherited by virtual hosts, and virtual hosts are used in many default Apache configurations, such as the one in Ubuntu. The workaround is to add the AllowEncodedSlashes setting inside a <VirtualHost> container (/etc/apache2/sites-available/default in Ubuntu)." Source: https://stackoverflow.com/questions/4390436/need-to-allow-encoded-slashes-on-apache * change allowencodedslashes to nodecode	6 years ago
Matthew Hodgson	c0e0740bef	add options to require an access_token to GET /profile and /publicRooms on CS API (#5083) ... This commit adds two config options: * `restrict_public_rooms_to_local_users` Requires auth to fetch the public rooms directory through the CS API and disables fetching it through the federation API. * `require_auth_for_profile_requests` When set to `true`, requires that requests to `/profile` over the CS API are authenticated, and only returns the user's profile if the requester shares a room with the profile's owner, as per MSC1301. MSC1301 also specifies a behaviour for federation (only returning the profile if the server asking for it shares a room with the profile's owner), but that's currently really non-trivial to do in a not too expensive way. Next step is writing down a MSC that allows a HS to specify which user sent the profile query. In this implementation, Synapse won't send a profile query over federation if it doesn't believe it already shares a room with the profile's owner, though. Groups have been intentionally omitted from this commit.	6 years ago
Richard van der Hoff	59e2d2694d	Remove the requirement to authenticate for /admin/server_version. (#5122) ... This endpoint isn't much use for its intended purpose if you first need to get yourself an admin's auth token. I've restricted it to the `/_synapse/admin` path to make it a bit easier to lock down for those concerned about exposing this information. I don't imagine anyone is using it in anger currently.	6 years ago
Travis Ralston	3fdff14207	Fix spelling in server notices admin API docs (#5142)	6 years ago
Richard van der Hoff	4804206dbe	Fix sample config ... ... after it got broken in 1565ebec2c.	6 years ago
Richard van der Hoff	1565ebec2c	more config comment updates	6 years ago
Richard van der Hoff	1a7104fde3	Blacklist 0.0.0.0 and :: by default for URL previews	6 years ago
Richard van der Hoff	12f9d51e82	Add admin api for sending server_notices (#5121)	6 years ago
Brendan Abolivier	84196cb231	Add some limitations to alias creation	6 years ago
Richard van der Hoff	cc4bd762df	Fix sample config	6 years ago
Richard van der Hoff	8e9ca83537	Move admin API to a new prefix	6 years ago
Brendan Abolivier	031919dafb	Fix whole path for admin route	6 years ago
Brendan Abolivier	d8e357b7cf	Fix typo in account validity admin route	6 years ago
Andrew Morgan	6824ddd93d	Config option for verifying federation certificates (MSC 1711) (#4967)	6 years ago
Brendan Abolivier	eaf41a943b	Add management endpoints for account validity	6 years ago
Brendan Abolivier	20f0617e87	Send out emails with links to extend an account's validity period	6 years ago
Erik Johnston	ec638a1602	Only handle GET requests for /push_rules	6 years ago
Erik Johnston	d5adf297e6	Move some rest endpoints to client reader	6 years ago
Brendan Abolivier	747aa9f8ca	Add account expiration feature	6 years ago