32 Commits (5f027a315fbf010c213ca6f88141404ed86d05ef)

Author	SHA1	Message	Date
Andrew Morgan	5a4b328f52	Add ability to blacklist ip ranges for federation traffic (#5043)	6 years ago
Richard van der Hoff	a78996cc4a	fix sample config	6 years ago
Matthew Hodgson	c0e0740bef	add options to require an access_token to GET /profile and /publicRooms on CS API (#5083) ... This commit adds two config options: * `restrict_public_rooms_to_local_users` Requires auth to fetch the public rooms directory through the CS API and disables fetching it through the federation API. * `require_auth_for_profile_requests` When set to `true`, requires that requests to `/profile` over the CS API are authenticated, and only returns the user's profile if the requester shares a room with the profile's owner, as per MSC1301. MSC1301 also specifies a behaviour for federation (only returning the profile if the server asking for it shares a room with the profile's owner), but that's currently really non-trivial to do in a not too expensive way. Next step is writing down a MSC that allows a HS to specify which user sent the profile query. In this implementation, Synapse won't send a profile query over federation if it doesn't believe it already shares a room with the profile's owner, though. Groups have been intentionally omitted from this commit.	6 years ago
Richard van der Hoff	4804206dbe	Fix sample config ... ... after it got broken in 1565ebec2c.	6 years ago
Richard van der Hoff	1565ebec2c	more config comment updates	6 years ago
Richard van der Hoff	1a7104fde3	Blacklist 0.0.0.0 and :: by default for URL previews	6 years ago
Brendan Abolivier	84196cb231	Add some limitations to alias creation	6 years ago
Richard van der Hoff	cc4bd762df	Fix sample config	6 years ago
Andrew Morgan	6824ddd93d	Config option for verifying federation certificates (MSC 1711) (#4967)	6 years ago
Brendan Abolivier	20f0617e87	Send out emails with links to extend an account's validity period	6 years ago
Brendan Abolivier	747aa9f8ca	Add account expiration feature	6 years ago
Neil Johnson	b25e387c0d	add context to phonehome stats (#5020) ... add context to phonehome stats	6 years ago
Brendan Abolivier	8e85493b0c	Add config option to block users from looking up 3PIDs (#5010)	6 years ago
Richard van der Hoff	a902d13180	Batch up outgoing read-receipts to reduce federation traffic. (#4890) ... Rate-limit outgoing read-receipts as per #4730.	6 years ago
Erik Johnston	cd8c5b91ad	Fix up sample config	6 years ago
Erik Johnston	926f29ea6d	Fix up config comments	6 years ago
Erik Johnston	213c98c00a	Add option to disable search room lists ... This disables both local and remote room list searching.	6 years ago
Erik Johnston	855bf4658d	Update sample config	6 years ago
Richard van der Hoff	fd463b4f5d	Comment out most options in the generated config. (#4863) ... Make it so that most options in the config are optional, and commented out in the generated config. The reasons this is a good thing are as follows: * If we decide that we should change the default for an option, we can do so, and only those admins that have deliberately chosen to override that option will be stuck on the old setting. * It moves us towards a point where we can get rid of the super-surprising feature of synapse where the default settings for the config come from the generated yaml. * It makes setting up a test config for unit testing an order of magnitude easier (see forthcoming PR). * It makes the generated config more consistent, and hopefully easier for users to understand.	6 years ago
Brendan Abolivier	651ad8bc96	Add ratelimiting on failed login attempts (#4865)	6 years ago
Brendan Abolivier	899e523d6d	Add ratelimiting on login (#4821) ... Add two ratelimiters on login (per-IP address and per-userID).	6 years ago
Andrew Morgan	7998ca3a66	Document using a certificate with a full chain (#4849)	6 years ago
Aaron Raimist	8ea1b41a0e	Clarify what registration_shared_secret allows for (#2885) (#4844) ... * Clarify what registration_shared_secret allows for (#2885) Signed-off-by: Aaron Raimist <aaron@raim.ist> * Add changelog Signed-off-by: Aaron Raimist <aaron@raim.ist>	6 years ago
Matthew Hodgson	8f4b9f5210	Reword the sample config header to be less scary (#4801)	6 years ago
Brendan Abolivier	c23e8c3333	Update sample config	6 years ago
Brendan Abolivier	a4c3a361b7	Add rate-limiting on registration (#4735) ... * Rate-limiting for registration * Add unit test for registration rate limiting * Add config parameters for rate limiting on auth endpoints * Doc * Fix doc of rate limiting function Co-Authored-By: babolivier <contact@brendanabolivier.com> * Incorporate review * Fix config parsing * Fix linting errors * Set default config for auth rate limiting * Fix tests * Add changelog * Advance reactor instead of mocked clock * Move parameters to registration specific config and give them more sensible default values * Remove unused config options * Don't mock the rate limiter un MAU tests * Rename _register_with_store into register_with_store * Make CI happy * Remove unused import * Update sample config * Fix ratelimiting test for py2 * Add non-guest test	6 years ago
Richard van der Hoff	8e28bc5eee	Include a default configuration file in the 'docs' directory. (#4791)	6 years ago