605 Commits (847b9dcd1c9d7d7a43333e85f69dc78471095475)

Author	SHA1	Message	Date
Richard van der Hoff	40e576e29c	Move admin api impl to its own package ... It doesn't really belong under rest/client/v1 any more.	6 years ago
Richard van der Hoff	8e9ca83537	Move admin API to a new prefix	6 years ago
Erik Johnston	38642614cf	VersionRestServlet doesn't take a param	6 years ago
Erik Johnston	d5adf297e6	Move some rest endpoints to client reader	6 years ago
Erik Johnston	a0fc256d65	Limit in flight DNS requests ... This is to work around a bug in twisted where a large number of concurrent DNS requests cause it to tight loop forever. c.f. https://twistedmatrix.com/trac/ticket/9620#ticket	6 years ago
Neil Johnson	b25e387c0d	add context to phonehome stats (#5020) ... add context to phonehome stats	6 years ago
Richard van der Hoff	4b91c313a9	Combine the CurrentStateDeltaStream into the EventStream	6 years ago
Richard van der Hoff	1f6d6f918a	Make EventStream rows have a type ... ... as a precursor to combining it with the CurrentStateDelta stream.	6 years ago
Richard van der Hoff	a5798de067	Move replication.tcp.streams into a package	6 years ago
Erik Johnston	9ad448c1e5	Correctly handle all command line options	6 years ago
Richard van der Hoff	fdcad8eabd	Move client receipt processing to federation sender worker. ... This is mostly a prerequisite for #4730, but also fits with the general theme of "move everything off the master that we possibly can".	6 years ago
Amber Brown	8da22e2b53	master startup	6 years ago
Erik Johnston	bfa7d46a10	Allow /keys/{changes,query} API to run on worker	6 years ago
Erik Johnston	54f9ce11a7	Move /account/3pid to client_reader	6 years ago
Erik Johnston	4cff9376f7	Move server key queries to federation reader	6 years ago
Richard van der Hoff	f191be822b	Add database version to phonehome stats. (#4753)	6 years ago
Erik Johnston	47a7e3928d	Correctly proxy exception in frontend_proxy worker	6 years ago
Erik Johnston	4cc4400b4d	Split /login into client_reader	6 years ago
Erik Johnston	32e54b472a	Fix kicking guest users in worker mode ... When guest_access changes from allowed to forbidden all local guest users should be kicked from the room. This did not happen when revocation was received from federation on a worker. Presumably broken in #4141	6 years ago
Erik Johnston	eb2b8523ae	Split out registration to worker ... This allows registration to be handled by a worker, though the actual write to the database still happens on master. Note: due to the in-memory session map all registration requests must be handled by the same worker.	6 years ago
Richard van der Hoff	f311018823	Fix errors in acme provisioning (#4648) ... * Better logging for errors on startup * Fix "TypeError: '>' not supported" when starting without an existing certificate * Fix a bug where an existing certificate would be reprovisoned every day	6 years ago
Erik Johnston	6cb415b63f	Fixup comments and add warning	6 years ago
Erik Johnston	309f3bb322	Update synapse/app/_base.py ... Co-Authored-By: richvdh <1389908+richvdh@users.noreply.github.com>	6 years ago
Richard van der Hoff	767686af48	Use `listen_tcp` for the replication listener ... Fixes the "can't listen on 0.0.0.0" error. Also makes it more consistent with what we do elsewhere.	6 years ago
Richard van der Hoff	2a5a15aff8	Improve logging around listening services ... I wanted to bring listen_tcp into line with listen_ssl in terms of returning a list of ports, and wanted to check that was a safe thing to do - hence the logging in `refresh_certificate`. Also, pull the 'Synapse now listening' message up to homeserver.py, because it was being duplicated everywhere else.	6 years ago
Richard van der Hoff	e3a0300431	Special-case the default bind_addresses for metrics listener ... turns out it doesn't really support ipv6, so let's hack around that by only listening on ipv4 by default.	6 years ago
Erik Johnston	93f7d2df3e	Comments	6 years ago
Erik Johnston	ef2228c890	Basic sentry integration	6 years ago
Richard van der Hoff	32b781bfe2	Fix error when loading cert if tls is disabled (#4618) ... If TLS is disabled, it should not be an error if no cert is given. Fixes #4554.	6 years ago
Richard van der Hoff	4fddf8fc77	Infer no_tls from presence of TLS listeners ... Rather than have to specify `no_tls` explicitly, infer whether we need to load the TLS keys etc from whether we have any TLS-enabled listeners.	6 years ago
Richard van der Hoff	9645728619	Don't create server contexts when TLS is disabled ... we aren't going to use them anyway.	6 years ago
Richard van der Hoff	086f6f27d4	Logging improvements around TLS certs ... Log which file we're reading keys and certs from, and refactor the code a bit in preparation for other work	6 years ago
Richard van der Hoff	5d27730a73	Move ClientTLSOptionsFactory init out of refresh_certificates (#4611) ... It's nothing to do with refreshing the certificates. No idea why it was here.	6 years ago
Amber Brown	6e2a5aa050	ACME Reprovisioning (#4522)	6 years ago
Amber Brown	9cd33d2f4b	Deduplicate some code in synapse.app (#4567)	6 years ago
Richard van der Hoff	7615a8ced1	ACME config cleanups (#4525) ... * Handle listening for ACME requests on IPv6 addresses the weird url-but-not-actually-a-url-string doesn't handle IPv6 addresses without extra quoting. Building a string which you are about to parse again seems like a weird choice. Let's just use listenTCP, which is consistent with what we do elsewhere. * Clean up the default ACME config make it look a bit more consistent with everything else, and tweak the defaults to listen on port 80. * newsfile	6 years ago
Erik Johnston	e87d7a4b0f	Raise ConfigError instead	6 years ago
Erik Johnston	270f212a2a	_listener_http should return a list	6 years ago
Amber Brown	f6813919e8	SIGHUP for TLS cert reloading (#4495)	6 years ago
Amber Brown	5d976c0c7c	Fix worker TLS (#4492) ... * load cert * changelog * fix	6 years ago
Jason Robinson	6f680241bd	Fix flake8 issues ... Signed-off-by: Jason Robinson <jasonr@matrix.org>	6 years ago
Amber Brown	6129e52f43	Support ACME for certificate provisioning (#4384)	6 years ago
Jason Robinson	82e13662c0	Split federation OpenID userinfo endpoint out of the federation resource ... This allows the OpenID userinfo endpoint to be active even if the federation resource is not active. The OpenID userinfo endpoint is called by integration managers to verify user actions using the client API OpenID access token. Without this verification, the integration manager cannot know that the access token is valid. The OpenID userinfo endpoint will be loaded in the case that either "federation" or "openid" resource is defined. The new "openid" resource is defaulted to active in default configuration. Signed-off-by: Jason Robinson <jasonr@matrix.org>	6 years ago
Jason Robinson	a17bac171f	Make SynapseHomeServer _http_listener use self.get_reactor() ... For all the homeserver classes, only the FrontendProxyServer passes its reactor when doing the http listen. Looking at previous PR's looks like this was introduced to make it possible to write a test, otherwise when you try to run a test with the test homeserver it tries to do a real bind to a port. Passing the reactor that the homeserver is instantiated with should probably be the right thing to do anyway? Signed-off-by: Jason Robinson <jasonr@matrix.org>	6 years ago
Jason Robinson	4f8f41c824	Make FederationReaderServer _http_listen use self.get_reactor() ... For all the homeserver classes, only the FrontendProxyServer passes its reactor when doing the http listen. Looking at previous PR's looks like this was introduced to make it possible to write a test, otherwise when you try to run a test with the test homeserver it tries to do a real bind to a port. Passing the reactor that the homeserver is instantiated with should probably be the right thing to do anyway? Signed-off-by: Jason Robinson <jasonr@matrix.org>	6 years ago
Richard van der Hoff	b7c0218812	Check jinja version for consent resource (#4327) ... * Raise a ConfigError if an invalid resource is specified * Require Jinja 2.9 for the consent resource * changelog	6 years ago
Amber Brown	c26f49a664	Make the dependencies more like a standard Python project and hook up the optional dependencies to setuptools (#4298)	6 years ago
Neil Johnson	7e22cd90f5	ensure can report mau stats when hs.config.mau_stats_only is set (#4305) ... * ensure can report mau stats when hs.config.mau_stats_only is set	6 years ago
Richard van der Hoff	f537432ef9	Add a welcome page to the static resources ... This is largely a precursor for the removal of the bundled webclient. The idea is to present a page at / which reassures people that something is working, and to give them some links for next steps. The welcome page lives at `/_matrix/static/`, so is enabled alongside the other `static` resources (which, in practice, means the client API is enabled). We'll redirect to it from `/` if we have nothing better to display there. It would be nice to have a way to disable it (in the same way that you might disable the nginx welcome page), but I can't really think of a good way to do that without a load of ickiness. It's based on the work done by @krombel for #2601.	6 years ago
Richard van der Hoff	df96177ca7	Stop installing Matrix Console by default ... This is based on the work done by @krombel in #2601.	6 years ago