watcha-synapse

Commit Graph

Author	SHA1	Message	Date
Jorik Schellekens	826e6ec3bd	Opentracing Documentation (#5703 ) * Opentracing survival guide * Update decorator names in doc * Doc cleanup These are all alterations as a result of comments in #5703, it includes mostly typos and clarifications. The most interesting changes are: - Split developer and user docs into two sections - Add a high level description of OpenTracing * newsfile * Move contributer specific info to docstring. * Sample config. * Trailing whitespace. * Update 5703.misc * Apply suggestions from code review Mostly just rewording parts of the docs for clarity. Co-Authored-By: Richard van der Hoff <1389908+richvdh@users.noreply.github.com>	5 years ago
Richard van der Hoff	82345bc09a	Clean up opentracing configuration options (#5712 ) Clean up config settings and dead code. This is mostly about cleaning up the config format, to bring it into line with our conventions. In particular: * There should be a blank line after `## Section ##' headings * There should be a blank line between each config setting * There should be a `#`-only line between a comment and the setting it describes * We don't really do the `# #` style commenting-out of whole sections if we can help it * rename `tracer_enabled` to `enabled` While we're here, do more config parsing upfront, which makes it easier to use later on. Also removes redundant code from LogContextScopeManager. Also changes the changelog fragment to a `feature` - it's exciting!	5 years ago
Richard van der Hoff	5f158ec039	Implement access token expiry (#5660 ) Record how long an access token is valid for, and raise a soft-logout once it expires.	5 years ago
Jorik Schellekens	38a6d3eea7	Add basic opentracing support (#5544 ) * Configure and initialise tracer Includes config options for the tracer and sets up JaegerClient. * Scope manager using LogContexts We piggy-back our tracer scopes by using log context. The current log context gives us the current scope. If new scope is created we create a stack of scopes in the context. * jaeger is a dependency now * Carrier inject and extraction for Twisted Headers * Trace federation requests on the way in and out. The span is created in _started_processing and closed in _finished_processing because we need a meaningful log context. * Create logcontext for new scope. Instead of having a stack of scopes in a logcontext we create a new context for a new scope if the current logcontext already has a scope. * Remove scope from logcontext if logcontext is top level * Disable tracer if not configured * typo * Remove dependence on jaeger internals * bools * Set service name * :Explicitely state that the tracer is disabled * Black is the new black * Newsfile * Code style * Use the new config setup. * Generate config. * Copyright * Rename config to opentracing * Remove user whitelisting * Empty whitelist by default * User ConfigError instead of RuntimeError * Use isinstance * Use tag constants for opentracing. * Remove debug comment and no need to explicitely record error * Two errors a "s(c)entry" * Docstrings! * Remove debugging brainslip * Homeserver Whitlisting * Better opentracing config comment * linting * Inclue worker name in service_name * Make opentracing an optional dependency * Neater config retreival * Clean up dummy tags * Instantiate tracing as object instead of global class * Inlcude opentracing as a homeserver member. * Thread opentracing to the request level * Reference opetnracing through hs * Instantiate dummy opentracin g for tests. * About to revert, just keeping the unfinished changes just in case * Revert back to global state, commit number: 9ce4a3d9067bf9889b86c360c05ac88618b85c4f * Use class level methods in tracerutils * Start and stop requests spans in a place where we have access to the authenticated entity * Seen it, isort it * Make sure to close the active span. * I'm getting black and blue from this. * Logger formatting Co-Authored-By: Erik Johnston <erik@matrix.org> * Outdated comment * Import opentracing at the top * Return a contextmanager * Start tracing client requests from the servlet * Return noop context manager if not tracing * Explicitely say that these are federation requests * Include servlet name in client requests * Use context manager * Move opentracing to logging/ * Seen it, isort it again! * Ignore twisted return exceptions on context exit * Escape the scope * Scopes should be entered to make them useful. * Nicer decorator names * Just one init, init? * Don't need to close something that isn't open * Docs make you smarter	5 years ago
Amber Brown	be3b901ccd	Update the TLS cipher string and provide configurability for TLS on outgoing federation (#5550 )	5 years ago
Daniel Hoffend	9646a593ac	Added possibilty to disable local password authentication (#5092 ) Signed-off-by: Daniel Hoffend <dh@dotlan.net>	5 years ago
Andrew Morgan	c548dbc4b1	Make it clearer that the template dir is relative to synapse's root dir (#5543 ) Helps address #5444	5 years ago
Richard van der Hoff	dde4118341	update sample config	5 years ago
Richard van der Hoff	a0acfcc73e	update sample config	5 years ago
Brendan Abolivier	bfe84e051e	Split public rooms directory auth config in two	5 years ago
Richard van der Hoff	3f8a252dd8	Add "--open-private-ports" cmdline option This is helpful when generating a config file for running synapse under docker.	5 years ago
Richard van der Hoff	edea4bb5be	Allow configuration of the path used for ACME account keys. Because sticking it in the same place as the config isn't necessarily the right thing to do.	5 years ago
Richard van der Hoff	6cda36777b	Drop support for cpu_affinity (#5525 ) This has no useful purpose on python3, and is generally a source of confusion.	6 years ago
Brendan Abolivier	f874b16b2e	Add plugin APIs for implementations of custom event rules.	6 years ago
Neil Johnson	a11865016e	Set default room version to v4. (#5379 ) Set default room version to v4.	6 years ago
Andrew Morgan	3719680ee4	Add ability to perform password reset via email without trusting the identity server (#5377 ) Sends password reset emails from the homeserver instead of proxying to the identity server. This is now the default behaviour for security reasons. If you wish to continue proxying password reset requests to the identity server you must now enable the email.trust_identity_server_for_password_resets option. This PR is a culmination of 3 smaller PRs which have each been separately reviewed: * #5308 * #5345 * #5368	6 years ago
Richard van der Hoff	9fbb20a531	Stop hardcoding trust of old matrix.org key (#5374 ) There are a few changes going on here: * We make checking the signature on a key server response optional: if no verify_keys are specified, we trust to TLS to validate the connection. * We change the default config so that it does not require responses to be signed by the old key. * We replace the old 'perspectives' config with 'trusted_key_servers', which is also formatted slightly differently. * We emit a warning to the logs every time we trust a key server response signed by the old key.	6 years ago
Richard van der Hoff	b4f1cd31f4	Update sample config	6 years ago
Neil Johnson	26713515de	Neilj/mau tracking config explainer (#5284 ) Improve documentation of monthly active user blocking and mau_trial_days	6 years ago
Brendan Abolivier	e975b15101	Sample config	6 years ago
Brendan Abolivier	6bfc5ad3a1	Sample config	6 years ago
Amber Brown	0729ef01f8	regenerate sample config	6 years ago
Brendan Abolivier	4aba561c65	Config and changelog	6 years ago
Richard van der Hoff	dba9152d15	Add missing blank line in config (#5249 )	6 years ago
Andrew Morgan	6368150a74	Add config option for setting homeserver's default room version (#5223 ) Replaces DEFAULT_ROOM_VERSION constant with a method that first checks the config, then returns a hardcoded value if the option is not present. That hardcoded value is now located in the server.py config file.	6 years ago
Amber Brown	4a30e4acb4	Room Statistics (#4338 )	6 years ago
Brendan Abolivier	384122efa8	Doc	6 years ago
Brendan Abolivier	a5fe16c5a7	Changelog + sample config	6 years ago
Amber Brown	f1e5b41388	Make all the rate limiting options more consistent (#5181 )	6 years ago
Andrew Morgan	5a4b328f52	Add ability to blacklist ip ranges for federation traffic (#5043 )	6 years ago
Richard van der Hoff	a78996cc4a	fix sample config	6 years ago
Matthew Hodgson	c0e0740bef	add options to require an access_token to GET /profile and /publicRooms on CS API (#5083 ) This commit adds two config options: * `restrict_public_rooms_to_local_users` Requires auth to fetch the public rooms directory through the CS API and disables fetching it through the federation API. * `require_auth_for_profile_requests` When set to `true`, requires that requests to `/profile` over the CS API are authenticated, and only returns the user's profile if the requester shares a room with the profile's owner, as per MSC1301. MSC1301 also specifies a behaviour for federation (only returning the profile if the server asking for it shares a room with the profile's owner), but that's currently really non-trivial to do in a not too expensive way. Next step is writing down a MSC that allows a HS to specify which user sent the profile query. In this implementation, Synapse won't send a profile query over federation if it doesn't believe it already shares a room with the profile's owner, though. Groups have been intentionally omitted from this commit.	6 years ago
Richard van der Hoff	4804206dbe	Fix sample config ... after it got broken in `1565ebec2c`.	6 years ago
Richard van der Hoff	1565ebec2c	more config comment updates	6 years ago
Richard van der Hoff	1a7104fde3	Blacklist 0.0.0.0 and :: by default for URL previews	6 years ago
Brendan Abolivier	84196cb231	Add some limitations to alias creation	6 years ago
Richard van der Hoff	cc4bd762df	Fix sample config	6 years ago
Andrew Morgan	6824ddd93d	Config option for verifying federation certificates (MSC 1711) (#4967 )	6 years ago
Brendan Abolivier	20f0617e87	Send out emails with links to extend an account's validity period	6 years ago
Brendan Abolivier	747aa9f8ca	Add account expiration feature	6 years ago
Neil Johnson	b25e387c0d	add context to phonehome stats (#5020 ) add context to phonehome stats	6 years ago
Brendan Abolivier	8e85493b0c	Add config option to block users from looking up 3PIDs (#5010 )	6 years ago
Richard van der Hoff	a902d13180	Batch up outgoing read-receipts to reduce federation traffic. (#4890 ) Rate-limit outgoing read-receipts as per #4730.	6 years ago
Erik Johnston	cd8c5b91ad	Fix up sample config	6 years ago
Erik Johnston	926f29ea6d	Fix up config comments	6 years ago
Erik Johnston	213c98c00a	Add option to disable search room lists This disables both local and remote room list searching.	6 years ago
Erik Johnston	855bf4658d	Update sample config	6 years ago
Richard van der Hoff	fd463b4f5d	Comment out most options in the generated config. (#4863 ) Make it so that most options in the config are optional, and commented out in the generated config. The reasons this is a good thing are as follows: * If we decide that we should change the default for an option, we can do so, and only those admins that have deliberately chosen to override that option will be stuck on the old setting. * It moves us towards a point where we can get rid of the super-surprising feature of synapse where the default settings for the config come from the generated yaml. * It makes setting up a test config for unit testing an order of magnitude easier (see forthcoming PR). * It makes the generated config more consistent, and hopefully easier for users to understand.	6 years ago
Brendan Abolivier	651ad8bc96	Add ratelimiting on failed login attempts (#4865 )	6 years ago
Brendan Abolivier	899e523d6d	Add ratelimiting on login (#4821 ) Add two ratelimiters on login (per-IP address and per-userID).	6 years ago

1 2

66 Commits (d1020653fcbecabcf8e109dafc6258b1f2c2afd0)