# Configuration file for Synapse.
#
# This is a YAML file: see [1] for a quick introduction. Note in particular
# that *indentation is important*: all the elements of a list or dictionary
# should have the same indentation.
#
# [1] https://docs.ansible.com/ansible/latest/reference_appendices/YAMLSyntax.html
#
# For more information on how to configure Synapse, including a complete accounting of
# each option, go to docs/usage/configuration/config_documentation.md or
# https://element-hq.github.io/synapse/latest/usage/configuration/config_documentation.html
server_name: "experimental-synapse.homelab0ne.xyz"
pid_file: /data/homeserver.pid
serve_server_wellknown: true
listeners:
  - port: 8448
    tls: false
    type: http
    x_forwarded: true
#    bind_addresses: ['::1', '127.0.0.1']
    resources:
      - names: [client, federation]
        compress: false
log_config: "/data/experimental-synapse.homelab0ne.xyz.log.config"
media_store_path: /data/media_store
report_stats: true
signing_key_path: "/var/run/secrets/experimental-synapse.homelab0ne.xyz.signing.key"
trusted_key_servers:
  - server_name: "matrix.org"
experimental_features:
  msc3026_enabled: true # "Busy" presence state
  msc3266_enabled: true # Room summary API
  msc3720_enabled: false # Account status endpoint
  msc2654_enabled: true # Unread counts
  msc2815_enabled: true # Allow room moderators to view redacted event content
  msc3391_enabled: true # Deleting account data
  msc3773_enabled: true # Notifications for threads
  msc3664_enabled: true # Notifications for relations
  msc3848_enabled: true # Introduce errcodes for specific event sending failures
  msc3881_enabled: true # Remotely toggle push notifications for another client
  msc3874_enabled: true # Filtering the /messages API by relation type
  msc3890_enabled: true # Remotely silence local notifications
  msc3381_polls_enabled: true # MSC3930: Polls push rules/notifications
  msc3912_enabled: true # Relation-based redactions
  msc1767_enabled: true # Extensible events
  msc3967_enabled: false # Do not require UIA when first uploading cross signing keys
  msc3981_recurse_relations: true # Recurse relations
  msc4010_push_rules_account_data: true # Do
media_retention:
    local_media_lifetime: 1y
    remote_media_lifetime: 1y
url_preview_enabled: true
url_preview_ip_range_blacklist:
  - '127.0.0.0/8'
  - '10.0.0.0/8'
  - '172.16.0.0/12'
  - '192.168.0.0/16'
  - '100.64.0.0/10'
  - '192.0.0.0/24'
  - '169.254.0.0/16'
  - '192.88.99.0/24'
  - '198.18.0.0/15'
  - '192.0.2.0/24'
  - '198.51.100.0/24'
  - '203.0.113.0/24'
  - '224.0.0.0/4'
  - '::1/128'
  - 'fe80::/10'
  - 'fc00::/7'
  - '2001:db8::/32'
  - 'ff00::/8'
  - 'fec0::/10'
allow_device_name_lookup_over_federation: true
enable_registration: false
retention:
  enabled: false
redaction_retention_period: 30d
forgotten_room_retention_period: 7d
user_ips_max_age: 60d
delete_stale_devices_after: 120d
forget_rooms_on_leave: true

# vim:ft=yaml