# Configuration file for Synapse.
#
# This is a YAML file: see [1] for a quick introduction. Note in particular
# that *indentation is important*: all the elements of a list or dictionary
# should have the same indentation.
#
# [1] https://docs.ansible.com/ansible/latest/reference_appendices/YAMLSyntax.html
#
# For more information on how to configure Synapse, including a complete accounting of
# each option, go to docs/usage/configuration/config_documentation.md or
# https://matrix-org.github.io/synapse/latest/usage/configuration/config_documentation.html
server_name: "distrust.co"
pid_file: /data/homeserver.pid
use_presense: true
enable_search: true
public_baseurl: "https://matrix.distrust.co"

# Homeserver blocking
# Set to true to globally block access to the homeserver
hs_disabled: false
hs_disalbed_message: "Homeserver is not currently accessible"

# Federation
allow_public_rooms_over_federation: true
# federation_domain_whitelist: []
federation_ip_range_blacklist:
  - '127.0.0.0/8'
  - '10.0.0.0/8'
  - '172.16.0.0/12'
  - '192.168.0.0/16'
  - '100.64.0.0/10'
  - '169.254.0.0/16'
  - '::1/128'
  - 'fe80::/64'
  - 'fc00::/7'

# Listeners
listeners:
  - port: 8008
    tls: false
    type: http
    x_forwarded: true
    resources:
      - names: [client, federation]
        compress: false
  - port: 9002
    type: metrics
    resources:
      - name: [metrics]
        compress: true

# Rate Limit
rc_invites:
  per_room:
    burst_count: 200
  per_user:
    burst_count: 200
rc_joins:
  local:
    burst_count: 200
  remote:
    burst_count: 200
rc_joins_per_user:
  burst_count: 200 

# Registration
registration:
  enabled: false
  allowGuests: false
  autoJoinRooms: []

# This is handled by Cert Manager
acme:
  enabled: false

# Bridges
app_service_config_files:
- /bridges/appservice-matrix-bridge.yaml
- /bridges/mautrix-telegram-bridge.yaml
- /bridges/mautrix-slack-bridge.yaml
- /bridges/doublepuppet.yaml

# Turn
turn_user_lifetime: 1h
turn_allow_guests: true

# Metrics/Telemetry
enable_metrics: true
report_stats: false

admin_email: "mailto:matrix@distrust.co"

log_config: "/config/log.config"
media_store_path: /data/media_store
signing_key_path: "/config/keys/signing.key"
trusted_key_servers:
  - server_name: "matrix.org"
# vim:ft=yaml