ArcticFoxes-net
/
Synapse-Ubuntu-ZFS
mirror of https://github.com/ArcticFoxes-net/Synapse-Ubuntu-ZFS
1
0
Fork 0
Code
Server configurations for Ubuntu 22.04 running Synapse
64 Commits 1 Branch 0 Tags 469 KiB
Shell 100%
Go to file
wj25czxj47bu6q 94e7f705e9
Element: Disable annoying TeX matching 
TeX matching made it impossible to use multiple dollar signs in a message without escaping them. Now only LaTeX syntax (which is much less likely to be used accidentally) is accepted for math rendering.

Regex from https://stackoverflow.com/a/2302992

Signed-off-by: wj25czxj47bu6q <96372288+wj25czxj47bu6q@users.noreply.github.com>
 		2024-04-10 07:53:10 +00:00
Firmware Update Firmware 2024-01-13 02:18:26 +00:00
etc Add missing config server.yaml 2024-02-12 03:53:22 +00:00
srv/Matrix-Docker-Compose Element: Disable annoying TeX matching 2024-04-10 07:53:10 +00:00
LICENSE Initial commit 2023-08-08 04:47:23 -07:00
README.md Certbot hardening 2023-09-08 15:04:33 -07:00
TLSA.sh File upload 2023-08-25 13:17:37 -07:00
certbot.sh Curve secp384r1 2023-09-07 19:47:56 -07:00

README.md

Synapse-Ubuntu-ZFS

Server configurations for Ubuntu 22.04 running Synapse

This configuration does not include some hardening configurations, as those are maintained here.

Notes:

  • snap ufw blocks Docker by default. ArcticFoxes's Matrix server uses .deb ufw instead.
  • Use the .deb certbot package so that you can apply systemd hardening.
  • A lot of these configuration files use ArcticFoxes's domain. If you are adopting this to your own system, make sure that you replace them.
  • The Certbot-OCSP-Fetcher script can be found here
  • You need to create a postgres-socket and add the postgres and matrix-synapse user to it.
  • You need to create a matrix-synapse-socket and add the matrix-synapse and nginx user to it.
  • Systemd overrides for NGINX and SSHD services are based on GrapheneOS's configurations.
  • Systemd override for Synapse is based on Arch Linux's matrix-synapse package.
  • The repolists of PostgreSQL and Docker have been modified so that they read GPG keys from /usr/share/keyring by default. Make sure that when you follow upstream's documentation on adding their GPG keys, you adjust the location. For PostgreSQL's GPG key, run curl https://www.postgresql.org/media/keys/ACCC4CF8.asc | gpg --dearmor | sudo tee /usr/share/keyrings/postgresql-debian-repo.gpg >/dev/null