${CONFIG_HEADER}

# Configuration file for Synapse.
#
# This is a YAML file: see [1] for a quick introduction. Note in particular
# that *indentation is important*: all the elements of a list or dictionary
# should have the same indentation.
#
# [1] https://docs.ansible.com/ansible/latest/reference_appendices/YAMLSyntax.html
#
# For more information on how to configure Synapse, including a complete accounting of
# each option, go to docs/usage/configuration/config_documentation.md or
# https://element-hq.github.io/synapse/latest/usage/configuration/config_documentation.html
server_name: ${DOMAIN}
pid_file: /data/homeserver.pid
listeners:
  - port: 8008
    tls: false
    type: http
    x_forwarded: true
    resources:
      - names: [client, federation]
        compress: false
  - port: 9093
    tls: false
    type: http
    resources:
      - names: [replication]

database:
    name: psycopg2
    args:
        user: matrix
        password: '${SECRETS_POSTGRES_PASSWORD}'
        host: postgres
        database: synapse

log_config: "/data/log.config"
media_store_path: /data/media_store
registration_shared_secret: '${SECRETS_SYNAPSE_REGISTRATION_SHARED_SECRET}'
report_stats: false
macaroon_secret_key: '${SECRETS_SYNAPSE_MACAROON_SECRET_KEY}'
form_secret: '${SECRETS_SYNAPSE_FORM_SECRET}'
signing_key_path: "/run/secrets/synapse_signing_key"
trusted_key_servers:
  - server_name: "matrix.org"

# please keep config above this point as close as possible to the original generated config
# so that upstream generated config changes can be detected

suppress_key_server_warning: true

send_federation: false
federation_sender_instances:
  - synapse-federation-sender-1

instance_map:
  main:
    host: 'synapse'
    port: 9093

redis:
  enabled: true
  host: redis
  port: 6379

email:
  smtp_host: mailhog
  smtp_port: 1025
  enable_tls: false
  notif_from: "Your %(app)s homeserver <${MAIL_NOTIF_FROM_ADDRESS}>"
  app_name: Matrix
  enable_notifs: true
  notif_for_new_users: false
  client_base_url: https://${ELEMENT_WEB_FQDN}
  validation_token_lifetime: 15m
  invite_client_location: https://${ELEMENT_WEB_FQDN}
  subjects:
    message_from_person_in_room: "[%(app)s] You have a message on %(app)s from %(person)s in the %(room)s room..."
    message_from_person: "[%(app)s] You have a message on %(app)s from %(person)s..."
    messages_from_person: "[%(app)s] You have messages on %(app)s from %(person)s..."
    messages_in_room: "[%(app)s] You have messages on %(app)s in the %(room)s room..."
    messages_in_room_and_others: "[%(app)s] You have messages on %(app)s in the %(room)s room and others..."
    messages_from_person_and_others: "[%(app)s] You have messages on %(app)s from %(person)s and others..."
    invite_from_person_to_room: "[%(app)s] %(person)s has invited you to join the %(room)s room on %(app)s..."
    invite_from_person: "[%(app)s] %(person)s has invited you to chat on %(app)s..."
    password_reset: "[%(server_name)s] Password reset"
    email_validation: "[%(server_name)s] Validate your email"

experimental_features:
  msc3861: # OIDC
    enabled: true
    issuer: http://localhost:8080/
    client_id: ${MAS_CLIENT_ID}
    client_auth_method: client_secret_basic
    client_secret: '${SECRETS_MAS_CLIENT_SECRET}'
    admin_token: '${SECRETS_MAS_MATRIX_SECRET}'
    account_management_url: "https://${MAS_FQDN}/account"

# vim:ft=yaml