ungleich-intern/matrix-docker-compose
6
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

synapse: add domain + ip whitelist

Browse source
This commit is contained in:
Nico Schottelius 2023-11-23 08:59:01 +01:00
parent 6d3d35375b
commit 55e17e6716
1 changed files with 21 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

21
ansible/roles/docker-compose/files/synapse/config/homeserver.yaml
View file

@ -200,6 +200,21 @@ presence:
#ip_range_whitelist: #ip_range_whitelist:
# - '192.168.1.1' # - '192.168.1.1'
# Should
ip_range_whitelist:
# xit-apps.com - single IP ingress/egress
- '10.162.166.66'
# tc.komms.chat - outgoing
- '10.166.74.0/24'
# tc.komms.chat - ingress
- '10.166.16.101'
# cl.komms.chat - outgoing
- '10.166.76.0/24'
# cl.komms.chat - ingress
- '10.166.16.102'
# List of ports that Synapse should listen on, their purpose and their # List of ports that Synapse should listen on, their purpose and their
# configuration. # configuration.
# #
@ -680,6 +695,12 @@ acme:
# Federation disabled with an empty list # Federation disabled with an empty list
#federation_domain_whitelist: [] #federation_domain_whitelist: []
federation_domain_whitelist:
- tc.komms.chat
- cl.komms.chat
- xit-apps.com
# Report prometheus metrics on the age of PDUs being sent to and received from # Report prometheus metrics on the age of PDUs being sent to and received from
# the following domains. This can be used to give an idea of "delay" on inbound # the following domains. This can be used to give an idea of "delay" on inbound
# and outbound federation, though be aware that any delay can be due to problems # and outbound federation, though be aware that any delay can be due to problems