__matrix_synapse: add --disable-{displayname,3pid}-changes flag

type/__matrix_synapse/files/homeserver.yaml.sh

@@ -1406,7 +1406,7 @@ account_threepid_delegates:
 #
 # Does not apply to server administrators. Defaults to 'true'
 #
-#enable_set_displayname: false
+enable_set_displayname: ${ENABLE_SET_DISPLAYNAME:?}
 
 # Whether users are allowed to change their avatar after it has been
 # initially set. Useful when provisioning users based on the contents
@@ -1421,7 +1421,7 @@ account_threepid_delegates:
 #
 # Defaults to 'true'
 #
-#enable_3pid_changes: false
+enable_3pid_changes: ${ENABLE_3PID_CHANGES:?}
 
 # Users who register on this homeserver will automatically be joined
 # to these rooms.

type/__matrix_synapse/man.rst

@@ -162,6 +162,12 @@ rc-login-burst
 registration-allows-email-pattern
     Only allow email addresses matching specified filter. Can be specified multiple times. A pattern must look like `.*@vector\.im`.
 
+disable-displayname-changes
+  Whether users are allowed to change their displayname after it has been initially set.
+
+disable-3pid-changes
+  Whether users can change the 3PIDs associated with their accounts (email address and msisdn).
+
 auto-join-room
   Room where newly-registered users are automatically added. Can be specified multiple times.
 

type/__matrix_synapse/manifest

@@ -181,6 +181,18 @@ if [ -f "$__object/parameter/registration-requires-email" ]; then
 	export REGISTRATION_REQUIRES_EMAIL=1
 fi
 
+ENABLE_SET_DISPLAYNAME='true'
+if [ -f "$__object/parameter/disable-displayname-changes" ]; then
+	ENABLE_SET_DISPLAYNAME='false'
+fi
+export ENABLE_SET_DISPLAYNAME
+
+ENABLE_3PID_CHANGES='true'
+if [ -f "$__object/parameter/disable-3pid-changes" ]; then
+	ENABLE_3PID_CHANGES='false'
+fi
+export ENABLE_3PID_CHANGES
+
 if [ -f "$__object/parameter/auto-join-room" ]; then
 	AUTO_JOIN_ROOMS="$(cat "$__object/parameter/auto-join-room")"
 	export AUTO_JOIN_ROOMS

type/__matrix_synapse/parameter/boolean

@@ -18,3 +18,5 @@ enable-message-retention-policy
 worker-mode
 enable-url-preview
 enable-3pid-lookups
+disable-3pid-changes
+disable-displayname-changes