Only run federation on 8448 and client on 80

This disables federation on the 80 port, as it's
not necessary. We also disable the old Angular webclient.

For the federation port (8448), we disable the client APIs
as those are not necessary. Those can even cause trouble
if one doesn't know about them and thinks that guarding the client
APIs at the 80 port is enough.

CHANGELOG.md

@@ -1,3 +1,15 @@
+# 2018-08-17
+
+## Disabling some unnecessary Synapse services
+
+The following services are not necessary, so they have been disabled:
+- on the federation port (8448): the `client` service
+- on the http port (80): the old Angular `webclient` and the `federation` service
+
+Federation runs only on the federation port (8448) now.
+The Client APIs run only on the http port (80) now.
+
+
 # 2018-08-15
 
 ## mxisd Identity Server support

roles/matrix-server/templates/synapse/homeserver.yaml.j2

@@ -143,17 +143,6 @@ listeners:
 
     # List of HTTP resources to serve on this listener.
     resources:
-      -
-        # List of resources to host on this listener.
-        names:
-          - client     # The client-server APIs, both v1 and v2
-          - webclient  # The bundled webclient.
-
-        # Should synapse compress HTTP responses to clients that support it?
-        # This should be disabled if running synapse behind a load balancer
-        # that can do automatic compression.
-        compress: true
-
       - names: [federation]  # Federation APIs
         compress: false
 
@@ -174,10 +163,8 @@ listeners:
     x_forwarded: true
 
     resources:
-      - names: [client, webclient]
+      - names: [client]
         compress: true
-      - names: [federation]
-        compress: false
 
   # Turn on the twisted ssh manhole service on localhost on the given
   # port.