Matrix Docker Ansible eploy
Вы не можете выбрать более 25 тем Темы должны начинаться с буквы или цифры, могут содержать дефисы(-) и должны содержать не более 35 символов.

326 строки
13 KiB

  1. ---
  2. matrix_synapse_workers_generic_worker_endpoints:
  3. # This worker can handle API requests matching the following regular
  4. # expressions:
  5. # Sync requests
  6. - ^/_matrix/client/(v2_alpha|r0)/sync$
  7. - ^/_matrix/client/(api/v1|v2_alpha|r0)/events$
  8. - ^/_matrix/client/(api/v1|r0)/initialSync$
  9. - ^/_matrix/client/(api/v1|r0)/rooms/[^/]+/initialSync$
  10. # Federation requests
  11. - ^/_matrix/federation/v1/event/
  12. - ^/_matrix/federation/v1/state/
  13. - ^/_matrix/federation/v1/state_ids/
  14. - ^/_matrix/federation/v1/backfill/
  15. - ^/_matrix/federation/v1/get_missing_events/
  16. - ^/_matrix/federation/v1/publicRooms
  17. - ^/_matrix/federation/v1/query/
  18. - ^/_matrix/federation/v1/make_join/
  19. - ^/_matrix/federation/v1/make_leave/
  20. - ^/_matrix/federation/v1/send_join/
  21. - ^/_matrix/federation/v2/send_join/
  22. - ^/_matrix/federation/v1/send_leave/
  23. - ^/_matrix/federation/v2/send_leave/
  24. - ^/_matrix/federation/v1/invite/
  25. - ^/_matrix/federation/v2/invite/
  26. - ^/_matrix/federation/v1/query_auth/
  27. - ^/_matrix/federation/v1/event_auth/
  28. - ^/_matrix/federation/v1/exchange_third_party_invite/
  29. - ^/_matrix/federation/v1/user/devices/
  30. - ^/_matrix/federation/v1/get_groups_publicised$
  31. - ^/_matrix/key/v2/query
  32. # Inbound federation transaction request
  33. - ^/_matrix/federation/v1/send/
  34. # Client API requests
  35. - ^/_matrix/client/(api/v1|r0|unstable)/createRoom$
  36. - ^/_matrix/client/(api/v1|r0|unstable)/publicRooms$
  37. - ^/_matrix/client/(api/v1|r0|unstable)/rooms/.*/joined_members$
  38. - ^/_matrix/client/(api/v1|r0|unstable)/rooms/.*/context/.*$
  39. - ^/_matrix/client/(api/v1|r0|unstable)/rooms/.*/members$
  40. - ^/_matrix/client/(api/v1|r0|unstable)/rooms/.*/state$
  41. - ^/_matrix/client/(api/v1|r0|unstable)/account/3pid$
  42. - ^/_matrix/client/(api/v1|r0|unstable)/devices$
  43. - ^/_matrix/client/(api/v1|r0|unstable)/keys/query$
  44. - ^/_matrix/client/(api/v1|r0|unstable)/keys/changes$
  45. - ^/_matrix/client/versions$
  46. - ^/_matrix/client/(api/v1|r0|unstable)/voip/turnServer$
  47. - ^/_matrix/client/(api/v1|r0|unstable)/joined_groups$
  48. - ^/_matrix/client/(api/v1|r0|unstable)/publicised_groups$
  49. - ^/_matrix/client/(api/v1|r0|unstable)/publicised_groups/
  50. - ^/_matrix/client/(api/v1|r0|unstable)/rooms/.*/event/
  51. - ^/_matrix/client/(api/v1|r0|unstable)/joined_rooms$
  52. - ^/_matrix/client/(api/v1|r0|unstable)/search$
  53. # Registration/login requests
  54. - ^/_matrix/client/(api/v1|r0|unstable)/login$
  55. - ^/_matrix/client/(r0|unstable)/register$
  56. # Event sending requests
  57. - ^/_matrix/client/(api/v1|r0|unstable)/rooms/.*/redact
  58. - ^/_matrix/client/(api/v1|r0|unstable)/rooms/.*/send
  59. - ^/_matrix/client/(api/v1|r0|unstable)/rooms/.*/state/
  60. - ^/_matrix/client/(api/v1|r0|unstable)/rooms/.*/(join|invite|leave|ban|unban|kick)$
  61. - ^/_matrix/client/(api/v1|r0|unstable)/join/
  62. - ^/_matrix/client/(api/v1|r0|unstable)/profile/
  63. # Additionally, the following REST endpoints can be handled for GET requests:
  64. # FIXME: ADDITIONAL CONDITIONS REQUIRED: to be enabled manually
  65. # ^/_matrix/federation/v1/groups/
  66. # Pagination requests can also be handled, but all requests for a given
  67. # room must be routed to the same instance. Additionally, care must be taken to
  68. # ensure that the purge history admin API is not used while pagination requests
  69. # for the room are in flight:
  70. # FIXME: ADDITIONAL CONDITIONS REQUIRED: to be enabled manually
  71. # ^/_matrix/client/(api/v1|r0|unstable)/rooms/.*/messages$
  72. # Additionally, the following endpoints should be included if Synapse is configured
  73. # to use SSO (you only need to include the ones for whichever SSO provider you're
  74. # using):
  75. # for all SSO providers
  76. # FIXME: ADDITIONAL CONDITIONS REQUIRED: to be enabled manually
  77. # ^/_matrix/client/(api/v1|r0|unstable)/login/sso/redirect
  78. # ^/_synapse/client/pick_idp$
  79. # ^/_synapse/client/pick_username
  80. # ^/_synapse/client/new_user_consent$
  81. # ^/_synapse/client/sso_register$
  82. # OpenID Connect requests.
  83. # FIXME: ADDITIONAL CONDITIONS REQUIRED: to be enabled manually
  84. # ^/_synapse/client/oidc/callback$
  85. # SAML requests.
  86. # FIXME: ADDITIONAL CONDITIONS REQUIRED: to be enabled manually
  87. # ^/_synapse/client/saml2/authn_response$
  88. # CAS requests.
  89. # FIXME: ADDITIONAL CONDITIONS REQUIRED: to be enabled manually
  90. # ^/_matrix/client/(api/v1|r0|unstable)/login/cas/ticket$
  91. # Ensure that all SSO logins go to a single process.
  92. # For multiple workers not handling the SSO endpoints properly, see
  93. # [#7530](https://github.com/matrix-org/synapse/issues/7530) and
  94. # [#9427](https://github.com/matrix-org/synapse/issues/9427).
  95. # Note that a HTTP listener with `client` and `federation` resources must be
  96. # configured in the `worker_listeners` option in the worker config.
  97. # #### Load balancing
  98. # It is possible to run multiple instances of this worker app, with incoming requests
  99. # being load-balanced between them by the reverse-proxy. However, different endpoints
  100. # have different characteristics and so admins
  101. # may wish to run multiple groups of workers handling different endpoints so that
  102. # load balancing can be done in different ways.
  103. # For `/sync` and `/initialSync` requests it will be more efficient if all
  104. # requests from a particular user are routed to a single instance. Extracting a
  105. # user ID from the access token or `Authorization` header is currently left as an
  106. # exercise for the reader. Admins may additionally wish to separate out `/sync`
  107. # requests that have a `since` query parameter from those that don't (and
  108. # `/initialSync`), as requests that don't are known as "initial sync" that happens
  109. # when a user logs in on a new device and can be *very* resource intensive, so
  110. # isolating these requests will stop them from interfering with other users ongoing
  111. # syncs.
  112. # Federation and client requests can be balanced via simple round robin.
  113. # The inbound federation transaction request `^/_matrix/federation/v1/send/`
  114. # should be balanced by source IP so that transactions from the same remote server
  115. # go to the same process.
  116. # Registration/login requests can be handled separately purely to help ensure that
  117. # unexpected load doesn't affect new logins and sign ups.
  118. # Finally, event sending requests can be balanced by the room ID in the URI (or
  119. # the full URI, or even just round robin), the room ID is the path component after
  120. # `/rooms/`. If there is a large bridge connected that is sending or may send lots
  121. # of events, then a dedicated set of workers can be provisioned to limit the
  122. # effects of bursts of events from that bridge on events sent by normal users.
  123. # #### Stream writers
  124. # Additionally, there is *experimental* support for moving writing of specific
  125. # streams (such as events) off of the main process to a particular worker. (This
  126. # is only supported with Redis-based replication.)
  127. # Currently supported streams are `events` and `typing`.
  128. # To enable this, the worker must have a HTTP replication listener configured,
  129. # have a `worker_name` and be listed in the `instance_map` config. For example to
  130. # move event persistence off to a dedicated worker, the shared configuration would
  131. # include:
  132. # ```yaml
  133. # instance_map:
  134. # event_persister1:
  135. # host: localhost
  136. # port: 8034
  137. # stream_writers:
  138. # events: event_persister1
  139. # ```
  140. # The `events` stream also experimentally supports having multiple writers, where
  141. # work is sharded between them by room ID. Note that you *must* restart all worker
  142. # instances when adding or removing event persisters. An example `stream_writers`
  143. # configuration with multiple writers:
  144. # ```yaml
  145. # stream_writers:
  146. # events:
  147. # - event_persister1
  148. # - event_persister2
  149. # ```
  150. # #### Background tasks
  151. # There is also *experimental* support for moving background tasks to a separate
  152. # worker. Background tasks are run periodically or started via replication. Exactly
  153. # which tasks are configured to run depends on your Synapse configuration (e.g. if
  154. # stats is enabled).
  155. # To enable this, the worker must have a `worker_name` and can be configured to run
  156. # background tasks. For example, to move background tasks to a dedicated worker,
  157. # the shared configuration would include:
  158. # ```yaml
  159. # run_background_tasks_on: background_worker
  160. # ```
  161. # You might also wish to investigate the `update_user_directory` and
  162. # `media_instance_running_background_jobs` settings.
  163. # pusher worker (no API endpoints) [
  164. # Handles sending push notifications to sygnal and email. Doesn't handle any
  165. # REST endpoints itself, but you should set `start_pushers: False` in the
  166. # shared configuration file to stop the main synapse sending push notifications.
  167. # To run multiple instances at once the `pusher_instances` option should list all
  168. # pusher instances by their worker name, e.g.:
  169. # ```yaml
  170. # pusher_instances:
  171. # - pusher_worker1
  172. # - pusher_worker2
  173. # ```
  174. # ]
  175. # appservice worker (no API endpoints) [
  176. # Handles sending output traffic to Application Services. Doesn't handle any
  177. # REST endpoints itself, but you should set `notify_appservices: False` in the
  178. # shared configuration file to stop the main synapse sending appservice notifications.
  179. # Note this worker cannot be load-balanced: only one instance should be active.
  180. # ]
  181. # federation_sender worker (no API endpoints) [
  182. # Handles sending federation traffic to other servers. Doesn't handle any
  183. # REST endpoints itself, but you should set `send_federation: False` in the
  184. # shared configuration file to stop the main synapse sending this traffic.
  185. # If running multiple federation senders then you must list each
  186. # instance in the `federation_sender_instances` option by their `worker_name`.
  187. # All instances must be stopped and started when adding or removing instances.
  188. # For example:
  189. # ```yaml
  190. # federation_sender_instances:
  191. # - federation_sender1
  192. # - federation_sender2
  193. # ```
  194. # ]
  195. matrix_synapse_workers_media_repository_endpoints:
  196. # Handles the media repository. It can handle all endpoints starting with:
  197. - ^/_matrix/media/
  198. # ... and the following regular expressions matching media-specific administration APIs:
  199. - ^/_synapse/admin/v1/purge_media_cache$
  200. - ^/_synapse/admin/v1/room/.*/media.*$
  201. - ^/_synapse/admin/v1/user/.*/media.*$
  202. - ^/_synapse/admin/v1/media/.*$
  203. - ^/_synapse/admin/v1/quarantine_media/.*$
  204. - ^/_synapse/admin/v1/users/.*/media$
  205. # You should also set `enable_media_repo: False` in the shared configuration
  206. # file to stop the main synapse running background jobs related to managing the
  207. # media repository. Note that doing so will prevent the main process from being
  208. # able to handle the above endpoints.
  209. # In the `media_repository` worker configuration file, configure the http listener to
  210. # expose the `media` resource. For example:
  211. # ```yaml
  212. # worker_listeners:
  213. # - type: http
  214. # port: 8085
  215. # resources:
  216. # - names:
  217. # - media
  218. # ```
  219. # Note that if running multiple media repositories they must be on the same server
  220. # and you must configure a single instance to run the background tasks, e.g.:
  221. # ```yaml
  222. # media_instance_running_background_jobs: "media-repository-1"
  223. # ```
  224. # Note that if a reverse proxy is used , then `/_matrix/media/` must be routed for both inbound client and federation requests (if they are handled separately).
  225. matrix_synapse_workers_user_dir_endpoints:
  226. # Handles searches in the user directory. It can handle REST endpoints matching
  227. # the following regular expressions:
  228. - ^/_matrix/client/(api/v1|r0|unstable)/user_directory/search$
  229. # When using this worker you must also set `update_user_directory: False` in the
  230. # shared configuration file to stop the main synapse running background
  231. # jobs related to updating the user directory.
  232. matrix_synapse_workers_frontend_proxy_endpoints:
  233. # Proxies some frequently-requested client endpoints to add caching and remove
  234. # load from the main synapse. It can handle REST endpoints matching the following
  235. # regular expressions:
  236. - ^/_matrix/client/(api/v1|r0|unstable)/keys/upload
  237. # If `use_presence` is False in the homeserver config, it can also handle REST
  238. # endpoints matching the following regular expressions:
  239. # FIXME: ADDITIONAL CONDITIONS REQUIRED: to be enabled manually
  240. # ^/_matrix/client/(api/v1|r0|unstable)/presence/[^/]+/status
  241. # This "stub" presence handler will pass through `GET` request but make the
  242. # `PUT` effectively a no-op.
  243. # It will proxy any requests it cannot handle to the main synapse instance. It
  244. # must therefore be configured with the location of the main instance, via
  245. # the `worker_main_http_uri` setting in the `frontend_proxy` worker configuration
  246. # file. For example:
  247. # worker_main_http_uri: http://127.0.0.1:8008
  248. matrix_synapse_workers_avail_list:
  249. - appservice
  250. - federation_sender
  251. - frontend_proxy
  252. - generic_worker
  253. - media_repository
  254. - pusher
  255. - user_dir