From 1f38e5a58919adb725d9e01f035a87e8f3568e1f Mon Sep 17 00:00:00 2001 From: clokep Date: Thu, 5 Aug 2021 11:20:41 +0000 Subject: deploy: 834cdc3606c9193f7b5a5e93936193b359222690 --- develop/print.html | 81 ++++++++++++++++++++++++++++++++++++++++++++++++++++-- 1 file changed, 78 insertions(+), 3 deletions(-) (limited to 'develop/print.html') diff --git a/develop/print.html b/develop/print.html index 148119eb71..9d88fbd065 100644 --- a/develop/print.html +++ b/develop/print.html @@ -101,7 +101,7 @@ @@ -1059,6 +1059,81 @@ Each configured HTTP listener has a /health endpoint which always r /_synapse/admin. These require authentication through an access token of an admin user. However as access to these endpoints grants the caller a lot of power, we do not recommend exposing them to the public internet without good reason.

+

Using a forward proxy with Synapse

+

You can use Synapse with a forward or outbound proxy. An example of when +this is necessary is in corporate environments behind a DMZ (demilitarized zone). +Synapse supports routing outbound HTTP(S) requests via a proxy. Only HTTP(S) +proxy is supported, not SOCKS proxy or anything else.

+

Configure

+

The http_proxy, https_proxy, no_proxy environment variables are used to +specify proxy settings. The environment variable is not case sensitive.

+ +

The http_proxy and https_proxy environment variables have the form: [scheme://][<username>:<password>@]<host>[:<port>]

+ +

Examples

+ +

NOTE: +Synapse does not apply the IP blacklist to connections through the proxy (since +the DNS resolution is done by the proxy). It is expected that the proxy or firewall +will apply blacklisting of IP addresses.

+

Connection types

+

The proxy will be used for:

+ +

It will not be used for:

+ +

Troubleshooting

+

If a proxy server is used with TLS (HTTPS) and no connections are established, +it is most likely due to the proxy's certificates. To test this, the validation +in Synapse can be deactivated.

+

NOTE: This has an impact on security and is for testing purposes only!

+

To deactivate the certificate validation, the following setting must be made in +homserver.yaml.

+
use_insecure_ssl_client_just_for_testing_do_not_use: true
+

Overview

This document explains how to enable VoIP relaying on your Home Server with TURN.

@@ -1240,7 +1315,7 @@ turn_allow_guests: True

... and then reload any clients (or wait an hour for them to refresh their settings).

-

Troubleshooting

+

Troubleshooting

The normal symptoms of a misconfigured TURN server are that calls between devices on different networks ring, but get stuck at "call connecting". Unfortunately, troubleshooting this can be tricky.

@@ -2829,7 +2904,7 @@ be sent. See the delegation documentation for instru

Once federation has been configured, you should be able to join a room over federation. A good place to start is #synapse:matrix.org - a room for Synapse admins.

-

Troubleshooting

+

Troubleshooting

You can use the federation tester to check if your homeserver is configured correctly. Alternatively try the JSON API used by the federation tester. -- cgit 1.5.1