diff options
| author | Andrew Morgan <andrew@amorgan.xyz> | 2019-02-01 14:52:39 +0000 |
|---|---|---|
| committer | Andrew Morgan <andrew@amorgan.xyz> | 2019-02-01 15:05:10 +0000 |
| commit | 7f914a2dbff902b25fbf01a33925329e6a00742e (patch) | |
| tree | 3a6afc6d609088ed0a546c418235eb1c5f1293dc /README.rst | |
| parent | Clean up portions of docs that talk about reversing fed port (diff) | |
| download | synapse-7f914a2dbff902b25fbf01a33925329e6a00742e.tar.xz | |
Remove error and add link to foks fed tester project
Diffstat (limited to '')
| -rw-r--r-- | README.rst | 5 |
1 files changed, 3 insertions, 2 deletions
diff --git a/README.rst b/README.rst index 248b5fbfe1..8181ff20c1 100644 --- a/README.rst +++ b/README.rst @@ -212,6 +212,7 @@ key in the ``<server name>.signing.key`` file (the second word) to something different. See `the spec`__ for more information on key management.) .. __: `key_management`_ + The default configuration exposes two HTTP ports: 8008 and 8448. Port 8008 is configured without TLS; it should be behind a reverse proxy for TLS/SSL termination on port 443 which in turn should be used for clients. Port 8448 @@ -659,6 +660,8 @@ Troubleshooting You can use the federation tester to check if your homeserver is all set: ``https://matrix.org/federationtester/api/report?server_name=<your_server_name>`` If any of the attributes under "checks" is false, federation won't work. +There is also a nicer interface available from a community member at +`<https://neo.lain.haus/fed-tester>`_. The typical failure mode with federation is that when you try to join a room, it is rejected with "401: Unauthorized". Generally this means that other @@ -667,8 +670,6 @@ complicated dance which requires connections in both directions). So, things to check are: -* If you are trying to use a reverse-proxy, read `Reverse-proxying the - federation port`_. * If you are not using a SRV record, check that your ``server_name`` (the part of your user-id after the ``:``) matches your hostname, and that port 8448 on that hostname is reachable from outside your network. |