Cloudron makes it easy to run web apps like WordPress, Nextcloud, GitLab on your server. Find out more or install now.


Skip to content
  • Categories
  • Recent
  • Tags
  • Popular
  • Bookmarks
  • Search
Skins
  • Light
  • Cerulean
  • Cosmo
  • Flatly
  • Journal
  • Litera
  • Lumen
  • Lux
  • Materia
  • Minty
  • Morph
  • Pulse
  • Sandstone
  • Simplex
  • Sketchy
  • Spacelab
  • United
  • Yeti
  • Zephyr
  • Dark
  • Cyborg
  • Darkly
  • Quartz
  • Slate
  • Solar
  • Superhero
  • Vapor

  • Default (No Skin)
  • No Skin
Collapse
Brand Logo

Cloudron Forum

Apps | Demo | Docs | Install
  1. Cloudron Forum
  2. Matrix (Synapse/Element)
  3. Help making federation work

Help making federation work

Scheduled Pinned Locked Moved Solved Matrix (Synapse/Element)
34 Posts 9 Posters 5.2k Views 10 Watching
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • girishG girish

    @sebgg I think this is most likely because you don't have an app installed on example.com. Just install any app there i.e on the bare domain of example.com. You can also pick some existing and set the bare domain to redirect to it. Only when the "bare domain" (https://example.com) is serviced by cloudron, will the well-known stuff work.

    S Offline
    S Offline
    SebGG
    wrote on last edited by
    #20

    @girish

    thank you, this was the problem!

    39122723-652e-49d3-aa17-57d5572e5290-image.png

    1 Reply Last reply
    1
    • girishG girish

      @sebgg I think this is most likely because you don't have an app installed on example.com. Just install any app there i.e on the bare domain of example.com. You can also pick some existing and set the bare domain to redirect to it. Only when the "bare domain" (https://example.com) is serviced by cloudron, will the well-known stuff work.

      D Offline
      D Offline
      drpaneas
      wrote on last edited by
      #21

      @girish said in Help making federation work:

      @sebgg I think this is most likely because you don't have an app installed on example.com. Just install any app there i.e on the bare domain of example.com. You can also pick some existing and set the bare domain to redirect to it. Only when the "bare domain" (https://example.com) is serviced by cloudron, will the well-known stuff work.

      Please put that information in the documentation for Matrix.

      nebulonN 1 Reply Last reply
      0
      • D drpaneas

        @girish said in Help making federation work:

        @sebgg I think this is most likely because you don't have an app installed on example.com. Just install any app there i.e on the bare domain of example.com. You can also pick some existing and set the bare domain to redirect to it. Only when the "bare domain" (https://example.com) is serviced by cloudron, will the well-known stuff work.

        Please put that information in the documentation for Matrix.

        nebulonN Offline
        nebulonN Offline
        nebulon
        Staff
        wrote on last edited by
        #22

        @drpaneas the next Cloudron version will have a feature on the domain settings to fix this. So no need to have an app installed on the bare domain anymore then.

        girishG 1 Reply Last reply
        1
        • nebulonN nebulon

          @drpaneas the next Cloudron version will have a feature on the domain settings to fix this. So no need to have an app installed on the bare domain anymore then.

          girishG Offline
          girishG Offline
          girish
          Staff
          wrote on last edited by
          #23

          @nebulon said in Help making federation work:

          So no need to have an app installed on the bare domain anymore then.

          We still need an app on bare domain in the latest release. All the new feature does it to set up the .well-known paths without having to edit files manually on the server.

          DanTheManD ericdrgnE 2 Replies Last reply
          0
          • girishG girish

            @nebulon said in Help making federation work:

            So no need to have an app installed on the bare domain anymore then.

            We still need an app on bare domain in the latest release. All the new feature does it to set up the .well-known paths without having to edit files manually on the server.

            DanTheManD Offline
            DanTheManD Offline
            DanTheMan
            wrote on last edited by
            #24

            @girish sorry that i bumped in the conversation. I was following the story and do have one question regarding the App installed at bare domain.
            Does the app that's installed on bare domain have to be running? Or can it be installed, without it being active (running)?

            girishG 1 Reply Last reply
            0
            • DanTheManD DanTheMan

              @girish sorry that i bumped in the conversation. I was following the story and do have one question regarding the App installed at bare domain.
              Does the app that's installed on bare domain have to be running? Or can it be installed, without it being active (running)?

              girishG Offline
              girishG Offline
              girish
              Staff
              wrote on last edited by
              #25

              @dantheman the app doesn't need to be running, it can be Stopped.

              DanTheManD 1 Reply Last reply
              0
              • girishG girish

                @dantheman the app doesn't need to be running, it can be Stopped.

                DanTheManD Offline
                DanTheManD Offline
                DanTheMan
                wrote on last edited by
                #26

                @girish Thanks a lot for that Girish šŸ‘šŸ‘

                1 Reply Last reply
                0
                • humptydumptyH Offline
                  humptydumptyH Offline
                  humptydumpty
                  wrote on last edited by
                  #27

                  Even though I got Matrix and the Federation to work. My friend still can't log into my Matrix homeserver so I decided to set up NextCloud Talk and Mattermost and see which ones work best for us.

                  Turns out they can't connect to ANY of them from their Samsung Galaxy S6 Edge running Android 7. I ask them to log in via the web browser just to test the account itself and they log in just fine.

                  It's a problem logging in with the android apps only that are running on my server and the error is almost the same across them all. For Matrix/Element, if they use the Matrix homeserver, it connects just fine.

                  Handshake error
                  SSL error
                  or something of the sort

                  I found this thread on Mattermost discussing certificate issues.

                  Quoting user "yanuk"

                  I upgraded the SSL certs to RSA4096 and it now works. I’m not sure what happened and why it only affected a single phone in office. Seems unique to only that phone.
                  

                  I went to ssllabs.com and ran a test and got OCSP ERROR: Exception: connect timed out for the certificate path for the app.

                  Screenshot 2021-01-27 085523.png

                  **** I changed the domain in the screenshot for privacy by editing the page source - PM for more info ****

                  The question now is how to upgrade the type of certificate that Let's Encrypt is creating and have that change be permanent when the next renewal date is up. Thoughts?

                  girishG 1 Reply Last reply
                  0
                  • humptydumptyH humptydumpty

                    Even though I got Matrix and the Federation to work. My friend still can't log into my Matrix homeserver so I decided to set up NextCloud Talk and Mattermost and see which ones work best for us.

                    Turns out they can't connect to ANY of them from their Samsung Galaxy S6 Edge running Android 7. I ask them to log in via the web browser just to test the account itself and they log in just fine.

                    It's a problem logging in with the android apps only that are running on my server and the error is almost the same across them all. For Matrix/Element, if they use the Matrix homeserver, it connects just fine.

                    Handshake error
                    SSL error
                    or something of the sort

                    I found this thread on Mattermost discussing certificate issues.

                    Quoting user "yanuk"

                    I upgraded the SSL certs to RSA4096 and it now works. I’m not sure what happened and why it only affected a single phone in office. Seems unique to only that phone.
                    

                    I went to ssllabs.com and ran a test and got OCSP ERROR: Exception: connect timed out for the certificate path for the app.

                    Screenshot 2021-01-27 085523.png

                    **** I changed the domain in the screenshot for privacy by editing the page source - PM for more info ****

                    The question now is how to upgrade the type of certificate that Let's Encrypt is creating and have that change be permanent when the next renewal date is up. Thoughts?

                    girishG Offline
                    girishG Offline
                    girish
                    Staff
                    wrote on last edited by
                    #28

                    @humptydumpty How about your mobile phone? Are you able to connect from yours and what mobile do you use?

                    humptydumptyH 1 Reply Last reply
                    0
                    • girishG girish

                      @humptydumpty How about your mobile phone? Are you able to connect from yours and what mobile do you use?

                      humptydumptyH Offline
                      humptydumptyH Offline
                      humptydumpty
                      wrote on last edited by
                      #29

                      @girish I have an iPhone XR running iOS 14.4 and everything works fine. I also have an old Samsung (forgot the model) that is running Android 5.0 and that works fine too. It's specifically one device that my friend is using (Samsung Galaxy S6 Edge, running Android 7.0) that refuses to connect to my homeservers through the apps (Element, NextCloud Talk, MatterMost). I installed all three apps in Cloudron, connected to all of them just fine on both of my devices (ios and android). Something about that S6 Edge phone is giving us problems. Is the OCSP error I mentioned above unrelated to this connectivity issue?

                      1 Reply Last reply
                      0
                      • girishG girish

                        @nebulon said in Help making federation work:

                        So no need to have an app installed on the bare domain anymore then.

                        We still need an app on bare domain in the latest release. All the new feature does it to set up the .well-known paths without having to edit files manually on the server.

                        ericdrgnE Offline
                        ericdrgnE Offline
                        ericdrgn
                        wrote on last edited by
                        #30

                        @girish Testing this new way of getting federation setup on Cloudron v6.1 what exactly are the steps using this new method? I went to my domain settings and added matrix.blahblah.com:443 to the "Matrix server location" section within the domain and federation isn't working. This is a test instance of Matrix/Synapse/Element to see how it all works now. Am I doing something wrong or are there more steps not in the documentation yet? For this particular domain I have an Element instance on connect.blahblah.com, Matrix/Synapse at matrix.blahblah.com, and Kutt on the bare domain blahblah.com. "blahblah.com" is not the actual domain. Just a placeholder here.

                        girishG 1 Reply Last reply
                        0
                        • ericdrgnE ericdrgn

                          @girish Testing this new way of getting federation setup on Cloudron v6.1 what exactly are the steps using this new method? I went to my domain settings and added matrix.blahblah.com:443 to the "Matrix server location" section within the domain and federation isn't working. This is a test instance of Matrix/Synapse/Element to see how it all works now. Am I doing something wrong or are there more steps not in the documentation yet? For this particular domain I have an Element instance on connect.blahblah.com, Matrix/Synapse at matrix.blahblah.com, and Kutt on the bare domain blahblah.com. "blahblah.com" is not the actual domain. Just a placeholder here.

                          girishG Offline
                          girishG Offline
                          girish
                          Staff
                          wrote on last edited by girish
                          #31

                          @ericdrgn There is small issue that I forgot to put in the docs. Did you have the Kutt already instead before you set the "Matrix server location" ? If so, on the Cloudron dashboard, simply go to Kutt app's Location section -> Save (no need to make any changes).

                          After that, can you check the output of curl https://blahblah.com/.well-known/matrix/server ?

                          Edit: leaving a note for future readers. the issue is only for installations pre-6.1.

                          ericdrgnE 1 Reply Last reply
                          0
                          • girishG girish

                            @ericdrgn There is small issue that I forgot to put in the docs. Did you have the Kutt already instead before you set the "Matrix server location" ? If so, on the Cloudron dashboard, simply go to Kutt app's Location section -> Save (no need to make any changes).

                            After that, can you check the output of curl https://blahblah.com/.well-known/matrix/server ?

                            Edit: leaving a note for future readers. the issue is only for installations pre-6.1.

                            ericdrgnE Offline
                            ericdrgnE Offline
                            ericdrgn
                            wrote on last edited by
                            #32

                            @girish Would you look at that! That was it. All good now. So that updated piece is all that is needed. The new method is as easy as it seems, thanks!

                            girishG 1 Reply Last reply
                            0
                            • ericdrgnE ericdrgn

                              @girish Would you look at that! That was it. All good now. So that updated piece is all that is needed. The new method is as easy as it seems, thanks!

                              girishG Offline
                              girishG Offline
                              girish
                              Staff
                              wrote on last edited by
                              #33

                              @ericdrgn Good to know, thanks for testing!

                              The 'save' essentially re-generates the app's nginx configuration (which has changed from the previous release).

                              ericdrgnE 1 Reply Last reply
                              0
                              • girishG girish

                                @ericdrgn Good to know, thanks for testing!

                                The 'save' essentially re-generates the app's nginx configuration (which has changed from the previous release).

                                ericdrgnE Offline
                                ericdrgnE Offline
                                ericdrgn
                                wrote on last edited by
                                #34

                                @girish Of course, makes sense now. Should be fairly easy for everyone moving forward.

                                1 Reply Last reply
                                0
                                • scookeS scooke referenced this topic on
                                Reply
                                • Reply as topic
                                Log in to reply
                                • Oldest to Newest
                                • Newest to Oldest
                                • Most Votes


                                • Login

                                • Don't have an account? Register

                                • Login or register to search.
                                • First post
                                  Last post
                                0
                                • Categories
                                • Recent
                                • Tags
                                • Popular
                                • Bookmarks
                                • Search