Solved matrix.org (communication)
-
-
I looked into the possibility of a new try to host Riot and Synapse on the same (sub)domain. Here’s the reply:
yusf:
Or is there, if it’s decided to host both on same (sub)domain, any method to reduce XSS attack probability?Riot dude:
Basically the attack surface is such that any code which gets executed with access to that subdomain in a browser will have access to that user's matrix access token. So if you run things like synapse or other things on same subdomain and they end up serving malicious code then bad things can happen.It's a very narrow surface, csp can make it even more narrow.
How then to use the CSP setting??
-
Another useful tool to possibly embed in this app package is matrix-corporal, though as an opt-in by default (enabled but void of policy) https://github.com/devture/matrix-corporal
-
just pushed an update for v1.8.0, apparently there were some changes in the config at some point, so when you're using log_file, you might need to remove that in order to be able to start the latest version.
In case it doesn't, jump on a terminal, check if it's actually running (
ps -ax) and if not, manually launch withgosu www-data python3 -m synapse.app.homeserver --config-path homeserver.yamlfrom/app/data/synapseand check the errormessage. -
-
@msbt Can you put in a LICENSE file into the repo (preferably MIT like the other app packages), so I can get this pushed to unstable?
-
@girish Having it in unstable would be awesome.
-
@yusf in earlier versions the homeserver.yaml contained a config item
# File to write logging to. Ignored if log_config is specified. log_file: "/run/synapse/homeserver.log"This got removed by moving it into the log_config itself which is set in
log_config: "/app/data/synapse/..."- apparently the config for my main matrix server had that still in there because it's rather old and always migrated including this setting. Matrix wouldn't start after the latest update if you had this still enabled so I had to #comment it out be able to start afterwards.@girish sure thing, I'll look into it later today
-
-
I'm pinging for this one as well! NextGen tech on Cloudron would be great!
-
Hi there,
thanks for all your work to build an app for cloudron.
I am interested in Matrix/Synapse , too. I would like to as to put in the unstable apps section. -
@msbt Thanks for updating the license.
OK, this was stupid. I didn't see that you had a riot app, so I ended up making the front end of my own
https://git.cloudron.io/cloudron/riot-web-app . It's pretty much the same as yours except I don't use nginx (I will probably put your nginx code into mine).I have pushed Riot Web to unstable now.
I will push out your matrix in the next few days. Thanks!
-
@girish What are the setup instructions?
-
@girish hi when do you think it will be published to the app store?
-
-
Super stoked on this, Riot/Matrix & Mastadon in such a short time span? Youn guys are crushing it!
-
@will The goal for this year is to get many more app packages out
-
I'm totaly looking forward to matrix.
Any news? ^^ -
Riot is a few versions behind (current stable is v1.5.10). Is there any movement on bringing the Matrix app to the App Store?
-
I am really looking forward to the Matrix app and an updated Riot version.
-
Glancing
turnserver.confTURN doesn't seem to have been integrated yet so that should probably be done before App Store release. -
I am waiting for the Matrix App, is there any good news about it? or can we use it now?
-
New critical Synapse update released, 1.12.0. Ping @msbt
-
Updated the repo (also changed manifestformat to v2), tested fresh install and updated my existing installations (but without extensive tests, like email and such) and it seems to work.
-
Thank you! Are you still maintaining the Riot app? It's a few releases behind as well.
-
I am for myself, but I figured people were going to use the official repo @girish created some time ago. Pushed another update for my old riot here.
-
-
We just integrated coturn into master branch yesterday. So, we are waiting for testing it a bit to get matrix published. Otherwise, the first complaint is going to be that voice doesn't work...
-
@girish said in matrix.org (communication):
We just integrated coturn into master branch yesterday. So, we are waiting for testing it a bit to get matrix published. Otherwise, the first complaint is going to be that voice doesn't work...
nice!
-
@girish Awesome! You guys really know how to set priorities and I love the direction cloudron development is going in! Great job guys!
-
This is almost working now - https://git.cloudron.io/cloudron/matrix-synapse-app/ (based off @msbt 's work)! I am testing out the federation bits, after that I will get this published.
-
nice @girish, didn't know about the yq thing, way better than what I've been doing
-
@msbt yeah, luckily you already figured out what needs to be patched in the yaml file each time
so it was a straight forward port. -
@girish That’s amazing news! Thank you for the hard work.
Did you get link previews etc sorted as well? Will there be an upgrade path from msbt’s package?
-
@girish said in matrix.org (communication):
This is almost working now - https://git.cloudron.io/cloudron/matrix-synapse-app/ (based off @msbt 's work)! I am testing out the federation bits, after that I will get this published.
I assumed federation support would be very tricky for cloudron but than I saw how you managed stuff like federation port and well.known
Hope you have fun with the federationtester ^^ Are you using ma1sd or mxisd?We "fixed" it with a nginx that proxy passes requests on any hostname with path /.well-known/ to matrix.domain.com/.well-known/
-
@subven Yes, I am not 100% sure if the configuration I have actually works (for federation) but in theory it should. For the
well-known, we are looking into adding this to Cloudron itself (probably in the domains view). We can then do mail auto-discovery, mastodon etc. -
@girish said in matrix.org (communication):
@subven Yes, I am not 100% sure if the configuration I have actually works (for federation) but in theory it should. For the
well-known, we are looking into adding this to Cloudron itself (probably in the domains view). We can then do mail auto-discovery, mastodon etc.Heads up for adding the well-known to the root domain! As you said, this would add autoconfig for mail as well which would be great. Not quite sure if this could be added as a configurable feature for Caldav for example, as users could use different Caldav server (Sogo, Nextcloud, etc.)
-
for people using my matrix installation: if you're on the latest cloudron version (>=5.1), you need to disable the turn port, else it will prohibit the real turn service to start up because the main port is in use.
-
@yusf said in matrix.org (communication):
Will there be an upgrade path from msbt’s package?
-
@msbt Thanks for the work you put in it!
I have successfully deployed the app, it was necessary do edit CloudronManifest.json and remove the udp ports there.
Do you know how the postgresql db can be edited to make a user an admin? I would like to follow the documentation here: https://github.com/matrix-org/synapse/wiki -
You're welcome! I'd rather wait until the cloudron package is final before tinkering around
-
I managed to get federation working just now, yay! I will make matrix available tomorrow
It does require a new Cloudron release for well-known support.
-
That feeling when something you’ve wanted for years finally realizes.
-
First of all, thanks to everyone who has been working on the matrix app. I'm very happy to be able to run it on cloudron!
I have two questions/points that I would like to discuss and hope this is the right place:-
Setting up the root-domain for federation use.
When installing matrix synapse it is necessary (at least for me) to set the root domain (example.com) as a redirect URL for matrix.example.com to make federation work. As far as I know only port 8448 is needed on the root-domain to make federation work. Using my workaround I am not able to use another app with the root domain (e.g. a website or any other service). Is there any way to avoid this? -
Making a user an administrator.
Referring to the documentation (https://github.com/matrix-org/synapse/wiki) one command needs to be executed to make a user an admin - it manipulates the data in the postgresdb:
UPDATE users SET admin = 1 WHERE name = '@foo:bar.com'
What is the recommended way to perform this on Cloudron?
Thanks a lot in advance.
Stay healthy everyone! -
-
I installed a test-instance as well on a subdomain and neither federation nor the integrations are available. @girish ping me on the chat for debugging
-
@stantropics What can an admin do? Does he get some special controls in Riot? I couldn't figure out how to test it, so I left that part out.
-
@msbt The RIOT First Time Documentation notes that you need to tweak the Matrix Synapse home server. I found that the install uses the domain you give it but assumes 'matrix' is the subdomain. My subdomain was different and I had to tweak both the Matrix Synapse config and the RIOT config and then I restarted both, Then it worked. Check out the little drop-down tab "Documentation" and the First Time Setup, and follow the links there. I hope the issue is this simple.
First Time Setup
This app is only the frontend for Matrix. If you haven't done so already you should install the Matrix Synapse home server in a subdomain like matrix.yourdomain.com.This app is pre-configured to use the matrix installation at matrix.yourdomain.com. If you installed Synapse at another location, use the Web Terminal to edit /app/data/config.json to set the home server.
-
I just announced this - https://forum.cloudron.io/topic/2336/matrix-riot . Can you guys give it a quick read and tell what to improve there?
-
@girish Do you want the comments here? All I can say is that this section:
Riot is pre-configured to use matrix subdomain as the homeserver location.ought to be more evident. Like at the start of a paragraph. It's the sort of essential info that real coders like yourself just know but tinkerers like me don't.
Another line that could use some clarifying is:
SSH into the server and add the record like thisMy own impression from using Cloudron is that there is no need to ssh into the server and that using the built-in Terminal is the place to get things done if needed. I followed it literally, but I also think someone could read it and think "they must mean through the Console of the app...but which one, the Matrix server or the RIOT app?" and proceed to get confused because they can't navigate to
/home/yellowtent/boxdata/well-known/.
Finally, in Step 3, after the line:If you installed synapse at matrix.example.com, the client should be already able to connectmaybe you could add something like "check Step 1" as a reminder because someone will prob skip it and then get here wondering what's going on.
Finally, thank you again.
-
everything works fine now, no idea what caused the issues, all good, thanks @girish
-
@scooke Thanks for the feedback, will fix up the docs.
The SSH is a bit rough agreed
We will add a UI for .well-known records in the coming releases. For now, we wanted the apps out, so we can get some testing in parallel. -
@msbt do you also have to set a redirect record for example.com to make it work? Or is it just me?
-
@stantropics You don't need to setup redirects. Is the website
example.coman app on Cloudron (or is it external to Cloudron) ? If it's the former, you just have to setup that .well-known record. -
@stantropics I had a surfer app at example.com and curl'ing the well-known url gave me a 404. After a bit of reconfiguring it worked, not sure if that's your setup as well, but maybe try reconfiguring the example.com app and see if that solves your issue (if that's what you're asking)
-
@msbt @girish I am not using the root-domain (example.com) at all currently. But matrix seems to not work if I don't set it up as a redirect for matrix.example.com.
-
Can you post your setup here with example domain names of where you installed what - https://forum.cloudron.io/topic/2336/matrix-riot ? I can help out there.
I will lock this thread, since 2 open posts for the same topic is confusing!
-
@stantropics In the terminal you should be able run the psql command to update a user to admin.
To get the password type:
echo $CLOUDRON_POSTGRESQL_PASSWORDpsql --host=$CLOUDRON_POSTGRESQL_HOST port=$CLOUDRON_POSTGRESQL_PORT $CLOUDRON_POSTGRESQL_DATABASE $CLOUDRON_POSTGRESQL_USERNAME
[right-click-Copy and ctrl-v paste in the password]
UPDATE users SET admin = 1 WHERE name = '@foo:bar.com';
BUT: I am getting: psql: FATAL: password authentication failed for user ...
Can anyone see what I am doing wrong? @girish ?
-
@jimscarver In the Terminal, there is a Postgres button on the top. Just clicking it will paste the command to connect to postgres. Just paste enter after that.
(That aside, I think the mistake in your cli is possibly that the database name is not set)
-
@yusf Do we have any update on this ?
i would like to use webhooks with my matrix instance but i'm kinda confused on what is the state of these bridges/app for matrix/element & cloudron.
