dandri/synapse
1
0
Fork 0
mirror of https://github.com/element-hq/synapse.git synced 2026-09-17 21:05:30 +00:00
Code Issues Packages Projects Releases Wiki Activity

deploy: 1d9aa4823a

Browse Source
This commit is contained in:
devonh
2026-09-17 17:37:15 +00:00
parent 896c90c30a
commit c4ed63a359
113 changed files with 146 additions and 112 deletions
Download Patch File Download Diff File Expand all files Collapse all files
develop/setup/forward_proxy.html
+1 -1
View File
@@ -37,7 +37,7 @@
const path_to_root = "../";
const default_light_theme = "light";
const default_dark_theme = "navy";
window.path_to_searchindex_js = "../searchindex-862788cc.js";
window.path_to_searchindex_js = "../searchindex-185d90e6.js";
</script>
<!-- Start loading toc.js asap -->
<script src="../toc-64310643.js"></script>
develop/setup/installation.html
+1 -1
View File
@@ -37,7 +37,7 @@
const path_to_root = "../";
const default_light_theme = "light";
const default_dark_theme = "navy";
window.path_to_searchindex_js = "../searchindex-862788cc.js";
window.path_to_searchindex_js = "../searchindex-185d90e6.js";
</script>
<!-- Start loading toc.js asap -->
<script src="../toc-64310643.js"></script>
develop/setup/security.html
+18 -1
View File
@@ -37,7 +37,7 @@
const path_to_root = "../";
const default_light_theme = "light";
const default_dark_theme = "navy";
window.path_to_searchindex_js = "../searchindex-862788cc.js";
window.path_to_searchindex_js = "../searchindex-185d90e6.js";
</script>
<!-- Start loading toc.js asap -->
<script src="../toc-64310643.js"></script>
@@ -228,6 +228,23 @@ However, you should <em>not</em> host your Synapse on <code>A.example1.com</code
mentioned in MXIDs hosted on that server.</p>
<p>Following this advice ensures that even if an XSS is found in Synapse, the
impact to other applications will be minimal.</p>
<h2 id="firewall-configuration"><a class="header" href="#firewall-configuration">Firewall configuration</a></h2>
<p>If your Matrix server is secured by a firewall, firewall rules for two different purposes are required.</p>
<p>Client access to a Synapse server runs via the client port which is TCP port 443 by default. The client port has to be allowed inbound.</p>
<p>Federation to exchange messages with other Matrix servers runs via TCP port 8448 by default or alternatively via regular HTTPS TCP port 443 (usually if run with <a href="../delegate.html">delegation</a> and/or behind a <a href="../reverse_proxy.html">reverse proxy</a>). So to allow federation in a firewall, make sure to allow the federation port of your Synapse server inbound.</p>
<p>If you have outbound access limited by a firewall allowlist, make sure both TCP ports 443 <strong>and</strong> 8448 are allowed outbound.</p>
<div class="table-wrapper">
<table>
<thead>
<tr><th>Direction</th><th>Port</th><th>Protocol</th><th>Description</th></tr>
</thead>
<tbody>
<tr><td>Inbound</td><td>443</td><td>TCP</td><td>Client access</td></tr>
<tr><td>Inbound</td><td>8448 and/or 443</td><td>TCP</td><td>Federation inbound, depending on the federation port used</td></tr>
<tr><td>Outbound</td><td>8448 <strong>and</strong> 443</td><td>TCP</td><td>Federation outbound, both ports are usually used</td></tr>
</tbody>
</table>
</div>
</main>
develop/setup/turn/coturn.html
+1 -1
View File
@@ -37,7 +37,7 @@
const path_to_root = "../../";
const default_light_theme = "light";
const default_dark_theme = "navy";
window.path_to_searchindex_js = "../../searchindex-862788cc.js";
window.path_to_searchindex_js = "../../searchindex-185d90e6.js";
</script>
<!-- Start loading toc.js asap -->
<script src="../../toc-64310643.js"></script>
develop/setup/turn/eturnal.html
+1 -1
View File
@@ -37,7 +37,7 @@
const path_to_root = "../../";
const default_light_theme = "light";
const default_dark_theme = "navy";
window.path_to_searchindex_js = "../../searchindex-862788cc.js";
window.path_to_searchindex_js = "../../searchindex-185d90e6.js";
</script>
<!-- Start loading toc.js asap -->
<script src="../../toc-64310643.js"></script>