133 lines
4.1 KiB
YAML
133 lines
4.1 KiB
YAML
# documentation: https://matrix.org/docs/chat_basics/matrix-for-im/
|
|
# slogan: Chat securely with your family, friends, community, or build great apps with Matrix!
|
|
# category: messaging
|
|
# tags: chat,slack,discord,voip,video,call
|
|
# logo: svgs/matrix.svg
|
|
# port: 8008
|
|
|
|
services:
|
|
matrix:
|
|
image: matrixdotorg/synapse:latest
|
|
environment:
|
|
- SERVICE_URL_MATRIX_8008
|
|
- SYNAPSE_SERVER_NAME=${SERVICE_FQDN_MATRIX}
|
|
- SYNAPSE_REPORT_STATS=${SYNAPSE_REPORT_STATS:-no}
|
|
- ENABLE_REGISTRATION=${ENABLE_REGISTRATION:-false}
|
|
- RECAPTCHA_PUBLIC_KEY=${RECAPTCHA_PUBLIC_KEY}
|
|
- RECAPTCHA_PRIVATE_KEY=${RECAPTCHA_PRIVATE_KEY}
|
|
- _SERVER_NAME=${SERVICE_FQDN_MATRIX}
|
|
- _ADMIN_NAME=${SERVICE_USER_ADMIN}
|
|
- _ADMIN_PASS=${SERVICE_PASSWORD_ADMIN}
|
|
volumes:
|
|
- matrix-data:/data
|
|
entrypoint:
|
|
- /bin/bash
|
|
- -c
|
|
- |
|
|
! test -f /data/homeserver.yaml && /start.py generate
|
|
|
|
# registration_shared_secret
|
|
grep "registration_shared_secret" /data/homeserver.yaml \
|
|
| awk '{print $2}' > ./registration_shared_secret
|
|
|
|
# macaroon_secret_key
|
|
grep "macaroon_secret_key" /data/homeserver.yaml \
|
|
| awk '{print $2}' > ./macaroon_secret_key
|
|
|
|
# form_secret
|
|
grep "form_secret" /data/homeserver.yaml \
|
|
| awk '{print $2}' > ./form_secret
|
|
|
|
##########################
|
|
# #
|
|
# homeserver.yaml: start #
|
|
# #
|
|
##########################
|
|
cat <<EOF > /data/homeserver.yaml
|
|
server_name: "${SERVICE_FQDN_MATRIX}"
|
|
pid_file: /data/homeserver.pid
|
|
|
|
# server
|
|
listeners:
|
|
- port: 8008
|
|
tls: false
|
|
type: http
|
|
x_forwarded: true
|
|
resources:
|
|
- names: [client, federation]
|
|
compress: false
|
|
|
|
# database
|
|
database:
|
|
name: sqlite3
|
|
args:
|
|
database: /data/homeserver.db
|
|
|
|
# general
|
|
log_config: "/data/${SERVICE_FQDN_MATRIX}.log.config"
|
|
media_store_path: /data/media_store
|
|
report_stats: false
|
|
|
|
# secrets
|
|
registration_shared_secret: $(<./registration_shared_secret)
|
|
macaroon_secret_key: $(<./macaroon_secret_key)
|
|
form_secret: $(<./form_secret)
|
|
signing_key_path: "/data/${SERVICE_FQDN_MATRIX}.signing.key"
|
|
|
|
#rooms
|
|
auto_join_rooms:
|
|
- "#general:${SERVICE_FQDN_MATRIX}"
|
|
|
|
# federation
|
|
trusted_key_servers:
|
|
- server_name: "matrix.org"
|
|
autocreate_auto_join_rooms_federated: false
|
|
allow_public_rooms_over_federation: false
|
|
EOF
|
|
########################
|
|
# #
|
|
# homeserver.yaml: end #
|
|
# #
|
|
########################
|
|
|
|
[ "${ENABLE_REGISTRATION}" = "true" ] && ! grep "#registration" /data/homeserver.yaml &>/dev/null \
|
|
&& echo >> /data/homeserver.yaml \
|
|
&& cat <<EOF >> /data/homeserver.yaml
|
|
#registration
|
|
enable_registration: true # Allows users to register on your server.
|
|
EOF
|
|
|
|
[ -n "${RECAPTCHA_PUBLIC_KEY}" ] && ! grep "${RECAPTCHA_PUBLIC_KEY}" /data/homeserver.yaml &>/dev/null \
|
|
&& echo >> /data/homeserver.yaml \
|
|
&& cat <<EOF >> /data/homeserver.yaml
|
|
# reCAPTCHA settings
|
|
enable_registration_captcha: true # Enables CAPTCHA for registrations.
|
|
recaptcha_public_key: "${RECAPTCHA_PUBLIC_KEY}"
|
|
recaptcha_private_key: "${RECAPTCHA_PRIVATE_KEY}"
|
|
recaptcha_siteverify_api: "https://www.google.com/recaptcha/api/siteverify"
|
|
EOF
|
|
|
|
register_admin(){
|
|
while ! curl -I localhost:8008 &>/dev/null; do
|
|
sleep 1
|
|
done
|
|
register_new_matrix_user \
|
|
-a \
|
|
-u ${SERVICE_USER_ADMIN} \
|
|
-p ${SERVICE_PASSWORD_ADMIN} \
|
|
-c /data/homeserver.yaml \
|
|
http://localhost:8008 &>/dev/null
|
|
}
|
|
register_admin &
|
|
|
|
/start.py
|
|
healthcheck:
|
|
test:
|
|
- CMD
|
|
- curl
|
|
- -I
|
|
- localhost:8008
|
|
interval: 5s
|
|
timeout: 3s
|
|
retries: 5
|