923 commits

Author	SHA1	Message	Date
Erik Johnston	b18cd25e42	Fixup changelog entries	2019-02-12 13:05:31 +00:00
Erik Johnston	cf82338930	Merge pull request #4627 from matrix-org/erikj/user_ips_analyze ... Analyze user_ips before running deduplication	2019-02-12 13:05:09 +00:00
Erik Johnston	3df8fcca25	Merge pull request #4626 from matrix-org/erikj/fixup_user_ips_dedupe ... Reduce user_ips bloat during dedupe background update	2019-02-12 13:02:58 +00:00
Erik Johnston	b2327eb9cb	Newsfile	2019-02-12 11:58:36 +00:00
Erik Johnston	218cc071c5	Newsfile	2019-02-12 11:39:36 +00:00
Erik Johnston	3c03c37883	Merge pull request #4625 from matrix-org/rav/fix_generate_config_warnings ... fix self-signed cert notice from generate-config	2019-02-12 11:24:45 +00:00
Richard van der Hoff	2418b91bb7	README updates (#4621) ... Lots of updates to the README/INSTALL.md. Fixes #4601.	2019-02-12 10:53:28 +00:00
Richard van der Hoff	a4ce91396b	Disable TLS by default (#4614)	2019-02-12 10:52:08 +00:00
Richard van der Hoff	32b781bfe2	Fix error when loading cert if tls is disabled (#4618) ... If TLS is disabled, it should not be an error if no cert is given. Fixes #4554.	2019-02-12 10:51:31 +00:00
Richard van der Hoff	dfc846a316	fix self-signed cert notice from generate-config ... fixes #4620	2019-02-12 10:37:59 +00:00
Erik Johnston	46b8a79b3a	Merge pull request #4619 from matrix-org/rav/remove_docker_no_tls_hacks ... Remove redundant entries from docker config	2019-02-12 10:00:38 +00:00
Richard van der Hoff	91f8cd3307	Remove redundant entries from docker config ... * no_tls is now redundant (#4613) * we don't need a dummy cert any more (#4618)	2019-02-11 22:16:44 +00:00
Richard van der Hoff	4fddf8fc77	Infer no_tls from presence of TLS listeners ... Rather than have to specify `no_tls` explicitly, infer whether we need to load the TLS keys etc from whether we have any TLS-enabled listeners.	2019-02-11 21:39:14 +00:00
Richard van der Hoff	15272f837c	Merge branch 'rav/no_create_server_contexts_if_no_tls' into rav/tls_cert/work	2019-02-11 21:34:19 +00:00
Richard van der Hoff	9645728619	Don't create server contexts when TLS is disabled ... we aren't going to use them anyway.	2019-02-11 21:32:01 +00:00
Richard van der Hoff	be794c7cf7	Merge branch 'rav/tls_config_logging_fixes' into rav/tls_cert/work	2019-02-11 21:16:00 +00:00
Richard van der Hoff	2129dd1a02	Fail cleanly if listener config lacks a 'port' ... ... otherwise we would fail with a mysterious KeyError or something later.	2019-02-11 21:15:01 +00:00
Richard van der Hoff	086f6f27d4	Logging improvements around TLS certs ... Log which file we're reading keys and certs from, and refactor the code a bit in preparation for other work	2019-02-11 21:02:06 +00:00
Richard van der Hoff	5d27730a73	Move ClientTLSOptionsFactory init out of refresh_certificates (#4611) ... It's nothing to do with refreshing the certificates. No idea why it was here.	2019-02-11 18:03:30 +00:00
Erik Johnston	719e073f00	Merge pull request #4580 from matrix-org/uhoreg/e2e_backup_add_updating ... add updating of backup versions	2019-02-11 13:45:49 +00:00
Richard van der Hoff	24b7f3916d	Clean up default listener configuration (#4586) ... Rearrange the comments to try to clarify them, and expand on what some of it means. Use a sensible default 'bind_addresses' setting. For the insecure port, only bind to localhost, and enable x_forwarded, since apparently it's for use behind a load-balancer.	2019-02-11 12:50:30 +00:00
Richard van der Hoff	c475275926	Clarifications for reverse proxy docs (#4607) ... Factor out the reverse proxy info to a separate file, add some more info on reverse-proxying the federation port.	2019-02-11 11:44:28 +00:00
Amber Brown	6e2a5aa050	ACME Reprovisioning (#4522)	2019-02-11 10:36:26 +00:00
Amber Brown	4ffd10f46d	Be tolerant of blank TLS fingerprints config (#4589)	2019-02-11 10:04:27 +00:00
Erik Johnston	b201149c7e	Merge pull request #4420 from matrix-org/jaywink/openid-listener ... New listener resource for the federation API "openid/userinfo" endpoint	2019-02-11 09:44:00 +00:00
Valentin Anger	2dc2b6e9f1	Allow "unavailable" presence status for /sync (#4592) ... * Allow "unavailable" presence status for /sync Closes #3772, closes #3779 Signed-off-by: Valentin Anger <valentin.an.1999@gmail.com> * Add changelog for PR 4592	2019-02-08 21:09:56 +00:00
Richard van der Hoff	56710c7df5	Fix 'no unique or exclusion constraint' error (#4591) ... Add more tables to the list of tables which need a background update to complete before we can upsert into them, which fixes a race against the background updates.	2019-02-08 18:30:46 +00:00
Amber Brown	9cd33d2f4b	Deduplicate some code in synapse.app (#4567)	2019-02-08 17:25:57 +00:00
Erik Johnston	acb2ac5863	Update MSC1711 FAQ to be explicit about well-known (#4584) ... A surprising number of people are using the well-known method, and are simply copying the example configuration. This is problematic as the example includes an explicit port, which causes inbound federation requests to have the HTTP Host header include the port, upsetting some reverse proxies. Given that, we update the well-known example to be more explicit about the various ways you can set it up, and the consequence of using an explict port.	2019-02-07 19:30:32 +00:00
Richard van der Hoff	7a22a645b5	Merge branch 'master' into develop	2019-02-07 19:18:48 +00:00
Richard van der Hoff	624b172e08	Merge remote-tracking branch 'origin/release-v0.99.0'	2019-02-07 19:18:26 +00:00
Andrew Morgan	c17b128b83	Update ACME docs to include port instructions (#4578)	2019-02-07 19:18:08 +00:00
Hubert Chathi	51b73be63b	add changelog entry	2019-02-06 21:39:56 -05:00
Richard van der Hoff	7fe407a87a	Merge branch 'master' into develop	2019-02-06 09:50:54 +00:00
Richard van der Hoff	d8e63846e2	Fix docker upload job to push -py2 images (#4576)	2019-02-06 09:41:54 +00:00
Richard van der Hoff	2475434080	Merge branch 'master' into develop	2019-02-05 18:44:49 +00:00
Richard van der Hoff	3bd9daf4b8	v0.99.0	2019-02-05 18:33:02 +00:00
Neil Johnson	6585ef4799	Neilj/1711faq (#4572) ... MSC1711 certificates FAQ	2019-02-05 17:19:28 +00:00
Richard van der Hoff	40b35fb875	Enable ACME support in the docker image (#4566) ... Also: * Fix wrapping in docker readme * Clean up some docs on the docker image * a workaround for #4554	2019-02-05 13:42:21 +00:00
Andrew Morgan	627ecd358e	Filter user directory state query to a subset of state events (#4462) ... * Filter user directory state query to a subset of state events * Add changelog	2019-02-05 12:16:28 +00:00
Richard van der Hoff	3ef71a6ea0	Docker: only copy what we need to the build image (#4562) ... There are two reasons this is a good thing: * first, it means that you don't end up with stuff kicking around your working copy ending up in the build image by mistake (which can upset the pip install process) * second: it means that the docker image cache is more effective, and we can reuse docker images when iterating on the docker stuff.	2019-02-05 11:44:40 +00:00
Richard van der Hoff	bf1e4d96ad	Fix default ACME config for py2 (#4564) ... Fixes #4559	2019-02-05 11:37:33 +00:00
Richard van der Hoff	9a75c0b52e	switch docker image to py3 by default (#4558) ... Switch the matrixdotorg/synapse:latest Docker image to use python 3	2019-02-05 11:33:26 +00:00
Richard van der Hoff	d7e27a1f08	fix typo in config comments (#4557)	2019-02-05 11:32:45 +00:00
Andrew Morgan	bcc78bb0b8	Merge branch 'release-v0.99.0' of github.com:matrix-org/synapse into anoa/acme_docs	2019-02-01 15:57:32 +00:00
Richard van der Hoff	30fd2f89db	0.99.0rc4	2019-02-01 15:52:28 +00:00
Andrew Morgan	c5fc09322c	Add changelog	2019-02-01 15:05:10 +00:00
Richard van der Hoff	ef43a03fc5	Merge pull request #4546 from matrix-org/rav/silence_critical_error_from_federation ... Fix noisy "twisted.internet.task.TaskStopped" errors in logs	2019-02-01 14:37:22 +00:00
Richard van der Hoff	f8db967d5a	Merge remote-tracking branch 'origin/release-v0.99.0' into develop	2019-02-01 13:20:15 +00:00
Richard van der Hoff	9763a73af0	Merge branch 'release-v0.99.0' into develop	2019-02-01 12:30:22 +00:00