Skip to content

Instantly share code, notes, and snippets.

@hrj

hrj/notes.md

Last active July 7, 2016 09:42
Show Gist options
  • Save hrj/3e8b830f2ddcac2ac9f335aafd7da2f1 to your computer and use it in GitHub Desktop.
Save hrj/3e8b830f2ddcac2ac9f335aafd7da2f1 to your computer and use it in GitHub Desktop.
Download ZIP
Notes on setting up synapse federation behind a reverse proxy
Raw
notes.md
  • The certificate file used by the reverse proxy should be exactly the same as the one used by synapse. If you use the concatenated certificate chain on the reverse-proxy, it should be the same in synapse.
  • You need to generate and give Diffie Hellman parameters to the reverse proxy. This ensures that the cipher suites required by matrix are available in the reverse proxy.
  • Matrix servers use the 8448 port to talk with each other by default.
  • Either you need to expose this port (8448) in the firewall, or you need to add a SRV record in the DNS pointing to port 443 (https port).
  • This tool can help diagnose problems.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment