push to 1.127.1

.gitea/workflows/container.yaml

@@ -0,0 +1,12 @@
+name: Build Multiarch Container Image
+on: [push]
+jobs:
+  call-reusable-workflow:
+    uses: container/multiarch-build-workflow/.gitea/workflows/build.yaml@main
+    with:
+      repository: ${{ gitea.repository }}
+      ref_name: ${{ gitea.ref_name }}
+      sha: ${{ gitea.sha }}
+      registry_url: ${{ secrets.REGISTRY_URL }}
+      registry_user: ${{ secrets.REGISTRY_USER }}
+      registry_pw: ${{ secrets.REGISTRY_PW }}

.gitlab-ci.yml

@@ -1,18 +0,0 @@
-variables:
-  CONTAINER_NAME: thallian/matrix-synapse
-
-build:
-  stage: build
-  image:
-    name: gcr.io/kaniko-project/executor:debug
-    entrypoint: [""]
-  script:
-    - mkdir -p /kaniko/.docker
-    - echo "{\"auths\":{\"$CI_REGISTRY\":{\"auth\":\"$(printf "%s:%s" "$CI_REGISTRY_USER" "$CI_REGISTRY_PASSWORD" | base64 | tr -d '\n')\"}}}" > /kaniko/.docker/config.json
-    - >-
-      /kaniko/executor
-      --context "$CI_PROJECT_DIR"
-      --dockerfile "$CI_PROJECT_DIR/Dockerfile"
-      --destination "$CONTAINER_NAME:$CI_COMMIT_SHA"
-      --destination "$CONTAINER_NAME:$CI_COMMIT_REF_NAME"
-      --destination "$CONTAINER_NAME:latest"

Containerfile

@@ -0,0 +1,50 @@
+FROM docker.io/alpine:3.21 AS builder
+
+RUN apk add --no-cache \
+  alpine-sdk \
+  python3-dev \
+  py3-pip \
+  py3-wheel \
+  libffi-dev \
+  openssl-dev \
+  zlib-dev \
+  jpeg-dev \
+  rust \
+  cargo \
+  poetry \
+  git
+
+ENV VERSION=v1.127.1
+RUN git clone https://github.com/element-hq/synapse.git
+WORKDIR /synapse
+RUN git checkout $VERSION
+
+RUN poetry export -o /synapse/requirements.txt
+RUN pip3 install --target="/install" -r /synapse/requirements.txt
+RUN pip3 install --target="/install" --no-deps --no-warn-script-location /synapse[all];
+
+
+FROM docker.io/thallian/confd-env:3.21-3.2.0.2
+
+RUN addgroup -g 2222 matrix-synapse
+RUN adduser -h /var/lib/matrix-synapse -u 2222 -D -G matrix-synapse matrix-synapse
+
+RUN apk add --no-cache \
+  python3 \
+  py3-psycopg2 \
+  py3-authlib \
+  py3-asn1 \
+  libffi \
+  openssl \
+  zlib \
+  jpeg
+
+ENV PYTHONPATH=$PYTHONPATH:/py-pkgs
+COPY --from=builder /install /py-pkgs
+
+ADD /rootfs /
+
+RUN chown -R matrix-synapse:matrix-synapse /var/lib/matrix-synapse
+ENV HOME /var/lib/matrix-synapse
+
+VOLUME /var/lib/matrix-synapse/media_store/ /var/lib/matrix-synapse/signing/ /etc/ssl/matrix-synapse/ /var/lib/matrix-synapse/registrations/

Dockerfile

@@ -1,40 +0,0 @@
-FROM docker.io/alpine:3.16 AS builder
-
-ENV VERSION=v1.65.0
-
-RUN apk add --no-cache \
-    alpine-sdk \
-    python3-dev \
-    py3-pip \
-	py3-wheel \
-    libffi-dev \
-    openssl-dev \
-    zlib-dev \
-    jpeg-dev \
-    rust
-
-RUN pip3 install --target="/install" matrix-synapse==$VERSION
-
-FROM docker.io/thallian/confd-env:3.16
-
-RUN addgroup -g 2222 matrix-synapse
-RUN adduser -h /var/lib/matrix-synapse -u 2222 -D -G matrix-synapse matrix-synapse
-
-RUN apk add --no-cache \
-    python3 \
-    py3-psycopg2 \
-    py3-authlib \
-    libffi \
-    openssl \
-    zlib \
-    jpeg
-
-ENV PYTHONPATH=$PYTHONPATH:/py-pkgs
-COPY --from=builder /install /py-pkgs
-
-ADD /rootfs /
-
-RUN chown -R matrix-synapse:matrix-synapse /var/lib/matrix-synapse
-ENV HOME /var/lib/matrix-synapse
-
-VOLUME /var/lib/matrix-synapse/media_store/ /var/lib/matrix-synapse/signing/ /etc/ssl/matrix-synapse/ /var/lib/matrix-synapse/registrations/

rootfs/etc/confd/templates/server.yaml.tmpl

@@ -301,12 +301,14 @@ listeners:
     tls: false
     type: http
     x_forwarded: true
-    bind_addresses: ['0.0.0.0']
+    bind_addresses: ['::']
 
     resources:
       - names: [client, federation]
         compress: false
-
+  - port: 9000
+    type: metrics
+    bind_addresses: ['::']
     # example additional_resources:
     #
     #additional_resources:
@@ -1139,7 +1141,7 @@ oembed:
 # Defaults to "https://www.recaptcha.net/recaptcha/api/siteverify".
 #
 #recaptcha_siteverify_api: "https://my.recaptcha.site"
-
+enable_authenticated_media: true
 
 ## TURN ##
 
@@ -1432,7 +1434,7 @@ account_threepid_delegates:
 
 # Enable collection and rendering of performance metrics
 #
-enable_metrics: false
+enable_metrics: true
 
 # Enable sentry integration
 # NOTE: While attempts are made to ensure that the logs don't contain
@@ -1515,7 +1517,7 @@ room_prejoin_state:
 app_service_config_files: {{if not (getenv "REGISTRATIONS")}}[]{{end}}
 {{- if (getenv "REGISTRATIONS")}}
 {{- range $registration := split (getenv "REGISTRATIONS") ";"}}
-    - {{ $registration -}}
+    - registrations/{{ $registration -}}
 {{end}}
 {{end}}