push to 1.127.1

.gitea/workflows/container.yaml

@@ -0,0 +1,12 @@
+name: Build Multiarch Container Image
+on: [push]
+jobs:
+  call-reusable-workflow:
+    uses: container/multiarch-build-workflow/.gitea/workflows/build.yaml@main
+    with:
+      repository: ${{ gitea.repository }}
+      ref_name: ${{ gitea.ref_name }}
+      sha: ${{ gitea.sha }}
+      registry_url: ${{ secrets.REGISTRY_URL }}
+      registry_user: ${{ secrets.REGISTRY_USER }}
+      registry_pw: ${{ secrets.REGISTRY_PW }}

.woodpecker.yml

@@ -1,11 +0,0 @@
-pipeline:
-  publish-docker-image:
-    image: plugins/kaniko
-    settings:
-      repo: docker.io/thallian/matrix-synapse
-      tags: latest,${CI_COMMIT_SHA:0:8},${CI_COMMIT_TAG=pre}
-      dockerfile: Dockerfile
-      username:
-        from_secret: DOCKER_USER
-      password:
-        from_secret: DOCKER_PW

Containerfile

@@ -1,21 +1,30 @@
-FROM docker.io/alpine:3.17 AS builder
+FROM docker.io/alpine:3.21 AS builder
-
-ENV VERSION=v1.77.0
 
 RUN apk add --no-cache \
   alpine-sdk \
   python3-dev \
   py3-pip \
-	py3-wheel \
+  py3-wheel \
   libffi-dev \
   openssl-dev \
   zlib-dev \
   jpeg-dev \
-  rust
+  rust \
+  cargo \
+  poetry \
+  git
 
-RUN pip3 install --target="/install" matrix-synapse==$VERSION
+ENV VERSION=v1.127.1
+RUN git clone https://github.com/element-hq/synapse.git
+WORKDIR /synapse
+RUN git checkout $VERSION
 
-FROM docker.io/thallian/confd-env:3.17-3.1.3.0
+RUN poetry export -o /synapse/requirements.txt
+RUN pip3 install --target="/install" -r /synapse/requirements.txt
+RUN pip3 install --target="/install" --no-deps --no-warn-script-location /synapse[all];
+
+
+FROM docker.io/thallian/confd-env:3.21-3.2.0.2
 
 RUN addgroup -g 2222 matrix-synapse
 RUN adduser -h /var/lib/matrix-synapse -u 2222 -D -G matrix-synapse matrix-synapse
@@ -24,6 +33,7 @@ RUN apk add --no-cache \
   python3 \
   py3-psycopg2 \
   py3-authlib \
+  py3-asn1 \
   libffi \
   openssl \
   zlib \

rootfs/etc/confd/templates/server.yaml.tmpl

@@ -306,7 +306,9 @@ listeners:
     resources:
       - names: [client, federation]
         compress: false
-
+  - port: 9000
+    type: metrics
+    bind_addresses: ['::']
     # example additional_resources:
     #
     #additional_resources:
@@ -1139,7 +1141,7 @@ oembed:
 # Defaults to "https://www.recaptcha.net/recaptcha/api/siteverify".
 #
 #recaptcha_siteverify_api: "https://my.recaptcha.site"
-
+enable_authenticated_media: true
 
 ## TURN ##
 
@@ -1432,7 +1434,7 @@ account_threepid_delegates:
 
 # Enable collection and rendering of performance metrics
 #
-enable_metrics: false
+enable_metrics: true
 
 # Enable sentry integration
 # NOTE: While attempts are made to ensure that the logs don't contain