Skip to main content

Homeserver for the Matrix decentralised comms protocol

Project description

Synapse is an open-source Matrix homeserver written and maintained by the Matrix.org Foundation. We began rapid development in 2014, reaching v1.0.0 in 2019. Development on Synapse and the Matrix protocol itself continues in earnest today.

Briefly, Matrix is an open standard for communications on the internet, supporting federation, encryption and VoIP. Matrix.org has more to say about the goals of the Matrix project, and the formal specification describes the technical details.

Installing and configuration

The Synapse documentation describes how to install Synapse. We recommend using Docker images or Debian packages from Matrix.org.

Synapse has a variety of config options which can be used to customise its behaviour after installation. There are additional details on how to configure Synapse for federation here.

Using a reverse proxy with Synapse

It is recommended to put a reverse proxy such as nginx, Apache, Caddy, HAProxy or relayd in front of Synapse. One advantage of doing so is that it means that you can expose the default https port (443) to Matrix clients without needing to run Synapse with root privileges. For information on configuring one, see the reverse proxy docs.

Upgrading an existing Synapse

The instructions for upgrading Synapse are in the upgrade notes. Please check these instructions as upgrading may require extra steps for some versions of Synapse.

Platform dependencies

Synapse uses a number of platform dependencies such as Python and PostgreSQL, and aims to follow supported upstream versions. See the deprecation policy for more details.

Security note

Matrix serves raw, user-supplied data in some APIs – specifically the content repository endpoints.

Whilst we make a reasonable effort to mitigate against XSS attacks (for instance, by using CSP), a Matrix homeserver should not be hosted on a domain hosting other web applications. This especially applies to sharing the domain with Matrix web clients and other sensitive applications like webmail. See https://developer.github.com/changes/2014-04-25-user-content-security for more information.

Ideally, the homeserver should not simply be on a different subdomain, but on a completely different registered domain (also known as top-level site or eTLD+1). This is because some attacks are still possible as long as the two applications share the same registered domain.

To illustrate this with an example, if your Element Web or other sensitive web application is hosted on A.example1.com, you should ideally host Synapse on example2.com. Some amount of protection is offered by hosting on B.example1.com instead, so this is also acceptable in some scenarios. However, you should not host your Synapse on A.example1.com.

Note that all of the above refers exclusively to the domain used in Synapse’s public_baseurl setting. In particular, it has no bearing on the domain mentioned in MXIDs hosted on that server.

Following this advice ensures that even if an XSS is found in Synapse, the impact to other applications will be minimal.

Testing a new installation

The easiest way to try out your new Synapse installation is by connecting to it from a web client.

Unless you are running a test instance of Synapse on your local machine, in general, you will need to enable TLS support before you can successfully connect from a client: see TLS certificates.

An easy way to get started is to login or register via Element at https://app.element.io/#/login or https://app.element.io/#/register respectively. You will need to change the server you are logging into from matrix.org and instead specify a Homeserver URL of https://<server_name>:8448 (or just https://<server_name> if you are using a reverse proxy). If you prefer to use another client, refer to our client breakdown.

If all goes well you should at least be able to log in, create a room, and start sending messages.

Registering a new user from a client

By default, registration of new users via Matrix clients is disabled. To enable it:

  1. In the registration config section set enable_registration: true in homeserver.yaml.

  2. Then either:

    1. set up a CAPTCHA, or

    2. set enable_registration_without_verification: true in homeserver.yaml.

We strongly recommend using a CAPTCHA, particularly if your homeserver is exposed to the public internet. Without it, anyone can freely register accounts on your homeserver. This can be exploited by attackers to create spambots targetting the rest of the Matrix federation.

Your new user name will be formed partly from the server_name, and partly from a localpart you specify when you create the account. Your name will take the form of:

@localpart:my.domain.name

(pronounced “at localpart on my dot domain dot name”).

As when logging in, you will need to specify a “Custom server”. Specify your desired localpart in the ‘User name’ box.

Troubleshooting and support

The Admin FAQ includes tips on dealing with some common problems. For more details, see Synapse’s wider documentation.

For additional support installing or managing Synapse, please ask in the community support room #synapse:matrix.org (from a matrix.org account if necessary). We do not use GitHub issues for support requests, only for bug reports and feature requests.

Identity Servers

Identity servers have the job of mapping email addresses and other 3rd Party IDs (3PIDs) to Matrix user IDs, as well as verifying the ownership of 3PIDs before creating that mapping.

They are not where accounts or credentials are stored - these live on home servers. Identity Servers are just for mapping 3rd party IDs to matrix IDs.

This process is very security-sensitive, as there is obvious risk of spam if it is too easy to sign up for Matrix accounts or harvest 3PID data. In the longer term, we hope to create a decentralised system to manage it (matrix-doc #712), but in the meantime, the role of managing trusted identity in the Matrix ecosystem is farmed out to a cluster of known trusted ecosystem partners, who run ‘Matrix Identity Servers’ such as Sydent, whose role is purely to authenticate and track 3PID logins and publish end-user public keys.

You can host your own copy of Sydent, but this will prevent you reaching other users in the Matrix ecosystem via their email address, and prevent them finding you. We therefore recommend that you use one of the centralised identity servers at https://matrix.org or https://vector.im for now.

To reiterate: the Identity server will only be used if you choose to associate an email address with your account, or send an invite to another user via their email address.

Development

We welcome contributions to Synapse from the community! The best place to get started is our guide for contributors. This is part of our larger documentation, which includes

information for Synapse developers as well as Synapse administrators. Developers might be particularly interested in:

Alongside all that, join our developer community on Matrix: #synapse-dev:matrix.org, featuring real humans!

Project details


Release history Release notifications | RSS feed

Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

matrix_synapse-1.105.0rc1.tar.gz (3.4 MB view details)

Uploaded Source

Built Distributions

matrix_synapse-1.105.0rc1-pp310-pypy310_pp73-manylinux_2_17_i686.manylinux_2_5_i686.manylinux1_i686.manylinux2014_i686.whl (3.8 MB view details)

Uploaded PyPy manylinux: glibc 2.17+ i686 manylinux: glibc 2.5+ i686

matrix_synapse-1.105.0rc1-pp310-pypy310_pp73-macosx_11_0_x86_64.whl (3.6 MB view details)

Uploaded PyPy macOS 11.0+ x86-64

matrix_synapse-1.105.0rc1-pp39-pypy39_pp73-manylinux_2_17_i686.manylinux_2_5_i686.manylinux1_i686.manylinux2014_i686.whl (3.8 MB view details)

Uploaded PyPy manylinux: glibc 2.17+ i686 manylinux: glibc 2.5+ i686

matrix_synapse-1.105.0rc1-pp39-pypy39_pp73-macosx_11_0_x86_64.whl (3.6 MB view details)

Uploaded PyPy macOS 11.0+ x86-64

matrix_synapse-1.105.0rc1-pp38-pypy38_pp73-manylinux_2_17_i686.manylinux_2_5_i686.manylinux1_i686.manylinux2014_i686.whl (3.8 MB view details)

Uploaded PyPy manylinux: glibc 2.17+ i686 manylinux: glibc 2.5+ i686

matrix_synapse-1.105.0rc1-pp38-pypy38_pp73-macosx_11_0_x86_64.whl (3.6 MB view details)

Uploaded PyPy macOS 11.0+ x86-64

matrix_synapse-1.105.0rc1-cp38-abi3-musllinux_1_1_x86_64.whl (3.8 MB view details)

Uploaded CPython 3.8+ musllinux: musl 1.1+ x86-64

matrix_synapse-1.105.0rc1-cp38-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl (3.8 MB view details)

Uploaded CPython 3.8+ manylinux: glibc 2.17+ x86-64

matrix_synapse-1.105.0rc1-cp38-abi3-manylinux_2_17_i686.manylinux_2_5_i686.manylinux1_i686.manylinux2014_i686.whl (3.8 MB view details)

Uploaded CPython 3.8+ manylinux: glibc 2.17+ i686 manylinux: glibc 2.5+ i686

matrix_synapse-1.105.0rc1-cp38-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl (3.8 MB view details)

Uploaded CPython 3.8+ manylinux: glibc 2.17+ ARM64

matrix_synapse-1.105.0rc1-cp38-abi3-macosx_10_16_x86_64.whl (3.6 MB view details)

Uploaded CPython 3.8+ macOS 10.16+ x86-64

File details

Details for the file matrix_synapse-1.105.0rc1.tar.gz.

File metadata

  • Download URL: matrix_synapse-1.105.0rc1.tar.gz
  • Upload date:
  • Size: 3.4 MB
  • Tags: Source
  • Uploaded using Trusted Publishing? No
  • Uploaded via: twine/4.0.2 CPython/3.10.12

File hashes

Hashes for matrix_synapse-1.105.0rc1.tar.gz
Algorithm Hash digest
SHA256 9068800cd0035febcd134d1aedc0f31315628bf7fc98747faa36da478ef53920
MD5 19758e33be1915cc10364e0f8b33f13a
BLAKE2b-256 cc117b0208023b69ffb80579c4939275751a4407f4f961d5bebd593c60c822b6

See more details on using hashes here.

Provenance

File details

Details for the file matrix_synapse-1.105.0rc1-pp310-pypy310_pp73-manylinux_2_17_x86_64.manylinux2014_x86_64.whl.

File metadata

File hashes

Hashes for matrix_synapse-1.105.0rc1-pp310-pypy310_pp73-manylinux_2_17_x86_64.manylinux2014_x86_64.whl
Algorithm Hash digest
SHA256 90f7b230e9f870224e857934bec7d101dee0ff85f95ea50f59e8972d834a4c88
MD5 6f1267067a4bc88f32405c1ba53532d8
BLAKE2b-256 8c17cb9fe9539bc10f3b9070ad006fe8cc84bc73ab213aa386e26fc7c66f94fa

See more details on using hashes here.

Provenance

File details

Details for the file matrix_synapse-1.105.0rc1-pp310-pypy310_pp73-manylinux_2_17_i686.manylinux_2_5_i686.manylinux1_i686.manylinux2014_i686.whl.

File metadata

File hashes

Hashes for matrix_synapse-1.105.0rc1-pp310-pypy310_pp73-manylinux_2_17_i686.manylinux_2_5_i686.manylinux1_i686.manylinux2014_i686.whl
Algorithm Hash digest
SHA256 c4d582625df85d27ac7118154d3c04f8815d9f3d3c73d04f198ff72f1036ebdd
MD5 2ed66215e579a30e6a45624741f71707
BLAKE2b-256 5e8c2342e0144bab08ffb4b599464409e2a30702a03c39fb46e6269b5c5084d2

See more details on using hashes here.

Provenance

File details

Details for the file matrix_synapse-1.105.0rc1-pp310-pypy310_pp73-macosx_11_0_x86_64.whl.

File metadata

File hashes

Hashes for matrix_synapse-1.105.0rc1-pp310-pypy310_pp73-macosx_11_0_x86_64.whl
Algorithm Hash digest
SHA256 b53275f6f20e95adaf7c0591928dcc91258db081a20879bbe37013232ea9413c
MD5 5fdcff81a8ba3b16791b871201b9d574
BLAKE2b-256 8ce1bce8cd6e971970c8973b3df99bedb0bb7ab6d9974c4a45e3476085af8eb0

See more details on using hashes here.

Provenance

File details

Details for the file matrix_synapse-1.105.0rc1-pp39-pypy39_pp73-manylinux_2_17_x86_64.manylinux2014_x86_64.whl.

File metadata

File hashes

Hashes for matrix_synapse-1.105.0rc1-pp39-pypy39_pp73-manylinux_2_17_x86_64.manylinux2014_x86_64.whl
Algorithm Hash digest
SHA256 76b9eef7c7cbb06b3ccf4f9b396b129ec6d365defd264a43821fdb0d9980445d
MD5 a539d04696889880634b0945e6d3fabe
BLAKE2b-256 5ae15544aacc16e996ed99f46cd0702951a81eb10f5028bb21795a1055c9262c

See more details on using hashes here.

Provenance

File details

Details for the file matrix_synapse-1.105.0rc1-pp39-pypy39_pp73-manylinux_2_17_i686.manylinux_2_5_i686.manylinux1_i686.manylinux2014_i686.whl.

File metadata

File hashes

Hashes for matrix_synapse-1.105.0rc1-pp39-pypy39_pp73-manylinux_2_17_i686.manylinux_2_5_i686.manylinux1_i686.manylinux2014_i686.whl
Algorithm Hash digest
SHA256 4b09a456fc324098e47ab98a1a8ab6b0184c4cda85c3906c11b5335f299d9752
MD5 3d4d2cd06b5009a27d36da28d3e97536
BLAKE2b-256 970e4f138e2248ebb74251a44e659bbc218c3f416be43bf05abe72f9f613fe0b

See more details on using hashes here.

Provenance

File details

Details for the file matrix_synapse-1.105.0rc1-pp39-pypy39_pp73-macosx_11_0_x86_64.whl.

File metadata

File hashes

Hashes for matrix_synapse-1.105.0rc1-pp39-pypy39_pp73-macosx_11_0_x86_64.whl
Algorithm Hash digest
SHA256 81fbc1af9a2217c08e15be800008464b1b7207858411cab7a4ecc2cad90fd053
MD5 f52bf4ef01a09397d13fbd93c70fb15e
BLAKE2b-256 8745499f04eec96103a08b624506d185db2260a12f097673a7905076b4e27882

See more details on using hashes here.

Provenance

File details

Details for the file matrix_synapse-1.105.0rc1-pp38-pypy38_pp73-manylinux_2_17_x86_64.manylinux2014_x86_64.whl.

File metadata

File hashes

Hashes for matrix_synapse-1.105.0rc1-pp38-pypy38_pp73-manylinux_2_17_x86_64.manylinux2014_x86_64.whl
Algorithm Hash digest
SHA256 6757591c877c935acf4a8e8513505c0b041342d36057470918813da71935be40
MD5 a285f924644cf52f7369dc5fb04161da
BLAKE2b-256 d51e0625a7dc342119bacf3aa6da4a314fac0a2b3ca33863d321e430d7d2c798

See more details on using hashes here.

Provenance

File details

Details for the file matrix_synapse-1.105.0rc1-pp38-pypy38_pp73-manylinux_2_17_i686.manylinux_2_5_i686.manylinux1_i686.manylinux2014_i686.whl.

File metadata

File hashes

Hashes for matrix_synapse-1.105.0rc1-pp38-pypy38_pp73-manylinux_2_17_i686.manylinux_2_5_i686.manylinux1_i686.manylinux2014_i686.whl
Algorithm Hash digest
SHA256 b0185fae2e7225ddf3f5550e28c36d547fc8845beb0e63b8a3b5c9881b0e3964
MD5 0b4b6deb7f27de86cf13d0560fe21f6c
BLAKE2b-256 87714659699bf39e76d8a5f87247c1cc04c3f41df0cadc1a48e626234349912f

See more details on using hashes here.

Provenance

File details

Details for the file matrix_synapse-1.105.0rc1-pp38-pypy38_pp73-macosx_11_0_x86_64.whl.

File metadata

File hashes

Hashes for matrix_synapse-1.105.0rc1-pp38-pypy38_pp73-macosx_11_0_x86_64.whl
Algorithm Hash digest
SHA256 368b9a4fb8c77ece988949d4ee5730c6989a057459cc2600d0598d2265fc290d
MD5 5fa66ac126c71f798f647d870121202b
BLAKE2b-256 ebd744a196c80b73f62a991ef4c8aaf5191ecc986eea1aea8480c62b1b7d3abe

See more details on using hashes here.

Provenance

File details

Details for the file matrix_synapse-1.105.0rc1-cp38-abi3-musllinux_1_1_x86_64.whl.

File metadata

File hashes

Hashes for matrix_synapse-1.105.0rc1-cp38-abi3-musllinux_1_1_x86_64.whl
Algorithm Hash digest
SHA256 c5a0b93fb881e1af0639602a14f555b49e67e32d1c0f410e43790bc3c6271cab
MD5 059bb85588087d7f5b4b41dd77adb4b7
BLAKE2b-256 b2d4652636665cdd62a8d3a48ba393dcd1f1471b9cd4264ad368e155b04213c5

See more details on using hashes here.

Provenance

File details

Details for the file matrix_synapse-1.105.0rc1-cp38-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl.

File metadata

File hashes

Hashes for matrix_synapse-1.105.0rc1-cp38-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl
Algorithm Hash digest
SHA256 8337ecd3fb2d0eaf0c1d67b50e5cc9a9b4adc404ad093b19b442a902a21803c9
MD5 6309498ea815e9855e74dea0c449a0c4
BLAKE2b-256 d51a35f578d7261048d61aa056d9e0a47fd5daaefdfdfd04727a1aabc37f462e

See more details on using hashes here.

Provenance

File details

Details for the file matrix_synapse-1.105.0rc1-cp38-abi3-manylinux_2_17_i686.manylinux_2_5_i686.manylinux1_i686.manylinux2014_i686.whl.

File metadata

File hashes

Hashes for matrix_synapse-1.105.0rc1-cp38-abi3-manylinux_2_17_i686.manylinux_2_5_i686.manylinux1_i686.manylinux2014_i686.whl
Algorithm Hash digest
SHA256 c3e8d96685ab2d6d725c4b01972f93544307b9a89186ea1d22c0787b0d8677e0
MD5 16fc7e8b95182527f92b6e47198b46b9
BLAKE2b-256 bb85f394171164b4eea356c95c9e1624f811ae000763326cdaca248b930ea4f6

See more details on using hashes here.

Provenance

File details

Details for the file matrix_synapse-1.105.0rc1-cp38-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl.

File metadata

File hashes

Hashes for matrix_synapse-1.105.0rc1-cp38-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl
Algorithm Hash digest
SHA256 13a4a7cf620ca2c7bfeb149fa90847dde08d7fea78c24e572538a30022461cb8
MD5 2ba29039bcc1c30aa0d1190e16bec274
BLAKE2b-256 2d77d6d5aa7a7d3e530b990489d492477dd97856823466818a8b5c197b750a9e

See more details on using hashes here.

Provenance

File details

Details for the file matrix_synapse-1.105.0rc1-cp38-abi3-macosx_10_16_x86_64.whl.

File metadata

File hashes

Hashes for matrix_synapse-1.105.0rc1-cp38-abi3-macosx_10_16_x86_64.whl
Algorithm Hash digest
SHA256 640dacd239a2fe528a8c0ddbcfbf2792082affa105747a95548d779223291f5c
MD5 4fe5d1d18df799ffef54e79bd2091cf3
BLAKE2b-256 73807a2a8fd5b5e3f8f1347e7abf096434a0d49729238f4ada1ee58139a4e833

See more details on using hashes here.

Provenance

Supported by

AWS AWS Cloud computing and Security Sponsor Datadog Datadog Monitoring Fastly Fastly CDN Google Google Download Analytics Microsoft Microsoft PSF Sponsor Pingdom Pingdom Monitoring Sentry Sentry Error logging StatusPage StatusPage Status page