Skip to main content

Homeserver for the Matrix decentralised comms protocol

Project description

Synapse is an open-source Matrix homeserver written and maintained by the Matrix.org Foundation. We began rapid development in 2014, reaching v1.0.0 in 2019. Development on Synapse and the Matrix protocol itself continues in earnest today.

Briefly, Matrix is an open standard for communications on the internet, supporting federation, encryption and VoIP. Matrix.org has more to say about the goals of the Matrix project, and the formal specification describes the technical details.

Installing and configuration

The Synapse documentation describes how to install Synapse. We recommend using Docker images or Debian packages from Matrix.org.

Synapse has a variety of config options which can be used to customise its behaviour after installation. There are additional details on how to configure Synapse for federation here.

Using a reverse proxy with Synapse

It is recommended to put a reverse proxy such as nginx, Apache, Caddy, HAProxy or relayd in front of Synapse. One advantage of doing so is that it means that you can expose the default https port (443) to Matrix clients without needing to run Synapse with root privileges. For information on configuring one, see the reverse proxy docs.

Upgrading an existing Synapse

The instructions for upgrading Synapse are in the upgrade notes. Please check these instructions as upgrading may require extra steps for some versions of Synapse.

Platform dependencies

Synapse uses a number of platform dependencies such as Python and PostgreSQL, and aims to follow supported upstream versions. See the deprecation policy for more details.

Security note

Matrix serves raw, user-supplied data in some APIs – specifically the content repository endpoints.

Whilst we make a reasonable effort to mitigate against XSS attacks (for instance, by using CSP), a Matrix homeserver should not be hosted on a domain hosting other web applications. This especially applies to sharing the domain with Matrix web clients and other sensitive applications like webmail. See https://developer.github.com/changes/2014-04-25-user-content-security for more information.

Ideally, the homeserver should not simply be on a different subdomain, but on a completely different registered domain (also known as top-level site or eTLD+1). This is because some attacks are still possible as long as the two applications share the same registered domain.

To illustrate this with an example, if your Element Web or other sensitive web application is hosted on A.example1.com, you should ideally host Synapse on example2.com. Some amount of protection is offered by hosting on B.example1.com instead, so this is also acceptable in some scenarios. However, you should not host your Synapse on A.example1.com.

Note that all of the above refers exclusively to the domain used in Synapse’s public_baseurl setting. In particular, it has no bearing on the domain mentioned in MXIDs hosted on that server.

Following this advice ensures that even if an XSS is found in Synapse, the impact to other applications will be minimal.

Testing a new installation

The easiest way to try out your new Synapse installation is by connecting to it from a web client.

Unless you are running a test instance of Synapse on your local machine, in general, you will need to enable TLS support before you can successfully connect from a client: see TLS certificates.

An easy way to get started is to login or register via Element at https://app.element.io/#/login or https://app.element.io/#/register respectively. You will need to change the server you are logging into from matrix.org and instead specify a Homeserver URL of https://<server_name>:8448 (or just https://<server_name> if you are using a reverse proxy). If you prefer to use another client, refer to our client breakdown.

If all goes well you should at least be able to log in, create a room, and start sending messages.

Registering a new user from a client

By default, registration of new users via Matrix clients is disabled. To enable it:

  1. In the registration config section set enable_registration: true in homeserver.yaml.

  2. Then either:

    1. set up a CAPTCHA, or

    2. set enable_registration_without_verification: true in homeserver.yaml.

We strongly recommend using a CAPTCHA, particularly if your homeserver is exposed to the public internet. Without it, anyone can freely register accounts on your homeserver. This can be exploited by attackers to create spambots targetting the rest of the Matrix federation.

Your new user name will be formed partly from the server_name, and partly from a localpart you specify when you create the account. Your name will take the form of:

@localpart:my.domain.name

(pronounced “at localpart on my dot domain dot name”).

As when logging in, you will need to specify a “Custom server”. Specify your desired localpart in the ‘User name’ box.

Troubleshooting and support

The Admin FAQ includes tips on dealing with some common problems. For more details, see Synapse’s wider documentation.

For additional support installing or managing Synapse, please ask in the community support room #synapse:matrix.org (from a matrix.org account if necessary). We do not use GitHub issues for support requests, only for bug reports and feature requests.

Identity Servers

Identity servers have the job of mapping email addresses and other 3rd Party IDs (3PIDs) to Matrix user IDs, as well as verifying the ownership of 3PIDs before creating that mapping.

They are not where accounts or credentials are stored - these live on home servers. Identity Servers are just for mapping 3rd party IDs to matrix IDs.

This process is very security-sensitive, as there is obvious risk of spam if it is too easy to sign up for Matrix accounts or harvest 3PID data. In the longer term, we hope to create a decentralised system to manage it (matrix-doc #712), but in the meantime, the role of managing trusted identity in the Matrix ecosystem is farmed out to a cluster of known trusted ecosystem partners, who run ‘Matrix Identity Servers’ such as Sydent, whose role is purely to authenticate and track 3PID logins and publish end-user public keys.

You can host your own copy of Sydent, but this will prevent you reaching other users in the Matrix ecosystem via their email address, and prevent them finding you. We therefore recommend that you use one of the centralised identity servers at https://matrix.org or https://vector.im for now.

To reiterate: the Identity server will only be used if you choose to associate an email address with your account, or send an invite to another user via their email address.

Development

We welcome contributions to Synapse from the community! The best place to get started is our guide for contributors. This is part of our larger documentation, which includes

information for Synapse developers as well as Synapse administrators. Developers might be particularly interested in:

Alongside all that, join our developer community on Matrix: #synapse-dev:matrix.org, featuring real humans!

Project details


Release history Release notifications | RSS feed

Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

matrix_synapse-1.109.0rc2.tar.gz (3.4 MB view details)

Uploaded Source

Built Distributions

matrix_synapse-1.109.0rc2-pp310-pypy310_pp73-manylinux_2_17_i686.manylinux_2_5_i686.manylinux1_i686.manylinux2014_i686.whl (4.0 MB view details)

Uploaded PyPy manylinux: glibc 2.17+ i686 manylinux: glibc 2.5+ i686

matrix_synapse-1.109.0rc2-pp310-pypy310_pp73-macosx_11_0_x86_64.whl (3.8 MB view details)

Uploaded PyPy macOS 11.0+ x86-64

matrix_synapse-1.109.0rc2-pp39-pypy39_pp73-manylinux_2_17_i686.manylinux_2_5_i686.manylinux1_i686.manylinux2014_i686.whl (4.0 MB view details)

Uploaded PyPy manylinux: glibc 2.17+ i686 manylinux: glibc 2.5+ i686

matrix_synapse-1.109.0rc2-pp39-pypy39_pp73-macosx_11_0_x86_64.whl (3.8 MB view details)

Uploaded PyPy macOS 11.0+ x86-64

matrix_synapse-1.109.0rc2-pp38-pypy38_pp73-manylinux_2_17_i686.manylinux_2_5_i686.manylinux1_i686.manylinux2014_i686.whl (4.0 MB view details)

Uploaded PyPy manylinux: glibc 2.17+ i686 manylinux: glibc 2.5+ i686

matrix_synapse-1.109.0rc2-pp38-pypy38_pp73-macosx_11_0_x86_64.whl (3.8 MB view details)

Uploaded PyPy macOS 11.0+ x86-64

matrix_synapse-1.109.0rc2-cp38-abi3-musllinux_1_1_x86_64.whl (4.0 MB view details)

Uploaded CPython 3.8+ musllinux: musl 1.1+ x86-64

matrix_synapse-1.109.0rc2-cp38-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl (4.0 MB view details)

Uploaded CPython 3.8+ manylinux: glibc 2.17+ x86-64

matrix_synapse-1.109.0rc2-cp38-abi3-manylinux_2_17_i686.manylinux_2_5_i686.manylinux1_i686.manylinux2014_i686.whl (4.0 MB view details)

Uploaded CPython 3.8+ manylinux: glibc 2.17+ i686 manylinux: glibc 2.5+ i686

matrix_synapse-1.109.0rc2-cp38-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl (4.0 MB view details)

Uploaded CPython 3.8+ manylinux: glibc 2.17+ ARM64

matrix_synapse-1.109.0rc2-cp38-abi3-macosx_10_16_x86_64.whl (3.8 MB view details)

Uploaded CPython 3.8+ macOS 10.16+ x86-64

File details

Details for the file matrix_synapse-1.109.0rc2.tar.gz.

File metadata

  • Download URL: matrix_synapse-1.109.0rc2.tar.gz
  • Upload date:
  • Size: 3.4 MB
  • Tags: Source
  • Uploaded using Trusted Publishing? No
  • Uploaded via: twine/5.1.0 CPython/3.12.3

File hashes

Hashes for matrix_synapse-1.109.0rc2.tar.gz
Algorithm Hash digest
SHA256 f60d228fa90b8c96a438043199ad9b3f6bd4578a5add9aa12b35cdffcd0a2313
MD5 0b45bb084d266f691bc4369eda33463a
BLAKE2b-256 0063f044dcc44b2dfa8630d8008cb1c9f45d3588a6cdc5acec11e3a04a710fd1

See more details on using hashes here.

Provenance

File details

Details for the file matrix_synapse-1.109.0rc2-pp310-pypy310_pp73-manylinux_2_17_x86_64.manylinux2014_x86_64.whl.

File metadata

File hashes

Hashes for matrix_synapse-1.109.0rc2-pp310-pypy310_pp73-manylinux_2_17_x86_64.manylinux2014_x86_64.whl
Algorithm Hash digest
SHA256 87bd0f1edbd86032bf3e834c9090e5c4e9531a8ba2a2d16f79eed68745f7914a
MD5 8c77dd10e94407a2fa92fc94dbf5d00b
BLAKE2b-256 30b6fe60b50a436b68eeea7cb3c08bfdc27a1accbf55a3b273d7ff3798e05084

See more details on using hashes here.

Provenance

File details

Details for the file matrix_synapse-1.109.0rc2-pp310-pypy310_pp73-manylinux_2_17_i686.manylinux_2_5_i686.manylinux1_i686.manylinux2014_i686.whl.

File metadata

File hashes

Hashes for matrix_synapse-1.109.0rc2-pp310-pypy310_pp73-manylinux_2_17_i686.manylinux_2_5_i686.manylinux1_i686.manylinux2014_i686.whl
Algorithm Hash digest
SHA256 510443c3abe3912af52e1598a551154f38d8d72f23a2086e0d58c35f302f51ac
MD5 61860ab343eff36f331823aeac68ad5e
BLAKE2b-256 f3dcf3c30a01a71a1b4fec19f9bb56a7b1f56ff089a760b4174936cb348b5df0

See more details on using hashes here.

Provenance

File details

Details for the file matrix_synapse-1.109.0rc2-pp310-pypy310_pp73-macosx_11_0_x86_64.whl.

File metadata

File hashes

Hashes for matrix_synapse-1.109.0rc2-pp310-pypy310_pp73-macosx_11_0_x86_64.whl
Algorithm Hash digest
SHA256 fb5afb45296b2245d58b12196a5f20af568735a5abd098ce6a5d9fa2c9373f07
MD5 0085709dd1fa3c44fbf29623cee411b4
BLAKE2b-256 f4d60435b819586d2d9c51335ebd94d2153d7583bb584faec1d8f81e2c59dbf3

See more details on using hashes here.

Provenance

File details

Details for the file matrix_synapse-1.109.0rc2-pp39-pypy39_pp73-manylinux_2_17_x86_64.manylinux2014_x86_64.whl.

File metadata

File hashes

Hashes for matrix_synapse-1.109.0rc2-pp39-pypy39_pp73-manylinux_2_17_x86_64.manylinux2014_x86_64.whl
Algorithm Hash digest
SHA256 d93f8e595c74709cf8532bb9de6d6343e10d3215f8dff61b066e1f2207c14958
MD5 a7dd54a5d6969e2749c1c3382f03f976
BLAKE2b-256 43343a932c6718b534311109ffbf02dbb87a1351c5e555262c861eb093122b8d

See more details on using hashes here.

Provenance

File details

Details for the file matrix_synapse-1.109.0rc2-pp39-pypy39_pp73-manylinux_2_17_i686.manylinux_2_5_i686.manylinux1_i686.manylinux2014_i686.whl.

File metadata

File hashes

Hashes for matrix_synapse-1.109.0rc2-pp39-pypy39_pp73-manylinux_2_17_i686.manylinux_2_5_i686.manylinux1_i686.manylinux2014_i686.whl
Algorithm Hash digest
SHA256 20aa7c8e750e44d72a9b81c02f6e17c3f990d7e2d64bf0f5ac2a5201b96acb68
MD5 f6c492dfa803cd6a38792ef5f5ae0d74
BLAKE2b-256 19f10016889c422030c781ab46e344b53481e48fc35ddb007161dec2593914a7

See more details on using hashes here.

Provenance

File details

Details for the file matrix_synapse-1.109.0rc2-pp39-pypy39_pp73-macosx_11_0_x86_64.whl.

File metadata

File hashes

Hashes for matrix_synapse-1.109.0rc2-pp39-pypy39_pp73-macosx_11_0_x86_64.whl
Algorithm Hash digest
SHA256 a86bce3ed8c85ee66a0248a410c6becdbbf097fd4efa5c740e01c4d306a312ca
MD5 ea11e93fa2929a3501d97ebc8f8ae4f6
BLAKE2b-256 f55e784dbf4bc76a0cd9eeff070ffce8c0b288602879a15f85c21ce26e5a480e

See more details on using hashes here.

Provenance

File details

Details for the file matrix_synapse-1.109.0rc2-pp38-pypy38_pp73-manylinux_2_17_x86_64.manylinux2014_x86_64.whl.

File metadata

File hashes

Hashes for matrix_synapse-1.109.0rc2-pp38-pypy38_pp73-manylinux_2_17_x86_64.manylinux2014_x86_64.whl
Algorithm Hash digest
SHA256 b679a90ba08bc5b9e2a0723f04ee486a294fed48d32c92dcbdf11fbf2a26d408
MD5 43820bb0cf611e32910f01dbd6ae03ed
BLAKE2b-256 3e28b9f390b40a8b70fa7b65d221739a31263cdbe134fdb9af1d6a21b8ad6b98

See more details on using hashes here.

Provenance

File details

Details for the file matrix_synapse-1.109.0rc2-pp38-pypy38_pp73-manylinux_2_17_i686.manylinux_2_5_i686.manylinux1_i686.manylinux2014_i686.whl.

File metadata

File hashes

Hashes for matrix_synapse-1.109.0rc2-pp38-pypy38_pp73-manylinux_2_17_i686.manylinux_2_5_i686.manylinux1_i686.manylinux2014_i686.whl
Algorithm Hash digest
SHA256 5167bbcd9856f448bd0dd33e95e09ad45d74707005f91221eb04ba9c7ed7e7bd
MD5 8ba05f484bd5a273659e7b7a7bfc9c58
BLAKE2b-256 71dc18d68e6959c0e3bc186b323c3a5fabe1e44bf8140b2adcf185f51debf758

See more details on using hashes here.

Provenance

File details

Details for the file matrix_synapse-1.109.0rc2-pp38-pypy38_pp73-macosx_11_0_x86_64.whl.

File metadata

File hashes

Hashes for matrix_synapse-1.109.0rc2-pp38-pypy38_pp73-macosx_11_0_x86_64.whl
Algorithm Hash digest
SHA256 04507648702fb4e028053c7ae30e9ef41e2e37fe20359e2b14dda644478a1a41
MD5 661719c4f68f9c0775eac77b890e0270
BLAKE2b-256 812601b7e37c4a519e4a47602bc63c5d74315080c2a6fa2ed198e655cade31ca

See more details on using hashes here.

Provenance

File details

Details for the file matrix_synapse-1.109.0rc2-cp38-abi3-musllinux_1_1_x86_64.whl.

File metadata

File hashes

Hashes for matrix_synapse-1.109.0rc2-cp38-abi3-musllinux_1_1_x86_64.whl
Algorithm Hash digest
SHA256 a38507b16e925bf8d2dd8daa98f57d4d3af8b2de7edb6b95f4490ee9162c5c51
MD5 5f9fb34f133f33ff10309ae74a249d21
BLAKE2b-256 7255333e6431251caeef794f489ff34f3ff0c4cc1d017ce2cbfd7e81b924f472

See more details on using hashes here.

Provenance

File details

Details for the file matrix_synapse-1.109.0rc2-cp38-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl.

File metadata

File hashes

Hashes for matrix_synapse-1.109.0rc2-cp38-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl
Algorithm Hash digest
SHA256 eecab5de2cfae3a098fea1a6d6776c56848540ceb6585aac9400a4cc0e3f5890
MD5 0e6f829e5e1c70209da2a2bb9be9dd92
BLAKE2b-256 bcac588385f7cfaefb50fbd48110d18e5723218e6545b84325c96cd9dd138c73

See more details on using hashes here.

Provenance

File details

Details for the file matrix_synapse-1.109.0rc2-cp38-abi3-manylinux_2_17_i686.manylinux_2_5_i686.manylinux1_i686.manylinux2014_i686.whl.

File metadata

File hashes

Hashes for matrix_synapse-1.109.0rc2-cp38-abi3-manylinux_2_17_i686.manylinux_2_5_i686.manylinux1_i686.manylinux2014_i686.whl
Algorithm Hash digest
SHA256 6c2ddbdc4378299536bcad5deb1d5e930852a0fbab641d584714fb98ac872b38
MD5 b57a726c67a759d165018dec1aa0804e
BLAKE2b-256 53ffa75902749063fbbd5dd471ce307846a2a2dc29460b7fab090d0d04dd11b5

See more details on using hashes here.

Provenance

File details

Details for the file matrix_synapse-1.109.0rc2-cp38-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl.

File metadata

File hashes

Hashes for matrix_synapse-1.109.0rc2-cp38-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl
Algorithm Hash digest
SHA256 bb1adce9eaac7773745198770f92b56dd296009e20337b2fe374a667c1e7c583
MD5 2f5f33762ca4d5395d42533e73c5e390
BLAKE2b-256 42d187795323bf066d3d75e95fe74d211bc897131facd6b70fab908e2af7445c

See more details on using hashes here.

Provenance

File details

Details for the file matrix_synapse-1.109.0rc2-cp38-abi3-macosx_10_16_x86_64.whl.

File metadata

File hashes

Hashes for matrix_synapse-1.109.0rc2-cp38-abi3-macosx_10_16_x86_64.whl
Algorithm Hash digest
SHA256 e6e5c715d35387d464f2413b76ef10df0d3a951d1a205e0258c485da3c7ea869
MD5 6a937addf50271ab1ab6c8ac705f6166
BLAKE2b-256 66d2f0786d37b326ce1d075f9564fa36e4b83e9b8395af4935197019657ba27c

See more details on using hashes here.

Provenance

Supported by

AWS AWS Cloud computing and Security Sponsor Datadog Datadog Monitoring Fastly Fastly CDN Google Google Download Analytics Microsoft Microsoft PSF Sponsor Pingdom Pingdom Monitoring Sentry Sentry Error logging StatusPage StatusPage Status page