Skip to main content

Homeserver for the Matrix decentralised comms protocol

Project description

Synapse is an open-source Matrix homeserver written and maintained by the Matrix.org Foundation. We began rapid development in 2014, reaching v1.0.0 in 2019. Development on Synapse and the Matrix protocol itself continues in earnest today.

Briefly, Matrix is an open standard for communications on the internet, supporting federation, encryption and VoIP. Matrix.org has more to say about the goals of the Matrix project, and the formal specification describes the technical details.

Installing and configuration

The Synapse documentation describes how to install Synapse. We recommend using Docker images or Debian packages from Matrix.org.

Synapse has a variety of config options which can be used to customise its behaviour after installation. There are additional details on how to configure Synapse for federation here.

Using a reverse proxy with Synapse

It is recommended to put a reverse proxy such as nginx, Apache, Caddy, HAProxy or relayd in front of Synapse. One advantage of doing so is that it means that you can expose the default https port (443) to Matrix clients without needing to run Synapse with root privileges. For information on configuring one, see the reverse proxy docs.

Upgrading an existing Synapse

The instructions for upgrading Synapse are in the upgrade notes. Please check these instructions as upgrading may require extra steps for some versions of Synapse.

Platform dependencies

Synapse uses a number of platform dependencies such as Python and PostgreSQL, and aims to follow supported upstream versions. See the deprecation policy for more details.

Security note

Matrix serves raw, user-supplied data in some APIs – specifically the content repository endpoints.

Whilst we make a reasonable effort to mitigate against XSS attacks (for instance, by using CSP), a Matrix homeserver should not be hosted on a domain hosting other web applications. This especially applies to sharing the domain with Matrix web clients and other sensitive applications like webmail. See https://developer.github.com/changes/2014-04-25-user-content-security for more information.

Ideally, the homeserver should not simply be on a different subdomain, but on a completely different registered domain (also known as top-level site or eTLD+1). This is because some attacks are still possible as long as the two applications share the same registered domain.

To illustrate this with an example, if your Element Web or other sensitive web application is hosted on A.example1.com, you should ideally host Synapse on example2.com. Some amount of protection is offered by hosting on B.example1.com instead, so this is also acceptable in some scenarios. However, you should not host your Synapse on A.example1.com.

Note that all of the above refers exclusively to the domain used in Synapse’s public_baseurl setting. In particular, it has no bearing on the domain mentioned in MXIDs hosted on that server.

Following this advice ensures that even if an XSS is found in Synapse, the impact to other applications will be minimal.

Testing a new installation

The easiest way to try out your new Synapse installation is by connecting to it from a web client.

Unless you are running a test instance of Synapse on your local machine, in general, you will need to enable TLS support before you can successfully connect from a client: see TLS certificates.

An easy way to get started is to login or register via Element at https://app.element.io/#/login or https://app.element.io/#/register respectively. You will need to change the server you are logging into from matrix.org and instead specify a Homeserver URL of https://<server_name>:8448 (or just https://<server_name> if you are using a reverse proxy). If you prefer to use another client, refer to our client breakdown.

If all goes well you should at least be able to log in, create a room, and start sending messages.

Registering a new user from a client

By default, registration of new users via Matrix clients is disabled. To enable it:

  1. In the registration config section set enable_registration: true in homeserver.yaml.

  2. Then either:

    1. set up a CAPTCHA, or

    2. set enable_registration_without_verification: true in homeserver.yaml.

We strongly recommend using a CAPTCHA, particularly if your homeserver is exposed to the public internet. Without it, anyone can freely register accounts on your homeserver. This can be exploited by attackers to create spambots targetting the rest of the Matrix federation.

Your new user name will be formed partly from the server_name, and partly from a localpart you specify when you create the account. Your name will take the form of:

@localpart:my.domain.name

(pronounced “at localpart on my dot domain dot name”).

As when logging in, you will need to specify a “Custom server”. Specify your desired localpart in the ‘User name’ box.

Troubleshooting and support

The Admin FAQ includes tips on dealing with some common problems. For more details, see Synapse’s wider documentation.

For additional support installing or managing Synapse, please ask in the community support room #synapse:matrix.org (from a matrix.org account if necessary). We do not use GitHub issues for support requests, only for bug reports and feature requests.

Identity Servers

Identity servers have the job of mapping email addresses and other 3rd Party IDs (3PIDs) to Matrix user IDs, as well as verifying the ownership of 3PIDs before creating that mapping.

They are not where accounts or credentials are stored - these live on home servers. Identity Servers are just for mapping 3rd party IDs to matrix IDs.

This process is very security-sensitive, as there is obvious risk of spam if it is too easy to sign up for Matrix accounts or harvest 3PID data. In the longer term, we hope to create a decentralised system to manage it (matrix-doc #712), but in the meantime, the role of managing trusted identity in the Matrix ecosystem is farmed out to a cluster of known trusted ecosystem partners, who run ‘Matrix Identity Servers’ such as Sydent, whose role is purely to authenticate and track 3PID logins and publish end-user public keys.

You can host your own copy of Sydent, but this will prevent you reaching other users in the Matrix ecosystem via their email address, and prevent them finding you. We therefore recommend that you use one of the centralised identity servers at https://matrix.org or https://vector.im for now.

To reiterate: the Identity server will only be used if you choose to associate an email address with your account, or send an invite to another user via their email address.

Development

We welcome contributions to Synapse from the community! The best place to get started is our guide for contributors. This is part of our larger documentation, which includes

information for Synapse developers as well as Synapse administrators. Developers might be particularly interested in:

Alongside all that, join our developer community on Matrix: #synapse-dev:matrix.org, featuring real humans!

Project details


Release history Release notifications | RSS feed

Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

matrix_synapse-1.77.0rc2.tar.gz (3.1 MB view details)

Uploaded Source

Built Distributions

matrix_synapse-1.77.0rc2-pp39-pypy39_pp73-manylinux_2_17_i686.manylinux_2_5_i686.manylinux1_i686.manylinux2014_i686.whl (4.2 MB view details)

Uploaded PyPy manylinux: glibc 2.17+ i686 manylinux: glibc 2.5+ i686

matrix_synapse-1.77.0rc2-pp39-pypy39_pp73-macosx_11_0_x86_64.whl (3.2 MB view details)

Uploaded PyPy macOS 11.0+ x86-64

matrix_synapse-1.77.0rc2-pp38-pypy38_pp73-manylinux_2_17_i686.manylinux_2_5_i686.manylinux1_i686.manylinux2014_i686.whl (4.2 MB view details)

Uploaded PyPy manylinux: glibc 2.17+ i686 manylinux: glibc 2.5+ i686

matrix_synapse-1.77.0rc2-pp38-pypy38_pp73-macosx_11_0_x86_64.whl (3.2 MB view details)

Uploaded PyPy macOS 11.0+ x86-64

matrix_synapse-1.77.0rc2-pp37-pypy37_pp73-manylinux_2_17_i686.manylinux_2_5_i686.manylinux1_i686.manylinux2014_i686.whl (4.2 MB view details)

Uploaded PyPy manylinux: glibc 2.17+ i686 manylinux: glibc 2.5+ i686

matrix_synapse-1.77.0rc2-pp37-pypy37_pp73-macosx_11_0_x86_64.whl (3.2 MB view details)

Uploaded PyPy macOS 11.0+ x86-64

matrix_synapse-1.77.0rc2-cp37-abi3-musllinux_1_1_x86_64.whl (4.2 MB view details)

Uploaded CPython 3.7+ musllinux: musl 1.1+ x86-64

matrix_synapse-1.77.0rc2-cp37-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl (4.2 MB view details)

Uploaded CPython 3.7+ manylinux: glibc 2.17+ x86-64

matrix_synapse-1.77.0rc2-cp37-abi3-manylinux_2_17_i686.manylinux_2_5_i686.manylinux1_i686.manylinux2014_i686.whl (4.2 MB view details)

Uploaded CPython 3.7+ manylinux: glibc 2.17+ i686 manylinux: glibc 2.5+ i686

matrix_synapse-1.77.0rc2-cp37-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl (4.1 MB view details)

Uploaded CPython 3.7+ manylinux: glibc 2.17+ ARM64

matrix_synapse-1.77.0rc2-cp37-abi3-macosx_10_16_x86_64.whl (3.2 MB view details)

Uploaded CPython 3.7+ macOS 10.16+ x86-64

File details

Details for the file matrix_synapse-1.77.0rc2.tar.gz.

File metadata

  • Download URL: matrix_synapse-1.77.0rc2.tar.gz
  • Upload date:
  • Size: 3.1 MB
  • Tags: Source
  • Uploaded using Trusted Publishing? No
  • Uploaded via: twine/4.0.2 CPython/3.10.9

File hashes

Hashes for matrix_synapse-1.77.0rc2.tar.gz
Algorithm Hash digest
SHA256 80c7c1e97c08512ffad55786819c5cb27119fa75b7090a91532b37472bc984c7
MD5 b3a8aaf60f0002b5ac9e7d6016bf140c
BLAKE2b-256 d68742cb2c3aa0ccfdbc37c1a14501411724e110699d7bd562700687437d4f78

See more details on using hashes here.

Provenance

File details

Details for the file matrix_synapse-1.77.0rc2-pp39-pypy39_pp73-manylinux_2_17_x86_64.manylinux2014_x86_64.whl.

File metadata

File hashes

Hashes for matrix_synapse-1.77.0rc2-pp39-pypy39_pp73-manylinux_2_17_x86_64.manylinux2014_x86_64.whl
Algorithm Hash digest
SHA256 6dd34b9236b594e645422981401fd3797c5d7a0da4c1115fd92979500f72c3dd
MD5 85c5d1ac9ad9c14c6e47680acad964fc
BLAKE2b-256 a8a7e2f7da40c8b45e84ed61b19077a06848b0fd1e54b6512b0faf88c082fbfc

See more details on using hashes here.

Provenance

File details

Details for the file matrix_synapse-1.77.0rc2-pp39-pypy39_pp73-manylinux_2_17_i686.manylinux_2_5_i686.manylinux1_i686.manylinux2014_i686.whl.

File metadata

File hashes

Hashes for matrix_synapse-1.77.0rc2-pp39-pypy39_pp73-manylinux_2_17_i686.manylinux_2_5_i686.manylinux1_i686.manylinux2014_i686.whl
Algorithm Hash digest
SHA256 6b3ca313311cb5b07b5b8f8d29f8c231d52d25fe74c2a0260ddcab535564a02d
MD5 36996a34002e444abce4d17cba2a325d
BLAKE2b-256 d805cf80289ee42dce7784ad0747c22e86b1e2e18732e25d26508495716f1dbb

See more details on using hashes here.

Provenance

File details

Details for the file matrix_synapse-1.77.0rc2-pp39-pypy39_pp73-macosx_11_0_x86_64.whl.

File metadata

File hashes

Hashes for matrix_synapse-1.77.0rc2-pp39-pypy39_pp73-macosx_11_0_x86_64.whl
Algorithm Hash digest
SHA256 ec1ec7e6779d3a6236a837ab639e14606f1df51253cde5072d9ed8aa80b45073
MD5 0d5c11f9a99757a4f8b8c04cb5dc1192
BLAKE2b-256 faea52ce1948ed1c352d23ad8c5819a0fd9a6f6820e41e8a2b837ccca0d1b92e

See more details on using hashes here.

Provenance

File details

Details for the file matrix_synapse-1.77.0rc2-pp38-pypy38_pp73-manylinux_2_17_x86_64.manylinux2014_x86_64.whl.

File metadata

File hashes

Hashes for matrix_synapse-1.77.0rc2-pp38-pypy38_pp73-manylinux_2_17_x86_64.manylinux2014_x86_64.whl
Algorithm Hash digest
SHA256 1250b1da3da6fefe59e19fb08289d3fb36789a8597f376839c03bd44bd9139f2
MD5 bb9e55cb80dd7143c7f0ed09a44b83e4
BLAKE2b-256 e3d1dd8c288014636a52283d4244ad0b3b35d95006423abfc5b20f32a42f8988

See more details on using hashes here.

Provenance

File details

Details for the file matrix_synapse-1.77.0rc2-pp38-pypy38_pp73-manylinux_2_17_i686.manylinux_2_5_i686.manylinux1_i686.manylinux2014_i686.whl.

File metadata

File hashes

Hashes for matrix_synapse-1.77.0rc2-pp38-pypy38_pp73-manylinux_2_17_i686.manylinux_2_5_i686.manylinux1_i686.manylinux2014_i686.whl
Algorithm Hash digest
SHA256 3c4b1300e13fb4f2c25f83f72bcc28285904d09b9184c58962e7fc2fcff4d64a
MD5 a95c397f98fc74160ffcc30e4a3fd0f9
BLAKE2b-256 0002fbe25b5671a2f877ba2f7864b01489d8c982b93782b17ebc9d3eb4e221ec

See more details on using hashes here.

Provenance

File details

Details for the file matrix_synapse-1.77.0rc2-pp38-pypy38_pp73-macosx_11_0_x86_64.whl.

File metadata

File hashes

Hashes for matrix_synapse-1.77.0rc2-pp38-pypy38_pp73-macosx_11_0_x86_64.whl
Algorithm Hash digest
SHA256 ff1a15cbc23b69f348e0beecc9cb5e598b048b125ea65d4ac6cd423971fcdf52
MD5 4fb2e1ae73e9e6e1395c1ac46a6d82f5
BLAKE2b-256 cd054e0284b349eadf913c56a3e6e083788f7936f48d588553a64ed426e0ffd9

See more details on using hashes here.

Provenance

File details

Details for the file matrix_synapse-1.77.0rc2-pp37-pypy37_pp73-manylinux_2_17_x86_64.manylinux2014_x86_64.whl.

File metadata

File hashes

Hashes for matrix_synapse-1.77.0rc2-pp37-pypy37_pp73-manylinux_2_17_x86_64.manylinux2014_x86_64.whl
Algorithm Hash digest
SHA256 2cb9c3c00b5f537ae3f5d3a929d3038d2403756c33364ecd8049fb1952b00955
MD5 bfc88ab9a46333eea7e90428ce36cc53
BLAKE2b-256 6eb520b54a3ee095385ff0c7d1afcdd50d0ec6227c4a571d0a281733ebeacdfb

See more details on using hashes here.

Provenance

File details

Details for the file matrix_synapse-1.77.0rc2-pp37-pypy37_pp73-manylinux_2_17_i686.manylinux_2_5_i686.manylinux1_i686.manylinux2014_i686.whl.

File metadata

File hashes

Hashes for matrix_synapse-1.77.0rc2-pp37-pypy37_pp73-manylinux_2_17_i686.manylinux_2_5_i686.manylinux1_i686.manylinux2014_i686.whl
Algorithm Hash digest
SHA256 210a2792a9699513898d99561d62876405b1e9ef91cc0aeee18de5e34020ac04
MD5 93b538902235ca7cadfd358c5a772e2c
BLAKE2b-256 4e69d44499ee07a420034788b3ca848988ecb5c8d598617e4735d865402073f1

See more details on using hashes here.

Provenance

File details

Details for the file matrix_synapse-1.77.0rc2-pp37-pypy37_pp73-macosx_11_0_x86_64.whl.

File metadata

File hashes

Hashes for matrix_synapse-1.77.0rc2-pp37-pypy37_pp73-macosx_11_0_x86_64.whl
Algorithm Hash digest
SHA256 2bd1804bffc791f5111b40826f45a206b66fe9a3bd0cb6322cfe62d4d92ad592
MD5 6e63201736181635cdd1a7fbbe6d0ff1
BLAKE2b-256 8fbd4860cd2021cd296d85f6f7eebb122b93faee625a6ab5924421ca4f44cea4

See more details on using hashes here.

Provenance

File details

Details for the file matrix_synapse-1.77.0rc2-cp37-abi3-musllinux_1_1_x86_64.whl.

File metadata

File hashes

Hashes for matrix_synapse-1.77.0rc2-cp37-abi3-musllinux_1_1_x86_64.whl
Algorithm Hash digest
SHA256 ca658489bf517350aef28cb70edc765f8f2d75cc9fdeb0895b7e6a5b457e49c2
MD5 602563999ac5a46974e406b0c6c821c0
BLAKE2b-256 9f754f1b85e9fbd44f51f4408254884bb637630a5cbc4c96f526a25e4d0cc1e8

See more details on using hashes here.

Provenance

File details

Details for the file matrix_synapse-1.77.0rc2-cp37-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl.

File metadata

File hashes

Hashes for matrix_synapse-1.77.0rc2-cp37-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl
Algorithm Hash digest
SHA256 0ad7d85f4fb6b000cabd816b543907825227d989fc7183c388cdc13bf57c9453
MD5 52222a2567600245a4d032edfcf53198
BLAKE2b-256 0ac1f514b50590619db1e1711cf19e016c36df509742422fb89c8d0d6443cfdc

See more details on using hashes here.

Provenance

File details

Details for the file matrix_synapse-1.77.0rc2-cp37-abi3-manylinux_2_17_i686.manylinux_2_5_i686.manylinux1_i686.manylinux2014_i686.whl.

File metadata

File hashes

Hashes for matrix_synapse-1.77.0rc2-cp37-abi3-manylinux_2_17_i686.manylinux_2_5_i686.manylinux1_i686.manylinux2014_i686.whl
Algorithm Hash digest
SHA256 ac3d6b895e43c7a19fda9ee869eae08a376d9abada560be88addc750c3af22ee
MD5 b84c546245ef58b9ac4835add428ef4f
BLAKE2b-256 5f7f2adad44a74e70cd29c1269aad2e40825d2701429e5f4bccfef112c8efb7b

See more details on using hashes here.

Provenance

File details

Details for the file matrix_synapse-1.77.0rc2-cp37-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl.

File metadata

File hashes

Hashes for matrix_synapse-1.77.0rc2-cp37-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl
Algorithm Hash digest
SHA256 dfce4c7fc5b2ad19a63436e6476851b97229871008ff3522aa13a5722edbc14d
MD5 e676c63f0e1ed8514c43c20ceb9a4f6d
BLAKE2b-256 791a973e67bf34307a96ff3fc5df6fe4c27cee28ce93a426ba958b49481368d2

See more details on using hashes here.

Provenance

File details

Details for the file matrix_synapse-1.77.0rc2-cp37-abi3-macosx_10_16_x86_64.whl.

File metadata

File hashes

Hashes for matrix_synapse-1.77.0rc2-cp37-abi3-macosx_10_16_x86_64.whl
Algorithm Hash digest
SHA256 9daba99223b8ee7939c74cf7f516c30a5d5633946cd366d2678380753c00d1e8
MD5 2acdda789d5ea4598107906bbbdcc3e6
BLAKE2b-256 436271e8ea3bdd3d4f835d3a2b8db77f8f0ad17202bc7af4f0b286e7260461d5

See more details on using hashes here.

Provenance

Supported by

AWS AWS Cloud computing and Security Sponsor Datadog Datadog Monitoring Fastly Fastly CDN Google Google Download Analytics Microsoft Microsoft PSF Sponsor Pingdom Pingdom Monitoring Sentry Sentry Error logging StatusPage StatusPage Status page