# Configuration file for Synapse.
#
# This is a YAML file: see [1] for a quick introduction. Note in particular
# that *indentation is important*: all the elements of a list or dictionary
# should have the same indentation.
#
# [1] https://docs.ansible.com/ansible/latest/reference_appendices/YAMLSyntax.html
#
# For more information on how to configure Synapse, including a complete accounting of
# each option, go to docs/usage/configuration/config_documentation.md or
# https://matrix-org.github.io/synapse/latest/usage/configuration/config_documentation.html
server_name: "matrix.fffka.de"
pid_file: /data/homeserver.pid
listeners:
  - port: 8008
    tls: false
    type: http
    x_forwarded: true
    resources:
      - names: [client, federation]
        compress: false
database:
  name: sqlite3
  args:
    database: /data/homeserver.db
log_config: "/data/matrix.fffka.de.log.config"
media_store_path: /data/media_store
registration_shared_secret: "<redacted>"
report_stats: false
macaroon_secret_key: "<redacted>"
form_secret: "<redacted>"
signing_key_path: "/data/matrix.fffka.de.signing.key"
trusted_key_servers:
  - server_name: "matrix.org"

# Nextcloud login
oidc_providers:
  - idp_id: nextcloud
    idp_name: Nextcloud
    issuer: "https://cloud.fffka.de/.well-known/openid-configuration"
    client_id: "<redacted>"
    client_secret: "<redacted>"
    client_auth_method: "client_secret_post"
    scopes: ["openid", "profile", "email", "roles"]
    authorization_endpoint: "https://cloud.fffka.de/index.php/apps/oidc/authorize"
    token_endpoint: "https://cloud.fffka.de/index.php/apps/oidc/token"
    userinfo_endpoint: "https://cloud.fffka.de/index.php/apps/oidc/userinfo"

    user_mapping_provider:
      config:
        localpart_template: "{{ user.name }}"
        display_name_template: "{{ user.name }}"

# vim:ft=yaml