egutierrez
1cbbad9ff9
feat(matrix): 4 synapse quick wins applied + 6 follow-up issues
Server-side homeserver.yaml on organic-machine VPS:
- encryption_enabled_by_default_for_room_type: invite -> all
- presence.enabled: false (block EDU metadata leak)
- url_preview_enabled: false (block SSRF + IP leak)
- msc4108 rendezvous endpoint uncommented (QR login)
Synapse restarted, /versions shows e2ee_forced.* + msc4108 unstable
features active. Backup at synapse_data/homeserver.yaml.bak.1779659423.
Issues opened for remaining gaps:
- 0165 LUKS for media_store (at-rest encryption)
- 0166 LiveKit TURN deploy (NAT traversal gap)
- 0167 STUN leak to Google (hardcode external_ip)
- 0168 UDP range expand 200 -> 500
- 0169 LIVEKIT_SECRET rotation (audit exposure)
- 0170 livekit.example.yaml rename hygiene
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-05-24 23:53:37 +02:00
..
2026-05-24 22:53:33 +02:00
2026-04-05 18:19:36 +02:00
2026-05-24 23:53:37 +02:00
2026-05-19 01:41:49 +02:00
2026-05-14 00:28:20 +02:00
2026-05-18 18:17:08 +02:00
2026-05-18 18:46:25 +02:00
2026-05-17 02:44:04 +02:00
2026-05-16 16:33:22 +02:00