Only run federation on 8448 and client on 80

This disables federation on the 80 port, as it's
not necessary. We also disable the old Angular webclient.

For the federation port (8448), we disable the client APIs
as those are not necessary. Those can even cause trouble
if one doesn't know about them and thinks that guarding the client
APIs at the 80 port is enough.
This commit is contained in:
Slavi Pantaleev 2018-08-17 07:27:02 +03:00
parent 1a97a30019
commit a302a7d748
2 changed files with 13 additions and 14 deletions

View File

@ -1,3 +1,15 @@
# 2018-08-17
## Disabling some unnecessary Synapse services
The following services are not necessary, so they have been disabled:
- on the federation port (8448): the `client` service
- on the http port (80): the old Angular `webclient` and the `federation` service
Federation runs only on the federation port (8448) now.
The Client APIs run only on the http port (80) now.
# 2018-08-15 # 2018-08-15
## mxisd Identity Server support ## mxisd Identity Server support

View File

@ -143,17 +143,6 @@ listeners:
# List of HTTP resources to serve on this listener. # List of HTTP resources to serve on this listener.
resources: resources:
-
# List of resources to host on this listener.
names:
- client # The client-server APIs, both v1 and v2
- webclient # The bundled webclient.
# Should synapse compress HTTP responses to clients that support it?
# This should be disabled if running synapse behind a load balancer
# that can do automatic compression.
compress: true
- names: [federation] # Federation APIs - names: [federation] # Federation APIs
compress: false compress: false
@ -174,10 +163,8 @@ listeners:
x_forwarded: true x_forwarded: true
resources: resources:
- names: [client, webclient] - names: [client]
compress: true compress: true
- names: [federation]
compress: false
# Turn on the twisted ssh manhole service on localhost on the given # Turn on the twisted ssh manhole service on localhost on the given
# port. # port.