eimis-ans / eimis-synapse

Make a Synapse homeserver work on a managed kubernetes server hosted by OVH

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

REC01 configuration hardening

ad2ien opened this issue · comments

Make sure we did everything we could to harden the configurations. Check about

  • Synapse
  • keycloak
  • grafana
  • ...

About Synapse, we should avoid

# The trusted servers to download signing keys from.
 trusted_key_servers:                                                                                                                                                                       
   - server_name: matrix.org 
  • todo : list hardening configuration documents...