23 lines
1.6 KiB
Markdown
23 lines
1.6 KiB
Markdown
# tommytran732/synapse
|
|
|
|
|
|
|
|
[Synapse](https://github.com/matrix-org/synapse) is a [Matrix](https://matrix.org/) implementation written in Python.
|
|
|
|
### Notes
|
|
- Prebuilt images are available at `ghcr.io/tommytran732/synapse` and `quay.io/tommytran732/synapse`.
|
|
- Don't trust random images: build yourself if you can.
|
|
- Always keep your software up-to-date: manage versions with [build-time variables](https://github.com/TommyTran732/Synapse-Docker/blob/main/Dockerfile#L1-L4).
|
|
- Images from `ghcr.io` are built every week and scanned every day for critical vulnerabilities with Trivy. I recommend that you use these images.
|
|
- Images from `quay.io` are built on every push event and scanned for vulnerabilities with Clair.
|
|
|
|
### Features & usage
|
|
- Drop-in replacement for the [official image](https://github.com/matrix-org/synapse/tree/develop/docker).
|
|
- Unprivileged image: you should check your volumes permissions (eg `/data`), default UID/GID is 991.
|
|
- Based on the latest [Alpine](https://alpinelinux.org/) containers which provide more recent packages while having less attack surface.
|
|
- Comes with the [hardened memory allocator](https://github.com/GrapheneOS/hardened_malloc) built from the latest tag, protecting against some heap-based buffer overflows.
|
|
- [Mjolnir module](https://github.com/matrix-org/mjolnir/blob/main/docs/synapse_module.md) support.
|
|
|
|
### Licensing
|
|
- v1.98.0 and prior are under the [Apache License](https://www.apache.org/licenses/LICENSE-2.0). 😇
|
|
- Versions after v1.98.0 are under AGPL 3 🤮 to comply with licensing changes by Element. |