Matrix-Mirrors
/
ArcticFoxes-Synapse-Docker-Compose
mirror of https://github.com/ArcticFoxes-net/Synapse-Docker-Compose.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Add notes about CSP 

Signed-off-by: Tommy <contact@tommytran.io>
This commit is contained in:
Tommy 2023-03-16 11:26:30 -04:00 committed by GitHub
parent 920d69e5f6
commit 487c2a2c1f
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 8 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
README.md
View File

@ -21,3 +21,11 @@ Matrix Synapse Docker-Compose
9. Uncomment the security options for postgres. Run `docker-compose up -d` again.
10. Create a user for mjolnir
11. Copy the config from https://github.com/matrix-org/mjolnir/blob/main/config/default.yaml to `./mjolnir/config/production.yaml` and edit it accordingly. If you want Mjolnir to recieve reports instead of Synapse, make it listen on `0.0.0.0:8081`. You will also need to uncomment the approprieate lines in `./swag/nginx/proxy-confs/synapse.subdomain.conf` as well.
## Notes
The CSP policies in `swag/nginx/ssl.conf` is slightly stricter on [ArcticFoxes Element](https://element.arcticfoxes.net) as it does not support third party servers:
```
add_header Content-Security-Policy "default-src 'none'; connect-src 'self' https://arcticfoxes.net https://matrix.arcticfoxes.net; font-src 'self'; img-src 'self' https://arcticfoxes.net https://matrix.arcticfoxes.net blob: data:; manifest-src 'self'; media-src https://matrix.arcticfoxes.net; script-src 'self' 'unsafe-eval' https://www.recaptcha.net https://www.gstatic.com; style-src 'self' 'unsafe-inline'; frame-src 'self' https://www.recaptcha.net blob:; frame-ancestors 'self'; block-all-mixed-content; base-uri 'none'";
```