Matrix-Mirrors/wonderfall-docker-synapse
1
0
Fork 0
mirror of https://github.com/Wonderfall/docker-synapse.git synced 2025-08-07 05:42:23 -04:00
Code Issues Projects Releases Packages Wiki Activity

Update README.md

Browse source 
Signed-off-by: Tommy <contact@tommytran.io>
This commit is contained in:
Tommy 2022-09-06 14:11:58 -04:00 • committed by GitHub
parent 4ec0e99d77
commit 3c9eadc2c6
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 2 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

4
README.md
View file

@ -5,11 +5,11 @@
### Notes ### Notes
- Prebuilt images are available at `ghcr.io/wonderfall/synapse`. - Prebuilt images are available at `ghcr.io/wonderfall/synapse`.
- Don't trust random images: build yourself if you can. - Don't trust random images: build yourself if you can.
- Always keep your software up-to-date: manage versions with [build-time variables](https://github.com/Wonderfall/docker-synapse/blob/main/Dockerfile#L1-L6). - Always keep your software up-to-date: manage versions with [build-time variables](https://github.com/Wonderfall/docker-synapse/blob/main/Dockerfile#L1-L4).
- Images from `ghcr.io` are built every week, and scanned every day for critical vulnerabilities. - Images from `ghcr.io` are built every week, and scanned every day for critical vulnerabilities.
### Features & usage ### Features & usage
- Drop-in replacement for the [official image](https://github.com/matrix-org/synapse/tree/develop/docker). - Drop-in replacement for the [official image](https://github.com/matrix-org/synapse/tree/develop/docker).
- Unprivileged image: you should check your volumes permissions (eg `/data`), default UID/GID is 991. - Unprivileged image: you should check your volumes permissions (eg `/data`), default UID/GID is 991.
- Based on [Alpine](https://alpinelinux.org/), which provides more recent packages while having less attack surface. - Based on [Alpine](https://alpinelinux.org/), which provides more recent packages while having less attack surface.
- Comes with a [hardened memory allocator](https://github.com/GrapheneOS/hardened_malloc), protecting against some heap-based buffer overflows. - Comes with a [hardened memory allocator](https://github.com/GrapheneOS/hardened_malloc), protecting against some heap-based buffer overflows.