3.1 KiB
#Installatie: You only need to expose port 443 (HTTPS) on your public IP. All Matrix client communication and server-to-server federation is done over HTTPS.
Dus ingressroute van entrypoint 443 naar poort 8008 is voldoende. Je hoeft niks open te zetten op de internet router
#configuratie STUN & TURN:
als je de container directory "data" mount op een pvc dan vind je daar de bestanden:
homeserver.db homeserver.db-wal matrix-lp.allarddcs.nl.log.config media_store homeserver.db-shm homeserver.yaml matrix-lp.allarddcs.nl.signing.key
homeserver.yaml bevat:
turn_uris:
- "turn:coturn-lp.allarddcs.nl:3478?transport=udp"
- "turn:coturn-lp.allarddcs.nl:3478?transport=tcp" stun_uris:
- "stun:stun.l.google.com:19302"
- "stun:stun1.l.google.com:19302"
- "stun:stun2.l.google.com:19302"
#registratie admin:
kubectl exec -it matrix-644984f6b7-d7jcp -n matrix -- register_new_matrix_user http://localhost:8008 -u admin -p Matrix01@
-a -k f0hE.OTU8UXQ44yIHPWtO+8CKhM-b:QZNngk_qhE8EvgmP-3h@
#registratie gewone gebruiker:
kubectl exec -it matrix-644984f6b7-d7jcp -n matrix -- register_new_matrix_user http://localhost:8008 -u diederick -p Matrix01@
--no-admin -k f0hE.OTU8UXQ44yIHPWtO+8CKhM-b:QZNngk_qhE8EvgmP-3h@
#algemeen:
usage: register_new_matrix_user [-h] [-u USER] [--exists-ok] [-p PASSWORD | --password-file PASSWORD_FILE] [-t USER_TYPE] [-a | --no-admin] (-c CONFIG | -k SHARED_SECRET) [server_url]
Used to register new users with a given homeserver when registration has been disabled. The homeserver must be configured with the 'registration_shared_secret' option set.
positional arguments: server_url URL to use to talk to the homeserver. By default, tries to find a suitable URL from the configuration file. Otherwise, defaults to 'http://localhost:8008'.
options:
-h, --help show this help message and exit
-u USER, --user USER Local part of the new user. Will prompt if omitted.
--exists-ok Do not fail if user already exists.
-p PASSWORD, --password PASSWORD
New password for user. Will prompt for a password if this flag and --password-file are both omitted.
--password-file PASSWORD_FILE
File containing the new password for user. If set, will override --password.
-t USER_TYPE, --user_type USER_TYPE
User type as specified in synapse.api.constants.UserTypes
-a, --admin Register new user as an admin. Will prompt if --no-admin is not set either.
--no-admin Register new user as a regular user. Will prompt if --admin is not set either.
-c CONFIG, --config CONFIG
Path to server config file. Used to read in shared secret.
-k SHARED_SECRET, --shared-secret SHARED_SECRET
Shared secret as defined in server config file.
#COTURN:
#check udp:
nc -zvu coturn-lp.allarddcs.nl 3478 nc -zv coturn-lp.allarddcs.nl 3478 nc -zv coturn-lp.allarddcs.nl 5349
#checken certificaat: kubectl describe secret coturn-cert -n matrix