Files
matrix/draupnir/production.yaml
T
Lotus CIandClaude Opus 5.5 cabc393b6b
Lint / Shell (shellcheck) (pull_request) Successful in 7s
Lint / JS (eslint) (pull_request) Successful in 6s
Lint / No secrets in webhook configs (pull_request) Successful in 3s
Lint / Landing page is rendered (matrix (pull_request) Successful in 4s
Lint / Python (ruff) (pull_request) Successful in 5s
Lint / Python deps (pip-audit) (pull_request) Successful in 32s
Lint / Secret scan (gitleaks) (pull_request) Successful in 4s
Lint / Shell (shellcheck) (push) Successful in 6s
Lint / JS (eslint) (push) Successful in 5s
Lint / No secrets in webhook configs (push) Successful in 4s
Lint / Landing page is rendered (matrix (push) Successful in 4s
Lint / Python (ruff) (push) Successful in 4s
Lint / Python deps (pip-audit) (push) Successful in 34s
Lint / Secret scan (gitleaks) (push) Successful in 7s
Revert Draupnir Rust crypto (#26): it fails to start without a device-bound token
With experimentalRustCrypto: true, Draupnir 2.9.0 exits on startup with
"Encryption not possible: server not revealing device ID": its access
token is not bound to a device, which matrix-bot-sdk crypto requires.
Restores experimentalRustCrypto: false so the deploy hook brings it back.

To enable encryption later, give Draupnir a device-bound access token
(a normal password login) first.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_017PCb59uY3UKqDqt7B6hzd5
2026-10-16 18:36:16 -04:00

65 lines
1.4 KiB
YAML

homeserverUrl: "https://matrix.lotusguild.org"
rawHomeserverUrl: "https://matrix.lotusguild.org"
accessToken: "REDACTED"
pantalaimon:
use: false
username: draupnir
password: ""
experimentalRustCrypto: false
dataPath: "/data/storage"
autojoinOnlyIfManager: true
recordIgnoredInvites: false
managementRoom: "!mEvR5fe3jMmzwd-FwNygD72OY_yu8H3UP_N-57oK7MI"
logLevel: "INFO"
verifyPermissionsOnStartup: true
noop: false
# Don't apply server ACLs (trust local Synapse admin decisions)
disableServerACL: true
# Protect all rooms the bot is joined to by default
protectAllJoinedRooms: false
# Synapse admin API access
admin:
enableMakeRoomAdminCommand: true
# Don't send verbose join/leave notifications
verboseLogging: false
# Background task interval for checking bans
backgroundDelayMS: 500
# Safe redaction limit per sync
redactionLimit: 100
# Health check endpoint (Prometheus scrape via blackbox exporter)
health:
healthz:
enabled: true
port: 8081
address: "0.0.0.0"
endpoint: "/healthz"
healthyStatus: 200
unhealthyStatus: 418
# Web server for abuse report forwarding
# Endpoint: POST /_matrix/draupnir/1/report/{roomId}/{eventId}
# Synapse integration: configure homeserver.yaml with the draupnir_abuse_reports module
# (see README for setup instructions)
web:
enabled: true
address: "0.0.0.0"
port: 8080
abuseReporting:
enabled: true