Files
matrix/draupnir/production.yaml
T
jared 3db163e43d Enable Draupnir web server (abuse reporting) and add healthz config to repo
- draupnir/production.yaml: Add health.healthz (port 8081) and web.abuseReporting
  (port 8080) config — healthz was live on LXC but missing from repo; web server
  enables Matrix client Report button forwarding to management room (Synapse module
  install on LXC 151 still needed to complete the integration)
- README: Add Draupnir port map, abuse reporting setup docs, updated monitoring
  section (3 new Prometheus scrape jobs, Draupnir Down alert, Grafana panel count),
  add presence-disabled federation lag fix to performance checklist, document
  Draupnir healthz/audit DB paths

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-03-22 21:12:19 -04:00

65 lines
1.4 KiB
YAML

homeserverUrl: "https://matrix.lotusguild.org"
rawHomeserverUrl: "https://matrix.lotusguild.org"
accessToken: "REDACTED"
pantalaimon:
use: false
username: draupnir
password: ""
experimentalRustCrypto: false
dataPath: "/data/storage"
autojoinOnlyIfManager: true
recordIgnoredInvites: false
managementRoom: "!mEvR5fe3jMmzwd-FwNygD72OY_yu8H3UP_N-57oK7MI"
logLevel: "INFO"
verifyPermissionsOnStartup: true
noop: false
# Don't apply server ACLs (trust local Synapse admin decisions)
disableServerACL: true
# Protect all rooms the bot is joined to by default
protectAllJoinedRooms: false
# Synapse admin API access
admin:
enableMakeRoomAdminCommand: true
# Don't send verbose join/leave notifications
verboseLogging: false
# Background task interval for checking bans
backgroundDelayMS: 500
# Safe redaction limit per sync
redactionLimit: 100
# Health check endpoint (Prometheus scrape via blackbox exporter)
health:
healthz:
enabled: true
port: 8081
address: "0.0.0.0"
endpoint: "/healthz"
healthyStatus: 200
unhealthyStatus: 418
# Web server for abuse report forwarding
# Endpoint: POST /_matrix/draupnir/1/report/{roomId}/{eventId}
# Synapse integration: configure homeserver.yaml with the draupnir_abuse_reports module
# (see README for setup instructions)
web:
enabled: true
address: "0.0.0.0"
port: 8080
abuseReporting:
enabled: true