Hey all, I decided to try setting up matrix/synapse via cloudflare tunnels.
I was following this guide
http://192.168.1.2:8009/_matrix/static/ shows
It works! Synapse is running
as does https://matrix.example.com/_matrix/static/
https://matrix.example.com/.well-known/matrix/server
comes up with 404. Is anything ever truly *well* known?
and matrix/synapse container shows 401 unauthorized when trying to access public rooms
synapse.http.matrixfederationclient - 676 - INFO - POST-87644 - {POST-O-3} [matrix.org] Got response headers: 401 Unauthorized
federation tester is showing
Hosts
_dc-srv.959fd81029a5._matrix._tcp.matrix.example.com.
Addresses
Errors
SRV record target _dc-srv.959fd81029a5._matrix._tcp.matrix.example.com. is a CNAME record, which is forbidden (as per RFC2782)
can anyone point me in the right direction?
I'm assuming this is still an issue with ./well-known or something.
cheers
8 Comments
manwichmakesameal@lemmy.world · 4 pts · 3y
How exactly is your Matrix server running? Behind an nginx reverse proxy or are you using the cloudflare tunnel directly to it? Personally, I have mine behind a reverse proxy and just point the tunnel at my proxy.
Elegast@lemmy.ca · 1 pts · 3y
Since I just migrated to cf tunnels I set it up to directly point to my matrix instance. I was planning on implementing the rproxy back in once I got it working.
My old setup was way over convoluted with a double reverse proxy, ec2 instance, and vpn lmao.
manwichmakesameal@lemmy.world · 1 pts · 3y
To add more, I think you're right in suspecting your ./well-known setting. I'm not sure where you would set that in a direct to Matrix setup like you have but it's pretty easy using nginx. I just ran mine through the federation checker and my hosts section came back as exactly what I set in my location /.well-known/matrix/server directive in my nginx config.
manwichmakesameal@lemmy.world · 1 pts · 3y
So, my setup is this: Nginx reverse proxy using LE wildcard certs for my domain. I put my Matrix on a subdomain on my domain. Then I just point the CF tunnel to the reverse proxy using the subdomain for my public hostname. Everything works for me. Federation, local chat, etc. I have Home Assistant notifying me via Matrix now too.
outcide@kbin.social · 1 pts · 3y
Do it in stages. First get it running without any reverse proxies, just connecting directly to the exposed ports. Once that's working, add in your proxy. Then finally add cloudflare tunnels.
StateDeadTrip@geddit.social · 1 pts · 3y
I’ve recently done the same thing. I setup both dendrite and synapse.
For both I tried the srv record and could not get it to pass the federation testers. In the end as mines behind a nginx proxy I served the wellknows frommnginx rather than letting synapse/dendrite serve it. Federated correctly afterwards.
As such I would suggest serving the json well know using whatever reverse proxy you are using.
ellwoodb@feddit.de · 1 pts · 3y
Hey, I recently accomplished this.
You have to host the .well-known via a reverse proxy and then point CT to the reverse proxy, like @manwichmakesameal@lemmy.world said. Personally, followed this guide and here they talk about how to serve the .well-known. You don't have to follow it exactly, if you already have a working Synapse server.
I hope I could help you and if you have any more questions feel free to ask.
Edit: formatting