vojo/docs/ai/server-side.md

folders on server:
caddy  cinny  coturn  docker-compose.yml  element-releases  grafana  mautrix-telegram  mautrix-telegram-config.yaml.go-backup  postgres  prometheus  sygnal  synapse

docker-compose.yml
services:
  postgres:
    image: postgres:16
    restart: unless-stopped
    environment:
      POSTGRES_USER: synapse
      POSTGRES_PASSWORD: pass
      POSTGRES_DB: synapse
      POSTGRES_INITDB_ARGS: "--encoding=UTF8 --lc-collate=C --lc-ctype=C"
    volumes:
      - ./postgres:/var/lib/postgresql/data

  synapse:
    image: matrixdotorg/synapse:latest
    restart: unless-stopped
    depends_on:
      - postgres
    volumes:
      - ./synapse:/data
    ports:
      - "8008:8008"

  caddy:
    image: caddy:2
    restart: unless-stopped
    ports:
      - "80:80"
      - "443:443"
      - "8448:8448"
    volumes:
      - ./caddy/Caddyfile:/etc/caddy/Caddyfile
      - ./caddy/data:/data
      - ./caddy/config:/config
      - ./cinny:/var/www/cinny

  prometheus:
    image: prom/prometheus:latest
    restart: unless-stopped
    volumes:
      - ./prometheus/prometheus.yml:/etc/prometheus/prometheus.yml
      - ./prometheus/data:/prometheus
    command:
      - '--config.file=/etc/prometheus/prometheus.yml'
      - '--storage.tsdb.retention.time=30d'

  grafana:
    image: grafana/grafana:latest
    restart: unless-stopped
    ports:
      - "3000:3000"
    environment:
      - GF_SECURITY_ADMIN_PASSWORD=
    volumes:
      - ./grafana:/var/lib/grafana

  coturn:
    image: coturn/coturn:latest
    restart: unless-stopped
    network_mode: host
    volumes:
      - ./coturn/turnserver.conf:/etc/coturn/turnserver.conf

  telegram-bridge:
      image: dock.mau.dev/mautrix/telegram:v0.15.3
      restart: unless-stopped
      volumes:
        - ./mautrix-telegram:/data

  sygnal:
      image: matrixdotorg/sygnal:latest
      restart: unless-stopped
      healthcheck:
        disable: true
      volumes:
            - ./sygnal/sygnal.yaml:/sygnal.yaml
            - ./sygnal/fcm-service-account.json:/fcm-service-account.json
            - ./sygnal/vapid_private_key:/vapid_private_key
      command: ["python", "-m", "sygnal", "-c", "/sygnal.yaml"]

caddy/Caddyfile
vojo.chat {
    handle /_matrix/* {
        reverse_proxy synapse:8008
    }
    handle /_synapse/* {
        reverse_proxy synapse:8008
    }
    handle /.well-known/matrix/server {
        respond `{"m.server": "vojo.chat:443"}`
        header Content-Type application/json
    }
    handle /.well-known/matrix/client {
        respond `{"m.homeserver": {"base_url": "https://vojo.chat"}, "io.element.e2ee": {"force_disable": true}}`
        header Content-Type application/json
        header Access-Control-Allow-Origin *
    }
    handle {
        root * /var/www/cinny
        @nocache path /config.json /index.html /manifest.json /sw.js
        header @nocache Cache-Control "no-cache, no-store, must-revalidate"
        try_files {path} /index.html
        file_server
    }
}

vojo.chat:8448 {
    reverse_proxy synapse:8008
}

synapse/homeserver.yaml
# Configuration file for Synapse.
#
# This is a YAML file: see [1] for a quick introduction. Note in particular
# that *indentation is important*: all the elements of a list or dictionary
# should have the same indentation.
#
# [1] https://docs.ansible.com/ansible/latest/reference_appendices/YAMLSyntax.html
#
# For more information on how to configure Synapse, including a complete accounting of
# each option, go to docs/usage/configuration/config_documentation.md or
# https://element-hq.github.io/synapse/latest/usage/configuration/config_documentation.html
server_name: "vojo.chat"
pid_file: /data/homeserver.pid
listeners:
  - port: 8008
    resources:
    - compress: false
      names:
      - client
      - federation
    tls: false
    type: http
    x_forwarded: true
  - port: 9000
    type: metrics
    bind_addresses: ['0.0.0.0']
database:
  name: psycopg2
  args:
    user: synapse
    password: DfgoeFDgr12
    database: synapse
    host: postgres
    cp_min: 5
    cp_max: 10
push:
  enabled: true
  include_content: true
log_config: "/data/vojo.chat.log.config"
media_store_path: /data/media_store
registration_shared_secret: ""
report_stats: false
macaroon_secret_key: ""
form_secret: ""
signing_key_path: "/data/vojo.chat.signing.key"
trusted_key_servers:
  - server_name: "matrix.org"
enable_registration: true
enable_registration_without_verification: true
enable_metrics: true
turn_uris:
  - "turn:vojo.chat:3478?transport=udp"
  - "turn:vojo.chat:3478?transport=tcp"
turn_shared_secret: ""
turn_user_lifetime: 86400000
turn_allow_guests: false
encryption_enabled_by_default_for_room_type: "off"
app_service_config_files:
  - /data/telegram-registration.yaml
federation_ip_range_whitelist:
  - '172.18.0.0/16'
ip_range_whitelist:
  - '172.18.0.0/16'