Project

General

Profile

Ungleich Matrix-as-a-Service (MaaS) » History » Version 21

Sanghee Kim, 08/24/2020 05:39 PM

1 1 Timothée Floure
h1. Ungleich Matrix-as-a-Service (MaaS)
2
3 3 Timothée Floure
{{toc}}
4
5 8 Timothée Floure
*%{color:green}This document concerns end-users/customers. See [[The ungleich Matrix infrastructure]] page for server-side documentation.%*
6 1 Timothée Floure
7
h2. Status
8
9 8 Timothée Floure
This document is *in PRODUCTION*
10 2 Timothée Floure
11
h2. Overview
12
13 5 Timothée Floure
"Matrix":https://matrix.org/ is an open and decentralized IM system supporting modern features such as end-to-end encryption, message history, bridging to other networks, VoIP and more. It is based a federated structure, similar to what is done with emails: users use a home server as 'gateway' to the network. Our MaaS offer provides you with such a server as well as an hosted web client, "Riot":https://about.riot.im/.
14 1 Timothée Floure
15 5 Timothée Floure
"Riot's features page"https://about.riot.im/features gives you a good overview of Matrix's possibilities.
16
17
h2. FAQ
18 1 Timothée Floure
19
h3. Q: How many users can I have? What are the resources allocated to my matrix server?
20 3 Timothée Floure
21 1 Timothée Floure
We do not enforce a limit of the number of users: you can do anythign you want as long as you fit the resources allocated to your homeserver. You are provided with 1GB of memory, 1vCPU and 20GB of storage with the base offer, which can be extended on demand (Pricing is the same as ipv6onlyhosting VMs, since that's what we use underneath).
22 5 Timothée Floure
23 3 Timothée Floure
h3. Q: What server name will I get?
24
25 11 Nico Schottelius
You can either use your own domain name (see below) or ask us for $ORGANIZATION.0co2.cloud.
26 1 Timothée Floure
27 2 Timothée Floure
h3. Q: Can I use a custom domain name?
28 3 Timothée Floure
29 11 Nico Schottelius
Yes! You will have to give us three domain names:
30 1 Timothée Floure
31 13 Nico Schottelius
* a) *the homeserver*: this is where the actual server is running - this can be on domain "A" - in case of ungleich we use *ungleich.matrix.ungleich.cloud* and give away *YOURNAME.matrix.ungleich.cloud* for free
32
* b) *the address of the web client* - this is where people with their webbrowser go to - this should be different from "A". Often this is something like *chat.example.org* or *matrix.example.org*. In case of ungleich this domain is *matrix.ungleich.ch.*
33
* c) *the main matrix domain*: the one you use for users and rooms. This is usually your main domain and is different from A. For ungleich this is *ungleich.ch*. Most people will choose their "main domain", for instance *example.org* here.
34 11 Nico Schottelius
35
You will also need to configure 2 files below *the main matrix domain*
36
37 12 Nico Schottelius
- */.well-known/matrix/server* containing *{"m.server": "homeserver:443"}*.
38 11 Nico Schottelius
       Example: <pre>$ curl https://ungleich.ch/.well-known/matrix/server
39 1 Timothée Floure
{"m.server": "ungleich.matrix.ungleich.cloud:443"}</pre>
40 12 Nico Schottelius
   - */.well-known/matrix/client* containing *{ "m.homeserver": { "base_url": "https://homeserver" } }*. Example: <pre>
41 11 Nico Schottelius
curl https://ungleich.ch/.well-known/matrix/client 
42
{ "m.homeserver": { "base_url": "https://ungleich.matrix.ungleich.cloud" } }
43
</pre>
44 1 Timothée Floure
45 15 Nico Schottelius
h3. Q: Why can't I use the same domain for everything?
46
47
The home server should be on a different domain to prevent possible XSS (cross site scripting) attacks.
48
You can find details about it on https://github.com/matrix-org/synapse#security-note.
49
50
For this reason we offer YOURNAME.matrix.ungleich.cloud for free for all homeservers.
51
52 16 Nico Schottelius
h3. Q: How many domains do I need for a standard matrix setup?
53
54
Typically 3 domain names are used:
55
56
* The domain that defines your *room and user names* (for ungleich this is *ungleich.ch*)
57
* The domain that your users type in the web browser to join the chat (for ungleich this is *matrix.ungleich.ch*)
58
* The domain on which your *homeserver* (the server providing the matrix server) is reachable (for ungleich this is *ungleich.matrix.ungleich.cloud*)
59
60
The homeserver needs to be on a different domain than the other two to avoid possible XSS attacks.
61 14 Nico Schottelius
62 1 Timothée Floure
h3. Q: What server implementation and version do you use?
63 2 Timothée Floure
64 3 Timothée Floure
We use the "synapse reference homeserver":https://github.com/matrix-org/synapse/ package "provided by the buster-backports repository":https://packages.debian.org/buster-backports/matrix-synapse.
65 1 Timothée Floure
66
h3. Q: What client can I use? Do you recommend one?
67
68 3 Timothée Floure
We recommend and provide you a web version of the "Riot client":https://about.riot.im/ (desktop and mobile) but you can use "any matrix client":https://matrix.org/clients/.
69 2 Timothée Floure
70 3 Timothée Floure
h3. Q: Can I set option X in synapse/riot?
71 2 Timothée Floure
72 3 Timothée Floure
Yes! Contact the ungleich support with the requested changes, which we will apply to the deployment configuration of your instance.
73 2 Timothée Floure
74 7 Timothée Floure
h3. Q: Do you provide a TURN server for VoIP?
75 3 Timothée Floure
76 6 Timothée Floure
Yes.
77 3 Timothée Floure
78 6 Timothée Floure
h3. Q: What are application services can I use?
79 9 Timothée Floure
80
We support bridging to other services (IRC, Matrix, Telegram, Slack, ...) via "matterbridge":https://github.com/42wim/matterbridge, deployed on demand.
81 1 Timothée Floure
82 10 Timothée Floure
h3. Q: If I do not use an LDAP directory, can I still manage my users?
83 1 Timothée Floure
84
Yes! We provide you with a management UI on https://admin.matrix.ungleich.cloud. You will have to use the full address of your matrix homeserver (e.g. ungleich.matrix.ungleich.cloud).
85 17 Sanghee Kim
86
h3. Q: How can I delete rooms in Matrix?
87
88
To delete a room, simply everybody in the room needs to leave the room. Then the room gets removed from the server. If you are admin, you can kick everybody in the room if you want to force remove the room.
89 18 Sanghee Kim
90
h3. Q: Are video/audio calls in Matrix End-to-end-encrypted(E2EE)?
91
92 19 Sanghee Kim
Video & Phone is handled by a jitsi server by default - matrix adds it as an integration, but does not handle video/audio directly. So the answer is: not E2EE for audio/video.
93 20 Sanghee Kim
94
h3. Q: What kind of registration policy could be implemented for a matrix instance?
95
96
You can easily:
97
98
- Close registrations, create users by hand from the admin UI.
99
- Let anyone register.
100
- Filter registrations on email pattern (e.g. anyone with a @ungleich.ch email address can register).
101
- Use an external source for authentication (e.g. company directory / account system).
102
103
If your use case is in the above list, you can get in touch with our team to find a fitting solution.
104 21 Sanghee Kim
105
h3. Q: Does ungleich have access to my Matrix admin UI? How does my chat content stay private?
106
107
Once you change the initial password we do not have external access to the software anymore but we have access to the underlying server since we manage it: we can read and change things in the database 'by hand' since we have physical access to it. However end-to-end encrypted rooms stay private. The content is encrypted with the user's keys and to us it will be in ciphertext.