synapse-diaspora-auth 0.2.2

PostgreSQL

It is recommended to create a seperate user for synapse in the postgres database, with read-only access to <database>.

To do that, first login to postgres as the root user:

sudo -u postgres psql <database>

then, run these commands:

CREATE user <db_user> WITH password '<db_password>';
GRANT CONNECT ON DATABASE <database> TO <db_user>;
GRANT SELECT ON users TO <db_user>;

MySQL

The commands are almost the same in MySQL:

login to MySQL as root:

sudo mysql -u root

Then run these queries:

CREATE user '<db_user>'@'localhost' WITH password '<db_password>';
GRANT SELECT ON <database>.users TO '<db_user>'@'localhost';

And you will be good to go!

Installation

Follow the instructions here

Configuration & Setup

Follow this.

Basically, if you used the debian package, you just need to set up the matrix.domain first.

And then, add these lines to mxisd.yaml:

sql:
  enabled: true
  type: mysql
  connection: "//<HOST>/<DATABASE>?user=<USERNAME>&password=<PASSWORD>"
  identity:
    type: 'uid'
    query: "select (case when ?='email' then username else null end) as uid from users where email=?"

Where <HOST>, <DATABASE>, <USERNAME> and <PASSWORD> are your database host, diaspora database, user and password you created when you set up database for synapse-diaspora-auth

Now follow the steps given here. ie, forward the /_matrix/client/r0/login endpoint to mxisd and add

dns.overwrite.homeserver.client:
  - name: '<DOMAIN>'
    value: 'http://localhost:8008'

where <DOMAIN> is your matrix server name.

An Apache2 reverse proxy example is already provided here. An example nginx configuration would be this:

location /_matrix/client/r0/login {
    proxy_pass http://localhost:8090/_matrix/client/r0/login;
    proxy_set_header Host $host;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
}

Make sure to put this above other matrix reverse proxy directives. And Congrats! You now have a competely integrated synapse - diaspora setup! :D