[tor-onions] Matrix/Synapse as Onion Service

[shadow]

Hey Silva,

sorry for returning that late.

I wanted to gather information if someone of the operators implemented
it successfully.

I haven't tried it yet, but from what I read about the matrix
architecture, the design is heavily bound to the url, e.g.
my-matrix-server.org

If you would create an onion service with an onion url, the
matrix/synpase service might not be able to handle it correct, because
it won't listen to it / you can't specify it.

For example, if you use the element desktop client, you can specify your
username username e.g. myuser at my-matrix-server.org. But you can't
specify any more connection details, such as connect via
my-user at onionv3url.onion. This is one problem :)

You may can work around this and add an onion service to the web
interface of your matrix server, e.g. element.my-matrix-server.org. So
people might be able to chat via an onion service on the web interface,
but for the desktop client it does not seem to be possible.


But I may just need to try it out and see what roadblocks come up, to
answer your question in a proper way :)

cheers, shadow



On 01.02.21 18:00, Silvia/Hiro wrote:
> Hello,
> 
> On 1/31/21 5:31 PM, shadow wrote:
>> Hey all fellow list members,
>>
>> does anyone of you has been able to set up Matrix / Synapse / Element as
>> an onion service?
>>
>> There are are open tickets regarding this:
>> * https://github.com/matrix-org/synapse/issues/5152
>>
>> and also a Cloudflare level implementation:
>> https://blog.cloudflare.com/cloudflare-onion-service/
>>
>> But I wonder if anyone of you already set it up and what your experience
>> have been with it. To me it looks like, that there are multiple problems
>> and several layers (depending on your Matrix Setup). For example if you
>> use the ansible roles for setting up matrix in a docker environment
>> (https://github.com/spantaleev/matrix-docker-ansible-deploy)
>>
> 
> I must say I haven't setup matrix but onions do work in docker environments.
> What issues have you experienced specifically?
> 
> Cheers,
> -hiro
> 
>> Have a nice sunday afternoon,
>>
>> shadow // systemli.org
>>
>>
>> _______________________________________________
>> tor-onions mailing list
>> tor-onions at lists.torproject.org
>> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-onions
>>

-- 
best regards | viele Gruesse, shadow at systemli.org

receive my key:
gpg --keyserver zimmermann.mayfirst.org --recv-keys 0x5C6B6ED4248C1F32


-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_signature
Type: application/pgp-signature
Size: 840 bytes
Desc: OpenPGP digital signature
URL: <http://lists.torproject.org/pipermail/tor-onions/attachments/20210710/e505ac1d/attachment.sig>