hachyderm.io is one of the many independent Mastodon servers you can use to participate in the fediverse.
Hachyderm is a safe space, LGBTQIA+ and BLM, primarily comprised of tech industry professionals world wide. Note that many non-user account types have restrictions - please see our About page.

Administered by:

Server stats:

8.9K
active users

#synapse

4 posts4 participants0 posts today

So, having a home #k8s cluster something about Posgres HA has been bugging me a lot. When there's an electric blackout (this is #Spain after all), all the pods go down. But what happens with Postgres is that the replicas go into a process to sync and elect a new master, and this takes time.

Meanwhile, the pgpool will give successful database connections to apps in pods, but only read-only.

What happens with an app like #Matrix #Synapse is that I think it gets database connections in a pool at start-up, and as it succeeds, it just continues. However, when it actually tries to make updates and inserts, it will get errors, but now it will only log them; they aren't fatal. Or would log them unless the logs were by default off because of privacy and security.

The initial read-only database connections are never upgraded to read-write because the application doesn't expect this kind of a failure, even when the new master is chosen.

Meanwhile the Matrix server continues in a highly degraded mode without being able to persist messages sent. It will only be able to relay them to currently connected online clients. This leads to users getting diverging views to the messages on channels.

I solved this by adding an initContainer to check for read-write connection to Postgres before the Synapse pod start-up, but it's a hack.

Our chat.trom.tf (Matrix/Synapse) has become very difficult to manage - growing database, not an easy way to prevent bots from registering, or others from abusing our service.

For now we have closed the registrations and only accept them via requests. We have 460 users but we are thinking to perhaps shut down the entire service this year.

Too much work considering anyone can make trade-free accounts with matrix.org or other providers....

We will keep everyone informed about our future plans.

uuuuh was just checking my #dockerCompose services and read that the #Matrix SlidingSync Proxy is not required anymore when using the latest #Synapse and #ElementX

Time to cleanup some things and free up ressources.. 🧹

matrix.org/blog/2024/11/14/mov

You can securely message me via matrix.to/#/@stefan:stefanberg

🏷️ #HomeLab

matrix.org · Sunsetting the Sliding Sync Proxy: Moving to Native SupportBy Will Lewis

As a headsup, I'll likely stop any engagement in the #Matrix ecosystem, seeing the troubling development of #Synapse alternatives and the massive shortcomings of the protocol in regards to community moderation / defense against spam waves. In particular, I'm planning to shutdown my selfhosted conduwuit instance, and continue using my matrix.org account only for communities where Matrix is pretty much required. I briefly considered migrating to Grapevine, but I don't have the energy.

oh look, another #fintech bankruptcy involving Evolve Bank & Trust.

some other fun places Evolve has popped up:

1. issuer of #FTX and #BlockFi debit cards (before those companies blew up and customers lost all their money)
2. #GeorgeSantos and #AndyOgles held their campaign money at Evolve
3. #Synapse bankruptcy which cost customers of a bunch of fintech "banks" like #Yotta most if not all of their money
4. Partnered with "anti-woke" fintech #GloriFi
5. Got hacked by Russia midway through Synapse bankruptcy proceedings
6. Anonymous crypto debit card issuer for #ZELF
7. Frequently found to be the bank used by #pigbutchering fraudsters
8. Sanctioned by federal reserve for #moneylaundering

The fact that Evolve has not been shut down is insane. Banking system cannot survive if these kinds of bad actors roam free like the wind.

* more on Evolve: fintechbusinessweekly.substack
* even more: fintechbusinessweekly.substack

Just setup the latest element w/ embedded element call, lk-jwt-service and livekit and now have fully self hosted videoconferencing in matrix.

Documentation and implementation since yesterday is at a point where it's easy to follow and deploy w/o having to host a separate element call web service.

I'm a bit concerned about abuse potential, for now I've locked down lk-jwt-service w/ haproxy to only talk to users of my local homeserver.

Parked near a lake.

Beautiful night sky :)

These are the places I love the most. Kinda alone. Nature. Peaceful.

Today we got another Abuse report from the hosting company. I think I am quite sure there was something bad with our server, namely with our Synapse (Matrix) server. It was accessing iPs from outside every second or so. Lots and lots of requests. After investigating we realized we had around 500 guest users. These users do not need an email account/registration to be part of the server. We enabled that a while ago. Bad decision.

We nuked them all today. Now hopefully that was the issue and many of these were bots spamming other Matrix servers and users.

We need to think well about the services we provide for TROM.tf because they can be abused...

Hopefully this fixes the issue with the hosting.

These days/weeks I have to work on a new WebApe project, to make some money, so I will have to delay any creative work I planned to do. But if this new project can be done then I will get more monthly financial support, which is something I really need.

And after it is done I can think of new content to create for TROM.

I wish TROM had enough financial support so I can only focus on TROM... tromsite.com/donate

But well.

Anyway, we will stay in this place for a few days so I can do some work. We have unlimited internet and power from the sun. And we will post new videos here videos.trom.tf/c/tromhome/vide… - new one tomorrow :)

#motorhome #travel #matrix #synapse #spain #campervan #vanlife #federation #travel #nature #astrophotography

Okay, so here's a / question that I am far too tired to find the answer to:

If i have more than one user on my server, and they both go to a room, do I store duplicates of t hat room, one for each user? Or is it stored on my homeserver in such a way that both can grab it and decrypt it?