[Pkg-matrix-maintainers] Bug#955974: matrix-synapse: Increasing max_upload_size

[James Valleroy]

Package: matrix-synapse
Version: 1.12.0-1
Severity: wishlist

Dear Maintainer,

For FreedomBox, we have set max_upload_size to 100M, since about 3 years ago. I wonder if it would make sense to change the default from 10M to 100M.

Please consider adopting this as default or making it configurable with a low/medium priority debconf setting.


-- System Information:
Debian Release: bullseye/sid
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: amd64 (x86_64)

Kernel: Linux 5.4.0-4-amd64 (SMP w/1 CPU core)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages matrix-synapse depends on:
ii  adduser                    3.118
ii  debconf [debconf-2.0]      1.5.73
ii  libjs-jquery               3.3.1~dfsg-3
ii  libpython3-stdlib          3.8.2-2
ii  lsb-base                   11.1.0
ii  python3                    3.8.2-2
ii  python3-attr               19.3.0-2
ii  python3-bcrypt             3.1.7-2+b1
ii  python3-bleach             3.1.4-1
ii  python3-canonicaljson      1.1.4-3
ii  python3-daemonize          2.4.7-4
ii  python3-distutils          3.8.2-2
ii  python3-frozendict         1.2-2
ii  python3-idna               2.8-1
ii  python3-jinja2             2.10.1-2
ii  python3-jsonschema         3.0.2-4
ii  python3-lxml               4.5.0-1
ii  python3-msgpack            0.6.2-1
ii  python3-nacl               1.3.0-5
ii  python3-netaddr            0.7.19-4
ii  python3-openssl            19.0.0-1
ii  python3-phonenumbers       8.9.10-2
ii  python3-pil                6.2.1-2+b1
ii  python3-prometheus-client  0.7.1-1.1
ii  python3-pyasn1             0.4.2-3
ii  python3-pyasn1-modules     0.2.1-0.2
ii  python3-pymacaroons        0.13.0-3
ii  python3-service-identity   18.1.0-5
ii  python3-signedjson         1.1.0-1
ii  python3-six                1.14.0-2
ii  python3-sortedcontainers   2.1.0-2
ii  python3-systemd            234-3+b1
ii  python3-treq               18.6.0-0.2
ii  python3-twisted            18.9.0-10
ii  python3-typing-extensions  3.7.4.1-1
ii  python3-unpaddedbase64     1.1.0-5
ii  python3-yaml               5.3.1-1

Versions of packages matrix-synapse recommends:
ii  python3-psycopg2  2.8.4-2

Versions of packages matrix-synapse suggests:
pn  python3-txacme  <none>

-- Configuration Files:
/etc/matrix-synapse/homeserver.yaml changed:
allow_guest_access: false
app_service_config_files: []
bcrypt_rounds: 12
database:
  args: {database: /var/lib/matrix-synapse/homeserver.db}
  name: sqlite3
dynamic_thumbnails: false
enable_metrics: false
enable_registration: false
enable_registration_captcha: false
event_cache_size: 10K
expire_access_token: false
federation_rc_concurrent: 3
federation_rc_reject_limit: 50
federation_rc_sleep_delay: 500
federation_rc_sleep_limit: 10
federation_rc_window_size: 1000
key_refresh_interval: 1d
listeners:
- bind_addresses: ['::', 0.0.0.0]
  port: 8448
  resources:
  - compress: true
    names: [client, webclient]
  - compress: false
    names: [federation]
  tls: true
  type: http
  x_forwarded: false
- bind_address: 127.0.0.1
  port: 8008
  resources:
  - compress: true
    names: [client, webclient]
  - compress: false
    names: [federation]
  tls: false
  type: http
  x_forwarded: false
log_config: /etc/matrix-synapse/log.yaml
max_image_pixels: 32M
max_spider_size: 10M
max_upload_size: 100M
media_store_path: /var/lib/matrix-synapse/media
no_tls: false
old_signing_keys: {}
password_config: {enabled: true}
password_providers:
- config:
    attributes: {mail: '', name: uid, uid: uid}
    base: ou=users,dc=thisbox
    enabled: true
    start_tls: false
    uri: ldap://localhost:389
  module: ldap_auth_provider.LdapAuthProvider
perspectives:
  servers:
    matrix.org:
      verify_keys:
        ed25519:auto: {key: ...}
pid_file: /var/run/matrix-synapse.pid
rc_message_burst_count: 10.0
rc_messages_per_second: 0.2
recaptcha_private_key: YOUR_PRIVATE_KEY
recaptcha_public_key: YOUR_PUBLIC_KEY
recaptcha_siteverify_api: https://www.google.com/recaptcha/api/siteverify
room_invite_state_types: [m.room.join_rules, m.room.canonical_alias, m.room.avatar,
  m.room.name]
signing_key_path: /etc/matrix-synapse/homeserver.signing.key
soft_file_limit: 0
thumbnail_sizes:
- {height: 32, method: crop, width: 32}
- {height: 96, method: crop, width: 96}
- {height: 240, method: scale, width: 320}
- {height: 480, method: scale, width: 640}
- {height: 600, method: scale, width: 800}
tls_certificate_path: /etc/matrix-synapse/homeserver.tls.crt
tls_dh_params_path: /etc/matrix-synapse/homeserver.tls.dh
tls_private_key_path: /etc/matrix-synapse/homeserver.tls.key
trusted_third_party_id_servers: [matrix.org, vector.im]
turn_shared_secret: YOUR_SHARED_SECRET
turn_uris: []
turn_user_lifetime: 1h
url_preview_enabled: false
user_creation_max_duration: 1209600000
web_client: false


-- debconf information:
* matrix-synapse/server-name: ...
* matrix-synapse/report-stats: true