Draft: full id service

.gitignore

@@ -4,3 +4,4 @@ node_modules/
 packages/*/example/*.js*
 *.map
 .nx/
+packages/matrix-identity-server/matrix-server/synapse-data

packages/matrix-identity-server/matrix-server/.env

@@ -0,0 +1,2 @@
+export UID=${SUDO_UID:-$(id --user)}
+export GID=${SUDO_GID:-$(id --group)}

packages/matrix-identity-server/matrix-server/README.md

@@ -0,0 +1,49 @@
+# Matrix-Synapse server for tests
+
+This repository launches a local Matrix server named "matrix.example.com".
+
+## Setup
+
+First, you need to include DNS names. To do this, just add this line into your
+`/etc/hosts` file:
+
+```
+127.0.0.1  auth.example.com matrix.example.com tom.example.com
+```
+
+To initialize the server, simple launch `./init`
+
+## Run server
+
+Launch `./run`. To see logs:
+ * SSO logs: `docker compose logs auth`
+ * Synapse logs are in `synapse-data/homeserver.log`
+
+Server runs on https://matrix.example.com/ (API only).
+
+### Available accounts
+
+This repo uses the "Demo" interface of [LemonLDAP::NG](https://lemonldap-ng.org/)
+which provides 3 demon accounts: **dwho**, **rsmith** and **rtyler**.
+Password is the login.
+
+## Test the server
+
+You can use any Matrix client, but to just test is server is up:
+ * Download **llng** tool from [Simple OIDC client repo](https://github.com/linagora/simple-oidc-client)
+ * Launch the following command
+```shell
+llng --llng-server auth.example.com --matrix-server matrix.example.com:443 --login dwho --password dwho matrix_token
+```
+
+It will authenticate using the dwho account, then authenticate to Matrix, then get a matrix `access_token`
+
+To get a federation `access_token`, reuse the result of previous command with `matrix_federation_token` subcommand:
+
+```shell
+llng --llng-server auth.example.com --matrix-server matrix.example.com:443 --login dwho --password dwho matrix_federation_token syt_ZHdobw_JswjzYCRQiPxhPJPAfbj_15jQrD
+```
+
+## Stop server
+
+Launch `./stop` or `docker-compose down`

packages/matrix-identity-server/matrix-server/docker-compose.yml

@@ -0,0 +1,40 @@
+version: "3.4"
+
+services:
+  synapse:
+    image: matrixdotorg/synapse:latest
+    container_name: synapse
+    hostname: matrix.example.com
+    volumes:
+      - ./synapse-data:/data
+      - ./ssl/ca-cert.pem:/etc/ssl/certs/ca-cert.pem
+      - ./ssl/9da13359.0:/etc/ssl/certs/9da13359.0
+    environment:
+      - SYNAPSE_SERVER_NAME=matrix.example.com
+      - SYNAPSE_REPORT_STATS=no
+      - UID=${MYUID}
+      - GID=${MYGID}
+    depends_on:
+      auth:
+        condition: service_started
+
+  auth:
+    image: yadd/lemonldap-ng-portal
+    container_name: auth
+    hostname: auth.example.com
+    volumes:
+      - ./lemon/lmConf-1.json:/var/lib/lemonldap-ng/conf/lmConf-1.json
+      - ./lemon/matrix-vhost.conf:/etc/nginx/sites-enabled/matrix.conf
+      - ./lemon/ssl.conf:/etc/nginx/sites-enabled/0000default.conf
+      - ./ssl:/etc/nginx/ssl
+    ports:
+      - 80:80
+      - 443:443
+      - 8008:8008
+      - 8448:8448
+    environment:
+      - SSODOMAIN=example.com
+      - PORTAL=https://auth.example.com
+      - LOGLEVEL=debug
+      - LOGGER=stderr
+      - USERLOGGER=stderr

packages/matrix-identity-server/matrix-server/init

@@ -0,0 +1,20 @@
+#!/bin/sh
+
+rm -rf synapse-data
+cp -a synapse-ref synapse-data
+
+MYUID=${SUDO_UID:-$(id --user)}
+MYGID=${SUDO_GID:-$(id --group)}
+
+docker-compose down
+docker run -it --rm \
+    -v `pwd`/synapse-data:/data \
+    -e SYNAPSE_SERVER_NAME=matrix.example.com \
+    -e SYNAPSE_REPORT_STATS=no \
+    -e UID=$MYUID \
+    -e GID=$MYGID \
+    matrixdotorg/synapse:latest generate
+
+chmod 644 synapse-data/example.com.signing.key
+mkdir -p synapse-data/media_store
+touch /data/homeserver.log

packages/matrix-identity-server/matrix-server/lemon/fluffychat.conf

@@ -0,0 +1,9 @@
+server {
+  listen 80;
+  server_name fluffychat.example.com;
+  root /var/www/fluffychat;
+  index index.html;
+  location / {
+    try_files $uri $uri/ =404;
+  }
+}