Matrix Synapse በVPS ላይ self-host ማድረግ: የራስዎ encrypted፣ federated chat server

Centralized chat apps ማንነትዎን፣ contactsዎን እና message historyዎን ይይዛሉ — እና ማንኛውንም ሊቆልፉ ይችላሉ። Matrix ለend-to-end encrypted messaging ክፍት፣ federated protocol ነው፣ እና Synapse reference homeserverው ነው። በVPS ላይ ያሂዱት እና accountዎ፣ rooms እና history እርስዎ በሚቆጣጠሩት server ላይ ይኖራሉ — ወደ ሌሎች networks bridges እና platform gatekeeper የለም። serverን በcrypto ይክፈሉ፣ KYC የለም።

Synapse ምን እንደሚፈልግ

• dedicated IPv4፣ domain እና HTTPS። clients https://matrix.yourdomain.com ይጠቀማሉ እና federation port 8448 ይጠቀማል — ስለዚህ domain፣ ትክክለኛ TLS እና inbound ports ይፈልጋሉ፣ dedicated-IP plan። NAT plans inbound አይወስዱም። Small ወይም Medium plan ምክንያታዊ ጅምር ነው።
• ለfederation + Postgres RAM። Synapse ከstatic site የበለጠ memory ይጠቀማል፤ ተጨማሪ RAM እየfederate እና rooms እያደጉ responsive ያደርገዋል።
• ለmedia እና history disk። diskን ወደ uploads እና message retention ይመዘኑ።

ያዋቅሩት (Ubuntu 24.04፣ Docker)

# docker-compose.yml — Matrix Synapse + PostgreSQL (client API proxied on 443, federation 8448)
services:
  synapse:
    image: matrixdotorg/synapse:latest
    restart: always
    environment:
      SYNAPSE_SERVER_NAME: yourdomain.com
      SYNAPSE_REPORT_STATS: "no"
    volumes: ["/srv/synapse:/data"]
    ports:
      - "127.0.0.1:8008:8008"   # client API (proxied by Caddy)
      - "8448:8448"             # server-to-server federation
    depends_on: [db]
  db:
    image: postgres:16-alpine
    restart: always
    environment:
      POSTGRES_USER: synapse
      POSTGRES_PASSWORD: change-me-strong
      POSTGRES_DB: synapse
      POSTGRES_INITDB_ARGS: "--encoding=UTF8 --locale=C"
    volumes: ["/srv/synapse-db:/var/lib/postgresql/data"]

ከclient API ፊት TLS reverse proxy ያስቀምጡ:

# TLS + reverse proxy for the client API; matrix.yourdomain.com resolves to your dedicated IP
apt install -y caddy
echo 'matrix.yourdomain.com { reverse_proxy 127.0.0.1:8008 }' > /etc/caddy/Caddyfile
systemctl restart caddy && ufw allow 80,443,8448/tcp

configን ይፍጠሩ፣ የመጀመሪያ userዎን በregister_new_matrix_user ይፍጠሩ፣ ከዚያ ወደ matrix.yourdomain.com ከተመራ Element (web/desktop/mobile) ይግቡ — የሚያዙ እና የሚfederate chat።

የእርስዎ ያድርጉት

• End-to-end encryption per room፤ እንደoperator ሊነበብ የሚችል ምንም አይይዙም።
• Federation policy — open፣ invite-only፣ ወይም የተዘጋ private server።
• Bridges ወደ IRC፣ Telegram፣ Signal እና ተጨማሪ፤ voice/video በElement Call።
• Postgresን በlocalhost ያቆዩ፤ 443 (client) እና 8448 (federation) ያጋልጡ።

ለMatrix Synapse ለምን EQVPS

• dedicated IPv4 ከ$8/ወር፣ domain + HTTPS-friendly፣ ሁሉም ports፣ self-service rDNS።
• EU locations (ጀርመን፣ Finland) — ንፁህ routes፣ እውነተኛ data-protection law።
• KYC የለም፣ crypto payment። ለመመዝገብ ኢሜይል፣ ለመክፈል USDC/USDT — ለprivate፣ federated chat ተስማሚ።
• Root በ~60 ሰከንድ፣ NVMe። stackን ያምጡ፣ Caddy ያክሉ፣ እና homeserverዎ live ነው።

Nextcloud self-host ያድርጉ (files፣ calendar) → · Anonymous VPS hosting ተብራርቷል →