first pass

tuwunel/tuwunel.toml

@@ -0,0 +1,21 @@
+[global]
+# This value is overridden at runtime by TUWUNEL_SERVER_NAME in docker-compose.yml,
+# which pulls from DOMAIN_NAME in your .env. You do not need to edit this file.
+server_name = "your.domain"
+
+database_path = "/var/lib/tuwunel/db"
+port = 6167
+address = "0.0.0.0"
+
+allow_registration = false
+allow_federation = true
+
+max_request_size = 20_000_000
+trusted_servers = ["matrix.org"]
+
+# Hardening
+allow_inbound_profile_lookup_federation_requests = false
+allow_device_name_federation = false
+encryption_enabled_by_default_for_room_type = "all"
+
+turn_ttl = 86400