matrix: Update synapse to 1.59.1

roles/matrix/defaults/main.yml

@@ -20,13 +20,9 @@ matrix_nginx_config:
       - "~ ^/_matrix/federation/v1/query/"
       - "~ ^/_matrix/federation/v1/make_join/"
       - "~ ^/_matrix/federation/v1/make_leave/"
-      - "~ ^/_matrix/federation/v1/send_join/"
-      - "~ ^/_matrix/federation/v2/send_join/"
-      - "~ ^/_matrix/federation/v1/send_leave/"
-      - "~ ^/_matrix/federation/v2/send_leave/"
-      - "~ ^/_matrix/federation/v1/invite/"
-      - "~ ^/_matrix/federation/v2/invite/"
-      - "~ ^/_matrix/federation/v1/query_auth/"
+      - "~ ^/_matrix/federation/(v1|v2)/send_join/"
+      - "~ ^/_matrix/federation/(v1|v2)/send_leave/"
+      - "~ ^/_matrix/federation/(v1|v2)/invite/"
       - "~ ^/_matrix/federation/v1/event_auth/"
       - "~ ^/_matrix/federation/v1/exchange_third_party_invite/"
       - "~ ^/_matrix/federation/v1/user/devices/"

roles/matrix/files/worker-appservice.yaml

 worker_name: appservice
-worker_app: synapse.app.appservice
+worker_app: synapse.app.generic_worker
 worker_listeners:
   - port: 8020
     type: metrics

roles/matrix/tasks/main.yml

@@ -77,7 +77,7 @@
 - name: install synapse
   pip:
     name:
-      - 'matrix-synapse[postgres,systemd,url_preview,redis,oidc]==1.58.0'
+      - 'matrix-synapse[postgres,systemd,url_preview,redis,oidc]==1.59.1'
     state: latest
     extra_args: '--upgrade-strategy=eager'
     virtualenv: /var/lib/synapse/venv

roles/matrix/templates/homeserver.yaml.j2

@@ -416,6 +416,11 @@ manhole_settings:
 # sign up in a short space of time never to return after their initial
 # session.
 #
+# The option `mau_appservice_trial_days` is similar to `mau_trial_days`, but
+# applies a different trial number if the user was registered by an appservice.
+# A value of 0 means no trial days are applied. Appservices not listed in this
+# dictionary use the value of `mau_trial_days` instead.
+#
 # 'mau_limit_alerting' is a means of limiting client side alerting
 # should the mau limit be reached. This is useful for small instances
 # where the admin has 5 mau seats (say) for 5 specific people and no
@@ -426,6 +431,8 @@ manhole_settings:
 #max_mau_value: 50
 #mau_trial_days: 2
 #mau_limit_alerting: false
+#mau_appservice_trial_days:
+#  "appservice-id": 1
 
 # If enabled, the metrics for the number of monthly active users will
 # be populated, however no one will be limited. If limit_usage_by_mau
@@ -718,11 +725,11 @@ federation_metrics_domains:
 #
 #allow_profile_lookup_over_federation: false
 
-# Uncomment to disable device display name lookup over federation. By default, the
-# Federation API allows other homeservers to obtain device display names of any user
-# on this homeserver. Defaults to 'true'.
+# Uncomment to allow device display name lookup over federation. By default, the
+# Federation API prevents other homeservers from obtaining the display names of
+# user devices on this homeserver. Defaults to 'false'.
 #
-#allow_device_name_lookup_over_federation: false
+#allow_device_name_lookup_over_federation: true
 
 
 ## Caching ##
@@ -1343,6 +1350,12 @@ turn_shared_secret: "{{ vault_matrix_secrets.turn_shared_secret }}"
 #
 #registration_requires_token: true
 
+# Allow users to submit a token during registration to bypass any required 3pid
+# steps configured in `registrations_require_3pid`.
+# Defaults to false, requiring that registration tokens (if enabled) complete a 3pid flow.
+#
+#enable_registration_token_3pid_bypass: false
+
 # If set, allows registration of standard or admin accounts by anyone who
 # has the shared secret, even if registration is otherwise disabled.
 #
@@ -2745,7 +2758,7 @@ worker_replication_http_port: 9093
 # Uncomment if using a federation sender worker.
 #
 send_federation: false
-notify_appservices: false
+notify_appservices_from_worker: appservice
 
 # It is possible to run multiple federation sender workers, in which case the
 # work is balanced across them.