v1.148.0-ecad.1

Changes

• Upgrade Synapse base image to v1.148.0
• Use importlib.util.find_spec to locate synapse/api/constants.py dynamically instead of hardcoded Python version path

v1.147.1-ecad.2

Dockerfile hardening and official worker orchestration.

Worker mode (SYNAPSE_WORKERS=true):

• Integrated Element HQ's configure_workers_and_start.py with supervisord, nginx, and in-container redis
• Workers dynamically generated from SYNAPSE_WORKER_TYPES (default: synchrotron:2,event_persister:1,federation_inbound:1)
• Prometheus service discovery at :9469/metrics/service_discovery

Hardening:

• Dropped gcc and pysodium build deps; crypto_auth_provider v0.3 uses PyNaCl (bundled in base image)
• PDU size patch anchored to exact line match with build-time guard
• SSRF protection via federation_ip_range_blacklist

Other:

• Entrypoint rewritten: single mode execs Synapse directly, worker mode execs configure_workers_and_start.py
• Removed static workers/ configs and shared_config.yaml (generated dynamically)
• CI now pushes images on PRs (:pr-N) and branch pushes

docker pull ghcr.io/ecadinfra/beacon-synapse:v1.147.1-ecad.2

v1.147.1-ecad.1

Initial release of beacon-synapse.

Production Matrix homeserver image for Tezos Beacon relay nodes, based on Synapse v1.147.1.

What's included

• Ed25519 crypto auth (crypto_auth_provider.py): Signature-based authentication for Beacon SDK clients, derived from Papers/AirGap beacon-node
• Beacon monitor module (beacon_monitor_module.py): Logfmt observability for room events, membership, and logins
• Beacon info module (beacon_info_module.py): /_synapse/client/beacon/info endpoint exposing region and known servers
• Worker support: 4 generic workers with per-worker Prometheus metrics (ports 19091-19094)
• 1MB PDU size limit: Increased from 64KB default for large Beacon messages
• envsubst config templating: Safe variable substitution at container startup

Image

docker pull ghcr.io/ecadinfra/beacon-synapse:v1.147.1-ecad.1