# matrix
running on docker swarm, domiciled on [[net:sys:paprika]].

`@{username}:canidae.systems`
## access

point your matrix client's homeserver at `https://matrix.canidae.systems`. authentication is provided through [[net:srv:keycloak]] over [saml](https://github.com/matrix-org/synapse/blob/a743bf46949e851c9a10d8e01a138659f3af2484/docs/sample_config.yaml#L1499).

{{:net:srv:matrix:element_homeserver.png?nolink&400|}}

username is shared with keycloak and can't be separately changed, but display name is freely changeable after first login.

direct account provisioning is not available.

## delegation
(see [Resolving server keys](https://spec.matrix.org/unstable/server-server-api/#resolving-server-names))

`canidae.systems` is declared as the `delegated_hostname` through an SRV record at `_matrix._tcp.canidae.systems`.

```
$ dig +short SRV _matrix._tcp.canidae.systems
1 10 8443 matrix.canidae.systems.
```

[/.well-known/matrix/server](https://canidae.systems/.well-known/matrix/server) and [/.well-known/matrix/client](https://canidae.systems/.well-known/matrix/client) are also used for HTTP-based delegation <sup>[(docs)](https://spec.matrix.org/latest/client-server-api/#well-known-uri)</sup> against the same endpoint.

`matrix.canidae.systems.` was selected to ensure consistency once this service is ready for [[unlobito>projects/floatingdomicile]] but this currently points to [[net:sys:paprika]].