k3s/documentation/user-facing/communication-and-security/matrix.md
2026-07-23 18:24:39 -04:00

2.4 KiB

Matrix — Chat, Voice & Video Calls

Matrix is an open standard for decentralized, end-to-end encrypted messaging. The Nest runs Synapse as the homeserver, with MAS for authentication and LiveKit for real-time voice/video calls.

Access

Service URL Purpose
Synapse (Chat) https://starling.mynest.love Send messages, join rooms
MAS (Auth) https://mas.mynest.love OAuth2 / passkey authentication
Matrix RTC https://matrix-rtc.mynest.love Voice and video calls

Features

  • End-to-end encrypted messaging
  • Group rooms with file sharing
  • Real-time voice and video calls via WebRTC
  • Federation — connect to other Matrix homeservers
  • Bot ecosystem for automation (including The Nest's access bot)

Getting Started

  1. Open https://starling.mynest.love in your browser or use a Matrix client app.
  2. Click Sign In and choose Sign in with The Nest.
  3. You'll be redirected to sso.mynest.love for passkey authentication.
  4. Once authenticated, you're back in Matrix — ready to chat!
  • Element Web (browser): https://app.element.io
  • Element X (mobile): iOS and Android
  • Nheko (desktop): Windows, macOS, Linux
  • SchildiChat (alternative web client)

Voice & Video Calls

Matrix RTC uses LiveKit for WebRTC signaling and media relay. To join a call:

  1. Open any Matrix room with an active call.
  2. Click the Call button in the room header.
  3. The call connects via https://matrix-rtc.mynest.love — no additional setup needed.

Tips

  • Passkey login: You'll only need your passkey for initial authentication. Subsequent logins use your client's stored session.
  • Account recovery: If you lose all passkeys, contact an admin via Matrix (@nest:starling.mynest.love) with your registered email for recovery.
  • Federation: This homeserver is federated. You can message users on other Matrix servers (e.g., @user:matrix.org).
  • Keycloak — Powers passkey authentication via MAS
  • Nest Matrix Bot — The @access-bot used for service access requests

TODO: Add screenshot of Element Web with a sample room open.