Element Matrix Client

# Add Element repository key
sudo rpm --import https://packages.element.io/rpm/element-io-archive-keyring.asc

# Add repository (RHEL/CentOS/Rocky/AlmaLinux)
sudo tee /etc/yum.repos.d/element-io.repo << EOF
[element-io]
name=Element
baseurl=https://packages.element.io/rpm/
enabled=1
gpgcheck=1
gpgkey=https://packages.element.io/rpm/element-io-archive-keyring.asc
EOF

# Install Element desktop
sudo dnf update && sudo dnf install -y element-desktop

# Alternative: Install via Flatpak
sudo dnf install -y flatpak
flatpak remote-add --if-not-exists flathub https://dl.flathub.org/repo/flathub.flatpakrepo
flatpak install -y flathub im.riot.Riot

# Install Node.js and npm
sudo dnf install -y nodejs npm nginx

# Create element user
sudo useradd -r -s /bin/false -d /var/lib/element element

# Download and extract Element Web
cd /tmp
wget https://github.com/vector-im/element-web/releases/latest/download/element-web.tar.gz
sudo tar -xzf element-web.tar.gz -C /var/www/
sudo mv /var/www/element-* /var/www/element-web
sudo chown -R element:element /var/www/element-web
sudo chmod -R 755 /var/www/element-web

# Update package lists
sudo apt update

# Install prerequisites
sudo apt install -y wget apt-transport-https

# Add Element repository key
wget -O /tmp/element-io-archive-keyring.asc https://packages.element.io/debian/element-io-archive-keyring.asc
sudo gpg --dearmor -o /usr/share/keyrings/element-io-archive-keyring.gpg /tmp/element-io-archive-keyring.asc

# Add repository
echo "deb [signed-by=/usr/share/keyrings/element-io-archive-keyring.gpg] https://packages.element.io/debian/ default main" | sudo tee /etc/apt/sources.list.d/element-io.list

# Install Element desktop
sudo apt update && sudo apt install -y element-desktop

# Alternative: Install via Snap
sudo apt install -y snapd
sudo snap install element-desktop

# Install Node.js and nginx
sudo apt update && sudo apt install -y nodejs npm nginx

# Create element user
sudo useradd -r -s /bin/false -d /var/lib/element element

# Download and extract Element Web
cd /tmp
wget https://github.com/vector-im/element-web/releases/latest/download/element-web.tar.gz
sudo tar -xzf element-web.tar.gz -C /var/www/
sudo mv /var/www/element-* /var/www/element-web
sudo chown -R element:element /var/www/element-web
sudo chmod -R 755 /var/www/element-web

# Update system packages
sudo pacman -Syu

# Install Element from AUR (requires yay or another AUR helper)
yay -S element-desktop

# Alternative: Install from official repositories
sudo pacman -S element-desktop

# Alternative: Install via Flatpak
sudo pacman -S flatpak
flatpak remote-add --if-not-exists flathub https://dl.flathub.org/repo/flathub.flatpakrepo
flatpak install -y flathub im.riot.Riot

# Install Node.js and nginx
sudo pacman -S nodejs npm nginx

# Create element user
sudo useradd -r -s /bin/false -d /var/lib/element element

# Download and extract Element Web
cd /tmp
wget https://github.com/vector-im/element-web/releases/latest/download/element-web.tar.gz
sudo tar -xzf element-web.tar.gz -C /var/www/
sudo mv /var/www/element-* /var/www/element-web
sudo chown -R element:element /var/www/element-web
sudo chmod -R 755 /var/www/element-web

# Install Node.js and nginx
apk add --no-cache nodejs npm nginx

# Create element user
adduser -D -s /bin/false -h /var/lib/element element

# Download and extract Element Web
cd /tmp
wget https://github.com/vector-im/element-web/releases/latest/download/element-web.tar.gz
tar -xzf element-web.tar.gz -C /var/www/
mv /var/www/element-* /var/www/element-web
chown -R element:element /var/www/element-web
chmod -R 755 /var/www/element-web

# Install via Flatpak
sudo zypper install -y flatpak
flatpak remote-add --if-not-exists flathub https://dl.flathub.org/repo/flathub.flatpakrepo
flatpak install -y flathub im.riot.Riot

# Alternative: Download and install AppImage
wget https://packages.element.io/desktop/install/linux/appimage/element-desktop-latest.AppImage
chmod +x element-desktop-latest.AppImage
sudo mv element-desktop-latest.AppImage /opt/element-desktop.AppImage

# Using Homebrew
brew install --cask element

# Alternative: Download from website
# Visit https://element.io/get-started and download the macOS installer
# Install the downloaded .dmg file

# Using Chocolatey
choco install element-desktop

# Using Winget
winget install Element.Element

# Alternative: Download installer from https://element.io/get-started
# Run the downloaded .exe installer with administrator privileges

# Access Element Web at public instances
# https://app.element.io (official hosted instance)
# https://chat.mozilla.org (Mozilla's instance)
# Or any other public Element Web deployment

# Create system-wide configuration directory
sudo mkdir -p /etc/element

# Create production configuration for desktop client
sudo tee /etc/element/config.json << 'EOF'
{
    "default_server_config": {
        "m.homeserver": {
            "base_url": "https://matrix.yourdomain.com",
            "server_name": "yourdomain.com"
        },
        "m.identity_server": {
            "base_url": "https://identity.yourdomain.com"
        }
    },
    "brand": "Element",
    "integrations_ui_url": "https://scalar.yourdomain.com/",
    "integrations_rest_url": "https://scalar.yourdomain.com/api",
    "integrations_widgets_urls": [
        "https://scalar.yourdomain.com/_matrix/integrations/v1",
        "https://scalar.vector.im/_matrix/integrations/v1"
    ],
    "bug_report_endpoint_url": "https://element.io/bugreports/submit",
    "default_country_code": "US",
    "show_labs_settings": true,
    "features": {
        "feature_spaces": true,
        "feature_thread": true,
        "feature_pinning": true,
        "feature_custom_status": true,
        "feature_polls": true,
        "feature_location_share": true,
        "feature_voice_broadcast": true,
        "feature_video_rooms": true,
        "feature_element_call_video_rooms": true,
        "feature_group_calls": true
    },
    "default_federate": true,
    "default_theme": "light",
    "room_directory": {
        "servers": [
            "yourdomain.com",
            "matrix.org",
            "mozilla.org",
            "kde.org"
        ]
    },
    "enable_presence_by_hs_url": {
        "https://matrix.yourdomain.com": true,
        "https://matrix.org": false
    },
    "terms_and_conditions_links": [
        {"url": "https://yourdomain.com/privacy", "text": "Privacy Policy"},
        {"url": "https://yourdomain.com/terms", "text": "Terms of Service"}
    ],
    "sso_redirect_options": {
        "immediate": false,
        "on_welcome_page": true
    },
    "desktop_specific": {
        "auto_launch": false,
        "auto_hide_menu_bar": false,
        "quit_on_last_window_closed": false
    },
    "voip": {
        "jitsi_domain": "meet.yourdomain.com",
        "jitsi_preferred_domain": "meet.yourdomain.com"
    },
    "element_call": {
        "url": "https://call.yourdomain.com",
        "use_exclusively": false,
        "participant_limit": 8,
        "brand": "Element Call"
    },
    "map_style_url": "https://api.mapbox.com/styles/v1/yourstyle",
    "posthog": {
        "project_api_key": "",
        "api_host": "https://posthog.yourdomain.com",
        "enabled": false
    },
    "sentry": {
        "dsn": "",
        "environment": "production"
    },
    "crypto_enabled": true,
    "cross_signing_enabled": true,
    "key_backup_enabled": true
}
EOF

# Set proper permissions
sudo chmod 644 /etc/element/config.json

# Create user-specific configuration override
mkdir -p ~/.config/Element
ln -sf /etc/element/config.json ~/.config/Element/config.json

# Create security-focused configuration
sudo tee /etc/element/security-config.json << 'EOF'
{
    "security": {
        "encryption": {
            "force_enable": true,
            "blacklist_unverified_devices": true,
            "key_backup_interval": 3600,
            "cross_signing_reset_allowed": false
        },
        "authentication": {
            "password_policy": {
                "min_length": 12,
                "require_uppercase": true,
                "require_lowercase": true,
                "require_number": true,
                "require_symbol": true
            },
            "session_timeout": 28800,
            "idle_timeout": 1800,
            "max_sessions_per_user": 5
        },
        "content_scanner": {
            "enabled": true,
            "endpoint": "https://scanner.yourdomain.com",
            "max_file_size": 52428800,
            "scan_encrypted_files": false
        },
        "audit": {
            "enabled": true,
            "log_level": "info",
            "log_path": "/var/log/element/audit.log",
            "events_to_log": [
                "login",
                "logout",
                "message_sent",
                "message_deleted",
                "room_created",
                "room_joined",
                "room_left",
                "user_banned",
                "encryption_enabled"
            ]
        }
    },
    "compliance": {
        "data_retention": {
            "enabled": true,
            "default_message_lifetime_days": 365,
            "default_media_lifetime_days": 180,
            "allow_user_override": false
        },
        "gdpr": {
            "enabled": true,
            "data_export_enabled": true,
            "right_to_be_forgotten": true
        }
    }
}
EOF

# Create production Element Web configuration
sudo tee /var/www/element-web/config.json << 'EOF'
{
    "default_server_config": {
        "m.homeserver": {
            "base_url": "https://matrix.yourdomain.com",
            "server_name": "yourdomain.com"
        },
        "m.identity_server": {
            "base_url": "https://identity.yourdomain.com"
        }
    },
    "disable_custom_urls": false,
    "disable_guests": true,
    "disable_login_language_selector": false,
    "disable_3pid_login": false,
    "brand": "Element",
    "integrations_ui_url": "https://scalar.yourdomain.com/",
    "integrations_rest_url": "https://scalar.yourdomain.com/api",
    "integrations_widgets_urls": [
        "https://scalar.yourdomain.com/_matrix/integrations/v1"
    ],
    "bug_report_endpoint_url": "https://element.io/bugreports/submit",
    "uisi_autorageshake_app": "element-auto-uisi",
    "default_country_code": "US",
    "show_labs_settings": true,
    "features": {
        "feature_spaces": true,
        "feature_spaces.video_rooms": true,
        "feature_thread": true,
        "feature_pinning": true,
        "feature_maximised_widgets": true,
        "feature_custom_themes": true,
        "feature_dehydration": true,
        "feature_pseudonymous_analytics_opt_in": false
    },
    "default_federate": true,
    "default_theme": "light",
    "room_directory": {
        "servers": [
            "yourdomain.com",
            "matrix.org",
            "mozilla.org"
        ]
    },
    "welcome_user_id": "@bot:yourdomain.com",
    "piwik": false,
    "enable_presence_by_hs_url": {
        "https://matrix.yourdomain.com": true,
        "https://matrix.org": false
    },
    "terms_and_conditions_links": [
        {"url": "https://yourdomain.com/privacy", "text": "Privacy Policy"},
        {"url": "https://yourdomain.com/terms", "text": "Terms of Service"}
    ],
    "privacy_policy_url": "https://yourdomain.com/privacy",
    "cookie_policy_url": "https://yourdomain.com/cookies",
    "permalinkPrefix": "https://matrix.to",
    "update_base_url": "https://element.yourdomain.com/update/",
    "desktop_builds": {
        "available": true,
        "logo": "https://element.yourdomain.com/logos/element-desktop.svg",
        "url_windows": "https://packages.element.io/desktop/install/win32/x64/Element%20Setup.exe",
        "url_macos": "https://packages.element.io/desktop/install/macos/Element.dmg",
        "url_linux": "https://element.io/download#linux"
    },
    "mobile_builds": {
        "ios": "https://apps.apple.com/app/element/id1083446067",
        "android": "https://play.google.com/store/apps/details?id=im.vector.app",
        "fdroid": "https://f-droid.org/en/packages/im.vector.app/"
    },
    "mobile_guide_toast": true,
    "update_base_url": "https://element.yourdomain.com/update/",
    "jitsi": {
        "preferred_domain": "meet.yourdomain.com",
        "external_api_url": "https://meet.yourdomain.com/external_api.js"
    },
    "element_call": {
        "url": "https://call.yourdomain.com",
        "participant_limit": 8,
        "brand": "Element Call"
    },
    "voip": {
        "obey_asserted_identity": false
    },
    "posthog": {
        "project_api_key": "",
        "api_host": "https://posthog.yourdomain.com"
    },
    "sentry": {
        "dsn": "",
        "environment": "production"
    },
    "analytics_owner": "yourdomain.com",
    "map_style_url": "https://api.mapbox.com/styles/v1/mapbox/streets-v11"
}
EOF

# Set proper ownership and permissions
sudo chown -R element:element /var/www/element-web
sudo chmod 644 /var/www/element-web/config.json

# Create production nginx configuration with enhanced security
sudo tee /etc/nginx/sites-available/element-web << 'EOF'
# Redirect HTTP to HTTPS
server {
    listen 80;
    listen [::]:80;
    server_name element.yourdomain.com;

    location /.well-known/acme-challenge/ {
        root /var/www/certbot;
    }

    location / {
        return 301 https://$server_name$request_uri;
    }
}

# Main HTTPS server
server {
    listen 443 ssl http2;
    listen [::]:443 ssl http2;
    server_name element.yourdomain.com;

    # SSL Configuration
    ssl_certificate /etc/letsencrypt/live/element.yourdomain.com/fullchain.pem;
    ssl_certificate_key /etc/letsencrypt/live/element.yourdomain.com/privkey.pem;
    ssl_trusted_certificate /etc/letsencrypt/live/element.yourdomain.com/chain.pem;

    # Modern SSL configuration
    ssl_protocols TLSv1.2 TLSv1.3;
    ssl_ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384;
    ssl_prefer_server_ciphers off;

    # SSL optimization
    ssl_session_timeout 1d;
    ssl_session_cache shared:SSL:10m;
    ssl_session_tickets off;

    # OCSP stapling
    ssl_stapling on;
    ssl_stapling_verify on;

    # Security headers
    add_header X-Frame-Options "SAMEORIGIN" always;
    add_header X-Content-Type-Options "nosniff" always;
    add_header X-XSS-Protection "1; mode=block" always;
    add_header Referrer-Policy "strict-origin-when-cross-origin" always;
    add_header Strict-Transport-Security "max-age=63072000; includeSubDomains; preload" always;
    add_header Permissions-Policy "camera=(), microphone=(), geolocation=(), payment=()" always;

    # CSP header for Element
    add_header Content-Security-Policy "default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://scalar.vector.im; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; media-src 'self' blob:; connect-src 'self' https://matrix.yourdomain.com wss://matrix.yourdomain.com https://scalar.vector.im https://identity.yourdomain.com; font-src 'self' data:; frame-src 'self' blob: https://scalar.vector.im https://meet.yourdomain.com; frame-ancestors 'self'; base-uri 'self'; form-action 'self'; object-src 'none';" always;

    # Root directory
    root /var/www/element-web;
    index index.html;

    # Gzip compression
    gzip on;
    gzip_vary on;
    gzip_min_length 1024;
    gzip_comp_level 6;
    gzip_types text/plain text/css text/xml text/javascript application/json application/javascript application/xml+rss application/rss+xml application/atom+xml image/svg+xml text/javascript application/vnd.ms-fontobject application/x-font-ttf font/opentype image/x-icon;
    gzip_disable "msie6";

    # Brotli compression (if module available)
    # brotli on;
    # brotli_comp_level 6;
    # brotli_types text/plain text/css text/xml text/javascript application/json application/javascript application/xml+rss application/rss+xml application/atom+xml image/svg+xml;

    # Client-side caching
    location / {
        try_files $uri $uri/ /index.html;

        # Security headers for all responses
        add_header X-Frame-Options "SAMEORIGIN" always;
        add_header X-Content-Type-Options "nosniff" always;
    }

    # Static assets with long cache
    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg|woff|woff2|ttf|eot)$ {
        expires 1y;
        add_header Cache-Control "public, immutable";
        access_log off;
    }

    # Service worker
    location /service-worker.js {
        add_header Cache-Control "no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0";
        expires off;
        access_log off;
    }

    # Deny access to hidden files
    location ~ /\. {
        deny all;
        access_log off;
        log_not_found off;
    }

    # Deny access to backup files
    location ~ ~$ {
        deny all;
        access_log off;
        log_not_found off;
    }

    # Rate limiting
    limit_req_zone $binary_remote_addr zone=element_limit:10m rate=10r/s;
    limit_req zone=element_limit burst=20 nodelay;

    # Client body size limit
    client_max_body_size 100M;

    # Timeouts
    client_body_timeout 60s;
    client_header_timeout 60s;
    send_timeout 60s;

    # Access logging
    access_log /var/log/nginx/element-access.log combined;
    error_log /var/log/nginx/element-error.log warn;
}
EOF

# Enable the site
sudo ln -sf /etc/nginx/sites-available/element-web /etc/nginx/sites-enabled/

# Test and reload nginx
sudo nginx -t && sudo systemctl reload nginx

# Create Apache configuration for Element Web
sudo tee /etc/apache2/sites-available/element-web.conf << 'EOF'
<VirtualHost *:80>
    ServerName element.yourdomain.com
    Redirect permanent / https://element.yourdomain.com/
</VirtualHost>

<VirtualHost *:443>
    ServerName element.yourdomain.com
    DocumentRoot /var/www/element-web

    # SSL Configuration
    SSLEngine on
    SSLCertificateFile /etc/letsencrypt/live/element.yourdomain.com/fullchain.pem
    SSLCertificateKeyFile /etc/letsencrypt/live/element.yourdomain.com/privkey.pem
    SSLCertificateChainFile /etc/letsencrypt/live/element.yourdomain.com/chain.pem

    # Modern SSL settings
    SSLProtocol -all +TLSv1.2 +TLSv1.3
    SSLCipherSuite ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384
    SSLHonorCipherOrder off
    SSLSessionTickets off

    # Security headers
    Header always set X-Frame-Options "SAMEORIGIN"
    Header always set X-Content-Type-Options "nosniff"
    Header always set X-XSS-Protection "1; mode=block"
    Header always set Strict-Transport-Security "max-age=63072000; includeSubDomains; preload"
    Header always set Referrer-Policy "strict-origin-when-cross-origin"

    # CSP Header
    Header always set Content-Security-Policy "default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; connect-src 'self' https://matrix.yourdomain.com wss://matrix.yourdomain.com;"

    # Directory settings
    <Directory /var/www/element-web>
        Options -Indexes +FollowSymLinks
        AllowOverride None
        Require all granted

        # Enable rewrite engine for SPA
        RewriteEngine On
        RewriteCond %{REQUEST_FILENAME} !-f
        RewriteCond %{REQUEST_FILENAME} !-d
        RewriteRule . /index.html [L]
    </Directory>

    # Compression
    <IfModule mod_deflate.c>
        AddOutputFilterByType DEFLATE text/html text/plain text/xml text/css text/javascript application/javascript application/json
    </IfModule>

    # Caching for static assets
    <FilesMatch "\.(js|css|png|jpg|jpeg|gif|ico|svg|woff|woff2)$">
        Header set Cache-Control "max-age=31536000, public, immutable"
    </FilesMatch>

    # Logging
    CustomLog /var/log/apache2/element-access.log combined
    ErrorLog /var/log/apache2/element-error.log
</VirtualHost>
EOF

# Enable required modules
sudo a2enmod ssl headers rewrite deflate

# Enable site
sudo a2ensite element-web

# Test and reload Apache
sudo apache2ctl configtest && sudo systemctl reload apache2

# Create custom themes configuration
sudo tee /var/www/element-web/themes/custom-themes.json << 'EOF'
{
    "themes": {
        "Corporate Dark": {
            "is_dark": true,
            "colors": {
                "accent-color": "#2E7D32",
                "primary-color": "#2E7D32",
                "warning-color": "#FF9800",
                "sidebar-color": "#1A1A1A",
                "roomlist-background-color": "#212121",
                "roomlist-text-color": "#FFFFFF",
                "roomlist-text-secondary-color": "#9E9E9E",
                "roomlist-highlights-color": "#2E7D32",
                "timeline-background-color": "#181818",
                "timeline-text-color": "#FFFFFF",
                "secondary-content": "#9E9E9E",
                "tertiary-content": "#757575",
                "timeline-highlights-color": "#2E7D32"
            }
        },
        "Corporate Light": {
            "is_dark": false,
            "colors": {
                "accent-color": "#1976D2",
                "primary-color": "#1976D2",
                "warning-color": "#FF9800",
                "sidebar-color": "#F5F5F5",
                "roomlist-background-color": "#FFFFFF",
                "roomlist-text-color": "#212121",
                "roomlist-text-secondary-color": "#757575",
                "roomlist-highlights-color": "#1976D2",
                "timeline-background-color": "#FFFFFF",
                "timeline-text-color": "#212121",
                "secondary-content": "#757575",
                "tertiary-content": "#9E9E9E",
                "timeline-highlights-color": "#1976D2"
            }
        }
    }
}
EOF

# Create monitoring configuration
sudo tee /etc/element/monitoring.conf << 'EOF'
# Element Monitoring Configuration

# Prometheus metrics endpoint
METRICS_ENABLED=true
METRICS_PORT=9090
METRICS_PATH=/metrics

# Health check endpoint
HEALTH_CHECK_ENABLED=true
HEALTH_CHECK_PORT=8080
HEALTH_CHECK_PATH=/health

# Logging configuration
LOG_LEVEL=info
LOG_FORMAT=json
LOG_OUTPUT=/var/log/element/element.log
LOG_MAX_SIZE=100M
LOG_MAX_BACKUPS=10
LOG_MAX_AGE=30

# Audit logging
AUDIT_LOG_ENABLED=true
AUDIT_LOG_PATH=/var/log/element/audit.log
AUDIT_LOG_FORMAT=json

# Performance monitoring
PERF_MONITORING_ENABLED=true
PERF_SAMPLE_RATE=0.1
PERF_SLOW_REQUEST_THRESHOLD=1000

# Error tracking
ERROR_TRACKING_ENABLED=true
ERROR_TRACKING_SAMPLE_RATE=1.0
ERROR_TRACKING_ENVIRONMENT=production
EOF

# Create log rotation configuration
sudo tee /etc/logrotate.d/element << 'EOF'
/var/log/element/*.log {
    daily
    rotate 30
    compress
    delaycompress
    missingok
    notifempty
    create 0640 element element
    sharedscripts
    postrotate
        # Send signal to reload logs if needed
        systemctl reload nginx 2>/dev/null || true
    endscript
}
EOF

# Create log directory
sudo mkdir -p /var/log/element
sudo chown element:element /var/log/element
sudo chmod 750 /var/log/element

# Enable nginx service
sudo systemctl enable nginx
sudo systemctl start nginx
sudo systemctl status nginx

# Restart nginx after configuration changes
sudo systemctl reload nginx

# View nginx logs
sudo journalctl -u nginx -f

# Auto-start Element desktop application (user service)
mkdir -p ~/.config/systemd/user
tee ~/.config/systemd/user/element-desktop.service << 'EOF'
[Unit]
Description=Element Desktop
After=graphical-session.target

[Service]
Type=simple
ExecStart=/usr/bin/element-desktop
Restart=on-failure
RestartSec=5

[Install]
WantedBy=default.target
EOF

# Enable user service
systemctl --user enable element-desktop.service
systemctl --user start element-desktop.service

# Start and enable nginx
rc-service nginx start
rc-update add nginx default

# Check service status
rc-service nginx status

# View logs
tail -f /var/log/nginx/access.log /var/log/nginx/error.log

# Element desktop application auto-start
# Add to Login Items via System Preferences > Users & Groups > Login Items
# Or create launch agent

mkdir -p ~/Library/LaunchAgents
tee ~/Library/LaunchAgents/im.riot.Element.plist << 'EOF'
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
    <key>Label</key>
    <string>im.riot.Element</string>
    <key>Program</key>
    <string>/Applications/Element.app/Contents/MacOS/Element</string>
    <key>RunAtLoad</key>
    <true/>
    <key>KeepAlive</key>
    <false/>
</dict>
</plist>
EOF

# Load launch agent
launchctl load ~/Library/LaunchAgents/im.riot.Element.plist

# Element desktop auto-start via Task Scheduler
schtasks /create /tn "Element Desktop" /tr "C:\Users\%USERNAME%\AppData\Local\element-desktop\Element.exe" /sc onlogon /ru %USERNAME%

# Alternative: Registry auto-start entry
reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run" /v "Element" /t REG_SZ /d "C:\Users\%USERNAME%\AppData\Local\element-desktop\Element.exe"

# Check for conflicting processes
ps aux | grep element

# Clear application cache (Linux)
rm -rf ~/.config/Element/Local\ Storage
rm -rf ~/.config/Element/Session\ Storage

# Reset configuration
mv ~/.config/Element ~/.config/Element.backup

# Run with debugging
element-desktop --enable-logging --log-level=debug

# Verify network connectivity
curl -v https://matrix.org/_matrix/client/versions

# Check DNS resolution
nslookup matrix.org

# Test with different homeserver
# Update config.json with known working homeserver

# Clear crypto data (WARNING: will require key re-verification)
# Linux: ~/.config/Element/IndexedDB
# Windows: %APPDATA%\Element\IndexedDB
# macOS: ~/Library/Application Support/Element/IndexedDB

# Export keys before clearing crypto data
# Element Settings > Security & Privacy > Export room keys

# Check nginx error logs
sudo tail -f /var/log/nginx/error.log

# Verify file permissions
sudo chown -R element:element /var/www/element-web
sudo chmod -R 755 /var/www/element-web

# Test config.json validity
cd /var/www/element-web
python3 -m json.tool config.json

# Verify certificate validity
openssl x509 -in /etc/ssl/certs/element.crt -text -noout

# Test SSL configuration
openssl s_client -connect element.yourdomain.com:443

# Obtain Let's Encrypt certificate
sudo certbot --nginx -d element.yourdomain.com

# Check firewall rules for WebRTC ports
sudo ufw allow 49152:65535/udp

# Configure STUN/TURN server in homeserver
# Add to Matrix homeserver config:
# turn_uris: ["turn:yourturnserver.com"]
# turn_shared_secret: "your-shared-secret"

# Monitor Element processes
top -p $(pgrep -d',' element)

# Disable hardware acceleration if causing issues
element-desktop --disable-gpu --disable-hardware-acceleration

# Reduce memory usage by disabling features
# In config.json, disable labs features and integrations

# Test Matrix federation
curl "https://federationtester.matrix.org/api/report?server_name=matrix.org"

# Check proxy settings if behind corporate firewall
export HTTP_PROXY=http://proxy.company.com:8080
export HTTPS_PROXY=https://proxy.company.com:8080

# Verify DNS-over-HTTPS isn't causing issues
systemd-resolve --status

# Linux desktop application logs
~/.config/Element/logs/
journalctl --user -u element-desktop

# Windows desktop application logs
%APPDATA%\Element\logs\

# macOS desktop application logs
~/Library/Logs/Element/

# Nginx logs for Element Web
/var/log/nginx/access.log
/var/log/nginx/error.log

# Browser console for Element Web
# Open browser developer tools (F12) > Console tab

# Security-focused config.json settings
{
    "disable_guests": true,
    "disable_3pid_login": false,
    "disable_custom_urls": true,
    "show_labs_settings": false,
    "features": {
        "feature_cross_signing": "enable"
    },
    "enable_presence_by_hs_url": {
        "https://matrix.org": false
    }
}

# Restrict Element configuration directory permissions
chmod 700 ~/.config/Element
chmod 600 ~/.config/Element/config.json

# Enable automatic security updates (Debian/Ubuntu)
sudo apt install -y unattended-upgrades
sudo dpkg-reconfigure unattended-upgrades

# SELinux configuration for desktop apps (RHEL/Fedora)
sudo setsebool -P allow_execmem on  # Required for Electron apps

# Enhanced security headers
add_header X-Frame-Options DENY always;
add_header X-Content-Type-Options nosniff always;
add_header X-XSS-Protection "1; mode=block" always;
add_header Referrer-Policy "strict-origin-when-cross-origin" always;
add_header Permissions-Policy "camera=(), microphone=(), geolocation=()" always;
add_header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" always;

# Content Security Policy
add_header Content-Security-Policy "default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; font-src 'self'; connect-src 'self' https://*.matrix.org wss://*.matrix.org; frame-src 'none'; object-src 'none'; base-uri 'self';" always;

# Hide server information
server_tokens off;
more_clear_headers Server;

# Secure Element Web directory
sudo chown -R element:nginx /var/www/element-web
sudo chmod -R 750 /var/www/element-web
sudo chmod 640 /var/www/element-web/config.json

# Implement file integrity monitoring
sudo apt install -y aide  # Debian/Ubuntu
sudo yum install -y aide   # RHEL/CentOS

# Configure AIDE for Element directory
echo "/var/www/element-web p+i+n+u+g+s+m+c+md5+sha256" | sudo tee -a /etc/aide/aide.conf
sudo aideinit

# Configure firewall for Element Web
sudo ufw enable
sudo ufw allow 22/tcp      # SSH
sudo ufw allow 80/tcp      # HTTP (redirect)
sudo ufw allow 443/tcp     # HTTPS
sudo ufw allow 49152:65535/udp  # WebRTC

# Rate limiting with fail2ban
sudo apt install -y fail2ban

sudo tee /etc/fail2ban/jail.d/nginx-element.conf << 'EOF'
[nginx-element]
enabled = true
port = http,https
filter = nginx-element
logpath = /var/log/nginx/access.log
maxretry = 5
bantime = 3600
findtime = 600
EOF

sudo tee /etc/fail2ban/filter.d/nginx-element.conf << 'EOF'
[Definition]
failregex = ^<HOST> -.*"(GET|POST|HEAD).*HTTP.*" (4|5)\d\d
ignoreregex =
EOF

sudo systemctl restart fail2ban

# Regular key backup (within Element application)
# 1. Go to Settings > Security & Privacy
# 2. Export room keys to secure location
# 3. Store passphrase in password manager
# 4. Test key restoration process

# Cross-signing setup for device verification
# 1. Settings > Security & Privacy > Cross-signing
# 2. Set up cross-signing keys
# 3. Verify all devices
# 4. Enable secure backup for keys

# Monitor authentication events
sudo grep "authentication" /var/log/nginx/access.log

# Element audit logging (for compliance environments)
# Configure homeserver with audit logging enabled
# Monitor user sessions and encryption status

# Regular security assessment
sudo lynis audit system
sudo chkrootkit

# Reduce memory footprint with launch options
element-desktop --memory-pressure-off --max-old-space-size=512

# Disable hardware acceleration if causing issues
element-desktop --disable-gpu --disable-hardware-acceleration

# Optimize Electron cache
element-desktop --disk-cache-size=10485760  # 10MB cache limit

# Performance-focused config.json
{
    "features": {
        "feature_lazy_loading_members": "enable",
        "feature_state_counters": "disable",
        "feature_pinning": "disable"
    },
    "enable_presence_by_hs_url": {
        "https://matrix.org": false
    },
    "piwik": false
}

# Optimized nginx configuration for Element Web
server {
    # ... SSL configuration ...

    # Performance optimizations
    sendfile on;
    tcp_nopush on;
    tcp_nodelay on;
    keepalive_timeout 65;
    types_hash_max_size 2048;

    # Gzip compression
    gzip on;
    gzip_vary on;
    gzip_min_length 1000;
    gzip_types
        text/plain
        text/css
        text/xml
        text/javascript
        application/javascript
        application/json
        application/xml+rss
        application/atom+xml
        image/svg+xml;

    # Browser caching
    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg|woff|woff2)$ {
        expires 1y;
        add_header Cache-Control "public, immutable";
        access_log off;
    }

    # Static file serving optimization
    location / {
        try_files $uri $uri/ /index.html;

        # Enable async I/O
        aio threads;

        # Optimize buffer sizes
        output_buffers 1 64k;
    }

    # Connection limits
    limit_conn_zone $binary_remote_addr zone=conn_limit_per_ip:10m;
    limit_conn conn_limit_per_ip 10;

    # Rate limiting
    limit_req_zone $binary_remote_addr zone=req_limit_per_ip:10m rate=5r/s;
    limit_req zone=req_limit_per_ip burst=10 nodelay;
}

# Global nginx optimizations
worker_processes auto;
worker_rlimit_nofile 65535;

events {
    worker_connections 4096;
    use epoll;
    multi_accept on;
}

http {
    # Connection pooling
    upstream backend {
        keepalive 32;
    }

    # Buffer optimizations
    client_body_buffer_size 128k;
    client_max_body_size 10m;
    client_header_buffer_size 1k;
    large_client_header_buffers 4 4k;

    # Timeout optimizations
    client_body_timeout 10;
    client_header_timeout 10;
    keepalive_timeout 30;
    send_timeout 10;
}

# Increase file descriptor limits
echo "* soft nofile 65536" | sudo tee -a /etc/security/limits.conf
echo "* hard nofile 65536" | sudo tee -a /etc/security/limits.conf

# Optimize network parameters
sudo tee /etc/sysctl.d/99-element-web.conf << 'EOF'
# Network optimizations for Element Web
net.core.rmem_default = 262144
net.core.rmem_max = 16777216
net.core.wmem_default = 262144
net.core.wmem_max = 16777216
net.ipv4.tcp_rmem = 4096 65536 16777216
net.ipv4.tcp_wmem = 4096 65536 16777216
net.ipv4.tcp_congestion_control = bbr
net.core.netdev_max_backlog = 5000
net.ipv4.tcp_max_syn_backlog = 8192
EOF

sudo sysctl -p /etc/sysctl.d/99-element-web.conf

// Clear Element Web storage periodically (client-side script)
// Add to Element Web deployment for storage cleanup
(function() {
    const STORAGE_LIMIT = 100 * 1024 * 1024; // 100MB

    if (navigator.storage && navigator.storage.estimate) {
        navigator.storage.estimate().then(estimate => {
            if (estimate.usage > STORAGE_LIMIT) {
                console.log("Storage limit exceeded, clearing old data");
                // Clear IndexedDB data older than 30 days
                // Implementation would depend on Matrix client storage structure
            }
        });
    }
})();

# Install monitoring tools
sudo apt install -y htop iotop nethogs

# Monitor Element processes
watch -n 2 'ps aux | grep element'

# Network monitoring for Matrix traffic
sudo nethogs

# Monitor nginx performance
sudo tail -f /var/log/nginx/access.log | awk '{print $7}' | sort | uniq -c | sort -rn

# Create backup directory
mkdir -p ~/backups/element-desktop/$(date +%Y%m%d)

# Linux backup script
#!/bin/bash
BACKUP_DIR=~/backups/element-desktop/$(date +%Y%m%d)
mkdir -p "$BACKUP_DIR"

# Backup configuration and data
cp -r ~/.config/Element "$BACKUP_DIR/config"

# Backup exported keys (if available)
cp ~/element-keys-*.txt "$BACKUP_DIR/" 2>/dev/null || echo "No exported keys found"

# Create backup archive
tar -czf "$BACKUP_DIR/../element-backup-$(date +%Y%m%d).tar.gz" -C "$BACKUP_DIR" .

echo "Backup completed: $BACKUP_DIR"

# Linux
~/.config/Element/

# Windows
%APPDATA%\Element\

# macOS
~/Library/Application Support/Element/

# Key backup files (manual export required)
# element-keys-YYYY-MM-DD-HHMMSS.txt (user's download folder)

#!/bin/bash
# Element Desktop Backup Script

BACKUP_BASE_DIR="$HOME/backups/element"
DATE=$(date +%Y%m%d_%H%M%S)
BACKUP_DIR="$BACKUP_BASE_DIR/$DATE"

# Create backup directory
mkdir -p "$BACKUP_DIR"

# Detect operating system and backup appropriate directories
case "$(uname -s)" in
    Linux*)
        CONFIG_DIR="$HOME/.config/Element"
        ;;
    Darwin*)
        CONFIG_DIR="$HOME/Library/Application Support/Element"
        ;;
    CYGWIN*|MINGW*|MSYS*)
        CONFIG_DIR="$APPDATA/Element"
        ;;
    *)
        echo "Unsupported operating system"
        exit 1
        ;;
esac

# Backup configuration if it exists
if [ -d "$CONFIG_DIR" ]; then
    cp -r "$CONFIG_DIR" "$BACKUP_DIR/Element-config"
    echo "Configuration backed up to $BACKUP_DIR/Element-config"
else
    echo "Element configuration directory not found: $CONFIG_DIR"
fi

# Create compressed archive
cd "$BACKUP_BASE_DIR"
tar -czf "element-backup-$DATE.tar.gz" "$DATE"
rm -rf "$DATE"

# Keep only last 7 backups
ls -t element-backup-*.tar.gz | tail -n +8 | xargs rm -f

echo "Backup completed: element-backup-$DATE.tar.gz"
echo "Location: $BACKUP_BASE_DIR/element-backup-$DATE.tar.gz"

#!/bin/bash
# Element Web Backup Script

BACKUP_BASE_DIR="/var/backups/element-web"
DATE=$(date +%Y%m%d_%H%M%S)
BACKUP_DIR="$BACKUP_BASE_DIR/$DATE"

# Create backup directory
sudo mkdir -p "$BACKUP_DIR"

# Backup Element Web files
sudo cp -r /var/www/element-web "$BACKUP_DIR/"

# Backup nginx configuration
sudo cp /etc/nginx/sites-available/element-web "$BACKUP_DIR/nginx-element-web.conf"

# Backup SSL certificates
sudo cp -r /etc/ssl/certs/element* "$BACKUP_DIR/" 2>/dev/null || true
sudo cp -r /etc/ssl/private/element* "$BACKUP_DIR/" 2>/dev/null || true

# Create backup archive
cd "$BACKUP_BASE_DIR"
sudo tar -czf "element-web-backup-$DATE.tar.gz" "$DATE"
sudo rm -rf "$DATE"

# Set proper permissions
sudo chown root:root "element-web-backup-$DATE.tar.gz"
sudo chmod 600 "element-web-backup-$DATE.tar.gz"

# Keep only last 30 backups
sudo find "$BACKUP_BASE_DIR" -name "element-web-backup-*.tar.gz" -mtime +30 -delete

echo "Element Web backup completed: $BACKUP_BASE_DIR/element-web-backup-$DATE.tar.gz"

#!/bin/bash
# Element Desktop Restore Script

if [ -z "$1" ]; then
    echo "Usage: $0 <backup-file.tar.gz>"
    exit 1
fi

BACKUP_FILE="$1"
RESTORE_DIR="/tmp/element-restore-$$"

# Extract backup
mkdir -p "$RESTORE_DIR"
tar -xzf "$BACKUP_FILE" -C "$RESTORE_DIR"

# Detect operating system
case "$(uname -s)" in
    Linux*)
        CONFIG_DIR="$HOME/.config/Element"
        ;;
    Darwin*)
        CONFIG_DIR="$HOME/Library/Application Support/Element"
        ;;
    *)
        echo "Unsupported operating system for restore"
        exit 1
        ;;
esac

# Backup existing configuration
if [ -d "$CONFIG_DIR" ]; then
    mv "$CONFIG_DIR" "$CONFIG_DIR.backup-$(date +%Y%m%d_%H%M%S)"
    echo "Existing configuration backed up"
fi

# Restore configuration
cp -r "$RESTORE_DIR/Element-config" "$CONFIG_DIR"
echo "Configuration restored to $CONFIG_DIR"

# Cleanup
rm -rf "$RESTORE_DIR"

echo "Restore completed. Please restart Element desktop application."

#!/bin/bash
# Element Web Restore Script

if [ -z "$1" ]; then
    echo "Usage: sudo $0 <backup-file.tar.gz>"
    exit 1
fi

BACKUP_FILE="$1"
RESTORE_DIR="/tmp/element-web-restore-$$"

# Extract backup
mkdir -p "$RESTORE_DIR"
tar -xzf "$BACKUP_FILE" -C "$RESTORE_DIR"

# Stop nginx
systemctl stop nginx

# Backup existing installation
if [ -d "/var/www/element-web" ]; then
    mv "/var/www/element-web" "/var/www/element-web.backup-$(date +%Y%m%d_%H%M%S)"
fi

# Restore Element Web files
cp -r "$RESTORE_DIR/element-web" "/var/www/"
chown -R element:element "/var/www/element-web"

# Restore nginx configuration
if [ -f "$RESTORE_DIR/nginx-element-web.conf" ]; then
    cp "$RESTORE_DIR/nginx-element-web.conf" "/etc/nginx/sites-available/element-web"
    ln -sf "/etc/nginx/sites-available/element-web" "/etc/nginx/sites-enabled/"
fi

# Restore SSL certificates (if present)
cp "$RESTORE_DIR"/element*.crt /etc/ssl/certs/ 2>/dev/null || true
cp "$RESTORE_DIR"/element*.key /etc/ssl/private/ 2>/dev/null || true

# Test nginx configuration and start
nginx -t && systemctl start nginx

# Cleanup
rm -rf "$RESTORE_DIR"

echo "Element Web restore completed. Service should be accessible at configured domain."

# Matrix key recovery (manual process within Element)
# 1. Launch Element application
# 2. Go to Settings > Security & Privacy
# 3. Select "Import room keys"
# 4. Choose previously exported key file
# 5. Enter key export passphrase
# 6. Verify key import success

# Alternative: Secure backup recovery
# 1. Settings > Security & Privacy > Secure Backup
# 2. Enter recovery key or security phrase
# 3. Download keys from secure backup
# 4. Verify cross-signing setup

# Device verification recovery
# 1. Sign in to Element on new device/installation
# 2. Verify with existing device or recovery key
# 3. Enable secure backup for future recovery
# 4. Cross-sign new device for E2E encryption

# Account recovery (if homeserver supports it)
# Contact homeserver administrator or use:
# - Email-based account recovery
# - Phone number verification
# - Security questions (if configured)

# Firewall configuration for desktop client
sudo ufw allow out 443/tcp     # HTTPS to homeserver
sudo ufw allow out 80/tcp      # HTTP fallback
sudo ufw allow 49152:65535/udp # WebRTC

# Corporate network considerations
# - Matrix federation may require proxy configuration
# - WebRTC may require TURN server for NAT traversal
# - Some corporate firewalls block WebSocket connections

# Element Web static files
/var/www/element-web/: ~50MB

# Browser storage per user (client-side)
IndexedDB: 10-500MB (depends on usage and history)
LocalStorage: 5-10MB
Cache: 10-100MB

# Log files
/var/log/nginx/: 10MB-1GB+ (depends on traffic and retention)

# Element Web itself doesn't require a database
# However, Matrix homeserver (Synapse, Dendrite) requires:
# - PostgreSQL 11+ (recommended) or SQLite3 (development only)
# - Redis for caching (optional but recommended)
# - Minimum 10GB storage for small deployments
# - 100GB+ storage for medium deployments (1000+ users)

# Before reporting bugs, gather system information:
# 1. Element version (Help & About or --version)
# 2. Operating system and version
# 3. Browser version (for Element Web)
# 4. Matrix homeserver being used
# 5. Steps to reproduce the issue
# 6. Logs from relevant period

# Element Desktop logs location:
# Linux: ~/.config/Element/logs/
# Windows: %APPDATA%\Element\logs\
# macOS: ~/Library/Logs/Element/

# Report bugs at:
# Element Web: https://github.com/vector-im/element-web/issues
# Element Desktop: https://github.com/vector-im/element-desktop/issues

# Element Web diagnostic information
# Open browser console (F12) and run:
// window.mxMatrixClient.getVersions()

# Matrix homeserver testing
curl "https://federationtester.matrix.org/api/report?server_name=your-homeserver.com"

# Network connectivity testing
curl -v https://matrix.org/_matrix/client/versions

# WebRTC testing
# Use online WebRTC test tools to verify connectivity
# https://test.webrtc.org/

# Fork and clone Element Web repository
git clone https://github.com/yourusername/element-web.git
cd element-web

# Install development dependencies
yarn install

# Create development build
yarn start

# Make changes and test locally
# Element Web will be available at http://localhost:8080

# Run tests before submitting
yarn test
yarn lint

# Submit pull request with clear description
# Follow Element's contribution guidelines

# Clone Element Desktop repository
git clone https://github.com/yourusername/element-desktop.git
cd element-desktop

# Install dependencies
yarn install

# Build for development
yarn run build:ts

# Package for testing
yarn run build

# Run tests
yarn test

# Follow desktop-specific contribution guidelines

# This guide welcomes improvements and corrections
# Report issues or submit pull requests at:
# https://github.com/howtomgr/element

# Areas needing contributions:
# - Additional operating system instructions
# - Performance optimization techniques
# - Security hardening procedures
# - Troubleshooting solutions
# - Integration examples

# Effective bug reporting checklist:
# 1. Search existing issues first
# 2. Use clear, descriptive titles
# 3. Provide step-by-step reproduction steps
# 4. Include system information and logs
# 5. Test on multiple environments if possible
# 6. Follow up on reported issues

# Example bug report template:
## Environment
- Element version: 1.11.43
- Operating System: Ubuntu 22.04
- Browser: Firefox 115.0 (for Element Web)
- Matrix homeserver: matrix.org

## Steps to Reproduce
1. Open Element
2. Join room #example:matrix.org
3. Send message with special characters
4. Observe error behavior

## Expected Behavior
Message should send successfully

## Actual Behavior
Error message appears and message fails to send

## Additional Information
- Console logs attached
- Screenshots included
- Reproducible on multiple devices

# Prerequisites
node --version    # Requires Node.js 16+
yarn --version    # Requires Yarn package manager

# Clone and setup
git clone https://github.com/vector-im/element-web.git
cd element-web
yarn install

# Configure for development
cp config.sample.json config.json
# Edit config.json with your homeserver details

# Start development server
yarn start
# Access at http://localhost:8080

# Available development commands
yarn lint         # Code linting
yarn test         # Run test suite
yarn build        # Production build
yarn analyze      # Bundle analysis

// Element follows specific coding standards
// - ESLint configuration in .eslintrc.js
// - Prettier for code formatting
// - TypeScript for type safety
// - Jest for testing

// Example contribution workflow:
// 1. Create feature branch
git checkout -b feature/my-new-feature

// 2. Make changes following style guide
// 3. Run linting and tests
yarn lint --fix
yarn test

// 4. Commit with descriptive message
git commit -m "Add feature: description of change"

// 5. Push and create pull request
git push origin feature/my-new-feature

Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at:

http://www.apache.org/licenses/LICENSE-2.0

Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.

# Check Element Web licenses
cd element-web
yarn licenses list

# Generate license report
yarn licenses generate-disclaimer > THIRD_PARTY_LICENSES.txt

# For desktop applications, similar commands apply:
cd element-desktop
yarn licenses list

# New sections added:
- Performance Tuning (Section 7)
- Backup and Restore (Section 8)
- System Requirements (Section 9)
- Support Resources (Section 10)
- Contributing Guidelines (Section 11)
- License Information (Section 12)
- Acknowledgments (Section 13)
- Version History (Section 14)
- Appendices (Section 15)

# Enhanced existing sections:
- Multi-OS installation procedures
- Security hardening configurations
- Service management across platforms
- Comprehensive troubleshooting
- Professional configuration examples

# Configuration changes required:
# - Updated Electron security policies
# - Changed default notification settings
# - Modified widget security sandbox

# Migration steps:
1. Export room keys before upgrading
2. Update configuration files with new format
3. Restart application and verify functionality
4. Re-import keys if necessary
5. Reconfigure notifications and preferences

# Room version upgrades:
# Matrix rooms may require upgrading to newer room versions
# for enhanced security and features

# Homeserver migrations:
# Moving between homeservers requires:
1. Export room keys and data
2. Create account on new homeserver
3. Re-join rooms (if federated)
4. Import keys and verify devices
5. Update client configurations

{
    "default_server_config": {
        "m.homeserver": {
            "base_url": "https://matrix.company.com",
            "server_name": "company.com"
        },
        "m.identity_server": {
            "base_url": "https://identity.company.com"
        }
    },
    "disable_custom_urls": true,
    "disable_guests": true,
    "disable_login_language_selector": false,
    "disable_3pid_login": false,
    "brand": "Company Chat",
    "integrations_ui_url": "https://integrations.company.com/",
    "integrations_rest_url": "https://integrations.company.com/api",
    "integrations_widgets_urls": [
        "https://integrations.company.com/_matrix/integrations/v1"
    ],
    "default_country_code": "US",
    "show_labs_settings": false,
    "features": {
        "feature_cross_signing": "enable",
        "feature_thread": "enable",
        "feature_spaces": "enable"
    },
    "default_federate": false,
    "default_theme": "light",
    "room_directory": {
        "servers": ["company.com"]
    },
    "welcome_user_id": "@welcome-bot:company.com",
    "privacy_policy_url": "https://company.com/privacy",
    "terms_of_service_url": "https://company.com/terms",
    "enable_presence_by_hs_url": {
        "https://matrix.company.com": true
    },
    "element_call": {
        "url": "https://call.company.com"
    },
    "default_server_name": "company.com",
    "help_url": "https://support.company.com/element",
    "help_encryption_url": "https://support.company.com/element/encryption",
    "bug_report_endpoint_url": "https://support.company.com/element/bug-report"
}

# Enterprise Element Web Configuration
# /etc/nginx/sites-available/element-enterprise

upstream element_backend {
    server 127.0.0.1:8008;  # Matrix homeserver
    keepalive 32;
}

# Rate limiting zones
limit_req_zone $binary_remote_addr zone=login:10m rate=5r/m;
limit_req_zone $binary_remote_addr zone=api:10m rate=10r/s;
limit_conn_zone $binary_remote_addr zone=conn_limit:10m;

server {
    listen 80;
    server_name element.company.com;
    return 301 https://$server_name$request_uri;
}

server {
    listen 443 ssl http2;
    server_name element.company.com;

    # SSL Configuration
    ssl_certificate /etc/ssl/certs/element.company.com.crt;
    ssl_certificate_key /etc/ssl/private/element.company.com.key;
    ssl_protocols TLSv1.2 TLSv1.3;
    ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-CHACHA20-POLY1305;
    ssl_prefer_server_ciphers off;
    ssl_session_cache shared:SSL:10m;
    ssl_session_timeout 10m;

    # OCSP stapling
    ssl_stapling on;
    ssl_stapling_verify on;
    ssl_trusted_certificate /etc/ssl/certs/chain.pem;

    # Security Headers
    add_header X-Frame-Options DENY always;
    add_header X-Content-Type-Options nosniff always;
    add_header X-XSS-Protection "1; mode=block" always;
    add_header Referrer-Policy "strict-origin-when-cross-origin" always;
    add_header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" always;
    add_header Permissions-Policy "camera=(), microphone=(), geolocation=(), payment=()" always;

    # CSP Header for Element
    add_header Content-Security-Policy "default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://www.recaptcha.net; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; font-src 'self' data:; connect-src 'self' https://matrix.company.com wss://matrix.company.com https://identity.company.com; frame-src https://www.recaptcha.net; media-src 'self' blob:; worker-src 'self'; manifest-src 'self';" always;

    root /var/www/element-web;
    index index.html;

    # Connection limits
    limit_conn conn_limit 10;

    # Gzip compression
    gzip on;
    gzip_vary on;
    gzip_min_length 1000;
    gzip_types
        text/plain
        text/css
        text/xml
        text/javascript
        application/javascript
        application/json
        application/xml+rss
        application/atom+xml
        image/svg+xml;

    # Element Web files
    location / {
        try_files $uri $uri/ /index.html;

        # Cache static assets
        location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg|woff|woff2|ttf|eot)$ {
            expires 1y;
            add_header Cache-Control "public, immutable";
            access_log off;
        }

        # Don't cache HTML files
        location ~* \.html$ {
            expires -1;
            add_header Cache-Control "no-cache, no-store, must-revalidate";
        }
    }

    # Proxy Matrix API requests
    location /_matrix {
        proxy_pass http://element_backend;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;

        # Rate limiting for login endpoints
        location /_matrix/client/r0/login {
            limit_req zone=login burst=3 nodelay;
            proxy_pass http://element_backend;
        }

        # Rate limiting for API calls
        limit_req zone=api burst=20 nodelay;
    }

    # WebSocket proxying for Matrix
    location /_matrix/client/r0/sync {
        proxy_pass http://element_backend;
        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "upgrade";
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
        proxy_read_timeout 86400;
    }

    # Block access to sensitive files
    location ~ /\. {
        deny all;
    }

    location ~ \.(md|txt|log)$ {
        deny all;
    }

    # Custom error pages
    error_page 404 /error/404.html;
    error_page 500 502 503 504 /error/50x.html;

    location ^~ /error/ {
        internal;
        root /var/www/element-web;
    }

    # Logging
    access_log /var/log/nginx/element.access.log combined;
    error_log /var/log/nginx/element.error.log warn;
}

# /etc/haproxy/haproxy.cfg
global
    daemon
    maxconn 4096
    log stdout local0

defaults
    mode http
    timeout connect 5000ms
    timeout client 50000ms
    timeout server 50000ms
    option httplog

frontend element_frontend
    bind *:443 ssl crt /etc/ssl/certs/element.pem
    redirect scheme https if !{ ssl_fc }

    # Route to Element Web servers
    use_backend element_web_servers

backend element_web_servers
    balance roundrobin
    option httpchk GET /

    server web1 10.0.1.10:80 check
    server web2 10.0.1.11:80 check
    server web3 10.0.1.12:80 check

# prometheus.yml configuration for Element Web monitoring
global:
  scrape_interval: 15s

scrape_configs:
  - job_name: 'nginx-element'
    static_configs:
      - targets: ['element.company.com:9113']
    metrics_path: /metrics

  - job_name: 'element-web'
    static_configs:
      - targets: ['element.company.com']
    metrics_path: /_matrix/client/versions
    scrape_interval: 60s

rule_files:
  - "element-alerts.yml"

alerting:
  alertmanagers:
    - static_configs:
        - targets: ['alertmanager:9093']

{
  "dashboard": {
    "title": "Element Web Monitoring",
    "panels": [
      {
        "title": "Active Connections",
        "type": "graph",
        "targets": [
          {
            "expr": "nginx_connections_active",
            "legendFormat": "Active Connections"
          }
        ]
      },
      {
        "title": "Request Rate",
        "type": "graph",
        "targets": [
          {
            "expr": "rate(nginx_http_requests_total[5m])",
            "legendFormat": "Requests per second"
          }
        ]
      }
    ]
  }
}

#!/bin/bash
# Element Diagnostic Script
# Collects system information for troubleshooting

echo "=== Element Diagnostic Information ==="
echo "Generated: $(date)"
echo

# System Information
echo "=== System Information ==="
uname -a
echo "Distribution: $(lsb_release -d 2>/dev/null | cut -f2 || echo 'Unknown')"
echo

# Element Installation Detection
echo "=== Element Installation ==="
if command -v element-desktop >/dev/null 2>&1; then
    echo "Element Desktop: $(element-desktop --version 2>/dev/null || echo 'Installed but version unknown')"
else
    echo "Element Desktop: Not installed"
fi

if command -v flatpak >/dev/null 2>&1; then
    flatpak list | grep -i riot && echo "Element available via Flatpak"
fi

if command -v snap >/dev/null 2>&1; then
    snap list | grep -i element && echo "Element available via Snap"
fi

# Check Element Web
if [ -d "/var/www/element-web" ]; then
    echo "Element Web: Installed at /var/www/element-web"
    echo "Config file exists: $([ -f '/var/www/element-web/config.json' ] && echo 'Yes' || echo 'No')"
else
    echo "Element Web: Not found"
fi

# Network Connectivity
echo
echo "=== Network Connectivity ==="
echo "Testing matrix.org connectivity..."
if curl -s --connect-timeout 5 https://matrix.org/_matrix/client/versions >/dev/null; then
    echo "✓ Matrix.org reachable"
else
    echo "✗ Cannot reach matrix.org"
fi

echo "Testing WebRTC connectivity..."
if command -v nc >/dev/null 2>&1; then
    timeout 3 nc -u -w 1 stun.l.google.com 19302 >/dev/null 2>&1 && echo "✓ STUN server reachable" || echo "✗ STUN server not reachable"
else
    echo "netcat not available for STUN test"
fi

# Port Availability
echo
echo "=== Port Status ==="
ss -tlnp | grep -E ':(80|443|8008|8448)' || echo "No Element/Matrix ports found listening"

# Log File Locations
echo
echo "=== Log Files ==="
if [ -d "$HOME/.config/Element/logs" ]; then
    echo "Element Desktop logs: $HOME/.config/Element/logs"
    echo "Recent log files:"
    ls -la "$HOME/.config/Element/logs" | tail -5
fi

if [ -f "/var/log/nginx/access.log" ]; then
    echo "Nginx access log: /var/log/nginx/access.log"
    echo "Last 3 access entries:"
    tail -3 /var/log/nginx/access.log
fi

# Firewall Status
echo
echo "=== Firewall Status ==="
if command -v ufw >/dev/null 2>&1; then
    echo "UFW Status:"
    sudo ufw status
elif command -v firewall-cmd >/dev/null 2>&1; then
    echo "Firewalld Status:"
    sudo firewall-cmd --list-all
else
    echo "No recognized firewall utility found"
fi

# Service Status
echo
echo "=== Service Status ==="
if systemctl is-active nginx >/dev/null 2>&1; then
    echo "Nginx: Active"
else
    echo "Nginx: Not active or not installed"
fi

# Browser Information (if GUI available)
if [ -n "$DISPLAY" ]; then
    echo
    echo "=== Browser Information ==="
    if command -v google-chrome >/dev/null 2>&1; then
        google-chrome --version 2>/dev/null || echo "Chrome installed but version unavailable"
    fi
    if command -v firefox >/dev/null 2>&1; then
        firefox --version 2>/dev/null || echo "Firefox installed but version unavailable"
    fi
fi

echo
echo "=== End Diagnostic Information ==="
echo "Please provide this output when seeking support."

#!/bin/bash
# Element Web Health Check Script

ELEMENT_URL="${1:-https://element.yourdomain.com}"
TIMEOUT=10

echo "Element Web Health Check for: $ELEMENT_URL"
echo "========================================"

# Check if Element Web loads
echo -n "Element Web accessibility: "
if curl -s --connect-timeout $TIMEOUT -o /dev/null -w "%{http_code}" "$ELEMENT_URL" | grep -q "200"; then
    echo "✓ OK"
else
    echo "✗ Failed to load"
fi

# Check config.json
echo -n "Configuration file: "
if curl -s --connect-timeout $TIMEOUT "$ELEMENT_URL/config.json" | python3 -m json.tool >/dev/null 2>&1; then
    echo "✓ Valid JSON"
else
    echo "✗ Invalid or missing"
fi

# Check Matrix API availability
echo -n "Matrix homeserver API: "
HOMESERVER=$(curl -s "$ELEMENT_URL/config.json" | python3 -c "import sys, json; print(json.load(sys.stdin)['default_server_config']['m.homeserver']['base_url'])" 2>/dev/null)
if [ -n "$HOMESERVER" ]; then
    if curl -s --connect-timeout $TIMEOUT "$HOMESERVER/_matrix/client/versions" >/dev/null; then
        echo "✓ Reachable ($HOMESERVER)"
    else
        echo "✗ Not reachable ($HOMESERVER)"
    fi
else
    echo "✗ Cannot determine homeserver URL"
fi

# Check SSL certificate
echo -n "SSL certificate: "
if openssl s_client -connect "${ELEMENT_URL#https://}:443" -servername "${ELEMENT_URL#https://}" </dev/null 2>/dev/null | openssl x509 -checkend 0 -noout >/dev/null 2>&1; then
    echo "✓ Valid"
else
    echo "✗ Invalid or expired"
fi

# Check required files
echo
echo "Required files check:"
REQUIRED_FILES=("index.html" "config.json" "manifest.json")
for file in "${REQUIRED_FILES[@]}"; do
    echo -n "  $file: "
    if curl -s --connect-timeout $TIMEOUT -o /dev/null -w "%{http_code}" "$ELEMENT_URL/$file" | grep -q "200"; then
        echo "✓ Present"
    else
        echo "✗ Missing"
    fi
done

# Performance check
echo
echo -n "Response time: "
RESPONSE_TIME=$(curl -s -o /dev/null -w "%{time_total}" "$ELEMENT_URL")
echo "${RESPONSE_TIME}s"

if (( $(echo "$RESPONSE_TIME > 2.0" | bc -l) )); then
    echo "⚠ Slow response time (>2s)"
fi

echo
echo "Health check completed."

#!/bin/bash
# Migrate Element configuration between versions

OLD_CONFIG="${1:-$HOME/.config/Element.old}"
NEW_CONFIG="${2:-$HOME/.config/Element}"

if [ ! -d "$OLD_CONFIG" ]; then
    echo "Error: Old configuration directory not found: $OLD_CONFIG"
    exit 1
fi

echo "Migrating Element configuration..."
echo "From: $OLD_CONFIG"
echo "To: $NEW_CONFIG"

# Backup existing new config if it exists
if [ -d "$NEW_CONFIG" ]; then
    mv "$NEW_CONFIG" "${NEW_CONFIG}.backup-$(date +%Y%m%d_%H%M%S)"
    echo "Existing configuration backed up"
fi

# Create new config directory
mkdir -p "$NEW_CONFIG"

# Copy essential files
ESSENTIAL_FILES=(
    "config.json"
    "Local Storage"
    "Session Storage"
    "IndexedDB"
    "logs"
)

for file in "${ESSENTIAL_FILES[@]}"; do
    if [ -e "$OLD_CONFIG/$file" ]; then
        cp -r "$OLD_CONFIG/$file" "$NEW_CONFIG/"
        echo "Copied: $file"
    else
        echo "Skipped (not found): $file"
    fi
done

# Update config.json if needed for new version compatibility
if [ -f "$NEW_CONFIG/config.json" ]; then
    echo "Updating configuration for compatibility..."
    python3 -c "
import json
import sys

try:
    with open('$NEW_CONFIG/config.json', 'r') as f:
        config = json.load(f)

    # Add new required fields for newer versions
    if 'features' not in config:
        config['features'] = {}

    # Update deprecated settings
    if 'riot' in str(config).lower():
        print('Warning: Configuration contains deprecated Riot references')

    with open('$NEW_CONFIG/config.json', 'w') as f:
        json.dump(config, f, indent=2)

    print('Configuration updated successfully')
except Exception as e:
    print(f'Error updating config: {e}')
    sys.exit(1)
"
fi

echo "Migration completed successfully!"
echo "Please restart Element and verify functionality."

#!/bin/bash
# Element Web Performance Optimization Script

ELEMENT_ROOT="/var/www/element-web"
NGINX_CONFIG="/etc/nginx/sites-available/element-web"

echo "Element Web Performance Optimization"
echo "==================================="

# Check if running as root
if [ "$EUID" -ne 0 ]; then
    echo "Please run this script as root (sudo)"
    exit 1
fi

# Optimize Element Web files
if [ -d "$ELEMENT_ROOT" ]; then
    echo "Optimizing Element Web static files..."

    # Compress JavaScript and CSS files
    find "$ELEMENT_ROOT" -name "*.js" -not -path "*/node_modules/*" -exec gzip -k {} \;
    find "$ELEMENT_ROOT" -name "*.css" -not -path "*/node_modules/*" -exec gzip -k {} \;

    # Set optimal permissions
    chown -R element:nginx "$ELEMENT_ROOT"
    find "$ELEMENT_ROOT" -type f -exec chmod 644 {} \;
    find "$ELEMENT_ROOT" -type d -exec chmod 755 {} \;

    echo "✓ Static files optimized"
else
    echo "⚠ Element Web directory not found: $ELEMENT_ROOT"
fi

# Optimize nginx configuration
if [ -f "$NGINX_CONFIG" ]; then
    echo "Checking nginx configuration optimizations..."

    # Check for gzip configuration
    if grep -q "gzip on" "$NGINX_CONFIG"; then
        echo "✓ Gzip compression enabled"
    else
        echo "⚠ Consider enabling gzip compression in nginx"
    fi

    # Check for caching headers
    if grep -q "expires" "$NGINX_CONFIG"; then
        echo "✓ Cache headers configured"
    else
        echo "⚠ Consider adding cache headers for static assets"
    fi
else
    echo "⚠ Nginx configuration not found: $NGINX_CONFIG"
fi

# System-level optimizations
echo "Applying system-level optimizations..."

# Optimize file descriptor limits
if ! grep -q "element" /etc/security/limits.conf; then
    cat >> /etc/security/limits.conf << 'EOF'
# Element Web optimizations
nginx soft nofile 65536
nginx hard nofile 65536
EOF
    echo "✓ File descriptor limits increased"
fi

# Optimize network parameters
cat > /etc/sysctl.d/99-element-web.conf << 'EOF'
# Element Web network optimizations
net.core.rmem_default = 262144
net.core.rmem_max = 16777216
net.core.wmem_default = 262144
net.core.wmem_max = 16777216
net.ipv4.tcp_rmem = 4096 65536 16777216
net.ipv4.tcp_wmem = 4096 65536 16777216
net.ipv4.tcp_congestion_control = bbr
EOF

sysctl -p /etc/sysctl.d/99-element-web.conf >/dev/null 2>&1
echo "✓ Network parameters optimized"

# Test nginx configuration
if nginx -t >/dev/null 2>&1; then
    systemctl reload nginx
    echo "✓ Nginx configuration reloaded"
else
    echo "✗ Nginx configuration test failed"
fi

echo
echo "Performance optimization completed!"
echo "Monitor your Element Web instance for improved performance."

#!/bin/bash
# Element Security Audit Script

echo "Element Security Audit"
echo "====================="
echo "Date: $(date)"
echo

ISSUES_FOUND=0

# Check file permissions
echo "=== File Permission Audit ==="
if [ -d "/var/www/element-web" ]; then
    echo "Checking Element Web file permissions..."

    # Check for world-writable files
    WORLD_WRITABLE=$(find /var/www/element-web -type f -perm -002 2>/dev/null)
    if [ -n "$WORLD_WRITABLE" ]; then
        echo "✗ World-writable files found:"
        echo "$WORLD_WRITABLE"
        ISSUES_FOUND=$((ISSUES_FOUND + 1))
    else
        echo "✓ No world-writable files found"
    fi

    # Check config.json permissions
    if [ -f "/var/www/element-web/config.json" ]; then
        CONFIG_PERMS=$(stat -c "%a" /var/www/element-web/config.json)
        if [ "$CONFIG_PERMS" -gt "644" ]; then
            echo "✗ config.json permissions too permissive: $CONFIG_PERMS"
            ISSUES_FOUND=$((ISSUES_FOUND + 1))
        else
            echo "✓ config.json permissions appropriate: $CONFIG_PERMS"
        fi
    fi
fi

# Check nginx security headers
echo
echo "=== Nginx Security Headers Audit ==="
if command -v curl >/dev/null 2>&1; then
    ELEMENT_URL="https://element.yourdomain.com"  # Update with your URL
    echo "Testing security headers for: $ELEMENT_URL"

    HEADERS=$(curl -s -I "$ELEMENT_URL" 2>/dev/null)

    # Check for security headers
    SECURITY_HEADERS=(
        "X-Frame-Options"
        "X-Content-Type-Options"
        "X-XSS-Protection"
        "Strict-Transport-Security"
        "Content-Security-Policy"
    )

    for header in "${SECURITY_HEADERS[@]}"; do
        if echo "$HEADERS" | grep -qi "$header"; then
            echo "✓ $header header present"
        else
            echo "✗ $header header missing"
            ISSUES_FOUND=$((ISSUES_FOUND + 1))
        fi
    done
else
    echo "⚠ curl not available for header testing"
fi

# Check SSL/TLS configuration
echo
echo "=== SSL/TLS Configuration Audit ==="
if command -v openssl >/dev/null 2>&1; then
    DOMAIN="element.yourdomain.com"  # Update with your domain
    echo "Testing SSL configuration for: $DOMAIN"

    # Check certificate validity
    if openssl s_client -connect "$DOMAIN:443" -servername "$DOMAIN" </dev/null 2>/dev/null | openssl x509 -checkend 2592000 -noout >/dev/null 2>&1; then
        echo "✓ SSL certificate valid for at least 30 days"
    else
        echo "✗ SSL certificate expires within 30 days or is invalid"
        ISSUES_FOUND=$((ISSUES_FOUND + 1))
    fi

    # Check for weak ciphers
    WEAK_CIPHERS=$(openssl s_client -connect "$DOMAIN:443" -cipher 'LOW:EXPORT:!aNULL' </dev/null 2>/dev/null | grep -c "Cipher is")
    if [ "$WEAK_CIPHERS" -eq 0 ]; then
        echo "✓ No weak ciphers supported"
    else
        echo "✗ Weak ciphers supported"
        ISSUES_FOUND=$((ISSUES_FOUND + 1))
    fi
else
    echo "⚠ OpenSSL not available for SSL testing"
fi

# Check for default/weak passwords
echo
echo "=== Default Configuration Audit ==="
if [ -f "/var/www/element-web/config.json" ]; then
    # Check for potentially insecure configuration
    if grep -qi "matrix.org" /var/www/element-web/config.json; then
        echo "⚠ Using matrix.org as homeserver (not necessarily insecure but consider self-hosting)"
    fi

    if grep -qi "disable_guests.*false" /var/www/element-web/config.json; then
        echo "⚠ Guest access enabled (consider security implications)"
    else
        echo "✓ Guest access disabled or not configured"
    fi
else
    echo "⚠ config.json not found for review"
fi

# Check system security
echo
echo "=== System Security Audit ==="

# Check for automatic updates
if command -v unattended-upgrades >/dev/null 2>&1; then
    if systemctl is-enabled unattended-upgrades >/dev/null 2>&1; then
        echo "✓ Automatic security updates enabled"
    else
        echo "⚠ Automatic security updates not enabled"
    fi
elif command -v dnf-automatic >/dev/null 2>&1; then
    if systemctl is-enabled dnf-automatic.timer >/dev/null 2>&1; then
        echo "✓ Automatic security updates enabled (dnf-automatic)"
    else
        echo "⚠ Automatic security updates not enabled"
    fi
else
    echo "⚠ Automatic update system not detected"
fi

# Check firewall status
if command -v ufw >/dev/null 2>&1; then
    if ufw status | grep -q "Status: active"; then
        echo "✓ UFW firewall active"
    else
        echo "✗ UFW firewall not active"
        ISSUES_FOUND=$((ISSUES_FOUND + 1))
    fi
elif command -v firewall-cmd >/dev/null 2>&1; then
    if firewall-cmd --state 2>/dev/null | grep -q "running"; then
        echo "✓ Firewalld active"
    else
        echo "✗ Firewalld not active"
        ISSUES_FOUND=$((ISSUES_FOUND + 1))
    fi
else
    echo "⚠ No recognized firewall detected"
fi

# Summary
echo
echo "=== Security Audit Summary ==="
echo "Issues found: $ISSUES_FOUND"

if [ "$ISSUES_FOUND" -eq 0 ]; then
    echo "✓ No security issues detected"
    exit 0
elif [ "$ISSUES_FOUND" -le 3 ]; then
    echo "⚠ Minor security issues found - review recommended"
    exit 1
else
    echo "✗ Multiple security issues found - immediate attention required"
    exit 2
fi

# Launch Element with debugging
element-desktop --enable-logging --log-level=debug

# Launch with specific user data directory
element-desktop --user-data-dir=/path/to/custom/profile

# Disable GPU acceleration (for compatibility issues)
element-desktop --disable-gpu --disable-hardware-acceleration

# Launch in development mode
element-desktop --enable-dev-tools

# Reset Element (clear all data)
rm -rf ~/.config/Element
# or on Windows: rmdir /s %APPDATA%\Element
# or on macOS: rm -rf ~/Library/Application\ Support/Element

# Download latest Element Web release
wget https://github.com/vector-im/element-web/releases/latest/download/element-web.tar.gz

# Extract and deploy
sudo tar -xzf element-web.tar.gz -C /var/www/
sudo mv /var/www/element-* /var/www/element-web

# Set permissions
sudo chown -R element:nginx /var/www/element-web
sudo chmod -R 755 /var/www/element-web

# Backup current installation
sudo cp -r /var/www/element-web /var/www/element-web.backup-$(date +%Y%m%d)

# Validate config.json syntax
python3 -m json.tool /var/www/element-web/config.json

# Test nginx configuration
sudo nginx -t

# Reload nginx without restart
sudo nginx -s reload

# Test Matrix homeserver API
curl https://matrix.org/_matrix/client/versions | jq

# Test federation connectivity
curl "https://federationtester.matrix.org/api/report?server_name=matrix.org"

# Check Matrix server well-known
curl https://matrix.org/.well-known/matrix/client | jq

# Test WebRTC/STUN connectivity
stun-client stun.l.google.com

# Check Matrix room directory
curl "https://matrix.org/_matrix/client/r0/publicRooms" | jq '.chunk[] | .alias'

# Monitor Element Desktop logs (Linux)
tail -f ~/.config/Element/logs/main.log

# Monitor nginx access logs for Element Web
sudo tail -f /var/log/nginx/access.log | grep element

# Extract error logs
sudo grep -i error /var/log/nginx/error.log

# Analyze request patterns
awk '{print $7}' /var/log/nginx/access.log | sort | uniq -c | sort -rn

# Monitor system resources during Element usage
top -p $(pgrep -d',' element)

# Check network connections
ss -tuln | grep -E ':(80|443|8008|8448)'

# Backup Element Web installation
sudo tar -czf element-web-backup-$(date +%Y%m%d).tar.gz -C /var/www element-web

# Backup Element Desktop user data
tar -czf element-desktop-backup-$(date +%Y%m%d).tar.gz -C ~/.config Element

# Check disk usage
du -sh /var/www/element-web
du -sh ~/.config/Element

# Clean up old nginx logs
sudo find /var/log/nginx -name "*.log.*" -mtime +30 -delete

# Update Element Web to latest version
cd /tmp
wget https://github.com/vector-im/element-web/releases/latest/download/element-web.tar.gz
sudo systemctl stop nginx
sudo tar -xzf element-web.tar.gz -C /var/www/
sudo cp /var/www/element-web/config.json /var/www/element-*/
sudo rm -rf /var/www/element-web
sudo mv /var/www/element-* /var/www/element-web
sudo chown -R element:nginx /var/www/element-web
sudo systemctl start nginx