* Use packages.matrix.org for packages

See https://github.com/vector-im/riot-web/issues/9497 (applies to more than just Olm)

* changelog

Using systemd-python allows for logging to the systemd journal,
as is documented in: `synapse/contrib/systemd/log_config.yaml`.

Signed-off-by: Silke Hofstra <silke@slxh.eu>

Move some rest endpoints to client reader

Fix schema upgrade when dropping tables

Avoid sending syntax errors from the manhole to sentry.

Add time-based account expiration

We need to drop tables in the correct order due to foreign table
constraints (on `application_services`), otherwise the DROP TABLE
command will fail.

Introduced in #4992.

Rewrite Datastore.get_server_verify_keys

Rewrite this so that it doesn't hammer the database.

since we're pulling everything out of KeyStore anyway, we may as well simplify
it.

There's no point in collecting a merged dict of keys: it is sufficient to
consider just the new keys which have been fetched by the most recent
key_fetch_fns.

These have been unused since #4120, and with the demise of perspectives, it is
unlikely that they will ever be used again.

add context to phonehome stats

Fix from_server buglet in get_keys_from_perspectives

Tables dropped: 
 * application_services, 
 * application_services_regex, 
 * transaction_id_to_pdu, 
 * stats_reporting
 * current_state_resets
 * event_content_hashes
 * event_destinations
 * event_edge_hashes
 * event_signatures
 * feedback
 * room_hosts
 * state_forward_extremities

make sure we store the name of the server the keys came from, rather than the
origin server, after doing a fetch-from-perspectives.

Cleanups in the Keyring

It's easier to check it in the caller than to complicate the interface with an
extra param.

Make this just return the key dict, rather than a single-entry dict mapping the
server name to the key dict. It's easy for the caller to get the server name
from from the response object anyway.

* rewrite & simplify

* changelog

* cleanup potential sql injection

Add delete group admin API

Prevent kick events from succeeding if the user is not currently in the room.

* Do not double encode fallback redirect URL

Signed-off-by: Marcel Fabian Krüger <zauguin@gmail.com>

Fix issue #4596

Correct default POSTGRES_USER in Docker README