RuJect/nixos-infra
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

initial commit
Some checks failed
Nix CI / build (push) Failing after 31s
Details

Browse source
This commit is contained in:
Rustam Efimov 2026-04-01 08:50:01 +03:00
commit 30ce0dafc2
No known key found for this signature in database
195 changed files with 8902 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

46
services/synapse/secrets.nix Normal file
View file

@ -0,0 +1,46 @@
{
config,
lib,
...
}:
let
inherit (config.machine.synapse)
enable
;
in
with lib; mkIf enable {
sops.secrets = {
"matrix/registrationSharedSecret" = {
sopsFile = ./../../secrets/common.yaml;
owner = config.users.users.matrix-synapse.name;
inherit (config.users.users.matrix-synapse) group;
restartUnits = [ "matrix-synapse.service" ];
};
"matrix/signingKey" = {
sopsFile = ./../../secrets/common.yaml;
owner = config.users.users.matrix-synapse.name;
inherit (config.users.users.matrix-synapse) group;
restartUnits = [ "matrix-synapse.service" ];
};
"turn/authSecret" = {
sopsFile = ./../../secrets/common.yaml;
owner = config.users.users.turnserver.name;
inherit (config.users.users.turnserver) group;
restartUnits = [ "coturn.service" ];
};
};
sops.templates.matrix-synapse-config = {
owner = config.users.users.matrix-synapse.name;
inherit (config.users.users.matrix-synapse) group;
restartUnits = [ "matrix-synapse.service" ];
content = ''
registration_shared_secret: ${config.sops.placeholder."matrix/registrationSharedSecret"}
turn_shared_secret: ${config.sops.placeholder."turn/authSecret"}
mail:
smtp_pass: ${config.sops.placeholder."mail/servicePassword"}
'';
};
services.matrix-synapse.extraConfigFiles = with lib; mkIf config.machine.synapse.enable [
config.sops.templates.matrix-synapse-config.path
];
}