summaryrefslogtreecommitdiff
path: root/hosts/surtr/matrix/default.nix
diff options
context:
space:
mode:
authorGregor Kleen <gkleen@yggdrasil.li>2023-01-30 12:20:23 +0100
committerGregor Kleen <gkleen@yggdrasil.li>2023-01-30 12:20:23 +0100
commitcfc871cce6aefaa0ff64619780a807cba761c6b2 (patch)
tree965e8276ed36f11698b6c7d6eadab9f88d5f97c5 /hosts/surtr/matrix/default.nix
parentaa54fe89b98d354d21141c589332ce7950ef2e59 (diff)
downloadnixos-cfc871cce6aefaa0ff64619780a807cba761c6b2.tar
nixos-cfc871cce6aefaa0ff64619780a807cba761c6b2.tar.gz
nixos-cfc871cce6aefaa0ff64619780a807cba761c6b2.tar.bz2
nixos-cfc871cce6aefaa0ff64619780a807cba761c6b2.tar.xz
nixos-cfc871cce6aefaa0ff64619780a807cba761c6b2.zip
...
Diffstat (limited to 'hosts/surtr/matrix/default.nix')
-rw-r--r--hosts/surtr/matrix/default.nix26
1 files changed, 7 insertions, 19 deletions
diff --git a/hosts/surtr/matrix/default.nix b/hosts/surtr/matrix/default.nix
index df044622..5b89e321 100644
--- a/hosts/surtr/matrix/default.nix
+++ b/hosts/surtr/matrix/default.nix
@@ -77,11 +77,11 @@ with lib;
77 }; 77 };
78 sops.secrets."matrix-synapse-registration.yaml" = { 78 sops.secrets."matrix-synapse-registration.yaml" = {
79 format = "binary"; 79 format = "binary";
80 sopsFile = ./registration.yaml; 80 sopsFile = ./registration_yaml;
81 }; 81 };
82 sops.secrets."matrix-synapse-turn-secret.yaml" = { 82 sops.secrets."matrix-synapse-turn-secret.yaml" = {
83 format = "binary"; 83 format = "binary";
84 sopsFile = ./coturn-auth-secret.yaml; 84 sopsFile = ./coturn-auth-secret_yaml;
85 }; 85 };
86 86
87 systemd.services.matrix-synapse = { 87 systemd.services.matrix-synapse = {
@@ -222,27 +222,15 @@ with lib;
222 }; 222 };
223 }; 223 };
224 224
225 security.acme.domains = { 225 security.acme.rfc2136Domains = {
226 "element.synapse.li" = { 226 "element.synapse.li" = {
227 zone = "synapse.li"; 227 restartUnits = ["nginx.service"];
228 certCfg = {
229 postRun = ''
230 ${pkgs.systemd}/bin/systemctl try-restart nginx.service
231 '';
232 };
233 }; 228 };
234 "turn.synapse.li" = { 229 "turn.synapse.li" = {
235 zone = "synapse.li"; 230 restartUnits = ["coturn.service"];
236 certCfg = {
237 postRun = ''
238 ${pkgs.systemd}/bin/systemctl try-restart coturn.service
239 '';
240 };
241 }; 231 };
242 "synapse.li".certCfg = { 232 "synapse.li" = {
243 postRun = '' 233 restartUnits = ["nginx.service"];
244 ${pkgs.systemd}/bin/systemctl try-restart nginx.service
245 '';
246 }; 234 };
247 }; 235 };
248 236