diff options
author | Gregor Kleen <gkleen@yggdrasil.li> | 2023-01-30 12:20:23 +0100 |
---|---|---|
committer | Gregor Kleen <gkleen@yggdrasil.li> | 2023-01-30 12:20:23 +0100 |
commit | cfc871cce6aefaa0ff64619780a807cba761c6b2 (patch) | |
tree | 965e8276ed36f11698b6c7d6eadab9f88d5f97c5 /hosts/surtr/matrix/default.nix | |
parent | aa54fe89b98d354d21141c589332ce7950ef2e59 (diff) | |
download | nixos-cfc871cce6aefaa0ff64619780a807cba761c6b2.tar nixos-cfc871cce6aefaa0ff64619780a807cba761c6b2.tar.gz nixos-cfc871cce6aefaa0ff64619780a807cba761c6b2.tar.bz2 nixos-cfc871cce6aefaa0ff64619780a807cba761c6b2.tar.xz nixos-cfc871cce6aefaa0ff64619780a807cba761c6b2.zip |
...
Diffstat (limited to 'hosts/surtr/matrix/default.nix')
-rw-r--r-- | hosts/surtr/matrix/default.nix | 26 |
1 files changed, 7 insertions, 19 deletions
diff --git a/hosts/surtr/matrix/default.nix b/hosts/surtr/matrix/default.nix index df044622..5b89e321 100644 --- a/hosts/surtr/matrix/default.nix +++ b/hosts/surtr/matrix/default.nix | |||
@@ -77,11 +77,11 @@ with lib; | |||
77 | }; | 77 | }; |
78 | sops.secrets."matrix-synapse-registration.yaml" = { | 78 | sops.secrets."matrix-synapse-registration.yaml" = { |
79 | format = "binary"; | 79 | format = "binary"; |
80 | sopsFile = ./registration.yaml; | 80 | sopsFile = ./registration_yaml; |
81 | }; | 81 | }; |
82 | sops.secrets."matrix-synapse-turn-secret.yaml" = { | 82 | sops.secrets."matrix-synapse-turn-secret.yaml" = { |
83 | format = "binary"; | 83 | format = "binary"; |
84 | sopsFile = ./coturn-auth-secret.yaml; | 84 | sopsFile = ./coturn-auth-secret_yaml; |
85 | }; | 85 | }; |
86 | 86 | ||
87 | systemd.services.matrix-synapse = { | 87 | systemd.services.matrix-synapse = { |
@@ -222,27 +222,15 @@ with lib; | |||
222 | }; | 222 | }; |
223 | }; | 223 | }; |
224 | 224 | ||
225 | security.acme.domains = { | 225 | security.acme.rfc2136Domains = { |
226 | "element.synapse.li" = { | 226 | "element.synapse.li" = { |
227 | zone = "synapse.li"; | 227 | restartUnits = ["nginx.service"]; |
228 | certCfg = { | ||
229 | postRun = '' | ||
230 | ${pkgs.systemd}/bin/systemctl try-restart nginx.service | ||
231 | ''; | ||
232 | }; | ||
233 | }; | 228 | }; |
234 | "turn.synapse.li" = { | 229 | "turn.synapse.li" = { |
235 | zone = "synapse.li"; | 230 | restartUnits = ["coturn.service"]; |
236 | certCfg = { | ||
237 | postRun = '' | ||
238 | ${pkgs.systemd}/bin/systemctl try-restart coturn.service | ||
239 | ''; | ||
240 | }; | ||
241 | }; | 231 | }; |
242 | "synapse.li".certCfg = { | 232 | "synapse.li" = { |
243 | postRun = '' | 233 | restartUnits = ["nginx.service"]; |
244 | ${pkgs.systemd}/bin/systemctl try-restart nginx.service | ||
245 | ''; | ||
246 | }; | 234 | }; |
247 | }; | 235 | }; |
248 | 236 | ||