diff options
| author | Gregor Kleen <gkleen@yggdrasil.li> | 2023-01-30 12:20:23 +0100 |
|---|---|---|
| committer | Gregor Kleen <gkleen@yggdrasil.li> | 2023-01-30 12:20:23 +0100 |
| commit | cfc871cce6aefaa0ff64619780a807cba761c6b2 (patch) | |
| tree | 965e8276ed36f11698b6c7d6eadab9f88d5f97c5 /hosts/surtr/matrix/default.nix | |
| parent | aa54fe89b98d354d21141c589332ce7950ef2e59 (diff) | |
| download | nixos-cfc871cce6aefaa0ff64619780a807cba761c6b2.tar nixos-cfc871cce6aefaa0ff64619780a807cba761c6b2.tar.gz nixos-cfc871cce6aefaa0ff64619780a807cba761c6b2.tar.bz2 nixos-cfc871cce6aefaa0ff64619780a807cba761c6b2.tar.xz nixos-cfc871cce6aefaa0ff64619780a807cba761c6b2.zip | |
...
Diffstat (limited to 'hosts/surtr/matrix/default.nix')
| -rw-r--r-- | hosts/surtr/matrix/default.nix | 26 |
1 files changed, 7 insertions, 19 deletions
diff --git a/hosts/surtr/matrix/default.nix b/hosts/surtr/matrix/default.nix index df044622..5b89e321 100644 --- a/hosts/surtr/matrix/default.nix +++ b/hosts/surtr/matrix/default.nix | |||
| @@ -77,11 +77,11 @@ with lib; | |||
| 77 | }; | 77 | }; |
| 78 | sops.secrets."matrix-synapse-registration.yaml" = { | 78 | sops.secrets."matrix-synapse-registration.yaml" = { |
| 79 | format = "binary"; | 79 | format = "binary"; |
| 80 | sopsFile = ./registration.yaml; | 80 | sopsFile = ./registration_yaml; |
| 81 | }; | 81 | }; |
| 82 | sops.secrets."matrix-synapse-turn-secret.yaml" = { | 82 | sops.secrets."matrix-synapse-turn-secret.yaml" = { |
| 83 | format = "binary"; | 83 | format = "binary"; |
| 84 | sopsFile = ./coturn-auth-secret.yaml; | 84 | sopsFile = ./coturn-auth-secret_yaml; |
| 85 | }; | 85 | }; |
| 86 | 86 | ||
| 87 | systemd.services.matrix-synapse = { | 87 | systemd.services.matrix-synapse = { |
| @@ -222,27 +222,15 @@ with lib; | |||
| 222 | }; | 222 | }; |
| 223 | }; | 223 | }; |
| 224 | 224 | ||
| 225 | security.acme.domains = { | 225 | security.acme.rfc2136Domains = { |
| 226 | "element.synapse.li" = { | 226 | "element.synapse.li" = { |
| 227 | zone = "synapse.li"; | 227 | restartUnits = ["nginx.service"]; |
| 228 | certCfg = { | ||
| 229 | postRun = '' | ||
| 230 | ${pkgs.systemd}/bin/systemctl try-restart nginx.service | ||
| 231 | ''; | ||
| 232 | }; | ||
| 233 | }; | 228 | }; |
| 234 | "turn.synapse.li" = { | 229 | "turn.synapse.li" = { |
| 235 | zone = "synapse.li"; | 230 | restartUnits = ["coturn.service"]; |
| 236 | certCfg = { | ||
| 237 | postRun = '' | ||
| 238 | ${pkgs.systemd}/bin/systemctl try-restart coturn.service | ||
| 239 | ''; | ||
| 240 | }; | ||
| 241 | }; | 231 | }; |
| 242 | "synapse.li".certCfg = { | 232 | "synapse.li" = { |
| 243 | postRun = '' | 233 | restartUnits = ["nginx.service"]; |
| 244 | ${pkgs.systemd}/bin/systemctl try-restart nginx.service | ||
| 245 | ''; | ||
| 246 | }; | 234 | }; |
| 247 | }; | 235 | }; |
| 248 | 236 | ||
