diff options
| -rw-r--r-- | hosts/surtr/dns/zones/li.synapse.soa | 3 | ||||
| -rw-r--r-- | hosts/surtr/matrix/default.nix | 34 | ||||
| -rw-r--r-- | hosts/surtr/postgresql.nix | 5 |
3 files changed, 1 insertions, 41 deletions
diff --git a/hosts/surtr/dns/zones/li.synapse.soa b/hosts/surtr/dns/zones/li.synapse.soa index 50c341a7..1a7c57ea 100644 --- a/hosts/surtr/dns/zones/li.synapse.soa +++ b/hosts/surtr/dns/zones/li.synapse.soa | |||
| @@ -1,7 +1,7 @@ | |||
| 1 | $ORIGIN synapse.li. | 1 | $ORIGIN synapse.li. |
| 2 | $TTL 3600 | 2 | $TTL 3600 |
| 3 | @ IN SOA ns.yggdrasil.li. root.yggdrasil.li. ( | 3 | @ IN SOA ns.yggdrasil.li. root.yggdrasil.li. ( |
| 4 | 2022022502 ; serial | 4 | 2022022503 ; serial |
| 5 | 10800 ; refresh | 5 | 10800 ; refresh |
| 6 | 3600 ; retry | 6 | 3600 ; retry |
| 7 | 604800 ; expire | 7 | 604800 ; expire |
| @@ -22,7 +22,6 @@ $TTL 3600 | |||
| 22 | @ IN TXT "v=spf1 redirect=yggdrasil.li" | 22 | @ IN TXT "v=spf1 redirect=yggdrasil.li" |
| 23 | 23 | ||
| 24 | _matrix._tcp IN SRV 5 0 443 synapse.li. | 24 | _matrix._tcp IN SRV 5 0 443 synapse.li. |
| 25 | _matrix-identity._tcp IN SRV 5 0 443 synapse.li. | ||
| 26 | 25 | ||
| 27 | element IN CNAME synapse.li. | 26 | element IN CNAME synapse.li. |
| 28 | _acme-challenge.element IN NS ns.yggdrasil.li. | 27 | _acme-challenge.element IN NS ns.yggdrasil.li. |
diff --git a/hosts/surtr/matrix/default.nix b/hosts/surtr/matrix/default.nix index b07f9fe2..53b0bdc4 100644 --- a/hosts/surtr/matrix/default.nix +++ b/hosts/surtr/matrix/default.nix | |||
| @@ -38,9 +38,6 @@ | |||
| 38 | "/run/credentials/matrix-synapse.service/registration.yaml" | 38 | "/run/credentials/matrix-synapse.service/registration.yaml" |
| 39 | "/run/credentials/matrix-synapse.service/turn-secret.yaml" | 39 | "/run/credentials/matrix-synapse.service/turn-secret.yaml" |
| 40 | ]; | 40 | ]; |
| 41 | extraConfig = '' | ||
| 42 | default_identity_server: https://synapse.li | ||
| 43 | ''; | ||
| 44 | }; | 41 | }; |
| 45 | sops.secrets."matrix-synapse-registration.yaml" = { | 42 | sops.secrets."matrix-synapse-registration.yaml" = { |
| 46 | format = "binary"; | 43 | format = "binary"; |
| @@ -243,36 +240,5 @@ | |||
| 243 | owner = "turnserver"; | 240 | owner = "turnserver"; |
| 244 | group = "turnserver"; | 241 | group = "turnserver"; |
| 245 | }; | 242 | }; |
| 246 | |||
| 247 | services.mxisd = { | ||
| 248 | enable = true; | ||
| 249 | matrix.domain = "synapse.li"; | ||
| 250 | server = { | ||
| 251 | name = "localhost"; | ||
| 252 | port = 8090; | ||
| 253 | }; | ||
| 254 | extraConfig = { | ||
| 255 | matrix = { | ||
| 256 | v1 = true; | ||
| 257 | v2 = true; | ||
| 258 | }; | ||
| 259 | hashing = { | ||
| 260 | enabled = true; | ||
| 261 | rotationPolicy = "per_requests"; | ||
| 262 | hashStorageType = "sql"; | ||
| 263 | algorithms = ["sha256"]; | ||
| 264 | requests = 10; | ||
| 265 | }; | ||
| 266 | server.publicUrl = "https://synapse.li"; | ||
| 267 | storage = { | ||
| 268 | backend = "postgresql"; | ||
| 269 | provider.postgresql = { | ||
| 270 | database = "//file%3A%2F%2F%2Frun%2Fpostgresql%2F.s.PGSQL.5432/mxisd?socketFactory=org.newsclub.net.unix.AFUNIXSocketFactory%24URIScheme"; | ||
| 271 | }; | ||
| 272 | }; | ||
| 273 | forward.servers = ["matrix-org"]; | ||
| 274 | invite.resolution.recursive = false; | ||
| 275 | }; | ||
| 276 | }; | ||
| 277 | }; | 243 | }; |
| 278 | } | 244 | } |
diff --git a/hosts/surtr/postgresql.nix b/hosts/surtr/postgresql.nix index e622f4e9..a34bc675 100644 --- a/hosts/surtr/postgresql.nix +++ b/hosts/surtr/postgresql.nix | |||
| @@ -9,11 +9,6 @@ | |||
| 9 | CREATE USER "matrix-synapse"; | 9 | CREATE USER "matrix-synapse"; |
| 10 | GRANT ALL PRIVILEGES ON DATABASE "matrix-synapse" TO "matrix-synapse"; | 10 | GRANT ALL PRIVILEGES ON DATABASE "matrix-synapse" TO "matrix-synapse"; |
| 11 | GRANT ALL PRIVILEGES ON ALL TABLES IN SCHEMA public TO "matrix-synapse"; | 11 | GRANT ALL PRIVILEGES ON ALL TABLES IN SCHEMA public TO "matrix-synapse"; |
| 12 | |||
| 13 | CREATE DATABASE "mxisd" WITH TEMPLATE "template0" ENCODING "UTF8" LOCALE "C"; | ||
| 14 | CREATE USER "mxisd"; | ||
| 15 | GRANT ALL PRIVILEGES ON DATABASE "mxisd" TO "mxisd"; | ||
| 16 | GRANT ALL PRIVILEGES ON ALL TABLES IN SCHEMA public TO "mxisd"; | ||
| 17 | ''; | 12 | ''; |
| 18 | }; | 13 | }; |
| 19 | }; | 14 | }; |
