RGBCube/ncc
1
Fork 0
mirror of https://github.com/RGBCube/ncc synced 2025-08-01 04:27:46 +00:00
Code Issues Activity

matrix: store signing key

Browse source
This commit is contained in:
RGBCube 2025-06-12 04:22:10 +03:00
parent 43386cc144
commit 8de5fb909b
Signed by: RGBCube
SSH key fingerprint: SHA256:CzqbPcfwt+GxFYNnFVCqoN5Itn4YFrshg1TrnACpA5M
5 changed files with 29 additions and 14 deletions
Download patch file Download diff file Expand all files Collapse all files

15
hosts/best/matrix/default.nix
View file

@ -1,3 +1,6 @@
# TODO: FIXME: We are not handling backups properly.
# The `e2e_one_time_keys_json` table should not be backed up.
{ self, config, lib, ... }: let
inherit (config.networking) domain;
inherit (lib) const enabled genAttrs merge;
@ -29,8 +32,12 @@ in {
(self + /modules/postgresql.nix)
];
secrets.matrixKey = {
file = ./key.age;
owner = "matrix-synapse";
};
secrets.matrixSecret = {
file = ./password.secret.age;
file = ./secret.age;
owner = "matrix-synapse";
};
@ -75,10 +82,10 @@ in {
# Trusting Matrix.org.
suppress_key_server_warning = true;
};
# Sets registration_shared_secret.
extraConfigFiles = [ config.secrets.matrixSecret.path ];
signing_key_path = config.secrets.matrixKey.path;
registration_shared_secret_path = config.secrets.matrixSecret.path;
};
settings.listeners = [{
inherit port;