daniel/dotfiles
1
0
Fork 0
Code Activity Actions

cleanup

Browse source
This commit is contained in:
Daniel Kempkens 2022-11-27 23:13:52 +01:00
parent e8d15a1267
commit 7b2210549d
Signed by: daniel
SSH key fingerprint: SHA256:Ks/MyhQYcPRQiwMKLAKquWCdCPe3JXlb1WttgnAoSeM
2 changed files with 0 additions and 62 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

57
system/nixos/dendrite.nix
View file

@ -1,57 +0,0 @@
{ secret, ... }:
let
connectionString = "postgres://${secret.dendrite.database.user}:${secret.dendrite.database.password}@10.99.99.3/dendrite?sslmode=disable";
in
{
services.dendrite = {
enable = true;
environmentFile = "/var/lib/dendrite-secrets/environment";
loadCredential = [
"private_key:/var/lib/dendrite-secrets/matrix_key.pem"
];
settings = {
global = {
server_name = "kempkens.io";
private_key = "$CREDENTIALS_DIRECTORY/private_key";
metrics.enabled = false;
report_stats.enabled = false;
};
app_service_api = {
database.connection_string = connectionString;
config_files = [
"/etc/container-matrix/signal/registration.yaml"
"/etc/container-matrix/telegram/registration.yaml"
"/etc/container-matrix/whatsapp/registration.yaml"
];
};
federation_api.database.connection_string = connectionString;
key_server.database.connection_string = connectionString;
media_api.database.connection_string = connectionString;
mscs.database.connection_string = connectionString;
room_server.database.connection_string = connectionString;
sync_api.database.connection_string = connectionString;
user_api.account_database.connection_string = connectionString;
user_api.device_database.connection_string = connectionString;
client_api = {
registration_shared_secret = "$REGISTRATION_SHARED_SECRET";
registration_disabled = true;
};
mscs.mscs = [
# threading
"msc2946"
# spaces
"msc2836"
];
};
};
networking.firewall.allowedTCPPorts = [ 8008 ];
}

5
system/nixos/synapse.nix
View file

@ -81,11 +81,6 @@
"2001:db8::/32" "2001:db8::/32"
"2a01:4f8:c2c:989c::/64" "2a01:4f8:c2c:989c::/64"
]; ];
url_preview_url_blacklist = [
{ username = "*"; }
{ scheme = "http"; }
{ netloc = "^[0-9]+\.[0-9]+\.[0-9]+\.[0-9]+$"; }
];
inherit (secret.synapse) registration_shared_secret; inherit (secret.synapse) registration_shared_secret;
inherit (secret.synapse) macaroon_secret_key; inherit (secret.synapse) macaroon_secret_key;