server: add matrix

modules/services/server/matrix.nix

@@ -15,37 +15,6 @@
         extraConfigFiles = [
             config.age.secrets."services/matrix/synapse.yml".path
         ];
-
-        admin_contact: "mailto:admin@kabtop.de";
-        retention:
-          enabled: true
-          default_policy:
-            min_lifetime: 1d
-            max_lifetime: 1y
-        federation_client_minimum_tls_version: 1.2
-        password_config:
-          policy:
-            enabled: true
-            minimum_length: 8
-            require_digit: true
-            require_lowercase: true
-            require_uppercase: true
-        email:
-          smtp_host: in-v3.mailjet.com
-          smtp_port: 587
-          smtp_user: "secret123"
-          smtp_pass: "secret123"
-          require_transport_security: true
-          enable_tls: true
-          notif_from: "%(app)s homeserver <postmaster@kabtop.de>"
-          app_name: "Kabtop Matrix"
-          enable_notifs: true
-        push:
-          include_content: false
-        database:
-          args:
-            password: "secret123"
-            host: localhost
     };
 
 }

secrets/secrets.nix

@@ -32,4 +32,5 @@ in
         #"passwords/services/mail/mailjet.age".publicKeys = servers ++ users;
         #"passwords/services/mail/mailjet.age".publicKeys = systems ++ users;
         "services/coturn/static-auth.age".publicKeys = servers ++ users;
+        "services/matrix/synapse.age".publicKeys = servers ++ users;
     }

secrets/services/matrix/synapse.age

@@ -0,0 +1,26 @@
+age-encryption.org/v1
+-> ssh-ed25519 neExcQ bDWppOfoYU4VGbq864q0JXN250zMghYVt3s4IO7Auj4
+YHp12unTxssYTbPYTCBZY2LifKpIgxBN/UQfDtZ7aG0
+-> ssh-rsa VtjGpQ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+-> piv-p256 grR75w AlrhNdzcWFtr3YEDjlvx7B33qq6stwJ3Ururbbzd/r0D
+ZM9yjVz+/CjSpCKUAQ+S8cxoP0YVyisqtTO/KuFtAKs
+-> ~<E5-<6v-grease CDt{ +C/*m l'T`+M? /ft
+pxvknG0AebDXjCRu/CPxH4jquH0nJk7319gJdbLbR14VpL8je7fjEdjI5p1/+060
+V+9zL/X8qlfgmBf8H7Fw4rFX0zIpV+f/GO2DLqT9HMUyo37WS4iksHbNqJe/8FU
+--- VYZH5CU6E1w+d+m4Tz5tysMJjU7otdv3x859xv8Vhm8
+<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><0F>
+E<><45>c<19>l<EFBFBD><03><16>8<EFBFBD><38><EFBFBD><EFBFBD>JY<4A>
+<EFBFBD>Mh<07><>ww<><77><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>o[<5B>F=3hͫ'Ig<49>Oz<4F><7A>$<24>*<2A><>CY<>[gA<67><41><EFBFBD>V˼<56><CBBC>pJ<04>L&;{<7B>}ON<4F>.<2E><><EFBFBD>
+<EFBFBD><EFBFBD>n<1B><><EFBFBD>;h<11><>g<EFBFBD>π<EFBFBD>]<5D>D<EFBFBD>n4<6E><11><>&<26>z\;2<><32>Uj<55>x<EFBFBD><78>~:<3A>؃+
+0<>?_t<5F><74>CƤb