server: add matrix

modules/services/server/matrix.nix

@@ -15,37 +15,6 @@
         extraConfigFiles = [
             config.age.secrets."services/matrix/synapse.yml".path
         ];
-
-        admin_contact: "mailto:admin@kabtop.de";
-        retention:
-          enabled: true
-          default_policy:
-            min_lifetime: 1d
-            max_lifetime: 1y
-        federation_client_minimum_tls_version: 1.2
-        password_config:
-          policy:
-            enabled: true
-            minimum_length: 8
-            require_digit: true
-            require_lowercase: true
-            require_uppercase: true
-        email:
-          smtp_host: in-v3.mailjet.com
-          smtp_port: 587
-          smtp_user: "secret123"
-          smtp_pass: "secret123"
-          require_transport_security: true
-          enable_tls: true
-          notif_from: "%(app)s homeserver <postmaster@kabtop.de>"
-          app_name: "Kabtop Matrix"
-          enable_notifs: true
-        push:
-          include_content: false
-        database:
-          args:
-            password: "secret123"
-            host: localhost
     };
 
 }

secrets/secrets.nix

@@ -32,4 +32,5 @@ in
         #"passwords/services/mail/mailjet.age".publicKeys = servers ++ users;
         #"passwords/services/mail/mailjet.age".publicKeys = systems ++ users;
         "services/coturn/static-auth.age".publicKeys = servers ++ users;
+        "services/matrix/synapse.age".publicKeys = servers ++ users;
     }

secrets/services/matrix/synapse.age

@@ -0,0 +1,26 @@
+age-encryption.org/v1
+-> ssh-ed25519 neExcQ bDWppOfoYU4VGbq864q0JXN250zMghYVt3s4IO7Auj4
+YHp12unTxssYTbPYTCBZY2LifKpIgxBN/UQfDtZ7aG0
+-> ssh-rsa VtjGpQ
+D1uKfG8g0hXiig7riOaPONJFBsZgliXVShEVnD8QLyogX9GwYvawA7Vi7/OdeC9s
+BLuwAPBcfLbpR5C5SBF1Qr9pdbwY3N4NVX7H5jR9hnZGU+b4AitDsNJCBSE+J7Pd
+cIZsEqEjhlzqdrs6EcrcG9C2Sf19fAz9zglbw7oJfv8x5nUgx6ueFiMKduBIUW14
+7dOx8wx7YGwQ0N3gmuZXChrzp8sy7UcqK0mQYHlguB+4Ct7ehf+DMRPiuNs6878g
+VfI/octxGSzGTSOwclA+AWyaShPEYhKyDL5i2ScEYaDM7Bqry5fGWqwFBxWv35AB
+jyCgIixhj9F4EBhldEYwCXQlUuNLK3QlB9wGxev8K6wfLy5aX+3LGzomVJefRYS+
+ZWJlExxzmlKA5WHUIl70cGTGNE0nCKmOXzvOReGt934HBsBXyfJOMZJEORVSt7Yb
+nCuKxzXmGHdGxOdktuyO9EuaCPolkSo/n7gqB3NVpdj6orKWuJqC+1G3ASBhYDnP
+Ilu+a1AUZi55T6uFNIbZFBS9tYS2raO0JJzVpC3g5fJTPMwFzmq6Rj5vSUSGTgD7
+x3GT3XsMZrJTaFCV2NJP3XlFZB5bWwdXlQg5/OrkNcw2/U7wFGiiFU5zkdGwUyJc
+QSVQEIKlPqTcm81tDrEpRyWEpEXpeRpvt7kkio+rirU
+-> piv-p256 grR75w AlrhNdzcWFtr3YEDjlvx7B33qq6stwJ3Ururbbzd/r0D
+ZM9yjVz+/CjSpCKUAQ+S8cxoP0YVyisqtTO/KuFtAKs
+-> ~<E5-<6v-grease CDt{ +C/*m l'T`+M? /ft
+pxvknG0AebDXjCRu/CPxH4jquH0nJk7319gJdbLbR14VpL8je7fjEdjI5p1/+060
+V+9zL/X8qlfgmBf8H7Fw4rFX0zIpV+f/GO2DLqT9HMUyo37WS4iksHbNqJe/8FU
+--- VYZH5CU6E1w+d+m4Tz5tysMJjU7otdv3x859xv8Vhm8
+›ªŽ¿©‘
+E³õc¸l·ÑŠ8ÐöÁ¤JYÔ
+»Mh²†wwÃó¿›ÞÁÀîo[ƒF=3hÍ«'Ig´Oz•‡$€*§®CYþ[gAÙà¨V˼<C38B>ãpJ©L&;{ì}ONö.ú¿Ê
¥“n–ñ´;hêçgòÏ€É]æD‚n4ÁîÀ&£z\;2¸<32>UjÅx³Ñ~:Ó؃+
+0<>?_t†×CƤb
+Ç	XÆ4Š¸ÄAR\õ<>w¯„.èK±zwÙ®P0GiÕÁv—…þíå-^2[b#U…Ñv)UòLÈTæ,¯£kÁ¾Nʾ0„|<óÁÎBñ¯›Õ@¸öâJ™Esû‰Ö<m¹®í@è<>gè›4/£9Çß
æ^Om<4F>°£Ôìàà#ì‹\&ÉôÈ>ƒ<>‰’<E280B0>d¡ðÐh]=h/fD
Äyw xÉëÈx>Ü5àk™SÁ»#Ðùå“z1“I
3ôH<Âxìþº¿‹äõ¥3¥ê_›Öh<C396>pµPzĽ0¾(©Mp‹Ãö1Rh¢ˆ<¶¯§¢@­Ý÷!6u…îjg&b¨)Ò¾ò4™O4ÇeÔXrx£FR¡ÔHã—“·ÇpÖ¢)U™ÌM$Eò:,fî<ÃVêf‡ºøa\Á~OXè°õ>'·a·Î9^uVi9ŽÃ)×ìVtÞe´@M¿øx)<s|ŒÔà–<06>77Yºð<C2BA>qÅœ}Éå`ÇÊëR(ÜOؤ-žØ½¯ÆX"æ
¿ÒíOÊ	ö˜ÄŠ¼ÇþqBj\Ô–ë<E28093>Ö!b‚ƒÀ»ƒ#t×<74><C397>Ï)h'¹ÚļäAÒkJ?/"Ù<12>‡<>˜>6¯¸Å+e9‡/÷x‚‡ã¨£ùBîlurÔˆ±Ûβ4|g¯ÃçmÑ'Û	æÈ—E!¨=-Šk<C5A0>E<EFBFBD>íaÜDQÀƺëktšÑ³Ôysð?ž>ì<>3z[Áša–W'$v”80sËC òbõ`L&è±üÃ\¤ÒäÇx7s>4]éfwô