chn/nixos
1
0
Fork 0
mirror of https://github.com/CHN-beta/nixos.git synced 2024-10-23 04:58:44 +08:00
Code Issues Packages Projects Releases Wiki Activity

services.synapse: enable redis

Browse Source
This commit is contained in:
陈浩南 2023-12-17 19:50:09 +08:00
parent 1769069057
commit 59b053886b
2 changed files with 15 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
modules/services/synapse.nix
View File

@ -7,6 +7,7 @@ inputs:
{
autoStart = mkOption { type = types.bool; default = true; };
port = mkOption { type = types.ints.unsigned; default = 8008; };
redisPort = mkOption { type = types.ints.unsigned; default = 6379; };
hostname = mkOption { type = types.nonEmptyStr; default = "synapse.chn.moe"; };
matrixHostname = mkOption { type = types.nonEmptyStr; default = "chn.moe"; };
};});
@ -40,7 +41,8 @@ inputs:
{
services."synapse-${instance.name}" =
let
package = inputs.pkgs.matrix-synapse.override { extras = [ "url-preview" "postgres" ]; plugins = []; };
package = inputs.pkgs.matrix-synapse.override
{ extras = [ "url-preview" "postgres" "redis" ]; plugins = []; };
config = inputs.config.sops.templates."synapse/${instance.name}.yaml".path;
homeserver = "${package}/bin/synapse_homeserver";
in
@ -131,6 +133,12 @@ inputs:
};
allow_unsafe_locale = true;
};
redis =
{
enabled = true;
port = instance.value.redisPort;
password = placeholder."redis/synapse-${instance.name}";
};
turn_shared_secret = placeholder."synapse/${instance.name}/coturn";
registration_shared_secret = placeholder."synapse/${instance.name}/registration";
macaroon_secret_key = placeholder."synapse/${instance.name}/macaroon";
@ -199,6 +207,9 @@ inputs:
(instance: { name = "synapse_${replaceStrings [ "-" ] [ "_" ] instance.name}"; value = {}; })
(attrsToList synapse.instances));
};
redis.instances = listToAttrs (map
(instance: { name = "synapse-${instance.name}"; value.port = instance.value.redisPort; })
(attrsToList synapse.instances));
nginx =
{
enable = mkIf (synapse.instances != {}) true;

5
secrets/vps7/default.yaml
View File

@ -13,6 +13,7 @@ redis:
nextcloud: ENC[AES256_GCM,data:jwN/CqwkU/5Rd6w75/bV2Yej9b0CoxZaiJEcZXFx+9XUPY3Xg1tQdEr1SALG8xzOEdoL6WBVs14NvrrL25GeTQ==,iv:p5+0AB52QqScJwMhNIrM/7HAcRPdD9Z8xV6uwIDOwIg=,tag:f1XbNDDRXvGl/dkV9Wp2Ug==,type:str]
send: ENC[AES256_GCM,data:IGxj3cgp+fQBdupfK+IgPEQSPuXdM9LRSLGSATNIkzUWC6sQw1aaKTDuRc8cU2BG6quthRwuWnK/F7k3KrUi8Q==,iv:LI9MkaF4e47FPUyL7AXZpO+CdgF91ScdiqjrE8PZjJ4=,tag:eNugln5M0AhU1xmVWFN7Aw==,type:str]
mastodon: ENC[AES256_GCM,data:E5aMRzqd1dqcw66uZwWoT+LDH30mg1vZjk3lhKIXKPd36MANE6z04aBPcAHyHT71jEYsect9JXagC4MUJBuSSQ==,iv:4IjTTNSTraL33fInlTkB2ZylcEaaKi5pgvugZIk24e0=,tag:32JSTNpF2cxYh/NEAS6jZQ==,type:str]
synapse-synapse: ENC[AES256_GCM,data:8CVbcN2FG4mRT4PnlOGsS7tDfS+6ojIJFvq2EwItxn1gg2Ghd/Bmx+5tS/Do2FrYp/Xiv1EqucomM50r5bXnmg==,iv:TT7zBKQ4M10XYVCn5aeSu9IqjrIEHHazPUCOTmgRAU0=,tag:0+Q9hZMBVDj1TnHj3xoTBA==,type:str]
postgresql:
wallabag: ENC[AES256_GCM,data:ANwvEE3K/W/hU34Y7RvlbUuJNo2bOaRfeusYM9pRxXQOdG4XpwYfd/DprsrVjlkrMFuTurUR5j6UNHWh+ILDbQ==,iv:K8doqhVosz+OosMrLJXrSxairr84EeGs3EWgVQjpkS8=,tag:WjDzy7ubm/GVlBkW0O3znQ==,type:str]
misskey_misskey: ENC[AES256_GCM,data:lRbSz7bbiWEdK/cRD41fLvFJF4WYsclKHVykFcU3LIz9vnKlR3VdczzznVqpT7JvG6OUi+TmipJii+0KzXHtdA==,iv:8sBKgVwuDJdThup0KQ6cnAV5O2liwVra1yIpDHVfpMI=,tag:DyUpaHai8ZUyllvZBUm8sg==,type:str]
@ -117,8 +118,8 @@ sops:
SnFHS1Z0SXUzTFdEd29KTy9DU3Y3R0UKfhh+rUmWDrf+UGjclP57dHipPLFoXSqy
HdelmfV6q4/c7ppx2E+oZw3VNgoZCsrxxzYZfwxHJiZb+5vkE0D8iA==
-----END AGE ENCRYPTED FILE-----
lastmodified: "2023-12-17T11:19:52Z"
mac: ENC[AES256_GCM,data:oLp1jVWscy64axwpILDh2PKKD8MKxLfl9rLmt2/ojSo2U4vFGu83o0eVUhBEWQZiajRO/SOWckEKZeNAwxFNVRS0dOSIMgwTHFqxREwtY0nVtH0rChlGHSf/LjOuHhMbknlchvNVqVNhqEqnGdAKxWvhmaH9ZtqoafvN4+gd118=,iv:zMpWL31SAaJ4HoXPK3qlq0WXEAmPkvc+aMmCf+exuVc=,tag:cBI0xHul6beJUG9o4cmbtw==,type:str]
lastmodified: "2023-12-17T11:52:05Z"
mac: ENC[AES256_GCM,data:q+zaY8o4v/P+uAMCmQPKkkm9tPDUhWeVW1nyKHMMLDlBZ/8wI7plJkiBdZAUI4Vk62yxrrV1qVLZwMZba3fFW0EAyt0dRzNHJCT/lbNdiOfG4yIIyXxs6UvZgFXEliFUh+jmgMhFgaQOdZSReSyNByxEP9U8c1H354CbyMqUdEg=,iv:ZdOoa50Lw2fG2GrDj2qUKrjHRsQTKCBp3cJY9O4jb68=,tag:V5KmW9uKmqhHOz3jMFx/5A==,type:str]
pgp: []
unencrypted_suffix: _unencrypted
version: 3.8.1