57 lines
1.6 KiB
Nix
57 lines
1.6 KiB
Nix
{ lib, config, ... }:
|
|
{
|
|
services.matrix-synapse = {
|
|
enable = true;
|
|
withJemalloc = true;
|
|
enableRegistrationScript = false;
|
|
extraConfigFiles = [ config.sops.secrets."synapse/secret".path ];
|
|
settings = {
|
|
server_name = "ny4.dev";
|
|
public_baseurl = "https://matrix.ny4.dev";
|
|
presence.enabled = false; # tradeoff
|
|
listeners = [
|
|
{
|
|
path = "/run/matrix-synapse/synapse.sock";
|
|
type = "http";
|
|
resources = lib.singleton {
|
|
names = [
|
|
"client"
|
|
"federation"
|
|
];
|
|
compress = true;
|
|
};
|
|
}
|
|
];
|
|
|
|
experimental_features = {
|
|
# MSC3575 (Sliding Sync API endpoints)
|
|
# TODO: drop matrix-sliding-sync proxy
|
|
msc3575_enabled = true;
|
|
};
|
|
|
|
# https://element-hq.github.io/synapse/latest/openid.html#keycloak
|
|
oidc_providers = lib.singleton {
|
|
idp_id = "keycloak";
|
|
idp_name = "id.ny4.dev";
|
|
issuer = "https://id.ny4.dev/realms/ny4";
|
|
client_id = "synapse";
|
|
client_secret_path = config.sops.secrets."synapse/oidc".path;
|
|
scopes = [
|
|
"openid"
|
|
"profile"
|
|
];
|
|
user_mapping_provider.config = {
|
|
localpart_template = "{{ user.preferred_username }}";
|
|
display_name_template = "{{ user.name }}";
|
|
};
|
|
backchannel_logout_enabled = true;
|
|
allow_existing_users = true;
|
|
};
|
|
};
|
|
};
|
|
|
|
systemd.services.matrix-synapse = {
|
|
environment = config.networking.proxy.envVars;
|
|
serviceConfig.RuntimeDirectory = [ "matrix-synapse" ];
|
|
};
|
|
}
|