cluster/services/matrix: migrate from VEGAS/matrix, add blackbox check

This commit is contained in:
Max Headroom 2023-06-05 21:50:34 +02:00
parent 16b4eb82bb
commit d0ebfa278a
7 changed files with 25 additions and 14 deletions

View file

@ -5,7 +5,7 @@ in
{
age.secrets = {
matrix-appservice-discord-token = {
file = ../../../../../secrets/matrix-appservice-discord-token.age;
file = ../../../../secrets/matrix-appservice-discord-token.age;
owner = "root";
group = "root";
mode = "0400";

View file

@ -2,7 +2,7 @@
{
age.secrets = {
coturn-static-auth = {
file = ../../../../secrets/coturn-static-auth.age;
file = ../../../secrets/coturn-static-auth.age;
owner = "turnserver";
group = "root";
mode = "0400";

View file

@ -0,0 +1,19 @@
{ tools, ... }:
{
services.matrix = {
nodes.homeserver = [ "VEGAS" ];
nixos.homeserver = [
./homeserver.nix
./coturn.nix
./bridges/discord.nix
./federation.nix
./web-client.nix
];
};
monitoring.blackbox.targets.matrix = {
address = "https://matrix.${tools.meta.domain}/_matrix/federation/v1/version";
module = "https2xx";
};
}

View file

@ -55,34 +55,27 @@ let
dbConfigOut = "${cfg.dataDir}/synapse-db-config-generated.yml";
cfg = config.services.matrix-synapse;
in {
imports = [
./coturn.nix
./bridges/discord.nix
./federation.nix
./web-client.nix
];
age.secrets = {
synapse-ldap = {
file = ../../../../secrets/synapse-ldap.age;
file = ../../../secrets/synapse-ldap.age;
owner = "matrix-synapse";
group = "matrix-synapse";
mode = "0400";
};
synapse-db = {
file = ../../../../secrets/synapse-db.age;
file = ../../../secrets/synapse-db.age;
owner = "matrix-synapse";
group = "matrix-synapse";
mode = "0400";
};
synapse-turn = {
file = ../../../../secrets/synapse-turn.age;
file = ../../../secrets/synapse-turn.age;
owner = "matrix-synapse";
group = "matrix-synapse";
mode = "0400";
};
synapse-keys = {
file = ../../../../secrets/synapse-keys.age;
file = ../../../secrets/synapse-keys.age;
owner = "matrix-synapse";
group = "matrix-synapse";
mode = "0400";

View file

@ -23,7 +23,6 @@
./services/gitlab
./services/jokes
./services/mail
./services/matrix
./services/minecraft
./services/nix/binary-cache.nix
./services/nix/nar-serve.nix