simono41/chaos-jetzt-nixfiles
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Add missing matrix secrets to hamilton

Browse source
This commit is contained in:
Moritz 'e1mo' Fromm 2023-08-31 22:03:18 +02:00
parent 3016056768
commit 1f168fe646
No known key found for this signature in database
GPG key ID: 1D5D79A439E787F1
2 changed files with 12 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

7
secrets/hamilton/secrets.yaml
View file

@ -1,5 +1,8 @@
coturn_static_auth_secret: ENC[AES256_GCM,data:7m7ymyb7hgN0H4KVujlr8NdkrzanQuOq1nl+ggtqvMxFauBoBLzKDMAOtH19uG7g3phkSGp9QlqD8cStlh0dE5FOiw0UN531Y6zFrZ0+wLgg0IKnqm6fmCjjKec/qsh59wRuE2BOIo1Lb74iRcP2CPPERQHrT5acRiC6SfSOZG8=,iv:KgaxzZWM7bWM+wiUrj7OzFV64JJlmep1EFrVlo0sd1Q=,tag:s7R5P2zWSKyDOOUlC4TTGw==,type:str]
synapse: synapse:
signing_key: ENC[AES256_GCM,data:WLdNVbGn772vuO9avavFvaHDlq5F1Pl2oxPlkIQC/pK9Q9GmFA2oxUy2QUPdrTfhlL6gJkjwO1JOiA==,iv:IcUQqTeJkASHTa++gXcWBzRP86Em4gm/1N/leMtFvRc=,tag:1zHAh64W/PDWa6BvhowS6w==,type:str]
registration_shared_secret: ENC[AES256_GCM,data:3mcyn8+8bfRQTJf8a6CwfO/v10W1PvM3D6POq52BV49N1KVBSs27aGq6YZFzR0H9vF5qUGXGRzk+zdNk+GK0Lw==,iv:54ZI2SGGXOQstRU0C89sJlWluC0XnxNLqrjt/ad0MzQ=,tag:gD9h+nIOz049GlaRjgX5Aw==,type:str] registration_shared_secret: ENC[AES256_GCM,data:3mcyn8+8bfRQTJf8a6CwfO/v10W1PvM3D6POq52BV49N1KVBSs27aGq6YZFzR0H9vF5qUGXGRzk+zdNk+GK0Lw==,iv:54ZI2SGGXOQstRU0C89sJlWluC0XnxNLqrjt/ad0MzQ=,tag:gD9h+nIOz049GlaRjgX5Aw==,type:str]
secret_config: ENC[AES256_GCM,data:2NYKCQxZn2S5HP6h01epylIryfFVdPdm8Mew7b3eDnfrCmJcIS//OGlYaUM76Q574V5LHg86CXDBM1pgl38oxjT7MM1GMYXiYL7ancKUivUnvfcRBYi1ZF+oCJMEwmnx6FuElU3qQ82NnJgv1rSP9mJTkGt+02LTTZR3f/UdvBohmDUYk9jhzRhdX/I9wFR1JV8Dk1PcQ4ysLrCfL0lKvvGdBE3E2C5eRrFSjWAn+ezFYP23KfyNtpDHuKW7TEzlrpZrS1yPsQ9D3tt6K1bypuJX+7zpMpXP443dxs/ZAalL2yyodQysJ3/Sb5kQQXWudEnsXP72Biw26tUVgX6o8iZ9yJEmuZDhAk3PGSmuBeohYnxk8fKIkieIDTM14GEPvEaI,iv:Xemjx/o4v9QlbbI/ZLFnT9F14xTlJ0zDP4hnVvho3wc=,tag:PoE0dVAoU2twuWUqNSUPmg==,type:str]
sops: sops:
kms: [] kms: []
gcp_kms: [] gcp_kms: []
@ -15,8 +18,8 @@ sops:
aWQ2QW05a1lrbTZZci9VMldpVzNCZFkKCJwEd5TkZaIb2M1E149/NEUB1E5E8gLu aWQ2QW05a1lrbTZZci9VMldpVzNCZFkKCJwEd5TkZaIb2M1E149/NEUB1E5E8gLu
YSDnb7eKfx8auWCEVCMiHx6POdpVvwxKnxUWHEnUBIMHhx+Y1MSclg== YSDnb7eKfx8auWCEVCMiHx6POdpVvwxKnxUWHEnUBIMHhx+Y1MSclg==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
lastmodified: "2023-08-13T10:27:18Z" lastmodified: "2023-08-31T18:55:28Z"
mac: ENC[AES256_GCM,data:BL1UtpKeieAGoexQsOPqoIasANvWjsy+7AaPCeKwev3CUWtPXwwMfsmtkPlQMggEpf5iUjNH74GJBMKKU9SKWhUwxGY7ph5VVYsF0uHlsToKNBK7H8wjtu1Bm8XqRkku/cqCu8/X5ixYx9y3hdKy7UNd8gMHJOkEriA+8J/zZrE=,iv:dE7q8JkxqdnlQcYmwj404mSWLqupxBIiQzIZSAibI+U=,tag:hj2/LhROne6S7YQ4xBMKyA==,type:str] mac: ENC[AES256_GCM,data:Jfqd39+c22Zaib+98DgSku612aU6vhmccurPtV7nQ59dg8/C4vDQ13lfxljzlk8Xe9Lc56qfvhjpdGpDuGH1EB6OFoOvdYRWvn+GofCMRV/ss+BY4LEStMH3cWBerJSC9aUu7ULqqGuzMzfWbXOBVtR5OhqVcD6SRvMufbwoGa0=,iv:FqlSyXQIKPDC3qnsT9ljB2L2ZjRNDelr5RhIUDLW738=,tag:l5qU7y6znrA1p1GB1sQ3MQ==,type:str]
pgp: pgp:
- created_at: "2023-08-12T09:39:58Z" - created_at: "2023-08-12T09:39:58Z"
enc: |- enc: |-

8
services/matrix/default.nix
View file

@ -46,6 +46,12 @@ in {
locations."/_matrix".proxyPass = "http://[::1]:${toString matrixPort}"; locations."/_matrix".proxyPass = "http://[::1]:${toString matrixPort}";
# Forward requests for e.g. SSO and password-resets. # Forward requests for e.g. SSO and password-resets.
locations."/_synapse/client".proxyPass = "http://[::1]:${toString matrixPort}"; locations."/_synapse/client".proxyPass = "http://[::1]:${toString matrixPort}";
# # Allow public access to the synapse admin API
# # The docs advise against leaving this open to just everyone. That's why this currently is commented out
# # if admin things need to be done, it's required to SSH to the server and then direct all admin requests to
# # localhost:8008/_synapse/admin
# # Leaving that in here for when I (e1mo) wonder why calls to the admin API don't work in the future
# locations."/_synapse/admin".proxyPass = "http://[::1]:${toString matrixPort}";
}; };
}; };
@ -102,7 +108,7 @@ in {
"fe80::/64" "fe80::/64"
"fc00::/7" "fc00::/7"
]; ];
admin_contact = "mailto:administration@chaos.jetzt"; admin_contact = "mailto:administration@chaos.jetzt";
url_preview_enabled = true; url_preview_enabled = true;
media_store_path = "/mnt/synapse_media_store"; media_store_path = "/mnt/synapse_media_store";