tlaternet/tlaternet-server
1
0
Fork 0
Code Issues10 Pull requests Releases Activity

Compare commits

..

2 commits
f2cbeebbb5 ... ecc088db2d

Author SHA1 Message Date
Tristan Daniël Maat
ecc088db2d
flake.lock: Update 
Flake lock file updates:

• Updated input 'disko':
    'github:nix-community/disko/ec7c109a4f794fce09aad87239eab7f66540b888' (2025-05-15)
  → 'github:nix-community/disko/df522e787fdffc4f32ed3e1fca9ed0968a384d62' (2025-05-20)
• Updated input 'nixpkgs-unstable':
    'github:nixos/nixpkgs/b965e4c283060415956ccd39eee4ca34a6a56cf8' (2025-05-16)
  → 'github:nixos/nixpkgs/c3ee76c437067f1ae09d6e530df46a3f80977992' (2025-05-24)
• Updated input 'sops-nix':
    'github:Mic92/sops-nix/e93ee1d900ad264d65e9701a5c6f895683433386' (2025-05-05)
  → 'github:Mic92/sops-nix/8d215e1c981be3aa37e47aeabd4e61bb069548fd' (2025-05-18)
 2025-05-24 23:34:07 +08:00
Tristan Daniël Maat
42ca657795
chore(treewide): Upgrade to NixOS 25.05 2025-05-24 23:34:06 +08:00
1 changed files with 7 additions and 35 deletions

42
configuration/services/conduit/matrix-hookshot.nix
View file

@ -29,29 +29,16 @@ let
}; };
# Encryption support # Encryption support
# TODO(tlater): Enable when extraSettings = {
# https://github.com/matrix-org/matrix-hookshot/issues/1060 is "de.sorunome.msc2409.push_ephemeral" = true;
# fixed push_ephemeral = true;
# extraSettings = { "org.matrix.msc3202" = true;
# "de.sorunome.msc2409.push_ephemeral" = true; };
# push_ephemeral = true;
# "org.matrix.msc3202" = true;
# };
runtimeRegistration = "${cfg.registrationFile}"; runtimeRegistration = "${cfg.registrationFile}";
}; };
in in
{ {
# users = {
# users.matrix-hookshot = {
# home = "/run/matrix-hookshot";
# group = "matrix-hookshot";
# isSystemUser = true;
# };
# groups.matrix-hookshot = { };
# };
systemd.services.matrix-hookshot = { systemd.services.matrix-hookshot = {
serviceConfig = { serviceConfig = {
Type = lib.mkForce "exec"; Type = lib.mkForce "exec";
@ -62,7 +49,6 @@ in
# Some library in matrix-hookshot wants a home directory # Some library in matrix-hookshot wants a home directory
Environment = [ "HOME=/run/matrix-hookshot" ]; Environment = [ "HOME=/run/matrix-hookshot" ];
# User = "matrix-hookshot";
DynamicUser = true; DynamicUser = true;
StateDirectory = "matrix-hookshot"; StateDirectory = "matrix-hookshot";
RuntimeDirectory = "matrix-hookshot"; RuntimeDirectory = "matrix-hookshot";
@ -76,11 +62,7 @@ in
ProtectKernelModules = true; ProtectKernelModules = true;
ProtectKernelLogs = true; ProtectKernelLogs = true;
ProtectControlGroups = true; ProtectControlGroups = true;
RestrictAddressFamilies = [ RestrictAddressFamilies = [ "AF_INET AF_INET6" ];
# "AF_UNIX"
"AF_INET"
"AF_INET6"
];
LockPersonality = true; LockPersonality = true;
RestrictRealtime = true; RestrictRealtime = true;
ProtectProc = "invisible"; ProtectProc = "invisible";
@ -89,11 +71,6 @@ in
}; };
}; };
# services.redis.servers.matrix-hookshot = {
# enable = true;
# user = "matrix-hookshot";
# };
services.matrix-hookshot = { services.matrix-hookshot = {
enable = true; enable = true;
@ -112,8 +89,6 @@ in
bot.displayname = "Hookshot"; bot.displayname = "Hookshot";
# cache.redisUri = "redis://${config.services.redis.servers.matrix-hookshot.unixSocket}";
generic = { generic = {
enabled = true; enabled = true;
outbound = false; outbound = false;
@ -123,10 +98,7 @@ in
allowJsTransformationFunctions = true; allowJsTransformationFunctions = true;
}; };
# TODO(tlater): Enable when encryption.storagePath = "/var/lib/matrix-hookshot/cryptostore";
# https://github.com/matrix-org/matrix-hookshot/issues/1060 is
# fixed
# encryption.storagePath = "/var/lib/matrix-hookshot/cryptostore";
permissions = [ permissions = [
{ {