2 Commits

Author SHA1 Message Date
ad0aa8b2cb hosts/vps1: update mautrix configs
All checks were successful
Check flake / build-amd64-linux (push) Successful in 1m37s
2025-10-05 18:12:03 +01:00
2424f18ad7 hosts/vps1: fix kanidm flakiness 2025-10-05 15:33:25 +01:00
2 changed files with 32 additions and 20 deletions

View File

@@ -124,6 +124,7 @@ in
systemd.services.kanidm = { systemd.services.kanidm = {
requires = [ "tailscaled.service" ]; requires = [ "tailscaled.service" ];
after = [ "tailscaled.service" ]; after = [ "tailscaled.service" ];
serviceConfig.RestartSec = "60";
}; };
services.nginx.virtualHosts = { services.nginx.virtualHosts = {

View File

@@ -1,4 +1,5 @@
{ {
inputs,
config, config,
lib, lib,
pkgs, pkgs,
@@ -26,26 +27,26 @@ let
}; };
matrixServerConfig."m.server" = "${matrixSubdomain}:443"; matrixServerConfig."m.server" = "${matrixSubdomain}:443";
commonBridgeSettings = bridge: { commonBridgeSettings = bridge: {
appservice = {
database = lib.mkIf usePostgresql { database = lib.mkIf usePostgresql {
type = "postgres"; type = "postgres";
uri = "postgresql:///${bridge}?host=/run/postgresql"; uri = "postgresql:///${bridge}?host=/run/postgresql";
}; };
};
bridge = { bridge = {
encryption = {
allow = true;
default = true;
require = true;
};
permissions = { permissions = {
"${serverName}" = "user"; "${serverName}" = "user";
"@jordan:${serverName}" = "admin"; "@jordan:${serverName}" = "admin";
}; };
};
encryption = {
allow = true;
default = true;
require = true;
pickle_key =
if (bridge == "mautrix-whatsapp") then "maunium.net/go/mautrix-whatsapp" else "mautrix.bridge.e2ee";
};
provisioning = { provisioning = {
shared_secret = "disable"; shared_secret = "disable";
}; };
};
homeserver = { homeserver = {
address = "https://${matrixSubdomain}"; address = "https://${matrixSubdomain}";
domain = serverName; domain = serverName;
@@ -61,6 +62,15 @@ let
''; '';
in in
{ {
# Backport new options from https://github.com/NixOS/nixpkgs/pull/446155
disabledModules = [
"services/matrix/mautrix-whatsapp.nix"
];
imports = [
(inputs.nixpkgs-unstable + /nixos/modules/services/matrix/mautrix-whatsapp.nix)
];
networking.firewall.allowedTCPPorts = [ networking.firewall.allowedTCPPorts = [
8448 # Matrix federation 8448 # Matrix federation
]; ];
@@ -208,18 +218,19 @@ in
services.mautrix-whatsapp = lib.mkIf bridges.whatsapp { services.mautrix-whatsapp = lib.mkIf bridges.whatsapp {
enable = true; enable = true;
settings = { settings = lib.recursiveUpdate {
bridge = { backfill = {
enabled = true;
max_initial_messags = 50;
};
network = {
mute_status_broadcast = true;
history_sync = { history_sync = {
backfill = true;
max_initial_conversations = -1; max_initial_conversations = -1;
message_count = 50;
request_full_sync = true; request_full_sync = true;
}; };
mute_bridging = true;
}; };
} } (commonBridgeSettings "mautrix-whatsapp");
// commonBridgeSettings "mautrix-whatsapp";
}; };
environment.persistence."/persist".directories = [ environment.persistence."/persist".directories = [