flake.lock: Update

Flake lock file updates:

• Updated input 'agenix':
    'github:ryantm/agenix/457669db4259ff69d1ac1183aaa6000420940c1f' (2023-12-23)
  → 'github:ryantm/agenix/417caa847f9383e111d1397039c9d4337d024bf0' (2023-12-24)
• Updated input 'nixos-hardware':
    'github:NixOS/nixos-hardware/7763c6fd1f299cb9361ff2abf755ed9619ef01d6' (2023-12-13)
  → 'github:NixOS/nixos-hardware/a15b6e525f5737a47b4ce28445c836996fb2ea8c' (2023-12-25)
• Updated input 'nixpkgs':
    'github:NixOS/nixpkgs/d65bceaee0fb1e64363f7871bc43dc1c6ecad99f' (2023-12-20)
  → 'github:NixOS/nixpkgs/0b3d618173114c64ab666f557504d6982665d328' (2023-12-21)
• Updated input 'secrets':
    'git+ssh://git@git.vimium.com/jordan/nix-secrets.git?ref=refs/heads/master&rev=4ec3e87d6a7b1f14d23c12c60cad62a6e43be4ca' (2023-12-25)
  → 'git+ssh://git@git.vimium.com/jordan/nix-secrets.git?ref=refs/heads/master&rev=ef1f91b155f3bdc4efb2824ad0c47b21b8b1bbfa' (2023-12-25)

modules/default.nix

@@ -30,8 +30,6 @@
     ./security/gpg.nix
     ./security/pass.nix
     ./services/borgmatic
-    ./services/coturn
-    ./services/matrix
     ./shell/git
     ./shell/zsh
   ];

modules/services/coturn/default.nix

@@ -1,59 +0,0 @@
-{ config, lib, pkgs, inputs, ... }:
-
-with lib;
-
-let
-  cfg = config.modules.services.coturn;
-  domain = "vimium.com";
-in {
-  options.modules.services.coturn = {
-    enable = mkOption {
-      default = false;
-      example = true;
-    };
-  };
-
-  config = {
-    age.secrets."passwords/services/coturn/secret" = {
-      file = "${inputs.secrets}/passwords/services/coturn/secret.age";
-    };
-
-    networking.firewall = {
-      allowedTCPPorts = [
-        5349  # STUN TLS
-        5350  # STUN TLS alt
-      ];
-      allowedUDPPortRanges = [
-        { from = 49152; to = 49999; } # TURN relay
-      ];
-    };
-
-    services.coturn = {
-      enable = true;
-      lt-cred-mech = true;
-      use-auth-secret = true;
-      static-auth-secret = ""; # TODO: Pass as extraConfig
-      realm = "turn.${domain}";
-      relay-ips = [
-        "198.244.190.160"
-      ];
-      no-tcp-relay = true;
-      extraConfig = ''
-        cipher-list="HIGH"
-        no-loopback-peers
-        no-multicast-peers
-      '';
-      secure-stun = true;
-      cert = "/var/lib/acme/turn.${domain}/fullchain.pem";
-      pkey = "/var/lib/acme/turn.${domain}/key.pem";
-      min-port = 49152;
-      max-port = 49999;
-    };
-
-    security.acme.certs = {
-      "turn.${domain}" = {
-        reloadServices = [ "coturn" ];
-      };
-    };
-  };
-}

modules/services/matrix/default.nix

@@ -1,120 +0,0 @@
-{ config, lib, pkgs, inputs, ... }:
-
-with lib;
-
-let
-  cfg = config.modules.services.matrix;
-  domain = "vimium.com";
-  clientConfig = {
-    "m.homeserver" = {
-      base_url = "https://matrix.${domain}";
-      server_name = domain;
-    };
-    "m.identity_server" = {};
-  };
-  serverConfig."m.server" = "matrix.${domain}:443";
-  mkWellKnown = data: ''
-    more_set_headers 'Content-Type: application/json';
-    return 200 '${builtins.toJSON data}';
-  '';
-in {
-  options.modules.services.matrix = {
-    enable = mkOption {
-      default = false;
-      example = true;
-    };
-    coturn = mkOption {
-      default = config.services.coturn.enable;
-      example = true;
-    };
-    elementWeb = mkOption {
-      default = true;
-      example = true;
-    };
-  };
-
-  config = mkIf cfg.enable {
-    networking.firewall = {
-      allowedTCPPorts = [
-        8448  # Matrix federation
-      ];
-    };
-
-    services.nginx = {
-      virtualHosts = {
-        "${domain}" = {
-          # Assume this listener is already setup
-          locations."= /.well-known/matrix/server".extraConfig = (mkWellKnown serverConfig);
-          locations."= /.well-known/matrix/client".extraConfig = (mkWellKnown clientConfig);
-        };
-        "matrix.${domain}" = {
-          forceSSL = true;
-          useACMEHost = "matrix.${domain}";
-          listen = [
-            { addr = "0.0.0.0"; port = 443; ssl = true; }
-            { addr = "0.0.0.0"; port = 80; }
-            { addr = "0.0.0.0"; port = 8448; ssl = true; }
-            { addr = "[::1]"; port = 443; ssl = true; }
-            { addr = "[::1]"; port = 80; }
-            { addr = "[::1]"; port = 8448; ssl = true; }
-          ];
-          locations = {
-            "/" = {
-              proxyPass = "http://localhost:8008";
-              extraConfig = ''
-                proxy_set_header X-Forwarded-For $remote_addr;
-              '';
-            };
-            "/_matrix" = {
-              proxyPass = "http://localhost:8008";
-              extraConfig = ''
-                proxy_set_header X-Forwarded-For $remote_addr;
-                client_max_body_size ${services.matrix-synapse.settings.max_upload_size};
-              '';
-            };
-            "/_synapse/client".proxyPass = "http://localhost:8008";
-          };
-        };
-        "chat.${domain}" = mkIf cfg.elementWeb {
-          forceSSL = true;
-          useACMEHost = "matrix.${domain}";
-          root = pkgs.element-web.override {
-            conf = {
-              default_server_config = clientConfig;
-              brand = "Vimium Chat";
-              branding = {
-                auth_header_logo_url = "https://vimium.com/images/logo.svg";
-                auth_footer_links = [
-                  { text = "Vimium.com"; url = "https://www.vimium.com"; }
-                ];
-              };
-            };
-          };
-        };
-      };
-    };
-
-    services.matrix-synapse = {
-      enable = true;
-      settings = {
-        database.name = "sqlite3";
-        enable_registration = false;
-        server_name = domain;
-        turn_shared_secret_file = mkIf cfg.coturn config.age.secrets."passwords/services/coturn/secret".path;
-        turn_uris = mkIf cfg.coturn [
-          "turn:${config.services.coturn.realm}:5349?transport=udp"
-          "turn:${config.services.coturn.realm}:5350?transport=udp"
-          "turn:${config.services.coturn.realm}:5349?transport=tcp"
-          "turn:${config.services.coturn.realm}:5350?transport=tcp"
-        ];
-      };
-    };
-
-    security.acme.certs = {
-      "matrix.${domain}" = {
-        extraDomainNames = mkIf cfg.elementWeb [ "chat.${domain}" ];
-        reloadServices = [ "matrix-synapse" ];
-      };
-    };
-  };
-}