···

       
11
       
 
       
  configFile = format.generate "conduit.toml" cfg.settings;

     

       
12
       
 
       
in

     

       
13
       
 
       
{

     

       
14
       
-
       
  meta.maintainers = with lib.maintainers; [ pstn ];

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
15
       
 
       
  options.services.matrix-conduit = {

     

       
16
       
 
       
    enable = lib.mkEnableOption "matrix-conduit";

     

       
17
       
 
       


     
···

       
25
       
 
       
    };

     

       
26
       
 
       


     

       
27
       
 
       
    package = lib.mkPackageOption pkgs "matrix-conduit" { };

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
28
       
 
       


     

       
29
       
 
       
    settings = lib.mkOption {

     

       
30
       
 
       
      type = lib.types.submodule {

     
···

       
112
       
 
       
        <https://docs.conduit.rs/configuration.html>

     

       
113
       
 
       
        for details on supported values.

     

       
114
       
 
       
        Note that database_path can not be edited because the service's reliance on systemd StateDir.

     

       
0
       
 
       

     

       
115
       
 
       
      '';

     

       
116
       
 
       
    };

     

       
117
       
 
       
  };

     
···

       
158
       
 
       
        Restart = "on-failure";

     

       
159
       
 
       
        RestartSec = 10;

     

       
160
       
 
       
        UMask = "077";

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
161
       
 
       
      };

     

       
162
       
 
       
      unitConfig = {

     

       
163
       
 
       
        StartLimitBurst = 5;

     

···

       
11
       
 
       
  configFile = format.generate "conduit.toml" cfg.settings;

     

       
12
       
 
       
in

     

       
13
       
 
       
{

     

       
14
       
+
       
  meta.maintainers = with lib.maintainers; [

     

       
15
       
+
       
    pstn

     

       
16
       
+
       
    SchweGELBin

     

       
17
       
+
       
  ];

     

       
18
       
 
       
  options.services.matrix-conduit = {

     

       
19
       
 
       
    enable = lib.mkEnableOption "matrix-conduit";

     

       
20
       
 
       


     
···

       
28
       
 
       
    };

     

       
29
       
 
       


     

       
30
       
 
       
    package = lib.mkPackageOption pkgs "matrix-conduit" { };

     

       
31
       
+
       


     

       
32
       
+
       
    secretFile = lib.mkOption {

     

       
33
       
+
       
      type = lib.types.nullOr lib.types.path;

     

       
34
       
+
       
      default = null;

     

       
35
       
+
       
      example = "/run/secrets/matrix-conduit.env";

     

       
36
       
+
       
      description = ''

     

       
37
       
+
       
        Path to a file containing sensitive environment as described in {manpage}`systemd.exec(5).

     

       
38
       
+
       
        Some variables that can be considered secrets are:

     

       
39
       
+
       


     

       
40
       
+
       
        - CONDUIT_JWT_SECRET:

     

       
41
       
+
       
          The secret used to enable JWT login. Without it a 400 error will be returned.

     

       
42
       
+
       


     

       
43
       
+
       
        - CONDUIT_TURN_SECRET:

     

       
44
       
+
       
          The TURN secret

     

       
45
       
+
       
      '';

     

       
46
       
+
       
    };

     

       
47
       
 
       


     

       
48
       
 
       
    settings = lib.mkOption {

     

       
49
       
 
       
      type = lib.types.submodule {

     
···

       
131
       
 
       
        <https://docs.conduit.rs/configuration.html>

     

       
132
       
 
       
        for details on supported values.

     

       
133
       
 
       
        Note that database_path can not be edited because the service's reliance on systemd StateDir.

     

       
134
       
+
       
        For secrets use the `secretFile` option instead.

     

       
135
       
 
       
      '';

     

       
136
       
 
       
    };

     

       
137
       
 
       
  };

     
···

       
178
       
 
       
        Restart = "on-failure";

     

       
179
       
 
       
        RestartSec = 10;

     

       
180
       
 
       
        UMask = "077";

     

       
181
       
+
       
      }

     

       
182
       
+
       
      // lib.optionalAttrs (cfg.secretFile != null) {

     

       
183
       
+
       
        EnvironmentFile = cfg.secretFile;

     

       
184
       
 
       
      };

     

       
185
       
 
       
      unitConfig = {

     

       
186
       
 
       
        StartLimitBurst = 5;