···

       
1
       
1
       
 
       
comment_unencrypted: See https://github.com/Mic92/sops-nix/issues/120 for synapse.yaml quirks

     

       
2
       
2
       
 
       
synapse.yaml: ENC[AES256_GCM,data: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,iv:sqkXFPatFfwBa0uUSoytJm+tFYak7fbenkQ2OyiSMEA=,tag:oy/bHLjYHkQFlqETwIMXlw==,type:str]

     

       
3
       
3
       
+
       
matrix-signing-key: ENC[AES256_GCM,data:u6miE2oM3TUXaQ7wc776SwSMaOAxJOVlpl2kBW+AjI/aDH5vcGBp0L0uTpZbVfOtIe+RDNEv5E/mKA==,iv:abvwkrNe324QCbWLwiPY0UwqezS0wbyk2Fvi0vs3SI0=,tag:ZmpDB9LHbezQrxuwHNgpRg==,type:str]

     

       
3
       
4
       
 
       
sops:

     

       
4
       
5
       
 
       
    kms: []

     

       
5
       
6
       
 
       
    gcp_kms: []

     
···

       
24
       
25
       
 
       
            cHJ5aWIrQ2Zrb1dhbC9yZ1lIMU1jbzgK4mx+S5bF6KBMe6+TrSZfaBcuWEg9cHyd

     

       
25
       
26
       
 
       
            tbJty1zxS9pndA/u3qz5EJxDouiAODvyAR07yeegtEcbw1FlG6W/gA==

     

       
26
       
27
       
 
       
            -----END AGE ENCRYPTED FILE-----

     

       
27
       
27
       
-
       
    lastmodified: "2023-09-10T15:34:26Z"

     

       
28
       
28
       
-
       
    mac: ENC[AES256_GCM,data:+hcp+xHiX9AS7hT8NnSzneeY5NUgsyD1l4U7TgxCXppIagBPiOJ36zO/x4RBgLdbIP466piG/lm1uLyGPDtPC+ndUDcXuAvBzS4P084PeVWGzZORgeHX36gIx695Rvrk7GB2mwVjYgaoIQ5jNTSJp0Me78n2QM9V0lnteSCGXX0=,iv:Ou7z/4QJYJVm2Sdd/SMDnO3Yox2yExb4yp41pyTjiyA=,tag:SSBSzlIrp7A5Qa+FndShUg==,type:str]

     

       
28
       
28
       
+
       
    lastmodified: "2023-09-10T15:41:35Z"

     

       
29
       
29
       
+
       
    mac: ENC[AES256_GCM,data:4qy+TtS6iUz8KAgOMx5JVDWk8iHga8srb7m07uJISyHW3osuLUnXxgVh+0A7c91I8fqLOrnBFYLA0RVym7xqarTxK+UnBK6YwBaM8CVu63sbnWlOWXgWE3v/5UvL53GJzROBb0406iaLjQwJfohQs3AbrfZYNfeSDCItmbs+pqA=,iv:bE8sQJ1SS8peAhQ3hVTYx8WhtuN5zhT9bHRpTpExahM=,tag:Jab43t+6XYOfxTwHRLGfaA==,type:str]

     

       
29
       
30
       
 
       
    pgp:

     

       
30
       
31
       
 
       
        - created_at: "2023-09-08T14:11:19Z"

     

       
31
       
32
       
 
       
          enc: |-

     

···

       
9
       
9
       
 
       
    owner = config.users.users.matrix-synapse.name;

     

       
10
       
10
       
 
       
  };

     

       
11
       
11
       
 
       


     

       
12
       
12
       
+
       
  sops.secrets.matrix-signing-key = {

     

       
13
       
13
       
+
       
    mode = "0400";

     

       
14
       
14
       
+
       
    owner = config.users.users.matrix-synapse.name;

     

       
15
       
15
       
+
       
  };

     

       
16
       
16
       
+
       


     

       
12
       
17
       
 
       
  users.users.matrix-synapse.extraGroups = [config.users.groups.keys.name];

     

       
13
       
18
       
 
       


     

       
14
       
19
       
 
       
  services.matrix-synapse = {

     
···

       
37
       
42
       
 
       
      session_lifetime = "infinite";

     

       
38
       
43
       
 
       


     

       
39
       
44
       
 
       
      max_upload_size = "100M";

     

       
45
       
45
       
+
       
      signing_key_path = "/run/secrets/matrix-signing-key";

     

       
40
       
46
       
 
       


     

       
41
       
47
       
 
       
      server_notices = {

     

       
42
       
48
       
 
       
        system_mxid_localpart = "server";