blob: 95e5d405e27b4ef317d4ca72924e63e9273099a9 (
plain) (
blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
|
{ config, pkgs, lib, conduit, ... }:
{
services.matrix-conduit = {
package = conduit.packages.${pkgs.system}.default;
enable = true;
settings.global = {
address = "127.0.0.1";
server_name = "conduit.rory.gay";
database_backend = "rocksdb";
rocksdb_optimize_for_spinning_disks = true;
rocksdb_max_log_file_size = 33554432;
allow_public_room_directory_over_federation = true;
allow_device_name_federation = true;
enable_lightning_bolt = true;
allow_local_presence = true;
allow_incoming_presence = true;
allow_outgoing_presence = true;
presence_idle_timeout_s = 60;
presence_offline_timeout_s = 180;
max_concurrent_requests = 1000;
conduit_cache_capacity_modifier = 3.0;
allow_check_for_updates = false;
allow_registration = false;
log = "info,state_res=info";
};
};
systemd.services.matrix-conduit-reg-token = {
description = "Random registration token for Conduit.";
before = ["conduit.service"]; # So the registration can be used by Conduit.
after = ["matrix-synapse-reg-token.service"];
script = ''
mkdir -p /run/systemd/system/conduit.service.d
echo Environment=\"CONDUIT_REGISTRATION_TOKEN=$(cat /var/lib/matrix-synapse/registration_shared_secret.txt)\" > /run/systemd/system/conduit.service.d/override.conf
systemctl daemon-reload'';
serviceConfig = {
User = "root";
Group = "root";
};
};
}
|
