diff --git a/flake.lock b/flake.lock
index 52c0742..18097bf 100644
--- a/flake.lock
+++ b/flake.lock
@@ -1379,6 +1379,7 @@
"nixpkgs-master": "nixpkgs-master",
"nixpkgs-stable": "nixpkgs-stable_3",
"ooye": "ooye",
+ "safeNSound": "safeNSound",
"sops-nix": "sops-nix",
"synapseHttpAntispamSrc": "synapseHttpAntispamSrc"
}
@@ -1417,6 +1418,29 @@
"type": "github"
}
},
+ "safeNSound": {
+ "inputs": {
+ "flake-utils": [
+ "flake-utils"
+ ],
+ "nixpkgs": [
+ "nixpkgs"
+ ]
+ },
+ "locked": {
+ "lastModified": 1748918445,
+ "narHash": "sha256-KyQ6TA3JkcoveyeiVIL+J0Okxuno9Fy1GNZ9/9sdRKQ=",
+ "ref": "refs/heads/main",
+ "rev": "006ada2e8a31d8c57273bb1cafe976354ebd6244",
+ "revCount": 41,
+ "type": "git",
+ "url": "https://cgit.rory.gay/school/nodejs-final-assignment.git/"
+ },
+ "original": {
+ "type": "git",
+ "url": "https://cgit.rory.gay/school/nodejs-final-assignment.git/"
+ }
+ },
"sops-nix": {
"inputs": {
"nixpkgs": "nixpkgs_10"
diff --git a/flake.nix b/flake.nix
index ef9b5e9..3d3c070 100755
--- a/flake.nix
+++ b/flake.nix
@@ -101,6 +101,14 @@
inputs.hyprland.follows = "hyprland";
};
+ safeNSound = {
+ url = "git+https://cgit.rory.gay/school/nodejs-final-assignment.git/";
+ inputs = {
+ flake-utils.follows = "flake-utils";
+ nixpkgs.follows = "nixpkgs";
+ };
+ };
+
};
outputs =
@@ -136,6 +144,7 @@
lix-module.nixosModules.default
grapevine.nixosModules.default
ooye.modules.default
+ safeNSound.nixosModules.default
(
{ pkgs, lib, ... }:
diff --git a/host/Rory-ovh/configuration.nix b/host/Rory-ovh/configuration.nix
index 7efa89b..670db24 100755
--- a/host/Rory-ovh/configuration.nix
+++ b/host/Rory-ovh/configuration.nix
@@ -23,6 +23,7 @@
./services/matrix/draupnir.nix
./services/email/root.nix
#./services/wireguard/wireguard.nix
+ ./services/safensound.nix
];
users.groups.ocp = { };
diff --git a/host/Rory-ovh/services/matrix/synapse/synapse-main.nix b/host/Rory-ovh/services/matrix/synapse/synapse-main.nix
index 30ef315..7907927 100755
--- a/host/Rory-ovh/services/matrix/synapse/synapse-main.nix
+++ b/host/Rory-ovh/services/matrix/synapse/synapse-main.nix
@@ -71,16 +71,16 @@
allow_device_name_lookup_over_federation = true;
federation = {
- client_timeout = "30s"; # default=60s
- max_short_retries = 12;
- max_short_retry_delay = "5s";
+ client_timeout = "90s"; # 30 # default=60s
+ max_short_retries = 6; # 12
+ max_short_retry_delay = "10s"; # 5
max_long_retries = 5;
max_long_retry_delay = "30s";
# rapid retry, small increments
destination_min_retry_interval = "1m"; # default=10m
destination_max_retry_interval = "12h"; # default=7d
- destination_retry_multiplier = 1.2; # default=2
+ destination_retry_multiplier = 1.1; # 1.2 # default=2
};
registration_shared_secret_path = "/data/secrets/synapse-shared-secret";
diff --git a/host/Rory-ovh/services/safensound.nix b/host/Rory-ovh/services/safensound.nix
new file mode 100644
index 0000000..4cf5388
--- /dev/null
+++ b/host/Rory-ovh/services/safensound.nix
@@ -0,0 +1,25 @@
+{
+ config,
+ pkgs,
+ lib,
+ ...
+}:
+
+{
+ services.mongodb = {
+ enable = true;
+ package = pkgs.mongodb-ce;
+ enableAuth = true;
+ initialRootPasswordFile = "/etc/mongo-pass";
+ #bind_ip = "/run/mongodb.sock";
+ extraConfig = ''
+ net.unixDomainSocket.filePermissions: 0777
+ '';
+ };
+
+ services.safensound = {
+ enable = true;
+ dbCredentialsPath = "/";
+ jwtSecretPath = "/";
+ };
+}
|
