server changes

3 files changed, 30 insertions, 4 deletions

diff --git a/host/Rory-ovh/configuration.nix b/host/Rory-ovh/configuration.nix

index 7efa89b..670db24 100755
--- a/host/Rory-ovh/configuration.nix
+++ b/host/Rory-ovh/configuration.nix
@@ -23,6 +23,7 @@
     ./services/matrix/draupnir.nix
     ./services/email/root.nix
     #./services/wireguard/wireguard.nix
+    ./services/safensound.nix
   ];
 
   users.groups.ocp = { };
diff --git a/host/Rory-ovh/services/matrix/synapse/synapse-main.nix b/host/Rory-ovh/services/matrix/synapse/synapse-main.nix

index 30ef315..7907927 100755
--- a/host/Rory-ovh/services/matrix/synapse/synapse-main.nix
+++ b/host/Rory-ovh/services/matrix/synapse/synapse-main.nix
@@ -71,16 +71,16 @@
         allow_device_name_lookup_over_federation = true;
 
         federation = {
-          client_timeout = "30s"; # default=60s
-          max_short_retries = 12;
-          max_short_retry_delay = "5s";
+          client_timeout = "90s"; # 30 # default=60s
+          max_short_retries = 6; # 12
+          max_short_retry_delay = "10s"; # 5
           max_long_retries = 5;
           max_long_retry_delay = "30s";
 
           # rapid retry, small increments
           destination_min_retry_interval = "1m"; # default=10m
           destination_max_retry_interval = "12h"; # default=7d
-          destination_retry_multiplier = 1.2; # default=2
+          destination_retry_multiplier = 1.1; # 1.2 # default=2
         };
 
         registration_shared_secret_path = "/data/secrets/synapse-shared-secret";
diff --git a/host/Rory-ovh/services/safensound.nix b/host/Rory-ovh/services/safensound.nix
new file mode 100644

index 0000000..4cf5388
--- /dev/null
+++ b/host/Rory-ovh/services/safensound.nix
@@ -0,0 +1,25 @@
+{
+  config,
+  pkgs,
+  lib,
+  ...
+}:
+
+{
+  services.mongodb = {
+    enable = true;
+    package = pkgs.mongodb-ce;
+    enableAuth = true;
+    initialRootPasswordFile = "/etc/mongo-pass";
+    #bind_ip = "/run/mongodb.sock";
+    extraConfig = ''
+      net.unixDomainSocket.filePermissions: 0777
+    '';
+  };
+
+  services.safensound = {
+    enable = true;
+    dbCredentialsPath = "/";
+    jwtSecretPath = "/";
+  };
+}