danio/nixos-matrix-modules
1
2
Fork 1
mirror of https://github.com/dali99/nixos-matrix-modules.git synced 2026-02-11 07:47:00 +01:00
Code Issues Releases Activity

Pass signing_key_path through LoadCredential

Browse Source
This commit is contained in:
Oystein Kristoffer Tveit
2026-01-26 21:12:20 +09:00
parent a18c7d129f
commit b6d3f51fa1
2 changed files with 4 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
synapse-module/workers.nix
View File

@@ -375,6 +375,7 @@ in {
worker_name = worker.name;
worker_listeners =
map (lib.filterAttrsRecursive (_: v: v != null)) worker.value.settings.worker_listeners;
signing_key_path = "/run/credentials/matrix-synapse-worker-${worker.name}.service/signing_key";
});
in builtins.listToAttrs (lib.flip map workerList (worker: {
name = "matrix-synapse-worker-${worker.name}";
@@ -448,6 +449,7 @@ in {
(lib.filter (path: path != "/run/matrix-synapse"))
lib.uniqueStrings
];
LoadCredential = [ "signing_key:${cfg.settings.signing_key_path}" ];
RemoveIPC = true;
RestrictAddressFamilies = [
"AF_INET"