From 1ff35d1c2dad501f54802caa536192eefeec5351 Mon Sep 17 00:00:00 2001
From: h7x4 <h7x4@nani.wtf>
Date: Thu, 6 Oct 2022 21:30:47 +0200
Subject: [PATCH] Add trusted matrix servers

---
 hosts/tsuki/services/matrix/default.nix | 17 +++++++++++++++++
 1 file changed, 17 insertions(+)

diff --git a/hosts/tsuki/services/matrix/default.nix b/hosts/tsuki/services/matrix/default.nix
index aae6d2c..0ce59a4 100644
--- a/hosts/tsuki/services/matrix/default.nix
+++ b/hosts/tsuki/services/matrix/default.nix
@@ -20,6 +20,23 @@
       turn_shared_secret = config.services.coturn.static-auth-secret;
       turn_user_lifetime = "1h";
 
+      trusted_key_servers = let
+        emptykey = server_name: {
+          inherit server_name;
+          verify_keys = {};
+        };
+      in [
+        {
+          server_name = "matrix.org";
+          verify_keys = {
+            "ed25519:auto" = "Noi6WqcDj0QmPxCNQqgezwTlBKrfqehY1u2FyWP9uYw";
+          };
+        }
+        (emptykey "pvv.ntnu.no")
+        (emptykey "feal.no")
+        (emptykey "dodsorf.as")
+      ];
+
       server_name = "nani.wtf";
       public_baseurl = "https://matrix.nani.wtf";