diff --git a/hosts/carrot/matrix.nix b/hosts/carrot/matrix.nix index 54b7f02..132e6b6 100644 --- a/hosts/carrot/matrix.nix +++ b/hosts/carrot/matrix.nix @@ -7,11 +7,9 @@ let fqdn = "bitflip.jetzt"; turnRealm = "turn.${fqdn}"; - syncv3Domain = "syncv3.${fqdn}"; clientConfig = { "m.homeserver".base_url = "https://${fqdn}"; "m.identity_server".base_url = "https://vector.im"; - "org.matrix.msc3575.proxy".url = "https://${syncv3Domain}"; }; serverConfig."m.server" = "${config.services.matrix-synapse.settings.server_name}:443"; mkWellKnown = data: '' @@ -24,7 +22,6 @@ in x.sops.secrets = { "services/synapse/signing_key".owner = "matrix-synapse"; "services/synapse/registration_shared_secret".owner = "matrix-synapse"; - "services/synapse/sliding_sync_env".owner = "root"; }; networking.firewall.interfaces."tailscale0".allowedTCPPorts = [ 8088 ]; @@ -60,11 +57,6 @@ in return 404; ''; }; - virtualHosts."${syncv3Domain}" = { - enableACME = true; - forceSSL = true; - locations."/".proxyPass = "http://${config.services.matrix-sliding-sync.settings.SYNCV3_BINDADDR}"; - }; }; services.coturn = { @@ -202,16 +194,6 @@ in }; }; - services.matrix-sliding-sync = { - enable = true; - environmentFile = config.sops.secrets."services/synapse/sliding_sync_env".path; - settings = { - SYNCV3_SERVER = "https://bitflip.jetzt"; - SYNCV3_BINDADDR = "[::]:8009"; - SYNCV3_LOG_LEVEL = "error"; - }; - }; - # remove chmod for signing-key file systemd.services.matrix-synapse.serviceConfig.ExecStartPre = let