sprechtl/dotfiles
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat: enable double puppet for signal

Browse source
This commit is contained in:
s-prechtl 2025-12-10 15:19:05 +01:00
parent 3be3235467
commit 3932fd5c77
4 changed files with 32 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

31
hosts/hitsugibune/matrix.nix
View file

@ -38,6 +38,12 @@ in {
owner = "mautrix-signal"; owner = "mautrix-signal";
group = "mautrix-signal"; group = "mautrix-signal";
}; };
age.secrets.mautrix-signal-puppeting = {
file = ../../secrets/mautrix-signal-puppeting.yaml.age; # your encrypted YAML
owner = "mautrix-signal";
group = "mautrix-signal";
mode = "0640";
};
age.secrets.mautrix-whatsapp = { age.secrets.mautrix-whatsapp = {
file = ../../secrets/mautrix-whatsapp.age; file = ../../secrets/mautrix-whatsapp.age;
@ -204,6 +210,9 @@ in {
]; ];
} }
]; ];
settings.app_service_config_files = [
"/var/lib/mautrix-signal/double-puppeting.yaml"
];
extraConfigFiles = [config.age.secrets.matrix.path]; extraConfigFiles = [config.age.secrets.matrix.path];
settings.turn_uris = ["turn:${turn.realm}:3478?transport=udp" "turn:${turn.realm}:3478?transport=tcp"]; settings.turn_uris = ["turn:${turn.realm}:3478?transport=udp" "turn:${turn.realm}:3478?transport=tcp"];
@ -253,6 +262,9 @@ in {
double_puppet = { double_puppet = {
allow_discovery = false; allow_discovery = false;
secrets = {
"sprechtl.me" = "as_token:$DOUBLE_PUPPET_SECRET";
};
}; };
provisioning = { provisioning = {
@ -261,6 +273,25 @@ in {
}; };
}; };
# Ensure directory
systemd.tmpfiles.settings."10-mautrix-signal" = {
"/var/lib/mautrix-signal".d = {
user = "mautrix-signal";
group = "mautrix-signal";
mode = "0750";
};
};
# Insert file for double puppeting
systemd.tmpfiles.settings."20-mautrix-signal-puppeting-yaml" = {
"/var/lib/mautrix-signal/double-puppeting.yaml".L = {
argument = config.age.secrets.mautrix-signal-puppeting.path;
user = "mautrix-signal";
group = "mautrix-signal";
mode = "0640";
};
};
services.mautrix-whatsapp = { services.mautrix-whatsapp = {
enable = true; enable = true;
environmentFile = config.age.secrets.mautrix-whatsapp.path; environmentFile = config.age.secrets.mautrix-whatsapp.path;

BIN
secrets/mautrix-signal-puppeting.yaml.age Normal file
View file

Binary file not shown.

BIN
secrets/mautrix-signal.age
View file

Binary file not shown.

1
secrets/secrets.nix
View file

@ -13,6 +13,7 @@ in {
"homarr.age".publicKeys = [saberofxebec key]; "homarr.age".publicKeys = [saberofxebec key];
"matrix.age".publicKeys = [hitsugibune key]; "matrix.age".publicKeys = [hitsugibune key];
"mautrix-signal.age".publicKeys = [hitsugibune key]; "mautrix-signal.age".publicKeys = [hitsugibune key];
"mautrix-signal-puppeting.yaml.age".publicKeys = [hitsugibune key];
"mautrix-whatsapp.age".publicKeys = [hitsugibune key]; "mautrix-whatsapp.age".publicKeys = [hitsugibune key];
"coturn.age".publicKeys = [hitsugibune key]; "coturn.age".publicKeys = [hitsugibune key];
"mail-admin.age".publicKeys = [hitsugibune key]; "mail-admin.age".publicKeys = [hitsugibune key];