feat: samc

fix: issuer url format
feat: oidc matrix
2026-03-24 22:30:17 +01:00 · 2026-03-24 21:57:35 +01:00 · 2026-03-24 21:54:20 +01:00 · 2026-03-24 21:43:47 +01:00 · 2026-03-24 21:20:11 +01:00 · 2026-03-24 15:54:51 +01:00
8 changed files with 74 additions and 696 deletions
--- a/flake.lock
+++ b/flake.lock
@ -607,11 +607,11 @@
    },
    "nixpkgs_4": {
      "locked": {
-        "lastModified": 1770562336,
-        "narHash": "sha256-ub1gpAONMFsT/GU2hV6ZWJjur8rJ6kKxdm9IlCT0j84=",
+        "lastModified": 1774106199,
+        "narHash": "sha256-US5Tda2sKmjrg2lNHQL3jRQ6p96cgfWh3J1QBliQ8Ws=",
        "owner": "nixos",
        "repo": "nixpkgs",
-        "rev": "d6c71932130818840fc8fe9509cf50be8c64634f",
+        "rev": "6c9a78c09ff4d6c21d0319114873508a6ec01655",
        "type": "github"
      },
      "original": {
@ -622,22 +622,6 @@
      }
    },
    "nixpkgs_5": {
-      "locked": {
-        "lastModified": 1770107345,
-        "narHash": "sha256-tbS0Ebx2PiA1FRW8mt8oejR0qMXmziJmPaU1d4kYY9g=",
-        "owner": "nixos",
-        "repo": "nixpkgs",
-        "rev": "4533d9293756b63904b7238acb84ac8fe4c8c2c4",
-        "type": "github"
-      },
-      "original": {
-        "owner": "nixos",
-        "ref": "nixpkgs-unstable",
-        "repo": "nixpkgs",
-        "type": "github"
-      }
-    },
-    "nixpkgs_6": {
      "locked": {
        "lastModified": 1774192288,
        "narHash": "sha256-vHqcv1WQvmR4hRz0/dUqlA8LjIHtZvWtWrzIX3YTxzQ=",
@ -653,7 +637,7 @@
        "type": "github"
      }
    },
-    "nixpkgs_7": {
+    "nixpkgs_6": {
      "locked": {
        "lastModified": 1773389992,
        "narHash": "sha256-wvfdLLWJ2I9oEpDd9PfMA8osfIZicoQ5MT1jIwNs9Tk=",
@ -669,50 +653,6 @@
        "type": "github"
      }
    },
-    "noctalia": {
-      "inputs": {
-        "nixpkgs": [
-          "nixpkgs"
-        ],
-        "noctalia-qs": "noctalia-qs"
-      },
-      "locked": {
-        "lastModified": 1774355152,
-        "narHash": "sha256-/LZrWUvaM/arityH0KR2AopnEaXJqR9roSbKLNgFq0w=",
-        "owner": "noctalia-dev",
-        "repo": "noctalia-shell",
-        "rev": "020dab63bf9f77beb8ade278e975be05701bf6c2",
-        "type": "github"
-      },
-      "original": {
-        "owner": "noctalia-dev",
-        "repo": "noctalia-shell",
-        "type": "github"
-      }
-    },
-    "noctalia-qs": {
-      "inputs": {
-        "nixpkgs": [
-          "noctalia",
-          "nixpkgs"
-        ],
-        "systems": "systems_3",
-        "treefmt-nix": "treefmt-nix"
-      },
-      "locked": {
-        "lastModified": 1774304440,
-        "narHash": "sha256-JVLdoEuZUxS6Iujt0rC+Pyxw1pP6JSddGexqD6+yZ64=",
-        "owner": "noctalia-dev",
-        "repo": "noctalia-qs",
-        "rev": "2ddc0266025b9cc196fc28a46f0ed89146834c4c",
-        "type": "github"
-      },
-      "original": {
-        "owner": "noctalia-dev",
-        "repo": "noctalia-qs",
-        "type": "github"
-      }
-    },
    "pyproject-build-systems": {
      "inputs": {
        "nixpkgs": [
@ -775,7 +715,6 @@
        "nixos-hardware": "nixos-hardware",
        "nixpkgs": "nixpkgs_4",
        "nixpkgs-stable": "nixpkgs-stable",
-        "noctalia": "noctalia",
        "simple-nixos-mailserver": "simple-nixos-mailserver",
        "zen-browser": "zen-browser"
      }
@ -785,7 +724,7 @@
        "blobs": "blobs",
        "flake-compat": "flake-compat_3",
        "git-hooks": "git-hooks",
-        "nixpkgs": "nixpkgs_6"
+        "nixpkgs": "nixpkgs_5"
      },
      "locked": {
        "lastModified": 1774268581,
@ -832,39 +771,6 @@
        "type": "github"
      }
    },
-    "systems_3": {
-      "locked": {
-        "lastModified": 1689347949,
-        "narHash": "sha256-12tWmuL2zgBgZkdoB6qXZsgJEH9LR3oUgpaQq2RbI80=",
-        "owner": "nix-systems",
-        "repo": "default-linux",
-        "rev": "31732fcf5e8fea42e59c2488ad31a0e651500f68",
-        "type": "github"
-      },
-      "original": {
-        "owner": "nix-systems",
-        "repo": "default-linux",
-        "type": "github"
-      }
-    },
-    "treefmt-nix": {
-      "inputs": {
-        "nixpkgs": "nixpkgs_5"
-      },
-      "locked": {
-        "lastModified": 1772660329,
-        "narHash": "sha256-IjU1FxYqm+VDe5qIOxoW+pISBlGvVApRjiw/Y/ttJzY=",
-        "owner": "numtide",
-        "repo": "treefmt-nix",
-        "rev": "3710e0e1218041bbad640352a0440114b1e10428",
-        "type": "github"
-      },
-      "original": {
-        "owner": "numtide",
-        "repo": "treefmt-nix",
-        "type": "github"
-      }
-    },
    "uv2nix": {
      "inputs": {
        "nixpkgs": [
@ -893,7 +799,7 @@
    "zen-browser": {
      "inputs": {
        "home-manager": "home-manager_3",
-        "nixpkgs": "nixpkgs_7"
+        "nixpkgs": "nixpkgs_6"
      },
      "locked": {
        "lastModified": 1774242250,
--- a/flake.nix
+++ b/flake.nix
@ -15,10 +15,6 @@
    };
    simple-nixos-mailserver.url = "gitlab:simple-nixos-mailserver/nixos-mailserver/master";
    authentik.url = "github:nix-community/authentik-nix";
-    noctalia = {
-      url = "github:noctalia-dev/noctalia-shell";
-      inputs.nixpkgs.follows = "nixpkgs";
-    };

    home-manager = {
      url = "github:nix-community/home-manager";
--- a/hosts/goingmerry/home.nix
+++ b/hosts/goingmerry/home.nix
@ -20,7 +20,6 @@
    ../../modules/home-manager/waybar.nix
    ../../modules/home-manager/wofi.nix
    ../../modules/home-manager/zsh.nix
-    # ../../modules/home-manager/noctalia.nix
    inputs.zen-browser.homeModules.twilight
  ];
  home.username = "sprechtl";
--- a/hosts/hitsugibune/immich.nix
+++ b/hosts/hitsugibune/immich.nix
@ -36,7 +36,23 @@ in
    locations."/" = {
      proxyPass = "http://localhost:2283";
      proxyWebsockets = true;
-      extraConfig = "client_max_body_size 50000M;";  # for large video uploads
+      # https://docs.immich.app/administration/reverse-proxy/
+      extraConfig = ''
+          # allow large file uploads
+          client_max_body_size 50000M;
+
+          # disable buffering uploads to prevent OOM on reverse proxy server and make uploads twice as fast (no pause)
+          proxy_request_buffering off;
+
+          # increase body buffer to avoid limiting upload speed
+          client_body_buffer_size 1024k;
+
+          # Set headers
+          proxy_set_header Host              $host;
+          proxy_set_header X-Real-IP         $remote_addr;
+          proxy_set_header X-Forwarded-For   $proxy_add_x_forwarded_for;
+          proxy_set_header X-Forwarded-Proto $scheme;
+    '';
    };
  };
 }
--- a/hosts/hitsugibune/matrix.nix
+++ b/hosts/hitsugibune/matrix.nix
@ -22,13 +22,19 @@ in {
    group = "matrix-synapse";
  };

+  age.secrets.matrix-oidc = {
+    file = ../../secrets/matrix-oidc.age;
+    owner = "matrix-synapse";
+    group = "matrix-synapse";
+  };
+
  age.secrets.mautrix-signal = {
    file = ../../secrets/mautrix-signal.age;
    owner = "mautrix-signal";
    group = "mautrix-signal";
  };
  age.secrets.mautrix-signal-puppeting = {
-    file = ../../secrets/mautrix-signal-puppeting.yaml.age; # your encrypted YAML
+    file = ../../secrets/mautrix-signal-puppeting.yaml.age;
    owner = "mautrix-signal";
    group = "mautrix-signal";
    mode = "0640";
@ -176,34 +182,41 @@ in {

  services.matrix-synapse = {
    enable = true;
-    settings.server_name = config.networking.domain;
+    extras = [ "oidc" ];
    # The public base URL value must match the `base_url` value set in `clientConfig` above.
    # The default value here is based on `server_name`, so if your `server_name` is different
    # from the value of `fqdn` above, you will likely run into some mismatched domain names
    # in client applications.
-    settings.public_baseurl = baseUrl;
-    settings.enable_registration = false;
-    enableRegistrationScript = true;
-    settings.listeners = [
-      {
-        port = 8008;
-        bind_addresses = ["::1"];
-        type = "http";
-        tls = false;
-        x_forwarded = true;
-        resources = [
-          {
-            names = ["client" "federation"];
-            compress = true;
-          }
-        ];
-      }
-    ];
+    settings = {
+      server_name = config.networking.domain;
+      public_baseurl = baseUrl;
+      enable_registration = false;
+      enableRegistrationScript = true;
+      listeners = [
+        {
+          port = 8008;
+          bind_addresses = ["::1"];
+          type = "http";
+          tls = false;
+          x_forwarded = true;
+          resources = [
+            {
+              names = ["client" "federation"];
+              compress = true;
+            }
+          ];
+        }
+      ];
+      log_level = "DEBUG";
+    };
    settings.app_service_config_files = [
      "/var/lib/mautrix-signal/double-puppeting.yaml"
    ];

-    extraConfigFiles = [config.age.secrets.matrix.path];
+    extraConfigFiles = [
+      config.age.secrets.matrix.path
+      config.age.secrets.matrix-oidc.path
+    ];
    settings.turn_uris = ["turn:${turn.realm}:3478?transport=udp" "turn:${turn.realm}:3478?transport=tcp"];
    settings.turn_user_lifetime = "1h";
  };
--- a/modules/home-manager/noctalia.nix
+++ b/modules/home-manager/noctalia.nix
@ -1,569 +0,0 @@
-{ pkgs, inputs, ... }:
-{
-    imports = [
-      inputs.noctalia.homeModules.default
-    ];
-    programs.noctalia-shell = {
-      enable = true;
-      settings = {
-        settingsVersion = 0;
-        bar = {
-          barType = "simple";
-          position = "top";
-          monitors = [ ];
-          density = "default";
-          showOutline = false;
-          showCapsule = true;
-          capsuleOpacity = 1;
-          capsuleColorKey = "none";
-          widgetSpacing = 6;
-          contentPadding = 2;
-          fontScale = 1;
-          enableExclusionZoneInset = true;
-          backgroundOpacity = 0.93;
-          useSeparateOpacity = false;
-          marginVertical = 4;
-          marginHorizontal = 4;
-          frameThickness = 8;
-          frameRadius = 12;
-          outerCorners = true;
-          hideOnOverview = false;
-          displayMode = "always_visible";
-          autoHideDelay = 500;
-          autoShowDelay = 150;
-          showOnWorkspaceSwitch = true;
-          widgets = {
-            left = [
-              {
-                id = "Launcher";
-              }
-              {
-                id = "Clock";
-              }
-              {
-                id = "SystemMonitor";
-              }
-              {
-                id = "ActiveWindow";
-              }
-              {
-                id = "MediaMini";
-              }
-            ];
-            center = [
-              {
-                id = "Workspace";
-              }
-            ];
-            right = [
-              {
-                id = "Tray";
-              }
-              {
-                id = "NotificationHistory";
-              }
-              {
-                id = "Battery";
-              }
-              {
-                id = "Volume";
-              }
-              {
-                id = "Brightness";
-              }
-              {
-                id = "ControlCenter";
-              }
-            ];
-          };
-          mouseWheelAction = "none";
-          reverseScroll = false;
-          mouseWheelWrap = true;
-          middleClickAction = "none";
-          middleClickFollowMouse = false;
-          middleClickCommand = "";
-          rightClickAction = "controlCenter";
-          rightClickFollowMouse = true;
-          rightClickCommand = "";
-          screenOverrides = [ ];
-        };
-        general = {
-          avatarImage = "";
-          dimmerOpacity = 0.2;
-          showScreenCorners = false;
-          forceBlackScreenCorners = false;
-          scaleRatio = 1;
-          radiusRatio = 1;
-          iRadiusRatio = 1;
-          boxRadiusRatio = 1;
-          screenRadiusRatio = 1;
-          animationSpeed = 1;
-          animationDisabled = false;
-          compactLockScreen = false;
-          lockScreenAnimations = false;
-          lockOnSuspend = true;
-          showSessionButtonsOnLockScreen = true;
-          showHibernateOnLockScreen = false;
-          enableLockScreenMediaControls = false;
-          enableShadows = true;
-          enableBlurBehind = true;
-          shadowDirection = "bottom_right";
-          shadowOffsetX = 2;
-          shadowOffsetY = 3;
-          language = "";
-          allowPanelsOnScreenWithoutBar = true;
-          showChangelogOnStartup = true;
-          telemetryEnabled = false;
-          enableLockScreenCountdown = true;
-          lockScreenCountdownDuration = 10000;
-          autoStartAuth = false;
-          allowPasswordWithFprintd = false;
-          clockStyle = "custom";
-          clockFormat = "hh\nmm";
-          passwordChars = false;
-          lockScreenMonitors = [ ];
-          lockScreenBlur = 0;
-          lockScreenTint = 0;
-          keybinds = {
-            keyUp = [
-              "Up"
-            ];
-            keyDown = [
-              "Down"
-            ];
-            keyLeft = [
-              "Left"
-            ];
-            keyRight = [
-              "Right"
-            ];
-            keyEnter = [
-              "Return"
-              "Enter"
-            ];
-            keyEscape = [
-              "Esc"
-            ];
-            keyRemove = [
-              "Del"
-            ];
-          };
-          reverseScroll = false;
-        };
-        ui = {
-          fontDefault = "";
-          fontFixed = "";
-          fontDefaultScale = 1;
-          fontFixedScale = 1;
-          tooltipsEnabled = true;
-          scrollbarAlwaysVisible = true;
-          boxBorderEnabled = false;
-          panelBackgroundOpacity = 0.93;
-          translucentWidgets = false;
-          panelsAttachedToBar = true;
-          settingsPanelMode = "attached";
-          settingsPanelSideBarCardStyle = false;
-        };
-        location = {
-          name = "Tokyo";
-          weatherEnabled = true;
-          weatherShowEffects = true;
-          useFahrenheit = false;
-          use12hourFormat = false;
-          showWeekNumberInCalendar = false;
-          showCalendarEvents = true;
-          showCalendarWeather = true;
-          analogClockInCalendar = false;
-          firstDayOfWeek = -1;
-          hideWeatherTimezone = false;
-          hideWeatherCityName = false;
-        };
-        calendar = {
-          cards = [
-            {
-              enabled = true;
-              id = "calendar-header-card";
-            }
-            {
-              enabled = true;
-              id = "calendar-month-card";
-            }
-            {
-              enabled = true;
-              id = "weather-card";
-            }
-          ];
-        };
-        wallpaper = {
-          enabled = true;
-          overviewEnabled = false;
-          directory = "";
-          monitorDirectories = [ ];
-          enableMultiMonitorDirectories = false;
-          showHiddenFiles = false;
-          viewMode = "single";
-          setWallpaperOnAllMonitors = true;
-          fillMode = "crop";
-          fillColor = "#000000";
-          useSolidColor = false;
-          solidColor = "#1a1a2e";
-          automationEnabled = false;
-          wallpaperChangeMode = "random";
-          randomIntervalSec = 300;
-          transitionDuration = 1500;
-          transitionType = [
-            "fade"
-            "disc"
-            "stripes"
-            "wipe"
-            "pixelate"
-            "honeycomb"
-          ];
-          skipStartupTransition = false;
-          transitionEdgeSmoothness = 0.05;
-          panelPosition = "follow_bar";
-          hideWallpaperFilenames = false;
-          useOriginalImages = false;
-          overviewBlur = 0.4;
-          overviewTint = 0.6;
-          useWallhaven = false;
-          wallhavenQuery = "";
-          wallhavenSorting = "relevance";
-          wallhavenOrder = "desc";
-          wallhavenCategories = "111";
-          wallhavenPurity = "100";
-          wallhavenRatios = "";
-          wallhavenApiKey = "";
-          wallhavenResolutionMode = "atleast";
-          wallhavenResolutionWidth = "";
-          wallhavenResolutionHeight = "";
-          sortOrder = "name";
-          favorites = [ ];
-        };
-        appLauncher = {
-          enableClipboardHistory = false;
-          autoPasteClipboard = false;
-          enableClipPreview = true;
-          clipboardWrapText = true;
-          enableClipboardSmartIcons = true;
-          enableClipboardChips = true;
-          clipboardWatchTextCommand = "wl-paste --type text --watch cliphist store";
-          clipboardWatchImageCommand = "wl-paste --type image --watch cliphist store";
-          position = "center";
-          pinnedApps = [ ];
-          sortByMostUsed = true;
-          terminalCommand = "alacritty -e";
-          customLaunchPrefixEnabled = false;
-          customLaunchPrefix = "";
-          viewMode = "list";
-          showCategories = true;
-          iconMode = "tabler";
-          showIconBackground = false;
-          enableSettingsSearch = true;
-          enableWindowsSearch = true;
-          enableSessionSearch = true;
-          ignoreMouseInput = false;
-          screenshotAnnotationTool = "";
-          overviewLayer = false;
-          density = "default";
-        };
-        controlCenter = {
-          position = "close_to_bar_button";
-          diskPath = "/";
-          shortcuts = {
-            left = [
-              {
-                id = "Network";
-              }
-              {
-                id = "Bluetooth";
-              }
-              {
-                id = "WallpaperSelector";
-              }
-              {
-                id = "NoctaliaPerformance";
-              }
-            ];
-            right = [
-              {
-                id = "Notifications";
-              }
-              {
-                id = "PowerProfile";
-              }
-              {
-                id = "KeepAwake";
-              }
-              {
-                id = "NightLight";
-              }
-            ];
-          };
-          cards = [
-            {
-              enabled = true;
-              id = "profile-card";
-            }
-            {
-              enabled = true;
-              id = "shortcuts-card";
-            }
-            {
-              enabled = true;
-              id = "audio-card";
-            }
-            {
-              enabled = false;
-              id = "brightness-card";
-            }
-            {
-              enabled = true;
-              id = "weather-card";
-            }
-            {
-              enabled = true;
-              id = "media-sysmon-card";
-            }
-          ];
-        };
-        systemMonitor = {
-          cpuWarningThreshold = 80;
-          cpuCriticalThreshold = 90;
-          tempWarningThreshold = 80;
-          tempCriticalThreshold = 90;
-          gpuWarningThreshold = 80;
-          gpuCriticalThreshold = 90;
-          memWarningThreshold = 80;
-          memCriticalThreshold = 90;
-          swapWarningThreshold = 80;
-          swapCriticalThreshold = 90;
-          diskWarningThreshold = 80;
-          diskCriticalThreshold = 90;
-          diskAvailWarningThreshold = 20;
-          diskAvailCriticalThreshold = 10;
-          batteryWarningThreshold = 20;
-          batteryCriticalThreshold = 5;
-          enableDgpuMonitoring = false;
-          useCustomColors = false;
-          warningColor = "";
-          criticalColor = "";
-          externalMonitor = "resources || missioncenter || jdsystemmonitor || corestats || system-monitoring-center || gnome-system-monitor || plasma-systemmonitor || mate-system-monitor || ukui-system-monitor || deepin-system-monitor || pantheon-system-monitor";
-        };
-        noctaliaPerformance = {
-          disableWallpaper = true;
-          disableDesktopWidgets = true;
-        };
-        dock = {
-          enabled = true;
-          position = "bottom";
-          displayMode = "auto_hide";
-          dockType = "floating";
-          backgroundOpacity = 1;
-          floatingRatio = 1;
-          size = 1;
-          onlySameOutput = true;
-          monitors = [ ];
-          pinnedApps = [ ];
-          colorizeIcons = false;
-          showLauncherIcon = false;
-          launcherPosition = "end";
-          launcherUseDistroLogo = false;
-          launcherIcon = "";
-          launcherIconColor = "none";
-          pinnedStatic = false;
-          inactiveIndicators = false;
-          groupApps = false;
-          groupContextMenuMode = "extended";
-          groupClickAction = "cycle";
-          groupIndicatorStyle = "dots";
-          deadOpacity = 0.6;
-          animationSpeed = 1;
-          sitOnFrame = false;
-          showDockIndicator = false;
-          indicatorThickness = 3;
-          indicatorColor = "primary";
-          indicatorOpacity = 0.6;
-        };
-        network = {
-          airplaneModeEnabled = false;
-          bluetoothRssiPollingEnabled = false;
-          bluetoothRssiPollIntervalMs = 60000;
-          networkPanelView = "wifi";
-          wifiDetailsViewMode = "grid";
-          bluetoothDetailsViewMode = "grid";
-          bluetoothHideUnnamedDevices = false;
-          disableDiscoverability = false;
-          bluetoothAutoConnect = true;
-        };
-        sessionMenu = {
-          enableCountdown = true;
-          countdownDuration = 10000;
-          position = "center";
-          showHeader = true;
-          showKeybinds = true;
-          largeButtonsStyle = true;
-          largeButtonsLayout = "single-row";
-          powerOptions = [
-            {
-              action = "lock";
-              enabled = true;
-              keybind = "1";
-            }
-            {
-              action = "suspend";
-              enabled = true;
-              keybind = "2";
-            }
-            {
-              action = "hibernate";
-              enabled = true;
-              keybind = "3";
-            }
-            {
-              action = "reboot";
-              enabled = true;
-              keybind = "4";
-            }
-            {
-              action = "logout";
-              enabled = true;
-              keybind = "5";
-            }
-            {
-              action = "shutdown";
-              enabled = true;
-              keybind = "6";
-            }
-            {
-              action = "rebootToUefi";
-              enabled = true;
-              keybind = "7";
-            }
-          ];
-        };
-        notifications = {
-          enabled = true;
-          enableMarkdown = false;
-          density = "default";
-          monitors = [ ];
-          location = "top_right";
-          overlayLayer = true;
-          backgroundOpacity = 1;
-          respectExpireTimeout = false;
-          lowUrgencyDuration = 3;
-          normalUrgencyDuration = 8;
-          criticalUrgencyDuration = 15;
-          clearDismissed = true;
-          saveToHistory = {
-            low = true;
-            normal = true;
-            critical = true;
-          };
-          sounds = {
-            enabled = false;
-            volume = 0.5;
-            separateSounds = false;
-            criticalSoundFile = "";
-            normalSoundFile = "";
-            lowSoundFile = "";
-            excludedApps = "discord,firefox,chrome,chromium,edge";
-          };
-          enableMediaToast = false;
-          enableKeyboardLayoutToast = true;
-          enableBatteryToast = true;
-        };
-        osd = {
-          enabled = true;
-          location = "top_right";
-          autoHideMs = 2000;
-          overlayLayer = true;
-          backgroundOpacity = 1;
-          enabledTypes = [
-            0
-            1
-            2
-          ];
-          monitors = [ ];
-        };
-        audio = {
-          volumeStep = 5;
-          volumeOverdrive = false;
-          spectrumFrameRate = 30;
-          visualizerType = "linear";
-          spectrumMirrored = true;
-          mprisBlacklist = [ ];
-          preferredPlayer = "";
-          volumeFeedback = false;
-          volumeFeedbackSoundFile = "";
-        };
-        brightness = {
-          brightnessStep = 5;
-          enforceMinimum = true;
-          enableDdcSupport = false;
-          backlightDeviceMappings = [ ];
-        };
-        colorSchemes = {
-          useWallpaperColors = false;
-          predefinedScheme = "Noctalia (default)";
-          darkMode = true;
-          schedulingMode = "off";
-          manualSunrise = "06:30";
-          manualSunset = "18:30";
-          generationMethod = "tonal-spot";
-          monitorForColors = "";
-          syncGsettings = true;
-        };
-        templates = {
-          activeTemplates = [ ];
-          enableUserTheming = false;
-        };
-        nightLight = {
-          enabled = false;
-          forced = false;
-          autoSchedule = true;
-          nightTemp = "4000";
-          dayTemp = "6500";
-          manualSunrise = "06:30";
-          manualSunset = "18:30";
-        };
-        hooks = {
-          enabled = false;
-          wallpaperChange = "";
-          darkModeChange = "";
-          screenLock = "";
-          screenUnlock = "";
-          performanceModeEnabled = "";
-          performanceModeDisabled = "";
-          startup = "";
-          session = "";
-          colorGeneration = "";
-        };
-        plugins = {
-          autoUpdate = false;
-          notifyUpdates = true;
-        };
-        idle = {
-          enabled = false;
-          screenOffTimeout = 600;
-          lockTimeout = 660;
-          suspendTimeout = 1800;
-          fadeDuration = 5;
-          screenOffCommand = "";
-          lockCommand = "";
-          suspendCommand = "";
-          resumeScreenOffCommand = "";
-          resumeLockCommand = "";
-          resumeSuspendCommand = "";
-          customCommands = "[]";
-        };
-        desktopWidgets = {
-          enabled = false;
-          overviewEnabled = true;
-          gridSnap = false;
-          gridSnapScale = false;
-          monitorWidgets = [ ];
-        };
-      };
-    };
-}
--- a/secrets/matrix-oidc.age
+++ b/secrets/matrix-oidc.age
@ -0,0 +1,16 @@
+age-encryption.org/v1
+-> ssh-ed25519 7PLkJg XYa7BZNJcLeaFg9P0jVzv/OsvPw5WZhAnIJYdqwGNG0
+HQfQNXNFK1Q9nHBQddY+kOu91gn+1my2jsSO2iEWpAA
+-> ssh-rsa LgF3EQ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+--- GjXC5GUW8+bfp5Jb2+hzi2AZNuffI0TwUeyLaUQAUww
+ÚŮt±#ĄËaĘŇ40çCë<14>¶™cA0÷aü0ĆĹü<C4B9>„<EFBFBD>»ž.ó5ś¦€łYňČž«•đlyň<79>u˘ľkŞFśŐĹ§y!g¸¸?˙ŮŤWk‘$¬LnŚ€ŚĐf‡tłŁ…;+˛çĐ¸T	/śŘ‚îUUC§$'—I»&ęÄ&ˇäjě(ëŚg(W–× 6ż`ŽZ¦ Îq<C38E>bŹĎ’mJĆ}ĹĚľěč¦ěKŰ÷Ă0AS®PˇuŐęL÷<4C>đżi^:Ű<>Ő=ŚÓ&ü-@oB(wX¬ţS®ĚhRł1äňöÔ'´¨í$ťXÎ$i«–®tÔG˛_2ď’‘"Ľ5[‰O€‚‹VeŢ:łyÍqťŘ‹<Xc•ŕ«‡ËjN†„ÓË/ľěI<>¬ÖŢŮ5®
+‰6„“ÝěÂYzXŞÜFz(6ÖÖ[Ďbs°. .gb¸SĽGš]Ź<>|b§O‡ęčBˇˇ@Ć÷´k·3Ć^<5E>Ö˛€M%#D;ŽA<˙s8äOŘď+eL‚¶ýĂęc|d-%V'C"a}»¶?Í{ęęáĽřkTŔńÇiĎŠöô`Îe.z°?ÖçE
Ů+˙Ěů=fZ<66>f(óŐďĎqČ<71>×L-‚/I3¤>•ý űéÜŤ˝|Ű>gźÇ·`ü˘”D°ÖµY><3E>Édă«í–$‹Ń¦žKkBŐSú ÝmĎ×„?a„ZŇ%Śj0w‰›«Éľ˝Qź$Ü‹pűÓČfľth
ć-	‰«3[A2ěś…”ű:Ls( áUÓ‡é
ű+:÷YęÓ
--- a/secrets/secrets.nix
+++ b/secrets/secrets.nix
@ -12,6 +12,7 @@ in {
  "speedtest-tracker.age".publicKeys = [saberofxebec key];
  "homarr.age".publicKeys = [saberofxebec key];
  "matrix.age".publicKeys = [hitsugibune key];
+  "matrix-oidc.age".publicKeys = [hitsugibune key];
  "mautrix-signal.age".publicKeys = [hitsugibune key];
  "mautrix-signal-puppeting.yaml.age".publicKeys = [hitsugibune key];
  "mautrix-whatsapp.age".publicKeys = [hitsugibune key];
Author	SHA1	Message	Date
s-prechtl	6fed3ee43b	feat: samc	2026-03-24 22:30:17 +01:00
s-prechtl	d915a3fe2d	fix: issuer url format	2026-03-24 21:57:35 +01:00
s-prechtl	07f653908b	feat: oidc matrix	2026-03-24 21:54:20 +01:00
s-prechtl	b9684e2362	fix: move all oidc stuff to extrafile	2026-03-24 21:43:47 +01:00
s-prechtl	357480c807	feat: matrix oidc	2026-03-24 21:20:11 +01:00
s-prechtl	62bb7aa2ea	feat: full config from docs	2026-03-24 15:54:51 +01:00
s-prechtl	f4ebd7fe79	feat: bigger uploads	2026-03-24 15:51:07 +01:00
s-prechtl	53ec53388e	fix: schauer	2026-03-24 15:35:23 +01:00
s-prechtl	fffdc559ab	feat: bigger files bigger birds	2026-03-24 15:34:31 +01:00
s-prechtl	cf8182afd6	feat: uncap file size for immich	2026-03-24 15:24:19 +01:00