colin
d13bcc49ab
longer-term, i want hosts/by-name to define host-specific data that's accessible via the other hosts (things like pubkeys). also the secrets management needs some rethinking. there's really not much point in me specifiying where *exactly* a secret comes from at its use site. i should really be specifying secret store manifests; i.e. "servo.yaml contains secrets X Y and Z", and leaving the rest up to auto-computing.
98 lines
3.5 KiB
Nix
98 lines
3.5 KiB
Nix
{ config, lib, ... }:
|
|
|
|
{
|
|
sane.persist.sys.plaintext = [
|
|
# TODO: mode?
|
|
# user and group are both "matrix-appservice-irc"
|
|
{ user = "993"; group = "992"; directory = "/var/lib/matrix-appservice-irc"; }
|
|
];
|
|
|
|
services.matrix-synapse.settings.app_service_config_files = [
|
|
"/var/lib/matrix-appservice-irc/registration.yml" # auto-created by irc appservice
|
|
];
|
|
|
|
# note: Rizon allows only FOUR simultaneous IRC connections per IP: https://wiki.rizon.net/index.php?title=Connection/Session_Limit_Exemptions
|
|
# Rizon supports CertFP for auth: https://wiki.rizon.net/index.php?title=CertFP
|
|
services.matrix-appservice-irc.enable = true;
|
|
services.matrix-appservice-irc.registrationUrl = "http://127.0.0.1:8009";
|
|
# settings documented here: https://github.com/matrix-org/matrix-appservice-irc/blob/develop/config.sample.yaml
|
|
services.matrix-appservice-irc.settings = {
|
|
homeserver = {
|
|
url = "http://127.0.0.1:8008";
|
|
dropMatrixMessagesAfterSecs = 300;
|
|
domain = "uninsane.org";
|
|
enablePresence = true;
|
|
bindPort = 9999;
|
|
bindHost = "127.0.0.1";
|
|
};
|
|
|
|
ircService = {
|
|
servers = {
|
|
"irc.rizon.net" = {
|
|
name = "Rizon";
|
|
port = 6697; # SSL port
|
|
ssl = true;
|
|
sasl = true; # appservice doesn't support NickServ identification
|
|
botConfig = {
|
|
# bot has no presence in IRC channel; only real Matrix users
|
|
enabled = false;
|
|
# nick = "UninsaneDotOrg";
|
|
nick = "uninsane";
|
|
username = "uninsane";
|
|
};
|
|
dynamicChannels = {
|
|
enabled = true;
|
|
aliasTemplate = "#irc_rizon_$CHANNEL";
|
|
};
|
|
ircClients = {
|
|
nickTemplate = "$LOCALPARTsane";
|
|
# by default, Matrix will convert messages greater than (3) lines into a pastebin-like URL to send to IRC.
|
|
lineLimit = 20;
|
|
};
|
|
matrixClients = {
|
|
userTemplate = "@irc_rizon_$NICK"; # the :uninsane.org part is appended automatically
|
|
};
|
|
|
|
# this will let this user message the appservice with `!join #<IRCChannel>` and the rest "Just Works"
|
|
"@colin:uninsane.org" = "admin";
|
|
|
|
membershipLists = {
|
|
enabled = true;
|
|
global = {
|
|
ircToMatrix = {
|
|
initial = true;
|
|
incremental = true;
|
|
requireMatrixJoined = false;
|
|
};
|
|
matrixToIrc = {
|
|
initial = true;
|
|
incremental = true;
|
|
};
|
|
};
|
|
};
|
|
# sync room description?
|
|
bridgeInfoState = {
|
|
enabled = true;
|
|
initial = true;
|
|
};
|
|
|
|
# hardcoded mappings, for when dynamicChannels fails us. TODO: probably safe to remove these.
|
|
# mappings = {
|
|
# "#chat" = {
|
|
# roomIds = [ "!GXJSOTdbtxRboGtDep:uninsane.org" ];
|
|
# };
|
|
# # BakaBT requires account registration, which i think means my user needs to be added before the appservice user
|
|
# "#BakaBT" = {
|
|
# roomIds = [ "!feZKttuYuHilqPFSkD:uninsane.org" ];
|
|
# };
|
|
# };
|
|
# for per-user IRC password:
|
|
# invite @irc_rizon_NickServ:uninsane.org to a DM and type `help` => register
|
|
# invite the matrix-appservice-irc user to a DM and type `!help` => add PW to database
|
|
# passwordEncryptionKeyPath = "/path/to/privkey"; # appservice will generate its own if unspecified
|
|
};
|
|
};
|
|
};
|
|
};
|
|
}
|