Serve Synapse Admin from quasar

hosts/marauder/printing.nix

@@ -1,5 +1,9 @@
-{ ... }:
+{ pkgs, ... }:
 {
+  environment.systemPackages = with pkgs; [
+    system-config-printer
+  ];
+
   services.printing = {
     enable = true;
   };

hosts/quasar/default.nix

@@ -1,4 +1,4 @@
-{ self, config, modulesPath, ... }:
+{ self, modulesPath, pkgs, config, secrets, ... }:
 {
   imports = [
     "${modulesPath}/virtualisation/amazon-image.nix"
@@ -28,6 +28,10 @@
         reverse_proxy /_matrix/* localhost:8008
         reverse_proxy /_synapse/client/* localhost:8008
       '';
+      "admin.${config.networking.domain}".extraConfig = ''
+        root * ${pkgs.synapse-admin}
+        file_server
+      '';
     };
   };
 
@@ -36,6 +40,9 @@
     settings = {
       server_name = config.networking.domain;
       serve_server_wellknown = true;
+      registration_shared_secret = secrets.synapse."consortium.chat".registration-shared-secret;
+      macaroon_secret_key = secrets.synapse."consortium.chat".macaroon-secret-key;
+      form_secret = secrets.synapse."consortium.chat".form-secret;
     };
   };