nixos/tests/matrix-authentication-service: use extraConfigFiles

2026-07-13 10:59:35 +02:00
parent df590320f3
commit 9c71adbeb5
1 changed files with 16 additions and 9 deletions
@@ -189,11 +189,26 @@ in
      { nodes, ... }:
      let
        bundle = mkBundle masDomain;
+
+        extraConfig = pkgs.writeText "masExtraConfig.yml" (
+          builtins.toJSON {
+            secrets = {
+              encryption_file = "/var/lib/matrix-authentication-service/encryption";
+              keys = [
+                {
+                  kid = "rsa-4096";
+                  key_file = "/var/lib/matrix-authentication-service/key_rsa_4096";
+                }
+              ];
+            };
+          }
+        );
      in
      {
        services.matrix-authentication-service = {
          enable = true;
          createDatabase = true;
+          extraConfigFiles = [ (toString extraConfig) ];
          settings = {
            http = {
              public_base = "https://${masDomain}:8080/";
@@ -223,15 +238,7 @@ in
              secret_file = "/var/lib/matrix-authentication-service/matrix_secret";
            };
            database.uri = "postgresql:///matrix-authentication-service?host=/run/postgresql&user=matrix-authentication-service";
-            secrets = {
-              encryption_file = "/var/lib/matrix-authentication-service/encryption";
-              keys = [
-                {
-                  kid = "rsa-4096";
-                  key_file = "/var/lib/matrix-authentication-service/key_rsa_4096";
-                }
-              ];
-            };
+            # secrets is defined in extraConfigFiles
            policy.data.client_registration.allow_insecure_uris = true;
            upstream_oauth2.providers = [
              {