From 3e5a7031183b1890452f14b9cfd68ffa2bb40bf5 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Motiejus=20Jak=C5=A1tys?= <motiejus@jakstys.lt>
Date: Sun, 19 Mar 2023 21:41:07 +0200
Subject: [PATCH] use the signing key

---
 configuration.nix | 11 ++++++++++-
 1 file changed, 10 insertions(+), 1 deletion(-)

diff --git a/configuration.nix b/configuration.nix
index 10234dd..7c26a41 100644
--- a/configuration.nix
+++ b/configuration.nix
@@ -377,7 +377,6 @@ in {
     # - turn_shared_secret
     # TODO:
     # app_service_config_files
-    # signing_key_path
     matrix-synapse = {
       enable = true;
       settings = {
@@ -566,6 +565,16 @@ in {
       ];
     };
 
+    matrix-synapse = {
+      preStart = ''
+        mkdir -p /run/matrix-synapse/
+        ln -sf ''${CREDENTIALS_DIRECTORY}/jakstys.lt.signing.key /run/matrix-synapse/jakstys.lt.signing.key
+      '';
+      serviceConfig.LoadCredential = [
+        "jakstys.lt.signing.key:/var/src/secrets/synapse/jakstys.lt.signing.key"
+      ];
+    };
+
     cert-watcher = {
       description = "Restart coturn when tls key/cert changes";
       wantedBy = ["multi-user.target"];