fuck

config/hosts/wind/services/synapse.nix

@@ -4,6 +4,7 @@
   services.matrix-synapse = {
     enable = true;
     withJemalloc = true;
+    extraConfigFiles = [ config.secrets.files.synapse_extra_config.file ];
     settings = {
       server_name = "graven.dev";
       enable_registration = false;
@@ -24,28 +25,6 @@
         "turns:turn.graven.dev:5350?transport=tcp"
       ];
       report_stats = true;
-
-      extraConfig = ''
-  password_config:
-    enabled: false
-  oidc_providers:
-    - idp_id: authentik
-      idp_name: authentik
-      discover: true
-      issuer: "https://auth.graven.dev/application/o/synapse/"
-      client_id: "7a77036d3b360265895f2ab5a51264ba586c93d5"
-      client_secret: "a9f9146fd13338230481a71c824d122bfb5e8a2118f2cdaf882746ad6726aeecd50ef522338acec89d3f8ccb8014124e022a6af6769807ea4271931f219a3f55"
-      allow_existing_users: true
-      scopes:
-        - "openid"
-        - "profile"
-        - "email"
-      user_mapping_provider:
-        config:
-          localpart_template: "{{ user.name }}"
-          display_name_template: "{{ user.name|capitalize }}"
-      '';
-
       logConfig = ''
   version: 1