fix: matrix

nixos/module/generic/matrix-cluster.nix

@@ -494,6 +494,10 @@ ${lib.concatStringsSep "\n" (map mkUserRegistration matrixUsers)}
     })
 
     (lib.mkIf (cfg.role == "standby") {
+      systemd.targets.postgresql.requires = lib.mkForce [
+        "postgresql.service"
+      ];
+
       # Hot-standby bootstrap: standby.signal + primary_conninfo with passfile.
       # pg_basebackup must be run manually (see runbook) before this activates
       # for the first time.

nixos/system/bfs.poland.xray/bfs.poland.xray.nix

@@ -31,7 +31,7 @@ in {
 
   hectic.generic.matrix-cluster = {
     enable        = true;
-    role          = "standby";
+    role          = "primary";
     matrixDomain  = "accord.tube";
     signingKeyFile = config.sops.secrets."matrix/signing-key".path;
     secretsFile    = config.sops.secrets."matrix/secrets".path;
@@ -190,6 +190,8 @@ in {
   };
   sops.secrets."matrix/turn-secret" = {
     key      = "matrix/turn-secret";
+    owner    = "turnserver";
+    group    = "turnserver";
     mode     = "0400";
     sopsFile = "${flake}/sus/matrix-cluster.yaml";
   };

nixos/system/hectic-lab/hectic-lab.nix

@@ -62,7 +62,8 @@ in {
 
     generic.matrix-cluster = {
       enable        = true;
-      role          = "primary";
+      overrideEnableSynapse = false;
+      role          = "standby";
       inherit matrixDomain;
       signingKeyFile = config.sops.secrets."matrix/signing-key".path;
       secretsFile    = config.sops.secrets."matrix/secrets".path;
@@ -95,7 +96,7 @@ in {
         allowedSourceIPs = [ "91.198.166.181/32" ];
       };
       acme = {
-        enable = true;
+        enable = false;
         porkbunApiKeyFile       = config.sops.secrets."matrix/porkbun-api-key".path;
         porkbunSecretApiKeyFile = config.sops.secrets."matrix/porkbun-secret-api-key".path;
       };
@@ -187,8 +188,8 @@ in {
   };
   sops.secrets."matrix/turn-secret" = {
     key   = "matrix/turn-secret";
-    owner = "turnserver";
-    group = "turnserver";
+    owner = "root";
+    group = "root";
     mode  = "0400";
     sopsFile = "${flake}/sus/matrix-cluster.yaml";
   };