hosts: move matrix to hades

hosts/hades/default.nix

@@ -57,6 +57,11 @@ in {
   my.services = {
     fail2ban.enable = true;
 
+    matrix = {
+      enable = true;
+      secretConfigFile = config.age.secrets."matrix-synapse/secret-config".path;
+    };
+
     miniflux = {
       enable = true;
       adminCredentialsFile = config.age.secrets."miniflux/admin-credentials".path;

hosts/hades/secrets.nix

@@ -15,6 +15,10 @@
       lib.mapAttrs toSecret {
         "gandi/api-key" = {};
 
+        "matrix-synapse/secret-config" = {
+          owner = "matrix-synapse";
+        };
+
         "miniflux/admin-credentials" = {};
 
         "restic-backup/hades-credentials" = {};

hosts/poseidon/default.nix

@@ -96,11 +96,6 @@ in {
       port = 8083;
     };
 
-    matrix = {
-      enable = true;
-      secretConfigFile = config.age.secrets."matrix-synapse/secret-config".path;
-    };
-
     monitoring = {
       enable = true;
       domain = "monitoring.${config.networking.domain}";

hosts/poseidon/secrets.nix

@@ -17,10 +17,6 @@
 
         "lohr/shared-secret" = {};
 
-        "matrix-synapse/secret-config" = {
-          owner = "matrix-synapse";
-        };
-
         "nextcloud/admin-pass" = {
           owner = "nextcloud";
         };

modules/secrets/secrets.nix

@@ -15,7 +15,7 @@ in {
 
   "lohr/shared-secret.age".publicKeys = [alarsyo poseidon];
 
-  "matrix-synapse/secret-config.age".publicKeys = [alarsyo poseidon];
+  "matrix-synapse/secret-config.age".publicKeys = [alarsyo hades];
 
   "miniflux/admin-credentials.age".publicKeys = [alarsyo hades];