sakura: enable conduit

flake.nix

@@ -108,6 +108,7 @@
     eww.url = "github:elkowar/eww";
     anyrun.url = "github:Kirottu/anyrun";
     botoh.url = "git+https://git.flake.sh/notohh/botoh";
+    conduwuit.url = "github:girlbossceo/conduwuit";
     deploy-rs = {
       url = "github:serokell/deploy-rs";
       inputs.nixpkgs.follows = "nixpkgs";

hosts/sakura/services/conduit.nix

@@ -1,20 +1,26 @@
-_: {
+{inputs, ...}: {
   networking.firewall.allowedTCPPorts = [6167 8448];
   services.matrix-conduit = {
     enable = true;
+    package = inputs.conduwuit.packages.x86_64-linux.default;
     settings = {
       global = {
         address = "0.0.0.0";
         server_name = "matrix.flake.sh";
-        allow_registration = true;
+        allow_registration = false;
         allow_federation = true;
         allow_encryption = true;
-        log = "warn";
+        log = "info";
         max_concurrent_requests = 100;
         max_request_size = 20000000;
         database_backend = "rocksdb";
         enable_lightning_bolt = false;
         trusted_servers = ["matrix.org"];
+        url_preview_domain_contains_allowlist = ["*"];
+        well_known = {
+          client = "https://matrix.flake.sh";
+          server = "matrix.flake.sh:443";
+        };
       };
     };
   };

hosts/sakura/services/default.nix

@@ -7,7 +7,7 @@
     # ./hedgedoc.nix
     ./grafana.nix
     ./vaultwarden.nix
-    # ./conduit.nix
+    ./conduit.nix
     ./tailscale.nix
     ./rustlog.nix
     ./wastebin.nix