From 188988f930e35dc9daac6e373a737fe867207706 Mon Sep 17 00:00:00 2001
From: Chris Kruining <chris@kruining.eu>
Date: Sun, 14 Sep 2025 22:13:19 +0200
Subject: [PATCH] disable password auth for matrix

---
 modules/nixos/services/communication/matrix/default.nix | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/modules/nixos/services/communication/matrix/default.nix b/modules/nixos/services/communication/matrix/default.nix
index a93d7c8..d0c6e45 100644
--- a/modules/nixos/services/communication/matrix/default.nix
+++ b/modules/nixos/services/communication/matrix/default.nix
@@ -35,12 +35,15 @@ in
           server_name = domain;
           public_baseurl = "https://${fqn}";
 
-          enable_registration = false;
           registration_shared_secret = "tZtBnlhEmLbMwF0lQ112VH1Rl5MkZzYH9suI4pEoPXzk6nWUB8FJF4eEnwLkbstz";
 
           url_preview_enabled = true;
           precence.enabled = true;
 
+          # Since we'll be using OIDC for auth disable all local options
+          enable_registration = false;
+          password_config.enabled = false;
+
           sso = {
             client_whitelist = [ "http://[::1]:9092" ];
             update_profile_information = true;