keep the matrix appservice registration in bao, with the host file as the last copy
This commit is contained in:
parent
fb6cd36b5f
commit
d5c5862654
1 changed files with 1014 additions and 273 deletions
|
|
@ -13,13 +13,18 @@ crate.
|
|||
|
||||
### `appservice render`
|
||||
|
||||
Mints the swarm appservice registration's tokens when absent and renders the
|
||||
registration tuwunel loads. Runs before the homeserver and needs no network.
|
||||
Renders the swarm appservice registration tuwunel loads from the tokens in the
|
||||
state dir, minting them only on a host that has none. Runs before the
|
||||
homeserver and needs no network: the tokens on disk are the last copy `sync`
|
||||
took from the store.
|
||||
|
||||
### `appservice publish`
|
||||
### `appservice sync`
|
||||
|
||||
Writes the rendered `as_token` to the swarm secret store for `swarm-controller`,
|
||||
when the store's copy differs.
|
||||
The store holds the registration's tokens. This writes them into the state dir
|
||||
when they differ, restarts the homeserver whenever the registration is
|
||||
newer than its last start, and publishes the `as_token` for `swarm-controller`. A store holding none is seeded from the
|
||||
state dir, create-only, so nothing rotates. It runs beside the homeserver, so a
|
||||
store outage leaves the homeserver running on the last copy.
|
||||
|
||||
Both are configured entirely by the `MATRIX_APPSERVICE_*` environment the units
|
||||
set — no flags. A systemd `Environment=` block is what a nix module can render; a
|
||||
|
|
|
|||
Loading…
Reference in a new issue