Matrix - Revision history

Walkquackback: /* Desktop clients */Reword to make wording and presentation more neutral

2026-04-18T17:35:43Z

Desktop clients: Reword to make wording and presentation more neutral

← Older revision		Revision as of 17:35, 18 April 2026
Line 13:		Line 13:
	=== Desktop clients ===		=== Desktop clients ===

	~~These~~ clients ~~are known to work:~~ <code>element-desktop</code> [https://element.io/] and <code>fractal</code> [https://gitlab.gnome.org/World/fractal]		The clients <code>element-desktop</code> [https://element.io/] and <code>fractal</code> [https://gitlab.gnome.org/World/fractal] are known to work and are kept up to date.

	~~Most of the other~~ clients packaged in Nixpkgs, such as <code>matrix-commander</code>, <code>neochat</code>, <code>nheko</code>, ~~rely~~ on the ~~'''~~insecure~~''' and '''deprecated'''~~ <code>olm</code> library susceptible to various security vulnerabilities.[https://nvd.nist.gov/vuln/detail/CVE-2024-45191][https://nvd.nist.gov/vuln/detail/CVE-2024-45193][https://nvd.nist.gov/vuln/detail/CVE-2024-45192]		Other clients packaged in Nixpkgs, such as <code>matrix-commander</code>, <code>neochat</code>, <code>nheko</code>, depend on the insecure <code>olm</code> library susceptible to various security vulnerabilities.[https://nvd.nist.gov/vuln/detail/CVE-2024-45191][https://nvd.nist.gov/vuln/detail/CVE-2024-45193][https://nvd.nist.gov/vuln/detail/CVE-2024-45192]

			If this is not a concern, the guide to [https://nixos.org/manual/nixpkgs/stable/#sec-allow-insecure install insecure packages] may be followed.

	If this isn't a problem for you, you can install them as usual, and upon evaluation, Nix will helpfully guide you on how to [https://nixos.org/manual/nixpkgs/stable/#sec-allow-insecure install insecure packages].
	=== Web clients ===		=== Web clients ===
	There is a web version of the client [https://element.io/ Element], <code>element-web</code> on Nixpkgs, which you can use as a regular web application. See [https://nixos.org/nixos/manual/index.html#module-services-matrix-element-web the NixOS manual entry].<syntaxhighlight lang="nixos">		There is a web version of the client [https://element.io/ Element], <code>element-web</code> on Nixpkgs, which you can use as a regular web application. See [https://nixos.org/nixos/manual/index.html#module-services-matrix-element-web the NixOS manual entry].<syntaxhighlight lang="nixos">

Zimward: Move Livekit out of the synapse section as its homeserver independent

2026-03-17T18:04:37Z

Move Livekit out of the synapse section as its homeserver independent

@@ Line 165: / Line 165: @@
 </syntaxhighlight>
-==== Livekit ====
 In order to set up element call or for calls to work in Element X it is necessary to set up and announce livekit. To set up livekit for matrix in nixos use<syntaxhighlight lang="nix" line="1">
 { config, lib, pkgs, ... }: let
@@ Line 235: / Line 260: @@
+}
 </syntaxhighlight>
 == Application services (a.k.a. bridges) ==

Kaya: Add section about synapse admin

2025-11-18T23:30:25Z

Add section about synapse admin

@@ Line 239: / Line 239: @@
 There's an external module to automatically set up synapse and configure nginx with workers:
 https://github.com/dali99/nixos-matrix-modules
 == Application services (a.k.a. bridges) ==

Xanderio: livekit: simplify key creation unit with ConditionPathExists

2025-10-19T10:53:50Z

livekit: simplify key creation unit with ConditionPathExists

← Older revision		Revision as of 10:53, 19 October 2025
Line 188:		Line 188:
	path = with pkgs; [ livekit coreutils gawk ];		path = with pkgs; [ livekit coreutils gawk ];
	script = ''		script = ''
	~~if [ -f ${keyFile} ]; then~~
	~~echo "Key exists"~~
	~~else~~
	echo "Key missing, generating key"		echo "Key missing, generating key"
	echo "lk-jwt-service: $(livekit-server generate-keys \| tail -1 \| awk '{print $3}')" > "${keyFile}"		echo "lk-jwt-service: $(livekit-server generate-keys \| tail -1 \| awk '{print $3}')" > "${keyFile}"
	fi
	'';		'';
	serviceConfig.Type = "oneshot";		serviceConfig.Type = "oneshot";
			unitConfig.ConditionPathExists = "!${keyFile}";
	};		};
	# restrict access to livekit room creation to a homeserver		# restrict access to livekit room creation to a homeserver

Xanderio: disable livekit auto room creation as per lk-jwt-service upstream docs

2025-10-19T10:48:00Z

disable livekit auto room creation as per lk-jwt-service upstream docs

← Older revision		Revision as of 10:48, 19 October 2025
Line 173:		Line 173:
	enable = true;		enable = true;
	openFirewall = true;		openFirewall = true;
			settings.room.auto_create = false;
	inherit keyFile;		inherit keyFile;
	};		};

Benneti: add instructions to setup livekit for use withe element-call or Element X

2025-08-22T19:38:04Z

add instructions to setup livekit for use withe element-call or Element X

@@ Line 162: / Line 162: @@
      turn_user_lifetime = "1h";
    };
+}
 </syntaxhighlight>

Sandro: Remove old link

2025-07-17T12:27:09Z

Remove old link

← Older revision		Revision as of 12:27, 17 July 2025
Line 254:		Line 254:
	=== mautrix-whatsapp ===		=== mautrix-whatsapp ===
	Packaged as [https://search.nixos.org/packages?query=mautrix-whatsapp mautrix-whatsapp].		Packaged as [https://search.nixos.org/packages?query=mautrix-whatsapp mautrix-whatsapp].
	~~Module implemented in this [https://github.com/NixOS/nixpkgs/pull/246842 PR].~~

	=== matrix-appservice-irc ===		=== matrix-appservice-irc ===

O5-J: Minor spelling mistake

2025-06-28T13:44:31Z

Minor spelling mistake

← Older revision		Revision as of 13:44, 28 June 2025
Line 13:		Line 13:
	=== Desktop clients ===		=== Desktop clients ===

	These clients are ~~know~~ to work: <code>element-desktop</code> [https://element.io/] and <code>fractal</code> [https://gitlab.gnome.org/World/fractal]		These clients are known to work: <code>element-desktop</code> [https://element.io/] and <code>fractal</code> [https://gitlab.gnome.org/World/fractal]

	Most of the other clients packaged in Nixpkgs, such as <code>matrix-commander</code>, <code>neochat</code>, <code>nheko</code>, rely on the '''insecure''' and '''deprecated''' <code>olm</code> library susceptible to various security vulnerabilities.[https://nvd.nist.gov/vuln/detail/CVE-2024-45191][https://nvd.nist.gov/vuln/detail/CVE-2024-45193][https://nvd.nist.gov/vuln/detail/CVE-2024-45192]		Most of the other clients packaged in Nixpkgs, such as <code>matrix-commander</code>, <code>neochat</code>, <code>nheko</code>, rely on the '''insecure''' and '''deprecated''' <code>olm</code> library susceptible to various security vulnerabilities.[https://nvd.nist.gov/vuln/detail/CVE-2024-45191][https://nvd.nist.gov/vuln/detail/CVE-2024-45193][https://nvd.nist.gov/vuln/detail/CVE-2024-45192]

Dander: don't link to personal blogs (see MoS)

2024-10-25T04:12:11Z

don't link to personal blogs (see MoS)

← Older revision		Revision as of 04:12, 25 October 2024
Line 15:		Line 15:
	These clients are know to work: <code>element-desktop</code> [https://element.io/] and <code>fractal</code> [https://gitlab.gnome.org/World/fractal]		These clients are know to work: <code>element-desktop</code> [https://element.io/] and <code>fractal</code> [https://gitlab.gnome.org/World/fractal]

	Most of the other clients packaged in Nixpkgs, such as <code>matrix-commander</code>, <code>neochat</code>, <code>nheko</code>, rely on the '''insecure''' and '''deprecated''' <code>olm</code> library susceptible to [https://~~soatok~~.~~blog~~/2024/08/14/~~security~~-~~issues~~-in-~~matrixs~~-~~olm-library/ various security vulnerabilities~~].		Most of the other clients packaged in Nixpkgs, such as <code>matrix-commander</code>, <code>neochat</code>, <code>nheko</code>, rely on the '''insecure''' and '''deprecated''' <code>olm</code> library susceptible to various security vulnerabilities.[https://nvd.nist.gov/vuln/detail/CVE-2024-45191][https://nvd.nist.gov/vuln/detail/CVE-2024-45193][https://nvd.nist.gov/vuln/detail/CVE-2024-45192]

	If this isn't a problem for you, you can install them as usual, and upon evaluation, Nix will helpfully guide you on how to [https://nixos.org/manual/nixpkgs/stable/#sec-allow-insecure install insecure packages].		If this isn't a problem for you, you can install them as usual, and upon evaluation, Nix will helpfully guide you on how to [https://nixos.org/manual/nixpkgs/stable/#sec-allow-insecure install insecure packages].

Dander: reword element web; don't show a very insecure configuration by default; remove ad

2024-10-23T19:54:04Z

reword element web; don't show a very insecure configuration by default; remove ad

← Older revision		Revision as of 19:54, 23 October 2024
Line 19:		Line 19:
	If this isn't a problem for you, you can install them as usual, and upon evaluation, Nix will helpfully guide you on how to [https://nixos.org/manual/nixpkgs/stable/#sec-allow-insecure install insecure packages].		If this isn't a problem for you, you can install them as usual, and upon evaluation, Nix will helpfully guide you on how to [https://nixos.org/manual/nixpkgs/stable/#sec-allow-insecure install insecure packages].
	=== Web clients ===		=== Web clients ===
			There is a web version of the client [https://element.io/ Element], <code>element-web</code> on Nixpkgs, which you can use as a regular web application. See [https://nixos.org/nixos/manual/index.html#module-services-matrix-element-web the NixOS manual entry].<syntaxhighlight lang="nixos">
	~~==== element-web ====~~
	There is ~~also~~ a web version of [https://~~search.nixos~~.~~org~~/~~packages?query=~~element-web ~~Element]~~ which can ~~be served using~~ a web ~~server~~. See [https://nixos.org/nixos/manual/index.html#module-services-matrix-element-web the NixOS manual entry].<syntaxhighlight lang="nixos">
	{		{
	services.nginx.enable = true;		services.nginx.enable = true;
Line 70:		Line 68:
	settings.global = {		settings.global = {
	# allow_registration = true;		# allow_registration = true;
			# You will need this token when creating your first account.
			# registration_token = "A S3CR3T TOKEN";
	# server_name = yourDomainName;		# server_name = yourDomainName;
	# port = yourPort;		# port = yourPort;
	address = "::1";		address = "::1";
	database_backend = "rocksdb";		database_backend = "rocksdb";
	# See https://~~www~~.~~metered~~.ca/~~tools~~/~~openrelay~~
	turn_uris = [		# See https://docs.conduit.rs/turn.html, and https://github.com/element-hq/synapse/blob/develop/docs/turn-howto.md for more details
	"turn:~~staticauth~~.~~openrelay~~.~~metered.ca:80~~?transport=udp"		# turn_uris = [
	"turn:~~staticauth~~.~~openrelay~~.~~metered.ca:80~~?transport=tcp"		# "turn:your.turn.url?transport=udp"
	];		# "turn:your.turn.url?transport=tcp"
	turn_secret = "~~openrelayprojectsecret~~";		# ];
			# turn_secret = "your secret";
	};		};
	};		};