port synapse to postgres

hosts/architect/matrix.nix

@@ -6,11 +6,11 @@ with import ./network.nix;
     matrix-synapse = {
       enable = true;
       server_name = "${matrixdomain}";
-      database_type = "sqlite3";
+      database_name = "synapse";
       public_baseurl = "https://${matrixdomain}";
       registration_shared_secret = "runas!";
       dynamic_thumbnails = true;
-      enable_registration = true;
+      #enable_registration = true;
       app_service_config_files = [ 
         "/var/lib/matrix-synapse/discord-registration.yaml" 
         "/var/lib/matrix-synapse/telegram-registration.yaml" 
@@ -39,6 +39,19 @@ with import ./network.nix;
       ];
     };
 
+    postgresql = {
+      enable = true;
+      ensureDatabases = [ "synapse" ];
+      ensureUsers = [
+        {
+          name = "matrix-synapse";
+          ensurePermissions = {
+            "DATABASE synapse" = "ALL PRIVILEGES";
+          };
+        }
+      ];
+    };
+
     nginx.virtualHosts = {
       # server
       ${matrixdomain} = {
@@ -150,18 +163,18 @@ with import ./network.nix;
     };
   };
 
-  };
+};
 
-  systemd.services.mautrix-telegram.path = with pkgs; [
+systemd.services.mautrix-telegram.path = with pkgs; [
   lottieconverter  # for animated stickers conversion, unfree package
   ffmpeg           # if converting animated stickers to webm (very slow!)
-  ];
+];
 
-  networking.extraHosts = ''
+networking.extraHosts = ''
         127.0.0.1 ${matrixdomain} ${matrixwebdomain}
         ${architect-lan} ${matrixdomain} ${matrixwebdomain}
         ${architect-wg} ${matrixdomain} ${matrixwebdomain}
-  '';
+'';
 
-  users.groups.acme.members = [ "turnserver" ];
+users.groups.acme.members = [ "turnserver" ];
 }