feat(modules/matrix-bridge): enable encryption

1 files changed, 19 insertions, 7 deletions

diff --git a/modules/services/matrix-bridge.nix b/modules/services/matrix-bridge.nix
index adf7143..8f32538 100644
--- a/modules/services/matrix-bridge.nix
+++ b/modules/services/matrix-bridge.nix
@@ -47,6 +47,12 @@ in
             target = "webp";
             convert_from_webm = true;
           };
+          encryption = {
+            allow = true;
+            default = true;
+            require = true;
+            allow_key_sharing = true;
+          };
           permissions = {
             "@sef:exotic.sh" = "admin";
             "exotic.sh" = "full";
@@ -90,6 +96,13 @@ in
             target = "webp";
             convert_from_webm = true;
           };
+          # FIXME: crashes immediately: `KeyError: 'delete_outdated_inbound'`
+          # encryption = {
+          #   allow = true;
+          #   default = true;
+          #   require = true;
+          #   allow_key_sharing = true;
+          # };
           permissions = {
             "@sef:exotic.sh" = "admin";
             "exotic.sh" = "full";
@@ -140,13 +153,12 @@ in
           allow_user_invite = true;
           disappearing_messages_in_groups = true;
           url_previews = true;
-          # TODO: https://github.com/matrix-org/dendrite/issues/2723
-          # encryption = {
-          #   allow = true;
-          #   default = true;
-          #   require = true;
-          #   allow_key_sharing = true;
-          # };
+          encryption = {
+            allow = true;
+            default = true;
+            require = true;
+            allow_key_sharing = true;
+          };
           sync_manual_marked_unread = true;
           force_active_delivery_receipts = true;
           parallel_member_sync = true;