Fix matrix synapse instance on quasar

hosts/quasar/default.nix

@@ -25,7 +25,11 @@
   environment.systemPackages = [ pkgs.htop ];
 
   age.secrets = {
-    matrix-synapse-secrets.file = ./secrets/matrix-synapse-secrets.age;
+    matrix-synapse-secrets = {
+      file = ./secrets/matrix-synapse-secrets.yaml;
+      mode = "400";
+      owner = "matrix-synapse";
+    };
   };
 
   services.postgresql.enable = true;
@@ -33,7 +37,23 @@
   services.caddy = {
     enable = true;
     virtualHosts = {
+      "quasar.leaf.ninja".extraConfig = ''
+        respond "quasar is online"
+        header Strict-Transport-Security: "max-age=63072000; includeSubDomains"
+      '';
       "consortium.chat".extraConfig = ''
+        respond /.well-known/matrix/server <<JSON
+          {
+            "m.server": "matrix.consortium.chat:443"
+          }
+          JSON 200
+        respond /.well-known/matrix/client <<JSON
+          {
+            "m.homeserver": {
+              "base_url": "https://matrix.consortium.chat"
+            }
+          }
+          JSON 200
         reverse_proxy localhost:8008
         header Strict-Transport-Security "max-age=63072000; includeSubDomains"
       '';
@@ -52,7 +72,8 @@
     enable = true;
     settings = {
       server_name = "consortium.chat";
-      serve_server_wellknown = true;
+      database_type = "psycopg2";
+      database_args.database = "matrix-synapse";
     };
     extraConfigFiles = [ config.age.secrets.matrix-synapse-secrets.path ];
   };

secrets.nix

@@ -8,7 +8,7 @@ let
 in {
   "hosts/marauder/secrets/restic-env.age".publicKeys = [ marauder ];
   "hosts/marauder/secrets/restic-password.age".publicKeys = [ marauder ];
-  "hosts/quasar/secrets/matrix-synapse-secrets.age".publicKeys =
+  "hosts/quasar/secrets/matrix-synapse-secrets.yaml".publicKeys =
     [ marauder quasar ];
   "hosts/astral/secrets/vaultwarden-env.age".publicKeys = [ marauder astral ];
   "hosts/astral/secrets/forgejo-mailer-password.age".publicKeys =