From c3a9e56437eabd5ac94efc6335d7c19afa11e80e Mon Sep 17 00:00:00 2001
From: julian <julian@jsts.xyz>
Date: Sat, 7 Oct 2023 05:38:47 +0200
Subject: [PATCH] Fix synapse systemd service by allowing access to the media
 store

---
 config/hosts/matrix/matrix-synapse.nix | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/config/hosts/matrix/matrix-synapse.nix b/config/hosts/matrix/matrix-synapse.nix
index e409805..e574a59 100644
--- a/config/hosts/matrix/matrix-synapse.nix
+++ b/config/hosts/matrix/matrix-synapse.nix
@@ -1,4 +1,4 @@
-{ ... }:
+{ config, ... }:
 
 {
   services.matrix-synapse = {
@@ -48,6 +48,8 @@
     ];
   };
 
+  systemd.services.matrix-synapse.serviceConfig.ReadWritePaths = [ config.services.matrix-synapse.settings.media_store_path ];
+
   deployment.keys = {
     "matrix-registration-shared-secret.secret" = {
       keyCommand = [ "pass" "noc/vm-secrets/chaosknoten/matrix/registration-shared-secret" ];