From 080c0a0e6a99180c6fdb2408b3db2dc5b7762fcb Mon Sep 17 00:00:00 2001
From: boxswapper <nick@hackerhaus.io>
Date: Mon, 20 Jul 2026 15:26:37 -0600
Subject: [PATCH] correcting key and key location

---
 README.md                    |  9 +++++++++
 deploy_matrix.yml            | 12 ++++++------
 templates/homeserver.yaml.j2 |  2 +-
 vars/vars.yml                |  3 ++-
 4 files changed, 18 insertions(+), 8 deletions(-)

diff --git a/README.md b/README.md
index f013652..1cc14be 100644
--- a/README.md
+++ b/README.md
@@ -17,6 +17,15 @@ ansible-playbook deploy_matrix.yml -i inventory/hosts.yml
 ## Matrix Administration ##
 [synapse-admin on github](https://github.com/Awesome-Technologies/synapse-admin)
 
+- generate new certificate
+```
+podman run -it --rm \
+  -v ~/synapse-data:/data:Z \
+  -e SYNAPSE_SERVER_NAME=matrix.fpov.space \
+  -e SYNAPSE_REPORT_STATS=no \
+  matrixdotorg/synapse:latest generate
+```
+
 - Create User
 ```
 sudo podman exec -it synapse register_new_matrix_user -c /data/homeserver.yaml http://localhost:8008
diff --git a/deploy_matrix.yml b/deploy_matrix.yml
index 28aabd6..e374a63 100644
--- a/deploy_matrix.yml
+++ b/deploy_matrix.yml
@@ -103,11 +103,11 @@
         dest: "{{ nginx_html_path }}"        
         mode: "0644"
 
-    # - name: Render Synapse Secret key
-    #   ansible.builtin.template:
-    #     src: matrix.fpov.space.signing.key
-    #     dest: "{{ synapse_secret_key_path }}"
-    #     mode: "0644"
+    - name: Render Synapse Secret key
+      ansible.builtin.template:
+        src: matrix.fpov.space.signing.key
+        dest: "{{ synapse_secret_key_path }}"
+        mode: "0644"
 
     - name: Render Synapse log config file
       ansible.builtin.template:
@@ -190,7 +190,7 @@
           - "{{ vol_synapse }}:/data:Z"
           - "{{ vol_media }}:/data/media_store:Z"
           - "{{ synapse_cfg_path }}:/data/homeserver.yaml:Z"
-          - "{{ synapse_secret_key_path }}:/data/key/matrix.fpov.space.signing.key:Z"
+          - "{{ synapse_secret_key_path }}:/data/matrix.fpov.space.signing.key:Z"
           - "{{ synapse_log_config }}:/data/matrix.fpov.space.log.config:Z"
         network: "{{ podman_network }}"
         restart_policy: always
diff --git a/templates/homeserver.yaml.j2 b/templates/homeserver.yaml.j2
index 07d261b..ca72915 100644
--- a/templates/homeserver.yaml.j2
+++ b/templates/homeserver.yaml.j2
@@ -44,7 +44,7 @@ registration_shared_secret: "{{ registration_shared_secret }}"
 report_stats: false
 macaroon_secret_key: "{{ macaroon_secret_key }}"
 form_secret: "{{ form_secret }}"
-signing_key_path: "/data/key/matrix.fpov.space.signing.key"
+signing_key_path: "/data/matrix.fpov.space.signing.key"
 trusted_key_servers:
   - server_name: "{{ matrix_domain1 }}"
 
diff --git a/vars/vars.yml b/vars/vars.yml
index 3327014..6359fc1 100644
--- a/vars/vars.yml
+++ b/vars/vars.yml
@@ -79,6 +79,7 @@ vol_db: postgres_db
 vol_kc_db: kc_postgres
 keycloak_data: kc_data
 
+
 # --------------------------------------------------------------
 # Paths on the target host (temporary files)
 # --------------------------------------------------------------
@@ -87,7 +88,7 @@ dynamic_traefik_path: "/tmp/traefik_dynamic.yml"
 turn_conf_path:       "/tmp/turnserver.conf"
 synapse_cfg_path:     "/tmp/homeserver.yaml"
 nginx_html_path:      "/tmp/index.html"
-synapse_secret_key_path: "/tmp/matrix.fpov.space.signing.key"
+synapse_secret_key_path: "/opt/matrix.fpov.space.signing.key"
 synapse_log_config: "/tmp/matrix.fpov.space.log.config"
 element_config_path: "/tmp/config.json"