server_name: "{{ matrix_domain }}"
trusted_key_servers:
  - server_name: "{{ matrix_domain }}"

listeners:
  - port: {{ synapse_http_port }}
    bind_addresses: ['0.0.0.0']
    type: http
    tls: false
    x_forwarded: true
    resources:
      - names: [client, federation]
        compress: true

# -------------------------------------------------
# TURN (WebRTC) – injected from the variables above
# -------------------------------------------------
turn_uris:
  - "turn:{{ matrix_domain }}:{{ turn_listen_port }}?transport=udp"
  - "turn:{{ matrix_domain }}:{{ turn_tls_port }}?transport=tcp"
  - "turns:{{ matrix_domain }}:{{ turn_tls_port }}?transport=tcp"
turn_shared_secret: "{{ turn_secret }}"
turn_user_lifetime: "86400000"   # 1 day in ms (optional)

# -----------------------------------------------------------------
# NEW – Google OIDC provider
# -----------------------------------------------------------------
oidc_providers:
  - idp_id: google
    issuer: "https://accounts.google.com"
    client_id: "{{ google_oidc_client_id }}"
    client_secret: "{{ google_oidc_client_secret }}"
    scopes: {{ google_oidc_scopes | to_nice_yaml | indent(6) }}

# -----------------------------------------------------------------
# Database provider
#------------------------------------------------------------------
database:
  name: sqlite3
  args:
    database: /data/homeserver.db
log_config: "/data/my.matrix.host.log.config"
media_store_path: /data/media_store
registration_shared_secret: "{{ registration_shared_secret }}"
report_stats: true
macaroon_secret_key: "{{ macaroon_secret_key }}
form_secret: "{{ form_secret }}"
signing_key_path: "/data/my.matrix.host.signing.key"
trusted_key_servers:
  - server_name: "matrix.org"